From babdc7212137b4aaeab27e265737edc18a7dc32d Mon Sep 17 00:00:00 2001
From: OVN Website CI <ovn-org@website-ci>
Date: Fri, 9 Feb 2024 02:43:54 +0000
Subject: [PATCH] Updated website from ovn-org/ovn-website 0e81a8f

---
 en/404.html                                   |   16 +-
 en/architecture/index.html                    |   50 +-
 en/categories/index.html                      |   50 +-
 en/contributing/code-of-conduct/index.html    |   50 +-
 en/contributing/index.html                    |   50 +-
 en/contributing/website/index.html            |   50 +-
 en/index.html                                 |   50 +-
 en/releases/20.03/index.html                  |   50 +-
 en/releases/20.06/index.html                  |   50 +-
 en/releases/20.09/index.html                  |   50 +-
 en/releases/20.12/index.html                  |   50 +-
 en/releases/21.03/index.html                  |   50 +-
 en/releases/21.06/index.html                  |   50 +-
 en/releases/21.09/index.html                  |   50 +-
 en/releases/21.12/index.html                  |   50 +-
 en/releases/22.03/index.html                  |   50 +-
 en/releases/22.06/index.html                  |   50 +-
 en/releases/22.09/index.html                  |   50 +-
 en/releases/22.12/index.html                  |   50 +-
 en/releases/23.03/index.html                  |   50 +-
 en/releases/23.06/index.html                  |   50 +-
 en/releases/23.09/index.html                  |   50 +-
 en/releases/all_releases/index.html           |   50 +-
 en/releases/changelog_v20.03.0/index.html     |   50 +-
 en/releases/changelog_v20.03.1/index.html     |   50 +-
 en/releases/changelog_v20.03.2/index.html     |   50 +-
 en/releases/changelog_v20.06.0/index.html     |   50 +-
 en/releases/changelog_v20.06.1/index.html     |   50 +-
 en/releases/changelog_v20.06.2/index.html     |   50 +-
 en/releases/changelog_v20.06.3/index.html     |   50 +-
 en/releases/changelog_v20.09.0/index.html     |   50 +-
 en/releases/changelog_v20.12.0/index.html     |   50 +-
 en/releases/changelog_v21.03.0/index.html     |   50 +-
 en/releases/changelog_v21.06.0/index.html     |   50 +-
 en/releases/changelog_v21.09.0/index.html     |   50 +-
 en/releases/changelog_v21.09.1/index.html     |   50 +-
 en/releases/changelog_v21.12.0/index.html     |   50 +-
 en/releases/changelog_v21.12.1/index.html     |   50 +-
 en/releases/changelog_v21.12.2/index.html     |   50 +-
 en/releases/changelog_v22.03.0/index.html     |   50 +-
 en/releases/changelog_v22.03.1/index.html     |   50 +-
 en/releases/changelog_v22.03.2/index.html     |   50 +-
 en/releases/changelog_v22.03.3/index.html     |   50 +-
 en/releases/changelog_v22.06.0/index.html     |   50 +-
 en/releases/changelog_v22.06.1/index.html     |   50 +-
 en/releases/changelog_v22.09.0/index.html     |   50 +-
 en/releases/changelog_v22.09.1/index.html     |   50 +-
 en/releases/changelog_v22.09.2/index.html     |   50 +-
 en/releases/changelog_v22.12.0/index.html     |   50 +-
 en/releases/changelog_v22.12.1/index.html     |   50 +-
 en/releases/changelog_v23.03.0/index.html     |   50 +-
 en/releases/changelog_v23.03.1/index.html     |   50 +-
 en/releases/changelog_v23.06.0/index.html     |   50 +-
 en/releases/changelog_v23.06.1/index.html     |   50 +-
 en/releases/changelog_v23.09.0/index.html     |   50 +-
 en/releases/index.html                        |   50 +-
 en/tags/index.html                            |   50 +-
 es/404.html                                   |   16 +-
 es/categories/index.html                      |   50 +-
 es/index.html                                 |   50 +-
 es/tags/index.html                            |   50 +-
 support/dist-docs-branch-23.06/index.html     |   26 +
 support/dist-docs-branch-23.06/ovn-appctl.8   |  186 +
 .../dist-docs-branch-23.06/ovn-appctl.8.html  |  224 +
 .../dist-docs-branch-23.06/ovn-appctl.8.pdf   |  Bin 0 -> 29566 bytes
 .../dist-docs-branch-23.06/ovn-appctl.8.txt   |  222 +
 .../dist-docs-branch-23.06/ovn-architecture.7 | 1207 +++++
 .../ovn-architecture.7.html                   | 2173 +++++++++
 .../ovn-architecture.7.pdf                    |  Bin 0 -> 135979 bytes
 .../ovn-architecture.7.txt                    | 2171 +++++++++
 .../ovn-controller-vtep.8                     |  110 +
 .../ovn-controller-vtep.8.html                |  142 +
 .../ovn-controller-vtep.8.pdf                 |  Bin 0 -> 25699 bytes
 .../ovn-controller-vtep.8.txt                 |  140 +
 .../dist-docs-branch-23.06/ovn-controller.8   |  439 ++
 .../ovn-controller.8.html                     |  784 ++++
 .../ovn-controller.8.pdf                      |  Bin 0 -> 59375 bytes
 .../ovn-controller.8.txt                      |  782 ++++
 support/dist-docs-branch-23.06/ovn-ctl.8      |  426 ++
 support/dist-docs-branch-23.06/ovn-ctl.8.html |  349 ++
 support/dist-docs-branch-23.06/ovn-ctl.8.pdf  |  Bin 0 -> 31888 bytes
 support/dist-docs-branch-23.06/ovn-ctl.8.txt  |  347 ++
 support/dist-docs-branch-23.06/ovn-detrace.1  |  273 ++
 .../dist-docs-branch-23.06/ovn-detrace.1.html |   81 +
 .../dist-docs-branch-23.06/ovn-detrace.1.pdf  |  Bin 0 -> 21824 bytes
 .../dist-docs-branch-23.06/ovn-detrace.1.txt  |   79 +
 support/dist-docs-branch-23.06/ovn-ic-nb.5    |  397 ++
 .../dist-docs-branch-23.06/ovn-ic-nb.5.html   |  374 ++
 .../dist-docs-branch-23.06/ovn-ic-nb.5.pdf    |  Bin 0 -> 38662 bytes
 .../dist-docs-branch-23.06/ovn-ic-nb.5.txt    |  372 ++
 support/dist-docs-branch-23.06/ovn-ic-nbctl.8 |  424 ++
 .../ovn-ic-nbctl.8.html                       |  639 +++
 .../dist-docs-branch-23.06/ovn-ic-nbctl.8.pdf |  Bin 0 -> 53535 bytes
 .../dist-docs-branch-23.06/ovn-ic-nbctl.8.txt |  637 +++
 support/dist-docs-branch-23.06/ovn-ic-sb.5    |  656 +++
 .../dist-docs-branch-23.06/ovn-ic-sb.5.html   |  600 +++
 .../dist-docs-branch-23.06/ovn-ic-sb.5.pdf    |  Bin 0 -> 52130 bytes
 .../dist-docs-branch-23.06/ovn-ic-sb.5.txt    |  598 +++
 support/dist-docs-branch-23.06/ovn-ic-sbctl.8 |  412 ++
 .../ovn-ic-sbctl.8.html                       |  627 +++
 .../dist-docs-branch-23.06/ovn-ic-sbctl.8.pdf |  Bin 0 -> 53219 bytes
 .../dist-docs-branch-23.06/ovn-ic-sbctl.8.txt |  625 +++
 support/dist-docs-branch-23.06/ovn-ic.8       |  211 +
 support/dist-docs-branch-23.06/ovn-ic.8.html  |  310 ++
 support/dist-docs-branch-23.06/ovn-ic.8.pdf   |  Bin 0 -> 38755 bytes
 support/dist-docs-branch-23.06/ovn-ic.8.txt   |  308 ++
 support/dist-docs-branch-23.06/ovn-nb.5       | 3665 +++++++++++++++
 support/dist-docs-branch-23.06/ovn-nb.5.html  | 4100 +++++++++++++++++
 support/dist-docs-branch-23.06/ovn-nb.5.pdf   |  Bin 0 -> 211737 bytes
 support/dist-docs-branch-23.06/ovn-nb.5.txt   | 4098 ++++++++++++++++
 support/dist-docs-branch-23.06/ovn-nbctl.8    | 1075 +++++
 .../dist-docs-branch-23.06/ovn-nbctl.8.html   | 1718 +++++++
 .../dist-docs-branch-23.06/ovn-nbctl.8.pdf    |  Bin 0 -> 111075 bytes
 .../dist-docs-branch-23.06/ovn-nbctl.8.txt    | 1716 +++++++
 support/dist-docs-branch-23.06/ovn-northd.8   | 2808 +++++++++++
 .../dist-docs-branch-23.06/ovn-northd.8.html  | 3725 +++++++++++++++
 .../dist-docs-branch-23.06/ovn-northd.8.pdf   |  Bin 0 -> 196655 bytes
 .../dist-docs-branch-23.06/ovn-northd.8.txt   | 3723 +++++++++++++++
 support/dist-docs-branch-23.06/ovn-sb.5       | 3514 ++++++++++++++
 support/dist-docs-branch-23.06/ovn-sb.5.html  | 3974 ++++++++++++++++
 support/dist-docs-branch-23.06/ovn-sb.5.pdf   |  Bin 0 -> 209409 bytes
 support/dist-docs-branch-23.06/ovn-sb.5.txt   | 3972 ++++++++++++++++
 support/dist-docs-branch-23.06/ovn-sbctl.8    |  658 +++
 .../dist-docs-branch-23.06/ovn-sbctl.8.html   |  979 ++++
 .../dist-docs-branch-23.06/ovn-sbctl.8.pdf    |  Bin 0 -> 74265 bytes
 .../dist-docs-branch-23.06/ovn-sbctl.8.txt    |  977 ++++
 support/dist-docs-branch-23.06/ovn-trace.8    |  418 ++
 .../dist-docs-branch-23.06/ovn-trace.8.html   |  572 +++
 .../dist-docs-branch-23.06/ovn-trace.8.pdf    |  Bin 0 -> 56115 bytes
 .../dist-docs-branch-23.06/ovn-trace.8.txt    |  570 +++
 support/dist-docs-branch-23.06/style.css      |   25 +
 131 files changed, 61129 insertions(+), 1491 deletions(-)
 create mode 100644 support/dist-docs-branch-23.06/index.html
 create mode 100644 support/dist-docs-branch-23.06/ovn-appctl.8
 create mode 100644 support/dist-docs-branch-23.06/ovn-appctl.8.html
 create mode 100644 support/dist-docs-branch-23.06/ovn-appctl.8.pdf
 create mode 100644 support/dist-docs-branch-23.06/ovn-appctl.8.txt
 create mode 100644 support/dist-docs-branch-23.06/ovn-architecture.7
 create mode 100644 support/dist-docs-branch-23.06/ovn-architecture.7.html
 create mode 100644 support/dist-docs-branch-23.06/ovn-architecture.7.pdf
 create mode 100644 support/dist-docs-branch-23.06/ovn-architecture.7.txt
 create mode 100644 support/dist-docs-branch-23.06/ovn-controller-vtep.8
 create mode 100644 support/dist-docs-branch-23.06/ovn-controller-vtep.8.html
 create mode 100644 support/dist-docs-branch-23.06/ovn-controller-vtep.8.pdf
 create mode 100644 support/dist-docs-branch-23.06/ovn-controller-vtep.8.txt
 create mode 100644 support/dist-docs-branch-23.06/ovn-controller.8
 create mode 100644 support/dist-docs-branch-23.06/ovn-controller.8.html
 create mode 100644 support/dist-docs-branch-23.06/ovn-controller.8.pdf
 create mode 100644 support/dist-docs-branch-23.06/ovn-controller.8.txt
 create mode 100644 support/dist-docs-branch-23.06/ovn-ctl.8
 create mode 100644 support/dist-docs-branch-23.06/ovn-ctl.8.html
 create mode 100644 support/dist-docs-branch-23.06/ovn-ctl.8.pdf
 create mode 100644 support/dist-docs-branch-23.06/ovn-ctl.8.txt
 create mode 100644 support/dist-docs-branch-23.06/ovn-detrace.1
 create mode 100644 support/dist-docs-branch-23.06/ovn-detrace.1.html
 create mode 100644 support/dist-docs-branch-23.06/ovn-detrace.1.pdf
 create mode 100644 support/dist-docs-branch-23.06/ovn-detrace.1.txt
 create mode 100644 support/dist-docs-branch-23.06/ovn-ic-nb.5
 create mode 100644 support/dist-docs-branch-23.06/ovn-ic-nb.5.html
 create mode 100644 support/dist-docs-branch-23.06/ovn-ic-nb.5.pdf
 create mode 100644 support/dist-docs-branch-23.06/ovn-ic-nb.5.txt
 create mode 100644 support/dist-docs-branch-23.06/ovn-ic-nbctl.8
 create mode 100644 support/dist-docs-branch-23.06/ovn-ic-nbctl.8.html
 create mode 100644 support/dist-docs-branch-23.06/ovn-ic-nbctl.8.pdf
 create mode 100644 support/dist-docs-branch-23.06/ovn-ic-nbctl.8.txt
 create mode 100644 support/dist-docs-branch-23.06/ovn-ic-sb.5
 create mode 100644 support/dist-docs-branch-23.06/ovn-ic-sb.5.html
 create mode 100644 support/dist-docs-branch-23.06/ovn-ic-sb.5.pdf
 create mode 100644 support/dist-docs-branch-23.06/ovn-ic-sb.5.txt
 create mode 100644 support/dist-docs-branch-23.06/ovn-ic-sbctl.8
 create mode 100644 support/dist-docs-branch-23.06/ovn-ic-sbctl.8.html
 create mode 100644 support/dist-docs-branch-23.06/ovn-ic-sbctl.8.pdf
 create mode 100644 support/dist-docs-branch-23.06/ovn-ic-sbctl.8.txt
 create mode 100644 support/dist-docs-branch-23.06/ovn-ic.8
 create mode 100644 support/dist-docs-branch-23.06/ovn-ic.8.html
 create mode 100644 support/dist-docs-branch-23.06/ovn-ic.8.pdf
 create mode 100644 support/dist-docs-branch-23.06/ovn-ic.8.txt
 create mode 100644 support/dist-docs-branch-23.06/ovn-nb.5
 create mode 100644 support/dist-docs-branch-23.06/ovn-nb.5.html
 create mode 100644 support/dist-docs-branch-23.06/ovn-nb.5.pdf
 create mode 100644 support/dist-docs-branch-23.06/ovn-nb.5.txt
 create mode 100644 support/dist-docs-branch-23.06/ovn-nbctl.8
 create mode 100644 support/dist-docs-branch-23.06/ovn-nbctl.8.html
 create mode 100644 support/dist-docs-branch-23.06/ovn-nbctl.8.pdf
 create mode 100644 support/dist-docs-branch-23.06/ovn-nbctl.8.txt
 create mode 100644 support/dist-docs-branch-23.06/ovn-northd.8
 create mode 100644 support/dist-docs-branch-23.06/ovn-northd.8.html
 create mode 100644 support/dist-docs-branch-23.06/ovn-northd.8.pdf
 create mode 100644 support/dist-docs-branch-23.06/ovn-northd.8.txt
 create mode 100644 support/dist-docs-branch-23.06/ovn-sb.5
 create mode 100644 support/dist-docs-branch-23.06/ovn-sb.5.html
 create mode 100644 support/dist-docs-branch-23.06/ovn-sb.5.pdf
 create mode 100644 support/dist-docs-branch-23.06/ovn-sb.5.txt
 create mode 100644 support/dist-docs-branch-23.06/ovn-sbctl.8
 create mode 100644 support/dist-docs-branch-23.06/ovn-sbctl.8.html
 create mode 100644 support/dist-docs-branch-23.06/ovn-sbctl.8.pdf
 create mode 100644 support/dist-docs-branch-23.06/ovn-sbctl.8.txt
 create mode 100644 support/dist-docs-branch-23.06/ovn-trace.8
 create mode 100644 support/dist-docs-branch-23.06/ovn-trace.8.html
 create mode 100644 support/dist-docs-branch-23.06/ovn-trace.8.pdf
 create mode 100644 support/dist-docs-branch-23.06/ovn-trace.8.txt
 create mode 100644 support/dist-docs-branch-23.06/style.css

diff --git a/en/404.html b/en/404.html
index a3059cc6..cfd2db40 100644
--- a/en/404.html
+++ b/en/404.html
@@ -9,15 +9,15 @@
   <title>404 Page not found</title>
 
    
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 <style>
     :root #header + #content > #left > #rlblock_left {
diff --git a/en/architecture/index.html b/en/architecture/index.html
index 6f7b94e0..5f362dc7 100644
--- a/en/architecture/index.html
+++ b/en/architecture/index.html
@@ -12,20 +12,20 @@
     <title>Architecture :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -834,19 +834,19 @@ <h3 id="learn-more-about-ovn">Learn more about OVN</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/categories/index.html b/en/categories/index.html
index 6bd69089..a4be78f6 100644
--- a/en/categories/index.html
+++ b/en/categories/index.html
@@ -12,20 +12,20 @@
     <title>Categories :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -751,19 +751,19 @@ <h1>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/contributing/code-of-conduct/index.html b/en/contributing/code-of-conduct/index.html
index c2f8bc40..0ce16acb 100644
--- a/en/contributing/code-of-conduct/index.html
+++ b/en/contributing/code-of-conduct/index.html
@@ -12,20 +12,20 @@
     <title>Code of Conduct :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -759,19 +759,19 @@ <h1>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/contributing/index.html b/en/contributing/index.html
index f9f69c5d..2028773f 100644
--- a/en/contributing/index.html
+++ b/en/contributing/index.html
@@ -12,20 +12,20 @@
     <title>Contributing :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -763,19 +763,19 @@ <h1>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/contributing/website/index.html b/en/contributing/website/index.html
index efa08374..d005c989 100644
--- a/en/contributing/website/index.html
+++ b/en/contributing/website/index.html
@@ -12,20 +12,20 @@
     <title>Contributing to the OVN website :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -788,19 +788,19 @@ <h1>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/index.html b/en/index.html
index 4d2a5465..a321a9ef 100644
--- a/en/index.html
+++ b/en/index.html
@@ -12,20 +12,20 @@
     <title>OVN, Open Virtual Network :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -731,19 +731,19 @@ <h4 id="irc-meetings">IRC meetings</h4>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/20.03/index.html b/en/releases/20.03/index.html
index 26960f6f..bd11cbf3 100644
--- a/en/releases/20.03/index.html
+++ b/en/releases/20.03/index.html
@@ -12,20 +12,20 @@
     <title>20.03 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -801,19 +801,19 @@ <h3 id="v20030">v20.03.0</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/20.06/index.html b/en/releases/20.06/index.html
index 4ea7091c..b0323d13 100644
--- a/en/releases/20.06/index.html
+++ b/en/releases/20.06/index.html
@@ -12,20 +12,20 @@
     <title>20.06 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -828,19 +828,19 @@ <h3 id="v20060">v20.06.0</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/20.09/index.html b/en/releases/20.09/index.html
index b875c18a..5f4bd554 100644
--- a/en/releases/20.09/index.html
+++ b/en/releases/20.09/index.html
@@ -12,20 +12,20 @@
     <title>20.09 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -786,19 +786,19 @@ <h3 id="v20090">v20.09.0</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/20.12/index.html b/en/releases/20.12/index.html
index a38295ae..2e678b09 100644
--- a/en/releases/20.12/index.html
+++ b/en/releases/20.12/index.html
@@ -12,20 +12,20 @@
     <title>20.12 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -792,19 +792,19 @@ <h3 id="v20120">v20.12.0</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/21.03/index.html b/en/releases/21.03/index.html
index 64326dc6..87e57697 100644
--- a/en/releases/21.03/index.html
+++ b/en/releases/21.03/index.html
@@ -12,20 +12,20 @@
     <title>21.03 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -793,19 +793,19 @@ <h3 id="v21030">v21.03.0</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/21.06/index.html b/en/releases/21.06/index.html
index 5820f58a..c1dfbe63 100644
--- a/en/releases/21.06/index.html
+++ b/en/releases/21.06/index.html
@@ -12,20 +12,20 @@
     <title>21.06 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -797,19 +797,19 @@ <h3 id="v21060">v21.06.0</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/21.09/index.html b/en/releases/21.09/index.html
index 43f61709..dce71bcc 100644
--- a/en/releases/21.09/index.html
+++ b/en/releases/21.09/index.html
@@ -12,20 +12,20 @@
     <title>21.09 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -792,19 +792,19 @@ <h3 id="v21090">v21.09.0</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/21.12/index.html b/en/releases/21.12/index.html
index b8097ee2..d1ca9e35 100644
--- a/en/releases/21.12/index.html
+++ b/en/releases/21.12/index.html
@@ -12,20 +12,20 @@
     <title>21.12 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -812,19 +812,19 @@ <h3 id="v21120">v21.12.0</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/22.03/index.html b/en/releases/22.03/index.html
index 3717c548..0162cded 100644
--- a/en/releases/22.03/index.html
+++ b/en/releases/22.03/index.html
@@ -12,20 +12,20 @@
     <title>22.03 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -851,19 +851,19 @@ <h3 id="v22030">v22.03.0</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/22.06/index.html b/en/releases/22.06/index.html
index 5140b3f9..3415eee1 100644
--- a/en/releases/22.06/index.html
+++ b/en/releases/22.06/index.html
@@ -12,20 +12,20 @@
     <title>22.06 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -812,19 +812,19 @@ <h3 id="v22060">v22.06.0</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/22.09/index.html b/en/releases/22.09/index.html
index 65f6ec8c..3f63c256 100644
--- a/en/releases/22.09/index.html
+++ b/en/releases/22.09/index.html
@@ -12,20 +12,20 @@
     <title>22.09 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -830,19 +830,19 @@ <h3 id="v22090">v22.09.0</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/22.12/index.html b/en/releases/22.12/index.html
index 674e5bd6..645252e2 100644
--- a/en/releases/22.12/index.html
+++ b/en/releases/22.12/index.html
@@ -12,20 +12,20 @@
     <title>22.12 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -816,19 +816,19 @@ <h3 id="v22120">v22.12.0</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/23.03/index.html b/en/releases/23.03/index.html
index 1b0701b6..3c7a3f49 100644
--- a/en/releases/23.03/index.html
+++ b/en/releases/23.03/index.html
@@ -12,20 +12,20 @@
     <title>23.03 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -816,19 +816,19 @@ <h3 id="v23030">v23.03.0</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/23.06/index.html b/en/releases/23.06/index.html
index d3ee7bbe..06020402 100644
--- a/en/releases/23.06/index.html
+++ b/en/releases/23.06/index.html
@@ -12,20 +12,20 @@
     <title>23.06 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -840,19 +840,19 @@ <h3 id="v23060">v23.06.0</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/23.09/index.html b/en/releases/23.09/index.html
index df52bdf7..15fdb91e 100644
--- a/en/releases/23.09/index.html
+++ b/en/releases/23.09/index.html
@@ -12,20 +12,20 @@
     <title>23.09 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -804,19 +804,19 @@ <h3 id="v23090">v23.09.0</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/all_releases/index.html b/en/releases/all_releases/index.html
index a6bca926..86d525bb 100644
--- a/en/releases/all_releases/index.html
+++ b/en/releases/all_releases/index.html
@@ -12,20 +12,20 @@
     <title>All Releases :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -821,19 +821,19 @@ <h3 id="ovn-2003">OVN 20.03</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/changelog_v20.03.0/index.html b/en/releases/changelog_v20.03.0/index.html
index a1333370..91328ad1 100644
--- a/en/releases/changelog_v20.03.0/index.html
+++ b/en/releases/changelog_v20.03.0/index.html
@@ -12,20 +12,20 @@
     <title>Changelog v20.03.0 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -2295,19 +2295,19 @@ <h3 id="changes-from-2120-to-v20030">Changes from 2.12.0 to v20.03.0</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/changelog_v20.03.1/index.html b/en/releases/changelog_v20.03.1/index.html
index 4db87d7d..6fd6db37 100644
--- a/en/releases/changelog_v20.03.1/index.html
+++ b/en/releases/changelog_v20.03.1/index.html
@@ -12,20 +12,20 @@
     <title>Changelog v20.03.1 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -802,19 +802,19 @@ <h3 id="changes-from-v20030-to-v20031">Changes from v20.03.0 to v20.03.1</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/changelog_v20.03.2/index.html b/en/releases/changelog_v20.03.2/index.html
index 69d12a85..a94e68e1 100644
--- a/en/releases/changelog_v20.03.2/index.html
+++ b/en/releases/changelog_v20.03.2/index.html
@@ -12,20 +12,20 @@
     <title>Changelog v20.03.2 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -835,19 +835,19 @@ <h3 id="changes-from-v20031-to-v20032">Changes from v20.03.1 to v20.03.2</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/changelog_v20.06.0/index.html b/en/releases/changelog_v20.06.0/index.html
index 97eca3ed..753d1040 100644
--- a/en/releases/changelog_v20.06.0/index.html
+++ b/en/releases/changelog_v20.06.0/index.html
@@ -12,20 +12,20 @@
     <title>Changelog v20.06.0 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -920,19 +920,19 @@ <h3 id="changes-from-20030-to-v20060">Changes from 20.03.0 to v20.06.0</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/changelog_v20.06.1/index.html b/en/releases/changelog_v20.06.1/index.html
index 12281c5e..d96f441b 100644
--- a/en/releases/changelog_v20.06.1/index.html
+++ b/en/releases/changelog_v20.06.1/index.html
@@ -12,20 +12,20 @@
     <title>Changelog v20.06.1 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -792,19 +792,19 @@ <h3 id="changes-from-v20060-to-v20061">Changes from v20.06.0 to v20.06.1</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/changelog_v20.06.2/index.html b/en/releases/changelog_v20.06.2/index.html
index 986f9622..4a817a77 100644
--- a/en/releases/changelog_v20.06.2/index.html
+++ b/en/releases/changelog_v20.06.2/index.html
@@ -12,20 +12,20 @@
     <title>Changelog v20.06.2 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -793,19 +793,19 @@ <h3 id="changes-from-v20061-to-v20062">Changes from v20.06.1 to v20.06.2</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/changelog_v20.06.3/index.html b/en/releases/changelog_v20.06.3/index.html
index 9e103c94..c4a4008a 100644
--- a/en/releases/changelog_v20.06.3/index.html
+++ b/en/releases/changelog_v20.06.3/index.html
@@ -12,20 +12,20 @@
     <title>Changelog v20.06.3 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -851,19 +851,19 @@ <h3 id="changes-from-v20062-to-v20063">Changes from v20.06.2 to v20.06.3</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/changelog_v20.09.0/index.html b/en/releases/changelog_v20.09.0/index.html
index f63b6067..94c8f0d1 100644
--- a/en/releases/changelog_v20.09.0/index.html
+++ b/en/releases/changelog_v20.09.0/index.html
@@ -12,20 +12,20 @@
     <title>Changelog v20.09.0 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -930,19 +930,19 @@ <h3 id="changes-from-20060-to-v20090">Changes from 20.06.0 to v20.09.0</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/changelog_v20.12.0/index.html b/en/releases/changelog_v20.12.0/index.html
index 9be7210e..8105d8e8 100644
--- a/en/releases/changelog_v20.12.0/index.html
+++ b/en/releases/changelog_v20.12.0/index.html
@@ -12,20 +12,20 @@
     <title>Changelog v20.12.0 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -952,19 +952,19 @@ <h3 id="changes-from-20090-to-v20120">Changes from 20.09.0 to v20.12.0</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/changelog_v21.03.0/index.html b/en/releases/changelog_v21.03.0/index.html
index 2546cf48..120b3d2e 100644
--- a/en/releases/changelog_v21.03.0/index.html
+++ b/en/releases/changelog_v21.03.0/index.html
@@ -12,20 +12,20 @@
     <title>Changelog v21.03.0 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -896,19 +896,19 @@ <h3 id="changes-from-20120-to-v21030">Changes from 20.12.0 to v21.03.0</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/changelog_v21.06.0/index.html b/en/releases/changelog_v21.06.0/index.html
index dcf82f36..3c99472b 100644
--- a/en/releases/changelog_v21.06.0/index.html
+++ b/en/releases/changelog_v21.06.0/index.html
@@ -12,20 +12,20 @@
     <title>Changelog v21.06.0 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -956,19 +956,19 @@ <h3 id="changes-from-21030-to-v21060">Changes from 21.03.0 to v21.06.0</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/changelog_v21.09.0/index.html b/en/releases/changelog_v21.09.0/index.html
index 8478cdc9..77c1c64f 100644
--- a/en/releases/changelog_v21.09.0/index.html
+++ b/en/releases/changelog_v21.09.0/index.html
@@ -12,20 +12,20 @@
     <title>Changelog v21.09.0 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -1002,19 +1002,19 @@ <h3 id="changes-from-21060-to-v21090">Changes from 21.06.0 to v21.09.0</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/changelog_v21.09.1/index.html b/en/releases/changelog_v21.09.1/index.html
index f792c473..2b5a123a 100644
--- a/en/releases/changelog_v21.09.1/index.html
+++ b/en/releases/changelog_v21.09.1/index.html
@@ -12,20 +12,20 @@
     <title>Changelog v21.09.1 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -792,19 +792,19 @@ <h3 id="changes-from-v21090-to-v21091">Changes from v21.09.0 to v21.09.1</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/changelog_v21.12.0/index.html b/en/releases/changelog_v21.12.0/index.html
index 8c17e80e..f10b1dcc 100644
--- a/en/releases/changelog_v21.12.0/index.html
+++ b/en/releases/changelog_v21.12.0/index.html
@@ -12,20 +12,20 @@
     <title>Changelog v21.12.0 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -900,19 +900,19 @@ <h3 id="changes-from-21090-to-v21120">Changes from 21.09.0 to v21.12.0</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/changelog_v21.12.1/index.html b/en/releases/changelog_v21.12.1/index.html
index 9318239c..64c2666d 100644
--- a/en/releases/changelog_v21.12.1/index.html
+++ b/en/releases/changelog_v21.12.1/index.html
@@ -12,20 +12,20 @@
     <title>Changelog v21.12.1 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -796,19 +796,19 @@ <h3 id="changes-from-v21120-to-v21121">Changes from v21.12.0 to v21.12.1</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/changelog_v21.12.2/index.html b/en/releases/changelog_v21.12.2/index.html
index bc57f7d1..d265f5c0 100644
--- a/en/releases/changelog_v21.12.2/index.html
+++ b/en/releases/changelog_v21.12.2/index.html
@@ -12,20 +12,20 @@
     <title>Changelog v21.12.2 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -803,19 +803,19 @@ <h3 id="changes-from-v21121-to-v21122">Changes from v21.12.1 to v21.12.2</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/changelog_v22.03.0/index.html b/en/releases/changelog_v22.03.0/index.html
index 9ee182e5..bcb51423 100644
--- a/en/releases/changelog_v22.03.0/index.html
+++ b/en/releases/changelog_v22.03.0/index.html
@@ -12,20 +12,20 @@
     <title>Changelog v22.03.0 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -841,19 +841,19 @@ <h3 id="changes-from-21120-to-v22030">Changes from 21.12.0 to v22.03.0</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/changelog_v22.03.1/index.html b/en/releases/changelog_v22.03.1/index.html
index 27078d42..2af1d9ef 100644
--- a/en/releases/changelog_v22.03.1/index.html
+++ b/en/releases/changelog_v22.03.1/index.html
@@ -12,20 +12,20 @@
     <title>Changelog v22.03.1 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -813,19 +813,19 @@ <h3 id="changes-from-v22030-to-v22031">Changes from v22.03.0 to v22.03.1</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/changelog_v22.03.2/index.html b/en/releases/changelog_v22.03.2/index.html
index c340872e..afb25bc2 100644
--- a/en/releases/changelog_v22.03.2/index.html
+++ b/en/releases/changelog_v22.03.2/index.html
@@ -12,20 +12,20 @@
     <title>Changelog v22.03.2 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -849,19 +849,19 @@ <h3 id="changes-from-v22031-to-v22032">Changes from v22.03.1 to v22.03.2</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/changelog_v22.03.3/index.html b/en/releases/changelog_v22.03.3/index.html
index 3a4bcc83..9c79c661 100644
--- a/en/releases/changelog_v22.03.3/index.html
+++ b/en/releases/changelog_v22.03.3/index.html
@@ -12,20 +12,20 @@
     <title>Changelog v22.03.3 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -866,19 +866,19 @@ <h3 id="changes-from-v22032-to-v22033">Changes from v22.03.2 to v22.03.3</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/changelog_v22.06.0/index.html b/en/releases/changelog_v22.06.0/index.html
index d85e6af7..d948a3dd 100644
--- a/en/releases/changelog_v22.06.0/index.html
+++ b/en/releases/changelog_v22.06.0/index.html
@@ -12,20 +12,20 @@
     <title>Changelog v22.06.0 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -871,19 +871,19 @@ <h3 id="changes-from-22030-to-v22060">Changes from 22.03.0 to v22.06.0</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/changelog_v22.06.1/index.html b/en/releases/changelog_v22.06.1/index.html
index 9470915b..f92dd408 100644
--- a/en/releases/changelog_v22.06.1/index.html
+++ b/en/releases/changelog_v22.06.1/index.html
@@ -12,20 +12,20 @@
     <title>Changelog v22.06.1 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -854,19 +854,19 @@ <h3 id="changes-from-v22060-to-v22061">Changes from v22.06.0 to v22.06.1</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/changelog_v22.09.0/index.html b/en/releases/changelog_v22.09.0/index.html
index 0080ae1a..05b65f7a 100644
--- a/en/releases/changelog_v22.09.0/index.html
+++ b/en/releases/changelog_v22.09.0/index.html
@@ -12,20 +12,20 @@
     <title>Changelog v22.09.0 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -896,19 +896,19 @@ <h3 id="changes-from-22060-to-v22090">Changes from 22.06.0 to v22.09.0</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/changelog_v22.09.1/index.html b/en/releases/changelog_v22.09.1/index.html
index c5e0b6af..a3cbe690 100644
--- a/en/releases/changelog_v22.09.1/index.html
+++ b/en/releases/changelog_v22.09.1/index.html
@@ -12,20 +12,20 @@
     <title>Changelog v22.09.1 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -792,19 +792,19 @@ <h3 id="changes-from-v22090-to-v22091">Changes from v22.09.0 to v22.09.1</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/changelog_v22.09.2/index.html b/en/releases/changelog_v22.09.2/index.html
index 47597b2c..2dc9719b 100644
--- a/en/releases/changelog_v22.09.2/index.html
+++ b/en/releases/changelog_v22.09.2/index.html
@@ -12,20 +12,20 @@
     <title>Changelog v22.09.2 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -893,19 +893,19 @@ <h3 id="changes-from-v22091-to-v22092">Changes from v22.09.1 to v22.09.2</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/changelog_v22.12.0/index.html b/en/releases/changelog_v22.12.0/index.html
index 6006c4bf..e0b838f5 100644
--- a/en/releases/changelog_v22.12.0/index.html
+++ b/en/releases/changelog_v22.12.0/index.html
@@ -12,20 +12,20 @@
     <title>Changelog v22.12.0 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -870,19 +870,19 @@ <h3 id="changes-from-22090-to-v22120">Changes from 22.09.0 to v22.12.0</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/changelog_v22.12.1/index.html b/en/releases/changelog_v22.12.1/index.html
index fa410be4..b054d93e 100644
--- a/en/releases/changelog_v22.12.1/index.html
+++ b/en/releases/changelog_v22.12.1/index.html
@@ -12,20 +12,20 @@
     <title>Changelog v22.12.1 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -900,19 +900,19 @@ <h3 id="changes-from-v22120-to-v22121">Changes from v22.12.0 to v22.12.1</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/changelog_v23.03.0/index.html b/en/releases/changelog_v23.03.0/index.html
index 50d9e6f6..97e8ad9a 100644
--- a/en/releases/changelog_v23.03.0/index.html
+++ b/en/releases/changelog_v23.03.0/index.html
@@ -12,20 +12,20 @@
     <title>Changelog v23.03.0 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -897,19 +897,19 @@ <h3 id="changes-from-22120-to-v23030">Changes from 22.12.0 to v23.03.0</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/changelog_v23.03.1/index.html b/en/releases/changelog_v23.03.1/index.html
index 8975b2af..c8ba0a07 100644
--- a/en/releases/changelog_v23.03.1/index.html
+++ b/en/releases/changelog_v23.03.1/index.html
@@ -12,20 +12,20 @@
     <title>Changelog v23.03.1 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -880,19 +880,19 @@ <h3 id="changes-from-v23030-to-v23031">Changes from v23.03.0 to v23.03.1</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/changelog_v23.06.0/index.html b/en/releases/changelog_v23.06.0/index.html
index 2e1c6ede..5d92a7c6 100644
--- a/en/releases/changelog_v23.06.0/index.html
+++ b/en/releases/changelog_v23.06.0/index.html
@@ -12,20 +12,20 @@
     <title>Changelog v23.06.0 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -938,19 +938,19 @@ <h3 id="changes-from-23030-to-v23060">Changes from 23.03.0 to v23.06.0</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/changelog_v23.06.1/index.html b/en/releases/changelog_v23.06.1/index.html
index 7beb5251..21e70ca8 100644
--- a/en/releases/changelog_v23.06.1/index.html
+++ b/en/releases/changelog_v23.06.1/index.html
@@ -12,20 +12,20 @@
     <title>Changelog v23.06.1 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -833,19 +833,19 @@ <h3 id="changes-from-v23060-to-v23061">Changes from v23.06.0 to v23.06.1</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/changelog_v23.09.0/index.html b/en/releases/changelog_v23.09.0/index.html
index c5e40a88..7156eddf 100644
--- a/en/releases/changelog_v23.09.0/index.html
+++ b/en/releases/changelog_v23.09.0/index.html
@@ -12,20 +12,20 @@
     <title>Changelog v23.09.0 :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -955,19 +955,19 @@ <h3 id="changes-from-23060-to-v23090">Changes from 23.06.0 to v23.09.0</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/releases/index.html b/en/releases/index.html
index b9d6571f..3ed2b098 100644
--- a/en/releases/index.html
+++ b/en/releases/index.html
@@ -12,20 +12,20 @@
     <title>Releases :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -795,19 +795,19 @@ <h3 id="other-releases">Other Releases</h3>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/en/tags/index.html b/en/tags/index.html
index 0c9759c2..36337031 100644
--- a/en/tags/index.html
+++ b/en/tags/index.html
@@ -12,20 +12,20 @@
     <title>Tags :: OVN project documentation website</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/en";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -751,19 +751,19 @@ <h1>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/es/404.html b/es/404.html
index b0285a51..a5d8b576 100644
--- a/es/404.html
+++ b/es/404.html
@@ -9,15 +9,15 @@
   <title>404 Page not found</title>
 
    
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 <style>
     :root #header + #content > #left > #rlblock_left {
diff --git a/es/categories/index.html b/es/categories/index.html
index ed647bd1..757d71c4 100644
--- a/es/categories/index.html
+++ b/es/categories/index.html
@@ -12,20 +12,20 @@
     <title>Categories :: Proyecto OVN, documentación</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/es";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -282,19 +282,19 @@ <h1>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/es/index.html b/es/index.html
index f1ebbc35..787970ce 100644
--- a/es/index.html
+++ b/es/index.html
@@ -12,20 +12,20 @@
     <title>Proyecto OVN, documentación :: Proyecto OVN, documentación</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/es";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -237,19 +237,19 @@ <h1>Customize your own home page</h1>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/es/tags/index.html b/es/tags/index.html
index 1c3cbc47..339a8d9e 100644
--- a/es/tags/index.html
+++ b/es/tags/index.html
@@ -12,20 +12,20 @@
     <title>Tags :: Proyecto OVN, documentación</title>
 
     
-    <link href="/css/nucleus.css?1707407086" rel="stylesheet">
-    <link href="/css/fontawesome-all.min.css?1707407086" rel="stylesheet">
-    <link href="/css/hybrid.css?1707407086" rel="stylesheet">
-    <link href="/css/featherlight.min.css?1707407086" rel="stylesheet">
-    <link href="/css/perfect-scrollbar.min.css?1707407086" rel="stylesheet">
-    <link href="/css/auto-complete.css?1707407086" rel="stylesheet">
-    <link href="/css/atom-one-dark-reasonable.css?1707407086" rel="stylesheet">
-    <link href="/css/theme.css?1707407086" rel="stylesheet">
-    <link href="/css/hugo-theme.css?1707407086" rel="stylesheet">
+    <link href="/css/nucleus.css?1707446630" rel="stylesheet">
+    <link href="/css/fontawesome-all.min.css?1707446630" rel="stylesheet">
+    <link href="/css/hybrid.css?1707446630" rel="stylesheet">
+    <link href="/css/featherlight.min.css?1707446630" rel="stylesheet">
+    <link href="/css/perfect-scrollbar.min.css?1707446630" rel="stylesheet">
+    <link href="/css/auto-complete.css?1707446630" rel="stylesheet">
+    <link href="/css/atom-one-dark-reasonable.css?1707446630" rel="stylesheet">
+    <link href="/css/theme.css?1707446630" rel="stylesheet">
+    <link href="/css/hugo-theme.css?1707446630" rel="stylesheet">
     
-      <link href="/css/theme-blue.css?1707407086" rel="stylesheet">
+      <link href="/css/theme-blue.css?1707446630" rel="stylesheet">
     
 
-    <script src="/js/jquery-3.3.1.min.js?1707407086"></script>
+    <script src="/js/jquery-3.3.1.min.js?1707446630"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -52,14 +52,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="/js/lunr.min.js?1707407086"></script>
-<script type="text/javascript" src="/js/auto-complete.js?1707407086"></script>
+<script type="text/javascript" src="/js/lunr.min.js?1707446630"></script>
+<script type="text/javascript" src="/js/auto-complete.js?1707446630"></script>
 <script type="text/javascript">
     
         var baseurl = "\/\/es";
     
 </script>
-<script type="text/javascript" src="/js/search.js?1707407086"></script>
+<script type="text/javascript" src="/js/search.js?1707446630"></script>
 
     
   </div>
@@ -282,19 +282,19 @@ <h1>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="/js/clipboard.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.min.js?1707407086"></script>
-    <script src="/js/perfect-scrollbar.jquery.min.js?1707407086"></script>
-    <script src="/js/jquery.sticky.js?1707407086"></script>
-    <script src="/js/featherlight.min.js?1707407086"></script>
-    <script src="/js/highlight.pack.js?1707407086"></script>
+    <script src="/js/clipboard.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.min.js?1707446630"></script>
+    <script src="/js/perfect-scrollbar.jquery.min.js?1707446630"></script>
+    <script src="/js/jquery.sticky.js?1707446630"></script>
+    <script src="/js/featherlight.min.js?1707446630"></script>
+    <script src="/js/highlight.pack.js?1707446630"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="/js/modernizr.custom-3.6.0.js?1707407086"></script>
-    <script src="/js/learn.js?1707407086"></script>
-    <script src="/js/hugo-learn.js?1707407086"></script>
+    <script src="/js/modernizr.custom-3.6.0.js?1707446630"></script>
+    <script src="/js/learn.js?1707446630"></script>
+    <script src="/js/hugo-learn.js?1707446630"></script>
 
-    <link href="/mermaid/mermaid.css?1707407086" rel="stylesheet" />
-    <script src="/mermaid/mermaid.js?1707407086"></script>
+    <link href="/mermaid/mermaid.css?1707446630" rel="stylesheet" />
+    <script src="/mermaid/mermaid.js?1707446630"></script>
     <script>
         mermaid.initialize({ startOnLoad: true });
     </script>
diff --git a/support/dist-docs-branch-23.06/index.html b/support/dist-docs-branch-23.06/index.html
new file mode 100644
index 00000000..410c9331
--- /dev/null
+++ b/support/dist-docs-branch-23.06/index.html
@@ -0,0 +1,26 @@
+<html><head>
+  <meta charset="UTF-8"></head>
+  <link rel="stylesheet" type="text/css" href="style.css">
+  <title>Open vSwitch 23.06.3 Documentation</title>
+</head><body>
+<h1>Open vSwitch 23.06.3 Manpages</h1>
+<table>
+  <tr><td>ovn-appctl(8)</td><td><a href="ovn-appctl.8.pdf">PDF</a>, <a href="ovn-appctl.8.html">HTML</a>, <a href="ovn-appctl.8.txt">plain text</a></td></tr>
+  <tr><td>ovn-architecture(7)</td><td><a href="ovn-architecture.7.pdf">PDF</a>, <a href="ovn-architecture.7.html">HTML</a>, <a href="ovn-architecture.7.txt">plain text</a></td></tr>
+  <tr><td>ovn-controller-vtep(8)</td><td><a href="ovn-controller-vtep.8.pdf">PDF</a>, <a href="ovn-controller-vtep.8.html">HTML</a>, <a href="ovn-controller-vtep.8.txt">plain text</a></td></tr>
+  <tr><td>ovn-controller(8)</td><td><a href="ovn-controller.8.pdf">PDF</a>, <a href="ovn-controller.8.html">HTML</a>, <a href="ovn-controller.8.txt">plain text</a></td></tr>
+  <tr><td>ovn-ctl(8)</td><td><a href="ovn-ctl.8.pdf">PDF</a>, <a href="ovn-ctl.8.html">HTML</a>, <a href="ovn-ctl.8.txt">plain text</a></td></tr>
+  <tr><td>ovn-detrace(1)</td><td><a href="ovn-detrace.1.pdf">PDF</a>, <a href="ovn-detrace.1.html">HTML</a>, <a href="ovn-detrace.1.txt">plain text</a></td></tr>
+  <tr><td>ovn-ic-nb(5)</td><td><a href="ovn-ic-nb.5.pdf">PDF</a>, <a href="ovn-ic-nb.5.html">HTML</a>, <a href="ovn-ic-nb.5.txt">plain text</a></td></tr>
+  <tr><td>ovn-ic-nbctl(8)</td><td><a href="ovn-ic-nbctl.8.pdf">PDF</a>, <a href="ovn-ic-nbctl.8.html">HTML</a>, <a href="ovn-ic-nbctl.8.txt">plain text</a></td></tr>
+  <tr><td>ovn-ic-sb(5)</td><td><a href="ovn-ic-sb.5.pdf">PDF</a>, <a href="ovn-ic-sb.5.html">HTML</a>, <a href="ovn-ic-sb.5.txt">plain text</a></td></tr>
+  <tr><td>ovn-ic-sbctl(8)</td><td><a href="ovn-ic-sbctl.8.pdf">PDF</a>, <a href="ovn-ic-sbctl.8.html">HTML</a>, <a href="ovn-ic-sbctl.8.txt">plain text</a></td></tr>
+  <tr><td>ovn-ic(8)</td><td><a href="ovn-ic.8.pdf">PDF</a>, <a href="ovn-ic.8.html">HTML</a>, <a href="ovn-ic.8.txt">plain text</a></td></tr>
+  <tr><td>ovn-nb(5)</td><td><a href="ovn-nb.5.pdf">PDF</a>, <a href="ovn-nb.5.html">HTML</a>, <a href="ovn-nb.5.txt">plain text</a></td></tr>
+  <tr><td>ovn-nbctl(8)</td><td><a href="ovn-nbctl.8.pdf">PDF</a>, <a href="ovn-nbctl.8.html">HTML</a>, <a href="ovn-nbctl.8.txt">plain text</a></td></tr>
+  <tr><td>ovn-northd(8)</td><td><a href="ovn-northd.8.pdf">PDF</a>, <a href="ovn-northd.8.html">HTML</a>, <a href="ovn-northd.8.txt">plain text</a></td></tr>
+  <tr><td>ovn-sb(5)</td><td><a href="ovn-sb.5.pdf">PDF</a>, <a href="ovn-sb.5.html">HTML</a>, <a href="ovn-sb.5.txt">plain text</a></td></tr>
+  <tr><td>ovn-sbctl(8)</td><td><a href="ovn-sbctl.8.pdf">PDF</a>, <a href="ovn-sbctl.8.html">HTML</a>, <a href="ovn-sbctl.8.txt">plain text</a></td></tr>
+  <tr><td>ovn-trace(8)</td><td><a href="ovn-trace.8.pdf">PDF</a>, <a href="ovn-trace.8.html">HTML</a>, <a href="ovn-trace.8.txt">plain text</a></td></tr>
+</table>
+</body></html>
diff --git a/support/dist-docs-branch-23.06/ovn-appctl.8 b/support/dist-docs-branch-23.06/ovn-appctl.8
new file mode 100644
index 00000000..866f618e
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-appctl.8
@@ -0,0 +1,186 @@
+'\" p
+.\" -*- nroff -*-
+.TH "ovn-appctl" 8 "ovn-appctl" "OVN 23\[char46]06\[char46]3" "OVN Manual"
+.fp 5 L CR              \\" Make fixed-width font available as \\fL.
+.de TQ
+.  br
+.  ns
+.  TP "\\$1"
+..
+.de ST
+.  PP
+.  RS -0.15in
+.  I "\\$1"
+.  RE
+..
+.de SU
+.  PP
+.  I "\\$1"
+..
+.PP
+.SH "NAME"
+.PP
+.PP
+ovn-appctl \- utility for configuring running OVN daemons
+.SH "SYNOPSIS"
+.PP
+.PP
+\fB ovn\-appctl\fR [\-target=target | -t target] [-T secs | \-timeout=secs] \fIcommand\fR [\fIarg\fR\[char46]\[char46]\[char46]]
+.PP
+\fBovn\-appctl\fR \-help
+.PP
+\fBovn\-appctl\fR \-version
+.SH "DESCRIPTION"
+.PP
+.PP
+OVN daemons accept certain commands at runtime to control their behavior and query their settings\[char46] Every daemon accepts a common set of commands documented under COMMON COMMANDS below\[char46] Some daemons support additional commands documented in their own manpages\[char46]
+.PP
+.PP
+The \fBovn\-appctl\fR program provides a simple way to invoke these commands\[char46] The command to be sent is specified on \fBovn\-appctl\(cqs\fR command line as non-option arguments\[char46] \fBovn\-appctl\fR sends the command and prints the daemon\(cqs response on standard output\[char46]
+.PP
+.PP
+\fBovn\-ctl\fR is exactly similar to Open vSwitch \fBovs\-appctl\fR utility\[char46]
+.SH "COMMAND COMMANDS"
+.PP
+.PP
+Every OVN daemon supports a common set of commands, which are documented in this section\[char46]
+.SS "General Commands"
+.PP
+.PP
+These commands display daemon-specific commands and the running version\[char46] Note that these commands are different from the \-help and \-version options that return information about the \fBovn\-appctl\fR utility itself\[char46]
+.RS
+.TP
+\fBlist\-commands\fR
+Lists the commands supported by the target\[char46]
+.TP
+\fBversion\fR
+Displays the version and compilation date of the target\[char46]
+.RE
+.SS "Logging Commands"
+.PP
+.PP
+OVN has several log levels\[char46] The highest-severity log level is:
+.RS
+.TP
+\fBoff\fR
+No message is ever logged at this level, so setting a logging destination\(cqs log level to off disables logging to that destination\[char46]
+.RE
+.PP
+.PP
+The following log levels, in order of descending severity, are available:
+.RS
+.TP
+\fBemer\fR
+A major failure forced a process to abort\[char46]
+.TP
+\fBerr\fR
+A high-level operation or a subsystem failed\[char46] Attention is warranted\[char46]
+.TP
+\fBwarn\fR
+A low-level operation failed, but higher-level subsystems may be able to recover\[char46]
+.TP
+\fBinfo\fR
+Information that may be useful in retrospect when investigating a problem\[char46]
+.TP
+\fBdbg\fR
+Information useful only to someone with intricate knowledge of the system, or that would commonly cause too-voluminous log output\[char46] Log messages at this level are not logged by default\[char46]
+.RE
+.PP
+.PP
+Every OVN daemon supports the following commands for examining and adjusting log levels\[char46]
+.RS
+.TP
+\fBvlog/list\fR
+Lists the known logging modules and their current levels\[char46]
+.TP
+\fBvlog/list\-pattern\fR
+Lists logging pattern used for each destination\[char46]
+.TP
+\fBvlog/set \fI[spec]\fB\fR
+Sets logging levels\[char46] Without any spec, sets the log level for every module and destination to dbg\[char46] Otherwise, spec is a list of words separated by spaces or commas or colons, up to one from each category below:
+.RS
+.IP \(bu
+A valid module name, as displayed by the vlog/list command on ovn-appctl(8), limits the log level change to the specified module\[char46]
+.IP \(bu
+\fBsyslog\fR, \fBconsole\fR, or \fBfile\fR, to limit the log level change to only to the system log, to the console, or to a file, respectively\[char46]
+.IP
+On Windows platform, \fBsyslog\fR is accepted as a word and is only useful if the target was started with the \fB\-\-syslog\-target\fR option (the word has no effect otherwise)\[char46]
+.IP \(bu
+\fBoff\fR, \fBemer\fR, \fBerr\fR, \fBwarn\fR, \fBinfo\fR, or \fBdbg\fR, to control the log level\[char46] Messages of the given severity or higher will be logged, and messages of lower severity will be filtered out\[char46] \fBoff\fR filters out all messages\[char46]
+.RE
+.IP
+Case is not significant within \fIspec\fR\[char46]
+.TP
+\fBvlog/set PATTERN\fR:\fIdestination\fR: \fIpattern\fR
+Sets the log pattern for \fIdestination\fR to \fIpattern\fR\[char46] Each time a message is logged to destination, pattern determines the message\(cqs formatting\[char46] Most characters in pattern are copied literally to the log, but special escapes beginning with \fB%\fR are expanded as follows:
+.RS
+.IP \(bu
+\fB%A\fR : The name of the application logging the message, e\[char46]g\[char46] ovn-controller\[char46]
+.IP \(bu
+\fB%B\fR : The RFC5424 syslog PRI of the message\[char46]
+.IP \(bu
+\fB%c\fR : The name of the module (as shown by ovn-appctl \-list) logging the message\[char46]
+.IP \(bu
+\fB%d\fR : The current date and time in ISO 8601 format (YYYY-MM-DD HH:MM:SS)\[char46]
+.IP \(bu
+\fB%d\fI{format}\fB\fR : The current date and time in the specified format, which takes the same format as the template argument to strftime(3)\[char46] As an extension, any # characters in format will be replaced by fractional seconds, e\[char46]g\[char46] use \fB%H:%M:%S\[char46]###\fR for the time to the nearest millisecond\[char46] Sub-second times are only approximate and currently decimal places after the third will always be reported as zero\[char46]
+.IP \(bu
+\fB%D\fR : The current UTC date and time in ISO 8601 format \fB(YYYY\-MM\-DD HH:MM:SS)\fR\[char46]
+.IP \(bu
+\fB%D\fI{format}\fB\fR : The current UTC date and time in the specified format, which takes the same format as the template argument to strftime(3)\[char46] Supports the same extension for sub-second resolution as \fB%d{\[char46]\[char46]\[char46]}\fR\[char46]
+.IP \(bu
+\fB%E\fR : The hostname of the node running the application\[char46]
+.IP \(bu
+\fB%m\fR : The message being logged\[char46]
+.IP \(bu
+\fB%N\fR : A serial number for this message within this run of the program, as a decimal number\[char46] The first message a program logs has serial number 1, the second one has serial number 2, and so on\[char46]
+.IP \(bu
+\fB%n\fR : A new-line\[char46]
+.IP \(bu
+\fB%p\fR : The level at which the message is logged, e\[char46]g\[char46] \fBDBG\fR\[char46]
+.IP \(bu
+\fB%P\fR : The program\(cqs process ID (pid), as a decimal number\[char46]
+.IP \(bu
+\fB%r\fR : The number of milliseconds elapsed from the start of the application to the time the message was logged\[char46]
+.IP \(bu
+\fB%t\fR : The subprogram name, that is, an identifying name for the process or thread that emitted the log message, such as monitor for the process used for \-monitor or main for the primary process or thread in a program\[char46]
+.IP \(bu
+\fB%T\fR : The subprogram name enclosed in parentheses, e\[char46]g\[char46] (monitor), or the empty string for the primary process or thread in a program\[char46]
+.IP \(bu
+\fB%%\fR : A literal %\[char46]
+.RE
+.IP
+A few options may appear between the % and the format specifier character, in this order:
+.RS
+.IP \(bu
+\fB\-\fR : Left justify the escape\(cqs expansion within its field width\[char46] Right justification is the default\[char46]
+.IP \(bu
+\fB\-\fR : Pad the field to the field width with 0s\[char46] Padding with spaces is the default\[char46]
+.RE
+.IP
+\fIwidth\fR A number specifies the minimum field width\[char46] If the escape expands to fewer characters than width then it is padded to fill the field width\[char46] (A field wider than width is not truncated to fit\[char46])
+.IP
+The default pattern for console and file output is \fB%D{%Y\-%m\-%dT %H:%M:%SZ}|%05N|%c|%p|%m;\fR for syslog output, \fB%05N|%c|%p|%m\fR\[char46]
+.TP
+\fBvlog/set FACILITY:\fIfacility\fB\fR
+Sets the RFC5424 facility of the log message\[char46] facility can be one of \fBkern\fR, \fBuser\fR, \fBmail\fR, \fBdaemon\fR, \fBauth\fR, \fBsyslog\fR, \fBlpr\fR, \fBnews\fR, \fBuucp\fR, \fBclock\fR, \fBftp\fR, \fBntp\fR, \fBaudit\fR, \fBalert\fR, \fBclock2\fR, \fBlocal0\fR, \fBlocal1\fR, \fBlocal2\fR, \fBlocal3\fR, \fBlocal4\fR, \fBlocal5\fR, \fBlocal6\fR or \fBlocal7\fR\[char46]
+.TP
+\fBvlog/close\fR
+Causes the daemon to close its log file, if it is open\[char46] (Use \fBvlog/reopen\fR to reopen it later\[char46])
+.TP
+\fBvlog/reopen\fR
+Causes the daemon to close its log file, if it is open, and then reopen it\[char46] (This is useful after rotating log files, to cause a new log file to be used\[char46])
+.IP
+This has no effect if the target application was not invoked with the \fB\-\-log\-file\fR option\[char46]
+.RE
+.SH "OPTIONS"
+.TP
+\fB\-h\fR
+.TQ .5in
+\fB\-\-help\fR
+Prints a brief help message to the console\[char46]
+.TP
+\fB\-V\fR
+.TQ .5in
+\fB\-\-version\fR
+Prints version information to the console\[char46]
diff --git a/support/dist-docs-branch-23.06/ovn-appctl.8.html b/support/dist-docs-branch-23.06/ovn-appctl.8.html
new file mode 100644
index 00000000..dac90fb5
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-appctl.8.html
@@ -0,0 +1,224 @@
+<html><head><meta charset="UTF-8"></head><body><pre>
+<u>o</u><u>v</u><u>n</u><u>-</u><u>a</u><u>p</u><u>p</u><u>c</u><u>t</u><u>l</u>(8)                     OVN Manual                     <u>o</u><u>v</u><u>n</u><u>-</u><u>a</u><u>p</u><u>p</u><u>c</u><u>t</u><u>l</u>(8)
+
+<b>N</b><b>A</b><b>M</b><b>E</b>
+       ovn-appctl - utility for configuring running OVN daemons
+
+<b>S</b><b>Y</b><b>N</b><b>O</b><b>P</b><b>S</b><b>I</b><b>S</b>
+        <b>o</b><b>v</b><b>n</b><b>-</b><b>a</b><b>p</b><b>p</b><b>c</b><b>t</b><b>l</b> [-target=target | -t target] [-T secs | -timeout=secs] <u>c</u><u>o</u><u>m</u><u>�</u>��
+       <u>m</u><u>a</u><u>n</u><u>d</u> [<u>a</u><u>r</u><u>g</u>...]
+
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>a</b><b>p</b><b>p</b><b>c</b><b>t</b><b>l</b> -help
+
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>a</b><b>p</b><b>p</b><b>c</b><b>t</b><b>l</b> -version
+
+<b>D</b><b>E</b><b>S</b><b>C</b><b>R</b><b>I</b><b>P</b><b>T</b><b>I</b><b>O</b><b>N</b>
+       OVN  daemons accept certain commands at runtime to control their behav‐
+       ior and query their settings. Every daemon accepts a common set of com‐
+       mands documented under COMMON COMMANDS below. Some daemons support  ad‐
+       ditional commands documented in their own manpages.
+
+       The  <b>o</b><b>v</b><b>n</b><b>-</b><b>a</b><b>p</b><b>p</b><b>c</b><b>t</b><b>l</b> program provides a simple way to invoke these commands.
+       The command to be sent is specified on  <b>o</b><b>v</b><b>n</b><b>-</b><b>a</b><b>p</b><b>p</b><b>c</b><b>t</b><b>l</b>’’<b>s</b>  command  line  as
+       non-option  arguments. <b>o</b><b>v</b><b>n</b><b>-</b><b>a</b><b>p</b><b>p</b><b>c</b><b>t</b><b>l</b> sends the command and prints the dae‐
+       mon’s response on standard output.
+
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>t</b><b>l</b> is exactly similar to Open vSwitch <b>o</b><b>v</b><b>s</b><b>-</b><b>a</b><b>p</b><b>p</b><b>c</b><b>t</b><b>l</b> utility.
+
+<b>C</b><b>O</b><b>M</b><b>M</b><b>A</b><b>N</b><b>D</b> <b>C</b><b>O</b><b>M</b><b>M</b><b>A</b><b>N</b><b>D</b><b>S</b>
+       Every OVN daemon supports a common set of  commands,  which  are  docu‐
+       mented in this section.
+
+   <b>G</b><b>e</b><b>n</b><b>e</b><b>r</b><b>a</b><b>l</b> <b>C</b><b>o</b><b>m</b><b>m</b><b>a</b><b>n</b><b>d</b><b>s</b>
+       These  commands  display  daemon-specific commands and the running ver‐
+       sion. Note that these commands are different from the -help  and  -ver‐
+       sion  options  that return information about the <b>o</b><b>v</b><b>n</b><b>-</b><b>a</b><b>p</b><b>p</b><b>c</b><b>t</b><b>l</b> utility it‐
+       self.
+
+              <b>l</b><b>i</b><b>s</b><b>t</b><b>-</b><b>c</b><b>o</b><b>m</b><b>m</b><b>a</b><b>n</b><b>d</b><b>s</b>
+                     Lists the commands supported by the target.
+
+              <b>v</b><b>e</b><b>r</b><b>s</b><b>i</b><b>o</b><b>n</b>
+                     Displays the version and compilation date of the target.
+
+   <b>L</b><b>o</b><b>g</b><b>g</b><b>i</b><b>n</b><b>g</b> <b>C</b><b>o</b><b>m</b><b>m</b><b>a</b><b>n</b><b>d</b><b>s</b>
+       OVN has several log levels. The highest-severity log level is:
+
+              <b>o</b><b>f</b><b>f</b>    No message is ever logged at this  level,  so  setting  a
+                     logging  destination’s  log level to off disables logging
+                     to that destination.
+
+       The following log levels, in order of descending severity,  are  avail‐
+       able:
+
+              <b>e</b><b>m</b><b>e</b><b>r</b>   A major failure forced a process to abort.
+
+              <b>e</b><b>r</b><b>r</b>    A  high-level  operation or a subsystem failed. Attention
+                     is warranted.
+
+              <b>w</b><b>a</b><b>r</b><b>n</b>   A low-level operation failed, but higher-level subsystems
+                     may be able to recover.
+
+              <b>i</b><b>n</b><b>f</b><b>o</b>   Information that may be useful in retrospect when  inves‐
+                     tigating a problem.
+
+              <b>d</b><b>b</b><b>g</b>    Information  useful only to someone with intricate knowl‐
+                     edge of the system, or that would commonly cause  too-vo‐
+                     luminous  log  output. Log messages at this level are not
+                     logged by default.
+
+       Every OVN daemon supports the following commands for examining and  ad‐
+       justing log levels.
+
+              <b>v</b><b>l</b><b>o</b><b>g</b><b>/</b><b>l</b><b>i</b><b>s</b><b>t</b>
+                     Lists the known logging modules and their current levels.
+
+              <b>v</b><b>l</b><b>o</b><b>g</b><b>/</b><b>l</b><b>i</b><b>s</b><b>t</b><b>-</b><b>p</b><b>a</b><b>t</b><b>t</b><b>e</b><b>r</b><b>n</b>
+                     Lists logging pattern used for each destination.
+
+              <b>v</b><b>l</b><b>o</b><b>g</b><b>/</b><b>s</b><b>e</b><b>t</b> <u>[</u><u>s</u><u>p</u><u>e</u><u>c</u><u>]</u>
+                     Sets logging levels. Without any spec, sets the log level
+                     for  every module and destination to dbg. Otherwise, spec
+                     is a list of words  separated  by  spaces  or  commas  or
+                     colons, up to one from each category below:
+
+                     •      A valid module name, as displayed by the vlog/list
+                            command  on  ovn-appctl(8),  limits  the log level
+                            change to the specified module.
+
+                     •      <b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b>, <b>c</b><b>o</b><b>n</b><b>s</b><b>o</b><b>l</b><b>e</b>, or <b>f</b><b>i</b><b>l</b><b>e</b>, to limit the  log  level
+                            change  to only to the system log, to the console,
+                            or to a file, respectively.
+
+                            On Windows platform, <b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b> is accepted as a  word
+                            and  is only useful if the target was started with
+                            the <b>-</b><b>-</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>-</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> option (the word has no effect
+                            otherwise).
+
+                     •      <b>o</b><b>f</b><b>f</b>, <b>e</b><b>m</b><b>e</b><b>r</b>, <b>e</b><b>r</b><b>r</b>, <b>w</b><b>a</b><b>r</b><b>n</b>, <b>i</b><b>n</b><b>f</b><b>o</b>, or <b>d</b><b>b</b><b>g</b>, to control the
+                            log level.  Messages  of  the  given  severity  or
+                            higher  will  be  logged,  and  messages  of lower
+                            severity will be filtered out. <b>o</b><b>f</b><b>f</b> filters out all
+                            messages.
+
+                     Case is not significant within <u>s</u><u>p</u><u>e</u><u>c</u>.
+
+              <b>v</b><b>l</b><b>o</b><b>g</b><b>/</b><b>s</b><b>e</b><b>t</b> <b>P</b><b>A</b><b>T</b><b>T</b><b>E</b><b>R</b><b>N</b>:<u>d</u><u>e</u><u>s</u><u>t</u><u>i</u><u>n</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u>: <u>p</u><u>a</u><u>t</u><u>t</u><u>e</u><u>r</u><u>n</u>
+                     Sets the log pattern for  <u>d</u><u>e</u><u>s</u><u>t</u><u>i</u><u>n</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u>  to  <u>p</u><u>a</u><u>t</u><u>t</u><u>e</u><u>r</u><u>n</u>.  Each
+                     time  a  message is logged to destination, pattern deter‐
+                     mines the message’s formatting. Most characters  in  pat‐
+                     tern are copied literally to the log, but special escapes
+                     beginning with <b>%</b> are expanded as follows:
+
+                     •      <b>%</b><b>A</b>  : The name of the application logging the mes‐
+                            sage, e.g. ovn-controller.
+
+                     •      <b>%</b><b>B</b> : The RFC5424 syslog PRI of the message.
+
+                     •      <b>%</b><b>c</b> : The name of the module (as shown  by  ovn-ap‐
+                            pctl -list) logging the message.
+
+                     •      <b>%</b><b>d</b>  : The current date and time in ISO 8601 format
+                            (YYYY-MM-DD HH:MM:SS).
+
+                     •      <b>%</b><b>d</b><u>{</u><u>f</u><u>o</u><u>r</u><u>m</u><u>a</u><u>t</u><u>}</u> : The current  date  and  time  in  the
+                            specified  format,  which takes the same format as
+                            the template argument to strftime(3). As an exten‐
+                            sion, any # characters in format will be  replaced
+                            by  fractional  seconds, e.g. use <b>%</b><b>H</b><b>:</b><b>%</b><b>M</b><b>:</b><b>%</b><b>S</b><b>.</b><b>#</b><b>#</b><b>#</b> for
+                            the time to the  nearest  millisecond.  Sub-second
+                            times  are  only approximate and currently decimal
+                            places after the third will always be reported  as
+                            zero.
+
+                     •      <b>%</b><b>D</b>  :  The  current  UTC date and time in ISO 8601
+                            format <b>(</b><b>Y</b><b>Y</b><b>Y</b><b>Y</b><b>-</b><b>M</b><b>M</b><b>-</b><b>D</b><b>D</b> <b>H</b><b>H</b><b>:</b><b>M</b><b>M</b><b>:</b><b>S</b><b>S</b><b>)</b>.
+
+                     •      <b>%</b><b>D</b><u>{</u><u>f</u><u>o</u><u>r</u><u>m</u><u>a</u><u>t</u><u>}</u> : The current UTC date and time in  the
+                            specified  format,  which takes the same format as
+                            the template argument to strftime(3). Supports the
+                            same  extension  for  sub-second   resolution   as
+                            <b>%</b><b>d</b><b>{</b><b>.</b><b>.</b><b>.</b><b>}</b>.
+
+                     •      <b>%</b><b>E</b> : The hostname of the node running the applica‐
+                            tion.
+
+                     •      <b>%</b><b>m</b> : The message being logged.
+
+                     •      <b>%</b><b>N</b>  : A serial number for this message within this
+                            run of the program, as a decimal number. The first
+                            message a program logs has serial  number  1,  the
+                            second one has serial number 2, and so on.
+
+                     •      <b>%</b><b>n</b> : A new-line.
+
+                     •      <b>%</b><b>p</b>  :  The  level  at which the message is logged,
+                            e.g. <b>D</b><b>B</b><b>G</b>.
+
+                     •      <b>%</b><b>P</b> : The program’s process ID (pid), as a  decimal
+                            number.
+
+                     •      <b>%</b><b>r</b>  :  The number of milliseconds elapsed from the
+                            start of the application to the time  the  message
+                            was logged.
+
+                     •      <b>%</b><b>t</b>  : The subprogram name, that is, an identifying
+                            name for the process or thread  that  emitted  the
+                            log  message, such as monitor for the process used
+                            for -monitor or main for the  primary  process  or
+                            thread in a program.
+
+                     •      <b>%</b><b>T</b>  : The subprogram name enclosed in parentheses,
+                            e.g. (monitor), or the empty string for  the  pri‐
+                            mary process or thread in a program.
+
+                     •      <b>%</b><b>%</b> : A literal %.
+
+                     A  few  options  may  appear between the % and the format
+                     specifier character, in this order:
+
+                     •      <b>-</b> : Left justify the escape’s expansion within its
+                            field width. Right justification is the default.
+
+                     •      <b>-</b> : Pad the field to  the  field  width  with  0s.
+                            Padding with spaces is the default.
+
+                     <u>w</u><u>i</u><u>d</u><u>t</u><u>h</u>  A number specifies the minimum field width. If the
+                     escape expands to fewer characters than width then it  is
+                     padded to fill the field width. (A field wider than width
+                     is not truncated to fit.)
+
+                     The  default  pattern  for  console  and  file  output is
+                     <b>%</b><b>D</b><b>{</b><b>%</b><b>Y</b><b>-</b><b>%</b><b>m</b><b>-</b><b>%</b><b>d</b><b>T</b> <b>%</b><b>H</b><b>:</b><b>%</b><b>M</b><b>:</b><b>%</b><b>S</b><b>Z</b><b>}</b><b>|</b><b>%</b><b>0</b><b>5</b><b>N</b><b>|</b><b>%</b><b>c</b><b>|</b><b>%</b><b>p</b><b>|</b><b>%</b><b>m</b><b>;</b> for syslog output,
+                     <b>%</b><b>0</b><b>5</b><b>N</b><b>|</b><b>%</b><b>c</b><b>|</b><b>%</b><b>p</b><b>|</b><b>%</b><b>m</b>.
+
+              <b>v</b><b>l</b><b>o</b><b>g</b><b>/</b><b>s</b><b>e</b><b>t</b> <b>F</b><b>A</b><b>C</b><b>I</b><b>L</b><b>I</b><b>T</b><b>Y</b><b>:</b><u>f</u><u>a</u><u>c</u><u>i</u><u>l</u><u>i</u><u>t</u><u>y</u>
+                     Sets the RFC5424 facility of the  log  message.  facility
+                     can  be  one  of  <b>k</b><b>e</b><b>r</b><b>n</b>, <b>u</b><b>s</b><b>e</b><b>r</b>, <b>m</b><b>a</b><b>i</b><b>l</b>, <b>d</b><b>a</b><b>e</b><b>m</b><b>o</b><b>n</b>, <b>a</b><b>u</b><b>t</b><b>h</b>, <b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b>,
+                     <b>l</b><b>p</b><b>r</b>, <b>n</b><b>e</b><b>w</b><b>s</b>, <b>u</b><b>u</b><b>c</b><b>p</b>, <b>c</b><b>l</b><b>o</b><b>c</b><b>k</b>, <b>f</b><b>t</b><b>p</b>, <b>n</b><b>t</b><b>p</b>, <b>a</b><b>u</b><b>d</b><b>i</b><b>t</b>,  <b>a</b><b>l</b><b>e</b><b>r</b><b>t</b>,  <b>c</b><b>l</b><b>o</b><b>c</b><b>k</b><b>2</b>,
+                     <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>0</b>, <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>1</b>, <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>2</b>, <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>3</b>, <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>4</b>, <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>5</b>, <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>6</b> or
+                     <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>7</b>.
+
+              <b>v</b><b>l</b><b>o</b><b>g</b><b>/</b><b>c</b><b>l</b><b>o</b><b>s</b><b>e</b>
+                     Causes  the  daemon to close its log file, if it is open.
+                     (Use <b>v</b><b>l</b><b>o</b><b>g</b><b>/</b><b>r</b><b>e</b><b>o</b><b>p</b><b>e</b><b>n</b> to reopen it later.)
+
+              <b>v</b><b>l</b><b>o</b><b>g</b><b>/</b><b>r</b><b>e</b><b>o</b><b>p</b><b>e</b><b>n</b>
+                     Causes the daemon to close its log file, if it  is  open,
+                     and  then  reopen  it. (This is useful after rotating log
+                     files, to cause a new log file to be used.)
+
+                     This has no effect if the target application was not  in‐
+                     voked with the <b>-</b><b>-</b><b>l</b><b>o</b><b>g</b><b>-</b><b>f</b><b>i</b><b>l</b><b>e</b> option.
+
+<b>O</b><b>P</b><b>T</b><b>I</b><b>O</b><b>N</b><b>S</b>
+       <b>-</b><b>h</b>
+       <b>-</b><b>-</b><b>h</b><b>e</b><b>l</b><b>p</b>
+            Prints a brief help message to the console.
+
+       <b>-</b><b>V</b>
+       <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>s</b><b>i</b><b>o</b><b>n</b>
+            Prints version information to the console.
+
+OVN 23.06.3                       ovn-appctl                     <u>o</u><u>v</u><u>n</u><u>-</u><u>a</u><u>p</u><u>p</u><u>c</u><u>t</u><u>l</u>(8)
+</pre></body></html>
diff --git a/support/dist-docs-branch-23.06/ovn-appctl.8.pdf b/support/dist-docs-branch-23.06/ovn-appctl.8.pdf
new file mode 100644
index 0000000000000000000000000000000000000000..25f310d75785aa9460d6644d3552f826ac4f86f9
GIT binary patch
literal 29566
zcmce-1zcTA(k}`GcL*BXA;`upSa5eII2(6&cM0w;f#B}$8a%jrfB?ZE$lWC8oH_I6
zn|X8JyYKxrYj^kRs_t4{|E{jRs-Tb;7NuumV1=g`JdVzTr=XCqcD6CpcQmuH<|ek)
zcQgf<I1tmz(-YGhDZLjJQ3RDjHddexGXpbAGe<XRpfk{t7c>Adz1<&lvU2k8Rg^?P
zl!EV-g~W;J9fU<xC4@wHZH<gw?9Cj3pgRtZMmA24y!@c5oRg!ilcT7aCGe&BU(E#1
zM$AZTV_*)?!vl~8TAMhU60?KuC;~vEI0Eg70iu@rjzD3cp^Xucj}P9#(H^L81@D?s
zuCZv1Cx+!UuQr>W?yGLBateOFQ61$6Q=L#9iU=J^q-hj(T(J1%l2lZHkEAotC&Qt%
zL@h2U6YhaHzGRnSKg+}V8%M*2Km9@WWAmCW{lfKOBW-Rc@OsdF;;FhVZKh=R{_v_O
z#=F|Hi8&n-fdYXyn*K&j_6MidlfO_E!(IiR7@;a1hng&(9CC<L=2WGwPxyDZicvB;
zW{W^<hxMDqbJyL6V`2V@1^RNVO@EIHn>o5m8=n?^qWCt6OEZ(>aJv{2mj_)++;_+H
zihX;8Bvna+eDv8K-U3B6&3Fd{95yXSffJ7l^;BM->u-+Im6i}FR<r^w8Fq@BW1S4X
z;*Mr%C>3dF@>hrC86A;6J1i%dbpV0!`<EBa!JGrJrwS?TVN2L<Y(Lu`=8HESA3i|x
zOk=M<-t1iuwxYOfrySCAGoal};Ndp@@Z`gmi>_%zEhj47=cX|s-9p$zFeyDez1oi%
ztfu|O@-yIzg)!FD{)8o)ZjEF)?ZaNP>`jU3;pw*vlOvS{DCV6AcDo~kPPy|heOTSA
zpX>WIQgs`awF~T~PIS2#yZYTCz*H9^mJ9<&z4XQid%2!HNsJw^Kf>Ff?sUH4+;=Og
z>HTE!0JX^Q6zrioezA?%B;sr!mZ+k+vtRWZY6fAwz0>38x8CScltzxZ5x6l0LV9;=
zpFD~<7{x<oJGT|Jl`n;rMA2e|b15VHg778Y1)_#&6i4;kvzFx}+!7APEFVuTN}vSc
zOA$(9TIiTnPn9)mJnE&4d*%iW!{K|duC?+<s9N(BouZgaI6a;}Yr7ai4p~UNLa6s4
zM2@Ywkg%<eNlTaR*VxvJY(UW6_@K&jscIeWRIBDz&R#amQDS6c!|&bJKE=Pb($*SK
ztf4Q2d!XK82c}uO8AFVurt7+MT!Es|_lb5{9m@k4b>)iVyxYpCU$@d#vS&*@l17m(
zqe-?Y;XEf9xFGyFMFPwSt!13aMBQ1up=66&6&jiU1J`I~T03`$N}$YT{RKTE=1N@d
zMvm0??p(SCV2#NwS3ravoe;TGKJ~Fm3%^k~L6kP}BJp7ZO!dbP=fYqT7fI_*F;FP0
zRcyP}I7#@oO}v6jWZqB%!Jb6I)hRl)N{NT0Be;Sy-g!r-m^rcYbmf;S(-BQny@YDF
zg4v1$v)qrb-KftIST|ZdH=(u=a<!eRy*>@gK>8`k3?be8WJVlh9jReeqbpX|*}2#f
zpw=fAKO9GQn)IJuG_L|f+^2{98p_wSp7cN*xy5jw6-EaE6FC>)t2vV0$^hTzBo+$u
zK@q2D9`Cr5nWvzX_OdG1Ft-GM0Slt4Jfws>#~33&yuwaPk(5lv%k)r6c7hCrmx!u!
zXq?JgD!R3gmfg*)KViUa2X6lcax@!u&nzh+uwXf0WN~|yseJxj=B&f6nC0`QTQ!sI
z=shCnb`n*;F^Kie{iT3Q@NnCWDvJ7#E0jeptS$BeE#)D7!;LJL?5mO7Of%<Sf!6KD
zgW4@?;JJr^U8q8)Fc4=$_J-G0xsOV_C6JgM^&zs%WZb4C%)z0_`GO|tb=*cdIEGg%
zv#0Kpg`c0m`&ApiSq?4izCW&~2Ovr-F=eLIrsqL#9#3u_P630tkJp$+kBAFU2u%1t
z#~tkD(p}%X)6>;4HC)V)IuNlW>ZIaHsc-;4QVY7AycPn#@#V|3hqG1=CP;n&exHF~
ztE*7H?)ozAH*_w@H})Y(_3Gl@aw%B+C-|u7&Xkj&-mcClIQvxLLtM6lm#sxtehZ@=
z4lf(DV%MvZvhgw(X!e1c_(=IIy%TV@N|q`KFj#?3mImy(qT7$FezE)*%k<sWp{Gh;
z=eFCFte$YcG~k&xRGpr}sVtkG`1#q1nQe;?o1)Sv>!@04u&;f;U-2@tF!nfRSj`hX
zyzBFgxh-Hhs{w~>a=;Si0U5SsD``sOg4N+6316LM=3^Hnuu-VD1oT#u#Ds*hz7{my
z5%uuS*6<B#Dp2419d&Wu;NA{>%y@%4xD}bbNDO8`BCJ-vOn)fAf;65jOcLX{*}B!Q
z{GqnQ6qD_MyEY|2u$SXacctd?F*T|^z?AC7+*AuyoaCMuM~CMNikU|lkDYdwdZT@f
zJEfs#<5@<Ysg%~CA^B|Ke*IvIrK!*!gHaMubP&{MzUB$ycUmx0QEVp2_-yCI30_HR
zvrLTrCaDUuv%4SbmU}98-&o0$2cPdCY;+d#sU@%~_+smIy&(;g&BV$>ovrB1LmU7C
zJZLN8yBTbT945odKVQ?+-UgHqoxBcM?lOnnHuDl6URCh=-2N8EICC!S!gyUtaj4ZK
zVFx?X6Qwo<)o++jqPDOAKfwax9TK_)2IekGdpS>UZo*?O$*z?1hdj}$8Bc$0IPi6T
zInOYy@F)2|&cmXcSF91%h^&iw*{f=DD&^O<8mOmk;LT<18STXuLtvU=hkWCg!pHaW
z2tYxDZyzo;tWgJrZV8Jw)vJxO;5tx4ED>RcTW^{TPZ5c69nsQ)VF;Uiq%5g%D3Rxn
zy(z8qa*P~Dsjq&5Ma5m1p}}wP!*=!ro5P;vWD_oVDyO7pn_iN&y<U>6XBZeq-y1wp
zbm4Q*7;YUE4ez`0EmY_rUggGBmmcU~P#}W7mvu;~uPdGvibrb}fK7rLUVOu?wfhKW
zr9gL3ya#2V!9_gq9nrV896T{Z{&*tPetmyUe$DEnG1;9Af5wyNvU^E;CpGK3)Swc6
ztR^MSxvGs}hE3wLt^<L0m==WE<$fx=1Eg|8<~TD=TOs-kICmOX3ZaKqV+3Wb!)L1I
zgh%}FyLq;jl}H9g^UN;c6xA^zr1PFGni}KmJ(2u(lJ9hx#Ty#-)q2NydOjn1*&bpP
zfNOg|%#fhuKLjmbxaiEbq?^%O4kAR~yuKP)q!xM`SXeNuX~%PH>kN69lv+VpCp?4n
z&Pn!kwZvopj`w{atF!6x`opyH)u**@)13EtJ7Xm?!w}mM{C#U=AAMvl`sX7t1B<(*
zG)j@K`wL0R_4YgKjE)LtSr#SUc86^BV|fi&e}h@M2>!H=`{XI!_3+7U8|rAch-VVs
zdt1VyVX^4Q%uq2_uP+NeW0VCA7mR|_&4H-C4>NXT-_8_D;g<9eVJOkBV)z{!qxCe6
zr~kz$hH!k3k8xH%BdlNHV!?MKH0{7zh`5#V9k-I;FK>^9c@aA)b1j&CjICjL32&`=
zXrw#_$#dJ6`l=w$oF~95SbYd)f*236QX+UxcXRiK^W*|-V%{lj9N;KSb`nj#MqY)U
zgWR`wMwlNl)TD8R_mSWfn0`er92pGB6y{<?C!`<sX;_m0-BFiCLoEdIZNxWz-Q0%n
z&o!hWu2#r7f>s~7EFV(dkCp2(u-=9?gBzJ>CCKeHXK-$}HiSAF?fG{Fxb=J3g(mJN
zrh!3t&Zy-~K$xOhWrvayF1Fi)kF&|eMXwSaLYBLCw%v0)J)$@elqCSIjs9>cLA4h*
z^u_snDVf<>Sm6J-$Mmm0D${@Eq<+#^wq72=^tw?)M1{-+v*^J^w()jguu`0rFfT2l
z-r}1?r>NZ(2`R{Hg4r*we8PM-od3YtrXEg^LGDWsTYKv9y<V&nJ(+oHq;qe-hSP3%
zZ)g5>As@xwU=6Vi7L~)@oPpc<J#zvI*3oOP(Ab!GdDt3i*^I+w%O5td-5yL=ZJg+?
zhSl75BW^XT49g$*yuEPo;IhQX+6vb7Neeqp<NKfbnw|5GaPR2WjdP`f_K#dXTwNy1
z?U2&AgvB{`Rp9ssa{UOAo_40D&kEf!W4?j7+VMG8imnldA27LpywJhDpgAfld|!Yl
zcWx;XZeBmCq(~{^E*TeGR%4t_<?=0jWhM5Sonrmm{DONTEs3r)PkaQkSW;1<dj-XG
zEULmL^VP_Z5|9Fg%SnjYq%B%C3sYm6dKgvuye=XQ@CA``*Uti25|VMx{ekDOHxU41
zhlsX)GG?V{tvIbJDO4+yyy&&$CXvW6AUN_#1w870qrJnZ48a|{bFacLYCF<4`@TJ>
zC_bNWx8l_KPE!@Av^x+sdF7<Pu);i|4k$i!*p;Li<M~YW7UIyI??}3h|83T0?GT${
z2Y1o;$kC-Jo}v+xXU&KHgYeI=+Lfh<Cx_w565L5-MqYYrjnz*?Ml^d*tYRvu>x&;&
z*{n3hgNkm&P2QrPk>Fs*c+Nv!Cn(qRWW{*gWpgLqS=YwaN9Kz^##Wz@33YPct<s@l
z05Q0gMNGzdZfWkB-`hd}yY}NAgzo4*NA$4d)!M6=`Q~)Y2dyr0K(5YKl(x7kza@kp
zCgfK)Kd>tWJA70>d_FWnl1LhLT+XYSs)k#fKwTZe%vJh&3rioarflgV)3UZpu2qWK
zC{gZd$i(gIQnLR>fzy^G)T+!31HRlkzClxHEMUm52im^i#A|L%vRQJki)D{_q_vBW
z$8?^s;9M3~I87+Cl0=9A-lJrx0atHN6R6d?@6lm@iiMScDKWo<sYY3Ypn!3BuAPr4
z9#mW6)&>hpl1J2hbX-f>o@M5H=D+VNRId{~(~m<=C=%>@Z-*MRXQo+jMZU=So&VI5
zmusZ$edfdMnVLy7D<jD^O@@6OB*SLQtAHX%;I2C~qvI-SXdYxP(UvWQAUNi$8EBlr
zg1TGSfgt6xF6ZxuqHMt!L_FvdWv)SX5LX*gky_U{FpUNSGE#5bOT<fR%1a*($iq!_
zSq5!;hiRI{(<v7VOgX<Axu1oh`fWC}up3G%qHcZ+A`7v;Re!&j62Fpz3uL!+sMzUF
zyu|xPFU$pt@NfXfG41ui<a;LM*s^87fWXZjSF=Kg&Ggq||0shEDV;A(!ot~H9&Kv}
z?2UZ38|Fh<;nCA(thkcCey`;?yS>&5*}y(6)jKM}ZE(HkCnvhe$SFJJq9}?r5Qj+2
z<Y*~1%<-i=>8M|)lzAIlQ>Hm>l+N6$O9?F1qo=JWl-gpX3XqM;V1CUa_~u%j?@E8X
zD}Y?1HVw1L+_zL$+Sw3OX;YD-#`4s2st5yfWu~kD=cwH4Ggz3~H7>m63RmCq29>2c
zjZ|@0f>Bg|%_QzvFjbbADjCf{H+%Pwv3UYR<0$L%bQf<4CV3r_^oT#I^nqWw&qw2h
z&Dp&po~6@|A;)Mnv9Q-G6w~&BkWMLAsEqC)f>1&YY&#;<B~19>7N(GlNmE!(L#x5n
z;zAC^gmtvpV<1dt9H8;W;t;||)(TOT#v4N;_3#X*x)KqmFRk7|YB|%G*C@2N;xj_%
z*a%YB=Qy56_Tu<Y=0Rn3hjE(cg;q%wbx}D>n<<)pP(WAAazlw!149lLM5*MkuJ?vC
zl9@Z?R!PHHh541KB(mvcboxQ&IW$xorf5^2_I3+A$a^_Z8Oj5N*Y7%@h|T<KE9~J!
z`4(nVp-Ez}OSXRQBzU{=sgppzy_%j({ArN#)PdZ|-RRE3ydYb(xwEMF_0vfErE^TH
zQk)`ruKy#qj(T{K``Av(O$TmkupTrClt)<BZhyL=PSu74px||~kNXiqmByF;q2$r%
zOsN6Ks9130wrA=1q!#(+P)gCD1wgNmXl_#b<n*F^V9Nm|6Fb7UdV{n^W7r_STEMQT
z=AwBm0+n0LG7Z+Hgy>$Os=*sO{+imRn`<|o(@%%kkj7h7$tMdqD36!LRT|)CQ;gJ&
zN!r>)IE<wQGGCiieEqQ=U9VDw!OuL(HE}zhU;A8s1n)XpGWND(^0|?Xo`U`9IRW7F
z<ZNx?Y;C#cf-dF7+t@d)f0V(yXsu|2&5mwVyJXQk(EAR>)ChJs93XegulcopNvWpu
z3;7=9vjVg$AEh23-fU?`eE^CN>WQu;l<|$dwssU9{p)#QGWt2`=7er&`AyhN`0(0A
z%xTsxotZfcvxWL?l8haE1l3|<iN?ztc6z*^Z3#1VfLiX4E}q^B{1cr8*Re0J3~|HB
z=H{aHmr@q0Yq*2Lq`VMnlPcd+$Tv#(QI!sWAvLs0SbzH1Nm@%ZuA`ID-j)Z@X-jE;
zQ=!3x)H7+FkVR;1(JVUJHROr215grR3YGv5U@lLJD_#Ba;kjbXYDZpSlf(Xd*XwE<
zPIhCsrMij^6Om+RB^cKl!EuD9Po6<_Y<ao#&0h`^kq2&dqC)iMw8Ku~r}(DkPqgz5
zIXS+dPZ5H#?yjiTYh*vC&wZ71`tlCR(=SC4e#~tYpR#LTOQ&a6lj&P%Ct!^)4F0tT
zr>XZO6A2Oy3N|(h0pAc5IR*@v0gt;^o#!9`QO5W@-egeUmyl%lQJf$z1jhYHW>RR{
z>{RbF>84XG`V-kPCr<J9ZEn$<1QGAfBRuKY3sc+nEoK|Aw>xkvG5cuS3x<zwPP+E^
z5*5x`8cyxEQ?j9<Lcul?`SITTZA#zn*{I3s$z|3PO&8y;(|E_RDp{g#Eadh-ty6#M
zl(SA>-Av0p@-rOgtpuz+zyD~DaKcRv0jw89Ib|)%sH)5^qV0cwWHfQz=)_-BVfe^V
z%qsTUXDJbTK7C?F)stD3r-ce!LZ8<;gQJ~<2`8{h1k0jN)?&DORNL-V*X&u8Q$ekQ
zP1QXMWEBFnysHvbe{lzE!h*#~59ym$-gE)+K+)5lLq@5vNelD9^}tnUvG);PQffIr
zI+9-ZsV6!@4;`=_5?12gb;~+gd{&&x?JpzRc2+5bk+t{oni|5}&F(orxBcReaoM|b
z+=jo}ZQIxyx{Sh${V2#jQT^5IUDr(C?c8P))AByfMF4u{ir%K)Sk@11__+?q<wV-b
z^9*PH77je(mO{e-*{YwF#$?ec;wzOEr)v*)Kdkn5dW^=W#=9?;4o0iRks7v$L`E>S
zO8s!$ri@NqK9&bKL8VQ{M4t*wH7*{yvmbnVUn`BpJMdm7dtber9)2-Db7a6?u>Plw
z^_I12TA{!^%8-`OG|wWty}+DGE}qQVHj$<k8x-qGSn$(MlE6&gdx~R|vBV?IknoWs
z6KB2BO6TfKK6@_iHeFX`SIXgxmL5gO$Zll4%f{62^u{i8;+DjV@IqW#>k?-SUrbL0
z6n2$$#lP^9uUu_;N1u^ilq+RY($X{2*QmyUet(TxKYu}{_vge=Nv&6T6d$aZdg!}_
zs76^Wy;UQ3M`9F{m%m!=;xUl!lERXp8RETPMTG_Lz&>#GdIHKXg)Zoo`D}Sn_itbY
z-lY_#LAVLvgH=B9(Z+EADOVU8WVMYSugm+|bu%82e4bIFrl}(T#kKzBGyn3fIhol0
z@~yf4<^3-+<A3u4_>;PX!!kQY$C27b9^BVzR0#5>CMpiA!f!^U`Not^?!Gib20irT
zz^^lxv!&1BPliP7)-~F4+_IuIevLk^w}c(U*spg+h%QohSg^Ifbc}`G(=roDeDqfT
zl4L*sHkFqbWw*ziWkwJ(2qUN?TJ>&>rV_hUE(h|uf8k<lD1@N&YK$hStt5^;epGJ4
zFu(i47Bc;kaBDDyDOmMq>cvzTAHyVGb9x}dHE-cfllj%7#br45yNbHiO*O=DPqH7K
zAEv#jX|sqV%<3*7>d&LG$ofX0M2$M)X!(%C>_*KCAw6R8(yfY0$LY5=yC{?a^3t27
zk@mFmwXJ1`=OuewZ(SK;sN>2k``&zlDsiO`ccy(al|k%R$#{RT1B`6|KHAy&kG$#5
zvm+Qp6Ok&OFO=U=@d!w3kd2_Nn@U$uDdMWM*{GEko-rk;-xwhj8^A0}gwA2?n(`qx
zWKg3vj#nP)OyS7@dXWm^i!w0Ln$enP<#G{zRu2X*w3o8^X=x}gkSbAV(e2Nc(npxs
z9tAtt_eqFT#Yz(kY2*$GLKs#jUux<kh+0{3FBIG23TZmw0*ftCd|FE(-)Ph#%QyKI
z3{4K(S=}|lKDoBMfD`^Zk=9$oE2({dJaz00tGBP)v95~8X`!HwnVNZVYAyY1VVU2H
zn_m2^LCMrxr()-*NQhrttUH*gFq`=j6|Tq%SJ@XIdmgHvEswA&dihox-<_cFxy*G+
zfMJTysu3);&T6uJXzuK1%c_B6mX1|a^>W~7S$>^@!t0)m1t_ve9nR^@`USeKaH)r`
z&DOI1x6#po>zlHd@BJ<9*O1BJNIgyf_!UwWZ8oD%t>MD`AuG`NjR+7Sw1p(FWxEQB
zv@-ph4+54$qF^|oDTB~xm*35YJ@F-GyaYzV9g(_@XNDK`Q-b>nAIc8Me1m+QuYesz
zwN0Y{@G|K7rB6Kc)1JxE;THxh)coiO^7}2`W#KK>M(FGY?^A0zhSU^XH<-Uox6i^F
zgCqA;BrKp9La{n27kKHUu=?}Dp{IU^Kc`YIv8lC;vtC>rZ&?@NRR+%!SuF8@7;9&x
zYAJVt0vn^YWV$?~V#!=hu6fWeXegI<${OQ2fN!|9Uv)+N3NfL1)+#T<?8m2IEa()d
zbxY@BRd0b53IkR^m_t)Vo&J0~|In+SMYLz}^)i_?RDaQUDD~Ns+sBF9=jP|S?mmOZ
zqf?e=rkd{l-OYA-806%3oBnnj0~?2ost&H4ETwm#<AS`{$Y2Xuc-Z$L*E~pgNk-hP
zMvJQ3IyBJhd`*B7)!3^9kIed7lU@XdHyP#F0NpY^Is^Dyc+!1GdwgQ2Tqj^}Jgd}l
zdUdT-Q@94|AiLj&Hoiq!=j(FO+q(;su_C@{v5BiqUvrhuvz*BiqnmNtY7qI|;B2kv
z0t*xvO}@`~tM=SkQ^{Q6&<D?SbOicomJ2MJHzsu`qyw>0_L^**iW@cBt8DlFxM1&@
zV;Lq;r1p8fd@T5BfG;6bEi|_Bk)G3n!B+*}q2Q+q<5(!3R#Lx9OFR;OXtj^-fuTm!
z_iENU{yE(&lu?tftPc4XXH~W&*I)Wr!J>GkFRhc6UBm}}<QMquQe;zY#o_Q#%Z4FY
z&Zvsn@oP45qF)nLr~yV?j_P=we|ne6_OU25im8VYiE08W;zX(TdIw>Uw|E?iOg#z?
zYVgqWDgazL(b8LP3)#6;GvX&#M$|iA5i!s7g2!5c{`rTFN}9Z}ulTU8x)i22c`2hA
z=nh}IQOGdRv2n}1Sxm9xp5S!U>RnP^kAHYSOv6BXir925C*Q(U_o+;n<lC@~s)G;5
zB#x+n$1V-bVUW?2H4c~HNUF!geGm0Dw<*{Sy+V0|gcNSF5_Ehd-A8;0le*&^E2*zK
zMCbX^$UTFzNFBUTRL-Jr-HU*ls`gEOJ~{Taqp0h2(J5~xn_DdPalp<k6MA`Qtt7?t
z4(TAzSb8_%B5QJU1;)J@Ij=7YR7o(qu8`i$Eg+utp-_0eF%oxc+>Lurs^>S$co!wE
ziJK+;e$)vXj%*wgl`sXRb~cj1L*k7AJcej7SZWVCl*nQ+o}qE{y%U#bsqd(d@Ed8@
z?VGTxj%YbPDn~1_ud{COO;cx{oC3@!F=0#_UeMANtv!-#cgWEwA5)FhV-W8arZRIl
zY}5d2ZQd?Cri(f*@{K$TtKnt-;ZgF1U)sxOAc*^>fSKV)ad`AlwJb>_3xgPr;`}J5
zyXS|k2vyEVy}7Rpq5A9qO@Ojp3$|HQEIhc+DOul?kS=0j3KRAg!C_<f6_1aM+K4ca
zhOAcjaoP)Au%o)<`(_39x}>r7<oG3G#A}!?&bI~aE;sC~)(d0I5BSTCJ9{QN4^6Kc
z|K*tdb$q@YvrL?f%zqxUtp7M=mECNC0C{~AAV3CaWTr1@<4Uaca^kWxF%xreF>AvE
z6m1+qF;`+n5S2a9+L4&$<va%620GX{*&6~KK%rWBdmBR~praN56mup9C<9#`L42Y%
zAY!K9)Sy@`KnT<Z@jDQ|ygyTf2i^Mfh1&m*;&A*q_dmq>^*-;P<lzJny(}5%$^JiH
z9%iQhL7o>M=<o8pEa7i)Kx+$97x6EBIS>P+%#0j}wcuZtPZ6H!kK#pmMR;vu&;vTX
zXzT9_{ntQ$j3cD)sBdXw^5=kmXjTU3sBZ-7A!hz-wf@x9KSTj2GBLq3{SqIb$OZpP
zW`H6G{4bWj>Gq}l$6Ee(9KV+2e~aUn6n}6C>N@~mfCo^Kl2cKWrd2kx0y@wO+E^O>
z!lN+I!O-5!*3rhE7=&-oLj6|o3kL|WX7&z_LZ<rm#4OAJY5hOyOdKo#H8UeeQwJ@0
zX115D!AQ);`0~xf_^V)HVIltW`rZA~dLd=z;Dmo6{ZH2m$3Js3!ZQ+cFf$Xgvvd3^
z|E#lvo|A)v^Vh|~`Lf`kT?(S%VrBhJ2b%4L<~KJR8~d-`->nzgKgankBj_76&o9Y9
zl&qjJUN~OL7is>y4|)O+=S$B^jq{}kR0s9Kzm$x>=|Qsm;`!b4Yo0%sh=q%lm>Fb(
zUdrDy{x$nc`>)UM(f$*~AG9Eu|J{d;gArtPM65x%A!gPlAO(OZ6#+_4297T#?q%aJ
z{R5Z3djG)8uRZ=JAK(Q+e>K$1tlwKZnElljHZwK`f~+9O>}kQXZ~^R`Y(Qx#W+tYN
zp#8@PFgAmKfs2)ywUdMPKPLOzkD9;mDJvqTtStTqJ{4`O^sWB|pf3;l{|cZl`uYdD
zUUc*_<O?!i>i-Qw|J37e9DrKvf9mlCO~3K?3s)fA{np`2>(7~9(8viw$ICs?^#^8N
zF#AIL3(voMeqs1er2gjqV+@eKe_<1}i~e4|^!~Z4USxZ@UfM6^%O3fo@2}nWLjSU7
z{-k^9f063XF<!<7af9yu`uu@1mOr-pA9sKC{U1RpJL^9o^>_5>-y!wS7}TGq(O+Qv
ze~eTXCV+vHr6uq`g7$BQ`!CQcsmn=-tNj653DDVLX83<a?XTnKf3~WuY=5(=%xr&J
z)j#3#AGY@2mGXCG{8Rnk@c%ZIe;7;<&5O$a8BBi%#Y_FA{}+({0gzun0&SZYQ}+jq
zevk12=HE5Y_wSJz|89mr5Bbj)<lkud*J<>3d-QT7{o}OywaT*kR=|IAt_gztHZ6K)
zP_Ev~uI2)rp&YE7+ArC1pd>$5c))uH!xz^LbQ9!<>D!6}Urg5T=F226eJ`BwfZs}e
zZ*5`;^7!BZN{&D)Rge=0Vv{j*Z~)oWUq|7K?Enn~Ix0b4A2r}TKoB4V5C(_<L;+#|
zaexFs8XyCZ1;_#90U!$uPzI<1Gys|aeSiVLK;Ir<V6Sfov;-PE{;vJ9p8!LEp^c@D
zHNXe}1Q>%XDd^7`R0H{#026>Iz|_sw6le`F16Tko0am|FEWjFI?PO&Dw0AHwu?E-x
zY^;F*TY&A0oBC_?U$x((+X6wZD#$GWm1Z_Zf3w>Fdw>JL0cd6Rdv*s<)}uAR!ORul
zV5#q53UIImi3)H8IGWl6L8XfgzzN_CZ~?dh+=2EsG{5xnlHmw4r@#D(e;EB=?LRd7
zJA3i($%~++{rkZr^jEecBQql(-(Pu+nd)ZhO7ksiOva~HpOnM2x=E(ys=t<eH7|D(
zK8pOTjGsa>X4n%$4Clv4L93tj3Q`;_Dl(5a$3Uwdrrx}?zM&|d0DmdV(1Le=+0pK#
zopvE>`C`Q(d!O%SQ%rr)qP%_XrhWZqhc4vo0#kwjG0rI_8krK^5)L-O7EZ?yC}K1-
zc*YV4pYeQ@r(YhL%&9OW5t=c;E}MOykI?B(ddUNG4mYdrr?;zGIelmI{YvL-S_)xx
zdrRd!wCb!cwUSPw#nU*(e9uPC*gB4ew8y|?oZ^{$G;e#$(5O0$5RK`*M0l#lwgH5p
z3AfJEAmGWP^m%;`L&RzYwUy~4$KxSaCVkiDZ3DTr%u-SYI!>JuW*cpvP{X@f7CKLx
zKEBG&2aimEwhs64wmU0?$Os*sww<BrI<?u+q|O$DJ;`wQtR<Ot0XM};rP^ZNS#xt_
zw&W$TFZpes?`E}TA<X%&NOxrja@ZA5W=RiG>%-hrm!#<n*9wy4wLX8ERW-+}k6e<a
zFVgwstl0WFF#(1xDNR(S$Ta-ZfWntq7G=a;X<jjz97;vL1cY6wFdBYy^nQi-VwwbB
z`%fzpNke&zhYo&~UF^n(IPJC>wykHk>hsm-)kNXf;nq_IO9Ib{Zehc~%mwIc{y{6e
zn;$F=*)&9_%zWMtDn-~Cj<V5NR<>C0)VQB-KU_O-P`b)a%G_QE&-76-M0_~!quF}B
zrArl+U1u{rvBG&GV*ScwlTc2F$?d}E=T0n*gc7uNQ8QK(Rx7eV$Av9*P1oM*hjgs&
zGh@8{=sFdfZsD>GJnd~$IwCH5t%M4`jBk`MK6tgQ#Krh*xg!P^y~|%$D`JEj+ZE70
z#>vM~vV6!koWz-hRz-G6iRGEJM<KbP%AmF1n;=8rztc?U-zAIjhb&O)gSkbf#WtT-
z#%tA});l@zG5Kn}&N(3;c6({nCf9vwoM`msmHNsA4uoUs6Spe(qAF#XfT3t6ojOi}
z?gt&!f$&pSR(0ApMfLN2r}10(1H?1<VPj<RGr0Sk{Rf=SM@-4OdR%mVD(VnNMWN3|
zS%{5h>aPrK0zS(v5?Ch(6GePp`|u^)2cn^Te`ipM2+-lX9<xEh<wak~@TD%BK!Mr)
zl=VxYC067aiAy9FzpLjpJ<nc$PC(_)qPa^+x9x?GB_q~hw?!x)Vd&iXn34IDshsvM
zW}UsGwDkhqsxbE8a($yW&kCR>w!hs5h17OqQu;jO826MV6B^2zNA5Aqxoys$jnb@n
z@F<PPik#F32u)8tAj(z2b|KRS_O^!TZriqHbYvOM<*Fy-g-OD83AT-5zI(5!liOVY
za8%;hQ_X>I$Zgpv=rhJxJmau0lvyvR6YfHONTkggJeap&Q8kGb=B;5WjbItMY}8m7
z?&51wTvb<FQ#}w}E5XMhoPW#tDm|#zL62m=nO4$H95<aXl^~=cH}iXSK=uAtqP%Q%
z*bWH8uHxqe$vN6@u^PS0bG7V~eKThIskp<`uZt1lMy@qc5{X3VuDcP=Nby4h^ck{V
zk#v2qf!UNJSKYTGhBRN>%x)Htw@=S8f*Q*v{TMvsO4YdRSRm^Y5Tr5Y8!hATrkeQv
z5<3NjWuCuJaH6V@cS_OjOO(Q_QL>o=@w+?|L_hA#=vQnqk(};G{9U<QiVh;5KIK;D
zfma92t-8Wzp`JEVF*j7x${cn{{;cv<_GK}0fU6_&UZuqtJzqd#eO{>&HzF)HiL;CO
z97G8A&FtOSj2g~zWaa=`vQOxT=rb1_v81It-6cr=xPattQT?w*P49(R$0%)4f{E!U
zC=x0Av3D<bGg?^lQQpOM-wslJkN3@bPOzv`&S-LDKmXz^QS0(mv<`w^QiE_8d((r{
z?w!FSYhsa@oauh9%o)OaKR5LeG)qDzw`c>0PVQCS^u&v7mQ_^J@cjJ7!oHyX```{I
zBYK0z(zhN3F}=QEnTW+*bjy%8=m)IQA%XfMLxOK+R5Z9@X(xpBIMVx|JIIKp#@nc9
z7F4h@`*#t<su}#iY4>9*%UM4d>!YwNOwVX4ra2XSP{h{FTnt<oFHEZF2vyAvs0pO!
zQ~VJ%@q-Y`;cXGmDh{V+w;%43FI`*&_dqI){~nW1TQJ3!rswE+Uo^Z6$&MPqX9fiG
zJrgezQ%tUUq?2JY%);K@{oHkAuahT_;>|&Fr1SIJlFYKij0bqG=Jb{*pK_JS2Uv1`
z*iCTHk?ss~%6Ihd!~$v*3crc#E4vxICpAd6T&}lYmRQe*DBv(i+ocXi3X?cnKK8gj
zGLpd80p^e5g@;Qjki4Br-X)abFXati@JJ5n_$fcfa+=^cI>m`+Zm6YYsr^M}X$M-u
zOR~9SDcgy#La70{wE>=6p9Qf8ebbh~(cu<`>k(+}6l_NHlgELW-Rx+*t0hZ3?74N=
z1&y;B)jd^tvi6bpt;WQ2wZFd|YH`jY>OBs%#k>klDDF)8dAL@88Ow^yGphG@%oWID
zREBfE6;gGwB3>P&>*bUF0hFzGW7k<5c=IjMUfznN0J&HK1uC*ePAi#4j5Tj@-w$Ft
z8;bmn>X1HU>f_Ea$TfE9Qi`-lCK@`!I1^vz+p;H?&R%gj@J?)jk#NbfLq_v8pSYf9
zW;CZMr5kf^43%zfpnbt27(Q}gH&&`HnYR5Hq&zfG9Qh<rVjLe3M2Pw!Lrs@=qbp<d
z>pI02>-t<TRLV3h5-(k(o-ULFWhLqA!Ne9aB{Q=KUc^EU>nIn^%3v1!UO@%t40xlU
z@uJ2l0DAe02|%)eh4<^6e`$Z&ZI?V#EJ@>fin1_6{|vje(0j?m&4+_e;~XhAX+u*)
zqp2w8hdz~MuS)8oxORM_abeQ6Zt1bWD@jTE0W=4MULshEIhQ>3vfn;7wswF&aYy8W
zVYcQT))=JI5Mkm;MV4Xi)20lx<+bIFdCqc7;3LZ3Mq0c^8of((YNw#M_JmpFTlH92
zuD)S~T20le5DF8|j}@s@3HcVss=t(#!TnWb7jxB4Id}{hq<v>(66MboYr#5e#j=;`
zc-KPjnpwIfx$tUtF~eN>B-nf;Tnm1Pwb|cngl5Qk4f;YX%dUQ!5sl$F5)kpmOnq#k
z_=Jwej56~1(tl9fk`X)Oy}wCUB+V9{=NKjf85saD5fiX7t3ko0_}QRClOr^<+H}?L
z%1^a__yo&BOGWn60NpU%D6OD~rB`jU5UIEAFxDx_>d?jy{g8xQxF;qWG-}_ggNs)8
z+zI<@0*O06=v~~|faAT2cwx`#8z=@oZVGL`g_NDWlZYZ&(7%%8A{=f%WHjoB^!u5p
zOBmG|yHdJns->AB8i;up>+yLt0;<Tq)7igjgo)l1iK%!bL_i55f=iOfg*Y|Q<L~JH
zdOe$}h4#*9Jy^S%)p+n@m+Q|iC0PP24M;hBVi!LQhNO=l;?W5RF)>=?>Y=L%kxzE=
zac441Mk?_SZZ*c+<Xq=D!;u3THCw~L(mTHkz#zAEt=GejG3pFaJ<$r+-H%D%VIA)t
zBDX4zlLSh_3cn4vx--r{BHGkH(9%ODJ;Sk8`7Xyx9j!>*D6K6~jFuXCr)Zd4jfz<%
z_L_dPCJ-`J&Sf^JA%7R?D(+rX%H^k!de?+~IhTs6@q`JSS83%BYvg?<sUZM3IQE;A
z9Av>``^rlF`|a&ym@i+stzzpK<1;8GU8^XI5vq&Q%BX@Hkm-77_P_MhR$nedG5#2D
zy^dy(%=B5kth3I_*wWIgKARU|x7Ma%LTXfB3t;k6R&lEJ?JJDw<|CV02#LnpB<1pA
zDH4qm&)C8V2%+>U&mUuB-@6k0)PIIHD#k3&X)iY`EkyFnF(r<czg{Y_zM=PADcZcT
zDuBR$q#frBF?dJ*JrH^P?3!>KpsO7wTm2w||4FZ6FA0c7(f=;Rw*#jZKr+ZwYP`ke
zIxvWkm0`n{{XN;*<o>NykWe6)Gjd{RU-|8%7c$VKpwL1QJ-%KdbQRDE8SiV+;aL5(
zB1VO4C21tjWo2$RS!b<18ArtcN6GTC1zja`lX7$d2n+a*$3<hlc{+U{2>kk0(f)>-
z%Yk+@E|R_amNdX;k0aDJC8HrHt<JCgSe(xAj3<vo-VT(Ib9@rG>kQ71O=<r=#6TIG
z8nS<mva$5zk)}h~C{00ar}R<uVL11u;iA|HtNyMh5B9|414YW&BJR)LQpFEQM@^o#
zCExi1?iHK@;Sd&C_p(Q3WE1vJ`|5wN1UK4pVoVHPR7K)cxVaMAk?zDl1POp;p#b#x
zi%H@FnAFZ{IU!-(^uUdoY7rneP^Oaog6tGYsrul@4ug7~yF-K(LMyAazH!KW+YP?a
zXu5VfwYN21D>gs)Og|wxF+4gx9%EFvYfMa!w_0F&RJX_t_|DaAP}<nTuM>w~fgo5}
z<M9aCXszqkO+QH<<zs{NckU)5Wv}dYCxN?}XLpw=u26nPLm)(yW@*5@obxn3^+NIL
zfoMJRYSZ+$d53SSk~W-4@Iw!=bymW=*^OGL@@uW$2LI+8i?^DcrdNZr<Bl4FdBU;i
zsr7KxAKxNzkFRrPo4J_X?IESSr@O72lq(8tJRg3zSaIV?MI&PSIfw}**SoD|t%ak5
z28@blA39=v9O2js5Sj$XP%dqW8w!^@o)w{llv#Cn2k}AgYCgcHy|&0CNup-8sV7A>
zRCDE+{%Z9GLEfoU*mJYJ(2!S1Nx|j5x(Q45VRI?=ab;OXjMTFoeGhP9bzBZ$urW&r
z$MzmIv43=`N!C>jBH$}C_qnZVa1gln*x%Xc#FKMU7+Nm>(4?RpAsgpxRA;wDlvXpS
z1!1)y)qM%X0>*ck72Nt9rNf7hj*N(=Q}#VASI}G*zkiiRZUj^I8u{lkC+0MUv9iAI
zfqlEONvWwB_mbs_Xpsc>9?B*`{<o%7txxP$wgp0+BrJyILT9IoI6bd-@6+k<O^u0h
zIsyIy?nW@rWFg`3B^MFlBV$4AeQT$PuHIsr;>tCwBy6M>nSQP~KR-XWAw_7f1@yaC
z<UbJ!ge68$Pb%j#BxP?jSyWb#U$}&%e!3VX#-3ynmKZ?WfC&tNxvv+!zHX?$z80;6
z;uMrPG%V3Jv-?H?HWB<osju>fB;Ut?6dY0P?95N3vb4PXsWJVTZ`MEO#hAI?TUb=P
z-fhU@bgH@2AEpafKrEeJ?~y#$XN6dr7{%R!GKmghEa^nWzU39hp|iYwzw3siVWRl1
z);&xr^Z9_*w)wk@$4@(&ESICJ6LP#aws_oMogOb~fTke@^egxli{sqN2gUR>_6u>$
zc#U}iS{0qW=c>?IqXd`b-P?=#b%dTGWc<@^3u=xD6@EVgyclzR396azot7dKk@xV8
zvwDDuP;K=7DERU;4zLPFq+WDIl#Ps)!~lN0-JD3oMAZnYO^J%OcWdQ(AMr|524WP3
zAc+)2@$mKQnECpfMS{JtObe&(d9yTW0g__e90?WUA05Uf)p6-Zh9}6;5w0qtvsl0C
zFu0|0460OcwNXi^VQ?ETIo3Wjx>ov|vCUFP)lA(CDGw{;pX!Ukx!k&Kd0lgIFT-*@
zzGwJmIo#8BISWQNklh+L@Mr<lwdN{u7K-}1t6eClY*xmOzVxU%p7G`F*TuFR#~m0o
zQcB4usUvxnT|K5B%0!P(>AfLx2>Zpwm$=@8Bg2tt=G(*TJ}wJ*aZTI4<a_o_PE<>N
z4_m-ijUTB~L?p7i$`83gKV0e<HB>3{h}+>aap((49jt&{v`=FnY#1sso%6Wu8uK$E
zNz&@7+KS$X4^bt~vvD_1eo)hxlNT~3Z79{;<l<&ikH;#ZQeq(>^yfTnZ`3=a2Pc9i
zSg~)xDhz+Jx4`wn5EQZahJ*jMCyyV|*y_QrPFP8VW!Quc*N6EYQP>CPA;`IkZ$CvO
ziTj!?u)>c`_|+UNUkICEPqP%KZtB>Lt(fVvfSTB|Z`r6AJjX!X=>xJ;Ao8V))790x
z4l;yV`nT$$m#$F=8ZFP<B;#VPv@pl@wWs;5$5A;?tLS!{-9tkG-h-ral2WF2u0ayY
z(#eTNrb46;^Bz*Ci2S`_+t2%RorT3eb6VuwkV#u4?`!E982!#BG;m;a%9Z-sm-Jsx
z*r$8|m+P7+$G^NUYn+%iPwsfMUQQOq;5*}O*D&DkBCrUBL!5)`BS;u<4H^taN2S4&
zwkibwxo@>^Nq}TLU3{{ED=WI6cf68O)^`x~gOD1P0=u8JYO8l?2~wok^9`Yx@+6#`
zrkD5n;Av)~?r~Dq8|F@nhX%gJ9{Hdp1rswl`loM12}kc(HD<Wz_Tc3^I#^rDmkR*X
z^Ck(VVRrl}b-b27mU?Z>@clUnqDmItx<~Wh1CR#Gv1-?*@_vZvr-HRrBKSZ)=|Z?N
zG9PYi=1&zNAjDRS$Jwxwyfzq>VrHwE0*m|9OH1d^hYGhjedcVfX7s^cd@{Vh;}$oN
zD!;#B_m#!Z6%YUCt>Fenk9WHbJ2Ol|hd*JBiDOiG&D|!ZEiBwC)5SO0V!X&UmIVg9
zSPVW4JTx#_lE35F=4i^DOS*qu)X_2zvyEnZkoAz>>*8qx?FeY<8(_ljv4p$w9&}cr
z7j=d1LBCpQTBUh94_xg&R)Qz>?%rQG4GJmpo55h3X#9AXgp0<PGF~=qH7dbcQ)_xz
zkkj7M3`$&RL#p1Q8Z7%}1}&6DB9~VBMT&}@w1lR(v~+RFPG9OBmgPbbJVGKQOwrw8
z^3#l%k*Sx1IMl9Ysx7I5D5=BxQ%@)nC}q3`y>QC~Cto@qE9<B7>IOsEE7eJaX2Anz
z$Gzs1pbty9=MoCAvfS_nTb;D9J(iNAXSC!3r>J%sl7`>;k;6LjCBB$z2Cr&Ds=7iI
z_R<Ot5v}!Ei7h__tmL=FVdc(?+dRY^B;!dxWnp|Ix@{A;#HMQILmwfLTTL5twK_&~
zA~isH3+REM`HZ8k?y)(BJIcT#w>2i^>p>a_<4V!k@V4UX856=0PH%GfUh>h&{E}v*
zF89Ddw3g<naxEsJHxxnWq+xi!7EXXi-UHiiG7S=ZeygEnh7%uR(wjwvINU7RlTGl8
zptg`iEpz2mG_-V!Vnl{M2n7hGG~EncJ#&UyOf}Lu)vO&df=!(5qv4Xfz?!=s<e@)K
zeaJkC_8rzA(ptvQUO`$vFyuhl5*8x3aRu7Jb34bgdo=j<1Gqf<MzhzfJA?V0fBtNV
zuHM+#OsKMz5EqveUU6>-YS2Bg^v1i&V+VSvi`Yxx(-8T5Qk%_vWzqX8^oMp2<@qSC
z7<CdqT1V6>mn&4J1q*mTMDyGi=%eJML?;Q=Uiv}xXO~m<HjL_TV+2l81$G1x5}v9{
zTPLMhrRW9(i^M;)u(6xjzo5ZgX*}JVFie6w%)jCldH5=_*5mY8TyKY3oh%o4ynsd6
z!6=$G;)%ALwuIIlZnI!$@rW$vlzexhN<A7aCMhV}mzIx48=)rLcBQl6<r;7+@n-M3
zC^OtDnQ~ciG{8dRhnkw~EI~W#RmEU4*Tp<h#&-(0k&D*?LjVdM6F;t7C|CXPTdL{L
ziM9`WUnBQ5kNtI*Yiw@>Ip`qBvShjt9rUh&sMA|8oTki4Q^Wzaq&4v;a-LYBP!COV
zfd#LQx4UF-eANSOW&m5Ap4neBy)?gHTdmxAnbNjSto!I1c=lK8Np$^48G-BzrWoqI
z(M5d5QtfUMV?0VG@EL$;RaPa`t}2;CBa~rz7&O}&hoY|vR6Z9ZA(H5dT1|KtKj*Ps
zZNd9PJ#baMZIh5|k1oabw6Xv)YxNecFh9<ojVVqx<)+_+@dhV?<qYmbb6d+5*I6=}
zw?Le}bTp>0!FWXwWm0}BXsahKZ^YkxYl6gwm9q`k81@!&3q~|)=1HBQW{OQntULf3
z%inC;$T_s5C^ON?QxED^ZKiy}*T~Z%H~zKwNJiGD&(9Fa=vd1yNh<&RKVeKS@uB}F
zRP%2_yuV{L9E_ld3o92f7Yish%F6XW#cH_zIaUK|{v%ey3TpkESPiJ>KgMeQjMV&3
zaT*m+q(%)CtNDAR#scX0SF8q9{~b^H9Y6dlXk%z&Wu^Zsbn`2+1OVDO>0AECFpl~E
zp+L^RgmV6GLpQE3!JB^#-~38``CItrZ>cW-8{r#vPUgRdZ`|BID9taOd}Q*lDX)iL
zjr%NftY>9GP^wbu)Q6ksh6*K;y3Z9DNFD<jmk0?<;s*wI!4p6%%Q+!bUTY;H7c!G|
zU046zWv(z{?X)7t<zf8v$<F5t=ADHJ(!|d;&>sRalO06&rfuP^=wL_@!<lR(f69jE
zlW%6fzKNXP`i8Y=Fu&Tzw{B&&@Zg2E-3eh|Yu7{V^<CsbdMmpl&H99qP5Q^djy$~A
zz)vT#pEnEp3d#}=hCbJENnryt*s16&#z$khPBx3DV&NRt`hAQ72Pr7~L#PVAfBc9d
zC6~$4ae{w(Hgwq(K=b_5<k_O(x$_Rrf1!nhgvnGX&f|P9fxg&mdAiZWh!7*h&4^%$
zf~)PFr(B?kQG!dIT%=8zZibI%*K+pQqvM(f!70oU|4OIcW?sKkfz$<`X2Zia7cJZt
zy#dOmgr{JekSm%4oXwVYPe_W`ExLE#&p`ek;AjGn=y+ko2Cu7q7o?hABZTQ0uvCXG
z2+~nDpi6~X^*L{m8NgIWE=bT(@q|W)Y4^b!a8$>oh>wwq3yM$nk>|yxNSBdpg{g(r
z_bG3&8N6Z21SM#`t`L6ngS#7*1(w5K2sYG;)AlxEv(IZ>3x5>S-QO8vG-}J6&F-qt
zeGMWj@J4Prgf+%Tp8H<tzOR5Q-hk?nb<yiQc6dTp!gKdJp<ii9H}kT@=y1H)L|5x)
z8gQw^%xmV!p+*1Rr^R#2z<zbZ{qagpM-F(+gkBh}Zz7#m?IGHb9+BRdzEa*-KJopn
z4<CPAc6aCavqlWbLFV1&Sa|BS21~Bpp(&(oSC{v-42;R_`gkBt;wOch7{B)M3G%5;
zraRfo3Z8fBw5Yx9&TlzqmMqzluoJ_AH^>R=VjnNcB?^s*U;AQ6WOaVT>P0uFgGpkJ
z@t27am1!%s1h=gk(-_AloAe6QVtXaJI7DpdjC+u$599P;8dXm)Np-l@5FyX`X_aJR
zO-n#(Qy;IsQC$CPW{y7AmC!*m($8)3ca88wN^gaHIW^IUF~zClr^*_^T88OXX$9RS
z_lt+%-sb%9AE9(MdtG#=rT#>Z{bunMqP-R~5!}@A>Hd4{gY#`7dC0p6Z-L4Pd-T-U
zh>Iz_P{hTCCtG1{-C$}v&Y$eJ8Bc?giSK&s97U-(InU-CPCic@z#vLu#P_z0@Wj9;
z+}VG^XpdsPJ>X5r`z)^p5dpR^Dz$_dl!KvuSw~PGQM|omzX&*xISBT=GbQ`<lbXZD
zjt}}UFH_TesQQ3#dNSMpv^#QCmt!{LErv9KHaVV=&(XHtLsLE^Ue`{KqYiZO_)wCG
z{|90=$%t!J=)~h!rClRU+8yaGK>!F-h$v(M@HC_VlGEf|006GGguTTkLKhB_uxrpR
zXYfXNr4dZFVDtKv1Zh8uXq<C}$}*y!V#$RQP3Q-s&f<V<`;NU2WFfzU13j(a55!sJ
z*rTg+#Z|U947nfrnY8Oi$Z9ue*So`P88RB~(osAGmAr&RP-yDA0c39n)kud5$L<Y0
z-CKGKR;b=Y<oR|Aek(52j_wJvq@A&^usB!?b25#aWJ8r%X!V}qJFQ5vOKDv!TFqF`
zt|i~Gr8VxdMxWk@zNX!;&^>;Fet_(daournJ~9cN30ebVEy0YBR-tgazq(AJ`m{`)
zTsc2EnchB7mz0Emw_JaGu-zl({WuCv3YLc7uods+2d8rm^yMSxXbj6hY#x)f*_!1I
zSS0(vIp94K$l8~VvKgk$C;WjGTc)%6G6cZ{?;}b$YSuaxt%n02y<fQf$V3UV8I0*Q
zjAZV<m9QL6Oj>sSn9M|Y?4TcKjB=V;wAFAEwDq*@`L|ZN%DMqdY*`@5c(v5y<Vx?|
z9ar)rxc3NoT(?bdK~AHSBl=x~LJ>?mE2J$6TONIUa(SLbE^AbR4{3bm<g_V?G|3fx
zP>_soa4jQ)W=NR<jkX+CSEHMujKO)uK$_vgj<8@WjaUO*e8l&{!X6XOQ&nzG6wxLT
zmYfk$YZjwq3&1pErujSjn&O2r1<gSAVihIm18yy#l1DJvy`I5+A@S5YO;k4(ui{>O
zP_M?v_%ZkccL(Rsu(&i<zM9{2yArq_eeh{8jaghr6AYq+8{lo+PHvN;1}J%vOrH50
z+ES;z%9P7yHatxmm5w57>{qqlP<A!Xs<ptUUcGLM5zruWsT#G=meuwvwQkiXUG?Wk
z^}L0advAWu3T2)HEg6tUT~1z3jX7!2_KN+kj==p5T?^_=szxgO7G!R9n4eajdsY!#
z?bH_Yw6dmY7nMCy9aw3@oP>;%p-_k6Tz)CGb+)wC`V56&UwxmX8G$LrWg|OsrcIcJ
zB5ek|R$}jQ0{ghtSPJ@Fwj1`eQSsboH23n*XxSKQW%GSm_)E?FB)+Ke7+Ou_4?I&!
z94icC)df^0`-QLG2iE;4fxUi`Y?oi%4yYRKzMFS&J>i<?d)2TseARDXdV-A9yTOIw
zn>(!Hc^FvuRkj^ppO@xwb$U94vW&jm;4rsExp-ZG%*PQqVyF`r7sk~Si|QMoiUE0i
zpUid?_Tz$tsL%=9XGzCF(_1plx49J<>WRdmqW19Q=0?mSitZUagp(nL?>>fZ7+zLH
zatD8sCX&u4HUILXt97*<Gb*ab?|-%S6;M&FUH>#nDhLt^Bi%F15Hr9GASFn5cSv_5
zA*D0|QUiiCN=Y{YinJgN(%mJ}{0HxS?|bj{e&754*ZR(4vCi3N@BPHt&sp=F{rr9p
z`m{`;qW9o{8BC3f!s1(vp>ltkw%?$9G5B*=<qxDF{}iws!99PGc1J~lmwc&vQ;%8W
z9YvyTa-iPAY-uNjF2l>0w%B}(w=i?mlS_PvwN9Kfwe<8AiFz;;&A45uEUEG0mEqcP
zPOJB!*x&aEt+Kk3Lj6=FBOf#?T4Q}|Q8nKPDQWXQU)K4UOHLmd>sQ;u*$@%Gu9#5h
zkM(G{AS|1aCAb+QS2_d@%?v})g!?{ZPU2yXs(X{#_Ac;cvPu|ZxDx0Ju9<F7$cdeU
zp=isx#?fwX8>d`3L1HEcKn7oasQ#3&cqfof(YTV&xJ-4gSqx97M$`lYgOmlVaVYxW
zJlVjtU30PJv7(BW!jk6>K1Xxk(iG|ObYjxd<~DVNIMe7O^t4<y+B+Z6@Cd9^a$MK+
za5vNa^-GOPq*CDJ#l;g!D*5b#$>Q4O#aKzJpQ=)tNF#6hwtl;#T`I`_L&U=?mxHR^
zu+^I&M4x7}gr<qZh4TPd*tPk37`?D44eoJ+vsIbAM9K8Cim9|GrGJ#nCdDl><<rN3
za0g}Ki#HK|rVA}2ln%|25tzwjj)AML6rcSt^2SgAsx6!VLe2zb&Ix7S81z~pIHP>l
zD~l!5Wv!FJi7BvcW{sL!fOTNeyBdk;2Z9W|Dx4W~d9E|WtM?If1BJ(+9JX8$K(Mo|
z>a#cbJ*v9u`kY<_24_UQtg6&JB8+HSh36Do(6q@hjbbMRbwIL#^W3um1<J?=vajN)
zk@Sx~FPN!(^rB}$cX<u_k?{nD8=!u1LbCt5?dGm6)b`tt12=C8Y%{zI<|CR7D!W3B
zu(!dsj=VY_n5Y~B-HY*V6j)M>Zs{N04ON+&<+j+{Ij=UJl)fKI?a8{>R87P{&-8j)
zvY2;~(p8U#T7h!=RRWyt9<b~t{iaz@y*P8Dg^`!WqWQ|k5H{NYZa$?_sit1K!M3St
zLNAYD%WhC-e#p6u#0#vKk2<QE)?6jJax=ni0I<g`>lqyf;|a<L9?Nr)H*=_{8}VhR
ze4LL@8i^0k5wn<^DyP$R66UZjj~}7LmJj)6<k^cn4b?s3tVy~#eJ^>Pa8-iFKxF+#
zd3Ez9n@UJxSlHLcB!vvTB3~43OW@TfV_}T}$+1RnGQPAI8S+LZb>Khv@x(yFI<d5D
zWO~RcHvM$vEs!)F@>$&|?y#OT&ya*Mno^O^dN#Asc>k?Wc&mTh1*XiId6a2_%HX1#
zm2GB)_8E0=UzXwA7`Hy`X78r$wB{{!j$q^7?w6$npgdi{V($>ak@xiy6w(S`TKjC~
zN@?4)WYvvEFp_<IQNO~aHQSo{%QFq~F?f<SBwqRG+tnLqWX6aemHqHkK2qzFPBC&b
zC(YZV>}jWBX>M6u9Rkpn!$-jk#wByD)j&b*vTti9GKUf^1gm!CVA&vYl{s5!@;uQD
zayl9>{6=4U%Ej~z$9o&MwzBc?XB&)YQv6<^vnA*j#F#R%lcF`Y?%+cS<%Jw~J|r)k
zol9tX-HFm=*5r~eMNqjolSSh|=U#?)0(s0x7E*amUs0K8auXMk#$jd%mDtn5t2Sod
z@TEFgVSOrkS;QFGoT!H2gOw@y;*d@NhCdn!2eBv5y5f?!Vc0ulz~+3^qYLG{gF_NK
z8#cO@<ExH~FNV<pH#WQRqNne^S|m~*c;sOL%f58HqGO1<F+hL(z{GQC;3=gpj_V7v
z?oXBF;TQILNTNsYtsis-`$ZO;#t^4O>N$LVRwZH4AaPfy33kqV#475*$2a~!m|5tc
zk!AnbMq<=QL`wc1hM1OKnZ;2R7uqV>EbGk6+cBwh($bH^!|*!yanD2_shL{OD)yA1
zIej?DeI0c#%NtjI2#I}&FL<C%Ei~4CLZ~sz-pAoZm^d4L^eR0CZ1ymrly1E6UAum6
zVPO?}g;BJWi1MTNEHDP3a&?M6*%?`#wACm(*>>Odn;yv`FdN4#g3!LTU<jXI<r}Vo
zo3pPcQF$7<%TQ!(qD9}Zy^oTZTJ44^kfIi66!HyDwVgp#kx+-TOM&FNpI<*T;z~J%
zCS?kj?hVCB<mGHpEnt|lbI%<xwF)XP-t=C<><5UObsdKA%+=gOhH7jW$=WNC=B@Gd
z_>PUWo0(`LzSh6$LIa!RvNi_2)=kljCs+-pp1SMF6EqWXn=#Maw2KV;<XMDECB|rx
zOZfbw<y`+oid&**!UPw4msuh7ZLR4eU3_0Ki#IoB6rU#<H@$u^Ou*)!)mUDZ{kEl;
z*Wd1og|)4X{d?DEaT!`F?ABSaRyIsuGrh7A*sJ!F&UB3<_az&0rh5Y`&2?rRm2RJ>
z*NzRrh9&?nN^VVLaXgs4wG~HE>8COFoi-TQ)fNFk*3&!i_r0^BUa%NRa(Vp~lypkJ
z*~8W!Sm1qxKj$f967e!`@x&beC6Z1rpMRE4jyQht{;kN5#?r%!o^Kue=WXIOl+q=_
zn@e(|2r5;N=4i?gPUSbYaw@iK@$3nGS@F*DB|OGgz9CoojfkQqR)qvf?Rq%mRz-|T
zlZf>;`jJ?ExR|hSoxO7x>{R6Q`8?sB-kv#EkkZ<&?^Y;kIHZ=un6c3hO7S#Ei>^yD
zZepCthfPRsr}7|fo&mHJz_MVNtyv=slY!G}0LH>bn|7y`1`eX7rgVkd<iZCf?SRV3
zX>lTKGtbFS_Omsm-r>A$x^rXw6K6&IpxtLRJI)Nf*R3zI!jrQrD%yim4s&0nq%1F2
zq+m^@Az!)X2x<<|ZaJKsQ^sGcFP}cx2!wD3x}>G0m&80aXAQ_!RDM`rl_(`1-`*o|
z;~^vWO(jPyTv0Sl_$nr|*ECGXCm%6|REbAdUfmKs<L4T8C6^~8$&KY?3DXd(^BVg;
z;xx&DpWjpcc2{;V{jy<NE9UZaZ^z(7U+i4)O?4mbJuHj0a;dtKdvLm_%{x_}UNLKU
z7~hSKjv^7r=s4cHLai&@$)v4+JwV}}6S8s)T`GTM4;e#t6!SiIurbJLse5)uB3GNW
zJ8ljymq)s=+{(;cw_@-;!&+IRr3LO;*9NtOo-J>6i^;_I(Ut+%E24W-GG)T|=R`=i
z1u(XH3R~~7_eoYQ5(L*rSV<Gke{s#GDqf1zV;X+KSrYXw7`ZO<h;kKTf}L&WS?m<7
zA``6)gw}ugaAFl?or3OcW14%Jp=3AUil2dty^;YBrpo%H31Cs88Ws^-SuR|9SayeL
z?6aZ?@?w^?0`2r5m3qzvT2?lnLO%H#6I`fa(TR(~8t_ZK3Y->EIoXt9n{m)gkJ;cP
zYZrtW<nnK%5x$2pYx2AjT|39en<8777x?_1XbQ8f8K*YOx33jI7DvomCEF%gvyjuG
z?pniuVD+$=@|q<&8ezQOZKdKG_?D+Z(C(tyLHmk}`}?t(ibL8%>Ly+6(T9B(eL9V;
zb@a;*c4I=8;^&ATpCm5d#acdh4$^^Rve{&ZDk&8Tu58*I5C)9j#&f^-(YWhP^?F&j
z6??**9U^(~q|>y1e{D~h@3b%wQrBJE8)&?5<C{Rj@XSW-r4UUo^}_yu&#_)lV*`~T
zDVkJmZLcC0$0>Lv?YW+8T1#Ymi*i0S_59?cq*nbWel}(II=IY+qQqKhmxZVUX!;CR
z)I`D}35G0mT%Pi5X8UJm51AI0+|S>{Iy98KqaNfTvr(ja40VO~N}ix;1s_onhUdQu
zs46t^M;IhjC<oE87UgL#<$MA%PUM@4*~GTucwvJgp2ZOxXm5}uZ7wnQ2+)38#eFEE
z+}D+M_*BMh_pTKCd76gY$XyLN!sSiF+ibZN2pHHvH~!Ma554U*dm6|v&sjz#2TdBF
zl9r7Eoe#{MJSX;3R3nRjf{$H0Y$aIgUpFxbk*Bz4yxvgEQ*GjU#&&sc=*6^AUVh<z
z$4-n@SGWS%yherbdi<wX!;NUCk*?5K?a##_-JjGCY!)F;AZlV<LbkM3NeYQgyDOkw
z4x}gfb_*ATe1!Yp5iYXxY+)1E6rW(uGj@+9C=|<d<5&!NVDuh{6fw_877{<Z437|X
zY``}aj9B=P>@junW!+~s=FyGDB-s^jNT-z$b8Zv{usBq=FEOS&xO`lZ3Bkz7mx;)!
zt;{UW;jMk3AM~aDYJYraz#B%ShF{^PTJa(Ow2r*8ZD}7fN!jlLUDnRQnb23DE+~hh
zJvERibL}+^euH;K{hM+Xms8oZ#M#?V*&EzLzuf6Qtdb1z%CjLPCjUqyA0v(-Kv$W$
zBKtM*TicsYO}T~YBD6s>;85wAmNpV%ha1_c%J(a*JHDnYBHz?#J@+DQe5T9)`lt!v
zFf=gEMTPiwgk6K#RjDqgme8gDg#bsSv7njg;_~iCVfnhIi$e{!c-B518AlURrtb=Z
z6bqHYUcyz81>g1PG^W2^d0@=cDVu(=3=3X@smnRjM0J=!mvE4tfo)aqAxYd9Zt4ne
zl1UBD1HKWQjqlv6sZ2bh-85e|KO5+tC3y-i<Y!>x<rJuroHAh>*$5Aoz(FJM=VDb~
z`N$x7D)Af@H#3e7QNjzY3pI2$W7Mxn%4VKw4GH-(p&xqvz%}UKBDQ-(8&#>kt6?Cw
zDN~o|rQ%3?j(5r8J?K%pCi8eS4S&J=v6CGE6F2{ENPc2@>#W5TO+|98`<t95@7055
z*Gr691~h}{<F%|6qmDS#a)8D0bD$7aR?5hzZTUOgooCff>Wo|R6J&SGI=k1te3?I0
za)z&L;Oat!1kwtmV*T`jV!wA6JZbC+Im;X{i*M>Rwj6D)5jLK&2@TzV2}ifU>8I4)
zV9xk(K;>kDlfixYuMEiUvGWBytY$CC3#<t3M%p9Qc)M@``^06xh769cdU=_V80v;!
zC%?Cy`z$<Avk|4ZmBEOaU0h#Uo&UxrqhyKY35MGKDT}vq@>d4+Nj59oXH=ub2Qt&t
ztYO3|;`th1bsTgftfY>1xEvfyQa1vaS9`Anc^-~h-Al8J>!iFtiWx!&|I+Ui!pz4#
zFX5qYj3)fFWlO|P7BAvn<8wNdbfx=sP6ddUm)4Xy;c6_#F7hoIS8DRWAxCc`)&+D|
z4M&CuXc@FRO`7*2@hU|Hx@Q`t^dL%&mgtI)#O$In*gf1uKb<F{j>lo$H^@xbDf1@r
z>9fG`+p+qHx#v{O9YJp5v<GWM@B}Y(BnD=JUfSKhBN3_=4NDIPZXeRxoA@u2W3y@+
zZ%WN&I==!EU)&WU$ck>g*)P7Z4;COSp^hxz_r$TOinR`Ce<LVgF0AB<Q(?<ZJc`gs
zyICzeY;O7P#t%nr;ukh)2gozK>Dg&<oaIliUvBj^KEt)yf)kx@Qzps<*@IvbxApOc
z5ou^ku?~bTSIcM9xU;ddi3&7LThuYWEDtHDIU^HlG^~%GUTxac6Rzg1G-$jVZ+`Mo
z`S!%K1`j7UCY)`43bePdi_#Q){`a9tgz4$jBYKAoen0ke1c~9mVrLq3ci@bkQ^0Fs
zqUJzCYF)I~pu3_)ReV3Jw4;f~9{O#TJBu0T7H~a$o@y9}r9)c4L2m`PI120_yy%eV
zINbpHry4@NS;}~`ByHe^9ZcIJWvAN^Nb^3l9>k(bLd_bX(Ejv<MhDTnGd)oC*1w6{
z!_Xp|hmBF|PIPEhZj<V|=jfP%Bdy2bz(nYnP?;krHM!d>7)2tRbl0AFQ{*k{r~z&3
zaKCiL7FD1sgX#y`v@6+I*YXuwXMlGqes#G42o&=UOR}*ndxhG!SUM&7t$fE2G4pL)
zR#)u|OznU=MV-Nsw_Py0Al3F=J5Y3bv&BV9kBy341E`AY8xm(#JXwg*hvoZ+IKjv~
z`4>?%MF?UVf5G|8MrJYGM(csa^}UT+Cb#)pc?;f}$DE1ZY4rL5%4>|%6wjYmra#Ae
z!lXHJJRqW|u$nx?UW17|+N4#ykt}DBA)T3A=s>JQk0fS(h{0u<p+vE6cIjqJ$`wmW
zgyQIlogsD@D0s;fDyOP9V72X1<^5@oOe&AB7U^AjLL+<L^CKX2Lk#Nwwhd?@aQcDs
z^u^gn_uDIRw&Ct$q?eiuE*ChC>gEhK$tRatwlP5}G}FghMu(1v>+Y@Z+>`3jU1M89
zr*D(IH_@97witbT2Bf)LhY;F}(eirWbOV_MytmctWesrY-d+^b5erf=TYBfmO2EqO
z%_QuZ(*ZT>T4-f0A!+x+)g70W`!%U}jXL{pa*F>G0`Iq^A~z2|Dys-W;f6sx06r-H
zzp{!D@E;H`l=RPO#h;h|PAh^?H~%@U2;%*xw4&zkNHQKCR0)6J!BE-5e?oX&3;!{h
zX!1Mg>n}L3Yn0bDsLSCeLd)eh)YV@AS3d#of6CZhU;lptt{@;@$e%NI>Yl198Z^GQ
zN%f1wbif1Rf}T*5N={eHN~^>&?dn%b_+jk%H-dO?KK^|Axv6o{oIc<NgQ@5Zz<ZYb
z=XmO6soJipx&kU4Rz((lJ;_y&w6oQ%o@6P(6_?BOgUi|<P0oJJGZ#%~XHDI$x$+-0
zIYxl*A2ZU8KXbP}3V)2xba!xVoa1zy^|0jS7avtnEW9j44nNPt(2FDq!F#@W7+SD9
z1u5NT&G(^7?K0-<AEWW{oqTm4n4Q;Lk^4qjPfuG{Iqs-yJ~1(O>Fw9cGiKYON9x)f
za;Y5zcjz1?a>N;m#&y{`6T1hiR39BZ{_5Lx)%;i(_w1_GgyK`8x~h7&)t#=3^=A*2
zlpLiCG+&lmpci~B{ZT5*fj=2$W-?iNe@uSU)`q`|Tqm@sgU@isaL1T(jL8Oabe(Sd
z;8fO_<d2S@8pdll^WNs2lnPs}&#U-YaRt;1raTe}yXU-rxY+LqyF7l8@YNS?JIb?D
zQN^s1&Lg6LCzl)|p_Br7iHG|s%`d5QEAL>Iw85785Qk)zDZCjm8_9Ec+XVEwckA$D
z!(Oh|MFK9qU$rAd8?1568n3*)g;V>Kl@$;tg^X0sz*5f}wrs0qTwB#Sf?7~CDbor&
zF13|N_8nq2)J|uN=ydlO8`FA4_I_V;QxsU>P$Kp8$mcvgPKjatd@JkjC(Re$r5E}n
z4Py55O92nXntbd=sNxBhXCL?5`?;JLuLR?_b|>O&2k0EHXqj{ed13E(NDaIiUh3cJ
z1%y?F7apLcvu_K!mmhpsn<16zh;pUDJvQCF0pEaz`>uCq9~}DVzh&PJTSsF>J0%gn
zL+{%QUMif3`~=s2noi0*ce%W%D+idq(?r%NQL(1IS%emPF#GTrN7u_@W_Kb2xj*{;
zd0&YhA`urYpkppKNS;WW#iH$&N({X+c9lQjpqXdtQF9{wIQlN0nR7$l-M&>SW)cl9
zBtndv_ohg^FIU&I<|J;s89d_jhHuUYM;3zf7V96Bm?{38c)P`lkKGg5)Rk1UbhIQE
zSIA6bu_uf#wOBHz>^Eeis=s5%IZbW2Vx!U6^AuL1#ZW&V9k`YHq9nY~<nVD(;S)B~
zZ%|KbrqN;CmA&{UHwD`Zh`k#{Z((sBv4|y)4Nk}gTg;s8Ug$`XbvOfWy)oLqwc0}5
z@uo3LPomlORtR*;A}hww8pc#KtdHN*vZ#KNlonuBqyzDGwVM`PDr+#Ae4ZuP#wZfD
z6Z`y!Z34k%@}1lkv5>F3XLjU5awYSPAJ&dXmT-EQ^PN53sdrgc;o-a6PH5Q`^69*5
zK|{98z1dAg^5(Z0IZd#Zw`iK*#-uNP9{VCLRFKAxZs^3_o<W-AhOD|@7Cu^Hq6gYe
z`HrLVs;q0gK8@LcLKMSCiZ_7-AW?@qJWo={u}857d`c-3>)r)aNzJr)`rSQBw`{%<
zHTzBNrgWrw9$@2;GrLr22ZBlexmQGG<Q;k90jEQhtE#)o386!(KcOblJPd{2OB~;g
ze<2}TXQqT>bPCKfcPa@<idWJoDes%pxIq*jJWxK3J<aIjo;j)8KXlt}qkbJ<(!0J7
z5fpxswpv#|D0dP7K%-hGg`*v>Hz1DLYmDz92)X7%7agT}RTBCv@GOHfCj>CR1U3wA
zJz>(;C%XDT3_c!b2_0t=AAb^2XMP+ySLk1V{N}^lXuo+(wu{>=M^*gfX3H!H>bv>u
zD@@5tREXDyc)Ni+PEh=AD{Dho*uGO>Cl;2ub(*jjK`~W`{q1y|#7RB-y<L7CmaZ6+
z?Zi*}{%AM9V8jQ!dMEhOZ*O9+ZFdbfXr4EeQguN$;n2UyWY%zTpypO1ddY#;Jx59w
z^ltYzmelGCQ<*Ya1(E{wn$wQ^K3Aj6hzB@a$W0ogO`vQ%ZO&DnBA*GMAUVBTaQ0@+
zGs9crpI58e*OgRp#QiH`wACb(<bw6{VyJrr4AIr2A1HdatbWDREgty%)_A=*+yTc2
zeOZLu5gRe=cpv$xzHpL(*R%*pK#?V2)IQ6P&dI`}f5LWJNiu&v5vns6rtLooBVxwh
zY}w>^Z^u7@6p#_Tsgau*&1C$p`0R@Z{HE{OeV|~uViWbOj!d-PmC8=y3h-8%9wsLy
zn!PP}!<H!Zo4BS65xcXRS?@&P{eefu9tQp9hjcPx2VdqBr~7?{e5*E&q~f$YDwbJK
zlShV@fwN4x+-ff9vh!y4JSn_r{3)2Y4?|}wXrKvCE;zgvgx-~&919YBtRlcKmPV}X
zs)(Rh$jj6}rPcnxPpcA&haP2~Va7t*SmOrR8B8Gk=2!oa!cD+Rw3p$~$aS);Jdj^9
z=m~birwu2bw<6qa6kcomPln&TOgRb=P7hGfZDQJ7-HdiQciDe%nppHs%s^y#iQyP-
zx;J7P*7+1|MtjJ;c>LR)RVIOk-H&7L)h$mya7&+Y@!V~UP|r9Votg1k`B9B4d?E5Y
z+u?S}%3SXxJz6yHa94Ywaaj-x+wB4awb=-!jAs;2tEmg;Ie4yAyxNAd^#vk-Fj{mH
zvoBhjjh_XG*dL90>)Ay|?~c?qWDrFcwBcbF6tk`sP<eTLFLC(FJ?H8XNT`LZv*T-p
zrtKzNTCbo_-ziO|M6e1PK?H4EdP+q<>CkiT(M!D0g9Y!yKR%QWaEfNQZ_s`NCwPBh
zSCqg`c;b!%AyUu>H`h<o&7JATOhuA!Ky|Vhdg`RE#<=nbz*t1y%X8`3eeTX+Ho9_=
zA}nwQ{wn>%3M6Td#^++G(V%U}o7QJfdVBBCZLY~s?FP?6Z_!qy9lwKD(D$ee$PI^W
zegpVrTN;S0>eCCzz3m^Xd|vI&=+$4h4x!ZfF<Y;5o+ilF*lJ<3&wPeE?HTGp@7(6A
zByfY!^<NMn6#AFHOPSVwJQY%7eb9fm`!PD#OLqc4-lK8GdB3!$yTvPgritN9X&3h!
zFQqJqd9cK2L#1Byb;LS;2_aTx!h?*MXL#ZVI|!uN9yI20R+wv1XxO_~)@c)DsH0Wz
zB}=cnj8*b|T&zsK5Q8u5V4{%j{Vh^i?j=4`-N)Wp`W6;<LK)sG1=#V^k9nb2m$AvZ
zA=l)5_U59wK(be`E&+Ht*4qc68hYlu)R9zjMFUt4<>RzZc7x72gGxRwnb*hBwm5cO
zAY~-Tlw}!r1UFchpBm-zsH+iacQDVC%LI@B@mT9a&g!-!Z;~Cd>gOnPaYeHTOzP+e
z3Rq9Dzvzrt8kyZ<$bY7=2Ubt&b;_-^amB?*mo&hi+Xqi?wSMaar8V(-+6*XkAjm4M
zHs#;8$pYqxZQ}<lF~~)gG>736U-uFpx5mGCL%U}do!ja+9nzij7R*x?g+69iKEA0Q
zIcVx2umsMM=)TvzjqlYsR~Hxo@YF-N-#Es8I{X5hGpNi?y3N(!uN9qJF=Hu!OXp$G
z`(dzmV_Kr0lSJR2uB)*(qZF9xqnqY}p=f^qYao~We)wL3ag{Oz>qN&*xtf%A1^KLm
zhjxwfe*M*lS{i@;Q@L#UXSrk<uplj~(RH_lI9bl9s0dxbr%OFA<o$6s<RUaFZDr{2
zEhB>CaVRKr8RSgQc3-sd_v1ai?5xJrj!D{O&^!b(r!Sw7+Ek<jx?NaD5JF%*Htc!2
zDztm(vxK)D*4j5N#RHqW8IL`6uyXb}5^QQxFx}-M%9O}MlOr98LS?O}(Rvs~OD;ED
zt#dj#-0+lVpC(=0#6N09BUW>$pdK%Mxz=4vzmU6^Jf-Gx+D=7d9N3sM4}(2{8+@<Q
zJre9yvdtoY6d>Cy*Mzr1wfHu|+sZs(v#qOyMIi==H&W&Ad#lhI|7no3My0S_?IakV
z;qxP-W96Dg$mPi`pE%n3$>|fv=eO%?OLy~BORbEtcb*3*b<ky0KC&*Su)xd(Gx<`^
zqh}zo*&eQErMUCH4@+6{9!T~1n5s4?$6z)q#z(OZJN(94lTKTETiAnJcP!f)BW-pz
zpnOk97JF|mB(A8urS|<Q9dY^_yUfv%wwIFf8x?{IRXBMH9i>-jQ?~`kf1QN=<h%Ow
zEbL!QSpQ~g(3F$?7gYl{H$U$mGY27I57hWU&29k3W)_xqaOR!*W@dn;DV$k@R}LiS
zAZGT&@{yO5nTnUZs)?7i3CxsP7=b4wY=qioz>L$w$br-R=MGoS02CbuoK8$xR+8>o
z!9&2q*1;A<$OZ7QwXt&+@PIS_G!a0ZUyFgvfS)QZ)^KJ`IYoery}gaKr3(Pe1>@r8
z<c4qn%$-oQA@250)&OoUK4z3lCsT6)WfV`_Zw^scaONj2E)D`fpu4*}mpg>Z-pK;U
z4THgeATSUN=0s_5I(yo=7<q8oIn$%c`&ki7%|FcSoVkA1i3_y~6o}$+=H>zc|5ecS
z)bg5e3$^PQ;JRQV<LlkQ=;(g;g4#IjpWUEtp!`5k%|o3Dp!nrXT}{lK;LK8rvH+<k
z_RcQ9xkYhsae=^G+|0n=8}=W{Lv`jqmxp=+zt>v`r6VAR;*c`;6i4yiA;2Io4<`uB
z34*GEAp$%w0dA<a5b$qGs0W3z5<~4qhT5I%f4BOR(x0sCom5dz4q@SBZ*C57yJj>&
zbr?4n7{Uemt+1bFziSBrue<V3P5mz$Z{#2+_rEva*7iD}uJr`O?M+;5QIsjt;&5hH
zS4&d?2#g!bZEOtVG&eJcadLB`{-FraK%6Fgd_26oCcMUAkm-N>9869AsE32Alg-bN
zGc^ICNMWvvbVfZ2Zd64~O$5yCootO<P(knDfFc|ExqBTD6%ot`A=FJ5OVr9_#Ls{h
zwQ>3F#K!VEv;=I7>@48S9-O9T=0>hIF3bouyPw*ozxADsCE~Y}pLW21`}&8T{V75X
z7*r<%{}_%4Ji!0a@qg#&-|ryQnsqp{`}G^<m(}anEH%Hs;{G+NSpJ7W#fti*a~;vB
zP`r+57IA^=v4A3|fr24Cs9?|rftXQ$C^gh@`41YuhcC-N1vo1L@jJhuhm)B(ilPY&
z#k-EI-wpsDFE4}_U=H|Q1_h&7#eUub*!?a8L-}ARwzuo!4;cuGVlDc+jGrI$iwwjK
zMfJ&FZNX6JFaBUCHq5{2fg!M8ZDAl7itp_&{<!)0!GD*5pgdp{v)5nsK-|2))DH^g
z|GOTDA9~G9_7__a7zX;K&b+_Y83cv=QZ9%ecFoWCSAV>y4*a`}AN9HL?=mRlm-=yo
z_)t_-fAz=B556Ya{7V^N9@N*jzsW#Q80?p}!B8FeH$5;v56_?K=i+39VqtPZQFa1=
zDwbYms2BpEm`m+Z45X-lR|Wv3?ab`~*TIjXE|nGs=m_ykJmeF7C??7;%FV|k29=Z)
r2TP)Y8U_}HL3qGW2;x6$=v{MbI=dJ-x%>>=>!<;vHrkX>ki`3cuDm96

literal 0
HcmV?d00001

diff --git a/support/dist-docs-branch-23.06/ovn-appctl.8.txt b/support/dist-docs-branch-23.06/ovn-appctl.8.txt
new file mode 100644
index 00000000..914a460a
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-appctl.8.txt
@@ -0,0 +1,222 @@
+ovn-appctl(8)                     OVN Manual                     ovn-appctl(8)
+
+NAME
+       ovn-appctl - utility for configuring running OVN daemons
+
+SYNOPSIS
+        ovn-appctl [-target=target | -t target] [-T secs | -timeout=secs] com‐
+       mand [arg...]
+
+       ovn-appctl -help
+
+       ovn-appctl -version
+
+DESCRIPTION
+       OVN  daemons accept certain commands at runtime to control their behav‐
+       ior and query their settings. Every daemon accepts a common set of com‐
+       mands documented under COMMON COMMANDS below. Some daemons support  ad‐
+       ditional commands documented in their own manpages.
+
+       The  ovn-appctl program provides a simple way to invoke these commands.
+       The command to be sent is specified on  ovn-appctl�’s  command  line  as
+       non-option  arguments. ovn-appctl sends the command and prints the dae‐
+       mon’s response on standard output.
+
+       ovn-ctl is exactly similar to Open vSwitch ovs-appctl utility.
+
+COMMAND COMMANDS
+       Every OVN daemon supports a common set of  commands,  which  are  docu‐
+       mented in this section.
+
+   General Commands
+       These  commands  display  daemon-specific commands and the running ver‐
+       sion. Note that these commands are different from the -help  and  -ver‐
+       sion  options  that return information about the ovn-appctl utility it‐
+       self.
+
+              list-commands
+                     Lists the commands supported by the target.
+
+              version
+                     Displays the version and compilation date of the target.
+
+   Logging Commands
+       OVN has several log levels. The highest-severity log level is:
+
+              off    No message is ever logged at this  level,  so  setting  a
+                     logging  destination’s  log level to off disables logging
+                     to that destination.
+
+       The following log levels, in order of descending severity,  are  avail‐
+       able:
+
+              emer   A major failure forced a process to abort.
+
+              err    A  high-level  operation or a subsystem failed. Attention
+                     is warranted.
+
+              warn   A low-level operation failed, but higher-level subsystems
+                     may be able to recover.
+
+              info   Information that may be useful in retrospect when  inves‐
+                     tigating a problem.
+
+              dbg    Information  useful only to someone with intricate knowl‐
+                     edge of the system, or that would commonly cause  too-vo‐
+                     luminous  log  output. Log messages at this level are not
+                     logged by default.
+
+       Every OVN daemon supports the following commands for examining and  ad‐
+       justing log levels.
+
+              vlog/list
+                     Lists the known logging modules and their current levels.
+
+              vlog/list-pattern
+                     Lists logging pattern used for each destination.
+
+              vlog/set [spec]
+                     Sets logging levels. Without any spec, sets the log level
+                     for  every module and destination to dbg. Otherwise, spec
+                     is a list of words  separated  by  spaces  or  commas  or
+                     colons, up to one from each category below:
+
+                     •      A valid module name, as displayed by the vlog/list
+                            command  on  ovn-appctl(8),  limits  the log level
+                            change to the specified module.
+
+                     •      syslog, console, or file, to limit the  log  level
+                            change  to only to the system log, to the console,
+                            or to a file, respectively.
+
+                            On Windows platform, syslog is accepted as a  word
+                            and  is only useful if the target was started with
+                            the --syslog-target option (the word has no effect
+                            otherwise).
+
+                     •      off, emer, err, warn, info, or dbg, to control the
+                            log level.  Messages  of  the  given  severity  or
+                            higher  will  be  logged,  and  messages  of lower
+                            severity will be filtered out. off filters out all
+                            messages.
+
+                     Case is not significant within spec.
+
+              vlog/set PATTERN:destination: pattern
+                     Sets the log pattern for  destination  to  pattern.  Each
+                     time  a  message is logged to destination, pattern deter‐
+                     mines the message’s formatting. Most characters  in  pat‐
+                     tern are copied literally to the log, but special escapes
+                     beginning with % are expanded as follows:
+
+                     •      %A  : The name of the application logging the mes‐
+                            sage, e.g. ovn-controller.
+
+                     •      %B : The RFC5424 syslog PRI of the message.
+
+                     •      %c : The name of the module (as shown  by  ovn-ap‐
+                            pctl -list) logging the message.
+
+                     •      %d  : The current date and time in ISO 8601 format
+                            (YYYY-MM-DD HH:MM:SS).
+
+                     •      %d{format} : The current  date  and  time  in  the
+                            specified  format,  which takes the same format as
+                            the template argument to strftime(3). As an exten‐
+                            sion, any # characters in format will be  replaced
+                            by  fractional  seconds, e.g. use %H:%M:%S.### for
+                            the time to the  nearest  millisecond.  Sub-second
+                            times  are  only approximate and currently decimal
+                            places after the third will always be reported  as
+                            zero.
+
+                     •      %D  :  The  current  UTC date and time in ISO 8601
+                            format (YYYY-MM-DD HH:MM:SS).
+
+                     •      %D{format} : The current UTC date and time in  the
+                            specified  format,  which takes the same format as
+                            the template argument to strftime(3). Supports the
+                            same  extension  for  sub-second   resolution   as
+                            %d{...}.
+
+                     •      %E : The hostname of the node running the applica‐
+                            tion.
+
+                     •      %m : The message being logged.
+
+                     •      %N  : A serial number for this message within this
+                            run of the program, as a decimal number. The first
+                            message a program logs has serial  number  1,  the
+                            second one has serial number 2, and so on.
+
+                     •      %n : A new-line.
+
+                     •      %p  :  The  level  at which the message is logged,
+                            e.g. DBG.
+
+                     •      %P : The program’s process ID (pid), as a  decimal
+                            number.
+
+                     •      %r  :  The number of milliseconds elapsed from the
+                            start of the application to the time  the  message
+                            was logged.
+
+                     •      %t  : The subprogram name, that is, an identifying
+                            name for the process or thread  that  emitted  the
+                            log  message, such as monitor for the process used
+                            for -monitor or main for the  primary  process  or
+                            thread in a program.
+
+                     •      %T  : The subprogram name enclosed in parentheses,
+                            e.g. (monitor), or the empty string for  the  pri‐
+                            mary process or thread in a program.
+
+                     •      %% : A literal %.
+
+                     A  few  options  may  appear between the % and the format
+                     specifier character, in this order:
+
+                     •      - : Left justify the escape’s expansion within its
+                            field width. Right justification is the default.
+
+                     •      - : Pad the field to  the  field  width  with  0s.
+                            Padding with spaces is the default.
+
+                     width  A number specifies the minimum field width. If the
+                     escape expands to fewer characters than width then it  is
+                     padded to fill the field width. (A field wider than width
+                     is not truncated to fit.)
+
+                     The  default  pattern  for  console  and  file  output is
+                     %D{%Y-%m-%dT %H:%M:%SZ}|%05N|%c|%p|%m; for syslog output,
+                     %05N|%c|%p|%m.
+
+              vlog/set FACILITY:facility
+                     Sets the RFC5424 facility of the  log  message.  facility
+                     can  be  one  of  kern, user, mail, daemon, auth, syslog,
+                     lpr, news, uucp, clock, ftp, ntp, audit,  alert,  clock2,
+                     local0, local1, local2, local3, local4, local5, local6 or
+                     local7.
+
+              vlog/close
+                     Causes  the  daemon to close its log file, if it is open.
+                     (Use vlog/reopen to reopen it later.)
+
+              vlog/reopen
+                     Causes the daemon to close its log file, if it  is  open,
+                     and  then  reopen  it. (This is useful after rotating log
+                     files, to cause a new log file to be used.)
+
+                     This has no effect if the target application was not  in‐
+                     voked with the --log-file option.
+
+OPTIONS
+       -h
+       --help
+            Prints a brief help message to the console.
+
+       -V
+       --version
+            Prints version information to the console.
+
+OVN 23.06.3                       ovn-appctl                     ovn-appctl(8)
diff --git a/support/dist-docs-branch-23.06/ovn-architecture.7 b/support/dist-docs-branch-23.06/ovn-architecture.7
new file mode 100644
index 00000000..d21ae4dc
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-architecture.7
@@ -0,0 +1,1207 @@
+'\" p
+.\" -*- nroff -*-
+.TH "ovn-architecture" 7 "OVN Architecture" "OVN 23\[char46]06\[char46]3" "OVN Manual"
+.fp 5 L CR              \\" Make fixed-width font available as \\fL.
+.de TQ
+.  br
+.  ns
+.  TP "\\$1"
+..
+.de ST
+.  PP
+.  RS -0.15in
+.  I "\\$1"
+.  RE
+..
+.de SU
+.  PP
+.  I "\\$1"
+..
+.PP
+.SH "NAME"
+.PP
+.PP
+ovn-architecture \- Open Virtual Network architecture
+.SH "DESCRIPTION"
+.PP
+.PP
+OVN, the Open Virtual Network, is a system to support logical network abstraction in virtual machine and container environments\[char46] OVN complements the existing capabilities of OVS to add native support for logical network abstractions, such as logical L2 and L3 overlays and security groups\[char46] Services such as DHCP are also desirable features\[char46] Just like OVS, OVN\(cqs design goal is to have a production-quality implementation that can operate at significant scale\[char46]
+.PP
+.PP
+A physical network comprises physical wires, switches, and routers\[char46] A \fIvirtual network\fR extends a physical network into a hypervisor or container platform, bridging VMs or containers into the physical network\[char46] An OVN \fIlogical network\fR is a network implemented in software that is insulated from physical (and thus virtual) networks by tunnels or other encapsulations\[char46] This allows IP and other address spaces used in logical networks to overlap with those used on physical networks without causing conflicts\[char46] Logical network topologies can be arranged without regard for the topologies of the physical networks on which they run\[char46] Thus, VMs that are part of a logical network can migrate from one physical machine to another without network disruption\[char46] See \fBLogical Networks\fR, below, for more information\[char46]
+.PP
+.PP
+The encapsulation layer prevents VMs and containers connected to a logical network from communicating with nodes on physical networks\[char46] For clustering VMs and containers, this can be acceptable or even desirable, but in many cases VMs and containers do need connectivity to physical networks\[char46] OVN provides multiple forms of \fIgateways\fR for this purpose\[char46] See \fBGateways\fR, below, for more information\[char46]
+.PP
+.PP
+An OVN deployment consists of several components:
+.RS
+.IP \(bu
+A \fICloud Management System\fR (\fICMS\fR), which is OVN\(cqs ultimate client (via its users and administrators)\[char46] OVN integration requires installing a CMS-specific plugin and related software (see below)\[char46] OVN initially targets OpenStack as CMS\[char46]
+.IP
+We generally speak of ``the\(cq\(cq CMS, but one can imagine scenarios in which multiple CMSes manage different parts of an OVN deployment\[char46]
+.IP \(bu
+An OVN Database physical or virtual node (or, eventually, cluster) installed in a central location\[char46]
+.IP \(bu
+One or more (usually many) \fIhypervisors\fR\[char46] Hypervisors must run Open vSwitch and implement the interface described in \fBDocumentation/topics/integration\[char46]rst\fR in the Open vSwitch source tree\[char46] Any hypervisor platform supported by Open vSwitch is acceptable\[char46]
+.IP \(bu
+Zero or more \fIgateways\fR\[char46] A gateway extends a tunnel-based logical network into a physical network by bidirectionally forwarding packets between tunnels and a physical Ethernet port\[char46] This allows non-virtualized machines to participate in logical networks\[char46] A gateway may be a physical host, a virtual machine, or an ASIC-based hardware switch that supports the \fBvtep\fR(5) schema\[char46]
+.IP
+Hypervisors and gateways are together called \fItransport node\fR or \fIchassis\fR\[char46]
+.RE
+.PP
+.PP
+The diagram below shows how the major components of OVN and related software interact\[char46] Starting at the top of the diagram, we have:
+.RS
+.IP \(bu
+The Cloud Management System, as defined above\[char46]
+.IP \(bu
+The \fIOVN/CMS Plugin\fR is the component of the CMS that interfaces to OVN\[char46] In OpenStack, this is a Neutron plugin\[char46] The plugin\(cqs main purpose is to translate the CMS\(cqs notion of logical network configuration, stored in the CMS\(cqs configuration database in a CMS-specific format, into an intermediate representation understood by OVN\[char46]
+.IP
+This component is necessarily CMS-specific, so a new plugin needs to be developed for each CMS that is integrated with OVN\[char46] All of the components below this one in the diagram are CMS-independent\[char46]
+.IP \(bu
+The \fIOVN Northbound Database\fR receives the intermediate representation of logical network configuration passed down by the OVN/CMS Plugin\[char46] The database schema is meant to be ``impedance matched\(cq\(cq with the concepts used in a CMS, so that it directly supports notions of logical switches, routers, ACLs, and so on\[char46] See \fBovn\-nb\fR(5) for details\[char46]
+.IP
+The OVN Northbound Database has only two clients: the OVN/CMS Plugin above it and \fBovn\-northd\fR below it\[char46]
+.IP \(bu
+\fBovn\-northd\fR(8) connects to the OVN Northbound Database above it and the OVN Southbound Database below it\[char46] It translates the logical network configuration in terms of conventional network concepts, taken from the OVN Northbound Database, into logical datapath flows in the OVN Southbound Database below it\[char46]
+.IP \(bu
+The \fIOVN Southbound Database\fR is the center of the system\[char46] Its clients are \fBovn\-northd\fR(8) above it and \fBovn\-controller\fR(8) on every transport node below it\[char46]
+.IP
+The OVN Southbound Database contains three kinds of data: \fIPhysical
+Network\fR (PN) tables that specify how to reach hypervisor and other nodes, \fILogical Network\fR (LN) tables that describe the logical network in terms of ``logical datapath flows,\(cq\(cq and \fIBinding\fR tables that link logical network components\(cq locations to the physical network\[char46] The hypervisors populate the PN and Port_Binding tables, whereas \fBovn\-northd\fR(8) populates the LN tables\[char46]
+.IP
+OVN Southbound Database performance must scale with the number of transport nodes\[char46] This will likely require some work on \fBovsdb\-server\fR(1) as we encounter bottlenecks\[char46] Clustering for availability may be needed\[char46]
+.RE
+.PP
+.PP
+The remaining components are replicated onto each hypervisor:
+.RS
+.IP \(bu
+\fBovn\-controller\fR(8) is OVN\(cqs agent on each hypervisor and software gateway\[char46] Northbound, it connects to the OVN Southbound Database to learn about OVN configuration and status and to populate the PN table and the \fBChassis\fR column in \fBBinding\fR table with the hypervisor\(cqs status\[char46] Southbound, it connects to \fBovs\-vswitchd\fR(8) as an OpenFlow controller, for control over network traffic, and to the local \fBovsdb\-server\fR(1) to allow it to monitor and control Open vSwitch configuration\[char46]
+.IP \(bu
+\fBovs\-vswitchd\fR(8) and \fBovsdb\-server\fR(1) are conventional components of Open vSwitch\[char46]
+.RE
+.PP
+.nf
+\fL
+.br
+\fL                                  CMS
+.br
+\fL                                   |
+.br
+\fL                                   |
+.br
+\fL                       +\-\-\-\-\-\-\-\-\-\-\-|\-\-\-\-\-\-\-\-\-\-\-+
+.br
+\fL                       |           |           |
+.br
+\fL                       |     OVN/CMS Plugin    |
+.br
+\fL                       |           |           |
+.br
+\fL                       |           |           |
+.br
+\fL                       |   OVN Northbound DB   |
+.br
+\fL                       |           |           |
+.br
+\fL                       |           |           |
+.br
+\fL                       |       ovn\-northd      |
+.br
+\fL                       |           |           |
+.br
+\fL                       +\-\-\-\-\-\-\-\-\-\-\-|\-\-\-\-\-\-\-\-\-\-\-+
+.br
+\fL                                   |
+.br
+\fL                                   |
+.br
+\fL                         +\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-+
+.br
+\fL                         | OVN Southbound DB |
+.br
+\fL                         +\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-+
+.br
+\fL                                   |
+.br
+\fL                                   |
+.br
+\fL                +\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-+\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-+
+.br
+\fL                |                  |                  |
+.br
+\fL  HV 1          |                  |    HV n          |
+.br
+\fL+\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-|\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-+  \[char46]  +\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-|\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-+
+.br
+\fL|               |               |  \[char46]  |               |               |
+.br
+\fL|        ovn\-controller         |  \[char46]  |        ovn\-controller         |
+.br
+\fL|         |          |          |  \[char46]  |         |          |          |
+.br
+\fL|         |          |          |     |         |          |          |
+.br
+\fL|  ovs\-vswitchd   ovsdb\-server  |     |  ovs\-vswitchd   ovsdb\-server  |
+.br
+\fL|                               |     |                               |
+.br
+\fL+\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-+     +\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-+
+.br
+\fL  \fR
+.fi
+.SS "Information Flow in OVN"
+.PP
+.PP
+Configuration data in OVN flows from north to south\[char46] The CMS, through its OVN/CMS plugin, passes the logical network configuration to \fBovn\-northd\fR via the northbound database\[char46] In turn, \fBovn\-northd\fR compiles the configuration into a lower-level form and passes it to all of the chassis via the southbound database\[char46]
+.PP
+.PP
+Status information in OVN flows from south to north\[char46] OVN currently provides only a few forms of status information\[char46] First, \fBovn\-northd\fR populates the \fBup\fR column in the northbound \fBLogical_Switch_Port\fR table: if a logical port\(cqs \fBchassis\fR column in the southbound \fBPort_Binding\fR table is nonempty, it sets \fBup\fR to \fBtrue\fR, otherwise to \fBfalse\fR\[char46] This allows the CMS to detect when a VM\(cqs networking has come up\[char46]
+.PP
+.PP
+Second, OVN provides feedback to the CMS on the realization of its configuration, that is, whether the configuration provided by the CMS has taken effect\[char46] This feature requires the CMS to participate in a sequence number protocol, which works the following way:
+.RS
+.IP 1. .4in
+When the CMS updates the configuration in the northbound database, as part of the same transaction, it increments the value of the \fBnb_cfg\fR column in the \fBNB_Global\fR table\[char46] (This is only necessary if the CMS wants to know when the configuration has been realized\[char46])
+.IP 2. .4in
+When \fBovn\-northd\fR updates the southbound database based on a given snapshot of the northbound database, it copies \fBnb_cfg\fR from northbound \fBNB_Global\fR into the southbound database \fBSB_Global\fR table, as part of the same transaction\[char46] (Thus, an observer monitoring both databases can determine when the southbound database is caught up with the northbound\[char46])
+.IP 3. .4in
+After \fBovn\-northd\fR receives confirmation from the southbound database server that its changes have committed, it updates \fBsb_cfg\fR in the northbound \fBNB_Global\fR table to the \fBnb_cfg\fR version that was pushed down\[char46] (Thus, the CMS or another observer can determine when the southbound database is caught up without a connection to the southbound database\[char46])
+.IP 4. .4in
+The \fBovn\-controller\fR process on each chassis receives the updated southbound database, with the updated \fBnb_cfg\fR\[char46] This process in turn updates the physical flows installed in the chassis\(cqs Open vSwitch instances\[char46] When it receives confirmation from Open vSwitch that the physical flows have been updated, it updates \fBnb_cfg\fR in its own \fBChassis\fR record in the southbound database\[char46]
+.IP 5. .4in
+\fBovn\-northd\fR monitors the \fBnb_cfg\fR column in all of the \fBChassis\fR records in the southbound database\[char46] It keeps track of the minimum value among all the records and copies it into the \fBhv_cfg\fR column in the northbound \fBNB_Global\fR table\[char46] (Thus, the CMS or another observer can determine when all of the hypervisors have caught up to the northbound configuration\[char46])
+.RE
+.SS "Chassis Setup"
+.PP
+.PP
+Each chassis in an OVN deployment must be configured with an Open vSwitch bridge dedicated for OVN\(cqs use, called the \fIintegration bridge\fR\[char46] System startup scripts may create this bridge prior to starting \fBovn\-controller\fR if desired\[char46] If this bridge does not exist when ovn-controller starts, it will be created automatically with the default configuration suggested below\[char46] The ports on the integration bridge include:
+.RS
+.IP \(bu
+On any chassis, tunnel ports that OVN uses to maintain logical network connectivity\[char46] \fBovn\-controller\fR adds, updates, and removes these tunnel ports\[char46]
+.IP \(bu
+On a hypervisor, any VIFs that are to be attached to logical networks\[char46] For instances connected through software emulated ports such as TUN/TAP or VETH pairs, the hypervisor itself will normally create ports and plug them into the integration bridge\[char46] For instances connected through representor ports, typically used with hardware offload, the \fBovn\-controller\fR may on CMS direction consult a VIF plug provider for representor port lookup and plug them into the integration bridge (please refer to \fBDocumentation/topics/vif\-plug\-providers/vif\-plug\-providers\[char46]rst
+\fR for more information)\[char46] In both cases the conventions described in \fBDocumentation/topics/integration\[char46]rst\fR in the Open vSwitch source tree is followed to ensure mapping between OVN logical port and VIF\[char46] (This is pre-existing integration work that has already been done on hypervisors that support OVS\[char46])
+.IP \(bu
+On a gateway, the physical port used for logical network connectivity\[char46] System startup scripts add this port to the bridge prior to starting \fBovn\-controller\fR\[char46] This can be a patch port to another bridge, instead of a physical port, in more sophisticated setups\[char46]
+.RE
+.PP
+.PP
+Other ports should not be attached to the integration bridge\[char46] In particular, physical ports attached to the underlay network (as opposed to gateway ports, which are physical ports attached to logical networks) must not be attached to the integration bridge\[char46] Underlay physical ports should instead be attached to a separate Open vSwitch bridge (they need not be attached to any bridge at all, in fact)\[char46]
+.PP
+.PP
+The integration bridge should be configured as described below\[char46] The effect of each of these settings is documented in \fBovs\-vswitchd\[char46]conf\[char46]db\fR(5):
+.RS
+.TP
+\fBfail\-mode=secure\fR
+Avoids switching packets between isolated logical networks before \fBovn\-controller\fR starts up\[char46] See \fBController Failure
+Settings\fR in \fBovs\-vsctl\fR(8) for more information\[char46]
+.TP
+\fBother\-config:disable\-in\-band=true\fR
+Suppresses in-band control flows for the integration bridge\[char46] It would be unusual for such flows to show up anyway, because OVN uses a local controller (over a Unix domain socket) instead of a remote controller\[char46] It\(cqs possible, however, for some other bridge in the same system to have an in-band remote controller, and in that case this suppresses the flows that in-band control would ordinarily set up\[char46] Refer to the documentation for more information\[char46]
+.RE
+.PP
+.PP
+The customary name for the integration bridge is \fBbr\-int\fR, but another name may be used\[char46]
+.SS "Logical Networks"
+.PP
+.PP
+Logical network concepts in OVN include \fIlogical switches\fR and \fIlogical routers\fR, the logical version of Ethernet switches and IP routers, respectively\[char46] Like their physical cousins, logical switches and routers can be connected into sophisticated topologies\[char46] Logical switches and routers are ordinarily purely logical entities, that is, they are not associated or bound to any physical location, and they are implemented in a distributed manner at each hypervisor that participates in OVN\[char46]
+.PP
+.PP
+\fILogical switch ports\fR (LSPs) are points of connectivity into and out of logical switches\[char46] There are many kinds of logical switch ports\[char46] The most ordinary kind represent VIFs, that is, attachment points for VMs or containers\[char46] A VIF logical port is associated with the physical location of its VM, which might change as the VM migrates\[char46] (A VIF logical port can be associated with a VM that is powered down or suspended\[char46] Such a logical port has no location and no connectivity\[char46])
+.PP
+.PP
+\fILogical router ports\fR (LRPs) are points of connectivity into and out of logical routers\[char46] A LRP connects a logical router either to a logical switch or to another logical router\[char46] Logical routers only connect to VMs, containers, and other network nodes indirectly, through logical switches\[char46]
+.PP
+.PP
+Logical switches and logical routers have distinct kinds of logical ports, so properly speaking one should usually talk about logical switch ports or logical router ports\[char46] However, an unqualified ``logical port\(cq\(cq usually refers to a logical switch port\[char46]
+.PP
+.PP
+When a VM sends a packet to a VIF logical switch port, the Open vSwitch flow tables simulate the packet\(cqs journey through that logical switch and any other logical routers and logical switches that it might encounter\[char46] This happens without transmitting the packet across any physical medium: the flow tables implement all of the switching and routing decisions and behavior\[char46] If the flow tables ultimately decide to output the packet at a logical port attached to another hypervisor (or another kind of transport node), then that is the time at which the packet is encapsulated for physical network transmission and sent\[char46]
+.ST "Logical Switch Port Types"
+.PP
+.PP
+OVN supports a number of kinds of logical switch ports\[char46] VIF ports that connect to VMs or containers, described above, are the most ordinary kind of LSP\[char46] In the OVN northbound database, VIF ports have an empty string for their \fBtype\fR\[char46] This section describes some of the additional port types\[char46]
+.PP
+.PP
+A \fBrouter\fR logical switch port connects a logical switch to a logical router, designating a particular LRP as its peer\[char46]
+.PP
+.PP
+A \fBlocalnet\fR logical switch port bridges a logical switch to a physical VLAN\[char46] A logical switch may have one or more \fBlocalnet\fR ports\[char46] Such a logical switch is used in two scenarios:
+.RS
+.IP \(bu
+With one or more \fBrouter\fR logical switch ports, to attach L3 gateway routers and distributed gateways to a physical network\[char46]
+.IP \(bu
+With one or more VIF logical switch ports, to attach VMs or containers directly to a physical network\[char46] In this case, the logical switch is not really logical, since it is bridged to the physical network rather than insulated from it, and therefore cannot have independent but overlapping IP address namespaces, etc\[char46] A deployment might nevertheless choose such a configuration to take advantage of the OVN control plane and features such as port security and ACLs\[char46]
+.RE
+.PP
+.PP
+When a logical switch contains multiple \fBlocalnet\fR ports, the following is assumed\[char46]
+.RS
+.IP \(bu
+Each chassis has a bridge mapping for one of the \fBlocalnet\fR physical networks only\[char46]
+.IP \(bu
+To facilitate interconnectivity between VIF ports of the switch that are located on different chassis with different physical network connectivity, the fabric implements L3 routing between these adjacent physical network segments\[char46]
+.RE
+.PP
+.PP
+Note: nothing said above implies that a chassis cannot be plugged to multiple physical networks as long as they belong to different switches\[char46]
+.PP
+.PP
+A \fBlocalport\fR logical switch port is a special kind of VIF logical switch port\[char46] These ports are present in every chassis, not bound to any particular one\[char46] Traffic to such a port will never be forwarded through a tunnel, and traffic from such a port is expected to be destined only to the same chassis, typically in response to a request it received\[char46] OpenStack Neutron uses a \fBlocalport\fR port to serve metadata to VMs\[char46] A metadata proxy process is attached to this port on every host and all VMs within the same network will reach it at the same IP/MAC address without any traffic being sent over a tunnel\[char46] For further details, see the OpenStack documentation for networking-ovn\[char46]
+.PP
+.PP
+LSP types \fBvtep\fR and \fBl2gateway\fR are used for gateways\[char46] See \fBGateways\fR, below, for more information\[char46]
+.ST "Implementation Details"
+.PP
+.PP
+These concepts are details of how OVN is implemented internally\[char46] They might still be of interest to users and administrators\[char46]
+.PP
+.PP
+\fILogical datapaths\fR are an implementation detail of logical networks in the OVN southbound database\[char46] \fBovn\-northd\fR translates each logical switch or router in the northbound database into a logical datapath in the southbound database \fBDatapath_Binding\fR table\[char46]
+.PP
+.PP
+For the most part, \fBovn\-northd\fR also translates each logical switch port in the OVN northbound database into a record in the southbound database \fBPort_Binding\fR table\[char46] The latter table corresponds roughly to the northbound \fBLogical_Switch_Port\fR table\[char46] It has multiple types of logical port bindings, of which many types correspond directly to northbound LSP types\[char46] LSP types handled this way include VIF (empty string), \fBlocalnet\fR, \fBlocalport\fR, \fBvtep\fR, and \fBl2gateway\fR\[char46]
+.PP
+.PP
+The \fBPort_Binding\fR table has some types of port binding that do not correspond directly to logical switch port types\[char46] The common is \fBpatch\fR port bindings, known as \fIlogical patch ports\fR\[char46] These port bindings always occur in pairs, and a packet that enters on either side comes out on the other\[char46] \fBovn\-northd\fR connects logical switches and logical routers together using logical patch ports\[char46]
+.PP
+.PP
+Port bindings with types \fBvtep\fR, \fBl2gateway\fR, \fBl3gateway\fR, and \fBchassisredirect\fR are used for gateways\[char46] These are explained in \fBGateways\fR, below\[char46]
+.SS "Gateways"
+.PP
+.PP
+Gateways provide limited connectivity between logical networks and physical ones\[char46] They can also provide connectivity between different OVN deployments\[char46] This section will focus on the former, and the latter will be described in details in section \fBOVN Deployments Interconnection\fR\[char46]
+.PP
+.PP
+OVN support multiple kinds of gateways\[char46]
+.ST "VTEP Gateways"
+.PP
+.PP
+A ``VTEP gateway\(cq\(cq connects an OVN logical network to a physical (or virtual) switch that implements the OVSDB VTEP schema that accompanies Open vSwitch\[char46] (The ``VTEP gateway\(cq\(cq term is a misnomer, since a VTEP is just a VXLAN Tunnel Endpoint, but it is a well established name\[char46]) See \fBLife
+Cycle of a VTEP gateway\fR, below, for more information\[char46]
+.PP
+.PP
+The main intended use case for VTEP gateways is to attach physical servers to an OVN logical network using a physical top-of-rack switch that supports the OVSDB VTEP schema\[char46]
+.ST "L2 Gateways"
+.PP
+.PP
+A L2 gateway simply attaches a designated physical L2 segment available on some chassis to a logical network\[char46] The physical network effectively becomes part of the logical network\[char46]
+.PP
+.PP
+To set up a L2 gateway, the CMS adds an \fBl2gateway\fR LSP to an appropriate logical switch, setting LSP options to name the chassis on which it should be bound\[char46] \fBovn\-northd\fR copies this configuration into a southbound \fBPort_Binding\fR record\[char46] On the designated chassis, \fBovn\-controller\fR forwards packets appropriately to and from the physical segment\[char46]
+.PP
+.PP
+L2 gateway ports have features in common with \fBlocalnet\fR ports\[char46] However, with a \fBlocalnet\fR port, the physical network becomes the transport between hypervisors\[char46] With an L2 gateway, packets are still transported between hypervisors over tunnels and the \fBl2gateway\fR port is only used for the packets that are on the physical network\[char46] The application for L2 gateways is similar to that for VTEP gateways, e\[char46]g\[char46] to add non-virtualized machines to a logical network, but L2 gateways do not require special support from top-of-rack hardware switches\[char46]
+.ST "L3 Gateway Routers"
+.PP
+.PP
+As described above under \fBLogical Networks\fR, ordinary OVN logical routers are distributed: they are not implemented in a single place but rather in every hypervisor chassis\[char46] This is a problem for stateful services such as SNAT and DNAT, which need to be implemented in a centralized manner\[char46]
+.PP
+.PP
+To allow for this kind of functionality, OVN supports L3 gateway routers, which are OVN logical routers that are implemented in a designated chassis\[char46] Gateway routers are typically used between distributed logical routers and physical networks\[char46] The distributed logical router and the logical switches behind it, to which VMs and containers attach, effectively reside on each hypervisor\[char46] The distributed router and the gateway router are connected by another logical switch, sometimes referred to as a ``join\(cq\(cq logical switch\[char46] (OVN logical routers may be connected to one another directly, without an intervening switch, but the OVN implementation only supports gateway logical routers that are connected to logical switches\[char46] Using a join logical switch also reduces the number of IP addresses needed on the distributed router\[char46]) On the other side, the gateway router connects to another logical switch that has a \fBlocalnet\fR port connecting to the physical network\[char46]
+.PP
+.PP
+The following diagram shows a typical situation\[char46] One or more logical switches LS1, \[char46]\[char46]\[char46], LSn connect to distributed logical router LR1, which in turn connects through LSjoin to gateway logical router GLR, which also connects to logical switch LSlocal, which includes a \fBlocalnet\fR port to attach to the physical network\[char46]
+.PP
+.nf
+\fL
+.br
+\fL                                LSlocal
+.br
+\fL                                   |
+.br
+\fL                                  GLR
+.br
+\fL                                   |
+.br
+\fL                                LSjoin
+.br
+\fL                                   |
+.br
+\fL                                  LR1
+.br
+\fL                                   |
+.br
+\fL                              +\-\-\-\-+\-\-\-\-+
+.br
+\fL                              |    |    |
+.br
+\fL                             LS1  \[char46]\[char46]\[char46]  LSn
+.br
+\fL  \fR
+.fi
+.PP
+.PP
+To configure an L3 gateway router, the CMS sets \fBoptions:chassis\fR in the router\(cqs northbound \fBLogical_Router\fR to the chassis\(cqs name\[char46] In response, \fBovn\-northd\fR uses a special \fBl3gateway\fR port binding (instead of a \fBpatch\fR binding) in the southbound database to connect the logical router to its neighbors\[char46] In turn, \fBovn\-controller\fR tunnels packets to this port binding to the designated L3 gateway chassis, instead of processing them locally\[char46]
+.PP
+.PP
+DNAT and SNAT rules may be associated with a gateway router, which provides a central location that can handle one-to-many SNAT (aka IP masquerading)\[char46] Distributed gateway ports, described below, also support NAT\[char46]
+.ST "Distributed Gateway Ports"
+.PP
+.PP
+A \fIdistributed gateway port\fR is a logical router port that is specially configured to designate one distinguished chassis, called the \fIgateway chassis\fR, for centralized processing\[char46] A distributed gateway port should connect to a logical switch that has an LSP that connects externally, that is, either a \fBlocalnet\fR LSP or a connection to another OVN deployment (see \fBOVN Deployments
+Interconnection\fR)\[char46] Packets that traverse the distributed gateway port are processed without involving the gateway chassis when they can be, but when needed they do take an extra hop through it\[char46]
+.PP
+.PP
+The following diagram illustrates the use of a distributed gateway port\[char46] A number of logical switches LS1, \[char46]\[char46]\[char46], LSn connect to distributed logical router LR1, which in turn connects through the distributed gateway port to logical switch LSlocal that includes a \fBlocalnet\fR port to attach to the physical network\[char46]
+.PP
+.nf
+\fL
+.br
+\fL                                LSlocal
+.br
+\fL                                   |
+.br
+\fL                                  LR1
+.br
+\fL                                   |
+.br
+\fL                              +\-\-\-\-+\-\-\-\-+
+.br
+\fL                              |    |    |
+.br
+\fL                             LS1  \[char46]\[char46]\[char46]  LSn
+.br
+\fL  \fR
+.fi
+.PP
+.PP
+\fBovn\-northd\fR creates two southbound \fBPort_Binding\fR records to represent a distributed gateway port, instead of the usual one\[char46] One of these is a \fBpatch\fR port binding named for the LRP, which is used for as much traffic as it can\[char46] The other one is a port binding with type \fBchassisredirect\fR, named \fBcr\-\fIport\fB\fR\[char46] The \fBchassisredirect\fR port binding has one specialized job: when a packet is output to it, the flow table causes it to be tunneled to the gateway chassis, at which point it is automatically output to the \fBpatch\fR port binding\[char46] Thus, the flow table can output to this port binding in cases where a particular task has to happen on the gateway chassis\[char46] The \fBchassisredirect\fR port binding is not otherwise used (for example, it never receives packets)\[char46]
+.PP
+.PP
+The CMS may configure distributed gateway ports three different ways\[char46] See \fBDistributed Gateway Ports\fR in the documentation for \fBLogical_Router_Port\fR in \fBovn\-nb\fR(5) for details\[char46]
+.PP
+.PP
+Distributed gateway ports support high availability\[char46] When more than one chassis is specified, OVN only uses one at a time as the gateway chassis\[char46] OVN uses BFD to monitor gateway connectivity, preferring the highest-priority gateway that is online\[char46]
+.PP
+.PP
+A logical router can have multiple distributed gateway ports, each connecting different external networks\[char46] Load balancing is not yet supported for logical routers with more than one distributed gateway port configured\[char46]
+.SU "Physical VLAN MTU Issues"
+.PP
+.PP
+Consider the preceding diagram again:
+.PP
+.nf
+\fL
+.br
+\fL                                LSlocal
+.br
+\fL                                   |
+.br
+\fL                                  LR1
+.br
+\fL                                   |
+.br
+\fL                              +\-\-\-\-+\-\-\-\-+
+.br
+\fL                              |    |    |
+.br
+\fL                             LS1  \[char46]\[char46]\[char46]  LSn
+.br
+\fL  \fR
+.fi
+.PP
+.PP
+Suppose that each logical switch LS1, \[char46]\[char46]\[char46], LSn is bridged to a physical VLAN-tagged network attached to a \fBlocalnet\fR port on LSlocal, over a distributed gateway port on LR1\[char46] If a packet originating on LS\fIi\fR is destined to the external network, OVN sends it to the gateway chassis over a tunnel\[char46] There, the packet traverses LR1\(cqs logical router pipeline, possibly undergoes NAT, and eventually ends up at LSlocal\(cqs \fBlocalnet\fR port\[char46] If all of the physical links in the network have the same MTU, then the packet\(cqs transit across a tunnel causes an MTU problem: tunnel overhead prevents a packet that uses the full physical MTU from crossing the tunnel to the gateway chassis (without fragmentation)\[char46]
+.PP
+.PP
+OVN offers two solutions to this problem, the \fBreside\-on\-redirect\-chassis\fR and \fBredirect\-type\fR options\[char46] Both solutions require each logical switch LS1, \[char46]\[char46]\[char46], LSn to include a \fBlocalnet\fR logical switch port LN1, \[char46]\[char46]\[char46], LNn respectively, that is present on each chassis\[char46] Both cause packets to be sent over the \fBlocalnet\fR ports instead of tunnels\[char46] They differ in which packets\-some or all\-are sent this way\[char46] The most prominent tradeoff between these options is that \fBreside\-on\-redirect\-chassis\fR is easier to configure and that \fBredirect\-type\fR performs better for east-west traffic\[char46]
+.PP
+.PP
+The first solution is the \fBreside\-on\-redirect\-chassis\fR option for logical router ports\[char46] Setting this option on a LRP from (e\[char46]g\[char46]) LS1 to LR1 disables forwarding from LS1 to LR1 except on the gateway chassis\[char46] On chassis other than the gateway chassis, this single change means that packets that would otherwise have been forwarded to LR1 are instead forwarded to LN1\[char46] The instance of LN1 on the gateway chassis then receives the packet and forwards it to LR1\[char46] The packet traverses the LR1 logical router pipeline, possibly undergoes NAT, and eventually ends up at LSlocal\(cqs \fBlocalnet\fR port\[char46] The packet never traverses a tunnel, avoiding the MTU issue\[char46]
+.PP
+.PP
+This option has the further consequence of centralizing ``distributed\(cq\(cq logical router LR1, since no packets are forwarded from LS1 to LR1 on any chassis other than the gateway chassis\[char46] Therefore, east-west traffic passes through the gateway chassis, not just north-south\[char46] (The naive ``fix\(cq\(cq of allowing east-west traffic to flow directly between chassis over LN1 does not work because routing sets the Ethernet source address to LR1\(cqs source address\[char46] Seeing this single Ethernet source address originate from all of the chassis will confuse the physical switch\[char46])
+.PP
+.PP
+Do not set the \fBreside\-on\-redirect\-chassis\fR option on a distributed gateway port\[char46] In the diagram above, it would be set on the LRPs connecting LS1, \[char46]\[char46]\[char46], LSn to LR1\[char46]
+.PP
+.PP
+The second solution is the \fBredirect\-type\fR option for distributed gateway ports\[char46] Setting this option to \fBbridged\fR causes packets that are redirected to the gateway chassis to go over the \fBlocalnet\fR ports instead of being tunneled\[char46] This option does not change how OVN treats packets not redirected to the gateway chassis\[char46]
+.PP
+.PP
+The \fBredirect\-type\fR option requires the administrator or the CMS to configure each participating chassis with a unique Ethernet address for the logical router by setting \fBovn\-chassis\-mac\-mappings\fR in the Open vSwitch database, for use by \fBovn\-controller\fR\[char46] This makes it more difficult to configure than \fBreside\-on\-redirect\-chassis\fR\[char46]
+.PP
+.PP
+Set the \fBredirect\-type\fR option on a distributed gateway port\[char46]
+.SU "Using Distributed Gateway Ports For Scalability"
+.PP
+.PP
+Although the primary goal of distributed gateway ports is to provide connectivity to external networks, there is a special use case for scalability\[char46]
+.PP
+.PP
+In some deployments, such as the ones using \fBovn\-kubernetes\fR, logical switches are bound to individual chassises, and are connected by a distributed logical router\[char46] In such deployments, the chassis level logical switches are centralized on the chassis instead of distributed, which means the \fBovn\-controller\fR on each chassis doesn\(cqt need to process flows and ports of logical switches on other chassises\[char46] However, without any specific hint, \fBovn\-controller\fR would still process all the logical switches as if they are fully distributed\[char46] In this case, distributed gateway port can be very useful\[char46] The chassis level logical switches can be connected to the distributed router using distributed gateway ports, by setting the gateway chassis (or HA chassis groups with only a single chassis in it) to the chassis that each logical switch is bound to\[char46] \fBovn\-controller\fR would then skip processing the logical switches on all the other chassises, largely improving the scalability, especially when there are a big number of chassises\[char46]
+.SS "Life Cycle of a VIF"
+.PP
+.PP
+Tables and their schemas presented in isolation are difficult to understand\[char46] Here\(cqs an example\[char46]
+.PP
+.PP
+A VIF on a hypervisor is a virtual network interface attached either to a VM or a container running directly on that hypervisor (This is different from the interface of a container running inside a VM)\[char46]
+.PP
+.PP
+The steps in this example refer often to details of the OVN and OVN Northbound database schemas\[char46] Please see \fBovn\-sb\fR(5) and \fBovn\-nb\fR(5), respectively, for the full story on these databases\[char46]
+.RS
+.IP 1. .4in
+A VIF\(cqs life cycle begins when a CMS administrator creates a new VIF using the CMS user interface or API and adds it to a switch (one implemented by OVN as a logical switch)\[char46] The CMS updates its own configuration\[char46] This includes associating unique, persistent identifier \fIvif-id\fR and Ethernet address \fImac\fR with the VIF\[char46]
+.IP 2. .4in
+The CMS plugin updates the OVN Northbound database to include the new VIF, by adding a row to the \fBLogical_Switch_Port\fR table\[char46] In the new row, \fBname\fR is \fIvif-id\fR, \fBmac\fR is \fImac\fR, \fBswitch\fR points to the OVN logical switch\(cqs Logical_Switch record, and other columns are initialized appropriately\[char46]
+.IP 3. .4in
+\fBovn\-northd\fR receives the OVN Northbound database update\[char46] In turn, it makes the corresponding updates to the OVN Southbound database, by adding rows to the OVN Southbound database \fBLogical_Flow\fR table to reflect the new port, e\[char46]g\[char46] add a flow to recognize that packets destined to the new port\(cqs MAC address should be delivered to it, and update the flow that delivers broadcast and multicast packets to include the new port\[char46] It also creates a record in the \fBBinding\fR table and populates all its columns except the column that identifies the \fBchassis\fR\[char46]
+.IP 4. .4in
+On every hypervisor, \fBovn\-controller\fR receives the \fBLogical_Flow\fR table updates that \fBovn\-northd\fR made in the previous step\[char46] As long as the VM that owns the VIF is powered off, \fBovn\-controller\fR cannot do much; it cannot, for example, arrange to send packets to or receive packets from the VIF, because the VIF does not actually exist anywhere\[char46]
+.IP 5. .4in
+Eventually, a user powers on the VM that owns the VIF\[char46] On the hypervisor where the VM is powered on, the integration between the hypervisor and Open vSwitch (described in \fBDocumentation/topics/integration\[char46]rst\fR in the Open vSwitch source tree) adds the VIF to the OVN integration bridge and stores \fIvif-id\fR in \fBexternal_ids\fR:\fBiface\-id\fR to indicate that the interface is an instantiation of the new VIF\[char46] (None of this code is new in OVN; this is pre-existing integration work that has already been done on hypervisors that support OVS\[char46])
+.IP 6. .4in
+On the hypervisor where the VM is powered on, \fBovn\-controller\fR notices \fBexternal_ids\fR:\fBiface\-id\fR in the new Interface\[char46] In response, in the OVN Southbound DB, it updates the \fBBinding\fR table\(cqs \fBchassis\fR column for the row that links the logical port from \fBexternal_ids\fR:\fB
+iface\-id\fR to the hypervisor\[char46] Afterward, \fBovn\-controller\fR updates the local hypervisor\(cqs OpenFlow tables so that packets to and from the VIF are properly handled\[char46]
+.IP 7. .4in
+Some CMS systems, including OpenStack, fully start a VM only when its networking is ready\[char46] To support this, \fBovn\-northd\fR notices the \fBchassis\fR column updated for the row in \fBBinding\fR table and pushes this upward by updating the \fBup\fR column in the OVN Northbound database\(cqs \fBLogical_Switch_Port\fR table to indicate that the VIF is now up\[char46] The CMS, if it uses this feature, can then react by allowing the VM\(cqs execution to proceed\[char46]
+.IP 8. .4in
+On every hypervisor but the one where the VIF resides, \fBovn\-controller\fR notices the completely populated row in the \fBBinding\fR table\[char46] This provides \fBovn\-controller\fR the physical location of the logical port, so each instance updates the OpenFlow tables of its switch (based on logical datapath flows in the OVN DB \fBLogical_Flow\fR table) so that packets to and from the VIF can be properly handled via tunnels\[char46]
+.IP 9. .4in
+Eventually, a user powers off the VM that owns the VIF\[char46] On the hypervisor where the VM was powered off, the VIF is deleted from the OVN integration bridge\[char46]
+.IP 10. .4in
+On the hypervisor where the VM was powered off, \fBovn\-controller\fR notices that the VIF was deleted\[char46] In response, it removes the \fBChassis\fR column content in the \fBBinding\fR table for the logical port\[char46]
+.IP 11. .4in
+On every hypervisor, \fBovn\-controller\fR notices the empty \fBChassis\fR column in the \fBBinding\fR table\(cqs row for the logical port\[char46] This means that \fBovn\-controller\fR no longer knows the physical location of the logical port, so each instance updates its OpenFlow table to reflect that\[char46]
+.IP 12. .4in
+Eventually, when the VIF (or its entire VM) is no longer needed by anyone, an administrator deletes the VIF using the CMS user interface or API\[char46] The CMS updates its own configuration\[char46]
+.IP 13. .4in
+The CMS plugin removes the VIF from the OVN Northbound database, by deleting its row in the \fBLogical_Switch_Port\fR table\[char46]
+.IP 14. .4in
+\fBovn\-northd\fR receives the OVN Northbound update and in turn updates the OVN Southbound database accordingly, by removing or updating the rows from the OVN Southbound database \fBLogical_Flow\fR table and \fBBinding\fR table that were related to the now-destroyed VIF\[char46]
+.IP 15. .4in
+On every hypervisor, \fBovn\-controller\fR receives the \fBLogical_Flow\fR table updates that \fBovn\-northd\fR made in the previous step\[char46] \fBovn\-controller\fR updates OpenFlow tables to reflect the update, although there may not be much to do, since the VIF had already become unreachable when it was removed from the \fBBinding\fR table in a previous step\[char46]
+.RE
+.SS "Life Cycle of a Container Interface Inside a VM"
+.PP
+.PP
+OVN provides virtual network abstractions by converting information written in OVN_NB database to OpenFlow flows in each hypervisor\[char46] Secure virtual networking for multi-tenants can only be provided if OVN controller is the only entity that can modify flows in Open vSwitch\[char46] When the Open vSwitch integration bridge resides in the hypervisor, it is a fair assumption to make that tenant workloads running inside VMs cannot make any changes to Open vSwitch flows\[char46]
+.PP
+.PP
+If the infrastructure provider trusts the applications inside the containers not to break out and modify the Open vSwitch flows, then containers can be run in hypervisors\[char46] This is also the case when containers are run inside the VMs and Open vSwitch integration bridge with flows added by OVN controller resides in the same VM\[char46] For both the above cases, the workflow is the same as explained with an example in the previous section (\(dqLife Cycle of a VIF\(dq)\[char46]
+.PP
+.PP
+This section talks about the life cycle of a container interface (CIF) when containers are created in the VMs and the Open vSwitch integration bridge resides inside the hypervisor\[char46] In this case, even if a container application breaks out, other tenants are not affected because the containers running inside the VMs cannot modify the flows in the Open vSwitch integration bridge\[char46]
+.PP
+.PP
+When multiple containers are created inside a VM, there are multiple CIFs associated with them\[char46] The network traffic associated with these CIFs need to reach the Open vSwitch integration bridge running in the hypervisor for OVN to support virtual network abstractions\[char46] OVN should also be able to distinguish network traffic coming from different CIFs\[char46] There are two ways to distinguish network traffic of CIFs\[char46]
+.PP
+.PP
+One way is to provide one VIF for every CIF (1:1 model)\[char46] This means that there could be a lot of network devices in the hypervisor\[char46] This would slow down OVS because of all the additional CPU cycles needed for the management of all the VIFs\[char46] It would also mean that the entity creating the containers in a VM should also be able to create the corresponding VIFs in the hypervisor\[char46]
+.PP
+.PP
+The second way is to provide a single VIF for all the CIFs (1:many model)\[char46] OVN could then distinguish network traffic coming from different CIFs via a tag written in every packet\[char46] OVN uses this mechanism and uses VLAN as the tagging mechanism\[char46]
+.RS
+.IP 1. .4in
+A CIF\(cqs life cycle begins when a container is spawned inside a VM by the either the same CMS that created the VM or a tenant that owns that VM or even a container Orchestration System that is different than the CMS that initially created the VM\[char46] Whoever the entity is, it will need to know the \fIvif-id\fR that is associated with the network interface of the VM through which the container interface\(cqs network traffic is expected to go through\[char46] The entity that creates the container interface will also need to choose an unused VLAN inside that VM\[char46]
+.IP 2. .4in
+The container spawning entity (either directly or through the CMS that manages the underlying infrastructure) updates the OVN Northbound database to include the new CIF, by adding a row to the \fBLogical_Switch_Port\fR table\[char46] In the new row, \fBname\fR is any unique identifier, \fBparent_name\fR is the \fIvif-id\fR of the VM through which the CIF\(cqs network traffic is expected to go through and the \fBtag\fR is the VLAN tag that identifies the network traffic of that CIF\[char46]
+.IP 3. .4in
+\fBovn\-northd\fR receives the OVN Northbound database update\[char46] In turn, it makes the corresponding updates to the OVN Southbound database, by adding rows to the OVN Southbound database\(cqs \fBLogical_Flow\fR table to reflect the new port and also by creating a new row in the \fBBinding\fR table and populating all its columns except the column that identifies the \fBchassis\fR\[char46]
+.IP 4. .4in
+On every hypervisor, \fBovn\-controller\fR subscribes to the changes in the \fBBinding\fR table\[char46] When a new row is created by \fBovn\-northd\fR that includes a value in \fBparent_port\fR column of \fBBinding\fR table, the \fBovn\-controller\fR in the hypervisor whose OVN integration bridge has that same value in \fIvif-id\fR in \fBexternal_ids\fR:\fBiface\-id\fR updates the local hypervisor\(cqs OpenFlow tables so that packets to and from the VIF with the particular VLAN \fBtag\fR are properly handled\[char46] Afterward it updates the \fBchassis\fR column of the \fBBinding\fR to reflect the physical location\[char46]
+.IP 5. .4in
+One can only start the application inside the container after the underlying network is ready\[char46] To support this, \fBovn\-northd\fR notices the updated \fBchassis\fR column in \fBBinding\fR table and updates the \fBup\fR column in the OVN Northbound database\(cqs \fBLogical_Switch_Port\fR table to indicate that the CIF is now up\[char46] The entity responsible to start the container application queries this value and starts the application\[char46]
+.IP 6. .4in
+Eventually the entity that created and started the container, stops it\[char46] The entity, through the CMS (or directly) deletes its row in the \fBLogical_Switch_Port\fR table\[char46]
+.IP 7. .4in
+\fBovn\-northd\fR receives the OVN Northbound update and in turn updates the OVN Southbound database accordingly, by removing or updating the rows from the OVN Southbound database \fBLogical_Flow\fR table that were related to the now-destroyed CIF\[char46] It also deletes the row in the \fBBinding\fR table for that CIF\[char46]
+.IP 8. .4in
+On every hypervisor, \fBovn\-controller\fR receives the \fBLogical_Flow\fR table updates that \fBovn\-northd\fR made in the previous step\[char46] \fBovn\-controller\fR updates OpenFlow tables to reflect the update\[char46]
+.RE
+.SS "Architectural Physical Life Cycle of a Packet"
+.PP
+.PP
+This section describes how a packet travels from one virtual machine or container to another through OVN\[char46] This description focuses on the physical treatment of a packet; for a description of the logical life cycle of a packet, please refer to the \fBLogical_Flow\fR table in \fBovn\-sb\fR(5)\[char46]
+.PP
+.PP
+This section mentions several data and metadata fields, for clarity summarized here:
+.RS
+.TP
+tunnel key
+When OVN encapsulates a packet in Geneve or another tunnel, it attaches extra data to it to allow the receiving OVN instance to process it correctly\[char46] This takes different forms depending on the particular encapsulation, but in each case we refer to it here as the ``tunnel key\[char46]\(cq\(cq See \fBTunnel Encapsulations\fR, below, for details\[char46]
+.TP
+logical datapath field
+A field that denotes the logical datapath through which a packet is being processed\[char46] OVN uses the field that OpenFlow 1\[char46]1+ simply (and confusingly) calls ``metadata\(cq\(cq to store the logical datapath\[char46] (This field is passed across tunnels as part of the tunnel key\[char46])
+.TP
+logical input port field
+A field that denotes the logical port from which the packet entered the logical datapath\[char46] OVN stores this in Open vSwitch extension register number 14\[char46]
+.IP
+Geneve and STT tunnels pass this field as part of the tunnel key\[char46] Ramp switch VXLAN tunnels do not explicitly carry a logical input port, but since they are used to communicate with gateways that from OVN\(cqs perspective consist of only a single logical port, so that OVN can set the logical input port field to this one on ingress to the OVN logical pipeline\[char46] As for regular VXLAN tunnels, they don\(cqt carry input port field at all\[char46] This puts additional limitations on cluster capabilities that are described in \fBTunnel Encapsulations\fR section\[char46]
+.TP
+logical output port field
+A field that denotes the logical port from which the packet will leave the logical datapath\[char46] This is initialized to 0 at the beginning of the logical ingress pipeline\[char46] OVN stores this in Open vSwitch extension register number 15\[char46]
+.IP
+Geneve, STT and regular VXLAN tunnels pass this field as part of the tunnel key\[char46] Ramp switch VXLAN tunnels do not transmit the logical output port field, and since they do not carry a logical output port field in the tunnel key, when a packet is received from ramp switch VXLAN tunnel by an OVN hypervisor, the packet is resubmitted to table 8 to determine the output port(s); when the packet reaches table 39, these packets are resubmitted to table 40 for local delivery by checking a MLF_RCV_FROM_RAMP flag, which is set when the packet arrives from a ramp tunnel\[char46]
+.TP
+conntrack zone field for logical ports
+A field that denotes the connection tracking zone for logical ports\[char46] The value only has local significance and is not meaningful between chassis\[char46] This is initialized to 0 at the beginning of the logical ingress pipeline\[char46] OVN stores this in Open vSwitch extension register number 13\[char46]
+.TP
+conntrack zone fields for routers
+Fields that denote the connection tracking zones for routers\[char46] These values only have local significance and are not meaningful between chassis\[char46] OVN stores the zone information for north to south traffic (for DNATting or ECMP symmetric replies) in Open vSwitch extension register number 11 and zone information for south to north traffic (for SNATing) in Open vSwitch extension register number 12\[char46]
+.TP
+logical flow flags
+The logical flags are intended to handle keeping context between tables in order to decide which rules in subsequent tables are matched\[char46] These values only have local significance and are not meaningful between chassis\[char46] OVN stores the logical flags in Open vSwitch extension register number 10\[char46]
+.TP
+VLAN ID
+The VLAN ID is used as an interface between OVN and containers nested inside a VM (see \fBLife Cycle of a container interface inside a
+VM\fR, above, for more information)\[char46]
+.RE
+.PP
+.PP
+Initially, a VM or container on the ingress hypervisor sends a packet on a port attached to the OVN integration bridge\[char46] Then:
+.RS
+.IP 1. .4in
+OpenFlow table 0 performs physical-to-logical translation\[char46] It matches the packet\(cqs ingress port\[char46] Its actions annotate the packet with logical metadata, by setting the logical datapath field to identify the logical datapath that the packet is traversing and the logical input port field to identify the ingress port\[char46] Then it resubmits to table 8 to enter the logical ingress pipeline\[char46]
+.IP
+Packets that originate from a container nested within a VM are treated in a slightly different way\[char46] The originating container can be distinguished based on the VIF-specific VLAN ID, so the physical-to-logical translation flows additionally match on VLAN ID and the actions strip the VLAN header\[char46] Following this step, OVN treats packets from containers just like any other packets\[char46]
+.IP
+Table 0 also processes packets that arrive from other chassis\[char46] It distinguishes them from other packets by ingress port, which is a tunnel\[char46] As with packets just entering the OVN pipeline, the actions annotate these packets with logical datapath metadata\[char46] For tunnel types that support it, they are also annotated with logical ingress port metadata\[char46] In addition, the actions set the logical output port field, which is available because in OVN tunneling occurs after the logical output port is known\[char46] These pieces of information are obtained from the tunnel encapsulation metadata (see \fBTunnel
+Encapsulations\fR for encoding details)\[char46] Then the actions resubmit to table 38 to enter the logical egress pipeline\[char46]
+.IP 2. .4in
+OpenFlow tables 8 through 31 execute the logical ingress pipeline from the \fBLogical_Flow\fR table in the OVN Southbound database\[char46] These tables are expressed entirely in terms of logical concepts like logical ports and logical datapaths\[char46] A big part of \fBovn\-controller\fR\(cqs job is to translate them into equivalent OpenFlow (in particular it translates the table numbers: \fBLogical_Flow\fR tables 0 through 23 become OpenFlow tables 8 through 31)\[char46]
+.IP
+Each logical flow maps to one or more OpenFlow flows\[char46] An actual packet ordinarily matches only one of these, although in some cases it can match more than one of these flows (which is not a problem because all of them have the same actions)\[char46] \fBovn\-controller\fR uses the first 32 bits of the logical flow\(cqs UUID as the cookie for its OpenFlow flow or flows\[char46] (This is not necessarily unique, since the first 32 bits of a logical flow\(cqs UUID is not necessarily unique\[char46])
+.IP
+Some logical flows can map to the Open vSwitch ``conjunctive match\(cq\(cq extension (see \fBovs\-fields\fR(7))\[char46] Flows with a \fBconjunction\fR action use an OpenFlow cookie of 0, because they can correspond to multiple logical flows\[char46] The OpenFlow flow for a conjunctive match includes a match on \fBconj_id\fR\[char46]
+.IP
+Some logical flows may not be represented in the OpenFlow tables on a given hypervisor, if they could not be used on that hypervisor\[char46] For example, if no VIF in a logical switch resides on a given hypervisor, and the logical switch is not otherwise reachable on that hypervisor (e\[char46]g\[char46] over a series of hops through logical switches and routers starting from a VIF on the hypervisor), then the logical flow may not be represented there\[char46]
+.IP
+Most OVN actions have fairly obvious implementations in OpenFlow (with OVS extensions), e\[char46]g\[char46] \fBnext;\fR is implemented as \fBresubmit\fR, \fB\fIfield\fB =
+\fIconstant\fB;\fR as \fBset_field\fR\[char46] A few are worth describing in more detail:
+.RS
+.TP
+\fBoutput:\fR
+Implemented by resubmitting the packet to table 37\[char46] If the pipeline executes more than one \fBoutput\fR action, then each one is separately resubmitted to table 37\[char46] This can be used to send multiple copies of the packet to multiple ports\[char46] (If the packet was not modified between the \fBoutput\fR actions, and some of the copies are destined to the same hypervisor, then using a logical multicast output port would save bandwidth between hypervisors\[char46])
+.TP
+\fBget_arp(\fIP\fB, \fIA\fB);\fR
+.TQ .5in
+\fBget_nd(\fIP\fB, \fIA\fB);\fR
+Implemented by storing arguments into OpenFlow fields, then resubmitting to table 66, which \fBovn\-controller\fR populates with flows generated from the \fBMAC_Binding\fR table in the OVN Southbound database\[char46] If there is a match in table 66, then its actions store the bound MAC in the Ethernet destination address field\[char46]
+.IP
+(The OpenFlow actions save and restore the OpenFlow fields used for the arguments, so that the OVN actions do not have to be aware of this temporary use\[char46])
+.TP
+\fBput_arp(\fIP\fB, \fIA\fB, \fIE\fB);\fR
+.TQ .5in
+\fBput_nd(\fIP\fB, \fIA\fB, \fIE\fB);\fR
+Implemented by storing the arguments into OpenFlow fields, then outputting a packet to \fBovn\-controller\fR, which updates the \fBMAC_Binding\fR table\[char46]
+.IP
+(The OpenFlow actions save and restore the OpenFlow fields used for the arguments, so that the OVN actions do not have to be aware of this temporary use\[char46])
+.TP
+\fB\fIR\fB = lookup_arp(\fIP\fB, \fIA\fB, \fIM\fB);\fR
+.TQ .5in
+\fB\fIR\fB = lookup_nd(\fIP\fB, \fIA\fB, \fIM\fB);\fR
+Implemented by storing arguments into OpenFlow fields, then resubmitting to table 67, which \fBovn\-controller\fR populates with flows generated from the \fBMAC_Binding\fR table in the OVN Southbound database\[char46] If there is a match in table 67, then its actions set the logical flow flag \fBMLF_LOOKUP_MAC\fR\[char46]
+.IP
+(The OpenFlow actions save and restore the OpenFlow fields used for the arguments, so that the OVN actions do not have to be aware of this temporary use\[char46])
+.RE
+.IP 3. .4in
+OpenFlow tables 37 through 41 implement the \fBoutput\fR action in the logical ingress pipeline\[char46] Specifically, table 37 serves as an entry point to egress pipeline\[char46] Table 37 detects IP packets that are too big for a corresponding interface\[char46] Table 38 produces ICMPv4 Fragmentation Needed (or ICMPv6 Too Big) errors and deliver them back to the offending port\[char46] table 39 handles packets to remote hypervisors, table 40 handles packets to the local hypervisor, and table 41 checks whether packets whose logical ingress and egress port are the same should be discarded\[char46]
+.IP
+Logical patch ports are a special case\[char46] Logical patch ports do not have a physical location and effectively reside on every hypervisor\[char46] Thus, flow table 40, for output to ports on the local hypervisor, naturally implements output to unicast logical patch ports too\[char46] However, applying the same logic to a logical patch port that is part of a logical multicast group yields packet duplication, because each hypervisor that contains a logical port in the multicast group will also output the packet to the logical patch port\[char46] Thus, multicast groups implement output to logical patch ports in table 39\[char46]
+.IP
+Each flow in table 39 matches on a logical output port for unicast or multicast logical ports that include a logical port on a remote hypervisor\[char46] Each flow\(cqs actions implement sending a packet to the port it matches\[char46] For unicast logical output ports on remote hypervisors, the actions set the tunnel key to the correct value, then send the packet on the tunnel port to the correct hypervisor\[char46] (When the remote hypervisor receives the packet, table 0 there will recognize it as a tunneled packet and pass it along to table 40\[char46]) For multicast logical output ports, the actions send one copy of the packet to each remote hypervisor, in the same way as for unicast destinations\[char46] If a multicast group includes a logical port or ports on the local hypervisor, then its actions also resubmit to table 40\[char46] Table 39 also includes:
+.RS
+.IP \(bu
+A higher-priority rule to match packets received from ramp switch tunnels, based on flag MLF_RCV_FROM_RAMP, and resubmit these packets to table 40 for local delivery\[char46] Packets received from ramp switch tunnels reach here because of a lack of logical output port field in the tunnel key and thus these packets needed to be submitted to table 8 to determine the output port\[char46]
+.IP \(bu
+A higher-priority rule to match packets received from ports of type \fBlocalport\fR, based on the logical input port, and resubmit these packets to table 40 for local delivery\[char46] Ports of type \fBlocalport\fR exist on every hypervisor and by definition their traffic should never go out through a tunnel\[char46]
+.IP \(bu
+A higher-priority rule to match packets that have the MLF_LOCAL_ONLY logical flow flag set, and whose destination is a multicast address\[char46] This flag indicates that the packet should not be delivered to remote hypervisors, even if the multicast destination includes ports on remote hypervisors\[char46] This flag is used when \fBovn\-controller\fR is the originator of the multicast packet\[char46] Since each \fBovn\-controller\fR instance is originating these packets, the packets only need to be delivered to local ports\[char46]
+.IP \(bu
+A fallback flow that resubmits to table 40 if there is no other match\[char46]
+.RE
+.IP
+Flows in table 40 resemble those in table 39 but for logical ports that reside locally rather than remotely\[char46] For unicast logical output ports on the local hypervisor, the actions just resubmit to table 41\[char46] For multicast output ports that include one or more logical ports on the local hypervisor, for each such logical port \fIP\fR, the actions change the logical output port to \fIP\fR, then resubmit to table 41\[char46]
+.IP
+A special case is that when a localnet port exists on the datapath, remote port is connected by switching to the localnet port\[char46] In this case, instead of adding a flow in table 39 to reach the remote port, a flow is added in table 40 to switch the logical outport to the localnet port, and resubmit to table 40 as if it were unicasted to a logical port on the local hypervisor\[char46]
+.IP
+Table 41 matches and drops packets for which the logical input and output ports are the same and the MLF_ALLOW_LOOPBACK flag is not set\[char46] It also drops MLF_LOCAL_ONLY packets directed to a localnet port\[char46] It resubmits other packets to table 42\[char46]
+.IP 4. .4in
+OpenFlow tables 42 through 62 execute the logical egress pipeline from the \fBLogical_Flow\fR table in the OVN Southbound database\[char46] The egress pipeline can perform a final stage of validation before packet delivery\[char46] Eventually, it may execute an \fBoutput\fR action, which \fBovn\-controller\fR implements by resubmitting to table 64\[char46] A packet for which the pipeline never executes \fBoutput\fR is effectively dropped (although it may have been transmitted through a tunnel across a physical network)\[char46]
+.IP
+The egress pipeline cannot change the logical output port or cause further tunneling\[char46]
+.IP 5. .4in
+Table 64 bypasses OpenFlow loopback when MLF_ALLOW_LOOPBACK is set\[char46] Logical loopback was handled in table 41, but OpenFlow by default also prevents loopback to the OpenFlow ingress port\[char46] Thus, when MLF_ALLOW_LOOPBACK is set, OpenFlow table 64 saves the OpenFlow ingress port, sets it to zero, resubmits to table 65 for logical-to-physical transformation, and then restores the OpenFlow ingress port, effectively disabling OpenFlow loopback prevents\[char46] When MLF_ALLOW_LOOPBACK is unset, table 64 flow simply resubmits to table 65\[char46]
+.IP 6. .4in
+OpenFlow table 65 performs logical-to-physical translation, the opposite of table 0\[char46] It matches the packet\(cqs logical egress port\[char46] Its actions output the packet to the port attached to the OVN integration bridge that represents that logical port\[char46] If the logical egress port is a container nested with a VM, then before sending the packet the actions push on a VLAN header with an appropriate VLAN ID\[char46]
+.RE
+.SS "Logical Routers and Logical Patch Ports"
+.PP
+.PP
+Typically logical routers and logical patch ports do not have a physical location and effectively reside on every hypervisor\[char46] This is the case for logical patch ports between logical routers and logical switches behind those logical routers, to which VMs (and VIFs) attach\[char46]
+.PP
+.PP
+Consider a packet sent from one virtual machine or container to another VM or container that resides on a different subnet\[char46] The packet will traverse tables 0 to 65 as described in the previous section \fBArchitectural Physical Life Cycle of a Packet\fR, using the logical datapath representing the logical switch that the sender is attached to\[char46] At table 39, the packet will use the fallback flow that resubmits locally to table 40 on the same hypervisor\[char46] In this case, all of the processing from table 0 to table 65 occurs on the hypervisor where the sender resides\[char46]
+.PP
+.PP
+When the packet reaches table 65, the logical egress port is a logical patch port\[char46] \fBovn\-controller\fR implements output to the logical patch is packet by cloning and resubmitting directly to the first OpenFlow flow table in the ingress pipeline, setting the logical ingress port to the peer logical patch port, and using the peer logical patch port\(cqs logical datapath (that represents the logical router)\[char46]
+.PP
+.PP
+The packet re-enters the ingress pipeline in order to traverse tables 8 to 65 again, this time using the logical datapath representing the logical router\[char46] The processing continues as described in the previous section \fBArchitectural Physical Life Cycle of a Packet\fR\[char46] When the packet reaches table 65, the logical egress port will once again be a logical patch port\[char46] In the same manner as described above, this logical patch port will cause the packet to be resubmitted to OpenFlow tables 8 to 65, this time using the logical datapath representing the logical switch that the destination VM or container is attached to\[char46]
+.PP
+.PP
+The packet traverses tables 8 to 65 a third and final time\[char46] If the destination VM or container resides on a remote hypervisor, then table 39 will send the packet on a tunnel port from the sender\(cqs hypervisor to the remote hypervisor\[char46] Finally table 65 will output the packet directly to the destination VM or container\[char46]
+.PP
+.PP
+The following sections describe two exceptions, where logical routers and/or logical patch ports are associated with a physical location\[char46]
+.ST "Gateway Routers"
+.PP
+.PP
+A \fIgateway router\fR is a logical router that is bound to a physical location\[char46] This includes all of the logical patch ports of the logical router, as well as all of the peer logical patch ports on logical switches\[char46] In the OVN Southbound database, the \fBPort_Binding\fR entries for these logical patch ports use the type \fBl3gateway\fR rather than \fBpatch\fR, in order to distinguish that these logical patch ports are bound to a chassis\[char46]
+.PP
+.PP
+When a hypervisor processes a packet on a logical datapath representing a logical switch, and the logical egress port is a \fBl3gateway\fR port representing connectivity to a gateway router, the packet will match a flow in table 39 that sends the packet on a tunnel port to the chassis where the gateway router resides\[char46] This processing in table 39 is done in the same manner as for VIFs\[char46]
+.ST "Distributed Gateway Ports"
+.PP
+.PP
+This section provides additional details on distributed gateway ports, outlined earlier\[char46]
+.PP
+.PP
+The primary design goal of distributed gateway ports is to allow as much traffic as possible to be handled locally on the hypervisor where a VM or container resides\[char46] Whenever possible, packets from the VM or container to the outside world should be processed completely on that VM\(cqs or container\(cqs hypervisor, eventually traversing a localnet port instance or a tunnel to the physical network or a different OVN deployment\[char46] Whenever possible, packets from the outside world to a VM or container should be directed through the physical network directly to the VM\(cqs or container\(cqs hypervisor\[char46]
+.PP
+.PP
+In order to allow for the distributed processing of packets described in the paragraph above, distributed gateway ports need to be logical patch ports that effectively reside on every hypervisor, rather than \fBl3gateway\fR ports that are bound to a particular chassis\[char46] However, the flows associated with distributed gateway ports often need to be associated with physical locations, for the following reasons:
+.RS
+.IP \(bu
+The physical network that the localnet port is attached to typically uses L2 learning\[char46] Any Ethernet address used over the distributed gateway port must be restricted to a single physical location so that upstream L2 learning is not confused\[char46] Traffic sent out the distributed gateway port towards the localnet port with a specific Ethernet address must be sent out one specific instance of the distributed gateway port on one specific chassis\[char46] Traffic received from the localnet port (or from a VIF on the same logical switch as the localnet port) with a specific Ethernet address must be directed to the logical switch\(cqs patch port instance on that specific chassis\[char46]
+.IP
+Due to the implications of L2 learning, the Ethernet address and IP address of the distributed gateway port need to be restricted to a single physical location\[char46] For this reason, the user must specify one chassis associated with the distributed gateway port\[char46] Note that traffic traversing the distributed gateway port using other Ethernet addresses and IP addresses (e\[char46]g\[char46] one-to-one NAT) is not restricted to this chassis\[char46]
+.IP
+Replies to ARP and ND requests must be restricted to a single physical location, where the Ethernet address in the reply resides\[char46] This includes ARP and ND replies for the IP address of the distributed gateway port, which are restricted to the chassis that the user associated with the distributed gateway port\[char46]
+.IP \(bu
+In order to support one-to-many SNAT (aka IP masquerading), where multiple logical IP addresses spread across multiple chassis are mapped to a single external IP address, it will be necessary to handle some of the logical router processing on a specific chassis in a centralized manner\[char46] Since the SNAT external IP address is typically the distributed gateway port IP address, and for simplicity, the same chassis associated with the distributed gateway port is used\[char46]
+.RE
+.PP
+.PP
+The details of flow restrictions to specific chassis are described in the \fBovn\-northd\fR documentation\[char46]
+.PP
+.PP
+While most of the physical location dependent aspects of distributed gateway ports can be handled by restricting some flows to specific chassis, one additional mechanism is required\[char46] When a packet leaves the ingress pipeline and the logical egress port is the distributed gateway port, one of two different sets of actions is required at table 39:
+.RS
+.IP \(bu
+If the packet can be handled locally on the sender\(cqs hypervisor (e\[char46]g\[char46] one-to-one NAT traffic), then the packet should just be resubmitted locally to table 40, in the normal manner for distributed logical patch ports\[char46]
+.IP \(bu
+However, if the packet needs to be handled on the chassis associated with the distributed gateway port (e\[char46]g\[char46] one-to-many SNAT traffic or non-NAT traffic), then table 39 must send the packet on a tunnel port to that chassis\[char46]
+.RE
+.PP
+.PP
+In order to trigger the second set of actions, the \fBchassisredirect\fR type of southbound \fBPort_Binding\fR has been added\[char46] Setting the logical egress port to the type \fBchassisredirect\fR logical port is simply a way to indicate that although the packet is destined for the distributed gateway port, it needs to be redirected to a different chassis\[char46] At table 39, packets with this logical egress port are sent to a specific chassis, in the same way that table 39 directs packets whose logical egress port is a VIF or a type \fBl3gateway\fR port to different chassis\[char46] Once the packet arrives at that chassis, table 40 resets the logical egress port to the value representing the distributed gateway port\[char46] For each distributed gateway port, there is one type \fBchassisredirect\fR port, in addition to the distributed logical patch port representing the distributed gateway port\[char46]
+.ST "High Availability for Distributed Gateway Ports"
+.PP
+.PP
+OVN allows you to specify a prioritized list of chassis for a distributed gateway port\[char46] This is done by associating multiple \fBGateway_Chassis\fR rows with a \fBLogical_Router_Port\fR in the \fBOVN_Northbound\fR database\[char46]
+.PP
+.PP
+When multiple chassis have been specified for a gateway, all chassis that may send packets to that gateway will enable BFD on tunnels to all configured gateway chassis\[char46] The current master chassis for the gateway is the highest priority gateway chassis that is currently viewed as active based on BFD status\[char46]
+.PP
+.PP
+For more information on L3 gateway high availability, please refer to http://docs\[char46]ovn\[char46]org/en/latest/topics/high-availability\[char46]html\[char46]
+.ST "Restrictions of Distributed Gateway Ports"
+.PP
+.PP
+Distributed gateway ports are used to connect to an external network, which can be a physical network modeled by a logical switch with a localnet port, and can also be a logical switch that interconnects different OVN deployments (see \fBOVN Deployments Interconnection\fR)\[char46] Usually there can be many logical routers connected to the same external logical switch, as shown in below diagram\[char46]
+.PP
+.nf
+\fL
+.br
+\fL                              +\-\-LS\-EXT\-+
+.br
+\fL                              |    |    |
+.br
+\fL                              |    |    |
+.br
+\fL                             LR1  \[char46]\[char46]\[char46]  LRn
+.br
+\fL  \fR
+.fi
+.PP
+.PP
+In this diagram, there are n logical routers connected to a logical switch LS-EXT, each with a distributed gateway port, so that traffic sent to external world is redirected to the gateway chassis that is assigned to the distributed gateway port of respective logical router\[char46]
+.PP
+.PP
+In the logical topology, nothing can prevent an user to add a route between the logical routers via the connected distributed gateway ports on LS-EXT\[char46] However, the route works only if the LS-EXT is a physical network (modeled by a logical switch with a localnet port)\[char46] In that case the packet will be delivered between the gateway chassises through the localnet port via physical network\[char46] If the LS-EXT is a regular logical switch (backed by tunneling only, as in the use case of OVN interconnection), then the packet will be dropped on the source gateway chassis\[char46] The limitation is due the fact that distributed gateway ports are tied to physical location, and without physical network connection, we will end up with either dropping the packet or transferring it over the tunnels which could cause bigger problems such as broadcast packets being redirect repeatedly by different gateway chassises\[char46]
+.PP
+.PP
+With the limitation in mind, if a user do want the direct connectivity between the logical routers, it is better to create an internal logical switch connected to the logical routers with regular logical router ports, which are completely distributed and the packets don\(cqt have to leave a chassis unless necessary, which is more optimal than routing via the distributed gateway ports\[char46]
+.ST "ARP request and ND NS packet processing"
+.PP
+.PP
+Due to the fact that ARP requests and ND NA packets are usually broadcast packets, for performance reasons, OVN deals with requests that target OVN owned IP addresses (i\[char46]e\[char46], IP addresses configured on the router ports, VIPs, NAT IPs) in a specific way and only forwards them to the logical router that owns the target IP address\[char46] This behavior is different than that of traditional switches and implies that other routers/hosts connected to the logical switch will not learn the MAC/IP binding from the request packet\[char46]
+.PP
+.PP
+All other ARP and ND packets are flooded in the L2 broadcast domain and to all attached logical patch ports\[char46]
+.ST "VIFs on the logical switch connected by a distributed gateway port"
+.PP
+.PP
+Typically the logical switch connected by a distributed gateway port is for external connectivity, usually to a physical network through a localnet port on the logical switch, or to a remote OVN deployment through OVN Interconnection\[char46] In these cases there is no VIF ports required on the logical switch\[char46]
+.PP
+.PP
+While not very common, it is still possible to create VIF ports on the logical switch connected by a distributed gateway port, but there is a limitation that the logical ports need to reside on the gateway chassis where the distributed gateway port resides to get connectivity to other logical switches through the distributed gateway port\[char46] There is no limitation for the VIFs to connect within the logical switch, or beyond the logical switch through other regular distributed logical router ports\[char46]
+.PP
+.PP
+A special case is when using distributed gateway ports for scalability purpose, as mentioned earlier in this document\[char46] The logical switches connected by distributed gateway ports are not for connectivity but just for regular VIFs\[char46] However, the above limitation usually does not matter because in this use case all the VIFs on the logical switch are located on the same chassis with the distributed gateway port that connects the logical switch\[char46]
+.SS "Multiple localnet logical switches connected to a Logical Router"
+.PP
+.PP
+It is possible to have multiple logical switches each with a localnet port (representing physical networks) connected to a logical router, in which one localnet logical switch may provide the external connectivity via a distributed gateway port and rest of the localnet logical switches use VLAN tagging in the physical network\[char46] It is expected that \fBovn\-bridge\-mappings\fR is configured appropriately on the chassis for all these localnet networks\[char46]
+.ST "East West routing"
+.PP
+.PP
+East-West routing between these localnet VLAN tagged logical switches work almost the same way as normal logical switches\[char46] When the VM sends such a packet, then:
+.RS
+.IP 1. .4in
+It first enters the ingress pipeline, and then egress pipeline of the source localnet logical switch datapath\[char46] It then enters the ingress pipeline of the logical router datapath via the logical router port in the source chassis\[char46]
+.IP 2. .4in
+Routing decision is taken\[char46]
+.IP 3. .4in
+From the router datapath, packet enters the ingress pipeline and then egress pipeline of the destination localnet logical switch datapath and goes out of the integration bridge to the provider bridge ( belonging to the destination logical switch) via the localnet port\[char46] While sending the packet to provider bridge, we also replace router port MAC as source MAC with a chassis unique MAC\[char46]
+.IP
+This chassis unique MAC is configured as global ovs config on each chassis (eg\[char46] via \(dq\fBovs\-vsctl set open \[char46] external\-ids:
+ovn\-chassis\-mac\-mappings=\(dqphys:aa:bb:cc:dd:ee:$i$i\(dq\fR\(dq)\[char46] For more details, see \fBovn\-controller\fR(8)\[char46]
+.IP
+If the above is not configured, then source MAC would be the router port MAC\[char46] This could create problem if we have more than one chassis\[char46] This is because, since the router port is distributed, the same (MAC,VLAN) tuple will seen by physical network from other chassis as well, which could cause these issues:
+.RS
+.IP \(bu
+Continuous MAC moves in top-of-rack switch (ToR)\[char46]
+.IP \(bu
+ToR dropping the traffic, which is causing continuous MAC moves\[char46]
+.IP \(bu
+ToR blocking the ports from which MAC moves are happening\[char46]
+.RE
+.IP 4. .4in
+The destination chassis receives the packet via the localnet port and sends it to the integration bridge\[char46] Before entering the integration bridge the source mac of the packet will be replaced with router port mac again\[char46] The packet enters the ingress pipeline and then egress pipeline of the destination localnet logical switch and finally gets delivered to the destination VM port\[char46]
+.RE
+.ST "External traffic"
+.PP
+.PP
+The following happens when a VM sends an external traffic (which requires NATting) and the chassis hosting the VM doesn\(cqt have a distributed gateway port\[char46]
+.RS
+.IP 1. .4in
+The packet first enters the ingress pipeline, and then egress pipeline of the source localnet logical switch datapath\[char46] It then enters the ingress pipeline of the logical router datapath via the logical router port in the source chassis\[char46]
+.IP 2. .4in
+Routing decision is taken\[char46] Since the gateway router or the distributed gateway port doesn\(cqt reside in the source chassis, the traffic is redirected to the gateway chassis via the tunnel port\[char46]
+.IP 3. .4in
+The gateway chassis receives the packet via the tunnel port and the packet enters the egress pipeline of the logical router datapath\[char46] NAT rules are applied here\[char46] The packet then enters the ingress pipeline and then egress pipeline of the localnet logical switch datapath which provides external connectivity and finally goes out via the localnet port of the logical switch which provides external connectivity\[char46]
+.RE
+.PP
+.PP
+Although this works, the VM traffic is tunnelled when sent from the compute chassis to the gateway chassis\[char46] In order for it to work properly, the MTU of the localnet logical switches must be lowered to account for the tunnel encapsulation\[char46]
+.SS "Centralized routing for localnet VLAN tagged logical switches connected to a Logical Router"
+.PP
+.PP
+To overcome the tunnel encapsulation problem described in the previous section, \fBOVN\fR supports the option of enabling centralized routing for localnet VLAN tagged logical switches\[char46] CMS can configure the option \fBoptions:reside-on-redirect-chassis\fR to \fBtrue\fR for each \fBLogical_Router_Port\fR which connects to the localnet VLAN tagged logical switches\[char46] This causes the gateway chassis (hosting the distributed gateway port) to handle all the routing for these networks, making it centralized\[char46] It will reply to the ARP requests for the logical router port IPs\[char46]
+.PP
+.PP
+If the logical router doesn\(cqt have a distributed gateway port connecting to the localnet logical switch which provides external connectivity, or if it has more than one distributed gateway ports, then this option is ignored by \fBOVN\fR\[char46]
+.PP
+.PP
+The following happens when a VM sends an east-west traffic which needs to be routed:
+.RS
+.IP 1. .4in
+The packet first enters the ingress pipeline, and then egress pipeline of the source localnet logical switch datapath and is sent out via a localnet port of the source localnet logical switch (instead of sending it to router pipeline)\[char46]
+.IP 2. .4in
+The gateway chassis receives the packet via a localnet port of the source localnet logical switch and sends it to the integration bridge\[char46] The packet then enters the ingress pipeline, and then egress pipeline of the source localnet logical switch datapath and enters the ingress pipeline of the logical router datapath\[char46]
+.IP 3. .4in
+Routing decision is taken\[char46]
+.IP 4. .4in
+From the router datapath, packet enters the ingress pipeline and then egress pipeline of the destination localnet logical switch datapath\[char46] It then goes out of the integration bridge to the provider bridge ( belonging to the destination logical switch) via a localnet port\[char46]
+.IP 5. .4in
+The destination chassis receives the packet via a localnet port and sends it to the integration bridge\[char46] The packet enters the ingress pipeline and then egress pipeline of the destination localnet logical switch and finally delivered to the destination VM port\[char46]
+.RE
+.PP
+.PP
+The following happens when a VM sends an external traffic which requires NATting:
+.RS
+.IP 1. .4in
+The packet first enters the ingress pipeline, and then egress pipeline of the source localnet logical switch datapath and is sent out via a localnet port of the source localnet logical switch (instead of sending it to router pipeline)\[char46]
+.IP 2. .4in
+The gateway chassis receives the packet via a localnet port of the source localnet logical switch and sends it to the integration bridge\[char46] The packet then enters the ingress pipeline, and then egress pipeline of the source localnet logical switch datapath and enters the ingress pipeline of the logical router datapath\[char46]
+.IP 3. .4in
+Routing decision is taken and NAT rules are applied\[char46]
+.IP 4. .4in
+From the router datapath, packet enters the ingress pipeline and then egress pipeline of the localnet logical switch datapath which provides external connectivity\[char46] It then goes out of the integration bridge to the provider bridge (belonging to the logical switch which provides external connectivity) via a localnet port\[char46]
+.RE
+.PP
+.PP
+The following happens for the reverse external traffic\[char46]
+.RS
+.IP 1. .4in
+The gateway chassis receives the packet from a localnet port of the logical switch which provides external connectivity\[char46] The packet then enters the ingress pipeline and then egress pipeline of the localnet logical switch (which provides external connectivity)\[char46] The packet then enters the ingress pipeline of the logical router datapath\[char46]
+.IP 2. .4in
+The ingress pipeline of the logical router datapath applies the unNATting rules\[char46] The packet then enters the ingress pipeline and then egress pipeline of the source localnet logical switch\[char46] Since the source VM doesn\(cqt reside in the gateway chassis, the packet is sent out via a localnet port of the source logical switch\[char46]
+.IP 3. .4in
+The source chassis receives the packet via a localnet port and sends it to the integration bridge\[char46] The packet enters the ingress pipeline and then egress pipeline of the source localnet logical switch and finally gets delivered to the source VM port\[char46]
+.RE
+.PP
+.PP
+As an alternative to \fBreside\-on\-redirect\-chassis\fR, OVN supports VLAN-based redirection\[char46] Whereas \fBreside\-on\-redirect\-chassis\fR centralizes all router functionality, VLAN-based redirection only changes how OVN redirects packets to the gateway chassis\[char46] By setting \fBoptions:redirect\-type\fR to \fBbridged\fR on a distributed gateway port, OVN redirects packets to the gateway chassis using the \fBlocalnet\fR port of the router\(cqs peer logical switch, instead of a tunnel\[char46]
+.PP
+.PP
+If the logical router doesn\(cqt have a distributed gateway port connecting to the localnet logical switch which provides external connectivity, or if it has more than one distributed gateway ports, then this option is ignored by \fBOVN\fR\[char46]
+.PP
+.PP
+Following happens for bridged redirection:
+.RS
+.IP 1. .4in
+On compute chassis, packet passes though logical router\(cqs ingress pipeline\[char46]
+.IP 2. .4in
+If logical outport is gateway chassis attached router port then packet is \(dqredirected\(dq to gateway chassis using peer logical switch\(cqs localnet port\[char46]
+.IP 3. .4in
+This redirected packet has destination mac as router port mac (the one to which gateway chassis is attached)\[char46] Its VLAN id is that of localnet port (peer logical switch of the logical router port)\[char46]
+.IP 4. .4in
+On the gateway chassis packet will enter the logical router pipeline again and this time it will passthrough egress pipeline as well\[char46]
+.IP 5. .4in
+Reverse traffic packet flows stays the same\[char46]
+.RE
+.PP
+.PP
+Some guidelines and expections with bridged redirection:
+.RS
+.IP 1. .4in
+Since router port mac is destination mac, hence it has to be ensured that physical network learns it on ONLY from the gateway chassis\[char46] Which means that \fBovn\-chassis\-mac\-mappings\fR should be configure on all the compute nodes, so that physical network never learn router port mac from compute nodes\[char46]
+.IP 2. .4in
+Since packet enters logical router ingress pipeline twice (once on compute chassis and again on gateway chassis), hence ttl will be decremented twice\[char46]
+.IP 3. .4in
+Default redirection type continues to be \fBoverlay\fR\[char46] User can switch the redirect-type between \fBbridged\fR and \fBoverlay\fR by changing the value of \fBoptions:redirect\-type\fR
+.RE
+.SS "Life Cycle of a VTEP gateway"
+.PP
+.PP
+A gateway is a chassis that forwards traffic between the OVN-managed part of a logical network and a physical VLAN, extending a tunnel-based logical network into a physical network\[char46]
+.PP
+.PP
+The steps below refer often to details of the OVN and VTEP database schemas\[char46] Please see \fBovn\-sb\fR(5), \fBovn\-nb\fR(5) and \fBvtep\fR(5), respectively, for the full story on these databases\[char46]
+.RS
+.IP 1. .4in
+A VTEP gateway\(cqs life cycle begins with the administrator registering the VTEP gateway as a \fBPhysical_Switch\fR table entry in the \fBVTEP\fR database\[char46] The \fBovn\-controller\-vtep\fR connected to this VTEP database, will recognize the new VTEP gateway and create a new \fBChassis\fR table entry for it in the \fBOVN_Southbound\fR database\[char46]
+.IP 2. .4in
+The administrator can then create a new \fBLogical_Switch\fR table entry, and bind a particular vlan on a VTEP gateway\(cqs port to any VTEP logical switch\[char46] Once a VTEP logical switch is bound to a VTEP gateway, the \fBovn\-controller\-vtep\fR will detect it and add its name to the \fIvtep_logical_switches\fR column of the \fBChassis\fR table in the \fB
+OVN_Southbound\fR database\[char46] Note, the \fItunnel_key\fR column of VTEP logical switch is not filled at creation\[char46] The \fBovn\-controller\-vtep\fR will set the column when the corresponding vtep logical switch is bound to an OVN logical network\[char46]
+.IP 3. .4in
+Now, the administrator can use the CMS to add a VTEP logical switch to the OVN logical network\[char46] To do that, the CMS must first create a new \fBLogical_Switch_Port\fR table entry in the \fB
+OVN_Northbound\fR database\[char46] Then, the \fItype\fR column of this entry must be set to \(dqvtep\(dq\[char46] Next, the \fI
+vtep-logical-switch\fR and \fIvtep-physical-switch\fR keys in the \fIoptions\fR column must also be specified, since multiple VTEP gateways can attach to the same VTEP logical switch\[char46] Next, the \fIaddresses\fR column of this logical port must be set to \(dqunknown\(dq, it will add a priority 0 entry in \(dqls_in_l2_lkup\(dq stage of logical switch ingress pipeline\[char46] So, traffic with unrecorded mac by OVN would go through the \fBLogical_Switch_Port\fR to physical network\[char46]
+.IP 4. .4in
+The newly created logical port in the \fBOVN_Northbound\fR database and its configuration will be passed down to the \fB
+OVN_Southbound\fR database as a new \fBPort_Binding\fR table entry\[char46] The \fBovn\-controller\-vtep\fR will recognize the change and bind the logical port to the corresponding VTEP gateway chassis\[char46] Configuration of binding the same VTEP logical switch to a different OVN logical networks is not allowed and a warning will be generated in the log\[char46]
+.IP 5. .4in
+Beside binding to the VTEP gateway chassis, the \fB
+ovn\-controller\-vtep\fR will update the \fItunnel_key\fR column of the VTEP logical switch to the corresponding \fB
+Datapath_Binding\fR table entry\(cqs \fItunnel_key\fR for the bound OVN logical network\[char46]
+.IP 6. .4in
+Next, the \fBovn\-controller\-vtep\fR will keep reacting to the configuration change in the \fBPort_Binding\fR in the \fBOVN_Northbound\fR database, and updating the \fBUcast_Macs_Remote\fR table in the \fBVTEP\fR database\[char46] This allows the VTEP gateway to understand where to forward the unicast traffic coming from the extended external network\[char46]
+.IP 7. .4in
+Eventually, the VTEP gateway\(cqs life cycle ends when the administrator unregisters the VTEP gateway from the \fBVTEP\fR database\[char46] The \fBovn\-controller\-vtep\fR will recognize the event and remove all related configurations (\fBChassis\fR table entry and port bindings) in the \fBOVN_Southbound\fR database\[char46]
+.IP 8. .4in
+When the \fBovn\-controller\-vtep\fR is terminated, all related configurations in the \fBOVN_Southbound\fR database and the \fBVTEP\fR database will be cleaned, including \fBChassis\fR table entries for all registered VTEP gateways and their port bindings, and all \fBUcast_Macs_Remote\fR table entries and the \fBLogical_Switch\fR tunnel keys\[char46]
+.RE
+.SS "OVN Deployments Interconnection"
+.PP
+.PP
+It is not uncommon for an operator to deploy multiple OVN clusters, for two main reasons\[char46] Firstly, an operator may prefer to deploy one OVN cluster for each availability zone, e\[char46]g\[char46] in different physical regions, to avoid single point of failure\[char46] Secondly, there is always an upper limit for a single OVN control plane to scale\[char46]
+.PP
+.PP
+Although the control planes of the different availability zone (AZ)s are independent from each other, the workloads from different AZs may need to communicate across the zones\[char46] The OVN interconnection feature provides a native way to interconnect different AZs by L3 routing through transit overlay networks between logical routers of different AZs\[char46]
+.PP
+.PP
+A global OVN Interconnection Northbound database is introduced for the operator (probably through CMS systems) to configure transit logical switches that connect logical routers from different AZs\[char46] A transit switch is similar to a regular logical switch, but it is used for interconnection purpose only\[char46] Typically, each transit switch can be used to connect all logical routers that belong to same tenant across all AZs\[char46]
+.PP
+.PP
+A dedicated daemon process \fBovn\-ic\fR, OVN interconnection controller, in each AZ will consume this data and populate corresponding logical switches to their own northbound databases for each AZ, so that logical routers can be connected to the transit switch by creating patch port pairs in their northbound databases\[char46] Any router ports connected to the transit switches are considered interconnection ports, which will be exchanged between AZs\[char46]
+.PP
+.PP
+Physically, when workloads from different AZs communicate, packets need to go through multiple hops: source chassis, source gateway, destination gateway and destination chassis\[char46] All these hops are connected through tunnels so that the packets never leave overlay networks\[char46] A distributed gateway port is required to connect the logical router to a transit switch, with a gateway chassis specified, so that the traffic can be forwarded through the gateway chassis\[char46]
+.PP
+.PP
+A global OVN Interconnection Southbound database is introduced for exchanging control plane information between the AZs\[char46] The data in this database is populated and consumed by the \fBovn\-ic\fR, of each AZ\[char46] The main information in this database includes:
+.RS
+.IP \(bu
+Datapath bindings for transit switches, which mainly contains the tunnel keys generated for each transit switch\[char46] Separate key ranges are reserved for transit switches so that they will never conflict with any tunnel keys locally assigned for datapaths within each AZ\[char46]
+.IP \(bu
+Availability zones, which are registered by \fBovn\-ic\fR from each AZ\[char46]
+.IP \(bu
+Gateways\[char46] Each AZ specifies chassises that are supposed to work as interconnection gateways, and the \fBovn\-ic\fR will populate this information to the interconnection southbound DB\[char46] The \fBovn\-ic\fR from all the other AZs will learn the gateways and populate to their own southbound DB as a chassis\[char46]
+.IP \(bu
+Port bindings for logical switch ports created on the transit switch\[char46] Each AZ maintains their logical router to transit switch connections independently, but \fBovn\-ic\fR automatically populates local port bindings on transit switches to the global interconnection southbound DB, and learns remote port bindings from other AZs back to its own northbound and southbound DBs, so that logical flows can be produced and then translated to OVS flows locally, which finally enables data plane communication\[char46]
+.IP \(bu
+Routes that are advertised between different AZs\[char46] If enabled, routes are automatically exchanged by \fBovn\-ic\fR\[char46] Both static routes and directly connected subnets are advertised\[char46] Options in \fBoptions\fR column of the \fBNB_Global\fR table of \fBOVN_NB\fR database control the behavior of route advertisement, such as enable/disable the advertising/learning routes, whether default routes are advertised/learned, and blacklisted CIDRs\[char46] See \fBovn\-nb\fR(5) for more details\[char46]
+.RE
+.PP
+.PP
+The tunnel keys for transit switch datapaths and related port bindings must be agreed across all AZs\[char46] This is ensured by generating and storing the keys in the global interconnection southbound database\[char46] Any \fBovn\-ic\fR from any AZ can allocate the key, but race conditions are solved by enforcing unique index for the column in the database\[char46]
+.PP
+.PP
+Once each AZ\(cqs NB and SB databases are populated with interconnection switches and ports, and agreed upon the tunnel keys, data plane communication between the AZs are established\[char46]
+.PP
+.PP
+When VXLAN tunneling is enabled in an OVN cluster, due to the limited range available for VNIs, Interconnection feature is not supported\[char46]
+.ST "A day in the life of a packet crossing AZs"
+.RS
+.IP 1. .4in
+An IP packet is sent out from a VIF on a hypervisor (HV1) of AZ1, with destination IP belonging to a VIF in AZ2\[char46]
+.IP 2. .4in
+In HV1\(cqs OVS flow tables, the packet goes through logical switch and logical router pipelines, and in a logical router pipeline, the routing stage finds out the next hop for the destination IP, which belongs to a remote logical router port in AZ2, and the output port, which is a chassis-redirect port located on an interconnection gateway (GW1 in AZ1), so HV1 sends the packet to GW1 through tunnel\[char46]
+.IP 3. .4in
+On GW1, it continues with the logical router pipe line and switches to the transit switch\(cqs pipeline through the peer port of the chassis redirect port\[char46] In the transit switch\(cqs pipeline it outputs to the remote logical port which is located on a gateway (GW2) in AZ2, so the GW1 sends the packet to GW2 in tunnel\[char46]
+.IP 4. .4in
+On GW2, it continues with the transit switch pipeline and switches to the logical router pipeline through the peer port, which is a chassis redirect port that is located on GW2\[char46] The logical router pipeline then forwards the packet to relevant logical pipelines according to the destination IP address, and figures out the MAC and location of the destination VIF port - a hypervisor (HV2)\[char46] The GW2 then sends the packet to HV2 in tunnel\[char46]
+.IP 5. .4in
+On HV2, the packet is delivered to the final destination VIF port by the logical switch egress pipeline, just the same way as for intra-AZ communications\[char46]
+.RE
+.SS "Native OVN services for external logical ports"
+.PP
+.PP
+To support OVN native services (like DHCP/IPv6 RA/DNS lookup) to the cloud resources which are external, OVN supports \fBexternal\fR logical ports\[char46]
+.PP
+.PP
+Below are some of the use cases where \fBexternal\fR ports can be used\[char46]
+.RS
+.IP \(bu
+VMs connected to SR-IOV nics - Traffic from these VMs by passes the kernel stack and local \fBovn\-controller\fR do not bind these ports and cannot serve the native services\[char46]
+.IP \(bu
+When CMS supports provisioning baremetal servers\[char46]
+.RE
+.PP
+.PP
+OVN will provide the native services if CMS has done the below configuration in the \fIOVN Northbound Database\fR\[char46]
+.RS
+.IP \(bu
+A row is created in \fBLogical_Switch_Port\fR, configuring the \fBaddresses\fR column and setting the \fBtype\fR to \fBexternal\fR\[char46]
+.IP \(bu
+\fBha_chassis_group\fR column is configured\[char46]
+.IP \(bu
+The HA chassis which belongs to the HA chassis group has the \fBovn\-bridge\-mappings\fR configured and has proper L2 connectivity so that it can receive the DHCP and other related request packets from these external resources\[char46]
+.IP \(bu
+The Logical_Switch of this port has a \fBlocalnet\fR port\[char46]
+.IP \(bu
+Native OVN services are enabled by configuring the DHCP and other options like the way it is done for the normal logical ports\[char46]
+.RE
+.PP
+.PP
+It is recommended to use the same HA chassis group for all the external ports of a logical switch\[char46] Otherwise, the physical switch might see MAC flap issue when different chassis provide the native services\[char46] For example when supporting native DHCPv4 service, DHCPv4 server mac (configured in \fBoptions:server_mac\fR column in table \fBDHCP_Options\fR) originating from different ports can cause MAC flap issue\[char46] The MAC of the logical router IP(s) can also flap if the same HA chassis group is not set for all the external ports of a logical switch\[char46]
+.SH "SECURITY"
+.SS "Role\-Based Access Controls for the Southbound DB"
+.PP
+.PP
+In order to provide additional security against the possibility of an OVN chassis becoming compromised in such a way as to allow rogue software to make arbitrary modifications to the southbound database state and thus disrupt the OVN network, role-based access controls (see \fBovsdb\-server(1)\fR for additional details) are provided for the southbound database\[char46]
+.PP
+.PP
+The implementation of role-based access controls (RBAC) requires the addition of two tables to an OVSDB schema: the \fBRBAC_Role\fR table, which is indexed by role name and maps the the names of the various tables that may be modifiable for a given role to individual rows in a permissions table containing detailed permission information for that role, and the permission table itself which consists of rows containing the following information:
+.RS
+.TP
+\fBTable Name\fR
+The name of the associated table\[char46] This column exists primarily as an aid for humans reading the contents of this table\[char46]
+.TP
+\fBAuth Criteria\fR
+A set of strings containing the names of columns (or column:key pairs for columns containing string:string maps)\[char46] The contents of at least one of the columns or column:key values in a row to be modified, inserted, or deleted must be equal to the ID of the client attempting to act on the row in order for the authorization check to pass\[char46] If the authorization criteria is empty, authorization checking is disabled and all clients for the role will be treated as authorized\[char46]
+.TP
+\fBInsert/Delete\fR
+Row insertion/deletion permission; boolean value indicating whether insertion and deletion of rows is allowed for the associated table\[char46] If true, insertion and deletion of rows is allowed for authorized clients\[char46]
+.TP
+\fBUpdatable Columns\fR
+A set of strings containing the names of columns or column:key pairs that may be updated or mutated by authorized clients\[char46] Modifications to columns within a row are only permitted when the authorization check for the client passes and all columns to be modified are included in this set of modifiable columns\[char46]
+.RE
+.PP
+.PP
+RBAC configuration for the OVN southbound database is maintained by ovn-northd\[char46] With RBAC enabled, modifications are only permitted for the \fBChassis\fR, \fBEncap\fR, \fBPort_Binding\fR, and \fBMAC_Binding\fR tables, and are restricted as follows:
+.RS
+.TP
+\fBChassis\fR
+\fBAuthorization\fR: client ID must match the chassis name\[char46]
+.IP
+\fBInsert/Delete\fR: authorized row insertion and deletion are permitted\[char46]
+.IP
+\fBUpdate\fR: The columns \fBnb_cfg\fR, \fBexternal_ids\fR, \fBencaps\fR, and \fBvtep_logical_switches\fR may be modified when authorized\[char46]
+.TP
+\fBEncap\fR
+\fBAuthorization\fR: client ID must match the chassis name\[char46]
+.IP
+\fBInsert/Delete\fR: row insertion and row deletion are permitted\[char46]
+.IP
+\fBUpdate\fR: The columns \fBtype\fR, \fBoptions\fR, and \fBip\fR can be modified\[char46]
+.TP
+\fBPort_Binding\fR
+\fBAuthorization\fR: disabled (all clients are considered authorized\[char46] A future enhancement may add columns (or keys to \fBexternal_ids\fR) in order to control which chassis are allowed to bind each port\[char46]
+.IP
+\fBInsert/Delete\fR: row insertion/deletion are not permitted (ovn-northd maintains rows in this table\[char46]
+.IP
+\fBUpdate\fR: Only modifications to the \fBchassis\fR column are permitted\[char46]
+.TP
+\fBMAC_Binding\fR
+\fBAuthorization\fR: disabled (all clients are considered to be authorized)\[char46]
+.IP
+\fBInsert/Delete\fR: row insertion/deletion are permitted\[char46]
+.IP
+\fBUpdate\fR: The columns \fBlogical_port\fR, \fBip\fR, \fBmac\fR, and \fBdatapath\fR may be modified by ovn-controller\[char46]
+.TP
+\fBIGMP_Group\fR
+\fBAuthorization\fR: disabled (all clients are considered to be authorized)\[char46]
+.IP
+\fBInsert/Delete\fR: row insertion/deletion are permitted\[char46]
+.IP
+\fBUpdate\fR: The columns \fBaddress\fR, \fBchassis\fR, \fBdatapath\fR, and \fBports\fR may be modified by ovn-controller\[char46]
+.RE
+.PP
+.PP
+Enabling RBAC for ovn-controller connections to the southbound database requires the following steps:
+.RS
+.IP 1. .4in
+Creating SSL certificates for each chassis with the certificate CN field set to the chassis name (e\[char46]g\[char46] for a chassis with \fBexternal\-ids:system\-id=chassis\-1\fR, via the command \(dq\fBovs\-pki \-u req+sign chassis\-1 switch\fR\(dq)\[char46]
+.IP 2. .4in
+Configuring each ovn-controller to use SSL when connecting to the southbound database (e\[char46]g\[char46] via \(dq\fBovs\-vsctl set open \[char46]
+external\-ids:ovn\-remote=ssl:x\[char46]x\[char46]x\[char46]x:6642\fR\(dq)\[char46]
+.IP 3. .4in
+Configuring a southbound database SSL remote with \(dqovn-controller\(dq role (e\[char46]g\[char46] via \(dq\fBovn\-sbctl set\-connection role=ovn\-controller
+pssl:6642\fR\(dq)\[char46]
+.RE
+.SS "Encrypt Tunnel Traffic with IPsec"
+.PP
+.PP
+OVN tunnel traffic goes through physical routers and switches\[char46] These physical devices could be untrusted (devices in public network) or might be compromised\[char46] Enabling encryption to the tunnel traffic can prevent the traffic data from being monitored and manipulated\[char46]
+.PP
+.PP
+The tunnel traffic is encrypted with IPsec\[char46] The CMS sets the \fBipsec\fR column in the northbound \fBNB_Global\fR table to enable or disable IPsec encrytion\[char46] If \fBipsec\fR is true, all OVN tunnels will be encrypted\[char46] If \fBipsec\fR is false, no OVN tunnels will be encrypted\[char46]
+.PP
+.PP
+When CMS updates the \fBipsec\fR column in the northbound \fBNB_Global\fR table, \fBovn\-northd\fR copies the value to the \fBipsec\fR column in the southbound \fBSB_Global\fR table\[char46] \fBovn\-controller\fR in each chassis monitors the southbound database and sets the options of the OVS tunnel interface accordingly\[char46] OVS tunnel interface options are monitored by the \fBovs\-monitor\-ipsec\fR daemon which configures IKE daemon to set up IPsec connections\[char46]
+.PP
+.PP
+Chassis authenticates each other by using certificate\[char46] The authentication succeeds if the other end in tunnel presents a certificate signed by a trusted CA and the common name (CN) matches the expected chassis name\[char46] The SSL certificates used in role-based access controls (RBAC) can be used in IPsec\[char46] Or use \fBovs\-pki\fR to create different certificates\[char46] The certificate is required to be x\[char46]509 version 3, and with CN field and subjectAltName field being set to the chassis name\[char46]
+.PP
+.PP
+The CA certificate, chassis certificate and private key are required to be installed in each chassis before enabling IPsec\[char46] Please see \fBovs\-vswitchd\[char46]conf\[char46]db\fR(5) for setting up CA based IPsec authentication\[char46]
+.SH "DESIGN DECISIONS"
+.SS "Tunnel Encapsulations"
+.PP
+.PP
+In general, OVN annotates logical network packets that it sends from one hypervisor to another with the following three pieces of metadata, which are encoded in an encapsulation-specific fashion:
+.RS
+.IP \(bu
+24-bit logical datapath identifier, from the \fBtunnel_key\fR column in the OVN Southbound \fBDatapath_Binding\fR table\[char46]
+.IP \(bu
+15-bit logical ingress port identifier\[char46] ID 0 is reserved for internal use within OVN\[char46] IDs 1 through 32767, inclusive, may be assigned to logical ports (see the \fBtunnel_key\fR column in the OVN Southbound \fBPort_Binding\fR table)\[char46]
+.IP \(bu
+16-bit logical egress port identifier\[char46] IDs 0 through 32767 have the same meaning as for logical ingress ports\[char46] IDs 32768 through 65535, inclusive, may be assigned to logical multicast groups (see the \fBtunnel_key\fR column in the OVN Southbound \fBMulticast_Group\fR table)\[char46]
+.RE
+.PP
+.PP
+When VXLAN is enabled on any hypervisor in a cluster, datapath and egress port identifier ranges are reduced to 12-bits\[char46] This is done because only STT and Geneve provide the large space for metadata (over 32 bits per packet)\[char46] To accommodate for VXLAN, 24 bits available are split as follows:
+.RS
+.IP \(bu
+12-bit logical datapath identifier, derived from the \fBtunnel_key\fR column in the OVN Southbound \fBDatapath_Binding\fR table\[char46]
+.IP \(bu
+12-bit logical egress port identifier\[char46] IDs 0 through 2047 are used for unicast output ports\[char46] IDs 2048 through 4095, inclusive, may be assigned to logical multicast groups (see the \fBtunnel_key\fR column in the OVN Southbound \fBMulticast_Group\fR table)\[char46] For multicast group tunnel keys, a special mapping scheme is used to internally transform from internal OVN 16-bit keys to 12-bit values before sending packets through a VXLAN tunnel, and back from 12-bit tunnel keys to 16-bit values when receiving packets from a VXLAN tunnel\[char46]
+.IP \(bu
+No logical ingress port identifier\[char46]
+.RE
+.PP
+.PP
+The limited space available for metadata when VXLAN tunnels are enabled in a cluster put the following functional limitations onto features available to users:
+.RS
+.IP \(bu
+The maximum number of networks is reduced to 4096\[char46]
+.IP \(bu
+The maximum number of ports per network is reduced to 2048\[char46]
+.IP \(bu
+ACLs matching against logical ingress port identifiers are not supported\[char46]
+.IP \(bu
+OVN interconnection feature is not supported\[char46]
+.RE
+.PP
+.PP
+In addition to functional limitations described above, the following should be considered before enabling it in your cluster:
+.RS
+.IP \(bu
+STT and Geneve use randomized UDP or TCP source ports that allows efficient distribution among multiple paths in environments that use ECMP in their underlay\[char46]
+.IP \(bu
+NICs are available to offload STT and Geneve encapsulation and decapsulation\[char46]
+.RE
+.PP
+.PP
+Due to its flexibility, the preferred encapsulation between hypervisors is Geneve\[char46] For Geneve encapsulation, OVN transmits the logical datapath identifier in the Geneve VNI\[char46] OVN transmits the logical ingress and logical egress ports in a TLV with class 0x0102, type 0x80, and a 32-bit value encoded as follows, from MSB to LSB:
+.PP
+.\" check if in troff mode (TTY)
+.if t \{
+.PS
+boxht = .2
+textht = 1/6
+fillval = .2
+[
+B0: box "rsv" width .25
+B1: box "ingress port" width .75
+B2: box "egress port" width .75
+"1" at B0.n above
+"0" at B0.s below
+"15" at B1.n above
+"" at B1.s below
+"16" at B2.n above
+"" at B2.s below
+line <-> invis "" above from B0.nw + (0,textht) to B2.ne + (0,textht)
+]
+.PE
+\}
+.\" check if in nroff mode:
+.if n \{
+.nf
+\fL  1       15          16
+.br
+\fL+---+------------+-----------+
+.br
+\fL|rsv|ingress port|egress port|
+.br
+\fL+---+------------+-----------+
+.br
+\fL  0
+.fi
+\}
+.PP
+.PP
+Environments whose NICs lack Geneve offload may prefer STT encapsulation for performance reasons\[char46] For STT encapsulation, OVN encodes all three pieces of logical metadata in the STT 64-bit tunnel ID as follows, from MSB to LSB:
+.PP
+.\" check if in troff mode (TTY)
+.if t \{
+.PS
+boxht = .2
+textht = 1/6
+fillval = .2
+[
+B0: box "reserved" width .5
+B1: box "ingress port" width .75
+B2: box "egress port" width .75
+B3: box "datapath" width 1.25
+"9" at B0.n above
+"0" at B0.s below
+"15" at B1.n above
+"" at B1.s below
+"16" at B2.n above
+"" at B2.s below
+"24" at B3.n above
+"" at B3.s below
+line <-> invis "" above from B0.nw + (0,textht) to B3.ne + (0,textht)
+]
+.PE
+\}
+.\" check if in nroff mode:
+.if n \{
+.nf
+\fL    9          15          16         24
+.br
+\fL+--------+------------+-----------+--------+
+.br
+\fL|reserved|ingress port|egress port|datapath|
+.br
+\fL+--------+------------+-----------+--------+
+.br
+\fL    0
+.fi
+\}
+.PP
+.PP
+For connecting to gateways, in addition to Geneve and STT, OVN supports VXLAN, because only VXLAN support is common on top-of-rack (ToR) switches\[char46] Currently, gateways have a feature set that matches the capabilities as defined by the VTEP schema, so fewer bits of metadata are necessary\[char46] In the future, gateways that do not support encapsulations with large amounts of metadata may continue to have a reduced feature set\[char46]
diff --git a/support/dist-docs-branch-23.06/ovn-architecture.7.html b/support/dist-docs-branch-23.06/ovn-architecture.7.html
new file mode 100644
index 00000000..68a75bd5
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-architecture.7.html
@@ -0,0 +1,2173 @@
+<html><head><meta charset="UTF-8"></head><body><pre>
+<u>o</u><u>v</u><u>n</u><u>-</u><u>a</u><u>r</u><u>c</u><u>h</u><u>i</u><u>t</u><u>e</u><u>c</u><u>t</u><u>u</u><u>r</u><u>e</u>(7)               OVN Manual               <u>o</u><u>v</u><u>n</u><u>-</u><u>a</u><u>r</u><u>c</u><u>h</u><u>i</u><u>t</u><u>e</u><u>c</u><u>t</u><u>u</u><u>r</u><u>e</u>(7)
+
+<b>N</b><b>A</b><b>M</b><b>E</b>
+       ovn-architecture - Open Virtual Network architecture
+
+<b>D</b><b>E</b><b>S</b><b>C</b><b>R</b><b>I</b><b>P</b><b>T</b><b>I</b><b>O</b><b>N</b>
+       OVN,  the  Open Virtual Network, is a system to support logical network
+       abstraction in virtual machine and container environments. OVN  comple‐
+       ments  the existing capabilities of OVS to add native support for logi‐
+       cal network abstractions, such as logical L2 and L3 overlays and  secu‐
+       rity  groups.  Services  such as DHCP are also desirable features. Just
+       like OVS, OVN’s design goal is to have a production-quality implementa‐
+       tion that can operate at significant scale.
+
+       A physical network comprises physical wires, switches, and  routers.  A
+       <u>v</u><u>i</u><u>r</u><u>t</u><u>u</u><u>a</u><u>l</u>  <u>n</u><u>e</u><u>t</u><u>w</u><u>o</u><u>r</u><u>k</u>  extends  a physical network into a hypervisor or con‐
+       tainer platform, bridging VMs or containers into the physical  network.
+       An OVN <u>l</u><u>o</u><u>g</u><u>i</u><u>c</u><u>a</u><u>l</u> <u>n</u><u>e</u><u>t</u><u>w</u><u>o</u><u>r</u><u>k</u> is a network implemented in software that is in‐
+       sulated  from  physical (and thus virtual) networks by tunnels or other
+       encapsulations. This allows IP and other address spaces used in logical
+       networks to overlap with those used on physical networks without  caus‐
+       ing  conflicts.  Logical network topologies can be arranged without re‐
+       gard for the topologies of the physical networks  on  which  they  run.
+       Thus, VMs that are part of a logical network can migrate from one phys‐
+       ical  machine  to  another without network disruption. See <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b> <b>N</b><b>e</b><b>t</b>‐‐
+       <b>w</b><b>o</b><b>r</b><b>k</b><b>s</b>, below, for more information.
+
+       The encapsulation layer prevents VMs and containers connected to a log‐
+       ical network from communicating with nodes on  physical  networks.  For
+       clustering  VMs  and  containers, this can be acceptable or even desir‐
+       able, but in many cases VMs and  containers  do  need  connectivity  to
+       physical  networks.  OVN  provides  multiple forms of <u>g</u><u>a</u><u>t</u><u>e</u><u>w</u><u>a</u><u>y</u><u>s</u> for this
+       purpose. See <b>G</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>s</b>, below, for more information.
+
+       An OVN deployment consists of several components:
+
+              •      A <u>C</u><u>l</u><u>o</u><u>u</u><u>d</u> <u>M</u><u>a</u><u>n</u><u>a</u><u>g</u><u>e</u><u>m</u><u>e</u><u>n</u><u>t</u> <u>S</u><u>y</u><u>s</u><u>t</u><u>e</u><u>m</u> (<u>C</u><u>M</u><u>S</u>), which is OVN’s  ultimate
+                     client  (via  its users and administrators). OVN integra‐
+                     tion requires installing a CMS-specific  plugin  and  re‐
+                     lated  software  (see below). OVN initially targets Open‐
+                     Stack as CMS.
+
+                     We generally speak of ``the’’ CMS, but  one  can  imagine
+                     scenarios  in which multiple CMSes manage different parts
+                     of an OVN deployment.
+
+              •      An OVN Database physical or virtual node (or, eventually,
+                     cluster) installed in a central location.
+
+              •      One or more (usually many) <u>h</u><u>y</u><u>p</u><u>e</u><u>r</u><u>v</u><u>i</u><u>s</u><u>o</u><u>r</u><u>s</u>. Hypervisors  must
+                     run Open vSwitch and implement the interface described in
+                     <b>D</b><b>o</b><b>c</b><b>u</b><b>m</b><b>e</b><b>n</b><b>t</b><b>a</b><b>t</b><b>i</b><b>o</b><b>n</b><b>/</b><b>t</b><b>o</b><b>p</b><b>i</b><b>c</b><b>s</b><b>/</b><b>i</b><b>n</b><b>t</b><b>e</b><b>g</b><b>r</b><b>a</b><b>t</b><b>i</b><b>o</b><b>n</b><b>.</b><b>r</b><b>s</b><b>t</b>  in the Open vSwitch
+                     source tree. Any hypervisor platform  supported  by  Open
+                     vSwitch is acceptable.
+
+              •      Zero  or  more <u>g</u><u>a</u><u>t</u><u>e</u><u>w</u><u>a</u><u>y</u><u>s</u>. A gateway extends a tunnel-based
+                     logical network into a physical network  by  bidirection‐
+                     ally  forwarding  packets  between tunnels and a physical
+                     Ethernet port. This allows  non-virtualized  machines  to
+                     participate in logical networks. A gateway may be a phys‐
+                     ical  host,  a virtual machine, or an ASIC-based hardware
+                     switch that supports the <b>v</b><b>t</b><b>e</b><b>p</b>(5) schema.
+
+                     Hypervisors and gateways are  together  called  <u>t</u><u>r</u><u>a</u><u>n</u><u>s</u><u>p</u><u>o</u><u>r</u><u>t</u>
+                     <u>n</u><u>o</u><u>d</u><u>e</u> or <u>c</u><u>h</u><u>a</u><u>s</u><u>s</u><u>i</u><u>s</u>.
+
+       The  diagram  below  shows  how the major components of OVN and related
+       software interact. Starting at the top of the diagram, we have:
+
+              •      The Cloud Management System, as defined above.
+
+              •      The <u>O</u><u>V</u><u>N</u><u>/</u><u>C</u><u>M</u><u>S</u> <u>P</u><u>l</u><u>u</u><u>g</u><u>i</u><u>n</u> is the component of the CMS  that  in‐
+                     terfaces  to OVN. In OpenStack, this is a Neutron plugin.
+                     The plugin’s main purpose is to translate the  CMS’s  no‐
+                     tion  of  logical  network  configuration,  stored in the
+                     CMS’s configuration database in  a  CMS-specific  format,
+                     into an intermediate representation understood by OVN.
+
+                     This component is necessarily CMS-specific, so a new plu‐
+                     gin needs to be developed for each CMS that is integrated
+                     with OVN. All of the components below this one in the di‐
+                     agram are CMS-independent.
+
+              •      The  <u>O</u><u>V</u><u>N</u>  <u>N</u><u>o</u><u>r</u><u>t</u><u>h</u><u>b</u><u>o</u><u>u</u><u>n</u><u>d</u>  <u>D</u><u>a</u><u>t</u><u>a</u><u>b</u><u>a</u><u>s</u><u>e</u>  receives the intermediate
+                     representation of logical  network  configuration  passed
+                     down  by the OVN/CMS Plugin. The database schema is meant
+                     to be ``impedance matched’’ with the concepts used  in  a
+                     CMS,  so  that  it  directly  supports notions of logical
+                     switches, routers, ACLs, and so on. See <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b>(5) for de‐
+                     tails.
+
+                     The OVN Northbound Database has  only  two  clients:  the
+                     OVN/CMS Plugin above it and <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> below it.
+
+              •      <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>(8)  connects  to  the  OVN Northbound Database
+                     above it and the OVN Southbound  Database  below  it.  It
+                     translates  the logical network configuration in terms of
+                     conventional network concepts, taken from the OVN  North‐
+                     bound  Database,  into  logical datapath flows in the OVN
+                     Southbound Database below it.
+
+              •      The <u>O</u><u>V</u><u>N</u> <u>S</u><u>o</u><u>u</u><u>t</u><u>h</u><u>b</u><u>o</u><u>u</u><u>n</u><u>d</u> <u>D</u><u>a</u><u>t</u><u>a</u><u>b</u><u>a</u><u>s</u><u>e</u> is the center of the  system.
+                     Its  clients  are  <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>(8)  above  it  and <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b>‐‐
+                     <b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>(8) on every transport node below it.
+
+                     The OVN Southbound Database contains three kinds of data:
+                     <u>P</u><u>h</u><u>y</u><u>s</u><u>i</u><u>c</u><u>a</u><u>l</u> <u>N</u><u>e</u><u>t</u><u>w</u><u>o</u><u>r</u><u>k</u> (PN) tables that specify  how  to  reach
+                     hypervisor  and  other nodes, <u>L</u><u>o</u><u>g</u><u>i</u><u>c</u><u>a</u><u>l</u> <u>N</u><u>e</u><u>t</u><u>w</u><u>o</u><u>r</u><u>k</u> (LN) tables
+                     that describe the logical network in terms  of  ``logical
+                     datapath  flows,’’  and  <u>B</u><u>i</u><u>n</u><u>d</u><u>i</u><u>n</u><u>g</u> tables that link logical
+                     network components’ locations to  the  physical  network.
+                     The  hypervisors populate the PN and Port_Binding tables,
+                     whereas <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>(8) populates the LN tables.
+
+                     OVN Southbound Database performance must scale  with  the
+                     number  of transport nodes. This will likely require some
+                     work on  <b>o</b><b>v</b><b>s</b><b>d</b><b>b</b><b>-</b><b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b>(1)  as  we  encounter  bottlenecks.
+                     Clustering for availability may be needed.
+
+       The remaining components are replicated onto each hypervisor:
+
+              •      <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>(8)  is  OVN’s agent on each hypervisor and
+                     software gateway. Northbound,  it  connects  to  the  OVN
+                     Southbound  Database to learn about OVN configuration and
+                     status and to populate the PN table and the <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>  col‐
+                     umn in <b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> table with the hypervisor’s status. South‐
+                     bound, it connects to <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>d</b>(8) as an OpenFlow con‐
+                     troller, for control over network traffic, and to the lo‐
+                     cal  <b>o</b><b>v</b><b>s</b><b>d</b><b>b</b><b>-</b><b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b>(1)  to  allow it to monitor and control
+                     Open vSwitch configuration.
+
+              •      <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>d</b>(8) and <b>o</b><b>v</b><b>s</b><b>d</b><b>b</b><b>-</b><b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b>(1) are conventional com‐
+                     ponents of Open vSwitch.
+
+                                         CMS
+                                          |
+                                          |
+                              +-----------|-----------+
+                              |           |           |
+                              |     OVN/CMS Plugin    |
+                              |           |           |
+                              |           |           |
+                              |   OVN Northbound DB   |
+                              |           |           |
+                              |           |           |
+                              |       ovn-northd      |
+                              |           |           |
+                              +-----------|-----------+
+                                          |
+                                          |
+                                +-------------------+
+                                | OVN Southbound DB |
+                                +-------------------+
+                                          |
+                                          |
+                       +------------------+------------------+
+                       |                  |                  |
+         HV 1          |                  |    HV n          |
+       +---------------|---------------+  .  +---------------|---------------+
+       |               |               |  .  |               |               |
+       |        ovn-controller         |  .  |        ovn-controller         |
+       |         |          |          |  .  |         |          |          |
+       |         |          |          |     |         |          |          |
+       |  ovs-vswitchd   ovsdb-server  |     |  ovs-vswitchd   ovsdb-server  |
+       |                               |     |                               |
+       +-------------------------------+     +-------------------------------+
+
+
+   <b>I</b><b>n</b><b>f</b><b>o</b><b>r</b><b>m</b><b>a</b><b>t</b><b>i</b><b>o</b><b>n</b> <b>F</b><b>l</b><b>o</b><b>w</b> <b>i</b><b>n</b> <b>O</b><b>V</b><b>N</b>
+       Configuration data in OVN flows from north to south. The  CMS,  through
+       its  OVN/CMS  plugin,  passes  the  logical  network  configuration  to
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> via the northbound database. In  turn,  <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>  compiles
+       the  configuration  into a lower-level form and passes it to all of the
+       chassis via the southbound database.
+
+       Status information in OVN flows from south to north. OVN currently pro‐
+       vides only a few forms of status information. First,  <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>  popu‐
+       lates  the  <b>u</b><b>p</b> column in the northbound <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b> table: if a
+       logical port’s <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> column in the southbound <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>  table  is
+       nonempty,  it  sets <b>u</b><b>p</b> to <b>t</b><b>r</b><b>u</b><b>e</b>, otherwise to <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>. This allows the CMS
+       to detect when a VM’s networking has come up.
+
+       Second, OVN provides feedback to the CMS on the realization of its con‐
+       figuration, that is, whether the configuration provided by the CMS  has
+       taken  effect.  This  feature  requires the CMS to participate in a se‐
+       quence number protocol, which works the following way:
+
+              1.  When the CMS updates the  configuration  in  the  northbound
+                  database, as part of the same transaction, it increments the
+                  value  of the <b>n</b><b>b</b><b>_</b><b>c</b><b>f</b><b>g</b> column in the <b>N</b><b>B</b><b>_</b><b>G</b><b>l</b><b>o</b><b>b</b><b>a</b><b>l</b> table. (This is
+                  only necessary if the CMS wants to know when the  configura‐
+                  tion has been realized.)
+
+              2.  When  <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>  updates the southbound database based on a
+                  given snapshot of the northbound database, it copies  <b>n</b><b>b</b><b>_</b><b>c</b><b>f</b><b>g</b>
+                  from  northbound  <b>N</b><b>B</b><b>_</b><b>G</b><b>l</b><b>o</b><b>b</b><b>a</b><b>l</b>  into  the  southbound  database
+                  <b>S</b><b>B</b><b>_</b><b>G</b><b>l</b><b>o</b><b>b</b><b>a</b><b>l</b> table, as part of the same transaction. (Thus,  an
+                  observer  monitoring  both  databases can determine when the
+                  southbound database is caught up with the northbound.)
+
+              3.  After <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> receives confirmation from  the  southbound
+                  database  server that its changes have committed, it updates
+                  <b>s</b><b>b</b><b>_</b><b>c</b><b>f</b><b>g</b> in the northbound <b>N</b><b>B</b><b>_</b><b>G</b><b>l</b><b>o</b><b>b</b><b>a</b><b>l</b> table to the <b>n</b><b>b</b><b>_</b><b>c</b><b>f</b><b>g</b>  ver‐
+                  sion  that  was  pushed  down. (Thus, the CMS or another ob‐
+                  server can determine when the southbound database is  caught
+                  up without a connection to the southbound database.)
+
+              4.  The  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> process on each chassis receives the up‐
+                  dated southbound database, with  the  updated  <b>n</b><b>b</b><b>_</b><b>c</b><b>f</b><b>g</b>.  This
+                  process  in turn updates the physical flows installed in the
+                  chassis’s Open vSwitch instances. When it receives confirma‐
+                  tion from Open vSwitch that the physical flows have been up‐
+                  dated, it updates <b>n</b><b>b</b><b>_</b><b>c</b><b>f</b><b>g</b> in its own <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>  record  in  the
+                  southbound database.
+
+              5.  <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>  monitors the <b>n</b><b>b</b><b>_</b><b>c</b><b>f</b><b>g</b> column in all of the <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>
+                  records in the southbound database. It keeps  track  of  the
+                  minimum  value  among all the records and copies it into the
+                  <b>h</b><b>v</b><b>_</b><b>c</b><b>f</b><b>g</b> column in the northbound <b>N</b><b>B</b><b>_</b><b>G</b><b>l</b><b>o</b><b>b</b><b>a</b><b>l</b> table. (Thus,  the
+                  CMS or another observer can determine when all of the hyper‐
+                  visors have caught up to the northbound configuration.)
+
+   <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> <b>S</b><b>e</b><b>t</b><b>u</b><b>p</b>
+       Each  chassis  in  an  OVN  deployment  must be configured with an Open
+       vSwitch bridge dedicated for OVN’s use, called the <u>i</u><u>n</u><u>t</u><u>e</u><u>g</u><u>r</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u>  <u>b</u><u>r</u><u>i</u><u>d</u><u>g</u><u>e</u>.
+       System  startup  scripts  may  create  this  bridge  prior  to starting
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> if desired. If this bridge does not exist when  ovn-con‐
+       troller  starts, it will be created automatically with the default con‐
+       figuration suggested below. The ports on  the  integration  bridge  in‐
+       clude:
+
+              •      On  any  chassis,  tunnel ports that OVN uses to maintain
+                     logical network connectivity.  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>  adds,  up‐
+                     dates, and removes these tunnel ports.
+
+              •      On a hypervisor, any VIFs that are to be attached to log‐
+                     ical  networks.  For instances connected through software
+                     emulated ports such as TUN/TAP or VETH pairs, the  hyper‐
+                     visor  itself  will  normally  create ports and plug them
+                     into the  integration  bridge.  For  instances  connected
+                     through  representor  ports, typically used with hardware
+                     offload, the <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> may on CMS direction  consult
+                     a  VIF plug provider for representor port lookup and plug
+                     them into the integration bridge (please refer  to  <b>D</b><b>o</b><b>c</b><b>u</b>‐‐
+                     <b>m</b><b>e</b><b>n</b><b>t</b><b>a</b><b>t</b><b>i</b><b>o</b><b>n</b><b>/</b><b>t</b><b>o</b><b>p</b>‐‐
+                     <b>i</b><b>c</b><b>s</b><b>/</b><b>v</b><b>i</b><b>f</b><b>-</b><b>p</b><b>l</b><b>u</b><b>g</b><b>-</b><b>p</b><b>r</b><b>o</b><b>v</b><b>i</b><b>d</b><b>e</b><b>r</b><b>s</b><b>/</b><b>v</b><b>i</b><b>f</b><b>-</b><b>p</b><b>l</b><b>u</b><b>g</b><b>-</b><b>p</b><b>r</b><b>o</b><b>v</b><b>i</b><b>d</b><b>e</b><b>r</b><b>s</b><b>.</b><b>r</b><b>s</b><b>t</b>
+                      for more information). In both cases the conventions de‐
+                     scribed  in  <b>D</b><b>o</b><b>c</b><b>u</b><b>m</b><b>e</b><b>n</b><b>t</b><b>a</b><b>t</b><b>i</b><b>o</b><b>n</b><b>/</b><b>t</b><b>o</b><b>p</b><b>i</b><b>c</b><b>s</b><b>/</b><b>i</b><b>n</b><b>t</b><b>e</b><b>g</b><b>r</b><b>a</b><b>t</b><b>i</b><b>o</b><b>n</b><b>.</b><b>r</b><b>s</b><b>t</b>  in the
+                     Open vSwitch source tree is followed  to  ensure  mapping
+                     between  OVN  logical port and VIF. (This is pre-existing
+                     integration work that has already been done  on  hypervi‐
+                     sors that support OVS.)
+
+              •      On  a gateway, the physical port used for logical network
+                     connectivity. System startup scripts add this port to the
+                     bridge prior to starting <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>. This  can  be  a
+                     patch port to another bridge, instead of a physical port,
+                     in more sophisticated setups.
+
+       Other  ports  should not be attached to the integration bridge. In par‐
+       ticular, physical ports attached to the underlay network (as opposed to
+       gateway ports, which are physical ports attached to  logical  networks)
+       must not be attached to the integration bridge. Underlay physical ports
+       should instead be attached to a separate Open vSwitch bridge (they need
+       not be attached to any bridge at all, in fact).
+
+       The integration bridge should be configured as described below. The ef‐
+       fect    of    each    of    these    settings    is    documented    in
+       <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>d</b><b>.</b><b>c</b><b>o</b><b>n</b><b>f</b><b>.</b><b>d</b><b>b</b>(5):
+
+              <b>f</b><b>a</b><b>i</b><b>l</b><b>-</b><b>m</b><b>o</b><b>d</b><b>e</b><b>=</b><b>s</b><b>e</b><b>c</b><b>u</b><b>r</b><b>e</b>
+                     Avoids switching packets between  isolated  logical  net‐
+                     works  before  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>  starts  up. See <b>C</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>
+                     <b>F</b><b>a</b><b>i</b><b>l</b><b>u</b><b>r</b><b>e</b> <b>S</b><b>e</b><b>t</b><b>t</b><b>i</b><b>n</b><b>g</b><b>s</b> in <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>c</b><b>t</b><b>l</b>(8) for more information.
+
+              <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>-</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>:</b><b>d</b><b>i</b><b>s</b><b>a</b><b>b</b><b>l</b><b>e</b><b>-</b><b>i</b><b>n</b><b>-</b><b>b</b><b>a</b><b>n</b><b>d</b><b>=</b><b>t</b><b>r</b><b>u</b><b>e</b>
+                     Suppresses in-band  control  flows  for  the  integration
+                     bridge.  It  would  be  unusual for such flows to show up
+                     anyway, because OVN uses a local controller (over a  Unix
+                     domain  socket) instead of a remote controller. It’s pos‐
+                     sible, however, for some other bridge in the same  system
+                     to  have  an  in-band remote controller, and in that case
+                     this suppresses the flows that in-band control would  or‐
+                     dinarily  set up. Refer to the documentation for more in‐
+                     formation.
+
+       The customary name for the integration bridge is  <b>b</b><b>r</b><b>-</b><b>i</b><b>n</b><b>t</b>,  but  another
+       name may be used.
+
+   <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b> <b>N</b><b>e</b><b>t</b><b>w</b><b>o</b><b>r</b><b>k</b><b>s</b>
+       Logical  network  concepts  in OVN include <u>l</u><u>o</u><u>g</u><u>i</u><u>c</u><u>a</u><u>l</u> <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u><u>e</u><u>s</u> and <u>l</u><u>o</u><u>g</u><u>i</u><u>c</u><u>a</u><u>l</u>
+       <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u><u>s</u>, the logical version of Ethernet switches and IP  routers,  re‐
+       spectively.  Like  their physical cousins, logical switches and routers
+       can be connected into sophisticated topologies.  Logical  switches  and
+       routers  are  ordinarily purely logical entities, that is, they are not
+       associated or bound to any physical location, and they are  implemented
+       in a distributed manner at each hypervisor that participates in OVN.
+
+       <u>L</u><u>o</u><u>g</u><u>i</u><u>c</u><u>a</u><u>l</u>  <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u> <u>p</u><u>o</u><u>r</u><u>t</u><u>s</u> (LSPs) are points of connectivity into and out of
+       logical switches. There are many kinds of  logical  switch  ports.  The
+       most  ordinary  kind represent VIFs, that is, attachment points for VMs
+       or containers. A VIF logical port is associated with the physical loca‐
+       tion of its VM, which might change as the VM migrates. (A  VIF  logical
+       port  can  be  associated  with a VM that is powered down or suspended.
+       Such a logical port has no location and no connectivity.)
+
+       <u>L</u><u>o</u><u>g</u><u>i</u><u>c</u><u>a</u><u>l</u> <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u> <u>p</u><u>o</u><u>r</u><u>t</u><u>s</u> (LRPs) are points of connectivity into and out  of
+       logical  routers.  A  LRP connects a logical router either to a logical
+       switch or to another logical router. Logical routers  only  connect  to
+       VMs,  containers,  and  other network nodes indirectly, through logical
+       switches.
+
+       Logical switches and logical routers have  distinct  kinds  of  logical
+       ports,  so  properly  speaking  one  should  usually talk about logical
+       switch ports or logical router ports. However, an unqualified ``logical
+       port’’ usually refers to a logical switch port.
+
+       When a VM sends a packet to a VIF logical switch port, the Open vSwitch
+       flow tables simulate the packet’s journey through that  logical  switch
+       and  any  other  logical routers and logical switches that it might en‐
+       counter. This happens without transmitting the packet across any physi‐
+       cal medium: the flow tables implement all of the switching and  routing
+       decisions  and behavior. If the flow tables ultimately decide to output
+       the packet at a logical port attached to another hypervisor (or another
+       kind of transport node), then that is the time at which the  packet  is
+       encapsulated for physical network transmission and sent.
+
+     <u>L</u><u>o</u><u>g</u><u>i</u><u>c</u><u>a</u><u>l</u> <u>S</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u> <u>P</u><u>o</u><u>r</u><u>t</u> <u>T</u><u>y</u><u>p</u><u>e</u><u>s</u>
+
+       OVN  supports a number of kinds of logical switch ports. VIF ports that
+       connect to VMs or containers, described above, are  the  most  ordinary
+       kind  of  LSP.  In the OVN northbound database, VIF ports have an empty
+       string for their <b>t</b><b>y</b><b>p</b><b>e</b>. This section describes some  of  the  additional
+       port types.
+
+       A  <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b>  logical  switch  port connects a logical switch to a logical
+       router, designating a particular LRP as its peer.
+
+       A <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b> logical switch port bridges a logical switch to  a  physical
+       VLAN. A logical switch may have one or more <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b> ports. Such a log‐
+       ical switch is used in two scenarios:
+
+              •      With  one  or more <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b> logical switch ports, to attach
+                     L3 gateway routers and distributed gateways to a physical
+                     network.
+
+              •      With one or more VIF logical switch ports, to attach  VMs
+                     or  containers  directly  to  a physical network. In this
+                     case, the logical switch is not really logical, since  it
+                     is  bridged to the physical network rather than insulated
+                     from it, and therefore cannot have independent but  over‐
+                     lapping  IP  address  namespaces, etc. A deployment might
+                     nevertheless choose such a configuration to  take  advan‐
+                     tage  of  the OVN control plane and features such as port
+                     security and ACLs.
+
+       When a logical switch contains multiple <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b> ports,  the  following
+       is assumed.
+
+              •      Each chassis has a bridge mapping for one of the <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b>
+                     physical networks only.
+
+              •      To  facilitate interconnectivity between VIF ports of the
+                     switch that are located on different chassis with differ‐
+                     ent physical network connectivity, the fabric  implements
+                     L3  routing  between these adjacent physical network seg‐
+                     ments.
+
+       Note: nothing said above implies that a chassis cannot  be  plugged  to
+       multiple  physical  networks  as  long  as  they  belong  to  different
+       switches.
+
+       A <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b> logical switch port is a special kind of VIF logical switch
+       port. These ports are present in every chassis, not bound to  any  par‐
+       ticular  one.  Traffic to such a port will never be forwarded through a
+       tunnel, and traffic from such a port is expected to be destined only to
+       the same chassis, typically in response to a request it received. Open‐
+       Stack Neutron uses a <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b> port to serve metadata to VMs.  A  meta‐
+       data  proxy  process is attached to this port on every host and all VMs
+       within the same network will reach it at the same IP/MAC address  with‐
+       out  any traffic being sent over a tunnel. For further details, see the
+       OpenStack documentation for networking-ovn.
+
+       LSP types <b>v</b><b>t</b><b>e</b><b>p</b> and <b>l</b><b>2</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b> are used for gateways. See  <b>G</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>s</b>,  be‐
+       low, for more information.
+
+     <u>I</u><u>m</u><u>p</u><u>l</u><u>e</u><u>m</u><u>e</u><u>n</u><u>t</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u> <u>D</u><u>e</u><u>t</u><u>a</u><u>i</u><u>l</u><u>s</u>
+
+       These  concepts  are details of how OVN is implemented internally. They
+       might still be of interest to users and administrators.
+
+       <u>L</u><u>o</u><u>g</u><u>i</u><u>c</u><u>a</u><u>l</u> <u>d</u><u>a</u><u>t</u><u>a</u><u>p</u><u>a</u><u>t</u><u>h</u><u>s</u> are an implementation detail of logical  networks  in
+       the  OVN southbound database. <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> translates each logical switch
+       or router in the northbound database into a  logical  datapath  in  the
+       southbound database <b>D</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> table.
+
+       For  the most part, <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> also translates each logical switch port
+       in the OVN northbound database into a record in the southbound database
+       <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> table. The latter table corresponds roughly to the  north‐
+       bound  <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b> table. It has multiple types of logical port
+       bindings, of which many types correspond  directly  to  northbound  LSP
+       types. LSP types handled this way include VIF (empty string), <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b>,
+       <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b>, <b>v</b><b>t</b><b>e</b><b>p</b>, and <b>l</b><b>2</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b>.
+
+       The  <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> table has some types of port binding that do not cor‐
+       respond directly to logical switch port types. The common is <b>p</b><b>a</b><b>t</b><b>c</b><b>h</b> port
+       bindings, known as <u>l</u><u>o</u><u>g</u><u>i</u><u>c</u><u>a</u><u>l</u> <u>p</u><u>a</u><u>t</u><u>c</u><u>h</u> <u>p</u><u>o</u><u>r</u><u>t</u><u>s</u>. These port bindings always  oc‐
+       cur  in pairs, and a packet that enters on either side comes out on the
+       other. <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> connects logical switches  and  logical  routers  to‐
+       gether using logical patch ports.
+
+       Port  bindings  with types <b>v</b><b>t</b><b>e</b><b>p</b>, <b>l</b><b>2</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b>, <b>l</b><b>3</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b>, and <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>r</b><b>e</b><b>d</b><b>i</b>‐‐
+       <b>r</b><b>e</b><b>c</b><b>t</b> are used for gateways. These are explained in <b>G</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>s</b>, below.
+
+   <b>G</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>s</b>
+       Gateways provide limited  connectivity  between  logical  networks  and
+       physical ones. They can also provide connectivity between different OVN
+       deployments. This section will focus on the former, and the latter will
+       be described in details in section <b>O</b><b>V</b><b>N</b> <b>D</b><b>e</b><b>p</b><b>l</b><b>o</b><b>y</b><b>m</b><b>e</b><b>n</b><b>t</b><b>s</b> <b>I</b><b>n</b><b>t</b><b>e</b><b>r</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>.
+
+       OVN support multiple kinds of gateways.
+
+     <u>V</u><u>T</u><u>E</u><u>P</u> <u>G</u><u>a</u><u>t</u><u>e</u><u>w</u><u>a</u><u>y</u><u>s</u>
+
+       A  ``VTEP  gateway’’  connects an OVN logical network to a physical (or
+       virtual) switch that implements the OVSDB VTEP schema that  accompanies
+       Open vSwitch. (The ``VTEP gateway’’ term is a misnomer, since a VTEP is
+       just  a  VXLAN Tunnel Endpoint, but it is a well established name.) See
+       <b>L</b><b>i</b><b>f</b><b>e</b> <b>C</b><b>y</b><b>c</b><b>l</b><b>e</b> <b>o</b><b>f</b> <b>a</b> <b>V</b><b>T</b><b>E</b><b>P</b> <b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b>, below, for more information.
+
+       The main intended use case for VTEP  gateways  is  to  attach  physical
+       servers  to  an OVN logical network using a physical top-of-rack switch
+       that supports the OVSDB VTEP schema.
+
+     <u>L</u><u>2</u> <u>G</u><u>a</u><u>t</u><u>e</u><u>w</u><u>a</u><u>y</u><u>s</u>
+
+       A L2 gateway simply attaches a designated physical L2 segment available
+       on some chassis to a logical network. The physical network  effectively
+       becomes part of the logical network.
+
+       To set up a L2 gateway, the CMS adds an <b>l</b><b>2</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b> LSP to an appropriate
+       logical  switch,  setting  LSP  options to name the chassis on which it
+       should be bound. <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> copies this configuration into a southbound
+       <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> record. On the designated chassis, <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> forwards
+       packets appropriately to and from the physical segment.
+
+       L2 gateway ports have features in common with <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b> ports.  However,
+       with  a  <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b>  port, the physical network becomes the transport be‐
+       tween hypervisors. With an L2 gateway, packets  are  still  transported
+       between  hypervisors  over  tunnels and the <b>l</b><b>2</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b> port is only used
+       for the packets that are on the physical network. The  application  for
+       L2  gateways is similar to that for VTEP gateways, e.g. to add non-vir‐
+       tualized machines to a logical network, but L2 gateways do not  require
+       special support from top-of-rack hardware switches.
+
+     <u>L</u><u>3</u> <u>G</u><u>a</u><u>t</u><u>e</u><u>w</u><u>a</u><u>y</u> <u>R</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u><u>s</u>
+
+       As described above under <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b> <b>N</b><b>e</b><b>t</b><b>w</b><b>o</b><b>r</b><b>k</b><b>s</b>, ordinary OVN logical routers
+       are  distributed: they are not implemented in a single place but rather
+       in every hypervisor chassis. This is a problem  for  stateful  services
+       such  as  SNAT  and DNAT, which need to be implemented in a centralized
+       manner.
+
+       To allow for this  kind  of  functionality,  OVN  supports  L3  gateway
+       routers, which are OVN logical routers that are implemented in a desig‐
+       nated  chassis.  Gateway routers are typically used between distributed
+       logical routers and physical networks. The distributed  logical  router
+       and the logical switches behind it, to which VMs and containers attach,
+       effectively  reside  on each hypervisor. The distributed router and the
+       gateway router are connected by another logical switch,  sometimes  re‐
+       ferred  to  as  a  ``join’’ logical switch. (OVN logical routers may be
+       connected to one another directly, without an intervening  switch,  but
+       the  OVN  implementation only supports gateway logical routers that are
+       connected to logical switches. Using a join logical switch also reduces
+       the number of IP addresses needed on the distributed  router.)  On  the
+       other  side, the gateway router connects to another logical switch that
+       has a <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b> port connecting to the physical network.
+
+       The following diagram shows a typical situation. One  or  more  logical
+       switches LS1, ..., LSn connect to distributed logical router LR1, which
+       in  turn  connects  through LSjoin to gateway logical router GLR, which
+       also connects to logical switch LSlocal, which includes a <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b> port
+       to attach to the physical network.
+
+                                       LSlocal
+                                          |
+                                         GLR
+                                          |
+                                       LSjoin
+                                          |
+                                         LR1
+                                          |
+                                     +----+----+
+                                     |    |    |
+                                    LS1  ...  LSn
+
+
+       To configure an L3 gateway router, the CMS sets <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> in  the
+       router’s  northbound <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b> to the chassis’s name. In response,
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> uses a special <b>l</b><b>3</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b> port binding (instead  of  a  <b>p</b><b>a</b><b>t</b><b>c</b><b>h</b>
+       binding)  in  the  southbound database to connect the logical router to
+       its neighbors. In turn, <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> tunnels  packets  to  this  port
+       binding  to  the  designated  L3 gateway chassis, instead of processing
+       them locally.
+
+       DNAT and SNAT rules may be associated with a gateway router, which pro‐
+       vides a central location that can handle one-to-many SNAT (aka IP  mas‐
+       querading).  Distributed  gateway  ports, described below, also support
+       NAT.
+
+     <u>D</u><u>i</u><u>s</u><u>t</u><u>r</u><u>i</u><u>b</u><u>u</u><u>t</u><u>e</u><u>d</u> <u>G</u><u>a</u><u>t</u><u>e</u><u>w</u><u>a</u><u>y</u> <u>P</u><u>o</u><u>r</u><u>t</u><u>s</u>
+
+       A <u>d</u><u>i</u><u>s</u><u>t</u><u>r</u><u>i</u><u>b</u><u>u</u><u>t</u><u>e</u><u>d</u> <u>g</u><u>a</u><u>t</u><u>e</u><u>w</u><u>a</u><u>y</u> <u>p</u><u>o</u><u>r</u><u>t</u> is a logical router port that  is  specially
+       configured  to  designate one distinguished chassis, called the <u>g</u><u>a</u><u>t</u><u>e</u><u>w</u><u>a</u><u>y</u>
+       <u>c</u><u>h</u><u>a</u><u>s</u><u>s</u><u>i</u><u>s</u>, for centralized processing. A distributed gateway port  should
+       connect  to  a logical switch that has an LSP that connects externally,
+       that is, either a <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b> LSP or a connection to another  OVN  deploy‐
+       ment  (see  <b>O</b><b>V</b><b>N</b> <b>D</b><b>e</b><b>p</b><b>l</b><b>o</b><b>y</b><b>m</b><b>e</b><b>n</b><b>t</b><b>s</b> <b>I</b><b>n</b><b>t</b><b>e</b><b>r</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>). Packets that traverse the
+       distributed gateway port are processed without  involving  the  gateway
+       chassis  when  they  can  be, but when needed they do take an extra hop
+       through it.
+
+       The following diagram illustrates the  use  of  a  distributed  gateway
+       port. A number of logical switches LS1, ..., LSn connect to distributed
+       logical  router  LR1,  which  in  turn connects through the distributed
+       gateway port to logical switch LSlocal that includes a <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b> port to
+       attach to the physical network.
+
+                                       LSlocal
+                                          |
+                                         LR1
+                                          |
+                                     +----+----+
+                                     |    |    |
+                                    LS1  ...  LSn
+
+
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> creates two southbound <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> records to  represent  a
+       distributed  gateway  port, instead of the usual one. One of these is a
+       <b>p</b><b>a</b><b>t</b><b>c</b><b>h</b> port binding named for the LRP, which is used for as much traffic
+       as it can. The other one is a port binding with  type  <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b>,
+       named  <b>c</b><b>r</b><b>-</b><u>p</u><u>o</u><u>r</u><u>t</u>.  The  <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b>  port binding has one specialized
+       job: when a packet is output to it, the flow table causes it to be tun‐
+       neled to the gateway chassis, at which point it is automatically output
+       to the <b>p</b><b>a</b><b>t</b><b>c</b><b>h</b> port binding. Thus, the flow table can output to this port
+       binding in cases where a particular task has to happen on  the  gateway
+       chassis.  The  <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b>  port binding is not otherwise used (for
+       example, it never receives packets).
+
+       The CMS may configure distributed gateway ports three  different  ways.
+       See   <b>D</b><b>i</b><b>s</b><b>t</b><b>r</b><b>i</b><b>b</b><b>u</b><b>t</b><b>e</b><b>d</b>   <b>G</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b>   <b>P</b><b>o</b><b>r</b><b>t</b><b>s</b>  in  the  documentation  for  <b>L</b><b>o</b><b>g</b><b>i</b>‐‐
+       <b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b> in <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b>(5) for details.
+
+       Distributed gateway ports support high availability. When more than one
+       chassis is specified, OVN only uses one at a time as the gateway  chas‐
+       sis. OVN uses BFD to monitor gateway connectivity, preferring the high‐
+       est-priority gateway that is online.
+
+       A logical router can have multiple distributed gateway ports, each con‐
+       necting  different  external  networks.  Load balancing is not yet sup‐
+       ported for logical routers with more than one distributed gateway  port
+       configured.
+
+       <u>P</u><u>h</u><u>y</u><u>s</u><u>i</u><u>c</u><u>a</u><u>l</u> <u>V</u><u>L</u><u>A</u><u>N</u> <u>M</u><u>T</u><u>U</u> <u>I</u><u>s</u><u>s</u><u>u</u><u>e</u><u>s</u>
+
+       Consider the preceding diagram again:
+
+                                       LSlocal
+                                          |
+                                         LR1
+                                          |
+                                     +----+----+
+                                     |    |    |
+                                    LS1  ...  LSn
+
+
+       Suppose that each logical switch LS1, ..., LSn is bridged to a physical
+       VLAN-tagged network attached to a <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b> port on LSlocal, over a dis‐
+       tributed  gateway  port  on LR1. If a packet originating on LS<u>i</u> is des‐
+       tined to the external network, OVN sends it to the gateway chassis over
+       a tunnel. There, the packet traverses LR1’s  logical  router  pipeline,
+       possibly  undergoes  NAT,  and eventually ends up at LSlocal’s <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b>
+       port. If all of the physical links in the network have  the  same  MTU,
+       then the packet’s transit across a tunnel causes an MTU problem: tunnel
+       overhead  prevents a packet that uses the full physical MTU from cross‐
+       ing the tunnel to the gateway chassis (without fragmentation).
+
+       OVN offers two solutions to this problem, the  <b>r</b><b>e</b><b>s</b><b>i</b><b>d</b><b>e</b><b>-</b><b>o</b><b>n</b><b>-</b><b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b>‐‐
+       <b>s</b><b>i</b><b>s</b>  and  <b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b><b>-</b><b>t</b><b>y</b><b>p</b><b>e</b>  options.  Both  solutions require each logical
+       switch LS1, ..., LSn to include a <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b>  logical  switch  port  LN1,
+       ...,  LNn  respectively,  that  is  present on each chassis. Both cause
+       packets to be sent over the <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b> ports  instead  of  tunnels.  They
+       differ  in which packets-some or all-are sent this way. The most promi‐
+       nent tradeoff between these options is that  <b>r</b><b>e</b><b>s</b><b>i</b><b>d</b><b>e</b><b>-</b><b>o</b><b>n</b><b>-</b><b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>
+       is easier to configure and that <b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b><b>-</b><b>t</b><b>y</b><b>p</b><b>e</b> performs better for east-
+       west traffic.
+
+       The first solution is the <b>r</b><b>e</b><b>s</b><b>i</b><b>d</b><b>e</b><b>-</b><b>o</b><b>n</b><b>-</b><b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> option for logical
+       router  ports. Setting this option on a LRP from (e.g.) LS1 to LR1 dis‐
+       ables forwarding from LS1 to LR1 except  on  the  gateway  chassis.  On
+       chassis  other  than the gateway chassis, this single change means that
+       packets that would otherwise have been forwarded  to  LR1  are  instead
+       forwarded  to  LN1. The instance of LN1 on the gateway chassis then re‐
+       ceives the packet and forwards it to LR1. The packet traverses the  LR1
+       logical router pipeline, possibly undergoes NAT, and eventually ends up
+       at LSlocal’s <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b> port. The packet never traverses a tunnel, avoid‐
+       ing the MTU issue.
+
+       This option has the further consequence of centralizing ``distributed’’
+       logical  router  LR1, since no packets are forwarded from LS1 to LR1 on
+       any chassis other than the gateway chassis. Therefore, east-west  traf‐
+       fic  passes  through  the  gateway  chassis, not just north-south. (The
+       naive ``fix’’ of allowing east-west traffic to  flow  directly  between
+       chassis over LN1 does not work because routing sets the Ethernet source
+       address to LR1’s source address. Seeing this single Ethernet source ad‐
+       dress  originate  from  all  of  the  chassis will confuse the physical
+       switch.)
+
+       Do not set the <b>r</b><b>e</b><b>s</b><b>i</b><b>d</b><b>e</b><b>-</b><b>o</b><b>n</b><b>-</b><b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> option on a distributed gate‐
+       way port. In the diagram above, it would be set on the LRPs  connecting
+       LS1, ..., LSn to LR1.
+
+       The second solution is the <b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b><b>-</b><b>t</b><b>y</b><b>p</b><b>e</b> option for distributed gateway
+       ports.  Setting  this  option  to <b>b</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b><b>d</b> causes packets that are redi‐
+       rected to the gateway chassis to go over the <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b> ports instead  of
+       being  tunneled. This option does not change how OVN treats packets not
+       redirected to the gateway chassis.
+
+       The <b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b><b>-</b><b>t</b><b>y</b><b>p</b><b>e</b> option requires the administrator or the CMS to  con‐
+       figure  each  participating  chassis with a unique Ethernet address for
+       the logical router by  setting  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>-</b><b>m</b><b>a</b><b>c</b><b>-</b><b>m</b><b>a</b><b>p</b><b>p</b><b>i</b><b>n</b><b>g</b><b>s</b>  in  the  Open
+       vSwitch  database, for use by <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>. This makes it more diffi‐
+       cult to configure than <b>r</b><b>e</b><b>s</b><b>i</b><b>d</b><b>e</b><b>-</b><b>o</b><b>n</b><b>-</b><b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>.
+
+       Set the <b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b><b>-</b><b>t</b><b>y</b><b>p</b><b>e</b> option on a distributed gateway port.
+
+       <u>U</u><u>s</u><u>i</u><u>n</u><u>g</u> <u>D</u><u>i</u><u>s</u><u>t</u><u>r</u><u>i</u><u>b</u><u>u</u><u>t</u><u>e</u><u>d</u> <u>G</u><u>a</u><u>t</u><u>e</u><u>w</u><u>a</u><u>y</u> <u>P</u><u>o</u><u>r</u><u>t</u><u>s</u> <u>F</u><u>o</u><u>r</u> <u>S</u><u>c</u><u>a</u><u>l</u><u>a</u><u>b</u><u>i</u><u>l</u><u>i</u><u>t</u><u>y</u>
+
+       Although the primary goal of distributed gateway ports  is  to  provide
+       connectivity  to  external  networks,  there  is a special use case for
+       scalability.
+
+       In some deployments, such as the  ones  using  <b>o</b><b>v</b><b>n</b><b>-</b><b>k</b><b>u</b><b>b</b><b>e</b><b>r</b><b>n</b><b>e</b><b>t</b><b>e</b><b>s</b>,  logical
+       switches are bound to individual chassises, and are connected by a dis‐
+       tributed logical router. In such deployments, the chassis level logical
+       switches  are  centralized on the chassis instead of distributed, which
+       means the <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> on each chassis doesn’t need to process  flows
+       and  ports of logical switches on other chassises. However, without any
+       specific hint, <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>  would  still  process  all  the  logical
+       switches  as  if  they are fully distributed. In this case, distributed
+       gateway port can be very useful. The chassis level logical switches can
+       be connected to the distributed router using distributed gateway ports,
+       by setting the gateway chassis (or HA chassis groups with only a single
+       chassis in it) to the chassis that each logical  switch  is  bound  to.
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>  would  then skip processing the logical switches on all
+       the other chassises, largely improving the scalability, especially when
+       there are a big number of chassises.
+
+   <b>L</b><b>i</b><b>f</b><b>e</b> <b>C</b><b>y</b><b>c</b><b>l</b><b>e</b> <b>o</b><b>f</b> <b>a</b> <b>V</b><b>I</b><b>F</b>
+       Tables and their schemas presented in isolation are difficult to under‐
+       stand. Here’s an example.
+
+       A VIF on a hypervisor is a virtual network interface attached either to
+       a VM or a container running directly on that hypervisor (This  is  dif‐
+       ferent from the interface of a container running inside a VM).
+
+       The  steps  in  this  example refer often to details of the OVN and OVN
+       Northbound database schemas. Please see <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b>(5)  and  <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b>(5),  re‐
+       spectively, for the full story on these databases.
+
+              1.  A VIF’s life cycle begins when a CMS administrator creates a
+                  new VIF using the CMS user interface or API and adds it to a
+                  switch (one implemented by OVN as a logical switch). The CMS
+                  updates  its  own  configuration.  This includes associating
+                  unique, persistent identifier <u>v</u><u>i</u><u>f</u><u>-</u><u>i</u><u>d</u>  and  Ethernet  address
+                  <u>m</u><u>a</u><u>c</u> with the VIF.
+
+              2.  The  CMS  plugin  updates the OVN Northbound database to in‐
+                  clude  the  new  VIF,  by  adding  a  row   to   the   <b>L</b><b>o</b><b>g</b><b>i</b>‐‐
+                  <b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b>  table.  In the new row, <b>n</b><b>a</b><b>m</b><b>e</b> is <u>v</u><u>i</u><u>f</u><u>-</u><u>i</u><u>d</u>, <b>m</b><b>a</b><b>c</b>
+                  is <u>m</u><u>a</u><u>c</u>, <b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b> points to  the  OVN  logical  switch’s  Logi‐
+                  cal_Switch  record, and other columns are initialized appro‐
+                  priately.
+
+              3.  <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> receives the OVN Northbound database  update.  In
+                  turn,  it  makes the corresponding updates to the OVN South‐
+                  bound database, by adding rows to the OVN  Southbound  data‐
+                  base  <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>F</b><b>l</b><b>o</b><b>w</b> table to reflect the new port, e.g. add a
+                  flow to recognize that packets destined to  the  new  port’s
+                  MAC  address  should be delivered to it, and update the flow
+                  that delivers broadcast and multicast packets to include the
+                  new port. It also creates a record in the <b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> table  and
+                  populates  all its columns except the column that identifies
+                  the <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>.
+
+              4.  On  every  hypervisor,  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>  receives  the  <b>L</b><b>o</b><b>g</b><b>i</b>‐‐
+                  <b>c</b><b>a</b><b>l</b><b>_</b><b>F</b><b>l</b><b>o</b><b>w</b>  table updates that <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> made in the previous
+                  step. As long as the VM that owns the VIF  is  powered  off,
+                  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>  cannot  do  much;  it  cannot,  for example,
+                  arrange to send packets to or receive packets from the  VIF,
+                  because the VIF does not actually exist anywhere.
+
+              5.  Eventually,  a  user  powers on the VM that owns the VIF. On
+                  the hypervisor where the VM is powered on,  the  integration
+                  between  the hypervisor and Open vSwitch (described in <b>D</b><b>o</b><b>c</b><b>u</b>‐‐
+                  <b>m</b><b>e</b><b>n</b><b>t</b><b>a</b><b>t</b><b>i</b><b>o</b><b>n</b><b>/</b><b>t</b><b>o</b><b>p</b><b>i</b><b>c</b><b>s</b><b>/</b><b>i</b><b>n</b><b>t</b><b>e</b><b>g</b><b>r</b><b>a</b><b>t</b><b>i</b><b>o</b><b>n</b><b>.</b><b>r</b><b>s</b><b>t</b> in the Open vSwitch  source
+                  tree)  adds the VIF to the OVN integration bridge and stores
+                  <u>v</u><u>i</u><u>f</u><u>-</u><u>i</u><u>d</u> in <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>:<b>i</b><b>f</b><b>a</b><b>c</b><b>e</b><b>-</b><b>i</b><b>d</b> to indicate that the  inter‐
+                  face  is an instantiation of the new VIF. (None of this code
+                  is new in OVN; this is pre-existing  integration  work  that
+                  has already been done on hypervisors that support OVS.)
+
+              6.  On the hypervisor where the VM is powered on, <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>
+                  notices  <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>:<b>i</b><b>f</b><b>a</b><b>c</b><b>e</b><b>-</b><b>i</b><b>d</b>  in the new Interface. In re‐
+                  sponse, in the OVN Southbound DB, it updates the <b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> ta‐
+                  ble’s <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> column for the row that links the logical port
+                  from <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: <b>i</b><b>f</b><b>a</b><b>c</b><b>e</b><b>-</b><b>i</b><b>d</b> to  the  hypervisor.  Afterward,
+                  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>  updates  the local hypervisor’s OpenFlow ta‐
+                  bles so that packets to and from the VIF are  properly  han‐
+                  dled.
+
+              7.  Some CMS systems, including OpenStack, fully start a VM only
+                  when  its  networking  is ready. To support this, <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>
+                  notices the <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> column updated for the  row  in  <b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>
+                  table  and  pushes  this upward by updating the <b>u</b><b>p</b> column in
+                  the OVN Northbound database’s <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b>  table  to
+                  indicate  that  the  VIF is now up. The CMS, if it uses this
+                  feature, can then react by allowing the  VM’s  execution  to
+                  proceed.
+
+              8.  On  every  hypervisor  but  the  one  where the VIF resides,
+                  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> notices the completely populated row  in  the
+                  <b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> table. This provides <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> the physical lo‐
+                  cation  of  the  logical  port, so each instance updates the
+                  OpenFlow tables of its switch  (based  on  logical  datapath
+                  flows  in  the OVN DB <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>F</b><b>l</b><b>o</b><b>w</b> table) so that packets to
+                  and from the VIF can be properly handled via tunnels.
+
+              9.  Eventually, a user powers off the VM that owns the  VIF.  On
+                  the  hypervisor  where  the  VM  was powered off, the VIF is
+                  deleted from the OVN integration bridge.
+
+              10. On the hypervisor where the VM  was  powered  off,  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b>‐‐
+                  <b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>  notices  that  the VIF was deleted. In response, it
+                  removes the <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> column content in the <b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> table  for
+                  the logical port.
+
+              11. On  every hypervisor, <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> notices the empty <b>C</b><b>h</b><b>a</b><b>s</b>‐‐
+                  <b>s</b><b>i</b><b>s</b> column in the <b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> table’s row for the logical  port.
+                  This  means that <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> no longer knows the physical
+                  location of the logical port, so each instance  updates  its
+                  OpenFlow table to reflect that.
+
+              12. Eventually,  when  the  VIF  (or its entire VM) is no longer
+                  needed by anyone, an administrator deletes the VIF using the
+                  CMS user interface or API. The CMS updates its own  configu‐
+                  ration.
+
+              13. The CMS plugin removes the VIF from the OVN Northbound data‐
+                  base, by deleting its row in the <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b> table.
+
+              14. <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>  receives  the  OVN Northbound update and in turn
+                  updates the OVN Southbound database accordingly, by removing
+                  or updating the rows from the OVN Southbound database  <b>L</b><b>o</b><b>g</b><b>i</b>‐‐
+                  <b>c</b><b>a</b><b>l</b><b>_</b><b>F</b><b>l</b><b>o</b><b>w</b>  table  and  <b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> table that were related to the
+                  now-destroyed VIF.
+
+              15. On  every  hypervisor,  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>  receives  the  <b>L</b><b>o</b><b>g</b><b>i</b>‐‐
+                  <b>c</b><b>a</b><b>l</b><b>_</b><b>F</b><b>l</b><b>o</b><b>w</b>  table updates that <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> made in the previous
+                  step. <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> updates OpenFlow tables to reflect  the
+                  update,  although there may not be much to do, since the VIF
+                  had already become unreachable when it was removed from  the
+                  <b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> table in a previous step.
+
+   <b>L</b><b>i</b><b>f</b><b>e</b> <b>C</b><b>y</b><b>c</b><b>l</b><b>e</b> <b>o</b><b>f</b> <b>a</b> <b>C</b><b>o</b><b>n</b><b>t</b><b>a</b><b>i</b><b>n</b><b>e</b><b>r</b> <b>I</b><b>n</b><b>t</b><b>e</b><b>r</b><b>f</b><b>a</b><b>c</b><b>e</b> <b>I</b><b>n</b><b>s</b><b>i</b><b>d</b><b>e</b> <b>a</b> <b>V</b><b>M</b>
+       OVN  provides  virtual  network  abstractions by converting information
+       written in OVN_NB database to OpenFlow flows in each hypervisor. Secure
+       virtual networking for multi-tenants can only be provided if  OVN  con‐
+       troller  is the only entity that can modify flows in Open vSwitch. When
+       the Open vSwitch integration bridge resides in the hypervisor, it is  a
+       fair assumption to make that tenant workloads running inside VMs cannot
+       make any changes to Open vSwitch flows.
+
+       If  the infrastructure provider trusts the applications inside the con‐
+       tainers not to break out and modify the Open vSwitch flows,  then  con‐
+       tainers  can be run in hypervisors. This is also the case when contain‐
+       ers are run inside the VMs and Open  vSwitch  integration  bridge  with
+       flows  added  by  OVN  controller  resides in the same VM. For both the
+       above cases, the workflow is the same as explained with an  example  in
+       the previous section ("Life Cycle of a VIF").
+
+       This  section talks about the life cycle of a container interface (CIF)
+       when containers are created in the VMs and the Open vSwitch integration
+       bridge resides inside the hypervisor. In this case, even if a container
+       application breaks out, other tenants are not affected because the con‐
+       tainers running inside the VMs cannot modify  the  flows  in  the  Open
+       vSwitch integration bridge.
+
+       When  multiple  containers  are created inside a VM, there are multiple
+       CIFs associated with them. The network traffic  associated  with  these
+       CIFs  need  to reach the Open vSwitch integration bridge running in the
+       hypervisor for OVN to support virtual network abstractions. OVN  should
+       also be able to distinguish network traffic coming from different CIFs.
+       There are two ways to distinguish network traffic of CIFs.
+
+       One  way  is  to  provide one VIF for every CIF (1:1 model). This means
+       that there could be a lot of network devices in  the  hypervisor.  This
+       would slow down OVS because of all the additional CPU cycles needed for
+       the management of all the VIFs. It would also mean that the entity cre‐
+       ating  the  containers in a VM should also be able to create the corre‐
+       sponding VIFs in the hypervisor.
+
+       The second way is to provide a single VIF  for  all  the  CIFs  (1:many
+       model).  OVN could then distinguish network traffic coming from differ‐
+       ent CIFs via a tag written in every packet. OVN uses this mechanism and
+       uses VLAN as the tagging mechanism.
+
+              1.  A CIF’s life cycle begins when a container is spawned inside
+                  a VM by the either the same CMS that created  the  VM  or  a
+                  tenant  that  owns that VM or even a container Orchestration
+                  System that is different than the CMS that initially created
+                  the VM. Whoever the entity is, it will need to know the <u>v</u><u>i</u><u>f</u><u>-</u>
+                  <u>i</u><u>d</u> that is associated with the network interface of  the  VM
+                  through  which  the container interface’s network traffic is
+                  expected to go through. The entity  that  creates  the  con‐
+                  tainer interface will also need to choose an unused VLAN in‐
+                  side that VM.
+
+              2.  The  container  spawning  entity (either directly or through
+                  the CMS that manages the underlying infrastructure)  updates
+                  the  OVN  Northbound  database  to  include  the new CIF, by
+                  adding a row to the <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b> table.  In  the  new
+                  row,  <b>n</b><b>a</b><b>m</b><b>e</b> is any unique identifier, <b>p</b><b>a</b><b>r</b><b>e</b><b>n</b><b>t</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b> is the <u>v</u><u>i</u><u>f</u><u>-</u>
+                  <u>i</u><u>d</u> of the VM through which the CIF’s network traffic is  ex‐
+                  pected  to go through and the <b>t</b><b>a</b><b>g</b> is the VLAN tag that iden‐
+                  tifies the network traffic of that CIF.
+
+              3.  <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> receives the OVN Northbound database  update.  In
+                  turn,  it  makes the corresponding updates to the OVN South‐
+                  bound database, by adding rows to the OVN  Southbound  data‐
+                  base’s  <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>F</b><b>l</b><b>o</b><b>w</b>  table to reflect the new port and also
+                  by creating a new row in the <b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>  table  and  populating
+                  all  its columns except the column that identifies the <b>c</b><b>h</b><b>a</b><b>s</b>‐‐
+                  <b>s</b><b>i</b><b>s</b>.
+
+              4.  On  every  hypervisor,  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>  subscribes  to   the
+                  changes  in  the <b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> table. When a new row is created by
+                  <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> that includes a value in  <b>p</b><b>a</b><b>r</b><b>e</b><b>n</b><b>t</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>  column  of
+                  <b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>  table,  the  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> in the hypervisor whose
+                  OVN integration bridge has that same value in <u>v</u><u>i</u><u>f</u><u>-</u><u>i</u><u>d</u> in  <b>e</b><b>x</b>‐‐
+                  <b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>:<b>i</b><b>f</b><b>a</b><b>c</b><b>e</b><b>-</b><b>i</b><b>d</b>  updates the local hypervisor’s OpenFlow
+                  tables so that packets to and from the VIF with the particu‐
+                  lar VLAN <b>t</b><b>a</b><b>g</b> are properly handled. Afterward it updates  the
+                  <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>  column of the <b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> to reflect the physical loca‐
+                  tion.
+
+              5.  One can only start the application inside the container  af‐
+                  ter  the  underlying  network  is  ready.  To  support this,
+                  <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> notices the updated <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> column in <b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> ta‐
+                  ble and updates the <b>u</b><b>p</b> column in the  OVN  Northbound  data‐
+                  base’s <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b> table to indicate that the CIF is
+                  now up. The entity responsible to start the container appli‐
+                  cation queries this value and starts the application.
+
+              6.  Eventually  the  entity  that  created  and started the con‐
+                  tainer, stops it. The entity, through the CMS (or  directly)
+                  deletes its row in the <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b> table.
+
+              7.  <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>  receives  the  OVN Northbound update and in turn
+                  updates the OVN Southbound database accordingly, by removing
+                  or updating the rows from the OVN Southbound database  <b>L</b><b>o</b><b>g</b><b>i</b>‐‐
+                  <b>c</b><b>a</b><b>l</b><b>_</b><b>F</b><b>l</b><b>o</b><b>w</b>  table  that were related to the now-destroyed CIF.
+                  It also deletes the row in the <b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> table for that CIF.
+
+              8.  On  every  hypervisor,  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>  receives  the  <b>L</b><b>o</b><b>g</b><b>i</b>‐‐
+                  <b>c</b><b>a</b><b>l</b><b>_</b><b>F</b><b>l</b><b>o</b><b>w</b>  table updates that <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> made in the previous
+                  step. <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> updates OpenFlow tables to reflect  the
+                  update.
+
+   <b>A</b><b>r</b><b>c</b><b>h</b><b>i</b><b>t</b><b>e</b><b>c</b><b>t</b><b>u</b><b>r</b><b>a</b><b>l</b> <b>P</b><b>h</b><b>y</b><b>s</b><b>i</b><b>c</b><b>a</b><b>l</b> <b>L</b><b>i</b><b>f</b><b>e</b> <b>C</b><b>y</b><b>c</b><b>l</b><b>e</b> <b>o</b><b>f</b> <b>a</b> <b>P</b><b>a</b><b>c</b><b>k</b><b>e</b><b>t</b>
+       This section describes how a packet travels from one virtual machine or
+       container to another through OVN. This description focuses on the phys‐
+       ical treatment of a packet; for a description of the logical life cycle
+       of a packet, please refer to the <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>F</b><b>l</b><b>o</b><b>w</b> table in <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b>(5).
+
+       This  section  mentions  several  data and metadata fields, for clarity
+       summarized here:
+
+              tunnel key
+                     When OVN encapsulates a packet in Geneve or another  tun‐
+                     nel,  it attaches extra data to it to allow the receiving
+                     OVN instance to process it correctly. This takes  differ‐
+                     ent  forms depending on the particular encapsulation, but
+                     in each case we refer to it here as the  ``tunnel  key.’’
+                     See <b>T</b><b>u</b><b>n</b><b>n</b><b>e</b><b>l</b> <b>E</b><b>n</b><b>c</b><b>a</b><b>p</b><b>s</b><b>u</b><b>l</b><b>a</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>, below, for details.
+
+              logical datapath field
+                     A field that denotes the logical datapath through which a
+                     packet  is being processed. OVN uses the field that Open‐
+                     Flow 1.1+ simply (and confusingly) calls ``metadata’’  to
+                     store  the logical datapath. (This field is passed across
+                     tunnels as part of the tunnel key.)
+
+              logical input port field
+                     A field that denotes the  logical  port  from  which  the
+                     packet  entered  the logical datapath. OVN stores this in
+                     Open vSwitch extension register number 14.
+
+                     Geneve and STT tunnels pass this field  as  part  of  the
+                     tunnel  key.  Ramp switch VXLAN tunnels do not explicitly
+                     carry a logical input port, but since they  are  used  to
+                     communicate  with  gateways  that  from OVN’s perspective
+                     consist of only a single logical port, so  that  OVN  can
+                     set  the  logical input port field to this one on ingress
+                     to the OVN logical pipeline. As for  regular  VXLAN  tun‐
+                     nels, they don’t carry input port field at all. This puts
+                     additional  limitations  on cluster capabilities that are
+                     described in <b>T</b><b>u</b><b>n</b><b>n</b><b>e</b><b>l</b> <b>E</b><b>n</b><b>c</b><b>a</b><b>p</b><b>s</b><b>u</b><b>l</b><b>a</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> section.
+
+              logical output port field
+                     A field that denotes the  logical  port  from  which  the
+                     packet  will leave the logical datapath. This is initial‐
+                     ized to  0  at  the  beginning  of  the  logical  ingress
+                     pipeline.  OVN stores this in Open vSwitch extension reg‐
+                     ister number 15.
+
+                     Geneve, STT and regular VXLAN tunnels pass this field  as
+                     part  of the tunnel key. Ramp switch VXLAN tunnels do not
+                     transmit the logical output port field, and since they do
+                     not carry a logical output port field in the tunnel  key,
+                     when  a  packet is received from ramp switch VXLAN tunnel
+                     by an OVN hypervisor, the packet is resubmitted to  table
+                     8  to  determine  the  output  port(s);  when  the packet
+                     reaches table 39, these packets are resubmitted to  table
+                     40  for  local  delivery  by checking a MLF_RCV_FROM_RAMP
+                     flag, which is set when the packet arrives  from  a  ramp
+                     tunnel.
+
+              conntrack zone field for logical ports
+                     A  field  that  denotes  the connection tracking zone for
+                     logical ports. The value only has local significance  and
+                     is not meaningful between chassis. This is initialized to
+                     0  at  the beginning of the logical ingress pipeline. OVN
+                     stores this in Open vSwitch extension register number 13.
+
+              conntrack zone fields for routers
+                     Fields that denote  the  connection  tracking  zones  for
+                     routers.  These  values  only have local significance and
+                     are not meaningful between chassis. OVN stores  the  zone
+                     information  for  north to south traffic (for DNATting or
+                     ECMP symmetric replies) in Open vSwitch extension  regis‐
+                     ter  number  11  and  zone information for south to north
+                     traffic (for SNATing) in Open vSwitch extension  register
+                     number 12.
+
+              logical flow flags
+                     The  logical flags are intended to handle keeping context
+                     between tables in order to decide which rules  in  subse‐
+                     quent  tables  are  matched. These values only have local
+                     significance and are not meaningful between chassis.  OVN
+                     stores the logical flags in Open vSwitch extension regis‐
+                     ter number 10.
+
+              VLAN ID
+                     The  VLAN ID is used as an interface between OVN and con‐
+                     tainers nested inside a VM (see <b>L</b><b>i</b><b>f</b><b>e</b> <b>C</b><b>y</b><b>c</b><b>l</b><b>e</b> <b>o</b><b>f</b> <b>a</b> <b>c</b><b>o</b><b>n</b><b>t</b><b>a</b><b>i</b><b>n</b><b>e</b><b>r</b>
+                     <b>i</b><b>n</b><b>t</b><b>e</b><b>r</b><b>f</b><b>a</b><b>c</b><b>e</b> <b>i</b><b>n</b><b>s</b><b>i</b><b>d</b><b>e</b> <b>a</b> <b>V</b><b>M</b>, above, for more information).
+
+       Initially, a VM or container on the ingress hypervisor sends  a  packet
+       on a port attached to the OVN integration bridge. Then:
+
+              1.  OpenFlow  table  0 performs physical-to-logical translation.
+                  It matches the packet’s ingress port. Its  actions  annotate
+                  the  packet  with  logical  metadata, by setting the logical
+                  datapath field to identify the  logical  datapath  that  the
+                  packet  is  traversing  and  the logical input port field to
+                  identify the ingress port. Then it resubmits to table  8  to
+                  enter the logical ingress pipeline.
+
+                  Packets  that  originate from a container nested within a VM
+                  are treated in a slightly  different  way.  The  originating
+                  container  can  be  distinguished  based on the VIF-specific
+                  VLAN ID, so the physical-to-logical translation flows  addi‐
+                  tionally  match  on  VLAN  ID and the actions strip the VLAN
+                  header. Following this step, OVN treats  packets  from  con‐
+                  tainers just like any other packets.
+
+                  Table  0 also processes packets that arrive from other chas‐
+                  sis. It distinguishes them from  other  packets  by  ingress
+                  port,  which  is a tunnel. As with packets just entering the
+                  OVN pipeline, the actions annotate these packets with  logi‐
+                  cal  datapath  metadata.  For  tunnel types that support it,
+                  they are also annotated with logical ingress port  metadata.
+                  In  addition, the actions set the logical output port field,
+                  which is available because in OVN tunneling occurs after the
+                  logical output port is known. These  pieces  of  information
+                  are  obtained  from  the  tunnel encapsulation metadata (see
+                  <b>T</b><b>u</b><b>n</b><b>n</b><b>e</b><b>l</b> <b>E</b><b>n</b><b>c</b><b>a</b><b>p</b><b>s</b><b>u</b><b>l</b><b>a</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> for encoding details).  Then  the  ac‐
+                  tions  resubmit  to  table  38  to  enter the logical egress
+                  pipeline.
+
+              2.  OpenFlow tables 8 through 31  execute  the  logical  ingress
+                  pipeline  from  the <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>F</b><b>l</b><b>o</b><b>w</b> table in the OVN Southbound
+                  database. These tables are expressed entirely  in  terms  of
+                  logical concepts like logical ports and logical datapaths. A
+                  big  part  of <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>’s job is to translate them into
+                  equivalent OpenFlow (in particular it translates  the  table
+                  numbers:  <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>F</b><b>l</b><b>o</b><b>w</b>  tables  0 through 23 become OpenFlow
+                  tables 8 through 31).
+
+                  Each logical flow maps to one or more OpenFlow flows. An ac‐
+                  tual packet ordinarily matches only one of  these,  although
+                  in  some  cases  it  can  match more than one of these flows
+                  (which is not a problem because all of them  have  the  same
+                  actions). <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> uses the first 32 bits of the logi‐
+                  cal  flow’s  UUID  as  the  cookie  for its OpenFlow flow or
+                  flows. (This is not necessarily unique, since the  first  32
+                  bits of a logical flow’s UUID is not necessarily unique.)
+
+                  Some logical flows can map to the Open vSwitch ``conjunctive
+                  match’’ extension (see <b>o</b><b>v</b><b>s</b><b>-</b><b>f</b><b>i</b><b>e</b><b>l</b><b>d</b><b>s</b>(7)). Flows with a <b>c</b><b>o</b><b>n</b><b>j</b><b>u</b><b>n</b><b>c</b>‐‐
+                  <b>t</b><b>i</b><b>o</b><b>n</b>  action  use  an OpenFlow cookie of 0, because they can
+                  correspond to multiple logical flows. The OpenFlow flow  for
+                  a conjunctive match includes a match on <b>c</b><b>o</b><b>n</b><b>j</b><b>_</b><b>i</b><b>d</b>.
+
+                  Some  logical  flows  may not be represented in the OpenFlow
+                  tables on a given hypervisor, if they could not be  used  on
+                  that  hypervisor. For example, if no VIF in a logical switch
+                  resides on a given hypervisor, and the logical switch is not
+                  otherwise reachable on that hypervisor (e.g. over  a  series
+                  of hops through logical switches and routers starting from a
+                  VIF  on  the  hypervisor),  then the logical flow may not be
+                  represented there.
+
+                  Most OVN actions  have  fairly  obvious  implementations  in
+                  OpenFlow (with OVS extensions), e.g. <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b> is implemented as
+                  <b>r</b><b>e</b><b>s</b><b>u</b><b>b</b><b>m</b><b>i</b><b>t</b>,  <u>f</u><u>i</u><u>e</u><u>l</u><u>d</u>  <b>=</b>  <u>c</u><u>o</u><u>n</u><u>s</u><u>t</u><u>a</u><u>n</u><u>t</u><b>;</b> as <b>s</b><b>e</b><b>t</b><b>_</b><b>f</b><b>i</b><b>e</b><b>l</b><b>d</b>. A few are worth
+                  describing in more detail:
+
+                  <b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b><b>:</b>
+                         Implemented by resubmitting the packet to  table  37.
+                         If the pipeline executes more than one <b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b> action,
+                         then  each one is separately resubmitted to table 37.
+                         This can be used  to  send  multiple  copies  of  the
+                         packet to multiple ports. (If the packet was not mod‐
+                         ified  between  the  <b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b>  actions, and some of the
+                         copies are destined to the same hypervisor, then  us‐
+                         ing  a logical multicast output port would save band‐
+                         width between hypervisors.)
+
+                  <b>g</b><b>e</b><b>t</b><b>_</b><b>a</b><b>r</b><b>p</b><b>(</b><u>P</u><b>,</b> <u>A</u><b>)</b><b>;</b>
+                  <b>g</b><b>e</b><b>t</b><b>_</b><b>n</b><b>d</b><b>(</b><u>P</u><b>,</b> <u>A</u><b>)</b><b>;</b>
+                       Implemented by storing arguments into OpenFlow  fields,
+                       then  resubmitting  to  table  66, which <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>
+                       populates with flows generated from the <b>M</b><b>A</b><b>C</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> ta‐
+                       ble in the OVN Southbound database. If there is a match
+                       in table 66, then its actions store the  bound  MAC  in
+                       the Ethernet destination address field.
+
+                       (The  OpenFlow  actions  save  and restore the OpenFlow
+                       fields used for the arguments, so that the OVN  actions
+                       do not have to be aware of this temporary use.)
+
+                  <b>p</b><b>u</b><b>t</b><b>_</b><b>a</b><b>r</b><b>p</b><b>(</b><u>P</u><b>,</b> <u>A</u><b>,</b> <u>E</u><b>)</b><b>;</b>
+                  <b>p</b><b>u</b><b>t</b><b>_</b><b>n</b><b>d</b><b>(</b><u>P</u><b>,</b> <u>A</u><b>,</b> <u>E</u><b>)</b><b>;</b>
+                       Implemented  by  storing  the  arguments  into OpenFlow
+                       fields, then outputting  a  packet  to  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>,
+                       which updates the <b>M</b><b>A</b><b>C</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> table.
+
+                       (The  OpenFlow  actions  save  and restore the OpenFlow
+                       fields used for the arguments, so that the OVN  actions
+                       do not have to be aware of this temporary use.)
+
+                  <u>R</u> <b>=</b> <b>l</b><b>o</b><b>o</b><b>k</b><b>u</b><b>p</b><b>_</b><b>a</b><b>r</b><b>p</b><b>(</b><u>P</u><b>,</b> <u>A</u><b>,</b> <u>M</u><b>)</b><b>;</b>
+                  <u>R</u> <b>=</b> <b>l</b><b>o</b><b>o</b><b>k</b><b>u</b><b>p</b><b>_</b><b>n</b><b>d</b><b>(</b><u>P</u><b>,</b> <u>A</u><b>,</b> <u>M</u><b>)</b><b>;</b>
+                       Implemented  by storing arguments into OpenFlow fields,
+                       then resubmitting to  table  67,  which  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>
+                       populates with flows generated from the <b>M</b><b>A</b><b>C</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> ta‐
+                       ble in the OVN Southbound database. If there is a match
+                       in table 67, then its actions set the logical flow flag
+                       <b>M</b><b>L</b><b>F</b><b>_</b><b>L</b><b>O</b><b>O</b><b>K</b><b>U</b><b>P</b><b>_</b><b>M</b><b>A</b><b>C</b>.
+
+                       (The  OpenFlow  actions  save  and restore the OpenFlow
+                       fields used for the arguments, so that the OVN  actions
+                       do not have to be aware of this temporary use.)
+
+              3.  OpenFlow tables 37 through 41 implement the <b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b> action in
+                  the  logical ingress pipeline. Specifically, table 37 serves
+                  as an entry point to egress pipeline. Table  37  detects  IP
+                  packets  that are too big for a corresponding interface. Ta‐
+                  ble 38 produces ICMPv4 Fragmentation Needed (or  ICMPv6  Too
+                  Big) errors and deliver them back to the offending port. ta‐
+                  ble  39 handles packets to remote hypervisors, table 40 han‐
+                  dles packets to the local hypervisor, and  table  41  checks
+                  whether  packets  whose  logical ingress and egress port are
+                  the same should be discarded.
+
+                  Logical patch ports are a special case. Logical patch  ports
+                  do  not  have  a physical location and effectively reside on
+                  every hypervisor. Thus, flow table 40, for output  to  ports
+                  on the local hypervisor, naturally implements output to uni‐
+                  cast  logical  patch  ports  too. However, applying the same
+                  logic to a logical patch port that is part of a logical mul‐
+                  ticast group yields packet duplication, because each  hyper‐
+                  visor  that  contains  a logical port in the multicast group
+                  will also output the packet to the logical patch port. Thus,
+                  multicast groups implement output to logical patch ports  in
+                  table 39.
+
+                  Each  flow  in table 39 matches on a logical output port for
+                  unicast or multicast logical ports that  include  a  logical
+                  port  on  a remote hypervisor. Each flow’s actions implement
+                  sending a packet to the port it matches. For unicast logical
+                  output ports on remote hypervisors, the actions set the tun‐
+                  nel key to the correct value, then send the  packet  on  the
+                  tunnel  port to the correct hypervisor. (When the remote hy‐
+                  pervisor receives the packet, table 0 there  will  recognize
+                  it  as a tunneled packet and pass it along to table 40.) For
+                  multicast logical output ports, the actions send one copy of
+                  the packet to each remote hypervisor, in the same way as for
+                  unicast destinations. If a multicast group includes a  logi‐
+                  cal  port or ports on the local hypervisor, then its actions
+                  also resubmit to table 40. Table 39 also includes:
+
+                  •      A higher-priority rule to match packets received from
+                         ramp switch tunnels, based on flag MLF_RCV_FROM_RAMP,
+                         and resubmit these packets to table 40 for local  de‐
+                         livery.  Packets  received  from  ramp switch tunnels
+                         reach here because of a lack of logical  output  port
+                         field in the tunnel key and thus these packets needed
+                         to  be  submitted  to table 8 to determine the output
+                         port.
+
+                  •      A higher-priority rule to match packets received from
+                         ports of type <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b>, based on the  logical  input
+                         port,  and resubmit these packets to table 40 for lo‐
+                         cal delivery. Ports of type <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b> exist on  every
+                         hypervisor  and  by  definition  their traffic should
+                         never go out through a tunnel.
+
+                  •      A higher-priority rule to match packets that have the
+                         MLF_LOCAL_ONLY logical flow flag set, and whose  des‐
+                         tination  is a multicast address. This flag indicates
+                         that the packet should not be delivered to remote hy‐
+                         pervisors, even if the multicast destination includes
+                         ports on remote hypervisors. This flag is  used  when
+                         <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>  is  the  originator  of the multicast
+                         packet. Since each <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> instance is  origi‐
+                         nating these packets, the packets only need to be de‐
+                         livered to local ports.
+
+                  •      A  fallback  flow that resubmits to table 40 if there
+                         is no other match.
+
+                  Flows in table 40 resemble those in table 39 but for logical
+                  ports that reside locally rather than remotely. For  unicast
+                  logical  output  ports  on the local hypervisor, the actions
+                  just resubmit to table 41. For multicast output  ports  that
+                  include  one  or more logical ports on the local hypervisor,
+                  for each such logical port <u>P</u>, the actions change the logical
+                  output port to <u>P</u>, then resubmit to table 41.
+
+                  A special case is that when a localnet port  exists  on  the
+                  datapath,  remote  port is connected by switching to the lo‐
+                  calnet port. In this case, instead of adding a flow in table
+                  39 to reach the remote port, a flow is added in table 40  to
+                  switch  the logical outport to the localnet port, and resub‐
+                  mit to table 40 as if it were unicasted to a logical port on
+                  the local hypervisor.
+
+                  Table 41 matches and drops packets for which the logical in‐
+                  put and output ports are the same and the MLF_ALLOW_LOOPBACK
+                  flag is not set. It also drops  MLF_LOCAL_ONLY  packets  di‐
+                  rected to a localnet port. It resubmits other packets to ta‐
+                  ble 42.
+
+              4.  OpenFlow  tables  42  through  62 execute the logical egress
+                  pipeline from the <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>F</b><b>l</b><b>o</b><b>w</b> table in the  OVN  Southbound
+                  database.  The  egress pipeline can perform a final stage of
+                  validation before packet delivery. Eventually, it  may  exe‐
+                  cute  an  <b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b>  action, which <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> implements by
+                  resubmitting to table 64. A packet for  which  the  pipeline
+                  never  executes  <b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b>  is effectively dropped (although it
+                  may have been transmitted through a tunnel across a physical
+                  network).
+
+                  The egress pipeline cannot change the logical output port or
+                  cause further tunneling.
+
+              5.  Table 64 bypasses OpenFlow loopback when  MLF_ALLOW_LOOPBACK
+                  is  set. Logical loopback was handled in table 41, but Open‐
+                  Flow by default  also  prevents  loopback  to  the  OpenFlow
+                  ingress port. Thus, when MLF_ALLOW_LOOPBACK is set, OpenFlow
+                  table  64  saves the OpenFlow ingress port, sets it to zero,
+                  resubmits to table 65  for  logical-to-physical  transforma‐
+                  tion,  and  then  restores the OpenFlow ingress port, effec‐
+                  tively disabling OpenFlow loopback  prevents.  When  MLF_AL‐
+                  LOW_LOOPBACK is unset, table 64 flow simply resubmits to ta‐
+                  ble 65.
+
+              6.  OpenFlow  table 65 performs logical-to-physical translation,
+                  the opposite of table 0. It  matches  the  packet’s  logical
+                  egress  port.  Its actions output the packet to the port at‐
+                  tached to the OVN integration bridge  that  represents  that
+                  logical  port.  If  the  logical  egress port is a container
+                  nested with a VM, then before sending the packet the actions
+                  push on a VLAN header with an appropriate VLAN ID.
+
+   <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b> <b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>s</b> <b>a</b><b>n</b><b>d</b> <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b> <b>P</b><b>a</b><b>t</b><b>c</b><b>h</b> <b>P</b><b>o</b><b>r</b><b>t</b><b>s</b>
+       Typically logical routers and logical patch ports do not have a  physi‐
+       cal  location  and  effectively reside on every hypervisor. This is the
+       case for logical  patch  ports  between  logical  routers  and  logical
+       switches behind those logical routers, to which VMs (and VIFs) attach.
+
+       Consider a packet sent from one virtual machine or container to another
+       VM  or  container  that  resides on a different subnet. The packet will
+       traverse tables 0 to 65 as described in the previous section  <b>A</b><b>r</b><b>c</b><b>h</b><b>i</b><b>t</b><b>e</b><b>c</b>‐‐
+       <b>t</b><b>u</b><b>r</b><b>a</b><b>l</b>  <b>P</b><b>h</b><b>y</b><b>s</b><b>i</b><b>c</b><b>a</b><b>l</b> <b>L</b><b>i</b><b>f</b><b>e</b> <b>C</b><b>y</b><b>c</b><b>l</b><b>e</b> <b>o</b><b>f</b> <b>a</b> <b>P</b><b>a</b><b>c</b><b>k</b><b>e</b><b>t</b>, using the logical datapath rep‐
+       resenting the logical switch that the sender is attached to.  At  table
+       39, the packet will use the fallback flow that resubmits locally to ta‐
+       ble 40 on the same hypervisor. In this case, all of the processing from
+       table 0 to table 65 occurs on the hypervisor where the sender resides.
+
+       When  the packet reaches table 65, the logical egress port is a logical
+       patch port. <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> implements output to the  logical  patch  is
+       packet  by cloning and resubmitting directly to the first OpenFlow flow
+       table in the ingress pipeline, setting the logical ingress port to  the
+       peer  logical patch port, and using the peer logical patch port’s logi‐
+       cal datapath (that represents the logical router).
+
+       The packet re-enters the ingress pipeline in order to traverse tables 8
+       to 65 again, this time using the logical datapath representing the log‐
+       ical router. The processing continues as described in the previous sec‐
+       tion <b>A</b><b>r</b><b>c</b><b>h</b><b>i</b><b>t</b><b>e</b><b>c</b><b>t</b><b>u</b><b>r</b><b>a</b><b>l</b> <b>P</b><b>h</b><b>y</b><b>s</b><b>i</b><b>c</b><b>a</b><b>l</b> <b>L</b><b>i</b><b>f</b><b>e</b> <b>C</b><b>y</b><b>c</b><b>l</b><b>e</b> <b>o</b><b>f</b> <b>a</b>  <b>P</b><b>a</b><b>c</b><b>k</b><b>e</b><b>t</b>.  When  the  packet
+       reaches  table 65, the logical egress port will once again be a logical
+       patch port. In the same manner as described above, this  logical  patch
+       port  will  cause  the packet to be resubmitted to OpenFlow tables 8 to
+       65, this time using  the  logical  datapath  representing  the  logical
+       switch that the destination VM or container is attached to.
+
+       The packet traverses tables 8 to 65 a third and final time. If the des‐
+       tination  VM or container resides on a remote hypervisor, then table 39
+       will send the packet on a tunnel port from the sender’s  hypervisor  to
+       the remote hypervisor. Finally table 65 will output the packet directly
+       to the destination VM or container.
+
+       The  following  sections describe two exceptions, where logical routers
+       and/or logical patch ports are associated with a physical location.
+
+     <u>G</u><u>a</u><u>t</u><u>e</u><u>w</u><u>a</u><u>y</u> <u>R</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u><u>s</u>
+
+       A <u>g</u><u>a</u><u>t</u><u>e</u><u>w</u><u>a</u><u>y</u> <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u> is a logical router that is bound to a physical  loca‐
+       tion.  This  includes  all  of  the  logical patch ports of the logical
+       router, as well as all of the  peer  logical  patch  ports  on  logical
+       switches.  In the OVN Southbound database, the <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> entries for
+       these logical patch ports use the type <b>l</b><b>3</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b> rather than <b>p</b><b>a</b><b>t</b><b>c</b><b>h</b>,  in
+       order  to  distinguish  that  these  logical patch ports are bound to a
+       chassis.
+
+       When a hypervisor processes a packet on a logical datapath representing
+       a logical switch, and the logical egress port is a <b>l</b><b>3</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b> port  rep‐
+       resenting  connectivity  to  a  gateway router, the packet will match a
+       flow in table 39 that sends the packet on a tunnel port to the  chassis
+       where  the  gateway router resides. This processing in table 39 is done
+       in the same manner as for VIFs.
+
+     <u>D</u><u>i</u><u>s</u><u>t</u><u>r</u><u>i</u><u>b</u><u>u</u><u>t</u><u>e</u><u>d</u> <u>G</u><u>a</u><u>t</u><u>e</u><u>w</u><u>a</u><u>y</u> <u>P</u><u>o</u><u>r</u><u>t</u><u>s</u>
+
+       This section provides additional details on distributed gateway  ports,
+       outlined earlier.
+
+       The  primary  design  goal  of distributed gateway ports is to allow as
+       much traffic as possible to be handled locally on the hypervisor  where
+       a  VM  or  container resides. Whenever possible, packets from the VM or
+       container to the outside world should be processed completely  on  that
+       VM’s  or  container’s hypervisor, eventually traversing a localnet port
+       instance or a tunnel to the physical network or a different OVN deploy‐
+       ment. Whenever possible, packets from the outside world to a VM or con‐
+       tainer should be directed through the physical network directly to  the
+       VM’s or container’s hypervisor.
+
+       In  order  to allow for the distributed processing of packets described
+       in the paragraph above, distributed gateway ports need  to  be  logical
+       patch  ports  that  effectively reside on every hypervisor, rather than
+       <b>l</b><b>3</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b> ports that are bound to a particular  chassis.  However,  the
+       flows  associated with distributed gateway ports often need to be asso‐
+       ciated with physical locations, for the following reasons:
+
+              •      The physical network that the localnet port  is  attached
+                     to  typically uses L2 learning. Any Ethernet address used
+                     over the distributed gateway port must be restricted to a
+                     single physical location so that upstream L2 learning  is
+                     not  confused.  Traffic  sent out the distributed gateway
+                     port towards the localnet port with a  specific  Ethernet
+                     address  must  be  sent  out one specific instance of the
+                     distributed gateway port on one specific chassis. Traffic
+                     received from the localnet port (or from  a  VIF  on  the
+                     same logical switch as the localnet port) with a specific
+                     Ethernet address must be directed to the logical switch’s
+                     patch port instance on that specific chassis.
+
+                     Due  to the implications of L2 learning, the Ethernet ad‐
+                     dress and IP address of the distributed gateway port need
+                     to be restricted to a single physical location. For  this
+                     reason, the user must specify one chassis associated with
+                     the  distributed gateway port. Note that traffic travers‐
+                     ing the distributed gateway port using other Ethernet ad‐
+                     dresses and IP addresses (e.g. one-to-one NAT) is not re‐
+                     stricted to this chassis.
+
+                     Replies to ARP and ND requests must be  restricted  to  a
+                     single  physical  location, where the Ethernet address in
+                     the reply resides. This includes ARP and ND  replies  for
+                     the IP address of the distributed gateway port, which are
+                     restricted  to  the chassis that the user associated with
+                     the distributed gateway port.
+
+              •      In order to support one-to-many SNAT (aka  IP  masquerad‐
+                     ing),  where  multiple logical IP addresses spread across
+                     multiple chassis are mapped to a single external  IP  ad‐
+                     dress, it will be necessary to handle some of the logical
+                     router  processing on a specific chassis in a centralized
+                     manner. Since the SNAT external IP address  is  typically
+                     the distributed gateway port IP address, and for simplic‐
+                     ity,  the  same  chassis  associated with the distributed
+                     gateway port is used.
+
+       The details of flow restrictions to specific chassis are  described  in
+       the <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> documentation.
+
+       While  most  of  the physical location dependent aspects of distributed
+       gateway ports can be handled by  restricting  some  flows  to  specific
+       chassis, one additional mechanism is required. When a packet leaves the
+       ingress pipeline and the logical egress port is the distributed gateway
+       port, one of two different sets of actions is required at table 39:
+
+              •      If  the packet can be handled locally on the sender’s hy‐
+                     pervisor (e.g. one-to-one NAT traffic), then  the  packet
+                     should  just  be  resubmitted locally to table 40, in the
+                     normal manner for distributed logical patch ports.
+
+              •      However, if the packet needs to be handled on the chassis
+                     associated with the distributed gateway port  (e.g.  one-
+                     to-many  SNAT  traffic or non-NAT traffic), then table 39
+                     must send the packet on a tunnel port to that chassis.
+
+       In order to trigger the second set of actions, the <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b> type
+       of southbound <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> has been added. Setting the  logical  egress
+       port  to the type <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b> logical port is simply a way to indi‐
+       cate that although the packet is destined for the  distributed  gateway
+       port,  it  needs  to be redirected to a different chassis. At table 39,
+       packets with this logical egress port are sent to a  specific  chassis,
+       in the same way that table 39 directs packets whose logical egress port
+       is a VIF or a type <b>l</b><b>3</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b> port to different chassis. Once the packet
+       arrives at that chassis, table 40 resets the logical egress port to the
+       value  representing  the distributed gateway port. For each distributed
+       gateway port, there is one type <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b> port,  in  addition  to
+       the distributed logical patch port representing the distributed gateway
+       port.
+
+     <u>H</u><u>i</u><u>g</u><u>h</u> <u>A</u><u>v</u><u>a</u><u>i</u><u>l</u><u>a</u><u>b</u><u>i</u><u>l</u><u>i</u><u>t</u><u>y</u> <u>f</u><u>o</u><u>r</u> <u>D</u><u>i</u><u>s</u><u>t</u><u>r</u><u>i</u><u>b</u><u>u</u><u>t</u><u>e</u><u>d</u> <u>G</u><u>a</u><u>t</u><u>e</u><u>w</u><u>a</u><u>y</u> <u>P</u><u>o</u><u>r</u><u>t</u><u>s</u>
+
+       OVN  allows you to specify a prioritized list of chassis for a distrib‐
+       uted gateway port. This is done by associating multiple <b>G</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>_</b><b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>
+       rows with a <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b> in the <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database.
+
+       When multiple chassis have been specified for a  gateway,  all  chassis
+       that may send packets to that gateway will enable BFD on tunnels to all
+       configured  gateway chassis. The current master chassis for the gateway
+       is the highest priority gateway chassis that is currently viewed as ac‐
+       tive based on BFD status.
+
+       For more information on L3 gateway high availability, please  refer  to
+       http://docs.ovn.org/en/latest/topics/high-availability.html.
+
+     <u>R</u><u>e</u><u>s</u><u>t</u><u>r</u><u>i</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u> <u>o</u><u>f</u> <u>D</u><u>i</u><u>s</u><u>t</u><u>r</u><u>i</u><u>b</u><u>u</u><u>t</u><u>e</u><u>d</u> <u>G</u><u>a</u><u>t</u><u>e</u><u>w</u><u>a</u><u>y</u> <u>P</u><u>o</u><u>r</u><u>t</u><u>s</u>
+
+       Distributed  gateway  ports are used to connect to an external network,
+       which can be a physical network modeled by a logical switch with a  lo‐
+       calnet  port,  and can also be a logical switch that interconnects dif‐
+       ferent OVN deployments (see <b>O</b><b>V</b><b>N</b> <b>D</b><b>e</b><b>p</b><b>l</b><b>o</b><b>y</b><b>m</b><b>e</b><b>n</b><b>t</b><b>s</b>  <b>I</b><b>n</b><b>t</b><b>e</b><b>r</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>).  Usually
+       there  can be many logical routers connected to the same external logi‐
+       cal switch, as shown in below diagram.
+
+                                     +--LS-EXT-+
+                                     |    |    |
+                                     |    |    |
+                                    LR1  ...  LRn
+
+
+       In this diagram, there are n logical routers  connected  to  a  logical
+       switch  LS-EXT,  each  with a distributed gateway port, so that traffic
+       sent to external world is redirected to the gateway chassis that is as‐
+       signed to the distributed gateway port of respective logical router.
+
+       In the logical topology, nothing can prevent an user to add a route be‐
+       tween the logical routers via the connected distributed  gateway  ports
+       on  LS-EXT.  However,  the route works only if the LS-EXT is a physical
+       network (modeled by a logical switch with a  localnet  port).  In  that
+       case the packet will be delivered between the gateway chassises through
+       the localnet port via physical network. If the LS-EXT is a regular log‐
+       ical switch (backed by tunneling only, as in the use case of OVN inter‐
+       connection),  then  the  packet  will  be dropped on the source gateway
+       chassis. The limitation is due the fact that distributed gateway  ports
+       are tied to physical location, and without physical network connection,
+       we  will end up with either dropping the packet or transferring it over
+       the tunnels which could cause bigger problems such as broadcast packets
+       being redirect repeatedly by different gateway chassises.
+
+       With the limitation in mind, if a user do want the direct  connectivity
+       between the logical routers, it is better to create an internal logical
+       switch  connected  to  the  logical routers with regular logical router
+       ports, which are completely distributed and the packets don’t  have  to
+       leave  a  chassis  unless necessary, which is more optimal than routing
+       via the distributed gateway ports.
+
+     <u>A</u><u>R</u><u>P</u> <u>r</u><u>e</u><u>q</u><u>u</u><u>e</u><u>s</u><u>t</u> <u>a</u><u>n</u><u>d</u> <u>N</u><u>D</u> <u>N</u><u>S</u> <u>p</u><u>a</u><u>c</u><u>k</u><u>e</u><u>t</u> <u>p</u><u>r</u><u>o</u><u>c</u><u>e</u><u>s</u><u>s</u><u>i</u><u>n</u><u>g</u>
+
+       Due to the fact that ARP requests and ND NA packets are usually  broad‐
+       cast  packets,  for  performance  reasons, OVN deals with requests that
+       target OVN owned IP addresses (i.e., IP  addresses  configured  on  the
+       router  ports,  VIPs, NAT IPs) in a specific way and only forwards them
+       to the logical router that owns the target IP address. This behavior is
+       different than that of traditional  switches  and  implies  that  other
+       routers/hosts connected to the logical switch will not learn the MAC/IP
+       binding from the request packet.
+
+       All other ARP and ND packets are flooded in the L2 broadcast domain and
+       to all attached logical patch ports.
+
+     <u>V</u><u>I</u><u>F</u><u>s</u> <u>o</u><u>n</u> <u>t</u><u>h</u><u>e</u> <u>l</u><u>o</u><u>g</u><u>i</u><u>c</u><u>a</u><u>l</u> <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u> <u>c</u><u>o</u><u>n</u><u>n</u><u>e</u><u>c</u><u>t</u><u>e</u><u>d</u> <u>b</u><u>y</u> <u>a</u> <u>d</u><u>i</u><u>s</u><u>t</u><u>r</u><u>i</u><u>b</u><u>u</u><u>t</u><u>e</u><u>d</u> <u>g</u><u>a</u><u>t</u><u>e</u><u>w</u><u>a</u><u>y</u> <u>p</u><u>o</u><u>r</u><u>t</u>
+
+       Typically the logical switch connected by a distributed gateway port is
+       for  external connectivity, usually to a physical network through a lo‐
+       calnet port on the logical  switch,  or  to  a  remote  OVN  deployment
+       through  OVN  Interconnection. In these cases there is no VIF ports re‐
+       quired on the logical switch.
+
+       While not very common, it is still possible to create VIF ports on  the
+       logical  switch connected by a distributed gateway port, but there is a
+       limitation that the logical ports need to reside on the gateway chassis
+       where the distributed gateway port resides to get connectivity to other
+       logical switches through the distributed gateway port. There is no lim‐
+       itation for the VIFs to connect within the logical  switch,  or  beyond
+       the  logical  switch  through  other regular distributed logical router
+       ports.
+
+       A special case is when using distributed gateway ports for  scalability
+       purpose,  as  mentioned  earlier in this document. The logical switches
+       connected by distributed gateway ports are  not  for  connectivity  but
+       just  for  regular VIFs. However, the above limitation usually does not
+       matter because in this use case all the VIFs on the logical switch  are
+       located on the same chassis with the distributed gateway port that con‐
+       nects the logical switch.
+
+   <b>M</b><b>u</b><b>l</b><b>t</b><b>i</b><b>p</b><b>l</b><b>e</b> <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b> <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b> <b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>e</b><b>s</b> <b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>e</b><b>d</b> <b>t</b><b>o</b> <b>a</b> <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b> <b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b>
+       It  is  possible to have multiple logical switches each with a localnet
+       port (representing physical networks) connected to a logical router, in
+       which one localnet logical switch may provide the external connectivity
+       via a distributed  gateway  port  and  rest  of  the  localnet  logical
+       switches  use VLAN tagging in the physical network. It is expected that
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>b</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b><b>-</b><b>m</b><b>a</b><b>p</b><b>p</b><b>i</b><b>n</b><b>g</b><b>s</b> is configured appropriately on the chassis for  all
+       these localnet networks.
+
+     <u>E</u><u>a</u><u>s</u><u>t</u> <u>W</u><u>e</u><u>s</u><u>t</u> <u>r</u><u>o</u><u>u</u><u>t</u><u>i</u><u>n</u><u>g</u>
+
+       East-West  routing  between these localnet VLAN tagged logical switches
+       work almost the same way as normal logical switches. When the VM  sends
+       such a packet, then:
+
+              1.  It  first  enters  the  ingress  pipeline,  and  then egress
+                  pipeline of the source localnet logical switch datapath.  It
+                  then enters the ingress pipeline of the logical router data‐
+                  path via the logical router port in the source chassis.
+
+              2.  Routing decision is taken.
+
+              3.  From the router datapath, packet enters the ingress pipeline
+                  and then egress pipeline of the destination localnet logical
+                  switch  datapath  and  goes out of the integration bridge to
+                  the provider bridge ( belonging to the  destination  logical
+                  switch)  via  the localnet port. While sending the packet to
+                  provider bridge, we also replace router port MAC  as  source
+                  MAC with a chassis unique MAC.
+
+                  This  chassis  unique MAC is configured as global ovs config
+                  on each chassis (eg. via "<b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>c</b><b>t</b><b>l</b> <b>s</b><b>e</b><b>t</b> <b>o</b><b>p</b><b>e</b><b>n</b> <b>.</b> <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>-</b><b>i</b><b>d</b><b>s</b><b>:</b>
+                  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>-</b><b>m</b><b>a</b><b>c</b><b>-</b><b>m</b><b>a</b><b>p</b><b>p</b><b>i</b><b>n</b><b>g</b><b>s</b><b>=</b><b>"</b><b>p</b><b>h</b><b>y</b><b>s</b><b>:</b><b>a</b><b>a</b><b>:</b><b>b</b><b>b</b><b>:</b><b>c</b><b>c</b><b>:</b><b>d</b><b>d</b><b>:</b><b>e</b><b>e</b><b>:</b><b>$</b><b>i</b><b>$</b><b>i</b><b>"</b>").   For
+                  more details, see <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>(8).
+
+                  If the above is not configured, then source MAC would be the
+                  router  port  MAC. This could create problem if we have more
+                  than one chassis. This is because, since the router port  is
+                  distributed, the same (MAC,VLAN) tuple will seen by physical
+                  network  from other chassis as well, which could cause these
+                  issues:
+
+                  •      Continuous MAC moves in top-of-rack switch (ToR).
+
+                  •      ToR dropping the traffic, which is causing continuous
+                         MAC moves.
+
+                  •      ToR blocking the ports from which MAC moves are  hap‐
+                         pening.
+
+              4.  The destination chassis receives the packet via the localnet
+                  port and sends it to the integration bridge. Before entering
+                  the  integration bridge the source mac of the packet will be
+                  replaced with router port mac again. The packet  enters  the
+                  ingress pipeline and then egress pipeline of the destination
+                  localnet  logical  switch  and finally gets delivered to the
+                  destination VM port.
+
+     <u>E</u><u>x</u><u>t</u><u>e</u><u>r</u><u>n</u><u>a</u><u>l</u> <u>t</u><u>r</u><u>a</u><u>f</u><u>f</u><u>i</u><u>c</u>
+
+       The following happens when a VM sends an external  traffic  (which  re‐
+       quires  NATting) and the chassis hosting the VM doesn’t have a distrib‐
+       uted gateway port.
+
+              1.  The packet first  enters  the  ingress  pipeline,  and  then
+                  egress  pipeline of the source localnet logical switch data‐
+                  path. It then enters the ingress  pipeline  of  the  logical
+                  router  datapath  via  the logical router port in the source
+                  chassis.
+
+              2.  Routing decision is taken. Since the gateway router  or  the
+                  distributed  gateway port doesn’t reside in the source chas‐
+                  sis, the traffic is redirected to the  gateway  chassis  via
+                  the tunnel port.
+
+              3.  The  gateway chassis receives the packet via the tunnel port
+                  and the packet enters the egress  pipeline  of  the  logical
+                  router datapath. NAT rules are applied here. The packet then
+                  enters  the ingress pipeline and then egress pipeline of the
+                  localnet logical switch  datapath  which  provides  external
+                  connectivity  and  finally goes out via the localnet port of
+                  the logical switch which provides external connectivity.
+
+       Although this works, the VM traffic is tunnelled  when  sent  from  the
+       compute  chassis  to the gateway chassis. In order for it to work prop‐
+       erly, the MTU of the localnet logical switches must be lowered  to  ac‐
+       count for the tunnel encapsulation.
+
+   <b>C</b><b>e</b><b>n</b><b>t</b><b>r</b><b>a</b><b>l</b><b>i</b><b>z</b><b>e</b><b>d</b>  <b>r</b><b>o</b><b>u</b><b>t</b><b>i</b><b>n</b><b>g</b> <b>f</b><b>o</b><b>r</b> <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b> <b>V</b><b>L</b><b>A</b><b>N</b> <b>t</b><b>a</b><b>g</b><b>g</b><b>e</b><b>d</b> <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b> <b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>e</b><b>s</b> <b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>e</b><b>d</b> <b>t</b><b>o</b>
+       <b>a</b> <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b> <b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b>
+       To overcome the tunnel encapsulation problem described in the  previous
+       section,  <b>O</b><b>V</b><b>N</b>  supports  the option of enabling centralized routing for
+       localnet VLAN tagged logical switches. CMS can configure the option <b>o</b><b>p</b>‐‐
+       <b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>r</b><b>e</b><b>s</b><b>i</b><b>d</b><b>e</b><b>-</b><b>o</b><b>n</b><b>-</b><b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> to <b>t</b><b>r</b><b>u</b><b>e</b> for  each  <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b>
+       which  connects  to  the  localnet  VLAN  tagged logical switches. This
+       causes the gateway chassis (hosting the distributed  gateway  port)  to
+       handle  all  the  routing for these networks, making it centralized. It
+       will reply to the ARP requests for the logical router port IPs.
+
+       If the logical router doesn’t have a distributed gateway port  connect‐
+       ing  to  the localnet logical switch which provides external connectiv‐
+       ity, or if it has more than one distributed gateway  ports,  then  this
+       option is ignored by <b>O</b><b>V</b><b>N</b>.
+
+       The  following happens when a VM sends an east-west traffic which needs
+       to be routed:
+
+              1.  The packet first  enters  the  ingress  pipeline,  and  then
+                  egress  pipeline of the source localnet logical switch data‐
+                  path and is sent out via a localnet port of the  source  lo‐
+                  calnet  logical  switch  (instead  of  sending  it to router
+                  pipeline).
+
+              2.  The gateway chassis receives the packet via a localnet  port
+                  of  the  source  localnet logical switch and sends it to the
+                  integration bridge.  The  packet  then  enters  the  ingress
+                  pipeline,  and  then  egress pipeline of the source localnet
+                  logical switch datapath and enters the ingress  pipeline  of
+                  the logical router datapath.
+
+              3.  Routing decision is taken.
+
+              4.  From the router datapath, packet enters the ingress pipeline
+                  and then egress pipeline of the destination localnet logical
+                  switch  datapath. It then goes out of the integration bridge
+                  to the provider bridge ( belonging to the destination  logi‐
+                  cal switch) via a localnet port.
+
+              5.  The  destination  chassis receives the packet via a localnet
+                  port and sends it to the integration bridge. The packet  en‐
+                  ters  the  ingress  pipeline and then egress pipeline of the
+                  destination localnet logical switch and finally delivered to
+                  the destination VM port.
+
+       The following happens when a VM sends an  external  traffic  which  re‐
+       quires NATting:
+
+              1.  The  packet  first  enters  the  ingress  pipeline, and then
+                  egress pipeline of the source localnet logical switch  data‐
+                  path  and  is sent out via a localnet port of the source lo‐
+                  calnet logical switch  (instead  of  sending  it  to  router
+                  pipeline).
+
+              2.  The  gateway chassis receives the packet via a localnet port
+                  of the source localnet logical switch and sends  it  to  the
+                  integration  bridge.  The  packet  then  enters  the ingress
+                  pipeline, and then egress pipeline of  the  source  localnet
+                  logical  switch  datapath and enters the ingress pipeline of
+                  the logical router datapath.
+
+              3.  Routing decision is taken and NAT rules are applied.
+
+              4.  From the router datapath, packet enters the ingress pipeline
+                  and then egress pipeline  of  the  localnet  logical  switch
+                  datapath  which provides external connectivity. It then goes
+                  out of the integration bridge to the  provider  bridge  (be‐
+                  longing  to  the logical switch which provides external con‐
+                  nectivity) via a localnet port.
+
+       The following happens for the reverse external traffic.
+
+              1.  The gateway chassis receives the packet from a localnet port
+                  of the logical switch which provides external  connectivity.
+                  The  packet then enters the ingress pipeline and then egress
+                  pipeline of the localnet logical switch (which provides  ex‐
+                  ternal  connectivity).  The  packet  then enters the ingress
+                  pipeline of the logical router datapath.
+
+              2.  The ingress pipeline of the logical router datapath  applies
+                  the  unNATting  rules.  The  packet  then enters the ingress
+                  pipeline and then egress pipeline  of  the  source  localnet
+                  logical  switch.  Since  the source VM doesn’t reside in the
+                  gateway chassis, the packet is sent out via a localnet  port
+                  of the source logical switch.
+
+              3.  The  source  chassis receives the packet via a localnet port
+                  and sends it to the integration bridge.  The  packet  enters
+                  the  ingress pipeline and then egress pipeline of the source
+                  localnet logical switch and finally gets  delivered  to  the
+                  source VM port.
+
+       As  an  alternative  to  <b>r</b><b>e</b><b>s</b><b>i</b><b>d</b><b>e</b><b>-</b><b>o</b><b>n</b><b>-</b><b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>, OVN supports VLAN-
+       based redirection. Whereas <b>r</b><b>e</b><b>s</b><b>i</b><b>d</b><b>e</b><b>-</b><b>o</b><b>n</b><b>-</b><b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>  centralizes  all
+       router functionality, VLAN-based redirection only changes how OVN redi‐
+       rects  packets to the gateway chassis. By setting <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b><b>-</b><b>t</b><b>y</b><b>p</b><b>e</b>
+       to <b>b</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b><b>d</b> on a distributed gateway port, OVN redirects packets to  the
+       gateway  chassis  using  the <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b> port of the router’s peer logical
+       switch, instead of a tunnel.
+
+       If the logical router doesn’t have a distributed gateway port  connect‐
+       ing  to  the localnet logical switch which provides external connectiv‐
+       ity, or if it has more than one distributed gateway  ports,  then  this
+       option is ignored by <b>O</b><b>V</b><b>N</b>.
+
+       Following happens for bridged redirection:
+
+              1.  On  compute  chassis,  packet passes though logical router’s
+                  ingress pipeline.
+
+              2.  If logical outport is gateway chassis attached  router  port
+                  then  packet  is  "redirected" to gateway chassis using peer
+                  logical switch’s localnet port.
+
+              3.  This redirected packet has destination mac  as  router  port
+                  mac (the one to which gateway chassis is attached). Its VLAN
+                  id is that of localnet port (peer logical switch of the log‐
+                  ical router port).
+
+              4.  On  the gateway chassis packet will enter the logical router
+                  pipeline again and this  time  it  will  passthrough  egress
+                  pipeline as well.
+
+              5.  Reverse traffic packet flows stays the same.
+
+       Some guidelines and expections with bridged redirection:
+
+              1.  Since router port mac is destination mac, hence it has to be
+                  ensured  that  physical  network  learns it on ONLY from the
+                  gateway chassis. Which means  that  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>-</b><b>m</b><b>a</b><b>c</b><b>-</b><b>m</b><b>a</b><b>p</b><b>p</b><b>i</b><b>n</b><b>g</b><b>s</b>
+                  should be configure on all the compute nodes, so that physi‐
+                  cal network never learn router port mac from compute nodes.
+
+              2.  Since  packet  enters  logical router ingress pipeline twice
+                  (once on compute chassis  and  again  on  gateway  chassis),
+                  hence ttl will be decremented twice.
+
+              3.  Default  redirection  type continues to be <b>o</b><b>v</b><b>e</b><b>r</b><b>l</b><b>a</b><b>y</b>. User can
+                  switch the redirect-type  between  <b>b</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b><b>d</b>  and  <b>o</b><b>v</b><b>e</b><b>r</b><b>l</b><b>a</b><b>y</b>  by
+                  changing the value of <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b><b>-</b><b>t</b><b>y</b><b>p</b><b>e</b>
+
+   <b>L</b><b>i</b><b>f</b><b>e</b> <b>C</b><b>y</b><b>c</b><b>l</b><b>e</b> <b>o</b><b>f</b> <b>a</b> <b>V</b><b>T</b><b>E</b><b>P</b> <b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b>
+       A  gateway  is  a chassis that forwards traffic between the OVN-managed
+       part of a logical network and a physical VLAN, extending a tunnel-based
+       logical network into a physical network.
+
+       The steps below refer often to details of the  OVN  and  VTEP  database
+       schemas. Please see <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b>(5), <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b>(5) and <b>v</b><b>t</b><b>e</b><b>p</b>(5), respectively, for
+       the full story on these databases.
+
+              1.  A  VTEP  gateway’s  life cycle begins with the administrator
+                  registering the VTEP gateway as a <b>P</b><b>h</b><b>y</b><b>s</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b> table  en‐
+                  try  in the <b>V</b><b>T</b><b>E</b><b>P</b> database. The <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b><b>-</b><b>v</b><b>t</b><b>e</b><b>p</b> connected
+                  to this VTEP database, will recognize the new  VTEP  gateway
+                  and  create  a  new  <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>  table  entry  for  it  in  the
+                  <b>O</b><b>V</b><b>N</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database.
+
+              2.  The administrator can then create a new <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b> table
+                  entry, and bind a particular vlan on a VTEP  gateway’s  port
+                  to  any  VTEP  logical switch. Once a VTEP logical switch is
+                  bound to a VTEP gateway, the <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b><b>-</b><b>v</b><b>t</b><b>e</b><b>p</b> will detect
+                  it and add its name to the <u>v</u><u>t</u><u>e</u><u>p</u><b>_</b><u>l</u><u>o</u><u>g</u><u>i</u><u>c</u><u>a</u><u>l</u><b>_</b><u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u><u>e</u><u>s</u>  column  of
+                  the  <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> table in the <b>O</b><b>V</b><b>N</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database. Note, the
+                  <u>t</u><u>u</u><u>n</u><u>n</u><u>e</u><u>l</u><b>_</b><u>k</u><u>e</u><u>y</u> column of VTEP logical switch is  not  filled  at
+                  creation.  The  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b><b>-</b><b>v</b><b>t</b><b>e</b><b>p</b> will set the column when
+                  the corresponding vtep logical switch is  bound  to  an  OVN
+                  logical network.
+
+              3.  Now, the administrator can use the CMS to add a VTEP logical
+                  switch  to the OVN logical network. To do that, the CMS must
+                  first create a new <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b> table  entry  in  the
+                  <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database. Then, the <u>t</u><u>y</u><u>p</u><u>e</u> column of this entry
+                  must  be  set  to  "vtep". Next, the <u>v</u><u>t</u><u>e</u><u>p</u><u>-</u><u>l</u><u>o</u><u>g</u><u>i</u><u>c</u><u>a</u><u>l</u><u>-</u><u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u> and
+                  <u>v</u><u>t</u><u>e</u><u>p</u><u>-</u><u>p</u><u>h</u><u>y</u><u>s</u><u>i</u><u>c</u><u>a</u><u>l</u><u>-</u><u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u> keys in the <u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u> column must also be
+                  specified, since multiple VTEP gateways can  attach  to  the
+                  same VTEP logical switch. Next, the <u>a</u><u>d</u><u>d</u><u>r</u><u>e</u><u>s</u><u>s</u><u>e</u><u>s</u> column of this
+                  logical  port must be set to "unknown", it will add a prior‐
+                  ity 0 entry  in  "ls_in_l2_lkup"  stage  of  logical  switch
+                  ingress  pipeline.  So,  traffic  with unrecorded mac by OVN
+                  would go through the <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b>  to  physical  net‐
+                  work.
+
+              4.  The  newly  created logical port in the <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> data‐
+                  base and its  configuration  will  be  passed  down  to  the
+                  <b>O</b><b>V</b><b>N</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b>  database  as a new <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> table entry.
+                  The <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b><b>-</b><b>v</b><b>t</b><b>e</b><b>p</b> will recognize the change  and  bind
+                  the  logical port to the corresponding VTEP gateway chassis.
+                  Configuration of binding the same VTEP logical switch  to  a
+                  different  OVN logical networks is not allowed and a warning
+                  will be generated in the log.
+
+              5.  Beside binding to the VTEP  gateway  chassis,  the  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b>‐‐
+                  <b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b><b>-</b><b>v</b><b>t</b><b>e</b><b>p</b>  will  update the <u>t</u><u>u</u><u>n</u><u>n</u><u>e</u><u>l</u><b>_</b><u>k</u><u>e</u><u>y</u> column of the VTEP
+                  logical switch to the corresponding  <b>D</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>  table
+                  entry’s <u>t</u><u>u</u><u>n</u><u>n</u><u>e</u><u>l</u><b>_</b><u>k</u><u>e</u><u>y</u> for the bound OVN logical network.
+
+              6.  Next, the <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b><b>-</b><b>v</b><b>t</b><b>e</b><b>p</b> will keep reacting to the con‐
+                  figuration  change in the <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> in the <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b>
+                  database, and updating the <b>U</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>M</b><b>a</b><b>c</b><b>s</b><b>_</b><b>R</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b>  table  in  the
+                  <b>V</b><b>T</b><b>E</b><b>P</b>  database.  This  allows the VTEP gateway to understand
+                  where to forward the unicast traffic  coming  from  the  ex‐
+                  tended external network.
+
+              7.  Eventually,  the VTEP gateway’s life cycle ends when the ad‐
+                  ministrator unregisters the VTEP gateway from the <b>V</b><b>T</b><b>E</b><b>P</b> data‐
+                  base. The <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b><b>-</b><b>v</b><b>t</b><b>e</b><b>p</b> will recognize the  event  and
+                  remove  all  related configurations (<b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> table entry and
+                  port bindings) in the <b>O</b><b>V</b><b>N</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database.
+
+              8.  When the <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b><b>-</b><b>v</b><b>t</b><b>e</b><b>p</b> is terminated, all related con‐
+                  figurations in the  <b>O</b><b>V</b><b>N</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b>  database  and  the  <b>V</b><b>T</b><b>E</b><b>P</b>
+                  database  will  be  cleaned, including <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> table entries
+                  for all registered VTEP gateways and  their  port  bindings,
+                  and  all  <b>U</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>M</b><b>a</b><b>c</b><b>s</b><b>_</b><b>R</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b>  table  entries  and  the  <b>L</b><b>o</b><b>g</b><b>i</b>‐‐
+                  <b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b> tunnel keys.
+
+   <b>O</b><b>V</b><b>N</b> <b>D</b><b>e</b><b>p</b><b>l</b><b>o</b><b>y</b><b>m</b><b>e</b><b>n</b><b>t</b><b>s</b> <b>I</b><b>n</b><b>t</b><b>e</b><b>r</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>
+       It is not uncommon for an operator to deploy multiple OVN clusters, for
+       two main reasons. Firstly, an operator may prefer  to  deploy  one  OVN
+       cluster for each availability zone, e.g. in different physical regions,
+       to  avoid  single  point of failure. Secondly, there is always an upper
+       limit for a single OVN control plane to scale.
+
+       Although the control planes of the different  availability  zone  (AZ)s
+       are  independent  from each other, the workloads from different AZs may
+       need to communicate across the zones. The OVN  interconnection  feature
+       provides  a  native  way  to  interconnect  different AZs by L3 routing
+       through transit overlay networks between logical routers  of  different
+       AZs.
+
+       A  global OVN Interconnection Northbound database is introduced for the
+       operator (probably through CMS systems) to  configure  transit  logical
+       switches  that  connect  logical  routers from different AZs. A transit
+       switch is similar to a regular logical switch, but it is used  for  in‐
+       terconnection  purpose only. Typically, each transit switch can be used
+       to connect all logical routers that belong to same  tenant  across  all
+       AZs.
+
+       A  dedicated  daemon process <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b>, OVN interconnection controller, in
+       each AZ will consume  this  data  and  populate  corresponding  logical
+       switches to their own northbound databases for each AZ, so that logical
+       routers  can  be connected to the transit switch by creating patch port
+       pairs in their northbound databases. Any router ports connected to  the
+       transit  switches  are  considered interconnection ports, which will be
+       exchanged between AZs.
+
+       Physically, when workloads from different AZs communicate, packets need
+       to go through multiple hops: source chassis, source  gateway,  destina‐
+       tion  gateway  and  destination  chassis.  All these hops are connected
+       through tunnels so that the packets never  leave  overlay  networks.  A
+       distributed gateway port is required to connect the logical router to a
+       transit  switch,  with a gateway chassis specified, so that the traffic
+       can be forwarded through the gateway chassis.
+
+       A global OVN Interconnection Southbound database is introduced for  ex‐
+       changing  control  plane  information between the AZs. The data in this
+       database is populated and consumed by the <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b>, of each AZ. The  main
+       information in this database includes:
+
+              •      Datapath bindings for transit switches, which mainly con‐
+                     tains  the tunnel keys generated for each transit switch.
+                     Separate key ranges are reserved for transit switches  so
+                     that  they  will  never conflict with any tunnel keys lo‐
+                     cally assigned for datapaths within each AZ.
+
+              •      Availability zones, which are registered by  <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b>  from
+                     each AZ.
+
+              •      Gateways.  Each  AZ specifies chassises that are supposed
+                     to work as interconnection gateways, and the <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b>  will
+                     populate  this  information to the interconnection south‐
+                     bound DB. The <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b> from all the other  AZs  will  learn
+                     the gateways and populate to their own southbound DB as a
+                     chassis.
+
+              •      Port  bindings  for  logical  switch ports created on the
+                     transit switch. Each AZ maintains their logical router to
+                     transit switch connections independently, but <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b>  au‐
+                     tomatically  populates  local  port  bindings  on transit
+                     switches to the global interconnection southbound DB, and
+                     learns remote port bindings from other AZs  back  to  its
+                     own  northbound and southbound DBs, so that logical flows
+                     can be produced and then translated to OVS flows locally,
+                     which finally enables data plane communication.
+
+              •      Routes that are advertised between different AZs. If  en‐
+                     abled, routes are automatically exchanged by <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b>. Both
+                     static  routes  and directly connected subnets are adver‐
+                     tised. Options in <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> column of the  <b>N</b><b>B</b><b>_</b><b>G</b><b>l</b><b>o</b><b>b</b><b>a</b><b>l</b>  table
+                     of  <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>B</b>  database control the behavior of route adver‐
+                     tisement, such as enable/disable the advertising/learning
+                     routes, whether default  routes  are  advertised/learned,
+                     and blacklisted CIDRs. See <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b>(5) for more details.
+
+       The  tunnel keys for transit switch datapaths and related port bindings
+       must be agreed across all AZs. This is ensured by generating and  stor‐
+       ing  the  keys  in  the global interconnection southbound database. Any
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b> from any AZ can allocate the key, but race conditions are solved
+       by enforcing unique index for the column in the database.
+
+       Once each AZ’s NB and SB databases are populated  with  interconnection
+       switches  and ports, and agreed upon the tunnel keys, data plane commu‐
+       nication between the AZs are established.
+
+       When VXLAN tunneling is enabled in an OVN cluster, due to  the  limited
+       range available for VNIs, Interconnection feature is not supported.
+
+     <u>A</u> <u>d</u><u>a</u><u>y</u> <u>i</u><u>n</u> <u>t</u><u>h</u><u>e</u> <u>l</u><u>i</u><u>f</u><u>e</u> <u>o</u><u>f</u> <u>a</u> <u>p</u><u>a</u><u>c</u><u>k</u><u>e</u><u>t</u> <u>c</u><u>r</u><u>o</u><u>s</u><u>s</u><u>i</u><u>n</u><u>g</u> <u>A</u><u>Z</u><u>s</u>
+
+              1.  An IP packet is sent out from a VIF on a hypervisor (HV1) of
+                  AZ1, with destination IP belonging to a VIF in AZ2.
+
+              2.  In  HV1’s  OVS  flow tables, the packet goes through logical
+                  switch and logical router pipelines, and in a logical router
+                  pipeline, the routing stage finds out the next hop  for  the
+                  destination  IP,  which  belongs  to a remote logical router
+                  port in AZ2, and the output port, which is  a  chassis-redi‐
+                  rect  port  located  on  an  interconnection gateway (GW1 in
+                  AZ1), so HV1 sends the packet to GW1 through tunnel.
+
+              3.  On GW1, it continues with the logical router pipe  line  and
+                  switches  to  the transit switch’s pipeline through the peer
+                  port of the chassis redirect port. In the  transit  switch’s
+                  pipeline  it outputs to the remote logical port which is lo‐
+                  cated on a gateway (GW2) in AZ2, so the GW1 sends the packet
+                  to GW2 in tunnel.
+
+              4.  On GW2, it continues with the transit  switch  pipeline  and
+                  switches  to  the  logical  router pipeline through the peer
+                  port, which is a chassis redirect port that  is  located  on
+                  GW2. The logical router pipeline then forwards the packet to
+                  relevant  logical  pipelines according to the destination IP
+                  address, and figures out the MAC and location of the  desti‐
+                  nation VIF port - a hypervisor (HV2). The GW2 then sends the
+                  packet to HV2 in tunnel.
+
+              5.  On HV2, the packet is delivered to the final destination VIF
+                  port  by  the  logical switch egress pipeline, just the same
+                  way as for intra-AZ communications.
+
+   <b>N</b><b>a</b><b>t</b><b>i</b><b>v</b><b>e</b> <b>O</b><b>V</b><b>N</b> <b>s</b><b>e</b><b>r</b><b>v</b><b>i</b><b>c</b><b>e</b><b>s</b> <b>f</b><b>o</b><b>r</b> <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b> <b>p</b><b>o</b><b>r</b><b>t</b><b>s</b>
+       To support OVN native services (like DHCP/IPv6 RA/DNS  lookup)  to  the
+       cloud  resources  which  are  external,  OVN  supports <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> logical
+       ports.
+
+       Below are some of the use cases where <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> ports can be used.
+
+              •      VMs connected to SR-IOV nics - Traffic from these VMs  by
+                     passes  the  kernel stack and local <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> do not
+                     bind these ports and cannot serve the native services.
+
+              •      When CMS supports provisioning baremetal servers.
+
+       OVN will provide the native services if CMS has done the below configu‐
+       ration in the <u>O</u><u>V</u><u>N</u> <u>N</u><u>o</u><u>r</u><u>t</u><u>h</u><u>b</u><u>o</u><u>u</u><u>n</u><u>d</u> <u>D</u><u>a</u><u>t</u><u>a</u><u>b</u><u>a</u><u>s</u><u>e</u>.
+
+              •      A row is created in <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b>, configuring  the
+                     <b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>e</b><b>s</b> column and setting the <b>t</b><b>y</b><b>p</b><b>e</b> to <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b>.
+
+              •      <b>h</b><b>a</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b> column is configured.
+
+              •      The  HA chassis which belongs to the HA chassis group has
+                     the <b>o</b><b>v</b><b>n</b><b>-</b><b>b</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b><b>-</b><b>m</b><b>a</b><b>p</b><b>p</b><b>i</b><b>n</b><b>g</b><b>s</b> configured and has proper L2 con‐
+                     nectivity so that it can receive the DHCP and  other  re‐
+                     lated request packets from these external resources.
+
+              •      The Logical_Switch of this port has a <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b> port.
+
+              •      Native  OVN  services are enabled by configuring the DHCP
+                     and other options like the way it is done for the  normal
+                     logical ports.
+
+       It is recommended to use the same HA chassis group for all the external
+       ports of a logical switch. Otherwise, the physical switch might see MAC
+       flap  issue when different chassis provide the native services. For ex‐
+       ample when supporting native DHCPv4 service, DHCPv4 server mac (config‐
+       ured in <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b><b>_</b><b>m</b><b>a</b><b>c</b> column in  table  <b>D</b><b>H</b><b>C</b><b>P</b><b>_</b><b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>)  originating
+       from  different  ports can cause MAC flap issue. The MAC of the logical
+       router IP(s) can also flap if the same HA chassis group is not set  for
+       all the external ports of a logical switch.
+
+<b>S</b><b>E</b><b>C</b><b>U</b><b>R</b><b>I</b><b>T</b><b>Y</b>
+   <b>R</b><b>o</b><b>l</b><b>e</b><b>-</b><b>B</b><b>a</b><b>s</b><b>e</b><b>d</b> <b>A</b><b>c</b><b>c</b><b>e</b><b>s</b><b>s</b> <b>C</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>s</b> <b>f</b><b>o</b><b>r</b> <b>t</b><b>h</b><b>e</b> <b>S</b><b>o</b><b>u</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> <b>D</b><b>B</b>
+       In  order  to provide additional security against the possibility of an
+       OVN chassis becoming compromised in such a way as to allow rogue  soft‐
+       ware  to  make arbitrary modifications to the southbound database state
+       and thus disrupt the  OVN  network,  role-based  access  controls  (see
+       <b>o</b><b>v</b><b>s</b><b>d</b><b>b</b><b>-</b><b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b><b>(</b><b>1</b><b>)</b> for additional details) are provided for the southbound
+       database.
+
+       The  implementation  of  role-based access controls (RBAC) requires the
+       addition of two tables to an OVSDB schema: the <b>R</b><b>B</b><b>A</b><b>C</b><b>_</b><b>R</b><b>o</b><b>l</b><b>e</b>  table,  which
+       is  indexed  by  role name and maps the the names of the various tables
+       that may be modifiable for a given role to individual rows in a permis‐
+       sions table containing detailed permission information for  that  role,
+       and  the  permission table itself which consists of rows containing the
+       following information:
+
+              <b>T</b><b>a</b><b>b</b><b>l</b><b>e</b> <b>N</b><b>a</b><b>m</b><b>e</b>
+                     The name of the associated table. This column exists pri‐
+                     marily as an aid for humans reading the contents of  this
+                     table.
+
+              <b>A</b><b>u</b><b>t</b><b>h</b> <b>C</b><b>r</b><b>i</b><b>t</b><b>e</b><b>r</b><b>i</b><b>a</b>
+                     A set of strings containing the names of columns (or col‐
+                     umn:key pairs for columns containing string:string maps).
+                     The contents of at least one of the columns or column:key
+                     values in a row to be modified, inserted, or deleted must
+                     be equal to the ID of the client attempting to act on the
+                     row  in order for the authorization check to pass. If the
+                     authorization criteria is empty,  authorization  checking
+                     is  disabled and all clients for the role will be treated
+                     as authorized.
+
+              <b>I</b><b>n</b><b>s</b><b>e</b><b>r</b><b>t</b><b>/</b><b>D</b><b>e</b><b>l</b><b>e</b><b>t</b><b>e</b>
+                     Row insertion/deletion permission; boolean value indicat‐
+                     ing whether insertion and deletion of rows is allowed for
+                     the associated table. If true, insertion and deletion  of
+                     rows is allowed for authorized clients.
+
+              <b>U</b><b>p</b><b>d</b><b>a</b><b>t</b><b>a</b><b>b</b><b>l</b><b>e</b> <b>C</b><b>o</b><b>l</b><b>u</b><b>m</b><b>n</b><b>s</b>
+                     A  set of strings containing the names of columns or col‐
+                     umn:key pairs that may be updated or  mutated  by  autho‐
+                     rized  clients. Modifications to columns within a row are
+                     only permitted  when  the  authorization  check  for  the
+                     client passes and all columns to be modified are included
+                     in this set of modifiable columns.
+
+       RBAC  configuration  for  the  OVN southbound database is maintained by
+       ovn-northd. With RBAC enabled, modifications are only permitted for the
+       <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>, <b>E</b><b>n</b><b>c</b><b>a</b><b>p</b>, <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>,  and  <b>M</b><b>A</b><b>C</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>  tables,  and  are  re‐
+       stricted as follows:
+
+              <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>
+                     <b>A</b><b>u</b><b>t</b><b>h</b><b>o</b><b>r</b><b>i</b><b>z</b><b>a</b><b>t</b><b>i</b><b>o</b><b>n</b>: client ID must match the chassis name.
+
+                     <b>I</b><b>n</b><b>s</b><b>e</b><b>r</b><b>t</b><b>/</b><b>D</b><b>e</b><b>l</b><b>e</b><b>t</b><b>e</b>:  authorized row insertion and deletion are
+                     permitted.
+
+                     <b>U</b><b>p</b><b>d</b><b>a</b><b>t</b><b>e</b>: The columns  <b>n</b><b>b</b><b>_</b><b>c</b><b>f</b><b>g</b>,  <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>,  <b>e</b><b>n</b><b>c</b><b>a</b><b>p</b><b>s</b>,  and
+                     <b>v</b><b>t</b><b>e</b><b>p</b><b>_</b><b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>e</b><b>s</b> may be modified when authorized.
+
+              <b>E</b><b>n</b><b>c</b><b>a</b><b>p</b>  <b>A</b><b>u</b><b>t</b><b>h</b><b>o</b><b>r</b><b>i</b><b>z</b><b>a</b><b>t</b><b>i</b><b>o</b><b>n</b>: client ID must match the chassis name.
+
+                     <b>I</b><b>n</b><b>s</b><b>e</b><b>r</b><b>t</b><b>/</b><b>D</b><b>e</b><b>l</b><b>e</b><b>t</b><b>e</b>: row insertion and row deletion are permit‐
+                     ted.
+
+                     <b>U</b><b>p</b><b>d</b><b>a</b><b>t</b><b>e</b>:  The  columns  <b>t</b><b>y</b><b>p</b><b>e</b>, <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>, and <b>i</b><b>p</b> can be modi‐
+                     fied.
+
+              <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>
+                     <b>A</b><b>u</b><b>t</b><b>h</b><b>o</b><b>r</b><b>i</b><b>z</b><b>a</b><b>t</b><b>i</b><b>o</b><b>n</b>: disabled (all clients are  considered  au‐
+                     thorized.  A  future enhancement may add columns (or keys
+                     to <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>) in order to control  which  chassis  are
+                     allowed to bind each port.
+
+                     <b>I</b><b>n</b><b>s</b><b>e</b><b>r</b><b>t</b><b>/</b><b>D</b><b>e</b><b>l</b><b>e</b><b>t</b><b>e</b>:  row  insertion/deletion are not permitted
+                     (ovn-northd maintains rows in this table.
+
+                     <b>U</b><b>p</b><b>d</b><b>a</b><b>t</b><b>e</b>: Only modifications to the <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> column are per‐
+                     mitted.
+
+              <b>M</b><b>A</b><b>C</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>
+                     <b>A</b><b>u</b><b>t</b><b>h</b><b>o</b><b>r</b><b>i</b><b>z</b><b>a</b><b>t</b><b>i</b><b>o</b><b>n</b>: disabled (all clients are considered to be
+                     authorized).
+
+                     <b>I</b><b>n</b><b>s</b><b>e</b><b>r</b><b>t</b><b>/</b><b>D</b><b>e</b><b>l</b><b>e</b><b>t</b><b>e</b>: row insertion/deletion are permitted.
+
+                     <b>U</b><b>p</b><b>d</b><b>a</b><b>t</b><b>e</b>: The columns <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>, <b>i</b><b>p</b>, <b>m</b><b>a</b><b>c</b>,  and  <b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b>
+                     may be modified by ovn-controller.
+
+              <b>I</b><b>G</b><b>M</b><b>P</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b>
+                     <b>A</b><b>u</b><b>t</b><b>h</b><b>o</b><b>r</b><b>i</b><b>z</b><b>a</b><b>t</b><b>i</b><b>o</b><b>n</b>: disabled (all clients are considered to be
+                     authorized).
+
+                     <b>I</b><b>n</b><b>s</b><b>e</b><b>r</b><b>t</b><b>/</b><b>D</b><b>e</b><b>l</b><b>e</b><b>t</b><b>e</b>: row insertion/deletion are permitted.
+
+                     <b>U</b><b>p</b><b>d</b><b>a</b><b>t</b><b>e</b>: The columns <b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b>, <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>, <b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b>, and <b>p</b><b>o</b><b>r</b><b>t</b><b>s</b>
+                     may be modified by ovn-controller.
+
+       Enabling RBAC for ovn-controller connections to the southbound database
+       requires the following steps:
+
+              1.  Creating SSL certificates for each chassis with the certifi‐
+                  cate  CN  field  set to the chassis name (e.g. for a chassis
+                  with  <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>-</b><b>i</b><b>d</b><b>s</b><b>:</b><b>s</b><b>y</b><b>s</b><b>t</b><b>e</b><b>m</b><b>-</b><b>i</b><b>d</b><b>=</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>-</b><b>1</b>,  via   the   command
+                  "<b>o</b><b>v</b><b>s</b><b>-</b><b>p</b><b>k</b><b>i</b> <b>-</b><b>u</b> <b>r</b><b>e</b><b>q</b><b>+</b><b>s</b><b>i</b><b>g</b><b>n</b> <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>-</b><b>1</b> <b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b>").
+
+              2.  Configuring  each  ovn-controller to use SSL when connecting
+                  to the southbound database (e.g. via "<b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>c</b><b>t</b><b>l</b> <b>s</b><b>e</b><b>t</b>  <b>o</b><b>p</b><b>e</b><b>n</b>  <b>.</b>
+                  <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>-</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>r</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b><b>=</b><b>s</b><b>s</b><b>l</b><b>:</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b><b>:</b><b>6</b><b>6</b><b>4</b><b>2</b>").
+
+              3.  Configuring  a southbound database SSL remote with "ovn-con‐
+                  troller"   role   (e.g.   via   "<b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b><b>c</b><b>t</b><b>l</b>    <b>s</b><b>e</b><b>t</b><b>-</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>
+                  <b>r</b><b>o</b><b>l</b><b>e</b><b>=</b><b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> <b>p</b><b>s</b><b>s</b><b>l</b><b>:</b><b>6</b><b>6</b><b>4</b><b>2</b>").
+
+   <b>E</b><b>n</b><b>c</b><b>r</b><b>y</b><b>p</b><b>t</b> <b>T</b><b>u</b><b>n</b><b>n</b><b>e</b><b>l</b> <b>T</b><b>r</b><b>a</b><b>f</b><b>f</b><b>i</b><b>c</b> <b>w</b><b>i</b><b>t</b><b>h</b> <b>I</b><b>P</b><b>s</b><b>e</b><b>c</b>
+       OVN  tunnel  traffic  goes through physical routers and switches. These
+       physical devices could be untrusted  (devices  in  public  network)  or
+       might  be  compromised.  Enabling  encryption to the tunnel traffic can
+       prevent the traffic data from being monitored and manipulated.
+
+       The tunnel traffic is encrypted with IPsec. The CMS sets the <b>i</b><b>p</b><b>s</b><b>e</b><b>c</b> col‐
+       umn in the northbound <b>N</b><b>B</b><b>_</b><b>G</b><b>l</b><b>o</b><b>b</b><b>a</b><b>l</b> table to enable or disable IPsec encry‐
+       tion. If <b>i</b><b>p</b><b>s</b><b>e</b><b>c</b> is true, all OVN tunnels will be encrypted. If <b>i</b><b>p</b><b>s</b><b>e</b><b>c</b>  is
+       false, no OVN tunnels will be encrypted.
+
+       When  CMS  updates  the <b>i</b><b>p</b><b>s</b><b>e</b><b>c</b> column in the northbound <b>N</b><b>B</b><b>_</b><b>G</b><b>l</b><b>o</b><b>b</b><b>a</b><b>l</b> table,
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> copies the value to  the  <b>i</b><b>p</b><b>s</b><b>e</b><b>c</b>  column  in  the  southbound
+       <b>S</b><b>B</b><b>_</b><b>G</b><b>l</b><b>o</b><b>b</b><b>a</b><b>l</b> table. <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> in each chassis monitors the southbound
+       database  and sets the options of the OVS tunnel interface accordingly.
+       OVS tunnel interface options are  monitored  by  the  <b>o</b><b>v</b><b>s</b><b>-</b><b>m</b><b>o</b><b>n</b><b>i</b><b>t</b><b>o</b><b>r</b><b>-</b><b>i</b><b>p</b><b>s</b><b>e</b><b>c</b>
+       daemon which configures IKE daemon to set up IPsec connections.
+
+       Chassis  authenticates each other by using certificate. The authentica‐
+       tion succeeds if the other end in tunnel presents a certificate  signed
+       by  a  trusted CA and the common name (CN) matches the expected chassis
+       name. The SSL certificates used in role-based  access  controls  (RBAC)
+       can  be used in IPsec. Or use <b>o</b><b>v</b><b>s</b><b>-</b><b>p</b><b>k</b><b>i</b> to create different certificates.
+       The certificate is required to be x.509 version 3, and  with  CN  field
+       and subjectAltName field being set to the chassis name.
+
+       The CA certificate, chassis certificate and private key are required to
+       be  installed  in  each  chassis  before  enabling  IPsec.  Please  see
+       <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>d</b><b>.</b><b>c</b><b>o</b><b>n</b><b>f</b><b>.</b><b>d</b><b>b</b>(5) for setting up CA based IPsec authentication.
+
+<b>D</b><b>E</b><b>S</b><b>I</b><b>G</b><b>N</b> <b>D</b><b>E</b><b>C</b><b>I</b><b>S</b><b>I</b><b>O</b><b>N</b><b>S</b>
+   <b>T</b><b>u</b><b>n</b><b>n</b><b>e</b><b>l</b> <b>E</b><b>n</b><b>c</b><b>a</b><b>p</b><b>s</b><b>u</b><b>l</b><b>a</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+       In general, OVN annotates logical network packets that  it  sends  from
+       one  hypervisor to another with the following three pieces of metadata,
+       which are encoded in an encapsulation-specific fashion:
+
+              •      24-bit logical datapath identifier, from  the  <b>t</b><b>u</b><b>n</b><b>n</b><b>e</b><b>l</b><b>_</b><b>k</b><b>e</b><b>y</b>
+                     column in the OVN Southbound <b>D</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> table.
+
+              •      15-bit  logical ingress port identifier. ID 0 is reserved
+                     for internal use within OVN. IDs 1 through 32767,  inclu‐
+                     sive,  may  be  assigned  to  logical ports (see the <b>t</b><b>u</b><b>n</b>‐‐
+                     <b>n</b><b>e</b><b>l</b><b>_</b><b>k</b><b>e</b><b>y</b> column in the OVN Southbound <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> table).
+
+              •      16-bit logical egress  port  identifier.  IDs  0  through
+                     32767 have the same meaning as for logical ingress ports.
+                     IDs  32768  through  65535, inclusive, may be assigned to
+                     logical multicast groups (see the  <b>t</b><b>u</b><b>n</b><b>n</b><b>e</b><b>l</b><b>_</b><b>k</b><b>e</b><b>y</b>  column  in
+                     the OVN Southbound <b>M</b><b>u</b><b>l</b><b>t</b><b>i</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b> table).
+
+       When  VXLAN  is  enabled  on  any hypervisor in a cluster, datapath and
+       egress port identifier ranges are reduced to 12-bits. This is done  be‐
+       cause only STT and Geneve provide the large space for metadata (over 32
+       bits per packet). To accommodate for VXLAN, 24 bits available are split
+       as follows:
+
+              •      12-bit logical datapath identifier, derived from the <b>t</b><b>u</b><b>n</b>‐‐
+                     <b>n</b><b>e</b><b>l</b><b>_</b><b>k</b><b>e</b><b>y</b> column in the OVN Southbound <b>D</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> ta‐
+                     ble.
+
+              •      12-bit logical egress port identifier. IDs 0 through 2047
+                     are used for unicast output ports. IDs 2048 through 4095,
+                     inclusive,  may  be  assigned to logical multicast groups
+                     (see the <b>t</b><b>u</b><b>n</b><b>n</b><b>e</b><b>l</b><b>_</b><b>k</b><b>e</b><b>y</b> column in the OVN  Southbound  <b>M</b><b>u</b><b>l</b><b>t</b><b>i</b>‐‐
+                     <b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b>  table).  For  multicast  group tunnel keys, a
+                     special mapping scheme is used  to  internally  transform
+                     from  internal  OVN  16-bit  keys to 12-bit values before
+                     sending packets through a VXLAN  tunnel,  and  back  from
+                     12-bit  tunnel keys to 16-bit values when receiving pack‐
+                     ets from a VXLAN tunnel.
+
+              •      No logical ingress port identifier.
+
+       The limited space available for metadata when VXLAN tunnels are enabled
+       in a cluster put the following  functional  limitations  onto  features
+       available to users:
+
+              •      The maximum number of networks is reduced to 4096.
+
+              •      The  maximum  number  of  ports per network is reduced to
+                     2048.
+
+              •      ACLs matching against logical  ingress  port  identifiers
+                     are not supported.
+
+              •      OVN interconnection feature is not supported.
+
+       In  addition  to  functional limitations described above, the following
+       should be considered before enabling it in your cluster:
+
+              •      STT and Geneve use randomized UDP  or  TCP  source  ports
+                     that  allows  efficient distribution among multiple paths
+                     in environments that use ECMP in their underlay.
+
+              •      NICs are available to offload STT and  Geneve  encapsula‐
+                     tion and decapsulation.
+
+       Due to its flexibility, the preferred encapsulation between hypervisors
+       is Geneve. For Geneve encapsulation, OVN transmits the logical datapath
+       identifier  in  the  Geneve  VNI. OVN transmits the logical ingress and
+       logical egress ports in a TLV with  class  0x0102,  type  0x80,  and  a
+       32-bit value encoded as follows, from MSB to LSB:
+
+         1       15          16
+       +---+------------+-----------+
+       |rsv|ingress port|egress port|
+       +---+------------+-----------+
+         0
+
+
+       Environments  whose  NICs lack Geneve offload may prefer STT encapsula‐
+       tion for performance reasons. For STT encapsulation,  OVN  encodes  all
+       three  pieces  of  logical metadata in the STT 64-bit tunnel ID as fol‐
+       lows, from MSB to LSB:
+
+           9          15          16         24
+       +--------+------------+-----------+--------+
+       |reserved|ingress port|egress port|datapath|
+       +--------+------------+-----------+--------+
+           0
+
+
+       For connecting to gateways, in addition to Geneve and STT, OVN supports
+       VXLAN, because only  VXLAN  support  is  common  on  top-of-rack  (ToR)
+       switches. Currently, gateways have a feature set that matches the capa‐
+       bilities  as  defined by the VTEP schema, so fewer bits of metadata are
+       necessary. In the future, gateways that do not  support  encapsulations
+       with  large  amounts of metadata may continue to have a reduced feature
+       set.
+
+OVN 23.06.3                    OVN Architecture            <u>o</u><u>v</u><u>n</u><u>-</u><u>a</u><u>r</u><u>c</u><u>h</u><u>i</u><u>t</u><u>e</u><u>c</u><u>t</u><u>u</u><u>r</u><u>e</u>(7)
+</pre></body></html>
diff --git a/support/dist-docs-branch-23.06/ovn-architecture.7.pdf b/support/dist-docs-branch-23.06/ovn-architecture.7.pdf
new file mode 100644
index 0000000000000000000000000000000000000000..b2ee057081c774f2f243448d05bb8a8e64accabf
GIT binary patch
literal 135979
zcma%>L$qiymu`=3+qUkpZQHhO+txj{ZQHhO+jzHX)T_?lsaBGejO@;CteN?d$_tCq
zGSaa?k&a%)6+n@aO4z#E85uZR*x7Ot*c&*T)0;UF(8|*i&>AZVh>9rw8-?s_{%u$o
zT3A~+dq|tOnppGvyMTb!;eXD_%E=3;D2e<#DJY;UBu+r<BrKvTAtb_MZ*1!3XyI(~
zuj1rvZ0F+4!}o70=i+Sd;w)-mZSr5s|I?SC{tz$_*cn<vadXp4o7kE;n-j49t0>a{
zyT#eWk$_&*+Q8XF*u==r*o2oC%E{T$#J~p1J*!)D(s6SPb^DUKjyavkfMw3zq;ySo
zM5*N}T3J@5NEsHSMLb#p0F2)v`P!O1H_>mZy|wec!B`DVVqGOwBJcCXC(CQb#>c^1
zj-B_L@fU5Bd3QbAhXeVm+~|igb|$xGhV^Ml#o^_lG`Od&gKLo<k{mKiSn~A3{bc2}
zvQn=OB4@ITVM;NAyr#v>ws~CZBT_Zu%nH%V!nlX#C8;&g+5K{Z)=TB7)D@L1ho0!X
zVwtbTHyAR5k?^UTVM6h{4WiC8bQynU3!AN7g9G1OhY*=wVoI0S@AG`XBUi2TOJ7D4
zho)aJ$mMsDdHB9{wg}$P6;ika78PjL(|M`0F(%rOX>vW7vDd+Y_lkyyenPNu;ggNo
zXcQKBH_7+FTKMkS<JzO<y=iy{qc+Qr3m;2`BUiQlHq{1Rj}yJZPraXRS5C0imXB)@
zeToo0b@2n+5&QP*WBRx<cgMHO^K*Y7y`v6=yh+vfjU|WasbP*2#*C1ja17n5beGzS
z3@=uZUMlgvJ{hm`XXAs0^m0{pouhq`$F-Z2)92c`w4{7<hhwR;p$~dlZM6IPgO&cH
zp(d-r@n(8p6i2r#IY~{+b$|@AOM0lB2Wo(p*hW%8%_r7OOH75@B6Wn*#YI_V*F*da
zA{Po%2@3tWo`d2iRIWlboXzjuYW>-y*(tJX+-_26J*~p&qVxPR&AG_C)1{(|zFCKr
zd4S^Spbsq?-Rg47>)5$))@T+VpAp<XChX=SwYzDbBGlnzc;0<O9m+}ba%gI@fkh%s
z_G;zMqu%Yo_U^sYf9tFZI@{CM>EDkS&XjcVdU1YGIK4ji63^$_rCb`Rr1cUvQ&TMm
ztL<IB@!8<td$m*R=l+}kj|38dK5p%pn2tWF0Qa6>nO%J`!P?71aVmS9{G@&}suY$?
z$+rlVPj2XnCy1@7wH!8Iz5p#^+WY3*z5;+I>^=*BHHuDeYDEeH{gQ3VMTh3z14_Ks
zT$!Z<3r|#z_~yeq7$|%|;|iW^W(}OfHC;zAbvIfx7uWRsGE~3eEl`n!E%i64J)$S~
zf(Typ?HKC()gun1I;%s$X2+;@hmd)4_ny#KxGkkr4r^`_OE<gH&Fsdb(NkdLGXanT
zQ}gx;pFCj}%n4aDz_EtfOanbEu`yP%oR&+td)>(pl8_s)4Rhx-%LV`W6Q0yC>dKqq
z(@>62fsD}4bD8KUx;M!dNra+wt)xT%lnIcF4|v=mSQ;W2cDGipv~jc2Qi@>NzA<57
zvP|UcwyC_UM;PV+(O#RE*F|)DHk1mk$Q8+>s0so<>l;ep)g-ec4i;53Y++;<u`E+)
zr*J3E>a>Nnl}j*N?zVHCIa@cHpkn_SfIq>d7*+%;1kncORi&kAof6yX_%(jFTm20e
znk4`GL4L6{0==|{FN-~f1t;3yR**?FFjF)>nm)M1B7QRrjz4@twsE|+WeKq3W2PmX
zpGn$&A?+ys24r-<zO#iFtM%<nc7>LWu2{L3&t*w$jnJTMUo2NlEe!@?-8fL(qJkQR
z670tan0EZZnB6tYR49+@^kx2BPNf(Qry0wj;3a6Kp9~4kYi2nI&f6auIHDmU_;ZfK
zj?Z!Dl5I{>9+`idjQoz<Wdjtf%|*Bxb9ZVGz-81-|1h5Ixk_|k3fT}~@YMe&6QM^S
z`^AgB{wA3fqRvP=JGh?)IHdNqkWGFRphRgDx2fhw1#QW5S7wuU6u8@&K&>UYpUM<a
z!pA4Q$JX)zR9h(B4Z6*0vumTDqSK^uN`STskwOb(_gD#ulj|(?lU8Nb7@5UO$&ORE
zzhUQ%nU^W+p^hHfG1=52AN?Z{Q7=^2QsAr}cT(0JK=$#y{9$UGS<Y0*4JC)(DBDDB
z?BGu!P$}QCKvED{-^iC0D`|tc5Yv`3joTJhoA`w!4<gTG4Ma6ncH~Gt)+q1=#+GZ%
zkNtIQr!eMi18wKal6<PtX>Pr8#Se@>;^vL#^#)E`oh*!@DJ^a<I?cJIV2sz<^yTJ!
zK##~v(DV&EQ_gfKTX3n<sloM@42K|V3KPV4eW=)Eq<s3N$|&(2b5nJKPSAa*XE*gh
z<RXw;Uns;x7z~Re*h<mEXO?7Wi5&uBF#|G{^c+5)DgvOmi!G(zqglC8zk(<^Zw?hV
zKZxoe7#1Oe!9XX)w7XEvZN*N-OmYhg&v(X2Akz<XlJWF?_5pxviRNb0iEENK#i%1K
z)bf+`&0T>e!wF0oX<<ew5K*&U>y_om98;9%>d^d#ihkz!2mo1ui~_dojZp91_&7q-
zR!ZKY3EdvBzSk7>-|#1G2ecr0FvGGvLs2*pLj@M{gGb@LmOtEOEv){eMlOLu<iILV
z$b|(r5nqHoWDvdxyix3`Bl25>Mwu<Tkc%oeQjy2^&J1u6##bVS<9OJHYh$i~?H;pX
zD0q<lf8-li3&Ne3fGK_zEzNXU(8@v;g1b1HVLd}dL3I59f|U!(LSG)yt7a!1yU>^6
zIaw1ge!ZT>%6=kRdR%9zseg%FKUM#%<t&In4MnO$gLVWtAHB@eI%@B6r*iN>gV{#;
zBWHlA1H=A|wLmQV8DC1>RsG8l?)|zoG#Cm$FH1I_Vv==zQz_)Lu`pyRPut`GqFm>=
zvn>Og31{)9oknwjJ|ycIz*km>?Uo~c7O>BcvaNPYe@YL|8q8MNe4aCgt!kyNMzEM>
zDPua0?0C&mJ;oqoU5@whARbf8o^1RJ3q|ZUk>jB<=~7XMLv$JFe$}pEd~e`IQ<+%g
ztk=3dZK>cyaKza)Ah#!Cp+pzS;#brn6_c-`CtKtaUiY%+7o6M<>}K5|iW+aZ_e&n{
zOY4uKq>1a)c+=#V-y<p*9Y{iCf9NU+s7KofgY;@(NSkA5HQ6(C1CZXO(;uP%22`hX
z2QK4A_u2I(Es5*u!D_KsZYWGz(vkU7l7%}|h}J}66lCq+ko>2h(%+{GGdA6?MDZ=7
zSm<n+sRi%@Q~EH3@>98TF*!4NIvu^XB%xRghNQc<sV<w8ai4V_>w*#DEjC<Qt&GZU
zGSk~u5!$^>;CA^l#wG%wS)OLgOJXg8YMt^fvr`43-L0bdi?Cx@B-;uheU<NzSdHHy
zcTU54#+F@HPa%S=^rZ=V!dFMpvF@pPtT~CCysZCHp67fe;^PJd7QMK80VUJE#IED{
zb5^J^NTi@Iya(0B-kmuanCCWt1jYxe>7~T)p+N<PY;mJ*Bj6cX(zWKm5gbvV;DRP+
zJSBni9k;UyW5Bju`wUy*IXtQo#K<-F>r(ytR%dzlM*`c~j~LH;w!{VvMA%CUKFhnj
z5-{@gQ2};-LadU>Z5ZYqz@`{=GYMX5iR+d?b`}+nWOwgTIk+14rB1c5h@g$@oGU=r
z*qooJJ`ynq=QVC=7CkaLX9Ah2h}KR+VcM3K_#Ls;-DL;+y>f*2H<Dl}O-EW&o&Z(t
z^#_M=6b7sKp%0VTYhnXd$$%*@s+VK1{I=>fX6MJ!z(kKq<SCNT-`RrmqkRWHms5U_
z(S(TX#5F=DIGA;wM{>xk0HX_QBt_3DuiVKpVY%X;nvIQ;r9gO*9O(hOMMA?ULq;<>
zZoeauop)PqT`&=L5{hcJ^RYd8M-nmk_IowM-e^(IC-zjv^60hJzu%T-nx16!gwpFX
ze}GdY(hCYF<`G>D^-onjiA14za0^*vhXxpO#-2*S5%bVpH-w;xbz6_orsGeuwHw3B
z6p|wN*)|p3tmmS@aHViB(5$G3)@RhqY#+$M4D7@^2M~bo9`n%|g^3#|d~z_ylwFz`
z#kGErb(uHPODUFsCJL;>Rid3T95NA&=RS-qhv(UY1unR<0PQ=*4t|N=evkuJf8r>h
zgT}LlU}|FDi7RQb`2ksQ`YD@(s1F-`wx6xIyV@)@lo<1tv-Ns>Opwgu?xLxJ)5Gv~
zE)qa07Fbj}_hI11j=hH)5P<iir?y`!H2CEuX%;>%M`GqQI}B@M+iUFD2{Rp@@X5-g
zJQ}b|a6R}I92}{f#k1g~_-?ObM`?Xv8-xoJ0y{Twh!=*WLbZB&Z~=&FIeVt_bGqkb
z7+Eplb!Y7a%&w_$XMeY1D2~X5M+cnN!wX6pMI%P9O)$)YeHo&eTTEg_?U#fT70916
zQUt0?GH||F+WVlotw9=idQ)Iy^DH;usq06B;@1x96!}EFxtYSzI2leUrZ`V}?+CUo
z^6%kd!4ULikT<xq(GDlO{=hQR%irX+(e9ode>0S9h9gAMsD~eR)Hm`SBA+2Qciq1K
z04y&rz{+IvdP{aDY>FAQC?V%JlQH$E^s2F|_;z-c15-lxbapG$=O_HiUGsL5rZ;!#
zM=w4#5TqLy&ZS8@%X}d<^uLcWndSr&AS5)k4-)%1ULwd`ntAHXK8yJZC1;-Q@$bN6
z>G@o+pSO9L`y%%{?O2+c+)k#)$%uV?RK%#nW=Py$4~B3))5dhKIa@+bd|A^&DB)g_
z>}xV6KC<JI6)CXzTV+}LW)||KLx#80g1lFAN-BEo41+NNE;d}MH4-k$%Qti20kFyj
zMi`==-28ne)Bd=6_Eb>oy_L<psm_M$P<?#tCv$8pdJoOfVWwpeohH-E#|h0$BF(N=
zVHkR!MgTRI6^2gvqtfen(ZE_&xIk&IOu@rmsRCQnNLoEpz9HE8>QddlE6i=N9Rh(7
z(l_lh#r##OC|&~BfKX-Bz_%s;$b&*cJCKl3c{e5%TDco`50pkH8G>UM0JFFXlmq62
zbERc?%-kg2zc2jN9m%s4b5IF^dkS#mBUnlM+vAGr`BY@e$rDv4q>=M_$%UxIF1Rob
z=AL3IC=lZ0%f3dGrGK>s+#oIoc*bUVKpwz_Z9A;}z+vH#qyUjWvqtdk2{PUtijZlj
zKvYAqOACEgsYiyMwp43q(bg$SM2wGyp4Q()mXzQ4FeX!|3?X<Ea)O=-kwW{rEGt6I
zk^9pC`({L-s8$EQtDXIg>h}X2kw_kAVr%?AT>EeKUo8Az1pHqkGaCm3)c@2N{}YrM
z|8JzMA?36=hS+ndHYKB99i9yi27G06O`;;P-hf=`U9ZF_9xFUV!VjFMUa>&CIxTna
zC;i&RkSD&bRa50tCk({%{q}KLJE{jEgPH%f`rWyuEAQxbe;k-07x8J<PD*b}ck;G0
z{cv#VNAY!V@-omf6n-FVg4w>VOLF~vb+W4ul0&UTI6)LdZmWte!CcGv1ywEnm3eGI
zxSclX@`Oe|poO34IX7vrI~^=ZnWRx*_S^N2-6qe84k8mm1O3T<sNV>385VV9RKPnk
zhTSyDltOhpQ*g5Rx_acYd{r6ac22<n8XD;KyPE#+^`34`aDt*>?9QDLwT1ODYfaZy
zG(NqN3BY&6f<UR1dOVfk`G|KNuAJI_pIRD{_cM8Uxkn$Y5C~3JPB}bEXko)vg?`<m
zk-(=S)LiBnV;Aj<PGv%RI-^^f){$dcDy@My)47UlM#dreVc;BE!acivY9(`FI=8J_
zdto_OwAd;8+JRY-Z;QRKlPKe*MqdeQ@x%}p#brh%)&G;_V01ngOMaJJzYrp&WC^(B
zLpIs+er>y}vDsO1`y5#{<rO`le18ucTI($i2dlvy57_0+oOH)Q3+=x#ORv{UY{&N5
z*&zYB6j`PHA>ONfX(MuxW9_mG(-IzCKBf?!18L=BJ}#If#|#m?piPo{aV=Y0VOl=k
zg4MTlv7o+JKA=Xx05&|Sqd$IZ5UtKH+x}aCw=!Y|;a2V@B=>@0z8xRwf2vkww|{9#
z@XW9JC)s6<JKnc<6A;fc$#4WQox9C?+eULr3m?6hZ|Tg;Po%>Y-Xs{`H#>rfR;ng3
zt#)q}Y7X?YIlkPDGjF4r+z8G>JDf$SbYpRJ$=e1^$=NX{643`A8S=?~)77{*tYYV>
zJR<m1UJWvUpLp{MdcuaCEx#h#i6s8A^qYSLb!d~{H#CS^B;ZzPL?uJ=#H&zeWbaVJ
zJW~c%{l?D$A<(P=C^3mKjzu8kuognONV6$PR46B&34qg$ep~2q&*?0A7~DA+>E<jy
zQY+T+*P}7h(U@XDTO4cSTpN)=tkQyz2>`#4_aJ1aX@zn&&*a97kz>grhr1E3MKv0=
zoMuE55I4tF`DmAaf|8t)1rZi^rg5NP&qxu#HctubEGP%2np!24pv24}0QEtg)xj~d
zH1K$*2ZTjVs^|_`i|8bStOhYFjaoGpj%wAVvXAd<itDWLc`Iic8cd)*K_edMZi(2;
zM?!ew4lt-x5cNt};Vz*7#)Z%icWh2YrWerhCWaUhAN$7uhhi6A!d{?l-f^hK-?GSK
z5bti-JMfm{6y`*f0EbN~XGXK=WZ@We+LJH+(A2HUpqrXWIaj72-akdY5K_%+JASif
zTNIU^KOw8;4RxlRRX8sCwxW+c+NUOV%ux*x^0ze`FbRu^`-u#cxMh!7Z$|03!T4~5
z=7``o2kw9(`k_9kM@qq%5<1HO6cn5w0y*$t+ub?!LGdk^=_c}rB$b#aL5wAJ2~AEa
z<`Lf@p!XU6JFhjoGlz!OBe7!9EF54+RZ`_X$XcJHkBTYJjL|aE2ydhgn*PYYD^7EZ
zk63KrFAIB<+j#HrfP#t~C`jKg6a;<;CUBb_YX=w7U&SF_&huy-aG5gld4C$%gBR^V
z((NEp02J^d3pL`uZSDdj74|!9dywjbOTvrnd|WYdE?{7~%dkMDi<#ave^Uriu155<
z@wjW+L45KA7f+YOJC3eD^4V~`VY>jG8HYhB7%4^7yShWW3<|NW`<N6L9F4V7w34D?
z@<kDpzh&t!H^CcRohO}?bdsTbzXD5eOwA+ban2^#Z5BX<6~z6TYErEXUtrx8p|C~*
zCuDjO!?JH~F7b}wpsLU`OPQC?YpwYW?g59>q4l!WWG_oJ@cR7Rc(FOS#~Kt2x*N{>
z+-*elwT-L7lWk5aEE)iJXgaY_Zj$N^&N9tHYYzMG#ur=y5a0@v%~+>%4R4;Gplng@
zAj|{|)?fg}R8Hj8LuJDp#;fZmrI5yn(>;@AxR@mgXKZtW(E-{!+W($N7{`NgwtS@%
zB$P5Nje<ZLa10)qDY50|MlTAMa8Qf+Kv)|yS(0zMuCk6rq}}Z_G&pWaq;7kXIY3aQ
zum|JIiFQ_2U7I5!sK}QC%JkHX1tx5UWT%hUY+oxtrUUQlVqbNG8os4TMFEeZasc4D
zEa&F4%Sz4R&(?3fMzjf5gzt7axmI;`z{N}=j)uTg#nP3`G}j#`{Z%vl(h=NL%-~W_
zCSuUy{w9eYR*03#$i?&nd4QrGU#W5a#KQoBDje^(GoSYDv>&t+Z1DA>yw4$K!3YX>
zl1pRYg?}~$rug7))KnqCLQ9eLTOU*ems&-GYk(!S_q(H&7sn*g+{{W^<1RM3B9~gK
zMbq=z9tP8oLLNm2dOH6j<)*yM64mpS&Okv{r2{VG+!*X#z^&diST~<H&-c0He>HU^
z>`Y3}7H_ysh~R)&m1VVs!f|@9-4l1p6m_E0U5@r#f`_LM>eu(&HSbxhW-An+VpdUG
zSIDXUehDUri;W@zt!rwXhYYUXqlFR|yIe1mvS+lqK2Q39ujAvJ%j(agGG68fAa5!J
zTK6Wjqo<ddy}Z?uQH;*o9Y6RJE<pNdyCnb>y#oQ*NRuWeRB2}ykjw4NsON@OJz<Ub
z0wb=Q1(|NTUbYF>Gtlm=H^H!~Pw6nvQ$*4MNxeWc=?x;zXxj$dJmziO#WXo0a{*;1
znNt(aF1bH-Ur;`^H9Uj)9{3ql!`Zld3*HMM9y&WZnb^z9)Dk2Wt(hi$6Kc8kN*1I4
zl%5I;y-B|+8yNS{U~D12H|etc>hf!xi8|0a*sy)o+SZMmF|J>QR^jbR73he$9P~Vn
zoLh<AyqTMa^hRmSr@=S0_Tn@Ubh=<!shHt~K^Wl2L-1KY!*F4e{*lp8F>Xv7W9g*5
z?v#l$mvC=3es|g34b7FKPK8Q*xh7g!XMZ#;%jS3Q)ebFs?9PV$@^GdIsVp#8?CXVw
zSrHZAoZm=m2Xj*4T)<RtU%5HvBms=fum&K-h8#TtCS~05-lwa4G#tD(NGJv^glq@E
zGDhU5qhHenJ&VE~tpBtf%JbfOoD$ZY62rhSyN$&p4h^xy=PNES05zJ$Ue&j1c_;;`
zG2mSfFbUs=5}_^NO@tXLeqYD}yH@v(hV&>ed%DqLbJ1U4LJvO>w$;m={x?1>TbYkn
z+84iQwx%(#_$rP*UJWsO9kWzC7CrFMtF~7+Qk1i-iT$#?P`H<T$|(Zfo=Wm-a#fTi
zcIw64ZYp}s8>E^;?J#>)PH&ViZhn>z6InEYEH3UXHSZ;j?T)#b(W6Y}Cc(@pM*#|)
z@Te-pgB34)q_2s2B9gc;FjkbD&5+*INfl=k^(lHgTC20Vm0Bk<1oX8#?c>M+#+k0s
z$cgpjQKF+O-0>Wz59ajAIJ9(~2P#{pMlQDG9s2UjTiZLAQChBjNd0B2vXnP+H3jj}
zDfCwYc(6QuYiAsJ6FTnpMmY}`W3IeAP(uH9Txs7qCb7;<OoD;nty!yP``5*?kAGai
z)Dbw4Z&&*Z_vZ)xhvA3dKRVz4ZfXCk^<`pXWdHxIFB9W`I3gyd|BEDQ*4#|o96|Is
zRh!xjymyRl*9SP8c3qE9N<9*$IW|a93?OI|76xLWo3ys%>wic2HtIMHolLA;D>tts
zxkgGqKcD0%^?E@^QWO>ZYWO`F6%oHd@1;rqp{)Ns5_`DztRE;{c|W-99eL~bY-ONl
zL~=rsl2{oPk>{gX{q+~wYfpwsAVbPgw?h|bp1}HoP>Z-TDltb|hkyJ&qs@71y$Nif
zeyFiaB`P6|GM1<L?fGF&kJm&N78gk-J8>8>m_||MqYs1^_%e{#Ip~lcVTrxg&Hs7&
z#(v<e{J7ea&cvk&4e4_EU1g?xe#n>-cw!tFQXkLCpzbHd5>^#FH_Oe*`6{7avmb8z
zdC%QJX4M?P*MDM9+TnHY(5z9$2<=Z|wHY=!TT$Hb)APys@yPV~Ma@5on%&zeU&l%P
z8Bg~s>>WqfKE<;&Clbwt@ZP6Z%ryvsZ+qlf{=u2(36<-&f?q!Es_7`<#fcp0vRg4r
z@QEk2{WeHoe_tR<U=byWU^Wcl<2)qH%5My^KZg&@ttj8Lp}FcHN^Eqw-5NlMn)}8N
zGIA9_-@-U-cV5<yw&UY#I&GMI)l%eZ+MGUZF~@_-ZW~z3OFVr?kjVX}r|C1a>-k|-
z*zg|rv7WmjjY?+K#J-B|N)~(M)8m;eFq7-6&nHQzhMa*A4k7DVxedgx#C4A;p)?cN
z#%ZjnqJ9|6Us<uQpjIPIu8i+QVo#I83lVsBHFl6j-miT4#^%12Z>(eoLZ~+j{gAPl
z>-i`9Za+t^+NV3BlTq^&Q5G1IDG%m)t!%V`_FQepYs%w_D*oEab!0ZV>|Rr9+(JKW
zU%IsxZL+!e^^%*cA{k}sQ|iYxW51%J?e>JCkDbr$rY+NQnAm7F-FfEkPjnwm#~2x1
z=l9S*Uh!8HaM3G0rAzji<cjn1ikfk=^_9HxA}5AIb_V|~ADo)~aNaEcECPTJF6R=(
zVNU8a2^GZ-v%curu*A1*XvsSgt1Ggr*rW`GZxPmyQvNNZ70|_(JI*(cIb48nCwz`&
z))j&#hohnn*Aazlmg!_?7izZ;=SZSb$A!A(8^nsQ^*=Z51;-`&n}U1*0mtPR8cYSY
zwGX$7BLUV^Z$QU2m3?JT@GRR&zdHzSB9+DEqB*@)J_~*_&k%Y@sm0F%XJgrQ*-#VK
zT$xQzm_3fPNFpJcku@@5*02LvJs(@b`Zy1L=e@%wqu>%I=4ffz2SEWzM|h&eE~L{R
z$K1eNgOpr|`z}bq5YbM=4G(7!IHJJ)Ryf?)x?zgkuC54))mPdT4U-fDCp->svgo>s
z1jP~%t?|)`BuR;0spNA3ufe8#XdVXPD!)a$l3Oy#Fm}rBN=ihGi!nAU<hN9xjy7R!
zfi}W|8Zp?KE1mD>UFz_CILpZ~h!WNPw>%+PDV53$#dtE`U1TDAd_h?h>`o{;N-Vh#
zf*Kj~t|&30RSV0<G~omUd&gW=Etx9@t%>=P5O>(Wn>D+12N6dg4R&)3`UVqecO-pQ
zfLMA@1-&x&@}5%h<c-k0BW^c!xuxpHEJ3#XU}kbe4dkMxqVmA~0xx@(Wpp$e>Kxb+
zIygx%vVrAnBfuFWQT8fJ&)I2IUsm{_I9g$bTtJO)5)vz}%I3q+aL*ifZkEcWb4#`h
zDE0;WN^PUM@5dP|QD8o6vV~yQ8i9XV;!JhTB+ND1j~H2zDhwv?vL8eg6Fb}s{s!y_
zm_(300+dL>><rn!Tr2N|?9@jAu%pY*hj|4+dU#2}VovptRygrPo{)_x%CIjc9s~pl
z31d$^{zo|5P?n&}hy>QdFrf*cVQq(##uy?5!v77A4Ak5&ZJ5wMU|(QpNJqh%P2&d=
z{$NJ=?~rZemHf|S-#^s42x278cO2ssAJ*dL?3zQ6(j+sq)ryOaE*@D6SYi<+?ut_0
zY$W|FW(UTZH_7WU4RAy2N(Kf%#dXI~k&ZMA5Wkhz-}_{uBpv89ky$e}iJV7_W-Y4e
zURL%nusrBd|1+o~|2ztd18{Y2NnyvWm~lH!LSeeC<AdSEAUeSv5|O~u!?aZpN&zbU
zn70zA8;OzghF$XSVUW)TH+VMVH&eHrbdQKTpZJ)S>q0pU$q)>wldN)sh7AxHiN3On
zGPW<?v=Dq78&Fgj?<gIx{b~-~bzQ?_JiLUrxN>^bn@xzO-yA7Y;3|5~QC1c*hSbff
z`~Bq*AO3k{@2gHbI8s1*EHDv10M5rE17kuWW~g+WdHPi)0o~^BpSV8yoz=o{3%R8u
zr9TNbG=Vi+0x$2}$<;t3kMa8hY>?<B*CqaP(%&drmYUb7@G)7f9uDaC9l<Mt!JP0l
z<GU1K*#lWozEOhV6zH;!juc*t9Wjenfu_W7t7wD-#IMK32>k(Z?T!QU=8}+mBe|6m
z6}V9p<88o)R9wxU9oVERlEHcMin|X$Pf&$|bY$E`_PV(f2bdNDK9u<BQ5ul>$FkF~
zwDY6}$WECsB(Aiym?^$I)id;EfH}ehcgd>^Hv~>2kqRiCu)8`t2*LhO@Py&%0)cel
zQR4if!**09;B_+q(`;)tR?2}JaY(#X8Jeb~qa9S89rcbw%4-Ou@^q}Ztbf8C+-US6
z)bSweIZ{;&*zYw<Qr=jcb8z|b0jJyW^<|mG^KwTo+BMQ&yp*{HmS@<w)~+n?0i?wa
zUY}wS%aCg`vHRjJX!RSp#9@@65hqGco99jrH4z}?v?W9n?D?N7Fa4Yibsy7XGfyVt
z!87d={Ht4n#`NX(AkigtGe>ZnY+T^$*Ugfc31Wq;>|zjK_QCxd`}aUVn*4^U)$rp?
zR#CNdV$kGFA+tkSB9TvfUzj9d@J5>3ZL)Q5I1Z9Wbf>gwW!Pi)j0Wl+Oj|IF|KyF7
zaf5H&>1L|K*ihsSaeJfLvAY{?Zk8-3!NMfwc#|ZA163{dYy*$jR_6u(JaJdZ)ec}$
zENfm;Y1Lx9lSDH-Br!4Xr@_o=z=CE%6ax5a!45F{fAO35{dHw<IyceETRYOLkvqR|
z>ZY$zAs<^GbD>6$LUzu;Or*nfPGG0Veoo+zWpb#F2BhF-8e=E%F|H>9#ymAeMZZXQ
zs=&x~z>-RWcG-&2N*0DC>Rai1Neq)YoaM-(R3?sPF2;9XYn0+9CmPO4%A7MaOUyd^
zJu;*pB&5apW#TDV9FMpde=lcIs*M2QxlV&%K|Jg?s@$|>Qx1mVKIF0imqE<hpyCP=
zU}ui-;n5h~#V8C}O44S$sR?|!KI;H*KAS5eStvU~KDrIUq)OKj=x$9mzlQ;ECM@Hh
zhHJK#{ytf)&mcs)GjJjnJem7)wT4Y?iJ%86#)9RW4oSc~3?P@;WxqEz{)lW0Jsv-!
zQ(%Gmenvh{7(AZVr#S<q7cyY8u;{dB^hW$^<StNertv4+D}0GZLAB$xQU@LR)8MK-
zv$75XbIj*!dpHA%n~4D!q}H~j@C1NB1BkKCqSVi&jXflrpg`@!TIlupud;tpe)#tn
z`92wW6-x)ZO%Mv&gUPBR8oY%m)|)~SOSHO~6uG?DVBb-uUE$cI_~GWuL{=m<%^;$l
zux%<sW~kdx(=H);yml!Xs>#o|h4fy|!y0~m#FCrn++A4t1C4oh@#h$fwrg#iDH!w!
z0}eelqaEksB+m7UOL~J}8xdKkBZ5<@uR(MMP?ldgWQgDqBzB89`2F{;J)5pEC55$L
ztI17=YMu#!(Mk3tC@K$DH@5Le!q_3?3Z2%}Fh^t^2KtK|J9<<0z|UOv*w6$epwvep
zob}ehMyRW!P%1wg3!dlN7s+j;Ew8{)Ay@U>wuKMhi3JU?Ut#eRgOyemT=V&c5<8nL
z!&to?mw9ux4ZldH?ENyMq+O<?mtG%~7Jy#SId1Uima~NM!;+q2ub)$6^p$tHOT`5D
zKCLQiyXTdt)1W`E)i!Cz07undgB=4mbs7_lE$nX~P9GKz)}w-$r3>H<*IHT{H^v0%
zb=`~pVky!OTc&m#cY$>pAM4J8a5i*Ukf0_Hr5u2{xOL+3zd+<hxD|kxrAkVHes={3
zxo+RPpyDY|nSE&j%kaP^W97z!-_@zkZ=2{>1vSX-=!9KJ;_Wuc6S%?kw1i6lvYip@
zn;m`m?qX0*m&j3jxh7Vl4JTv}?=Sh9F*V!Ih+5Mrr$|sRNfKVhQVl(o32%%;ab)OO
zDvO%WNVZy6q4kP>XC+4YExloQFlsv};C}1n-qj_#1sW#e<DOHmR2fSbxEHcrXXe{&
zs^plBtv#>P6xDZ)UvqX*YPMQV{R1I+?0G5+XxE#sg&Z6d?ek@qu=tZr=^R9cbFRT9
zF32p(`d#nO=@<*@vR5HQKPBU@FX$?f$C1SZe}VFCK7701puNArOJ7$={)4Xmo0|Sx
zEHE>1{4ZVor&wV6KZ%8A&2h)05yb9CYJ2RaprO1vAw<q-6H4w_4daA^5a(ci0OP?R
zFimyw=XJGnrMEa=4Gk6b4vFzd`)Cvr?6L}Ny`HIyT-sH{RH@&kS#P%!O?WfDT*&wG
zV&5aK%UU%v^rsaS-<OxLbUf|t+<PK};T%-(0GDR2#?8^`<=%S89Vy&hxg-EPZB#Q?
zrv#U$a97Cl`tU3gW%$Qy>y)%~6*kvD$?puV*nF<qh+wYm@2ksv1cDX9cRHi+i@|#6
zcrViRpNknjR->)hm(17Hfol;)E~(VHx_%A3rqk)mnnfvwjI2xx-+C^Q1*<NGB1e?I
zNOSiqA^79uzxi_aT$eXPMDZOywpCU6VgZNqV(%H~ob{)du<-4O(r>aThGL{^te2k^
ze66AN784sAt=n^2gRI#4qXaGsEdQQdjr0x<S2j#knD_iDZSgC(E2~Rza*F75&p2+h
znO-C|ed-_3yiSEgn1TloH|W`3jQ-%TD(n?OeqD|Ekj+BmM?39<=OB~S1>VJW8!21l
zILyu22phJ#=(tiNht-J}$V?F?pn@vnzlyLXzmZx&RZ_cM5A<4qB$ZqseAX9*#h;9g
zy7Em0BPnEhUi7zIO@{d3diaNp-5Z?+18}}nUxMU2RFfV~L}kmjd9DujT;WyrT&w3P
zO9tOP5EEZ{v@C(#+YGs6r@z|4tu!NUIU(kFcBAc&`2J=`MpRK#LfuGGV~5i0rh<OA
zhl2*tZm|%KzQ#Upi}rPvU+&vgT7D2(ISM1;xb*MH0>4B$(i+Ds<)bh){kB+*hE*@O
zzOL~U%ijzA1)+2^%ATjjY5GpLtFCIT@%?&wu}t~^!5i>>?G8z*?d|^PY@V%%CGyc4
z$Z>AF^@u&qZ8#0_G%kun9a0w3TX|hkQW4s2*)(zSse7mi#*u`9D)8aqo#WstgZZ3`
zcnc9Czr*!=5WuQyfY)JFwlUgvQMs45>{L*lx*j1@(!y956i(O@K3<<P*J-~+@Ifdr
zy3hMDkedly8#@QegweA4>k`srg9RnG(bByOAfU}Ae!aU<6|d?=$>Sp|Lm>-T3MZVA
zfo`o%phM7f$JR2X=DJ*7G`y)m#j--o&V3%L<65U*ZO5ytDYA^%vPYjaANMD4sl)dd
z_fvm&+!!r9lp&%-CwS|)o@!#IBg|&SRZzTDZ-nQx99%v|CKyZ>qY}brdYMT3eW|1Q
z)g=QEs^bA~6s}rvd2K!lc!HgEeRsoqOMsw#cr$;y@qLL43!<{i?^Au7F9~J#(^hxA
zU=9)4HrpAx{P*DF4Zg;W6Rc<444nu>aT<t40GG%sso2d%46UPdi*VVNE%q6Y)e<q(
zgRBxp8bXaO$~y2MQ4|`1m#)!Oi0egF;l)F3o3NuYRD_vT7NJ6c;Kz(ONiKyi4mDP3
zG)6kwlhP`RNTR}fCoSgLJ%W1@a%hAOJlK^qdXD(%A`_S;GP^ITgjTVA82QjDqAhgU
zb=_C*4?MpfsVM@70B55Ujub&%SSga3B;L`dY@pnqt)YYxL99lTCM5!5vm>A(PZF6M
zqGxU!jnkDJHMUjb#TcLF5VALTOlJiq>-PL_sbzSQDoHS7cZ7^+eH^zS^#x!JjXt5O
zDzJDo@DWVF<fyGR^HEASu}oAOCB+XrHV}pSTbaG;3uV5WV#CNm_j(_nbAQG0Yz0F-
zijIK@)8Gluc>kD&^HI(tW>JT15<!3|X$jwjXI7}?L52l*h5Y3eaR2kHm;lkJ<@-Dn
z3i2vltkIYJTyIi^zf2YiE-pISbF>nZ1R)IE@(;8U$RUz6ZB~kX?O7m?WI3Xa4)0t~
z!0~X)W!Na3AGQP$Esja{@=QmS$$?%KVW26*k?@JS0!4vCK5EUu!Ck}yCKA)+#?DFw
zlJr9J(O<)NuUP;<??J(@%+hmdW%(&RniRMrWJ%lp%o#<qjiL*9b>RUPKOx|@cu~fv
z`I^&JfJK0(8p}=^Lx|gDRZZirLQP{)iS2ghq+nw`+jf)zj^lP8NGms}Jfept1*;+r
zP`odV+|rEsHe4&9Z{u~QmP#H_#`Sy$xc&z`?L^?shMykxwNGJbM4_<GIkzdb+Ofox
zk-lv_Q#wVR3|;-pUJGq}iMC7JfEfbIzCdhrL~N{)vM~>Q2{O3`M=M~#O=F)qZeH;R
z(D)h{zxP)n<_OuECiDQNISuY27}CpEQRmBxEksxw8DA-PPl+ScCo~ewnrqwPNP`p@
z!$>RS%;v6NnNDi<mD!(0h1R15`ziL6nNT>m6_wx2AVh&d(G;}M5xixhmI_BOyM!}u
zqHIzOELbi!Gp0FCnUBfG<9Ww3s;}CR@iRv^`!_?pY^>1y-;z3$MIC8JsSC7|;PP-H
zMHa5{Q;U$nY13YRT1lIkshLV?T*%8OYT+qnL7(xEAKR!eRgq2Uz?Ex|_bu%2-zh%F
z>rDYrxaODg37cg8P@ocqQM>}U1tuV&732n4GXNq5=QW_9@BOLheVEe$w`c;O{L3C^
zAVz+NcHQ#I`Py0kc{-~5(P^(A=ta~e>(E+o3n@9e6t}ane|=JkO57=Kv<*nbwzc-E
zp~82&QSjA4|Ck`abN@^N0W{i=H1AWm2fBt_IMpdunGF*~$Lk=o@KH0GS`8)KtsFEq
z!8_TTuBb^wcq4hDn1{AyiPzjglp>O*E27|AFZM71A@U@bTBmUw$sgo0N)=^V+fgx;
zaYB4`<Z!E=X41~Yw#V@7^0T$JTNVKcn8JzFT^a_~Ss|taVEi^hQADOdFIPejzL$vo
zDg4{Ke~nHYdl7a&du|&9M2CNI{GxAm)AU`P4ZtJUj5))3!Ohn<fr*&B{Gnm`s3x*(
z=H~LQ{b$x~Z$uA%TfJr}lW77n-9<0ZsUV^Vt;CYfJe%};ePzW?`hh2IgNR2fLJ_XN
zR9CV~*lw1KZhA0_jrs}mZ#_O@ToW)Xzw+{4k~45&tk~LLOY*EWC7#f%OTgKsw|L%}
zSs--qVKSE75t%*2keF*9Q^PDV**6ikGgqhdPqu8b!deBRU56B!yb-s@WD)5SY7e_B
zrrEv#fombjUiI{Q<It<3EoIeG`JU#@;wJNNT)sISShhq!8P8bHak@_jtf==A#xMfj
z+35;B|3(&g74PA~0b}c(R)3@h&%kZ+y?ghL5N&}xItoHqyf8;HZuD+-Oz8y-8=2E?
zL|TUd7KXx+{b@rLaaFVqn;SD6ur?f7=D$6)2sfvxP(X1fik#OuFeXrO9E*j%7&w>+
zPa5YN*@ZtdvT)t@HgJ(Uu3;s%q8YTdc^Q_2s|kFUOkLqgHM4aUr!61`T{^PdM*g<!
zDO(JNyuT2(ecJS~NGh(tgOr(;gw_myUM$-sZ<65twm8?bE|r{0R8^)sUX7g81ulcA
z<)4GQNqz^Di~uO35Z!A^cFGzeWxi+y%^}x9)Ei^{OFc`lSacRxHq=zW50TPP;q#SA
zq=1wf^3pI8P!|g^pG#|R>mJ@Tm}Nky!evImT=1Wa$55kaE7er!!B2sV<;`(8tOC}A
zVJc;zMjR`92Vwvuf7s(l50aVW0}}UBdqx~C1W;XhIrTgU)CbB{pr%PDsrOfSdl|Bx
zqD2OJvuEajm){&dCTgBl%$uW+O{Q0jU)Im5i7$epscRK6C!I<Plk2EakDrQn5I<)5
ztC=_Y3)4yAcxM7Vxm+%xe7SSNRqx*BjxeCf+!iQcfs;g)Xmk@{BCZ?lH}@s~JX+`@
z1)XB#lQOR)UnLlpTzNua5?r(%N!u!KjUh&$MQu*@NoAR@s1{SojqHI8gG=EZ_x|o&
z6!o25$0vFD#Qgy@<VX1ON*e#@JL6Z@wj}%-SDXnO1{wIXsiLP^dGbOV23its-XO7j
z4jFX$-Z4D6SuZxs!3L&vR-UZv1SdkQh=Ra)*+1xC{_H$Y5VkXEF+6vp#aVELdpT$&
zHtrP)>HK0|a3>@MUQ`Zd?MT-QVr1rQWPWIcv#w26^DlAXZ;dgC+t4n;6SLn0y9$dV
zlWn?ED66Ju?LVu-#TpgM?BId2huEnb3sf==-up7KCp66!o`sNe&r=BG>Le;i8~d5~
zmEg-?<=R>+wb&oP;a?4B&WX8$?Ee8`Y0^JWXD*&rL#EORqkB~*lbU^GO;TK1t}X6P
zpnQFv=sZBg_7Wg6gB46d=F1LT(a#lVek07mlVVJbBRGBZ2G=)KvbReoO2??eC!(gj
z${bX&bRY9*HwWh3_LXx&;Rv%xB<dvy!i=60(}X@|K_SNA0iqybSKSDF&Ea2^?A33`
zt@NZMmX75sAC4q}!Z>~az49WpjPiXyb3v8vDn@t>o(%;ag(l6W$daD6UvrQ{PJHB7
zjkP>|8OL65NGB9)0&wlvWB-iqK`-w1;;doRos?!2b<T$|N&|lsve)-`iW+zZL1sdQ
z<Nd8L+v&PIhz4W&_YaHP`LqooM$RP4;RkW|k^&4z-ZA;m9P&yE1!nC0#-YfBM_*$4
z%{Y%5ELg5&<^W1HW-|AmRO=}J4VeHzTb&7N!#@}boit8{goxV`EZ0S>B9K2h!}Ax=
zFc+cw@FhXiOEhw769jvmP!VxB_|!m%L1rNdeAfu~aN%$GzVrv>DxQB1Q0bJS_1U`H
zR>7p?MMPM7Z6)8aT-tZ2s3i)I`s`63xUW`)t=eT_^^|h{Ag9eUuZZ}d$X-~A+R=ly
zZiLbuYFKkZNI2M%JrljC_T(%C5^Bu%qJ{;HLPvOc&uinK2q6ln0o+rjBF$1YcSQ3E
zqMgi?iv^{uBQQm@4RUL6tIcS-aT67I1fQ#fY(U}4)nhP)Dj~-UbB8CRyE1Gc>Xy^P
zJ<;lv7P80()zLT7voIF^WzPv|U}D5*Pn*I7Ue)3#?i(Pi>{VaK71^O=Z`yECH&6fa
zniO7eL&8P#>tTKl5_c=9Ky(fgN8Ma{nw(~*=XW1Wr-4!4`NJnveWBJjBlnj*FTlp~
zm!)+R+XcM%MNZ+^hxXvF1Kx_Sb(<F-RbpfZ8vSjWwS~w#Y~YV^<a~atqE4oWu3O-R
zlhw<+=L(@fr3IR~-vgP$nV}S$G|*DyXff*(|7Bs10XWUV>L6AATxQqhL-j|ER(t*$
zS_G~*wzrqdi`>^I{l`57@qdE(|0e!882&f$$Heg;+LM{#|E4`<lKyGW?%UeFX?;sb
z;2^tQV=h_B=2X^|RPT62I)rqc0U|&w0JrJJ+84QTzp2afjDG*gm;>d1X>nA@sVC=N
z-|vpFUUvfo55n)l->O%&{8#(uNtGhr=O_H<ozIUOOBuQCWi`E@_(gQLSG6z2qvL_e
zq@m7Dz4!0KiyJeVz|#qW*h!*(WVh**-RjDKo&puc56+1|qGi1mty5ZswN~D@Ym&=z
z_NoJJh(eb8<BME3zc9#RRzkQSc3Nm(ZY1@_p$j>+A2Gh)wuhaC4uwQ;kD6Dg<<{F>
z_g%H^`VGva8Mss<LaXiHXK9U>+}R;;g-#NpqU&y#tnwrfLXK}p>YuihY&DPD-dEA}
zKg2(tWfyXl5OKngtm$3lrMG&1r`I20Ej6w?Z%eYzD_l>5&et+p=iNN|F{5r@_xRln
z5+D`@aA;yg;*vJ=i^g(j^T;RAOySvjHm;6OBd&g1DoM(d)IoQenBe&l!{F*K!&EZg
z3fC>N1w`RQcDRtuv$Nk0XC&Rpd$=32MFIEU<BUWNx^aOlYG~GBKW}xzGt17tM-^6g
zxt-R@!2-7EH>V-@{HmEohbTch(35hG7|Vu}&kpv@R$LyRF9uv54O*3VBE@}<FU~H0
zS9KshsNjNShbaO`n|<JJQOF|(##_<eN(Q?vg{{?a5L;&kx3ty|CHWU4K3p<3uMAu}
z0)i^=-{PUvxtrDdA8S|MoaV}5(U#mO8f?~ba5YjvFA5&|^nYL4ekHFz#cuJc#{%mZ
z$khqV>)C-zxA9#Qv(eCr{0EyB2M9vIDSN!u_bEEFS9dG7*Iu1XBOye>es;z>a5sAn
z*=>$m3PeDWXeOk)@HchA371A?f>@wK0?h9`QNs-4QR@BpD0Az#+j+P(hTGg?tI?5(
z#ulF*+V91i*k2vkn!QM-Zi;B^NQ!A=9oZ{hR|-h{NgCOh$U5PFh~^CND)|rfqGTqV
zyqQ!0%nR4@E>ZJZD@iD#SY#1hIJjGk_}uY*zGk`a%0n*4CP8SLrB~S=4khbFOY3JK
zrA@aP26w(gVg>?8G#;94F0Z3U6>lleb&SPza7BkvW8C7p;WtsQ45VEgJsU<Z!sNjA
zi9uC|QM1@UGlgJ-YVSh_mNVHih&>i7eUd0%)+r;eVCEI%7eE|ZD7JSxxYdN2$;P1F
zD!B=NV#gdZ`vi4OOCDUHVrK{4SqJ?-bqx^CB3R%iI8Jw?r5+$@o5`No30%45VZskO
z4}F8)2v|@G5`G*5wnq8qd3%cjRbF+%fP@L$e|dDV&yvb5x$f5g_>V@AL%DO)z^oJy
z%wQZE@ibu%m2W&nZG;hFkCZcLkaECA()g$XeqUPhnqZ)?!kQz?-UdXC^x%_YtTpNU
z$)Z8B+u6<>W_C3I{FvDa2Hh?yzT+Y{09BO>h9y+#QW11VARP~YgWIs}8;@C4R%$L6
z^|*G2o60AyqUO0*Ou+19ws|G)<ISZFL(C9RDz#$YLfOC?wG_UAUmV9S4PcMDi)(C+
zOz!yte2&jo<{x4ohR8F*$tH|--%5>a#6r@5s9azK0!<c*IZ8iB!dtJvY_`ly?O{C<
z;EDxQW6F{ihAYv-Btfx`{?j2`O;w<7$N40Cj)0jc=I5{!V$Ta!6gvj3bq^77R1OWm
z=8lKkvZzNr-&nP_VP??p2-Jxo%}Pfmz&hN;CI!XO0<Tki0d-z!U}+`4vbX(Zf2l&D
zxyYX6Y%B2*<QKojDueR)Hl=jchV8h8F6EYDU~F|!6Ske#TWn^iydbVVD=acax|e9h
zDzwQxmd5R*e*>SiWq<woSIrLScKLnr^WupHFi$>cD$<fFjtmgzI~ml(HgHxF4iezi
z%rFDM|EmZ82=l<m_-$&0-ksPbIiVKvc00j%=bh63?GWO?QlTj)Yb%0@@iN`l8JUcZ
zhIthUXX)io4d<wiz=6fA&yEuq=@>ic5`Qx!xRDdQNR1({w0hNT!3oEnGNyrKjHdY~
zgGO+s6l^>V0ce1nf<k9+duRvvRm#502U=v^Cec3DxFn%8GJ~BC>id```)hG8hc_<r
z{Vq!(Hq=(Lpf{$RXYSpirEd(JQx_OmsTd@<VUi#*yGK4frL(p2RQ3?)Tk>676)UUq
zk_fJW1m)MMuHGj>7ve?gdX0!|mWqY@kN-6R;yIzrXxHC!8n}u_8eAW&$V4A^-vx@e
zC5i6UqN8}i<_fQ&-`Pg+z&UIZ;n#6*j~Kk#O44V}x19CRB~mU~4gKZ{ab~f~hDQ-h
zTIqsS#|vK(Yiab3e<GGmSu#Oz*m=y58Y9dX9=ZlK_6*QNZl}637RGek&O(ZR_2}`U
zTo<?LSePCXDgk@LlH{Wj3`wcBa3jM-x`Vcf<-{&_OFoj~bcp4gnN|g9m}*=a)hy-7
zTa<r2v9UE27mK@sqt>pR1RkkdOYQm?0+$vLm1B8mt<G`PNj&6Eu7c;_r7=nBAXEt0
zK;SbGly@n9Yu@y^<yNd*N(+w!&JDbSDsHM3;QSU|3?xDrbdEzMmt~rXBUl3g+crMx
zOWJh791pY0$pSJeTt|Tr9IuMkqf?SnWioIH`*?ItsQikG1OsqiS9Q^WK&CJnTg9@T
zoXEV6h1Uo@JpXV`Fm!&hRyCp|z|K}w2Dp6^z;n+rm6%gX%uX&F$8)VQ5Y6QND&V&u
z$L9_ff3NHH8x9dIvJvSwf*>HPa^ya|Mr%_XTey7l@vB91G@j!}FGBi)7Eg^CI1wbP
zhT<lgejz(DJK4*H%R~m9u}<fQa*_VU9s->SGi&8qwvuMq)0{T`d7d<qRy#7}Xa>{4
zt=sK(BHEgcj*<_kZRxru+x%x~Ax~s-NVOed8Xe0|*b8`)#E^sfdze3ftHhFkvkG-H
zUf1^4!<9(Vee(tPwXBEeY1O-cT_T8EZcBTfp=60AA+J0}Q!cMc;C-Ix=^Oe>{bDv8
z=GsH~7Yk^iUB)tN%2>AuvpOs4<(WHVY+fj&I9nQNYKg1}k{Y1sL<44iT>OI{Ue$Td
zTt4H-EW(%@iad5n<O?R}0J+!_?Ag%>J~e`+3x6pVok=c66cuFWDd{WHGBNWbTII8g
zl(xUn!qz|G9DTOE2jn`#>_9mPywrA@q_$yy;g3lWPzx8YeRbn_O&kW9$UTjD5fjQy
zf=6c#Cj<{8f#Ou82bFmFskqWU9D&^5;jQHiGhk&)74^ctqQ9`PWX%7Mv2*Cs1n9DL
z+ICjjwr$%sDs9`gjY{iHyVAC8+xD&QUbiRTr2jw+Vi2+RKKt1xowYqp5V1WO*=`5J
z7V0b#T#4#gx0na3!NojD39D<h5Lv<VKxmn+n^Er*_MGDO8qMJ`1vJwgD0+dZVB?7R
zFViZ0^uvsLL$V$3txLCPRV}D@O%uHPj}`mzV1X<$VHJ%hs}}~SL+llVP$6eOwRz?_
zBKlFwkGI^#Id_H6{o=LTjFoc=I-{>6p~=uajL|CLD3Ch#$GsoZLEYyDVv1f}HBrX7
zr^k_;#O$zqB$=FQVMkLP5NUJ;G~v$l9-T*bpfhFrQC<jyN2Ph^g7x3Rg)5Cg-+fu3
zZB{3+KuUZw=&Cjhui?hR40%Wp@NV%z<PVXZ*d(@(f^ZdNIfWBNWtgfiKQ3cW<)Vbq
z2E70>bRqoGd{liu)bi*Acch*CzZ~~aYI8~(oDIuv(d`cF!|6_<$O+Jt@k&6TT)a*j
zDG|c))1p?k$sgFpz52%b=_+E$RD7)@bFCZ%cwyfw$#%K3X`KLM<QII8Vsb8t_S2Za
z)KiVHr;{`EzIRq>fdi&>p&em(3VRt)9@jn)7nK`faKP0u<xH+b64kthX8<5b8;-4!
zJ>JSsb}3-C|KaH>eW%CxM2wb(=y;z?pr=CD3R8=zQ9wjg#==>zzrqf4Ldr9n`COj~
zdF_Z?m|RTQ`-W8m({xn4GD<Y3xmqH#*F>iKPwoV4jvALYiNF-sEV#-$#I}2-Y8r9b
z+Sr$)VyqG<Zxc`PEM-a8f(a#uukYfxXaLm2<zE|>KC>fvVa4!B;*iGbIW32~X96Ao
z@%L1x4n8zJg{D-so#YfYg{KGmit{m>sPGBO8eaI#AgJhyiYvEF6<Q*jS>mY1y=geD
zf515}0lX=8?0h;)^hpsg+EuSNMZR1i2F6e96*j}PKI$*98RiM9mBO*TTp>~O^*-io
zNN`>e?+&*iy8g>;-RwP~jlCvs^!fn077YR>kQ@woUw>OxT*z0Qu(A2FnQNJT!uU+?
zHbN2m<@*Bb2Jv4@cQx%N(NAVX>+OSe!wWj@zwk3l<Fs4ca+*uB#)XR9ML#BvfHF3d
zX4g{7yF8y;o$i*IGv&QG(t%85U_7hKCp2Q2VNlC0ins~Q;FnMoNekF+Ez+gUlu2cv
z3s(Vat$1>El@$cTjUKaI3z&yH?Gxxed=af$KS+@Tm6qNZsO7+AEaW{4yC&GOaUtGs
zMNa9b6_g+Y>`jIEJ(Sp$RGHou=R8OW$UYu!peVHSqf$}LqfYNa0fk3H3Z$}%9sU(E
zsmHXQXZkeRY9O$%t`!mwxDn8m;J?R_%1_?9>OcEk;lZcyUUACyozc5eEbO^dRU6A;
zPxvWHkixPUeX7#G&a9!d&O<TEXfO`uBClP8#o#p;rV<?(z<L&-Q-(_D*`{Fz4msH+
ztdVg55&QF-TvgW09f@sj6wTAX%8#Bcx1a5rL#qow4jj+hzd?qgW(%SfC0UAeHLFk`
zKC)qv4@pHda!2BVsHCrHT|9{XQ4CDpf01}u%AA8GgNHUb_m<mBptg=ZGUy@GP{`uV
z`6j1NfK(>-`zS&bo}fpa43E}h@|3sLFB_ymrG_iIbf113<Pb4X1#PCZ<2*kqe4^&&
z+iCPaPcN)7M2sKZi1mlo*HW+nHP}{F?$Za}E+O*(8-wiJUVUvpi@}tGI1Rr$SEL%3
zS&~H-yfd6r=G2*U>9BQLF|E7p8kLAM{-8^oX62sSSj7CfR2HCX@RC)CqP8MA->Tp9
z{1_QByBJw|Vo}SVsp!5~>2OsAZtdA@XZ%F5Ovs{k?LPjU72@G&@-aUlF712VztXOK
z;x_rMew8`jaCH&QEYrp@9X8AwoqFmQ(i*mHQkId=mSF(bE?|WO$QnC|Mm{Z3{7M;<
zIAks-Fpt5#pLW62Z4|_;4fCq<=cLeR@>PAU2>LR(0elDgf5S7`e}?~uK>u&y{oj*w
zF2?`OC9|;nr$A@@zX|j$r%g_`?iH2Y>B~wxdguVKOrDwPMRS#38`##ls-DVBOL7%l
z*W})kEofIPmsN*&4|t!*rZV_E^5d9kq9~j_J8#p#e!r!18bZF;ep*MWLbeRP{8G<*
zm_K%&NB!E`*JpJ&HmU@^{+#wrZKb|ZnnkgYk#%zEi){^@A9K(Ky^L!{G$eTZ<Al(g
zvn$Ianxw_!7kKHJKO8y{yZ1wX&P^6$p4@m}XbSg9r%Y9AzYmTL2!$=hkfdlE8W?NK
zaIMoczwW5t*_3+#t2){osnqJ@*Quvv1lx7_RnNM3Ig+qL{}M6tUp?n3CkD%7lz-e4
zc?+-B#1G%crn*}?ok{$%xZk4NXjQE=JXSoV=1J)nLN*}3Uh@T5uK<=eXQ5I7aPP(A
z-JuMkg|Y1Ft>IZ$Re|tZ_2vf)75JL&Bl3Cz4LXfTI4?`1Zg|$6iME~Hwc#o&*Q<cD
z!pFVHSUet=m#G%+y1jbr*i?2g5S7swTV=avR{2Gm3twXh+xp$R)#hsKn7_&0mcP=c
zY0Aa{+*G2DN}SQ;^|UhD-zI3%{MBnGEjo8_Nhw;7s|{9lad$?E3BR2>XN0oVhCCBV
zr?teHk^=JX+KO{qG*HfuN*+eOS>J;7sWw*<%rksBEECKf)4WH9I2K?mb0|u5+VRgb
zc_7#k?}UeykFTFbsCCITe=O^ODUhI&RYd7yw>qw#HycYsOXUy;)NUO@4O;Rw$cPzG
zwN&HD(aznfy+foX&doPh_;9jv-AIR~J&Pe<SuRd9*;^%}RySDkPRiUp#2a3DbI8h7
z0ADv4VXHUCiG*S~o|L`B<kKyB8^pYjm|0#Li6@R@UC-}gs0~QDtZt5*B8c;jm)F)c
z`<?}|4)LzMR<&^2cp%Vj&aqdhmM#7q4_Ga$*#!n&S>RlM7+lx+VxBAk*iQNpgF~xc
zi9``rR4TvgKznM3-|M}!vBF2F8769Vgu!HPIY~Zuy8o)9dq`sR7wL5Bls4$oxN5e8
zZ^BK@)+&egqEG?}CZW5Cu}PA=+63lu-IF4hI6Dx#4vMQ84A4BqZMpI-Sfr0>qSJ2|
zN?}<@LU0uxV*X>mQIruTX3l%XDa)yRZbhH``3&G>RdW&47KGbM^{_z24=XtK4PyG}
zL``A6K_SWKmRo@jH+q&J>IhBqw9LlGMB?jzh>;AFqj<w+ILIw9g~5O>l!SX2S<I17
zRCK#dWdj<<hT<7%c%HVXQyto5iy-@>MVv*KHkq=^W5dowp?UH0S8e(Dmt8Md07EzU
z5gp%+QY#DkBQP_bIT4mCx}Ce0vj%Q8bZi)5XJ=_a(rKHWzBv7@vdq8xVaN^`U9`Ra
z5|Q!t=k6DW0WYNx&ty+nhx`@>D<yWJjuA7LzRv1Ir`Wh<?x^zKrO}j6%cum`Z>&;q
zV71H&GDM@wPg4<JBI%yfW-mW%;$VEO=fX|E-FVnV!p?N6_BII*;wRI9p?$TH$Bc9m
z7n8pLM_7W=T%^(A4V}3+MksG(1H*6eb*?%f=!sEt#yXXt$%-wpk#YnBj@i1q3MZs6
zG#KgI{^V?jF}yZ9F%cDK4m0#GfjPPxdIQCoNhA{^lrabpsbK%R>o^@unmIudlv~6x
zK#H<?Wpr%f!hbgI%S$kP4EE;<8(iq2>O-v*IqEQzkUE&A8>CP+k2-(GL0C)nk6#S`
z=I3MFS#e1WO?#A!*Tugl9~l-usXtt*{Nh5P(S_32s^pPQ_fzVoKuE*zAt!w&yrVY8
zw#I^bnw&FMAG|&Ca5{t~k>++(X$#d92srgYN`1m6L68Nlk6NmqtPo0RB}y@*KmsFl
zAjaS>fsgeo!VQEjybvnvlU0IqUKE?TpKBIO4rXwgeB9cEygdSo)b3A=!;SxEprr}I
zF5$@drIM{ssl3`oK<ZyUU_$(DYiMIA@tn5>X{mr<#ckyEW*9Qns2@}Xv`DXE)S@4l
zDalG+o5e3=F#I&$e`bLkk_l$wU>V;a9PnVV*>$GVf?e|<u{<*!vmttpqHLQs_%YaS
zY2*nQwy)4JskLCz&NOKCDF5fj(*?(+Ihm~)7l|>#Wtp4%d6t`Q<A$0v8QB<d-Lg3=
zH}7)5lvlxYIreivT?_Xz)1O`6s}AmXO%R)o$E!V8XN^Vy0o%k=$vf$frQTw}K3eD6
z(H!%sMkPhO+u8dmF@adQFn++Ao(0`+>Mx`|-%G*#tTbw2u~Cazg%S%l5n7_>fhP_$
zcL|4IKCH`E2yVb{#v4|%W}$Kc3CB{^C~tg5<<KH5r<b@RQRUBmVs1*6E>zr$U%^z7
zqrU+@%bk*pms<hBi-SV^@n8*$k`DOn<e8q(`4GNUT5+pA5-?<Ks3w>4+1GXpMG9Gc
zgN6kL!6Ed=bKzo@Bhm6MB3?)=Z~>oLI#@HpU?b14U_GDrPft-aO<ujMcDq8^nV9wW
zs-M<52kzd0?8hx?1z&2XzM3JR6oqB~MLlFHi|dUj&irPRij+nYRy;`s(5V-&x@xD>
zao3y&u%V@RFnr<4B#1{GlngWr1g|#W>!RN{Emw>Q1R;IotbJisyvL|x{+IpI8D9H#
zMSp&5!m!ABW%52?n1?VO!uPBG(bK)x5ttp7_Vejgnv`W~U-Kbnf-ZB9t7R}bAW%iv
zYe59o*mVY%>{K>p)Nmrrz#yZH=#(92n!7S$APiAxPhTgfF%Sf2a3k6!wB7t+!o^v}
z5n;G#U4S*LEG?K+db5B^|L-@xDmNbL*XTTI1|{H><kJ#)EZbryw{E|m=|3W_AguyV
z@cde`^~({Xj>Uszt%)bvm<Xuj%5tb^RPcf*QRk<Byb65}h~wH`yMdVt2H`%geOCKY
zFI#w8JJZ96aHkSncz<xhi9C<HH{2-xAd$F&6ZZYI3B3HegdU)R4ZG&OuF)n$G^6+3
zwLa6w5(5!U+Jx-oh$jvl?k%Wr+X$44KfQKm^0xL$1){6QTVYs@(oC1_X61Z`G7<Vo
zEQM2Y=UlB<WyG5@No+?J3GsR^r@=m&T<kQnQ&oTJ?2{dK2}%cNHiZI}nh}))ff3Zs
zLXWl*?z+(1!D}uB3sX^Jk#jO<nk{D1?Unm=isoZRs<H!dpvwn(&{$vMWTvV>x3*1I
z+eZ~=N0U!Jnwff9h!6<@m7Ompue`G4ac#W?yza;VKZqfvn^v6s&{r7D1!VOwi_A4z
zNL~5_E1)9&@-f4WGDlRFC%`uy&gs0s+ZKKgVn2tn*8IWdopV+e<<c%7_fi?ko#T~y
ziL*GTU9BgIH2DVwx+e%4iN#J*kb)0H?AJS$?vzv*D!qFVL?u7KW%k^}pgA~`a^o!+
zp%)cOjm3oz?#-UY(wnqK%R0dz8Ie`XVxfoNLxu#;=!c5cKIy$b=##i+kQTZ|o%}%1
zC_J$gSHC2yV2SXTqcc54&T)xt``>B6$wOA7oqiT9H)Ud@g-}|`Ik9eltC2MtoV?3~
zQJ7j0wos@mP3(f@{7-1d(Ze*Z{b?3R!rg%a9_zHBm(}G%N_ujitn=E69lq&)3<A>M
zP=*8AuOdOzk|w=SGZDdlP>i|Muwv)GL`y8&H#sv&_ae?<?H3iRR;d{9P-X2i9Jk36
zzLHc%;StvABQN#lusp26dY$#bfyXz^6$v0aPHOUnrNwexByIK!%jv}nlgy|UqgIO%
zS$lc62b9{P`4&pn=Wvo`5yHMF)n*P7p1xln?S*LEOB-QU@ww`m{b-MD-e|m69*owi
ze)(Tr*?u7H6I8OBf#X9tR%<1z#vXM2<l$d`;`Mpc@zPj2kErJ^h%z|TTLE0`R5?Y;
z^3_}HBjs8r4pHS%ySM$a49Akw58!t_EdZa!f-QiU4(k&PDIq5pG<LEHC0~T{lE9k&
z-PDj2TFDgvTfDq|ANtRq?XTo~!S;GnC1s<!xI8gIM!=x(;rFqHW5eKz7E)J9lZrRb
zDYJ@hofsq6qe_`bGq`ssl3RI@WaT3^_I4#^S8P&!#@>mUHLB2A7dCD{;H&fBdHe?t
z7dO^f`Sz!3h!|M9Z6(lNM&gL;X>;aT8*At7u`?fzDGUj}-wAhChBrH>?#kTAB_w*-
z6#OWh&4G{i7dRN24Wxs|LbS6MpCfPFhSHe^zeQC0>6#FV>_GHzR7<5Stg&!C0x|k#
ze&xcpytZ?U4#c5L%k+$wn~(Eqv-?0(+A=O25z^1I`2_L{n$r86n3BtsXG?4IGk{1!
zd*nsH{$LkK|NHB`;D0%*1beyLJ+0!Q#49|cR!k+^E%*5G<a2xggWvZeDg*tq3Xqj~
zk9HKrEf!>8Q23r2ks;vmy13baWzTDDU&OIrFKNe0%kc<^R-%dX=c%ORyicueLRA=e
zax>@@Ha$Rw8Zxy<*NZ<Jw4orByqc4W;g;t6V-zTq`y3<B1jm8kV<jd+tefs2&&1{G
zs)WPJjbO+FCh6>_Pm1-0bf?9nK{LXbC)risY(%ULMhY?XxT7v?yUGHrBlz5hwMz4x
zxRWKmp%=n@Ue_eWY6x?ulM=jmn@i8&I;c-mJog<=;%-4$qZ`jopT&5CndUBMktwzk
z3eHNxIMjwCZ}7-9S&*}!eW@e2$vANlYC{6tCU~EwB1dEEUyPI(2V`wKLdULa_!`by
z`hJr5GNNWI<p+bY(ue!)HoDzLI?z-V5=0Cj+Hva&sIYOYWZ&Nb*WSTC=t3V9A|A6A
z)W261dR*nK5h<A~v^W(+uHVm*>TY=-XmN=Mu4P6jCq!EY41l9b`ahV)(+aid_|;is
zU{ynA^>n=1wx%ef`H%6zC0-?G4p!m|?I(OX@B`DL>E~3<=eGqiSa>_I=jLh0GpCis
z>G$${_G8$gXNm}Tv+sfE*ls!b8f~tH?1*v##u(kVj65FMCb<JC?{PW=?4$?8(C~y~
z#v9I@AUS4n=xX;kZ*wwzpuw0vHVls+(I^|E1u7^XyMU_fr70AKmEA0A72c5jPin4`
zHXiOU0HWw07d*z_l4rp2<=iIj8-k&AV&N}B*EP(+KFD}@UGR3IXB)~Fx3`RQrzl$*
zy@b&e#J$Pwna;kejnxi+Mt{otD;C40lrmh{*3Rvv&jL@KBdsnKTEQ5~aLshv9`@49
zaK{b!nlK+X6M47jFF(<2{74IaKkNa&g<*0vQ2h*?@lGAZZd@4*JkT1c9Eux65RMPn
z2Jt0vc9wSBRFS}2edWeTfRO4?@A0$xzmLM%g(_TWt&6F3_~iq%a7U~^7r8^FbiiWg
zXy)r5qz!&S0hp;Ta!;&wpBO5NNFr|UHd_Nfo;}X|;;&p@O(=4kPGyyN7FQ_fkg6!V
zbDAo;pZ1RE=$+HPj@~h8DsqQ=L9O}*T<1ggTA?~GUbz2|$F_z)0Q|^d0@v3Fz=$+6
zd%{hE9k}&BmEopOrFjKzF`+%!_L&Y09A!cjo|A=Cqz|k&h!ovp{l+#OAmR`AQki`d
z_gs6nHadr&tdi4s>Hg?WJTCkT!0+$;0Idwecl@VW@n0syf0-4mOdRb0KjzQE@t<Y|
z=l{j5=+fSB+Wa4gTBi>E8jB^kYUhyBkxNVlZp;aPFa>rqw5`r9kSzdxD&@Z*>K_yN
z8TjBMZBhc1s&Q(^fXuw>g)#+>SC;5@L#D5K|5~@-Oq~KBZ?dQP%pWUOBi-#>I`b+V
zRgJX(C+)U34|9DK+H_h46t_m6=#H7_?EE_DJeqc8v&7xV>?f^7`l`G%i}aK<vEk@N
zdH{Q$PQ$IeZ$wtTer&j3p%Z>IYvlP*kKH!{s<d@bRJ-&<KQBG$Gj09HfR+o+Q7i0o
z-ZQ$?^uuNz`o$8#cKuD&v!ZRTlmzBPePZjizgHRU$9?Xkm_=1BAf(Zr%1kJ&u4MdC
z1aoD>&diPkrUgy;=TXB}_xR`QY6$&{l*fzE<6!^23}BhRcDyg0vo1dL4e9@l_mlZE
zmn7Td{O?}E{l8rAC=SvsXJjRg_O%(OxjNhIYII;xF;6l}Mp0V^w_v@f_N05<7V1-9
znkhXkMF>3sE1l1+A0h^gm1dYxTMI>={ix`$7yDM#BDhd}sK_#%uZnZp<6>ItL#z+c
z@n0@=`&9jxjLujWe$Rgv37M)+4j#29lQ+A_J;f0Rj^(Dl@4wh^&K>LOF_$4Td->aW
z%mvu>czn9nRR?BQC30IEl19w-92T2w1_50ymkKNk%0Nt0Tfrhc*y*=zl)2d*ew&-F
z;cmXBN=c6BozVvWoE2qnmdHTwGbUh<Z;zubX01#@!}hw`5nXd-9>dF~_GjaD{lR1m
zBl}^N)Eq{QTUyt`3OBajJI&R#;e5KP`7<h8I{7p?nYq%g?j_GJX@GA21|1@Y>FZO*
zMbN6%x>}9cv4LHvR}ReUh?)+_ZT!lSqATS*YA(+{LGSqBHN6Eu_H*7AaoB*ShIO)?
zR3EtJ%Dcv`E;__DftIUj0Gcj&X7oY#FL*AwGLn)I+D*`B!P_$Mserc3*+y43b@wGj
z7BGvYX1a1&fd;WnWaDTCZQJ3%W>@EU%nzY(km8kZC9JgG!0}{ghBDzh;QHP|lO80o
zMcdZi`5bOGX62h<;<=$+5mtP|GdIHzt0&9AlxQ)K?a;tq=I|K85;~VP7lrNi$kokz
z@Z8eWSjk;E9B3L+Zb2L%{UFuRO*yjcx)u)p(>9~ne>!eDOW?Z>nbD`!>e~-0hjC25
zO1GKx5L)7+Y4^%`iTBsNDiyLqcDg|!8Tv?#r62ko6_apoyV{uqo&IJ)ag|tF<pC1|
zb~34rIg$%fh4a>FccoQpH6stE5OhfA0A8l<gcnAq3DSq3;pUr!t*nl)nGdXV`uIQ|
z>25zLj<B2C*u2QC{*L0Ch(?>Ib{Of|=FNpbbYNV#!bi@H%Q1D8z#50(;2~|l_A10%
zDz)(vN+uJtl;0HlQx=DN^z5ydo1dI6(>g2J*h@k&esMXv?~k6`t$PWTw4elHZSHq+
zG;$cZX}ylSJL806Mwy+{tNK>1x~E4B|7#_@rWt_D>9P&0x4*_vH9yOOgh`Ns&l!8T
zXG?S>pCV~Qr0XZK1ICW>3DD4B1S;EJ+L+Eu#4bCOlxvOO9rwE5;|*~P%gXS;;<2|6
zkAn~AtM8pml~D`mOqM#wvNz^akoQRba3-f~PoZS=5McQ;L|*k!L`p9$b1-5*X5DX2
zOAXeki>4XxT*BZ#=vu%e1-@yI*TqzPEl;n6vcC%KZL2^!Q}(x*BNsKKer!;ABjNm@
znddlMnA7aLYt<q(%)xK)Crg2CvEHg`|2dI5Y}wd)Uvs85#7X=a*fiXHb+NP`y2I#K
zaTqgez0;;7nuLz+`P-0@DdEsH9R|3n{IOllO_`J?amaYtPjOKIU&-;kiZGiO`Rl0(
zJoCh-qp7*^=h_qfN4EcfY+Z1P#q@TaD-aNjLxv>b)xK+Fanf(pF<A1b$+|OyjVIM!
z9+j$M)`GII$PQRoFA|Htx@rJbLf9D1#(IL@#R4HbH%?{P>kF9)kK^*dOii=|p6jR{
zAjTSidLT0O-8+rq1h|540hIPhwYVeDb{smQsuMF=DIm<2Z(1yVTv0m5CNwuf<LGix
z*7j7aP$3%&$eo?CdR;!hT1QqHyig}aj_NV<!V594-%IOI?6D1$xZp5s-NiS;+N(IE
zmy_Cch{@|G_$kV%<X>L@`U)*I=Xbk9?QGzC4)C7|b(Zo?PDeypci#B|Y^$~r#JR7M
zvwW$ucXMc%D8F(-oxj1&DSr}xt{UU8q)Srt$@~EdFM~=7K~5@-0mbtvC)*g~2%Yve
z5nO?4Z;M6S8hz8$tDbrM*wmt0_+<)(_b2m^@gD7eQm$wcCDGrdvscwC0)8|P-Zd<r
z#mv;=jQHIHONN@t5`8yj)cdj9MdZR-PsLOf%YPr07PC_q^E}s8=tva#MZ*=)969R<
zQZ-QyolGig2{%vLtS&#T&o`E`IfP5}7g-_~9`9>ThuAcQy#x5Qj2A%Q*hbQ;5S8@k
zNZDdbqO=<uTVTx8Wgov`14h}m@XLybx9n$Q9h^zaW1Fs36FiCOjCOjj2<FsXI0K#;
ziXfwgJ1VX}tVXh~o`F1w;ez9ky!exjmSQHvGQ)J~)r3UyRz&MkW|BOqQYGYxRl>z9
zX|9aiA=QKQHn3?1j-#!OIvAkYDa)P%F)ht;d$|P4&SVs^jzgujhul@K7yyG@#`3?~
zm~6KPU+961ye_)NiCt7tilCJkUQ~SgB@k4cd9kVH@!o>h5;M`MuB^OggTBh+B7|>$
zS4u{OIEudZ<*Ub<h&9hPC4Ed0m(ZMeK5|;n)XfB6|Ep=x`-#*kM4x;O5L)+`cW21H
z{~{Q1R>*o?^SMr4NMTJVF7*?y>SkYiHq0Dr%79iBDDmP5@fbDP!wC~%taUQQovx7#
zZrjzDZ;B~TLEU`68?m3%-5uMcrYg%Kv>Cd&P+O^eGAyip@#RzOs_hQ(0ls5|&o&Uh
z7v|Ne3n3Wm+wzMuEC7lGhRKBzEN#cZ!#3stDnvTU>9S`V*()RLJQnpM#HeSWC?l7_
zp7}hDlpoJSXj!*{wD$@5{<FXUpx67cmBzk3oS1b4<yT{t;|EP_Sc7?Yb}xXtq@h~^
zm!c5pc(XMd6NX^Tz+u>(5^p`tQ4(Whj@L%pI-R6lDT=&vG!VdUBTG>B+qdUQ^8+qa
z$DocpcNJlwJ^vB~%UTpv)IECpdoXG`J1>4>8==I!Vr;HKFk?EmKcwG481I+wE_oO&
z)z#ke5(2!NXCuw#hg$jztY*W=`4T9$SGT(t*z*_<3GN*ozBbvAp15SJHuIxmte|%l
zLZwwpz}4LV=SxZMfd9PCYAZSj?KymIl46E!`+Ff%ddf0OM);5HoMvYXj>zA=Na(SC
zm!74q76{Epptd=j9ifSH&muc#y0`u9f6Ta1*7Yb2U!WZy(i($NAT9q82utoUn?Nq*
z@8BV;CUox|wt{kT?=tR~Ex<1vK3+H<Hh$>3;>r|Xrki9bzA&YtYHqmgmuG5mDiJVK
zKVznsFBh@<wlV!gr&KW1pveYUCwKGDy8ujLGc~2&0MvIzu!6_7M<boUpvt{u2#oDb
z)epXa#pYyUjfwzG|4`C!TDknxLqhU=X>R^3uQ*+V?b4g<?t6kV^w=haJ83}*Dwr}B
zBK|~02efr<5l_S^MI7#~*a$^yfsN0S^{du|&tBP!4b6ocsm*zJZdbzn`1dZ$Pi^5A
z1(<gIrK##b(FkAL&;GChepB+JvNZyi9_cM%+DH%xm*!z(Fk~^tOHk1qd0!x3-y)@^
zY|SY#eqB8ETQr?W4YgZZKexw7iNBS_cLY>tS(mTn8>ldY5(Sv;AG=%tFEA&7^^2J2
zACp;`^RHKSEbw=HmtR6zV<b|eyq9-RP)=zFtE%Q>kAZV(i=?lYnBHkR?p2`hWRqyP
z0o=mwkx>{fo|xh_8wz0p`tL$(3z?=;bk?4x!zzx_3xm7t{snS3aTc;5vfm{elwEoj
zuJwSC$~A=2vJ^rd>`9N`2-CsRG(e~WiWq$6SURsa0t_T*?-{RRx8=LuMPYHdwvBSZ
z@{@8F#hF={l7jgSdst#%Z%Z~+o#q=c@hq^5vJnsd@)*Ut#{N{)!<~RKWJF}=3xSLG
zy<7XI_s#DHaRjZCSGCiohMu~)W^>^-RWpbwEwCnrSce6+jFwtSr}(KjeiFGwy8R%E
zTI}kej-!gP*_@6>sbkJ-zaB}rqlB&XO8f8UG?;OKbvE*?qk*hb!G&w{p)16i&`!`H
zVdC=dsDimHw=&YZuPe_0!h^-tw-q0)YilHVdq~xmWF+2+rMYxTVJ*Ix3Ev$TKKVgc
zmE6C|2J`4}e6uC-_WV7cydQ&jzk8UGNgKX~fm~QEG^-(}Vie0kDx>LyX2=<)7?-YU
zgEDO&<>fypNFQnCML}R=os<RfG!ROu)Z*(Bh!^eOmxjOH6uLB{l%t5ppL~D3oSzXt
z-xz}7qpJT?mi?F9`XBn5^M7R->wk7zvHst?t=Lg~^J{yvE3_kJ0yqfmr_EX$*y<bc
z$rzs1Gm|JIBSoo6Q^#zMQ2*xd`)}H@0tMm54%2JwlLD}l1dABT6x<IuFhX<0UPnH=
z__sxE+#fdJS9;8jYo8K*yZ&nJ>P$RM?d%-B8n$;8#&b@9Pb7!X#d8QfeAv9f(t_Mn
zFvg|I?#3P+lb2(PMaMg&q7gjMrc`*gZF?I)pLKiTsQR{F&s@<?4@8tnDNcVkequ%x
z#6UTs4Ob*Ra%0w&1})v#2e}J<+YRd<bnuQ1@N#&Iy`Rn0t|E&0(j%xBkM%iej!M0x
z=TS`n@*@#~WQGbyQFQGRBcP59qd6C9|MIrgwE0D6H->Tf0iW2qEp>3#wQ#+dO)QH|
zJr7Abjfo(`77a5p=YQ!p6zOQ&XUVGj;p8Ctx^k!3sJQy-)R^CDqeYSi<g(k8#ivy<
z9z64k8N5rM@XC6ax*=Rg&q?hWWwnPRmQ9SnWwqQKSJN(gx7eNkYSLNaL9(c-At>Y?
zB6OE^vY%+F_Ew+vK%q{(-$hiEgO{$H_|}h(<(6tNN;c?Jl*w}dhA@Mrw;1D;wjA3i
zU9D4dq&#PXQFN`g^Lkc%uI9;?CnU2l-DtXGWR@7YuJW6SlhbMNLoBsC7s}QRbV$5y
z#x8R#=NHK)PEqpG%YH{!$Sxm7><rcCN~4}!Sj6YxY&{acFoH^_930vG5DEBd^FMvW
z_V4zEu5bB_^xbhiX(&RhDPs^f=!WmMJO``?gg<{I<*qyF*^MR*0qEkYSErO60K6DN
zN=pWrb$j$ysaP1Wb~gx9Ss*z)CgA?(EN0gy8yvX)$#VJ;BrnlDz9Ign{@U4x8Ml`h
z`ri*TYq0Zsb>^k$4&EbLSYemXfV`Z{6KEYM%O-HY$tOtnQ{r5=z&xL|4k^fQV1fQ9
zXI-Z_>p#vl>sF1Rt*1EZb;)5kiQ|f5(`#blac67BbC^7zlHOeLvo%_CFLn7^V^*m;
zo>y7wMA|jCZ?Bq;7~)ZgI17cdXMOpZOv5>BB#UExck`><+c#wG)_Hdl<=9O_=C>Ny
zFl5yv*^+$<L>MeTkHWA<#u7LTsu)N7bS_T12VSSWG@HVmeAhVm4L7Y8X~tg{F~*z-
zKu}pN>uRorz|t2(<r{AfX`#Ghmvh71@&l~My6w)5a%+9kN5kNiz14zl`$jo5%mNwc
zpy$x#B4@^-ag5<UnZ!Ock=PA17jh$&d6_rRer+H!JlVb|Su$vci6|@lStFa=3Uv$}
z2-ED(DVl;XN+t@9unK%7FMMQiPBMssB=e+nqbT7CbT0{D$06(%lnCJ`)M6q}bYlGp
z8$zC$&fH16j&6wSae@d9q8Q|n_ld{gZ>p6kV`X{V9l<?@rEL>UiOlA>6n84F)QE<k
zT%fC`l}mepxz@eY*fV_v%&Tl>Bl>gL9;0Ktp7{5ZjA*a6qQLh~W5>bc4UAJIS(o@|
zPhqJf$xxE<{oSuk!sqxF7*J)oXFecx^%l25^Uerq%?S4Q!Jq_+g{_OIqshXG5(r)p
zyM0KcDxy-OUor3r;?&?{nvG<Tt0qo+p2f7fL2mxwKebOLBQPHQB4o^v%$D+SunsQ$
z6{5d}iCY;;kHvOX^ZdyRarNu1``q*#X_;)TPO2dh#bN_Po$M^l*Klgb?+)0Q+-t_S
zStLR5Q#)P*NH-ddw}N(nM4z~^0?_hmE{37%fUM*V5}$x`#}sTExl=}JFVhbs#e%uL
z?p-o2Wp<?#_D7WRNRW6>l<oV<xT9;Z8hWAr1&fadMJ!xxXAE^%E7>Tbx^1&b79b^n
zhF5msU{Oi2fyQ@94+%Z^A^qcg9!mxwQs}`&Q<g#X&f5mtc_%>`qH^=#j=NwJV1#{w
z3x=+tKGB%PRC=;Q#pS%Fz;DmcUT{XIFY@m~MV&oBRPFCHmIeDUs3MOB`rIx^$B{a0
zN$(lsp>Y!mf-XKLf=y0DzHPY)M&A+&vIekAZX^R8cn>(&%WAgB)b#21+am^OTlJYe
z0^ppjeTyRqvfoJra|bIEAO%so2$sJ_*r;5TH65G6l5vo(q=-mId*9Tk9@D^@+f05O
zvX&it7mAEhkBd`{q@gIK|F}Ta@scgSx`L((o}jIy_2kk}!se9)7wlK+6HI3(p`*f~
zD+7IwtT3So8XSwPSp--#l$blW)=qXKP~Y$2T8a~FcUKC%UWb&dQueC^vMn`A9oz~+
z^N+KZ3oS<#jlMtpeYr%Y$V@>nVG;2_hHe^2#l!IIZ7Sy`ZH3BQZWQN56q`-zdR|r=
zJMClwM>3ov#a01IVd@O9=YMxHY+5cEdyqgNC{?P=V^OHqC5tle{cC#8k}84_35i1r
zwyYNq6+I?b<WjbVK!kdS2<>AI6bTuxKY%mOS3u1TZ+6@ZZ2fyO`sD+rtN*YB_XA=a
zIb2kU93s{4^4F-j;;V4Smu8cA`!5vMI>R0EM)<4(k2+;1RHr=sfs*(F!XyW;P?(Mj
zWRtkwD66SmcC*H2QW9w!C@f_lGR-t9hB2`$G%%XcN3tVb2Sn7CQ@IR-JW;rSAlC0_
zLz*BMpE?Q1?oBmKQV!KJ5wYonJiS!J4d#7rfFH;o#~2PX0Z!lzG;$|d6tU%raN{}C
zIok#NLVY@KQot&3AnIeZce(zo^hTy+FyckRX{x+stK?xsHRNu~r3h@Twl1koilV0h
zcZGDlvZ8-3l`6SJf?r`tQ6dWQHG;gXC@AbNFPv|(EXsgS=(9kIcw2(AsrW(FZE&+T
z*qte)%ehTO5yRi*0krFTEvkPbWg*0>c*x#qZp^6POtZlJt0$5n`U{hyO?C-IR(++p
za)xH=egRX>04(~RU26hYdetBbPn~6g)yoNyYDzG$pd$<Z^v_VUF*L(V>`Os<*0~Pa
zb_hzHm{Jsng`<c8+<~aglvGX?-b&x-)(DS?EvCca@%Fnx4p$XmB#8?B-09SXyiK_3
zejNsDkD|8+2$d$Jj8^IrRa^l&wF6>Awm>cOB)vKd<q_5i`dTWf(A#c8Uf}b69-=OI
z3k9gpT_d5v{J1y~=o3gJ%V+Mgb?;B$K*2|fK?`UIY(V0uL?PNKeOnN2a7Uf#|BlDw
zgzZvOH|0$-Jy|0yY0vut5h*gX0RPe9o=_?x9HZxeNm+z{ya4$_Ihd-gQ(w?m%6YGv
zSlg+GtuA9uK>HG#MJe8ApCH9!jP%#bGVdgE;(pn;u29Z7`6y>MaxzFWtIZ>E@e~2S
z8Kl=9HPy$F2B;}3=JKSETTw9e_BS`MAW0Z>Xv}0tkQcDb&Mp?fu(Ja<n|@?DI>Rk<
zpVBjIH_$NgNc^e|8mI|Ka*m=oR+r9BHUK@_&4ZA8Y}V82FBvY?YKGUcVn3@YFAmur
z(8Lam_iYCVFd%1yybGZn8f0d1x@Oq80242Tumm`WZML$7Q}t(PYFp$R9V7+2z2UP<
z0JQ(MclrW$oGk&f2?G^-{qwfp-qVpFW8rgt6=vTg?i8+nacUMJvQHR*Z9ITKd9!ri
zTL(W+LfA1FX{0dAF_oQBY)#`Kx|&)_<eqwl)tO|v{`YUfINGRb*F$pBnsY?v>#w5W
z#Id%HTIdnl6P41EJA*KQ@1v0|8o7hj33_o7%sgs!`5v@Q-3DTKVgTK$?^nzst?Bb-
zq?66sM^w%Q^g6?Dq@FO!Z3b?KP+zD)sDXC+;mkk^>LwFfO7Tf#!h!A=<k;WrsyqI#
z2Sb|dmmK1N?4LiGLj~2U6^1f|wJSh+X6>Nc1BHbspuHX$d{|#y@YhW0r7j$Wh1=n5
zuQ)`CaQZn2YPz>Q!)WQs$|_Sjd~G|gC)mF>cOjBEoxv>|A&Z-vC*O@#awU3CJedP|
z8jry8?R<GkBymrH9fINAvgYKo^otd%Z;e25#|s5Is4EVKJ;a+`ME^)X<Auq@I?o?(
z3VUE?!>e9vMxm<2nPv!z`)*37-z(E>Sxbs(9&i~MOW8O#!OlO<*SidS=Ov9!+e-(*
z)%x40`55%w0CB=^4UxA;l|9XBA-=mTa52GcyHHguf#l?W!Y8pQHQD3T?90D!<yZO=
zsz9ac-st!Wy}&i$A{GG(bFinr9sTy@svJKNHg_8Xh}%UmMh5(EqJpK+J9ZQtE{=z)
z>U*ldR59chI@=PqPEyM{QV^m4z6?RGhRlSGo%$X?Lc6O`k{MPbxR{Kk8Y!N*e#eGN
z(D9MxdWm%AT)cw3<1mK_uBO(FA1eiZn$`*nBWLSBp*Tg-<WBKQEe@jBA#@J{#ZXX&
z3VmW@ViGdvb+#24+|>r^0@|S^J_}o}br8~jO;Ua_<vzmDTAq@^OXrnCBpNhfDHd>1
zSNt8boYwPtZ<6el;h!mywO6MwIhq67^jVQ56qq6mdys(R=w_9`W7-szo@k(NW`tw{
zI6M@#G}Fm$6tmU<U;Z23GHW8UTI=iDC9K1lyGD*Io_~ZjfN;f%DqEtzd(CPcBbT*u
zo?LG<oOTv+3bKj^?~kY3M4Aw$p2QCe@{SNa72kh-QYGXf?LrOX+|ky8v93y#uIT8`
zfU#;bI!{HClAoJC+6*J5R7FqKS2B%9<L`GBc5?50I&fG?oZEd=SbSLN<({?#%Taqk
zU;_ia$raF&rxn->qbnY$E4so-t(x!Dtl24()#4+mIbsSFe<J^jbDFe&obu-{Y1=k#
zkC@bl{m4^j+BxY-82~G~VY6WQ`7--vX_9wbbA*Eg<zRt$NgO20&0$vk0acDW5rnDp
z@(?z}FDtyzFi3i#gV_}13KO?Q2ya-zD48JfqC>12nw@(2IDy{2XgC?E<HqRt6Lpss
z;~OwC3jHd*1v~e$cx#tyx1NXiHF~Rg-&WvpSOyfZrX~Q7A!5(({(UC~zky4c$j5u6
z{JwP9zn)9<j~vv*^_6mQ^tFBb<=pS>w_3{fc3&aI0!e;3y2uuRy`|`csTD|)D6w%N
z4og&UJ^IPxA#gVL+WP$^l9;UfBkJfP!nIfT0s7%cE(fyc@r^hduI==ixFr;TQFX5P
zg!l|~w#tHedgv90Cu6hO!PUYy?-4~Oo_8^dzCFVDqUnHvIea{CpGVw?^O_#^o_^(J
z57<d-1lItGA#e8Bp|k&n_y0zmTmZEEhc5qbz5U<1oRjN+ThUnmvlWf?|JaJAm%Q0h
z@4I8r$Kj~V!wP)+a4h9^8Ks<d<lS8IulN@;J$TJ%kZ6ST_el26?q|y9NX{^3-&(F-
zNm5EBt+gab?C{w_8O|$P1PR9A<H)DpP3`{f_xTD<sUQ5L!4v=M^Rbnj{nnz!&ZmJq
zqFsx|I|;@i?`Se<+nPb>*S~akEf&~KY9i9VfoW{^l-lY)`Wk<Zl8Vn<OSSmesO#Zh
zy8Gjt-G*FCVZ?~+p3>YBWqj#p=M$VfWf%-uf|w5Wi~9hpaqzUP>ee~KUmu*nLO1PD
zDKER-_~~&$q3@%TN4<va%*Kcd!fE+SV<p9mp;n4PbSmjKqZDzOSfwgf8L;ey(`{R(
z=l^#Hd_f)}yl_opz{Fuk!*<p_SdK+r#JRP9#W5%PmUB$bq4wC+6F59GvQp}O+mKdT
zb8>1xMQkRC^0>k?!~A;hppP!~Ok+~|!{}GAIb12e`V$Q=txR4x;*>aq>yGQKNaH@0
zUk3geS%pEQ=j#S(IKs2L6St+x1T9L*M$+DdM@?=&=U<#^Z1+xYoPPM=;>apP-qDUe
z!4YH?_1Bpef}nc9`Z>Uo>57^~T+Hj&rJ=(ENzO!a5JczOfbA;)cG!<0IF`3b6Z~^D
ziPmRx!tPgX@SWyOkd<op4G))bW$D6qZsJfzsQTESAU@cd`Hq^8k@SOHTy@$d9tet2
zC3wm|yi`vS7<87vii4AI9$Q|Z!vVRTf)`Zij~^cpRfxkXEK59^I(;hcU-cWa5Ug9J
zN<^SGX>J6TJvQZ}ju7st(>rw%oqxC04pw7O5GoikVy)b;EIPdh<zG2Tf2eR<hI0x>
z1Rxv5^Af&vQ|544=Q>k&fi!f(a-T!BNk{rGX_^q-qBpN+0azPB>K%G>l*eKzP@R&Y
zemrl)rUP!z)F8vxxec2hWD>lZWrPmQfUbsHC-~^FO55)+*O#sShEf~~EnE7~3s;AA
zHq9-4^<0p3G8gDRBguQ1jyfjP*-$$A=sJ6y0}n(M&q0;Ff@D)+kuq4*5>H#YaprL?
z{#vf-B_21iZ2h<`oU3_O3RI}_P|)+mshqxE_v7DG9AR`;TycFn-d;2(N@=MjY!uV1
zNeV?l>q7N#yeoMkIM2_b;DMmO(LS|eN4YY1>sxXTlZG%SUknNOhro%~GMEj+kDpAD
zf3x5AJ{KI1^%nOES5Ndyw+E1L94QdJaK3+!HEgb;O8h&F-1wsl!A*`sk6|GrSVY=B
zdjDc~SHuW^LWnqc$2lG0eT^HR$($qnSfvRYe?yK@UT&kKtNQjQ<c(qj?AoRUW@#8N
z^j9kyvNI~b`gcgq8XHk{%Sel_i&1cEz&7j5WjdNbVmfsacEjIMmyGTr3or{RAzg;Z
zN=@=f&e)9T+S<_!LYu6^k{GGlVua1Vj9hr-VSIWH6v2?G7_dnKqZgy5noek&e+O+=
z>Gy)hm38!s8Juv2M3wKsd!{x_V}P}nvw$fzyfOnyWUv12`G_)IwX`yLLjO2~qow^y
zQvF_n7Cf28B!l&%IoQ8&2ig=u?P>yjN3Wu#v?er)b;=sW&>rOL(y1$#{RTx{`5tr}
zy8>-Y%{LOhJ!!SFjxAEbPpt^o8D;~Wy?AlhG=i&>;<?q6iA>X7eQzhTAh$4TBziuv
z)R2q%SCEusn!E%$2d<AyHV=2ea2r*c+FZydk7Iuo&P&ol#5bc~jC;EKH)2AA5|YRy
zKq4g=UAWrU5+Tj)5`#Y-mzE@#Eb^jYsY74z+$?D30jqag=Cyr|M+&y<-SBu$2AL`;
z4=L`<x2qzdaGy~~KGV^Wj*o%dIkgZLgT#dCCQ`i|oIWy&y3P7J__{6Ju$YvyjQiL0
zMx$$7Z=jg;u5mX(b`4y&cXc3|k2-k%_Lresr=}g~Z#z7W)ZZr8rr&xruGC>#@D&%i
zo572S!MH@8NF88(_4ZX2M74;6FdOI`{U0yytMVc8hVlppA%O{{_1zrfnZsI5nBa{p
zap?SztAr3G6cETx2$*~JOW(8Oqantn>dhF?4bpq<dsk)H>Yju9e;qzk(8+l|3wlv5
z)r&{4PY4mYcn!sZ0ZjN=M%?sKsiG8^9LjcFU$8#Fc^iPySKg`q%3*wY)O{qsq*!5M
zpTI8<0>jU!SGUS61Odbmz``YGfboVzESq>orR+2{VF?5BZrxhrv$KbYW!z!r8jv)#
z&TB_@(ADgX8YdR4ZLSCgbqH@WSVO8b7xVLjG^XO<MOH4QfY1^?8fe8MwT6948qIHl
zvf&Z0#vma(^caeM4@9<jXdSZa(K<w$^@pHz)gILCM?|x{IYfcL4)?5f_9fLVrTX6m
zSl|M!C_l^iEaYvwDfb{#h2Q(~?)rb)@8lt~U@_~`WWejs#EN$fuzVurwFdR`ih1%w
zKD4!C{ozlLWn`y>C&`gSPK=)|RfuhTjfHU|R*zOMYBWBfZh(QrI)&e1akfOVPAeh&
zT5$@rET)oJrQ0!GCqvABRl$v&RF20>q+~_P#NYUNG`@;g7`Jj2)f#I~!$8(^vRBLb
zXjqe>lTb#yUb7M#>glgr1$5889pc|EyXb)Lbp2qdX8SHAGFQ~C7T}YL0)_fh)EH^Q
z9%9d{*exutd1dIt&2b+J|H5mK=Sb%4o*C37&u}QF@*xs(J6BJKnI-c0c;M0VvS){C
zmuid{J3~UxElyb)?<zH=#9hKY0PA+bXKwtek4kHq%!+VS&Rv&|Krsa>`;J<4$kCoK
zD)L!SG%Ah6XYx9a5cca4K%hpR)s)U#ymBlW52%-jQ~7hT%GQHVG}NanX^uLF8c~{^
zwWC*a?&X^E&L-Kr;o1n?=OIL#fRL6b`Tds1iJ>YNCp;R%-Eiq37R7q7Z)UJG(Q6`@
zz7e#cI7YuN^lu?*#T#qGU=E2S->fsdSNKy#KxM9*iJ*f;ykPD_K6w{wx2S!kNzrDR
zK3hA|W7<U>bs%S7o)9r{&K-6Xxx{&G!Q`ji5u2$;TG8RYYRFrA8qf2pP5D8|uMlCz
zWDC@YZXbF#+p<MgB%(dzD#G^fC~mkiL+uz)|B*(B%d!#(7erP{-*fTiWR@~azeUdP
zqoV#h27%6T5P7}}-;~8#L%@p?*2J!3MC7jCZ@w#?OfrW&ThiQV^(@iQR*+h`USg)I
z)Qd)NAXefQ6ynRuF5U?suG5*lCN7cs=AE#idlhlO0fXEn=eHD);m(?MGJkB=B*(MQ
zaC5+qd9ejR3qi0X0MtgdLuq8H5RxaZrHRQ2$O-qZp%}nX+MJOhjJaiY=mm8U@5dx>
z-)0%I!pycSlvVR#RJ4&(>U6qs(5)iJpL-1xII1v1itRMAnDK1jDtPCB)$2w{rk;8B
z@M~WYj%gvRO*Pb0>mkX8aGG<&H)^8YZNT_YnGtDVYQDc20p(ehHAbIvSQTi7Ov^ap
zO1GJB#5n89#Rf0@IxA_V`~6QloJVw{F}{XvM4|ZQ0HG}lacs!H6+t}V!h5ssIH^js
zCH$bN@n3hFluIDxXtm&!4<6E6;x9G*C`^W#TodDi=JISgOcQ?(=S_1gB<X(hAohV}
z(ea!B2-f{dm}3H%eix?(+P0Aqim91i68<3Yog!nfO8>b<3^;Z^*=yqL8DqI#waNg1
zVsA+t!i)lM#g!<jmI`W1>Z%fB%ipS?D3LhcqJRrWdG1s1dBI+McZ<-LGY{Dib-U^X
z-6}2_EGmf#=>fg?CR&9OBR?y`E5bV0R<IbNS6H>9d!m*7@i9-V*dZJw-l6RVg+>eI
z@yFTu_%aYBLv?PYXIcLHMV}#K0_gBKY9G?J1v>zgi4Wo7Q8Z7?(lk(xMVp=S6)iz_
z?VHcz7AM+%lv(GY?=qf<cbNrAbD@^?TdT_PKMZZNm&gueT8&b;IRzQrM`gC|F+#YD
z7}%a$<)oB&qrJzzr?2apJJl`1ea9p@nm=R=`ytd)&WSSLkZOWCH=77tIA5g(k<RFn
zZ8R<@Hn!6%%^V;ZPG?xZ`EIzVAA3YbqN$&gdXCFUXpI!`=W*id*g~I^Di5;jd6eZg
z^U8+JpJoEKYW9~#^e#}&caBnSE1J<d8uJ)^3mOmgf<C5TxvL5==o{y6V99<{tIdL>
zR`I*^-4}ozs*_5+QR@?crcPt$VrjW=PuoVS83#D{o@vsI5hIr|ERAALGyQ#lmAyt_
z?V-OQ`ZdH79(X`(p-D?0t+<GC{dz<b$xD>cu=X@o&EM6~t9Y#PZ;|D@>BRn_ff59(
z!KDYy33>QURV*v8Fdtt6FZvR6lbJuRS~LaBb{vxKXzDTU=Ylu<o<4;mXFp!VTrW3x
zPRHD`{9+RKX(RvqFZM%u6y3695n)IXXV~`qkMND?I-yL|=*JTFr;EBVO7Hd{x`XGo
z&hrlZ#ns@&^DP3YhSPk&5;$nZ^tIA<<}gNv7gpu9e#wy%3Y{iIF-EqLU^4p(DZz=P
zKX^5v%h431P27&vs2&W<donrcR4`Z}xyu)SrCygj&A8@X<P(p=fmYdA$Da>0w};be
z4nlWTwkM$tiB3P-t5)&Eo{yJ<NbMDXD8%NFEPt!fubSnYNY2k~TrV<OFxW~ZJ!!?7
z%^bRGK2?dH4mv%rGSyNA(*MWUJ9cLRt=qOq#kNyX#kOtRwr$(C?Yyzgif!ArdFt%j
z&blAgm;Ebd8)J^AcQJC87zP5ey^ypE$t%J>n<lacra+o$?lw*-$?6RCWEg`S6d(0|
z+KzBk*9Ad{5+b*@zx)&1RrgUD>x;n7-Z*8A02=Cd=cd)~>PY0(f0tOT=O2s^Tbw?c
z_C?`05L=<WNedF^MWE`5nEI2?<=^MPbll!eJjAEfp61ueLOX+F(%hz;QR{q9PYIeb
zmJN2L-?NJcY{pp`eAvu!?;=F!^KbLO3naqk;bsQotN3Bq)7Ztu!;~yt)aYfpY5J!0
zH=cs$*WeYo&^de+iGv)}B2Wow?JNY#YFegYa8t*+C(h@t;}7R-vPF#bU>}VxY=^-U
zL^5u<)Tijd_OJ2IAkYdy^SxgsYtbiN!X^n)&p%GA=wxG;manE-OZWIE%i-MP$D1bC
z-;0_OsteR)33AY?UE49tZo0~BiLxS`E)^w#fpgbPJl<O2$r;!CjvdQK!CQqQDT7Wo
zZg+EqLTI9SLbU=h4Z|%=fAh-EDvnDUzkG{extQ{W=d*^sE9wzKEExA#CK$FLdZovq
zbtkPbN?$*Ua;p@|^e(`xYDJ<4i1L&gKd(IcQ8x(k9<e5fx28CvhEQ}I3KxidMuoc9
z(LLQB!s|q{trrKley>QHwY9NA^d8*tznFe<z8XDxn8eaG2k|JR=R^pimbdREA*2dA
zqXg;YGbin}OMt{S(jM8$j%S+brTr7z7z-Lucm2Lp@LTQ6iPM|MvShtAcSRlDTXzS&
z|C19%iIa4~19;qlm1s7`P$-=A0dMM~k#x}!C)P!B^=vgaAjwejWYxqlVU7UavM*pN
z>M8OKJJJw|Vc2Z9j{ZE;T1sO;UM#k=7gs!_TOwY3by6$Ht<8@dMO!Sj^=y=s5wqr&
zV>&#19KseO7#$yQiI#M_nnP99ax!Om><Gv@y-4OL=W`WfO~OBs*hf%p1GL$6&>ies
z20)W5s>pfH%{n=4J?Q;XM<2o!nYYTGaa!4)l%X4UmQ#))#f-!|*=-l@oKyRQMm10F
zRDjj}<aJ+Sg|`)|Ri%Wa!eUK3+)jQ*IwoaSrRQeE5Y*8SjQf5<W+UfSgkEOr!o_?(
zl)?ME!2X)YVCcC{fep+0?4=)}@y(thn7sgC`yG5zH&U^%u)j&9GwWSqD;M2;d~|~S
zr<mQlzQ$Hw{zn}?ew~Zk_AD~Xp>CRmTBsrq^g^5N^e>qohw@2#@(YR{^Utvti+uC@
zDRc0=NGfaE84{&;MmayKU6`j?P4mQ3CLsidK?U{u_wl*k-AUd*zgEtFcRK$MsK?CA
z#_<0p@XY@W)MNQy0`)dxH$?yM*24U7Xwh)c<YD>H=rSfiW6;%==azSp`WL)NOk1jW
zNU`V~-(X(DPg~jhFlkA~Dik{Wt~ya?Wu<Hmr%JV+`mPiDEdG~Udnfej!4jRCw(t0(
z-cf9KPq*g0QtQ!@-VeoT)W%baX9N=xBhtvFtJ_htT-3&oJ`#7@heEO$LvEXnj>lBP
z=_!>aNkOg0xmm<_!zR03NQTeFbY&O-7k-Nf*|#rgwG#cO=Zi~vv>8faS4<+eV#Fhy
z#i`1->;9U@p;sT@Tn7(E53*a0p!e%Bx0@<csGfy%3ZAqszWMscvy|EAP5PX`F^xRR
z!mA}(@h#@|?127Z>dq(D?#vy3LuY8a>tpm?iBGxnJ99~<ou}&jIKgLCZEB=|oKLUu
z$)J;`-j}>10PS*tYnk=+#X*Us3eR&{`EP=2xPJU-whUwYKeT=6)448I8NTMdJobvp
z(7EtV-?4B!hTt`s1tK=xYim?6nQx{;?NtdxaqYlhoX6ypDOPvX6#Rz|3{{xSmY$r^
zaJ#G40MZe8Cu-9s=w&aQ>RQ!l<=l?LK7<A9b$RSclaP)oPfOL}fol=wowO3pap6r0
zLN=tRFFK@=<eDu)XXx+eO2cwh>n+zN@(ay_Txr8FCqD5euP!5-sgwC2(|S`=*gnMf
z0+)}Ajso(TNeQ2X<MlFRZRY_lJ94}hG^$Lr4gB{QZmX@o(+7bN{-)WUBCUo9WG0+o
zS=j}BmT<co`(z2axDJ`NQ-Am{G8$b<Tb6k%aLytTU|yML;&;R+Ur-Cfo@c8LRVNUS
z!v=^hrh{mPgyz(0(Iu+3&rd{$>hnOM*wjDjeX1r5KORPmc#^a7{4|5v^$3Xc-P1|*
z@ZK$OPlk87<(&()S(>6hwTNQtIx&my@@%(>pw$2T#d>qdFDHQiVrMb7=Z@Y3Jr;U+
z+cs;($pDDYu{6jUa!sP}MNb8Q9Muci{c5U#o)vSM8W-%SH4txc%;!hju<3+sR*U5{
z9KBS#PcFzS7l!?u1gfqrg+(X$1A;Q8S2=-uoD%lWb$mb4V>JQLd>g+degUo_xy$#a
z%~C*RMW-y_W43N_g8xP|Jt;eJy_S_mrfL!IhjU$0_Bd;*?I`OIi{zoMGt7l3aFchi
z%!+KQuC!k40Mx3XL5l2OW-GXZhsNp|CUeP4uCWTW?*7U$(e2z)-GWtwl5Y0in}w#@
z*iwYR4Iybk6oVD?z_aVE4u#I{vU>@uHjb118@+&Xqyip(TtK2S`wvNUOnsl(Pq?&-
zK!kF~#9M@+XwcI$NnkHbY>i!3fY}&G0IPhRV!{t3M<moHcerEriY*%AI>mRil@4<O
ze1GBFC{FB0vRzR&Xtv>65r_+>EHrd_Mxc-@DvMIM(HuRgiUeL%=rr}7O4!dj`j6#P
zTE(1FNubE%)0tuxhM%O2#()YGlyyLV%*&I2c@qENxt<VdLst>8<uzzc6%vUmCRE+p
zGOS&M8;T7R0sAskXP_7V>U_?97yA{hE+RVk-nwG8NfXa0Y7xyWF_PeoYfzohxd4Qf
zt7)17=|3A7MND{2NNxNCiC6=D@=HWMK*Q~7dY0qmz<b;_cTC){DJ-%sm>c|>&D{-V
zk#7kM2VO?W#%qdMm?G8ex@%L9S_ltp8$k|6_7lUY))Jh&>q^2&4^ILV8XibJw38Os
z6uo@Cpx<3OE~)VY00K{3c}(;at0E?lMVpD3Dg#~(0WmHxDK_<|U7bTxgbGq%LB<Yq
zj22MN9$1M|nZ`>kh)O0IBw;D$o7|yFRaBoV9Y}yNKqwOSvn`{Juo%;)S>-Vz2%;&0
zBG&HlrAy{)-V;q7+V#xdk@Vq_nI#FB9Jr=()GfbX(9-K9aaKXvqNp=}CDjZE>TzLG
zhN;o>zEtkvb$&XpzhBarAI0EyyFiF%Um4BR;424BXa@cDr&Xbl?6oVs&DTgQ3s;0s
zD3tRz)*mG*`l?=E*(SyACaoVRWKcdbZthBkB4LLYv1g##2Kml8@Wg>r!7epgzYy-G
zeR82aLOnp;+hu67c&}X+-hMIOZJZ8Q^_@CL3z*81`#KAE?L&8#Fu4P_Ux9Z7Gc(lJ
zaUouqaPz#Tl-xZ9rXbUiwG444WQ?^>3vnz(?IB@u_jSl^2jU6pNotA|_i;a;Q$H#o
zxraRcmAtE0lpYMSb~riYnP^$@RRax_Fl#;k2TwS!dTthf4U3yf_3HVr#j$q)GrGpN
zA%B7+5w;F$CH6HdTBAtPB-DzNjv^;zT7mpLHPKV*s<c459>pTK2H>y@*qW_GgqbUV
z;z^rFM&==*dc=90KPN(_Y>;~)#{#js-c@C;yva9ImOsXKus2aQH%2Ac8#_i46^oUI
z+7eFzmXEE&Js>)kGFo1{3Hm)X8)uyC%EbG$sXQQ6i+KDy{*<Vh8BM1F9{N$s^d#fZ
z@e%zjq2^sNCCIr*asW~XFsj25(2D+g66G1V`lT(0OU4ye^rwhFeSUMb&`qwt6vW`F
zqv-q>4M~>7!6o>V3Q5*&VZu^em#-k5Qw)N7{rZy37J^Q}lTBiL;qM$c%GpT$K3PDY
zW_v$;w*``gx-&tEkV=b|7L;1wo%`KKo~?BmCseSgV7AaOV#)V&Ic&j|U)Mc6K>8y}
z?L-+PN9niPRLh!qFAw+fln2&WkV9@+1VV6SuUAhb!HWC2B!l~I!y={_;v_6i4F%}D
zpW|srQPEBUKfxX<)~-cY5`X%yZz75i)h(Zi;J^=}hCr!ieMc?4qRF9}D5IbD?FrAX
zEN~MBPCncGZ50!hJe6Vxcl~j%>9?qWJz>TGlks#XDg%`dL7q=$a_E4DdV*fO4%79-
zioV_Wiq4vhPhV?<zoJY^m;=VVrBcPG(^=qoXeMi}%8V^!AuZC4e9$d*=^ei6!B{q#
zo@LVsr<?do$-|6I+Vqh|)|FhHWP%vT(>ZNO^SC`O1XSHg_Fm*>mcuBP;KTj-9OJM7
z3Za7%C*<Dsz{DDP*tO6)jhEyOyi{ORWOQj;lP4_&#b9J0Y>IWol>)ykzZshDFD=)H
z6&g{v)c9!C(8}wY7bcWSa*!0P$cCYa&I}T$R9CwHX6GbgaRHAgcx!|M3u)l`bt6vf
z-LJaN?i3EnX9k_lP%v2ItrNbjl+eo%?x!iS-@lo!whPMbelY>Okc{hR+WX<!x50+e
z&u7jFf|E!s(Z6;C9TV_3EHEoLSkBkcD#xW&o^$SD46?Z70Lt!w4WXI$f_1);o?Q!r
zFjqfqg^@FM7d5<$QKAA<1q*PIcx_ctL*D3ybMbm3pnyzHBMGFCmNW$~!4T^(887$E
zc(eGj&i&v+T=U3AF8&^aAr%-FwWMIC4kM+i+uSaqfgqAC)!&&VEtl>tA8A}2e3WdA
zoA11lbJd_On~L!1u=O@3%vY4nl-WeC&8|_htN_-jawpqpZIc)6ncZnORNjC@K|^79
zaQQB6;Ym_^Aj+xq-^XwDx<X&slGLC&+I4LH0t#&LrfiCt2}GS1=Jqr<m&}96U<^iT
z=2Dq2dr9r4^BI|O`+Hx$&XDPg=)`hUj!gT3eeGBaui#S+WgUN5tm&Xc_QTHDg~s+b
zwUHb413)b$1nbDq!1U#gaIYRZll=GvC2GNKo@H6!M{4jwC0)HGdlL}99=}gsYDeaI
z%<F>5|2mM1_C~iOW8H<f%%6|{yItf<n_rxFym7eSHePf&d3que)Iv0?Ur|m{&_U)h
zBCU3<7)uBNb|J1;latk%<r=dtt@yiY@P@x-kyU4dLsJ7LqJkHnl4PD>4#bfTqumj=
z`MX7^JD4g8d_1+Z?w(RT#!v+Wm6-8fUfU|k=l)V2+r0Y08Js=SKNtg1t>Y!rfw`e<
z*R&-DSvFeCC%&UKfMgLLj;sV?v`eQGutLW4xI7-N?_b_PR#NEmOt)awj$bK2^qWxd
zx<F*1l*hH>D6T@6<9!Qg2a7$k@{badvO${Uv*WAsGofcfP?FVdFe#QtaP!iSX~YV~
z1rigIG%x^8V&ym0`*+<&)<vt%-P#sVx4^FXRK=*PYif`HmJQ1ksFXtGoyP_`75!y_
zg)(4{Fost$+=z^4s>}_UO88|RUZ%60!%!JXg#qW6VS#=ZvTEy9K3G~*@NWu;4jl4X
z_=#UE5hb8NhP5i%x$ho~i55VoXEh(9Q<!~tI>4Nqvvl;L&L<kAb6X7FO9;^JL%zM$
zOW}npJ+mvWnF(GRXZrIXfF(0<Fj_6-7#Sxu_|L%t3agW0kZ$flsG22}n#Q&sSOI28
zQ_F$Cu2jCh+3AT#``N<kl_a81HEXYu6sf}g1M53Mi}Vr=`!2)@p(BRoS{@d#ELpc)
z$@zeS^r=IvTzRoY6+|e_sz+)e7jvY{O=8(8gTT!e^P|yU3(^ZZS)McNlYe-M&!c{8
zoHw?fmlBLw^xe<G<DkujF&zN`Woo_iZ?}vgtI5n^mMn|c;0MU5jHXkAF-%ckMPp|?
zid5DyOR~I_&ABhQR$&-mkIB~Klja!WIenm_r$GdsDzM=@>pWigN)c*P{Gi8tM_zyV
z(zt$H373p3NaIaFRnXQJi!e{^UG7nrd`K=^xZe1%VGtqO?rhO{^GHpb_Xu6@g0CaH
z9e)+9`d*Liyx;psMWsMf_6@WFLW;RO_5&xz7P?=KkFUP=k=->SvWr6H^U!ad!Q}>B
zJ34+fq*3)z#S>AckrWcEB;@qF59Y~$4LzG{(=g1e@`}$yJ>{J2P!|F*QX!DBxi2CN
zx8M+vr8;gi+b|j}x=CG{HWj{PoE4Y0eDKq7o)&J?G8Iu?ycpJ+5n=(vucP4`wNLR0
z&C!*)S5W438dD#6nGyqt1dY|jBc_;QL4V&wI3BIB^a;G_r3@AD9n4!S)n^w$M`PQc
znUwKGW1TG{Q)Zf<z<*}fB}To3{Q*=|{s}7ajb9JHKi2@#Wbm!dB6wf#0f&51Zr*4}
zotfwwa^hl92qD&*cUNwW@U-`|zRR#!V4wM|Cpke-Sx`~Z=&(P^sGfSZ<NBqlyWY5R
zJgcn1;#JI>_mGIJ`rut>(12zu!B-Toi5MQY;N7LZnZ3EateIi;=jw~nLY`+@kWc{F
z-=_O}YDc&ez<%U<Dr$wb$8N>)DIwSA>0Ggq0*FLVhF&!316)^BvoC&$h8Q|hO@qN%
z4SUTmU*+c1okms!A)mv53<7mmFRm^c{3<0@UFL^$#uySH;y)0<pVl@5CDe?RXf+Ua
zI+vGpIH$uEbREAM%p@kY>T7e{sPIQv7!=b3<&7fy^{x09vm+JK3JQV;jM6MTh2VUV
z&MxGWFze!v@cu{5=IKtKY7|McZ^j6S#R5XB+D~8J4{%+}6xV;X3IEd){Leu>J^O#!
z1eX7%|FQfp>3<uJ2cn5SD{8w_yP?4%XaM^RpYt<JG55c=9%aou2=k#JL;^?~#QY%o
z3!e}-Ws`i<V;v~P#;s<oxD3zX{3@!Zxk+S=w@%5V)RJfT4>w2Gq%pd-zC8x#wFz%4
zju>BWd&jZ4p6c75A9^tFdj>v5dWH)9MS|g{25u-Xdgus0Q6jh6DaINq(A;-*9TA<K
zp80v^XcByl+!Q5m4((9e`z2l%47O#a9KS<FREa5)h-}e+9&YpK3m8d_EfU87i*Zb`
zEL8s*g^0ZUeG8<mg$`-de-wvq#ixrhggFEkxANBI;<bKg>cgrJKOUvrULR5)#OA17
z3LE?_lXgxCB6ry`kLa6DQcha+$R}aEm9p~RMHO++Lba*1?nETI(pOgNB6{m8C{ONB
z3vN527rx<{jek)Y$J9->BYT-w;!qIEPI<QdBG>ZNn=aI*o-GoD5pdG$tj^&>t<Rx;
z7GPzXE)h0V9yf(uny$*q^~7|Tep?viHVT(cAN)1*F;pe>h(%$l`R-8^Rfc-__)9{>
zG@`+3wCLKTR-8>Ik~pB;cxtf&tG8aSMtC40QA=Zo2zo7-!QH0Bm<pM}fWyog=ioqM
z<Pz&pxplFesF8><4}RUoczwvpW}JAuX}gF&Q`Kjxa$R+L-Hk?+a9us}x*+Cmr-45l
znyqHndS3Trxg=||v$S#g75DR-2E)A)poo{3s?}C(m8sHL2ubC1<E}|eJyWHYfY>ez
zscEI=_9WG4)j_cdjKxSg=cZIVX`0BW+~GYQ;;F+?vK`wE-4*2(+`N8<N)uL^yM8V5
zWwYj{wB<ULPoyfA=Nmo@N0aYu%2tPdPOT=TbkA*vBWc&HZ<LA?YP$Kd70F6q<wGPM
z0*y7Ow=ZXrFcfhQ5y0yCiU&b4k?89A+B)(ITpJ5lrM)+b)}?`d#8F3{OM!tc;=*ir
zP#u=&vgySbQU}}%*lHja5+!QrLX_yIiInBSzsH@cNPn`Gh+DX$X}ZQ>B>A<VKR~L}
zWGQxkS@4^UbP!FqN;}*LhN%>4vSun>$LkeWMyOlYo>N6-xR<v6J2tx=@BKHcx|JTG
z3-oN9mmUYTF36@hrpqdw4V;_wlaw>=x<#N%_#j6k{Xa$O{f>UBSYfJ9_owtXT~uLY
zmPDSe5h5)Re7GL!5;dF4N^EEOwdyd0NA6)@9*IKL_Uq$UCxQYG0H}W!gR@kNfY8c*
zkShm+KAr@-Ql(&Dl@xvNW;;xP>LED`zvtsQ>lQ7a>*W-$wcq1`TAxwj)V%3p*uPD9
z><{9fE0+O6D+Ai{@Bv*fOa;T(56wS$7<cs``*-=WviTQp#r3PmD3w3B7dbWDZW<C;
zYGA?nFjAl2VR6{Q*p^gNV0^;KyGVjsZb{$WYGWaQ3?>FTCNV9L$EZdkkW?2a3q@et
zg=7z1^A69mEgeEQCDXA*&OKjs+f1YgY3uUmJ+Me?!p}KlK-}{kv+R^C4)~5j;K3Ua
z$-le9(I&_RoEb}52U`oSTiSfzOb+sh@0PO}gz*XhNWz`~6ZC0HBqtcufO^06u{*8J
zh*q<wXsmz#vHNJFWY%UNK+7J{fsbMNL^ed6xN1CQM*wtE1wc{7<{sD%cNWHvQP3xl
zxhm9j(dk-}SGNxKnNac!#W+HadU4{3`(aY4?IKJ`=||z%upg3MepPC!UddNd7<o|w
za9wZaG}0JW$Z^77UJSNehyB_!0r75{nDQv8pHM6{<roM2<1Dh-r*Ps9_MunlkV7(}
zT08`iC?g?SjuwG#D<jA4FJgCv8-GsVt;>ZSmc&Ij6Q^05PrXGlB2_#($TW{K#4fI}
z>hk5?6Q7LRP(mngHAU2IKJqMrFuu(Oz^Y}!!YR$}XP$7V3}R+<y@C@EjX!vgvfy*#
zfo9-<-P)TX+#wl2BhCbg(NG~?WIFps!qHW)1AhbOzV~yU;5umLo+jaUs1yxp52ds^
z8(%Xs-cwUVQS*zMuDW;?=4{yVEapdoNZf%}4;b`1@^<S%0^Sl865eJJ7LMCTY>{%y
z^DY!B;##z95h{m`>+Z4Zk|>-_Ababcaf2uo1mll;Br(O$({8o+f3?mS?1PnaWgOfE
zm-VzMjO2exY9fwQ78S5TD^a!+5>r!Z7yi2MN|s1zXj>taW04{msIM2{GeZAfZKT}7
z-g%+BYS{jML=yk^R=hj(E9n&M)@euu0hL@&xf6jwaI9&ZgoGXw|7*LrHuSLI;2!3k
zpsw=IL_V)3t>qPCMJG}cbeImRv{_JV@@ByTM*&Q!N2Km0JBQA<oey=-ZdWs5q`xvb
zlfrRxWDG#SfLeQrtiS@4RqIr^#<8L%4HP;1d&R;eG?D~;e^K+fw3vH6kSGU_=IBm3
znf)-I*wrzeT*`c-7f-h7Nf#~6**Qzp-NdYq5fC{igGyz0z(Ao&5RiQ2fS$J}#ZpBH
z(;J|iVjO5j#G?jS&&BMrM3QKne(f<~KP8#b(&$a+01qF~)-`c6y-PO+8_FVgbhK56
zPx`XJ?ptD`)vXmIGr`RjCIY9Y$RW5pDa7xhO+J!2y-y`R6oknAu9cn<MX#y;^b%8M
zjcOwR7_xc^^vZbAE>~>1Do#MB3D!yNF@kgcx;Cs>0M^D_;c%q!c*1VCBwhZr$L!cB
zC)xg~^0J8~ZdeLlRzY$rLDb2YfJ5E%|MV~!FS|hcz4bzPP-GUWfdBD#vs?>#HdL#>
z3i6P_U5&*xdzHa0Rb@anbI~ys_E9Lnb}laGrt~(shz~Tm%FZk!ODGzW^jQ1zszvQ8
zaZ-OTn!K-Sa>%kl=W+HE|JHGMFfm$CfK$n9#D^RiCbwN1hctwCD;L7Ymq#x?0Jzx7
zgRY&&MF<eT3G5_6;L>kgx_AcfcZ{J6I`BMG4gKsfU<THdcU2pMKl<&{%V!;PBrkKt
zOjOVkro(og8zM0qfXLb>y>Ll4Vak_rSrk?q-#<CPB~Ne3>omoIJ>y_Kf`z1}D`4Ii
zblC>$&aXX6U;1|QUAR+|=)7&L^SrTWYxgLS6sfW91$#_7u;`}KR6`%n@4cg+FD8#T
zCPZoB(7VO@w<~#Wx<`SRJ8q)D=b5|&{c8yBjdl?Vy1<+1UjAzvK{VtOE~jaFUfT<1
zQ-L&OVY^-xm{;yEW$JlaxJITCGxc?w#r%iSV&-1H2J0X8k473HKvl5)f<`Guw2aW3
zw`a%|Q}%LYY%Sp@^;p|el7&%9a>#DPA|nR{DUx)AGhjsvnRN@-zV2^xd0L=}9|gDt
z^@W!-NR}^;7KZ6~b|XP<sNk3{Ms^e?Q~t)vZ*08EmUu%StE6MkW6!;h5l0MY5_9i|
zdGio`*oeVhJlS~p#fS{YbU*-lvweqJmGLKIIfv*YcT*(>wL)BhEkWT#kffq<%izDo
zO>A;R)ui@fQ*#JL3=viJq^}6nyfF`pZ4aXCVom3n`vZ)o945R=_g95ZjMI+%oNN0}
znFlzDNJi=M+ZA@q#m>p{Y&tInyo*Tbgz0LNjTb8al)kgifzyb`=BRRRg(WC!Bh#fj
zcUGI(K+2ZSf`SCxPS8O~9#2Rk%2)WemkkLe$GTVrwX`nxg0b(VOM9KtbmR&DRPk%9
zWMXD_=38f88jzt<r*JiPGHCZH0RjHRJ&l4^aYz;|hNrC}0-Q|q9tHD`zJ?7?u_RGY
zyS@T;gO*K}%0IQnpL1fTyZ1<CO~lxC71%d&M?VhNl0y^mVCj1fI_&~aa;(RXOPLxv
zWK}4LZKs0975l14BHozdEam%6to9hnLsClyLiv@Q4A`{B`-#Ov`4v570CuU{?GZbn
z=6kAX?~WlIm<5|1)Cmbo`+^+nWA=dTH50vZ!m%&iZ#EWM95{w^vZ^C;g36?6?Ftl(
z81w53&-*&WjPQ@UsxP|i<+6e#V623;%*LG_!Mw!5k*v=*&zC(*g%!DTXgLpllX*+@
z7v!9lux%>|<#y9;(m606gN=L>KbnASAf=<f?Cts6%Y=a{(gzUcaE*ScwTN{jt)jo5
znS@Ox&OA%R>>4d-PkVxBGi%(Wc1}HX1T<&r*F<UwCYmO9ayOKZn%m(Rr?@^{*hT{{
zIHjEG(M&uJZhlTZF=?F4%u!Y3*+7^xS_#>~4^S)Cn-^=WGvDpSvCk%Y>REWAAvF9+
z5!g%^W1<_qeal`S3a~W2A|6FzY|h?=(PSbkG(EBpUM!8iF;AdC2`1)W>GYhX)cYlT
zed8^ji8Y+%)4=<WPS<FnHdeLC+k`S4lq>8|%LO+QRxmB!2aard!_;%9k0<t!!RW7p
zb-gd7uyi1yRxn=$sw@lzP?+QZm4#%+@i=?DG=(aSHjs#ml4}mdbF;sO`lg7q!c&;9
z2RMik!cWHu66YJ<g@VLGv6-xZCq<9~hd_MkzK@JjHz$5}xJ)a2oyLhkdeE(TO&CC8
z{Mnc#Dp0MSyiHi&QbS=scLk3;MI5=i{!EU4jvo>M(k6TfShqTq7Z#L6g#^^RZSyd?
zsFS#-4i*pxe~+)tIW{t_L<YEf2dj#x2<K8%UY&qi5*J<Z#_F=3jlm|Jw$d56v!2dH
z<P-{;_5`jAO*O<7hvdlrT#rTFW=1{CvyouGiM?~0nzuA#X#*^xd3neP4{Xn`Rh@e)
zGL&aqfuGY*biHfsQ2l?e1JjV{4@i;CC*7cT@$;((RCmwJRZF;;U@Rbx>@Nf7f@hfI
zQwvfrG>0hN{4l5M*=&Zy<+npBZEICV6>9o;<)4%)uC`N18Q{PW=u8vi+@_3O{6Ue;
zI}SgGjXfhl-x@70)W~rfSc#T)?4UQXLmanr%N^9duS^H~UYwe|SWE<Fvc+}7VwPyN
z!hroGg%lppo)E9W0EXs<SX!X!igMH{V0mzAtj+QW-}Gr2C}~gGUaB01uKt=my{E%s
zFXhYU%F6V)*W4s;-z0yC3!w??dwyYcK0|A1dg*xr^)2p5pH7(lwxxzl^&N1|1vERu
z#Tm5RTWjv}zA!dEzlAp>pNt>>mR0Cus|q}4-JvVAdUrVJk!0{$e0jVY_j($G_TfeU
zI$hVabeN-HeTbaY$S-|rm92mGv>&8hqzbs3M71~SN=PfI@nsfsxi0_m&!mO=Jj`?@
zjSiiHyDHIW%Q&_DH&LR*?&YA{%9Iq!llQfNKz5m{3H7`E5s=c21labl;cuJMlpMop
z`+HuAtd${X+Cx4S=%1o$Ev2Y6u|1D7UHDe?n4NQNEI|kHpu|LgmVBhn_(_YzF)#R?
z(k)G=GGq8?#hjR1@roqA6HN>)C3b$R+p_kw#XN6>HucR`J)PA~fhbz`_q@OFcVRHZ
zY&D;eBk)~#hfoZktc_BEMRC2|p-z;Apapm`PA-Xo&E?EK9eyj7TQt^1`|O&vl1!s^
z;K;bt2FpTj+VLvT78{``?GVUq!@*lm?Z>8or3W({rS@`feqwyTLD=}8X#IB`@&EJv
znEwNkVEJ#pAItxW@7Juc;kYr5<h`PHnbj98=s(2c;rQ<-O|gfVRZ1cyrGe0%f(ZPd
zEs*BIJLqfXYz+sUnC7FH@(5yVz|hULw9L!&HUi9d^w)ctpK526|CWw-2jr1n#<#-N
zYMvT~T9c)U&gY(tD1vGh%#-3M<8%YNY2{YPijQv9caTh7&23Tns8N-AHC@*;;PMRV
zDslFJ{^>!Ouc~EQi@VjX`{7(c`Jg~gI0HXe;xb~WSIsX7Duk5~`jec(v6=gDwXyH|
z1!FrVZHs!<YMm{biErXjBf#79E3%t<Lud^%DV8?X;LrcH1j<^xzve8898xeKoVvTB
zmE4b6Y9Uzn>AI{m<d~n4eHoZ4CVVJh+jp;-Ic$^H(&4nwjwGgBVSB}te9oxNRfUmk
zIP+9yHq?$lu;RLMeLh#JH&&kx;U5`joR&d#7G6wj4GV2VhWcb{AUo`2lj2ojCFJdk
z&<Y)hF_hhQJ$$#L(F9^(_$EL=g-A82wBy6ea6|^ASnH|cV>~8f6p)FkwqDW|s^n%5
z0CzGvz4XZ~UEBY<IQ70hdBo5>2}5elt!oK!Cp#?g*wI{Z{c}CNNRw8Dr@;|x(i~!9
zh%{UWE&j#$T;h1PY7o&tO%2T#n}hQ}ki=>rv&Ot$75%NQb31sVP#X7gJu*hyOiZtJ
zI9^q)-(4=;y=yF(>Xmo#46iHwYqu(1w`#+HdP6c^=A)-_kUsuRW#wS1-XmUh{<@vJ
zZ1j^@yczi0l9AxCh@Q=z6f?F2RxBZSGYDt-NmMi7#|x*g_&1a=7dN8XI10Dy7xfgG
z9BBLVwQiFYBW`|Z7Sfq-6%}ZY8$D1l-P#oqb#g5NGSDwVeH9K!SGn9(`S8&v<nk)q
zLs$I6I|a}|Q_@3xWnvxLHb$x@pKY-u)e1=}KIev${uPAAbiC4Fz9Dg6>YxK1-G<hr
z52C<ks499c4DEV(Ol<7HtTLC%zneektM@<|_A}ZLaM02b>x=PHxvy`75EEJum&15q
zLS8Dks>LD(w5VeT*Zt57mElcRFsFua&=pw%Zy{mxOelQJTRJ)x!)s{=s>m_JylTb<
zPJ>?eE}Z1Rcqm!%*=5j-?l}E4Vz^P8sFd?$VbL2sT$?s)UoGJBxbPB%!j7YTwqS&E
zW})gIqj+E#yG#tx-d~d2l#vE9*c_K3@^eoJK`pzL%@-{EUz^2jA<CTGFMlWbPkEi~
zux@9Aw-EehLOomU@K$5QF11~*j_LcRkAb1Xa9Ba)X<XoqE#pso=&5}x<VvcIWR>O9
zC%bVmxRda1I|R0sv4L_VXwED=1;O_u&-ZbOS+}%k*<D)@j7oSV@OMvoh{GBh&bjPk
zCEEfL6YsNJaL(!)JNly*<qDOKM!y#44E3UnQNwP}v8tA?@R;jw>@x+l4#naM;XE$$
zX->xE@@4Sq&N_2KGYaW}Xka0Y^abPR-l_S0igf2oshqm%FQ1x|W`zk8s*!ZzXj_Y&
zEZxb9#8io3^Cbp|K0cp&@C@)CDFc)vT=R(v^A0a+@boFH5IVI!`}A0BgpjmL(h9kv
zRQ09u5jm2uhiG(K_d$g)eM?t>*6h@%qF@K27&VAa%lrd#JTj-_k>9eP`2;3#)TE7a
zu?4B!yjaOsw0|y!P*Tpgr9Nku0Nl|{X3fnPvB1#tS>konk3E-J9e{#z@!1|fppESP
zcvRSH=s+SeFd<1b$}!?2|Gkp*KGsjm+aLLkP%{bRuk;1SSELBfeCeP^l`UI0^9w4k
z2!g3nDdPglFv?_QShej2E=@?)16M7C8EuVV^g(o;ZJ#qrMaHr5zxl|*#{pISNds~=
zv;FyLoa_Y@eQhNqcB`Fk*|8{Jb!C=rx+>GR=%L_tOR#qJQ~T0%0ldHVg3D@b$axbL
zPCUAdgAxVt5J|MgLH^q7RFS*7!7Kr+6@ua#Vfps)B4dJGSD-1K>>cG&(mxyNGlQ~=
z5W$WIN1bUs)kNGpmz3o*DFNG2rM4k6xv&lXH)!lZ)c4oMEF^a}_cj&*V#w56sStzr
zocR}6m!;}1S0!^cQ@pDF!xW$)#8gS%jD)c|zt{xFyh%ks;=pw{2uh4vwN=w;RxUCv
zabH_1+@8vz@$OBQaEToX5Gn00z$=5njUp!1qYBP1w2H;Hd~44OgQeOFmTy#acBtA)
zC1J3{h;1zXE>vd%B8m^q(Q~BC-7w{nq0xupRzw)s;A-%P0bt)d&XKZ0(LsG{attv1
zK6-5bP^2dm>aS2UHlahF9Er0Q8jz(*=$SM#fP7eQUaDS&Fyn$>Eui7bjDs!K#$=I$
zP>=%75n3e%BB_FZ*HvASvx=;h&sa;s$Jv__%Ul0wy%}#BZ_+Eto8;?WstVlv8-9@p
zxj!@g$|4U?iFYpudAhHvIj7D25E+o;dOOm>s0&!=9ga8#AEic13`KJHjz#iS4KVx7
z24Qh1hHQQ1EgfiJ${<l!bJ#~|8&s}Ep_aRr0915h3vt^|y*&ceoZOmssH&pkP!o!Z
zWnEu{eTydtq~koJbAdW)ua%Gq-Hnsd4Mq0c{EY5U{N$nwgqtPAvgT%$S?6z|;HtbZ
zc!w26d$UDEFJ0D$VQMd+l+x%Emx(hem@(pO4I>@G?sbdna1ry*sneK1?0ROyK38=z
z3wM#nF5ZhF=L!?n?CCk8^txlHJ|h*M?ASBB=j2=_TKZi0qm7_b>ri$~u5c{Y67ZCY
zLQ(KD&a_}Y_7+jIn1JeFpu>b~3tXXaH>ti|C^>qj#x(&Mh530oii%sgPC9qPPtVvT
zyK2|9XL?75SZi+96@`uRkzPrvQ1uamBwBu#$jL)ltc?)cZIEraMIbV*Ze69+DT@tw
zelo>~1koU7&M7vW-Ny|Hx6&MBqR-B<{&f<LOI^*2e3N>46m@d5!`<!s^EpMdtlH!I
z_C1x9=4ZAu-dVDo>p7bmcxc|rQKrbi;+6u7c#bJhxQ)M;YRIre7D}0<v<i=Nf~`Dn
z57ANrS`%87Sd1u=YyBc~6C~ONwx^80R;xTZrmZTQO{|Jwz_=ecQi{Df4!_dmpxS*V
z&U2eWmXvn1M|Pq}LXw`X{QwIU&jE3Y4d8%O`Lyl7k}2B&MU>TLM;S+5D>1JEHrsA~
zT9K4Rj1Wq|8|>gxNSwBX7uROkh8YA5<dWC9@Vu03>s3&bEd`xQZm9Npy=V<`&AGEH
zoZ~-sG)%_E00iS}C-u#EH|<?GIcavLfdy7J#XX&A61lbtYANTtPnxyQgx}@}W}cJp
zep?5la1j+;{lVGo7j{pbkr39yqn<l`B45qa=vPg@?`^yi#jTJ-Y(bJ->Kqv*z<Wnx
z)}{I-rix8b@+BKZTd=9w$}E_g(jo}(b!s4)53+YuiXvV`o(F%ml8W7=7H^4I?Nz-L
zrF}n2A;sfUzOn(Wu6ODoo9@fvf}_kSb~H=|x>{>2BWT()Xhkv7Q}ajf@B@zJ3*DuL
zBuL(*D}^3G(VKpt%v=`tBT285ivMLZbjB<m@yPsG-T-UDAFD%NU+lAhWv4-g_I6m@
zDki%R)&aMW?z<w9J6%GY0?SzD+;+9dVQnezSEzgJNx&i{EQGwn8TKUMPQ)eB`*VCx
zn>T!Mlw--EP&!IGV`^m%C`%C%lBXkSae>iViCk>4XKq@gs2R*f3=GC|VM4Umo-Pes
z)Rj=y=~d06S}p{vL}nt+OG`8-j(z822yH{$o$>3bJi;48?L!~w$PL;@94hX#!3s9u
zBMU_nl(}Xn=KKjAjN3nTpSTvst4fVOu?YpY3_kxN4TWr+#4ZN^7Q3X68au#BGvS+N
z<yn0r`~?!jkDb2f0uj2RJof#RX0$$&+$Mp0Mp7K@s0s1!%O0xKx5)I3+1?eB->uh#
zq$=w%jc0lc|9zrQT@b}<v;k9;;|SBARGDdo&IS3xCk8`45^y7TZC17!`%}_QcOIiJ
zhfm3mW2h}VV(v9Y`jYRImva~<mt;9H@8EOUMBlnatvh5f;Z+)|CF`OM?*RSl@6K+G
z&dQAXjj2J;A_c!NMH%p{O7@Ta;Pgo&EEPCIzv4SoVdi@Ru+9DhM<HS{nNRb-Me@*o
zWM<qZOndZX<I)h{?M*MB2g~}uBguc*b_|UFi6pH5&9-Cx-?HsuH%5{E?X7pSD)a~I
zveHP|MuUQ?0-%;%k!PkSr0WXEr^7puDUy<p-u``%Uh*9)?~EmM3;6f>+k_jsxhz#E
zl>wd@{^x>T>_-c~W`FnW`~WQ}5Bxpv9r5$%*-~bwqq_F{RZalG7Qc2;iW-p{(E@uD
zuV&zT;r#iZzx*aeAu(Ab(r(kXcEDB#?lD|-?37`mh-d-fBIgC2?o#W;fQ#kH8Cx|X
z+%UDopz(d>YDZtNLPmU_d~96MC&!^m!|>@r<rOh9OyxFr*`y*oc-Cv^{%osr*JddP
z(9K}sKpzlN<?^$_boACbQw&e!CgCBy0dYZ`CTH8>YFYX9osoM_KI6DfZJ^#vJ!QJG
zv=w=xk=#h^y)lt<S}EwuGNLxcD`azJ;*jiE@D)-7b-(7b>ZY{hI)(VCLw}W-f0Y|*
ziW{^=88gmk#O=+?`nSyWGECpP;|f!`zaHSHVbGmk!hR}TyZ_fWJ<u`};JIQQRFPKM
zt!Kh8RB}an6i-Z1$jor<jSXnN|20AM>hFLtRWa0%Rj|d&qF~=?)p2v0bvvK=tMIe0
za4EBq7=8yo>v~GpgDAp1V>aS}czja!WQ;@5M}SLk)@=-F$#iE|2=}=jAKu7b8E@AE
zi8szh=W0c%cl$-|aYr8;V7sYiY=pWg-CvMtf2okG;VBj>OstTLt<ADP<pE@rBQ4}f
z--1^<j$6(so}3W>Euk3tstF-NLRXwLdS(n%sF=j?+IsO`k%?^vO#;)Udwe`fLU%L~
zzS;hdJjbzEkO8n^QCaCf#;VUH)fb>O>fuL-TOxMSuU=^)J)%&H{hYrv`P{HskhwZ|
z7$UhfVBx@VxD8B;mj3ryS>v29Bal0KK-KDPNqeHt9&K#DWMjtFvUSHS;Vjwc0S!?+
zY>i&8J^a(KM2eN11r;p71@?N{#L;BWS)jdNn*XyeayaL0ha<Rt0|8pa!|HXY)#S-y
zhWYk*gT}i|=9K+Mi2YB6dTCqaUb*%f!j;m7!Y+Q;x4(Cljj7udJ0S_hGL6ak)<!-y
zP<%nfsngq9n_Zsk!Z*iiOB`}3cZ?&*;D~A8+P_0*0+jd)2P5~I#|7=*;UXG%PEY^T
zP}x#Od3!=>p&o-yQDa1@-lzi}$Hb`8Zs8rjaG2@siXqBeiBs2<|9me`y0|@<^5A84
zd?`Y>@pbuPY<@mzhG+|e&9nzmPB4KjDb%AX@+29j`fx1;>3yKh3@|lVciNnx5Lu>t
z8i#Bz3Cf=o4>m;d)r~0M$1Kd^rEEPe*HpAj`Ja+0NbUgrnh(e7fiGg4wxgEB6?^om
z!|SJtLN?|0#m`kaCrU$nKVWfZ7l}+^AY)7o!2d1BV4OxTE%B(IKvH0AL=VoFH%zhG
z8mS}?)JDQKq{tB`JWWjrkVUJ%G^yczx#oWaQyab!VmGO4B7nkd5e`Lyj^Kk&s?VkZ
z-?KTI3q%6HP2rB-f3}SC#}Dffm1Qk58o^9qW}v%m$Tm}DfxVJO<o6(sAfJNC@ZCdE
zoDpN&A5D!)<n!|A@l=a3;u=5S3({PU4|?n>)KCzmMvARN&b=7F`aHC}6W_dASaz}B
zZuU2m3i0A}(P@keTq!d2y*NxKyEnnoA2SO5*s09SR4{hAyxy)bubi<~9pVqFlE~bz
z`NB<KDw(U4=7>rsVX3iV$Y7+BX|YbnMgy}`l_s%)G%18fm!74h+*-CYu*xP+4opV+
zEhko?x-PL^KH*3hL?!<i6^)aw$}0`lDnSG-VzH|bLFv?WwQ0+ToO{KVV}fYa-{GHM
zg6axy;s|pfpnRy|a3+^jVGXQ8$2X5%t6lG)!B3fWepUvRMX}mVZIV@5Bl~BGw{kn#
z4GPIeClCC}052*7h`c({Q+rupM>+jPN{m}F65V)xY(O&J9EaF+me0^CQ9shLLh%Vl
zf?sP$?2wKTXhbSG%=s~^rY814!m0Vr^%gN!rf8f-0jC)>IwKdzB$`1;vb79rLX#Kn
z=ziy8Vj}Z;(MKVFkY0-}Kpb<yZp=h$b?$m3ECn5rbQ4$WfjKW?+Y86Kh#`AWyr+->
z`%s`<!E`7D8Zr8QiLtjTwIum9RkP(v7}rG8HD2UTMef#YUal+fuenL~hCZul!n|J6
zweuuZ03EU@{!oba`vw>--JBR?&=&sU1>anSxRfbWeDi7FvV`_N(7*z)NCj2wqy5HO
zE=lA;6Y;4Zkh5FXcW|VvK2g8HEhhyTB0m~|N1{IlbymIL+xbI+Ea+om9d71V<7RmQ
z9*Fu#zY2`;cFQtJ$61Q608&lXA9DpYy&6x$V7TVW@QjMTUcEaY4Kjbqx1_MxC4Cx<
zRh0`@`b&L&G5wMF81X>3`qVvEK-RM^v~gSi5=}HvXSfy8h!+lMm|NnSSPUd3*C4vn
zKQ{)<d_tFunr#!yNFAshr1^r-&TS>|1J7v31e?ka&T73amv=;pqDnm8Ely)0j}nBu
z+C;*>gzM`kilM_LOl<a3Fm5>I;R~91LSxsL9ke62hx2)~R|}AWxS%eJF9}exyO#Y0
zFTCgkyI-mDcXVC<=mqhUb!VoZgKHVEvrfWX`sd)q$Nq`d>>hKF@(94Ia_{Ve+T{kb
z!4s>nR}OY3l{EI%TdGn2reu>YB1&M+fl0U4_Tz1%k$QvcK2vZt@DcM7vOf*WxO1f$
zM$sRwdb;3#1wuF=4SH|X0~z0h)fqL_*&$cqL}n!$Ctv7ET(LlB^na=>*y6K7mc6B?
z;Qm6V$}koM_kj?Nf99jKafTCNxGIJLPEOcYP%BmgMm-Ny?j($ZW?7ipCfN{ry+bSM
zrP3GP1Sl7}c|can`kNMvP0jvshR}MOTRa6r=&#9~;|x=ly}B&c-z3*VKq9{kX{BTH
z*;4;qh08qZE<yhbtbKI+Cr019L2QrmAY(^`${yP#)dwrz1vn1Q<^H@2hP(k5#~7W}
z(^qNGo45CEPVQx1Frq~{>?grfu-RhkrMIcvlIQ4)oeZUsKKLJX;S{;bBN^+4@d;dE
zkHh{8HBkmq%M)TN!@$F!*`$1iZ3GgdVptqBepB(KoMAqJ5r+g2q_pD84P0y#73n;e
zurv_UMO=|OvkA!{)9Eu5!>lEqqml7c*dX>hq6~CsZSuAxCjq-L6AFfrGl{nI>#xsi
zfZ_yG%7jN=KCXg?Ym<?5FvaU5@I0Q!gPqEyfKdC<ryoc>UmmBw*EYpKe<-i}uyg}E
ztq@L@gK1kB@<+;kHM3FXh4c(kkEQo=3|J#O)zf@lSt*Xh2j!R-M}It)?~W_O(7+wr
zIXOBJ8}RNWB6hQ8|B)_Sqr?t!qQuIG_;};>E@e(SZNI=yy^Q@uYfqM4YKej=mR7we
z!B|BWnM{SgGP1Gt^dc|Lktr6Vh7?3bu)n3Zjk+8ffGCP_hE3DWksgZ4w-t@hyXMQE
zxI)FZ;(Rmzn2Y!m=*{hti$jMy`&r3rbH*TTEV^^6eZB<z-BStv7W$8i-fcj#pDIpD
z$G<(Hdt*4!K0~8LO(HHRu~{&Nd{#e{gau2lJCv5HXNtmrsvIc)>lrsmKk~;ys&hk5
z5)G(Kz@~jQdd8ztr%yoF=2e*_gpud33K6iUiFerpMMDe?$#ibznZ!9(I8AEg<3)L!
z>c_mdJWntV@6hmx#EJDVsEZZ%Wt=gtgt8E$JCX#<>DS`=l!|YwZA=#~zbs}py0wY)
zwa$oe<dZxrw*vmc>N>}-xk@mpXtLGdAG~2HHR^HgwA=+>D{jw*g;h&vSHM8B!euE%
z&z-9f=1d06wfDRQ%o-0NdN-{@)9BxsC14BZ-%W9=*`mFc(Kdm+lmNWU=3H=KV~&R~
z6~QUHVb_lo{gU06dyy*PZ?F1s?LYOfsh%E4)V*t?>er_54_2@~L^|<Dmp7ZS!G_}I
zYjl&iGwt@C5tr(B>PU^x;)#U`4`Tb26GuEdLaV}Z35lrRi;dE{?8LphaRu049Oh@u
zWkQvt+?~13owlgQV%Exjkzyz@*&`90CD&uxR`TU&Ayp#Kx>Qj^pds0$CvV~`H~04j
zBxE*QipOWlY6BBl<{xlj_WwK-&-wbynJENVBIoK6maz>NHV7%kq?V?Wjau5yDdxyB
z^~kC2Cq^c{I?GmSSNt-Ap`rqL>))VzqGt~N9+sLUWgd+caukbm@p7r_$1zsNI_wjQ
zH4uOLX15@C?)ejq>%qXz;+n5Voo;#($6EAEvlhQsfcLBvz~_IZsuw#?ot()%5CNGG
zYUh}DGZBG8J06Z0uE{6+cEHIBqa{>SST44#RtJMKaRBf#@R1K~<wgIk8sKGpdbVz6
z9@Ms`K+!n$JG0Ph$&{C>#4u=qoKPLC@l+2S$%oI{9rjkG`LI3|>u$Yo4R3afR!o<R
zP{A(EGLWk4Bek61y9C;jBK}Gn7k;PZ5+lqsa^aco6$keN2?uyx6l}?Rg5)=ps2t3v
z2_ba*cit#49o?V{_7}Yps|@eB)30%Fi~+j0TGWuRfG1@$<~OwyJCUlw196tf*WV7k
zFUQ!Se1hieVtK?obZNLkyeGC)jYHb2<G;R;|A-6*S2K<y(Sas?)JG8E$oMJK9*+87
zgJ&7BD5Jy>SF1hRv0Zvpz$J?wlQdiBCS;JKew<cnXnft#en}2OZFTTjPQTE7NF^Mt
zH$P`NvP$Hf#JuQ8sNy=Cz%Ni=7c4ct@i4#R@I2q$6#T7!C=sz8Sy;@mWMCpB-*|>0
zEXkOT!CCRzrmF}*8fxvvhw*z_6Pa$VvU98{>MrzAmUvxI(f^lFK|L;LYbbta<XB}!
zL{h(qbElG!KA3fY2-kRyg<Pj|TmKV69@3sXA#gy_l09WXzu+K6s_GOZzqxUmaRDbe
z+G~G%gXl=6W&r!Ye82@GY*A?`-@<)5*|zRNpn%@^ZsXb%PjADf9BEP$TB@6AqYQp<
z`T1tNo*(^wfyuF#v56d|ASb@%22Fgg&KRwtpJgo!?ZrFK`Cd|M3>-kMg47_gdH;Ss
z$A5jmA2rP?`>!PZKMDE&qtP+`XKT#*-!wYb{}qkyN>e88Uy|;gsXhIdq!%~zjFX@o
zZ?ReTt43VAP)_LKVPgjqFqMi^i%sd<k1c=x(dd+)FtV`MI!6bhK<TZk%*3Xy&jD(+
zx@b=*2FWO)ew)3OTUdXx8uO;x-e??ts$360CK^d<I<#|qUPKQd(%8(N31yoIG$|b0
zxuiNahK~63QPkDsDWbIdBPX6T=4mJJ_y%+oKhw>a<+j2qZ61?H|0=0T@TgYa&C(T@
zMwd}mp!@ZHGNsG2qYxJ{(l~Zz!>l&?Z{18Mx<&Z564cu3)i5uu=L}7j+36)lHSi?I
zu$`S6VzWXo`z&#ptfk!;(*<hzyo5Tn8d5AImo^YcWvubAExqDJQ;=u>HEHlmYm@m(
z(J$D#d79J3I>Mc_&&%DA`%?O5jO%@!?fgHCol}!&!J?$wwr$(CZQHi7+qP}nwr$(C
zyZ3HR&zYE+hx2k@>JO}_sFjhKUyk5MV=GC97$nkkF!YHRZL+2_Z7D-hc_{vIbtVg=
z>nN6DJb*Q35$@Xw*vq|pm2IioY|u)&@@9(G)o;TFsy)s`6U`*e0`}#J@5JSPw9;>x
z%bfkIrWD&HupE^=c=~$Z6-Ri@QzFVxX|+1UiP@$q{cgpfb9d=DoMf=npo8@W$<X9a
zo0CGBk}>k=s+>T>P42$6S!g9>;}C$RQbx%Sx-ke`_w`n3E#9t`>msZCBHlj5(Z6mV
zP{xga)AdzAIc7!R{?bmG*BK%~Y5dzW0Bfw+tfXJ?VfSepg6`BMuXiG~oc(I4O^h0g
zQUO#T%*pHi>9t$i4>MLqnIUy9WtfDrp3o?yzC?=)*j96B6S9~-#qSzw@41D$$*h*v
zP=iAyowIi^gqMdYCh2n0v7H%ekK%N=n0x4FxD`{+5?Dcabz)uB<;E~kIo0u=3>nDJ
zXS-9DEqS%`RSF8ySd2Y|K?VU#hkuhaNGh|?(2g<Dh4l|Yf+sxjf?dZL7YBf5bv*6N
zhk)2e6?RBAUtHKC?d%^wOqI$!5U*lp5Jg!mYKUH-2>I#hQ{gP4&sd~E&y}fgGT%`n
z*#xt@Y|EPl4D&x35G}i=Qu=j0ku4Jioy54Qnut%KIbp)9YT2{2YG*KIne$Y#f@W|a
z)lR(7MyiI3Z#Xdt23k+f36g-)(^DZZ@i$z>H|<Ea7KMxsokYn&z~rMH*HPD%f}byI
zWw)y=iIKe|Ur^pT2yk*=yA2b-Z?6!V{MQ;bZ@PM~?-n4R4M7nAe4S0fVI`J=C;_t#
zOK9X$0A!hU&+Ejy^E}Tl=&A5D!QA9=Y-^nhJtW>ysmJO%1XSz<LIqmOzNxaUO8PYH
zaJv0kk141e$d8f38@W`S1(YGa>Q4c91BGQr8aU|{d`w0ZXRoJL!a@vJXypBKM(sjR
z#=)7&xXgb<dmKBMJD^pC@s4Nz?YN|6DD-cN!+o?+ifEX{8WmPRb$u>k6{(hQl~QOd
zqC#Ov{xROMukK2J8US9D-4$^YHJG+ULmbA>x^MwYe>Mxa*$ErkO=9CZC$uaYH6-Nr
z<(}>0@S+Ht4Qu#Je+snb2%-j={P<18`+AOl$EW{^y!^>#76Kf{K+U}Px$+hEyJGjP
z@)gdzWT%qOm2Im~Hx1GYr(`JUh<n~C!vHjzEOc@P(cbSB5@UTFX?mmA>v=z@tJ^Dz
znjaI*<>7RK^{367Y^sXKa$DS^I&OpNaPR;y%3~!?q>I<rKw`#7AA{y0N@980_F^9m
zgh!Ln9GAr+OXmX)`1aa<-7#z;jZE5nI)|hjN2Rd4Av8_7%g!e)@~nKi$lt~@;kkR-
zF~_S9xtM%=>9x9CjS`6!Ih)#v`>;~=3tpM&i4h)+mJ17H6(!=#tA%PGXN6ZknP!Cu
zb=a>IUfHALC@ofi-0ltTqYd~7JbKfOdApS`RdXOrB!-?Sd10rva1p`ljv%k5#u0`)
z{%38Z!mpv`|5HLwv%;YPQ#PM|GO|3)P=muw^ha8zrj~f^Wz<AOQcV|r^_qLANn^C~
zd(^E&6pD^*^<+9RhLw!`qgNYW&0+3Lo=$I%>am)h9YdEHozZ<@N#B69rJ?h4NA<C>
zay35e4vAxx2mHmj09QOna&Ilm9a`zdXRYYXzhZz}d?Hzx$uh6CEyWZp)*L6sHpw?y
zDjR__jjykDB~~X0TGn>Qs4_UvRaui>U^03c4TuQZI>=!ER!Ej8z*60<)qqB5cX&iX
z7zA(_3hum0mtD=It3Kgu;tMZd3EpAM+1=mBq%|lY5J(O}5>{N3p<R}C8}Yhy+gw4n
z{eBq%&H<(<#yQ_78L@F{oRc!I6y|0#0AigVuV0Fnx*>j{%C_YlfYeXh5H{y_R@H2}
zd&_NTsCc+u?I6^O2;P$Z90_>aJ^>0HcM|v0d<!?T#ro|!s44T0Zh|Xs^&}pG8Pcv&
zmSBDY<pi|(#BQ=Dk0FD2vWWnbzr30lO12ie;zto=ltf|W{VTd=xueNlC1KN*(&qr{
z$XmnhV;x6#L=Yziu=V1&8c9T0FbB#s9jk9QBVw!6^sOH-isGEUqs8&LQ7YrLVJpj<
zhQ}4F3Gn=?4ft^q%})oc|5@woon|gtSv>@M0}ZrBG#KbJ6CFkLmH+!-qfH~PK<%H)
zQ*R9<UyY<|sIqb!uN>^srV!AjF|ZbEA6hM_gaE!w0#Rqv6xZZmnC6%4$VHT7O0GmB
zn_Zd{YXGUbT6XeL!59`x$`~Qj(>xGfDC4n0v_!sx)VB#MSusDn&+rb92LT)k{LEO*
zk3tT_zGuA~rQqciO_r6!<+EnT9{ZawkQvevM%Zd9`E_$-g_vH@51=Fy?Iv#Kf}TAv
z(SS)bJ!Ycz-S(PTH>R1V3mB4?r?F#9^Pgbie?z?$wzJtuS5~Tli-f9>Y&PiY;tVBa
z9-2w@bCg$Z;Wc93Imry8w6r%}&cG~6X#q($^RFzhl-LU4d>-{-^o!+R0mwZE6+_LK
zt1~WB$86>8V2|Q_fq2g5u9bVvVgY&vvH)D5ID2~nn%swyhIcP0xZo475LRJqUscHh
z0C>Xc6S_SJTqEddPwHgxpx=o^v_v;b>#LPal<b__8<wB3|1J*T_~p>!ii}@i=M$z6
z7l)bc;F>h7)n^QKamQA0aHJYK*y`;v^XM`($>ipjmoyxO#ZenGj+}_a+j?(?-X;r<
z{8+YDx{Jp4;7w)V2?9TXYxB}cp7vEDvOt2sBPGK~04*MZ(Z^;81##wS2F3Azxz)7o
zS53rkc@S}s+cM+jG&#_i*HvnC#@&QtOUWj?lyPCLHCT^^qw1V4!$M#s`t9UZ-dhZ^
z%%~b;LKzpM8PuNRtukCWaA%k~U04$}irzX;#Wrv$)+Y-i%9~y<+A+0K9>%m4u7=SK
z$Nr$0rbG&rs7&81L2MS`st=g;7d-rcY}}H}?1Pv(2o~xSd-FOhlyDFba;T0t**dt?
z=8)xxPeKTAdFp|LYO_$!#?N@mL9$NQe!|%zx0*9iTBl;vq1Xd>?1Pg|_tnvv$Y#*C
zZI)MlYT<I%+1XtMnh^V;{=)xWc6g071=ytud>|_k@$I<ynVU-Rx%7fNlHSNGMp(1y
zvR~67J7aHTu{^T9afSwTqxv_wZJ45D`_<7p|9#jIa=r>$Ix+hV(SX8Nbz46`6Bh2%
zS<50qJF?lLHiy46Uq&{C5gk);*3JB*N@MN}b<?mw!{Byyyf@wHUQradKqi~|n8!M&
zIn*Da`4QST!iv*NhBsSQ!&_sPUxlw^xJHs@*}9x&X-R>iD8t9Cx;QTXVx&W4)<tW3
z=~wY(nC4NPCigC_|H!z8(XRCo1$s%DrFngO?*UbfM9#jz9qzMf*03AZJn-g=E4#x#
z2#=A>bA16rn$Q93Ge>a|xdoYb+FR4rk0aQJhkbpui^tT1Wg?Unc8f$25HCK!R_M)f
zOP!H4^g&MJ9}#8LG@8PXb^mZ`BOlU@0b9ojEgmqevfjZc3yGu(lA_fX%I8nP4n&@1
zm*4I6Gt(1CNjxoR@^pRpo;iwIV=EW6vXDMGz0xi7(yHHP*HyQxJU;|ap*QlxvHDxO
z$$k`mSo$<VgBq`4WkkdNE{RZMCcv2Wr?EWXpHkDYSY~V5!aS2~9r^jyhK2p+ta3s0
z-mzRl&IVvDb>ksL{cSrvXlwlD-Dif!prx1=aff$9%;YYV@_8c4wn-*7#Z(^bthT`h
z<wKZ$-oxZaF~xpIsSfx}9_5XwAV~pJrWNic@DI?Q%F7S~e3zq^b(!LKOoze#>hpoh
zKu;tiHLi%$C*qjnSFPPmG*Ks<Ybo|rnugl|E&x&1XWj0ovp(j`TT+@)XLKPK0)4D_
zhAbn>VSeLH8;M{LG^=rK8~wzQZ;R`mdNo@9Fv}cr?KEnhUhWs@_a}Hl7SMmAy#FJL
z{v)24IRC#5`QO+l_WvpN$?oXahI~`Mx2+H`TA%qSYMKB_@}S$mKnBS*5R^_H5g|iO
z#HxGBT-%YK_%$Kb_avs6u|Wm^xSNccepk`tRG;t#aUuvx`QPtuj#P1YbiR(H%JqT2
z)?OL^&fKhos_od-`F{EQx{z<`pNSAqm?*z4B%fZ$*V)R=UOnWhs$!ywX(Vb}S5^Ji
zGB9tUE|V9{WBK&+(9M9ibn0tOSAEVeJ`zt&5^;n`ddTc$ZEH_BSSl)hSTRwRlpY<)
zTW$U8g6b0mEl+L0dsDqwR0ZX|T7&oNFP(?B``NpNh!%yK0WtN?k7^muPorFQI2Y+e
zBZYLOLDKQ%MBn)ui&SMc+(6vtU<)_K<MH6<E*}mSX>IXW%ZNdpj;4t-)~2sT*{>gl
zpJi|vH0HI57pUCx)x}guQTVIwtZh!su!0IU*lwobB(Y9R$zBHXu!${R2eA(9?ut_s
z31j|+elv2s0Jq+~4Ltu*^8S4HCTvcCvPse)#{IDMDL(0*)M^awGb%u@*@$e6jx-=H
zjtr%!m5A%Q@5Rf~op&E_u?RH&nKv5BzmYqWjA($nv;&tNd-^iwUMOrZ+)`0gHIpo*
z0j!dJ;hjz!9q7deB2}xmW}6&xIfgZ{Ro~-KHdQ1tx*}#<naYO@Gxv%YQPrCt0(y-x
zF7kOEXfvdNJ}OC88<N(qHzq4$L4Hict%;t^uZT8DQTK9vI-*`|JrXIkITa)<td^Lp
zv&Je15bK^;#u2S_$QBAZaONItKaT$}*LW+d&Cz<*nfgajiKAt@I(2<$S^h?yA*M<i
zbzf%7fcO67i0+c@r#8zIvq+T-UKgzwdaKL9W5E5lPinANJ&VG}<WPJkqtNtx4n8a&
zuGD#rbu2tYCK1AJ9l@ggj~v44Mb*D-!J6WCA)zrv!MdbQ{b`HD&T*&MO<`WpFfTh$
zf7@howmsur)KdsD{cIAp!}TO#lKHKyJKuKCpPQE%_`AKG>E%H4V2K#VZzq?m2PD`I
z_?yrsRC5AR+s;$VirM_`_l~n1&@Zqi^YxA3wWYb<<P@5jh!<f7Hm;mJINnB&wP@w7
z6{_G(L^&@WeDY#`qxRjK_{U#I7w`Vq{P*XLo9Ea3l1v+9u%yfOC>P*b9WMnTo!kWC
zKrTbAwhgMy3-so~wqR)UCgPp;rIkkT7NBl-vB3MN5FAy|Adb`ZjlMEKTnE}GFzJN2
z);Xn5s<)mI24#=uk6}i3_eKZwUo1u#6!DJ_i2$$`F{RK1GJ6~j($$c~v@-j$^X54M
z2mZ`ahF3&DkEqMNOJ?Li_TtCQoUNShH+7U#BchT)n5ODftonFsy>nR}A#$=KJ=Taw
zgb0WDI6{<cqgV%GOxIi{eM>;yR1^hpx({FhF+l|RXmwm+t@7XM*eaM`VTJkzsbUdS
zX3lHR*OUW9R@Ya!iFGBWg$kDRRE&Um;iZFV#t<I&Nc9!17%<JYLV~8kdfB`+R78XA
zuhu0}XrPId8j#z=%>(Sk8AEp#L<2~t`I4fGSBYRsn}t*zc3B4;?w4u#EQq8Q)9=3m
z@?;(5-p*l6vKqy|I(oo+w}4o*2ZDWER7xzH@Y|Wk3IrV@I{j0i+Q3MW<>oWL^uu6u
z<%Ed5=qcpqt`Y{!ZtP73z+{Zzi<KZ}=bpX6v)D%-;`xd=|B+iotH3m~Lnm{m(49WU
zfPdJX-HdcoYp6XGC(L_c)Qm`Kq?xe>5_3FrpF440RLZQx1R0pOv>fd4oYREEMBN~Q
zl$gyeheNFBmkT3`jq6=RE<+@BfYC7$yRl(#AgPzpw8qzJ>S)G^_FB^xtYm!O_9XG{
z96C-FV{%<CmRzc2X`No^+7J#@f?=ez?j>@CJhQ-~lU`ABUDJTbg;WR<_cc$mJ-A6-
zFpVfjG4sf~Byp~*C6l)SwovOG*<t&dYbzy5VEQHW7bV*Ka|}JQqx7Z{VPIVQYZ2Ue
zG0+H!-yzuJ6y7q6gCaRY%6Pj`)Pt9W`TI5lF*aQqIFW)VV}pYg=u63QUYQFD&)Sfy
zPV^q9PE|HVQSft~FTkKvr58_kxJ)tIG$jhoZM$NlRRLn406-`NB!zn(^<=4b!KxAf
zVc2kL(RT3USp428i?r)^#Cv?Rg|hL|^*Tmsp+L~qEqey^u|G(G;r5{dl!~(ZPInL!
zvTz?3R{&dZofXJEJJU<N1>Plcx02RI&2oSvj+x3Zaz(kTu$rphtkY7g%6W|+<5>x3
z9A%6|%rDV<0t3AxG<Q_p`DP*>b&{IYt!+8eR6ulkk_6`}1IE&F-=a;p=RpvyvEEh>
zgb;jR+PH?b8Qs6*&qD1qwp^XkGBGOj=U<T%A!4GmUawSNX#o->Rn(BQ>x}mb7-D4)
zY35OdnoHXlHC6TP!B`j(QrEfa!mKD14Q$A6?DwT}i8_gnk$j>@7Yp>%gV#*GtOH%%
zavHOQ<$+BGlRscn4Zb$ZQAu`ewf1(qS&X7Iu%n-tvg04{eG9{qFZh%$&hc(vw7kL>
zMLw$ViJeg2;B{dD3o|pV&EZir&hm$k#ELEK3a1>en-JT;wl>04OqNaKSJ5z@5=GM}
zm3`TNI4FV<*FZu`)tTs19Nlm7A6G#7c`$u?2Z|3v+;tozaUn?8=`<&VmUYv`s$x(i
zaeDb#aUJ2cC<06-ojebR^O*6q@*OEE*1cU;!-s5)v!_O?^F=Nt4ZEL@s;21~3)*?*
zozLyn0<{W>;PJ~tpyh5LKaob9<&#K}_3&cQIGqUFzE)uGo`5Z_#CYVPCt<oP3S~5W
zqnGz@lWR7dUMt!`QYEtZOKyGmdZE9A$N9J4%%yMvm}Cpe8!RP!$BCgDlKr5OLOw;s
zcn7!mUFT6va6;<#vPjH~niS15!#{Mq*-&OfS-vGTvW>fr_^x|5kb4|ztP>Qjyb3fy
z`KfKL9#Rfaw-ZRwL)H7T;uH`i*p~G68nb4Hxy?VMgcjCQ6I{E1q{HV~<l^uG%@qy3
zTk3uFK=6=w=}rHo^dC7?b&b%_P8e2Avt>Xnp#e)W<V#7Jd!0tg7_P!3)HQo%fz(ns
zb9a7fmAy%&i6cKQiWyBmZ1UyC&KNHNLM!aS>dBN2S6P6SK-B6EX$8cNbZnI`!d?Mg
z%C0l1m!d@Brk$U*=8crN`Jm}y$-_XG0h&s2JA4!_jfPAiz?EF((0kKV!K5Toh^1WI
zWbtAHJx}t$zX2TnqriEgXae~5;wcI#taJp5^!r`FrHgSuWc@}Y^eRWE3>0AhqUhwO
zT|5ib<^<CNP<~gs28(vYy0jyCvkFb~PaTtfY{1bBG==|?SZY9?%PjxP69;9bXp>7L
z_dK-6U(+7B{e4OIoKI6lCxE#!TZiC2ywu7U^maQJRH;vc7^sX+9bq?2yrfxNGomc$
zHO|)iLRhZ>CnF5!MABb@C%#OseD--!LJ(;A$o|L6)@vhg*+l^HnUfpvg+7|6FFt2}
z77PoQy94@Xz7}aj{K)}_*I%0W;=-)fvQR*sg?9~br$(txT;7F{SL*<EEZh_+(0)+3
z>nQprlC@BF$ErB^Y%zyo`q;ow0MvqVpFIwDrdOS7IDcb~TRv>j7Sk#B00Cq4Q>{qZ
ztkzY_Ku`>rnzAp|9>i5m)$G*E2n2-+XMEOW+}XKHRik$4oiKjMV^hFrw)D<ro|?_g
zn<MTD+A*QTPUazMi0Id(8YG$n)EeQTvEZT$NupZ|Xn;fGs+3(y1fxF{$y<0pS_^jM
z8MwZ*T0|%iVb~`q80GYm3}~&()(0k}w)k3<EONJzk-`cmS37~O*$bU-0DbB(uOIBb
z<}{J*_JL{ddpBo(zLFl|<XFTGv@P{D26xI}=jW)H)b04)EIjSiJ}L&%JG5n0_ulC%
z&lmt1962(QXOvu0YR!mF)X|%lq3tNgEQ969x3>Oidt8pK2UAern*tEp5%9|;*Hr5s
zPr_6&v(vyce~(l;J7mhc@SRy~p)YYp`Si?CQ!Tiy`JQTCT-2AKcA4VLJbAb-K~?N6
zcG`5%a=nb5Kp^L}9=9B|r!UNPIaF|Fr0zYCaJl~HL?VV&@)_xlewyaRtdS><UH4*U
z6>w6h6elG!euZcJe3UD!gTSL+;{9NnjPDv=^%1vJfxlIu*oJTQmcFUPt(&-5CA`mO
z#muZ+&knxnThYU1Q)<s4{wT7ih`G$+C73uYnvH=!t2M+lD}<l9H-9V`hs63-A6CVs
z4)uQc+f*V2`)%@yC!}~~T0!(K9f>LEAu!$ng&-c#9goHbcFBOU2HLVaN=GUwXl7i1
z?$GeTbaG;E<`_v^LHHF8_?m|ff8T>+-K60*)HQTonE;u_x+q;n@U|earf&komWj#8
z--u-2A8oM`r`@6u4$AHQXxK}>|1E6R(3o7_oWkDBojnQ|Rat*JeaFp`>EoD+5LUh;
z0LzOzDMMa=oL_~Y_G0vS+Oin9W;bP%N1E{qygS%2+jmU)cLV&_y4-Gzzq&X#dY;CL
z4b53Lpt<Pf{&k~H@qB>>`L|$ySaCv)bQCtgy~h=8f4cJ5daWvAG4NTMB!~1%NSD)M
z5nifReKe!?Ipc%r^#0m3h+0;RV^%X0vtpkpqun9-dyL~pdS@P8)TeB3Z78A`glZ#x
zOQMB-Wb7>eL0Z%bn>&f;7CHf^<>qk*P8jH&<RUoQ?#sGlk~Ny8YSq2Ps+X_p;St9<
zjxP+WoSrlBtPhsfELB0}lX09UQ(N`@g3PXABXd4@>nzS*{1UX`@hIzVRGvD9mTFe9
z|1VIESG9eD1g)v~*P}JC0kC}c`R=(h_xw5tFKNu(3UA_+0~Vee55ebOw})}vzZF+O
zn?Ko>Yq#oqIu#qiQD4oA9BuYsNPsET)?~Rh8&L+Dkckf!yp@#=pKwGW=uLGX={*~r
z(BK%(hZBXF!^AA}?E;54^Sf88A#&h-@m`l-9XE5tHpTT8obV#Y<#9(YH|?uwXAv-l
zJl}!vGs%gZl#3KE3<tnrW%o+K<N5le_M1M)e?Gc-D;qVyFCQxk?KigpqI@8cFBGj?
zL<lRqh@4qnbCXQd*eK_)6RxldWv4T!3Dm_?sjpo_zcWMpdl~n5oQR?VOXagrXz`c_
z;&xTAA$2%uyvXV2T0niohmshuL`5RL?V84ko;sv#$V=CPTKt+eA(qFOP%@Yn?(FKm
z!})&zz07s~+XelPK>v@B=Vamdzx-zQ|0XW6{||{vvcH>Lh&^|8{j%B1bh3f_>UK^x
zq*5EHhc*-7lqrX^4sIB8iN=XdNxWzOF+sb<fC<JkRwl!e;i>2)^B2C}U#><!i3%Ce
z5Wmd7b@_Ef55F(dsx*F7)BRTA53jbWu)VI_d|p=KIC<N5^d7_;#!JRiklNtY1>f2`
zztGVJyiL<dObhNuZ%(N!>??Ee7N{tBW1H$FW`<s7KcvuZtKtNiSFaw{>k@zSi7KEk
zm-uadA&@1Egb{-zw9vl1sTxhgmt|G^%JF_$5$?@))sGBwGkOWW?+4%yJ}Y=tJ*<|F
z^*GR+SKoE!lZ|tE5%7iXicEz!BeIDXONZ8?Wdo5x<)aN+cb733T?*ZJBN{t5)(OdL
zM%ycg3N?OuBZ$2eOZj*s6&rUWj^!^yHM{zwlI6vWiK}wWWtCswaQIPsT#bZ~%I_cV
zQWFeuiR<egSUZ}=UZSa|1GQM9`tW02VP-hPz1qed<mndE$_eLMje>ddW~S+sj>yuu
z<qQ++!3AFBA+M!0_u_4TmkMt2vkI0N;|&umr}kAb(@I?3{<@Jy(Z~>?HW%?xWJxB-
z<YYMPcVb;y1Ad6KndZIhbmE1U_MmU|dNYuTC%tG=b-ui>!=ECoib*Q4S_JiQi6u20
zHdlG`IV74IX2_7Q(k}`L@7P`D@~qih5-t;fH4opohero*JsjTP^MUc-T)IWtW2TB`
zr=aZhk}<%{Du@mAcG)8U4){k+@nkE3PhH;JHCzzD>GDGfrF@(!#9ZZkdvnZXaI{Jm
z9WqSNpF~58eeC^Gg}$g}hZ<=D?fU9IK>sRBL1FjidvaV~VT<`C6Ol(j;!!c5`;}|^
zS8>ON9hDay;ik-tN@j;W>Uf{uN>;z=N-xxG#sFVP_^q?>GA#q3MtyC<7kRjsZ?S*G
zI+M~c=iE~%joVIvm+eJclQaop1)|+3b|yWA&mKc?xS2=5NO9=Ff}@r?Fk}k%*lXoG
zmv0FC1mDs^Wib9#0OmbQ=vo!$g>!@Sk~Nk_YQ*q8)9=yh84P%da5C{Z4P?IV!2tFs
zX%;^rWn0lO%*go*qF_zL(XWI{^8>(3r2dwt7F|UoCY6k02J7J@r$dHwt_^=dsu7yt
z8-#l0+kVdEWV)tImtg)bB|f*%B7&i0O8B9nPiDi^Pf$ZXT8sc&n2!n=c<EbWAWM>z
zZ>2TK>~Cw+uaT5DBkAc(IaM!^+rD1b;nw|>>b%6Xcui4yKw%z?NQm_@v=tG2#6VrR
zUb>S#O#zzq8qTZ|1kh9caSG=;<PYavXM)AUw&Mt}yK21DLMEzPDvh!{oYJ(WOxkro
zOm*yjXiAkH@YS}Pu^G11y;l=YpqM-|u#`XdrrT6Al9#(W4xr#by2~sZfcVJN)a6Jh
zd@M_3CdCA=36$`6D|q3)Y=V+X2KvHCYA>hRc~dlE`iQ<jfr(EoLq1(abpx29$*`CQ
zT|{(p%k`$SH9tX9FdxzV#k3IBeuG690Kc*oG}fH4>b4WKFp5XTluMY!sZC-|0ar(!
zm0SEq1$nzDa3VbZj~%LYm@DW@zbFh!IFAGQOf-NqA89w$WWl0cJYn{;R1G9_nfrCs
zOH`3o%yYUPnQj2{Df$c8ZoQC6YF3`Cm?PufbHs0Z3Q;;Y#q{IC!D<{kbNT!Z0)nrW
zLUlOoPLP9Z3_)|)nsDY*NsfTVhVrdrX0@DoP>9MS><h+_@)YHM#X(HtIK{U}dZ3P0
zPWT&exs@JoWE@e68}*^q4UHt4N~tcHl(Xop0K0|=sMkb^r)cxswPrJs(wf%>jl)aH
zOJ$YIa!P`vhGj{Bt7f0q_S8dU^%}Fi`Y^lO%M_z{oYOU*FQt*xX8m_sSUJBse`+Zt
zpILOxi$qe8MUg9LPW&o%nVa9fj(u)9x_MV7tBB7e!KFrc3TX3E{syq>j~NM=Ss;9>
z)G70U?!a}UKoly|=_5)aL*$nbjVc%FA?>nuTjFy<WDs&m8YMciaKwX&T*Zg*p@B)?
zh&}rOd#ITl&Yuz^h%awl{O7<mnoRT*2Lc$sm0virNAOye;rS}8IH_EPTDhnSl@X4~
z6PyC)H4bG~pvV{04Spt&#nuqEM>|2n<)0_Uzs#wJnenLu6<$dEPA#qeIA~mNHWB-*
z8y7G69)z+rb+?wDhj1!d;K>}($Y8{_<B*_SG)m;d)du&IMUSEvGKWp-8LRjEwcM?l
zu`Sjt_N4KC7tQQVe-||mQ#INw*FK0FLe>;Daf`EhKxT5A4+Q!$EU92VF=qL*F7lG~
z&MFPKKjH>lTcj4FKe1rSD%O%H{|)1Hgz~OTSDP<4l67*P6rnS-Zb10tboZ-4Eo5#C
zf!y(7B&3p*idafcef-?NLB5<@=+s4zAlVH#OyhFrSuN+>N|(`|G~PrS?MUBW-f`z~
zO|C16&&U0Ic3QHRj>>u{kgm_P1t`Ox)Y~KU&^}<#_FR{*3%Ug|1TK4QOjIXo>{%`O
z2mydeon`Hjh*o@TXja@PreKEM7%8R<3Y<yWMksPX!=~q}Hs1lF!+Jy_F+y(64uNK0
zs5lvP1<MMfc>39dRt)kx|2f2<mtN&YkYi5g1M`hJ^^rkDpXTbctt-c}D15aFT)9YQ
zmpRn}8uF;}vB=o2B-cIUqqgWigE71XOxv&k9gW$TB<kq(lQSw#NWf@v93ax8pzMHN
zW5y7WdD@2J?wOzVT`o(Vj3mnsXWC#6pgd~8%;Nys)C%!}P1X?Q*c^_KWmH#I%BD&x
zS2V<v8)5Uf^nr{g@$4{BeJfc0?#kEAAA@H9x<}Q^lyPnchpmVdv*FrARMoRC$oL#c
z=%8<8QjWluhqG)>Y{l%Afyb0JFtC=Q`8v_tN)XwvIh@*&KyH5~WtX!B=vtU*Z?^*Y
z784;w@U@~V1lk&S4;vNFs&!>f60H(>emS_oo}KUnOp5~ghJD1#G!-qvtUM4;1k+im
z85K<M>7%;mnN0G>*zYc-S6?Y(>I|1VBN;48U0g9+nkSap!{V~3i<%uxN4h#cv6<v;
z0A)+%LTja+KbJN+_u|8jl1||G>ouh+%Qem#A%T@{Bcl8A5qeButB$4yC&ioobO95%
zf<5&-BfP?&@MwLj?YO7f*=?7td_%}G*o1Pg*hemGym{>mzF5a$DtRqaqc85-n?;)-
zG%V8bOVO5hC}s*Y@wk@)9+o`4981XT>D{zy(Jpnozsl@)JqHjEBxG-(P|xz|VZ5cf
zzhpTe_EFCKhc(y#mB6@-n393)ss=?XHafm*&ef=(AX;HALuUzwvhhAuQ<x<CBq`u`
z&%9ifb^2#bdK0TuO-kD&RtB{%x{TO70y9e%40{rAecZv(sYhz<j@@Y8Rs7TWY*bZX
zy0ZxJUPC)A;E?anTuqkIzo=72x<MLu;EDom%FfX6!+d>jMo|$Y_1hZBI+qCtYC(f_
znMZ8_l64a1GB`QWY~nRGe9wFDq-3V(vhzI&T$IX<xWZS)s_gH6DNf>I+_>%Imlc}A
zb(qM*klj49<ko9o3tEr7C}-|y)R<g<e09+4=5=JE>XV0!30-v8uer~aQbu-BQA8?k
zH<GTH>J6ac8;ac;C8sE=i&R@>{OM_)vc_wbze$*v!WE{wG|Av0UWI;;%N2Kw?7LJ)
zX$-VUX9Bp`Y<U4*aPnjyJ&2xDDA^2CJ!~<aZs#hu?xitmSVU31&Q4us&m~))Q+acn
z?oofF?=oC=nnQbJTpu!r@FF;N$Yu@fQ$69H8+xyK#C;~sx+dfEtIPCOhTM4=;CH>2
z-Xg-Il;(iuWzD3x3isZFv`SQXR><*m|B52wR9{7~uZp!eMv}`j<1Rd1xUHza`M9p@
zV&tU$qJ^P*SxV{1%Ca)zCMQ(pL^6xxBixe4nSkNWHuaiczE>LC#=6N01w7ZNTZflM
z=}|n*v6ZHdQ)^>vXOdRCreb1BH@v1~{X$<C2hFWZ{<@sxgk8Akzv0k=_A{VU8$F0B
zQ7Z^M4gw|Q&Rm2ZNv2zhP!zP%$)ig5qH4&Xl9Or)$c=^EaOK{y7u@GS%K{tQ6BAOD
za^$+QDkO+n4#a$pZ+Oi0M4cjz<7B-!>c7;+q4+I80#CqD8dCqWyzTDL@@j^kQ^YO`
z#01xiS^#%Yq?uW+nY0%nH$bKgS~3u`Tx!3@Gz7OAM><<Uchz+P>?@@cuoZg<WW7<b
z5c#+!^swA|3gS7}VV=JqOB+|=?Y+LT>gV=5z9oMWbN*Sd*{9M=l$8H>yA7Hzf0P;;
zKDr}1P)Igc3uY0%SkK0z^z)O0;%(vBSpYX;-5XT2;B?XcIT4dJRnhN%<9s{aN2;=9
zX2Il==1ao6GPAFoYN$mc0y?aat6N@<XJO%x$kmg1k|7*3w-`d>;~;QCrt}Tx!Xcb%
z&hZtQ<u+IbKW50nE>&-AOP5R~NNQy7YbJ!M*tyEIe_(c@MbVqt$FPASJXXMiSMQ<A
z`<JoMqIE}N(m*;^Ot`8-BE`@ISd2Cp&$wM5(vUv)UqMlR1h^!8-zMY6{L1ik8oZb+
z*4ZK(<qpFn{TppXDZ2LXqOLax5B<G*2>OyG-<J*FTh;;4^USyp$MO}JIDb$jEb%`P
zdnmYJz#eNc2>@;y)a9S860(A>oC&Z;Zr!{Rx~M6YTyMrKsY&#g5~>vX-{S=k3gh1?
zSM8cb#1UjDKC6xiltq20KSoh?OMM7aHF^og9DTWQN*?)>*;SbIsa<<H3j9kAN^aN<
zas(r75;a!UI++^0E?QdA3eUBSs%d)FG`8`H<H6)%*$R4*k<#W9{>S}l9S0K=T|2wT
ziL=i=!;rg7O%!Y^BEJpACD2#99h*;Pyy^SADa^|v1Ypt_``G5Dc%PA#3@DL~SMxw0
z6$dxvjKyBB`w#cn<IH8s*906&)uZ5NBty1LT8%!Nw&Y4w6Dqqx3GIzMrawd-jDG1h
zwC${m@^h#kkPtuU)xXAEYlb~{j1wEMrFSnhlJfZCO`%@XhMM`$SkZS<BKP-X-$FFU
zRpAX&LnB`TDfb*Ti^q-m&feRdIn~P**kvOf5XaJ*_t)1;`@eU7c(fBF{}ny{kC^^H
z(PK82|0lZtn=8crKjR8%Z8>d^BKn;DVvg6-p$);@`z8|Tr6?1L7~Lw%lcBajJL((y
zvHG2wDEm%U{-Jys%gy2LC!*vO7b8i7xRrLDJzp&Geng>zO+#PAy?1QphV0I4(3{JA
zt}64ZY2RH%HIeqXHgI{r(iMTDubDpzPfxX{jWoD7@IG~Ijf}`^fZU-9qM&+4v(v4b
z`*zWIdx=z$Jg1ik=9Y(5#XM2wX36Wmzi8Bq`t*f25|~I{t4H<ee?pR>Oa@cH6c&%4
zTtyqt09E17e!}~{8Xoi%xN2sDYL>o2jV$5odHd0A`D|DunZ=rFjBC94y->>Hze;iu
zxkVgix4xw+Qt?1?oDF7uDZK2u@kj60SE;?cEL?3)YTHg4mV?9pxK(xHRJFL5kHxUt
zQQ7Ol8|&*YG-i_vDi%|5X(UasUVLFc2u0^JnZl+z3Xf_aG{skig(-F8o9OV%C_UY`
zGd~y{qV|}q#Ra@|VpD6V#qO@Btw}e4&n*#5?9(4DwlYkH*!I<&*GL|7js+a(b{yNf
z>R*2p*x8d2?rWrtRJf(b63qot#59(*XUAK@cV&xg@;w$K<o3JU)5}~MDBt-A|Fo{0
zr(C(}!wQESS+DI*wY{PbqNS1url*fn466^w3W)dNbdeJ7xBOu@7`%@L4{5pi7s8~Y
zIi{(2PT-@l42_2_m_YtL9~lop?ol3R^K1Y!*jAVyg9`+ePuUOZw8j9b0SBFcw0NfD
z|FY<(ev^q6dtf}b*Ms`q;~VheyJ0*bc=)$6(^kO?rKI%HElU)pJCx@!PPm5(yY52m
zM8o~2!(HIsgh^3HPca)h!i?+Q)262rRp8ukE}^w*Z3V#t{a9+JHk0?8yG3EsXXoY6
z`A{J>irykiBYt)SpU$Vl#oY(o*buD)gZhyGUN+GWZ}jk3F?z(&a4C{Vsg6x=V{S-t
z)Y3OzGfW=>i?B8RVyuuO{4a`0+P9AklXQ^?$8?DCaqUAi(o3vyT<3{GNHcBOpSJVI
zAJM*8m?%Zo!G=DYo?87O>UN%McWx>66#T8mlq~dyZIE)NtUmQHM9C>4<Nm9&C3r$n
zp&4Uz{6A}_<9w8Ubda=LP5`4HPOv0?8Win7cQYDy{@0~lh#tQG)H>6}1XHihn+PIF
zH?++#+<a7Pdz@C>hYZ#jyXB+Ox^`#+K;}I{M^FbA7MY~K8HoggLAk_dd%Ti$X!!RP
z8c6DecUY2ZY+DAeO#O;`*v2ugSzNZH%mdwO?*QU=w_b32=)>zsx617TR$Fc)WCLOt
zB#u;Unk%&&e3gHYZ}+b^E5%Pm0gJ}=TUo-BM1=W0?BN4Jd061%S5p|yzLK#B5n!GH
zs#Wa%eGWFc2BQjExz(HPz-EY3x^5@5<)>&im|8|Nl)9yu=-DI@7&Qn(OQ)d|0LE+7
zYvu$^=0kX5@n#D@rYJBw+Em7QuZp+~+X?r8uGCyUl&hyXfD@8*Qsu^(J>U#PMGN^4
z33q(i{2O2r3APp$4N!m!i+IE^B5cFkORmLeD%r_nvWV1DN9jwm5JJY|0MOE*ULC+5
z7n<TiKbB@qbtR_w*~@8?%>;eNfba1}C?G=~8K=-K#F%yVe?%v>2oWH3Yt)cEq4Ljv
zrmFm{de>O(x8-ShG$A&$2r<VhyvmZS?pXDSrbZZ1;l>g{1TE7ZYEGKq{&iF)9%;jk
zY>{$QF*EXE`0QpHiqT!EZD5-RpchA^)#lvp9CvP4()i?8LnCIoM?80a^2eDshaOOB
z9o9{(UEM{k0LZWx_!I9W-76)o^L{zruN}DKaHzr&$?^za2KS&t;Ygw(>nI@6ikjQ}
zQcr4<a9ZJ=KlS0Lj0k%>xiUutMS&;yTSdqp5^~}nmR8<D?By|5K8W%X#ZQmWU$+Ya
zD#&xnYBZX_uqKTVeyli#bfLM4$#2!|`Ryq404cXO>(OcuUG;e>p3D*pWsysS{iO_>
zK|$qp*o+qEdI$z9L?#HwBcm1&D2vd`*WPOq@R5Z_N(OPU3T=t7al~4q*z<o@kmO0D
z4#{y*qAK}Dk-Wv}5YMdY7J?ETQJ3o4t}^o|pMO&_#TqD9pu$K`KS*DUwUQ@)xe=&X
z^CJYtGa*b<!c$4LUWaK_FBu1daI=o+KB~R6zXBXNXkZH>4D4vl`I~rUblFdj>^43l
z+b2FkE1Ba<pCI~*1dD%Bl8`w3cTPeXo%0{RO{Y)Ot8Zh@(6^O#ToE$#VmHyYqepEB
zKZT<-CFM%+rBiWa8I^}pw{`#BB;sJEL9DMhgw7iPy<^~hJjrt(xS#~>HGVY`T1FO1
ztyuTUe%u`i9SO|6h~Twh7gGK+wxbr!+%wi%k?<Fx?_4zAtP`drIxplAN>6L$YG4-*
z1m*c3IoPyf-F4=^w(uW&E01>w!2KABH&u;ssvJs(nD4Z!0Q(HntS(r8-$HEvXBA)u
zxkd^mcz*{%S0Qd(p$LHC&05{rWQt88vl5HsTp7HpgNT-xCA(FMN=0QNhCr1UM<{M{
z+}tEX5cq<*F<z(Qgl4);@%c2%H_%Gv+sR-BR%$z7u;%S;m7c?5)i5L`l_C?lfw(iR
z1DRx4<`}3<`3}=Q0hmah$S*71BYw^qunc%Z#;oEJ0u<+Rgp)!97z;r*^_|`of)i%e
z6u@c6O87h5Gqst)z+!xUU){Fl=@}JOL17lzntF@~)t1DANE!z&D-%Z&W4I6jrhOmQ
zSTDYl<kfVA)b<k9miyyGrwxrc;pCssw=kF-m0{;E$07I1{HWD^2oW3^Kq}BKB@(sL
ztusu9{+c4k0oHc^>_*Iib@nVt#wpJM2>W%AN_4~WRkP*Cew+|z0S?baoRav%b3&*A
zYBB8i(DE{t4P^vs?kp|o8~|5fyEPVylV1`wp%+P;&uM4l1<7NsHm}1i3P&t(P`5&L
z)VhX7I463=$#Okz+ShRjG^!Ob*dnD91jAZcC0b<ajX~t^XOfe`E8QKgG*n%Jts1w0
zS+wK$eXwnq!gtjf&}(fv4P$Qu&6y80y!g96Qz;s|!H?(1LhL*<&%wa`DB_w#WPoe;
zI-Xs3=QSNUg_fc0CQX)~NfLl}S(L+G#Nyzu{|$p0wqAdDX>B{pvASz*7tl0456gH_
zpd%)5Nq;)Jl+|#^r()w_-V|6;3M+*fah*Ujnj0Lt2~e+I)6t=XY)2X#OJ1kV=)nkE
z&ZsTL%bBYPU?c7I@JaZ?Zt0D<pJ5tm@f73<-|}W=b2%KI?rSf2Ay5O*szR!k))<Gl
zOdCR@jSeieA2P=zurNkO;O$E{YV5md%{URM(?a7NpVIK^&N^9-$uTKYZ%UWsD|UKJ
zo`U9RIk;};QCi*Y@AE<R+RsYc{(04(^Sp`KP8?N_?fvc*`{&Us0nx?yWIxqOS$A2A
z7guP}&0%`uZbG7L0j}*~kM3DszznzfEiws+>tdC1VK?k%Ztoj^du;WH02;DlTvyXN
zqULC47ALzzS%AivMbBb@9_E74ZQRCA9Bf_L(A9hU?uEiUSDKoHMmtdl%Fd^Pv2gH6
zPO3MH&r9Gnf|t-qEjU2dt&f{C6%;Nk@<53+vIBS^8CPk(A!s#Y_nA}t9Ost|Cttxk
z#iB;{r8i@sAPiTjl=|casA-$BRq`VR^nJw581wyibr@c6#;MkS>D7f?x!t4`Th@j|
zfCX%NXJBlNC5U-)X~Np$X!<~E-kVd!3IrT5TfUj~GAX<?9djq+-M;jQ5R7&FH$S0}
z*E8bS0Sn3;xKazhP<b4vWK>f8i~|<3fvkZtx7amqG@5?Y!7iCu!6?PWGV?rW74=!d
zH+nfnA{E>}{}o~Mxtv4q7us?VfunHL5Dk*C0!rh0D^RJnd|cP(Lzrp4Ko6-c)!1$A
z*R}E1Nzs_yOWvQCm}TiziBz+_ZBnr03?VCdbg|Nlj%BV5=kjp42)@wSOfKx5D<<D`
zw(R46)B2l_AH`7lbYkf!>zsid$4S(G+Cfy4)Qh`aP62{%WXRNXj%-uAHPj01ebz-;
zsA+*g$jsd8Y?Kiq?i6$>RW=mYC!3hjA>~StwTwS810bxs2IEvBbbvADyj{WV&~u)6
zqJUs78~#IW1=>!0#+4~|)X|bfDrlvJiWmGCi^~Frx~RAGM;gWN(+9PpDHJF&H?hZL
zxMHegCiuu{hba+}iAtrw^?Pb^5OW6wQ}J3ZAe|YMspL<iPcViCsV5($biu~1J(URd
z<B1j=F56N2$K^(oYa14jsvk5KwI#!Lt04IcdS`Byx#~x?piJn)#`;ZaCBDRY=(1eh
z<;s0DLRU5yx}evFkYk>6TC97;V$FcrHd{a?x7a<2XZ-w|6V20Aojk{y7y<~r*&0P&
zkrUZvXbH0G)8N8uxwKh#2tm0vg!oRG!rLe09&BXbXTzy>_ux&g)iW)fO?g_$6$h85
zgB5fH4MnSKDapH7Yt3j-2DQuA-1`)Qm4;rWePVcH!EM#B`0xv~qH5(sIJ`7a5R?4Q
zKNlRSV*4)F61sRP;!<!5L>uy#@ND6wH2GqyvJYgYVw+GoE#{AOlQOhk3Vv{2lW<Fq
zTuctYGnZ$ms`mmW#qHgRS!~k%86wDwEc+`fa9XK5WT2Th-+Lz_=*@&$K=8XDew8;%
zT!_2jNB~L?1&bsjIxoHTBvB%ij&F#K{8vv&yG3hFnI}J3@)HgR-?AEau@-!^fVVZn
zI{Ga@1lNA6e(RV+7ULB++$_mG!@9Z?#_|f-`@Gr9luw|c`~&koIbt#j7kD!S4&FuQ
zO7fx64tR?S&#ua4&2lQSl71L?c<VG1W@i;&-QDLCwHJwL2QXqHV>u?je-}$tZ+X4{
zwnob6MSCMFT7ItT`sjM+`G+s1k4kYk`n<-v2_U-F?=~p`o(X9<eTjscQYGT1c0$AR
zUIRv0Fp#<m{+3XbJWgd|Zl<nR<fegaoPAjp^|EQwrn;OYe9#~}ew-d&)Bm<}r6Cma
z|63yeZ|VCViOkNy^nWEX$A5FKIR1y6s|}~4RmA@+0U4l14Cp!l9?M4DJQkZxX|N_$
zD&i3U5giczvUf+$@w4S0_)EL)pscbgq^u@WMS#$Ia`|>*_KH{x6(fJ9=U%>vV%X68
z^cmh+nD|#e&g<0Csk<+&d>$^1WA$}*^v<(1lAkEjm^wH0hrf0XFWEUjYN?S4Cxr%4
z)n7!nYbpWz29=pUGb@V6r_-)%9nk5wb@dP3tX7vCHNtr$HOY?59_p(4f*?u|1&brb
zCx!H9IkGheFUq3+a?RGEFL?8$P4G-OKUF99em&E9X}gYDnTv8M(}V?OyZor<Bzx(R
z*Ff-!KBC~`*8~&ECI(vS>boyA+m4mnRm~{eq}{7CvnYc8{KA~~ny;+TVZR)$LK(H*
zbiwEBFD)*MCVhBwH!XW&c0W7cFY?s?awI_1BqI<RZdbP0WNXpLdZaQwiGsQhVQO<U
z*^OCR*xwIklQOxk`Gd4DYDk&akt9jNv1v2PsoPY}ukKnsEC<&rNmfiIX5GoTAj_jr
zOVXv9P_^jq;&=DEL?D964Nl4L$NQ$IF02P_R8nS!Ub+pKDy34!{b-0AFUeX|nhi{c
z{eW@188j{d(ZrYP{4#sFfWTp7ci?8*_d_g%dry$6DXYb+I_L;$O)lCl8sS_en->4{
z){G+J$v+Ose_Ahb5}q3dqDp3*uFhAiZhJ+hK&EFV1PPqNEKh=xODg)ByCJCZA+UN+
zoYN(QQeN5*NF4!2FV8BGPf<u#+k=3<>LTBK3L@nyqzYmMoei$*nP}Z|EC@0G#a1#6
z(X5b933-HEYG2QL7l!ZKvv!s0h8T<^l{#J>oT7vA*5p`vi}&0i(^A)U!N}~8@>GJd
zPUt#y<OnD1+}}M~he?iig@qJ(7h#`qvC8ZyXN$VqjN}Wm(OVGC2>g>U`H!8_33-QX
zOISUvu(?)D8r9%#u;Lx|0CFK4ea<_F&apym|Aai!pYgJbbNakUC3So{gZ1CYct5kV
z&Lu(vKVl{GAi&o~Bsmy#R@ZnW{Y*}yL=3^c67e_y!9@rtZT7d^Iz8jMy7ytTK+#DC
z5NK~9P}fI!4=K2XEX7sfQ0jEVim-(FF9)d%kcU<PAj}o_ZyL*j>PTdI>Zpo-(Ur&E
z+6)|ytMd;+73}7%*I$^~NH~L?D^Vmx7ht67ss=(#_?36+4J;<X)Nf81ZJWR(H*SbF
zh}@OjFbBF3X+oZS|C!12@gyNg{IH7oj%#DjAap6vzg4~9h|E0aoFc*g;~}(-SV-6)
zqW1@8){PVls3!>RFoH$X&PV0p-GL72XQW(!*Z=01f<{FF;X(+S1CoSViz>5@YO%((
zH^~Zv?>sJS6QxUtY3@&5{{-0$CJu7Mwak?fqg>$v!Hj16nhlZyqD&DCr>wYZ(t@ba
zrkp;kU+M#Dox?T88Ym3g3Mp9tAD<%tO8EB0V;t~^n=QKmFou#f`?&WI2rc|mC`<%9
zRl}=u&d38zTEH2m1yVW8U{mCM4g)@4zcL>C=BSo6NfwAYc3+vqf%oZEYfOCdv>;hP
z6%*;QFN0bU8Cw<4VQ5RfqeSnwBFm9M<D(oXV3R1QzU5hpFhM{S1u6vqd*{Plmo`PA
zYtToCCF;x48Y&kdWF)UC(IkTT6jo#uj78l6;Uoj1>IvRdMve!VJ#Z!PNQk%=WZE|m
zm*AsGU8q>-wc8Ir5*$)oB6^D+@4;x5;2$?3Sjmb?A3O_#-Y4n+HVr@IX&P99m+0?&
zXvGBU?hA=C3kR_>+x5aq%r`sRAg*Tt^+-X(R2F=`n#L+xY7IHoeiJuvxPo#%EZwmY
z2pO8+yUzT=h!Jnk$12JysI!ttmn08}i3j5e*e|05535$#z?>2irC|-$hl3Rnfh7e&
z>b8U32wn!xNwDUV?bA>rS+$yLtmCBU+&mOugrq)>M0H?);-UQB4t+zPPN)rbMpgln
z54yf6^x0aGu8vA6Wp<TE;jE1p7+M(xU<*d$`Mo_C-<-Kk!vGcw{m4i>w#LMXLny$!
z2<KOTvQd8`8LEpU@>Zrb-<~iU3Mp1a<cbZ@F9KCk%=d5Yi@bmal^8BumfyHAGZ<2b
zign*UhH5i1cY1<QW9##<fnqr?`ct6-RZz@b_rCHM(Az6Uy9;HUpl$cjrZQ<1L;PJ}
zBCdXOwZc-eW0NRvv<Vdk2HCpGGf416UE>*1AeOZtk$R$hyBzbhgkO%GuUX&6>o=K>
zAPSm8aaIg}v@bgKoD2ddtr~ek#>trshjJHDXE)yr#=i}qs)0sH*EKg~Z}29*&;|i_
zf;BBHoh{t1G4#&8G2)k4K0=4RD{mGs&%j}*)qtGuDc?wYKmQUACJ1c*F4~Sp813)G
zEp+KKLY)p8OxeVKZ-O);l$Wxtl?BN@PP1LXIUN<a2cqpW#ATdgG9;(Ax-3G$6|h_t
z%eekSq&B;YB4bGqTp%fF7AjgA2XUzQ*aDKS@ce6P!1uoxJEt~504_(DZQHhO+qP}n
zc9(72wr#t*Y+Kti`|Rw+cQgOuBsqCw0nR&({R5@5n-)u-jF>JrcCT@bAa@ENJL9Rj
zZ#s2`1~pZHxj)u>5nu_RfH8iOPPV-^!@``w^@6+o=J)4-vr)uMg?(jKFho%r9=6gD
zP!zVXEP`EOlqHX95$5)yWwZiBonow)IR}gUYDwR}e-!@1h@^VWF^grw>4$KC6+i26
z9|QS)74O`$WcH4e!q@8?@aI>~JyM`^;yfc(t~$qM=~(q?GpkR6r)8>{moH`wI^>;d
z@TKS5*cO~1fq#X!BMpnV{(hoBjdj_g(Cn9E*Xr_F1t?l3h*eA+Qw?U>IaY+{ToW6I
zMrR8=o5Ea+tGTlcBaxd5drNALZU3qZ%_yMMq%AXX-y?w9KM{;YITVtu*`-ZF@&aut
zo0=px?i4Mc+g1kQNy1l#ITw&q&D_I8YP!lc-tp0d)M*D-p{h0yAp%?%XHSo=xZ!e7
zFR+na!2xl_F5FKZJw2Z%-k%qKVd4|ac#dTt?G6Mf6KUnBti%EVNT}UnhPG#o@-+|d
z;~!!mkc$}aNN?wsIwnyL9^(LUg+<k%Vbjv1oJ^T)M!7m3K3<5F2aj;ID4y-KY>hv@
z)qnk&>u)0yT#QA6nDP))1M$AcCkX!s5_g_LA8%HiAjmmY;0WM;<hDalzjy(y0J>M)
zRUor0vQ-#uOJ^tisl=cljzPk*9B2Mlf>?aW@Q35QMF>H8g^PL0DXwJL;q2{&gw*?A
zmX_pD_8kEk*g&-{aK@!LDcsW{0U6Y0@zz&yC=P!DgTOR1&urM;ZD3>I59PWt3CbO4
zSo7Td<ykQm)2jSjc4JkvS}407=Kdi!!32}i)|?grjg5NHM&Qt<iD>wdd2{It3ok6p
zEARc%QYHZwMP5#YqtRFISWcHlSTbJ1QyuvFYO!1X&?n)LrypH_{Xs-DsWgw>r7S{4
zV=;iD4UB-_PCTg5xlT8P+~(f1?DNtt2)Nnd0b2pMcBcF<&#fCQpa$;DTy&VX8Hacf
zk9gc-ve&~91^2T+Pk}L1PrO@D&!>0!qai8_4n$;?bSQoU``WL!mn|}RnV#|IZJOv*
z$mC=JI>Kq)pfWQd&+P7&s`}7H86pMc%U#w^F#%oc%h60BbJk@{vOf8gv`^8#CC2XW
zkiVIfzzh(iyxNHwwh&qGA($T<27}cPBBpzEW&JijhTS%gsHO&X@y69Gg#!slZ)Qs@
z8_SM^X`MGSz!x@J7;!!z59Tk6c+ubSFB<RBJ)usY(;=EcU>8dYQ>0D^+7MIa$f&Z@
z47TWh8?Tf4T@R^ueC;!poHM{EBP}SWm<x>;mo}BMyco<4BTLaf7A`(C^mEcX%qzDO
zQ^F+Ei2tGHrNAD+CX(e?Oe!?I9Y!mPFkWdS(g!CgHR^G~yjO-MCq`cPL7_f?^v<M%
z6!HF1z<R2(+`<99IN$=pXOK?iG_d+Z3E&X~4YGnub+0YF0(cIxKk)?CYs_});yvmx
zU2?@gV0iK*b?FEsnD2QBl)JmbX?ZXmn`EkyEg;gGIAGKyPg;e_vo&YV1{4vv7wpIW
z*sTRZ@(K-BP&qag=G(H=s!GR?cfg2orDI7xLEl4yeo$(w$v?L2>YR3Mv|6$S49h0^
zm~4U2rt}R@0?<|3ofOHHR}-P?xjP@fE2&6Md|7fm`TpHHX}`((L(^U7kPKE)Q<g)P
z`o#u-*(Ds+yTqcqcs6(IQoM1_Q$2Aekx2(W^lb%izNNJ&=j>9#6own-ASLnRkek~j
zxyp{l^}a4=pw~nSe{ybSUTSQgEr_eiH){rns*taaU%-GdIJcphht$V=Q~FX5ohm<9
zOvE_Ce)1XbRmF=v;(%u3A#Gc>He4w5)0`83;{-}GaE-2cPUh~--!=qTmIsVhGVgg3
z%AeFxk-IJ+ww7Q6PB8?b9nfO-4lwN7sxmLCN><D8*KDQtY%oIO%|W@7)$8v{%D@Js
zPvx{8)(7DM8=o`|TNMet>2}VST+HF!La=nDQ`74RCNaT{GF>oE=h%0Ewew9vy5Vqo
znh4WN{bK>5xRuzhyRB&y*3!}(DsVdL<e0kZoY0DyIF1RdoRH6N`E<3bS_c4sFR^tt
z%bY45na4pMCGX>4oPYnhus^qcD_;ceaHhOH-JYm&%f@`_7!5i;bjpg&TL%>>-PAX<
za2a1SGPE12P=+AhwF9NNjB#Z@FF3M9!c!AC$b=4x0srr+;2T<c3GhxHyRf!>CjTqy
zb=Rn8E1Cv;`=buSNbpqn4?{DmEg+17R?IMwg@K0%cP2Z}B+?{0|Do3CXtJ^!R(M5n
zdfMa{2I&g@ItcS=o`c?_r=ruN9qtz^jS1SN;roWRCHzg<mU<rL;$#RY{VhX@@E<sq
zq*sFpX0V2XL4tihIynpQe&^gH%bPhj!dKLo=G(Ce^o*pvtzBZ*3mDvfbl}HrqF7JG
zz{4qwQ|{pJ;1osR;{7IFe}Av&+u#*9N{`-xh3JRAX>1Q4P|CD%c)hb-PmL94^a&Xu
z*X4xRe_)K0no*pHiV{RKq8GYOoK@{dKf@-C1|oCOX(*(#vZ`qR{=Q!z-(wxn{}9#x
zEtdap?#%rEMfHCouQ>i!$g37DZTsy}RKGoaMh2h|ZHuyOXnUZKd<e+-K{qAyOTKZ@
z{^K||P3H;LiImFTmlgk!--gra*rAjo=*2-voaiCu(~q26oDbkgN@B*J#(yE5sEk`Q
zJannQ)Rp~8;8(p~_1$u(*4Mpk82oA*^dk~6CV57(iLZvp&W_W!JOa=u6qU#yX^w_n
zx<WVAmp6zKlDG5{7Wu0oEBt>0%)hI$D)E(A^504(EM}20%MbXMeF0FRs)EBRB%*e4
z%y3N534VPMyP_Lir0<x=Oc@I_P3|Kf=UZz>svEhJqZKY@8el=)ZoleTi%*Yin8HuA
zL}?zpnvp8}hA95i&KJ{V+0wSVdEyTZ_+o{diqF89uTjg_wdz9xanFjZu2pmr8+P}S
z(#dX0xr-#nNhAfNGx|h3HE3)uWxYzp=ar3?D-gd;Rn(U<<Q60CFYK{RGSOH!mkpaq
zww$SBPTR^rTA81DYm2%T^aQ@{K}~vK9aYk=J|#5)-1?gs;q*9Nejo=04=cSmVP5%D
zx9HT@L#SeNA`wf+QOt<q_WQ2$kv6KT@UCl#SWh&2^qM#osTb`TZF+P>frX_O!zxiY
zs2!1h7hS=<A2Q$2PBc}oQ$c8=sRDRDYzBticY3+xEONn9ji<n+z=wMEfrcveDt(Qr
zz!;iw7JHr&6PnA-XkBu!ATo{%6@u1DQ86bO(u4!qVq#CFb#2_Dqjd8Ud2LXlW4%j^
zD9Oi+&S9vL6T@9z(6voMyP_sVnYBBH4lyE3?8M7>0R~bi*7#;1r2czru?r(R7d=C!
zhK20qZdG-GYp&fGM=aDxG3Yw6TFjEsJX7XedI{bUn#?Z6>SLwV%QWcvy5|H?nU?$e
zpk++7I6^vU0B{t{kzs=P%N#&=WKkZKioq^qIf4Y~gqX5RgOic9ur|evvK|M}iyEMD
z|2n2r1ZAy14vR`4rNncE)=9hBPG$n8J>kyrbN+n^EJMTq{)}9Iys0lrrU~GoFkw{<
zM8!O><V1Bp9o;WhQj>u<Sa-mJN}KW{EdNcjmIpIf?FB-;K?M?2At5bMKEW9zlP<&=
zl|P$O&tk@wh!>uX;9Oxgc~Dzsk2(IJY--CpMJSWma`|*(S0XAw5ANX>;7}_52DM+1
z1e}T3ZunHT4Uw)F;HDQRb6VeS%Bvm7hc^cK$5SgqVpf`>_C&@d*bn9D;k=SH<=^tc
zq?vkl2v(0H{}IWWs_fjhqfhDls{N_;b6gclPo9Sij&n!u@n|bPBELh7J(LmAm50-f
zS7lChW!4Gc1yj#;Q20|6zHW}=f*fe5%N>NybSH%8Dho`PL7f7z1MaIoB}kl9z}QZa
z1AxIYo?&SMW-uwse%VA+7P*i2adp5gKm;qyGSdRN-%WGhi?3D3Zp<=~9**Iz&7OHQ
z=+n)h!5y-~3VD)!(oh7r_L{VxJegr|_<6Hz16V(Zx33^Tls=9!8Ji9?)Wqg*44J`<
zN;l&KE2+3r<)jk9lO={L;Tx^cL~l+<#YDBZEGTNT2ZD~<-S}@cqRiS%&Ok2avoRDX
z%d1!s_GhEKk_R@xR(MA({<;D@xFi7tGe3#C+m<)Rw`YM)MxbUr98PArEePV!ktrEG
z#QpHDI=|v*z%m+W4c%T}uLn#6Uw%yN&u8a=SBQfx9t4VPp>C$Y!WkKWgMVEX%@NT0
zYworY|IL2uuBHXftPu?ypYSAv!?_+SZ2x<&SocE1vYvqNLEke&_Oe6dNA0fz^0#>h
z5>I52HAQ$QuWQ*rAa7Y1$>_fOfzzpj96@xXTV|=%UXTt#tp`Bp1*uL@2~NvlNKJJ<
zlcRa(VP%)@^L(QYx<7hNnkSB{ef>ks1c6AKfwotE?*jRns~IwdmU{tJKEE?#%&tw@
z6*#W%Ye(eAjfYFD^VQTAX`8`IgVXMC2)O#+iVIGE!KQpV@ZLfFdt!Uh;6O}0l=S1i
zvDKNSRxttUUGF%66ozyhW-+e2e*oSDkC(1OeAwe+FbjGfmRAU1aSN&Z=oU^{i$S2Q
z<BfTM7u1gHTW7dqF6%lf)w$;ovP3Cxe>ugFmq$Z#tkHZ;5=%7`I&L90ROd*W3(3S%
zOmZg%fcynV-Wd+pxB$bYY7mvBC*?o&6?s74fe=>v5D^rl{N>sr+%p}zcg+TC#B&*!
zEIa~_Zb$A+K%01H)dLXqz3SA=`00N_&`L20L@c=4Ni%~&?;@3^c9b^p^jB$#>UxBx
zCKqNZ%0{ORUe@5@B<hq&at6I&;;_;tP=c^ru#5F6zJ1U>GaUizz92-(Jqfr$SL#6_
zn^68TOpO|)3dW0@E)TevkwiFW+IuP!mU95x)U0o*haDVNSk~&BLbeWWRKF4@vMZ#-
zgbf}iiUz3CfTwert2Pia5GqRAM2~Uo09~H5ObS*3hQV^0P9kbSeDsO5$WWzWz^0ie
zfk7ljX3+7e0jz-ucs(De2<MMmLvJQqVi5@dxXbc&YRQ)e#B2m3%hk_Q+hV<S?z#_I
zRDn`-OfPj{>xu?UYNx+$-U4$t*)>1BvNdlLA-$S7j_f2W?f${cFG28&*EXFO#-Qa{
z)V#1d2d0+!6lfH1lRo6ZOF7JL2ii+r6n^o=+=c3%Yl=TRz~Gt&uA9NKh{X(*$<BZD
z*#kPa46{S_WuF3OoUSM7vji?`fPu(JHbTnv`-U1-2}a$Q*1&Lko~HTj+w9k%H#+C#
zdy~yV*Xhpgz_=D%n6owdN29J_eq4g<Hgu2%^!mB5ynvH0)u@kqxEO{c6Ow?Nz&n;D
zd`He$3V)wuKH-dK#0sN^Rb_MJbOYCHA6}8b%NqUcV$C>qIGA86byR3$FntT8#JbiJ
zShVCAmE>$u;9k~#b{VH5qceZ43{5wKv3%hL(8*-A0c`x&TDHRt1Y$3@tNq350+m&`
zA?~Wm*zr8c9}dbYLOQIlRW)vtW$>3fR5|(_@<fUfmmJ4@MUl)J0R4&am40J-QF${n
zW4KK>uSk<IfO^^jVMYGNJRx<u>8c5)a-nmGu#7v2!DN9hPru(286E{Vi%O4XzA+4l
zK}AS3#}Gq8h`F*1x`$a-u<*x9vwbzT<nn~^{PV}Hg-p=(gdu_n9`<Hb8F;1{<OY1F
zqk>S>5Jd%WZ87U8ru6)&&_RY8K*kvL1&%P7GRK?d3kemtGQs=RJavXQyiZ?a+N#n3
z$7I;gt|qF(Y%Qz32?qxg5btIjV%nH?*}eu6lCQmLEF81JS$n_C@{=b$wS79Ry0u4J
z8fMM$Qbk8lu9CMTMa?2(Gh=bK>23^@KPlAoM}4OKR<4Ve0yNas9;0gmTtfr6kQtF7
zLkou)be=$W?UNv)JL8%q<pNH8Tv5J)XYqW;PR(Na2Q7krJ&i#qsy$s`@Qxj_0oib`
z?L5jl2(Z%!8Ws|LiQ#4))2bI9Fb`jKk7qrFWvI>Z1jH_fJEkjrpQMZlktQHX{qkRo
zDoYp>jyzugn>*jils(y4(F>#8p`Lo4rn-`&wN}BA&OVoUw)&z0tx#DrdFWvEq+z7l
zx2Ipr0gd^~I$Tem^|9xm8ZWY^1l^Sn@B`o2L)dN!RNAmLa4s&k;nK{Nl=kwD9jg<U
za$=TqQ3`?QV?x2i?d@*TdjPT@MHtx2K@d6pFTg%3^janMQ-=Um1tbLwwGHNfnY=Z<
zvD)s1(a_iRK3JBYZ5<#wfjAUv%G(RWMtogbBLf)NMnPZd9q@(c!JVlDSviaID9hOq
zR7eHeppkVFh^lDaX7SQS8J!=wwH^|ic&^fy1Z7Uwe$72c(1?EQ^kmS<ymo_I&*xmM
zv{p~&e>2S#9d|F~S2?88p$*G=M?u<CU0Ki39lHxo)7OmumYmUrRB24Gp~60i2J8#V
zhD4@>8AE1o*?7;InBDVZ>{juI#+Yjck;-9!XR&*%aNa4}ws}JEl0*lY@ooL|!I_@K
zPOBIiMhvW+&-MlGK!T9a2b$exOw1bhXBtFYpXor>%)58Vm(cM+*7wy)3n;rJ{;`(&
zH+;6G(ifww11m2#eJx(b`?LebPtN9ddc(9!Q}7(8?VmoKer*}9R7V1M7i_e^oTsOF
zpgsYPK2^oucSakG<=|>r+*#wqAP~m9ljqNfoDB-`B@IcP0iM5)o;x6b-*ZB!XW}P0
zKmvmh#sL|nSMTpiEKT8VV6Joj!rF0B)$=WlV%1?J@begfs<nr|7Tq^k_Y0)_9vJ<f
z3g^F+%YQ2zCI;63i4FggOU3!W;!^EsZP{&2qW+5wr?txmGo8Ym2_I8|n+2k9z<E)(
z!Mos_MWk&|l?W-jZrG31AL4hMj}r<>s71B%Ard&q%wK%3S-sy-N7C~(z8ijPd#8<>
zGkkLpzqL(%HGKv9Xw0FXSDjctzwMQHHTY(xiGoN(6B(Pon4&LE-yd%4A-mHKNG6oP
z>}l4T%C(MSy^7rqE*KFxj$aO}u&WCz^j+~&bQ><<W_bQ^kY$UGeA!R&2SR125=J@>
zHZ6C{QCwvV+|W0j5hlVrKWSb|rw=P>X*T$IxkvlWR0;PwQ^mq0)&E($Dcd9&_RNYQ
z)PgE%K#E6;oKM{+G26_HmoMK!vrxC6RP7a(^*xIMtGO(!*{w)HDZ7xJr%%<8Fm%6Z
zRr9pUHN0`rQILtnel%BsX+y{lb{6P;VMEdw#Atw@Y_*;g??G5bVQiUwr3wzSZeE~g
z$etM1%yJjSKoVjgwsU<-gjXd@|Ewum^DURg3NGrFF_zwOu~1b<_2{c+E3c|q>o-?j
z@O*8dH*MQ2OtZBVYR^~s8w1%)pd!7=-Xd28lEgwL7Znl_nEZLxp@UBA5gTBLNxr~O
zh=F=_DROCH4k^cUu>Gv#R%bN@qTB+l0bt#;^SU6*D{lct<guLmF_vtyp!`c5qI6wZ
zW6p?%DY>)REvkP}3ZVT6wW1oh%Em!5q>1H>4%Lz?z|ijDO_ALD;6t%YO>~(<qD!%f
zef$IUL#3^9+tpZ$@TFphre!6Bj3c~Xy(GJ#W-yM$+pE>nUZEwVb0CltJq;DjxA&|S
zp!w3)c9G^=BPk=9$~n@on{J*i*b`(yVSYGFN;0Y3v$f(piHcyl5G_?;+q;LZ3f%z|
zc64^5zKpigDY}17WZyL+z2H`E{ZQ61`4BUCwlztDRv87P7lPwMBQsFDcZon!n1+p5
zgCOg8fkUBk-KP=z@_vEu9AQMpnJ*FE%SupNPOztyvzc$C+)TTf_GzT9HUdl0%BIJj
zE?mHsQDxTB5jpFCS_#|T{9K^<{A?sWWMfbSq6r|G-->~{#C7}NyKCD5gkb8R9NusB
zq;s;*p&#t6TD0__<9o3POqgdQrvVACsM(_Xr*6dw6%;kEQ5mn*<Lt^a{qUVzLD#dz
zofWqub01?;8B!tFO#(HVqpOssodEf`0cwgkF4DVxW(zHQ38ktK=LwaJfKBhgnQ`4`
zUbnFIk{#USR=vYVQ5rJ!-y<drD<icZ3l8)kAR*}O62S=zOk7lF1q?D`Qub&dlyiEO
zKucme$R10_XvkQpjy+V2&tR~oV|Iy@ZqlSVlAihdU}XJ;;u!>4vmj>xS&Z>)4bcVe
z$BPjLd%R%pD^w<%-7rjmZFM^`v)#FycChjgOm93AkG?|U@PhqatJJS+1C@4km2NE$
zIw~rgM4h^Crl<_6a0CNQgYQ+m?6)X2Ba)wU2)8+rLkI`uei=kajv$V8vF83ZD5dRk
zFd4L1CQb(mSPb8$$p!%BV!ttNb(4boMS7glELo*(44y-3U)LH;fQE?rb+4l|9#Q|J
zuC6Um5TgpqGCahE$Up`_?0qDD3y=}A3uj^j7bG!=OKNW)zqV0Xz&TD#Kd__{Cm=DS
zT!Ht?M}jkh6B;lHMXClQ8&nu5i9!8UuzWe>4-3WkQIw6!z4U<yqprtLJ}pic&|@jH
ztnC-9#_kPj>W$QjLH8PF{@nceSXqz+Vpe1bpp>DL&>D~=AlHwu-e2Ukd!-?H4|&<l
zzn29db@|%RdFf|jNfhMVzWg-c%XuD~B?+fJw7P-kq+G=D=P>i$?}sj7q{Ou@v^jyW
zKT|FzWyqLZf+iFlapUt-A}6*yVR#Gak8eemFuVgsUb_Udg>%}HF)*AlrbKBHFb81X
za!hDRSvY0Yr#jotwNoUc#ig3~4j5ihL+wTO@-BXGk&=zSn9&Pdv3HRUff-HNShqeJ
zg{5=FC|`JSfpFXc9XN1f0cl;08rZQa>_&joRB<eWv}4+I4kXg{p*&{l>MT?#dNkYv
ze|QE|g?w(1Mq|>W8(0%=A!4l}4!(rG{hj;-MJvhi4&Or!Y>fN@`Dc*<<y4cRYV%YC
zctVnSn=s~?mwt`M4^*DQ0C8EuU?;Gfn<O7fVV6MY00aJRr{Fh};r1bVa{skcW+rSY
z%TR2W9U_7_;s089oi|IVoBhYlT4rquFY9E)v~V6+f)kyiTZsECw~Q{R<;AW4NJy`s
zm2bQMZ7X{4MQM~8e8N1HRQ-soW#Z&)4y9y}+z4GL*mp8=p%|H1AVhdSTp&DnD1Rct
znP)jm6Ov<J99At*BJ;I27aH0XR;oPhiW?oODveN;`9P*Gj^-Z1WskCK_KFB&D1oz{
zRmX}&0{Dt~cPV~JXHfJf%P)lxr_EG|45i1EhD5H#IIo}6eVTgqy^UzCQ0#jWbu9te
znu~D@zgW#ru}xBunAX9{F1asPgk`!z>dp)@;(G_<BjRO`#PrW98if?e_vo-bXs|R|
z`-5&=xig-Jy~5Ldx{mQ(QmrQ14vX{W<1-QDZX)i05bs83lNB(`DbtIFN=rhtUiP-^
zAl{k7oLqe%FUbSxheEF7N!d5ppS^S}c2;&Ea5xSLgU56T#}8T(&f0;=GO0*TU}>4W
zX6JO8hbV5~k4?x5lPtX<>tim)K87j}kAmpW9S@LPEzhF>Tc&tK?h6nkn@}7Fe>W^j
zr0H}K&*_>nzv#dj<OO?qK<F`?+R@$W(N(*VvP(^dCXCRKYN{S%^Vuaux;nr%*f5~g
zVy+1PnW9MV(%m*JDfF4xt~H3c+XQp6bsi8A2hysYCs!xjBtxJw-F@fBv4E~FZpGra
zp88%^2NzDjzv(Z!;NR-bTQ>ie;Ec`12uF5_3%Qg|osM^$hm>OeT&}5GJ4NqxYV?+~
zo2Brr5#!w;WNcDZ*YeK6v%0N9%7>R^O%^!^uh~iq!@6kH9=8gImWseo1;<5sRVLs`
zYKa4~y_8=i^75Qp0r_w#Z9sV(`UdhKk~1!L_kt`5c#kAJL03>us7_UEgjQA<ss7Q~
z-LyMCge$Xle&`Kr0gtRwHNDig;3->Vs>F$9b!#!*7A)S)0K`(O+4at8cJ(sNQqEb{
z2zh$q-aCde;NS)NIsmO4tJxF0CG*hb>9F>0HuTDC?}$1O7|C_V`mVL_x2fQmOFolN
zU0x)>Or`ibwENYe%ViOOF&S_C%`H9Fkmj}77dLb)7by{j^_({vf@|NG(m9~vkvgD|
z_^+PMpkBee(`~r80){NZ@)c0<e|#BX*+iH!b>Di1iVcFr27b8qqM3q~Qw3&w$U=hl
zx<>~$%;5lF3okr$HaF#>TcI41;b!`9wmUS6ERUS1L7y`qau1G|_>Zajw(Wcazl@?A
zfMxG+aMa41cFmxnkK%NB74qwqz|5B;ln0!xb95XiP`N92J_X=7+4Uw4k!Rti%}si{
zC{6}p$;F6Kt^|LL*&i7HAK2$xvh4pjT>twZ{jbB7iH-Gtta;A=<gjr5FF7oi|8^Zy
ze)i-Q@9>qQ(b81AQ8N6SnjjNGmvUpd;ey-@>PcIN(}_?M8^u0hcEvN?w{MqYMO!!H
z%<CC=R_~NtYxmw~DSwhg3C$6|8Gr5I*b%pOz8=G>s;0l1IO~7g`!tu7U$e6Of18T2
zU**|9NN0-;m?YP~56I5=>TZ4mMelSFM;-r=d;InDMsB`rEYoh5l4|orJE`dC*zmTG
z-0pcsST=6Kl>eqmH5^_dDOdCF`=yUiz(D*<5wk?J7VjL$3SI5j3&{uaFcj5O;_68x
zO!<$)()sxl_g!HlZ)z;6MM2h(kaY78sY>(NDW`?lB27fJnOk!xV~I5SXZ1N=-ez09
z`rPfg)J9`3XSC9Ms}^f>?Wq*vQDO>xf}sgI-kZ2<zHN|2KD4(Dtzcd{El<-lO(G`B
z(IyXivPL=aFo)#eMC_km_+7pmlC5c?N05Qs!XUEUnBzqN35}^;G1>6oJLsA2@ag72
zciMQz;3^HCRzxq2H=s1?|2@v8yES;>+GT8PUJa_<vT`=fmVN2iWPa*fquYii6efz*
z#ENc}W4u@45G9-|zD-2}EeXX7l6Ps#+ONeEsvQd97ly1=ZQZ7(NB5V3&d8GFQzsr>
ziwO?2257(#y6i^SVXMYSF(ffMziwr&I$>bx37M~0HDyr}WN*?ak$TN31(@5#7qnz5
z)zx;Sb(FIk0vaUD6_j@PAcp00O;<4JRNp<+Z`jkQo%FKpO`f;@hGSKC>aJ?HW<{^T
z;bk>rQ|O7-yBkANDW^PpOGnVkJoNc#>vgGDVOXc9C|cQTLgB8kzA&r_M6XOVoj{!s
zSV@!jF5FIw`GMvRfkn2haDN6FFPpOQ<@jEs1=#z->t%gy3zsDP$yNU5c5{ysIT|JM
z<n|8X&Y=a3CoZUsw(!^?M0njyA5Iw78h2`@4Am`;2ooG)jkuP0cGTB>^BSG=SL-&v
zhC~V5O!!(5agOYGOIIHjn0s}svSLeWOUOiXyu=)^pf;Lk+SbPLJYWne;5$Cq;;v-!
z0!K3eeJ^DtL#8fdadggVHfcLkA3GxDP{Z!U#1ht93JTR|)X9W}=XKJnaI=>PW*(5<
z2vN+DE3)I|SO@qVfff$1x_B=kDO}V>bxqO6gclZtYz)e1R`Il@k4|$F%g#d2AxD&6
zN&PbxU4@;eZv?u}(SnMFY+Lz77VJK#dVE4JAq{XQAgyF_Ubw@s{U|G)&KCkg5>nYf
z0W^EGnnJk%VejDkEJ~D>z~rt|3LO^85X*G3m`pGo9SC2I@bi$P{?*>E-S|1x4)95A
zl~>lH&g2(C=N^#vBt;SQdHpfgv7n6mMYBh&Fu|1EnS5@MByDm#d9}HIG8$t7m3%L_
zz5!)VDmojwR|5K25%eySBtG}D)KFELO6LFy4N#*)y95PP3Cwh-vGE@U5ARZV<U*0t
zofdJQN7_u_8=)K*B4^aMt{$=k;Y<SpbJ{SB=v;?Ywp=|c>z+`87VAe7nHYRFqQa)J
z|MY^?Zv{SLtk*{ivT|4w&1Zwd8HGq0@TU)}Q?mWBKdhk}W|B_WvphzJ^QNrV;FfFM
zz+EVVoEFR!NB0IY)1S{OIo$5K-5>K;aJMx5V9tn4S|+NuYD@N+=J3MY({n1o727Fp
zQj6rTF{n5^d1V&WSG@NFC3p%XUGM`J(m{2oq_Idv)oh;2<aspRp;MBhtm=ybJhtI!
zo4dV?$KuY6Y-+eDiS6j`^#nP9XXYl<jypI#I@G)?VJ|i2lbyaaScXYl_VJ&mJ9ZO)
zRSehiNj2f2>>qBm0b-8vfwh=lZP87A7=Uje{QX-+bU4B#he~wu{%;0zd<#X7WI3P*
zkuGlmUi;P~?z<6sZjbnC9iozPomA9j+;0D=FuRAV>9TUSJ0d@NCh{PaxVOvcKw8fS
z8t<T8dXC75$MtQ3)5|*v2(_c^Qrg3(NF3gz&4g%9Gr9^;_(z)iL;s96sDUt2pA~4L
zp;719G=31=ngw2C)#T1pjy(IDUsw{&13Y=>SZ@ze;DVS?C>d+HMraN}M#owG0Z17R
zKaGuT+%Yj=mhHY8HeXi)-Zm{*<(&f|LSK$3TDc$d=i(!2BNl)Wkwqlj&*KVAUksze
z<MKin3a3gKqwZt~$*_}YM>u$Az-uF=a{I|>LdVEuYn0kFHJ`1;>%O-NEORB9zgEeZ
z`*W~dsLIKdA2oN@r0>K)J(XHHYI2J$0fG6wQ@p_ak5|!440*++6dr=N)9!0+&o9d*
zZZnnERELM5Ky^D6H^?78ZY^atauIXn%m8<H;o;lQn4QvCert6GQ$+De0ap!wIf2y7
z0AU`XF-KLDBPk@H>Bn}L<xxNH8!au!)f!)4`+g&@5tdIES@JxmPx&4xZsEHmpJ5;e
z`k-rPCYzc)Am}U%od2!*!Gt+6yVehnB&`z(%G~CXixnZj*Q{tB1j;n!U$q5SJekZ%
zD3q`t6u^ADl{8Sn@9x#Wn`+;ntX+%SLPirQbE4F9pC*B1_8}H4HPEyEpc)htY1iZ9
zM@9PYZb}Mh&6DKsBtA;B<!-iGt;Qb%NSb|OpVev~8B31mVk~DJc9ouaC^ey6AG0H{
zQ9c<Q=W0xA;DT!a!CqK<6i}edn~UV?M)JKj>21W?;RRhlQm*sHnhe8vu>4EzG~B9X
zr5Zke<S<1;ms)Y87b9W!55kdBUdZb~KYp#^a{MmkzIA5%^i0CXMBif)^ysGfKqv*C
zLUHuSCDM2@PT1*f7U<dl=wu&pnPrCgru#=^Lgy!cG0F4^1mgf2FEJDWO@seNHdP1{
z4JG?0t%J>sRIwo0ilAtk@5=c|Ut`H4qaU}FAxBLyxP6C8Vb}Jvu9}xJIRl};$7GEb
zNIY{4pq}r8+fNe>RZEl>C|805Lm4GEQ$Emt!%erZLiFZB5(#I>L(O6x2^HIoL(Ok-
zIMvSIE?7%gO)X7u9lt2Fv7k^J61Gc_(_w|<(y8@?+QMd=MI;3fmG#NeuI)vQAJD4X
zHc@Q_k7CnrBYX*&z=`>9%70MCyuHb-OpkD2f)XMrX(=EJEdg=#6^I#%$ShNlp>;`?
zpF!cC_fnK7Vg!R_e6pnrx%K%+$`m^!So_wI9s)O5-683oL7ZfkUid3ku&z;_mZR7?
zcQ?5$yGVIxaIbW>dQBFP^_7z_k9V$2Lw^-+wLJf-Os>={5<(WKG++km$nEGnU4{C?
zZM!<jDCQB0k^Zg?4P7@wAkw=T*^@8Ih(iKkxFB-pn^_bX9@}7*<)yJulF=V2`~E7b
zuZ7wtDU3QpJPn1OWSs$(m3J_u(^@#3pm-WGeBR@}ef~6Xw?OBnn(~df4U}j{Xk27$
zPd!es%<0f(le05Qv*PGz#Fhb65_u0;>EyI%IPRV`+BVtJdBB0$e9G@xU=0@PwA4ik
zSeqhqwm)~reDLiAIOALY#f@rO&Qdm>%@Uy-viu5CbxrrTTMpTC<nc;1W3Bj#P2%9r
zojyhd;QO#Ab;=}*Np>*h_GTB`%IHkWn4+O6*Nm?g>!>1rq|_bXRT?u<(UG}x!69Z+
z7)+YZ!Ys`kuaHnydPk!g)HvDuQ{A4%d;2oqnW;<HX7kjQP1APU2NCN*l|e?h*FRc!
zKm>$(9X<t2{6~lbfwP~0wDxb~7Ofv#H7$G!C(_a%8eL&fgj6davSxthJ#hsoD5b&{
zF6iWQRl}Jj5UhWlcL0zKZU&G6b{NAY)-qvhjbox6rY8-%`ClL*#KFy&VpV4Nl3pm8
z3M-xmeQ24`ynJT^pxZ^-&PXo16EpW6jU7IA2OW=IC>P_q`=mcyY7>d&hi2RX9UO|h
ziI89ySNoXHUT*cR*c<2|@L&8^5F+O9Et#}PnRNQRkgsHhwLd_a%y{yI%$aPg$Mj=1
zSn`-afFeAhR|>IaUnNgmx3c<e=UzmMIX9ISGt`}O6T2S;^=zLTK;^{!v-U=Pw|&-M
zEHC^70?Icnc5ZyfosF!Ok(o$3*lXLat;CBIi6Xm*WM$`pZ2d5zNM56|u*i0^Zgs0|
zOZk%1@%~<A%X@bE0n*M$c3NC-5VSeG-}6HtCYm}jCW4mID~)$RNly;GOh%IGT)CCX
z&@3l|z^yesnAq0NYuGNit%%(O-N(kv!?^Z2M&U~V3OC{Rnxyg;5T*xTTBK<Wq0646
zzi&%Y?LS^VaK?^?<^|3-)xvqnh_w{p^uP#$$8CUTa6~$w1Xk^(n0Xan%pW^?fY>Nt
ze?;MIEOeT2v`6>~a{DneicwY3{HtA*+^$edcBs9dA_NYS9^5yPx2>%e@mkRR@#+i-
z4W_XX78b3QEz5fp^|Z32jJ=vnvw&fbn-+3kCFO5SGd2#|*L;_}6o=4|q1%MR5FB*&
zllDrT>ty?2n*1iA68eGcstwG&q6^WGoBleJCv513kQ!OpLDj-)u?2HI77Pe|mu&7f
z3dYXDmzh<^%N{G@#_84X_x*u^gED!_s0u~kV#^YYfsW>xBmYBeD9;U()>W0gVyk0O
zr&T3raC3J^2#|VyTS~+Qmk&>frWkM}AHAMKCi1~t8g440O|X258r{#=lD8>`i-&}g
zy`|nJl37l0-oFnanBo1zBquXfoAB>E{x^1lKEB_1sXlYpV8_q)*ZA?=#YYr8u1hLU
zdTwg<AsXhTwrho04rmr7C*FBDEfx;ic|nqxgB{gnyGdC(*0xV{q|7*DEc%^<Zc+%n
z;VFvKMFenOSnMM}5?A7SeBgt}{bBYhU*?O7qoj4X166GeSl(5O7nWzONk-?=n8y5V
zfBXG8L%s|~CHy;a&ao>Xk_q3rF3pFrs>4n)SAl`Dt1ucE0fSo##midEd=UR*X4mIP
zy=JxFLcwhyg|4r!@7@0Eo&RcQ67N4n?th8b|6A%}V)%dQ4CjAxPdNXV+>@!qtyRRG
zIduba238RV`rVCK+_FhZZKvu;Wm3wL!36iP2!Q~we$1sUo1A~Gu9GL<;3FOr@{&-J
zAdnBokEiqAH^vBJwBaZ5-=0mq;enlzcyt**tg}9~t^MfBXj0!xFW39ATj)*)U+)6H
z;h-RJ(M+(lt?2qbeVt!u_JP+*3du^Q5%$_Obi=l4@J<o;i8H3DBBmvDb?jU9?&dx(
ze6}PF*-yhiD2mgKEGW_bdcUY-Dw`oBaf#JbD{Gizywuy@2Si^8X!vLY*q!v!(d86R
zO-7#2;cEkJu5ESN#*2T9LG4UxKKnkBPvt+0asJ3lPA22w(<JHWNfLjgr~Pr{pG<$c
z@gfeAJBuE5)QP3`d@tYysS;dH(g3&hU#q@gTYnxxVbNu<4SAtZCN!KLCNV^ui@CJ-
ztKV&4VdCridBb|$*nax7lU>V^_XO3aF70cpE&C|N6IF1(%+DA#SaI*$z7F@Y`jF$x
zE0avVC(&S{YeGBrlpO7Y$IonqwG*kY8bgGu{sfgTs{AYZ2Jq;84mk3d4ILxysl<0U
zxaH@+8w$ivM+HlaQCxWLgBh$9&N~+{q~p)(Gmm&Yc0w>$5<B7E!%QAWh34#Qn9k?7
z;Br~om9>?mrkIgBijA=lCEy|rib_&-G#x^p9R}>1D<Z0OPF~#ME97#GHv{SY;T#R>
z78Dx6Ic5H=h?(r(M^v#?Z(zFKR)gW!lQ(<=aZVcjcY7QBPD&b7LF%4B?OS*4i-w|T
zz)IQO9g3bEBJ9g1OgG1~G0h^M3hIz28pUN$l^@1v`<W?q0Dev17kxZI4HK%2Nv?>-
zrw%h(DJ?oYv$o_;Pk%}W1)dsxgk*9DmtDY$S!^H;Z#?)%jY}vsf!??Wb&}*d<$>e?
z(YO|(pSKcXG~7(fcKn=6gS`zpSJZKO=}rx%FiXH&GX}mgF=95P0(of&2(r>BH{|=y
z5+;-J?1Qp=Yn7U48AY@M4i8OcuNaT3aY<!2=WJNuim*wt)wjq}6%m4$QL9@B5t)@X
z62%m!k+^qor%C7M2AYx0`T&T?`P?+(KE3^V1oE$9DyqDB#K2CsQy9u3LQ17{JXm}I
zydG8iae{fi{yw36f1dy-aM`9))QulF7vjl%E#YxU@H&9iW){<&f`F;%R5$YVnEd8l
zNX%d6-;n{W%b0wG5>Dnn5|29Q(p`H}>6<DT1e|vhlTTGrnzq3sfqR8APlvxSrQ0h@
zCp<ZU&{9iPC|Q)~6`rRRj`zM0KJek{(K3gw%Z#jl{;I09FA5jS86}R>Y4IT^wa3WH
zs7&m<1V5>}foU3&kBk^qR!RKpzmhAaaJ}`xKUy>#(L@fdRSK6dj1!>;F7AAmol}01
zLaKh;n(HM){5{H@>ACrsSPVhnMsV!O>~4JWZaFZm!ExE+wR72LWN@-fddu?C%_IXW
z;*sa+^c1NJKw{3#!uD^~Bb+$nO_=lgE-9AKtj_F@4~W-#P9EJ;f9CN0YSoLy??d16
zLwYo)^$aXit<`7T55p_->U>=E26*E=B=aXsIsM8lCVWiBl)xA&+V=upb&ttwxHEj(
zP*d`X()+@6iMA6*%bUM8p))&43pJkouGUtwG*tmug6h?dHq54&hsSPa4Z^olV6*um
zn3y(B?e&}=h4dIElEuWx!zhdPQjjv*V@)nJz`D@JOhYOfrKc9~m45HR{iylM)u@Mg
zrZm{x{4qc4KG8ChJoy8V!oj;_95`6tul@=x7B7YAh-LQYCEr32@_9vcKtLrdbZ}~-
z>bbD`?>35kwd;4aX{l-QsOb9xN$w~G$c$7=(umRxK(Q%KmUdjtFST0o^hS}YlrwZ|
zf*jH;95toF8u76*WT;o{8yoQ;U!d;m4uOgU!Z){1%on$oA?2`lY6n$?N|6&?@H%gu
zUh(1LSIk;lFP2zw>=+iPcuE9ioO%2jq0phzS=xayNZ!!=Z)B%{Fs%(TcTvTR3Q@H4
z1ofE-w>@n~wgsY|BR)i*lJXilqaVcz$cUsVSHPCp;lH;+!-|ww8dc0L@xME?j3DS?
zrRS*^+>7gKapit}n8EM|kSk;unlf>{Do{5RkQSgXm~KizF$rc<_kz-M_d|crDKSc*
zzp=X1UN)3TxD4%{BSAwFKP|$#?@*jQi_@LU1y&+|3Z%~v5lkZ{qE#=HF(wPC7z2e5
z1tbfNC~4D{MersTmJm$>K!fjoXAo%?;(H1jxN?V9JUl>>f`B_gy}K18KXU0Prl)~#
zD!Csz&(*GfVwOqkJTiGfg=LNj*tfEj0(9?-g-wXXtem)7Ef^GIDi=&5I6h@F!%mN0
z?>{YqR$v~P6oA0ha6CJX@SgJiuo9q@T^Y&GV~Ed@Lrpe2kogroJ&(0Hop1mOUG-KJ
z``uZN3Z(PHWOxbrx5h({oiP@ZfnF?F?_yQz_%4B8=IMqg?zwgLH#b^;4x!=253J!j
zQD|b5gug?b)E@O(>p4kp&dlRpEzh+lcInHT8SS|%kZF(GN21DDau;Y(uq<ZcRZLHN
z7E-W9Pj0t+uXAZLTZ9Zp4f}Glavz<}5RsB9k6#1M(_!D2_@IfvX<pjRSj?G>{Smj5
zrK8xa6ogGD7poUR`6>zQwT2&6<7Dk$UPfB`yld2R$n>3Jy7GFr@N}2M-|(f%)_3Ts
z)UetKW%2Mvrrk4*XniJJhyANIU6djsgQYMbT5@n2%wE2a{Q|VUG#nYGfKHA{3L}Hv
z%)tyx**t9F5|(gl4IgdOifwn9Rcc!*eCNDpIE%2LE8;_y#-oLGPC94Tr0|qbkZ_Dp
zi5dLYL0lw;voUYRL^@6{v9ra%ckgo>TYF!rNv=6U8=RN|uzmd*7H?}0tWD`$jZv6y
z>l=Xc5pA$g+ZqtsHJ8ezc>ZrHGB2RE7^=LHvtXq+XUZE+YQTwfSCmiY5JMCoh~Sn@
zmgGuEgC;IO02s%k3j}*OKqK&rZN2rt4GL|GlfckS%_5BWu$rrdD99dwV&}O|%Tnpy
zp6#^3l^t8=3Z&@`>IGqZdk%S(RO|;=(z8sIAk!%3;hexR1m(P_`Yj&~0!$R?NfItB
zWqVt;E(w9R1~Wx@8LIMD0T56PM_OK?!)0m5q(*7>s<qwu)4pMZH!G5OC>F@zf%4Yc
z{P!YS6nM?JV!q~yZ_B(j8fs#ddr|eWT>fQ&T;%OhGF!nwU6`MWFm(r?6f5tZC);pK
zoKdj0qO}<XKo!yBdP+b+Cqn{^+1W}z&}fJKs?g07p|uQVMQe~}&ha)@UWIl-y{|)q
zKqt*v_gFvW+ab1xU9j}e9!`*bqCo(Rl606Lp>25=BE#(|nIph-pjh^;t4WyN6HHCa
zO>tYdWr^A#yU-Zr08XNM>&B(0rx(I}j@h|r=|T)xaoz!WJHol0qQnbi-Hifdn2k<a
zvaDLv&kvY;3h5N}3P{aH3gt#!ywW8bN1&=Ltfj*8U#~tOpXrlXw+VQ{MIT^Vr+UTj
zhpjfGBTFn&(c?T^lT7e2;5T1s;GmGA<*q?9<6dmkkXbJ%nV@)JGw8s^fAd!GnhvIR
z7j<hzBJo{b?@;jK^}5>d7YG2$zZZo;#ZRM6BD6}o;qKlayW7K4`(kXeiD}*t&=s^V
zMR045-&Zd~wc-Y!a?U*J;5Gfag2*=+!6cQIT}}K~XA7lkmw99&N3AP*AL+D7F~?$C
zR6F6hdPsx50%2rdTvXJ}KoPFzVUvk4{1xYiDC1w-5v}UcvYtOok+o!8YF|Qqi5P0h
z6`=7q00%3ZMx06CvkF~k)<(1wQ38|_6@ZS^jB)X}<s+Dz!H^>zp0I~nO_>>gYpSH}
zY2fMi-h6Cixy7S9jaypj9a=^Y6K+K9L^YZulprj@77i^LCiTv@)u^SdSk!Nq*F(DE
zy`iXUa4OhT-9xJ^wLBl#l(WECqi<hW6ldj8XI0ee%Fs$&7RD^BEr!iXZ9LBiQsu`D
zU68IXc1#&wprC#lvO4le12r@)>Wd6Zfh+38K%7HHv3;lI@UE;rL}oR*usYS}#_#sC
zBc*H{K%3zNr1N3hXDzO*P8g<D6fM^%PG|(NXz;oD%xe`k0~5n~#fMHHA?I!Bg2QEj
z)u#<;s@P&llPs$Il(04XStcKS^y)9V4Px~x)r_E~msg(gcf<E=(X8k*Eex$)O|>MC
z%KEhp&G)41PRW+{smPm<dN8h4jLAA@wpEl=y#Q|IQKGI)(*wHQt|SwrNgPY$B%^5H
zK?|)zCUxz-Cs$!qvi#V8B&Xn?4oO~jttmPdC5-#<)gH37a|AAatAMShW85-+6E*SI
z9<D^Fg|pB98C=0F{FNQoHOvw*$hKY-_f`cmnWxMz6U~8K?oxW6S1KG}lpT6xg>c>G
zb<^kXsCQt?aa7r0RZt6^R>x;2LRll7znbSH>L5imo>V{?5~bJ$Qb#%(4K$H&IvNXz
zI)0rJ7+UeIn2)o%vP#RiQxxvrE*yAUEf%+s?76~#oPpUD_V0r;{8Qu`^`)|2&P@gv
zK$~0y6=|Xdm%~^eg;$p7@r`Yd*0gcgK4kj%ScJlU+w8&BAfhjxSPkjkR@(T@S*url
zV+Cib=NX*rfi9Vl#4SQZX+Yn{z4P}c%=W<fEZd)4P>uub$W<rkoA2))f5b%+a~4LO
zww&Ajk^<pkRov&zRR!d;GaEDTRZB2NALlqK3+u5+>?5$4&U*x_LePkk@_J$Juc{Dk
zcy!XT7Jw&}ynYAyM~Fyo7s8Lp76Gp`Cdun(euMA?W+gn^?tP^utC)$jy1q!dAY0bn
zarRu^c2{M5EYVO)zy(vwRVKtU`9uIyF0#ZVz1pqjwc0VHV|Wzn#w~oCO2vMc19@Yo
z=oQ_boU~p-8iSE8(Rs?4({W-al8o}hmj^-N%yQA3&1EGe$?G5ex=UiS<I-TpE4G{t
zXy^MW(mKF{{4eEWP82R}J~P90$*KUaBy2En1;OS&BP0lZN=iQ-tF}2pv(ssvkv9=?
zG|zTtptgEdjP$h=2liR$&41z)U<=f6XK71u*J?}m@Ha*hnI;p7J%;)X?xc$)I%ec&
zXQ%*_BwU#+bQ!m+u5ra2nVa#TS>hv>QNVUo|5g0JkJGt{V|TV(a?&wpdW5A{oLQuC
zTv_5t&uAg0I(=XBz^-aEIv)M<7Nis1P&j3p_PQ{Sb%Gclyy<5mhl<o<oA{uMu6{JF
zMglOdYL^&wtXbj~HS)Eoe>WEWC!*8!RHc)~`IDHYGu}YnGe4=7UuzM2SP-j@f*&3!
z7P`iOl61L@of!63>Nn5U0!EA`CWBH4PnpW}b@jhs{ePfgwK0?a(=Pab3>X#$*8i~!
z7#aQ(0>jAgzofuyIc<p{{ntBZ)&Lda=zg3y<t*2x6iHo;Qmc)9i2xE2ViEvwKw(Rr
z=d<7B&tYzEE~X9z=gUwkb%QjB`G?a#%OLCrA(uK--2Z8BYA1ty)!aW@@>#jySL<f@
z_<AEdw^KK_$0utZyzSNei<A;cpTv;D&fQ$@o1yC)H+;Wi8a9Xq_I~*KV!GnQQy71N
z6495&m_7C>d}?N2+s~@+d4RIZXahG>God{<MyM?P`|{<MfpCcoBo|vmb245U-`tGj
z+vCK?B{81aQTTL{!7)i>@3=z#wswTx({;RUv^dfj60ULeTi-Y8u<mm>u3S5arTB7$
zCt`)%|Dr1?fo=eP1^s048Tt5VBzU|AmdWXmV+u?#fN;x4(QfKS@vEyg>O}{K{n&~4
zp%g)uF{vP{1meBZrmK)r&FH=y=6Z;<BvL)OJ@8khoe8<}H&yz>@wVjlz(f9G?l#Md
zJPM~xzuP@U-!GxVlIR3QIc_Vj$#Y*k_mS&1>JO>n*=Qi|1&4!Hr{b065YHO0Lds!$
z4Yl9Vlt>qS>Ty~j>Xhtmt7){qYgV_iq6Pe?@6O<JE!tSdFr;28m+PbCQ4Ixkh^eMJ
zYNO_AiUxHSPzdcatdPOE4@83}f|!ICMB7&#mUYrwMDr0U%{q#4_2zy!=D;y`@NJi0
zdg)6ohjJS3)V12x<+ma9kfW)j-tO8AojM*76vN^0eJh_!mZ)#J+T<XOLk|Zlo>wit
zgzH<CwE8yRC1@1kQ!lzuz0SvC@fy5}7p62P523O3SDj$4c0u+Qnx}FF{Av^y0PbA$
zrwwe4u#k|Ytrwm0c!HDyJ{xLDBVtSEfN*&%^jH*h21G@C0#he^p@*yF-6SkQ2advS
zD@yx=?0~d7kb=u-R_FO}VYQlRiyi0#S?hDB&WZK{-V~g}-XS1B52eAW)G|&)?L<}U
z)f2O?;gu5!)^E!sZ2AYY(e%;ePsR{-dK^a5UeUiR1aWYoavl9mf5jHxoPHJvsu&-%
zmU8P+6ki`9|L45G8;stA?EL(23lRB5e-d6-c03H8K@xN$I$;B^Q*Thz!f9*J{K11C
zie<#{h(i$~ZPH7d{_bmy8qDHBNta0H3aW(m|M2z~U|Dos`#4N@w}^n0^hI}vbeD8@
zN_Uqu2$CY*-5?;{CEcOYDM%yyuM3si`+1)C{hs^x9-jxt#mt^rYxX&7owN5^Gkf-k
zyQ)FTe_p_9@=yjGuRm)l6)~{vnvxr{=0S|?n@G@ph0tpjxZb2Z+&R4_FKN<;P9P{~
zJzQdDfBVjTLu>?HZ-A!KH&UjBi#9xAjrvJkDFpt|dwqMT!yI)z1U4gs1`n~`cES~`
zPnA<naYenz>P4##MV@M`S}Zqx&a9g^v%+vH&&2je6k7JBM4yFb4d80#m?yY2&f1<7
zfxU2fFATj&DXirn0T*Gs?GPju@%m-MvLZYZzF4b!l7xZ#ic44?O<@Ra*ue{8hT>zw
zO33|-Oo!+m4X1c<HLWGfYSm3GMLHr@k;2s;ToH_=Masa@MS~$!YbMA#6kxkCz4+nX
zHgRF9ddt@-MWL&$vGt5RBd!vvbNeKS8Y#>oVsTDo-!e09`#yL0zLEi$T5wpWgto=A
zih{7R{m<~caiZg06WHw6oP)ktPZ(srWY`4wx=AXbRtv0HhQ=8VKJhr6O``H|i_C7*
zID{Um7<BiTRmo~)|L$sM5ibOtl4s|2xnQYs{n?NdssmNJfO~)qWy1Vb9$jqK+a#>T
z#nV`1?QEuUpZBe4c3L|<`etdQzJTL5tJ+R7!@MsQtn3eDCa)s<Q6cfjy=aXKFx9f&
zwY^NJAzXbW(T5@cBS#=EP>0_SP%|#}%+a();nl{>s7?&qK0=Lzj>~|4nJQUQO?@C}
z4mK{()KrmzJb=1jqf9kVK~0N{!S{|jOrUPopSGUNRP9qpv6`)d<6+n*P6fom?Ve@b
zc+px8bX7rJWTLll!f>pgw2>jzG?1<y%}X26U~^E`Hw_DCYSe-6k*KoNPv)UgMwDK#
z;B)9180qg|1>=*tF*$SWe{b_6i}f;hM?Ya0N@KAT8s$4=)5?}<cjP+|doR480NXbs
zBY5+{YNt-+SgLZq6eD(M^W{blRDOEq3t21`k5zEtlJFuk0Tcl!?Kx*B;X8_(2;M~W
z=1_{Ld^wIN9o3N=tcJd{BBg#+!K0Q|t$vKC_WEyD`e6guxM3P&LQ8%4Cj^5OM(NV6
za+O2Ej~ZeLdT0rX7A3i5`MZ!pgWrie%zqBLl;43L3y;)rUIut@!7mb5Q*(`JKk|Aa
zA=0}a_N;@bw@muGBfd{7JQ7P%TyKXgzQq-o^|KVu!UA&@CY9pM;$^<swbu#?V`x=m
z#2LbOFDc_wlnZNIvKCN_P90F4L!Dyc$*-StcJhpPCW_c#$W6NTkIzzQROV7kVYE|`
zVe&dDwY&4yv=Yng!hD0z`rIkEQV-Ug4vn|NIKiEG3Fary?rZ^5vaCIi$cgdXxs2g`
zhGjbOc&H2^Kk<I@MgxW$PG`*9z}wlz&SlEGd`eMlbGE$r3A*5b_vx5&s@r2vauoU#
zvvO_J>K;4Vm~e%n*ix2-4q%v^=}HJJe?Qp_x3nhBZDr9m4iaxuFdOJIto!gDXK>$d
z8jChs!2DHMg<Q9x^7<w4;aQXPD4vN4=7PPNV#8w$>1G~5El=!3+D?T`@L6HL&~SpT
zAZKbb*RD&K8MV-HY~x5m80g%*Ap#qyr>vGk%h}(Mm^`Bek%z>~)SP;EL-QukzeVaX
zXcoKWeX-yeE5<F>Pw4&5lFE+|`PJG@4j<}dgHIQwkOo;|1wVuzJAhj$rNye!X~R-K
z=RM+)A-#o#C3xT`UmT5{JE&;*HS)PO@BZ{G`I0Zw!*^L2YPNk}<f<bINJ7)HvIT0%
z3fiZ5DAzw7?AWqot{Y@mfYaMe=(L?Qf95#|-^jFzt%)9ybHR{#jNa%97;QXO6|hxj
zY<RgVbpFz7n$lyTNuxMQW%oV$M)-N_vUx0Ni_2{nw^>La_a_x{y&l9X4#x?RZr0Gn
zF?N}}mPa;c9g_%h+|qN0m#<R0aT<DUC`pwTYA1Od%g{3Y!$Lmknc*Sob-8L6OTczm
zwj|TzO&)P+AlhYQL7h&YSFo(Px#%7g)*;GhDNj$7`nv_nWD_Ym3Q|yx0j7#n3iG0=
zp~t`yp15cB+ol}BeQU%_buTX(ryU=9-J)=_#WAxZooJdKieFHgu~zY@LGjG8NBLb2
z%!sI9sM#Y__l$Q<;_hMk1}<J-rU}zOnr_mjGw6`%*ckv0tp?jW%uwiZd#L!5JsLF5
zeOct{-#`h5QoV1u4W>(a)n|l$_VJPPQqCbsxlh6#F?F~zyau#k1iaYPiC<VWwd>TG
zI6*wSzqr_=qnEaJ>TPlsG#vU-9Ah%6BOJK$jVzc6Q<-Ls1K5w#v*gfjUPQ{)aU0g&
z_`5)cMm}|G>0Tu|<$l9J==Z@Tgohr9*tLg+6FWPtX^VPPef7OMUNxS`v-)b2_e2{M
z`|LeEVR7u%;4DT-vo+#F#SzRfIj3F_#>Q1apU~{_^)nCM_0M?Gq`rUXz*BznGGNb0
z*6n*S>J{61&Y5bEjx%{dh9d+=#{|_X6Td9os^=8-2me|-e^xx^wv;=9X^PG_-JMGE
z+~g|NvB*Z>knOl|^LZG1umI&f{Q+N_t9#K7cAl&=-wa9dqwU2K=ABBI`LE@g=-CGA
z=gm-A@aJ_ztc}Zl(y;Rry3+2i_AlN^jH`RAhoC(@9ClsdoeEX;D!AfJvbwR{f=8<c
zt7x&ucp@v*ixp$<#<A5d@w_~gc>{dA+Za?2%Z>c;PlEPG${v%{>bMt2_FK?()6one
zGBHJQENVg&lW<Q4aaMJVr36)T4I!*fA!y(oyS@f}fN*w%*qe=>OL?qFd3*Wgh<1wF
zDoA9u8v%6>PQq;Z3blK}5L&y9<~;bk$B}2>DqnwGDzsPOrQOGfyhniyc9`5?oWL0u
z!kr?h4k7!$a__Tk1+%SSe=^fVpL7@jycm;B_4NMg%>!Or=ACO9a_0u~m0_7&_wz?|
z#JsTuojW$EptVdi$XwVjgZ<oE5qxxTezb_jt32^i8K>SGG@)cHhdA$EF-}&|M?48z
zkEzjoo$J^<P0k%qP@X6<7`dQP(<1mS1vp=ApK^Jpo2=iuevctfNzP&<I{LG+w*dL)
zR}ii|4PeYlp7wsi1<&~TxfYHw*;_bNmPnA6$fWjlK222+Ltgj1mi^>^vmL??C|~C3
z`n2CYs5WzmmU1<r9}SaLS-&_9JMUS0nwk0dn*9q8>c?wgb678I^A(40Iw{WVei6@{
zB9PK{=dkys$YVZF$qEJpuP=0O!uFEI$tK+n2xNIP3clwZ0LT$4dsPx-9AY#%GJKR+
zp5ysi#_VXk;yvYVqK0?CHD;h*N)wful}z77{(|<>d-qgI(!1QzY`9h6u($ooc&>|3
zY&q{*cf(iGwve*|OP?(<fVgpJSr_zkK=G2mU6wdTqc;a#dALdA#}8EsLmNyoMmraN
z_G`Th)jq4EcVO3p@i70EqW#Fc?jPwgbF%$<q|3<g?{kVUGW?g5iVWH>^kFaU(zxR?
zkQ?~g@Vrf+m9t30U%*snE{u=2_tTRS5rJR<OHr+>etU^^XE?Htn-a5ED5)Zer~ox~
z?sd?Jd)1f4V1oWVY31~Q*5KTfXw=}8j`_pR6Aw49x}5iAyVZwf_P}SlE_p;@>Lcpu
zWP9!|IF9ddX6|~PHk2a;QHDdgXqAupJFA~MzLJ&LwoeNZwV<DVd`P9!kZ<E}5`XHt
zg-e2(%^?HPcrkOjk|AWSjHW<2UNu(VOJMp2n4sY-!d&kAw`4nfCPO`0><gQm(p|1%
zSMeyQQ_W4*=R~oe|E_C2P-VN2gRGz^5*y=Mhn3uPOyd<kI$y>RS!-?!qv~Rf_{e^^
zC#vOxMyskf8d`o$gzJlxUVmMUe3P_bEs@H`u}MhHD$6E>`r`)L;h@$gC7sB$QZh~W
z5Afc_bJ{EWvkkEUMmd8!vHQjPF_2!pggC}8-k{_9?P)d|cfOcHEwPvxfF0xrLV2Xw
zqxEXu`IJWlEvKdHa|PCj)H6ov()<O$QP(Ws6UkPc=G-U&vc8*s^w_J)gBJ^tR#P>W
zhMlduy?!i4PE+Hxf@hL=s7^ylt|5<Ezibu8cAB0+NZS@ya`xjiu%>o}2vHqLRJBKo
zt2TrR*eDG?o$M!$|89qEKeFu;kn;i|{dqe-Ta|I5?Q->6#SF#XwT&NSHYIL*zKK~=
zo%!Kh(ayST)RgLiv26_Rmx36Pd1*<mXEd(o;j#s^qY3F9(cKH5jRb(h&27@qLKv51
zHP{wPC!TE(T$SVwpstgVs(HZYCOxa<efsg)(4vTO;%MLtm&y&<OMN9|tEF0vAxWF}
z$<W408lnM)`ym3Mi@_Pd37z@Bja6EzPmC*2WNlOVei82|G@!6G-VrCnQF`0r#oe#y
zt0#K;*<|X8{3Gf`atx7%4p)`PsUrM%M^p}k#m^|yZXMgj1xE(w#j?vxIAjx_#O(Al
zBl0P7BzmM$({^k)YPqX6zPN3rHD3F-J7^Ici_C6fo_GRi{B!fBQr=qx@5DNs$Q&8E
ztYm!SZ{}w+Y`Hv|@E79(tYIe*lJS4!tDna8ouh&uwJgU7SC0RhBbg<mP?>|zp#N=B
zqR<_&Sf*A7QrI3Wan+BEHWgfgq=TeV0)KMptilr82+5w{si0UE7?|l|_fg>_heDEm
z)FYzv>WdC|olg-<H!r(JGP`An`J)AzIgmB<wn{q5IQkkTpGihQ^&h*XUpyVy>rdSg
zj<m;5S?lEWqX~k6^Ozm&`oh_?Mb(PG!crs_d$&Fx7J@q1cv1M?ILQ4Lzx%oqn)%b*
z%ZbUyD#QEV1%_>STD(_;X;iM13i-^*k~1bgEQ^gjSM{oHP1JRs@{YDc$=6pu)(SM&
zheTwcR77?dd7glj10!Gy@Hiu_=WS9yf_l~MptpL_2g8(!ug<LaUcaSe9SIfuAd{vz
ztB;l-iq9xBx@jDk>KqLf6Vdx97CG99MNcGhF;}xlE6zB}Jew<$++XhvAb9@m=t>`5
zY|AcSWi2=OhzyZ(A;#QQZwsYmM@iE5gRS)bt52>PUrOG0CWk(9qFFB<$eD;=rTp3#
z2k1uDSh8ywlKqa6nT>?hF(`VQMq&HTF)e;8maY@8F;;`<L#ii|JQb!(G{d>C8cN+^
zMkUjnYB60i9ES3{)nOj2rF8d!wz}bf18mXERT<yn+}!ne!WOXRp4f^<?kS5>egqQL
zU4p}v$M8}Smgx1}H{y@PbEKiNFJI)eXTT?8bb|+v<j1zl_8&Cq)bEw8JU!5SA~T$r
zm$Jbp3XaUq^Yv65&-dGbGxuB>s}e6#6F2JAK{7Rk8@4Otl3$JR6qdk~ROgh>#39uA
z{Tav9Mu&Z!18IS{TdLFMT$lSUW$u_ZMd!0f$6BuzY;nwwI9&6qv>iS?rKg-rMO=t=
z&6*P@z+r;~`0&$7tqm}(y~0u2Ukh6!1~<vD+TD;P6-tM8sY=}6TFijMOpfH-dK^ea
zFZdcmjK+a(6W%bTs(1Sn9>sOBWXHG?-rMuQ<_=q-bHuj>$0sMBWpNOAA45&qd|-W!
zFDqGl6o}o6=aVHpo6mg0GU>BUW*5Um*vkyh4sNldWI%JIHI;O!*{Ph|AyQXt;k>KQ
z+}DR>=8AAeYHxYDY!qft{dKaf&_H+9@xz(Oh6--Y?ZDQok1r1Mme6osVK$X$T)Lxl
zg-l1By3&aK5i2e!(?usYGCBTp5hg>4Z*5R9_2DC8@wC9f9xGo=R~Ff^$f2abKMczk
z@x9J$x+u_}!p5$of`7)B*Uu`KUixaXUxYj<3`)_saz>6+hEOFrFv1;{Z0i-9B5nMI
z#>PdzaXr{3^tYV$rLDE3wuVI6m~CH(BM2=0a-SyT;Dw;7?D;IrJK0>fb7b)jSYGrf
zKCZXZ@Go>zj`>S4Ba40DOmr@U=N)~$$O^f7vt<uIe7L#XIX&gyykV%-ScFnrQuTIw
z1#d7+ZxMgfMn9Y*?ePZhGt>Nyf4(31<+)ufq1bG3B6CV_i~Ls}X0Vki;Ky@{+nm_l
z!n7c9;hcmeit<MAWzdK6o78%HR!K;lYoa${B8u~%5f$_npF$LyNTJ4tYt$G|wY6oA
z`B(?4PHIw`e?>&tOVOu3%}x09EoxW~_$u2zHg^##^k`Uyze$)nNyA(4E9uAxtl2J=
ztIBtA8W+292ZUpMjxO0LVXwPr_%SRi(6zvsoTmb8Ce_Q@$ktYkZR+JOa}jbXaIaLD
z&s6UEoR^v|OUqbZGZ?uhLDaJelhSEFFMLB^B$YU6)Aa?BMK~cm6_R4ZWDC_}-?iJ@
zo<wZgB5OU@nSckCDeorOJp6cLjUcEtVK8B!O42lWzE|Epb27&<((-vfJiyiB>nC+t
zz7jRvjWNXL<T`TQkmUv9>BqHHL53>fX9_BVN?~Q|FIY8&U;-uNK4*w9;xczwT~||_
zbeYqNx>LYq_B&J05senCH(ustK8IIj+2Mt>ze)9Oc5l4EycBp!*PCRa_O`t{H`7bq
zO6<yDo`&9?=#?u0Cl{JA7meWe)MeU(5`HWh{`7RjDC#^jHv;U}VX0w-Zref@P85D7
zy^R%?edoT|(6{KP&e2ipFgGFYq%Kq8o54;;hfLM>WjgZ-5le<SuRqR{)=B2Cv0MoF
za-`OsFr?z(aoX#sK+nCjfst#IhCFtMxZu=4AGNafe$yoP(*35N!nH*M4(XH!;{9IB
z^8{bJ_o*3pFUDoDY0(VIKW8?s$fCI0#O+~@;iG9nR9)o>Z%0ij&fq>n=j)_nDS+W3
zVX-*?bD${%4@8>Wk60QlQ1|!alaxb1Vol7KlSZ6hhArliG+ZGt0>8-<)9o}tEkdOU
zIw6t%JSixhsVQkkW-3fIGzxYi7?7s;CJg+$Uz^TM(PUpwW_eN*A#^1}?#@VCvI|RF
z!Q%8Of{%RrTbhvKDCVV7XtvM9^)3|f#819IKev40o9;&7nLw$pQtF_xozr&u&K8Vm
zQl8S}rG~+D+uL+%04>WK&)~>s9<#dx05-LYoX?tMy|kH1^ZT5pA{#;Nwf$tN;%4u(
zmkQQ&)ujTZ_ARkcRZM%xnYdh(86};pJymUH&xcW{8dM@*7bs`@**VOr&<%S|xtrrh
z^L2}TY#ZtQA|SB3It`(bIN?<6FtF`>^@+hP$b*})hQ%4a>gjbJ(>DcMA6_E(7XNC;
z{f^Y+I0kzAnI@(8CWI2*`Z@jHgy)4qwdZhUYw+KD!$T(O!Qp%Aq=%|?_^Mhy5aY~!
z>*!rnWc{AOV-+L-Up?C&G*9{1()YE5iM;e~!IXEV50zb`wweF_H4$`W0`?Ye<aY|G
zl9KXdVH!AU_D*d=xi^DS9#c)1O6#XtvxeQidMy_VggJ$G%T@=5O%PG>MW<y!iJu$L
zYQ&(=4^<Dc7iG2(_)U{7r2<{;y`r+)DV|?Jg-_elP~Ew};vs8^kV5f1dVYG9aME7q
z7anhH4CB$P^?Z7JHX?g*f9go2w48#d$g~!l0P_|7GLmpZZd_ywRw~v=K9&tPfBnmL
zCu^N8ch!;wrf7t&?A_EmGf!c}QX(u;vDlEk)1__RJlgGH#kH4L1!D`~UV()~J6=X}
z*_jaT+A6+HTpjKQu&nD@cKuJVoAUWpWZN^c-nzehjwWrG;C#BeN8)QD<{nuyzF$wq
z7CX{r#8UnkE;NF++V+;(xmnfiXo)5Pyc*ogozczMUOsfTroqVIhRgen5gcPs0h)<I
zW?<Xap>kgAsZ#VMqNY;?N}ss~mz+PscDaU0DeTwJ&x>mH4N(=NvO29s#g_A96QiBK
zvMER|dBjPxP798*Pd4)`U)5mC4}61lyN&oV*WV>F*<W|;xR4s2{K>$OV5FWgAN<O#
zoRX!(r|@ZCv*v`^kyVYXAdj5&W|-g8^*gXnx*>L%MPmf%vz?}BI!%cRuOSdRy{MgM
zHR0qs$6?<vP0N+2yvP_hU?_?%?%ho5Umgk;vh1o9)I9ylk{JNLm^8U$vS1apUj_rW
zd5Z}4He-pe$>k%u3zxmSLxH2R1aF+Z#r`>~K-G4hQ{5f?s^khK(vsS<a?M0Wa#xJE
z&9CdE4kp;gZ^*#43VYzG%9L|m95Na17$Dv`_yDqd7Q$PXlYEw9!pRl<NLF7-P9K(!
z-bTH<gBYxE10{nFj`qg-)_<ji53{qdGBf|R_1~vwVPyQT=4V+4&d;*Qf#G$ohUWI@
zv@8`}LYorOO`NBlIAD=&dzfbyQCM}t#(Gjw4A-N1B}VrvzYR8(BCZQ}dPqCHGx`u&
zWr4wx>{Ov*EBZU8PoK+g&#gSZyxz^W6_dV;|MtOH^Vq_vrc0@KZ|gE2kEo<9YDg-g
zE3HdVKy`t%yh**}7G7voODIU(2<(~aE@`<|9xI;^)l)tb^aTAohJ}dbPvb348|$S5
z^JO}rNmsN;Jhd0SJ8JSzw^h*iu=PoXU-k%^K#bc)H#-3MbYoB{6QLO+Ki|^p@_#>0
zZ<ZRQrz??U?leIAQgf|j9hTK=%@n+)DMI|!y$UPVyQ*~h(xsNdyi{DrM6^Em!xwUM
zb~j=Cskoi6E#__GOmS80r8=tu9B6dStSXI>e6<#IzdFAO5w2)OLi3Oo9`fYskn7ba
z9#A^WVnxT-PHOqqItgEjfMc?ZZvcY(loE?y8QM=w@dER9=7)`^5-h7^7rrrBx5Wor
zO*C7r@mFjfM=2xXD6YumxG2#N7TK^{N_uOC22x1$wY_}|L6L!4ip(Qzw&!3P(1;!>
z&rF(xOnznNRq_P=B5lCeFQmbZ2t)2e`P*c3#K-%mMYIQfvQrDq)`Bz37FfqOn1*c0
zBodvo8$;U^)+x=5rdnN`>mBt?1fx(Q8NPNYt@PE7>|SqsQFUPD>|Rg6c6pYhJxh|q
zG-+9%+V3uI*4kWWB}8LEfF$i(#t~tO>$Ki}A)5p>lD*qVB>zU77Gb$XD-b*f-}h>A
zi33^)izF=wnG_MZMl(XiL0ZwFTT#IO()W;0r?sCxLasEWZiG2PW?sNGEKB1EjYi_r
z65F%yPO`#nQ@&ve8Ewh<%U6x9ogQ<@Cc;NBJ~gRDBX_wDP;z!B8+{&VG$!q<Z;i4^
z&^t%1vBI<x=-f`2=bU8_UCpW^VU$g3NQ|3Q95+^t<MHMK&}|2vPwk()Q_0k*RU>)=
zng3nFUEtlwEOb;!aV$ZJc-`vKhGF9DI}7LvvYgPDlfrk<{-5nm+E8E^5jtZZ`K$;!
zZJo*q@zn|lm>_L?RN>d?ff<g3G<7;&Spi=PT6*kz9hjh`qhq8t!<^Qyu;c+Yfo7{$
zIc$6CQEXA5C9e?{?zuE%&;4c6MfB@S^>m>=_GwQxR-e2{4qtny-4MIUs=d#ts{8a|
zJ6xjz3ma@9o=Vju2~aEsty8Y4%dt|%M<K{k6qq-S8;<W4&}<U<Pz`w7(~7N0yDsl0
zT&r*Vb`3Fjhe%Q@^A=U=jRH&XqN9?ApmZ^<3{bJ?8Es|)A_P)xUhkU6APG~W5Hopl
z5q8HEhUkaVnuZ=O$;zC>$fWZNM3Gx_FXf?Ha_HG2CF@Bao(c4XjhfQoxxXVwdz(w{
z8}JP;0~Y@{PMGZG<t=|Dm8PQ}jc~~A$2_bt`93lIDndkzl6pkRHw@C$wk*0Nn>rd;
zWD{GA@syDHo0clTr*86cI&sA)9OWcMi#f)5bw~dCS@Jo_%-{$TWHR4<uj0yP*u+*T
zh}CqTS#hJY#7_(Fj09>tKL%evOL4~fB;PfTuQ5zQ(0Tpx*cI8ug@AIybor7**Y45B
z7d<-a+lff)UBOs$8I!Bz<EmSgb!7+z@tjysH0{O`sgALE+sNXfQTmJWdHpg-Rwt?u
zkLjN(gh~odqcj{7^i#|%k4R0)g~m}{8rD)f-^{TC4hvQNkxg$3OmFMVc;BJ<S6PS|
z;X|~7d6K;vg<U?R2!OGCf;t3cw=i4TD-DiOfhi@nimac;-SMX4o%f4&zP&Y8udmQo
z{EraYzN5nW8VQY7w?Kjgm{_51McfJUZnWlnEjU5)<kDm2`~IwI=Cna8vWusXN3W<z
zA(lgT&$5D1^1H2B#ppY6ou`*%(lH_Kxk%~DbOA3Ko-QP|qs|uR_*n|P>DPx&GST2@
zJbZfiP0ZSA`O6oh>&ioI`qIz!<|cGFO5yFDFKa$r2m4~ObL{Q5+6ms_%|O4eS(0W&
z0=v{g;=?RUMB1M%!LkFOPqeu~NFsgN7*|$Zos1eucYE;`aSKwPpL6_jk>hEl>2j*>
zvRCs3^wskSyNKqZh3_H0Tl_8RcSKnVU~O6XS?Ff+Usz;5ZM|d&#)G!G1Utfejr?jg
z-C`p<W0i#~l&WE1*v~@~7Iqw;@2ts^*03*Q|Lc%5<Y9})Ti@;wSP9ZWo^F3;HHI7o
z4Dx`(PrU-k-&z(jt2VjN$0EVwcumI(L@?Su6DGVK&XY)<X;=s_5zq6Gr3|D`A1{L~
zhsnmwq3@?WABpihOM^OKhR&XWh*d7Kl7=`tV6!|e9kiU<f^;TYU&?YumR|iXi7*6x
z%>RfsdBiI1be~O{p?ZX)6gwUs?dbAEGwvx@Ok}}xTT)i!n)qWJ_FVS@r~JNck7I3Y
z%NF{BQ$piMP1kf^Bq^m&+NtmcLbGO+!{we;`AN!*L-f@Q4^btw!cu#UFZy+BUVIMM
z>EWH|5o0hK3WGz0ptcTvg1X=uoD$?^u*09~o`}y~v_D-2=Z2yGw9@!I`7Nml=A#J1
z@pC#T3XeN;3YPQt<(!R&;=1ditA(~c*2lYX9G0Q#*+XqnS~|1eyr<RX$fflB@p@B7
zKU*L0vPwB4)uWV3h%IKyPM{0T2{!3VZb3)L$hjWcInN7<`tW{aYz0^23#d4FnIPVC
zUF=mR1XyBG*G#fS=avtkf0KF0KLpLt35$5J77};mP0L$bs&SfS9`<^r@YV@K6#U&~
zT!?><!GRRGsAn?|7PFc`V;t&Y@<BHZSH*M_-Z!4z528^0lWU`T1XKhpZPpq}hrWmD
zX(sDl4s+Z`-USR@4X@h2Kqj^dY-UbCxyu(rMf1Lf<^HzHH~KY+EAP}wt{nG*N+v>m
zc$ca8(3wu14&%TnLkip{0vbyg$HU3}l$V*_{iIT1F7Pm-?1@Pgs;=~7gJ434_}7`2
z&9=RGrctMtEKKnSB{La8;ls~$5l~qg${ejrix2R7R)&RUcEsIXkjM4m6k(HRwzQMA
z?G>y1?`U|Q%sW^HKoe)v6WcM*j5YK#H;@){6{L)P;5u@FO(=QSAC$p|J2K#4TPpoD
zcWq3D64jmOu|7ld0oRtoBPtaS%ML07Gj`okT&RIPwhzlSu8-ntfHO*+z^GA|l~Z9p
z8j2uX-0$O_kLeS$;nlL01`k=wvrsGU*CE$a=6d6k{d|sdx$xU{Dp;`H$fvnp+|s~T
z$jkn&Bx)I)cz*b{#Z0y|Eu_>h^8hE>YB?z%GMk*m{A9)4ia(^e6(_5oF{6lwoK3t3
zJ0GTpb<*qKem@FFwDfYb`7I=@9pb)ch#R*ty<eRxSK=;k&S9FJR*j);H0h0ToZRzr
zdT**Csgt*EXw6s{Eo@dTao&m_QxPJv#)-%nFD!*uB4v8ykyy!X%Qn~tLqRjUr8A({
zaRn?8J54c`CHIAh#^C9kta}}rTJ0QtQAA#zN*qb+BlEUQ;BR2XQ-%DzjJS=d*uGS;
zu8my7oTu;w=bM)fHu4tmO93kN`GGANez-f<_*d8LR#8bLZ_^P{ycQncxDU^fo(W<i
z7^-Ey(7V`wJprAxFMn~ii5P+D7rJB>dTHnB+mTV9%iUC7FQCRaSTnapTL8DT!CdU@
zCZ}Y(m`+E>B|ReXQa21rlF)t%%=NaQ<~)0~q~hee?o+%;f)y<C7#xL<cY~1}fd;Jo
zV4>%OTnpdsf`#bbAeAH#qSmUGtBLsp=-$EH%|O)sd%%4kM&HjW!|_|d&G_%r$}lqi
zm-EU1N6__wzN0pz*%lw#jRaHgRc+jx+eO1o(<71a*4}SbzAFW)0gSTrxT*XW`wsZ2
zacJC>_?ALRw_+>!wjsy!?TLJkGc}xxH0W==x7vI35Y8@NccEuK7@w6J^ri#oH@;10
zHC(K11`^Uv<8F|SV6<aU%^A3?O`TVF1At!|H}=LeDeQV2J{6=kd;**&j2fMHqw?MJ
zGyTd(UgYDq#pgP6g<0Gz)eK)D2_@u)Z(A;CqGIMq1O14et6S)7LRgx-_`cS0y-H4G
zvWHwcX#DBft0kH-xs|1gcgH(1wo9>5NKzH@K23MUGB0mxWO~qA!m+@uM>q6K-Z?%N
z{cyKtI<nMA%HO4WHfX<6)X}{524@_X=kqkSH-XXo6VVplJ!(}|B+Dw$U@~LiV6xsp
z*yPcGS$d!Ao6p78Ei8Nlbukrej+(C8t&7w?JL}%O=$C%d6G}ECY1KslQEjK;h<u%v
zrJ{{KHHAG=Vsl%xnX@*u1l-4}R>yU8nsvp+RlpBuFxZwwL+M@$*|TkScmjsc=UwXt
zUS2h;(DtI1?hI|7w$kht8J}w0nW4S0=kHs5n)7wX<8X;?7eytv?#L=X<un2|)D_3g
z%}+Eu%SP4Msoran4W2*y5R4@DB3Zgb?S{QYt>MUxXvwz3My^mTJ;eVSY+la<Av*T0
zTXvf5WEdS$a?s?f7wt-d6kV8=$MXQ^QoysAL@+m!{n*4j7`I}rHPW*RDk?3f)60Xg
zf;ZZC`{dQpO(~wEC?3w=af-*K5~!tbTrmt(OcV2EruDK#jKXJTDQjXHs^t67Jyo2H
zV_jy&vU7TD@vCmfNC-;gWz@X$Hu*G(JF)>4e3q!9nUh7vx!}H+8sH@Hd|brU{Muu$
zbad@<NcUSWPCRT;-&Y{XGR*tcu4@}>y{j(cta;+y;GTyr7LI!w<te|;-OcB!#-355
zy^Q_XxT3&>=h%B8K=vpZ`aSe(w92|vK33<&<yOM|#SV?!(Zxwk)@NzuaIcH3lSdld
z7Yqj9z3aql6I3h^rT)(0xOcu6#zXf#&>4bDST_&SayX39#u#T|Y@#1YcoSQ*=oX8s
zfzM-N%yvZ2ju7J0SF}TB%0(aQ=of%9QuH%2^mZsNuoxAVu&fH|nfW)9(Q)9}3V6vp
zI>j)tkGV%(9kIlSixoZ)N)C{gAa;76kbXJgCHVpzwd`JG4$rrii*g`5XFWTGd|gsU
z^E!vBWo7~A1+Jef%AhXVs_DW(u)F|~o*M*pF7(+rN9ES^M?Oig7K|sj4fwL2b3V*f
z{$~s9x$un)<j9j0Lc0sso?q<vCRtEdyi-(#woQ3<sTc>On`l-&+n|HU_gB!*p4g4Y
z(hL^u+sAx>83>$Bv_RewI#cI^{h0gG`AgUOn`UG1Gw0&aaZM)_BXtM@*qi>WN$*Bm
z^mc>l<5(KY0U@7S9%>moEdp-bj0iDtowPR{(;xlX%tAvYc!aH$^1g~q%{)`7rhxQ|
zgFD+kGMK{!*p}-qRp0{3%WTV678f<LnO+)UM_-kw69mKgX1K13YtO_bs>B{Hbh5FZ
z8peqw6YVCQJCO|r_Q&joEfq?#UY=oKqhk;cc0?$v>Zmy7Z<}bYv{%p-E1xrD<3gaj
zJDt4RKl$|9`N^mv|9Zz7xKvWN%=$35s<WLA^o}<BY1CALLFyyBHzW!zy)708gE+U)
zCdUI6RU=GA=3JeNSB8$njZbNI9$hAgC7%n#ZnH%yTIo_(Je|6HyJL?5nOG;gj&Cp8
z!W0S>TUa@>L5KI~QFj5Ehui!1L+?p3xX%h(-p@9JRb>SEq4MP6IdwbaH|ghH-gQRU
zi;i8C)O<n`q+hI{A7{3^bZbnfoFaD8h`c$i)k1oTE4(IPZ86g;_gqYTYrNO668a4J
z?Fc7Eq()vB{Ol58Fn6Yxhpg;~C{C99w>D3GneP|PCE|E8?IDhFkg8%$aVK3f_y;+L
z?YxDV0)#RI;mG*Z&eu)bQEwlQJrgk~Ft2in@!<`Sie+5%K##v#f#_PsmnmwYZ?7-p
zCf)JM-WJ}v*^efrD^W{9sc|i~Bc9|%e!(%BCr`Y}|4#dZ*&}u|9Pk}$rU3!MS&cgL
zozA7;Ad*+FrD!#*GEFGr)BFrNyF?Fl0t7RlV{~gNm)C8ynkR10FG)W#DwM0z^|5Tq
z9FuHAAML<re1&@|c?&kK=j|`sa~T1<RwMT@IEWyy>vJ~ndleB7uSb<`%!xXXbuBeN
z;?f*i^WsIfAtzZjP4vYpBL+zHp6HuYzA7T*^BbmJ+nD4@_r>gp3Z)BeeoZ{31rd#p
z5JO<KDg+f1MM*4RKMM<{&_=<apX!N#mZl<k04G6~vgn63jZFCJMm)?fd!Kt!HI{3x
zu$csAShJ(9u%B^9Z`zd88%~Bnj@-a<Otx3*y0Zrz?v^DFdQ0xPr@#63i9AoFIeZ5i
z@U1}f?ahzYd!Zy&_$Y<Xaz0kR?|dWayim!V=5i;31C=>i%^wd{_*k>~F3g5iIP?ot
zN3UjZ=JbMd<hw-${?@E0{A-HJ5N0Clh*l1mT4b*&yz!I@x-^N|WW8I=j-Zz7nO#$M
zvLF>v-4gjM1p>NUlgwhZOj6;)mr1c1UT`_ZhQf^b#{-lH+M~lJPsyf<30nrII83+Y
zrw!D2CFW9cNK|<fluP=HxhJo+c1Ii6HPPHzEYgI{hqRv{1fbDV+B)%rz5lurX4J2U
z&H2$y+nQ)@-ypNz2ingOYI#=9ojP=XT)h6fp0tpjvy4i1G8K6pyt|E~SW^f&KE5V%
zeB8%^-K-hu%m(4S19KsP+Ftm_0(I$%f;*-!J(Z~y-LjNf)?UbDJ#`7eb~eH8T%SW1
zdp(F}U{ymT61M{esH<ox<`WW9Y~5VuBC>^ixm`!)7~Y(95JWqU)@&ri)Dl9<u`uXM
zmCJq6sI$?cW&_`X54Z1)s5)(xr;^n@Dt!H!n9A5SeFah&9fo{m%&|gq9vn^Nxg*A0
z_RD08JmtQ^sZ^MuGIr!y3tk-tnP3>&m^yH7IvfSNEASDQakVt0&qYc%qR=B>69*gM
z)?|Wh*5mE4UL7u;e6V;f@qPQUK|<|K_e=FWdS3X^L}S5S3%-B_ZJ5X~djx%EC_}~g
zrw163T)dc1S%|2WUaY?Ro>`4Ojvo`XzyQfi{q}`XK^jxv2$pO|QUryopl9{gcGIJ%
zjjdS~K5e!+7quQvvB~UAvF~LjB4ghckrO&t_!#@AW#B`}_VT&DnH&#~kO>}$=%X$j
z(xys;4Pc@|FRRL&CF%^JuQ%1wE@Hl7iR|%TCd)iadVC~nN`o%+%md$*$7@)CCi$tY
z$198?O+^HW)|K5kg-Qi(-nwx;;V~^D|FEe{th%<95tjLbSG<9Iodl&iLQ8>z6YPgb
z!3|Uxz5}5-wiho1f-4DZh^^F_j$JICB}948o9*q*@HZ*?aSL-i8t5p#9E*ZCGMqd&
zq)3zz3m)KhrGDc)mS~GwL`40uz)#EAGCn9XT{LNLpmdc{aNL1c6F7^KI866rik?1l
zRVMn{W_zY)9`Uh+ZZYTle$Mw3P)U4MsZcgMI$@<tP40q>_%uY~m8?bbxrE+hp~tQ4
zYSD&U-qib>nED2eFm3`1dc*9W@MaSObS6z6W#LEjSe@Q^v7w4$xw4<ur+lSk(mCJf
z?Qx}J!B*g(UwrdE&SdrZymYa*zYwW=5jT5#ji^sn7$J;;rL@KVR&T*VC7W^As0inC
zO8LG(yrrjnv-2#8Vvv-!UIhp#`0a@EVT(EdmA?Mk0d6lM`x3*gjU#Tl4kq!hFkzxI
z$b$Q}huu%{zI1EfYBqB3y>ObP(^qUE40a-sHGeUaBIp9}QP4BMBxw5N>Q2W@LOhkP
z7POPSz2eAQq+`NM%cjNC&|!5*pv8!P@OasyT+@L$>;33^Z`!1Zy^F^T%nGGDQMDnw
zyoxl49A;Q8y|J=(WV1wrG4HU;#3t2%FTS9lbQNrnNUc!KalB@ZiV}Qp9?8iE9iQGJ
z+z11uR;&mRa^;N7O|S^h(;9~!wJ$mmZTnvST&R$P6$9S{jB400Sn7-Xte<MMckeUz
zq<Nd2fYz!E%Um4U8MR0o8{3eRT$+$H2HN~b{yZKfsF6~&M5W5yG|L^cW`5O?xCmzW
z-<Tt2Tcdg`Sssaf#ulCX8n?AA|5)v`>;|>uqBp!A$+NP-T`CdyW<#%@7HYA>AS8*e
zGQLegCkNxQyFh9)n}aFC;$~J3O`gh}b7;Ktb0IZLFK#CWc7msYifIJV&6GEnWx=Gi
z&9kKY5?J+DtvM<EV3W&}Q?e`kI}-{nSI0Z~^{P|}Ijra@*0&ttP6y&*O=YXE(~`uv
zo__FiWhAU2`>q$+RNf}7G1lF?r8>0a=5MeqS=qw=L4OoKr|R;KY|?6EA}~Ka^z@Yu
zJ^gJI{~dG?no8DxNW&iHJz-{Je|YY}`0o>+Ff#skGoQTBv|V7s0?vcBx?t4y$u*&?
z<unRQyNT^N1Mw0h=|m-)x+FPg;k)zs+s!9&S!A1vv`>PG?JVLpdrrJI4f#p^sYuRD
zFKC_71=T)ohBn!LJW|*jJ5h<B)h;Hvx->MwRZZ<9%Az!+#DpkyR#;r5RrT>lpUr33
zq{gi<td07_^|4gDN;OA2k7{JS;)RuI{tLeJrqID<tnaPbM@X2|qE^5eeU^pbEa3bw
zhjItLI}fzwLG0Em+)$11(T#anCWaxI&aH+wOr0owD=s^4LU_6)K?^Bt=y+!-Yku`T
z&68vVaWu#&8YA6Z*av_yLiS2dPRCKa9>&}hzC)irjkcGG+={_5+Z6m`wlB4p`lCtq
zf;rlxHpxob+vzP<F3r-IvYD;OLYWHQoB<A5VHrjjl@`Xn2)+!Q2u!YWckQiR8{O?z
zD+^O+Ym*hdL^7#%da+k@x%D!E^|$tiLbTT?UJf>7-8?D*As13^>Z-;*6*Ndv9tEK<
zY^2uMX|EaUkT%g4@OaUO+#5pcVYKT_4CkjyVmT4c$G_G0Oq#uqv9pvszOb{NPpz_?
zM@d+M#5R!6q<vg$E2OulBh__rs?6pegcOo8z3}!NFQ3CuIWpnAa;4l0=Zql1i*wdK
z4+G^1gsTLl!{e2A3n~Tt1huLhs-AnD6NR3W){hY67;6`v2CB|1jp)dsI+dgpSB+t7
z?CR+5dWR3x7G570n=7cle{#-bD55Xn%0L5C9W!^imC|lfu&6zg|7_OqiN(l?x*2U-
ziw{FnRjY-}%$&)$r9@%#V|g@xl>sl)Ku8loIzF<<@9n#J(63`+pBK9v+;ZX+zBiD3
zG-AHhda_XH`A8K!VY++FlN_tCfCZ0S7mnQOmAe_^g_!Ic6gvEuZ?xV3$7nH_36Ut5
z(11a+SX2iGPd%AuQJIP;u3y5io;TUNj)N#SVtM@9A>s0LuMv9cef8#t*$bW0EYvoU
zx)L>QvN1Zl8_kQ_*bjcoL-3ON=%!RzN9@>RB-Em%uSN)y@i9w-%mp*M*I<;)6rr8>
zfOb#)$Q^U>MI?;KsUsutBKEc2%-H~iEvH*meWgB;U8<BoI?u6X86hFmR|OV$M?wkF
zC@?L;$jMWOF#U?waD%D~s!s%VyB{iRWY$U0{bQ2yZiAoRh%oKWYPzbt|7u#!`|YuO
z-n(da<Aq6XU!xG4dKuH0$0P~#w@s+h)KG8K8Db>y?dFgcZW=N<^GJX%yDlU-p#<`o
zSVJCd?t9K{ceXXyOcE#^z-*y%;P5#&(IaWSI!I~i6ssg>F_q`wiksc-d5t%!ygI>n
z-N2hF-^cJcAJ)+*j|b^6xDv`B){b3d{f!vUtS@5`LQ)PZ1EZu;8}6`)QNr8p+Vz$;
zN48pJj;*unCN^v?H+Zwt#2!3Z=I&@cH*`6HJbMVHl+LO2GhQows#o^BLrM#spI(`P
zZ{$Kq3|hBZ0<2s*JWm{9?b}LBQ8IU*hY+&JIl;vtt#UeC!11WulF6<3QIIYQIvkv=
z2u_H0kfo9+e1Ww$L0J>K?X+`zB4dnTZ{6{sDa5Cpu-hk&=^_C5E@IrQI-4mJDhfkq
z7vw7C26Z46qkq8cK2FtGvnVRNaq8HVtVz;GVsuCT<6t6Rhu!+uH-SOP^t=KN3*b#U
zi701!SA>vM5X2I_$^FSlSS-~DSz-g~L*8=x%2whFh{#FEZ!BQ7FT4ryc#QmQAZlE$
zE&10*eSFUM9O0=e#yp4z^U6?exdD%%Rzt!i*nQnLJvnTl4L<HU$Gnv~;xcEGuxvb2
z+7rrdW7x)P`c_10!`FeC_nz+Bz>+IMXHPJ3+RNz(N=)(D%Y?wB&N){%)(^t)hDZF%
z$n!gfu`pSZUt?J(6fP}ml9lm8V1t!iP8jjid10JjT<wZI^n4PN*TwJJ{OUvY^OA2c
z(oy`PYhRz|<}RZUqUc)6^CZIdmTwlTeaJ+S-v5T-ggl=l0nu*MSW|?$<(6Z7tz1NB
z?$X2?kv06(Kim^zAD59&-7eNYXXsOt3wHoQ0uNDfhT@6^+JK3zl9s#OtjnhIt&z^1
zi2U`{<NRqucCemCz;fn^s3!1ZNLORYz10XNjViGTK5xbeZXCEC9UELA99Yck?Q)A&
zW;d7#WX;^Zb=q7Oq-?}T7EXJ~rtQi7!L{2};Ennr;^&}Ru(KdW7g|1cCE>tKzGf-K
zFS0}L$cM_8+~O+=tssn|5CD*Zeqd>sh*+-guI}Lb1kzv4z5dqWf1|Ex6~f-A?wj6c
zMp$iy??RO20~W}{gYh3a%3p8%GO{y2bd<k3PaYnCvYVYTKwjU}7$9S8WUen{>q@K%
z8Y#fW$VAM}$)t?{P_%W_cQhtu07}^#+c*+~ZgnaGHyb<HI@uc<I{*(NZ*Oa;WbCL3
zkQaGQ3{W<9bp+}?w*?B{-xyUy;NwF82m{MNeFtLDNcQ_pK(wGcsrNTZK`Va%4rpM+
zzrbPqS3FFh^Zzq=n0^@ZZ{}eFy^a05eVG27yO=-$)W6t=>EG=0i&Fpp_ZRbnE&iep
z(}NFx@`oAps`{Vt7xRNH{=&oj;KN^devQfb1NM2a#cy~XeE1U&%b(*j%Y!Zc!o%|5
z!(Vv*9G_VpZ1EeO2Os{z^XK@?`e2LS@I3hNCmz;6$7j|DTl|HG^}&a~@ccPGvp(43
zH#`qM{E3I{&+(b<!4`kvVSDi5FFb#a&ukC2_zlm44}anLb9`ohu*Gk99(?!{5Bs0v
zGy8)r{=&ol;KN^d{v4m#A8hd(o(CWP#KZCD_{{NOi@)%2JoxYzo<GNDjt5)(hUdYD
zzwrDyK65_U;x{}GKKzM?^Uv{_^T8H>;ko~W&F}Fc=bz&<=YuVN!}H+7pY~y7_;ZA2
zWcUw^{xPA^?<Qho_;Z|QWOy*hUq<@z{_fu){W)4QGX4i%Gcr6l^Oxg*Ip3d(q#6H8
zyMD9MU+Lllq(4G#QCCMXrTa9O@jm+l=C?o6*T0gn-%&m|_$Nvb2Y)0W!0Z>8P!r#0
z)DFY|DRUzSVod}P`4oTTxrzusE4a_<fF%$M6cO%o7~leQwu%V%5j$}4LyzT$$bDF-
zh`{<o<UR;eL}2?N!uCVtzNb}0VE-X<->)blaQqPA_#txNcqt;>w;4c4_m?VY`4b|;
z4=KibCIGiH{y3C2G4S-AfcZQVJ1Cd`<(!Ap{(08I`i}Zmwx+*M|Hq{Xys_Y@Zv@-}
zycqy$82)w<{AD?SA|oTPK9B%FkrUybn*c?2gnL{6Rwro3&ty-LksaawmOoJAzf!(W
zxBs7&K}a5y{~N6L+3P>k0JZo3OymDzkNb4(p}K!)%=_HxLHWP2$9?wm&outAJ?=Az
ze^kePjQ`Ix{xK8o<K%x-$9*LG&ouroOt=pW|50`Kq1!*wxDT%WnZ`eM|9yb+kLvgl
zLHt9Ne@uWMJ@7xP<-Ujfhbq5u;Qr3;L&t^yP!c3I(YJCi=HvU-eE)u<6WD-q0-Ilu
zzT$7K?S23E3&a1?D*t8>A$<p9Q0EDdRZ~<D6s7@o9QNkM_V*pCh_QpAy}6yEtv&J2
z=d$-GLE^w3*WBL0QP@o1o|u^lAg%v%9eCdwpk{95Xy%}az;@qVfjW`D|NYtyS^|Fv
z_y7Mz=5HE6i61gQH9%UwZTTVl`##W7|1R@a=|9x=6T!b6;kO!o?fIqqv-}@%{U!Ss
zuKTrn=^xwv<NyD|eqf!zTlk_jhPFoLHm1akO!sjBK*`C#5%j<S<Tb|MX#(2)lO{iS
z_fr!9V#BY)0R3nqXyai1P!=&aF);={Q~*9j&;<76%m8b18z%?t-wq6l2Yw#+fmbTx
zib~>&G|J}I#tw8swpK>}MlDbntN7#5#(zsKCRUIMS?_O%u|Cj@8F+IS^aJi;XCMa2
zfJ&ex6FUdcydcTne?Lk;obh*E;5MK<I};Nz8}KF$X!&cM4H)#Wvvb`4m^nZfAgBbA
z;sgeO_maT6KvF;SS%DGY@5cbu29o+wE9gHE(JyR3Sr*_?Ksul$2-7`YU>SG@KgvJX
zf#ccl<v`jX`3D^!rh7fmHsJY!>bgG$a2<5ahkE}<x`B>#FZDl4{5;10vL9&wzY`MF
z;wb*lg#4{R`hO-Q3j@H!{6F&Yw`TT%mQsQm;(}5?X{l&yt#9*hyab)*{}V4+?&I<w
zR{F&&&=TltU<UB7y!_>z|6fZG13<sOtpC8tpBx3T4&=Ri76Sc#UpJ5s_j15}96#5A
z<$KNmn=_y$NaLQ>KUx03V_^9QkAKt%#D@Sn;ypuuvI&IwZ%hT2f8hk}1FeIukDup;
z@N@Zq47C5(HW12R>;H+V%=g#)&$It&1rYY1eEnb8c(3!n><4<~?`*wKtNv%Uf_DEO
zn@?s=z)L4vM`L?)Q!__ke)pqfWo+Vzz{t!9FmST6G6t^Ra~fb`^&e^d+ePz0YgrK?
zh36VSX)OWF@5~MVmDfK`?*20SUz=NC-M@PBAI<IGP5-O(gV;bv-W&Lr1Ap!PmnBdJ
zM5+7VZ>0U5em{-}yi|a$1vPR%8_%CjDoFCaj-NCKl|fRVdVUh&$NFE5>c3F+cglg*
ze-Ie7_8S5JA}Xjk1^#|%frtr01X})$r1u@hzntwolKTe!@ASG4+x};I{nlLl-x|Z;
zyXJr8EXehL#dr4{k=3_0{!d|`5OA0QaFhWZhy|>`ke!2xRU7c!O5YSXH~;}4=wJvM
zX8_y?95kSBCvFU4^p7Iw_@I3tO$5LXHVWF9S^<YA00Ue{V{27n4o=_^oK5eEb{`A^
zWb|EsFPS?y07IJJwtzxT;OGTPfDk|!AOa8t0H^T-NCRX5vH&@NJOJ3q0F(i$fENIL
zfC0cj-yUEHFaj6@OaW#9bAScF>POT9umRWtY;BAIcEC%})(Bu{<>Uac2RHy6tn?ks
z01kHghQ<I#fD^zO;6in8o#*CO#>~Lb>ONZeE#|r3@Ut}l$^b8EkZl}|MT~*bm@)7?
ze-FZh0n)}crjBOB%#55&e0)Erhj2}Mt7iT}$rPv6@5_5NQHAkv1hzzkEI5lrnkOG)
zyRik;yRE?#(4j;jNQhH2>=YD)1pHyNUao{`WWI9h)E4Zioz5+_UK*(J+R%Cjm`Db|
zlU0s7dJnzh>2KNOUQu5@NoOaKv=V+LLej&o9*aSgXmG(NVuu6&-6}BJ+O1i__4{p}
zNX(o<t~1H<$eVi1!@U{HU`PSLtTpN*UaCrQ7B;&wclp^pI8-?~z{(fwM^s;>-sCk!
z#Gn$bW4vA)|Ju_Huu-{*Bg1t$Ca0rkbn8BD$eB$3I%tShtOfD<b)2@pu$D<LodVhO
ze9w!?Phaoe2V_x3=k!VRw|d`F6;tHPD&*vf^$vw1Yq2oXQvxUOo%{N9PzbXV)dS@T
z8_!@+mVd#^cp7Z!Mg>Sp7wSNSTo?uYcvx&%QTf<OvVlZ=p-Tl}Djy3xY=Qp5wMi@s
zYSy@v=aE@?O4)@17PPgARoQ!m>G6=P?=TbsB!Z|IRmgTo6<-}JKrIkdJ~1lBh{n}@
zjg-JbY#JY7^KtDPa!)Lk-Z$+}?-#cQoMiUrr|F6o4Bx}OZ&@;RTABF%j`#Ul->$;U
z=SVO1>z8M9XQ_MjaJKGnwytzMQ(P<oWJ0hiP0Qn^M{4@CyOCIK(3aB$$CjMi0q%<!
z;aH8A$(Gdpwp#%fDg*dVWlWLbK|+q}%Lh9&HwxZj`r18Z-v*Sup#x6h%)?vY%&EEe
zUh6@+Z>{i1Q+Tnx){R3a?7$;M%c>=Dg?U%KidYyYsVuc;X+MZfP$z2M_~a#l;4HRW
zuMLB?{TLp2rTFIx<VuF+oHc6ni#25)$W4hVTDi>nk3@~S?Lnk?5U~tcVv-v#jE#(A
zBc)j-#)JZ=!JD>ML+PXA*V(u7jI*V6kUt7AUu}C2p6oKpeBR|O%;2uLe(`!@0)7T|
zz%G}3gCeIBomQkx{Axt)qkgqXcf@BqpXPudD7);`%YYzQCcJH1u?Y*zPj5|vM&Hqr
z)|*<anU-$7LAfoh4hr|@4}ZJJQ-O7U<3!Bi{~2)D2EMm6Ul~smVdUe*^D<`Bl<(kR
z8FjhY{pRS2sUxwGrD&pKU59;U+*=<5)qO{A1b&D0n?}UVXO}0;k8JVJAz`gh7bA<`
zf4ESrvz5zDDL1NHS20@0wWg$u34$JxNgiTOI&(!tatVR?_6Zh^_X81Yv2@)_C%4uV
zQ;T?NMd-&(Y#$7UQ*IU=lN(<jI@;-)Uds+rs3%yGL-fY!3Th#g4Y@TzX=w{aJdwg{
z9#<@N&zTUb7Gmk!Qqz2g4Ct(j0BG-Vxfghnp7fS+Z0qb|Na%iJ02k+ci<1c)Qza8w
zm8A+p3omI5M=eta#~r&v6gy$wQ%`+d_raUV+B}ADzNm0qH_(j%CRxr<)6<V_X)!DE
zDK3DFec8{RiMWAVa<G4NsAQ;k{a_V`^D-gPSV$=x{cwsCdz&B~Dm+H{7N$VhDL;+%
z=IlnhcwokwTJ>1ERx-DYQn{>bLv>G?67v$ydwC%C^CQFSHx{cd*3H3W?%>Y4TXb*1
z1Aub}j;I(v>O5vM$yP05VcO2@`n<_h&LKRLk4yMOhCfbzkgiy>1Ywb>Dyu+QAt7_1
zbfcc}*~rw2^|ieylDW=vH}C(CvUd*7{K3+<J66ZGZQHhOJhAO`$F^<TwrzE6I~}Lr
z%y;&;J2SiU)^1fQmFJVxlRuN|T=%(;i}=0m!n`lZ(&R;FXQk1eh5WmJIfL0#n4)sB
zjr>MV-;&v4&D&f1eUKOQlgXuCh1!jU%wi;|@vtoC#w?IBKJ6mb4>AQ%D{jJcRV{F+
zkOUxRwYKPhZjE3eWuz5RB$-G2dq__wH;d2rE$R|EJZ?uRpKQPBZA~4v7M3n#O{^=g
z_U2q7V_9FlbZd~V8-Y|$aL%*vAq{^B`)(FIAR_jgZjYv;lc;EeY-BhGLS$sAb`T>N
zx;l;@Y~qd(6|;d>PFvYsx$9dL+|9DOL+Z@G997pu&!wU70blE|X?Z-%tfqf7;Sy^j
ztCd|C;!r<DW_2N`;_K)I@#IpiL|y2T-;IOJqflkn(#j2MEe8=bz!0O<Sj@~Yfus1=
z)2*v`rh`Bip<-MYP)c182~KHsNkBP#Z43dYXC#6$-_p~~rrS{@XC~n?l6a;(Y&R6+
zf2m(JrtM_hkRA9CzGJ5?UUT_5th~@i4VbnHgYt9vw-6-bG=wir)MKS15;mYo!u5mX
ziaOr*VB?D4pm%8){id9B^%l}mBR00VA6JH@v1{gwD&7y4CzMBu9Nz6Ln<aSJ3ve-D
zs}z$DTbVfFw08f=E+G>%*KbZsXbB;d9aYHU<0Y*eh!}mTRx}n4Olo=0eT>O&b9ttq
z={naA%oj4IcBqzQL$#?x+R@sT_f9a=$U>*z3pOvfM45qxu)`S*jnyZ4?_(R-)9uuK
zwV}#Hn=-WEPoxCmZYuTgb6A>|+>dWlL&ZMyJaWH`F&gVcdihMdA1jYR<2lVmd|m?P
zS0LMIL_sXe_<P|8UVJvJb!Y72+4tYq>tP~ihqq`?2Zbf?FS&zYeczum4YoIPc6Lwq
z_s1k>++Pspd;Z*zPuGi<#6yjuC0<BVUsN^ao)__H+3s>1^3jN3A^(aKyzO6dKK>-U
zxE~d8?Kk=fFoq9Y0Zm}?zSs?VGy46=VBhWHG&1M3;Vb*-+E1_AR^9|AI`r~V&v|cF
z{CYP@j;y`zXJz$qoS^OC)NGHvFac9O<wTo={nGRUA&v4v2UgS7pBCyJ`^Hod&W`l8
z2W&POjBj<mrx3n)9Mw?%9T@&6Iug6Inu&k>EJO)6IfZ~mr~#-i@k_0AigWGek0i3Z
z$yMTp60%MVT5~wA9dXANd=`YKLEh~);h5zL2>Ki{h4fXq43G#R4&3bcBN?1QNqEdx
zX7~O8_L^&ccYtQ3or{6Scm^&QfY-)i#sG$OV@_VERZ>ABvVOR};FBds5;FY(TA7bQ
z3g%<f`!W!+Ide;DKpaHhkbJ|e7hwbU325%y&Xz#S@IH7uwT`}y20?`GRR!dp?#t~;
zgFdsC!&E|t{zq@m!7rhutw>FA?>uClNTCC|h)pP<hG%9TIFeOFKA`%+Fp}HgI*so>
z3}y%<KlF^C{UWmtR)aNujrW0P=3PtIf+<2oyjl{52rQLWS&x0n8TSDJ-4ArB^G8_>
z5W%76^J~u5E?f3Jh{loy<JcGB>qMpU(Gpl!_VH&I2gx_iR_a<?UkD?^@*t57@UI4?
z5dDq~8`ACUWO(sD1k>fP_+|6Cv9*AXL6gr8F_X?)kk}Ww`xz;-AI0LS_pmn>Y==>n
zv9l;5{kD>BF5MSrm>t5eJNdbKMvuRHOrG-A?EB|(vt!#Kt32IcBK43>IN47ix%(MD
ze!Y|3fOoy4$8;pQ{#DnDI{Kd6JxWlchOD0}4f0%LT`3Y?u1Z)QIK9i?Xnx>09YLH8
zbxnQv8yxn8juFLuR}pO7_O9Y2U}6n*6aptDC)4N7<3p3yFUy0iII46t%5NP6pZXgS
z1tKyncdTt29wrhGpC#l9WlA?h7>Kn^ny|!yxVwph%s$P5?9PIJh~~@tW_is(Y-5*3
z>(r~Ur1Wt=vea0A11G%M%u{kUB5;rv+wW0tm#+h{hrAwxLb4aTDpx=DG~}e^tg4Ic
z)t9qn9v%69LZu>6;-C8cwv4M3QO=z_zzp!+lPH0Lb%XA=X?&2mI7UZh&&)e+sj_pa
zkQ=$$LvkZYiK$7~tgH7<@>G3X-}L5nx|~lNd7>K%OdOM1NHRrSlCzSrHbv<L_3rmn
zKI>^j!B9d!@K0Uho+DjAqhXOqjj2>YjL<`CX-4ZY2^8>-XS1`i;I0g*I(m@Z5M)c&
zff$e=#<zk+@>o^zY@*WERo1Ih2G@O%wnx`8950n~MLu{v5mc);NhoS33mF1M_X?{K
z2TgLXgbE#wwSFA>Q$RnAOLq`Iz#6@RK!cVT-!)1T2N{<}xDak1>x-97Gnuf_Tz}K3
zalz~kLi*D2ZK@JL+=gAnEgW<=Es&S_&e_;G(2ZbOv>;qdpQWFvs-w_r_Qc8&|C1i>
z{8?JSgvlYP2vLyu!K45=nO@78q3)-0UU0yhe73|YzD=v-s5iao1eFx~9Y97knu^;@
zS8<sO^Yc|7c^N&i@;KtPx@vM$t*xojv%;cXq;_T&W|ucYI6w^@4J|%mMeRt%wsKXY
zT@$=ZPU691b*vo1CYdxiE3)l+A-;2K+l1K9ZW#;jVN?aCU};CAtp@tE-LfM~X?-n=
zs^wfx@ek15wc*X*%<#W7)ctFu;NM~5|2)<Gixg>D*}sVItL>cgOGmJ?GW<VQWcg24
z{CfD0toYZ<|6)Z3wtvHljLaO+^s@g5gnx16e*&T4e<GpSUr;DXFa6)ZQ1uH9HUC0G
zV|rsdYdhPo&o(xOUx;X8XKnpOivW6ngNvaxz3JC5k>2!6hWtg2<{tLu0NcL+@@q|m
z-sWE+lHUGrY5Tv8Z~p$(Ut^trVoQg=Pk2m>tpARg02_<H|9&S6_kV#-XLCou7ks+e
zec`8ztqH)<$=J>j@HY~rcc=HD_xxub{oCy0pB&KN9{itql#P*@?H_qm!{dub+xZ#e
zowO)b=ZSaXOI`ZPm(;{NTIpRNHhQD7YHOgRfeAr{H12{}5eR^QNoeY!{Au!s+Ff)k
zEo`b5%5b&0)wr{ojk)jfzAj`r^#r=wUi+A4AM-u!!pA#xdmnpkKRtc=_B`E`mMK%<
z#js!6t7M8a8(9fie_j2O-mu1FH-lzR@k0oC?=<2W2}9;o9!-nMEMc2U+dLY#Ndpp|
z32^3OO&ZZ|IkyiwjtlUWPNCKArX^G)j0z8x$$mO3S6`llQJj1`obJ3t(o_+7?;JW1
zE+=6lWRye7xj;olk0;7-V<4pC@Xh|%?diJN*8cdzRzhL<mi$}=HPTFKE5A<YBi+pG
zp+0`K*tpYm7wZ!~`*CWhhjeY96FM587?KY^f)n-_<z>8^fz8vAOt(O<f9tq2uCAxs
zWqR2OhSK!ou2`?oyOg~&Xc5Q~(Ir+(1~)%hA%s%?46-Tlu1GKcy|iFa&63k4a$T${
zH(L2uSxOo5BAg}ZBU)4Vx@4EoWxlI&MH%lRmL>fow<Ug4^16IgL1*b&A~I_TlH!a4
z?P5bBGpabRc$>nEaz@!{A~k8DUarP?)SjZZB}5r2Yf^ab)&09iGi5_D%3aQ``2BWH
zyKlL}8Goiy7DpeKAp511*8=V&)zKNV-i-ItMYmbh0-9Wctk((8cH1;2|M8PfOGJe9
z>-|JdP0r`uLnG#bS*h8E^X56%&Z|hP=<`0zgnsMbG+^7nNdx3<ByDl>H4Wa>(H75^
zzRkvAq1|U6?`-Rkaoadg90#Q%GK3iBf@7cyup4z<TlZ5!*9p|r0CVLao1k|-jBqTx
zauS&nPYJSdZi|#sY%#KYqAKb-^>u?#bhfFR3aKa;MODtkFk7x@Vv$j)Ra_qBN4gL2
z3;&KcIr<e*y*;zth=vY7IAf^51sTtHR&)KXC{;pt%ul3On6LAdUT@^jff0eiZnuP(
zys1{Ba}bQrI8`w72cVW1nC4Z^B4Oi^o*1>WrL7wpnq!dHtZZ5p>85TgWOzvXJX++6
z01@=qA<f2#XQ{=$5AX3uaSf1)9Tyt^Dck<-46}Y+AnPAxZhaOSTj*<a(LAVtbwi^-
z{%;Gcvwy}aOQ>sh9*MklsakavYH02NWCzZ9IZ92s6F>0yOyr>gV{-I3{7X7f9514J
zAJzpKOL9Ehi`(T%-gg6{b5UXPk#Fw7jL@qI8nS-PPB-)+xq~I&<ON0;-@-_v?{Gd3
zk;C-in)=?O9QC~e<Qb`#N9xtj;rCZ=CM<j*yyv&b_}A6gJ#{ZiXP%v5;MWal{WiSb
zS<%R)z^;$eSSj#|%8cUu8St;&My7LVD87oklRZt?4%PFhiswvD(AOU1*xnVS+)&vj
zXccSG`RzxfPx`0MF4&zU^SWE+?2^sY(Y62v_^=^6#bsq%tEy*$*;M$Le#HrHc&;}i
z=zWe~X96QHT6y@WwK9IV7Wi!57TlsU^Na8^Ab27d|F~~!fF8>=7ch#tSf5-KNTN^>
zJ1{B9$4S(TSMr$k+;9hGd?wKgSKl$ffsVK(f&_W}u-*A1;OK$~AzXWg^mKvhAKw8=
zYSp(Oivc6-j(@J3sHo2|-0SUmP$<h9h++TwAbu0*k&$E2EiZESQ=_idb@C^cO%WCt
zGjdQPokjttg}5v;ZRBQeRBdTzzmBSng>|{5$YkjfcE|2%7#~FbeuigKG>MxNzw2!`
z=}c8%)q8px1KAG^4T)JSXhIDcE+NWc^&)?4k4LEwNmHT>I2jpE5`Up9<>oOZm!s*R
zla_W-T3=S}Iju$_8(A5F#6MvNyrEDEs_<(dlinfPi+$(*LkEaPd@EsY4M4$}(7OBs
zK2?S6I9yy9+CJYscG9TPV@akyOfYZ6+9!QJjA)8o-dH%jmJ0RIu-^IsY}`8OSV5^D
zbuGQHN6wL(Cstvcgw4d=SpjrgF`$%34vf+_8HxwTy)|~G%WSm7hgS<e2uFzop_@s`
z2#DACz9h!PM!zY_AqHc`LEs-lR1JeIg2g3)NznpD4Wwp%#9viaV+6Sz7u1Hxnt=QX
zivgp{gts_bp~Z?gKmHx82S%*6T%n;`)zQ}r<k{$wyPy!4VTiIsp6-~AxUjIX&W*F=
zahFPBaV%M9f5FE`P%v|Z+3?U8O$R@%25}hgxwJrsgD@!nVuOKJwDr_t*c%w-+oYkV
z>Ynyf=G88UcbD~Gk<Fb1m7<n_$r0-HaMsT6!`AbFQn6q$Rih!ME<RzKg#2mrVo&e<
zpvfCPzvpI`(R;i<A4RKT@u(~o?GWYbpgTr_bUb2%<<qB2$J>V=BvQ;!lZ4`TWV95N
z+5x|l2^B?P-%T<Gw&Wz$TqP5V%1OJ4_FP-x$pY+^Kks=a24kAH)6JmRXGUDwHeIw+
zXNzKr!s&{J&?Y*==Z9JQS6Q8St3U;{;r!X~J~W>ZDmNwG%C2*Sra(R{e1Mhio!6h{
ziaUpk^avcx2)+T%Yfi`DDDgl47^i$4Q<?|B5WZ6?EN^KWA<T>7V^;7{nd$6ARKo8b
z3vS{1i?oh|HBcJ_sO&s;%>LjFNgGu3j@e>H;BxJ_Ui|QlTTCSz8<i2ogF0L1W9+;S
zWU%6mi?ll4X$*RD^Ea)^N{x-$G?b`W)-~YZtn%x~``u+U9E>l0`UFGciV(kVPPpiB
z?DLkzFMX=*;WD0I@Vosi8c^zLDWUtvx}YV6y4=N%ITlVUQw|+ZR^6tBdC7QvOSmO^
zo$=W7Tpbg0uN{0fH^0(y^BV~As=inbed+i-1k*DME^bzFw75*@{9Q9f_b?w*yS{R^
zafmi$*Q@{balz&hjJl}T2~a}Qff^?<k7rk=MA8Vo^|^@u9w?iuw4_$lRX%ZPMAQ+t
z=)sA6(E|h+Y>(@*VvwU19_Nno`t&oJZAs7wrG(TiQ<_0;EfxBhf|_8lSU2pogFgIE
ztcYsRBrgJGKwDKQM$$Q~=Wuugz*$*PQ&3Zm5lhbq4$RDZt4s5nRjbEi0JyMMT~;jl
z6W&w9HLo_=$r!t(0+Ui1NgXybF$-lm<fDLI*Ix2_aWRN0krTkej&V(sv|#4o+~u+3
z5ll4QXiBbgOxKlpukKwa8w!(G!3N-A1*J)rG&kizx}Lnb!+BfTq56$^XL$PtwuB6*
z@&GN(^LsE_K6C<*YwJ2>MB5L@nV>e?enz@0vWzTU1%=!RVZ5}qU@gYQS$MW6BlL^L
z(~~2EiprjvrFGQ=^(v+aM=F?c1<Zw6BR*OrzHU?L2PC_q+s4rSyPLw^)<z1HL3db)
zjdmvMHhW1Eo^=ZT7;uG-ww4@7mfs!yWW&XPF$Cn4^?A3)i#2|>P+W88#0yMrIBJ_p
zl^QzLv>VmwAzbg?r^ZWdkg|16%8#<<${&fu#PZ145&QO?+#(6d3~5)1v2QVjjk?$5
zVPeNAdFy#upa=A|!3E9{u)lX2JvA-hl)MO3P4%1&@stQd4qwLgd?ASMINFk?D5hw~
zSdHXkJN|sDew0Ns_9_cOtx1_9_88(S6d1pF2*jvTqf{?0ZZ1E&n^5Ae$BF||RZnsG
z@DDxetoN42>HHDXHWETEc5FfxNIE#);MjNuEJ~O+4y%^VQR-+SbaeE&wY#^+B<vxo
zD<o?PD5f0hQnH98h8<V3FusUrivB#^LF)qXqWwJ_;xd@97(HVg!h*{AieS1oLiM^Z
zG0<0%gdPjw&f^PB|I>Y+J=KqgiCBdwnCe10fF95I9Q<r5E3|E^8@t2UVPmVSFYJ;y
zVUPLBWcS0Q#-F;d?$-YV)}k(sk#IKz1sh=>fR0I*OxLci{L#B5=9e&kjreo^O_q#D
zxhsp|o7+mZIF5JFTYo?E01IErJHMBtZfXMYW*B^jUBHKh9dY3I!j$rHn<3M#H@i0p
z_Rd8dp;z-k-Q5gd87yL9JWed(AUxF5h@n>{A4)32^?2I2_(GDgvF=oAU7O)ya7E#S
zqMA1-n!}@xmF%j@FR%%n25cSiT(H^l<!FQPu<>wEGJ`T&!TCWsWxH-*ux7BFF){Xm
z3iZ7jH&J$la{jXBb@Evmwd64y^X^25=+S~^zS6b*^IX1qczl^){&7mP0!{tGUsGF`
zK@|$}7P{Mck{@GbiDN)hbUPNN;T<30(hpGT%j#U05xGkgIPX-^#J=<{t)H_?9H(uM
z!K6zMo(~h3qXnio{JdgO6hp^T0oc?PJOO=F$lSNC7{F!_%nlw>FvSyp0M>dI7;k|`
zcak|+<!7Dg^mZ0$YJC>0gFUz^({G$p9EBiE=peLPUs9mVC04wUW)YToXPV$^friqS
zPG|-;`xu#C)qDYT4x;Y#xGXqkzsa#!4j(<-5$hPG{n}S8y6xpUL-4Ablk~`WI<DLM
zBv->?{HBO(Ts@PiXgO80{4w-TS>1tFldaUbe*xmLI>?nZpfB4TKOACzu}PSM?`<wv
z`^$ohc3r^@&=x~|;HRIsSsr#H<WeuOwopkN85KT=w<W7IX7#CCytCUzAV<eS)0C=l
zI>x4jmbma?QUSAgX<q+ugRitWc8D+p$9CkALk#R!@Yc0#$roNolmBj3Ch$gn*p|AL
z%1llhA|bP|;;}d6e)|Dn_-MGll(!A5gJP>2+R<5Y!^;vbE+v{YOMKu5>&}3D=MVjP
zbQFDU;=u8HP`WnIeVf!B$|321{{<$1pdV?%{)YzoRDWW|Gbc{4a3=#ibLtj64`kpf
zc5g4UQT}>i;yuK!2=}!x(Z*mwvo@F=Dge{vn$iAkqK|b)NWa{IN7rm}YMgr3vO$z{
z{N1|H)F=a>%gd%c(**Ki<@PcLj4WCfmyYnjePpnM`W_^JUOEjuYDVURUX$^}JNLkD
zz?@U~CY@m*98{ctV+`JDo?3NHg<1Jg>2ss|00EwQc)iOm`dsaUQKpDyV@%d*zWF(s
z_~RWoQMZ)NL}29Or%id)*?T85g7RBEiR2iOrk3-S>)@&vPhkLdN9w}W`l~(fB<aHJ
z#f|)CU`MNpEsz)DOkt4CQEy=V?3(*}`{o33g;6Eco|r|~S*Ev-kvRrexX>92djjTe
znos&kVXP*^mDo?}&X>azw<oyolk`ZJb2UrU(ux)0USH*_E2N`~lt_9WEia3`kD8_Q
z=PE+f#P9a|f%I>3PGX6Fc1dQIK4k-74~Lh@>g-?Cb>O_J_3rK_!b6eCQ8wkX7at=-
z{cw#gFF4sO_@8w;lA;#Pmh*g>Fu6=Mwr?6ie2Gr_LjVu<a%sttwaABmYy)X2Ybq<9
zCu>4qQb4Sq3*o_mC`a{H2l3$>>!1s%rmFisXU~1Bw$zr^H<pdAgoO)nvR7{P#5u1H
zR!q=r>QV~qrR9E$b<}v86hKX2z+59>TICU<^c;is`G<9Fw9rsdGoq#>sisTYgub+s
zoA>DfG-S#-D0!*e5~4MRTp|26f|9DQ`=vTpxBkTR82}2TRLB-5>=!QU;4Hs$_F%o}
z$O^DQ2?!(i`38UEr(j~@$Yu7ludQ&hXDFv0&6b+SZ&*J>TM-1dr<HL+?j9a%14Y~0
zGndV0Qy2Vhqvk+G7~$3Q$p|oPxXoN)Gulm`^I^EmeRiE3Ft9?pdvrf{-x15%Z@x!T
zG?F(pdxenU5wr2HHx1~MNnF&JP4(jIB6o}Z4wAji|81oM$nD8F^fo?b>qNRP4>9K4
z%xfE;iyEGv_AH!bMEm!u4<nrQ@i6WjuxP(71Ey`0ZUC@}|2^1}tCOVppn4h(t$LDr
zGFnQCYB-fFscLCFXOc-2T#6L2cXjXve#fd~x2npv;fd%<sLL8pcK~d7IP~3hC??j$
z85Tz91)QV#QK1WELx-%9?s9TzRL~Q~wA8@;OTlN8JJtdj1*l(1m>n3{>UNo|0?dL~
zh@mGGvtbbods)NEnul*@cHr?j+D*d^U#)P%yzjw@Nncs#`un_pyuT6cxbWH<bQ4z3
z4}JUNW<xv7%{*qx2Sd2fVAD}!m*4f8rwNBIfOe<vkSAp4?Cxq=jWjS8JPK;XY<=BA
zfTAUe8jcVQU~~IFpCw1_*x<vT{X6fiz5Q?0mBAeW@3$a5ou#cQE3x6tT%)V^v)b<K
z{k>KU;-LCm-o0j`3By)0Rw}4*qWbgZ76Z525YZxAD&B#7V)!g@58ofz{QU8l?L(G(
zw2iwJ8KES-mTiBPp!*MEBpS{=GH$3p=SE&FE{#7TiAx}fT1FC+tml#L!-RUd;!sOb
zJritK3Lb=jX`TvdgkE<TJCeQFcO$0pC?t%nYO92oKa%lsZmTQ33fTq?yJAq0eeTJr
zs7-&2d3F_hHfFZo#rXL&JnoW^%S4lskI-vshUo$3pZ>hMo*QV~Z58CVV#h7}nA1Z`
zB)T*A-$$$Kn%$TCGJ`^_hwSK3<EqB12269f=TGXW+n5CAq+w4Ux-`tB#&=!H<iRUb
z5<`=nBdW?s6s^>?F6!v(u4zcC5f!hH+&j>~s!|SIk}-skA*lC(=W}DbKN*7L+`LmQ
z>l5AbJ8->kNL-&f5yx*O7-3{cRfFO1<MKIHx41oLexwg<-mQ1PoZT6x_8+r3QPND7
z$Ty2(va2xW;A{!J9T%A!FTjrszQ#T4b?tyOxH7f|ZYd#ip@67Z#&PS3ZpYMH)}S+F
zr*s!wXH2JZb8&H7hRgz3@^K_ABQ7EuIz_x)zke8t*%|yo0*|l<e;fI6=Ijjm^3^>#
zVFc%Ju6Z5&EXNWlmY!jkdWl=nL;-ogV;DdUHTvX3M7X`LOT*AY-x<<vFf26f5fNB4
zl3x%5mKlD9jt$yBT255rC|E?Ojf;lbxhC&z_pYgy`b-bp{Sgz=%X8qMyAg2_=*wDy
zZeV(L0CBf*+l02oz;U~~{*349=PYEYF}j}g`K%demY>wjN{k)S0vq_b6k<^X|69VQ
zOxR(Cxkrov{b%dZ+p-&NK=YB?TPWNXc-RLbfgyf;)u}#PaFxk1T4#3G*4n!L(M5px
z00S&g1fC>*cI&Ypd8yqgE7{L(BtvOSNRFl+Q__AXL^J@M+>IPeBAG|XIy)Kj>(7ut
zJ^VYUAw2_!RZGZ$_z;4hwILkeNh-h+3I%b7#*};Z&}YES*a=5mxDux#CA6pV^j9vX
zrI(rS!A?rzZIz{6j0@^u82fYNG#e7RbbnS0WY*A)5{VHPa~8F<40*nePuouZa+E+s
zq=SZ4eMRrSlP`&@`aMG|FxfI6Cj$8>0@?E#hsI~SjOmzQx+~qNm#-vtB!7mF!fkmD
zO)aS!Q2kz0ju#QlNrlAr+%oh%IhoKWO#-8ko=!-#Au2eta%?=_q@T>dJs@@_gzrr{
z*?UreuS}280$8u73&`}n0=)KD0{V!%4xeuvZpLi4=(NzH<-4j<s<g<Q9-_gcACB8=
zL+>2QzSAgx{^r0*Pwh8qSAQhr&uzI92g)N((mB+j!y!^p+N9<?%fZ!1O7bCOnkqkH
z)m_Qfu#6)N?7o0s@W6OFft=oQ(1?{X2tB%0x~0Z9OdZcX@28trzfO>2{H$L=@1wIM
zB0^Duf{H{*txdJSF4;Y`wgdx8rMD0ilPo0!#wZkgIgXy^qT&PxtE!FS+gPL3k<nY9
z_??0lYTcP3Hv-|S9nqSfp0Z>MLfah3tgo*|M-LtLoL}#srymv+Bke1ByXkfYD{YYc
z?9w(?5ow{hk?o>IBS{p|Tn;uvYYchotbsMW<viHBwKFZH*@KrE`ytq87F%>P9)nhX
zMewlWYrAV4j3UTD@I8eOq0-bs_CV6NL-`RTB>p^f?Ua189;|+D%9`j(@iHKv-46nV
zt%XF}`qnM*j1e+9hy?WW0*t&qp&abfDKu3@kGhh`UU&L9f25^hRk)iT(14%aJ_jK$
zx*E`@jTcvSH1Ht4-G}3DdyZdAKt`&MN`Cf}G{+A-LY|QWJIBzD9k;Kd&PnavLDLi9
z)6CJu{6_qMp-bPPq-RM{LC1)g0X;;waq?`bwDXur{tGH1vY<4KGhr4Bk4zR)s%(9`
zR<3Y{R+d^8u#=UhTibef>F2gBsy73sE|@Dh`$7|1?2^p&bqaX?g){t>e)Y;H<bUu%
ze@is}W7PHE`JjIjr~bPT`U>OIGJS23aDMGgvT<<ycOmrk@E?WHUoZbl2r+(r^M4Ev
zGBSUq2men(Nb27xA@#4kpeDW6-!p@MWpBS?ga7P@zQoYql8yf%hAdnGU$NZ(g&?xE
z_zD^RN7V5DWQqQY2mfW1{wpZ_uj&Zk`X#0Q?*fV56X0m~&lc&gh0=daHU90v|Jfq3
ze<k1l(IR<x=qRtW|Bfc~va4u<jv~ts!>zQ*s#2@M6VIfg@}GnbXM%@v`VmMH3mTsk
zNN5Nh%Mimv9C{zv(6kI?L)}#3<Rw@1+u5d_<LRj?YRjwpdh5Q!&zt`lr2fhGNo(e<
z^Xr2er{4m&Z`YpeIwBHQR_BB=j2C6(^AF$txS^@6fvHnVZY#ffRQoN)oC&bZk^h*S
zYQvHD)nuS-fVy4)r7{#boY|q=cD!2`ug`V{zh9qe7z-^S6AzKabUmqb$_$ib#{Jzm
zPRs1z=uIo<^$x$1kTJ>p>TGM_W?UWNSeVoBHunfK3lHa!LjRwSwVwQsKSSh@Ml-`4
zJ+erDrslu3JkvsHBe#&+$Zy5nIh^HX)gwGL4s^`NT)=H2A0guHVxFQl(XVq4lP|kH
zid!9Z{rbJ-y$`(5FWMIYPp8>V^A>PO&6nBWxRe2U`_+7`A=@eHj)0G7hwK%`I;hj1
z;2v^AbcFa8>IP-E$J-y`o^wNbgzP&=W(2e=Z%u}V1Qdu}7Ya$zj1Uo4HHc({U6;5j
zcR|2Mz(<yh%pHar$bCy#7oj0}L8gYt45e;_CWwq22EK=C#Dpl_DK&_w9J&$;JE&qr
z%ot@)rV~oC=i)CfLvD(IBP0L`MYsDCS&9QOZxAHf#D5}i2g<EYyEP?CqQs=c&I71(
z{{Y(r<`JkUKYQV`G3e7N|JUG1%_#XT8LBK+)&-l#&C*&;x_%cQ;4LwEg{-^S=kmNv
zZ(%E2?TTkWb8qj$$Qjd<_u`ST8;0NWb@KF)In(SSbB<-dYzMbb>ZgtZtqy78R3@j>
z+~g*6fLZb6g@e!L(m+$+;~7ni=J49V#lc$rnoB-szJhr+6BanmY)y*CKp*B~-F?91
zS$^o-=->uQVf@Kxsw26lcp73U`nbW5ENB^83o6Ex!<2A{9TB|7xUPHY!k}9LLQtsF
zH9l}HaN0!;GMYVMXf`1%*1KYcw%)!QdV4<nVB3L>@l%F=vDXY{DM1L>U!@5n71Ghb
zuPQc^aE#DJ5BSu~z>XH2JVph;cdDep$}BPkzTdlBZv|vtr)}~_5{D0{BUE0-gHBcQ
z)+}kjoeNa)2*kw3ck;#`W{O7KSh#@fMtmN8_{QVojvo)PVnGki8dvQHg^Bv|COUG+
z@IaP?c4{@Fv9P0nx!VZ}Y>(8&{{#=l1|-AGDjjrP!0JZp!)>+o%Xu6WX$!#CuAOl~
z?2tTH?~t>UOw|x!jRq0W3gcRg0#OCTgY7hC-BHG(<Kl?C83cUm2I2318C7&7mgfLC
zGoF};;Y`P}1G^C83t9$Gz@rv0KM%AUH93Ir9tmQynNX=8?-A%L3-8#fnrVwy>~nBH
zy)Jm=XBc4@lH#Z2&{k2ESLN$wFRA|Gik=FTlZKcBN92;~|Mmd;2c04JGIoKEUq{Lk
za*Y+)y#$9d6D12Rz6)d)2->Ow<2Og2^SDNqx`N>aJG4%=VD(G!c72*b)pp(sIF_08
z<|vKT0gDgJME9W(vr}x0DNR<4i1{-7eJ-=}=ZhOfu>TN${>o4q(&x?Li#Z!nK(ieO
zlG?8XqU6k}RuH}dKde?)^#}d1A1&go1$x#@Busaec|_PGz%J2BwBmMoC_tX*WToRx
zsJR-D7l33nWjqStA+h!7=<(8oSEiww6Ic$AOXOVH#NB|(N>WaYoC#OUG|Glm1`%O=
z=x!M0>d&U`*GZ1yaNnaAJUB9Zw?qT)7fpt=6d_Axro=J=n9-@b_aD%H6TY=rmEmhm
zb`#aJL*Ha`=L9K48Vm>yKDcg%P!+Wf$yzS!Dt^r3x^u$0UUH+})BccS*|-HM+})5i
zQ;vQJ)he(-dK;lJqCgui*G{8U&&2;ea8SamBXzGxgMUUf1}g@L+XaVBQKG9ajmCOp
zROdM5J^?-MFVpV!*rw)i(64n5oloynCSrOjf?=kpsQY%EZA-0kjUFSa&?{c_dv=~~
zWS6KoXxqEac;~b1(L8^22woO)wbrA@OuWGy8blENzA$3I8+`M*&WWffbTm&9ajcc`
z&(7MgWvNPIwz|9;&$+pOVp{O+!D@7!-_60KYB^f_?JA24lfH{%b_@f_f&E0ufE?2N
z&Qrk(-B#zu3+ywPH}=!$d4ID!VhP9;I7@k4TnuaSMM~mkp^EM7+-yQypB-gA&fBY)
z*n#96@%0w!H^i?y5A}BiAHEJ=NfSUm8eveQOczwlRdLF1D5l??b}{bJeHDBv9~s~-
zI=?y0>9AZb*W*LbFXmjJ6XR@C(;7>|Wx=Te65Yaz6}H8h`IV@M?T|hDA;LJ*&MFTY
zDFEL?f#&m7yqulJVQ-*d^*P<HE39Z0xrcWhda1i+*N0x-AX8otKZEEALAD{K1ne-)
zDPNM;3_v$oK<yD(E9q5}tBb92dBRkD3l*vt7t9f52%@GuJfeOCS7V@e2`hF-Ruenz
zYIoL&VS31`$6KsV66I}YmaRsPjX5hR?<muFR^ViY3~aogDi{;DWH60Cq*$cNG~sb?
zY8Wh)MToL_gjJ)=HZ_M27f?oz3dbKzeePXTW{pvE>g*;3pDF~SR)fyEEJqqJGAVoN
zS1s!XQMz6ISyLjK+}S5pE^j&wUveLF8cDHcW5=@KIQP@MLmR*Oy3MB-a(-HxrDdm<
zh<P=~05@IK&5}qh#n(@dR9=w;XDS+XpJrwMn1z`d+OkXjj>C~rLgcd6u0uNu+$5Ql
zV<I^&5Bi`bzdfZ_719HZ0x#B7qDJD6VQAktXlEs|A`wpkLQ6>s6LBZwE>7n=lq;e?
zprrjvA!py-$Jys*`gE|si)%2nm9Q*!#UI?zPI{oX=%}=awK9>yGnL<yqbk<q=)E8J
zF~sjCjx@@<u)!o_dErEu$}`3pS&I`s-u@{jYWpz<=`pK)%N|<?v;?5LJLPbA>(X(G
z#e^MvA1`TRsbvbS5b)he%P`iahZNF@9wB0m$N8o!7#5v(u%-DE37Y&z4N&I#)`HxC
z!MJl%>wyv;FIaQw3{!$OryGL{Z6y33T!{ox&jz_hH-NQ?PP<eAfN+fUY|8T$hfBWN
zn$P`3Mg4NEAb)c2;5o9=gy4GuyAJxmmDys%mRCK#D+h;PWN!qq&YSb95ji^wh4gnf
z3k+a-BK^z)nkD^JoTk;X6m<;varc^1^HPKelZZ&Hd9<=9Y>R^cIwRJ1cJ*OqUc8{H
zZo%QTz87l@TioGA&Z(6+AhM_-d;ehm0>J5F(*_djO-WolFjAIKUOd?dg)xv1N&96g
z2A|k9MJcjILex)|@sj22hmMss-K|-Iv-AC`{JVz|T-+hE@xc8De05*Tz{}^7%LB`V
zd>OwS-L_Lfi!o$oy=@E3$E6;wZO<Z009^-PP=Mz74#O>m4oPxCRT~>?EKrkPR)H^i
z66BFkMKevyca5Oj`qtV_nP0IvnP>Cp<q%uJ35qejg{)SSYtQ1w%V~~x52gy=prviH
zZd}~;XPrB8Yu6@`wC9H2A@p*wtMTJ)WO<qHU~FzVv_i@V08*VoR%HvJi<g*(w?C4}
z$R*()hv9_w&U86sCu7~Q)y~nuDu21R?fi1@b1autE(AIisFqccOvwlBlS)nG`}U0j
z)&Fd-A34aq?du1aOGHj@#?&>Cq32U_1^PN_X-XvYLBj)c%U9>KL$259N-Q7HT$=Em
zMfstmjA+up2=FzezDkh)%tCexQ)!n<szU|_5o~L1fr#E*`;QwRc|-Vuu?F2L=-=U(
zfHqB|=k&Vu^af2_bPvg^Q@A(^kXwwu4$Y<jo4Lr|tsg`OxWWt2Z(!_Xo5)vHRXM60
zW8T3A8Feig00lV<Te-}X1#{TV*+SE9WF@;WuyCp(Lgm}Tc057oUtU*nd8r;Koh9g}
zt)H)hmrJd8+>kb6R5(@2CFRQ~NHi#a!zHvhM?O{@rvA{iH@fc8!O9G0u0`p{rEW{c
zvHl*PVD$8oM{6GR4KF_uK3pUAvJ}}#Q@xVK#<LHw6cKLTqI`arG!*>CvLU>r{;@xm
z=W^WaFG3h=X1V{JD;Ib_+Im**1q)SF+E)<T98Ey}#No}f?a;M*Hd>=p!|(NH6o_{5
z00<iscwzF$L%~X3&JI+jwVioAE-RFcd0M9BGP=c2V2Y$MC`PU-CR%3J4iSQyF{-8G
zF)fzER=ZzPFzHboZXt(i<(P?P%@=<VyJ!VSv~aQWmqiYt5ACa?!j%tG(9jZ-Rm1QH
zR=S0q?i$H(XAQ8+#=_=f)Xk}xPq~g43{zj#>2x^0<}%YL`LU*8rqKKK9+)aW=f2bY
zxT-V7MT$vMW*kt|7wCh`{I>0{yz+;^?r971k4jvO@>5uJLzIi9W>P6@u_yMb46*Ib
z^isFr(&IjFUB=5&pDVn(Kfv#;$HwGx@oQF+B5>t*Z@{y6Jo{_RrP#V5FTm7@a-nN}
zUfg5<H@R(UTR4nBzgi`A_3B+^Bu)UEI<YT4D<L$R`Gn)RhNb#C^qUMuHUgMxj&fdo
zp)e9AD5+8bq5kHHJ|6f10kMUfXCx1yXmKx9dJwj>mZ6p&crG%aKCm=7u=^JX`pyQ7
zk#z`KVlx{0QhE^0(lt{jncOBqiU%^?E`%+V`~&EN(bEj!<9mM=J(tu{p6H&xiL?&D
zlNI6XcA*uWEoU85FFh-d$OS&l8u;>T=pT2)1H5ZWyHf<##Z~MK`UT}r??+NW&JP(<
zw%QrZOkhbAep4aL$gmJ#lY<n_Au8nMnkUK+?6lJgO*tw?^7{kT*KKoCJh1y=xtnnb
zbHLTj@cT$u$8SK#W@d_JF@B2U!e;!u*9(Ru{OshU^$`QUkh-sy-nvkbqi;1rn1seu
z=SV}Iewoe#bWMDtx0-2(X?|X)$nUzR+8D1SQbt>8W^7Jac|)pXmqP;ng<LSs){FXZ
zh`~u%YpUO7BIT~Ncne085NZN$T1$jRje*cMNoWm65n6#}1?+R@PbtDzLv$lyY`1b$
z^yt&v6T<g3H$TM+R4V3`_m>=g=$(FWW<qDlZTh)?9{A!jRs)iVBfuuoz|I3cG3n|R
z_0i~xBHwk?(`|hN#I}`;y~T!w&jBX*6cbl#@-dgMEu~ZW8g>1xstl}!FCG>{`$A~g
zk0lJ%s7kmvra(GF@H&1Bw&XXU5E*-PMJ^Uvk1OWxNt4}Wwo>L%mmCU*Fz<bzjkBX4
zgi7qS>0<dE)C7+U0TZztWI{1Jz`nNy&C?Y-RHaFYbol7Ea7X-H95$<Zl>sE^pH9xG
z_#Szht0<tf*1FzX$~-5ZQ*k{;@F(zQyFe5t*ADVex@aAK?e)fdxdU0?y#iX|4=+EG
zgTBcE<BeBQc56bNLP<&@A_`jY?R<kQ|894S9qI{AfF8;6>39LUx#?E^3Y@F2F~qLD
zn<qAHx2mFJTyesBK}Gi~qoZ7U$ssBK?itAi>~~mF5-V=sqt}K{k>Ks#bMA%x0G6lA
zL&^!VQjcJjqw&a*5_Z#iB^5Zl`7>0eP?vqUD({Um`SA*3YTvpSP193DmF94YQu&xx
zjYr>TQ>$o$(kr8CO%20hz{rk{qW)#la&*NG8b|R-JR9zn{#Gl3auIL_4ZE+fp&^KK
zSM#6CC*F6&q;iJzc#(Zadnmn{0L9IhsLWw*2IJDaxCs$PVBaS$Dlm%4vY;_ELGL&c
z{FWtA>`k<el@MPf(r9@ZN!4;kr$EXvEmYgwv7vI~vJ9X70s)LmW|a5)0P)9>>F{<f
zDlI|u*5)2JW4t|d$WGZXH3c{v@n6_9xNWXoP|p5%+R_7aV%ppsu<6dM;c8eG!=`t?
zSYjH@zI|NIP2O~!#}I5W%@luPRa6}pa^QdV_H3;3%_`;KY17q<qd@!|XiOp5>#dH>
z;E&L23^_gKd<x#R)zQRc>uyn1H-C-{{<(Nfc&zS)Bemfq07|dO<rK(7=%pX5Fdpul
zJs0Q$v1vBOM}ZeH9A7^1dvOPJXtlKKWo^jwy)&7MZB}Ov<V4wJS9_4+$9xB%jK}4<
z7&4rf+Ma<pD>Du;HLQV+Yi1grwFGUbDGxz|;0K+{v3$U_puVY@x3c;5_^T)fwJg(}
zuj`y2DVubcU<C3no-JZ&4YO-`U6wu?=OhUASmU3Q%D%>RMG$h>Jgu|*hYGDS&IEiy
z-1;+~I`3C~h{xi@_;54!FDUSVme_5?`o@3&0jiNmwCnw`y6D7IsYp=)4Q{^dQOb{D
zn#X3H^+W0tmi9n;S*iFzRdRMVb#-=DQq_^&vFpry;<diqEs2nOGx@x|weKllk?7Tp
zDDwa{$7rdvt8(yDk5jbuLvu}yRMPQB1W37<@Q6@JZcy*ObYJ?D1Ba*4wE>sB<;i!H
zSb^&s{#uLEY8d<Q9*Qt)F~m;G`Jqi)8p?(?w19A&4sh{!w?|XA4x!hYm>j>hYjC6u
z)E<vh1^!k6eU4?1%V$PS_l{E1cAD-D5P1prbBb!%_87ZAZ?~6!zICO6cxQR28<`iQ
zQ|G*hWsD8mb_}OSJH26nEgzGWDm7V(HUoeCgK6lgsuk5Ao}s3s<>~0`HXrnvUEdDw
zAa3<&bCc@oam3#Kx&1R>MCB;O7)K-YBQ__ihl{=eRGrwEQ+^k!nyL%S;Y3RbX61Ic
zI$o<WT3vcsKu#5`Q0C#KPG`QBNV+RNX?~xcc8Un%c*4+j*E!XKSUD<Wa+TZ#I*%Ld
zIG5Lht6@5my0LUhE4QGbzELVp25#Tlq?U8o_vE`4qz|YptUZ>qB}Gr($nWD^|1&m}
z;~z4yNl9g+A`NpWKn>yJjJS%!0FUvYI+|nYC^cd)cf+agC^1C};5i#Q>`Se!znLQg
z?!7@j8*;eMrr5ySB5~%|lw|D|N`rxaHRhex&G%+8V*kK~EKSOmuv&8VKWFJ==bQ4L
zmSe_cI=h|VJSGcb^R2_G4#<SKZ0Qhf8mR;^2n_}#o<8l>(^t|%PQLtNXtCr{S(9*U
zC?B<t<7FLXd;tWOZP=s1lo}a_A$F856Ak&^YVZJV)F@mJXZNeDA5<aCoY6Zbg_-Vz
z<chE)1cJrNBSr6rTY*{debHU`JFr#*dlgM>SPuh?j48eJ04a(kH`a?S-?4_lLD`VV
z7y`uc(b01T=>Ut-%0wI!9$eoy*Ytm<lJ<$cVls!r^0HW${1{VG(a=y|P@jW4`8<QH
zgse;4Qm(o)a^W2l^8gZU`vix*FFWd99!LJstwO0wDz=-rC0wyqF~lxut<p)!r4Inv
z6v7bdQ;*isY+0fAt!bgSR5A%*hXkIVROLQ}_?j~jf6bX{%}Pn>rxnhtFn=1U2%L5?
zp}yHGzb;&YefO(2GVGN*j;vM!D<n{*R+XM*dFc8EwG)#*t`os0pQ>8a6kw#Ft?Zl~
z)JIrAhZ$bKzKo+wn;Nh__iNHb7BKz%qUWO7m&W5Ap(mC#w>Hm(E_7YThE^sziPh?D
z4Lc*o7u4KOH5zn$VHQz!9Ig=nwd512OkDEfb#-XM=S<aQ(BpIVGEiYp^`n|arwde0
zWMQrla801ja(E>k+iG9g`IJckS|zf<X)eg~wQ#G*Cowgq1dvP+Lf!qLhyVOdu3g2q
zs9aBHx0Koz_+e#4J-5kd5(m|{1<{dHUw{sM+Q|Q<4hm|{!39c|_OWS-_V%&PC@}ML
z#OztHig=%sMWCA5S80uR0Pu!?0{dBF<D=e-`YI!$uHdfZSU5_`UaqyQsbS877OF!e
z^CD*8+=OD@P(W(9Ww=Logt#sGTC?LKOCP`w;PaXO`K!I{k3sVdKd0wARkR0JJ~sss
zBPCP2*0QQbFZd)okO43YHoX*5^!_e{__nLP9N%Gof`%zO_#jyzuDv!MBYbYyx2~<1
zPyOTH;LGGWQFN5(m2GsVv0L)*B9GsAKzdU6ELzvytJ?Oj2;_QIDY}LXwQ>{vtR`Cn
zJTXzh`3_z4Xy4yT($Bdd_}<z-)W4AfKYOmy<3|Q&M%MhcQ8k6+bF&LI-%#l2atCpT
z=uB(VYS(V3CbPcRW215<d$V)MJw-!LH(<w?bQOS#-||<YXbU1yXb-??p`XMS-;Lv%
z-VWK#HnfFl@b|;!C3)mt9QOgA^q{2seo<JLIY6JI)bp)j>m&*m8n9YEwN>;sgS}W3
zoWatlm<zfZ>AJ5e82wU9#>EZ_IXBNYKby9arLVWXvfz!w;x7fz4b;^d=c=aC_K?l-
z8)$#@+6U<$sv|6CxWw|LzCto(Tbs6rlDqFC=a~9KOG=bde&Sd3vg0RzA7NuS!G7P}
z-S@J_@X+gX6rpw`{8@5>R;FK~c>OYyKBJykOU}G44FA9ixJfa4u2avqNp#Czhn}9B
zq+eY#J6&p%s+t7|Cd*V$xGn)TX=clJT+k;EqLQ@YeS<(E6*qz}k2&xb=!m-+IUNmP
z$z<iJ;9P+ZT*@WsP?G8xl(;C;WUWRsU^_yuEk=3OId&EXX~9Oj-OStNlIy@+0Y8S*
zMqlv#$N}_e@%LH4B?N%JFBoh2y$eM2Gg9@-oc103lFM)Ovpw7-(`2*rfFrLf5#H2E
z9oLJ1UWffX>uZw-a@oXcQ#JORA!^uQHr&}0gy9>PwzdK1`mAqWgilz$?_yiF@*6YF
zM;Z*w?ZR7cUS#b}mtI~d*70LtK`7tu5~eqq141T{4=V0u0D3zC>`ny>Pa|mePt#Dx
z{g;7}+g9Xop@8E`4a9c{9$?~_0Vw&Q{VpeGDm@*N>U8zu0W$11xI%Pnxq1z=jM?9$
zJR2}JO+oH~<@MtQL+;fJ9VOJuF@7GvcucHMoHrdMI%2?P_ssVLzsp(PV1*K8`<rGj
zGw|E-{l)wB`LR5$a_sJQ85ErhdAK&Kq{vTRw7t%81^is*oDSDPBGl=S3#!cN<;Nxm
z89u>%3{gwa)f{%oju`w3LPmxkQ+V+<Iy?`rVn+@i_j8>YwsjqXb9mvpB5<*FAaic$
z1F(E#mmdr1=xdWcXRVIKBrOeXQX%F0f=*X6Mo}pdea77I_^PjYDf#BK*&+FW%$UJR
zXepQK;{#kT_H1)X&w2RorJrCT-UAj221M(Scv7$H4k10S@a?+bPP9KD+=3^Fk@kk_
zp68nfZ$G$qI<Y79ZwTDq=h_J`vQsfq`*J2OV9DmljlDd$4Y9R^+jy}3t;8f6Kfv)V
zBuansH|Qf%aivMeaK^R`1aYU%yv)W__FA)Ow|66&ppGjyG>*0E2ultMS_a@P2+=Pd
zozhlqrcW9ZNd#qW!XC}tKUr&Jq$_IRQioT|Hj@Eq<tvZ{!jbTKJGSgjV&2~FtETh{
z+pDu7*mJdRH-L93vHBjYj&i`-ulxS+*mlI6nS=EfDSsMgdm%K+f*=A)he~Gmo;}`1
z_2#?9!UHPd`+y23@Vh@YH?l7$Th!h7b}URT(OdM$0xh`tUL$Wa%<I@6x2er{^NC2u
zXKdlTI;eU`yX@+^#k|jM%AM-<#QFU^Xjoz%WU6BH>SIvPbB-dgjszOx?WbEpAYy@C
z^!_{tSJB+d-T>`W-ob(oyjkn_KEB|+Kc3xH=o`g3t-8Jt4t(p~2gY6-*Ab$0+XU0)
ziLF)4+g^>h@%DGKRolTt^7-mL$VFXKJ;&PEaGfVH0see?*X+*^rmEM62}CJ*%EIq}
zfL)LsB3}2-r`OBwovMy~csrQ>h8cf{JpKvmqYP@<A~LHN;d9hk5%meG1SEik<S9U!
zdK*2@t>h2AdI`liMh+2%ikNHHorzM4$KAn*M}j_S=pT@`DiG}dZqNVMojd=gwCV5m
zobju=^=qG!lYsMUr;?3>`G3;q%>Sg%*}jDNf9Z3EFG>Dy^!Zn1&wtnF8vjw@!@|P!
z^{)S~ZRfu)SN?0~&fium)&Ikx|GjhPuN}(274Q7#`sCl2C;!&HV^8n!KlJVV|F1s&
zv$FoHZ2cdV^*_{){_l%;z6zw+|4~_MxH%)Qq~jZszy=EV6VV8&flvyZkRrr)rp!k4
zr5Z_<UTqG`#uq7G&#R{BkZNCb8D$tTWFcss(2fNQAjMBja8qWaa8EyWZ&H(cZF%`!
z@OvFS<KSBGFmFG7th3V?Jy7@$8S&z0WM}CxxCtA2t9cqdN32bvpxxh59BmWLeouVQ
zFhB8OBgPW{;ecqcak4X!P(j9&pcjaXocjP~#1iqSwm2Q1#@&4BY5e<wvjXmL{BA*c
z0lI`vtM+E94644&@14oT#Zl1Ha(eOfIe>)oT*21WQEvC>;R4j5Z_y^Ce&4D1)Ax_x
z=NUfw+aKL*f>3t#gG!!8Dz}-lPSzJIm}S&zbh}uI{RkwsF{FY7Hu8}|Yf0H($=$qc
zPU6ec7rMXOAdcy^c#;V82#rG3!)OPs2G#a-_gsvy8M9X9CJBtf(gxx7V2#KbBUVMf
z#4-{-LPcoXAf6E`V~mFIB>6HDOsLDCkP&a)PYoFnL^~wuP}xBxqICC&RT&!M`mozU
z$2~BA@lKK2P*V4AgXTm*KPruuX9`?nUipmVL<UYQ3St_9E~uuzPeWaOx8-k(bB^=F
zU*K~cTFuFs@VOdraM%aW_WSxfKVpZw%`M1~cNCOH|NcAQY%eiPZVLzR1L=+QwMhG2
zoy>u3jhHoVC@w0_40Hk1#$WCPXGQ?QA4+$!5Fz4)qIdg<?N!C?m`NSf1IO89^^Tlm
z(GuxV2x}O$wPVwhy%a)K&aZYK*aXIajy#a)lB)ymB#1z>?3X!-h50@lj3F5Qv_C*x
z5z~vucn+2%1Y^1^toEt<vOz+R9T{Te#;sD>%3R>=yI#+Xs_KTQ?hhzyy@rl;Rb{?5
z?iM<W{o*O}TdVvS!|0(pWn#9T|F5+x4~MdC`((>jc4eK)USsZAj2YQ?vhUf~$ymoA
zOURNXqHM`lb|Fa=B5Rv0B}>RwNY;uLA$|AsJn!=|`o8!5<D0|b7^idjUFUgT%W>Q@
z*H4QPzanmx$*LLAhpWxhv>o;Mg4~opLm|2Pn(v{{e714ac=)YP?#^ybG4csAaTB<;
zv2q)(^s_`Fc0BBs{Fh~@Vf_r(`^BplyCpQ2HsC4Wqr=#iW?G}KtTV|6NLQTG6ZAhh
zY&|-py6S}<H1+$Ux9#;6|A;%EEz9?@i5CS{(V<tGBagl#o91pM?etk_=jOiADdufc
z!Xv&{-#Ztl6;E7@<K%t09_SNfe0u)ksJ^O;MhH~+>1VZ%9gs<5;{`0!vlkCunR^_^
zu$U_rb1(P7?xxn;WVzvNr7AwdJp%bC1>t>Lm@7qEEG_r_Ip0O%XR_x4<Qv28{dlL=
z_tpL3<u<C-wMy=*@dIqz$t7u?#}Q`);tGt;ip)KwB-)w1ZaCLtcfCoMzxm~42=$fe
z*!NvYa0S2W+Z}zZD#n@4VbWt=R|#Kghs0=P@_aPM=uWZ89S&DLEXK90LgOka#6mf@
zy)~cQ5~|zT#Vt9J^%Kof5SRG<t<d@y{rXnni<|7CRVW*}$#CP7@vLwoWlrRe{Rx?$
z{2vA3Xj_JCoeq{!K&cl{s>Mf@-WtslAB!x970dL-u(I2=jf;LCOrsOLAYkydT-z54
zdFzKc*vvQ?;zzLeADHN_t263R7#%+=N}*gj=)gLHalL+xnX2By-Be(hc4+oQVnWj8
zk?e<zS7M7erTB9RMqQ!h;LTg9QCwR(XB4^DZYDh5l0_vdoS0kE=&#VxXr8|nnJjrE
z<Ob3j*rKxP#MGa8dm}!l(Lgoih^0MyfiR!?^Q~3^g*3!I9<DWNb=6ia71(Okp{}nG
zZk7DjE5BYC<mJaQJ`K0C61@Iv`x_00K{4e*7t0)Xt=R=jEMb~Uc8kFqR!>1|>PaKo
z&m$eFK!uVJP`hPSC;UEl$(*vG<z`WSH$Q`I2?1$H6t+Ge6Vx1I`b#J>GxGkLOO6Rd
z{JuG5>9|Wkn@hJ`n|6|;V5l{ZW@`;=p0F!>R?Wtzh~ssa1KKj03%K&9%T+D8U7o0-
ziLaTGx4y-UU8)<(Hy`pWTz%BAuuri>%aV2_H>U7*sLs9n_s!8x_4XyT$jfg|t4w$3
zB46cnJ&7muT(d1HNY0vl^CgDRb1C86Vaejq&4Sg{>7sUyA2Q3E;bXQI*5;Nn2H(@%
zqQ=52+qo#(r|*kc<#xJrY%m|7D!JQTj=rcO(#CxAN<&J98#5zRS?XDB@yKnJ;#Om;
zrKY&PJ9);Og?Gh0h~=a4!fN}KyBCjeg@nDruZP|FxZaVpmRPAYMI%{bwV1l8b42kz
zwZt3C`0|6C?<I(9H!svbs`M*Bm=b7lR(!`zWfryX8T3~AG%U$04yEB;v?)IL51jmP
z=$tA?=0~6LcEY$wmT!-R+m`w0(?gfud<h&{p$MojHrr<zK54j6*~r95JwC)^#f)KU
zLbo(1e>8o26kjoVjT1#LpqSnrYM=i&X4{$b-G*#FQD2ayT_K<x%@f{PQtTmPe{a5`
za-VgPgir<U{Qy_Ai1N_*^ueP+-y|`)Ftvmc$|Qvk#Po1B1N;GpBi)DrGmA)L0Xvz^
zsXH^zniEV`DaIMHo_$*|n47<vrof%Bk8h&uh-P&<U+ybcGYYwv*!Zz^h0q_`u_4dn
zLwy#J71J952C)Hj{fY+~6izNqeOqe&=*k+?d@K9#g1v)>D$}w+)?@Sf85*LeB#T?M
zV_fLwzRgg23%HR6$FTsLwXBGT17+g@zBeLaZMo&K8hY)Als<*1%}a3~Ry0L@zr-4j
zh<d&Bq?z(jj7O(Lr(2C)C09b~Al;|v_2VDgG%;_5LgrInlsQpl@K!~+Pg#3)Z7VjL
zFUecrSue#_W~F|rLvzV?o|tRt!f%YMP^_~A-_k4WbL{6;(-Ktu*gG)0$gG}6iMGFI
z_3T`Z>CMjanoMYLKDy%yO>I$8mY3|r#Fu5x<mZiN*me6AZz6-cmMDg81~NX;Z^A`&
zezI)c5j2ajP?2ZaPwm>Prcx%rw~ryg<VK?)ls!+N_jG;5I}?>b;S3<0$8{x6c4jN=
zNz3ynXlvqUd{f@xz-9T^?=rRf?GK7F;6K<HsijdG*B)t2T)i2x&eSqK{Yi=P7#B5c
zLzX*U<I&gd6-u0kCVSTKFP7%-VksGqA33RvHz<|0$G8FKv}Gww#`EPPN=J@kPQKL9
z-HsR(f?-5)FIKw6B|?3o*%@O~gK2-gc{g0H1AoGELEEc}IovVzO?<2)g^Y28q#Vt|
zqhgj0-TM%TVxys;&F<6nR7ACrID=bsjwyBG6-E;X1LLo+vkN|dqQ`X`#6?#QuuXZa
zxyk0yU*LPZeHIgOk=4ZZON^j=xYg6226m3?lS4m!ot_}AoR7SR=BQjh$!VDASxAkn
zp<cUbVJqL_tV^FoiB83yEv(ue(I;%2kC&n2y&WlV7g_~xG$>1XDc~;*l`wAns>t|F
zE#I)h47`nziIDZVcH#OL(W#e|?7;9Bu2H_qULY~hA?`F!`;ud`0&8dE;nq5)k&~VR
z73N1z^z1Llu<^A?ph*&now$7Cn8l=jzYW`h2X>9q8se%Rz}IjffqQ>w-tgowW%!$E
zV#oQYu9Xh%R@1wt)~UIdZ)ndB(WDiGw--{nv1Bx}s}<BC-ohf;E*YmjE|<Ot;3X}*
z@L_#p9IIT`gBA}L#1B<-r5_$PV$KvnzO;}UO0K>!#_RZgNQX&2rtzctY7$(F!13#4
zez#7d9^HlD!l%3ov0Zdin`t$}D};4sy*6Cb<ARZjkG*9{9rq!szJ?r@O(mjl7b=e}
ze~N~QcfK)`dnOvBhAmzwnRrls=DXSlo50vfhe~k@{8Z(*>(T>Gp^p|`N)KeuXqVT|
zum4yPylk5v3={BPWXxXR>QP%?l1<1waBMv|xAUekH?HEITORcT1o#a@YK%wk)(zBC
zrN`A8xf&7?bnDPC<FYpQuT%&VTSJ>;RbrTHDKh@d#n{rOe0m2%aq7$s*Nc4&;hhUc
z`wwuRTYil35B8gd_qaw*d7{))Y=rtL@>yMTEiXT>@L!-1H<c&~GWBzJFZ=ZhGB|A8
z|0>`%O(J{RvV?JMguqLKfX|D`l0yhsjx#(Gc691yzUH=Y#hZPP6weGEVyINFXp8wp
z{bAPO_?vEM$dypa-k6WA>4d&Yxv0h0OWKNsW(j(2hwS>{_3blUOGC5Q%oa4ST`2#d
z!HYQSwQldGgGx`~6K$IZzwBjnu51?e^Ltt0!OLHBD9$@y`PE8sgVijVHb>+aEYV(e
zEP;?aka}N2dM(f5nutCiNjtL|Vi)zobh)ggy=X(l;}eU4a@-I7kP)qiteoBMTSlcX
zZ1-&_a`KP%)xSeMr|1kvzkFVxA|4$(AaT*6(A*)3H<#x|fyts7mC=cegtc-PsJTzk
zIjWWD6AQFCFa79pgsfH<YZ&p-*S_IZBn;D^RCLtn>V$gJ2dgn?MZBw6CS>lrf=e32
zQR4FIiVp?2>7vus@ca=P+$yFume&=RbN8>WO|Dm4r93)E(Exq;tCu_1?naBIRNWV|
zZ~N}vx2{5;*2VF=7@YoW-5JT?Vq<)>+-J)EDGtS`tJdEai9O@g^6-4g>|2fDl$D>7
z(kj0=S7sXdz6{<$U+ufwN1KIoE$a_g&XYcV2~japAl1*6Xg>;Mel1si&=oi6e{jOt
z`jycM1L4~;0m6J;w^&0^As6^(fEP$^*7KOCi5~}#*v|C@DIVW1^L(qa#eGD$Zd2v_
zp;N;*^a0qA-mO4}!s?UU@Qc@ItFvo^v5<SgcKAHbq~-9!vQd4NfEOJqhk!;@S&0~x
z_}ulHV5s80G;{)SPH9PSBkVMU-fB{)mcvu2#_anOn?|47<yhV{T%9Q;LkAzz^M%b9
zU&iHxmAj^(VF~vN_7^!W6kw|gX4m=|c!Ph1vLrQxof;Szvl(<|Ud%q~%n*P-3iA>}
zj+H({%|({!Fd9YhOxrlt4BvUyB)=6&Aq>Z%EtP#~yN{TfvITnuUW6QeSY&=#m2a%d
zMv~7bOED8UQx?Pbo}aRc=XosMa5~>Q57mRWLK&OdL5JeAoVrilyERmL=R+{{7W3Wp
ziu=xebUti4^D^dd#lGJ&)Rn|kY<M4RWp_A#wuA12R4ofsrDhV___J?0HdOGum@<|i
z-!ffs?w~&9-3Qi&S4`8g(shfAguAY4J|l49&umZhKKQ~|^Dblm`<E|ew~g)qpU2bt
z=RB3BDS1>1%3k1<1#}|m>>1M1;+hDfx9s|yWs{k<OGWE?)gH;C<lH1VH%oi8Dky&p
zZJ)aGbzBRxR#-al<AwY}LqZUPm7$~5nilVga)<oGg2+WLbw7mh4?AD3gD`gep14Fh
z<$Dv00VDi+(zC0>HmxdVU6E|`(BnFb&rW_D>}hHL5Z1>Zn8AFSPoI~UH3wIJb8{$2
z@#>~da5rZ{CSu-GB=4zask>W+gnO_NkHT=a(8LXi=Xz-?FRttM&TTd4eD~`(&=fEn
zmK5IqdDN%P;5JndCjPm}=F8!?3crrUTT+ebhNZImMY6?K)z2}F9dQMQPH(ogMDez5
z54Ekl_nlH%g>}8i%TRmP8&OfWDmPd>A>vUj_uxu_l35D#w}_kVKk3%)&S-78LOPN%
zrw<(C7anMZRlM!(n3ZA=of{Qw8_7V(U!3`w+vzwl<^A3wyfgp%j2VtY)QL&sM2Ppw
z?S-X;pn<EZnH(Gx>H0RsIftVaK8n7!Rrqu)XMMe+)chNN<~T&gB88iR(^<_^C9{Ll
zLoa#K((yQ@(8p5m=ATQ3FWFE-22p$y-XD$xKdEy%*%sq?{64i#OG&`&yRPNoto4b;
z&EVTZL6H#>hCwcNyn1U*Ep3_I9AN>bZOtbB)`l{|de7KOsSu~fP@j6D^{WhjZRr(!
zWCw5j$QFs6)VgI}p)sMg9)D_IMpS9pd+&;ssNlQOb#QSve~v79ed?$1YLS3Th|YRW
zM(VmYTlcB~if9%wALr-Qr+c(hg}R@McZ7Wl)q~}j5A|*K&FgzvuTVRyWm>vC>D4o?
z7Bjp@M`v*FiuqOUqHNleyf<vwel`beg~vi44>$8n3HoVAsg=$tRZKbDdDv7@`LJOX
zz^I2czT?Qcq@n4%k?3Vr-F9a6rq46eYzC(D!_T-pj>$05p9<$)Mm_+9;`tvx9-ni#
zJC#MRr+9FLAVQapn6#%(3wlHGBgpRgrnkpfqHWsz^6e0boGQ9&AC+&Vem`a}Kl5n~
zc`3NkOw!!7`t`zBTf1uHRAtdv`dPX+Z9my2>M*u2iMv9l3HrUGTU<?RAD~31KHFM#
z#ixgS!_#!=HLYkLSPIy&XkBC9vM$3MuhD)rW?=PZz<T%!@AZqfQV)9_^gfwv*Uo)I
zef26Fufx;Az2d@6Ok>N{Vlq)&PFvTUP-zkB$d#HM<aD1LHca-#ADczfB}A%G2GK0{
zGcSpEQTfcQ4p$zZh;ROB-ozoZb+qglKd1e})uF2#v4oroK>9;c7jI%^V8e`j=sxW0
zM{<nK`CRh-=}vDNU!7l{?tqp@x*6&=!#b+N9yO|T2jt$$pX)g8fD{$zsX*O`P(8=e
zTg}kt-tqNI@4nzD`s^pk6ag1sFHwx=aY#R8G`gfkNb)U(o<BKZUrCfWG+|%oswZmi
zG6W>t(JWEtO+<LmrF<)Dx%QmHX0?MLa>?UBF5%s?rsVem)#+J2%dZZ8>$NI=DfT(S
zq2A7(=xrv#TNmvU_{tW4hx_zwjP+nx&8vdyg-Y;a@7Q<Dr{GNbtzUn7Mnp09rQ?;a
z<BY9b4A;_Z4eZWueU2;m25*V6PzdFR&-~~R?!5+-)KKP1JHdkO?rDVcyG_fW7_M~P
zXC7Peh<p@kp%m>!``mluS+dKVlap4Ug4r|yI(gBNW+bjSp7!%h&KdV=E{(7--d-7r
z4Zd$*F66#LoMpIF#ZvLnf%-%w`?_J*mtZ)TYijAh+zDTEqq7;~^h-rijAxJs+dWQg
z=X#1Nt2Z3hK*>d`c6{Z6+FoUDPqR0CGoMuQu`2q<F-B&&Sf{oH!jWuzFWk78izA|-
zVEt017$rQCS?5v@^BsFeC5?t(+UuVaQQw=|94gh>TMivyD93akqNU-bD!zC2h*xi%
z-W`4Y3oY^&PF2tF^IAqlw|gKmyVV;^N~=d6(O5>YrM53g`ZPpdm&wVsK3jK;qN)A%
z))S_(fjlvm<xZX9My^D+K$EZoCdoF@{`1+dJrt{6aNAty<a&A_@lg|MD|iiK+rAY@
z?|Yb_Xw2QMuL5&~v$lAbm^OBP;^Q{`;+NC>X{N)MKm5enf~zT-Cp)ghaD%VL=w2+-
z@!rUnWyW=S6Nh9+nVzw=9GH`+)YA4;BYLK&9jLYNx!W}#6H&PQy*F;m7Ts&qBE2ka
zSdZ^R&E3K~E2Z)>q&JA+0&5}3nMv92Y4nbKfWl5LKGE&(8%r2+j0(7XzLEl}p&;Ol
zOU!x464_C_eYt6!gSp33db+;q_+Wj!_MDx7<kOz$AKe1?vyqslSpIjdYu%-ZrSU)I
zireoz6&h+YeF|}lLfs$73nG^`L+g%yS~;2ST_o%+R4_i`TCx!?YkXDMe3r_{fygy2
zh4yH(^=MmBIALLXZS;D;(qi^xN6&eSPa%32-#7wqZe<0!F=`uo(9$^TrPnsp)y%)8
zVO`G9Lb=swiE&l<St|1AN?xv_T0NH+w_3NEHLlcnYKmd_VXG&Rp&K*fR{7(-wfljy
z4^HP?wUY=|sr)JjZIkCSe}2g_p(p;~xc!~1@R;s{&lVS>+BUY=OM2coF{Zpy{k&O3
zf4VBwo5+;u(S+(4K7L}DJ~YHHu5j#8OhXRgm<aRTYfPw%3K);|@Px9+xnujQr~LWO
z#ytJ?n)uD;05Z%qXuU@!uytVE1zvbv6{u2*x2xAEpYRgyLrc>=dFRB$*N@&W&lOg;
zF%dbykt=IeyJ_GR+*|GzmA5&X{QgvUlP~Ty&&A?rHwzffE=_XWqb<%;j^I;XfpA>#
zw*TM|_Tk2U!O*OPuj?Y#UDmS!2mCH<PzK#cN}+92crsKT&ps085?`vFk`=oz^+9uj
zTafeqa$o>Lv%ge=k%9dnpLQ!B2ltuRGba5LM->GM(tmV5OgTBHpE3B=@CKh?2vhUE
z0N*4}SK(aikPIKH++}HzwdVT9*`<^2g{cJywds7{rduhemt*lRIiuB=uU9}1OD93L
z>25j;Ywdkb^B2?M&aXNCiv;oC*Y{iK>ip~Oe(;Hb)IX05WEBEIt^juzKZv8t8N8RA
z=*PwuQ3&2yPSjjV7tkfBxVYjqgNZK2!Fnc6!R}62XHf-t23Z9MXKzOrXrKcDiu+9(
z;0poC66B7m80n}VB`E~T1bPxYK`ur}pr?nIuS}qv=x-Al@I6Tk6NUU%@pG3Gwa_(y
z_<4JKxZ^>}M@g(C912ICfZ&KApF@B*(H#PpM2mthiOx6~BUSak9fE(!iMsmv5oBPn
zfPetW0HmZh@eB-(#bRLq0){|9K@F&Hke8oBAk@qE7#Qz25WK}dW?sIMzcERIcWA=!
z7BILZ0Q*-U((@-0cNpH=3qlI);OOn|CwKJd-(CniqVIA8{sZ)b1cwK{lQAHAJNrAi
z5amQQ40IqGuHL?Wf4POg0Z9NM2^WR^J+S`}4@~BtVS^R;8@DW|Bcls4XyJlXLH-7L
z1b{$60R$Alm>`fcD69+|V<`(GQvwSGTB#6SK#TuiwL@u#l{e7@tepHAqBjl)ISbzP
zNlF-85`mNi{tEWn>~Aeu7%7!IhWcL)-hrU2`+pDL)05OtBt02bZzq3GkhVihRZi63
zAMY%K#KJLfM@K9a=YqpR;c)O50KT9gI}HwjLrbFp7l;404$e;h;2`)DJ$|>GvlGn4
z!-W*m7c2!F1mf%@gYzbOI{1N2PauFCHV&jdf`J_&DlZHE(+}_G;UfRLp_M%R{(9qq
zC$*N0hlAG{Inh9<vkT6_-@{K--qh>2w)0=P^T5mh_2#!7?BBlrklEiNaKeB|hW#@g
z<ryIVPp|(!NB>@fzzcolL<2}G%$}=#ciimzuURGbzf3A|@VPIkqrse$dRk0XhBOxd
z1b{&xQD8Gz0)Qy^1FC`3<v(cr-M(UfYH;y?$PELDE;x`I2&6t@Ahp(CF9=#n3MmD_
zL4M2N00M&qpQw{w5U;;wNF;y)AN%f-0SGA)cjZnQfW@Fmq@KHE0075;N!cw!0VpyV
z96%#U^qxEQ;0P%Mi4l003;=1Q$nn8JP9cy@ZMPl@OCtH*B?AekrO0If0!!lg-KhtT
z14ANR-X#N20GbRl0H84>0^*%|AZajiPh0?vCDGpQ)<a;)v4C;0;H}QP^hhzJ$+3V%
zk|x6pGIjzaZp@uA04(-5>-R1hXiFkc-z`HSK(eJ>GLk<MW%4dPEEYlD2LK#}Ah9U#
z(gQ0_B46Gq1O5HxOWY{~@%`rZ+a&{SK_aMKwg3Vlh1`n|{s(+gB$BFK{y<wPGAsZB
z4UjmTcj|%o_Vf^l4=qg=mt;$h1xyt{;-Vw>M`DBBDFgjsNZg^jWS}jAe7s1M6p6KZ
zryht8N#6IMKP;NOmY^+`JO@aOG-~g7k=Q+$f#3Y+JL3YNEqQN%lNXC2iwojIk>dl2
zw86sd9tSu*z?LSLp%LVBkmT<V_>frgoTAWRg~|L$0dNwN>dtY1{-pkZPYOj|56~7#
zUJr16B=Ogi`}+eva6#Cu2Y|LDI`f^jfRywfupsxYYhYLH=?%~pO^y!@mjcM*g5yR1
z0UvhHS_0aVublu|3Q6Kg--#LYC%rd+AcHSiUO-zEK%P@@`TGMt4ESLyvKZhJ@dw*I
z_@qgbklYrDA<<m##tfdF$npY!w&Z&XAT70LZh_;){sEs9iYx}nc27N|v2gNnko^4t
zADEflm;ums&wdF~@9mu*DButHFniV}(00%K0JmxKJpkOdfIr~dvxfp0G-glD!5x%5
zr=UMLd`}M{z@rD*ctKn8wF$r?k>u+J$=}|bB1nXRyJ}9dB|k?1SP(PWngjYn!1t`N
z2-Kcjfwtu5A<{XAybnnJNTlhz`wv{~$od7;0~bniJ!u5_UIxxAU{B5A($YxsoRYS;
zy)nRp1bGaQ#&^$n(FpRff#)y``5q4zO&Yty){p1_vh)!dWMv^RV|=g+=|BmA8F_pA
zLBQ%lj36*AFPt|7w160aABt3kSjkGMqtGg76=^^foN3^qD}_-~#-h<`0740)s)|sP
h|IZpW4B)2_ef=DWe!q{gaImid1cR`!n!Y;2{{Vmrg@6D6

literal 0
HcmV?d00001

diff --git a/support/dist-docs-branch-23.06/ovn-architecture.7.txt b/support/dist-docs-branch-23.06/ovn-architecture.7.txt
new file mode 100644
index 00000000..a7ebf999
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-architecture.7.txt
@@ -0,0 +1,2171 @@
+ovn-architecture(7)               OVN Manual               ovn-architecture(7)
+
+NAME
+       ovn-architecture - Open Virtual Network architecture
+
+DESCRIPTION
+       OVN,  the  Open Virtual Network, is a system to support logical network
+       abstraction in virtual machine and container environments. OVN  comple‐
+       ments  the existing capabilities of OVS to add native support for logi‐
+       cal network abstractions, such as logical L2 and L3 overlays and  secu‐
+       rity  groups.  Services  such as DHCP are also desirable features. Just
+       like OVS, OVN’s design goal is to have a production-quality implementa‐
+       tion that can operate at significant scale.
+
+       A physical network comprises physical wires, switches, and  routers.  A
+       virtual  network  extends  a physical network into a hypervisor or con‐
+       tainer platform, bridging VMs or containers into the physical  network.
+       An OVN logical network is a network implemented in software that is in‐
+       sulated  from  physical (and thus virtual) networks by tunnels or other
+       encapsulations. This allows IP and other address spaces used in logical
+       networks to overlap with those used on physical networks without  caus‐
+       ing  conflicts.  Logical network topologies can be arranged without re‐
+       gard for the topologies of the physical networks  on  which  they  run.
+       Thus, VMs that are part of a logical network can migrate from one phys‐
+       ical  machine  to  another without network disruption. See Logical Net�‐
+       works, below, for more information.
+
+       The encapsulation layer prevents VMs and containers connected to a log‐
+       ical network from communicating with nodes on  physical  networks.  For
+       clustering  VMs  and  containers, this can be acceptable or even desir‐
+       able, but in many cases VMs and  containers  do  need  connectivity  to
+       physical  networks.  OVN  provides  multiple forms of gateways for this
+       purpose. See Gateways, below, for more information.
+
+       An OVN deployment consists of several components:
+
+              •      A Cloud Management System (CMS), which is OVN’s  ultimate
+                     client  (via  its users and administrators). OVN integra‐
+                     tion requires installing a CMS-specific  plugin  and  re‐
+                     lated  software  (see below). OVN initially targets Open‐
+                     Stack as CMS.
+
+                     We generally speak of ``the’’ CMS, but  one  can  imagine
+                     scenarios  in which multiple CMSes manage different parts
+                     of an OVN deployment.
+
+              •      An OVN Database physical or virtual node (or, eventually,
+                     cluster) installed in a central location.
+
+              •      One or more (usually many) hypervisors. Hypervisors  must
+                     run Open vSwitch and implement the interface described in
+                     Documentation/topics/integration.rst  in the Open vSwitch
+                     source tree. Any hypervisor platform  supported  by  Open
+                     vSwitch is acceptable.
+
+              •      Zero  or  more gateways. A gateway extends a tunnel-based
+                     logical network into a physical network  by  bidirection‐
+                     ally  forwarding  packets  between tunnels and a physical
+                     Ethernet port. This allows  non-virtualized  machines  to
+                     participate in logical networks. A gateway may be a phys‐
+                     ical  host,  a virtual machine, or an ASIC-based hardware
+                     switch that supports the vtep(5) schema.
+
+                     Hypervisors and gateways are  together  called  transport
+                     node or chassis.
+
+       The  diagram  below  shows  how the major components of OVN and related
+       software interact. Starting at the top of the diagram, we have:
+
+              •      The Cloud Management System, as defined above.
+
+              •      The OVN/CMS Plugin is the component of the CMS  that  in‐
+                     terfaces  to OVN. In OpenStack, this is a Neutron plugin.
+                     The plugin’s main purpose is to translate the  CMS’s  no‐
+                     tion  of  logical  network  configuration,  stored in the
+                     CMS’s configuration database in  a  CMS-specific  format,
+                     into an intermediate representation understood by OVN.
+
+                     This component is necessarily CMS-specific, so a new plu‐
+                     gin needs to be developed for each CMS that is integrated
+                     with OVN. All of the components below this one in the di‐
+                     agram are CMS-independent.
+
+              •      The  OVN  Northbound  Database  receives the intermediate
+                     representation of logical  network  configuration  passed
+                     down  by the OVN/CMS Plugin. The database schema is meant
+                     to be ``impedance matched’’ with the concepts used  in  a
+                     CMS,  so  that  it  directly  supports notions of logical
+                     switches, routers, ACLs, and so on. See ovn-nb(5) for de‐
+                     tails.
+
+                     The OVN Northbound Database has  only  two  clients:  the
+                     OVN/CMS Plugin above it and ovn-northd below it.
+
+              •      ovn-northd(8)  connects  to  the  OVN Northbound Database
+                     above it and the OVN Southbound  Database  below  it.  It
+                     translates  the logical network configuration in terms of
+                     conventional network concepts, taken from the OVN  North‐
+                     bound  Database,  into  logical datapath flows in the OVN
+                     Southbound Database below it.
+
+              •      The OVN Southbound Database is the center of the  system.
+                     Its  clients  are  ovn-northd(8)  above  it  and ovn-con�‐
+                     troller(8) on every transport node below it.
+
+                     The OVN Southbound Database contains three kinds of data:
+                     Physical Network (PN) tables that specify  how  to  reach
+                     hypervisor  and  other nodes, Logical Network (LN) tables
+                     that describe the logical network in terms  of  ``logical
+                     datapath  flows,’’  and  Binding tables that link logical
+                     network components’ locations to  the  physical  network.
+                     The  hypervisors populate the PN and Port_Binding tables,
+                     whereas ovn-northd(8) populates the LN tables.
+
+                     OVN Southbound Database performance must scale  with  the
+                     number  of transport nodes. This will likely require some
+                     work on  ovsdb-server(1)  as  we  encounter  bottlenecks.
+                     Clustering for availability may be needed.
+
+       The remaining components are replicated onto each hypervisor:
+
+              •      ovn-controller(8)  is  OVN’s agent on each hypervisor and
+                     software gateway. Northbound,  it  connects  to  the  OVN
+                     Southbound  Database to learn about OVN configuration and
+                     status and to populate the PN table and the Chassis  col‐
+                     umn in Binding table with the hypervisor’s status. South‐
+                     bound, it connects to ovs-vswitchd(8) as an OpenFlow con‐
+                     troller, for control over network traffic, and to the lo‐
+                     cal  ovsdb-server(1)  to  allow it to monitor and control
+                     Open vSwitch configuration.
+
+              •      ovs-vswitchd(8) and ovsdb-server(1) are conventional com‐
+                     ponents of Open vSwitch.
+
+                                         CMS
+                                          |
+                                          |
+                              +-----------|-----------+
+                              |           |           |
+                              |     OVN/CMS Plugin    |
+                              |           |           |
+                              |           |           |
+                              |   OVN Northbound DB   |
+                              |           |           |
+                              |           |           |
+                              |       ovn-northd      |
+                              |           |           |
+                              +-----------|-----------+
+                                          |
+                                          |
+                                +-------------------+
+                                | OVN Southbound DB |
+                                +-------------------+
+                                          |
+                                          |
+                       +------------------+------------------+
+                       |                  |                  |
+         HV 1          |                  |    HV n          |
+       +---------------|---------------+  .  +---------------|---------------+
+       |               |               |  .  |               |               |
+       |        ovn-controller         |  .  |        ovn-controller         |
+       |         |          |          |  .  |         |          |          |
+       |         |          |          |     |         |          |          |
+       |  ovs-vswitchd   ovsdb-server  |     |  ovs-vswitchd   ovsdb-server  |
+       |                               |     |                               |
+       +-------------------------------+     +-------------------------------+
+
+
+   Information Flow in OVN
+       Configuration data in OVN flows from north to south. The  CMS,  through
+       its  OVN/CMS  plugin,  passes  the  logical  network  configuration  to
+       ovn-northd via the northbound database. In  turn,  ovn-northd  compiles
+       the  configuration  into a lower-level form and passes it to all of the
+       chassis via the southbound database.
+
+       Status information in OVN flows from south to north. OVN currently pro‐
+       vides only a few forms of status information. First,  ovn-northd  popu‐
+       lates  the  up column in the northbound Logical_Switch_Port table: if a
+       logical port’s chassis column in the southbound Port_Binding  table  is
+       nonempty,  it  sets up to true, otherwise to false. This allows the CMS
+       to detect when a VM’s networking has come up.
+
+       Second, OVN provides feedback to the CMS on the realization of its con‐
+       figuration, that is, whether the configuration provided by the CMS  has
+       taken  effect.  This  feature  requires the CMS to participate in a se‐
+       quence number protocol, which works the following way:
+
+              1.  When the CMS updates the  configuration  in  the  northbound
+                  database, as part of the same transaction, it increments the
+                  value  of the nb_cfg column in the NB_Global table. (This is
+                  only necessary if the CMS wants to know when the  configura‐
+                  tion has been realized.)
+
+              2.  When  ovn-northd  updates the southbound database based on a
+                  given snapshot of the northbound database, it copies  nb_cfg
+                  from  northbound  NB_Global  into  the  southbound  database
+                  SB_Global table, as part of the same transaction. (Thus,  an
+                  observer  monitoring  both  databases can determine when the
+                  southbound database is caught up with the northbound.)
+
+              3.  After ovn-northd receives confirmation from  the  southbound
+                  database  server that its changes have committed, it updates
+                  sb_cfg in the northbound NB_Global table to the nb_cfg  ver‐
+                  sion  that  was  pushed  down. (Thus, the CMS or another ob‐
+                  server can determine when the southbound database is  caught
+                  up without a connection to the southbound database.)
+
+              4.  The  ovn-controller process on each chassis receives the up‐
+                  dated southbound database, with  the  updated  nb_cfg.  This
+                  process  in turn updates the physical flows installed in the
+                  chassis’s Open vSwitch instances. When it receives confirma‐
+                  tion from Open vSwitch that the physical flows have been up‐
+                  dated, it updates nb_cfg in its own Chassis  record  in  the
+                  southbound database.
+
+              5.  ovn-northd  monitors the nb_cfg column in all of the Chassis
+                  records in the southbound database. It keeps  track  of  the
+                  minimum  value  among all the records and copies it into the
+                  hv_cfg column in the northbound NB_Global table. (Thus,  the
+                  CMS or another observer can determine when all of the hyper‐
+                  visors have caught up to the northbound configuration.)
+
+   Chassis Setup
+       Each  chassis  in  an  OVN  deployment  must be configured with an Open
+       vSwitch bridge dedicated for OVN’s use, called the integration  bridge.
+       System  startup  scripts  may  create  this  bridge  prior  to starting
+       ovn-controller if desired. If this bridge does not exist when  ovn-con‐
+       troller  starts, it will be created automatically with the default con‐
+       figuration suggested below. The ports on  the  integration  bridge  in‐
+       clude:
+
+              •      On  any  chassis,  tunnel ports that OVN uses to maintain
+                     logical network connectivity.  ovn-controller  adds,  up‐
+                     dates, and removes these tunnel ports.
+
+              •      On a hypervisor, any VIFs that are to be attached to log‐
+                     ical  networks.  For instances connected through software
+                     emulated ports such as TUN/TAP or VETH pairs, the  hyper‐
+                     visor  itself  will  normally  create ports and plug them
+                     into the  integration  bridge.  For  instances  connected
+                     through  representor  ports, typically used with hardware
+                     offload, the ovn-controller may on CMS direction  consult
+                     a  VIF plug provider for representor port lookup and plug
+                     them into the integration bridge (please refer  to  Docu�‐
+                     mentation/top�‐
+                     ics/vif-plug-providers/vif-plug-providers.rst
+                      for more information). In both cases the conventions de‐
+                     scribed  in  Documentation/topics/integration.rst  in the
+                     Open vSwitch source tree is followed  to  ensure  mapping
+                     between  OVN  logical port and VIF. (This is pre-existing
+                     integration work that has already been done  on  hypervi‐
+                     sors that support OVS.)
+
+              •      On  a gateway, the physical port used for logical network
+                     connectivity. System startup scripts add this port to the
+                     bridge prior to starting ovn-controller. This  can  be  a
+                     patch port to another bridge, instead of a physical port,
+                     in more sophisticated setups.
+
+       Other  ports  should not be attached to the integration bridge. In par‐
+       ticular, physical ports attached to the underlay network (as opposed to
+       gateway ports, which are physical ports attached to  logical  networks)
+       must not be attached to the integration bridge. Underlay physical ports
+       should instead be attached to a separate Open vSwitch bridge (they need
+       not be attached to any bridge at all, in fact).
+
+       The integration bridge should be configured as described below. The ef‐
+       fect    of    each    of    these    settings    is    documented    in
+       ovs-vswitchd.conf.db(5):
+
+              fail-mode=secure
+                     Avoids switching packets between  isolated  logical  net‐
+                     works  before  ovn-controller  starts  up. See Controller
+                     Failure Settings in ovs-vsctl(8) for more information.
+
+              other-config:disable-in-band=true
+                     Suppresses in-band  control  flows  for  the  integration
+                     bridge.  It  would  be  unusual for such flows to show up
+                     anyway, because OVN uses a local controller (over a  Unix
+                     domain  socket) instead of a remote controller. It’s pos‐
+                     sible, however, for some other bridge in the same  system
+                     to  have  an  in-band remote controller, and in that case
+                     this suppresses the flows that in-band control would  or‐
+                     dinarily  set up. Refer to the documentation for more in‐
+                     formation.
+
+       The customary name for the integration bridge is  br-int,  but  another
+       name may be used.
+
+   Logical Networks
+       Logical  network  concepts  in OVN include logical switches and logical
+       routers, the logical version of Ethernet switches and IP  routers,  re‐
+       spectively.  Like  their physical cousins, logical switches and routers
+       can be connected into sophisticated topologies.  Logical  switches  and
+       routers  are  ordinarily purely logical entities, that is, they are not
+       associated or bound to any physical location, and they are  implemented
+       in a distributed manner at each hypervisor that participates in OVN.
+
+       Logical  switch ports (LSPs) are points of connectivity into and out of
+       logical switches. There are many kinds of  logical  switch  ports.  The
+       most  ordinary  kind represent VIFs, that is, attachment points for VMs
+       or containers. A VIF logical port is associated with the physical loca‐
+       tion of its VM, which might change as the VM migrates. (A  VIF  logical
+       port  can  be  associated  with a VM that is powered down or suspended.
+       Such a logical port has no location and no connectivity.)
+
+       Logical router ports (LRPs) are points of connectivity into and out  of
+       logical  routers.  A  LRP connects a logical router either to a logical
+       switch or to another logical router. Logical routers  only  connect  to
+       VMs,  containers,  and  other network nodes indirectly, through logical
+       switches.
+
+       Logical switches and logical routers have  distinct  kinds  of  logical
+       ports,  so  properly  speaking  one  should  usually talk about logical
+       switch ports or logical router ports. However, an unqualified ``logical
+       port’’ usually refers to a logical switch port.
+
+       When a VM sends a packet to a VIF logical switch port, the Open vSwitch
+       flow tables simulate the packet’s journey through that  logical  switch
+       and  any  other  logical routers and logical switches that it might en‐
+       counter. This happens without transmitting the packet across any physi‐
+       cal medium: the flow tables implement all of the switching and  routing
+       decisions  and behavior. If the flow tables ultimately decide to output
+       the packet at a logical port attached to another hypervisor (or another
+       kind of transport node), then that is the time at which the  packet  is
+       encapsulated for physical network transmission and sent.
+
+     Logical Switch Port Types
+
+       OVN  supports a number of kinds of logical switch ports. VIF ports that
+       connect to VMs or containers, described above, are  the  most  ordinary
+       kind  of  LSP.  In the OVN northbound database, VIF ports have an empty
+       string for their type. This section describes some  of  the  additional
+       port types.
+
+       A  router  logical  switch  port connects a logical switch to a logical
+       router, designating a particular LRP as its peer.
+
+       A localnet logical switch port bridges a logical switch to  a  physical
+       VLAN. A logical switch may have one or more localnet ports. Such a log‐
+       ical switch is used in two scenarios:
+
+              •      With  one  or more router logical switch ports, to attach
+                     L3 gateway routers and distributed gateways to a physical
+                     network.
+
+              •      With one or more VIF logical switch ports, to attach  VMs
+                     or  containers  directly  to  a physical network. In this
+                     case, the logical switch is not really logical, since  it
+                     is  bridged to the physical network rather than insulated
+                     from it, and therefore cannot have independent but  over‐
+                     lapping  IP  address  namespaces, etc. A deployment might
+                     nevertheless choose such a configuration to  take  advan‐
+                     tage  of  the OVN control plane and features such as port
+                     security and ACLs.
+
+       When a logical switch contains multiple localnet ports,  the  following
+       is assumed.
+
+              •      Each chassis has a bridge mapping for one of the localnet
+                     physical networks only.
+
+              •      To  facilitate interconnectivity between VIF ports of the
+                     switch that are located on different chassis with differ‐
+                     ent physical network connectivity, the fabric  implements
+                     L3  routing  between these adjacent physical network seg‐
+                     ments.
+
+       Note: nothing said above implies that a chassis cannot  be  plugged  to
+       multiple  physical  networks  as  long  as  they  belong  to  different
+       switches.
+
+       A localport logical switch port is a special kind of VIF logical switch
+       port. These ports are present in every chassis, not bound to  any  par‐
+       ticular  one.  Traffic to such a port will never be forwarded through a
+       tunnel, and traffic from such a port is expected to be destined only to
+       the same chassis, typically in response to a request it received. Open‐
+       Stack Neutron uses a localport port to serve metadata to VMs.  A  meta‐
+       data  proxy  process is attached to this port on every host and all VMs
+       within the same network will reach it at the same IP/MAC address  with‐
+       out  any traffic being sent over a tunnel. For further details, see the
+       OpenStack documentation for networking-ovn.
+
+       LSP types vtep and l2gateway are used for gateways. See  Gateways,  be‐
+       low, for more information.
+
+     Implementation Details
+
+       These  concepts  are details of how OVN is implemented internally. They
+       might still be of interest to users and administrators.
+
+       Logical datapaths are an implementation detail of logical  networks  in
+       the  OVN southbound database. ovn-northd translates each logical switch
+       or router in the northbound database into a  logical  datapath  in  the
+       southbound database Datapath_Binding table.
+
+       For  the most part, ovn-northd also translates each logical switch port
+       in the OVN northbound database into a record in the southbound database
+       Port_Binding table. The latter table corresponds roughly to the  north‐
+       bound  Logical_Switch_Port table. It has multiple types of logical port
+       bindings, of which many types correspond  directly  to  northbound  LSP
+       types. LSP types handled this way include VIF (empty string), localnet,
+       localport, vtep, and l2gateway.
+
+       The  Port_Binding table has some types of port binding that do not cor‐
+       respond directly to logical switch port types. The common is patch port
+       bindings, known as logical patch ports. These port bindings always  oc‐
+       cur  in pairs, and a packet that enters on either side comes out on the
+       other. ovn-northd connects logical switches  and  logical  routers  to‐
+       gether using logical patch ports.
+
+       Port  bindings  with types vtep, l2gateway, l3gateway, and chassisredi�‐
+       rect are used for gateways. These are explained in Gateways, below.
+
+   Gateways
+       Gateways provide limited  connectivity  between  logical  networks  and
+       physical ones. They can also provide connectivity between different OVN
+       deployments. This section will focus on the former, and the latter will
+       be described in details in section OVN Deployments Interconnection.
+
+       OVN support multiple kinds of gateways.
+
+     VTEP Gateways
+
+       A  ``VTEP  gateway’’  connects an OVN logical network to a physical (or
+       virtual) switch that implements the OVSDB VTEP schema that  accompanies
+       Open vSwitch. (The ``VTEP gateway’’ term is a misnomer, since a VTEP is
+       just  a  VXLAN Tunnel Endpoint, but it is a well established name.) See
+       Life Cycle of a VTEP gateway, below, for more information.
+
+       The main intended use case for VTEP  gateways  is  to  attach  physical
+       servers  to  an OVN logical network using a physical top-of-rack switch
+       that supports the OVSDB VTEP schema.
+
+     L2 Gateways
+
+       A L2 gateway simply attaches a designated physical L2 segment available
+       on some chassis to a logical network. The physical network  effectively
+       becomes part of the logical network.
+
+       To set up a L2 gateway, the CMS adds an l2gateway LSP to an appropriate
+       logical  switch,  setting  LSP  options to name the chassis on which it
+       should be bound. ovn-northd copies this configuration into a southbound
+       Port_Binding record. On the designated chassis, ovn-controller forwards
+       packets appropriately to and from the physical segment.
+
+       L2 gateway ports have features in common with localnet ports.  However,
+       with  a  localnet  port, the physical network becomes the transport be‐
+       tween hypervisors. With an L2 gateway, packets  are  still  transported
+       between  hypervisors  over  tunnels and the l2gateway port is only used
+       for the packets that are on the physical network. The  application  for
+       L2  gateways is similar to that for VTEP gateways, e.g. to add non-vir‐
+       tualized machines to a logical network, but L2 gateways do not  require
+       special support from top-of-rack hardware switches.
+
+     L3 Gateway Routers
+
+       As described above under Logical Networks, ordinary OVN logical routers
+       are  distributed: they are not implemented in a single place but rather
+       in every hypervisor chassis. This is a problem  for  stateful  services
+       such  as  SNAT  and DNAT, which need to be implemented in a centralized
+       manner.
+
+       To allow for this  kind  of  functionality,  OVN  supports  L3  gateway
+       routers, which are OVN logical routers that are implemented in a desig‐
+       nated  chassis.  Gateway routers are typically used between distributed
+       logical routers and physical networks. The distributed  logical  router
+       and the logical switches behind it, to which VMs and containers attach,
+       effectively  reside  on each hypervisor. The distributed router and the
+       gateway router are connected by another logical switch,  sometimes  re‐
+       ferred  to  as  a  ``join’’ logical switch. (OVN logical routers may be
+       connected to one another directly, without an intervening  switch,  but
+       the  OVN  implementation only supports gateway logical routers that are
+       connected to logical switches. Using a join logical switch also reduces
+       the number of IP addresses needed on the distributed  router.)  On  the
+       other  side, the gateway router connects to another logical switch that
+       has a localnet port connecting to the physical network.
+
+       The following diagram shows a typical situation. One  or  more  logical
+       switches LS1, ..., LSn connect to distributed logical router LR1, which
+       in  turn  connects  through LSjoin to gateway logical router GLR, which
+       also connects to logical switch LSlocal, which includes a localnet port
+       to attach to the physical network.
+
+                                       LSlocal
+                                          |
+                                         GLR
+                                          |
+                                       LSjoin
+                                          |
+                                         LR1
+                                          |
+                                     +----+----+
+                                     |    |    |
+                                    LS1  ...  LSn
+
+
+       To configure an L3 gateway router, the CMS sets options:chassis in  the
+       router’s  northbound Logical_Router to the chassis’s name. In response,
+       ovn-northd uses a special l3gateway port binding (instead  of  a  patch
+       binding)  in  the  southbound database to connect the logical router to
+       its neighbors. In turn, ovn-controller tunnels  packets  to  this  port
+       binding  to  the  designated  L3 gateway chassis, instead of processing
+       them locally.
+
+       DNAT and SNAT rules may be associated with a gateway router, which pro‐
+       vides a central location that can handle one-to-many SNAT (aka IP  mas‐
+       querading).  Distributed  gateway  ports, described below, also support
+       NAT.
+
+     Distributed Gateway Ports
+
+       A distributed gateway port is a logical router port that  is  specially
+       configured  to  designate one distinguished chassis, called the gateway
+       chassis, for centralized processing. A distributed gateway port  should
+       connect  to  a logical switch that has an LSP that connects externally,
+       that is, either a localnet LSP or a connection to another  OVN  deploy‐
+       ment  (see  OVN Deployments Interconnection). Packets that traverse the
+       distributed gateway port are processed without  involving  the  gateway
+       chassis  when  they  can  be, but when needed they do take an extra hop
+       through it.
+
+       The following diagram illustrates the  use  of  a  distributed  gateway
+       port. A number of logical switches LS1, ..., LSn connect to distributed
+       logical  router  LR1,  which  in  turn connects through the distributed
+       gateway port to logical switch LSlocal that includes a localnet port to
+       attach to the physical network.
+
+                                       LSlocal
+                                          |
+                                         LR1
+                                          |
+                                     +----+----+
+                                     |    |    |
+                                    LS1  ...  LSn
+
+
+       ovn-northd creates two southbound Port_Binding records to  represent  a
+       distributed  gateway  port, instead of the usual one. One of these is a
+       patch port binding named for the LRP, which is used for as much traffic
+       as it can. The other one is a port binding with  type  chassisredirect,
+       named  cr-port.  The  chassisredirect  port binding has one specialized
+       job: when a packet is output to it, the flow table causes it to be tun‐
+       neled to the gateway chassis, at which point it is automatically output
+       to the patch port binding. Thus, the flow table can output to this port
+       binding in cases where a particular task has to happen on  the  gateway
+       chassis.  The  chassisredirect  port binding is not otherwise used (for
+       example, it never receives packets).
+
+       The CMS may configure distributed gateway ports three  different  ways.
+       See   Distributed   Gateway   Ports  in  the  documentation  for  Logi�‐
+       cal_Router_Port in ovn-nb(5) for details.
+
+       Distributed gateway ports support high availability. When more than one
+       chassis is specified, OVN only uses one at a time as the gateway  chas‐
+       sis. OVN uses BFD to monitor gateway connectivity, preferring the high‐
+       est-priority gateway that is online.
+
+       A logical router can have multiple distributed gateway ports, each con‐
+       necting  different  external  networks.  Load balancing is not yet sup‐
+       ported for logical routers with more than one distributed gateway  port
+       configured.
+
+       Physical VLAN MTU Issues
+
+       Consider the preceding diagram again:
+
+                                       LSlocal
+                                          |
+                                         LR1
+                                          |
+                                     +----+----+
+                                     |    |    |
+                                    LS1  ...  LSn
+
+
+       Suppose that each logical switch LS1, ..., LSn is bridged to a physical
+       VLAN-tagged network attached to a localnet port on LSlocal, over a dis‐
+       tributed  gateway  port  on LR1. If a packet originating on LSi is des‐
+       tined to the external network, OVN sends it to the gateway chassis over
+       a tunnel. There, the packet traverses LR1’s  logical  router  pipeline,
+       possibly  undergoes  NAT,  and eventually ends up at LSlocal’s localnet
+       port. If all of the physical links in the network have  the  same  MTU,
+       then the packet’s transit across a tunnel causes an MTU problem: tunnel
+       overhead  prevents a packet that uses the full physical MTU from cross‐
+       ing the tunnel to the gateway chassis (without fragmentation).
+
+       OVN offers two solutions to this problem, the  reside-on-redirect-chas�‐
+       sis  and  redirect-type  options.  Both  solutions require each logical
+       switch LS1, ..., LSn to include a localnet  logical  switch  port  LN1,
+       ...,  LNn  respectively,  that  is  present on each chassis. Both cause
+       packets to be sent over the localnet ports  instead  of  tunnels.  They
+       differ  in which packets-some or all-are sent this way. The most promi‐
+       nent tradeoff between these options is that  reside-on-redirect-chassis
+       is easier to configure and that redirect-type performs better for east-
+       west traffic.
+
+       The first solution is the reside-on-redirect-chassis option for logical
+       router  ports. Setting this option on a LRP from (e.g.) LS1 to LR1 dis‐
+       ables forwarding from LS1 to LR1 except  on  the  gateway  chassis.  On
+       chassis  other  than the gateway chassis, this single change means that
+       packets that would otherwise have been forwarded  to  LR1  are  instead
+       forwarded  to  LN1. The instance of LN1 on the gateway chassis then re‐
+       ceives the packet and forwards it to LR1. The packet traverses the  LR1
+       logical router pipeline, possibly undergoes NAT, and eventually ends up
+       at LSlocal’s localnet port. The packet never traverses a tunnel, avoid‐
+       ing the MTU issue.
+
+       This option has the further consequence of centralizing ``distributed’’
+       logical  router  LR1, since no packets are forwarded from LS1 to LR1 on
+       any chassis other than the gateway chassis. Therefore, east-west  traf‐
+       fic  passes  through  the  gateway  chassis, not just north-south. (The
+       naive ``fix’’ of allowing east-west traffic to  flow  directly  between
+       chassis over LN1 does not work because routing sets the Ethernet source
+       address to LR1’s source address. Seeing this single Ethernet source ad‐
+       dress  originate  from  all  of  the  chassis will confuse the physical
+       switch.)
+
+       Do not set the reside-on-redirect-chassis option on a distributed gate‐
+       way port. In the diagram above, it would be set on the LRPs  connecting
+       LS1, ..., LSn to LR1.
+
+       The second solution is the redirect-type option for distributed gateway
+       ports.  Setting  this  option  to bridged causes packets that are redi‐
+       rected to the gateway chassis to go over the localnet ports instead  of
+       being  tunneled. This option does not change how OVN treats packets not
+       redirected to the gateway chassis.
+
+       The redirect-type option requires the administrator or the CMS to  con‐
+       figure  each  participating  chassis with a unique Ethernet address for
+       the logical router by  setting  ovn-chassis-mac-mappings  in  the  Open
+       vSwitch  database, for use by ovn-controller. This makes it more diffi‐
+       cult to configure than reside-on-redirect-chassis.
+
+       Set the redirect-type option on a distributed gateway port.
+
+       Using Distributed Gateway Ports For Scalability
+
+       Although the primary goal of distributed gateway ports  is  to  provide
+       connectivity  to  external  networks,  there  is a special use case for
+       scalability.
+
+       In some deployments, such as the  ones  using  ovn-kubernetes,  logical
+       switches are bound to individual chassises, and are connected by a dis‐
+       tributed logical router. In such deployments, the chassis level logical
+       switches  are  centralized on the chassis instead of distributed, which
+       means the ovn-controller on each chassis doesn’t need to process  flows
+       and  ports of logical switches on other chassises. However, without any
+       specific hint, ovn-controller  would  still  process  all  the  logical
+       switches  as  if  they are fully distributed. In this case, distributed
+       gateway port can be very useful. The chassis level logical switches can
+       be connected to the distributed router using distributed gateway ports,
+       by setting the gateway chassis (or HA chassis groups with only a single
+       chassis in it) to the chassis that each logical  switch  is  bound  to.
+       ovn-controller  would  then skip processing the logical switches on all
+       the other chassises, largely improving the scalability, especially when
+       there are a big number of chassises.
+
+   Life Cycle of a VIF
+       Tables and their schemas presented in isolation are difficult to under‐
+       stand. Here’s an example.
+
+       A VIF on a hypervisor is a virtual network interface attached either to
+       a VM or a container running directly on that hypervisor (This  is  dif‐
+       ferent from the interface of a container running inside a VM).
+
+       The  steps  in  this  example refer often to details of the OVN and OVN
+       Northbound database schemas. Please see ovn-sb(5)  and  ovn-nb(5),  re‐
+       spectively, for the full story on these databases.
+
+              1.  A VIF’s life cycle begins when a CMS administrator creates a
+                  new VIF using the CMS user interface or API and adds it to a
+                  switch (one implemented by OVN as a logical switch). The CMS
+                  updates  its  own  configuration.  This includes associating
+                  unique, persistent identifier vif-id  and  Ethernet  address
+                  mac with the VIF.
+
+              2.  The  CMS  plugin  updates the OVN Northbound database to in‐
+                  clude  the  new  VIF,  by  adding  a  row   to   the   Logi�‐
+                  cal_Switch_Port  table.  In the new row, name is vif-id, mac
+                  is mac, switch points to  the  OVN  logical  switch’s  Logi‐
+                  cal_Switch  record, and other columns are initialized appro‐
+                  priately.
+
+              3.  ovn-northd receives the OVN Northbound database  update.  In
+                  turn,  it  makes the corresponding updates to the OVN South‐
+                  bound database, by adding rows to the OVN  Southbound  data‐
+                  base  Logical_Flow table to reflect the new port, e.g. add a
+                  flow to recognize that packets destined to  the  new  port’s
+                  MAC  address  should be delivered to it, and update the flow
+                  that delivers broadcast and multicast packets to include the
+                  new port. It also creates a record in the Binding table  and
+                  populates  all its columns except the column that identifies
+                  the chassis.
+
+              4.  On  every  hypervisor,  ovn-controller  receives  the  Logi�‐
+                  cal_Flow  table updates that ovn-northd made in the previous
+                  step. As long as the VM that owns the VIF  is  powered  off,
+                  ovn-controller  cannot  do  much;  it  cannot,  for example,
+                  arrange to send packets to or receive packets from the  VIF,
+                  because the VIF does not actually exist anywhere.
+
+              5.  Eventually,  a  user  powers on the VM that owns the VIF. On
+                  the hypervisor where the VM is powered on,  the  integration
+                  between  the hypervisor and Open vSwitch (described in Docu�‐
+                  mentation/topics/integration.rst in the Open vSwitch  source
+                  tree)  adds the VIF to the OVN integration bridge and stores
+                  vif-id in external_ids:iface-id to indicate that the  inter‐
+                  face  is an instantiation of the new VIF. (None of this code
+                  is new in OVN; this is pre-existing  integration  work  that
+                  has already been done on hypervisors that support OVS.)
+
+              6.  On the hypervisor where the VM is powered on, ovn-controller
+                  notices  external_ids:iface-id  in the new Interface. In re‐
+                  sponse, in the OVN Southbound DB, it updates the Binding ta‐
+                  ble’s chassis column for the row that links the logical port
+                  from external_ids: iface-id to  the  hypervisor.  Afterward,
+                  ovn-controller  updates  the local hypervisor’s OpenFlow ta‐
+                  bles so that packets to and from the VIF are  properly  han‐
+                  dled.
+
+              7.  Some CMS systems, including OpenStack, fully start a VM only
+                  when  its  networking  is ready. To support this, ovn-northd
+                  notices the chassis column updated for the  row  in  Binding
+                  table  and  pushes  this upward by updating the up column in
+                  the OVN Northbound database’s Logical_Switch_Port  table  to
+                  indicate  that  the  VIF is now up. The CMS, if it uses this
+                  feature, can then react by allowing the  VM’s  execution  to
+                  proceed.
+
+              8.  On  every  hypervisor  but  the  one  where the VIF resides,
+                  ovn-controller notices the completely populated row  in  the
+                  Binding table. This provides ovn-controller the physical lo‐
+                  cation  of  the  logical  port, so each instance updates the
+                  OpenFlow tables of its switch  (based  on  logical  datapath
+                  flows  in  the OVN DB Logical_Flow table) so that packets to
+                  and from the VIF can be properly handled via tunnels.
+
+              9.  Eventually, a user powers off the VM that owns the  VIF.  On
+                  the  hypervisor  where  the  VM  was powered off, the VIF is
+                  deleted from the OVN integration bridge.
+
+              10. On the hypervisor where the VM  was  powered  off,  ovn-con�‐
+                  troller  notices  that  the VIF was deleted. In response, it
+                  removes the Chassis column content in the Binding table  for
+                  the logical port.
+
+              11. On  every hypervisor, ovn-controller notices the empty Chas�‐
+                  sis column in the Binding table’s row for the logical  port.
+                  This  means that ovn-controller no longer knows the physical
+                  location of the logical port, so each instance  updates  its
+                  OpenFlow table to reflect that.
+
+              12. Eventually,  when  the  VIF  (or its entire VM) is no longer
+                  needed by anyone, an administrator deletes the VIF using the
+                  CMS user interface or API. The CMS updates its own  configu‐
+                  ration.
+
+              13. The CMS plugin removes the VIF from the OVN Northbound data‐
+                  base, by deleting its row in the Logical_Switch_Port table.
+
+              14. ovn-northd  receives  the  OVN Northbound update and in turn
+                  updates the OVN Southbound database accordingly, by removing
+                  or updating the rows from the OVN Southbound database  Logi�‐
+                  cal_Flow  table  and  Binding table that were related to the
+                  now-destroyed VIF.
+
+              15. On  every  hypervisor,  ovn-controller  receives  the  Logi�‐
+                  cal_Flow  table updates that ovn-northd made in the previous
+                  step. ovn-controller updates OpenFlow tables to reflect  the
+                  update,  although there may not be much to do, since the VIF
+                  had already become unreachable when it was removed from  the
+                  Binding table in a previous step.
+
+   Life Cycle of a Container Interface Inside a VM
+       OVN  provides  virtual  network  abstractions by converting information
+       written in OVN_NB database to OpenFlow flows in each hypervisor. Secure
+       virtual networking for multi-tenants can only be provided if  OVN  con‐
+       troller  is the only entity that can modify flows in Open vSwitch. When
+       the Open vSwitch integration bridge resides in the hypervisor, it is  a
+       fair assumption to make that tenant workloads running inside VMs cannot
+       make any changes to Open vSwitch flows.
+
+       If  the infrastructure provider trusts the applications inside the con‐
+       tainers not to break out and modify the Open vSwitch flows,  then  con‐
+       tainers  can be run in hypervisors. This is also the case when contain‐
+       ers are run inside the VMs and Open  vSwitch  integration  bridge  with
+       flows  added  by  OVN  controller  resides in the same VM. For both the
+       above cases, the workflow is the same as explained with an  example  in
+       the previous section ("Life Cycle of a VIF").
+
+       This  section talks about the life cycle of a container interface (CIF)
+       when containers are created in the VMs and the Open vSwitch integration
+       bridge resides inside the hypervisor. In this case, even if a container
+       application breaks out, other tenants are not affected because the con‐
+       tainers running inside the VMs cannot modify  the  flows  in  the  Open
+       vSwitch integration bridge.
+
+       When  multiple  containers  are created inside a VM, there are multiple
+       CIFs associated with them. The network traffic  associated  with  these
+       CIFs  need  to reach the Open vSwitch integration bridge running in the
+       hypervisor for OVN to support virtual network abstractions. OVN  should
+       also be able to distinguish network traffic coming from different CIFs.
+       There are two ways to distinguish network traffic of CIFs.
+
+       One  way  is  to  provide one VIF for every CIF (1:1 model). This means
+       that there could be a lot of network devices in  the  hypervisor.  This
+       would slow down OVS because of all the additional CPU cycles needed for
+       the management of all the VIFs. It would also mean that the entity cre‐
+       ating  the  containers in a VM should also be able to create the corre‐
+       sponding VIFs in the hypervisor.
+
+       The second way is to provide a single VIF  for  all  the  CIFs  (1:many
+       model).  OVN could then distinguish network traffic coming from differ‐
+       ent CIFs via a tag written in every packet. OVN uses this mechanism and
+       uses VLAN as the tagging mechanism.
+
+              1.  A CIF’s life cycle begins when a container is spawned inside
+                  a VM by the either the same CMS that created  the  VM  or  a
+                  tenant  that  owns that VM or even a container Orchestration
+                  System that is different than the CMS that initially created
+                  the VM. Whoever the entity is, it will need to know the vif-
+                  id that is associated with the network interface of  the  VM
+                  through  which  the container interface’s network traffic is
+                  expected to go through. The entity  that  creates  the  con‐
+                  tainer interface will also need to choose an unused VLAN in‐
+                  side that VM.
+
+              2.  The  container  spawning  entity (either directly or through
+                  the CMS that manages the underlying infrastructure)  updates
+                  the  OVN  Northbound  database  to  include  the new CIF, by
+                  adding a row to the Logical_Switch_Port table.  In  the  new
+                  row,  name is any unique identifier, parent_name is the vif-
+                  id of the VM through which the CIF’s network traffic is  ex‐
+                  pected  to go through and the tag is the VLAN tag that iden‐
+                  tifies the network traffic of that CIF.
+
+              3.  ovn-northd receives the OVN Northbound database  update.  In
+                  turn,  it  makes the corresponding updates to the OVN South‐
+                  bound database, by adding rows to the OVN  Southbound  data‐
+                  base’s  Logical_Flow  table to reflect the new port and also
+                  by creating a new row in the Binding  table  and  populating
+                  all  its columns except the column that identifies the chas�‐
+                  sis.
+
+              4.  On  every  hypervisor,  ovn-controller  subscribes  to   the
+                  changes  in  the Binding table. When a new row is created by
+                  ovn-northd that includes a value in  parent_port  column  of
+                  Binding  table,  the  ovn-controller in the hypervisor whose
+                  OVN integration bridge has that same value in vif-id in  ex�‐
+                  ternal_ids:iface-id  updates the local hypervisor’s OpenFlow
+                  tables so that packets to and from the VIF with the particu‐
+                  lar VLAN tag are properly handled. Afterward it updates  the
+                  chassis  column of the Binding to reflect the physical loca‐
+                  tion.
+
+              5.  One can only start the application inside the container  af‐
+                  ter  the  underlying  network  is  ready.  To  support this,
+                  ovn-northd notices the updated chassis column in Binding ta‐
+                  ble and updates the up column in the  OVN  Northbound  data‐
+                  base’s Logical_Switch_Port table to indicate that the CIF is
+                  now up. The entity responsible to start the container appli‐
+                  cation queries this value and starts the application.
+
+              6.  Eventually  the  entity  that  created  and started the con‐
+                  tainer, stops it. The entity, through the CMS (or  directly)
+                  deletes its row in the Logical_Switch_Port table.
+
+              7.  ovn-northd  receives  the  OVN Northbound update and in turn
+                  updates the OVN Southbound database accordingly, by removing
+                  or updating the rows from the OVN Southbound database  Logi�‐
+                  cal_Flow  table  that were related to the now-destroyed CIF.
+                  It also deletes the row in the Binding table for that CIF.
+
+              8.  On  every  hypervisor,  ovn-controller  receives  the  Logi�‐
+                  cal_Flow  table updates that ovn-northd made in the previous
+                  step. ovn-controller updates OpenFlow tables to reflect  the
+                  update.
+
+   Architectural Physical Life Cycle of a Packet
+       This section describes how a packet travels from one virtual machine or
+       container to another through OVN. This description focuses on the phys‐
+       ical treatment of a packet; for a description of the logical life cycle
+       of a packet, please refer to the Logical_Flow table in ovn-sb(5).
+
+       This  section  mentions  several  data and metadata fields, for clarity
+       summarized here:
+
+              tunnel key
+                     When OVN encapsulates a packet in Geneve or another  tun‐
+                     nel,  it attaches extra data to it to allow the receiving
+                     OVN instance to process it correctly. This takes  differ‐
+                     ent  forms depending on the particular encapsulation, but
+                     in each case we refer to it here as the  ``tunnel  key.’’
+                     See Tunnel Encapsulations, below, for details.
+
+              logical datapath field
+                     A field that denotes the logical datapath through which a
+                     packet  is being processed. OVN uses the field that Open‐
+                     Flow 1.1+ simply (and confusingly) calls ``metadata’’  to
+                     store  the logical datapath. (This field is passed across
+                     tunnels as part of the tunnel key.)
+
+              logical input port field
+                     A field that denotes the  logical  port  from  which  the
+                     packet  entered  the logical datapath. OVN stores this in
+                     Open vSwitch extension register number 14.
+
+                     Geneve and STT tunnels pass this field  as  part  of  the
+                     tunnel  key.  Ramp switch VXLAN tunnels do not explicitly
+                     carry a logical input port, but since they  are  used  to
+                     communicate  with  gateways  that  from OVN’s perspective
+                     consist of only a single logical port, so  that  OVN  can
+                     set  the  logical input port field to this one on ingress
+                     to the OVN logical pipeline. As for  regular  VXLAN  tun‐
+                     nels, they don’t carry input port field at all. This puts
+                     additional  limitations  on cluster capabilities that are
+                     described in Tunnel Encapsulations section.
+
+              logical output port field
+                     A field that denotes the  logical  port  from  which  the
+                     packet  will leave the logical datapath. This is initial‐
+                     ized to  0  at  the  beginning  of  the  logical  ingress
+                     pipeline.  OVN stores this in Open vSwitch extension reg‐
+                     ister number 15.
+
+                     Geneve, STT and regular VXLAN tunnels pass this field  as
+                     part  of the tunnel key. Ramp switch VXLAN tunnels do not
+                     transmit the logical output port field, and since they do
+                     not carry a logical output port field in the tunnel  key,
+                     when  a  packet is received from ramp switch VXLAN tunnel
+                     by an OVN hypervisor, the packet is resubmitted to  table
+                     8  to  determine  the  output  port(s);  when  the packet
+                     reaches table 39, these packets are resubmitted to  table
+                     40  for  local  delivery  by checking a MLF_RCV_FROM_RAMP
+                     flag, which is set when the packet arrives  from  a  ramp
+                     tunnel.
+
+              conntrack zone field for logical ports
+                     A  field  that  denotes  the connection tracking zone for
+                     logical ports. The value only has local significance  and
+                     is not meaningful between chassis. This is initialized to
+                     0  at  the beginning of the logical ingress pipeline. OVN
+                     stores this in Open vSwitch extension register number 13.
+
+              conntrack zone fields for routers
+                     Fields that denote  the  connection  tracking  zones  for
+                     routers.  These  values  only have local significance and
+                     are not meaningful between chassis. OVN stores  the  zone
+                     information  for  north to south traffic (for DNATting or
+                     ECMP symmetric replies) in Open vSwitch extension  regis‐
+                     ter  number  11  and  zone information for south to north
+                     traffic (for SNATing) in Open vSwitch extension  register
+                     number 12.
+
+              logical flow flags
+                     The  logical flags are intended to handle keeping context
+                     between tables in order to decide which rules  in  subse‐
+                     quent  tables  are  matched. These values only have local
+                     significance and are not meaningful between chassis.  OVN
+                     stores the logical flags in Open vSwitch extension regis‐
+                     ter number 10.
+
+              VLAN ID
+                     The  VLAN ID is used as an interface between OVN and con‐
+                     tainers nested inside a VM (see Life Cycle of a container
+                     interface inside a VM, above, for more information).
+
+       Initially, a VM or container on the ingress hypervisor sends  a  packet
+       on a port attached to the OVN integration bridge. Then:
+
+              1.  OpenFlow  table  0 performs physical-to-logical translation.
+                  It matches the packet’s ingress port. Its  actions  annotate
+                  the  packet  with  logical  metadata, by setting the logical
+                  datapath field to identify the  logical  datapath  that  the
+                  packet  is  traversing  and  the logical input port field to
+                  identify the ingress port. Then it resubmits to table  8  to
+                  enter the logical ingress pipeline.
+
+                  Packets  that  originate from a container nested within a VM
+                  are treated in a slightly  different  way.  The  originating
+                  container  can  be  distinguished  based on the VIF-specific
+                  VLAN ID, so the physical-to-logical translation flows  addi‐
+                  tionally  match  on  VLAN  ID and the actions strip the VLAN
+                  header. Following this step, OVN treats  packets  from  con‐
+                  tainers just like any other packets.
+
+                  Table  0 also processes packets that arrive from other chas‐
+                  sis. It distinguishes them from  other  packets  by  ingress
+                  port,  which  is a tunnel. As with packets just entering the
+                  OVN pipeline, the actions annotate these packets with  logi‐
+                  cal  datapath  metadata.  For  tunnel types that support it,
+                  they are also annotated with logical ingress port  metadata.
+                  In  addition, the actions set the logical output port field,
+                  which is available because in OVN tunneling occurs after the
+                  logical output port is known. These  pieces  of  information
+                  are  obtained  from  the  tunnel encapsulation metadata (see
+                  Tunnel Encapsulations for encoding details).  Then  the  ac‐
+                  tions  resubmit  to  table  38  to  enter the logical egress
+                  pipeline.
+
+              2.  OpenFlow tables 8 through 31  execute  the  logical  ingress
+                  pipeline  from  the Logical_Flow table in the OVN Southbound
+                  database. These tables are expressed entirely  in  terms  of
+                  logical concepts like logical ports and logical datapaths. A
+                  big  part  of ovn-controller’s job is to translate them into
+                  equivalent OpenFlow (in particular it translates  the  table
+                  numbers:  Logical_Flow  tables  0 through 23 become OpenFlow
+                  tables 8 through 31).
+
+                  Each logical flow maps to one or more OpenFlow flows. An ac‐
+                  tual packet ordinarily matches only one of  these,  although
+                  in  some  cases  it  can  match more than one of these flows
+                  (which is not a problem because all of them  have  the  same
+                  actions). ovn-controller uses the first 32 bits of the logi‐
+                  cal  flow’s  UUID  as  the  cookie  for its OpenFlow flow or
+                  flows. (This is not necessarily unique, since the  first  32
+                  bits of a logical flow’s UUID is not necessarily unique.)
+
+                  Some logical flows can map to the Open vSwitch ``conjunctive
+                  match’’ extension (see ovs-fields(7)). Flows with a conjunc�‐
+                  tion  action  use  an OpenFlow cookie of 0, because they can
+                  correspond to multiple logical flows. The OpenFlow flow  for
+                  a conjunctive match includes a match on conj_id.
+
+                  Some  logical  flows  may not be represented in the OpenFlow
+                  tables on a given hypervisor, if they could not be  used  on
+                  that  hypervisor. For example, if no VIF in a logical switch
+                  resides on a given hypervisor, and the logical switch is not
+                  otherwise reachable on that hypervisor (e.g. over  a  series
+                  of hops through logical switches and routers starting from a
+                  VIF  on  the  hypervisor),  then the logical flow may not be
+                  represented there.
+
+                  Most OVN actions  have  fairly  obvious  implementations  in
+                  OpenFlow (with OVS extensions), e.g. next; is implemented as
+                  resubmit,  field  =  constant; as set_field. A few are worth
+                  describing in more detail:
+
+                  output:
+                         Implemented by resubmitting the packet to  table  37.
+                         If the pipeline executes more than one output action,
+                         then  each one is separately resubmitted to table 37.
+                         This can be used  to  send  multiple  copies  of  the
+                         packet to multiple ports. (If the packet was not mod‐
+                         ified  between  the  output  actions, and some of the
+                         copies are destined to the same hypervisor, then  us‐
+                         ing  a logical multicast output port would save band‐
+                         width between hypervisors.)
+
+                  get_arp(P, A);
+                  get_nd(P, A);
+                       Implemented by storing arguments into OpenFlow  fields,
+                       then  resubmitting  to  table  66, which ovn-controller
+                       populates with flows generated from the MAC_Binding ta‐
+                       ble in the OVN Southbound database. If there is a match
+                       in table 66, then its actions store the  bound  MAC  in
+                       the Ethernet destination address field.
+
+                       (The  OpenFlow  actions  save  and restore the OpenFlow
+                       fields used for the arguments, so that the OVN  actions
+                       do not have to be aware of this temporary use.)
+
+                  put_arp(P, A, E);
+                  put_nd(P, A, E);
+                       Implemented  by  storing  the  arguments  into OpenFlow
+                       fields, then outputting  a  packet  to  ovn-controller,
+                       which updates the MAC_Binding table.
+
+                       (The  OpenFlow  actions  save  and restore the OpenFlow
+                       fields used for the arguments, so that the OVN  actions
+                       do not have to be aware of this temporary use.)
+
+                  R = lookup_arp(P, A, M);
+                  R = lookup_nd(P, A, M);
+                       Implemented  by storing arguments into OpenFlow fields,
+                       then resubmitting to  table  67,  which  ovn-controller
+                       populates with flows generated from the MAC_Binding ta‐
+                       ble in the OVN Southbound database. If there is a match
+                       in table 67, then its actions set the logical flow flag
+                       MLF_LOOKUP_MAC.
+
+                       (The  OpenFlow  actions  save  and restore the OpenFlow
+                       fields used for the arguments, so that the OVN  actions
+                       do not have to be aware of this temporary use.)
+
+              3.  OpenFlow tables 37 through 41 implement the output action in
+                  the  logical ingress pipeline. Specifically, table 37 serves
+                  as an entry point to egress pipeline. Table  37  detects  IP
+                  packets  that are too big for a corresponding interface. Ta‐
+                  ble 38 produces ICMPv4 Fragmentation Needed (or  ICMPv6  Too
+                  Big) errors and deliver them back to the offending port. ta‐
+                  ble  39 handles packets to remote hypervisors, table 40 han‐
+                  dles packets to the local hypervisor, and  table  41  checks
+                  whether  packets  whose  logical ingress and egress port are
+                  the same should be discarded.
+
+                  Logical patch ports are a special case. Logical patch  ports
+                  do  not  have  a physical location and effectively reside on
+                  every hypervisor. Thus, flow table 40, for output  to  ports
+                  on the local hypervisor, naturally implements output to uni‐
+                  cast  logical  patch  ports  too. However, applying the same
+                  logic to a logical patch port that is part of a logical mul‐
+                  ticast group yields packet duplication, because each  hyper‐
+                  visor  that  contains  a logical port in the multicast group
+                  will also output the packet to the logical patch port. Thus,
+                  multicast groups implement output to logical patch ports  in
+                  table 39.
+
+                  Each  flow  in table 39 matches on a logical output port for
+                  unicast or multicast logical ports that  include  a  logical
+                  port  on  a remote hypervisor. Each flow’s actions implement
+                  sending a packet to the port it matches. For unicast logical
+                  output ports on remote hypervisors, the actions set the tun‐
+                  nel key to the correct value, then send the  packet  on  the
+                  tunnel  port to the correct hypervisor. (When the remote hy‐
+                  pervisor receives the packet, table 0 there  will  recognize
+                  it  as a tunneled packet and pass it along to table 40.) For
+                  multicast logical output ports, the actions send one copy of
+                  the packet to each remote hypervisor, in the same way as for
+                  unicast destinations. If a multicast group includes a  logi‐
+                  cal  port or ports on the local hypervisor, then its actions
+                  also resubmit to table 40. Table 39 also includes:
+
+                  •      A higher-priority rule to match packets received from
+                         ramp switch tunnels, based on flag MLF_RCV_FROM_RAMP,
+                         and resubmit these packets to table 40 for local  de‐
+                         livery.  Packets  received  from  ramp switch tunnels
+                         reach here because of a lack of logical  output  port
+                         field in the tunnel key and thus these packets needed
+                         to  be  submitted  to table 8 to determine the output
+                         port.
+
+                  •      A higher-priority rule to match packets received from
+                         ports of type localport, based on the  logical  input
+                         port,  and resubmit these packets to table 40 for lo‐
+                         cal delivery. Ports of type localport exist on  every
+                         hypervisor  and  by  definition  their traffic should
+                         never go out through a tunnel.
+
+                  •      A higher-priority rule to match packets that have the
+                         MLF_LOCAL_ONLY logical flow flag set, and whose  des‐
+                         tination  is a multicast address. This flag indicates
+                         that the packet should not be delivered to remote hy‐
+                         pervisors, even if the multicast destination includes
+                         ports on remote hypervisors. This flag is  used  when
+                         ovn-controller  is  the  originator  of the multicast
+                         packet. Since each ovn-controller instance is  origi‐
+                         nating these packets, the packets only need to be de‐
+                         livered to local ports.
+
+                  •      A  fallback  flow that resubmits to table 40 if there
+                         is no other match.
+
+                  Flows in table 40 resemble those in table 39 but for logical
+                  ports that reside locally rather than remotely. For  unicast
+                  logical  output  ports  on the local hypervisor, the actions
+                  just resubmit to table 41. For multicast output  ports  that
+                  include  one  or more logical ports on the local hypervisor,
+                  for each such logical port P, the actions change the logical
+                  output port to P, then resubmit to table 41.
+
+                  A special case is that when a localnet port  exists  on  the
+                  datapath,  remote  port is connected by switching to the lo‐
+                  calnet port. In this case, instead of adding a flow in table
+                  39 to reach the remote port, a flow is added in table 40  to
+                  switch  the logical outport to the localnet port, and resub‐
+                  mit to table 40 as if it were unicasted to a logical port on
+                  the local hypervisor.
+
+                  Table 41 matches and drops packets for which the logical in‐
+                  put and output ports are the same and the MLF_ALLOW_LOOPBACK
+                  flag is not set. It also drops  MLF_LOCAL_ONLY  packets  di‐
+                  rected to a localnet port. It resubmits other packets to ta‐
+                  ble 42.
+
+              4.  OpenFlow  tables  42  through  62 execute the logical egress
+                  pipeline from the Logical_Flow table in the  OVN  Southbound
+                  database.  The  egress pipeline can perform a final stage of
+                  validation before packet delivery. Eventually, it  may  exe‐
+                  cute  an  output  action, which ovn-controller implements by
+                  resubmitting to table 64. A packet for  which  the  pipeline
+                  never  executes  output  is effectively dropped (although it
+                  may have been transmitted through a tunnel across a physical
+                  network).
+
+                  The egress pipeline cannot change the logical output port or
+                  cause further tunneling.
+
+              5.  Table 64 bypasses OpenFlow loopback when  MLF_ALLOW_LOOPBACK
+                  is  set. Logical loopback was handled in table 41, but Open‐
+                  Flow by default  also  prevents  loopback  to  the  OpenFlow
+                  ingress port. Thus, when MLF_ALLOW_LOOPBACK is set, OpenFlow
+                  table  64  saves the OpenFlow ingress port, sets it to zero,
+                  resubmits to table 65  for  logical-to-physical  transforma‐
+                  tion,  and  then  restores the OpenFlow ingress port, effec‐
+                  tively disabling OpenFlow loopback  prevents.  When  MLF_AL‐
+                  LOW_LOOPBACK is unset, table 64 flow simply resubmits to ta‐
+                  ble 65.
+
+              6.  OpenFlow  table 65 performs logical-to-physical translation,
+                  the opposite of table 0. It  matches  the  packet’s  logical
+                  egress  port.  Its actions output the packet to the port at‐
+                  tached to the OVN integration bridge  that  represents  that
+                  logical  port.  If  the  logical  egress port is a container
+                  nested with a VM, then before sending the packet the actions
+                  push on a VLAN header with an appropriate VLAN ID.
+
+   Logical Routers and Logical Patch Ports
+       Typically logical routers and logical patch ports do not have a  physi‐
+       cal  location  and  effectively reside on every hypervisor. This is the
+       case for logical  patch  ports  between  logical  routers  and  logical
+       switches behind those logical routers, to which VMs (and VIFs) attach.
+
+       Consider a packet sent from one virtual machine or container to another
+       VM  or  container  that  resides on a different subnet. The packet will
+       traverse tables 0 to 65 as described in the previous section  Architec�‐
+       tural  Physical Life Cycle of a Packet, using the logical datapath rep‐
+       resenting the logical switch that the sender is attached to.  At  table
+       39, the packet will use the fallback flow that resubmits locally to ta‐
+       ble 40 on the same hypervisor. In this case, all of the processing from
+       table 0 to table 65 occurs on the hypervisor where the sender resides.
+
+       When  the packet reaches table 65, the logical egress port is a logical
+       patch port. ovn-controller implements output to the  logical  patch  is
+       packet  by cloning and resubmitting directly to the first OpenFlow flow
+       table in the ingress pipeline, setting the logical ingress port to  the
+       peer  logical patch port, and using the peer logical patch port’s logi‐
+       cal datapath (that represents the logical router).
+
+       The packet re-enters the ingress pipeline in order to traverse tables 8
+       to 65 again, this time using the logical datapath representing the log‐
+       ical router. The processing continues as described in the previous sec‐
+       tion Architectural Physical Life Cycle of a  Packet.  When  the  packet
+       reaches  table 65, the logical egress port will once again be a logical
+       patch port. In the same manner as described above, this  logical  patch
+       port  will  cause  the packet to be resubmitted to OpenFlow tables 8 to
+       65, this time using  the  logical  datapath  representing  the  logical
+       switch that the destination VM or container is attached to.
+
+       The packet traverses tables 8 to 65 a third and final time. If the des‐
+       tination  VM or container resides on a remote hypervisor, then table 39
+       will send the packet on a tunnel port from the sender’s  hypervisor  to
+       the remote hypervisor. Finally table 65 will output the packet directly
+       to the destination VM or container.
+
+       The  following  sections describe two exceptions, where logical routers
+       and/or logical patch ports are associated with a physical location.
+
+     Gateway Routers
+
+       A gateway router is a logical router that is bound to a physical  loca‐
+       tion.  This  includes  all  of  the  logical patch ports of the logical
+       router, as well as all of the  peer  logical  patch  ports  on  logical
+       switches.  In the OVN Southbound database, the Port_Binding entries for
+       these logical patch ports use the type l3gateway rather than patch,  in
+       order  to  distinguish  that  these  logical patch ports are bound to a
+       chassis.
+
+       When a hypervisor processes a packet on a logical datapath representing
+       a logical switch, and the logical egress port is a l3gateway port  rep‐
+       resenting  connectivity  to  a  gateway router, the packet will match a
+       flow in table 39 that sends the packet on a tunnel port to the  chassis
+       where  the  gateway router resides. This processing in table 39 is done
+       in the same manner as for VIFs.
+
+     Distributed Gateway Ports
+
+       This section provides additional details on distributed gateway  ports,
+       outlined earlier.
+
+       The  primary  design  goal  of distributed gateway ports is to allow as
+       much traffic as possible to be handled locally on the hypervisor  where
+       a  VM  or  container resides. Whenever possible, packets from the VM or
+       container to the outside world should be processed completely  on  that
+       VM’s  or  container’s hypervisor, eventually traversing a localnet port
+       instance or a tunnel to the physical network or a different OVN deploy‐
+       ment. Whenever possible, packets from the outside world to a VM or con‐
+       tainer should be directed through the physical network directly to  the
+       VM’s or container’s hypervisor.
+
+       In  order  to allow for the distributed processing of packets described
+       in the paragraph above, distributed gateway ports need  to  be  logical
+       patch  ports  that  effectively reside on every hypervisor, rather than
+       l3gateway ports that are bound to a particular  chassis.  However,  the
+       flows  associated with distributed gateway ports often need to be asso‐
+       ciated with physical locations, for the following reasons:
+
+              •      The physical network that the localnet port  is  attached
+                     to  typically uses L2 learning. Any Ethernet address used
+                     over the distributed gateway port must be restricted to a
+                     single physical location so that upstream L2 learning  is
+                     not  confused.  Traffic  sent out the distributed gateway
+                     port towards the localnet port with a  specific  Ethernet
+                     address  must  be  sent  out one specific instance of the
+                     distributed gateway port on one specific chassis. Traffic
+                     received from the localnet port (or from  a  VIF  on  the
+                     same logical switch as the localnet port) with a specific
+                     Ethernet address must be directed to the logical switch’s
+                     patch port instance on that specific chassis.
+
+                     Due  to the implications of L2 learning, the Ethernet ad‐
+                     dress and IP address of the distributed gateway port need
+                     to be restricted to a single physical location. For  this
+                     reason, the user must specify one chassis associated with
+                     the  distributed gateway port. Note that traffic travers‐
+                     ing the distributed gateway port using other Ethernet ad‐
+                     dresses and IP addresses (e.g. one-to-one NAT) is not re‐
+                     stricted to this chassis.
+
+                     Replies to ARP and ND requests must be  restricted  to  a
+                     single  physical  location, where the Ethernet address in
+                     the reply resides. This includes ARP and ND  replies  for
+                     the IP address of the distributed gateway port, which are
+                     restricted  to  the chassis that the user associated with
+                     the distributed gateway port.
+
+              •      In order to support one-to-many SNAT (aka  IP  masquerad‐
+                     ing),  where  multiple logical IP addresses spread across
+                     multiple chassis are mapped to a single external  IP  ad‐
+                     dress, it will be necessary to handle some of the logical
+                     router  processing on a specific chassis in a centralized
+                     manner. Since the SNAT external IP address  is  typically
+                     the distributed gateway port IP address, and for simplic‐
+                     ity,  the  same  chassis  associated with the distributed
+                     gateway port is used.
+
+       The details of flow restrictions to specific chassis are  described  in
+       the ovn-northd documentation.
+
+       While  most  of  the physical location dependent aspects of distributed
+       gateway ports can be handled by  restricting  some  flows  to  specific
+       chassis, one additional mechanism is required. When a packet leaves the
+       ingress pipeline and the logical egress port is the distributed gateway
+       port, one of two different sets of actions is required at table 39:
+
+              •      If  the packet can be handled locally on the sender’s hy‐
+                     pervisor (e.g. one-to-one NAT traffic), then  the  packet
+                     should  just  be  resubmitted locally to table 40, in the
+                     normal manner for distributed logical patch ports.
+
+              •      However, if the packet needs to be handled on the chassis
+                     associated with the distributed gateway port  (e.g.  one-
+                     to-many  SNAT  traffic or non-NAT traffic), then table 39
+                     must send the packet on a tunnel port to that chassis.
+
+       In order to trigger the second set of actions, the chassisredirect type
+       of southbound Port_Binding has been added. Setting the  logical  egress
+       port  to the type chassisredirect logical port is simply a way to indi‐
+       cate that although the packet is destined for the  distributed  gateway
+       port,  it  needs  to be redirected to a different chassis. At table 39,
+       packets with this logical egress port are sent to a  specific  chassis,
+       in the same way that table 39 directs packets whose logical egress port
+       is a VIF or a type l3gateway port to different chassis. Once the packet
+       arrives at that chassis, table 40 resets the logical egress port to the
+       value  representing  the distributed gateway port. For each distributed
+       gateway port, there is one type chassisredirect port,  in  addition  to
+       the distributed logical patch port representing the distributed gateway
+       port.
+
+     High Availability for Distributed Gateway Ports
+
+       OVN  allows you to specify a prioritized list of chassis for a distrib‐
+       uted gateway port. This is done by associating multiple Gateway_Chassis
+       rows with a Logical_Router_Port in the OVN_Northbound database.
+
+       When multiple chassis have been specified for a  gateway,  all  chassis
+       that may send packets to that gateway will enable BFD on tunnels to all
+       configured  gateway chassis. The current master chassis for the gateway
+       is the highest priority gateway chassis that is currently viewed as ac‐
+       tive based on BFD status.
+
+       For more information on L3 gateway high availability, please  refer  to
+       http://docs.ovn.org/en/latest/topics/high-availability.html.
+
+     Restrictions of Distributed Gateway Ports
+
+       Distributed  gateway  ports are used to connect to an external network,
+       which can be a physical network modeled by a logical switch with a  lo‐
+       calnet  port,  and can also be a logical switch that interconnects dif‐
+       ferent OVN deployments (see OVN Deployments  Interconnection).  Usually
+       there  can be many logical routers connected to the same external logi‐
+       cal switch, as shown in below diagram.
+
+                                     +--LS-EXT-+
+                                     |    |    |
+                                     |    |    |
+                                    LR1  ...  LRn
+
+
+       In this diagram, there are n logical routers  connected  to  a  logical
+       switch  LS-EXT,  each  with a distributed gateway port, so that traffic
+       sent to external world is redirected to the gateway chassis that is as‐
+       signed to the distributed gateway port of respective logical router.
+
+       In the logical topology, nothing can prevent an user to add a route be‐
+       tween the logical routers via the connected distributed  gateway  ports
+       on  LS-EXT.  However,  the route works only if the LS-EXT is a physical
+       network (modeled by a logical switch with a  localnet  port).  In  that
+       case the packet will be delivered between the gateway chassises through
+       the localnet port via physical network. If the LS-EXT is a regular log‐
+       ical switch (backed by tunneling only, as in the use case of OVN inter‐
+       connection),  then  the  packet  will  be dropped on the source gateway
+       chassis. The limitation is due the fact that distributed gateway  ports
+       are tied to physical location, and without physical network connection,
+       we  will end up with either dropping the packet or transferring it over
+       the tunnels which could cause bigger problems such as broadcast packets
+       being redirect repeatedly by different gateway chassises.
+
+       With the limitation in mind, if a user do want the direct  connectivity
+       between the logical routers, it is better to create an internal logical
+       switch  connected  to  the  logical routers with regular logical router
+       ports, which are completely distributed and the packets don’t  have  to
+       leave  a  chassis  unless necessary, which is more optimal than routing
+       via the distributed gateway ports.
+
+     ARP request and ND NS packet processing
+
+       Due to the fact that ARP requests and ND NA packets are usually  broad‐
+       cast  packets,  for  performance  reasons, OVN deals with requests that
+       target OVN owned IP addresses (i.e., IP  addresses  configured  on  the
+       router  ports,  VIPs, NAT IPs) in a specific way and only forwards them
+       to the logical router that owns the target IP address. This behavior is
+       different than that of traditional  switches  and  implies  that  other
+       routers/hosts connected to the logical switch will not learn the MAC/IP
+       binding from the request packet.
+
+       All other ARP and ND packets are flooded in the L2 broadcast domain and
+       to all attached logical patch ports.
+
+     VIFs on the logical switch connected by a distributed gateway port
+
+       Typically the logical switch connected by a distributed gateway port is
+       for  external connectivity, usually to a physical network through a lo‐
+       calnet port on the logical  switch,  or  to  a  remote  OVN  deployment
+       through  OVN  Interconnection. In these cases there is no VIF ports re‐
+       quired on the logical switch.
+
+       While not very common, it is still possible to create VIF ports on  the
+       logical  switch connected by a distributed gateway port, but there is a
+       limitation that the logical ports need to reside on the gateway chassis
+       where the distributed gateway port resides to get connectivity to other
+       logical switches through the distributed gateway port. There is no lim‐
+       itation for the VIFs to connect within the logical  switch,  or  beyond
+       the  logical  switch  through  other regular distributed logical router
+       ports.
+
+       A special case is when using distributed gateway ports for  scalability
+       purpose,  as  mentioned  earlier in this document. The logical switches
+       connected by distributed gateway ports are  not  for  connectivity  but
+       just  for  regular VIFs. However, the above limitation usually does not
+       matter because in this use case all the VIFs on the logical switch  are
+       located on the same chassis with the distributed gateway port that con‐
+       nects the logical switch.
+
+   Multiple localnet logical switches connected to a Logical Router
+       It  is  possible to have multiple logical switches each with a localnet
+       port (representing physical networks) connected to a logical router, in
+       which one localnet logical switch may provide the external connectivity
+       via a distributed  gateway  port  and  rest  of  the  localnet  logical
+       switches  use VLAN tagging in the physical network. It is expected that
+       ovn-bridge-mappings is configured appropriately on the chassis for  all
+       these localnet networks.
+
+     East West routing
+
+       East-West  routing  between these localnet VLAN tagged logical switches
+       work almost the same way as normal logical switches. When the VM  sends
+       such a packet, then:
+
+              1.  It  first  enters  the  ingress  pipeline,  and  then egress
+                  pipeline of the source localnet logical switch datapath.  It
+                  then enters the ingress pipeline of the logical router data‐
+                  path via the logical router port in the source chassis.
+
+              2.  Routing decision is taken.
+
+              3.  From the router datapath, packet enters the ingress pipeline
+                  and then egress pipeline of the destination localnet logical
+                  switch  datapath  and  goes out of the integration bridge to
+                  the provider bridge ( belonging to the  destination  logical
+                  switch)  via  the localnet port. While sending the packet to
+                  provider bridge, we also replace router port MAC  as  source
+                  MAC with a chassis unique MAC.
+
+                  This  chassis  unique MAC is configured as global ovs config
+                  on each chassis (eg. via "ovs-vsctl set open . external-ids:
+                  ovn-chassis-mac-mappings="phys:aa:bb:cc:dd:ee:$i$i"").   For
+                  more details, see ovn-controller(8).
+
+                  If the above is not configured, then source MAC would be the
+                  router  port  MAC. This could create problem if we have more
+                  than one chassis. This is because, since the router port  is
+                  distributed, the same (MAC,VLAN) tuple will seen by physical
+                  network  from other chassis as well, which could cause these
+                  issues:
+
+                  •      Continuous MAC moves in top-of-rack switch (ToR).
+
+                  •      ToR dropping the traffic, which is causing continuous
+                         MAC moves.
+
+                  •      ToR blocking the ports from which MAC moves are  hap‐
+                         pening.
+
+              4.  The destination chassis receives the packet via the localnet
+                  port and sends it to the integration bridge. Before entering
+                  the  integration bridge the source mac of the packet will be
+                  replaced with router port mac again. The packet  enters  the
+                  ingress pipeline and then egress pipeline of the destination
+                  localnet  logical  switch  and finally gets delivered to the
+                  destination VM port.
+
+     External traffic
+
+       The following happens when a VM sends an external  traffic  (which  re‐
+       quires  NATting) and the chassis hosting the VM doesn’t have a distrib‐
+       uted gateway port.
+
+              1.  The packet first  enters  the  ingress  pipeline,  and  then
+                  egress  pipeline of the source localnet logical switch data‐
+                  path. It then enters the ingress  pipeline  of  the  logical
+                  router  datapath  via  the logical router port in the source
+                  chassis.
+
+              2.  Routing decision is taken. Since the gateway router  or  the
+                  distributed  gateway port doesn’t reside in the source chas‐
+                  sis, the traffic is redirected to the  gateway  chassis  via
+                  the tunnel port.
+
+              3.  The  gateway chassis receives the packet via the tunnel port
+                  and the packet enters the egress  pipeline  of  the  logical
+                  router datapath. NAT rules are applied here. The packet then
+                  enters  the ingress pipeline and then egress pipeline of the
+                  localnet logical switch  datapath  which  provides  external
+                  connectivity  and  finally goes out via the localnet port of
+                  the logical switch which provides external connectivity.
+
+       Although this works, the VM traffic is tunnelled  when  sent  from  the
+       compute  chassis  to the gateway chassis. In order for it to work prop‐
+       erly, the MTU of the localnet logical switches must be lowered  to  ac‐
+       count for the tunnel encapsulation.
+
+   Centralized  routing for localnet VLAN tagged logical switches connected to
+       a Logical Router
+       To overcome the tunnel encapsulation problem described in the  previous
+       section,  OVN  supports  the option of enabling centralized routing for
+       localnet VLAN tagged logical switches. CMS can configure the option op�‐
+       tions:reside-on-redirect-chassis to true for  each  Logical_Router_Port
+       which  connects  to  the  localnet  VLAN  tagged logical switches. This
+       causes the gateway chassis (hosting the distributed  gateway  port)  to
+       handle  all  the  routing for these networks, making it centralized. It
+       will reply to the ARP requests for the logical router port IPs.
+
+       If the logical router doesn’t have a distributed gateway port  connect‐
+       ing  to  the localnet logical switch which provides external connectiv‐
+       ity, or if it has more than one distributed gateway  ports,  then  this
+       option is ignored by OVN.
+
+       The  following happens when a VM sends an east-west traffic which needs
+       to be routed:
+
+              1.  The packet first  enters  the  ingress  pipeline,  and  then
+                  egress  pipeline of the source localnet logical switch data‐
+                  path and is sent out via a localnet port of the  source  lo‐
+                  calnet  logical  switch  (instead  of  sending  it to router
+                  pipeline).
+
+              2.  The gateway chassis receives the packet via a localnet  port
+                  of  the  source  localnet logical switch and sends it to the
+                  integration bridge.  The  packet  then  enters  the  ingress
+                  pipeline,  and  then  egress pipeline of the source localnet
+                  logical switch datapath and enters the ingress  pipeline  of
+                  the logical router datapath.
+
+              3.  Routing decision is taken.
+
+              4.  From the router datapath, packet enters the ingress pipeline
+                  and then egress pipeline of the destination localnet logical
+                  switch  datapath. It then goes out of the integration bridge
+                  to the provider bridge ( belonging to the destination  logi‐
+                  cal switch) via a localnet port.
+
+              5.  The  destination  chassis receives the packet via a localnet
+                  port and sends it to the integration bridge. The packet  en‐
+                  ters  the  ingress  pipeline and then egress pipeline of the
+                  destination localnet logical switch and finally delivered to
+                  the destination VM port.
+
+       The following happens when a VM sends an  external  traffic  which  re‐
+       quires NATting:
+
+              1.  The  packet  first  enters  the  ingress  pipeline, and then
+                  egress pipeline of the source localnet logical switch  data‐
+                  path  and  is sent out via a localnet port of the source lo‐
+                  calnet logical switch  (instead  of  sending  it  to  router
+                  pipeline).
+
+              2.  The  gateway chassis receives the packet via a localnet port
+                  of the source localnet logical switch and sends  it  to  the
+                  integration  bridge.  The  packet  then  enters  the ingress
+                  pipeline, and then egress pipeline of  the  source  localnet
+                  logical  switch  datapath and enters the ingress pipeline of
+                  the logical router datapath.
+
+              3.  Routing decision is taken and NAT rules are applied.
+
+              4.  From the router datapath, packet enters the ingress pipeline
+                  and then egress pipeline  of  the  localnet  logical  switch
+                  datapath  which provides external connectivity. It then goes
+                  out of the integration bridge to the  provider  bridge  (be‐
+                  longing  to  the logical switch which provides external con‐
+                  nectivity) via a localnet port.
+
+       The following happens for the reverse external traffic.
+
+              1.  The gateway chassis receives the packet from a localnet port
+                  of the logical switch which provides external  connectivity.
+                  The  packet then enters the ingress pipeline and then egress
+                  pipeline of the localnet logical switch (which provides  ex‐
+                  ternal  connectivity).  The  packet  then enters the ingress
+                  pipeline of the logical router datapath.
+
+              2.  The ingress pipeline of the logical router datapath  applies
+                  the  unNATting  rules.  The  packet  then enters the ingress
+                  pipeline and then egress pipeline  of  the  source  localnet
+                  logical  switch.  Since  the source VM doesn’t reside in the
+                  gateway chassis, the packet is sent out via a localnet  port
+                  of the source logical switch.
+
+              3.  The  source  chassis receives the packet via a localnet port
+                  and sends it to the integration bridge.  The  packet  enters
+                  the  ingress pipeline and then egress pipeline of the source
+                  localnet logical switch and finally gets  delivered  to  the
+                  source VM port.
+
+       As  an  alternative  to  reside-on-redirect-chassis, OVN supports VLAN-
+       based redirection. Whereas reside-on-redirect-chassis  centralizes  all
+       router functionality, VLAN-based redirection only changes how OVN redi‐
+       rects  packets to the gateway chassis. By setting options:redirect-type
+       to bridged on a distributed gateway port, OVN redirects packets to  the
+       gateway  chassis  using  the localnet port of the router’s peer logical
+       switch, instead of a tunnel.
+
+       If the logical router doesn’t have a distributed gateway port  connect‐
+       ing  to  the localnet logical switch which provides external connectiv‐
+       ity, or if it has more than one distributed gateway  ports,  then  this
+       option is ignored by OVN.
+
+       Following happens for bridged redirection:
+
+              1.  On  compute  chassis,  packet passes though logical router’s
+                  ingress pipeline.
+
+              2.  If logical outport is gateway chassis attached  router  port
+                  then  packet  is  "redirected" to gateway chassis using peer
+                  logical switch’s localnet port.
+
+              3.  This redirected packet has destination mac  as  router  port
+                  mac (the one to which gateway chassis is attached). Its VLAN
+                  id is that of localnet port (peer logical switch of the log‐
+                  ical router port).
+
+              4.  On  the gateway chassis packet will enter the logical router
+                  pipeline again and this  time  it  will  passthrough  egress
+                  pipeline as well.
+
+              5.  Reverse traffic packet flows stays the same.
+
+       Some guidelines and expections with bridged redirection:
+
+              1.  Since router port mac is destination mac, hence it has to be
+                  ensured  that  physical  network  learns it on ONLY from the
+                  gateway chassis. Which means  that  ovn-chassis-mac-mappings
+                  should be configure on all the compute nodes, so that physi‐
+                  cal network never learn router port mac from compute nodes.
+
+              2.  Since  packet  enters  logical router ingress pipeline twice
+                  (once on compute chassis  and  again  on  gateway  chassis),
+                  hence ttl will be decremented twice.
+
+              3.  Default  redirection  type continues to be overlay. User can
+                  switch the redirect-type  between  bridged  and  overlay  by
+                  changing the value of options:redirect-type
+
+   Life Cycle of a VTEP gateway
+       A  gateway  is  a chassis that forwards traffic between the OVN-managed
+       part of a logical network and a physical VLAN, extending a tunnel-based
+       logical network into a physical network.
+
+       The steps below refer often to details of the  OVN  and  VTEP  database
+       schemas. Please see ovn-sb(5), ovn-nb(5) and vtep(5), respectively, for
+       the full story on these databases.
+
+              1.  A  VTEP  gateway’s  life cycle begins with the administrator
+                  registering the VTEP gateway as a Physical_Switch table  en‐
+                  try  in the VTEP database. The ovn-controller-vtep connected
+                  to this VTEP database, will recognize the new  VTEP  gateway
+                  and  create  a  new  Chassis  table  entry  for  it  in  the
+                  OVN_Southbound database.
+
+              2.  The administrator can then create a new Logical_Switch table
+                  entry, and bind a particular vlan on a VTEP  gateway’s  port
+                  to  any  VTEP  logical switch. Once a VTEP logical switch is
+                  bound to a VTEP gateway, the ovn-controller-vtep will detect
+                  it and add its name to the vtep_logical_switches  column  of
+                  the  Chassis table in the OVN_Southbound database. Note, the
+                  tunnel_key column of VTEP logical switch is  not  filled  at
+                  creation.  The  ovn-controller-vtep will set the column when
+                  the corresponding vtep logical switch is  bound  to  an  OVN
+                  logical network.
+
+              3.  Now, the administrator can use the CMS to add a VTEP logical
+                  switch  to the OVN logical network. To do that, the CMS must
+                  first create a new Logical_Switch_Port table  entry  in  the
+                  OVN_Northbound database. Then, the type column of this entry
+                  must  be  set  to  "vtep". Next, the vtep-logical-switch and
+                  vtep-physical-switch keys in the options column must also be
+                  specified, since multiple VTEP gateways can  attach  to  the
+                  same VTEP logical switch. Next, the addresses column of this
+                  logical  port must be set to "unknown", it will add a prior‐
+                  ity 0 entry  in  "ls_in_l2_lkup"  stage  of  logical  switch
+                  ingress  pipeline.  So,  traffic  with unrecorded mac by OVN
+                  would go through the Logical_Switch_Port  to  physical  net‐
+                  work.
+
+              4.  The  newly  created logical port in the OVN_Northbound data‐
+                  base and its  configuration  will  be  passed  down  to  the
+                  OVN_Southbound  database  as a new Port_Binding table entry.
+                  The ovn-controller-vtep will recognize the change  and  bind
+                  the  logical port to the corresponding VTEP gateway chassis.
+                  Configuration of binding the same VTEP logical switch  to  a
+                  different  OVN logical networks is not allowed and a warning
+                  will be generated in the log.
+
+              5.  Beside binding to the VTEP  gateway  chassis,  the  ovn-con�‐
+                  troller-vtep  will  update the tunnel_key column of the VTEP
+                  logical switch to the corresponding  Datapath_Binding  table
+                  entry’s tunnel_key for the bound OVN logical network.
+
+              6.  Next, the ovn-controller-vtep will keep reacting to the con‐
+                  figuration  change in the Port_Binding in the OVN_Northbound
+                  database, and updating the Ucast_Macs_Remote  table  in  the
+                  VTEP  database.  This  allows the VTEP gateway to understand
+                  where to forward the unicast traffic  coming  from  the  ex‐
+                  tended external network.
+
+              7.  Eventually,  the VTEP gateway’s life cycle ends when the ad‐
+                  ministrator unregisters the VTEP gateway from the VTEP data‐
+                  base. The ovn-controller-vtep will recognize the  event  and
+                  remove  all  related configurations (Chassis table entry and
+                  port bindings) in the OVN_Southbound database.
+
+              8.  When the ovn-controller-vtep is terminated, all related con‐
+                  figurations in the  OVN_Southbound  database  and  the  VTEP
+                  database  will  be  cleaned, including Chassis table entries
+                  for all registered VTEP gateways and  their  port  bindings,
+                  and  all  Ucast_Macs_Remote  table  entries  and  the  Logi�‐
+                  cal_Switch tunnel keys.
+
+   OVN Deployments Interconnection
+       It is not uncommon for an operator to deploy multiple OVN clusters, for
+       two main reasons. Firstly, an operator may prefer  to  deploy  one  OVN
+       cluster for each availability zone, e.g. in different physical regions,
+       to  avoid  single  point of failure. Secondly, there is always an upper
+       limit for a single OVN control plane to scale.
+
+       Although the control planes of the different  availability  zone  (AZ)s
+       are  independent  from each other, the workloads from different AZs may
+       need to communicate across the zones. The OVN  interconnection  feature
+       provides  a  native  way  to  interconnect  different AZs by L3 routing
+       through transit overlay networks between logical routers  of  different
+       AZs.
+
+       A  global OVN Interconnection Northbound database is introduced for the
+       operator (probably through CMS systems) to  configure  transit  logical
+       switches  that  connect  logical  routers from different AZs. A transit
+       switch is similar to a regular logical switch, but it is used  for  in‐
+       terconnection  purpose only. Typically, each transit switch can be used
+       to connect all logical routers that belong to same  tenant  across  all
+       AZs.
+
+       A  dedicated  daemon process ovn-ic, OVN interconnection controller, in
+       each AZ will consume  this  data  and  populate  corresponding  logical
+       switches to their own northbound databases for each AZ, so that logical
+       routers  can  be connected to the transit switch by creating patch port
+       pairs in their northbound databases. Any router ports connected to  the
+       transit  switches  are  considered interconnection ports, which will be
+       exchanged between AZs.
+
+       Physically, when workloads from different AZs communicate, packets need
+       to go through multiple hops: source chassis, source  gateway,  destina‐
+       tion  gateway  and  destination  chassis.  All these hops are connected
+       through tunnels so that the packets never  leave  overlay  networks.  A
+       distributed gateway port is required to connect the logical router to a
+       transit  switch,  with a gateway chassis specified, so that the traffic
+       can be forwarded through the gateway chassis.
+
+       A global OVN Interconnection Southbound database is introduced for  ex‐
+       changing  control  plane  information between the AZs. The data in this
+       database is populated and consumed by the ovn-ic, of each AZ. The  main
+       information in this database includes:
+
+              •      Datapath bindings for transit switches, which mainly con‐
+                     tains  the tunnel keys generated for each transit switch.
+                     Separate key ranges are reserved for transit switches  so
+                     that  they  will  never conflict with any tunnel keys lo‐
+                     cally assigned for datapaths within each AZ.
+
+              •      Availability zones, which are registered by  ovn-ic  from
+                     each AZ.
+
+              •      Gateways.  Each  AZ specifies chassises that are supposed
+                     to work as interconnection gateways, and the ovn-ic  will
+                     populate  this  information to the interconnection south‐
+                     bound DB. The ovn-ic from all the other  AZs  will  learn
+                     the gateways and populate to their own southbound DB as a
+                     chassis.
+
+              •      Port  bindings  for  logical  switch ports created on the
+                     transit switch. Each AZ maintains their logical router to
+                     transit switch connections independently, but ovn-ic  au‐
+                     tomatically  populates  local  port  bindings  on transit
+                     switches to the global interconnection southbound DB, and
+                     learns remote port bindings from other AZs  back  to  its
+                     own  northbound and southbound DBs, so that logical flows
+                     can be produced and then translated to OVS flows locally,
+                     which finally enables data plane communication.
+
+              •      Routes that are advertised between different AZs. If  en‐
+                     abled, routes are automatically exchanged by ovn-ic. Both
+                     static  routes  and directly connected subnets are adver‐
+                     tised. Options in options column of the  NB_Global  table
+                     of  OVN_NB  database control the behavior of route adver‐
+                     tisement, such as enable/disable the advertising/learning
+                     routes, whether default  routes  are  advertised/learned,
+                     and blacklisted CIDRs. See ovn-nb(5) for more details.
+
+       The  tunnel keys for transit switch datapaths and related port bindings
+       must be agreed across all AZs. This is ensured by generating and  stor‐
+       ing  the  keys  in  the global interconnection southbound database. Any
+       ovn-ic from any AZ can allocate the key, but race conditions are solved
+       by enforcing unique index for the column in the database.
+
+       Once each AZ’s NB and SB databases are populated  with  interconnection
+       switches  and ports, and agreed upon the tunnel keys, data plane commu‐
+       nication between the AZs are established.
+
+       When VXLAN tunneling is enabled in an OVN cluster, due to  the  limited
+       range available for VNIs, Interconnection feature is not supported.
+
+     A day in the life of a packet crossing AZs
+
+              1.  An IP packet is sent out from a VIF on a hypervisor (HV1) of
+                  AZ1, with destination IP belonging to a VIF in AZ2.
+
+              2.  In  HV1’s  OVS  flow tables, the packet goes through logical
+                  switch and logical router pipelines, and in a logical router
+                  pipeline, the routing stage finds out the next hop  for  the
+                  destination  IP,  which  belongs  to a remote logical router
+                  port in AZ2, and the output port, which is  a  chassis-redi‐
+                  rect  port  located  on  an  interconnection gateway (GW1 in
+                  AZ1), so HV1 sends the packet to GW1 through tunnel.
+
+              3.  On GW1, it continues with the logical router pipe  line  and
+                  switches  to  the transit switch’s pipeline through the peer
+                  port of the chassis redirect port. In the  transit  switch’s
+                  pipeline  it outputs to the remote logical port which is lo‐
+                  cated on a gateway (GW2) in AZ2, so the GW1 sends the packet
+                  to GW2 in tunnel.
+
+              4.  On GW2, it continues with the transit  switch  pipeline  and
+                  switches  to  the  logical  router pipeline through the peer
+                  port, which is a chassis redirect port that  is  located  on
+                  GW2. The logical router pipeline then forwards the packet to
+                  relevant  logical  pipelines according to the destination IP
+                  address, and figures out the MAC and location of the  desti‐
+                  nation VIF port - a hypervisor (HV2). The GW2 then sends the
+                  packet to HV2 in tunnel.
+
+              5.  On HV2, the packet is delivered to the final destination VIF
+                  port  by  the  logical switch egress pipeline, just the same
+                  way as for intra-AZ communications.
+
+   Native OVN services for external logical ports
+       To support OVN native services (like DHCP/IPv6 RA/DNS  lookup)  to  the
+       cloud  resources  which  are  external,  OVN  supports external logical
+       ports.
+
+       Below are some of the use cases where external ports can be used.
+
+              •      VMs connected to SR-IOV nics - Traffic from these VMs  by
+                     passes  the  kernel stack and local ovn-controller do not
+                     bind these ports and cannot serve the native services.
+
+              •      When CMS supports provisioning baremetal servers.
+
+       OVN will provide the native services if CMS has done the below configu‐
+       ration in the OVN Northbound Database.
+
+              •      A row is created in Logical_Switch_Port, configuring  the
+                     addresses column and setting the type to external.
+
+              •      ha_chassis_group column is configured.
+
+              •      The  HA chassis which belongs to the HA chassis group has
+                     the ovn-bridge-mappings configured and has proper L2 con‐
+                     nectivity so that it can receive the DHCP and  other  re‐
+                     lated request packets from these external resources.
+
+              •      The Logical_Switch of this port has a localnet port.
+
+              •      Native  OVN  services are enabled by configuring the DHCP
+                     and other options like the way it is done for the  normal
+                     logical ports.
+
+       It is recommended to use the same HA chassis group for all the external
+       ports of a logical switch. Otherwise, the physical switch might see MAC
+       flap  issue when different chassis provide the native services. For ex‐
+       ample when supporting native DHCPv4 service, DHCPv4 server mac (config‐
+       ured in options:server_mac column in  table  DHCP_Options)  originating
+       from  different  ports can cause MAC flap issue. The MAC of the logical
+       router IP(s) can also flap if the same HA chassis group is not set  for
+       all the external ports of a logical switch.
+
+SECURITY
+   Role-Based Access Controls for the Southbound DB
+       In  order  to provide additional security against the possibility of an
+       OVN chassis becoming compromised in such a way as to allow rogue  soft‐
+       ware  to  make arbitrary modifications to the southbound database state
+       and thus disrupt the  OVN  network,  role-based  access  controls  (see
+       ovsdb-server(1) for additional details) are provided for the southbound
+       database.
+
+       The  implementation  of  role-based access controls (RBAC) requires the
+       addition of two tables to an OVSDB schema: the RBAC_Role  table,  which
+       is  indexed  by  role name and maps the the names of the various tables
+       that may be modifiable for a given role to individual rows in a permis‐
+       sions table containing detailed permission information for  that  role,
+       and  the  permission table itself which consists of rows containing the
+       following information:
+
+              Table Name
+                     The name of the associated table. This column exists pri‐
+                     marily as an aid for humans reading the contents of  this
+                     table.
+
+              Auth Criteria
+                     A set of strings containing the names of columns (or col‐
+                     umn:key pairs for columns containing string:string maps).
+                     The contents of at least one of the columns or column:key
+                     values in a row to be modified, inserted, or deleted must
+                     be equal to the ID of the client attempting to act on the
+                     row  in order for the authorization check to pass. If the
+                     authorization criteria is empty,  authorization  checking
+                     is  disabled and all clients for the role will be treated
+                     as authorized.
+
+              Insert/Delete
+                     Row insertion/deletion permission; boolean value indicat‐
+                     ing whether insertion and deletion of rows is allowed for
+                     the associated table. If true, insertion and deletion  of
+                     rows is allowed for authorized clients.
+
+              Updatable Columns
+                     A  set of strings containing the names of columns or col‐
+                     umn:key pairs that may be updated or  mutated  by  autho‐
+                     rized  clients. Modifications to columns within a row are
+                     only permitted  when  the  authorization  check  for  the
+                     client passes and all columns to be modified are included
+                     in this set of modifiable columns.
+
+       RBAC  configuration  for  the  OVN southbound database is maintained by
+       ovn-northd. With RBAC enabled, modifications are only permitted for the
+       Chassis, Encap, Port_Binding,  and  MAC_Binding  tables,  and  are  re‐
+       stricted as follows:
+
+              Chassis
+                     Authorization: client ID must match the chassis name.
+
+                     Insert/Delete:  authorized row insertion and deletion are
+                     permitted.
+
+                     Update: The columns  nb_cfg,  external_ids,  encaps,  and
+                     vtep_logical_switches may be modified when authorized.
+
+              Encap  Authorization: client ID must match the chassis name.
+
+                     Insert/Delete: row insertion and row deletion are permit‐
+                     ted.
+
+                     Update:  The  columns  type, options, and ip can be modi‐
+                     fied.
+
+              Port_Binding
+                     Authorization: disabled (all clients are  considered  au‐
+                     thorized.  A  future enhancement may add columns (or keys
+                     to external_ids) in order to control  which  chassis  are
+                     allowed to bind each port.
+
+                     Insert/Delete:  row  insertion/deletion are not permitted
+                     (ovn-northd maintains rows in this table.
+
+                     Update: Only modifications to the chassis column are per‐
+                     mitted.
+
+              MAC_Binding
+                     Authorization: disabled (all clients are considered to be
+                     authorized).
+
+                     Insert/Delete: row insertion/deletion are permitted.
+
+                     Update: The columns logical_port, ip, mac,  and  datapath
+                     may be modified by ovn-controller.
+
+              IGMP_Group
+                     Authorization: disabled (all clients are considered to be
+                     authorized).
+
+                     Insert/Delete: row insertion/deletion are permitted.
+
+                     Update: The columns address, chassis, datapath, and ports
+                     may be modified by ovn-controller.
+
+       Enabling RBAC for ovn-controller connections to the southbound database
+       requires the following steps:
+
+              1.  Creating SSL certificates for each chassis with the certifi‐
+                  cate  CN  field  set to the chassis name (e.g. for a chassis
+                  with  external-ids:system-id=chassis-1,  via   the   command
+                  "ovs-pki -u req+sign chassis-1 switch").
+
+              2.  Configuring  each  ovn-controller to use SSL when connecting
+                  to the southbound database (e.g. via "ovs-vsctl set  open  .
+                  external-ids:ovn-remote=ssl:x.x.x.x:6642").
+
+              3.  Configuring  a southbound database SSL remote with "ovn-con‐
+                  troller"   role   (e.g.   via   "ovn-sbctl    set-connection
+                  role=ovn-controller pssl:6642").
+
+   Encrypt Tunnel Traffic with IPsec
+       OVN  tunnel  traffic  goes through physical routers and switches. These
+       physical devices could be untrusted  (devices  in  public  network)  or
+       might  be  compromised.  Enabling  encryption to the tunnel traffic can
+       prevent the traffic data from being monitored and manipulated.
+
+       The tunnel traffic is encrypted with IPsec. The CMS sets the ipsec col‐
+       umn in the northbound NB_Global table to enable or disable IPsec encry‐
+       tion. If ipsec is true, all OVN tunnels will be encrypted. If ipsec  is
+       false, no OVN tunnels will be encrypted.
+
+       When  CMS  updates  the ipsec column in the northbound NB_Global table,
+       ovn-northd copies the value to  the  ipsec  column  in  the  southbound
+       SB_Global table. ovn-controller in each chassis monitors the southbound
+       database  and sets the options of the OVS tunnel interface accordingly.
+       OVS tunnel interface options are  monitored  by  the  ovs-monitor-ipsec
+       daemon which configures IKE daemon to set up IPsec connections.
+
+       Chassis  authenticates each other by using certificate. The authentica‐
+       tion succeeds if the other end in tunnel presents a certificate  signed
+       by  a  trusted CA and the common name (CN) matches the expected chassis
+       name. The SSL certificates used in role-based  access  controls  (RBAC)
+       can  be used in IPsec. Or use ovs-pki to create different certificates.
+       The certificate is required to be x.509 version 3, and  with  CN  field
+       and subjectAltName field being set to the chassis name.
+
+       The CA certificate, chassis certificate and private key are required to
+       be  installed  in  each  chassis  before  enabling  IPsec.  Please  see
+       ovs-vswitchd.conf.db(5) for setting up CA based IPsec authentication.
+
+DESIGN DECISIONS
+   Tunnel Encapsulations
+       In general, OVN annotates logical network packets that  it  sends  from
+       one  hypervisor to another with the following three pieces of metadata,
+       which are encoded in an encapsulation-specific fashion:
+
+              •      24-bit logical datapath identifier, from  the  tunnel_key
+                     column in the OVN Southbound Datapath_Binding table.
+
+              •      15-bit  logical ingress port identifier. ID 0 is reserved
+                     for internal use within OVN. IDs 1 through 32767,  inclu‐
+                     sive,  may  be  assigned  to  logical ports (see the tun�‐
+                     nel_key column in the OVN Southbound Port_Binding table).
+
+              •      16-bit logical egress  port  identifier.  IDs  0  through
+                     32767 have the same meaning as for logical ingress ports.
+                     IDs  32768  through  65535, inclusive, may be assigned to
+                     logical multicast groups (see the  tunnel_key  column  in
+                     the OVN Southbound Multicast_Group table).
+
+       When  VXLAN  is  enabled  on  any hypervisor in a cluster, datapath and
+       egress port identifier ranges are reduced to 12-bits. This is done  be‐
+       cause only STT and Geneve provide the large space for metadata (over 32
+       bits per packet). To accommodate for VXLAN, 24 bits available are split
+       as follows:
+
+              •      12-bit logical datapath identifier, derived from the tun�‐
+                     nel_key column in the OVN Southbound Datapath_Binding ta‐
+                     ble.
+
+              •      12-bit logical egress port identifier. IDs 0 through 2047
+                     are used for unicast output ports. IDs 2048 through 4095,
+                     inclusive,  may  be  assigned to logical multicast groups
+                     (see the tunnel_key column in the OVN  Southbound  Multi�‐
+                     cast_Group  table).  For  multicast  group tunnel keys, a
+                     special mapping scheme is used  to  internally  transform
+                     from  internal  OVN  16-bit  keys to 12-bit values before
+                     sending packets through a VXLAN  tunnel,  and  back  from
+                     12-bit  tunnel keys to 16-bit values when receiving pack‐
+                     ets from a VXLAN tunnel.
+
+              •      No logical ingress port identifier.
+
+       The limited space available for metadata when VXLAN tunnels are enabled
+       in a cluster put the following  functional  limitations  onto  features
+       available to users:
+
+              •      The maximum number of networks is reduced to 4096.
+
+              •      The  maximum  number  of  ports per network is reduced to
+                     2048.
+
+              •      ACLs matching against logical  ingress  port  identifiers
+                     are not supported.
+
+              •      OVN interconnection feature is not supported.
+
+       In  addition  to  functional limitations described above, the following
+       should be considered before enabling it in your cluster:
+
+              •      STT and Geneve use randomized UDP  or  TCP  source  ports
+                     that  allows  efficient distribution among multiple paths
+                     in environments that use ECMP in their underlay.
+
+              •      NICs are available to offload STT and  Geneve  encapsula‐
+                     tion and decapsulation.
+
+       Due to its flexibility, the preferred encapsulation between hypervisors
+       is Geneve. For Geneve encapsulation, OVN transmits the logical datapath
+       identifier  in  the  Geneve  VNI. OVN transmits the logical ingress and
+       logical egress ports in a TLV with  class  0x0102,  type  0x80,  and  a
+       32-bit value encoded as follows, from MSB to LSB:
+
+         1       15          16
+       +---+------------+-----------+
+       |rsv|ingress port|egress port|
+       +---+------------+-----------+
+         0
+
+
+       Environments  whose  NICs lack Geneve offload may prefer STT encapsula‐
+       tion for performance reasons. For STT encapsulation,  OVN  encodes  all
+       three  pieces  of  logical metadata in the STT 64-bit tunnel ID as fol‐
+       lows, from MSB to LSB:
+
+           9          15          16         24
+       +--------+------------+-----------+--------+
+       |reserved|ingress port|egress port|datapath|
+       +--------+------------+-----------+--------+
+           0
+
+
+       For connecting to gateways, in addition to Geneve and STT, OVN supports
+       VXLAN, because only  VXLAN  support  is  common  on  top-of-rack  (ToR)
+       switches. Currently, gateways have a feature set that matches the capa‐
+       bilities  as  defined by the VTEP schema, so fewer bits of metadata are
+       necessary. In the future, gateways that do not  support  encapsulations
+       with  large  amounts of metadata may continue to have a reduced feature
+       set.
+
+OVN 23.06.3                    OVN Architecture            ovn-architecture(7)
diff --git a/support/dist-docs-branch-23.06/ovn-controller-vtep.8 b/support/dist-docs-branch-23.06/ovn-controller-vtep.8
new file mode 100644
index 00000000..23825e29
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-controller-vtep.8
@@ -0,0 +1,110 @@
+'\" p
+.\" -*- nroff -*-
+.TH "ovn-controller-vtep" 8 "ovn-controller-vtep" "OVN 23\[char46]06\[char46]3" "OVN Manual"
+.fp 5 L CR              \\" Make fixed-width font available as \\fL.
+.de TQ
+.  br
+.  ns
+.  TP "\\$1"
+..
+.de ST
+.  PP
+.  RS -0.15in
+.  I "\\$1"
+.  RE
+..
+.de SU
+.  PP
+.  I "\\$1"
+..
+.PP
+.SH "NAME"
+.PP
+.PP
+ovn-controller-vtep \- Open Virtual Network local controller for vtep enabled physical switches\[char46]
+.SH "SYNOPSIS"
+.PP
+\fBovn\-controller\-vtep\fR [\fIoptions\fR] [\fI\-\-vtep-db=vtep-database\fR] [\fI\-\-ovnsb-db=ovnsb-database\fR]
+.SH "DESCRIPTION"
+.PP
+.PP
+\fBovn\-controller\-vtep\fR is the local controller daemon in OVN, the Open Virtual Network, for VTEP enabled physical switches\[char46] It connects up to the OVN Southbound database (see \fBovn\-sb\fR(5)) over the OVSDB protocol, and down to the VTEP database (see \fBvtep\fR(5)) over the OVSDB protocol\[char46]
+.SS "PKI Options"
+.PP
+.PP
+PKI configuration is required in order to use SSL for the connections to the VTEP and Southbound databases\[char46]
+.RS
+.TP
+\fB\-p\fR \fIprivkey\[char46]pem\fR
+.TQ .5in
+\fB\-\-private\-key=\fR\fIprivkey\[char46]pem\fR
+Specifies a PEM file containing the private key used as identity for outgoing SSL connections\[char46]
+.TP
+\fB\-c\fR \fIcert\[char46]pem\fR
+.TQ .5in
+\fB\-\-certificate=\fR\fIcert\[char46]pem\fR
+Specifies a PEM file containing a certificate that certifies the private key specified on \fB\-p\fR or \fB\-\-private\-key\fR to be trustworthy\[char46] The certificate must be signed by the certificate authority (CA) that the peer in SSL connections will use to verify it\[char46]
+.TP
+\fB\-C\fR \fIcacert\[char46]pem\fR
+.TQ .5in
+\fB\-\-ca\-cert=\fR\fIcacert\[char46]pem\fR
+Specifies a PEM file containing the CA certificate for verifying certificates presented to this program by SSL peers\[char46] (This may be the same certificate that SSL peers use to verify the certificate specified on \fB\-c\fR or \fB\-\-certificate\fR, or it may be a different one, depending on the PKI design in use\[char46])
+.TP
+\fB\-C none\fR
+.TQ .5in
+\fB\-\-ca\-cert=none\fR
+Disables verification of certificates presented by SSL peers\[char46] This introduces a security risk, because it means that certificates cannot be verified to be those of known trusted hosts\[char46]
+.RE
+.RS
+.TP
+\fB\-\-bootstrap\-ca\-cert=\fR\fIcacert\[char46]pem\fR
+When \fIcacert\[char46]pem\fR exists, this option has the same effect as \fB\-C\fR or \fB\-\-ca\-cert\fR\[char46] If it does not exist, then the executable will attempt to obtain the CA certificate from the SSL peer on its first SSL connection and save it to the named PEM file\[char46] If it is successful, it will immediately drop the connection and reconnect, and from then on all SSL connections must be authenticated by a certificate signed by the CA certificate thus obtained\[char46]
+.IP
+This option exposes the SSL connection to a man-in-the-middle attack obtaining the initial CA certificate, but it may be useful for bootstrapping\[char46]
+.IP
+This option is only useful if the SSL peer sends its CA certificate as part of the SSL certificate chain\[char46] The SSL protocol does not require the server to send the CA certificate\[char46]
+.IP
+This option is mutually exclusive with \fB\-C\fR and \fB\-\-ca\-cert\fR\[char46]
+.RE
+.RS
+.TP
+\fB\-\-peer\-ca\-cert=\fR\fIpeer-cacert\[char46]pem\fR
+Specifies a PEM file that contains one or more additional certificates to send to SSL peers\[char46] \fIpeer-cacert\[char46]pem\fR should be the CA certificate used to sign the program\(cqs own certificate, that is, the certificate specified on \fB\-c\fR or \fB\-\-certificate\fR\[char46] If the program\(cqs certificate is self-signed, then \fB\-\-certificate\fR and \fB\-\-peer\-ca\-cert\fR should specify the same file\[char46]
+.IP
+This option is not useful in normal operation, because the SSL peer must already have the CA certificate for the peer to have any confidence in the program\(cqs identity\[char46] However, this offers a way for a new installation to bootstrap the CA certificate on its first SSL connection\[char46]
+.RE
+.SH "CONFIGURATION"
+.PP
+.PP
+\fBovn\-controller\-vtep\fR retrieves its configuration information from both the ovnsb and the vtep database\[char46] If the database locations are not given from command line, the default is the \fBdb\[char46]sock\fR in local OVSDB\(cqs \(cqrun\(cq directory\[char46] The database location must take one of the following forms:
+.RS
+.IP \(bu
+\fBssl:\fIhost\fB:\fIport\fB\fR
+.IP
+The specified SSL \fIport\fR on the give \fIhost\fR, which can either be a DNS name (if built with unbound library) or an IP address (IPv4 or IPv6)\[char46] If \fIhost\fR is an IPv6 address, then wrap \fIhost\fR with square brackets, e\[char46]g\[char46]: \fBssl:[::1]:6640\fR\[char46] The \fB\-\-private\-key\fR, \fB\-\-certificate\fR and either of \fB\-\-ca\-cert\fR or \fB\-\-bootstrap\-ca\-cert\fR options are mandatory when this form is used\[char46]
+.IP \(bu
+\fBtcp:\fIhost\fB:\fIport\fB\fR
+.IP
+Connect to the given TCP \fIport\fR on \fIhost\fR, where \fIhost\fR can be a DNS name (if built with unbound library) or IP address (IPv4 or IPv6)\[char46] If \fIhost\fR is an IPv6 address, then wrap \fIhost\fR with square brackets, e\[char46]g\[char46]: \fBtcp:[::1]:6640\fR\[char46]
+.IP \(bu
+\fBunix:\fIfile\fB\fR
+.IP
+On POSIX, connect to the Unix domain server socket named \fIfile\fR\[char46]
+.IP
+On Windows, connect to a localhost TCP port whose value is written in \fIfile\fR\[char46]
+.RE
+.PP
+.PP
+\fBovn\-controller\-vtep\fR assumes it gets configuration information from the following keys in the \fBGlobal\fR table of the connected \fBhardware_vtep\fR database:
+.PP
+.PP
+.RS
+.TP
+\fBother_config:ovn\-match\-northd\-version\fR
+The boolean flag indicates if \fBovn\-controller\-vtep\fR needs to check \fBovn\-northd\fR version\[char46] If this flag is set to true and the \fBovn\-northd\(cqs\fR version (reported in the Southbound database) doesn\(cqt match with the \fBovn\-controller\-vtep\(cqs\fR internal version, then it will stop processing the southbound and connected \fBhardware_vtep\fR database changes\[char46] The default value is considered false if this option is not defined\[char46]
+.TP
+\fBother_config:ovn\-remote\-probe\-interval\fR
+The inactivity probe interval of the connection to the OVN Southbound database, in milliseconds\[char46] If the value is zero, it disables the connection keepalive feature\[char46]
+.IP
+If the value is nonzero, then it will be forced to a value of at least 1000 ms\[char46]
+.RE
diff --git a/support/dist-docs-branch-23.06/ovn-controller-vtep.8.html b/support/dist-docs-branch-23.06/ovn-controller-vtep.8.html
new file mode 100644
index 00000000..f93667ce
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-controller-vtep.8.html
@@ -0,0 +1,142 @@
+<html><head><meta charset="UTF-8"></head><body><pre>
+<u>o</u><u>v</u><u>n</u><u>-</u><u>c</u><u>o</u><u>n</u><u>t</u><u>r</u><u>o</u><u>l</u><u>l</u><u>e</u><u>r</u><u>-</u><u>v</u><u>t</u><u>e</u><u>p</u>(8)            OVN Manual            <u>o</u><u>v</u><u>n</u><u>-</u><u>c</u><u>o</u><u>n</u><u>t</u><u>r</u><u>o</u><u>l</u><u>l</u><u>e</u><u>r</u><u>-</u><u>v</u><u>t</u><u>e</u><u>p</u>(8)
+
+<b>N</b><b>A</b><b>M</b><b>E</b>
+       ovn-controller-vtep  -  Open  Virtual Network local controller for vtep
+       enabled physical switches.
+
+<b>S</b><b>Y</b><b>N</b><b>O</b><b>P</b><b>S</b><b>I</b><b>S</b>
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b><b>-</b><b>v</b><b>t</b><b>e</b><b>p</b>   [<u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u>]   [<u>-</u><u>-</u><u>v</u><u>t</u><u>e</u><u>p</u><u>-</u><u>d</u><u>b</u><u>=</u><u>v</u><u>t</u><u>e</u><u>p</u><u>-</u><u>d</u><u>a</u><u>t</u><u>a</u><u>b</u><u>a</u><u>s</u><u>e</u>]   [<u>-</u><u>-</u><u>o</u><u>v</u><u>n</u><u>s</u><u>b</u><u>-</u>
+       <u>d</u><u>b</u><u>=</u><u>o</u><u>v</u><u>n</u><u>s</u><u>b</u><u>-</u><u>d</u><u>a</u><u>t</u><u>a</u><u>b</u><u>a</u><u>s</u><u>e</u>]
+
+<b>D</b><b>E</b><b>S</b><b>C</b><b>R</b><b>I</b><b>P</b><b>T</b><b>I</b><b>O</b><b>N</b>
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b><b>-</b><b>v</b><b>t</b><b>e</b><b>p</b>  is  the  local  controller daemon in OVN, the Open
+       Virtual Network, for VTEP enabled physical switches. It connects up  to
+       the  OVN  Southbound  database (see <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b>(5)) over the OVSDB protocol,
+       and down to the VTEP database (see <b>v</b><b>t</b><b>e</b><b>p</b>(5)) over the OVSDB protocol.
+
+   <b>P</b><b>K</b><b>I</b> <b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+       PKI configuration is required in order to use SSL for  the  connections
+       to the VTEP and Southbound databases.
+
+              <b>-</b><b>p</b> <u>p</u><u>r</u><u>i</u><u>v</u><u>k</u><u>e</u><u>y</u><u>.</u><u>p</u><u>e</u><u>m</u>
+              <b>-</b><b>-</b><b>p</b><b>r</b><b>i</b><b>v</b><b>a</b><b>t</b><b>e</b><b>-</b><b>k</b><b>e</b><b>y</b><b>=</b><u>p</u><u>r</u><u>i</u><u>v</u><u>k</u><u>e</u><u>y</u><u>.</u><u>p</u><u>e</u><u>m</u>
+                   Specifies  a  PEM  file  containing the private key used as
+                   identity for outgoing SSL connections.
+
+              <b>-</b><b>c</b> <u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+              <b>-</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>i</b><b>f</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b><b>=</b><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+                   Specifies a PEM file containing a certificate  that  certi‐
+                   fies the private key specified on <b>-</b><b>p</b> or <b>-</b><b>-</b><b>p</b><b>r</b><b>i</b><b>v</b><b>a</b><b>t</b><b>e</b><b>-</b><b>k</b><b>e</b><b>y</b> to be
+                   trustworthy. The certificate must be signed by the certifi‐
+                   cate  authority  (CA) that the peer in SSL connections will
+                   use to verify it.
+
+              <b>-</b><b>C</b> <u>c</u><u>a</u><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+              <b>-</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>=</b><u>c</u><u>a</u><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+                   Specifies a PEM file containing the CA certificate for ver‐
+                   ifying certificates presented to this program by SSL peers.
+                   (This may be the same certificate that  SSL  peers  use  to
+                   verify the certificate specified on <b>-</b><b>c</b> or <b>-</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>i</b><b>f</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b>, or
+                   it  may  be a different one, depending on the PKI design in
+                   use.)
+
+              <b>-</b><b>C</b> <b>n</b><b>o</b><b>n</b><b>e</b>
+              <b>-</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>=</b><b>n</b><b>o</b><b>n</b><b>e</b>
+                   Disables verification  of  certificates  presented  by  SSL
+                   peers.  This  introduces  a security risk, because it means
+                   that certificates cannot be verified to be those  of  known
+                   trusted hosts.
+
+              <b>-</b><b>-</b><b>b</b><b>o</b><b>o</b><b>t</b><b>s</b><b>t</b><b>r</b><b>a</b><b>p</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>=</b><u>c</u><u>a</u><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+                     When  <u>c</u><u>a</u><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>  exists, this option has the same effect
+                     as <b>-</b><b>C</b> or <b>-</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b>. If it does not exist, then  the  exe‐
+                     cutable  will  attempt  to obtain the CA certificate from
+                     the SSL peer on its first SSL connection and save  it  to
+                     the  named PEM file. If it is successful, it will immedi‐
+                     ately drop the connection and reconnect, and from then on
+                     all SSL connections must be authenticated by  a  certifi‐
+                     cate signed by the CA certificate thus obtained.
+
+                     This  option  exposes the SSL connection to a man-in-the-
+                     middle attack obtaining the initial CA  certificate,  but
+                     it may be useful for bootstrapping.
+
+                     This  option  is only useful if the SSL peer sends its CA
+                     certificate as part of the SSL certificate chain. The SSL
+                     protocol does not require the server to send the CA  cer‐
+                     tificate.
+
+                     This option is mutually exclusive with <b>-</b><b>C</b> and <b>-</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b>.
+
+              <b>-</b><b>-</b><b>p</b><b>e</b><b>e</b><b>r</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>=</b><u>p</u><u>e</u><u>e</u><u>r</u><u>-</u><u>c</u><u>a</u><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+                     Specifies a PEM file that contains one or more additional
+                     certificates to send to SSL peers. <u>p</u><u>e</u><u>e</u><u>r</u><u>-</u><u>c</u><u>a</u><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u> should
+                     be the CA certificate used to sign the program’s own cer‐
+                     tificate,  that  is,  the  certificate specified on <b>-</b><b>c</b> or
+                     <b>-</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>i</b><b>f</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b>. If  the  program’s  certificate  is  self-
+                     signed,  then  <b>-</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>i</b><b>f</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b>  and  <b>-</b><b>-</b><b>p</b><b>e</b><b>e</b><b>r</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b>  should
+                     specify the same file.
+
+                     This option is not useful in  normal  operation,  because
+                     the SSL peer must already have the CA certificate for the
+                     peer  to  have  any confidence in the program’s identity.
+                     However, this offers a way  for  a  new  installation  to
+                     bootstrap the CA certificate on its first SSL connection.
+
+<b>C</b><b>O</b><b>N</b><b>F</b><b>I</b><b>G</b><b>U</b><b>R</b><b>A</b><b>T</b><b>I</b><b>O</b><b>N</b>
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b><b>-</b><b>v</b><b>t</b><b>e</b><b>p</b>  retrieves  its configuration information from both
+       the ovnsb and the vtep database. If  the  database  locations  are  not
+       given  from  command  line, the default is the <b>d</b><b>b</b><b>.</b><b>s</b><b>o</b><b>c</b><b>k</b> in local OVSDB’s
+       ’run’ directory. The database location must take one of  the  following
+       forms:
+
+              •      <b>s</b><b>s</b><b>l</b><b>:</b><u>h</u><u>o</u><u>s</u><u>t</u><b>:</b><u>p</u><u>o</u><u>r</u><u>t</u>
+
+                     The specified SSL <u>p</u><u>o</u><u>r</u><u>t</u> on the give <u>h</u><u>o</u><u>s</u><u>t</u>, which can either
+                     be  a  DNS  name (if built with unbound library) or an IP
+                     address (IPv4 or IPv6). If <u>h</u><u>o</u><u>s</u><u>t</u> is an IPv6 address,  then
+                     wrap <u>h</u><u>o</u><u>s</u><u>t</u> with square brackets, e.g.: <b>s</b><b>s</b><b>l</b><b>:</b><b>[</b><b>:</b><b>:</b><b>1</b><b>]</b><b>:</b><b>6</b><b>6</b><b>4</b><b>0</b>. The
+                     <b>-</b><b>-</b><b>p</b><b>r</b><b>i</b><b>v</b><b>a</b><b>t</b><b>e</b><b>-</b><b>k</b><b>e</b><b>y</b>,  <b>-</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>i</b><b>f</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b>  and either of <b>-</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b> or
+                     <b>-</b><b>-</b><b>b</b><b>o</b><b>o</b><b>t</b><b>s</b><b>t</b><b>r</b><b>a</b><b>p</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b> options are mandatory when this  form
+                     is used.
+
+              •      <b>t</b><b>c</b><b>p</b><b>:</b><u>h</u><u>o</u><u>s</u><u>t</u><b>:</b><u>p</u><u>o</u><u>r</u><u>t</u>
+
+                     Connect  to the given TCP <u>p</u><u>o</u><u>r</u><u>t</u> on <u>h</u><u>o</u><u>s</u><u>t</u>, where <u>h</u><u>o</u><u>s</u><u>t</u> can be
+                     a DNS name (if built with unbound library) or IP  address
+                     (IPv4  or  IPv6).  If  <u>h</u><u>o</u><u>s</u><u>t</u> is an IPv6 address, then wrap
+                     <u>h</u><u>o</u><u>s</u><u>t</u> with square brackets, e.g.: <b>t</b><b>c</b><b>p</b><b>:</b><b>[</b><b>:</b><b>:</b><b>1</b><b>]</b><b>:</b><b>6</b><b>6</b><b>4</b><b>0</b>.
+
+              •      <b>u</b><b>n</b><b>i</b><b>x</b><b>:</b><u>f</u><u>i</u><u>l</u><u>e</u>
+
+                     On POSIX, connect to the Unix domain server socket  named
+                     <u>f</u><u>i</u><u>l</u><u>e</u>.
+
+                     On  Windows,  connect to a localhost TCP port whose value
+                     is written in <u>f</u><u>i</u><u>l</u><u>e</u>.
+
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b><b>-</b><b>v</b><b>t</b><b>e</b><b>p</b> assumes it gets configuration information from  the
+       following keys in the <b>G</b><b>l</b><b>o</b><b>b</b><b>a</b><b>l</b> table of the connected <b>h</b><b>a</b><b>r</b><b>d</b><b>w</b><b>a</b><b>r</b><b>e</b><b>_</b><b>v</b><b>t</b><b>e</b><b>p</b> data‐
+       base:
+
+              <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>m</b><b>a</b><b>t</b><b>c</b><b>h</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b><b>-</b><b>v</b><b>e</b><b>r</b><b>s</b><b>i</b><b>o</b><b>n</b>
+                     The  boolean  flag indicates if <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b><b>-</b><b>v</b><b>t</b><b>e</b><b>p</b> needs
+                     to check <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> version. If this flag is set to  true
+                     and  the <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>’’<b>s</b> version (reported in the Southbound
+                     database) doesn’t match  with  the  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b><b>-</b><b>v</b><b>t</b><b>e</b><b>p</b>’’<b>s</b>
+                     internal version, then it will stop processing the south‐
+                     bound  and  connected <b>h</b><b>a</b><b>r</b><b>d</b><b>w</b><b>a</b><b>r</b><b>e</b><b>_</b><b>v</b><b>t</b><b>e</b><b>p</b> database changes. The
+                     default value is considered false if this option  is  not
+                     defined.
+
+              <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>r</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b><b>-</b><b>p</b><b>r</b><b>o</b><b>b</b><b>e</b><b>-</b><b>i</b><b>n</b><b>t</b><b>e</b><b>r</b><b>v</b><b>a</b><b>l</b>
+                     The  inactivity  probe  interval of the connection to the
+                     OVN Southbound database, in milliseconds. If the value is
+                     zero, it disables the connection keepalive feature.
+
+                     If the value is nonzero, then it  will  be  forced  to  a
+                     value of at least 1000 ms.
+
+OVN 23.06.3                   ovn-controller-vtep       <u>o</u><u>v</u><u>n</u><u>-</u><u>c</u><u>o</u><u>n</u><u>t</u><u>r</u><u>o</u><u>l</u><u>l</u><u>e</u><u>r</u><u>-</u><u>v</u><u>t</u><u>e</u><u>p</u>(8)
+</pre></body></html>
diff --git a/support/dist-docs-branch-23.06/ovn-controller-vtep.8.pdf b/support/dist-docs-branch-23.06/ovn-controller-vtep.8.pdf
new file mode 100644
index 0000000000000000000000000000000000000000..f8c420169912d8eb8bda38ae7ff4046b3d22c1c9
GIT binary patch
literal 25699
zcmce-1yo(jvNnplyIUYQ3wL*Scemi~!JXg)cXxLW1P|^KoZt?@A0*jl?<?p2cf9|N
zH`Z9ItF5}a`<vCp*Ap^%VNqHJI%XKMfurbL7&0;m8y8z611Aex8%`oS11EEUnIjRc
zJS`Eev66tOh~jH1WNZCeVPR-tW#Qy5ZQ^2L#q+9wh}Qm3J6Sn-0Tm^Y*Or0;%0l8q
zw2s0esuDsXJa)#Wt_~JXCa)!qPR6#*PCR_CqMWmnowJjug_X%$_J1`J3=0uGk*%R6
z3^zAG+Qi1p$()GwwL}r{s>R8~fe0XKW#D8YY+__<Y{JV6<LKmIVqgv9mfoN-;;=l7
zyn0A&YDP~+l#I=dsrz%OG8{$ArBYqCfD}NaPeDQgi~~e=Nq9wlKd{Ur2b6F1T~bj~
z90Zc-iQW7D>I@eeR8sJ9vTNj6L;U1hXNJOE!VkTjq{l|?OZ(Yc?uWxuN}p=&jFQh3
z64(-Xp)^fqx)0Ur&ycKs&hFjrnIhGO8W}pCQF@JI6STSPP!{Q)$ENRE!C_}VK7S!{
ziKrUs`f}5<#w!s(^NpzixWFFiGMR>Oyd4+NrV%6OhO#4pG^t(zy;Gz|H#CsDh>837
z7&r-S)pv#4Woerbc^vfOV_C(hnAUAx8JUeX2jLz$@<btfCcb$o+-ZOJb;<wRuJ-BG
zdB-`aYFjdBPcnscnA~CwK!e*+cv0>W$SZ%?=R%tISXii&2E~qAx<$<u6zr3B_=df}
zbzNf{d0J!OfDK`-B^OB(l8k*DGWuc#rb5gf@zz>SmA&(eI^vGzl^??NsB8U1kwlEd
za@Di<-Tvil|17iF1-dpOGUvXDO@^21Vs47$%w^bPJ`#HBp<4Tgm9IViLR7sIq*bf%
z&dXQLf#8?LdjiJmm)A=;TaCk@se#OsQkeymKF$xCPjtbXjX(N_DlDKvLw(#&KP<Ed
zal0eRe2gHkhm{5-g!veLOa1Bx0!6a5uZA9M;UI`XI!VEGx~A9h^t5?-u{pi-!X%JF
zLsuHXk?l?j+j=rojWK{#4pU=|tH>4%<Defp*fDl~{9!%7@vbx2gGLAqUx;TM>0l3K
zNiXS?57%7kop-QBNHI15_|(qy6Y(@;FtHNkw{tl<2<A5Aor(CTPjD5rX2^#|el?X#
zPt~2)w=yEqbAwUyu!(J`z-AU0+mRW$3;}1mEnO;$_{gG?LZ;YMof<%~ji??5a75;8
zKJ@$|dv=aV8lSFOdookOp-mD}t)y;qwNd<UcMeu<jprML4ykR~w~0(J7;<2=7Hz&s
z_yL<^(kL=tFC?1}MW#cIQIIlA`1d7b1kU%lry7J!XK{|x2JuCfU4>LeOHQ?ZB66$@
zaP3*q&k~X7{#iW1`?3XMXW3$wz+st(p5H<Ps|{Q2(Yovk-YJkR%Xx0C=gL1Ik7lhV
z5X=Ab2C2HN3=w4kOEOA?+ZaVB@(C`alZJ-<_Df2LA0*>PXXTr(KlfG>6e$s>`f{!3
zXAy5X7qq`}I&o7W<k<zkBSCO6<T9iXk)zS)S7=1b$}%`*004XRj+)-*u=k4vxOIv(
zj%vj9oL4#9SaJE%qAXKCYc0!Qc>kzlFr3(pvy^abKs9+H^-zo%Kjn)nijtm|pOINz
z8A9VA)F>wv^coi61lcDVd;(izhM8h-1jF6`((iYaaV74nMpJ_Q;L)u-8Q+RBCXWai
zM&>)L6R}I&j8;sl>y;|x>e?zyLYr)650l{lfp5-Vi6AuzU*xN=%0aX~d|yHXaqiJd
zOpn0Vk|qNW3ch}ULVkpKp@`&4L|TG%^^(h%!U(b7bo?Y|OdC9&G9+F|8<2m!mCqox
z^v%P>OJvCuqm=?)(R2MWlERz7L||A)d)elOv%qiU+e_}Fsi3b?w`nSuE8{*w%q(qR
z%ku3+oq-a4e18q)R3q-(QY7h|05t83JXHG94pPhxyB+aJF_(lrb#4C05e7nE{KI{v
zpZOXAT2w1|zb+`BtU%V-{Zh3J7flN8=`pT3JIZ?$e2^d5Zc8fBx!VICb+PI2C%iP~
zM`4w^_~JZxx6u~x9T~IoaPhGP)wOOl;a9B+=;*aEret7~-x$^6`(d5IL?}NmDh^*<
zVN#wPr`gNzgc9S@3$Z(B0lDYG0DbYVYIXIX;Ftsz5lDiVT^t+vWbYgv;v6-y+*Y|@
zD9Heyj56_oZ4HHQ1p_jSt-2i0xLG`Rj7z6wM-pw$pHf0=k<Z-6?Has|Gpj^%4Zxs<
zSE9jEa@mny<6p5JOQ%_kDQGla^^@ErP0l~3K)LLeOm##uh8AZX<}P-6L{0MiqPnS&
zgdCET9@wZ~B6-(PM4}#3sw*KA;$TO{If&Fu{!N06KS3>7_)K-*3T8&QP6B=iDQBew
zEQtsMUYJ{c>l*REkJ%2Y65BwN*MnsjN2`jTGbJ6n-PJjIs!I(!%B@?`#+-DR1e7n5
z5T?rI8U&)KIxf4^-mB!Mpgce~!E+k|8p%77C79eJ^Tz?f*ElT&jL<p{A}xh%C&wqz
z3@r?qX~|rWC4S&B2a5t4h@fo@R-g~3xP#{9!H5Y9gT)>b=lWyxpWW-adA~OvPax{l
zc=}OgzZCIpL8k-L>^**<P2I<!fp;60vvJsb4|cDCk}|vbP`ni>%r)9%`o6qJEFFfJ
z*m8#aFxNGa4o$O;8MHnLlp<?O1JtSccqiDyns&1w0ozz^&hTsVVHRg-9FIR#(OQ_T
z_AsbYWKX~U7dPO9;|j}bvt&;p7AnyR+>_@V^p0J^^iK{0d<yx7e#yu%^z`=LArph{
zEwLMRmqn3oFz*_1iMk@D{ceVze6RB~H5lLw+i;Nrj%lZ!C@W8wD!i<QMN-oR2C%PV
z)x&Voo%CaT4(<)+xOTv%F_q5y3{c5I%*&}Bfng;2(+0F7%0um`<$}TY?7K_m5$LMj
z?lAjHtc5)Q^liX1%7qm@-Cezm;C9y!C{!JK#|HI5<XDJgXj4$(8LftpOtU%z7_6nl
zq-mfftuAc13;7`#6Nod-R)&z=U|B-lX8wYEP^@g6g$r93IbSEF;!=MslnkfrTBx6T
zW{4;dOHe5O^qrDWe7*q8m%1O+g6Q`j;G91o3>Gy>5Zr-vQ)Dl)`mFvutLdsJgXsos
zrX2S4PK|{+``julFJxi<4e!8^sR13!u}9FBPyDNL6x2^tMdHMuf@*xLiiE^VvhbN1
zrW>#qOCoBIXb+YiYI%31Yn0^aP~eKAa2x))hDy+Oy^M3LgURarxaj*yY2JgVVU|GP
zv`}7UJ*pTOm~?&k!$rNC<RA4;eLr%o2Zoeo$5De@&7#?i)=N!;*e^Oir+MqiwfOe-
z8Se>esYJ_a?g{*8&Q;y?8uj-g9gn7T%GCwlyKFL$#vdnohv4nU*^!5wKt?pbm|tf=
zr)O?SX;;^Q(tJZI#o#S=63sc|lyL4|s#{l(X$m+nn4L<b5N#HyI~i;Y%EwSqG4eTs
zaGJTWcF+Rr|4}O{fw0(bEhckzpY|;AfSOzrH|jtj$>dI0ZF8G8Jh(-<ecPdkr&w0P
zp<a5V7H)@a<ELhwjja^_-09rxcY;;)-hxO@au$IfS@>qjLzzAdw;AMXeKQ*#(L2rC
zz00s;NGdKB*8xD;5$TJ98R9X&M|rJMQdfR$O;s6-_9|(AjnIju*K+cCY_35gcvOIu
zOHb^Wj{D6H``5gsH1&N)<zOeO?wZ7~v0=3if&GA#L&_g6u12i4-rEi+6MB^g_8hWJ
zel!fO>A`uU2M6nccrHdf5dH%x)Xv@By>j;4j3qfgA)XH#<sFV?ofHqauz86;E~-b!
zkcS@tNji}5%ZqKFSO$|PQRyi9nWBD+T>g*|f|Y8C$7L7d!O1}of9wpRyn5s|e8vl?
z8!*!Z{&LsfTjcTn142F?w0Qp5f~@22N~3$Ju#zDvFVzQ(zLY5iVlhhd3&m)3!_krw
zYVT-vcXXI^&U%QCX}Yepz9B0ZnO01`n=6LhW>ZG#qXeN7r=pS|y%QKqT$$2s(;3lB
zzVioP+4%!~^av`tii1Rv`~B`qZ>B#_vVm5=K-GV?N}rp#p?~xkUMV!(3rM2mh%RJT
zT54MvYHB#M9~IR}FqJoMSrYONkg^|p*jeP;*hAa`_$is#82<^YU!}KD{4D@~OBvZY
zm|*^tG5ps!o#B5Ks8?u6IW7+(cV4QETK7;nVqAh{FITcHDpJ+pMI7c!t}TK1<%A}K
znFA%vwd|HYqCE{bjROUQP-w|2a*C5cJe^c^5%`c0n~?Tpow&NF2X4EZTl5?i<v%3i
z4@MvM!^l<C_1~V7cvY{_tw==*rwc2_T^k@PyN+D*@k6Cc6(dQ|Z1i#Jt$^)Nl?^xQ
zN{R>-#$_*^%5-e!JlHzVr*2)$UuW@qO@+-PN2#E20Y_4n29g{;h@26J^3e>TTN(-~
z4JB})E)|`AkLk+ap<La%WD@;=)YrzQYgsj8<hjvRwR9L+{~iiE&%738X@6yNfB}As
z{zx_?A;7fy`Tas_D=}q@9-}<E19pDaP-E#v-jsS!x~LngmT>rm?4tL^s{TpKL%Y?I
zQ<vOwE|r8<tc*&7j8>7@)CrvX6X=liDh8s)5)KG?cq1{Q^K{(dAs^~lC-dU4M~pd+
z<<MZbJvGLTg4e|p*Vk^(R0_E6a6dlkLW?88pZ5o2gn*CFJFAEz!c(MiH0pY~9W}CW
z?lmB1)}gY1k8z28X4{h{f&FyY(Pj=vA<DtIo@B)`T9}1Zpg|Wze)d_9To2;>B>77H
zMtVR3N|9Ef3F7KmR6C03{Po@0A<Ig~AleBrMF9_<T56C`u5ER(l~yHR8(knME0a%$
zO@*cyn;<9O#T8k%O5h3&?aZMg2`3Agx1I$m4-RSoRb3Sgbq<%?6lX5Q)LIT%GuUUG
z2U4**XHH|8jAa0tgm@T+bBhrv+!9qnK$qG8l9$7p8MvP5K@);2YV|QoI4PMow3Im9
z98}oSN!!X7$=7#dY*Jw?S$)9PrAJ#d4Iq}{CA<wH7WiviSV+*bxwgT#^L$S~bxzY8
zCFF{ao@_dCcT_C!Z>naCrg$}hGkwo_R|Irt-hU{&uZy=ZqMRX$tt9U;>=1?&+fx)q
zApcRz`otbLs4m=aBAjYT!-&jN%8$y=Vr@OsGyygnC!~x*01T4Q6p9+M+slF#pw7rs
zZ**3raV1h!ZgGQok}@DJu(j}RvC?vBv5iRiFn_%N$QsyuFP4^F)%n&XYcTOgpXah5
zj=e!%1H?dT-cUGX{5v=qGBIR!Ts}Yw8MCY~;&B1|bUC!XZuM)tgBn-|4UFxlo8k_j
z5W}sjX_Y|JU5#d7kIl6W40WC8q^`vunu<#Xp(z{s3RL=XwVRr--xGr<P(zkR_A{n0
z2SygWevAk2XbRh+8;C=nAH*#ZnJY2vz<AkSsp#4aE0Uc?(%~*C-(5GY5P0ab?J21b
zLf3VO2_j9v2wwQ9bf>2nFmq11_aTeybH)jaIu^wck91PW3OXkJUYvmgcOv|=<*tCx
z@IpTf5BXRTsv$Nzgt`8n0V&9|Kd+GOz6d0ekV-Ja;AUQJXG^nwm##Uj(7Xk7IAM`I
zaoJg>9G6DPV2Ck-PK*Jvn71$iVRQq436>qDsI98@YK8s7*wz5qV^$zu`aQQ07ecy$
zvKG@d3@AEPl~3~4^g5MH;!y_w1Zz;*4?#PueS$5lC}%zeOGWEFd0>2oEBs=qimxSf
z*g2KY@+y2$$)6sGVHmkFIRNlj0Y7>&iK}XNRR#=tH;^QelZJRO^x6Vig@FP!jC73c
z11nCXPG^$SIrsFyBCK7~zmVLtWnsR2R6pvA)>oidM(Ft<^;L7*&Wv8>iyNu~h{a0K
z(U3MFdUJNz&7Iqm%Pv**8nKpHtg4?rVnbb1#=S*)y95AK-kcZEGh-U8<_jKhZYE$t
z52#NxRsiq0)tHe%!<GM>KAb3|i%|dGcyfX&l4I8e!nF(9DTlqs`;Kg8$9q@4%qZi#
zZ)fBO{*pcPZc~2|4x|x)0KkSv&tJD#gZChv^5PQ`wA~m}e)sh|#2%jWxJ>TE{?od~
z&2)#2oErl^p>CBIulmp0iQC7s*E`?!oTWaUmg(_x50weQ9Mv*huc9n>e@jnQ7abN1
z^`lL1kMLy^vb--xmj9N1$9bCmRs1YP<D(V~-b*zlx(P3d>sa5+jDnstg+`Z;R5cGU
z7`1+~tJK<Y+5WR}jLY|Vk!73}*<FkQ2Iirr<VPnntuUxL84k(Sk6o=I{A&<V7Srhn
zg?<?cE2&jBnxKTD*&Fh+Pl-U=<L9JOF?_PFJy1y^<CxOpr$RSi?6!9J+c5cLBota7
zT0p5*XdZ>#dQp-KEKc^vA1t@%$V9o|akYT7{G~w4iS$Dh<G;dju6;)bQC?S033mGW
zCAV7Y&}%5atndNNFnU|#tozaB`NSVSuR>3q&Xh_Oy0UjGwIYW8(KOysfjBKJQNDVb
zSJ0())d)JVWrXk);zE@zrvA>f2vQT*VjmMY8_E+@|Mv6>LopL`&^DW-aUAWPQ0jr$
z)Qdw<cCep?^qT&-30J(gmuL-!?^e3E0275vPV&t6P_7>OPr~EyqFO^vUd!vwc%ne7
zIKA(={GD2yg$IMnfsq^+R6#MET;ayS<$RZqq<B}{$UC+CFX(6NCw`8krwG9m^iQhc
zfwbWt*MI66EQdG5F82x2TB|HmYIAhN_~0-b1&bB=?%+T*7zh@l&`vkyEA0h{8jgI4
z?=WJ+Dgi_i@xV4A>|E6IULII-MOQ~RkuHv3y6ZX4tfuq>YznUL<J^o%D<slDXHZA>
zhtD?Mn1j+co>TR+HF@vpS90yq?J&O?>6q}tA)V8Qk0FWB`0oJ)ibP(7@_-|e>46bZ
zeR{-C***y#*7G)Qt8Zt4Cp$b3LLQZlj&_rq3CdWu1o7}U5a$laI#RGw7X8%Z1d6!w
zAsmmwNVYMvCEv3;=SS)nYh*VJ+aZTb`At)LBWCK7@=usK`0w$6=@3S9{QFOS<f6l3
zE8||8GjX-t8fz+k?6<SwgENgc?AMPs9io`m<Y;2Z7D+L+Hn;;ZJ*+h6L#6PC=e39(
zge&)z9uRkBip<h(IW+m?ofiy|_*8LUj?GX}Rjq*7-}zzmWR@~x1v3iR#619RVb#H(
zBQxu9dS;fo{J7oR?wQ5$uyu^jZz0vF6;K%SB{BO;VqTj9I34{JyRp4K`g?1+hJ7e3
zxKZPFYYs<9T&{~*Tus%2I_IfKTv7sOh<?+s#Uqwb=Oq*@!|oY%tl;g5i8UX!t()QW
z4>AQTX9rI|CFLV4pZ(dq;Iw01!+}kVSJ~cy%#nopx7mI|!g+GGz4Z=$zyT$oMnIp;
zBRLsX*fd_KVhvTf3Ax^^I=dtcsc5<VFR|XQAnsSN$IQ(BSFp$YHz%v?Zf63JH!w2+
z$e0*g7zo<B5oyuCR<klN60vbG>c9XLZJk~jS|a+_Rt_dMPDD&^^zCc0iKDHvgOQ2j
zE3qr@U~8mg;-m$5WvGb&$|i13ul+=AUmG+0ZvD#a0)$@kul*f~-Xcv!nAf7eLeKvn
z&0+g%?7z+V75V<to;Q<!GuE$jd0if&U+d#Y1dy^Yb|lh*c{5iLhT(UjL-eZ2`E{m@
z|D4gkH2hH@WZ-0AWo!1Arawz4W8!3B{8~fA_*>UMmgH|60E!F@FboWDV*(U8U^spY
zY%srO@{b;G`QKLmZ+pDy{L@3wz|rJwzW_qgni3kS)XEmtCXTd%wpPZ!wo%x`(a6EV
z&dJt+=oJ=kmi&UvTaVX$ws3HC5;8Y%AYx(!NE`f-8Q7QrY8J*$=8jr0j4W@6`uoGg
z^ftY}Kfmf>Sm^1A-o9_2-|1gDdZNF2u(18AhoL88V|+8@?f31=%F6bNSOy|CHul$2
zCib^g`Ym%XGyiVI#t!q=;&&ew7S>;VertKt`CIxu&hOvX(O<`Tv*E2Z^Q)e}(!Wa?
ze~tH6{wA@%&g)Hn>-m<_|LXN-&6~zQHNQssrS;ETf6w@BtpEP=ThnXZzish<((r08
z8~y7ODPr?_%VJ?;M#T6VPD;*(PH&I@+h#KS4W(bTe}M68pa1Fyc!SBmGHMn!0yd5o
z|H=znn3|frdWct-pasLk0kC(reZAnZFf(_0eOBlJrWP=7n6S36ady=Cd$6~i`p+O#
zm6H@u6#4@~MO$kFoBx8sw<-UBfWo(Z`MulpL~kg3lm8<c|Jtd4roZ?9wa2gB|9kcS
zg~V4h{*r&;?Kif5kMdV3`zt2i<k#;Xr2IzNFAV>|^k2w*)Bn5oA4^|x@C%Kv`1xo0
zR{NKge{lKQ;!S#c68_Zu>nVF{{f5l9`oDU;S@f6uruomz{)IfI|MVQc)&D~EFRcGx
z;ggm5Kj8DXllgb}e5?Kc7N1NE07GXhE0e#V3NW?$Z_)Y>C;Km#DXS<cuPOQmtrD+(
z-oofV!}ZN6{TsA0v;4O{^B+k3*Dn0MAAclPwzs47|7P8P>Hf>h{U<#A+TA}0`i-<-
zSo#|yzp(V%+x~^5-|gOd{s;X04>rEx?Jq0-NPlMcpK||$_j_H3|A3xf$1C99q30h*
z>;GHt_CNTuU+3dL!TEMb{(XM_LWZn?waLFZX$4;cu-EvDmXV&7h~w1}v%ZF4Z&&26
zH~Y*m00Bp%w+QUD@HLz=uoE|V^RB<MZ$rG*z4e3v{Dz@`jhWSJ;06Owax$@2eT~J~
zVE{4~j*hQKz^|kE&DFgsdOf;dgEtC*06+*J3=jc`0>l6k04abBKo%eekOwFNlmN;A
z6@Ui70AL6(bTBabVB%zDV(Rpl{L9G$i~vTqR<<?(V}J?3#NOG!>eb}~OkZO}fEmCX
zU;+35umV{B_WuAIfGxn*#spvouzNisY>oeMSO6RVjsQmsH-Mv^fsqNo3E&KHwlOww
za5S=YFafv#TmfzXcYue9gDvH+#e91kfr*IW*CY1#vGObbXB&RMY4Fb%4PIB|pGTk2
zUvDNbvvV->^8V``gbX!zWu?7FK883)ngptI3gtBYGXILkM$LxCZ<k=~o852*1gOEn
zg1&*2cY@+j2I9U@(AiK_B-y_GjZ3_fR25&YZyGupjvJPiT@PnF+Yq1JY&!t@r-xdH
zoegUq5qwbOgb!YxFFp@VAJfESGKJ6GxNp6oDNz=4uPufcD*5zwOwXGa<C{PKgc5sd
zHFqk*CBMjyfh2U7w#noPINvOk3qS?<I#IEt3}|&a>m|NC^Yp;#dRlJ;*E<C<6Vvfd
z-&XY7(p^U>{^Wi5>Y68<g!K7<E6ZyziL|JoNL-N#6h$$&*0|GiN|8j#TL<v+6!3y@
z{Q@hiFtdE9IE`Q}{=HeERilxN>4TPw>^6dX0*Qy3v@a<=1)Yyv@0z#7L%fn|<;5X)
zE}}P2dZ5m(lmbA>PZ_BpE>-Hda9827q$7c_A^M`|MhUW5twjHTs3B8R96y&;KBOdS
z=5Xfy0lXzsL$XKwlB9KBlKgT>!OZfEtR;3s1WdN60!es|X31?ankCCMNJCPpsJj9U
zOZ=w7i1=N}kTTvix-H!}r^PVoaX#T)&tv7#^!v1xKpW2$kJU^V5b&mbuzP5wA@0oF
z)Qf$`vdp%1-f5j(-lLk)t&Pi&te5ybl<`Brs8^2ZL4Jv?+>=4-X}!wy_H_O9efy24
zMSHp~k6;eH`T}!C#tA&c_@ugVh>Tgwn9JIa_vE;rU=D7+Fw<<Mc1(k*bGqo(Qt+LI
zE{VZx$Z}Sbl;JdFFG-3`L(bXQ4x%`9s-Z^L$|p(USJ6(EIJt9*!rcC-VWiL}6xcV?
zKG+@75p=Qn8b#VRkB<}p)yEVB*)om5+Nf<Z>&hfA@SX2$gUc_+LZF6Z<F3uED)NMy
zvFsWd?xe^W8OOOfI98x0;8U6W;siFt5i_H*suoS;nXXcNUZMM3$^BJ_p|;>5Y3WKI
zqXT=^&GzucQj5wlH~G(=wDo}y7`mYTY0UOWvn@4(F>u@D^DWe~AdV`Yo^ti9QC*9b
z5ViGrM}Jqyop!lr3!yI)D(7zAqD4#Y69^+e^ZfFt)zj(FS7>T1<f(=g$V`OwdDnKL
zc=$C;XA(a|@w$%{uoMSd)TWMyrF*cEKg&wGT54_IfGzlSoqzSIcd-`OXcNho=i}OU
zrG}+lYJ)q<HvnkYv9hVU;&=~g?SSSfak>Rmhw*VDV$=$>#Tkd}l-z~&TbSc6xl=h)
zTq~~a{a^r{oYzNjySk+y_0H7|d)Mhmy9K7w%8y+{H!5nGpcZSgxW%sR4aUF@2I!8k
zBmES7=SI*6<b8>DMi>Dt$c{pyLg+BA^PXarjDi;QC8gJxJ=(R_Z>J?{2^nH{0+d*G
z*1gYn8B?x@&}*Kz_c6P9balwk;AxQEvOfs~Z79;hLMLAobyKh+2;+U#CWN}OhDljT
z0~^acGqLF)a;Vv6$-Y1vs#028!j=ecKhN>@lknOHzw5_VY<d!3<7BA?6nF)7X{-{o
zEo#LcJBd6+!rn;qsf~RNPm%1MPW`lF7BgEN=@l=@8652<0$QO6hotvGWPt=jE1#0-
zRgT>+{MqEWAT!#Fz=W5JlRFgVlC=m%BZn-G{n{Vl`y&$`!cT&+nwSMH=F;n%XC@Y&
zTFQ{?bQG4UgHdqYerQX>n<itp#SqII3P|G>Ucpi9S1y$jtMexNdZ&|+2Yy;bc5@I2
zJUv}tajB}((bj_lMPTigmoLLL)o0_GnOiofq#CZkU@6p^r48kno|<ze&Uv>TLuw=y
zs?L6azDAqpDOq}X9lHgOq@j+aAS}5k&JG_K8Sj%7tW&~w_Q0$^D$!*UGjGmkNEH2?
zb|Y<t-_n3eAPx>g6B>OhG*0*QjF^QN#Yb!zr&=_BY>c<PJ3lz)eZkp+j^93)C2)nw
z%N+<%PyQ@|NgW}jT#QvR;us|{n}VJas?lyee__2RNGKL6rl?s!5f&yf1htIj@w{xM
zfa5bjS!~0YQW}Gt(vUQ@b%zQ2>D_M6*(~2jy8Y`zWLu8RUEvIAv9!9fh618C2`8E&
zO#^r{ZZX^){Jb^%cBX3RV10&<^=PdckC-Lvas_j}7agM`S3NW36<qIdJyAtA2u;3=
zt@rRB(OdZLJ$RzWt-Tn53U5(N0XY)iK+AusJTyd_+G#5LV57#EX~*~C__HC}6}Hc-
zxmTn%LO)R%>CDAx;l^9~9;s8z_B4v1Wzu`I%#p;x`4cG{0QW8*ea1CnBR~u+TgrVN
zv9<fQ^*L=OV~^8wG4$e5QwIQQ#I7ugm^8b6_yyZ5RaSbGQd~qjVd}XP%com_@jks!
z@wj(Y9MFRGcs)V6+)tf*>{K<YVBZmkOwg_=u|2bwLeheaVFyCqR!LGM>l(JPUH_~Y
zf2_)})hCyKWo9zqllM~~$iW+W<7>RVO1-1j5x1;>!<VWdu#Tlv5>lZ%6L*|Di1yV7
z9;o>RXY}GJNDbP=Zw{cPGile6pt#0PjwvOh`K;NnK8@yQ-2rQ~AnL<+tT!oR#}J>*
zW%>x<UHUW0P}3<Z=CY;p6(!=-_WCVqmF>Yh$fCjzFFvHk5BghS7=88=Rvr3LSKy(u
z#p<om@-=(Wf8K4RvY#hGkESNql2F;U#Hx&FAfK_dAV0U+8TV&2&)zXoH#62VE`iGj
zjBeZ&?nCUlmPCp@VSn<Dbb3N=fj~X~&!#Y9%?Tf@3=A|hQYyjjw$W1#`{l(x)|o<i
z8aA;&&Wmyy@3k)DWjK>HP^F1mQ!){wI+oA6Xp(yUtYPBeZ_oUCVjr?ogS|n?0Zri#
z-Hhb&bOHX*k0>$=nYJBJjM=c<`i-G?fc+<9T4s9uYYZsq^5HfyGxH;l=yuULwy~17
zP~WC;!97UcaCntn<{A<hq%7A*M${RP{431<LPiiVo3QsB*hTBgw&J8K^_sRSF{gy$
z79`r^oVu9lWlP%!KVN;S%x+#oYXlr#zE(yx{vPviq^0tDfU-MT*b+*<;Fi&yC+6eU
zRNvM%0_(iGvVwBdlfcOnRy$7G@$9iEA*7F-C}IMZlek|(kl1uwctoOuiHl2GY0gZ7
zH)9ucih^}T$tCtXO-bp38?@w4i0(yS3&~3_rwpg!cJ2-~{TYLj%;%^eWeUB>YDu(4
zS}I{70*16TW@A)8TMyNlx@#qva!h4=so2LI+MT<-q;Kzf192TyA_VRj+ssGb*Y2^X
zSbC!|-P8v^Z|1?q7A0cFBL3v|0;%$MyN*u&$j-~ANfM0X<r@s@7HIv$y55;+*Ybh&
zD5{^5%SE`b2{DF2E%+V4@%ES-xB0SV^koqkT(d#575wya4XDjwO$;hU0&+%~6P~r>
z_H?nTt-2dSWPxwJg5B;ahFK!mYX-+Lks$F9-mpW#Rv3NsT-vjp^qmmOREAT_rJM6K
z!(@%A=WU5twQt&%&Ud4ldR#2V_ZK#HymSGKA>*_V1h}{<v6w;01rMD;i*m9Eh>PW^
zAo0mWVe<LU^4_YLh8~)DW>q%$>i%XAV?B;FKOey9kJrSGT`NO*KCZI&)aZFMv$_Sm
z9FmZ?6^6S-EW=^)fBs%lhFcU9`<2*eh&@os<;(k$byW#(0uqu~(L)gByE2_j;hlUn
zoE?`{{9vj49`>8=3KbyHlkclvrR!aysXk^zIDU^5x>m@~NV`M^j&Mrj1CA(OC7NFw
z3C6y#R6zW)+AG0$?@>|^Ds9ys@Tob*5SEODdmmqq8?oyu1iVZ8pjzh$)3yjO!x^O(
z)_L4+>4NIA{)Ml)xcSVylZu?FjR=+jGN15^lfD*T=hP%!{7lQEe{ZF;$>DW<^zww*
zW4<-SHaqx-(QwgK+Tb)f)WuaUmv0qOZ2<ny9}X+kVprnxuZ~GPS(gUashOW~o4&yh
zNPxR2SK%#ui7c3E&DNe39b>0&B07VkvEH-4G{C`iW*0&BGnBU!x}ofskP)L~5E2zQ
z&q{cb(2+0`I`Wi|Rr>s}b?5f1R@E~DfLtcj!8D>SH-KNCoZtz)k7dchyTm4YiiUO#
zmu~JtbsXqmZVl?MSs;8cfIc_zS%_vQxJY~K;|JUSHgA`#{&}!B|HDsryns9qdPJt=
zHE?dIkZl8f{cyKltTWkjpZ5@!WaT^Y4qk_7<)u@~7N_(`{9kCi%|!H`J|BB$W%Dt1
z(>$VeQTMv)h&IY<boyb#W;?fC)b>h_$mcZjkNAFic(<&rH+}9b#$M>ME5*ntQk&kF
z8x?BrtS}>CvmMvET6WxayH2*5Z`SX_pwyf=va4$f*ubtoYo_HML*s#M1AK3!?|eTL
z``#vwwe)`Hv_NbiJAk58z@9c9Idio{Vl>pl{&p4Y%-^*O|NgLJwZm~(WchmJO7flM
zrG+im+>;P^txIU&XFdy#NzZGMnT(Gl6;a4OogPO(4+2s)f<HRpUdVFBya%YtmQ(wC
zgT6ajHg+jo+#iNFzY{|%BH*!P-#T~*1Me%KdWUM1GTy+o;O4Ch$~oZc<MqOhlvc;3
z4wm7T71^21iXMM$RDSVMi;s$m7Gvb+iC^-^Mz2U)_`YI4U!YphxihgZ8RZ})kwMPv
zXszvhHcoT(4S2Q<&Uu$$2rp%B1MGNBl7|<=^DXNWl}ebEb1|x(>-iFdY9DNo-E9kq
zaXubE#QN9ZugK9bs;I-ikMB2iBH0aLLI#}5e<d}EVEXhPtzr@xFwIMM<GKM~CASXG
z{e3nIvFAu1l}cH4rr%CUr{%_C^x%8CY3%#*7}D&VA)++FP;6vELhQNNh57l#$@$L{
z*c()28>bP+4sB|L#QF@)<7k!Z+uAs=l$7=FJDSA>@YFhq)0i(i?k7l<MrpV``z>j-
zIqOkZZbNNJy)pL(`60bn2@&-0ofbGKkPEVg4%zRq<HINI{Yv_+8e^fAbmo+q-L9k+
z2<^+B`96Z`x_&va;iLTO)1>BN#xdzTKATyYw&%HBQzVjc-l+WG@^$BoT(o>>Cwwqe
zM^!<-qGP}g0Y{etAEsj9WYpddLvZ!04@$y@eAAY{haF)nkP>w=17wAcl6><@fmPlW
zn9f>_P<6&_N(2?ge75)~S~^7ufF(&K0Xtj)nu<ml4Q+kjt(C0_7;^YWJZG68A(L#%
z4{i6_Zz`gY_=*~qQ`byH*=hKEo0z!yg<kpR0(b8H7L}+}kUGASaF&eC>&ds{UG>ax
zY1s1@Z0uCkm(TD?-K)IMKTgb~_B!H>7R{fU-R@3TBUkr=Kf=|CoYCs|R8`)LTtElV
zD{5Czk%x2^O!^yzypVYjJ*RH6wg&KiIN)*YEZaf+K@8et{zUHFxKRon-dyVP#l#hw
zDNeppXMW7?`xXyltB@LCUh1n-97S#XS0$2}&dX)impfsA%)&~{BqDyfupH~XW0&=n
zry-*&9$Eq10GCTHJ_U^q${-Zv!2CmIT<UjgwvEc;!a)IY<?Z>Lx~(UZT9z4Are1*c
zfK?)V-8W4pP#yfjXa&lx;r9ng`b1+3EIte7AIck;XXE2T_iKm!zebCeCDhO<<rIb$
zsr69h7L~c_^-%Fn4)j|U3!`{!J6XN(&+k72OQ?lniN23FGYF9zK)7;s*7@PebGdEv
z_{62(xn-ZRLVc9%16_ovZ+g)OiIT{LAmxVS75{>2M?=p>=M#Ry^iJW)F9anX0iPq&
zYt3BPBYrR&Ahr`)!dj*h7dY6^Q`t;pF9HtzfFHKoN~}A<pt;u5cAkJp7+GmtbHHcg
zU%I6ukgsb!c}t(C3&!X;i_XJDlf1r{&I`qHjtl07;WmoqpgquByoe-V$NKciR7;{T
zGvytBmvVY-;~XoCiYtle&k<;`PQ@bX>BKN8*x?HW;P{!i+1c3xc5n9)%2BN*HDpZc
z@K372mfwwU0`<P$g14Ua`cI%JjwnLn%Q4H#F`qpY)t?zeeA7-iCwY#UlTsf3IR(A{
zAVybxMEOFh+wE_8^<I?>0haDCGy>N6Ibd5*nMH7*U8>ZaXyNQzi(SgixShRBnwqGa
zHl<GxJ~s8*QEhc;qe2#ICg_^~;u!`ZTpsS?vALGpOmM!pM#KaRgcu)*;T|ZH4{0SS
zoS-flQv&)bUWAE4jA<fg$Lr-uba{2iwwk^l78)~+RWmoc`S+kF;VlSvC)U_lptC(k
zV1yf)j^5zV$Q5=;qj$S4CKD>bl0qWxW&Ii&5m;u<s-bR?1=rMd=+F5=?6=VI@JfE;
z9TvABT%%vAx~Z9hqQeH5>Q)L}_p@ggV5=5t>Fsh5T|jv<r6i#*^-t)}z<Wd3Eg_Pi
z_(3pNwObl{KW37D$(V<TfS!ZB(<YI?d>C{!t$_a;uLij>1oc4gwhD@3i6HHLrly#%
zH~)eR8&@l-LYd37etZ3y{sk-m_FUse^wOst%yYYlAPK*L86!N}1#L|faZ+V^M>20w
zS<8TI3m-1?LX@r+qPN2T(;ol!n!(i>P;CE}d-y#-jrNPh+vV+le5;V*jj;XSFrWYC
zdgou%=PP%|!Ss5k$IkxWP@n9t9Ogf$&$sN~)F;Dh?%z<K9RCOEQ}7S@DgKN4l>Qg_
z`J4Jw1*iek|7ZI1_x-`YSWqKdYionwT<9A~3o!k~hFZ9oyk0H*&5D}4+nJl#{Cjfr
z?Z*8V(`xr7{pMN!Vod)h&eX}=!Q_=Yb+vtEPya=k{#VlU*JbiQNYj5@#{KU}Q&whH
zwtteQ8W!qG^Q~(P)wgq{D)e!oGDq2s&aa%QrdYZ{th+o?f_o+?DXAZ6OgU*_Oc)UK
zC3o~@AS(M@j;wjbjI7vlrjoVi=~8-s%lK+e=HANQ+T|hdHsp||#+TcU?+=~d5kMW2
z{TZ+#_tz%RH%dmhQMZIpk52gtwXtU&DQCE(eNmn}eOAU|H)RL9o!%#($a8#r)+M(b
zv2r`GPG*30)Tf_2zGd?Mv9*6Y8Am4NO8VZUKv+z)fL6W3VKx=qKm&FylEw~JF6xuC
zdUfbC`8#ep21;IT;$wX$FLjRt{~>Qow_vftfuO?2@$u(|r59UoxG#;iQfJ>Yo8Jx5
zx|>N_E@fVIV5j6f+!>r`3?Le3v19pA^uA-HS{mV+Bmc&>c3Rg@*yxRxuUX35YIQfP
zQg+FwQFk*9e#mgdbA;3g>`8dp&D)J&1j`_2g}fW&Zp6DFmJGOI*bTWeTCOQj2WkY>
z3I;c{S#Y3%S`Mq|b}^u?SzVyALTtob4yovwGdx)+S^&1fcR|vMZZRZfMK2pDG)Sv<
zvw}$Swf<^qXlqo*Kt75s^<`I|#)@v&pMf5sG2k28u5XYLB6gTkdQqTs%gB|nuATah
z{OOPNVizxe!fwyAE|j%b4#1M?gXL;{$#i=WkK2but+}R5>Dw$HO9-=IgRizs(On(8
z$4MHa8rO9`X|$P7Y1544DVI2V#AcS?N;$9{VRl#2nZ8Zco{Y+*d`Meny3HKH`Aqs5
z`7`DbsSC9k@<2Dkcp4}R)4)4l`1@PM(<Q8}PF2-vQNvIV-<cU1m-nA!r9*G>L~_%K
zz(Wv0D}?0>OD6LvXH(q+>`LF&uXjjEOSBpjZTlu1dFhc2g^=|L(=k^Q0pk*d;ozAm
z26c<p&@p!61lSmjhPTiU`$L*LjAjP}TKDb8s}!p8XO@I5j|go98fH<DSI3}rqhgTA
zQ?pWz$IwT(VLMnXPc|PtwYA7Wl`KUQ(%zuj)k0^8RxyIq3IL$CiP3YekoF+Z;^NtG
zvIO-8ydRA)hPSpb(M%L$Ai(0ve~NF1HXlvI28=5`@S{U6(2!M>LZB~)(_Mt61)=+Q
zkq{VXvsl%`+?D&N>8|VXf7doA;|{Nt;%BK=x8#D{&^i;kkuw)a`{+)CWXG@iiBwYq
zs82GM2gs}<(6*-A&I-%@iwCPV*zKy971Juk<|v*XFlWg;EBTL~IKz4$A)qn$Fn6}-
z${AV|a+f4!-H?VWT5{oou1LP4<gM$Pm}!Yc9FwxcL)3a2;%*(rOFs+;k0u7EN>1IW
zSSJ?b*%COZvqUyJC{QDSPTrR5b!V3g@pE=Hr>hdW=o6d`vD<UgvQpE01Q3A+-D40O
z+50XAmX;PbYqMk<a&`GjkIB5uUUt8KnIMyl`<9gNr@7i~{s^4(+#QH>fCbx9uIb-w
z{v6Ri0nPdJ2)QkA6aLv80l*f^!deT~5pcH7qa`Oib7g#n65?>;4;adVs9N2cx<yBj
z@4BWpC!!x<7>-VaoW^Ie(-8ecfw~RsCz=gUgGj*v!s>f%583WY0Hp^!frf$~fX7S-
zAuyl^nWej7s$%83jM_zDx8nEtSpD;DN;4sl6Vb*RW=tR~0MR7<$3|nHCQ8M_QIXg=
zz3!CYSo`Lc9b6%wt3B%n1#Z}3>az-}SONEdz%nQ^A8E0M{BiWo>vvARup8wW-#;Fq
z#~tAJ;*uF#W<?fjpIXTx<fx&8f)Xt|#l33}qX79CPDa2ubw{c#%Tkw0=M2ZoUI#9-
z!}*X$>8It2cYb8Pxl}VR;XOU{^NA%$2%^r4?x>F#`q{k0Wq((E?{*#YOsLnWDx&R_
zNEFfoGNw2+nlCnKyG!E5CDyzwJuq_yUbQYK|8yCbW3s3v+S_9uBoLUH)@s#E>=6|q
zVh-q{IaIcgM@y|_5k4|?kKQa2n!I>iqsRIDe(S1NRtg!FR=BQ9{mJ2{;p#pxLGJwR
z@bIDrzp0Qt<%Ut*0ooJkbsSO|UQ?bKO^jv?^^nwf`0GC`u*Vn=)_-L+SpjMiXFq;?
zvaMtpINJG^Pb7n(=8@AGao#j9eL(h@o)`+*ft&8XrWPmh^8u#-#wi}Dd#5kCmxj@n
zs4RyF9@G2vuQa6?a}Mbq6&Vo`c;CQECv7xVgGI|)3_##1mn`$y`GbQ}rAG)4N;rN?
zFFrVF)&Z$$?;f*Xc@qOc6hnh!&W!)5!d?QEsCcq${Z)oF#oP#)Xr+jLTpF;35v8s9
zShYyV`@&PG^{1eivW}^DLAn}FoKhBz^uV>MS*X22ID#AG@huS+gLb4UB)AQYukZe|
zG;dVGW_({h!zcsl+@kopb9W(#9RnPuSuR5@F<l7a5MT5ip(<(XJJ@-!(Gt^$k^mk#
zDeL4%HRbt3W*Y=ei?7bXBrF}VbzR8GXtOSTg9nE&R+Z6Jh~IhAmOP3BLaK4YcKmVV
z$M>x(3ENlD>Pl0&P+6sdi}z_G+nh+GDD>t?#5W;=M8EO0)A4c=YtbYw$|)8rnxk#I
zI|1v>J6UZ@tBuK1v&|>J@{6Al*pdD354jhf!hgok${}_m;BN8heUYk4nQN(D47a7l
zNJ+RA$ASP5^9kNrWd3yI7-Jn%-5i735hy;vh0Eid3QxW3D;_0MuznW{Xa)0rSsm>A
z_Oa4%V3U5w*vN|m!ZnJaWTuXWgP=Gmi9#;+%&eX>ty$GP&KC$J3@U~K6Q*Bc-#*uk
zKQq+&aI1&hJT`{CfC9bLUp$|THRGo1`=XAj-uUsUtF{~(<+mly$URApc>U^lE>hj)
zhV63n@7WkhR0Iohl|JUIJkt|<TqES2cbG*s$YJy7OXKAA3TakwR4E8_o6u)Tf)QY6
ze!|3*F<zn4M?vxcYFZj_4}@a+gC&-H@H^O0x*%D`pTOy#JQgfdL`#Q?Uh;8TTC>G-
zfcyE)8l8GM&Vbv_U1};NjMTE&mRAa!kddqv1JH~?{b*Fu>tPD2=X>gp1b}=~KuaTA
zl{h`(k$@*P^idYQ8U(#1?QbN}`ks-JFtE@d^w)hQjU+sgc|Jt@7ON(Rmp<lD--lU;
zQxDNXXv!Nh&Q9aKH+c!|OR{UwhGgf=p8b5yPxpx1mMfRnFsX&aM2R?LGHwvAv*omp
z{dh(h<#4c$S#FghP6uS1TJPiw`2<BzYKu0L?}}IF0pzgQ$bZZH!Bj@3prTZ~MCHH@
zrlS_@$KZWZX(rP(H1A3Pn5GLo^{Kj>M<G2<--NF#Ayf<JgcgTW;-S^etg7)%Yoni}
zk|!olpy~u1Dge_gR54KE4%;_U(&}&z9l4YmRL9Qpv`ZQHTW**MdPTSzj1&w%mAG8Q
z?Tr}Mq$VpInKB~$eNn$tFqZ|`a1_b)4IeVaGwQ&xs$rd~u`(~w261lX1>YL(s+SL@
z_zsXjC5-?jq#=FD#23|GIWp$*M{wwzV0fOKf#Wn2vZe++>e`Uu6E)r%di_gnw;BHd
zztP%eU}nhsx~!i4xqDHmvQ#61GH~JeULsIIB9wxnz9Ey`@|969R4w@oGgY+nv;vcQ
z7xmG887fZK0dS98=!6|sLiaFU{daiQp@{L~Mlc*8%@cy8p$(=wH7)gVw_u%5?=<B}
zl}7v$8qufxvHFd58su$t%vP`iQob{6)Si!PI5;QMQvxVH$H$x|3!#-UXM@G?+_%fG
z31cI(VO*ls>V2U+^Jf1r644KdC<boq;EmrZ=M2X(Bl$CNC8@b|RUa}eS>S=~C%D?I
z%!LQrb=jEg!CAs8OT&v6qYb(2m*Y>AKVxq{k-bv|Zh`z>{%xLuOPnfG{ySS5A*PI^
zT`!h%BAu_WXGY7Evue_3rR)TBNq53LQQ>Yw4GV!1{3Ub@ovu^_x#XB)Y6{HH#zJ_M
zi-n|#iqsZR6cIomG4U?+T(U87J(yD~pT+9zlIY4PAY)3rd?ckEC0~wvBJ4Iq2xy0-
z#%M)_qJoV=?s<l5VimZC^Vb5XH3YccDe(Ze^gdCGKl+@XOe55hu5?q&0wjtDD?!p*
zB|lsjWE9PT-<ydBpMwaZxCTU#8uDl$q>y_Kr*bu4&&~xGB0KDUH){u`F!C*R8^e29
zB`6}oBa<suKqzn#_Vao?1j$pEsrxn%xVgG=1n(jpZZ3@hO@-bSJ7WlfA(QSv)1Q;s
zddQAU54|FDBT=DhD5hXjVi@N;dn>*Bpvf6WkR6sf-<QoBR9Rl0TW%sa87GLaxmg{4
zKRD^{Lk2U+JOI<aJ)$_m!UEmGUMuUhO_6Q7ARrwv)D9u~<d`fGUt^w}SeD=i(t30e
z8Nhu2K^rONklXKh%v&T}0Pex>azJLlT^|Q!E5Wz~4_1?YGkluEfjGy%TR^v5!n)>@
zTZ}|U;2<njS?#M#6&G5^6i){2tG#!Lo(_)xjoZy>;|f`iKxf2IE0afE_D0{EaeZ@?
z@U|{Qs&AkxF0GE`H0}qap})vE{v-zP8lvQ-=cgD{$Y<-BT~wFa+$~jEm95n8V>@zA
zHw)q?-GLb5PV~hEc0APPBQ=3f-KcmUq?^-c$*dK$-)*RHzZB*(6p(dpnHLa30g2W2
z=0yjRwfMo4Zmwy;hGh|a;xCVmAox;1v$fUut!$mDSc17Kh4dWZpo<gB8mWj?C>{ER
zp))h6eZuRC7e;rkcGI8ScH!v(_4_36d!TPc@b+ilQ8GQF&sI*$57j{i#X|(>lV_1V
ziL2eQ`E7v_CoAE)+7pfv>g$V(*J<?Z(7@D$SsxI;wu8h#>#{vgxrQH|@F_VX$9!DM
zxYg7*2i;;@g3+#1n_RBP#HwL+R!Jd)MqjBlj?YiO;Y3HD#V2+SS$T@{k9QyHxr-f+
z+74c*nxxgPQ6X`uYf><Utr2*~>K{Vd4sJHp%r5ufKTP1(7=M2FA=#*@n0c0WaDK03
zO}>QLHsVT7*d{k<R<__FlvAXo7J(ah5B`ZoO_Q_IAHbhgO<i*SvpY4|gjspm-fbdE
zrD}RsX#Rs3@6UyIK*%YAiJVbf5|E!at~IfyE3EaISAsb5uHmJrf(`3h*-)|hi-%?k
zK3B)Xhb<ZN(|zA<?Cqd?RD}a@u)I?urK4Fl&L8Qk_btTj_fFw@j5B(@Q{ck6xcoBU
z>@BoXxqE>z0bYr}zp5Ij-fu<dTuP7tto6auTS6>HB?lrSdtgfY`;xu|q?tfoyXJx*
z$$lTVYT8xJ5gyS;^RX!I_8l+>?c+su`HH5i^j(V$*g0{b2Yp8!7ccC291}Q*0g0-<
z;ylP+o9EFdC4yaD{T0Fh$o=8rnrg2rhl~p;6bR&xfjSH8$f+JbC@^*3Z>LfyNOrm+
zkPpdDiBPc|V+=mWJsP!#si!LL++`|q3fN<8R<nLD&h7%dyN5^{_WWVm%<4dn2#x~N
z#9dRAo{1)swr=XNyfH5ut@n|0chf7xhK3Zwt4g(0ZH=6m6o%P6s4364(j<N<pAkrQ
zEPo6gDcssUZZ#<Xl5N7ki;S9*mX;xhsw1bQw6unyg39lN=o>88lr`ExR3nG?9UhEc
z3p=2o-Mrpx{oCa<Y+tUG8uVacn%-1P12ai3=~ouCK;r>Y;eL}K5WZ^rZdgvY6)py+
zc2@1IvN0ga?KR)LWi|X}C^HDV>9hA}JL*APZCWaYiV<bV37F~ySCamfYmYW+;y$<A
zw^bdsL^nKZo}YyvyG1Sx_4XR#y&nf%Y#gmD98w@x@uXStX8_)C#d#TiU5O1j6!XGc
zaa1k*6STr6F6f3aEX{B>F6qtTBNL_rIPEx$R3pSW?*Y<io5Kz6an3G^9CxBCpO>-p
zq8XeW4JyIMm4htJ2PTI6PQbK%5zvQN9At=#gmYtoIZ{58quSqrB<uGGG272gIGST$
znXt`$S)9n}JPP(_1sMnwZkkdDauCqft)%~a5^PpmaxLt4A4owwuGAgYWcIy$s_dvD
zpO-C^EmnZS8y0r8FP@o+UxBq%EARzN|I@<)rDFGh*iMr4HKdcRxbJH1+0oDZ>?eCI
zKU}DC3C_e>l4G!W3Ac|^Q6EiQxA46-hj6oe;`x^|ZG6*+w+tSRZER$+e2^mJsuSd2
z3~0Pd$;l1+ejZ}gInbeL*||n7WVaii0>jQcb08bCX(EI}=MCrQJ_$z%h~IV$1x|@k
zaLe<{#@+vf!!>&JeM-*pdNdRW0weXuvxuW0pv}~;okaO*G#c<orN05BRnjR^0WO-T
zAwoDgO#W?Rt@9&`vMgLJExUA1uvQjURFOpoLDLka0U|?Yw1Dfw$QpBzy4^>WPYR1d
zy)GcdQgEC)*3KW@xriW3bAK#_lA~p!)O^m^n4$^9L`tIk@l98X`MOCt9b|haJpY;-
zO@e~kc<KwIhhlD!xaxpqKgPtEp8;69%jWRzm*=4n?`Dn9d57No^y0%hU0Gh@;<KHP
z<~3DM`*Hi@MN-c9=|lun@6mKy1Z`6@Uruh!u%0{D2p}{s$A_r<h@g#!<4D8IS?^(S
zYc`}TL=3`mL*vyb>p<QWm#}JAhxB|Ur=x~<x5m|CtH#WBxdLX<(NvH}h;(9-*Yv6k
z&CFd#-P=wo|7J2_mODmJvNI#vY-*U72mTR(wpDU4aIZp0^vOMdC&lo-0)`P=jyN8A
zPl>qvXF|e4;8McZ-PY8?-R)L40zrhAJtj@VVy-Tx^%I-jkMdj^O`3AL;A(?)3adQ|
zB^Hx4DvxwJHIgc$v!%fDptbqxN&io4R{{^^_Wo%sSt3hBH>NC8#LO7O%wX&!YxZnq
zn`SIyjKL5Jl|n?;BBVlyvPU6VE4yU7BC-?8mgWCa_uiI!@9+2je17j|KJz*6GtYC*
zbIy6rJMVj*=lQ;ZH}+3(*=`N5Fv`?TjOkEs-oN4+IDeEwbKs4d1Or}7$pfRfNwjq{
zuwFCB$qIiu?`x;o9^7d;9P)18O3ixCrc+JP{fKilg<hvGX`O~;;u2o0*{Kx8Qwzjc
zeVeCM<W8|SOLuv(1+2P$$)nMuC+WR_rc|)WC0mVlA8xWeKWZb`m0yI5bQd?L`~Bs>
zbqZ`k$?8Q!jaQGFxO4sIqVPEZ_)zPLi>XBDdj0P39BXa0?2A0TcO&u+8B1u`XNM-m
zC{GTUQt!mgm%yp`@E)C9#{rE<QmxI^21_j=(W{sD%{1Uo1f5od1kmzdY6{`OsFZ2P
zombjyVd5-U5M`2}gVBaHJ>a+F#Ybq{v((Tq=1$hfCaVwhN_m{u@6c+c5mPHV`9`?F
zx=dWcv1^0&^R1HK^w`2jYD2CHIUH!TUeU>n>LCYs2Z@(kCq*i#&TY<hl9I(IrYVz@
zrD>F)k+X@?sFS|Fi`_*9g&W;>a%(CWLwz&M>|2B5LNg>fGjim{S*#wN5<`D#32kH6
zU3#_-Z3X#j9|6&!H<zN!S%!>++kzK`KeNp2UF42di3)#TAsq?5K33ios3z1J-K-gY
zm8tgVL(S^8&KF$s^}-Nl?4beD3R!ZYDps}0tZR&sCWAR)K|K2SSgBezI<L2g4sYB$
zycH#~vMPi-K(@VC)iBS&ow$&MH;Q96jv7&Xv$x6o5lVxQ!s?%gc#;;~vuDpS@5~B4
zdv#U&+wR>F%RQBwr%U_F*Ppm&U^HI0w5}t#Ch-Zr!L3PG8ft8Yt|Yveh%r^Wy)em&
zj>oVz2W~DzEDeQOU#BB6FsYh7_l{yIfh8inqKhksfMr?TTXblPNxy3R2C2#8_q##i
zEq8|ab<L^^%ktZT+!%T^MhWL$Ep*{qPH0+i97AGy4b3L$AIbNQiT4*=vJ@437^G?Z
z8N{$YkG^r@;#@wth$E!7UFZZ`Q~i+W_|it$tmZrTSa*xY;PR5TqCoYvYdkM-<t9x%
z3g=zj%2*oQBz+$CQ7E-fy5tL44tjB)TpYi?&aiPtB%Rk(YRGF6<$NoozF0y?fPL=t
zQ?gs9y~9ff15Bo19;zCea&a(y0A$6G@<>Ce=niJi*CL+xt$M&@(RoX|`wvBfw7u1z
zxG3Fcy2y8OW5QcdA!|zEwOp5_94j#}Evfp&hj6iH6A7_i+$H*5UN#BKMPF)1X%F>0
zit1lcdva3F;pmxVc~lSi;Pun2zx4?oy>de9Lv4p@xe;W}EjY~0Af@A4bz}W4P3xr7
z2JWzsqU)I7g3>LyLJlt1$P`AA0+7tI&+6K4A2=plo5sEAvc;$TR?9lz`Grnv(SB|J
z+MrD;`kI)oR`>F>d@>lJAEy^@jf&WR{Ejh=hylq#Jv2IwNFWOGa&o9LR@;#q({gV~
zc~DH|``_NA`16CgF5QXwSly}FGTW6RS1;%DctMIvH#^S=YPrlxHBBeP-e8a5KN6y>
z(Z^!`33OxOx4|Zr(h=DCa>eH|=fJ<E`kc|-fNaoOAL2CxZU(D!#uSw$9cEUTb@w#J
zTrOXn9O4|OftNmrP_xav^?4@oV4<N7+MP58!9s^ZJw*1%u;e|?IW<UJ-n!X%u>PzJ
z%G$SZkyfYT{YFEr5BHK0-BdS=>(h5KtFK%gIPCn2&yHf9p9_kYHV+Ebt%YB-Uc~xV
zFb<Q}#(68RX{2Z%0!DEDRZr&3xR@#${Hv?K6tA!=R-WpSBj22o_r=8&`J%{stqzCi
zFWFQM2tJ-VvoJqU-Jkf}u&J9SSbP2<q2>3<cAb>XyZAL$)-P@u^fmgwde*jM+y5KK
z+COEY?0D8B;L`Bz>;ND&2__9V*ARc_TtocmTmw%3a<0K-|H-)qL;kCCZ98kg{;MnO
zkF)?h^dCK6f2IU%=K)Xv@0HK@asE=<PDaDOTvj{h|L-_|DOoh~dzY0d5a(|u5O7FX
zKDX9X^k(Lb5QI~%vvY3m62+?Of$?7Med^+t=E6+-A6HIKX%l6bz}jHiz`Z@jN*o+k
z&X&#xvxAB|(wv+XTw4gv86GMAn{X&*OlRx1M~mFp?Q<>VbKaGs%L)vf2ZCYy!+8<f
zYC)kQx9*iak6s^tewfS?oODoiGg0ex+Cqv0_EgQ`RinMIOHB7)FyJa-*gX-?SpALC
zhDC(qs?B2`7vQQRT+3~&3-RuTr^-$k8X6zdwc6~R66ahrzPdG_rNd(!!+n)&tb?me
z$=p<u^U6Jf$Q}7p>choSCm*8bSC_X+KULOjR=($;OFSeg9&dbnw9Mzh`YvU6tt^92
z#1iL5L%N>OyFz>oUcy{Gfzv8)gtQt2g!y_dRD`%_7+#k+E*5?HW0aTL#TP<G9Fo_#
zIm3*FBKc(MY7!nNKogI?y871t(e>EswM$QvH~jmbmCm(#LtZBq;tbbDMjFc@;%SiE
z!aAx!;6{N&hA(wVTM1F5@K=F1P;xSpdr(TcaZO^CC0S2+%jp))nGQa?UQ$N<@MuAZ
ze$GuR{r7~ITdbi>%X-1Dp6wbNau;g05I3O7?wBl0W2z0ytj~cj?X|M$@|#?XozrL*
z0O9>(mG6}Zz*rt_bXw-nr4V`35Y613L)O8$)ta&^6y?i%%cNi6Q!co2=}_Z!Mn^8}
zQoZd$)ZpC5_#stXa@LPJ<5WNTa@{#)N%w;Lrxd<;(}mCE=0?&`vFAM&?D1-5Z)RaM
z&4BpyQ&Rc+>W^b@uWEx1LTLFFDy}B^L@VoU#Q8+|UFsNi@}l>o8Kd=wU)p!lYT`t#
z#cQ7T*j#M=)nQl(mYCN&XvMpqJ;FZsiN-k=r6Ipk?q?vg{sG09q-g6kQ-(M51uw@I
zXsQ-b{d9wk_v4z(^8+Ot+9-QnKnH5YJq$fcaA97wg*qn(`v*W7nsxb0Q}H1!oD^O8
zy~1Pkd>?Bk(n-3hTc46=!)7!=shrdqZ2IY$5_(#G0)9IDh^k{dS$9?W7!;xiYU$>2
zZ&BtLvdKfB-%R;Tmg4fdM;Y-RxhL<@(+pmDs=Md$_@bw>$rY>qJFI%a;g%WoXN60B
zhx{Ufe1p5H9x_v(B2yWpdxNDNRkXDgI1-TVqw6b7tBp_N;njNsxG%OnG{`?IZMZ^2
zRt6@+<aWd3;#}J;X86xAh?cZ#R!+p@2PRKVEq!ni+cU~KU8Uzh9~!uS0Kz#tC^@+$
zFjilae%W^A90bI6!x=r7UlVCfRAT@AP)NO#ND@xG@{G5WX_l5<v3VdZDzHX9wWLSO
z_^mCumkH5AtvXDnVJz^xPv85Jp#Sr3li8l2_o#P?Ik82OG*&j#v=#L?&(z<TcmOUF
zYXG0#Z+jVk#~FXdsfx)U_n{@=NxAGxe>cr8zH4ypBQI*pETE;QIQt!{*C*dvxNCA`
z<&eKnb6(e%S5>>0?i;|hrY_#IVo9<;*fn6fzN=sK42UNqv1%r34OD#g34b$NwD!#m
zdeJj)a`~8o9caUcVq#<C_;p095SHvF42<u350x@38khIaiiL&T!X4VJTD+QoiUCo%
zBP~?!8MwKiZhL>OYm{7R2kC6a)vyZVgAD!51!v{jKas-qpMu=TPY%A`m%2Zv>5izI
zRfs5SoLNj}Z9%BRPzP`1hTkMt&fLO8bHMPalM*A^HLTHJkX&{0iPdGpA32m5bl8H`
zC-X7K^wx$93sNxVOQ?y`aZW3`!OK%a3kS|M6MOT;BSW=5L{{Z)egs>cU34$dvFr2Y
zVrI$QJ7(M$n0(6{Le#Bgrbm-|om6ynU&c1DgY4gC$pzQ9sO84#jnX%sCNSS$hEFw?
zCDjO2W;1*W7L_ke_a8XoNwb@VSY6cgScQ;i1BvH*g*iiO8d;r(cKI|xD`u4K$f)|D
z!31^i8FRrQP&r%1Ww#((>BEG5TJG0amk$JE0&b+W(-nd%$KBiv&!1F^$zH|DS>@7Z
zCeM&KtJq#Ot4!&ozs?dWjKDiyw&7%fA6`zK7v;ikUb~TK1MUO0x{82gD`!`ih8=T+
z+PmK}w#H!!e*ci)qnn^Umfzl<o!KqG#CWSWWXU_@Bukc>6ZUiO@M2<QU9<YEANP!P
zVOR5YXo*gCCA$$J{b-|K!-xYBezS`Pd2=J=K*aOL0T_?-suXqV@Ue8;0mmbc@0lBT
z_S0*M(2gig2^Y#O8)cV$pfypYRmz&^JRz2Bk<cH%IPuviS<$+l^%UEl>l#<tGc6dK
zKM(Q`8D$Uc(R*<+k50YNCbRbZy*HBLamAngJ$dw=cm)g2qTX-^1S~2q=u3pBFQ+Z=
zb8WKmCEcYQdM23K$8rwZSw6L%Z2p#o_j14i#$_t#PVqpe)ug8rvS@r}v2QLQAY-e5
zeKlsk<a^3_k1x%;l~g@%GN(O0e&jiG82tm;(Q(1|cehwt1~NJ5+E6`ryA{K@&U@<C
z)CZo-d4IBFKVJPyQy+_Av{B}&_9}@vk+A66#bb^*Mu{mbv#`3xkUB)0oBLeY3o~tT
zOWwESlz#TO!9=jObNLr6|HklIy#gh(bJEjG<!t>U9kJ6TA+wymHYzjKGy>SZj)1ME
zf;R}Y06_=VNO&6EV{|mgw4g21)Hz)A!p+yQn@;+wjzS-tDP^Z-OBqSwq!uHwtGj|8
zj#LzcrmDWy$;@qXaRTuUI_(3|Tf9xZ!unZ5RC0cFgio(bMf8|!w0B`q;YGQ-uA}DM
zQ*9OR3h6*)NterxbUB%{O*fS@2jq7-`F26x?LwssQR{+b4CdauLy|*glo+|o3*toy
ztQNkl)am!Vegum^PfPCWwr1(I_b8bXqfh+3By33u2Stg`EyRYhg6iJ0_Di?+<X1`*
zJxYi_^R~Swb2_1m(ZW(+Keg>8Bj1L1f&o(o+0gXXYblGcV%3n1+ZLyVJ}k7ijj9Z|
zlQ_@<B1#{VE+CY%d-c3`BQ)kyia9khn9Qk{XdTD!-YfO`tMmHIDe%|)$qZZmj1Sj?
z?yog6+;l2`jVrM1V!ly55o5An!h-)yd0ySrp5HJkU%ICj$_^-r<e9YxD5d4&#a7Op
zSbRK~Zr3~e#+pVKpZDpwR`2E4ofVGjFAbDRz4wnS#kQRf>(HZl;DQb5R*_}$uYGJc
z>1e_B80lpde@TPZ+~$16xlip+*`X9rVR8G#DYecKKPNUEPhZg!1-vmLk6u%Q$a-4w
z+yhW5(nPekPvh3Em#Lj~yHxgs7vj`BseP?k5BtVeo}DmVzhOdZLZTM=gDdp)#^gO+
zMXg<&aMO!gloI(T^e@rf<M&V&>&BZL3DUc>^sdMvGSMkfIgd6E=ro9Mp-rteov^VY
zcX-AX4dNeMbV{a6<-e8D`+kAymr&9^N{^Mk%iJ(pYGKjoN&47VxwX54VMTUGg2$@v
z;XDUVd53L7ZF`oTE`O#{t!`+<v)dn&wf!nih{%r5$lTVskKm(qD)M1pEk87d8nHLA
z-efynH9G2hz$&)t>>_D~qA86LULuDi5TPtRQRlms=_88;BI(u$+T9k{E_Nutg@@JJ
zf*6e3Q;Dv7=qwn?HH1EdICJP~*|~i_&wa+3i|@tkW1p*jrN2L)aSd(EXIXxU{$<a6
ztNjHX4LJv?%C)OP(Z^5J=0=mw_C+<c1-l+TX47?C)U0~g!t3QoIkd1-Cou@TMf+*?
z(fwZ^Eq0JczJIp(1C!*h6j^g!oj>wp;c(f%?wjQmsX&G<kO~a8b398RDnRDSD<NQl
zg95}1sSDF3sXF2b$9>6;M!tH+_P);cXa|TQmRVlW7Qi5Ml%U#@Byc+r;2vNgby?xC
zs-cd?;cW&ghU!Xk1)x#DR96?G2ZpKu*%842<!v$)0^VVvI4eNRbq&B2H#Zk&0sz1w
ziI#**z!As5I5Lo6?d?W(2E!#~AV8I52OP!_fTsCcA#kPu!BZ$C3>50^?JenzkaQ!T
zg~HKjG!!NUm6DPGI3zrLh!k6@1kpnXXm3Xmg883fL=VXwog{%UKPbT*3YUaI|7hrs
zWN!eL9lYJJt=%?!`r*UhY5|bd|GpaF2cRAV&^@4p0U&i8JnbFH3J^^L9k3?e&4cn4
zg9QwSNy4Ng;SlJzj{S%BfWiFx_JA4qrnfx6gV6<`L2y250Mrjw3MM5j0h5w|p^T*v
z7-=*Hj<S%4{=@`K6d<Jvz_kPL?f)+I9n*JGZe(L%=CEhUZa5s+3rO(Z9x%A16hadA
zwXq$sZ(Q=w?V<dxtN&%^ZArSi|K5F9*KLE^=EJDD*?YPIN%UH33J_0Ef&&JDhNIwi
zc4!HlBMvPAhXY?Q;E+Hfa5$KQEe?j1mHuz%!NLAdJxHEpmmQOHu!lOjIBqxT0ZauP
zP{hF=gL5Oh+EM_cCy@Xsi5+-<C}0r~tUT}|g#cvUV|NT%*@g18;6m6oEsTpT@vH)b
zD&gRWv-NbLK(Hpn9d3uOW9LG^el6_CLI0}jZ$@^91S}X}kfDDrM=Ue=e{}rsD*Edh
z1cW0iK)koFFuw#Qe+L)x$ErH=4~yz3u>Y}b(SRv#+w>7N%=TJ<Nx@K32x-6=EMPDQ
z@B!F><?<gmzM1clzccWoSS+CC_H~y^cEkbD7E(w6sriosEQ3TMkYF768%+j=1h#;-
z4>0i?O-dSt`k4kpqR~KKf8YZw6hM;ri3WqCe&IvFr2#OJA7y2c$e(FaFlku;K;uU~
z8I%kVIs5|+j*ylGK!$#x!DOVQevw7NVZZXhf8|4>q<`rz0xt8jelVmA>KB>}06g@w
zE-2|=#tM$uM%?&OXJEf<8{Fone#puI+fYB!WTk<S^`B@c*e_!*g^)pfS09CJ3&2;9
zftO=|p+*E>N5Bri0N|P%0GzhH&jp5R5pizdZ36}n*R<5Ymh#eSXt=U8@IS1gjF44T
wQ&W{iqm|WBa1>e@uBwKV!v1Ft>usbm4~i|BvSWMz2#7Qic$<j2z6SIE0lq<cjsO4v

literal 0
HcmV?d00001

diff --git a/support/dist-docs-branch-23.06/ovn-controller-vtep.8.txt b/support/dist-docs-branch-23.06/ovn-controller-vtep.8.txt
new file mode 100644
index 00000000..163d80bb
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-controller-vtep.8.txt
@@ -0,0 +1,140 @@
+ovn-controller-vtep(8)            OVN Manual            ovn-controller-vtep(8)
+
+NAME
+       ovn-controller-vtep  -  Open  Virtual Network local controller for vtep
+       enabled physical switches.
+
+SYNOPSIS
+       ovn-controller-vtep   [options]   [--vtep-db=vtep-database]   [--ovnsb-
+       db=ovnsb-database]
+
+DESCRIPTION
+       ovn-controller-vtep  is  the  local  controller daemon in OVN, the Open
+       Virtual Network, for VTEP enabled physical switches. It connects up  to
+       the  OVN  Southbound  database (see ovn-sb(5)) over the OVSDB protocol,
+       and down to the VTEP database (see vtep(5)) over the OVSDB protocol.
+
+   PKI Options
+       PKI configuration is required in order to use SSL for  the  connections
+       to the VTEP and Southbound databases.
+
+              -p privkey.pem
+              --private-key=privkey.pem
+                   Specifies  a  PEM  file  containing the private key used as
+                   identity for outgoing SSL connections.
+
+              -c cert.pem
+              --certificate=cert.pem
+                   Specifies a PEM file containing a certificate  that  certi‐
+                   fies the private key specified on -p or --private-key to be
+                   trustworthy. The certificate must be signed by the certifi‐
+                   cate  authority  (CA) that the peer in SSL connections will
+                   use to verify it.
+
+              -C cacert.pem
+              --ca-cert=cacert.pem
+                   Specifies a PEM file containing the CA certificate for ver‐
+                   ifying certificates presented to this program by SSL peers.
+                   (This may be the same certificate that  SSL  peers  use  to
+                   verify the certificate specified on -c or --certificate, or
+                   it  may  be a different one, depending on the PKI design in
+                   use.)
+
+              -C none
+              --ca-cert=none
+                   Disables verification  of  certificates  presented  by  SSL
+                   peers.  This  introduces  a security risk, because it means
+                   that certificates cannot be verified to be those  of  known
+                   trusted hosts.
+
+              --bootstrap-ca-cert=cacert.pem
+                     When  cacert.pem  exists, this option has the same effect
+                     as -C or --ca-cert. If it does not exist, then  the  exe‐
+                     cutable  will  attempt  to obtain the CA certificate from
+                     the SSL peer on its first SSL connection and save  it  to
+                     the  named PEM file. If it is successful, it will immedi‐
+                     ately drop the connection and reconnect, and from then on
+                     all SSL connections must be authenticated by  a  certifi‐
+                     cate signed by the CA certificate thus obtained.
+
+                     This  option  exposes the SSL connection to a man-in-the-
+                     middle attack obtaining the initial CA  certificate,  but
+                     it may be useful for bootstrapping.
+
+                     This  option  is only useful if the SSL peer sends its CA
+                     certificate as part of the SSL certificate chain. The SSL
+                     protocol does not require the server to send the CA  cer‐
+                     tificate.
+
+                     This option is mutually exclusive with -C and --ca-cert.
+
+              --peer-ca-cert=peer-cacert.pem
+                     Specifies a PEM file that contains one or more additional
+                     certificates to send to SSL peers. peer-cacert.pem should
+                     be the CA certificate used to sign the program’s own cer‐
+                     tificate,  that  is,  the  certificate specified on -c or
+                     --certificate. If  the  program’s  certificate  is  self-
+                     signed,  then  --certificate  and  --peer-ca-cert  should
+                     specify the same file.
+
+                     This option is not useful in  normal  operation,  because
+                     the SSL peer must already have the CA certificate for the
+                     peer  to  have  any confidence in the program’s identity.
+                     However, this offers a way  for  a  new  installation  to
+                     bootstrap the CA certificate on its first SSL connection.
+
+CONFIGURATION
+       ovn-controller-vtep  retrieves  its configuration information from both
+       the ovnsb and the vtep database. If  the  database  locations  are  not
+       given  from  command  line, the default is the db.sock in local OVSDB’s
+       ’run’ directory. The database location must take one of  the  following
+       forms:
+
+              •      ssl:host:port
+
+                     The specified SSL port on the give host, which can either
+                     be  a  DNS  name (if built with unbound library) or an IP
+                     address (IPv4 or IPv6). If host is an IPv6 address,  then
+                     wrap host with square brackets, e.g.: ssl:[::1]:6640. The
+                     --private-key,  --certificate  and either of --ca-cert or
+                     --bootstrap-ca-cert options are mandatory when this  form
+                     is used.
+
+              •      tcp:host:port
+
+                     Connect  to the given TCP port on host, where host can be
+                     a DNS name (if built with unbound library) or IP  address
+                     (IPv4  or  IPv6).  If  host is an IPv6 address, then wrap
+                     host with square brackets, e.g.: tcp:[::1]:6640.
+
+              •      unix:file
+
+                     On POSIX, connect to the Unix domain server socket  named
+                     file.
+
+                     On  Windows,  connect to a localhost TCP port whose value
+                     is written in file.
+
+       ovn-controller-vtep assumes it gets configuration information from  the
+       following keys in the Global table of the connected hardware_vtep data‐
+       base:
+
+              other_config:ovn-match-northd-version
+                     The  boolean  flag indicates if ovn-controller-vtep needs
+                     to check ovn-northd version. If this flag is set to  true
+                     and  the ovn-northd�’s version (reported in the Southbound
+                     database) doesn’t match  with  the  ovn-controller-vtep�’s
+                     internal version, then it will stop processing the south‐
+                     bound  and  connected hardware_vtep database changes. The
+                     default value is considered false if this option  is  not
+                     defined.
+
+              other_config:ovn-remote-probe-interval
+                     The  inactivity  probe  interval of the connection to the
+                     OVN Southbound database, in milliseconds. If the value is
+                     zero, it disables the connection keepalive feature.
+
+                     If the value is nonzero, then it  will  be  forced  to  a
+                     value of at least 1000 ms.
+
+OVN 23.06.3                   ovn-controller-vtep       ovn-controller-vtep(8)
diff --git a/support/dist-docs-branch-23.06/ovn-controller.8 b/support/dist-docs-branch-23.06/ovn-controller.8
new file mode 100644
index 00000000..261a5258
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-controller.8
@@ -0,0 +1,439 @@
+'\" p
+.\" -*- nroff -*-
+.TH "ovn-controller" 8 "ovn-controller" "OVN 23\[char46]06\[char46]3" "OVN Manual"
+.fp 5 L CR              \\" Make fixed-width font available as \\fL.
+.de TQ
+.  br
+.  ns
+.  TP "\\$1"
+..
+.de ST
+.  PP
+.  RS -0.15in
+.  I "\\$1"
+.  RE
+..
+.de SU
+.  PP
+.  I "\\$1"
+..
+.PP
+.SH "NAME"
+.PP
+.PP
+ovn-controller \- Open Virtual Network local controller
+.SH "SYNOPSIS"
+.PP
+\fBovn\-controller\fR [\fIoptions\fR] [\fIovs-database\fR]
+.SH "DESCRIPTION"
+.PP
+.PP
+\fBovn\-controller\fR is the local controller daemon for OVN, the Open Virtual Network\[char46] It connects up to the OVN Southbound database (see \fBovn\-sb\fR(5)) over the OVSDB protocol, and down to the Open vSwitch database (see \fBovs\-vswitchd\[char46]conf\[char46]db\fR(5)) over the OVSDB protocol and to \fBovs\-vswitchd\fR(8) via OpenFlow\[char46] Each hypervisor and software gateway in an OVN deployment runs its own independent copy of \fBovn\-controller\fR; thus, \fBovn\-controller\fR\(cqs downward connections are machine-local and do not run over a physical network\[char46]
+.SH "ACL LOGGING"
+.PP
+.PP
+ACL log messages are logged through \fBovn\-controller\fR\(cqs logging mechanism\[char46] ACL log entries have the module \fBacl_log\fR at log level \fBinfo\fR\[char46] Configuring logging is described below in the \fBLogging Options\fR section\[char46]
+.SH "OPTIONS"
+.SS "Daemon Options"
+.TP
+\fB\-\-pidfile\fR[\fB=\fR\fIpidfile\fR]
+Causes a file (by default, \fB\fIprogram\fB\[char46]pid\fR) to be created indicating the PID of the running process\[char46] If the \fIpidfile\fR argument is not specified, or if it does not begin with \fB/\fR, then it is created in \fB\fR\[char46]
+.IP
+If \fB\-\-pidfile\fR is not specified, no pidfile is created\[char46]
+.TP
+\fB\-\-overwrite\-pidfile\fR
+By default, when \fB\-\-pidfile\fR is specified and the specified pidfile already exists and is locked by a running process, the daemon refuses to start\[char46] Specify \fB\-\-overwrite\-pidfile\fR to cause it to instead overwrite the pidfile\[char46]
+.IP
+When \fB\-\-pidfile\fR is not specified, this option has no effect\[char46]
+.TP
+\fB\-\-detach\fR
+Runs this program as a background process\[char46] The process forks, and in the child it starts a new session, closes the standard file descriptors (which has the side effect of disabling logging to the console), and changes its current directory to the root (unless \fB\-\-no\-chdir\fR is specified)\[char46] After the child completes its initialization, the parent exits\[char46]
+.TP
+\fB\-\-monitor\fR
+Creates an additional process to monitor this program\[char46] If it dies due to a signal that indicates a programming error (\fBSIGABRT\fR, \fBSIGALRM\fR, \fBSIGBUS\fR, \fBSIGFPE\fR, \fBSIGILL\fR, \fBSIGPIPE\fR, \fBSIGSEGV\fR, \fBSIGXCPU\fR, or \fBSIGXFSZ\fR) then the monitor process starts a new copy of it\[char46] If the daemon dies or exits for another reason, the monitor process exits\[char46]
+.IP
+This option is normally used with \fB\-\-detach\fR, but it also functions without it\[char46]
+.TP
+\fB\-\-no\-chdir\fR
+By default, when \fB\-\-detach\fR is specified, the daemon changes its current working directory to the root directory after it detaches\[char46] Otherwise, invoking the daemon from a carelessly chosen directory would prevent the administrator from unmounting the file system that holds that directory\[char46]
+.IP
+Specifying \fB\-\-no\-chdir\fR suppresses this behavior, preventing the daemon from changing its current working directory\[char46] This may be useful for collecting core files, since it is common behavior to write core dumps into the current working directory and the root directory is not a good directory to use\[char46]
+.IP
+This option has no effect when \fB\-\-detach\fR is not specified\[char46]
+.TP
+\fB\-\-no\-self\-confinement\fR
+By default this daemon will try to self-confine itself to work with files under well-known directories determined at build time\[char46] It is better to stick with this default behavior and not to use this flag unless some other Access Control is used to confine daemon\[char46] Note that in contrast to other access control implementations that are typically enforced from kernel-space (e\[char46]g\[char46] DAC or MAC), self-confinement is imposed from the user-space daemon itself and hence should not be considered as a full confinement strategy, but instead should be viewed as an additional layer of security\[char46]
+.TP
+\fB\-\-user=\fR\fIuser\fR\fB:\fR\fIgroup\fR
+Causes this program to run as a different user specified in \fIuser\fR\fB:\fR\fIgroup\fR, thus dropping most of the root privileges\[char46] Short forms \fIuser\fR and \fB:\fR\fIgroup\fR are also allowed, with current user or group assumed, respectively\[char46] Only daemons started by the root user accepts this argument\[char46]
+.IP
+On Linux, daemons will be granted \fBCAP_IPC_LOCK\fR and \fBCAP_NET_BIND_SERVICES\fR before dropping root privileges\[char46] Daemons that interact with a datapath, such as \fBovs\-vswitchd\fR, will be granted three additional capabilities, namely \fBCAP_NET_ADMIN\fR, \fBCAP_NET_BROADCAST\fR and \fBCAP_NET_RAW\fR\[char46] The capability change will apply even if the new user is root\[char46]
+.IP
+On Windows, this option is not currently supported\[char46] For security reasons, specifying this option will cause the daemon process not to start\[char46]
+.SS "Logging Options"
+.TP
+\fB\-v\fR[\fIspec\fR]
+.TQ .5in
+\fB\-\-verbose=\fR[\fIspec\fR]
+Sets logging levels\[char46] Without any \fIspec\fR, sets the log level for every module and destination to \fBdbg\fR\[char46] Otherwise, \fIspec\fR is a list of words separated by spaces or commas or colons, up to one from each category below:
+.RS
+.IP \(bu
+A valid module name, as displayed by the \fBvlog/list\fR command on \fBovs\-appctl\fR(8), limits the log level change to the specified module\[char46]
+.IP \(bu
+\fBsyslog\fR, \fBconsole\fR, or \fBfile\fR, to limit the log level change to only to the system log, to the console, or to a file, respectively\[char46] (If \fB\-\-detach\fR is specified, the daemon closes its standard file descriptors, so logging to the console will have no effect\[char46])
+.IP
+On Windows platform, \fBsyslog\fR is accepted as a word and is only useful along with the \fB\-\-syslog\-target\fR option (the word has no effect otherwise)\[char46]
+.IP \(bu
+\fBoff\fR, \fBemer\fR, \fBerr\fR, \fBwarn\fR, \fBinfo\fR, or \fBdbg\fR, to control the log level\[char46] Messages of the given severity or higher will be logged, and messages of lower severity will be filtered out\[char46] \fBoff\fR filters out all messages\[char46] See \fBovs\-appctl\fR(8) for a definition of each log level\[char46]
+.RE
+.IP
+Case is not significant within \fIspec\fR\[char46]
+.IP
+Regardless of the log levels set for \fBfile\fR, logging to a file will not take place unless \fB\-\-log\-file\fR is also specified (see below)\[char46]
+.IP
+For compatibility with older versions of OVS, \fBany\fR is accepted as a word but has no effect\[char46]
+.TP
+\fB\-v\fR
+.TQ .5in
+\fB\-\-verbose\fR
+Sets the maximum logging verbosity level, equivalent to \fB\-\-verbose=dbg\fR\[char46]
+.TP
+\fB\-vPATTERN:\fR\fIdestination\fR\fB:\fR\fIpattern\fR
+.TQ .5in
+\fB\-\-verbose=PATTERN:\fR\fIdestination\fR\fB:\fR\fIpattern\fR
+Sets the log pattern for \fIdestination\fR to \fIpattern\fR\[char46] Refer to \fBovs\-appctl\fR(8) for a description of the valid syntax for \fIpattern\fR\[char46]
+.TP
+\fB\-vFACILITY:\fR\fIfacility\fR
+.TQ .5in
+\fB\-\-verbose=FACILITY:\fR\fIfacility\fR
+Sets the RFC5424 facility of the log message\[char46] \fIfacility\fR can be one of \fBkern\fR, \fBuser\fR, \fBmail\fR, \fBdaemon\fR, \fBauth\fR, \fBsyslog\fR, \fBlpr\fR, \fBnews\fR, \fBuucp\fR, \fBclock\fR, \fBftp\fR, \fBntp\fR, \fBaudit\fR, \fBalert\fR, \fBclock2\fR, \fBlocal0\fR, \fBlocal1\fR, \fBlocal2\fR, \fBlocal3\fR, \fBlocal4\fR, \fBlocal5\fR, \fBlocal6\fR or \fBlocal7\fR\[char46] If this option is not specified, \fBdaemon\fR is used as the default for the local system syslog and \fBlocal0\fR is used while sending a message to the target provided via the \fB\-\-syslog\-target\fR option\[char46]
+.TP
+\fB\-\-log\-file\fR[\fB=\fR\fIfile\fR]
+Enables logging to a file\[char46] If \fIfile\fR is specified, then it is used as the exact name for the log file\[char46] The default log file name used if \fIfile\fR is omitted is \fB/usr/local/var/log/ovn/\fIprogram\fB\[char46]log\fR\[char46]
+.TP
+\fB\-\-syslog\-target=\fR\fIhost\fR\fB:\fR\fIport\fR
+Send syslog messages to UDP \fIport\fR on \fIhost\fR, in addition to the system syslog\[char46] The \fIhost\fR must be a numerical IP address, not a hostname\[char46]
+.TP
+\fB\-\-syslog\-method=\fR\fImethod\fR
+Specify \fImethod\fR as how syslog messages should be sent to syslog daemon\[char46] The following forms are supported:
+.RS
+.IP \(bu
+\fBlibc\fR, to use the libc \fBsyslog()\fR function\[char46] Downside of using this options is that libc adds fixed prefix to every message before it is actually sent to the syslog daemon over \fB/dev/log\fR UNIX domain socket\[char46]
+.IP \(bu
+\fBunix:\fIfile\fB\fR, to use a UNIX domain socket directly\[char46] It is possible to specify arbitrary message format with this option\[char46] However, \fBrsyslogd 8\[char46]9\fR and older versions use hard coded parser function anyway that limits UNIX domain socket use\[char46] If you want to use arbitrary message format with older \fBrsyslogd\fR versions, then use UDP socket to localhost IP address instead\[char46]
+.IP \(bu
+\fBudp:\fIip\fB:\fIport\fB\fR, to use a UDP socket\[char46] With this method it is possible to use arbitrary message format also with older \fBrsyslogd\fR\[char46] When sending syslog messages over UDP socket extra precaution needs to be taken into account, for example, syslog daemon needs to be configured to listen on the specified UDP port, accidental iptables rules could be interfering with local syslog traffic and there are some security considerations that apply to UDP sockets, but do not apply to UNIX domain sockets\[char46]
+.IP \(bu
+\fBnull\fR, to discard all messages logged to syslog\[char46]
+.RE
+.IP
+The default is taken from the \fBOVS_SYSLOG_METHOD\fR environment variable; if it is unset, the default is \fBlibc\fR\[char46]
+.SS "PKI Options"
+.PP
+.PP
+PKI configuration is required in order to use SSL for the connections to the Northbound and Southbound databases\[char46]
+.RS
+.TP
+\fB\-p\fR \fIprivkey\[char46]pem\fR
+.TQ .5in
+\fB\-\-private\-key=\fR\fIprivkey\[char46]pem\fR
+Specifies a PEM file containing the private key used as identity for outgoing SSL connections\[char46]
+.TP
+\fB\-c\fR \fIcert\[char46]pem\fR
+.TQ .5in
+\fB\-\-certificate=\fR\fIcert\[char46]pem\fR
+Specifies a PEM file containing a certificate that certifies the private key specified on \fB\-p\fR or \fB\-\-private\-key\fR to be trustworthy\[char46] The certificate must be signed by the certificate authority (CA) that the peer in SSL connections will use to verify it\[char46]
+.TP
+\fB\-C\fR \fIcacert\[char46]pem\fR
+.TQ .5in
+\fB\-\-ca\-cert=\fR\fIcacert\[char46]pem\fR
+Specifies a PEM file containing the CA certificate for verifying certificates presented to this program by SSL peers\[char46] (This may be the same certificate that SSL peers use to verify the certificate specified on \fB\-c\fR or \fB\-\-certificate\fR, or it may be a different one, depending on the PKI design in use\[char46])
+.TP
+\fB\-C none\fR
+.TQ .5in
+\fB\-\-ca\-cert=none\fR
+Disables verification of certificates presented by SSL peers\[char46] This introduces a security risk, because it means that certificates cannot be verified to be those of known trusted hosts\[char46]
+.RE
+.RS
+.TP
+\fB\-\-bootstrap\-ca\-cert=\fR\fIcacert\[char46]pem\fR
+When \fIcacert\[char46]pem\fR exists, this option has the same effect as \fB\-C\fR or \fB\-\-ca\-cert\fR\[char46] If it does not exist, then the executable will attempt to obtain the CA certificate from the SSL peer on its first SSL connection and save it to the named PEM file\[char46] If it is successful, it will immediately drop the connection and reconnect, and from then on all SSL connections must be authenticated by a certificate signed by the CA certificate thus obtained\[char46]
+.IP
+This option exposes the SSL connection to a man-in-the-middle attack obtaining the initial CA certificate, but it may be useful for bootstrapping\[char46]
+.IP
+This option is only useful if the SSL peer sends its CA certificate as part of the SSL certificate chain\[char46] The SSL protocol does not require the server to send the CA certificate\[char46]
+.IP
+This option is mutually exclusive with \fB\-C\fR and \fB\-\-ca\-cert\fR\[char46]
+.RE
+.RS
+.TP
+\fB\-\-peer\-ca\-cert=\fR\fIpeer-cacert\[char46]pem\fR
+Specifies a PEM file that contains one or more additional certificates to send to SSL peers\[char46] \fIpeer-cacert\[char46]pem\fR should be the CA certificate used to sign the program\(cqs own certificate, that is, the certificate specified on \fB\-c\fR or \fB\-\-certificate\fR\[char46] If the program\(cqs certificate is self-signed, then \fB\-\-certificate\fR and \fB\-\-peer\-ca\-cert\fR should specify the same file\[char46]
+.IP
+This option is not useful in normal operation, because the SSL peer must already have the CA certificate for the peer to have any confidence in the program\(cqs identity\[char46] However, this offers a way for a new installation to bootstrap the CA certificate on its first SSL connection\[char46]
+.RE
+.SS "Other Options"
+.TP
+\fB\-h\fR
+.TQ .5in
+\fB\-\-help\fR
+Prints a brief help message to the console\[char46]
+.TP
+\fB\-V\fR
+.TQ .5in
+\fB\-\-version\fR
+Prints version information to the console\[char46]
+.SH "CONFIGURATION"
+.PP
+.PP
+\fBovn\-controller\fR retrieves most of its configuration information from the local Open vSwitch\(cqs ovsdb-server instance\[char46] The default location is \fBdb\[char46]sock\fR in the local Open vSwitch\(cqs \(dqrun\(dq directory\[char46] It may be overridden by specifying the \fIovs-database\fR argument as an OVSDB active or passive connection method, as described in \fBovsdb\fR(7)\[char46]
+.PP
+.PP
+\fBovn\-controller\fR assumes it gets configuration information from the following keys in the \fBOpen_vSwitch\fR table of the local OVS instance:
+.RS
+.TP
+\fBexternal_ids:system\-id\fR
+The chassis name to use in the Chassis table\[char46] Changing the \fBsystem\-id\fR while \fBovn\-controller\fR is running is not directly supported\[char46] Users have two options: either first gracefully stop \fBovn\-controller\fR or manually delete the stale \fBChassis\fR and \fBChassis_Private\fR records after changing the \fBsystem\-id\fR\[char46] Note that the chassis name can also be provided via the \fBsystem\-id\-override\fR file in the local OVN \(dqetc\(dq directory or via the \fB\-n\fR command-line option\[char46] The following precedence is used: first, the command-line option is read; if not present, the \fBsystem\-id\-override\fR file is read; if not present, then the name configured in the database is used\[char46]
+.TP
+\fBexternal_ids:hostname\fR
+The hostname to use in the Chassis table\[char46]
+.TP
+\fBexternal_ids:ovn\-bridge\fR
+The integration bridge to which logical ports are attached\[char46] The default is \fBbr\-int\fR\[char46] If this bridge does not exist when ovn-controller starts, it will be created automatically with the default configuration suggested in \fBovn\-architecture\fR(7)\[char46] When more than one controllers are running on the same host, \fBexternal_ids:ovn\-bridge\-CHASSIS_NAME\fR should be set for each of them, pointing to a unique bridge\[char46] This is required to avoid controllers stepping on each others\(cq feet\[char46]
+.TP
+\fBexternal_ids:ovn\-bridge\-datapath\-type\fR
+This configuration is optional\[char46] If set, then the datapath type of the integration bridge will be set to the configured value\[char46] If this option is not set, then \fBovn\-controller\fR will not modify the existing \fBdatapath\-type\fR of the integration bridge\[char46]
+.TP
+\fBexternal_ids:ovn\-remote\fR
+The OVN database that this system should connect to for its configuration, in one of the same forms documented above for the \fIovs-database\fR\[char46]
+.TP
+\fBexternal_ids:ovn\-monitor\-all\fR
+A boolean value that tells if \fBovn\-controller\fR should monitor all records of tables in \fIovs-database\fR\[char46] If set to \fBfalse\fR, it will conditionally monitor the records that is needed in the current chassis\[char46]
+.IP
+It is more efficient to set it to \fBtrue\fR in use cases where the chassis would anyway need to monitor most of the records in \fIOVN Southbound\fR database, which would save the overhead of conditions processing, especially for server side\[char46] Typically, set it to \fBtrue\fR for environments that all workloads need to be reachable from each other\[char46]
+.IP
+Default value is \fIfalse\fR\[char46]
+.TP
+\fBexternal_ids:ovn\-remote\-probe\-interval\fR
+The inactivity probe interval of the connection to the OVN database, in milliseconds\[char46] If the value is zero, it disables the connection keepalive feature\[char46]
+.IP
+If the value is nonzero, then it will be forced to a value of at least 1000 ms\[char46]
+.TP
+\fBexternal_ids:ovn\-openflow\-probe\-interval\fR
+The inactivity probe interval of the OpenFlow connection to the OpenvSwitch integration bridge, in seconds\[char46] If the value is zero, it disables the connection keepalive feature\[char46]
+.IP
+If the value is nonzero, then it will be forced to a value of at least 5s\[char46]
+.TP
+\fBexternal_ids:ovn\-encap\-type\fR
+The encapsulation type that a chassis should use to connect to this node\[char46] Multiple encapsulation types may be specified with a comma-separated list\[char46] Each listed encapsulation type will be paired with \fBovn\-encap\-ip\fR\[char46]
+.IP
+Supported tunnel types for connecting hypervisors and gateways are \fBgeneve\fR, \fBvxlan\fR, and \fBstt\fR\[char46]
+.IP
+Due to the limited amount of metadata in \fBvxlan\fR, the capabilities and performance of connected gateways and hypervisors will be reduced versus other tunnel formats\[char46]
+.TP
+\fBexternal_ids:ovn\-encap\-ip\fR
+The IP address that a chassis should use to connect to this node using encapsulation types specified by \fBexternal_ids:ovn\-encap\-type\fR\[char46]
+.TP
+\fBexternal_ids:ovn\-encap\-df_default\fR
+indicates the DF flag handling of the encapulation\[char46] Set to \fBtrue\fR to set the DF flag for new data paths or \fBfalse\fR to clear the DF flag\[char46]
+.TP
+\fBexternal_ids:ovn\-bridge\-mappings\fR
+A list of key-value pairs that map a physical network name to a local ovs bridge that provides connectivity to that network\[char46] An example value mapping two physical network names to two ovs bridges would be: \fBphysnet1:br\-eth0,physnet2:br\-eth1\fR\[char46]
+.TP
+\fBexternal_ids:ovn\-encap\-csum\fR
+\fBovn\-encap\-csum\fR indicates that encapsulation checksums can be transmitted and received with reasonable performance\[char46] It is a hint to senders transmitting data to this chassis that they should use checksums to protect OVN metadata\[char46] Set to \fBtrue\fR to enable or \fBfalse\fR to disable\[char46] Depending on the capabilities of the network interface card, enabling encapsulation checksum may incur performance loss\[char46] In such cases, encapsulation checksums can be disabled\[char46]
+.TP
+\fBexternal_ids:ovn\-encap\-tos\fR
+\fBovn\-encap\-tos\fR indicates the value to be applied to OVN tunnel interface\(cqs option:tos as specified in the Open_vSwitch database Interface table\[char46] Please refer to Open VSwitch Manual for details\[char46]
+.TP
+\fBexternal_ids:ovn\-cms\-options\fR
+A list of options that will be consumed by the CMS Plugin and which specific to this particular chassis\[char46] An example would be: \fBcms_option1,cms_option2:foo\fR\[char46]
+.TP
+\fBexternal_ids:ovn\-transport\-zones\fR
+The transport zone(s) that this chassis belongs to\[char46] Transport zones is a way to group different chassis so that tunnels are only formed between members of the same group(s)\[char46] Multiple transport zones may be specified with a comma-separated list\[char46] For example: tz1,tz2,tz3\[char46]
+.IP
+If not set, the Chassis will be considered part of a default transport zone\[char46]
+.TP
+\fBexternal_ids:ovn\-chassis\-mac\-mappings\fR
+A list of key-value pairs that map a chassis specific mac to a physical network name\[char46] An example value mapping two chassis macs to two physical network names would be: \fBphysnet1:aa:bb:cc:dd:ee:ff,physnet2:a1:b2:c3:d4:e5:f6\fR\[char46] These are the macs that ovn-controller will replace a router port mac with, if packet is going from a distributed router port on vlan type logical switch\[char46]
+.TP
+\fBexternal_ids:ovn\-is\-interconn\fR
+The boolean flag indicates if the chassis is used as an interconnection gateway\[char46]
+.TP
+\fBexternal_ids:ovn\-match\-northd\-version\fR
+The boolean flag indicates if \fBovn\-controller\fR needs to check \fBovn\-northd\fR version\[char46] If this flag is set to true and the \fBovn\-northd\(cqs\fR version (reported in the Southbound database) doesn\(cqt match with the \fBovn\-controller\(cqs\fR internal version, then it will stop processing the southbound and local Open vSwitch database changes\[char46] The default value is considered false if this option is not defined\[char46]
+.TP
+\fBexternal_ids:ovn\-ofctrl\-wait\-before\-clear\fR
+The time, in milliseconds, to wait before clearing flows in OVS after OpenFlow connection/reconnection during \fBovn\-controller\fR initialization\[char46] The purpose of this wait is to give time for \fBovn\-controller\fR to compute the new flows before clearing existing ones, to avoid data plane down time during \fBovn\-controller\fR restart/upgrade at large scale environments where recomputing the flows takes more than a few seconds or even longer\[char46] It is difficult for \fBovn\-controller\fR to determine when the new flows computing is completed, because of the dynamics in the cloud environments, which is why this configuration is provided for users to adjust based on the scale of the environment\[char46] By default, it is 0, which means clearing existing flows without waiting\[char46] Not setting the value, or setting it too small, may result in data plane down time during upgrade/restart, while setting it too big may result in unnecessary extra control plane latency of applying new changes of CMS during upgrade/restart\[char46] In most cases, a slightly bigger value is not harmful, because the extra control plane latency happens only once during the OpenFlow connection\[char46] To get a reasonable range of the value setting, it is recommended to run the below commands on a node in the target environment and then set this configuration to twice the value of \fBMaximum\fR shown in the output of the second command\[char46]
+.RS
+.IP \(bu
+\fBovn\-appctl \-t ovn\-controller inc\-engine/recompute\fR
+.IP \(bu
+\fBovn\-appctl \-t ovn\-controller stopwatch/show flow\-generation\fR
+.RE
+.TP
+\fBexternal_ids:ovn\-enable\-lflow\-cache\fR
+The boolean flag indicates if \fBovn\-controller\fR should enable/disable the logical flow in-memory cache it uses when processing Southbound database logical flow changes\[char46] By default caching is enabled\[char46]
+.TP
+\fBexternal_ids:ovn\-limit\-lflow\-cache\fR
+When used, this configuration value determines the maximum number of logical flow cache entries \fBovn\-controller\fR may create when the logical flow cache is enabled\[char46] By default the size of the cache is unlimited\[char46]
+.TP
+\fBexternal_ids:ovn\-memlimit\-lflow\-cache\-kb\fR
+When used, this configuration value determines the maximum size of the logical flow cache (in KB) \fBovn\-controller\fR may create when the logical flow cache is enabled\[char46] By default the size of the cache is unlimited\[char46]
+.TP
+\fBexternal_ids:ovn\-trim\-limit\-lflow\-cache\fR
+When used, this configuration value sets the minimum number of entries in the logical flow cache starting with which automatic memory trimming is performed\[char46] By default this is set to 10000 entries\[char46]
+.TP
+\fBexternal_ids:ovn\-trim\-wmark\-perc\-lflow\-cache\fR
+When used, this configuration value sets the percentage from the high watermark number of entries in the logical flow cache under which automatic memory trimming is performed\[char46] E\[char46]g\[char46], if the trim watermark percentage is set to 50%, automatic memory trimming happens only when the number of entries in the logical flow cache gets reduced to less than half of the last measured high watermark\[char46] By default this is set to 50\[char46]
+.TP
+\fBexternal_ids:ovn\-trim\-timeout\-ms\fR
+When used, this configuration value specifies the time, in milliseconds, since the last logical flow cache operation after which \fBovn\-controller\fR performs memory trimming regardless of how many entries there are in the cache\[char46] By default this is set to 30000 (30 seconds)\[char46]
+.TP
+\fBexternal_ids:ovn\-set\-local\-ip\fR
+The boolean flag indicates if \fBovn\-controller\fR when create tunnel ports should set \fBlocal_ip\fR parameter\[char46] Can be heplful to pin source outer IP for the tunnel when multiple interfaces are used on the host for overlay traffic\[char46] This is also useful when running multiple \fBovn\-controller\fR instances on the same chassis, in which case this setting will guarantee that their tunnel ports have unique configuration and can exist in parallel\[char46]
+.TP
+\fBexternal_ids:garp\-max\-timeout\-sec\fR
+When used, this configuration value specifies the maximum timeout (in seconds) between two consecutive GARP packets sent by \fBovn\-controller\fR\[char46] \fBovn\-controller\fR by default sends just 4 GARP packets with an exponential backoff timeout\[char46] Setting \fBexternal_ids:garp\-max\-timeout\-sec\fR allows to cap for the exponential backoff used by \fBovn\-controller\fR to send GARPs packets\[char46]
+.RE
+.PP
+.PP
+Most of configuration options listed above can also be set for a particular chassis name (see \fBexternal_ids:system\-id \fR for more information)\[char46] This can be achieved by setting \fBexternal_ids:option\-[chassis]\fR instead of \fBexternal_ids:option\fR\[char46] For example, set \fBexternal_ids:ovn\-encap\-ip\-otherhv\fR to use a particular IP address for the controller instance named \fBotherhv\fR\[char46] Name specific configuration options always override any global options set in the database\[char46]
+.PP
+.PP
+Chassis-specific configuration options in the database plus the ability to configure the chassis name to use via the \fBsystem\-id\-override\fR file or command line allows to run multiple \fBovn\-controller\fR instances with unique chassis names on the same host using the same \fBvswitchd\fR instance\[char46] This may be useful when running a hybrid setup with more than one CMS managing ports on the host, or to use different datapath types on the same host\[char46] Make sure you also set \fBexternal_ids:ovn\-set\-local\-ip\fR when using such configuration\[char46] Also note that this ability is highly experimental and has known limitations (for example, stateful ACLs are not supported)\[char46] Use at your own risk\[char46]
+.PP
+.PP
+\fBovn\-controller\fR reads the following values from the \fBOpen_vSwitch\fR database of the local OVS instance:
+.RS
+.TP
+\fBdatapath\-type\fR from \fBBridge\fR table
+This value is read from local OVS integration bridge row of \fBBridge\fR table and populated in \fBother_config:datapath-type\fR of the \fBChassis\fR table in the OVN_Southbound database\[char46]
+.TP
+\fBiface\-types\fR from \fBOpen_vSwitch\fR table
+This value is populated in \fBexternal_ids:iface-types\fR of the \fBChassis\fR table in the OVN_Southbound database\[char46]
+.TP
+\fBprivate_key\fR, \fBcertificate\fR, \fBca_cert\fR, and \fBbootstrap_ca_cert\fR from \fBSSL\fR table
+These values provide the SSL configuration used for connecting to the OVN southbound database server when an SSL connection type is configured via \fBexternal_ids:ovn\-remote\fR\[char46] Note that this SSL configuration can also be provided via command-line options, the configuration in the database takes precedence if both are present\[char46]
+.RE
+.SH "OPEN VSWITCH DATABASE USAGE"
+.PP
+.PP
+\fBovn\-controller\fR uses a number of \fBexternal_ids\fR keys in the Open vSwitch database to keep track of ports and interfaces\[char46] For proper operation, users should not change or clear these keys:
+.RS
+.TP
+\fBexternal_ids:ovn\-chassis\-id\fR in the \fBPort\fR table
+The presence of this key identifies a tunnel port within the integration bridge as one created by \fBovn\-controller\fR to reach a remote chassis\[char46] Its value is the chassis ID of the remote chassis\[char46]
+.TP
+\fBexternal_ids:ct\-zone\-*\fR in the \fBBridge\fR table
+Logical ports and gateway routers are assigned a connection tracking zone by \fBovn\-controller\fR for stateful services\[char46] To keep state across restarts of \fBovn\-controller\fR, these keys are stored in the integration bridge\(cqs Bridge table\[char46] The name contains a prefix of \fBct\-zone\-\fR followed by the name of the logical port or gateway router\(cqs zone key\[char46] The value for this key identifies the zone used for this port\[char46]
+.TP
+\fBexternal_ids:ovn\-localnet\-port\fR in the \fBPort\fR table
+The presence of this key identifies a patch port as one created by \fBovn\-controller\fR to connect the integration bridge and another bridge to implement a \fBlocalnet\fR logical port\[char46] Its value is the name of the logical port with \fBtype\fR set to \fBlocalnet\fR that the port implements\[char46] See \fBexternal_ids:ovn\-bridge\-mappings\fR, above, for more information\[char46]
+.IP
+Each \fBlocalnet\fR logical port is implemented as a pair of patch ports, one in the integration bridge, one in a different bridge, with the same \fBexternal_ids:ovn\-localnet\-port\fR value\[char46]
+.TP
+\fBexternal_ids:ovn\-l2gateway\-port\fR in the \fBPort\fR table
+The presence of this key identifies a patch port as one created by \fBovn\-controller\fR to connect the integration bridge and another bridge to implement a \fBl2gateway\fR logical port\[char46] Its value is the name of the logical port with \fBtype\fR set to \fBl2gateway\fR that the port implements\[char46] See \fBexternal_ids:ovn\-bridge\-mappings\fR, above, for more information\[char46]
+.IP
+Each \fBl2gateway\fR logical port is implemented as a pair of patch ports, one in the integration bridge, one in a different bridge, with the same \fBexternal_ids:ovn\-l2gateway\-port\fR value\[char46]
+.TP
+\fBexternal\-ids:ovn\-l3gateway\-port\fR in the \fBPort\fR table
+This key identifies a patch port as one created by \fBovn\-controller\fR to implement a \fBl3gateway\fR logical port\[char46] Its value is the name of the logical port with type set to \fBl3gateway\fR\[char46] This patch port is similar to the OVN logical patch port, except that \fBl3gateway\fR port can only be bound to a particular chassis\[char46]
+.TP
+\fBexternal\-ids:ovn\-logical\-patch\-port\fR in the \fBPort\fR table
+This key identifies a patch port as one created by \fBovn\-controller\fR to implement an OVN logical patch port within the integration bridge\[char46] Its value is the name of the OVN logical patch port that it implements\[char46]
+.TP
+\fBexternal\-ids:ovn\-startup\-ts\fR in the \fBBridge\fR table
+This key represents the timestamp (in milliseconds) at which \fBovn\-controller\fR process was started\[char46]
+.TP
+\fBexternal\-ids:ovn\-nb\-cfg\fR in the \fBBridge\fR table
+This key represents the last known \fBOVN_Southbound\[char46]SB_Global\[char46]nb_cfg\fR value for which all flows have been successfully installed in OVS\[char46]
+.TP
+\fBexternal\-ids:ovn\-nb\-cfg\-ts\fR in the \fBBridge\fR table
+This key represents the timestamp (in milliseconds) of the last known \fBOVN_Southbound\[char46]SB_Global\[char46]nb_cfg\fR value for which all flows have been successfully installed in OVS\[char46]
+.TP
+\fBexternal_ids:ovn\-installed\fR and \fBexternal_ids:ovn\-installed\-ts\fR in the \fBInterface\fR table
+This key is set after all openflow operations corresponding to the OVS interface have been processed by ovs-vswitchd\[char46] At the same time a timestamp, in milliseconds since the epoch, is stored in \fBexternal_ids:ovn\-installed\-ts\fR\[char46]
+.RE
+.SH "OVN SOUTHBOUND DATABASE USAGE"
+.PP
+.PP
+\fBovn\-controller\fR reads from much of the \fBOVN_Southbound\fR database to guide its operation\[char46] \fBovn\-controller\fR also writes to the following tables:
+.RS
+.TP
+\fBChassis\fR
+Upon startup, \fBovn\-controller\fR creates a row in this table to represent its own chassis\[char46] Upon graceful termination, e\[char46]g\[char46] with \fBovs\-appctl \-t ovn\-controller exit\fR (but not \fBSIGTERM\fR), \fBovn\-controller\fR removes its row\[char46]
+.TP
+\fBEncap\fR
+Upon startup, \fBovn\-controller\fR creates a row or rows in this table that represent the tunnel encapsulations by which its chassis can be reached, and points its \fBChassis\fR row to them\[char46] Upon graceful termination, \fBovn\-controller\fR removes these rows\[char46]
+.TP
+\fBPort_Binding\fR
+At runtime, \fBovn\-controller\fR sets the \fBchassis\fR columns of ports that are resident on its chassis to point to its \fBChassis\fR row, and, conversely, clears the \fBchassis\fR column of ports that point to its \fBChassis\fR row but are no longer resident on its chassis\[char46] The \fBchassis\fR column has a weak reference type, so when \fBovn\-controller\fR gracefully exits and removes its \fBChassis\fR row, the database server automatically clears any remaining references to that row\[char46]
+.TP
+\fBMAC_Binding\fR
+At runtime, \fBovn\-controller\fR updates the \fBMAC_Binding\fR table as instructed by \fBput_arp\fR and \fBput_nd\fR logical actions\[char46] These changes persist beyond the lifetime of \fBovn\-controller\fR\[char46]
+.RE
+.SH "RUNTIME MANAGEMENT COMMANDS"
+.PP
+.PP
+\fBovs\-appctl\fR can send commands to a running \fBovn\-controller\fR process\[char46] The currently supported commands are described below\[char46]
+.RS
+.TP
+\fBexit\fR
+Causes \fBovn\-controller\fR to gracefully terminate\[char46]
+.TP
+\fBct\-zone\-list\fR
+Lists each local logical port and its connection tracking zone\[char46]
+.TP
+\fBmeter\-table\-list\fR
+Lists each meter table entry and its local meter id\[char46]
+.TP
+\fBgroup\-table\-list\fR
+Lists each group table entry and its local group id\[char46]
+.TP
+\fBinject\-pkt\fR \fImicroflow\fR
+Injects \fImicroflow\fR into the connected Open vSwitch instance\[char46] \fImicroflow\fR must contain an ingress logical port (\fBinport\fR argument) that is present on the Open vSwitch instance\[char46]
+.IP
+The \fImicroflow\fR argument describes the packet whose forwarding is to be simulated, in the syntax of an OVN logical expression, as described in \fBovn\-sb\fR(5), to express constraints\[char46] The parser understands prerequisites; for example, if the expression refers to \fBip4\[char46]src\fR, there is no need to explicitly state \fBip4\fR or \fBeth\[char46]type ==
+0x800\fR\[char46]
+.TP
+\fBconnection\-status\fR
+Show OVN SBDB connection status for the chassis\[char46]
+.TP
+\fBrecompute\fR
+Trigger a full compute iteration in \fBovn\-controller\fR based on the contents of the Southbound database and local OVS database\[char46]
+.IP
+This command is intended to use only in the event of a bug in the incremental processing engine in \fBovn\-controller\fR to avoid inconsistent states\[char46] It should therefore be used with care as full recomputes are cpu intensive\[char46]
+.TP
+\fBsb\-cluster\-state\-reset\fR
+Reset southbound database cluster status when databases are destroyed and rebuilt\[char46]
+.IP
+If all databases in a clustered southbound database are removed from disk, then the stored index of all databases will be reset to zero\[char46] This will cause ovn-controller to be unable to read or write to the southbound database, because it will always detect the data as stale\[char46] In such a case, run this command so that ovn-controller will reset its local index so that it can interact with the southbound database again\[char46]
+.TP
+\fBdebug/delay\-nb\-cfg\-report\fR \fIseconds\fR
+This command is used to delay ovn-controller updating the \fBnb_cfg\fR back to \fBOVN_Southbound\fR database\[char46] This is useful when \fBovn\-nbctl \-\-wait=hv\fR is used to measure end-to-end latency in a large scale environment\[char46] See \fBovn\-nbctl\fR(8) for more details\[char46]
+.TP
+\fBlflow\-cache/flush\fR
+Flushes the \fBovn\-controller\fR logical flow cache\[char46]
+.TP
+\fBlflow\-cache/show\-stats\fR
+Displays logical flow cache statistics: enabled/disabled, per cache type entry counts\[char46]
+.TP
+\fBinc\-engine/show\-stats\fR
+Display \fBovn\-controller\fR engine counters\[char46] For each engine node the following counters have been added:
+.RS
+.IP \(bu
+\fBrecompute\fR
+.IP \(bu
+\fBcompute\fR
+.IP \(bu
+\fBabort\fR
+.RE
+.TP
+\fBinc\-engine/show\-stats \fIengine_node_name\fB \fIcounter_name\fB\fR
+Display the \fBovn\-controller\fR engine counter(s) for the specified \fIengine_node_name\fR\[char46] \fIcounter_name\fR is optional and can be one of \fBrecompute\fR, \fBcompute\fR or \fBabort\fR\[char46]
+.TP
+\fBinc\-engine/clear\-stats\fR
+Reset \fBovn\-controller\fR engine counters\[char46]
+.RE
diff --git a/support/dist-docs-branch-23.06/ovn-controller.8.html b/support/dist-docs-branch-23.06/ovn-controller.8.html
new file mode 100644
index 00000000..191063a8
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-controller.8.html
@@ -0,0 +1,784 @@
+<html><head><meta charset="UTF-8"></head><body><pre>
+<u>o</u><u>v</u><u>n</u><u>-</u><u>c</u><u>o</u><u>n</u><u>t</u><u>r</u><u>o</u><u>l</u><u>l</u><u>e</u><u>r</u>(8)                 OVN Manual                 <u>o</u><u>v</u><u>n</u><u>-</u><u>c</u><u>o</u><u>n</u><u>t</u><u>r</u><u>o</u><u>l</u><u>l</u><u>e</u><u>r</u>(8)
+
+<b>N</b><b>A</b><b>M</b><b>E</b>
+       ovn-controller - Open Virtual Network local controller
+
+<b>S</b><b>Y</b><b>N</b><b>O</b><b>P</b><b>S</b><b>I</b><b>S</b>
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> [<u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u>] [<u>o</u><u>v</u><u>s</u><u>-</u><u>d</u><u>a</u><u>t</u><u>a</u><u>b</u><u>a</u><u>s</u><u>e</u>]
+
+<b>D</b><b>E</b><b>S</b><b>C</b><b>R</b><b>I</b><b>P</b><b>T</b><b>I</b><b>O</b><b>N</b>
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> is the local controller daemon for OVN, the Open Virtual
+       Network.  It connects up to the OVN Southbound database (see <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b>(5))
+       over the OVSDB protocol, and down to the  Open  vSwitch  database  (see
+       <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>d</b><b>.</b><b>c</b><b>o</b><b>n</b><b>f</b><b>.</b><b>d</b><b>b</b>(5)) over the OVSDB protocol and to <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>d</b>(8)
+       via OpenFlow. Each hypervisor and software gateway in an OVN deployment
+       runs its own independent copy of <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>; thus, <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>’s
+       downward  connections  are machine-local and do not run over a physical
+       network.
+
+<b>A</b><b>C</b><b>L</b> <b>L</b><b>O</b><b>G</b><b>G</b><b>I</b><b>N</b><b>G</b>
+       ACL log messages are logged through <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>’s logging mechanism.
+       ACL log entries have the module <b>a</b><b>c</b><b>l</b><b>_</b><b>l</b><b>o</b><b>g</b> at log level <b>i</b><b>n</b><b>f</b><b>o</b>.  Configuring
+       logging is described below in the <b>L</b><b>o</b><b>g</b><b>g</b><b>i</b><b>n</b><b>g</b> <b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> section.
+
+<b>O</b><b>P</b><b>T</b><b>I</b><b>O</b><b>N</b><b>S</b>
+   <b>D</b><b>a</b><b>e</b><b>m</b><b>o</b><b>n</b> <b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+       <b>-</b><b>-</b><b>p</b><b>i</b><b>d</b><b>f</b><b>i</b><b>l</b><b>e</b>[<b>=</b><u>p</u><u>i</u><u>d</u><u>f</u><u>i</u><u>l</u><u>e</u>]
+              Causes a file (by default, <u>p</u><u>r</u><u>o</u><u>g</u><u>r</u><u>a</u><u>m</u><b>.</b><b>p</b><b>i</b><b>d</b>) to be created indicating
+              the  PID  of the running process. If the <u>p</u><u>i</u><u>d</u><u>f</u><u>i</u><u>l</u><u>e</u> argument is not
+              specified, or if it does not begin with <b>/</b>, then it is created in
+              .
+
+              If <b>-</b><b>-</b><b>p</b><b>i</b><b>d</b><b>f</b><b>i</b><b>l</b><b>e</b> is not specified, no pidfile is created.
+
+       <b>-</b><b>-</b><b>o</b><b>v</b><b>e</b><b>r</b><b>w</b><b>r</b><b>i</b><b>t</b><b>e</b><b>-</b><b>p</b><b>i</b><b>d</b><b>f</b><b>i</b><b>l</b><b>e</b>
+              By default, when <b>-</b><b>-</b><b>p</b><b>i</b><b>d</b><b>f</b><b>i</b><b>l</b><b>e</b> is specified and the  specified  pid‐
+              file already exists and is locked by a running process, the dae‐
+              mon refuses to start. Specify <b>-</b><b>-</b><b>o</b><b>v</b><b>e</b><b>r</b><b>w</b><b>r</b><b>i</b><b>t</b><b>e</b><b>-</b><b>p</b><b>i</b><b>d</b><b>f</b><b>i</b><b>l</b><b>e</b> to cause it to
+              instead overwrite the pidfile.
+
+              When <b>-</b><b>-</b><b>p</b><b>i</b><b>d</b><b>f</b><b>i</b><b>l</b><b>e</b> is not specified, this option has no effect.
+
+       <b>-</b><b>-</b><b>d</b><b>e</b><b>t</b><b>a</b><b>c</b><b>h</b>
+              Runs  this  program  as a background process. The process forks,
+              and in the child it starts a new session,  closes  the  standard
+              file descriptors (which has the side effect of disabling logging
+              to  the  console), and changes its current directory to the root
+              (unless <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>c</b><b>h</b><b>d</b><b>i</b><b>r</b> is specified). After the child completes  its
+              initialization, the parent exits.
+
+       <b>-</b><b>-</b><b>m</b><b>o</b><b>n</b><b>i</b><b>t</b><b>o</b><b>r</b>
+              Creates  an  additional  process  to monitor this program. If it
+              dies due to a signal that indicates a programming  error  (<b>S</b><b>I</b><b>G</b><b>A</b>‐‐
+              <b>B</b><b>R</b><b>T</b>, <b>S</b><b>I</b><b>G</b><b>A</b><b>L</b><b>R</b><b>M</b>, <b>S</b><b>I</b><b>G</b><b>B</b><b>U</b><b>S</b>, <b>S</b><b>I</b><b>G</b><b>F</b><b>P</b><b>E</b>, <b>S</b><b>I</b><b>G</b><b>I</b><b>L</b><b>L</b>, <b>S</b><b>I</b><b>G</b><b>P</b><b>I</b><b>P</b><b>E</b>, <b>S</b><b>I</b><b>G</b><b>S</b><b>E</b><b>G</b><b>V</b>, <b>S</b><b>I</b><b>G</b><b>X</b><b>C</b><b>P</b><b>U</b>,
+              or <b>S</b><b>I</b><b>G</b><b>X</b><b>F</b><b>S</b><b>Z</b>) then the monitor process starts a new copy of it. If
+              the daemon dies or exits for another reason, the monitor process
+              exits.
+
+              This  option  is  normally used with <b>-</b><b>-</b><b>d</b><b>e</b><b>t</b><b>a</b><b>c</b><b>h</b>, but it also func‐
+              tions without it.
+
+       <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>c</b><b>h</b><b>d</b><b>i</b><b>r</b>
+              By default, when <b>-</b><b>-</b><b>d</b><b>e</b><b>t</b><b>a</b><b>c</b><b>h</b> is specified, the daemon  changes  its
+              current  working  directory  to  the root directory after it de‐
+              taches. Otherwise, invoking the daemon from a carelessly  chosen
+              directory  would  prevent  the administrator from unmounting the
+              file system that holds that directory.
+
+              Specifying <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>c</b><b>h</b><b>d</b><b>i</b><b>r</b> suppresses this behavior,  preventing  the
+              daemon  from changing its current working directory. This may be
+              useful for collecting core files, since it is common behavior to
+              write core dumps into the current working directory and the root
+              directory is not a good directory to use.
+
+              This option has no effect when <b>-</b><b>-</b><b>d</b><b>e</b><b>t</b><b>a</b><b>c</b><b>h</b> is not specified.
+
+       <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>s</b><b>e</b><b>l</b><b>f</b><b>-</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>n</b><b>e</b><b>m</b><b>e</b><b>n</b><b>t</b>
+              By default this daemon will try to self-confine itself  to  work
+              with  files  under  well-known  directories  determined at build
+              time. It is better to stick with this default behavior  and  not
+              to  use  this  flag  unless some other Access Control is used to
+              confine daemon. Note that in contrast to  other  access  control
+              implementations  that  are  typically enforced from kernel-space
+              (e.g. DAC or MAC), self-confinement is imposed  from  the  user-
+              space daemon itself and hence should not be considered as a full
+              confinement  strategy,  but instead should be viewed as an addi‐
+              tional layer of security.
+
+       <b>-</b><b>-</b><b>u</b><b>s</b><b>e</b><b>r</b><b>=</b><u>u</u><u>s</u><u>e</u><u>r</u><b>:</b><u>g</u><u>r</u><u>o</u><u>u</u><u>p</u>
+              Causes this program to run as  a  different  user  specified  in
+              <u>u</u><u>s</u><u>e</u><u>r</u><b>:</b><u>g</u><u>r</u><u>o</u><u>u</u><u>p</u>,  thus  dropping  most  of the root privileges. Short
+              forms <u>u</u><u>s</u><u>e</u><u>r</u> and <b>:</b><u>g</u><u>r</u><u>o</u><u>u</u><u>p</u> are also allowed,  with  current  user  or
+              group  assumed,  respectively.  Only daemons started by the root
+              user accepts this argument.
+
+              On   Linux,   daemons   will   be   granted   <b>C</b><b>A</b><b>P</b><b>_</b><b>I</b><b>P</b><b>C</b><b>_</b><b>L</b><b>O</b><b>C</b><b>K</b>   and
+              <b>C</b><b>A</b><b>P</b><b>_</b><b>N</b><b>E</b><b>T</b><b>_</b><b>B</b><b>I</b><b>N</b><b>D</b><b>_</b><b>S</b><b>E</b><b>R</b><b>V</b><b>I</b><b>C</b><b>E</b><b>S</b>  before  dropping root privileges. Daemons
+              that interact with a datapath, such  as  <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>d</b>,  will  be
+              granted  three  additional  capabilities,  namely <b>C</b><b>A</b><b>P</b><b>_</b><b>N</b><b>E</b><b>T</b><b>_</b><b>A</b><b>D</b><b>M</b><b>I</b><b>N</b>,
+              <b>C</b><b>A</b><b>P</b><b>_</b><b>N</b><b>E</b><b>T</b><b>_</b><b>B</b><b>R</b><b>O</b><b>A</b><b>D</b><b>C</b><b>A</b><b>S</b><b>T</b> and <b>C</b><b>A</b><b>P</b><b>_</b><b>N</b><b>E</b><b>T</b><b>_</b><b>R</b><b>A</b><b>W</b>. The  capability  change  will
+              apply even if the new user is root.
+
+              On Windows, this option is not currently supported. For security
+              reasons,  specifying  this  option will cause the daemon process
+              not to start.
+
+   <b>L</b><b>o</b><b>g</b><b>g</b><b>i</b><b>n</b><b>g</b> <b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+       <b>-</b><b>v</b>[<u>s</u><u>p</u><u>e</u><u>c</u>]
+       <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>b</b><b>o</b><b>s</b><b>e</b><b>=</b>[<u>s</u><u>p</u><u>e</u><u>c</u>]
+            Sets logging levels. Without any <u>s</u><u>p</u><u>e</u><u>c</u>,  sets  the  log  level  for
+            every  module and destination to <b>d</b><b>b</b><b>g</b>. Otherwise, <u>s</u><u>p</u><u>e</u><u>c</u> is a list of
+            words separated by spaces or commas or colons, up to one from each
+            category below:
+
+            •      A valid module name, as displayed by the <b>v</b><b>l</b><b>o</b><b>g</b><b>/</b><b>l</b><b>i</b><b>s</b><b>t</b>  command
+                   on <b>o</b><b>v</b><b>s</b><b>-</b><b>a</b><b>p</b><b>p</b><b>c</b><b>t</b><b>l</b>(8), limits the log level change to the speci‐
+                   fied module.
+
+            •      <b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b>,  <b>c</b><b>o</b><b>n</b><b>s</b><b>o</b><b>l</b><b>e</b>, or <b>f</b><b>i</b><b>l</b><b>e</b>, to limit the log level change to
+                   only to the system log, to the console, or to a  file,  re‐
+                   spectively.  (If  <b>-</b><b>-</b><b>d</b><b>e</b><b>t</b><b>a</b><b>c</b><b>h</b>  is specified, the daemon closes
+                   its standard file descriptors, so logging  to  the  console
+                   will have no effect.)
+
+                   On  Windows  platform,  <b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b> is accepted as a word and is
+                   only useful along with the <b>-</b><b>-</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>-</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> option (the word
+                   has no effect otherwise).
+
+            •      <b>o</b><b>f</b><b>f</b>, <b>e</b><b>m</b><b>e</b><b>r</b>, <b>e</b><b>r</b><b>r</b>, <b>w</b><b>a</b><b>r</b><b>n</b>, <b>i</b><b>n</b><b>f</b><b>o</b>, or  <b>d</b><b>b</b><b>g</b>,  to  control  the  log
+                   level.  Messages  of  the  given severity or higher will be
+                   logged, and messages of lower  severity  will  be  filtered
+                   out.  <b>o</b><b>f</b><b>f</b> filters out all messages. See <b>o</b><b>v</b><b>s</b><b>-</b><b>a</b><b>p</b><b>p</b><b>c</b><b>t</b><b>l</b>(8) for a
+                   definition of each log level.
+
+            Case is not significant within <u>s</u><u>p</u><u>e</u><u>c</u>.
+
+            Regardless of the log levels set for <b>f</b><b>i</b><b>l</b><b>e</b>, logging to a file  will
+            not take place unless <b>-</b><b>-</b><b>l</b><b>o</b><b>g</b><b>-</b><b>f</b><b>i</b><b>l</b><b>e</b> is also specified (see below).
+
+            For compatibility with older versions of OVS, <b>a</b><b>n</b><b>y</b> is accepted as a
+            word but has no effect.
+
+       <b>-</b><b>v</b>
+       <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>b</b><b>o</b><b>s</b><b>e</b>
+            Sets  the  maximum  logging  verbosity level, equivalent to <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b>‐‐
+            <b>b</b><b>o</b><b>s</b><b>e</b><b>=</b><b>d</b><b>b</b><b>g</b>.
+
+       <b>-</b><b>v</b><b>P</b><b>A</b><b>T</b><b>T</b><b>E</b><b>R</b><b>N</b><b>:</b><u>d</u><u>e</u><u>s</u><u>t</u><u>i</u><u>n</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u><b>:</b><u>p</u><u>a</u><u>t</u><u>t</u><u>e</u><u>r</u><u>n</u>
+       <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>b</b><b>o</b><b>s</b><b>e</b><b>=</b><b>P</b><b>A</b><b>T</b><b>T</b><b>E</b><b>R</b><b>N</b><b>:</b><u>d</u><u>e</u><u>s</u><u>t</u><u>i</u><u>n</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u><b>:</b><u>p</u><u>a</u><u>t</u><u>t</u><u>e</u><u>r</u><u>n</u>
+            Sets the log pattern for <u>d</u><u>e</u><u>s</u><u>t</u><u>i</u><u>n</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u> to <u>p</u><u>a</u><u>t</u><u>t</u><u>e</u><u>r</u><u>n</u>. Refer to  <b>o</b><b>v</b><b>s</b><b>-</b><b>a</b><b>p</b>‐‐
+            <b>p</b><b>c</b><b>t</b><b>l</b>(8) for a description of the valid syntax for <u>p</u><u>a</u><u>t</u><u>t</u><u>e</u><u>r</u><u>n</u>.
+
+       <b>-</b><b>v</b><b>F</b><b>A</b><b>C</b><b>I</b><b>L</b><b>I</b><b>T</b><b>Y</b><b>:</b><u>f</u><u>a</u><u>c</u><u>i</u><u>l</u><u>i</u><u>t</u><u>y</u>
+       <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>b</b><b>o</b><b>s</b><b>e</b><b>=</b><b>F</b><b>A</b><b>C</b><b>I</b><b>L</b><b>I</b><b>T</b><b>Y</b><b>:</b><u>f</u><u>a</u><u>c</u><u>i</u><u>l</u><u>i</u><u>t</u><u>y</u>
+            Sets  the RFC5424 facility of the log message. <u>f</u><u>a</u><u>c</u><u>i</u><u>l</u><u>i</u><u>t</u><u>y</u> can be one
+            of <b>k</b><b>e</b><b>r</b><b>n</b>, <b>u</b><b>s</b><b>e</b><b>r</b>, <b>m</b><b>a</b><b>i</b><b>l</b>, <b>d</b><b>a</b><b>e</b><b>m</b><b>o</b><b>n</b>, <b>a</b><b>u</b><b>t</b><b>h</b>, <b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b>, <b>l</b><b>p</b><b>r</b>, <b>n</b><b>e</b><b>w</b><b>s</b>, <b>u</b><b>u</b><b>c</b><b>p</b>, <b>c</b><b>l</b><b>o</b><b>c</b><b>k</b>,
+            <b>f</b><b>t</b><b>p</b>, <b>n</b><b>t</b><b>p</b>, <b>a</b><b>u</b><b>d</b><b>i</b><b>t</b>, <b>a</b><b>l</b><b>e</b><b>r</b><b>t</b>, <b>c</b><b>l</b><b>o</b><b>c</b><b>k</b><b>2</b>, <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>0</b>,  <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>1</b>,  <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>2</b>,  <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>3</b>,
+            <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>4</b>, <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>5</b>, <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>6</b> or <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>7</b>. If this option is not specified,
+            <b>d</b><b>a</b><b>e</b><b>m</b><b>o</b><b>n</b>  is used as the default for the local system syslog and <b>l</b><b>o</b>‐‐
+            <b>c</b><b>a</b><b>l</b><b>0</b> is used while sending a message to the  target  provided  via
+            the <b>-</b><b>-</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>-</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> option.
+
+       <b>-</b><b>-</b><b>l</b><b>o</b><b>g</b><b>-</b><b>f</b><b>i</b><b>l</b><b>e</b>[<b>=</b><u>f</u><u>i</u><u>l</u><u>e</u>]
+            Enables  logging  to a file. If <u>f</u><u>i</u><u>l</u><u>e</u> is specified, then it is used
+            as the exact name for the log file. The default log file name used
+            if <u>f</u><u>i</u><u>l</u><u>e</u> is omitted is <b>/</b><b>u</b><b>s</b><b>r</b><b>/</b><b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>/</b><b>v</b><b>a</b><b>r</b><b>/</b><b>l</b><b>o</b><b>g</b><b>/</b><b>o</b><b>v</b><b>n</b><b>/</b><u>p</u><u>r</u><u>o</u><u>g</u><u>r</u><u>a</u><u>m</u><b>.</b><b>l</b><b>o</b><b>g</b>.
+
+       <b>-</b><b>-</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>-</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b><b>=</b><u>h</u><u>o</u><u>s</u><u>t</u><b>:</b><u>p</u><u>o</u><u>r</u><u>t</u>
+            Send syslog messages to UDP <u>p</u><u>o</u><u>r</u><u>t</u> on <u>h</u><u>o</u><u>s</u><u>t</u>, in addition to the  sys‐
+            tem  syslog.  The <u>h</u><u>o</u><u>s</u><u>t</u> must be a numerical IP address, not a host‐
+            name.
+
+       <b>-</b><b>-</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>-</b><b>m</b><b>e</b><b>t</b><b>h</b><b>o</b><b>d</b><b>=</b><u>m</u><u>e</u><u>t</u><u>h</u><u>o</u><u>d</u>
+            Specify <u>m</u><u>e</u><u>t</u><u>h</u><u>o</u><u>d</u> as how syslog messages should  be  sent  to  syslog
+            daemon. The following forms are supported:
+
+            •      <b>l</b><b>i</b><b>b</b><b>c</b>,  to use the libc <b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>(</b><b>)</b> function. Downside of using
+                   this options is that libc adds fixed prefix to  every  mes‐
+                   sage  before  it is actually sent to the syslog daemon over
+                   <b>/</b><b>d</b><b>e</b><b>v</b><b>/</b><b>l</b><b>o</b><b>g</b> UNIX domain socket.
+
+            •      <b>u</b><b>n</b><b>i</b><b>x</b><b>:</b><u>f</u><u>i</u><u>l</u><u>e</u>, to use a UNIX domain socket directly. It is pos‐
+                   sible to specify arbitrary message format with this option.
+                   However, <b>r</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>d</b> <b>8</b><b>.</b><b>9</b> and older  versions  use  hard  coded
+                   parser  function anyway that limits UNIX domain socket use.
+                   If you want to use  arbitrary  message  format  with  older
+                   <b>r</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>d</b>  versions, then use UDP socket to localhost IP ad‐
+                   dress instead.
+
+            •      <b>u</b><b>d</b><b>p</b><b>:</b><u>i</u><u>p</u><b>:</b><u>p</u><u>o</u><u>r</u><u>t</u>, to use a UDP socket. With this  method  it  is
+                   possible  to  use  arbitrary message format also with older
+                   <b>r</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>d</b>. When sending syslog messages over UDP socket  ex‐
+                   tra precaution needs to be taken into account, for example,
+                   syslog daemon needs to be configured to listen on the spec‐
+                   ified  UDP  port, accidental iptables rules could be inter‐
+                   fering with local syslog traffic and there are  some  secu‐
+                   rity  considerations  that apply to UDP sockets, but do not
+                   apply to UNIX domain sockets.
+
+            •      <b>n</b><b>u</b><b>l</b><b>l</b>, to discard all messages logged to syslog.
+
+            The default is taken from the <b>O</b><b>V</b><b>S</b><b>_</b><b>S</b><b>Y</b><b>S</b><b>L</b><b>O</b><b>G</b><b>_</b><b>M</b><b>E</b><b>T</b><b>H</b><b>O</b><b>D</b> environment  vari‐
+            able; if it is unset, the default is <b>l</b><b>i</b><b>b</b><b>c</b>.
+
+   <b>P</b><b>K</b><b>I</b> <b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+       PKI  configuration  is required in order to use SSL for the connections
+       to the Northbound and Southbound databases.
+
+              <b>-</b><b>p</b> <u>p</u><u>r</u><u>i</u><u>v</u><u>k</u><u>e</u><u>y</u><u>.</u><u>p</u><u>e</u><u>m</u>
+              <b>-</b><b>-</b><b>p</b><b>r</b><b>i</b><b>v</b><b>a</b><b>t</b><b>e</b><b>-</b><b>k</b><b>e</b><b>y</b><b>=</b><u>p</u><u>r</u><u>i</u><u>v</u><u>k</u><u>e</u><u>y</u><u>.</u><u>p</u><u>e</u><u>m</u>
+                   Specifies a PEM file containing the  private  key  used  as
+                   identity for outgoing SSL connections.
+
+              <b>-</b><b>c</b> <u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+              <b>-</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>i</b><b>f</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b><b>=</b><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+                   Specifies  a  PEM file containing a certificate that certi‐
+                   fies the private key specified on <b>-</b><b>p</b> or <b>-</b><b>-</b><b>p</b><b>r</b><b>i</b><b>v</b><b>a</b><b>t</b><b>e</b><b>-</b><b>k</b><b>e</b><b>y</b> to be
+                   trustworthy. The certificate must be signed by the certifi‐
+                   cate authority (CA) that the peer in SSL  connections  will
+                   use to verify it.
+
+              <b>-</b><b>C</b> <u>c</u><u>a</u><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+              <b>-</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>=</b><u>c</u><u>a</u><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+                   Specifies a PEM file containing the CA certificate for ver‐
+                   ifying certificates presented to this program by SSL peers.
+                   (This  may  be  the  same certificate that SSL peers use to
+                   verify the certificate specified on <b>-</b><b>c</b> or <b>-</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>i</b><b>f</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b>, or
+                   it may be a different one, depending on the PKI  design  in
+                   use.)
+
+              <b>-</b><b>C</b> <b>n</b><b>o</b><b>n</b><b>e</b>
+              <b>-</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>=</b><b>n</b><b>o</b><b>n</b><b>e</b>
+                   Disables  verification  of  certificates  presented  by SSL
+                   peers. This introduces a security risk,  because  it  means
+                   that  certificates  cannot be verified to be those of known
+                   trusted hosts.
+
+              <b>-</b><b>-</b><b>b</b><b>o</b><b>o</b><b>t</b><b>s</b><b>t</b><b>r</b><b>a</b><b>p</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>=</b><u>c</u><u>a</u><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+                     When <u>c</u><u>a</u><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u> exists, this option has the  same  effect
+                     as  <b>-</b><b>C</b>  or <b>-</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b>. If it does not exist, then the exe‐
+                     cutable will attempt to obtain the  CA  certificate  from
+                     the  SSL  peer on its first SSL connection and save it to
+                     the named PEM file. If it is successful, it will  immedi‐
+                     ately drop the connection and reconnect, and from then on
+                     all  SSL  connections must be authenticated by a certifi‐
+                     cate signed by the CA certificate thus obtained.
+
+                     This option exposes the SSL connection to  a  man-in-the-
+                     middle  attack  obtaining the initial CA certificate, but
+                     it may be useful for bootstrapping.
+
+                     This option is only useful if the SSL peer sends  its  CA
+                     certificate as part of the SSL certificate chain. The SSL
+                     protocol  does not require the server to send the CA cer‐
+                     tificate.
+
+                     This option is mutually exclusive with <b>-</b><b>C</b> and <b>-</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b>.
+
+              <b>-</b><b>-</b><b>p</b><b>e</b><b>e</b><b>r</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>=</b><u>p</u><u>e</u><u>e</u><u>r</u><u>-</u><u>c</u><u>a</u><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+                     Specifies a PEM file that contains one or more additional
+                     certificates to send to SSL peers. <u>p</u><u>e</u><u>e</u><u>r</u><u>-</u><u>c</u><u>a</u><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u> should
+                     be the CA certificate used to sign the program’s own cer‐
+                     tificate, that is, the certificate  specified  on  <b>-</b><b>c</b>  or
+                     <b>-</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>i</b><b>f</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b>.  If  the  program’s  certificate  is self-
+                     signed,  then  <b>-</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>i</b><b>f</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b>  and  <b>-</b><b>-</b><b>p</b><b>e</b><b>e</b><b>r</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b>  should
+                     specify the same file.
+
+                     This  option  is  not useful in normal operation, because
+                     the SSL peer must already have the CA certificate for the
+                     peer to have any confidence in  the  program’s  identity.
+                     However,  this  offers  a  way  for a new installation to
+                     bootstrap the CA certificate on its first SSL connection.
+
+   <b>O</b><b>t</b><b>h</b><b>e</b><b>r</b> <b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+       <b>-</b><b>h</b>
+       <b>-</b><b>-</b><b>h</b><b>e</b><b>l</b><b>p</b>
+            Prints a brief help message to the console.
+
+       <b>-</b><b>V</b>
+       <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>s</b><b>i</b><b>o</b><b>n</b>
+            Prints version information to the console.
+
+<b>C</b><b>O</b><b>N</b><b>F</b><b>I</b><b>G</b><b>U</b><b>R</b><b>A</b><b>T</b><b>I</b><b>O</b><b>N</b>
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> retrieves most of its configuration information from the
+       local Open vSwitch’s ovsdb-server instance.  The  default  location  is
+       <b>d</b><b>b</b><b>.</b><b>s</b><b>o</b><b>c</b><b>k</b> in the local Open vSwitch’s "run" directory. It may be overrid‐
+       den  by specifying the <u>o</u><u>v</u><u>s</u><u>-</u><u>d</u><u>a</u><u>t</u><u>a</u><u>b</u><u>a</u><u>s</u><u>e</u> argument as an OVSDB active or pas‐
+       sive connection method, as described in <b>o</b><b>v</b><b>s</b><b>d</b><b>b</b>(7).
+
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> assumes it gets configuration information from the  fol‐
+       lowing keys in the <b>O</b><b>p</b><b>e</b><b>n</b><b>_</b><b>v</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b> table of the local OVS instance:
+
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>s</b><b>y</b><b>s</b><b>t</b><b>e</b><b>m</b><b>-</b><b>i</b><b>d</b>
+                     The  chassis  name  to use in the Chassis table. Changing
+                     the <b>s</b><b>y</b><b>s</b><b>t</b><b>e</b><b>m</b><b>-</b><b>i</b><b>d</b> while <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> is running is not  di‐
+                     rectly  supported.  Users  have two options: either first
+                     gracefully stop <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>  or  manually  delete  the
+                     stale  <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> and <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>P</b><b>r</b><b>i</b><b>v</b><b>a</b><b>t</b><b>e</b> records after changing
+                     the <b>s</b><b>y</b><b>s</b><b>t</b><b>e</b><b>m</b><b>-</b><b>i</b><b>d</b>. Note that the chassis  name  can  also  be
+                     provided via the <b>s</b><b>y</b><b>s</b><b>t</b><b>e</b><b>m</b><b>-</b><b>i</b><b>d</b><b>-</b><b>o</b><b>v</b><b>e</b><b>r</b><b>r</b><b>i</b><b>d</b><b>e</b> file in the local OVN
+                     "etc"  directory  or  via the <b>-</b><b>n</b> command-line option. The
+                     following precedence is used: first, the command-line op‐
+                     tion is read; if not present, the <b>s</b><b>y</b><b>s</b><b>t</b><b>e</b><b>m</b><b>-</b><b>i</b><b>d</b><b>-</b><b>o</b><b>v</b><b>e</b><b>r</b><b>r</b><b>i</b><b>d</b><b>e</b> file
+                     is read; if not present, then the name configured in  the
+                     database is used.
+
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>h</b><b>o</b><b>s</b><b>t</b><b>n</b><b>a</b><b>m</b><b>e</b>
+                     The hostname to use in the Chassis table.
+
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>b</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b>
+                     The  integration  bridge  to  which logical ports are at‐
+                     tached. The default is <b>b</b><b>r</b><b>-</b><b>i</b><b>n</b><b>t</b>. If this  bridge  does  not
+                     exist  when ovn-controller starts, it will be created au‐
+                     tomatically with the default configuration  suggested  in
+                     <b>o</b><b>v</b><b>n</b><b>-</b><b>a</b><b>r</b><b>c</b><b>h</b><b>i</b><b>t</b><b>e</b><b>c</b><b>t</b><b>u</b><b>r</b><b>e</b>(7).  When  more than one controllers are
+                     running on the same  host,  <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>b</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b><b>-</b><b>C</b><b>H</b><b>A</b><b>S</b>‐‐
+                     <b>S</b><b>I</b><b>S</b><b>_</b><b>N</b><b>A</b><b>M</b><b>E</b>  should  be  set for each of them, pointing to a
+                     unique bridge. This  is  required  to  avoid  controllers
+                     stepping on each others’ feet.
+
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>b</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b><b>-</b><b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>-</b><b>t</b><b>y</b><b>p</b><b>e</b>
+                     This configuration is optional. If set, then the datapath
+                     type of the integration bridge will be set to the config‐
+                     ured  value.  If  this  option  is not set, then <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b>‐‐
+                     <b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> will not modify the existing <b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>-</b><b>t</b><b>y</b><b>p</b><b>e</b> of the
+                     integration bridge.
+
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>r</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b>
+                     The OVN database that this system should connect  to  for
+                     its  configuration,  in  one of the same forms documented
+                     above for the <u>o</u><u>v</u><u>s</u><u>-</u><u>d</u><u>a</u><u>t</u><u>a</u><u>b</u><u>a</u><u>s</u><u>e</u>.
+
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>m</b><b>o</b><b>n</b><b>i</b><b>t</b><b>o</b><b>r</b><b>-</b><b>a</b><b>l</b><b>l</b>
+                     A boolean value that tells if <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> should moni‐
+                     tor all records of tables  in  <u>o</u><u>v</u><u>s</u><u>-</u><u>d</u><u>a</u><u>t</u><u>a</u><u>b</u><u>a</u><u>s</u><u>e</u>.  If  set  to
+                     <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>,  it will conditionally monitor the records that is
+                     needed in the current chassis.
+
+                     It is more efficient to set it to <b>t</b><b>r</b><b>u</b><b>e</b> in use cases where
+                     the chassis would anyway need  to  monitor  most  of  the
+                     records  in <u>O</u><u>V</u><u>N</u> <u>S</u><u>o</u><u>u</u><u>t</u><u>h</u><u>b</u><u>o</u><u>u</u><u>n</u><u>d</u> database, which would save the
+                     overhead of conditions processing, especially for  server
+                     side. Typically, set it to <b>t</b><b>r</b><b>u</b><b>e</b> for environments that all
+                     workloads need to be reachable from each other.
+
+                     Default value is <u>f</u><u>a</u><u>l</u><u>s</u><u>e</u>.
+
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>r</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b><b>-</b><b>p</b><b>r</b><b>o</b><b>b</b><b>e</b><b>-</b><b>i</b><b>n</b><b>t</b><b>e</b><b>r</b><b>v</b><b>a</b><b>l</b>
+                     The  inactivity  probe  interval of the connection to the
+                     OVN database, in milliseconds. If the value is  zero,  it
+                     disables the connection keepalive feature.
+
+                     If  the  value  is  nonzero,  then it will be forced to a
+                     value of at least 1000 ms.
+
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>o</b><b>p</b><b>e</b><b>n</b><b>f</b><b>l</b><b>o</b><b>w</b><b>-</b><b>p</b><b>r</b><b>o</b><b>b</b><b>e</b><b>-</b><b>i</b><b>n</b><b>t</b><b>e</b><b>r</b><b>v</b><b>a</b><b>l</b>
+                     The inactivity probe interval of the OpenFlow  connection
+                     to the OpenvSwitch integration bridge, in seconds. If the
+                     value  is zero, it disables the connection keepalive fea‐
+                     ture.
+
+                     If the value is nonzero, then it  will  be  forced  to  a
+                     value of at least 5s.
+
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>e</b><b>n</b><b>c</b><b>a</b><b>p</b><b>-</b><b>t</b><b>y</b><b>p</b><b>e</b>
+                     The  encapsulation type that a chassis should use to con‐
+                     nect to this node. Multiple encapsulation  types  may  be
+                     specified with a comma-separated list. Each listed encap‐
+                     sulation type will be paired with <b>o</b><b>v</b><b>n</b><b>-</b><b>e</b><b>n</b><b>c</b><b>a</b><b>p</b><b>-</b><b>i</b><b>p</b>.
+
+                     Supported  tunnel  types  for  connecting hypervisors and
+                     gateways are <b>g</b><b>e</b><b>n</b><b>e</b><b>v</b><b>e</b>, <b>v</b><b>x</b><b>l</b><b>a</b><b>n</b>, and <b>s</b><b>t</b><b>t</b>.
+
+                     Due to the limited amount of metadata in <b>v</b><b>x</b><b>l</b><b>a</b><b>n</b>, the capa‐
+                     bilities and performance of connected gateways and hyper‐
+                     visors will be reduced versus other tunnel formats.
+
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>e</b><b>n</b><b>c</b><b>a</b><b>p</b><b>-</b><b>i</b><b>p</b>
+                     The IP address that a chassis should use  to  connect  to
+                     this  node  using encapsulation types specified by <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b>‐‐
+                     <b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>e</b><b>n</b><b>c</b><b>a</b><b>p</b><b>-</b><b>t</b><b>y</b><b>p</b><b>e</b>.
+
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>e</b><b>n</b><b>c</b><b>a</b><b>p</b><b>-</b><b>d</b><b>f</b><b>_</b><b>d</b><b>e</b><b>f</b><b>a</b><b>u</b><b>l</b><b>t</b>
+                     indicates the DF flag handling of the  encapulation.  Set
+                     to <b>t</b><b>r</b><b>u</b><b>e</b> to set the DF flag for new data paths or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b> to
+                     clear the DF flag.
+
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>b</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b><b>-</b><b>m</b><b>a</b><b>p</b><b>p</b><b>i</b><b>n</b><b>g</b><b>s</b>
+                     A  list  of  key-value  pairs that map a physical network
+                     name to a local ovs bridge that provides connectivity  to
+                     that  network. An example value mapping two physical net‐
+                     work  names  to  two  ovs   bridges   would   be:   <b>p</b><b>h</b><b>y</b><b>s</b>‐‐
+                     <b>n</b><b>e</b><b>t</b><b>1</b><b>:</b><b>b</b><b>r</b><b>-</b><b>e</b><b>t</b><b>h</b><b>0</b><b>,</b><b>p</b><b>h</b><b>y</b><b>s</b><b>n</b><b>e</b><b>t</b><b>2</b><b>:</b><b>b</b><b>r</b><b>-</b><b>e</b><b>t</b><b>h</b><b>1</b>.
+
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>e</b><b>n</b><b>c</b><b>a</b><b>p</b><b>-</b><b>c</b><b>s</b><b>u</b><b>m</b>
+                     <b>o</b><b>v</b><b>n</b><b>-</b><b>e</b><b>n</b><b>c</b><b>a</b><b>p</b><b>-</b><b>c</b><b>s</b><b>u</b><b>m</b> indicates that encapsulation checksums can
+                     be  transmitted and received with reasonable performance.
+                     It is a hint to senders transmitting data to this chassis
+                     that they should use checksums to protect  OVN  metadata.
+                     Set  to  <b>t</b><b>r</b><b>u</b><b>e</b> to enable or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b> to disable. Depending on
+                     the capabilities of the network interface card,  enabling
+                     encapsulation  checksum  may  incur  performance loss. In
+                     such cases, encapsulation checksums can be disabled.
+
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>e</b><b>n</b><b>c</b><b>a</b><b>p</b><b>-</b><b>t</b><b>o</b><b>s</b>
+                     <b>o</b><b>v</b><b>n</b><b>-</b><b>e</b><b>n</b><b>c</b><b>a</b><b>p</b><b>-</b><b>t</b><b>o</b><b>s</b> indicates the value to be  applied  to  OVN
+                     tunnel   interface’s   option:tos  as  specified  in  the
+                     Open_vSwitch database Interface table.  Please  refer  to
+                     Open VSwitch Manual for details.
+
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>m</b><b>s</b><b>-</b><b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+                     A list of options that will be consumed by the CMS Plugin
+                     and which specific to this particular chassis. An example
+                     would be: <b>c</b><b>m</b><b>s</b><b>_</b><b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>1</b><b>,</b><b>c</b><b>m</b><b>s</b><b>_</b><b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>2</b><b>:</b><b>f</b><b>o</b><b>o</b>.
+
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>t</b><b>r</b><b>a</b><b>n</b><b>s</b><b>p</b><b>o</b><b>r</b><b>t</b><b>-</b><b>z</b><b>o</b><b>n</b><b>e</b><b>s</b>
+                     The  transport  zone(s)  that  this  chassis  belongs to.
+                     Transport zones is a way to group  different  chassis  so
+                     that  tunnels are only formed between members of the same
+                     group(s). Multiple transport zones may be specified  with
+                     a comma-separated list. For example: tz1,tz2,tz3.
+
+                     If  not set, the Chassis will be considered part of a de‐
+                     fault transport zone.
+
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>-</b><b>m</b><b>a</b><b>c</b><b>-</b><b>m</b><b>a</b><b>p</b><b>p</b><b>i</b><b>n</b><b>g</b><b>s</b>
+                     A list of key-value pairs that map a chassis specific mac
+                     to a physical network name. An example value mapping  two
+                     chassis  macs  to  two  physical  network names would be:
+                     <b>p</b><b>h</b><b>y</b><b>s</b><b>n</b><b>e</b><b>t</b><b>1</b><b>:</b><b>a</b><b>a</b><b>:</b><b>b</b><b>b</b><b>:</b><b>c</b><b>c</b><b>:</b><b>d</b><b>d</b><b>:</b><b>e</b><b>e</b><b>:</b><b>f</b><b>f</b><b>,</b><b>p</b><b>h</b><b>y</b><b>s</b><b>n</b><b>e</b><b>t</b><b>2</b><b>:</b><b>a</b><b>1</b><b>:</b><b>b</b><b>2</b><b>:</b><b>c</b><b>3</b><b>:</b><b>d</b><b>4</b><b>:</b><b>e</b><b>5</b><b>:</b><b>f</b><b>6</b>.
+                     These are the macs that  ovn-controller  will  replace  a
+                     router  port mac with, if packet is going from a distrib‐
+                     uted router port on vlan type logical switch.
+
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>s</b><b>-</b><b>i</b><b>n</b><b>t</b><b>e</b><b>r</b><b>c</b><b>o</b><b>n</b><b>n</b>
+                     The boolean flag indicates if the chassis is used  as  an
+                     interconnection gateway.
+
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>m</b><b>a</b><b>t</b><b>c</b><b>h</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b><b>-</b><b>v</b><b>e</b><b>r</b><b>s</b><b>i</b><b>o</b><b>n</b>
+                     The  boolean  flag  indicates  if <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> needs to
+                     check <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> version. If this flag is set to true and
+                     the <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>’’<b>s</b>  version  (reported  in  the  Southbound
+                     database)  doesn’t match with the <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>’’<b>s</b> inter‐
+                     nal version, then it will stop processing the  southbound
+                     and  local  Open  vSwitch  database  changes. The default
+                     value is considered false if this option is not defined.
+
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>o</b><b>f</b><b>c</b><b>t</b><b>r</b><b>l</b><b>-</b><b>w</b><b>a</b><b>i</b><b>t</b><b>-</b><b>b</b><b>e</b><b>f</b><b>o</b><b>r</b><b>e</b><b>-</b><b>c</b><b>l</b><b>e</b><b>a</b><b>r</b>
+                     The time, in milliseconds, to wait before clearing  flows
+                     in  OVS  after  OpenFlow  connection/reconnection  during
+                     <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> initialization. The purpose of  this  wait
+                     is  to  give  time  for <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> to compute the new
+                     flows before clearing existing ones, to avoid data  plane
+                     down  time during <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> restart/upgrade at large
+                     scale environments where recomputing the flows takes more
+                     than a few seconds or even longer. It  is  difficult  for
+                     <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>  to determine when the new flows computing
+                     is completed, because of the dynamics in the cloud  envi‐
+                     ronments, which is why this configuration is provided for
+                     users to adjust based on the scale of the environment. By
+                     default,  it  is  0,  which means clearing existing flows
+                     without waiting. Not setting the value, or setting it too
+                     small, may result in data  plane  down  time  during  up‐
+                     grade/restart, while setting it too big may result in un‐
+                     necessary  extra  control  plane  latency of applying new
+                     changes of CMS during upgrade/restart. In most  cases,  a
+                     slightly  bigger  value is not harmful, because the extra
+                     control plane latency happens only once during the  Open‐
+                     Flow  connection.  To get a reasonable range of the value
+                     setting, it is recommended to run the below commands on a
+                     node in the target environment and then set this configu‐
+                     ration to twice the value of <b>M</b><b>a</b><b>x</b><b>i</b><b>m</b><b>u</b><b>m</b> shown in the  output
+                     of the second command.
+
+                     •      <b>o</b><b>v</b><b>n</b><b>-</b><b>a</b><b>p</b><b>p</b><b>c</b><b>t</b><b>l</b> <b>-</b><b>t</b> <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> <b>i</b><b>n</b><b>c</b><b>-</b><b>e</b><b>n</b><b>g</b><b>i</b><b>n</b><b>e</b><b>/</b><b>r</b><b>e</b><b>c</b><b>o</b><b>m</b><b>p</b><b>u</b><b>t</b><b>e</b>
+
+                     •      <b>o</b><b>v</b><b>n</b><b>-</b><b>a</b><b>p</b><b>p</b><b>c</b><b>t</b><b>l</b>    <b>-</b><b>t</b>   <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>   <b>s</b><b>t</b><b>o</b><b>p</b><b>w</b><b>a</b><b>t</b><b>c</b><b>h</b><b>/</b><b>s</b><b>h</b><b>o</b><b>w</b>
+                            <b>f</b><b>l</b><b>o</b><b>w</b><b>-</b><b>g</b><b>e</b><b>n</b><b>e</b><b>r</b><b>a</b><b>t</b><b>i</b><b>o</b><b>n</b>
+
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>e</b><b>n</b><b>a</b><b>b</b><b>l</b><b>e</b><b>-</b><b>l</b><b>f</b><b>l</b><b>o</b><b>w</b><b>-</b><b>c</b><b>a</b><b>c</b><b>h</b><b>e</b>
+                     The boolean flag indicates if <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>  should  en‐
+                     able/disable  the  logical  flow  in-memory cache it uses
+                     when processing Southbound database logical flow changes.
+                     By default caching is enabled.
+
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>l</b><b>i</b><b>m</b><b>i</b><b>t</b><b>-</b><b>l</b><b>f</b><b>l</b><b>o</b><b>w</b><b>-</b><b>c</b><b>a</b><b>c</b><b>h</b><b>e</b>
+                     When used, this configuration value determines the  maxi‐
+                     mum  number  of logical flow cache entries <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>
+                     may create when the logical flow cache is enabled. By de‐
+                     fault the size of the cache is unlimited.
+
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>m</b><b>e</b><b>m</b><b>l</b><b>i</b><b>m</b><b>i</b><b>t</b><b>-</b><b>l</b><b>f</b><b>l</b><b>o</b><b>w</b><b>-</b><b>c</b><b>a</b><b>c</b><b>h</b><b>e</b><b>-</b><b>k</b><b>b</b>
+                     When used, this configuration value determines the  maxi‐
+                     mum size of the logical flow cache (in KB) <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>
+                     may create when the logical flow cache is enabled. By de‐
+                     fault the size of the cache is unlimited.
+
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>t</b><b>r</b><b>i</b><b>m</b><b>-</b><b>l</b><b>i</b><b>m</b><b>i</b><b>t</b><b>-</b><b>l</b><b>f</b><b>l</b><b>o</b><b>w</b><b>-</b><b>c</b><b>a</b><b>c</b><b>h</b><b>e</b>
+                     When used, this configuration value sets the minimum num‐
+                     ber  of  entries  in the logical flow cache starting with
+                     which automatic memory trimming is performed. By  default
+                     this is set to 10000 entries.
+
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>t</b><b>r</b><b>i</b><b>m</b><b>-</b><b>w</b><b>m</b><b>a</b><b>r</b><b>k</b><b>-</b><b>p</b><b>e</b><b>r</b><b>c</b><b>-</b><b>l</b><b>f</b><b>l</b><b>o</b><b>w</b><b>-</b><b>c</b><b>a</b><b>c</b><b>h</b><b>e</b>
+                     When  used,  this configuration value sets the percentage
+                     from the high watermark number of entries in the  logical
+                     flow  cache under which automatic memory trimming is per‐
+                     formed. E.g., if the trim watermark percentage is set  to
+                     50%, automatic memory trimming happens only when the num‐
+                     ber  of entries in the logical flow cache gets reduced to
+                     less than half of the last measured  high  watermark.  By
+                     default this is set to 50.
+
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>t</b><b>r</b><b>i</b><b>m</b><b>-</b><b>t</b><b>i</b><b>m</b><b>e</b><b>o</b><b>u</b><b>t</b><b>-</b><b>m</b><b>s</b>
+                     When  used,  this configuration value specifies the time,
+                     in milliseconds, since the last logical flow cache opera‐
+                     tion after which <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> performs memory  trimming
+                     regardless of how many entries there are in the cache. By
+                     default this is set to 30000 (30 seconds).
+
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>e</b><b>t</b><b>-</b><b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>-</b><b>i</b><b>p</b>
+                     The  boolean flag indicates if <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> when create
+                     tunnel ports should set <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>_</b><b>i</b><b>p</b> parameter. Can be  hepl‐
+                     ful  to  pin source outer IP for the tunnel when multiple
+                     interfaces are used on the host for overlay traffic. This
+                     is also useful when running multiple  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>  in‐
+                     stances  on  the same chassis, in which case this setting
+                     will guarantee that their tunnel ports have  unique  con‐
+                     figuration and can exist in parallel.
+
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>g</b><b>a</b><b>r</b><b>p</b><b>-</b><b>m</b><b>a</b><b>x</b><b>-</b><b>t</b><b>i</b><b>m</b><b>e</b><b>o</b><b>u</b><b>t</b><b>-</b><b>s</b><b>e</b><b>c</b>
+                     When used, this configuration value specifies the maximum
+                     timeout (in seconds) between two consecutive GARP packets
+                     sent  by  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>. <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> by default sends
+                     just 4 GARP packets with an exponential backoff  timeout.
+                     Setting  <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>g</b><b>a</b><b>r</b><b>p</b><b>-</b><b>m</b><b>a</b><b>x</b><b>-</b><b>t</b><b>i</b><b>m</b><b>e</b><b>o</b><b>u</b><b>t</b><b>-</b><b>s</b><b>e</b><b>c</b>  allows to cap
+                     for the exponential backoff  used  by  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>  to
+                     send GARPs packets.
+
+       Most  of  configuration options listed above can also be set for a par‐
+       ticular chassis name (see  <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>s</b><b>y</b><b>s</b><b>t</b><b>e</b><b>m</b><b>-</b><b>i</b><b>d</b>   for  more  informa‐
+       tion).  This  can  be achieved by setting <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>-</b><b>[</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>]</b>
+       instead of <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b>. For example,  set  <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>e</b><b>n</b>‐‐
+       <b>c</b><b>a</b><b>p</b><b>-</b><b>i</b><b>p</b><b>-</b><b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>h</b><b>v</b>  to  use  a particular IP address for the controller in‐
+       stance named <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>h</b><b>v</b>. Name specific configuration options always  over‐
+       ride any global options set in the database.
+
+       Chassis-specific configuration options in the database plus the ability
+       to configure the chassis name to use via the <b>s</b><b>y</b><b>s</b><b>t</b><b>e</b><b>m</b><b>-</b><b>i</b><b>d</b><b>-</b><b>o</b><b>v</b><b>e</b><b>r</b><b>r</b><b>i</b><b>d</b><b>e</b> file or
+       command  line  allows  to  run  multiple  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> instances with
+       unique chassis names on the same host using the same <b>v</b><b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>d</b> instance.
+       This may be useful when running a hybrid setup with more than  one  CMS
+       managing  ports  on the host, or to use different datapath types on the
+       same host. Make sure you also  set  <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>e</b><b>t</b><b>-</b><b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>-</b><b>i</b><b>p</b>  when
+       using such configuration. Also note that this ability is highly experi‐
+       mental  and  has  known limitations (for example, stateful ACLs are not
+       supported). Use at your own risk.
+
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> reads the following values from the  <b>O</b><b>p</b><b>e</b><b>n</b><b>_</b><b>v</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b>  data‐
+       base of the local OVS instance:
+
+              <b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>-</b><b>t</b><b>y</b><b>p</b><b>e</b> from <b>B</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b> table
+                     This  value is read from local OVS integration bridge row
+                     of <b>B</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b> table and populated  in  <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>:</b><b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>-</b>
+                     <b>t</b><b>y</b><b>p</b><b>e</b> of the <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> table in the OVN_Southbound database.
+
+              <b>i</b><b>f</b><b>a</b><b>c</b><b>e</b><b>-</b><b>t</b><b>y</b><b>p</b><b>e</b><b>s</b> from <b>O</b><b>p</b><b>e</b><b>n</b><b>_</b><b>v</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b> table
+                     This  value  is  populated in <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>i</b><b>f</b><b>a</b><b>c</b><b>e</b><b>-</b><b>t</b><b>y</b><b>p</b><b>e</b><b>s</b> of
+                     the <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> table in the OVN_Southbound database.
+
+              <b>p</b><b>r</b><b>i</b><b>v</b><b>a</b><b>t</b><b>e</b><b>_</b><b>k</b><b>e</b><b>y</b>, <b>c</b><b>e</b><b>r</b><b>t</b><b>i</b><b>f</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b>, <b>c</b><b>a</b><b>_</b><b>c</b><b>e</b><b>r</b><b>t</b>, and <b>b</b><b>o</b><b>o</b><b>t</b><b>s</b><b>t</b><b>r</b><b>a</b><b>p</b><b>_</b><b>c</b><b>a</b><b>_</b><b>c</b><b>e</b><b>r</b><b>t</b> from
+              <b>S</b><b>S</b><b>L</b> table
+                     These values provide the SSL configuration used for  con‐
+                     necting to the OVN southbound database server when an SSL
+                     connection  type  is  configured via <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>r</b><b>e</b>‐‐
+                     <b>m</b><b>o</b><b>t</b><b>e</b>. Note that this SSL configuration can also  be  pro‐
+                     vided  via command-line options, the configuration in the
+                     database takes precedence if both are present.
+
+<b>O</b><b>P</b><b>E</b><b>N</b> <b>V</b><b>S</b><b>W</b><b>I</b><b>T</b><b>C</b><b>H</b> <b>D</b><b>A</b><b>T</b><b>A</b><b>B</b><b>A</b><b>S</b><b>E</b> <b>U</b><b>S</b><b>A</b><b>G</b><b>E</b>
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> uses a number of <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b> keys in the  Open  vSwitch
+       database  to  keep track of ports and interfaces. For proper operation,
+       users should not change or clear these keys:
+
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>-</b><b>i</b><b>d</b> in the <b>P</b><b>o</b><b>r</b><b>t</b> table
+                     The presence of this key identifies a tunnel port  within
+                     the  integration  bridge as one created by <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>
+                     to reach a remote chassis. Its value is the chassis ID of
+                     the remote chassis.
+
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>c</b><b>t</b><b>-</b><b>z</b><b>o</b><b>n</b><b>e</b><b>-</b><b>*</b> in the <b>B</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b> table
+                     Logical ports and gateway routers are assigned a  connec‐
+                     tion  tracking  zone  by <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> for stateful ser‐
+                     vices. To keep state across restarts  of  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>,
+                     these  keys are stored in the integration bridge’s Bridge
+                     table. The name contains a prefix of <b>c</b><b>t</b><b>-</b><b>z</b><b>o</b><b>n</b><b>e</b><b>-</b> followed by
+                     the name of the logical port  or  gateway  router’s  zone
+                     key.  The value for this key identifies the zone used for
+                     this port.
+
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b><b>-</b><b>p</b><b>o</b><b>r</b><b>t</b> in the <b>P</b><b>o</b><b>r</b><b>t</b> table
+                     The presence of this key identifies a patch port  as  one
+                     created  by  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>  to  connect  the integration
+                     bridge and another bridge to implement a <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b> logical
+                     port. Its value is the name of the logical port with <b>t</b><b>y</b><b>p</b><b>e</b>
+                     set to <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b> that  the  port  implements.  See  <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b>‐‐
+                     <b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>b</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b><b>-</b><b>m</b><b>a</b><b>p</b><b>p</b><b>i</b><b>n</b><b>g</b><b>s</b>, above, for more information.
+
+                     Each  <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b>  logical  port is implemented as a pair of
+                     patch ports, one in the integration bridge, one in a dif‐
+                     ferent  bridge,  with  the  same  <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>l</b><b>o</b><b>c</b><b>a</b><b>l</b>‐‐
+                     <b>n</b><b>e</b><b>t</b><b>-</b><b>p</b><b>o</b><b>r</b><b>t</b> value.
+
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>l</b><b>2</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>-</b><b>p</b><b>o</b><b>r</b><b>t</b> in the <b>P</b><b>o</b><b>r</b><b>t</b> table
+                     The  presence  of this key identifies a patch port as one
+                     created by  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>  to  connect  the  integration
+                     bridge  and another bridge to implement a <b>l</b><b>2</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b> logi‐
+                     cal port. Its value is the name of the logical port  with
+                     <b>t</b><b>y</b><b>p</b><b>e</b>  set  to <b>l</b><b>2</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b> that the port implements. See <b>e</b><b>x</b>‐‐
+                     <b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>b</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b><b>-</b><b>m</b><b>a</b><b>p</b><b>p</b><b>i</b><b>n</b><b>g</b><b>s</b>, above, for more  informa‐
+                     tion.
+
+                     Each  <b>l</b><b>2</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b>  logical port is implemented as a pair of
+                     patch ports, one in the integration bridge, one in a dif‐
+                     ferent bridge,  with  the  same  <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>l</b><b>2</b><b>g</b><b>a</b><b>t</b><b>e</b>‐‐
+                     <b>w</b><b>a</b><b>y</b><b>-</b><b>p</b><b>o</b><b>r</b><b>t</b> value.
+
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>-</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>l</b><b>3</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>-</b><b>p</b><b>o</b><b>r</b><b>t</b> in the <b>P</b><b>o</b><b>r</b><b>t</b> table
+                     This  key  identifies  a  patch  port  as  one created by
+                     <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> to implement a <b>l</b><b>3</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b> logical port. Its
+                     value is the name of the logical port with  type  set  to
+                     <b>l</b><b>3</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b>.  This patch port is similar to the OVN logical
+                     patch port, except that <b>l</b><b>3</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b> port can only be  bound
+                     to a particular chassis.
+
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>-</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>-</b><b>p</b><b>a</b><b>t</b><b>c</b><b>h</b><b>-</b><b>p</b><b>o</b><b>r</b><b>t</b> in the <b>P</b><b>o</b><b>r</b><b>t</b> table
+                     This  key  identifies  a  patch  port  as  one created by
+                     <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> to implement an  OVN  logical  patch  port
+                     within  the  integration bridge. Its value is the name of
+                     the OVN logical patch port that it implements.
+
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>-</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>t</b><b>a</b><b>r</b><b>t</b><b>u</b><b>p</b><b>-</b><b>t</b><b>s</b> in the <b>B</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b> table
+                     This key represents the timestamp  (in  milliseconds)  at
+                     which <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> process was started.
+
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>-</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>-</b><b>c</b><b>f</b><b>g</b> in the <b>B</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b> table
+                     This   key   represents   the   last   known   <b>O</b><b>V</b><b>N</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b>‐‐
+                     <b>b</b><b>o</b><b>u</b><b>n</b><b>d</b><b>.</b><b>S</b><b>B</b><b>_</b><b>G</b><b>l</b><b>o</b><b>b</b><b>a</b><b>l</b><b>.</b><b>n</b><b>b</b><b>_</b><b>c</b><b>f</b><b>g</b> value for  which  all  flows  have
+                     been successfully installed in OVS.
+
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>-</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>-</b><b>c</b><b>f</b><b>g</b><b>-</b><b>t</b><b>s</b> in the <b>B</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b> table
+                     This  key  represents  the timestamp (in milliseconds) of
+                     the last known <b>O</b><b>V</b><b>N</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b><b>.</b><b>S</b><b>B</b><b>_</b><b>G</b><b>l</b><b>o</b><b>b</b><b>a</b><b>l</b><b>.</b><b>n</b><b>b</b><b>_</b><b>c</b><b>f</b><b>g</b> value  for
+                     which all flows have been successfully installed in OVS.
+
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>n</b><b>s</b><b>t</b><b>a</b><b>l</b><b>l</b><b>e</b><b>d</b> and <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>n</b><b>s</b><b>t</b><b>a</b><b>l</b><b>l</b><b>e</b><b>d</b><b>-</b><b>t</b><b>s</b> in
+              the <b>I</b><b>n</b><b>t</b><b>e</b><b>r</b><b>f</b><b>a</b><b>c</b><b>e</b> table
+                     This key is set after all openflow operations correspond‐
+                     ing  to  the  OVS  interface  have been processed by ovs-
+                     vswitchd. At the same time a timestamp,  in  milliseconds
+                     since   the  epoch,  is  stored  in  <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>n</b>‐‐
+                     <b>s</b><b>t</b><b>a</b><b>l</b><b>l</b><b>e</b><b>d</b><b>-</b><b>t</b><b>s</b>.
+
+<b>O</b><b>V</b><b>N</b> <b>S</b><b>O</b><b>U</b><b>T</b><b>H</b><b>B</b><b>O</b><b>U</b><b>N</b><b>D</b> <b>D</b><b>A</b><b>T</b><b>A</b><b>B</b><b>A</b><b>S</b><b>E</b> <b>U</b><b>S</b><b>A</b><b>G</b><b>E</b>
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> reads from much of the <b>O</b><b>V</b><b>N</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database to  guide
+       its operation. <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> also writes to the following tables:
+
+              <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>
+                     Upon  startup, <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> creates a row in this table
+                     to represent its own chassis. Upon graceful  termination,
+                     e.g.  with  <b>o</b><b>v</b><b>s</b><b>-</b><b>a</b><b>p</b><b>p</b><b>c</b><b>t</b><b>l</b>  <b>-</b><b>t</b>  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>  <b>e</b><b>x</b><b>i</b><b>t</b> (but not
+                     <b>S</b><b>I</b><b>G</b><b>T</b><b>E</b><b>R</b><b>M</b>), <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> removes its row.
+
+              <b>E</b><b>n</b><b>c</b><b>a</b><b>p</b>  Upon startup, <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> creates a  row  or  rows  in
+                     this  table  that  represent the tunnel encapsulations by
+                     which its chassis can be reached, and points its  <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>
+                     row  to  them.  Upon graceful termination, <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>
+                     removes these rows.
+
+              <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>
+                     At runtime, <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> sets the  <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>  columns  of
+                     ports  that  are  resident on its chassis to point to its
+                     <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> row, and, conversely, clears the  <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>  column
+                     of  ports that point to its <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> row but are no longer
+                     resident on its chassis. The <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> column  has  a  weak
+                     reference  type,  so when <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> gracefully exits
+                     and removes its <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> row, the database server automat‐
+                     ically clears any remaining references to that row.
+
+              <b>M</b><b>A</b><b>C</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>
+                     At runtime, <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> updates the <b>M</b><b>A</b><b>C</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>  table
+                     as  instructed  by  <b>p</b><b>u</b><b>t</b><b>_</b><b>a</b><b>r</b><b>p</b>  and  <b>p</b><b>u</b><b>t</b><b>_</b><b>n</b><b>d</b> logical actions.
+                     These changes persist beyond  the  lifetime  of  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b>‐‐
+                     <b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>.
+
+<b>R</b><b>U</b><b>N</b><b>T</b><b>I</b><b>M</b><b>E</b> <b>M</b><b>A</b><b>N</b><b>A</b><b>G</b><b>E</b><b>M</b><b>E</b><b>N</b><b>T</b> <b>C</b><b>O</b><b>M</b><b>M</b><b>A</b><b>N</b><b>D</b><b>S</b>
+       <b>o</b><b>v</b><b>s</b><b>-</b><b>a</b><b>p</b><b>p</b><b>c</b><b>t</b><b>l</b>  can  send commands to a running <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> process. The
+       currently supported commands are described below.
+
+              <b>e</b><b>x</b><b>i</b><b>t</b>   Causes <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> to gracefully terminate.
+
+              <b>c</b><b>t</b><b>-</b><b>z</b><b>o</b><b>n</b><b>e</b><b>-</b><b>l</b><b>i</b><b>s</b><b>t</b>
+                     Lists each local logical port and its connection tracking
+                     zone.
+
+              <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>-</b><b>t</b><b>a</b><b>b</b><b>l</b><b>e</b><b>-</b><b>l</b><b>i</b><b>s</b><b>t</b>
+                     Lists each meter table entry and its local meter id.
+
+              <b>g</b><b>r</b><b>o</b><b>u</b><b>p</b><b>-</b><b>t</b><b>a</b><b>b</b><b>l</b><b>e</b><b>-</b><b>l</b><b>i</b><b>s</b><b>t</b>
+                     Lists each group table entry and its local group id.
+
+              <b>i</b><b>n</b><b>j</b><b>e</b><b>c</b><b>t</b><b>-</b><b>p</b><b>k</b><b>t</b> <u>m</u><u>i</u><u>c</u><u>r</u><u>o</u><u>f</u><u>l</u><u>o</u><u>w</u>
+                     Injects <u>m</u><u>i</u><u>c</u><u>r</u><u>o</u><u>f</u><u>l</u><u>o</u><u>w</u> into the  connected  Open  vSwitch  in‐
+                     stance.  <u>m</u><u>i</u><u>c</u><u>r</u><u>o</u><u>f</u><u>l</u><u>o</u><u>w</u>  must  contain an ingress logical port
+                     (<b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> argument) that is present on the Open vSwitch in‐
+                     stance.
+
+                     The <u>m</u><u>i</u><u>c</u><u>r</u><u>o</u><u>f</u><u>l</u><u>o</u><u>w</u> argument describes the  packet  whose  for‐
+                     warding is to be simulated, in the syntax of an OVN logi‐
+                     cal  expression,  as  described  in <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b>(5), to express
+                     constraints. The parser  understands  prerequisites;  for
+                     example, if the expression refers to <b>i</b><b>p</b><b>4</b><b>.</b><b>s</b><b>r</b><b>c</b>, there is no
+                     need to explicitly state <b>i</b><b>p</b><b>4</b> or <b>e</b><b>t</b><b>h</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b> <b>=</b><b>=</b> <b>0</b><b>x</b><b>8</b><b>0</b><b>0</b>.
+
+              <b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b><b>-</b><b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b>
+                     Show OVN SBDB connection status for the chassis.
+
+              <b>r</b><b>e</b><b>c</b><b>o</b><b>m</b><b>p</b><b>u</b><b>t</b><b>e</b>
+                     Trigger  a full compute iteration in <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> based
+                     on the contents of the Southbound database and local  OVS
+                     database.
+
+                     This  command  is  intended to use only in the event of a
+                     bug in the  incremental  processing  engine  in  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b>‐‐
+                     <b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> to avoid inconsistent states. It should therefore
+                     be used with care as full recomputes are cpu intensive.
+
+              <b>s</b><b>b</b><b>-</b><b>c</b><b>l</b><b>u</b><b>s</b><b>t</b><b>e</b><b>r</b><b>-</b><b>s</b><b>t</b><b>a</b><b>t</b><b>e</b><b>-</b><b>r</b><b>e</b><b>s</b><b>e</b><b>t</b>
+                     Reset  southbound  database cluster status when databases
+                     are destroyed and rebuilt.
+
+                     If all databases in a clustered southbound  database  are
+                     removed from disk, then the stored index of all databases
+                     will  be reset to zero. This will cause ovn-controller to
+                     be unable to read or write to  the  southbound  database,
+                     because  it will always detect the data as stale. In such
+                     a case, run this command so that ovn-controller will  re‐
+                     set  its  local  index  so  that it can interact with the
+                     southbound database again.
+
+              <b>d</b><b>e</b><b>b</b><b>u</b><b>g</b><b>/</b><b>d</b><b>e</b><b>l</b><b>a</b><b>y</b><b>-</b><b>n</b><b>b</b><b>-</b><b>c</b><b>f</b><b>g</b><b>-</b><b>r</b><b>e</b><b>p</b><b>o</b><b>r</b><b>t</b> <u>s</u><u>e</u><u>c</u><u>o</u><u>n</u><u>d</u><u>s</u>
+                     This command is used to delay ovn-controller updating the
+                     <b>n</b><b>b</b><b>_</b><b>c</b><b>f</b><b>g</b> back to <b>O</b><b>V</b><b>N</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database.  This  is  useful
+                     when  <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b>  <b>-</b><b>-</b><b>w</b><b>a</b><b>i</b><b>t</b><b>=</b><b>h</b><b>v</b>  is used to measure end-to-end
+                     latency in a large scale  environment.  See  <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b>(8)
+                     for more details.
+
+              <b>l</b><b>f</b><b>l</b><b>o</b><b>w</b><b>-</b><b>c</b><b>a</b><b>c</b><b>h</b><b>e</b><b>/</b><b>f</b><b>l</b><b>u</b><b>s</b><b>h</b>
+                     Flushes the <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> logical flow cache.
+
+              <b>l</b><b>f</b><b>l</b><b>o</b><b>w</b><b>-</b><b>c</b><b>a</b><b>c</b><b>h</b><b>e</b><b>/</b><b>s</b><b>h</b><b>o</b><b>w</b><b>-</b><b>s</b><b>t</b><b>a</b><b>t</b><b>s</b>
+                     Displays logical flow cache statistics: enabled/disabled,
+                     per cache type entry counts.
+
+              <b>i</b><b>n</b><b>c</b><b>-</b><b>e</b><b>n</b><b>g</b><b>i</b><b>n</b><b>e</b><b>/</b><b>s</b><b>h</b><b>o</b><b>w</b><b>-</b><b>s</b><b>t</b><b>a</b><b>t</b><b>s</b>
+                     Display  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>  engine counters. For each engine
+                     node the following counters have been added:
+
+                     •      <b>r</b><b>e</b><b>c</b><b>o</b><b>m</b><b>p</b><b>u</b><b>t</b><b>e</b>
+
+                     •      <b>c</b><b>o</b><b>m</b><b>p</b><b>u</b><b>t</b><b>e</b>
+
+                     •      <b>a</b><b>b</b><b>o</b><b>r</b><b>t</b>
+
+              <b>i</b><b>n</b><b>c</b><b>-</b><b>e</b><b>n</b><b>g</b><b>i</b><b>n</b><b>e</b><b>/</b><b>s</b><b>h</b><b>o</b><b>w</b><b>-</b><b>s</b><b>t</b><b>a</b><b>t</b><b>s</b> <u>e</u><u>n</u><u>g</u><u>i</u><u>n</u><u>e</u><b>_</b><u>n</u><u>o</u><u>d</u><u>e</u><b>_</b><u>n</u><u>a</u><u>m</u><u>e</u> <u>c</u><u>o</u><u>u</u><u>n</u><u>t</u><u>e</u><u>r</u><b>_</b><u>n</u><u>a</u><u>m</u><u>e</u>
+                     Display the  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>  engine  counter(s)  for  the
+                     specified  <u>e</u><u>n</u><u>g</u><u>i</u><u>n</u><u>e</u><b>_</b><u>n</u><u>o</u><u>d</u><u>e</u><b>_</b><u>n</u><u>a</u><u>m</u><u>e</u>. <u>c</u><u>o</u><u>u</u><u>n</u><u>t</u><u>e</u><u>r</u><b>_</b><u>n</u><u>a</u><u>m</u><u>e</u> is optional and
+                     can be one of <b>r</b><b>e</b><b>c</b><b>o</b><b>m</b><b>p</b><b>u</b><b>t</b><b>e</b>, <b>c</b><b>o</b><b>m</b><b>p</b><b>u</b><b>t</b><b>e</b> or <b>a</b><b>b</b><b>o</b><b>r</b><b>t</b>.
+
+              <b>i</b><b>n</b><b>c</b><b>-</b><b>e</b><b>n</b><b>g</b><b>i</b><b>n</b><b>e</b><b>/</b><b>c</b><b>l</b><b>e</b><b>a</b><b>r</b><b>-</b><b>s</b><b>t</b><b>a</b><b>t</b><b>s</b>
+                     Reset <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> engine counters.
+
+OVN 23.06.3                     ovn-controller               <u>o</u><u>v</u><u>n</u><u>-</u><u>c</u><u>o</u><u>n</u><u>t</u><u>r</u><u>o</u><u>l</u><u>l</u><u>e</u><u>r</u>(8)
+</pre></body></html>
diff --git a/support/dist-docs-branch-23.06/ovn-controller.8.pdf b/support/dist-docs-branch-23.06/ovn-controller.8.pdf
new file mode 100644
index 0000000000000000000000000000000000000000..b8a07aacc5c26a652ee446e29dc6e71f2c6561c8
GIT binary patch
literal 59375
zcma&sQ*<XmyEp9EoY=OLe{9>%#I`Z9ZQB#uwr$(C{mrx2{@#=4WFJ*^b*-wC?p}5E
z{UcKl5u;<G2f&bxT*el_kdaB+y4o2TI9u4+auM1aIGZz=IT6w+&=JxZD+`K=D*bDP
z?QH(turRc+ws3ZrF>y7q=KZ$-A)Ukj&Xbc@5L8tb{WnucP(@gRkj_a&R83M?l-J(a
z)XmYt+2r4dle4j%i!(3(zplKCv%QP6n1!{;e=h$|JHfCLG7{PuTEg(~FvytLnmL;j
zvi%!TV)(a;vxy@igP65}vx$g_k)5##A0Ld9v!jWD4a}dcCan#}jZtLp74^xD04n6j
zwq3O{p4Ix5q9ip(+Ukbz#^eA21raz9Z6MUtH;5DE$JnzRSW_S+Ep=)t^)&$S<fC&g
zpLctop5(6buU&#KyKYX{(Sx-bGZi1{NB*~vPMxf&yJ}IN=dTh>23j?<b0R52F+-wJ
zL#Ja_`Gz5W1LRhQCr)`3U^m(nGdEq{nap-OGvY^3>|$MIRZ;E_lRGmF#wFN@!Po$R
zVypuFCkOPHq3`jQ=h#=&=I%NG?u!y;iPyjL{Vn4&ZK<QO|AJytMn7MJ|E>x>;`D`1
z#q>-TOLnO_slUqyd;iJ_S*#U0{Xv4y;mdS2JH#i=v1>l|Ci*I0Ysh*OL=TK9UD?&z
z`<I+dDte-sV*{P#y*qlbPe%PJ%?5s!aCM{)Kj=aL;j!+550Pr(z{<0v_wpF9eI{r0
zrwF$FN6STKY)fj3k@|%Atq;esr1C=FyxEa)M%E((7`q(A&-NY+TO6)77TB?2!_`Fb
z^)33bd{@eQKiFq#$3m@yH#Run9Z%!WmRI`In(#8(cp5PDJhmm9B8GT%A=Tiv!&b*j
z3q~$IKRvx&^^e|m<mV^{;v|r|fkzVF*~*Y&;}|myo2;ywYz2$-;K7KI*C)dKg*JVj
zBANvlUcS`dFzQ_G=T>Q*LvL}{-}CIRjg6==w4khJDzCInC0%b(5K#O`+Qkqr%6xgd
z@5{$<uL);a`95K81HhR&JwE2HPYG!X@t!p_5g45^fwLGqyl8(OOujaGqXyvJF&F&c
z!wI%${Nghdmzl3Apjk}$(F$3L_@rse*SB+^2~HOAr6^kpN6d)0*kn6rT5h%zY&ITc
zw^dF^2O8K|iqkFitQaaVdAF`7`1EK}S+sL0hL`+jf}<*4WV=B`n1&P8y<ARQX5_Os
z?azca)mgATzV8h{rh-7MO3p66jeL>@oe%ksDa>zZzNHCw_Wf{H9g$@}L-DcS<lAfP
z;7DU{1^W=*v3V}TDYB40HhD?Wt4f#?72ooiL!%E3NcNm6vCg-<_^nwmc0-ej<OVeg
zVjlS>R*ZQAOCfn8ItQA~bH@?xF%TD7X+n1znh9g?gOY}PXyF_id{8Z=ybTPxW*R3P
zgx#5<CWp9h6s9!-FuJ&ub3v|`*d0+UIAgt;{J`A<X(Q=yGcAz_*hIGyUDe(Gg4rs(
z4#E2E)Q5P&zE+4mua1jW5lNmt4CdX=u5QM+q-j*?0y%)aMkK0}P=~wF=VAbZ=3?IL
zxF^^uHYkKTwGoILDmfYQ>swS}d>Y*>qufT6JznUzeFtRAF!xyvJ_>;g=w_?*#!YxB
z#xnU88Kd2F#L!0TLpQ-7ZyKvMwB!`|SmtX_!0y^eO}Q<ac}!L6VE2y%$RK&(2v}-j
zIH@|L>cqFl&*hr(E(RpkD=rs$%Ga4TFU3Nf&jD40L0`V_a!n@vR8KZBqAIBQ1zH<h
zDYyT{51u#43eV$TcC6>hH2gjmDw3K+xe_yV*;`6}B2fr{lD)O#^J?w<&YNNELwpHF
zqQbE(SO-2AFOV*%?LRGdRPKd<`K7k>c^q#YQ9XeVixyk%?nUeOxNOtlsokT3=?)@#
z-Nf@&bB7`LZt=-k?8JZQZ^WevfNV}-#V6D=b6K<Tx;GtGoPe0@Xzg!6$_sA}YN%@P
zA41FWR};q0AVcZ8QWne#i1cCvvaNbWl4OSqWj?dXII5<`RizLP5>kFJ*Zl&8!+PlH
zs>V*NOdVDmg1Yre(t^3|V_K~kJNBzJR_Jllg-%wxr-*QuO-;n?6&#AI$?@GIZ&8lQ
ze7`uT7L8S3f5^j36-{k90@XjxS4fs-kPp5+0}AC`3}U=J-&O;*H_n3V|HJ!4^eb}7
zRo!C*hvvBIi)mEgcNW(W!#8vhokoDij_FCX%38}p)c{fFP13VVvkB;t=giE8<6Bb(
zl#fJAZ_b4+OthlieTl;Xh-`GXy`=%0GxaZW+}-dJ{PCVy!tPO5ykZuAG=WB5TtbQZ
zL$Y4@JHq*Tou%B^ml1Mirto8%-|Rmqi~XRds0EOv>mX~UF}o4j6l^HsgR9Ub<mP<1
z8vYcrr%YV%QP*Z)QANA@NT5@JpAv#%=xrqQwG{foZp5fFP2f-&WaW@~Z}{;+)UO9e
z-1C)(;-&1YKJe=dkU~M%B4uD1qyikxb=U9;p=JI+^tg_P#+&<!%{zibxJms7a+Y`!
zq_iGe&7%`FL-$#JYBcJ3K6$w4=j+1$0ayuseg)bcbgi49ob$T}9}8Xd#T$N|P7_Xd
zr~TO2fl69Qh;k&%>BqGFM8S!C<Ki(`2fA<0K2Ve(Z2U2Dy6hsnM`^qA&FO*Dk->xA
zOh<2R4s%j<MSOx;wj<lu8}$rw>rhF3B<wB3`Bu}vlVw$2V41^5@w3>XC8GATdaj{o
z#iF=!7<Cn*A@dwxg*r$pdWj}L<6-mHqod+PP|}(2TIxZUqNIBh2rIiMRb&tG>mU73
zl}6`LJ&OIOC`*-CMKb>eSe`#2<<Y4nXy-*=zE@s(J4TXMBP2pG>Aw)-%Kh|2$p(R^
zAzBjZOX&oNa{eL+z~D=DSqZEVqh&ooVuSE*z{^?vB8ojzuv5`g6B|9C5mv!Y<EDH4
zj=0O^079@({Dx1rcguqL!tPc&ph05%lMM8TIl4=Vx(#!l#V@*rOC69aRye4E&RcpZ
z86QF0Y*CK=CBJGv#!GY`Ytu}Gr4}Db`*XiKUN<HX1M3|AjyN6M?QFRSB;!8~BB@8m
zgz$^FRjkU>IjF)KXzx%MwBbg(C>5+20zKQZ@ei?a3m@jBA?wUpFVhKW4R*MMOe%h5
zFB_<nC{?1(P9vU5-&gx!4#xs}%0xhE!Ke@yAzEsRBx!bJk%6Y`n(&b&KCb}Qy1>_G
zoTx#$+G$34Yc5q!9-nA%^p<tE)$hNbCTsopvYw1I&G2A9+Z#)0e_SHSk%d9I{mN`}
z9$0A^V=SN&QW^xwN;YMl;0mtI^5WFJ=YHu79pldS3r{#j2&jDCn>JKM=w|9Ho9LOU
zzSUHw>ZVG@k0lBi%*TDgU-N{J5)2@l{|$2Li5d}zy`U$3BT0<6ZliV3J4J@S?6vYJ
zLN=|lpJ)#+_idxO?S|X`3Y&ShQdrjll?VnyoKhW;LRa4fOdl$Y4kWW-UKQ9F1bW&%
zZ-s62bxlTWY)l~9ZTn<E>!6@7xB>TjW7zXS+XQ7Q1-fgWpD)CU9}tUE^|bo|j_Hyp
zZb~-7vGOnm?6ko#-u4bYEW)y?zh82DRHmvPI&X&<$+*5gXQKul2pCErBz}B8Kw572
zy>e)8%fX#;0zzOaJ40E0x?f)tQ;H0jQ<Mih1D(t!!8}-^WdClEz-s=YC~LYsA+Y`V
zo<E=T?(wf*Sso*duvx-rj~8DH;k0n<|2u{Zeo;mFhXqSyhtKUoU*xJIaZXt6m;l>}
zh;0De^H!C!dD%GPF@}1XSr$)+XrT!U8$qWU^m5a>joycQ3&d(&C_`(E$PARGB~P_}
zT48CCj<Q%)-kQ_O7QM;3$)38FcIJw_q8t=ByH176Yo625+^X`lA^Alj`T@0_Br_Uu
zdMpaZjrW(PnhU(<l_f7=Ko-aSNCLI+IATQGvt6Op7zfgj)LPlt5x<+<n)4Q@kOF}-
zz>Z4>HX8;opHNa>kU=0cBWeSS0V$OlFfAaJgD$5tDv&hPPemMW=%}fBMUqbIt3mL0
z3EVs#2W+DIGQx=x-t@Rk%rWoZ*=>@Cl|txo$T{H{Pjkc15`<_SU1JEC>J58Q(uU4H
zm=TaV%g9;N@?03+Wb&I#+zpMo_AUy_W8%*9@4;p3LvM|_QFBlNM3-Qu0l9>-+Y?04
z)+}P7^*I7z7JIo$b*AN7S?n`VJpD75g-AJh#&m_=5^`?=O3*&{{wf<dLn$UMaL^<e
zKN9upmMyH=P0~E52rsG?r-g(cF|8tBa)dD9RuI;2?wW(?7J5}kAvop8I`w=5H&YY_
zPIPqz!UlY22f{nL5o7e-!ds($7_-$!rB}h!!Sb<mV?S(vin=T$aetQl7mRDAenVjI
zmNA4~e$u+7>V%~9gDAGtlF>{x5MWYo^<{U15a1~YMDi`Ux?H%j$LCugxQsc!k?9Re
z<d6tW6%4W!oolw=iwR;Ph?)$({zzmaoVHwhlK2<8R3x#o4bHd)BLd|FL7?x1o2ZO6
z)9AjfILPe_N@p*HN>91_JTPu>U1yO=Bd^j%(MHt}-3k0Fm<}%LDl}P{zEzRY5EB;5
z=#q|u>ke5`%W7}={;do&aa|EK4o_`bctp@Y19mS1&OpBB{zsx>1f>ShGHndymfuCo
zHM=4aHM@;1C+}56?dW<XQgbnUDWGoligO@4yNrbth%CiBS68)7rxUV7J3kX5*Cyft
zpux;5=%plSoUlgc`Xjr-&Uv}2wM#}n(~BRI0tqdoa%)QQ)oZ9Cl7Z}PD!>@$;t1v;
zm8TrS3g3#?4`VJQkU;e|3O(VYTy5D}6p0r=!y$UK0zVw$7DdAoxm*6PuOl#%s@kpr
z68`dS83&G(hJ5OFeWhLu)pn9bdM%gog#?cZoey98mkhTj{BgSLJ0`Zq|0}hBz5nR$
zKc@Rn%L3rwfcf7srvIiN)BnkSQ(Dqa8)Cn@FVrV(`sgeJ`f$p|1>>)%uhvu4O*xy$
zinNiSlve$KK>d`Qr<Z(1e;hhaqKT-e#_*f9(MEoil;rC9ZVl*#%VXW$#eQ~dX1yAF
z-(Nr<@RQxwI12k{XJze|pdXF7sZ)I$)^Q<+VoHK0h#_lQ%XMD+G`}K3`Oh2y;2vlL
z<Y`kVR&+hJT(4GV3ew(br@N{x%6*<6_6Z0XQ$Y%&$bE9cNob?YGlq=s?Dx0+tW8B}
z7g(c@03;3XuyTK%C&cgb&D}%;d-(HAAp(@#_nWZA#wM^~nqG^DHi7#`Ez<0}%yYoB
z+3D-8B)ZnvmWnM$3@bZa2@iCb5(;WYUt6mt3M}v?m#W*lD^rY@+;Hw;$Ki={i^CU@
zf<v^;ms(VvxU3`ViP?2USCTs8o5jsFGL-nG(jG}9kVdAbB|`~dErR%|<Uzz9IFfQ7
z-VvMOAZ({WOwQKYp0NWD(jEQh&P>@TgqJGig837oj&~!K(Zgcj@*PK7Qa=0_LAi=>
zlKKvGL|sAuWI<wG$}OS!#61km@0%#vw5KeR=!!?UN?w<v`|xeLbeKx6+mg1R`DccB
zXg(2kV@mWjB^V|vQ9iE!zRC#E@PIeci&}~rqt)QQM};z<R3<Nx!MT~TtI{4<!N2Nl
zcEzkPEK>n-xxTPOmxxDHDoH_|Fo}Ls0Q{xGugGzxu{UhHxVUpj5dqBXj}|gRVkJuc
z87F>4BgK*4RZ}@UgXVn!wKTfti?Tp{r*0o_O2JK;_w&cS^S{Ynh@0uIiPrj^+_Ax>
z>M-u8fL1-fCuc<7>8aa0ly;4DZL?GL0YbbL@3Z2F5ogks0d6jv@rNc19Sn$-Y@nI?
z!fv;;Jvo(XsFu9o(bpP1r2|0oSCAH2WDP@LJe2&rFvdgdV0PwLa;XJv#J4SboXL(&
zi%SQ2rY$B@b=(dQbRZ9q6X-z&q1<a(ci`mKGb_VqRxz+ZSnFN4?W-pGoXp;8J2vH;
z*UA$K@aig@GD~6>b{aFE5`;mg5*@yj`A#rx>~|w9-3(a@A%GR#!hcj9APo6q!4(fA
z7!k}wf%x=CJP%BU-kDePg%F3?bk$~;<ugG!<qfd7boqpKJgHGZ-h09N7(H@LQ=t_o
zL(;Rt<Cq!=133}xg5L#b#n7-It1ARwMYjh4*`j_yL3@6T=0}MqR_G;}G~t=Rqkcu1
zY<q+%kidKZror>h9ZmgGK<?;&-*?-(^-Mj{A+qM7?Lwm}!M3zHfcn8U>71D5cI$d^
z{k(tQf95W{nx$2|Iql6X(5fSgaT4s%cYpu6yPH~>v8yqy6DelEII-jBMjmON@*?|a
zPWU1WtcS7j8x<`RxK=AxyZkju7;IE^IQQ!h3ElvXB|P6*q$8>%*r`&~P&4LD9_y9V
zYagQt)cP(^W`-q)azq{~X3jNaoYpp-C@j1qBxylXNO(y0Ti_O>_W^QP?xO?@54jS)
zf5AOCT-t7cthef#Yyp^+?FGcQCcM);dZyIj^&qPGtD<2MP{{S=RA^+Z90I9||LJCY
zyg#$U@%ZcA_%Y;cc2W=hOjH%J>d1EKs4z|h>!yF>Ok^3cpUWi2wE!Er0NMTI)Nn-u
zmP+|c;#N-dEC8fdQM8lsooPIcVD%E&QnlkLKFLkAqgo^#ZG&#U9y+f!ZjLmYFrom0
ztr!Tf2xJw<*VcmF7P0>wW!lzGP-AO@+&hwXwu;ETQB`JP0Ywc&ra`On$^o<}MFEsR
z_4z7!E0K{7q1GZj4Vph`<h|AO0z@^$RK8)@zK1qiM2Z?n5whjFK{Tv*Z#ztC3d%t<
zEc9NEnTLK-;8}xT_m?gl<hnp$F?_0@=lbSX8wjMl<eeX5(h}h!(0ng)3fGzg_U{nS
zn~o=JyRJiwdq+gT`5*ZgIh;oq1U>$R10KK#XF5p5GVt5l5_AHoa*Hk~cSkN0fyM`2
z?H0jiIB^TvmkX;LurJF-4?qrl(Wg2Onsr`q3Q&b|ilaD4?%uUSRnrB5^irak2HOuo
zxB<LDCt_?=s=VciUlL-xD6e^p4bmIdo-9t6ftW(92(n7<t9a+5mCspC#q@Z_lb#WP
z5e$j_GyZEvf88LWbg(Q<ov<VOJ=P*Clz}PY8`*rvaYe<8M^kM;qs8ks5a2oo->Pv;
zQ>wLHoec#ll{ubzlq1|S?h@dhx*PtTk6-?_c%}$Kns6lEKmp{K1PKF2)v8{L{g>)*
z8MuwN-(v80GV|@wFAcdSI(xo-p3oU1(EEn^4QrS;U-(d<JS&BIo!{YS)zstMia*eg
zyy#43Ff>DxM^)UnTQ<Re8K3dHPsBxBdid{ra=+k((*Fjmmx(!<uCpRk#TR4(6_;rc
zpvrcs0QVJhj;tAJBL2p0M>X2G;36_EIF5-k-^rIQ#)nfT?WV43Lm}Mua}KqDP?4}K
z9w7mMw##v{P4hy-|Jq`ET{l2LUhjpYWd=#01T&&Y^Z3grpk_;b`3LqPV}2fSBi8nJ
zr>Kzg9RzPF^iKrb6c*CxCdBa$-plzZd@LyC87VnxI@5{?1ry`grhMbVM!wZwG^%@3
z966zm9nXhp<A_+L$Mb<U;(VV3mZLB`@u2~kIMd?5eq+qPL{rS>kyC%qMg;txkWeFz
zqxQIA451ZjXW^A1D01PI@k?L^Wzx8Cl~r2tL+jRelbxPOZu9ai;Yu@dEwq8riN+zn
zxJTAQK*8TaemFR+nF#FJJfLyFjo>Z3%s1QbF0ZsreVpnXFHmqTh(8`1E5(A+B=JQB
z7F_-yEvwW|+oUM6;Z;-SrNkLDP88@#xdACdm#~5llVqiOcj0y5r^}W6E_a~dl2I7#
zFgzy`xYn+L6^U$vl&QCjlVuVr5=D}Jw=At~VZNftM}9~zhYo{FjvND8Ynp-+Mwclw
zh^o?*rwA=2ViX2Z;M~tKsKEqwV4};VG7Tax4wbZ~_aaP@W?a+%<Qae%_#pcwCZnkz
zSb;ZdZ%%2&G)E+JLpR{}Nj?{33(cD2M?W1`1_mv&xpazDv#4GeVJ(>OylubhHA|sb
z(E%b!S*GTpS_eXqD95^;nVxl&o;!QUTDwxECRZ5Rw$C{kczV90hU1nGnizPk%8+%n
zrGpeFGr)*|*Ie-8_W{fK)pA`;;U{xHumWAafwmJ0!tlVw+TRDq609y`Rk#k;C8%W&
z)@76-Dp{P?^;acy2*;LemOErG9e9a~?lI&TBh(}Ks1VgS#IVK}tjC{6#PpayCOFB<
z54c2wByyids6NM#+AuEH6h&}7sjSx3zK;052t^K*9w8UuI$SZN=H4awp{OB^aF%KL
zns3TD`0=n>S9tn@71fZSpDN{QxL$<*iBT5cK9go#?Kj#h@KoV0*~@LdlFm~V)*BlE
zIf5I+q|qrF1j~yQO+Zd&xxPIoXheJi%cSKP>Je<KqNecJiPXsQo|A?COJ2|LiG5@w
zPR04}i5A{dQPQc<dRVRFiFC5msoqo@0WJpp!IZ==g_@1`-<pkvdTK2TcmBY3bKLu>
zrt%JWpaVi52K!P}*U}+CSMnQO^yE{zG>8PhW*~KYtnI&3iyV4UETjr=O~(D5V0RKb
z?BSZKN;oAS^2j&8eu9qOAH?($fyov=d}nTfrV~Vt@3%znCPbJ6`zM}as@F3D;Pi==
zUjVPGO;&TDG3&@t3*9~~o*w<C6iqFoi0BUbqp_RANAx9a&#%O~53e|OrPQ1OWnG=u
zcH=kO9SEjOqMBY{+|k1!vBcuiaJ{aXbZ~u+bHg9*E409P*H6sQFo``eLcI)TUY-#A
zpZD(9Y~Cq@0M$9Vb#V%oK3=Yg7-ocTec-My*N_^bHiF%O?1j_4(ACoyz1>$571N&H
zyM6JNZhp<rt+h9f==sh_-N+(1@|WV*s_jd*4B71qz6q1O32aDFEE(v#i5eUyrLXo1
ziZ0-&1;qUqS2X4iLcZS1D;htWHIf<Umf$W|OByh0mf6mhPFR0DvAe<8+`q+b1q0oJ
z=?%d;)aYoson7yze9E$7{8o?$=*mIZVe-5$^GAaBLMQgIphwacKGth5lA<yipw{VF
zML)ikOo(k^v&X?%Liy=i`ThFti@Rm*M4=N;%ii+h7x_WyMd4D6TP}IEljQUB%)2vW
z3vO%H3EJwz*|Q76Te6rr!q*Mu9_h28+kVV^VxRJ!ZJ4Mg?BXxbNxPlW1M12QWNh-O
zhK#aJMt2+CnT5UAosghse~uNV<;?pQzPQg)G^#kA5^Wdkd@=i0wue3<hkDF78GZSU
zwqK@|y-#t{G||W)ebkeK^xXe?ZI|66Yu&ktZ-wd=p~2bLtVpE-&%Ok$aX<1TcPQ#W
zsozW=P=<|40TOwh|59dFN&J$;gHO}m<tqV2<&hzw1`(K#13lns`i-|izhBtRe3?om
z&n!vHJd}&BWQ(u*a>7=tgQyJIEfq&piR&qum9vfN(%`l}zHlNR=@NZVbldjes9b$;
ziq<iwiCnk2d-VNe5b#^(=hgNgShUEyd#ybuvwqwRv1MtXmi=xcbIMHq#`WmA_slHB
z=fio;`G{fK;iChI0aq`2gSSJ^yLF2jw~I}8$W}A<!;(L>BJn_WDb}+sfj_m<Qw}!k
zVqpabVI*?ct>NlPe2sv!e8u;(wBm_?1H1d4l0hc=ec$?V-RcVVfZvI74L0)I@pRj5
z%!}|Bm(lB)O0_;N^{<L!VTQv2Uk>j#dHqADZui=k<?5FOPs_ib7c4VCL<rmOZ}Trx
z%G<U`PKY~y)YUrHS-nV?rI!{6VebTIFMkdskSJ_hJh+fJBoMsh2OvYrnm0mGI7+(r
zT%}q<JFr8J@-0(2UQo*|%DuU49pV8+t>P))!b?I1d+q&pa4w%889qs#FHgUWw^xSx
zOdP@{<G_6lG-+1`Rp!W|uBbqzAe^bgNweEO4auMpK0-Ep;oz+5dY1YK&4lWnpbQT4
z^Ixm!C+rz$`4bLa>IVz`KkJ!)Vwm@ccj)E5!F|7B#Zevk|4YyR!{YzpGY1pn|Kl^~
ze^pMI8UHV((<;pk$IW46@12@7b|d9YB2#<$am1Lv5y_|MP9_whZQ8>6uHohw8hiDJ
zd>_d@{k}3U+KfOF5sqX<)W1O>Sa`Qe<a4jTguKSXVtprn9=`f1HilBcmF2_V^tvg0
zbr{rIEwdS>eWh-PJQ`*Rm=f$0f`~M4Fm%1OtA9W<d)uQR1XDt44RvVgyDXDeR99#R
z!rp1eJ3U$wr|wstb_@n4tuc!M&kZWR{Q+_079z{+us4aRK3WMct?ZG+*dy_}2Nf;+
zJtTIbOObfpzJrsfY*LdLJC+8R{C4?lur1s_;Y<yNXpRIgWEF&Jk=HkFPtV`B6i@vI
z6bLJ~ZEI(a&C)=>U%PovJinH8DGS2g@ATD&smwG@b$`ln`%yBOI4p)*@3Eo_WZte+
z$*NuJ$@F)cE1UmTgcH`1k=3v-pkRSwK<p)!h$T^!aiTrPI($giSW9}wxw}(DvdrsD
zL?q$)hkDb%5^H&h9RA{a?kn1^8s%0B?;_1?SG?(^x0!y|D(9%w*cG-8*rR^W60%K!
z(|wiP4fk1DLwvG5Z*(*Q;p|pK;&CTxt#%?w)4rLg9`Ih*%p(?q1j>G~aq6ycs^jLT
zXUQ<(k>mA`Z9aLr-POpRu^s~%r{zJM!W^W6#}n%Eu-XyD?q2Q{gG-YmlDm%lnp_vj
z9|(xKevDZVDCTRpIhjQ$h^j~JBv??<d;9L@Z3?@Q0}Q~o)PMN64w2@ePp-IZOtFQ0
z?f<cV$t_vUEbh;@Z7-Xupv*4=b;|;S*~F-)4r7bCG}(xtBg8}czB>xVYIc`tAoX(e
zO_>86E}OZqeqb9yDx`106F5!@tr@v>K2DFD^b+Fw9I6U&N(aZXoR1JSq@y0t+ou;$
zcGOqT`pCews!_ZgyK?cGiUGqJe)sOh>RIfx;I$=)_(K`uF8GZkqCS-SFl7GnlhySl
zETF`;KgB9LM}Put84>XeOIalv0ybgjxM)vf(t`QBXJ3*!S%4ej5neaZAz-?eWvT&P
zn)_F8gF+t=seGZATXOCrAhyCve+cLoM}o5Fvo>*Uw+ICb^cxXOXv1Tc6=M0@wBpi3
zGh0<v$px3yXGnC|U9B?fck0^VF%}OrFxer90CBz1A_54xt&h5og1>!U|Mr7Q4wm|L
zwe|1GeK~SVJV(aqa63}1zDpB1gNsGJZLH$=8?nVAMV7^SIQIz>mrJB&J_=F9xA1LJ
zLTOy{adw6xzw3RM-FZtit2jgohElR^v?}m!J*&WVkQ<Y>mxgjq7~Ga!N(m-?f=JU=
zEweg20IjyF%Wz&PP);Fa{H;tu7>jvnx#j9sv3ax*w?+dRIn34Ow~QFw*)c>o20b8V
z@5y&Krx=q2Dvvk8MuFoN#tx>C!37BpFEVxw5a>Ou4g@ZvIJpCQUGn|zbcYw(HUVwQ
z!cb6|bLV@B(eN_GHU&R}_s>C_i@nkPi9~(UO+vG{_<T@MG!bu7rg;1O(5}@OeNuJj
zHnImoMhv-R8)C~dU=}{q=r9)v8N-dX4Ms$&*GE0{f3pW8mB)@v8PR$kjX^abd9Zb3
z4%v<LLMDbbnaq*b8+cQ|*4TF``mV@zzv@c|H6)cYsu((NrW2GaQ(4&rv+z=Njh=ng
zuwa6)q%{HU0@;GB>jv+KY#^BRQg&T2%2K{B1c8y-@6B;z8KO2KvB$aWow!AQ&4O>m
z24@8S;ox02PeTX8msiF(WQV<E24-#EMyn^1Ql)WoFnw4@boMh|C^rTt6RQ?gj_ag1
z&fh{FStL-si3>hY3^dnTUHS!rTz*NORUES|&pu9(#Z0j@ICc*V)%>ie!bnIU4nhPA
z_y$JPCy>%}EcbLQT$CB)*i<~C$L1eYrT{xB6;sBLo(Ax0v0;WPw^>ws=B1JDZJs37
z#&EC*$4}*uK^|EZw#=C$@myc0Ej|l0x{X4$<||ceOu59f{{hd1M9v)tR{fFG^oKzP
zU#j2R7|rLHYy;Ne=&k1AL8_EIAKYQ55~kdX)6-kh#aq-CD~ys~1AlJ@?lM>7DM*b+
zDNGW}Peh`v2P!yBH97SZzPJ1`i0CsIL`0!oTQ{J=SjBD&l3?ZI1tqJqx+u9z3Z_;=
z+yl$$_rAA)c756@?BVbS<rP5H$Rdi!^Fq^bKe6=C>P(7}D*+2S;Tskp7;&V=gZ>wn
z_$e~`iuN<n3_@DMhshTSQRDv8qGM!Cb2`8{Ddz2$LY+FRIHvs=AxcdJy9DM(dl5wC
zkk?tuQdRpg_0V3^&a&j6K@0<PsCJ3S?aoHCbue|`u0?fm`^f&sqZAUuZKE65+kZ_}
zs9B(|rV)nGyAA}M_yrCTGF#b&uzo_gg!`d*<mXsTDj>do&F@!DGvTY>Es4wcyL@U+
zf6%zT75SfkKRsTq1u%hS2g=|J5T>hNN~IpUsX9<HV&2P<wG^nHQA0sX(HCgbKW9fu
z(^mQ9U3*#7rBBK00We+o=ayBO0ec^uKQVk?!sP|$Zrq8Rh{~R)xXzZLe<XJO?+Hqt
zOKa#ha4V1`SVB#*{7(hatEKW`Mj0ZPP6suhP~+3R#DVQ75IJU*5+N504V|YVtTQ}f
zr&n5@s=lfr{A^NWJ74%a2K{_Sc)DJ%_IEJswtuc#T56X0yL~w?j=Zd+E|tp8jUkFw
zOg8GQ&n;trsbE-~!WWv4wh}G?C^CLAy<jNWUZxdWnv}qVSA%H^1-`b;Nv~lyof(#n
zSU1ERhKn8UP5S%Sj)@_?-NvpQcB%a=c(*DyDgYYqdxwDRCxwFTI@L&e9?8hb^y_UE
zIxxk$TmP^`<?I$p9g~wa+WSIkdU%6>DwKM)mwG<P0|sco{#Kfk^?GbaL}%;{1nvp$
zSNoWcAD9W3`3u@`fIS1S?_LY*#StC(jx>Yw5{23C0*`T?@n@3rTJClDaJOE~)2MVj
zvO5WY-vGI%eyC4dlgGYI-lwvLqj9|i!M_eOa!$;LgQ_FE{yeEgzu0TTP8MVeNp9k`
z(Mu>ku7a<XBDo}Z<)GKuC*bCDYUfDYFr%E~wt$}Y@v$tZpvH7YNPvV{TLBRBi-?L;
z(Nq8m^}=4L(>dw6hYw|F(K>2J^=J5?0Xj#1el!yu+Rl!ADj@)G=N2LWZuy&en05O}
z&4?(HTV6HY`%b+#z!<lmKPvr4U@?zE5>hgEy&E6<#$ooA@!oNHgV}n-!#2i$d;#D5
zVcBI?qQL*b>Pulw86*2g{C&#f6)57z90qNu{f=?I_-x~P*q(R9qUTJ(zc&iY!8mIl
z@pGWp!6Oxg?4s_#D~H)F!4@lyM926Fs*bMZU!LjwujC>fQWvmKk^&n8ab7|)>f2%0
z>)wLWfJnYD2q&m?$K_m*m$J~2*l@@Nek$CcLEx6F1q7P>$!w%1g6QlwJZefLMZ;(%
zj!C>iI6#`{)-|I&3swFQnY2jj7|@Mn%p>o>;DgDHMkSW)JdGUF7Y9`Qm!@U6<T?{w
zT!$k@Noz!g^l>D{K{iYk(aHSWhU6Jj2@W*mZxK>ilcjy$R`+~iFS@T~`pNrka3ne#
zI8kBL#-@@OHgrucw=i?yIaSI!MPkYuv<tu8=1efetM_QSxbpJJSX}+JKo$3aHCuHA
z2sUDUgYG>?A@l*hG1oU*iszOOfF>XT_d~e9elm)u2@;%YJUZvk`zB~`tYuYo-U;Pl
zpR=C*Z(bLD0a@GgT||1JI%NqNK^bgZQ=U%;#}vf8Wg3?r<l?2mn_+F147K1gTXDUV
zs%wSDzi^cDAkriT*jlgoKMJl(nG}p1!O0+K08Uw*$F_0Mjbci_G$RNj5ZV3I-G^ru
zXX4e9Cd=3M)c$AY11Bd%15XeH{_<n`qx5<uSl{5ocGbe;ndI~dvobej3$f((e1)D8
z%5<}(&xk!J8l{0|!NE*9a8li4>OOA1<(F#;F$iAR#?8|vAWE$B%AA*?s9^|WKTPgh
zo(#S6CB#M2-sGC)NZ<b4ACSZ*gX;ex!~am=f5^bd^8d)d%<|u40Q{fGpta?=F^tx|
zqI`Kst}ng`6zS{cvDa#GAZJ|?pP)O6hX_V12_O{!%`@%_)C;~@y}2X+N^ne&8^K8M
z8@hh`ns%FhCwXx1^?En+N$H@;t*YVE1wW@^;UCBQcz(8&tgxM^u=9~R8@f7|@<pvx
zsRcx=UR{q{5umsH^pR_%J}^!;K+)J%RB+d5rr5AJM^Ya9Af4!TY>nIA-E8>k4{Tav
zn(*8`$oT#WLY8kx+v3x8zv;UC3g{~A3jCL7{B^<F?eQ`3`?=U0VJKx=4~b<!tn6+7
zMGBLwhb|vIviak<gpiRYg(zmA+Zv19a_;WWPO~t-^U${j`iPS2fZij!S})IW*;*a#
zDeuliwyxof&M@aPEoi>lmla9o8#?ik0k-aD5Zo`TNDexs91+*1PXJTcXqKQ?&I!@l
z%XGy@evj!u@wH|L!FjVmX2Hl#!qbo(bDLIJ*okI_JB=nn<!SU%mSVu*iG?}ab4<<g
zI5>1{0A(%0xg0Gv7!OK*)7u<&yjn2Ncp=J`5WexUup7Q_7gQnc$H{j2a?g7kyNZ-h
zk@Kn39%MML&hxmrK@#Dlqm^T>vR@)yhO53Ka$L9Ku6KaND098yah&CEvpc|v!!B&Y
z6NUTQtgbs|#7C8J?33$6gh5=#S8qs4(~Gd;MYLX*@n5H}Hd=@=HJuLSSUX!EeNU?7
zp%l&G2E}b!bZXAsN{`dElWKxR$H70K6!9pL#Q~sZOuvFw2c>X#^CN(61nadnxc^dU
zU_3|!EsqY=LJg#a`mZ1q8U)XLQOel>OiUTVwg@e$pAX#ZR!^!9FP~tDnZeY3DW%t5
zDh8f2a^iTCoCUER;vv*HM}zJ2y3X;~$_)~(P%7G8YoZ(r3@D}ot)5DnbOug&;rQ4i
z?)mT@0)bPvfI~V`D>-Jxg=G;+SHDnbit*1bTnY(tJ*`%8Jr1Nb?}k=TZ_>H^2Dms5
zp5@)PuSnaFbo~hV;k)ENnp3-+o<vxJ#QR)D8!9u&bQ#=SREdI+ctzhTIIC=z&y_!$
zRczBwMa>Xg>ar(1rmiviUl2gkebss5_d|92iL94gCxO@Se>-&*Es#Y3)Z|(7cd%cF
zFBNM{6(>B_RJveh+J=DWKMHU(xT{BgYtTo<C!^D(aw$HM;Jk22UWpw+nC@OK<F7Xf
z|8D-RMl^+G;z+@de=cW9o45r^dn3rGk!sBCR;>2EXz*&|hN<9}SKb%GanF~$A*?rp
zOoT+#(iGXT>EYaqbXdxZz;tfl6cJ4Hg7WeWCt(EAzS$|-nCp{$%QMM9e8vKFez$N>
zo{%)KEPeH-3I6RqeLe*wABAQvyQDV4-ao*TvrPGcx&u!6D_!~(pq#$Hb!npM8}a}H
zOK_{mq+qHrsN5<UBC*wEZ>gxt`Ua`U=TS?Ly`iKK^;Z4&f=ZCW1x*XW{TA{_o|!&j
zl1LBRyz!j<%HX%6Ty`KBvxuaKK!Gla+KNuyht@!K9vx7b5D-+=$A@ba&f+LXlbolu
zO7||=A3;=;6X--zqaq|?^?gn_1@tP_p;VT*h2a|g!-ZZc<lQzC)RB8qTJV{KPwA(v
z*as%cEq^KCoP<9MFa)8SYE~+4U1DfOQ6qPlZ54f*kgRlBx7d3ybBm*{sbOj#YU|xu
z>wgkFS*TL;3FkS4iDF?gHmg(G+00Yy3p_IJ7mG&HuThdw@IS9BbBYhVaQ;X}jilSF
z=<4uBJI7eoD@j3_XGNFAw95BOW6Dcd5_R|KZ6Q#tT$`xR!l0sQqW|HC^i|b}w4sPR
zhxT$56AqI-6ynH}!BvTo1D_<%ueG#`A}~Z<;=m8wn0YLr0E0owPmr;!<>%xRSU+*K
z!p+6Pk9vq4O1R~H30~o;a}*+hX0ySJJ!zggkzyl5+iPe<=a~j%-U|~4Ei*hNQ4AaC
zKa>-HGx1FEi3UI#HQwJu<M*HT{rjkemyE*|aJVtmqDmQ!QW2y9cEmEE?kO8S0y?o=
z+Aqo=fo$l{kdZ?;%*=g*E>zdic&GJ|cHGd>(hU}92<dA-9gvYqBSt|_2v1Ne=d`gk
z)2aOD(>4}8ap6%<U*6pp5GnhDkHllDwEZ?FDm6fja|owNQYZ1R+|(fQU(ztf0XOzi
zBimPak*Ejg;;JL@nK*4*6(B~+%#8}qM(XUKYx~_5M-g*E&7fHH%Lz$LgUxobj?-Mz
z##%AH`7478G2*jW1OiLK1&J_dT%SD+6#SISl2vWrAjlmBGR?<Xl8k3JfADFj=Ao%t
zA9TAsKU!9Nf8I(`BXQ3X3RK&@zpkrDgt6zcVG21OzBiFWkN+K32|HF(KncD8b$4@P
zz-(D2jd|Y#oj$d}WYW`~bw2FiX_WXZT9`2N&k<=#uL8w07lC4J>22D9%{I~kdmX&%
z(V>|m9+d3O%d@s|G=e#AY@x^Cyy#`BKlwG+sTsN0w@l<3A)1p$dNS`SLD{zJRCs<o
z8Q*H=^9D0K(D6p0S9zo?uind5p}<TUo_}0=!r+efynlatU`vH%%(m>B=wEAgIpxQL
z5+ZYE`mzQmO(xqbi4{)gzeT9-o*m7)$}dFkW2QXf@q-c|wGooug>3yr0k^^yRBB<p
z;^CVui%q`UYm@7`m^D44?he`jAhU%)z9{q;Kmy2?9`#a7l=O#vaMw|CGo{?W>ZwEa
zyHDjY1(Wh<i(<}c<dX0I5MR943U}q{mYYAG!quga#t%40*s$_-yj`?Z3jF45fLiz4
zWYQbY*-Y70Q&!ryKCDB{nY6~beqMk=U>SLj=+3=~6_6W=GDgWr?k##tPcpjbNE|2z
z&kZn5zMQD;PEDrg^#S9LEh@1+E+zoYs$Ux#ARD}kvp4Hn`pe>ZQ*?vznSRwL)En|;
zk@(nCpoK2lhBy3LN0m`a<|Q4?@_S+jT$sjsr=4hv1pK(>VOV95^EHyBMSgw60XLhh
z4-Ywsu~?1eIpeGoGLH3`5XW6gIliGS^Bx)C#W-uvd=8hGrEzB=T_a{}O02(Yg8UJt
zYZ`w&L=`6sdyq}R56{R1tz*r<sQOdjdk)#gy}Z;gggivY8l(=7f;8Bbp{poJDrPm}
zbe#MvVIg<QBjF1r9_%z8rz-{|>!g|FF*ehKCN~`5j5pSLZ%9~y$&#%HB?3R(Uqc)#
z<zvtE=@)LnH+=)<A-1p#6uV?Urr;Yr`FnTUpvSI5P%Z0g6QzOsXbJ1zYum^tw~tlT
z0t13w&*(Zq+;CZElK7rhs1Ripq*=JO0!wZ+G>qB<x<g;azQ%V}O&&1k#ZL9~p1;L!
zrn|18J$TBWFpzFTCgHh&?hNQ$Kq-{6J<=CbAgncW2MwAcflVf#KL!Tv9J>TOD+NMP
z#AYX~?SY!_s9dGNUEN;gw<1ZE=ui=Tn&W3QxT@X|)5%dhtgDR3)d|5U5%Z?vTMP$}
z21vj8?<bQ}H24Uzj>Gis#LOYzGs@%kBAQA8vP>N`XW?4y!jbY=l)n_QqexH^HV4gh
z#v*tZhrsg{|IAh&8|^tb5^SW01DE!hBrwsvi7?C2M)M%zH42sTEaXW%)NmeXi45M)
z2hk68CkS)y$pSDMV6vFIdBol8p1Ig4e8jfwK{M*Nh#V`9nr&q!u3+!iPObGY3n~*7
z7vy#P!U7K$6Jl6pPkR-}ED!~Y&Qd&Ckv;R7SK$iCA>~aG0sOBlvMK%|Quv+$fw!cy
zX8IraQK#<#kOqy`lW{*iAEzMmz!tyEKPXS8(DaqDn)F<<&S7Gq09oXD&}UxfS96xq
z=vBZyt2DZl;W*Ch&if5$imE~#=aH(nh&h`|HSe>ybKhzgCo?7Agsx;*(G|=tnDeT2
z6%gro43+Ry^O*^)rNu`OWA)WkI;C3v1a8Os#=^-~^K>RYN$0j_osz$xVcZR~eRlAO
zBHM^3<f=)}99@~gN@&KAzU1-eqUPr)@|@4PA=q$A!kp)K(yai62_0i`<Q>dAE|u|Q
zQO?rPQ)koCdUWAX#mg&O<>rceXQweMo9)Q>DNr))=hO(o(q8o{Loh)$2S~;i(+zck
zrpgD-?OZN~t7qBFhfx*Jp-)=R1DMMgrCd=bzVYSC(DZ=BJ3-qCSze$U1d<j`c=AR;
zKI}b39)s^#U_}oxw~P08AhJTm7wE$5MtLwQj;<IuZ{_XV<RdW~7C99vz3Q1$#=!=q
zPg6czJ@23U<Kw5P&=zO@m-{I<3a)%*5?eb1*2jgn=s+x`i?+Ws%8m*HY~iEqlOAr-
zSpuXL=Q8S1p~c^S;>i6eIpcO<8W+3L+v{s_<xj=1wFh;U`5RGu*Fs%fOciUvwHl%n
zT2Z{ZM0`Zr<zI)QxMekSW!iTl&PvH$W^sY0gjvDvPMf1bGuVE;$wYMp@-$8Q<Uk@<
zeO^DG=f1w^8IoEi{<paPBdPxp7Yl&%|1Z)ov;ViaIQ}o<>eAeZ`Im9@&aF9ZQHVqy
zu-$%02}bFSB%K}>(#;YTh_6CkK`o0*GQMKx$YuU%EqNzb%BUOB)Hfik6LocSSt?U5
ziSVuMJ)zCxKmIworq@Sw^WAiKqG9==al5>!=pgHAqQ2?=CM$xhn99~2)TGwH7PW5b
zcxXQ`e6q6+cyZ+a7jf+WS0%sBUZJ0;#`_RO{Q!=2s<FaeWB6`*hh&?a3Q;_!5X?Cv
z<B9qNM6R7XpL`vg^w6#1tY?nY<&xI<P$<azeuaN&G=>)BpU9`B8x$^9{wWJqymyCf
z(mbC<LafF59TM)r9Oc+kvjMr>B!hmG;&Pz&JfLn(a&)?oP~*F|X)P6*!gI%B6Z*-x
zuZ{0%Gxw>hKES>e0J&Y~t^MNiL`YC!Nc%k0>Ww?&>28v{E=jras+dIcQrY~}Yu^-$
z7}||#r4i)o=K216?)CC11m3aJjIp-php~gd@Jq8rk$?G$a?BdojJ(bPXnOX}oe{?h
zcCF0Tnf7vHnmmUlbKBiYvZTIFxdZ3Icqj(eU{enOSyqYDGOb(Rc{Lo_cmAFl$DJC%
z_#&FXgZ8jF^r1MCS>lspCLe;MG0^~MX*mkx(Mi27xm<NwQX1h8^TrpyE_hFPI<Bmy
zK$hi)nxFkpKqS#Oh;cY3??<E)IN4K`s5>T&&n0W?=mh}$CU~H}pRfcpPGRqe|L%=M
z!A<kDT@1_n(@wW_U%;evY7Y8$Qz#`|*U>{j<3uV#I&hFMxLU8eh87p(wbZL%t~&Ep
zjBrZbI57Q<70s*nm;357{!+LkrQ3wBJRcvB>xW09S>D>G2@Xr^pK?DONum8zpyM%2
z9{>dzXmcss#%!K-mv@Bj#qy1j>@={r;X~9z-EZ>CY_Zi4*mY0oq2%kRt{SQKrHwN?
z!~jbPU7z0|bl<5iS&0_fn`b{-C(~IOEigG3%G(kNN@Wl72&|tIQDU3wJ)hbX#Gowc
zwx@b%oAe~V_{EP9<WdX~*~T;wt;sM^T>}9gWw<4wvA`$%<#0{m{`ls1Mj8W79pkhC
z2<wjxmpws%aI8$f;rU@rqq%pwwt;XVxVo7<iFb0-$J9jLQGEr+@93|m$}pQb;uJF9
z@jBUBdEUHp=EUd-w#aA?WR*p+>3dMEYU|<TZuu3f(Na!{GAE@;RA{M#HZEKP7ond}
zH}64rm*_0#ts84?eAJ8?;-Mh0lK1V8Num-}_rAe>)5K-A@{~6kP5dn&vOQ8?yp#uC
zj?{F&gqG?6+~3IfJp65+Y|-k2Zf{US5E>Hu+ZBi?8S1=Oj&f8<Pj+KWZj@g69ojLt
znjZHM_cu?j{5i9s5Vo#^S~W9~PDm*QmL%{MA_5R)s)qVayFsJsQv2o}dw0KG7#wN}
z)Anci{enC(xRXY_&go%E%K|B)`>xV0qwUI8epU4-<sC`ilqK{0ZL8=PFRqGkt2U<z
zrS{koSY$tjR{QQO?xy1<M-zq1b88{bW>14f#fuOTLiU!pbe|AK<tRP$2E*2IuU;6C
zJRk&0$ve4<mioRi@U!>XTU`pQ!@JeYado0z%|hVGEbdEj<&5%$^jk-LmVm}Z2U*B@
zSWPbL#YJ+$IiT2C+a1G^-?eG2gMeHG<xtYJ?i|TG`D->gz2iO6FUFe7)3{0{3^|_w
z{Q1PF%UKIBF;7D`??#s_k+>~Vm^k`;lUZE~5oy#+ZZ6dPtD|0a=Zc)zRnR(dD82*@
z;^>aXxMm%;y_*A2sN~RYycjs91A7LBcDhd??u_C?a)F1kts*J6_{`kpRb+_&qIF?n
zaOh(7CedD&3oW4}A!xp(xtT&=lfKb@SPJ6)r%yLU?oeS1{Rqk<q~{(W=rzm&Y+pt8
zyQYXfzsj7J2vb&sd0OIt9ovuiDRCBhjux%?q3w`n)dn)822#?GK!V!}*>-vQPQVif
zHg83ya@E&(XA4EB!eh4RX}tV}dbUwy+<R`(i4DmgsG?KF*1aB+=-u0fOsEj7F}#B5
zq3L--(Npp7^n9~bQ(d{8|BzHtO)@DhYeeLQi9K^IVi_pJu^>|ImOV|P9#pk0!v=qc
zsN4ocx|`DJI3?t()2UQn>={NrY?XPMTpHbYt_X(70bRSw9gI@0p0i&VbKx=V?)EPB
z4tsV!vxoL}5ha(3QKMqX{jaXD(_zWj-<5_9;9Lwgvm4610RR=x0_(m+1q~gucC;xC
z!Wpo17V*++Bh+e&IMW{-`?*tI=uJ34_BYvXh+xq0?GNPUYmJdwvq|00<|^Uj<RVZ(
z)HVS^^fk>Ahk!aFMS2t$g(`Rl1zz^~%X*B|X>2LfQ#aEFU6UU%-RN8sX?tpB4zMVc
zq$nsz`3%9{FCYu)P}dHfI$R_^eMtVmbFo}+@#OID2t8AXLc~Qw6)fAXPKNVsYYXh5
z3J7xfuTv%897}zki!l#=`PH;Mma^Z{_<<fJtG5fQs9`OkU)>jDr*}X#tjFgn8+4W%
zkj*-$77}oC{#n(b)dYkxG|&3Z&?=BESxQk2)yaXj+JXDo^g#oX<*krr)~gd%ydWK0
zIEeMxc9lb`G9};-<R;sCTY6Xci8xtnBZ#tdmL@cYd^_SnmLwfBhX{b^I#iRUD^j9G
z!hWU*_Nas8aVYxe&hX@SlV8+C&hg$ZaVfhQ9_kfT0|)_HWv|(|u+)8G{qmkkq@c*;
zE2&@;Fn43px<M>u7&*UL!e=79>#A|WG|LQt6lS6RnoC<GRWJJyL#YG;%v6MuNiPRs
zXcqQS{cRIw0*<nUV5hg}iIrc;TN|lDKDm-CQ$}PR629y)8@(Fs)lFmN?KNXurNQ<v
zkg(@(-MJ3(?Y*Ag&D2y>V<C1Y+~H;@iR`H6sJ#oAq%|&BT1{YHVb{N5c%87hkCYpy
zkHr>a#PoJ+EFV0{*hv@pIeC|TD(1M81tRH7Yr4&R(eudk^ArzkbdDCghpG5HKMuVD
zkEL=iSCwtKw|bxAO`#Y$GoX|fki)npvwq8^BFk}&bXi(pMgL2(erH6?%JJ_+LLs=^
zFek?OV{gh&w%N#2>gl4xu}trvolE;)C+d4U4k0WE>N-hEKNUZuN;I05Jz4L4Rn~|(
zQGuLLy631gS}1p^6d`0Kg8MK0k@8WP0#Jck#j|-Xk|_W;^+64rbB*y7%Ox}c(p0I7
z&rXBoT$UEi@F72f1+KuG+80St7giFTnOVl#u-0(rf)T5UEt?`k<jQoCb5_MQ^Hj`A
zX>ZqB=%zMhcb@WB<KH>jhtB1OuO?-t@~qotr-_eSn#wkC<RR+NdJ&4YUC$+@7mPcm
zv;IHc-U7Og9a$SSQ_Pq+=9nSd%*@Qpw9U-S%*@P?*fBH3OtE8*DKSIL%z4|+IcLuO
z=id8f{`KChy?VF0rIM<pPgSLEl@#uIqDlHgeYBc>s(ybs`s8xRH?VbiI0_6);9Xd%
zx!k-=JSu3$5y9LvEl-`ssBM)7YvkT^v__EG;xWb!_|=*1++!hLQ%{FSfiLE^n9sOO
zB4X>~ClSX)K>nEn`+<qGdBBsLBtwJUQw`KsYU#iR#FtT<8^ne5bN80yEzbj}J}kQA
z+8V$jIEx;Z_e_WG{#}NNk7%aWlBC9jm<H3KGjrWCch`99KJy_%kQQbf!YsDX!&Tgq
zPUQeYVnVEsxQzU(#*c@6^&d&MDjG70s%|Fc7%SXd>|Vh_uO~Pe82fWA#Ih>>tff_K
z5jdoDjb3w4t5Kk|f(VM2Sd~)fV8?bLIu@g@zGw*(eXT0gGGY&{`hx(P*t^pu&vTQc
z>r?$qPAl;}P`s9*nSY;Z1jSx;GbGs_HQimpR7)ziBf-px=G@)2eGXVcuBkd=^d1vX
z(de}iRzYd5qqkz|c&H}81*LlyH&8BLq_7(~{4jq4j#65@N5Nn{r8HlD1}CYVIyH%c
zUQZFh?go>Z{$Z=E(7l37_Z(i^JIR2d<922LDEH=E&k?`Y{-2HeXQTbuxM$>GX8zN-
zXJYs#<DQA}Uoq}KYL0?tU}3GC(|DLlM+8kqUmqMOYi}tVlc7nyrP{K9;9>f7@*47W
zjOdb8vD_Np_OcIH8nOA;s-%wzv=A%T_D3x{x;JdtH(AgZv5y^QRS=CGcZU%_yMR|s
z1qOV}x+{}PP5rZ#zNHs|OXJDz;dL(`RIDAhoUbdF^z7ksMjxL)sK_m+s2z7)mFzCo
z=!w)2p0HoHwyHkv^ELSn`nT}Vk35hLF`XlzyyF`;bn$FI<8}KMisdO}dd_~8NXj|^
zbys@qV^R(DjAMCxfM;UDOIl>pwJ=EXS`su$>16Ihv3uPHk71oUF)h4QvM6{IDnvI}
zVX0B0)IYd3`AIZKeHJ@3=TN0<?@qKa*wC2`k@vnF*qgslBZzF#Y$BIsR|rYGaL8u`
zWw+_KqvcYnu7Pw`rCQu|haBQ)Lq{=c<F;-(pmAv)<j8%csqsrOxwlp8w7bog@WL6z
zh|O$5hxu}J-5$*GZTObw%^uz-_Dc~zHksB3bvwqJ4z&iL%8&w*)iRY!7kYf|j{k|V
zx4hNC5L(Ok`DE(7uGJ6gepB28i>k9>cv0WYAfYGh%9w<(_qkg6E+7S9KI_@|GCL)H
z%ev=4!DiiieMHr1$=<!G?=T|77vAicb#G4@b=s?oHH(v`+OYV*<~jT1@asxFT3m}t
z%sq65ICfEz;5B;>E32Z3*VTmPSICaVGTpY&>u+4=omV5qvwj)i1Rs<OKkTo`ZP%NH
zgv#EV)>1!^evyf9=B7h`@a7R4;Wmft-y>U4L3;O-bu1?gZYUnVvbCfrKL|`TX#1#0
z=zM<OcJ0U@Qhd14cu*%8HT?!_^RBrP2J~&?izcQ*nbl_-Y4r6zxv9xFIB8H(D*gex
z3P=vGsb|Kn>6A{Eh3^urt{Mynu};$a4Gx?`abe0E=(eeRxMLnDT`prO9}T_M=g)IN
zQ~c0l&{|({{(zX{IJt$njXXG+3FQI|PcDqQEVw@2oU~ZZ+S!k1;pMS3619ssmCnEJ
zxaxV^oxq9D`GJ-5r2S}-4t@6azy(@!oGISZv>F+4VpwFTTW;t}<1w-){m8bcR-bn~
z5ElZh%3^RYB)@Kc|E^D>!%#;n7p@H#(Sn;=zg=NGdmmO1#os6{n$gv48h&M2&M~ld
zKGfp_W$Z?9abGt7qH+*rCcYJ*wIrS`5F)LchO81?DfcmqNhnD_Wua>QEv&qfWStqr
z`ym|!B!@W|cM_3b=@o_#W7UHb5M6@bJJV#KyzW!4SLNQ$xx9Nj<7ORaYgG3kszP{K
z@^f1iQFyB^DimI)-CUROK_tzp_S57LMAy|l!fjJ=u2Q9s!rq3&kp*8t)Ar)8T}^B0
z2?RU4^^5{ey1T%k5}2PWy94pJ0@zST1~S*48kZ@e`ZUE;JtJpO?L^Fyjo<esclh@{
z*G^*gne&U4YrOifmsTM6Zk$l#RT7$zG?L7c*SmE@b&SO0{po3!SA61zj)7}fOCN+S
zJ~XWXo0H#%p(1#Lqwv4~O3D?%QLEoV<l;Ttihu(<9xCQx!$}(b7$x>zb7eJzC+twb
zp7GJHDaw<#W|4#v1Aj3Ov1IkDORp)_nJ7_<z<$BSst`h$X&|$3w>_<%R7+<jzgN@y
z2xpC|WKCPv>BRX|+wg|XpIkNXKRdtqsM5YldS|lVyvM;U^7^jEajHuPLb<QJ(n7Wx
zJeMnYK=ML}%q&2%d1^ct_J{u@aI>=kpS%G1ok<9iBc$_3m<BjzmgP!s85wOxdhGp}
zJw`GsbV!{#3rJF&Rz|2S8Mk#J+-+=r3(}kwm!MRc?<{>_Wo4a$V9qWi$NbB{_w;_w
zrgU6+rPU#L?bXD01JgP68>*%rlho_>0FO7eevI|anx|0@wz<~ACBK%P@r$HKJ4fg;
zv2=h7D=G|6JcxFZ1%P_dwy$3+CIejB1nb_+rY~Z;AC$6stSV?uF4YDgOJ%v8%RU8#
zGT9bRqVz{{+mL>~oFvI<J6l^tg_VzZ5B<}p6h$mtVE8zA&5Ix%2+M4luqB5?ddnQe
zon`>#?q-4PPmONR?x<hDF=?4h%@V!Ku$KN4W3BY`cqL|3hWm@S4+B)NX2Lf{#fixd
zWTKMvXzX{Y3YpC^5gDZ(cqdLjVD_^!AU!9k%SG~bTTo%%$c}WP32yYeR?>?oCXT)R
zqSZ~3CC{3F6C!3@^#-fn@*ogav>WLh?*tpz*7g&benke{g?H0@``t#>d{Q>9CQmsW
zA4bMW9%&)1osNN(Ne*OEos*<9CE`~!tLO`NUdh+VEtYG5zBkaLZ8N$2(z2N5$WvHR
zjD~mJ^yk6irauoBDus%IQ6*PnV0#x1zjYoXK<nnkm?PnU57hIIeL_unAIgyf725hP
zV7hmz(BPHvv<((Hc!gMDMO2<(Q;bX@xd^xUC#Ft@!uqCo)JRVL@?6s0lTk9EXesJI
zAlL1rf6<NPWpT0neSm$rq}@=Yc-a!Bksco&kcD@-yuaJOROup^{%l4FJf>ySziyaF
z3lT=8unIl}2|^DEAttq#1#8~EfL%Kz1|>LV_v_cBglhcYpX`&B%ua8yE|2IE-|o9%
z-V^@((r8h}u8HI~4l%DBYsyH0RH_nA?zLnmgeuRwG>&9USyb)OV1~5iZ{?8!-b@(I
z2XiEa9-W`Ky#ggyvLei)T3f~YGda?K=4tYni$AXpmEFQmr8RdtPdQuZ)r24)Lfv3g
zfIsVr60avf*mz}-HprNJ<9$h^m7zc13KPWp5_4U+X{ItQr*VP+AxHH}M7rV&BV`CA
z<8;T(o7oJCsMH!l*frys(*v2sTGDA_mSwtmz_2lF#5$h8Nfb)K@;ww#*jGp>H>Apm
zfwe6g)jw-iyD2P;sfqd!8C=nx_yoOf(Crw_lRm5!JL&6Q!Ml1wEgfEDAE^R%%k{8_
zX{~;~xHw9O8t+&e#;DhbdiYmMx+%MU?<&bUq|K!|=tOl-at%j@(2)&tq^b8h_uCqK
zq>nhQ+vBKh_FR_z?_STo-da-pROOCqW(e{i9*OmkN9DLSTR5su32BbEDqM!6ijsZ>
z6=Cvuz>ak-$X}|1m~fl?s9ZF!?N(&ExR8)0+=U^TWCx?rN~Oz7f@pM_^4IFQuVy%2
zuNINK*3G-p^zpZnP5STB_h91_6DaSaV<5v%0MMGD!(L^BvE}+5J5rdsfs38R5}m{1
z!`cPh*^>3jKfaehD8|kxrY1{jN{0?uQRY_8Q2HpBAB~?&(xoKhLe-6ImgiT%^RyOD
zNh2aTMe8aK1(t|U&q9-NY9{F<Ega%E>|&5lR=mz~qTWA}N3Va!CH}>)vr$XPa3$NC
zC+mwK%vbzrb9U}%sjN+sbj3ENj$fl!lT!1o#KMTPd7H<?2$JKSCYuFQBPpD-5$~Jl
zEjv@UszbpKm8SHk-{43)FV13f=Z7<me}(xh!H2L^K(XU>)w}l<eK#Y$6P<nHEh3I;
zTPwzndGeC?j|723#ubKLH7OgS*^NArcR|VcPtZ;bcdrS~zfG9<vM}^^l)KJ^hix0A
zyd9U#*w3g~>`;hzJ6@O^YV9nc%MSK;_Y4s*o5jD0fx-o|>*;NTn{ZFl(DVYDD-Ob(
zb~Zm&E$&0-b1ctra#FZzaW0E;Nhajg^3k=8FH9pV#6HZW;2LRbsrLn^$45x)JMvnq
z$*xcbK@5D4^T<jk(@a|T(aRkYRH~kqm<;tIA1<~F5IJ8Tf3F?gPUiGg)EgmOL77Bw
zV&jzrRtUM6DcZDNN(S<$2E7#0xBC{L*RB}BNLCh@JQMU<bfg{k`)k6?=BwEUndA96
zk-A1ctKCcbtLl@B7!>!66dnZ7OTyy2SU?C?%=C93r;n^i(Gyz}Jj<qf4l=p!qD%@m
zI>+MlbqJ)id<l5bTtDkDJL6Oengct%-k#CPmbSGWPK(AzhO{wEN#-daXD_jRU8fFD
zxhJO)+ucC@N%b{G<e-8<M*4(q4xevV6d9XpT&(s<-z{wJu}UFxm=UVWRF0FoT9F8Y
zwuMcx$#Vb3T5S=Hu6V-go1zl?#}CJNTioSVYqhhK@a|2`{yR7iI|C1MV^6Venzq7~
zf-PnX3RO$mM^w<`t<$Ax^Jhx4cp2w%@uU$C>|X$#WJp}SF&7GV3#~p-0m6xyyvk-s
zM!XF5#otESP{3Aw8CZCW7ZPnL!GAQqw!GqBl4#24=)#1%NWKwh&~kcGQ+*{^ssUa4
zezR95C?XwJR{d&>{`40^^!Dw$Lt<S8M5OhoMe%TSKr&p@Ciyl?C>n{s&d%Ab&{(f(
z!-#%&r*}<_f0@|3AX=$tT99w2c*a7CA#ZFBUu0dnQ)^Hl3!R){ip;~LO*qpS#gU}~
zvUKL0ukEjEuniAExu?UceZ89<-*E%{_J0~&y$qUue>q|NYjp^we_kDe>0ewO;@k7!
z%6mucLTW@G3qJp?=c;k?hNR(e%s4wr(P(gwzKOoU8zbU=ufPYY^H`21Hn83`!+kQv
za>{Y$)?)|I;EMHv>s<Q__uWU|?aTDRM$@ib`&+7MzOxK(Z)X>Y%Br(EHok$2{@HD5
zo<0p)bv&qp3SP&>rSr<~pWx?;tBy-0{IJx1)>)Rej4he$ehHksbW7v3R>4}i1*rY%
z4k=%y7hfKd!nlOHhGdf!ba8gwUS=O2=eW<g+BVn~RVbTtJ6p=-`*f|rWP;`G`*{rN
zZU0?(s^)9q39YiRg2UB^p%z{Hy$$w*(f5zyhgx2^pHNV;$t!*6<{$Nz9FI7f#`Dc;
zRaEdQ_!iG+WR%dzzN`>Woaxv*QM<Hm3c~bb2?lRksC`mdQWcr|#8*p4lj)ppD)hC^
zp)M+rCHmDG%-%465i1-l7F15w1z!{uE4dIodBVU&o6CneX^smMovVvPB>EbQCi+Ul
z6SUG>8)>;s(}i9nZ+wrPs`?VU7U5k$hSXjJp#xil3?ldZxtF_@&WyF|gz=C%$ETXm
zd)KxCgZrxS$WA~e-F-QJ=t>2CCX1G-P~*s*QDx9uj{syGiA@Kzx0PqZ72R9$KX9Gc
z^@h$}HR|X*QoX$==K8m|_ftD}T1X_K$G?!*W%hRiYI(#?)RCrM)ixbC<INv2)I;d;
zM##KlbBEDZ(MS#K!+v_?{!l;}m+}x=5XxQ!h~rIzVD?&#(P2%p?j<#BK5mo1eFG;?
zHx;PCf*l6&p?nm^Ja2RUTWKwU<y_Qd#jbiA2Qs(ZGAV;!`*aI7r6(^Lm$XW)O3Ew0
zI@&uiRN3Vp!FxEw+zyYzq~x;(6^c5h-5P3n-I(3721`<85q?DTeLHZ%_GWP(iMWdI
zFhhhfyYZhW=!I1;w|rkAusrgx4Ms)x_2L*JT)H5rhQ?M>#9_fueRF-ptA{e1k9?%?
zXTG+^_U6=HCzmBKgwNHW4Y!Laep_m_z}KaU>4P9+h8pry7l|BzN-o3xRIHDVPK_=d
zPa_*h^&=!+H>?Ep6Xq{IGeP2crVJ1FSDT$~90kI8sIxeM1B&19;uE$p>nGjGi@=>W
zT}_e4?jsz~hbBF%CV1>QDOhLy85Kf45Z2ld*>ur_;w$QIbEQNJY4uKJ?Y$RWD|3ci
zz*#9dw8$Jr3Z_-!pz<{TRt%OM_XcK}(b^3=rZ!(>;bgS=ib#$z3n2YfC)=42<zBFW
z`<GHn0s9SLRK<^u$3BS$FQYfuO6!x%{M=ccPKyZQRy+yxYZBjxmVJXa_OMoSR4FR@
zDVnIo7Kep<^TA<B6-5}Hxg+kI?;}tdA@e*mB7pgjMU9ZS4H$H@$Wx*vxWZl=HY=~n
zxXtOThe?<00cr3?++-;|Y5fj@61$IE>-Jp5942~}a=0Rzj|bNx({+vIM-&8}RUfRH
z5XIT~9ibt@InWkR6~{ahagzlYR?)dz4SBZvGqTF^E|e39<wVfmORg`zA(~!zU&-3&
zX#5DKR_D`44kHIMMXuX;c7RjzfW79(a;2xHDWriDR~p*tTM$&g;N{O4cyeN0cM6po
zq|pU9JF7b?aoUG2E`DEGaq#M({s_Q-DWfY5Uf@N=zwiA~!2c*;sZLUbd?l#)7bYMi
zzDb^!ZnBJaf;EsTZEye^)#e1K^eTe6Mk$kg{z*W^CAhKsmCDaxqwRcaR<3!ugN0ou
zOPz)^Gy2H|A~NoH0}?y*6BpboUhkaTTdIYn&z(7j$wOG2%H!+lN#qEgC*BM^!VWza
zggP$b#%iAseVxE1D;htMw?k2;5;6KoxK)5TLhN=Pkh8@cuO(``(~{DDXmx-SVcV&;
zW?|ozZvdOkU*=OlT$a-1dHNiY<ck*5JzI{C)QlsgM0#n?!4@T>q-^!wC6AH^tGBK&
z&2Fe@CI({ar`}qFcG6<Az^%xfqiL?QhD?RJfFM+Uh{6xg0jld2Jam8j86HZU{%>J(
z2z2!eYMC_!eMjIio%mmIUx&dZ-&_;Et`Is6auB^!gT&nGB%wD*MywI<8C4}TZOIw&
zLiNa6l%-jwoXm!kCw&s^m5*+R9-Y+qD3M0ZRYb*VIMYIB;-1ly+qf0+y^Xq%<O{2+
zu-6wImtycN6>q7*gs!PXWL<@Zx3NhX9&o8r39Gt{@Z0l>a(H)pGlQ7!DM-x3yNzr;
zyYbp7$F-dR&*5=N!A&PEVoNm2DfHTk1s5pXI5-h?G(SO8+9aaZ9OV;W6V%pwEn%+c
zp7HVqxoEK_@fq#4K8$^pq0BQ^=427rkqnj(*6Q}it#XO<cD%_$0B+(<62{qH)#0yv
zx%r{iA-*2_f;PV0cxImDZo5=DsKdFt87}XyHy<bV8qGuGt^IHbov+(D#B`8cMZPY?
zNO<DzBDz+{iAps4#ZGUZM>GV$YDYv5=4)?`T>FbntO`QkIbeRfb6F&FcE?@ta%k9I
zbidy~5f^^?3X{mJj1oSedL666Uu%|G9oPkkoI9B|3S|9e-nPaB+h2Anw#UJ8-9G=t
zBEdH2L`5yI*OH017<}B3Q)m}aw}|9&32p)AU`eFUEUGAM7+f|#D@5w`nfZ5CI3swL
z`hr=9_ot9Q7Uk7xzM%^r4p&YDCG4ihS%tK$X9wibZ`bB3e<NgxV}}8`2bWXh@{#0I
z(+i9L^5S!%kZtx+5jX{Fsa1|5u}QYFlSv|u3(Dy~_OPIEZ)`dYG<0I*=I&F*0`y|E
z`k%-JnGOi?GEn6rt7?lNL8I~_(F*$)sto82t*r^c1XV+k!zZr(2qG#_KT5c-c{_e2
zFd4&g*;U#IE6}W8;3CK80mH%Dop0qlgJEPqM&DYw3Lnf@7z?!n&C0#atgqtIot#wx
zv|%(fmi9DCb}rfa6mmC#RG@(;Akz(rRwQRgcajHHnqpfs_q{jsPQEI2iX3e+x~9Wm
zmN7y)kbojs;7oe}+Ch=!OdB4jl?0FyA1>(rkyY&#uMR1%JmUNp4`<o=GX-3Z>j-FW
zo~EK4^RHiqJurg&(g1<<I5mvkp_cgLdNE*5d!92Urml<ewm|-P0W|9vWKyK$pgkto
zib%QnNUz{~4Zp&4>W3vLbjr8|wl<O<5rb|Kg5wrp`LD`VWAB`TdXA{H4t~-q^Ud7n
z7k@Q!^^_(jRte(G+K1I~_ZRWLjc<lBdP~ixs08n1-l*%!Eb}HHUWDdV${QXs`*z-x
zC3slPvEc#EZ*hr~Iw8nBbGgAsz3n`q;rN7Qnn~<KayVyaz#^}e<OO@%3^I<~=m9&`
z<j>x|AHwrbN@xZLnQNw<w=|Q*z#2EbGR9{};c;Zg;+KMB&!v7;==e89OZ5?YBryY~
zl!b7#PYcPoX40zbhq+WxQ{@Ks&6FCeMT?tjRWy=&JFIB;1)TY6i0FbzzopSrR&vEI
zF%|~z=#3lvc%>ZC!PvCyWVVwYpby{D(Wfr#aaHRUaS?=PCyeS?_h=d=>1Vz=$3nGH
zVf7=%Jdc3W8#Rs1th2LR2_JJ~m^mZs$O7KP8Q_!u-c#^>|4~r6IT3Mqp(KOoAd(4A
ze7FTwq3W+XQrf}S91GEBTa~v5X>uYEAC@Su*_poMJBNdbj4D;SVDRZk%eFF1Rwk*~
zbN|?T6#-X3lil?MKXwB#&Dh9=l6{ZGC^1QJExA05O<Ijeti8~7&9@dtzBGkl;g=y(
zjgw?JZv0bmJeT>_Dk3I{1>7UoU}DWjZ#QIvTwCFneYf@%?>$`i9RiAY35rCYwbuSl
z7TUNjH5o3iGT!xJ+2Ug_S16@@Fw*VMBLnvE@;!8I8CA?QpCSck)x`)LFMwUIn+wIj
zJC>vlGK@@@IR80UnUc9vwbuBLN9h%NM1uSW_*k(QqkVGs1%Wo!FsPVVue*nMSwDL1
z^yW(+;gajo0V51;irObvkVocSxM<^s+&u~0BqzJ>t4g()=r%4+N8bX|kaMqtLJehb
zx4zGez##Cgn1sc}9FIH|T8dW6KbC@71sRcwaen{BU1&V%yuZY;7pUIO-00N@`6<qj
zeg7_P4l9@R0#_H%!=GF6-l6iBP~?6b!^em1{R6$5N4{i=<A#48c>J|29RvMePBKjY
z>{rkHFZtCUf|exTY<yml{Kt5bR3Iu5T*7^$r7e0Xt0qMTCCbmFh>SJyD3c)u35k@h
zo~{C4X*L@u0Mitw*8QepvT_Eozv#vVN2$P*wBU$%7~l4>g)4eOW@4^f+Feo_UnRbK
z6Su|>mC@PZ+^6&(IHTj?o#F98iNbKT%h^zuy?bX}^l;j#Unxfv!PRKzDRKiWYAPzL
zIItLyG_s&CU9^}>e`!1+!HkXhkrXqIDSE$(gp!#`qa~CJ$PKtCRXRf(G_jX1j=E&Y
zzq>lidf=%(I;ZpD!!SXBB-@Ue7p2@BMce-rlE`RMr42{0eq)R_yw{hWd7&XUGWG3N
zzed7h=N^+;q|-*iRVxljTPN2+ppF^4$4Fx(E>wvC_V%jNY`CP{)h+$aICQ_TFq2Ke
zuVz3+WoYDJt=5X6+2aRvbnM`<FRfqN9yo1ZDca5~FL@-}8nCU)Q|zAwB&jTI%~rTE
z<=FRt{8a;J(~8P7u*H^kRt_Dn>jC8FC5%ih@OEf-o@}_L%#qr6-&wZqOqhlH%r?=n
z`Iohvdq}pDfayW(%@D}R0q@*+p+}c$Rayf3?W)kle_%*Ad@0m<Ulny4G_Y)p3Txnj
znjBEY4*W!{F%+0demv4jGEXf$HM4&d#+YxH0HoKzOs6EY3`NAAh66KUqSx#!A~85x
z`nKhWD|&>`;FX|eSzCR5z0^)KNBxEy+DtG(nlYdjSEf%8VV+)#@zdTo){l#(Og5Km
z?CBLF+Cu5O;PO+()!wv$#@AhK<4cWJVwSH9<NyU9FfVv>BBX^t%cSiWbROGO|MXPP
z4W`UqN7;r9*gsXXIaA5+X3N0&L90Hb7ul(n5*sRj&4}Cj;nhg58=QdBICg-|wEktH
z<TiR5WupYO&z>KbI-c_FRfTqw?F==JN3xKlfdND_i>o2(*@><QKTbkjVOz4G;yUsA
zg~=PkD75)VI1^w&=<?tw!FhbDDpD4tCl{iPzx*V9qi36~WNyrx(%R5dAzra=9eZb2
zgkPrGB?70+lGsUY2XFSQF#Us1E6iHYny{>9>DdC5o~AzDVy#AhcgU^)PYvct&AwfW
z)NKy1;HlEZlkj!bnb%ojxqTYREXySxHapX7*VFcTy*d_8YEqW+N)*~Iu23_cBMT>w
zBuDnp|223$%2uoV7Lp@sKht#x-?0||uM(S+=?Zn{GDjWjGO$b7zSoys&UOsUGAV?z
zuMe`<cea{x!Wu-*^V~SMG~}5#PaDhp-W@JmV5hy2f{mOEf;8Yxx@|^qhmZooMxtWl
zz@W@Bjc^5JfOTVAgax;JRqd^sn+)ftt|Nxi$DsAwYtduMA4{9f$E215z8>)3+{Awf
zSfJR`?%_PQ)=K>Od6U42(!c_824d}O1sTeyhK^?Po@aG7XD`h^_01RaYn6#GErzsS
z`i4>0)b9qkGd4JthB|&SL|Y-+fgj@9d-%byRM_%tBI3Rg0q?dRPY17eHqX|-^U-$Q
z)7<JhQX>UZ!-tnM&BEkLG8c7|+NN%P%nu5yoN-W5VJ$sgz2bnrjt}Xqd%)Cgr})+C
z=7|fboj{84bf#NsIB;YDMk}+N^2FN)Ta-hdzBDIoZ3(6_nUJM?-DU}9#nT84ZzbJ_
zl5dAuvqKwP-|wmB)>B)*lTtcI1sK9-aM-c7kvXcTfhAk3Md4QR$LY@jyZ>-B$$9j%
zL}|SStOM*6{T*q(oB+nG6)J#8kB-b&6%~p2vK!oQfv1YlhpH@_n1`9p-1g`FVTQ7^
zm}-+dw9hMeBdtv&QDlYH7Cg!j5xNLkA&9MOsh!oSB{riDfhAHN8qcD2HBIW=(Mxr2
zj^o1#eu`T-g=O8#LQ|A{dXGp(6GtcO4t4iVNNof3OD{aJ2(0)RnbVI^O|V~@>mVu=
zlMPVbEjMPojigY#OTmhYuIqELD|4I_4qiGUP<O7p$_4YWK`KZxP+jnEHu{E=cSOjs
z+fK$pKUDz^qe2pBohK&RZRDZ5m0FdH4BGsnoU!5dz5`!lKjkghQ@(;<#Lya`mYso1
zZWsmMgHxN(ibHPY?!*ME%-%f$G^X1OJ+_W57MqrW)<YuiV~ET)K%5XK2;Q#ne8N(^
zc{uDtVZ>#Mz2sK^(sSzA`aT5v^UoG(u3!0`R5hiFQF(WXZ`<*f!-j(TtL>G(j52)B
z=G)eMpWno$H!$UWJ9F`)uK~U^k#V*H%mzFhau(LnT?yRe%>VA4dH%QVB>WJJG}G>%
z4BY1I=3}C0F0Ya6^0F6Se@Yt{M0%fEm2RXCq;{(pnzVN9-}b3omM$-IC}#>V?*=0}
zU1m+Y%(lfd%%sFi;L1@IO7H?LiR{vK0<ej}&P*?6vP)l2PEPXcxT+i$*-KX0%p9)!
z5}g`Ac|KXyH`yYmFbU_MIig$SSje4FyP6pg$vB6ZKk4FJnDH?uC(kED_##@<&%yxf
zx_?F^{7NSmnAX2x-mhOlt)HpCOZ}Z{dS(k43<Xd6umn)j(fb6o=)Q{6S^h&Jkr=-Z
z())eTheQasWer@bR?(+IL$L;atYEIGJsR{`rP+5<B$G(DcOIBTv!|yXn|Ty9fk-K9
zY=K-H>OVSNZG5x4Fy;%(p++5pV41%fhQYG6%SQA=>D={79mvs*eW1)d!Xl-12^H&=
zovM?{;EkWJ5jEY!4B3-|;ny^sQSKI2?d{D^SQn+@b<l~=fVj3IfdS(qnpShia_$7Z
z>|;V^#ts#~Qh91PhycS`jucH2t#+oNs;~RZl`XY{k(Dn7A6n??0?aM!S4p01i`i%l
zkf0ZfDdJ5;g1yS+pzd8@<_a7>VTSs2+=?j5!9)>Prp;>$zAnOQuRzq`Ui{_!K#bn4
zWyv-YpVUwKt+w5MIE`3jQv40YWT3rT`tr@&T*aifxG9*SAyjBzM_Hh&m>ise4^smB
zf}R|_NbwLvR<Rr<gDH5i@Xf&nTKw2QTi!{z4mcCNnj##y_z@g4LZ+U{N?#3+Y3lph
zMImYhJIUJj!lB6JlAQPW?2%wO;^>lmNBjri1df^8C(20&C7VyiT7(aC^>jvFWr8(F
z9@0KE(1=^V3}2j@AAQK8G|mhibpW@&vCcQQdf<LQAuI8sxagW9R6Gk~lh{!E?(5bb
z0^sdze5<7GgmQi?CkFD}XnJr=Ihk6>)X#D!r2Q2;p)F$_o0&jpD}6SRKr)kRfuf3G
z&F-^JC$@f!VH{WAk>#pRWcizX>fZGXR!sQ9K~Dr6xGwMjud!Sc7GeHT(yrPNuw)Nd
zMBlI>G&JzSxPfz$Gw2J*Rwz?hd}&c+){^i-wJ6a}S$@Tl+D$Bo&;7qBi1PfS@Uc+K
zjtlRI&632Q46zNbEWn3RuYKW$UO{};8z4A=ip>flwSOok0~LXGjc!PdO4t{=ny!s&
zy3O4IXbO+>N(r$WipB(34kfjk3L6`UdX_JkI77unr{XCl><F-bRUnIJCIER$L^vcM
zZj!P%Fvg=?L@*xCzT?RwkXU4Lx+|U$8tdFT`?eqNu^+E-d7|Od+`|a*^XHAgu|9xV
zJR6%e@yw_j{ey1|mWdMVPIi%GUKr^fK$ZfwT+CgEZ#vU-7j@1$AB!Cocky%hg9U09
zIgj*%5|o**;Esl^l;bXG++w@Yr0~Axb>o|L+fkjCepBqLTXNp-1E~`4C+-`XxxR?6
z5qt-^hh1fR9I?%J0nu``=K0+jiRlz7>`nv>bgWqxNQjo0C16e1n%{@{aHFh|=x0`G
zuNd9r`f~G-f^|%pHcV-t$BlKEoXzeNX4!4d`W_r?YClp`p#&vlHN^6V<#<PR#d$+j
zVnqP>!Q!2nUgPGL|B~#ANCmSgS_vO@40Jw7?qK@GF3r49ikicXsAwy9YP`uw2Tp1E
zncZ#kNkhRb$CGd!?3XvOmhd)w`x|pG3jiyyd!+ob7EoVCF?}-<r`h3?-OrxY^NOyA
z<2sx$tA%GWbZD%O(JM{vo#7YjQ|`~&2|c{!7XrZDCXCsXc+6_AF78{{hX)j7($nI9
z8b-Vf4_>}s(6jtCj9~s}Uwh_%$=Cj6XCroW?`yRm*5ws&kf=YbSF@sMGC$TZy`^yv
zZ&G9yS;`VG3Mu;F_RD~`|5r0C7`QI!w;bcf2mMrN*6yR}QaQE@Sc4>t5}(%Z-|m9q
zmlFA8o1XxCK0wPe4|_(nO6+gLa)cz8J?q<j+<g+8iQ<yA>bY*Sk5;E#QTjT9!QzJD
zSdm-9rqx-dD&OXq-pCIG_EoA@w&y&Wo&sJ=a|SY&5K9@J!{H=|+Vf+#VH}S{R-0^g
z)Q$)Gg&641(Le5$zH-P(S#m1o<+B@m9a3-<o|+>cGLbupCzXD`2f4En(bDbmNot#f
z+2!1p?%<@GW_s4B#>%J4B+LDJ%V@g9xow5JaoiZ^=oK#63b}~HVw+cOq^;hLvkt9o
zo7~|>fD&4pP~+aEBp}U^iYj(E>weKSNksA9)?STyv(i~NPkRG)21VEvN>rqY(U+*f
zkr0Jaj<m`0LxY#nj*M<&G$*Thq;t%*w(U@|N1}6$CYB7c7~riiv-R*%)zHy^|IhCU
z&|%t6ln&vMi-qC1v1SQ<uz@grefhZ;uvm9_nXMydCB$4nRZ`|C@1J$`Un$VROAY!y
z4szpv@{+g~Bruc^-!NU*(d9E?YnoPP>b8U0>0<cdBZ!uKbi+$e76XHK6sT7ZEuhh4
zhi6N>HWxjzkndJKRYImWD#?=!mjUJDTA}mp5Jx%yu@1b6{%qBE|2lD|^P)d>)M9B>
zM{UVL0-)#X-d0gHjYU`8MH!0Q=3~0Rp}M|h?c#a82gc3qVt)Lwk)x&D0>ie)>>%{L
z(9FH}6|<m3t7bf3Wjdi-TgY-TXT%rJcsZd|nnjvxj+UeEq<s=rUYwQgx(OzkR8Xr{
zYL&2xNq#t!ZGC!qt$yyg@6BOT2rTf@%ZIl5?YR2h^IjJIf^6%CH$Y+i#oi*UeAWjp
zaXLo)DZHER^e~~Tn{IZTfXJJwY$8X@7;c#y0KU209YUep%6$HWE6G7b5ojtuLdBGP
zQrAzDo|nKlxkzm05YlAe-|((Af^)!Bc!M&{>XKP7v?}wSl9r*dj^OnjA|4T*=KJe1
z42cRpK8Rg_5P#cash?`{kb-MV)<OQ~y_gg9^H4?dl7}t4$ErSTHgnctJoxKS?CZd>
zQw(;-n$?Y)OhOradWpUkB$efl!uyyO*-(z>G4||1l1(bp7pL7qkdQ8w?PPmM$REK~
ztk2FSEQ|pV5^d=FhZV#P@JFnRo6d{aD&OKhRK!=j-858KO=z5IF@wsI-y^%nc&+W*
z3RRJ`WWq1}*=w!G*V7Cc{37j}p?z+fW1cEgh3;7STRoSQYOJ_6LzDwuK2%|C!$iu9
zqs&|HI-11;8;N1_O1W=Emc4YOhg92G>GX)^5$LeWl=2kHZBL8-@4hR4!zbv@XsiIu
zWHf?Hg4-VfU-LwJvyiZ%kQv2DK>sGost-OA?Tojl^*|UL$DU%tu(am=dod9y^(wDl
z_NNo`$9%dEf<6q!a_P#EhJ?QADW83X%+-H63COl7!FP)itD#95zPrA28mh1#3sA6c
z=YB^BkTV4@!1SM6&Ede5F7x<u>b5Hu<B@|FE(T>NEHv-pM`!ei?3_a~#^&5W{*$hG
z4l~J!1yXT#q!}kHje#M^o)DtJx9D20BrmLfSmkQjCK4!%fY~{+ofdsJLq^@@=Jjc%
z#=K(1z#`R{H=@S*yQv(PgtOU0UMUeJBwx5_kEEK6h>P>r?P!^cx7?N$2^K{z84#E&
zEPQg%GUC8KD8laZah*kG5hgTz1G!iO{rzdNPp|eo%GAWN(Dozl3!c^}nTwL<?BCGm
z>oSo!55{s&iu3Ee?(>fRhQ$=#o)CTlT3FT?-?Of7ALWuH|1@vi{g800YcT>3!$xW8
z>$d~Rgg5iARoFul{9_zd)Vg(NxV9T%d<$$aKzpiCvKZ^eXRRtibaKtvpVC9U<AcxH
zW>~SRbrB)ZD#%6^{LHXKL%qm|tRjPDcW6bmlklMRRW^boNcY!8a;XY@#Yg?IlnZOA
zk%|?|R;WI0TJ3GUPR};>d%I546`U$v?eUm3Qqj>>+Z%6jco-7G&6=u#<V*z)YOT(-
zI4HnZ*LN}un0{qwPx8)SC=Cs`Fxd`{H>(QQ2a|HVqzj(}F29V>t{fDn9_p%JtZxe1
zK-q|&WXmeOLA%a;yPaK<E@xC?nJoNKQt)UB@f#Y`mP>V&bvQl3QtA+I+f=2?J0?_t
z;k>8MdvjxyT5o{)A8P_JJEWEb681%nwNhHrd2hw%jp>cT50r&DI=)qLx<jEELbZ>a
zzW*qZlCsGeddS>1npzE4MEgxS*uwRb6*cQu$B4=GZF+N<-ah6k;V;4^4m8C59s?Gp
zg4e)!H6(8$g|2MQ=F$0*eK>eNu?^8%_(cv;)-cF>hMNaEj(LJF94Cx|ABf5_efGf`
zQw=PnnXN`TzQaJg5sYffsk7;7e_u~d5Gon(wY&jCk{v864sN-mI6PUX5k~zZlJJ8)
z_*oAN7Ctm{%U&HtH)MsOfp;o?Uv{2?K0~5P<soiZsK=smLu1&3gk|tKOaTlP)PmDZ
zPT`ISUymo>&DfZdRZJfLev-WJ0fk6GUsP1CM1*j&!1o|oF^T-qj8(5tZ9LY|&bNV=
zu(a`?PR`(b1)YfvgZLX`yIP0UP{`Td0TH$Ogw(r6Li7=`dsK4fU?HLCJ}*D4s|UFe
zx&1=!w6Bdxex)*>CCN-9Fk!Y_2EZSn5JZbuOWU=htUuc+l)nijSv!QOL)d-n3}3~i
zOvchs*`k9QfKrxajPK9MbqjKe&UH$(ZF~B{;v%`Q!4xh%{CR^?t&RIJ;@$G5b5&+<
zsLWFYrL$LR>Y%th3t^}&#gpKZsKKT&nI`!=8akY60&yEo-LgB|5t@oxv&O8b2xS36
zwt33Jk!1`{Xj0_(;}TpYygUY2bdPiw;nhm};9mtrQQERs?c*x=`p6TCAYWmMs&I?5
zI|81@J@J`5qa{_#q*7Xyr(tQv;^M2Y42^W<)DA!I*N7AXEsyr+&YDRT{r3LHcX{<J
zZ=lddJYl&nT?U!6l1vU5(h{;Wuh>(TJvS^yUgPwZgomydUqV5TM(cKI&636FwjY|5
z&o1*S8PKrCIbJ10xL+g-eqwV>i6#=-E*FsK7}w-kO`n6RvhiIe&$PZL>mN=R_-s<!
zqg~b`$v5I<l2tY?v*iAX#u2l>wZ_`HGEa0$`W64U7(baAZ2c@M^QCwM_SuBNMZRFd
zKD>*4;!k^JXGbf<0+=N}9~p9|2)Pi+l^YXA&?jLC7F2FRUSvmwD>ieSNY@?H&4-K6
z0XerTcz}qkW?pYDFHRSW?SqE{LxI(HzQOY@ZGxVk+{%e$db}JE4mv+c755Pq8r7M@
zS{dQ+k*&LgdGxB4Sbhp|mQve}$Ts8Swe5;t!A^@J9#I9J@)U<44mYw;mOukpmZB@B
z+<m2cS^ZlxA_u3mXNQ2R#?JO16-o7?IVjKem}E%dI9~^Oc11Vg7hRLDu(~_;N$mT4
zv>p5fGh8id<egl{Bi89U-mNeK>3agBaewo@VvJBtr0y3vwnW!@Z%CO7;+Y_@dfaf!
zO-Hz)uWa&hub!Ol%b7|t1n_>?($F@0qdqpHN7oDPQF=ZE0_rl5E081Sw%zS0;BIb`
z|3l|SUZ>Aw?wb1JYl8L00U<fO&t6Ys#O(zS_`IIWUWdBNJ{m$0X2`_39nSHyOyxz9
zu>%)!7pEAlFl2j|S9!<vD<)Q$pEjz{d{)aYP8ELjhZJR+3+-p@nc&zNPu<JtCfrMT
z`|DQ?%0KS8ITG|UOZPo(kMXs(>|V3teOfJGFKhRkk*Dsbc69FH8FBKfR@Jk3O?)|$
z*+(LpJ42zMP@$3-GE@KgYQ~%oyK|)q?W!`}d~-74n}oPZhEz^3?;f?9tHBV4w^|f6
zV`n1V)iEOAA^$3Nxxc3MJI?l%<g6C;7<0m4*5c>S7?&Sm9KV0_ZX1ju#%MURvOlv0
zjUA*+!j%4b?C_V@I6c!}UgOOF>^08(FL{j@t1sCsi9e4WE|wJiX7_AXP2*GbUHoWW
zFb>p*q!{5SE6D7H;t>ET9o6@(x0sI`S^L{E^;o7R2Cq{<3iicq{Eh}gn^Ayo<@<%*
zyM?3epV7?UYmekS^leqyq&zH>SKIGcieM`bqjg9%%G7t=t(=?fNACOgztaa?8y>aV
zZ>~kpZf_SV(N5QzRRr%i5<f0boolN_epmGk?P+G(72!s;H%=9w-!Ry$o823@-4xEn
zKH&M5(m4^>-E<6he$mTyHBn@in3cn~VFD#&(6lbba}kirQ*V<lqr>gT(C7qtZrm_`
z@i+s26k;=T>^!7swRy^}ny=(TBX{nNse7&5B&Qf(6L<ghN7aw2v#~wbLjfG5rCrXC
zwGCAob@K;lMS9Zp!rg)5(U#KOe4MQYrQRBrjdYdMf(TYM!x8wSpW2Nr$M+8=w<QYM
znrLZ;itO#EgrLM~ik0W|Hzh4U`Os!;`X_6pV2URJno&mzXEwLqOC@IQ1s9zoY;oh!
z=*(+qEY}th;C<JB2U>PPfU3=olFUE&rUmm#4|~VMT4;4p9-crlKScXB7rV)cGx3eu
zDW$5AKFNIFl*fQyU~7582Qv$ssY;UEO7*Lq6mA4V&!c2`7nPq84gI2O&WV_r89lPa
zU5y&qEUiy8BI#d_xlo4J(k%O&ET@c((BXZf;43e%O@5fch7-e8MYO<qLIK5M=Vu|B
z(HRl5oM4Es?B)7bmcD$1E=PewYN>nbjg(Ycj7-47m7oV_)V(EWAE{%uJQE9XWbrtP
zcY-V`UV=o{8PL0f`zcQY1m?y>Qtb=6#5&jQjBhB^%~z+pg#|U&LoeL+#7XfoH7G+#
zNy>G<JBMLZ->nzmp4fEP(#sG^b}_I!x+3FI3PU`B%3VQYD!qoB)c^Jt1ycQc$L%fB
z+a?2-w~6K>R;_YzUyymhoS20!7~$M^<+!UZKB@KHw-;}%EwHvSt>4WJ#cjm3^>V1r
z7E$(zV<wDF25>DM`b`B{FL9e@17W;W!#ThzjstiBwFl5&T_aGI-5Zyw3Qf(YQQYv#
zI+f=okn)m)kuc}{yDSQj?|xNTWj;=+W-Ei$WD&dQ6ihCVo1@o4wtn+74AWl)v@f9V
zhqkS8u;naJ{(=myY9E3!YM3bdf&!}<8~et+rsl@hpph2LW7MlGv@5MyJxCZl6_V-u
zPYGsa=0oymVxdOep#^NEwx38QBAVug)^6S(Mv|zz7Mu~^-t%YRmJg_e7~<<3)C%g!
zVQ7Zzra#G<P;Dwk@Jhi6PgxhYPKC91g4TZyfAj|r`y9?ym!W9EQMi3T$9pu&`klU)
zl@d*cu7nITtJcKUh2e1Z@_oW#5xlNQEPdQZC)mY|uk(8~4H}hoyd*mCZQ5>t%^j-X
zp)}4L^*A&0pN<(#?2<rs;as$4R4~WnLd%u005-)Du^ly!FBXDlh##|ia_D3|br4Yw
zYbKF1D}<#QNjA|KNWxS-I^;i_*R|JxUY}9Y3wXRrBjzrAlSjMf`uS|<Auk)O$05RM
zi+K7gaFah$;fC2G^H4l0V2}|Hw>)otO<9FtfxNP7S@8?q{!f_j?+YWyP}c)K`^J<!
zZ91E60~SLfs3_gulsF~OV)1n{2dB}4@2@}WE3<WywMOb^F+Q}FOe@NQ?f=@X*c_Yb
za!(;ISslOn{H}yxjLPV!6C<R=nA3d*dzf>6rfA$gZ&MH}s+JOSE>V(#s5K&+`h=E_
z#ojF=R%@Z&$2j_OUvZ3D?kummLx~YaPj->S+LCPTU3mpe^zeaLraT(BW6RM6qJ?ls
zVV5LKiuU({_=dfl6Qkt{&5@NLYD-Qb2%9<!WMj`a1RL$q&M=BiV^&jA8cOoU;2cLJ
zJ*)D?C=D_`3o7);G!FuYEJ`2TYjCayRi<QNH|6Hk!#4(&aUA0l$%FGFs3qR^vd^D&
zC#-xHC!BXB`gNmyLMxMuf>`qvzs(c<;K`!!eDhS>kF~L_F4=@63eTIiGKVh2J})&#
z7D+YGuziMN)C_`rHhHEU_~r?!WULXpd&;@R0hT*YH%GwEv(H}QfbB7k@vE^snSE}G
z;o}>MbSjEX@~F+p;c0+38r;zYCpvSZLnwFWFZ%7T8;|T)N9RRrZEz)Q^<YbTrc18~
z`g;8Q7Mk+kw03;7e2d47B=l+CI9l*4%tTD^hP1+mX>!w@bE@Ht`TKh*Qxf#%)!oSA
z4G9xu&T=h!x}^SEDlUZ$p?J{3`MJ}ihLeU7P6Z+YgFQizgmuA;5QEMLpL)du3<$?!
znJF{;yHmd)gNYq}-F_8YQZwlc+LeJ;+||yd^s>P~iiAh;iC^2KT!EY5vORl20*O#^
zdNzY}^k?a3p1At?qLMRPo%3^}9VgjDr)oWK%b$<4E<YavWSg2Ck6Fy2l*QIP#XL0L
z-ZJ}LNtWiCcO|FZq8ow9?qMD|;OXuP%WV*8linAz^NY|$^&ydXiQyJ>5~SqT-N6}_
zeXIKt!at6}Y1xNBs*^Iu2QD*n!&*JLG#;wu0#*F_IxYRXU)4Su^XygcdGHW~x<W^y
zksy7}$6A)spTLROoFmE4I#Ge~zdG&%2+?{G-t3uB4n-ZU_f^<A@<#1tJqFYe%x?7~
zkKcqrg7zUCiDvaSd38PsSot^=p4OzdD&YfOZ~;3U>*GRfM%=Ny*AZLnB)+?6#~Dy(
zgc(+49O%DYDr;viFb}@be*4`rv3v>tu0Pyqs!IIVm^Gj2+3oCfiHEm!Z3(NSZ0J79
zyRzdp)Z2<uueM#Ltv$zhypW;{Uz7JRN%_12M|Rh9`6pa68$z;Ck7pCa3@{?diSuM&
zd>qbVb)sMKoHHKfY)#Z+`*b=iJRJ7F@w`eq8|IN>CyjU?*GIWj4U5Pd>uOtY9Jv*5
zgUc^cq%WTI(R^~?_zL$m*<Rl+3gi@0cS$dUjcMFjR~vKA+4omXs*vOqsf_%CH=i+J
zoYpikWveU5Z)6;^mGNz=SJcwKogplUe;vB{RoD^9%VyeEKFNepCq@CU;)+RgdRNJe
z<DviQLRN-rY_~Y5sK#{&dEg4{z$Dm;^tQW`AxY#WDlU0D;l#Ew(|2vhm4-d3|DUa~
zzubJ8SeX8F^ZnC81MN_+>~04H$Qzgf0Wv^ia|1zJHzKX)xgo3!j6`f4j5-JaMO!D(
ze)UB3pi~Y(8z-XYx4?>^+dxNKX9pvoBPbJj2U{a0ppzCrURaa}pbT_#0?~=uf)X?Q
zP7T`U9v}p|2GKhbJx_yIL;&3aG5h?Enc+Xk&a)Z%QuaUCdD*n_zwq;CmHq!;J&e!(
z*8e9z&$D&@&JW|W2ljJC{RjB@t8M;KKQBw{{uh4!oMZGK;ODQp_!~cewc#K5VS2{v
zf2Mwz{u?;I_{{&kewhAqcxL*mF8)zJFK#CPg`fW%o|*p}Jip97`#V3(|2aG}|2KGk
z`Hb~n`1#M_nfbrL^UKiq@BIAZGaE>jg2Xe?i+pw@0!Wz~I}&LjJi|-zx6}lkUPjRf
zFET<Af$_zk2;rqiD1x@8eM!mmJIPD6D<UxePNG8uLX7jXgr@(yDE_ZK36#db$-v6i
z^iLN4ko_`1(Bc@N7$TP6nf*<c|ATpeA_D^g!wVn)iW~?pPYzIILwJGg-zc81|LDE{
z8pVsy{P!rHVes!!JhS_6QM`zTe~;qde)5;@^>3B&(gFTGihujbU)uPOG6W4AfzOH`
zASxiQEG0psY;Fy7q!YBYGJdfKgn^Dm4(4`Fwhlxf`vL^x-}c8d1;}79cW`tPGBa=>
zVqyeH8~hPwU}FNPnHxKqIcgy=vOJ6WfBcw0mHy|!LjQdKImPpx=QAT4JHqqbf8}_l
zd8TJ!d&wPvo`?<9rC3?nUe14pSwWA=#>W0~FtI;Z)brJID$p7#zf*$Bd`|V7o(0rD
z{+<VDPVVoBKQsJY?C*aNo1kJ}m<5qBgED+3e?C9Q|9KzuP`|H1anE7)=QvRKnfm!m
z|C<8D+zZw3m>1SwasZY8oa0|r2rBWv|Gnh-lHW5||LgC6i3e3D$PyH>F|su_w=pGR
zd66FgC1*pYXS4HJxH0@g61>Fzfuk3*^iMj#Gphc&P&2m?uyHj1>sr{{!~_VkOhKlo
z76KCoz~0%`3Fu&MYUTuzk@Nr)bAX8z!ZV7j&25|=b^cM_-+=xXY$YUwMa884fUTmf
zwSmn);r6*M{;zP$O#dv1>0g@cH%gzI=y&7)-y`=K1kcAGO$2I;Kf(1U@}BYd+?>z%
zpO4=qzN7-hu!ErTN6a4pdZv3$|AO{EX#T|ab1A>+fB!$j?l+{K;q?OAKhDqbe?sn0
z9-ptD!_U3ukGQ{j=yUq#KJ^^`C*3n&e}?}%*fRYe^5B`f|Bryn%KTq|`=UwzN8mok
z{(lQxCI*0^vy~O_{|&=`Qz3t0SXxY0Rzmd;3`>CYx4F^(3E~%v;9rov%nbjd?EM38
zFSvVdyBFE~zlegD^#5!8A9(#E&2zgy|9(r;znAtRBtfbEj*RE<GeZ83p6BpC?*0u+
zFPH=2_*qE)4RO!(&piC5`CEzqBiDa$@L!PfVsZYDNco!~@_#Gh{t{|`6J;;T^zR6K
z)~NqbwlB>uYhVrhAJnoSXxOhs$HGQL$4Jjg#KF!$#LB^}0}!<`Fm)tiMgRyn8a<Ev
zK{r9ecmq3e;Inl7efeC-bKEl}0^m2=1Z+&LKrajs07_0kYgHl!W;O(XjJcyDNCmuT
z@@K4oG6HFO&`SeKfB--cAOsKwhyX+ZVgPY~1V9QP4UhrI0^|Vl07ZZjKpCI{Pz9&~
z)Bzd*O@ILaWE+4ayrU(+5MbzFU}On&vI3eo{TY6d{Qx6?k*$@j4d~z6+5lh-00LgP
z1_14y4XgkrFM7e;1qf0O029!Q41g)X3}EJNX9lzZm;)>TmH;b&^>38{umRYZ+W-N!
z09(+%9l-ASJ;+OeFQMPX*?}0cHU69O0XP600ggZyP=1c)ZU9Fs14lD}qn&{f5a0xG
zGIIce&aSoqXMnSfG0?%$$kqV}Z~?di+yL$X4}b^I!ItW!*+k8)fX|W?1WUz#=&qOR
zKN=jA0#qH(t>pw127**A5LEMjSFu6>X`qd%lNqSR*jRaa9i1G22G$5}S=nyx>Pqvg
zM=|jot~AAxtt|H9_0HX@l^^HabHw`4U`^ndpwL601kvG$iD`n|CH=tQ1BZwTq%CTk
zD}-j}<`#1rO9KZN*XmV0zbx*pdwth=yWi4recO55GU0s_7<WMH(|hmv{kqAmZ-D_S
zcJQq$5xGD`T9*JeVb9|&HCOPUEPk)-#<7q=*I={j|3lk51qs$Q*tTh-(zb2ewq0r4
zwr#7@wr#W0wr%Ilum3)Ax}&>qoEvfO<9gi>J7TRd$DD4p268}dcmBsK!(|D9TNm+=
zH~o?FygBF-`!t&_d6UOGyx(m#U97eR)Dk4I;SsXwUq}6HsB-X1GT-}&r<sKjX{Cdw
z4Y!fZ=AG0O0vTz0Sc$(<%G0{#QhsHyXTKl&`t1ASJ$}2g3;gO>BE#Ln=c;EoJt>~L
zqlu`ZSXXQ*DGI$(4!KkezMc-dNxlkyh>X}mYv6n0-{^Z0g8Z6LtIXN|%kaEtnBorV
zf3F9xTYD4DhDPIKIrdOA0kLOn0AH8o7JNgb`im*NYf#bvl_7IQZju1*7w@2e0j+(Q
zTk;JV91>QT`yhe=5koG!q!pnqSqwsEIOrg%0YP1|Ti}YQ6&Wf5SJ=>?>>iB)T3yhJ
z3^j>YxbdKo0TcnL*&fHAbhjLIu}VV3FtjjX1K3@WPVq{jVI(97TS5L#VfsN~1H?X}
zprEjoXixDdl0RW|Zj?EmlkE&$9~vK|UjuboBRNkucj6B(>C%K9rK?Hl?UFr$Exavn
zZB#R2yuRjH%dHvqd>**>l|KIN0=NCvHLJSrx^lWd;S2UH-mg^1V#vy8(d)>7WzhTp
z|I|HQkA7l?k#s5~ccd0MZq7RU1P8?iyF_}q0~$>-PHM&Q$v<FozOq~FZO-FS6!uEh
zvN{~jQwybKa(RmrIFQ(O_Y^LXfyY}H1_A!nZ}?e$$W{gNqJ*z@Jx<-M=jt)yaDh4t
zIsFSzvmoV?S+LhD9zpcU7wRe)u!;iZq-30YGnEXc>E;}ra<G|sF|W9octi!EXr6%V
zE8#7B*jso)kjO$~#C`hB6Jx@tW>zV<n5c?+cpk2=IsEB*h3d1u@Rw@x-fcx3DZemb
z6_0*-%hu+o@&_hHP%f<WNnmo4|E4J;rz-({#=^`>j#lEdOn8!#$2Cr|U^J9@(WhZa
zNb}^Lwn+5E2&{Ct6V)}x6$dhJfAGUun{-Mid{TKSm){?y14_>8u5YXW=&4oKGDCaQ
zkabQkuU`+?QCJ`o#!_$)EEIGc^sD&otk6Alde{o}=xqIr>)J!(6_uh)IicvM3c|=}
zhY`ge3hh5}Gb%EqzMwL4^#`X`>IH4|8`Xn#(OaAF&VdeqY-KyvlP@@OSFja3e79X9
z;Q0b+mj|&r#PC`m7SLGEDU<lkEy}tf8kIZ5N$mPmj+9Ts4zdcdz|!F^rA$`GE(}*y
z@%77MiWC@@=0@m<ox<(m;6s4<Xt9=vDuBu2jkwa-O3hg%R{iEB5Q*SkFD5x3O$L!}
zDQR)I+Gf9P2m1vqYale(3Mf!F<DD@hLig2&6uCc~kK6z6Zq#xPzNkUCDeW>2|HSP1
z>6ho{{PwWknmU)0%-uEO0BdW|_13^5hlK3bbi=s-q4@G3Nhm(=8jWy{yfq~w+5uX4
zJ!W)rUV=?+at>+-H7@N#Ro2<4ts<wvj_gD7uc`dI<<ok#qrJ1wy+5icMybc!1-rCR
zSD|cH(atD1BCT%m;|*8GYwpK8Cf%N>StBo(F-q7fq!xy-jI}ryXVTb`opFx@Zqfrc
zSavWE*xUsPPvM?L(<d>`jnEbe;?BylE|{Z$8o_0U?^$A0F@Tt$d2MFAP$Ii_tQnw0
z_|6?jcX<1nI{f+c%J;PIA0$ybp6Gp2c{9WU+!taUX*{6m&abX!?17wEJM#~~m>ynF
z$Zx%;=iOpnJ*7!qw}=8$*$Bc|<Iea=xYH$*`5xW?p(mu0zj`uwCj1f@J&ltK^6TmW
zXN9JD%n&hi4_eq*>*};<c5CNPkMyxU1%MN!!SYeS3F8-pYsgm7HgR#Ec0GP{D)+`X
z)BM67*y*vFMkjSy&5*9|LxM@8>sS~;viHWoXC$~zY?~c5xgb|@ba>M}1(;BM@qiH>
z8iCZqgU3$JCK5l~>EeJy#pg(U-gk_@C#BrZ&t4ZPvi1$Wk6^VRlX804Xvj!z)W+a>
zfy^qOL<r4wwSmvbKP%!X^yr!CpkG8Q+(|{7W_gDfXv*+WH*xW|>+{A6;r{X9Ov?Zs
zq2=XjK=<UMz$HYK2r_Jap<{)Z@dyfGwX^av&T7f9eMQFxaib(IeLsu25_C)OiDM3-
zTf3hmV#Lt98f5#Hiz?|gf9>d47UtJ=HB&M*2&$#(519eqjFhCF`K3L35zOzF0K#{s
z(adTBI1|<Kn}T9$rOcXXiP4__#M~JWh~B61mF&uE!F_VTvS0k!YNVvPr<<pbd}H}G
zGGd8Y1H~JcKp`wBIQHWU@Okg3z?d5ug1w6<Jkx1J67vBTqa8o{o!WGt;p@ML_j-fy
z5#`^YND;UeR{{tYrxd4wtQN1B26Pg<?n<}m!+B#Lb|5R*fIT>e068X*3H;t8fiyAe
zfTl4gudNLh!Ef%<R;S{ry9{*_x?J;lDP(?~#gtH0#fWy2x2~nVIVIEH2xjl?5j>76
z?b&vobZMi{bxphh6S^bVy$<1t{!ozhQ8AaIQ=99P&Y6|gZmnjfV_V7oVzBn}q37xE
zICJvQz&usvx4uUpp~Upv0!;cx$>Qu>wv+e)Rc;hS4#h|s(LOZa2|l`FUC|_8ZWyt~
zCqpX^3$L|y1-Rg5C4^3Rn+n)IrmJ%H^|DYWsOF2(HO%>m|1Lg=?{IA!;xFr${e-+a
zuseN!Q)98u1Jar}{>%cta!*lGOsqe$Tx&7-@+By>$iTq`v10?n;JqHOK96l5EKGH3
zI``>U*BlY0XH<D?EcdjP%8-;(-mf!H`hg`09O6ySTJ5QyAPf%$S7wHCOuBD-k?MU~
ziP0e`=2bC1&)cDcQkFUvOIDGjiRvg@S+&z5%<5Z=tRueQ+$qVIJd$u=Z$y-e9Dnv;
zpEc(8P;Uu5u4M(YNtyNST9T*}iulr(fy+ja=uE!#KUmxc#~0EvuUw<<%;t`k!An2R
zke=5{b`ijXzXa{AZ1mYU->9R|Qh3M+JRPYW0fEkD)IW?zn}yn;z$|f12ImQbSRIm7
z15uIJC25+G)l>eA;ntP0k3fMPtqkOoagtdP?i#pw=;)c7XC@P^&oyj*ZLBIGA4nJm
z;}!x$i(>YWQc32PhtEGAEtc6(+MdYyIsB%hJ8RxcWPv(Mnlq?gw_!jzsd}q2tCF`T
zI*Y&a%7Il5<Ck%lkRtGruFlK2gMyt}&!4%u7bJru>pk!JbB-HLtlc|ZpG{3;JsicC
zu>)y~mId3Dhb|NNmlX1<7LqOP!YXmhXd3uW<;FZFWMy%;CRb2r+{oI%xnOq0Umlw2
zn6pmGXq_x28%nStC+~(XDQY*Tq2vRqRsMW?1+nD#u|CLC2K=BW9Ef&z^IrQe9s8kO
zutSbn=(UT@lDZedZz*X-uXa_ylc2_<oC(wEk0M>hfZ_NQo{`<!jiFJRcEV^_9h0u0
zS$Nzthfn2*4i`~bZxeFXT^FOH)BSw~AW7tYb#6q~^-aN#S0Roe^H=h@v`;3MOxOay
z58$O6`o)U?E_sjaKjh#i!u*NJXqma-%)bXMcy`wK`op+YPmLHO9iSbl;^38`@Pw}0
zMa4w4;zz?(DM}mMRhi@gon1nxr+>>+Et;FtWM~@NuR&S^lY^?L4B`BYaZ}W+oQV6;
z<rDP}jux(DQELQI>y}M1oJf~@NheoiBfHp;^nzW;lyrbsF73@H)N5)uYr3b<sHj)d
zssQoKTEN(E41~nLa`a7mfL}S;1;VEq^eF7-Oh24YI8f_9-29b1YlsBS*EzfA2N8+Q
z=~c@&nt~7WW#(kkru0uf`2`A}&n0bbo85&oyS&y+M36vyv4N4X;Nqg}wSfz_Wvh+W
zsn3}xK3pvu8yf>1xlyADYo;e_wBlC2<Kw)jwt@ahS+X?(WPFQ9<CbEBWCHMnt0so*
z5&pT>*Dzr3#d`RiMWW*)8{<XAiN68iTG9gxKt9x<tg%<WM$^wX6Yu`Jng?cPP9y(J
zei*?$3n<Ltp~x6j{&$@uwMYt~ym(77`=6q*v3b9oRw<k+6xheTH&HRU<7YcsE+KWt
z;?B+~NyF@k_Mr&&NY=m^+8}OHMrIBwnAu2pFW?eh4twuWo4@A~B<M&0L7FiOg)YEv
z(uwyAP1dGp`DKnKdFkSJziG4Vz75t#Qb}}sY%xX7ZB18DTm8P@z0ew(VLB>e&6ZLr
zUs~HeK%zvDq0nQ*0IfQ~DN_<%?=9*9suQCa-z^#~*?AXQOHo85LthOuqKkgd-3Y~+
zAfncN-=NbL-#wc*o^w3-i0~wu<95K%niv)G5{M<IBjS{f`b<cZCD12k@6RzyE3};$
z$CA!J3MJymvJp+y#>!7aiQ+plEc8vch6x0gZ2kB&4Obk^RjH8mCMy0+%${gN6s4KN
zciL9!v$B*%_<guxEM}8;r)H=bPh%U~w2kXC@RBa_z$(>$EYnO~b*LVHH5L?XGxWw~
z=PwqP6rL&qdW-vjc7voJQKhc0BhOn*FO*}yYFBmUKGk8p-&6;9ySGPbYn7KXZ5OSs
zA{T#u4wUd{uGC1_m6gAlU{q^oWxbIv$AhuXoiGOb7%zL~k#n2^u$(o#pX>^cU!<1x
z@$avBpj~l5qP5(vtl9w~xiAZ$01@&VSZkJ?1$A$RO&KAWzf^e8S94t{`x)|0n|~<c
zF=I`A?Xj?b-8))uZzthnX-}x<n_ACs&_h@;fQHFcl=(t?k)gi$8aPhMI@%h`6W<9q
z#v#A2ahSoedcClHh5Hetk?0BuAUaY5k8JSM<v}1HMY@HFF4&9)_R)WF7VbJCR<5-s
zGrjH9v2KN`x7K-EIVNa9HKH6no4cK7b`Q-)dbG6XS2Po<WtuXg*AH=67_!dJ-O5D7
zB+@RAQF+SItsd1t$Rd`AoDcMBJ#_C#omkFeSN;XVI91plIzRXfVDSdk9vM0O8WyRh
z{hNB|D=nl4C0pl&{Iuw`wd9K8B`M^w^=?*#zPXPYZQ<M}>ami_cs(r%%b3CM(oLHi
zV)CR^TvuHGIq~#c_+nl%QE4#ZVP!+c@5qGv0>txJP&U(bqNQSox${&y{KG2YH&*6w
z_oOyI5`{nokGd*0FKDz@ySJ{Bah4LPdEBx&SaL-|KT)s#FV%|nctL2{%lQ$~P?;@H
zIxvrc<ZYNwFJIg1D4<)o3B<^Dh{mur%`?w#Dv)NEx}EvO;{C2=(m>oxdktus7rUt&
zf*%87GOZVQj5iVp>-|iMQWKLTz#V=C+oV?Z?d`n0)Nn*Od)rsf^RDt>^=`86I9uVp
z&vZRYx{;&;HEURFd-TeSoYA|c2i+wP7|H^_WW`VIcsJqO#+jCyf{qSvH52f2n|68y
zTnLfPh)jFJ6}$r-Wfs|3t$=@prc?2_+{)a-y7}49X9F(R((G8A>k6}?0cy$da#Sxj
zu`A?W1zrc)Bt7DzLwz`d0zGEy*)RX#M)rve3>j^$a%kxAi4ZNXhYREGPS#miJA;^m
zh}5+TLu;rR;j0xK%}p;Dde+M33$IU+3`wc9&fg{jXXbFNgl@{+<iPP!V3i$^Cm8gd
z1Lh;{<YYGQX{Eb6=Bc|oE#_Bsk{d5+3kA-WH~J13yG_Dxj0z)T7-{jm2Z<1E6xK#f
zOH9(pcNTy9Aq1t_1!K#&-?y{0>^8Xvsv9l&(?)jUjfZA8m^}s6j*9m4W0g-)@F&6`
znqzy#^NL)m^H54cS8Y*=ZQgDeH?N0OC*E`?TQNw8%*O>NJY}?Ys!o^E&zE0J<D<0p
zVvRg=b%FOo<gL-pu}094SyvMUr>gdt$c6Yb>E-N>;pPW%oFuAc6clvzDafgj6V}1W
zd0D(U7g5nk69pf%q2Bh#g7<Bx_M74JHg=#|sm@nZ(&Ez6;ydB3U)?b=TU#g7aR^h`
zO|(N<>w`<i68Y7H-@H?t6fb}5$!o!)3$(_(&`%gXkjw@BajT4AvDugbM$qO5WGQ{C
zXgw)L?rkiPb0%<RxBK4x0!=v39IT++xod{ijVPHlVDaINOe>r?9}qnxMs0*WkryBv
zWQ@bn{mtBp8Mh{zrX)a<&?Bb;nTg9pkKxT6syfx79|-fN7)M*lm}Mow?<zS~e)W3n
z()F+`>e3apP53$5%=f)>X@gup-fnt+w+6N5s^x;QM#a_5e9@R~Ozu$Gm81JG?E&-B
zp|j|^!k}aTeax~Ur)l{<bnP_Eu_@#E$M%84c9FezWby*Wnz^OcYgaYv(P0G>t2JqD
zJO#v~gEQhB;bwUIJyDdpI7ZJC;z&r8OGaWzgk#PjK2NOh#0H@dk@3;5Jp%a76;442
z06hf%+D%IW9)|jj<S(iv;wpepTEEiDRSNEK=4F$<<qVJl`%OMbSz+{j)~Tw)GPsH7
z{c$0BIiMhmt|JAsam|TQCSur-<>OM(Oh;&ZtZ(1{Xm(6niv&U<@jM&gNTg<EdPn))
z2m<aXWmlaTL9w73s6@oAU{zC9o(Gz{ett>Pq$Inl_+%%oA3j@JAYJeoR%f7iitFAw
zs;j25B_Egz;?yFu%XVkhDvC3f-itkc?%K4ro5JqaGh&y#LO{07uv#y`J)5>LOwEk?
zNiGcHm3L0B&mZacS9QshrWebGK`lJf;moO<s6=q?HRBgg?3Pdtb-Y@l9?-aOUQ@kQ
zm?LeV!&y{5cgYcX6z-SCilCq#D@HYr?9qh;z`LW0oRD{D@;Wgy9K_qMFY|rI4!3qo
z@CPd_a0!=92XEKiIoUNo5I-R7GMyi;8E3{#2z*9J&bJxKLAC>`N=ul~Y$r;^?4&Se
zNJj~yOmB`(SuIJjEl?)EqE8kDxgM~?q-eu%mg)HNaaoiF|Fvuz%yy8|;cY`!g2j#n
zb$5lkUhkq8wF`7Qe;M<Qy4u0c>Q!}L!~7KhWG54951LaW)!oH!*XLgR=NvT8^W1I0
zH!a-tzV3b)Ez~+x#5qGTy&a`h)z&cZPuqLn0BYb<t>bNQy}z#gV9(g$(OeFdEZse&
z5b6;_s#1XD08S$2F`}4A?bEr?qg{i2Sbn%(ZbMyxt2k6rkq}z-_`i7IXN7Bfn_ez5
z{G+>eeV+@oO1;Srs~f+9EH$<P*<tx59_eV*aJ;LF|M~aZ3Q(ZoBr$I9m6r0sg<#!`
zO_`xMR&^D9Eu`1r!u8q%Fz)1ktQ$T9Uxz$Qb_q_DN-0zyyyfk8RG<Mc!{Xa7S*_+g
z{C2;~v6HRYjBI@uVGTF8Ep2>4Wf#y8Fpe*n+ybyTC2dnmDV~xLN1GsWtS3TxRLyVO
z*1S3?w`fcO#@ej55|<X2k(wl5P?;EdL|C$tGOLy#ubQDrc`kG<r84qMq4-(RyjUYB
zDBLz<%TY~t42CS@R5Ii3;#0t&uoSm0tD&~6NM+8Yq`9=A7(>bcmRTJ~w=SmuH=1W~
zrl_idg&nDoHs%afcORFxyr7{#Y%Z7jSs{5MVzp+<(>goX;!08hhb9pSKI<>dK<Lh0
zzoIoe-t-s`y>3;b|5?Lam;c+H0Mm4kq%}QjV>`)NWSmO#;OvlOQ1=bR{$;f`hkU{z
z(OZ8>#M=u;4=GcWa^7-Wq<(@y{8Cl>cS(D3R(=l9tj~5NTeE4^iZPQ|G+QFlT0>jO
z!qv5*;e38cc2KKF4+Vt+4qgrXsOQ#JFQp24a=_5iNpWt4RlU~Q?IsD4+k!Fmh*VDW
zS`oEO6vrCd8G6>ju5^dcwsq%;SYVW-@$wsNN53wQx0a>4rZjCJ4}UNKyyG_%SU#%(
za?s2j*ZlPRP5MAzx;f1qkTuQ;a^1JQA|NC<mf!>&(45OoE-q1Y<UB~m*N9s_I!_*d
zBdw6hLT0db;b?3k=`G9M^4pV^j7!&Wnl1fd1Z=w(&nRfR@tNd)E+=p*_hBx-BSxwH
z&&=`4`2h)&uG;hLcYk(YGv%Ok%>gNVbue=cJmza{XooZtAtvVSyDIl_=iiMextAJ~
ztcLuWjomuY2Pj9=m0D0Wgbu{#O!U)hgX24}aHnt1vs<==f(q1@(%|DkWJZ+ku~5}#
zQWNkMT<m6sEB-UD+9=W8Z9_-m03_dDEyZ6jZYZ7}qF$ct34lItKM#2AgOioW{CEnw
zA&w;SB7N>nsngkx7ov`XL}=hwWiPpJf_S{==SEw#r56C}ep(pFl!Dx`M&*;51~k-W
zw64j@fNLu8nD`hb<P#Ch$?&S|E*qnVz{qtS1Y?0{JIcINp$bs}(i??LlgxilSf&NL
zzgD}ZwRVu^_?CSF+{9vv#6%*A2<Hur&QDP5FW<(FT>0@%<d?)$ij&9rp&(Ro!?--$
zWSk(j+)?K#F81P~tM4x^XS(#!vbx|B5<&EIOmL*1Jujn${JMQ84UV5qPTV0AV9q86
zpQ5VKHSJ1h>R3-!4x;CKd7zAk!qx2u%Y;3-^NJ)Q(gM{Ax&td}Z^?Eq1Rm1|WhFAG
z3J5z>P`#Y@m37XO$MoL2c_vIZ<I}-KsX#`Ac;7<?usC<9AE3O96LuK3Mx-!Y?j^@<
zVedpIny1&9<bt^KK&J+kfK2<+mkDx_xdru+;*)|D-L`;p3w>j!f`M?~H%h!ZPvGfm
zqc4Ji;GJT<P(D9HH*ke~Q%?LZ`h9AnxA3q#`AEv{+*;WWgauU?^9m9U=R#@4`1~ez
z9ea8)<Xpc%Z`X+DBVPIsMX)6-GIo6*_E{p9fzb94GDb`d8RX-{+o+tg`7k?%;iEyt
zg$o|x?bDccUPAc{*}H0Ym4t_jFj*k?678l_a|c#O%#)&J8Co#m|A>q#Wx6THE9j=u
zjG4`RL2v^tN6;lBC!?yNtlbcTRuw$Uy0Ax&kQ&P1=}LnUwS`7jwk@4uGa3dHEA-l>
zj=&R<^X~eTEp~u*`wjDhkr4<GPJ8nOXzh5L<SORJPaqjvP(T!$dN-j!<sHoF<sGvT
zEEjL1Li4`W6_gww9e|(H63Q_jPSG$eJz;;W%E9n_Pg7sQdZB3-f_Joo(d9sBI!fmv
zVo{@VXGEHT-LbOo_j-6}S*-|cmqNpDRk3e5s$3LR8VXVA*G60U;zo=#p}Bhq+P57;
zgWUE27{Tg#{S#mQca-+Og3SLwy8jaj`#+>i{)J(G5=b<RKe0ZJpAvCacJ}`U!?Lsg
zCk*?~@qc4jhM&`ak70joy#HGmR{#Hvy#6b=@IM0B|3A>{KM0!ce<9d^L0BULtN%)4
zt<C=hh5zqy*?-G7{s%7m&-wo|mt|w7r~i*!*4<rOX}SF=#=on@5G9J#0LikV**T|N
z^_)900zZ))Vw`)1fSA~yIIfbI9|8o3c=8@5fPFW}v1w^lb1r7hL-ugxZxctPPftg{
zR?TzA^T!q5HvE@gW!Lge_so0eOhZ56g(w0ws^!Mds88?9YxP|GmqPP5pK+G@<b%TG
z`vnd8nI2Ur>pIhiJqY>;*#5<M@yv<CZ#cPt&+ERz@F1MXCWF+HQ$ts^8M&kB>=p`6
zQW9Ebc4GbE1d+(pDG2fOTN|U{qu!U<ol=a3TRaJWggJ(Ie+5WSK_XzpebcB)t^pQ$
zc7}ews~(@HWvg%BdnAxLPobpc;S(8#Ov9Ez>*(#2S{{2b#rkhreLu(X_{~2Bo<PrF
zZ6KkoA??AJ@UF2pVGr7muV)&Lyf$BhVq9{rW?w)(!I7wRW9sczucl0@m01%1hGHrA
zg!+SD!dAp43AMvlgRmGvSLD2;Taj{q;SQDrk?o3D5g#FJ4U!u0+WW0YQ{#Ju(F_V2
zP}PO4h*Fa_BXNZl4ayo|)J3YxvLodpbcCY};u?@JMB5P-BM}QA{dB1qz|@6=5f39N
z3~Cwx-Qw2eq=`!tVnc`#`lm_Tg;5MD2Z-1~;`Wg~?I<I<2;<x5qVSB{CvBImTd6&9
zbPTz$Jh?o@Kl#Qf-hnm6lox}YR6QilnH!ce6f>AzEY+osKn@>9bujoGzZ63nk{QXq
z?D9N^H;|>s?#V<rr(NW^x?P~}y|^)&IuM(3mbi=`P;`_qOHXBb1agIQC1Opo+#TKZ
zmqh12y*Bdv{ZlMaf+8I#E0w(<8~ry`Ha6$$&b#K>du!&P;dMRVr(gb8tzZr95iphI
z=s^GN;>5ks6#<T8V5an+f`NG*vu5T+u_>f}VAOH4Rb|t8v_oVlk6klQGt!QujGqs|
z-w$m62L>LNCdhrk4s-IDA8JVub8$`XcfDWoZkDMx695~0tyD?xFQ(HfIU0~EW~*XZ
zTsk%uz&B;%K{!CD!Ue9PGVppc25yUDxPwvY3?*jieBC#l6+3dlMoX-3hN4+_C?Vq<
zgPbtNljt=d{$<P|a1e1Rb8RE@EsclK@DS16eRg>7ae-68yR3F~Ktw<F97K$$3xwQr
zU-Oy!7sI?P@XDi3QtPS|OM&Cyh3HDf+wC}j`dLO=&8Ur3ue|Yx@j<dwb@Egz1>8~q
z6Gs&-I&5gZqptuHX3yjxU<UZY!f_#%bpGP_H6Xh+LHC1*d-&&q&)N`Z(}8R@Tn(A!
z26v<o)BskK*)xDk@O+CKM{yZvF9k;CWTrgIILqa~1GGsd-Wg6Rs5u8*X9TTEOG_JT
zW;}4R0k{gLZaPLXQRb%hdiokZ#u%3`?d2OA9#)u*S{t!T_X<dm@OgObHT*U8D$-ot
zt!eT|wVs%Ea-1H-1l%O}hTwVd;!)8+E9T%LNzL3`EyC*shn(FZR-dpnB!7D`>Au@A
zF-@g(C#cJe7e65)eT;;79Mb}eX>%f9%-$k7W&t@r-nfwYuliHX>hWnZnC#4HJ@DeY
z*O&2N%P*u6g`bPI!1Vt1Jm_`}j2tIF(0`v8>EqXiLJTJ+!XaHIiW@7IGh-A2*Xd?C
z<_&UP<Ew+Jie7B>7`yHW`iah+&>!TV&VsLfFTEcy@)bGlA6>>%0nT8wYQVQ#^P$`l
z`MEG}+yc$pEe&-S7G!@6+c`EGmsmfOBZ`h=r9-CTT*3Da9xLHMJIWJ-mrIU4YMOT+
zal)c0#q`%MLA^4Nu|JWSft&V)Yx%q^OwsxD<n9m@EwqsZ7ha;>DpC}%q8<Dwu=srB
z=y3Udq0(1>3UOiwK&638z633=yOhpn&AJQFFr9yY76(>WJ$hk1t)-b-SF#1dKx$m<
zQPf5UF~4-3o&{s2uK57e^u{X0ZcN+0L)B@{z59ux2;S8Z((UWKu}K!4t1vqmS36?f
z-N$&l@~}J*f5&?+JNQBP4TDs^eB`Mu@SZaA<Hhe8t<^gRrz=mCd%-Dzuh^x%2JCC$
zm~#h^xuk`z{JarA944fG9#_acLHx?urXg{bBBcqaCmi1_q%Z9-KO!OdyJjma$AQnw
zB$JbqhDaI>fPhcRw~DBn>x8pWxSQ7CnyX_CvEG;4%P)<Z+L2e6{rD`vdXMPS7f$NU
zdlM~$XK{jlC)6bh&1nX)17yLkLr$YDqQ-9zMDeLjsFPnj2ZSzWao*5i2?(2Qr@f#m
zaf{d<F&Tij2EPn7)<LP1VUtLMcqU_>Ad}u0XI?<sdz{9vs;L1Fw!)#5*Dr0eT!dOi
zH%A|D!R^w{x?Gxob~9y=SpIAF$5~q|Cblf~b=o7f?VCxGJWfHUwwLNVrS7-V2Xabg
zSd{a7NLo`Wb4t-4&HD6>L55f2aGOZ7iWaYjvUOh?O?iCNq=7B@rqkLIH0Mp6SSqu-
zWYs8j_K=7_qJ=Hkp+3`+sT+LY&<!J_OVvz2M1eD{?pJ9kF~HvpVB<)?@%F?h8<#hx
z@JAeVuFneU49arjud#pJI9PH!NRQ3qt0ZY7#udK#=r8DM4rzoZy-}L`BRC(ITQxxD
z@IVPb>KqK4F`jWIUGcZT^0P&5gzeHA1%J=ODZCYN;ieta!h>!pl%~2?UwMA)V{XhM
zh?r>~#d8$vt53k4;($m+H^c@fnzx|;dDu#r>WCll%3b4KX@<h*xy+KKr5Dsra|Kr$
zPX$}6DYP1&>36L+VVSh7gcOiNT)7;>O9uSWtHH%<9{e1((@SE;Bbqjdo{cvOgqZ&|
zK-S9qs-O^`q-#;H6GLVW0M>!`WUJ_sHOwaWa3B-byivDi&EB;Z0tO~Y0!31DoRRsW
z2a7jqHj&x_Ubj<uSA9)*u4){5W=0N#o4{U%CD6)khR6Dd>{G8Q)p@Ldn|_>iIuI81
z!JBrOgkxw3;0@5-ActhCxBi4eV6X>Uf2;gj$LlLRY$GTOL|N##SDOoPH1{m%$?dhM
zC?gMJWYyan1~}FEIbf?ZfY33sm<aAH#T_%5*$b5>;h$=g^n>0^QAH@>3SvYJX@ekU
z#96U{%vi`BLuM_(Y<V<^MqcLe{H3gi_VpzNZKZ+ht7bh3;|e(~E$C_FThSd`OVc>a
zM(3Hos1C`piiO>#>upy)`KM*L*Vm149#3j$8f3{;qxF|^2F6S38q(Bow1{D2!_*Df
z5dPXUGfBQt(i<8-D-`3DK%%(hH1v%p=1g~pN|zRaozFz<aLx|Sl3jwi{=Uc_$+S#b
zRp4#C@@6)HiMu>Dn^oFEU0X}G+cb{QbVS7&D6dfXKnBL0)FuoO`_+Dse{=!(3E-2^
z&}GqY2z?C7Y5o#7c^rsG*|+`NlS1DasK+POjsv}L$*D#y$A;ys(UefmxZT^(oCJI9
zWDwlV+wj2;(xq9_nou@!<0i37l`sHi034!*vg6>tr)hYKXX^GyN+F{nKmJ(q4OBU`
z-XQyYfTUtI981NB6RLy*X6KQgA@IvVJ(QgdCWlvr($M<l^z8aM29UJX*H3EZRE^D{
zgIE-h!lR#L4Bt&Fu_#=9@E~XOkdb`a{Whp4Mh@B?cf7jonE$J?<QjafeiE;gv2nNn
zGcHYY=>|bFn1xxEKq9eE%zz=`2N!O0g=(a<Ho<dg=d`TH2`W3-*?@lTH=*I4j*m-B
zDtz@Us5R?A`%u#Od><|6U>~wh52OOBxH;Sck<>M09~rEfNklWdQLw99-hPqGgjdbe
zfiigS$1a0WqyUJ4K1ckCI<7=DruP6Pk(UFllRr^~HRRsn;D%}hoh*}2!_x430NHI+
zTGa1gFASF%!^1we-##US(=jo|R8(qExr<W|l9-=TCMr^%qKLwL41=_~m9R@bo5o5W
zdEdsIcCu=DZvzJbtIR__Ysv10<Si^xypfWTzZzm<FMOAp358^Wg82XyH5n3j;Mqrz
zsXmz#MgBKI(I|{k?1Bmr(-Y=-1z_3-57so^TR_1)sJOwr_q>||##5PcwJQ7_z^1wM
zGa3w<5(2Qk9KP$Xm;k)~@N?bC)dspjuJmjDpB2BRnr2B_>U}oRBwOH2v%#m;rt!Zm
zogRgW&h$MR)>-g!D^3OzJ=T0Q3lgn!yfNJD_jc5KM)T`qP3<sU#XlN7#pY&zzt}3#
zA0i9Cwg71SHC0pD*6E19N=z){)WJJS%Aw?G71ZO@^#UCWRwqllHz4ArXOoB;IS>ir
z11v*kEF5>5*L(Q*U}cb=!U%h<#Q7kOdYm@k6d_3$%KRhH!S?#F_M0spGXomOpz1-B
zR94iZH4FDv@;w79%XQ_r_37z$2qUIacAZptXq>*lWo*Z`eC9Ms;78C7NcVpvMGpPc
zbWF-xYYzt_fOW_E0D)|KPON{kM6<`D@ju;8?}e!P$OIQPe<AYh>g{g>CM^ym!PSRu
zt?V5L{aMk+ku-LCI`ND9U~S+p9;m#hDEh*eX&eucpcpo4Zk7Io&qx>QyVyl~5+P=0
zY`F~W67%ag(n;J%%2qAJCHTFGqqMt;jV*yDKO<dX%8)BSCM)SO?iKE2g9?8up+4<p
zU@O|ApkWr}O_BcW9RFG#6XJ!a5yDr8#<XvZKRjimNmFseAw6tFeR*7Ho`jE-s^cM0
z<JT5b)Z4cpzY3RGKk@enfGBT0>J9)<Qy7$W7<q*lsR^JXFx~8~%Q((Ef79cSMs4Ky
zbb#aA#oWdOcAmWWA)|srB{$S8)kcp$QvPO{C;W6a_X$C76LmxJdcfgt=%x9bvY37X
zIjz=0!8<IKeDQC<XrICmj;LAODx`$XJo18je4fttZBc7ZV<IZ-7R2I!g&qoOcdObV
z(Jz!Jiy&pH$aHWu2d^cZpH!1}-)?(pB*kTf=%WgzE&-Fx==mNdkrsTiJCLm%Jqi88
zZ~jS>+6d7Pt_gz2iBG9G_F=Ku9d6maf}>`t9jMYMT5VRry{gG?b7K}mg<8}EtC!<h
zNjL|gzxGtm+1sr*SrvKPub~CohKEP6C5F&D@6V;j?{tt^J(_czXtRATU3qLpEFT;G
zA+G?@ptSQ<5;>>#e_Dfr;(l!-!`nf;q=2!xJ%)6F#leDE>fvw+xH{!h^1+|90NI)l
zJ=7R~0!#T<G*f!OTl!0-{B-*Zx+_!kurCqQ^_^8W{tU0wc+@nQM%h;4FR>A+H)QCd
ze9^Q^lrK*hXIc-}%}Q6zPeAp0V{Qc@mA1T9S0d%u7=E%sC|Uo(R=VthF>HUrNv51%
zrr08MfVHV)rQDQIsgPn`++kqP+}3e#t9yicLBvjM99h6Q)llWa6Dk6cDwxW`49o}P
z)ZuxVE1}&AlT0ylhWtR_Y=x*%>8p*&(p0^)PJ62@PMHc~(3Tz1q=XcI7z-KXwz2YY
zlBLc=vs&q#ZR5N#NyBI5rO=?97(XB(p)_vwCq*5NA+f!Sf&~_691-f#yXGtBT^g~q
zB{v7T+&Sy3hFuLyoN!(q!V+MpWo=qGXfn}Q;G6~HoPuSMX*xo+!(1q%B#vfQgpu24
zroyF|0eBlJZrt%ck0E>~sdnZ;5p_J45P<XQYg1mIUzh)>CqL2>g!1Y`Sfk-Qn7#7D
z>bcu)4y8C&cLm?U)z&C8iRn-<p7oLu!aIBRbF9$**nh^|8;DGj#3PKJSjioatc!PQ
zRt;SQ+RRS1SEt90p-@TQE$@YlpjUc#V1!zD@g{MuZ0RmUTK_KJp#gI8Q?!*$Z7aVK
zB1oE|(Ms=QUE0By9?-zbFx&+>OS~`0Pym=b6dWmcEa{uc<Eo-*rmeLUc?8Nz<|J^Z
zBl`X(W!34{4M)=An<tWC<++m4neB6O8p5R|3-wMr&RPrTlw~jbzVW&y{{BtyEpHX(
zP`y?xeY^G<2p0>+hn05rg3@g7z|=-0rr#(7R3^=%*}AP8<vv)*WPT4=<1nZkM)4Tp
z^x90lc8k%7r8yWbAs!Y(DOXuVM^{rJMIPJlb6Hu)GB=)AEnhLPJd=O$s665xg;m{1
zJa6w|P%KU9kN~XEOdjiEMF|Bp4()gc?(?U%G%gI;cL!4SxmAEGl}qeBMi~_IuR{Vq
zcGtlB?C?;>%mC!p2S`0`@Jec8%rt6M+31BbfFvUg6nA247gfOk<oq_D&;8}sd6=gd
z{rw+bcy_s5z9pB(7Y2Ph=pKSj^5zxLcT6uQ<VBclv6%1s(OW%!*P~xzMcX)dX-6gn
zGuTxcrp-7V{p9^^-myUE^?OERl5NC70bFSt_>@v*ap?AcCB+d)LR^Wnu1~4U%Mlt`
zQ?`L(%}17Xh0ecp>}uPLba4y?fR}`HQK!o<n31YQNw2Ykz17l7vFlDG6(N_`;PnWS
z&8oafGypY>N#f?`jzb#6r|z6yp|Fy1eaXyG)it)^YGIXrXQWFny`9&|TI>s$LQV5~
zHmG<c^G2qUEmQeN$jYfnz6vr#F(&%FK}3FIFyndHom=b>o2e;z=|msS=tC~%Q;dR`
z<MZ&yB!p~<A+=6QQYyJBV<ulw9*L~c>y@%tSgU~zGvoEyAr{?^j;~Q;5iH||)YWgn
z^z(VH2wgP~<D(|Ps~j0^iZPex^|Bi0kuwgPsttP7Vqlj>am3G;ngK7Hxw#GodKup1
zR|%foa=AJL3S#9{23QiD`%F~9`5ZDB(z%Hb5K2CK3d|wxYXLNTvG&qt0vVgkYtT(B
zYuCDeN@uHC#91*-8_=rcv6$CISWKp3Bg2d+V!DPKxsvkCkB1CvX$W;#uRowA95YEB
z;$s$48WhHxP19#a9`)z;Ul}I>Gr_AzMn$({%jeN7?9pfjEl^yTwWsn=+0iXa_p=xG
zoZ1WYNmMF^P_vV4@Gjj0o>;v%>BJ1COVC+c_!lRJ&>+tq9%8}#6u6Vn_+3%J_eK4Z
zDAPG)WW%Z<OQT@Jr%=@^(T7vn-c<JhnnjZ`RE3hKFLF_!e4@A&nlqtPMav;#3WURj
z$=gXQNL{|VkJvn(mTN=T+=ufLkX{?tdGMCZzyB37&TZ8aR@~AOwm7Ve2RL4|U}K)}
z*-G(gdB0BoVOc~2qkfvD@Izr>#8rn!3+9L)n9%HZr9{kCb2u|ob&DJQfaEpeeWy{u
zD&pEp$K-5vHyb0kfSdAS)9fSWClTfSXyg^H(ycziG{v(O(v{YZgr0Xzv<gw_D|YL5
z7oSY-IGC}<@v(B69#GI{j@Cg)lU$ixnkwINS5px=W~*;H50}c=;H!JX0XXOE775ug
zWdsaUCq-q=`m<*U?7!6Qmo<C<H2qhYW;@j}bpwR3<Fe9erD7!@l0bkxvS+;6pA2pf
z>n#Mro67UxX18(lVwNE29gN(pX^a|j_*t=JO+VP<?d^9JRP3E$7n2`h>lWjIf-b&B
zOkYHbSRP>)_?v-!l-3v)?cecEfTz`_HdFhI-=xJmZ0!UM$hR4&Dz#Tk=*^niyheWM
z#GsmG-#H{>?9K^X2?V$tA&f8_)r?h~ZOQUF(M^??h87>~iJ~j2Xw)=vYP$pMm)mgr
z)h#OFc;~><n2^KO=lY8lNa$tVw0m||wHArkJ!$_%x(Vw>S*c63g*bL%26=BAwuXK{
z2*Qg-+$9GYQftYr@Sa~HD?P2Gu?A@5`-pc;+PHRBK7fhw6Bg=BcCqqN#m!7X+6^j&
zpH)9-J*+&BzS>_(Ar;tO9k%VokuPK|laxY9spOo6Er-!bKAFlzekMMB*=<;!{6)s5
zK{s4X!G96IgV%g5e?mYlv0tGH8uK*s^@=>*nNje!)ZtacoK!_8L<X8cuS>tr8t1~7
zQHz}|Ge)nkj|*ph7Yi}>7p5+)72ClYVQK*|Ke(CJPXC`k`<<IeAv_HYvfPGUi48ec
z?64?k&PI2QQEWd^VCJ^Vzt^VDugYXk!I=?l6*VF)!yA!36dmxof!olzOWI{!n%f>F
zctn>_QLhO@%)RK-sRL^`3mqEyGmb7?YyEAm<=y2~&*#^gKEQU&eu;s)G&nHq7+P1W
z<T8go``So~9o-I|eIE2!lhRr!4P+*+!n4KR%}n_sDni4QOV98twYFx6B~YN>?vP+=
zG$n#fh)ga@LKEcHh5`bKPnX`<_X0@VnnQ2z02^GrHosFGZSuhjJwmnH^#UWg!I%J>
z;aYwBY;%=r{B*0FM<Sx;tyD}dR6mb_?*yk{F*7KB1DRBbtdC4B;3))|f&$=bZpc`y
z)pI#SKzDGR#|CQ3Q&vIM4I-}*o20k3{#oxZxor2Y0}lX=2du|GwD6#^iS)o~$Jrr_
zIv<c@sQ%Wnc!@FI_1%5D@f~?wH`I^jy3A=G-hBjc>WhAqAiBpmrg|VL)2)cR{*+6Y
zh)=UZ6Xz2`d%!8WMJ@4I744r&@@(FKn4bT+6By4g-cgq&9JABukgFQAm-%VaP3Pml
zqY8^14s+lDh3*x^isGi=O=(NolI~7Wj0P_}nCq%#T>^GG{2nKd&c`A8Llb<8BJ0jy
zGd1=}rxBpX{hO_zEQ=kT+X)hMgr_8fMa00G{_~ho5{Wi3*xU+UDAuwPu2kQ(*DHo;
zL3==b&hY5>W^>(e;r17q`AQJOGjrsau=ez+ei55bzJLMFo}rtw!JrM9!g#LMrEPq(
zWyKjmsD<ibP3?^uEAvj@XD=TMxm&Il{vXjB?sCXEvW>Nm>A~kfro4{ArlM~zu0lX;
zIiYWn8(`+-T$Bk6_Lxs?e5i-aI<K~Eyc=>D9yl=`w5YJa{BXBTd2JfQ;$BXsHq<aE
zW-{x#soDI?$P4=hHZ{yzF>0oW0nnA!@@$a=XQJ&`KXB<G9@LLhj?D0oYsYzqfTuBJ
za2D<)fqoXddw4odTtBhSZC>A(U7wjjB7u(^dHYr~$MlHx*Orvwbw3}MKIfqfA!s#f
zguE)V+^(eb5TaZ76UYg5o!Tf^HbyaaENyMp%8mnv@2lhqSKM}OP1ALzCsRHh7e75d
zxXwTliY)kC2U>q9XOXw2AQ!gU<gZEV<&YC2A>&_o>t2Bnk#u#$6op*3Pk|$gI%J?^
z?d5NMGP9{`SetRmw9GioztcU=g;mzu%(ppn^>!}Fpx}?hL?ibTo-&x)vY%tvbb%jI
zc|u)5BZc-1K;zxav_3{(tL&zokDxD{V)-=Re@zIH0u?)$FuZ?=J2|@Le$uW)sVc?P
z;Po#C60iAW2O<+I_v%@1gGjEWMaF8xwM~U^rP;F2MpE~k{5@{^?v-H+OZ=N0-pUOu
zF(~K|jcMkWQ8KA|%;G{mA9G89vd{uPnSXqx(?iO!D33b^Un9*-3c#sJ7!7?9?R)be
zJC)89us<?E8vwo&Q~TU&-h;ag#awK4K-!p6cW%tm<G0FJkFlKph%G$+49Vs}U{D23
z2$%tuvPgaTWb@30=8NLF5kBMV?=`ym0E>B<S_$EVy3pG;3x{ZD&k_wJ4}RRClvxXb
z?(8&^QglVP+t1|Qq}q^I+1j^az|`o`X%Ld!<{3M*GPp%A(VoXaf}z7k6O7i#jV|#A
zc!2K0HjduN>_}YOB9wH2Q`@cf5I5?};ybV`240`-%Cslj@(QTsq$HDWO0;sOg>KC}
z{LPzS`xbmqGab3fd5tW#SqL%4^W~5aHzY@R-*>OXYq0HH0|RE`B)hwtYuWvguSa3Y
z`ILD3cDF1vi{!JfYX@l4xAT0h%BH8v(;(LBe(1<%3!?9tA(Q=0Q73;|{iD|nV`1*F
ze?G`fUoxQ7%>J~*>)|%(+t?|fFzj|Tv|GgJJ*~uW{c(SoXBw9+2mcEg0OOY6zw+~c
zbnX8WeEvTP?*HQFKf3WhHu68s9c(`Uo$0>==uH0!ptJt?$^RRm)Bl|Qdw@>=-vV^?
zf7hXznHm3s)clXUtn?!-|3k_R|4l#s7x%XM&!X|aG-I0|xA?~^{+B}R@Q*kA@1F2~
zv4h?JlN9`K6)OJ$KL3YerT=p&n3<mSKfz};cPFLAZr*%i9-shLHs-pmEC&(ccmZL4
zcR7kc{-R((ieS_eZqjTfw)?E?G6}3TQtSEocv*fe@*;VoUvy!9zbQ_<A;{Z1+p9em
zz3p5#pIv5~u0G$Z8tRuc$i}vMKHs~ypS?o`q;o~-(W6Qdp@Z9!BU_Y>p`aQD;8Euo
zVBTKMA99IirO4myZ}(l(n0-+JO+@@O{sPbNz3U=(zEfMJ0h7%9`il{za!b)2+~IQJ
z<39ICZ8<e%j1uY|y4)a@&eK}NDuwzf*4BXSKo#{Ub&$4~ZBJXkJe|I!kg`rbjifwk
zQ-N}lI{ef7``hc`dg#k{0to~`OHor*L4yQQim}0Hl_R`u{q7DL$`ut_G00_Pj|AKR
z(g3S2Tb$4Zacq#5FnC3#5b-?haZuL)xGr8@vQvthi1kP3r4i<?3s{jP{#6ksEGVAz
zt0A0YP%}VaazKW-7|D514hCs|u5sQxS0qWyi(zxj%YU_BbD%uZi>N*_OCTlTK`GVL
zXu6f9!Qg125~l%<$2zAfjVRqP_b-#F)ik@)bTLi)+y?#>ClV+)nN_Y>L+mWZ4aIb|
zj72n19A{w3(z!)7Rvv9HHEG8LjzbeOw`<{r{IsVQ(%kv|E8YNNB#{UaV~zX`a=fY4
zqbNS0Xy%*=;VNk4tlT8z61leSy2IXDQO!&iFVN_)X0)_5^*nSb@QDoRdexe>f_d(Q
zwfsX&BWO=s-w3F=;6uW%f_+@89yGw~S;#DyxPmdnDLKtp!ai<?q1PlawHha#&e5K?
zxg8$6%#YkcXsTBWhGRF=t(exm;P?Hq&ZLb982(~tuxanLN4pE8vz6f8>U}>Lx-Drw
z*DQgVSIRx^PsEbNEd%&+zX0$B(6Di_jq>D#rbVr$_oOoztTMm!==f6yTPdL(mmAi_
zVhhF=AVgX}sU6JLy=nhB*jw`<TT%rbzLiZEG63$9Mg84%b+hm=$j?@MOGl0sK-T2S
zN%7H*6w(dYQAG(uDLuZdbshm{?GARAwE)XKfBa8_IKbQ-F1T$-nCz?zu5EjE0PbF6
z7t1b(8VZO}8($^47G`Bl6;&NoSz}`(GK%`-*Np~wGy6)V)5`M&Zg-=|3FBv=`XXH_
zC7`?&;jUoOG&gS*dDK68*2!Q6`1?y^>vLA`0NTCrdCTcOs@A=ScYt_ijNlALKth%U
zB)=T5=iggm!(&VI3LV5yLIucHv7nw}U5`Iqakgg+`0#>|mB!{NqK_={z&S$~qQ6h8
z<T(!*>`yT=BZV*qI!X=8{DI^JuaKbNE|B58D|Ti=LRk!NT5!Rz3zi+0YB_!Dxd6J|
zSX4{q%<4{~KeBir%ZA#ay80lPd%-GQpkFC0dCnTotV|+vN@y4%{C<|Vka5U7xq8|r
z)!d(KRLGJ2N|-#(E&*0_7KGe#-D6R}-mK2Zd5B6OMPcRoTdsv0K%GcQUB*$1ppe#o
zSKlrI%z7oZLyx4}SL&GM7aM$oCE&O@uWv2vp(l4&&p~FnkUc_t)eOZKPBM{Vxs8ts
zU;#Ljwk%cwgXJ-)oI%~s>b1_Z7XXZoc9Lp*lbLRZcKjyR3ky4&;uo%Ofyy}8ETEa%
z)*IQ_qJ^HX2!Qc8N)P*0oC`m22t2}{-Kk$@TL9k$f;fiQF}MD7BG$T-`|<VnQmt2^
zzNAw~y+}D6h2@MCv`6=H37AGaR_yQ62xLSX82b!+^_%h?k==<OB)XMHWPes3En|EG
z9^KG-6^y~g>9wp#L(ThbihyTN)$kd@Jsc|N?0xl6^>SMbc4#;1GJ+Xa>(vwJd&i6q
zWU76~tc+Otz#bqsU1`PT32?8@zQX|Dz#`HOhFvf>wFQFePPwv8w%*vY+OnA+rV(;+
zo>^l#`q$*6zOoEz#nzzM*h#=)$dT!kGp^?<O7vnuOy7&9vdQlWHss7ne#1re+{q(#
z%{bi+M3h!=C0mgOu@h|eXeCWe?aH}R06E*rTaeJ*HH8<r!^#FO>?SZWwz=PRX7dkX
zl7bk1p>Adj5n?sA+!@Y?!?(IGlR}ao#VYWW;?0c*dF_rj^7jRhyqdta4sVq-$$0>k
zk|Ip3L-7~!_2Yu>64KqJ_Xn>;d|9p1u)5r<Oh)dC%2c0|=z&K*2!JI#F-O|<?KJ!#
zPO8!Q;}(sWRxbl0GjbZ~N2BHI{m^y@UeMKn6SfyTUGDo=)Xdhv-!L0Tm)QRHq-<;|
zY6hAmMEY=0_Ogv=MOLdw9W?&q6H~to+YpuCHR+tcz1;#h88{psl+~-73o7wH<)qWv
z0uiDgyru<8mal+?@-z@O77^HDBKT?L(UB$1&2?4EG)Yj+A1I}z3zYV&cuSot04WkC
zL=Fiwo>AD*x?%p}2eyM9J8gj&8o7#O)=DbSD7rNXp!8_$&jFH*PW!&YKA=Gow=L>j
z1yxi4nww}?qy7f-(8^&Dv8*qn9;a7dX8~qLF>u-rUCTtcDbZseTXz)p1Z*p?dpSb;
z)XVM>cXozng$1f_5~yL-kTJnAme+`O^P<8^4&@A-!YKfML!6@`N2TGP(Dmkf%?xkY
zOvDR$#G6>8cw1d69R{Zdj7(0N4nfE|sM74h{+R%K&ikg%ngcIUs>%hm%?>SUt?FQT
zEp`K@h~+kYRQE$Cw?;J{2W-r!z)N{`1PDL+lWfN2VLb4ASZrDL;bR}ONTNwKu$=w|
zP-FdOHDAm0#f+u1@3fg!Qh@ge+T#(l(ZyUq<$Y&ccA%tsYsb|E$NZ`>B($8<3~D|$
zP~ie5OYz8FJ|n=nPq_y4l|Nd8p!xr4?cBqm&fWkXC8ARHx3ybhQVcPd@Ao_R%#<~h
ze(sk-s9|Q9jF~YrB2lD}%XU{TU8$%@q_R>;D%YYU$|cc77p%}l>vx7~8{@aTf9yOS
z&(}Ne`=0l_=RIeh=Zy0?Zu|p{I9qzD1@(OL_7?kG%W5+h$@COz|77y)&sJw!j^1j?
zYtSuxq~8~5Yu`Qf!B$lKrufR~W*_bw=5JSdey>d}?Ui_qplw?!{g>gaeSz<l_If2o
zTs52Q`+0q2`vg?*vuSDmQbNeaOxxLE`tK?OM2E>H{MM*v=?!<+oqv%%7~JxKEq?J-
z^L^$dZ0Ec14=+1@UK%~;l(9-(Sme$M<J<d+=iiK}*wbG(+{N+unEdM}>K1JH<*oTz
zmy?RQ&0F-r;v8{E&*63Yww==?ZJQ3LmNBlV)@<xt^-kL|Bet*6wa%NFk*?AkpVcwE
zqN;JiZI@42vzr%vL{DNgGy4v24gt)1#55t#{9Ut-VF2sMe#Qy1=Z+UAeW+{Bc^!7g
z#9>y{OfoHKae9@vI89LD;u9P>2VSTVTc+;jVz%bP?fnf`W2Tf2rS{DF0d^(Qt(m#M
zwf(+;Tr)AR#J|qxkbBi$D<Psp=O!OJUQn3T>F0Ip(0T3JD`8jgtMlwG#d^#ksqU>;
z){S0UaV|Q^u)DBjv8eX=v7*}7n`@Ona%}Y~m93|T+qgM7cw!CgZukpvE%UUzOio_#
ztz39SEAw&}xAS^P*wr0jgI#~<uDxHZspDb0<Vxnj&DU1FRZV33_-`yORpQ%j%C7hA
zQ`-IcX+vw+CiL1VKdsKZXEFeGKIrWaBTJv<QUii!U47YbJrchBI49%v#fA*sVsWNH
zoA4Q#Fs*;Bx$m&@>^dlILG`|uAG)UU=Id8z#i}bM8+U1c{&?M2*I_uhJ^C%Jdustg
zPHQKfuD5ecyIAvl*ne$W*T)kZl+W*q;>@G=&TX&Vq8~<yw<Q%`G?FA(O-^fTdXqh1
zFfH?$l0NC8R%-nj!uHaqGZ2^f{KqH{$5!(DC-0m6H@~^%mgAKT`^;NqUv9X%V0LPL
z%B>unrXkI4Fxd3cyBodBUJ9cU&TUt7RdP#<(@Xa{y|40g0c~klzmD+Wy>8yI$2RL#
z@6G%$!`4+Bx8it`wnk1z`08vGU#nsZ!QK-`6FtgEK2vt?+_1@N@Ws->VvR5;JkH5r
z=9IY9GS4^J*#|vc-f*7S-v0P9t3~u+`zE!+;WMheY-Zn8Ni#ce^NhDq8EubRW<-<G
z!0y-O?t!~j&*=N*aS^V2ok`(4olcT!hEmp=mdu_m%fScxqo#@j#Ey?oZMC~{i&y1P
zxu2r$ps!<Rcls<g7L#B5IA^g@H(uxFIsES>;kQ37mr5HO?)&eMPIG19G<83{cfEKD
zz9G!&nMEZn*;U<Zaz=YjC{?F@Xi~aEbmxl4seQpt;r$UqKY6I77i~G228Quutf^qJ
z-_5cW0~r{%HQ5gB8tDZ){Ke=+lElT=MTw26Q`cv?2n?OxAjX(Er&~@v&1=vb*gGjb
zNL`@wwpZ8B&TmoMIpXS#DH)zn)RF8r9mPHPbz2gSma7?VlTdn3_lM5Z;W$;Boy~7)
zW;S|K?lf5~Tj;@Toqlh@U~p)f`kYQKe?zEx@5v?;_qo5CUA`P~-uLp^zM>tuA?9v9
zy;Z2Ez0tXNgGH_jP8eWzDrXV$4X1GCrxa~#;Yuc&HksaSu;17iZ@12wd5BCoGygyR
zWzG?gs*W8#=5VBRb8dZ2>GgM8A6E4mzJImQW4o`kqt~*EpI^>~=XPoxyvhB+W!<zD
zRp|Uj&&4Y1rn6!sjm^`S^z=+#M2lOfWgeuzSs1vosmRa$)4^!Tk!0;mn)886ff}KK
zM#Fkl1(fx?8_)JVAs^U7X{~P$dk(Li>#_=qS$fBNAif1McFtm7O0S%|V<2(OrQwo7
z#?l8HrRsoma@(@cFnqgPR?~l@m$BV?s*>mWG}s<~p`3AcWlXc3|89G$<vG>oZb#1A
z5u0mP%LqL-crQQfV$9D;>95U2pVgRj`^e*gEw=~~?-!PnI=q7ji*De2)1BwLXSU#Q
zNmDvbsV`lbnifP!jpo!vaq2$DSXZ3>ePiXaE5H3Q&w9w*V1HhiAijj3zYflNlX-+T
z(|Nak_3oUKKWfS~!Ys0_&p4#onC@DB{GM{1pSV8c6Y9BPhf_gu3pV)L+xFjv)@zDV
z(>##rO78yK3ai|=SoHq5a_~-KR7q*TvZ9IR4;{M_-Q%m{`Wx2frbI-a>8X6wq#SwS
zNmb2_gXR0EDnnILtE4syu}Y==P)F6z0X=VKQtBrfN2MfXw%X0B#vb);cX}l;SyY?4
z&CtEz$Gy9@aCr@)!J~I@PvQo<lPdN__!0{JhX#4xYS@#?`#o*0nS0+gSsCVxwDOTh
z2VNIi4r#FyO3Emw<}EC0#mu6zp~WRNacNZv(!eCq{K5o|33pRDoMc3fn~^`E*qCXO
zymV3KgEj->#2okM-CiB%iURjU<wY#l5{T_Sl%HjMP%@a-ceb?B+D`M<JX7V_37*AM
zLbA=WKL+c<U4c!|ggwn2@TIBK7yPO+OTb9E10YAG9hFlbY8GodS2zkd*Wm~J7x%BJ
zS*j+)zJIiYay>4tefNd9nnMHT%`ugawz1sIC3eUQJ;HuTXhkksYk1RzGvJd}L!-+r
z8+lvB@2^g=m@%vxZO>6w+;AD;dw##;@)hj+CqT^A#`-Hg41&nSZ~vukx+DbbQ2_E9
z%A4cM6VTD!MOV=%9-EF{MYO@&h|D>Dyyc-{j#H?uvrnkM50#Bx!caF|!UD*54km;p
z!f;2hWfBws$kFx89jz_(WC|g)kN{Bt;0vQd0{8+6ErgC9F`<EHnHYygji^Zd>1bCQ
zdz4ft<oolaC>Tq{LKp}!L2<<ZbQdfX`=cN%2@PC|*<6|<0Mm~;1b@-dep0E3hQkF1
z2V;W~tWfNWgQ!$04iDpC7y~pgk_`eWD+D8uECB6|1j2LuW+sqeM`FSPwj7S<ii5Ct
z+}DO=`$#gvEl(&w$r@&P3xlL|J-shpMBlY8=LWn1{2-uv;E4u+`s^Sdj+l;KW^avJ
z<|mX$N8JKkGZqhHAvEqw$Nr{0kj(MJ1|#q#Zd0H`vjKos?gl0x$T46%Ou*n_44&c)
zBQye)22tEiabuLgKmjXr0FndDxxcphPU$-<q1YLW9K%;E<Z@B#0RT^yFbE4HSo~;X
zBW7Q;OmVVQe%IB1*m;)7#^$fP9}plbD48CODf9^n0Ov@om~?bd5RXkms1OD6_NHRE
z94-|DLEsnQ_u?@Shl{YuEDq5d^7*IZ!1nnThbTzQA1OJu501m<$eNUZp@2XjY#$m|
zC=OsrLD7pufZNHE)e#O<1e#$A-jwnH=#Vi|&}Mw;=mVc8D=iwICGe%ALojR(mled9
zq8ToN5pDKp?)W^$=);H|?oVIiWOhUZCJab2?%Q-^sH6U+*T3iJ&ou}fz@nprWh;!r
zp{(!rM8D1|!~Zj>jKKb_tfE2AWi@Tcq{-$29>!B(gaC@c9gjzYAD{-N%im~xDPP0!
z3fzdn_;O+_M9ksJNTy_US!IpBP$VJ|F#NfwQ5iyjNZ?SB?1d71krBbo9Dq41CqoE$
z8R%VJ29snIRXG_R4^co)<Yfprfiy;jkRTaGUQUk)%l6gfWeAY~D82GBuobSTM<C1S
z^m6_X5=lnHmzM!|3VJYEMz5FC!y{zU*!b{dl7b#WfXRyfD3q}>U`qmcYPmKbAOyr#
zIT=Dg6yrni3b_Kd3T;5+<^^<QY#Rtf9y`9k79Kmk5E+)iyvM{x7$-hNc29tu9<WvD
z8(_F9$PfZyocIW&vEu=375WP!6yn%+5dv|X_(*^|D<2=QC6BEQm<+0Sj2`eePJCn;
zAXTovz*eD75j+IQ#qxRx=-Sv=5P%6*$TJ=yD#&0kGZp<Q#z%%^*D%P%2hyw%9}y;k
z@37?cz%@S5*uEiPnk(p$h>Gh5z#D%zZc;G|z-7hYUKte5i5JQN>ktZD_ag+CLV$1L
z98owc0au6u2H?60oD~zb+SC#-%$Wpp62v4}kPrgJj6#G+AWAZmX=XuY!i>My@RVIQ
YA(67g(viiFNCC$H)%Eo)>@3y)2MrR7;Q#;t

literal 0
HcmV?d00001

diff --git a/support/dist-docs-branch-23.06/ovn-controller.8.txt b/support/dist-docs-branch-23.06/ovn-controller.8.txt
new file mode 100644
index 00000000..b72fd396
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-controller.8.txt
@@ -0,0 +1,782 @@
+ovn-controller(8)                 OVN Manual                 ovn-controller(8)
+
+NAME
+       ovn-controller - Open Virtual Network local controller
+
+SYNOPSIS
+       ovn-controller [options] [ovs-database]
+
+DESCRIPTION
+       ovn-controller is the local controller daemon for OVN, the Open Virtual
+       Network.  It connects up to the OVN Southbound database (see ovn-sb(5))
+       over the OVSDB protocol, and down to the  Open  vSwitch  database  (see
+       ovs-vswitchd.conf.db(5)) over the OVSDB protocol and to ovs-vswitchd(8)
+       via OpenFlow. Each hypervisor and software gateway in an OVN deployment
+       runs its own independent copy of ovn-controller; thus, ovn-controller’s
+       downward  connections  are machine-local and do not run over a physical
+       network.
+
+ACL LOGGING
+       ACL log messages are logged through ovn-controller’s logging mechanism.
+       ACL log entries have the module acl_log at log level info.  Configuring
+       logging is described below in the Logging Options section.
+
+OPTIONS
+   Daemon Options
+       --pidfile[=pidfile]
+              Causes a file (by default, program.pid) to be created indicating
+              the  PID  of the running process. If the pidfile argument is not
+              specified, or if it does not begin with /, then it is created in
+              .
+
+              If --pidfile is not specified, no pidfile is created.
+
+       --overwrite-pidfile
+              By default, when --pidfile is specified and the  specified  pid‐
+              file already exists and is locked by a running process, the dae‐
+              mon refuses to start. Specify --overwrite-pidfile to cause it to
+              instead overwrite the pidfile.
+
+              When --pidfile is not specified, this option has no effect.
+
+       --detach
+              Runs  this  program  as a background process. The process forks,
+              and in the child it starts a new session,  closes  the  standard
+              file descriptors (which has the side effect of disabling logging
+              to  the  console), and changes its current directory to the root
+              (unless --no-chdir is specified). After the child completes  its
+              initialization, the parent exits.
+
+       --monitor
+              Creates  an  additional  process  to monitor this program. If it
+              dies due to a signal that indicates a programming  error  (SIGA�‐
+              BRT, SIGALRM, SIGBUS, SIGFPE, SIGILL, SIGPIPE, SIGSEGV, SIGXCPU,
+              or SIGXFSZ) then the monitor process starts a new copy of it. If
+              the daemon dies or exits for another reason, the monitor process
+              exits.
+
+              This  option  is  normally used with --detach, but it also func‐
+              tions without it.
+
+       --no-chdir
+              By default, when --detach is specified, the daemon  changes  its
+              current  working  directory  to  the root directory after it de‐
+              taches. Otherwise, invoking the daemon from a carelessly  chosen
+              directory  would  prevent  the administrator from unmounting the
+              file system that holds that directory.
+
+              Specifying --no-chdir suppresses this behavior,  preventing  the
+              daemon  from changing its current working directory. This may be
+              useful for collecting core files, since it is common behavior to
+              write core dumps into the current working directory and the root
+              directory is not a good directory to use.
+
+              This option has no effect when --detach is not specified.
+
+       --no-self-confinement
+              By default this daemon will try to self-confine itself  to  work
+              with  files  under  well-known  directories  determined at build
+              time. It is better to stick with this default behavior  and  not
+              to  use  this  flag  unless some other Access Control is used to
+              confine daemon. Note that in contrast to  other  access  control
+              implementations  that  are  typically enforced from kernel-space
+              (e.g. DAC or MAC), self-confinement is imposed  from  the  user-
+              space daemon itself and hence should not be considered as a full
+              confinement  strategy,  but instead should be viewed as an addi‐
+              tional layer of security.
+
+       --user=user:group
+              Causes this program to run as  a  different  user  specified  in
+              user:group,  thus  dropping  most  of the root privileges. Short
+              forms user and :group are also allowed,  with  current  user  or
+              group  assumed,  respectively.  Only daemons started by the root
+              user accepts this argument.
+
+              On   Linux,   daemons   will   be   granted   CAP_IPC_LOCK   and
+              CAP_NET_BIND_SERVICES  before  dropping root privileges. Daemons
+              that interact with a datapath, such  as  ovs-vswitchd,  will  be
+              granted  three  additional  capabilities,  namely CAP_NET_ADMIN,
+              CAP_NET_BROADCAST and CAP_NET_RAW. The  capability  change  will
+              apply even if the new user is root.
+
+              On Windows, this option is not currently supported. For security
+              reasons,  specifying  this  option will cause the daemon process
+              not to start.
+
+   Logging Options
+       -v[spec]
+       --verbose=[spec]
+            Sets logging levels. Without any spec,  sets  the  log  level  for
+            every  module and destination to dbg. Otherwise, spec is a list of
+            words separated by spaces or commas or colons, up to one from each
+            category below:
+
+            •      A valid module name, as displayed by the vlog/list  command
+                   on ovs-appctl(8), limits the log level change to the speci‐
+                   fied module.
+
+            •      syslog,  console, or file, to limit the log level change to
+                   only to the system log, to the console, or to a  file,  re‐
+                   spectively.  (If  --detach  is specified, the daemon closes
+                   its standard file descriptors, so logging  to  the  console
+                   will have no effect.)
+
+                   On  Windows  platform,  syslog is accepted as a word and is
+                   only useful along with the --syslog-target option (the word
+                   has no effect otherwise).
+
+            •      off, emer, err, warn, info, or  dbg,  to  control  the  log
+                   level.  Messages  of  the  given severity or higher will be
+                   logged, and messages of lower  severity  will  be  filtered
+                   out.  off filters out all messages. See ovs-appctl(8) for a
+                   definition of each log level.
+
+            Case is not significant within spec.
+
+            Regardless of the log levels set for file, logging to a file  will
+            not take place unless --log-file is also specified (see below).
+
+            For compatibility with older versions of OVS, any is accepted as a
+            word but has no effect.
+
+       -v
+       --verbose
+            Sets  the  maximum  logging  verbosity level, equivalent to --ver�‐
+            bose=dbg.
+
+       -vPATTERN:destination:pattern
+       --verbose=PATTERN:destination:pattern
+            Sets the log pattern for destination to pattern. Refer to  ovs-ap�‐
+            pctl(8) for a description of the valid syntax for pattern.
+
+       -vFACILITY:facility
+       --verbose=FACILITY:facility
+            Sets  the RFC5424 facility of the log message. facility can be one
+            of kern, user, mail, daemon, auth, syslog, lpr, news, uucp, clock,
+            ftp, ntp, audit, alert, clock2, local0,  local1,  local2,  local3,
+            local4, local5, local6 or local7. If this option is not specified,
+            daemon  is used as the default for the local system syslog and lo�‐
+            cal0 is used while sending a message to the  target  provided  via
+            the --syslog-target option.
+
+       --log-file[=file]
+            Enables  logging  to a file. If file is specified, then it is used
+            as the exact name for the log file. The default log file name used
+            if file is omitted is /usr/local/var/log/ovn/program.log.
+
+       --syslog-target=host:port
+            Send syslog messages to UDP port on host, in addition to the  sys‐
+            tem  syslog.  The host must be a numerical IP address, not a host‐
+            name.
+
+       --syslog-method=method
+            Specify method as how syslog messages should  be  sent  to  syslog
+            daemon. The following forms are supported:
+
+            •      libc,  to use the libc syslog() function. Downside of using
+                   this options is that libc adds fixed prefix to  every  mes‐
+                   sage  before  it is actually sent to the syslog daemon over
+                   /dev/log UNIX domain socket.
+
+            •      unix:file, to use a UNIX domain socket directly. It is pos‐
+                   sible to specify arbitrary message format with this option.
+                   However, rsyslogd 8.9 and older  versions  use  hard  coded
+                   parser  function anyway that limits UNIX domain socket use.
+                   If you want to use  arbitrary  message  format  with  older
+                   rsyslogd  versions, then use UDP socket to localhost IP ad‐
+                   dress instead.
+
+            •      udp:ip:port, to use a UDP socket. With this  method  it  is
+                   possible  to  use  arbitrary message format also with older
+                   rsyslogd. When sending syslog messages over UDP socket  ex‐
+                   tra precaution needs to be taken into account, for example,
+                   syslog daemon needs to be configured to listen on the spec‐
+                   ified  UDP  port, accidental iptables rules could be inter‐
+                   fering with local syslog traffic and there are  some  secu‐
+                   rity  considerations  that apply to UDP sockets, but do not
+                   apply to UNIX domain sockets.
+
+            •      null, to discard all messages logged to syslog.
+
+            The default is taken from the OVS_SYSLOG_METHOD environment  vari‐
+            able; if it is unset, the default is libc.
+
+   PKI Options
+       PKI  configuration  is required in order to use SSL for the connections
+       to the Northbound and Southbound databases.
+
+              -p privkey.pem
+              --private-key=privkey.pem
+                   Specifies a PEM file containing the  private  key  used  as
+                   identity for outgoing SSL connections.
+
+              -c cert.pem
+              --certificate=cert.pem
+                   Specifies  a  PEM file containing a certificate that certi‐
+                   fies the private key specified on -p or --private-key to be
+                   trustworthy. The certificate must be signed by the certifi‐
+                   cate authority (CA) that the peer in SSL  connections  will
+                   use to verify it.
+
+              -C cacert.pem
+              --ca-cert=cacert.pem
+                   Specifies a PEM file containing the CA certificate for ver‐
+                   ifying certificates presented to this program by SSL peers.
+                   (This  may  be  the  same certificate that SSL peers use to
+                   verify the certificate specified on -c or --certificate, or
+                   it may be a different one, depending on the PKI  design  in
+                   use.)
+
+              -C none
+              --ca-cert=none
+                   Disables  verification  of  certificates  presented  by SSL
+                   peers. This introduces a security risk,  because  it  means
+                   that  certificates  cannot be verified to be those of known
+                   trusted hosts.
+
+              --bootstrap-ca-cert=cacert.pem
+                     When cacert.pem exists, this option has the  same  effect
+                     as  -C  or --ca-cert. If it does not exist, then the exe‐
+                     cutable will attempt to obtain the  CA  certificate  from
+                     the  SSL  peer on its first SSL connection and save it to
+                     the named PEM file. If it is successful, it will  immedi‐
+                     ately drop the connection and reconnect, and from then on
+                     all  SSL  connections must be authenticated by a certifi‐
+                     cate signed by the CA certificate thus obtained.
+
+                     This option exposes the SSL connection to  a  man-in-the-
+                     middle  attack  obtaining the initial CA certificate, but
+                     it may be useful for bootstrapping.
+
+                     This option is only useful if the SSL peer sends  its  CA
+                     certificate as part of the SSL certificate chain. The SSL
+                     protocol  does not require the server to send the CA cer‐
+                     tificate.
+
+                     This option is mutually exclusive with -C and --ca-cert.
+
+              --peer-ca-cert=peer-cacert.pem
+                     Specifies a PEM file that contains one or more additional
+                     certificates to send to SSL peers. peer-cacert.pem should
+                     be the CA certificate used to sign the program’s own cer‐
+                     tificate, that is, the certificate  specified  on  -c  or
+                     --certificate.  If  the  program’s  certificate  is self-
+                     signed,  then  --certificate  and  --peer-ca-cert  should
+                     specify the same file.
+
+                     This  option  is  not useful in normal operation, because
+                     the SSL peer must already have the CA certificate for the
+                     peer to have any confidence in  the  program’s  identity.
+                     However,  this  offers  a  way  for a new installation to
+                     bootstrap the CA certificate on its first SSL connection.
+
+   Other Options
+       -h
+       --help
+            Prints a brief help message to the console.
+
+       -V
+       --version
+            Prints version information to the console.
+
+CONFIGURATION
+       ovn-controller retrieves most of its configuration information from the
+       local Open vSwitch’s ovsdb-server instance.  The  default  location  is
+       db.sock in the local Open vSwitch’s "run" directory. It may be overrid‐
+       den  by specifying the ovs-database argument as an OVSDB active or pas‐
+       sive connection method, as described in ovsdb(7).
+
+       ovn-controller assumes it gets configuration information from the  fol‐
+       lowing keys in the Open_vSwitch table of the local OVS instance:
+
+              external_ids:system-id
+                     The  chassis  name  to use in the Chassis table. Changing
+                     the system-id while ovn-controller is running is not  di‐
+                     rectly  supported.  Users  have two options: either first
+                     gracefully stop ovn-controller  or  manually  delete  the
+                     stale  Chassis and Chassis_Private records after changing
+                     the system-id. Note that the chassis  name  can  also  be
+                     provided via the system-id-override file in the local OVN
+                     "etc"  directory  or  via the -n command-line option. The
+                     following precedence is used: first, the command-line op‐
+                     tion is read; if not present, the system-id-override file
+                     is read; if not present, then the name configured in  the
+                     database is used.
+
+              external_ids:hostname
+                     The hostname to use in the Chassis table.
+
+              external_ids:ovn-bridge
+                     The  integration  bridge  to  which logical ports are at‐
+                     tached. The default is br-int. If this  bridge  does  not
+                     exist  when ovn-controller starts, it will be created au‐
+                     tomatically with the default configuration  suggested  in
+                     ovn-architecture(7).  When  more than one controllers are
+                     running on the same  host,  external_ids:ovn-bridge-CHAS�‐
+                     SIS_NAME  should  be  set for each of them, pointing to a
+                     unique bridge. This  is  required  to  avoid  controllers
+                     stepping on each others’ feet.
+
+              external_ids:ovn-bridge-datapath-type
+                     This configuration is optional. If set, then the datapath
+                     type of the integration bridge will be set to the config‐
+                     ured  value.  If  this  option  is not set, then ovn-con�‐
+                     troller will not modify the existing datapath-type of the
+                     integration bridge.
+
+              external_ids:ovn-remote
+                     The OVN database that this system should connect  to  for
+                     its  configuration,  in  one of the same forms documented
+                     above for the ovs-database.
+
+              external_ids:ovn-monitor-all
+                     A boolean value that tells if ovn-controller should moni‐
+                     tor all records of tables  in  ovs-database.  If  set  to
+                     false,  it will conditionally monitor the records that is
+                     needed in the current chassis.
+
+                     It is more efficient to set it to true in use cases where
+                     the chassis would anyway need  to  monitor  most  of  the
+                     records  in OVN Southbound database, which would save the
+                     overhead of conditions processing, especially for  server
+                     side. Typically, set it to true for environments that all
+                     workloads need to be reachable from each other.
+
+                     Default value is false.
+
+              external_ids:ovn-remote-probe-interval
+                     The  inactivity  probe  interval of the connection to the
+                     OVN database, in milliseconds. If the value is  zero,  it
+                     disables the connection keepalive feature.
+
+                     If  the  value  is  nonzero,  then it will be forced to a
+                     value of at least 1000 ms.
+
+              external_ids:ovn-openflow-probe-interval
+                     The inactivity probe interval of the OpenFlow  connection
+                     to the OpenvSwitch integration bridge, in seconds. If the
+                     value  is zero, it disables the connection keepalive fea‐
+                     ture.
+
+                     If the value is nonzero, then it  will  be  forced  to  a
+                     value of at least 5s.
+
+              external_ids:ovn-encap-type
+                     The  encapsulation type that a chassis should use to con‐
+                     nect to this node. Multiple encapsulation  types  may  be
+                     specified with a comma-separated list. Each listed encap‐
+                     sulation type will be paired with ovn-encap-ip.
+
+                     Supported  tunnel  types  for  connecting hypervisors and
+                     gateways are geneve, vxlan, and stt.
+
+                     Due to the limited amount of metadata in vxlan, the capa‐
+                     bilities and performance of connected gateways and hyper‐
+                     visors will be reduced versus other tunnel formats.
+
+              external_ids:ovn-encap-ip
+                     The IP address that a chassis should use  to  connect  to
+                     this  node  using encapsulation types specified by exter�‐
+                     nal_ids:ovn-encap-type.
+
+              external_ids:ovn-encap-df_default
+                     indicates the DF flag handling of the  encapulation.  Set
+                     to true to set the DF flag for new data paths or false to
+                     clear the DF flag.
+
+              external_ids:ovn-bridge-mappings
+                     A  list  of  key-value  pairs that map a physical network
+                     name to a local ovs bridge that provides connectivity  to
+                     that  network. An example value mapping two physical net‐
+                     work  names  to  two  ovs   bridges   would   be:   phys�‐
+                     net1:br-eth0,physnet2:br-eth1.
+
+              external_ids:ovn-encap-csum
+                     ovn-encap-csum indicates that encapsulation checksums can
+                     be  transmitted and received with reasonable performance.
+                     It is a hint to senders transmitting data to this chassis
+                     that they should use checksums to protect  OVN  metadata.
+                     Set  to  true to enable or false to disable. Depending on
+                     the capabilities of the network interface card,  enabling
+                     encapsulation  checksum  may  incur  performance loss. In
+                     such cases, encapsulation checksums can be disabled.
+
+              external_ids:ovn-encap-tos
+                     ovn-encap-tos indicates the value to be  applied  to  OVN
+                     tunnel   interface’s   option:tos  as  specified  in  the
+                     Open_vSwitch database Interface table.  Please  refer  to
+                     Open VSwitch Manual for details.
+
+              external_ids:ovn-cms-options
+                     A list of options that will be consumed by the CMS Plugin
+                     and which specific to this particular chassis. An example
+                     would be: cms_option1,cms_option2:foo.
+
+              external_ids:ovn-transport-zones
+                     The  transport  zone(s)  that  this  chassis  belongs to.
+                     Transport zones is a way to group  different  chassis  so
+                     that  tunnels are only formed between members of the same
+                     group(s). Multiple transport zones may be specified  with
+                     a comma-separated list. For example: tz1,tz2,tz3.
+
+                     If  not set, the Chassis will be considered part of a de‐
+                     fault transport zone.
+
+              external_ids:ovn-chassis-mac-mappings
+                     A list of key-value pairs that map a chassis specific mac
+                     to a physical network name. An example value mapping  two
+                     chassis  macs  to  two  physical  network names would be:
+                     physnet1:aa:bb:cc:dd:ee:ff,physnet2:a1:b2:c3:d4:e5:f6.
+                     These are the macs that  ovn-controller  will  replace  a
+                     router  port mac with, if packet is going from a distrib‐
+                     uted router port on vlan type logical switch.
+
+              external_ids:ovn-is-interconn
+                     The boolean flag indicates if the chassis is used  as  an
+                     interconnection gateway.
+
+              external_ids:ovn-match-northd-version
+                     The  boolean  flag  indicates  if ovn-controller needs to
+                     check ovn-northd version. If this flag is set to true and
+                     the ovn-northd�’s  version  (reported  in  the  Southbound
+                     database)  doesn’t match with the ovn-controller�’s inter‐
+                     nal version, then it will stop processing the  southbound
+                     and  local  Open  vSwitch  database  changes. The default
+                     value is considered false if this option is not defined.
+
+              external_ids:ovn-ofctrl-wait-before-clear
+                     The time, in milliseconds, to wait before clearing  flows
+                     in  OVS  after  OpenFlow  connection/reconnection  during
+                     ovn-controller initialization. The purpose of  this  wait
+                     is  to  give  time  for ovn-controller to compute the new
+                     flows before clearing existing ones, to avoid data  plane
+                     down  time during ovn-controller restart/upgrade at large
+                     scale environments where recomputing the flows takes more
+                     than a few seconds or even longer. It  is  difficult  for
+                     ovn-controller  to determine when the new flows computing
+                     is completed, because of the dynamics in the cloud  envi‐
+                     ronments, which is why this configuration is provided for
+                     users to adjust based on the scale of the environment. By
+                     default,  it  is  0,  which means clearing existing flows
+                     without waiting. Not setting the value, or setting it too
+                     small, may result in data  plane  down  time  during  up‐
+                     grade/restart, while setting it too big may result in un‐
+                     necessary  extra  control  plane  latency of applying new
+                     changes of CMS during upgrade/restart. In most  cases,  a
+                     slightly  bigger  value is not harmful, because the extra
+                     control plane latency happens only once during the  Open‐
+                     Flow  connection.  To get a reasonable range of the value
+                     setting, it is recommended to run the below commands on a
+                     node in the target environment and then set this configu‐
+                     ration to twice the value of Maximum shown in the  output
+                     of the second command.
+
+                     •      ovn-appctl -t ovn-controller inc-engine/recompute
+
+                     •      ovn-appctl    -t   ovn-controller   stopwatch/show
+                            flow-generation
+
+              external_ids:ovn-enable-lflow-cache
+                     The boolean flag indicates if ovn-controller  should  en‐
+                     able/disable  the  logical  flow  in-memory cache it uses
+                     when processing Southbound database logical flow changes.
+                     By default caching is enabled.
+
+              external_ids:ovn-limit-lflow-cache
+                     When used, this configuration value determines the  maxi‐
+                     mum  number  of logical flow cache entries ovn-controller
+                     may create when the logical flow cache is enabled. By de‐
+                     fault the size of the cache is unlimited.
+
+              external_ids:ovn-memlimit-lflow-cache-kb
+                     When used, this configuration value determines the  maxi‐
+                     mum size of the logical flow cache (in KB) ovn-controller
+                     may create when the logical flow cache is enabled. By de‐
+                     fault the size of the cache is unlimited.
+
+              external_ids:ovn-trim-limit-lflow-cache
+                     When used, this configuration value sets the minimum num‐
+                     ber  of  entries  in the logical flow cache starting with
+                     which automatic memory trimming is performed. By  default
+                     this is set to 10000 entries.
+
+              external_ids:ovn-trim-wmark-perc-lflow-cache
+                     When  used,  this configuration value sets the percentage
+                     from the high watermark number of entries in the  logical
+                     flow  cache under which automatic memory trimming is per‐
+                     formed. E.g., if the trim watermark percentage is set  to
+                     50%, automatic memory trimming happens only when the num‐
+                     ber  of entries in the logical flow cache gets reduced to
+                     less than half of the last measured  high  watermark.  By
+                     default this is set to 50.
+
+              external_ids:ovn-trim-timeout-ms
+                     When  used,  this configuration value specifies the time,
+                     in milliseconds, since the last logical flow cache opera‐
+                     tion after which ovn-controller performs memory  trimming
+                     regardless of how many entries there are in the cache. By
+                     default this is set to 30000 (30 seconds).
+
+              external_ids:ovn-set-local-ip
+                     The  boolean flag indicates if ovn-controller when create
+                     tunnel ports should set local_ip parameter. Can be  hepl‐
+                     ful  to  pin source outer IP for the tunnel when multiple
+                     interfaces are used on the host for overlay traffic. This
+                     is also useful when running multiple  ovn-controller  in‐
+                     stances  on  the same chassis, in which case this setting
+                     will guarantee that their tunnel ports have  unique  con‐
+                     figuration and can exist in parallel.
+
+              external_ids:garp-max-timeout-sec
+                     When used, this configuration value specifies the maximum
+                     timeout (in seconds) between two consecutive GARP packets
+                     sent  by  ovn-controller. ovn-controller by default sends
+                     just 4 GARP packets with an exponential backoff  timeout.
+                     Setting  external_ids:garp-max-timeout-sec  allows to cap
+                     for the exponential backoff  used  by  ovn-controller  to
+                     send GARPs packets.
+
+       Most  of  configuration options listed above can also be set for a par‐
+       ticular chassis name (see  external_ids:system-id   for  more  informa‐
+       tion).  This  can  be achieved by setting external_ids:option-[chassis]
+       instead of external_ids:option. For example,  set  external_ids:ovn-en�‐
+       cap-ip-otherhv  to  use  a particular IP address for the controller in‐
+       stance named otherhv. Name specific configuration options always  over‐
+       ride any global options set in the database.
+
+       Chassis-specific configuration options in the database plus the ability
+       to configure the chassis name to use via the system-id-override file or
+       command  line  allows  to  run  multiple  ovn-controller instances with
+       unique chassis names on the same host using the same vswitchd instance.
+       This may be useful when running a hybrid setup with more than  one  CMS
+       managing  ports  on the host, or to use different datapath types on the
+       same host. Make sure you also  set  external_ids:ovn-set-local-ip  when
+       using such configuration. Also note that this ability is highly experi‐
+       mental  and  has  known limitations (for example, stateful ACLs are not
+       supported). Use at your own risk.
+
+       ovn-controller reads the following values from the  Open_vSwitch  data‐
+       base of the local OVS instance:
+
+              datapath-type from Bridge table
+                     This  value is read from local OVS integration bridge row
+                     of Bridge table and populated  in  other_config:datapath-
+                     type of the Chassis table in the OVN_Southbound database.
+
+              iface-types from Open_vSwitch table
+                     This  value  is  populated in external_ids:iface-types of
+                     the Chassis table in the OVN_Southbound database.
+
+              private_key, certificate, ca_cert, and bootstrap_ca_cert from
+              SSL table
+                     These values provide the SSL configuration used for  con‐
+                     necting to the OVN southbound database server when an SSL
+                     connection  type  is  configured via external_ids:ovn-re�‐
+                     mote. Note that this SSL configuration can also  be  pro‐
+                     vided  via command-line options, the configuration in the
+                     database takes precedence if both are present.
+
+OPEN VSWITCH DATABASE USAGE
+       ovn-controller uses a number of external_ids keys in the  Open  vSwitch
+       database  to  keep track of ports and interfaces. For proper operation,
+       users should not change or clear these keys:
+
+              external_ids:ovn-chassis-id in the Port table
+                     The presence of this key identifies a tunnel port  within
+                     the  integration  bridge as one created by ovn-controller
+                     to reach a remote chassis. Its value is the chassis ID of
+                     the remote chassis.
+
+              external_ids:ct-zone-* in the Bridge table
+                     Logical ports and gateway routers are assigned a  connec‐
+                     tion  tracking  zone  by ovn-controller for stateful ser‐
+                     vices. To keep state across restarts  of  ovn-controller,
+                     these  keys are stored in the integration bridge’s Bridge
+                     table. The name contains a prefix of ct-zone- followed by
+                     the name of the logical port  or  gateway  router’s  zone
+                     key.  The value for this key identifies the zone used for
+                     this port.
+
+              external_ids:ovn-localnet-port in the Port table
+                     The presence of this key identifies a patch port  as  one
+                     created  by  ovn-controller  to  connect  the integration
+                     bridge and another bridge to implement a localnet logical
+                     port. Its value is the name of the logical port with type
+                     set to localnet that  the  port  implements.  See  exter�‐
+                     nal_ids:ovn-bridge-mappings, above, for more information.
+
+                     Each  localnet  logical  port is implemented as a pair of
+                     patch ports, one in the integration bridge, one in a dif‐
+                     ferent  bridge,  with  the  same  external_ids:ovn-local�‐
+                     net-port value.
+
+              external_ids:ovn-l2gateway-port in the Port table
+                     The  presence  of this key identifies a patch port as one
+                     created by  ovn-controller  to  connect  the  integration
+                     bridge  and another bridge to implement a l2gateway logi‐
+                     cal port. Its value is the name of the logical port  with
+                     type  set  to l2gateway that the port implements. See ex�‐
+                     ternal_ids:ovn-bridge-mappings, above, for more  informa‐
+                     tion.
+
+                     Each  l2gateway  logical port is implemented as a pair of
+                     patch ports, one in the integration bridge, one in a dif‐
+                     ferent bridge,  with  the  same  external_ids:ovn-l2gate�‐
+                     way-port value.
+
+              external-ids:ovn-l3gateway-port in the Port table
+                     This  key  identifies  a  patch  port  as  one created by
+                     ovn-controller to implement a l3gateway logical port. Its
+                     value is the name of the logical port with  type  set  to
+                     l3gateway.  This patch port is similar to the OVN logical
+                     patch port, except that l3gateway port can only be  bound
+                     to a particular chassis.
+
+              external-ids:ovn-logical-patch-port in the Port table
+                     This  key  identifies  a  patch  port  as  one created by
+                     ovn-controller to implement an  OVN  logical  patch  port
+                     within  the  integration bridge. Its value is the name of
+                     the OVN logical patch port that it implements.
+
+              external-ids:ovn-startup-ts in the Bridge table
+                     This key represents the timestamp  (in  milliseconds)  at
+                     which ovn-controller process was started.
+
+              external-ids:ovn-nb-cfg in the Bridge table
+                     This   key   represents   the   last   known   OVN_South�‐
+                     bound.SB_Global.nb_cfg value for  which  all  flows  have
+                     been successfully installed in OVS.
+
+              external-ids:ovn-nb-cfg-ts in the Bridge table
+                     This  key  represents  the timestamp (in milliseconds) of
+                     the last known OVN_Southbound.SB_Global.nb_cfg value  for
+                     which all flows have been successfully installed in OVS.
+
+              external_ids:ovn-installed and external_ids:ovn-installed-ts in
+              the Interface table
+                     This key is set after all openflow operations correspond‐
+                     ing  to  the  OVS  interface  have been processed by ovs-
+                     vswitchd. At the same time a timestamp,  in  milliseconds
+                     since   the  epoch,  is  stored  in  external_ids:ovn-in�‐
+                     stalled-ts.
+
+OVN SOUTHBOUND DATABASE USAGE
+       ovn-controller reads from much of the OVN_Southbound database to  guide
+       its operation. ovn-controller also writes to the following tables:
+
+              Chassis
+                     Upon  startup, ovn-controller creates a row in this table
+                     to represent its own chassis. Upon graceful  termination,
+                     e.g.  with  ovs-appctl  -t  ovn-controller  exit (but not
+                     SIGTERM), ovn-controller removes its row.
+
+              Encap  Upon startup, ovn-controller creates a  row  or  rows  in
+                     this  table  that  represent the tunnel encapsulations by
+                     which its chassis can be reached, and points its  Chassis
+                     row  to  them.  Upon graceful termination, ovn-controller
+                     removes these rows.
+
+              Port_Binding
+                     At runtime, ovn-controller sets the  chassis  columns  of
+                     ports  that  are  resident on its chassis to point to its
+                     Chassis row, and, conversely, clears the  chassis  column
+                     of  ports that point to its Chassis row but are no longer
+                     resident on its chassis. The chassis column  has  a  weak
+                     reference  type,  so when ovn-controller gracefully exits
+                     and removes its Chassis row, the database server automat‐
+                     ically clears any remaining references to that row.
+
+              MAC_Binding
+                     At runtime, ovn-controller updates the MAC_Binding  table
+                     as  instructed  by  put_arp  and  put_nd logical actions.
+                     These changes persist beyond  the  lifetime  of  ovn-con�‐
+                     troller.
+
+RUNTIME MANAGEMENT COMMANDS
+       ovs-appctl  can  send commands to a running ovn-controller process. The
+       currently supported commands are described below.
+
+              exit   Causes ovn-controller to gracefully terminate.
+
+              ct-zone-list
+                     Lists each local logical port and its connection tracking
+                     zone.
+
+              meter-table-list
+                     Lists each meter table entry and its local meter id.
+
+              group-table-list
+                     Lists each group table entry and its local group id.
+
+              inject-pkt microflow
+                     Injects microflow into the  connected  Open  vSwitch  in‐
+                     stance.  microflow  must  contain an ingress logical port
+                     (inport argument) that is present on the Open vSwitch in‐
+                     stance.
+
+                     The microflow argument describes the  packet  whose  for‐
+                     warding is to be simulated, in the syntax of an OVN logi‐
+                     cal  expression,  as  described  in ovn-sb(5), to express
+                     constraints. The parser  understands  prerequisites;  for
+                     example, if the expression refers to ip4.src, there is no
+                     need to explicitly state ip4 or eth.type == 0x800.
+
+              connection-status
+                     Show OVN SBDB connection status for the chassis.
+
+              recompute
+                     Trigger  a full compute iteration in ovn-controller based
+                     on the contents of the Southbound database and local  OVS
+                     database.
+
+                     This  command  is  intended to use only in the event of a
+                     bug in the  incremental  processing  engine  in  ovn-con�‐
+                     troller to avoid inconsistent states. It should therefore
+                     be used with care as full recomputes are cpu intensive.
+
+              sb-cluster-state-reset
+                     Reset  southbound  database cluster status when databases
+                     are destroyed and rebuilt.
+
+                     If all databases in a clustered southbound  database  are
+                     removed from disk, then the stored index of all databases
+                     will  be reset to zero. This will cause ovn-controller to
+                     be unable to read or write to  the  southbound  database,
+                     because  it will always detect the data as stale. In such
+                     a case, run this command so that ovn-controller will  re‐
+                     set  its  local  index  so  that it can interact with the
+                     southbound database again.
+
+              debug/delay-nb-cfg-report seconds
+                     This command is used to delay ovn-controller updating the
+                     nb_cfg back to OVN_Southbound database.  This  is  useful
+                     when  ovn-nbctl  --wait=hv  is used to measure end-to-end
+                     latency in a large scale  environment.  See  ovn-nbctl(8)
+                     for more details.
+
+              lflow-cache/flush
+                     Flushes the ovn-controller logical flow cache.
+
+              lflow-cache/show-stats
+                     Displays logical flow cache statistics: enabled/disabled,
+                     per cache type entry counts.
+
+              inc-engine/show-stats
+                     Display  ovn-controller  engine counters. For each engine
+                     node the following counters have been added:
+
+                     •      recompute
+
+                     •      compute
+
+                     •      abort
+
+              inc-engine/show-stats engine_node_name counter_name
+                     Display the  ovn-controller  engine  counter(s)  for  the
+                     specified  engine_node_name. counter_name is optional and
+                     can be one of recompute, compute or abort.
+
+              inc-engine/clear-stats
+                     Reset ovn-controller engine counters.
+
+OVN 23.06.3                     ovn-controller               ovn-controller(8)
diff --git a/support/dist-docs-branch-23.06/ovn-ctl.8 b/support/dist-docs-branch-23.06/ovn-ctl.8
new file mode 100644
index 00000000..002ebcb8
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-ctl.8
@@ -0,0 +1,426 @@
+'\" p
+.\" -*- nroff -*-
+.TH "ovn-ctl" 8 "ovn-ctl" "OVN 23\[char46]06\[char46]3" "OVN Manual"
+.fp 5 L CR              \\" Make fixed-width font available as \\fL.
+.de TQ
+.  br
+.  ns
+.  TP "\\$1"
+..
+.de ST
+.  PP
+.  RS -0.15in
+.  I "\\$1"
+.  RE
+..
+.de SU
+.  PP
+.  I "\\$1"
+..
+.PP
+.SH "NAME"
+.PP
+.PP
+ovn-ctl \- Open Virtual Network northbound daemon lifecycle utility
+.SH "SYNOPSIS"
+.PP
+.PP
+\fBovn\-ctl\fR [\fIoptions\fR] \fIcommand\fR [\-- \fIextra_args\fR]
+.SH "DESCRIPTION"
+.PP
+.PP
+This program is intended to be invoked internally by Open Virtual Network startup scripts\[char46] System administrators should not normally invoke it directly\[char46]
+.SH "COMMANDS"
+.TP
+\fBstart_northd\fR
+.TQ .5in
+\fBstart_controller\fR
+.TQ .5in
+\fBstart_controller_vtep\fR
+.TQ .5in
+\fBstart_ic\fR
+.TQ .5in
+\fBstop_northd\fR
+.TQ .5in
+\fBstop_controller\fR
+.TQ .5in
+\fBstop_controller_vtep\fR
+.TQ .5in
+\fBstop_ic\fR
+.TQ .5in
+\fBrestart_northd\fR
+.TQ .5in
+\fBrestart_controller\fR
+.TQ .5in
+\fBrestart_controller_vtep\fR
+.TQ .5in
+\fBrestart_ic\fR
+.TQ .5in
+\fBpromote_ovnnb\fR
+.TQ .5in
+\fBpromote_ovnsb\fR
+.TQ .5in
+\fBdemote_ovnnb\fR
+.TQ .5in
+\fBdemote_ovnsb\fR
+.TQ .5in
+\fBstatus_ovnnb\fR
+.TQ .5in
+\fBstatus_ovnsb\fR
+.TQ .5in
+\fBstart_ovsdb\fR
+.TQ .5in
+\fBstart_nb_ovsdb\fR
+.TQ .5in
+\fBstart_sb_ovsdb\fR
+.TQ .5in
+\fBstop_ovsdb\fR
+.TQ .5in
+\fBstop_nb_ovsdb\fR
+.TQ .5in
+\fBstop_sb_ovsdb\fR
+.TQ .5in
+\fBrestart_ovsdb\fR
+.TQ .5in
+\fBrun_nb_ovsdb\fR
+.TQ .5in
+\fBrun_sb_ovsdb\fR
+.TQ .5in
+\fBpromote_ic_nb\fR
+.TQ .5in
+\fBpromote_ic_sb\fR
+.TQ .5in
+\fBdemote_ic_nb\fR
+.TQ .5in
+\fBdemote_ic_sb\fR
+.TQ .5in
+\fBstatus_ic_nb\fR
+.TQ .5in
+\fBstatus_ic_sb\fR
+.TQ .5in
+\fBstart_ic_ovsdb\fR
+.TQ .5in
+\fBstart_ic_nb_ovsdb\fR
+.TQ .5in
+\fBstart_ic_sb_ovsdb\fR
+.TQ .5in
+\fBstop_ic_ovsdb\fR
+.TQ .5in
+\fBstop_ic_nb_ovsdb\fR
+.TQ .5in
+\fBstop_ic_sb_ovsdb\fR
+.TQ .5in
+\fBrestart_ic_ovsdb\fR
+.TQ .5in
+\fBrun_ic_nb_ovsdb\fR
+.TQ .5in
+\fBrun_ic_sb_ovsdb\fR
+.SH "OPTIONS"
+.PP
+\fB\-\-ovn\-northd\-priority=\fINICE\fB\fR
+.PP
+\fB\-\-ovn\-northd\-wrapper=\fIWRAPPER\fB\fR
+.PP
+\fB\-\-ovn\-controller\-priority=\fINICE\fB\fR
+.PP
+\fB\-\-ovn\-controller\-wrapper=\fIWRAPPER\fB\fR
+.PP
+\fB\-\-ovn\-ic\-priority=\fINICE\fB\fR
+.PP
+\fB\-\-ovn\-ic\-wrapper=\fIWRAPPER\fB\fR
+.PP
+\fB\-\-ovsdb\-nb\-wrapper=\fIWRAPPER\fB\fR
+.PP
+\fB\-\-ovsdb\-sb\-wrapper=\fIWRAPPER\fB\fR
+.PP
+\fB\-\-ovn\-user=\fIUSER:GROUP\fB\fR
+.PP
+\fB\-\-ovs\-user=\fIUSER:GROUP\fB\fR
+.PP
+\fB\-h\fR | \fB\-\-help\fR
+.SH "FILE LOCATION OPTIONS"
+.PP
+\fB\-\-db\-sock=\fISOCKET\fB\fR
+.PP
+\fB\-\-db\-nb\-file=\fIFILE\fB\fR
+.PP
+\fB\-\-db\-sb\-file=\fIFILE\fB\fR
+.PP
+\fB\-\-db\-nb\-schema=\fIFILE\fB\fR
+.PP
+\fB\-\-db\-sb\-schema=\fIFILE\fB\fR
+.PP
+\fB\-\-db\-sb\-create\-insecure\-remote=\fIyes|no\fB\fR
+.PP
+\fB\-\-db\-nb\-create\-insecure\-remote=\fIyes|no\fB\fR
+.PP
+\fB\-\-db\-ic\-nb\-file=\fIFILE\fB\fR
+.PP
+\fB\-\-db\-ic\-sb\-file=\fIFILE\fB\fR
+.PP
+\fB\-\-db\-ic\-nb\-schema=\fIFILE\fB\fR
+.PP
+\fB\-\-db\-ic\-sb\-schema=\fIFILE\fB\fR
+.PP
+\fB\-\-db\-ic\-sb\-create\-insecure\-remote=\fIyes|no\fB\fR
+.PP
+\fB\-\-db\-ic\-nb\-create\-insecure\-remote=\fIyes|no\fB\fR
+.PP
+\fB\-\-ovn\-controller\-ssl\-key=\fIKEY\fB\fR
+.PP
+\fB\-\-ovn\-controller\-ssl\-cert=\fICERT\fB\fR
+.PP
+\fB\-\-ovn\-controller\-ssl\-ca\-cert=\fICERT\fB\fR
+.PP
+\fB\-\-ovn\-controller\-ssl\-bootstrap\-ca\-cert=\fICERT\fB\fR
+.SH "ADDRESS AND PORT OPTIONS"
+.PP
+\fB\-\-db\-nb\-sync\-from\-addr=\fIIP ADDRESS\fB\fR
+.PP
+\fB\-\-db\-nb\-sync\-from\-port=\fIPORT NUMBER\fB\fR
+.PP
+\fB\-\-db\-nb\-sync\-from\-proto=\fIPROTO\fB\fR
+.PP
+\fB\-\-db\-sb\-sync\-from\-addr=\fIIP ADDRESS\fB\fR
+.PP
+\fB\-\-db\-sb\-sync\-from\-port=\fIPORT NUMBER\fB\fR
+.PP
+\fB\-\-db\-sb\-sync\-from\-proto=\fIPROTO\fB\fR
+.PP
+\fB\-\-db\-ic\-nb\-sync\-from\-addr=\fIIP ADDRESS\fB\fR
+.PP
+\fB\-\-db\-ic\-nb\-sync\-from\-port=\fIPORT NUMBER\fB\fR
+.PP
+\fB\-\-db\-ic\-nb\-sync\-from\-proto=\fIPROTO\fB\fR
+.PP
+\fB\-\-db\-ic\-sb\-sync\-from\-addr=\fIIP ADDRESS\fB\fR
+.PP
+\fB\-\-db\-ic\-sb\-sync\-from\-port=\fIPORT NUMBER\fB\fR
+.PP
+\fB\-\-db\-ic\-sb\-sync\-from\-proto=\fIPROTO\fB\fR
+.PP
+.PP
+\fB
+\-\-ovn\-northd\-nb\-db=\fIPROTO\fB:\fIIP ADDRESS\fB:
+\fIPORT\fB\[char46]\[char46]
+\fR
+.PP
+.PP
+\fB
+\-\-ovn\-northd\-sb\-db=\fIPROTO\fB:\fIIP ADDRESS\fB:
+\fIPORT\fB\[char46]\[char46]
+\fR
+.PP
+.PP
+\fB
+\-\-ovn\-ic\-nb\-db=\fIPROTO\fB:\fIIP ADDRESS\fB:
+\fIPORT\fB\[char46]\[char46]
+\fR
+.PP
+.PP
+\fB
+\-\-ovn\-ic\-sb\-db=\fIPROTO\fB:\fIIP ADDRESS\fB:
+\fIPORT\fB\[char46]\[char46]
+\fR
+.SH "CLUSTERING OPTIONS"
+.PP
+\fB\-\-db\-nb\-cluster\-local\-addr=\fIIP ADDRESS\fB\fR
+.PP
+\fB\-\-db\-nb\-cluster\-local\-port=\fIPORT NUMBER\fB\fR
+.PP
+\fB\-\-db\-nb\-cluster\-local\-proto=\fIPROTO (tcp/ssl)\fB\fR
+.PP
+\fB\-\-db\-nb\-cluster\-remote\-addr=\fIIP ADDRESS\fB\fR
+.PP
+\fB\-\-db\-nb\-cluster\-remote\-port=\fIPORT NUMBER\fB\fR
+.PP
+\fB\-\-db\-nb\-cluster\-remote\-proto=\fIPROTO (tcp/ssl)\fB\fR
+.PP
+\fB\-\-db\-nb\-election\-timer=\fITimeout in milliseconds\fB\fR
+.PP
+\fB\-\-db\-sb\-cluster\-local\-addr=\fIIP ADDRESS\fB\fR
+.PP
+\fB\-\-db\-sb\-cluster\-local\-port=\fIPORT NUMBER\fB\fR
+.PP
+\fB\-\-db\-sb\-cluster\-local\-proto=\fIPROTO (tcp/ssl)\fB\fR
+.PP
+\fB\-\-db\-sb\-cluster\-remote\-addr=\fIIP ADDRESS\fB\fR
+.PP
+\fB\-\-db\-sb\-cluster\-remote\-port=\fIPORT NUMBER\fB\fR
+.PP
+\fB\-\-db\-sb\-cluster\-remote\-proto=\fIPROTO (tcp/ssl)\fB\fR
+.PP
+\fB\-\-db\-sb\-election\-timer=\fITimeout in milliseconds\fB\fR
+.PP
+\fB\-\-db\-ic\-nb\-cluster\-local\-addr=\fIIP ADDRESS\fB\fR
+.PP
+\fB\-\-db\-ic\-nb\-cluster\-local\-port=\fIPORT NUMBER\fB\fR
+.PP
+\fB\-\-db\-ic\-nb\-cluster\-local\-proto=\fIPROTO (tcp/ssl)\fB\fR
+.PP
+\fB\-\-db\-ic\-nb\-cluster\-remote\-addr=\fIIP ADDRESS\fB\fR
+.PP
+\fB\-\-db\-ic\-nb\-cluster\-remote\-port=\fIPORT NUMBER\fB\fR
+.PP
+\fB\-\-db\-ic\-nb\-cluster\-remote\-proto=\fIPROTO (tcp/ssl)\fB\fR
+.PP
+\fB\-\-db\-ic\-sb\-cluster\-local\-addr=\fIIP ADDRESS\fB\fR
+.PP
+\fB\-\-db\-ic\-sb\-cluster\-local\-port=\fIPORT NUMBER\fB\fR
+.PP
+\fB\-\-db\-ic\-sb\-cluster\-local\-proto=\fIPROTO (tcp/ssl)\fB\fR
+.PP
+\fB\-\-db\-ic\-sb\-cluster\-remote\-addr=\fIIP ADDRESS\fB\fR
+.PP
+\fB\-\-db\-ic\-sb\-cluster\-remote\-port=\fIPORT NUMBER\fB\fR
+.PP
+\fB\-\-db\-ic\-sb\-cluster\-remote\-proto=\fIPROTO (tcp/ssl)\fB\fR
+.SH "PROBE INTERVAL OPTIONS"
+.PP
+\fB\-\-db\-nb\-probe\-interval\-to\-active=\fITime in milliseconds\fB\fR
+.PP
+\fB\-\-db\-sb\-probe\-interval\-to\-active=\fITime in milliseconds\fB\fR
+.SH "EXTRA OPTIONS"
+.PP
+.PP
+Any options after \(cq\-\(cq will be passed on to the binary run by \fIcommand\fR with the exception of start_northd, which can have options specified in ovn-northd-db-params\[char46]conf\[char46] Any \fIextra_args\fR passed to start_northd will be passed to the ovsdb-servers if \fB\-\-ovn\-manage\-ovsdb=yes\fR
+.SH "CONFIGURATION FILES"
+.PP
+.PP
+Following are the optional configuration files\[char46] If present, it should be located in the etc dir
+.SS "ovnnb\-active\[char46]conf"
+.PP
+.PP
+If present, this file should hold the url to connect to the active Northbound DB server
+.PP
+\fBtcp:x\[char46]x\[char46]x\[char46]x:6641\fR
+.SS "ovnsb\-active\[char46]conf"
+.PP
+.PP
+If present, this file should hold the url to connect to the active Southbound DB server
+.PP
+\fBtcp:x\[char46]x\[char46]x\[char46]x:6642\fR
+.SS "ovn\-northd\-db\-params\[char46]conf"
+.PP
+.PP
+If present, start_northd will not start the DB server even if \fB\-\-ovn\-manage\-ovsdb=yes\fR\[char46] This file should hold the database url parameters to be passed to ovn-northd\[char46]
+.PP
+\fB\-\-ovnnb\-db=tcp:x\[char46]x\[char46]x\[char46]x:6641 \-\-ovnsb\-db=tcp:x\[char46]x\[char46]x\[char46]x:6642\fR
+.SS "ic\-nb\-active\[char46]conf"
+.PP
+.PP
+If present, this file should hold the url to connect to the active Interconnection Northbound DB server
+.PP
+\fBtcp:x\[char46]x\[char46]x\[char46]x:6645\fR
+.SS "ic\-sb\-active\[char46]conf"
+.PP
+.PP
+If present, this file should hold the url to connect to the active Interconnection Southbound DB server
+.PP
+\fBtcp:x\[char46]x\[char46]x\[char46]x:6646\fR
+.SS "ovn\-ic\-db\-params\[char46]conf"
+.PP
+.PP
+If present, this file should hold the database url parameters to be passed to ovn-ic\[char46]
+.PP
+\fB\-\-ic\-nb\-db=tcp:x\[char46]x\[char46]x\[char46]x:6645 \-\-ic\-sb\-db=tcp:x\[char46]x\[char46]x\[char46]x:6646\fR
+.SH "RUNNING OVN DB SERVERS WITHOUT DETACHING"
+.PP
+\fB# ovn\-ctl run_nb_ovsdb\fR
+.PP
+.PP
+This command runs the OVN nb ovsdb-server without passing the \fBdetach\fR option, making it to block until ovsdb-server exits\[char46] This command will be useful for starting the OVN nb ovsdb-server in a container\[char46]
+.PP
+\fB# ovn\-ctl run_sb_ovsdb\fR
+.PP
+.PP
+This command runs the OVN sb ovsdb-server without passing the \fBdetach\fR option, making it to block until ovsdb-server exits\[char46] This command will be useful for starting the OVN sb ovsdb-server in a container\[char46]
+.PP
+\fB# ovn\-ctl run_ic_nb_ovsdb\fR
+.PP
+.PP
+This command runs the OVN IC-NB ovsdb-server without passing the \fBdetach\fR option, making it to block until ovsdb-server exits\[char46] This command will be useful for starting the OVN IC-NB ovsdb-server in a container\[char46]
+.PP
+\fB# ovn\-ctl run_ic_sb_ovsdb\fR
+.PP
+.PP
+This command runs the OVN IC-SB ovsdb-server without passing the \fBdetach\fR option, making it to block until ovsdb-server exits\[char46] This command will be useful for starting the OVN IC-SB ovsdb-server in a container\[char46]
+.SH "EXAMPLE USAGE"
+.SS "Run ovn\-controller on a host already running OVS"
+.PP
+\fB# ovn\-ctl start_controller\fR
+.SS "Run ovn\-northd on a host already running OVS"
+.PP
+\fB# ovn\-ctl start_northd\fR
+.SS "All\-in\-one OVS+OVN for testing"
+.PP
+\fB# ovs\-ctl start \-\-system\-id=\(dqrandom\(dq\fR
+.PP
+\fB# ovn\-ctl start_northd\fR
+.PP
+\fB# ovn\-ctl start_controller\fR
+.SS "Promote and demote ovsdb servers"
+.PP
+\fB# ovn\-ctl promote_ovnnb\fR
+.PP
+\fB# ovn\-ctl promote_ovnsb\fR
+.PP
+\fB# ovn\-ctl \-\-db\-nb\-sync\-from\-addr=x\[char46]x\[char46]x\[char46]x \-\-db\-nb\-sync\-from\-port=6641 \-\-db\-nb\-probe\-interval\-to\-active=60000 demote_ovnnb\fR
+.PP
+\fB# ovn\-ctl \-\-db\-sb\-sync\-from\-addr=x\[char46]x\[char46]x\[char46]x \-\-db\-sb\-sync\-from\-port=6642 \-\-db\-sb\-probe\-interval\-to\-active=60000 demote_ovnsb\fR
+.SS "Creating a clustered db on 3 nodes with IPs x\[char46]x\[char46]x\[char46]x, y\[char46]y\[char46]y\[char46]y and z\[char46]z\[char46]z\[char46]z"
+.ST "Starting OVN ovsdb servers and ovn-northd on the node with IP x\[char46]x\[char46]x\[char46]x"
+.PP
+.PP
+\fB
+# ovn\-ctl \-\-db\-nb\-addr=x\[char46]x\[char46]x\[char46]x \-\-db\-nb\-create\-insecure\-remote=yes
+\-\-db\-sb\-addr=x\[char46]x\[char46]x\[char46]x \-\-db\-sb\-create\-insecure\-remote=yes
+\-\-db\-nb\-cluster\-local\-addr=x\[char46]x\[char46]x\[char46]x
+\-\-db\-sb\-cluster\-local\-addr=x\[char46]x\[char46]x\[char46]x
+\-\-ovn\-northd\-nb\-db=tcp:x\[char46]x\[char46]x\[char46]x:6641,tcp:y\[char46]y\[char46]y\[char46]y:6641,tcp:z\[char46]z\[char46]z\[char46]z:6641
+\-\-ovn\-northd\-sb\-db=tcp:x\[char46]x\[char46]x\[char46]x:6642,tcp:y\[char46]y\[char46]y\[char46]y:6642,tcp:z\[char46]z\[char46]z\[char46]z:6642
+start_northd
+\fR
+.ST "Starting OVN ovsdb-servers and ovn-northd on the node with IP y\[char46]y\[char46]y\[char46]y and joining the cluster started at x\[char46]x\[char46]x\[char46]x"
+.PP
+.PP
+\fB
+# ovn\-ctl \-\-db\-nb\-addr=y\[char46]y\[char46]y\[char46]y \-\-db\-nb\-create\-insecure\-remote=yes
+\-\-db\-sb\-addr=y\[char46]y\[char46]y\[char46]y \-\-db\-sb\-create\-insecure\-remote=yes
+\-\-db\-nb\-cluster\-local\-addr=y\[char46]y\[char46]y\[char46]y
+\-\-db\-sb\-cluster\-local\-addr=y\[char46]y\[char46]y\[char46]y
+\-\-db\-nb\-cluster\-remote\-addr=x\[char46]x\[char46]x\[char46]x
+\-\-db\-sb\-cluster\-remote\-addr=x\[char46]x\[char46]x\[char46]x
+\-\-ovn\-northd\-nb\-db=tcp:x\[char46]x\[char46]x\[char46]x:6641,tcp:y\[char46]y\[char46]y\[char46]y:6641,tcp:z\[char46]z\[char46]z\[char46]z:6641
+\-\-ovn\-northd\-sb\-db=tcp:x\[char46]x\[char46]x\[char46]x:6642,tcp:y\[char46]y\[char46]y\[char46]y:6642,tcp:z\[char46]z\[char46]z\[char46]z:6642
+start_northd
+\fR
+.ST "Starting OVN ovsdb-servers and ovn-northd on the node with IP z\[char46]z\[char46]z\[char46]z and joining the cluster started at x\[char46]x\[char46]x\[char46]x"
+.PP
+.PP
+\fB
+# ovn\-ctl \-\-db\-nb\-addr=z\[char46]z\[char46]z\[char46]z
+\-\-db\-nb\-create\-insecure\-remote=yes
+\-\-db\-nb\-cluster\-local\-addr=z\[char46]z\[char46]z\[char46]z
+\-\-db\-sb\-addr=z\[char46]z\[char46]z\[char46]z
+\-\-db\-sb\-create\-insecure\-remote=yes
+\-\-db\-sb\-cluster\-local\-addr=z\[char46]z\[char46]z\[char46]z
+\-\-db\-nb\-cluster\-remote\-addr=x\[char46]x\[char46]x\[char46]x
+\-\-db\-sb\-cluster\-remote\-addr=x\[char46]x\[char46]x\[char46]x
+\-\-ovn\-northd\-nb\-db=tcp:x\[char46]x\[char46]x\[char46]x:6641,tcp:y\[char46]y\[char46]y\[char46]y:6641,tcp:z\[char46]z\[char46]z\[char46]z:6641
+\-\-ovn\-northd\-sb\-db=tcp:x\[char46]x\[char46]x\[char46]x:6642,tcp:y\[char46]y\[char46]y\[char46]y:6642,tcp:z\[char46]z\[char46]z\[char46]z:6642
+start_northd
+\fR
+.SS "Passing ssl keys when starting OVN dbs will supersede the default ssl values in db"
+.ST "Starting standalone ovn db server passing SSL certificates"
+.PP
+.PP
+\fB
+# ovn\-ctl \-\-ovn\-nb\-db\-ssl\-key=/etc/ovn/ovnnb\-privkey\[char46]pem
+\-\-ovn\-nb\-db\-ssl\-cert=/etc/ovn/ovnnb\-cert\[char46]pem
+\-\-ovn\-nb\-db\-ssl\-ca\-cert=/etc/ovn/cacert\[char46]pem
+\-\-ovn\-sb\-db\-ssl\-key=/etc/ovn/ovnsb\-privkey\[char46]pem
+\-\-ovn\-sb\-db\-ssl\-cert=/etc/ovn/ovnsb\-cert\[char46]pem
+\-\-ovn\-sb\-db\-ssl\-ca\-cert=/etc/ovn/cacert\[char46]pem
+start_northd
+\fR
diff --git a/support/dist-docs-branch-23.06/ovn-ctl.8.html b/support/dist-docs-branch-23.06/ovn-ctl.8.html
new file mode 100644
index 00000000..bc4b7266
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-ctl.8.html
@@ -0,0 +1,349 @@
+<html><head><meta charset="UTF-8"></head><body><pre>
+<u>o</u><u>v</u><u>n</u><u>-</u><u>c</u><u>t</u><u>l</u>(8)                        OVN Manual                        <u>o</u><u>v</u><u>n</u><u>-</u><u>c</u><u>t</u><u>l</u>(8)
+
+<b>N</b><b>A</b><b>M</b><b>E</b>
+       ovn-ctl - Open Virtual Network northbound daemon lifecycle utility
+
+<b>S</b><b>Y</b><b>N</b><b>O</b><b>P</b><b>S</b><b>I</b><b>S</b>
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>t</b><b>l</b> [<u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u>] <u>c</u><u>o</u><u>m</u><u>m</u><u>a</u><u>n</u><u>d</u> [-- <u>e</u><u>x</u><u>t</u><u>r</u><u>a</u><b>_</b><u>a</u><u>r</u><u>g</u><u>s</u>]
+
+<b>D</b><b>E</b><b>S</b><b>C</b><b>R</b><b>I</b><b>P</b><b>T</b><b>I</b><b>O</b><b>N</b>
+       This  program is intended to be invoked internally by Open Virtual Net‐
+       work startup scripts. System administrators should not normally  invoke
+       it directly.
+
+<b>C</b><b>O</b><b>M</b><b>M</b><b>A</b><b>N</b><b>D</b><b>S</b>
+       <b>s</b><b>t</b><b>a</b><b>r</b><b>t</b><b>_</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>
+       <b>s</b><b>t</b><b>a</b><b>r</b><b>t</b><b>_</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>
+       <b>s</b><b>t</b><b>a</b><b>r</b><b>t</b><b>_</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b><b>_</b><b>v</b><b>t</b><b>e</b><b>p</b>
+       <b>s</b><b>t</b><b>a</b><b>r</b><b>t</b><b>_</b><b>i</b><b>c</b>
+       <b>s</b><b>t</b><b>o</b><b>p</b><b>_</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>
+       <b>s</b><b>t</b><b>o</b><b>p</b><b>_</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>
+       <b>s</b><b>t</b><b>o</b><b>p</b><b>_</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b><b>_</b><b>v</b><b>t</b><b>e</b><b>p</b>
+       <b>s</b><b>t</b><b>o</b><b>p</b><b>_</b><b>i</b><b>c</b>
+       <b>r</b><b>e</b><b>s</b><b>t</b><b>a</b><b>r</b><b>t</b><b>_</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>
+       <b>r</b><b>e</b><b>s</b><b>t</b><b>a</b><b>r</b><b>t</b><b>_</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>
+       <b>r</b><b>e</b><b>s</b><b>t</b><b>a</b><b>r</b><b>t</b><b>_</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b><b>_</b><b>v</b><b>t</b><b>e</b><b>p</b>
+       <b>r</b><b>e</b><b>s</b><b>t</b><b>a</b><b>r</b><b>t</b><b>_</b><b>i</b><b>c</b>
+       <b>p</b><b>r</b><b>o</b><b>m</b><b>o</b><b>t</b><b>e</b><b>_</b><b>o</b><b>v</b><b>n</b><b>n</b><b>b</b>
+       <b>p</b><b>r</b><b>o</b><b>m</b><b>o</b><b>t</b><b>e</b><b>_</b><b>o</b><b>v</b><b>n</b><b>s</b><b>b</b>
+       <b>d</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b><b>_</b><b>o</b><b>v</b><b>n</b><b>n</b><b>b</b>
+       <b>d</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b><b>_</b><b>o</b><b>v</b><b>n</b><b>s</b><b>b</b>
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b><b>_</b><b>o</b><b>v</b><b>n</b><b>n</b><b>b</b>
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b><b>_</b><b>o</b><b>v</b><b>n</b><b>s</b><b>b</b>
+       <b>s</b><b>t</b><b>a</b><b>r</b><b>t</b><b>_</b><b>o</b><b>v</b><b>s</b><b>d</b><b>b</b>
+       <b>s</b><b>t</b><b>a</b><b>r</b><b>t</b><b>_</b><b>n</b><b>b</b><b>_</b><b>o</b><b>v</b><b>s</b><b>d</b><b>b</b>
+       <b>s</b><b>t</b><b>a</b><b>r</b><b>t</b><b>_</b><b>s</b><b>b</b><b>_</b><b>o</b><b>v</b><b>s</b><b>d</b><b>b</b>
+       <b>s</b><b>t</b><b>o</b><b>p</b><b>_</b><b>o</b><b>v</b><b>s</b><b>d</b><b>b</b>
+       <b>s</b><b>t</b><b>o</b><b>p</b><b>_</b><b>n</b><b>b</b><b>_</b><b>o</b><b>v</b><b>s</b><b>d</b><b>b</b>
+       <b>s</b><b>t</b><b>o</b><b>p</b><b>_</b><b>s</b><b>b</b><b>_</b><b>o</b><b>v</b><b>s</b><b>d</b><b>b</b>
+       <b>r</b><b>e</b><b>s</b><b>t</b><b>a</b><b>r</b><b>t</b><b>_</b><b>o</b><b>v</b><b>s</b><b>d</b><b>b</b>
+       <b>r</b><b>u</b><b>n</b><b>_</b><b>n</b><b>b</b><b>_</b><b>o</b><b>v</b><b>s</b><b>d</b><b>b</b>
+       <b>r</b><b>u</b><b>n</b><b>_</b><b>s</b><b>b</b><b>_</b><b>o</b><b>v</b><b>s</b><b>d</b><b>b</b>
+       <b>p</b><b>r</b><b>o</b><b>m</b><b>o</b><b>t</b><b>e</b><b>_</b><b>i</b><b>c</b><b>_</b><b>n</b><b>b</b>
+       <b>p</b><b>r</b><b>o</b><b>m</b><b>o</b><b>t</b><b>e</b><b>_</b><b>i</b><b>c</b><b>_</b><b>s</b><b>b</b>
+       <b>d</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b><b>_</b><b>i</b><b>c</b><b>_</b><b>n</b><b>b</b>
+       <b>d</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b><b>_</b><b>i</b><b>c</b><b>_</b><b>s</b><b>b</b>
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b><b>_</b><b>i</b><b>c</b><b>_</b><b>n</b><b>b</b>
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b><b>_</b><b>i</b><b>c</b><b>_</b><b>s</b><b>b</b>
+       <b>s</b><b>t</b><b>a</b><b>r</b><b>t</b><b>_</b><b>i</b><b>c</b><b>_</b><b>o</b><b>v</b><b>s</b><b>d</b><b>b</b>
+       <b>s</b><b>t</b><b>a</b><b>r</b><b>t</b><b>_</b><b>i</b><b>c</b><b>_</b><b>n</b><b>b</b><b>_</b><b>o</b><b>v</b><b>s</b><b>d</b><b>b</b>
+       <b>s</b><b>t</b><b>a</b><b>r</b><b>t</b><b>_</b><b>i</b><b>c</b><b>_</b><b>s</b><b>b</b><b>_</b><b>o</b><b>v</b><b>s</b><b>d</b><b>b</b>
+       <b>s</b><b>t</b><b>o</b><b>p</b><b>_</b><b>i</b><b>c</b><b>_</b><b>o</b><b>v</b><b>s</b><b>d</b><b>b</b>
+       <b>s</b><b>t</b><b>o</b><b>p</b><b>_</b><b>i</b><b>c</b><b>_</b><b>n</b><b>b</b><b>_</b><b>o</b><b>v</b><b>s</b><b>d</b><b>b</b>
+       <b>s</b><b>t</b><b>o</b><b>p</b><b>_</b><b>i</b><b>c</b><b>_</b><b>s</b><b>b</b><b>_</b><b>o</b><b>v</b><b>s</b><b>d</b><b>b</b>
+       <b>r</b><b>e</b><b>s</b><b>t</b><b>a</b><b>r</b><b>t</b><b>_</b><b>i</b><b>c</b><b>_</b><b>o</b><b>v</b><b>s</b><b>d</b><b>b</b>
+       <b>r</b><b>u</b><b>n</b><b>_</b><b>i</b><b>c</b><b>_</b><b>n</b><b>b</b><b>_</b><b>o</b><b>v</b><b>s</b><b>d</b><b>b</b>
+       <b>r</b><b>u</b><b>n</b><b>_</b><b>i</b><b>c</b><b>_</b><b>s</b><b>b</b><b>_</b><b>o</b><b>v</b><b>s</b><b>d</b><b>b</b>
+
+<b>O</b><b>P</b><b>T</b><b>I</b><b>O</b><b>N</b><b>S</b>
+       <b>-</b><b>-</b><b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b><b>-</b><b>p</b><b>r</b><b>i</b><b>o</b><b>r</b><b>i</b><b>t</b><b>y</b><b>=</b><u>N</u><u>I</u><u>C</u><u>E</u>
+
+       <b>-</b><b>-</b><b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b><b>-</b><b>w</b><b>r</b><b>a</b><b>p</b><b>p</b><b>e</b><b>r</b><b>=</b><u>W</u><u>R</u><u>A</u><u>P</u><u>P</u><u>E</u><u>R</u>
+
+       <b>-</b><b>-</b><b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b><b>-</b><b>p</b><b>r</b><b>i</b><b>o</b><b>r</b><b>i</b><b>t</b><b>y</b><b>=</b><u>N</u><u>I</u><u>C</u><u>E</u>
+
+       <b>-</b><b>-</b><b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b><b>-</b><b>w</b><b>r</b><b>a</b><b>p</b><b>p</b><b>e</b><b>r</b><b>=</b><u>W</u><u>R</u><u>A</u><u>P</u><u>P</u><u>E</u><u>R</u>
+
+       <b>-</b><b>-</b><b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b><b>-</b><b>p</b><b>r</b><b>i</b><b>o</b><b>r</b><b>i</b><b>t</b><b>y</b><b>=</b><u>N</u><u>I</u><u>C</u><u>E</u>
+
+       <b>-</b><b>-</b><b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b><b>-</b><b>w</b><b>r</b><b>a</b><b>p</b><b>p</b><b>e</b><b>r</b><b>=</b><u>W</u><u>R</u><u>A</u><u>P</u><u>P</u><u>E</u><u>R</u>
+
+       <b>-</b><b>-</b><b>o</b><b>v</b><b>s</b><b>d</b><b>b</b><b>-</b><b>n</b><b>b</b><b>-</b><b>w</b><b>r</b><b>a</b><b>p</b><b>p</b><b>e</b><b>r</b><b>=</b><u>W</u><u>R</u><u>A</u><u>P</u><u>P</u><u>E</u><u>R</u>
+
+       <b>-</b><b>-</b><b>o</b><b>v</b><b>s</b><b>d</b><b>b</b><b>-</b><b>s</b><b>b</b><b>-</b><b>w</b><b>r</b><b>a</b><b>p</b><b>p</b><b>e</b><b>r</b><b>=</b><u>W</u><u>R</u><u>A</u><u>P</u><u>P</u><u>E</u><u>R</u>
+
+       <b>-</b><b>-</b><b>o</b><b>v</b><b>n</b><b>-</b><b>u</b><b>s</b><b>e</b><b>r</b><b>=</b><u>U</u><u>S</u><u>E</u><u>R</u><u>:</u><u>G</u><u>R</u><u>O</u><u>U</u><u>P</u>
+
+       <b>-</b><b>-</b><b>o</b><b>v</b><b>s</b><b>-</b><b>u</b><b>s</b><b>e</b><b>r</b><b>=</b><u>U</u><u>S</u><u>E</u><u>R</u><u>:</u><u>G</u><u>R</u><u>O</u><u>U</u><u>P</u>
+
+       <b>-</b><b>h</b> | <b>-</b><b>-</b><b>h</b><b>e</b><b>l</b><b>p</b>
+
+<b>F</b><b>I</b><b>L</b><b>E</b> <b>L</b><b>O</b><b>C</b><b>A</b><b>T</b><b>I</b><b>O</b><b>N</b> <b>O</b><b>P</b><b>T</b><b>I</b><b>O</b><b>N</b><b>S</b>
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>s</b><b>o</b><b>c</b><b>k</b><b>=</b><u>S</u><u>O</u><u>C</u><u>K</u><u>E</u><u>T</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>n</b><b>b</b><b>-</b><b>f</b><b>i</b><b>l</b><b>e</b><b>=</b><u>F</u><u>I</u><u>L</u><u>E</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>s</b><b>b</b><b>-</b><b>f</b><b>i</b><b>l</b><b>e</b><b>=</b><u>F</u><u>I</u><u>L</u><u>E</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>n</b><b>b</b><b>-</b><b>s</b><b>c</b><b>h</b><b>e</b><b>m</b><b>a</b><b>=</b><u>F</u><u>I</u><u>L</u><u>E</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>s</b><b>b</b><b>-</b><b>s</b><b>c</b><b>h</b><b>e</b><b>m</b><b>a</b><b>=</b><u>F</u><u>I</u><u>L</u><u>E</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>s</b><b>b</b><b>-</b><b>c</b><b>r</b><b>e</b><b>a</b><b>t</b><b>e</b><b>-</b><b>i</b><b>n</b><b>s</b><b>e</b><b>c</b><b>u</b><b>r</b><b>e</b><b>-</b><b>r</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b><b>=</b><u>y</u><u>e</u><u>s</u><u>|</u><u>n</u><u>o</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>n</b><b>b</b><b>-</b><b>c</b><b>r</b><b>e</b><b>a</b><b>t</b><b>e</b><b>-</b><b>i</b><b>n</b><b>s</b><b>e</b><b>c</b><b>u</b><b>r</b><b>e</b><b>-</b><b>r</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b><b>=</b><u>y</u><u>e</u><u>s</u><u>|</u><u>n</u><u>o</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>i</b><b>c</b><b>-</b><b>n</b><b>b</b><b>-</b><b>f</b><b>i</b><b>l</b><b>e</b><b>=</b><u>F</u><u>I</u><u>L</u><u>E</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>i</b><b>c</b><b>-</b><b>s</b><b>b</b><b>-</b><b>f</b><b>i</b><b>l</b><b>e</b><b>=</b><u>F</u><u>I</u><u>L</u><u>E</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>i</b><b>c</b><b>-</b><b>n</b><b>b</b><b>-</b><b>s</b><b>c</b><b>h</b><b>e</b><b>m</b><b>a</b><b>=</b><u>F</u><u>I</u><u>L</u><u>E</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>i</b><b>c</b><b>-</b><b>s</b><b>b</b><b>-</b><b>s</b><b>c</b><b>h</b><b>e</b><b>m</b><b>a</b><b>=</b><u>F</u><u>I</u><u>L</u><u>E</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>i</b><b>c</b><b>-</b><b>s</b><b>b</b><b>-</b><b>c</b><b>r</b><b>e</b><b>a</b><b>t</b><b>e</b><b>-</b><b>i</b><b>n</b><b>s</b><b>e</b><b>c</b><b>u</b><b>r</b><b>e</b><b>-</b><b>r</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b><b>=</b><u>y</u><u>e</u><u>s</u><u>|</u><u>n</u><u>o</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>i</b><b>c</b><b>-</b><b>n</b><b>b</b><b>-</b><b>c</b><b>r</b><b>e</b><b>a</b><b>t</b><b>e</b><b>-</b><b>i</b><b>n</b><b>s</b><b>e</b><b>c</b><b>u</b><b>r</b><b>e</b><b>-</b><b>r</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b><b>=</b><u>y</u><u>e</u><u>s</u><u>|</u><u>n</u><u>o</u>
+
+       <b>-</b><b>-</b><b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b><b>-</b><b>s</b><b>s</b><b>l</b><b>-</b><b>k</b><b>e</b><b>y</b><b>=</b><u>K</u><u>E</u><u>Y</u>
+
+       <b>-</b><b>-</b><b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b><b>-</b><b>s</b><b>s</b><b>l</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>=</b><u>C</u><u>E</u><u>R</u><u>T</u>
+
+       <b>-</b><b>-</b><b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b><b>-</b><b>s</b><b>s</b><b>l</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>=</b><u>C</u><u>E</u><u>R</u><u>T</u>
+
+       <b>-</b><b>-</b><b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b><b>-</b><b>s</b><b>s</b><b>l</b><b>-</b><b>b</b><b>o</b><b>o</b><b>t</b><b>s</b><b>t</b><b>r</b><b>a</b><b>p</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>=</b><u>C</u><u>E</u><u>R</u><u>T</u>
+
+<b>A</b><b>D</b><b>D</b><b>R</b><b>E</b><b>S</b><b>S</b> <b>A</b><b>N</b><b>D</b> <b>P</b><b>O</b><b>R</b><b>T</b> <b>O</b><b>P</b><b>T</b><b>I</b><b>O</b><b>N</b><b>S</b>
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>n</b><b>b</b><b>-</b><b>s</b><b>y</b><b>n</b><b>c</b><b>-</b><b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>a</b><b>d</b><b>d</b><b>r</b><b>=</b><u>I</u><u>P</u> <u>A</u><u>D</u><u>D</u><u>R</u><u>E</u><u>S</u><u>S</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>n</b><b>b</b><b>-</b><b>s</b><b>y</b><b>n</b><b>c</b><b>-</b><b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>p</b><b>o</b><b>r</b><b>t</b><b>=</b><u>P</u><u>O</u><u>R</u><u>T</u> <u>N</u><u>U</u><u>M</u><u>B</u><u>E</u><u>R</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>n</b><b>b</b><b>-</b><b>s</b><b>y</b><b>n</b><b>c</b><b>-</b><b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>p</b><b>r</b><b>o</b><b>t</b><b>o</b><b>=</b><u>P</u><u>R</u><u>O</u><u>T</u><u>O</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>s</b><b>b</b><b>-</b><b>s</b><b>y</b><b>n</b><b>c</b><b>-</b><b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>a</b><b>d</b><b>d</b><b>r</b><b>=</b><u>I</u><u>P</u> <u>A</u><u>D</u><u>D</u><u>R</u><u>E</u><u>S</u><u>S</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>s</b><b>b</b><b>-</b><b>s</b><b>y</b><b>n</b><b>c</b><b>-</b><b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>p</b><b>o</b><b>r</b><b>t</b><b>=</b><u>P</u><u>O</u><u>R</u><u>T</u> <u>N</u><u>U</u><u>M</u><u>B</u><u>E</u><u>R</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>s</b><b>b</b><b>-</b><b>s</b><b>y</b><b>n</b><b>c</b><b>-</b><b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>p</b><b>r</b><b>o</b><b>t</b><b>o</b><b>=</b><u>P</u><u>R</u><u>O</u><u>T</u><u>O</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>i</b><b>c</b><b>-</b><b>n</b><b>b</b><b>-</b><b>s</b><b>y</b><b>n</b><b>c</b><b>-</b><b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>a</b><b>d</b><b>d</b><b>r</b><b>=</b><u>I</u><u>P</u> <u>A</u><u>D</u><u>D</u><u>R</u><u>E</u><u>S</u><u>S</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>i</b><b>c</b><b>-</b><b>n</b><b>b</b><b>-</b><b>s</b><b>y</b><b>n</b><b>c</b><b>-</b><b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>p</b><b>o</b><b>r</b><b>t</b><b>=</b><u>P</u><u>O</u><u>R</u><u>T</u> <u>N</u><u>U</u><u>M</u><u>B</u><u>E</u><u>R</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>i</b><b>c</b><b>-</b><b>n</b><b>b</b><b>-</b><b>s</b><b>y</b><b>n</b><b>c</b><b>-</b><b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>p</b><b>r</b><b>o</b><b>t</b><b>o</b><b>=</b><u>P</u><u>R</u><u>O</u><u>T</u><u>O</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>i</b><b>c</b><b>-</b><b>s</b><b>b</b><b>-</b><b>s</b><b>y</b><b>n</b><b>c</b><b>-</b><b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>a</b><b>d</b><b>d</b><b>r</b><b>=</b><u>I</u><u>P</u> <u>A</u><u>D</u><u>D</u><u>R</u><u>E</u><u>S</u><u>S</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>i</b><b>c</b><b>-</b><b>s</b><b>b</b><b>-</b><b>s</b><b>y</b><b>n</b><b>c</b><b>-</b><b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>p</b><b>o</b><b>r</b><b>t</b><b>=</b><u>P</u><u>O</u><u>R</u><u>T</u> <u>N</u><u>U</u><u>M</u><u>B</u><u>E</u><u>R</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>i</b><b>c</b><b>-</b><b>s</b><b>b</b><b>-</b><b>s</b><b>y</b><b>n</b><b>c</b><b>-</b><b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>p</b><b>r</b><b>o</b><b>t</b><b>o</b><b>=</b><u>P</u><u>R</u><u>O</u><u>T</u><u>O</u>
+
+        <b>-</b><b>-</b><b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b><b>-</b><b>n</b><b>b</b><b>-</b><b>d</b><b>b</b><b>=</b><u>P</u><u>R</u><u>O</u><u>T</u><u>O</u><b>:</b><u>I</u><u>P</u> <u>A</u><u>D</u><u>D</u><u>R</u><u>E</u><u>S</u><u>S</u><b>:</b> <u>P</u><u>O</u><u>R</u><u>T</u><b>.</b><b>.</b>
+
+        <b>-</b><b>-</b><b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b><b>-</b><b>s</b><b>b</b><b>-</b><b>d</b><b>b</b><b>=</b><u>P</u><u>R</u><u>O</u><u>T</u><u>O</u><b>:</b><u>I</u><u>P</u> <u>A</u><u>D</u><u>D</u><u>R</u><u>E</u><u>S</u><u>S</u><b>:</b> <u>P</u><u>O</u><u>R</u><u>T</u><b>.</b><b>.</b>
+
+        <b>-</b><b>-</b><b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b><b>-</b><b>n</b><b>b</b><b>-</b><b>d</b><b>b</b><b>=</b><u>P</u><u>R</u><u>O</u><u>T</u><u>O</u><b>:</b><u>I</u><u>P</u> <u>A</u><u>D</u><u>D</u><u>R</u><u>E</u><u>S</u><u>S</u><b>:</b> <u>P</u><u>O</u><u>R</u><u>T</u><b>.</b><b>.</b>
+
+        <b>-</b><b>-</b><b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b><b>-</b><b>s</b><b>b</b><b>-</b><b>d</b><b>b</b><b>=</b><u>P</u><u>R</u><u>O</u><u>T</u><u>O</u><b>:</b><u>I</u><u>P</u> <u>A</u><u>D</u><u>D</u><u>R</u><u>E</u><u>S</u><u>S</u><b>:</b> <u>P</u><u>O</u><u>R</u><u>T</u><b>.</b><b>.</b>
+
+<b>C</b><b>L</b><b>U</b><b>S</b><b>T</b><b>E</b><b>R</b><b>I</b><b>N</b><b>G</b> <b>O</b><b>P</b><b>T</b><b>I</b><b>O</b><b>N</b><b>S</b>
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>n</b><b>b</b><b>-</b><b>c</b><b>l</b><b>u</b><b>s</b><b>t</b><b>e</b><b>r</b><b>-</b><b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>-</b><b>a</b><b>d</b><b>d</b><b>r</b><b>=</b><u>I</u><u>P</u> <u>A</u><u>D</u><u>D</u><u>R</u><u>E</u><u>S</u><u>S</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>n</b><b>b</b><b>-</b><b>c</b><b>l</b><b>u</b><b>s</b><b>t</b><b>e</b><b>r</b><b>-</b><b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>-</b><b>p</b><b>o</b><b>r</b><b>t</b><b>=</b><u>P</u><u>O</u><u>R</u><u>T</u> <u>N</u><u>U</u><u>M</u><u>B</u><u>E</u><u>R</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>n</b><b>b</b><b>-</b><b>c</b><b>l</b><b>u</b><b>s</b><b>t</b><b>e</b><b>r</b><b>-</b><b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>-</b><b>p</b><b>r</b><b>o</b><b>t</b><b>o</b><b>=</b><u>P</u><u>R</u><u>O</u><u>T</u><u>O</u> <u>(</u><u>t</u><u>c</u><u>p</u><u>/</u><u>s</u><u>s</u><u>l</u><u>)</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>n</b><b>b</b><b>-</b><b>c</b><b>l</b><b>u</b><b>s</b><b>t</b><b>e</b><b>r</b><b>-</b><b>r</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b><b>-</b><b>a</b><b>d</b><b>d</b><b>r</b><b>=</b><u>I</u><u>P</u> <u>A</u><u>D</u><u>D</u><u>R</u><u>E</u><u>S</u><u>S</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>n</b><b>b</b><b>-</b><b>c</b><b>l</b><b>u</b><b>s</b><b>t</b><b>e</b><b>r</b><b>-</b><b>r</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b><b>-</b><b>p</b><b>o</b><b>r</b><b>t</b><b>=</b><u>P</u><u>O</u><u>R</u><u>T</u> <u>N</u><u>U</u><u>M</u><u>B</u><u>E</u><u>R</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>n</b><b>b</b><b>-</b><b>c</b><b>l</b><b>u</b><b>s</b><b>t</b><b>e</b><b>r</b><b>-</b><b>r</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b><b>-</b><b>p</b><b>r</b><b>o</b><b>t</b><b>o</b><b>=</b><u>P</u><u>R</u><u>O</u><u>T</u><u>O</u> <u>(</u><u>t</u><u>c</u><u>p</u><u>/</u><u>s</u><u>s</u><u>l</u><u>)</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>n</b><b>b</b><b>-</b><b>e</b><b>l</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b><b>-</b><b>t</b><b>i</b><b>m</b><b>e</b><b>r</b><b>=</b><u>T</u><u>i</u><u>m</u><u>e</u><u>o</u><u>u</u><u>t</u> <u>i</u><u>n</u> <u>m</u><u>i</u><u>l</u><u>l</u><u>i</u><u>s</u><u>e</u><u>c</u><u>o</u><u>n</u><u>d</u><u>s</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>s</b><b>b</b><b>-</b><b>c</b><b>l</b><b>u</b><b>s</b><b>t</b><b>e</b><b>r</b><b>-</b><b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>-</b><b>a</b><b>d</b><b>d</b><b>r</b><b>=</b><u>I</u><u>P</u> <u>A</u><u>D</u><u>D</u><u>R</u><u>E</u><u>S</u><u>S</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>s</b><b>b</b><b>-</b><b>c</b><b>l</b><b>u</b><b>s</b><b>t</b><b>e</b><b>r</b><b>-</b><b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>-</b><b>p</b><b>o</b><b>r</b><b>t</b><b>=</b><u>P</u><u>O</u><u>R</u><u>T</u> <u>N</u><u>U</u><u>M</u><u>B</u><u>E</u><u>R</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>s</b><b>b</b><b>-</b><b>c</b><b>l</b><b>u</b><b>s</b><b>t</b><b>e</b><b>r</b><b>-</b><b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>-</b><b>p</b><b>r</b><b>o</b><b>t</b><b>o</b><b>=</b><u>P</u><u>R</u><u>O</u><u>T</u><u>O</u> <u>(</u><u>t</u><u>c</u><u>p</u><u>/</u><u>s</u><u>s</u><u>l</u><u>)</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>s</b><b>b</b><b>-</b><b>c</b><b>l</b><b>u</b><b>s</b><b>t</b><b>e</b><b>r</b><b>-</b><b>r</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b><b>-</b><b>a</b><b>d</b><b>d</b><b>r</b><b>=</b><u>I</u><u>P</u> <u>A</u><u>D</u><u>D</u><u>R</u><u>E</u><u>S</u><u>S</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>s</b><b>b</b><b>-</b><b>c</b><b>l</b><b>u</b><b>s</b><b>t</b><b>e</b><b>r</b><b>-</b><b>r</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b><b>-</b><b>p</b><b>o</b><b>r</b><b>t</b><b>=</b><u>P</u><u>O</u><u>R</u><u>T</u> <u>N</u><u>U</u><u>M</u><u>B</u><u>E</u><u>R</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>s</b><b>b</b><b>-</b><b>c</b><b>l</b><b>u</b><b>s</b><b>t</b><b>e</b><b>r</b><b>-</b><b>r</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b><b>-</b><b>p</b><b>r</b><b>o</b><b>t</b><b>o</b><b>=</b><u>P</u><u>R</u><u>O</u><u>T</u><u>O</u> <u>(</u><u>t</u><u>c</u><u>p</u><u>/</u><u>s</u><u>s</u><u>l</u><u>)</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>s</b><b>b</b><b>-</b><b>e</b><b>l</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b><b>-</b><b>t</b><b>i</b><b>m</b><b>e</b><b>r</b><b>=</b><u>T</u><u>i</u><u>m</u><u>e</u><u>o</u><u>u</u><u>t</u> <u>i</u><u>n</u> <u>m</u><u>i</u><u>l</u><u>l</u><u>i</u><u>s</u><u>e</u><u>c</u><u>o</u><u>n</u><u>d</u><u>s</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>i</b><b>c</b><b>-</b><b>n</b><b>b</b><b>-</b><b>c</b><b>l</b><b>u</b><b>s</b><b>t</b><b>e</b><b>r</b><b>-</b><b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>-</b><b>a</b><b>d</b><b>d</b><b>r</b><b>=</b><u>I</u><u>P</u> <u>A</u><u>D</u><u>D</u><u>R</u><u>E</u><u>S</u><u>S</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>i</b><b>c</b><b>-</b><b>n</b><b>b</b><b>-</b><b>c</b><b>l</b><b>u</b><b>s</b><b>t</b><b>e</b><b>r</b><b>-</b><b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>-</b><b>p</b><b>o</b><b>r</b><b>t</b><b>=</b><u>P</u><u>O</u><u>R</u><u>T</u> <u>N</u><u>U</u><u>M</u><u>B</u><u>E</u><u>R</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>i</b><b>c</b><b>-</b><b>n</b><b>b</b><b>-</b><b>c</b><b>l</b><b>u</b><b>s</b><b>t</b><b>e</b><b>r</b><b>-</b><b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>-</b><b>p</b><b>r</b><b>o</b><b>t</b><b>o</b><b>=</b><u>P</u><u>R</u><u>O</u><u>T</u><u>O</u> <u>(</u><u>t</u><u>c</u><u>p</u><u>/</u><u>s</u><u>s</u><u>l</u><u>)</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>i</b><b>c</b><b>-</b><b>n</b><b>b</b><b>-</b><b>c</b><b>l</b><b>u</b><b>s</b><b>t</b><b>e</b><b>r</b><b>-</b><b>r</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b><b>-</b><b>a</b><b>d</b><b>d</b><b>r</b><b>=</b><u>I</u><u>P</u> <u>A</u><u>D</u><u>D</u><u>R</u><u>E</u><u>S</u><u>S</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>i</b><b>c</b><b>-</b><b>n</b><b>b</b><b>-</b><b>c</b><b>l</b><b>u</b><b>s</b><b>t</b><b>e</b><b>r</b><b>-</b><b>r</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b><b>-</b><b>p</b><b>o</b><b>r</b><b>t</b><b>=</b><u>P</u><u>O</u><u>R</u><u>T</u> <u>N</u><u>U</u><u>M</u><u>B</u><u>E</u><u>R</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>i</b><b>c</b><b>-</b><b>n</b><b>b</b><b>-</b><b>c</b><b>l</b><b>u</b><b>s</b><b>t</b><b>e</b><b>r</b><b>-</b><b>r</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b><b>-</b><b>p</b><b>r</b><b>o</b><b>t</b><b>o</b><b>=</b><u>P</u><u>R</u><u>O</u><u>T</u><u>O</u> <u>(</u><u>t</u><u>c</u><u>p</u><u>/</u><u>s</u><u>s</u><u>l</u><u>)</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>i</b><b>c</b><b>-</b><b>s</b><b>b</b><b>-</b><b>c</b><b>l</b><b>u</b><b>s</b><b>t</b><b>e</b><b>r</b><b>-</b><b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>-</b><b>a</b><b>d</b><b>d</b><b>r</b><b>=</b><u>I</u><u>P</u> <u>A</u><u>D</u><u>D</u><u>R</u><u>E</u><u>S</u><u>S</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>i</b><b>c</b><b>-</b><b>s</b><b>b</b><b>-</b><b>c</b><b>l</b><b>u</b><b>s</b><b>t</b><b>e</b><b>r</b><b>-</b><b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>-</b><b>p</b><b>o</b><b>r</b><b>t</b><b>=</b><u>P</u><u>O</u><u>R</u><u>T</u> <u>N</u><u>U</u><u>M</u><u>B</u><u>E</u><u>R</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>i</b><b>c</b><b>-</b><b>s</b><b>b</b><b>-</b><b>c</b><b>l</b><b>u</b><b>s</b><b>t</b><b>e</b><b>r</b><b>-</b><b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>-</b><b>p</b><b>r</b><b>o</b><b>t</b><b>o</b><b>=</b><u>P</u><u>R</u><u>O</u><u>T</u><u>O</u> <u>(</u><u>t</u><u>c</u><u>p</u><u>/</u><u>s</u><u>s</u><u>l</u><u>)</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>i</b><b>c</b><b>-</b><b>s</b><b>b</b><b>-</b><b>c</b><b>l</b><b>u</b><b>s</b><b>t</b><b>e</b><b>r</b><b>-</b><b>r</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b><b>-</b><b>a</b><b>d</b><b>d</b><b>r</b><b>=</b><u>I</u><u>P</u> <u>A</u><u>D</u><u>D</u><u>R</u><u>E</u><u>S</u><u>S</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>i</b><b>c</b><b>-</b><b>s</b><b>b</b><b>-</b><b>c</b><b>l</b><b>u</b><b>s</b><b>t</b><b>e</b><b>r</b><b>-</b><b>r</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b><b>-</b><b>p</b><b>o</b><b>r</b><b>t</b><b>=</b><u>P</u><u>O</u><u>R</u><u>T</u> <u>N</u><u>U</u><u>M</u><u>B</u><u>E</u><u>R</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>i</b><b>c</b><b>-</b><b>s</b><b>b</b><b>-</b><b>c</b><b>l</b><b>u</b><b>s</b><b>t</b><b>e</b><b>r</b><b>-</b><b>r</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b><b>-</b><b>p</b><b>r</b><b>o</b><b>t</b><b>o</b><b>=</b><u>P</u><u>R</u><u>O</u><u>T</u><u>O</u> <u>(</u><u>t</u><u>c</u><u>p</u><u>/</u><u>s</u><u>s</u><u>l</u><u>)</u>
+
+<b>P</b><b>R</b><b>O</b><b>B</b><b>E</b> <b>I</b><b>N</b><b>T</b><b>E</b><b>R</b><b>V</b><b>A</b><b>L</b> <b>O</b><b>P</b><b>T</b><b>I</b><b>O</b><b>N</b><b>S</b>
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>n</b><b>b</b><b>-</b><b>p</b><b>r</b><b>o</b><b>b</b><b>e</b><b>-</b><b>i</b><b>n</b><b>t</b><b>e</b><b>r</b><b>v</b><b>a</b><b>l</b><b>-</b><b>t</b><b>o</b><b>-</b><b>a</b><b>c</b><b>t</b><b>i</b><b>v</b><b>e</b><b>=</b><u>T</u><u>i</u><u>m</u><u>e</u> <u>i</u><u>n</u> <u>m</u><u>i</u><u>l</u><u>l</u><u>i</u><u>s</u><u>e</u><u>c</u><u>o</u><u>n</u><u>d</u><u>s</u>
+
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>s</b><b>b</b><b>-</b><b>p</b><b>r</b><b>o</b><b>b</b><b>e</b><b>-</b><b>i</b><b>n</b><b>t</b><b>e</b><b>r</b><b>v</b><b>a</b><b>l</b><b>-</b><b>t</b><b>o</b><b>-</b><b>a</b><b>c</b><b>t</b><b>i</b><b>v</b><b>e</b><b>=</b><u>T</u><u>i</u><u>m</u><u>e</u> <u>i</u><u>n</u> <u>m</u><u>i</u><u>l</u><u>l</u><u>i</u><u>s</u><u>e</u><u>c</u><u>o</u><u>n</u><u>d</u><u>s</u>
+
+<b>E</b><b>X</b><b>T</b><b>R</b><b>A</b> <b>O</b><b>P</b><b>T</b><b>I</b><b>O</b><b>N</b><b>S</b>
+       Any  options  after  ’-’ will be passed on to the binary run by <u>c</u><u>o</u><u>m</u><u>m</u><u>a</u><u>n</u><u>d</u>
+       with the exception of start_northd, which can have options specified in
+       ovn-northd-db-params.conf. Any <u>e</u><u>x</u><u>t</u><u>r</u><u>a</u><b>_</b><u>a</u><u>r</u><u>g</u><u>s</u> passed to  start_northd  will
+       be passed to the ovsdb-servers if <b>-</b><b>-</b><b>o</b><b>v</b><b>n</b><b>-</b><b>m</b><b>a</b><b>n</b><b>a</b><b>g</b><b>e</b><b>-</b><b>o</b><b>v</b><b>s</b><b>d</b><b>b</b><b>=</b><b>y</b><b>e</b><b>s</b>
+
+<b>C</b><b>O</b><b>N</b><b>F</b><b>I</b><b>G</b><b>U</b><b>R</b><b>A</b><b>T</b><b>I</b><b>O</b><b>N</b> <b>F</b><b>I</b><b>L</b><b>E</b><b>S</b>
+       Following  are  the optional configuration files. If present, it should
+       be located in the etc dir
+
+   <b>o</b><b>v</b><b>n</b><b>n</b><b>b</b><b>-</b><b>a</b><b>c</b><b>t</b><b>i</b><b>v</b><b>e</b><b>.</b><b>c</b><b>o</b><b>n</b><b>f</b>
+       If present, this file should hold the url  to  connect  to  the  active
+       Northbound DB server
+
+       <b>t</b><b>c</b><b>p</b><b>:</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b><b>:</b><b>6</b><b>6</b><b>4</b><b>1</b>
+
+   <b>o</b><b>v</b><b>n</b><b>s</b><b>b</b><b>-</b><b>a</b><b>c</b><b>t</b><b>i</b><b>v</b><b>e</b><b>.</b><b>c</b><b>o</b><b>n</b><b>f</b>
+       If  present,  this  file  should  hold the url to connect to the active
+       Southbound DB server
+
+       <b>t</b><b>c</b><b>p</b><b>:</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b><b>:</b><b>6</b><b>6</b><b>4</b><b>2</b>
+
+   <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b><b>-</b><b>d</b><b>b</b><b>-</b><b>p</b><b>a</b><b>r</b><b>a</b><b>m</b><b>s</b><b>.</b><b>c</b><b>o</b><b>n</b><b>f</b>
+       If  present,  start_northd  will  not  start  the  DB  server  even  if
+       <b>-</b><b>-</b><b>o</b><b>v</b><b>n</b><b>-</b><b>m</b><b>a</b><b>n</b><b>a</b><b>g</b><b>e</b><b>-</b><b>o</b><b>v</b><b>s</b><b>d</b><b>b</b><b>=</b><b>y</b><b>e</b><b>s</b>.  This file should hold the database url parame‐
+       ters to be passed to ovn-northd.
+
+       <b>-</b><b>-</b><b>o</b><b>v</b><b>n</b><b>n</b><b>b</b><b>-</b><b>d</b><b>b</b><b>=</b><b>t</b><b>c</b><b>p</b><b>:</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b><b>:</b><b>6</b><b>6</b><b>4</b><b>1</b> <b>-</b><b>-</b><b>o</b><b>v</b><b>n</b><b>s</b><b>b</b><b>-</b><b>d</b><b>b</b><b>=</b><b>t</b><b>c</b><b>p</b><b>:</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b><b>:</b><b>6</b><b>6</b><b>4</b><b>2</b>
+
+   <b>i</b><b>c</b><b>-</b><b>n</b><b>b</b><b>-</b><b>a</b><b>c</b><b>t</b><b>i</b><b>v</b><b>e</b><b>.</b><b>c</b><b>o</b><b>n</b><b>f</b>
+       If present, this file should hold the url to connect to the active  In‐
+       terconnection Northbound DB server
+
+       <b>t</b><b>c</b><b>p</b><b>:</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b><b>:</b><b>6</b><b>6</b><b>4</b><b>5</b>
+
+   <b>i</b><b>c</b><b>-</b><b>s</b><b>b</b><b>-</b><b>a</b><b>c</b><b>t</b><b>i</b><b>v</b><b>e</b><b>.</b><b>c</b><b>o</b><b>n</b><b>f</b>
+       If  present, this file should hold the url to connect to the active In‐
+       terconnection Southbound DB server
+
+       <b>t</b><b>c</b><b>p</b><b>:</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b><b>:</b><b>6</b><b>6</b><b>4</b><b>6</b>
+
+   <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b><b>-</b><b>d</b><b>b</b><b>-</b><b>p</b><b>a</b><b>r</b><b>a</b><b>m</b><b>s</b><b>.</b><b>c</b><b>o</b><b>n</b><b>f</b>
+       If present, this file should hold the database  url  parameters  to  be
+       passed to ovn-ic.
+
+       <b>-</b><b>-</b><b>i</b><b>c</b><b>-</b><b>n</b><b>b</b><b>-</b><b>d</b><b>b</b><b>=</b><b>t</b><b>c</b><b>p</b><b>:</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b><b>:</b><b>6</b><b>6</b><b>4</b><b>5</b> <b>-</b><b>-</b><b>i</b><b>c</b><b>-</b><b>s</b><b>b</b><b>-</b><b>d</b><b>b</b><b>=</b><b>t</b><b>c</b><b>p</b><b>:</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b><b>:</b><b>6</b><b>6</b><b>4</b><b>6</b>
+
+<b>R</b><b>U</b><b>N</b><b>N</b><b>I</b><b>N</b><b>G</b> <b>O</b><b>V</b><b>N</b> <b>D</b><b>B</b> <b>S</b><b>E</b><b>R</b><b>V</b><b>E</b><b>R</b><b>S</b> <b>W</b><b>I</b><b>T</b><b>H</b><b>O</b><b>U</b><b>T</b> <b>D</b><b>E</b><b>T</b><b>A</b><b>C</b><b>H</b><b>I</b><b>N</b><b>G</b>
+       <b>#</b> <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>t</b><b>l</b> <b>r</b><b>u</b><b>n</b><b>_</b><b>n</b><b>b</b><b>_</b><b>o</b><b>v</b><b>s</b><b>d</b><b>b</b>
+
+       This  command  runs  the OVN nb ovsdb-server without passing the <b>d</b><b>e</b><b>t</b><b>a</b><b>c</b><b>h</b>
+       option, making it to block until ovsdb-server exits. This command  will
+       be useful for starting the OVN nb ovsdb-server in a container.
+
+       <b>#</b> <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>t</b><b>l</b> <b>r</b><b>u</b><b>n</b><b>_</b><b>s</b><b>b</b><b>_</b><b>o</b><b>v</b><b>s</b><b>d</b><b>b</b>
+
+       This  command  runs  the OVN sb ovsdb-server without passing the <b>d</b><b>e</b><b>t</b><b>a</b><b>c</b><b>h</b>
+       option, making it to block until ovsdb-server exits. This command  will
+       be useful for starting the OVN sb ovsdb-server in a container.
+
+       <b>#</b> <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>t</b><b>l</b> <b>r</b><b>u</b><b>n</b><b>_</b><b>i</b><b>c</b><b>_</b><b>n</b><b>b</b><b>_</b><b>o</b><b>v</b><b>s</b><b>d</b><b>b</b>
+
+       This command runs the OVN IC-NB ovsdb-server without passing the <b>d</b><b>e</b><b>t</b><b>a</b><b>c</b><b>h</b>
+       option,  making it to block until ovsdb-server exits. This command will
+       be useful for starting the OVN IC-NB ovsdb-server in a container.
+
+       <b>#</b> <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>t</b><b>l</b> <b>r</b><b>u</b><b>n</b><b>_</b><b>i</b><b>c</b><b>_</b><b>s</b><b>b</b><b>_</b><b>o</b><b>v</b><b>s</b><b>d</b><b>b</b>
+
+       This command runs the OVN IC-SB ovsdb-server without passing the <b>d</b><b>e</b><b>t</b><b>a</b><b>c</b><b>h</b>
+       option, making it to block until ovsdb-server exits. This command  will
+       be useful for starting the OVN IC-SB ovsdb-server in a container.
+
+<b>E</b><b>X</b><b>A</b><b>M</b><b>P</b><b>L</b><b>E</b> <b>U</b><b>S</b><b>A</b><b>G</b><b>E</b>
+   <b>R</b><b>u</b><b>n</b> <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> <b>o</b><b>n</b> <b>a</b> <b>h</b><b>o</b><b>s</b><b>t</b> <b>a</b><b>l</b><b>r</b><b>e</b><b>a</b><b>d</b><b>y</b> <b>r</b><b>u</b><b>n</b><b>n</b><b>i</b><b>n</b><b>g</b> <b>O</b><b>V</b><b>S</b>
+       <b>#</b> <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>t</b><b>l</b> <b>s</b><b>t</b><b>a</b><b>r</b><b>t</b><b>_</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>
+
+   <b>R</b><b>u</b><b>n</b> <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> <b>o</b><b>n</b> <b>a</b> <b>h</b><b>o</b><b>s</b><b>t</b> <b>a</b><b>l</b><b>r</b><b>e</b><b>a</b><b>d</b><b>y</b> <b>r</b><b>u</b><b>n</b><b>n</b><b>i</b><b>n</b><b>g</b> <b>O</b><b>V</b><b>S</b>
+       <b>#</b> <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>t</b><b>l</b> <b>s</b><b>t</b><b>a</b><b>r</b><b>t</b><b>_</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>
+
+   <b>A</b><b>l</b><b>l</b><b>-</b><b>i</b><b>n</b><b>-</b><b>o</b><b>n</b><b>e</b> <b>O</b><b>V</b><b>S</b><b>+</b><b>O</b><b>V</b><b>N</b> <b>f</b><b>o</b><b>r</b> <b>t</b><b>e</b><b>s</b><b>t</b><b>i</b><b>n</b><b>g</b>
+       <b>#</b> <b>o</b><b>v</b><b>s</b><b>-</b><b>c</b><b>t</b><b>l</b> <b>s</b><b>t</b><b>a</b><b>r</b><b>t</b> <b>-</b><b>-</b><b>s</b><b>y</b><b>s</b><b>t</b><b>e</b><b>m</b><b>-</b><b>i</b><b>d</b><b>=</b><b>"</b><b>r</b><b>a</b><b>n</b><b>d</b><b>o</b><b>m</b><b>"</b>
+
+       <b>#</b> <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>t</b><b>l</b> <b>s</b><b>t</b><b>a</b><b>r</b><b>t</b><b>_</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>
+
+       <b>#</b> <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>t</b><b>l</b> <b>s</b><b>t</b><b>a</b><b>r</b><b>t</b><b>_</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>
+
+   <b>P</b><b>r</b><b>o</b><b>m</b><b>o</b><b>t</b><b>e</b> <b>a</b><b>n</b><b>d</b> <b>d</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b> <b>o</b><b>v</b><b>s</b><b>d</b><b>b</b> <b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b><b>s</b>
+       <b>#</b> <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>t</b><b>l</b> <b>p</b><b>r</b><b>o</b><b>m</b><b>o</b><b>t</b><b>e</b><b>_</b><b>o</b><b>v</b><b>n</b><b>n</b><b>b</b>
+
+       <b>#</b> <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>t</b><b>l</b> <b>p</b><b>r</b><b>o</b><b>m</b><b>o</b><b>t</b><b>e</b><b>_</b><b>o</b><b>v</b><b>n</b><b>s</b><b>b</b>
+
+       <b>#</b>  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>t</b><b>l</b>  <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>n</b><b>b</b><b>-</b><b>s</b><b>y</b><b>n</b><b>c</b><b>-</b><b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>a</b><b>d</b><b>d</b><b>r</b><b>=</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b>  <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>n</b><b>b</b><b>-</b><b>s</b><b>y</b><b>n</b><b>c</b><b>-</b><b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>p</b><b>o</b><b>r</b><b>t</b><b>=</b><b>6</b><b>6</b><b>4</b><b>1</b>
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>n</b><b>b</b><b>-</b><b>p</b><b>r</b><b>o</b><b>b</b><b>e</b><b>-</b><b>i</b><b>n</b><b>t</b><b>e</b><b>r</b><b>v</b><b>a</b><b>l</b><b>-</b><b>t</b><b>o</b><b>-</b><b>a</b><b>c</b><b>t</b><b>i</b><b>v</b><b>e</b><b>=</b><b>6</b><b>0</b><b>0</b><b>0</b><b>0</b> <b>d</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b><b>_</b><b>o</b><b>v</b><b>n</b><b>n</b><b>b</b>
+
+       <b>#</b>  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>t</b><b>l</b>  <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>s</b><b>b</b><b>-</b><b>s</b><b>y</b><b>n</b><b>c</b><b>-</b><b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>a</b><b>d</b><b>d</b><b>r</b><b>=</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b>  <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>s</b><b>b</b><b>-</b><b>s</b><b>y</b><b>n</b><b>c</b><b>-</b><b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>p</b><b>o</b><b>r</b><b>t</b><b>=</b><b>6</b><b>6</b><b>4</b><b>2</b>
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>s</b><b>b</b><b>-</b><b>p</b><b>r</b><b>o</b><b>b</b><b>e</b><b>-</b><b>i</b><b>n</b><b>t</b><b>e</b><b>r</b><b>v</b><b>a</b><b>l</b><b>-</b><b>t</b><b>o</b><b>-</b><b>a</b><b>c</b><b>t</b><b>i</b><b>v</b><b>e</b><b>=</b><b>6</b><b>0</b><b>0</b><b>0</b><b>0</b> <b>d</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b><b>_</b><b>o</b><b>v</b><b>n</b><b>s</b><b>b</b>
+
+   <b>C</b><b>r</b><b>e</b><b>a</b><b>t</b><b>i</b><b>n</b><b>g</b> <b>a</b> <b>c</b><b>l</b><b>u</b><b>s</b><b>t</b><b>e</b><b>r</b><b>e</b><b>d</b> <b>d</b><b>b</b> <b>o</b><b>n</b> <b>3</b> <b>n</b><b>o</b><b>d</b><b>e</b><b>s</b> <b>w</b><b>i</b><b>t</b><b>h</b> <b>I</b><b>P</b><b>s</b> <b>x</b><b>.</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b><b>,</b> <b>y</b><b>.</b><b>y</b><b>.</b><b>y</b><b>.</b><b>y</b> <b>a</b><b>n</b><b>d</b> <b>z</b><b>.</b><b>z</b><b>.</b><b>z</b><b>.</b><b>z</b>
+     <u>S</u><u>t</u><u>a</u><u>r</u><u>t</u><u>i</u><u>n</u><u>g</u> <u>O</u><u>V</u><u>N</u> <u>o</u><u>v</u><u>s</u><u>d</u><u>b</u> <u>s</u><u>e</u><u>r</u><u>v</u><u>e</u><u>r</u><u>s</u> <u>a</u><u>n</u><u>d</u> <u>o</u><u>v</u><u>n</u><u>-</u><u>n</u><u>o</u><u>r</u><u>t</u><u>h</u><u>d</u> <u>o</u><u>n</u> <u>t</u><u>h</u><u>e</u> <u>n</u><u>o</u><u>d</u><u>e</u> <u>w</u><u>i</u><u>t</u><u>h</u> <u>I</u><u>P</u> <u>x</u><u>.</u><u>x</u><u>.</u><u>x</u><u>.</u><u>x</u>
+
+          <b>#</b>  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>t</b><b>l</b>  <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>n</b><b>b</b><b>-</b><b>a</b><b>d</b><b>d</b><b>r</b><b>=</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b>  <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>n</b><b>b</b><b>-</b><b>c</b><b>r</b><b>e</b><b>a</b><b>t</b><b>e</b><b>-</b><b>i</b><b>n</b><b>s</b><b>e</b><b>c</b><b>u</b><b>r</b><b>e</b><b>-</b><b>r</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b><b>=</b><b>y</b><b>e</b><b>s</b>
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>s</b><b>b</b><b>-</b><b>a</b><b>d</b><b>d</b><b>r</b><b>=</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b>  <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>s</b><b>b</b><b>-</b><b>c</b><b>r</b><b>e</b><b>a</b><b>t</b><b>e</b><b>-</b><b>i</b><b>n</b><b>s</b><b>e</b><b>c</b><b>u</b><b>r</b><b>e</b><b>-</b><b>r</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b><b>=</b><b>y</b><b>e</b><b>s</b>  <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>n</b><b>b</b><b>-</b><b>c</b><b>l</b><b>u</b><b>s</b>‐‐
+       <b>t</b><b>e</b><b>r</b><b>-</b><b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>-</b><b>a</b><b>d</b><b>d</b><b>r</b><b>=</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b>               <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>s</b><b>b</b><b>-</b><b>c</b><b>l</b><b>u</b><b>s</b><b>t</b><b>e</b><b>r</b><b>-</b><b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>-</b><b>a</b><b>d</b><b>d</b><b>r</b><b>=</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b>
+       <b>-</b><b>-</b><b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b><b>-</b><b>n</b><b>b</b><b>-</b><b>d</b><b>b</b><b>=</b><b>t</b><b>c</b><b>p</b><b>:</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b><b>:</b><b>6</b><b>6</b><b>4</b><b>1</b><b>,</b><b>t</b><b>c</b><b>p</b><b>:</b><b>y</b><b>.</b><b>y</b><b>.</b><b>y</b><b>.</b><b>y</b><b>:</b><b>6</b><b>6</b><b>4</b><b>1</b><b>,</b><b>t</b><b>c</b><b>p</b><b>:</b><b>z</b><b>.</b><b>z</b><b>.</b><b>z</b><b>.</b><b>z</b><b>:</b><b>6</b><b>6</b><b>4</b><b>1</b>
+       <b>-</b><b>-</b><b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b><b>-</b><b>s</b><b>b</b><b>-</b><b>d</b><b>b</b><b>=</b><b>t</b><b>c</b><b>p</b><b>:</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b><b>:</b><b>6</b><b>6</b><b>4</b><b>2</b><b>,</b><b>t</b><b>c</b><b>p</b><b>:</b><b>y</b><b>.</b><b>y</b><b>.</b><b>y</b><b>.</b><b>y</b><b>:</b><b>6</b><b>6</b><b>4</b><b>2</b><b>,</b><b>t</b><b>c</b><b>p</b><b>:</b><b>z</b><b>.</b><b>z</b><b>.</b><b>z</b><b>.</b><b>z</b><b>:</b><b>6</b><b>6</b><b>4</b><b>2</b>
+       <b>s</b><b>t</b><b>a</b><b>r</b><b>t</b><b>_</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>
+
+     <u>S</u><u>t</u><u>a</u><u>r</u><u>t</u><u>i</u><u>n</u><u>g</u> <u>O</u><u>V</u><u>N</u> <u>o</u><u>v</u><u>s</u><u>d</u><u>b</u><u>-</u><u>s</u><u>e</u><u>r</u><u>v</u><u>e</u><u>r</u><u>s</u> <u>a</u><u>n</u><u>d</u> <u>o</u><u>v</u><u>n</u><u>-</u><u>n</u><u>o</u><u>r</u><u>t</u><u>h</u><u>d</u> <u>o</u><u>n</u> <u>t</u><u>h</u><u>e</u> <u>n</u><u>o</u><u>d</u><u>e</u> <u>w</u><u>i</u><u>t</u><u>h</u> <u>I</u><u>P</u> <u>y</u><u>.</u><u>y</u><u>.</u><u>y</u><u>.</u><u>y</u> <u>a</u><u>n</u><u>d</u>
+     <u>j</u><u>o</u><u>i</u><u>n</u><u>i</u><u>n</u><u>g</u> <u>t</u><u>h</u><u>e</u> <u>c</u><u>l</u><u>u</u><u>s</u><u>t</u><u>e</u><u>r</u> <u>s</u><u>t</u><u>a</u><u>r</u><u>t</u><u>e</u><u>d</u> <u>a</u><u>t</u> <u>x</u><u>.</u><u>x</u><u>.</u><u>x</u><u>.</u><u>x</u>
+
+         <b>#</b>  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>t</b><b>l</b>  <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>n</b><b>b</b><b>-</b><b>a</b><b>d</b><b>d</b><b>r</b><b>=</b><b>y</b><b>.</b><b>y</b><b>.</b><b>y</b><b>.</b><b>y</b>   <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>n</b><b>b</b><b>-</b><b>c</b><b>r</b><b>e</b><b>a</b><b>t</b><b>e</b><b>-</b><b>i</b><b>n</b><b>s</b><b>e</b><b>c</b><b>u</b><b>r</b><b>e</b><b>-</b><b>r</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b><b>=</b><b>y</b><b>e</b><b>s</b>
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>s</b><b>b</b><b>-</b><b>a</b><b>d</b><b>d</b><b>r</b><b>=</b><b>y</b><b>.</b><b>y</b><b>.</b><b>y</b><b>.</b><b>y</b>  <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>s</b><b>b</b><b>-</b><b>c</b><b>r</b><b>e</b><b>a</b><b>t</b><b>e</b><b>-</b><b>i</b><b>n</b><b>s</b><b>e</b><b>c</b><b>u</b><b>r</b><b>e</b><b>-</b><b>r</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b><b>=</b><b>y</b><b>e</b><b>s</b>  <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>n</b><b>b</b><b>-</b><b>c</b><b>l</b><b>u</b><b>s</b>‐‐
+       <b>t</b><b>e</b><b>r</b><b>-</b><b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>-</b><b>a</b><b>d</b><b>d</b><b>r</b><b>=</b><b>y</b><b>.</b><b>y</b><b>.</b><b>y</b><b>.</b><b>y</b> <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>s</b><b>b</b><b>-</b><b>c</b><b>l</b><b>u</b><b>s</b><b>t</b><b>e</b><b>r</b><b>-</b><b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>-</b><b>a</b><b>d</b><b>d</b><b>r</b><b>=</b><b>y</b><b>.</b><b>y</b><b>.</b><b>y</b><b>.</b><b>y</b> <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>n</b><b>b</b><b>-</b><b>c</b><b>l</b><b>u</b><b>s</b>‐‐
+       <b>t</b><b>e</b><b>r</b><b>-</b><b>r</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b><b>-</b><b>a</b><b>d</b><b>d</b><b>r</b><b>=</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b>             <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>s</b><b>b</b><b>-</b><b>c</b><b>l</b><b>u</b><b>s</b><b>t</b><b>e</b><b>r</b><b>-</b><b>r</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b><b>-</b><b>a</b><b>d</b><b>d</b><b>r</b><b>=</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b>
+       <b>-</b><b>-</b><b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b><b>-</b><b>n</b><b>b</b><b>-</b><b>d</b><b>b</b><b>=</b><b>t</b><b>c</b><b>p</b><b>:</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b><b>:</b><b>6</b><b>6</b><b>4</b><b>1</b><b>,</b><b>t</b><b>c</b><b>p</b><b>:</b><b>y</b><b>.</b><b>y</b><b>.</b><b>y</b><b>.</b><b>y</b><b>:</b><b>6</b><b>6</b><b>4</b><b>1</b><b>,</b><b>t</b><b>c</b><b>p</b><b>:</b><b>z</b><b>.</b><b>z</b><b>.</b><b>z</b><b>.</b><b>z</b><b>:</b><b>6</b><b>6</b><b>4</b><b>1</b>
+       <b>-</b><b>-</b><b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b><b>-</b><b>s</b><b>b</b><b>-</b><b>d</b><b>b</b><b>=</b><b>t</b><b>c</b><b>p</b><b>:</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b><b>:</b><b>6</b><b>6</b><b>4</b><b>2</b><b>,</b><b>t</b><b>c</b><b>p</b><b>:</b><b>y</b><b>.</b><b>y</b><b>.</b><b>y</b><b>.</b><b>y</b><b>:</b><b>6</b><b>6</b><b>4</b><b>2</b><b>,</b><b>t</b><b>c</b><b>p</b><b>:</b><b>z</b><b>.</b><b>z</b><b>.</b><b>z</b><b>.</b><b>z</b><b>:</b><b>6</b><b>6</b><b>4</b><b>2</b>
+       <b>s</b><b>t</b><b>a</b><b>r</b><b>t</b><b>_</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>
+
+     <u>S</u><u>t</u><u>a</u><u>r</u><u>t</u><u>i</u><u>n</u><u>g</u> <u>O</u><u>V</u><u>N</u> <u>o</u><u>v</u><u>s</u><u>d</u><u>b</u><u>-</u><u>s</u><u>e</u><u>r</u><u>v</u><u>e</u><u>r</u><u>s</u> <u>a</u><u>n</u><u>d</u> <u>o</u><u>v</u><u>n</u><u>-</u><u>n</u><u>o</u><u>r</u><u>t</u><u>h</u><u>d</u> <u>o</u><u>n</u> <u>t</u><u>h</u><u>e</u> <u>n</u><u>o</u><u>d</u><u>e</u> <u>w</u><u>i</u><u>t</u><u>h</u> <u>I</u><u>P</u> <u>z</u><u>.</u><u>z</u><u>.</u><u>z</u><u>.</u><u>z</u> <u>a</u><u>n</u><u>d</u>
+     <u>j</u><u>o</u><u>i</u><u>n</u><u>i</u><u>n</u><u>g</u> <u>t</u><u>h</u><u>e</u> <u>c</u><u>l</u><u>u</u><u>s</u><u>t</u><u>e</u><u>r</u> <u>s</u><u>t</u><u>a</u><u>r</u><u>t</u><u>e</u><u>d</u> <u>a</u><u>t</u> <u>x</u><u>.</u><u>x</u><u>.</u><u>x</u><u>.</u><u>x</u>
+
+          <b>#</b>  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>t</b><b>l</b>  <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>n</b><b>b</b><b>-</b><b>a</b><b>d</b><b>d</b><b>r</b><b>=</b><b>z</b><b>.</b><b>z</b><b>.</b><b>z</b><b>.</b><b>z</b>  <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>n</b><b>b</b><b>-</b><b>c</b><b>r</b><b>e</b><b>a</b><b>t</b><b>e</b><b>-</b><b>i</b><b>n</b><b>s</b><b>e</b><b>c</b><b>u</b><b>r</b><b>e</b><b>-</b><b>r</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b><b>=</b><b>y</b><b>e</b><b>s</b>
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>n</b><b>b</b><b>-</b><b>c</b><b>l</b><b>u</b><b>s</b><b>t</b><b>e</b><b>r</b><b>-</b><b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>-</b><b>a</b><b>d</b><b>d</b><b>r</b><b>=</b><b>z</b><b>.</b><b>z</b><b>.</b><b>z</b><b>.</b><b>z</b>  <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>s</b><b>b</b><b>-</b><b>a</b><b>d</b><b>d</b><b>r</b><b>=</b><b>z</b><b>.</b><b>z</b><b>.</b><b>z</b><b>.</b><b>z</b>   <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>s</b><b>b</b><b>-</b><b>c</b><b>r</b><b>e</b>‐‐
+       <b>a</b><b>t</b><b>e</b><b>-</b><b>i</b><b>n</b><b>s</b><b>e</b><b>c</b><b>u</b><b>r</b><b>e</b><b>-</b><b>r</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b><b>=</b><b>y</b><b>e</b><b>s</b>              <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>s</b><b>b</b><b>-</b><b>c</b><b>l</b><b>u</b><b>s</b><b>t</b><b>e</b><b>r</b><b>-</b><b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>-</b><b>a</b><b>d</b><b>d</b><b>r</b><b>=</b><b>z</b><b>.</b><b>z</b><b>.</b><b>z</b><b>.</b><b>z</b>
+       <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>n</b><b>b</b><b>-</b><b>c</b><b>l</b><b>u</b><b>s</b><b>t</b><b>e</b><b>r</b><b>-</b><b>r</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b><b>-</b><b>a</b><b>d</b><b>d</b><b>r</b><b>=</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b> <b>-</b><b>-</b><b>d</b><b>b</b><b>-</b><b>s</b><b>b</b><b>-</b><b>c</b><b>l</b><b>u</b><b>s</b><b>t</b><b>e</b><b>r</b><b>-</b><b>r</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b><b>-</b><b>a</b><b>d</b><b>d</b><b>r</b><b>=</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b>
+       <b>-</b><b>-</b><b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b><b>-</b><b>n</b><b>b</b><b>-</b><b>d</b><b>b</b><b>=</b><b>t</b><b>c</b><b>p</b><b>:</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b><b>:</b><b>6</b><b>6</b><b>4</b><b>1</b><b>,</b><b>t</b><b>c</b><b>p</b><b>:</b><b>y</b><b>.</b><b>y</b><b>.</b><b>y</b><b>.</b><b>y</b><b>:</b><b>6</b><b>6</b><b>4</b><b>1</b><b>,</b><b>t</b><b>c</b><b>p</b><b>:</b><b>z</b><b>.</b><b>z</b><b>.</b><b>z</b><b>.</b><b>z</b><b>:</b><b>6</b><b>6</b><b>4</b><b>1</b>
+       <b>-</b><b>-</b><b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b><b>-</b><b>s</b><b>b</b><b>-</b><b>d</b><b>b</b><b>=</b><b>t</b><b>c</b><b>p</b><b>:</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b><b>.</b><b>x</b><b>:</b><b>6</b><b>6</b><b>4</b><b>2</b><b>,</b><b>t</b><b>c</b><b>p</b><b>:</b><b>y</b><b>.</b><b>y</b><b>.</b><b>y</b><b>.</b><b>y</b><b>:</b><b>6</b><b>6</b><b>4</b><b>2</b><b>,</b><b>t</b><b>c</b><b>p</b><b>:</b><b>z</b><b>.</b><b>z</b><b>.</b><b>z</b><b>.</b><b>z</b><b>:</b><b>6</b><b>6</b><b>4</b><b>2</b>
+       <b>s</b><b>t</b><b>a</b><b>r</b><b>t</b><b>_</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>
+
+   <b>P</b><b>a</b><b>s</b><b>s</b><b>i</b><b>n</b><b>g</b> <b>s</b><b>s</b><b>l</b> <b>k</b><b>e</b><b>y</b><b>s</b> <b>w</b><b>h</b><b>e</b><b>n</b> <b>s</b><b>t</b><b>a</b><b>r</b><b>t</b><b>i</b><b>n</b><b>g</b> <b>O</b><b>V</b><b>N</b> <b>d</b><b>b</b><b>s</b> <b>w</b><b>i</b><b>l</b><b>l</b> <b>s</b><b>u</b><b>p</b><b>e</b><b>r</b><b>s</b><b>e</b><b>d</b><b>e</b> <b>t</b><b>h</b><b>e</b> <b>d</b><b>e</b><b>f</b><b>a</b><b>u</b><b>l</b><b>t</b> <b>s</b><b>s</b><b>l</b>  <b>v</b><b>a</b><b>l</b>‐‐
+       <b>u</b><b>e</b><b>s</b> <b>i</b><b>n</b> <b>d</b><b>b</b>
+     <u>S</u><u>t</u><u>a</u><u>r</u><u>t</u><u>i</u><u>n</u><u>g</u> <u>s</u><u>t</u><u>a</u><u>n</u><u>d</u><u>a</u><u>l</u><u>o</u><u>n</u><u>e</u> <u>o</u><u>v</u><u>n</u> <u>d</u><u>b</u> <u>s</u><u>e</u><u>r</u><u>v</u><u>e</u><u>r</u> <u>p</u><u>a</u><u>s</u><u>s</u><u>i</u><u>n</u><u>g</u> <u>S</u><u>S</u><u>L</u> <u>c</u><u>e</u><u>r</u><u>t</u><u>i</u><u>f</u><u>i</u><u>c</u><u>a</u><u>t</u><u>e</u><u>s</u>
+
+             <b>#</b>      <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>t</b><b>l</b>     <b>-</b><b>-</b><b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>-</b><b>d</b><b>b</b><b>-</b><b>s</b><b>s</b><b>l</b><b>-</b><b>k</b><b>e</b><b>y</b><b>=</b><b>/</b><b>e</b><b>t</b><b>c</b><b>/</b><b>o</b><b>v</b><b>n</b><b>/</b><b>o</b><b>v</b><b>n</b><b>n</b><b>b</b><b>-</b><b>p</b><b>r</b><b>i</b><b>v</b><b>k</b><b>e</b><b>y</b><b>.</b><b>p</b><b>e</b><b>m</b>
+       <b>-</b><b>-</b><b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>-</b><b>d</b><b>b</b><b>-</b><b>s</b><b>s</b><b>l</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>=</b><b>/</b><b>e</b><b>t</b><b>c</b><b>/</b><b>o</b><b>v</b><b>n</b><b>/</b><b>o</b><b>v</b><b>n</b><b>n</b><b>b</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>.</b><b>p</b><b>e</b><b>m</b>
+       <b>-</b><b>-</b><b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>-</b><b>d</b><b>b</b><b>-</b><b>s</b><b>s</b><b>l</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>=</b><b>/</b><b>e</b><b>t</b><b>c</b><b>/</b><b>o</b><b>v</b><b>n</b><b>/</b><b>c</b><b>a</b><b>c</b><b>e</b><b>r</b><b>t</b><b>.</b><b>p</b><b>e</b><b>m</b>
+       <b>-</b><b>-</b><b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b><b>-</b><b>d</b><b>b</b><b>-</b><b>s</b><b>s</b><b>l</b><b>-</b><b>k</b><b>e</b><b>y</b><b>=</b><b>/</b><b>e</b><b>t</b><b>c</b><b>/</b><b>o</b><b>v</b><b>n</b><b>/</b><b>o</b><b>v</b><b>n</b><b>s</b><b>b</b><b>-</b><b>p</b><b>r</b><b>i</b><b>v</b><b>k</b><b>e</b><b>y</b><b>.</b><b>p</b><b>e</b><b>m</b>
+       <b>-</b><b>-</b><b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b><b>-</b><b>d</b><b>b</b><b>-</b><b>s</b><b>s</b><b>l</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>=</b><b>/</b><b>e</b><b>t</b><b>c</b><b>/</b><b>o</b><b>v</b><b>n</b><b>/</b><b>o</b><b>v</b><b>n</b><b>s</b><b>b</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>.</b><b>p</b><b>e</b><b>m</b>
+       <b>-</b><b>-</b><b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b><b>-</b><b>d</b><b>b</b><b>-</b><b>s</b><b>s</b><b>l</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>=</b><b>/</b><b>e</b><b>t</b><b>c</b><b>/</b><b>o</b><b>v</b><b>n</b><b>/</b><b>c</b><b>a</b><b>c</b><b>e</b><b>r</b><b>t</b><b>.</b><b>p</b><b>e</b><b>m</b> <b>s</b><b>t</b><b>a</b><b>r</b><b>t</b><b>_</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>
+
+OVN 23.06.3                         ovn-ctl                         <u>o</u><u>v</u><u>n</u><u>-</u><u>c</u><u>t</u><u>l</u>(8)
+</pre></body></html>
diff --git a/support/dist-docs-branch-23.06/ovn-ctl.8.pdf b/support/dist-docs-branch-23.06/ovn-ctl.8.pdf
new file mode 100644
index 0000000000000000000000000000000000000000..c9881a3758ce5f47dcd3f7083ccb13ea2e49a58e
GIT binary patch
literal 31888
zcmce-1y~)+vNjwnID}xqCAclzL(t&vt_yc}g1bAx-Q5DgLU4C?4el1?TO`?X?z!ha
z`~LDhi<!2n?wam*s%GYGNM!^+&@#|5!;$tJL}tU0l8Rb7TIuWBn^;+L5?brp8v~5&
z2x(<#326=F`928Afl>i03s8fJo{71My^93U5orDn)Bz!_&2Kp=X&F96c_EM_Kc9kt
z2qCSVppcTNfY3W@14AcU6MG=2#?Icr%EA8Kdr(%|!QR@z{)34*@VWSpMuKA@q$jk}
zGlk>k21o!cjqHsHSwS^&08lUXKwCn<2XkF}pde7+$^gj217~M%3)HoMb51Q&5|3P9
zebu_Jd{S=<#*n?teGz4ORVg$hHS-nRAN5Uj?m=;tpm27}W#pOHK@{<2rTJS5I06IP
zRu>N@fivi82EO{6A}cj)R#z6!H-bmRm!jeq>gFoo=mp(@J2EiqRv$_PWp*=1&t){Q
z$+!mB+d5!YDI7JiT|Ndeb(WUKS@|DyGEMEFM7$US7g^O^xt6`ROwu0Q9YCOkOcCU{
z(rD|NmAhjUmKLp(&aE?%K>`y<AHO+1t>vS@M9L~d<$n=c1XxYjf&NNTy~t}i_};NK
zDAHq(N?aP5Q?9Kp8;_Iq>fn{?x8!c@A_OIi++9D6<}dt!ns(OE6oEVA^z&;hKmCO)
zv+6spVwIs4R&#A2h4@*FqOrRBzyy}yTZSI{PdV=Z^-%AJTf5t&QD0lqzFrl1S$l8R
zdh^9yBO*9~3LM!)8zId!L>e^&54ri9Bbv?>oWque&O|-SlX(xk5{uCtnp55b=XAg<
z^gJc?KyH8cJbs6z0qWs{!S}QDy1Kx+<ogV|3K(cvBQM}tQx1zN`Q;#@E{fo`Sx(ZF
zlqRNpV8BMEa4nZ(5Cr4u!$jxV<L#;4ePdE2>MmBIV&cZDHgv@Kse?KxF-Wh_kR8PY
zqadc*K3xupm`0?lpzWvjfcQMk=@q-GV;${Ac7oK>-Dcd<4_Vu&_tT2iOZa2kg`d!)
zP@;~^5{VCZ{aUbD7%n6>Wr#mDuEB~p7K-lc_27gh^aSjXid9z^hIGeVs737Py%8G<
zFz}gyHFEGxVXI#;q({_{5Tq2~%mMqbl+&OZHR{Cok_rt^Zpv3pwrrq=0jue=peu*{
zlMTiVSu3*{Nwx)e)9!U>K|$oX^Z=i4Dq^yMA#I>W6Z(SJn^OQasi-Px6XUnI*QV8n
ztQC1XpMoyEcer5XlZexnf}hL_G?yshD{~M8vwvg<hYoy<hW;o5?Q<kDYB<e7Gv)W4
zl4GP+Kpi~iw(z{eIw0j{LE|2fa2MvetT9sFYxGeoxfx8CbmKOqqsS7!*mT0i4RQP;
zil!}_3j=|fkhs-~&NvK8AF<cFPdxBulAC$%bLIR;jlmk>Me#F3J57QVfjv2Br17HC
z`NAl&7(+YJQ^Uw55krkMS8WGTNeI;OZPWhPYV_}SN{W1?v(t)Z=tlwjh7(AIrLyG5
zGjhwQNL+02#IzbantbIug@$)(CbcdPQlEp2hpB(a=QXF!)w+7XOw1$7;TU;2Y7FSB
z5KO_luxP(8Qr`Za8?ZBpuUDX{S&5yl*+#Xoq~3{SU05-FyV2rFmEM9zyUqb_bQ=+|
z26U$Ez{&CYJe>9@cV<1iq(owEGuv9JiQuV8V#UJ`QCdzL7_{Rph&yjYjuI3&dxPrv
z1TLlWjuL2T@Y_Rxa?f7n*_S-04D`(GaKGyq{@vv;{4<}UG7$6W1KQF#dW#@@-FM7L
z1s8^NSvk}N{^&Q&8jcv)eoUz1gz$zM@>|lq6(^CO?I$w5KM+TV!;9^8ax_S5AGPdK
z+tTw%T^3cG4%?1uPb-J^YRh^AJMAhONKz}HsRI(U>Rx%&Pf9|%pt+>x7#q#aZIImI
zh`hkm=?2e$Af8uo<O~nBsJqg`+FkHCfZzuU8mM{&F0?}PBlgfMC9{$rRa<A+?<>3Q
z<q~d-W&yHU-!yW_Yr^$Qy!ZH#aQt8}MJV!8X(3RO$?D!b^T1@uApQ6Gz!bcYX35*b
z%H`wO&Vjy+vEv>k6lg9j$p=rDDwV+m%`<E!Qo5_=1DgblK-kkm^JYn;tw-w&yra;9
zR)m9?X~y&Y0aa}Q@NQ#-LqEBL5GF3!H#z+t+;3Wt$%Rwp*UY}XI_Dj1b#kwU;4_Qz
z=2}@y_<orA7O8`TeIw{Ag7uE?BHs%fq~R#DsImCKFC$bMH13Bz!aodI)F00lY`@}h
zeNmm9P0-4b?D+JZ11TkQWMXDFV43ci6Pc_tePOffdiaWnbT7X8i+KHy93U<XE#K0P
z$@%`}CoES~EiDP~QKxs7!ZT~Q{-Jx-doN)lxkwyn<?vK6yj+U>QY7UM8v2^y0NNwj
zM|>uOV@l%jYER~|NErhW(yed}1NkU;^^3h9Dgjb9eV3jZF7Am3(|C*-dY(Swbl1L&
z@*K1JNE}^CZ_|MpdSNA|{&+p-hX$G?TOKLor@nX5FnZ*9G)8@N)G^Bf)G!yH)UGM}
z+6q*UlNF=Nt><CH!=LB|>GO>INOSdx;@I@Fo$2g*^Ba?CCWCmg7?in@A{Y7wCt&pb
zy6uo44GU^i--hv}aHuW>g@u*Q_+fv2a`2%qwm!aqr3&I}9>z!Rq*#9pst<*IpF>Ne
zujZa^H2{cxp@$+d8?2jpLO+JlmhQ1DjcV&rs*s8s(&`uKpr$dL&=ONLElgcHL>#6c
zm?0<ov5K)lRcRB-{(z6KP))Ms5N0o5kh*Fk#m&Z{4itKK^*sGCvJTGBOf$3*D@IwY
zSHIH=>M~9Fy!+}<>+5j6mmuQ}wb5#+Yk@bAG2VE;s5EA-T+W8G(MxV0-l~<!DKjxi
ze&;`5S~G%B-eE84Km-9z%-rVkqn}wzY*B>B!BJ>h8CAu~w5n8_tnmUZMOVHw|D-Ds
zfUoPPwvu5K846*#Cu70gxy+w`vT^-M{-yYVDqc>5PO$g~=Mw83mH-RjsD)=t1-QIE
z)G@AuB1_;sFdKHKv<;3+ZDg0pclq5{Ls*;&=3Q2ZR}UPP=k0Nt4iNaNlqxL6kq+v5
z!u!cf0Vv_ghc5~I=JiMGKUDZgcQDgg!LAfhQG1`Hpw#+Krq;7ybf<NTg6lUFJQnE8
z+As)IL&UaEP5Hfk^D$VEyT1)9DmO)Fn&9LXb1*Q0?B86|PoMM4H?gz*>6<wI?Qw{a
z{+~P#EvYV8E_`_9F{6B-PLVl(5UyeA&CMPz+bBY#Z0G|ng(8E7R}&>7l)H69a7TUL
zGkg?7Oe*^tFZYAmO-B^_A_te<@Zj(sJaH0n_EYiGm>%!wPDdgb%S!g1b}es(Z-<CF
z)Y$5l;2w0xVSB4!w1Ehmw@+7l-*o3HKn3yuZCm3OoW^IaT~t_>VP-^2O5vd?(xbBS
z<s|B?gC-g`LTY5hlTA?fe99di#$p}oH|_`P;AQ{s9>z)w&|MTXB*kp4c#%-Lh!kZs
zAAC?+;IM6^ahBMD9G?<I6}BfBy(DtZ99jH;Fww2CwEcOHn+8HxrZ+|>>Rh&qotNdQ
zC8BkxS-Nr|9>sAUtUk!CbC>LuU__1$h$K`R2cpc`_*Z5Ub5XC2(h^MSsg4YRoKSIY
zuV4<L)-sKXD~(G%>$8fLcV3b4-#aeTm5<JSVv9ZB-%l%S0v8ukx#p+aG^mNPV@ZeP
zvZ`@Ke)H)a{fDZPi0-$?A%SwU=dcg>9JjJ>AsTb{A`oO6V@c(7=gqgC-k^W<!+QTF
zUaDLqxXVfQI1(#%4_2wXh#nyX-Gs9LcI)uR{;IpJ%`G*yHWcQ@fF`qsI+MN`9El8d
z%F2$=7pfgqwBZ43R`r(om!ce9mf@$XJi_s+5cvxouj5+xKNcx<_!4FgTpw#?NMCWQ
zG}H3iH&y1PH`O+Og_qc3vx5vtG7UN%qs-nK;LbR9BH0tI<PN~l@qsPf{uWvqR5E*<
zi9U*O$6%o_$J3D`*=^~bS$)wLQ0ErH_QQWf$VdyaXOH6yoP~cJDZTrgohpWgHq-z`
z9p%LfkFz;WHQ4}7t<SJA;a)0}E4X^*`4~2i+L<Imp$0tCXYBpss;$zd?2VP0>@EbF
zKDcP_%EZka`}qp!NbQ$-nwTA%C1#z*IDH(xzXtz-TYW)~+S9H?gTBn53Vus^NGWdi
z12S@{+HZQA9BcZBa#^Z3M)wi7*iVU!Q)ON`9`eVslLG0hDLbdN*_v4sUAQXUvntcF
zGFRtaIWiLeK74~p$7X}w3tJzk*RfXb&94f)kzF>)UwoQ73}RjD?Q#>FNV>Y3E)q}F
z9VbVhE^n*YxV6?z-sue_p54HsIh@M;=;65{p|XG<!MXK<;zuFhCkKO7nF3CGAHNQ*
z%ALYs>#v+pjWa~A8+R@fAQ$?b0R>B6M;X3n!CPDjI+53|>0KS?8!>%k@K&T2AZuis
zrzEFOMw!8C;}OP8q>sglT9p%7VJ7p&!u6v95DZ_eBZyn#%N2@!iC9{AiETZ8nZmfp
zvKmg(MQ_>fI%p=fHIRR7G|?y_7gP$RxHL(*+dh=rgrt6LS2y6IY5;_JX!PiWhDO?A
zIqrf!x<sn8#2i5Nz)`#E^F%CYdRR}9ZiriKG1HZKoN;W?CCo~y-QT_?=-4!OyQ`>>
zRquRKEhey$&|M$@=CizM!TyxQ5;j4mb@`&WfEBuf<}#Q@c#T#NwS_`E6Ph<TpFu6a
z1%E^)A)8pBOEWBA6uTUMY>!81qUW%9C<*^&Z|TFF9!h?V#W((Ii8<%%vR3?<_2E){
z<RW+of0^MK3f4>+$Ivrk4fKqI_;qR4If)Kqi3iuGC;?rkGwVb_Cki-ud(7$YEJZ$y
zyUp%3cCvF7`ja6Mf#@q?V3#Ru4$fylTv9IqcEa$vSAu0|y2G4!s>V5U_O%GgYs5WK
zOX^{Sl-M+HaplyQ&Z_vk>Te-X6Ho3_1WsoV$+Wc-rj^Cmq^hckVisZF`<D=nCcGMP
z;@MH0GVk@)RMkG;ZE<FuV9kmea#WCPMWi48*k|YoECZjV&&mcfUvZe`IAD)dHp77@
zOLLCT*{tUuUu@|hQCV5913Y{rSlgL(hZGXPn}Bb1#r2URQY=T^sjH^0D$3`+aqWsO
zsJwM)$MUL#nkf@0PkC+KmvX<?+^mK%xuG(j!AJNWKNSZNg%`h3?*#-Ftf`5fXBV%A
zdMdQ<%GxnOU}W|DzlD&Wq2Xr;VPT;EBZM$A{d)*u{wE=1NafISLImw0qu@=|duzwO
z)!XWKBKH)p2&qM!a2lHBREfxKiZFZV>L<Q(olv>-v@mT{r7>H)#vnoqjxn&^S+pB@
zXV;Sv6$)!RRr1KCexY%ZbzLNUQBe5Eq@HP{Yn7?wU$eY{s_lWIbukzTb4Gc_A-tBo
zvpMr{q74JSPhu$X5?9IZJUtfCP_ekx&7Jsg1Om4muI8gNE<BNp^Mu_pM@KUcr&5V1
zA-&PpQk%;LBmE23{)FfVM;tWLS3xsvH;&vd{Zx5jO55cMg&^p-(P0pi3Z~PzMk0Fv
z!WB}|5qB~A-|g1@ayA%TIb4}iFP>n%X5RRNnKbyUAi+%i_%ev&R|!i_$MRx0jd|z?
z8vn~zXJmamnT0{J4p=$&#bRePVq-KTt)40v(XOGb`8L60yWpDWHdsbeZ{rjSzYHdR
z$CcEN+pZ}L*`esO4{J=xa*<<xfyk3qBo&L|3*_a-UCftL!>;*Gm7*xxfH4S-uPIm2
z7;#+q;^hVAKKcu(s(sP9sEMKcCJC|l+@bG`fnEw!1H?j#<-NV@s(FtkJcrri2l6md
zrnZ`cwF%|=%$DC1XDxPT)VQ3^vYS%32h1b1xCMY38rQ+aL90^cjr+DA{M-E;C`t^K
zrFrxpT-RMv?Nza5s$&;z;Xg<D8S&wZ(DmF4Gjf?EU!JNVLsSe{d=X2u+=<scS{b5#
z7dNArzsIRPR8Ue<7=*Ef(FD`+ty+jTK3%FrTwPU2=yKVQpG`C+o2Fv0Acg!BmR}xS
zXSr1wQuZyUnntE`xF~UD=A)Vo7KUlvS83k}FH+iONT#E?O*+o>yt5Z%xtKT83Q8qk
zq&0Rp)oHV7?q2OTWV#)3%xt;eU5IN_c`&Vg%cB#l@k+!7_A8m_!u#p1t6%J=jH@zc
z=w`4@D~o5zE^rrTn<!w<eQ)}vs1YaTxT>uztLo#?fx}BvxqpXH{pQWxX})3Di{*>2
z+FX>r%6tKzB!iVSkrYOjv;@PY%SEY^%j%N|py6Rs1U4%lA&ZMHybMAk=I6mIiMP~Z
z4SBurRPg9GAcmrJ`j0KuvQ8}+o4QWfN5=`dqGWv_z`AZ!vC_<|_((0V+~ISUJ6K`-
zj?KJxendO*BF~I_<4YMf++n6nU(6h8p^11k)JeBI3Us~5sb(6P?UO{-Oo)!1u*`Di
zh1ieUI5ob9%a;aAXlIu{Cqpx0<o*u-@j!Gf6;YaOw?g*j?uJ<q5RiqJJ^8sb4h$^W
z$id~}OEZcCj+Haw!fp*%=+Igy71!%B)cY8xcM0mbI_vb`vh|W%M)Hr%P*LS@TqKPr
z;O?9x?>@%A5eg`dsc{D@=+F?Na=?<j>enOsVGg$?w+0g!+kMwMZ=f^6hN07jce|?6
zEJ`KwA&<KJgECB$4V@_5rB!cIk0NukMq&mw--62`LQCW*@m(P}SrbzM{gkKRK&jYx
z-8L>gW<Z)_gvNwdB~J*m%Py?n-L?YR<>~`RkxsFez9_+E<~9&Zn?~L~8gqNJ;vDj<
zk$Jv;vnaow{6I&4UKYY7cQHRC2BAp{rpLY$L(}-6EWl|XyS93?V2h{vWb2_xrigMi
zN^Ncr+_U%Q`t{3BwEQwR2cmfnJU8#F<<3jK8|h4B$?Wj^&dcb*Fgua7LC@E)BufIs
zK7|J#MxZy0lt|OzdoUlgsJ!o@@s8HyiJh7PlO@*D@m|eK<c~sc%laiCjdROMe|D|J
z^bA*;dxu&k<uP({<wZI{8t)43_H_Y14t=~m7uWg#wc_0hjt5plqqu>XA~KthVncsZ
zb${nDNh8K*^M-10<w+6=Y#?kS&Y@~@OB^Y;*ioWVyRlue-FGAiQ<Coch;Q!tbvUnm
zLviPldtLVVV*0F5<I3sctugDsFCl)o55>U$fE#xqbEs^;L2_AQ%9@J7e)PDwiewY8
z=j0eaPn6C(H+9}`BA*YJO2FFNMIwP+R=p5i-86xtu=77-1W=>p?dkhNZyy>z3W?In
zBP5>+r_CD0TH?r5?}!-UBhH4Szt(eP%OPI8;QYD*{@Jt88mAcULNl}cEz6JOY6~4M
zu?fYPva>-6|H>gNhqtyCr<fjUiD=A9U3oFHy1e}uFkx3)iPa&PB?gZdd|+b3n8=(0
zX8}Omq?AxL{7xk2%&)L&fm}TM2SRTW4sST}52gCq54$3q5oU~_e6@T+GXn&31NVnB
z;jkF41s*1`Z0hvhTs`{Dc!}f*x&M3Udk$$oLmw*#^Pi!Q?cYNm`#%eP1E9Ajw55IO
zm%9N}Um14Zp|*d*(5w}SWk#u%4f&Xzqyj6+Nqi{y5bzlCSmmUJMkyN{jcq~G&iak(
z+GRKy%To}GjG`vvq@gh#xVv<)5!PrWdn2!rlYvn)sYV+z*98wGpjjTiC-y-T3bCtg
zOeY;$azDjS{g~DfhBefoSCvlcpk^QM;duJ>+ZMK2<;hDyTN*#!Q0baYhivVUF(xy~
z+V)gftJu#473tY4=Xb15%Tlq~khrIn>kH?nqACy}{*k;Q^b#CHrA%>*-_5;@?<oA%
zU+E<;PPxJO%+swnT7~2v)!PL{qwvM#7xy3Dk91kp#4)HuzYea`zFbrXijfaFOvF=E
z%ouAnd41yOJ9wM0ShtUEniDw+^%W+c3e8$Mozi0gsb371LFKi`$K{+joL)&?{h-s&
zEmg1`ovvGFyB_1ZqAR;KmpmNXsUAbrJqTgkQI%C!FXC3c+O#XKE=^aC_Vk_{_hsTu
z2B&nu>fjSzd1X}0EDVgydPpTSeTK0-v`n#Zq9i4684J&VQj8)DZn0F_@{}(?Djwu5
zP+j?6zKDc^FohB`#{R{fo*T8b^h&d4B-D~gqbJkptnz4Zlu3IvZ*Y}7^Sgm_$Sr7M
zOyxP)`1%Bc5_S9ioZcNcx=k`dZv{_B90X|QJ)Dm!=0lS43+~?3&m%Fyj%G273JZ!P
zE2$*6&O8CRAS~tc81T;Sb|8iazAQ{0%S43i)z>M`LZ=MmLgrV<$iEHPGt{i#oyc$I
zZ{x9&-CcNF`>E48>?PXzk_Pa>iX7ET_u2*)!Jf0z2l%chu}{22gw@x`E?Sk(V!OLu
zc27(B$fp)kELLKTqEpmumy9Usdtvebq#TT<h}oO1srl(~&G_;Z6^YWW+e8&(*U}1-
zw<@L{FF(Gv!+ZJ7CjUFy9Jz^x^BGQI@C6lQO{I$I!1@*8$ksB^_|T>8&TCSvAc;j>
z9Y&PQPLcF&!om-`0u4Dp8=cM;UpNZZTFtevW;uOp_2{0FR@0C#DP*%9-%4bxv8quK
z;wD_utXEy7*gLD1BDOp$S?^pO=Fr(9JAHbT5DDf09~v*(kdYw-moU>Qi1>RcWClJs
z@rInv7dbP3i$!WRC8l_XB-ZJ9u!PS56&3iIdHW;x3*y!BJZ3$_LD|>Rc+mP0b-RiX
z>~SxV_@FspnkO)jbTZaoK^Xbr+fbOFYm>-92EVY7vw5e0tZe|f2?-4m<p@+*JR&)b
zgH1VYotvzu+JE=4s{!U4#WAiSh0KTRB+-|~%1IOYci`!iq}vE?e8LBvyxIaI6HYq~
zrVs^;oD{>zvr}D_pih))-86~V;-Y=N)r+LLx~MY+x46|}90()a><=CNi@uMoCg7{i
zD+!XukU8%3$3Vst&#%mZo^YJ0{)PgVasdJz)-*)jneg@FfKa7b-&!a!-2OhQ3`XV7
z1cKlm-{AQ0lW%5|>pjO}d5uX*l&_+*#5ztpQ{yS=T8ZT!Iz~$379@4m*YjsE=pZuM
za@Dg&fAmK#5MIRH8?zVUmqecK?3!GHnd~9Yfe(K->LSl~c6ZcaU&eXNE1aCD<<fX{
z;Gy${Dbm)o;I)N*b{rhdcY&f6(QKMfRd6)LFW?g7oZGGMz?fXUj?}fhkiR`?Q><tk
zQDCj!-tOL{T{>%#S(qhH)}!C8O1%<n*VKn@2r8+*T9)?HZK+NSE9O5ul>BTVu2TeD
zZ*u>%qLg;-Fq84&Y!5@Gsz`ULio~1Pq+|~@5dlV{;=H&>_!v+cYdyxx_Ic!fYk<6v
zLU(Efim={+0W#Gso|E{qf{L|hz9`+ASRuHn&RaCc%cw1_2FBeorB1uUez3~2D}p<k
zfu${>Idse;&s-=}9p|;s${lJqrvRM2?UM_ECo2;pya-*kt-1_yr~rAM;2EAKi*~}|
zw)nZih%5~qp$+O9=eO1_vkt6srK4}SHMOE6^%~W}LuEI|L`5*OZ8+mCxlE^LeoWr+
zTxy5iZNmB5JG6zvXwOvQO3_E#9IHjxv762%Lq?cE9QD>TL|nNycc-NoSUBsyS)rM~
z_M-&0qXbSFRlEeO>Zr2>Hbh8&KgmnjV>2Vx-8i)p*2PIk>RM7>w?4?ex>Q*lIT(;6
zDeVG;&Vj!BK`(w6{BI)Hb42<TxfnVAh+Ka}GY|`^;9?B~$mkjY0g^xi6J35QXF~Po
zPk^ipjD&0)jGAx&IV*b*CrU^UlClL_+7mv%@X3Lyfp%67w)#LjP$x3BR{HWldvySa
z6D9;G0G;hYdLOJn!VJHpL0l?808|F)+Yvq!B64t`sy`T#|BL24hwPtY|7Ffkg63cB
z`D4od|DPU4hX2N%=Z~^~w}+7tRPnro{}=4}b8Y^bpPz5||6<P{G}r$Hd;Xk@zuEKW
z8ve%5Utb_V*aN|t@F$+_2m#_I26lw%a6dmsz%l$zem<eW{hU)dIL4n$9GoU0sCx$x
zTv`4O%YU79kch6muDO-bAKm}H4<v#1x(1*YLZ)AR{SDWD83vGJV1Q%zx!3?X4!ECJ
z1(0Kd`*|sU)A-vH<v-K-383HD_=g&Q<0Jo}#@|?if2Q&CN`G6$uWJW<b_D<taem1U
zAl}i$0%%9eZ)I-q(?bXX?euL;tnICA2|*qQ1pHqf=~)BhLQHJ!>;;T<Z3&qe0TQ~u
z^9*cE0A&*cdt*CwI7XIdXT`$8LdZh@ocsHag^ix@xt)oL>1WEw#t!!^^`DMky3f+j
zxo2(A500LY4FnceR<@t%A9+^LC9<)x|2&x3pC<_9GC?vN%*?;!Kw~}2{L*G&Vf~jL
z80bM}Ja_ec{2b=z8Dtn}xS!^M6qrF>Ju5z^&qn=G54sGH^mEH|j{Ug>lz-NJPU(Ni
zgG~CV^Q-0OI6w74<39KI=a``J{`=przCdmNQR27W|IiMaLQotKvIOm>F|jlP83Y<j
z4j}KKXa5{@o^Mr#zp($a_3vKp4?Vy$g8nQhn^^K$+L`=W7Bn$51cKrcC=jWG?s0m6
zp$XhGKrBow9qcs!>i%yS{u7Z(aw@{YvcC~2XJw&l`EQVXzR3Sako;>_pV#4!<GJ?l
zkOZyS{|LzE)_?hdX8TVF{)Xf)EIdm+kMc{J9kl+x@%4Lsp4am)K>pF^FO6U4X9WF1
z$MdK^(f2!jZvVs1-{=FiJm;Qof!{4ZujH2v&o{(#>mNGLmi&=_9+~lvtNM@F`Tqoc
ztjzy{zMua8Kcers_5UUMm^c774pyLTWF|(&_Wu(W|K{cY#G(wJjDqYR-cb}3XiW6~
zD;R%9u7BVjK{vs_y2n3O`#F7H%U|pLN9h@lpw;?s*WxcpkTgi*89_gf-`M-3{L7F1
zl74oB&+GT>nSQ&?->&dk`X>%Rtv^u=DnCp8h2US7f@DBr{ehUjBk`}=XM8;$zj62%
z!v4VFvj_Ye4xf8@w&po~K7KiEMz-f@`0Lt!js0KGAS?a_ML!>q{v(S17F&NlSpVs!
z{<l8tZ=UOCSo}LQpJU@+Ve=<Sq;xHS{~^HggC6PCX&FJ=EE(xp2|3t7aSL=w&l?><
z`!kv00DN}(&rkKBO3)*^uC)m88NI)X&x1U-J!`@Neu0wD(#Rb2G5`mVw+C7%5i&5d
z!2u*q?Cd}e{wL_3-5aPQP|OCs5KsX40Q>*}fFM8!@BttU5CMn+Bmj~CDS$LU1^@~L
z00n>|Knb7>Pywg{bOCw*eSp4|xs@g8Y+<1bFaQ7nKpO{LbATbpuY>*^fdE6$TL-`h
zU<@#Ju{H);0!#pA0CRxFFNY7X1Xwy)=mBl*OpGi6RsbtYAix@64Z0<*3;@>V4tBrp
zPy;=4fGxldU}xeCurt@SGX~gM>*@mm_5gchTOcTPvH~~&94rk$9qC)y0s)QyCxA1+
z1>g#B1=?Cs{+#pYji;b{=@~F`f5n-f<=?CIYg6gp_mqOB?eEb~;LlB{^z`gJJb!LC
zO>=fpke``<3})C#RT7JLW-gSR<kXoep5m-^C=^JuDa~dSNb2z;@{W3;3o}PF2=<zg
z7o5T;h=KxXR%wA#p-kSwYGGj-X?}UZweGq#(6ZIa<A;u0+vD`zQl001!<n${@UoH7
z@wLbDj?41f><<x{g2ZEmOJk>Emy1)uHfvwE#P0=B-kU%^`KW{oc!lCG(yeXbqn*8a
z8yP(mOBT{{Gt<L+e4dFd8IBg5U_Pt){rqaUrN(e1y@rfIv?L@VOf31n{~juoEYOtv
ziHFgpOb!n(ncn5)ZFGK^xI~CDS?<k;p1}NK@?(iGWYHv=``Zkw`(wE$uTXiky1OCB
zwyEGB(<Eh@1+L;PJV1fH?%Io2lDildv(sVL+FSKOhtaZJIZlTW9$c2v_sf{t>dPDp
zj7CQTeCOK$XW&}4GNyF8n5=w}#U$gNkSW(CHcR+CpJaidOmkuKq-B4g>!%c<!z``r
zD>=_eQ&WPvfE4k=f@u&Up$i=*x%X&IdFs;Dcr7wn<=~4XCyDnIP2ua3=EZ2U+>7!i
zMNElF3)Co)snT5|&T`WWlw@;?7~(KV^Sb45St78dgDDv50t|vBB63?_nF#s5RSMrl
zm&R-e%M~sb_9RKB{+_!t27BQ&_#yw}Z9up|V0w|;c7xFjkDJ|OoGdV>+|B%o{UUXf
z<7sEu`Oew%>ONuTJ^nk7i_Z)rVU*bCB{LELUwiM1O_eT{wyGk1_-_1dR@)#u8_Y(o
z#g%RgY$LpD1NX%nt>nZ~UL}%dSf!B;m`y*2o|}f$><$M@IvC(gE24g7id6#XxC)EC
z9LG$Q1L2H16rZJ`x@a+CU1o}{@&wlvK348{nw5fZmO@<dNH`T0{r-@up%T<}5)rC_
z9dgzQ3SFG@*-msUffMcYcL!)RLg+5%B7&8zb>fgqM{#6$(!m+GWzBk8LK`<f4c9Ze
z<vhc?Gb&r!4w@sQ!H(`l!nY*>?wF{m*-n``H0)Rgv<-@iRpV}wlI45b!NPknj+EA5
z`bv9D`Vt1!-dH@dtH!p)b-v;p=89v=a8z(Iuf+zWu2&3tC8QO4zCZ%{E{3z^6vDAf
zsGCCikj2aV9X2u)B@&Cs3f{fC+Tg*`@{QeiJ9+1EO9H3FwxOP&C6qlnJL-8Yd(AQT
z_DiFhe6kP1GR0e8zpPilSl%dlZfmA749y{Lb!SxjzDMx&AFE^I)&+|TcGmcugHMjV
z`>-@Vx0MJ3x>L^I10!s#69cyB&*(&?OkA_)(Paa(5BCpBFHkDeT6*3mpExf=-3Q=m
z%Z<%QAU3VPJBSLPoG+QE7&7VrXZtKrd(p8`W3_<-@IP{+rN}9l?oj{WI5mCIn-|H$
zgUjt?DnabIoO`k<sd{*S<`|7*_!T^fGT=2&dZ)gTWLNA-C~|=}LifYX8?w&0xk!eB
z%5OH9IF1{6H(M7iT=fMRZ;{K22pV&5oPx6OFhZdlU~Qy8mcZkFi2FExS=HB}64uaP
z3B4<kx4oV%cU-#t)l^}Kb&fh>U<o4_XGNJIO^6oTh}pbbyYECI-&oOcc;AJ@wXHFE
zX27mE<fyvR-&@nVYk5&;pN6y}bTk#;Jzv27<#aG~K_{-|k7<=lPe~slviB$!g6a_@
z2qdW^O~Lq8uN<L1d=!3yEvuGZF0mJKDA!xcl+JdD{>))QfeDPyRXVgkY{28Cx$3Do
z(ZKcT)OneXwAQZi9(-MxL}|wc#&36JE2D+?m3tzgGs8_-Vt0q=7ykvN)HxY@Uw_I$
z6R(Cx5<R}NIn)#Hz7l-B)2rS%JR3NZrEp!r9c5t7E62hhhQK%BkKozrZ%h_#ADILD
zsqv;*hV!@g$i5*p)~}s9+mB!2F~ANjHLVd6tYz4TJbrj=fKv)J>*+wmUf01c%B6?t
zf|D!bgla9!24FJp(mWo>Afd*^HHjk$-5Y7t)ZERM)i7A$MK>IkX@+CueEuG)2ayAT
zlxxm!p4qyc%l|^33pp*DoFq7c4@x*QUiFL98#T9T1hX?$^e3nZh_x6&PD=q-Jp+E;
zZwtxPubM^GCrUnozZBecc4jf0!?@u|p4R2$el3rIVK3n%x%GmE12w#5$(9WgVJYj~
z?V%rh0!O%11po>^3AsQswSuL&+dbJIZ;)5rN>~V}l`pv*WiVpFcQBSve<VMK_xK~O
zZ~p;(97lT<&vaYRdq@Wsi!3lI^<b6zb^pumSZMHW6fd3td84`W9sTyGPcB`>MRcx_
z{xsVJLc(uN`^uM2T0*AvIH^p@?mQ-TJZ}i!?nQkO1&S9heQoL;u82x=Gjcc+=MpSy
z`*=^z!2NNAJt@6^bN>wff`VWR!ziJ9UQSHz6_?k>G$~FbG&h{mVvv<$mI^C34~Mm8
zd!N<#X0UVer+Sw7cty~iE~}vEJZjDQgHW%n&Ha1xr~c(+a<qM9vL;#bg|Y1;ON%}!
zvlzDgh1x5^X}e0k2?mP&S9tyo^e@i4eEml|*D@3?wBZjqx|(N;!nFDK0%(a4TNutV
zug6<Itak8!1IoP^xx6-wZ+VJ@dKDlb3MSzj)WiF^se+2PA8n;xafQz4-I`ga<V~5h
zJv^FTV{f3fo$lw5D-RYL>j_I%lNT%ctd{{xjnj6!p&PdGw3^Au@c~~@YxZ5yPKE{e
zdl3aqmX8DJ3U)If2X4WQ2-zCSiF3N$6Si2wwlwsYgq8T)kQD|UV&z{D%}Me2Ax3Io
zerT0vP=?=g=<?*(8v4O_xgSnavGO^&ZfhR<oCAZAkidvu$P??X4m_Bfu#r8(VM@9^
zb!O`Q<POQo+yE3Nj_F_v4Z_+B7Q1c*i%Q6<#?atk(Ge+L^TJ^lDX{meho;+&Rou!S
z)hTOE4weDX5$wZSaaMY+hvhLPTcwl7avZYk$1A}y{779BmPbRNe{VRyT@y&NvR$Mi
zQ}-&><6&ialvVXqTiOG!?&t~Q?UwRvk^g2UDspPhvZSt%7C70f)6Zx+y((GFM%cT{
zoS12AWl%xogsCq3Iq&P&rb@*j=1=_+z|TtdrulCXxKFTD;Sob``Vc+P(GQipsWZyo
zH7cvPWvB3{88c<0<<3xVC>aQ0%U?#%wLl@xm!wd4cNW5N6pJ;N830>SIFyVT*vxB_
zLc*0cT))WWx4ypRwX1KBFkdb#FaA>ICm~;yoZu64KOMfxbWu7e)cL0I9@$-WT%wcP
zv+2QDNQj!~pa7ctU@HJ?71s71{0qI7t8Zl6*R9PY2{Jpdv*G@dLU~@=^QnHYgJ4qX
z2POZ;$sV_PjkG!_7S}-ThJJ;B{@HFN;Y5wQRS&0_3OyEIVWFcLK@#Y$0^uB;>1&16
zDfog^qm}rD`xIs)8GxyiJpuWA@U_-z%=$Q@>9_8Jx+@KCn{`0A4<r(5bkIy=<KXz0
z7;c;^u<!#EXBK8Ii^IHSy8D0>4ow}Fx3uG11|;3vJNwK{wY97s9=fXYx&o-hyeurh
zv^MhWyv)*3EM)yt9#wupISET8J!iet?x;^07ULKw0cuBjK`WHPj+@3D%O3rvv?UZ3
zrP8I6CH>U}{l)g^*am_xJv>Y4IlSJ~2i|@^ZZ|BDv8wbdv|m~^ILfVJoO#`k^sdN|
z$L&}_B=Lym?By|Z<Ql0==?zNgwJ<P%5?v<zn!XZxWp&RD2Ny4>WwI4zppw}0d^;-l
zYC@XBOJ*JIfeI}PGuIB*e(>y~v2b=YNOOKG=n}m#EmA+^cxu|6H1nE(YWr<Ae1h&p
z%C#Y|g4Dlf1${JBfbK+_O9<%=>9+i%G>j4E)^_pq#!@v)CCdXYf1wX=W7DFAgNlJy
zK*jAOjWC7xu}QL{bT^M;DYnZFHZ>J(;jEsbiWqHPq2Ift^)NXya_R>+J%BxaEelIO
z&Zo3@!uVflJVQ#41QivV<4MnA9Kx?L!iLZo-V+FF2#VM$QRrbFKE5P-$K&qOuFGba
zNGWF5r^Qe6V^6Lb#Vxzb;b1&q0{%2NS^k8%^u`e*?DMtOkF-#@k(FtlvVCpo6AOCj
z`vncQhUysSm<5{S0koB(vKB>tJ^6l}r!4k^kseX&<d9ZHnM8k))Yn)w70Z?UnM5t0
zT*?$Sm{)Xf-@FtHY)z~km+60!XH@7$JDkK>Mw|Rjy^ZXEb}Fumk|=_+VON(-DGRoj
zsyt*4j+lHeAv*A?b91dI24ns~KNN!OQ<Z10aQ=E;XOs)zTc5N`<i`NCPsm`1M9oa@
zZU9W<p<+IAl}C&SMJ8qVlCvP`_D{*H@~06m_#fUTNOn)0!e<QLUAhNun78Sn+7)+e
zx(1IfB#5KGHi2G#f(SgbV??;Sh^swN_;w`Qf~@at=JBK_+^nWb-H29JBN7xp6U*Z%
zNnmsHZ79F_dp!F5%X8X<jE+~+ODy&p<K148Iq)oX%G9EpdWwUG+(y`H1M8s(kI+x~
zkix~r<i!(d%Y8_s^xKEYuHei>WeqwDvMQ5w>qhNw=<L0|u)gun@w=;iJKxzI!LQdL
z_WizX?@qs2Kk}B#DVix<Yu(pq6-#?CU@RlU#LHRH`>-;m#z)v=1Zy(#V601Ja4*Sg
ze-9<Q<cT;T#!J`wUEteF<n-Y9Z-~R+n1V-$S2j_RI{ZitH+cOy0(?=FPwd!n1Ml=u
z3>j+B1z$nhBzpTBp$XE6QWacucsq_sW+#5Dt83nE2ti~$7pBqpk#B|K%y>M_>M*r%
zh5(g+e~;@@UQQ1Utg)fp8_u!39=mqJ)&8Pe!AT*SjsZjvs;K7jrCY5qv6HDMs*Lh5
zbrKX7Y<orNfv6NL+Sq0@F+d$2FXW_h0@TUQtI4f6I=^Z~9xb4$wBz|&F>tEckv_8*
zGE*tg8s=iAWU7+|yM+eCtkT(jzm>9I%+-1T^K}x#mytuLTq?3pJya#DTLAf-ZFr~N
zt!~K+LW}UB<6F>3w>aC0$-Tl6H-3)@GN;e$fv;rivf`}6!Nm~{q*N&ih<BbtIHJ01
zy~zI4W)-=W<NE4h41HOsj*H<h0nQJfyfcmuchlr(Rt!|l$KtbDkFV;x(+R|)S_J4?
zPWT40mc>zJBG+W}aHv~8>lq_oONkrWw;vf~_=633gm2Z?8~WQ1H@MTytYo_10xdSZ
zA?DvA6HF7lE4#_rLYqDBmY>2rKcu7Uk5P<_h}AM_+*m}7Zq={A<vg`yv7>6B$zV<u
z*m^2jqoJ%QF2+7$MfpLnAgTA>n+$difx63=&r&M%B9Ehv{Y4Y-n60s7K@F*%({)rd
z1}Q__`P`b*5`Eeby^S(AXLo2Z72PN8c6sPkLKXUwUPnc|H~oDyB>!&K(ESR#f|6cC
zLcAh}*iz8Ln(@ixP}9jQvyklv`(-gE8{@;ydmGGc7mpX`CkR=O1ib#Cp>$&lvTOs9
z7{l{MrM(ZG?{}~u?0Uh%5XSn9U`~8<viZTe^zQCBx$f?=xqSU)V(yYg%WYgQQ9kZ;
z7M_mheF>1>B;-kFAluq8365k|nSfDUEP)TAh0h2gr`7b%3w>GNUYHhQR&_0)(Ptca
zt^UJT$$aIQCnt^^Z)mUgCP}h=mr!$BPIiq@%#?{`E3J<`Wk#60aRi|4J+su_{0WKr
zWN@M4GPh~W<XD`%sUm|rD|k1?=>x~>)K4mWo#`p%j2-rhpFekz&ednT(H!fo-hTD|
z$jKe@P6U(hqrt9KEiAMM(zpY?=_*<noo=9p#9049Dk=Ce5~K85^&qTUT6QE<p#m%;
zMl3%8RUtJEOMFu4ZQ+ZpP2-xHQx$Hd?uw3u$wA#3O*2@6011_RvSAv(v96m$%!K40
zs+q}#Gm*~xEyaT$!<Kua;xi})N1Kz(6?BG3!4bo&wLLA0+B7=gXb+S5<|*&EX#AQz
z);sXp8pf~TuqQ_MbZsx@E-~;~Xm>r5NCK?_9B%FS65Es+*v>5O^ccV6yc{xJe9|5L
zUPwK^u#0rpSaiMHca$JK3V~tCkbrE8mq?w#FBmk>((w(|;9Ist!RNrOwl1zIiNMcN
z`m#s_qD7LScs#F}1`mDZgM)FGm1;vC8>8%RHu++S-o6n(#blJY%H>cr7I3thG;eUg
zOw7g()pU+MD+}THq-<h;9MGSYVIX+Pe6OvUXlnM-uYu6%(HUTWZW7Mpu=D79+{B(I
zWYvKCw6Qcgd=fY0d3G}(TTW}t1ScV9sh?*QppBMBQTQkictdjG<3dN)^i3u-0&&J7
zIj6O|TkO3PGiU!kIetxnIV#o6>+%_)l=SVl^I{=i+?;KTa<cM^iy{UE%^NgZJe*CF
zv@nU1sx`XL+0uqN3avvtLotY}M1|V)t9LTlbJ@Pb)trdj$0Ep|SU46GVJo`4O>C(i
zQIo)KVI+F3tT=c|Y*a4kVNj3oKJ@)Jd~QV<WrYZ;ma&e#ey|SFi;^VNTgA@~KZs0s
zjZ|?ETiqE;am6qWeBM9VNlMG>7fiX$Hh&#npkJ#Giu9wiMA1Y>CGl!&iQ<7li9xsL
zj)>Cf%b?3IeGIN`L?wysa{~YTXzz?b;?;D+MZ1ejK1du1w~qol(P^9QIv}LoZp$E>
ze5>(M4$C@|I{V4qN%_eH*w6-U8Afsqe(fZbdUSlmGX+>Y->i7p=c&9FawmTxW;0Oj
zRW}}taKH0K@R551PU@7gNZjQVo@&_R@s;+v%TIgQmffAmPk+lphX2L`7pdR>VgioT
zcF$`UxpFmll|ifj9IvzXh!?UmHVN1r4n>LK2p8^2%b{mgW@1|HK&*7PPn5`K#QJHF
zOh~uBk5_@Up0uvHd1}f*_W^~*)h>~hkslu;AD%+(#435H4~c?M6=2UGD+om+2-WKG
zRfM26iTW&teANjnRIVbF%3bVHXUNG^Hw$yHnMVuT9n5O=V~gX}+Y1)Ax3yjitw}2H
zKi4v>>X>VrU{%NU<#k~AgsunIhiC{m+xHf?_-KBNZx6Z4ltFmMudf}XN|D>wPXe92
z!GGU#zp@T6J`ZIRbSLtRZf1yk!kB~4+Urn;p=}l4bq5Qtc`|F;<a*5;+iEe|EV=2U
ztn>N{@yq>HHA~d_H)u^{j!t_TwQ(2o$iaHfos9&+4hWD>i9us)n=^sL?6pgc+-#Iw
zL`>9BRX><9brZmA5eAFethdALsM9G4K5VX%oE5aLzTNiFTm%oD_J+aK9?-F-#1M^1
z7Bl-?m)ls^uc_s$(m*?<&G3yOVP?FR$ItLamY>|a{nH9uEzEEy2}6aCh?FFG>CkY7
zq2Z}HpR)Gj!BMo?F6yyY**#?F6`n|BSWIAGfiQWw-oozHfUx=spGTqm#2eK#rD&0+
zMZ%$@*#}SRY@cA1)RFv?(11^eHTRbzEt&9!rQoh#E=oeb#O^;<=D575N{sZkT7HAh
zLar6v;hsDiJ%&CcW>rf*35}mr`2nj^vaAX(B07*j-1-}lQgUvD=MUdrf>p%z0OO>w
z3a)5t!RYPbO8=>v@rrU>GxnQDzY32L$!pa*tNEh>6rVA|ZA|u-cG!v2(35rN?{CL*
z6|C=@W|9x7D>1d2JcsK!mQ}zpxWjc2^E+z?2=nuht#{c=b4B@5<D=rk2+mvx(N9O*
zsmPW_D3RvBYek8jXx@?DUlW|Wo=F?JcztsA#GG$Gf`glnk5TZTkid6mZzaR3itZ~e
ze21CS>JK~_1ki8wZMW&jHuIZ=QmZOavA^@6zP}b-rxmiG&p?~UWgrmv=+nZYE~k9h
z^;X%u=Pk;W;pwN9SPLodv6Ux@)r-YFX$HJcYK4)B1pdj|o=8kcRqW6N8|5r*;h1{J
z0$)8HJ}3%A5a+zzVRijT7q3YHD5EH$tU`5yRg(79u_gi=!TEwb12$m+QJDNLVHN|W
zTns^~Y<a#>(6WzO5+JF+mS&SipR>2<g?&BAd_pw!%AkNN9qP6)LJk=@O4)^5SoR6x
zMuJi7c|X#>{y#Uv^T+*vLcRP4Ciy4#LJ#6km^ld9S(ymgm^uC%=7pK#UznHY;$O_m
zbLqclUO?Nq{t5H)0mQldVqBit7Nwsoi=M76K+jfJ-wbGP4m7m?Bma}Q{7J$5NxnRj
zLH`T#<xj@td8^pZuC1SQzdHU+!~DgO{>8!kL-ysraxXtO)clQmc`pC2xfd2@dgi}#
zFDgzd@=k5<8LWrLs1)@`WIxU7T9~CxQI%EXtQND+it|Oae8tBi@g|A7k9ox}!v99s
z3c;<>8E>_8TFpqkNOLBlq0Hj=0dJY0W#nDQ@=nW$$C386_xq1_ww^mb9z0t!z##0B
zeHq?_-GT)dRjHcYLl()J46m$YComLl*%c-xz4)H*m66aa_vQ9Y(g@_a=3b(kxov@#
z7NncD-)DFR%$NED-Z}#~-ku#+<ysH*iG(eLObk3kZe87%IILwsbSkGa@#xD{s==ow
z)LI2zz2TB5xdq+%Kmsv|@Zml+2Dc-)w%ME1xWd7w+Xk<9hfmk;2%YsuVn29S<B!rl
zlT&jUd0A>Hc-nUa`!WRTA@_8VliWd*6hP*cyXNc+SsyO+OqYghwDEm8O_ThzqFIIB
zsnvm`U!f;lIYX~)PP!dg_7%L6mj=cS9=@Bu61h@l5FWnsOI6*hr8!<bw0h)W*Ol&%
zD&#83S;IkSt{{sJBwZ3#OtY?S-Gxd8bFg|myH2fdj(VZ=P6uzgzhdZ{o5OB<Gtkp*
zi;jTXfp)LEArR@?4o`FF53(guZ3F0T=}^l{H1##DR>%C{b%`meKYn?4?fcm)<GP>w
z_RD*1m``o4o*VaGbcLEHE$Zp&Pod{pxNfHn{^}S<>V@jgrqRdQXF@v|9@V>SPWf(O
zZY|BeTm9oz<#bnSi*3$9Ens^~`5Pbc0ubZ?3s@6;4hJwTUl`Zu#%0;qUD!jCqw#qw
z#D&&OEqM@1-hMr&ImGaY@8~D+wbRT(B+#%BWixyMi)jEC>dS1vQ%YzEr%Q_Sx)L#_
zaA+!=3d%9W!~1j&?IK-on$8=Rm0JN&4Gs<K7BrEAm|)49ZXz}}B3$KnCs0ID8i&^T
z1_#A3N|o72M1|L#z{O^!3T@51<%_T%KW1tM1w4kGzn`qtcna8@;p@QD=!8++X!L-D
z7|V%$Uclwx5t3#G-&D;t;aZ2Q8q;A%x?J+seA?z93V%(F%$}-P+kx^o2<w8@hMqAX
z0aQUpkTv1wcXcdFXS$b-b*<G!=>`w;i#m1)wElEBWTR5}d)>Nk?gAcA-^g=*Bia9+
zcQC!{E6%55IT(Df>9f23@DU+4sp-bL9SRQCLO|6e+);2q_W>^X4u=RQ(Z_;FwuFUb
z3C#tkt}1-&k+$?M0rqmzhV^W=68m)Yte_;5%l_#Uxi>J?VI`;Qo*&H3)Rx5+b`9l+
zWA`@}#LY9PjqHV0)U&{<5+`T-mKc=12C$b)R@=-UplU*OBFyN@2hl~(c~M^NcLh|Y
zjE3a2qnb-{ys7-5bHMp=J8GAGGkc33x9O4b>K3TQcL=@wL#_e59QmYy;254g_Kfx;
z9m(PoT8#Bp-sxfzn3i(2q|9~J`JpV8M7)!%W#ZDYWJfAFK1~T&UUgP6#!6AVl4*IY
zHAF|hv@LUgU_u9Gt1q23sYc_EPYw5PYru(bkzw-a=-IO9d3(`O$SgPtAq^sBJ>%ZT
z@_r;tz7L8q2>)8AK;FEOt$%QojAu+2iSD!QcX+|Mx3jy-!M7mpF*k7YfaNdnvc?tm
zpo<9haktg=wA<jAZI%4QVqV}0-tGMd1ZY>-s6qw;uiQe4N3(kZkvuL%l8c=38ZK(;
zfYv5DG43I^H|&jAgb0}~W9rLX*fHDGOOU;&a;{01C$NZXWscnsl=-@_3bQ93oU-w*
zF@79^Goy3$wy|QC+jHMA;?bid>r?8FG~D#!2z#jGo~-=Db}~=_r+`fAvg}h+FoPOV
zv_4^1e!NnJyWU;P$F$}40pHQdo|{{&*nS^kRx~5jY7740f)qh&U9$4S(fx&55)CQk
zqI&USwwNJjO7|&;d|HAh1t8_5OEgn6>`=4q91=R>{t>5Mpq5<TZJeKpHR-8;zM7s(
zBu@~vRn&aZQ25bKIseE4zI~)s$ESnWH!&p$%IGCx@w~8`oXJGZ#0ybSy%wGwT92CK
ztq42PBx!>sec+Ufy#{=}>3*$7bKEFuR$bxoK+Yy&r64So$?)MKN_BOyg8_W4PmLa|
zB|j>CBP;iPux(I{w~!p`BQ*C!=0|(&eACWsOg%9-uFz1GWcUtdh=P@iFR9Xx6DGeg
zXGvt)w~7`il_|%13GbZJ;`NY^T(E>Yox=@rU}b0HwuhrOXl-;pYQyeONy;2Kc9Y9n
zkDx8J)|jK?=gTV?OGTdu*UE}$(AM?xQ3U5gzA7Ynt?DWj!i*lp(DzQj{RXCmj!3Gg
zgk;|OHCB*CfdJ3pVTGl|79w)9C29Yp(IL|LXR0F_$o!pItSIO0&B_{w#sVq1yjF2J
zVVI?NC0kYLr2<Ch!GI?rMy}jy+Pq<4^lXuZ<I8wH<&Yb_FC~*?(6_wh35mTcycok`
z#&SyWN?@p%lPTfkm$``kLBTwAvOHJVsgW<)IrFr#0QqfbuJPr$5@pa^?Z$PNU%O7|
z3Lca`R|!bhXf0~@EM`ZdpuP(cgL(yC#VDT83I?>TZ#Q3i^P;^U3ej+b@~wwRZqhDo
zmB=CA%V5eHjYfQbyXB9Hr15)VGJQ~&+aa;Q3(X(j1aq4BmtTP=W)ZL_#D#pd)p>!A
zAx_;g2{-H{Vi-DA6!y^!@}>Oci_MM<jyeHX-!vW{{9%+^(l*$TiA~Q_2KNm+Y}?7K
z$XWhi1=5!W_1UI=$iA@j<))ZyTkH`tcwn0;nz}r54la_CmsbId;e7g=C6Xy{Iwb1N
z*e{1`^P$d=P>hGNe6lyHI9y@`qXctCj7ZM<dvzXe(D4Vb4GM>FG^Qc;Xvu%<iW@KK
zvx+G8+2$q3T&!#GlEJtJ+yecs&O``OxkPvp3!KamW<NvX*Q`+zR&W9#X#<E-d#pV*
z&6>;9d+M^n^|A#tiy&VU#%~+s7sieIeEp&aFTAK?pqRMjL{)5pRHHh;Rck*W6(lJL
zT}XGpefQ2a+}C<D8Jkv_B;K~mIxk!#7OS+|)=csLwDuj~aCKY%x*!N5LW0qWHVren
z=)HHM_uhN&oe-k;=tPj{T_T815WV*nf@uFq-uK@7=FPqL`~J`KooAkTjx}rVwa(sa
zpE2v~-*55V5_li+)aJ>QC?lhj+-H<}K3>x|EZSlpb98in;4%&Cv&?Nw#i*$CXjCUo
zgGEmzb)HTcCb9oxAhGC?S!qO4Nx=}+25APWUI>mGudYik7Zo&)WOdZ94>Ui?GE}wU
zQV88ee@1H<N_luU*4%sve!*iC+4wX_bg_FCOqMtynnxJ(My10Kr;Y|CnYm1=Gy_;%
zM;hkhEIUG&S6CpXMimSjwP)GViV>QBphb?^EtupZ@sfIQ;8V)5w6@5YctCZI3|epb
z)zv`3;J}i$5y@g7j(6J7!dur==JXRC29|w=%Dw1yOqp%s`YiHR9{zs(_#JQlpzZ?_
zTfhC+eMZa|Yj9$Vx=xICo02N4=K9O=<k#`d=jOiV1^Vpn*&@5*R#Z;TIgMi-RyO5U
zJ1=SHZW<P=SWTi8>V{s{dig}fbUGw~@`b6THX=KZkJzOKz~n8tb_ClgI3Zbbtx1yv
zU;4XGw-+QViIMwF<r>tMhDGLFGqDOKRq4NcBPsEGL9AACFi?3#9(AhRwOjkXq|hdM
zk^vY;Pq~HGq>ztB2OWqUF!J8!mc11hjd*h{ms>VW=8qNMLhk{ktY9!~8vVpzZb3as
zt$u>7<?Tjf{A{--dwYoz&?mK2>Y!fx9sG##zEXqC%M>bk)Yatnp~a`0j_do^UyI@}
zj<zyWrlT^@n|N@1&ANkL2$1ixXr{&ay?TRv%AUBXZ5S%M)|5wnaSkkgLIIN+e0(Lq
ztS1LcNvv!Mwd_7^)3%}@mE6eT54F&Zw+9x#TT*j9k6p3A^rwW)XStT-$d44ZN_8^3
zAK`j<nW~qrX!ro{po`-e62*xXd7;V^9_?F)cH^JXQ*m|+<1c-&{@Rr_&%B6jPN>24
z>3MR{cX`Zw%;j;{aL7{jnD%rpC98N<UO0#D&fw({gLiAh1z9}sK3fsFV)u}RJPQ2<
zKc$^RIfij_|HFsO_O#jfJ36StIE&%V^0xMhuYeF99xAFlz@5ja1a(K5R7R3*D7|Py
zGrnZpqTledE$WeaH}Y<zNTMx`uEchRRX6CHC2&TJb;b39RI}9j%LZTfTA7PhRoFO-
zynXx)OD?W=(M;t22djAozQi^`E{9XOhJh~@>J^-w%IuIJFWP3Tx$tS+CbTM!t^!}-
zNBMi4_xa3ijFcqrht0KR_M#K|WPyqT6BU_&#z>BPYzHp<tkqnJ=cJkq9!i=PSX^A<
zO!*f)A6OpseZ?M>Kyff0M*Q?Y;Ik$r+c<TZbPnLRKiyoc1b4G-pl!dA$swC+l7FiP
zliC^Q9>&42&a9ZTd7HS%Vy@01)rh!(YWD3b@~UK^uD+WKIcnuGjNcJ!`<5V<XtM}i
zK+1l@@I@}x<?S8iG7lH5^*i=~CnU6wc^>+#h|fEv={RN`ZQbV;LDe-j!c0>U`@}$d
zm*FOy|G<Ox$<85&qFJQ)1Z#9)8Hs>vPEyT8i=0($)n4?-;YJ3W`%Q`Xl4;YoaO#ep
zaJ8na-!sX(F)rhGhe>nbzFd?c1eOQXso9aOOaVEWC_cO0kh8F%`OIT|ADKsd4Y&(-
z3NJI}F$n2AYuVaWWvY@z%|_HvY{$yq5fW|diXOKV((Xuaf?KjOvocvFta>eW%+1a1
zhHNEP#<HZBd#jbrfg}4jABh+*CW1~m*W`oPNz7P>m=YvI`d0-t=*t0`bE*yw#FG7a
zf(1Y(R;oe(Hd@e`_*HIy0uN|~A<alOBvdC}avz`XTSsURNscxn`=bLvtV&#1f03M3
z$s1NkP}*~D^lMs&1$~EGu!QgR<{3LmCCwoD4RcDKSUdW0r^3O+Nbc2nV)Ni?Y4kQt
zZHrSrK=-@6@Llr)Spy03FE!=EdAZkOJsyFa0jHf9-GFp^y4ihhCv^3^y-Hbk8sqWL
zf=|V>vYC1~(xX<jGkEx=c(doVcvhmAUO8Z~)Gm3<Ft&`BZ>>G0M5z=E>sRr7(VC=9
z^_e*!lI4k#l*fhPOVcizQzjS1jbXBf-4=EsQ9069r!E|<;UDNk+TQD+U<)ZK<`%@u
zG1xw~WLC_JN_a(l5z$aGxTRf3Uoke5j@@+uX$Yn-t{qS3Y#z)7-++3`^-xSWXT{me
z#&u{*4z}>a!k3Nbq3X#*rWK;nWjgAG!E)%N!So8$aE+&f;Q132?otZpQ5_Y2-`oN<
zJT$=qiIi7)st_4GE!;NgM(tT7YaRV6u*=rn_VPMQ3pceC`Hb9{`9rbdRMM3x`<Ifk
z&H~_c`LRH#t~ggXWY8Uq?vt@FD3M^%C0t8gW9lEwfR$5L3?)l{6lNud;#fcxAZGa_
z_giBBRpw5%4b4?RftKtB1?mWBR@DnTKE-nE-LWEXE`OfN`ID`5G)`*a6zlkDK>-pm
zBKv0pYkRF!q^$wXfzlBb0RWT&5?emO`FtANd*lv583dn?d6(b56j}0Ckt@E&p+l~j
z74^B|LEYaoyWy!z_o?wZ!LFCdlHH7x=<Sn}vF$y8BwN+3@dn``kpr0fUi3%?p0~ry
zo~QbL8iZX3W66){FAyiEk-80dDR(~cUq`8}KdY!x#|wS88qJ_x3O~>zf{h-S&Lz#E
zwgn25$7xs9>h9Ukrsjw)Vawcx3%PVUe-nqyTzBiqhb+mz^fBkU+)s^NpRbm0<-Wl2
zcS6>Ad^W~2lqYWnMRSuB%^335BARjK+=CpTRRyVI^NrybQp!YpJ$9K4p5&5GPb1Y^
zFzY<p65Tbuf4e~&Z8tANYe~l$6O=J8V%{{cZoBt&K%`|B*C>rtK)$0(c|gt*a`~V!
zuI#M85Sgs;%hrj6dBdv|9N(khbF9sY89~B{due=q%R!~LtwOdFvw++fqzC$AlNKM~
zbl-_0S4Yj;MIVJa$l7VP<<4;P4uh~~1S@LcxomUWNx`1lE-UutJKxA#Nezy!#?3V|
zj(r^Q_c2bTnl|0s>RT6rT&_T#7k+V}A4-dg#;l;+MP1yL5c2@nR43k#f%O|J7iE}-
zc4w)4y+N5+D@6>7-s?np;>vWB?-TuOsi7ain$O=)10OoajNo$&_-cIo7LaCjLVE)4
zHJ%NXq1QRV;o*Ql;1%$imYTwnd`Ldsi-U2xK}`(RK-g{#q)&kXBBAwaPWz#(z|);L
z8S?@~0;D_<hojb;>hPB#JsGwlS;q%4yeS;Wg8@rqA3jFl_&Cpm;z&HKqiBuhbuT2{
zEm53#-<>zrOPtOneuEhu5Rq>`NOZ$;D#Kndk{}UeJ5M-e+w~4LSJNr2z?VAG#eBh2
zJx$75R&0iBBE9>g_l#4CPw;c{LF~Bst8fpZttrZD<$6jt{%!sV_Y~wdug(IrLps-7
zszLQvu+pVG!^gHk^9#ItZTJ+9ejW!MWyl?HhGqAU5zEH8ZY`0J!?;A<cgPoOqHU~S
zVk^G9Nr?Lf&{JosbAF48x82mgf0!s<?PeYmV6|xUjn-U+>w#|n{#Q(|Ubk!fUBXq;
z^kw&2at`dRMe5{L`nwymt+&M{htS(`{jX^CSnoxR0taV9z59>2wcKnoE%*7_PH?hu
ztb}PoJ{~ozAn(QFf02Trx`{VcA|K}`tY9wpV5O2?seB)uFW(SCt8A3Jj&XI$$A2eq
zsLxlZloQ_a{5Yn2<P)jhXVll2E%L8@eUKLXLi2q-PfG*{qhF0&2yjZWyKE7lD!og!
z7dRz-6uQVEST&)3;?u<hj{F*#<ZLQd4KoBZh~Yv7KdB~{FgJcD4iV;+=#HU8DeIjG
zbF=LyB7LOf@lh83%32Vcc64B>y8JTkpf-!=10{Jy8`^#l&xMhJ8IAZA*+}#EY3DCu
z4bdRatj;%fsYweba-5xOtrwKR0P9PFVAR_C)|NhIuv+$G?@85}53JtDsF?)Q&$4qH
z5<DU`D1DiAWEmvy+L}`-LbuKQT;AibK6Nt0+w)~O^s3+25lx?aUsbga&2%Qr_Wjmv
z@s9H>>db8+Brpzj-|IC+yFsM>tz)a%y;*8XFZtHkhX;Gww+6a1lsoR_cK3{|Y-h3x
z?f7Rg9bmT|;%$5qyfF{FKQOz;TwB;H^Byt?M2DZ-i}!XXJ~|CbEb=JFG^2RUCD$Dn
z5VhL9xmc&&mEeVEk}>tD!zockQRoFQ5Bnhf>^y}3`syOCZ=JpU^(~6xHD}WA`SBm{
zi~mh}{6B$P{=g=HprAie<ZuK);V&t2E(DO^ALxW%bL5<yu>Y1LX9XcZ34h`f5V*^K
zlO@;q6XpPgg8w5}L6TkiKY$hffGYe*qW=S~@B^rT04V$dOR)S2OZb68Kp+tQOFsN3
z5aAaP!oP<e{DM0836=ay=KC)Y;r}1h0Vm{_%(sWL@<b~?6%<Z=zW{^qXuVyPfV2mh
z;6T;X*pewpDOHPmB$d-<#x(0gCfs6%-eL@%sl6%4#0t2dijIs^td2(9!hhi8zRmA)
zHh1P)YNfm2c~JGPv2jw9VPn_n+rg#p!r3)m&`aJ3ec;2fWw6s2c8WC{cT!?1A%Asv
zR##4TmdI^H#5&bZ)fGq;?Nhdte~Apx#c^?~h|qLYUI4l2Ro8RUZexs<I@Y6k^d`4`
z4}+1so}Jj$D74ftNaT9!$?~!KI(^jo%}xL8sYOU?*w^*J512g`aPecOvE#@*h*M%n
zh?5(|N4_Mkvv(V}N8@b|E^k@o?{!CVcv!_X*Rc6rV|2Xllojp#)I%5cHksazsL-0E
zNUW%57nV^CaZ*>C-Oo6m<tuy8tgrb7>X7QpCUlh=PL)OFdao?pEJ9-$ZpdF9<(?Hz
z^Wa`ngu5YCb(jQTk}xX5E!?G>(2%`4OG9dxhVx#3cuaRxx8t&nA>;^L9pWA`CDkld
z4tPscMKIDWWr%n55ERl&M;)=%ZE1+%;IDtL%HU!6M-gshQj=&(h6wsOvj^a|%<{}D
zQ4!PbI2OJg@wW*+FT8`UE{%?vzP_6E_WrOUtE?`6D!U>N5pBIk8h*8LlC-rj@X*un
zGm&3<gVB1MIGvaa|HW?NGDDSpqiG9wnYr3+dG++|qTKS}N^AGr`?(K%cWe@%XhJV%
zMTfA#n^C@la$$q4Z7spA1FZVFHx4U$_v8y@Mh<C#?}y~<%^&9=t9;=Nh$VQ~5pq!u
zNV8GY9vAFFwE&;0kuwFDeuLqEhuKq=!(yLMQ(NSF0$C+$<UR%S<*&<|io1+S9)bq<
zWw8s<;w>xsSKg|pxG2&9;nbzmibhox-laTk{4P6h%}<VNuFedyM#!q}lRZl~q}^3s
z$0lb)=B^nmXUGRX$fcwa(+oPKlixeqA!+62n8lUI7H3l0d;^86P<!%G_fahvC6#4K
zl_k~UL($r9{3+)hajs4JWjx7gzj+JrY(qY=OnnUOr#iy&zH*g2TYk1}n$ytCDk3(A
zplsvz%=&J6ZPC3%Qx)u@saJyTA!vEe9B1U@$h?wKt?Wx7bv}QPse7gq`pKifv}X>&
zgyA#<)uxb0UfS}zs!7@9m*ILN2ewC9?NPCvNFOw{_jxgT<r~4DcUgE}sz{h5?@u%v
zQ#mvwah!~jiH-S8xo2Y?jC_Gh0#s93yg6OT4TC&ZnKzaxb(==LZ+LHKCbBLU@h&WO
zd$C*dUXD>pEi}-3b#$<*czUM+u;MSB8V7x+t}cdUx2GiZoCMmVvXO;6S$f@}-_SNP
z-kaX-o)fK`HBX|NXHBx^)PH$-WgQ`EFrv}@AXRp4nES*e2W7loYx`iDS1qMy{)&%;
zBEZFl&sJTUZYa)>Za2{rsadONq!O7d-cP?DVxCqnQj`#R|HCQrbo^q#8_IJ*;f9sK
z#1k4^9!Kj`bN`#lC<k0Q)7VdiW3V}UJrR&JjpCM+KN(|1PppVtBm^g(5vM2jy7(Sz
z02=k;b4r2z+Y4zaorbHmsoBrS_@H;OotlS7iS{!s^2Le5DZ-!I)fdP2!6Gs$Z_<2A
zvxVeupL@jmW+|JM)S;~jcA`e!6(JX!%_F8OEBvB@X&gxlq2H&X^lF>Z)h4YcY8K|`
zExYUDAN+Mm=^Vp*?b-6;ch<`{dU1tmZSP<#oJj7Ri4(nCHN#2<XeTS%>7_XBa<7@}
zL`S~~gDxG<kd7rHs@~=k4O)^Grd4KBl5svyFxn!TH5$eTBx0EvJY?H>;xGct$F2($
z0861{TAx2WFFf6Eu(OM8mqdC_s}rFikQ?JY-WRCtrjK`_!>5mSxBm-v7&z^1U>gc_
z>z<+QOf8M6>ORDuS7F<x+#U@zr5L#NW$SV;y1KX8Bf}vx*hO*!M}WjFvekLHVL6k`
z=DeXc(+8_EzW&UP=^pKi!_l5}6+2`{1Vf#V$A$j2a4GJaYt!s$e0PQcDyNqD!WEBN
zHP(Hp1j$?yjMLd2g(q){DikbI9(iEL+YAErg20tEl>@F6>L)#N9?`Qb98o1?L~586
zrmIdu7#W;9P;cg8uVvd04X-AV?2(%~avh`Qz5@W-SE@Fwg&g9M$AuT@DvnB0<+P%%
zFTF6<$ttYYEXTCa<p(P3zOdQ~PO24)fRSj^i&f15hEEqZ?T%VKmV9>T%F7xZ=Wcfw
zA6D2FVSN6wWcFc3<k>I^@1&#pHJwK99_K`wRR?Gh>~)tvMmm;@3B=?KN9H@jONx4o
zneyn<CObXFd^SX5YZsmO{IlGJ8tZVnYLX_djHzr)L=+bjex&7Qk4s@kYP`c`cjmNW
zG8-&gIq+HRVGS>G(;QB7PT#%mwB-DXuZT@}`+DwYgVoD7*Bd3ZLXymP681Pc2FF;p
z{8(2mH5KJCsfekJN=&$e?w@7MXl=K<HKK#d+y~RHCGE^U)1L0VilsvX3sQIhxELJN
zZ4bBz`Cnxhr&H|cXM`rcG{Q2%fh#rDE0p(P@)GZJ=X$l>`ty*w%`HV#_AiV#8`x92
zJXvzR5k7?1tNOh2yYt>2b;Em2eXl;TjBXdgjr63JEeKT`>7J!i)Mw%<u3}>BT%fGO
zJ@#(ROR5aqBK!^pf$vFV51YrGadptmzG~y0qqF7GRQL791XuJ?om)LZ#TzMu+r54&
zpjD1^dz3++E@uX{a=sdOd&^*4hE7(2#~48Rl11!Tc#``*xa1Q?erQqO=sFUyrVfn-
z_Xx%J?_j<CnI>841f(pjjndah`qj$WU6=%Cng)`vM4*H`){`K}<$fpE!Kc{1Tzmtr
z$OV=}Bd$@hjAsl;6Yq-S7PrDV%IC}jl<e*KNQpHb*KkpJ#p)=p*C40&i17v9n$*7U
z8+CEe%8H&d!pM<104{;e1GMyt2W7<l){`qo){qENpV4hMd#vl$KYDY~5FX!(8*DuO
zHsgsyzrM|>fbAj8QqY15>1F)L(9D(+x6mE53X?2XSZ3^!TBaLZywAQRAox1#eHpsA
z|F}lp$J=}@kx?EIq3;~l%W>I;lls+Pm!BOPt|vz@r+9F=k9-BB4b*JT;>P*<f4vP_
zfX}+4Kc@SFo#q&2d~6t@tVp+{&iI%t2j%izj^xhds<Bg@eb#>MRo8P$e^uNQL95A!
zbfJ5ZEPSMDhkzF9@Cz9~FGtsLTmfI>;ZY0MG@YL2<8ma=nbz(b@aHtk3HL)UG_pop
zSaZi<GDNSPq~X(MGRK0YGji6WB#$(1BzxE%-Z?|P<NZM-^<Fgtn@Xg%7qhwF`p<n!
zl(Fsum>?9N#HviXvg@A>+-(^t82Jj46_2K5^i!H&6m4-AwQyuw*N=U;hM~`2{%P`&
z|7ZbJ7S=J`3TP>CHC^PFspsRd^p^`sgo(!*n=wyVwvTOQRO(ae@ZDL+vo?89Hj!WF
zkY6X3@0k6Hr-~ly5iUNfkoIu@qgZ;qi<~y{!SjqKzH<f0DBx0Pl@7snNtG|OPu#9u
zI|EPIhN>5-iY|vKeKKAV^&%v7xfvc7l1sGF*e2kcx()ZstKhOm@Ann<VIgNGB9zcr
zGmV?JVB<<j&A>?i`04{4d-Rv<QP)~`isVN31$*T~J|5RuF)Xi6=<$t2(8CtrFtVtZ
zJwx;BN<2c$hgv$7WMyO9ZyMP<l-M#tm39)DA%aZ!5+-TZ`4o(w9En=#g6$l(t;I1$
zwA^EHhT4}EWHaB*4|WwOWrf8Jf;KPWKaLcia@XZCs^=;pkt(R03yZP8PO}N5Ok(i2
zTYP5bM{JK0H<Hi(xlx8f5QEu=qs~yz!0`K0!z0Eu&1n~td(5%~y_44Llc`9<>AOn%
z)!>xEyG2q(jo??LvKy_j6wHIH#7xNYm@1qvl=qdU$NgCnB&D%S=_)GLvT(Xol)Y@E
z52hbLUuahsJ)Oab4SfIotDYQ^uK3VH!{OPXm-eGm)`RGYU3Y>7ZImpdWVjP2qi-8F
zw;Ys%19Y7k+|bwp%NDiHM=`y^7Uo|wkjiQe37{Lz<|5aN9W2rpe?769pp_Bj$XJQd
zMC{E<eN>YvB`^Kt{niul?TV)1V>_Sx@uMbGarv9%%EryM6$)?uXmc95s9T&@3oV(h
zZ-%;L=?0@+E~X=%J`06uo`C`CII}UfUNJSH*k>&VDn_RvSoahh<8SbrcgrbW#rY;H
z+d64C=a8sK2R5ZoW{7D5a3yL9HMbH@@@TL<sufBSj7UePlWZ*-`f`y96j&ZS7!TK~
zTr599nZ+a>cY*Oa<J?VP4Gf*7j!<EAC<}D-ts5<TKlSRd?^o564MGXWLcQHU=0bny
zYZ+4-AW{rmm!xVmeN9ZWzQUEU$-Fdl<QS>c7PJ&6;I!;ofPIGIXlA-lF~r@*>y~9{
zyH&D{Y^+--mdmw;YbnLdWuWu%X?8jP{c>9}ncZ+PoDm%;WlR0}Tz!@JQ0;6>xX*Ui
zg4c>b7vjI~kk*IlJtL)eYBf8_I47Bf2!<aPa3_4!S0SYpqjQ^wrGAaBHIBm*pK5Ve
zs!mBV!abeYAy>7>ZVB*mXcnMu&np_)ATZ;VCe)*z%j-$u{63wYK{QABTFqU{FYyZw
z-Uly=W}f*{GS5?VjAr-b3#{gDEWC?mh5;DCo8dKw(fn`fDlq#ymS{G|9nDJ_t{xCT
zSe)DGc;AyKY2#z17}-4)1<p)W%;*BGlEgdrv*uZRmnAGjt<iVG793lO(=&snmI$ym
zf)Y=NTp&L9ORgDsQd{?D9UQ)>kbwZIWNr;@#By8yi6xD3LGOk-XkMm!C54@8*A~3=
znOp@28Ui4XOpYSV>D0#<j*AR;GDFmI$jz6&XBCuvj(g|hmZ?PlvLJ`CTmo59cp-KE
zOVPPG-If2C;qi;WE{)#dWwYUJ6H?I_KEFqyak`iOl$QIIc&VLAbhz7H{sYlcWc_%;
zZ{$14M%0Vj4RYEmRINGFs#p2B_=BR9EQHZKRXfR`XloNCn@30L4Hlb{F^1HJ2Ik+U
z9J;Xsu(gLZQ8iDV*s9>(kHZ&Jsa~vsZid$E#`eD;8ifc7XnrvFxg%W#TB?fg(0oTD
z{yaR<-1D<$cHQWlSjeuu!KWd&cGPEjwktfFnzfHBM55GMns(+tHMJbHeGvDsCoNiu
z!avADF_tZ?1s0vy%dx%4N}%_wgFWsM-8&KZLQ3MB_xY;3ATFA9tsJRed0vCZZwv1}
z*02$6+NC*ibYRILKqjo`Su4(<_BoCxHqG;%3wK6WEb4Fh7uv}R4t^1Gy7;}H@pSy7
z?Lrp=qwq_dvUPYpd04QPj=r07?Y1W@T+t8>eu(fB(JsM2hXq8gUXCOkwcRiWq`fBe
zI^i6~YF2Zb9)Z|%y;D@T+eY<6{fz2U(KUyFAbYL0RqzKPwteH^RK~5rton4RcE5^G
z2wCL!rsI4IVim<C#BuB{N!t?)=A#`Vm=sOY!4aqmIQsC!%B*qd?Ltr#o3Rg+XFJ;&
z?;3?6%>>P}?0u@<3)SS%k}jQ__2+yX4I4Pc<V<;l3U^j*MeD3P9(a5E&${m|p4qQo
zpHV!UUuY{%$lhc<M5Wv+vnqeB6)^q&>}9hlJ0Rcpe0xWJA3Yjbmz856@;mXIXdLW;
z^}{LffQeY!P0B!}ck}H2R1(+1l;4R|3uLisU0v<;?b1EUQ;3e>(2}z{$-Y3j#FI}2
z!5`tBGJ>zLgoE^AyuDw1Ur`U4kF!4OOwM|6Q+oLJDd<SGLwEgD4?E*kT3aOrI<B$2
zukv>CsrK+yp*QSB>==)saY>^F3-Yd*bY`IxRsk=dtATaM8r*x*vt;@bvLEr#<g~qz
zn4FJ9-p~13i2>k4jNO3z0SAjXOlj52VPEAi?+G@_^I?0lu`Zmeh4(QBz$v<yO6pe`
zBHEHUCnrkg%k#Lk>aKNlT<YYgsH>l?<Z_FE!Gvnrg9dD4ji++xgKx2Ya=*FdPX)wK
z?{0_*cr|I8eMn-gNq*sy9b_?E<_RO8i}A<ND9*UShU9ckAbweTjV*W@SfO}6EvTMC
zSAnVFk1n8*3g^o(`m@9Wq>B_wx(!RPn@Yr198;#RDxdTznpBHvOlNl~=ASl<DjAg$
zd|uV9`4BEn9-~;!JQv1kPX}t`Re1X9Qd$e6NozmuFls9?<BHHg&eg@i$w*hXxS<#%
z5FJsRNMVPM53dmjljqGKuX{e21A+0mH?kXkjGXYKiboBpn35HnJH2lPcU<SKF<rrF
z^6?;ftAr<<169~2xumr{U7U|Zi5IDijne%(^DX_hy(VX(i@n-3?<osWCAXdCJu|87
zTt%O!vjtW?5W34H)ZWG?yx*7A$B)IgrL3(}E@NB#%0-`PbX5`8*Oc2O)&m#|ZFgG$
zsGsTwgH1h|KbY%M#e6nSKa5RhAz)K0)}d3`!byr4=Z3~doQp~_`4<gO>$*lw?B`_I
zmZ8>vBui*3mSB0pJIe+;I_zZhE)4VYi$3*xL335TmM-^xs`hYmdVo7PS&ej1Fpm$3
zB;9>;`UpePJJ+~|;!>e4`?|DWAAK(8asDhilhzPlf8zxGR0xAf;!EsBNzxrv_G{_*
zqpp+z(8d9ow^&?BIu0%R(1Ebs$1}(38@st+dSu77!H)DyDv9W)l*G+TRn1HE41p_`
z+;;BYRTly5vEmN1I^FShm|?v=ah!&Q>DODb^@p%qW%m<vjWBit^7l||u;&5TfGJ~e
z`i)XPf#Jm%PygIoY;j_fYHjQGr&`nY1U?M2Di&=V6CZQrtlKrEg{f}bgA_x=4OrRv
z6lPo-X-@Vg?9;;ojpB^_^eE>gYJ)j)s+0nh6tp}UnIF*6q&20+f_VJNVIDd8qfYRv
z@7!3I8IzW!LJ)yR`1WO*Cq__g=tchy3$IQF7CaorM|9&zQrX_e34DvZ6ChOe`H}N7
zVcn?pg9oLx-~peYE~|H#8K*F`X;!>4%6fO*z*ptZ2`g&j+qif<7Q~<>N6*$Y6=YqB
zC(Oj`rlPa7-wWW6MNiK48Fob;y7dydFMeGN7^>`%lvb=~LFEhJ5I#>9qLv4UYcecJ
zx8{=<iBmMYy+w^DW~&p)ih5O$<B>!^1V}uf>*_o<JRC2<53R(f{Ls;{qqyQ<Fq)!J
zEm1DT5gCAuBW+t);Be@E8D@5lM?&8o)<(Ri?ptsEg|6J~l&C95Lz}i=9JG?yz;xoR
z10{KVBq(pv(}br3tqb;<S9#^KcWS+wH?ess;<?mKr$zx&+i%$HOkt$kbwwTA+jcB$
zsr8;NJd)DUVaz!bgK2cFc+mv1xX0eqZ>gkin8WG2QR$4If{X_rhst=vc(!Y@+g4WZ
zU^^a@p?$K!J!P#3e6RCl`+Zwio0B6p`gFr-2<y_AO<?F_7HRzVH}{QC=JY#LM!4m^
z<M%}^Y9keeEJA|fr*9N@7AJNbDM`Xon6T3E`IKMFlH$&z*(Fz1&S`k`rp(o)UiqNE
z^b4Afo?mY#jfc6oAQ9$Tt)+A@J{-|W*1e~f;!1v1uQIf!v8Iilg~|AYsO38z_3_(P
zipY6xgD|F3`#B^L8wI6)!LRd0G-6%?`cK*TQt}h;x5Wn%I*y?92sylE6lWnpQYwA-
zVySvzJ!h9KiX8SD8!a-5ZaJ@O4;@u+{``U1*^ynx7Xo|I{vDttu4&@&y*gAAiF_fd
zRCV3a*)h^ap3W3^kshfKp&=sdHA`ZEi)Yi=95P&-D*L#$DV-cSD%0vrTc<tuodYh+
zp-cuvxRnV%{rIU`zkF+!zE#&qvLHJil$iU)h&33Im6{ATgDWkPa6!>faDBp_jx;S}
zD?`r1zNOG^@QSx~j+%-uzUip%zdMCB_t-g@?#lz@ubK(Np#;WIA^NX&3l5Ixf!5Im
z#T5ib8vdZWpDiYVL4!|gU|lOSZc`e#K=g+C@1O0p$l|VsCJ5eXI<HPyHhXVgTMe8g
zyl~o6KUzQROvroU*@9`R@_PH#tXK0OkINIGD=zvKyv5%i#{A@;{Oi-0e=t-2i*!gs
zR^}g!Lm&_r$3JubyaMis9ry?|0Km}1%)*wB;h?FF0bpUw$Dqz33zW4NHZix5@N_g$
z_LNgG^0YF78#4&-WAh3aAgbP(u(})Avzq>_pXmfZFh=oF3oFTpQU6eI=XSTTw?PnO
z0^Dt^ZJoH?`51mS;YOVQ5VJD?eyTWI@iAz~Dgd1A?5wRUoB?1qI2(u+1YrS~IwF{@
z-0U2!03bF_21J*R#-`j#2$tDDIz;@%$6)U4Y|qWk?&jvk<_2N2b2MWI!QpUrAebEt
zW<_YQI(gVS8@RLDI?*8P{dB}a<DboJo!EZ*#D<`pVz<y>2eAR!|6%AKEL(`0rhp%Y
z4Ge$O9;K%Kvlm2J(tqC#;sZoK5X9vn&bSfmxW+C<CXRdz;tDbVadSH-=RY_v0f;T_
zKrkDKf&I@5`ycEf2J_$BL(IURe)A%9xMdN1i>4kT2-aSHFc1u71%g?DFcmO_8w%$J
z!L@kV|E7ePC`2n^M6FXq?bH9>>Mu%vX=UfAf|xmeGe<j9Q-JFa_ASJKf!M$hHsBw|
zem474i<kY!Q2ymo|CbkUU@t5C-!I?B=0`yN(Bl@dGjg#(aF<Dn@G-c!SQv9d;D$g$
zFa*wOYGMj!1%VK62og>pE2k-tiwnwO1T^L}{ol@mvC%*Muy=8^{uy${M(ifmCO=F%
zA*KR^aKzY%+tkj{#=sd7^!D}$KEI!}aoG_O!NAXp_|Vw`0lwk?8PG!3&VQU(Tl@$u
zZfgTuGd>1)R$~)W0~c#&27XoBpW4QMjGeUw{~sqm+p+(vuYWVLKShWIgBWD?e=bLU
zY{37~@qgFRzwSW@7#1Ic+mAcUZ-A`7Jm&nzs$%>Pi;4;HVE0EvBSP^<Of!mb|5yt^
zFc1cYK;ejG00c51UI;bBa`_)L{tREne;43P{QQ6N5W72?m?C%!Azau$BI}O>z{$Y@
z;Q*Kd{*=L>AO!p4j{{))rwjswLH;g7h<*^s{h|lt`oYQlHyIEF`%MOd{NUI8r7ePR
z7K-3m{6z+a01-Thzsi7c2pj>T`b7`K1wya~{wf2)xFCPG3j%Ti|K1h|gZ}Ox7Z=BG
z{ed7qs!RQ17cpC02-enLWiXE4>;k!9aKuK0U-b|ygunF%MNIwQ^<W(TMh1lbrUwN9
z|2}>|4jAX}{&D{99}EOT@bdoZ9|sKnn}1v!zl}W*#`&9nAcQM_A7{juIf4TDR~v{h
z|2?kYVEAvoz~PX;&j$#|@uOhmFFu3e9I(IGaCS665Fk1tNXY^0$`+m`h`0wJxZ>>)
zobQNTAxZ#tNn2Ap0Ae72ki|=i0JM3*Pl2L{;uxI5a3LXKh^VNr5GSXo7+4Gh191VL
jatZPO&l<Wv__>{&4IG_+E;a}djwr`MM<*&ThW-BlB=6{}

literal 0
HcmV?d00001

diff --git a/support/dist-docs-branch-23.06/ovn-ctl.8.txt b/support/dist-docs-branch-23.06/ovn-ctl.8.txt
new file mode 100644
index 00000000..ad63476a
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-ctl.8.txt
@@ -0,0 +1,347 @@
+ovn-ctl(8)                        OVN Manual                        ovn-ctl(8)
+
+NAME
+       ovn-ctl - Open Virtual Network northbound daemon lifecycle utility
+
+SYNOPSIS
+       ovn-ctl [options] command [-- extra_args]
+
+DESCRIPTION
+       This  program is intended to be invoked internally by Open Virtual Net‐
+       work startup scripts. System administrators should not normally  invoke
+       it directly.
+
+COMMANDS
+       start_northd
+       start_controller
+       start_controller_vtep
+       start_ic
+       stop_northd
+       stop_controller
+       stop_controller_vtep
+       stop_ic
+       restart_northd
+       restart_controller
+       restart_controller_vtep
+       restart_ic
+       promote_ovnnb
+       promote_ovnsb
+       demote_ovnnb
+       demote_ovnsb
+       status_ovnnb
+       status_ovnsb
+       start_ovsdb
+       start_nb_ovsdb
+       start_sb_ovsdb
+       stop_ovsdb
+       stop_nb_ovsdb
+       stop_sb_ovsdb
+       restart_ovsdb
+       run_nb_ovsdb
+       run_sb_ovsdb
+       promote_ic_nb
+       promote_ic_sb
+       demote_ic_nb
+       demote_ic_sb
+       status_ic_nb
+       status_ic_sb
+       start_ic_ovsdb
+       start_ic_nb_ovsdb
+       start_ic_sb_ovsdb
+       stop_ic_ovsdb
+       stop_ic_nb_ovsdb
+       stop_ic_sb_ovsdb
+       restart_ic_ovsdb
+       run_ic_nb_ovsdb
+       run_ic_sb_ovsdb
+
+OPTIONS
+       --ovn-northd-priority=NICE
+
+       --ovn-northd-wrapper=WRAPPER
+
+       --ovn-controller-priority=NICE
+
+       --ovn-controller-wrapper=WRAPPER
+
+       --ovn-ic-priority=NICE
+
+       --ovn-ic-wrapper=WRAPPER
+
+       --ovsdb-nb-wrapper=WRAPPER
+
+       --ovsdb-sb-wrapper=WRAPPER
+
+       --ovn-user=USER:GROUP
+
+       --ovs-user=USER:GROUP
+
+       -h | --help
+
+FILE LOCATION OPTIONS
+       --db-sock=SOCKET
+
+       --db-nb-file=FILE
+
+       --db-sb-file=FILE
+
+       --db-nb-schema=FILE
+
+       --db-sb-schema=FILE
+
+       --db-sb-create-insecure-remote=yes|no
+
+       --db-nb-create-insecure-remote=yes|no
+
+       --db-ic-nb-file=FILE
+
+       --db-ic-sb-file=FILE
+
+       --db-ic-nb-schema=FILE
+
+       --db-ic-sb-schema=FILE
+
+       --db-ic-sb-create-insecure-remote=yes|no
+
+       --db-ic-nb-create-insecure-remote=yes|no
+
+       --ovn-controller-ssl-key=KEY
+
+       --ovn-controller-ssl-cert=CERT
+
+       --ovn-controller-ssl-ca-cert=CERT
+
+       --ovn-controller-ssl-bootstrap-ca-cert=CERT
+
+ADDRESS AND PORT OPTIONS
+       --db-nb-sync-from-addr=IP ADDRESS
+
+       --db-nb-sync-from-port=PORT NUMBER
+
+       --db-nb-sync-from-proto=PROTO
+
+       --db-sb-sync-from-addr=IP ADDRESS
+
+       --db-sb-sync-from-port=PORT NUMBER
+
+       --db-sb-sync-from-proto=PROTO
+
+       --db-ic-nb-sync-from-addr=IP ADDRESS
+
+       --db-ic-nb-sync-from-port=PORT NUMBER
+
+       --db-ic-nb-sync-from-proto=PROTO
+
+       --db-ic-sb-sync-from-addr=IP ADDRESS
+
+       --db-ic-sb-sync-from-port=PORT NUMBER
+
+       --db-ic-sb-sync-from-proto=PROTO
+
+        --ovn-northd-nb-db=PROTO:IP ADDRESS: PORT..
+
+        --ovn-northd-sb-db=PROTO:IP ADDRESS: PORT..
+
+        --ovn-ic-nb-db=PROTO:IP ADDRESS: PORT..
+
+        --ovn-ic-sb-db=PROTO:IP ADDRESS: PORT..
+
+CLUSTERING OPTIONS
+       --db-nb-cluster-local-addr=IP ADDRESS
+
+       --db-nb-cluster-local-port=PORT NUMBER
+
+       --db-nb-cluster-local-proto=PROTO (tcp/ssl)
+
+       --db-nb-cluster-remote-addr=IP ADDRESS
+
+       --db-nb-cluster-remote-port=PORT NUMBER
+
+       --db-nb-cluster-remote-proto=PROTO (tcp/ssl)
+
+       --db-nb-election-timer=Timeout in milliseconds
+
+       --db-sb-cluster-local-addr=IP ADDRESS
+
+       --db-sb-cluster-local-port=PORT NUMBER
+
+       --db-sb-cluster-local-proto=PROTO (tcp/ssl)
+
+       --db-sb-cluster-remote-addr=IP ADDRESS
+
+       --db-sb-cluster-remote-port=PORT NUMBER
+
+       --db-sb-cluster-remote-proto=PROTO (tcp/ssl)
+
+       --db-sb-election-timer=Timeout in milliseconds
+
+       --db-ic-nb-cluster-local-addr=IP ADDRESS
+
+       --db-ic-nb-cluster-local-port=PORT NUMBER
+
+       --db-ic-nb-cluster-local-proto=PROTO (tcp/ssl)
+
+       --db-ic-nb-cluster-remote-addr=IP ADDRESS
+
+       --db-ic-nb-cluster-remote-port=PORT NUMBER
+
+       --db-ic-nb-cluster-remote-proto=PROTO (tcp/ssl)
+
+       --db-ic-sb-cluster-local-addr=IP ADDRESS
+
+       --db-ic-sb-cluster-local-port=PORT NUMBER
+
+       --db-ic-sb-cluster-local-proto=PROTO (tcp/ssl)
+
+       --db-ic-sb-cluster-remote-addr=IP ADDRESS
+
+       --db-ic-sb-cluster-remote-port=PORT NUMBER
+
+       --db-ic-sb-cluster-remote-proto=PROTO (tcp/ssl)
+
+PROBE INTERVAL OPTIONS
+       --db-nb-probe-interval-to-active=Time in milliseconds
+
+       --db-sb-probe-interval-to-active=Time in milliseconds
+
+EXTRA OPTIONS
+       Any  options  after  ’-’ will be passed on to the binary run by command
+       with the exception of start_northd, which can have options specified in
+       ovn-northd-db-params.conf. Any extra_args passed to  start_northd  will
+       be passed to the ovsdb-servers if --ovn-manage-ovsdb=yes
+
+CONFIGURATION FILES
+       Following  are  the optional configuration files. If present, it should
+       be located in the etc dir
+
+   ovnnb-active.conf
+       If present, this file should hold the url  to  connect  to  the  active
+       Northbound DB server
+
+       tcp:x.x.x.x:6641
+
+   ovnsb-active.conf
+       If  present,  this  file  should  hold the url to connect to the active
+       Southbound DB server
+
+       tcp:x.x.x.x:6642
+
+   ovn-northd-db-params.conf
+       If  present,  start_northd  will  not  start  the  DB  server  even  if
+       --ovn-manage-ovsdb=yes.  This file should hold the database url parame‐
+       ters to be passed to ovn-northd.
+
+       --ovnnb-db=tcp:x.x.x.x:6641 --ovnsb-db=tcp:x.x.x.x:6642
+
+   ic-nb-active.conf
+       If present, this file should hold the url to connect to the active  In‐
+       terconnection Northbound DB server
+
+       tcp:x.x.x.x:6645
+
+   ic-sb-active.conf
+       If  present, this file should hold the url to connect to the active In‐
+       terconnection Southbound DB server
+
+       tcp:x.x.x.x:6646
+
+   ovn-ic-db-params.conf
+       If present, this file should hold the database  url  parameters  to  be
+       passed to ovn-ic.
+
+       --ic-nb-db=tcp:x.x.x.x:6645 --ic-sb-db=tcp:x.x.x.x:6646
+
+RUNNING OVN DB SERVERS WITHOUT DETACHING
+       # ovn-ctl run_nb_ovsdb
+
+       This  command  runs  the OVN nb ovsdb-server without passing the detach
+       option, making it to block until ovsdb-server exits. This command  will
+       be useful for starting the OVN nb ovsdb-server in a container.
+
+       # ovn-ctl run_sb_ovsdb
+
+       This  command  runs  the OVN sb ovsdb-server without passing the detach
+       option, making it to block until ovsdb-server exits. This command  will
+       be useful for starting the OVN sb ovsdb-server in a container.
+
+       # ovn-ctl run_ic_nb_ovsdb
+
+       This command runs the OVN IC-NB ovsdb-server without passing the detach
+       option,  making it to block until ovsdb-server exits. This command will
+       be useful for starting the OVN IC-NB ovsdb-server in a container.
+
+       # ovn-ctl run_ic_sb_ovsdb
+
+       This command runs the OVN IC-SB ovsdb-server without passing the detach
+       option, making it to block until ovsdb-server exits. This command  will
+       be useful for starting the OVN IC-SB ovsdb-server in a container.
+
+EXAMPLE USAGE
+   Run ovn-controller on a host already running OVS
+       # ovn-ctl start_controller
+
+   Run ovn-northd on a host already running OVS
+       # ovn-ctl start_northd
+
+   All-in-one OVS+OVN for testing
+       # ovs-ctl start --system-id="random"
+
+       # ovn-ctl start_northd
+
+       # ovn-ctl start_controller
+
+   Promote and demote ovsdb servers
+       # ovn-ctl promote_ovnnb
+
+       # ovn-ctl promote_ovnsb
+
+       #  ovn-ctl  --db-nb-sync-from-addr=x.x.x.x  --db-nb-sync-from-port=6641
+       --db-nb-probe-interval-to-active=60000 demote_ovnnb
+
+       #  ovn-ctl  --db-sb-sync-from-addr=x.x.x.x  --db-sb-sync-from-port=6642
+       --db-sb-probe-interval-to-active=60000 demote_ovnsb
+
+   Creating a clustered db on 3 nodes with IPs x.x.x.x, y.y.y.y and z.z.z.z
+     Starting OVN ovsdb servers and ovn-northd on the node with IP x.x.x.x
+
+          #  ovn-ctl  --db-nb-addr=x.x.x.x  --db-nb-create-insecure-remote=yes
+       --db-sb-addr=x.x.x.x  --db-sb-create-insecure-remote=yes  --db-nb-clus�‐
+       ter-local-addr=x.x.x.x               --db-sb-cluster-local-addr=x.x.x.x
+       --ovn-northd-nb-db=tcp:x.x.x.x:6641,tcp:y.y.y.y:6641,tcp:z.z.z.z:6641
+       --ovn-northd-sb-db=tcp:x.x.x.x:6642,tcp:y.y.y.y:6642,tcp:z.z.z.z:6642
+       start_northd
+
+     Starting OVN ovsdb-servers and ovn-northd on the node with IP y.y.y.y and
+     joining the cluster started at x.x.x.x
+
+         #  ovn-ctl  --db-nb-addr=y.y.y.y   --db-nb-create-insecure-remote=yes
+       --db-sb-addr=y.y.y.y  --db-sb-create-insecure-remote=yes  --db-nb-clus�‐
+       ter-local-addr=y.y.y.y --db-sb-cluster-local-addr=y.y.y.y --db-nb-clus�‐
+       ter-remote-addr=x.x.x.x             --db-sb-cluster-remote-addr=x.x.x.x
+       --ovn-northd-nb-db=tcp:x.x.x.x:6641,tcp:y.y.y.y:6641,tcp:z.z.z.z:6641
+       --ovn-northd-sb-db=tcp:x.x.x.x:6642,tcp:y.y.y.y:6642,tcp:z.z.z.z:6642
+       start_northd
+
+     Starting OVN ovsdb-servers and ovn-northd on the node with IP z.z.z.z and
+     joining the cluster started at x.x.x.x
+
+          #  ovn-ctl  --db-nb-addr=z.z.z.z  --db-nb-create-insecure-remote=yes
+       --db-nb-cluster-local-addr=z.z.z.z  --db-sb-addr=z.z.z.z   --db-sb-cre�‐
+       ate-insecure-remote=yes              --db-sb-cluster-local-addr=z.z.z.z
+       --db-nb-cluster-remote-addr=x.x.x.x --db-sb-cluster-remote-addr=x.x.x.x
+       --ovn-northd-nb-db=tcp:x.x.x.x:6641,tcp:y.y.y.y:6641,tcp:z.z.z.z:6641
+       --ovn-northd-sb-db=tcp:x.x.x.x:6642,tcp:y.y.y.y:6642,tcp:z.z.z.z:6642
+       start_northd
+
+   Passing ssl keys when starting OVN dbs will supersede the default ssl  val�‐
+       ues in db
+     Starting standalone ovn db server passing SSL certificates
+
+             #      ovn-ctl     --ovn-nb-db-ssl-key=/etc/ovn/ovnnb-privkey.pem
+       --ovn-nb-db-ssl-cert=/etc/ovn/ovnnb-cert.pem
+       --ovn-nb-db-ssl-ca-cert=/etc/ovn/cacert.pem
+       --ovn-sb-db-ssl-key=/etc/ovn/ovnsb-privkey.pem
+       --ovn-sb-db-ssl-cert=/etc/ovn/ovnsb-cert.pem
+       --ovn-sb-db-ssl-ca-cert=/etc/ovn/cacert.pem start_northd
+
+OVN 23.06.3                         ovn-ctl                         ovn-ctl(8)
diff --git a/support/dist-docs-branch-23.06/ovn-detrace.1 b/support/dist-docs-branch-23.06/ovn-detrace.1
new file mode 100644
index 00000000..703f8992
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-detrace.1
@@ -0,0 +1,273 @@
+.\" -*- nroff -*-
+.\" ovs.tmac
+.\"
+.\" Open vSwitch troff macro library
+.
+.
+.\" Continuation line for .IP.
+.de IQ
+.  br
+.  ns
+.  IP "\\$1"
+..
+.
+.\" Introduces a sub-subsection
+.de ST
+.  PP
+.  RS -0.15in
+.  I "\\$1"
+.  RE
+..
+.
+.\" The content between the lines below is from an-ext.tmac in groff
+.\" 1.21, with some modifications.
+.\" ----------------------------------------------------------------------
+.\" an-ext.tmac
+.\"
+.\" Written by Eric S. Raymond <esr@thyrsus.com>
+.\"            Werner Lemberg <wl@gnu.org>
+.\"
+.\" Version 2007-Feb-02
+.\"
+.\" Copyright (C) 2007, 2009, 2011 Free Software Foundation, Inc.
+.\" You may freely use, modify and/or distribute this file.
+.\"
+.\"
+.\" The code below provides extension macros for the `man' macro package.
+.\" Care has been taken to make the code portable; groff extensions are
+.\" properly hidden so that all troff implementations can use it without
+.\" changes.
+.\"
+.\" With groff, this file is sourced by the `man' macro package itself.
+.\" Man page authors who are concerned about portability might add the
+.\" used macros directly to the prologue of the man page(s).
+.
+.
+.\" Convention: Auxiliary macros and registers start with `m' followed
+.\"             by an uppercase letter or digit.
+.
+.
+.\" Declare start of command synopsis.  Sets up hanging indentation.
+.de SY
+.  ie !\\n(mS \{\
+.    nh
+.    nr mS 1
+.    nr mA \\n(.j
+.    ad l
+.    nr mI \\n(.i
+.  \}
+.  el \{\
+.    br
+.    ns
+.  \}
+.
+.  HP \w'\fB\\$1\fP\ 'u
+.  B "\\$1"
+..
+.
+.
+.\" End of command synopsis.  Restores adjustment.
+.de YS
+.  in \\n(mIu
+.  ad \\n(mA
+.  hy \\n(HY
+.  nr mS 0
+..
+.
+.
+.\" Declare optional option.
+.de OP
+.  ie \\n(.$-1 \
+.    RI "[\fB\\$1\fP" "\ \\$2" "]"
+.  el \
+.    RB "[" "\\$1" "]"
+..
+.
+.
+.\" Start URL.
+.de UR
+.  ds m1 \\$1\"
+.  nh
+.  if \\n(mH \{\
+.    \" Start diversion in a new environment.
+.    do ev URL-div
+.    do di URL-div
+.  \}
+..
+.
+.
+.\" End URL.
+.de UE
+.  ie \\n(mH \{\
+.    br
+.    di
+.    ev
+.
+.    \" Has there been one or more input lines for the link text?
+.    ie \\n(dn \{\
+.      do HTML-NS "<a href=""\\*(m1"">"
+.      \" Yes, strip off final newline of diversion and emit it.
+.      do chop URL-div
+.      do URL-div
+\c
+.      do HTML-NS </a>
+.    \}
+.    el \
+.      do HTML-NS "<a href=""\\*(m1"">\\*(m1</a>"
+\&\\$*\"
+.  \}
+.  el \
+\\*(la\\*(m1\\*(ra\\$*\"
+.
+.  hy \\n(HY
+..
+.
+.
+.\" Start email address.
+.de MT
+.  ds m1 \\$1\"
+.  nh
+.  if \\n(mH \{\
+.    \" Start diversion in a new environment.
+.    do ev URL-div
+.    do di URL-div
+.  \}
+..
+.
+.
+.\" End email address.
+.de ME
+.  ie \\n(mH \{\
+.    br
+.    di
+.    ev
+.
+.    \" Has there been one or more input lines for the link text?
+.    ie \\n(dn \{\
+.      do HTML-NS "<a href=""mailto:\\*(m1"">"
+.      \" Yes, strip off final newline of diversion and emit it.
+.      do chop URL-div
+.      do URL-div
+\c
+.      do HTML-NS </a>
+.    \}
+.    el \
+.      do HTML-NS "<a href=""mailto:\\*(m1"">\\*(m1</a>"
+\&\\$*\"
+.  \}
+.  el \
+\\*(la\\*(m1\\*(ra\\$*\"
+.
+.  hy \\n(HY
+..
+.
+.
+.\" Continuation line for .TP header.
+.de TQ
+.  br
+.  ns
+.  TP \\$1\" no doublequotes around argument!
+..
+.
+.
+.\" Start example.
+.de EX
+.  nr mE \\n(.f
+.  nf
+.  nh
+.  ft CR
+..
+.
+.
+.\" End example.
+.de EE
+.  ft \\n(mE
+.  fi
+.  hy \\n(HY
+..
+.
+.\" EOF
+.\" ----------------------------------------------------------------------
+.TH ovn\-detrace 1 "23.06.3" "OVN" "OVN Manual"
+.\" This program's name:
+.ds PN ovn\-detrace
+.
+.SH NAME
+\*(PN \- convert ``ovs\-appctl ofproto/trace'' output to combine
+OVN logical flow information.
+.
+.SH SYNOPSIS
+\fB\*(PN < \fIfile\fR
+.IP "Common options:"
+[\fB\-h\fR | \fB\-\-help\fR]
+[\fB\-V\fR | \fB\-\-version\fR]
+
+.
+.SH DESCRIPTION
+The \fB\*(PN\fR program reads \fBovs\-appctl ofproto/trace\fR output on
+stdin, looking for flow cookies, and expand each cookie with corresponding OVN
+logical flows. It expands logical flow further with the north-bound information
+e.g. the ACL that generated the logical flow, when relevant.
+.PP
+.
+.SH "OPTIONS"
+.IP "\fB\-h\fR"
+.IQ "\fB\-\-help\fR"
+Prints a brief help message to the console.
+.
+.IP "\fB\-V\fR"
+.IQ "\fB\-\-version\fR"
+Prints version information to the console.
+.
+.IP "\fB\-\-ovnsb=\fIserver\fR"
+The OVN Southbound DB remote to contact.  If the \fBOVN_SB_DB\fR
+environment variable is set, its value is used as the default.
+Otherwise, the default is \fBunix:@RUNDIR@/ovnsb_db.sock\fR, but this
+default is unlikely to be useful outside of single-machine OVN test
+environments.
+.
+.IP "\fB\-\-ovnnb=\fIserver\fR"
+The OVN Northbound DB remote to contact.  If the \fBOVN_NB_DB\fR
+environment variable is set, its value is used as the default.
+Otherwise, the default is \fBunix:@RUNDIR@/ovnnb_db.sock\fR, but this
+default is unlikely to be useful outside of single-machine OVN test
+environments.
+.
+.IP "\fB\-\-ovs=\fR"
+Also decode flow information (like OVS ofport) from the flows by connecting
+to the OVS DB.
+.
+.IP "\fB\-\-no-leader-only\fR"
+Connect to any cluster member, not just the leader. The option works for
+OVN Southbound DB and OVN Northbound DB.
+.
+.IP "\fB\-\-ovsdb=\fIserver\fR"
+The OVS DB remote to contact if \fB\-\-ovs\fR is present.  If the
+\fBOVS_RUNDIR\fR environment variable is set, its value is used as the
+default. Otherwise, the default is \fBunix:@RUNDIR@/db.sock\fR, but this
+default is unlikely to be useful outside of single-machine OVN test
+environments.
+.
+.IP "\fB\-p\fR \fIprivkey.pem\fR"
+.IQ "\fB\-\-private\-key=\fIprivkey.pem\fR"
+Specifies a PEM file containing the private key used as \fB\*(PN\fR's
+identity for outgoing SSL connections.
+.
+.IP "\fB\-c\fR \fIcert.pem\fR"
+.IQ "\fB\-\-certificate=\fIcert.pem\fR"
+Specifies a PEM file containing a certificate that certifies the
+private key specified on \fB\-p\fR or \fB\-\-private\-key\fR to be
+trustworthy.  The certificate must be signed by the certificate
+authority (CA) that the peer in SSL connections will use to verify it.
+.
+.IP "\fB\-C\fR \fIcacert.pem\fR"
+.IQ "\fB\-\-ca\-cert=\fIcacert.pem\fR"
+Specifies a PEM file containing the CA certificate that \fB\*(PN\fR
+should use to verify certificates presented to it by SSL peers.  (This
+may be the same certificate that SSL peers use to verify the
+certificate specified on \fB\-c\fR or \fB\-\-certificate\fR, or it may
+be a different one, depending on the PKI design in use.)
+.
+.SH "SEE ALSO"
+.
+.BR ovs\-appctl (8), ovn\-sbctl (8), ovn\-nbctl (8), ovn\-trace (8)
diff --git a/support/dist-docs-branch-23.06/ovn-detrace.1.html b/support/dist-docs-branch-23.06/ovn-detrace.1.html
new file mode 100644
index 00000000..088eb6a6
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-detrace.1.html
@@ -0,0 +1,81 @@
+<html><head><meta charset="UTF-8"></head><body><pre>
+<u>o</u><u>v</u><u>n</u><u>-</u><u>d</u><u>e</u><u>t</u><u>r</u><u>a</u><u>c</u><u>e</u>(1)                    OVN Manual                    <u>o</u><u>v</u><u>n</u><u>-</u><u>d</u><u>e</u><u>t</u><u>r</u><u>a</u><u>c</u><u>e</u>(1)
+
+<b>N</b><b>A</b><b>M</b><b>E</b>
+       ovn-detrace  -  convert  ``ovs-appctl ofproto/trace'' output to combine
+       OVN logical flow information.
+
+<b>S</b><b>Y</b><b>N</b><b>O</b><b>P</b><b>S</b><b>I</b><b>S</b>
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>d</b><b>e</b><b>t</b><b>r</b><b>a</b><b>c</b><b>e</b> <lt;<lt; <u>f</u><u>i</u><u>l</u><u>e</u>
+
+       Common options:
+              [<b>-</b><b>h</b> | <b>-</b><b>-</b><b>h</b><b>e</b><b>l</b><b>p</b>] [<b>-</b><b>V</b> | <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>s</b><b>i</b><b>o</b><b>n</b>]
+
+
+<b>D</b><b>E</b><b>S</b><b>C</b><b>R</b><b>I</b><b>P</b><b>T</b><b>I</b><b>O</b><b>N</b>
+       The <b>o</b><b>v</b><b>n</b><b>-</b><b>d</b><b>e</b><b>t</b><b>r</b><b>a</b><b>c</b><b>e</b> program reads <b>o</b><b>v</b><b>s</b><b>-</b><b>a</b><b>p</b><b>p</b><b>c</b><b>t</b><b>l</b> <b>o</b><b>f</b><b>p</b><b>r</b><b>o</b><b>t</b><b>o</b><b>/</b><b>t</b><b>r</b><b>a</b><b>c</b><b>e</b> output on stdin,
+       looking for flow cookies, and expand each cookie with corresponding OVN
+       logical flows. It expands logical flow further with the north-bound in‐
+       formation e.g. the ACL that generated the logical flow, when relevant.
+
+<b>O</b><b>P</b><b>T</b><b>I</b><b>O</b><b>N</b><b>S</b>
+       <b>-</b><b>h</b>
+       <b>-</b><b>-</b><b>h</b><b>e</b><b>l</b><b>p</b> Prints a brief help message to the console.
+
+       <b>-</b><b>V</b>
+       <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>s</b><b>i</b><b>o</b><b>n</b>
+              Prints version information to the console.
+
+       <b>-</b><b>-</b><b>o</b><b>v</b><b>n</b><b>s</b><b>b</b><b>=</b><u>s</u><u>e</u><u>r</u><u>v</u><u>e</u><u>r</u>
+              The OVN Southbound DB remote to contact.  If the <b>O</b><b>V</b><b>N</b><b>_</b><b>S</b><b>B</b><b>_</b><b>D</b><b>B</b> envi‐
+              ronment variable is set, its value is used as the default.  Oth‐
+              erwise, the default is <b>u</b><b>n</b><b>i</b><b>x</b><b>:</b><b>@</b><b>R</b><b>U</b><b>N</b><b>D</b><b>I</b><b>R</b><b>@</b><b>/</b><b>o</b><b>v</b><b>n</b><b>s</b><b>b</b><b>_</b><b>d</b><b>b</b><b>.</b><b>s</b><b>o</b><b>c</b><b>k</b>, but this de‐
+              fault is unlikely to be useful  outside  of  single-machine  OVN
+              test environments.
+
+       <b>-</b><b>-</b><b>o</b><b>v</b><b>n</b><b>n</b><b>b</b><b>=</b><u>s</u><u>e</u><u>r</u><u>v</u><u>e</u><u>r</u>
+              The OVN Northbound DB remote to contact.  If the <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>B</b><b>_</b><b>D</b><b>B</b> envi‐
+              ronment variable is set, its value is used as the default.  Oth‐
+              erwise, the default is <b>u</b><b>n</b><b>i</b><b>x</b><b>:</b><b>@</b><b>R</b><b>U</b><b>N</b><b>D</b><b>I</b><b>R</b><b>@</b><b>/</b><b>o</b><b>v</b><b>n</b><b>n</b><b>b</b><b>_</b><b>d</b><b>b</b><b>.</b><b>s</b><b>o</b><b>c</b><b>k</b>, but this de‐
+              fault  is  unlikely  to  be useful outside of single-machine OVN
+              test environments.
+
+       <b>-</b><b>-</b><b>o</b><b>v</b><b>s</b><b>=</b> Also decode flow information (like OVS ofport) from the flows by
+              connecting to the OVS DB.
+
+       <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>l</b><b>e</b><b>a</b><b>d</b><b>e</b><b>r</b><b>-</b><b>o</b><b>n</b><b>l</b><b>y</b>
+              Connect to any cluster member, not just the leader.  The  option
+              works for OVN Southbound DB and OVN Northbound DB.
+
+       <b>-</b><b>-</b><b>o</b><b>v</b><b>s</b><b>d</b><b>b</b><b>=</b><u>s</u><u>e</u><u>r</u><u>v</u><u>e</u><u>r</u>
+              The  OVS  DB  remote  to  contact  if  <b>-</b><b>-</b><b>o</b><b>v</b><b>s</b> is present.  If the
+              <b>O</b><b>V</b><b>S</b><b>_</b><b>R</b><b>U</b><b>N</b><b>D</b><b>I</b><b>R</b> environment variable is set, its value is used as the
+              default. Otherwise, the default  is  <b>u</b><b>n</b><b>i</b><b>x</b><b>:</b><b>@</b><b>R</b><b>U</b><b>N</b><b>D</b><b>I</b><b>R</b><b>@</b><b>/</b><b>d</b><b>b</b><b>.</b><b>s</b><b>o</b><b>c</b><b>k</b>,  but
+              this  default is unlikely to be useful outside of single-machine
+              OVN test environments.
+
+       <b>-</b><b>p</b> <u>p</u><u>r</u><u>i</u><u>v</u><u>k</u><u>e</u><u>y</u><u>.</u><u>p</u><u>e</u><u>m</u>
+       <b>-</b><b>-</b><b>p</b><b>r</b><b>i</b><b>v</b><b>a</b><b>t</b><b>e</b><b>-</b><b>k</b><b>e</b><b>y</b><b>=</b><u>p</u><u>r</u><u>i</u><u>v</u><u>k</u><u>e</u><u>y</u><u>.</u><u>p</u><u>e</u><u>m</u>
+              Specifies a PEM file containing the private key used as  <b>o</b><b>v</b><b>n</b><b>-</b><b>d</b><b>e</b>‐‐
+              <b>t</b><b>r</b><b>a</b><b>c</b><b>e</b>'s identity for outgoing SSL connections.
+
+       <b>-</b><b>c</b> <u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+       <b>-</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>i</b><b>f</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b><b>=</b><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+              Specifies a PEM file containing a certificate that certifies the
+              private  key specified on <b>-</b><b>p</b> or <b>-</b><b>-</b><b>p</b><b>r</b><b>i</b><b>v</b><b>a</b><b>t</b><b>e</b><b>-</b><b>k</b><b>e</b><b>y</b> to be trustworthy.
+              The certificate must be signed by the certificate authority (CA)
+              that the peer in SSL connections will use to verify it.
+
+       <b>-</b><b>C</b> <u>c</u><u>a</u><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+       <b>-</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>=</b><u>c</u><u>a</u><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+              Specifies a PEM file containing the CA certificate that  <b>o</b><b>v</b><b>n</b><b>-</b><b>d</b><b>e</b>‐‐
+              <b>t</b><b>r</b><b>a</b><b>c</b><b>e</b>  should  use to verify certificates presented to it by SSL
+              peers.  (This may be the same certificate that SSL peers use  to
+              verify  the  certificate specified on <b>-</b><b>c</b> or <b>-</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>i</b><b>f</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b>, or it
+              may be a different one, depending on the PKI design in use.)
+
+<b>S</b><b>E</b><b>E</b> <b>A</b><b>L</b><b>S</b><b>O</b>
+       <b>o</b><b>v</b><b>s</b><b>-</b><b>a</b><b>p</b><b>p</b><b>c</b><b>t</b><b>l</b>(8),<b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b><b>c</b><b>t</b><b>l</b>(8),<b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b>(8),<b>o</b><b>v</b><b>n</b><b>-</b><b>t</b><b>r</b><b>a</b><b>c</b><b>e</b>(8)
+
+OVN                                 23.06.3                     <u>o</u><u>v</u><u>n</u><u>-</u><u>d</u><u>e</u><u>t</u><u>r</u><u>a</u><u>c</u><u>e</u>(1)
+</pre></body></html>
diff --git a/support/dist-docs-branch-23.06/ovn-detrace.1.pdf b/support/dist-docs-branch-23.06/ovn-detrace.1.pdf
new file mode 100644
index 0000000000000000000000000000000000000000..7a08cd3447d5fa247831f1ed11be0729aeaf4b23
GIT binary patch
literal 21824
zcmce-1yo#1+BO=3LvVL@Y1|=raCf)H-Q8V+J3)iHyL$q`-Q6V+Aovf-Idjf@GxOcK
z>tFY-Ub}Zyz0xJmuB!dK)nszQqI8V(EHGq)$I-bkWMtyj&Nhbnj%GI2T!gmzj-~(;
z2SPeIIzl=lMFCL}g_paKjn#|5%)rdj%+XB>=nS;veQ`iYXZMGmjI5l1vZBa~rl5e5
zkQgDIgRqE-xR401t&y>dy_qBMrNqI}$i~T$_x(#!*2&S<$x+nI68M_^uYL)Jm5_nZ
z#=snghX)`9v^H@xC1iUkQ2@MnaRk~E0z@tK9f86?LmML?A0Lc^qdidH3dS{KRDH>Q
zi38c|Ms=NTIw@$q2d98dIiADq{50}YR9*3+y#khozm*KBf{=o<R()2?BkJ>(GbkyP
zLR@0WN=PwJA6vI*-hIYY)Gk4wybR`(#j|diEM_zB?N(rVXWVsXe_C5=mXzI$r`^Sc
zkUzpMJH<7b46;BR1L@_JxZJAjZf5|JT47NFHJpCGr<*+*s;uOS5(>V;PZEThpiIxq
zXSlNBS&bpHI0myhho5xlNU85Lz_Q*xnF-QQFhqk#sTs{NT>jVszh$LqSb)ho`!4TC
zwA%4K;8bLT@up1n<fA`LE5%+_QVCSDY%gU26R9FrItIN?>nAs1k{PVKEA2fOqbSFF
zXi=f07%Gg`%)%A7vbl9yH{ysI%#?7UFN%o`G-vfU9b)bAs&Kbfae>`7`JC;@;<mc)
zf$5{U>aiEbiiy&<la?1ffnZE}G9ZI`CG}6a$FhT_)L3U_HtC}cMAFcw<&~F$Lii-X
z;+lz#x5S#U&k3NV3JQsJDg+m+)O<E$o{B0*Wy4?nH@D>H$+mIMId&MOM=usS>FL+T
zzL^NQrnsDgi;b-!mVSbIo;jTbp^5XQAzuWpsV?%JPO?XlMV-5y4XZcnB!g42?|VF=
zRNOdsUcejTf_gH|=ARu{n`TO;^;zHeM6beWS7m0N{xA=SUV7v4Mv)~Jo*=7od4pFd
z{37Lh6Z5s*wy>~J#WW*DMOVZ<w25DZImc~^>f6Ysc+b^%g$ltmK|+y5h>Mffg@usI
zo6F0u5jjFS9D6Qz`~z+<If|ZH#K)vwrhJi9kcV}LLMYq3l!y%54PRzIPcGE(Rhf-!
zBpf(+z*B~d<$<AAEz#MM;x>cHOL!(LY$=$TL7JAP19dXqE`6zVvy=4Y9^weZ-&Zj&
z1|K}!-q)W{gwM_VOfPfZQ6Vd?LJLXFoM;BdflPmXx8$9p&k`Q#pxO-)iTH``lpl4R
z)@=yqp}EAdohpKiE1XFHOLAL`M%d{2PEOH&710V!vuGVhqkOQ2m?~m~D&LoDegB8;
z6ak9sNZe_6gZZf=5YInLOumPpV7HG6Oqe-@!FbGG+j@h+4Im*rrD?wE#S5)&dky=L
z!Md%2(eeemoh4dSN07x3MH<AT&T>mBO^GifE@V}`t76Jg^ZC>fWJuG=6l36HU~j=E
zD9D@CWaQOCQp&V;WSDH^Y6`97VDs8){wt%}!@$mmP13#om}KYP8)Y39*5M(i#3LMk
z*kO%1C+E^?Q9aY_$eA69sR?Vv0}rD_)2HOU{QR5qk|iv3P+!;2i|i1oI39ZCCoUi^
z^mcpqxgFj!^wRFqhV2D2EiH31O+4!`t9fBCF{A;Maux88j30iC`Hs4vo7k-JSIhzP
ztVHP2EJ3I;M6-7?iq{_?5XJ?lvCU$9iK(|_<mlhuNu3?`_a`r;18mlg4>KL>b<){{
z<jHxhVS%4I$4YC|j&l9PA}EJScv^ML;^scjj#3S$w_JXEizbX`fW}3N=TAKZ*XXHc
z71eA7r}V`<zAB&1QHJa~m~J0j$>d(JL7O!}i@1{DLL+N)5>p~9w12+AM2b{T>cU%O
zKeGFp#Ma-ROGWUj;`W;N-EFUM&3YDw&Di^ghe?o~uNUsb0+(ngAmv~C=NfLpCfal}
z+%V-AK=ywuR$}lN;eD#AZK++A0`>^R4PFEmZj{F~bi`X#f9aGNheay%)8QpfsbCHM
zVGMg^vNV0GAcRNEO8H$vc8+jH`)HS?d4hGw1_T?@N5L%X_AVq$@fi8TT}yp32Xw_7
zBA336uw|l;Qse!wsAqd&y(rYp91^(jZ)86r?inE1bu9?v?~eM?pEF3Ak%}DhLq?T>
ztl*>Hn!iuXzM)O{px&25hW0`2vzki*BIzMR5OQ0#6RKdZ6*`xqZzYR(g5d}h3KA~b
z8`lKpppAE^lbQ78x<V~|)2zAp+Jts7Iy?IYsc{7bH&{&IVZu)%j>WnsN$egKbEPd{
za~Nbz`su9=3xiAcYuN;?GO@BCnbRJ4*b**@us?RPP3#+^OV_vFrK=F)XieFa*juf$
z?9U8ck<?U-M?kz7j_b$>0xOsFHcrx4_|H*oFnje-cO1c^*!KPVGGLLUz8YM)R{a2F
z&K@BSA1ecG@=%#a=jizWYgsQ;*boi-UWz)r<!5<=6KMN}MrCC=_0?ISocBu0RL`KU
zj~6x01$RmnTsE)24VZ<(n$1-68Mup7tAB81yP%-1X%%)!c3H=4L1QD4@`Ux4UcWR{
zHao(H`9beCY0)8<gv$_+mWNIj!LnBJ5sy&P;-I05(D(=AWBg>oL$hUFKFu3ZL_e6U
zzzS2)33l7Z@gOQ#+FZHdj|o9)Ah2LQ6|`F5wEzP0-148I3!*y0Z=EIjH?SE`i!FQZ
z<Mi6&eOd6Y-SUYn^5&J_c{aCG10ko^RQYsI!wL^X!4OPad<#SZzw1l0OITlxoq3~5
zirQO~!+LDvQsYauT!d~hZeLZw8n8s|WOcy8WU}?zP1<JH7GK;~T1Bzv!x#E}GC2Bx
z5rY~ti4e9gS~)mJu9pp^?!)Wj{&wjp<}H6WycU{r^04T8w;XreS}p&u`NY)cnHwD}
zUwbug+=AAF0n0p$TbHPtp_?;rvX`}>L_jBH^R3>=m?<|YJPh7-?RY?Pr1fV|<S9JA
zMhIK2kyh)F`lBBt3)lO7G`-&(hwP8L)WrA^r)v#!x+!5qOj-H^9;geeG73&A0Om|Z
z*VXB+SDADm1#Xw7hY($l4SoBg#+@mj0%1n$i+ZJ1+c&H|x6L~+L2%g41|wm$S?~20
z%MbO#X)ezq$|fpB15`zJbS&UG1QiZe5T+4)$w?l)o%IZT=B{*j!YB*0MZ8bHrQ!Q4
zLY16lBNxC+*FPr`Ud7F())cBCb06OfmP4OY9q3IBN3a7_^bccHqIB52!qdaBqf+i-
zf>25P;FqTm4*HrXwxD=j4yV0Ws!NuX#<6(oT(axV)T<H9@TyUmy09F$u+rZ9$9|A#
z^M<Blm^kZQ5=hP3Vs$pCvir1#jwrJ)o4(=y&b_ck(AyK{n~so4L=i)UEoD#KnHIqt
zGVI0PHhy@dXuvj+Zh2LOUQn|Ofx2Vj8jm25PlfWEs3-Qj6^sP|(fT7EQDCqV373A`
z{g|+!#}|?!^<C5a+<nOYpT}1zS|QWpbw(bYGk94eUz==p4_ob9HQb4!Eu9*O8ox;`
z1#|QteV$_%UsB4htRU+vwt_AeOwqGvoKS(VlR@F^2w}47RQvXwt@#^1Tmun=Q^PDb
z@|M(9=H?EpD{`}6on5n)6|$TW08{~nz5YUK4wB5DxydoY`r`z2{b7&>S;l)3BpzoW
ze%-8-D8@ujwbXM^_2d}ErgsI%%h7M;6dsVKCd#DYQ$CFuGN1Gbd~wD$7fOjG`*Azp
zxjC~dsyYvs3|?0t**<X{0RnGJgnahwy=si^_@*KRG*fU?sE0(HXnWeLr`{0t!8%k|
zyUjbZG_XM5V^7%&uN4tK<1P2s>(3liHFdryZ^@wtfoHoE&%Qp-;8^8IpMlm!e{4rz
zQm<Rs*NyAzor#T;8Rm~N#(&-4GX7T^-14|lnYWCnK{sCEtr_AOlS^4t+U7k2l)|R-
z9P|Sq((fW4ie>w`-MOt8z#{3zFr?2OPdN+C<_J0bp=eG<<DgxE7QxzRle4rN1GU6*
z9s2FnaB$B(n~462di4;UMho{Qr)y$?9D|AWUebYC)q`a#W4o==AJY_(YFkqGWS^3z
zwG^g?%F(DV#0nL#&vj`_nab=j!S!j$*n5OU9ajzzPmiwibON7JBR>W*NIx)VPWbdk
zr24DaM2dmAkn;zzk*Q+CC_B#^G58*}4)1elvLo5%!Xy+9YuPWH9?g_2(B;N*OWCQz
zxQR_xUX<#-+voZjka=Z#v$UrO+g2vxF(7DP2&OY)&<JhgY~VN8C<ae1g)vDuhn+)d
z<rz3pcW?B~{ti<(J2$c-3oQ6TkM^Kn1nUSnb}+i6XaLP|zN;2eW3BCb@65l9)UP3U
z9V%vKmOn>|<*yeJB{y3jKu+HT2#^LEnduAKxDskIyolKtnF!fAnY3X53O0@}uO);G
zFIx6MYez!n7pcNaG0?%r$=(p?@bWezXK!Pu2z1m0yu6kX0+fKRjxTniHZRJIzqMap
zX8=Mk`4@W!!dI9mz`PXwiJSi)tHb{1Z~s-DU$FgqeO{~l`!(&QEic_e_^W>$2mz92
zMh=9UFt62BfMNW7(<XfJ<n+=~roXr7A0Ga2Af)f8Z)s!lr>8%<P#Wl{Z}cJ|Wcuyv
zZ(Z_N9RLc9j4+IhufGXU;Dq7)onVLg)snwiyykz``oFb!_4$W|puPj}b-Vy7vf@%Q
zA~Z^7RzL?jK^se>U&AO2bTG6xvvstwCwzg$YfXN^=GEe5oXzYV9ED8v?FpHg08;vY
zq#4<n0jg$3j;0QpFifnki2C;*W@cu>S2+_q2h6|Ic$G5{va<iaUNm4hnHdP#nV1OK
z*w}yF|4je3X6AV9p%?tVNI6+pervq=X8YBJuez+PZ2x5Ys{LC2+y3>Nm4V@<E-&A|
zbXi`!yxP3p|ESGN?xnu3n*Wq~wR<gL_^ta=lUM!Ml2>1Uc>I<6$8Y`HHviK7<>w{!
zA2t5)@xRDldhO*o6tR9G6wItm2$_C^NYTl_@%5p99YV&x0Q5`x2ONHl?w@vmS8)6z
zqiSX?VC`V`kG!y%u`%#vUU-=ZG+&+x27s{{%<I@&nOQqIX#eH@byWT**n|ZX<u%m)
z0Goo1mA>`ApzXDh|CeZc9fLowS9h;yd(Hoex?kh`I@W(&uR4E?*Dqwgl>G5|>Fq!9
z_9y;+BkNWE>h%x#3)(nd#{X6K<@y5^zwz=H694r2+wS)_!^=F){0l#?b@+w7Kkl#P
zf7bC8eXrMR{`JoONBSiX^IG=1F0aqRpIWb_ueEu-|JHc1{H6J#{U0&(3%kFO_#but
zXvO~`XJupgCmjBsLjDsDU#0(-IArDo*g4s}aB5~Irj9V2Y`=4sKx4;0APO+H{I@9m
z+a&srDN#*QUPeju50r|(%;RQ;{}ZOKQ^9{gDGS@bofChd??3nZ|8t-I()eHc{7?Ds
zvHm-be*1pK#czE5!p~pG_!B>`v)3Q^`K|YA_v+`j{h$8-miwFJPlWy7w2+OR^`B7l
zYtaP!C)E6H!TkSV_WHHz{T-CAOW$9s;x9bN=vx8*!}=-svaQmjds*e_m>5_IIbWt)
zwwJBdE8qJ<Q?tMT1RM-scUCWjFWV%2TQT4(ZhvQAf8<s6Y6%1Q4L<>E6U&zk84N(t
z5oo3Ivd7|p0Z5xUIJ`{qzn0uraJ@KsS(0BiWt0E`fFM8!APf)zhy$bm(f}ENEI<yR
z08j)d0h9qM0Cj*qK;IEy05Aj?+F06H1B?Jb0MO1!-x6T_GMxiV0j6%Yra)_e8NdQy
z39tk@IQ*X80oDK;fGxoG<vFu40@wo_01lS=4yFJHTYW<yz!BgCaI!W6+B+E9*aHF1
z09Sw;)vum<WzCrh8Gk)Bf2|O|@_+R4Z$|v@g!oHi|GsVs{mG!SFtc#*@%@7<|CH>e
zq`22I;PP&G6+K*{g@%LF^hn8KCU3_4(;(MIU~U3d59&Z5kr+8t%m(bGR16e!kr*P3
zzc0GQ41RfiQKGxMg{GBkDKBrSO8ef*kF5%)&TQVB<@#@rd-P9)3mztCj~#25PnmmL
z^443F_|bc(1j&@jwDU0;h&y+85bTMA(l~?Cdo;E`&tOGYQEUwmVBF4QLo}yYCa?iA
z4A8hJ{Cu(YTi=s9_jDO=x;lK_F84Z{89B)$@i9=+ckc^DB9iY!jcz+QwpztYLL<a4
zK1uT#iJ`<PBIk>ndE12{9l)%44To)rcT|KtANf5u&pe;)qKeRIWYrPfo)08Qr|*Q<
z{jkE?_!9a_J+?LX;d5)=P2Xw6(iwm|#@2SHWagVw61Yte{g3>j)M@KOR&#{<IQLJB
zlB2oCiuY7Lhi{x>+yh{;+2lfsqo&_d$1DoBi&zz)D`*ypOskkP)<<awS`{WK*eG%r
z1E=ZDIaw3aWWtKk%^?!S+!RoXoTi1tKhTjs7AzNG9^wO1_AuFj8DZ};3C5l$t*SK(
zmkj+nvz5+W^yzuyXD8-Tghsx9j~`5qem=?925>H~EGsS(xc0feYde0f8CBdgyXJZC
z_i3G-$n0&J+<SShu=i$%pOxdCrNh%uK}9l2CWau=->)~!yON~iSyE2U;QNZJb+fur
zz*c+yD0B2vdGxM`#udc-ak}|~dOFhl%W)LJjFX#C%Xo7M7kYl4qqKEdaaS2*>1ZVG
z>13Yhcy)BwIVKKR<}$d^mQFiSt=kF+bf^H6x??D}l}R2ft5Xs^MEJoyB%op*FQbh@
zgO-as@`h%Awe3Pn5;Nf5%prx3U1^Mxa7|_q)uOB@00bv0{7VTn4c5fUfT)Ml)b#aT
z!XvU4e|mn}u`5Zlnxw}^TH(T`HCcDwp!_N*6+OnXblSVxD`iad9&=k92!X5`ng(TL
z52gxh2Rst@cagP)_g|@G(RF%C`+k;ax%SRyQ}YZ(QkyCIO4L$ifxs>s$ij#qWM#bf
z9c)Lka|Q0l-swP_*l}xXPLZMWcDPYnc8~lt;_0URz8!g}V(mmT2I8Q{II<zcm^`$p
zx;xr8b#4)@18L)WwMVfI%e?!(yR0v+OUL?r@NB)23H17O_#x)ObZer!G_LvzE7f#M
zfQEJ}`WW9Wq@T)uV-H+~S3)oqTiqOUcT0P99#m-n*&(O6@572wk?4$+p|)G&ygm}g
z`HlUenYqg1rXJ+eH=MB?=_5zZv)$OByBUE_%_K!LY-2qNxciN%mV#hvlQ0Cg5_>%(
zPn<Jc%iZV^fA$65R-<r!U>qCYdn_v<?xlE$c={rnoWXa(-Y{ETdCyWwb*jrG^@Ch<
zjPT>1p_Cb$Ik6})iX*0IZWcgGS3kUi@3}mGi~Es8pDhzyp5JE`{$cR5Duyjbpas1>
zK%1Bvi=0{=!hs?Jd7XB3_>_LcngNcHApjrB-t-$W1eh*wQ1g20Dbns)nD|mUA<_&&
zR55v{LP$@lJc<?k+);p5iCKXNbZIjPdZMygsfA^f^h{JJR^8b^{P(^DUXQK#G%jUB
zY3sdAF1OB@J(V5^?~_sn(m*iRPerWA#8rV(ffD|JuR(J#*h)!+#w;Q5(&B3X2$UPN
zC8N@(_3PW8bSIlhzKd|CSQ;_SO6bTK58jK;eSxOt-z2mQEO)wwJtWX4xQO+`>S|y?
z2R=K=m9M0X4K;f>VhBUW1wo$y$p=ZnKM)M*1f-m(v+^QSX8VP-<drb?vh+q53!<Tm
z_UnD=@eMyME5;1m+1sp&7CQD_pWqghwMIy7L}P0oJ;IqQqw@#hK2rT$%BX9o2jF#W
zD=cp#2DC~n$0#H(MW%e*-TLHZXC)AlU#uBGnw#U{TItWHD3@O!7!9ZA`jMVCx~|6W
zdfRha=JXSr&eux9CmaI&9#z^AiNZ_eTX5`zXnWXNNh4*mezQ>ZI;*)0tCjBPUQ(ej
zI(t&XTx3NdHpncm7$TVg8r+_efyqf2CI2tdiNPp~mn|rvx8E0MI#=VaM>t6q+=&<b
zGNhL5KA1?>(&x#0($-R!(kFZmykFEj_W+!+iT$)qg*CzGGH)I~I~j^Od6N1<*db|i
z7KYn0;dG(XsHT%hHL7Alm}R8xl?=w`F0AwHe|JZuYSC8l43b-$Q5ynBGd-K)fr;7Q
z4Re=KtziKTJU8Rw<5NryOo2)~5rTdQyrJB;_EN7Xr6KzfcL}ogu0eB57u}}N<M6nD
z?kna*PAL$~nGdk5%%7Bo!Zm-@pIW~Q`>yaa9R_xJBP<rAH*uj2cJw2WuaJ5P9Jmo?
z);PWKd{a3aezJ&p?<HCfzM>Pp0%5s)xvF*FQoE`^(W)`MD3GtHqGm*1E$|EN4*I~y
z2vo=T>S?t!&A_`|HIi=7tV?V39))j>IgM>?^+S98?Xqs1dTg%#n6e=U@ghQ6n}wD#
zA16#%FbD~pbllp(%n#0H;SFSI)jUkKo3tlZoR&|^=!z!P`kNC66qLT;T2yDEN8sz&
zef}xVHa^cwE{F9AJ1qq(qzALJBjzai&T<bBUJB1jJ(hz%ZGLi0?${5KJf9FKRsNPS
z42w=Xc`V~L+K^uCqj=&V)rqCExQ?9;S|+T-+2H!jxKXJ&-S_G(Wf=GD?4ih-80tN-
z8rt`|`AR?|+&Ns<1mlcJwp@E9Ma4tUiGW>yg#bDvo$iqK_*}(JhnZpdVQ2{}>yB?J
zKw@kitHQ9Ogd8p-tJBkC8ft1fKq*I>R=Rv~h2%|zQX)+(z8UK+(_H_pVK`_1=pB^v
zyjEJkPT<xRNyo9emq-PfKbDt<w9l2D?oYEBw{1{9gsd(cLiJ1LUC06B4-#Z@Q3#W^
zhzQjmJh02GLYo&`;5-b)H$UQSP?dv@6*CZ5ea~zjKLt;<jAQV2G8QbOC3g3jHShb`
zT#zN14SO~_>$!*g&Bp$YSrGnfitPx9`3gBN(O{J%2gd`l%i2J#KX;bo{o3I~s=dRG
zW_9O{=zQWWkzi3qQDMu7yivXDbE*A^*JT-!Fem7$I%G6%(pS_W3RPVleSx4P;;{Ta
z1^@6=6tf03GxHLbB1z|Ax7?ENDL>WX%S#`TMz)My=dy~+Ea?oOe5ctt2$HWx*Bv5!
z2Sq~)OGprFr=LNjJnRn_v+HFlX%Z8*<6NK{aVuocghx`1?;%y!aMb(@M^pWD2jd8K
zyFa%QG_E$&et+<qx{P&q4(5i3z3l|pR$0)5T6lHadOL1>T3lS}|IALt0*@`-C7|X1
zCizQHBkbW!=ntw?wtKTW3oYwHyKx%H1hz}O;E2K;qaPmxA`m5-o>3!{CJVf<Pu%_W
ze_C5kyoYbJW9B3ODl-72S9cZ+chIsxz)|>IAz*@e%9cd6e-!+MXA|5N5^pxy6ps9f
z%{mB>8C2-QdA1P5c694K?A%g0Aa9>orN1|0?^gr|`P7&DkU^p$ZLASYkH-kPqq>f!
zr&*z8ZJ{h?p)HdDWNt3Ga$o#vbxbB6Mw%oQVr%855^&4bJ6Zr;a~<sr`_bVhXkS74
z<O)WiRZ7Mu*5oUHI;LmpK&RaiIEN^GU5@)q7oRap7~9$KEMjpJ`Yzk?sc(Kck2RZ=
z0m)mG+8#Mn39ht>OecvoV?s7f;*n>S8NgA37oyRUta)0KCw*p=$yz!BN+;jk-Tq7D
zuv?=6isz&AC!xn8`U=ELEVN-wxGxPzXKXs$mcc$T^Ig&e3tu)(c`(Mh6*hl5oa1ih
zZ@<5d@MmD!yR-}K!yW5slKuXb1Lng|eSBkvc34+L80a})zwgNYo`RuR?dRS!XXrV6
zcDpLAwvsswUmmbP+3|nSgUj9-SZy8TDZ4GcHT3rW$e{`x65t}wQQtVW<>0C~KGC_>
z@g-&v$v`TN=C@(K7X)nF3py0Z;203nfe_Q{aG$9fJksdnW!2sL2{p9{>gu=j`Vzn?
z(tX=py{pvpcrW0i|FSb?eyG4iXeCxFFR>+IKKzjGQamN}PBg)AG8L1-!AC#+uym=z
z47Pt-rksUUx@;(NY$-71y?<2%xzHF~=ve*Yf?C8K<stcjJuM_b<hNxULI{d$)p4)p
z{996p=%hzo#-^sSni_jrP?FuXU_DiL+`VnTn1n{q*^3W?c$Vms3ER_~diy^*CfAGj
zRy}k37lXdVZSLyya}R{KS`{f{RJfp-Xk?|=2FpQsJB}M2mPj>XaZC#ekv>Vi+31<T
zTL#cl(^b$=)0NjHaUfnQewZJ@E1^^mCcP5VTGe2-JDFu1Lg*E&l+`23JV`4Ek+U}0
z3TJgHir*k_F+Z6}-g}DWxcEWD`S}g6w5K6Yth}0~rK^~xr%h#Tc_aHbtX+vnVJk(A
zM7ByD;$%<TEL!&vMf+h|Qu4{Wgoid-WZrraETbQ%vyfjU@(MQ1&dR!T^8>iMy|T80
zkMC_gsJZrQ$rv0*Gx-NOi#hUzR-CuV;{zw4_01gIniDxB6RR1|mSaD*=^%6MJ>B8C
z!iBuEc~92u(4n@Fc*+mTr#j~7?R_1|bXPZzWg%T-WuhhJbNZZ5|6J)<^)=i{xuEr(
zNuj>KK0_0JD>FqPITU*26EVxCUN^KpZxh0Gcb|drv`qT!p?y*-2aDkQ<gYL|VDql*
z+6u*v`n-J7t~J@Kat5?)=sS6D6XN6Zr#4j2X;zm-+cX8TnC5`$xdWsqspV1(t&66G
z0bkzb?|MT7I>tYm@az<|DMkF?6D$2D>#UtqJ;kLYmmv8L_M_YLUD@q^z5PHvGzU9z
z-S;PWNxi1z_cb^DyIa=X)$i)`-?2K}*mR#(hUoa28Mrd+D(bd+9)95DP0-D!BE{g%
zo@g`l^MS_;ePlU;b%b28JU-x9T6iFHAL_DNybv$H(&%>xYie=sMLP~<GNN2EJ~e0}
zIOhXjF|JV6_-sffUdv=;NH$^k88=njx!kZ4jRIqpC59L2Hb>rr^j*X`uT9O4NA@wZ
zQVtivw36zKx|+W^trPl%_xquPOE)z4koQWFPowEgzH#@n-t`T}RU;v9J_uchIOwsS
z;g{{Akkc9j<WH{O$bPs%aLha<h;fDx*Bgq$g@xw9;~igHSeQHG+8th5uUlSQm{6W4
zlABznUMBKYHCqOM8VC0##ajJ2c+=%Mww1ALaa;t1HbF8NIJt$iNB&%)NC@nt2r(U7
zOQyQ_JqSGrX#hFD?Sd`J>UyMS&+(}-<-9?`7%jLeqA`@Cgi-vm3Hksm9d|eOxY>Z^
z1s%L!?9a6k`oe`gCi{2-GMuBR2d95#)D}JdQ@af;WL>BV8Q|Nr(Y@HAOPY3_I1y5>
z8H=zQO3@=c|K`36w4fKJ#_EcQ({?se+o5ro^{PBSiAgeSo4E+d64^Q&D4TMKT0p5d
zgwz>nD_Y0H!z-W3!Af3!((~cNdq-!9kByvG@Kdn+NWPGtezaWSy1P=lN}=0nEn(i3
zg_d2ixCeP_3Zw<45($rmFCA%^W8;)&gd*{Bo6VJs80RfeGVVue^f;+IxSN<nJpRZp
zKS^oy_EC|l<6u%iv($Kyt=il7hYb~d=ggH9Gbt!`+pDPYqiR7bGnorq_cNVB6!q*m
zZj3F#?AzWWaL}wW1&j!|6p(;%l<-g(*A;qjsXG@KTe6C|VAl+g&H?zST^k}7Vg~G6
z6s(5`FtvyvwHsYO|IQZc?PAOIo>HPZnfYtv(3K?#9v*(JgYQftkL;Z8K<C$J+CRr=
z8DF`%|Aw^s4?O&D*6Jnl^1@tk5^}IH6SA{#{wr(sQuue)>R0wJ*6LOG?^!FR7s-Fg
zT1ozmw|Zr*R9+Y>1Au|PJ;1<T-_Qc+_)6{mnf^uk{)5Xhw6U_%|IKK<l4`#hEn`c7
z$=_)$^Iyc4)!$ex8*AVzv-KMB{N?*s>bK`V=&oM`^Do(7RP%2R%*^$F@L-On_P`fD
z%*Ez~5pxE(yb@smcc8t^Ke1uI0(*aB!~Pa9`R~~<R*rvW!_-V%QB-H~i9C#<$n;2J
z7-FFg9HGF(pk^FF2iiA+J<dduXor)GBvs>p>J3KCH>)@WoTyWRaEx@&@Zv*pfzpIV
zHy>}f)-JU<7ffz$oqfEbAB1L?Q$5Bw&)n8--bGZUidLzWrCP^U=M2+mZ5jq_mOTT2
zxN0N0W+N8I+G5<_?FEg$o|_=+k>iZi73=iHFEW<y_4ujkFXHwD_b=LZP5r27jo9<}
znnbsTl@*hUiiICr<9c$)dV~&XLjQF6#b9uJd+5BW-)0M7mc#fRx;n>>DumcDKrtRe
z_M~;5jD?4lobq7J=YDSL$!ClLYIEzvj(gLEoa0nNLPmTgISJp9kYt|fa=tr8C?}*h
zqnCtOJ8wDHkjLP?=ibW48&B4+^&eErw9uN|qfAfk320Zv5G6x<`)~r8zmwYqx<<IB
z+mbCqx%336Nw^~G^uZf&Zb%=Ksvz<Ol2pgdi<A*Nqm+j6_F)?Us-x#+%Shl6kDw_w
z39J1$ggFpd7(bbk>JYJ^RQJ&mf1DQ_A=e?>MO+GN4#cxdsG`_Kf`vlwCTUooL}U}D
zv`Z#4(#~kGTV%M`b_T~;7_zcnvaXV@YnL66cPLW0<JFK{%R1$4-%BK`R2oZRBQYIN
zWqzNrz$VFZv~vtv>*LM3IrGHHy&Jk0Ihr`e%X@R?Ot8SYfVTLl+NBYY*{H8G)E4Qs
z>!y8~X$Nnwgv-3QcWZW;HR97k2zF>J8|X*9KQq>*)1P);wEgqQs2|Bt?5oyRK|H0A
zg8iFzy5S4u?@ZaUWIO5B=4=NNSH|588P>3LM$b%&{zOQjZiM0~M>z$|dPuCPa1op_
z{?aj`(haq#o^t)R->N$>Lq2XDhu<>v2)ZBDjATay<4q55u@*S<XO%=OQ1Is@n0JzX
zrN~0>MugqTOHP|EG))nIM6~t3pTOMk<9!H8&^k&*qPjx;9+)6tGM(_IWtj2;i4ZQ|
zImy^#Z>p9;#m{<IBoVL93nUT17dZX)zHkQxmSgJ+a;h;7?}1ctBT$lUXRFs+Xa&-x
zq?Nm6vE*Ywyq?%R#tQCIir%6wn?VJAMQOoF*4&(03k14gI%}RO4nckVIHcF08$>Xg
zHu2)qK~TcLdH}4ShsIEK!v4tmvX}2Q63!A>)ffZ}m9(^gezUPyZ@mxvLW_lt1&05q
zj=<Mx7Mbv}F!iNAbMLp3Syee7p|`WaEs}`%G=BWRGle|yzJr4ybeTag%_QW`WcIeh
za)*n3@@NbSoVm(}-uzHw9Wb^}5b|>TcgwY3Xr$7MHpAu`tlQPzUa!OoyIAaN+~)vX
z!pX27d^@Wm-g+qWm=5DsbKT?0Z>00&3Ab}Z#xWM3m>zb>yp8+e2ivQ0K*pe(RKTyB
zK83rz&4z=!;SFN(Jn9kC5F_ZMTSV4vUUPRxg*60PjT}olyA0|dZh>DL^M>#61Hqf6
zNvKqOBzjpByhN2$%PqS=zWu~s>}p)k&|af+f)jIwMO-dK)wrn(wPYs(L@=4d2ry=I
zzhipeZ3G6+^O?y6+{y>H!bpRYZm%_XP{vAR>h@a4G;OTmlQ+FKohOZHYiebyIzX3!
z)TsLFZm%`+<a*;Z&0eMU@e@1`sO%<wQ|6KbY<0`Hg|BEm*0zwF{At$C8d0pJ;^cVH
zZNij>7R&i)p?WOEEyD8s9H{V{9}?%m2#;->AH`-t?oz-o9N0kZqO}e~2JmOc0P`aV
z=Y}#o2lp*L$nHYY6frjY)7ayZLT^+Rwy10S+QKS=a#0m7a@1-BMDh|D!lvs`QCUE+
zxz-&@O8S5n2kuM+9s1l02?E{~EI<nv4cUUlRJzsF4<-yN)0RImZ$<~GXWQ)>y!jF|
zhuRm*6lO%Q3lywC3)5kuB-EkTh?%HHeJg4c*y{_GMIibMPk*341SyznEB5wRq;j<9
zH;GI6R<Ij`L&bblaHB?*QP2|1EE84eFRQHQb^y0-X@9eKPu|u&98kF+Ar7oy(gi`~
zFGxI83|IIu?7Mor**sN$GC$YhKT-7U$AuAMFKp<?n?<~dOX8rcAeD4+Av-^G8>2Jj
zw^Ah<7T{=6aBj-*2o)b!`93XsH%a=2%5HrXamtRJTU+Gt%po(Ert@L5OpIb+UQ%lu
zT&N2DzTO6BR-=}$coA(G8Wo8mu>*4?e!)upDf|iS6B&CQm=4d3BKzdGF?w<7kuT!l
zZ4B~T${@#HGU`j_3Du<rUTp9#(Y2}DQ@CUYd5IXsvg79zbt+=o!|cPp>`|nsp{n8i
zlY!Hi;<VX9x!e$7=S1$BQlI1!!&y66CKc0V-Mv;<G-v0B2yp9G#L$XlRGkttsCJ~4
zjSV!=U=;vmp3W_C%b(GbO9o5_QYTkg)A0}XB^<c|?(TF0Yn6#tVr;B%?a*qQ!~01$
z#bWt|8+J5}2tkLGYIqh}hx)u=vC;Bx^Sg#X(a3^j@T>%Mh)X^IW8gZWO>+4vRC3~v
z?7x4gP&B`UQR0$=dS@)jo&h=7G|CPON5?hdtM6m&fMP?E%eCEaPY6aVQp2JTC$VYm
zOVy+Q#y1txT;d(YJJ<L(NHd>I;*{L>`v*P?ZkTU>^}<NnMJo*#U_?+#Ms-48SN0H5
zDlZXJ*#gHKkJeI@l6NK=4<L>&Mq+QuxaW=25UiH~UB~iWRhxypJvXuL_m$BNYV7K_
zOVYN*0ya50?-6vnboRv<!fWqA^&{s)jZ<Ar5`p~q+!b1*u9UoprgrddA8pAiLxFng
z=&+>J9A?_RULc#PB*NFv+OqV3dj@mw+k4?0v=AnTw?c|j{jr2Fd1Gdj>lbo9S3|&#
z_5~r`*wwRfkP_)nyg!jOu0lZ#5+_;2<2Z=e;l`1^;|2J?m2faCf|NNcEUdFFsdBJQ
zuI!Gpqw1tYAPtyKP-6$w!Itm!5K1^S&i@1wRoJ>fIO(brPn>2`xX2$Oe4dO>R8!!h
zDW-E54|9(U4k->k?4)b%+=*WyOobF)2<NCr7W3<)j?YU>C=}IdyTd{j!oz6c-%FqS
z5^jCymN=9~U25E6qu)JydtMY23332r6f(vCvB~GpOoNk7ccPIAUXCVDS7HE;2pUGp
zN+ntxV`N;om)4ZKh+A7in5V2095!P>Z#l8Ph=+nzj4qe7a(Dyk9v>lAN5!T_9{pu6
zY+VzbTBd{@2WB*X#y{kI=4@i~ZIBA|Hct%IScHP~urdzw7WL6AhtzWtoT`-Ph`f0~
zKQw2@LR*v85^afG9;k@#Df2EEH2K$}l<!3Vq8soGh&5k_20pL7@mQ!c$Bq!`v#^TT
z0(W&$)=s(tV}yBel7=%s>C7iqI8U14Yo<;mbu9GE6tyn`pPm!3xQpX$L#&Vw8c7+D
z>@N1(x6!RCWL89&s}rsrYHtO)6Zrb0n3L^5`!w%IKyK94WmGaXVgVSmBBP=HLE)2a
z3N&>zw7~*&GO|@E=0h~e=+H!A(^`uDqUFh~ZplF)NJA2wq>)Hu`M^*{q#Zqp5f&qK
zBM>f55)!HsR<rZnbIzZ$oFKEMJG%{Wn_PHfFjw4>R?MYOeCg_MRUJHCf+$+wxF=3w
z#JIbiUMFiCtD9D5Gt^U72&#d)!p$Vs@40-MU*Af^$EQ7q4_yQ0%SGDTkQm}yRh?bz
zw<#;PG;bCgdm1cz5Ap@ufLf=j+G^14f=qt%Gdhq_LvuS`z&lZuc*bB>U7}cL4BfiM
zK*66;ov=jZQG)qQu1fDB(25E=YQ$<u{ETYdx`E!j^0PC#QF6(t)Wkeq{H?>I(#D6B
zAnCG!K?XdO5~GCpaur{mWiC##-nYAoWh~z6v6EgZM1aYCKcw*$QT3`f<pqLE$Pyp*
z5As!rHS54eaWo+p_B={t9HHRlz;Dk#A!*hfBSQ}DAg3y&WKu?e{(!gvtmB$Gm>;h$
z#CzkvU5=hC!L{gep7mWL(9p|b+%SVvj}!3DVS#n3oZ5$G9oA>EoS1!QkC?D~eLE2k
z`E0QrK}oZ*KL0gUL*Zsp>uH={6V?fKpkAOPqMtSdhqFTybPN6s2I4%f3sLQd)q)nm
z-mgZdtm+O5nwE1D=CbQ>4@^QNkNzmQ-Q?Kc&&ookqg?=k2ENhwT{{_Zka#P}-9R}E
z8y$9$KJAfb$7(LZVM{+!oF~5O*Z{2w;vWzfx)TkDWf6MQ2dyzS)r{xC5mj54&zz^#
zOCo+#<#5_x-{4s@zYAt=%^ka|t9WAyVViU;b2%c8OrHN)Soo)jyKi1sCvn@11;-($
zujP5}!9o{wi_5vvC@25(20>C?cQ*NKrJ81?8ux}WZ3PC6rn~t_O%sf_dak(2$59~>
z5i3>xUVVx&uxDX`Tp#PEI}&%rAFBHh#f#+eTpA}$3xZaY;*wq3*sH#^i~?T%c=ApJ
zJS(GjJK!TV?hI1NhRp-GqgjrWV++*Jpvvjh92y6<?`N{9RoQ(**5fz3TO_Ttle?W5
z2v5aL`Pk|z%)o;sIH3_Z?Xls4MfYv{&qnjVt%gcqSkzHH6eo4OshsUC((ytmJzyJY
zS)1=O&c&oJbb(ET=xcElGDl*s=FrK4+D}}<Q{`k0Tn$AgB`?gE{Cw-yR;Lt%8lh(%
z=1AyOXkvg0mB)Ju`QUgX(Ax#oSy<l&_rsUQ`*8^tu`uSSLYmE=Np5C!L2Wuww|LUu
zdfdd!%F?FB(SIsiU7f}{FV@qZs8HyM-wtA2cCofM+7eEn!9qJN#5^jgBmOO~=a=UB
zY0l+E!brL;Rndf>0fu!Jo_!Mm-E-cX&jQ~s$7=WpLPBg!fa)BlqWJ=kSa4p&YyM-_
z_V5yXo(Tv5ISK7RQmQ$+h-5vo#kW!DG<>{j2{@D~kpp!_BTlhfZ~N7XNbZ)A(K>Vm
z;NCSR+-&5O@OdV`xs{_H#4V0M284H2)S%gL-}Rh!M<5Jf%&+x)Q#U5MIoJ`s+G7b+
z%7ibsuSMI?VKb9XGw3Q!zlb81sOSCAK#|q(jJ+sTwoCf?bKl_1XSVw3X%_av=|264
zhp;A^`f!2ASY_ud-r&tW*yCj83d|F;&yTs&JjKHMgrGfd^^vUBbg<D?P<If)-UiCs
zAu*;3bfI{%Y{OV(oCQYWmLjkkA5HNiw~yWLe`JLm>t0xWK&=56nV*fhmPy1`Ebh+%
zOW0HX@;zRd_p!MhKIZ9q<7?$IpU5(|KN*I9a2My@GXG8D7AV%nr-#}7$v!5N;|9BZ
z$_h{}>7eK2;`1y)mtD#a#oQ^lX(#6S4DAEC^=iEptT1-oy7^tR52R)-g5=-O49Q}!
z0%ua|4M@nJ6QuOb9c{ie=X6Zoi3+G{j!K^+%0}p*Xg+J&pFec*;OGf}UZd$GW=MlC
zkS`-iO{l}jg3k0{_vIdmfiD|yyQL~+(=|95(HSWx3rR?3eHx*dIdU+<DRXpwkhQ3)
z3BQ`*SYjYB)*Nz_j)A|Avc`AJT{m!S;xAS_yl@j?`t+9aAOkljFpJ3F4xNb~LlMgn
zqTCmMc~_JJW057vtE7jGSWfDyMDl{4ZD@EH-DFF^fh~DKY{yK9)Q*#$Sf>ol#W+gd
z@Y7`ELWln_i^NH6)>-Hv6itSj51xtYScn4b!RL7N(y^%#grCNhWemk6-^_@Va~aL5
z*iC8Bw?F`~3at_SkeB;Z_E{;){b?Mgz#rM~F0^!l-t`60y7`l$w=)m#<^s>}i>jBg
z^)~!U6b#c<5F}WP;Tm)jv8Jhxry%D9ueKTH1bax0>mK#RhsDd<Q4%=>mXT(+?DmZw
zYh^;j(I+M2m2*$?^eMpWMEW6wyiWAoD6&J$iEX3%6sR#$r)R!6QlWoA3;n9(8aSg!
z7hr`(@y08MSU>MgkRr87&_n23KzO5E*rI9s^jmi~h7|wGK&?glKAP{L-0v?1jq<q9
zA)yy=5XN1onrBH!6b|*hH1+SctV9ABzpDDeP$gP4%#TV;l`9MdV-Fd7K`&S~g+j0Q
zk&}rG&QP#6vQ5|5k+b!|AlBSQuQ7BoH|o@^XX;$9rD$j1oD2d2B!3))>O6;TCk*YU
zMdAzPh$;@vS%8ecZ7GtA#X%!D#W!xZ+Z?5y9UioFMZVc{&YJ&RmG|+8cooEyi~q7E
z+529l(?;k}tgblneq!clMPT(d&SdL4=g-lHqVM)oiAfdQd1@Sh-oPW;0yJ{l3R&}O
zc^^KsJ3ix^Z0(F{MY^k%-Yl=FTUg&IkPM9L<425c3KR>TB~tZeKn6BRTEol<-2%ia
zgk%jn8Lk8eCQ8F)sB-Q2;T^Og@6nQnB?l8@vSM_PPbXCG(VSu|b~SiwTbNTqLHXy;
z+Cs8sh?nl%?}|+xdEgPEYc*4^GSc_)ix(;4n~LpHk!|U!^SeFYbh=CNf^sDe;FZ41
zUo9WvEqd5{o2u>=6^ss(;wz$9jJ2_Q@NqcrG5`dj9E)^j1-$)^=~7SktKB#lHR%;n
zBD8U-rHbYkbI5j_MoZqfeH8joxTIhzzFZf>v<a$`8lA=NnReJ?P=cJfXB)Gh*E3CA
zD-Z$oT-SaY?GUE8WjkRX5o(i6sA<cVU<Z|=oW}-pn8`~3ODPB(jpI%V^&<4#4=;pt
zKlzc~J;r`yN6z$WE-m0F(G+$^hmhG{)^r!E!Gx1qy+gRWRyQ-ANMV<Y(oc$Fa_ZWf
z?7Ll%IQ)n1iS3^;^Ze>!tM_#z&^{^A8RA!=cWx&XLcXe?Qq5@4bzV}Q`J9EbIZ*p7
zcRfC($PYj9TS4j8NxRR(A}Dzd7-w?m(ad@d*5>37O^aD1thC?pR@AuXq^-b4aLUMe
zp&5#VFpjlY_1`b+KB1g8QS>RJct#fRy&G>Q{qo?|cp^O+{!<&U@$P7S<!kW4tcCnj
zNSFR%DT!lKZAC*KT|JW&y=p0%XTAj7wC^`%RP=gw=gcD{wGU^((5(<EE3)GcC^*>X
zE7pXRG_(()7L>UKRqxC3CMdL8LBEkk`!nlRwUs*j&_ehOk|ENYJ#+3<=bM!^g!TU8
zqa`H_oLZZ=SJ#?8R3s04AuqZV(q$j6XOq~ndgVySD7rl?Vp5T;#!*bEh==NuL2mst
zR@H|Jw(wl=dC$^}z|Hbm(%Y4$ZykPh8As2ErzGXkErZh^tJiO$7o>PRqvFdExQP?*
zi`^)b1JiT1Tx31Y{2<$O`P!a?(@hSm8N3}oQ)=w1m2Y1^*4Lh}Wq0zO)#zVNDC5k+
zj9WYQsr1m+QA4ujt?AYTWbwXh52z=o@Qvoc5GXHU+cTGlrkR)aS$Eg-@NCJUkBr_!
z4nQo;5X(SkOmV+o?G1j4_eXiW%3FuP9LD}=BV9Vo0Ip*2-u6=1>t-QHm-Cb60Ulu_
z{NCWemi$2#S@aUSbK41Zb|nHhJ`{!sDH)8x_k7-AMSwsWX1c!0prYD&;AoSS<rblW
zGpS(+25|!i337Ijp7z##z$!0@NqnWA1<&61=okb}?oR$G(8-+~8Gq5HcZ>XQE6lRx
z84h<m9n2}xA_{_V7q2?*5o~8ta|@^=vRle#=FP~|R;E9q)TSSQTU%m<*s^I}(bV%H
zfM-J8ORmLxTql1V`o6godbP1Sb5FD7t=ZrB3}4Mw(0`)yb2XqnCXo3|_xZ|uTb$*{
z!+SS9V~qEx$B(9cZO!LdrE+3$uH+t&xxKXZ-YKirnZ*+`qwquYjcz+9X4SpiW;O5A
z!@{P*Kpy5@avX0ZPufIYI_IT+_lP>!_fCTY`H+8&biAG<{ci#t|LG|A???wD3*+lC
z+n0ZpFt8A^aWMaDsN<#Z@1c%g*}p;^4DA0Y)bV<B_kRg>=)XiOUeDaVoVERZ#P;uz
zh<`d?>-Z8s_@_g(Os_E>g}=fEzw-aD57EBFcR2rkh*sIc5e0~y$s*0AM<@7>B{#JO
zHq_TQ)Ysh^1U5G@2^~fW=Gr??T*F?L{N{*M*P7JofXr&rB2I^L9DPwi!+M67xCW{Y
zsNEPrd1S}?q2H;q`}?4b)0n!?+3nNFt?{l`){WcRo*R~!CvJ}(L*_^YVv?ASr=|vB
z5oKDdnh-rOW^5pKjIkJ~G_iF&xTHq<9tk8&Dh89l)0wXW3Z6Ew0$lDpD)N|~r8u`*
z<6&2a5TH!GmaV=-gRFv*Cb__J`Fye<K~VXN&)Vl>+E}H8Fa?!KgbQQ=<@zdN($OMB
z^e?1T_a%Ygxe2<L&)0`O-A|q8Q2w^U$}<LGN;=up)bzzgs8IJ>M~Fs%xG*E4`&i5E
zH}+6&pq!D%!p=lC#AZYIq<F*pEr>)lZ`{(1A;UhH$9{N+v!$=4yj(cKvTNB!{lq5O
z)AH3j;!(VZngz+rdbP(5Cz~RSR4R{*D2`XAmU-vl2>F{C6T!DF{P}YB^*5~Q53C?I
zl2-4X;m~V1<aOtl7SBfx4zD*|u8rgXfIXjgB7yhW0>*2Bm*;_YChcgHzB6V{i*hoz
z*oR0K;k+>HvvrxBx83gt0GSY`hEW3fjrh#4RXm5v=!1pa!uye92`uaFy?8m5*5A$e
zgBhCXNA}Z#KGjOOMoaDO1{etCSh}fDC%#F_Nw2{7blq}yw2$-I%JWlah<c(sS~Tv^
z`NoSuwbGbpKjUGhcF>J%$HyNHbyv9@#fNzh#_eH6=?<Um(5*RS@{Mr_T$iabZp>jx
ztGprxew`;9P*}x8t=^(utzA3ls#H4WlFLDBD#eitU&jVkC^V%OQn9cKA=iXl5m4DH
zeRCn|Qm~`akrpJ<>2Rxs|Hc(RBz>KGVVVmImTkfpmu|3|uS&Cy^L@LXO~pAPe<^BI
zxmV%(<~-`GlY{*+v4G*GA7V3cpRX)^rtgw}012~~YHLeC7ebqJ7GpO2yx^NCR@R%o
zgbix5`hq(Sl@#5CAPlpwaR33L4R0Y6`?j3DVib*b9o0A4<yWGK=x;pPud!K2a<`5I
zOBk9Pq_H%>uv|n7l5MpfZOK#x+DFU{=D^xlx#S?zPKa87ZzVNJkhHk&yLS$1FC0FQ
zSI5b>;Ruhf+U`#am;FGfe;{YuTR`kn(`XR4sJHONN?Dd5cr@WJb1F?f<%oM$0dn~4
zzj0=xP=goVm(L-z>9jq!$jAa~g)=-a#D~BoX>`yv`GDWN?911N0v|mi!7-}h{k`>o
zGm*S{!2ld$9Sk1BZxvXmfD|%pMlr&(#TfAhQ{D~p4ErF;^NL7!?|mEOpj{WU`r{S-
z8!eq<khZZjAVq9y31Tx@A7K`zN$`Q_+(h5BUv0L^N>zuoD&7^(5Wfh$MfTRljqMJ?
zgCYiZWdO73*mwFIrPBB<iXWpKojPaCpd=h|qW$@&h)U#|>r6+1rxlwX>uex6RUD&W
z*0OU1wU11yhRsA5{j(z7>M0H;&?YIg!FJ0fC0`^0hQVBokDz@_p{xmlmKbEqzn)Z7
zyT&oog6R*jW}ydNf<$l10~E}rzqWou)#-Gqz~H-j6W@8r0Lu79K3wLI1oVUsq44MQ
z(K%b=*aS7mj-DhutIrL50<#ufv0Ow_(l9ZJs;rO8laQsJ{bv(f>nf(=9>iNv>7Gpx
zW0K|!k4Y5U89#w>{}6b`la%a_e#pL>w&gV?N*eid!$62ycs1V{Lnu=jY%h1;FVp4=
z->ayd@#upAU0Oq3);-{{OM363!ngw!v`BhE2Vy?18Jws4qN650en&fWfe9tI=$J=n
zG=F1m!kqzD1zKA>?LKbma0pdy2%nmh)z=d_?`7IH8W`=pZES-66&}=4w}1SkGwbf+
zkQ6-%js@XOU3qs|Bd4V^itz+znd2o{)Z(>RQN9IBB_KdUI$w^a7|sG<;=}4h#dcZ9
zd6OOT__n#qN`7mP;S;_SnL1eN@-eSyEq1o3!@7|od&U~%R&|4{kV{1mbvocSCTAqc
zSYQTP71#Uikl(DhDZ;M2X8fp7Nr8c{LPYVX5_!G*9{<w^_OTmJ4;1EY4i<i{4_<OJ
zjE-jK-#D@sVQlOSKZ=r3=5dRbKl0Xlc{SHLtk*`^u10A-i2ZPs+@AXqGF-TXxsoNc
z14sS<&D2z!`j!VF`(E<ClBEUbEw5T1tZIl)2E>h<P|r7);+<*9m;V`zS|s1B-5VL7
zZ{6G`KvnErd)c`d<7RI_L<wipqCizoULeoV*gMJq^S0-R2If&w!imyp_>5U`qRi_D
zOy3qQ93xD-r#+0OR4(ioH>2QpQT4P77L$fUFLnaBEua=VM*|m2M)IA>wmiy-v-u^{
zQL87O=8suBGTOSzRffP4=`Ku7G&M=7Ps#>%!_z3=(QRT5MLF^U4^&FS3*=WdA7nM#
z3v|8EEBqyMb71l7!rUQcIrezWAi1(#*<G|t2D0-Jq)4O5mpri+k&pOb;S5J+EbXZ9
z%q8nji?k&%ag9T$QfohLK9ptO41@oim6KJ}F>!a`j5eH~nktK=$9sc^M^f8~N?`Er
z8$%8<{d$2FYdX+z%8Eh;g6FEkcw{GEdoid5WgXjoad$~_?`zsu7a}9&rB5m$Sb0C+
zyC8}dLaVvv3joK2b+^-_e~L#-`Ygnjg^8T6G2341n!3GTefdLB>!@+9<_t`H_d$Yq
zBs!gR)r#ug6@+Zv|7qpwW1A?$_>4fzRAM5?N0=PbaRa>Gdw0FN-r06z-3Q<b%Z5<L
zN9fw#=+^ei^}2TDL&1q-3PB=}2{HtNknjzQ3Ih@m31AooQKHDFMglSdL{L!ixobDp
zbpn6zrfJ?j{k_lgemw8>dU=1p6M5Hn&uSZb?zcbQ+p}m`pBEO^z4`eLblX0B%gw0=
z`W~Nm>$RUo&^3GQn;or9by;<H-x?V>YyPaTXl2@Wr)Kru`p$&4Q+MoJSw5=uL*I&w
zAAVgO>f!U5Pw+FY{(E=gowV|6{CRN*yT87Ceq%w+<~H=t;k47w4II3mt+{#Ouk73_
zRmHpN-{*QRE7-X3VBNs}wJT%JC(j76eYe}P_O-T-iM8~caCX|_rUO-N3!A3M`0+7o
z8h&(MM(bkOnIo&0%`V=tzL!in>BcXcFWl(Yuwl@U<}vqH?JmtKx$;%o$y4U$7ndKp
zc%Ws@@_v6F-!?pZ`Nb;l8`rL%C-43J>^J={oSh$W1TA}x6*+z%`|c-cN7o%;2jtFc
zDDU&_+_DcEt7o+oX7QJ<a;u8hGXtKeYOWpE;|_NFnO|J&-nkpdOE-qjTrqjhxt+C3
zuI~Dxe@4a3W?TM<F#GDQtzXYAi5zNl1Q$;z+Iw=8DWfi9r(+N|E%%`P@}fo4wz)Q7
zOSb1sDxG|cG_A?*vniL~PAuK@@+B&F=-Q|0#-`av`!*b0x~BJxb)W9Ed_TLTtUhbw
zM~6RVx3#SLnY(x9d4G7pf~Rf_-g3Iv+o^ZRI>Ws4Epj{e{64SBVJ~hcRZ$ercH9q|
zbE3fKf<rb~g{RURu;ADB?8h;$+k#JI?Z_Uqd8T_u#S~9jZ0vYftlA~G@f>TqImZb?
z5gsDy3=)#AZx+IU%4W&5l@=FfYJjL1^#}bxfybhLUmzq#Ex6u9gt}%XaZHD()fU`g
zFTqq<_Emd<Xm1b<6hSesV3GoqyNIk*W0Zlz!KLDs#8QwTh&zN&7JRy@21SyLL?VU=
zV~~|fk`e@gL^Mg$1R#h|Z9sKKi9qNjh^KeN>*#0}2pRM~8Q>TZ>2;8l0g>&2+Ub9w
zIfrS1ofVokTxMp%3&_TG?*_gAKMV{HY9dG{xWg`wV!?|_im{^Ua!8GH?J)`&5N)7v
zGBL1+#DmG~J|3(<qTgn~h;|@@OSSnR>0qT1Z6pv)Ak%o75siXK3FT(83kVhpTG>F0
z4z%eW+^Q3(Q!7~+4=ZP_RAfoQYJd)?O&DdM83T$3)0-twW>TBVPD6df!8?O?`-6w?
z_iG8I;lzB|74`$Ea&*204~M;Okr66T1<eSA<dFn|qTmfdAp}9<JuX^8Oa=F->)>{E
z^dlHne0s{cU8Kk7(L#n`DJbZO+a*e};&-Z$^uZudigoQm5;6j}n&C^;3uoG_dP0x%
zsqu=>tEHCca|S9cc$9E^Bxl&C;?~y#I@%qdJD=AYujuW_`@XuFS=|I11}2&8*pAk8
z>@k(c=ji@52u?X#@Q8MWNjdM>i8$WAtFr%RQw@W^@mfYhDrz~MoiA#80nx}rGe!Zn
z0YW&u00!ITA&5l!W_Oq1!>rbX$VpW3NI=)7*>o+l;sxVamSHgoOV}9R2sCD`V1a~<
zrjRC~l4L^+#{*Hli;WRL-XYnBC=<*{vW*supuduAV`1D~Y!oMGf*Hv;BMZ_S$u<hH
zn&?3?juBG)A(q#u<6Us3R2<WdKU&~Y`phtVO8*!W+jSg>qco9&q_`9kH1d10ji*xQ
z)M$j&NyZ@-nNr3J`UY@XGufZObDjF9Do)@$E1>*|k!9YP2l4;|VI3I+a<u0+7&$s1
z$(XK-0MC%}u}NmuMk9t2Ogxvz=P@?HNZBZ4;u$t?WPy#fan^?;rf7;ZA=Rm<dh*fm
NtByb_wP0Lf`hV}$D!2du

literal 0
HcmV?d00001

diff --git a/support/dist-docs-branch-23.06/ovn-detrace.1.txt b/support/dist-docs-branch-23.06/ovn-detrace.1.txt
new file mode 100644
index 00000000..9a01436b
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-detrace.1.txt
@@ -0,0 +1,79 @@
+ovn-detrace(1)                    OVN Manual                    ovn-detrace(1)
+
+NAME
+       ovn-detrace  -  convert  ``ovs-appctl ofproto/trace'' output to combine
+       OVN logical flow information.
+
+SYNOPSIS
+       ovn-detrace < file
+
+       Common options:
+              [-h | --help] [-V | --version]
+
+
+DESCRIPTION
+       The ovn-detrace program reads ovs-appctl ofproto/trace output on stdin,
+       looking for flow cookies, and expand each cookie with corresponding OVN
+       logical flows. It expands logical flow further with the north-bound in‐
+       formation e.g. the ACL that generated the logical flow, when relevant.
+
+OPTIONS
+       -h
+       --help Prints a brief help message to the console.
+
+       -V
+       --version
+              Prints version information to the console.
+
+       --ovnsb=server
+              The OVN Southbound DB remote to contact.  If the OVN_SB_DB envi‐
+              ronment variable is set, its value is used as the default.  Oth‐
+              erwise, the default is unix:@RUNDIR@/ovnsb_db.sock, but this de‐
+              fault is unlikely to be useful  outside  of  single-machine  OVN
+              test environments.
+
+       --ovnnb=server
+              The OVN Northbound DB remote to contact.  If the OVN_NB_DB envi‐
+              ronment variable is set, its value is used as the default.  Oth‐
+              erwise, the default is unix:@RUNDIR@/ovnnb_db.sock, but this de‐
+              fault  is  unlikely  to  be useful outside of single-machine OVN
+              test environments.
+
+       --ovs= Also decode flow information (like OVS ofport) from the flows by
+              connecting to the OVS DB.
+
+       --no-leader-only
+              Connect to any cluster member, not just the leader.  The  option
+              works for OVN Southbound DB and OVN Northbound DB.
+
+       --ovsdb=server
+              The  OVS  DB  remote  to  contact  if  --ovs is present.  If the
+              OVS_RUNDIR environment variable is set, its value is used as the
+              default. Otherwise, the default  is  unix:@RUNDIR@/db.sock,  but
+              this  default is unlikely to be useful outside of single-machine
+              OVN test environments.
+
+       -p privkey.pem
+       --private-key=privkey.pem
+              Specifies a PEM file containing the private key used as  ovn-de�‐
+              trace's identity for outgoing SSL connections.
+
+       -c cert.pem
+       --certificate=cert.pem
+              Specifies a PEM file containing a certificate that certifies the
+              private  key specified on -p or --private-key to be trustworthy.
+              The certificate must be signed by the certificate authority (CA)
+              that the peer in SSL connections will use to verify it.
+
+       -C cacert.pem
+       --ca-cert=cacert.pem
+              Specifies a PEM file containing the CA certificate that  ovn-de�‐
+              trace  should  use to verify certificates presented to it by SSL
+              peers.  (This may be the same certificate that SSL peers use  to
+              verify  the  certificate specified on -c or --certificate, or it
+              may be a different one, depending on the PKI design in use.)
+
+SEE ALSO
+       ovs-appctl(8),ovn-sbctl(8),ovn-nbctl(8),ovn-trace(8)
+
+OVN                                 23.06.3                     ovn-detrace(1)
diff --git a/support/dist-docs-branch-23.06/ovn-ic-nb.5 b/support/dist-docs-branch-23.06/ovn-ic-nb.5
new file mode 100644
index 00000000..2f0515c7
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-ic-nb.5
@@ -0,0 +1,397 @@
+'\" p
+.\" -*- nroff -*-
+.TH "ovn-ic-nb" 5 " DB Schema 1.0.0" "Open vSwitch 23.06.3" "Open vSwitch Manual"
+.fp 5 L CR              \\" Make fixed-width font available as \\fL.
+.de TQ
+.  br
+.  ns
+.  TP "\\$1"
+..
+.de ST
+.  PP
+.  RS -0.15in
+.  I "\\$1"
+.  RE
+..
+.SH NAME
+ovn-ic-nb \- OVN_IC_Northbound database schema
+.PP
+.PP
+.PP
+.PP
+This database is the interface for cloud management system (CMS), such as OpenStack, to configure OVN interconnection settings\[char46] The CMS produces almost all of the contents of the database\[char46] The \fBovn\-ic\fR program monitors the database contents, transforms it, and stores it into the \fBOVN_IC_Southbound\fR database\[char46]
+.PP
+.PP
+We generally speak of ``the\(cq\(cq CMS, but one can imagine scenarios in which multiple CMSes manage different parts of OVN interconnection\[char46]
+.SS "External IDs"
+.PP
+.PP
+Each of the tables in this database contains a special column, named \fBexternal_ids\fR\[char46] This column has the same form and purpose each place it appears\[char46]
+.RS
+.TP
+\fBexternal_ids\fR: map of string-string pairs
+Key-value pairs for use by the CMS\[char46] The CMS might use certain pairs, for example, to identify entities in its own configuration that correspond to those in this database\[char46]
+.RE
+.SH "TABLE SUMMARY"
+.PP
+The following list summarizes the purpose of each of the tables in the
+\fBOVN_IC_Northbound\fR database.  Each table is described in more detail on a later
+page.
+.IP "Table" 1in
+Purpose
+.TQ 1in
+\fBIC_NB_Global\fR
+IC Northbound configuration
+.TQ 1in
+\fBTransit_Switch\fR
+Transit logical switch
+.TQ 1in
+\fBSSL\fR
+SSL configuration\[char46]
+.TQ 1in
+\fBConnection\fR
+OVSDB client connections\[char46]
+.\" check if in troff mode (TTY)
+.if t \{
+.bp
+.SH "TABLE RELATIONSHIPS"
+.PP
+The following diagram shows the relationship among tables in the
+database.  Each node represents a table.  Tables that are part of the
+``root set'' are shown with double borders.  Each edge leads from the
+table that contains it and points to the table that its value
+represents.  Edges are labeled with their column names, followed by a
+constraint on the number of allowed values: \fB?\fR for zero or one,
+\fB*\fR for zero or more, \fB+\fR for one or more.  Thick lines
+represent strong references; thin lines represent weak references.
+.RS -1in
+.ps -3
+.PS
+linethick = 1;
+linethick = 0.500000;
+box at 0.684030,0.625000 wid 1.368100 height 0.500000 "IC_NB_Global"
+box at 0.684030,0.625000 wid 1.312544 height 0.444444
+linethick = 1.000000;
+box at 3.401000,1.000000 wid 1.086800 height 0.500000 "Connection"
+linethick = 1.000000;
+box at 3.401000,0.250000 wid 0.750000 height 0.500000 "SSL"
+linethick = 0.500000;
+box at 0.684030,1.375000 wid 1.357600 height 0.500000 "Transit_Switch"
+box at 0.684030,1.375000 wid 1.302044 height 0.444444
+linethick = 1.000000;
+spline -> from 1.369600,0.718660 to 1.369600,0.718660 to 1.828500,0.782660 to 2.428400,0.866310 to 2.854400,0.925710
+"connections*" at 2.112800,0.987850
+linethick = 1.000000;
+spline -> from 1.371300,0.530960 to 1.371300,0.530960 to 1.454400,0.519360 to 1.538200,0.507670 to 1.618100,0.496530 to 2.103300,0.428840 to 2.663500,0.350800 to 3.021200,0.300960
+"ssl?" at 2.112800,0.585070
+.ps +3
+.PE
+.RE\}
+.bp
+.SH "IC_NB_Global TABLE"
+.PP
+.PP
+.PP
+Northbound configuration for OVN interconnection\[char46] This table must have exactly one row\[char46]
+.SS "Summary:
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.RE
+.TQ .25in
+\fICommon options:\fR
+.RS .25in
+.TQ 2.75in
+\fBoptions\fR
+map of string-string pairs
+.TQ 2.75in
+\fBoptions : ic_probe_interval\fR
+optional string
+.RE
+.TQ .25in
+\fIConnection Options:\fR
+.RS .25in
+.TQ 2.75in
+\fBconnections\fR
+set of \fBConnection\fRs
+.TQ 2.75in
+\fBssl\fR
+optional \fBSSL\fR
+.RE
+.SS "Details:
+.ST "Common Columns:"
+.PP
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+See \fBExternal IDs\fR at the beginning of this document\[char46]
+.ST "Common options:"
+.PP
+.IP "\fBoptions\fR: map of string-string pairs"
+This column provides general key/value settings\[char46] The supported options are described individually below\[char46]
+.IP "\fBoptions : ic_probe_interval\fR: optional string"
+The inactivity probe interval of the connection to the OVN IC Northbound and Southbound databases from \fBovn\-ic\fR, in milliseconds\[char46] If the value is zero, it disables the connection keepalive feature\[char46]
+.IP
+If the value is nonzero, then it will be forced to a value of at least 1000 ms\[char46]
+.ST "Connection Options:"
+.PP
+.IP "\fBconnections\fR: set of \fBConnection\fRs"
+Database clients to which the Open vSwitch database server should connect or on which it should listen, along with options for how these connections should be configured\[char46] See the \fBConnection\fR table for more information\[char46]
+.IP "\fBssl\fR: optional \fBSSL\fR"
+Global SSL configuration\[char46]
+.bp
+.SH "Transit_Switch TABLE"
+.PP
+.PP
+.PP
+Each row represents one transit logical switch for interconnection between different OVN deployments (availability zones)\[char46]
+.SS "Summary:
+.TQ .25in
+\fINaming:\fR
+.RS .25in
+.TQ 2.75in
+\fBname\fR
+string (must be unique within table)
+.RE
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBother_config\fR
+map of string-string pairs
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.RE
+.SS "Details:
+.ST "Naming:"
+.PP
+.IP "\fBname\fR: string (must be unique within table)"
+A name that uniquely identifies the transit logical switch\[char46]
+.ST "Common Columns:"
+.PP
+.IP "\fBother_config\fR: map of string-string pairs"
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+See \fBExternal IDs\fR at the beginning of this document\[char46]
+.bp
+.SH "SSL TABLE"
+.PP
+SSL configuration for ovn-nb database access\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBprivate_key\fR
+string
+.TQ 3.00in
+\fBcertificate\fR
+string
+.TQ 3.00in
+\fBca_cert\fR
+string
+.TQ 3.00in
+\fBbootstrap_ca_cert\fR
+boolean
+.TQ 3.00in
+\fBssl_protocols\fR
+string
+.TQ 3.00in
+\fBssl_ciphers\fR
+string
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.RE
+.SS "Details:
+.IP "\fBprivate_key\fR: string"
+Name of a PEM file containing the private key used as the switch\(cqs identity for SSL connections to the controller\[char46]
+.IP "\fBcertificate\fR: string"
+Name of a PEM file containing a certificate, signed by the certificate authority (CA) used by the controller and manager, that certifies the switch\(cqs private key, identifying a trustworthy switch\[char46]
+.IP "\fBca_cert\fR: string"
+Name of a PEM file containing the CA certificate used to verify that the switch is connected to a trustworthy controller\[char46]
+.IP "\fBbootstrap_ca_cert\fR: boolean"
+If set to \fBtrue\fR, then Open vSwitch will attempt to obtain the CA certificate from the controller on its first SSL connection and save it to the named PEM file\[char46] If it is successful, it will immediately drop the connection and reconnect, and from then on all SSL connections must be authenticated by a certificate signed by the CA certificate thus obtained\[char46] \fBThis option exposes the
+SSL connection to a man\-in\-the\-middle attack obtaining the initial
+CA certificate\[char46]\fR It may still be useful for bootstrapping\[char46]
+.IP "\fBssl_protocols\fR: string"
+List of SSL protocols to be enabled for SSL connections\[char46] The default when this option is omitted is \fBTLSv1,TLSv1\[char46]1,TLSv1\[char46]2\fR\[char46]
+.IP "\fBssl_ciphers\fR: string"
+List of ciphers (in OpenSSL cipher string format) to be supported for SSL connections\[char46] The default when this option is omitted is \fBHIGH:!aNULL:!MD5\fR\[char46]
+.ST "Common Columns:"
+.PP
+The overall purpose of these columns is described under \fBCommon
+Columns\fR at the beginning of this document\[char46]
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+.bp
+.SH "Connection TABLE"
+.PP
+.PP
+.PP
+Configuration for a database connection to an Open vSwitch database (OVSDB) client\[char46]
+.PP
+.PP
+This table primarily configures the Open vSwitch database server (\fBovsdb\-server\fR)\[char46]
+.PP
+.PP
+The Open vSwitch database server can initiate and maintain active connections to remote clients\[char46] It can also listen for database connections\[char46]
+.SS "Summary:
+.TQ .25in
+\fICore Features:\fR
+.RS .25in
+.TQ 2.75in
+\fBtarget\fR
+string (must be unique within table)
+.RE
+.TQ .25in
+\fIClient Failure Detection and Handling:\fR
+.RS .25in
+.TQ 2.75in
+\fBmax_backoff\fR
+optional integer, at least 1,000
+.TQ 2.75in
+\fBinactivity_probe\fR
+optional integer
+.RE
+.TQ .25in
+\fIStatus:\fR
+.RS .25in
+.TQ 2.75in
+\fBis_connected\fR
+boolean
+.TQ 2.75in
+\fBstatus : last_error\fR
+optional string
+.TQ 2.75in
+\fBstatus : state\fR
+optional string, one of \fBACTIVE\fR, \fBBACKOFF\fR, \fBCONNECTING\fR, \fBIDLE\fR, or \fBVOID\fR
+.TQ 2.75in
+\fBstatus : sec_since_connect\fR
+optional string, containing an integer, at least 0
+.TQ 2.75in
+\fBstatus : sec_since_disconnect\fR
+optional string, containing an integer, at least 0
+.TQ 2.75in
+\fBstatus : locks_held\fR
+optional string
+.TQ 2.75in
+\fBstatus : locks_waiting\fR
+optional string
+.TQ 2.75in
+\fBstatus : locks_lost\fR
+optional string
+.TQ 2.75in
+\fBstatus : n_connections\fR
+optional string, containing an integer, at least 2
+.TQ 2.75in
+\fBstatus : bound_port\fR
+optional string, containing an integer
+.RE
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.TQ 2.75in
+\fBother_config\fR
+map of string-string pairs
+.RE
+.SS "Details:
+.ST "Core Features:"
+.PP
+.IP "\fBtarget\fR: string (must be unique within table)"
+Connection methods for clients\[char46]
+.IP
+The following connection methods are currently supported:
+.RS
+.TP
+\fBssl:\fIhost\fB\fR[\fB:\fIport\fB\fR]
+The specified SSL \fIport\fR on the host at the given \fIhost\fR, which can either be a DNS name (if built with unbound library) or an IP address\[char46] A valid SSL configuration must be provided when this form is used, this configuration can be specified via command-line options or the \fBSSL\fR table\[char46]
+.IP
+If \fIport\fR is not specified, it defaults to 6640\[char46]
+.IP
+SSL support is an optional feature that is not always built as part of Open vSwitch\[char46]
+.TP
+\fBtcp:\fIhost\fB\fR[\fB:\fIport\fB\fR]
+The specified TCP \fIport\fR on the host at the given \fIhost\fR, which can either be a DNS name (if built with unbound library) or an IP address\[char46] If \fIhost\fR is an IPv6 address, wrap it in square brackets, e\[char46]g\[char46] \fBtcp:[::1]:6640\fR\[char46]
+.IP
+If \fIport\fR is not specified, it defaults to 6640\[char46]
+.TP
+\fBpssl:\fR[\fIport\fR][\fB:\fIhost\fB\fR]
+Listens for SSL connections on the specified TCP \fIport\fR\[char46] Specify 0 for \fIport\fR to have the kernel automatically choose an available port\[char46] If \fIhost\fR, which can either be a DNS name (if built with unbound library) or an IP address, is specified, then connections are restricted to the resolved or specified local IPaddress (either IPv4 or IPv6 address)\[char46] If \fIhost\fR is an IPv6 address, wrap in square brackets, e\[char46]g\[char46] \fBpssl:6640:[::1]\fR\[char46] If \fIhost\fR is not specified then it listens only on IPv4 (but not IPv6) addresses\[char46] A valid SSL configuration must be provided when this form is used, this can be specified either via command-line options or the \fBSSL\fR table\[char46]
+.IP
+If \fIport\fR is not specified, it defaults to 6640\[char46]
+.IP
+SSL support is an optional feature that is not always built as part of Open vSwitch\[char46]
+.TP
+\fBptcp:\fR[\fIport\fR][\fB:\fIhost\fB\fR]
+Listens for connections on the specified TCP \fIport\fR\[char46] Specify 0 for \fIport\fR to have the kernel automatically choose an available port\[char46] If \fIhost\fR, which can either be a DNS name (if built with unbound library) or an IP address, is specified, then connections are restricted to the resolved or specified local IP address (either IPv4 or IPv6 address)\[char46] If \fIhost\fR is an IPv6 address, wrap it in square brackets, e\[char46]g\[char46] \fBptcp:6640:[::1]\fR\[char46] If \fIhost\fR is not specified then it listens only on IPv4 addresses\[char46]
+.IP
+If \fIport\fR is not specified, it defaults to 6640\[char46]
+.RE
+.IP
+When multiple clients are configured, the \fBtarget\fR values must be unique\[char46] Duplicate \fBtarget\fR values yield unspecified results\[char46]
+.ST "Client Failure Detection and Handling:"
+.PP
+.IP "\fBmax_backoff\fR: optional integer, at least 1,000"
+Maximum number of milliseconds to wait between connection attempts\[char46] Default is implementation-specific\[char46]
+.IP "\fBinactivity_probe\fR: optional integer"
+Maximum number of milliseconds of idle time on connection to the client before sending an inactivity probe message\[char46] If Open vSwitch does not communicate with the client for the specified number of seconds, it will send a probe\[char46] If a response is not received for the same additional amount of time, Open vSwitch assumes the connection has been broken and attempts to reconnect\[char46] Default is implementation-specific\[char46] A value of 0 disables inactivity probes\[char46]
+.ST "Status:"
+.PP
+.PP
+.PP
+Key-value pair of \fBis_connected\fR is always updated\[char46] Other key-value pairs in the status columns may be updated depends on the \fBtarget\fR type\[char46]
+.PP
+.PP
+When \fBtarget\fR specifies a connection method that listens for inbound connections (e\[char46]g\[char46] \fBptcp:\fR or \fBpunix:\fR), both \fBn_connections\fR and \fBis_connected\fR may also be updated while the remaining key-value pairs are omitted\[char46]
+.PP
+.PP
+On the other hand, when \fBtarget\fR specifies an outbound connection, all key-value pairs may be updated, except the above-mentioned two key-value pairs associated with inbound connection targets\[char46] They are omitted\[char46]
+.IP "\fBis_connected\fR: boolean"
+\fBtrue\fR if currently connected to this client, \fBfalse\fR otherwise\[char46]
+.IP "\fBstatus : last_error\fR: optional string"
+A human-readable description of the last error on the connection to the manager; i\[char46]e\[char46] \fBstrerror(errno)\fR\[char46] This key will exist only if an error has occurred\[char46]
+.IP "\fBstatus : state\fR: optional string, one of \fBACTIVE\fR, \fBBACKOFF\fR, \fBCONNECTING\fR, \fBIDLE\fR, or \fBVOID\fR"
+The state of the connection to the manager:
+.RS
+.TP
+\fBVOID\fR
+Connection is disabled\[char46]
+.TP
+\fBBACKOFF\fR
+Attempting to reconnect at an increasing period\[char46]
+.TP
+\fBCONNECTING\fR
+Attempting to connect\[char46]
+.TP
+\fBACTIVE\fR
+Connected, remote host responsive\[char46]
+.TP
+\fBIDLE\fR
+Connection is idle\[char46] Waiting for response to keep-alive\[char46]
+.RE
+.IP
+These values may change in the future\[char46] They are provided only for human consumption\[char46]
+.IP "\fBstatus : sec_since_connect\fR: optional string, containing an integer, at least 0"
+The amount of time since this client last successfully connected to the database (in seconds)\[char46] Value is empty if client has never successfully been connected\[char46]
+.IP "\fBstatus : sec_since_disconnect\fR: optional string, containing an integer, at least 0"
+The amount of time since this client last disconnected from the database (in seconds)\[char46] Value is empty if client has never disconnected\[char46]
+.IP "\fBstatus : locks_held\fR: optional string"
+Space-separated list of the names of OVSDB locks that the connection holds\[char46] Omitted if the connection does not hold any locks\[char46]
+.IP "\fBstatus : locks_waiting\fR: optional string"
+Space-separated list of the names of OVSDB locks that the connection is currently waiting to acquire\[char46] Omitted if the connection is not waiting for any locks\[char46]
+.IP "\fBstatus : locks_lost\fR: optional string"
+Space-separated list of the names of OVSDB locks that the connection has had stolen by another OVSDB client\[char46] Omitted if no locks have been stolen from this connection\[char46]
+.IP "\fBstatus : n_connections\fR: optional string, containing an integer, at least 2"
+When \fBtarget\fR specifies a connection method that listens for inbound connections (e\[char46]g\[char46] \fBptcp:\fR or \fBpssl:\fR) and more than one connection is actually active, the value is the number of active connections\[char46] Otherwise, this key-value pair is omitted\[char46]
+.IP "\fBstatus : bound_port\fR: optional string, containing an integer"
+When \fBtarget\fR is \fBptcp:\fR or \fBpssl:\fR, this is the TCP port on which the OVSDB server is listening\[char46] (This is particularly useful when \fBtarget\fR specifies a port of 0, allowing the kernel to choose any available port\[char46])
+.ST "Common Columns:"
+.PP
+The overall purpose of these columns is described under \fBCommon
+Columns\fR at the beginning of this document\[char46]
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+.IP "\fBother_config\fR: map of string-string pairs"
diff --git a/support/dist-docs-branch-23.06/ovn-ic-nb.5.html b/support/dist-docs-branch-23.06/ovn-ic-nb.5.html
new file mode 100644
index 00000000..81c9a0cc
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-ic-nb.5.html
@@ -0,0 +1,374 @@
+<html><head><meta charset="UTF-8"></head><body><pre>
+<u>o</u><u>v</u><u>n</u><u>-</u><u>i</u><u>c</u><u>-</u><u>n</u><u>b</u>(5)                  Open vSwitch Manual                 <u>o</u><u>v</u><u>n</u><u>-</u><u>i</u><u>c</u><u>-</u><u>n</u><u>b</u>(5)
+
+<b>N</b><b>A</b><b>M</b><b>E</b>
+       ovn-ic-nb - OVN_IC_Northbound database schema
+
+       This  database is the interface for cloud management system (CMS), such
+       as OpenStack, to configure OVN interconnection settings. The  CMS  pro‐
+       duces  almost  all  of the contents of the database. The <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b> program
+       monitors the database contents, transforms it, and stores it  into  the
+       <b>O</b><b>V</b><b>N</b><b>_</b><b>I</b><b>C</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database.
+
+       We  generally  speak  of  ``the’’ CMS, but one can imagine scenarios in
+       which multiple CMSes manage different parts of OVN interconnection.
+
+   <b>E</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> <b>I</b><b>D</b><b>s</b>
+       Each of the tables in this database contains a  special  column,  named
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>.  This  column has the same form and purpose each place it
+       appears.
+
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+                     Key-value pairs for use by the CMS.  The  CMS  might  use
+                     certain  pairs,  for example, to identify entities in its
+                     own configuration that correspond to those in this  data‐
+                     base.
+
+<b>T</b><b>A</b><b>B</b><b>L</b><b>E</b> <b>S</b><b>U</b><b>M</b><b>M</b><b>A</b><b>R</b><b>Y</b>
+       The  following list summarizes the purpose of each of the tables in the
+       <b>O</b><b>V</b><b>N</b><b>_</b><b>I</b><b>C</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database.  Each table is described in more detail  on
+       a later page.
+
+       Table     Purpose
+       <b>I</b><b>C</b><b>_</b><b>N</b><b>B</b><b>_</b><b>G</b><b>l</b><b>o</b><b>b</b><b>a</b><b>l</b>
+                 IC Northbound configuration
+       <b>T</b><b>r</b><b>a</b><b>n</b><b>s</b><b>i</b><b>t</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b>
+                 Transit logical switch
+       <b>S</b><b>S</b><b>L</b>       SSL configuration.
+       <b>C</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>
+                 OVSDB client connections.
+
+<b>I</b><b>C</b><b>_</b><b>N</b><b>B</b><b>_</b><b>G</b><b>l</b><b>o</b><b>b</b><b>a</b><b>l</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Northbound  configuration for OVN interconnection. This table must have
+       exactly one row.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>                     map of string-string pairs
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>i</b><b>c</b><b>_</b><b>p</b><b>r</b><b>o</b><b>b</b><b>e</b><b>_</b><b>i</b><b>n</b><b>t</b><b>e</b><b>r</b><b>v</b><b>a</b><b>l</b>
+                                     optional string
+       <u>C</u><u>o</u><u>n</u><u>n</u><u>e</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+         <b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>                 set of <b>C</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>s
+         <b>s</b><b>s</b><b>l</b>                         optional <b>S</b><b>S</b><b>L</b>
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+              See <b>E</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> <b>I</b><b>D</b><b>s</b> at the beginning of this document.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>: map of string-string pairs
+              This column provides general key/value settings.  The  supported
+              options are described individually below.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>i</b><b>c</b><b>_</b><b>p</b><b>r</b><b>o</b><b>b</b><b>e</b><b>_</b><b>i</b><b>n</b><b>t</b><b>e</b><b>r</b><b>v</b><b>a</b><b>l</b>: optional string
+              The  inactivity  probe  interval of the connection to the OVN IC
+              Northbound and Southbound databases from  <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b>,  in  millisec‐
+              onds. If the value is zero, it disables the connection keepalive
+              feature.
+
+              If the value is nonzero, then it will be forced to a value of at
+              least 1000 ms.
+
+     <u>C</u><u>o</u><u>n</u><u>n</u><u>e</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       <b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>: set of <b>C</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>s
+              Database  clients  to  which  the  Open  vSwitch database server
+              should connect or on which it should listen, along with  options
+              for  how these connections should be configured. See the <b>C</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b>‐‐
+              <b>t</b><b>i</b><b>o</b><b>n</b> table for more information.
+
+       <b>s</b><b>s</b><b>l</b>: optional <b>S</b><b>S</b><b>L</b>
+              Global SSL configuration.
+
+<b>T</b><b>r</b><b>a</b><b>n</b><b>s</b><b>i</b><b>t</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Each row represents one transit logical switch for interconnection  be‐
+       tween different OVN deployments (availability zones).
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <u>N</u><u>a</u><u>m</u><u>i</u><u>n</u><u>g</u><u>:</u>
+         <b>n</b><b>a</b><b>m</b><b>e</b>                        string (must be unique within table)
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b>                map of string-string pairs
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+     <u>N</u><u>a</u><u>m</u><u>i</u><u>n</u><u>g</u><u>:</u>
+
+       <b>n</b><b>a</b><b>m</b><b>e</b>: string (must be unique within table)
+              A name that uniquely identifies the transit logical switch.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b>: map of string-string pairs
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+              See <b>E</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> <b>I</b><b>D</b><b>s</b> at the beginning of this document.
+
+<b>S</b><b>S</b><b>L</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       SSL configuration for ovn-nb database access.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>p</b><b>r</b><b>i</b><b>v</b><b>a</b><b>t</b><b>e</b><b>_</b><b>k</b><b>e</b><b>y</b>                   string
+       <b>c</b><b>e</b><b>r</b><b>t</b><b>i</b><b>f</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b>                   string
+       <b>c</b><b>a</b><b>_</b><b>c</b><b>e</b><b>r</b><b>t</b>                       string
+       <b>b</b><b>o</b><b>o</b><b>t</b><b>s</b><b>t</b><b>r</b><b>a</b><b>p</b><b>_</b><b>c</b><b>a</b><b>_</b><b>c</b><b>e</b><b>r</b><b>t</b>             boolean
+       <b>s</b><b>s</b><b>l</b><b>_</b><b>p</b><b>r</b><b>o</b><b>t</b><b>o</b><b>c</b><b>o</b><b>l</b><b>s</b>                 string
+       <b>s</b><b>s</b><b>l</b><b>_</b><b>c</b><b>i</b><b>p</b><b>h</b><b>e</b><b>r</b><b>s</b>                   string
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>p</b><b>r</b><b>i</b><b>v</b><b>a</b><b>t</b><b>e</b><b>_</b><b>k</b><b>e</b><b>y</b>: string
+              Name  of  a  PEM  file  containing  the  private key used as the
+              switch’s identity for SSL connections to the controller.
+
+       <b>c</b><b>e</b><b>r</b><b>t</b><b>i</b><b>f</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b>: string
+              Name of a PEM file containing a certificate, signed by the  cer‐
+              tificate authority (CA) used by the controller and manager, that
+              certifies  the  switch’s  private key, identifying a trustworthy
+              switch.
+
+       <b>c</b><b>a</b><b>_</b><b>c</b><b>e</b><b>r</b><b>t</b>: string
+              Name of a PEM file containing the CA certificate used to  verify
+              that the switch is connected to a trustworthy controller.
+
+       <b>b</b><b>o</b><b>o</b><b>t</b><b>s</b><b>t</b><b>r</b><b>a</b><b>p</b><b>_</b><b>c</b><b>a</b><b>_</b><b>c</b><b>e</b><b>r</b><b>t</b>: boolean
+              If  set to <b>t</b><b>r</b><b>u</b><b>e</b>, then Open vSwitch will attempt to obtain the CA
+              certificate from the controller on its first SSL connection  and
+              save  it to the named PEM file. If it is successful, it will im‐
+              mediately drop the connection and reconnect, and  from  then  on
+              all  SSL  connections  must  be  authenticated  by a certificate
+              signed by the CA certificate thus obtained. <b>T</b><b>h</b><b>i</b><b>s</b> <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b>  <b>e</b><b>x</b><b>p</b><b>o</b><b>s</b><b>e</b><b>s</b>
+              <b>t</b><b>h</b><b>e</b>  <b>S</b><b>S</b><b>L</b>  <b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b> <b>t</b><b>o</b> <b>a</b> <b>m</b><b>a</b><b>n</b><b>-</b><b>i</b><b>n</b><b>-</b><b>t</b><b>h</b><b>e</b><b>-</b><b>m</b><b>i</b><b>d</b><b>d</b><b>l</b><b>e</b> <b>a</b><b>t</b><b>t</b><b>a</b><b>c</b><b>k</b> <b>o</b><b>b</b><b>t</b><b>a</b><b>i</b><b>n</b><b>i</b><b>n</b><b>g</b> <b>t</b><b>h</b><b>e</b>
+              <b>i</b><b>n</b><b>i</b><b>t</b><b>i</b><b>a</b><b>l</b> <b>C</b><b>A</b> <b>c</b><b>e</b><b>r</b><b>t</b><b>i</b><b>f</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b><b>.</b> It may still be  useful  for  bootstrap‐
+              ping.
+
+       <b>s</b><b>s</b><b>l</b><b>_</b><b>p</b><b>r</b><b>o</b><b>t</b><b>o</b><b>c</b><b>o</b><b>l</b><b>s</b>: string
+              List of SSL protocols to be enabled for SSL connections. The de‐
+              fault when this option is omitted is <b>T</b><b>L</b><b>S</b><b>v</b><b>1</b><b>,</b><b>T</b><b>L</b><b>S</b><b>v</b><b>1</b><b>.</b><b>1</b><b>,</b><b>T</b><b>L</b><b>S</b><b>v</b><b>1</b><b>.</b><b>2</b>.
+
+       <b>s</b><b>s</b><b>l</b><b>_</b><b>c</b><b>i</b><b>p</b><b>h</b><b>e</b><b>r</b><b>s</b>: string
+              List  of  ciphers  (in  OpenSSL cipher string format) to be sup‐
+              ported for SSL connections. The  default  when  this  option  is
+              omitted is <b>H</b><b>I</b><b>G</b><b>H</b><b>:</b><b>!</b><b>a</b><b>N</b><b>U</b><b>L</b><b>L</b><b>:</b><b>!</b><b>M</b><b>D</b><b>5</b>.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       The  overall purpose of these columns is described under <b>C</b><b>o</b><b>m</b><b>m</b><b>o</b><b>n</b> <b>C</b><b>o</b><b>l</b><b>u</b><b>m</b><b>n</b><b>s</b>
+       at the beginning of this document.
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+<b>C</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Configuration for a database connection to  an  Open  vSwitch  database
+       (OVSDB) client.
+
+       This  table  primarily  configures  the  Open  vSwitch  database server
+       (<b>o</b><b>v</b><b>s</b><b>d</b><b>b</b><b>-</b><b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b>).
+
+       The Open vSwitch database server can initiate and maintain active  con‐
+       nections  to  remote  clients.  It can also listen for database connec‐
+       tions.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <u>C</u><u>o</u><u>r</u><u>e</u> <u>F</u><u>e</u><u>a</u><u>t</u><u>u</u><u>r</u><u>e</u><u>s</u><u>:</u>
+         <b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b>                      string (must be unique within table)
+       <u>C</u><u>l</u><u>i</u><u>e</u><u>n</u><u>t</u> <u>F</u><u>a</u><u>i</u><u>l</u><u>u</u><u>r</u><u>e</u> <u>D</u><u>e</u><u>t</u><u>e</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u> <u>a</u><u>n</u><u>d</u> <u>H</u><u>a</u><u>n</u><u>d</u><u>l</u><u>i</u><u>n</u><u>g</u><u>:</u>
+         <b>m</b><b>a</b><b>x</b><b>_</b><b>b</b><b>a</b><b>c</b><b>k</b><b>o</b><b>f</b><b>f</b>                 optional integer, at least 1,000
+         <b>i</b><b>n</b><b>a</b><b>c</b><b>t</b><b>i</b><b>v</b><b>i</b><b>t</b><b>y</b><b>_</b><b>p</b><b>r</b><b>o</b><b>b</b><b>e</b>            optional integer
+       <u>S</u><u>t</u><u>a</u><u>t</u><u>u</u><u>s</u><u>:</u>
+         <b>i</b><b>s</b><b>_</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>e</b><b>d</b>                boolean
+         <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>l</b><b>a</b><b>s</b><b>t</b><b>_</b><b>e</b><b>r</b><b>r</b><b>o</b><b>r</b>         optional string
+         <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>s</b><b>t</b><b>a</b><b>t</b><b>e</b>              optional string, one of <b>A</b><b>C</b><b>T</b><b>I</b><b>V</b><b>E</b>,  <b>B</b><b>A</b><b>C</b><b>K</b><b>O</b><b>F</b><b>F</b>,
+                                     <b>C</b><b>O</b><b>N</b><b>N</b><b>E</b><b>C</b><b>T</b><b>I</b><b>N</b><b>G</b>, <b>I</b><b>D</b><b>L</b><b>E</b>, or <b>V</b><b>O</b><b>I</b><b>D</b>
+         <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>s</b><b>e</b><b>c</b><b>_</b><b>s</b><b>i</b><b>n</b><b>c</b><b>e</b><b>_</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b>  optional  string,  containing an integer,
+                                     at least 0
+         <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>s</b><b>e</b><b>c</b><b>_</b><b>s</b><b>i</b><b>n</b><b>c</b><b>e</b><b>_</b><b>d</b><b>i</b><b>s</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b>
+                                     optional string, containing  an  integer,
+                                     at least 0
+         <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>l</b><b>o</b><b>c</b><b>k</b><b>s</b><b>_</b><b>h</b><b>e</b><b>l</b><b>d</b>         optional string
+         <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>l</b><b>o</b><b>c</b><b>k</b><b>s</b><b>_</b><b>w</b><b>a</b><b>i</b><b>t</b><b>i</b><b>n</b><b>g</b>      optional string
+         <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>l</b><b>o</b><b>c</b><b>k</b><b>s</b><b>_</b><b>l</b><b>o</b><b>s</b><b>t</b>         optional string
+         <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>n</b><b>_</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>      optional  string,  containing an integer,
+                                     at least 2
+         <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>b</b><b>o</b><b>u</b><b>n</b><b>d</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>         optional string, containing an integer
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+         <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b>                map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+     <u>C</u><u>o</u><u>r</u><u>e</u> <u>F</u><u>e</u><u>a</u><u>t</u><u>u</u><u>r</u><u>e</u><u>s</u><u>:</u>
+
+       <b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b>: string (must be unique within table)
+              Connection methods for clients.
+
+              The following connection methods are currently supported:
+
+              <b>s</b><b>s</b><b>l</b><b>:</b><u>h</u><u>o</u><u>s</u><u>t</u>[<b>:</b><u>p</u><u>o</u><u>r</u><u>t</u>]
+                     The specified SSL <u>p</u><u>o</u><u>r</u><u>t</u> on the host  at  the  given  <u>h</u><u>o</u><u>s</u><u>t</u>,
+                     which can either be a DNS name (if built with unbound li‐
+                     brary)  or  an IP address. A valid SSL configuration must
+                     be provided when this form is  used,  this  configuration
+                     can  be specified via command-line options or the <b>S</b><b>S</b><b>L</b> ta‐
+                     ble.
+
+                     If <u>p</u><u>o</u><u>r</u><u>t</u> is not specified, it defaults to 6640.
+
+                     SSL support is an optional feature  that  is  not  always
+                     built as part of Open vSwitch.
+
+              <b>t</b><b>c</b><b>p</b><b>:</b><u>h</u><u>o</u><u>s</u><u>t</u>[<b>:</b><u>p</u><u>o</u><u>r</u><u>t</u>]
+                     The  specified  TCP  <u>p</u><u>o</u><u>r</u><u>t</u>  on the host at the given <u>h</u><u>o</u><u>s</u><u>t</u>,
+                     which can either be a DNS name (if built with unbound li‐
+                     brary) or an IP address. If <u>h</u><u>o</u><u>s</u><u>t</u> is an IPv6 address, wrap
+                     it in square brackets, e.g. <b>t</b><b>c</b><b>p</b><b>:</b><b>[</b><b>:</b><b>:</b><b>1</b><b>]</b><b>:</b><b>6</b><b>6</b><b>4</b><b>0</b>.
+
+                     If <u>p</u><u>o</u><u>r</u><u>t</u> is not specified, it defaults to 6640.
+
+              <b>p</b><b>s</b><b>s</b><b>l</b><b>:</b>[<u>p</u><u>o</u><u>r</u><u>t</u>][<b>:</b><u>h</u><u>o</u><u>s</u><u>t</u>]
+                     Listens for SSL connections on the  specified  TCP  <u>p</u><u>o</u><u>r</u><u>t</u>.
+                     Specify  0  for  <u>p</u><u>o</u><u>r</u><u>t</u>  to  have  the kernel automatically
+                     choose an available port. If <u>h</u><u>o</u><u>s</u><u>t</u>, which can either be  a
+                     DNS  name  (if  built  with unbound library) or an IP ad‐
+                     dress, is specified, then connections are  restricted  to
+                     the resolved or specified local IPaddress (either IPv4 or
+                     IPv6 address). If <u>h</u><u>o</u><u>s</u><u>t</u> is an IPv6 address, wrap in square
+                     brackets,  e.g. <b>p</b><b>s</b><b>s</b><b>l</b><b>:</b><b>6</b><b>6</b><b>4</b><b>0</b><b>:</b><b>[</b><b>:</b><b>:</b><b>1</b><b>]</b>. If <u>h</u><u>o</u><u>s</u><u>t</u> is not specified
+                     then it listens only on IPv4 (but not IPv6) addresses.  A
+                     valid  SSL  configuration must be provided when this form
+                     is used, this can be specified  either  via  command-line
+                     options or the <b>S</b><b>S</b><b>L</b> table.
+
+                     If <u>p</u><u>o</u><u>r</u><u>t</u> is not specified, it defaults to 6640.
+
+                     SSL  support  is  an  optional feature that is not always
+                     built as part of Open vSwitch.
+
+              <b>p</b><b>t</b><b>c</b><b>p</b><b>:</b>[<u>p</u><u>o</u><u>r</u><u>t</u>][<b>:</b><u>h</u><u>o</u><u>s</u><u>t</u>]
+                     Listens for connections on the specified TCP <u>p</u><u>o</u><u>r</u><u>t</u>.  Spec‐
+                     ify 0 for <u>p</u><u>o</u><u>r</u><u>t</u> to have the kernel automatically choose an
+                     available  port.  If <u>h</u><u>o</u><u>s</u><u>t</u>, which can either be a DNS name
+                     (if built with unbound library)  or  an  IP  address,  is
+                     specified,  then  connections  are  restricted to the re‐
+                     solved or specified local IP address (either IPv4 or IPv6
+                     address). If <u>h</u><u>o</u><u>s</u><u>t</u> is an IPv6 address, wrap it  in  square
+                     brackets,  e.g. <b>p</b><b>t</b><b>c</b><b>p</b><b>:</b><b>6</b><b>6</b><b>4</b><b>0</b><b>:</b><b>[</b><b>:</b><b>:</b><b>1</b><b>]</b>. If <u>h</u><u>o</u><u>s</u><u>t</u> is not specified
+                     then it listens only on IPv4 addresses.
+
+                     If <u>p</u><u>o</u><u>r</u><u>t</u> is not specified, it defaults to 6640.
+
+              When multiple clients are configured, the <b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> values must  be
+              unique. Duplicate <b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> values yield unspecified results.
+
+     <u>C</u><u>l</u><u>i</u><u>e</u><u>n</u><u>t</u> <u>F</u><u>a</u><u>i</u><u>l</u><u>u</u><u>r</u><u>e</u> <u>D</u><u>e</u><u>t</u><u>e</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u> <u>a</u><u>n</u><u>d</u> <u>H</u><u>a</u><u>n</u><u>d</u><u>l</u><u>i</u><u>n</u><u>g</u><u>:</u>
+
+       <b>m</b><b>a</b><b>x</b><b>_</b><b>b</b><b>a</b><b>c</b><b>k</b><b>o</b><b>f</b><b>f</b>: optional integer, at least 1,000
+              Maximum  number  of  milliseconds to wait between connection at‐
+              tempts. Default is implementation-specific.
+
+       <b>i</b><b>n</b><b>a</b><b>c</b><b>t</b><b>i</b><b>v</b><b>i</b><b>t</b><b>y</b><b>_</b><b>p</b><b>r</b><b>o</b><b>b</b><b>e</b>: optional integer
+              Maximum number of milliseconds of idle time on connection to the
+              client before sending  an  inactivity  probe  message.  If  Open
+              vSwitch  does  not communicate with the client for the specified
+              number of seconds, it will send a probe. If a  response  is  not
+              received  for  the  same additional amount of time, Open vSwitch
+              assumes the connection has been broken and  attempts  to  recon‐
+              nect.  Default is implementation-specific. A value of 0 disables
+              inactivity probes.
+
+     <u>S</u><u>t</u><u>a</u><u>t</u><u>u</u><u>s</u><u>:</u>
+
+       Key-value pair of <b>i</b><b>s</b><b>_</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>e</b><b>d</b> is always updated. Other key-value pairs
+       in the status columns may be updated depends on the <b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> type.
+
+       When <b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> specifies a connection method that listens for inbound con‐
+       nections (e.g. <b>p</b><b>t</b><b>c</b><b>p</b><b>:</b> or <b>p</b><b>u</b><b>n</b><b>i</b><b>x</b><b>:</b>), both  <b>n</b><b>_</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>  and  <b>i</b><b>s</b><b>_</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>e</b><b>d</b>
+       may also be updated while the remaining key-value pairs are omitted.
+
+       On  the  other  hand, when <b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> specifies an outbound connection, all
+       key-value pairs may be updated, except  the  above-mentioned  two  key-
+       value  pairs associated with inbound connection targets. They are omit‐
+       ted.
+
+       <b>i</b><b>s</b><b>_</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>e</b><b>d</b>: boolean
+              <b>t</b><b>r</b><b>u</b><b>e</b> if currently connected to this client, <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b> otherwise.
+
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>l</b><b>a</b><b>s</b><b>t</b><b>_</b><b>e</b><b>r</b><b>r</b><b>o</b><b>r</b>: optional string
+              A human-readable description of the last error on the connection
+              to the manager; i.e. <b>s</b><b>t</b><b>r</b><b>e</b><b>r</b><b>r</b><b>o</b><b>r</b><b>(</b><b>e</b><b>r</b><b>r</b><b>n</b><b>o</b><b>)</b>. This key will  exist  only
+              if an error has occurred.
+
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>s</b><b>t</b><b>a</b><b>t</b><b>e</b>: optional string, one of <b>A</b><b>C</b><b>T</b><b>I</b><b>V</b><b>E</b>, <b>B</b><b>A</b><b>C</b><b>K</b><b>O</b><b>F</b><b>F</b>, <b>C</b><b>O</b><b>N</b><b>N</b><b>E</b><b>C</b><b>T</b><b>I</b><b>N</b><b>G</b>,
+       <b>I</b><b>D</b><b>L</b><b>E</b>, or <b>V</b><b>O</b><b>I</b><b>D</b>
+              The state of the connection to the manager:
+
+              <b>V</b><b>O</b><b>I</b><b>D</b>   Connection is disabled.
+
+              <b>B</b><b>A</b><b>C</b><b>K</b><b>O</b><b>F</b><b>F</b>
+                     Attempting to reconnect at an increasing period.
+
+              <b>C</b><b>O</b><b>N</b><b>N</b><b>E</b><b>C</b><b>T</b><b>I</b><b>N</b><b>G</b>
+                     Attempting to connect.
+
+              <b>A</b><b>C</b><b>T</b><b>I</b><b>V</b><b>E</b> Connected, remote host responsive.
+
+              <b>I</b><b>D</b><b>L</b><b>E</b>   Connection is idle. Waiting for response to keep-alive.
+
+              These  values  may  change in the future. They are provided only
+              for human consumption.
+
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>s</b><b>e</b><b>c</b><b>_</b><b>s</b><b>i</b><b>n</b><b>c</b><b>e</b><b>_</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b>: optional string, containing an integer, at
+       least 0
+              The amount of time since this client last successfully connected
+              to the database (in seconds). Value is empty if client has never
+              successfully been connected.
+
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>s</b><b>e</b><b>c</b><b>_</b><b>s</b><b>i</b><b>n</b><b>c</b><b>e</b><b>_</b><b>d</b><b>i</b><b>s</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b>: optional string, containing an integer,
+       at least 0
+              The amount of time since this client last disconnected from  the
+              database  (in  seconds). Value is empty if client has never dis‐
+              connected.
+
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>l</b><b>o</b><b>c</b><b>k</b><b>s</b><b>_</b><b>h</b><b>e</b><b>l</b><b>d</b>: optional string
+              Space-separated list of the names of OVSDB locks that  the  con‐
+              nection  holds.  Omitted  if  the  connection  does not hold any
+              locks.
+
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>l</b><b>o</b><b>c</b><b>k</b><b>s</b><b>_</b><b>w</b><b>a</b><b>i</b><b>t</b><b>i</b><b>n</b><b>g</b>: optional string
+              Space-separated list of the names of OVSDB locks that  the  con‐
+              nection  is currently waiting to acquire. Omitted if the connec‐
+              tion is not waiting for any locks.
+
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>l</b><b>o</b><b>c</b><b>k</b><b>s</b><b>_</b><b>l</b><b>o</b><b>s</b><b>t</b>: optional string
+              Space-separated list of the names of OVSDB locks that  the  con‐
+              nection  has  had  stolen by another OVSDB client. Omitted if no
+              locks have been stolen from this connection.
+
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>n</b><b>_</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>: optional string, containing an integer, at
+       least 2
+              When <b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> specifies a connection method that listens  for  in‐
+              bound  connections  (e.g. <b>p</b><b>t</b><b>c</b><b>p</b><b>:</b> or <b>p</b><b>s</b><b>s</b><b>l</b><b>:</b>) and more than one con‐
+              nection is actually active, the value is the  number  of  active
+              connections. Otherwise, this key-value pair is omitted.
+
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>b</b><b>o</b><b>u</b><b>n</b><b>d</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>: optional string, containing an integer
+              When <b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> is <b>p</b><b>t</b><b>c</b><b>p</b><b>:</b> or <b>p</b><b>s</b><b>s</b><b>l</b><b>:</b>, this is the TCP port on which the
+              OVSDB  server  is  listening.  (This is particularly useful when
+              <b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> specifies a port of 0, allowing the kernel to choose  any
+              available port.)
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       The  overall purpose of these columns is described under <b>C</b><b>o</b><b>m</b><b>m</b><b>o</b><b>n</b> <b>C</b><b>o</b><b>l</b><b>u</b><b>m</b><b>n</b><b>s</b>
+       at the beginning of this document.
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+
+       <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b>: map of string-string pairs
+
+Open vSwitch 23.06.3            DB Schema 1.0.0                   <u>o</u><u>v</u><u>n</u><u>-</u><u>i</u><u>c</u><u>-</u><u>n</u><u>b</u>(5)
+</pre></body></html>
diff --git a/support/dist-docs-branch-23.06/ovn-ic-nb.5.pdf b/support/dist-docs-branch-23.06/ovn-ic-nb.5.pdf
new file mode 100644
index 0000000000000000000000000000000000000000..579be21589774a7a664cfd789e032347ca3dde72
GIT binary patch
literal 38662
zcmce;1yo(jvM!8!aF-y#f-T(L-CcvbI|O$N?ykWhxCaZa!6CQ?f`#DrFNo}Y&c64J
zbKm&i9gE3q@9L_rtE%Vh*<|v<qO=Tj%y4A=-=g#2$jBsYTx<>Xoy=`*IEn1^oy-8H
zjzqNbv_!N<N&=!Hiom;&tu-*i+`!z*+{s<q*u~h22iO1+t^KcZvU2hQDoP^2l7a%t
zLgGZUj>00U5<((8c19+y4(3kAz!XO(BU@)D9zI}D&e_S%*-6yg%J?bzAN2&sLPSqw
zYhVG#%?*$?wlQ@wBVq-nC<1`3I2k(-0Yt6zos5Nz4Q-8#d3oU+og9qyt>N4<3RMRk
zmPC=;&!~4yawM@0t6#B6s1_!u#~G5y78WFMgN1DMs+-XyCE5;DT@jv{K*3844iXoF
z3+E)yEmtLv_ZCJr?c2KTY<H8Tf7*qdvK>4bka9?(#V1SLj+i?(JSWxyM54a>Ahtn7
zq|scx4{*7lh~%d$?8qhuC9Rq1F2zsfnhChMx$)w}K2aP>Ilw{L5u271isPXx=b~<_
z9UPTamh}4s8l_>@t4(`id`;Q<R;to%=1dTlCuFx-{tT-AF<_(<C&P_~#RfZoM#Xmy
zo&pAxm*^d#dC<YsAP&5F%1uCSSp<rOS)}xXHf|Gxeaa=i6=R?smmt~dKomjCw6VU0
zS5wDF?vEcU(`|0$FK5Eb-TDdLsKwK5MFtP~YO*okHEdLel5>Vk%W)_6Yf&!^xu|wM
zE@MWQqKz(!x>cr=V~#^=%)J<lXwi#}Q+xYLQo*^v%YsWGj_csg!re4Gra?@?tqi{L
zo7=<JKqr>LgZ*QfRTy7Ybui2+dR)}+>zWisZft=_ji6J;v-~-FVQulwBAS!VHH&o#
zM!v9BMsw3;yjZmBA{vbZFCk0jIN|o3`4`@O?5C{%PHgN%t3q%`Sw!O%%k*_1*_M%y
z1U|nqFX$RkI6XLd5!4LorHnJn7uo|!7w4&$zG)LA#xJTgw_2^jzRALf$!HD0pDQI6
zsfL3;oWOj9z7t?1YQCngrOz>xPXi3M5MDW8OKvE!*)I@r8e5$tQ7Wyui7%U(pyeyX
z?G1RN88J0O6y}@x`iCQu<e|Q>_#wQQxt6VL&Px?FA7V#;a~}$#S2FkV1=?W(akTi(
z$^FbVehO+>{}(-4xzHmc0Dp9JRpO<(=P{R}+5k&cD9yE~YN?d)Cp?W;tr+fKB<Y*J
zMaUk($<P}uBWIOwX==Sg-S0OPs}wQxtlUnaQ(}IHa^~G^OFQ$LYXzHRWgfIR0Rmx~
zLhMJ;;*c&2LG-A3M?GDK;1|)?Q_~R@;aFSWWw`c6wDH@ShGIZ4&LPF*h0t<xf+jw=
zKxbC%^&1EADkct+MeaIJCeOf@xV?r-8{w9s7w*3!5e}eH&N<p1@)eYb?|F^oK_ttG
z8DVm(68I^%4aBA?4+Iz4Xm}~?+<R|oUJfa}6jGd}Kyn$-+OaSbDp@?>8if01kDvp5
zH!bPqrwy@N32z4U=-@}pL8NVbSX|09Oz72;wnm+R-0c+TVxn{xZSuwP{D!Dw*+fU~
zc0%Ntaewa7qF4K)MFc$Qs56yE)5a1b2)k~R@S75HM=zV*+&)8qyx;w*F*MpRrRO+V
ze1n&XRzZp|BWU8aO|~fT!m-D3Mh7$o|GRc&r&F^x$^N874`Yd$ttYrCVVOOi9nW|x
z?eR%bm)+7#ae9_@sa^jabA?}Ip~R2w8)F;Bxrrg!%iXNq>#l*R+D0s+>w}q@ubxZL
zq|%%Rm!>a-H`&84S_ZOJ3k}p2i0~2kcid<5OHGMCxGZ+iFo-;$nv_Q037vj&O_Pg6
z;lW!s7e~W<yhO-$eV9b(UqHJ7jN9R>PxCB_d2pMVSv*z=r?Y(*C`TVbwS>0qM6jBH
ztIb{8LyR$UY(kUXUnM#J;>|)g;?|<|X3<4(?!3a4oM9X)GwEd&A;!|eeYD8^8`)Nl
zIya-oZH@&l_X`e|&hUWzI?mHxHEPS9f(^_xJe&wMm&=_7e1vPUOhWzT>#5)`wF!9`
zyJd=6BqHsx9HQo28ehZ`=qnhzH0f5oDYV~mz<hTLJcM@TJ&f<cTTh+zvbbi>oIChF
zietl5axvSMF)|;BCaQ$r0(zu5uB@ixX~aFi!}3^c%f+6}@LmYMA?XI0EHtU*D#in}
zk|)9(Rof^+@8lARNL(GrV546u85nv}<4?-_>CV8+zy|j#jp3g<p5Z@K@=FeAV#r>r
zReNkzFt|J35-$}~nqU&ZK@VOiRwt<@bz97R8&W0H%bu!@vsI?zA42**a<Tp6YZlX4
zYJoiIwe2I<Dta7U_;}DzYu#h2?Vg*e^nwK|Agk@goqhw2D20fCQgxC^dfvB6idsGt
z2p0+L_`IM`RtgD+PCVHSyLab<OLa&&@$!=UlfpOvX$R&djP2Xc?b#Ct!!5?p809cS
zQ6`Ld+S!M*OV{DvWs7B{`uTu$b6B=^*IT{;QTAKX*EbANiq#khZW_`R;BHb%o3%aP
zzREBf2hEyff75Y)>mg_>Cz~xBhcP%TKc?H}?R;?%u{uufGorg9k|PYWGNt@gyP=xb
z;p_3xLTQol9P_d;7qJTSw#~Bcgn^FEkD1_L3|=C)xRx(3>Vlm0*k)Xo>w7G`BxZ^N
z&Ko#w_x)zAS=E)*)r4rtl}y`V6p|@0_N-eWJ@qcm<r|m$N+;!v%86d>z=58iv#7=A
zgMVC~pjk&Mc5FE;T~wTzbJ951+E3!R?uWghE|l2r?>J~+o?gn&=!DtsM<9pEzwf{k
zo1tws^M(D&PX|U=8cm$knnX`Vt?8sTAiJycvG~@{@`tXlc|Y#KClMJL9a<>Oi)C`5
zAr+H4!@?mEdTZPC+~!H`**43@nHI=+%5t3v<3^LbhUEbEE8dB7n9+qAi^?O^;gmWQ
zx|{D1cEKYGN||#q?bw$5b<T2UmCcKF)2itnZX-hUqgRq6-3lmyOp1NrXRKdQHV_%c
z9tDqmo#!w3;rIJH8r9OzT6RU1-LtSWWfwL%#Z<$_CwNUndG6S=61X4S<r%Iu4?X1{
z-ag_(j;tT{8_!LxI<KO5w>Eg+5uvu^8L^Xk{-}>-)p-;t&Vh`aS-A<h&CNTJcyA|_
zFql?@uRv_XyHEa_d8=qwGxBrq0>r55!8HY|qi8SXjE=R%EG?(ols4Gz+l?C!jZ0^)
zs*vnX9>f))RvjI$7DF=jyTNj|9%slFY&bD4GrBZE?uT)O0#bZ631p_wFp_}B+ZOg)
zEJ#zRZk=^m31Or}M_nP^8sCp@7wa>pA-giJyh9dH$kM2@RHPB|8ghf2`r0J<ah<TE
zuVc;C_K^K!lC<gLa!9(DY{i0zF+sz>8gS-#%+_1;n8LPp6&QwN%Q#Rmz<*zw;^)p2
z0og<}9~+ak-C$Y(HI2JIRrEJXz|_90;+7Y&UUn0CE5Y^-%Y7RO*7QCqVIAFl+KJu#
zuzJNC8_>MOs{YE~l-<J$+-Ne*t?I>|?<Zk@?l0mwrU3+B*MbS6x*DfX-i=I)*!C0j
zHQmat&g5QGiK7Rv40qbGBC+9GxslPJuCa<W7Z}Ln2lfXA=nC29p<4NB!6+6bM&c-(
zu$v~;xp-(BG63o%ydfgXUIv=IC-D^1&PuCO!>Nndqeo=;77&d9a}GMHCKnC`y8?YB
zvi^C#`Fd0sG5ToCXe`j48+kxpzO^Snh#qo&AUlJF)%IJ-BjR{#Z^*ZAM4qD2BdbgL
z`zmilKfFq1#6W;^5C{1Tev>)BXo?JngtP}+MVya$P#3*}+W6wqMwoeYaxE-)1EuED
z_a#{V2CSlc1v|B8;1>tz7k){|beK$<DFaz+?6CcoqorM=VC4)&TX?~Bu~cH!v9Ob~
zk@@Bd^0K+j%!uYXtkb*&u}Z!|ID6iRhvhp`Q9K3+&35oD<@ZIYYZ4KWh}DKK!}QHw
ze(_c^_G(D08K}njsCcCz6#`9z9z2{befkB$weoH|Wo)O+LkT4X4V5sip=nVn6R^c?
zY8&nYazxo(@(+Fetcaf#HWMrJZ-vds@DHb)k?}wA%InpZY&Kbuy)M;G6zE9k0C~dO
z70o%~AC^VtMD=P!h=!%hE9rD4WLfWnA0!_?2q_jAx!0P1pp5Kf;J_ct;BZ_w6{Z&v
z_6a_2(?tGJebts@g7HGnJ&0~LLSCxk>{B{Y*oyip;2Uu`YH%E-;DH4SbM){zVGhKW
z;)pxds~B}#ECB*ccXitzN9jmkb9@U^6uZk|wi$Lx_z&KToG>60Chy(r&fI{=kYvc~
ze+or$)8@hO>Ja*9bWTiNKT+ZiB!m_J_T_LnhpMk)Oy}artq3+OJ%=E1bp5=woum8Z
z(Z<pHngt^=O@NX=>@N4!>Biyt_sjEfw0k>}f{`qbxw?CsDg1rfq4b-o5TW#Q5vBaw
zB9Y@{u!IRpL~qZK@D?@N&}phUFzgCfk&qiJB`RftmY0W&j#0saW@4%6<TbdgBeZsK
zC4iT(q71QtvazGzJKl=QRLCzOH1&yUpl>o?#Bl3Z8G(Ev>Lyl3N6uwP618zIE-m-s
zZQQ$_kl*#TTTsSe_gqK_DLopapu`IwM4>o`{Gz9bGOgjRX4Q&Qz?>Lht<oSi%Cmpd
zP)sOz8+4&D>C&$n7}@8@mDV17f#(7d(959raKHUZ^(NBQW+Hq{A$Ik!O9oaSi`k5I
zf2?;|OjSr0_EX8L6GK*g7fza_{)<8EDF(L-#<gOW<Md+o1_9QN;1TgrtjVv+NP8p7
z)i7dTA|lmZQiqWyIVdxW#gn0bUR?U@ye-Aber$@{)H$*%SgqO4^34=BU>i2KN;w<D
znC%twObKt_8H*}fx}@#_{FaIOJcOexOt3^o3wE{|?@2;WaP%?TYwZ2SzQGhf>cX81
zfzn&wFHm!{4KVLtOV#=9?O0@ak)*1-;2H7kyTVx~@LkAH*EfJ895^p5vR>yZI!8l`
zWO*lmat=bAsxdmg+h!J!1KC2~zqtgXWJnCWdV@CNODxZ23$7I7h~`uma$}w$x3TtN
zz7&zCShL=D<^3j=jD|mlvs&4%1S=EAMG0GxADOzH7n?mBMT12$bP!RqM|Is)6sR}B
zh36iP#X*daMj7&aY~v>=)d&wQ>_{^>nN9()BtaqCD3pmg_Am5|#`!~=Svg^h-%o?G
zKnhp{c?Em@&p#%##fLIwh$E@ntwf?wOugl+2+d7kCorTTb!1TWC8!%T7=$1vl?1JO
z(CGKfw~F>=PErCBmN3AgB5qazX-pxNH={`@wjBvSybKg+SzXo68?=h)S}o;h%3dlT
z7mSE$9au^e=MuH9K{Rt+Wt}+<+%iNXV}H5n%1qMy>E@VZZnzVIBLEW&(;dP#pw?h8
zwb#E-KnG{|TO`VQih!V&vxo*}CRl$X{}dj409iw?1irfgMW?5nm3S$i%2Gydp4d{}
z6u2B4^htaw`X-DNp;h69h6elGp>VJLNamo&RoEA0Cq7i6HT3XiB{0f#?HK$>TrNW&
zGmHjT3)PSH<+_g`N;zlYFAB%6<=N_;!5b_OhtYCCSrp|wIE+Z`h|&qci}-12RiHKr
z$O3apxk^%O7}JwR)RrzJ7BZZVr&fft5uMS}<a43{I(i3({BKWJxja)C@#CEo4V&p%
zSew9BEOqnSXmY%qaO>aefZBq_^PL#+AK6zs=Vi)D9HRZWq71(ircumStS??-32`{M
z3Vib&YOh=~G=8~$)KQ*c*4s{n8dUSLlvhY&fxi|6+@<4aU%-1#T^`M%EL9f$tFQaM
z*mrZ3je$m`<%F%wTF3k^N&?ml{!o>f*<#p4=p^2do&q1xzVb|UiFCC^G$bSh7ZqD*
z>TIp84z($syhUUJ;Psd2!*Q*nR?9^$U)1Mu6HX7PLDeg`!d$~M^|Heu9y1_wd+6Z|
z3%Rv+N3yl8zMJp)A?$n27#NbXrVgQoWtMoXoJdTGpVBEhl;a!jn;zJv3-Asa=R;Y4
zwD^Z{cvkv9y?HjqKgQvo-aO-f=FO|fIHuD-J+irgfkqERCT!mB32|98(qwAy&5VpR
z)*?VgTx&YA9f&@HqbDCL7%b@V!}+l2b-S{(4azOp#U%GQ1~(j#c>ZSc0{uo!wbR(5
znVf30y!JTuI)<*|2sLORgc62`mZtTs(`UUDh)vXPbyR5VSUMW5Rw~EyFK>Bnvwpzd
z1<LPV>%bTj>%)dPnJzG;kK;Eji(Au8P!geR>!i#<am%`v4$hva>{SfNOh~zPgv{MN
zEItw)to;z#=zuH4mPA-7+=jyc0KHaI9VJ(mi&+?GzY@??8&s*{xEdgr+51XYyu{1?
z+IZtmnlBm!f)oJ^k?vf}MSOtEh8(O)wXg&k*#eO%;<}fRb2+N?75K~dA^Q$WgPQwA
z!HQC5rI;_awk3^8LRy6CX{hB}VpUWvXlq3iad&DKBueyilirPo?UH?HPrxYh*9!4m
z?uy1!ACS>)h@v+N?BmJv(hqNdfO;upf}}%So3}e-ix&oi6u;GZn~!ZSx+zdQ22O?L
zm{?|l<WrsLu@fWPqnfIUi5VM8!JrB+@x>&=CPGm8_KeQKZU|)}iZVerGutTd6gfwP
zINLLbJcRe4sC$^cHo|(D$h>-HU!NK@Oo#eKRLX7*)8`Kj2UB+9-YS@opS@IemIUV>
z`4w0#HJ0-Q<;vzd(G9@2Q8}e;kgQ)Rt7Lx`jwfdD*kY4BmVXzub7`TFJ^%gHwHIa-
zX;V^^yt@~PUut2aFg=?0h$C`0MO*rSz617H<6Qa*Z&m+G+|+|*&2va>oZ!ihiE+_L
za*1qo27y{knQYqC0L`4snfUV4yZY2u6iG1li-xvezTx%pe;53s+JA-S)3z4Mw+l2+
zJ$A2NL>w=phM2fUqqG?mB=f&5XPdZWAgWxL9pOSeRUT3b7L2P7a6bMf5kgC37BT=5
zC^z?Bc6Sm6$L6RA!;UV*lDe?I%dc~Sk%eZ+$`X^n9IcrdCaeoRF!D#OvA3DsmGgCx
zKsP>?4>KinV--L@t-_et7gf9Diue><JJe-@JfmQi?d=0tPQ*jRKWE<Wbu=5tpJg;7
z$3MI>Ci?%#D^p)`SOR)wb819#xty4SC$b;OWQ!!kBo@`Z95`Qw`qQws1wkC{5#CW>
z_tVjl@=Mr%bK%Siv$Frd?&)&*jZrT)0@mSE^ux$dYJ`o6o~f{R#1ApmJhid~LG_B7
zg$TJ1Zq<up)5QJ;NS_3JRkue<Y<J5(cEQdU&R<TEf<(-i>?lWYYbjfv{`mA>nd?MR
zI`rT*+J@M?oKRg$I!AWq$r-+vl{y(>40|U7Y+@?)3md?(L)PJhr{;MbvS|MaH`Y7%
zn|U9BqBTlz!A>yvl%)j{7*GdaOmEVW%8cP*GR;vXtX2VBc7Pu3>d2$!y-71<59Dd2
zy{g(Jo0pWku9}%vV{ukIa;wcZu0{-BLA;@_X)XwpG=@4M^?YH1f+sL;k#;2Zx);V0
zOZUybRD=U%8AYSk!J#4fy=0sXS{A2qrGP5@vC5Al>&Md(s3C_)-9#nP0e%_p8r_`@
zKjhm-<#OU!x_f6Uj3J6crHkF>%yo}`bgizmL{zP7eh8zcr@^jxdE&h7q+`Ea=ZFd}
zMCxpzYwA2nQ2hhlsarpZjce8=8kT`~dozztiZVZ<WpB8Yi?8V&DHQK*A5IQZW;o{D
z^$s$-1e%wr1fH^OY>P)Oue{J1Xdy-<p;pjUntdA9@}qL-OGK6T(WIZ)!xg>yIF4z=
zAUX)CoJo-<HheolUm)PJMix}Q%^^cWQTlP4e!182CQpPoNfKhr6(JRw8`eLNmpsgs
z3Mvjeb{)YBM^J4S4F6Ls@2-K~>i9)5p$-gZKqvw$c;7o~<U`Ul+0r#f2`0o(XI7Z4
z>?fOkk#vp7?z+MT_iuWrvd-F-31~$yh69oP4m3ZY->x~8<CV0<#AcEdRz!f6QX*s;
zs>E@!q4(6?N5^5g&3nGx;eUBQFs6-9!8eXC0@aJN|2-X!UHh0UWCu2nXLY9H&33Kh
zDJr@AYLtrua#yAlj~@bLs4AZF=kOH}g7FX#C8W60_3TrIO6>ly1H}9KeC^e7Su*8Y
z*tieGt$oVST^;Ur@=3(9B(4eX-Y1gbaKYY;f=JjI$&A+CIf<*4RyTNxaM|9zTOAEM
zn5JD_SWZX9PlIhe_C`+L0w*kefjtjt0&!p5^44Ex^AH6R6C}VKKOGFdYfs^`-Rb8_
zG7Zi)QHR5moB>1IZx{4rrAt~waASfPDO>q%cxejmIi)!D5emIN($*mGl19a&Ru)Qp
z1Wd+k3@#GLnR{ELU92+{@Apu?+FNOQSlfhbFgw^5eIp^2-=Jei5DUw@BZz$2SC6kz
z{MI)ev70h9X1OHL4GaRx$qFi9CKwixBpTtROL^QdIqvLGYa1o<c1B`U)5{sl*gZ6j
zl?LaqqVP})3>66HZ)7gY9YY>tTu!Slcl<7ekxovF?{q=ncdD-izbAxf1v?OYs3JEH
z<w<tioY->AzUou}D+`k@k>n5WuR*pe0CegK7~2My_Q9x+Hy3wTCQI!$0LFUR;u6{*
zmhc4u7n;$zv0zNE?7%8s-`Om-;G}$bWtIA{A^pICtWJE2Psg4iLZ-~2No|ceL}Io&
zz`a4F3XTG?h<OF>l}#Rbd?Wil-kN@(UPU!4Tl^|5he#Fhs*J!+fsGODqN0SWVg~A~
zAOK_kN?atS@3SBGYg`TKuw(ag0$Crx*(ek<M0li$9&?_6#2Q=HlmQ%p9F`DantR6g
zWA>(%o-A_3x}*(ojriiaOr9PBhO>TIo3&X(zj~;vfP*82;}B5Ufp`~&6DssYm`XhH
zgkgL}B!6l*8%?j0H54!-3>~bPO|&I=QR*DKo(9FVJnSEQ*g<nDB67E2`x?pwjd9f8
z)Q*)0mJAsL4Rd#PUo%DPG<8?vn63dYdE3p$Lh;u1A35_fd=bbmP`yrM?b_Hy<i2?1
zKBBFfaGtlpPTjE1dpnSY#%W#`dP5@zCMWb*6nvjJmjU10U6-c$R=B#LxX0PfE)4a)
zbR>HVl3?5SszaU;V}Hr@V+W6qDBoSPb{3!KBWFfUHdN^Z`CU3&NiSAweD34cLBe1G
z?uUGik%mySW?vTlyp59v0TNg7Y1&#g2TL5wpgR^XYIIQ}@Pr(+@2`)sNUhY9>#uRm
z_R3yJAA*xBt~q|8dB695jabnq0~4%C^V>OQjmgI733*ikz6Acp5$6F`%_f#XUCQHt
zouvGBkAZ4AjcJ*l_eqUA4c<$a3In>)SrEq&Y1)}~r1k{5Q26^@@HS<DWc=U}tm}L>
z0LFfOhSo{<qhRvFyF~P^qR{1LcC6kLq6Gfcauc7<aXwdhOwfN=$!GKT?4PnRvH$i@
znV9}*CYk>eGdZKN?6A~=(lMvBR;k?IO$_4C*Aa18;C#^c^#eJZi>Q!9%%@-yjJUYy
z)%7;X)eo&8SJYBr%fRW=A1eel|Izm2a!?0KGULWZ^u4x~D4jdL7aqfX!hH0nU~OqJ
zG;J20NbhTwPOPb!0V@O2HPRDq#^uP2w|rR-;D~<CC>SJgJn9TO?=r07Xvi1vS0BDx
z8X>Kr7>{h5z@qVD#F9?Ek3Cx(2w`YmE=6Fg?#u^`H%TqS`gWWZXYqmDC!$s-V<S)K
zya|4(Y5C&V%w(DY9y<U7eMUQqJPRU`hY^LBuGN+9j7BMfYLJPMK#a~Aa(ApXBK>j`
zF!j+%Hsl<wFP-Nj-%+^wvF0{p*dSx&hPyUZjoEma1FGrbtAd7hjf=G}@7hB}bAM!v
zyQ*QWwTPq@m*;8HotcXlvE_dyJkI>e`5M+r3S$9tken{=2hOJ)IJlMa85EpCstZGM
z0u^6&FRKH)L$pH{zMKs*AF&Jl=8Q))+5J8#7%HITAw8W*B}MpnU!HRU2>X-?UpI->
z+tz>b#n|@%JM|Ct>1W(;(GA?8?Hrd#QkKwueR3UVwLx08mfVXR-scp?=>Woy4S|{J
z3#mT=n``+E#Mq5!pG=kbeVA2PF6}fqv^lv28QEN->MPk{Z9FLG9AS9ecrbHC)gk^J
z$j*ei0JRsYW19W!uB|U19<RU9STF|9kbopDZf00;b@9+d3Le;;=d!$;1O4c#tbG{%
z0j78uB(#*fvDj86v>3}^8uvuao*~%DVVR#jx)iqn){-<yCDtg~w{5htd_X%^C+Y3d
zYp`5xp*PGq2M8}T16s|CbfkDA{iOIIcX}n@7W4Qm^NslVWQNMhW<{eJKYA%FL<*bT
z;XFtP)Sl(mw);wcb)i}A{W!XFx=|*I8y_2ArP@Ez?)sfJJX8t9ps+88AN>@Bds=C}
zU#@kX=B4A;jX~MOeG$>~99^(U(D4sUbIwS<D1jAO5=9DQ+WFhOC0VAx=c*u7^b;PH
zE2ZbdvGzw)zA_w6M3%}9aSkT>6-i#GW~U6}XUd-zCK$CR)Kx76wlWIV!cwU^i;-io
zINj~h-J&F*{3symb~g$4LyPDVV+S7}x=cyO(FfI%a0>D1ElFEoua0UU-{<Jx8hG4a
z-{-`DD$OFZ*S?SFT8|s5CYy?IUGCAD?7RG4Ww_4SNXUyYj5EDZ8JaJqx8j{)Mu3ej
zHXeby>h;!#qy6FPJ!t>!^kx3u{NTm)`ON4oq7uOeZd+@IRt(6t^%q{W=9JovE?;+-
z=uie!%S+fN3=!O#Kly2n43TOT<9-yQxA%d8n)k(k=8#i+B~4K-ufR?U3Z)y~ruMlL
z6cT0)b=(tlC<=DC;O=8R$tafI@PcNc*!3o@xs9w>c&<{h>)lAeR2%osK3itmDCcO`
zqcp;Gbe~<;am}_>Iu;+6k68F;<BkRXu#Y2C%j8@N8986CEBy02C6T$MlC~!$Yr+~k
zk5wDPtj!wi6%*cfCku(`jyMH)BOvg3(_;y|hip?^%c#Sz^HskR5%YT#Cxqb?f9agy
z-i*dw;8e2YP5sdJZ3GU1N@O|j-mcb+lXsG#A+?dURC9M&v2o5>>z&pJa^aeL+75{Q
z6gf|B=co0fCf}^LYUtGjJLL|IA|PekeqtFl(&PO;dwscTb8{g^6V&f61LS+8XI|?E
zAYbZr#3;7se@yWwz;@o36x07cIfLk>U^7E<twTGwyey-q4C41rR@~pu_ttsdZYXGK
zLKRi*=D5G$B?b$sf9Q?%oo6k{aUISAKP;{|&JDPlgWLY)`V8CMw~`1OfY}di3VPlR
zw<6RLSz&eQO5T-Nnw2&BtZ5zm{&uu6oEOH!v}ZbEhefnoUl2<rG|daZELe79nNzXo
zOS|NwlfiMCAA~oyQHz{Y&{kvbQw*~Y9Vlec2>d)U*x2Bl5v?M$17z*?wt5y5ylR+b
z&V~6qpibIg?U3yV*5225H<5B;utM;<7HVdtit#Ay#koVjxFrpSq&GDghDDH=Sg{%H
zw4{WDT;{K-OoZ|tu5??N63+Eg?g6cQ=bX8pGU9T@Hoc<Xbf7{AGk{8WCf60qa_VZ$
zE*ZD2VmOT>K~<w%W*^uSMaX$dSMdYp_%_S(NQ<1i7vUgk2^ll}eow$oS*ct#jSl0A
zY4%uN^HDS+2vnCHry_d;Gcj_=gs$B+ONx=uk)}E8_#3jQJ*+bbsi5<ouGa)O@6H<6
z!c3#4RfsdFV?K`m<H1`97Yk?HCPq)k`OW;V+wVa!_-`k_z;wWXtb49oUWvmD>Wzwd
zZ!sMEMz4LPz6y0O-$4w<%U<D^&iF3=HY9~xNV;mXP=DuxJV*~@|0J3~X0a`zjK8+e
z;_bPg=~js^9ke3SzU#F$wDC+12>$xn%9Zo6uWCe9N_K94U_RA+#oi|9Ug5WueWJDF
z@$rRZ$C1qr2h`8a?eMHdJvqFdUE>>RY?IP#eqOc%>{`nT_{v%fauaMtYxM0bY|MRG
z(#OXP{a9S8=?9nO?K)G|U-r1<rV<wv=d|+|op`eDzHHY?v@VM7G03@q{-|_x<iBsA
z&rO+Ox-(70^5W1n^0z1X(dLE3pwrKz+GS*B)2q`q(cn6ya!KBeb%=UEQ2kI=S<Y+i
z3)urZ3z6YYUc?DI5nZ440&*&yDKXAXZ5xkrCxZP`738eD?gj>X$@!)zpP3oA0+$1!
zt9pR5IzVD{4&lusG4X(}2Qi^PSZ=p>0yv~I*=9YwVApD|-~9ad6E1uhnO#ec69h~5
z^f3$<1)aJLBankP$|c7v6qFPDT{+(K-pD6@)xq`d79H<9ZxFAb!d}cy;R`~29xb$7
z<5GpEpT7a!o9?02(e%PT==`z!2K3}?d(vv#O`qI~TV6)VgV{8F8q(X~aFosaH7bsj
zuECGAF^QhVw4--5tnj25HI?XTTQMjvT+`noD(GSf^5#3&OdgQ85uXRpm+B#`eO1B?
z{3hH8{(1=44aN+o9Ib`a#y?B>0uR3to>^W=ax-b#K{HEWY&$h<I)I6=c0fDln97T$
z1<BWhpxElNYS#!GRDF5Yj>js8lL8uS>4#&xJ&EAHv!vN^1S4YDjuJy~+ODKPp`)|F
z5vFB*7;HX2?Fq@ol~>57rS*!Om`_Ny52%{c>exTMw<oXc$$MjDrf2x$y|Mk%dt?7k
zythJ)g}5nkOyH}hExhl6nHAHOX%v)iidxLy;EIh42_V;G(phRIMJ6#mggoqVurbxQ
zAP_hqPtGJbG!HlLW~IN?XT=&R;@jEXp|4%&`8F(FyvlfH==cVpT1!@;X>G!HkNG)d
z#-@l37L$|a2X_PKNco0+#|<H3S4&E(4ZgejhsCk-x2ZNs*J&LOKeVh6?F{Gw5BJEr
zUo_#}S~;g_5Yj$wX0&q+Ww3@$Z04SvGiuSg-PuVVjAq@ZZOOz<=1HC5<1OLW9v-U~
zjVdHJ>GtYG(=PLSu_pyFPHdCZ1Tn-!%uk9IX*C<aZy(WUm!oc=9s=(fFN#|VdYB;}
zT+po9r)2w@txhxL0g$>#A-7V(N0jK$F)^ppurHq?sZv*<Vp@bx?pAPl6W^d0%F2db
z!_JEM_UgoBBYQNH^4-WTr-o^qCA62#(p5D&X!LY{Yv#&gFh(q_6-r7)e_naN7`*1h
zN_ma5ZP!#=F&7&aO~r!h(GEkjAw_6;!Qg)Q3?w|*_|BPJS+=PZbgWBabOqUozshKA
zWdS{j6DN&Cp9^D2x*|z&*o|mols$1?Og}BQtOPU^aT8%(YDeQ3hSoR=ftH)!Oaacj
zl6i)%s86z>aX5SC)X*q;oS~U~b(iY4@7Us-xW0Uya^QPcE`_)>c|HKey+>l{)skJ1
z(Qy&hd_B8xn|E`ufD4Zp4Mkb&j@<$`Z~M74sTqv<P1>%5;e-S~VUD}=t+y2<S=V`Q
zuTV0V)5%UL$6XJ-PUV3UL$^pP(?iWv(B$eC{Lwiyci89ovzE9QLUQg<Fh}v2th_qn
ziKvb6kd33=Vs9$ghC<YmLx|CR%pNxU_S%w+>6nDb18aHPvhYg1B$Tj13S`+Nk}?-e
z^w1MY>l%YOhUf);%*MStPeIs|5$0(x#KB<8hp}U=FeXf}gg5nv3+Xo+Jbz0g+kSwE
zbXR@;<&`e!xRM={efm0+ymq&4$9?DbEusZ6>SYFzrf&FVyCo~d=G0Dz{b@Qz*#aDl
z#70w@4!X3r!!=Gi<l8t=VD!B@uE!cR%Skn*n8Khu3)8)wLK)<5;L6K}os__f#9N5v
zTaHIZx*JJ6Gx*XuR(#2=d#O}S-XK+edy|DRFumr%Zg$t<`M5W!c!#i9MYx;nZU;ux
zbua4N_XYmd<PyqjE@s%Yo@7p^hT&ISdqP-lY5p>AWQ`q2FJv55z04_*VK#Q6o9PoM
zENSBI*8Nukk56+%!VOqA_S0|E@lGYMKAiNWz`hyG2|nf=5$5hYUaBR}g;8FXCFXz=
znReZgFq|w2_SDe)>c-wNtnkj7-6>Y;lS**~$=qwklGsEG|Fq84;@Qh@VqB}yEbX1?
z%shDL<t&pvgZ1DS1!B`@<Wk1EmXzR&KD;@%=EZVB{CjZ*46HK}C5qM|mFGm3UgpD;
z0jwCO#Y(bs#X-_j!pST({^lw&K`UEdlSLgaYB)@Cs&Bf9=5{(9_2u!s=5i|eE8_@o
z@`i~Zr1Q)&E*+_AX}=vz_-7~~USa!5Rm(}o<w$k6JC}8j>W&kO*k@M9F<VL+SM(%S
zn6cY@Sy$}%hV%K=yc3~?j3DI~+FP~<aQ90)CfG^T`kj75c*McEaZ8mFd9&{53WG+x
zmDT>COLx5J^gOlz^*U>;OI7NO&-k$ZVZKJ85Rp1?&8wAqq>lX*?@lT>l_GwWETc-1
z4}4UgZ>S)nT2z`K^TmCiAGSBQW$9stNMnm=DNkxNLp&;9g-X9t>cQ@eETibJ>=pM4
z%v3^WxCbT75TGDu@d2yMgJeSvi82QKb0SS*Zt%4EuHt*|9u=L-Q<nh!;wkPfo-|aH
zz5Y60A6~E`<d_fqYjfYfc0!-ZJL*NW$M&vDcYZ#D8XYgLJcdB@k!ySt%qbE<D|-6*
z#h4uw7+gI>BKa9@wHQGlzN%9g5iz4YQ{E<rU!QGJ>dgrKNlq`)+R&DOA|al+K?7|8
zIS;NbKZNpwG|OSveF1I=qe53<du@-@+P?0RrzO4$w}=1k5cnRPaeNI~Za8mV&#(&=
z<+f;%ArF>74u}3QX?Ui5t`pveFs3*0hc=Xs6G@yH*i9{<jaf0J0!R|hvNEswlFTMT
z4+mya<q%^47FjvUw0$VjrKJLH&TTgcM+`ybC2+IG0;7v@X#$IqIq1ost=6o)vP{Z+
zzGzuTAtwPWjg&FJad--6YQcskAk;0eR*3Vdj-Uq_#w_ONS`>E2@FiZnl(uPlUt%MA
z<2=E3ICxW-9~T7jNV3o@C)k;pC6R2A6OBA)Q`yDQu<{<Co%}VZsbJ;HxNo<4Xvo<z
z)6B@w%#!)xSeJr^jB<i`eapL+;AErmqxKPu^9~oX=G}avcEZ`;wLcyp?g|*<37*25
zdJ?|ozzv}q>6DqpC$dKz)L_{%qz>}8=TkNjhy(Fia&b$Cpe7-HpgpBGo6Hew^igCd
z9F6cto*sdELqyEf4COhw^0>jn;F|9O)|;?v{=#4$!W?&YRABbjpe!4*rfWJa4aa~T
zgTFrhh(Jr!7{5Wo%_0YBV!3spGE>m=!zQwq>n0WD>A?@*n2>v^k^XBz$kBYquG>TK
z@s{GtsT2X9bM|3AByF5k5Q3LK!ayyxDTR+Ntq;;6C#wR2;aLRGhT_Vpn5UVGWN#BV
zC$sv>h2nOmP5YX#a>w&0?$etn&b9DAFOKl?I$)d&<mch-yU$x4z}{w7CJSP0y(HEs
zHf{Mpg^XPYwp*3Q2ZkEJ%WfigppaUdSMokbi^yStnK9Hcxq|S8wAu|7ValE|eki|I
z^M$jyFBFB4=}F(F8PxKCVTFG}c|@$&+IUV#giVedj`%Vp-Di0h#wzZ#t9uwWm+>03
zT?SDX@&|gV($e_?+|U9Zx`<2##;=7v!4^m@u6SZfur=`J&7Y0LP0G4vUo=l4D$crh
zULv9^_JbJm_x+g0*8y<=sj+Y8@e~~OG(#qMX)`MqAz4Prm?~|axFVlOa)>~Q=YEaM
z?OjpWpDLr2Bu?1QTi;-gA|W>``H7ZpC7ov_yp&+?jYkwVE3}F$1?8MMbJDxb6Lo}7
zO<&E~XnNkBY9vv1hlbOW)OaZd2WS|yM$cp5tialNKn)R&v?jkdT0@OTj7rq`l64$n
z>y@YEkBpyX(zO$_HLOUkb-vh;I8!7&^FnerH*(-D)Y;_Q5vH$&{QWpFGuwO`Ljb|e
zmI;gsHFQj-n5K6#P$Ge#{{F10W6QoqX@;~*ewxY29vbigN5-R6X98g&Itu$fhfSeY
z%pSr!Ww|?FADeqw<$Pxn<_&Bv<u^TwV@+Azq<h0p8L<2KWA1%_VDM=3ErS&P=qLu0
z+;5tvoUj3`Zin?R+Y#||icdZcQ1G08*uKsG0wDyiP9C)uIM=~Zi=|}dZqs;qZS7M$
zoUaRBe&p@LQu5M{KRrE&V>uIl#oOofty}rwMNIR(@zLUJ>s%E@#qc4utLDsMZsYMv
zhnI6}i|1`sSY2pvu-=l_<@eDtihS<xme`v~(ot0_%yCpP1js%<Y;UbjZ!P=#=mb9H
zoFLv(=cgEJ<*C7c-$^5II<GxmMYuS)YdZu81f`rxHU?4DaC)R(`F%mn+<#9aWaObs
z%EOw0%^<e#>idGSJg-Vjqv(@JBW}9m3k(~(?G78>86@GgIS>OuPx>@}V##m5t&Rvt
ztdf(Bx*cx_Sv}1p$k~~(d3)bM^H>B8tpnf1`JC)N#@0h2{nOEYa-g3bZFa^#k4c&T
zxyOt7KicCpsy+;Sn~1)AKwV8e!=M00dNok#+-gRVSr<jFGf#jdEJ%(QClB+v@{yQu
z8QynIC=Ts?=9p7kjJ03W?usMf?ssrFdI7%&9KJIXw4B?~kQWS(BAa3>Ima$|dfAKH
z>9*cdKd@SR`gn!q1r<<5%;v1PudA2uVUs(X5kmBnMC}aJtlDO)96l}|*nYgG#RKHv
zkdx+Iz`z>fn;;y%WLv4|w`trPRj9iGjT2@k9(f5r;uq2wt&*L*XS#yeHXAawJ_+(N
zf79?0Dm91+SARs4*ob>S#5}ME=33th(Z`bqhlE&miiW^;;r{9<1dV!H^AwhaqSAON
zybbFU#=h_?Pd~{Lk1HJl<1(sU@>*Bu6qC&vB!hK)8PnZr7WM!#*d7|l2nN~FFv5>M
zUjA@*^hm4h+=*5Sh4L!XVEL<!=Dq<$uspiwDxT4ZHI6Wl`(z#;N9~eoV%!Dsy>!)<
z_+0o#o6I}yelULFH3pT%d}G_D^SX1WCrOlj*lgp}0~wCx4tAT&_878Mb2=G}AlQ2k
zgf@e1=XHaCRE8e~Z>_K$CTEgOn{19DMPr~lk_s^#>C(+0y9VM5TLnaK#8Cxk$n>)0
z$wKs_aLh>+o@3}BU1GBDTq^a=O~cmm_17pf_#UWx^HIopgE%C1nNYm~%(L!M%B!H@
zYPd?{WvaEHFl7x`AgggsfEE=H5^%e=-EdpyQ1Fxbs!;|@+OA3qh>$yY8XSdCwB*tg
z<bt+J;ZXXGDE!5jgW&sRqC}e%6CfP%bBVsT7G6=f-?b^7u`OWCjuds?N1Bwc@vJ%$
zUCx3d5^LAcP9I|CyDoa97`61#P|CFUF+a@dGrDyagLq`gJKN1lRmxMV&cqA2i8sjh
zFbE$Af14%|LUZdq4=iNzBwk#|KTDfpK;+BB5GmwM#h##|yv`<vGL+|k2MMP0dRqF+
zTLFua6(K=<&V{#hWI5J?;Gr^9{I-n9_4jjznB4JTdZRcoj2SgpCwer7nZb0kD`2M_
z>zpZrWZjmjAJtq7iz6bKDN1l;ve&NzO@zSm*=J#SW+);Qhr5?vjR#fr#=2^UG*%{T
zgOhyu4z);ecWP4h6|rX8^YY^Mm`0kt%hQo2dzb(9fuR16q7n};4QD&(x5?x{)7cbb
z=Sl5(hHgaEy9&wi!LHv#n{Tr?*q*qBcq|L)C_hsQYcm}MzdwEf5N3<OF@`xQlLrX5
zF)}gu(Y&``gWZD2h}kl<nG~538IQ?HHjZV#;^npJg-yk?J9e$EU4rA5QS{xw3j9?B
zCcm@4*kdT_5UTXvS;jPxAsq$xEwr|9Di8e!6tU^8W%$8~I8+d&_s2gVd$muRw?gO?
zzk^i|;Br1Zz>-j|OYhd@1|PS!W|n%M*}R4^Ez!3W(W;ZN_+&sWhEK*9>-G9wXb*uV
z1I>gtD@uToX8OdGc_8<NYNlzt)~=Pm@GC48X-_u3B09Bs$?p%g<QVnw;rk6tC}*DL
zmk~k7c0>_^uI}SpS^-cZd_(P@-gSbdMJ~ace83Rir~JPEY71AdNcPo@A|`8@lV-ST
zDr)&655j<fy>eF*+SNlsB0UU6BeBQz>C7M<iqPBT%Nnk2X6deTi4J$MLJLQMP;+6~
zI?>=)SZzy(k`&NH@;XOkhNB=?qAniA;Py2<*1X)u`a%INP#-g_=u2kd1}&iE>}Hj&
zO0(q)QYK-8)b@=#%R|}WlIIcX6bR;T2-Dj4oWR+k!6FRy8|3kYD~rDyD;S@Bp?|nm
z_3JC4YpjQ0p%G*`7&}paZEs9{bg${B_^l01F1axWZ(Prob8nzbmW$LnpIwh%9EMpB
z{~h@#@Ig=Omrx}hrN@B0bB*x9JPkdX7HoR4tss?TgCW6?dPNFXfuo{Y{}yG6k#f56
zY1l3HusrjNCaPTapx`U3#PZKfAZmFf0%++nX^#vju5%xWWWcB4JZQ?=m>=tvUW2J{
z$rZ-XQ!|dJE9QAtuS1FuN#o9og01&YFu80O2YBI{vcEayCVcH&h9ce9F%**KDjyqw
zTKy3ulu7i*%YD%^co<?U-E6GGaSwO?E)0J}qDH5YD6v;2onJqd`B!4pW3s!yCZl|i
zNF|+?M7yUlt#1(`R@j-nbn{R->%^)T#-uGMz3y<aG&Iwrj%-JMV{q$j>g~QI_MzQ{
zicD*1uEyNA$x;JJrcBmB3P5&XN+0!}R-<x1J2-{r4c{e6LBK%n<^+MWa(RM6%O~73
zPH4E?@0E)I7QQ!_rq|^`F7#g^apU22%QJmtkvX;5Rw(^142{K7UG?gVHeO)A;NJ<r
zDD;N8Avc<$+GEk2$sl3Ob+_&<yDEe3rEkeC`Jxh}`R*DAxtz62u#QcN1w)#+?#D@f
zpYd(HEuZuhw>6sPc>F{i+1%@>n5mnc&Fy7BKijjLOZ-T=S0@tu49tLR|KKR=z;i9x
ztrb&6FD%4HUYe#iG4AqLwr7gW_+3Wbpl@R*VS1yI)85=yFWtfM`G9Zv_n-a4ls}v3
z=Qo}l^nZ5b{eF%H{De~3-Od;wuWxD$kTEtg*B7*PBhq@>BgD$UNW{j$r~?O3v~>c0
zP)S4&EahNq<3#lIwp0<AZ0u<3>|ki@2y8^&!PZd8*hvcj{GgNwpls~s1gs}&3oOj=
zvo!ESOn?wD4y^A;^t2sN5e}FHB=(uI{}pmX+?>Reo=3v){CMy;flqs+o~ikZz~|48
z{!Ss|6Gxs%{eRCe#{Yt0&%5jYg`WQvjy(&I@#*pEzww9h-zCWS+h6>D&mX2IFZAE(
z`6I($h+=y3OaFJ|#q@_4f8pnOL&4wW#q@h~-v0uB{_x^&^!$<GFa9w9@8OyGzrgeJ
zO5$Jm^G94j?EzFsM9&(@kq97VZsbU$1@{DZMc@~L&$s8vs0e%q@H6&vGCxaP5$>7M
zig3^4Q-sqY0`kBasD;@7u5JGG^{Xo(eJ6b@Thrft{!(u;#!mW1z#JmxKMeh?uAWN#
z0+%8K102IMA_0mVaL*+HifnMt{QjGQ``asuXMOue7r_CP1c*%ZtsH@$s{d~OZ*xfz
z_(>$gzc=>O%m1kRXO;3ltMNC2|Fa=JPs{&NAI}r#e^%pvJo0Do{g3*17Ur)Sg8Gie
zPdX4FFRLJ>DoU+vZf)#HD`;zF^laONjU5dg%<Y_P9f*Lo5(v<rw)Ck6(6*R6I64WL
z={pcHF#@FZe}x&?m;h?#MowmqT5yak^h8Y0n&N3P{`@_~pDq@9dLkA!dZOQDp6>K;
z&#6y2!0YG#-zk69{uz4Cg`+281MbIXWo3K5{|>VPhsegp{(Ld9Ke6;F_Ed_4nfYf)
zHg>qDQa|gnu(1A18&5qvwe_3&pJM=00_^XZ9$<N9U`tQ+p6-9f1B^2QdjgjF6=HuH
zDKPw0_vudmvpkTd=Q=-gp8NXOaXya`*xP^o``HpO@4qeatKR=1AIN*410!MsJVV0V
z#*~Qpc?trQoDH0wyrrip%<$Lje$M>`nV+-!S3STJfPOaul)H_9jidRWxUjj2i80Wj
z0(wwdK-ESMFfj+tbtZtdxs9`<&R@;{4fKBisUjk)Au0O{kczg}`ZoVS<kKMkFA({6
zo<2$8_w^)!f5jtEmj8mt-!l65JFpf|>OUp_)CLd}K+gX`<1cjng}2|hdM*J(Av+Kc
zPhsHo3nf1h^jD21-2SBdiQ3=wfpow<#h<YVr2g;sr}W=+{=y`%#8c>LF8s>*GrDIU
z0I7J&|6S{eqTk`CmjCeWzeUymFSul7{uf+6+rIx6mwz)P|F^hg;sDq?+X9bOF*h}H
zg5zNQ8M87rar!?&_HWkX4`elgr<({!{DQ0m(BhgK{yS!Wj^>%v|DzIRVE-2-`iJ#@
z3E?^P6Ab^g8u*p>v&Jux{Z^DuYoFiB@2|Fh<^C%BB>Mm62Q2Y-U_6C?0_1n<@2T(%
zx4&TY3^yQnpVZ&qzy_@QH<ABCi~Kh_>DeItT_-&;^e=<;%z0UTYv9W7zcg)vz-1tC
z6-diS&q~ArTz#-|FzY;>s{=d^h#3wb;Ar@?4g@9w7j^n};>J(l_!)ib;wkT`CLG|W
zm<4Q1t$@o%psV9#Y^@4h5wgPpWXv5MftvN%7Cu=yU_(G#30y)_0t5hp03m=dKm;HP
z5Cez<BmhzXX@Cqs79a<Z2PguR0LlOrfGR)(pbr4rRUkASEdd4q0|$LWOJk=eX#NgA
zgBD;2FtoL@wE_OOw$=w20gM60ZiZI+)&LWr#s&Vl7z0dz3t50EzzksKZf9m}126|z
z0;~YmKUFcn24D-YwJ`?R0qmX@z|TEAhkmwi2c*E(2w-RB><FA4#*R;?CjlG)jsQn<
zH-Mv^zM(O|3E<>v3vdQF+ZY);I2zhI7z11Yt^hZHJHW%(!S?mDIGzqcdeT-vTq*vg
z{h#B%1o`uTqrabT1mx-8ZIaNR1Ci)CSb2H>9DS6j?yjsf*TTmT=SY)8^>tF-I<La8
zOr^}(EOVbb;1%KsvIz_+0&E~DG8i#eAaNutGLb&AfIv)F?!4-ubMc}@#i8}FwPn@J
z%F3MXVf$)s`sM5r?4hTZW&7o<mhCCD-PqXR!^LHKM^AoVbiNyR)}>z)X^Fu)l!igV
z?W$UnIk(LX`;iE5H_AsE{Dt*TVHApHB!n{ftK43T0(wUkgA<SV0~89I?rj)Lh{_{e
zO#r)xvMRcHN-2fGO#_1|leP}G!5SQtQk;(~sUIXtLn9=z7((u1iDeQBNhRW^E_%sC
z3aCxK#ghe5jNAEK9|P`o^B;VW-cwriEDhoriLn-0Ez+#!&8IccdU=YPT*(^u(y446
z74s-Q?)j$7d)eP2k>X2pC;ZrHbJjW2<G3hw7dYvj6T||zdoAD%n~oF|CsX?D8&mmu
z#HWcI7MdtI7T-^6?}M;JbBd3?M^vbi_nX$Y0I&Du6tphDR1_<bnYNrZu|TO0(v-F?
zOp;$JKAcvxfUb}92v`)Meea?~UCcAhYyrj+U{RQr+g36&Eld^Wk)$bgEkCYsP%@YR
zAS+O}fMZGAP}nSvDv+9XqYA!>!y0jn^3>Nx@d4w@di;7twmIBJ?y1qvi)n@B1l#ex
zabhl&e&;kW4|bKOb}Loime4lp5`cyz_sw(mb|KJ|@BH=muJNx~tz56oKd)^i#%IPK
zUw7=>CQis<)7|BtgzP4N7_X*Yc!MdY!9=DX?j3G9lv>hV;-@qo0g(qY$unu{UE8_A
zgc^lkea+nXsS9u6n}JYl<pq&+A6%sdDcYOsy&R`p)?M|iY<xkTIv)uS3=094?Xe<P
z>vj@xET@XfcOqXYb>gwKl;3<#agdJ0Kbp!Ho%j%)dqSbTx80*7jA%173K4QlK?KSm
zUId5a_&&qR=|i8%k#SDo!_9<e*<FA!=%m5=8c&;^0MeG$*@!*@uT*;X5BFRTQBWuf
z0;RkU`8H7a%ryyWDyod#w=yzg`#a_o2Z|R`cA(aA7B!nuMjw(ca5MsC?LOjPdch69
zVJPo5Q0G&*g1$v>qVQ#*e|YKk;<cwC7wL!oO{;Y4$P<b;EjPEkUh9K-Qf~FwdWrBh
zxOmf_LQ)jSbkK`utr+Rw1V=Ayg01IMU?FbUR|(_0GclLh@OP*7XO~ud#eny@*%O}c
zPTnxS;>hm}VcK!Bv*dK6OM#bqLq{mtM2gAB_ejP~@bS(KGxW{SrQ92+k+<itCS*Ip
z7Y;q3ZKxlUaGKbN&IrEeMxFPlk!3wZN;{n7fG3@a-HEBzu#3<&sl1uXH%cgx5P#A0
zwoNOL!hccSf{KpneAt|>Ty#b{esqz-CAD4q$}i)H%0hv2;|;}wWZ>>+kpt&u+wFMK
z`@OtXs__b%mi|sU+>0J(Ek_|0wGzT>)$Qh3*vz)G>Qp{PJj`m)Ry1_6#KA?k00e8X
zR#|c+3cZnQ?E7B+EoW?KwDBwj3FzK?MN_Lek3PsWbU#jV02}yrZbsaXA+ND~m44)a
zfRndv$RV5JDFLQJ=o5{yV2>0Is#x~yftD+qS<S-o4$(PA93$ye(t!eP5$Aw08_Jf^
zPU#!%7%8Su?30_j*CPQq2ZV;+{L+gn!eP}%4bUvXk_2$3q7i0FO}d0zqB8Kb(%L<l
zh6?UM?Ja$i)7r~{Df;jEvcf3}A-+Y)*&Hc&B3_eT)<s-`U$02ccUEPBHA2R~)WT@K
zA_kL!c{Tn2we}WJbu8N!C>k7s1b27XxVyW%ySoR6;1b+jf`s7i?(QzZJwR~zJLg<E
za_@id|M7Y-7~Qqks#UV8$L^jr=SK0?q;FE2%4LHB6g0b7NIe3Ts~mG`$77CX-Rb-6
zIjQUrzOMTx7ko+^MG@Kwj4e77kO?a`Q`mWD3<agz_N6fV78yo5H%S-wFkm4M_e>0&
z<e;PQBhiR7xx`vBRiq?h3}0$HI)Gb+^#z48Hz4#ezYNe@*VU^MfDM;##As?JAbU5b
z0^b{P?YJ~a<|cS~NC8Gb?|*5VBz$rCl8|8?xt*D?Zah7o`VCN(f^T<nQKz<Rt{#q~
zWaCK}c4TLHf)#NB&qXY|j!lZZ@rrVxI%N)9R=4kf1lsHDYWT2AiDN;42#q=T(g7d3
z;(d5$+Eo(iyPp4*-YX{n_whn>eY)Ock=}z6qoj(E&5i!ib@syhPEhUC(J`Toy2uUV
zJ1KXkoZETIY=6b+Zv89tPUqD&viC&Ksmn?(8=A#u(7g}lDdZ|eNrgmaKW^7)8tx$9
z(8!y!=BUMCWK@)_hW59*?V0+R+D6Dqtf*<q1&W5WR5X{qwdY!kkM&xszg<<=`JH18
zFSw<_xdO6mzhy6=>xv~b0cxd8;Y_{7uoJUL^5yi{Z9)t+#t5i__0Zo`>F=HM=o&rv
zuTgwBIDJ;XU531RI37M>>64@m3EZ#>`I}GPmKVOfiGzvkKnwY6zJGzBG@nF(fj-)4
zRh@Sq#Ui-ZdICH%b+v+{@agRLEPtvJqhGofGZ~5jml<K~kiR&LZS$$UyHD{k@>DHm
z;idq87<O@ONAb7=Ah*BE-&ddLp@O;~fEaz(Xhw+9x}2_R+|uPBwel=yydH`^@QGmf
zNLwrvC)kAhUD(Z9^Ipd_2B%L!uAZ*<(z^O=oXxlz@6n0A&P}nCYV;A_yP7Wl+Qa-_
z&2(8iWKR(XN5H{=A^X0!{d4hUkd8V(j@s7>z)xnzh@cNQp2qbHxFcK2F5ce7^jH97
zt3hs*dqgP8Lp~qRY#h6yn;EzOKWskBP6y4lpz}sfX}d(`o?i9Q@W}fY>R`P>O1Ukg
zP5R-lthzU7uGPc7Us7#e!ZTlomhN$C5zFUrV29r2OxXe49JKLx<V0i8I?LYQV5lCD
zK+a%0-;6|igj%o$ALA9HsGNt|B<+1Of}>{F9*;uRMsumH9@9uR7Zi3ri(^F2!KjBe
zz+x{j?6NwmYN~fST_y=QH<wq2Zh<Smp+vA`ndz(N1U$OPMt$qd6?7H$)b#^XCH`n?
z8T*MxvmjR<BV86@b$r06U9|H<B`VdoK^`SN%BnnSeie1i4K<<U;SVm-g5i0t++#RC
zV!LQvCQY~Q-s9z(AdyYW4R+=ANzk_%0TkZ4j8NVJQTo9cUtsN>B^Q_1bPA>|s0DmE
z9~QV^=4SLOa0d96tk<`HZp(@4+h^34H{^;LV;rbrk1AlzE?M!Dq4TxuNG+2r3m9Ld
z7K|LuO%;xDpbea2!8SWu4mob~I?ivC?|II}a-H(}^l>|Gk+G2hl*<KVl*Ftr_L$9I
zmneVaPS4iB*x{<RXf$i8msM|%X2wE;ZB0=vBB{;PGdn#x3#Y}^k+cfrq=qFp)IjgR
zkl8eFlkL6=bDlNq0P+BkX4Y&t10WAHU$+_8j|1^IY6TV3LtT6&5|rQTtN61FC5Uyn
zHf|P#@yH#S)Jk7VUzK0-C`9;zZHAbMtBRNApjN6)9l+9(7YZG((P{>E=c<)4Gp(@v
z{A7wnQ71bTVP!Sa;wvg5EvT7C0+T%`E;2k#^~001hEg+MDZ_jUOI1{adXd8t#cm`H
zVOjgpD}*+g$=Xx2{VQ7m(_k`vnTmFjL~I?laNx)4?%o{KwNrP)FTJwf8iG4Q>qGEv
z3i@&8F$Q8eYO^_={Aj*XKA;Z)n*|h?uo4Ttu@B<LwIoF-B?F-r9KrUrKVJ}T<@$8a
zmSRLT;_IBvJ){Pk0oPbRoGyLc+`BQDmQ4ho)5rRjg2N79%2>mezq4V{$I*A_YhNd2
zi20?=5}*VzLB-&C#Mq%Kf}CeR;X2-vom)dqB5ruopLIG(swbvUY(^l3vGtsfxxW`u
z>nS>RO6j*lf5{dv&U?6p?kR94p3nPAas>f-H9D(JGgh)>6PGGIUQ`lnDev4TrL0^e
z*bbA@vQnOo-5)(3vyl*M$j7d%;$B=+)7$etXS8|vp&4~ShOZIR!^XwKN)Ey(8SnmG
zF+ZoH?ULQ>$p|R~D)gs}*tw!R!hM;@>zjGogXEnfXY(CRjjJ>7RPVQ!7<qbWZ{KB>
zkcFH{2ivN!w^1RC)^CBq1+DOnq4ckX4GZ7{O4v}*<U54)({L%nknXU@PVYG>uxwWf
zroXwK<PC^+YL>aA@)<UHU`vS;c-6z^CO(BOT43qc$rt#nMsHN|$olcGb&q@J)MZ_|
z;ahS~k6-JE^Wzu|mkOF=o+HXBOtHh#TubhDaUWIXk$z-!jB_kE+giTwmp^#(uAcSX
z{%QintMZ+?T`JLOQMEj!3YFj`Ml@uNwt}3QPB<kdRrreLlBcRdo!;GzvatTVtH24Z
zx%{UOSC=g=VL&FtcbOD}EY*2~mR<*E3*xOO@u#+xrb@^|CE2rRSf!7FnH?DyLjoC?
z-f07V2OGCN0H*-(`O?WVW3dEFWr2nef&TSW?yXIPQ7(@)+|)5KTv?@0d6bDdIgU!M
zLYtZrGdiVRm*zj0gR_HY1!G<cizR9Hw>do~QYw2287AC$I*7X2GzPT{jC?LUUC@_z
zA^<sxvu}pe6yc(835Ck%{c#nvF$33^I<#cnPW0K*#5fPKzWIbvm(QxW#DM-<#&a%T
zbn)#l-qcVmnTvP$!9qK%1_pt__w<TkY2XfDgYE#;dMF^=nSpfuE7Y^0@N3Uz23Yq~
z7xQdcWtAg~=$Hs0I*!>bj2K6$edwa<jid8EruLgxwgC}SXpUlE`M}z{PvP2wJJC~x
zTvt8|nbC6okh}6F{q{`$^&sK<>j0UCa$Y6nV{ia3iwv`S68xOcG~g2SF$&bIJM^9o
z&~YI5Sbw||J$8t{QpZifTR0Ww6zL)gpV~CJwBK?(!S5PkWR;?po=&c2GH_ro6qQkg
zOwqK8an0quivKkPW4HuB_jp~}W2^J-4&@`VeBP(CTLn$cU6#{!qo=^7V~8&@Go<!Y
znX2F9!lQ&j6-C;Qy|77m+NB9{uz&Pye01D`v-e?sX1Ke%ouoy-U}Rt~msZTs7uPnv
za3>pDphDMs%-!>No5xV7ylwg#jqKazcJuzpPTEc9GGNYAIw%7Qd$fEdova6P)5-I6
z`Q4FqWvNjNo^qD=b5qAt=58a*bcJ8zAQ(i>i9=2Gex}!)_yGN+zXv6kvwbdR%Oxlz
zZ=$*x;q|t~!y5}ha-zDLnpcQ$-*e-v;f+Q-B&g+(oW>vljB7P@A=P+AfA<tg%gk1p
zowcQX{awD`OpK@c4>@`6bF_thw9Yd-@#$61X6yCg!@NjxE=5(BP)tP{gt&WQ255|^
z^Icy9Ma}SWB{elm23Ml}*7K?qx3U5hCel(($A=Rc(o<Itn<ISMs}~UTZBDyaez5X{
zXqxFI1*BeCr$w&Z#{C!c{_CGa&4nPmvb64CpuQS5HXah@&s_rQ2VDX>>ZwnZF#LLl
z3S8b$&|L^yysAy{%1%t^@$nWu5k&f;#H9=If_*!_x(-5`b1XbQds?(QY;ACDcanDG
zJkajN`NF>1F(Ka&IF7j(K74UGa53}gBQ>6*r?jrtI_rZgkCJ^jsBO81lE}=t`>wwA
zkzscu1{H<p?mVOYh~8!5;y5i^JIFk7`b(c~^{vSu;=q}Zv0?65)}{oehF*R-b<3oK
z9CkJhF5<V|4Vl(l=)iU{zxSAqRqCy|h;5;v21+o@$Ays#M^5TZNzTFeL8H`A5L_Mv
z&3Q^kZ29*r-9G|bdX$XAr;P+4DcRMFX15Q1Toc=o+^SDe$gm}Gj)12P*_h@J`$Wlc
zm9$ljxg>*vuAe^RcPcP2%o4W~%<N;DoPWTks1Sxs<}s?CqI~>uko;(^Ho%LQLx9ZT
z;TKfoVDHagbGKOf>?>&eZe<I3(DSL$;6gJ`-Jk`t;|IqHM!&J*enXy=vJAS9aKS^g
z_}hCg`rDRc`bP+#xw%c=rP(Vguf8t4m1n_<7p;Cwk+m;wv%E;}O-OTXLQ7M&JNlo{
zT)vdbStff)#g{Rm@Q_X8+Y)$&?<!6<?Cb`{!k&4F@L9~6eKI6^RSF)?P89y6I<y~}
zZmY`MUsN(+!<_KqL-U1USN%{ID%a?yl6Xg3>U?sdyq>jpkMzLzYSlV3c94S${U%6k
z!?{MO7WicRbf!Ad0hA{Q?U!6M%4(gGLyIT=X&!vQd*M2Prt)U@72Y*A=|PU`n}~L#
z+(!>>vr6Fd3D#f2Iota=E4MoHygtS%ZaD`SsP^sCgdYCL6DfU$z?vlMYC>k@WfK81
zIU^CxwSrfEWkGz5ts(4ffN&wL(M!?Nnu?Gt6%?Bl!T0go!Q8U*Og16R8ovCuPq;vV
zymK4*$tle{)~oKgJ;aUo9zV86h7jG{+h|FsjUMt1p5c3xr-&D8oUKFIZpB~e{4ERa
zTt{`Wf+W?QJA^NZ!6eUOZ3#Hu>Ch3}v?MLH2M|G>a_xOQs)k%B?0PQk$$^2a(R5kV
z`gnHJdl!3`w>lPE&QH3}Vi)}u@wuUI17BS_wjh_QT<~iJQCeHPBiGrNjWcL1tW+F~
zPU)}E3txz^h`VUzjDllNPnNezN<JH}7Y3f6*A@mE5QDP|KKc*31|<40TIor>X`$E<
zvexg+pUzJ-49uE$cyT~%Kx^D6ylySMY;ha5Usp0RJt{@f)B|?!&sRjDJHx6t%wxv*
znN_ln36AJ3O-i3^(NcQc*i^M2BeP2Kn_A`+4ef<~%0#YFjZW>8nMUkQdp1uGdqobh
zSd_YCmRUBa5aZ02+DOSsO-f8qPtT9^M=K`lID2#`lG=_jB;1*~m6n@?#ZfUQ7@w|e
z3k@6OwO7fTj$n`#okVSmj=h?g)_tXFuc&UxFHoHETCqB_q+xiU78u<;!eQG2Kr&@^
zM6f(Nla(E`j{3kAs^Ph!pueQAM{T99eT`Q$LBeKBW3+;ev)Y=-3MEZSM0OmX%5}FC
zec&F0=6+?zx7XWBVqc?iT?rI!dq^f+%T%}I>y5fck<y}}&q%Wdb80df*?96FIsxa4
zTY{sF(SlXfcmyeY{}V(!z@^kcrcfdun(Gxu|B@w@Lv_e83*Wq!MCkj`4fV@yAPY0I
zvcE4qr=@j;rB&InP}JqYce#oc6Q=a2c%dvs=|C|dX)k&C^6R;x3JSo**-Kffg`-I!
zSChrCA8E9Xt^+8jZ(c$SnV1E+*!`KZ)_qC8$+)}^Xs38a5w@$%cIsO||CU0xlD>wE
zbs6I+%Ekbg^L0<?q4mC7pXM9M517#Yo`J2~;D8w>6M9s*-mzpO6`qQb^e@p7aQXz4
z50fN8d-4wym)__sB#l+%ujyOy;Zbz2W1aCNB>T8#MjI%f=c^DgH$c#?@)lo|irzCT
zNPN?V7WVM5^OAeLI6MOCv2E@<e!4fky)7|}{P=FVF8aRyN9HA$Oz7f+0oHQgxxlJ0
z2^%@CgnpPB6UP<chZ2A46)(&@(fb?NaR0CO3l=PqU^muRN-o38oR(pn`EBsmWV!i<
zf-gna2Y9VNbgIpjaMR>KI-vG{H1o>2g=?CM_Z8WhO*f%kw<#ULN;el3Hr3Cl>IGq{
zt9pGlNh}(-H!Imk2HkJtoh83_Y!&PZie${193~1;g^p)Gg0Gc<_npt;(0h8`7|u9U
z?)3ZigmxW+I~o=KL0r^yV0eMqHZaC|z2YJtbgsxIs&t}iL;)LC6<>nG%fr?NGkhpA
zjm2(xNdhjxf0EAeJ`mjOd&>46a0L(HnwU0^+fRd9S2O4}y9T_0@t;DP@kA1Wn)QCQ
z?!tg3*bbx8peA%^-xAF(d;?EG62fQSX6D1H3eh-xe-ktXw~5*o_;%~#TWQERc%i-A
z|6+kt%g^HCrzQ3ChlJx&cwxFqUti&fF_Lb~3%Xi&FoEIzY?fbN8)A4Jb+w6VsW^!C
z_U1du`@Q;ZBcUKjZ~E*TxF;(2qDrK`?~CuYen39~?$1I^GMEi#di{uWecXD@H9mjV
zE0IKT?_J~f0d<aH=D^4?vu7jdll~!Md!;C<W-9!Rw4C{l-YfW9vMx14eKL@xAn^=2
zntJIxAM+-9XU%VHz12K&edbqzN9mYrwlAi1*Bul--Kr$5QctvV3z;NteMveXzTEXm
zUARPc>H$8iom-kh4#IJ-&z$Ob6O_co%<tE>xj##21AakK{~NUDzu?Bd!98@GK-31f
zHI5Uwm4=Oj<3Hd%96;da4|vb7%YWlN0N~Ys!FxFWmw1o(U$CBENRJwW`u~5N=NB&Z
ze+=_D{u|@@4H*3m4f;1k`aAGrYHRsB=Hv|gfegFffgl@0XN!NsK^9J?Kv?L%f<k|X
zg?`&*_6Jz#*Y*E*Scr{<{g1Gar=^DS;>v9d(MS71YD~#Fay4t)`k48$d9FZVQPF)t
zP{n;uL?RN>024AI($B#lFxNamg!xJb)mkSu+ND`B*^l@qr5BnRwTJHQ+;yAt7haop
zi|*Y>@$Cz>x4zj=%@<G0jEpIgm_gmC`xq%`N!4o<WJeY?*Vjr`_(AFX;a(YOvGH&1
zhGRjZKZ*?vuu)~4OSAdkpwz7<X+8GoQh8CG4H*|M;Og2gE>Q2gYfK5wWhBRCV<W@I
zb*jwfkL%%xoiUz0O#{SL#B^k?0`Cs_YYI@5l@jvfnUR2)keMlMDu;W3yo!w4&h*XO
zU2A9l%Uk~-<CycutC+;BQhdwoBdk{D+FP>&+;xhun-SgyeUE2>xo(S#)Flr6&fq@(
z!Y+9>I!{0AK`3eAdIEgS4q|W9zOs31KCRaC?~o_#21`PxgbmQw0~`H_hLHe*Q{FL*
z>)wsQ=V}leD)cZ&L+&c1Y6BaJ23)vqo~jQTl>6ZoeQt*3RqIPuHb@N^Pw?826}@d$
zFH2shAPt}yq2q%RHcSm5)_uhW%GKi<C~SDEf#Y2pJq?D;)n`kzV;`J*&5Uhq5cgvM
zjEDpMZqsDFI#raXpu$5<JeIwMMEg%NK&EaAL<&1C;DoCKHg@phJz&>lhQo8)WPX=h
z*}J$-E{mPj;rPY!<V)I@Ryp~!*Y&9E#tlDdHs|TF#I(-I6~@u6mieD8IJ0y;6>Dcl
zr=OQ$YFn4FZ?`hRoo}2&4%V`-NAR58-S3?Fw_nq1Gn_NHlgf8HwtJc*_qlR?2Q*k5
zx^jJw@t}-pyCx84M@Nk=Nbp<}5`qf8f1mL=<h9f*NvH8AawBFLoUxfs!TI`3#E}MR
z>+!}UT?Rl1YbMmyc%MrIIVBP$ZGeS?QUw!V63!Y#4Tc!ull|i-<qf8(+IT=U8;?eg
zIixP>DPf5Gg2oD{XA8X}1A!>=@noSVk!T?_ej_r`yEIYf^x)>c$V<4@SW?)#vwdD7
zv=#xuOj?D$4=7?jr3>&w#Y&3M1eP$-jWQ@YA`_U}FfFBvi0VUL2&$F*0l}@S*CPP;
z+maF5MLUwgc9?Ota2I1_pW02-*sk^C^O$dJgOZH!?>_m!j7vtBCQnj}eVsRToiALi
z{K?wz4b?es^jO*g2dVx$BgD&)FHA_HF7eFSL;u*o(2H|`-|Y|MG??Z%$d8~{#Pqh`
zd-*UZN$Xhq$&ywC=?2f#hvqinwU{w%5V=}pgl8n<*cGkQF~|A4uX0iq<VCCEo{mk!
zLihRg!F2OZ80-lNoYXo5Y9Hd!ZV&fN4{d`(&z9YITD~!4<S@m%LwSq7`W&w4;=i=*
z2p;G7z;kVm0is|{4ti<T*uITTB<%Zp6V61!6D4&Q_ZpBaeQw&EboQH*@+Xg@1aq49
z#)Q?Z4C!d@8Le2^uBNaA-|_<07Z-`$JnG8<aUt5?IQSeK$q-{gaPhsKY)R=fhw}oT
zteeymhxL2JNswad&$0D!D*;KHlCqvg%OcZs98w+GCYYU8t38VS?oxhXj3&&9n`g&T
zdyf!(jyL4Ixd-z>spsG|o_rN;un~}D!$gAp*g+IR0rESwcsq)1*s`Q`r#$P!*P{vx
zrb#+zS=i-<>neG5xJj55yW>{70sBfST&C0y&Ias=l9$CVE1xn_TKymxy5)yseI_qn
zQ2;GdtNtSOV9((_DwpOD?h-|-Dx^1gc2(M=G87%1aTx4lA5S+s5eeaQsp3xfIdK!c
zC0fuw4;H!rvgTW)#;uIzc!N9(WH{t}Mi8wfsCmVp++N-Trj1xmB3T*ev+ObPcS*Q9
z?CrA6iKv2WoO(9%8Oxv~jv<L=Yus|b*nC!`j5{#j8<0j7B$l8Xt){3m*#v2n;MlwV
zxT$L$y*Zj8DA+<#dDA<CKftfYT#9k2>;{YfD5t@tRY;`#L)0r8{U-i>*N48673z9B
zQtLcQ)D&Oh<ZtQ;7LYQ7^>qFHvi`x>hixTzI}xlVym}BA)dLw2_q<7>`Kw1`!CqfP
z+G;<eDXjOw-$$L#A|MX*Di#|esw`ddwzN6@G(|B(wxyV0NlGl+HOrPYQPc$0G%vTY
znsn>KlO0~c8hgXZn|Uzn5A$(8a!Q_+wFEWsvDD)rID&D_RXQRoAnHw8l)#&7(ORrs
z+#29Mck!|B)jk!vXOj*ohgA`k%7t*s8vATH!eRpAR4czFx7lF4`RR(G-+f=j%wNRL
zLr7}s+fw#oS{qN@NCeJkgzJr<ouHY4;vyGvfsGBN%h*TnmzgYPtTU+Ad+63UC8{#;
z=(X2{fxJk%ALZ6rQ^<FUZ^y=Uf|**E@to-JZ~bD$I?vT3D!Hpt`LW@_L8aVNk7Vyd
zq4Zc@cs$bC9Ui^D+d6<|BH#4Yk*XKY6A)Ve0K@DZ=}F>jj<+F%@_f`WPCculiV6{-
z)Cx|{4MW0i)V<vIt3EMB%Y^8FaxgR3r-12&Sy!#yGXijeH;jmvSlUK$v*gRDfIRU^
z?3h}$N4Q(~DCyKF6f1BkD;27q%<mo?;&yb9?OYvYx5T++_hlv}r{q93P3I4scrQKC
zY>OO{jm&r7TcMp}n<`<MFH!S|d||Ydi@U_A6O+)PsTmSv3@?O`Pz>*{nfoeYi9#4l
z;gY%4OL52xaFo)eUkHgG60pHXY*}2_o?aTl!8EWXjF>ma)!nb%TZ0LUl67Jv{IMdr
zYkqn!mer)=lT+9RvkqRqSDIZ{zznw2+L`KBuF}vkG>mBkRlnSwJ99`O>W#diW|9C7
z`ni1X)74$vr&`Qp>e0v%K`IQDwCF6anUFvck=PYV0xt|XVISNqrOGLcDSp^?DRqsn
z3qdFbbt^5~HXb>%-mQI0`4n0GFW*yFZve#k!ivQpLWD|YLrUreE)!m<RJdRu8qK)_
zHaw<<NH7@4>z~j|NxBH>Wf_pa3FT$p8G0I~wZJDj3f3>rY06ZtkPutVlY7d(&kTK?
zs3uJ(CF=r_L6;^Ow}G9QlrW2&DUI^Ch6tI7;2R2h+fvDz!oj^kc5!Um!|<V3%;Z{x
zliz;YoLc&V=-rJTQACYQ$oye1$Qx6_A6d1wgua}n=Nw^ZZ&kRB>5S9Wbv`EDC|b~X
zw_KW)+<+8k)#_1>o&4z<@x8@Ez}j<I$yZ!Q+^{dJUDk}x#|C~shg7pOSi2OGX89|@
zRkXQ29!gt~jdM#<Yc{axW@>##7+Ok<0rdsswKFY&Q`{w>k{je#F<Z81%3ALw5i1i7
zfoP^l`U(!AR($U&2)-56JYpwv`P2&8N0OvjwkjC&5hXp=v_@XFF4=7*obFwzrgKg(
zRCvhoo6fz(=s~N%JB%>W5tC@xA^*7}B>LrWfr=)Zd1=xRFT|UGjYfO5R6Cp|w_TZ}
zSz2!s<E{nH%P<6a2+j}TK^AQAJ3OCePou{h-0&7d7Q({NUDHs)0#wqIvP+btoXI#L
z(PK*3Hp}SI>!_(MM5{HWwd!2XV#1}u(G`d+d7r`BM+G@nQqic?`!F0u9jc=xlCi!H
zpjdmdzQK5(nAhcMlq!QlV(e1GexFC>S{IXTpSX8I+kfr~9v$Q}Eq96AnR`}%VQ=<N
z5>K@F*#$AwG4ovT`~#NQk>wR<$P<C0Thw8H;XoP@Hv(Z|8?xyp`xx7@ECsI2(>9#7
zwObAaAbe*F4_|JXYVf3YoYX7%^Kx!UiS77VpQ<GRGlW~?=zjYXvSpaA#Cdn)A?!^$
zeY_O0%iY(7!G6@9OdcuSA{@g0W%KJpzVe|-nmNiywCAD{EaWN?O+AhCV7H`kj@*J-
zR4Q_8SQ=AuqQ1BgW660d_^aZr2n#|m&orpu@cbK_fK>8)@AM4k=;nS;|FQSbGvBpm
zq3n>dLL(=yE%RQdR?O(jXPvVYI;E@Av3|y;&IvU|;2mQnY=aLa>FEpaG+w)R9My~z
zjNFrH7VlCUB5bj#tXea8WNQ(iB%-1YBO%H!Be2DVy_i6nWS^E>ob9kKtYm1>CosSA
zzR3GCy(=wS9IM{U^n~qKTxmkwQ{+O2Mc&#(PdDXCcTGk)b|>wLmXndPltGUyn|~uM
zC4->F=kKQ;G^BD3WyR+KT^pYeJ##ZMuP)T_aSt3g*ZO(~??T=#2*=v^Nze!WpxQao
zIVG}aG@>aiv={prJQ<;#7zkUaeXx5hTXT~Y7s8J@{Z3FNGIs;RgrB$12Efkg#!ZhZ
zN?AgQMnRjgO|i!Z{^XiPGfyT4#p;O*KY0acB3MnU3jVNod00t<O6{!Ldz$xfbRxAE
zm7m7ocw?0Do_$0dk#(4Qghszr1qcx(jRtdCUYQ7dyL-c)2&VsX!Oz3)&EYS9S2GrO
zA(LFrtVw{-(h4&GmUR>lds(TfmiLN>@*)ydO9cvN`(X<_w=MUAk+b8?Z+ykOM^epY
zgSu2p=PjfDDttN(=OKl$839EX{#dvv0I!9W*puKA6nT6Y!}%kc?Xfj!TLi{hBKwy{
zGFQA(M2PM!2RoIu?I9JUsyLCh))T@XcTg!rZh@iry-3UZgLv!e-Kq*HM!MXBJGygk
zM@BAFu<ejLGWSnQ@7S(HuPt>Ev^N^AGLhcm7h?zga@S=UGv!xztNcj$uUp6N9-Vv^
znFI!!-~;m3z6CoIRg8kB!?qQ*)_`BnemY7^tFAU|2Hk>&E|0K8z>awPAVBW1esk4F
zRpY+pGVUqxY8Z&#&|M%K<u}vfJ-#ezKi%WKyfLF}oJ67igL;PcN@@jERdwF&6Fcq=
ztPFzm_b;D5^jWaQ;h=ViHah%dYaZ+6?A5UC6KfxX$NzkZo+<c!$9ZKz^{$(FJxaaO
zFnhLXM&)B?E{pyXMH2N@BlWAmu9=obmdYd6bndq~7JrJZ>zaTT8e3iUZj7zqCW`up
zrLC3XJr)&e%bcBVI~Hu5?KbPsP2FR>s4(1WwUptE+@Q!yFW#sNRu(||c~_fww5$wu
z_D<Eu#`nttUnc=(X&jcOR3R(^-<Hm+XUd6=)p+>nNVvtRX{dM2%&AQ4{LRu#DV*Hi
z754{OFl{N`Ga%u!XJT&utW#?Uz;`%vc)K;~qu;(iVUiMrbf|M@OK*udwZc1m=hLt-
za7(UD!2zDGTED}FLN#zu!;Kc3WDfeE+)BDXweUTxe&CB|Rm0o@`xtxI!Re@MmT(0^
zPa$kJ?*i_-n79tAYVlj~jpt8yp*&-pgH7zPNK;u!=EhGcWl`ys5|~nL;XIAgPZk5+
zBs?B*3P;98N07drYbq3y7}l<J+JsOtkjT$JAkvjoA^Bii1j5;NKIe6PExw}(M-`?^
z^0^_^BKSTmP87UCqQ75|kI_G~(3He?J7c{#Sjms?>i!gu&%Vp%T`8zo)+{b0fp$DC
z#h)B@ZW=j}PY1r%0&`76Jhyti*BU9&c#%80MD1o}W+vq%tEMb1E9>lRCd<UD?oEF_
z;-pZ*Ke7Ed&rJC`zkVh>k|Oqz?VOFjT!H+<L;|>B^^{0UeTukv#?ApA<aW>f?o!`c
z0pWWa?3+*Y8}6~OxaG0bNtiW)T+QtFLoxGDlf78oZ8B|;{WVq&><q07N_H9M?~*>b
zLE=fy&FW8aBgOOcJe+BF;s7;PIxlyo1s$?^{PLexhEW4k<@BtDJheWt^D@aq5zmdH
z!dnz(34YFMuhuZibCgV*K)x|hr28reUxTRLL-+MZc@v7Q;rw>}XGL8Y7(7qAHt5B#
zqbZf{@gu|h{XU<9ew<OxazIJhc*NY6WV^wy>l})9K^_`ZOI6NbILbP;qm&Fidlw~A
zyze%_!T%;-N5C7I+zTS-Op*zyi%nx!VoCCzh}?^HUx*O&;Q^&OI6KbVp#(uB@4ShH
zb5p!e)=6!%jBcI_YD`Iz(vK%&3Igqe=g?4iKGUmlq9!lYh)q+9o?3D9R^}|MtDxsJ
z6H<DnG<5Ake$jk;g^bK(v1RapKJA9Sgq*_Zk_(ivO=p67EbQg=Csn7<U{`3RGo*DU
znZtskTa!QT;H><k;c)kgY`MT0tt+%vc$OjiELSX%z6PZKAc{c<J(?@Jr7*i@tjIQY
z;}Xn79;j73+<SIKY&c@$k;pJ#xQVMu0O3+jo7T|hR#=7^>Q2|dE|m;k5vRX)y^<}C
zzJ%O?W##q32}=%WC{y-t(@1Iwh&6()Z&Y%WkYtdmMz(B$2pW6m)yx?0uN<Sl>_ka<
z_L-mI&Pb<#9~!(g9^q*SDp&}EFf0L*L%&Yr)nj@_Asu5xoGf@no%pt3_-Yg1uW)-4
zC(|<b!~NGXsdq|(F-)r2fo6G~j_;v56jVN>&GoN6TNUA@3hLS}bDCr0g6-rN({>sw
zKZ#9%&4q6i6;qYL(gdV6?C+78M;?(`fjX+0j-Kfuz6^3_rfCV<23ilYSKHh(TQI8$
zlRvNV8PUJAjcLkYy(q$^McET3z#J%VpBCQS1n)lH>@S40Brnv3kn#!9zkTQSDwv78
z!<iE(rfFARIXQ1Q&_BexO~C_K@A`0MV<WF2W2S~XSwYz$Hf76VRZqs#sF5WIS9dK#
zHWC<|Xz^y@i}W+~EcsFW@^PO(h`*rYIU3acj_EDo%4E}u-!m!3le~eQmW_m&K2L1Q
znAY(f%OS`V=nNJEA6ZC@xIOO2#coXBf#6;i92+D_saU?9YBo0*fdtU>_4b?4{+B!i
zO%j-7*oop3D&5jMX1ig0fBkNpli7iC*+s3Eb3LaKmu{T<0Z?9T%*M%$V2#nu)T*##
z>+7?Tj`O@cIFLm3#;gXn0N*K+qmi%CCpX`UMq6f_-$I5WP8%L0A|9QJL{)}U5;4*R
zsFvC0n7my%3?`Ao^+O04OmhfD@bh5~lFtk&OwCBi7fl))=G7YO3Kys4<#a!l>NA$8
zrH;HB>9nTYUxynUGMga*yUf3?w8?ujf0tDWk_o?cdYD4c9)l}a4r7zB@7Qr`6=l1k
z);QRP&<2Gr#a4_jv7Uq3e*JlNLk>bw>D9)zLk(t*P&SQRRskCJlYkg3b@1&m^+#99
zI8oJ!1Q%*A0R~IbDA9SydQJqGwZ}dw%MXO*qqeLF#Li7|er=>1@p_5|TbXt>I8f2;
zWXViZ0t*o|H6lWiQtudesYqy)%P4nQ-bXtij>f6SC6J)(4MjkbEw|NZ2ouXTp%9mG
zeId@H`66ePU*Q;|k(gzdk~wkUPNTI8gjl-6WhRyJhmmOBO9^79*(S}YC1Rf@we7nF
zb(_#Kf532G<n)2kQsr0En!Mj8LXC+UH(D%6-DK!ZeRLJcRI@42eO=NLS~X*9v>t{b
z5Nw}Cj9p}Y1;8T3Flm>%o~|AeecPZ(d9*wvmoG~5Z>VGW(rcfC%n+bg@$*X-Sl)6G
z?Na4qC)}>uxGc&Fv;invg)Vmw)f|B`DViu4y%w*(bxY(&gbxb=9mxr~Fe;KK#%HB!
zUw)Q0sLmlmu-h$rQPPoy<e*VSs@V~{Z!_m^EK7ZJ_^>X5EPq7)Xzzc}tV;1bFM|Bm
z9{xH4`g}uF3*KBiYdE%Kik9#ibvTt6SqIp?u!fNhltHg_B!_>eV}2uqP>YdV-JZM8
z6%F8(1&iXA155pR?04Hai|9DPSR&MCn1iMMj@woD6!ZIZ*l|It4N{Dg-)4VHH23Pl
zH9N=rLv}$5jC1DVPA{T=kcoo$oPxQot+;kFuU6iaMIuj<7C4JPtwM6@3J&+=9S0IJ
zdsH(U<FRkRf`00h#KkSR_;tQ9;)58GQGNhLJ;_y~z5D%gl=K!YX36Psn@a~&Jct~{
z_O$9H-tGjAlyPi!p}0RK+J_E<^_EM&?(dA}q?tES{CWAt%tslK1xJP>xJx#@jUaiN
z%rZ(0;b3?xwGpD_`4tlqu^;A(@*((mPfFT@cPdaTv$}=LZu!7ppQ9v;x*C^Jgl~w_
zcB(=mVI7*Vyq@pd?ub0be0~lWi24R-4(5BpIOap-iPuNW-VtQkx`RBdL+1R<i2bV5
z84~N3CrnGlx>$NrXZZFILGyepIj6fq(7ks_^~6-7y11`DdHMsgbtu;7&Q^XHupoMU
z*gQ!IVNxuSiO2of^<X<8<kj%C^z~7C3mtP9N6K>i8?pxRX`OkCPg%#)+M0d)L?tvL
z26^9QywaiKO>V{KS@$=SRaXID0A@9V7+Oa5fP6l~*+i-b7nF`u&|@OLj~w5|)zJDG
zXA<=FQe>&{Hb)DqZ&*E&Tdr*IYGv$J@gm2Hb5JxIhf0@z=3CKwcV&zmMncz6m^&r?
zTEq8xFgIH5r3d129g2wwm1Fr&#IWM<q>Cj-`Q^<cM)jo?>O`E~K_WLppjE*-ZVs#a
znLNg_C=7Y@<t(V5sf;YW<`f2czqsQ}X7A<jX!;=YK)6E+6Pfow`B+US9*3(N%O;M#
zFZj+$`x-9!5M^sjqT?%3MFMT8-G+=frBl`Lqaa`_`_dU}@i5PPzqV5t-{j&MTNZIr
zQN;5H&NkB_7@(;oKqRgt<>loltL{;b%eU*A<PF1NPg6OeccAi{1>Kp89EaCq9~hMD
z1z*tB7uSzK3F_(ik-%4Nw-ZP@4DxMClV{Eoazx`nbh+IkOB=C-lTV@9cZMS=zDVoq
z_}!op2Ay1s(@1s+^1Sq&p_n<Rnm^NcAI7D!S7XDfiMTx%*O2fp0yr{n4<r5fB5=fJ
z{r2}dMmsPxFu=WsCwqGMR<T`<mdB4@M|*i1#lH|#FX}{Kfnf|uQ#@5};zMt`5}qxc
zGj6~;a(+;F*E{kfn@ax6?co>Mk4ikYTp=$QxQF1Ee@74hN)!BVRI&fY;QJjtWM}=I
zF2)Wdbh2?U{}VoBX8Jc@jDz`4_#qqnAMwNg&KCo){wMrU;~%s$78YQHf04(25y!-U
zq_JOQF=ZfdX!I}o*DvDNpD13x2wuOaT@JrvcK;x1xiYx@iH`M)mHbCK)*pl%{`Yh&
zW)@baKjLoczvx&Ud_?4&a&_@IvSsX0`tw@m+T{xyYKoZ(SZKl2)J#Z{0$`vhOq0tn
z!4Sls1;9o~3&0SeIRq^$=1zjAZuQFfLRVLxRvxW@yI)*4xvT9f+&4Szvs@QetPe7?
zHZNZ~F1T52q(H<9rp?66p_Tha-S_c6n2<iOCx3Rf+-(E7ioKDgbe!RAjuX5xH!ygI
zH<r4ShH;1(SWs*5fTM6l&h|-68>3;fp2N)kv{gEVel<QzIWZ$HIUD170|<ZxqDBV3
z9i(ji+M}3G>49ATxe&U>IhZQH?GoP5sDs19zTvWj^8T*#ZL#8w_w>!3C&chtWLeuu
z$hk56+HF@lhMb%%^ovMgk@+bqG&?QQKovACinhO~AzZc361N5mdQf}h*`QJN_!2rT
z+G<2aUjq;|!&{Q0h1U)`>+Y#;)*uw?eU+F;$Ou$5V6bqkBLGtZ3pp~p;Z|mo!!jiW
z*fGzh%4^_gB3-t7OsZ_mb;{4meB@l`e6eR1GoMK1^xFs1K#@pi@uAX-=fs3)9i-iy
zFm#WDaiFF!YgHlxZxTD8bWdJTb3qYijO(^*c#=9P+c+NKjBB%Y=kW3aeWRgdTD~p6
zincc4!LpuGDusd+u%Fh3=iv6C^6JJkzU{snIhk0;^<?9ig1kI-QjJr}DgE$Xd@2;a
zK^NItsbo{CG`>EI|H#KTQXaDKDvrjxZUCxk8x&9O^G6OCLd~SqPC_d<qkxC|bnB;_
z7~f?co-u;<=@*c-!8dHyy5!14hY7Z#bA(|nZ;mM7_oes@kV_B2gZYo+u}}7><{@4g
zlVCg!PNvhISA%jZl$k;~@Z`!Ix|f8)J#!;-k6^i=)ERxgeMu_GFb;{~`HDO!1$*y>
zF?C*dGHMxe-p`cHUx>r-L-2@fvc5C#J;K-?3%3uCd|Av8>t<%eR1RQV%Mqe`SkT0N
z7(jhwy~2}gub((p1;Ik1oJEccY4Ws&WBYKSMi5VfO4|gFUt!iSo#m>U{j~AaCn*|T
zjlbo9tOLp)XiXk-^C<*x?2$3T;&s@nF&U(b2CypQ4ToAWWG=v-)X;p3xdhh`xj=r(
ziS4L>33quKc-(S}$kA#VWzojD#&3|%Bo9fqn}Ck}@P6jV;dYmH!qq1Ueb?WpKqDn`
z!{fsQUBt}MU1_Puh=v38{m;4kdICG7ZV(Vh+;8Gz`crItT>ZhV#GF9XF2;@#;vHJW
z&g;#9?v}AXSPb#w?O7Z$POv@rvqD~Z-pu(=Z$XH7o-HyAFH490Q)!2SF9$syPxS-J
z_*)=FVy!DwuGnoL_Ku5n4QP)w*G>`6G05RCl8QB?p4fLxXz4Z?AF!{@$mB=LXz1#>
zK=ss1>Epo(SLJL34zL193n$+4qS=NsGABJvKLhL!V^0FYMrhP2UU@5_vwSO)M@G-h
zM3c~(1>h(f@!T`-!6KS<_qn9;IKXj}oq$x3yxb`oW}2U1u>l_ms3T58)iY=h<;^xI
z6H`3PN4!9geAn`piooARrdL_`FX#VEYgUPewU3L{QPV#}2&`+xIG;4s=H4cj1NF+;
zHcS2}C9T^9X%(esMGMjLXq8}o9u!A&2i%l4fP_lrQ=^;<V}I?*O<!N=tJCeyynNmE
z*<dIQyLm$czD~fHrcT+O%XyFOXzlZTFrH>d@CN3NOeO_h*rl*gcbrd8_J!%QfQQsP
zlAm=^x33fG0g2fxTseXQM&+1J{$d8L7BBz9EU%+xx=w{0l1dlYm>Q~YY%?Tl8Y_B%
z<fyXwF@!+0w0F$_oUQC+<@JXc@K#eMtS!r%7%3W%1*IK;_mD@|jqnH@|H&s-J#5kO
zYfk8))ZUiwz&Gv@vXCp8!WO(3S!Q|x)$>6J^&~|+>{g$v^?K!Qo>1Q~+|b!+dP<%A
z&9<tzY-1EHc6w&V7z^Y3(a}PWJeZcY%swSiWzM1QEih%EIt_b&GhfnVQ~BX_NI&>9
zZnlluUg3h{*~AD@TL8bP#O6(|IWV6ot9nfJoxmC1j<rWPa!-_Cq-t}huw#R{W?w+l
z*JfB-QCAqs>g4zG+kR;_idQN=bukp?uG%0aj7#Hg2veZZf?tOvMBfJJ;HTjPkh8Uv
z=NzA|K45}tdK2|Txchr&wreYp*dCRazYOM3u|?8e#h<jXI6V@siz^013ROk+Xn(4+
zDzYwzYX|Rfj8nbfdAKoeI^=)A14qygob@=V7BkG&A&N_)vNm~^D$<3UBjkgJw1Gi3
zaddU)c#YrD>z?c?27Q-XYaz?@9pAKg+ZFi{$!mDeRWKWh@%$Y3){_bAokLA+ZH)>x
z!j|PvQ$%})wK*tu6tWL$85KI}JqU|wGG#$4^l=OU#BBIlF+EdH+VT{>o+maq-q!%4
zhpDfS%^a-?E;`F|KKZvtm;^o$7Y-}qu122`7y9!oSA`vJA8;K*R9M*QI*)qlzvWEm
zQnZ9J)ZM1)L8;1jEX$KLZ%!L_?cz>^E!%-T2pFp!U5$CwP6(~*uv{di8Jg^^V<2`H
zIe@RhZ??J`7z{2fiJ-k7AqYmED86RwGdLKq6bTu}#w8~qIM5N^f6dByCw@w#q>Ms}
zwg(rX`;&yu?*flxB07iPCobQcNoigZg->f#xTHfkltIrapCsWL3B=o8>>}%eD_aML
zJYBoRx&>5Ezep8(>|H^~6xEoQ6?EVH6{_sU%0LIn*|r4?tXSk!nW=hyPOPpS*4tX8
z%G{JbsrfvVDu3X|k~jv^1i~!TcI}EJFr5lleD|Ed*_Cay{8yZdb!)~9SU$BRGw9iE
zr3Ka6UI<bFJHYTALEbyjRqb85ViR*Vtw`eO_^I<?9QMijSC0gR{<KKJ?9R6A{Dk(D
zkLQS2(_S8tvqs<OAuLtYr)nCfi<6E#5!U^%{FTM+e`KV$T4jv+R@2;Kx9t|Phh;IQ
z?Ga1`G3|fOQ$m>Wk1uQQGpfN1Fx@U^Z>CIRVVZ(sGRv7RFOe0S)%WR=74(~;*1z5d
zWv6LK+!-fV(A=TB79?*D7`+udD(4eJK&2-X#K_dO>eTDM#(3g+2=!Vi6|ZtgMDz<{
znMjrhIEC)ID{|ATXi(+U4lh<}>btw*^B6k$z~&u+o;z>BtJShS(h<J;ombyyK%BTK
ze)jd^ZU74Oyqp>x4t5qoh?teP=ny<ye=uTY$gg2q%$G<QxG8iwfri7n`?xTcjX?`J
z91Ju)qG0PwBoPjIZ!hBqDIIU9%+6i)8}#`&nF;n6#ZhGRSoBYH6!~vx*|@NmuAyRt
zXHULO_t)Zm_4fSyK8vwfs8U~pVtpLm(#l#059S+Snp{Y)PdHEg;=!(T<v3;`;Mr_7
z<z&r7Vdt42kL8mGAA@@b!-fj;!3f{MeyLIG;E2*9=xL0`e}#F+dw)9p^S)LZ=U!ZA
za4i?R@|%50-LijCu)dv}rVfbt+w<u|BPxD^xV|_%<8o)7<4vM5BwOUTl2IuTo#-@k
z*;g3s7a{YxQhYvQkWchntA8#_&sLK{S!UQaa-#oIu7;aaEJHa)c!di2fCVByY=8Wb
z?PeTdN8eU&a*+(x*GS^WY8#%^o^{5-SBK`#OC93$oW+=c1P^yPV<!y@Os%>=B=gVH
z?>+|eXcCAjGM0C1*;gnA7~y|b)}gFPjdlv^i|uKy9HFXRL{L|0aQE{)I?2#?Q824i
zDrHPZ6T?D|jz@!{G*!G>N*d&;DGrDk5GSeJD~o;JkUk+O=+zn8-8DO|x2jjs`nmw3
zQ|`(^BefQT-J@q*53u<<=rCrYt)XEd#ikgiQ=OPW*}RZm_}CL<L8FeIhY<kAGp{=}
zv$%X^5XL~n;N%2*1*usdzaR4WSiIjBg6l^X!8N3A>zkK-jXB}P655_ELov&_o`^bT
zJVJ&o%%=ci8r~OPJ2*;~=GMK|DBRGFqfCdrEV>k(EhL|(twrZ-^@yl~4-Ru*d|2|?
z^`qTe&=qrolWzbWcz9{4!(1zM8``Wo4h{=OVf3SNVu3NQ7jzo?m3*a_*jL}OQm~i%
zpBv2jS(b`nKF=*W=Eb&9=L}&f3(Rt%pDq#Pmb@z1a(XKAPMc~AXY_<Mq^ZCy`fX{O
z65B59rA97fn-AxuqtPO*VEX)AX9|m>!edg7schQkHg0+m_*hvgTPK^)ApGz`t*Hoe
za@M5kH!T=3qr5Bw#7wJqBj>p|Rb2|!Rke<(xCPgOi_}`j5pdfk)&|A`!E~!r{RnA(
zY_XwDF)F%#nA^$nq+sf4JQsmezX~;s7)CFM$6S2u1gBR>*Oap~D~*|vDe?efhN6O`
zeg%rfVZDQ?7~3D`zpOGK@IIefad*++VW$a&6_e#X1gn`O(jad6;#OQCB5oXaayop&
z+WO{%&_8A+42t}z@Yo~)t%M2}rrZR<=V0YrcYhTxO5k1r@<;*pND%z99Nj@x=f?*U
z@y{P+2)WW$*SxMoMoZV;5p};_`*n3XLhP*3Zo@c6`n9s&75eAug-$P8R)KSIQf5$X
zj{9?t2^>F_l!U<3g&rl1JzAp9p6D{087%pMhj(F}{{7+iH+8o^Zk_$7?%ThmH8f;p
z{;8`00I;+E>p_l(-vjv22-F-QG%_`}wBx0?XzipRv^3$RP-m58lywj`wXl@%axzu+
zl2bAEvNq;4q2T9(<>5C3ie8%1c^Ep-nOWKZ^-G)yfubqA#KKB4V#L1;Jh(h;9c+Q}
zbA-Sh)OOBX9=sI4xo`o`e-$%O5dLQ3V$DmTA*(>>VsCF_ZRtYDM9)bNpaU?|5}G*y
zrCr?ZovaA~^lTKsDxFNsxRij>oWEBHyyB&>aB*?qVqkE0cc*t}rnh%8X8>?=axyS7
zF)%UF0WIj9J?&f!J?QM5Nr3TwYlx-BzufGc>3?ezJy2DJ!BT?(K+nkV&p`i_nE~pc
z5dI2mXk_o|!b?p2k6Il55dBZp06zfM!wl>m@Qe#6DQe<sZ0f{IA+8`pC~jfz?DD(Z
z8X<s@o{@<jK*8{jj{OhufP?v;n+=?Sf3%wiXu~B7)cP{>6ah+|@-Z<ovCuIx(J^wU
zFfntnaB=}SwRjl*Vg#HhpqH?dDbVA8@cM(%AH3|HRDd(bXYOQgW=7}+%!6M82B2qR
zrf2*;*l%wCu;O9(HI#qo>i@Fyh7Pi_|L@(mwf&V)zwEd~?2TP*f$}|)BD@r?u9hZT
z%$!DyMoi3{bY`YzoOA#H@E;@apyMz!W8-88FqyF!{;%i3#Q0zBaBy|9`7Py4j2TRA
zOn-%R22KS4*bozAE;D;4TSFIM(mOZ+MWPIU)6)TF1O*=t@Ix0%pu`W~ZwW1E<MR87
zjpeV@;<7QcGv}r7pffQwGjz3aq2N=s`_0<q_p!6F<oo^PH$R4d*YzJp_O~M7f&mUP
z!@rgzA1vYj(eZy*(ZBCOKvDoNh5N5N%-`q%e-K0c=c=OoFN=x__%7{NMgvpvS58xk
zaQ#{fj7*FiOw25tz-7S5NCEr<ngN%~|6uWt^riey2~PDdxl0cxQ?uVBvtWN^*6#-)
z8!IbN9@32P_c8!bj|(U%_Uj<D`$riwJ2NX#r0Y**05(QOpjzIa%UC#msg3@rjFAz*
z0UVP*mjT$={^rZU$OwEn`X@VPCMLGO`T|w^{?<OArqwS=(m(kEL$Llm1~Vs6^64*j
ze{Uavg_8rQZTBZTMgSX7DC{p~%z$6&ynnI-urd9IwlJ~(bxZ+l%zqz0RshRi>tkdF
zumInK{wW3{3mYeph4QB|V10k@FDujE+swlLOK|N^zKpD_9DlEm<v+9!NE-W_FEA1Q
zTE@=uizV}?7yvew|Ij|xzl{qcJIgP5(?9t#a&j{Meco9AL;Ki&sW<=C_wRGW#PRns
z;4=8@`~p}x*#0^n049#V%?E&m<CjkEpW*`Z@9*v7;P~4*VgjzdzxpyWvHpj=X9CLC
z{UruF2ghG?gBck15B+d)G6YJUIRUk_2^o|vy-a~}d4xcbaeJUx_^+4kgbb2)X7+@@
zih+{943Z**+C0pnf?~jA5))$)VPfHA6lUWT7G`5%5@QCiaf%3uvGe`U7P`L_fSp|o
Wom_sq;V`qaGIGF@k%`KS!Tvv?>Z<Di

literal 0
HcmV?d00001

diff --git a/support/dist-docs-branch-23.06/ovn-ic-nb.5.txt b/support/dist-docs-branch-23.06/ovn-ic-nb.5.txt
new file mode 100644
index 00000000..6cc1cf65
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-ic-nb.5.txt
@@ -0,0 +1,372 @@
+ovn-ic-nb(5)                  Open vSwitch Manual                 ovn-ic-nb(5)
+
+NAME
+       ovn-ic-nb - OVN_IC_Northbound database schema
+
+       This  database is the interface for cloud management system (CMS), such
+       as OpenStack, to configure OVN interconnection settings. The  CMS  pro‐
+       duces  almost  all  of the contents of the database. The ovn-ic program
+       monitors the database contents, transforms it, and stores it  into  the
+       OVN_IC_Southbound database.
+
+       We  generally  speak  of  ``the’’ CMS, but one can imagine scenarios in
+       which multiple CMSes manage different parts of OVN interconnection.
+
+   External IDs
+       Each of the tables in this database contains a  special  column,  named
+       external_ids.  This  column has the same form and purpose each place it
+       appears.
+
+              external_ids: map of string-string pairs
+                     Key-value pairs for use by the CMS.  The  CMS  might  use
+                     certain  pairs,  for example, to identify entities in its
+                     own configuration that correspond to those in this  data‐
+                     base.
+
+TABLE SUMMARY
+       The  following list summarizes the purpose of each of the tables in the
+       OVN_IC_Northbound database.  Each table is described in more detail  on
+       a later page.
+
+       Table     Purpose
+       IC_NB_Global
+                 IC Northbound configuration
+       Transit_Switch
+                 Transit logical switch
+       SSL       SSL configuration.
+       Connection
+                 OVSDB client connections.
+
+IC_NB_Global TABLE
+       Northbound  configuration for OVN interconnection. This table must have
+       exactly one row.
+
+   Summary:
+       Common Columns:
+         external_ids                map of string-string pairs
+       Common options:
+         options                     map of string-string pairs
+         options : ic_probe_interval
+                                     optional string
+       Connection Options:
+         connections                 set of Connections
+         ssl                         optional SSL
+
+   Details:
+     Common Columns:
+
+       external_ids: map of string-string pairs
+              See External IDs at the beginning of this document.
+
+     Common options:
+
+       options: map of string-string pairs
+              This column provides general key/value settings.  The  supported
+              options are described individually below.
+
+       options : ic_probe_interval: optional string
+              The  inactivity  probe  interval of the connection to the OVN IC
+              Northbound and Southbound databases from  ovn-ic,  in  millisec‐
+              onds. If the value is zero, it disables the connection keepalive
+              feature.
+
+              If the value is nonzero, then it will be forced to a value of at
+              least 1000 ms.
+
+     Connection Options:
+
+       connections: set of Connections
+              Database  clients  to  which  the  Open  vSwitch database server
+              should connect or on which it should listen, along with  options
+              for  how these connections should be configured. See the Connec�‐
+              tion table for more information.
+
+       ssl: optional SSL
+              Global SSL configuration.
+
+Transit_Switch TABLE
+       Each row represents one transit logical switch for interconnection  be‐
+       tween different OVN deployments (availability zones).
+
+   Summary:
+       Naming:
+         name                        string (must be unique within table)
+       Common Columns:
+         other_config                map of string-string pairs
+         external_ids                map of string-string pairs
+
+   Details:
+     Naming:
+
+       name: string (must be unique within table)
+              A name that uniquely identifies the transit logical switch.
+
+     Common Columns:
+
+       other_config: map of string-string pairs
+
+       external_ids: map of string-string pairs
+              See External IDs at the beginning of this document.
+
+SSL TABLE
+       SSL configuration for ovn-nb database access.
+
+   Summary:
+       private_key                   string
+       certificate                   string
+       ca_cert                       string
+       bootstrap_ca_cert             boolean
+       ssl_protocols                 string
+       ssl_ciphers                   string
+       Common Columns:
+         external_ids                map of string-string pairs
+
+   Details:
+       private_key: string
+              Name  of  a  PEM  file  containing  the  private key used as the
+              switch’s identity for SSL connections to the controller.
+
+       certificate: string
+              Name of a PEM file containing a certificate, signed by the  cer‐
+              tificate authority (CA) used by the controller and manager, that
+              certifies  the  switch’s  private key, identifying a trustworthy
+              switch.
+
+       ca_cert: string
+              Name of a PEM file containing the CA certificate used to  verify
+              that the switch is connected to a trustworthy controller.
+
+       bootstrap_ca_cert: boolean
+              If  set to true, then Open vSwitch will attempt to obtain the CA
+              certificate from the controller on its first SSL connection  and
+              save  it to the named PEM file. If it is successful, it will im‐
+              mediately drop the connection and reconnect, and  from  then  on
+              all  SSL  connections  must  be  authenticated  by a certificate
+              signed by the CA certificate thus obtained. This option  exposes
+              the  SSL  connection to a man-in-the-middle attack obtaining the
+              initial CA certificate. It may still be  useful  for  bootstrap‐
+              ping.
+
+       ssl_protocols: string
+              List of SSL protocols to be enabled for SSL connections. The de‐
+              fault when this option is omitted is TLSv1,TLSv1.1,TLSv1.2.
+
+       ssl_ciphers: string
+              List  of  ciphers  (in  OpenSSL cipher string format) to be sup‐
+              ported for SSL connections. The  default  when  this  option  is
+              omitted is HIGH:!aNULL:!MD5.
+
+     Common Columns:
+
+       The  overall purpose of these columns is described under Common Columns
+       at the beginning of this document.
+
+       external_ids: map of string-string pairs
+Connection TABLE
+       Configuration for a database connection to  an  Open  vSwitch  database
+       (OVSDB) client.
+
+       This  table  primarily  configures  the  Open  vSwitch  database server
+       (ovsdb-server).
+
+       The Open vSwitch database server can initiate and maintain active  con‐
+       nections  to  remote  clients.  It can also listen for database connec‐
+       tions.
+
+   Summary:
+       Core Features:
+         target                      string (must be unique within table)
+       Client Failure Detection and Handling:
+         max_backoff                 optional integer, at least 1,000
+         inactivity_probe            optional integer
+       Status:
+         is_connected                boolean
+         status : last_error         optional string
+         status : state              optional string, one of ACTIVE,  BACKOFF,
+                                     CONNECTING, IDLE, or VOID
+         status : sec_since_connect  optional  string,  containing an integer,
+                                     at least 0
+         status : sec_since_disconnect
+                                     optional string, containing  an  integer,
+                                     at least 0
+         status : locks_held         optional string
+         status : locks_waiting      optional string
+         status : locks_lost         optional string
+         status : n_connections      optional  string,  containing an integer,
+                                     at least 2
+         status : bound_port         optional string, containing an integer
+       Common Columns:
+         external_ids                map of string-string pairs
+         other_config                map of string-string pairs
+
+   Details:
+     Core Features:
+
+       target: string (must be unique within table)
+              Connection methods for clients.
+
+              The following connection methods are currently supported:
+
+              ssl:host[:port]
+                     The specified SSL port on the host  at  the  given  host,
+                     which can either be a DNS name (if built with unbound li‐
+                     brary)  or  an IP address. A valid SSL configuration must
+                     be provided when this form is  used,  this  configuration
+                     can  be specified via command-line options or the SSL ta‐
+                     ble.
+
+                     If port is not specified, it defaults to 6640.
+
+                     SSL support is an optional feature  that  is  not  always
+                     built as part of Open vSwitch.
+
+              tcp:host[:port]
+                     The  specified  TCP  port  on the host at the given host,
+                     which can either be a DNS name (if built with unbound li‐
+                     brary) or an IP address. If host is an IPv6 address, wrap
+                     it in square brackets, e.g. tcp:[::1]:6640.
+
+                     If port is not specified, it defaults to 6640.
+
+              pssl:[port][:host]
+                     Listens for SSL connections on the  specified  TCP  port.
+                     Specify  0  for  port  to  have  the kernel automatically
+                     choose an available port. If host, which can either be  a
+                     DNS  name  (if  built  with unbound library) or an IP ad‐
+                     dress, is specified, then connections are  restricted  to
+                     the resolved or specified local IPaddress (either IPv4 or
+                     IPv6 address). If host is an IPv6 address, wrap in square
+                     brackets,  e.g. pssl:6640:[::1]. If host is not specified
+                     then it listens only on IPv4 (but not IPv6) addresses.  A
+                     valid  SSL  configuration must be provided when this form
+                     is used, this can be specified  either  via  command-line
+                     options or the SSL table.
+
+                     If port is not specified, it defaults to 6640.
+
+                     SSL  support  is  an  optional feature that is not always
+                     built as part of Open vSwitch.
+
+              ptcp:[port][:host]
+                     Listens for connections on the specified TCP port.  Spec‐
+                     ify 0 for port to have the kernel automatically choose an
+                     available  port.  If host, which can either be a DNS name
+                     (if built with unbound library)  or  an  IP  address,  is
+                     specified,  then  connections  are  restricted to the re‐
+                     solved or specified local IP address (either IPv4 or IPv6
+                     address). If host is an IPv6 address, wrap it  in  square
+                     brackets,  e.g. ptcp:6640:[::1]. If host is not specified
+                     then it listens only on IPv4 addresses.
+
+                     If port is not specified, it defaults to 6640.
+
+              When multiple clients are configured, the target values must  be
+              unique. Duplicate target values yield unspecified results.
+
+     Client Failure Detection and Handling:
+
+       max_backoff: optional integer, at least 1,000
+              Maximum  number  of  milliseconds to wait between connection at‐
+              tempts. Default is implementation-specific.
+
+       inactivity_probe: optional integer
+              Maximum number of milliseconds of idle time on connection to the
+              client before sending  an  inactivity  probe  message.  If  Open
+              vSwitch  does  not communicate with the client for the specified
+              number of seconds, it will send a probe. If a  response  is  not
+              received  for  the  same additional amount of time, Open vSwitch
+              assumes the connection has been broken and  attempts  to  recon‐
+              nect.  Default is implementation-specific. A value of 0 disables
+              inactivity probes.
+
+     Status:
+
+       Key-value pair of is_connected is always updated. Other key-value pairs
+       in the status columns may be updated depends on the target type.
+
+       When target specifies a connection method that listens for inbound con‐
+       nections (e.g. ptcp: or punix:), both  n_connections  and  is_connected
+       may also be updated while the remaining key-value pairs are omitted.
+
+       On  the  other  hand, when target specifies an outbound connection, all
+       key-value pairs may be updated, except  the  above-mentioned  two  key-
+       value  pairs associated with inbound connection targets. They are omit‐
+       ted.
+
+       is_connected: boolean
+              true if currently connected to this client, false otherwise.
+
+       status : last_error: optional string
+              A human-readable description of the last error on the connection
+              to the manager; i.e. strerror(errno). This key will  exist  only
+              if an error has occurred.
+
+       status : state: optional string, one of ACTIVE, BACKOFF, CONNECTING,
+       IDLE, or VOID
+              The state of the connection to the manager:
+
+              VOID   Connection is disabled.
+
+              BACKOFF
+                     Attempting to reconnect at an increasing period.
+
+              CONNECTING
+                     Attempting to connect.
+
+              ACTIVE Connected, remote host responsive.
+
+              IDLE   Connection is idle. Waiting for response to keep-alive.
+
+              These  values  may  change in the future. They are provided only
+              for human consumption.
+
+       status : sec_since_connect: optional string, containing an integer, at
+       least 0
+              The amount of time since this client last successfully connected
+              to the database (in seconds). Value is empty if client has never
+              successfully been connected.
+
+       status : sec_since_disconnect: optional string, containing an integer,
+       at least 0
+              The amount of time since this client last disconnected from  the
+              database  (in  seconds). Value is empty if client has never dis‐
+              connected.
+
+       status : locks_held: optional string
+              Space-separated list of the names of OVSDB locks that  the  con‐
+              nection  holds.  Omitted  if  the  connection  does not hold any
+              locks.
+
+       status : locks_waiting: optional string
+              Space-separated list of the names of OVSDB locks that  the  con‐
+              nection  is currently waiting to acquire. Omitted if the connec‐
+              tion is not waiting for any locks.
+
+       status : locks_lost: optional string
+              Space-separated list of the names of OVSDB locks that  the  con‐
+              nection  has  had  stolen by another OVSDB client. Omitted if no
+              locks have been stolen from this connection.
+
+       status : n_connections: optional string, containing an integer, at
+       least 2
+              When target specifies a connection method that listens  for  in‐
+              bound  connections  (e.g. ptcp: or pssl:) and more than one con‐
+              nection is actually active, the value is the  number  of  active
+              connections. Otherwise, this key-value pair is omitted.
+
+       status : bound_port: optional string, containing an integer
+              When target is ptcp: or pssl:, this is the TCP port on which the
+              OVSDB  server  is  listening.  (This is particularly useful when
+              target specifies a port of 0, allowing the kernel to choose  any
+              available port.)
+
+     Common Columns:
+
+       The  overall purpose of these columns is described under Common Columns
+       at the beginning of this document.
+
+       external_ids: map of string-string pairs
+
+       other_config: map of string-string pairs
+
+Open vSwitch 23.06.3            DB Schema 1.0.0                   ovn-ic-nb(5)
diff --git a/support/dist-docs-branch-23.06/ovn-ic-nbctl.8 b/support/dist-docs-branch-23.06/ovn-ic-nbctl.8
new file mode 100644
index 00000000..db793d4b
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-ic-nbctl.8
@@ -0,0 +1,424 @@
+'\" p
+.\" -*- nroff -*-
+.TH "ovn-ic-nbctl" 8 "ovn-ic-nbctl" "OVN 23\[char46]06\[char46]3" "OVN Manual"
+.fp 5 L CR              \\" Make fixed-width font available as \\fL.
+.de TQ
+.  br
+.  ns
+.  TP "\\$1"
+..
+.de ST
+.  PP
+.  RS -0.15in
+.  I "\\$1"
+.  RE
+..
+.de SU
+.  PP
+.  I "\\$1"
+..
+.PP
+.SH "NAME"
+.PP
+.PP
+ovn-ic-nbctl \- Open Virtual Network interconnection northbound db management utility
+.SH "SYNOPSIS"
+.PP
+\fBovn\-ic\-nbctl\fR [\fIoptions\fR] \fIcommand\fR [\fIarg\fR\[char46]\[char46]\[char46]]
+.SH "DESCRIPTION"
+.PP
+.PP
+This utility can be used to manage the OVN interconnection northbound database\[char46]
+.SH "GENERAL COMMANDS"
+.TP
+\fBinit\fR
+Initializes the database, if it is empty\[char46] If the database has already been initialized, this command has no effect\[char46]
+.TP
+\fBshow\fR
+Prints a brief overview of the database contents\[char46]
+.SH "TRANSIT SWITCH COMMANDS"
+.TP
+[\fB\-\-may\-exist\fR] \fBts\-add\fR \fIswitch\fR
+Creates a new transit switch named \fIswitch\fR\[char46]
+.IP
+Transit switch names must be unique\[char46] Adding a duplicated name results in error\[char46] With \fB\-\-may\-exist\fR, adding a duplicate name succeeds but does not create a new transit switch\[char46]
+.TP
+[\fB\-\-if\-exists\fR] \fBts\-del\fR \fIswitch\fR
+Deletes \fIswitch\fR\[char46] It is an error if \fIswitch\fR does not exist, unless \fB\-\-if\-exists\fR is specified\[char46]
+.TP
+\fBts\-list\fR
+Lists all existing switches on standard output, one per line\[char46]
+.SH "DATABASE COMMANDS"
+.PP
+.PP
+These commands query and modify the contents of \fBovsdb\fR tables\[char46] They are a slight abstraction of the \fBovsdb\fR interface and as such they operate at a lower level than other \fBovn\-ic\-nbctl\fR commands\[char46]
+.PP
+\fIIdentifying Tables, Records, and Columns\fR
+.PP
+.PP
+Each of these commands has a \fItable\fR parameter to identify a table within the database\[char46] Many of them also take a \fIrecord\fR parameter that identifies a particular record within a table\[char46] The \fIrecord\fR parameter may be the UUID for a record, which may be abbreviated to its first 4 (or more) hex digits, as long as that is unique\[char46] Many tables offer additional ways to identify records\[char46] Some commands also take \fIcolumn\fR parameters that identify a particular field within the records in a table\[char46]
+.PP
+.PP
+For a list of tables and their columns, see \fBovn\-ic\-nb\fR(5) or see the table listing from the \fB\-\-help\fR option\[char46]
+.PP
+.PP
+Record names must be specified in full and with correct capitalization, except that UUIDs may be abbreviated to their first 4 (or more) hex digits, as long as that is unique within the table\[char46] Names of tables and columns are not case-sensitive, and \fB\-\fR and \fB_\fR are treated interchangeably\[char46] Unique abbreviations of table and column names are acceptable, e\[char46]g\[char46] \fBt\fR or \fBtransit\fR is sufficient to identify the \fBTransit_Switch\fR table\[char46]
+.PP
+.PP
+.PP
+\fIDatabase Values\fR
+.PP
+.PP
+Each column in the database accepts a fixed type of data\[char46] The currently defined basic types, and their representations, are:
+.RS
+.TP
+integer
+A decimal integer in the range \-2**63 to 2**63\-1, inclusive\[char46]
+.TP
+real
+A floating-point number\[char46]
+.TP
+Boolean
+True or false, written \fBtrue\fR or \fBfalse\fR, respectively\[char46]
+.TP
+string
+An arbitrary Unicode string, except that null bytes are not allowed\[char46] Quotes are optional for most strings that begin with an English letter or underscore and consist only of letters, underscores, hyphens, and periods\[char46] However, \fBtrue\fR and \fBfalse\fR and strings that match the syntax of UUIDs (see below) must be enclosed in double quotes to distinguish them from other basic types\[char46] When double quotes are used, the syntax is that of strings in JSON, e\[char46]g\[char46] backslashes may be used to escape special characters\[char46] The empty string must be represented as a pair of double quotes (\fB\(dq\(dq\fR)\[char46]
+.TP
+UUID
+Either a universally unique identifier in the style of RFC 4122, e\[char46]g\[char46] \fBf81d4fae\-7dec\-11d0\-a765\-00a0c91e6bf6\fR, or an \fB@\fR\fIname\fR defined by a \fBget\fR or \fBcreate\fR command within the same \fBovs\-vsctl\fR invocation\[char46]
+.RE
+.PP
+.PP
+Multiple values in a single column may be separated by spaces or a single comma\[char46] When multiple values are present, duplicates are not allowed, and order is not important\[char46] Conversely, some database columns can have an empty set of values, represented as \fB[]\fR, and square brackets may optionally enclose other non-empty sets or single values as well\[char46]
+.PP
+.PP
+A few database columns are ``maps\(cq\(cq of key-value pairs, where the key and the value are each some fixed database type\[char46] These are specified in the form \fIkey\fR\fB=\fR\fIvalue\fR, where \fIkey\fR and \fIvalue\fR follow the syntax for the column\(cqs key type and value type, respectively\[char46] When multiple pairs are present (separated by spaces or a comma), duplicate keys are not allowed, and again the order is not important\[char46] Duplicate values are allowed\[char46] An empty map is represented as \fB{}\fR\[char46] Curly braces may optionally enclose non-empty maps as well (but use quotes to prevent the shell from expanding \fBother\-config={0=x,1=y}\fR into \fBother\-config=0=x
+other\-config=1=y\fR, which may not have the desired effect)\[char46]
+.PP
+\fIDatabase Command Syntax\fR
+.RS
+.TP
+[\fB\-\-if\-exists\fR] [\fB\-\-columns=\fR\fIcolumn\fR[\fB,\fR\fIcolumn\fR]\[char46]\[char46]\[char46]] \fBlist\fR \fItable\fR [\fIrecord\fR]\[char46]\[char46]\[char46]
+Lists the data in each specified \fIrecord\fR\[char46] If no records are specified, lists all the records in \fItable\fR\[char46]
+.IP
+If \fB\-\-columns\fR is specified, only the requested columns are listed, in the specified order\[char46] Otherwise, all columns are listed, in alphabetical order by column name\[char46]
+.IP
+Without \fB\-\-if\-exists\fR, it is an error if any specified \fIrecord\fR does not exist\[char46] With \fB\-\-if\-exists\fR, the command ignores any \fIrecord\fR that does not exist, without producing any output\[char46]
+.TP
+[\fB\-\-columns=\fR\fIcolumn\fR[\fB,\fR\fIcolumn\fR]\[char46]\[char46]\[char46]] \fBfind\fR \fItable\fR [\fIcolumn\fR[\fB:\fR\fIkey\fR]\fB=\fR\fIvalue\fR]\[char46]\[char46]\[char46]
+Lists the data in each record in \fItable\fR whose \fIcolumn\fR equals \fIvalue\fR or, if \fIkey\fR is specified, whose \fIcolumn\fR contains a \fIkey\fR with the specified \fIvalue\fR\[char46] The following operators may be used where \fB=\fR is written in the syntax summary:
+.RS
+.TP
+\fB= != < > <= >=\fR
+Selects records in which \fIcolumn\fR[\fB:\fR\fIkey\fR] equals, does not equal, is less than, is greater than, is less than or equal to, or is greater than or equal to \fIvalue\fR, respectively\[char46]
+.IP
+Consider \fIcolumn\fR[\fB:\fR\fIkey\fR] and \fIvalue\fR as sets of elements\[char46] Identical sets are considered equal\[char46] Otherwise, if the sets have different numbers of elements, then the set with more elements is considered to be larger\[char46] Otherwise, consider a element from each set pairwise, in increasing order within each set\[char46] The first pair that differs determines the result\[char46] (For a column that contains key-value pairs, first all the keys are compared, and values are considered only if the two sets contain identical keys\[char46])
+.TP
+\fB{=} {!=}\fR
+Test for set equality or inequality, respectively\[char46]
+.TP
+\fB{<=}\fR
+Selects records in which \fIcolumn\fR[\fB:\fR\fIkey\fR] is a subset of \fIvalue\fR\[char46] For example, \fBflood\-vlans{<=}1,2\fR selects records in which the \fBflood\-vlans\fR column is the empty set or contains 1 or 2 or both\[char46]
+.TP
+\fB{<}\fR
+Selects records in which \fIcolumn\fR[\fB:\fR\fIkey\fR] is a proper subset of \fIvalue\fR\[char46] For example, \fBflood\-vlans{<}1,2\fR selects records in which the \fBflood\-vlans\fR column is the empty set or contains 1 or 2 but not both\[char46]
+.TP
+\fB{>=} {>}\fR
+Same as \fB{<=}\fR and \fB{<}\fR, respectively, except that the relationship is reversed\[char46] For example, \fBflood\-vlans{>=}1,2\fR selects records in which the \fBflood\-vlans\fR column contains both 1 and 2\[char46]
+.RE
+.IP
+The following operators are available only in Open vSwitch 2\[char46]16 and later:
+.RS
+.TP
+\fB{in}\fR
+Selects records in which every element in \fIcolumn\fR[\fB:\fR\fIkey\fR] is also in \fIvalue\fR\[char46] (This is the same as \fB{<=}\fR\[char46])
+.TP
+\fB{not\-in}\fR
+Selects records in which every element in \fIcolumn\fR[\fB:\fR\fIkey\fR] is not in \fIvalue\fR\[char46]
+.RE
+.IP
+For arithmetic operators (\fB= != < > <= >=\fR), when \fIkey\fR is specified but a particular record\(cqs \fIcolumn\fR does not contain \fIkey\fR, the record is always omitted from the results\[char46] Thus, the condition \fBother\-config:mtu!=1500\fR matches records that have a \fBmtu\fR key whose value is not 1500, but not those that lack an \fBmtu\fR key\[char46]
+.IP
+For the set operators, when \fIkey\fR is specified but a particular record\(cqs \fIcolumn\fR does not contain \fIkey\fR, the comparison is done against an empty set\[char46] Thus, the condition \fBother\-config:mtu{!=}1500\fR matches records that have a \fBmtu\fR key whose value is not 1500 and those that lack an \fBmtu\fR key\[char46]
+.IP
+Don\(cqt forget to escape \fB<\fR or \fB>\fR from interpretation by the shell\[char46]
+.IP
+If \fB\-\-columns\fR is specified, only the requested columns are listed, in the specified order\[char46] Otherwise all columns are listed, in alphabetical order by column name\[char46]
+.IP
+The UUIDs shown for rows created in the same \fBovs\-vsctl\fR invocation will be wrong\[char46]
+.TP
+[\fB\-\-if\-exists\fR] [\fB\-\-id=@\fR\fIname\fR] \fBget\fR \fItable record\fR [\fIcolumn\fR[\fB:\fR\fIkey\fR]]\[char46]\[char46]\[char46]
+Prints the value of each specified \fIcolumn\fR in the given \fIrecord\fR in \fItable\fR\[char46] For map columns, a \fIkey\fR may optionally be specified, in which case the value associated with \fIkey\fR in the column is printed, instead of the entire map\[char46]
+.IP
+Without \fB\-\-if\-exists\fR, it is an error if \fIrecord\fR does not exist or \fIkey\fR is specified, if \fIkey\fR does not exist in \fIrecord\fR\[char46] With \fB\-\-if\-exists\fR, a missing \fIrecord\fR yields no output and a missing \fIkey\fR prints a blank line\[char46]
+.IP
+If \fB@\fR\fIname\fR is specified, then the UUID for \fIrecord\fR may be referred to by that name later in the same \fBovs\-vsctl\fR invocation in contexts where a UUID is expected\[char46]
+.IP
+Both \fB\-\-id\fR and the \fIcolumn\fR arguments are optional, but usually at least one or the other should be specified\[char46] If both are omitted, then \fBget\fR has no effect except to verify that \fIrecord\fR exists in \fItable\fR\[char46]
+.IP
+\fB\-\-id\fR and \fB\-\-if\-exists\fR cannot be used together\[char46]
+.TP
+[\fB\-\-if\-exists\fR] \fBset\fR \fItable record column\fR[\fB:\fR\fIkey\fR]\fB=\fR\fIvalue\fR\[char46]\[char46]\[char46]
+Sets the value of each specified \fIcolumn\fR in the given \fIrecord\fR in \fItable\fR to \fIvalue\fR\[char46] For map columns, a \fIkey\fR may optionally be specified, in which case the value associated with \fIkey\fR in that column is changed (or added, if none exists), instead of the entire map\[char46]
+.IP
+Without \fB\-\-if\-exists\fR, it is an error if \fIrecord\fR does not exist\[char46] With \fB\-\-if\-exists\fR, this command does nothing if \fIrecord\fR does not exist\[char46]
+.TP
+[\fB\-\-if\-exists\fR] \fBadd\fR \fItable record column\fR [\fIkey\fR\fB=\fR]\fIvalue\fR\[char46]\[char46]\[char46]
+Adds the specified value or key-value pair to \fIcolumn\fR in \fIrecord\fR in \fItable\fR\[char46] If \fIcolumn\fR is a map, then \fIkey\fR is required, otherwise it is prohibited\[char46] If \fIkey\fR already exists in a map column, then the current \fIvalue\fR is not replaced (use the \fBset\fR command to replace an existing value)\[char46]
+.IP
+Without \fB\-\-if\-exists\fR, it is an error if \fIrecord\fR does not exist\[char46] With \fB\-\-if\-exists\fR, this command does nothing if \fIrecord\fR does not exist\[char46]
+.TP
+[\fB\-\-if\-exists\fR] \fBremove\fR \fItable record column value\fR\[char46]\[char46]\[char46]
+.IP
+[\fB\-\-if\-exists\fR] \fBremove\fR \fItable record column key\fR\[char46]\[char46]\[char46]
+.IP
+[\fB\-\-if\-exists\fR] \fBremove\fR \fItable record column key\fR\fB=\fR\fIvalue\fR\[char46]\[char46]\[char46]
+Removes the specified values or key-value pairs from \fIcolumn\fR in \fIrecord\fR in \fItable\fR\[char46] The first form applies to columns that are not maps: each specified \fIvalue\fR is removed from the column\[char46] The second and third forms apply to map columns: if only a \fIkey\fR is specified, then any key-value pair with the given \fIkey\fR is removed, regardless of its value; if a \fIvalue\fR is given then a pair is removed only if both key and value match\[char46]
+.IP
+It is not an error if the column does not contain the specified key or value or pair\[char46]
+.IP
+Without \fB\-\-if\-exists\fR, it is an error if \fIrecord\fR does not exist\[char46] With \fB\-\-if\-exists\fR, this command does nothing if \fIrecord\fR does not exist\[char46]
+.TP
+[\fB\-\-if\-exists\fR] \fBclear\fR \fItable record column\fR\[char46]\[char46]\[char46]
+Sets each \fIcolumn\fR in \fIrecord\fR in \fItable\fR to the empty set or empty map, as appropriate\[char46] This command applies only to columns that are allowed to be empty\[char46]
+.IP
+Without \fB\-\-if\-exists\fR, it is an error if \fIrecord\fR does not exist\[char46] With \fB\-\-if\-exists\fR, this command does nothing if \fIrecord\fR does not exist\[char46]
+.TP
+[\fB\-\-id=(@\fR\fIname\fR|\fIuuid\fR)] \fBcreate\fR \fItable column\fR[\fB:\fR\fIkey\fR]\fB=\fR\fIvalue\fR\[char46]\[char46]\[char46]
+Creates a new record in \fItable\fR and sets the initial values of each \fIcolumn\fR\[char46] Columns not explicitly set will receive their default values\[char46] Outputs the UUID of the new row\[char46]
+.IP
+If \fB@\fR\fIname\fR is specified, then the UUID for the new row may be referred to by that name elsewhere in the same \fB\e*(PN\fR invocation in contexts where a UUID is expected\[char46] Such references may precede or follow the \fBcreate\fR command\[char46]
+.IP
+If a valid \fIuuid\fR is specified, then it is used as the UUID of the new row\[char46]
+.RS
+.TP
+Caution (ovs-vsctl as example)
+Records in the Open vSwitch database are significant only when they can be reached directly or indirectly from the \fBOpen_vSwitch\fR table\[char46] Except for records in the \fBQoS\fR or \fBQueue\fR tables, records that are not reachable from the \fBOpen_vSwitch\fR table are automatically deleted from the database\[char46] This deletion happens immediately, without waiting for additional \fBovs\-vsctl\fR commands or other database activity\[char46] Thus, a \fBcreate\fR command must generally be accompanied by additional commands \fIwithin the same\fR \fBovs\-vsctl\fR \fIinvocation\fR to add a chain of references to the newly created record from the top-level \fBOpen_vSwitch\fR record\[char46] The \fBEXAMPLES\fR section gives some examples that show how to do this\[char46]
+.RE
+.TP
+[\fB\-\-if\-exists\fR] \fBdestroy\fR \fItable record\fR\[char46]\[char46]\[char46]
+Deletes each specified \fIrecord\fR from \fItable\fR\[char46] Unless \fB\-\-if\-exists\fR is specified, each \fIrecord\fRs must exist\[char46]
+.TP
+\fB\-\-all destroy\fR \fItable\fR
+Deletes all records from the \fItable\fR\[char46]
+.RS
+.TP
+Caution (ovs-vsctl as example)
+The \fBdestroy\fR command is only useful for records in the \fBQoS\fR or \fBQueue\fR tables\[char46] Records in other tables are automatically deleted from the database when they become unreachable from the \fBOpen_vSwitch\fR table\[char46] This means that deleting the last reference to a record is sufficient for deleting the record itself\[char46] For records in these tables, \fBdestroy\fR is silently ignored\[char46] See the \fBEXAMPLES\fR section below for more information\[char46]
+.RE
+.TP
+\fBwait\-until\fR \fItable record\fR [\fIcolumn\fR[\fB:\fR\fIkey\fR]\fB=\fR\fIvalue\fR]\[char46]\[char46]\[char46]
+Waits until \fItable\fR contains a record named \fIrecord\fR whose \fIcolumn\fR equals \fIvalue\fR or, if \fIkey\fR is specified, whose \fIcolumn\fR contains a \fIkey\fR with the specified \fIvalue\fR\[char46] This command supports the same operators and semantics described for the \fBfind\fR command above\[char46]
+.IP
+If no \fIcolumn\fR[\fB:\fR\fIkey\fR]\fB=\fR\fIvalue\fR arguments are given, this command waits only until \fIrecord\fR exists\[char46] If more than one such argument is given, the command waits until all of them are satisfied\[char46]
+.RS
+.TP
+Caution (ovs-vsctl as example)
+Usually \fBwait\-until\fR should be placed at the beginning of a set of \fBovs\-vsctl\fR commands\[char46] For example, \fBwait\-until bridge br0
+\-\- get bridge br0 datapath_id\fR waits until a bridge named \fBbr0\fR is created, then prints its \fBdatapath_id\fR column, whereas \fBget bridge br0 datapath_id \-\- wait\-until bridge br0\fR will abort if no bridge named \fBbr0\fR exists when \fBovs\-vsctl\fR initially connects to the database\[char46]
+.RE
+.IP
+Consider specifying \fB\-\-timeout=0\fR along with \fB\-\-wait\-until\fR, to prevent \fBovs\-vsctl\fR from terminating after waiting only at most 5 seconds\[char46]
+.TP
+\fBcomment\fR [\fIarg\fR]\[char46]\[char46]\[char46]
+This command has no effect on behavior, but any database log record created by the command will include the command and its arguments\[char46]
+.RE
+.SH "REMOTE CONNECTIVITY COMMANDS"
+.TP
+\fBget\-connection\fR
+Prints the configured connection(s)\[char46]
+.TP
+\fBdel\-connection\fR
+Deletes the configured connection(s)\[char46]
+.TP
+[\fB\-\-inactivity\-probe=\fR\fImsecs\fR] \fBset\-connection\fR \fItarget\fR\[char46]\[char46]\[char46]
+Sets the configured manager target or targets\[char46] Use \fB\-\-inactivity\-probe=\fR\fImsecs\fR to override the default idle connection inactivity probe time\[char46] Use 0 to disable inactivity probes\[char46]
+.SH "SSL CONFIGURATION COMMANDS"
+.TP
+\fBget\-ssl\fR
+Prints the SSL configuration\[char46]
+.TP
+\fBdel\-ssl\fR
+Deletes the current SSL configuration\[char46]
+.TP
+[\fB\-\-bootstrap\fR] \fBset\-ssl\fR \fIprivate-key\fR \fIcertificate\fR \fIca-cert\fR [\fIssl-protocol-list\fR [\fIssl-cipher-list\fR]]
+Sets the SSL configuration\[char46]
+.SH "OPTIONS"
+.TP
+\fB\-\-db\fR \fIdatabase\fR
+The OVSDB database remote to contact\[char46] If the \fBOVN_IC_NB_DB\fR environment variable is set, its value is used as the default\[char46] Otherwise, the default is \fBunix:/ovn_ic_nb_db\[char46]sock\fR, but this default is unlikely to be useful outside of single-machine OVN test environments\[char46]
+.TP
+\fB\-\-leader\-only\fR
+.TQ .5in
+\fB\-\-no\-leader\-only\fR
+By default, or with \fB\-\-leader\-only\fR, when the database server is a clustered database, \fBovn\-ic\-nbctl\fR will avoid servers other than the cluster leader\[char46] This ensures that any data that \fBovn\-ic\-nbctl\fR reads and reports is up-to-date\[char46] With \fB\-\-no\-leader\-only\fR, \fBovn\-ic\-nbctl\fR will use any server in the cluster, which means that for read-only transactions it can report and act on stale data (transactions that modify the database are always serialized even with \fB\-\-no\-leader\-only\fR)\[char46] Refer to \fBUnderstanding Cluster Consistency\fR in \fBovsdb\fR(7) for more information\[char46]
+.SH "LOGGING OPTIONS"
+.TP
+\fB\-v\fR[\fIspec\fR]
+.TQ .5in
+\fB\-\-verbose=\fR[\fIspec\fR]
+Sets logging levels\[char46] Without any \fIspec\fR, sets the log level for every module and destination to \fBdbg\fR\[char46] Otherwise, \fIspec\fR is a list of words separated by spaces or commas or colons, up to one from each category below:
+.RS
+.IP \(bu
+A valid module name, as displayed by the \fBvlog/list\fR command on \fBovs\-appctl\fR(8), limits the log level change to the specified module\[char46]
+.IP \(bu
+\fBsyslog\fR, \fBconsole\fR, or \fBfile\fR, to limit the log level change to only to the system log, to the console, or to a file, respectively\[char46] (If \fB\-\-detach\fR is specified, the daemon closes its standard file descriptors, so logging to the console will have no effect\[char46])
+.IP
+On Windows platform, \fBsyslog\fR is accepted as a word and is only useful along with the \fB\-\-syslog\-target\fR option (the word has no effect otherwise)\[char46]
+.IP \(bu
+\fBoff\fR, \fBemer\fR, \fBerr\fR, \fBwarn\fR, \fBinfo\fR, or \fBdbg\fR, to control the log level\[char46] Messages of the given severity or higher will be logged, and messages of lower severity will be filtered out\[char46] \fBoff\fR filters out all messages\[char46] See \fBovs\-appctl\fR(8) for a definition of each log level\[char46]
+.RE
+.IP
+Case is not significant within \fIspec\fR\[char46]
+.IP
+Regardless of the log levels set for \fBfile\fR, logging to a file will not take place unless \fB\-\-log\-file\fR is also specified (see below)\[char46]
+.IP
+For compatibility with older versions of OVS, \fBany\fR is accepted as a word but has no effect\[char46]
+.TP
+\fB\-v\fR
+.TQ .5in
+\fB\-\-verbose\fR
+Sets the maximum logging verbosity level, equivalent to \fB\-\-verbose=dbg\fR\[char46]
+.TP
+\fB\-vPATTERN:\fR\fIdestination\fR\fB:\fR\fIpattern\fR
+.TQ .5in
+\fB\-\-verbose=PATTERN:\fR\fIdestination\fR\fB:\fR\fIpattern\fR
+Sets the log pattern for \fIdestination\fR to \fIpattern\fR\[char46] Refer to \fBovs\-appctl\fR(8) for a description of the valid syntax for \fIpattern\fR\[char46]
+.TP
+\fB\-vFACILITY:\fR\fIfacility\fR
+.TQ .5in
+\fB\-\-verbose=FACILITY:\fR\fIfacility\fR
+Sets the RFC5424 facility of the log message\[char46] \fIfacility\fR can be one of \fBkern\fR, \fBuser\fR, \fBmail\fR, \fBdaemon\fR, \fBauth\fR, \fBsyslog\fR, \fBlpr\fR, \fBnews\fR, \fBuucp\fR, \fBclock\fR, \fBftp\fR, \fBntp\fR, \fBaudit\fR, \fBalert\fR, \fBclock2\fR, \fBlocal0\fR, \fBlocal1\fR, \fBlocal2\fR, \fBlocal3\fR, \fBlocal4\fR, \fBlocal5\fR, \fBlocal6\fR or \fBlocal7\fR\[char46] If this option is not specified, \fBdaemon\fR is used as the default for the local system syslog and \fBlocal0\fR is used while sending a message to the target provided via the \fB\-\-syslog\-target\fR option\[char46]
+.TP
+\fB\-\-log\-file\fR[\fB=\fR\fIfile\fR]
+Enables logging to a file\[char46] If \fIfile\fR is specified, then it is used as the exact name for the log file\[char46] The default log file name used if \fIfile\fR is omitted is \fB/usr/local/var/log/ovn/\fIprogram\fB\[char46]log\fR\[char46]
+.TP
+\fB\-\-syslog\-target=\fR\fIhost\fR\fB:\fR\fIport\fR
+Send syslog messages to UDP \fIport\fR on \fIhost\fR, in addition to the system syslog\[char46] The \fIhost\fR must be a numerical IP address, not a hostname\[char46]
+.TP
+\fB\-\-syslog\-method=\fR\fImethod\fR
+Specify \fImethod\fR as how syslog messages should be sent to syslog daemon\[char46] The following forms are supported:
+.RS
+.IP \(bu
+\fBlibc\fR, to use the libc \fBsyslog()\fR function\[char46] Downside of using this options is that libc adds fixed prefix to every message before it is actually sent to the syslog daemon over \fB/dev/log\fR UNIX domain socket\[char46]
+.IP \(bu
+\fBunix:\fIfile\fB\fR, to use a UNIX domain socket directly\[char46] It is possible to specify arbitrary message format with this option\[char46] However, \fBrsyslogd 8\[char46]9\fR and older versions use hard coded parser function anyway that limits UNIX domain socket use\[char46] If you want to use arbitrary message format with older \fBrsyslogd\fR versions, then use UDP socket to localhost IP address instead\[char46]
+.IP \(bu
+\fBudp:\fIip\fB:\fIport\fB\fR, to use a UDP socket\[char46] With this method it is possible to use arbitrary message format also with older \fBrsyslogd\fR\[char46] When sending syslog messages over UDP socket extra precaution needs to be taken into account, for example, syslog daemon needs to be configured to listen on the specified UDP port, accidental iptables rules could be interfering with local syslog traffic and there are some security considerations that apply to UDP sockets, but do not apply to UNIX domain sockets\[char46]
+.IP \(bu
+\fBnull\fR, to discard all messages logged to syslog\[char46]
+.RE
+.IP
+The default is taken from the \fBOVS_SYSLOG_METHOD\fR environment variable; if it is unset, the default is \fBlibc\fR\[char46]
+.SH "TABLE FORMATTING OPTIONS"
+These options control the format of output from the \fBlist\fR and \fBfind\fR commands\[char46]
+.RS
+.TP
+\fB\-f\fR \fIformat\fR
+.TQ .5in
+\fB\-\-format=\fR\fIformat\fR
+Sets the type of table formatting\[char46] The following types of \fIformat\fR are available:
+.RS
+.TP
+\fBtable\fR
+2-D text tables with aligned columns\[char46]
+.TP
+\fBlist\fR (default)
+A list with one column per line and rows separated by a blank line\[char46]
+.TP
+\fBhtml\fR
+HTML tables\[char46]
+.TP
+\fBcsv\fR
+Comma-separated values as defined in RFC 4180\[char46]
+.TP
+\fBjson\fR
+JSON format as defined in RFC 4627\[char46] The output is a sequence of JSON objects, each of which corresponds to one table\[char46] Each JSON object has the following members with the noted values:
+.RS
+.TP
+\fBcaption\fR
+The table\(cqs caption\[char46] This member is omitted if the table has no caption\[char46]
+.TP
+\fBheadings\fR
+An array with one element per table column\[char46] Each array element is a string giving the corresponding column\(cqs heading\[char46]
+.TP
+\fBdata\fR
+An array with one element per table row\[char46] Each element is also an array with one element per table column\[char46] The elements of this second-level array are the cells that constitute the table\[char46] Cells that represent OVSDB data or data types are expressed in the format described in the OVSDB specification; other cells are simply expressed as text strings\[char46]
+.RE
+.RE
+.TP
+\fB\-d\fR \fIformat\fR
+.TQ .5in
+\fB\-\-data=\fR\fIformat\fR
+Sets the formatting for cells within output tables unless the table format is set to \fBjson\fR, in which case \fBjson\fR formatting is always used when formatting cells\[char46] The following types of \fIformat\fR are available:
+.RS
+.TP
+\fBstring\fR (default)
+The simple format described in the \fBDatabase Values\fR section of \fBovs\-vsctl\fR(8)\[char46]
+.TP
+\fBbare\fR
+The simple format with punctuation stripped off: \fB[]\fR and \fB{}\fR are omitted around sets, maps, and empty columns, items within sets and maps are space-separated, and strings are never quoted\[char46] This format may be easier for scripts to parse\[char46]
+.TP
+\fBjson\fR
+The RFC 4627 JSON format as described above\[char46]
+.RE
+.TP
+\fB\-\-no\-headings\fR
+This option suppresses the heading row that otherwise appears in the first row of table output\[char46]
+.TP
+\fB\-\-pretty\fR
+By default, JSON in output is printed as compactly as possible\[char46] This option causes JSON in output to be printed in a more readable fashion\[char46] Members of objects and elements of arrays are printed one per line, with indentation\[char46]
+.IP
+This option does not affect JSON in tables, which is always printed compactly\[char46]
+.TP
+\fB\-\-bare\fR
+Equivalent to \fB\-\-format=list \-\-data=bare \-\-no\-headings\fR\[char46]
+.RE
+.SS "PKI Options"
+.PP
+.PP
+PKI configuration is required to use SSL for the connection to the database\[char46]
+.RS
+.TP
+\fB\-p\fR \fIprivkey\[char46]pem\fR
+.TQ .5in
+\fB\-\-private\-key=\fR\fIprivkey\[char46]pem\fR
+Specifies a PEM file containing the private key used as identity for outgoing SSL connections\[char46]
+.TP
+\fB\-c\fR \fIcert\[char46]pem\fR
+.TQ .5in
+\fB\-\-certificate=\fR\fIcert\[char46]pem\fR
+Specifies a PEM file containing a certificate that certifies the private key specified on \fB\-p\fR or \fB\-\-private\-key\fR to be trustworthy\[char46] The certificate must be signed by the certificate authority (CA) that the peer in SSL connections will use to verify it\[char46]
+.TP
+\fB\-C\fR \fIcacert\[char46]pem\fR
+.TQ .5in
+\fB\-\-ca\-cert=\fR\fIcacert\[char46]pem\fR
+Specifies a PEM file containing the CA certificate for verifying certificates presented to this program by SSL peers\[char46] (This may be the same certificate that SSL peers use to verify the certificate specified on \fB\-c\fR or \fB\-\-certificate\fR, or it may be a different one, depending on the PKI design in use\[char46])
+.TP
+\fB\-C none\fR
+.TQ .5in
+\fB\-\-ca\-cert=none\fR
+Disables verification of certificates presented by SSL peers\[char46] This introduces a security risk, because it means that certificates cannot be verified to be those of known trusted hosts\[char46]
+.RE
+.RS
+.TP
+\fB\-\-bootstrap\-ca\-cert=\fR\fIcacert\[char46]pem\fR
+When \fIcacert\[char46]pem\fR exists, this option has the same effect as \fB\-C\fR or \fB\-\-ca\-cert\fR\[char46] If it does not exist, then the executable will attempt to obtain the CA certificate from the SSL peer on its first SSL connection and save it to the named PEM file\[char46] If it is successful, it will immediately drop the connection and reconnect, and from then on all SSL connections must be authenticated by a certificate signed by the CA certificate thus obtained\[char46]
+.IP
+This option exposes the SSL connection to a man-in-the-middle attack obtaining the initial CA certificate, but it may be useful for bootstrapping\[char46]
+.IP
+This option is only useful if the SSL peer sends its CA certificate as part of the SSL certificate chain\[char46] The SSL protocol does not require the server to send the CA certificate\[char46]
+.IP
+This option is mutually exclusive with \fB\-C\fR and \fB\-\-ca\-cert\fR\[char46]
+.RE
+.SS "Other Options"
+.TP
+\fB\-h\fR
+.TQ .5in
+\fB\-\-help\fR
+Prints a brief help message to the console\[char46]
+.TP
+\fB\-V\fR
+.TQ .5in
+\fB\-\-version\fR
+Prints version information to the console\[char46]
diff --git a/support/dist-docs-branch-23.06/ovn-ic-nbctl.8.html b/support/dist-docs-branch-23.06/ovn-ic-nbctl.8.html
new file mode 100644
index 00000000..1145f1b2
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-ic-nbctl.8.html
@@ -0,0 +1,639 @@
+<html><head><meta charset="UTF-8"></head><body><pre>
+<u>o</u><u>v</u><u>n</u><u>-</u><u>i</u><u>c</u><u>-</u><u>n</u><u>b</u><u>c</u><u>t</u><u>l</u>(8)                   OVN Manual                   <u>o</u><u>v</u><u>n</u><u>-</u><u>i</u><u>c</u><u>-</u><u>n</u><u>b</u><u>c</u><u>t</u><u>l</u>(8)
+
+<b>N</b><b>A</b><b>M</b><b>E</b>
+       ovn-ic-nbctl  - Open Virtual Network interconnection northbound db man‐
+       agement utility
+
+<b>S</b><b>Y</b><b>N</b><b>O</b><b>P</b><b>S</b><b>I</b><b>S</b>
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b> [<u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u>] <u>c</u><u>o</u><u>m</u><u>m</u><u>a</u><u>n</u><u>d</u> [<u>a</u><u>r</u><u>g</u>...]
+
+<b>D</b><b>E</b><b>S</b><b>C</b><b>R</b><b>I</b><b>P</b><b>T</b><b>I</b><b>O</b><b>N</b>
+       This utility can be used to manage the OVN  interconnection  northbound
+       database.
+
+<b>G</b><b>E</b><b>N</b><b>E</b><b>R</b><b>A</b><b>L</b> <b>C</b><b>O</b><b>M</b><b>M</b><b>A</b><b>N</b><b>D</b><b>S</b>
+       <b>i</b><b>n</b><b>i</b><b>t</b>   Initializes  the  database,  if it is empty. If the database has
+              already been initialized, this command has no effect.
+
+       <b>s</b><b>h</b><b>o</b><b>w</b>   Prints a brief overview of the database contents.
+
+<b>T</b><b>R</b><b>A</b><b>N</b><b>S</b><b>I</b><b>T</b> <b>S</b><b>W</b><b>I</b><b>T</b><b>C</b><b>H</b> <b>C</b><b>O</b><b>M</b><b>M</b><b>A</b><b>N</b><b>D</b><b>S</b>
+       [<b>-</b><b>-</b><b>m</b><b>a</b><b>y</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b>] <b>t</b><b>s</b><b>-</b><b>a</b><b>d</b><b>d</b> <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u>
+              Creates a new transit switch named <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u>.
+
+              Transit switch names must be unique. Adding  a  duplicated  name
+              results in error. With <b>-</b><b>-</b><b>m</b><b>a</b><b>y</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b>, adding a duplicate name suc‐
+              ceeds but does not create a new transit switch.
+
+       [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] <b>t</b><b>s</b><b>-</b><b>d</b><b>e</b><b>l</b> <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u>
+              Deletes  <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u>. It is an error if <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u> does not exist, unless
+              <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b> is specified.
+
+       <b>t</b><b>s</b><b>-</b><b>l</b><b>i</b><b>s</b><b>t</b>
+              Lists all existing switches on standard output, one per line.
+
+<b>D</b><b>A</b><b>T</b><b>A</b><b>B</b><b>A</b><b>S</b><b>E</b> <b>C</b><b>O</b><b>M</b><b>M</b><b>A</b><b>N</b><b>D</b><b>S</b>
+       These commands query and modify the contents of <b>o</b><b>v</b><b>s</b><b>d</b><b>b</b> tables. They  are
+       a slight abstraction of the <b>o</b><b>v</b><b>s</b><b>d</b><b>b</b> interface and as such they operate at
+       a lower level than other <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b> commands.
+
+       <u>I</u><u>d</u><u>e</u><u>n</u><u>t</u><u>i</u><u>f</u><u>y</u><u>i</u><u>n</u><u>g</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u><u>s</u><u>,</u> <u>R</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u><u>s</u><u>,</u> <u>a</u><u>n</u><u>d</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u>
+
+       Each of these commands has a <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> parameter to identify a table within
+       the database. Many of them also take a <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> parameter that identifies
+       a  particular  record  within  a table. The <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> parameter may be the
+       UUID for a record, which may be abbreviated to its first  4  (or  more)
+       hex  digits,  as  long  as that is unique. Many tables offer additional
+       ways to identify records. Some commands  also  take  <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>  parameters
+       that identify a particular field within the records in a table.
+
+       For a list of tables and their columns, see <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b><b>-</b><b>n</b><b>b</b>(5) or see the ta‐
+       ble listing from the <b>-</b><b>-</b><b>h</b><b>e</b><b>l</b><b>p</b> option.
+
+       Record names must be specified in full and with correct capitalization,
+       except  that  UUIDs  may  be abbreviated to their first 4 (or more) hex
+       digits, as long as that is unique within the table. Names of tables and
+       columns are not case-sensitive, and <b>-</b> and <b>_</b>  are  treated  interchange‐
+       ably.  Unique  abbreviations  of table and column names are acceptable,
+       e.g. <b>t</b> or <b>t</b><b>r</b><b>a</b><b>n</b><b>s</b><b>i</b><b>t</b> is sufficient to identify the <b>T</b><b>r</b><b>a</b><b>n</b><b>s</b><b>i</b><b>t</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b> table.
+
+       <u>D</u><u>a</u><u>t</u><u>a</u><u>b</u><u>a</u><u>s</u><u>e</u> <u>V</u><u>a</u><u>l</u><u>u</u><u>e</u><u>s</u>
+
+       Each column in the database accepts a fixed type of data. The currently
+       defined basic types, and their representations, are:
+
+              integer
+                     A decimal integer in the range -2**63 to 2**63-1,  inclu‐
+                     sive.
+
+              real   A floating-point number.
+
+              Boolean
+                     True or false, written <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>, respectively.
+
+              string An  arbitrary  Unicode string, except that null bytes are
+                     not allowed. Quotes are optional for  most  strings  that
+                     begin  with  an  English letter or underscore and consist
+                     only of letters, underscores, hyphens, and periods.  How‐
+                     ever, <b>t</b><b>r</b><b>u</b><b>e</b> and <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b> and strings that match the syntax of
+                     UUIDs  (see  below)  must be enclosed in double quotes to
+                     distinguish them from  other  basic  types.  When  double
+                     quotes  are  used, the syntax is that of strings in JSON,
+                     e.g. backslashes may be used to  escape  special  charac‐
+                     ters.  The  empty string must be represented as a pair of
+                     double quotes (<b>"</b><b>"</b>).
+
+              UUID   Either a universally unique identifier in  the  style  of
+                     RFC  4122,  e.g. <b>f</b><b>8</b><b>1</b><b>d</b><b>4</b><b>f</b><b>a</b><b>e</b><b>-</b><b>7</b><b>d</b><b>e</b><b>c</b><b>-</b><b>1</b><b>1</b><b>d</b><b>0</b><b>-</b><b>a</b><b>7</b><b>6</b><b>5</b><b>-</b><b>0</b><b>0</b><b>a</b><b>0</b><b>c</b><b>9</b><b>1</b><b>e</b><b>6</b><b>b</b><b>f</b><b>6</b>, or
+                     an <b>@</b><u>n</u><u>a</u><u>m</u><u>e</u> defined by a <b>g</b><b>e</b><b>t</b> or <b>c</b><b>r</b><b>e</b><b>a</b><b>t</b><b>e</b>  command  within  the
+                     same <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>c</b><b>t</b><b>l</b> invocation.
+
+       Multiple values in a single column may be separated by spaces or a sin‐
+       gle  comma.  When  multiple  values are present, duplicates are not al‐
+       lowed, and order is not important. Conversely,  some  database  columns
+       can have an empty set of values, represented as <b>[</b><b>]</b>, and square brackets
+       may optionally enclose other non-empty sets or single values as well.
+
+       A  few  database columns are ``maps’’ of key-value pairs, where the key
+       and the value are each some fixed database type. These are specified in
+       the form <u>k</u><u>e</u><u>y</u><b>=</b><u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>, where <u>k</u><u>e</u><u>y</u> and <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u> follow the syntax for the  col‐
+       umn’s  key  type  and value type, respectively. When multiple pairs are
+       present (separated by spaces or a comma), duplicate keys  are  not  al‐
+       lowed,  and  again the order is not important. Duplicate values are al‐
+       lowed. An empty map is represented as <b>{</b><b>}</b>. Curly braces  may  optionally
+       enclose  non-empty  maps  as  well (but use quotes to prevent the shell
+       from expanding <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>-</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>=</b><b>{</b><b>0</b><b>=</b><b>x</b><b>,</b><b>1</b><b>=</b><b>y</b><b>}</b> into <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>-</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>=</b><b>0</b><b>=</b><b>x</b>  <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>-</b><b>c</b><b>o</b><b>n</b>‐‐
+       <b>f</b><b>i</b><b>g</b><b>=</b><b>1</b><b>=</b><b>y</b>, which may not have the desired effect).
+
+       <u>D</u><u>a</u><u>t</u><u>a</u><u>b</u><u>a</u><u>s</u><u>e</u> <u>C</u><u>o</u><u>m</u><u>m</u><u>a</u><u>n</u><u>d</u> <u>S</u><u>y</u><u>n</u><u>t</u><u>a</u><u>x</u>
+
+              [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] [<b>-</b><b>-</b><b>c</b><b>o</b><b>l</b><b>u</b><b>m</b><b>n</b><b>s</b><b>=</b><u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>,</b><u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>]...] <b>l</b><b>i</b><b>s</b><b>t</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>
+              [<u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>]...
+                     Lists  the  data  in each specified <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>. If no records
+                     are specified, lists all the records in <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>.
+
+                     If <b>-</b><b>-</b><b>c</b><b>o</b><b>l</b><b>u</b><b>m</b><b>n</b><b>s</b> is specified, only the requested columns are
+                     listed, in the specified order.  Otherwise,  all  columns
+                     are listed, in alphabetical order by column name.
+
+                     Without  <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>,  it  is  an  error if any specified
+                     <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> does not exist. With <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>, the command  ig‐
+                     nores  any  <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> that does not exist, without producing
+                     any output.
+
+              [<b>-</b><b>-</b><b>c</b><b>o</b><b>l</b><b>u</b><b>m</b><b>n</b><b>s</b><b>=</b><u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>,</b><u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>]...] <b>f</b><b>i</b><b>n</b><b>d</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> [<u>c</u><u>o</u><u>l</u><u>�</u>��
+              <u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>]<b>=</b><u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>]...
+                     Lists the data in  each  record  in  <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>  whose  <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>
+                     equals  <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>  or, if <u>k</u><u>e</u><u>y</u> is specified, whose <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> con‐
+                     tains a <u>k</u><u>e</u><u>y</u> with the specified <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>. The following oper‐
+                     ators may be used where <b>=</b> is written in the  syntax  sum‐
+                     mary:
+
+                     <b>=</b> <b>!</b><b>=</b> <lt;<lt; >gt;>gt; <lt;<lt;<b>=</b> >gt;>gt;<b>=</b>
+                            Selects records in which <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>] equals, does
+                            not  equal, is less than, is greater than, is less
+                            than or equal to, or is greater than or  equal  to
+                            <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>, respectively.
+
+                            Consider  <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>]  and  <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u> as sets of ele‐
+                            ments. Identical sets are considered equal. Other‐
+                            wise, if the sets have different numbers  of  ele‐
+                            ments,  then the set with more elements is consid‐
+                            ered to be larger. Otherwise, consider  a  element
+                            from each set pairwise, in increasing order within
+                            each  set.  The first pair that differs determines
+                            the result. (For a column that contains  key-value
+                            pairs, first all the keys are compared, and values
+                            are  considered only if the two sets contain iden‐
+                            tical keys.)
+
+                     <b>{</b><b>=</b><b>}</b> <b>{</b><b>!</b><b>=</b><b>}</b>
+                            Test for set equality or inequality, respectively.
+
+                     <b>{</b><lt;<lt;<b>=</b><b>}</b>   Selects records in which <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>] is a  subset
+                            of  <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>. For example, <b>f</b><b>l</b><b>o</b><b>o</b><b>d</b><b>-</b><b>v</b><b>l</b><b>a</b><b>n</b><b>s</b><b>{</b><lt;<lt;<b>=</b><b>}</b><b>1</b><b>,</b><b>2</b> selects
+                            records in which the  <b>f</b><b>l</b><b>o</b><b>o</b><b>d</b><b>-</b><b>v</b><b>l</b><b>a</b><b>n</b><b>s</b>  column  is  the
+                            empty set or contains 1 or 2 or both.
+
+                     <b>{</b><lt;<lt;<b>}</b>    Selects  records in which <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>] is a proper
+                            subset of <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>.  For  example,  <b>f</b><b>l</b><b>o</b><b>o</b><b>d</b><b>-</b><b>v</b><b>l</b><b>a</b><b>n</b><b>s</b><b>{</b><lt;<lt;<b>}</b><b>1</b><b>,</b><b>2</b>
+                            selects records in which the <b>f</b><b>l</b><b>o</b><b>o</b><b>d</b><b>-</b><b>v</b><b>l</b><b>a</b><b>n</b><b>s</b> column is
+                            the empty set or contains 1 or 2 but not both.
+
+                     <b>{</b>>gt;>gt;<b>=</b><b>}</b> <b>{</b>>gt;>gt;<b>}</b>
+                            Same  as  <b>{</b><lt;<lt;<b>=</b><b>}</b>  and <b>{</b><lt;<lt;<b>}</b>, respectively, except that
+                            the  relationship  is   reversed.   For   example,
+                            <b>f</b><b>l</b><b>o</b><b>o</b><b>d</b><b>-</b><b>v</b><b>l</b><b>a</b><b>n</b><b>s</b><b>{</b>>gt;>gt;<b>=</b><b>}</b><b>1</b><b>,</b><b>2</b>  selects  records  in which the
+                            <b>f</b><b>l</b><b>o</b><b>o</b><b>d</b><b>-</b><b>v</b><b>l</b><b>a</b><b>n</b><b>s</b> column contains both 1 and 2.
+
+                     The  following  operators  are  available  only  in  Open
+                     vSwitch 2.16 and later:
+
+                     <b>{</b><b>i</b><b>n</b><b>}</b>   Selects  records  in  which  every element in <u>c</u><u>o</u><u>l</u><u>�</u>��
+                            <u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>] is also in <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>. (This is the  same  as
+                            <b>{</b><lt;<lt;<b>=</b><b>}</b>.)
+
+                     <b>{</b><b>n</b><b>o</b><b>t</b><b>-</b><b>i</b><b>n</b><b>}</b>
+                            Selects  records  in  which  every element in <u>c</u><u>o</u><u>l</u><u>�</u>��
+                            <u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>] is not in <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>.
+
+                     For arithmetic operators (<b>=</b> <b>!</b><b>=</b> <lt;<lt; >gt;>gt; <lt;<lt;<b>=</b> >gt;>gt;<b>=</b>),  when  <u>k</u><u>e</u><u>y</u>  is
+                     specified  but a particular record’s <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> does not con‐
+                     tain <u>k</u><u>e</u><u>y</u>, the record is always omitted from the  results.
+                     Thus,   the   condition   <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>-</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>:</b><b>m</b><b>t</b><b>u</b><b>!</b><b>=</b><b>1</b><b>5</b><b>0</b><b>0</b>  matches
+                     records that have a <b>m</b><b>t</b><b>u</b> key whose value is not 1500,  but
+                     not those that lack an <b>m</b><b>t</b><b>u</b> key.
+
+                     For  the  set operators, when <u>k</u><u>e</u><u>y</u> is specified but a par‐
+                     ticular record’s <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> does not contain <u>k</u><u>e</u><u>y</u>, the compar‐
+                     ison is done against an empty set.  Thus,  the  condition
+                     <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>-</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>:</b><b>m</b><b>t</b><b>u</b><b>{</b><b>!</b><b>=</b><b>}</b><b>1</b><b>5</b><b>0</b><b>0</b>  matches records that have a <b>m</b><b>t</b><b>u</b>
+                     key whose value is not 1500 and those that  lack  an  <b>m</b><b>t</b><b>u</b>
+                     key.
+
+                     Don’t  forget to escape <lt;<lt; or >gt;>gt; from interpretation by the
+                     shell.
+
+                     If <b>-</b><b>-</b><b>c</b><b>o</b><b>l</b><b>u</b><b>m</b><b>n</b><b>s</b> is specified, only the requested columns are
+                     listed, in the specified order. Otherwise all columns are
+                     listed, in alphabetical order by column name.
+
+                     The UUIDs shown for rows created in  the  same  <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>c</b><b>t</b><b>l</b>
+                     invocation will be wrong.
+
+              [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] [<b>-</b><b>-</b><b>i</b><b>d</b><b>=</b><b>@</b><u>n</u><u>a</u><u>m</u><u>e</u>] <b>g</b><b>e</b><b>t</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> [<u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>]]...
+                     Prints  the  value  of each specified <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> in the given
+                     <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> in <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>. For map columns, a <u>k</u><u>e</u><u>y</u> may optionally be
+                     specified, in which case the value associated with <u>k</u><u>e</u><u>y</u> in
+                     the column is printed, instead of the entire map.
+
+                     Without <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>, it is an error if  <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>  does  not
+                     exist  or  <u>k</u><u>e</u><u>y</u>  is  specified,  if  <u>k</u><u>e</u><u>y</u> does not exist in
+                     <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>. With <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>, a missing <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> yields no out‐
+                     put and a missing <u>k</u><u>e</u><u>y</u> prints a blank line.
+
+                     If <b>@</b><u>n</u><u>a</u><u>m</u><u>e</u> is specified, then the UUID for  <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>  may  be
+                     referred  to by that name later in the same <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>c</b><b>t</b><b>l</b> in‐
+                     vocation in contexts where a UUID is expected.
+
+                     Both <b>-</b><b>-</b><b>i</b><b>d</b> and the <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> arguments are optional, but usu‐
+                     ally at least one or the other should  be  specified.  If
+                     both are omitted, then <b>g</b><b>e</b><b>t</b> has no effect except to verify
+                     that <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> exists in <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>.
+
+                     <b>-</b><b>-</b><b>i</b><b>d</b> and <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b> cannot be used together.
+
+              [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] <b>s</b><b>e</b><b>t</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>]<b>=</b><u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>...
+                     Sets  the  value  of  each  specified <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> in the given
+                     <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> in <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> to <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>. For map columns, a <u>k</u><u>e</u><u>y</u> may  op‐
+                     tionally be specified, in which case the value associated
+                     with <u>k</u><u>e</u><u>y</u> in that column is changed (or added, if none ex‐
+                     ists), instead of the entire map.
+
+                     Without  <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>,  it  is an error if <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> does not
+                     exist. With <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>, this  command  does  nothing  if
+                     <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> does not exist.
+
+              [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] <b>a</b><b>d</b><b>d</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> [<u>k</u><u>e</u><u>y</u><b>=</b>]<u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>...
+                     Adds  the  specified value or key-value pair to <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> in
+                     <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> in <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>. If <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> is a  map,  then  <u>k</u><u>e</u><u>y</u>  is  re‐
+                     quired, otherwise it is prohibited. If <u>k</u><u>e</u><u>y</u> already exists
+                     in  a  map column, then the current <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u> is not replaced
+                     (use the <b>s</b><b>e</b><b>t</b> command to replace an existing value).
+
+                     Without <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>, it is an error if  <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>  does  not
+                     exist.  With  <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>,  this  command does nothing if
+                     <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> does not exist.
+
+              [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] <b>r</b><b>e</b><b>m</b><b>o</b><b>v</b><b>e</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>...
+
+                     [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] <b>r</b><b>e</b><b>m</b><b>o</b><b>v</b><b>e</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> <u>k</u><u>e</u><u>y</u>...
+
+                     [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] <b>r</b><b>e</b><b>m</b><b>o</b><b>v</b><b>e</b>  <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>  <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>  <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>  <u>k</u><u>e</u><u>y</u><b>=</b><u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>...
+                     Removes the specified values or key-value pairs from <u>c</u><u>o</u><u>l</u><u>�</u>��
+                     <u>u</u><u>m</u><u>n</u> in <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> in <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>. The first form applies to columns
+                     that  are  not maps: each specified <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u> is removed from
+                     the column. The second  and  third  forms  apply  to  map
+                     columns:  if  only a <u>k</u><u>e</u><u>y</u> is specified, then any key-value
+                     pair with the given <u>k</u><u>e</u><u>y</u> is  removed,  regardless  of  its
+                     value; if a <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u> is given then a pair is removed only if
+                     both key and value match.
+
+                     It  is  not  an  error if the column does not contain the
+                     specified key or value or pair.
+
+                     Without <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>, it is an error if  <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>  does  not
+                     exist.  With  <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>,  this  command does nothing if
+                     <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> does not exist.
+
+              [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] <b>c</b><b>l</b><b>e</b><b>a</b><b>r</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>...
+                     Sets each <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> in <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> in <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> to the empty  set  or
+                     empty  map,  as appropriate. This command applies only to
+                     columns that are allowed to be empty.
+
+                     Without <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>, it is an error if  <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>  does  not
+                     exist.  With  <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>,  this  command does nothing if
+                     <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> does not exist.
+
+              [<b>-</b><b>-</b><b>i</b><b>d</b><b>=</b><b>(</b><b>@</b><u>n</u><u>a</u><u>m</u><u>e</u>|<u>u</u><u>u</u><u>i</u><u>d</u>)] <b>c</b><b>r</b><b>e</b><b>a</b><b>t</b><b>e</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>]<b>=</b><u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>...
+                     Creates a new record in <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> and sets the initial values
+                     of each <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>. Columns not explicitly set  will  receive
+                     their default values. Outputs the UUID of the new row.
+
+                     If  <b>@</b><u>n</u><u>a</u><u>m</u><u>e</u> is specified, then the UUID for the new row may
+                     be referred to by that name elsewhere in the  same  <b>\</b><b>*</b><b>(</b><b>P</b><b>N</b>
+                     invocation  in  contexts  where  a UUID is expected. Such
+                     references may precede or follow the <b>c</b><b>r</b><b>e</b><b>a</b><b>t</b><b>e</b> command.
+
+                     If a valid <u>u</u><u>u</u><u>i</u><u>d</u> is specified, then it is used as the UUID
+                     of the new row.
+
+                     Caution (ovs-vsctl as example)
+                            Records in the Open vSwitch database are  signifi‐
+                            cant only when they can be reached directly or in‐
+                            directly  from  the <b>O</b><b>p</b><b>e</b><b>n</b><b>_</b><b>v</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b> table. Except for
+                            records in the <b>Q</b><b>o</b><b>S</b> or <b>Q</b><b>u</b><b>e</b><b>u</b><b>e</b> tables,  records  that
+                            are  not reachable from the <b>O</b><b>p</b><b>e</b><b>n</b><b>_</b><b>v</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b> table are
+                            automatically  deleted  from  the  database.  This
+                            deletion  happens immediately, without waiting for
+                            additional <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>c</b><b>t</b><b>l</b> commands  or  other  database
+                            activity. Thus, a <b>c</b><b>r</b><b>e</b><b>a</b><b>t</b><b>e</b> command must generally be
+                            accompanied by additional commands <u>w</u><u>i</u><u>t</u><u>h</u><u>i</u><u>n</u> <u>t</u><u>h</u><u>e</u> <u>s</u><u>a</u><u>m</u><u>e</u>
+                            <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>c</b><b>t</b><b>l</b>  <u>i</u><u>n</u><u>v</u><u>o</u><u>c</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u> to add a chain of references
+                            to the newly created  record  from  the  top-level
+                            <b>O</b><b>p</b><b>e</b><b>n</b><b>_</b><b>v</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b>  record.  The  <b>E</b><b>X</b><b>A</b><b>M</b><b>P</b><b>L</b><b>E</b><b>S</b> section gives
+                            some examples that show how to do this.
+
+              [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] <b>d</b><b>e</b><b>s</b><b>t</b><b>r</b><b>o</b><b>y</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>...
+                     Deletes each specified <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> from <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>. Unless <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b>‐‐
+                     <b>i</b><b>s</b><b>t</b><b>s</b> is specified, each <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>s must exist.
+
+              <b>-</b><b>-</b><b>a</b><b>l</b><b>l</b> <b>d</b><b>e</b><b>s</b><b>t</b><b>r</b><b>o</b><b>y</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>
+                     Deletes all records from the <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>.
+
+                     Caution (ovs-vsctl as example)
+                            The <b>d</b><b>e</b><b>s</b><b>t</b><b>r</b><b>o</b><b>y</b> command is only useful for records  in
+                            the  <b>Q</b><b>o</b><b>S</b>  or <b>Q</b><b>u</b><b>e</b><b>u</b><b>e</b> tables. Records in other tables
+                            are automatically deleted from the  database  when
+                            they  become unreachable from the <b>O</b><b>p</b><b>e</b><b>n</b><b>_</b><b>v</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b> ta‐
+                            ble. This means that deleting the  last  reference
+                            to  a record is sufficient for deleting the record
+                            itself. For records in these  tables,  <b>d</b><b>e</b><b>s</b><b>t</b><b>r</b><b>o</b><b>y</b>  is
+                            silently  ignored.  See the <b>E</b><b>X</b><b>A</b><b>M</b><b>P</b><b>L</b><b>E</b><b>S</b> section below
+                            for more information.
+
+              <b>w</b><b>a</b><b>i</b><b>t</b><b>-</b><b>u</b><b>n</b><b>t</b><b>i</b><b>l</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> [<u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>]<b>=</b><u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>]...
+                     Waits until <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> contains a record  named  <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>  whose
+                     <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> equals <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u> or, if <u>k</u><u>e</u><u>y</u> is specified, whose <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>
+                     contains  a  <u>k</u><u>e</u><u>y</u>  with  the specified <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>. This command
+                     supports the same operators and semantics  described  for
+                     the <b>f</b><b>i</b><b>n</b><b>d</b> command above.
+
+                     If  no  <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>]<b>=</b><u>v</u><u>a</u><u>l</u><u>u</u><u>e</u> arguments are given, this com‐
+                     mand waits only until <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> exists.  If  more  than  one
+                     such  argument  is  given, the command waits until all of
+                     them are satisfied.
+
+                     Caution (ovs-vsctl as example)
+                            Usually <b>w</b><b>a</b><b>i</b><b>t</b><b>-</b><b>u</b><b>n</b><b>t</b><b>i</b><b>l</b> should be placed at the  begin‐
+                            ning  of a set of <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>c</b><b>t</b><b>l</b> commands. For example,
+                            <b>w</b><b>a</b><b>i</b><b>t</b><b>-</b><b>u</b><b>n</b><b>t</b><b>i</b><b>l</b> <b>b</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b> <b>b</b><b>r</b><b>0</b>  <b>-</b><b>-</b>  <b>g</b><b>e</b><b>t</b>  <b>b</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b>  <b>b</b><b>r</b><b>0</b>  <b>d</b><b>a</b><b>t</b><b>a</b>‐‐
+                            <b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>i</b><b>d</b> waits until a bridge named <b>b</b><b>r</b><b>0</b> is created,
+                            then  prints  its  <b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>i</b><b>d</b> column, whereas <b>g</b><b>e</b><b>t</b>
+                            <b>b</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b> <b>b</b><b>r</b><b>0</b> <b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>i</b><b>d</b> <b>-</b><b>-</b>  <b>w</b><b>a</b><b>i</b><b>t</b><b>-</b><b>u</b><b>n</b><b>t</b><b>i</b><b>l</b>  <b>b</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b>  <b>b</b><b>r</b><b>0</b>
+                            will  abort  if  no  bridge  named <b>b</b><b>r</b><b>0</b> exists when
+                            <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>c</b><b>t</b><b>l</b> initially connects to the database.
+
+                     Consider specifying <b>-</b><b>-</b><b>t</b><b>i</b><b>m</b><b>e</b><b>o</b><b>u</b><b>t</b><b>=</b><b>0</b> along with  <b>-</b><b>-</b><b>w</b><b>a</b><b>i</b><b>t</b><b>-</b><b>u</b><b>n</b><b>t</b><b>i</b><b>l</b>,
+                     to  prevent <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>c</b><b>t</b><b>l</b> from terminating after waiting only
+                     at most 5 seconds.
+
+              <b>c</b><b>o</b><b>m</b><b>m</b><b>e</b><b>n</b><b>t</b> [<u>a</u><u>r</u><u>g</u>]...
+                     This command has no effect on behavior, but any  database
+                     log  record  created by the command will include the com‐
+                     mand and its arguments.
+
+<b>R</b><b>E</b><b>M</b><b>O</b><b>T</b><b>E</b> <b>C</b><b>O</b><b>N</b><b>N</b><b>E</b><b>C</b><b>T</b><b>I</b><b>V</b><b>I</b><b>T</b><b>Y</b> <b>C</b><b>O</b><b>M</b><b>M</b><b>A</b><b>N</b><b>D</b><b>S</b>
+       <b>g</b><b>e</b><b>t</b><b>-</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>
+              Prints the configured connection(s).
+
+       <b>d</b><b>e</b><b>l</b><b>-</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>
+              Deletes the configured connection(s).
+
+       [<b>-</b><b>-</b><b>i</b><b>n</b><b>a</b><b>c</b><b>t</b><b>i</b><b>v</b><b>i</b><b>t</b><b>y</b><b>-</b><b>p</b><b>r</b><b>o</b><b>b</b><b>e</b><b>=</b><u>m</u><u>s</u><u>e</u><u>c</u><u>s</u>] <b>s</b><b>e</b><b>t</b><b>-</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b> <u>t</u><u>a</u><u>r</u><u>g</u><u>e</u><u>t</u>...
+              Sets the configured manager target or  targets.  Use  <b>-</b><b>-</b><b>i</b><b>n</b><b>a</b><b>c</b><b>t</b><b>i</b><b>v</b>‐‐
+              <b>i</b><b>t</b><b>y</b><b>-</b><b>p</b><b>r</b><b>o</b><b>b</b><b>e</b><b>=</b><u>m</u><u>s</u><u>e</u><u>c</u><u>s</u> to override the default idle connection inactiv‐
+              ity probe time. Use 0 to disable inactivity probes.
+
+<b>S</b><b>S</b><b>L</b> <b>C</b><b>O</b><b>N</b><b>F</b><b>I</b><b>G</b><b>U</b><b>R</b><b>A</b><b>T</b><b>I</b><b>O</b><b>N</b> <b>C</b><b>O</b><b>M</b><b>M</b><b>A</b><b>N</b><b>D</b><b>S</b>
+       <b>g</b><b>e</b><b>t</b><b>-</b><b>s</b><b>s</b><b>l</b>
+              Prints the SSL configuration.
+
+       <b>d</b><b>e</b><b>l</b><b>-</b><b>s</b><b>s</b><b>l</b>
+              Deletes the current SSL configuration.
+
+       [<b>-</b><b>-</b><b>b</b><b>o</b><b>o</b><b>t</b><b>s</b><b>t</b><b>r</b><b>a</b><b>p</b>] <b>s</b><b>e</b><b>t</b><b>-</b><b>s</b><b>s</b><b>l</b> <u>p</u><u>r</u><u>i</u><u>v</u><u>a</u><u>t</u><u>e</u><u>-</u><u>k</u><u>e</u><u>y</u> <u>c</u><u>e</u><u>r</u><u>t</u><u>i</u><u>f</u><u>i</u><u>c</u><u>a</u><u>t</u><u>e</u> <u>c</u><u>a</u><u>-</u><u>c</u><u>e</u><u>r</u><u>t</u> [<u>s</u><u>s</u><u>l</u><u>-</u><u>p</u><u>r</u><u>o</u><u>t</u><u>o</u><u>c</u><u>o</u><u>l</u><u>-</u>
+       <u>l</u><u>i</u><u>s</u><u>t</u> [<u>s</u><u>s</u><u>l</u><u>-</u><u>c</u><u>i</u><u>p</u><u>h</u><u>e</u><u>r</u><u>-</u><u>l</u><u>i</u><u>s</u><u>t</u>]]
+              Sets the SSL configuration.
+
+<b>O</b><b>P</b><b>T</b><b>I</b><b>O</b><b>N</b><b>S</b>
+       <b>-</b><b>-</b><b>d</b><b>b</b> <u>d</u><u>a</u><u>t</u><u>a</u><u>b</u><u>a</u><u>s</u><u>e</u>
+              The  OVSDB database remote to contact. If the <b>O</b><b>V</b><b>N</b><b>_</b><b>I</b><b>C</b><b>_</b><b>N</b><b>B</b><b>_</b><b>D</b><b>B</b> envi‐
+              ronment variable is set, its value is used as the default.  Oth‐
+              erwise, the default is <b>u</b><b>n</b><b>i</b><b>x</b><b>:</b><b>/</b><b>o</b><b>v</b><b>n</b><b>_</b><b>i</b><b>c</b><b>_</b><b>n</b><b>b</b><b>_</b><b>d</b><b>b</b><b>.</b><b>s</b><b>o</b><b>c</b><b>k</b>, but this default
+              is  unlikely to be useful outside of single-machine OVN test en‐
+              vironments.
+
+       <b>-</b><b>-</b><b>l</b><b>e</b><b>a</b><b>d</b><b>e</b><b>r</b><b>-</b><b>o</b><b>n</b><b>l</b><b>y</b>
+       <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>l</b><b>e</b><b>a</b><b>d</b><b>e</b><b>r</b><b>-</b><b>o</b><b>n</b><b>l</b><b>y</b>
+            By default, or with <b>-</b><b>-</b><b>l</b><b>e</b><b>a</b><b>d</b><b>e</b><b>r</b><b>-</b><b>o</b><b>n</b><b>l</b><b>y</b>, when the database server  is  a
+            clustered database, <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b> will avoid servers other than the
+            cluster leader. This ensures that any data that <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b> reads
+            and  reports  is  up-to-date.  With <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>l</b><b>e</b><b>a</b><b>d</b><b>e</b><b>r</b><b>-</b><b>o</b><b>n</b><b>l</b><b>y</b>, <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b>
+            will use any server in the cluster, which means that for read-only
+            transactions it can report and act  on  stale  data  (transactions
+            that   modify   the  database  are  always  serialized  even  with
+            <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>l</b><b>e</b><b>a</b><b>d</b><b>e</b><b>r</b><b>-</b><b>o</b><b>n</b><b>l</b><b>y</b>). Refer to <b>U</b><b>n</b><b>d</b><b>e</b><b>r</b><b>s</b><b>t</b><b>a</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> <b>C</b><b>l</b><b>u</b><b>s</b><b>t</b><b>e</b><b>r</b>  <b>C</b><b>o</b><b>n</b><b>s</b><b>i</b><b>s</b><b>t</b><b>e</b><b>n</b><b>c</b><b>y</b>  in
+            <b>o</b><b>v</b><b>s</b><b>d</b><b>b</b>(7) for more information.
+
+<b>L</b><b>O</b><b>G</b><b>G</b><b>I</b><b>N</b><b>G</b> <b>O</b><b>P</b><b>T</b><b>I</b><b>O</b><b>N</b><b>S</b>
+       <b>-</b><b>v</b>[<u>s</u><u>p</u><u>e</u><u>c</u>]
+       <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>b</b><b>o</b><b>s</b><b>e</b><b>=</b>[<u>s</u><u>p</u><u>e</u><u>c</u>]
+            Sets  logging  levels.  Without  any  <u>s</u><u>p</u><u>e</u><u>c</u>, sets the log level for
+            every module and destination to <b>d</b><b>b</b><b>g</b>. Otherwise, <u>s</u><u>p</u><u>e</u><u>c</u> is a list  of
+            words separated by spaces or commas or colons, up to one from each
+            category below:
+
+            •      A  valid module name, as displayed by the <b>v</b><b>l</b><b>o</b><b>g</b><b>/</b><b>l</b><b>i</b><b>s</b><b>t</b> command
+                   on <b>o</b><b>v</b><b>s</b><b>-</b><b>a</b><b>p</b><b>p</b><b>c</b><b>t</b><b>l</b>(8), limits the log level change to the speci‐
+                   fied module.
+
+            •      <b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b>, <b>c</b><b>o</b><b>n</b><b>s</b><b>o</b><b>l</b><b>e</b>, or <b>f</b><b>i</b><b>l</b><b>e</b>, to limit the log level change  to
+                   only  to  the system log, to the console, or to a file, re‐
+                   spectively. (If <b>-</b><b>-</b><b>d</b><b>e</b><b>t</b><b>a</b><b>c</b><b>h</b> is specified,  the  daemon  closes
+                   its  standard  file  descriptors, so logging to the console
+                   will have no effect.)
+
+                   On Windows platform, <b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b> is accepted as a  word  and  is
+                   only useful along with the <b>-</b><b>-</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>-</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> option (the word
+                   has no effect otherwise).
+
+            •      <b>o</b><b>f</b><b>f</b>,  <b>e</b><b>m</b><b>e</b><b>r</b>,  <b>e</b><b>r</b><b>r</b>,  <b>w</b><b>a</b><b>r</b><b>n</b>,  <b>i</b><b>n</b><b>f</b><b>o</b>,  or <b>d</b><b>b</b><b>g</b>, to control the log
+                   level. Messages of the given severity  or  higher  will  be
+                   logged,  and  messages  of  lower severity will be filtered
+                   out. <b>o</b><b>f</b><b>f</b> filters out all messages. See <b>o</b><b>v</b><b>s</b><b>-</b><b>a</b><b>p</b><b>p</b><b>c</b><b>t</b><b>l</b>(8) for  a
+                   definition of each log level.
+
+            Case is not significant within <u>s</u><u>p</u><u>e</u><u>c</u>.
+
+            Regardless  of the log levels set for <b>f</b><b>i</b><b>l</b><b>e</b>, logging to a file will
+            not take place unless <b>-</b><b>-</b><b>l</b><b>o</b><b>g</b><b>-</b><b>f</b><b>i</b><b>l</b><b>e</b> is also specified (see below).
+
+            For compatibility with older versions of OVS, <b>a</b><b>n</b><b>y</b> is accepted as a
+            word but has no effect.
+
+       <b>-</b><b>v</b>
+       <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>b</b><b>o</b><b>s</b><b>e</b>
+            Sets the maximum logging verbosity  level,  equivalent  to  <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b>‐‐
+            <b>b</b><b>o</b><b>s</b><b>e</b><b>=</b><b>d</b><b>b</b><b>g</b>.
+
+       <b>-</b><b>v</b><b>P</b><b>A</b><b>T</b><b>T</b><b>E</b><b>R</b><b>N</b><b>:</b><u>d</u><u>e</u><u>s</u><u>t</u><u>i</u><u>n</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u><b>:</b><u>p</u><u>a</u><u>t</u><u>t</u><u>e</u><u>r</u><u>n</u>
+       <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>b</b><b>o</b><b>s</b><b>e</b><b>=</b><b>P</b><b>A</b><b>T</b><b>T</b><b>E</b><b>R</b><b>N</b><b>:</b><u>d</u><u>e</u><u>s</u><u>t</u><u>i</u><u>n</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u><b>:</b><u>p</u><u>a</u><u>t</u><u>t</u><u>e</u><u>r</u><u>n</u>
+            Sets  the log pattern for <u>d</u><u>e</u><u>s</u><u>t</u><u>i</u><u>n</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u> to <u>p</u><u>a</u><u>t</u><u>t</u><u>e</u><u>r</u><u>n</u>. Refer to <b>o</b><b>v</b><b>s</b><b>-</b><b>a</b><b>p</b>‐‐
+            <b>p</b><b>c</b><b>t</b><b>l</b>(8) for a description of the valid syntax for <u>p</u><u>a</u><u>t</u><u>t</u><u>e</u><u>r</u><u>n</u>.
+
+       <b>-</b><b>v</b><b>F</b><b>A</b><b>C</b><b>I</b><b>L</b><b>I</b><b>T</b><b>Y</b><b>:</b><u>f</u><u>a</u><u>c</u><u>i</u><u>l</u><u>i</u><u>t</u><u>y</u>
+       <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>b</b><b>o</b><b>s</b><b>e</b><b>=</b><b>F</b><b>A</b><b>C</b><b>I</b><b>L</b><b>I</b><b>T</b><b>Y</b><b>:</b><u>f</u><u>a</u><u>c</u><u>i</u><u>l</u><u>i</u><u>t</u><u>y</u>
+            Sets the RFC5424 facility of the log message. <u>f</u><u>a</u><u>c</u><u>i</u><u>l</u><u>i</u><u>t</u><u>y</u> can be  one
+            of <b>k</b><b>e</b><b>r</b><b>n</b>, <b>u</b><b>s</b><b>e</b><b>r</b>, <b>m</b><b>a</b><b>i</b><b>l</b>, <b>d</b><b>a</b><b>e</b><b>m</b><b>o</b><b>n</b>, <b>a</b><b>u</b><b>t</b><b>h</b>, <b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b>, <b>l</b><b>p</b><b>r</b>, <b>n</b><b>e</b><b>w</b><b>s</b>, <b>u</b><b>u</b><b>c</b><b>p</b>, <b>c</b><b>l</b><b>o</b><b>c</b><b>k</b>,
+            <b>f</b><b>t</b><b>p</b>,  <b>n</b><b>t</b><b>p</b>,  <b>a</b><b>u</b><b>d</b><b>i</b><b>t</b>,  <b>a</b><b>l</b><b>e</b><b>r</b><b>t</b>, <b>c</b><b>l</b><b>o</b><b>c</b><b>k</b><b>2</b>, <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>0</b>, <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>1</b>, <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>2</b>, <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>3</b>,
+            <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>4</b>, <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>5</b>, <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>6</b> or <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>7</b>. If this option is not specified,
+            <b>d</b><b>a</b><b>e</b><b>m</b><b>o</b><b>n</b> is used as the default for the local system syslog and  <b>l</b><b>o</b>‐‐
+            <b>c</b><b>a</b><b>l</b><b>0</b>  is  used  while sending a message to the target provided via
+            the <b>-</b><b>-</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>-</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> option.
+
+       <b>-</b><b>-</b><b>l</b><b>o</b><b>g</b><b>-</b><b>f</b><b>i</b><b>l</b><b>e</b>[<b>=</b><u>f</u><u>i</u><u>l</u><u>e</u>]
+            Enables logging to a file. If <u>f</u><u>i</u><u>l</u><u>e</u> is specified, then it  is  used
+            as the exact name for the log file. The default log file name used
+            if <u>f</u><u>i</u><u>l</u><u>e</u> is omitted is <b>/</b><b>u</b><b>s</b><b>r</b><b>/</b><b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>/</b><b>v</b><b>a</b><b>r</b><b>/</b><b>l</b><b>o</b><b>g</b><b>/</b><b>o</b><b>v</b><b>n</b><b>/</b><u>p</u><u>r</u><u>o</u><u>g</u><u>r</u><u>a</u><u>m</u><b>.</b><b>l</b><b>o</b><b>g</b>.
+
+       <b>-</b><b>-</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>-</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b><b>=</b><u>h</u><u>o</u><u>s</u><u>t</u><b>:</b><u>p</u><u>o</u><u>r</u><u>t</u>
+            Send  syslog messages to UDP <u>p</u><u>o</u><u>r</u><u>t</u> on <u>h</u><u>o</u><u>s</u><u>t</u>, in addition to the sys‐
+            tem syslog. The <u>h</u><u>o</u><u>s</u><u>t</u> must be a numerical IP address, not  a  host‐
+            name.
+
+       <b>-</b><b>-</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>-</b><b>m</b><b>e</b><b>t</b><b>h</b><b>o</b><b>d</b><b>=</b><u>m</u><u>e</u><u>t</u><u>h</u><u>o</u><u>d</u>
+            Specify  <u>m</u><u>e</u><u>t</u><u>h</u><u>o</u><u>d</u>  as  how  syslog messages should be sent to syslog
+            daemon. The following forms are supported:
+
+            •      <b>l</b><b>i</b><b>b</b><b>c</b>, to use the libc <b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>(</b><b>)</b> function. Downside of  using
+                   this  options  is that libc adds fixed prefix to every mes‐
+                   sage before it is actually sent to the syslog  daemon  over
+                   <b>/</b><b>d</b><b>e</b><b>v</b><b>/</b><b>l</b><b>o</b><b>g</b> UNIX domain socket.
+
+            •      <b>u</b><b>n</b><b>i</b><b>x</b><b>:</b><u>f</u><u>i</u><u>l</u><u>e</u>, to use a UNIX domain socket directly. It is pos‐
+                   sible to specify arbitrary message format with this option.
+                   However,  <b>r</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>d</b>  <b>8</b><b>.</b><b>9</b>  and  older versions use hard coded
+                   parser function anyway that limits UNIX domain socket  use.
+                   If  you  want  to  use  arbitrary message format with older
+                   <b>r</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>d</b> versions, then use UDP socket to localhost IP  ad‐
+                   dress instead.
+
+            •      <b>u</b><b>d</b><b>p</b><b>:</b><u>i</u><u>p</u><b>:</b><u>p</u><u>o</u><u>r</u><u>t</u>,  to  use  a UDP socket. With this method it is
+                   possible to use arbitrary message format  also  with  older
+                   <b>r</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>d</b>.  When sending syslog messages over UDP socket ex‐
+                   tra precaution needs to be taken into account, for example,
+                   syslog daemon needs to be configured to listen on the spec‐
+                   ified UDP port, accidental iptables rules could  be  inter‐
+                   fering  with  local syslog traffic and there are some secu‐
+                   rity considerations that apply to UDP sockets, but  do  not
+                   apply to UNIX domain sockets.
+
+            •      <b>n</b><b>u</b><b>l</b><b>l</b>, to discard all messages logged to syslog.
+
+            The  default is taken from the <b>O</b><b>V</b><b>S</b><b>_</b><b>S</b><b>Y</b><b>S</b><b>L</b><b>O</b><b>G</b><b>_</b><b>M</b><b>E</b><b>T</b><b>H</b><b>O</b><b>D</b> environment vari‐
+            able; if it is unset, the default is <b>l</b><b>i</b><b>b</b><b>c</b>.
+
+<b>T</b><b>A</b><b>B</b><b>L</b><b>E</b> <b>F</b><b>O</b><b>R</b><b>M</b><b>A</b><b>T</b><b>T</b><b>I</b><b>N</b><b>G</b> <b>O</b><b>P</b><b>T</b><b>I</b><b>O</b><b>N</b><b>S</b>
+       These options control the format of output from the <b>l</b><b>i</b><b>s</b><b>t</b> and <b>f</b><b>i</b><b>n</b><b>d</b>  com‐
+       mands.
+
+              <b>-</b><b>f</b> <u>f</u><u>o</u><u>r</u><u>m</u><u>a</u><u>t</u>
+              <b>-</b><b>-</b><b>f</b><b>o</b><b>r</b><b>m</b><b>a</b><b>t</b><b>=</b><u>f</u><u>o</u><u>r</u><u>m</u><u>a</u><u>t</u>
+                   Sets  the  type of table formatting. The following types of
+                   <u>f</u><u>o</u><u>r</u><u>m</u><u>a</u><u>t</u> are available:
+
+                   <b>t</b><b>a</b><b>b</b><b>l</b><b>e</b>  2-D text tables with aligned columns.
+
+                   <b>l</b><b>i</b><b>s</b><b>t</b> (default)
+                          A list with one column per line and  rows  separated
+                          by a blank line.
+
+                   <b>h</b><b>t</b><b>m</b><b>l</b>   HTML tables.
+
+                   <b>c</b><b>s</b><b>v</b>    Comma-separated values as defined in RFC 4180.
+
+                   <b>j</b><b>s</b><b>o</b><b>n</b>   JSON  format as defined in RFC 4627. The output is a
+                          sequence of JSON objects, each of which  corresponds
+                          to  one  table.  Each  JSON object has the following
+                          members with the noted values:
+
+                          <b>c</b><b>a</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b>
+                                 The table’s caption. This member  is  omitted
+                                 if the table has no caption.
+
+                          <b>h</b><b>e</b><b>a</b><b>d</b><b>i</b><b>n</b><b>g</b><b>s</b>
+                                 An  array  with one element per table column.
+                                 Each array element is  a  string  giving  the
+                                 corresponding column’s heading.
+
+                          <b>d</b><b>a</b><b>t</b><b>a</b>   An array with one element per table row. Each
+                                 element is also an array with one element per
+                                 table  column.  The  elements of this second-
+                                 level array are the cells that constitute the
+                                 table. Cells that  represent  OVSDB  data  or
+                                 data  types  are  expressed in the format de‐
+                                 scribed in  the  OVSDB  specification;  other
+                                 cells are simply expressed as text strings.
+
+              <b>-</b><b>d</b> <u>f</u><u>o</u><u>r</u><u>m</u><u>a</u><u>t</u>
+              <b>-</b><b>-</b><b>d</b><b>a</b><b>t</b><b>a</b><b>=</b><u>f</u><u>o</u><u>r</u><u>m</u><u>a</u><u>t</u>
+                   Sets  the  formatting for cells within output tables unless
+                   the table format is set to <b>j</b><b>s</b><b>o</b><b>n</b>, in which case <b>j</b><b>s</b><b>o</b><b>n</b> format‐
+                   ting is always used when formatting  cells.  The  following
+                   types of <u>f</u><u>o</u><u>r</u><u>m</u><u>a</u><u>t</u> are available:
+
+                   <b>s</b><b>t</b><b>r</b><b>i</b><b>n</b><b>g</b> (default)
+                          The  simple  format described in the <b>D</b><b>a</b><b>t</b><b>a</b><b>b</b><b>a</b><b>s</b><b>e</b> <b>V</b><b>a</b><b>l</b><b>u</b><b>e</b><b>s</b>
+                          section of <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>c</b><b>t</b><b>l</b>(8).
+
+                   <b>b</b><b>a</b><b>r</b><b>e</b>   The simple format with punctuation stripped off:  <b>[</b><b>]</b>
+                          and  <b>{</b><b>}</b>  are  omitted  around  sets, maps, and empty
+                          columns, items within sets and maps are  space-sepa‐
+                          rated, and strings are never quoted. This format may
+                          be easier for scripts to parse.
+
+                   <b>j</b><b>s</b><b>o</b><b>n</b>   The RFC 4627 JSON format as described above.
+
+              <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>h</b><b>e</b><b>a</b><b>d</b><b>i</b><b>n</b><b>g</b><b>s</b>
+                   This  option  suppresses the heading row that otherwise ap‐
+                   pears in the first row of table output.
+
+              <b>-</b><b>-</b><b>p</b><b>r</b><b>e</b><b>t</b><b>t</b><b>y</b>
+                   By default, JSON in output is printed as compactly as  pos‐
+                   sible. This option causes JSON in output to be printed in a
+                   more  readable  fashion. Members of objects and elements of
+                   arrays are printed one per line, with indentation.
+
+                   This option does not affect JSON in tables, which is always
+                   printed compactly.
+
+              <b>-</b><b>-</b><b>b</b><b>a</b><b>r</b><b>e</b>
+                   Equivalent to <b>-</b><b>-</b><b>f</b><b>o</b><b>r</b><b>m</b><b>a</b><b>t</b><b>=</b><b>l</b><b>i</b><b>s</b><b>t</b> <b>-</b><b>-</b><b>d</b><b>a</b><b>t</b><b>a</b><b>=</b><b>b</b><b>a</b><b>r</b><b>e</b> <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>h</b><b>e</b><b>a</b><b>d</b><b>i</b><b>n</b><b>g</b><b>s</b>.
+
+   <b>P</b><b>K</b><b>I</b> <b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+       PKI configuration is required to use SSL  for  the  connection  to  the
+       database.
+
+              <b>-</b><b>p</b> <u>p</u><u>r</u><u>i</u><u>v</u><u>k</u><u>e</u><u>y</u><u>.</u><u>p</u><u>e</u><u>m</u>
+              <b>-</b><b>-</b><b>p</b><b>r</b><b>i</b><b>v</b><b>a</b><b>t</b><b>e</b><b>-</b><b>k</b><b>e</b><b>y</b><b>=</b><u>p</u><u>r</u><u>i</u><u>v</u><u>k</u><u>e</u><u>y</u><u>.</u><u>p</u><u>e</u><u>m</u>
+                   Specifies  a  PEM  file  containing the private key used as
+                   identity for outgoing SSL connections.
+
+              <b>-</b><b>c</b> <u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+              <b>-</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>i</b><b>f</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b><b>=</b><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+                   Specifies a PEM file containing a certificate  that  certi‐
+                   fies the private key specified on <b>-</b><b>p</b> or <b>-</b><b>-</b><b>p</b><b>r</b><b>i</b><b>v</b><b>a</b><b>t</b><b>e</b><b>-</b><b>k</b><b>e</b><b>y</b> to be
+                   trustworthy. The certificate must be signed by the certifi‐
+                   cate  authority  (CA) that the peer in SSL connections will
+                   use to verify it.
+
+              <b>-</b><b>C</b> <u>c</u><u>a</u><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+              <b>-</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>=</b><u>c</u><u>a</u><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+                   Specifies a PEM file containing the CA certificate for ver‐
+                   ifying certificates presented to this program by SSL peers.
+                   (This may be the same certificate that  SSL  peers  use  to
+                   verify the certificate specified on <b>-</b><b>c</b> or <b>-</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>i</b><b>f</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b>, or
+                   it  may  be a different one, depending on the PKI design in
+                   use.)
+
+              <b>-</b><b>C</b> <b>n</b><b>o</b><b>n</b><b>e</b>
+              <b>-</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>=</b><b>n</b><b>o</b><b>n</b><b>e</b>
+                   Disables verification  of  certificates  presented  by  SSL
+                   peers.  This  introduces  a security risk, because it means
+                   that certificates cannot be verified to be those  of  known
+                   trusted hosts.
+
+              <b>-</b><b>-</b><b>b</b><b>o</b><b>o</b><b>t</b><b>s</b><b>t</b><b>r</b><b>a</b><b>p</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>=</b><u>c</u><u>a</u><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+                     When  <u>c</u><u>a</u><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>  exists, this option has the same effect
+                     as <b>-</b><b>C</b> or <b>-</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b>. If it does not exist, then  the  exe‐
+                     cutable  will  attempt  to obtain the CA certificate from
+                     the SSL peer on its first SSL connection and save  it  to
+                     the  named PEM file. If it is successful, it will immedi‐
+                     ately drop the connection and reconnect, and from then on
+                     all SSL connections must be authenticated by  a  certifi‐
+                     cate signed by the CA certificate thus obtained.
+
+                     This  option  exposes the SSL connection to a man-in-the-
+                     middle attack obtaining the initial CA  certificate,  but
+                     it may be useful for bootstrapping.
+
+                     This  option  is only useful if the SSL peer sends its CA
+                     certificate as part of the SSL certificate chain. The SSL
+                     protocol does not require the server to send the CA  cer‐
+                     tificate.
+
+                     This option is mutually exclusive with <b>-</b><b>C</b> and <b>-</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b>.
+
+   <b>O</b><b>t</b><b>h</b><b>e</b><b>r</b> <b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+       <b>-</b><b>h</b>
+       <b>-</b><b>-</b><b>h</b><b>e</b><b>l</b><b>p</b>
+            Prints a brief help message to the console.
+
+       <b>-</b><b>V</b>
+       <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>s</b><b>i</b><b>o</b><b>n</b>
+            Prints version information to the console.
+
+OVN 23.06.3                      ovn-ic-nbctl                  <u>o</u><u>v</u><u>n</u><u>-</u><u>i</u><u>c</u><u>-</u><u>n</u><u>b</u><u>c</u><u>t</u><u>l</u>(8)
+</pre></body></html>
diff --git a/support/dist-docs-branch-23.06/ovn-ic-nbctl.8.pdf b/support/dist-docs-branch-23.06/ovn-ic-nbctl.8.pdf
new file mode 100644
index 0000000000000000000000000000000000000000..f0b7ec2e7fd1cfffd7ce90eb27da3c604c1998a7
GIT binary patch
literal 53535
zcma&tLzF1NvM}nl?e5*SZQHhO+qP}n?%r+Nwr$(}_POi6e{v>wlvz=+GKUpkMiz;@
zuqX`!Ei)9!=v7=H6bXrht*f1pfwP63EhoOcfwMWCnG-&ZJPkgLv66tOh~mFd$j;{9
z3kyRFYYS%&X%klyYo31#;L|w#Z=S52ynu?5$iGZM0c9a^d>SWV5mgBx5gvPEQ#VHo
zXOn*sCud_j7iS*6e^WUZXL}cCQ44F6|2+Pmc7kHTr^mN5w1nd3rjs_YHFGw{XZ;sZ
zr2Dsuvxy@<ov5{evx%^Yk)5##FE5mnv!jWD4U~I!iN>bmrYMrns+#mMiN2&TeVfrP
zidJV;G7SmR^%7c&WI&(%5EzI#K=RZ#*mc<%-s==BhJSKVB@N%2$xKPv=hOLO4Bb!z
zg~J=(vs(*~)7ap88WZJDT6u3H&AWvI>uD9*`g&X|;;%siZ&DU{gf`MUuZHz(^@l^t
z8yj4I$Iwd`@k@hYLY~HQ*VxH2<)viL-sq-q&c1<0_K+j$v(KgjP@_9%(@o8ruc+;t
zCDw;4Hn?L9k?*&+3~%W&FKSs%J@x$+u>#kRTv0K}1#TMY1F2-g$_T1D?`u$ep45ph
zxvRF`6Z%3Q9Fknl)4gKWpE0GUkXoZpS>cl<9#(ZeZ;Ny(-LdIdm7_;$=jy`qJqX9?
zjxtPZ$Lz7DixW9TWgM%<j!N|vR2PxTj&s&3PrYMey#yQ05_s#$%Gj&ULh6petJmS#
zQM$v|Sqt;gfyPcho!u`-Hy1Y7&NV`8^ju$|LYyB(V>&YIo6(lCqQA*}=klI+)rV*5
zOI$z6u3eil)_S);K3#uK{&Y5ZMwy)^by5Ug&#`UwG%uK*h}_v@Xu(hDd|+Ix1Ij!J
z*=(w&MsG<VTXIG0&%UO)-P+dqYG`k3%i*tiIa<)Lic|#&H#QSeiN4TGN~l%QC)y6i
zQw0nnA8I+sbvmcCO!1;xIh3$o;iavnwW8yVb!Nrk(bewmV#Z~Fbd*QljJal1x@NZ#
z>eSVjiccQ!Ril<#a?MCIkcx=i@wRLO2C{?Go_4xl$a6huUweI8hGGkWDOznqewqXh
zyB>LR4vefDC$$jM{7F3lcZXS5d{R9+r3X&K@=sqJ1BCc=gUr>?{EDw6wdQdGwt|g|
z)pk2-Em^j;G%k2%4hVaRc$Nx!>!WY9glZvu4o3_eaxE{)wdP?Y3fXest2t>v;A?ly
zXCGPA^{g}~#}7zI(*`v59FPK#1V=KzR<e&V{By*TZ|LCV;N$ie->p}NX6M@pDAwrg
z!Wv7TN%ABu&BoK+KrhM_C?CKZ@1_0e^C;dy*6ms<^E9ct#C4CvXQf3>ByGCfj?7_C
zD@(%o#NM;dZc(%s*qC!fNI63nOe{nwkk18p_z{$n-eMVO=3oG}Vu2=09j&tkuXmY|
zt^OMjwnZ?KtXe?YA9Xca#wdRna}LPbBVlZS=uoq9yEP|2sq(GSjJ192vCy+`@$tKs
zn(>VQol0VG!v}H;4b?zKiEV*_015up0|ooS!g-??w)WmeUwp9kj5SF<klBJUWKf%X
z>5+)LnhX;X5fv)P1?TTOH;e8qJd1A0{e06=)rL<hLu#urOHsLE#2<~%*dvxhiQNQg
zd;y?<Fj1Y`j)ZGbJMh5h>?{y`IwF0)6zpNmlab<$_X5D1UfI~}6eEa^hU*>%CWJr&
znw_RZ0vghc7s_0p${DW6b%>R~Rh>Mp-KGw~A11hJ*6Uw24!t%EQ2$ULNqhXlK<ORy
zji;FRkW<XiCj&DkEcLC&)3K<;zt_nRhvxBAb)%3P>_d>lrP~eF?xyWLkn3B(T%V@*
zB5M;wic6@*7Cw7v1<fe~iptUWh$oKWQbYR$<X<*n8>y@u6|dX2ajQ$HL|iNJjpfN8
zd)`Q1WW+Ycij$wv!#on$mCY{)>Sld{zZdNhAImOYtZ(N7#zE|^&4)L%dKGw&V=u^T
zXGwS<Xzzi2Xzmz`BAq1q)hGOSa*Z{QhCT=jf~!o5b$W;uwaA+S)eO#xWi9WP*2pne
zbNEYR$S?W9K)9>{I+5^1`%-w@VTTqQT*ah9@)s9cSh6%W8r;^LiM1QG5+(Xot6wB_
z>T(>J;5=WXm#4gf9Lns&5rSm3W)b45vyx1t-jMyknp+Ua(O)u#o$%WQy!{?h&~r%6
z5v%cumk8@o+zvwwuxu30gv}yBXTHprSLzqZz}*A>a|N1WHu*tTYinIAk#}w+yHAT+
z9f+{3Ueb(C;S`%w2_-Hmz^?oRvjfA_4)<^Anm`1nN2w;yb6iJncsCbrF73Oj*Ud=?
zV!i+~1M&wyj3V5`l+s_&0bHLuS6%`)68S!4dmI)i^7cY{pFU}<<$?Twx5Q8;e1T-F
zNc7`i$2&`xthXH{;$>T`y3iaZPuNh#?)7+3zSMjQq+Q~lK7%d#b*hqj@FooQp_02L
zewEPXc?{hbh83lm<_mY=nNJBSKIQ$lz=o-*5CUWSx$5uDX!#6L*m7p>;j}ScJ9l$n
zZK=GTXa@*<E+Q>-i(m&3Vy7Dh6Mj52+4SgFp@cuKK{~(1{RWQM66WNzXUqZadxhz6
z$`c{9ersiNYPaK9$4n|Kc}Zn5faw+A=awYb2ZL$&H#kHoM@9t61Y)r1FYN*0PvhMo
zhb=CHH)g^+H|vcFhp-(pn|1GfIJv5Xs`vguGaRqUEa;Xs4{lW{72eUn`^R29s-E;8
zw)vg{ob?m^@}^6!IsO-7#J2bp^2TI!D7AFUyI8owTnhHMvQmsN$_qkVl1S&w_P;va
zEQ*PPnf4ISC(?5oPjfiP5JNU+uheOfgy~COYSbBE>Ykz<z%=|vAViw2(afv}A5#-s
z(&i?-411iG!Zp3C_-NaDoThjSV+C17Wm=gO1pFXk5_yiEgCZhAN1F&+sok23-lI1f
zms-j^_wu{1ny;z=OMrfD!rbzT>J`fK9TlydB%-g84$)|ie^hT`4fo)%Wa08qP>ht>
zidaNrfe*L=S`%SLzEf6wxArf2lK;HI$ANDx;$xh#Ea=SN?+Z`Raga3<7e>EH@W~3u
z5!b$DHt3Ks1)n;2WjB`t>+=12QyWVicX|^pCIN=TCXiklrviS8a)u==`Q?&{a+NV+
zN$q4Vk>aD8=t9@U=o5!AnTrI@#RmtFkx4=65Qn5A(fp}g>N4s2q!bM=t*3Eif##_M
z=g9S{<`C^RMw(X#=8uD${#l+!ro1$X&RL7)R#QWv;@N@D_@fZh!&jPx<HUr!8llUq
zw#ZYS2M&ggBRZQe-;%KSx}PVVf(9$1$*C78f{=FzC3>2)yz@HnEZF2wfvn^v&9ra}
zb-dNXe3*a46`=EJuyG`R)}WgvUCL9GsuGJfl>_&yljKRpbt#dVDV18dx=|PMQ|xQb
zV+NY%m~~b2mu3#}U5W8PM6@iHK{)_thdvoe^~-^*qh{PmuyeL6KttvnV?m*_wRz{#
zVCxj~m<D4>N%Ll183Sm-mK{P6H84V0DPRxk_??P9I}{<OV{@NuY?g|9AD(MuaM}&3
zL9mght^8sFczoR{goM3*Y)G&~okWP)dX;{h;^PgGJ>D-Tc#&gtWEVtSjP8W|MCS$g
zsdL`=NofH(NXeV)0(EZzD9%<P;~22AVU%J67FG`C;o#>^=<Gf|%CBqA=_@zovjwA-
zfEJXp2$76^)I0x#4RK{eR4qD~I;O{@{=3)I$N3O2-DRR`-dk<ZQ}Mc$s*6{iT;<!H
z|2TF(Gw-6qSn=#>k<V!8V`I(Ef?%|N&x$uDlv+TOmqjFO$DMOJobVA?eD$h~C&;K1
z`0kgGZ}qEkv51o+Z4sL*9VhNYH#%(s(ycS$-RAf&I}Od8L3wbtW7#B0!8;(d4y#~3
zK*ce>9SguFba;WOioand@VhdqMoy7q6l^7~(v#eml3DM33g-g(7;4>3mC$HtW^(Gk
zI!fII$a%0`#&>(wGXMpZKe1j-k3O1LdmX4&ghA9G^`%^~14&hY7{q|xxD8vD8=ok6
zfWOFFgNGl=W-ipNORP`hlQJwd_$^+>FH{>9s8;YH2>EE>MLSp^XLk~eP5!}y9VDVB
zLxLE5#h}$7g)kb&Dl+r($ZzE!gc$&aSv_}+d`kZO=jjsM_esthfa8`xAD<!M1O5ZB
z9}-`Q>n!72SO82Ji7x}lV~ZOe`t4G*f2}kJD+{6nLYw1eIUw1=8a{udZfjVveOpVr
zp;n!u!{7pDIB53Tr0xX-v^0bmIA*y9CDEh%G~^=+1bK`$&CzXEX#1Wv>rz)@@nLTV
z3n7GEQ(9g+vvu4KV&}*_R_UkzUR%D}Q?MX6rp%nJuQc!0wiX<)ukO=+M9WIUMb+ZP
zOskXzPo8qRlFzsi4N4u-<c<pk4lfK)w~;wwHt3>o2eT5+$1WL%6imJARUqeJ*ybtT
zODb9lMg?hu$IkC{+xSH6Gh^Uex>fAq5So!c*?vfUVPe|s(JR}G40utevrGyTcCMAO
zm%qOs;hg~iBUD}m-yR2@K0XRJ=Jq$au1h=nJCg4g_+VoX-^AAVf0^=c_8;2(2Q>c~
znHU*4p#C?;@ZauX_&>pCS<}XDixuhTMz7zu@}=HXM6pf;Tbs@%0DA*$wPQL=#($zy
zTWeLvg2>_;L*Pf?rtFPx2WGeAnbScF+mn25g(?yoF3%%3qhKdKoe}Af@1%F~T0)vu
zZYP`mnTp|8!*-l+Mo!jY>HXm-3eU;gzK3_7jv>)0kqnY!H&^)j`RZ$z9x|G$0>LDq
zFZ^*?VkvuNa`D8F!`i+NoiEiC4sbBCajr-`agJSf{C!&DiIP%xdJGzSx-l3{q;hoV
z;+&2z{<g|guVVeCp&F%`disyw9Jx(|rWgujkDRPXY3|q8<73@D;8#T`8uNHY<878_
zTOv-ySWiVw1O-++B&DLQX-{f^L6?2#KDYMt;`6epQ&dyex|Cv_G1C&B{y_&pJ-~U`
zW(@Il=GWUbQzHG$sqlhSrQ2Zo`i#YlMQVLuHe>CI4!U(pHI+wN-O)pAgNnD>v4$u5
zs7e=g#uV)e=1js|^6^H~3Jdit1^UL62(z7;#Dux(U3ryh-Ry4#+hD(p17UR<*-0`x
z71i`&?`2uL*O_iri=#I+cTs(p@03M!X+V_fgAkG0(Lt(mQpiF!DWR!pj}%9AnNfWb
z;a}J0?IW8Jiv;5-TbK3ey^uy~LJe5O>t#6?N)Y^3<CQ_I;z`%enoQJoK>9UcrmTnf
z=gVP^zny=CRx;OibzZ~NO_-mvs{b%?jjB2MJ78;J>$Uc0zl@r&EZGzxI8BHE()Hmo
zx<_~Bw?mHHzGfBd04^nKK$b~lXOcL`mx8HebzdQ7pq^izAc@j#PWx`g+qg*4>fbu5
zx$JSdsD9UK4xF_>iv@L(dw7uSr_2WuQdwlD<1b#42O*D;@6CGTK<VaFM3r9<ue&sc
zxo0FT`?gjX6xHMY>@))hlv|o{gSL!|I1{Nk1%fZTQbpJ3!dA3)w*09y%|FuEEC+T|
zn2L%%iN%i%VGyp{+B#tJN78KJHUORGX`1@H6G=_Gd23Cqt}N&%_q-g=rKa*}3nW@$
zM4wh$4mZ#zm2+UAkKi4!syGBL$5%VtOa7)1joAeT$ZIIBN2cfLC)~IJV`t;Q-_;I!
zd=i+FAd4y6H?G<d4h>`RkKFX3(T$V7BcCx(9iGa)>w@}944{dK5o9m^nZ}j7FRV)K
zoyKR6R4z`y_5^Km4YOCxrpP)j1%3S+8Ije(k<te26JLGAuW(MTi>?s22tW*rUxy>e
z++3BrH8veuNdaP#@l1q$?M61QcDa5^`Sdg!crp_u4IgS0&t`ng1FM{_r2`CqMzH8K
zy8RP*i_-2G>ab9^X}RiGJ203z;Dp6Rt1g_^$^^Jl;(%G>mj!@<aPB~E7YFdB9HJ*+
zBu8X!c5sk$RoMXyv*jOGV%WAjq95#HIN88JGhMY1?_!OkPHN5A&1sd5AWI;?VCE_C
z6k46CRy>OTey4gJ)sNskYi(At4#=7@un~)sPC$vSF?cPj=;#Z2rt<j0)ehpJqv4^`
zy8R*^2nd33nwswS*blsbBY$%(tb~L>e7oJ$@KmxCI?i&lBrM5|s6RumYz@ZH3puFT
z#y@z-o{BXec>IM-(^_>h)*IsU@2kL?Q*nB{^woC}{4iD1VVmGP_zg&BI<S9l3gH$a
zM2$YI`KTaamsQ{yB~}~@6?m-NWCRrcDv2!sk%3RaAO?Ci%KQv>HR>L6?3l2YucA>C
zdWkT=Vv1Iq&li76-UgJK9FEb27BWI*2*ZKYz_N5mZcML6%9{!+swrd-ELg>f{F8qs
zWv2lpFbxeJz%Qzjp2&|nUUim^OBGg+Wd3L6u|J6+Z>cL2w2~9@9q4G#q-|kLFSTLN
z=NS+jfGs(;t&|Wpq6Yo^!ZGwGhGVWVV$rDM`!CbICP%K2X!=R4h5AU)5NM7Prgka6
z78+O^Bg;A1kG6XraY*Q)8mz(w5K^-c6KN#-I8}&$@i6Dvw%2ujWBQN>oEc{JLsJ5G
z87*NV;o{w<TfPT*<U=_UC#*16PBtJCt!W=rq~R;@`s;$ZF;pm8EFY#Zc_!cPmDW^A
zC|W-=r<Z#Xz{WR5KA<lpX3xO!s!k_~C2=yE>_t&47rXV`K1C3ae6ZYx!sczN&Ex*V
zm5%p|>&%Spu3Y06dr9`@RH1FCt0%6$R_?u*X)t8O=VrYW%zPectd2ekbw!+g;sU>+
zE-sPfjAT_r=By<GGdBy!9dTYz<oql!MeXznkZ2$$%^#UI{!s1lo*RGw$C@DW@j@2+
zxhhN+j!YA~HJCZv#|Xctzba#9rNQqK4cEmFV}WdF$aR7lf8v+6b-H_!>@I!JZl6&d
zTgrY{p<Dkdtd9kv+~3R;izy)<7jR!NAX8ALKx{@o33Q$wj?dr7<-D<!JUydWYM5_<
zZ80P$_*?E<a<B(ZD~oo6LIWcu#6A0T1<Zu$$I>_c1bL!C=_dShph<IPauYRtK@`{g
zGXWlYyJi<)%<g`FW&FqzR1;ZFL5A~1cu927nbQjwH7aL{7A}(q;{0j+M`3_Pv+dUJ
zfN-rC;J(ICyPTzrExEy86}}0uQ{$o+aP7*MwG0LqCf;r(X(*8ch{qk^Xqp16xDf#e
z9zD5zB%_1r(r~=l^bz$VE*Yx!R10|mJHJhTDD%Z#|D^)zkYP|;_^@@{km<mb>PmMS
zhF&A0MNmr%?sNAp{+6x^uQB&IEitqT*3PO6K{)*BKSkT|0qLfIEk5M}(G#nMX)H@B
znP+=b*iNE@DxG+ww1?uU>)+MDmaHPv;cjU2UAYm$LMC&+S*f6<6fdiyo&Y5LhXX0=
zCH-=%0#GV-5w*+PiG*capi4G<3xNx)8HHhoA^;Jc-9CbCcSrd31?~v0P|fSgFIB1+
zTM{$;Qu&3lgilx`bjzO{gVUX8i}o(@^ZEvC`yWcXReQ9Au}}cgh)YF}1Z&#3OS!U}
z)>bt=)*En1ts@$~R!&#IJrM$beBrl)_ob5jO+u?I@e3Xmk6YU>-T>JN_$<{vNsJlH
z^C$Q#&N2P>G)a4HgxJ^gUI%UY(&YzH@O^^Ues-k}!-9a2mwpu{+@%qI&suuBdMk0^
zKb9&zx8Tw{jJZ!ovp`2ZK>~b*9<Y+>OvdpN?P{FB8Am}-@J$~26aX$$Y9ZR%0~d?}
zQLj!O!u%nml51(frYl*$g_O2V1DVSOUF`HSOn`Vn9C5H!bDIV@U44EPgb*B6xnIg1
zWN<e-W8`yO!h@QR1y&Dy>jbv-c#l{BwI{XB2x+Z{;o7}o7`=Z(6N&9#%5KW~O0rqT
z+={jgtUYrBCL+!aAT!af3Qo{?@KC#3_z)^)vMZKCJd2*ZRJD2pCT!dqt3q2Yr$K{b
z1E@<1vCU}Y?`xgGoiwcjKir*WN^$ponC&_|F^mrt$+xpFUh@^VuhWReA6FeMDxFlt
zuA<JanlR<+(a`7Dlgi}s?W2mC%6QNH)g1jcnHtVe)D?MLP`y+uVSk9(<lmkJPM|hJ
z5}lCN<Tp=f|D8c0m=w-<XV=GIGPO0!FSiT|s4^~A0$iknW5w`IHHbAO@Hpx&@9A|M
zr}R5G;WoRa=N>f<QuWTnyxbc0O3O%uy2kqT4ca@uc_U3@3d?888UeY-@n9f7(i&F<
zw}V&qmnYHc1~Mu62{1?3<r4s;(-p_DSfH)BPSr1tJceh+$_ox={%UMK{iQ$*L>`fX
zeL;}>jxzx1%DV?QP!6F#h=qnvL|{SA%3W7?zB*>tbv@ISSw{A0XeLDn(^`k&A(>rP
z;YH)Wz*H5NI+pbbcDG6$61b&dy;iH><b<G*477x%gd65!UoG|<N)%KfBV`QEIMWP8
zSKy#gJb9C*(36DDL-PV&(HCHfH|_0?-!@lrVivg1+X3=*>2t)B-J0@O3zwvCq1ic3
zZ)I>!1(UBIE*Pddlqu;Oh62#FgnwQ@De0TO%FjcaM=vl3!0>K2&oN0ONYU9wIV3^d
z_feR70=$4LxiI%XUz22$73<LxY<rcoRVJ{y`M5TB=@jO5?)Hs4i!9KsQW|mTQSwOF
zJpHnRezKKQMS3&RVryg*@#@{}lddbYD;SvDws*0!r8H$JLw-LO!D}JVk$h~6>S^Te
zI#bdL*wFQ&7Kl3*2xDJ{Ef|dAFVBwjwhr}2BKLb!^$!y8aHj!q*@ZJ4)&|Aap6ei2
z#89+>N5&kCImgamX-G@y%r3@JIm+mq7{JNsnVZwXyR11S372M+CALIgI-DkpMmsoc
zt>IbT#SGyPOaLxP_UP-lo!Lop%ggCzqmr(L4KDkBj9<S#RYJtZ+sPnEM2%S*tU;<B
z`9US7f@vPrU{lPE_qkqPIcsyu{7Cl>9trk3z33s?`bcV$aNG6uAn|W$8a?8qcNtIW
zjTJZ0WwVhDA^aPzyV}Hz?%oPXumB!2m0VhgumjHt@{0bU6m#Em|1qSa>j^oyjMrsW
zy88iuDBzEeC?PW+3HcOfS9NVmbgD%Ch;*=i_{e9|+0nV9EE9J+apIk*7o<?41D?)3
z8RNO-*Q4qts%I}ynWVAzc}xns6wH}1Xu_z(OkrE&Rc5BnQQw6j*7bxp?3^2f`7?a4
zhkkAEa>ucAc5t+vL=+!ez>O3qxywQ9>Zj^;DmUJFAm|OVKnS)s1ccuW-GfJMuG;2U
zHz){aS>Xkk1Bm5gL|#sFNcgVIPgP>HbE)}^-3S=gK+Xra!Rv-$@QJYD0aw}v&4oo4
zC(4R^Lp62SXIh`;xb?>9zp}b4Itci57^v<8;ewY>XUhGr_NgvrZY)dY34KvYt}F|C
zbH!A(<do-A(eiLtqGkML7~$EP1-$K<v)?UtCkp^;*WL-n+$+pp0)qKOfD<4}p$Zb6
zy;b9Q{T8*}l-qy(^OzusUMm(nGr#}qO5qkX^We<crm$=MqW1TFO+Whv`24u1-g|Fx
z2$h5qg1s;yt~bbKF$b#8??kanyoZNzzuSSp5MLkNNkE>vJMIqo%X#J`_v@Yk@bk@F
z8h<b?Y?$I-DUs&1CYCP*px-loJ)G<cE47ycvQ<RtbuX390jcR(`5oZZ7|^^ZAnIda
z&@&6-Zmb-y8byJkw}OuCo&))aSoUj}Q_j)L!S{~-^{Dsj4m|x|^!^`H|Bt=d*%<zx
zy*d7?=g3I^e`z{iYi&Djj-d9eD&ebvaS;Z7gR&Z#Y)EHex^1+{B)<v1fC>u|S|aHK
z$TyQFv5i%o;dsr^x;6j^NH#KAa3;-%7&|ts@$l`w_cUGN1+fzfMDuOm4xdoN+0OcM
z6MZb^fBszq(bLJDc33(-xO%ih{yKO#nc@}>3<iTd?LR)DuD&r%`wfuL&yK`Uq6kAw
zn{2AjMvwCF=r&(v-+Q!EVFM2`sF0i{AMijKC2ZTu3$Yt~x~6uIDT+8!$b@1dUD^G)
zlewF%-ZJrQiAbS9qgdv-kBDNVn!h#R9zG4?NP3%Aac`dp%ChXPHB}a7*k{~AKemy#
zdE~UJ>VRzIgl}B$oa{X$tmq>_NECKu+SfUui7EbGh;(u7o(Zbd-US!I?Akdov47p}
zF-NcR7ZnE6Xop$R$XeA)|BJjp<11^9G|Zijj9KDYn-}?TIuB-IHWi*E{O76DJBMzA
zwER&-h3=2{sjo`kq@$HV)0?_5MN?|~WcRX?-Se{#z@yDWV@SkQRgG0}GzdxYpSJRq
zP8kkuY!yVanGdz1Ylb_1>`lAg^p{`zxli8=i=oAzD6g+<Q7D`GJJr5tppI$nklRR1
z6=F$4T-K2cPg*EknQWRB8JBuB2&fBd$Fv%^_XKoBBniw#TjM9zC$wz)4AO13v??I&
z#WNWt5~A_B+2+|OG@!<DRs`qiF<XR=oW;RBUESz|fc#IxgB?Du@QQQ+s1F7e)$2iJ
zZI?+8PyYLG;yffdeWQw{TZ-JFqWK|}VnsyO5<D5S8n{=81k#T?`v7NVUof;>CPKm#
z_nyxV#!G2r6Kw$UJ=|I^;XpcKIVEURm@uK}Ws%N}Bb$ah`x)Wttc4~!Ng`abitX=V
zGp0<^1SmRP-*?5|j8Y5tdlNf|1mQ$Y?=FlRC1F<OotYVe+=qwoUUlL3#jRzzT;XW)
z1AsQjOq(8Z-|@757C01U$;9NR74g3;t~T+Yo7G@mS1TIZ!=KRJK&+#vts2WPKAdL$
z!5~w{$flIem@$S4?C=PNJMGmEr2Zf<Xe#Tb!-z!UYc^9$$U&+HTVjK(+;-cCdyFX~
zD?$M5rj!0s{q?wmU?eU8?XN&lZ};B2Aj_rZTJ%pcIyQl-a_d(sHprl9RXR?!e1Y9F
z&sXxKM6@_}A(MqPm5#|P%0Sfe2ac90tMK%Lbgg>U8{1~+!bA5EKt|-!(H$M)6|B#s
zL6KRn^eeTEtm-B~FiHRd4e~GZ#a>TvQoY-at;_&g^Q*AxGjl$ba-M-zciZ44L5V_*
z_Pw_<RC^Q)w}E?#wF4^4NBuYea>2FGhyrtZ2tuLR@}LPLNdgS*Q1g<f2;a;j^rQY(
z&%zrJm)7^V>fydSyEygm3EV9l^#X!R^sENSD9BlV`Y{9Q56(fdNf@&Hn^vGdllc`I
zS_;^`>ww$FH*qIr_o37&44&58fP9rBMEVHo5voCyaY7KAX$5#M)~+DL@GSw2svBbc
zArPz<ZnN<G!zHM}j%Wh_>LXmRH6iAZGPtJ^V8VD2HBmqcno+~}!6s?F8NS){a|<gZ
zVYW<E1YNgh@N-d9EFh?C`T|Yj?OLvRIGsUoaKxhnQ%L1=im{7?&ESAkhA;>5N9FQ#
zzP!V6Ac?z=;7Tdb<woIf$A=`d#O>cPoaH5#kQ=4ibu^B|?QfLE`ai?$;U5@|Am$J>
z!_1Y>{DTF}i@~dx2BV6apH_jPyYoDN_))0vD1J0k=(r=nASOL8)^^+#s3oL}r`IZT
z6PUX|<ISt^?a<a)@xT*{5id_XIHF^i8!dnqVP4_HQy51(dbwY+X(L4-745W6Z9*Ne
zwRbQ3Y*pVqZSD};1c<|1*VWj<>Y^6cY+v{L^+lKr)%B6t$XSm~`SgWOMUyirzYl5c
z>h0Z}EV?^s?~0s^zdU2muJFMfZGZrT#+=Gnr5hoi(Ef}}TS<@k00O4htd8y^)U;Mz
zVZEETu-@`truPd#YLYYZfG|(;&CvcDD}TQ3_I^-ZS(qeyW!Ky51tx><)ks%E<KATH
zE1Y89%-(>OHd*FkACX2Gf|K}8_Gfl^v{}J<!S;oG;M@C4!7du&X6~r$WWNlCM1=VO
zf_2OU`RJsyjuej7l*oO`QRRh&9h?yS0=U|gs=zD|l@;#j$n+y06*_waG11cfa968F
z3jw+`<-5s3X1Eoh8r>G?F%TcwJ03{&Q<3Yf2~?QD6w-uZ1(3u1LZs<DcoNiky0>G|
zxa$}126S<&itKhr70%q3FY6GBKm=fo|Ed6oGjqn?YWGSWdbl7TVTwCtRpta_>&#mn
zBoB$^3?vs}G%!jwOlEEx%0KAa3)aMQ*1p@2)*G8s_d%wVqS;*jILN0g2-#fQL|jGU
zwPAz)-JDamL8iIU*61U@U=*xi5NXAD`Ae4>0<6)OB-8SD%mvqY@h40>WUiEF-JSEV
zw22^hvutz~+d2<|rZ5=5j2B2KZnqARX@Ui%T@fIIyqM4m^K#)_eJgkc-vHNYk~koV
z(fd^TFlgu32&fdFe4lKpC&|V}kfpynoQrvsfi)`-3%-`&)4`y}I+{FY-;OH1y|(OI
zX?nMPBhxi9j`(CPPL*h>mSs{n#98hga=JTeE;<uh&<UBr<~OR+6^1Kbs>klpUcH+f
zW8@J1NJnTmg>9@bFFDmJhKJymlMBWx$b+&x*OG+4x2SM9R|t^j&~BfD$1b6FM=$99
zxv<=E*X~K14d5HWP+2zwn<-EPvJwavJ#k<L%(-jKhX6v;b78X<-k;o}{be!rTp$S(
zBE~8_$C?f{-d`{%0~$~dHbXmnQ3#dA29En&gKpkg)*BH3Uxt*W_hO2PO(R6IKHgdX
zjf!~SLRkza8ft?~qF0d~UBf%j_z*4S-h84)eJ1r8b(aChbnn_PFiQ$Tf-v<)mcR7S
zwW}KMxM#)|=7fzW=t7c%9BMB)M65;F=Xv^!+I;6v%9QXC%zdeVyv9Xiym4&;ugc|L
z%6$Gn%@!e`2Uw6_GP<h(Px#i&#Q-^>S`1`TI(VLN=@p*_No24>YR_F{fD%{rFRg`x
zYN_x-0{uJYY5UBOeEzMk`K0+>m{vhV2+uIk9{{ugnMjxb@<@6|Ruy%XLEgnEq^>W*
zwOkK;M^=^sLHc?^S<_?3-olKScT|6j#NJXIlR`3Lks%^-Y4)Lm1zI+7a+5GJj5+)*
z4l=q0Yp*kNPC&~i9$^%EgB$+BiEM)~xZ-oV@!T<2Ko?rH>V6axLg{XUtlkxSR9Kv3
z-r*LhN8(&F1h}n{cR8(A*{4|ekJ({sbpx`w3|l7H{l)ENq79YIS{;sw*f(OA#pfXQ
z^TgsfIcuwer^?PWQWaW%fM4Why;<n7fs1pw1K`I&n5OXMU_8XekAe64gN!Inw4nw7
z(bYhwANBoO6nTJ(6tcA=RgYvv=I*y@z6U^OI0S(x%4+RiJbzFWe5x?)p$N?it{Gp1
z<|1vT2%QO4^F4t{&wLtrTv#_T#I}(9)inRrtK>_j=grV8<rnz!#$Z@RcK-qDrk(9?
z$0hKtvokqP3!X<wrsN^12#kxwwih0L#7oGlC0vRxP~r)ek&Bd|U&D-<N@<rSKXz~=
zYzus%^y=esU~o$QI8+e@toP|am7#<EF{S-TAGjoM6e^~&WrYHvREVoog)P4Srhjpt
zo}x}`w3_`+9s<>T!U4q+;3$|^B@cet3<AQe#7xMqR$8_Fj2R$9t*YSxP30LSI+H3@
z<dE+#V8bE}jM_57!QI7Mpxb%v9qfIqaCP<(;Ej5fEKL8P0^p8Nq<24?Zt=b0!--Ju
zp3lD}Av3k61Y!;4@g2dO3V_x?0T>05EN-($?p}l^1<<8*%=jd)#A8V3si+tuiw1cf
zV-Sv{yP~0-Ra+9El29gu)Gfei&ekwcWh7>k76^9T{X384?<I0C|Fa22D^C1wr`1nj
zB#IGUMjz+w<d*{lC%sX(pQl;!*;FHt!RwiFyj>Cd$W-Z!^=#G(GGSZ>{?n+<IvA9$
z&<oG_@*RIHNG}#q75o03aKO1*Njt1mvJ=C8$V$a89c_u#vOauH%NXRG48C#eKMV{~
zf7)ymyJYJo&!EuJjo!8~O-OOn0Cq<;D~cT+@ppdO-m*eta(vNq7vfBGm2IpeHWff~
z)>CX$*hRhZnq*aY*)+j%H7$2uRjIHSQj7Ux3?2$K7pP;fy^zIc-BLvxy(S?@jFTOq
z*nQ%aB5G`fWog>WDGp)Izat2|Iiwx`xnNOiO@Z;-4S0Zgn6}4_J(1kfYf_iXw4ut1
ze5}Y6zMkAI!G@8p00?q*Ll&heRw%sY@tRZ1+_Rpk*c1c}YHwzn;Osg2LMjERx|g+c
zz6AKmj;*2R(?2dA;}0?#&K!adUyLg{&^^cqi%8tAKqyX64s7PR6IVVRtQ{1d#V<a&
zA42l4U0`5-N^E9^P^sc){jqI_3h#kIQ_roT=Y_Mpu_9fIpNuE6v_G<%E?+SjEKqjQ
zPyHbxS5Ip}Ef?HRl(*v1?mD6_s*|WJDB-Q0iE$TBM%%CcJr!mKP`QL#Izh-esk+f1
zu(Bv)!=qJ^RXCww5r_mKuYn`=h++<X`|n1<_~+*_aF(BQYn9f8ZYRwf>#dCOhRj~4
zFNxc`zMGKh*4rxPV$bB!RB0Vk?0B0bi;L|Dc)e333!$o#8nCF^E({L1-N;Qgnj|k%
zD-RBx-4n?rB9)0e)j1J3LUC`CcXsBeI}8`1*DN>vmEE+Q_RQVRp3aQ;+L?XN=}DSz
zB9j{`+V-8)cC-6k3uNQ9tB(J7fZ}?TX-9w3@=JIXksQMc2ZAQ|&BFULyeVj*6e+xD
zPr-LpyIVv8fWiKD2Hy@=kp1et=o3#otv)$D$G}v6=TC1XD2&+8^~2Tf-J>3fRnGf=
zdG~)D`#;`gWBPyIWn}tq?=t_NysK#wci4jX)6*-sONeeIN-UxviI{KW2&#DW%_<SF
zoj<qnpjku1k=WG(`hk2?x8-*Qvr97B>egOJ9=L~aG*dXXZ-0_;ig}SnPQWaA7x(^a
z>6ao5uhy%r@N8xL)4Cz%*WRvqP@c8CJi068ZQs<sKsPVmC|+ve+|(PnIXXPeXMlvE
zhA<Pw9fHVqS=FYoQf1=Qi{;9`cX$iU1RiGKk#MQNEF+N^es<!Fx;y;7P51#Own$Cl
zLHm?0%=3MJc~;fPk!sn3ISC~jInZ?<AZj7C#K}E<|7||bWCDd4P3e^B8vb%z@Jn1d
zvCMh_zg+37Q}bLsQy!cUz5W+(a=QVGZc;JvSi%5o$!AIBbH!FZ|DBsaLf{(a!bKKI
z^m#@7rnP0KjYmncEq|&F-r98Hq;^|uuq9IU`liiJ+!@&Kwn}BQx(Mm#Pm4=yEUQiH
zZ3?9F3GqIo=76*%F2(cC<e<ST3M>t0pEQ_nIh(>}-|cY-@IjzFWlY0wWp)FH#3OM-
ztsfSbIFdvX;WJ!gY|lszvwrIfM3N=tKelaV{IEC@9|xO;xVSu{fQX+BmqcQ(wY5UB
z)xN@>qT@_-M9DtatJHdzi$xtpA1%>5sOzW~XSmHLLIbYz*NpBCN?~%N&S+zVz37IM
zkve^3hwSavGSZQ5_{Bp^b-&4nLZ0Y##dJQ`UVN5s3qQ|^#X*N^8CE#%;4z3#49~Lp
zLA&bo0i=06awM9y$N5K0RuEedK1zhrJNIX7g69!HQaEb3$DvLbQ5HWT&T`0=0)Q2=
zYgMH?=wGfb2t~uj6FiF=L8lelua~U!+7Z-_I6(gtc?i~&Xvb7ZXP&<^4Yd6Un6)z!
zH*@ZWTle9pZV_(x$xuuLqV8|R98VF^gK1M6YHEzAthM6eCW%9y@2Gil;*Tt-{_{L_
zvcI%}0{lFsehecT%%J93evLcGg!pcZH{n|k5oa8*F0e?=swE*FSx1wB0%94mJ1^%F
z9xNaTxB0?;c2>9)rlzPq<^EW@(^a9n{5^NsgqnSc{dYdy^e*e~4{J{?y0-lQMGW}k
zYVfGfxvveSNi`#>iE!zXDsP|aHQu4)p&0FGexGAs&6MZlDb<i{>f97oqh%-PEPnYS
zp>7t86DEk6ZL9mA&ckXn=8#N^CJZ*|!n`G`!~x>k1ArNsFOj@^bg!u1gG&N{=4?jE
zZYJlL4MFPKjc-LW2y8gvC3dkF^{Ok<7MDl+b+>lnsl1;$XWU?o)OwCv$ZK|-7-f0>
zeS9c8ve+Q^J=}h>+|Hx=JhCMIV(_GDSC#b`3h=`r8!Pf#Hx&@AB!GSmT(vei<`rYZ
z2|(y<uazo#D=51l!2n27twIrqd2PVeX>OIV;@ImnR1`pCaU&|g5FmV=>FT}!4uz9+
z1*iRB#8J>PyiDBWvZ9nyXm$XBI9YALE<s0dj|}PMkpLV5Y1PlcI}l<keuTwefCXoq
z6dw@kN-KCB9XM3QhK+by0Qrdpg|VV{FVvT@E=vf0k!F2Jp&tDTq`l6nLdRAsbeP4=
z@i&k=n4p^&%qSQ?xit_zmp<PL{l}tRg-5rguV2yW=Q6kZyb+FxfLbrh-Q-V;$N{XG
z^tWB)K4w0=xM$BVEPAQ)H*xRQbVCO~0<?}IE%`om@l(kD5Ow8bD*t$MxQ8JKm))Ci
zxf9eO_qooAu;k(Z;apoM?$a`(TS!CHZEPpJ_wAHOZeRszpBjFj7=jOtuo+<e=uFAS
z;cP0?9H76hz8o$D4JW+k^&K@u6uv<hQ`w&BL3V#5bAXeIM-xNVbl9Hd(>lee1j&&i
z>;nVJWDzNAoOBQTt0nV9e!2|0owKj1<$qdjKc;Tu0C!z}nB?o4AVMKTuZq-2?-??V
z*l!DTt1k@7tmZ0quKAa%D<dpJR<Vg%tG^o}f!dRi_8F&^ifuqCEp%+q<O!36AKJKY
z!0I?Xk$jx6;lvK7@O<A6oSad9w(~oefjt5c5OQhNN2<-`wB=5jFYMfRFX|6aQf$ht
zSk2xu!GUZ73Gxl;4#g^WoDCDSTzD)*+k9;EnKNQ6L&lV`l>m|NqqtJ=qp0hv*ks$z
z&2L*^8#LP(^usWfcnu<MD`CUgl<xDGiR!g97?Z$S8sx7%pZ%daZD7u&W!yGYalm?0
zJ!UXxVi<|IrEsWszV~T=UM?dB^8=3#qPrM$gx&px<8(;}@7Ihe!a8i`K$NpN*9gS&
z$vw16;0DwXbT{@CJ8@-2Rx#K!3pA6?jvfAroKnm5Q-B}_#w3C4*r~>kdD$NWJ{r{s
zpO%WSqLQoGqc;^FFb8{B203#*uY^m^qC^<Bh-37a0WbkG3i%lC3YrhP%9Ji&O0)-9
zj@59SioilKJ&Ig&hgvPevcDjRA6uV*-2kXHegz??jboQVw!CV1C<EG~x4I|CeLpnl
z!E!N=)zjg()=hjHsBP0M-Lxm+qR6TlJ-$}rKd~nEa`fHc>g8Sl9vJ8dQjmX2I-K<Q
znqRC|HDWT?@n&d?Ui!B{g08}-C)EGFp@^5vFNj=Pg%=lr6@#pAqJ~9LD9kFuNrk$*
z=?LW)(ig?rZ1b~`PIAQ(B?Jd)X$bRr4_lvnb7u-z_9Rvle>zyM<b;7r;k-t<c8{m^
z*uMbf=VtO5G#vqot+nU)*7<a-gaAa%HoTgd3QKpE>9~zuPNwX;YQH=vAn7=)WS!H~
zYU-Zpr!42LSX%-uqp?s#Na)1fWb$>&2MaT~=p?n0RL2Q(g>P#H3V8-Gu~P%=XbaKd
zw;(CY6M~@P+iZ_Pm0xn=`9wR?1|{j<xvgTk=-W<;<tU&4LLkXtzxKc>R)`F&sLxlV
z3PH<31C4j+2SoL60~j0yrdz$lqM>k8eZrhLn*|&2cle`Ol!e^s{3}YbcQodnKj)y-
zL5+0=q*{y^V8UM{Vjsmny&ect(SeVw7Gy|*v_^hd%eyp~6q+sF`o{3hBb%6opox*j
zir6X^p6N)b$#neT=5M%f*0|v1cNKP4U|A_E(#N9-GYe;;bZLb*#~3&_kcO5Bl_Mt~
z`^_M{BCyB{Jl8%npO3||Q4Tbltqmr;@k*M@$Du|bU%dglW9V}das$KN((xk8omk2*
zTPzc+EWUZ*ZzDhwNDX47RYQj94oH`sjgBGZQlknZg08uU6W|!w9m$P&59!^Z2&8Y*
zxJ|Y?hnw0tF<fWMY_z(m>!8y!x|Z`iD|~SNqjiT5yUDwOuT-0Vfm*vY#C9s5^SSVP
zaO?MTu}P;VU9Xt0`<I~_Qyl&*j>OKfJ>c&aRrzTBN9^nRtHGabwYSZ-ZM9O%6G9f1
zMF5L`J$6Ffy`1nOu(Ip6{IY;-iSYU>X9&mu;uZ#o%i4fE;`rm9B;YR=geCu^p>Z^d
z-?E&=O?RDVU;zK%wo_``yi(#w@E-a=vzDBRV~tzjI)0!;BNIAe_GfBPIJx#aCl!g0
zN3Elb5ts*>R0j0q-o`4DYfzbJOxG1&)1TDYa}xwI4_<|ui0wUi0!*YI+S>l8J_?XS
z>6e}B2Zc!DHfv$C<I}`R$s0^D16YYSFXwu7&lB>>5lypKQbi{H1LuWol@vgcu%4WU
z?V9*V^3V&6n=CeYVM62}e=y~_M+}g3hz}s9ZfJdb&tOoZKhh<s?~#l#?Fm$D?#gyn
zQEiLM{gcagzer+vz|(>9Wf*j(WktAe6auD2K@Zf%xaE2%ao~te95;d+f2J9=zGej2
z-8sx!<Y`JKJDe<`<CrY)W)-x$98!v2^z5V{A-K*N2*!t$+szY;^*r%#IguE!1*iP}
zJQ{D1e6XpNCJ6#B@KD2%9IkOo)ls;P?TRD;w3@vOCy{4%)k%7J6ksyNt2V`2A~(+Q
z8~af1x|;9_$4cX;k<*y)`?K3(SGadqR*6FA+5572o>gs!3i~YsLVuZ|P*R@RKhq@)
zi(liq<8)a$j~^5%ga}m7?Q(=Fk*D^j@%eNEYu#V^hm~F{pB7f0birkcHkv_#y;6@l
zMtx4WG8GRvmMcYAkqwv0KpbxQ$m<j00*Pj`pug5!pzM<gMY1MV03_{)fsw_N*u_rE
z%blGaIiBfEQZI!Mq^)m44&x|<w%dNTU4CR;w)|RqhzTwk(A`UMrODjOnYeFA+yzKz
znma`5-A-YnsrgJW1=3rVqxTRP@?xI*L>kIHAoUkO7R!GGth%}zT=D{O*=+hMe#q~X
z1Ozm>%~o_G)cSIycK+BXX}{Id$(!cLb{2|Hn+6i~)CScXBzA(`oARD9>Wli$b@~yc
zI^tdbEn&j2VMeL`xZ)Ylyw_6=CcX{)eba`RvLiqCr=l&~@eyhhE>9E7BZ-j_<%L+b
z^wfnRG8wQORZ}f`3538Bu0Yryt~$W^zPC5;>}Ou>lX=@efuO6&joT1fP7&ICPUvw6
zd@U$8+AY^}dG`6+q6VS#k!{?E6zx)%bsl1Z=uLUji`j<fH$*xxJ4{PuCZ&Kx2z&uG
zG3#CPIZSG~A)!fczcZDxYKQ4eFwaz0_B6_l<P~dM6LyGu(Lrj5>_P{X=wYYL8L`>c
zzvGQyUIr>tKWgStD`>HZ!x5z1Ct<KY@JUW!c8sCPWRO(k=|bRmWnzqW2a4Z1Fvq6s
zMI3mia0NJqSHA`J0Ca01DU<GKxrKIq%Omz84~eym8e!I@8j}qc3`8k<E}4ZS`C(}k
z2X0&&?g$n<RF#6;CIg>tcv&&`jB;Q?K|Id<`OR<@bazMiYlZe=<AWRm^iirvhMcV5
z=klFFe1^X_c`}CK3fqSJbjGI}r-=Q2aB{)*_J}9?`PlZ~MEwsv|A(loEX@CZOO}!C
zzlqBJe<5m#rk35ND4OqUU3zN?fW^Rm4(P|6HkSMR+P3hxp#eA;i2`FQN=0Ha_N|rP
zquLYRD;HDtzKH5pDLsr-*HreUTaVL7FH;t@>7v}HTYGo?`pLm7G(lbC%dF$1?hKvj
z(~`Hx{eh1-+sP&LbE1C1px~_0<8_D%F6ra1AtE=r(`pP6yxf!;x+=qDYLj7uwWH_W
z@MoLO;INSbc1790pG`Jj*1z@#I{p@JLUxvxiR|5zKP)q~bbX#jc1uP25UP0zHm)5z
zZ1vo;g(xPD`DoJ>zOGNfp3THOQ?9dVXw+*}Wkc+8E;R|oEUPOvITLb^?FFx-8Fx-9
zQQv#~%tCi@AjfLI8o|Cliv9hI;Axj8#`_}g#Ye2+w1qCinm7mTj=@nA%<9ISHsxrv
z{Cdo**B~<C>d`2zMs1<)ly?w_XqJR3qH3+)ZVFko2!>Z|oP!!eO^BrJE~lX|sfJfF
zK=cTS8*2MG)VMX1d~coR)w7~&PY0JWwOOpboc&Er5^cRpNu?eq{J?|TmW#%}?!eiS
zHfzL&LiS=9MX6<z?_tt(m|&A{emg;Fk*Kq<wQEvk0Ahh-+A#eskKxhKsGtXN1Kv^;
zgXcwQ*i>q2c`0nCLcHnBf~39{2p*scH2@PsMtI|qdxrM9bikseYOzpUMZwXm-$_YT
zPr%Bfv3odzOT^P@<DCaR8WWxL@ZAz$n!~}c6yz#;|B3P^&MjcwhmZNb%-bTTmGON~
z;uL1sF*{yN)^1z8_A~yt{-UrNE44;Lfl>e%-QvPR0F~Z*@XmJ(r(nAjRxbB7tQMVM
zbu7X6e7FnQWh`O2o`+fqrfBr)czrjCrN_!@)I?;(7zEy015Ko3$W?|yDI>Z={34l(
z2tPCaiwW^g{8%Llbfv1Xyh%l~!847v>6ysU*EoLcH1^i2Aa;~=v-G&<-QftC?;yZl
zv)|lDtTyk6ME>aC%^<N!PlDIze>nuf?cBw$X@l}l+A%F`E6o{g1>kBPs_jYi_%)~O
z+%V3%>MES}xZI=ww%5}_o+DNwP9r+W^ReN-9kck#<~v$y$1OF;0Pq+sco}S}NvfOG
z;#fet#xZtR287noCkgi2eXIPJHX3YG;PivH{vsCsxy4Kx{F-LSZMI4!Ds`+7_=S+g
ze_WK*M2n-XHb>SZK#ht{L<csSwKACPOB6Ouc%62@u$5!$J62*g74o05c9F#e2=_QT
z#UQCAQ)|g&wcJ)949z1Ho%6<OK!Aqtfv=mZtIdJKKAZ97SHPn)oO5VBc>yuQ|H{3>
zN=5ERF~E1!`)a$i$;74qvB7HS+Ny_Isa3@?SU*rO&7{zYy>{Yy5&cQ_lr)}*H0jYR
z`5^HK@~t538vsaVcjU2ZA~S>andny>s{!I=@a=Bc>Gg2q5kOflM_c)V^>XoXc|KYG
zdRRRE;(L3z*_KnQ<BK*b8l?dk8bxF8lM@x#<aw#0B$T{4xHQ!h_`K=Xs_MzPQ}Bc*
zvQIhjGc8)R$YnjxTeoQYnr^#-8GLmY7Bm1nLX<up4KF;oZ&M<T6R}Q-dKz7k<^(RR
z$6M7R*5s)a(AQ5G&zn7@94L|ns`4F}@hk$EBBuYtBC!mPhaYPyp2e&Ee11+|XL68{
z<H8#`SAxNKj<IIL=_@YB9n~kz+J}=UBHXB%cFoq9)&)fR(jYrpaJ&X+d5ziW)jxMr
z`{?5eA5Tikqi{U|ID(AZcJjgzO$JQPsTu%To~&Kc)N>9vdnYYszk<^Q-9IIbW3lL+
z7vx<1(2QPFy_}m*^T1QV1A&=rsw`9j+5o1kZsO9|*ZBe3%arE1Z@~;<L?Moc$m{(U
zBENS!*^0OO%N)_*1c5$7S6BB#jl1;R=4o+t-49^12qrC9$(#3mnubIC-BStRD_8f6
z?uc8^N<LX?TWQQzNWuSFtIM6&B5JFIWpm>K2<7X;&yfDT5*jOYU!WqCJdPnHFx&BP
z@Cu~eFyCz1SSLk2m^yA9VJDOj6fTA%=-sI(w1tT@WmRRdo{WFpge~l>+zQBLYkhV1
zRXAx49?IviA?<4^@no>!n8%l8I^!baj#>S#`j)=u>N(T%lOp&wxOS{_gd0~iEDxR`
zJYty%7uP|ar8$l(b)O^Nl$>19Ji?5Juu=wJr-vm9i&amvPjy7&Y#!f`ty3#Ow~ha4
zw1ZJp_SdD={<|UyboL2B%`L6&rdD^S+n2+!XEfx`C1Vk1MEa&J{De2z|Hs=~K-IY<
zZKFtnyGsZjoQ=D?ySuw@+%33Ea0u=mJUGEMSa5fDg5?6|<jk3G{<&-B%D47<cWZT5
zS3h0V{Ytlr0DesgbqH5gz`7z5cQM0T8fK?6#X0DD0}h4Jlz{7{V;qu$m`ggvOL|3I
zvX!B$Yi4PLeGINyh%Hn-LetqsEp8(x4ras{<_v;3L_NRB{WZ(?@LV)C0N$_Udl~&M
zUI%iE#zQRz_K>`&8`bi`uG+Ld@uhMTxOJxWLMNyiVgji(UV>k%2nFWD$Qt&;S%DLF
zbB0lEfb&DvpI^zesNRx_(t*tA$6oQ6?nV_A=FEx1f6pwewXXR(1_MKpWrV1WBMo|q
z0}<_hM7q(obNg_XTnO!6PwWKlaQSx4JNrPGz40oV%p3#9r?C79fFEg?Bgbwc@lEI2
zk{EmaGp_?jEGRV|-p>w5ziy{h8GH`J&%Pe~EeHeO5nRo*CQh`FE2s5|<~5*rz*tG)
z(3(XQ1N$e(q{l|``P`AfwcUA_s?qzb+&m4MAw`=+q%I|n4h2TAG`=L!P%?~!f_JkG
zdPC-PQ)|}E%c;yGd?{8JhX#v8&37)vQZz~Aa9a#lu0#Rh1H&8fT%P;B1$CJjQ?e>2
zR45G3B086{yWCd>xxU)8rq~+oDZ~j6@u@P)JQz8F&l7NKb5FEix9L|o96n>AJXBF6
z;bJVDO9e7wGn2r0i<`c;!m!-R^Eq=A<IPCDKwscKISqtEAhJt9g&$Y0B_GOsYPe5B
z4yEUH2|}kgLWy?p*Ji;;tzV9mXKFWO;n{{kveW$hAc!0qekBKWQ($>D_`2?p(HLD%
zZ3kSjIgQKtcV6{hO&6Fb=Jhnd3HoIj*&{%{QSJ+&=%h0GccGP^<l&-DkIqWRQRPo`
z3Aj&4yHa?ID-D`DTf)!8-&+qU*L%M+5L8%mp__5Bf;uus%t-6*ibx1mk2C!R9t5`|
z=>5i`fFi;IPm4X99S`}+>SGXb#JcUboL$#`-B97l{az%xcL;PVg_dB^4#Ocu({!RJ
z_^?*sLzq-Jc&!$oA~FxB#cEN`m;`nLkQUB1CKMr%$!#}#gvr|mOM^@~bnfbFM?xYK
z^<_nSoqb2@@1d-=DppFp+qK%gJlw86agRYGl3B@G-q5sJPLMcWn)G)^`9-G%VUr8w
zx#U;e@PW5{(MYH>w;h?HIj+3C`No%2k{S@z6=YFGHQ=mc!?JnriM8ujW^I79cP*X}
zusi*x(V+wF9&I5%HFrQUi68%oZHi=_fC=Jr-3MB2?v$JxrPLX2ak*0|jlEvK0y|>u
z@o{#0rcn(}N10j{UBu+_+_UtEf`aLDDRU;7Q^TFPSo<q6@;b<|55t;%KL(I#eNRY)
zK_LpHHE39f5h1;*#`h4B82Fba_Ork36^$XUTOEG34>thnpn>?3?!~2txw8|MB8GJZ
zgE^}q%N)l^$Z{NL*Styd_1oO7c}xJ8EGQc5@sT{$Otr2>Gg7s$Ay6^}6TFtnpv?%d
zkw~_V-QMasD-Xt>`l4#W-gt;lP)Um@(7qz4$?IeXKK3Tlv?v<t@%k&MR_WDSyc4Nn
zL3QIRTG{s_!_J2&<E3=t6YhL5tuaSOb~?x?$VX9KQxElAknucttvDn+K$Vz7=fdE(
zpf2vrzA}l0r{ne9UEn`@7U3WD+1cW8)k;}4l_m~O$@+!c4hJx=5yU%WSc`cS<3xpY
z6|HsAGwIDtv4XjMpEl6qG(X~7La~QQw(Dl}_0{vZELJq;EL9ABohEV=#lx3VyOaUr
zcrSxqYS=Pu7Vf(MI#7A+&E4|VOqNN*ES&|F%+bxrLnXy!M-~jND+1qK*NH*=m=jj7
z$hMx-S)t_@>mu5{K1p*VS}4Pl!eZIg0`cJEr|ZmpNxJ-0=P;-`c85DhDO#bRPvrzU
zVn0;x{A~<G<3|Yj=0P-1*gchmg8LIvv%+*THX2lXYL;+ybSwHoEpEn4qWhHRk!Ik)
zV9NQUv&MhqM$S7U#O7&soHK~pf7)4>Ldnb1sC(W>1C=UKOD>bZOWnAopv>3B$sESg
zRE8m$W2Z?r2qWhg13fCgaylYNp$<bBq1x`P95@a?q|^3xbE!V)O(2b<Lnq_cN5}+c
zFlL~iI*2asCco`@-i_n^kPiFfdpag&vD@7*8fG7JkxML=W%N<^-Uk*n*i8!tAGaGP
z%gVN;=sv*m{(_u)P&@qB<<!eE>2*29NdMPzijn?bmQ#!j|H*P{L_-qz{B>#Df$A!T
zg`^-dL1&-JR*dwzhAnBmA=QA*0J|KCX%H>~`<h_QXw!b>F0T!1CJ9?y;%3d3#Nj#;
zU+&q}tS;*<F0`iv*hB6UErKcNT*jlb$T!8DCrX4(d{t9i&w~=S7SF6zMAZdG_K>*1
zSdy^*>9yelo3Y9#*!T{Q6#O7{oK9TTt&~}teS^tmG{XRZR@>OrJHoG@Oo~0jMPl*a
zq-!l@xZ$^6Zm_$B+fK5bPbLhxfSn!4+V<bLac&vZqkb~Z&N8;>(Pfg*Aew>BMeB=~
z#)1Vt#xUrQE_`~3u%$bOgdUmdXr|%R_gTN7`@Fxm#1|#aW7G0vN0^kaR6f*%PnNCY
z(ukjG)9@w2&)CGzvhux{4%)PRnM7Q7`@j<W^Gjap`%c_k7Ls6<j@Cfgg6w%2_<^*F
zrPvnt#dv$&j9(5{l}(_ygDAXF3N@XPYcSE#-y{0yPsSMSD8m(PRU<9(>Zza~T%CDl
zbzI&ZRFL9xtGzAzPCQY<tv2tRH=kJxg-^CzPbu=fGwo5ETM2*6i~c?cf_}I;yE+Rd
z_~E#bD&h*%wn36re!tJYV`_|w^&YgYPzkSO*`6U{8-TmODQFIr++ULf*LHo}k&mVo
zbKY->7t8=52Gf-!t<<n8>54&;JsTRDJZ4U0*p-ZNKQa7ewC4>`(1&^TM~h;nut}ju
zjb$jl%*@Qxy~@^bWa=Dmf#O;8E|MmdZ89z;+fXOr2gjoyF7QNgATwf$dsW+P<OrST
ze45^xBRMJgEUCCzp1SaYZKWXRn)GuOI#LM?yl`=j^vE`(I<hke79^;|pmOpZiO{$o
zw!vFUH4V!BYNHiUx4pQRslM}#$>AwfnOE`kipgGIA;=+~{b1S@vGP_;#3ZsqtZik=
z2tj`{i1(GJzk~VS0Q90Z#A}q_EKYqt8@u$qS#Fxh3j2A)*q$w(R_s_;L@J{c!x}98
zn(xJcwIEu4^-{enS#aG|o9B6U$)`(eYO&<8qR^GMK9*Q;(Lc``O^$z<vYZ+tfEK(p
zp)L)s$4GzkRCaFQ17pqv#}my!@6R6;y0dxd#G@ouZ_OH)y<B%C7~7DmH{YBnl6okl
z$UDP=&{tyjkajC>1*S|Zs&AO=I_z*#w+5<8pFZbxa_-hu+uJRv^`WfIY8A^dIsH^9
z?p8k8lXlxqfbxSC1m9Ljo3l6$5zi#oHG!%h-`Z3*;x-wJD=ki~&OVub3{Jtykww3*
zAtV`0yf{<tP~XGsw_&s#`tZxDeY4zzpT!WBvzx-g1sGmy$?z#WbWfh1J#a-44J_du
zEMJu*dqG?RMD$=6b-_=AqgLf-5s`rSt=T06P|9kCFkczf$ModiUAdSpmmWXB=219}
z#==LmCC9Uc(>yu{8}iJsIuQ%Luko5q=y=yaw6^MxREh)#24*{!E5-A$*Zq+S+HCky
zD1g`Y1h33L4emH|ikK-(c)Ojwuu-n#>+`l@AY4M&tCb|s;d*0xaCg!E2;;3Q8QPEV
zq%en+zVJ(qf?IhLboC0`g3JhD$H5PZUdagl*2vNgA7I1T$BiSqs}lNncCxmDU=<!&
zro)Fp(<FyG+_b*`?0_jUID7}^k5Nm%c6cE<+%weL#h?GFURwcDV3dFj!`rivdW2~e
zY=~1=dqnU9>`0I5N}JEc4QcjAG;sdhnzEp38{nn}YZ1{GzP2qHP=3@m?(iT05>yv9
zsIH!|?Rm%J7?-=AO&dN*Ma#=yV>S%6*qetvgJ4AtZ{l&1iKt4mKdD~9s57Yosfgi)
zNvo2?CNo5m#f6a6V}ClCd<a;?pn*=!hjnaicnajgw;)i}B*1PO4*h}v)U!XEt>JLD
z&>`Bt<U#ZDnu31+NM;VEoRZ0HyRQ)Yg;*-+-g%g}eCb`a8!eApOq8LFzB3`(ds|(K
z8#`edZ<Dp_=~*DRIa%Aaj?c~AKJO0p)LVWDP&<ZO_;oNz#)Yp)JtwIs;iOqmS*jeK
zdCKpwCpI@Q)!%L{4V5$KgRJw25Tvp7qtr(P+*G!0BZr5?WK%$$#iW4|N#;Gs0mt4(
zeotvDZS9!4bxZRF`RqJF2F8GJ<uKdjvq0uM0@_(`_sfYQpSqdU(cf6l*!#}08v33Q
z44l%nVZO&X5M6pKif7ZQ7Ka=B_#$`cD@WrZO3+y3N+7mKCc7FStGCsV&ji}B)e~!h
z<KBoW@cy9*$A_nly*X2Ja6~bHQTw8Pda23+X_%qsBDb)ZEfeceDq4@H*{pe8)s$^U
z1n{m6FS^vL-PNuI=bhK~*Wqzb$^(1rYoMAooNbA>mOiNmLK#&dz3I=*E!^NWH`GQm
zkDqdPJHgE=zx=Y-V1vUtn9TX2B6Yr6A;~qXefsq?`)ohNRnN>tS<GKeTu@NVz+Z^j
z4y-VFN<_=!=>XX47eW!NmRy%@K#pK;p@HQ$OyptpNdi8b%1ybZsim`QG-989AnL3v
z6s4aM>BCzT%zR{%ViXJfrHYY45v8#Lsuq27vv0IlZfJu7xU4e1NPYW!BmjdJGh=+Q
z@d$3n-C@Lt>+ZeW{79F3oc)7r3rXr&hYXqOOOb_Yyohi3A4}{ZKmMvdkwSOUOrq<w
z&d9Q%4~A24eZbThE@|=<u%NmBCYyL<wfwHl`5qm1?`cbcn~&n_p%K@&viAND@<jO=
z6D(X9rnlB<D@@aRFmg+yrvnG&RH{UpUeCHi&KpPOV?3js@ECZA=sKT_6v$h@EF9*M
zro$Dl!SL8GKeNBnp;1bxIn`B8dF$zIeqn(Ni<iq$gO3M>emf}7g|*kzzum0Y8=FbQ
ziVt@0`6O`UY|d81kGG#RIj#$nr@M@UwRLOeGM56`aFlNdTSYjXM{4Yk;YzVOHM6VW
zldj-YU(#oih-YtCmPjE6KBh~Nx@BJh>l!5u9)40tyd!BE4o%L?e9(p~l0-#dVHJ7d
zNxIPF=GKkMTL%&y>1r!EB2y3xPxtFA%>|)D{V<KIKJ)!|Zyfq~)I|}>cNyqz?v}SP
z<+Nn$>Mn;lJctzOA|0(P4eFqQ>PTr0jnu|1YRJp}_R?a*)_&d5-HB<KoX}3=-$IQp
zx|t%>v^Q(0w_=!nFm!x%=1}sA%=>kRH!xHK>7o;|nSiPV(QOr(NQy|A{I0})B@v-8
zpAQtn=^TA0B3G;}hq)UvFXgB;AOXpirN(sIubDF36cbVk1yOFYO)=#i{+d@1ewq~E
zo6Bd5u^)?Et_aORUaZWd9Ke_*rbynDjBl}^b<B}kR0$0Xy%_dn8%u<E8`Fn;=Q?pZ
zSPr}}Qn|gj1;p!LD24NqX^&2Jbg93Gj4DfeDT*n5SZrlTQ>9xUq?T&LFD#ywW>gX=
zj++x2Y5dB7OF1xMap$HBBW2)jS>kxNJ3w_fr?2N{x*u3fBP2n(0(AmX>5%z@G!Zxt
z%D_4EW0K(er)f#>52^N9(Om?A#fL$HBzNL^;T^%UUFH|GEZ0C1bC7QQ`~5Z4%%z&Z
zZ93R+UY|}UTcbhgw}ooOa8N1MgK68#1cGnB2t)2+98@C}vD`kmAEdGyUTa*}lo_>f
z>n+o46N*k)2@voWqB<Qt-fmyDi_h`5F2{kE@@8mJO~2EHxQS0%SJd=z==W3)m>WuF
z)70**+R~=gF)(4W_Zuh+8eNx~N9-6Lus}`DKzZN&K}`KdnV#jw;6p9PHx}M3SeMpq
zwILsf6xMe~=Y%mrIAryxB(`zE*$~#GUAi@BZ_cH;ubbZViNIjXnarH=-DjhjfN@|w
z{VZyar9-+I;N6;iM`(tL$L2EnNSL8Jwz!X<i#pzvT<1T$mcJ@OCG7z{5!bO{d>Xc0
zPl)i9Mn~%eWcl(6VHZ#{b{~g^7vi9-&PSVbMr|poWRh#Rj7S%50$xOArw+BoMBnM+
zLzdpL%^mTe)5il<r|)&!WqCW|{}cqNqO=9E3MwVECVAW<?$eH9tV2tTe#8n{G;Hdc
z&&0_M#~v%Cd^m<Ecl!;UD@GIr$Xe9;m976<1K)5#U15=Lm>d#kT$C!zyAj9{LjwZ%
zoHsXcoTv)usExx1xK|^R!w)g%`EQWev!-asW4<O}b^$hh&vz9-?nVj9cq&LN;xw9W
zh-gCa<xY3DK0ROr3W5M`iBGdL8-yDl3ItF?oaZAR`^OCIz$6Cs5c>vxFt1VO2j@I(
zL?B_PeNPc6D2Ae}Q_uJ$;pz?}zJ7fz&Su;J`MlT8Y9K!NM}%|?ZOLDzrPh287voTI
zN*_u5#W2?@GIh48v-2iNZ?M4Mo&U6_E&iUIlAFrUypcetWc(H%)L5um1~02uheE{-
z+T^NTfh?vk+!KZ5yNWW!mtWHPwtLlbV?@Ande!UzQp@mfcJhvjoH`*AN?YS3K`>W#
zRwb}xz_A@bvr1pAMwbT0fMjm)QealA9>@%mY|Kwh3dqYXE+WKgFFzCCWpmM(<tzIH
zQV-s>U$8XHor@(a{yerWaTxNj0w}Aoaq%0O$x-k)@KFo?3Q~%C=;dfdVxC=%0-kpP
zx?O}yoh8S<?)Aw%4V+cnN_t+jq)Drb53X<Y4JAt>Gu?|Rhl>qD)gn7&&l%p|Gox;9
z%BY~3)F}ScgntyI%*#j>sqRT7Hc49OM_#8296uO*D@x7r?rlNMPgSA)cnYc;FLX46
zCU|f8RKM)ox5dfpN3x8Tr?|)-=np}2MaeD%<dCs({owvMkP=MTZcJMQUz8=fWvdAK
zLX&KcT=Io3+1gt<?m?d(5G&iZI{szF`MQ$);{hHW^X~_EjQ_fy5#xWfpHaEmfz3iM
z%2Q?G51(v=G8z{*+X?)ps~{2{G7K;@8~L&#<sKy>a|h#T@=@GP<%cL!6ToIz4JtS{
zogUeygUfbWif!8*E{cMPz(cjq&?7Yoz9}nXK^Dq=;bJ`I&>Wa5&Cnd{38QEA;_$F&
zgi*SYz0{|B_3_2gq%1vDHPvx)%5y9g>e<@QI!aqPI*As+ux)O-Ke&n1K4CVge_Kxu
z(iiyDr+%s#^NWQnsWCO5e&nL34EkyT@uXi<9zSsT2y`ec1mol5IzEmu^~8>lTf|Dd
zaDs)RnNptFs8iLVM9rr(H_*Oq_4gs&GO;CO5)Z{$#^N~rsaDM<vQsLfKDtl-CS<)<
zz3EF_dDRz8jSqA`Mhx~dbsp`n4yMzF@PE19yZ@ZrDped(hk^};e|~5Kixb6@I}%#`
zvwlC-9bhSJv%>}PJRuLMKq<|5h*H8;Fh@ji0!)81V~Pf*GSujKhV(l5R@5RHBngi?
zwax=+7{)b+oTp3D)iTFP;G4W;t+m3rt_X6>?o1#|3(;~q6jBeShjw`6(nV+H4pzUV
z&29z{-PmT0!Cum>bvpdKXu%)YYER<TZEL9!;lO3fRsU2l${t|>5T7h5DfUocsoPJ*
z6X0i&Zomv<!u|eE$wSW2s7^6pmTTBt0Z!&-f7m=Tc(@Jo%Ke<(RW0JPm-9*R80=v0
z*pNwkFpWFMoDrz6@5y_e8{AqWa!iqUvmbr8EK5D*)jzZ#Z>qv&a5LZDg`d!*+RU<D
zWn8$>1W60l8vVGGDA55gJJtw2rIZqdZ7A7~PM~IfXwhcefreL4hY)qG;N4vd4@FKl
zO%T<s@&gYtUlSnV5Dy&Tt|*P)awLe;TtkK)5+y2jHrsA6?Eu#$iH-j1Y%0J~EUD7w
zDx8omsIV(=Cy9OH;ZQd9DMb6K`je$t_maM@U;^3OpggAcmx)>}5Gstqr3dJ@@Gcuc
zF}{He1*p9Vofk`LI*VuHP9S7hL#Y}XrD9Z^HKnV+VnXsP9sM`O-@WtrKBVF(;0IaC
zNz`vaw$FPt50v#aKp9IapO=N6H^6xK;(6bj<M`>C%r)Wh$grxtr&&E>dkH}$d<k?M
zlUwfIG_b8?;2vKm4lC@K>eOdH?QZP?>ond*zg<ha4anu-Ed=9Ms<?CxOIHm7Ws6Wl
z>!iOsmNqTGD)!?HUV&3BK+`8Ke;*KnwuO=Oz5)Fq*Q#0O+8P{=Unw`Bz%O@`xuW)d
zt<Z?deaJ!0WXuFP+$_D3l7m)?@e86XC+MejonzISTJ!MxsS)r-Z%*NH-x~-6Ql^cr
zPO?+CGAnAIAm<<Hk=Z(Z497$ChJvZlizdz@Mxb(rWC9C^R3ASG%qrTrL<%e+S&pc?
zZ($pI$4OK}?A+HDY1U#J55IYGlNOo{ZK-zMl-cKrm^K_`*)kF|RA~`ThSnLkAKGfK
z2+(l~dF->``>8UyuHqisM`m(h>fKq3=FrFAfR}C92FLJ}!J0&uTP$mDncdS}96i6W
zhXmq*^<E}25_&b`TSdtCuDm;BIvn^>^JIFKOp_UcARhOYHc)Q{j9o@Gh(#<i!y-Pq
zl%@9fgu^2D^|SD>jHO8g7&EYfSLCwrm0k27yML;<w+4E&_K0a@l8K>JG@8AUmb%Z;
z?`Fv-rgGt=R{o5{R;8NALC#)4M+)eBn_)!=I}S}#;s!Gjna+$~q0>sYGvC+UX`g-&
zKwp-(7xHA8N~4k8N)BO<-3QUwep<GCno^iFQv+zRVCHGK<M9Zi2-3S#`82(wpeOAu
zit{6{mhLmVSDmek9945@4ht3>zr@9RDg&5pKc2y^#aW4iP?az<mi;NwFLBx%SO-t<
z<?o*ybD`q&%PNBNprI@<YDlhfV{tqoGngoe9}0!RCNV(j%e%uu1mW8~qF1b>9GkmJ
zOxA^a_<!cf+%*REuBq#j{3M`eNR8w;$-z122+kP<V$RMxM!q36JS43b2Q1_Y@hXqo
zix{%3dM&H+m*q{mnz1?N-)|7+DYDdu<es|OyyLD2;Ou~5+;039YP~3D=uyJkPR@-<
zZQ^)(d9cp-<?YiirO$k+@@ls~t-gC3h_IA22RmlR8XDeAD_@(*%bF%9Pl7I}%0W^=
zG5n+hu;sa=;?UD!_b|w8*cHL+DV8}4-5Sl~0|S4u+c6v?hOIu;^QK*}NA(JB@3a5X
z5*GRVL*$_%AaQs5hnWD@#a7R;{ATsy=@q+HbK#fZW+g~zgVd0Dj8(>`YOw7BtJRO@
zVz8;`>Ff;^K3Su`n8KO_*Zuq$3auXQPJYR>^$M(7UHTzX?4iZ&rUuM8b?SG(hEGv#
z{kVm51ltD!G;Sk-zKad}qa!q!c?u4^c4!sT;dV{grz!~!2^*L!$)ZP5hSse$p9qkH
zk5kQ?H_48s_tPdJ7M8e(5D>`~%UQm3&I{IR^CzKtz4d~?#sIb|YX}5<Y~_-~`kJmc
z5pM#TfhThuU+dSAn5f21(L+t>dmbhG&WlepovMzhAjS5_qu0_RFMk6DOT0XJ!v|x;
z^1af6tRLKEM&U(!NaIar>+AMP#Jg2`R-WY2j+neEe6V0JpmI*<t3XJ`Z6j4HDDbRz
zX>JK%yxaCw^37OR$XtHV&i!v$fdB%2LUBk+#>ca8Ah8bci%u(*lZ(!|AgHg|q+Dy`
zWRhR9FM&o=OH<%YvAEIa8CcYlYH9Fhn$3C!jeM(XIY^i<a1VvncWvL@M-c@m5U@ZN
zd#7^QEvr84Y%|G1GbIlnqq)-dxA_U|6L^cDn1KyCbhyVjva`yBdY6h8HaItTw*a_l
zQ}3>rs-~w*Fm+q8uPnl5)&2J8mvFSO9Ln~Y4@rWGhv0+Qwr@eoa6?gXl!ioB-mc{j
zK<uanm&x;BI)kwIcPxM1$LLDQ)XpS;O0N@C+b(XU=bnw`k|vjx0q#;r6T5l=iwZJ$
z@hX44KYHXuyE46tystUTKH&IDM5L0M<MqVX&lbtRdb@N#%bUp`Jt+#NO?l?lzvLtc
zz1?_0L}RwE?a%@w{?&GYcT?$fm6)(61%0Y(Qp1p=4^vy}oY^^?&|<Mc2#LcIZqpa;
z9k(_(J2dCBy5p0<QqcOZv$5a1OENGrGyXLj`_~;VnEs<3F3Q!0oHtldmJX<@EG?ow
zB7tOuQ!{X@JAM~;`OcB?krOsKkUEM~LE69m3h@d3mthGAlBb#sgQ>&UDj^Kmj#ejI
z^sB_cgjl3si@(+zVFr%&55iJPdmgExHdhv=A#&@#?WgG~eyv_AKNO6}OV5)Rs_#=C
zU#x8S^^pWANs;iJ+CRj)31(kf*=j#c0H1C(O&6FX$fx$nlqF0U8NNH&3SXr&iQvBG
z13q0UDe_3okKVxT<DIMl*_z}00cU;Frq6E2nYX;G#x4fnSU}`7a)abBD<K1ao~PR=
zPqw|1;ubgB(f%NNd_|_KN$VAf2ohycjjOs!4P}(2m^Q`D$-*0>*)KvT=)E%~bg_1r
zl?e(%xN{WEKM<@8x=~V7j5B4gD<B2OnV_3EM~cgjPu^L85v~zNLgY=&5hqT_1+Mvm
zau;vFLa}WjZ{kJWJis*-dfMqR!lp>t1IVa1uh*SEPhTwIwC!*W=>4>vZMXGFKGfz5
zBN_XZ-HMoQ6&KS>bUEDN{jt1RmP}bmwuCs&^Wll?+>wsjOnq9}%aR;xtlv;8{M%VR
zc#Rb`V|jm-rAbz(8BQMp7Ms7OR)+YAB1i^1zQyuMWq?F1Ua^Gofkc*cF;i=swVj6=
zXT1rF3Hzr$CP{AI0=A^Y+LR=jYH~ao)U}UtMJl?KfrJ*+Zz9SvVTz|4E&}Pv4-8mj
z;W3fc+(J>GSY2a{w2;K&=DmV%B@^sF>k9qiw4`6$0Vhsbz>b-b7T-X=q3=FE+Lru2
z1-qM*P~hFk-|!v=*_a8PxI((cHQf)=&G`xXC;OEfzL8v-InR4C#y(KSX3+G7wn@Zf
zwEBS!S0wYv{nqDm9XRC#PI%#bYt=^+tO`3mav5$&G==h`zDwcm@^5rdU7GRT9+_+2
z#3Jxey|tH6UoVAH?3BNe4v+hZ^7RpcBb)+N5l^BnuY_!$UVspBdQFcSJIbTo#QyWV
zh0BM;0)+forc3AS>|~K)O*KMY<=F7FA~7678j?3=riMU`?IE%pCVd?V^~@*faF6>X
zG^H<ClYH!b4rn?cZU%3Ct5$P281ckpob==iDzPPkf<^nB&<?ylu8mkzMT=2<_f2p_
zOP*gJ$>mCO56EyjFVZnv;-#;7O9f*#9)UQ|kj8|IT@j5tpshS+S?r<wg<49UF5obX
z{WPRyc35~Ii0dj250eRM@{Ks<hdl%Sc>XfgkyJ8vX>3Hky<6lia4)7SGb57Eq-5Ec
z)U^q^kQn^pgBA@Cn*A3sket(Cf_7X^!V*pjPN5`S=JX3ej8z{#jW8JzbP*OPk@KU$
z6UgWyh{AHm;9$@PyxVl=Ew=)0j7-^owdizb&{uhsogPR7M@w8|MoB0%po@oEoJ1$g
z3CUHc^~gur`DQFpTH>^j;H5t`UYsKuOlQ3Q=`0O-X0Q_U=kYPjI5mliX8wTuKy#Wi
zUW*OkK{LJc+ilPoQ!dt)FS(h;I}j)xHYXOV%t4*3WB$SOcO{hY@Sr_ryK}ZrZ<cq`
z3MMjaw)W7weJKbYsTzFSxDa64kCeG(I~6Gv?CC>oqYYVhEyS6GO8dlD)(m~%vtd4d
z{Nm53gKYRF5<7c9$2oU7v3!nt<g*DZ{KeRJUu>q!DVNJm-&P`2x|xv2P$EX!UfO*=
zruPE5TpH=p$%OhbBwh^|@=?8bhm`m9!{FL7B+!bY{c-wE)9jcMW^tRju)?w5z$``P
z{6p1Fp~eXqN?7d3OGiM@m<s7H0v>al;T+{Iajpz;Q>QfWWN|F3n)oN%H*c+hOi7SU
z$uy?pE+3Xi>T}`SzU@YF)n({7$`Ku)K&3~^fyG7Sf`pfMo$!lc*doKSS_o_15(-y-
z3@O&*&lT0vzedbuyE^LM^0%IqW8NBHBzJ2NOcAhm@&c7OaeiEbsU&#stR+T_#EJV2
zVS%ZsgqWlRB(6Ip!5XO1mbeD3xkam$QVH(7Drkofq8ou8MJ&c6#aPp4r%ia-n`bh4
z=sA;ek$2;@qozcf8p!<dhK&z<W98{!zFv-uik$i~Md?j68C}+BJeSX8!nniQbmMZz
z(MUC=B>DRyT=m7K=^%bk9&0$lnIGNy(%J*vo|UV~mhT~2S)$ArkZ;N4^tWMc^~uDn
zcS_Hw<&9Rn3dlNTnXA?vlv>nV{S#-6O<{mhSU(2E>v6Pa@$m-lM<jYa_jQsUA??x9
z1c@aT{Q!siA+(rdotu`!9)t2mMy~s~b-6j&VhJR4cYRqW&K$9o1g<bk=SEI+rxSgh
z+?5)^OLe5xx6>ouNAt489Sia>Jt$XI$yq3?`ExSd9)QM?rCT5akQJ0Py_eSCBdA+F
zy1Erkp3JpjXj)786GW_TQdi|edm-0}so*yqJeeW=u8OPbk0Q}DPX*;uQF;Vljw<3C
zEN+e8qKz{LWAc_!yC0c;jU?gb1<xg<n^(3mXlClxLZn*3U8`nuk@a=>d>HL;w-B}B
zw=q55ERGyI{C=a`l#_&mD&zV13H+2OJv-b+u;6@oi>m-QLGxs{bYpr)ZdE$2%_qp9
z`!iPhIQ`9=g=xU)4P@$uhu6Ot{#S$kavO%8or&$Y;s5<^_48>uN^W+>06BeAV}P`=
zk-5Hrtt)}%%N&4(o`Hasok1H0pkV9xe6|h&-E%GnV;e_;m(PS1o}-O{woVR)#=z%7
z<Q!}b6^$J=0ncX(5df5oT^*n4L~Nfk)BlnC`Ai;w;B)wy9!T(V4@d##IqI3&SI+(y
z*?D<^{I%|Xu=Bdd_CN9S`(26u|HZ@b@&?BL<mY8p_IG|5Uf#)g5!C+zKY#VjKjicJ
zUHCuo^LsA&zrfF5viKW6fA!&?_+fm(>;H~?82=A&etnDP@A6^%-@`NGU$Xdzd|vOd
z{u4j{dw6F0Kj4}1uRi?UUw?Jiv#xknKLoG(2S@;rG&cegXu`aRPXUJhPv`af4w%<5
zpa8@0db1ejwZ|1;UIqQ^{E<bQ;8_Mv&pL<g@4Dr$y8f(6P~TDC%GUIEoqsAbX=6uy
zqvsR?ra#L1n{s-|@h7+x=;>kTUt0)JV262a7C?a&=Cu$0M)4B<uP9!%z<)>axBKY-
z8CMK1?EY7Eykh;oqxi2|{)(6Xs*YFr|4AXB4>W$UG5|FJ2{~ysDkXDkV<3%yt(DQM
z@ewix8akNUIodi9JR7rTO#NZ(UMQZeleq)XQP51^fq;<#Af^AOpPrQwplWX9Xa>}T
zVPK{sV0;z=GxLkEfB#-$USsKAVt(g&aT!?IV3?m{|C8&bgy)>B|G4O2*q>3&`iyfH
z7S>nyx1Z&?$*inwuNNcROE<oRUUIQBG5wMAx#queJ(s}D%<@mA(9=D$^-|o+^+%(g
znSE`>E4wg%GW|@(^jzc%`HTCznJ?kr`G5P_UIoMQ(pZ?6IJ!S5p4oe)dX9M!!%Ka?
z#qnG(`^%92<Dc%i&j0i8rL;dv{P%hOr2MyKyo&XC3L<Rtd?28?jVS@st6c*qIvF^=
z%y(Y24*fqy>}%?un0lQL{iXxFAndPzs<{on4bc3ru#mZliShH4=y?vL`K+$!04C-D
z6Dyb(3|X7oI03c)QN!N`-(R4W<`>oA7yJ{n3bxkzHvfX!mv;U?K<(cJ`_di1ua~a)
zXUsl#-hY7DS8TsR;2(nj3!Q(W^#y-_blXeHYmLufc+K^k!uF^CIs6Kj-_$P@ugLuq
zoWBwMQqM~nzyIlAUP7<neCGG>?o0gdHoSoJ<$4LfxG&@6&$PeV`J1!f`CigrxcObi
zOWDuV&#|w+KOx5WJih<u@Bbs9vM~J<P+tw)zXj_5oO%6)#s3_rjO+k=C)?*kGtEuS
z9AVg5{s>tan>fPIGtvVLoUE*jpS}OLaQ>T~{|nAiic(^#Du2RR{MpEw8~#r`zuMOS
zKnXwB{dXn&KL!6s`0uLsKh+e!RqO8(|A5%<&>y9|0{OZ7{{Zt#=&$tOzTf)tIoIEz
z_;*OX`2R?K1>!#d_6o#jSifk>=j%7kOF1vxy|{ls@UL3`t(JR+>_0*0bsq9>q4T#s
z`+uk7{-)Mm&FbG3=ZkIqhuMAYe;Ivi<9}nI1)f)%nl#L;1T+kEEClRq^aL#IY}zkp
zxjr93%LD`92O7RCIG-b*SC9I3V#Y6!{Ui8N$xGS`B@EyXxbfSVT0O5*VE~Gb#?~qX
z^h~TU0BLg|@Yw*o!s*3YKNs|D^PktM<N$tv06-8R1P}&@07L;|0C9jMKnfrYkO9a7
z<N)#j1%M(z37`y60jL7h0O|mJ!1FBOdDs9g0s4*r1Au|Pp(W5tA7}<JaL_k2ei=c3
z_+CfWtJl)l@vrD-{~rm407F|VTbt*9YioUg5x^Mm+Ae^xy_3Ebz}VH$O5Yk_@@h=X
zosFL@3c%!fp$#wvm_8qB`^*5q3}EJFXJ%{zFb7xwECE&kD`OxKVEu>D0oVX+%x#PT
zwgB7be>;HP%cA|2iC5nrEZ99a!`A4Jk#A&R1#kcW0l?>TeQf|hb63D0jRM*|Hwxeg
za5Qr;es*1K0ZsrX8zW-}prNgUF~Aw%0&oSm0o;upY$;wl`sG01XC3`I)B1<ydky~y
zkv|UW{rg$H&wcfGlPviAa9>s?78V|!zmD<Ea5Yy_+?l_Q61%p^pNg}QeurX>r&&Jl
zp1#i&9dgkFrys=Eg+xHYhZV=A{{c=PDuymZALVT)sP*(rwuNO~eId}g?!tAnbu##(
z;%06<vtdPJ#cj5s?Hgj;VMc~W<MBcBu_#|8o*?uafBSo4!>y8^2k7+K4-1%$17J3T
zST-dKI`1Al@`e^N;@#!?yW!m;tWz0UyTZf0Au4#_2hXO|{Pgx_9=Cu9hulmz-!ONq
z<$4M!iMxqW3R}P0O{|-D7EeAkGFazop<};iwZ?FZrH+>G=^NZYX(cuch*z4trZfmx
zFF50Unnirtk^kj`SV(Sh(%jg6fG*0?W4oBQST-Nm$ZW3ZATf^MbUHc}qn*8czNF8y
z=0S8VavVO7??te!cbL6JrBb26U1)ebj~SKXwS#^;;zOa=*>x!lF#TF{Yb#kmlhJm_
z9_Ai3FHKXJS?F1WJ_Toi$Q++4e3WaVcwfvu1!_U-6yxs4A%s^jqj*t7JOyFF<CHKj
z)+%J3gCUnz{Ba7y0=X{HJ!M{`RlvFsLy@znU7oX;bc)u3VoRDP_k(<VadARIoV=_Y
z%~br9qs6<rxUhT`d0Bb;DT~2)_f!qZ$imEQPYQs9&`-rN1!`u$R556Bdgh=wIh!e-
z@5&a`=rUd;V(5*%Wq6Z2ER*GKWp-s2hnmM1OPqnQf%aX1J!{AJkL;+UaJ;eio5N&R
zvTe-AKN_8*#owd9Z|B~+P%0%mDt33@o*X^<es+C!DpifSRo8tGWEM)U;JBwgUE5x3
zQ6KD;_NedQ7x;*}iOTWeL%2)WB#FU*WSr~3X&&Z>@+>q43VW2)%d5@Act$cGcH_N-
zV~TcJZnmqtsfL0l#bz0I#a@BzLMpg9y-9JKTItpKO+9cqlPgeHh|<On)dC@j-KLut
zPS|}lq!Lhe<1OKFlyZzEly$5+HP>N;;y<cu7{ExgNvxd%>BsVzjgzrRxjqNO#|(JG
z|KwfsbdfzKs<B745nlLu><5=ekVeii>@+u51y(-2IK+qiIM+G*>Ev4RHc(vH^mxOI
zvYEG#df{FFD*rrM(HO!wBV~Wx<eKn2&eVu+q{zp7bPQNx_wgTQl~$>X>bUK)K^JE6
zT50c%30MzyV|%nV#8q&$ht#x+(3bnDh6K;Z*%`mNw9s-3XNS3i>L6KK_ZldL;!qAX
z!}P-f>r(7j@e>@AvMEcK@T1nf>6d*`4Z4-)iJS6ZJ|fJwkbDy;8JAn}{#BR>yPkC#
zC*kBq^j%y|1BXJ8XOQG0fwAl1XX2665<{0W=UtRvc#CZy(c5>=PYq;e!5sbX9~);Y
ztFSP-9H>9mp$gm1Ncr9isJ%5j3Ap!dX3f#Yu;=>TJTMsI4OWnQGUXBPt!{^1nXqmt
zu|^}<TChsMSXK}j%rqa_1ed&qcikv=d7E?rd76yrA6*6|R(h0Vzg?|8t=y_GA#0lj
zmHtcX`3bdkjGIGHgtLuuO9yDJKJu`001@q{Z)2lg2(q1HKHT6vbZcq4dN@)(XPCo-
z!}N!VcaN^v-V|Ho@3RtMHzjfRgDM7|v<=LHNo^{YJTo>DyB6G--O+*-zDz*-{eV9~
zF+?243X^`@YalM7=uKK;gi~%@n1@i?0`8NY#~CqVp-FPskrj4kHQ&g>crg7=p%owR
zvNT^EW5Wx=`Fj<jjau416-Su(S=W@Qwk+G*9liK8%MZhbUe3a$Q6(FW@=Y*b;ExU?
zaKl=X&k*iH{bF$GAh;l83kUD>y&OD*`ZRh$=UuZuaB)&$8|OykkPPYEPlOqUbhf$D
zW=03tK@E2?5~A%cWUOAJ7EcSmd&56J+eijLeX~Lar2_{15N5Cnw>)r6D^|(6tgpx6
zH8Y#d9e`!`YgIKFd~(J+a>=s`^`@s^sLn+MDZ_F=h<~^$mgVi<RU21Mnz{Ti<uP@*
z#E>Orsa2$OVq^$*%}Fon*{y39x4gYHcWNw=i$l9JR2y--rQem!H0o*;l7SvXN*)qa
zF9Sn44t84(n$B41Y_eC%8Z`$2k9iha#3H0seEIq2(uI5)XFg4E$!spEnfKtj*)Oqn
z!_WofjmmNk;*HK9qx`|Es^5EXk|IdQB>-$pVC4bW&G1bTarYs|ALU#=(wSI>5pj(I
z4*BjZdaPv2_v88B!-F|eenDZBV)RTTn9|cXV=EYjGuzE9IVV(er$v!`rvP~izk=%S
zz!M1jY2lKkGTQCE8kFf#nTx(j;vNUM$8PovkEyzwjQhtgJj<y|5y{8fGnsy3g(t{v
zT^PD4yQ8A6(P2Cps@aT?kuidDDkgde6vo^~1E8QA$?XODlgWrr%<x#w;{ePOs>n*l
z82(>YhX|z~<T+QV^6AiFiHS^ddHvf?cO$=qY<w3n7WTZ7>6IaB=O;=sa<m&t_y2^?
ze^-vn6@;jkoFcSi;c)SV9Mc#x4^vc?1cQ{wWUXFXvLWOAo<h!<tX?=YCuRJ{n_tr2
zraZErC{G=Nt8%LI^4_86GUSrBOS|yY!qe+&w_k5@p0~{v8f(s@Axw3$Y2tCyjHC=i
zeh*3rQ?dlv*eg-x)HW#mjLXuAMC}ON5(I>|E5q;(G?<_t8fNAq_K{jIVJod*lES-k
z|73jg9xhOu4E%ITPq*aj$uD~l0XsTuUu>jnSh?%WGzO%Jw<jt}ZJL9wU8c=0t2f@A
z+A&R?=(Hgjh@}YvC+#0^ZCA#65Z53tuiIic8{DIP93@K1#9|9gNr*#<YU@=YlG;85
zYRM*S?-MxAz4=9;HoC<Q&i+H%*j%~b0<N%N1QW+%g_7j*UQK+3<%cU$oSg%q(dMA_
z(_oUsorz9H!7AN~>SV0r5eE0(K@x(yp}9rk9vHZJO!%bP#v0R+NT$$xR4uLHMz`d?
z^w|;K=^eP)i9QI7-4ZD;I5<OIbgxmlVn#^1#_*^xiGc_~sj6OQeu(I*=T6TDjBKx|
zNVPjWjrR#=Fz-}~HB5S`cub5ah&bMAP{^|l;0x`_#H|M+IBUyG)a|W{DPZDS9%ICe
z`^bN{#l?9_FY7K&y>cVz&^619uwKMS^OYne{RSur^y(damnXm>7^Kq*YKvJJ2+}&D
z6evO3Z$aUNhL)oMOi8KU5I|otBBxI<!p!lTV<uen8w*YQSe2ZnvZAXpqtg%E+O5?N
zzBQFqfo{2=x+F(7uRBkk#$LN4v351l)$!VwzJh;*HsWXgw4Nz&Zd4w|lVZy<ZOe!Y
zbNTU(#x+vSiTI)V&NCBTSxl}x|4UuSVu8}ch?{T|&4S+OX}m!TQl{Sl@5aHgw18U2
z$QS3N#5$y|_tK|<N#G`aWMXGZ$sF>I!Qri)CdSxs5Q^{Pj5ZUd2S2AiIgTJ*_Z(Xy
zRKnMk%3RgYbCz6`d}01>6`uVjkq(}QSzBRZqcqCZcFr9q8kV;NK@uuNI#kFn;>P#a
z$Pjq_MWr|u0&B@wHqVsKBrwd3jK?u0GFp717zs6P@w>;?<z72$zsNY-_Zl+ScN*`?
zzNf2~)vZ&d7h-v?>LqQoFnq6@l(-96L;*J!b<gDa0MWP3MlTc_TcvS=5qqFZVXhM<
z8rthfuH8c6f)?Y`frBtfgYY9tabNk{9J!+Z7i>5AUamZ0VwpX{l_z8oG&>8<G@W$C
z1Vz6cUyTP;*J;){%K30o=dTLFStC?T*-Ci>5{g1Q+ZI!)o0}@u+TP;l(Avb5g38LI
zcs>L<?3E-d7_ejO#OsY!w?&6=!bL<P<wK(*OnEra$`v(}J+6sFR3+v-(~NRzY6>bE
zI)z0t^+sy(Js8p{ID4@&X}BXR>6{F_WQ{3Fdcl$So@x?@0_B!C9wNG#)(9p+KIM75
zu3iL1lEC-keCM~AuAoMx?VUEF#NP!s8H#!!&Dlaus+_#8m}PpjELVcQsbRDjipqK3
z&&i+JH!ZwrKhr+-M`Mw}s-q<RK*YgjrMpkr<9b2V{cZd$Vo52_R^P5E=_3X*`9=1G
zzp0T830%k0&Ot~3Eih~D4Kv+nq~rsyDaB-RM){)uO*m^uMFK2THUooXVt!N?PVH?a
z&<H146IE(^w~XydZywqB3ygTpmGPE|k{)eBO8CgPq7ZY*FT(w(D4T7q6G@!&lsLF~
z@Y40mqm}x!tlC;0^9JSsqmWVK#dVUe-KodDG;ct0F%n{sBa*+}^9ED2r#JE_8BUvi
z>WBJ(1jB$|EWOV^yk~MhV5vFQ=3h9R8D*+B*WGkF95B0Zq8;n@)Mk%X-k!0oq3^eF
za)Ec4>R=GHY|LicysG1L1%(xEe#rSQz^e(%MJoqwd8BlNFHZ($ezSbKeEX-|!Dm&p
zQtJW_I80%|vs2Y$8Uga{r!^ie0o)r4rvukZZ;tPmvjJ9%m$Tvv1B;`C)?{DZqAX7g
zA7L3w#?6CT!gG}`M?57Fs^7Un;;|uVZip%w4WFC4e#pFAUR<H&upC7kte*r|j#{@2
zq;S!p0%EeCO^8wtjz~<JE26|R#v=jc+|V=M)^F{jo3=>kjNoP}rNxfT9L###2=c09
zgwV^_L(L}S&!inQEK;W;-L|bM9+xkg3OF{E+?lWsaBGOSrx{9$;9`4z?BxX>EZR3J
zm<iUU)_SC@vCVJBSCGoB;Q}$8UAotuL0Mrl^#h`N3m|gj&{UHaQ``kkhRJLy)RON*
zP3W4*?(!<F@dwNwzO%bxWL`~#(>-+qk91cO^r_19VLNjxZr<St&GdsE_L}YbNIH_m
z?)sp(3`#p$>)T^x2ACSM(|@Wxvoe_L_c_Oe@iQ9L?RjEQM1wW7SuM09N4V|<8`g8j
zgdzYjr~n6-?GHId2})i@?3;gkg0x2pQME+7sP(y&uJv0-`Pe;X0NJC4lcB1%a1`xW
zOj;W0$jqi`w$z6L_34QtJ4f9mpvAz9V2Q7*xkDfi)??%xt{t||2d1}1`wtf>@;fBE
zXb)maZg0z+h_{{=3AL0f0IbV~9ce)W+fg}B^N0)gD|{!69m5{5?Udhc+zNHeDSmXo
zc}x~)V~aoigh((RW@6A=Up7s%pvu7K1gEQ0B$E|OC{f69U?B?1`o4;~m=QjAq*Jb2
z7FcXFo&4^)Q)ohkHpL^VHH2(Dr#=-#SiIke%Vw|M4LNbb`D2;9dL^DxWdtI$aIn0c
z_I{+0h@(Rx4<(`N_ssj))wh-2JeS=8++LHgc?-{9@}wF}QJULY?|LZ(mdO<Fp5u=6
z-B(Bpv^H;qsfb*T?ym(L=5Jq$wLd}wb<QmJZOO~ctm8trxi@R(I^BOt0`i0KIX}(+
zyqa}d;u4(RhzzKh`L$O<g}~b>VqzXi(U19aR@k}dpth`d37^Gf{tjaK>)r#LS05j_
z`LWhJsq4@t*Y^n8<86n72zwOms1zp@IAE01(xH_n_at|)mml^4?X$zH_*$*h5v_jQ
zP%{2s&#=J2deeLf(7J4pKB5dhY2~=#v@z}*E;c%I;_8nU2^RKWv(^aW!%5Bo#bEGU
z+r!@X(+-eQUE1yWXk>>=&|nPpKSd<}YUD!|gctA+$E)fcL0{EVjIC!Y#kuE?zO`u0
zt*L7&&o98tAS_A-!k=LAe_MLkkMMWmqKr7Gsa3gvIHH1--Yw~JP1@Cmg(tkFae+cX
zI9Y8oloyY!tIF$9P(0)t&OPqfaW)gkjW>oik7c)%>H*eA7j1Z{tzJP;chtJ#xWgGc
zv($)L3UkA;W{%bA>VA6M5sAsY86$$;HP3l?{;CKzA_VH(Mda$nh3)>Hm=o-$LL7a@
zR7JhpRXoa0S7T_7aeAs^6%wxG!3Geh5Xv}%{sDE=UG4x=8-)W~R=pl490Tzv(B8wi
zA*UUxhU{}d+=wW+%Kba1^mxgQ7RGdQTSj}VI%vt%p+Sof5>+f5;Ap<n&SiYL!Dw`r
z|E$-q`vuwl(?b{4%Ma}1>H~F?+zn&tD#1?ToJ1DuRts(ck>K;}vtsppv5r}|(hXsl
zj6R8{>Dgf}#epLT7AUz>^9qvo`sSg+7S$NaM6f`v&iCjAN<sHp&`-Og-#!7$zu%!6
zbMI1~@mXr8{pjfL=W9ouFumjCxVt0b02l3XnF3Edtxt6QOe&m$-U|t5TDZ3NK-jLq
z6=jZ!(>dmK%b5*&-_!tYslPZ55&<v>I{IQSZ8D>vL#K5~&Xu&V8Y6wmf+!7(@1T@(
z>Z)VyU7g)8mmGdBr=ntE^1&N}muj13b&2vWa3IwJ0ng7&teK;?r(s0q{?m3+G6Xi#
zcj;@}(>xC2P=q~Fv8342)syl0J*foMWa;#`Od&oG<xR)#*xmRr=|E^}|C2TJ#+8%p
z`HMdNo`A1GMqj*zP`3{kBKk(48etUkPJf1E-&W~ObuJB*k7LB7@f1!h2Ibm9q(?T!
z-qAJ(FWVd*@JvoVymue&(4Kz~aT>Wgmlr!%ZuwTp|0Z;Te92_rxG~tZGR!&EV%p@V
zn8f+i=5B1lF0wd~Th!`SOf6PoZQ&=gyHK0ic>Y@h<R`HRajAX32N<Ko&mSy>W%=n#
z7&L#@76nV(dCD{`SK|)`x1*yrsQ|NnR4S{&pY4d<JaMUem?of#+~DfYS~{!P%xH`h
zK5=O;;HEZiR54w<2YQjs`#o%IwO~&)#pc#ex+VI|6@cGbbM(oGV(gVn3?OHc7Z;b7
z=n3J^Fij=QNb{IWFOD#NWLGMMW{tQeu8E0}80#PT#(bsxsaL~+%)q^jGAmY7@JlM)
zvb4!$X1gU5OVaR%Tkg2Z9_ReixX#p%1~D_A2gW)K&l(J*I=hDvz(K#fnJeFV{P@;L
znRboJUQs-YVZMe+DFYC87Jn;!*eUN;*Q=mJ%Ws{yCHVC%j?(u+AkAEzD51eEq<tyU
z*QPgWjOiWs?{trYOO|_sq6EB2C+0yi{C-&=Gj($*G<>u<(!eN~v*BEBzq{~A@)aO3
z&|3nt>zh1f4BuWYz8!GUecLJSVeeGRgfymEjWQNuNYKOl(OQIAJ(1G#t1<C>$a>@i
zgikJpaoV}GhGJ%C(U|1OEP;vYI=U-%^5BN48~<z<<vOSeG>^ZsjSvvC#@nH3rMjZ3
zvzA*sz;uhdjiHh8ljpY27plWUJ=w7if?p|QF5#2*E4AHJ)!o|CKq~tNPN~oKfWu&&
z(+?iI<v!k^!<b+d0UnunEbUz>ACs{;@BFpC&JH_Jb*|au2CE7raUyH(e!I5=EFZ}j
zIM7r>Lv$>`S2Wkxw&b7<WOqtp+^&%!XZm8WVPt7@S7ie>J@5+>mlw(%NwPv)Kb=8!
zD!r-M$Jbn`y5dY-*(C+@f!*{3Auw$x;FbDyrl%&Gx#+K2Gn-xxPbTYgHw_XY*pXA2
zp!?2a)rGan<ycvSUl+lJgy|N4MY$DZtr$v@(S*Xe@C`Ytb1+?IJ3t;0WD<`DYP6Ps
zT^#BhIl`lZo10DkOM*ww$Ldfo>`!)RzF^Z6^1;`ll|l!}M}<*Zhnx!>;}qy#>$>xJ
z9^U6;S@C#YC}kgHtcaE+zs{B3q8~;hcEfPt6P+L`BYKieI#)n(<}CP=xPre&+z{XO
z=nPOx+^T{iG2+f(_nJ+&maw+=2yL3uqV|9-S$ux4L!`=Dq;wF=;!^fP2Ejl`G9b<%
zu{ypRH3Jhct-ZS&TgSm^g+OfUr&W1sTA;;sU{ywaNL7`4?muXt=_XBFVwjrfEL=m&
z$s$|=H#7<pK8YD7Z3;tEUr|yZ09(T#<7B91rQo2YA#YNrFps2>Y>Y5SAF>6{PCB@p
zfFS)5?Eh-*D}d@swsvus;K3b&!@=EMg1fuBySqCC4IbPb0t6?x1$PJ@+<7N6bMKwW
z%>VxTs@^Gz+Pn9X?%u0+owL7Q-(rGuk<xaLv3;lKO3_X6s{Dyc9PdN21q=Z2xHW4K
zIZ!wsI&yIX1uPX)SC=zC%~Lx(5nmKLOO9Qqz=fufyEs3;=-x3RpJS2q>HXgP?rjQY
z)G~_+CtJv6xXMCc`g~|;6OzkZ07-^lLh-u}SCRHTE*(g@o=UydjYKQRsK(beM9uy3
zULvQae(y{N4-_amnr=hWDtPhTKy}UaZ9f234gvw1DBeEa4;I$&H;3q+t-e~iA2TxO
zMY=IuG_^kA;L>otA$>S$(J5idK%fYs<)6tTm1A$?EGsGLUvu%0ro^mRPQxLfK!lyT
z!^V1EJ~TCX*hPUGX`Vs(0+ta0>3K&(=ec4{Jt~<VtXJ^Wv66zsZ}uMK2UJy>WL)pu
zF)8tUYiwIL*;R0_wib2A79_mwdvr+M0WA%E+iX90pMe!vf)yV!>W3QT*^LFvRXy#%
zF>*zPybO7@9$<Q?wT`**<dSfmpPA1WD);^O$l@1s87Yu$p0iY&FZsnjM#wBsDTD%v
zHV5)jg*;r^M`m|=^&nKf5(VL7ETUa&WP96#d>waE)v$iH_G^|^Q&yKTt)X}pw#5o@
zj`E(Z#ei3a=RorAw(QSN8k23dMmDo9n<i-Aj@_7FNuEgtm?pn;NIAYD%!7~~gn6^~
zvUJjp4<hVbvJ%TsaP-$NGQYB8Za=?Vx<P33`Q~&oXSLrmH2TE2*NX~e-B%Z!>cM#k
z*}6z-Lb?hiDs7mszjL-RZZ5C^?ZN$cOZioN^ex^6Ypow@`Z=P8_;b%KWF1fK^m3m8
z?Zs5}NbE$k^n`@S7|Jz9I!%x=&fc63pWAp7{6wm!qoTf_Q_!G0RePJ}CQIkwXPl+0
zh)=sk58^Jds+W{cUYA~#<It+bi31D;eF<VROz!YDOYx=J#V=$<3MOlxyV>7&zeS1~
z8yl*Pv4R`!!`*9fSaWqv;B16KIdi6o8R%Ev$Pq}xO2x#)Xi&#1QVDlZCc7UA)mZ8v
z;dDW&g<NS#C?JftZx?vyAH~=oqa?&pjyhm7HkNH*cplYp=KDS9F}r!vE77mY0~tOR
zPZ~BZJ~XsggnAxO*?V)eN|z?je<;r$tVWSWB~Jn;e-_8*>Fy#z^i2&55V2yIIpOoe
z&Nl5F3R71Miwn-*(0|9FdFmy?#=<9Y^@{#=?QTLC-yOx!`6?)S{@o=GR8k<V%R7Q1
zdI{O^?a}veO=2jGntdfX4ms`5`B=_96^%q$?;ft;%#6I&oY@eG_a25P@s~+R_WDPr
z58}47EOZj059GYGvtMf^ad&*%RSqN36s9MW99Wsc69&skkULObU{n)X<zecfSWC9K
zOon3{BICKluD-`4UE8Qp`t11_>}55In;xgd&Sst0;x-TML9(Ss<c952M*41H3Sp1h
zc&6NF#B`q5(OtSuB<Z^`ZetsNHlP@5L9!K^GQ#5l9StE0yA*kc_`u$Z_Xf6wa?LHM
zbp-_eq?hka>-J+W*7@!F&edMda6FH)_DWb2;1LY$hI~Mc0676FC%jThK*l`~u(gpA
z9wvg4bB9v=+O~bBK1rXX_641eVQ;j+Cg7DzIMq^+hL+5UZz3j&#C!ntdc3eP?0j*K
z&z-gx6{`9%GME#8!0#Ho=Sk^keX#eS(A%b>0oT;;iFk}_e1q0Iv2)JZ-#j^t{<M_(
zt70y>w3BIP6hVO%d75<8sMM#(3ggPq-YKUqIO)_IsNsz`y0i$NrQE`5ZZtpm42eWX
zzIjA)YxN_=b0O3&I`Ly7oI9&mId9n2UT&Uy7G<0LvJ!p5XHP_7Z6>5(+1TA+le24%
zLBOAQ2)j^kqg#27P5@3@7KR{w=X1zp9SVJ{+bC78JV3?bi2ix($r(Oe;O6dZ<A=va
zqeXMkN4M^igOg6q@0&{t!)x64yI*G(t_bdW#Ni0m>!lx`bcL&#gLHI)s&mivd}MOp
zVh~~Q=0ss*LL8k;i7YpZK@y%Lb>E#gMs9c7y|G4!DLs_3MLG)3zz`-oNQ#`VkuM@)
zEOS)rQ!L{w;V9zB2#`kO(ofy(^=msVtJ)8wCjLzA%m+K|Fm8y99Iwff^Re_5Doif)
z&Ceaxe}Ja{+FSi|8^M2r(Eks+k$#8hf&0|x04$tDoWP`hb{5XRL-fGLKST7to&E=+
z|9SDBA$n%umH!f={|V4b{a+#aKLPYV(Rs)J8G`?PlMBQDgv9?7`2IK0{Xcm7e+9Mw
zXPeERw%_~#yxUm(z9ZmI5d1%Y@Bc>J|Bku;+$g2^C(Qll`TslS&J5uEGv@B$p{}IX
z{1TDiB$o~3n<inat(<QfS1ngPlAp2^6^)lfhcL<6e}kGRfGXjNDufCH0dvWN9LO;b
zx}QJ)tx1u4X}&t8>2^8H)-$&q+0*XqoVT0b7x_uhaa_afq;dVa>ukwB{Kqy7QW&$v
zdt+<!3!#a-#SM;|OYUfzung8%kCb+7>=$j;kIsg{Nid8N@DwrCS*(xo%=LcMJhuQD
zuaLJBn-wdkR$imaGq)%Amsr-3?}sEJ5#l5=I<1GNck6`#rrj-oWjYp40FUj>hr76j
z$@IJ6#mScB?1Wn4vf=u{HST3*79Lg#j_=)mw{8uu-FFazEq2kDkBq)bfm&O8g>=JI
zT1w4DK3N1EI(S<-4)$R?ljD;*1_Yb!q&%dZA8$mw2JgN+bak7qY1!Cyqvh%8FLv8c
z1&~V@jXJLBbZvEhqftZoa`c7Xko5=Drr;Q{E1DDR`z_htsC4mT;*N-BSi&v*-n8`h
zcPNCY@GyRcXtnW+(k(z{Ef7QI+Vn*sT4FwuR8*}9lP_#rI$K7DoVD5Nf-PugDBR&G
zU*rriHl@Z$%(uut=A;YAkj<mkelaGARTq~b)}>%WRf07$<lhu3d@}<>z?7XXXb;0j
zOys)ZLpFex|3ydci6hNHaNE|Ax3y%D0blQoWsPe7d+rWJU0kN<y*#CPB)y--vosdv
zoh%1mLS{Pqk8;U&N^FYvS$N#{hsl*nhq^g07s%D&diO4tSF`ow2IG3IwDz1_Ha!jJ
z7A5Wu9SPq@i}&Ama~NG9Y(@t?A>S#0#p)Mqe8{LC%VM6fDR$gjs1jNTsp711smC0T
z%)0(so>T4F{mJ{9!8{9q3Pqi#$8f0$Y4&BX2cCr*p7fLm+$kkj?xS$Q#mRxJhpE3R
zQK%QbvOrtqlqoF}MikVBwA`fJ&3H3;I$D4XNFo_0AD1Qq-K;q#?T#QEn*a_ghpfSc
z0AwF`-@P|X8=}K#NguEnhus)06h4b}K`ee*T_f0oyX+Vn3S3bG;VAR%-jt&IklYC?
zm37-T%UGT-0$00(U$pU~cyCzp$OcWU@|_eU>WFp2VHC)!e#$8ZF>leOyz%}1lo1UM
zc39dr-vtt~N!0Mnk|Kr#sG^COHHV{+knj0@c3cv25H)CNjh5y$qGuO)Hj0wk<w()1
z0LhTx=)F1Bh3-uz#R3CXwf0^f&jmTAJmT@q(l{swN>~3Y>{r`MnkXnm(4iq^u|vlI
zAxblN`(D9&bP0H5gpa&6Imqk5gnB;m2JMLq>43Vo&VW9Q@kxufmZ9rmvj}OFCZx>n
z!kHvRzTmuvg5TMUht>8siS(3idn!l9n_^QVNjKgeq+N-y56n|8^3n6EXltk|Nw)Kp
zSJt`V<-h_XMFcmvG$q(;s=1>?UtpEENGB&tx(xXn6PkMoK36(wHcDbW;-r_!JSNI9
zHZpl~7j<`@%zE{HJ5P}Iwo11NbB|{C#yuC#S!!K?#{6fCC!|#G!4R=M5ah4wT!gSw
z6_l5G%+4?O$nOH5`uRUve5`O^o4mh2P!WN$UA2E#QA{a|?niw|aTon!u`x|YtXo}?
zdtVtA6!00J_^qBUn~aMT>6}Hzg>yV&p;(!PT}HPFp*o^!|M6nIhxmb^|G?A%2zs6d
zBM8?s*Lgprf!KYRt(K7*XaM*5CyvR+efKdpkl2#VCd&9wr-^JS?padnh^9eqKGS;f
zT1M4xy)vyE-fl3(d^wwn)<U&BrBsyc2fHC{G%VUut>Fb+pHjkfHou&0x^rN4)!i?<
zbp$5fLPVS@Sq8ajip&#45GB<e!V3`REsu@(e4K)TyL*>RV7aslqy2^DGIQJ&VTH4c
zpp(q`hw%1|?P9}3eSzeVVRh2|rzGH0NmvM}*_rE@j2Q97ywmyS@P6E`N9kN=1-zP>
z&?k}u|3F2cz>?`+-elOL_L*>G7ng<Q%DC!06P_-tyDJgfL+0*tyBnkcgaDe5YFGCJ
zgKe`nXCCs%57WAKmxPR^&t)D6%wa9|$@l(P>R491;o#g10@^HCvYk!GgFVbHgAbxG
zgSR6?D_PRgc^`u>n##tO_%iPk6c4ibMB?0uIN7B$vNKW0<3O2+@)=iAR+C*JwM#aG
z-`o1RlyO>qu!jR@($GE#nWrCT=+oX4zXN5+L2##Igzd~PKpSF@=HfjlCiagiCAO*U
zaA(y)ETSrW^2zWnN)?OJM=i4(nXm(4aqf4SQXP^?n`$&B@b0r{5R_S)U#vs;uqb8D
zZZgcaJ8f8;lnF*?1g4?V)5`vZRW^*8yLB#J<0J3;KIKol=MkY`<zgCS4bnE5h5`$V
zqd1x~)FeUMO6>PhzIiNA)wA{)YEWzAsAHIH0t=eVK_WvE7Cv*9Zjhm4l&?mT!;DE`
zO2z0_<aKi#yRAl4xG{*HIO7j~g&i5woh8Z@3ma=TF7ih)b*QU0I0HScvuSOL87DqZ
zBms3&x;+)8u6!P_Rb8Cm;NPJ-#z#Y{xu_&$V=3Mv&I(w_rz_G@6&njwUtg{6%sHNy
zgG}iwdwFUA!cibZ2On)B4shg9Oh1zM7q&94`>XA2sX<sTSz=}$KD4dCEkLJ1+vP~u
zuFeq)eMz|kSRj^SU9l}7XIVvRYSLwaeMl)um!!-3@RkX4AncZ+a9F5PffPve#s-l4
zC|~wX=Hg1TAoT?zn?j8ZpTn=Cd{4QYvHTq?6EimkOmE?JnrO`<_O&)&>~&u(+&F*O
z<~M^XBQ9&#cwD$0wpBWu(9iWlSZNemKR~rIO`)&1;I;+7+hJj@vCkmQ(iWeV!>2sN
zuv`e5<xh0C0aQ0?-_agGWADR_n+e;GzFDh9<3Vg)$g4Yuojx~fkP*@usiz9ykJ&*F
zUl=lu44!@KL7Rsx+Ki9c6Luhr?V_wjG6Ow1BvQ${=hj}|-q5AHxUk<4IkJ#bdhm`*
zgXFC+emO}zj;ZKTaFDi5e2V#5O$P2M<}v}cgD>TmSv9|;ThCTQ6M_%96@eOBJqD-_
z4ha%cO*`LG1Q3!nO{y;FjJGF3R9z%>VQb(7JQ7-0C6*I%lMkmeQ^1`z$Y%T4OJk^w
zkX{t9SwmO6D^buvoN7DK<bvGpV%XuvWW_Mw*U|5-I|SOkZ6c#_;WfN~cbQUeL{bd6
zXb{O*QY=TMUS^g?1I>=lOnkF~%MB9|)x4pMBD`gyUa5y(6L?RuiOXR?HCIfn3<?|n
zDG37>SQyBUTqXel1SAqN@6(X?Z1fCbqGEO{n@32Tq^T@*Jgp$;Q?tILZGO`mbT|Q%
zgd$$T^+pvb6)U<CYW@S@uf%0TS`En05Wp&yyu~^guU>^UVK^+NM2z4`jSbLnn+#7E
zePT+GzL2aTKjd>R@r>_S$IS?Pn!7$f_a1i)Bn|E0P~|BplRuLjNCzloido274uXb3
z=V95d9OZ0DRF{=il#VQ9IGZNSf2s#z)>&7abL!w5*J?=;f_F1DCWMidO%n}#x59P$
zEQs~!Me|+<y$$^_ePqT<XIY@AvJ+lUD2j<{z!Kf!f=ok54kwRvYxzOsKKVt+56ipk
z7FhFLuZOz^9sWLqN19#&s*I}E>uJ)oArLu;>UmYDX$WaHqPBu65tq+9)};S3*4$10
zNaliM6(8sH<019y$@SwA-#4&CNP*0v*cl6du;`3PLFnD`Gz@x=NaM+&u$;;5fjPxd
z#H7ywi;A_FM>^clZ12M!PmB>H7-GJQ&*TxlqGauq+BG!eK)5!@NU>VL&j~>7T+9}}
zjnT|WNXaqUmM*W4YP{bvRiR4d_HqzRA~;(WEK9KjE7JJ-=quuM7cNq6B%J)IlqUdv
zyiv&kPN}vvucc7&>P^=ZZ)SEio4G$6H?fLsvTKE~R(eDlXD(9Dm0gSd<`6Vb46#UR
zJbpZR_^883A>5UiKB#jXE4Mm}rc^(Is1N9UpFN&8cvs!aa7T7K>C;RI-*$VPYnElH
zN+eAP9g_-SfGo=vl(pUouDS|4h3M*7H3qFkUjgmI@@tWAgVNwen4IKJ*8(ybi7tI-
ziniGh(;=5RMJiy0p58Z}e-CFXG(D;Xbn9EJOFzC=W_Cuo(ter9S)Q0k515OjEiC+r
zV|(j_|0o(s!J*?QIwmYxLad$i<dMt>)ax`O5o87xH#yUEAxkYny*b<7C4!TfFGXHb
z|5jn?USSt5xY@=EGs!UtCVDeE#{64I+F3g$xtOe_N9{eAmSC(JPM&XQlToYuVY6pu
zw!Tve6$o_b7=@Z!BjhRq@@n5p`P%OfMml}JZxWNd=H118#=-ePKp(h5%3JgmzxTmX
zTzJOAb0jxO4<vbJA{p69+}G>~UEt#v1@IAL1Ud8S^d~^Ggu&;hYosC{I_bL1{z5z>
zfSzXAbByVp0;AtmsS+$~<(O=V!Yk88l~2Cohl_ft1|wzL789B-o8FWw5ZSRY3ZzQ{
z=UtN>Guq_g{e9T@_+XW>WjWU?nv^gKj+CU-38~{W1QztfA*P3>q~wgTz_+8*V^DI>
zM(ME@I($Q;(`AD6w(Z9sK~bC_t?s+VB>LIrGc~R#^dX%~RIo{eq)R7LgGuHu<)dmk
z{qSYm>+u{XTvhOF&}>RBE;l-q<jh|n3FOOmq(aDe6|kWXQr2?&)Hd$6-A=RlnkK}9
zy)+aOzG9AM(9O3$Gi!e#?Xqs&F}!e+t^IO`6Vp{7<`KOJTZxtAlSfu!M#$T?t*2^(
z*`J6}rG>2|i{r;Y?`3XkRq%v9&?xXJsE^ja+#U1?`HKy7&W3=|N^3N|O4JQ1B10ml
zT1t#0T`m42jZXmoVj2ogD+5^%VnuPn`8=G&v-2$v84~;yc#FT<RbJ&KNehhSR#aMC
zf;;r(8GaU<1mK8hIK(feVvCr81->%?46BKj?}Q4+`SoU!ebMv2Ph+tU`UUmYeZnK*
zv4n<u51h;U3FPh2K{#J$vj?#NT0oe$bf%qaA{iAqISC14AM`PF!0zT(UvPy9ke$HI
z(2}sY=~bV>@^O%dR$;GBNGNuD-@f84)MZfyBQ=M$saX}3if9_FREni!lf|5rG&MJf
zxf91*Sr{2~a;UxFqxs45f^Lxo$rGre-k9vC$dg&if{!pOMVl@hA)dCA)Lt7Aa^ux~
zj7ctY>6T|Z>h;$QrOGLty4QFKR<$Da$`4E`C3G`$0bv_Sy<Na>WB6D-toG{jDU<Fs
zeja^72q^&6Q|Ilu4_~h*ucx~>&)n}wsdb9k3t<KiHt;&M;S1Vi5wk)+FkbrlfTu+m
z-gTV1DC5Lq&wMSz^fff-fE_*j7-Ji?dL&dW9)X%PGrb$xp)IKSNizVFrBT9x!zank
z5FMt#=M?(c`&MvuQ>nLVuMTq(lK$jqH9gK9(%VkB4kI}*a{k6sT0BSC3M4yka7}xC
zN#72dQlOw%b6$va?m$NO!(qS!Szfo*SGe`gmp6`@d*2rIY#MLz&@wjA*6u@Z0`|Bh
zt;;4+6wqOirgeXyJh}yIKWE@ei4{L1MklNu=n#;^SUs%2Zi_jHe-oI<w$fSOmMz-!
z<#GMmlWw5E3=P@2+VJq?YT#xs{a`jMetT|L5s(zL=_n5oDVU!_Pc-F58q~qZNMsww
zi9ZP-B%(Z5U0Dfw>=W`<y732jql`Jf<;C)V1w!dx67${*+Ve3^6$$L2Rach(Yb!5=
z+m`A?!(~S$PW>q}4wSrKaF*@~N>+ze_nVvomH`+K#qk^&L9lY1drxpSA?IB3eSdQn
z9H$P7L8TBBG@}yN4~~%ycOI-R?s;Vu(368!ee6+_x>84}mFKe?A4uN0zEtUla&z|e
zF~awm8|MUJS;{a(TL}}__#^9BzRv~W_wTA0|1vPSmf{k{D1+0#lbzN3Dx}%u7=%Mw
zX(7{KQ_*)@GLECq)^-4)7GD55W~3{ePy{W9&r>tWPsgE6yOR4hKPQeHg>Bmn8Ht<!
zt*@PV=xB*Mqw><Q4Mj={B3PL=sb<HZWMsrw)0*$_0ePm@G6{-HG2cewF3i)aH|`S1
zJA#vw?^-_1h8BPNG%%3-iGv5!m*hyIQeWQAIONhSF8}x&LK<W=mhCgkw27)^l@Psy
z3YcWq7oqls)Zh?}kJ>?k@nqEWBow4??*dt$b?rL_D}_st=0i2>Wh{sy*7mwz`--^7
zKU2N*qSwKSa;PNGpCWZuemT{I7;(g>#*<u{`!I6?_uY=*<z+XACfrZ@>Y;VR*FKcb
zspWDyp>ONl6_{lsX;=oGlYBm{ppENHsP%$uH0lS|neogM;~?&6o{BZPPtm!mZ<eNG
zld{q2lL2;gnTY<~vWQkZlw8FkRoPT|v_f4}2|!jhwMu37;3Z{wB#KX`!v0x!X*Xki
z=)q3~kEaUo9@!}m8<&M2+Rnu{6>$dKh*Ne`vPw}ggu@xJEc7T#j3LpoVZ1D~A~b6R
zAc1`_Q{Yi(E865pK6)aq>s}#>k;M?!viF^FRId0aC}y$61ul;p(yTz|9;aX+owDX#
zjAdSaef^wczB=6Yv2i@p0E#y%T`=F%fF}n=Y&ApY$9~^q|LDVcjNL%m`0Q-*QK9OO
zRNkf-DOMb0aicfMaE2OVSVxtfH*b0~F^F(v3!M2pJZvMGn$FD9;l|JU&Z~V-!`aJ~
z6`4HrjNY@4<twm4@+pQ%8KQwT4O)ZP>f6coPDNv?P`1eQEgNmm?H{|(5f>A5z3r${
zG~dQ5-{cx<UG^=|Qg>S90y&+j2?jhVC|`tJbNX|>zTHxl3xnhSZmW!bI9^u*-3rw`
z#u$RT)(`ec!fwV$YeDhdG9`{|q4OHxTdcOHjFvcsn!T87jRjQHFmvm!)Ei`g3haeC
zi(T@l_~quUf}7(fe;p8NsR}wMw0F~3M-GulOfGoHRz9P7w$A=`lm@8Giw`xW2XC8X
zNs&6ppOmr&g(tJ0P2#i?j|+48>LnJ0`&{AP(uSBi*|_LwaOXXilQ5EgQPg~2)EkA7
ziO#(XX<W2K!@{B<>qECI4(e0IV~_$9qNIu3XxWUjj&4_iia13Pg6|Bk4+BYw*H&ZO
zthZ%rXE4w@<Z1T?2DMJrrsPbKIw+1qakDQ+dMPJYdR~JWT%^>0+S6qCMt}Zs=EMW|
zDzZNnRI55E(-Bev<oh9n2~TFE?*=K~lY&Z)+0-6<9nBolSOe=^NXa*Va(J0jTkmlb
zYi0R;y#jY;pNwM4erf;-Pf`kc*4SXPdH<|r3~zxG@fCrM5lv&b26$Rrl|x-pT>h#y
zZ0kANU>V5~WyrB9^|?6jj$@a<Hhoq<#1F%y#E;vSNjM*lEHg9FjtoU%VqW>zH=*Y+
zGP;HFceu7GcUPIUn_kd52Ob+L&%jy)a-$F65Z+71pttRaszh*qHSO#YI6yUE{2s72
zr<gY$5sQ3@gyzD8>`o8s2VHIBjq=2F`TY#<PJ#V)J^gFPQKdNjRyrj~8#rmA5=lY%
z7o9yYw!C2wf6z(mj?z1OJY;?jKuMs}F%uR+-&nJQoweekZ}Tq7C5R_%o<;VVH*+(4
z9{sg)LuGRJo};&TZ}!enWcvp8UBR8gbAPC`EPgXo?K_=d*aZ$5W|<8g+&Q}fU6Byb
zxK<r==Cko1#Y^J>6J55i7@yNXvM_J1RyX5~B2>EQE@WQzPp?rBaV?uLZ9wb-7wT0h
zk7X87(3&jRX<Up1XQSEQ=T@qL(@7{(jufbDX~W7-ZYf3-)U7CJ#GB0|!_+US=;VE1
zQ`+ko$vV7hGZ(ax$>_kFOd-Gd#ATrnui;!uG?J>EX|zRXXP^G~brrHnNM2lRR7$BR
zvEt6yK+)RKGEzHbw7TGM)43#aZ2HQ%j72AbfnEX)Q!L$(vByjyKjnMT6#jQsM|jg&
z=L{CQ;RF{Rt=Te5MXtI?<)`>Und_J1&v+4dWYZS?8goUeNd+>Ci<SV5v5?fKr*WM5
zt9<fC(s|8s_S=^8*&$_JI=I&(9)xNgLD54KS02L{+L9|eQPIkW{SxajtIBhEy8Sfb
z7OU{(v5JjVfm?|awj%F1Bz8@(Q!$?R`iKE~e8o9n1*&H;HaJDgAIHDt-%sEs_qUa^
zG$?(BI`#~ELFZp^m&eG)0)sHOAS^o?J7Y`1yuD_@2Sv=&*2UeFcxUQkR@B+hHqq_7
z`mh?|)hAj@9Lac%;|ZTiK?-kX)&c>3|CtnF=M|DGU)tnqU4ZYrJK)J%WASdhqoC5w
zmkolqrp0Hfw`1@TU5B*sNO?r(Rg#4wBZfEk0n{_Enku`SWhSl@)uyE5GDY<q_A5{S
zrEHUG2BjLjHl}e@Q6`=mqC8F!#gd7hg15F{;*oC+Kj(}5G3ajoikk&H>I(<HM|_)7
zo7r6M6}TWq&2BQ~Bt6rQ*sWtrHF(BDS;$wLv<>Ln78`RY2H4QJEb&drxH2}K2xUUK
z*T$@AQ5tjwt{c+>r;Hgymla#}A*Zmm(H8jVbZQQEjm-3iqgNAHU~s)6QPx45tZJvn
zKH6C+Z^+d|-B`inn^%|FT1mPDmnm~)YnDzO`Xfzp9)d|*`8;OO-#lrmvTtb*mfd4x
zzK(^MK3x&K$->6$S_V2aI^nLum=f>g3X-Eh4ou3ct|;(1m%%Co&64TcAU|hi5l&AV
z!sQC2?3PEzVe#sZ%=7CNX1svGyH#f?ULvjD*dbx!lu1XzJ=x(RqMF7xg3mD$&`RSl
zz-U@X|G}bRks=m#9$xN}HZ)&9x9IkabIS!duX?8XCRUe!$~5Q3asD`{O+nB#G71Pe
zQ7ygs4)HE5*eZXy`F-120Cb?<diU!9!TM~FLGOWtMZ=d$#lEw9aj#KX0Y8^{r`@IJ
zC^dStd^+>yq^yjH(MQ~?kd!Q4_2Cdg0JH}#FArN4|Cz(>O+S3|saKXBziI)}-Xr|@
zd3{)ZbB#+d{3hv|hkRw_cvsf+E@ac>nTO5#+g#f!ShRr@=`mF6#KO9U@UGbpw*>Ro
z1ZemtmG}?~J!NA7cY6)gwI}}I%fq<hR^0C=o~ED2NM4B~om&{$bTgBiMsr5bTAd1a
z0eRKego_09F%nYf{aez6<oxU>_G=h>;5;OR9yO<YO%5^$V>@3>T%i*V9u90vPHGS<
z^R;tU!>mFj8?NDy%Opwz`RiZ7lU)G&1dc>bN$|}~xtDo_8lfnb4bDEJ6Kv8m^>bw{
zA;OYh1f{Yu3q)w-_pRvYRzFqr2}y)xFTw6jUAoz*f5@?@io_6GDAZH}!DmRK3_&7W
z_i`?O*^!(|AWhl-%xf>rQ*$dK-)+X4DbMNpcKLHO;YI^*!2P-d_Cx}r`;EdWrr$wW
zxC=ozggJ$}?yGICpW5X29cgzC-`yYY<zYNN@QE`(7L^OFieB6E;UUAeG{lM#mwvdt
z{voSgF^Ip^darXvxVe>-8Vc85TG#MxX<V*X>}eniZtn&ksV}omA@NG!a>UWInmcmh
z5Rx%f#7jJvLx<ep%g~XLi^bcF=?(9jwLNaeml@t$)0UMmAB6tLYarQIiy*%v_bbI#
zN4LxHU~CINCcI9UXqJkFgO+L6vpx;kX5r(4Z#$s}g6xZKI#Zb2ax(><`xGHGlyAqH
z-T9BXk+sXgVEWs*^?f>A1VRwA?>(fQX?9nTHs3Pb&kF=L(KTSVm0-Z7hpJ%XC|t2A
zWj)jREdYW~(A*DSmi`WP|4g|5Z;<Z)iKyUrs2i9y{xhi@NWsDg%*f|p{ukB_%rgI1
zIywjQpRsOW);=7=f3R*w;MqT8-9Yl7f55uc|Hx`*VFCOpH~nW`y5t`j=&HcXbHm@T
z>VM^n|AtSS{W%Z(XBM~(F!kH+XU6yM$=$!@bpHV(yZkF%`!AW=zY#3`2{rzC{{M^`
zvj8|5|BM=^x!I#FbPcM(3`;Y3f>G^QX5$JG&4Pd?j>!^T83y&doeA_xYxg|cEtO7<
zG9G0+#i&6XnAPWAkp~NgkV*7{eKWE{k>n^j?udN3#!ZpoasT)=*3?zCzJ346cYS^T
zQ3s026`@C;k)q!WenuM8mR@#zR1UwBF*m0_Pme(OH6%h;yli4Cw{zknBpNJZ0xU%=
zVmFV^k@KBC4#N9@#Ii5yP)56{!5b^9+_z&NfVD=J0);djTuoIiuBOTD=;P!PL|=cr
zziPWmJRW;G;Jg#b%2AVlCo{ni^A)o=T<W76CQQ<0fuG-NF2nPB--}-yCCt{`Q($Ar
zQKYn#=!gD9V~a>yRytl%W-GIss=JjAh<u}-UePIt+U!NaF^aA5g>W4ap4tx*L~BGh
zZz8@xf6+ChtBq3^ub^amgBv0H#nceHHbh;nL)4noFg!(smY9qJB`JamA}BqkTr!$`
zBwX)pMD*EUVH~#U004U6^ewJFlZN;=+(kwy5jo=e!5G{$?$hsgag=yj=k8lw5m$vV
zNwzY+K6TC`0cG69BgJjSu5!F!I!PAgzC^r2^%HVoyv@gY6FYeMNgEuer!hE{VDX*>
z3>$6>$u3I5j3NCNKW5vGsP(uM-8pQIn$#Ptn>Liv?OZ6#MN@a-x=0QyI(s3=J{z-t
z`$|S>#rF{662%LW26ZT>-F|m>oI&be0cUQ4qZCUV#}&M0>cDfztJ-*4bR{J!?kBu6
zj0mb5-;}DWJZjzsk9!8##ODhA05RP__3@j7l>)kZh&EsP`N83C>ZU=@91X8qkIhA{
zgD?#Q4%4l>)4(`us}ui<kO^5K7A5F~fbMMwgC;@NOEeeT?1Cd+d{Qo5>h%o2D|1zE
z?U>n=GuJK5$^>dXB3!m4*p<K$x)&0pQYWXs2<JNjd;xNEVzM`&ST7fIKlBI{FGkqY
z`eE0hyuYk?!jJo-$@NIObrs8Hcg=cZ@IaZlr4a|>tqLJNPdh;I?h-r2`(|sMl{$&c
z3iLo{(u$an=zfPAw%lb~6-=QRmZR2pRG9^B?XCiNb31;plvmR_1clxIEPAff@-&_w
z;G%W2--R#U__TA*p$&4b!&aiAZ&n~mf{CzcvuqjpS+0i3PgGIn;^w)R*Pk|CdCtYP
z2fMPlwAiYzWJ3MNII{rFb4`lidXNl7)(>l(+r+YI5V(M8MMGLKrJTVFV+XMrdVJkD
zcDPvZ?#37d-`8(%@W6>AdsV`p(QV%3v9YbR1szqEUtIeW+l#I0I&zg;(A?n)7$u@O
zZ4cltucLIq4Fyf>8--A!z658=TnYyJ()Ic$nPvr@g?YV?bw*-q3<*GPp(DuFJ7pIK
z`G)h!)-GipGZ~W_KB_diaF#>#6Lpds0bJ!c@~r1FG)@=Kr|}clJ5UX^{G>7vdF#S8
z!DrehZx<0&X@=4?v0~wYeM-BD9gen5yebGfqmadbnq_<lL3x`9ebGJaqw<PP4L1f~
z=g0KBy8r`fAAu>T%;DH2iG|kr=<XC)A?xu`6p318>&_8l1u*bQ?ji#3l5X|g<OxkD
zA`2y38^v|oLv=$A_?;x^5RWidSg&p+7>Yi&6N|fCS12CY>b<T}+n4@Lh`S9h8~UVS
zOZIdK3oj#7r|W*G0$B3^{6##~3-}w&S?if)I#qDJG@~(aE=BEfbFObwPdkYMC(F&U
z`SKuLYdhukARG2d$Q!)#Iya@g<CI8~+oVfFS6wJ~YuOoDJY3ilHoc}PI1`mqTZo>Z
zrLB@auoJcOHEsp1OIyeb30dcXCy%I3W@U&bD)bwUEv4e;eih>!Dxp+sLu#Vei=gkA
zy{rj%8NoVRMRKzPUPh9tn07(2GZg5K9*&>H?b)MIVNmi{AVkQ_v~(LgT=J^+!j4+N
zZtcr+Mc;;EPvRJ!U0HPIVT)v$1R!yQtc{lw+<1hI47~x1ER91HBz*@WRsKc(&g_S5
zvD*;I)d);bj(w^|lo@5X76HVdKt_k7gT2q2P9(!&@37(Z^8+)E{q?{q=9sh|g}TmC
zN%c>PQ5d?ijY9JIKi>Ky;VlLZROlq7jWYMD$?VVSN%%s^@iKxJtm><%8?tcjVF`p!
z(vYZgU)`3NI#z|9(~!o}w=e9WU5+~S9+=z;-2!r$zgoa-xCG<2ReJ>{RLx(m_mX#D
zI?revG(3Q;BaeW|W`nqQ*djl{YrDY9L8c9}DP-5Yt(H2O3R4b@pDu^QiBHb<H~pB>
zdQQa<o?_6ngkTD4`ZfMK^rq~FE4O~9ZhmiOtQV*D6W!+=i!oL$|M}v^PLR>>&nTV-
zt5@eb>38=sa{Sp)gZA)nj!uo9yc@VOx_X7kRRsQLN>zZc8EnQj_gb-XmG*UevTin5
zr>Hp0k96kW9tx<^?C{R~l?dgxnr)!uWgH9dcQf~L`dH&^VJF+qDVk?g)xhdLkBG4N
zZsR1*=&2{tP2{FfS@LnZ@06gWmF8?FopjDm#ae`I76?M|LIYZ%I=>YzB*U?CA<BdL
zgw%e+fsku2zcV|Ll%Mk}IdW$`5A<i%r)Ph#1{DyaF1I||Q6Ucl016hAmf$~GElCh>
zqy=gVM=u(Kf3|j_@faNOjs;ADbUcil(3!)X*|5mbCXY1u+ktVVjhEki*Y*^UQkIfb
zi1}Dq$z%TmVQyAoVaY2WLv}~yxJ<q&s37mh`FS6fN<~RYj_G8FUAp~Pea1=@TO3BX
z|5`C?>XHmw0sgD|!R|g=D*30YCVQCiu(Qv|8`HRt<JOwpl#nqRlpOHQj~^a4aq7d;
zN+;O;@+b{(KJDh1k4Y|euzPwTq$K2!4PYjhAk6DoKdY_N9e$B`ol??o(0)fQ^omR4
zErwhlne&y-?H*rn65bL$VO7>@JRdI}30*8iN;6(TGfyE(R5J+YeZg?iHO;6C0V0v8
zV{2)t>bxg5_asjXA)wUCUg}cTKGT}c_Dw2vGD(OYmIAzG10V0Hkma72U4FL|(Xf(l
zJA9QQ*mQ5xx60382sa2yf#cR{S}ILgF~`Manqo)1rR~GP-A^Mi>j@M~&_mhZeAv6c
zdvb8dG&bBQ--6V2P3JK!k74qfC@<SX4<%C1ZSG0P&V0@vSHFUa6myzPge2_eZ*}Q%
z**Po7iN*Gb%u(g<1Qs*t2~M3ZQ>Xp0><q<8<O1dAQHmIQ7Hm}ZP)(AH+zX~X&$}dZ
ziAhQo*QS4|5%9M3SXHH$xFOQ)ASq<JMsPxaW)kUYpe?76W<jpu)jeh!2y^5)E0-B)
z2(RC-O-#T|Qo9E&Tb3sV%Fx<3Y^XGNI;dJ0P4JI@c2Ki}$<&ISWdYV9@O|h$#J0K3
zzoJHafd;f#x$RIPfjX**-G)$`6?JD@y7sYK`gJ0n{&)<I@tU%}qR<T4>%N?-;?9k^
z@_ncU+3o9J8Mo_x%LzZUBxNF*!@~St!o;{}bPY9W5l`Nd?%9Mpd7f$VD0dpSnz{YJ
z{8ad+Zogb)iu1>?e>Kw`m~Ge$@VCBh7_R%UriMB#a1Tg5SJXpy=L>lBceIt@+<Ky*
z6B{$)z*Vp`f>tJ&A*t?f{*M-o@}@zn2na2>k!=r|hiwJevR=0(5lE(R!DWd-z4tp?
z3i|?7F6V-DG90QJ?5lqH+ele{O#7o5S+B*H2OcZxO&ICfP<93`avEIpfXlD9n5ShJ
zNLUKoiYBP?V6(omF_x#8-oEiG_Sb#68&~aw>)p;9cTZwH`T7bl$_XmhF&J``HSG|f
zT9X72Wc&Mr@4LFtnnGn=X0h4!`OP7Cx40NF7_p8`=Hu_1k57f3T2>v(&N{s|4tD$2
z>`TSuHCC5nS930DvZN=r2+F89<I5xyO_e?-^C++p&4_*lj|=N+6ME+Cx$*tp#theg
zH3iWwS>TbN|7_ATNxA8yJeriLl^1YKWi7Q_XA7TMF9AY1{lgT9AZAjHhtF6Q6s##!
zLQ3(;8|;rZFVj-jyDPKR=Rn)Xo&-cub9ue^o{n1OI&b1><tu10=3yxFNU5CljaP0u
zQAhSh?lJ4g-ZB_|6}ArL-}+4MF;WP8DITVsSaY>PV!j;{%uU_C%&qw;F2MI<IJ5qM
z9MtjMq7Ow}=hy+e7b^$8`55^Cf3yQMn;5U0$-KOB^!g5zPTrV?s;lvv;>)V^O>~yt
zK&Nk|S-xY}^Qw1Cp!XAN(YO0HvLZ9aP+{%qIEWPBS8gZ+-?e1a5x%W#;Ux){B#owU
zMau;B>@zrpc+Vx5ENvQd77%>aQr)*wEMxr|X?2mntKT27rl0bm@NvpB$FQA>P+}-L
zzR)GF{rWUsKqhw!Q%c06m31q1;Nf8}b$Xz8DrczeU?0CA!Fmsz<K#tVoSG|YeCuYT
zMQ21c;@T8N9y~_+n39te)FGDAZob@#ZERU5#m|9ew>G%Qz(PW|===!!Mg={9%+bYr
zB{PL7_t{^#fSD+sqh0~FJoBU+IaRcVMok0fnsQgRm<{hk!RdO?G0n#UX#yoXzG*c>
z3f)8QoA0&2{V0`rRg1aXE5U=$JhormbfV3Yayol`)_Uc{qCU~>6HlRp!drW@JbDC?
z<crjP8&mtdonPAQjY-J?HsUbVPAvMt18b3eIm)f<MCwBp+_HMX6-OFs#`x5<G!qBF
zNQMG?FQtX_L~jqyr1|M>7Q9)Lh+M1v#kWu4T(%6&8=cZOr+N*lWh$HCqvu2u#}O(;
zA6#P(&l?Js4&s+~286B!qeeb8Vq1F>n6Ym0r0HYl1b%o}5)Q*L`c!|1chYoYX)#(s
zFga;|ar(}r0Y&T#22E-c{WMhtDhOs~?wIbjotkGZxi5yF5U-FKZoI@U?vU@<Z8bMC
zeFyW{0}2i{hh5#p74PK^+rZ+nb$suvI+|Jo(}Rt;*S!fT4Zfdx@p;b@KOU@%g_9Dg
zh$yo;W6ky!WQ>;YpaMbrVmmt%T_H%Uq!Ls1b<ZPRt*>}+>fH)Db+z01kLIDM2$Sp&
zNPf5hG>qO4xs`*YR!kqhVkT*STv$5!h?=bsvTN}JV)eA<ma&PWxo;Z*l(4(Kg-V=+
ziCP-s(NXEfPQVD~Oj#F%)!6O(=JDe7hbgNl$Uer^!<9-5E!Ak>)SNG6Z2n4>%i%uC
zN_8CYvVBH$p6egwDH97YbTnNWE>|Wy;~1R5>UvAmN<+-OsXapgJ6g(zK061;3=vtp
zUfWlV%#@lS*a!!;&)>&TsgZ_VEL1rsH@{)2QsY3&IeR<kZv3bf<NV<Hw(2CT6rY;$
zQtv+5boH>aCzvPNCrOBh0fQWFO8aZrg|<eHwhn?s(KnS)wEK6jKIyMH{C5ltUyt7%
z`nf-Qy?um!#i|b?D4#NHwn!?&e<zI%FE#XpBPsn}?Q$qy03|-65hp5x0k!O!OCWR1
zwz?b5F-`~+<KVp6y%&jn0^jk@fADxq!yaz(TO?gblef$x`(ow$a!(Q)L~*UY&cy+0
z8Lslx(3pPnhKztzTBKoIoZijQuARL_ogd^D8i70DiOC%cL%Y^S^i}|8k2h(LUj<%?
z-jaDmE<0X`CX$q?sgYtSm+6XJ2q_o{Va|W&ed`wi+Mbsi1-JOghE{!Oz|D#{X)2ii
z{p$}>HFfQ*59{(PD{Jm8jg_Se;Z%E>wB^MMkou~S?Y>Xhu-82iXs}y;ppQD|mw$h)
z^cy4epWiF}i!1s++;!@*GXEm3V`5@w{rBq-9)5S=3m72rACaMnnT0Jc<ym_-C6R?O
zFQpo*ETgQwu!*^agr}p4lBb-qk*Adrr!gfz9~=+A0gx8ogwEZ-p3c<58p!zPL<D3z
z<RuYSlo2EODd5iKZewo)q^u@#x3RW$;&SJu{7r=mc>J@Ofs*Jq5oar2N_AOzB4;~0
zYby(9A^<%nJrf-hGcA#+BaoHR&Cbz^h>4z!5@^!V*py2VNZ$XuLEsrLrMa`SJr@Im
zo0}WG8#BF~qZtDeCnqNZBY*(_paV+KIeFMR8@SWiI*|hX{nil+^?$3`I??~uCwd^w
zA%lfF0~0+X!@nH;iy_j&&X(w>V*^7w7iV4)l0U52|H=Db%m6O{?Jxs}2Rz~e79B8l
zF*0%Fr4*N!Ard#Yb8`Nj@0o~+k)9Di&qT@a$H4v<f56H7=WYY<z#skQ0m^X60=a}u
zJw$*UjC=q_01F)>fR2$v8NkfN!pX(Nsma6eixBWe0kwpGV{QCjwEiUYCoMZiW#FCT
zGjp^vH6?Nd#=*}CW1<Hz(=-0=>^HSPq<9#9PUWA5`d<#-z+P7N|2}*ho1X#oQ;ti-
z&d9|E$h#>i!b|DmVqwh1%xTDI2w>)<Gc_^gq+?<N{sWRtGtwDw8ZsL&nHn*fG8_N5
z_rcic-~F(6akTy|<cy6NfXtddT{;181rx9%#ztJGc8)d%&cL9zw+FJ!8aM-|g#j25
zlzcqEi_R86&P~4G0$R}8`S$~Bi=UyzWo=+<#!Kl=XKZ3>;9~7e$){rbo3!!ob7yVA
z_xr(bdJO-u^$#=qTN7}>04JH@-^-B?j_Ci>=l`Ff|2%_$8DYGXZa<$ef6Eg4$=UhG
zBko_T>fQgasHlK%seeW^aL#|m^g9u*pKE~;z{mk$X5j=b14c$l;2%&7xLp1hi9f>k
z-9H656(8RpDQxbJCZ<3RTwoH}&&c}yL&V0)3aoQrO7wdhkVTgRNR9mSLuC6$8!G_t
zlgjxoZ2<P4l+eGlv9SSuZDV8vejWNnj**!KNKpHWE+;$NuRd7V0GvRs-M{+fWc<l7
z{+Bjp4(7l40B|s~{_2C75y0`Q4*)yo-{b&n?7%d=zxrSV@>c(9kCFX1e&N6L1;7Cu
z@h`dnHqM_V82%y$)Mfj19863AwqNHDXz%a+V`pUjRSu{N<Uszb4<=xjfAs<2VETLi
z*nxrfcio@mg#XfKCJq)L`|@AgfcE~Of6OfZpvwZxrTdFL0DuYb>pTNE0RPZG7S6xP
z0hoSPJou|U7FM=j{Q~X%L;u)**1Pysm*a1-#>NIjuYQr^VE$YGm>D^KRxbIAJ!TFL
zj$g+MWa4G|yFE@IO!ik@0O#M=5zs5=ulJXgk(2XJ_ruxI0LUBc2&`>G#Gqv1X#!m5
zM8J|mcEHj>z=x6|5rd?ysT~ne0ay}*K~jWBi$@H&Zdifb*CNb7<BTHg>|$)9tfE3p
p!oorT0H+8O-~TS5^Rq&Tle2-N^KTCqR^S7S367jx^t~9|{{f{EcIW^A

literal 0
HcmV?d00001

diff --git a/support/dist-docs-branch-23.06/ovn-ic-nbctl.8.txt b/support/dist-docs-branch-23.06/ovn-ic-nbctl.8.txt
new file mode 100644
index 00000000..b39b76bd
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-ic-nbctl.8.txt
@@ -0,0 +1,637 @@
+ovn-ic-nbctl(8)                   OVN Manual                   ovn-ic-nbctl(8)
+
+NAME
+       ovn-ic-nbctl  - Open Virtual Network interconnection northbound db man‐
+       agement utility
+
+SYNOPSIS
+       ovn-ic-nbctl [options] command [arg...]
+
+DESCRIPTION
+       This utility can be used to manage the OVN  interconnection  northbound
+       database.
+
+GENERAL COMMANDS
+       init   Initializes  the  database,  if it is empty. If the database has
+              already been initialized, this command has no effect.
+
+       show   Prints a brief overview of the database contents.
+
+TRANSIT SWITCH COMMANDS
+       [--may-exist] ts-add switch
+              Creates a new transit switch named switch.
+
+              Transit switch names must be unique. Adding  a  duplicated  name
+              results in error. With --may-exist, adding a duplicate name suc‐
+              ceeds but does not create a new transit switch.
+
+       [--if-exists] ts-del switch
+              Deletes  switch. It is an error if switch does not exist, unless
+              --if-exists is specified.
+
+       ts-list
+              Lists all existing switches on standard output, one per line.
+
+DATABASE COMMANDS
+       These commands query and modify the contents of ovsdb tables. They  are
+       a slight abstraction of the ovsdb interface and as such they operate at
+       a lower level than other ovn-ic-nbctl commands.
+
+       Identifying Tables, Records, and Columns
+
+       Each of these commands has a table parameter to identify a table within
+       the database. Many of them also take a record parameter that identifies
+       a  particular  record  within  a table. The record parameter may be the
+       UUID for a record, which may be abbreviated to its first  4  (or  more)
+       hex  digits,  as  long  as that is unique. Many tables offer additional
+       ways to identify records. Some commands  also  take  column  parameters
+       that identify a particular field within the records in a table.
+
+       For a list of tables and their columns, see ovn-ic-nb(5) or see the ta‐
+       ble listing from the --help option.
+
+       Record names must be specified in full and with correct capitalization,
+       except  that  UUIDs  may  be abbreviated to their first 4 (or more) hex
+       digits, as long as that is unique within the table. Names of tables and
+       columns are not case-sensitive, and - and _  are  treated  interchange‐
+       ably.  Unique  abbreviations  of table and column names are acceptable,
+       e.g. t or transit is sufficient to identify the Transit_Switch table.
+
+       Database Values
+
+       Each column in the database accepts a fixed type of data. The currently
+       defined basic types, and their representations, are:
+
+              integer
+                     A decimal integer in the range -2**63 to 2**63-1,  inclu‐
+                     sive.
+
+              real   A floating-point number.
+
+              Boolean
+                     True or false, written true or false, respectively.
+
+              string An  arbitrary  Unicode string, except that null bytes are
+                     not allowed. Quotes are optional for  most  strings  that
+                     begin  with  an  English letter or underscore and consist
+                     only of letters, underscores, hyphens, and periods.  How‐
+                     ever, true and false and strings that match the syntax of
+                     UUIDs  (see  below)  must be enclosed in double quotes to
+                     distinguish them from  other  basic  types.  When  double
+                     quotes  are  used, the syntax is that of strings in JSON,
+                     e.g. backslashes may be used to  escape  special  charac‐
+                     ters.  The  empty string must be represented as a pair of
+                     double quotes ("").
+
+              UUID   Either a universally unique identifier in  the  style  of
+                     RFC  4122,  e.g. f81d4fae-7dec-11d0-a765-00a0c91e6bf6, or
+                     an @name defined by a get or create  command  within  the
+                     same ovs-vsctl invocation.
+
+       Multiple values in a single column may be separated by spaces or a sin‐
+       gle  comma.  When  multiple  values are present, duplicates are not al‐
+       lowed, and order is not important. Conversely,  some  database  columns
+       can have an empty set of values, represented as [], and square brackets
+       may optionally enclose other non-empty sets or single values as well.
+
+       A  few  database columns are ``maps’’ of key-value pairs, where the key
+       and the value are each some fixed database type. These are specified in
+       the form key=value, where key and value follow the syntax for the  col‐
+       umn’s  key  type  and value type, respectively. When multiple pairs are
+       present (separated by spaces or a comma), duplicate keys  are  not  al‐
+       lowed,  and  again the order is not important. Duplicate values are al‐
+       lowed. An empty map is represented as {}. Curly braces  may  optionally
+       enclose  non-empty  maps  as  well (but use quotes to prevent the shell
+       from expanding other-config={0=x,1=y} into other-config=0=x  other-con�‐
+       fig=1=y, which may not have the desired effect).
+
+       Database Command Syntax
+
+              [--if-exists] [--columns=column[,column]...] list table
+              [record]...
+                     Lists  the  data  in each specified record. If no records
+                     are specified, lists all the records in table.
+
+                     If --columns is specified, only the requested columns are
+                     listed, in the specified order.  Otherwise,  all  columns
+                     are listed, in alphabetical order by column name.
+
+                     Without  --if-exists,  it  is  an  error if any specified
+                     record does not exist. With --if-exists, the command  ig‐
+                     nores  any  record that does not exist, without producing
+                     any output.
+
+              [--columns=column[,column]...] find table [col‐
+              umn[:key]=value]...
+                     Lists the data in  each  record  in  table  whose  column
+                     equals  value  or, if key is specified, whose column con‐
+                     tains a key with the specified value. The following oper‐
+                     ators may be used where = is written in the  syntax  sum‐
+                     mary:
+
+                     = != < > <= >=
+                            Selects records in which column[:key] equals, does
+                            not  equal, is less than, is greater than, is less
+                            than or equal to, or is greater than or  equal  to
+                            value, respectively.
+
+                            Consider  column[:key]  and  value as sets of ele‐
+                            ments. Identical sets are considered equal. Other‐
+                            wise, if the sets have different numbers  of  ele‐
+                            ments,  then the set with more elements is consid‐
+                            ered to be larger. Otherwise, consider  a  element
+                            from each set pairwise, in increasing order within
+                            each  set.  The first pair that differs determines
+                            the result. (For a column that contains  key-value
+                            pairs, first all the keys are compared, and values
+                            are  considered only if the two sets contain iden‐
+                            tical keys.)
+
+                     {=} {!=}
+                            Test for set equality or inequality, respectively.
+
+                     {<=}   Selects records in which column[:key] is a  subset
+                            of  value. For example, flood-vlans{<=}1,2 selects
+                            records in which the  flood-vlans  column  is  the
+                            empty set or contains 1 or 2 or both.
+
+                     {<}    Selects  records in which column[:key] is a proper
+                            subset of value.  For  example,  flood-vlans{<}1,2
+                            selects records in which the flood-vlans column is
+                            the empty set or contains 1 or 2 but not both.
+
+                     {>=} {>}
+                            Same  as  {<=}  and {<}, respectively, except that
+                            the  relationship  is   reversed.   For   example,
+                            flood-vlans{>=}1,2  selects  records  in which the
+                            flood-vlans column contains both 1 and 2.
+
+                     The  following  operators  are  available  only  in  Open
+                     vSwitch 2.16 and later:
+
+                     {in}   Selects  records  in  which  every element in col‐
+                            umn[:key] is also in value. (This is the  same  as
+                            {<=}.)
+
+                     {not-in}
+                            Selects  records  in  which  every element in col‐
+                            umn[:key] is not in value.
+
+                     For arithmetic operators (= != < > <= >=),  when  key  is
+                     specified  but a particular record’s column does not con‐
+                     tain key, the record is always omitted from the  results.
+                     Thus,   the   condition   other-config:mtu!=1500  matches
+                     records that have a mtu key whose value is not 1500,  but
+                     not those that lack an mtu key.
+
+                     For  the  set operators, when key is specified but a par‐
+                     ticular record’s column does not contain key, the compar‐
+                     ison is done against an empty set.  Thus,  the  condition
+                     other-config:mtu{!=}1500  matches records that have a mtu
+                     key whose value is not 1500 and those that  lack  an  mtu
+                     key.
+
+                     Don’t  forget to escape < or > from interpretation by the
+                     shell.
+
+                     If --columns is specified, only the requested columns are
+                     listed, in the specified order. Otherwise all columns are
+                     listed, in alphabetical order by column name.
+
+                     The UUIDs shown for rows created in  the  same  ovs-vsctl
+                     invocation will be wrong.
+
+              [--if-exists] [--id=@name] get table record [column[:key]]...
+                     Prints  the  value  of each specified column in the given
+                     record in table. For map columns, a key may optionally be
+                     specified, in which case the value associated with key in
+                     the column is printed, instead of the entire map.
+
+                     Without --if-exists, it is an error if  record  does  not
+                     exist  or  key  is  specified,  if  key does not exist in
+                     record. With --if-exists, a missing record yields no out‐
+                     put and a missing key prints a blank line.
+
+                     If @name is specified, then the UUID for  record  may  be
+                     referred  to by that name later in the same ovs-vsctl in‐
+                     vocation in contexts where a UUID is expected.
+
+                     Both --id and the column arguments are optional, but usu‐
+                     ally at least one or the other should  be  specified.  If
+                     both are omitted, then get has no effect except to verify
+                     that record exists in table.
+
+                     --id and --if-exists cannot be used together.
+
+              [--if-exists] set table record column[:key]=value...
+                     Sets  the  value  of  each  specified column in the given
+                     record in table to value. For map columns, a key may  op‐
+                     tionally be specified, in which case the value associated
+                     with key in that column is changed (or added, if none ex‐
+                     ists), instead of the entire map.
+
+                     Without  --if-exists,  it  is an error if record does not
+                     exist. With --if-exists, this  command  does  nothing  if
+                     record does not exist.
+
+              [--if-exists] add table record column [key=]value...
+                     Adds  the  specified value or key-value pair to column in
+                     record in table. If column is a  map,  then  key  is  re‐
+                     quired, otherwise it is prohibited. If key already exists
+                     in  a  map column, then the current value is not replaced
+                     (use the set command to replace an existing value).
+
+                     Without --if-exists, it is an error if  record  does  not
+                     exist.  With  --if-exists,  this  command does nothing if
+                     record does not exist.
+
+              [--if-exists] remove table record column value...
+
+                     [--if-exists] remove table record column key...
+
+                     [--if-exists] remove  table  record  column  key=value...
+                     Removes the specified values or key-value pairs from col‐
+                     umn in record in table. The first form applies to columns
+                     that  are  not maps: each specified value is removed from
+                     the column. The second  and  third  forms  apply  to  map
+                     columns:  if  only a key is specified, then any key-value
+                     pair with the given key is  removed,  regardless  of  its
+                     value; if a value is given then a pair is removed only if
+                     both key and value match.
+
+                     It  is  not  an  error if the column does not contain the
+                     specified key or value or pair.
+
+                     Without --if-exists, it is an error if  record  does  not
+                     exist.  With  --if-exists,  this  command does nothing if
+                     record does not exist.
+
+              [--if-exists] clear table record column...
+                     Sets each column in record in table to the empty  set  or
+                     empty  map,  as appropriate. This command applies only to
+                     columns that are allowed to be empty.
+
+                     Without --if-exists, it is an error if  record  does  not
+                     exist.  With  --if-exists,  this  command does nothing if
+                     record does not exist.
+
+              [--id=(@name|uuid)] create table column[:key]=value...
+                     Creates a new record in table and sets the initial values
+                     of each column. Columns not explicitly set  will  receive
+                     their default values. Outputs the UUID of the new row.
+
+                     If  @name is specified, then the UUID for the new row may
+                     be referred to by that name elsewhere in the  same  \*(PN
+                     invocation  in  contexts  where  a UUID is expected. Such
+                     references may precede or follow the create command.
+
+                     If a valid uuid is specified, then it is used as the UUID
+                     of the new row.
+
+                     Caution (ovs-vsctl as example)
+                            Records in the Open vSwitch database are  signifi‐
+                            cant only when they can be reached directly or in‐
+                            directly  from  the Open_vSwitch table. Except for
+                            records in the QoS or Queue tables,  records  that
+                            are  not reachable from the Open_vSwitch table are
+                            automatically  deleted  from  the  database.  This
+                            deletion  happens immediately, without waiting for
+                            additional ovs-vsctl commands  or  other  database
+                            activity. Thus, a create command must generally be
+                            accompanied by additional commands within the same
+                            ovs-vsctl  invocation to add a chain of references
+                            to the newly created  record  from  the  top-level
+                            Open_vSwitch  record.  The  EXAMPLES section gives
+                            some examples that show how to do this.
+
+              [--if-exists] destroy table record...
+                     Deletes each specified record from table. Unless --if-ex�‐
+                     ists is specified, each records must exist.
+
+              --all destroy table
+                     Deletes all records from the table.
+
+                     Caution (ovs-vsctl as example)
+                            The destroy command is only useful for records  in
+                            the  QoS  or Queue tables. Records in other tables
+                            are automatically deleted from the  database  when
+                            they  become unreachable from the Open_vSwitch ta‐
+                            ble. This means that deleting the  last  reference
+                            to  a record is sufficient for deleting the record
+                            itself. For records in these  tables,  destroy  is
+                            silently  ignored.  See the EXAMPLES section below
+                            for more information.
+
+              wait-until table record [column[:key]=value]...
+                     Waits until table contains a record  named  record  whose
+                     column equals value or, if key is specified, whose column
+                     contains  a  key  with  the specified value. This command
+                     supports the same operators and semantics  described  for
+                     the find command above.
+
+                     If  no  column[:key]=value arguments are given, this com‐
+                     mand waits only until record exists.  If  more  than  one
+                     such  argument  is  given, the command waits until all of
+                     them are satisfied.
+
+                     Caution (ovs-vsctl as example)
+                            Usually wait-until should be placed at the  begin‐
+                            ning  of a set of ovs-vsctl commands. For example,
+                            wait-until bridge br0  --  get  bridge  br0  data�‐
+                            path_id waits until a bridge named br0 is created,
+                            then  prints  its  datapath_id column, whereas get
+                            bridge br0 datapath_id --  wait-until  bridge  br0
+                            will  abort  if  no  bridge  named br0 exists when
+                            ovs-vsctl initially connects to the database.
+
+                     Consider specifying --timeout=0 along with  --wait-until,
+                     to  prevent ovs-vsctl from terminating after waiting only
+                     at most 5 seconds.
+
+              comment [arg]...
+                     This command has no effect on behavior, but any  database
+                     log  record  created by the command will include the com‐
+                     mand and its arguments.
+
+REMOTE CONNECTIVITY COMMANDS
+       get-connection
+              Prints the configured connection(s).
+
+       del-connection
+              Deletes the configured connection(s).
+
+       [--inactivity-probe=msecs] set-connection target...
+              Sets the configured manager target or  targets.  Use  --inactiv�‐
+              ity-probe=msecs to override the default idle connection inactiv‐
+              ity probe time. Use 0 to disable inactivity probes.
+
+SSL CONFIGURATION COMMANDS
+       get-ssl
+              Prints the SSL configuration.
+
+       del-ssl
+              Deletes the current SSL configuration.
+
+       [--bootstrap] set-ssl private-key certificate ca-cert [ssl-protocol-
+       list [ssl-cipher-list]]
+              Sets the SSL configuration.
+
+OPTIONS
+       --db database
+              The  OVSDB database remote to contact. If the OVN_IC_NB_DB envi‐
+              ronment variable is set, its value is used as the default.  Oth‐
+              erwise, the default is unix:/ovn_ic_nb_db.sock, but this default
+              is  unlikely to be useful outside of single-machine OVN test en‐
+              vironments.
+
+       --leader-only
+       --no-leader-only
+            By default, or with --leader-only, when the database server  is  a
+            clustered database, ovn-ic-nbctl will avoid servers other than the
+            cluster leader. This ensures that any data that ovn-ic-nbctl reads
+            and  reports  is  up-to-date.  With --no-leader-only, ovn-ic-nbctl
+            will use any server in the cluster, which means that for read-only
+            transactions it can report and act  on  stale  data  (transactions
+            that   modify   the  database  are  always  serialized  even  with
+            --no-leader-only). Refer to Understanding Cluster  Consistency  in
+            ovsdb(7) for more information.
+
+LOGGING OPTIONS
+       -v[spec]
+       --verbose=[spec]
+            Sets  logging  levels.  Without  any  spec, sets the log level for
+            every module and destination to dbg. Otherwise, spec is a list  of
+            words separated by spaces or commas or colons, up to one from each
+            category below:
+
+            •      A  valid module name, as displayed by the vlog/list command
+                   on ovs-appctl(8), limits the log level change to the speci‐
+                   fied module.
+
+            •      syslog, console, or file, to limit the log level change  to
+                   only  to  the system log, to the console, or to a file, re‐
+                   spectively. (If --detach is specified,  the  daemon  closes
+                   its  standard  file  descriptors, so logging to the console
+                   will have no effect.)
+
+                   On Windows platform, syslog is accepted as a  word  and  is
+                   only useful along with the --syslog-target option (the word
+                   has no effect otherwise).
+
+            •      off,  emer,  err,  warn,  info,  or dbg, to control the log
+                   level. Messages of the given severity  or  higher  will  be
+                   logged,  and  messages  of  lower severity will be filtered
+                   out. off filters out all messages. See ovs-appctl(8) for  a
+                   definition of each log level.
+
+            Case is not significant within spec.
+
+            Regardless  of the log levels set for file, logging to a file will
+            not take place unless --log-file is also specified (see below).
+
+            For compatibility with older versions of OVS, any is accepted as a
+            word but has no effect.
+
+       -v
+       --verbose
+            Sets the maximum logging verbosity  level,  equivalent  to  --ver�‐
+            bose=dbg.
+
+       -vPATTERN:destination:pattern
+       --verbose=PATTERN:destination:pattern
+            Sets  the log pattern for destination to pattern. Refer to ovs-ap�‐
+            pctl(8) for a description of the valid syntax for pattern.
+
+       -vFACILITY:facility
+       --verbose=FACILITY:facility
+            Sets the RFC5424 facility of the log message. facility can be  one
+            of kern, user, mail, daemon, auth, syslog, lpr, news, uucp, clock,
+            ftp,  ntp,  audit,  alert, clock2, local0, local1, local2, local3,
+            local4, local5, local6 or local7. If this option is not specified,
+            daemon is used as the default for the local system syslog and  lo�‐
+            cal0  is  used  while sending a message to the target provided via
+            the --syslog-target option.
+
+       --log-file[=file]
+            Enables logging to a file. If file is specified, then it  is  used
+            as the exact name for the log file. The default log file name used
+            if file is omitted is /usr/local/var/log/ovn/program.log.
+
+       --syslog-target=host:port
+            Send  syslog messages to UDP port on host, in addition to the sys‐
+            tem syslog. The host must be a numerical IP address, not  a  host‐
+            name.
+
+       --syslog-method=method
+            Specify  method  as  how  syslog messages should be sent to syslog
+            daemon. The following forms are supported:
+
+            •      libc, to use the libc syslog() function. Downside of  using
+                   this  options  is that libc adds fixed prefix to every mes‐
+                   sage before it is actually sent to the syslog  daemon  over
+                   /dev/log UNIX domain socket.
+
+            •      unix:file, to use a UNIX domain socket directly. It is pos‐
+                   sible to specify arbitrary message format with this option.
+                   However,  rsyslogd  8.9  and  older versions use hard coded
+                   parser function anyway that limits UNIX domain socket  use.
+                   If  you  want  to  use  arbitrary message format with older
+                   rsyslogd versions, then use UDP socket to localhost IP  ad‐
+                   dress instead.
+
+            •      udp:ip:port,  to  use  a UDP socket. With this method it is
+                   possible to use arbitrary message format  also  with  older
+                   rsyslogd.  When sending syslog messages over UDP socket ex‐
+                   tra precaution needs to be taken into account, for example,
+                   syslog daemon needs to be configured to listen on the spec‐
+                   ified UDP port, accidental iptables rules could  be  inter‐
+                   fering  with  local syslog traffic and there are some secu‐
+                   rity considerations that apply to UDP sockets, but  do  not
+                   apply to UNIX domain sockets.
+
+            •      null, to discard all messages logged to syslog.
+
+            The  default is taken from the OVS_SYSLOG_METHOD environment vari‐
+            able; if it is unset, the default is libc.
+
+TABLE FORMATTING OPTIONS
+       These options control the format of output from the list and find  com‐
+       mands.
+
+              -f format
+              --format=format
+                   Sets  the  type of table formatting. The following types of
+                   format are available:
+
+                   table  2-D text tables with aligned columns.
+
+                   list (default)
+                          A list with one column per line and  rows  separated
+                          by a blank line.
+
+                   html   HTML tables.
+
+                   csv    Comma-separated values as defined in RFC 4180.
+
+                   json   JSON  format as defined in RFC 4627. The output is a
+                          sequence of JSON objects, each of which  corresponds
+                          to  one  table.  Each  JSON object has the following
+                          members with the noted values:
+
+                          caption
+                                 The table’s caption. This member  is  omitted
+                                 if the table has no caption.
+
+                          headings
+                                 An  array  with one element per table column.
+                                 Each array element is  a  string  giving  the
+                                 corresponding column’s heading.
+
+                          data   An array with one element per table row. Each
+                                 element is also an array with one element per
+                                 table  column.  The  elements of this second-
+                                 level array are the cells that constitute the
+                                 table. Cells that  represent  OVSDB  data  or
+                                 data  types  are  expressed in the format de‐
+                                 scribed in  the  OVSDB  specification;  other
+                                 cells are simply expressed as text strings.
+
+              -d format
+              --data=format
+                   Sets  the  formatting for cells within output tables unless
+                   the table format is set to json, in which case json format‐
+                   ting is always used when formatting  cells.  The  following
+                   types of format are available:
+
+                   string (default)
+                          The  simple  format described in the Database Values
+                          section of ovs-vsctl(8).
+
+                   bare   The simple format with punctuation stripped off:  []
+                          and  {}  are  omitted  around  sets, maps, and empty
+                          columns, items within sets and maps are  space-sepa‐
+                          rated, and strings are never quoted. This format may
+                          be easier for scripts to parse.
+
+                   json   The RFC 4627 JSON format as described above.
+
+              --no-headings
+                   This  option  suppresses the heading row that otherwise ap‐
+                   pears in the first row of table output.
+
+              --pretty
+                   By default, JSON in output is printed as compactly as  pos‐
+                   sible. This option causes JSON in output to be printed in a
+                   more  readable  fashion. Members of objects and elements of
+                   arrays are printed one per line, with indentation.
+
+                   This option does not affect JSON in tables, which is always
+                   printed compactly.
+
+              --bare
+                   Equivalent to --format=list --data=bare --no-headings.
+
+   PKI Options
+       PKI configuration is required to use SSL  for  the  connection  to  the
+       database.
+
+              -p privkey.pem
+              --private-key=privkey.pem
+                   Specifies  a  PEM  file  containing the private key used as
+                   identity for outgoing SSL connections.
+
+              -c cert.pem
+              --certificate=cert.pem
+                   Specifies a PEM file containing a certificate  that  certi‐
+                   fies the private key specified on -p or --private-key to be
+                   trustworthy. The certificate must be signed by the certifi‐
+                   cate  authority  (CA) that the peer in SSL connections will
+                   use to verify it.
+
+              -C cacert.pem
+              --ca-cert=cacert.pem
+                   Specifies a PEM file containing the CA certificate for ver‐
+                   ifying certificates presented to this program by SSL peers.
+                   (This may be the same certificate that  SSL  peers  use  to
+                   verify the certificate specified on -c or --certificate, or
+                   it  may  be a different one, depending on the PKI design in
+                   use.)
+
+              -C none
+              --ca-cert=none
+                   Disables verification  of  certificates  presented  by  SSL
+                   peers.  This  introduces  a security risk, because it means
+                   that certificates cannot be verified to be those  of  known
+                   trusted hosts.
+
+              --bootstrap-ca-cert=cacert.pem
+                     When  cacert.pem  exists, this option has the same effect
+                     as -C or --ca-cert. If it does not exist, then  the  exe‐
+                     cutable  will  attempt  to obtain the CA certificate from
+                     the SSL peer on its first SSL connection and save  it  to
+                     the  named PEM file. If it is successful, it will immedi‐
+                     ately drop the connection and reconnect, and from then on
+                     all SSL connections must be authenticated by  a  certifi‐
+                     cate signed by the CA certificate thus obtained.
+
+                     This  option  exposes the SSL connection to a man-in-the-
+                     middle attack obtaining the initial CA  certificate,  but
+                     it may be useful for bootstrapping.
+
+                     This  option  is only useful if the SSL peer sends its CA
+                     certificate as part of the SSL certificate chain. The SSL
+                     protocol does not require the server to send the CA  cer‐
+                     tificate.
+
+                     This option is mutually exclusive with -C and --ca-cert.
+
+   Other Options
+       -h
+       --help
+            Prints a brief help message to the console.
+
+       -V
+       --version
+            Prints version information to the console.
+
+OVN 23.06.3                      ovn-ic-nbctl                  ovn-ic-nbctl(8)
diff --git a/support/dist-docs-branch-23.06/ovn-ic-sb.5 b/support/dist-docs-branch-23.06/ovn-ic-sb.5
new file mode 100644
index 00000000..177e2e05
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-ic-sb.5
@@ -0,0 +1,656 @@
+'\" p
+.\" -*- nroff -*-
+.TH "ovn-ic-sb" 5 " DB Schema 1.1.1" "Open vSwitch 23.06.3" "Open vSwitch Manual"
+.fp 5 L CR              \\" Make fixed-width font available as \\fL.
+.de TQ
+.  br
+.  ns
+.  TP "\\$1"
+..
+.de ST
+.  PP
+.  RS -0.15in
+.  I "\\$1"
+.  RE
+..
+.SH NAME
+ovn-ic-sb \- OVN_IC_Southbound database schema
+.PP
+.PP
+.PP
+.PP
+This database holds configuration and state for interconnecting different OVN deployments\[char46] The content of the database is populated and used by the \fBovn\-ic\fR program in each OVN deployment, and not supposed to be directly used by CMS or end user\[char46]
+.PP
+.PP
+The OVN Interconnection Southbound database is shared by \fBovn\-ic\fR program in each OVN deployment\[char46] It contains interconnection information from all related OVN deployments, and is used as the intermediate store for each OVN deployment to exchange the information\[char46] The \fBovn\-ic\fR program in each deployment is responsible for syncing the data between this database and the its own northbound and southbound databases\[char46]
+.SS "Database Structure"
+.PP
+.PP
+The OVN Interconnection Southbound database contains classes of data with different properties, as described in the sections below\[char46]
+.ST "Availability Zone Specific Information"
+.PP
+.PP
+These tables contain objects that are availability zone specific\[char46] Each object is owned and populated by one availability zone, and read by other availability zones\[char46]
+.PP
+.PP
+The \fBAvailability_Zone\fR, \fBGateway\fR, \fBEncap\fR and \fBPort_Binding\fR tables are the availability zone specific tables\[char46]
+.ST "Global Information"
+.PP
+.PP
+The data that does not belong to any specific availability zone but is common for all availability zones\[char46]
+.PP
+.PP
+The \fBDatapath_Binding\fR table contains the common datapath binding information\[char46]
+.ST "Common Columns"
+.PP
+.PP
+Each of the tables in this database contains a special column, named \fBexternal_ids\fR\[char46] This column has the same form and purpose each place it appears\[char46]
+.RS
+.TP
+\fBexternal_ids\fR: map of string-string pairs
+Key-value pairs for use by \fBovn\-ic\fR\[char46]
+.RE
+.SH "TABLE SUMMARY"
+.PP
+The following list summarizes the purpose of each of the tables in the
+\fBOVN_IC_Southbound\fR database.  Each table is described in more detail on a later
+page.
+.IP "Table" 1in
+Purpose
+.TQ 1in
+\fBIC_SB_Global\fR
+IC Southbound configuration
+.TQ 1in
+\fBAvailability_Zone\fR
+Availability Zone Information
+.TQ 1in
+\fBGateway\fR
+Interconnection Gateway Information
+.TQ 1in
+\fBEncap\fR
+Encapsulation Types
+.TQ 1in
+\fBDatapath_Binding\fR
+Transit Switch Datapath Bindings
+.TQ 1in
+\fBPort_Binding\fR
+Transit Port Bindings
+.TQ 1in
+\fBRoute\fR
+Route
+.TQ 1in
+\fBConnection\fR
+OVSDB client connections\[char46]
+.TQ 1in
+\fBSSL\fR
+SSL configuration\[char46]
+.\" check if in troff mode (TTY)
+.if t \{
+.bp
+.SH "TABLE RELATIONSHIPS"
+.PP
+The following diagram shows the relationship among tables in the
+database.  Each node represents a table.  Tables that are part of the
+``root set'' are shown with double borders.  Each edge leads from the
+table that contains it and points to the table that its value
+represents.  Edges are labeled with their column names, followed by a
+constraint on the number of allowed values: \fB?\fR for zero or one,
+\fB*\fR for zero or more, \fB+\fR for one or more.  Thick lines
+represent strong references; thin lines represent weak references.
+.RS -1in
+.ps -3
+.PS
+linethick = 1;
+linethick = 0.500000;
+box at 0.764118,0.478405 wid 1.279064 height 0.478405 "IC_SB_Global"
+box at 0.764118,0.478405 wid 1.223508 height 0.422849
+linethick = 1.000000;
+box at 4.006642,0.956810 wid 1.039861 height 0.478405 "Connection"
+linethick = 1.000000;
+box at 4.006642,0.239203 wid 0.717608 height 0.478405 "SSL"
+linethick = 0.500000;
+box at 4.006642,1.940219 wid 1.528217 height 0.478405 "Availability_Zone"
+box at 4.006642,1.940219 wid 1.472661 height 0.422849
+linethick = 0.500000;
+box at 0.764118,2.312323 wid 0.850499 height 0.478405 "Gateway"
+box at 0.764118,2.312323 wid 0.794943 height 0.422849
+linethick = 1.000000;
+box at 4.006642,3.029930 wid 0.717608 height 0.478405 "Encap"
+linethick = 0.500000;
+box at 0.764118,3.760837 wid 1.528217 height 0.478405 "Datapath_Binding"
+box at 0.764118,3.760837 wid 1.472661 height 0.422849
+linethick = 0.500000;
+box at 0.764118,3.043230 wid 1.189411 height 0.478405 "Port_Binding"
+box at 0.764118,3.043230 wid 1.133855 height 0.422849
+linethick = 0.500000;
+box at 0.764118,1.448515 wid 0.717608 height 0.478405 "Route"
+box at 0.764118,1.448515 wid 0.662052 height 0.422849
+linethick = 1.000000;
+spline -> from 1.405363,0.591510 to 1.405363,0.591510 to 1.525442,0.612138 to 1.650210,0.632892 to 1.767419,0.651167 to 2.355188,0.742762 to 3.032609,0.833697 to 3.484224,0.892244
+"connections*" at 2.385423,0.918605
+linethick = 1.000000;
+spline -> from 1.408903,0.431435 to 1.408903,0.431435 to 2.076565,0.381767 to 3.105805,0.305222 to 3.641715,0.265362
+"ssl?" at 2.385423,0.506640
+linethick = 1.000000;
+spline -> from 1.192472,2.124118 to 1.192472,2.124118 to 1.366325,2.054941 to 1.572900,1.985094 to 1.767419,1.950170 to 2.252426,1.863100 to 2.806419,1.860326 to 3.240428,1.879462
+"availability_zone" at 2.385423,2.034848
+linethick = 1.000000;
+spline -> from 1.193908,2.278643 to 1.193908,2.278643 to 1.648966,2.255105 to 2.394417,2.255488 to 3.003331,2.441875 to 3.244160,2.515549 to 3.487764,2.659166 to 3.673098,2.786039
+"encaps+" at 2.385423,2.526552
+linethick = 1.000000;
+spline -> from 1.364507,2.947740 to 1.364507,2.947740 to 1.972272,2.846797 to 2.853782,2.693803 to 3.003331,2.631228 to 3.264349,2.522055 to 3.525462,2.335860 to 3.713858,2.184206
+"availability_zone" at 2.385423,2.965154
+linethick = 0.500000;
+spline -> from 1.363263,3.098246 to 1.363263,3.098246 to 1.496068,3.108484 to 1.636528,3.117670 to 1.767419,3.122932 to 2.316246,3.144939 to 2.454600,3.148670 to 3.003331,3.122932 to 3.217178,3.112886 to 3.456093,3.090783 to 3.645733,3.070595
+"encap?" at 2.385423,3.230860
+linethick = 1.000000;
+spline -> from 1.127888,1.449471 to 1.127888,1.449471 to 1.569360,1.456552 to 2.349351,1.488605 to 3.003331,1.617966 to 3.104370,1.637963 to 3.209523,1.665041 to 3.311902,1.694989
+"availability_zone" at 2.385423,1.702643
+.ps +3
+.PE
+.RE\}
+.bp
+.SH "IC_SB_Global TABLE"
+.PP
+.PP
+.PP
+Interconnection Southbound configuration\[char46] This table must have exactly one row\[char46]
+.SS "Summary:
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.TQ 2.75in
+\fBoptions\fR
+map of string-string pairs
+.RE
+.TQ .25in
+\fIConnection Options:\fR
+.RS .25in
+.TQ 2.75in
+\fBconnections\fR
+set of \fBConnection\fRs
+.TQ 2.75in
+\fBssl\fR
+optional \fBSSL\fR
+.RE
+.SS "Details:
+.ST "Common Columns:"
+.PP
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+See \fBExternal IDs\fR at the beginning of this document\[char46]
+.IP "\fBoptions\fR: map of string-string pairs"
+.ST "Connection Options:"
+.PP
+.IP "\fBconnections\fR: set of \fBConnection\fRs"
+Database clients to which the Open vSwitch database server should connect or on which it should listen, along with options for how these connections should be configured\[char46] See the \fBConnection\fR table for more information\[char46]
+.IP "\fBssl\fR: optional \fBSSL\fR"
+Global SSL configuration\[char46]
+.bp
+.SH "Availability_Zone TABLE"
+.PP
+.PP
+.PP
+Each row in this table represents an Availability Zone\[char46] Each OVN deployment is considered an availability zone from OVN control plane perspective, with its own central components, such as northbound and southbound databases and \fBovn\-northd\fR daemon\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBname\fR
+string (must be unique within table)
+.SS "Details:
+.IP "\fBname\fR: string (must be unique within table)"
+A name that uniquely identifies the availability zone\[char46]
+.bp
+.SH "Gateway TABLE"
+.PP
+.PP
+.PP
+Each row in this table represents a interconnection gateway chassis in an availability zone\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBname\fR
+string (must be unique within table)
+.TQ 3.00in
+\fBavailability_zone\fR
+\fBAvailability_Zone\fR
+.TQ 3.00in
+\fBhostname\fR
+string
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.RE
+.TQ .25in
+\fIEncapsulation Configuration:\fR
+.RS .25in
+.TQ 2.75in
+\fBencaps\fR
+set of 1 or more \fBEncap\fRs
+.RE
+.SS "Details:
+.IP "\fBname\fR: string (must be unique within table)"
+The name of the gateway\[char46] See \fBname\fR column of the OVN Southbound database\(cqs \fBChassis\fR table\[char46]
+.IP "\fBavailability_zone\fR: \fBAvailability_Zone\fR"
+The availability zone that the gateway belongs to\[char46]
+.IP "\fBhostname\fR: string"
+The hostname of the gateway\[char46]
+.ST "Common Columns:"
+.PP
+The overall purpose of these columns is described under \fBCommon
+Columns\fR at the beginning of this document\[char46]
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+.ST "Encapsulation Configuration:"
+.PP
+.PP
+.PP
+OVN uses encapsulation to transmit logical dataplane packets between gateways\[char46]
+.IP "\fBencaps\fR: set of 1 or more \fBEncap\fRs"
+Points to supported encapsulation configurations to transmit logical dataplane packets to this gateway\[char46] Each entry is a \fBEncap\fR record that describes the configuration\[char46] See \fBencaps\fR column of the OVN Southbound database\(cqs \fBChassis\fR table\[char46]
+.bp
+.SH "Encap TABLE"
+.PP
+.PP
+.PP
+The \fBencaps\fR column in the \fBGateway\fR table refers to rows in this table to identify how OVN may transmit logical dataplane packets to this gateway\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBtype\fR
+string, one of \fBgeneve\fR, \fBstt\fR, or \fBvxlan\fR
+.TQ 3.00in
+\fBoptions\fR
+map of string-string pairs
+.TQ 3.00in
+\fBip\fR
+string
+.TQ 3.00in
+\fBgateway_name\fR
+string
+.SS "Details:
+.IP "\fBtype\fR: string, one of \fBgeneve\fR, \fBstt\fR, or \fBvxlan\fR"
+The encapsulation to use to transmit packets to this gateway\[char46] See \fBtype\fR column of the OVN Southbound database\(cqs \fBEncap\fR table\[char46]
+.IP "\fBoptions\fR: map of string-string pairs"
+Options for configuring the encapsulation, which may be \fBtype\fR specific\[char46] See \fBoptions\fR column of the OVN Southbound database\(cqs \fBEncap\fR table\[char46]
+.IP "\fBip\fR: string"
+The IPv4 address of the encapsulation tunnel endpoint\[char46]
+.IP "\fBgateway_name\fR: string"
+The name of the gateway that created this encap\[char46]
+.bp
+.SH "Datapath_Binding TABLE"
+.PP
+.PP
+.PP
+Each row in this table represents a logical datapath for a transit logical switch configured in the OVN Interconnection Northbound database\(cqs \fBTransit_Switch\fR table\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBtransit_switch\fR
+string
+.TQ 3.00in
+\fBtunnel_key\fR
+integer, in range 1 to 16,777,215 (must be unique within table)
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.RE
+.SS "Details:
+.IP "\fBtransit_switch\fR: string"
+The name of the transit logical switch that is configured in the OVN Interconnection Northbound database\(cqs \fBTransit_Switch\fR table\[char46]
+.IP "\fBtunnel_key\fR: integer, in range 1 to 16,777,215 (must be unique within table)"
+The tunnel key value to which the logical datapath is bound\[char46] The key can be generated by any \fBovn\-ic\fR but the same key is shared by all availability zones so that the logical datapaths can be peered across them\[char46] A tunnel key for transit switch datapath binding must be globally unique\[char46]
+.IP
+For more information about the meanings of a tunnel key, see \fBtunnel_key\fR column of the OVN Southbound database\(cqs \fBDatapath_Binding\fR table\[char46]
+.ST "Common Columns:"
+.PP
+The overall purpose of these columns is described under \fBCommon
+Columns\fR at the beginning of this document\[char46]
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+.bp
+.SH "Port_Binding TABLE"
+.PP
+.PP
+.PP
+Each row in this table binds a logical port on the transit switch to a physical gateway and a tunnel key\[char46] Each port on the transit switch belongs to a specific availability zone\[char46]
+.SS "Summary:
+.TQ .25in
+\fICore Features:\fR
+.RS .25in
+.TQ 2.75in
+\fBtransit_switch\fR
+string
+.TQ 2.75in
+\fBlogical_port\fR
+string (must be unique within table)
+.TQ 2.75in
+\fBavailability_zone\fR
+\fBAvailability_Zone\fR
+.TQ 2.75in
+\fBencap\fR
+optional weak reference to \fBEncap\fR
+.TQ 2.75in
+\fBgateway\fR
+string
+.TQ 2.75in
+\fBtunnel_key\fR
+integer, in range 1 to 32,767
+.TQ 2.75in
+\fBaddress\fR
+string
+.RE
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.RE
+.SS "Details:
+.ST "Core Features:"
+.PP
+.IP "\fBtransit_switch\fR: string"
+The name of the transit switch that the corresponding logical port belongs to\[char46]
+.IP "\fBlogical_port\fR: string (must be unique within table)"
+A logical port, taken from \fBname\fR in the OVN_Northbound database\(cqs \fBLogical_Switch_Port\fR table\[char46] The logical port name must be unique across all availability zones\[char46]
+.IP "\fBavailability_zone\fR: \fBAvailability_Zone\fR"
+The availability zone that the port belongs to\[char46]
+.IP "\fBencap\fR: optional weak reference to \fBEncap\fR"
+Points to supported encapsulation configurations to transmit logical dataplane packets to this gateway\[char46] Each entry is a \fBEncap\fR record that describes the configuration\[char46]
+.IP "\fBgateway\fR: string"
+The name of the gateway that this port is physically located\[char46]
+.IP "\fBtunnel_key\fR: integer, in range 1 to 32,767"
+A number that represents the logical port in the key (e\[char46]g\[char46] STT key or Geneve TLV) field carried within tunnel protocol packets\[char46] The key can be generated by any \fBovn\-ic\fR but the same key is shared by all availability zones so that the packets can go through the datapath pipelines of different availability zones\[char46]
+.IP
+The tunnel ID must be unique within the scope of a logical datapath\[char46]
+.IP
+For more information about tunnel key, see \fBtunnel_key\fR column of the OVN Southbound database\(cqs \fBPort_Binding\fR table\[char46]
+.IP "\fBaddress\fR: string"
+The Ethernet address and IP addresses used by the corresponding logical router port peering with the transit switch port\[char46] It is a string combined with the value of \fBmac\fR column followed by the values in \fBnetworks\fR column in \fBLogical_Router_Port\fR table\[char46]
+.ST "Common Columns:"
+.PP
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+See \fBExternal IDs\fR at the beginning of this document\[char46]
+.bp
+.SH "Route TABLE"
+.PP
+.PP
+.PP
+Each row in this table represents a route advertised\[char46]
+.SS "Summary:
+.TQ .25in
+\fICore Features:\fR
+.RS .25in
+.TQ 2.75in
+\fBtransit_switch\fR
+string
+.TQ 2.75in
+\fBavailability_zone\fR
+\fBAvailability_Zone\fR
+.TQ 2.75in
+\fBroute_table\fR
+string
+.TQ 2.75in
+\fBip_prefix\fR
+string
+.TQ 2.75in
+\fBnexthop\fR
+string
+.TQ 2.75in
+\fBorigin\fR
+string, either \fBconnected\fR or \fBstatic\fR
+.RE
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.RE
+.SS "Details:
+.ST "Core Features:"
+.PP
+.IP "\fBtransit_switch\fR: string"
+The name of the transit switch, upon which the route is advertised\[char46]
+.IP "\fBavailability_zone\fR: \fBAvailability_Zone\fR"
+The availability zone that has advertised the route\[char46]
+.IP "\fBroute_table\fR: string"
+Route table within which this route was created\[char46] Empty value means \fI<main>\fR routing table\[char46]
+.IP
+Routes for directly-connected networks will be learned to \fI<main>\fR routing table and if Logical Routers have more than one Transit Switch, which interconnects them, directly-connected routes will be added via each transit switch port and configured as ECMP routes\[char46]
+.IP
+Static routes within route tables will be advertised and learned only if interconnecting transit switch\(cqs LRPs will have same value in \fBoptions:route_table\fR as NB \fBroute_table\fR or ICSB \fBroute_table\fR value respectively\[char46]
+.IP "\fBip_prefix\fR: string"
+IP prefix of this route (e\[char46]g\[char46] 192\[char46]168\[char46]100\[char46]0/24)\[char46]
+.IP "\fBnexthop\fR: string"
+Nexthop IP address for this route\[char46]
+.IP "\fBorigin\fR: string, either \fBconnected\fR or \fBstatic\fR"
+Can be one of \fBconnected\fR or \fBstatic\fR\[char46] Routes to directly-connected subnets - LRP\(cqs CIDRs are inserted to OVN IC SB DB with \fBconnected\fR value in \fBorigin\fR\[char46] Static routes are inserted to OVN IC SB DB with \fBstatic\fR value\[char46] Next when route is learned to another AZ NB DB by ovn-ic, route origin is synced to \fBoptions:origin\fR\[char46]
+.ST "Common Columns:"
+.PP
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+See \fBExternal IDs\fR at the beginning of this document\[char46]
+.bp
+.SH "Connection TABLE"
+.PP
+.PP
+.PP
+Configuration for a database connection to an Open vSwitch database (OVSDB) client\[char46]
+.PP
+.PP
+This table primarily configures the Open vSwitch database server (\fBovsdb\-server\fR)\[char46]
+.PP
+.PP
+The Open vSwitch database server can initiate and maintain active connections to remote clients\[char46] It can also listen for database connections\[char46]
+.SS "Summary:
+.TQ .25in
+\fICore Features:\fR
+.RS .25in
+.TQ 2.75in
+\fBtarget\fR
+string (must be unique within table)
+.RE
+.TQ .25in
+\fIClient Failure Detection and Handling:\fR
+.RS .25in
+.TQ 2.75in
+\fBmax_backoff\fR
+optional integer, at least 1,000
+.TQ 2.75in
+\fBinactivity_probe\fR
+optional integer
+.RE
+.TQ .25in
+\fIStatus:\fR
+.RS .25in
+.TQ 2.75in
+\fBis_connected\fR
+boolean
+.TQ 2.75in
+\fBstatus : last_error\fR
+optional string
+.TQ 2.75in
+\fBstatus : state\fR
+optional string, one of \fBACTIVE\fR, \fBBACKOFF\fR, \fBCONNECTING\fR, \fBIDLE\fR, or \fBVOID\fR
+.TQ 2.75in
+\fBstatus : sec_since_connect\fR
+optional string, containing an integer, at least 0
+.TQ 2.75in
+\fBstatus : sec_since_disconnect\fR
+optional string, containing an integer, at least 0
+.TQ 2.75in
+\fBstatus : locks_held\fR
+optional string
+.TQ 2.75in
+\fBstatus : locks_waiting\fR
+optional string
+.TQ 2.75in
+\fBstatus : locks_lost\fR
+optional string
+.TQ 2.75in
+\fBstatus : n_connections\fR
+optional string, containing an integer, at least 2
+.TQ 2.75in
+\fBstatus : bound_port\fR
+optional string, containing an integer
+.RE
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.TQ 2.75in
+\fBother_config\fR
+map of string-string pairs
+.RE
+.SS "Details:
+.ST "Core Features:"
+.PP
+.IP "\fBtarget\fR: string (must be unique within table)"
+Connection methods for clients\[char46]
+.IP
+The following connection methods are currently supported:
+.RS
+.TP
+\fBssl:\fIhost\fB\fR[\fB:\fIport\fB\fR]
+The specified SSL \fIport\fR on the given \fIhost\fR, which can either be a DNS name (if built with unbound library) or an IP address\[char46] A valid SSL configuration must be provided when this form is used, this configuration can be specified via command-line options or the \fBSSL\fR table\[char46]
+.IP
+If \fIport\fR is not specified, it defaults to 6640\[char46]
+.IP
+SSL support is an optional feature that is not always built as part of Open vSwitch\[char46]
+.TP
+\fBtcp:\fIhost\fB\fR[\fB:\fIport\fB\fR]
+The specified TCP \fIport\fR on the given \fIhost\fR, which can either be a DNS name (if built with unbound library) or an IP address (IPv4 or IPv6)\[char46] If \fIhost\fR is an IPv6 address, wrap it in square brackets, e\[char46]g\[char46] \fBtcp:[::1]:6640\fR\[char46]
+.IP
+If \fIport\fR is not specified, it defaults to 6640\[char46]
+.TP
+\fBpssl:\fR[\fIport\fR][\fB:\fIhost\fB\fR]
+Listens for SSL connections on the specified TCP \fIport\fR\[char46] Specify 0 for \fIport\fR to have the kernel automatically choose an available port\[char46] If \fIhost\fR, which can either be a DNS name (if built with unbound library) or an IP address, is specified, then connections are restricted to the resolved or specified local IP address (either IPv4 or IPv6 address)\[char46] If \fIhost\fR is an IPv6 address, wrap in square brackets, e\[char46]g\[char46] \fBpssl:6640:[::1]\fR\[char46] If \fIhost\fR is not specified then it listens only on IPv4 (but not IPv6) addresses\[char46] A valid SSL configuration must be provided when this form is used, this can be specified either via command-line options or the \fBSSL\fR table\[char46]
+.IP
+If \fIport\fR is not specified, it defaults to 6640\[char46]
+.IP
+SSL support is an optional feature that is not always built as part of Open vSwitch\[char46]
+.TP
+\fBptcp:\fR[\fIport\fR][\fB:\fIhost\fB\fR]
+Listens for connections on the specified TCP \fIport\fR\[char46] Specify 0 for \fIport\fR to have the kernel automatically choose an available port\[char46] If \fIhost\fR, which can either be a DNS name (if built with unbound library) or an IP address, is specified, then connections are restricted to the resolved or specified local IP address (either IPv4 or IPv6 address)\[char46] If \fIhost\fR is an IPv6 address, wrap it in square brackets, e\[char46]g\[char46] \fBptcp:6640:[::1]\fR\[char46] If \fIhost\fR is not specified then it listens only on IPv4 addresses\[char46]
+.IP
+If \fIport\fR is not specified, it defaults to 6640\[char46]
+.RE
+.IP
+When multiple clients are configured, the \fBtarget\fR values must be unique\[char46] Duplicate \fBtarget\fR values yield unspecified results\[char46]
+.ST "Client Failure Detection and Handling:"
+.PP
+.IP "\fBmax_backoff\fR: optional integer, at least 1,000"
+Maximum number of milliseconds to wait between connection attempts\[char46] Default is implementation-specific\[char46]
+.IP "\fBinactivity_probe\fR: optional integer"
+Maximum number of milliseconds of idle time on connection to the client before sending an inactivity probe message\[char46] If Open vSwitch does not communicate with the client for the specified number of seconds, it will send a probe\[char46] If a response is not received for the same additional amount of time, Open vSwitch assumes the connection has been broken and attempts to reconnect\[char46] Default is implementation-specific\[char46] A value of 0 disables inactivity probes\[char46]
+.ST "Status:"
+.PP
+.PP
+.PP
+Key-value pair of \fBis_connected\fR is always updated\[char46] Other key-value pairs in the status columns may be updated depends on the \fBtarget\fR type\[char46]
+.PP
+.PP
+When \fBtarget\fR specifies a connection method that listens for inbound connections (e\[char46]g\[char46] \fBptcp:\fR or \fBpunix:\fR), both \fBn_connections\fR and \fBis_connected\fR may also be updated while the remaining key-value pairs are omitted\[char46]
+.PP
+.PP
+On the other hand, when \fBtarget\fR specifies an outbound connection, all key-value pairs may be updated, except the above-mentioned two key-value pairs associated with inbound connection targets\[char46] They are omitted\[char46]
+.IP "\fBis_connected\fR: boolean"
+\fBtrue\fR if currently connected to this client, \fBfalse\fR otherwise\[char46]
+.IP "\fBstatus : last_error\fR: optional string"
+A human-readable description of the last error on the connection to the manager; i\[char46]e\[char46] \fBstrerror(errno)\fR\[char46] This key will exist only if an error has occurred\[char46]
+.IP "\fBstatus : state\fR: optional string, one of \fBACTIVE\fR, \fBBACKOFF\fR, \fBCONNECTING\fR, \fBIDLE\fR, or \fBVOID\fR"
+The state of the connection to the manager:
+.RS
+.TP
+\fBVOID\fR
+Connection is disabled\[char46]
+.TP
+\fBBACKOFF\fR
+Attempting to reconnect at an increasing period\[char46]
+.TP
+\fBCONNECTING\fR
+Attempting to connect\[char46]
+.TP
+\fBACTIVE\fR
+Connected, remote host responsive\[char46]
+.TP
+\fBIDLE\fR
+Connection is idle\[char46] Waiting for response to keep-alive\[char46]
+.RE
+.IP
+These values may change in the future\[char46] They are provided only for human consumption\[char46]
+.IP "\fBstatus : sec_since_connect\fR: optional string, containing an integer, at least 0"
+The amount of time since this client last successfully connected to the database (in seconds)\[char46] Value is empty if client has never successfully been connected\[char46]
+.IP "\fBstatus : sec_since_disconnect\fR: optional string, containing an integer, at least 0"
+The amount of time since this client last disconnected from the database (in seconds)\[char46] Value is empty if client has never disconnected\[char46]
+.IP "\fBstatus : locks_held\fR: optional string"
+Space-separated list of the names of OVSDB locks that the connection holds\[char46] Omitted if the connection does not hold any locks\[char46]
+.IP "\fBstatus : locks_waiting\fR: optional string"
+Space-separated list of the names of OVSDB locks that the connection is currently waiting to acquire\[char46] Omitted if the connection is not waiting for any locks\[char46]
+.IP "\fBstatus : locks_lost\fR: optional string"
+Space-separated list of the names of OVSDB locks that the connection has had stolen by another OVSDB client\[char46] Omitted if no locks have been stolen from this connection\[char46]
+.IP "\fBstatus : n_connections\fR: optional string, containing an integer, at least 2"
+When \fBtarget\fR specifies a connection method that listens for inbound connections (e\[char46]g\[char46] \fBptcp:\fR or \fBpssl:\fR) and more than one connection is actually active, the value is the number of active connections\[char46] Otherwise, this key-value pair is omitted\[char46]
+.IP "\fBstatus : bound_port\fR: optional string, containing an integer"
+When \fBtarget\fR is \fBptcp:\fR or \fBpssl:\fR, this is the TCP port on which the OVSDB server is listening\[char46] (This is particularly useful when \fBtarget\fR specifies a port of 0, allowing the kernel to choose any available port\[char46])
+.ST "Common Columns:"
+.PP
+The overall purpose of these columns is described under \fBCommon
+Columns\fR at the beginning of this document\[char46]
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+.IP "\fBother_config\fR: map of string-string pairs"
+.bp
+.SH "SSL TABLE"
+.PP
+SSL configuration for ovn-sb database access\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBprivate_key\fR
+string
+.TQ 3.00in
+\fBcertificate\fR
+string
+.TQ 3.00in
+\fBca_cert\fR
+string
+.TQ 3.00in
+\fBbootstrap_ca_cert\fR
+boolean
+.TQ 3.00in
+\fBssl_protocols\fR
+string
+.TQ 3.00in
+\fBssl_ciphers\fR
+string
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.RE
+.SS "Details:
+.IP "\fBprivate_key\fR: string"
+Name of a PEM file containing the private key used as the switch\(cqs identity for SSL connections to the controller\[char46]
+.IP "\fBcertificate\fR: string"
+Name of a PEM file containing a certificate, signed by the certificate authority (CA) used by the controller and manager, that certifies the switch\(cqs private key, identifying a trustworthy switch\[char46]
+.IP "\fBca_cert\fR: string"
+Name of a PEM file containing the CA certificate used to verify that the switch is connected to a trustworthy controller\[char46]
+.IP "\fBbootstrap_ca_cert\fR: boolean"
+If set to \fBtrue\fR, then Open vSwitch will attempt to obtain the CA certificate from the controller on its first SSL connection and save it to the named PEM file\[char46] If it is successful, it will immediately drop the connection and reconnect, and from then on all SSL connections must be authenticated by a certificate signed by the CA certificate thus obtained\[char46] \fBThis option exposes the
+SSL connection to a man\-in\-the\-middle attack obtaining the initial
+CA certificate\[char46]\fR It may still be useful for bootstrapping\[char46]
+.IP "\fBssl_protocols\fR: string"
+List of SSL protocols to be enabled for SSL connections\[char46] The default when this option is omitted is \fBTLSv1,TLSv1\[char46]1,TLSv1\[char46]2\fR\[char46]
+.IP "\fBssl_ciphers\fR: string"
+List of ciphers (in OpenSSL cipher string format) to be supported for SSL connections\[char46] The default when this option is omitted is \fBHIGH:!aNULL:!MD5\fR\[char46]
+.ST "Common Columns:"
+.PP
+The overall purpose of these columns is described under \fBCommon
+Columns\fR at the beginning of this document\[char46]
+.IP "\fBexternal_ids\fR: map of string-string pairs"
diff --git a/support/dist-docs-branch-23.06/ovn-ic-sb.5.html b/support/dist-docs-branch-23.06/ovn-ic-sb.5.html
new file mode 100644
index 00000000..4c4e7a38
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-ic-sb.5.html
@@ -0,0 +1,600 @@
+<html><head><meta charset="UTF-8"></head><body><pre>
+<u>o</u><u>v</u><u>n</u><u>-</u><u>i</u><u>c</u><u>-</u><u>s</u><u>b</u>(5)                  Open vSwitch Manual                 <u>o</u><u>v</u><u>n</u><u>-</u><u>i</u><u>c</u><u>-</u><u>s</u><u>b</u>(5)
+
+<b>N</b><b>A</b><b>M</b><b>E</b>
+       ovn-ic-sb - OVN_IC_Southbound database schema
+
+       This database holds configuration and state for interconnecting differ‐
+       ent  OVN deployments. The content of the database is populated and used
+       by the <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b> program in each OVN deployment, and not  supposed  to  be
+       directly used by CMS or end user.
+
+       The OVN Interconnection Southbound database is shared by <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b> program
+       in  each  OVN  deployment. It contains interconnection information from
+       all related OVN deployments, and is used as the intermediate store  for
+       each  OVN deployment to exchange the information. The <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b> program in
+       each deployment is responsible for syncing the data between this  data‐
+       base and the its own northbound and southbound databases.
+
+   <b>D</b><b>a</b><b>t</b><b>a</b><b>b</b><b>a</b><b>s</b><b>e</b> <b>S</b><b>t</b><b>r</b><b>u</b><b>c</b><b>t</b><b>u</b><b>r</b><b>e</b>
+       The  OVN  Interconnection  Southbound database contains classes of data
+       with different properties, as described in the sections below.
+
+     <u>A</u><u>v</u><u>a</u><u>i</u><u>l</u><u>a</u><u>b</u><u>i</u><u>l</u><u>i</u><u>t</u><u>y</u> <u>Z</u><u>o</u><u>n</u><u>e</u> <u>S</u><u>p</u><u>e</u><u>c</u><u>i</u><u>f</u><u>i</u><u>c</u> <u>I</u><u>n</u><u>f</u><u>o</u><u>r</u><u>m</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u>
+
+       These tables contain objects that are availability zone specific.  Each
+       object  is  owned  and  populated by one availability zone, and read by
+       other availability zones.
+
+       The <b>A</b><b>v</b><b>a</b><b>i</b><b>l</b><b>a</b><b>b</b><b>i</b><b>l</b><b>i</b><b>t</b><b>y</b><b>_</b><b>Z</b><b>o</b><b>n</b><b>e</b>, <b>G</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b>, <b>E</b><b>n</b><b>c</b><b>a</b><b>p</b> and <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> tables  are  the
+       availability zone specific tables.
+
+     <u>G</u><u>l</u><u>o</u><u>b</u><u>a</u><u>l</u> <u>I</u><u>n</u><u>f</u><u>o</u><u>r</u><u>m</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u>
+
+       The  data that does not belong to any specific availability zone but is
+       common for all availability zones.
+
+       The <b>D</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> table contains the common datapath binding  infor‐
+       mation.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u>
+
+       Each  of  the  tables in this database contains a special column, named
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>. This column has the same form and purpose each  place  it
+       appears.
+
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+                     Key-value pairs for use by <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b>.
+
+<b>T</b><b>A</b><b>B</b><b>L</b><b>E</b> <b>S</b><b>U</b><b>M</b><b>M</b><b>A</b><b>R</b><b>Y</b>
+       The  following list summarizes the purpose of each of the tables in the
+       <b>O</b><b>V</b><b>N</b><b>_</b><b>I</b><b>C</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database.  Each table is described in more detail  on
+       a later page.
+
+       Table     Purpose
+       <b>I</b><b>C</b><b>_</b><b>S</b><b>B</b><b>_</b><b>G</b><b>l</b><b>o</b><b>b</b><b>a</b><b>l</b>
+                 IC Southbound configuration
+       <b>A</b><b>v</b><b>a</b><b>i</b><b>l</b><b>a</b><b>b</b><b>i</b><b>l</b><b>i</b><b>t</b><b>y</b><b>_</b><b>Z</b><b>o</b><b>n</b><b>e</b>
+                 Availability Zone Information
+       <b>G</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b>   Interconnection Gateway Information
+       <b>E</b><b>n</b><b>c</b><b>a</b><b>p</b>     Encapsulation Types
+       <b>D</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>
+                 Transit Switch Datapath Bindings
+       <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>
+                 Transit Port Bindings
+       <b>R</b><b>o</b><b>u</b><b>t</b><b>e</b>     Route
+       <b>C</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>
+                 OVSDB client connections.
+       <b>S</b><b>S</b><b>L</b>       SSL configuration.
+
+<b>I</b><b>C</b><b>_</b><b>S</b><b>B</b><b>_</b><b>G</b><b>l</b><b>o</b><b>b</b><b>a</b><b>l</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Interconnection  Southbound configuration. This table must have exactly
+       one row.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>                     map of string-string pairs
+       <u>C</u><u>o</u><u>n</u><u>n</u><u>e</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+         <b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>                 set of <b>C</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>s
+         <b>s</b><b>s</b><b>l</b>                         optional <b>S</b><b>S</b><b>L</b>
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+              See <b>E</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> <b>I</b><b>D</b><b>s</b> at the beginning of this document.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>: map of string-string pairs
+
+     <u>C</u><u>o</u><u>n</u><u>n</u><u>e</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       <b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>: set of <b>C</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>s
+              Database clients to  which  the  Open  vSwitch  database  server
+              should  connect or on which it should listen, along with options
+              for how these connections should be configured. See the  <b>C</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b>‐‐
+              <b>t</b><b>i</b><b>o</b><b>n</b> table for more information.
+
+       <b>s</b><b>s</b><b>l</b>: optional <b>S</b><b>S</b><b>L</b>
+              Global SSL configuration.
+
+<b>A</b><b>v</b><b>a</b><b>i</b><b>l</b><b>a</b><b>b</b><b>i</b><b>l</b><b>i</b><b>t</b><b>y</b><b>_</b><b>Z</b><b>o</b><b>n</b><b>e</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Each  row  in  this table represents an Availability Zone. Each OVN de‐
+       ployment is considered an availability zone from OVN control plane per‐
+       spective, with its own  central  components,  such  as  northbound  and
+       southbound databases and <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> daemon.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>                          string (must be unique within table)
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>: string (must be unique within table)
+              A name that uniquely identifies the availability zone.
+
+<b>G</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Each  row in this table represents a interconnection gateway chassis in
+       an availability zone.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>                          string (must be unique within table)
+       <b>a</b><b>v</b><b>a</b><b>i</b><b>l</b><b>a</b><b>b</b><b>i</b><b>l</b><b>i</b><b>t</b><b>y</b><b>_</b><b>z</b><b>o</b><b>n</b><b>e</b>             <b>A</b><b>v</b><b>a</b><b>i</b><b>l</b><b>a</b><b>b</b><b>i</b><b>l</b><b>i</b><b>t</b><b>y</b><b>_</b><b>Z</b><b>o</b><b>n</b><b>e</b>
+       <b>h</b><b>o</b><b>s</b><b>t</b><b>n</b><b>a</b><b>m</b><b>e</b>                      string
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+       <u>E</u><u>n</u><u>c</u><u>a</u><u>p</u><u>s</u><u>u</u><u>l</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>n</u><u>f</u><u>i</u><u>g</u><u>u</u><u>r</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u><u>:</u>
+         <b>e</b><b>n</b><b>c</b><b>a</b><b>p</b><b>s</b>                      set of 1 or more <b>E</b><b>n</b><b>c</b><b>a</b><b>p</b>s
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>: string (must be unique within table)
+              The name of the gateway. See <b>n</b><b>a</b><b>m</b><b>e</b> column of the  OVN  Southbound
+              database’s <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> table.
+
+       <b>a</b><b>v</b><b>a</b><b>i</b><b>l</b><b>a</b><b>b</b><b>i</b><b>l</b><b>i</b><b>t</b><b>y</b><b>_</b><b>z</b><b>o</b><b>n</b><b>e</b>: <b>A</b><b>v</b><b>a</b><b>i</b><b>l</b><b>a</b><b>b</b><b>i</b><b>l</b><b>i</b><b>t</b><b>y</b><b>_</b><b>Z</b><b>o</b><b>n</b><b>e</b>
+              The availability zone that the gateway belongs to.
+
+       <b>h</b><b>o</b><b>s</b><b>t</b><b>n</b><b>a</b><b>m</b><b>e</b>: string
+              The hostname of the gateway.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       The  overall purpose of these columns is described under <b>C</b><b>o</b><b>m</b><b>m</b><b>o</b><b>n</b> <b>C</b><b>o</b><b>l</b><b>u</b><b>m</b><b>n</b><b>s</b>
+       at the beginning of this document.
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+
+     <u>E</u><u>n</u><u>c</u><u>a</u><u>p</u><u>s</u><u>u</u><u>l</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>n</u><u>f</u><u>i</u><u>g</u><u>u</u><u>r</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u><u>:</u>
+
+       OVN uses encapsulation to transmit logical  dataplane  packets  between
+       gateways.
+
+       <b>e</b><b>n</b><b>c</b><b>a</b><b>p</b><b>s</b>: set of 1 or more <b>E</b><b>n</b><b>c</b><b>a</b><b>p</b>s
+              Points  to  supported  encapsulation  configurations to transmit
+              logical dataplane packets to this gateway. Each entry is a <b>E</b><b>n</b><b>c</b><b>a</b><b>p</b>
+              record that describes the configuration. See  <b>e</b><b>n</b><b>c</b><b>a</b><b>p</b><b>s</b>  column  of
+              the OVN Southbound database’s <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> table.
+
+<b>E</b><b>n</b><b>c</b><b>a</b><b>p</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       The  <b>e</b><b>n</b><b>c</b><b>a</b><b>p</b><b>s</b> column in the <b>G</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b> table refers to rows in this table to
+       identify how OVN may transmit logical dataplane packets to  this  gate‐
+       way.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>t</b><b>y</b><b>p</b><b>e</b>                          string, one of <b>g</b><b>e</b><b>n</b><b>e</b><b>v</b><b>e</b>, <b>s</b><b>t</b><b>t</b>, or <b>v</b><b>x</b><b>l</b><b>a</b><b>n</b>
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>                       map of string-string pairs
+       <b>i</b><b>p</b>                            string
+       <b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b>                  string
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>t</b><b>y</b><b>p</b><b>e</b>: string, one of <b>g</b><b>e</b><b>n</b><b>e</b><b>v</b><b>e</b>, <b>s</b><b>t</b><b>t</b>, or <b>v</b><b>x</b><b>l</b><b>a</b><b>n</b>
+              The  encapsulation  to  use to transmit packets to this gateway.
+              See <b>t</b><b>y</b><b>p</b><b>e</b> column of the OVN Southbound database’s <b>E</b><b>n</b><b>c</b><b>a</b><b>p</b> table.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>: map of string-string pairs
+              Options for configuring the encapsulation,  which  may  be  <b>t</b><b>y</b><b>p</b><b>e</b>
+              specific.  See  <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>  column of the OVN Southbound database’s
+              <b>E</b><b>n</b><b>c</b><b>a</b><b>p</b> table.
+
+       <b>i</b><b>p</b>: string
+              The IPv4 address of the encapsulation tunnel endpoint.
+
+       <b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b>: string
+              The name of the gateway that created this encap.
+
+<b>D</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Each row in this table represents a logical datapath for a transit log‐
+       ical switch configured in the OVN Interconnection Northbound database’s
+       <b>T</b><b>r</b><b>a</b><b>n</b><b>s</b><b>i</b><b>t</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b> table.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>t</b><b>r</b><b>a</b><b>n</b><b>s</b><b>i</b><b>t</b><b>_</b><b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b>                string
+       <b>t</b><b>u</b><b>n</b><b>n</b><b>e</b><b>l</b><b>_</b><b>k</b><b>e</b><b>y</b>                    integer, in range 1 to  16,777,215  (must
+                                     be unique within table)
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>t</b><b>r</b><b>a</b><b>n</b><b>s</b><b>i</b><b>t</b><b>_</b><b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b>: string
+              The name of the transit logical switch that is configured in the
+              OVN Interconnection Northbound database’s <b>T</b><b>r</b><b>a</b><b>n</b><b>s</b><b>i</b><b>t</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b> table.
+
+       <b>t</b><b>u</b><b>n</b><b>n</b><b>e</b><b>l</b><b>_</b><b>k</b><b>e</b><b>y</b>: integer, in range 1 to 16,777,215 (must be unique within
+       table)
+              The tunnel key value to which the logical datapath is bound. The
+              key can be generated by any <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b> but the same key is shared by
+              all  availability  zones  so  that  the logical datapaths can be
+              peered across them. A tunnel key  for  transit  switch  datapath
+              binding must be globally unique.
+
+              For  more  information  about  the meanings of a tunnel key, see
+              <b>t</b><b>u</b><b>n</b><b>n</b><b>e</b><b>l</b><b>_</b><b>k</b><b>e</b><b>y</b>  column  of  the  OVN  Southbound  database’s   <b>D</b><b>a</b><b>t</b><b>a</b>‐‐
+              <b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> table.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       The  overall purpose of these columns is described under <b>C</b><b>o</b><b>m</b><b>m</b><b>o</b><b>n</b> <b>C</b><b>o</b><b>l</b><b>u</b><b>m</b><b>n</b><b>s</b>
+       at the beginning of this document.
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+<b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Each row in this table binds a logical port on the transit switch to  a
+       physical  gateway and a tunnel key. Each port on the transit switch be‐
+       longs to a specific availability zone.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <u>C</u><u>o</u><u>r</u><u>e</u> <u>F</u><u>e</u><u>a</u><u>t</u><u>u</u><u>r</u><u>e</u><u>s</u><u>:</u>
+         <b>t</b><b>r</b><b>a</b><b>n</b><b>s</b><b>i</b><b>t</b><b>_</b><b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b>              string
+         <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>                string (must be unique within table)
+         <b>a</b><b>v</b><b>a</b><b>i</b><b>l</b><b>a</b><b>b</b><b>i</b><b>l</b><b>i</b><b>t</b><b>y</b><b>_</b><b>z</b><b>o</b><b>n</b><b>e</b>           <b>A</b><b>v</b><b>a</b><b>i</b><b>l</b><b>a</b><b>b</b><b>i</b><b>l</b><b>i</b><b>t</b><b>y</b><b>_</b><b>Z</b><b>o</b><b>n</b><b>e</b>
+         <b>e</b><b>n</b><b>c</b><b>a</b><b>p</b>                       optional weak reference to <b>E</b><b>n</b><b>c</b><b>a</b><b>p</b>
+         <b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b>                     string
+         <b>t</b><b>u</b><b>n</b><b>n</b><b>e</b><b>l</b><b>_</b><b>k</b><b>e</b><b>y</b>                  integer, in range 1 to 32,767
+         <b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b>                     string
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+     <u>C</u><u>o</u><u>r</u><u>e</u> <u>F</u><u>e</u><u>a</u><u>t</u><u>u</u><u>r</u><u>e</u><u>s</u><u>:</u>
+
+       <b>t</b><b>r</b><b>a</b><b>n</b><b>s</b><b>i</b><b>t</b><b>_</b><b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b>: string
+              The name of the transit switch that  the  corresponding  logical
+              port belongs to.
+
+       <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>: string (must be unique within table)
+              A logical port, taken from <b>n</b><b>a</b><b>m</b><b>e</b> in the OVN_Northbound database’s
+              <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b>  table. The logical port name must be unique
+              across all availability zones.
+
+       <b>a</b><b>v</b><b>a</b><b>i</b><b>l</b><b>a</b><b>b</b><b>i</b><b>l</b><b>i</b><b>t</b><b>y</b><b>_</b><b>z</b><b>o</b><b>n</b><b>e</b>: <b>A</b><b>v</b><b>a</b><b>i</b><b>l</b><b>a</b><b>b</b><b>i</b><b>l</b><b>i</b><b>t</b><b>y</b><b>_</b><b>Z</b><b>o</b><b>n</b><b>e</b>
+              The availability zone that the port belongs to.
+
+       <b>e</b><b>n</b><b>c</b><b>a</b><b>p</b>: optional weak reference to <b>E</b><b>n</b><b>c</b><b>a</b><b>p</b>
+              Points to supported  encapsulation  configurations  to  transmit
+              logical dataplane packets to this gateway. Each entry is a <b>E</b><b>n</b><b>c</b><b>a</b><b>p</b>
+              record that describes the configuration.
+
+       <b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b>: string
+              The name of the gateway that this port is physically located.
+
+       <b>t</b><b>u</b><b>n</b><b>n</b><b>e</b><b>l</b><b>_</b><b>k</b><b>e</b><b>y</b>: integer, in range 1 to 32,767
+              A  number  that represents the logical port in the key (e.g. STT
+              key or Geneve TLV) field carried within tunnel protocol packets.
+              The key can be generated by any  <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b>  but  the  same  key  is
+              shared  by  all  availability  zones  so that the packets can go
+              through the datapath pipelines of different availability zones.
+
+              The tunnel ID must be unique within the scope of a logical data‐
+              path.
+
+              For more information about tunnel key, see <b>t</b><b>u</b><b>n</b><b>n</b><b>e</b><b>l</b><b>_</b><b>k</b><b>e</b><b>y</b> column  of
+              the OVN Southbound database’s <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> table.
+
+       <b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b>: string
+              The  Ethernet address and IP addresses used by the corresponding
+              logical router port peering with the transit switch port. It  is
+              a  string  combined with the value of <b>m</b><b>a</b><b>c</b> column followed by the
+              values in <b>n</b><b>e</b><b>t</b><b>w</b><b>o</b><b>r</b><b>k</b><b>s</b> column in <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b> table.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+              See <b>E</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> <b>I</b><b>D</b><b>s</b> at the beginning of this document.
+
+<b>R</b><b>o</b><b>u</b><b>t</b><b>e</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Each row in this table represents a route advertised.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <u>C</u><u>o</u><u>r</u><u>e</u> <u>F</u><u>e</u><u>a</u><u>t</u><u>u</u><u>r</u><u>e</u><u>s</u><u>:</u>
+         <b>t</b><b>r</b><b>a</b><b>n</b><b>s</b><b>i</b><b>t</b><b>_</b><b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b>              string
+         <b>a</b><b>v</b><b>a</b><b>i</b><b>l</b><b>a</b><b>b</b><b>i</b><b>l</b><b>i</b><b>t</b><b>y</b><b>_</b><b>z</b><b>o</b><b>n</b><b>e</b>           <b>A</b><b>v</b><b>a</b><b>i</b><b>l</b><b>a</b><b>b</b><b>i</b><b>l</b><b>i</b><b>t</b><b>y</b><b>_</b><b>Z</b><b>o</b><b>n</b><b>e</b>
+         <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>_</b><b>t</b><b>a</b><b>b</b><b>l</b><b>e</b>                 string
+         <b>i</b><b>p</b><b>_</b><b>p</b><b>r</b><b>e</b><b>f</b><b>i</b><b>x</b>                   string
+         <b>n</b><b>e</b><b>x</b><b>t</b><b>h</b><b>o</b><b>p</b>                     string
+         <b>o</b><b>r</b><b>i</b><b>g</b><b>i</b><b>n</b>                      string, either <b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>e</b><b>d</b> or <b>s</b><b>t</b><b>a</b><b>t</b><b>i</b><b>c</b>
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+     <u>C</u><u>o</u><u>r</u><u>e</u> <u>F</u><u>e</u><u>a</u><u>t</u><u>u</u><u>r</u><u>e</u><u>s</u><u>:</u>
+
+       <b>t</b><b>r</b><b>a</b><b>n</b><b>s</b><b>i</b><b>t</b><b>_</b><b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b>: string
+              The name of the transit switch, upon which the route  is  adver‐
+              tised.
+
+       <b>a</b><b>v</b><b>a</b><b>i</b><b>l</b><b>a</b><b>b</b><b>i</b><b>l</b><b>i</b><b>t</b><b>y</b><b>_</b><b>z</b><b>o</b><b>n</b><b>e</b>: <b>A</b><b>v</b><b>a</b><b>i</b><b>l</b><b>a</b><b>b</b><b>i</b><b>l</b><b>i</b><b>t</b><b>y</b><b>_</b><b>Z</b><b>o</b><b>n</b><b>e</b>
+              The availability zone that has advertised the route.
+
+       <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>_</b><b>t</b><b>a</b><b>b</b><b>l</b><b>e</b>: string
+              Route  table  within  which  this route was created. Empty value
+              means <u><</u>lt;<u>m</u><u>a</u><u>i</u><u>n</u><u>></u>gt; routing table.
+
+              Routes for directly-connected networks will be learned to <u><</u>lt;<u>m</u><u>a</u><u>i</u><u>n</u><u>></u>gt;
+              routing table and if Logical Routers have more than one  Transit
+              Switch, which interconnects them, directly-connected routes will
+              be  added  via  each  transit switch port and configured as ECMP
+              routes.
+
+              Static routes within route tables will be advertised and learned
+              only if interconnecting transit switch’s  LRPs  will  have  same
+              value in <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>_</b><b>t</b><b>a</b><b>b</b><b>l</b><b>e</b> as NB <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>_</b><b>t</b><b>a</b><b>b</b><b>l</b><b>e</b> or ICSB <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>_</b><b>t</b><b>a</b>‐‐
+              <b>b</b><b>l</b><b>e</b> value respectively.
+
+       <b>i</b><b>p</b><b>_</b><b>p</b><b>r</b><b>e</b><b>f</b><b>i</b><b>x</b>: string
+              IP prefix of this route (e.g. 192.168.100.0/24).
+
+       <b>n</b><b>e</b><b>x</b><b>t</b><b>h</b><b>o</b><b>p</b>: string
+              Nexthop IP address for this route.
+
+       <b>o</b><b>r</b><b>i</b><b>g</b><b>i</b><b>n</b>: string, either <b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>e</b><b>d</b> or <b>s</b><b>t</b><b>a</b><b>t</b><b>i</b><b>c</b>
+              Can  be one of <b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>e</b><b>d</b> or <b>s</b><b>t</b><b>a</b><b>t</b><b>i</b><b>c</b>. Routes to directly-connected
+              subnets - LRP’s CIDRs are inserted to OVN IC  SB  DB  with  <b>c</b><b>o</b><b>n</b>‐‐
+              <b>n</b><b>e</b><b>c</b><b>t</b><b>e</b><b>d</b>  value in <b>o</b><b>r</b><b>i</b><b>g</b><b>i</b><b>n</b>. Static routes are inserted to OVN IC SB
+              DB with <b>s</b><b>t</b><b>a</b><b>t</b><b>i</b><b>c</b> value. Next when route is learned to  another  AZ
+              NB DB by ovn-ic, route origin is synced to <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>o</b><b>r</b><b>i</b><b>g</b><b>i</b><b>n</b>.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+              See <b>E</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> <b>I</b><b>D</b><b>s</b> at the beginning of this document.
+
+<b>C</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Configuration  for  a  database  connection to an Open vSwitch database
+       (OVSDB) client.
+
+       This table  primarily  configures  the  Open  vSwitch  database  server
+       (<b>o</b><b>v</b><b>s</b><b>d</b><b>b</b><b>-</b><b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b>).
+
+       The  Open vSwitch database server can initiate and maintain active con‐
+       nections to remote clients. It can also  listen  for  database  connec‐
+       tions.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <u>C</u><u>o</u><u>r</u><u>e</u> <u>F</u><u>e</u><u>a</u><u>t</u><u>u</u><u>r</u><u>e</u><u>s</u><u>:</u>
+         <b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b>                      string (must be unique within table)
+       <u>C</u><u>l</u><u>i</u><u>e</u><u>n</u><u>t</u> <u>F</u><u>a</u><u>i</u><u>l</u><u>u</u><u>r</u><u>e</u> <u>D</u><u>e</u><u>t</u><u>e</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u> <u>a</u><u>n</u><u>d</u> <u>H</u><u>a</u><u>n</u><u>d</u><u>l</u><u>i</u><u>n</u><u>g</u><u>:</u>
+         <b>m</b><b>a</b><b>x</b><b>_</b><b>b</b><b>a</b><b>c</b><b>k</b><b>o</b><b>f</b><b>f</b>                 optional integer, at least 1,000
+         <b>i</b><b>n</b><b>a</b><b>c</b><b>t</b><b>i</b><b>v</b><b>i</b><b>t</b><b>y</b><b>_</b><b>p</b><b>r</b><b>o</b><b>b</b><b>e</b>            optional integer
+       <u>S</u><u>t</u><u>a</u><u>t</u><u>u</u><u>s</u><u>:</u>
+         <b>i</b><b>s</b><b>_</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>e</b><b>d</b>                boolean
+         <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>l</b><b>a</b><b>s</b><b>t</b><b>_</b><b>e</b><b>r</b><b>r</b><b>o</b><b>r</b>         optional string
+         <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>s</b><b>t</b><b>a</b><b>t</b><b>e</b>              optional  string, one of <b>A</b><b>C</b><b>T</b><b>I</b><b>V</b><b>E</b>, <b>B</b><b>A</b><b>C</b><b>K</b><b>O</b><b>F</b><b>F</b>,
+                                     <b>C</b><b>O</b><b>N</b><b>N</b><b>E</b><b>C</b><b>T</b><b>I</b><b>N</b><b>G</b>, <b>I</b><b>D</b><b>L</b><b>E</b>, or <b>V</b><b>O</b><b>I</b><b>D</b>
+         <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>s</b><b>e</b><b>c</b><b>_</b><b>s</b><b>i</b><b>n</b><b>c</b><b>e</b><b>_</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b>  optional string, containing  an  integer,
+                                     at least 0
+         <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>s</b><b>e</b><b>c</b><b>_</b><b>s</b><b>i</b><b>n</b><b>c</b><b>e</b><b>_</b><b>d</b><b>i</b><b>s</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b>
+                                     optional  string,  containing an integer,
+                                     at least 0
+         <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>l</b><b>o</b><b>c</b><b>k</b><b>s</b><b>_</b><b>h</b><b>e</b><b>l</b><b>d</b>         optional string
+         <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>l</b><b>o</b><b>c</b><b>k</b><b>s</b><b>_</b><b>w</b><b>a</b><b>i</b><b>t</b><b>i</b><b>n</b><b>g</b>      optional string
+         <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>l</b><b>o</b><b>c</b><b>k</b><b>s</b><b>_</b><b>l</b><b>o</b><b>s</b><b>t</b>         optional string
+         <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>n</b><b>_</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>      optional string, containing  an  integer,
+                                     at least 2
+         <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>b</b><b>o</b><b>u</b><b>n</b><b>d</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>         optional string, containing an integer
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+         <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b>                map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+     <u>C</u><u>o</u><u>r</u><u>e</u> <u>F</u><u>e</u><u>a</u><u>t</u><u>u</u><u>r</u><u>e</u><u>s</u><u>:</u>
+
+       <b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b>: string (must be unique within table)
+              Connection methods for clients.
+
+              The following connection methods are currently supported:
+
+              <b>s</b><b>s</b><b>l</b><b>:</b><u>h</u><u>o</u><u>s</u><u>t</u>[<b>:</b><u>p</u><u>o</u><u>r</u><u>t</u>]
+                     The  specified  SSL <u>p</u><u>o</u><u>r</u><u>t</u> on the given <u>h</u><u>o</u><u>s</u><u>t</u>, which can ei‐
+                     ther be a DNS name (if built with unbound library) or  an
+                     IP  address.  A  valid SSL configuration must be provided
+                     when this form is used, this configuration can be  speci‐
+                     fied via command-line options or the <b>S</b><b>S</b><b>L</b> table.
+
+                     If <u>p</u><u>o</u><u>r</u><u>t</u> is not specified, it defaults to 6640.
+
+                     SSL  support  is  an  optional feature that is not always
+                     built as part of Open vSwitch.
+
+              <b>t</b><b>c</b><b>p</b><b>:</b><u>h</u><u>o</u><u>s</u><u>t</u>[<b>:</b><u>p</u><u>o</u><u>r</u><u>t</u>]
+                     The specified TCP <u>p</u><u>o</u><u>r</u><u>t</u> on the given <u>h</u><u>o</u><u>s</u><u>t</u>, which  can  ei‐
+                     ther  be a DNS name (if built with unbound library) or an
+                     IP address (IPv4 or IPv6). If <u>h</u><u>o</u><u>s</u><u>t</u> is  an  IPv6  address,
+                     wrap it in square brackets, e.g. <b>t</b><b>c</b><b>p</b><b>:</b><b>[</b><b>:</b><b>:</b><b>1</b><b>]</b><b>:</b><b>6</b><b>6</b><b>4</b><b>0</b>.
+
+                     If <u>p</u><u>o</u><u>r</u><u>t</u> is not specified, it defaults to 6640.
+
+              <b>p</b><b>s</b><b>s</b><b>l</b><b>:</b>[<u>p</u><u>o</u><u>r</u><u>t</u>][<b>:</b><u>h</u><u>o</u><u>s</u><u>t</u>]
+                     Listens  for  SSL  connections on the specified TCP <u>p</u><u>o</u><u>r</u><u>t</u>.
+                     Specify 0 for  <u>p</u><u>o</u><u>r</u><u>t</u>  to  have  the  kernel  automatically
+                     choose  an available port. If <u>h</u><u>o</u><u>s</u><u>t</u>, which can either be a
+                     DNS name (if built with unbound library)  or  an  IP  ad‐
+                     dress,  is  specified, then connections are restricted to
+                     the resolved or specified local IP address  (either  IPv4
+                     or  IPv6  address).  If  <u>h</u><u>o</u><u>s</u><u>t</u> is an IPv6 address, wrap in
+                     square brackets, e.g. <b>p</b><b>s</b><b>s</b><b>l</b><b>:</b><b>6</b><b>6</b><b>4</b><b>0</b><b>:</b><b>[</b><b>:</b><b>:</b><b>1</b><b>]</b>.  If  <u>h</u><u>o</u><u>s</u><u>t</u>  is  not
+                     specified then it listens only on IPv4 (but not IPv6) ad‐
+                     dresses.  A valid SSL configuration must be provided when
+                     this form is used, this can be specified either via  com‐
+                     mand-line options or the <b>S</b><b>S</b><b>L</b> table.
+
+                     If <u>p</u><u>o</u><u>r</u><u>t</u> is not specified, it defaults to 6640.
+
+                     SSL  support  is  an  optional feature that is not always
+                     built as part of Open vSwitch.
+
+              <b>p</b><b>t</b><b>c</b><b>p</b><b>:</b>[<u>p</u><u>o</u><u>r</u><u>t</u>][<b>:</b><u>h</u><u>o</u><u>s</u><u>t</u>]
+                     Listens for connections on the specified TCP <u>p</u><u>o</u><u>r</u><u>t</u>.  Spec‐
+                     ify 0 for <u>p</u><u>o</u><u>r</u><u>t</u> to have the kernel automatically choose an
+                     available  port.  If <u>h</u><u>o</u><u>s</u><u>t</u>, which can either be a DNS name
+                     (if built with unbound library)  or  an  IP  address,  is
+                     specified,  then  connections  are  restricted to the re‐
+                     solved or specified local IP address (either IPv4 or IPv6
+                     address). If <u>h</u><u>o</u><u>s</u><u>t</u> is an IPv6 address, wrap it  in  square
+                     brackets,  e.g. <b>p</b><b>t</b><b>c</b><b>p</b><b>:</b><b>6</b><b>6</b><b>4</b><b>0</b><b>:</b><b>[</b><b>:</b><b>:</b><b>1</b><b>]</b>. If <u>h</u><u>o</u><u>s</u><u>t</u> is not specified
+                     then it listens only on IPv4 addresses.
+
+                     If <u>p</u><u>o</u><u>r</u><u>t</u> is not specified, it defaults to 6640.
+
+              When multiple clients are configured, the <b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> values must  be
+              unique. Duplicate <b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> values yield unspecified results.
+
+     <u>C</u><u>l</u><u>i</u><u>e</u><u>n</u><u>t</u> <u>F</u><u>a</u><u>i</u><u>l</u><u>u</u><u>r</u><u>e</u> <u>D</u><u>e</u><u>t</u><u>e</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u> <u>a</u><u>n</u><u>d</u> <u>H</u><u>a</u><u>n</u><u>d</u><u>l</u><u>i</u><u>n</u><u>g</u><u>:</u>
+
+       <b>m</b><b>a</b><b>x</b><b>_</b><b>b</b><b>a</b><b>c</b><b>k</b><b>o</b><b>f</b><b>f</b>: optional integer, at least 1,000
+              Maximum  number  of  milliseconds to wait between connection at‐
+              tempts. Default is implementation-specific.
+
+       <b>i</b><b>n</b><b>a</b><b>c</b><b>t</b><b>i</b><b>v</b><b>i</b><b>t</b><b>y</b><b>_</b><b>p</b><b>r</b><b>o</b><b>b</b><b>e</b>: optional integer
+              Maximum number of milliseconds of idle time on connection to the
+              client before sending  an  inactivity  probe  message.  If  Open
+              vSwitch  does  not communicate with the client for the specified
+              number of seconds, it will send a probe. If a  response  is  not
+              received  for  the  same additional amount of time, Open vSwitch
+              assumes the connection has been broken and  attempts  to  recon‐
+              nect.  Default is implementation-specific. A value of 0 disables
+              inactivity probes.
+
+     <u>S</u><u>t</u><u>a</u><u>t</u><u>u</u><u>s</u><u>:</u>
+
+       Key-value pair of <b>i</b><b>s</b><b>_</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>e</b><b>d</b> is always updated. Other key-value pairs
+       in the status columns may be updated depends on the <b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> type.
+
+       When <b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> specifies a connection method that listens for inbound con‐
+       nections (e.g. <b>p</b><b>t</b><b>c</b><b>p</b><b>:</b> or <b>p</b><b>u</b><b>n</b><b>i</b><b>x</b><b>:</b>), both  <b>n</b><b>_</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>  and  <b>i</b><b>s</b><b>_</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>e</b><b>d</b>
+       may also be updated while the remaining key-value pairs are omitted.
+
+       On  the  other  hand, when <b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> specifies an outbound connection, all
+       key-value pairs may be updated, except  the  above-mentioned  two  key-
+       value  pairs associated with inbound connection targets. They are omit‐
+       ted.
+
+       <b>i</b><b>s</b><b>_</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>e</b><b>d</b>: boolean
+              <b>t</b><b>r</b><b>u</b><b>e</b> if currently connected to this client, <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b> otherwise.
+
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>l</b><b>a</b><b>s</b><b>t</b><b>_</b><b>e</b><b>r</b><b>r</b><b>o</b><b>r</b>: optional string
+              A human-readable description of the last error on the connection
+              to the manager; i.e. <b>s</b><b>t</b><b>r</b><b>e</b><b>r</b><b>r</b><b>o</b><b>r</b><b>(</b><b>e</b><b>r</b><b>r</b><b>n</b><b>o</b><b>)</b>. This key will  exist  only
+              if an error has occurred.
+
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>s</b><b>t</b><b>a</b><b>t</b><b>e</b>: optional string, one of <b>A</b><b>C</b><b>T</b><b>I</b><b>V</b><b>E</b>, <b>B</b><b>A</b><b>C</b><b>K</b><b>O</b><b>F</b><b>F</b>, <b>C</b><b>O</b><b>N</b><b>N</b><b>E</b><b>C</b><b>T</b><b>I</b><b>N</b><b>G</b>,
+       <b>I</b><b>D</b><b>L</b><b>E</b>, or <b>V</b><b>O</b><b>I</b><b>D</b>
+              The state of the connection to the manager:
+
+              <b>V</b><b>O</b><b>I</b><b>D</b>   Connection is disabled.
+
+              <b>B</b><b>A</b><b>C</b><b>K</b><b>O</b><b>F</b><b>F</b>
+                     Attempting to reconnect at an increasing period.
+
+              <b>C</b><b>O</b><b>N</b><b>N</b><b>E</b><b>C</b><b>T</b><b>I</b><b>N</b><b>G</b>
+                     Attempting to connect.
+
+              <b>A</b><b>C</b><b>T</b><b>I</b><b>V</b><b>E</b> Connected, remote host responsive.
+
+              <b>I</b><b>D</b><b>L</b><b>E</b>   Connection is idle. Waiting for response to keep-alive.
+
+              These  values  may  change in the future. They are provided only
+              for human consumption.
+
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>s</b><b>e</b><b>c</b><b>_</b><b>s</b><b>i</b><b>n</b><b>c</b><b>e</b><b>_</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b>: optional string, containing an integer, at
+       least 0
+              The amount of time since this client last successfully connected
+              to the database (in seconds). Value is empty if client has never
+              successfully been connected.
+
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>s</b><b>e</b><b>c</b><b>_</b><b>s</b><b>i</b><b>n</b><b>c</b><b>e</b><b>_</b><b>d</b><b>i</b><b>s</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b>: optional string, containing an integer,
+       at least 0
+              The amount of time since this client last disconnected from  the
+              database  (in  seconds). Value is empty if client has never dis‐
+              connected.
+
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>l</b><b>o</b><b>c</b><b>k</b><b>s</b><b>_</b><b>h</b><b>e</b><b>l</b><b>d</b>: optional string
+              Space-separated list of the names of OVSDB locks that  the  con‐
+              nection  holds.  Omitted  if  the  connection  does not hold any
+              locks.
+
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>l</b><b>o</b><b>c</b><b>k</b><b>s</b><b>_</b><b>w</b><b>a</b><b>i</b><b>t</b><b>i</b><b>n</b><b>g</b>: optional string
+              Space-separated list of the names of OVSDB locks that  the  con‐
+              nection  is currently waiting to acquire. Omitted if the connec‐
+              tion is not waiting for any locks.
+
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>l</b><b>o</b><b>c</b><b>k</b><b>s</b><b>_</b><b>l</b><b>o</b><b>s</b><b>t</b>: optional string
+              Space-separated list of the names of OVSDB locks that  the  con‐
+              nection  has  had  stolen by another OVSDB client. Omitted if no
+              locks have been stolen from this connection.
+
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>n</b><b>_</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>: optional string, containing an integer, at
+       least 2
+              When <b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> specifies a connection method that listens  for  in‐
+              bound  connections  (e.g. <b>p</b><b>t</b><b>c</b><b>p</b><b>:</b> or <b>p</b><b>s</b><b>s</b><b>l</b><b>:</b>) and more than one con‐
+              nection is actually active, the value is the  number  of  active
+              connections. Otherwise, this key-value pair is omitted.
+
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>b</b><b>o</b><b>u</b><b>n</b><b>d</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>: optional string, containing an integer
+              When <b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> is <b>p</b><b>t</b><b>c</b><b>p</b><b>:</b> or <b>p</b><b>s</b><b>s</b><b>l</b><b>:</b>, this is the TCP port on which the
+              OVSDB  server  is  listening.  (This is particularly useful when
+              <b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> specifies a port of 0, allowing the kernel to choose  any
+              available port.)
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       The  overall purpose of these columns is described under <b>C</b><b>o</b><b>m</b><b>m</b><b>o</b><b>n</b> <b>C</b><b>o</b><b>l</b><b>u</b><b>m</b><b>n</b><b>s</b>
+       at the beginning of this document.
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+
+       <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b>: map of string-string pairs
+<b>S</b><b>S</b><b>L</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       SSL configuration for ovn-sb database access.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>p</b><b>r</b><b>i</b><b>v</b><b>a</b><b>t</b><b>e</b><b>_</b><b>k</b><b>e</b><b>y</b>                   string
+       <b>c</b><b>e</b><b>r</b><b>t</b><b>i</b><b>f</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b>                   string
+       <b>c</b><b>a</b><b>_</b><b>c</b><b>e</b><b>r</b><b>t</b>                       string
+       <b>b</b><b>o</b><b>o</b><b>t</b><b>s</b><b>t</b><b>r</b><b>a</b><b>p</b><b>_</b><b>c</b><b>a</b><b>_</b><b>c</b><b>e</b><b>r</b><b>t</b>             boolean
+       <b>s</b><b>s</b><b>l</b><b>_</b><b>p</b><b>r</b><b>o</b><b>t</b><b>o</b><b>c</b><b>o</b><b>l</b><b>s</b>                 string
+       <b>s</b><b>s</b><b>l</b><b>_</b><b>c</b><b>i</b><b>p</b><b>h</b><b>e</b><b>r</b><b>s</b>                   string
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>p</b><b>r</b><b>i</b><b>v</b><b>a</b><b>t</b><b>e</b><b>_</b><b>k</b><b>e</b><b>y</b>: string
+              Name of a PEM file  containing  the  private  key  used  as  the
+              switch’s identity for SSL connections to the controller.
+
+       <b>c</b><b>e</b><b>r</b><b>t</b><b>i</b><b>f</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b>: string
+              Name  of a PEM file containing a certificate, signed by the cer‐
+              tificate authority (CA) used by the controller and manager, that
+              certifies the switch’s private key,  identifying  a  trustworthy
+              switch.
+
+       <b>c</b><b>a</b><b>_</b><b>c</b><b>e</b><b>r</b><b>t</b>: string
+              Name  of a PEM file containing the CA certificate used to verify
+              that the switch is connected to a trustworthy controller.
+
+       <b>b</b><b>o</b><b>o</b><b>t</b><b>s</b><b>t</b><b>r</b><b>a</b><b>p</b><b>_</b><b>c</b><b>a</b><b>_</b><b>c</b><b>e</b><b>r</b><b>t</b>: boolean
+              If set to <b>t</b><b>r</b><b>u</b><b>e</b>, then Open vSwitch will attempt to obtain the  CA
+              certificate  from the controller on its first SSL connection and
+              save it to the named PEM file. If it is successful, it will  im‐
+              mediately  drop  the  connection and reconnect, and from then on
+              all SSL connections  must  be  authenticated  by  a  certificate
+              signed  by the CA certificate thus obtained. <b>T</b><b>h</b><b>i</b><b>s</b> <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b> <b>e</b><b>x</b><b>p</b><b>o</b><b>s</b><b>e</b><b>s</b>
+              <b>t</b><b>h</b><b>e</b> <b>S</b><b>S</b><b>L</b> <b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b> <b>t</b><b>o</b> <b>a</b> <b>m</b><b>a</b><b>n</b><b>-</b><b>i</b><b>n</b><b>-</b><b>t</b><b>h</b><b>e</b><b>-</b><b>m</b><b>i</b><b>d</b><b>d</b><b>l</b><b>e</b> <b>a</b><b>t</b><b>t</b><b>a</b><b>c</b><b>k</b>  <b>o</b><b>b</b><b>t</b><b>a</b><b>i</b><b>n</b><b>i</b><b>n</b><b>g</b>  <b>t</b><b>h</b><b>e</b>
+              <b>i</b><b>n</b><b>i</b><b>t</b><b>i</b><b>a</b><b>l</b>  <b>C</b><b>A</b>  <b>c</b><b>e</b><b>r</b><b>t</b><b>i</b><b>f</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b><b>.</b>  It may still be useful for bootstrap‐
+              ping.
+
+       <b>s</b><b>s</b><b>l</b><b>_</b><b>p</b><b>r</b><b>o</b><b>t</b><b>o</b><b>c</b><b>o</b><b>l</b><b>s</b>: string
+              List of SSL protocols to be enabled for SSL connections. The de‐
+              fault when this option is omitted is <b>T</b><b>L</b><b>S</b><b>v</b><b>1</b><b>,</b><b>T</b><b>L</b><b>S</b><b>v</b><b>1</b><b>.</b><b>1</b><b>,</b><b>T</b><b>L</b><b>S</b><b>v</b><b>1</b><b>.</b><b>2</b>.
+
+       <b>s</b><b>s</b><b>l</b><b>_</b><b>c</b><b>i</b><b>p</b><b>h</b><b>e</b><b>r</b><b>s</b>: string
+              List of ciphers (in OpenSSL cipher string  format)  to  be  sup‐
+              ported  for  SSL  connections.  The  default when this option is
+              omitted is <b>H</b><b>I</b><b>G</b><b>H</b><b>:</b><b>!</b><b>a</b><b>N</b><b>U</b><b>L</b><b>L</b><b>:</b><b>!</b><b>M</b><b>D</b><b>5</b>.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       The overall purpose of these columns is described under <b>C</b><b>o</b><b>m</b><b>m</b><b>o</b><b>n</b>  <b>C</b><b>o</b><b>l</b><b>u</b><b>m</b><b>n</b><b>s</b>
+       at the beginning of this document.
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+
+Open vSwitch 23.06.3            DB Schema 1.1.1                   <u>o</u><u>v</u><u>n</u><u>-</u><u>i</u><u>c</u><u>-</u><u>s</u><u>b</u>(5)
+</pre></body></html>
diff --git a/support/dist-docs-branch-23.06/ovn-ic-sb.5.pdf b/support/dist-docs-branch-23.06/ovn-ic-sb.5.pdf
new file mode 100644
index 0000000000000000000000000000000000000000..9a1d5d2fac8d9d7d03e0737bedc81ab829454083
GIT binary patch
literal 52130
zcma&NLzrgEwzi$NomrK(ZQHhO+qP}nwrv}4+O{fH|JvvO&grbqZbi(PamDP+xW_X@
zsvsgp%SgupLppvPUj#!+Drx6tZ*1sdX>Z3x;9%%tL2vF%K&wDYKx?8bC?=}(&nRqf
z`_BtYBTE}g7f%^eH&Ywle-0p^b^L$(<m43uRh32m*(oHbA}m2b>ntLwCMhh+>tJH$
z?qum=`p=59i;2Cf3orjaQ+Zbx2Uiy{OB>VwJpNZ-f?*|KAh0*Gg5lwzmoc?7cd;N~
z`)5Uo{-0A^Oq~em#cT{+OhrtM?M+Pi_+Xq}oJ<XEVLWnjH2_WkF%;i3^%+2r_9+;1
z2mI@-k_zRGR+_PsZtImzW!S!i2n-k!P|A>xupjB)jveR0*c9XPF9J-)b3WgXXVZJw
z2TEeTpJxB&;URMQXnhQszf#xv*8+8H(dc<wCee3%WbXz~9Sro0Ne)RNgqy!H^j><l
zzu?67b)<p`&<S%kt}*mFr<zr}N6YtoWom)xW|T2VSRRR+JT*P|Js0Jro%E|w=9@^0
zg2YcV>JfSB^&jZ~$=sTFrh(yeiH`Vsu-Df9$SHzGH_mA|h%tkVSz;be=wgiULQOD6
z-$S46z4#c56!0~L-M_+_n8du)`QX1pYOwgnDQQ0D5lH_8Z_^K_lu^p}$lu}H)#I<N
zHUjLcjXR0CHz#Xt&@G#Lxh78jvi;SmX-P$ou3UIl#DgulZ*Jc_ySbn0qjIC2ta^Ma
zHzw}xp^5}cwk78l#j6fGHZ8~T(5tGMo+fXa#!u%d>dS|@Q)I2W2Ey?=wv;-`0JsG9
zkGy|A=UuDlsz~q8y$!E$<L;NHCC%y;9wEr8#6z?)8(BVB!j%}Ga&v44hXGwy@nHlw
zmLK40zt6vl?60VxahYn>Lzg=e&{Yz-M!gfyn>iUINS-<=vac!=BMv|*qKJ6(#}E*u
zi3vwwfd+q(`<;74Frq*Sh<}R}(^ki|jCa)`xvE=^00)PF3*vVi*ue^(!87RRd|=hz
zt${rj$!yFr4VjPxipRR=-n;K}plv;z-eowME)x9>cy-HBk@!Q(2t0YC$F@}|ImcPe
zgQhZqX?+u26V{l|6(lq$(~$nBH6k|zE<R=3O^pGhWXyQ{SFw!6j%Ni;X8MiF0Ft#{
zPz|EkWxT8_K@){UaZJW7GSyko;{+8pZB%AbBNFjgZIY}~AYCruW)V#6dhphX!5UGk
znzto65tAFB&Pt{+_9!exP8!m00YQ*SgjUd$57zi@-G+Xe+%)&K@Z!;n)mBnqct5*2
zZG_NSQ@S8gZ)Pi03(^iQ2}r9sKMWMSQdX^atBVTYqm6~PrJQNl?5HZ=R^_c&6@ouD
z3+uV==uW$6I)Vxep3ad_IhpgOBs9w^chJ=@3*NuPdcNz%i|yO8vasOXerU6z1`oN%
zEpS!GX|~g-$rK2UnkPA!F)CQOeO5=@{b-WoZ|nK`F$c2=B4<$;MwOA^y;HjAj09Go
zT5fWiZD#e!R#K-Xn@*j=uuugD|C;Ma{<u{$*<Ntlvl7w{p#kejNd<5;=H1UgOay>=
z(68`C7hS~YF%n3SfF|w&1Vg=^2KG$!CT#VNcOt*qsRDPjO#j?rFDy^{R4L-e#ER)z
zh~YiLh5*}#TH)H4Z2iCq8Z=JD31ky5#d@QPqbcpqN1Jn2A(MU3g7}t@MS`yFAz52D
zC^-d-8s-?rSETW*?0||`hOaYB6?6}G*I99P1v?a|b)Jh-LKcBR`2-XRrz&HWv9e0x
z01~>)@XQI$^TRk{=T=6d1|iT!i+|f)Kl5hy5<qhkE0E)y1I(E?Kw)DzGZE(S7_OG#
z#3|<x09n24&08+P=a2?ZqIqTYLwT7ay~*o(y_C$F^IZB;$phwcDJOHt9Ei+ilr$Ny
z+u>Fu7FkVrF3Y?+CnpG7fEC$@6mE91Y_+BextcD^(}1XRz~iZirSza%TOS!{-hzit
zGC$g?8b*EkuMyIWTQp+u46>4HD|KKG9k&K)1NM4>xGq`c;$9@N<fE4r1Rur(6Zw)+
z9(X)0m3Q*N{M2K&N#DDQYKCeA$lre%tQ<b3`;KYqLdNzcYHK5bx;$`l)<;gP7J`e@
zc7B?Oz-Xj`?Oc|^+V(DPG{YO4)h5<7GOvM~Nth+HCd7g2V`HzXIPj)kX$C3PwEc0?
z32SARSMgY3s+WBDa=j~-pb$$^Ea~kfC=FS&9)?7tEZrxS`-k8{Xve8d9}@0nAdmwD
zmM?gz4p;D}vg{zx9bw2c`$tK;6urH3{Xzs^&D5JCVJ%RiHdjD1D3XFNmd7E~-I`BV
zLT4Nv2%73rZRXZO3|6r8p~ut)tqZ@77(!46g7u)9#7+TqfhzSg_)60~mgMLl>XcIr
zwwn=ZI{JcyRsNJtIPH47*=<)dmz!{u9oAEa6)}#wGz|xS2W$yU9o;YQ{Z92EPEen1
zXPu#h=ntXX?1;iR4UVp{b~_C9o(t<gtKGkve%^L=0P)j6M!<->{&Q}OStJkdmkAxN
zz(KS#Mxe^V&tLn<&4RrI7oxj|qPGqSvOn2Oq!%I}*h=*)5#2>%PqjQCRNLTN-G5mS
zW?5r4SN+%M13)^`Hj3*IY>lN1U*yW(q?Jd@>J1L67Sr4Zs3+wFfic1Qp^>%~a1w@+
zoj6e<W&sl?dpc>!Ki%LNI(0;Qh&_m5NYmd9Vpq#{m4gL!cr!hjV<{aDcJ<@d_wT`@
zqq)YZ&+N7RZO#MQk{s3Z5ipEZ6dD!DuwliD=vaB?-q)J~xC+rDJ=YPP9g}c5Gq=zl
zUSHqBU_c%CCG<`_-q_c6zS5jKap~xcHr(~ZrVg4owWXM^WROqIo*Rcr(G={`2X)P@
zR`Vf@B)5kiAsa!Od%t@dEyZNV@nx-{+o$6;=ELXc8r?qUI5ClB3|N-3|4x<Of{blw
zJ@!MKLUz>1HTXg=i&wzBL<xw^)1mn6SetJp&%woZD>CRgukYy(!n2HD9TSW^NjFE#
zNY6cZecz%_+?y!vyw)8Yb-%YxQo!^hqrS0b9C?%sqNM-AI!c7hSo=_>2#k}(=8@pM
zc1av>*|KAc#y{Bm3oL0&U}tJ)^8eJtKePWRkpJk8|BOtGjBGIfZ;kQa@`Ulf(kG>w
zlTN?HF?x=uFUc0z0Il@Qkl`lGELjUNw#eiFR3}uMC@fG59H7aBem^FCR*WP)5t;LW
zic78CBzk>}=jx?c#jL+!{mY{g)riIV;$mj2_vT#+^<>4$by+gv`hC)044pWuvSOsw
zNpDt7Sh1ho$&>z$P;04Uok_fEGIZicCl@weU48rO^n0lXK-pL7M@pzJ3dx^~@8yo~
z7b3pi%e0+qB?~6ME}3XyZ|CmJvoBgd)Vq6Z&vc$wn5r9R;Q?_hRa#6r`c5_MSiz>U
z&^n%%!ZtbT<#bbFlhZrAW9(~P2YLA8^}BhM?&kLTd1!kn70VuvrvU%_zels~XXJk~
zzn<=$mP^ozxmeYB?0jaPKgJ)9yOh<xeRlIV7A%r?-u>FX3h2yl!d1H!uB?3q4nzSD
z-&(c}UaPZ!*&6-2dUN(F-DiznOZw9tt=Y7u{ie|lUH92Z%lk&j&A53j5w}f!r?=TE
zZTIO}tyWik;x-~IO`ecI`vYh1N26a`Ewjp~?P}Am*;j7GTdL)DTdQI(>P~;=$tT&h
zx|x1FSKofM-m=jjgREz0*aK1J#0s<NwS4Xq0n?@0Iym01edavA`&9xZSi5fS9lE(L
z*3)&bX7P<}nA}vy@0^6o&33;!)z+zf3(26+k8WL7LSrYsewt{IW!cGoo|NU%B1>|#
z^{B9a#{_OY$IlJEwRTmPf%Ds)wTB0m%C4~zjz3_}XiCSN-iWf_(N!aI*tRJx`}uWi
zRGD_4ujwO!l^gA0X?QRSop97Xu|4)}SRL}tb-YJx53aqKfm<VgWWAl-92RLaBG>Lm
zu5A)=-yWNQW|ZmTE?mCsStUY!fmaChu?i!M>GRSQg8jbb*L$IU(Qdy)|9PFhjTR>-
zq!uf`G0peAl#KR!Ij%7IMZ-3HIggK*nyq0Y`6<9zm|Sgz9+#rzK1x8?odYOqLb11A
zIrd`v4xJ9Nc3L}4NIPvNW$KWw6PnR<tiG+%cAd6t|KT=@AM)<G?X&jh)L6ZLZ=O8&
z{zzR3f1#-GW}r<fg8I8&4Ck%`*Cx0WEy`MilJgb|jeHg}_cx#qJHlmROKf~>2r}JM
z4DG}3>E-iD{Z4=WGkU7V2&!SxBR(|o;f2b4c_SrdxevN<McQ%wdqOjO>uo9(WzhK?
zrqeKEq~}a?oEAakTy|h@OQ-KPecDb+3b1*a1G#)8mfs2!){f_{dmk&$LEa^$*Kzyx
zb#seHHh3ZMs>WxT7S1GQz5BGj9>^R#*&4{xw-GvaT;L;y9g$74p#!E&f43sM7R~K2
zKY-f&$L8tb8&Tkn4-cp2(vT>M%ls5eeLSn`yegJ7$V1Vgk0AdY3%;S`o6(T@+_{2E
zWS4Dpji%R*eP@BywTfrgqQCXi?+$6=rJ#-f)<?h}VtJ|02>T3(xwj25x5DFB6TT0f
zY{OrCpaoB1HQ>QWwcniDa)4||C<(RdirDQx7n^@`r<fDq5d!67;a{5U7ozRAW?w$l
zn@>n_K5uuAtzJaoOE$zQchvM>+XCwZ38c(+nL{GyUOA4K0?v^l0-mU8eb(#Q<l&|l
zC9Z=hC+epndgtSlO=N<D90i}UOUO%(0w6wKB|UReWLhtE{ku1b_bkHU9-ByhA1m7w
zd5<W~ZOKUYGzytUCo%(PApu+xqcWYz76|Qg>X=!MekOX?wQI7Dv0&8+WD}o8k0LqA
zdf=Gl8K6UB95B@6)!d1bTa!;Bz`Rhw3Wf)iXbq7}6Mj`I*mpV{|E^^LUu)_p%up!8
zA`aTPi^8OD=pnfs79pvtiBqEsvxh2g?P$AqPIHkLPZJf#cl|cvo#1nZGla>vHBq4%
z<7@P3Bo<yHa^S+~EQI1>oI~@NK(b>g@oI^pJhFju8QEMJ@L`gop=lU&ppNQjdUsi8
zS<A<5gMYxIjdjAPY++o!!b0&CB(oKA<51Sg#a3__nG=TdpiEL>;nnBK1cqVaM8_mq
zC@>yMa=}d(2*%nwh*iiOD5dbOan@8y$-p8ZFp&(AMzT~qysKfEECJ`1`{e{f`#jS#
z$j6AqE)|8_owUpOCkJi-Ev0h$98!2)ul`IQ_qkla#j`Qupm_wn>AJb_4a;g!>=iQg
ztw;9L0g~t!TB)ny0EWC7(yaoFaS(Qc%(GHk9xW8G(5k415E~_<q;M!rS`z&^W|}J1
zDh%Uf+w@j5h?oAr4UJ5XJ|(uoaVy%SLgz|Ph7#=1*$m7`@u~#w@o|Y9+-=Id1O6XD
zqC`nfI&O><QSeB|3VM?r*mW}rA?j%3N7wF3({uvc=+xDa9B|otjTmBIfvwhfrB303
zzZ`cyj-Pw0%ogV!gF}Wu1sDe1{=UKvx1{eKJJuO{cotaayf`s+coqy+a6MZNLz4K0
zv8e-K2b)!hQcs<q2#HEqu;*C1gs&bD5|I;)CozNwJ=L_cP`C;C)@dNFtbJHk`&?x9
z+CNDL?!rqJSaH>Ro4<h(w#ml;Sd^6va!a?GqXRSwcr-afK|#Az!X&fCSfOA+u}eCc
zvfA=3nvb_G7(|24jLyVUyO9<|#iEn_tB+Ms`#6t5rQ#8(W1zu-N91>pKp2=4-cW3Y
zZ!}R2U$!A`f@`XA=M=4L`S=1rGb2|TfAlOccmNF!iopL&lJr*!8HKYqiuNOFA>nvK
z2&@*zqRE-BmnAoltAw5ehSjk^r}42u3RwLu2Qbo13=wO=U@KLq=Zn=j#4ymaNZJ{r
zBDTUXTdB~oHYNw;&I^jJf`ng?U>4U2vz^E=B#s9KlQfM8CB+ehjx-wt&@-)XBf*PL
zwhfXE1_J+3sa^6eg`x(VQH(7@2k=q;2E7@B_qdD%hbTxPizidjU2wRS2fXShL4p9#
z{AoN1)}G<yNq=;&KO7^V((t%iSQZilmOcdS`HkosQK?*FOjxmdgXe;=g~lU}2V){s
z7bFt>QesqSEl5l)K{AjzAvg)BV2^0#<E}}2JkYQ&*fnKF8>j>?M<+mQpPiJe$e=8x
zAH()5AW49u5jyh}B$tHvq|8tUlm{;s7>;G=1qA?==xJ4P?Fri=`c;d=5IqUi>3nK}
zC?yZzgtET{3JJ+3#166Nq!e;hl4!L?QZ#U(EeM9x%582`Sc_tUD1O0zAt-`mP%e;)
zx($>OW<K%cNFNy6R!(a!n{cHF%K99B7X^sW*%#i^_&q)5n1L>i-u}4}0LQ+$`UP$;
z;VEfB|KnlkO9YNieR0onk+2)L>9ugCle+b_<ES8lXkHP~Bmlvzr-y^gBEExEaR*)`
ziUUigbmOAe_HjUA9rih>1|SDrMKY)IpxwK25<)8ynvW{V0->2}U01aQL8q@z&?(XM
zqC*oXz@Y#lCP_}Ge$P8dM2?3&7|5_fIuuA8T|+H~;uuVj;F8ZJ!FmL7p4Y0MPoiow
zsuSbX1>^nfz@v|scpJ92n=kD6uFouocm&3%Ql5vAZ~VcS`^&Bf_)91#Rw%kXS;@#1
za5lczqja`>Ww%Hb(8c(!K*P+`_Sjr+@btO(7idPig8X0F_J2g{|A<>Q4vzm7w@i%x
zioG#0{Wrn4Qng7tfCN(S6ZNG8@UR@c4P9R>CK#Rx63O8#HWqD_Efc{eLOR8taGz%t
zXLelE%s>RRjaB)2z22%N@`4cH*8GReG=xy`v*h8Ab_TvB6gt%LW<|-%9xwc@;NwAT
zIz}kYkUm7oi;mMLx<3&FSeU4UhZFz&oaY^>>E(LP4dwN_<HSJmVajAeM3o`O#~t`O
ze+(h*^Ic4hH7O)VPLRYt1Li-KcgwK9YOCbX+0IFs<sP!I>c7R6K$8z*7<ot<Th8+6
zL5Y0sMGS^-w*l3k-zVQ!L%&skC+W&UrWl<5_V_qAf0F;P29IUu8S}meRIR#NRY{fG
z+EHy}*Uci7RmTO`_w%~7Hr+v!XzmJBBZP)ES!+$Kq%^faJMxn#^QA-x62gB>=P;Rv
zh^5q$s#t3KfGb;8%tl~5Tlfha20SVTpk@k+L4SOOLP?+*lD(fFz3OUKeO!$etm=TW
zk$am?p*Z(2iK?s3j!G@>iY=mfoL$mWOvg#KD~<a4*|32$c~Hq!<_+)&EU$UKoWmn}
zD0%MKEbw}p6B*^zRLnjF{pC7O$r{&ekg}sY1OWf|1l=k<G?U=$5Jkd+y+zWWCY+Gx
z2frg@m;rB54GM?7=6ABlI>rqbBvY|L38C<5Pww39J)a&Bj;~Ym>s+awh&DffvLT^Y
zYkiHNxi}ogc#ZwanHbDhMoB`&8F`p^D9WLo0mGZw{V^=%#X}`KH`?!A)Ark-bQZkb
z&JN6$Kg<YEBiPonpQRo~Z{}8ST`<Ez@alWbP)|Jx9MJ;2h$p+1)@d<;)biMlnov)w
zkNFiw7=$$bt(=(pR6;qer+%WwZKyqML)J@6l=I16y*I1a8+q%t6^cyh-y_kRkrcqR
zKO{(X<fp7hkJDSVkcj?G9hkf^KsoLBy|J}P3%<<9C07_*_Zd3esOvL%wn<Zrr?kFc
zQbzp`46%bM9Wmk?Jh}4__<j?b>2avgiY2nw*8KpfV%4Dh_(2qd?gK9}F<am?`O!1s
zA#;-YSfzgepm5~DIDZW=+dk=DGB5I;Te4md1KU7X54J5-l%yQUOA%mC&6WwZO<g6U
zBa>Z?J2&xScfZ+4l~%GIqx;c@k9OeNecR=3v&OYy)(PQHjXq$SB?i@z12Qkf`<cHn
zY~l@#9lB=LAMk-8`1CJ)o8I#$pB~h|4Y7EfQQCbaN9Ni((L}n|(;MWOb*To_$lwr-
zy5CBvKPDZLIqvSC=y#GLCjP~P|GDS?;Q=QL`~TtK-@Y!>f931urp(6Wa3GD}@rdGD
zQgXBn1~_Lco;FFbZNW_uGAkZK$Qyu{L2mD4`G)zX_83pGxxA5RTDBYp44hQye_tIT
zQy2>DH1}K)7Twc&#bo@2ovy~)?}|b(S6yAaiVx+kz$<cy6dWv^V5$hCz(dTww08+|
zODd_PVQ#6&qF|F$Cx2SY?fap?gzSMUr=g7~0I4!Y+Z#Xh1I2gS;?P!uQgT9`sbJ^W
z#^cs*zt_v`z06&#H_16{b?JQNF9eBvn}<pz5;1_AjrjD6NRl}wnI({Pb_Zs3QuG?D
z2CYz*QQP;=(mi&-bno4A^EJ=!^TUe`vm&M}<UD&=ed*4gO}~tXB~UX$$`l^zcoSIS
zk#H?m2(xqv<e+qx&mhvF@_=%~#P5cucP7%n`*rp0MUq#v>m=K9W7c2=u+Dh4TWV%=
zgD~B<LQeOdS3=2BYTM?lfR)wsTzgKz?wEn{m_VHCNFkwKQ!+x)OgLQ5UpUw0w^LA`
zg2CX2hXR^Vi8s5&;k_7Jq=@$)GOQ#K>d6=@Pg0bcdZZx{R^=V$uY*Ed<{+>ni%jvn
z>_8fjGe+#zJNP3f|0K8GrY)!egiNZL%5$y|v(4#7^A&Wm`ml|XV?v`Jy|RhHmEyDQ
zAV@K5;=`g)43&JDXt+U$n|6#o<GrFZYcMw125_{`VSt}G+HI38Fd`jY%F7;QmtwF*
z!_b`FT5a>>WACfhtxpZQ&w1Q~kJAZ1?MB?=$<Lx8&B>)>lR_*e96UbeF$6iQ7ijy9
z?(Ek7X{fNg{Hq>EyU@58;(J-4&T6zdm+J}s_Q;T5d&6oY`_{1@I9&*kxiD^MLr?r<
zZn$Sv-R1XF-;hHy>=%`HxW&=>ll`Y@(}{AuMqj24Y=Dqww2$fRbV6eAn2Mb#&^A@K
z=S4n%*wE&Uer>Uh>pC;KazA7`eZIolN53rODak=XL@|k`r4%sOV5glDaM%POiBSyP
ze*jo_)N1om7=YpPB=8Kg;+gj$+gF{_`}hH+BNnp!`-c5*IEkH|<^OIN=f4atGsAyn
zaMl0GcCjJ(uB-3Ys+dP00S!j)8jUY!%4M}Qk|CyYV@C*)wDnAYS+0JE`MF>M)fZiJ
z+-@-U0c}lh@|t75O$>v1epG*F9>XHuV7|c`{X}o!OUBi$!K&|Rkw>%V3;8zubT!};
zQIt?T`?kzs%Kd53`3o(!uNQ+IO^k0>;|^Qyusouw?fY@6yp2<k$V*ByvVCOXtHt4t
z(63z-FRppsO>)dpw5|6v6B-Us)*^>|j;6p#ypVpHsDQ*bz8TlUPKh1KLk0=wIQ`gu
z@eIg}*TFcq{&hyKIGyYva%FmLIFCqtcC-4KeS&|LFRpgbBwf+yO-%4nwUS18%0+c*
zh&R&s((NdBk>oT_X=OY-B1?%t9Ph%8P$|^9VTPjms3A!jtwk8PRFtNwgb^xp*+R46
zH;D^1mvJFLBp4yNQ09SBOaT>0!Lx<OOU7&AfCOrFGbl&_e!C0;{ciVAJ_b_GaVg-B
zM7$u$5|C$Rlx=4D9q~g68z~O-%LN;ru_Z_v<ag$0yKG+crK2ekDQ{Hh#EIs?M~jMX
z=_uX~r)RNMOKJt>(x(`aMGokQZ9;SDjWB+A0eq{SPL*PC9V()QM8rGC{@I1k;ssVV
zg!v`%wkv@LbWCbHDmCyw(fp5zxw~B4sR8aAX1<iFAGftvmY#&@(s|d+vjv=W)3xJJ
zt=vKRqTAQ8M1Ns+T4>0MX8H@cTvwJ0ZX!%^6+h9nen5~vnq_Gog4xkFS|mpm8ETno
z{q*6UZ}E;{{QU;wU)@$Z`j9h;rw2+5VF{@<E|Q=rm=jad`6W03Jcx5y67!0%jHWpI
zxGYvm2Dhb>I}_R^8Q#?r+F`L*Y$!#0|I#rXVA6Am_d`Cj48(~#L=?+;oIo7EJ$m2Y
z;yJUU1doM-JZy@fJ2lR{0cLDBPZ5hZ8IX(@=)!r$a1a{wTIo>LqFvnVJDrXw%jvqu
z`02j`UWHD5egf>K%lK@j%Qgyg1GYnx_-Q(CG5H-<YE*>^)Ww&qskM~fX2uT`Ktaj;
zlu$L`a^l0H`o*vy)_s=rss&la=s3#~&qV)<3qpj~y;fK=E`sb(D1(P{3K!>z%3Hpl
z%8V4M71?RWW_vCE*?uSxFUFk7y-CRHTX<Dd!|=}VJh9PB$k0x_uHZ<U#J=+ZiFoPD
zJIk$&;vbw%s&-~1)Q|~27h1zZIKsS#jaVILQj$p!nt{SDbyw{71`Z(=&AzS|)&*T!
z@49Xy)wYJ<^wxDibP55-oxPGW!RBIHZB)@6x{p4gtO16(DUqsjp>`*b=gz<~CqfG6
zINy4w`LMi4wkQ(U;&ItmL*AO(lH!eewN$i_WO20EGhOPya1`5r8cs_cmUG#q!AO0J
zeu<ZtY1ix@5IcIw&TO6v-!*YqK%Z~AC{;#M)6#ElqhE5L5u(`D3{h|z-Y692^TSJy
zj&*NGoYkljV!F<eq9P$zTp_KZR;=KuRaCoO7BLZXkIw`e!xw#ANAdafklNsDXX=~O
z<PiqT67u3u1+)u}SMf&*N-~C$A?D|gPV9ha{%!Kt&zM`m+m2qYej9EF<KT)~YTNg(
z&B#C2nU^=e_f=*eG}Ks;Oru<ku55o4=m&KXeKPcDpuC%abX%D%d9m%VfS*8rzqd^P
zk~)mjm!XS>I(Nl?X+{B;N5XKC9+>rj5_J^lVjZ-<I~PY#Xz*G=Av}dz)-#|3nh_`i
z<;StvYBwZJZra+kT&|2`x?~7LVoUi$1#-B=FH2V&*I@N_H*<lq1TsXc_fg74Q#h|^
z+d}5ZEj;Eu=YGS4?Ba?QUaw_F@nSd~v`+OxyZo|@;~H;KWeV3^3agwr9N@OATL?HN
za1Ja0%NP)p@txQ_AgjoJIb?tTK;)pryZ9II|A*xNkyMN<Oq~Bqd}ii<6QAY3A^xhG
zZ2UjO@BLK2SHsp|{6Zpivez|HY_Vvzr8#b*gsGzeSkX=<9=m?yKNfSBi1?BrEabu9
zf<+7;EN8RZze6L-AT!Fp$vvVAey*0Ix9TgtNjW_u)%&2LlUK9f5jP{<soju85rq{I
z2srjVPOZCsk&^^+gmS7g1w?psKf>@!e|?PB^m*2IfyuO0r-*AH1s+aMeV#|gTR*!<
z!J<kN2a=-NVl@KSXG^b<{DXVCxetq=v<a+0+aACxy<n@v7ORvYGPU8_w?Ie+<iuGa
zwD&7sv`D@}j~W;%ve@n$B0qnff4o1=Nr*x|Q#LDKNpVh^SY)co?aGQtb$J2@=thVe
zjRCp_QPQKw9Bc}Dh2}9F^r=cE-5Fw+B>e}MERMnqg`uuQv3?w7)sn8(Y6YdDYSy`e
z5#2bXviD=Do%}4p%55<GCL3**jk_phck&TIgJ@xlAxhW|V|sZX8Vge=?g-+YLS21D
zrHkU3rt$RD0sRn#)5_)}zxTLPKIun9Ti0TFF`bgj(xkq11tKBx+tS!!`~ItSAT+$t
z0WfeIi5%5EGVI$O=1wIAnp><9^6Q9>W4y;my*zPfB$x$Z8k?Q-oU^X(oh(bSZ)f%u
zW$r~Z7t>|gRMa;v)dBw0PEC-I!2wv0e6$OVOBKT}w5O~%q%P$$q5f?0J7kSAY>ed{
z0W<%1UCxvkm%S=azH>GqF9CmH%`F(GVN-cAPphV;ivBTi1Y4C`1?lL$zJd--)%m!m
zS-f->?w!-OwOwBTmOmQTU$ImSO%E2TA3)3EX5)|6L;Ba0qOkYd%S66Kh00z^`?H`U
zN5%8ssszG9dFXK$3pbnV7o%^K);teBD`NcRowF^kIOpg!;F%7f;UYUN1G*Gh##S(>
z;L~)&;|}IshO)RrgZokKT_E&xxelWiY!0N1&?$6w-3{JR<h%6#W5f(8QFH!>>uWq5
zuxmWtTJXkQvm9sTyzJmToZrcW*O<)9K9uvLYg(t#b<1~aL;;z^AoaHps_}G18-mTw
zwqdfsuX^okpAS9E6p(IzDmcY-`xB7gL2*x4eEAY446UA3J1pV&R&-FT$8ue;&e~|?
zZze6&)hH;V=RccwHfKm(!|B4|>d?$UdS|Xi4L+1`wyQ9qGe1K=Qph&Xz@8f@dJG(b
zk?8KD^(Hveg1G(2(eF$w{($PMD)bMI=kdjCfM25BdH>x}$rxs_4>e3_MiS>{O+QRP
znU)a!tB9W@|FVelE`;NBDBsSz^x8KP2r?Q&r*%HAuMb+%4xp;FUgu<H=EM~B3W*0O
zXQI!7)b@6AmOME&4*Y(6XuSet5b`3#$h#Nh(^@6(7VgyBmOq}Li$P>C4UzMmpfU6g
zvJiXYQ4VmQLy)S%M7Gy*YFW{MJM>33z!;{0pPJbxWKwfFrQ4frp+2?BQzHL{y}JS3
zA_-?%hvLFf)=;1c(C)?5T8MwRWcT<1Hkw8U`ZvM;L#F>B7$Xzw{}GJ+-vs0MZwS_^
z4v71YW_?q?uXSlO8_A})(Ponj#IOu9i|yeU4NB{5!;y9(@oc|ke^&p9$4x4tYfHue
zkMg}A>Y2IMF&ooY5TS^=)_==HZ-%lp*Ed`7jqZxC5pbX09J<vqYsSP+(beFa`yz}&
z6PAK%p)u?5%A)rVmNw9r;*duL=1$ATro;4XvsiO`84Yjg4j}bQbrLlpS$y;i<2U?c
z8MlisWBH~;DmhfLhtUZy|2FTLeX}s%#dF!a<C2LTy^nPl_dQ<XL*^H&q(M^Ias^9h
zJOr+FzhS3+u->%_xpRwm`{<OMuHBMTjvU#6^nS7fV1Lq2=Z~!mSB9P1c7}3B^eR4J
zbu}esEV4=CA)=B~&L4;2KXWc4(rLS;dP5k4mL=Lc5TdXNt5)+!XRlbj>J@C|Tq$ET
z1rWr(uCmQP<JoqpEE=m0uiMs6li7csj1gz6p5z0JZP_U36}y?wzjaDTWQoK0`-J(^
zYAbcgbfAkY1UwHakZ1@UX+GIMTK315Ol<X1&vjMXyIoyr*y*xc?PlDaDJ9V;<9@l*
z-&cl^uK?e*kP#)h+>K6mk)v50@TzR^o(;m9Oi?+cg~{Lwn2gjEr#7Z2AViLnI0A0t
zMGLQ%Yl*|cFb@z~!cV2p#E$61me&YEqp@1d{X+r70ZsnzJmKsjDrFlvb1h5y?L(Xe
zeB~(i+}GfeD7PsEP{qM&c8{GBC_|K^ro4-=>P^aQ#J_0_O3SBffkE5RiymT?F2jIx
z^Bo**v|8BCHBR;8#vZ7MiIgkJdV&}Lxv3GO%o?J)p45J-=->{2tG4i?n>u-eL&-oX
zPTi~NJS-~T5dV~M3Wt;p=7#bWTq1ksVE%yOy6CZE7C5sSy|h}o_Syers*07Y8${rO
zf(Z(>&sLNuAQ8ZB!L-nGKsp04_5w_cdVZxDR4QSPo!Z~Lp#N&)-XXewQoqiSSOh#&
z_5XHZdk1Vjexl=b$_`ix_8+hfN`Co!#lmb1L8$fFg~4Kk5T%q--6y<ll9EIf4>Ii1
z_tk(cyQDJ;f*}eyr5V=sJw%#PpfTYzI$r%zcN0vn(-?_i_|>=!LQ3O?sYUvpUOZoz
z+=)g?Y>CK9x@6Bz&eFnEC1H_&z||XmpRn^p=l;Q%9*X~bJR+D7%L_jR^vTf|lNoCq
zMbZnUy|r#HYiYF;B(qLlqWdO?9r-~QD!;79TM<|uj7Z+gB~klDJ>NBKQw1?5wu)FE
z?}mBzoCD$G0EmMO;Pci81r8g_a*PT!Ag%?)A__>17Y-Om(j)G`jsgiKcHuxc{?zEY
zz2Ce`M38@sp&rl+t<HPy=pz}PNV<FB+B>^}{#Hya6O=u<8ewfJbm6el`JF`pl9Y>a
zAI!)`n7gXFyul3<q^GA&5{glD$l!1fG=6k%B5Cp0#Ge-qyRglbwRZiWD?2sFz3tNq
zz95GSHBs^!`~>>BTM_+l;iW}FPqmEEej#00NrC*B&A#9x9V6%{T3CTlcTwdaD&FwW
zIm)AzjqTccV#9E0LLicJmI;WcF^j=2%h91EIAZvWC#;EsTu2lPZ5UBs4qO2)IboD<
zTDtk^hqVRuoox&UVG^VPU*A(MrQ>a0oW)zfKx!vkIKp;$R$TSj=souh7?Q=vbO$D!
zF^C37A+c5c9E|VZa7vyyv0Tt=)aAZ3HRU1$iMV2g-+40=N;W2yTUiedHHfOHT1;O@
zjW#xe+ZkllPpnwr3yd$Eu9O_?Fdj0^{KBAN4H02+ORDqex7*#XPr7<q-+y>)uBo``
zeDY7x<`9`xft$ZQjbAF>{rp{%x-7~UEQ$)t_u_JfZTWNC`t4<PU~v@L`JYJ0hORb#
zqJ$6LaGEhu`1BQUB;`o_e8X><DL8Qk1%(U=O&4}Z)#z5)r#I>E-`Ld)XVCv`3jTxm
z|6k0q{$Kcl<=^=Nmj5bW(5kuP1n5BTTUXw<tCR~N{gD`QpBw{7l6N~A&+4sQcu>Hk
zZ77roDY>nhPgFnSdIKSmNK8d$%Z+2=MDPFkp5xpL>?=S*MZ4_3W#*<4YSH%5M0%pV
z<ZA-;YSycHu5@jC|6^Q(UxSbFN*ZJoWi+?=(EwF7e)54&05&H%lOe;AqhXIJ_@83k
z=0$n`9|~?@mPUE#=td}TEq>Y{`M~!U5&XES6>~`%2cb}2j4aUjcKLto!J@sTrxdKO
zg&j8h0qa`tYp|H6G}oULiRwTkj<C`Na&;Y%496CuM9+h=%NL{|(s(Y=+n}yq|KxN)
z&vxO9QW!^x5=8x8Pru%e?>DAC`*<Nxw|WRpxFZ(n*u@nZPhG4}ROk<rb_0?)O`6=e
za$kvoJW5l6O{|VFbg4#Cg|lTodxb1}sL(HlazRR}D&4$Na4t31=qi*}@6atS+Uy?D
zSa=uh!Oo-I^Rfbh%M#10lE&L@ENpIHuo@|kL!*qgsd=Q3(BuR+#C)Z*_-nkV3V#o|
za08{^VM`}Auxl;lO)B6Y*Cw#OG6Rfwoz9m$D0u=kVIxP@{K_P9+uBHG#L3BEs6(G3
zSnU1C#j#XXPU{;Qtm3IB`phX@_gGI6bKTM-#+QOgB*CVhiFS`f_VefZs+A3)Wx%<D
zze~loqXh6~{s5K_64uVBy&J~)9n&EDRa`Nlj6)c<bYlEojAwo)schw4lCGFYfFY_l
zuNJy62pieixJh+cYy&J}t|Ff=v)aO7GP+9gxjAuh?p#ayX~BJA5X#F!2a1(5{W&SY
zs@^;;4|rE<@2A|V>_l0q2pcbm9~Z_NskaG#y>a~#D;sqjYOtm+AZ1e0i!Tugz^62K
z`Z+yTSO7KSm{-j#9XHo$JFkxW$5JYo$y0sDSiKZjc|a#<$P!5nfsxMzTa&ww4oUdm
zpxqX*<S#uTo?X&4h<g0>goZ~>Aab3I1!&UW(oIO8gNcA~t7Z%1;#t;cTkj3)2_hb$
zNJI11;CW%88MCy+wro>oa4A^D^hFhWs1fG~KH*=>v;({(jS{2=#>zbBCKBfz>EW}^
z6r{sJSN_tgI&!7VuCm<f*{twuJD`1qhU}aH&Rp@9h^z1tRC_NQd}W@xGCN0&>Tma|
z*k+^6l-{^dXR6EpN<Rd{2TAQ^c>Zz6fs8Lkf(@Un9<%pLOrdM`{ZfxP&^Q|6Yzj-$
zE`uyJcC{3_SzhzWS9Pt;GB!28vFL!O^;%QaJmzG+5oA^elZgS2-E%u7wT(Iy5&Q5J
zpevK)c)nc^%_rgz-99#5dd}${c)CZ2`tDg-MOA`;2j^W`HO%6rG(dX&f+XT1<VP;!
z-2tH;vYNbE_-t4i%><(RdH?=#SLobRA;+2kplwV3dP!as<LKFBFQAMg{!KoFoYcMV
zi)kx;d264>uy3$I9vJu2VL{SjJ%;Ne3)BcMJ@aCMJ8K1>q4)vsMb;_N++`I2jy`Im
zM!rAf&tCoO>w0DpSJDIgi8y$C82?!Y10}rQkjj%P6hbNEiyqZVp<@Y$R|f$ZPaM92
z4EJLic9?DD_N|H~iZNc?w;VsK8K=~@{(-~OqPGE2k56_p)bbKs9G}3Z;2O;=K5kwX
zoOzyM=+tGUuacGtg1ww*b*fM^Ro}gQ>&qA+tIjQ;?KGhp_DZ7!snj?NyKNe4oF+;)
zR4JlLt*oX@4b^8^&@+Ts?lW<-Ds_HXorW+>xm)h(m<c-)8=ZWE%Vlh$coyX8Cj>l1
zPf=xa%^XauB$)vw5d5mqkuXl>&_lqrwjkM_maVO7^3ta`t8N%kFk3L>9!&XyaKxCC
zIYxlw1ZW)-j#L9WB<9F)O1^x_u2OUe#QYU+r&nhHRrXbgP1lF6hWEy_XBWIphM=WP
z?)l7*vTL=P1Jr~`p=<QXan=wsb^<BoEE7N@!UNH4dM%Xl)<(MEFkBd|?F1PSwHb5Z
zII}qb>Ys4{d=NKF)*e+b`%ZG^dQq$-(e5)ugaf$w<FZk)6;!DvP5?Efa_S=DqHNcr
znnV)#<)98zf?7Gpu;tsUG`B+4GkosWn<ugI%o2AF9+~RAa{VTtSv)b={PR>0V<?HL
zPFba5?2Qfg-WP|5uJvgR8+Y_G`{p0B3Jm>Q@2lnO(istFwwJn%Li&nJU7I`9@NXC{
zpu3wO(iAc7aijEGL)|u2HPqG;B9L(r9<I1GvakBr6+%F0CtEP~g>mYi;F!nV9yw|Q
z3B(WFkn%OxKsNIfoC1;nOQGESvj=b`eKtl6lG{Z7F2PHCqMuxIyC2yyd5!_Xjhrqc
z@<`u)bB0=dxdcqMcY`}sg5R-r^u}Kd7bp7TB3&8Ba>>{4Ard9dEtX=jrS&N1)UDG7
za5VsVf_56wa67TYiaA)vMh{AHA=wl7FS{~9HU@dGHEbu?U%bmq5=V0VO6ui1yFI36
zMq9UwjQmwZ>q3R!c2D7?=xJP8n!7>0xJg{WFEA4Q_Vu_aGQ%V><0<BHZ#MG2_L~Zj
z_wM%PJj>_-bLMKevpo{y!g#-jrt`x{Ap6zs=~cKeb*Flwn?Ls5^Aw;Cv!KsjF<Pt8
zTbjeG_%x~#K@{!j^|O&T29qCZHS67ctY59b2qD1lc9oQuM8dTJ7aa$SUqwJ_RSX!x
zs5?%{nW6yMbwp`HDdB<FK)XSF`%jHc9c75#0qyS_B_ff9XN`;%P8uGkeNuMfHj3Ve
zH_Q&>wINook220{l44*PY@3sxuU-#g#xwE-d3`xKu(;Vb-xru6?>s;FhiYkXR^Y5u
zJx>C=JG<?E1)=h>*NL-qi;4k^vWm<U@zNQ$>Ofm+4a~qbOQ!Z8R1)95(kpdFFY^iM
zEnUxmreTOE4{H<bm-w;-R=K6a5^GZ_OAD~`;$e6xHp8SsJx1IjZa7{QQNtuyh3F9P
zD%v>Nlst$x+4}WinhW~e<vwbl8}y?xhoJM56Os#-$6KfX{K{A81w_+7o?hr+*EHBb
z8=Bn7<CO0#4ub8h{w$o1+RO>{(b~=Ad*bH~qu{QjJOO@pd9YN%sA`A{nDyPKnB*#d
zjrNVaPFNYsE==Zs`do?If;xpW+{K-^?fLv9_rTZJ*bGjS#<m137M4i{g19vxUM$a+
z#a`-f9-CI&GStBCchoj7fP}}EZ1*>i+1M=S%uLVq8xlTirQ8Fcnn`~{fe#aTd_wG)
zdAmv=BMHdt2bKu5i6&qLu3wGnAKdXLwPUROOZ5GZnEQ|DV`5?bzY1uUe`keR{;RBT
zs|LXChy&$+{QnctXxbzcQt)74t_zxlXc>8Xo9p2c%s?aNNH^O_;z>#KzCwPlY6+<l
z6Y`5rnnweIqD!aCmC7PNQe;z-A^y+qtvMnm_D|QbXaC4=P20%}Cyc|&6RX!-rcuag
zK&EG8VoEYg+@upX>}B|$M}7maxf7KLp6G)SCtld92A$9wcs^hEOl?peX8BABOB7O*
zKOC@qV3X;be>}^nc&3*^%y<~biG24BA2i&my&shoZ=&JxxME_&@3R`}zXuCsNKUbh
z?-Nd;`4Eppl#r7ZBzWA=b=E%R5>I&IEzn?*d-!`f^8b4OL7XT14UfI9HV+%oTe(PA
z4n0Oflr_P_u2&y4?lhN7QNd*^EI!LA+Z^#iemkA!GCC`kD0YLhT2*B&2`t7KXY|cr
z&N%Cw2T^q~rB+)RD`sA(EMW|D9wM_O1KGM^-!A&(V$_7IU?RL??s_CTgEH0BGcNh<
z8<6fu^+BP!c$3Yk!e%7-yW;hjAS!1J8>85LiB)tpZO645mZuKp*LJI}vYLC_Ee~U;
zyVyekE0)tSxI&r7KmI#oS(CX~C#Bt#>?W`7Uo~|pz>17fW&yA7K=g{*ZhVczl!iXb
z{2YBR?!HMFq%Z;kVIH5PvX`_N9WhxgJjHHn-6hEbO|hj<!Y4DOKKRM4*ZPd66tE_C
zg}pwx3J=6F^H`9S@6GMi&Q+?%oWM?syXni!XIXA+V!KG{POlZ&7>ZzVpIUWS)k>A}
zRbwXyFj~0KiZbj%TjseoWDdG+Cr&dD+VArm50yQ;tEimS?C&-!`Lb7@3Siub3{pW=
zo4RS&Pnsowk@%&ykrMnY;wHN3vfSVi(aY9j@MV<KvfLJmQd9`!<KI$t!myAtKZfuf
zOWv*+QVLD|y5zMZ&R`hF&w<u@B$iP;93b6YY9(~-Py^s!5w4Ok)9ohx!9zT|=>-Mv
z8&G%=g=;-vNrGdaS?(%?Em(k>p9ql-pX3xL@jBFUe7;c1`67x>X05~DVdu!?fuS=k
zNJDBdV8{><?j#-*UrHv!U)@f9P-Kt=7`UDEzY7$pyaaF$L0iQ3eJo6+j$B5v?vlGf
z$)GdfjU@KDJ4Uc)OXf+LQ)e^4KDN{2I0vwVbH_QOK_uK)1%!djC;qrWYVZsIv2|i*
z_Y!G?)3m@d#f+&e87jUTYNxEmA4x^>$v=nO)Dahky}?Z%2^guEXh{5Wk+!=EtC@ya
zv3o*8=n|(|H5>^$bA8&wKmpiH#1j2dWkFx7$Q#3krCLrulo|XZaG=;wQn6OjLyGyL
z+u4+jF^@&%B+s8Us-vs`x!WR;=l6aQRP>euuwtCLzJLUBt)PgvnCXZGqJ;?--LVi-
z1Iz5pf!(lVLZYUIhNXrsD>DV({ijKk$@TLUE1>JLETu4{67FiNBiV~5`UNMBKLuQ|
zqb}Ap;`*{|c|YL9-u)9I4kU7J-tWVP_nayFQcqyZ6R-H?WUnqL6i?t)V}5!}aW&Ot
zp@j!q3(5Djw61y<Rc%~eH+^oTDtTmu&fxN*VQ*&7AYU@pQ;fMB@g|g?1O@w{4=Yiz
zdU~F%&eF3qQ{=TJ!Pix{UkIkseFUoqM&X#;7Q%bT1ZwbEK1AF5N>_c2A@RnI_^`l@
zhzYM3+r!isXX7AWPFy<kETsHHih*U|4lrlLM}v2Kw0WpWPgJ;M-;CKCB1TG5aK+|u
zwUuo#oR^r9dEd10D~Nc(!FYpEbF5URM;a<+0dXN8E4#e2r9FDs8a!Ab#9`=lo6U>j
z4SV84q5dwx8zPI6$A!<2%mMY|b=3wTc)%YTt+zPjgyEF*Jt83R&g08et~@%uAMM@y
z&ai?p)_*)MS!weA@378C$@2?Mv}Qpr5)|$+M3j-so~VDs9fd@@HvY&2YJIeR<YVS6
z_uO~X*J}4$!+e8;0(<L0lr70IoC!V)Qfhx+u14yYH&ODBnHv^%Fs!Q|R%XD~DJspu
z?Tu4OdY_7vMXcVYlMk{G`_%60_^Et%e<1d5Qi6_-pC7YR1U^@hp{L#amoA!_0RH7T
zVtPX^YekwGsnND-r*HzJ8A)4cWuZFA;}Z|?uDB!K*A;37nr2QCV!7A54E7kutD6@b
zfOrV>Bz%X^U(^GH`t}G0NR-n&jw^0DsWE*+1``2iqfB{Cm^rHkf(RcZX9BJ+S@SO=
zbOIAV0x@ckd9YW2i^q{|zY?#}5vPG~R0;3?97-c0G^O7D7zl&3SF8lv0<4Ck%E=wK
z{c?~?!T2oct$)C0IBAy$xf$pYODlfbkU?1T#bgXo&%Ty6m@}h=yYilH&`hI6eszi_
z71j2>&huM=&uuxqqpE92wr+<;u9D1--lAToNAWk&En<4{+Z`yQ42KP_Flc_qDC*|E
z$IBr)@38`z|1M2R))=`Z-!-!OU}xlPoD@`o&lkhD08o18#OFPvJAIGwPQ?MMK+6!v
zM`2r?`e$twmp7<!;|>y&oUt)ze|FLjEaf;@WyWwzj6=E*0=-(pZ%i;Z$Ekh6xkebl
zI`}+#^S>eee}OBTO4a^t@c*|)g^`nm;eP}EEdMT2Vg0X)R8}?rDN>n0{!dG`_CN|p
zbmx8<`_-XHq!A}|nm!38EJ-+#5mEtgg4Xx&kJJz24)egiP~sX@wv-Z;Hk;YPa{6+4
zH{@QVG`8bI`A_dgjLsv=2cOXgWu-qY+p!T>)_&cE(ev^=FrAD#@e>L$FnM5#Nf$Qf
zA3vUNNT@(xWOO1J((4R5aXB_gjAW;{YX0xvs~{d0YMD?KXI>^BJWhDHcaAc*ZB)a(
zH1`%0yv?(#zh2+wC0jL;`$sqF<Q$g^&9+0=MZUMVQ<<_dSjP+!#qjFnOU{%DCq>>n
zZU#GNnq_FKNaiP8es`{*=WyfG{nKElU+#Ya750rfcEjDzcN3-2-#P`0l5DCo`qZIf
zvN%=kgkrvhUBU>k^LDu%V=7WSmpq&PUIq8CO(dhLuHZ}m!$PtQSbUC0oO8)d0n?L4
z-^7?Cqf2@Qj~7HotEpK{WR_CB9-nbm0Uoz(tgUaAZyEjyh+5adT}7Ne`N}7#{6$4r
z0i~;EzfnyLO!ZNisN#l!KdusurlWMDZOb?i(xpV8vT%>DA*QP?X0Z$Mm182AI+6;K
zPd`Z}*97yEfF)!o`=%g{00b3W06}UXh-DyjUV~czhbYoqsy5M>NXys~x^?W36{#gT
zDO<W4vCOm{76`=C2oWpjpOuozl;8=@Kzg&U8l2j^#yIzF2Ri7_$)0V~)Nl$FQ2NSI
zz9r{?2wO~syE4AUu?zM!sOZ>AJ(e&)2TD-&*dyj!EhJ(Zq1e1%e`o}EaoiQ?kf*{b
zfodjCQ%y9P2jrQptC`qI)J^lJPZ><8Gi<;@fE^pB1;Tw<raR5&HzW#*C=<Dy(gFrz
zjqNiQdgAo2U-eqQNKO5^6;`n$7v7n_QiIISgw3T380T*^x+48EXOBkNV_8l`<@&U6
zncoH{+dV{bK#-_eA;60wAomONhWLK!^f{u(x1AN6luNym6?rY%1Y8E3uV-9$Kn=hQ
ztId-vQ<&E+I_0a<H!*_H0$|`;@~YpgzP(IxK4A=$5pXAJq~w(5tTd`k^TD)yW}bLd
z9obso*fpl5e33ZGDLstJU>K-Gjzi`2euL++P7>UY0N46_g>w~EO7~72`|IChPcn->
zs?Nsbu^X&OxS-w-o5IQo4!aq8J)L+d3<psDg34K48Wrde?`<Gmjz-iysIxfo{<Gfb
zklP)PAATaURNy_LxR~yqPo@P4F{(H<@o~HSa`Jq-oDcE)PI)iB$T;chj9tBb9k-0j
z$a8n=*o_*-Lm0s~7C!ijjqclNofM>=cTMFtX5Ncu=V+kT%oK@s1w_9%!-E49ga<G+
zf>U0dScaTNVUdFb2wV@^<emg5BpN}0bcql6)LMwC($Ah&;%T(~iB0WN@z+Bh3%gRj
z@i|%+yPy1^r5>L1OLvJ`vz+riKdSK08rIyCZd;D+)8X6bUSg3;raha&A^np}`=lHi
zxrLWsr2v`+G~|4esb@=)%^~f*cP*gA&Z5mxDW!ZUU07Ui#wFMf4$dBPMs&dvxE_sz
zoEDOn0K;!lai4z)G6(@Lo@=US7aC8gs~qt2@&44rOwCY%CL8^FYPRU&Q)FC|+s;;{
zbvCWkzAmdBSD!&BHTc9b3w&7i|MB(~P<1TJ{%~-2cL^F~<L>V6?iPFl!QC~uLvSa-
z65L$_!3hM15Hz^v+mMrUa^<~s&->Q@E|@*tGcDECzpm=(s+pGe?1#V!a~Oa++ic1A
zpEDkR@k$r+oer^kFYU+~sJHA1Jzaf#q@df@ub5!jN7b^?IbfaqPLh-MA|7nu-HfKK
zUl1jKK4adEa<0H0dTS$nc;s*^2?b_Ozd8^X`Gy3Zp~~FznU74ywNjX&`*axNK?7L)
zE6*rfN0u0)WTd-+HS6gCwJ(cxJB)=sc#G{-cocJRh;dw5WspFO6RgAv#Y>7PPOeC5
zIu;V3nZQ@x7K$pi!_oP{z}KMyFWX=taCn?jtv#PxvjB`<1YHvyfw4HBruU9eB5pIG
z`;vOTu^<*2f6=!*XoXc0;pWFWlKCx|3hcdjEM|jZ3Toj_gNPutc~v6Xe0gt!jQ=f?
zv`j7C%y&75qbLcKQQo{S)XcX2c`UjLM&yA8ZZC^<-$CB7^-`nQRXNhz*k*`AjP7@;
z_Z3@WvUD3%4XI0+WWOFCD^KN;f?`y<h8tuiaF}yPi5~erj1QDZh@_vfAzXvp2vca4
zrQ<KTZFd<f8iu6zXWJW_UVY%{n*^?s>c(qiU|_kE&%Sim`OzO40=Du3uPS!~J0#lE
z?aJHHV3@3V9et2kAsGE*+m|;mg(GC~t<~)_CcG4Wqfp<je(-$t&(<M|l3()*D`aiE
z<CF5i{T9qO#689mnRM<migp+;e6_bVEqw?FM*RSG8SFl*+cbb+2RNr1Hip$mB~d}P
zh_Us-z3w95hN1Z4y&~(4+;Km^OvzcX7NRWG#21MJONt@9A&`hcQ_j5>&4=@`P3S#k
zdPJjtC4AtD5LDvrB@wpDN8pKF<q>ztPAR;B=GoV0yLoSf5lkSjd#<@}J!6}eG$(?3
zbaI$A!{wa!+?ERShB_h)SHu~X3(vP+o4;>X$0fF=UJmo4I|!w%y6(jHVkz?L#Wwur
zfrlSxFC&^kitli4UTpngkHz9h^4m0D&hh81BqR)CmO;T}yR&v6rI3#W&T-ld!kuL@
z&OOk~EYOMktW`fOt$Kqvlk{}H!oDzPyS8!9fcYwaS;Y&c@<(x0ha$r}qrFZZ|DMs_
zLLTfv1qU?vPkLrAC{L<~Ih7i5oFXspzwrT1>@(SJoC-)RKW?+dejXrtZ%XuDR^{~m
z*}k9|B;XCprl=CB+PrR)qSBmctCKK|oalE`bX!|tGNv&wgj2WJ^dp|x`G+B#;wU?=
z#Je=CiFdvqzUmos&WO{oVC@It6*j%gS`BC*MwC%C(n2~8co*8{(fr{<k-r1iqzV5R
znVFA5^}&$}uuezS#qS+fMo57w#h9I6%uPr?<>0LAMu;ItpaNcs>)bVds->CKT*gl9
z6ua*nhQaBKR2_jz9@#;&{jl)FA?u<UUR#Y5QW;4-!;fdF0wLR(*;aO>oaucbuV>-(
zFE}O@%5O5Gm&9>Pzk2jDSj$^@Ko6x@QmMr$=ogR;w#Y=Wt2a2kDbMugzjl_^KCQu^
zBp~Km*viy`t2WFMB1_IjU%Wl*BkS>g(U0-QL{Vv?shRXLs$sDgl28_pJ{Zim%Q3BD
zrYR@(0a@?|IHAc@;lE7Vo~C0@>oly~e;Vi5|JBos{Xg<FE7D#{_$2kXPBTsLJygG7
zO219<W2gNQQzvrlLRcuNS<B~Ha#@K~j)$=8U4Cu#=4K=eTU2KL`oi+oEItpG>tS2Q
zG<m<#i7{h~y0C@0bfpgS?Sbu1gGvio&zBA9_usvwP&8W7AEe%WG|t<pnK8D&iaVVF
zy{x_x)%2}DK8#aiDLonRX{=V~(<ejUxG^w=!d!UH&Gv)38EXrl`nx#b#UTyQQ!`i~
zj?l2fq5_9lFl)-Q&a#8jBhl<^s>nPxW<u|DK@q=*L3yXepjSVRVOfZuD<!0MY>T`$
zq$Vb6e)6J7x5>PuZB)BWk?uX+FhtKpal%r_!wl8Xf==xo4d>TfckSYHgOq({`T1fl
z!UXS@(J8&!b*&O{gPMFbi+UW!kb?bA$we2k#b|dvOeb5ytK+q?UiM60<<B>o)ZgTs
z58h1J5ul`yuf}`2fB2O99xbK`))p;IF-}}NE)M%l#H&tbx(!P4H2?6k-n)7W-KNX|
zzSwNi+61Z!It?6pSiZ~&!Kw##U7qmz3U6D60GvvjSQp9=w7gHo(k$;2rI(Y?h2^JN
zo9z(c&_ej^og8I&2w}VKJKfHLyuRtxoD)vggy3k&XRM_~5@CGS+Q-CB7tVg~jCxWO
zG=DAX6?eYv&Kl9ulP$n-xiQ$h`Ho0G&bBj%v39oPR(klWb#7YbQFa@k{3y4oX7$+0
zpCvOaufqSHs>&vvP6(pdgOL+D8}bY+L-WJYfQAyfo}wI|OOq&!Lv==vAmXR3W_{x+
z@fOyH+D{>qUp5gA&tdo?rshwZ6Ocp|J)mI^6R|l2^re!~KLFtEGjT`)8dhjX4D^XZ
zmAogX`yeJg7)JCgLgipBecbsu)xJ>5>k}sMEK_K^S!DVst0jC~!QZCo364Q`kRI@q
zgC3>I&sms?j?7es<jS0_C2>qjV-*hRF|FP76u>T7aSem<o%cLM10?LwTBSFR9plk3
z8Uw!g8hJRs-Y-Z#Ok3Ak3(;$|<0$(qX9VtQgM&v6Dr|VEj>-^6zTI5AnKAKuG%*<N
zdUeYs{er!$wmL$-e~zt<$tsxw1{2gu#fXb4M6pyenNsu7*l2ehxmT88CijXzm0j-(
z4U1I*y@f75y4Pi0=Z+t*d@dg*3p7tyt#W;{47a=B{2?!SXYhc4XfX%L!u^jFR>+2X
z9~T(o_TQlBuUf-%1aK!0#m{q&X`eUb36X|p0)WOeinH$0-@_0*G1>=$uxTR~!YdpO
z9qfCl^?SPsOsV`SgYetGF=3qGb~sFA1d}Vd@`h~EV8&ZrdoF6Zl&=}2Xz&on9yuqO
z5+LhusyJcUR1CUC%GsC|WxSy}<}5$wzg-x=1j+-BspKc1p<Z&IkvJdtJ4`*_^GGaW
zdCQ&zb|6Ud@t$qEM1<5ux&}9MuTZV*z380h>xTAv^Q64*UmIrCZOA^cO`6A48tJI3
z=5c!5G{k4M*~a40RJJn>HZ&dS;bKY(vX#=kt}v4f-DQCVOQgZyxz8H5MY!duC*4Vc
z5Rh0!-^WO#*iCSBST1+0n>+ou(Wsy$oxxsIJG(Zl!A8h==tygLf%p~8wi%{@iVX8G
z<sRclK&w|{dazZ5&gn)CRM_UyPD8mG4cpp)M$Hn^(UIxaZEMVc{A8vu{o?y5uL>*$
z>sZJxF(DQ)@P0<&s1HYggr*G)$t#WQvedJ(Wx5o(*M2qc>~v+->Pz0pK4Vvq#F%s#
z`f&D<P-}&7_KnnFxoAe70i{u^`nlsCX+|Mr*$ssx<ak1JO4xJs0fYRU=@Em<y@+r@
z{x?F%Qku1Dq4+8#fK;Ayg6h5IxDNz~qS@PUhm%R+LW0HT*QaPqA^y=&;2kN7FaqIW
z8Miw7F%%E>;3+wrR=yIh_oR+jUd>Rf)3iFa%#o?~j-jlmN~M&gZ0QaG{ClLE@A73K
z;o<`_(1<4B*nC;XrY%DQU?_c`X;Psi+{{a1)Y*}-f1NxACx7$ZvfLWwka~tIDFUAH
zAe+blT=Q~qMR%igeG-FDlUPWTCNqfvPW=px$lyJz5G^MQ(YGd8@G&@DD&_rP_@bq7
z`7E$Z+gGCLLGP!_Iy+~O8qb5(kUXWzfj0Qe0uj(L^Rar_*PG9-^S9w-W=sgX3d`|>
zH3uptR*6*yGs=zhv8O8;%J2%SAZ46r$6#8kCO+AofAFfPLhJr+9uqwr$Zr`}3Zw&z
zPYB>xD#rRc5SgCuh^XSlrdFkf`@LjpC1?ogl5J*8sss6^nBT+iYpEGoXNQd2VIrzy
ziRDyL#@6%RhRm0au?s{rFtO4yo$0SD!YFRrcOiQ%G1!rM!D6OL*ZbN&ri~`PE_J%R
zS`?B#H3NRmM|_{vrkZg)0vo%ln)B_|@*1C&ttgGan(fhZO34kS5WL2r3<!#GGVY2{
zZ`&dzro*sddMWf(hb3f(L?dyE-VSPFXa@YV-3z*q(@9&*;5QZ=&miE^huE*M5AFdg
z7(mXw3-QmV_0Y_=fow?Mwn@MF)XcmLuw`l}wg|;lfKoar^cqM}#tXB<&cWY>aJjU9
z|FYzx!9JJRm*qxynL7@C(oN%zh-)sx(l;J1jP4!!$CXi@f-!h!nsIe^r=7_sNFUdP
zb8+AGhlp(YetF-ni+b<%(J_z8N<=$BJtQ=vf7&`%g?jN*nyb`Q*3BsHrA;<Y^AGAn
z>3i(3dXBodI6ZNnkEOezp2QqWp54AB--?u=nk1#LZR9yMpuh{%R`1l$B!x^q!VJh+
z@xK6Su$^PNAc!$$N<cdu)}Ge|e3dcWg22d*gg~>Rn`>u4`nYPgi|ED|Yw<CLZ}x@M
zP&4iV%mbol<1X|~QoywSDmjulb=}rv?~!C<&C;Mk)&TB8`qih>(sGkT8`6Y}MtV1i
zp+fmEq#0rtF9JzbxLO43rYSQii;AvUq^3{EDzhG)m&lkZ1J6u_`s>YO8J}@KTWDO#
z;m_OVXA4J0;rv!2UZjqhE>~PH!>d*##S1YkVZazTu%x3iZktgnc4Kury;v+xQB|27
zsjIi2$-fd=PPA*}8H39KqyCDTX3m-|C3fRj3$d^9t2HNmkN1go3Qc!-Bole9k4k8e
zwn<CeJQm&xoTCoJ7K+8u7A;<5Z=tBEInIZj+qG&%7a7#Ro=^1ipt*zguvx`>J6&zN
zVYTHqF2uv(qn1o0V*{1a04Sbu|4POm<0`&r_;VrER&Dw3(gJ#2D>-P$5m7PgYn%_E
zDLxUtTtJ>~Zk@JZKx`h%P~Q$hk7~}J{;}wUwqR8+wq238jkc`P&q3E|BV)__!K>7X
ze|nIWfF9$d{|Xn;lyuNn=q8l7T9Z?V_5ep+NSX+T0BZ4I%OJ=7GZGAVVG!nhocEL}
zN$#C{Ql^m=*hnE-*6|{z<%LP)18w>3#kHMZ=}3VAMCIXwJ9`<iqflmM2={U};fjFY
ziMM;@!Nu#Qd)LFo*_OGt)Kwz~bgy(~4)Q)6t+e~NwlsU)#zoYJhlU#7-W+aaYJ&XJ
zH|Lo88Pf3$+pH<nNqI>hPV5_PPi|ihfFy9=n`7i#x`H%w-F!`i@7ozfF6VV5Ul1?8
z-L)P7ghSF!WIlvY*YYgN-HF*pD4f3-K~2xWk&Z*6mKcrqM0p1mqJDNpGg9BUt6>VP
z&g(|1{yaBU;wcR2i$qFQ4^u#ko8ODv$UAUsRDkL8Z42STxGpTk%m|<Hm=vCWS6LQz
z>!f04|I5{>AlMY7*}qP*e>p?5aIyR~$^KVoX!ife8G1}>#Qrk}=JJH5qo%xZ4f*+a
zwQGx2Jh>gK6pov*BO9S?426Q&Q1uTol4UPx<te@_E--jZgHiY1fu_sP15GzV;KNe>
zejApPmEg`DH}6cgHCcQyk*<yFzB|nnYx!JCMxt=sCNK9&4NK#Tn|-R}JAb!whZNS?
zoE2)EBmT~$PS>N#5UYJ<{nOFI-~fcXMQ$xqkrQg-*v4?n`T7#O2k<pRwYjw%EAf(f
zfcEk6Ma^DR!rhBS;pxU*LOc{BT`v1u871r?cVEIK1Y82mYh&z5CUW1jw7xHfim%?i
zw$MIQSh%}8EJ;M*0<CfMT7Ir<)UczAGB~W3q9&M;Re7=8^U6o5syZvAhM)HhA4#0=
zYlIeejwSJf5LPW0)2yx-xUtd5Tt9E0K=^&8Ob5aonTEot!o`_{1i?9Np&(Kue&us@
zFU5;;AS~rqERT+H>zqF0eQA$las8?vi+3y=5+eDjYZo4bA6>vM`j?W>?LD+k!?(E=
z`IS*r5+(TJ^Dz(FDAZ+dR1)q#q7c0aIp6kFsQRSxsw*)~+k_2;NS4!pdMHozCAJsJ
zjKX2K%{OXOGj6tgN~n2mHW(Lpc1b|n2zM41Lu-ZCBuYjrxeoTLW*Y<#O|6pk^XKIY
z=k!8fVo(js@W>srp+<$-K15~gwnIQyqpAYRu@{~Nt1rp=J4iRDF2_TVLpbv7$W%`D
zfz2<@S){iiIXm`}LiHLN4TXzjG%JP3qkc~dUNt7iXRqg1_L|a+q3Bn517=cON(ZNC
z!zY0vPS&u3!p>Fim={YH6n!8Dcn?0<cJ43gm}>Lt#!Y^Rx0PQGILeFwFU|S7-;jtZ
z2!=6PXab|`;_yPnYHGM(f2fO}UJ$uwQhXp_{;PO!@w<>Xl$3tkB3sL-aUik}p)b!1
zx8w&iBcZa@eLs9$Cq%eSEhD955wrDe1QFBs#NZ}h%C>=IVCER`LM9?$Hi-e@mmS0f
ztLdm$7P0<_HzIf753ghmE%QzrJ_va$aPhFViMdxrUfxtEogb2qSz9zuS-K14ExZOf
z=NbtqUgJroo39-RV@}O|C*=t^tfI5KeunZPKj1suk5=vH%fdMxM=K9kK_PH-Vh$--
zKoT1Dwogf|*5$+~6&LmaN8OOEN7zT0Su5o$`+=~KKX|E2un)DOzgZ%R<KnauOx=0x
z2rRa{Om=V=NVDkQQa;F&_HTr|`m`I>N|2s|>oeYxhAlcL+$*B)p;s55So2Aw2(zzy
zBGbX46-6|}=P)a-FMhCdV>%hfjsRCX=~*lou@4p{p91a11W+X?x{2`kMAH#%%dM+d
z0^JGY6@UU_hT_?Fm)6M1GYjM^y<<@<+CJoWrT8x%F5vh|jpTRg$+|C>7ZhgNJU(Cs
z*G<1`3glcQckMN)kRUALiub{bN$VlfA)+60YbOUAa`A?8D?$6NrOP}{RX4r>8PU&J
zo_1lsQVg)1kKeri;_||t7i*xF746j0S~4o+;2mk4$SZdMPi7FbxZrS`blVP7`LPS3
zo>i8Xa3M-<senjjg!wL8EnsF`0xPu0wn4h9d|4#uGee4v)vJV++*)+#H8T$Pw_L3}
z>6GZlZ@sFURTX*=<#IPOUwv%mfC)~L+!uSf$>u!XqEGU5^BH7$RGZ5v-m@>I$eBE-
zC5xZdpGOjhveH-{Z<z%SDbW>5^1BBDKZm@%ffJW7705f5A%q@vkt%SE7!x9x2^jm4
zw=j&1(8>LpG;nh21Xql)EYe(M3;2cU;#wns3a@yn29lj#gu~R_y|TWw7Vq*wE5LcL
zGEp(L<PE`uV2;b6uo@A5p=}-)iIAhO0waechQ%wG8GXiHyo>1{q}KOb1-8nS04ja(
zwC5Myl_NB9qG1hF)Rw~g7IlHmNz^rX`Z+@w;ZE4%sz*-R-PX`hCkyo4@DtDEB8tJs
zY}v?ufIb#j?e|;?ViVqjz9OHkW3d`Dpgg-pWzd9<MNW6B*6ZCNlsKt8?z{;2VTlqe
z$5v^OPtGP=cw&>F^P$A^-Dn?m#D-nc=P(S$zF?@9(W``eI;RM*#wUCNfZ^N*XT?A|
za4ey!Yg~djiBbQ_C`~ARx|f(-;$@gL57Oy{pJftZI~XKiNl_5DobWp-oD%nvr_SdG
zt2NBe+S?)?ybP(q2A8w>ax{7rb4OD%pipK8ywzbxLVZ=WmuG!0ZM&xA+#2@XEF)n?
z`Qh|+E!6&wL9ojzw=-@tglC@&UJT`|UL5ng#OB>{hEnK32M_ECn))DVz;UqtyY+e4
zQpmg>*Nqr*D_#q?B(F>Lmn<v(!q3WaD{0O}KXMxL#RM7zm2YFlJB_`3Zm=cDPZ~Ol
zB)(O>_|-f!7p%()gI>(5PEECIQ$#k7i<D6}*ZbBua@#sxh<`#vHASz8O$7OTY+$5L
z6!HDo#up%yKuo74Scy`rH!?m)4RJqCR&U$zraLy$oB(2@qw&7*dIy8d0xWoP1dIFY
zBD8RVIH!%OT#kw_Ye$BwA^lSSs>lEIWar}k^R-NlfAwVN_|H7qA3r<&^ddf~Vjd5+
z2x{vMgA<E9kIYp6UgD<{AxyKHH3mp4$senRLxOHjYw{|DysShMS}b7n<2lRxEoYjW
zCV_hArh=bLw(~O==I|yJ<L{*q&TQCqOZ6*UF4k2Gu|dmW++s?bd4rde<!RhA2j1rZ
z+yEcAVzvmM`I^PiEa&(lgc^+sfB@yJKTf8)$aBI*FrDSGtO<o<k63}(Ry8ka%++~>
zQ4URq#<tcGvu4pF?S)!BJ06McCdcSS(+=2SQs$Szo#YDO4eiH4sH!9kR;BOtxl>bR
z>oces-R^r|8MN!Pr~jzCF*QTuU<~K9RjBy>P;8erT8?g40j&;1H=2tn1?qwm*Bd8P
zrLTq;(c*yXdf|tJuA;reUDw)ZwT%j7zXd|619mI2nuq!~QBlHbWGfv$*osM;5F2nO
z82Y96e2Kv6NB%<6D2yKIGl7p<J2ae$#*3|aRG#=<!s3!P@y_3H{?v+KUnl+A72;cY
z!n>%MIYDM90^s;CjIBPm$mX0YD>WLE7<x&9y3W?Re^JRBRp?KZD<=|s{e8PhF;V3-
zq%n-;tqd|wzK%o@Fjse(oBjfhGAV|ZnWC!{U(q{^*vsD!>a{VElv-$qId3AyNJLy^
z$fj(q`^ku*z!VR9C6E(_M(}TBMa7eWPqfG#z(Ll}Q#*Eo2L&RDFwl}{btMlV-d}I?
zH%~OZP(ChFiya}73_{3(76y-$-p~FX&>Pe)72EDooe2~`F8G)OWNx@T<+t&|h*S`y
zSk6H%SS9EUmUv$OOkj>}L#V2xZm>@vhKEIrLuAu~EMmVqG?gXMtBOY>QYPmG8ThAU
zW7>S9`UwJtX4Lp>vZAu@gtauVS*Ge!Jad#ipk>m)9j|#W?@b|MYpz&5%s#<5LQ#lt
zR*Kq8bS}Lk_OKp!ld8|^F(zAez!UTgMY<cGW|*#Q*(GmicvL#hQX|S1FrJ)O$W+9K
zOXKPL_mPg6E%us*yi^DGcWOdaM1qG1D$}BFsB&Q;LG{7KIL&P?d<+cIhSEw75U+8=
z3PL?nvfaK8Q_Q+KSf$F-Z7yduD$EQnH+o_OLae)itwfPr6<v3R*+3BV!*RggD7z^K
zE_W?HM<0cO2CW96)BDTEC4@$$Zs<*wJ*O+AMn*~C`+j4Cf^JgY2A01{Z`OtCofJ`x
z8v|t#IhnC5em5|E!}KN?qTy@WVlb6YVZV5^{(2bo3+~vHw7o?Av+y$-d>K#v&&WgE
zgZCfJalisFUkwR);1Udf5&pI|H9QH61=T1`9UTd)pDhtiE%ZiMQq&YT**N<C<MZqg
zBEWf8M03P<#t~p|;ih<1wd9Nr)Qwou2YK~3W#sw8?pPwkUMKT(Hu*Wy0fz)+C}x@?
z;YOdF&%AM&TJmrLE$KfyCuzr(eJupL&|5#3R~@I#>r_T8h(Iob6AHYoS8}Xp=rj<q
zaA>aVht--W92S|}%L6WLTkb_rQPLSXKv(a0RSYOeJ$!ubh*(s%Z=X?qn1<&y?|8c^
z_hSJ~i@X6DhwvgFyq2&khJ(&rx!%Eru!bZ(6c(Hx`wGG*7h3L6$GB&R6L-@yNrO0s
z-COoGN&4mM8RW)Nn*%VAb6>a3xxb5X7(B4Gq+5~PPAFF`q_Vm9vhohOqyuNc0s<dg
zx_=6Qtz1HJEN?-dD>Cq@>$M2;rT#-U<R`DRPio<_I^Lu<_{qzhhikEW*FKbUj^AoJ
zWAU$oHV%~!U<6`^5-phDm1BCM>dnp3q~eJYLu#JrabBqOJ?9#feLqgtPhE@?ts%4)
z>d?Rzg0|c71>x<>gq#NM&AMS8ZusgO4YR53xqRLw`L_#eA9>HM8d_T^EpIpv1=_4f
z!wJ^yA9(V!{1N*%$Zl4%SKS@qbGgn%?gv~(UDiD?iVy6V?#(1n*&A;1d|;G<apbzK
z%+^U4n?o;79VxIk^1dvvl=AR$1w$w#rVB<O@I->;snMo8ogcJ(`H~}OO7dX9IFZ}t
zM<lnP=$&YV@esyYmR7!C{pQE!w`o-APbRkqAD2W-w!r&?BO-g2py8Gol|Fd$#m9x#
zNDLV+bI2I0u?fKiCn)-KkQ?`iFPgo4lgGgMu>mDb%74PQHY-0j5Ju7Z3j?Mj>--X}
z+1O0xn!JV$_Y~Lkvic&UOCLb(CEi2)8s?kfupwJ5?QxBc`&IK(Ee^i@*n}qBV(48{
z(K(ix+mEte0~?k6Fjpzvlrmi06w`ZL+DUsuG(U8D+{5b^^BOQg4lo6TaD9KSMXL7P
zr!M0jO7I8RH5;bkzbMHk<@fZu7bojqp1*&*0tVWdLCwR_9H3-uX%3J#H?uYtad0Qq
zee?<9U}hoZ<Yv)_2dFr>fc9x1WdfygHn(>neY8fYfG(Q@9bBDF&4Hjol$;$*Rn1*=
z0ib;<NC9f*?k=Ew5)Pom%s*3u_ICh?g5se3K+;FIV-<MNB@nSsl>K@h|9?u3xVwv_
z>QhUYpPuV~5%}m6^+e5I1U`Kl`gaOh9y#(z>i<&;pBTpSZy5IUHNStL=fA?SpY%Mg
zi~JLRSpK;OS$@sL{@?S5^>Kdp&-DD+hkqc7^>N1c-{~*bKY8&Nex5!J@_T=={_@8A
zFYxD2Ui?PSpMCfTf7t$ecxL-Icz$}@^mqQS{rB+9_9rj?;?L8I5dT2We-F>>{|3)b
zewx42!~WmHGyA{6^OFO@KhX2v!!!H8!87}xefS5SIsSWi=J+>wetPEooj;Fheu^KE
zHUueH(kBfIBn8M?n*m96;UD3y0{WWJ)9FdMsDR$g`5F7EoSr0@3jCAcP=S9Mub|V<
zBy2yEJb^+5p8e^S9rz~}sKD!!f?)0Xq<DYVuz%9?2RWj~F2=SFmcQuw*(T5oz{S`M
zbcdAlk)OXe=t+(LAy8GAnc<nAPzzAuhJWfFfC?x4Q=j~%)F0!&i{L-?FFZh1nAF19
z76{t)>DLV4xACUJ%n8r@&xJkK^0%sgQloz_$8QAxXH9%kMSrV~CuQ;Xa{TR<KMCBw
zRmYP^{98Gmgx257@hDdQUXH)r@~5Hsx9WI;@gF%vjDhBlGai73l8CZ`3Z0s@ojH&}
z#KG3=X(lUX4m5SPc64!YCI!umL8Ig6%=s|~XeMdx40I8-GIl0qWdX<;{}E>9WCdti
zo4Hs4b>Ue+o?Wa@^Mc2r_4DsB{&=u6F_E%^hTN|-k7p+Mr>l>5K*!JDUswLh{WJ7*
z7oLff6ZGj<4i3(z^RF-msEM4MTu%op*CR_GV~?r0LDJ+g6(|n>nCfSKc91yvy^O~i
zewFo;{-3`fT0k{EQ3T4t1}f_@=i~X$7J=d{pt?Y*{s?hBwiOh9%=>s|`k5X?)l;6I
zcb;nd)zZiEezozjzJLGsvn<fP|1rfM`Tm#tApV0MS;Xx@o6%X@TatqK^Vr3zt|l&z
z&qt3kocS-=_H_3T*gQQy{mKV;1ks-nO>28$d!Y57aWQKP3v<vT6zG{r7bN_d02bCD
zNyiGXv$l5y>i<>zZ@~W(lu~Nin(~r=fKtW5&e;B6Q2E%%{{t$2=jmfV{5qccfP?KH
zPzmbKf57Fhe)@Ok$G-pB|Bp3*dJ@F_Ur73eut(fI_TJ<5U*qE`4d^--2p5lG(D4Ua
z9&<gW{tK;-7=A4M@ya9Jzsdm71OFI*!X;?@{C<AC{)^sUG(N^3!;fR*k9&W%^NAlI
zS|0EJ%J)duuke2nqa1AifYGOE!2gKR-&E@V6{D=&04G-m&|Zz!mR2tC+#Ek+w&oTt
z{~LUN)1!aFS4B-tRb2fK_)3H39@eJ+jNhNFc_Q_H6{?_d^Se;}9lpPZf5PG4i-e!|
zI5;15($g;pnm<AHJ1`%w`~ko}!1b&AM@aq*KZ4-*zduFM<5f_a-$C*iegw<!Kza;6
z=6?d;U!Zyd9|+8kqVYHA{es%B^B*<;LCf!S{0xI?{0G213YPy_sQo5({;z=fDb#)w
zWlyT|cS-r!wSTG7Ck!YU+nN6lN>>E590gj9Vqjt7Ams+Ff^cxN=|6583fk?I4IUs2
zG<{r;0$l_xE*U#YnLonxXY{d($9s=C;Q>DZCv0zN3tGkkO+Q`C?KD6uQ(W)>d21jL
zB=4U9^(g5;1%b3UXeo;ZAPf)zhyug_;s6PNBtQxv4Uh%M0ptM+07ZZj0K`Us8bBSO
z0ni5M0E_`3oevr&z?T3MfQhrQ=}U8$$6@j-{4{_7rT|k1TL;j0BpmGQi~(i<bAY+K
zsjaaczyhQRK>u#$01MEP8o&}@1+emPv@*8`SOZ=HYyoyZRRq8u-~e#2HwQQZ93PkB
zo@#gs{Vd-RM1g}Dz|qzf2pXy8z{l-j0nPv*0BG$F06H3*ngd(_F0UK_t^ikiGjnI4
zse`jQzzy&U;12Krcmh1logHYOy5w=6S5{Jx@CV`LFTL~>|D!X1?&13T7Oo(^{;n-W
z|J?JHg_&DG;IG|X-95Ba=bA5L<M-|IkPCH18X|OHDs}7{#!r<jg_WI*LYYKKjiqqW
zNg+ivU{8~tfuTdAVT$32McK^|PnK8BF0Q;Usp8l0@>KAuzij8#&pKMcvN}5O$?@vg
z@oEnf^l#I2n{8S7a%NA=?gZYqaiWJJIUtKA`+j)6JNrj_|JbS%E4Aa>V>IM@*9g-%
z1ZuZ}*90U@^0qnL8+5PiN7!)Fz`vJGixE4_RQF&RNFrY|=+#@DaA@bt5EJ1g^L-mL
zcc@ImD$h7y%GO>girgIx);=8~DVyTbHfd!eyB2cswu&^FCDZnn>ZadG{c+Om$G`XE
zXbn@`?n}ZubvJL_^@s!BO$RzRsw0_&><sK$O}u7BtoMTacmC77-PA05O7%x;^Us|m
zH|9L;_H?cmhs68)z+??jbT0Zc=~i^OUvh|#<+YY+(vsLPu&07P`Bt#4d`fF*1Lm6c
zJwH|np{!u~WfF;N^r8$yajfc6DdjYr4evRRYr>*1L(xiciZX8*XQ}?Qy$yFmn2vCp
z_(6e&%59nYG?)!EdqjqKg9<>YdfIb1CbGn!kV7T0jCR_>27gNdjy5Gj!9$792D~BY
zEHXn%T*dG^xcdbhK#^usas6m5H-{#JCikjlge>(IJg<}VinlGC(dctpvGiMce2=bg
zP)&4Odj~xGH;SCeOC<nCzsciul*Bj%<KjZa>&vosRlltFHaZ=*gqP0`^}9)pV~)S2
zDzswWssMBcFX{~C6mxy8Z%~La_zcdq)|9tTgz6OvF?=>WdQa0zkmM4H&<5do$DJH>
zJz|O6IAG1^hy$#(y4a)4!0AbdUNcUbWsjaGiN4OhU{oj*VJIygojt2=(uAZ9tUjMn
zrhzId1s1@cBH4(h1jP4<da9u;?5omT;o&sOZC8`hao)RC&fH_X_Q$0l?l%3bO+cVr
z$U)$RM^oIveY1jp^ekO5Sc~iU+3kznht}_Urc6PAsZb+3``0PT{^Jso*cA+=nP7A=
za^~vE$<fEgs)<$29{uUfVuo<zB}gi+645#IvmX<QWGAf;=Tr|TjG^d**tHNd`Gfsx
z<-%aV=bvGa_>a7)<t!IPcYU$g+A|942VGoobXNip)b+%Ai?c!C+-2t@YB8y7p(c%U
zV_yE@8!l7#z&>rj@lf4}<Z<wvNZeZ_nYZ6k9s46JU%vG0>&_MAA!;>Kh(=VLl%)dR
zR3h7p!b~6|tRiW3hM6$t^Z^*Mf-KiHbH}03<bJH-jRr16<rr(2M4P^4C+x2{`DX14
z<1@8FMzW|O=q<`J3wkk?4u!{v^2^$R*4VmO)2c$dcoe!)1`h`<?&*mynp=>ZPefkn
zyI$6crZ@QNtn%C6Pfc1T`(jCkzE*c*7qR1CtiKg^2h(rl=C#x(ww_jW^VHW?Fkgd!
zzL;D^;2ax6QrD-<+0;!Ijg`)Bm3<d<lm-)}oqJysi7^Z*AFUATR^Vfa9*R+I<`eB}
zLAp;R_v}Lyj@p#3Q|>hOOhbB25RdX}y!6b(NM~gYCz&m>rHJyx@U91UGJ`--N8HhY
zQ&PfRUQ7QUtlSlJT#zEuM@|4eN*WI#rCRh>zF;RN|I3;caXh4uS9odiDA!9f5aD2{
z6S+Y+ql<T#r#|F~DE-pGuCE4^3Mxh=$VRQm>|iHt?z2m+^Fo{m8p*Je)wRlBR?3gf
z$cN*-_b^4_W1rkHk`n<c7WYOZvmz54cba{ykq#7Uy>Ns~*-K{tw~y@U>tk7zDp^-b
z<>*3{g61(2Hg2dHnYSZ!{ZSG{6XYeu+u{=HwbFMRZ`+Fg{`<?49(}OhE<Nx|CfGi7
zkuo{Bb}F3cO-?iX`}9dd9vbF8O~jDTJGONVH=o-^m>qJ_KHSXMi_=Xe)MM2IOoCA-
zUXoHN>9aDu??FaxcAtQQr$>g9eV4Ah$r(CUpq&A7GZ^=gz7%PUl0*GKCy$+uit0pR
z`rPEA)aHibwIT#cHp<(6#82RHiIC}9sKgPp&mq!X6y^JvDw{E5_zz5YA)|fC(?+jR
zyQ^z#stygghnf*XZTG=c-C~S`1A@*Rbqy^&#0?~p8_6cKmIBibQ{Lxv?JE4(m@3SE
zKwn!1oCrhtkaftIBI21kN-4NG5`Ptk;7^AL+=la`@5!*{yBT0HnpWtrR?)y|pAf>n
zkLx}R*QtHU%a?+nriF^t@a+Em*H`U7Ncs1Y8l?@AwOZn8;<LX{@LrDYt!upcuHy%O
zVt9QFDPU=A0ADpSy;Tv9yoGI^)T=>>L;c)h;qbn~Ef?jATg#cVT|L$${rIY|lL!pr
zOL3&RdyKx)jGB&4fQ*udvAJ-|wzC_r331%#tC4}Jb|@SQ-X(Ll={}eD3tl?9wW^uD
zG1lrYfT*kslW+E2!g)NF-$8^L<9$(n)<*wOp?ACk4pfK-u!aewysmv|C?#qb&9!?!
z?SR_IjLIy6d$!&ukX(QCBVO2;D~ZX9QH&2_corxNF4DZ~tA2jZV!`5FaE<GGu(J#S
zM^f!XwvRqfibLp5NAEacOyz_tSa^9BvfQ@pwKsBV;-Q|w_M8sOW4QL4C*|>>D)=U}
z3CtXzTbu645H7`4VN%%5P13_NW{stX)_Q|C#+4)km)DoP<Y>1_0X5-Zm(+HDoM<Pz
zWALl)^?ADZK$Z_X;e^uBbVB<>pMnEGbq06En3TwcE1QuorF!L1Esq)!N3+(R2xu~X
zKYN7D-06B=(<PpPFG>PYz$GMXIHmbAS{PA4cA&S=oSKx1?bA&xWcz>s{7vh7`Z>4{
z=$_Z+9dAP?v=|LBj`D6t->>VMM<36}u$YMEbkLR|&_-g+FEI33H-yreitAg~ex@VW
z^`j~goZ@^KuQV+mt-3Y~ny@O#&~3`rATA-7jKraZ^a+{qkP2YCp|5f#Sb464BCJ!9
zhnws{4m3}18w?(f-je7Km4|QEHY^8>vFCL`r7$`6q>3?sYjus;>;eEsOx%5LcMHgZ
zJ9U;ckjqf&I!V#fHrAi}E2Zord01Ki9m1}%9;#mW>g2NK(s2=d+Es5RuyB!(T4HX<
ztE5{n9MEa)B?OcW#yJaKD5_~{&uYk}3}Ly*`qosta=OQ~lh(o+;YZ&=#5J-Z7}0W0
zeAYKuk-_w9?fi7;mWGlj9Bmk&$rt>p=_=D!A=cn6=jQW?%GU2ZaMM$U4*30vH6z8Q
znWDClr)_rcs~7L^8^p78%K+j<a;6nqm0DMu&HN|+W^^(7&lPE&Cj_p4%2#Fr8ZjNu
z&Io_oy6jaS$Vf_6BH4R)mPNfCbzfZ@;be^uWwNfS>-AQ@@fZ-3z|0ogV4Hvumh7fs
zKgy__dBSdA3+uhQt9=`{RrnHT^K7SCh2L6IqMd^gd0+z)trt}$ZR|2~=zhR?@$1%x
zi0Sc&($U8li0_<QJ<QEB$X<>*LHQIo=3eBk8oqMI0xAVHT&LM}_ok798%Z1-1r%?&
z-okqYsGPAja<b`G@W}Alxwi!p4|C$ZhBx0X95HcimNU1ovB_+1f5UcOUksOAkdZM}
z{RMS0!BEF2CM@;XNm)e9M9w~iUJtuudULP#yj+AlnZTA!TGD(lnx0|D3tGN->U(XZ
zr?#Dqc?!3<TDo?%m`<VcH<RorSJON0u`w^43!UuVFm(!tX>N-eh{Z@fQySKr){KX{
z`>xk@>8bJ5?gAdrZv)IWP}2O!Up$w45n$t;6k2e_sQYEk=&RUhOzg5&Fy)EYWhjLk
zVoYXSPv7uu-vZPtDN_tcW`e2pd=t^<-s%LXz)ouxJwpAnckj1fQpY@yl?YNmo1YN~
z9#`%kh=Dc2j01bgG@BeM`4AevH*NkHFWT?^taq*8tyPb7QPLKK`hr@ooUtyGUSg8O
z!wgr?3XYNwAH6KLm?U-J#cRvz_pP9pAfl-vYI?N-BhxR;UM8{8O7DFk@M@@ND=$<2
zJa2oze~O9iTqo{|^Ma074)LU^aw)5XHGgayIO0Db5lmqoLT=Hw=3u;C_vv{Lb{$8H
zng~;XQuv9xz6^>9WBvU2@;rMz;e;L&!9-ue5q5Wd*wHI*XL*+Exq}U>`z`P}XxZxy
z#+tg!7gEj56OJ&u`HD6#2RgMxOn*#r?N9VIt*SJw8u;pClkZRzAi+#$#3=BqEq!gE
zl&M(52#w0iGdru1t#~HW=;w;ZP=tU|#;%*Sd!O;JT<r1LMyqQWa`8$}UBX$-pL~Y_
zB9YV|(LO+Sghqa6jhm4H{1$})JI%avPZ<!Og%K;feGhV$y7d9a@Ad?M<L5W0HpU8Y
zd`wagVr2TvPgwEB0ZVN=zBBN0sw?Ou<=MJ0#_VYK=`md{<K31_$<}xAA!5&W{RYlK
zyZh|~Ta4Wb-s@i2U!AAe_v$yN_c413lMTaC{q5R(tLj9_s$4^Lk{dpHXdF)5Hrd^q
z5tBCYjWN!vRogIqHf_9Si}(97dCF+_nG@Wlq4+`rin~dR+edIBBl11#6@JW*E<2~L
zc;^7D8FOSJ6A28fAjQy(XJZSqUaQMUbUf~#z0>+bbHX*D3LKM^ay=znb(XY+y3Hbl
zE_X(wYWQn*?yA}gi_0onkG=VRjEFOxN68W?I!M36<EWu>tT<{5W+Vr?pl!3JpZVe6
z;h7x&kmzQ<j5MW=dj1Z_z`uxMj<FL#YV~=?kRlf(MzU5g1Z5~LHr3}|z`7%$=d)9$
zps)9xL8RdXV9-?3;V%<4#t*|1iCW_#oD#3*jWJsF3(Hu%2RjcOZZ$j2ZrT=$>(13Z
zGQ8UqQlF2H(GLnQ$mvDpS1j2dwfi354eR?xz7cb>N#ek4>m!73j_g3g4XkAkfEsl_
zT+d#+7vu9`u-#7Fc$j6JSIVoRxeE?}U>jv}!@8XFnVkFqb`uR|aT4a9jVtJgjNbtI
zo?+S~M7^<}hKx}F@fM~94vW#MfNAEpa^8+T#O`T<7&cn%N~x%!rC40*0Z~QZtGAnO
zjUV`RP~N_lwv_1IA@0`Kd%+pj7FhDB+fDX$C7Ug@n|_0rlbUO#Je73<XDQ&t9Cc_&
zfhkSBfh%h|TFz2Qj5NH@^=gonW0>m~<RABIUF{3v>-_!6{iEp9+Y6Jk^S3_CEUzL%
zGzG1=XI^cXPgihLzBCOcaUkR$ZeL13BXZ;#dg&nq^fT2~*R2z4yy9g{ZJQ_cxp!6H
z97-%_Rm`1zg(B@sqLjVo@ruv)xCxnnz<jh^a%X6olOvZnMv8ZrI+W2{OBiK4WpB`(
zN9Up=rlik2IXT(1j@IO1V2#a$4<^W;%?x0>&KtO23124bY~%FoEWDa?zG6vdQJ103
z%D=wn8}thAY^)blgSNPC)&b4ugv`3h^a|o7>wFgVkjwCxhAGrgL6-p3u3dveN$h0o
zO!=as<P>yXllCLzoH|ZcJ`VMSB;xE3Lqho`18Kf|{zZo*ohp1^hJH{h*_#$b%~(wL
zII3nhT)Z3s`k{RHSnMQJ@lT-&<&StK$o1j{#XHvGj*g1D4#8%+d5@%E62L2(s>6H8
zRUXH4)avb|tmu#{cb&}A5!HC13g#m88h0%mR9$=lhzY$mGz3k=BZxWCgr%A|5nJiq
z(w!yhK#rTNcZLa(7%g=?p9D?NnQU;9-Y2E%h9_!#&HT<-^lIlk(YW(l$=j}b;ng7i
z5=!^3`-V1JH?~cW4UviL0EFT2y7g)r*+5s6jk9+rG|GE&eiSm5^yAepyaydQ@QX1K
zVWy2Wi}jUY!59k!;m^1_i}aOXs(XT%8q)9@CPOl7fg0SdbHZ^w<}p}zm924EN@XsK
zT5`3kYQFly5$#$IQ+eJ=i3P*s{eZPpvCka)Rc{mtMqij-;hJ@`BsoFvFfUsDs0~!<
z5r>9!sXKtVb8c%@3#!kNN-Rp`)-1Ji;TY!JLJta+m{jbjpN>mn9bdak5H;GmM@s1l
z@@?N(bpSvSZ*vysSDCKwZryUYWfQm%SwyZaF&jSQTk*jz&#0G04dy#o*S|aI%?%9A
zw=X{|Q2Zz<@3RcS&ybr>jrh4BhGbet;zd8%I$y)mxOE`ub8K@hq&CD$B7wp;yhyGx
z1um5oWiQy>Dk(hWmWY5-8AMAO^?Jw30pd}EFy|R(M)bXgkxUDT&hOs9r}Hb<HI<i?
zLeAihNz`^6ZJuql!dKlhsYO4ii|Hv2-7mNmytinKF5Fb~^@}<?;gTE}fb<*i;?S^B
z%Z%Ca^GkH0;qy3RcDj>FvLjiH0>>y?i9Vj1e_4cZJ>!Qf6O<)tof8wwI6IvWG;L*Q
zn4VK(?gr4uq}1Nv?TiksC~V{R%%sQPocM}m!VY=$W2b82+q}r!8<goiOT!W{mF<~M
zM;lj4k;PEf?15f~AaFPAh8CDyHn;Ux!*~2{+uN6yQ->2)$p3)e$Q!SR0QxYQ$*zgw
z#H#oX`*-0189E14y(`D%ny_V(=dwsB`b})lI{c4a>ZjXHtTtBPx4-MSX0kiWvv1;e
zC4G>Xy@WLoCM~-!JAioE(Y6(2P=e0O$z&DcW4ZiRfW0eJOlz0yE<}kmNc?i-rQ|rj
z?~iE@m(*+P`>@_DD%)cNta<FYB~yp5HQSmcoZ;;36qA}P9GP4DEkq9$_s;pI7ZF%s
zi)Iv}kZIy4(Z><ytOTgU#O}43Y9E(<;?+=v%vL$1NKP6VU)RP-#Eg9XA`@6uSgg^S
z(>A#<>wefh7YEaY1r|j-LXz!`>j-FkwdN`zVHi_S%?_QjXxM_eriqGeIhN{C0yUJ_
z+LJ}eox*Dv>J(vXsoGHXb};lsWVvi5RtlBcME#&$t(v^OcZL>md?rTx8}<l9h+>&<
z3mF!wlq{^-!^Oc@Nz=h+>-#!Qjm)2uOc94ZMHR+)6n$T*uO5AYXJR&7A1oDR(I~{C
zWJJsLmSr<yUA6X{EF{_?kVRxRX=+wWe{zz>nqSjk<&#DVfCX|Fm^7Jz>BBf|luwYb
zw3L~lFtbZnTV=Avt?wgjs2x$tU&lA`;v1j+Y(05#RZUHstTwPv3tcNqn^1d)aPg#D
zK~kCe=mIFv`b}%Z<XrH`zZsZK+MA|p-P+0Z8IE#<t{N{L4UAilrGUg+Z1Wr~S8CrJ
zI}8x!Nbduw0_zvtBiyXV#Hd1{e3g5X4RD8U^nm5A297S!hktaZYLjT;6<in`#eQQL
zIgzIOG9#nB8TI+yR+4<8HPbGVr?l{U1JOVUTUi-J#fpRdnQTiYhp4wNSVRc1Q}C3o
z`u(V4viAMG!SBEch{U5mN<|;H?9?AiN9FMWzM9_=+a;B=7Qpx4qsZ}8z^AnIOz{$T
zuU5F@AdDW2kmNh0fjpes;s$z&F%SqK7ENzuW#Vhp=n*+GB9$hi%fIW%ySofp2oCuX
z;Z=H%3&!BozH$59wU>t0r4E7T*_!T`@cj8Up{>y@+@Q@oB;s2V_^XfKyeU=v@n}fr
z<b%mtPZc~BZgY3PBC@_+*>ZxqQolGXJ+#|_EU*W<zdx}(rWy_Ayf$*SwY+?@ES$Gw
zf>J^+T!BY;k>p-RE%zfJcu(lqFGfsA!`qTAP+VXUsVQOs4o`b1oV&Ue8iDdnzOmE&
zjBIM<?FsnFeAd@A>1V#rTCYBX5!{9<n+x|A*_V83ggn(t*o9Y3FKaAqm@?1^!u3**
z>@Z6zig~H3ZXo8*Jy)ZR#n*ICy4r=6Hng*eI`je(ZmG@{h=gdcDM$F$?_qV+?yPL5
z!|n$2G&WZ*DjGd3tVDc-gVioDHvVw-m9pTT3WtP7Ny>;43%m+(EWeYjsTxzn;7FR8
zeczQ3qH4fIo3Sel-DuC-?h4}W+#yW$acADyNdbZyUV}DZ&83OrKDY#5Dk<1@*Jrd<
zgkVL-T^D*R)J6k0GR3Kfh!F^~xXd%W+-S=ndKcImq1`|dSc4wFTe7#BoUga8v-cwb
zi+xwnP}fw{8oBToFuAdBrA6e-68QFZ8%mFikmPRQECj#Y0@CKl;x+oP-qPY>bZT4)
zLQvd&Uo^tY>oO6*5xoiFPrg;*xLu1N@HrL>=ErN@VqVy`O}n`|Dy#t5-y<TJsKQU5
ztlMiH&)_iqzzhN&b6>cfqO}sXSfeY@OwkcIQ+&<lzMRBxDLAvymiDlguSxGUWQsu$
z)U><r*!4ZIv_+CDYn^_WTYNB~v$3%6dqu*Hj#C3D(^4m(u{YH7$cI)mr=lZhd~E~E
zg1}?=tmdU<L?%Hv-LgSp>5pf8Vg)CU-ot-b6@GaUJzBl~6Jyi=U`&6qHZg!4F&J1t
zF2dX(7c9_@+W*Gh1lnf%cYD)g^e=l8Gbr{y*qgZjhP~<ES(`Kfn*V=nO^?>G|JBrF
z^H0Vmdux!b=|8tP{bh4{G8#Wwr~Wb@|1?CI+gbm#fdS3kK<2F{!<4Nt(CRPql$EnN
z$V~M&j8sqlioY4DeseVX&y7@^%>QVl^6=18om)JNCG&C!(}608nD1TGS<)G>nX&16
zp@4;jXQrZ*<Ux!fA|VAnBm++ITF5`xBS#pOdXMjAm8&gXLjnIeZ&eAurQP_tcSnne
zm&4J0`)P}xx8M~-?WOOW&cv<2#BD1teYYKYmq|@AR4=8tIsJ*OG*8z4%@4c&#J<tY
z-q!Aw$b=tFZljq!u*GOb_ylsmigaqduj9ev!8?Yb3#_o5*e}PbNtZGMe1#nt4DQBL
zlBToH8q?-Sujx|XYOxElSU!+wZhJ|Z_x4dt_(A-LCrVCB$iPg_YNBSOWuY^D=xsi|
z&o`+>M=AO7CHEfhzz;i@G+dvA%0Xcv0e>(1J-d%?|HWu!_CkJ7OK-dYx1^hF>|w+r
z!2torH=G?3lGm>r1!=98Z@=NReVw_UT{4bBIwI7oWiwgG+oIEGZ?QS|I-RSe42SA9
zSZD7}b<ductfa<9_w6MJ7OV+}C0(HakGSt$5<^9kv!z-g6A5SNMJG=>rb<CK?$t2C
ztBKK4u%*^O<qgm7ZRwTlePM!AlW|PuhVe3-zgNeEaZP&kxs?eEbFLM6F{)|=QZE~M
zgnPuilpM7I6$ct?I7&o%Fz=f1D0ySAtqF1$xjSU;ahEj3=Wv>J0om?mHtU1JHEGj*
ztqai)%k~FZ+F3T=kywJf#XOYIJ)xI5J?=NZsiw%s%L%LAml&i;$R#S??oqx?RZ!TG
zpKBw$`JRo}V#zlCnfWy9*5&fWB@FQhU(RS`rfcpk3upY&;Qh${?n3@T$+p%`R_<wZ
z$!g4T&MDl3_XGR`a(n2H`_E9ozMSA4=!q^5gq=2SfYA!|M>ZdNd@keTXQ$<f?C-yH
zA#s)sn;eln2L@4-Pfj}ZF`k8zbIJ|i^eDk#QPnog%VG6xbsKY~LmX^&n&_5uBMn}W
z>L+v<Dn{jn;HUPmFcuoI7Amt^@~FaQAzl)GJ5}E0AFj?pGCeR0r~N?a^66b7k4Nk5
zEZDB<c?53=P2`kM;UE%2VbO7EHavsI;#rARn&>^Q(?d^CM1uYjR2*#svlL+oV#0UI
zqy;sbci_!UYWOe2pk<CKlEN^jJ`JP<5O0TkB62nmI*7U?V;|Vio|z{+ES)W9vCSXw
zp}nVSGSMen*`J#hb^K6VQrEKVL6`+8n(z>uQdq3EB$@nti{1R3y?y|I)NpZV3d~!I
zjIv66=K7im(`Up7Ih1`_WpQI6WVCp287ORYG5I_ljywLE7mVlyogGfMFDFeNVuLuP
zdMFvh#0JhF$1<z|H;yf=K&zIbsgl~*=&*&x$g6kjyc}%IVU1Sfk$qDB+x)ta%Xzno
z9l~Ur47X@w=)<aw1*zBtny7f~rk^HvZys!ohougQj%n{x*D78?UA5MdZ9Cl4M{{~b
z8wECcFhwQG+tdQF$X~-0Qdv7$sfTYp(}J0$Iz*mt=C#2SO0;r;{XWTu3(YNv;^(CO
zTD5J#OL9u5^AhY~T(k|W1ib^|V@xP-t}s4hD^r3`z2V0kBSk0g%|(8hK<RQfiyQOH
z+XAL<UkT&Bn<VvyEZR6H3M&_PDD+?@g>kjFD7cPdDBKe_cZE3i&pLd$h#Q0rM-?b!
z>+jsx^6(GNl}*N%5yE@JJ5~<SeWC@wuUYO5;;vI;lJ&;>oFn4)SHlSM*zS-8(s`Nh
z36H<oW64>P?waSE)ut)tadKMw>b)R`w^EZ}SsDGpeR0Ag6Wq!bV>Sa=W_Zmq$rMBQ
zh5O-EY*LfRjHp9w#jaP{TTiWyb|a}l6V35Zeu}~_2O`ahFOAcu4DQJ7vc8*s_P5mG
zGcg8WY~>h<aWg4*g2R?|A~n*oqJrBzAF4*3_rHB>a-xQc1BcOo5PQZ(={$A|6PS2O
zs{wWs4vrH<x1^btK2~{C!t^Q$X&@b?aV<u=NYc^h@)arpgBYtr_1(#OQ-7kUNbtt(
z&Za%X8%iZ@VW`Dvi)GTWJ1JVEtg&4<95c*8bq{UslSr}G|6glg9Tw%*wNE3BfV41#
z^bj-507G|ocXvv63P`6QAR#442?Ek7-Q7rov;u;n@EguK@B1C~yubJR<9jYHu7@>i
z?Y;KiYd>7G*K^<Np4yN^{FB+kgEeBDSN`7@w6&Kuyp%dNpQNLk*m4|Ham)`VoFY46
zl6|rBhWRQgze=vkI7b_o7Dq@|D`;|+{0eKrl>^K6T!VVZAI7D1xlfMkX-s3=>_t7E
z;In+j`Vp-Lzpa<dnK&ia*3os7n1rAS=(>=Gq&Ix7GPSNgd{(D48>Z^{$)Th^g+I3O
zL6bc9aQ<RKwi7$^%<FQb=ILS}x_fKu>qfdIGB4go_VQ0p(dF#V$D)(I?yk9(bQIPj
zHofHL5qqkT$}UszNp&On`s$WX4Q+UP1E@ZTL$CmA*$yYvhh}8raKE^`UHGgecbg;k
zv8ZSH#6`u3K{xycOwQ09KArweF5@Vm1>ab+%mq|-usmiEesDb88SYK7x<TBb%`2yt
zRRx?zz)>N4){~Joyn!v^e2TTW@gZ=ljB~x`id|I`O=e4)z7WMZ<|rVExnFW<NY+g^
z>3(iM-8`m46HMFIK9d~lMNUGcVT&8Az})#A{{1=i*M%2(QNrW1-2N{ifszl4J!;Ey
zze)?2Jxm_{zI#}We}%_hvz3@oo916Y61Q4F@TJ&E%AQ!1;P`9x*Xx(+p`Ge;nNDG6
zYqbqL#gIl&g(;q)^iDUa5^?GM?f$nRm|K~y!|Pv=(_9SvO!pwQ_a6F|*-rTwua7v6
z6|B*pLW03f-<oYmMaimk97&@0KE6?ebSc<duXGmKn|^Wo5X`Mx47NqRo~7@3B%f**
zhm|ZAHd<I9EM+|asfc9H-mjqkh~HnKYuo6f8%zy!Y+`s4(5}MHVqmeHU9K#>Ua$J1
zZ^{5jW~ZTl&S-N*sK@-Wl6X-A@I(p|v(Uy8WND|BPm3`wO$bZCST{e9h=si@OC;;E
z(NJ*YCHt<cY;38XV&ancHjQO6+tX8jOyiW%?y*C13Ti1yWxU&>XeD@%#r@KzHyyOf
z@lKFy0@qznA>hJV{#1==j;N_namND6tE)gR#7rPJ@I|Z{^J$3OD;Aa3D2JBtHyY}y
zI*4*#^A_!nK@*-tY(>5vRx_suF68^WWDtfrX6oA#MLl!Tq)`;P;Kt=uWb019mb9fu
zJ6eQCa>pk_%e_M~rAi(d<TAk;DK8ZaLneLfO^Pi@5mZLe>$J`=z((|9au-DNM58}?
zY9`MK23(1H{Rp*)Qa=ugkWo+T01YLtDj%x7R<c%|K@(R#C&>X$&~hO5beO$`m||$1
zwMonQrK;Ma`Gc9*D-I)(uC$FVxYVl&IYLr4%bM1_lGbOMbAymRd`FrSdb`V@O{;EG
z6g;Y-jg4W7k1ACQocvaPERJg|!ts@JnsJKebyd~lS>lf|7gjGTHJlNxno3*iZ#C3i
z^Gxu<(+&p)_=%o9O702qRzS{u`IJ>08A7LxLbZJzQznU=lbzQ)I}^k4(o$zFxpvS&
zvWX2MOfg=~oE_FhJLuw5LZU>K$GAKwVP<V|UneB%+qRfIVn2dzhAf;QfmLrLERwnV
zN6jRMoJ)k?`)TnCP1EJ?{GXl;;u*X@aaEy+d7$+}ko>ra-2SF*ZM`?)T?n>N;vi(e
z7pQ_1KGbjEt|E%2yYP8e22D|54?V#7LrLv2`wo917E5}W&)jIJ<J)yn{)~GP&!WU_
zh_QDBL#8MdfnRXxKE!Lum1-Ggp!ElfB|Xb2nPGC>%J-*G)=Sr}WF>f4%KG@=ZF+hw
zxyy09jC`q<3bQl+DV=Y2q)aV4vszI+$CmuM82__!Hg=x$RPE_|)ZOXr(q}Q;Qb3h6
z(fB5S5sxX;Vn*qlPHwE&1dl_5#UXO#EGe`62v*8j${AmyMpP%9<oB3kgrAMFs*pf>
zvpu+l#D%~gXY|y!-e#<A9zV&XUH?PWancUjvj(a09G&Ke4lnQXJIpoZoi6r9)lc?)
zKXk|76yW*-CGq&NWHc_B{UnR;<5mc2<Rt#P;8js4?wzdj748%XGGSJZAPw$yK(cfO
z>vIHV_8cFx9L=3=;yp;X-TG1qs_GjFbybyhmLt1npYf;bQK_nNsG4#yD9JKoZ;Qy!
zdtUD(4%z@v8#DaqqbAQCs<E+Dsb+U5-IP?>^T6*n&adjvJD0k5*Sg%q4w+V&o!_O+
zWL;INwGX-I>EPfk3?ntXps0s1bmNT=`3pr(SM47APZ(B4vk<0P=q8svstf+0vsuF5
ze(^qY+(cEOkdvO)l3z!e?s&5(F`%Wrrb2&QW7o#1RYLi8S3Zb{$^L0+U?<h}Ot?B}
z)MRfQQ#zNcO3Cx@H65?H&1QVECR<t3%iU%Qk>)ItYNalDGIb?7^FI;3z$8cmdGT)2
z5QaCeC&bqk$r!zC=BF|Da@@{+U``(($_jq>tfvKCu#r!aPu?QBC)}SNU<y1V?u!pB
z#+)D$u+$N%cw-EiR1u-=yV9S>Y~`lur5j$h(wb6d>M|>D=zn$q$wQc8AA_-3RBpEU
z19+4gr!1$~BFt1U_j1%U3-N)k@)y-B*l)#vl9aUwBTerxYsM~N%I=t6s*>R@6Zg=8
zZNsQ`bz()SPbW17f{h5T_+B8cD6ROpeAx>5AvSDT1Rg_8YsM<~irn#j+81iz!u)<~
zchNQKqb7NPbetO*7rIZ>fT&8+hoE4p4?mn$v!ol}V{U5oOeYl^50z168P1mog$x`e
z?ptx4bkr?#R*4TZ2UGJ-C;QX9(q5@-mg{D<xWUns_w`e|?92q<BjIjI^gMj3aDjGU
zL*LL$t`^i7gh9}UvUlG<(mr5%!41^_@q&4~j6tF$>+6`47US_a1<gRjExG=X<c$s0
zaoM{3VtV!kq0#x*FMB-mQsEsw^J9^>kgv8Kk6w;3+BcCP!+IS_v3K1WU*I_EBaLgU
zmCdI;OigE(9UG2~!x>w^!wo&%e_p?~er1ec5k@jHmXMuyjix-4gM5DCWG~7uusr;Y
z;&@2gkj<BjXGcDMc6HHJ)3q)SG*bM!3tmpAsgghcah0-)op&ZDP(WC!J;x~h^ih-K
zKD0D-wbHa~S*ZfdT(KsE<J|di`oyZNm^$a!^v8FkohC|9+M?grB6z*zLXGU*qMKG)
zp0(cn<jI5*DZ^)N_XW_X({W~v;Tbq2r%>~n)#)@k@v_YHHMP<%p`NTI3n-81SQ)xe
z&=L=dDs4vRbLQuXVOXbn$gwA^PF9c)A&q!hnF|U6-J4$=3u{7#=|R@I-nN#^J+{F{
z-(FsVa(hekKXui{IwXnd>U4~aPBJ}49;snTh^j{^>It*)z3qOQdn{}x0Hxh?EVDyz
zUE2={!HdCv_k_e|m<jb+$HK&n#YcAcz1TeT^QEOsSmu%88n?~F?7*UJAyw|sk%sW(
z3&eA;ho7GZ7)jr^E;1fcF)VGpEqp^Nv}t5_Ozvc#O0S7YSv~9G^5lzhlwbq@=U(N|
z4@=#LZ_CG|)~SZe4fuK9XxPsN$#rw?zw3W{;E!j0D998{!c@Vmm6SuBIHc?m<(|~}
zbOlM!W<Z#pQn@4f^~k0ACd#A5(tw_?S`Pz_#2->PRqXfCxrq;J(O?$2ulmRd1KXI>
zT;tl5b|mo*da#)KbSd<=)}%5dEC;fg2+~gTq`McU*3dbbPGs$)$aSU~h^&hw6;_8h
zu7#sU)Ey_+-q$Og%VZ5vMyl+_al)$ubj)mdlb)q6In<qZXOQ3lF$RPv>4+&6VrJN8
z8y#qkt~anQr8!n9vNu0r<dkZ7x>{E^O+P?ULuIIC3#RLVnSmFvErX4P*H4R5kGlnC
zzKAVuvhG3aUu0!wWF#A8%`EHbFHI)vX2nLnO0ZnfRYJpg&$l8RfN9x2{K-4=Q=h^R
zgW!(k1EvQA$`2BWWZ7z^r6t{KAFZBoK23bj*vGI#i6(0DBT?A>tkutbOGaFyw1t<V
zaEf0X*U6~*n(_q|Z9l!fD%-2H^V7$q4i7w)SxZ=4N*>eOo`?kIG8VS`d_PD>oV$Ng
z>CzeAExtw>aI7;nv)T8a%P_S5Np!88v4F)|LBW>N9{BNhYKHh*Y%~yhqu$hUEK_5<
zyig2|XTgfcVUrrh=+O|-DT{)3G&hTG8@3ncGhMY5bw<`6MOLtM^0V=DAE%P`{Fk!x
zD@J}40>y%X7*uE9yw=ua6MO<=QAg(SQ284UqPL*KQoXKeUE(Tng~Zi+zG}!kuDw->
z<h4oa%Cn+ciVq57&lf(4skOtD>v|s*_1(VVmd`HdkY3nXP;p|EjOb=KO!2)Mj|@GV
zScSj(W6!dsufc#bKI!8_9xlQbKHv%JO5Nl2M+1gj`v4VP7~Jh&w^Vk2*-ebypVG$)
zrrg>duyj4g%p5hJRYUD9h~5$qW)>dMJll>?3$wrBcovD#_m=s`O_!MS_R049ZwacN
zBMv3CDMAdE88<EV*zBBWyHc#JT*Z%4XH38*@T$=a`~XVjg7Xm2!ZDI>esyf?mPOo=
zr$<V+*=GaMI?Tdg1CQ6V7(jCCvvISlfbXr}^-Ok=ttD-nt4Vcmw$U8O9-8eF<#3>B
zi~YFb98>CY-!bbmFT0@sf^CkAjqm*A!ky?_L!jXa&g7BB8=AS-C$CINP-D|TZyR4a
zy?Ko_E?!stJXbb#RJrKftJI-5`!jlt+=>S|v3f<=(F`L(z)P4%1%8hT%s9?B7wto;
z*{jJ|j2=1uz0GbJOeH>FpUt+l+JKPI7g&!KLjaV8gLB9EC+c>afsbFfwjT&SKf1g$
zi7RR}71I#=_<g$uVVU;k;}3r9TZ4m8#OrwQqTM4IR9eN?ET|(A!l(FnHzk$qwR_Q5
zJ`i&BH=*B}YTmMwzA)PlZDXr)3+RKb`cH=&S;OC&z<M400FVB`BkSl>AdJgH%6{yl
zE)sGdzo87!a<*G@^MKFuGjna0J%A$ckhD52&|s&=PX*H70C}qyWMVwHA@=UGTl~_i
zzyKH2QH1f7h=a850UKy$(`THmsNxR+)C9Znnz;UKPbKW}{e*lO<08`6NJ*Yzeopl%
z%}}i&74ZvSiG+g>j4Ex3wD>5>fx+<V7k0IxPg$j-=Aa_b1FU|lZXX2{9%ey7nns$|
zqKfLaI$#Bt?9;@hplfX5lE*tYm=}ph@wpo3BcJ9!;hnQwri^wDt$_j<>Ujhhz^qDZ
zs-(uO$6Q%B5d<O9<<;{D*g0tgih*Ks?k2Tw(tX}v$ov3%iw{wE=7Ms+4~8yX&j(r8
zyE=PNwuhSM#2;ZLjP%FKmpr)4ls7<(i9;YoJc=gCB?#MGNAEN8s!<ZM>`u`+7s6JQ
zOAy*?W%0Z(l7g5ybM}P?3%!f{trUU7vzCiFwI=lw%Vo7y^!DHngSp&>wrz`x0hjqh
z7~8jKL2g|Y73E9TP9jLVh{R^n7OjReAHV|sRKd}iU(~l(Oc2foo52SgP5uWiIKZVQ
zKSv8oPd{->OY!hth6;i~R!p|MR3~aDL7(ldn}_Jzh-8SNsfHUWnk7P^#`R%YsToPn
z4YF2djkKp0GmR3IM-4(sd2|&h6t-6>c@7J2c<*ET4IWGCH(n~$LC>*+zIn`zAt<4_
zXq}&V8B63Sl;PNEZ+#ZJw2gLL)oAZ-!e~Jx?w>0<mR-pvZMDoTD`W_@c`i~(GnR)4
zODvXEr!VP2CCDr6c}5_uSXWS7I9^<V-`_mlnwJ1o-|5Qy4pTKpYNx4|Q^ncK#PoA4
zm?k$RrUFL2E7IN}Ia7l04~y@#5$KcI6dqW>A8b(qkHiymQj?yQs*s$Lmoo5XZ4Oru
zMHQ+g)yNnm1DRrgO78<Cl_Y1LvJf^&USMJoyCx}QW*;Z!4ibJT(bvRn)EtRX7@MIS
z#u`g!5+TnvWUne?1A1y;=)t06fIA?0RaNEIp~aWmIOat-<<3-Z*8ArboRFix&OIWX
zdXpIq?mzTSB-fWDTdbJHMUGg<thYmVs>%DrKtXOwO;U9Dgqi7rK_Q%(M-@|HMONvG
zZ)XPAyEf!vPPM@+b)~m_XH^PMW<}{4tw@3;;{$s_DxgbHn6Xe%4syyU{?msPMIVX>
zK2-epz*91K!DD0dDi~)T2e<oPRfoGowhAf6l}!(z^n`hzwUUkc&{+^SQ?xFhW;RLh
zxF!$sWw5C;u{h4?dQ!~%iEPrK&4{lrg;N#-$%o~2*Wp@mWzMM^ELIdM2u2X-XgtVr
zF;}D$kLnHo1f>%!maO@S*<`L-_BYH@nuwb@7P;I!jot&plCB?fIsqzU$6=NR)Ftf^
zSQAg4g?jWA5rBhkPH5L_idv@FiV;3Fyy}C{T!lb0+!TU`Dyh{Uqer>k)Wx}Fxj*(h
zsB(FI5TH&?5p6KH(R~@*>h5Aa?V=rEXziCqr&lq1070ry!aENholDh$Wj2joG!Z93
z;v0Et_JcyVg{xnZ2|q-@-IeM)JWCLpMj2xC0DOBAr2IZ3Hf9Z*w0!@#$-9zd5}{3^
zyL)K8%qBjMGmhVvGQmuhiN)+@f9C#eu(av&W8ROYF8NgnBOO^W-Q*xks6%xMMacWt
z!m{A8Qh&O|>K9?xwXLhMea)F_wxRfAFJRPB!}c3~n5V&|&3&OCge}3$rw=Mycztu#
z0z}57ztS%ww6+J#ULpu=+<w35o<j<)iI>14*eJvxI3WjC-3m7?o*;ZHI}5ajQX14-
z72!LIU-M#GRSwy%b$+}aIzFB1Q}wFWej>j{c>GA^RoPH;+QI=|{lv-FlW&}o7L^Ia
zYhRbxIxA&ZhT<O%H=V6L-t3TFj|z#1StBMLc&KDMRQX^Dm+wtbOF;h1-NR*$fKeb$
zR3iQRd&z2r9~b<NP+M;N`j)B?zwL~_G~}9`Kj$_jXsZ=8-*8uI*n^!RQi&!AFJ9qa
zLmBSxxRQXbX=U8){i&@<4kZql6O5_4E;wXrH(?~DvLzA1jcv2Z7n~$iZvk$RI9{M!
zH&aesR0Xt@qDy_F99@>dDGO60iKM6D8om#en&PXNCv_LEr$3t`$w(#~BF60X`0+U6
zZ)e)4pkQ3+7G(r0B{5GHM1ZLT8kgL6Vo$F=Wn!%%Hn39R3O?l8(vB>iR%pq0uv(7L
z%^owE@N(#Nb|554dL6Ja()o0LF9v?99jd8#f*Wxz^<tzUI&zFm`4$N^v3c8#n@_AT
z{_}lkXU{kefr}(v9IYz#<$=2X8|vro?qjoF$U#qrMs+f?JxvuY^=;GbC%M-joMjJN
zU+O3TJP9`GKgJMiZsWlj&~kZBO$nmJ`f?vTC31Q?bfU12m``P`j0w;C;uZT7oSMY<
ziSzcWEa#4S;s!6B6Q0OB17@%J(}K2SZX7c@Huc}@Wo5TG9_uG~iV!IId7nAsZ7Sub
zw~=hMjQ(IN5kk9~q7IJ?+Irys>0?}Gh&&@I6`r!-R%Ht*7<+VzBmvK$S&+2aQF$@x
zXg%~}4W?BP8Fm%G@0CEtqJ1Xx=<!5t`n`=H#2FY{%<qZfU!k%836%JsP^*6?in-vt
z32=NN9B&WDB|~|^|CA{P|CA|){*)=^<oQpTVlK!(Wr}tF0yuJWgMNZ3{tQx7h65At
z0EuS*h8x}i4gWwGT60*tTEeNkT>p+Qbl`BXbaR744DY~&E`Mfe|AGp7z_EcoKLG;&
zpc?sGuJvy;F#r2pD>oR*^LId?wza!@Uz4Di3=E$W(Kv+2)k6X434xwiu!a~qG87FN
zm(-;yIg4!}xqKC3m*!xuU$bT8f*jjPIz@vbhVhat*$V?-Zc%=W(z?M?;`8j#^>x~;
zuKnzbf{d!8*7gKZY-%Y^(%6aWjC_qx<&f~GuHmimUIky;u)xQpKfD-xQ6J&?L=wNX
z>10BRH49bk{=pH?&y5=hAx7)%$lr}x$L{Uw2R@jBIxoWlc80anw|53GK~rE%I-@Lp
z=Rk>Mwv92K`$OtI86WxXtA7&9WEmbIEZQNGvW!lq-*_6=nE(F8Q{m&=gV|fEFSq<T
zfTzszuCD3Zj{0r+CPm(w>vjX=wr0s}e2*Y7pdg)Fipu#c|H*>2B>sDO3GV8U=L+xf
zoe9;SmcD1$ctD%>T*`r=m{9*I89YJCTpc?v#RgB1vPLz+lcSL8h^O>Bga=VfX0)HY
zLTM!=NIL<=8_x;4qqvbkW@JCQ^CS2&D6JB|o~)zI+GsuW<6i2^=u2{Gqqn4|RE2G1
zC7En_jXC-szg5jHNKX(Vs^=>Yh_xTy=K3Ho7I<@6ZQdInHp)pJ3Q*WD?n5U#mlisf
zdN)zlBox!uF=Sm3rVKm*v}vW3@3NZICJ^q<HjC2T;~n~*Z4HP)Kbsfj?yP)!5S)Xj
z_N=K+N)6HR#VdcEk#MldHjTyrW&yD2W*RUe1jYTbTpJ)n<Ij<eAnn3arDjhQJWVEG
zX{4Rkk_AIf(OIuJ*3&ke!SXvJSDUSj5vx)rHi+OO?jw$SFJRoM4X+l#5|?+6)KMxc
z3VZB%RG`_4#bx*0;6AP)-{sZ(L@S)8f2x1Fm#sB%F?`h`yjfEp$Z~{Lsu>;M*1MKc
zhUAb~oR(uaWYdO~bqrc}^cCbmEVN0cPccuU!F?_<D%`p~QIw!Rmh-@%Y2J-wnfCU+
zn^lMiaGT0OcBz5hZ*f$H#Zlf)6bY~yzVgbcR*3W}bup;;-30*99kJ8@ZSSO+EPc&o
zM+GH&a0Tn#+d_v{F?%*7Sl(lqm1dS?`L_sBH7ab;(q`OP1W$wC27WtStHNXUnQ56b
zmvBZBGOKLG=<D8%@0fTe{3;&Xz@`y}D$G1<=)P!#!M$+~N{exGDv<J2mCM1A$Co@z
zrYn)`kP`RztOhFQfdjB3+#*<Kgj=%CNL0Gt!RznuLf@50X~s2DCAzS@!1)ky=6tem
zOw}lOJwp2W0=;?Z7$x|m7RH7|K{1l{CJ(RK5oaqb&O~!G^vOlk#FC^wVurqk;oJgh
z-@BE<%&Hd;dF?u(*$6A=M^0!zrpD=y)%pC;Gs!t0`Y%5SCN%JGc>Y7<`?+6QvZsqu
zmsfPQ{(W#Y{z%=Y2?~d%r#Cqdps8q!dy$UV->57=>sK$Um$7<T1pAR6SyjJ8i1Q)u
zN$DYt&8nTxRl}u33|s<xe_K)>>o7$~rZ;#p-=6mjsWuX4&S@=eR@2Y7gUm%^hMlV4
z#t3T_)kcTbtWvLz<{NNgD0o@bU_#>~?zb^@ntSf!Ui_rurZnAgm|uL%J@$+YB#Jkz
zF9&({abEh_lI#i?<em0P?~u?FeVW=TtBpZyEPc~rdU<>kajn6>b>%PvrCy`1ubU@V
zprUIZUgKN~eWp9ZAUpoP8A;xvavD{yTL8-#r^b=2US4H@wSvPdr-v*94jR^4kaKW-
zJsTa;jV|gdmxw5xAdE|LjYmm!D6rDfhbPcs>1p5UTE%>?A8M@Vr~lZ|$<#>JNa$H=
zB4vS$R`HpVNK#L=M$ub#__zNTu=Js0R13o*tzs0B>S$lAi|QQF+#BNS5xlRCYHv8m
zy(mO+<Gn&eze~3i;Pl4%QaZm&AlyvV42G)g%pckE;`Ow&&cgH`&f^KxgWT#?3%Zn8
z%Iylqoi|oOSu*@~1!8bo&9}{O<-#<J&=IKHmWuT35g4-4YCZ<f6j#-Kev|S#uRJZV
zu8o%$7gR~z2BBGA#d+l#Gk(BE-8_8asu_%_VvcLpfQ550Lwx(bc~@z5kwcI)C{6B2
z`w$UmA?^6)z*~Q@c^iqE|9cOhP)Dv_$(B1EL2#TedgUs26{$#E=&`JS*Z$$+lhu*w
z8{Qzaej2Z*Pnw}oxc(LRYoAk&iXvfTee0Y%D$C>8PEqpgY4&Fb#xbg_pL(x7y;C^t
zrgC3Goiz`lZ;qy`8xDLfJCR+0oZc=7QfJ>^m3bMvCkYX$xG0e#mT-FyI}OK+nBmK&
z%cf^}*wslSzg~^P+hA`+WbEKVK6UoG5xuy`b#6mp4^{VZ<o8FVit^Kr3nxLlv_V@t
zIl|@@X&(#7TKSx^f_R!>Z0A89N1V0FB=glIz@WZT#F-Nb=M7@nirA_Nhd59xd&FVl
ztWFn=W;}UPPx5R%K8=wCg=MVX12Y`y)I&<S=pjOLj4#4T^>K~(DOMMrpQ&PEh^7w#
z2_ousx#>Hqtxy8_Bq3*Xz4zkR^Nj1W`{s%vZtQJ%5N6&nK;~H=$t_7fl$vp|>{GDT
zTD9N99QpCCu<Q9GnSyye4FcPa=*g{3iL}=(S1};J(rzrD+9$ih2S7pfo7gp__ZL%i
zVVP?UtD;w{M;Pm3u=_*3X%M*wX*gkxwfRKB9guxofl<A#)!1TNOiy;k?jKcB&M`wd
zC6npe{2^1vg;bqE`jlLQ+~(yWRa@ut2uwVU6}-%7dEh9I4BNd&MxO`@@ca8~$#v&m
zF)DS9B+}v2<Xb=z6W0%(Kt9*sG<A68-s@TujD7wRATCU$=YJSSrO0f9C@Srvi%uyn
zeP%c6E7p7Mvd2rk&x(CZ*wl{35W5P%n#8JJ6!MDIjVWzLqI-+9Sz=%Wd1WSv>WeCo
z#OGP??$bnq%l=qsWq~4fSb&9J;M)?F(qtC783?9m(P9O<9zJzc1W=!Lc!z9_e)I86
zTt0P(IJ!cI$&^0P&c#04)LRi;2fWF*`@LUJx*84$yRP?$cw@7&va%~CJ|Y-9vt6M0
ztzZ9e;o4?<$4_aA#>g>fQf*UzaJe(hU_!G|pvy$i+Gb`v*{6-?*|AHlGRafnt0EFX
zvU{lY?wlKiYK188-8#hSRh<$xsH2OQ+jWKj)WV_sf_W_CIlC>NzwZfNB)f{BHQqbw
zHv-_-Ie~$}qGxR;U8drM4ZGz|ScwSPnsD$5c?B9pp!Z(SE3LE)b#Hlhw9zNdokgd0
zWlQmuM%54u9DR0Pw1QS(fJ@ZCNX*ps^R#`L=b?6uk(o91<zE4`zJkxvG66jVK(^8n
z;khr0CyM*yCLh}90I7(nM1?`U%%mT>%ZnM^y!czcV7efn5Ot1>$j2A3C1Mhxh1c-%
zRB&onB+GI8K42#)P~QYDRCtsjGA9i^`dU|0pHMBP9Jxdj)`ZkoYk-Vwp)XocqM}Nx
z>Rl)L43PI}FPMP-Rr@8HZ|S|{mShf|PRU2X+;1zOSe(eMz>x+?`<hZVIs1N)B9Gz>
zXz^I|2*U9Fqqfsw1knIg#A*1j^^4?O_mp+%Y<*59mB_62#~FsQf${=uma_Ze1_l)l
zHW+A`*Iph{FUgpY6eZn^1<9_rcB1M#6T}4ZiWlh4=f6Fkxm@>EsOfPBS-6_d*<QGc
z*j=oyv<bRcFj6Yb1QE9clJ9K1ahfU2qQxnE;WoHmjlit3$TkRU=ET|avuq<8Hrbp&
zszn^pSxs^IH2Ct%NtH?_uRR76_M=q}`$NIUYu~sK^-!u@m&#{)01xM|d@n4|Z(hW9
z73bW-Fr^KeSZr)pC~UrVp9y_)zK9jPH2w65;rl~S!w~e|gXT9)#U8n@JvDrmN{LBc
zs9qlcT@pU9+I>S%lsX%y<vy!O$#M#Ud9QtrL`p^8b>VMs;qt~#tkZmCX8O2EMWV>E
zaBwv-nI`Zg?{=n>_Y$jhi-aMYpF67=VOT!U@8k3Wg$k(%oea?@8*=POW*0_<uu04i
zbfwHs6uyX&j4{^>BExJF?+Z$k-j>XJ<*TJ3yROH(C4Ra<c=2T-VE=rV`lvZx9_v_i
zpzb`|Q^%lBq{^UJJD}?@pRNIKp-R}0KB_-j5yii5Reh(1|Ao__rkz)aT8-9Dy4-`B
zuGrD<Z5+a1aVt+A7=+E~CU&wrTGNECU>Yy^U2p@+S{MY`$zw7=9~~L;`k1w+XVC5T
zzZ5}&-Uv$8&=~^c*cWLsWk*dn{R;|VS9!!v3&xr}qkgY9p)Y*c4@RGy22F_h!g!(`
z5g8)exT_e-1Rhu?^PRNn>f1|NpOxYa)X)OZSgK%oFNmY&`1_xwd)^@Qt^7E>3BL*h
zXQ4E+d=ALVEU$Ea?amuK!p!tmYn}yx>}GS5G55n4{qMc7eJ1|zUffTq9v^j>y3N0+
zca0f4*SGSb5^{1=`0VH0cXHkEa{2`8-fKJD+Ra(|@7la^IsGdX_<gU+2&2KwvdJpR
z82uWu^0%AdT*JZ}m=tBhX3Im`n(1-UYQ2g;sFe2*tN-qgzS3F7kgU9<!vTAxC<Cgf
z;!)xbRrm6NhZPE3y(SCm+zSUs5OS3+bh+VMK4_V)ZE}R2+r|_~K;gV&;aRpI^}}|z
zZGRFf29_C?x004xD%DK7bvR|EnbbxZC)%}?M|N#NaCrA#;I{*S`5FTuu?X}XV5nry
zZu>Jq1#Y5mYoGq{xsM%_SKLacs|!^}7I9zdhM9acs=n)_mQ|-?$|@}nv9mO*ceIT;
zE)(sPzog@j6-TeJdxhusos5zso<B^ihtABst0jhRhttv=<mY-mAuq<jTbsWo>>`;U
zb4PoJu1p^8P^4j<jPO8(zsLyW|3)Emn^?);XJGJSR+-yqMbWZVP<8t}W0jUS`~?A)
zGf||kfeypT;RnJ$a4(<5gG7_)2%~f%4$1+NKKQKab&axKI;#%LVb|)TKl~B{RBN1%
z&Fxm{3?CFXW3^s$oH(mT*`s=(uCn#*<D+nk_J)Wuutk_RB*mQjVxT3Ky1$##{aE?(
zkX^uJUKSmFw9q*`Ir*EkT0BaeE7&SPFdRjh0;snPAiuJ`+4!=V4g6q)?O{DuGX@jF
zy@B2%Sra>^&<mMzhGr;O6|~5_s$QTss}PL}bMn+~Fu0jS8y;Y9URp<{3iJ|n(^5@(
zDZw_MmR%e0h<w()d7tQB;z~G9hAQi99<v*Ywdw1gYF#=A$Gwq^$j7-V5!Wc`h=lEW
z0*uIUJ&$O09kfa|`m+w{PV4pqviruCuTM1?0jz?saJeT^3<a{OLVe{Lj&$N4+&tcg
z^D`l=(s*@9HTepWU-j%+^34(rvdof@ft7Ts&+<!eRr=xxk={jyH)G*gi1As(^J8Xs
z^U-{dF>c?*#QGf07l&GL6o=#JhnXp%am9Fx)4qY(gSwE9_E_JhxiwE!CL9MyX*RCh
zplsRi4Cz8Isk^Y=3dT6iZD2bcs)~2DB|GOA*pr`6<|l)x(0*fFq{<vqbwxIqMOWq5
zFj>rW&#+n%aCsJWU45@ol_onUc0<A@)AyBtK0|65CW5Y+Yue^4i-akag6Xj^vx3p{
z)ua!Xrzy^+)44>@NW=Ad(qU*BL(*a}NG?D4`7j1i-52*d?40{dgBEIWiw+y|^eoxL
ziBc(L(@PkQ*LlG#2dDK-KRijsw%_^%FKumQRO{JQpza9R<1&<!9o8Ga_6zkRzpVR;
zXVO%~Z3l$1?ns4o+98qGbTB$QoL^J;5$fkdd!p4rC{dpzWxJTS{Of7>iR?)ILJ*tt
z(qmi~20hrG_u<07LhItRwqRRn)Er2!23EG2O*4gF;jK<_DgJ&|1&1U23~KlnN$dac
zE$JvK{EKXfi;D;H@3R#FVQ=_J4xEY#U}kA;>m<l{(%jAnu(c3m)P^W>D!PbU+StnY
zx>~CHDruPe+MDxPFbWG{3J9CRS=lXt-li@<D_aNnagiGU&ZZ?uE3T#>MSG{<4fA$%
zafEZl0=yj^oZMjEf{cHdz~J|HVh%>YA1dzlf{Z$fDgbw9X9s&*cL0c;kDUw11!e<S
zxxzWWyqsO_0bJ}*MtGC17FIAdICuP?4Z{BtWVCU2cY$$mczJoTdx6=VU9CB|`1trZ
zI6)jB5D=~bbn|g?H}wWOxzWM<`@<1ioqwA-xv~G@6FZ!2i^EojgNvP$<6j;9i+>DG
zj|I5v*woC~!(EV;_ODi4{?_|X&A>l^w*!U`4}J%ObKYBcm|MCEGD@o`0Hkf4-Q53V
z2nBF)vU7sixfnVA8rXm74?day>^6J_{_<M@t^-qqQ&U>`NWc&9gg~4iZXhQJ$jPe#
z0>ilZU|f890vx|6!50c{CH}{e-+!_Co6_H`oLx2GD<@>_>TG2N@Px;~-Gp(mgTU;Z
ze|GkV*<V@$9CuUsx1s(o2XE@4sQCXMzN6z^K;7xVB%IAX9O1lfvJ!%f9v-$9FfgAP
zrx^&$2eh)Z;sbJV!GCeWFCdQ<7-DY4V`U04h5m2X!NUCCez<tJI{XoG7Umq54wiRa
zy1|!%3+{-8In2u0)zQ=)9`r6Qa2`X`KWNtA5y2=V0RPb47S8-8^hZF8I=KIN<6wIi
zS}+GwCu>1QZ=i*xm8pk=JEM@M(;wOvf6kqQt<ax0f7o&SPh0;mvww)-8wNhf9RJ>q
zLYRR6qwD{!q5pXX!9iMrj9zz7nBRa~e`7cQ*REpv51Wb^e)N48(eO~bi)kha*xg>>
z1ab0$z}$TBZNSON2>*er!MDqQ(fBKTnf@ujng7jA?d@u51!q{~;ljL&tUoUR6as;B
zIa>k#l!16acRY}H7r^N+8H5we2WM3LNe1HKyraGSSq9;P!t)V7$v8Q=c;R#MvkV0O
zO%KEezN13_Nss&Pc>Na{h!=WSF#ab!FcixDn=d?ke82V!;^XColLP-`3m-2O4zv1M
z1_5*ZItQE}Fz;_;gK*vPm;Y?b1HLP{@vH2P()?H1@BTr!d4Bbo6F#TE&OIlT>o;FO
zJn&q~uYEwET))l>ClnrEzvywo*Yejng}3(){_*@a4!AAPueO}LkUKuoU&agh2mkmu
z|G}2;H=p@<_~3-Nzqa?ge^Acf)`OFe_l}$XCtEHq@Er^NPcje>^mqTDT)*`Jx4omt
z|H&3kzX@kH{aFTY?>Acz6nsa5|BEf(Z?VP&;kzRd{z(tS!}AaRar6E<4!G?dYx+;N
zT)f<zzxxNTi1Ujc2nxMp?*G*m{A(W|E->iVallz$|G__=-}gCu?tk0UVDMcXo1glH
zxAzbJ@!gTI{;UTl!2NA(@O}APA3S`&`3L3%|1RU<y5nB|sSj>$DBo}K%nP|I=kSvr
zh!1qfivNp@=eKx<KivQBpS!CmoTJngUXTaCp>FGI34cBV;FXG;;T4DONJ{}6vQAdc
z0QkV+WehlEB>?&YJiNRRQLq?%D#amEJQ8BOqGA#t2~j=?3HT#ZN<vcTziSxYl~izZ
YH+6OY<DUYA6HfPw`RI|PvJ~e31CXV@761SM

literal 0
HcmV?d00001

diff --git a/support/dist-docs-branch-23.06/ovn-ic-sb.5.txt b/support/dist-docs-branch-23.06/ovn-ic-sb.5.txt
new file mode 100644
index 00000000..0403e397
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-ic-sb.5.txt
@@ -0,0 +1,598 @@
+ovn-ic-sb(5)                  Open vSwitch Manual                 ovn-ic-sb(5)
+
+NAME
+       ovn-ic-sb - OVN_IC_Southbound database schema
+
+       This database holds configuration and state for interconnecting differ‐
+       ent  OVN deployments. The content of the database is populated and used
+       by the ovn-ic program in each OVN deployment, and not  supposed  to  be
+       directly used by CMS or end user.
+
+       The OVN Interconnection Southbound database is shared by ovn-ic program
+       in  each  OVN  deployment. It contains interconnection information from
+       all related OVN deployments, and is used as the intermediate store  for
+       each  OVN deployment to exchange the information. The ovn-ic program in
+       each deployment is responsible for syncing the data between this  data‐
+       base and the its own northbound and southbound databases.
+
+   Database Structure
+       The  OVN  Interconnection  Southbound database contains classes of data
+       with different properties, as described in the sections below.
+
+     Availability Zone Specific Information
+
+       These tables contain objects that are availability zone specific.  Each
+       object  is  owned  and  populated by one availability zone, and read by
+       other availability zones.
+
+       The Availability_Zone, Gateway, Encap and Port_Binding tables  are  the
+       availability zone specific tables.
+
+     Global Information
+
+       The  data that does not belong to any specific availability zone but is
+       common for all availability zones.
+
+       The Datapath_Binding table contains the common datapath binding  infor‐
+       mation.
+
+     Common Columns
+
+       Each  of  the  tables in this database contains a special column, named
+       external_ids. This column has the same form and purpose each  place  it
+       appears.
+
+              external_ids: map of string-string pairs
+                     Key-value pairs for use by ovn-ic.
+
+TABLE SUMMARY
+       The  following list summarizes the purpose of each of the tables in the
+       OVN_IC_Southbound database.  Each table is described in more detail  on
+       a later page.
+
+       Table     Purpose
+       IC_SB_Global
+                 IC Southbound configuration
+       Availability_Zone
+                 Availability Zone Information
+       Gateway   Interconnection Gateway Information
+       Encap     Encapsulation Types
+       Datapath_Binding
+                 Transit Switch Datapath Bindings
+       Port_Binding
+                 Transit Port Bindings
+       Route     Route
+       Connection
+                 OVSDB client connections.
+       SSL       SSL configuration.
+
+IC_SB_Global TABLE
+       Interconnection  Southbound configuration. This table must have exactly
+       one row.
+
+   Summary:
+       Common Columns:
+         external_ids                map of string-string pairs
+         options                     map of string-string pairs
+       Connection Options:
+         connections                 set of Connections
+         ssl                         optional SSL
+
+   Details:
+     Common Columns:
+
+       external_ids: map of string-string pairs
+              See External IDs at the beginning of this document.
+
+       options: map of string-string pairs
+
+     Connection Options:
+
+       connections: set of Connections
+              Database clients to  which  the  Open  vSwitch  database  server
+              should  connect or on which it should listen, along with options
+              for how these connections should be configured. See the  Connec�‐
+              tion table for more information.
+
+       ssl: optional SSL
+              Global SSL configuration.
+
+Availability_Zone TABLE
+       Each  row  in  this table represents an Availability Zone. Each OVN de‐
+       ployment is considered an availability zone from OVN control plane per‐
+       spective, with its own  central  components,  such  as  northbound  and
+       southbound databases and ovn-northd daemon.
+
+   Summary:
+       name                          string (must be unique within table)
+
+   Details:
+       name: string (must be unique within table)
+              A name that uniquely identifies the availability zone.
+
+Gateway TABLE
+       Each  row in this table represents a interconnection gateway chassis in
+       an availability zone.
+
+   Summary:
+       name                          string (must be unique within table)
+       availability_zone             Availability_Zone
+       hostname                      string
+       Common Columns:
+         external_ids                map of string-string pairs
+       Encapsulation Configuration:
+         encaps                      set of 1 or more Encaps
+
+   Details:
+       name: string (must be unique within table)
+              The name of the gateway. See name column of the  OVN  Southbound
+              database’s Chassis table.
+
+       availability_zone: Availability_Zone
+              The availability zone that the gateway belongs to.
+
+       hostname: string
+              The hostname of the gateway.
+
+     Common Columns:
+
+       The  overall purpose of these columns is described under Common Columns
+       at the beginning of this document.
+
+       external_ids: map of string-string pairs
+
+     Encapsulation Configuration:
+
+       OVN uses encapsulation to transmit logical  dataplane  packets  between
+       gateways.
+
+       encaps: set of 1 or more Encaps
+              Points  to  supported  encapsulation  configurations to transmit
+              logical dataplane packets to this gateway. Each entry is a Encap
+              record that describes the configuration. See  encaps  column  of
+              the OVN Southbound database’s Chassis table.
+
+Encap TABLE
+       The  encaps column in the Gateway table refers to rows in this table to
+       identify how OVN may transmit logical dataplane packets to  this  gate‐
+       way.
+
+   Summary:
+       type                          string, one of geneve, stt, or vxlan
+       options                       map of string-string pairs
+       ip                            string
+       gateway_name                  string
+
+   Details:
+       type: string, one of geneve, stt, or vxlan
+              The  encapsulation  to  use to transmit packets to this gateway.
+              See type column of the OVN Southbound database’s Encap table.
+
+       options: map of string-string pairs
+              Options for configuring the encapsulation,  which  may  be  type
+              specific.  See  options  column of the OVN Southbound database’s
+              Encap table.
+
+       ip: string
+              The IPv4 address of the encapsulation tunnel endpoint.
+
+       gateway_name: string
+              The name of the gateway that created this encap.
+
+Datapath_Binding TABLE
+       Each row in this table represents a logical datapath for a transit log‐
+       ical switch configured in the OVN Interconnection Northbound database’s
+       Transit_Switch table.
+
+   Summary:
+       transit_switch                string
+       tunnel_key                    integer, in range 1 to  16,777,215  (must
+                                     be unique within table)
+       Common Columns:
+         external_ids                map of string-string pairs
+
+   Details:
+       transit_switch: string
+              The name of the transit logical switch that is configured in the
+              OVN Interconnection Northbound database’s Transit_Switch table.
+
+       tunnel_key: integer, in range 1 to 16,777,215 (must be unique within
+       table)
+              The tunnel key value to which the logical datapath is bound. The
+              key can be generated by any ovn-ic but the same key is shared by
+              all  availability  zones  so  that  the logical datapaths can be
+              peered across them. A tunnel key  for  transit  switch  datapath
+              binding must be globally unique.
+
+              For  more  information  about  the meanings of a tunnel key, see
+              tunnel_key  column  of  the  OVN  Southbound  database’s   Data�‐
+              path_Binding table.
+
+     Common Columns:
+
+       The  overall purpose of these columns is described under Common Columns
+       at the beginning of this document.
+
+       external_ids: map of string-string pairs
+Port_Binding TABLE
+       Each row in this table binds a logical port on the transit switch to  a
+       physical  gateway and a tunnel key. Each port on the transit switch be‐
+       longs to a specific availability zone.
+
+   Summary:
+       Core Features:
+         transit_switch              string
+         logical_port                string (must be unique within table)
+         availability_zone           Availability_Zone
+         encap                       optional weak reference to Encap
+         gateway                     string
+         tunnel_key                  integer, in range 1 to 32,767
+         address                     string
+       Common Columns:
+         external_ids                map of string-string pairs
+
+   Details:
+     Core Features:
+
+       transit_switch: string
+              The name of the transit switch that  the  corresponding  logical
+              port belongs to.
+
+       logical_port: string (must be unique within table)
+              A logical port, taken from name in the OVN_Northbound database’s
+              Logical_Switch_Port  table. The logical port name must be unique
+              across all availability zones.
+
+       availability_zone: Availability_Zone
+              The availability zone that the port belongs to.
+
+       encap: optional weak reference to Encap
+              Points to supported  encapsulation  configurations  to  transmit
+              logical dataplane packets to this gateway. Each entry is a Encap
+              record that describes the configuration.
+
+       gateway: string
+              The name of the gateway that this port is physically located.
+
+       tunnel_key: integer, in range 1 to 32,767
+              A  number  that represents the logical port in the key (e.g. STT
+              key or Geneve TLV) field carried within tunnel protocol packets.
+              The key can be generated by any  ovn-ic  but  the  same  key  is
+              shared  by  all  availability  zones  so that the packets can go
+              through the datapath pipelines of different availability zones.
+
+              The tunnel ID must be unique within the scope of a logical data‐
+              path.
+
+              For more information about tunnel key, see tunnel_key column  of
+              the OVN Southbound database’s Port_Binding table.
+
+       address: string
+              The  Ethernet address and IP addresses used by the corresponding
+              logical router port peering with the transit switch port. It  is
+              a  string  combined with the value of mac column followed by the
+              values in networks column in Logical_Router_Port table.
+
+     Common Columns:
+
+       external_ids: map of string-string pairs
+              See External IDs at the beginning of this document.
+
+Route TABLE
+       Each row in this table represents a route advertised.
+
+   Summary:
+       Core Features:
+         transit_switch              string
+         availability_zone           Availability_Zone
+         route_table                 string
+         ip_prefix                   string
+         nexthop                     string
+         origin                      string, either connected or static
+       Common Columns:
+         external_ids                map of string-string pairs
+
+   Details:
+     Core Features:
+
+       transit_switch: string
+              The name of the transit switch, upon which the route  is  adver‐
+              tised.
+
+       availability_zone: Availability_Zone
+              The availability zone that has advertised the route.
+
+       route_table: string
+              Route  table  within  which  this route was created. Empty value
+              means <main> routing table.
+
+              Routes for directly-connected networks will be learned to <main>
+              routing table and if Logical Routers have more than one  Transit
+              Switch, which interconnects them, directly-connected routes will
+              be  added  via  each  transit switch port and configured as ECMP
+              routes.
+
+              Static routes within route tables will be advertised and learned
+              only if interconnecting transit switch’s  LRPs  will  have  same
+              value in options:route_table as NB route_table or ICSB route_ta�‐
+              ble value respectively.
+
+       ip_prefix: string
+              IP prefix of this route (e.g. 192.168.100.0/24).
+
+       nexthop: string
+              Nexthop IP address for this route.
+
+       origin: string, either connected or static
+              Can  be one of connected or static. Routes to directly-connected
+              subnets - LRP’s CIDRs are inserted to OVN IC  SB  DB  with  con�‐
+              nected  value in origin. Static routes are inserted to OVN IC SB
+              DB with static value. Next when route is learned to  another  AZ
+              NB DB by ovn-ic, route origin is synced to options:origin.
+
+     Common Columns:
+
+       external_ids: map of string-string pairs
+              See External IDs at the beginning of this document.
+
+Connection TABLE
+       Configuration  for  a  database  connection to an Open vSwitch database
+       (OVSDB) client.
+
+       This table  primarily  configures  the  Open  vSwitch  database  server
+       (ovsdb-server).
+
+       The  Open vSwitch database server can initiate and maintain active con‐
+       nections to remote clients. It can also  listen  for  database  connec‐
+       tions.
+
+   Summary:
+       Core Features:
+         target                      string (must be unique within table)
+       Client Failure Detection and Handling:
+         max_backoff                 optional integer, at least 1,000
+         inactivity_probe            optional integer
+       Status:
+         is_connected                boolean
+         status : last_error         optional string
+         status : state              optional  string, one of ACTIVE, BACKOFF,
+                                     CONNECTING, IDLE, or VOID
+         status : sec_since_connect  optional string, containing  an  integer,
+                                     at least 0
+         status : sec_since_disconnect
+                                     optional  string,  containing an integer,
+                                     at least 0
+         status : locks_held         optional string
+         status : locks_waiting      optional string
+         status : locks_lost         optional string
+         status : n_connections      optional string, containing  an  integer,
+                                     at least 2
+         status : bound_port         optional string, containing an integer
+       Common Columns:
+         external_ids                map of string-string pairs
+         other_config                map of string-string pairs
+
+   Details:
+     Core Features:
+
+       target: string (must be unique within table)
+              Connection methods for clients.
+
+              The following connection methods are currently supported:
+
+              ssl:host[:port]
+                     The  specified  SSL port on the given host, which can ei‐
+                     ther be a DNS name (if built with unbound library) or  an
+                     IP  address.  A  valid SSL configuration must be provided
+                     when this form is used, this configuration can be  speci‐
+                     fied via command-line options or the SSL table.
+
+                     If port is not specified, it defaults to 6640.
+
+                     SSL  support  is  an  optional feature that is not always
+                     built as part of Open vSwitch.
+
+              tcp:host[:port]
+                     The specified TCP port on the given host, which  can  ei‐
+                     ther  be a DNS name (if built with unbound library) or an
+                     IP address (IPv4 or IPv6). If host is  an  IPv6  address,
+                     wrap it in square brackets, e.g. tcp:[::1]:6640.
+
+                     If port is not specified, it defaults to 6640.
+
+              pssl:[port][:host]
+                     Listens  for  SSL  connections on the specified TCP port.
+                     Specify 0 for  port  to  have  the  kernel  automatically
+                     choose  an available port. If host, which can either be a
+                     DNS name (if built with unbound library)  or  an  IP  ad‐
+                     dress,  is  specified, then connections are restricted to
+                     the resolved or specified local IP address  (either  IPv4
+                     or  IPv6  address).  If  host is an IPv6 address, wrap in
+                     square brackets, e.g. pssl:6640:[::1].  If  host  is  not
+                     specified then it listens only on IPv4 (but not IPv6) ad‐
+                     dresses.  A valid SSL configuration must be provided when
+                     this form is used, this can be specified either via  com‐
+                     mand-line options or the SSL table.
+
+                     If port is not specified, it defaults to 6640.
+
+                     SSL  support  is  an  optional feature that is not always
+                     built as part of Open vSwitch.
+
+              ptcp:[port][:host]
+                     Listens for connections on the specified TCP port.  Spec‐
+                     ify 0 for port to have the kernel automatically choose an
+                     available  port.  If host, which can either be a DNS name
+                     (if built with unbound library)  or  an  IP  address,  is
+                     specified,  then  connections  are  restricted to the re‐
+                     solved or specified local IP address (either IPv4 or IPv6
+                     address). If host is an IPv6 address, wrap it  in  square
+                     brackets,  e.g. ptcp:6640:[::1]. If host is not specified
+                     then it listens only on IPv4 addresses.
+
+                     If port is not specified, it defaults to 6640.
+
+              When multiple clients are configured, the target values must  be
+              unique. Duplicate target values yield unspecified results.
+
+     Client Failure Detection and Handling:
+
+       max_backoff: optional integer, at least 1,000
+              Maximum  number  of  milliseconds to wait between connection at‐
+              tempts. Default is implementation-specific.
+
+       inactivity_probe: optional integer
+              Maximum number of milliseconds of idle time on connection to the
+              client before sending  an  inactivity  probe  message.  If  Open
+              vSwitch  does  not communicate with the client for the specified
+              number of seconds, it will send a probe. If a  response  is  not
+              received  for  the  same additional amount of time, Open vSwitch
+              assumes the connection has been broken and  attempts  to  recon‐
+              nect.  Default is implementation-specific. A value of 0 disables
+              inactivity probes.
+
+     Status:
+
+       Key-value pair of is_connected is always updated. Other key-value pairs
+       in the status columns may be updated depends on the target type.
+
+       When target specifies a connection method that listens for inbound con‐
+       nections (e.g. ptcp: or punix:), both  n_connections  and  is_connected
+       may also be updated while the remaining key-value pairs are omitted.
+
+       On  the  other  hand, when target specifies an outbound connection, all
+       key-value pairs may be updated, except  the  above-mentioned  two  key-
+       value  pairs associated with inbound connection targets. They are omit‐
+       ted.
+
+       is_connected: boolean
+              true if currently connected to this client, false otherwise.
+
+       status : last_error: optional string
+              A human-readable description of the last error on the connection
+              to the manager; i.e. strerror(errno). This key will  exist  only
+              if an error has occurred.
+
+       status : state: optional string, one of ACTIVE, BACKOFF, CONNECTING,
+       IDLE, or VOID
+              The state of the connection to the manager:
+
+              VOID   Connection is disabled.
+
+              BACKOFF
+                     Attempting to reconnect at an increasing period.
+
+              CONNECTING
+                     Attempting to connect.
+
+              ACTIVE Connected, remote host responsive.
+
+              IDLE   Connection is idle. Waiting for response to keep-alive.
+
+              These  values  may  change in the future. They are provided only
+              for human consumption.
+
+       status : sec_since_connect: optional string, containing an integer, at
+       least 0
+              The amount of time since this client last successfully connected
+              to the database (in seconds). Value is empty if client has never
+              successfully been connected.
+
+       status : sec_since_disconnect: optional string, containing an integer,
+       at least 0
+              The amount of time since this client last disconnected from  the
+              database  (in  seconds). Value is empty if client has never dis‐
+              connected.
+
+       status : locks_held: optional string
+              Space-separated list of the names of OVSDB locks that  the  con‐
+              nection  holds.  Omitted  if  the  connection  does not hold any
+              locks.
+
+       status : locks_waiting: optional string
+              Space-separated list of the names of OVSDB locks that  the  con‐
+              nection  is currently waiting to acquire. Omitted if the connec‐
+              tion is not waiting for any locks.
+
+       status : locks_lost: optional string
+              Space-separated list of the names of OVSDB locks that  the  con‐
+              nection  has  had  stolen by another OVSDB client. Omitted if no
+              locks have been stolen from this connection.
+
+       status : n_connections: optional string, containing an integer, at
+       least 2
+              When target specifies a connection method that listens  for  in‐
+              bound  connections  (e.g. ptcp: or pssl:) and more than one con‐
+              nection is actually active, the value is the  number  of  active
+              connections. Otherwise, this key-value pair is omitted.
+
+       status : bound_port: optional string, containing an integer
+              When target is ptcp: or pssl:, this is the TCP port on which the
+              OVSDB  server  is  listening.  (This is particularly useful when
+              target specifies a port of 0, allowing the kernel to choose  any
+              available port.)
+
+     Common Columns:
+
+       The  overall purpose of these columns is described under Common Columns
+       at the beginning of this document.
+
+       external_ids: map of string-string pairs
+
+       other_config: map of string-string pairs
+SSL TABLE
+       SSL configuration for ovn-sb database access.
+
+   Summary:
+       private_key                   string
+       certificate                   string
+       ca_cert                       string
+       bootstrap_ca_cert             boolean
+       ssl_protocols                 string
+       ssl_ciphers                   string
+       Common Columns:
+         external_ids                map of string-string pairs
+
+   Details:
+       private_key: string
+              Name of a PEM file  containing  the  private  key  used  as  the
+              switch’s identity for SSL connections to the controller.
+
+       certificate: string
+              Name  of a PEM file containing a certificate, signed by the cer‐
+              tificate authority (CA) used by the controller and manager, that
+              certifies the switch’s private key,  identifying  a  trustworthy
+              switch.
+
+       ca_cert: string
+              Name  of a PEM file containing the CA certificate used to verify
+              that the switch is connected to a trustworthy controller.
+
+       bootstrap_ca_cert: boolean
+              If set to true, then Open vSwitch will attempt to obtain the  CA
+              certificate  from the controller on its first SSL connection and
+              save it to the named PEM file. If it is successful, it will  im‐
+              mediately  drop  the  connection and reconnect, and from then on
+              all SSL connections  must  be  authenticated  by  a  certificate
+              signed  by the CA certificate thus obtained. This option exposes
+              the SSL connection to a man-in-the-middle attack  obtaining  the
+              initial  CA  certificate.  It may still be useful for bootstrap‐
+              ping.
+
+       ssl_protocols: string
+              List of SSL protocols to be enabled for SSL connections. The de‐
+              fault when this option is omitted is TLSv1,TLSv1.1,TLSv1.2.
+
+       ssl_ciphers: string
+              List of ciphers (in OpenSSL cipher string  format)  to  be  sup‐
+              ported  for  SSL  connections.  The  default when this option is
+              omitted is HIGH:!aNULL:!MD5.
+
+     Common Columns:
+
+       The overall purpose of these columns is described under Common  Columns
+       at the beginning of this document.
+
+       external_ids: map of string-string pairs
+
+Open vSwitch 23.06.3            DB Schema 1.1.1                   ovn-ic-sb(5)
diff --git a/support/dist-docs-branch-23.06/ovn-ic-sbctl.8 b/support/dist-docs-branch-23.06/ovn-ic-sbctl.8
new file mode 100644
index 00000000..99ceab89
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-ic-sbctl.8
@@ -0,0 +1,412 @@
+'\" p
+.\" -*- nroff -*-
+.TH "ovn-ic-sbctl" 8 "ovn-ic-sbctl" "OVN 23\[char46]06\[char46]3" "OVN Manual"
+.fp 5 L CR              \\" Make fixed-width font available as \\fL.
+.de TQ
+.  br
+.  ns
+.  TP "\\$1"
+..
+.de ST
+.  PP
+.  RS -0.15in
+.  I "\\$1"
+.  RE
+..
+.de SU
+.  PP
+.  I "\\$1"
+..
+.PP
+.SH "NAME"
+.PP
+.PP
+ovn-ic-sbctl \- Open Virtual Network interconnection southbound db management utility
+.SH "SYNOPSIS"
+.PP
+\fBovn\-ic\-sbctl\fR [\fIoptions\fR] \fIcommand\fR [\fIarg\fR\[char46]\[char46]\[char46]]
+.SH "DESCRIPTION"
+.PP
+.PP
+This utility can be used to manage the OVN interconnection southbound database\[char46]
+.SH "GENERAL COMMANDS"
+.TP
+\fBinit\fR
+Initializes the database, if it is empty\[char46] If the database has already been initialized, this command has no effect\[char46]
+.TP
+\fBshow [\fIavailability_zone\fB]\fR
+Prints a brief overview of the database contents\[char46] If \fIavailability_zone\fR is provided, only records related to that availability zone are shown\[char46]
+.SH "DATABASE COMMANDS"
+.PP
+.PP
+These commands query and modify the contents of \fBovsdb\fR tables\[char46] They are a slight abstraction of the \fBovsdb\fR interface and as such they operate at a lower level than other \fBovn\-ic\-sbctl\fR commands\[char46]
+.PP
+\fIIdentifying Tables, Records, and Columns\fR
+.PP
+.PP
+Each of these commands has a \fItable\fR parameter to identify a table within the database\[char46] Many of them also take a \fIrecord\fR parameter that identifies a particular record within a table\[char46] The \fIrecord\fR parameter may be the UUID for a record, which may be abbreviated to its first 4 (or more) hex digits, as long as that is unique\[char46] Many tables offer additional ways to identify records\[char46] Some commands also take \fIcolumn\fR parameters that identify a particular field within the records in a table\[char46]
+.PP
+.PP
+For a list of tables and their columns, see \fBovn\-ic\-sb\fR(5) or see the table listing from the \fB\-\-help\fR option\[char46]
+.PP
+.PP
+Record names must be specified in full and with correct capitalization, except that UUIDs may be abbreviated to their first 4 (or more) hex digits, as long as that is unique within the table\[char46] Names of tables and columns are not case-sensitive, and \fB\-\fR and \fB_\fR are treated interchangeably\[char46] Unique abbreviations of table and column names are acceptable, e\[char46]g\[char46] \fBg\fR or \fBgatew\fR is sufficient to identify the \fBGateway\fR table\[char46]
+.PP
+.PP
+.PP
+\fIDatabase Values\fR
+.PP
+.PP
+Each column in the database accepts a fixed type of data\[char46] The currently defined basic types, and their representations, are:
+.RS
+.TP
+integer
+A decimal integer in the range \-2**63 to 2**63\-1, inclusive\[char46]
+.TP
+real
+A floating-point number\[char46]
+.TP
+Boolean
+True or false, written \fBtrue\fR or \fBfalse\fR, respectively\[char46]
+.TP
+string
+An arbitrary Unicode string, except that null bytes are not allowed\[char46] Quotes are optional for most strings that begin with an English letter or underscore and consist only of letters, underscores, hyphens, and periods\[char46] However, \fBtrue\fR and \fBfalse\fR and strings that match the syntax of UUIDs (see below) must be enclosed in double quotes to distinguish them from other basic types\[char46] When double quotes are used, the syntax is that of strings in JSON, e\[char46]g\[char46] backslashes may be used to escape special characters\[char46] The empty string must be represented as a pair of double quotes (\fB\(dq\(dq\fR)\[char46]
+.TP
+UUID
+Either a universally unique identifier in the style of RFC 4122, e\[char46]g\[char46] \fBf81d4fae\-7dec\-11d0\-a765\-00a0c91e6bf6\fR, or an \fB@\fR\fIname\fR defined by a \fBget\fR or \fBcreate\fR command within the same \fBovs\-vsctl\fR invocation\[char46]
+.RE
+.PP
+.PP
+Multiple values in a single column may be separated by spaces or a single comma\[char46] When multiple values are present, duplicates are not allowed, and order is not important\[char46] Conversely, some database columns can have an empty set of values, represented as \fB[]\fR, and square brackets may optionally enclose other non-empty sets or single values as well\[char46]
+.PP
+.PP
+A few database columns are ``maps\(cq\(cq of key-value pairs, where the key and the value are each some fixed database type\[char46] These are specified in the form \fIkey\fR\fB=\fR\fIvalue\fR, where \fIkey\fR and \fIvalue\fR follow the syntax for the column\(cqs key type and value type, respectively\[char46] When multiple pairs are present (separated by spaces or a comma), duplicate keys are not allowed, and again the order is not important\[char46] Duplicate values are allowed\[char46] An empty map is represented as \fB{}\fR\[char46] Curly braces may optionally enclose non-empty maps as well (but use quotes to prevent the shell from expanding \fBother\-config={0=x,1=y}\fR into \fBother\-config=0=x
+other\-config=1=y\fR, which may not have the desired effect)\[char46]
+.PP
+\fIDatabase Command Syntax\fR
+.RS
+.TP
+[\fB\-\-if\-exists\fR] [\fB\-\-columns=\fR\fIcolumn\fR[\fB,\fR\fIcolumn\fR]\[char46]\[char46]\[char46]] \fBlist\fR \fItable\fR [\fIrecord\fR]\[char46]\[char46]\[char46]
+Lists the data in each specified \fIrecord\fR\[char46] If no records are specified, lists all the records in \fItable\fR\[char46]
+.IP
+If \fB\-\-columns\fR is specified, only the requested columns are listed, in the specified order\[char46] Otherwise, all columns are listed, in alphabetical order by column name\[char46]
+.IP
+Without \fB\-\-if\-exists\fR, it is an error if any specified \fIrecord\fR does not exist\[char46] With \fB\-\-if\-exists\fR, the command ignores any \fIrecord\fR that does not exist, without producing any output\[char46]
+.TP
+[\fB\-\-columns=\fR\fIcolumn\fR[\fB,\fR\fIcolumn\fR]\[char46]\[char46]\[char46]] \fBfind\fR \fItable\fR [\fIcolumn\fR[\fB:\fR\fIkey\fR]\fB=\fR\fIvalue\fR]\[char46]\[char46]\[char46]
+Lists the data in each record in \fItable\fR whose \fIcolumn\fR equals \fIvalue\fR or, if \fIkey\fR is specified, whose \fIcolumn\fR contains a \fIkey\fR with the specified \fIvalue\fR\[char46] The following operators may be used where \fB=\fR is written in the syntax summary:
+.RS
+.TP
+\fB= != < > <= >=\fR
+Selects records in which \fIcolumn\fR[\fB:\fR\fIkey\fR] equals, does not equal, is less than, is greater than, is less than or equal to, or is greater than or equal to \fIvalue\fR, respectively\[char46]
+.IP
+Consider \fIcolumn\fR[\fB:\fR\fIkey\fR] and \fIvalue\fR as sets of elements\[char46] Identical sets are considered equal\[char46] Otherwise, if the sets have different numbers of elements, then the set with more elements is considered to be larger\[char46] Otherwise, consider a element from each set pairwise, in increasing order within each set\[char46] The first pair that differs determines the result\[char46] (For a column that contains key-value pairs, first all the keys are compared, and values are considered only if the two sets contain identical keys\[char46])
+.TP
+\fB{=} {!=}\fR
+Test for set equality or inequality, respectively\[char46]
+.TP
+\fB{<=}\fR
+Selects records in which \fIcolumn\fR[\fB:\fR\fIkey\fR] is a subset of \fIvalue\fR\[char46] For example, \fBflood\-vlans{<=}1,2\fR selects records in which the \fBflood\-vlans\fR column is the empty set or contains 1 or 2 or both\[char46]
+.TP
+\fB{<}\fR
+Selects records in which \fIcolumn\fR[\fB:\fR\fIkey\fR] is a proper subset of \fIvalue\fR\[char46] For example, \fBflood\-vlans{<}1,2\fR selects records in which the \fBflood\-vlans\fR column is the empty set or contains 1 or 2 but not both\[char46]
+.TP
+\fB{>=} {>}\fR
+Same as \fB{<=}\fR and \fB{<}\fR, respectively, except that the relationship is reversed\[char46] For example, \fBflood\-vlans{>=}1,2\fR selects records in which the \fBflood\-vlans\fR column contains both 1 and 2\[char46]
+.RE
+.IP
+The following operators are available only in Open vSwitch 2\[char46]16 and later:
+.RS
+.TP
+\fB{in}\fR
+Selects records in which every element in \fIcolumn\fR[\fB:\fR\fIkey\fR] is also in \fIvalue\fR\[char46] (This is the same as \fB{<=}\fR\[char46])
+.TP
+\fB{not\-in}\fR
+Selects records in which every element in \fIcolumn\fR[\fB:\fR\fIkey\fR] is not in \fIvalue\fR\[char46]
+.RE
+.IP
+For arithmetic operators (\fB= != < > <= >=\fR), when \fIkey\fR is specified but a particular record\(cqs \fIcolumn\fR does not contain \fIkey\fR, the record is always omitted from the results\[char46] Thus, the condition \fBother\-config:mtu!=1500\fR matches records that have a \fBmtu\fR key whose value is not 1500, but not those that lack an \fBmtu\fR key\[char46]
+.IP
+For the set operators, when \fIkey\fR is specified but a particular record\(cqs \fIcolumn\fR does not contain \fIkey\fR, the comparison is done against an empty set\[char46] Thus, the condition \fBother\-config:mtu{!=}1500\fR matches records that have a \fBmtu\fR key whose value is not 1500 and those that lack an \fBmtu\fR key\[char46]
+.IP
+Don\(cqt forget to escape \fB<\fR or \fB>\fR from interpretation by the shell\[char46]
+.IP
+If \fB\-\-columns\fR is specified, only the requested columns are listed, in the specified order\[char46] Otherwise all columns are listed, in alphabetical order by column name\[char46]
+.IP
+The UUIDs shown for rows created in the same \fBovs\-vsctl\fR invocation will be wrong\[char46]
+.TP
+[\fB\-\-if\-exists\fR] [\fB\-\-id=@\fR\fIname\fR] \fBget\fR \fItable record\fR [\fIcolumn\fR[\fB:\fR\fIkey\fR]]\[char46]\[char46]\[char46]
+Prints the value of each specified \fIcolumn\fR in the given \fIrecord\fR in \fItable\fR\[char46] For map columns, a \fIkey\fR may optionally be specified, in which case the value associated with \fIkey\fR in the column is printed, instead of the entire map\[char46]
+.IP
+Without \fB\-\-if\-exists\fR, it is an error if \fIrecord\fR does not exist or \fIkey\fR is specified, if \fIkey\fR does not exist in \fIrecord\fR\[char46] With \fB\-\-if\-exists\fR, a missing \fIrecord\fR yields no output and a missing \fIkey\fR prints a blank line\[char46]
+.IP
+If \fB@\fR\fIname\fR is specified, then the UUID for \fIrecord\fR may be referred to by that name later in the same \fBovs\-vsctl\fR invocation in contexts where a UUID is expected\[char46]
+.IP
+Both \fB\-\-id\fR and the \fIcolumn\fR arguments are optional, but usually at least one or the other should be specified\[char46] If both are omitted, then \fBget\fR has no effect except to verify that \fIrecord\fR exists in \fItable\fR\[char46]
+.IP
+\fB\-\-id\fR and \fB\-\-if\-exists\fR cannot be used together\[char46]
+.TP
+[\fB\-\-if\-exists\fR] \fBset\fR \fItable record column\fR[\fB:\fR\fIkey\fR]\fB=\fR\fIvalue\fR\[char46]\[char46]\[char46]
+Sets the value of each specified \fIcolumn\fR in the given \fIrecord\fR in \fItable\fR to \fIvalue\fR\[char46] For map columns, a \fIkey\fR may optionally be specified, in which case the value associated with \fIkey\fR in that column is changed (or added, if none exists), instead of the entire map\[char46]
+.IP
+Without \fB\-\-if\-exists\fR, it is an error if \fIrecord\fR does not exist\[char46] With \fB\-\-if\-exists\fR, this command does nothing if \fIrecord\fR does not exist\[char46]
+.TP
+[\fB\-\-if\-exists\fR] \fBadd\fR \fItable record column\fR [\fIkey\fR\fB=\fR]\fIvalue\fR\[char46]\[char46]\[char46]
+Adds the specified value or key-value pair to \fIcolumn\fR in \fIrecord\fR in \fItable\fR\[char46] If \fIcolumn\fR is a map, then \fIkey\fR is required, otherwise it is prohibited\[char46] If \fIkey\fR already exists in a map column, then the current \fIvalue\fR is not replaced (use the \fBset\fR command to replace an existing value)\[char46]
+.IP
+Without \fB\-\-if\-exists\fR, it is an error if \fIrecord\fR does not exist\[char46] With \fB\-\-if\-exists\fR, this command does nothing if \fIrecord\fR does not exist\[char46]
+.TP
+[\fB\-\-if\-exists\fR] \fBremove\fR \fItable record column value\fR\[char46]\[char46]\[char46]
+.IP
+[\fB\-\-if\-exists\fR] \fBremove\fR \fItable record column key\fR\[char46]\[char46]\[char46]
+.IP
+[\fB\-\-if\-exists\fR] \fBremove\fR \fItable record column key\fR\fB=\fR\fIvalue\fR\[char46]\[char46]\[char46]
+Removes the specified values or key-value pairs from \fIcolumn\fR in \fIrecord\fR in \fItable\fR\[char46] The first form applies to columns that are not maps: each specified \fIvalue\fR is removed from the column\[char46] The second and third forms apply to map columns: if only a \fIkey\fR is specified, then any key-value pair with the given \fIkey\fR is removed, regardless of its value; if a \fIvalue\fR is given then a pair is removed only if both key and value match\[char46]
+.IP
+It is not an error if the column does not contain the specified key or value or pair\[char46]
+.IP
+Without \fB\-\-if\-exists\fR, it is an error if \fIrecord\fR does not exist\[char46] With \fB\-\-if\-exists\fR, this command does nothing if \fIrecord\fR does not exist\[char46]
+.TP
+[\fB\-\-if\-exists\fR] \fBclear\fR \fItable record column\fR\[char46]\[char46]\[char46]
+Sets each \fIcolumn\fR in \fIrecord\fR in \fItable\fR to the empty set or empty map, as appropriate\[char46] This command applies only to columns that are allowed to be empty\[char46]
+.IP
+Without \fB\-\-if\-exists\fR, it is an error if \fIrecord\fR does not exist\[char46] With \fB\-\-if\-exists\fR, this command does nothing if \fIrecord\fR does not exist\[char46]
+.TP
+[\fB\-\-id=(@\fR\fIname\fR|\fIuuid\fR)] \fBcreate\fR \fItable column\fR[\fB:\fR\fIkey\fR]\fB=\fR\fIvalue\fR\[char46]\[char46]\[char46]
+Creates a new record in \fItable\fR and sets the initial values of each \fIcolumn\fR\[char46] Columns not explicitly set will receive their default values\[char46] Outputs the UUID of the new row\[char46]
+.IP
+If \fB@\fR\fIname\fR is specified, then the UUID for the new row may be referred to by that name elsewhere in the same \fB\e*(PN\fR invocation in contexts where a UUID is expected\[char46] Such references may precede or follow the \fBcreate\fR command\[char46]
+.IP
+If a valid \fIuuid\fR is specified, then it is used as the UUID of the new row\[char46]
+.RS
+.TP
+Caution (ovs-vsctl as example)
+Records in the Open vSwitch database are significant only when they can be reached directly or indirectly from the \fBOpen_vSwitch\fR table\[char46] Except for records in the \fBQoS\fR or \fBQueue\fR tables, records that are not reachable from the \fBOpen_vSwitch\fR table are automatically deleted from the database\[char46] This deletion happens immediately, without waiting for additional \fBovs\-vsctl\fR commands or other database activity\[char46] Thus, a \fBcreate\fR command must generally be accompanied by additional commands \fIwithin the same\fR \fBovs\-vsctl\fR \fIinvocation\fR to add a chain of references to the newly created record from the top-level \fBOpen_vSwitch\fR record\[char46] The \fBEXAMPLES\fR section gives some examples that show how to do this\[char46]
+.RE
+.TP
+[\fB\-\-if\-exists\fR] \fBdestroy\fR \fItable record\fR\[char46]\[char46]\[char46]
+Deletes each specified \fIrecord\fR from \fItable\fR\[char46] Unless \fB\-\-if\-exists\fR is specified, each \fIrecord\fRs must exist\[char46]
+.TP
+\fB\-\-all destroy\fR \fItable\fR
+Deletes all records from the \fItable\fR\[char46]
+.RS
+.TP
+Caution (ovs-vsctl as example)
+The \fBdestroy\fR command is only useful for records in the \fBQoS\fR or \fBQueue\fR tables\[char46] Records in other tables are automatically deleted from the database when they become unreachable from the \fBOpen_vSwitch\fR table\[char46] This means that deleting the last reference to a record is sufficient for deleting the record itself\[char46] For records in these tables, \fBdestroy\fR is silently ignored\[char46] See the \fBEXAMPLES\fR section below for more information\[char46]
+.RE
+.TP
+\fBwait\-until\fR \fItable record\fR [\fIcolumn\fR[\fB:\fR\fIkey\fR]\fB=\fR\fIvalue\fR]\[char46]\[char46]\[char46]
+Waits until \fItable\fR contains a record named \fIrecord\fR whose \fIcolumn\fR equals \fIvalue\fR or, if \fIkey\fR is specified, whose \fIcolumn\fR contains a \fIkey\fR with the specified \fIvalue\fR\[char46] This command supports the same operators and semantics described for the \fBfind\fR command above\[char46]
+.IP
+If no \fIcolumn\fR[\fB:\fR\fIkey\fR]\fB=\fR\fIvalue\fR arguments are given, this command waits only until \fIrecord\fR exists\[char46] If more than one such argument is given, the command waits until all of them are satisfied\[char46]
+.RS
+.TP
+Caution (ovs-vsctl as example)
+Usually \fBwait\-until\fR should be placed at the beginning of a set of \fBovs\-vsctl\fR commands\[char46] For example, \fBwait\-until bridge br0
+\-\- get bridge br0 datapath_id\fR waits until a bridge named \fBbr0\fR is created, then prints its \fBdatapath_id\fR column, whereas \fBget bridge br0 datapath_id \-\- wait\-until bridge br0\fR will abort if no bridge named \fBbr0\fR exists when \fBovs\-vsctl\fR initially connects to the database\[char46]
+.RE
+.IP
+Consider specifying \fB\-\-timeout=0\fR along with \fB\-\-wait\-until\fR, to prevent \fBovs\-vsctl\fR from terminating after waiting only at most 5 seconds\[char46]
+.TP
+\fBcomment\fR [\fIarg\fR]\[char46]\[char46]\[char46]
+This command has no effect on behavior, but any database log record created by the command will include the command and its arguments\[char46]
+.RE
+.SH "REMOTE CONNECTIVITY COMMANDS"
+.TP
+\fBget\-connection\fR
+Prints the configured connection(s)\[char46]
+.TP
+\fBdel\-connection\fR
+Deletes the configured connection(s)\[char46]
+.TP
+[\fB\-\-inactivity\-probe=\fR\fImsecs\fR] \fBset\-connection\fR \fItarget\fR\[char46]\[char46]\[char46]
+Sets the configured manager target or targets\[char46] Use \fB\-\-inactivity\-probe=\fR\fImsecs\fR to override the default idle connection inactivity probe time\[char46] Use 0 to disable inactivity probes\[char46]
+.SH "SSL CONFIGURATION COMMANDS"
+.TP
+\fBget\-ssl\fR
+Prints the SSL configuration\[char46]
+.TP
+\fBdel\-ssl\fR
+Deletes the current SSL configuration\[char46]
+.TP
+[\fB\-\-bootstrap\fR] \fBset\-ssl\fR \fIprivate-key\fR \fIcertificate\fR \fIca-cert\fR [\fIssl-protocol-list\fR [\fIssl-cipher-list\fR]]
+Sets the SSL configuration\[char46]
+.SH "OPTIONS"
+.TP
+\fB\-\-db\fR \fIdatabase\fR
+The OVSDB database remote to contact\[char46] If the \fBOVN_IC_SB_DB\fR environment variable is set, its value is used as the default\[char46] Otherwise, the default is \fBunix:/ovn_ic_sb_db\[char46]sock\fR, but this default is unlikely to be useful outside of single-machine OVN test environments\[char46]
+.TP
+\fB\-\-leader\-only\fR
+.TQ .5in
+\fB\-\-no\-leader\-only\fR
+By default, or with \fB\-\-leader\-only\fR, when the database server is a clustered database, \fBovn\-ic\-sbctl\fR will avoid servers other than the cluster leader\[char46] This ensures that any data that \fBovn\-ic\-sbctl\fR reads and reports is up-to-date\[char46] With \fB\-\-no\-leader\-only\fR, \fBovn\-ic\-sbctl\fR will use any server in the cluster, which means that for read-only transactions it can report and act on stale data (transactions that modify the database are always serialized even with \fB\-\-no\-leader\-only\fR)\[char46] Refer to \fBUnderstanding Cluster Consistency\fR in \fBovsdb\fR(7) for more information\[char46]
+.SH "LOGGING OPTIONS"
+.TP
+\fB\-v\fR[\fIspec\fR]
+.TQ .5in
+\fB\-\-verbose=\fR[\fIspec\fR]
+Sets logging levels\[char46] Without any \fIspec\fR, sets the log level for every module and destination to \fBdbg\fR\[char46] Otherwise, \fIspec\fR is a list of words separated by spaces or commas or colons, up to one from each category below:
+.RS
+.IP \(bu
+A valid module name, as displayed by the \fBvlog/list\fR command on \fBovs\-appctl\fR(8), limits the log level change to the specified module\[char46]
+.IP \(bu
+\fBsyslog\fR, \fBconsole\fR, or \fBfile\fR, to limit the log level change to only to the system log, to the console, or to a file, respectively\[char46] (If \fB\-\-detach\fR is specified, the daemon closes its standard file descriptors, so logging to the console will have no effect\[char46])
+.IP
+On Windows platform, \fBsyslog\fR is accepted as a word and is only useful along with the \fB\-\-syslog\-target\fR option (the word has no effect otherwise)\[char46]
+.IP \(bu
+\fBoff\fR, \fBemer\fR, \fBerr\fR, \fBwarn\fR, \fBinfo\fR, or \fBdbg\fR, to control the log level\[char46] Messages of the given severity or higher will be logged, and messages of lower severity will be filtered out\[char46] \fBoff\fR filters out all messages\[char46] See \fBovs\-appctl\fR(8) for a definition of each log level\[char46]
+.RE
+.IP
+Case is not significant within \fIspec\fR\[char46]
+.IP
+Regardless of the log levels set for \fBfile\fR, logging to a file will not take place unless \fB\-\-log\-file\fR is also specified (see below)\[char46]
+.IP
+For compatibility with older versions of OVS, \fBany\fR is accepted as a word but has no effect\[char46]
+.TP
+\fB\-v\fR
+.TQ .5in
+\fB\-\-verbose\fR
+Sets the maximum logging verbosity level, equivalent to \fB\-\-verbose=dbg\fR\[char46]
+.TP
+\fB\-vPATTERN:\fR\fIdestination\fR\fB:\fR\fIpattern\fR
+.TQ .5in
+\fB\-\-verbose=PATTERN:\fR\fIdestination\fR\fB:\fR\fIpattern\fR
+Sets the log pattern for \fIdestination\fR to \fIpattern\fR\[char46] Refer to \fBovs\-appctl\fR(8) for a description of the valid syntax for \fIpattern\fR\[char46]
+.TP
+\fB\-vFACILITY:\fR\fIfacility\fR
+.TQ .5in
+\fB\-\-verbose=FACILITY:\fR\fIfacility\fR
+Sets the RFC5424 facility of the log message\[char46] \fIfacility\fR can be one of \fBkern\fR, \fBuser\fR, \fBmail\fR, \fBdaemon\fR, \fBauth\fR, \fBsyslog\fR, \fBlpr\fR, \fBnews\fR, \fBuucp\fR, \fBclock\fR, \fBftp\fR, \fBntp\fR, \fBaudit\fR, \fBalert\fR, \fBclock2\fR, \fBlocal0\fR, \fBlocal1\fR, \fBlocal2\fR, \fBlocal3\fR, \fBlocal4\fR, \fBlocal5\fR, \fBlocal6\fR or \fBlocal7\fR\[char46] If this option is not specified, \fBdaemon\fR is used as the default for the local system syslog and \fBlocal0\fR is used while sending a message to the target provided via the \fB\-\-syslog\-target\fR option\[char46]
+.TP
+\fB\-\-log\-file\fR[\fB=\fR\fIfile\fR]
+Enables logging to a file\[char46] If \fIfile\fR is specified, then it is used as the exact name for the log file\[char46] The default log file name used if \fIfile\fR is omitted is \fB/usr/local/var/log/ovn/\fIprogram\fB\[char46]log\fR\[char46]
+.TP
+\fB\-\-syslog\-target=\fR\fIhost\fR\fB:\fR\fIport\fR
+Send syslog messages to UDP \fIport\fR on \fIhost\fR, in addition to the system syslog\[char46] The \fIhost\fR must be a numerical IP address, not a hostname\[char46]
+.TP
+\fB\-\-syslog\-method=\fR\fImethod\fR
+Specify \fImethod\fR as how syslog messages should be sent to syslog daemon\[char46] The following forms are supported:
+.RS
+.IP \(bu
+\fBlibc\fR, to use the libc \fBsyslog()\fR function\[char46] Downside of using this options is that libc adds fixed prefix to every message before it is actually sent to the syslog daemon over \fB/dev/log\fR UNIX domain socket\[char46]
+.IP \(bu
+\fBunix:\fIfile\fB\fR, to use a UNIX domain socket directly\[char46] It is possible to specify arbitrary message format with this option\[char46] However, \fBrsyslogd 8\[char46]9\fR and older versions use hard coded parser function anyway that limits UNIX domain socket use\[char46] If you want to use arbitrary message format with older \fBrsyslogd\fR versions, then use UDP socket to localhost IP address instead\[char46]
+.IP \(bu
+\fBudp:\fIip\fB:\fIport\fB\fR, to use a UDP socket\[char46] With this method it is possible to use arbitrary message format also with older \fBrsyslogd\fR\[char46] When sending syslog messages over UDP socket extra precaution needs to be taken into account, for example, syslog daemon needs to be configured to listen on the specified UDP port, accidental iptables rules could be interfering with local syslog traffic and there are some security considerations that apply to UDP sockets, but do not apply to UNIX domain sockets\[char46]
+.IP \(bu
+\fBnull\fR, to discard all messages logged to syslog\[char46]
+.RE
+.IP
+The default is taken from the \fBOVS_SYSLOG_METHOD\fR environment variable; if it is unset, the default is \fBlibc\fR\[char46]
+.SH "TABLE FORMATTING OPTIONS"
+These options control the format of output from the \fBlist\fR and \fBfind\fR commands\[char46]
+.RS
+.TP
+\fB\-f\fR \fIformat\fR
+.TQ .5in
+\fB\-\-format=\fR\fIformat\fR
+Sets the type of table formatting\[char46] The following types of \fIformat\fR are available:
+.RS
+.TP
+\fBtable\fR
+2-D text tables with aligned columns\[char46]
+.TP
+\fBlist\fR (default)
+A list with one column per line and rows separated by a blank line\[char46]
+.TP
+\fBhtml\fR
+HTML tables\[char46]
+.TP
+\fBcsv\fR
+Comma-separated values as defined in RFC 4180\[char46]
+.TP
+\fBjson\fR
+JSON format as defined in RFC 4627\[char46] The output is a sequence of JSON objects, each of which corresponds to one table\[char46] Each JSON object has the following members with the noted values:
+.RS
+.TP
+\fBcaption\fR
+The table\(cqs caption\[char46] This member is omitted if the table has no caption\[char46]
+.TP
+\fBheadings\fR
+An array with one element per table column\[char46] Each array element is a string giving the corresponding column\(cqs heading\[char46]
+.TP
+\fBdata\fR
+An array with one element per table row\[char46] Each element is also an array with one element per table column\[char46] The elements of this second-level array are the cells that constitute the table\[char46] Cells that represent OVSDB data or data types are expressed in the format described in the OVSDB specification; other cells are simply expressed as text strings\[char46]
+.RE
+.RE
+.TP
+\fB\-d\fR \fIformat\fR
+.TQ .5in
+\fB\-\-data=\fR\fIformat\fR
+Sets the formatting for cells within output tables unless the table format is set to \fBjson\fR, in which case \fBjson\fR formatting is always used when formatting cells\[char46] The following types of \fIformat\fR are available:
+.RS
+.TP
+\fBstring\fR (default)
+The simple format described in the \fBDatabase Values\fR section of \fBovs\-vsctl\fR(8)\[char46]
+.TP
+\fBbare\fR
+The simple format with punctuation stripped off: \fB[]\fR and \fB{}\fR are omitted around sets, maps, and empty columns, items within sets and maps are space-separated, and strings are never quoted\[char46] This format may be easier for scripts to parse\[char46]
+.TP
+\fBjson\fR
+The RFC 4627 JSON format as described above\[char46]
+.RE
+.TP
+\fB\-\-no\-headings\fR
+This option suppresses the heading row that otherwise appears in the first row of table output\[char46]
+.TP
+\fB\-\-pretty\fR
+By default, JSON in output is printed as compactly as possible\[char46] This option causes JSON in output to be printed in a more readable fashion\[char46] Members of objects and elements of arrays are printed one per line, with indentation\[char46]
+.IP
+This option does not affect JSON in tables, which is always printed compactly\[char46]
+.TP
+\fB\-\-bare\fR
+Equivalent to \fB\-\-format=list \-\-data=bare \-\-no\-headings\fR\[char46]
+.RE
+.SS "PKI Options"
+.PP
+.PP
+PKI configuration is required to use SSL for the connection to the database\[char46]
+.RS
+.TP
+\fB\-p\fR \fIprivkey\[char46]pem\fR
+.TQ .5in
+\fB\-\-private\-key=\fR\fIprivkey\[char46]pem\fR
+Specifies a PEM file containing the private key used as identity for outgoing SSL connections\[char46]
+.TP
+\fB\-c\fR \fIcert\[char46]pem\fR
+.TQ .5in
+\fB\-\-certificate=\fR\fIcert\[char46]pem\fR
+Specifies a PEM file containing a certificate that certifies the private key specified on \fB\-p\fR or \fB\-\-private\-key\fR to be trustworthy\[char46] The certificate must be signed by the certificate authority (CA) that the peer in SSL connections will use to verify it\[char46]
+.TP
+\fB\-C\fR \fIcacert\[char46]pem\fR
+.TQ .5in
+\fB\-\-ca\-cert=\fR\fIcacert\[char46]pem\fR
+Specifies a PEM file containing the CA certificate for verifying certificates presented to this program by SSL peers\[char46] (This may be the same certificate that SSL peers use to verify the certificate specified on \fB\-c\fR or \fB\-\-certificate\fR, or it may be a different one, depending on the PKI design in use\[char46])
+.TP
+\fB\-C none\fR
+.TQ .5in
+\fB\-\-ca\-cert=none\fR
+Disables verification of certificates presented by SSL peers\[char46] This introduces a security risk, because it means that certificates cannot be verified to be those of known trusted hosts\[char46]
+.RE
+.RS
+.TP
+\fB\-\-bootstrap\-ca\-cert=\fR\fIcacert\[char46]pem\fR
+When \fIcacert\[char46]pem\fR exists, this option has the same effect as \fB\-C\fR or \fB\-\-ca\-cert\fR\[char46] If it does not exist, then the executable will attempt to obtain the CA certificate from the SSL peer on its first SSL connection and save it to the named PEM file\[char46] If it is successful, it will immediately drop the connection and reconnect, and from then on all SSL connections must be authenticated by a certificate signed by the CA certificate thus obtained\[char46]
+.IP
+This option exposes the SSL connection to a man-in-the-middle attack obtaining the initial CA certificate, but it may be useful for bootstrapping\[char46]
+.IP
+This option is only useful if the SSL peer sends its CA certificate as part of the SSL certificate chain\[char46] The SSL protocol does not require the server to send the CA certificate\[char46]
+.IP
+This option is mutually exclusive with \fB\-C\fR and \fB\-\-ca\-cert\fR\[char46]
+.RE
+.SS "Other Options"
+.TP
+\fB\-h\fR
+.TQ .5in
+\fB\-\-help\fR
+Prints a brief help message to the console\[char46]
+.TP
+\fB\-V\fR
+.TQ .5in
+\fB\-\-version\fR
+Prints version information to the console\[char46]
diff --git a/support/dist-docs-branch-23.06/ovn-ic-sbctl.8.html b/support/dist-docs-branch-23.06/ovn-ic-sbctl.8.html
new file mode 100644
index 00000000..c40a9946
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-ic-sbctl.8.html
@@ -0,0 +1,627 @@
+<html><head><meta charset="UTF-8"></head><body><pre>
+<u>o</u><u>v</u><u>n</u><u>-</u><u>i</u><u>c</u><u>-</u><u>s</u><u>b</u><u>c</u><u>t</u><u>l</u>(8)                   OVN Manual                   <u>o</u><u>v</u><u>n</u><u>-</u><u>i</u><u>c</u><u>-</u><u>s</u><u>b</u><u>c</u><u>t</u><u>l</u>(8)
+
+<b>N</b><b>A</b><b>M</b><b>E</b>
+       ovn-ic-sbctl  - Open Virtual Network interconnection southbound db man‐
+       agement utility
+
+<b>S</b><b>Y</b><b>N</b><b>O</b><b>P</b><b>S</b><b>I</b><b>S</b>
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b><b>-</b><b>s</b><b>b</b><b>c</b><b>t</b><b>l</b> [<u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u>] <u>c</u><u>o</u><u>m</u><u>m</u><u>a</u><u>n</u><u>d</u> [<u>a</u><u>r</u><u>g</u>...]
+
+<b>D</b><b>E</b><b>S</b><b>C</b><b>R</b><b>I</b><b>P</b><b>T</b><b>I</b><b>O</b><b>N</b>
+       This utility can be used to manage the OVN  interconnection  southbound
+       database.
+
+<b>G</b><b>E</b><b>N</b><b>E</b><b>R</b><b>A</b><b>L</b> <b>C</b><b>O</b><b>M</b><b>M</b><b>A</b><b>N</b><b>D</b><b>S</b>
+       <b>i</b><b>n</b><b>i</b><b>t</b>   Initializes  the  database,  if it is empty. If the database has
+              already been initialized, this command has no effect.
+
+       <b>s</b><b>h</b><b>o</b><b>w</b> <b>[</b><u>a</u><u>v</u><u>a</u><u>i</u><u>l</u><u>a</u><u>b</u><u>i</u><u>l</u><u>i</u><u>t</u><u>y</u><b>_</b><u>z</u><u>o</u><u>n</u><u>e</u><b>]</b>
+              Prints a brief overview of the database contents. If  <u>a</u><u>v</u><u>a</u><u>i</u><u>l</u><u>a</u><u>b</u><u>i</u><u>l</u><u>�</u>��
+              <u>i</u><u>t</u><u>y</u><b>_</b><u>z</u><u>o</u><u>n</u><u>e</u>  is provided, only records related to that availability
+              zone are shown.
+
+<b>D</b><b>A</b><b>T</b><b>A</b><b>B</b><b>A</b><b>S</b><b>E</b> <b>C</b><b>O</b><b>M</b><b>M</b><b>A</b><b>N</b><b>D</b><b>S</b>
+       These commands query and modify the contents of <b>o</b><b>v</b><b>s</b><b>d</b><b>b</b> tables. They  are
+       a slight abstraction of the <b>o</b><b>v</b><b>s</b><b>d</b><b>b</b> interface and as such they operate at
+       a lower level than other <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b><b>-</b><b>s</b><b>b</b><b>c</b><b>t</b><b>l</b> commands.
+
+       <u>I</u><u>d</u><u>e</u><u>n</u><u>t</u><u>i</u><u>f</u><u>y</u><u>i</u><u>n</u><u>g</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u><u>s</u><u>,</u> <u>R</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u><u>s</u><u>,</u> <u>a</u><u>n</u><u>d</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u>
+
+       Each of these commands has a <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> parameter to identify a table within
+       the database. Many of them also take a <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> parameter that identifies
+       a  particular  record  within  a table. The <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> parameter may be the
+       UUID for a record, which may be abbreviated to its first  4  (or  more)
+       hex  digits,  as  long  as that is unique. Many tables offer additional
+       ways to identify records. Some commands  also  take  <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>  parameters
+       that identify a particular field within the records in a table.
+
+       For a list of tables and their columns, see <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b><b>-</b><b>s</b><b>b</b>(5) or see the ta‐
+       ble listing from the <b>-</b><b>-</b><b>h</b><b>e</b><b>l</b><b>p</b> option.
+
+       Record names must be specified in full and with correct capitalization,
+       except  that  UUIDs  may  be abbreviated to their first 4 (or more) hex
+       digits, as long as that is unique within the table. Names of tables and
+       columns are not case-sensitive, and <b>-</b> and <b>_</b>  are  treated  interchange‐
+       ably.  Unique  abbreviations  of table and column names are acceptable,
+       e.g. <b>g</b> or <b>g</b><b>a</b><b>t</b><b>e</b><b>w</b> is sufficient to identify the <b>G</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b> table.
+
+       <u>D</u><u>a</u><u>t</u><u>a</u><u>b</u><u>a</u><u>s</u><u>e</u> <u>V</u><u>a</u><u>l</u><u>u</u><u>e</u><u>s</u>
+
+       Each column in the database accepts a fixed type of data. The currently
+       defined basic types, and their representations, are:
+
+              integer
+                     A decimal integer in the range -2**63 to 2**63-1,  inclu‐
+                     sive.
+
+              real   A floating-point number.
+
+              Boolean
+                     True or false, written <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>, respectively.
+
+              string An  arbitrary  Unicode string, except that null bytes are
+                     not allowed. Quotes are optional for  most  strings  that
+                     begin  with  an  English letter or underscore and consist
+                     only of letters, underscores, hyphens, and periods.  How‐
+                     ever, <b>t</b><b>r</b><b>u</b><b>e</b> and <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b> and strings that match the syntax of
+                     UUIDs  (see  below)  must be enclosed in double quotes to
+                     distinguish them from  other  basic  types.  When  double
+                     quotes  are  used, the syntax is that of strings in JSON,
+                     e.g. backslashes may be used to  escape  special  charac‐
+                     ters.  The  empty string must be represented as a pair of
+                     double quotes (<b>"</b><b>"</b>).
+
+              UUID   Either a universally unique identifier in  the  style  of
+                     RFC  4122,  e.g. <b>f</b><b>8</b><b>1</b><b>d</b><b>4</b><b>f</b><b>a</b><b>e</b><b>-</b><b>7</b><b>d</b><b>e</b><b>c</b><b>-</b><b>1</b><b>1</b><b>d</b><b>0</b><b>-</b><b>a</b><b>7</b><b>6</b><b>5</b><b>-</b><b>0</b><b>0</b><b>a</b><b>0</b><b>c</b><b>9</b><b>1</b><b>e</b><b>6</b><b>b</b><b>f</b><b>6</b>, or
+                     an <b>@</b><u>n</u><u>a</u><u>m</u><u>e</u> defined by a <b>g</b><b>e</b><b>t</b> or <b>c</b><b>r</b><b>e</b><b>a</b><b>t</b><b>e</b>  command  within  the
+                     same <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>c</b><b>t</b><b>l</b> invocation.
+
+       Multiple values in a single column may be separated by spaces or a sin‐
+       gle  comma.  When  multiple  values are present, duplicates are not al‐
+       lowed, and order is not important. Conversely,  some  database  columns
+       can have an empty set of values, represented as <b>[</b><b>]</b>, and square brackets
+       may optionally enclose other non-empty sets or single values as well.
+
+       A  few  database columns are ``maps’’ of key-value pairs, where the key
+       and the value are each some fixed database type. These are specified in
+       the form <u>k</u><u>e</u><u>y</u><b>=</b><u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>, where <u>k</u><u>e</u><u>y</u> and <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u> follow the syntax for the  col‐
+       umn’s  key  type  and value type, respectively. When multiple pairs are
+       present (separated by spaces or a comma), duplicate keys  are  not  al‐
+       lowed,  and  again the order is not important. Duplicate values are al‐
+       lowed. An empty map is represented as <b>{</b><b>}</b>. Curly braces  may  optionally
+       enclose  non-empty  maps  as  well (but use quotes to prevent the shell
+       from expanding <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>-</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>=</b><b>{</b><b>0</b><b>=</b><b>x</b><b>,</b><b>1</b><b>=</b><b>y</b><b>}</b> into <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>-</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>=</b><b>0</b><b>=</b><b>x</b>  <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>-</b><b>c</b><b>o</b><b>n</b>‐‐
+       <b>f</b><b>i</b><b>g</b><b>=</b><b>1</b><b>=</b><b>y</b>, which may not have the desired effect).
+
+       <u>D</u><u>a</u><u>t</u><u>a</u><u>b</u><u>a</u><u>s</u><u>e</u> <u>C</u><u>o</u><u>m</u><u>m</u><u>a</u><u>n</u><u>d</u> <u>S</u><u>y</u><u>n</u><u>t</u><u>a</u><u>x</u>
+
+              [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] [<b>-</b><b>-</b><b>c</b><b>o</b><b>l</b><b>u</b><b>m</b><b>n</b><b>s</b><b>=</b><u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>,</b><u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>]...] <b>l</b><b>i</b><b>s</b><b>t</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>
+              [<u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>]...
+                     Lists  the  data  in each specified <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>. If no records
+                     are specified, lists all the records in <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>.
+
+                     If <b>-</b><b>-</b><b>c</b><b>o</b><b>l</b><b>u</b><b>m</b><b>n</b><b>s</b> is specified, only the requested columns are
+                     listed, in the specified order.  Otherwise,  all  columns
+                     are listed, in alphabetical order by column name.
+
+                     Without  <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>,  it  is  an  error if any specified
+                     <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> does not exist. With <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>, the command  ig‐
+                     nores  any  <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> that does not exist, without producing
+                     any output.
+
+              [<b>-</b><b>-</b><b>c</b><b>o</b><b>l</b><b>u</b><b>m</b><b>n</b><b>s</b><b>=</b><u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>,</b><u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>]...] <b>f</b><b>i</b><b>n</b><b>d</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> [<u>c</u><u>o</u><u>l</u><u>�</u>��
+              <u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>]<b>=</b><u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>]...
+                     Lists the data in  each  record  in  <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>  whose  <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>
+                     equals  <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>  or, if <u>k</u><u>e</u><u>y</u> is specified, whose <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> con‐
+                     tains a <u>k</u><u>e</u><u>y</u> with the specified <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>. The following oper‐
+                     ators may be used where <b>=</b> is written in the  syntax  sum‐
+                     mary:
+
+                     <b>=</b> <b>!</b><b>=</b> <lt;<lt; >gt;>gt; <lt;<lt;<b>=</b> >gt;>gt;<b>=</b>
+                            Selects records in which <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>] equals, does
+                            not  equal, is less than, is greater than, is less
+                            than or equal to, or is greater than or  equal  to
+                            <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>, respectively.
+
+                            Consider  <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>]  and  <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u> as sets of ele‐
+                            ments. Identical sets are considered equal. Other‐
+                            wise, if the sets have different numbers  of  ele‐
+                            ments,  then the set with more elements is consid‐
+                            ered to be larger. Otherwise, consider  a  element
+                            from each set pairwise, in increasing order within
+                            each  set.  The first pair that differs determines
+                            the result. (For a column that contains  key-value
+                            pairs, first all the keys are compared, and values
+                            are  considered only if the two sets contain iden‐
+                            tical keys.)
+
+                     <b>{</b><b>=</b><b>}</b> <b>{</b><b>!</b><b>=</b><b>}</b>
+                            Test for set equality or inequality, respectively.
+
+                     <b>{</b><lt;<lt;<b>=</b><b>}</b>   Selects records in which <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>] is a  subset
+                            of  <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>. For example, <b>f</b><b>l</b><b>o</b><b>o</b><b>d</b><b>-</b><b>v</b><b>l</b><b>a</b><b>n</b><b>s</b><b>{</b><lt;<lt;<b>=</b><b>}</b><b>1</b><b>,</b><b>2</b> selects
+                            records in which the  <b>f</b><b>l</b><b>o</b><b>o</b><b>d</b><b>-</b><b>v</b><b>l</b><b>a</b><b>n</b><b>s</b>  column  is  the
+                            empty set or contains 1 or 2 or both.
+
+                     <b>{</b><lt;<lt;<b>}</b>    Selects  records in which <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>] is a proper
+                            subset of <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>.  For  example,  <b>f</b><b>l</b><b>o</b><b>o</b><b>d</b><b>-</b><b>v</b><b>l</b><b>a</b><b>n</b><b>s</b><b>{</b><lt;<lt;<b>}</b><b>1</b><b>,</b><b>2</b>
+                            selects records in which the <b>f</b><b>l</b><b>o</b><b>o</b><b>d</b><b>-</b><b>v</b><b>l</b><b>a</b><b>n</b><b>s</b> column is
+                            the empty set or contains 1 or 2 but not both.
+
+                     <b>{</b>>gt;>gt;<b>=</b><b>}</b> <b>{</b>>gt;>gt;<b>}</b>
+                            Same  as  <b>{</b><lt;<lt;<b>=</b><b>}</b>  and <b>{</b><lt;<lt;<b>}</b>, respectively, except that
+                            the  relationship  is   reversed.   For   example,
+                            <b>f</b><b>l</b><b>o</b><b>o</b><b>d</b><b>-</b><b>v</b><b>l</b><b>a</b><b>n</b><b>s</b><b>{</b>>gt;>gt;<b>=</b><b>}</b><b>1</b><b>,</b><b>2</b>  selects  records  in which the
+                            <b>f</b><b>l</b><b>o</b><b>o</b><b>d</b><b>-</b><b>v</b><b>l</b><b>a</b><b>n</b><b>s</b> column contains both 1 and 2.
+
+                     The  following  operators  are  available  only  in  Open
+                     vSwitch 2.16 and later:
+
+                     <b>{</b><b>i</b><b>n</b><b>}</b>   Selects  records  in  which  every element in <u>c</u><u>o</u><u>l</u><u>�</u>��
+                            <u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>] is also in <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>. (This is the  same  as
+                            <b>{</b><lt;<lt;<b>=</b><b>}</b>.)
+
+                     <b>{</b><b>n</b><b>o</b><b>t</b><b>-</b><b>i</b><b>n</b><b>}</b>
+                            Selects  records  in  which  every element in <u>c</u><u>o</u><u>l</u><u>�</u>��
+                            <u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>] is not in <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>.
+
+                     For arithmetic operators (<b>=</b> <b>!</b><b>=</b> <lt;<lt; >gt;>gt; <lt;<lt;<b>=</b> >gt;>gt;<b>=</b>),  when  <u>k</u><u>e</u><u>y</u>  is
+                     specified  but a particular record’s <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> does not con‐
+                     tain <u>k</u><u>e</u><u>y</u>, the record is always omitted from the  results.
+                     Thus,   the   condition   <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>-</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>:</b><b>m</b><b>t</b><b>u</b><b>!</b><b>=</b><b>1</b><b>5</b><b>0</b><b>0</b>  matches
+                     records that have a <b>m</b><b>t</b><b>u</b> key whose value is not 1500,  but
+                     not those that lack an <b>m</b><b>t</b><b>u</b> key.
+
+                     For  the  set operators, when <u>k</u><u>e</u><u>y</u> is specified but a par‐
+                     ticular record’s <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> does not contain <u>k</u><u>e</u><u>y</u>, the compar‐
+                     ison is done against an empty set.  Thus,  the  condition
+                     <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>-</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>:</b><b>m</b><b>t</b><b>u</b><b>{</b><b>!</b><b>=</b><b>}</b><b>1</b><b>5</b><b>0</b><b>0</b>  matches records that have a <b>m</b><b>t</b><b>u</b>
+                     key whose value is not 1500 and those that  lack  an  <b>m</b><b>t</b><b>u</b>
+                     key.
+
+                     Don’t  forget to escape <lt;<lt; or >gt;>gt; from interpretation by the
+                     shell.
+
+                     If <b>-</b><b>-</b><b>c</b><b>o</b><b>l</b><b>u</b><b>m</b><b>n</b><b>s</b> is specified, only the requested columns are
+                     listed, in the specified order. Otherwise all columns are
+                     listed, in alphabetical order by column name.
+
+                     The UUIDs shown for rows created in  the  same  <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>c</b><b>t</b><b>l</b>
+                     invocation will be wrong.
+
+              [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] [<b>-</b><b>-</b><b>i</b><b>d</b><b>=</b><b>@</b><u>n</u><u>a</u><u>m</u><u>e</u>] <b>g</b><b>e</b><b>t</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> [<u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>]]...
+                     Prints  the  value  of each specified <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> in the given
+                     <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> in <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>. For map columns, a <u>k</u><u>e</u><u>y</u> may optionally be
+                     specified, in which case the value associated with <u>k</u><u>e</u><u>y</u> in
+                     the column is printed, instead of the entire map.
+
+                     Without <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>, it is an error if  <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>  does  not
+                     exist  or  <u>k</u><u>e</u><u>y</u>  is  specified,  if  <u>k</u><u>e</u><u>y</u> does not exist in
+                     <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>. With <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>, a missing <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> yields no out‐
+                     put and a missing <u>k</u><u>e</u><u>y</u> prints a blank line.
+
+                     If <b>@</b><u>n</u><u>a</u><u>m</u><u>e</u> is specified, then the UUID for  <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>  may  be
+                     referred  to by that name later in the same <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>c</b><b>t</b><b>l</b> in‐
+                     vocation in contexts where a UUID is expected.
+
+                     Both <b>-</b><b>-</b><b>i</b><b>d</b> and the <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> arguments are optional, but usu‐
+                     ally at least one or the other should  be  specified.  If
+                     both are omitted, then <b>g</b><b>e</b><b>t</b> has no effect except to verify
+                     that <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> exists in <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>.
+
+                     <b>-</b><b>-</b><b>i</b><b>d</b> and <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b> cannot be used together.
+
+              [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] <b>s</b><b>e</b><b>t</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>]<b>=</b><u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>...
+                     Sets  the  value  of  each  specified <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> in the given
+                     <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> in <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> to <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>. For map columns, a <u>k</u><u>e</u><u>y</u> may  op‐
+                     tionally be specified, in which case the value associated
+                     with <u>k</u><u>e</u><u>y</u> in that column is changed (or added, if none ex‐
+                     ists), instead of the entire map.
+
+                     Without  <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>,  it  is an error if <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> does not
+                     exist. With <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>, this  command  does  nothing  if
+                     <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> does not exist.
+
+              [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] <b>a</b><b>d</b><b>d</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> [<u>k</u><u>e</u><u>y</u><b>=</b>]<u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>...
+                     Adds  the  specified value or key-value pair to <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> in
+                     <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> in <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>. If <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> is a  map,  then  <u>k</u><u>e</u><u>y</u>  is  re‐
+                     quired, otherwise it is prohibited. If <u>k</u><u>e</u><u>y</u> already exists
+                     in  a  map column, then the current <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u> is not replaced
+                     (use the <b>s</b><b>e</b><b>t</b> command to replace an existing value).
+
+                     Without <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>, it is an error if  <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>  does  not
+                     exist.  With  <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>,  this  command does nothing if
+                     <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> does not exist.
+
+              [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] <b>r</b><b>e</b><b>m</b><b>o</b><b>v</b><b>e</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>...
+
+                     [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] <b>r</b><b>e</b><b>m</b><b>o</b><b>v</b><b>e</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> <u>k</u><u>e</u><u>y</u>...
+
+                     [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] <b>r</b><b>e</b><b>m</b><b>o</b><b>v</b><b>e</b>  <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>  <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>  <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>  <u>k</u><u>e</u><u>y</u><b>=</b><u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>...
+                     Removes the specified values or key-value pairs from <u>c</u><u>o</u><u>l</u><u>�</u>��
+                     <u>u</u><u>m</u><u>n</u> in <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> in <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>. The first form applies to columns
+                     that  are  not maps: each specified <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u> is removed from
+                     the column. The second  and  third  forms  apply  to  map
+                     columns:  if  only a <u>k</u><u>e</u><u>y</u> is specified, then any key-value
+                     pair with the given <u>k</u><u>e</u><u>y</u> is  removed,  regardless  of  its
+                     value; if a <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u> is given then a pair is removed only if
+                     both key and value match.
+
+                     It  is  not  an  error if the column does not contain the
+                     specified key or value or pair.
+
+                     Without <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>, it is an error if  <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>  does  not
+                     exist.  With  <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>,  this  command does nothing if
+                     <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> does not exist.
+
+              [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] <b>c</b><b>l</b><b>e</b><b>a</b><b>r</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>...
+                     Sets each <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> in <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> in <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> to the empty  set  or
+                     empty  map,  as appropriate. This command applies only to
+                     columns that are allowed to be empty.
+
+                     Without <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>, it is an error if  <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>  does  not
+                     exist.  With  <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>,  this  command does nothing if
+                     <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> does not exist.
+
+              [<b>-</b><b>-</b><b>i</b><b>d</b><b>=</b><b>(</b><b>@</b><u>n</u><u>a</u><u>m</u><u>e</u>|<u>u</u><u>u</u><u>i</u><u>d</u>)] <b>c</b><b>r</b><b>e</b><b>a</b><b>t</b><b>e</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>]<b>=</b><u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>...
+                     Creates a new record in <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> and sets the initial values
+                     of each <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>. Columns not explicitly set  will  receive
+                     their default values. Outputs the UUID of the new row.
+
+                     If  <b>@</b><u>n</u><u>a</u><u>m</u><u>e</u> is specified, then the UUID for the new row may
+                     be referred to by that name elsewhere in the  same  <b>\</b><b>*</b><b>(</b><b>P</b><b>N</b>
+                     invocation  in  contexts  where  a UUID is expected. Such
+                     references may precede or follow the <b>c</b><b>r</b><b>e</b><b>a</b><b>t</b><b>e</b> command.
+
+                     If a valid <u>u</u><u>u</u><u>i</u><u>d</u> is specified, then it is used as the UUID
+                     of the new row.
+
+                     Caution (ovs-vsctl as example)
+                            Records in the Open vSwitch database are  signifi‐
+                            cant only when they can be reached directly or in‐
+                            directly  from  the <b>O</b><b>p</b><b>e</b><b>n</b><b>_</b><b>v</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b> table. Except for
+                            records in the <b>Q</b><b>o</b><b>S</b> or <b>Q</b><b>u</b><b>e</b><b>u</b><b>e</b> tables,  records  that
+                            are  not reachable from the <b>O</b><b>p</b><b>e</b><b>n</b><b>_</b><b>v</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b> table are
+                            automatically  deleted  from  the  database.  This
+                            deletion  happens immediately, without waiting for
+                            additional <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>c</b><b>t</b><b>l</b> commands  or  other  database
+                            activity. Thus, a <b>c</b><b>r</b><b>e</b><b>a</b><b>t</b><b>e</b> command must generally be
+                            accompanied by additional commands <u>w</u><u>i</u><u>t</u><u>h</u><u>i</u><u>n</u> <u>t</u><u>h</u><u>e</u> <u>s</u><u>a</u><u>m</u><u>e</u>
+                            <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>c</b><b>t</b><b>l</b>  <u>i</u><u>n</u><u>v</u><u>o</u><u>c</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u> to add a chain of references
+                            to the newly created  record  from  the  top-level
+                            <b>O</b><b>p</b><b>e</b><b>n</b><b>_</b><b>v</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b>  record.  The  <b>E</b><b>X</b><b>A</b><b>M</b><b>P</b><b>L</b><b>E</b><b>S</b> section gives
+                            some examples that show how to do this.
+
+              [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] <b>d</b><b>e</b><b>s</b><b>t</b><b>r</b><b>o</b><b>y</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>...
+                     Deletes each specified <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> from <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>. Unless <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b>‐‐
+                     <b>i</b><b>s</b><b>t</b><b>s</b> is specified, each <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>s must exist.
+
+              <b>-</b><b>-</b><b>a</b><b>l</b><b>l</b> <b>d</b><b>e</b><b>s</b><b>t</b><b>r</b><b>o</b><b>y</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>
+                     Deletes all records from the <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>.
+
+                     Caution (ovs-vsctl as example)
+                            The <b>d</b><b>e</b><b>s</b><b>t</b><b>r</b><b>o</b><b>y</b> command is only useful for records  in
+                            the  <b>Q</b><b>o</b><b>S</b>  or <b>Q</b><b>u</b><b>e</b><b>u</b><b>e</b> tables. Records in other tables
+                            are automatically deleted from the  database  when
+                            they  become unreachable from the <b>O</b><b>p</b><b>e</b><b>n</b><b>_</b><b>v</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b> ta‐
+                            ble. This means that deleting the  last  reference
+                            to  a record is sufficient for deleting the record
+                            itself. For records in these  tables,  <b>d</b><b>e</b><b>s</b><b>t</b><b>r</b><b>o</b><b>y</b>  is
+                            silently  ignored.  See the <b>E</b><b>X</b><b>A</b><b>M</b><b>P</b><b>L</b><b>E</b><b>S</b> section below
+                            for more information.
+
+              <b>w</b><b>a</b><b>i</b><b>t</b><b>-</b><b>u</b><b>n</b><b>t</b><b>i</b><b>l</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> [<u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>]<b>=</b><u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>]...
+                     Waits until <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> contains a record  named  <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>  whose
+                     <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> equals <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u> or, if <u>k</u><u>e</u><u>y</u> is specified, whose <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>
+                     contains  a  <u>k</u><u>e</u><u>y</u>  with  the specified <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>. This command
+                     supports the same operators and semantics  described  for
+                     the <b>f</b><b>i</b><b>n</b><b>d</b> command above.
+
+                     If  no  <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>]<b>=</b><u>v</u><u>a</u><u>l</u><u>u</u><u>e</u> arguments are given, this com‐
+                     mand waits only until <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> exists.  If  more  than  one
+                     such  argument  is  given, the command waits until all of
+                     them are satisfied.
+
+                     Caution (ovs-vsctl as example)
+                            Usually <b>w</b><b>a</b><b>i</b><b>t</b><b>-</b><b>u</b><b>n</b><b>t</b><b>i</b><b>l</b> should be placed at the  begin‐
+                            ning  of a set of <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>c</b><b>t</b><b>l</b> commands. For example,
+                            <b>w</b><b>a</b><b>i</b><b>t</b><b>-</b><b>u</b><b>n</b><b>t</b><b>i</b><b>l</b> <b>b</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b> <b>b</b><b>r</b><b>0</b>  <b>-</b><b>-</b>  <b>g</b><b>e</b><b>t</b>  <b>b</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b>  <b>b</b><b>r</b><b>0</b>  <b>d</b><b>a</b><b>t</b><b>a</b>‐‐
+                            <b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>i</b><b>d</b> waits until a bridge named <b>b</b><b>r</b><b>0</b> is created,
+                            then  prints  its  <b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>i</b><b>d</b> column, whereas <b>g</b><b>e</b><b>t</b>
+                            <b>b</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b> <b>b</b><b>r</b><b>0</b> <b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>i</b><b>d</b> <b>-</b><b>-</b>  <b>w</b><b>a</b><b>i</b><b>t</b><b>-</b><b>u</b><b>n</b><b>t</b><b>i</b><b>l</b>  <b>b</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b>  <b>b</b><b>r</b><b>0</b>
+                            will  abort  if  no  bridge  named <b>b</b><b>r</b><b>0</b> exists when
+                            <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>c</b><b>t</b><b>l</b> initially connects to the database.
+
+                     Consider specifying <b>-</b><b>-</b><b>t</b><b>i</b><b>m</b><b>e</b><b>o</b><b>u</b><b>t</b><b>=</b><b>0</b> along with  <b>-</b><b>-</b><b>w</b><b>a</b><b>i</b><b>t</b><b>-</b><b>u</b><b>n</b><b>t</b><b>i</b><b>l</b>,
+                     to  prevent <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>c</b><b>t</b><b>l</b> from terminating after waiting only
+                     at most 5 seconds.
+
+              <b>c</b><b>o</b><b>m</b><b>m</b><b>e</b><b>n</b><b>t</b> [<u>a</u><u>r</u><u>g</u>]...
+                     This command has no effect on behavior, but any  database
+                     log  record  created by the command will include the com‐
+                     mand and its arguments.
+
+<b>R</b><b>E</b><b>M</b><b>O</b><b>T</b><b>E</b> <b>C</b><b>O</b><b>N</b><b>N</b><b>E</b><b>C</b><b>T</b><b>I</b><b>V</b><b>I</b><b>T</b><b>Y</b> <b>C</b><b>O</b><b>M</b><b>M</b><b>A</b><b>N</b><b>D</b><b>S</b>
+       <b>g</b><b>e</b><b>t</b><b>-</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>
+              Prints the configured connection(s).
+
+       <b>d</b><b>e</b><b>l</b><b>-</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>
+              Deletes the configured connection(s).
+
+       [<b>-</b><b>-</b><b>i</b><b>n</b><b>a</b><b>c</b><b>t</b><b>i</b><b>v</b><b>i</b><b>t</b><b>y</b><b>-</b><b>p</b><b>r</b><b>o</b><b>b</b><b>e</b><b>=</b><u>m</u><u>s</u><u>e</u><u>c</u><u>s</u>] <b>s</b><b>e</b><b>t</b><b>-</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b> <u>t</u><u>a</u><u>r</u><u>g</u><u>e</u><u>t</u>...
+              Sets the configured manager target or  targets.  Use  <b>-</b><b>-</b><b>i</b><b>n</b><b>a</b><b>c</b><b>t</b><b>i</b><b>v</b>‐‐
+              <b>i</b><b>t</b><b>y</b><b>-</b><b>p</b><b>r</b><b>o</b><b>b</b><b>e</b><b>=</b><u>m</u><u>s</u><u>e</u><u>c</u><u>s</u> to override the default idle connection inactiv‐
+              ity probe time. Use 0 to disable inactivity probes.
+
+<b>S</b><b>S</b><b>L</b> <b>C</b><b>O</b><b>N</b><b>F</b><b>I</b><b>G</b><b>U</b><b>R</b><b>A</b><b>T</b><b>I</b><b>O</b><b>N</b> <b>C</b><b>O</b><b>M</b><b>M</b><b>A</b><b>N</b><b>D</b><b>S</b>
+       <b>g</b><b>e</b><b>t</b><b>-</b><b>s</b><b>s</b><b>l</b>
+              Prints the SSL configuration.
+
+       <b>d</b><b>e</b><b>l</b><b>-</b><b>s</b><b>s</b><b>l</b>
+              Deletes the current SSL configuration.
+
+       [<b>-</b><b>-</b><b>b</b><b>o</b><b>o</b><b>t</b><b>s</b><b>t</b><b>r</b><b>a</b><b>p</b>] <b>s</b><b>e</b><b>t</b><b>-</b><b>s</b><b>s</b><b>l</b> <u>p</u><u>r</u><u>i</u><u>v</u><u>a</u><u>t</u><u>e</u><u>-</u><u>k</u><u>e</u><u>y</u> <u>c</u><u>e</u><u>r</u><u>t</u><u>i</u><u>f</u><u>i</u><u>c</u><u>a</u><u>t</u><u>e</u> <u>c</u><u>a</u><u>-</u><u>c</u><u>e</u><u>r</u><u>t</u> [<u>s</u><u>s</u><u>l</u><u>-</u><u>p</u><u>r</u><u>o</u><u>t</u><u>o</u><u>c</u><u>o</u><u>l</u><u>-</u>
+       <u>l</u><u>i</u><u>s</u><u>t</u> [<u>s</u><u>s</u><u>l</u><u>-</u><u>c</u><u>i</u><u>p</u><u>h</u><u>e</u><u>r</u><u>-</u><u>l</u><u>i</u><u>s</u><u>t</u>]]
+              Sets the SSL configuration.
+
+<b>O</b><b>P</b><b>T</b><b>I</b><b>O</b><b>N</b><b>S</b>
+       <b>-</b><b>-</b><b>d</b><b>b</b> <u>d</u><u>a</u><u>t</u><u>a</u><u>b</u><u>a</u><u>s</u><u>e</u>
+              The  OVSDB database remote to contact. If the <b>O</b><b>V</b><b>N</b><b>_</b><b>I</b><b>C</b><b>_</b><b>S</b><b>B</b><b>_</b><b>D</b><b>B</b> envi‐
+              ronment variable is set, its value is used as the default.  Oth‐
+              erwise, the default is <b>u</b><b>n</b><b>i</b><b>x</b><b>:</b><b>/</b><b>o</b><b>v</b><b>n</b><b>_</b><b>i</b><b>c</b><b>_</b><b>s</b><b>b</b><b>_</b><b>d</b><b>b</b><b>.</b><b>s</b><b>o</b><b>c</b><b>k</b>, but this default
+              is  unlikely to be useful outside of single-machine OVN test en‐
+              vironments.
+
+       <b>-</b><b>-</b><b>l</b><b>e</b><b>a</b><b>d</b><b>e</b><b>r</b><b>-</b><b>o</b><b>n</b><b>l</b><b>y</b>
+       <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>l</b><b>e</b><b>a</b><b>d</b><b>e</b><b>r</b><b>-</b><b>o</b><b>n</b><b>l</b><b>y</b>
+            By default, or with <b>-</b><b>-</b><b>l</b><b>e</b><b>a</b><b>d</b><b>e</b><b>r</b><b>-</b><b>o</b><b>n</b><b>l</b><b>y</b>, when the database server  is  a
+            clustered database, <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b><b>-</b><b>s</b><b>b</b><b>c</b><b>t</b><b>l</b> will avoid servers other than the
+            cluster leader. This ensures that any data that <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b><b>-</b><b>s</b><b>b</b><b>c</b><b>t</b><b>l</b> reads
+            and  reports  is  up-to-date.  With <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>l</b><b>e</b><b>a</b><b>d</b><b>e</b><b>r</b><b>-</b><b>o</b><b>n</b><b>l</b><b>y</b>, <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b><b>-</b><b>s</b><b>b</b><b>c</b><b>t</b><b>l</b>
+            will use any server in the cluster, which means that for read-only
+            transactions it can report and act  on  stale  data  (transactions
+            that   modify   the  database  are  always  serialized  even  with
+            <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>l</b><b>e</b><b>a</b><b>d</b><b>e</b><b>r</b><b>-</b><b>o</b><b>n</b><b>l</b><b>y</b>). Refer to <b>U</b><b>n</b><b>d</b><b>e</b><b>r</b><b>s</b><b>t</b><b>a</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> <b>C</b><b>l</b><b>u</b><b>s</b><b>t</b><b>e</b><b>r</b>  <b>C</b><b>o</b><b>n</b><b>s</b><b>i</b><b>s</b><b>t</b><b>e</b><b>n</b><b>c</b><b>y</b>  in
+            <b>o</b><b>v</b><b>s</b><b>d</b><b>b</b>(7) for more information.
+
+<b>L</b><b>O</b><b>G</b><b>G</b><b>I</b><b>N</b><b>G</b> <b>O</b><b>P</b><b>T</b><b>I</b><b>O</b><b>N</b><b>S</b>
+       <b>-</b><b>v</b>[<u>s</u><u>p</u><u>e</u><u>c</u>]
+       <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>b</b><b>o</b><b>s</b><b>e</b><b>=</b>[<u>s</u><u>p</u><u>e</u><u>c</u>]
+            Sets  logging  levels.  Without  any  <u>s</u><u>p</u><u>e</u><u>c</u>, sets the log level for
+            every module and destination to <b>d</b><b>b</b><b>g</b>. Otherwise, <u>s</u><u>p</u><u>e</u><u>c</u> is a list  of
+            words separated by spaces or commas or colons, up to one from each
+            category below:
+
+            •      A  valid module name, as displayed by the <b>v</b><b>l</b><b>o</b><b>g</b><b>/</b><b>l</b><b>i</b><b>s</b><b>t</b> command
+                   on <b>o</b><b>v</b><b>s</b><b>-</b><b>a</b><b>p</b><b>p</b><b>c</b><b>t</b><b>l</b>(8), limits the log level change to the speci‐
+                   fied module.
+
+            •      <b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b>, <b>c</b><b>o</b><b>n</b><b>s</b><b>o</b><b>l</b><b>e</b>, or <b>f</b><b>i</b><b>l</b><b>e</b>, to limit the log level change  to
+                   only  to  the system log, to the console, or to a file, re‐
+                   spectively. (If <b>-</b><b>-</b><b>d</b><b>e</b><b>t</b><b>a</b><b>c</b><b>h</b> is specified,  the  daemon  closes
+                   its  standard  file  descriptors, so logging to the console
+                   will have no effect.)
+
+                   On Windows platform, <b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b> is accepted as a  word  and  is
+                   only useful along with the <b>-</b><b>-</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>-</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> option (the word
+                   has no effect otherwise).
+
+            •      <b>o</b><b>f</b><b>f</b>,  <b>e</b><b>m</b><b>e</b><b>r</b>,  <b>e</b><b>r</b><b>r</b>,  <b>w</b><b>a</b><b>r</b><b>n</b>,  <b>i</b><b>n</b><b>f</b><b>o</b>,  or <b>d</b><b>b</b><b>g</b>, to control the log
+                   level. Messages of the given severity  or  higher  will  be
+                   logged,  and  messages  of  lower severity will be filtered
+                   out. <b>o</b><b>f</b><b>f</b> filters out all messages. See <b>o</b><b>v</b><b>s</b><b>-</b><b>a</b><b>p</b><b>p</b><b>c</b><b>t</b><b>l</b>(8) for  a
+                   definition of each log level.
+
+            Case is not significant within <u>s</u><u>p</u><u>e</u><u>c</u>.
+
+            Regardless  of the log levels set for <b>f</b><b>i</b><b>l</b><b>e</b>, logging to a file will
+            not take place unless <b>-</b><b>-</b><b>l</b><b>o</b><b>g</b><b>-</b><b>f</b><b>i</b><b>l</b><b>e</b> is also specified (see below).
+
+            For compatibility with older versions of OVS, <b>a</b><b>n</b><b>y</b> is accepted as a
+            word but has no effect.
+
+       <b>-</b><b>v</b>
+       <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>b</b><b>o</b><b>s</b><b>e</b>
+            Sets the maximum logging verbosity  level,  equivalent  to  <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b>‐‐
+            <b>b</b><b>o</b><b>s</b><b>e</b><b>=</b><b>d</b><b>b</b><b>g</b>.
+
+       <b>-</b><b>v</b><b>P</b><b>A</b><b>T</b><b>T</b><b>E</b><b>R</b><b>N</b><b>:</b><u>d</u><u>e</u><u>s</u><u>t</u><u>i</u><u>n</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u><b>:</b><u>p</u><u>a</u><u>t</u><u>t</u><u>e</u><u>r</u><u>n</u>
+       <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>b</b><b>o</b><b>s</b><b>e</b><b>=</b><b>P</b><b>A</b><b>T</b><b>T</b><b>E</b><b>R</b><b>N</b><b>:</b><u>d</u><u>e</u><u>s</u><u>t</u><u>i</u><u>n</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u><b>:</b><u>p</u><u>a</u><u>t</u><u>t</u><u>e</u><u>r</u><u>n</u>
+            Sets  the log pattern for <u>d</u><u>e</u><u>s</u><u>t</u><u>i</u><u>n</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u> to <u>p</u><u>a</u><u>t</u><u>t</u><u>e</u><u>r</u><u>n</u>. Refer to <b>o</b><b>v</b><b>s</b><b>-</b><b>a</b><b>p</b>‐‐
+            <b>p</b><b>c</b><b>t</b><b>l</b>(8) for a description of the valid syntax for <u>p</u><u>a</u><u>t</u><u>t</u><u>e</u><u>r</u><u>n</u>.
+
+       <b>-</b><b>v</b><b>F</b><b>A</b><b>C</b><b>I</b><b>L</b><b>I</b><b>T</b><b>Y</b><b>:</b><u>f</u><u>a</u><u>c</u><u>i</u><u>l</u><u>i</u><u>t</u><u>y</u>
+       <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>b</b><b>o</b><b>s</b><b>e</b><b>=</b><b>F</b><b>A</b><b>C</b><b>I</b><b>L</b><b>I</b><b>T</b><b>Y</b><b>:</b><u>f</u><u>a</u><u>c</u><u>i</u><u>l</u><u>i</u><u>t</u><u>y</u>
+            Sets the RFC5424 facility of the log message. <u>f</u><u>a</u><u>c</u><u>i</u><u>l</u><u>i</u><u>t</u><u>y</u> can be  one
+            of <b>k</b><b>e</b><b>r</b><b>n</b>, <b>u</b><b>s</b><b>e</b><b>r</b>, <b>m</b><b>a</b><b>i</b><b>l</b>, <b>d</b><b>a</b><b>e</b><b>m</b><b>o</b><b>n</b>, <b>a</b><b>u</b><b>t</b><b>h</b>, <b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b>, <b>l</b><b>p</b><b>r</b>, <b>n</b><b>e</b><b>w</b><b>s</b>, <b>u</b><b>u</b><b>c</b><b>p</b>, <b>c</b><b>l</b><b>o</b><b>c</b><b>k</b>,
+            <b>f</b><b>t</b><b>p</b>,  <b>n</b><b>t</b><b>p</b>,  <b>a</b><b>u</b><b>d</b><b>i</b><b>t</b>,  <b>a</b><b>l</b><b>e</b><b>r</b><b>t</b>, <b>c</b><b>l</b><b>o</b><b>c</b><b>k</b><b>2</b>, <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>0</b>, <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>1</b>, <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>2</b>, <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>3</b>,
+            <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>4</b>, <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>5</b>, <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>6</b> or <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>7</b>. If this option is not specified,
+            <b>d</b><b>a</b><b>e</b><b>m</b><b>o</b><b>n</b> is used as the default for the local system syslog and  <b>l</b><b>o</b>‐‐
+            <b>c</b><b>a</b><b>l</b><b>0</b>  is  used  while sending a message to the target provided via
+            the <b>-</b><b>-</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>-</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> option.
+
+       <b>-</b><b>-</b><b>l</b><b>o</b><b>g</b><b>-</b><b>f</b><b>i</b><b>l</b><b>e</b>[<b>=</b><u>f</u><u>i</u><u>l</u><u>e</u>]
+            Enables logging to a file. If <u>f</u><u>i</u><u>l</u><u>e</u> is specified, then it  is  used
+            as the exact name for the log file. The default log file name used
+            if <u>f</u><u>i</u><u>l</u><u>e</u> is omitted is <b>/</b><b>u</b><b>s</b><b>r</b><b>/</b><b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>/</b><b>v</b><b>a</b><b>r</b><b>/</b><b>l</b><b>o</b><b>g</b><b>/</b><b>o</b><b>v</b><b>n</b><b>/</b><u>p</u><u>r</u><u>o</u><u>g</u><u>r</u><u>a</u><u>m</u><b>.</b><b>l</b><b>o</b><b>g</b>.
+
+       <b>-</b><b>-</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>-</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b><b>=</b><u>h</u><u>o</u><u>s</u><u>t</u><b>:</b><u>p</u><u>o</u><u>r</u><u>t</u>
+            Send  syslog messages to UDP <u>p</u><u>o</u><u>r</u><u>t</u> on <u>h</u><u>o</u><u>s</u><u>t</u>, in addition to the sys‐
+            tem syslog. The <u>h</u><u>o</u><u>s</u><u>t</u> must be a numerical IP address, not  a  host‐
+            name.
+
+       <b>-</b><b>-</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>-</b><b>m</b><b>e</b><b>t</b><b>h</b><b>o</b><b>d</b><b>=</b><u>m</u><u>e</u><u>t</u><u>h</u><u>o</u><u>d</u>
+            Specify  <u>m</u><u>e</u><u>t</u><u>h</u><u>o</u><u>d</u>  as  how  syslog messages should be sent to syslog
+            daemon. The following forms are supported:
+
+            •      <b>l</b><b>i</b><b>b</b><b>c</b>, to use the libc <b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>(</b><b>)</b> function. Downside of  using
+                   this  options  is that libc adds fixed prefix to every mes‐
+                   sage before it is actually sent to the syslog  daemon  over
+                   <b>/</b><b>d</b><b>e</b><b>v</b><b>/</b><b>l</b><b>o</b><b>g</b> UNIX domain socket.
+
+            •      <b>u</b><b>n</b><b>i</b><b>x</b><b>:</b><u>f</u><u>i</u><u>l</u><u>e</u>, to use a UNIX domain socket directly. It is pos‐
+                   sible to specify arbitrary message format with this option.
+                   However,  <b>r</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>d</b>  <b>8</b><b>.</b><b>9</b>  and  older versions use hard coded
+                   parser function anyway that limits UNIX domain socket  use.
+                   If  you  want  to  use  arbitrary message format with older
+                   <b>r</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>d</b> versions, then use UDP socket to localhost IP  ad‐
+                   dress instead.
+
+            •      <b>u</b><b>d</b><b>p</b><b>:</b><u>i</u><u>p</u><b>:</b><u>p</u><u>o</u><u>r</u><u>t</u>,  to  use  a UDP socket. With this method it is
+                   possible to use arbitrary message format  also  with  older
+                   <b>r</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>d</b>.  When sending syslog messages over UDP socket ex‐
+                   tra precaution needs to be taken into account, for example,
+                   syslog daemon needs to be configured to listen on the spec‐
+                   ified UDP port, accidental iptables rules could  be  inter‐
+                   fering  with  local syslog traffic and there are some secu‐
+                   rity considerations that apply to UDP sockets, but  do  not
+                   apply to UNIX domain sockets.
+
+            •      <b>n</b><b>u</b><b>l</b><b>l</b>, to discard all messages logged to syslog.
+
+            The  default is taken from the <b>O</b><b>V</b><b>S</b><b>_</b><b>S</b><b>Y</b><b>S</b><b>L</b><b>O</b><b>G</b><b>_</b><b>M</b><b>E</b><b>T</b><b>H</b><b>O</b><b>D</b> environment vari‐
+            able; if it is unset, the default is <b>l</b><b>i</b><b>b</b><b>c</b>.
+
+<b>T</b><b>A</b><b>B</b><b>L</b><b>E</b> <b>F</b><b>O</b><b>R</b><b>M</b><b>A</b><b>T</b><b>T</b><b>I</b><b>N</b><b>G</b> <b>O</b><b>P</b><b>T</b><b>I</b><b>O</b><b>N</b><b>S</b>
+       These options control the format of output from the <b>l</b><b>i</b><b>s</b><b>t</b> and <b>f</b><b>i</b><b>n</b><b>d</b>  com‐
+       mands.
+
+              <b>-</b><b>f</b> <u>f</u><u>o</u><u>r</u><u>m</u><u>a</u><u>t</u>
+              <b>-</b><b>-</b><b>f</b><b>o</b><b>r</b><b>m</b><b>a</b><b>t</b><b>=</b><u>f</u><u>o</u><u>r</u><u>m</u><u>a</u><u>t</u>
+                   Sets  the  type of table formatting. The following types of
+                   <u>f</u><u>o</u><u>r</u><u>m</u><u>a</u><u>t</u> are available:
+
+                   <b>t</b><b>a</b><b>b</b><b>l</b><b>e</b>  2-D text tables with aligned columns.
+
+                   <b>l</b><b>i</b><b>s</b><b>t</b> (default)
+                          A list with one column per line and  rows  separated
+                          by a blank line.
+
+                   <b>h</b><b>t</b><b>m</b><b>l</b>   HTML tables.
+
+                   <b>c</b><b>s</b><b>v</b>    Comma-separated values as defined in RFC 4180.
+
+                   <b>j</b><b>s</b><b>o</b><b>n</b>   JSON  format as defined in RFC 4627. The output is a
+                          sequence of JSON objects, each of which  corresponds
+                          to  one  table.  Each  JSON object has the following
+                          members with the noted values:
+
+                          <b>c</b><b>a</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b>
+                                 The table’s caption. This member  is  omitted
+                                 if the table has no caption.
+
+                          <b>h</b><b>e</b><b>a</b><b>d</b><b>i</b><b>n</b><b>g</b><b>s</b>
+                                 An  array  with one element per table column.
+                                 Each array element is  a  string  giving  the
+                                 corresponding column’s heading.
+
+                          <b>d</b><b>a</b><b>t</b><b>a</b>   An array with one element per table row. Each
+                                 element is also an array with one element per
+                                 table  column.  The  elements of this second-
+                                 level array are the cells that constitute the
+                                 table. Cells that  represent  OVSDB  data  or
+                                 data  types  are  expressed in the format de‐
+                                 scribed in  the  OVSDB  specification;  other
+                                 cells are simply expressed as text strings.
+
+              <b>-</b><b>d</b> <u>f</u><u>o</u><u>r</u><u>m</u><u>a</u><u>t</u>
+              <b>-</b><b>-</b><b>d</b><b>a</b><b>t</b><b>a</b><b>=</b><u>f</u><u>o</u><u>r</u><u>m</u><u>a</u><u>t</u>
+                   Sets  the  formatting for cells within output tables unless
+                   the table format is set to <b>j</b><b>s</b><b>o</b><b>n</b>, in which case <b>j</b><b>s</b><b>o</b><b>n</b> format‐
+                   ting is always used when formatting  cells.  The  following
+                   types of <u>f</u><u>o</u><u>r</u><u>m</u><u>a</u><u>t</u> are available:
+
+                   <b>s</b><b>t</b><b>r</b><b>i</b><b>n</b><b>g</b> (default)
+                          The  simple  format described in the <b>D</b><b>a</b><b>t</b><b>a</b><b>b</b><b>a</b><b>s</b><b>e</b> <b>V</b><b>a</b><b>l</b><b>u</b><b>e</b><b>s</b>
+                          section of <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>c</b><b>t</b><b>l</b>(8).
+
+                   <b>b</b><b>a</b><b>r</b><b>e</b>   The simple format with punctuation stripped off:  <b>[</b><b>]</b>
+                          and  <b>{</b><b>}</b>  are  omitted  around  sets, maps, and empty
+                          columns, items within sets and maps are  space-sepa‐
+                          rated, and strings are never quoted. This format may
+                          be easier for scripts to parse.
+
+                   <b>j</b><b>s</b><b>o</b><b>n</b>   The RFC 4627 JSON format as described above.
+
+              <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>h</b><b>e</b><b>a</b><b>d</b><b>i</b><b>n</b><b>g</b><b>s</b>
+                   This  option  suppresses the heading row that otherwise ap‐
+                   pears in the first row of table output.
+
+              <b>-</b><b>-</b><b>p</b><b>r</b><b>e</b><b>t</b><b>t</b><b>y</b>
+                   By default, JSON in output is printed as compactly as  pos‐
+                   sible. This option causes JSON in output to be printed in a
+                   more  readable  fashion. Members of objects and elements of
+                   arrays are printed one per line, with indentation.
+
+                   This option does not affect JSON in tables, which is always
+                   printed compactly.
+
+              <b>-</b><b>-</b><b>b</b><b>a</b><b>r</b><b>e</b>
+                   Equivalent to <b>-</b><b>-</b><b>f</b><b>o</b><b>r</b><b>m</b><b>a</b><b>t</b><b>=</b><b>l</b><b>i</b><b>s</b><b>t</b> <b>-</b><b>-</b><b>d</b><b>a</b><b>t</b><b>a</b><b>=</b><b>b</b><b>a</b><b>r</b><b>e</b> <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>h</b><b>e</b><b>a</b><b>d</b><b>i</b><b>n</b><b>g</b><b>s</b>.
+
+   <b>P</b><b>K</b><b>I</b> <b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+       PKI configuration is required to use SSL  for  the  connection  to  the
+       database.
+
+              <b>-</b><b>p</b> <u>p</u><u>r</u><u>i</u><u>v</u><u>k</u><u>e</u><u>y</u><u>.</u><u>p</u><u>e</u><u>m</u>
+              <b>-</b><b>-</b><b>p</b><b>r</b><b>i</b><b>v</b><b>a</b><b>t</b><b>e</b><b>-</b><b>k</b><b>e</b><b>y</b><b>=</b><u>p</u><u>r</u><u>i</u><u>v</u><u>k</u><u>e</u><u>y</u><u>.</u><u>p</u><u>e</u><u>m</u>
+                   Specifies  a  PEM  file  containing the private key used as
+                   identity for outgoing SSL connections.
+
+              <b>-</b><b>c</b> <u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+              <b>-</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>i</b><b>f</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b><b>=</b><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+                   Specifies a PEM file containing a certificate  that  certi‐
+                   fies the private key specified on <b>-</b><b>p</b> or <b>-</b><b>-</b><b>p</b><b>r</b><b>i</b><b>v</b><b>a</b><b>t</b><b>e</b><b>-</b><b>k</b><b>e</b><b>y</b> to be
+                   trustworthy. The certificate must be signed by the certifi‐
+                   cate  authority  (CA) that the peer in SSL connections will
+                   use to verify it.
+
+              <b>-</b><b>C</b> <u>c</u><u>a</u><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+              <b>-</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>=</b><u>c</u><u>a</u><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+                   Specifies a PEM file containing the CA certificate for ver‐
+                   ifying certificates presented to this program by SSL peers.
+                   (This may be the same certificate that  SSL  peers  use  to
+                   verify the certificate specified on <b>-</b><b>c</b> or <b>-</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>i</b><b>f</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b>, or
+                   it  may  be a different one, depending on the PKI design in
+                   use.)
+
+              <b>-</b><b>C</b> <b>n</b><b>o</b><b>n</b><b>e</b>
+              <b>-</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>=</b><b>n</b><b>o</b><b>n</b><b>e</b>
+                   Disables verification  of  certificates  presented  by  SSL
+                   peers.  This  introduces  a security risk, because it means
+                   that certificates cannot be verified to be those  of  known
+                   trusted hosts.
+
+              <b>-</b><b>-</b><b>b</b><b>o</b><b>o</b><b>t</b><b>s</b><b>t</b><b>r</b><b>a</b><b>p</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>=</b><u>c</u><u>a</u><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+                     When  <u>c</u><u>a</u><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>  exists, this option has the same effect
+                     as <b>-</b><b>C</b> or <b>-</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b>. If it does not exist, then  the  exe‐
+                     cutable  will  attempt  to obtain the CA certificate from
+                     the SSL peer on its first SSL connection and save  it  to
+                     the  named PEM file. If it is successful, it will immedi‐
+                     ately drop the connection and reconnect, and from then on
+                     all SSL connections must be authenticated by  a  certifi‐
+                     cate signed by the CA certificate thus obtained.
+
+                     This  option  exposes the SSL connection to a man-in-the-
+                     middle attack obtaining the initial CA  certificate,  but
+                     it may be useful for bootstrapping.
+
+                     This  option  is only useful if the SSL peer sends its CA
+                     certificate as part of the SSL certificate chain. The SSL
+                     protocol does not require the server to send the CA  cer‐
+                     tificate.
+
+                     This option is mutually exclusive with <b>-</b><b>C</b> and <b>-</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b>.
+
+   <b>O</b><b>t</b><b>h</b><b>e</b><b>r</b> <b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+       <b>-</b><b>h</b>
+       <b>-</b><b>-</b><b>h</b><b>e</b><b>l</b><b>p</b>
+            Prints a brief help message to the console.
+
+       <b>-</b><b>V</b>
+       <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>s</b><b>i</b><b>o</b><b>n</b>
+            Prints version information to the console.
+
+OVN 23.06.3                      ovn-ic-sbctl                  <u>o</u><u>v</u><u>n</u><u>-</u><u>i</u><u>c</u><u>-</u><u>s</u><u>b</u><u>c</u><u>t</u><u>l</u>(8)
+</pre></body></html>
diff --git a/support/dist-docs-branch-23.06/ovn-ic-sbctl.8.pdf b/support/dist-docs-branch-23.06/ovn-ic-sbctl.8.pdf
new file mode 100644
index 0000000000000000000000000000000000000000..7b727f340d0dd78c63faaa195ff0f749a438465d
GIT binary patch
literal 53219
zcma&tQ*<UUyD;q9wr$&Xr?zd|wr$(CZFh=kJ5O!f{O8?k|KG`bvX7G7$x6<$a^+6Q
z6~!dznHkt%$R{oniebpfrS07vOpIKu9PD|B9F1Hp87*9h=oRUS=uK6GCB&8gm7)%I
z|2nLUt!%Aay=2YY&20JqO+ZBN^uOce6%>WlRK)*{6cJVxl_H{d5ffLJ78U1rG&T2d
zwsJN57jbblb#Qa#7yMUMaC3EZbCs~NHTzHV|FjYeI}sC+gRwOXA0MNvnZ1RpB@xHJ
zh%)29SzOJWi5Mkpja<#d%uF0i%>)EsTwI;ajO<`MbIY^=&HxD%zcmfnE15yGC_~2y
zfjSdjtqNoACNl@SsVX!n1aVuTKnS6!Sx!$u@t@9$lW<@%-ul1yA-W*u<rN=~XUp(@
zhCvHjLO+iSb9*F)oS1|RouBl}f*g>~U#nx$+ueV4eP4J=AT@em+ag=&OttV@YDU7=
zwi)WbL*#Dt_av2)COi+UefHREtXt04a*E0^`+f9I`HMFZ9|CJSJab=jDKF2jhkb62
zZZI#=`{tHM8KcGeP$w&H7&c~_xzn6GB<W}yl?pXJ3nZvz9=VAbSEO?f^av&Pp44(n
z{n1*~Qm4T)6fV8^?ovpWaQl4iYvoobj(eGI4~R@?2?Sa>*E%}gYt3FRSC!Z<w@BbW
z11ZBa+(2`O7{(ks0`-Iw#q|MSL)GR;Tjh2*P1x1#Mt(jx&lk@twj1tq2xcnVks+24
z?l{%mIP)<(_5R+Tye!6JDuNlueQz&EH3r+go~&+tx+HlS0{%(ETwncvHwE_}xt^AP
zpRJu2L0g7)f(zS&c$dyRE<YLVO;GF)$Y~sa%%98o432fQEO!z5ZJn*@Z_pRR3CO$L
zNbt_uj*trOg>_ZmeEdz067@n*5uGSm$RF@}e;;GiVAR)}54802y3)I<*$$1en+~r7
z=Y2As30H?qhW81Il?M5hz$o62H|@3o`_p7OLmFo!C@|pr{XVsDc~+CbSfDH5bD(RE
zab8^&4%uE4`t(4OD*XX+qiUx2MeS`>-DEOVjb8&1{t-2TOf)Ls$X!<qx9^V=HvaM*
z1I~iwHQBdCbfw{y{-K4H1;y*r;<wS#d@a_+KVl-4J+0lOHw=e&4rDymGMIqk!#KsU
zMqszpDtn1xw12hxJL-bqy>6$YRp)d@?1Z^}rF=^dkm`6!b5F08)?ucWVS|0V^J9z4
z{NR=S;iZ45Qixm7FbGM^&wl)2Rp|R811U6!YP+RoJn<JA)ktmLt+Q8WkBr{Ve7(7+
zE))hHkwnfuDQZTqClaW*QHsI|+C(rad6<Z}EX-pW2)G0ktMX+dW{d3#28{h+ECb)9
zKHq5t$_Am>`|>Y1pTVK@<(9fmv^!wM;!l(uz|QAWSDII&&|47qOanc$8&B05{=?a@
ztSI2Dp6nj>zUEou>@_CgI~aLfSK_$288tQ#7;1|hMrfU7x<rx&CIKZnP83<86<RzW
zNA}38+^&;Fp`>w9VT6e#=wrJ|l6ldj>G}ALu7y6HMUY{5bO?FD_$;HQFOfL~d$|RX
z@^>Eg_YA^S``<h>{hY{V_m?ajWQeYU!#$IyjnJN*`U;LaxF=!`sr@Vw6d_euLrC|k
zSQ*x{1uSM5l97`WW(mH~QK&g;DCw#9?(PlJ$qWC}Ut{T4@%H!F7u-YEbP@(;Uo;X_
zN?7H+B+}j;gWY_`NgDQ{kL2s+f_BeKV8Kzx$cG{DTU~ArrtHH?u0RZ=lg-(M<)wpp
zr<(L|hpI~!i4-PdJ?IEVau59kmr6`T@N_DdN}<~8>wfaki+$0I?`IdIfk8QfM-k}J
zEMBALQ*AHCu)Dw!YAz%77~+u^Cz~l)TFq;zZ|$xQceu{a%k2XAL=@&>y7q6ZPU_W(
zKfPjNXbhWhiBD#CaWlt8@oXI1DL{GD=uDP4IWzb(^?Xpff$QZ<&!oQ2#62~N#o5wb
zkJ9hfBou(bW@6-sx+IJJ{ZyFK)EH60c$R~=KCVKB=V~Oe#TjYCWqgUBBE($|i`r`B
zaQG5i^>LH}KyUNVd?X#bc|AXNa4L|2Cm?HC^cqqNDQ>kmG2eqv%(T|`QCg9Gq@?I?
z?s@ZauRUJ*mqpYbvdfSImArw2BbK1Gqc&gcVG&uA5j7bI?$IXobXfN~po1~LNe?ij
zZT6MCbwxWU+rYSHV}`jOYuXk+b$AY#Ua5r9{iwQt#Ata*{My}@FZB9*;aum6c4m^&
zMc6^=v*_{!IETQckMcXmcvE@)yOWqF2VVZNY8E_;cra-^7R;=^imV))P~}4~72+ZY
zhhop56dFY$oRz0aON0?kGE3CBn{?GqLLs5T>dto5RX`TSa3tWfOpu#OrpX%IcsO5t
ziwe6%9c1dCKc0TVkql){!jalA3tG!pvYCXTh&ZLn&t-K<^q5lFVK0J9zCY+jGSf?_
zjTD2Nbc)=Cj-Pk#YnNa(Edq{&BuQO>(zjPwZE|i8WzQ&}v${XnQTs&RobN>y%;({K
z1U3i?<`mysV%&t|j!b^j{cPB5?96sQnd=-dfcbPMj5S=D*&cus$ISyS=}kHp<QzR@
zGX@Dy@~344I$l`fNwNvp&35XfM@3HtQ%P#K2;mNEQ47B&=x<0ef)<M!rjqpjFbA7b
zEz9kJ1Ri7>S?cuHNUu0`<m@2`bWbwJ1o4wtIwIF-EQ{AlE?NttscSYhGSrER%af+^
zL0ZF{4Q5I<J7d`zg_QD@Qtq4d`ROp3@>du{CR&%AjQ!<UHKtqwU4CHpNIPFH2d-s6
z@omwqX7_aWq^CWQVfG8MkToQHA+`IWm{<`tjsBY>ee3nQ*{6U3UT2I`7jWGn5wO@7
zJK17fV9b1qjpHPMj%n?7r(2mG_oCIgA0+0mpD49dz6Jim=ggaWGtsP)WG~e!b%%X=
zs^3|(urzJ3KHxy`7Hv9^<I?<(@SD5gpE(V1HeqIIe^AKHIWqWM%d&jif%j$kX$69c
z?Fu<@R*H=7xYj(pWTlX@`PZa*ss&cHNCdhz9#d0U4U}M-#cHnP+bk=#9eOTyO+|4t
zKNOcCNZ;@?s>fCXizOMKjMRyWgkAG|5!q~kaCgNPnd$upB}F)^GBjda7my(~P@cuQ
z*Ogs#TTQ#e811O))|=5JZIvuL?+@wGB-N1N$z+gkkEq_2K4xK;A=Dd)=}jxbS)p;C
zeI)Tq3-t{>AEF6Rn)<&&FZ1hTokgUrEg!c4hvmp(>K~Vd4A1^51wVE>CJ}^6vlKBz
z0*bEUJEoDIuH_q&8S4sCY`dQZotJUytG2atRb%xDj6W^Mu9^qWQ4odK?WpzYu@k;K
z?QM!6;b_I&GnP3u^G!UCK0ag&mR^unAZ)*(F6wI_T>D%UEwXqu@Vb|KF*AkU8BrW0
zCAsyT{-Sp}&?V0NzVv0`LRbAU4~<=MlSnU!S#E=jmuVAPzJ`-N?-GT1T!0FKC{6NO
z5dmsfAad?@3q$DPZRwC}v+AIla1LT<#`8n=lWc?)Ekn$s0Vq!C7eF#&WH*-!WHjQC
zow{@gd_1jWW2PztC71Rc2Rc<ESO2l6q@}B_YnEJ_XlsQ@6O>+N9$8)AgTN*>1J&L=
znS+0vBY=Mv`b+4Omrc(`f)-|d!a1o%J!|<1Ca=i&EQ1ZvH?Rs~RBU$F360`6peQBZ
z`{2ZgBZqbRT$BEIBdFsgnhyj4LFZwNVqWPWDY%^-aYyRXU&dP8Dpk6nZmjbo894hj
z+WbPQhM`EkZ;WtgrNY-Q)R6;rporj2L~=$FMC6J?Q@_7nARI?HHTEmM??o!SUYx#1
zm!P!&EBdemX`0<5QB49LW>FJB>(*(fpz0?`#T0be{%a(kY6aA7fy^9Tt|qRIod~9@
zEjO-{?WQGw*t4Y$x`J)O;8*mjM&)Ch6Z!$f`r~qrMuv%6#esi+VY-%Do?F*jNyCgk
zV=WT<4x|{OR?RBoD}HkrgkE3<jhyp&J!13xqT4BM#U&JXc5yz0TXZzwkmQD+8^Wnn
z;#_C@8?a-(%x7-_euG&J;VAXCo>#1bq{lKPU0H>qC%u+VW>}G8>k2CUim5B{LACn#
zsW71>X~?|M@Ip^8*G6m1;O91Vj1P`5O|^#ZaXB+#IYn>2<E|d<WkcQentKQ0#VnoT
zMOYCcCpgBnPsR%I@sTg*j_X|9vSNM49eMdAflq9N6T4bc*jCJnm9?T!uP*;<!nX7p
zV5S(`0w?=B^3)qY*iJRUWOP~!ekd;l#Zo{LEqddH@bsKXLBL>RQEQ^AZac?52wXhL
zhpfTkFI+W)M9AdHlE(9g{masY4F8{P5xs1HpSihD06_2)4Ne=EQ46~asahEMS5IAC
zM_o(B*B{OJI%}*VtP}g1UoN2CQ!^_3s**x-+2|!}uE%6rg*l=qb=K;OqzX1hY}NBm
z`iq{%icRMUN8vb~^M1J3OK`54cv7UXgY)63T<Lx^tFfa+8&tDTlMuP!?nLsM%~xld
z8l9&h#kLU(I%@Tc@hbLD_i5*jwmn6*5C!~pIa$uLDuON6#}9<1-bFZ!LQ!-o1;7(g
z56vE!_qC0Cg0lUBRr78oW`<}ee<a{L87bjZCZ$8wsGBHubc*gn1cWNRb9j^<v+od`
zGp!|lJrawq`HT&TIDgaoktGLd(h#&?eiT|252!J{bbs3!4@d5=DCBj0l{UzG@mcd#
zcN5B^jj_Xw65fx9p^)cesY)|@!{k=kl)VE5Msm<TU8z&kS7uvsp!G;VW0R4w6FJa}
zptUM#UyJDh7)|aG?t83B++gSep5~PXEZ<|49`wT#INAAxxza2}1LC7g`~94SW_=kE
zKs#mAE_F^4=(ze`KF{|xK0gQ-|A-)%*_-~a&HmN?<GKGR?ms0f8z&pg|HhdA8+*+E
zC+)3jU)TdAFurdpGQVls63cV3^<%h%I<`RcTybqlTLlk+%E)Q<(@D^io9V&4LM}@V
z@n3SgoTT(@JI3rW!Epe1^SLt~{Vv%3qylE66F-jwGgoN}+xmSy#`g_kKP{Wd1M>~$
zo!0%m@B0&2gtKcJ=j0N`^7}+Y4_9d#J95WA!E%Orzrv(afYfI-H1yeN(_5b1H_|$H
zV+d9HBBZDke9P6Fh)QF_O#K6nwmhfiLVJf->0qp~!>!{O3%(yg-z3$qSi1nwQ_Aa;
zYYw0CMX6++LW+rC9$Da<6(mHg$W!PBb!}L>0_MTvbW*MI=j4gp1C+G1P%>6nxM`N9
z8K!#fIc?lpe~$ch+Q@92?_v8>M%kKmya#Ms^giB%$Ou#nu#zyhPoBgYBg6gA>jLt6
zvwrk&r0WjZq?KFL{2gsaQnoo*ty)9hqi!hsa)XjvHcw15(B*i^UvltDFFCm1R=Gs;
zQ--<yGqW{RzO4O;v>d`BDXa!10F1rX<ea@Zw?O<0D?yfVd^+}0Iu0)Pcf#jmhS2>L
zt4SCTKaM!V8?582^Ro$uXS61J*NrpOSq}H=SAgq#vpZ&kq~c`Bh6{5a2pws$FU^ai
zuWTJN6r9KQdjuHe*t0bd9InY8b%nWn;<%>}-W4=LXPmbto{hm|*2R?*@1w_lPST3t
z9Q;N6lj2|sx?_dZ&0Ls4nBq~s+3HnASBioPlRNw>&}mYi^KOP2??OTuOENlw8(s}s
z-F;ld@uiU6oM%P14bX0>ZkS**3Umx$A_24U3xd!@gk-cc=)#-jMovTCQCd9Am_e{Q
zGB)tF`LLP=I9+UbkfL1}O%g+_kTo(TPw`ke=@ioTZey%4xaa6l<Rb<_)Ucx=DxzB>
z*{oB1@qlY`SmH`AV`9amtNzPqy{ZvaV_(SPLp4eJUXC3zxj(?04v0WswpkruwbY<4
z<I07CTn&i%k<vPJ7groTS+Y~s1GF*Zy@D`rp(BXCgLJzik@y#@Ja|BxiQ4-h%r)Jl
z*u|j{hW7J)AHM8q&vV=Ii~Rza`sD|$_Uc}u(dzwbwjOTFW@?gCoa&>zR-OdoLY?VW
znxphd)CZ<G8N`d}LBRR4=tWGQE=vG1DKxx+YN`G$H%O4wSYx)Xc9wMx8%eyu(83`0
z#Sg@3AuE>X2Q1$+&o>)R5=~1|5-Ae!0Y4RjNjuWM&N+nAZ8vefAQ8x9jhSZq-{q^b
z)6g&-hXRZ;Lc>>Jn!?JL{iGip8dPS)P}!Q_rm3uB1vk%bkQJ`%!B)FIo}|Ek{oodX
z1YLD{h7Q)``pBKl@J77M=SC26^;8`u;9!K1DT+MVZI^wu|Ex}QtlfNFL{Rq#_+qgj
zssg1xNDU~e>hV8APGU%Yj>b0<Hx1ah-x0r$3^v2o29u`2jue4{hq!u#S8~h9$*cOR
z3yFv}5C?K@43;N3J_kjM_B&?u#G(O}z;oyliPqn@TLJ~WX@e^vdD-k1=0K-?Uv1!~
z0{<1A4wa=V`x-Z$Y+(LNe5x<gj*l*t^e}F0ss_xij<};x5dBo~S!CJsTw0gd;`1KR
z(pb&STaMHq5OW#d&4)v&bX_jlW}X_YoE7>MJ>#qpkyEm%u=NUG_Be-SokXh(eT-H1
zdy$@d2>ggE?iq!SO-hV!_C^#uTL8=?G^uF^gw2wI1Y{dp*`W+L>G^Ckh{2i!@gQ;i
zQ=sjg#tRf@KyqR_aeN7;hElEQ%=tXFG*)!!<dRd0MwPmQkMe%FWJmZc1|)pDyIF8p
z;<cL(Y?$@#pucjp%?P2Q?yoRA7kSwVVyEi)`YF3O`{OoTj0m#kFyEQb4pMh><xS|K
z#|5*lFJ12j*4+rcC{wK-*x{sFb~xS2jDbcXc<Sj5(W;TQa}KO3V#b-Rb&X+`x>;|z
z=1x=4DTqtePKa>+JIuy?zh%+BuuUE}8LdaoCC3dBdj^k(D0neO3Ju^`m6U?%3OFku
z;OI+NR$wg@vcCoH+%3m@Cr)-EiLGS$5>(4BHXrzhuGfkgIVf1R!XIuKYzF;djpil@
z4Ja>18~C!pX@yPk7rITQCWK^krZcW)gnJ_D(xm3A^ClFLOAP>ZI2=+E7(p(SNvCkO
z=od~6j|RJ{Ku~Tnh0$)&D%G1-KOw8?Hk6iYPRTR`ZZGo5MQ_x~kez9+99U!6a)vyw
zWY_wcuwA^)`KM}c-8n=|=kzasrnYC~o7Y5Af7q)|BU#W0yKcEZ$ZMWOt+=gYVPKRi
z(ofa{q1F)KscDtUcr=RE5J1~S?t6yc-8b$Z@)3CHAbYII*FS#IpPnn0BIviZa9#||
z-}-F>d|P^mnEY)$1o7bG6xi2quZz2zwS!X!ilaPsvf1}CR=P($C9V@-Y$R5WL+FFv
zRdx{9oQuJ+jmaYFdl`XHlBMl};hSk`S7r3_Swybgzq@~%#=^`5dIafm%}1N0V~x}+
z^xy<1wj6fVkF$0$!bR|CX@_x@wy$UD=eFZK{+yB5K<{dsQ=<7B^LSM5!OBilpu>Pn
ztShWi4wclhO?rgj7*l!U38$l)SU}@YTrMTX%tOvKWTARGi&XHs6Yog*<dsdoNOe6i
zI5gMWs~Y&$@Te1nsg{nMgY)d9Wt+z5$WIFNajlua-fri-$o+QnGLxZZFSUM2EXy9r
z2uZc@C<rU6)}wD??7di^;2X@>^;~1r?+=8Sf2lWk7KiLb0Z89y7GpP-`dah8P^H22
z&&yZ>=~M)RyA?g*fpa`|Hq||UgNb2F6(GX46Pr9Yux_~N;E7Q$lfo9pSEZEPA*$rA
zrh3KXW~ja9;P{E}+Rx`PBdX-|+TGXA;P!L}V4j#e%Pg&`e1a2n*KD1XSjH0t4?E(a
z4*Fag%gW+r)Pa~2P70UMbbG>#!<F<CQiqS=!1yKERW88WU~u`zI_{5~B%Dtv3T<uw
zTy$H*ZqaZNjL*QkM^${!FoA3*yozI)F~oKr4VRFJU5}0n;8Nf-*m~htWywL97KlEs
z+JHE9&ehbH9rmDq(&7@o!SR-ru~j$|qZUTq%<lT~htD0ELK2HdExQR%5PLzs;LIgy
zCQe?9Nro@tZXI2Rsmi7#Y6+xdF_uajV7!3T3I|t{uKN4raDtYVQw1LimWjk3xo<|G
zuJHyYHVaVzaBf^50a!dT@KlOTH9<|%S<;S8V1bx875%Go)Q+sY*)?8|X*p~_aDF|O
zv1akaS=@S@N7U%oeMt+cpsS_I@*G00cvUtfq&tknn>tzcrlK*?8{AUcQ#us)O;)Qu
zVs3C_+TPd;Z~A|X?sMM^Ff6yyYn^u!?39k`?6(1a(7aooJ0cN9<@;O>oOvyq%M@>S
zVTAFdcG3^Mumf!T{kJLALJ19Y7=>fT7Rq?lLyLD|M6UAEd}yLVuxJMT_`5`km->i8
zI~^gKzcoNSoCnV)hOv)$v62rE@v*o1@`=t^oyySx*`)-ohe>@)B5{wtl{Rs4Y3EKb
z(iB)2C}HsDMfboZQJ$ZF+RDzWH|mg+v8c%7@c;M)d<FIXT)u}07`gfpdH*fwna$5s
z1-%~WVHImGO)BP{997HO$u$lWzHVBAXGxgpKaRH9z0M5xlNBJH=<Ig!y4kP(-uGrZ
z!ptrJTXcWS)rM@B_qsiiR@PjLi%_vo*7kIWmd1kZJqSgz$_p}=5>1NSMxX(E={Vi@
z=3l{WP`V^HFBrakjCq-R1PBO)q7q4obroAqft@EHZn$e4FEgim!Q5>gJnXpjy}N3d
ztHt=6sR&dz2v@G;g31z%@%ZFEH%#$f%L1<pi$T18Ih6=o3)y9ln2>C-N!!zF=PWe3
z7&@`Udb-t7&~H8B&E9gx|Mb-Lz~cjq9E0w^$FQY7773y((r)lzdIYU|A0k%t{7DEx
zT5o~5`hlcwyrmAng^dAy5V+i@W%3|AAZ*Ve#1$QnDZ5pH=~?kl>Ka-LB)E>JF^|xT
z*ESKr?FmKr6GYK{ohAOawx+Cbj}w7&LK&`HuS<dIYkznmKu;s!?}m9nPXW*`chy+D
z)M1y*W{5>!C@QNnCcXd|+7;BwwG9rzer8OiAEj~V>yyBj{@;x|<&P4<c&0X9_~wBz
zt}C!ixuTk2@XfmCaNhnt=`A}>ujZeJ{u9jjre~w`k&9e3pM>de^(t!lG>|iJ4X*&X
zB0(Ok^ba9#ryb4wlq#zSbaECbuHvMZP=R%O3ZS1P`n%rGz1eWe1CdvuL5}0xLQk*g
zThPzY`IY?7H)ddOJ{;7^+cPH@7+}8YBf4kgQzRfw2WQp<4@nLe-guUdtCF*n&%sgE
zqjyr_4M(jdXW41I6by0%4L59^Bn{rv`fGjB2;g@Y7;acI8mIN!qs#;>e-y0FCQVg~
z2id{>7_abHq~nNtm&^$ycc!h?-%#AKmX?rd0pY4)CK<0ys$(h;Sww>nWecjizt{g3
z+g_0Bac^Hi{#l*RJ#ij#JAjAaPrBMW&M9UmrOn@uFeN>l79NxqfhTInFH`v>C_foO
zt%G{FOP(J?I}B2&a5S6Tp9+L2Y<}nW1i>wcKK~)kA1Ca_D}kQql|F4ti=hx5p5Q?c
zH1K^~n$RuFQAh_Lqd@VdKkC*H?6M=^yNr7Py`d#NO|tVh(WI)01*@Vf4qmCgjUasL
z!E?}DoqVhR>CK*m|KS*Tr~G^&%%@JC|1U!Rj}8CFknHT-|Id)z|CKOgVfw#h46k%_
zTma+f{%Z|F`Lb@M@XrvJ-Ad(ityxYLa@rbEgr<T*WMst@&=5f6HauUDZ?xYD{1y(H
zfkfmRS*|=OcOiBt>oZ-xCm-_+0l$<*QqX=n2Tm?h*t+=N&O);lP+!)3^L$;roZ}Vr
z<`w#V^A0dGI4PgWvk&Q}!lW41C|lmIAMXvAp!h1FPqd*u_nn<s0J$0u56|A)b+<u`
z1~!}!8lhFGe=8~zLzT01w+m*s=T`vBhd#d9=E;`ySFBZU&l5Mv1L!$=MiM!iS>Zv-
zFXI*r)AgeZq)w?W3}|~K+$ULH`v9B)bFm|wfpThOHnZ!ea;TOO%q+!eyHH18JdS16
zEoVLVRlceYGZk02WeNw25aIz}xhkDpW3kdM+(T>kyD@4N?%ypj4gKHKpDNVsJ+JSN
zTSo?$wJem_5AB^;*Q&{zH}{WpT?XknRw2&vnT{^=+ZjfZ(NJmS-!Tz;yWD%KDh`*`
za)0f(8~hnCr`QFku%}$aeQc;q;`B1mrrIqB33}9ilgV*6<cz`kf^tx{-uhcz+4@JF
z=$a$(vvF6<`U*B^^gNj#YDp+(K_V(zpXjcb<=CDxWUb}YS0Z2$hisMW3QobqnsPn!
zW$Pdzk8NvV>O*E&p%=Spb<<NCHW>wuK(LN~@x3S+Dv`7xIU(99H`LUFiteyI@tn;j
zUfHj<k#*@_|7CqZzI@t@l~1D}K^=08sjjiM=tOd-Bc(IherAVT^bJM!@AvDvb~n&f
z%qkaES!N?mW_7S0%4B}(K0TIcY~M10rKRpR)q=Z+ZO$lD{?KrFIoHd2)QL}*U{CU5
zf~B)K6&N6bDA=Vjeqk=gZW{zrhnn~5ype;IBC#BRjh5-kroU*Hz5aJrJMGqL`kQvj
z7)hMsc_J%X8np>vYjY?{n<skLiZ+S|UdsxKMOGjC^i#H-{kXf<L;(2Mx)_G!o*UT?
zt7PS_<6#G5hcyOo3RGY#fpX2L2mo8?p*=^lpl^=e-ua*o+HE{(y2EJ<{^GV+7)QS?
zndb*V2m*&ILSKe70;`kZUI8{x9OnX2g2g(Ba|05qJT(a}Ge#7%HNHc;MF$zA{9|NU
z6n&`m%_i#T`xv!YObo?p;6!EWcsz``8~}e@_18NjsHc)MQLm!{X(8Lp8iLktC^)B7
z*P#c}^%RN+PbxMz?MN}tFd6w5my2R0$q*I>_xIP>Sio}=X+-IQSfCZf;c}B`BHfE_
zkW>;s1b(d2SLo%Ekp=;`Gu{W5bL2Pqrsy-4Gnpk+<J)j?FenN{QPC)nlsRZG);=3k
z$|WWwY)iodULe&fv+`%vc5mZ2Qv=BGJzXqdOH3*EcdEI7$;EMM^#*;Qm<FX8FJt==
zS0al<C+<m&ku4DC!`^D_GlEo^=dPUrq4xsXnDuhnTsw6S$N^WEKU2^a!_4aRKB*%p
ziB;={2It3e8O;;m>-D#>IIpp$Valzd^~~H?AbcMAlljwb^`k;h^Vsm!_^;@4S#@-O
zR|uJQn@2-PZbckaAS{vm4?n<>OVsxMNaq^?>V1DO5S@CBs0&)nRdc6=fOhRAo+bW=
zV>9(1@}^R}x%;)0nH{}31|v1W&)ai_#tJjPX)@{M+=Xk-DLME-9e`$rvHK3iLphye
zfIlNsZrlS>sgk{OG6Yo=cQ2>c$6fsv<;`H&I}udi4BhfRa`yJ>@67L!uDFN~7&uow
ziWj-Qt~LyD`@AD1A>FwBppec}$)DGz?l(<;pq_T6XtB(=N2!mB9X+`r)I(#8dk9Hg
z-A^OUy3Rll90}nYxVj;#DR1*v`&Q$qHxzX^Xl^{bPDI!@U+|*~Z*XSsY2v@imB^99
zw*?!+<PK=}-4Pizzk?wqvS}J*bF4XhzXFpC2oh;SBJ!tc!_^+Qctvs#ROD5q$byk9
z6F+a@1Ep;CU+2a6(X+-L-YKYK-dIYjSrr>;z2_bPAv|FhLd?o`X~i?y0Bgnj-Mw5d
zV(>DCXlo4Nt_84s#5i!SqO^NUz+*#5^(@H>$M$@pUKD=@=>1G%ku@s}De1L{)*zKL
zcF|L2u@Bq_2gV#rAl>d%_qz8Xk4&`Hk7&J!WlO#-U!Ha~T?MlC$)DAWePAeh5>TKM
zP!Q3C?cLN5Gw|(v%<$<COCdP6--@kv{0(rITOliidwB+|DuKyX&$F3h;1QqW;1*7W
zfq8sS({XK(t3Y>n=ZhF4>-J#QLQR9GV;M7Y8p38kK0ZT4j@&Jrt7kDpylMrfLfY<I
zn(WTWPRwzUf!AGJ!BHA5E$68fg>PrIE<e9EYUw{Ca+)2Sq1JuKu+8kTO_qg5RXHI^
z2vgN8WBG`$!?qKAV7zFu0@$Pi?^CC-uhC#mfdfD%(EU=*&c4%CE2HwKwFc&#03f%b
z(+fFJoaUg?iaKEUSjtm&;hlOV{)sF0eScr;65tsZZ{Jbr76MD}k+awt-(V!SM?Z0?
zLOak7w<7z3u!>|ACXPq>M!fyhYe&R@{HbR&Z>4qY>=DKB+*t~M+f;}l#qyj9v^AGF
zBnhgW+Xi=Kh+sP^{e>mbro0<-o6bXzZZEs;aVyKnSa6M}{`?sx>C#8fc@d)IOs62R
z@n<e&6M?!q!E3_Cm-+!qK|Y=<tWa%NC<Sh(yCudIfA$)LFRvJGUU&kf5-L#FB&tsu
z+)0%K6+#>ymx5We>O@DfA>u@tkN{?t6SOTo!^0=&tUlrAmf8<&8^FNtzxTz0fq9nD
z3vcm#2JZDkv<8{ZY2)~}7cMjxBJQG8QjdZJ&N~)s%J`|=9FdwZIW|%{ZzcT@8>B(P
zNBhB>aL{JVAWt0*Hu%Qk?`rVCanQ=<3Q0ZMLQ^JUY}k8TERAwpuDSpLMq7NsbOCL=
zBe05T8Q{g=5czhpRM`}fZJ_L3xIq<idPs6Tt0WZYWL|D5x+6L6%7EFnJ$?!1F#Id#
zAjEa3x4L)lZaO%jRL-Ef?Z6z}rtA!zl8Kwzn4+b0IX4rNSEP6qsd!mF{x}d9xJ~wO
z^dS0Wp^a(8Wj+o!D?|cpRJm|SAnycA`Ma4U>;>SZ(Z-H{mnyN1{UAcSaelx$mji@q
zsg;SAhtEpEc8%`AFCKNk2)85>v8k;4BN9j<7zJc}h&1yh+KpSw!60pxhCC_Si|UpK
z8bd)v;2Lztern}SN#%zH3CBNq_q;rJV~Y%5(0}ohzf8^n7t+~7zCkf6w{@tgKXg9a
zXU?}(&dO#JWbC`d@Q8RwNhA`Z7BN!bC~V6MM9V59D79txMpe=7&|!3Q35Ohp0<b%4
zlKKeo%?@zrr;8>#<4!qF16+?;O5yT}+SapomA}N|K&)g|Osv&_sPPD8`3YLE(`VS&
zECi&BK<d2WMdpff8&7CfhIsgaf#<{|z)q*#+w=;M*GGM|Z0(K29ez)a85^-9pfOd}
zrCSvab8tmOtVyoa0OlztHH4Rh)?N;44kyTh(;83)L$tr5e`LFUH(W0V1&)D&<H%bp
z&livwq8~n4ENQ}Mj#hxtktpV4gQgtDdC^1Os`Hqh_LqB)>R(ot;^fgO|HU0aDI=E<
z?{lYzuZ<Rgmwv=KE8H1H30*J(P%jqty$EW7MpjZ?&jc6@k&_<>ereS1CNh)4jjCiy
zc6SZPf<sc^uiY-xEq!hLDU>DboxZ=;oOr`l(@y%nOc%*=_1;a05$ENL#D4l9GTA}Y
zVgO^E5_O{^L_k|}DLF^Wr+Km;MeYy>H#SyXZk%IC@JQk=HEFN-de-C<0t%4lJr=q`
zfJ8?v<IN^ov6pAb!nXz*h_)pQ%=E<Ff{U1kv*GsECd38a!g_}YyReileCqXZ{na*-
zY{%F|QO!Zgqif(Tp(8g_IO&M&c?cN>qX0azr@Ok*Z`)T}Uo$^F1d5LbrObEqkt>c?
z195&VYV4O>GJck{rkD7>`-tJ5YWuSl%%rkDmVhAXJm>4cZ9OsTAqNWXwQ>oJfzHq@
zcTBEIgslzeI^K4IYLe^HLw6BHbWdN29TWlG4C4js%m3|HwUoS!#ATzxBlOc9G`9um
z8&<xad3zcde)?fGs|PuXnz@J;RwvekOISXFu#=CFeRlF4)X&yiWnB6dSNJKR_&op(
z6P%92&Ke<G7G*@c=~`nlI%4j(GZwpYRybKn)gB=2ogy2UvZy3jN(qmWTN2Q60L<I}
zQe@AAa3{u09er~-Ss4vZN*gu#VS|nBAbBjX7C=qP3e-l2XKuRWj@sL_2cDip_i}(+
zf*V=9R0uW~mC3}7aUe^`?8SGrc=+{oA2cV}1vpCgcGyhsW$;1Wa7TTuH<;4nUf)VY
z@3?c5SoO#X-k5b8XU1NeRy=X{1@f71lqmH+w;nt_&nY|Dony;g7MVJEZnxMys_Qc4
zH!j1oCigi63V!xTM^t%0OE97|zR7|N|Ehb7n!)}J_xmU|Hv!?q$KD^Ck{eOO=r_C|
zr(Fc3!$s-3y$1R^AywLdr8y2?*j5-fm`UqEp+sp9PQ(+ml=+AA$|D|qPEu?X=@6CF
zAA@;TF(15O&xY`L5~ioMp#v!0O*jrZE26R`J-L^)%PaZ2YC8Skahv9A0gF|-SglKH
zo;l&eyHhOwg{$q~mWY<kr|B~?m)=>l!I19}sRs+@zQzLo?w;9JQ#hgF96C5<fTv}p
zX!wvGM$h)X1{2YGX1qbv2-G?{?~FLIz7JFba6%<U!w9bw5*WeuvfQ$l6grW>a7f@I
zQ!1uo601Co-wxIq2m9j$59R8<(DuH*>HwPjx8GwmS}mGsb}{htFr%3x+>85`y*nm}
zXeA-Q^mAryCfrK}xP$2u6cZ$<&}<pRbZV&PH_SLd;s*`s!DFo-YJ=mtlaQDS*o>Hp
zEk~UMjj9S*je-^B&&VARlSq=~+>L3!%_v>6d17@M3F8vC&a>``yQvZ2N*WHUdQOdH
zV&S!1NVl9Ug|BYNig8Es1~%f1m#E92D3kAQ;=}FAep`b>oNpU%Ik1=N*l%CFA2U2h
zsh0S?s-t%ws&+r@F4B4ot2-43T1k^?7|q@U#8w<Ik9@>GEk~XDbEg${T{_<hFxGC;
zWzqDa84?;n9dpQDzwaE9;}v{798C%CE(8FJxNR^07sLOD*Z;$CE-se;pW!U5|IKi=
z{}aQt0r3ap$bJP4r<^L|m2=nT4=95|C;(u**ZvmwK&_Eosg=kmv1u~)zrgp<AG8k%
zRp-3a*6wS#U_nNgBiGS$*Y)SsF7j#*8Yn6f#-AqN`d1Cc&H+ys=qdv!4{O#6-`*~5
zqe`4LH46Tdw?lKszXnF7#--EA4$TA5+Yn=N0*1+$>I+5Cyg*3p|7a++)N0Ip+p}Lf
z4pIuDnIj~r<WI;Z7)O=HN;|uBN9&8f)quZYNVcdh6(@Sj*5-e|!oPLf#+PN=nOlI%
zqUCT3II4J4n&*L0YDJS(kPyoxRRasI+WU`N&PNaTa@zt93M<TKXXj9HFo)qhy{kDD
zRxi2<z40h2(L{8NJCaLpb&@XbI)1zLAt@^kX|iPojFX(pyx6GF`}e=~Y|9Q?r87M+
zlrYc3_g{3klRk}Wk~KG7c*<*KXMee+wa}G_<Fu^Uo36UUCMn;VA=j-Y`!D4F9?kZ|
ztpik3%JC*z520{P(8Vnp{_<CDFoUC@u5Gw5;=RN4i5Ylh{f@4O?D)Y$2xmRc8%kqs
zcT-Tm@~`S8-gWd$P9Z-KSa~*Uq4*PNx3y{Tte3BJt?<LigBVN~_m=xo>YnRuG(}cI
zJxU~FRiECI$Az#jJnAHH(<OuO;l&bF>cuo=t&x^Tus1BOXz@pJ`-%pn+>9-LnXh_L
zev__3d90)`%45MB-CS<(W$`-x!@O78UL{Mp+IPWmYXu)ojujukSY1S^*7Y~uBa6u~
zyp^`WTpcO5JQjfL=CT*6B@0Wv9#Ia7I%QdQ27(~8Sc0knHO*q=8x~GEeOp96(oVAa
z&BT}7j{|ks`MuE3r<>ADd9=6K7E#X-5uJ=1>2oC&$TFUyG<op+LUXy7rw0$b&e0<Y
zB4fGm)Tqjx*jyvk1!#kfx0-7?RjqSc%-a|z8QU=-$ckh?tpa_f1<xV;3d#;BJpSRd
zt{3z}|MJQ$Awt|=vFoIMSw;(E-!v}{Pykx~^yT|=ac4tUqE*O)p+d(%G%DiZ3JZY+
zduHp4JZe0=d5@ENLZlF{_~Iq`X{B!w2l-V4vrjSg6*2*Rv`B_zq{2Gk;?MJ(Uz+80
zt9Tv1@V=!ap1+jJx`18?q!#J_r|1C)OS**O-_yk~k-%W*lMIy;E134<6od^sx$;+f
zvP)t_Kf#R>?XmeF=_OJ#V)r#U{*|M6s<v!aw8pS7uOcM^I|#PzS;btiwO6|P6Zi}A
z1JjeR`vJFQi){gU6GASCb2p43q^T;u$G>C(6e=9^KD#k${FiKydFNa4uB+A6cCS?U
zK<#B-dsMOq7oy^Pmq5PK8AjnL?P^;|Zf#mX;^R&f#rK`KgIc=Q9g6o?PF#3#tOos`
z_b#qz-+;m%C1N^8B#`0duskO#`E?EW3dI7b8y$RgkoKV#AnE?i+#{R(52gY`C^V9c
zJ5nVF?H?>F&_n=Xwc1y?wn2$jT!#zjiYc7h>wH(V355}f)9)p^8CclM^Egx-x#xM?
z$kpMvAiqrJBT{8w4ZG@k*4Up)^dNS#DLI_X#mH*C1_CClx$#8#Ro4o;Rij&4Snm_K
zlX1E-5;;7&{`c2^F6Bgx01i34m+f_uBOwtgj^LmI&#R@6=(cl&t!c-0Z4`|MqJHZ$
z=YcX1^*n>m`1|BYlWnqV8E!2%6?0%6Gp~g+9P~@|mw-Hq=YW<l$<0t2<ZOaln77?>
zakesd%>vZsSY0I-yixvNqAmG8_T(j2GNsw%(BD1~Oe#pMvy#vBp&XeuEOq({rx5Fk
z>sPrcI7lvvzX~QC`3qqa_`#I9bGm|f2h;d|c1Mq})nAId3eqIeff|Z267Gu(1RiUQ
zB5+yGVMnhnoCDU?8Zf54_kJNlRMa%RL5f55#T_~z8g7lmsPGH%)yfnGH#el3UtfHb
z`?t{K2w$A1Oqp%sPjXc4W{1!ur(Y0+C_`IUlH7d)S5@v&LAa$;2#bTsYjmSmf%Nv&
z6E7lVDvfho2jtXm0mep{lDUZ*<M>;TFimD&JyoJ?`Drw$-u9oWdEj8uc&^Z{JgM~V
zhws3J`0zqR+Re=&LG<>V-#?zmT1miE9nnoZ+WjJ@W(B^#HRZ}cX7eZ9fv(Ax)zEMj
z4FGl@Jdj$7UdmNfu<|<1orNes%fs6b{w{?O5oWJ?G3;uZ_z~`iovpzz7s!?l8o=G1
zVR}MmzvKlYkktL#U2^n*s!qJ0=~G?M6}|g*G;C@?Jra11OVgo<Qk&OT^VfuN$TgYJ
zF;uP9ijtO#ftVS<3qhbT6<<AfkG%B`<frrK-(yW5EkKP1!{F<b9OfCe1gpSu@v@+3
zT-kmt7Y8vYisK-A!mwz2tAVW63FuIXRx?bFt`@3FLs+N6P9Q$rRuWSlWij{Na!EUg
zSniRuM0N6utfVd%v#ZqyKvJdqQ|Nf#Bzy^7*OZ^Df^F`_?`;&>o?F*B;gAv1^0h6B
zo%@3DJWmMKhLrn3B)T-E2($mOB!$T5?m`P~y^-tvI>Zw-Y_f*$75B#oyN2Uy&Gw-r
zkVZkG%#w>2GjAUQHU~x(#uzr&(Nl1~4L%IQ<WgYMpbaaI`r|4YDBq}&G{M3Xq@Ym^
zq?u#;GR58+aa8YoR|6Fes^@5auv-LUdlEDa$a`8ay*&D6^-K)4BkUs<)fn^+E6F)M
z#;bNw@H6;4U^EDLS;a)HP1S7pi}eSl6!KAWx`&X~<<Qwcm_PKAx4q@Yk0cZ>0JrU9
zy3w2gbtD@?>cb8f=8j~%q_LmdZXz@v>_}F&Osztc3W~)VH>B|z=TRC?>zbFl&>$oj
z$1%CPnSAEEB5xUBsrLj5Bn08a=(!>wFP;kJYXp<O;a)vC?@cI8(5|Mp0Si6f`zvTf
zh2c||IqEuzhu*!2ImA1rViWwx;nLbH>IvC=UF#$BVUr-KCZmXJ>Op!HM+ej(+*pbS
zBLN4h)gNYvOGUl+ii#ZTrafqWdO?Ok$9aJZhMNrI=J(M4R8~nQj!oWHj+C5mRExBW
zIx{E+zG5Av)#4URS)_8M{GI?ma1;`1NFao4^8*%GCe%9!YagtlqjxAcDXwf8!$X=W
zjt!|Kr>E*doA~D0`7XNkYk+jgLXf#|Rt*-Tc|{6=Cw<o6Q$rH?G{`@Uza~VHTez=9
zHe}4x=tDrncs#i^+6U9KX1ZOhU=x;S1@cqc;dY5|+kU)d$Q9Sk2vGM`<!LeLlOJVn
zN<<~aV*`;~UfR0fI$8&~v*Tgmr92wB6vvyqYI@Dri32jS!CLtjDA}Wur#`A%GcdK8
zLoC@ZDmjP|IU}nTjsW$Sko%)x)=^8pAiyFI#-pM+Yr3sn_fY3=BoO`D0E+jV_>F}D
z5=F(q2pT^yYO>{9pba4&a(d0LmZMCX=N313BhZOuHc5m17x<Ux^Jvw-+g0*ns<R(>
zR@kruY6g+?k2LL^G&bxd${X=KY22?$Pg}8{)WQy|N)Etx0j*t~4r&!ppFJAQN%F9b
zv5>9)!Oe$f>u^tE@$w82+iB)Oq%aCC9jH;f$#5=P&rWMk9&2_#8|U$v)g$^WNOuf5
z#Rb#1ttO0ajX6bK?x$0;M$oGje5g<*;of_=B<q7A`-Lym(fm^~AQ5AUB2$q1fW0ug
z{q9;odx0Whx`%Y*&_>V6s2-HY0Ktsj&nB9SMN%wHi+qKi64`j>Ze+s+k*z0%Zipu<
zp(`~Nso<$z2m@%0Z|j=+ykTooqv5K>jrgC~pCuABFU(KMV-dscLNTEF&PZ>M5XY!S
z{XeVDg@qH|NbA<#`go*f#nuxV>Lt&?a5!R7se5BJOZZ=Rj+Q+`Y-@vZPR!}iNp&aE
zK9$|hmb{M9-A=(TK}$^zD-GT62-tcC#Ii>&xxv4fdVH2;8R?Y7#+Jv$z1HHbe=Rm{
zmVAs&Z~RKlG!JqOn`Zoz9?(TB$14qsFrU+P|IQ!6K<0gZPW{C!AI>k?@#o74vA2E<
zP}-dVF4xD&kT+_#V(1_M)w&!!wtmpUqfyj)7N09jvs>C~z2`?m+%d!4TE0Xf`SdPw
zxIQz<wg^jPUzX&cd8GuhSF!>cDX7>5e+a(4oT|-qG}{Rej?ZP+N|-JjcP_P0uU{h}
z4=M~CtHfii5|-Tmcl`i3i?%p7gy?Sd7vkS?NLeLpqk(iKXupR$NDL9i57P5jD=wI9
zpXbc!^1`j8qvvmMFl&<5fDb#L&AKLGuk|$A-U;kf((6z6>x*(>`ptd*<aaJBmnPm=
z%$;Y`of7U?di=el$x$&nAZ|Zdvaqgk6?i4uQKhbfHDzlVmLc=rt-$AlrxgQ~FizeF
z%&v>`Cw|TCvBR^d&5)uYMok+0X`>IBJ_6D>+6Lec)A3$Qo-`94M|wUadS|-q!3J~c
z3J(b!0;_Qx@SLn&E+MV`u5u|9z!wv~vWtetskK<Tcc#0RX6zOZ>(}VKkdP?)74H>J
zeFOY?h!^uq_yN2Px1RW}T=fNvi(mS0GsXk#S%P_0A#+7Wh==p-gm-t~&RS5##uZSy
zn1aCAf%KSsr`}P89K61qGK)k6A*p`&W26byEWaY&g3$qTo6-vNhc9T3aX@(x$^6sY
zmR*XL_IX30iK#|&>iLKO-BbWvP7BFr_bKkRDEH;%J|#?3|71`zP%DK}{J8O^1WZEE
zu^aQ}uHZTabo|Hu@ww0I17RZPc;|on@jov7-!v}!|MMf~fBTW^|Ki7gA3yB@QYd~e
z8jk?wz*Qs8jb1n=#FQBbec8(m%_(DKNMLa#77r?AQRO9TgOk;P;(*QS{yUPX`B@?+
z<EYE)?tC7#tDQ(0Y^S?|Z$UkSE>pKB0D8&}%9lYmMT3Qgimy$&e&0LRe#plCFM4CL
zL$XId799ibReP2XL|c%Xv6YAY$p}vK7}|>5<FnSR3cDc2-gm4E{@%#@NwahMW7z3T
zqL#0;hg~s5RObkX7NJEhjB|VqfiGVf0kR{Gq@KJay6`yNzI{fRGP0x-Pk%A~0@*&H
zUou@c(pKB5W+{x#*=#v<a~To6x>fMl%e)f7&cw!j2Y2ho7qx%e1-nN=#Kl0z<Jb)Y
z7+w^jt96t7wguwbpG41f?BXZ<k~=2sHjb4E6T&+Mu5K7B5#MXT4RSBs_rnB^W<9Fs
z4lgbVr=@b2nQr6W-OO$2ZjGeCV@&D^ubcC&yjEE4cpqcYvzTePVivl_eK+tt=BgBg
zDi`Z@{;X>EjFwrhQy*~f^mEy%H$1Rd4Iz_h4O2E3Fs%VU>~gAU;YlqeyREj0B~r-L
zIR93(3d}D(J*I}WBvX*BdE!ygb`yDv9nXhPW&HPhR0Pp@&aJK~1t(T+5B9kBQOO+l
zSi0ogu3!0Anf)mwoM;KITZzyar_U^IFbermFdqdxHEl9I<z@umUQx^J5=JZ8!zFW)
zBr_Bm1IR&ZZ}lCJJh*+PKC`gsF;0R0f{#EH2{LYhy-srKNEkDGccTE^rAT<gI;3>Y
zYzhUbcpC}3W{-Yi>wGeYPU2foYXbH;iyBW)aJS?BVuA94pFSEH<Fawj<SfY>P{4gV
zv7r&h64$-2MVq(<yx%Wik;OVVU*oU$vA5Ujku9*|Nizl)^P9<>9st0@!JM<e!Tcv2
zkx<~%_2bze50{0lG<2TECILx^e4VdhT4~X};Y<01C^5aqSKH2Jv0vw9mkkk>=hux9
z7(?^E4}y0Nx>k<gg7nDMKr8}b*v%ajG&rshK~R+#oYD$GJg(V&=9oPDg8zy+3pP^N
zSEs&cF}r9}7bLLx!^wpdh;WHKNCmfvg$oi!<RHNcg&UzSkQ3jRX_{UoSV?bsl!XGv
z+oTAh$z-|7?zwC4f;=B=P*yFFhav`sQDWk+01=-l2b^C5>>FIIow$mO-G&~5Sbw(;
z0_LxQOQYl#{>d8X02z_*;}vDR1X#7M{zA9nkR<0>4)GQ)e~*JBBWjDLRM_w$QvSj2
zce1aNX`dyzwohog)T^>jbCs}FFuSTY(lZb`hF8k0QJoeMk4qK!$#0_AG9o{*&Ve6n
zrQI9O8$rKME0mEb;!a0*7mtrV&qcO_bF;<{NKnsMgiJ6sKkg4k2VSXnJ3Y|XyqzD!
zL%z`M-s->Qbt!X^<v`sYPy0u$ZO(wDQ{@5JMY+72LM+*U)uIC<U#wN4Y13FU$Yl2;
z@kbC{=HXiVhYGZIVk;K8y=BEiqGF{8qy-IYBo7$q;|pu;HZ^VZWfF(KN?Q=?cg8jm
z8Juztb0+Evo%4q-Ixqz|Gk#yyc*pzl9KCdZ_%H=HI=vP)JO&J*b`tcq#jo!=GZEbq
zrA_PF7u|d<wfO7?l|hWO{vDXMA&oKb*57=8p4pjofZ#PXc4;Sd7K_4S%MQ(>yrq4F
zkRq8KLirxMn&!4n7%+UTBfqaYayWOc4FY^Vybpcj70p&AP46PB03$zo`WocQ5G2sl
zlb6j5K;o5_o_VyPR)MVTYm?lrqs~Q(@e{2F#q$hjz?2uD6^t*m?amE$pid-LZ2k;R
za$rRkUOZ%AokH4dz@epw2-~$UUMYG2c0&^=F@=60pZL8f;51W_OwG;ow}1dowY_R7
z&*6=<o%=@})*p!P7rh7$wfCCM;AN-;dC2Q$r7hHID5JssdRt%(+oV#QJ+K4Nz4Amn
zMbmLH2OW&J24#i<FL?+)d=jum0^8P23@~j9+g7PIGI*vplAQXKM`lLmc`(y7T<>)p
z5R`VX&C831S`Pz~w+WLZ^2JH~Ch^2NN~jlBe*^Up$pGG&KBk5=f(AromrHJ;Gn?A4
zW<T6Kf?wCBd+x4W#dNsZgd`ii{(UzscGq1H2*ObGV<zg=P|R9urcd_6rpmBFva$W4
zKt=Y2;=x30H+nf_d{)~eaE>XV7C9aFnH3YP{7);Wu@b$kX*bo!>PzpVWXWfO^wrnZ
z{+!0cv<8-Xi5QJYu2xcER>1ERzpUyolq6R7@Oq+AV2JYDqsm(5li_IpKi=K~s;(tl
z8^zrT?hsryF2UX1-QC>+1PvM_xLa^{4G>&|26uM|5<G81PR==f`}P~%@BM#|J=R`j
zvuf6?ujZ^;YgJWReSYP`zQJpAQ}7X_Dc1cv;&vj|3IDT5^AI1DHX|gki=k~SEn^GE
z$4-}@ej_d8tIe^ocv{ycIoYs_-en59?+(Ji>SSCSimj+9U<A`FwPm{=1&W@?Hwh68
zn|k->K<`u=^NuM8nPTW7i?CeUw;^X#GuHj2uHJ>*Vc<xCVCbgNY!3dQIxU&Y+4o*N
z^+4$RDC3FiVs9LWumP(NODsj21|>xa2%%V+OYwhGVs=DyaT!}yn?D^}3qd9DQ)c@W
zSd;2Ju<8M1T5AlSt|N}D&}aHNY?X@WD3Het!onyV$|{j`)Fa+{Vi))*b<2Zhn`)CD
z)dVXVWFc&HTzmtCCwSFP`jaTT+X3k{*g?OWM7|dUBd3%jGyDNbf_yje)>lzX=Wc#N
zjUvDNoe*>>J~L^N04pB)3*wHlfh?&xEIMt5%O)f#v|Q^BVlI2u&;eMY2ekq+>g*Xf
zZoQPGqyjxVzg!RB1Ji+|^19?#->{J7ZWv=HYAdXcoYrQqL^s~sP@kwbWSy>bbTs?O
z>rwc(qI;P?oa1-7I$UyTaWRfINhf<LAdM8y?VMC;nO(J6+3;H{^PHSs&i1}*P;mvv
z#1t)}XpYmxnz0IY{$hlE4vNCWk1f{bjdrY`o-2rwfKFaigR+@`o1P<QH10tZk}C3Q
zAUs10PnPGwt)~l$Mwf$EGW(qfW~)o#JLAS!hVd@P;cs;e9w_{yD@I%f)k{}0LtzRS
z=%It_Cv%y-54|{!KJPU2Y$9Zgmcb;_(&xd}GV&RW8*aEGZmqV~-_;;h?^EM*6BrX}
z;afwS9~m796k_7|LivEqwn<G=*sR2ap3Im~m>9f=1lyq~9<`{Qe@(3b#Tb*Wdaw!y
z^3l4edBB!-t%7re0tZD?v^79M7YreVsi8q&Ib9XfEX`b$ZT-vq&+NWd=3)QBCnW6C
z3F23eNDH^cfp}*!YxmX71_n9fSO@||b$}rg#3;ytmVq?cSp1_Hx1+euKq}UWmOx@}
z^85MqcceXPvmRpzHl@;xu=}WDUoVDtl5N-v8^J-h1(9j<-Vd^QSlDW@B5(A=_o6HT
zwxEt?@F*6B+$dNkGv69UcYr|Z4z6Iz$G8j0r&L$MeNCR=jO->9_~{EbsI@K(F7#nT
z>2mn;Y7ivEJ4Y0BuQIJ<Tq{VAH3&_>@EhKvy9pj`B9@jI*BjDoyLaD93+1sI&F|oZ
zg*RQf*GUxYXWdJ3TOEv0G2B){cT1E$oV3CifL>+$6LCpq{ftaALKQ3Hrc%3Hxsi5c
zK5hh`zGutyvHc9DTyjnkk<IQtiZITbAZ}qXf7BHa#Ip`<fy2%@gb$VvZ*bTV6disJ
z@?k%M<6EioW!HXmjrY_++BT=6;KW#O|0bz5s&&Zgg~JPUe22ZF8M2Vq+Te7Bkgs;d
zR_Y}-;-}$lkyh{&i?_Ul`cl~}Gwc^ipxUfyv^BV$bGxQ{$BdclP}baSC>cvQPeIbX
z1_we63^#;Fjj#`871B-ByTS4w%o;Y|nHPOt+U7|-lBax~N2t7gT%p2?iqzeLH_)at
zVB)Vu*FxLrBMic#y=6wJ2|FHfek-F!CYA!Ok{~%{GgWe~kV_kdC$3>RU9O%dq!umS
z;%&q&dC0=hms4{CKKZGKbE6$X&eDSzKp}QX>mmy%vR15*RlO4=-CL;;DQ3_WO9hKm
zm#-OO;>hm$v8G?I^I?d$uHdUb(KjP$|8JVS%*<t&tBnnW^uaqlhaP>k5gh``s-^ou
zXBkc=3S%U32+>}aWCnNNnZcno69|oAFh4l3?;%gWXGCf}hi7E4*n*Drca$v~vtMPR
zgWL=d90VWxcx`}Rl6^)OnTFX!v)Dqz0LoPbvnr>P*(D^!XCnKtEJkinkVzAf34>_>
z@qIj|D(o0*{wOx>TW-Qkr;?vw<cqO#xM%IFpe7lO(906prg!R>hWXC<6w$YEluBqT
zJ4&}0U^EmbErsw(Tm)3!4|r(YVCr6uNmFxvDKeY9Nn8iT3gEnZJbjH))$gn(a&{!0
zZZ$A$gI&5c@;qt9ZM4~1zY|B~8cfqtIy6i~#NChFd5U}&TB#KGi`p6t;q(`}P}xEI
z*qJ$y|5X$>{%ca6Oy&5+0|+CY0L|Gb#?Y?s<M|!=P9ky$KD&1ES#jwB*7REg`h$uD
zQIFwLJwasXp|REz`MA)|A1k93Pq06qke9w?u>SMh?0L@hGB;!4V){KdV`2KIxfu)d
zzcV)*)f#kK5<_dhpgl0VglG+=IbvB4w2@|~G*J|;KXz0=f`-YKjGPdFhfk`le870z
zH2DUn@{#qpS%%7nx<ye{GX<dkS>}>*Ls{(YL*5gEn>b(dn>&}Do<fmF)uRFRv^+Mx
zdg>2yW9Sb?wY+f=*pi%*Ut(<B#P!^37apM5{dbvhA%IWX(bK*USkJmv6EZ|pcR|aI
zvDAylC}rNs@b!KPWyXvhJ&ye`A<bVgfWtSs5o)ISI_tc*k^eK<>h5uT#4=$uU0~GP
z`VBu;DJ{}5*vS|u5>4ppn~lS_MH0L*4S0hJ`t?`Bv5jQS<^6{(3Ea4W8dAm;?D*HJ
z)jToetYNh>KJvYWbfK0pv1}2RG<<xO)28c24j4OAbk|pz>bDOcikr!JUOBGUe6}eu
zBwkL8oW-zgp`F}AOqpYpw7`D75SnJyK%#Fq&=WE$5MuRuu_7tSP^J}-Cy80)L%2l^
zib#g>+SyVL{cwA;FFk4U_1Tn$_~}83UFE=BY<j2J+DZW`1JT7QCN~S_IB=;}N&7r9
zk`#-N+(#^o6s^l(W4C0b)tie8^Rsbt)3$o9NYL!h*NVJU8pLIsLE(5odLEuEE)c@H
z{3_(Pdx)x{45bCy=P2VN=%?44;T68~4^v_SA$LF-7HIo8_7s0`9*ETSF|6EHwi9q(
zcWw3I`<CRY9Q^|<FyDHpgpz}{0IBRQ=R^zCzg9JQ5ZUj+fi5zc3+#e^f-A1^2a;Ns
zER;Le8h9L*Xg$$-9M?nIQbi|YR&e#~6?wA`6VJfz3TxaU{>NYy?S1eY2W<>8*RT2)
zC@1M-**`T+7+ZcEPwd!Zp%64BAY-*0g-FqJ4B{OM=y(v7IHEYLZo6OEEsz{RrsgY8
zQpI~`52p^nioKemx(l>9OEp&VNwrFl&?yTVCO2E>0nEQOgj8X2LxS>T9){h`)K5%O
zAJZjKpg!W-jcO(W&lGf`d$`flOttL1O?20@-J$*nX|_3fc;W7+kEYehh{{ScY=wP@
zxi(vGrxa}A|8{5@EUxdz6%NQs^}+JC^$sO#EvW9Bt@aPeZL$#g_EAqin`O-y0@E|F
zGqdTCAV1<JlhT%cN>sms#latwsX~fmeU;FuD<tcVYgm9HXcoM)n39s-XEB<d?b#wQ
z+k8ctXPND<W9x6S#ngbJEg-xMe}x$#R0d#vJNDzg8x0@4c|SC}aHj-B2V4Z4km}AW
zns8iIb`oORU*R;9!?jo<l^$jR?_`mwgWJV<V7LBeLg38@PlQ^>Hi=e_A>P<r%v8;$
z_Pd2Q?8&xo*E2rzE<dylaZZ1V2VFDyj@NUWXx89K61vJpjw#L;%V+O$Cs9gjBBC6v
zZ=#z11Y0VD+XEVfIzWM369l+edl;Qn91yPQO`rzXMKcxieXZnM)V>>F1})0lQBqXe
z-Z_2anf4CEqsK)=pii)vLKpt0Z5D_d1dJS5l>cg?(on9pP`^HfnwYZfST%Yz%&9p<
zAFIlv;1y)1Awa8r_;API3Zdz1CBuc)u9GwhPopn^NwOzJl^$Qz><7>k^6~D?Ku*ID
z%oAvs;*ajAQDs{`zCN|?yp8c`(ezMuiK`7W$7}fQMJQh@GYgD<4p?<l12aplxEa+P
zqxReXe%!?0^dkbR5jvuqKQu`*Ro;}BF!d2%4Qn{9gb2ARju-kHc%kF&&DJ*7`)$w7
zRtxW2rR&+G7PX&YpSs|a!h2Xv1u78r-<F-SG;p%t9ZGKoqKJOZSq>CK>yg667DB^&
ztyJ1cBVH=f!ZR_25&bruOn@PDV~e&pEtqabwdaQ^Msvv1r;oTo?%zvHo$UivGw^0E
zsJQ!bFEU4|MZ6(iGiZ^ODUo0D%@N*e!r@GXp5S!EBqSI5W3)z!84}~!wsC?A;g=G`
zwn=<%;Hg4>ZPAwn?jq)s_vmo%V7Ynhiuib?P*2_<(acad=aqMCyi!?pYdp@TC%D;h
z$~`5zJWX!npuD@o3@`Y~folC+=ly{7+df`VGB_!)YnO$zo<cJ?Vx!B@>F|9aOWuiw
zycV`2pY<_X%*n^$PhRiTJh%ou!ZrO+;XqL6^D`#c73qv_T1EkBR*Z;6gysss9Y(gL
zELu;yS@Lcz;7HBa!ZV>!qI>+)=Rk15QgPV`{8NSUPQDwxw*6eniVz%*re<3~>q?}7
z{U#4FaN~6hmD=!@-o}~N;hs>N8VZjmeN(L~`Oa1ap<}*6t8yyLbhg~pN6S5Vh)H=n
zgh;1{y@PxfqNO^@5A>ZOG9MG;VYSviy;EMylYTr;E~(Y!MJhcC&oC~h6U6nn6qumv
z_MGb!=VYzA@qOd`*`*@+osx2^o_qJ66QoJhv18_`33nqyWnNGL=2|uCscrGRBvb!8
z#-HnHKae^-Wn>Asmk5V^ah;UWmjr2o#=?1g*dAiIr+RNO0BxII7>uDIM4q;GrC=~D
z{OrdLuxL=U{-kY?o2l{1i(p;Rf#4hfJG8z02=u|7R!i*a)&Wy(T)~O8VTg+bOZ6+Z
zxTk&ZxFl2L6CTW7YDy1;f_W0PM4lppn$o_*3Kvd#NVuw^kI|e=NW!<F-w=pm%o=_m
zDS;hO0zXdX8&@~2&TI!Wc97%|ke$sa*}6f60K+$-X@9l)`G9w`6TzOq1#xzHI(~0N
zP;QF#$;1_t1l-CR*Hi6X_hJftan&~FKK6}0M@(B%J{ANjq7O^ad5C2+XSq}?wVBlY
z{Xv8%&P07lF#tYn=(QBS${07cz;+W{Txg%=f$J1P!gz^EgM#xCBqe6TmPP&JTLwr9
zM<2GCH$InJ+7X(JRb4DTU#2m0^W*G;+~29^QB{l6?AC#+xE)m&3dYlyCPC4$Zo2Zp
z1)>x<;Uc9-ps%v~BfEdGyr5<ubAD|J(tUb=u#RNhXp=)W7o4U}AwQ;n?@gx6KpSfG
ziH2CEf!aRRI}pePCPBV-dOvu!*3am#+(#)aV+f<^@d@~i_e-r^Z?>pXT|u^XWpWwX
zh*mP5(&7m&59x8L?x%X|mAcPOoqnDiU?H{@m!IM@>t7pOo64jUv_)2HiGiUDBvki6
zQZ(YeiD0qh2VtRvPU<{}7h%!~h<DY;Fm?vGF&DDnUx+)eSA4~{zLn>{2x;f#1BsK^
z?2!wA2x&1a64Va6OrnDfd#f4k!_ZZoC<GOs;>t7bOB|f?4ynM8VRdPgL~hU>>@^+8
zaW49<TbOd+PNlisWzss?I9Fy=fXtbaLta8bdys|X+NSCE@bv}~q?n(>z@?uYk6zH1
zSj}ViajytMon|xz=#9?HtlrD0<@u~2S4EhC@6n!VNUXCm4Z8c$rg!eLL_X;4^1;-v
zGv0i$9tW|?2&OD?13v?y$UP(fv7Enxb!)h@&8$4(i!NZw*RL*ByJt8QW>n(jM<}q4
zrG6$rAUV=1c)Tr2Y|aDgSZjJrO=Ccc(G!)wnE)n!A$S4Yd*zX_i@SR?NTnBy;qXpN
z52+~zicU)kMDap$IRI=>`c~*B7+>K;7fxUmCurs#JS;U|?WA1-UTDV6XJ@D!HPxYr
zDy9?u>5TgFq5(GP^p4HnqHuIB`r$PuWp+NowL`{;?#BuxFRFvpuP}!G<hs-*DR4Q;
zX;+rTL4}1euUA(1U<(m$h{J2d*C3F(M`#jF-P!B&`8939H~8Tqi6vE~NJCxFPY(7?
zN71C-=sHC+b&_Ne?ZnYUHN(yzlxX&F3aPrCktm2^A5J=QTuW6CB^jvwq;&;zZ5yBz
zB(+sd5W3e_yQAl2KhU%wB@(A`tunQ(#$gDzv+6gV2rI!&?HSKGxt4W3QaQPO5}iHZ
zQ4-e}7P_6>Temt8v@ihs79+24t4$4kIqWGyXmpP~3erCHfw=wfkxKj8_sdT#EvtZL
z)ecCX6+KBU5qcO=Vz`8Kh>_$lL|nuVivdb9$_5zauac?WerW<T=dzHGR)8#RAvl;f
zIygUu(m}@1$dVo;=j2#D6`Y&<W>wy(R|1EwYJ*yedL#KcvfpzQg01-@LGb)h^<8=5
z6E()9oNS)PMhux5pfQ%LrxFFMk`@cUI@#fs#*o0!{OeAf@W?`|(IE6}v#`}}Y<Pd`
z8jTjCJTZF@t<<6kyrJ2*6v|pP$E_I|eYXp~+M=9K41)4VW4?9Nkjrs*m)(^_zE5Y@
zM~nI$e(kp>M|g!~m(}Hy(Q3Kh%!ozJIx1k9d&4+fSL?Y|Dmiv`(LD9ZD1HhalxJSn
z39}J?6$>?#GFI0o9I-y=%9w!so}?%TeIc@$>ze}sM;B$zfL6KgNcFysRd{G;W=U}g
zK@reax$>F9er&A6uYTw(1oa1d+LZfhT<wpvsakg;{Bwj+uectw$WTQ{ui0f7lc72H
zr~w<%jqwJTsV3;Ev;hXD;m3GfTyZB4yEhjD18kW;E7o#cQ}w5H+&m|a-Ku)CeJDHY
zcW~TLOfoFYB~|uUpCB&4SI(P>j@u$dNem>aU|F}A5KU4HsK@fQ$(D9iN?cF-o(`fy
z9Ul%yCpw<L&g}V$3i3}gxR;sP%M6Z{`Oig?EdRXG4$Hr_(N4L>qTS}pwyKwl3h<@f
zb}O|5!aFr{vO94E@E03f{<#a7<~<RTL*Z3({AZPWM2#h-Y57$1#>DX84WbyOrE<%1
zSG>;61`JQh9hywe^UFuR6qm|oPbQGw?dkLiRw<*tH~8yV!;3iWuQgt4Zr$5xjsVxN
zeSUzG5@1-*OzPp2pqphW)Y+QP)iqtlg!H{h$0pDlF+GBdL-XwnhM9BXclLGPSlvBB
zmx^FqlSGS&EbVyw9_u49tXopATSW&dTH(0~z!go5d50oqwBF12<88y45WRC7x&I1C
z7kK5YgEpJ!f~=}WN^lI7>n6Tn#ATN%4%b~&){Y;YACBc!ceSo@xn$)ud92=k{ejju
z+gFE3^+q%Fhm$jEOkT~y!`x$ucn@vMYR)(g>Nh#H?|1KlF;|kYNlbe_{fI<lUMH17
zBa3AZ|3o3h+=(5UylC(Sd7p}vlu+oS{lo}SVY1{q-ZL}@z*aTp^oh(DthhKlafX!|
zxlzcbZL!P?bMci%n=E&{M7xVtrE*O*TX)fUr_DX8f%Uy?+Z8!{$a-N;J7W272W|{H
zl*_i<1K86P&2E}4JZO?ec^eOH$IF;hMy#E%CYq`=#u%ll-3?rC<%Zd;X)=f%*SPN!
z>r3R)>cElJpc89m*y%eg=bhyru;p;x&b#!oZX=qF@h1_j;Kko)PDY;(EW9r?@KeSR
zZNVP#-Yb`D<QCw!o!8<ez4RR9`?-mDA$sHs{ZwhIs>dhqK<%o0vwb%u{&5cL0}P41
zYl(Vm#fmE(G&jhX`wSWuUF^FntNL+zXx7hJ%}e0c3Rmh0uE!Y4mJNavj}-6yYDz3s
zwAHt9Y04%Ar#c<4k+viG-X_>8(FoDhs<X&@EFs%q9ABlt-;bMwow&rjQV0*GQ7d7x
zjPM#d0IT4aLw$X=B3w4vG7Q?GUU)X|BBD~aT{({Qv6gT8P@&J3-K1=IGp8}uOav2z
zoEvqaWPqEMspHd5UK&!ag4&3NbE2MOPcNsWY75lvVr>y#E#wFs+{0IL=`;#ngx<V{
z5(U%3()VKpPRuzZmb5`BjBsyCbe@j;EL)+fJBGdEiCnaoiWIlbVT*m)7(7sgPBiw|
z!CeBp$G1kXwpMWvCZjw!?Hmv5qydF|_;GFcV0(nq?}claK-$PwF%^>)N=`xZy4I3g
zV^O*-Uk74;m{@GUxTLHR$RZ)#i}Ga*8VW8bulM5@N{-rDR70j4DN{3jcO9U`i}d!O
z)Ir9`(N`f)lT^GmNFpE-+~!q7QxmkX%zdt5H`6Dw(gtlhRSOaagT?LT3T0t9=W8<*
z3l&7ocXAe~q{5*U=H<6ekJoG&)`UNx?|sXV`>JY64DSGl+I2$Su{W4btCVX`J+)c~
z=F^fcS=y!S*57B&mKY26$O{w#Ev*x_qcy|XZr#=V<N7+^?bLZH+UKZUqKMj!;|0*$
zUN#x4Fk<Z#IczGvA(}<6*gB_j*}l*j9GLsy%0p_!pF#7T7$@YQMMPGoY6e4)^Mjbg
z%{7muf!Ix@AlMWp2zy?4OsFnw$D*Pi3)93toYG7Wygb+iEd5nAxa^nOpgn7OI#NPJ
zo>Q9B3tW$4qJH)Ya@i;l>O6ia8z}%w-lUrB$Qjv51mWpLGn@%|dY^E24y}(&6G=v{
zp~%scV-~y@2FDm^)tAV5dljxebz|=#{;W@#@aym^-giFV_fx@s`Y|h5q-Lf?UZhO=
z8i}!1wMe(c?9DOyxF+ywPNU-m0X(CRwTl8VAX0o%DA6Xl5yB9#_sRrgw>~e<Lb)iH
zxryAE_~AN<L^`jT_#fbOo#*f_ri1v-axbTkY34&m+IF7yX?_~ThmOMQ{g67x8^eRD
z+`;!=`fI$Gy4kWE2h(!s0qz>vPZ2P0<>?>6mJ;ZM<VqTic2CJMZ>gyCwO+pqk`F|6
zW@>xP`YE^4Clq6JCU{M4iKDcj!adm%Q?=GC$w_0H^)|!}?5I}4`X<Wz9nHas!H-1R
zME8<C?^i=sB(DlF^$JsP_ihqkcl26~TN@JTFcf-xTf|y)hd!QL-Hh(PvpvZoe$Sm>
z9D<i>fWc^^&bU3v{+=t40Mohsgf$onUfVU1Q7A;m1F!(;;-=B^bqo_sTWx<xiNp{W
zjM4sQ&jdWrMtX5DUvysxLA0ssTTpvh845DR3Tjh#wo%noO0oAjHiU(+pdTZk*$MCM
zKnNg0y53KV$e;Tl*^&ecfvC{)de|8Br(5*;kN^1S!}ddHFS`14$*l$Z3YGaCV#8O+
zR%ZaQ;1ye_r70^>)-v9CY98T?_bkDf^k)DFu`O=NEOdzMD|8fz(mHp+GardCgz~HK
z4c<sgfyR)flh9J&hEA^Iph^D7t}_kIJI<TLCi_U>@2rXl_sdpNH6|^|C=?8t7nRpM
zhr;3Div4d;$;T0?!a)x+Cwt@4r52;~GWe2@k(wCFBUC!bkZd^FEOBZ%j4D;yzQLKy
zUVmE)Pc_!75L8~U*L7p+VKYbQY*A{;5v*T2XeDlAZSH-XA(bB49ir<LfnoG=3zEoj
zPr^b0v$iEl^bF<cOBmzwi#O~vbx0Kk;NXt6-s|#ZJmk!(4}Glli^zY9>=<OCZ*|dq
zuP!p8pj>C)h5|R(KEUAHe}46KAiHo;97LJMqXZeWP<&gM=<ayduUh_1J~~@X2hKEe
z)dtVXF>Y!q%BUEq0ip=xcU&odUHy((`c$`-8rC|{&%Kn^!n_67=}U|Fhr4rpCSBbe
z=p<j4;%~pnyJDm2XJb?Zhs~BG8@)>(;Gahk_>sIUP_*Q)k`=^PO>#VazR1%R6B48P
ze*du)ng;6gy}Iq`sg3ZDEmG{Gt0F<2!%>7ELf4C}$VZBRL4|%#O8_Ypk*qKD>UMqA
zm{#fNSs)1}#N&t4wC)-I;}BLvPi7Zg>#TV&XB!4C6f_wOi%55j)c4K8T*8go9+X7l
zK5t!|oQy*o0>6pyuep4B+8++J7x?yCIOT18pdsIK8Cq9>>HvA)mS8?HO-qm{{)SS%
zXg+Q8{0(8qp&w?>QtS57>e&T9+<mpzKaaG2Z)wQP!o>0Cv+{r5j)L{y+K%Fr#<1HW
zJIeAQZ58~CF$qNHZf*qYD5))4VVGQtLrb>gfDnBw9O&IS@)O3Ru{p@urvb~a`{!R+
zIk6E=M%q~}Inb2EgdWa2h95~^b41v~o2iHWR6Q949QMMMf7{;JE_|h5#sS|L790PO
zHGIIU117a~`_A40%#90!^ebtVhI&M{Ua`}sO6gkRz@#jvQ(=>Ma}sAYx^QY^Ce2kq
zK&9Zdt0cojDml~W#oT<*^>GsNmXD%)@Rb`y4L*LbZ~sq(A<+#4><diVSWy)b6LK_b
zXS$3o6p%t#{4L)28n#Q~ABA#Wv>pz6A1sP9hrSGC?IIb6K9n``?O<RTtn&u5$~8eA
zTnHu}NLneyMBA@?EX;Uqs+=Y?Q}Wrr_guiJA^6-cuzg<2$s(aYsXvrZUZ|}OezPJu
zd#DCg)xmYKu-DEwCNlE=a$-cBf+&oTrz+@sC^EaxCBscP>lLhvqSVxS=jJ*D9I7cR
z23duycTEP<8?#*x{8P)rP;plLDgIXT6U@rBxc)`*hm4EYfu(dmwSKbG6N{0>?rgd;
zdlO8>Sa&ub*ENe5qEJL{wgINT+4x{f9tpyJ91r{g!nwO08+Y}pDaPD}hq{qHrcKi9
zhXZkD*^Dfrg&zOHksLy}ovFN;qm(AI3TjJ0sa={{iuiXnk4HEv%i$ii_wn?KY_|`$
z1m9HXrSnp?K6=*!UpsY+;yE>%I1+2ud%hl0h@K1*^-vRHNqRp^i63s+^PMoG#v@U5
z#qLY)7qtB#p?7YHQR#G<>!>l4sfa2=-!J(UU{O6Et>6v{EW=a@$Exvr1>W&ELI`L$
z95#uAZ|5i0`_rZL738n-1a-d+A63iobe_WWmZ2^HRnDb00d7|Lqc^XdBUA><`<7t#
zJ%Mq<ng}Y>kjGbgynMubeIoEdAJwnclKj$Im<1BanQq(o9z8y5Bbq}YJOotSgchg;
zuoT7VO%af?UNw5G(wSSVraT}8n`Ft*X7+~@lM)Va8|)~F&GGt>NL>LcR<#hC0~ayS
zc=JLbYhK?2RK61*!hM8k6t$-v6G+uy-;4>~+dQ@J!lw?+2kqHUsbJm(FJ4Dk1nrt_
zwKQGC0u+R^RAJ^*qF+zzCoojFE2ywn#%A+iv?q&XXMTo36(we{WdEwN(bi;RS-emu
zJCl%zsFg@S6GV^hH-ZxBpyUfVaJUFBP)k>}5KrQ*IqkLJy3}l{I2)Bfi-P=)XR|qK
zQt8W#GdL3Q!XoZ>+$qM9+O^MaEi|-gAs{x91(><JYrJ|KQ4<C9NMB)~5K#9!iXktz
zT@*6;8*4IK*QhayIS)-NqVqWRtR$zkhu=%Ct{eLy=D-C9s&o+mLNNk%44j+jF9+QB
zt=OemismO{gtFim14A;A2->mM{9|EZtb2Sr2O=Y?BfL<`L&mA1<xVJ$V#bx@KI?{4
ziLWEE5AlY08kE428y>)DPG&LGtLFq!Nb;2^yyBv(GRvn;4uwPpK_n%!hJWv}bc8DJ
zj9dG;8VdP4&$!?`&Q`RwMKF_-AEQR#C|mdwSFe3qyY9)pk?>gdsZ5LHkr<vtB6BKF
z{X)8ng3>g`YX?4|E{W8rJdg;2?$dV?NcR4;ZqwmS*decKUy&9BKt|#CZ<8SAaS|-V
z{(v-`RbW$HU83@A6-*U!+^>KrIFxN{?ZoKmj)J#@Ffk{aCy_anKJJPIlW>d9w@M34
z<JjS_`J~@e<##>jkJRN2@?cVS#s#+f$g1pOVfRYNUet<xbj&=%GjpV2iZ7x@DApnO
z3<;Ww_TezALI?h;F5rt$hNS431IYP=a2%z3z!$3Q?Jpdn?E$l;?Iko+ghgq&ZC8a?
zfnYr4HbUuD?;lgdFj_s!vXi9=p)#t&_ZLw2DD%IJVFd;ebk?U;_O*({-p8k|KxA1B
zg#XB4ul0hYuB5evcm9AqFqC6~SaRavN_C0_j|xuYo!}yzum1*zv^~!Wp3wmP{Cz`|
z<&c>;4Kb%6QsZ~+LM{IKfp5q$p$vW3KFrIX<k3T><jvRaQ7R5pNj?O;cbc_in+1bf
zm3=HEC(v-^N1Ee86fak>6Ui#cPDa>YmEN-n34X)BoH73Pj+}X7+&rHpdleCp`1`x7
z@p*h{2GHU}9YUz@4(xIRi}MQA39a4xjO$}}b3%Fjn10JN%_J5uw%UgqePa=sGcBO?
zH|JCrkov}PAH)YNU~p!J<Yjivl1rbqxTSe8cYUE5p@)3+FC)`L*DkE4TBJZxGZ_y)
ze+6_jF-=75zq&+zJK_qFr=3NQ*=?Rp3nRlc9YQdm2^H-NKz2NHVPkm$_?uY#Fl)a7
z_k9Aji0t<NCqw#TAfF#uFmZ7FxuEp-N5a5!U{pLEOaTgp=B5ByQxi)=A$t#E?Pr_H
z&csa2!Nsf#2T-zi0iFs&%m_^7WNPO^{Ja=d2^b7~FXHNCZ0ZcmM8V14SlQG?8vr~N
zhZvw@>fr*U6SD^<X8M&Hc$y4A80ZJmI}<-YFHwR61_7CU;q1T2&hwYhFJ=G5&dWy0
z|G>}h_w@hw#l!sk_WytK^E}G=J3q|N-vc}g>c7CxpKbG(d|p-`{{uh2$7cTpe*Toj
z-}w2n4gbIo%QIg8JMv-qU*P=m1;^jz!}8z5Gs~Z{_)9)7&m;eVpZ^}7S^pP2v;5hH
zzuW82<^t*pp!y+x(Lc__0BK7TXJT!*XYnb)G5v9SS*QT_(g&2_m|q^O!o9S(5^%fo
zmy|5OlIRixW#9_bIh=pjEq|8vM^VCtE`~Pt=D*AQLz&5%x)_=OV~AOQ<@Gn^^qk@k
za49h{!7;tm5TL{b_fjo@5(nH%8~lyp+5aC=yl8>{jN)(4oc}$pn4j7GkIHz#`hQ08
zAJ_Z^FaJ>)FY^C`LdekB^x4V)l;niPHRWklENxAl>4ofVOkRwSh^e!&lcj@;y%RCe
zm;o{M%h)|r0Iidyle3Gkg`pEM3o}5*@DDc=2Ma*m(!|9A__;YV8zV6bPzY>n&%*xw
zdk%RCWqc0#o#y$@%)trA1`PdouIC(pDLMYS7~!~psOA9ToSmKH<^J2v4y-Z<2j|Ph
z!ui~c&%WnWT&%3WQUXi<GZiogHa7Nu$mLhQ&-wkT5s=fDI=t`-_Xo#78dhL_&$Q3?
z-*tTU|4#qg&G{k~_UD?yJ%=&=q5$&tLIn(Ymces*zhwa|m+QH+{`zMGmifQ`o^$(^
z<G)Vx2j#!a<3*;x@rS4#@Eki!J9A>z7o!GHb~SQ&9_&1;9Hzgz>r3n(fO;7W{iXvv
z!|P9vx}}|<owMbiei2JEGgIJr2si-J2I?wCfSD!0%mz5hVgcA%+POOG{#C-?dfuOi
zl@%1%5)}Reu}b!~hIao1+2?xxe}L@Y1^e6_zpv+}_(#A38}HwM>kF`7An=#q|Agir
zP<;m9uV#CWc_|SHhL=>p7|uW3K>rI|ep5eFyucPn^BndY&d=pM=kfcW5$@Ud0!|>m
zf4@J6|E|L`NT07~|MUI1ll&3)XFY#&_B-8k{By~_^LWl1NDT~q`TYSg7GUT8pTGY@
zKxJqB2cW)Kw|@!L|2gdX6N~>oP+7PDj;{8=vmPzYEnMKZ*njzKOwC;2m{^zqMy@tC
zra<TaE1dtP<o|@Tu%fVxw8S59mIPW@OXL5E=NH5JZ)jj(*?-r-|5Nb4{D0TG|E{L^
ztyh2N_zPmceZO*f0Wz@pe}Vbg_h<YcE+ABXYfNCezk~7bpn7)yihY6NUl4nNA`sZm
zx)ON(rg_finZM`z^Yu&5|55h8)O0{z{sBHO1Cf6TpTD)+|35wVH`VrHSO2a&pN;EZ
zcJ~DXa)!31|H48G0jHbV^lTi&^vsOx#9Y8}5IYyA?(;FEz|&J%;Q)fp#?LcOU?6b%
zXy_ne`V8A&-seJ|<DMzu0KXt7XlHH%oT$P9lwC}1)qrzPAepSCvop{Lyg=&NTmv%#
z8hzkol?osT5CRATL;#`yF@QKg0w4*H2FL(p0dfF&fC4}fpaf6`r~p&}Y5)y@CcqE?
z93%icj<Yqu&;?)wFfuf@cD6Bewg4D885)~D_n}{|m%jDlv^I75GZ^Up6=4i8wzsjj
z1OD6E8UjoJrhu1P0ZbiT4Q&9X9>z9?wg9sib7JXc3bZKzGvGWMU=A<`p2iAf0AK;I
z@N}>+wF6iJtN_*k8-R_evopZ<m)QZ>0qiX8Oab-)d*HtVz~On${=&qI>lX_Sz-ri=
z{ObEAMm7K^fHS}ucp$AEz}eCR@T*eJ4!}wQTmUW>PNu-SyFI`a;A&@L>f~%}?_>&a
z1Gob`0G<FZQzv`smu7xGi594(Uj|x#*}fP59{~Av%Ix0{nFY4g-;J{H?^9_xSXdeP
z`2IY9Hp9bQMSHg8IMKAu-9`vM-j)n&P)?`Hxc{oDw_QEbJMRZW3>6v-EQ;tPT6+X=
z#~5sQ@II(OcsCt1cS;6Fr^zEuhW#+-vBren=1m4cC%YBw)1~u1ya$2Fm4&;Zhn@7*
z4aM&Fiadn&TbXBj2DfEwlSRb+i#SW1gdD!u9R3~f&<}jWC+j_78Pr=N;$z)-ee$^L
zL&5DxN&4XPR92kPjTTdxXg}IpujT#jk5jBaRZD4lSZF--cslPeBx7f%-}EPh9R_T#
z=P;oc#$knZDNfGqttERz1GmY8xb4xMwD_4E_JQc<A@t9SqMse_m0#66yN>v?O$J&U
z&z2|I#@I)$##eDM4f>Um8l*8hc*lsJeL(p-o?+Pf#a;X;YzeO(;59gDI;`H*D67x5
zSv6s8R`H|E{jK>|$rNsY>r+4neR`9{<OT=zfvgpDeUMkg_xwbqkHs0&udHb5(^AEb
zbC!zRr(LXw*a8>i39`Q_uoMSQYgu8shH8no3zrv~DdQD!O^aDE)Q6>t+ZOC7YZpOI
zs~y-+vs;nWXK0CdDi{|#PD4n^NEWFVQCLB+h2cul=j9e}PnW77)CV}_=;f&?<`vCS
z1BMdNl=!CcUP(t4^eONRMd6BtQSsGB)Wze<1uJD;#Pi%&sdl&AD&ItPLw0X>+rJrg
zvO*uh?1A~5!!b2~X-pB1<3VoS6OX!p${|ijIDf$Nt$F0OQJq)c)-6YOt5Vi;lwFEv
zh#5`~;P6SOu|*Gy;Z+DcppC?D6Uz;%H5k#fb}sD*E3fdwljX=Z6JQx`Idxet6iozk
z!g9hqm#7bk2#@i4OXHq1%aLHSFghu^gV*pl2oXIW{jTS**E43<2wBif!!Lc&U}t_-
zTT?$?tr<(N->ITYmZr1DU%9K6wfH@Y2=iI}B=>jpAqBD$s+wtiM%QM+fNWb$Pi!dx
z*n>z$p9Vo&2{uM%4+-QwV&I0LT>P8(lvpP`%+7iCqN%#4fe<~!IAlDX_1beWI`xBd
zy#joX7OURUZXVLS!aZM<k<aY7mOpBy8(tba5ZRthncZ07aG7ZCjlXrpI56mx$!p84
znN$+HsrtO4w8D6z;d*2TJ63?$br26j(5xwpOkqYOTBBvIKeEA-vgYOH$Q~{lW+|zs
z%}On)<k^Feyk5Y52(Q3ZLJP3_N)Cuj5bF!~i=Q}d3BOb$;tcX$I@7|(A|O>K8X;93
zsGTGXmi&|t=UQKm?0dqqd(EP!Q9%_Zj*BWKM`1c3Xqk_akMOnJrAblM@rGdq?AXo^
z`e}A;NyEECV#_Ei>Vs1Uk)sbRya5tjmyrgW*p1+fg$MDwZN>*s&MTUhFIwb=;$LJB
zWh2kb4HjDD-|}3~&L^EQGkvB(Uz(gLar(go4yV<j|4A>Y_Z=#qQ8Y}@S3llXEaWs)
z2Zv&NC)em879{)1vOP3-zo)aJ)iMsU{2R86p5UoZ4Nk+_o@&WZ&W5-|-<vHkJD472
zc?dhMjF_9c_U!$F!x;CE^_ggy#Hy35f2{T1WaK|`^L`wQ1(cWXchKCrhvi^kem~~M
zcm0q6`)p(s5u}vF`)&>SR!%}P1V7O-ZXLjj6eDtN7o`_-U}T|aN6D!@)JNJ)anOvc
zS7G>VhZIiSsao!zn#CPFntWQNmjcZ28yMgrwyw7n=QNa+zk3A`aa?!`k8+3lc5$q1
zKyld2tK=(znin<@mpf{)Se^Wod{Io4lZ6A*hSc5Je45YPB)&vo18c3_t0720s}O9K
zPnnAlpPHr6GVD}z#AsB7mHENk&<`I*`TP|O*xfbL+D{oPSHk<ijyqnv9`b-SXoxQO
zE}uw7IJtG(qYq2*T8{)!6cdH*We3WkpoQ}K0o*b=S6~;s!kg}5l0h@>P^cNeV~QS9
zKzVJ?X06)sL+$c|6^EOr=xAt)X(}0KIpSx@3RY{tqr38qc-_T%SY1k>BHl)N&-dMD
zKG;#0t*d_s;RXv07&M6kBLR^fs4IDWQzPR*->PPMX#_QCxjGlLY&7niRfD+mebfD`
zm<=a|-GY8I6un4o9Hz)!kT=nX)c|ZF*Iw!{@W^ufx^ula3blE1I)62(lP5uoW9gZ)
zQ6rP3T^B3}E=fqmw7C2nrWF!zWi?{6h?-n&uzA+A@vv;C5yq%9R=Mmi0oe*NI5-Lu
z85rb`ReLg=n3}z6XM{}vhjkuUEIKCZ(F%P|4+Et1hAKi&ON<a}grofXv{u_*@)T;*
zjRg&5F*2h!xM|$p-L`trft&1Jl0oi#{oLD^gGbC!6MixH4^vYQ%#zgBmRLwI*zX_N
z5Nn5;PAe@t-z8)w6;jRWn-C{FiLRn5N#-^H_nH?7gETap8YdFW^1k+UnnQJLFQaR4
z!ZRj`)u)V&P+Dy2W!IaMCw}^X{B>O!v*7i(W=WY1+mH}WGc{za>G|z>XiBZ;eeNh_
zo8R@vr7*j=90>}lH)H1QKZ^UqjHvaDFyd#hFcY)ERLTIOmJ{i+)`BBb*6JO%R88Is
zl7oGi#TfNW4QAHn%Enqo?M)2DGM3*>b&l%c(w0a24uP*kkezR?@%N0*-I=?RxC$<p
zmPgVq{gZ=a7ay!!$$CCxp%alfm=SN`;=EJ8Z%OD{{uvF95(+*5A`=p$?_cAx67w!*
ztX*Brw=&exUpzH>?FZqCZp_&_^X}KNfNf^~{#7uah9g6x`*UG0Y4^1ZZC!Cbev-rl
za>&Ab3es5C@)l_@EIkyV3UVpuPsj_SZGI?p=3JcMn)6q^gBT&T2!+{Ey9XuqJE(U)
z40-m4BS<K54mHFMXG6CA3HBzJQAfC{C!pf`h|tQ@c)+FOs~Y>RqC;@qTu^Z&@RU<`
z;DZOQNNApN4vu_ReW1`gI`$96e1%O7cHaQ%%7%Mp1|Z(U`z$R^Q4>jB$1WlwN?Hg;
zU@AM#XdWTF+n2DmiXq^3ke3g&_Z@ruYOdEc9`MVyHCwAxMnTXOn5e<%kAgvRuc_q>
zOx1TORdL6VDO^8)KCokeeN@MJ%&9o}I`}4ArF@VA^ht_)U~a^g^@5X}n%Y;JVeea#
zIVl%#!-e|rdXI=j=Chep#M>f?Aem31-<Eh(Oz7B|G1Dmv@mzvizC`j&bC=Vgq@Uw7
zih<ItQGC08h1Iyj)#S7{fBpEuJo+R28>gW<D#GHKE=5`;;d<DE@w$^Et!>0!*JDMM
z@DeF_;8(UEXPoXlK1?XI&KC{O>{xPaB-njF%=wC8UMpK96I3D{k$N#`%gnW$oRKwC
zhqDAN)}#q>_D1I(Qs3DMrPIbPyg09^DGcRWAwXQWoDoAuAd<2(i0KQr&ZR3muWsQK
zPE9NoTWymTSi+?`?R_=8o0g|RLWihtZt47_T8eH?1)6#M0h}U<@~p}X114XGQPfpT
zS<d;uxNvw3=jvX*!&bk?<=s-#v^C#-X48>C`v$^+Sh;EjWvJW6W76DQ(d#IDrin0F
z-6Z+U2k#6Ml&C;@?_U3IC0bgR0*oTr8|K{&sLZO$<vSmy{RK&!M@zMw4|QbZ+ISej
zd5)2IA~CUyDJMH059Lkkgu~y5_EqtVw)0uT#Q1gMB8|(c%>{h4+J?lTk`0<Jo=3g2
z$rlTh+Yifo42&Gue1*yWiI|1I7NIrp%dxpbxh-Q-J!UAKM@l+hMuxe7RKApaqL`U!
z@vD-a9y3>2Il~P_Sza1342)n~KjK`bR>ppOMEkWsJ0_B9RGi{TV#|1;kFf~_$_KEj
z42|PG9vCF(C00BW^Jz)y8agUUWaTn+vTWo{2_@ke5)rHiWfJ|Pnt>P2@o7$=4XFfy
z$PuBsMGf*M@|M!fk)R`;!%lZo5$#XMCAAU|xw{=-5Ms)1FfWjUKS4lAXXBsd84`W&
z{^l~PHjm<5@5<uV9k*Am{b;N$j~o`gJUDVcIsvIJVPp(}I{Y#B3n{pe8*LI<UpEP}
z&Z~_3s+tYje(XomJbN^M<`W_s537YYUqF_?#R;l^lApw;s6&$7>OB19lD52yM3@(A
z>$j!1k$>|Zg@&S5MbBikl)2^6^#eltR4Ld1eukU!i8LQoL_C>dNJCRks8f_Dnz4U1
z$Tkc8`A*eZQ<Fhu#elRez3G+fMhlelY&8~RM%tE|PfcANTQtd=B(Df`F8pt=`8c3G
zY(o8XtU!z~k311J{dm2~JBIRQY2#63h_~!{G&07+l0QZzZmM%+WJdSPrv*_O4}RP~
zyX%f9{{fKJ@zv)D`nD?PG|HIv^PY~jwI(Pz&l_P^aCfD$3?IT6G^!mcw+ahuI|$x1
zpmlzxICNT43Xf+x6$6P6xT^9KBwXz}U$^ME0^`|qu_OrO5`Q`roaG}!y;(hYyFMcO
zV{S)EnoDe5#z;B0CHML$i;gwN;m0H`e>vtQU3}_7`>l90v|<0oN#FJf)fExZ5c-tR
z!ZlbT`JczY1M_UMOyHNb4e6VtlARW3j3{#uiM;x9%Pvi#-ca)~(StJGo2aiL8l+X|
zG}I3T(h`J-TYlrNarK$+E<Yw224m`zRO=ctGA&<c=$8Ei>wikfxjsF@i<T{ok-#A(
zaT3dXr&qv*T5f!1iu?0Rx!ac<W`7*jQn^zjC?ktN^YB!G-ihSasyuMay6;WJXK(Nv
zsI>Oq2PnwMZZK^tmeap)Y6cVhmQ?b2U~FJhZ)f>+p<=|+xeCwKMWf-gxw)49Qj7t5
znaM?GbHO3PfpEc@&WO3nWe52kcI=)Xn){G!mA#20j9dSd10z%7)ETSM{D9wgEC^qd
zvDH34G+_w%?ut!yM--&9PM#41FYdEWtlSDv@Jfl$6SR=zY4G>jo<yko<WN;Jq;oN)
z)GSLTYu`3AA=iXD)HPT2loN{wznPkTieORU+NX*Nvx;wY)hH)Wcgxghvg}ymP)o-y
zKosyZcDvR45)A>h${Hn)#Ilv{(eJ^Js;UQ9dXv8tT^_JazJT`V1I1&3ZEiDsTKrU2
zzw2`e3qCTEcB9MWyXJ70P_k4%@($W|E;DuQW1jH-9V;(5)Cqb+PRr7D@F<q@B5Rl9
zxsj)m$j+M{&H~moD)-&DVx`s>v%>~pnrwZ+Z{LVDg-LI%n0(!wsH^%kq^^a{i4?6<
z=V_+lnJ-FHoHSE%|7zF>Ja8QJl|o({;a8Yw`zf&=$jIeeVtk$T<^D&0zNL9yYW23>
zrtu;gfzjM=J1rIFw*w~V@PPJJkNo=sjp<KZq_$>3MCI6X{dyKMus>GNcllOZa|$bp
z%9;g9({F=@4eqT1S3SjXyl$$#&qZLd5g>(>^d8<FjsBcc^+xawMwC}S{1}7vy%^SB
zdAb0&j4O+ckj4FnuS54WjL%mA6w4DAe1Yq*eGdwx)a90&?`r3;r+Jb@(uZ${F%ZwO
z-2HHF+3rBD;+O1A&Z4gwFhlhF#~>)52tBYtK{o{jP#{QV!-Qa8`!P%);eKY>GQQC%
z4Mt=s_?C@sa*wx^^CS56@e&|}y-i&1huJH$SPZZ1J^u3XThULSJ_X*h7(H!*$s(}9
zz%Vp?k@~zmJ46%PLfnq#EnK*mpk?jpY%Hy;iuFcRVci$Qo<O8`Ieln)X$DDUPu)Df
z(gC}!P%U*_HRXw6qMHI2>|B=e3=6?#`?I;C;b-c~s;at@&hTV&0$+PORY*|^sg1a9
z7IoavT^j<GerU$UE1%@3!Z#LsT(7j}&feC;x-u_OiC6G0Y((;N1jv-jzmXJ>M&I@e
z9?8<zNbZQH&n+w*{WgWZva?G?jx$wV4p(c9OznsniBG08Ld{7HKQU3q&Q7Z=nO;o+
zh;{hZZFM^ECEL;CVFN>>DccV(a*4bd<F>wo9O)R{mUFB1%SFtUOciGX*-YXC33{Mn
zM0QnmQ&YHvQ%VKjg^ZK98S*^MlHVPi4$%$IoRdmG;j;EZf`MqEsJgt{3ZJVI>Li05
zd}%n7y(6~G(c;iNbS-3f{{4<Z3kDL?MJ)W-9t}Q2Le)H<>f0b8T@|eubrlU72Da^_
zJf$6pbaGM=3izuw{IlDP3t98j-g@x}?g@+yf3^A9THp0`-xYB(`K!8mSNHb>7kIB$
zNsv|cs>*x7=||*gr}#}c;SnphFTK?_V`U-)kXPiuSK(de7K=p{5XtVn4ORG9405h$
zrzWwuAiCv{yPU&tuG2h;-ehYYz;Kc3IlOLtQz(#BIXo;hPsOX7k{GhuY2V~%eU8NC
zGi{)R8wf>$o17cU%(-Be(;n^whv<U<vj;WY=wTC8rVv<1nlCvT_vS=Fdyh3fBS|nF
za=Q8PQrmd6-l)%!%At>e@xu4r?OFDF`_<ci!=CP=7LhtL1@t9%`%W^-dp-YiBM%-6
zD!yR?CkOYMq3PzWf_~OiJ@-BE)hWZ-gdgKRmxey>{l#N_(G$*4CzE|YXiF;+5CkU`
z>$N|yg%UHNeM&~uMfd@68aKr*T>k}|Ct0bAnaPQf+)H8d$Q})k4_mEC=FCto0W%hG
zz&hxw5z6o0{hC75UJi#jOd+tijHMAo6<hX0Z4o8&osC)8w-#tAsL#%1PUUN#>vYP?
z_T1CSmVaKD9Ose9VK3OX9i3{<8RRXP@SN}NFH~gTltcGS%zmL;99P>y$7>5j&BWoc
z;!e?hO0r#;t(G;{+B<tIOa6v$06kch4Z}3@thS`3BsbNuU-q0EU&atYsZ_{S_z~tS
zS^gxKhqIunt*E6BTQfRS21WDkTDiZKYG}8t8K+L_0>a*_2X*vHRI|8uyJy-nbTX`~
z4Zcp>Nznk1V1a?ogZZ@}%8l9GmQ7fXo_2SC_a!BTdAjRvmL!JmkH*+Ab<yT{imG1C
zORuzBkjjOt?<6v!^`e*&xS;Auv<qj=Xq{C;=L!9Ac0iSVx9Wr?XR6XePn}kFtJ39r
z?2rx#@Q-|&c=JzP%)M9l*W>`OOE_|T7hKbXPA!$SwT)lTQ{derrX2XIz=x}5Bn6#^
z9p0ly7C2%Z`7@jm!>^V5`67<Y@>E25M-VWM?M8x)AP{*8GOXB}G@BZ@GEadIXD^2p
z;k&FaH^HAekTT6<rFyon^}MIOra!udu{2WX{4&4d0r4eo!sakwiq>n^4f<(qkaeo{
zjmftj<q37=ERy7R0!p{a7xz1a)|>abBAWJsRb(JAW*rp#GC$7^G=wvkf|9D$ZAV@E
z<$bT}u*66WCY0xA-xGPQULB_T2FFe&36(p#@`*R7kBNDJec6~Uo+Oa`T+>A0A31yq
zkI~-g5_Ii<%o_Ru-OLM$jL50-DhichBh!(@=B>MxCDnIP-|&IZM{m-koSBhCbm*_{
zS#~G96qvsI%G0PmZcBjZK_?zeH57POs8iB{JzXB6`!(>YS6>6ppdS<3SEZ->6GQN)
zZA3`hFrxz$Utj93$?$wZONJ+{!IDd<TlT4y(OuTEpkv0AuoDWNdehay*dS^jcNlod
zH%J)v6zLG_Csar0rDM@{{1BY#Y?~2hrkyrl;_iWb|F++d9BX*tVECfNnZD?CV_T<=
zl4`V7vRH~}YSCb*9NMrD^Q5p*ou^%hvgfCr>+p~^CE%m)@Vn%_pq}KdhdQa0CI%|N
z@?KW4GknD`UA!xKeeqC!Xe>>fkx(h?BUhX<mns)!e27frUJz?WN9H_19!%^vO4iwg
zq`GgCsUNVg+}W{ATXEW4_ro1z0~o+RF|OC2)6-vFiPN}{TbfmGc&N$Bxhwi>N0e|*
z(bW^MTBf2*>8Q_678K2;0nP{2x8JKFhxfUp@y_<OUd16}9Z74JJ<ZxGEUsYO;IT+W
zQR1}H=2UFN4U6rh8iW>xC0)MxPHDR4xW*$k;MgF@q8JSGF{&`hg2TKYFGUjUQu~QX
zSy|M_M-$H|sDq%|LIo;tEc@eD{yuAukr+FLiyOP<0>G9h#Iw|$R#>>l-=D_*ammkn
z<dXH&hWVZg^G&1&GTAwyyx!!O-Kda_k*4Y!-UaM3wcu?8O(f!6n=Em!S0x5nuvLA&
z1N#L2@LQ%S35=^4W~+o`m#sk@)tyUkywQ1$P9QFiIk8ba1?b8y?81(ysYLpOs>i=3
zCq+2*Ct#Rc1blf^KTdk!J`7}E5%)`_jH~RU8lIWXH6}eFf?J^VvTyer)O)=Uc}*D%
zEgn+R?)uXjlekab;#FcI-RK1F68^cd{QHBjN;u!*+GVS<$r9&F%@!F)wN$+bW<{y6
z5}sYaV?Z$AR{Y!rbNYHwgTPVNVNgKrfMBFUq9fG!f`#!kZi%Q%%D{v7|7q<jfa*%N
zc5#>BE`b2SIk>yKySpFUHCTeXy95vJ7Az3lgS$&0xbseC=KgnPGWY%WRlQvlwRi8;
zYqhNII<>!E--_*}lAZ3~BpeZpE}#tl>On<FcYXg7)lVq?P|3r~0Nd5SiZ{4;ma^C>
zAv>uHF8}cDbukbMMcBSEBHa^PIDX5BnB@HUXrA7(4)}R-kPp6Y!Wag&leAL?s-TO)
zI~UbslvD?iwv+Ew51GQrdE|V3YT}GXAEByl=mEOo6jR;qR2s|fiAVZ;2nOT>0ZI0j
z*m1aY>F5~%lGds><@}?&b<V72Mw9{fDuIA~BOfbZhc!D4CHM%?zaCX@WY=z6vpHPo
z)#6yW)!{gGr<iJE3NtQqyd_0Uygs(aOLweWP>X;z?L?dQ1v+&PQzB&>YiDPVJxM!)
z=9LM(%vn5Ab-kli{#4dJfWzr*1X^_2?bX>jZ{(gcGo0DZyHr;ztpsEwza=A&wY$si
z8l8QUNdXPNNKaT)s*unRLGR*wipo>Xg^n7cKO&aEHc%f54`W0Wy(PY*xfUhnt|l9a
zp$m6T^{@v&8T9Q2J|cS1BVJ6jH0tK!l6o#zHu+fTt7aGimYv(by*T?5WJlm4KQT3M
z^)$zK7m`L)Oj!&q3^n6Q+(~t-OOvaY5SA8a@7VkABAhU}V!?fZ>uMcITNp#NMSgnU
z;>K%vv|C-BHW_bvAAzgm<jqOmK8>%k<?M01Xn0EGB(^XK=Qsf(pLp8`H89kB(@AoV
zlpOaY1E%tzN@Wr)g<kp9ERZeoto&%eM(0zc@3y0T_(NGx!p(bF8~NMR@lm$6cX%Jy
zo7O7<Jvl90iX%=(Yejq-h8pc2TO&j)V)O8k9?W<SsSpWO;0B~V(U9U>hTu@WT4agb
zC$PGdaGuMwIcG-P--d<Da|wdwZvzcso;Q|8K2@lc=2J~wv`tc)H&vZ}znwoP4>ay7
zn8b2?4<D5fa?(b49sIV3R-n5uMdu~jvoe0Yw&allI{LgMW4%j0&Mx^IlJj8Z__i||
z)Tn0Rd~&t50C8sz2C9T+-}<bARBD3Z%rpu7u7TbKJhmw1c1b}$5z|S;xZxohO!3y%
zab;+SXh9|$AZ+_<QNuyJsm?v$C7~XDyQ-?9u4WvN?163@nP^?D8;Tf5VtM5=L?B}_
zmlpJ_h7R2mjIk=zyiM-Pflhbq!}`$ZOT=BtV{m1_H|g<uAB}|spg8hK)P8h_cY$zY
z{|+s!Zy!C24653?Qcx*zL)YZyB2v|+(dT$C$?CzHLEbRrv)GlQ*mAR4+)^6cJ7$&6
zML6MD-WMKDf$KKzAB~zGr)`a&J`tGYRJ2NBk2zkj%W5w)+(;+@IA1<99A5jO>Y3gz
zE<G?1UuijN5|C`rV)N%j<6(Q)(8Y-^afm@3U%~OcY<JX>>z!iQUZR#AGLL07bSKvO
zp<g;$IZMXM9;PUEcG$<wr)tHj#twcCnY3eSxLo#c{hnX4^Ell7?M-zQ*bhmaz&e)q
zGFb*iB`+{0cRX!Bk2L=QTmEs_5%3el|8EfT|8OGccZeKxP>i0Lm5Y=M6oJmc%JnNm
z4l4XJME=|3zajFUFaHBX4tn!nLgYUIa_RpFk!yfJ@;^c3Kk;#={|tive$a&RKVjkj
z1b_bmd;c5p{;$C9e;;-E(-D|Ipl>^?-!b_=f#ClDfBz5W{VVGI+cDBVq27NwH2VL7
zdNXtV8TIz`)Kt-Edj1gSET5&_ZAr#nQ#sc-re3aoq&R6UCKfA&31ybO_X<5;5M9y@
zT^Jn>3hsgz^&RIN_+H-JLZdRz;#^fy<IPf-y;n{fsu%F|jIT?;5A{*VX-v!Fq+#u<
z^K{YS{f{j;lrR=61yftgbK&vZ`E}0g3!X^Yur#)4&!jdyyk}jud>7;31URM-h?G%P
znQRZSEOq`gyf@6U-XXZ-8x_mnZM=t<rf*K}E^uta6$T~4kzyp%I&8mA?bL}dn|C!c
zFVVAdG4tAAXWYirPo&-k&rdWbX2sRKF8x|Ju*$Q<!ph4=$$8M_f8$>N(sc_Z)C`Qg
zcwq8Vd8f0vTS)(vT1Ta+$TyR?U5^m-Q`8}Bdtz)t&xm-VjhvUfBmY{|d*HV3zO&1G
zRmTq4g^_DuIN#+k8Au^hH0-ph*SXoTK&ye)chtvV%=QCjLull+8-_Ey!lqnLM5@H`
z>-G;#@Fbf=Jt?UQw`e5jh;aVK7&Wo;GR<fa@4<{&YEtKg>0a}bC8O(nFzaLA)Y~*M
z=Bmlk6l%seMdNv&)F*F@wIMx1X1Pg`pPecw`(_Tkrq7ftT2n&ywLT>~x(d97vA~9K
z;j3vlVn9}^kOLh5Yf`s$-#1?{^7{1TA30MTg|_US_*#kw7>Nu{Sy!p&4sy0BYh%*I
z?i8sk!x{Xoo@8*SZsj=n<I+<(ew0hKQQ=W4WD@e+9VS+)9O`F3pQBd2H@I`PzMQEW
zGa55!p>yEkw(G7xvnuv*Y>zt_{<x>m#c6Vmv=JHfh<d985p7too{?5HlF2e{_t9zh
z+b7{~A)mNDxz=Hig=b!kmS<Oab(Q&CF<NFaqr=eT8ZcgHLtFF>bR)9TAd-J4g>+8J
zk<S+?I6v8!^E3}oCk^!`QWb2ioHVBcU`4>J%g9g2Uyn6Wq+$fhg2lh#;^)>zqMxzE
zrrQ=mU>C$^<CHTx7liKR>AmxTYejY(F7AcnIRK8(!4R?97DN-3);2)gd&rHjqahU4
zlMJ)m>`p3s49cIdQQNj|v5w^WA#t}k`bU~RNc4my4z1HhtKLdOqYv5EA4Y(!7$$wk
zdd*jKp=f%yH)%qPj~AA*#ea^1Y8LTzdQllm5?t8~1RpvH3;Th-K*S`V2GM|*RO@J8
zA$xT~W}&HQTnrVx2$Bs74c}Q(pX*<zQ+{K_snXre<vpjsRzyC&UK|7GMC<H-fgiQM
zppAf01|J+$6+d(e6sEF3bm$Sf!<0lsMat)^&PH7eCNc0;G-``yOl7Xcbz$zs8k?}f
zwGLein?XvUG9zd45J@L1@`L0%6gprx{i?CIL296K(_J|<))<`}PQH%2pK>Y6@nw!`
zo}YnFO;<}(MXHUryt3AvFdH7^DWU|yB}u{FlTGc#hJq`vi}bQHWlB*O02m&{MBJ(9
zS!nTf$P?aXbJ%Fdc&HSKoits!vTId)ZM;FcTWVcqEZy2&>v!Dvr^&T}T63SR9#N8g
z213Ml!B9svxk=zBE2u7VSzMm)P~X0L>=($l%CGQPow&Q(R}+P?UvYR_@sUan)1T&o
z@;36>YJH0SwSHAa&Ru0#P~c~x*SH4y?6R)X<g-?3=Pt3xh2o`Fz_czi5=~_F{^R*N
zPl<iwfG?B#V3@gDOkmtk+-LpJM&fs2_BtjS;DJ16Wt<ZYdmbb1V9~`Jja0Fr&f{6q
zJTv6B9~uXE_|5AiYM9g)dSqMHeca(b@@H=-+X~n4mQYi1?C*rM(z5DGx4bXlE=vm2
z+vq#p@ZiMhti4-uZ+{nm1NGs%igl2?w&)!32hxPvLqx&Xxl1EMzWI}I2)Az&iLDoR
z;B@;~FVe@{ke0bRi96o7{1Dl?wx6#buPcxmG_FdxD@y?FN+QB2O)lKWZ(bumTXwiy
zAKr}tyH(EgmLaQHNPNRNiT2e53#<Wmie_IuYo17kb_iHmFHJw4r6baZb#=z$dCJ~?
zZgYnggc8IMR`2W@XS8qf;mSoF`e9z%<{Fo___@>*i6yMrA@ME%M-#_}?>!_Bqo6J;
zj$B9M@jy3=>%hGj+`!Gy;BuynOm2Sgd1L9wB7gc_obrAazi5mHDHn%KT2?w5MGQEA
zG>>ToZ6(nSTDN#3Si#=kwUo;`!vO&jpryMXGRH8+*sHrMaSP6vjpRYk1mBTYfHBAs
z$<4R_@pV8%$!oisb`Lf^<Ra?AN8dD`qGa(1L-bPM&^Qo`)urEcQhiW5WwODP*r(U3
zUPyLzZoU>NV_w>l!|W^j&Xn=TgmefJ69_G}?iP+dHn}hwo|f5It$aR(Ue&Ulvk##V
z<>Fdz>SgTGjRn8W594c3(~t#isc_sy_~o*~RLwY~X~3+Gp^sp*3x3mP2@)NYwDO&`
zc83lfp?Wcq`pT3Lrt%TfhN5<sbEn0Gnji|<3xDk1zpy=Rs-sx7;@kSFovY$eR4w|7
z9sZZ@mYI}R<+KyuN3y_LY5nes5;uNN_)nc&kdOy3?PJ3sRov8)a?z9u$TNagimA$U
z)E`X+tFA6rwr8Er%E2ZLRlU8mnBSv8i48p1eb~pBM>Ef-=r3$xS_{zF-qe7yU9`qd
zKfG^UM)(Gs0t?KRv|pKhE!>xM%WQ>Qf^*6K4K>pyTw9wy6CxuCL`OrPnSl$y{t|XW
zS@>1BQi*)IgPEOKK3}nPLH7JoyCC@)DvMHsoru%Fy?j@-oT>aR8-Rre3$CZ|Dn+dN
z0q;teKl-XS8evQzY-7RblL@!2TPy*>Hv0-ae(2}AL7Wsyogd&j>E^Ikn+RJ%2S6O`
zRgP(t8M=?(%Mp|Aqgc;{Eb_*?TA9_?Yu?iB!{Y5Bj9G{{48K~f!Qe%1`IcL|A3b$u
zQ7<d3H&jO*C=j)c`TpCWX?XAqt|whCs#p^dc6Zpm9G<JH4%sy9#Gq&;->!RGU0Z#p
z{`|MS`tYG|*(LjLxwXh}MTpADV)4zzj)H@9?P8NGPpi`izGE*D<2m|K_04GbC){|o
z7@HAi<W#)V(&;urcXW)Cly2N!ND@R!)HeHcPH(z39-{6lr4L_?Am|y_vLd+@my>un
zm7WCYy#8jUm!l+##suYA36Cvw*{2c>6U@1$14BN@{WgjNVMI<GTcMU=cg^vgJ#OP0
zT30^fb41rk%?1?Z!1H?1v_<7|bebg=84U2O*!1{U%LF`dA0nF8RnbH?%`__wFst9)
zk!=ug8d1-Fq)`Qjk1b2Uf|pT3_otAJLjnT}ht4e<^qGmAMvhm`YGL;biIFmwqlu*x
z0)K2Wl(Nrje1(Z1Xckw*N3zzSCaq>eKSU$2AMUrgWK5?8{TYgmU5D?Z9@dL@VRaZj
zt2rqXWI{tdEW!rk<9V;R3bY?ITgVT^><dEETedL^lJ2I?&rdza?OzfGxACcSRa7aS
z$o6FdRno<+<g5q4!(el9?3a(SHzlh|ODjr-zNNXC$IX@1fwAbVDbG5$^N;B?CkP|D
zo12or$;qXNy?eXN{ryP@=fRs+K@YPP^C5L;+FNf)u&A;F(Lgu?K>fuU)9U<<masg2
zF8Sutz35%yv#>voPw5S?0NkLPry3LSE`(QxK@z5vy2kr)!o2<+Y7q6)ig4o~%FKtF
z3hH<QexGQw{)=c!cf}*wbFvj8{O|dPG%qJt4@dk95b@B0=|$1gRsj%^Y2iY!JLM@@
z44&bp6N6#d6I)+qm4}fNJ_pV#*I*y%@xZbxggu;?B1tkv9Y{>)lDwd0ZkGV-oA9CB
z>Sd+btPp1fVYbg_3UQ;fv*VJoO}1pp>mnNNHqF(jlX<)yg%XHQSA<HFtRafDMj!k{
zop0ZZmYawqmX+`ZVvaSaI3lRjwB$AyDqp_peB?{ds$#bcK;U_;W}oO*A)=G|A%!ak
zrTY@t?65Hi%NzAtG&z<img4=e<4_^OrMMxuOAH&2Cabn|Ka!X)_+769p$}wd?eo|6
ztTyt;=@9;{wivfe>k_qa+7Nnx8cCoW>n4n?!3lw;8V9A=%19L!omFoE-Tl%_kzc*a
zz<QXx)OP1L)Hh`M3>`_j7K4C8ZcEB!=4A#3zgU4?{LRqRh-UE3g=p7)BAxWCv~rcb
zQqj{~anWuFS1EgV#1p5smhpgL46=elr(sNN_&0IUK$(dn*&&#hDJD|rG-@6Sz*He?
z4N{#Y`|bsjv$!8+ZbJWNVaaY`Cjq3z`Z5dIF&Q>y6DHOiE;QW?5Fj6wx%i;F>)ITQ
zQ_aP@fH4uVA`munYGLm;sZ@bPkBL>Ny*WgoCa9=!P{QAKw?EY3cd+rA>?QX$<}*J2
z4`POQ%jA4TqeMOT))FGqo?b&a2?k(^)8mP#&JunWN0@^7eM*o+rbzOZRjH56O_D~R
zAFoh~eCcIs)B6hvO_&X|OP`|5ca@m@FH2P5;VVbvij`gf>z{n{oHEYqr0Y#o?VHVL
zJMDUsF2UqRMkrA(h+THfwk_xqzwYh9$HoS$jV#H#UD76nQF10FB#%oUry#Ln#t#DS
z8xs=KM&98LPmRFHKbfRPTj}u+4o{T|G1#{q=Yyj;L)+YSj!5>i&!uZ!QW`?L6szHp
z3ComBBnOktT_{FWclZ;@wbc<ijk~E4+F{rgpI@xEtH@hELlY~OZcB%};Zwqc-A`K0
z>D5@j-E#k)#ostC5$vs{6gP@JoJK#__QaywN8V}MvTc0sELYQaiyzflAnqAC4_}Fs
z;G6rV*n)(wb<05A4!b`d>yr+iiX6T_BZIf4xlO?%=9dP+vY=kNfN~G;Bh)@S*z9#d
zljW932DON5bY#YOE{&upDf$|s2U_1if%z0P{1(PH-N+Rm<Id&~B%fSvc;BEPPC_;Z
zXk6x2UXV4zS#L(9#Kd{PUYrtTvP&`_k$w&FkE+;w&B%(_5eR|PNXLIdjqmbuJ;5>W
zb=Rvk-wXSUe&aFj8TU|3%d-o~?ehqRJGlRzzoW_XwID`dn2$_4&@KKAH3bD38B;Ip
zF>K(@#;6~p(m2@myN%G|u$ZY8-+}Tmu=^Gf?+$1f4hO&9kDKUAVvHslj;oV1YHAgc
zv^dF>i-~6Q*-0rH?ohKQPB(IJvX~SwyTM0u6XgY6qTi%WV2XO8vL3@vW~>YH;g*Xw
zTscF$>?dfv*FVUQRrN9@xXz|ppKfc`T``uZCUxjv5ysinh}Nmz1JsJ?r)LAh))RU<
zLBGa`aJtzXH0P2gJgWUYdxepbn9;wxY|UnjUQJw0b#k40+>+DiedH*F8`xhbY}Z9B
zXq7|G49x)He7=w=AB=C?zq_j9$Kp+omSX!E8@0m^ALd8dN30wPS4n(8Pne$C32)aG
z(k{~ugl27!bma6+02*V$75ILKee$^xTG>$P`LtV$Jps*da<q~f;{ojh6sg5Zd>1}<
z?Ik0TEn)+fl{>JiyS8WugryQJ_^3T6Og_6WtDkWgc>gB1%Vrc|t>gKXllJbyyn$WA
z4IxI_I>zc<=yl*Ox0G$^1ey{i9Lkjb53~pOVBM!QB5CoDPsovREBkuHWKlNvYcE^k
zjuH!k<5@O(Yg=+f8-BcQqur@SN-VI@9V_+sk8Vcp4l?%^UnOqNfE9rWK^snrP~k#(
z*$kwU?&Lx3{7j_wF<e9w%p{~#XX?w#K@YvcJ}TD%V6RlM=Qh1r?{UDW0*a#)ykWf_
zV$@L}?pyTb1V&r<pxigr$LlZJEAi{Tv*5!h`Uhv~pP*&7+jPCkE@1rv=czoFEh_|3
zj(_I`$u8`YL$McN$%^mXPC1|wf`(yI?3UpaUVrP!=IW7KS^+yTVAIPHF`+Mglw5f>
zvz|fr*6sO|VJHt*Z!Z&Kucc{r5RSDhW2BA9>*@ehJ!^#=FoA&1im|>g6RSzC5lpi9
z{o7fYJukxAjZQ)M<ds&k^>!7#H^pQ4hU~5TP#UoX;3FpbB5_5q@<hDV69V*{x^&Aq
zxOv$z6lm;Q?x-j{0=Rxa%h2Is4<^;cuXdD4NyreTy5!pJ15)81M$M}a5Ce0~ZDr$>
z7o!%2V$Lm7s@8AgDB6P)6K|W#W<o!fm3{e=SjNc<?nibcS!t*UG!411h{-!%KuUp*
z#Ib*3oibCm{v^!cs0Ja`*(cmqpBx;bm9HBl6#IsTfsB$I_x2szlfFayK&41A%3P>+
zovan<ht=J#m);_tvCq`cJ(#udVw`Gm4Bt^YD*L``Lk&3*(GW^4&Sp%XARGXRpPzTK
zY2W+HT;8{=`#FU2J2ziU#r1BUxq;$bq>M{pvlGvzlynJPNOYc2O@{p;I?|qaqZ}oi
zER%7D_b5A73@uXh?2^_yeA6I~F5)o{tc&O*LMha&l2y%BhbuJ2RG8nCPOeZ}+<Qw~
zABhpst8si5S=>om8@%^dBjo+WtbppAi$}mJ01I^WOGciCG~trlkou&o9Kz{>TpD_m
zDb5&gT|ZVDS`nH##4L%oKV9HiXfM|2L@|6Kq3=;4hLy<}*1UVbG%Ww|C@5;a*%cv|
z2il@Q?+(A<ODa|M+bHYYyt=wsr#wxBtz*+zz!x+hboyZa$1h%-SkYCC9r^u!#{rRt
zb67j?=wh?7D29cr@~M5yv65^!-^2`GCn6YYjo=(rdR@QjNyj3^mn(4L_w=+62Q;2q
zq#}%+_MTPweSgnUuBr_1G%!)%7|By&gXUKblQzbHXdJKwvo{3F^-M-$t5G$}_AZ%h
z&F&q0%)b6e+=<)%N!fA>r+kBZuw}`wKu6Pgo*V4@bagQEqmt@*$Q4%r*9-2Zx_lS{
z&w;%v=HXavF>DJ=*9cPx!D>H5nIv%9MCY6G+a)S|xk8s!=7nfoFIgQ4N(~2bw`wbx
zh_5UyJJPREnbqLWHCcg)!x9%8H%jhKWdV9%G}0CHFc@#AaE=_qQ2?%ls5ZXCx%Msr
zKq@12mihbYl6~ApIdYVCibs{q0g;KUC$kux_~XJH{yNETBE4=1xO5@r&UUT_T0FTA
z<z!6ceahMjMLiK%>6kn_(56L;w5+U3a=!FC65zg{c#V?aLR7R-8?2k~*D!&_=*W|l
zAw({ShH%hSgss)~O$M9xK%*}$gI>T_aOkz_cEzX4G(j<(${W4eGK<+cGILrikfJ34
zQ(k6YuMOuOrcXRUpCbE{!F8$<(w(3s!43|g%y`qo{np9(AC=UyEhcvnYiVauM(WvS
zLy8xeRo|C7xAq)2vQ?Jf)hY3$_sS|K?Ij12@g^i;W{wOrS@zFJMe!9lzrG~4GofvG
zuLYSB^U1L`AtrA{7rx~TW1y7mh$`gRoaRh|Z`-LeK$ju2AL@s3LVW&~bpn3Ik#%}H
z#*wiYT-1xe+6L?_R$7+`(Kh!M)y@iwZsRjX$Crot%2SAD!JNo_1SAEiD9qMvF|`jo
zqvjo*g8S%3Ob3Chv&y++AEHq&P%vBps2&XP{;*YcK4_1Ci-S|bTP2R0wbaq}qe=;e
z%~UF~R!H)A6|#czKD}KC_S~;v0pJt1?IpJkgs1|X%*F4Vj{!Kuy(3MIKwIT`zos3u
z3otMET&t{8AC@MLT!t&v`pU$vT_+!jo~-So@V0fl+k#uAr~XhGIie<*nzwqv@ZUIP
zS!CDs2xfr=`l2D=F)ezQET>~XJ}!<0j(6I>V0}&j%f!CET-k^<`JmQGe=hsH_x%bD
znZUXc+YSu)?pvKY)v@e68b+fP2d%4#&`czULQbUyB)z06)lh-jrY^kV#HR9xg4$&z
ztyqicM7X*|HND&nc9q@sq0Ga}R!bo}*|c`Ti6n~aGHxrSSS^<l(xGJ4bdyaIphN1z
z=n8bBu%d*<u(V21e8sJ)k+Q9mb+~TQa8<$KhD&ky$ke4vDXU%_BZDLcws@*BQ@4du
zUeZC)B+&tz6QcQyOByTv*Em;RotaW=W$xN=)yLRE*{kQ{&x9Wc-%MHcYt0s^Cltue
z&s#HVjf5mWK91qfUFK0Vkk4t4aojYY%?zsQ(<8hb@gh~}35gw=x$zoD(G_3Pi-}d<
z?-kpQ*i@b=((k3bZnk;9G*Yp?B6uTt!d~PPgTkQ=@m-u(!4Nsnfd6AQM1lHglpTK2
zQvTRN-rYDsVt;EnYrV>6m}9T7XH0=_9*S65I1o^lRwSiIBd6?1*f&?KMBvD|y7~kg
zl5fp@Es8qoTgSWnR_<3mc=w9cybfo&!uLW<rX)wSuxN&Yy!%X!wEY6johM^<xhBYe
z))n~Zqcwj!)?QHQ?#B+rSKaJ8+0#DofT>5`aHKk<_aengnHI&Da}Vy7TScAK#X23+
zfo@maevzbp20zN%e<9bXo<^mCsEchHQIt-ofvkvMM7d~YpyZ<~6o2GbEx`4xcnrRi
zx9o1kf&R=%<Qdzl(rPiAa|tPgRlSo)HNgP*5xseAt%1mNC<pywm$D9f(`;u6!w4T5
zlPR$w6;sNt_d%6J{-q&vN{kj$iTm1o-#Kj>*>%}obI>`gb+{QZGL?ptLn}S?{^-RF
z9^_mvC{(quW-Gd>(GNfy)phymh-(`}BFm~$dmAa&;8IoYEbWrX!vK^Cu0seJ8{daC
zhU-Udb&gHlfzmrX?3a-c^T$i#SDAR&ol78tCMP_fuqGusxP#;=QQsxxR#g=Ep2^}A
zf@jM1u2Y<`v5KUo3=(j^qv}$`#Ao&H56|`Q5n(!qBfQaM{kTY8wZ2UT;F3*6AvoFQ
zCZ(PtGC|BX5!6ZHG{S29mimKL%PL7c;_Q97Ys%nU-R!*k6aEc1^Vz2->IL!IyzhWn
zch0ki0bNSs&Y@xEkQ4Qi>jS8_VZk<eOHB%`r-88V4A#0{z7Vg?1R3@0OIp?URVw$M
z-br{5%L)3s&N=TaK1FCSVC2zTHYH@HeHeZqxC}|k)YtqPLc$E|Nx;X;{z>4}@#eZ8
zvFW>arh$NZ0m|+J;@DYTSYA`LYcS#l`KqU4W#w3B=F|>!<HV__-5PF={U>;gFG(^Z
z=(h2Nwe{~iXEJVx=dOq`h)ybrpuTmNjs)KB*3;CS1VAo*C6KV;Q5b)mdKw{nA(e7z
zW@6V*Pi!2{9zJbxF5F?xt-2zaCuWF}l*a7elp&!I;5czu#oC4BB_r{y{?6a%D2p_*
zJ!<9#8@GSIZ(n>;ja-?ho4pcd6Dn1Ig@9TrS@KSx?gcW@m3fcYiPSj(u?diKkxQZ#
zie_E!;yXOfE;C&>TiP5VBGo4(orPT>N~^eMLr=d_R?#ag8IrXKzdL#1Zl{@%ZS^S}
zOZ;1*wh9;#V**tO%9}NB7Z3%P)MOla(%xr22N~Y#8&SnB3$}DcE;rnz&yghS^?ZSM
zYmRv1amXImO5d^l_ru=162FJCq}0@ZvCr|>m^j#$@!<5^`Jtc)=b6DT!3bScF1#Xk
z<-kvf3g28GE&jSB<L2szoMy!U(PGP;-YLn(W<qi(LR(2~{lemye2@6!mrR7+Ya*21
z^jf9(OTmjFC$B1=@bN=vreslXi5yNn3ZuTkBNJCE+_b56pX=3K9;WAMz8mxA<uG5Q
z{)a0N+g7uXfD_LP<z{=A>(_zkW&vzOy-u-AH7iFQ^Ufzj+BX}858wRSNIa3`p7m1!
zVeU&!l!P9WB(N}k?W@4EAG1TN7X!fzH!*8_^aMyGU=|16<Q*x%OK7`=G>@|a!3|6;
z_$?JUNSVP;@G+EbcvNy;sRCBaLXWUK_kD}MLft<@-v1k<`#+Hd{0?;kSbqx#2XUY<
zfnwr0S^kA}gQC3u6%NkH@@K3Y6gQ8+_;0M63H0>OST~5h=O3_c%|D{bSy`F?6dV3C
zE?nx52yk@}ux<PsR{gJt?ceZei$6zV|BS=70|j3Lf5u$@9$x)hRP`S)@;}E;|0Qtx
zH!h<;LC8O!|DOY=Sy=(Be}<4XJRLA+TThJ!3ze=tAz3!FqBX=~<-ozO^q|4DFyMk;
zvDclZ(It#@o(`w^Qi{Z<na0QZLdOfj!IMgf3PC}MD4vRmPVCJ(wHzKSi*($`Pn7Mg
zRkgO3m8VSa`K$qXkc<y8-*p>~NDg9|CNnIlCu_%M@OzrTcLWFt@P#}hVsr#dQK3_=
zM&{p5!!u>Ue^fvg;Jf*vdu!lqI7;_6O-|N~Y0h2&iD9wH;$@RUCfS~jCK=wj&UwgK
zz4P+?FqKtnghauZ-7I<69OnyNAI|2;yL@9Ib0aO?Po#3H_;tmSvD&y74=*o1M=vlB
zFUSh7`YuAm2qHM(WrjtU`r=is(&_ZF<I<9{>Zsg-!hS;epKDwe&bM*j&5IpVW|MDz
z*!$2S3Q-dy`9}ZEHHK85P9L~2xnu0SC?Od;1`tE%ePtiJF%}5&m1`G1eq;QhL6q<{
zsrf6G4_bX*?}X_3*eE`t@AQpFzWL&=!dx85yp;;6;;w)!3Mi1TUN!HwMB|DWp#aL!
zX0Tt2o+mI0+&y3NO-oo5j&pKd2w2>kujaT~T`w#cjAp0yX4QF&DetFC>0Cjkp{2Xp
zGaTd9`Sa)aX37Unb3Qa$)*}cWMs)_P>8Y&BMSZS+>lRTwr>Ai@^JCKlkH_sxp4#{i
zfp;P57WwL?T9xb6`Qr<;vVst@ZV4;0wa&@8IR#%dAsx(ezh5@U7~~LeqYRb>sDA|P
z;31TlURq-=6|4f)j<Sa;R9!APL_1r$2Qa4QriN|s<lK$6^eEd!2Aq@yL)qmnbsxns
zk+WZGpi=R-dli|vB>G?Vf*3g2?_zG_*nFZ=oy)jv#zP;)PHl^8(OE*M19){Oe19Y)
zKLnAeP)Xct%Y!@Z_918qJc)2@(PR!~zRzRf8raBt3mDFwNP8oQS}$Ki#g+Pf6!OiG
z2>d=1jo2`0AYAkD-njhJeL%cMXFHAl8O{3Z-Dm(OD!(W8Sn~y!tJ|5=h1wY#XHyj+
z+V(cO^?tEDU|$P0wf7P+(@P?YJRb&ucw(EBh5(cXRC12i{V=+OmD)`iT%|l8b@<6O
zX=5pFNj0c-Q5jXT`4vN0Rqw2OJS@ANK;nxv@9cR&@0J7jXXk}X_0Fu2WKb?aIL0M)
z6^QEq`VbpsV-<HI^kZ1lxWckeb%<j&L<Q-eqEJw@ehk$K(mv%T39SXmQf6`h!kiaW
zt-$&Pt*F@$CMzTyb+y_j>ovmmwxU9(KLhQyde?k;A&S8y;~j{MpWdzR7O-P4*JNx}
zmY-h*pfMHNGZKwhErLJ8OeCuIE!UdeeEJ484srgTbzXDhL$E-u`4sP~yqp-O^+?aX
zjf{;|maVK_IXk0uNc#why_APhG{MHuvL&6O1~Ie#p-predI~=MxKBg7`T-E-7xWFQ
z*U6z&F`t~<i2MZS)b>qjz%X@6zA5@+5*rZ3%}&W26~(p0Iv$Oj+}TQS=nlr^swurz
zCp~t96?z3igK*=ZzueQ<cyzDGoUZay^SgQ^4iPHW2b$Lwuur*mvK;|;9$!T~xj-o^
z(Io4e)xHe`-_KG;eV$@e<=R1HCzM}EH^`W3is4Sf90L#8MiUY`*B3f%LU@*)|40=4
zVsG(T$ct~!RsCWdh3YfxxQ%m~ta@8_-#F*1jKnG&{7A}NXg5P=&94fY1WI*sz$Q&(
zUcKxZuzg9#%KQUai3^UDJL|RXEQAn<vr9^Y5J<4Fj8@cBu@y5pvSZ;XuqRPbg0v+L
zl(lA-96iBe<5fy~l~MpO3L7|qC^#y2sN%tI4QWH7U5M3L_rWwQ<vVw3Vwa%Z+bSpU
zlwL8u;1?6uFXgqe@Z#Attpg~6Eej?W`+;ctqeb`2be9^RT!Ko$1_vvwwZ0ADtcE-o
zvKj=y?WmKIE$|?g?Nma#vaJ~mU^R#7@Sz#u?h4twZx|@PdT0L1F&UP7oz4rV$!lhh
zh?+_S?rr`W3sh7t+}lcYksmqT90{xR5fe7#NcUfzN3=(>NbNmeWkT(o4`FqW3SC0H
zCr2cr^zZG>S?}@x(H4qd6@X#tEtQZfTZB#9o^B1@CA<XyBjRi)l3QrbBh9f19#0)B
z7l?a=%JedX5pU}*tM0QtABll}EnM}%@OWY^D{H)yxTh<Uv-Ma%Lt%s`9Y<WDEu}@n
zF$+&#1Z<pqdBS%EBhsZo{}!RM&rXOVt6#nx_3Sa1cVY%UVBqNbbJu5A69@KY;l>Y#
zP{O>l4H6{EKSZRfuq_3p?a9((=5~7xnuQ{f>SoQEE^6i?HG!7?llpr#2CexGcdUp^
z;uY42)fNO7qu99(R(3HVW@n1Q`sy4UJ~)&s>EqvvS=KS-m6ZHC)vI86gT5Yta*bR;
zp2-cVeRtr76vyEhvuv<N#f!$7`)IhbnP+Cnqup>Px|l>z%)Ng6ka(+>0S+hCSbtXX
zv1Lzlv=_kdMYOu@vUn&hgrb=doIPI~XnKQ_vO9!`V;Ye@jzseE<I=3m;!@VT%C**H
zQR&tpRfsWIHd+YCe!yl15hV|)DrjJ2+Xxdl{T=<ekPou#{?sL_3`YM|HOz=a6u%Bw
zY}`=UBDbfSm6N*Lh`F@4lB*m6HB38mEbu*6hAmjCojt{kY0J103VwiwK}$LG=w@g5
z#}ClTY1n77f_qb*v;0{ysFEL~si{kq>KllVb@B7lxev9y85{EtmcyU0hTI$=ScwUI
z&zi%pE{}y^MxWln7t4<9>DGEy2tr-5SJsS}*W#VrZs!-1EacNonl(X_JHY!OcS38d
za&p$YUOcn1nqj;UF7E)phY^er+sAiKJSJxc<CP>kw*nX)mjYAuYE;$D!*O*K1DQ4b
zORsW#O=b>$JY!gNo3<!w2S4M8-?kH*V?7b>l?<Q4z0+4Lcz<lO=s>&^D4WYfqdJve
zQA-x3O*e%<lNv>tGFQc0c3}xd9X~8a(NH@_J0FPMD-tWD7gU!Hd?!?^Hc$Fi<*gV(
z7eoH;H%niy<&eu`4t*j2B*FOdM{7piVyMCpvpStXXxwA1kD^%%pBl?-V+a=HR2m}Z
zycOLO;QgPI5~_JbTwcX`J3WAqtSdv0L~E;)((mA=zC}VNjcN2=LnVzHD6vIqWhSF>
z=^q2P$2c#^!i5kgWn|XmZq1K{k8U64r#-7?r;Zo_>kl|-IlZWyaouI>cs$pf*sYK6
zk@iKfu(DsRv%Pb>65LP}3TuUq6)A4>K2%LI{vb`y)_kdtyu-{T_gVU|figr9V}Epu
zDn^oalXji@mWbnhv;<DBr7f(wEv&@>*Oha5XK>9tQlSg?7qcGuEFl!htZskS8JL{?
zV3pGQak8dRBed`9es+zXZE=Yb2K9Fpf=H@v<um}i$}RkR(>$b1=-oUvOAaqb6@{U&
zZ}Lqq4pCE-3yHb5@t8(hB5NV5I(xU4MD5*H4Qf(C?7QgN_jKA_WW^OVd#54}i?ale
zyUAN@qg^;HInOa(;!7!tUP<sT$atAiZHSm(1C}#peQSoa4uHk!D`)+S2EZWic7CBP
z@Jm83yh;%neQ)>Ete63B0k4=Cgbf7wJ&l~m97t2UqS|`FbUo7CS|?_+s`paIB5ymA
zpX-UFk8t-xV)p63rRljK?Sb3O7P#i8wg;<zp2qb7Z|XfbSG2F{MQ%5(q@%;8H8tbP
zqIfdUdm;XE{R7yeqZHeH-YD_<-7JI#aTfq-P`Ya&AkU;h(L87c390!<c<X)oVJn7~
z94w02`)Jb(=!1CjcNE*<QVGIVu4jJqvb<Va9H2xETPV6t)Th&T$1fid_xm$Bld)2>
zV1SOU`ks^w%ojTx$tP7<k;#f}(`M+32s3_iQPz`gKEA;|4~IMgJuU8Q59j9_Dl+(Y
zU%TU9m5`Mm63}MK8@m61Y|Q0@le|_i@V~grs%En-D+tv*_AhX}jNSSS5lk_tZ;zbj
zKYYUQrS~L4!GG(jm+BMYMW_hd<Iv%%8zJ3%SC7~w#MqDYsosTjOe+QoY1&si5X>qw
zyk}Q~79`64D8n5&t>0x2fxD)ft7VhCD8tX^hWkNho@F~3>3|8rYfKI^+qHTkdfl<G
z=>w=bixiq(Okkf-%cRn2$s7a)YDx81>_t25BrRU}4CojLPUf4>J6KtKr#UZ|i?Di}
z%o>(6*vHTaG~h+$sGG658#T1jJ>k1~pFT1&8hHsFw+XD<Qr(3}8NfTn>%~`JJ~~-$
zMThawv@P*ymnppSJI_Ggn^5uDR;<34CH8Ka1YTP^yqZjviSqY2vp??kA_S|<+t=*+
zirgyLQrG@?%QUj>XBk>I;en~!CoFML#kIPKV8BEAGMRC;yGbNv89lP@fLQt!iB-^_
zzz8WCkoT&Vvxhf9s5oIbiMwJ9CTQH?JHlNVwL(KL-cDpE>OjTVUXij*DAu=aJ@3!q
z9H=nm%WwFC*`2Z4WJ3gn%|qT)LatQ0OWYdY(-muy(F|6hHL=cp<7i4`!&bN!of8u{
zOqKP&IPK*!7_+D<aNZ}BN0q-eqf62RVuQ0yH23+%^AW$=^F+YrZQD5Me<(v>Jjvxv
zu4bh}{#uUd_w>0t96eU}lfwJ8YWC}`Q%8PRm|JuU2AZfc^Si^K9W+9)GP<aHmUBuK
z0{Q((gVmr4R52?3`*g3nyiWAt)1A%)k}O-bl)3Yx;Ah@Fb=e!lX0|mq0HwJsZ?ES}
zkF?luIXw>PBwDD99q;9G0gRY&sc}YHaX_)~WYsO5yaOR&zu0LgrroZ->547RceSM?
zb}p<&F}bpVyZS-h#$^2uA>=%BrtwA{=<cSE)4F-b$vMFh>yOEUS~w_LJeZTk#}f1&
zC-IPB$v{<WwcF23ygh8*o2qFa`4Tt@T~rB(lrxq!EBK9-v>Moh<i^daB#tG}k$USK
zYz(~Lwg4Kr!v^NQ+g2qv((QvIBU^lzFN<XF*(b6Prq1kN=o~YAW#r1{9doaTm2Ew=
z@r4Hq_8>A;W`8N6dHj*+#)6!(1$wDGQ20>-Sv`wrPgY-DbJ4G}?ye1$DvmBfmKV=R
z*0yIy*bza!t3?~OP>@D$G(y7a{jPn1`vM=B4K}KaIt;_Z4{5pZeWQYD^@v@+A8$u0
zjV7lpG3^nED&5b{8utJu1!LnOT~WPknm+eb>?T9nBj$DeZ&LOf+}cW1EmVy>w0VV^
zc#io(S7uJmI7L1W9AUHXNWBp^qkb{;Tg+>kO#H%=gd>E!pyx)%VSmAX`H1lRcBG#B
z#;QM=ErDm9g;NmLA;68G#>_@qV>_2CbuOQS9>EozOKUPojf#6bX4(7Hn2MCv$16lT
zAX`#mTrpHQLfSVrbNg8)&Uw!sNuPi_N{<P5!lZaMjY5?-{)oB4DYthSN0kO2R^Hvm
zDe&}%oHntv01U^q$P5aW=0(ok`)K^5j_zPxx(CV-4@Yik^jxuY_wBn{h!$-)$)W|d
z=-!vY=ZETN@8=1BPc1hIsh6OmweDttOMhtE{Th6Fw+!~A#VDsl$J|7^in#hq7q*y~
zGc52l&GMR5PqH}eD#*gG$Jh5fulJy~RRU4`BdCrYoL63lp?Zuke1e8W$&$0AZp1Qf
z@Q<6lmr+wFtlSW_X~tR743V;ESgNkUjbdk+i0_GQ&wEX1zb|7Ky_BJt9@neDM<+$=
zk*zz*yelyp%z(P-(22WG0@G_6Q%zr`_=Y;p%azT^FX_<no)H_1YS%DxH3&WhuNv{5
ztK@yrA|7;v)~yY_DRcUn{OzfL1C+3lpHWbCOUDmQ8y%?vLuKWO_SZ03VY`l@#CWKp
zTQ?R%We0NLsVd!N{+nY7SKSBG@SFbNVq5IQzkc8PjT`#UAGrR-8vSn?J54#+e{t9W
z032-p^C^Z`zytIp2*d$MYHVg<WzR=-+SWxyYGuktrNJi0B<CPvW@#nq<z%MfC9i7Y
zWn;o+N+rOLz$;(`BFHzR_b_sxH@C6{k^ec9f@lx<$V8N7#mRmOcyN2zIoN^7t4TfV
zZ0()7J@}}8tHKSs|5?mPMf#hFiwz%@rko<F3lL~)W9351%)rF}pa-zfk(xV!=o#IC
zPBx?f26iftN+(luZe<XS|L+PxPkdCCE-nt-jEwH??hNiM3_vFfMgSKV7b6ohBQrBS
zNP^zk)856%gWlem9AxjehFEF-Pc?gIhTq!60Af63w9;e*FfcLx%h125BCUY-q(2QC
z83SEi_{hlq(BkkX>wi%LdI8eI0_q;<jvJJIz|_^m%!!XmLQ$4f!V>80@;mc0DS(NA
ziJ1XF#rQ|Z{ug_o!TjfDgJ$55cJqQ{xaB~^!sec$AUZ~VW+rA<dM0LiCQemm7H(E9
zZUC1yFXP{YKobS3CGs1A<Ns3YPeOmH1$0sc%^bgl6VTk8)D7eZKL-rJz|6wH^t-X&
zs{J9w%lLCB|J2q0vhzj`a&rIo?%Ub@bf}+l+@e4eS33{^r<5okm8+|jDK`t3F_SSf
z3m3h)nK>6d008>O1iI(}W?by%TmTL(CU&m>b{<Sk{-+%du1>bUxtys9BZy@4r%7kf
zQ~*E?F*V^f2RhjqxqzJB!2v`$YvckN7DkXqQ1SDEUb<L;=r{R)b7&!3m)~z}t$w-|
zx2=)A1s|0My{VbGk*lo>6~CJOZ_=i}kDaX*|L-@y)noj(u74QW--<vB1~kZw|FazV
z5lH_(UH|_S{d*4rg{JXQx&Pc@ehF9mN#FU$7Wc1J_4Yq3Dr(T@@}C|J8uOn%{Z^Fw
z=UQN5X5wUKVdVlX112Ua&>u()v|Rodi9g);?LRp<H9!9!v2-3zX67I=Tu?OIPtW@O
zB4uY|17$ogC;h#QnS+fT6mj?SBDMdcj19oW48kV<QpU`|$_DD|U(488nEqbI#022{
zrHqB+XC8vT*5zXTnRnqYWvpzRKl!BpQpU{50r-1e7EqoQ5J&jm<d~TMu8*0Ei|rRV
z4)$N=*nd(8|5YCo3kU1p?J{w&aDYgG|7w?mo#Pj~>};HWA3soCuD_Q704%?bDJbjA
zulhKCCer<jT~J*PP|)08%Rv0bf1gWc4vv3lA1BA(`vw3}Yl6s||EiCZmGkf80wQ4k
zwS62QC;p`_8`CfS01<`%-7ZMquk8a(`7d@sYvq@*2cb8=>f`!{_OUSiee9W8S%2mN
z`AdI6kp-N89|L9%u3y^6!o&uG+WuOXg_HGXl8wLUV`T^B5c*pgGbcOXm$rc1`4>Os
z;^g?d4K^nBKhK+slM#qQ*a?*7hLlmo%F7J2&PhSZhk&3YLZD4anUqn=-W*5@avV@{
z5Jo9cQXO6)F%B^Rvnaa=r<gE@I2((&Fo0E@g<Xsdz{V;jB+A17zf0)-%oXD7V&vrV
T+vdUs+P&BiC@91f#1Z}vD%H<U

literal 0
HcmV?d00001

diff --git a/support/dist-docs-branch-23.06/ovn-ic-sbctl.8.txt b/support/dist-docs-branch-23.06/ovn-ic-sbctl.8.txt
new file mode 100644
index 00000000..4c19f1a9
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-ic-sbctl.8.txt
@@ -0,0 +1,625 @@
+ovn-ic-sbctl(8)                   OVN Manual                   ovn-ic-sbctl(8)
+
+NAME
+       ovn-ic-sbctl  - Open Virtual Network interconnection southbound db man‐
+       agement utility
+
+SYNOPSIS
+       ovn-ic-sbctl [options] command [arg...]
+
+DESCRIPTION
+       This utility can be used to manage the OVN  interconnection  southbound
+       database.
+
+GENERAL COMMANDS
+       init   Initializes  the  database,  if it is empty. If the database has
+              already been initialized, this command has no effect.
+
+       show [availability_zone]
+              Prints a brief overview of the database contents. If  availabil‐
+              ity_zone  is provided, only records related to that availability
+              zone are shown.
+
+DATABASE COMMANDS
+       These commands query and modify the contents of ovsdb tables. They  are
+       a slight abstraction of the ovsdb interface and as such they operate at
+       a lower level than other ovn-ic-sbctl commands.
+
+       Identifying Tables, Records, and Columns
+
+       Each of these commands has a table parameter to identify a table within
+       the database. Many of them also take a record parameter that identifies
+       a  particular  record  within  a table. The record parameter may be the
+       UUID for a record, which may be abbreviated to its first  4  (or  more)
+       hex  digits,  as  long  as that is unique. Many tables offer additional
+       ways to identify records. Some commands  also  take  column  parameters
+       that identify a particular field within the records in a table.
+
+       For a list of tables and their columns, see ovn-ic-sb(5) or see the ta‐
+       ble listing from the --help option.
+
+       Record names must be specified in full and with correct capitalization,
+       except  that  UUIDs  may  be abbreviated to their first 4 (or more) hex
+       digits, as long as that is unique within the table. Names of tables and
+       columns are not case-sensitive, and - and _  are  treated  interchange‐
+       ably.  Unique  abbreviations  of table and column names are acceptable,
+       e.g. g or gatew is sufficient to identify the Gateway table.
+
+       Database Values
+
+       Each column in the database accepts a fixed type of data. The currently
+       defined basic types, and their representations, are:
+
+              integer
+                     A decimal integer in the range -2**63 to 2**63-1,  inclu‐
+                     sive.
+
+              real   A floating-point number.
+
+              Boolean
+                     True or false, written true or false, respectively.
+
+              string An  arbitrary  Unicode string, except that null bytes are
+                     not allowed. Quotes are optional for  most  strings  that
+                     begin  with  an  English letter or underscore and consist
+                     only of letters, underscores, hyphens, and periods.  How‐
+                     ever, true and false and strings that match the syntax of
+                     UUIDs  (see  below)  must be enclosed in double quotes to
+                     distinguish them from  other  basic  types.  When  double
+                     quotes  are  used, the syntax is that of strings in JSON,
+                     e.g. backslashes may be used to  escape  special  charac‐
+                     ters.  The  empty string must be represented as a pair of
+                     double quotes ("").
+
+              UUID   Either a universally unique identifier in  the  style  of
+                     RFC  4122,  e.g. f81d4fae-7dec-11d0-a765-00a0c91e6bf6, or
+                     an @name defined by a get or create  command  within  the
+                     same ovs-vsctl invocation.
+
+       Multiple values in a single column may be separated by spaces or a sin‐
+       gle  comma.  When  multiple  values are present, duplicates are not al‐
+       lowed, and order is not important. Conversely,  some  database  columns
+       can have an empty set of values, represented as [], and square brackets
+       may optionally enclose other non-empty sets or single values as well.
+
+       A  few  database columns are ``maps’’ of key-value pairs, where the key
+       and the value are each some fixed database type. These are specified in
+       the form key=value, where key and value follow the syntax for the  col‐
+       umn’s  key  type  and value type, respectively. When multiple pairs are
+       present (separated by spaces or a comma), duplicate keys  are  not  al‐
+       lowed,  and  again the order is not important. Duplicate values are al‐
+       lowed. An empty map is represented as {}. Curly braces  may  optionally
+       enclose  non-empty  maps  as  well (but use quotes to prevent the shell
+       from expanding other-config={0=x,1=y} into other-config=0=x  other-con�‐
+       fig=1=y, which may not have the desired effect).
+
+       Database Command Syntax
+
+              [--if-exists] [--columns=column[,column]...] list table
+              [record]...
+                     Lists  the  data  in each specified record. If no records
+                     are specified, lists all the records in table.
+
+                     If --columns is specified, only the requested columns are
+                     listed, in the specified order.  Otherwise,  all  columns
+                     are listed, in alphabetical order by column name.
+
+                     Without  --if-exists,  it  is  an  error if any specified
+                     record does not exist. With --if-exists, the command  ig‐
+                     nores  any  record that does not exist, without producing
+                     any output.
+
+              [--columns=column[,column]...] find table [col‐
+              umn[:key]=value]...
+                     Lists the data in  each  record  in  table  whose  column
+                     equals  value  or, if key is specified, whose column con‐
+                     tains a key with the specified value. The following oper‐
+                     ators may be used where = is written in the  syntax  sum‐
+                     mary:
+
+                     = != < > <= >=
+                            Selects records in which column[:key] equals, does
+                            not  equal, is less than, is greater than, is less
+                            than or equal to, or is greater than or  equal  to
+                            value, respectively.
+
+                            Consider  column[:key]  and  value as sets of ele‐
+                            ments. Identical sets are considered equal. Other‐
+                            wise, if the sets have different numbers  of  ele‐
+                            ments,  then the set with more elements is consid‐
+                            ered to be larger. Otherwise, consider  a  element
+                            from each set pairwise, in increasing order within
+                            each  set.  The first pair that differs determines
+                            the result. (For a column that contains  key-value
+                            pairs, first all the keys are compared, and values
+                            are  considered only if the two sets contain iden‐
+                            tical keys.)
+
+                     {=} {!=}
+                            Test for set equality or inequality, respectively.
+
+                     {<=}   Selects records in which column[:key] is a  subset
+                            of  value. For example, flood-vlans{<=}1,2 selects
+                            records in which the  flood-vlans  column  is  the
+                            empty set or contains 1 or 2 or both.
+
+                     {<}    Selects  records in which column[:key] is a proper
+                            subset of value.  For  example,  flood-vlans{<}1,2
+                            selects records in which the flood-vlans column is
+                            the empty set or contains 1 or 2 but not both.
+
+                     {>=} {>}
+                            Same  as  {<=}  and {<}, respectively, except that
+                            the  relationship  is   reversed.   For   example,
+                            flood-vlans{>=}1,2  selects  records  in which the
+                            flood-vlans column contains both 1 and 2.
+
+                     The  following  operators  are  available  only  in  Open
+                     vSwitch 2.16 and later:
+
+                     {in}   Selects  records  in  which  every element in col‐
+                            umn[:key] is also in value. (This is the  same  as
+                            {<=}.)
+
+                     {not-in}
+                            Selects  records  in  which  every element in col‐
+                            umn[:key] is not in value.
+
+                     For arithmetic operators (= != < > <= >=),  when  key  is
+                     specified  but a particular record’s column does not con‐
+                     tain key, the record is always omitted from the  results.
+                     Thus,   the   condition   other-config:mtu!=1500  matches
+                     records that have a mtu key whose value is not 1500,  but
+                     not those that lack an mtu key.
+
+                     For  the  set operators, when key is specified but a par‐
+                     ticular record’s column does not contain key, the compar‐
+                     ison is done against an empty set.  Thus,  the  condition
+                     other-config:mtu{!=}1500  matches records that have a mtu
+                     key whose value is not 1500 and those that  lack  an  mtu
+                     key.
+
+                     Don’t  forget to escape < or > from interpretation by the
+                     shell.
+
+                     If --columns is specified, only the requested columns are
+                     listed, in the specified order. Otherwise all columns are
+                     listed, in alphabetical order by column name.
+
+                     The UUIDs shown for rows created in  the  same  ovs-vsctl
+                     invocation will be wrong.
+
+              [--if-exists] [--id=@name] get table record [column[:key]]...
+                     Prints  the  value  of each specified column in the given
+                     record in table. For map columns, a key may optionally be
+                     specified, in which case the value associated with key in
+                     the column is printed, instead of the entire map.
+
+                     Without --if-exists, it is an error if  record  does  not
+                     exist  or  key  is  specified,  if  key does not exist in
+                     record. With --if-exists, a missing record yields no out‐
+                     put and a missing key prints a blank line.
+
+                     If @name is specified, then the UUID for  record  may  be
+                     referred  to by that name later in the same ovs-vsctl in‐
+                     vocation in contexts where a UUID is expected.
+
+                     Both --id and the column arguments are optional, but usu‐
+                     ally at least one or the other should  be  specified.  If
+                     both are omitted, then get has no effect except to verify
+                     that record exists in table.
+
+                     --id and --if-exists cannot be used together.
+
+              [--if-exists] set table record column[:key]=value...
+                     Sets  the  value  of  each  specified column in the given
+                     record in table to value. For map columns, a key may  op‐
+                     tionally be specified, in which case the value associated
+                     with key in that column is changed (or added, if none ex‐
+                     ists), instead of the entire map.
+
+                     Without  --if-exists,  it  is an error if record does not
+                     exist. With --if-exists, this  command  does  nothing  if
+                     record does not exist.
+
+              [--if-exists] add table record column [key=]value...
+                     Adds  the  specified value or key-value pair to column in
+                     record in table. If column is a  map,  then  key  is  re‐
+                     quired, otherwise it is prohibited. If key already exists
+                     in  a  map column, then the current value is not replaced
+                     (use the set command to replace an existing value).
+
+                     Without --if-exists, it is an error if  record  does  not
+                     exist.  With  --if-exists,  this  command does nothing if
+                     record does not exist.
+
+              [--if-exists] remove table record column value...
+
+                     [--if-exists] remove table record column key...
+
+                     [--if-exists] remove  table  record  column  key=value...
+                     Removes the specified values or key-value pairs from col‐
+                     umn in record in table. The first form applies to columns
+                     that  are  not maps: each specified value is removed from
+                     the column. The second  and  third  forms  apply  to  map
+                     columns:  if  only a key is specified, then any key-value
+                     pair with the given key is  removed,  regardless  of  its
+                     value; if a value is given then a pair is removed only if
+                     both key and value match.
+
+                     It  is  not  an  error if the column does not contain the
+                     specified key or value or pair.
+
+                     Without --if-exists, it is an error if  record  does  not
+                     exist.  With  --if-exists,  this  command does nothing if
+                     record does not exist.
+
+              [--if-exists] clear table record column...
+                     Sets each column in record in table to the empty  set  or
+                     empty  map,  as appropriate. This command applies only to
+                     columns that are allowed to be empty.
+
+                     Without --if-exists, it is an error if  record  does  not
+                     exist.  With  --if-exists,  this  command does nothing if
+                     record does not exist.
+
+              [--id=(@name|uuid)] create table column[:key]=value...
+                     Creates a new record in table and sets the initial values
+                     of each column. Columns not explicitly set  will  receive
+                     their default values. Outputs the UUID of the new row.
+
+                     If  @name is specified, then the UUID for the new row may
+                     be referred to by that name elsewhere in the  same  \*(PN
+                     invocation  in  contexts  where  a UUID is expected. Such
+                     references may precede or follow the create command.
+
+                     If a valid uuid is specified, then it is used as the UUID
+                     of the new row.
+
+                     Caution (ovs-vsctl as example)
+                            Records in the Open vSwitch database are  signifi‐
+                            cant only when they can be reached directly or in‐
+                            directly  from  the Open_vSwitch table. Except for
+                            records in the QoS or Queue tables,  records  that
+                            are  not reachable from the Open_vSwitch table are
+                            automatically  deleted  from  the  database.  This
+                            deletion  happens immediately, without waiting for
+                            additional ovs-vsctl commands  or  other  database
+                            activity. Thus, a create command must generally be
+                            accompanied by additional commands within the same
+                            ovs-vsctl  invocation to add a chain of references
+                            to the newly created  record  from  the  top-level
+                            Open_vSwitch  record.  The  EXAMPLES section gives
+                            some examples that show how to do this.
+
+              [--if-exists] destroy table record...
+                     Deletes each specified record from table. Unless --if-ex�‐
+                     ists is specified, each records must exist.
+
+              --all destroy table
+                     Deletes all records from the table.
+
+                     Caution (ovs-vsctl as example)
+                            The destroy command is only useful for records  in
+                            the  QoS  or Queue tables. Records in other tables
+                            are automatically deleted from the  database  when
+                            they  become unreachable from the Open_vSwitch ta‐
+                            ble. This means that deleting the  last  reference
+                            to  a record is sufficient for deleting the record
+                            itself. For records in these  tables,  destroy  is
+                            silently  ignored.  See the EXAMPLES section below
+                            for more information.
+
+              wait-until table record [column[:key]=value]...
+                     Waits until table contains a record  named  record  whose
+                     column equals value or, if key is specified, whose column
+                     contains  a  key  with  the specified value. This command
+                     supports the same operators and semantics  described  for
+                     the find command above.
+
+                     If  no  column[:key]=value arguments are given, this com‐
+                     mand waits only until record exists.  If  more  than  one
+                     such  argument  is  given, the command waits until all of
+                     them are satisfied.
+
+                     Caution (ovs-vsctl as example)
+                            Usually wait-until should be placed at the  begin‐
+                            ning  of a set of ovs-vsctl commands. For example,
+                            wait-until bridge br0  --  get  bridge  br0  data�‐
+                            path_id waits until a bridge named br0 is created,
+                            then  prints  its  datapath_id column, whereas get
+                            bridge br0 datapath_id --  wait-until  bridge  br0
+                            will  abort  if  no  bridge  named br0 exists when
+                            ovs-vsctl initially connects to the database.
+
+                     Consider specifying --timeout=0 along with  --wait-until,
+                     to  prevent ovs-vsctl from terminating after waiting only
+                     at most 5 seconds.
+
+              comment [arg]...
+                     This command has no effect on behavior, but any  database
+                     log  record  created by the command will include the com‐
+                     mand and its arguments.
+
+REMOTE CONNECTIVITY COMMANDS
+       get-connection
+              Prints the configured connection(s).
+
+       del-connection
+              Deletes the configured connection(s).
+
+       [--inactivity-probe=msecs] set-connection target...
+              Sets the configured manager target or  targets.  Use  --inactiv�‐
+              ity-probe=msecs to override the default idle connection inactiv‐
+              ity probe time. Use 0 to disable inactivity probes.
+
+SSL CONFIGURATION COMMANDS
+       get-ssl
+              Prints the SSL configuration.
+
+       del-ssl
+              Deletes the current SSL configuration.
+
+       [--bootstrap] set-ssl private-key certificate ca-cert [ssl-protocol-
+       list [ssl-cipher-list]]
+              Sets the SSL configuration.
+
+OPTIONS
+       --db database
+              The  OVSDB database remote to contact. If the OVN_IC_SB_DB envi‐
+              ronment variable is set, its value is used as the default.  Oth‐
+              erwise, the default is unix:/ovn_ic_sb_db.sock, but this default
+              is  unlikely to be useful outside of single-machine OVN test en‐
+              vironments.
+
+       --leader-only
+       --no-leader-only
+            By default, or with --leader-only, when the database server  is  a
+            clustered database, ovn-ic-sbctl will avoid servers other than the
+            cluster leader. This ensures that any data that ovn-ic-sbctl reads
+            and  reports  is  up-to-date.  With --no-leader-only, ovn-ic-sbctl
+            will use any server in the cluster, which means that for read-only
+            transactions it can report and act  on  stale  data  (transactions
+            that   modify   the  database  are  always  serialized  even  with
+            --no-leader-only). Refer to Understanding Cluster  Consistency  in
+            ovsdb(7) for more information.
+
+LOGGING OPTIONS
+       -v[spec]
+       --verbose=[spec]
+            Sets  logging  levels.  Without  any  spec, sets the log level for
+            every module and destination to dbg. Otherwise, spec is a list  of
+            words separated by spaces or commas or colons, up to one from each
+            category below:
+
+            •      A  valid module name, as displayed by the vlog/list command
+                   on ovs-appctl(8), limits the log level change to the speci‐
+                   fied module.
+
+            •      syslog, console, or file, to limit the log level change  to
+                   only  to  the system log, to the console, or to a file, re‐
+                   spectively. (If --detach is specified,  the  daemon  closes
+                   its  standard  file  descriptors, so logging to the console
+                   will have no effect.)
+
+                   On Windows platform, syslog is accepted as a  word  and  is
+                   only useful along with the --syslog-target option (the word
+                   has no effect otherwise).
+
+            •      off,  emer,  err,  warn,  info,  or dbg, to control the log
+                   level. Messages of the given severity  or  higher  will  be
+                   logged,  and  messages  of  lower severity will be filtered
+                   out. off filters out all messages. See ovs-appctl(8) for  a
+                   definition of each log level.
+
+            Case is not significant within spec.
+
+            Regardless  of the log levels set for file, logging to a file will
+            not take place unless --log-file is also specified (see below).
+
+            For compatibility with older versions of OVS, any is accepted as a
+            word but has no effect.
+
+       -v
+       --verbose
+            Sets the maximum logging verbosity  level,  equivalent  to  --ver�‐
+            bose=dbg.
+
+       -vPATTERN:destination:pattern
+       --verbose=PATTERN:destination:pattern
+            Sets  the log pattern for destination to pattern. Refer to ovs-ap�‐
+            pctl(8) for a description of the valid syntax for pattern.
+
+       -vFACILITY:facility
+       --verbose=FACILITY:facility
+            Sets the RFC5424 facility of the log message. facility can be  one
+            of kern, user, mail, daemon, auth, syslog, lpr, news, uucp, clock,
+            ftp,  ntp,  audit,  alert, clock2, local0, local1, local2, local3,
+            local4, local5, local6 or local7. If this option is not specified,
+            daemon is used as the default for the local system syslog and  lo�‐
+            cal0  is  used  while sending a message to the target provided via
+            the --syslog-target option.
+
+       --log-file[=file]
+            Enables logging to a file. If file is specified, then it  is  used
+            as the exact name for the log file. The default log file name used
+            if file is omitted is /usr/local/var/log/ovn/program.log.
+
+       --syslog-target=host:port
+            Send  syslog messages to UDP port on host, in addition to the sys‐
+            tem syslog. The host must be a numerical IP address, not  a  host‐
+            name.
+
+       --syslog-method=method
+            Specify  method  as  how  syslog messages should be sent to syslog
+            daemon. The following forms are supported:
+
+            •      libc, to use the libc syslog() function. Downside of  using
+                   this  options  is that libc adds fixed prefix to every mes‐
+                   sage before it is actually sent to the syslog  daemon  over
+                   /dev/log UNIX domain socket.
+
+            •      unix:file, to use a UNIX domain socket directly. It is pos‐
+                   sible to specify arbitrary message format with this option.
+                   However,  rsyslogd  8.9  and  older versions use hard coded
+                   parser function anyway that limits UNIX domain socket  use.
+                   If  you  want  to  use  arbitrary message format with older
+                   rsyslogd versions, then use UDP socket to localhost IP  ad‐
+                   dress instead.
+
+            •      udp:ip:port,  to  use  a UDP socket. With this method it is
+                   possible to use arbitrary message format  also  with  older
+                   rsyslogd.  When sending syslog messages over UDP socket ex‐
+                   tra precaution needs to be taken into account, for example,
+                   syslog daemon needs to be configured to listen on the spec‐
+                   ified UDP port, accidental iptables rules could  be  inter‐
+                   fering  with  local syslog traffic and there are some secu‐
+                   rity considerations that apply to UDP sockets, but  do  not
+                   apply to UNIX domain sockets.
+
+            •      null, to discard all messages logged to syslog.
+
+            The  default is taken from the OVS_SYSLOG_METHOD environment vari‐
+            able; if it is unset, the default is libc.
+
+TABLE FORMATTING OPTIONS
+       These options control the format of output from the list and find  com‐
+       mands.
+
+              -f format
+              --format=format
+                   Sets  the  type of table formatting. The following types of
+                   format are available:
+
+                   table  2-D text tables with aligned columns.
+
+                   list (default)
+                          A list with one column per line and  rows  separated
+                          by a blank line.
+
+                   html   HTML tables.
+
+                   csv    Comma-separated values as defined in RFC 4180.
+
+                   json   JSON  format as defined in RFC 4627. The output is a
+                          sequence of JSON objects, each of which  corresponds
+                          to  one  table.  Each  JSON object has the following
+                          members with the noted values:
+
+                          caption
+                                 The table’s caption. This member  is  omitted
+                                 if the table has no caption.
+
+                          headings
+                                 An  array  with one element per table column.
+                                 Each array element is  a  string  giving  the
+                                 corresponding column’s heading.
+
+                          data   An array with one element per table row. Each
+                                 element is also an array with one element per
+                                 table  column.  The  elements of this second-
+                                 level array are the cells that constitute the
+                                 table. Cells that  represent  OVSDB  data  or
+                                 data  types  are  expressed in the format de‐
+                                 scribed in  the  OVSDB  specification;  other
+                                 cells are simply expressed as text strings.
+
+              -d format
+              --data=format
+                   Sets  the  formatting for cells within output tables unless
+                   the table format is set to json, in which case json format‐
+                   ting is always used when formatting  cells.  The  following
+                   types of format are available:
+
+                   string (default)
+                          The  simple  format described in the Database Values
+                          section of ovs-vsctl(8).
+
+                   bare   The simple format with punctuation stripped off:  []
+                          and  {}  are  omitted  around  sets, maps, and empty
+                          columns, items within sets and maps are  space-sepa‐
+                          rated, and strings are never quoted. This format may
+                          be easier for scripts to parse.
+
+                   json   The RFC 4627 JSON format as described above.
+
+              --no-headings
+                   This  option  suppresses the heading row that otherwise ap‐
+                   pears in the first row of table output.
+
+              --pretty
+                   By default, JSON in output is printed as compactly as  pos‐
+                   sible. This option causes JSON in output to be printed in a
+                   more  readable  fashion. Members of objects and elements of
+                   arrays are printed one per line, with indentation.
+
+                   This option does not affect JSON in tables, which is always
+                   printed compactly.
+
+              --bare
+                   Equivalent to --format=list --data=bare --no-headings.
+
+   PKI Options
+       PKI configuration is required to use SSL  for  the  connection  to  the
+       database.
+
+              -p privkey.pem
+              --private-key=privkey.pem
+                   Specifies  a  PEM  file  containing the private key used as
+                   identity for outgoing SSL connections.
+
+              -c cert.pem
+              --certificate=cert.pem
+                   Specifies a PEM file containing a certificate  that  certi‐
+                   fies the private key specified on -p or --private-key to be
+                   trustworthy. The certificate must be signed by the certifi‐
+                   cate  authority  (CA) that the peer in SSL connections will
+                   use to verify it.
+
+              -C cacert.pem
+              --ca-cert=cacert.pem
+                   Specifies a PEM file containing the CA certificate for ver‐
+                   ifying certificates presented to this program by SSL peers.
+                   (This may be the same certificate that  SSL  peers  use  to
+                   verify the certificate specified on -c or --certificate, or
+                   it  may  be a different one, depending on the PKI design in
+                   use.)
+
+              -C none
+              --ca-cert=none
+                   Disables verification  of  certificates  presented  by  SSL
+                   peers.  This  introduces  a security risk, because it means
+                   that certificates cannot be verified to be those  of  known
+                   trusted hosts.
+
+              --bootstrap-ca-cert=cacert.pem
+                     When  cacert.pem  exists, this option has the same effect
+                     as -C or --ca-cert. If it does not exist, then  the  exe‐
+                     cutable  will  attempt  to obtain the CA certificate from
+                     the SSL peer on its first SSL connection and save  it  to
+                     the  named PEM file. If it is successful, it will immedi‐
+                     ately drop the connection and reconnect, and from then on
+                     all SSL connections must be authenticated by  a  certifi‐
+                     cate signed by the CA certificate thus obtained.
+
+                     This  option  exposes the SSL connection to a man-in-the-
+                     middle attack obtaining the initial CA  certificate,  but
+                     it may be useful for bootstrapping.
+
+                     This  option  is only useful if the SSL peer sends its CA
+                     certificate as part of the SSL certificate chain. The SSL
+                     protocol does not require the server to send the CA  cer‐
+                     tificate.
+
+                     This option is mutually exclusive with -C and --ca-cert.
+
+   Other Options
+       -h
+       --help
+            Prints a brief help message to the console.
+
+       -V
+       --version
+            Prints version information to the console.
+
+OVN 23.06.3                      ovn-ic-sbctl                  ovn-ic-sbctl(8)
diff --git a/support/dist-docs-branch-23.06/ovn-ic.8 b/support/dist-docs-branch-23.06/ovn-ic.8
new file mode 100644
index 00000000..c6725872
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-ic.8
@@ -0,0 +1,211 @@
+'\" p
+.\" -*- nroff -*-
+.TH "ovn-ic" 8 "ovn-ic" "OVN 23\[char46]06\[char46]3" "OVN Manual"
+.fp 5 L CR              \\" Make fixed-width font available as \\fL.
+.de TQ
+.  br
+.  ns
+.  TP "\\$1"
+..
+.de ST
+.  PP
+.  RS -0.15in
+.  I "\\$1"
+.  RE
+..
+.de SU
+.  PP
+.  I "\\$1"
+..
+.PP
+.SH "NAME"
+.PP
+.PP
+ovn-ic \- Open Virtual Network interconnection controller
+.SH "SYNOPSIS"
+.PP
+\fBovn\-ic\fR [\fIoptions\fR]
+.SH "DESCRIPTION"
+.PP
+.PP
+\fBovn\-ic\fR, OVN interconnection controller, is a centralized daemon which communicates with global interconnection databases IC_NB/IC_SB to configure and exchange data with local NB/SB for interconnecting with other OVN deployments\[char46]
+.SH "OPTIONS"
+.TP
+\fB\-\-ovnnb\-db=\fIdatabase\fB\fR
+The OVSDB database containing the OVN Northbound Database\[char46] If the \fBOVN_NB_DB\fR environment variable is set, its value is used as the default\[char46] Otherwise, the default is \fBunix:/ovnnb_db\[char46]sock\fR\[char46]
+.TP
+\fB\-\-ovnsb\-db=\fIdatabase\fB\fR
+The OVSDB database containing the OVN Southbound Database\[char46] If the \fBOVN_SB_DB\fR environment variable is set, its value is used as the default\[char46] Otherwise, the default is \fBunix:/ovnsb_db\[char46]sock\fR\[char46]
+.TP
+\fB\-\-ic\-nb\-db=\fIdatabase\fB\fR
+The OVSDB database containing the OVN Interconnection Northbound Database\[char46] If the \fBOVN_IC_NB_DB\fR environment variable is set, its value is used as the default\[char46] Otherwise, the default is \fBunix:/ovn_ic_nb_db\[char46]sock\fR\[char46]
+.TP
+\fB\-\-ic\-sb\-db=\fIdatabase\fB\fR
+The OVSDB database containing the OVN Interconnection Southbound Database\[char46] If the \fBOVN_IC_SB_DB\fR environment variable is set, its value is used as the default\[char46] Otherwise, the default is \fBunix:/ovn_ic_sb_db\[char46]sock\fR\[char46]
+.PP
+.PP
+\fIdatabase\fR in the above options must be an OVSDB active or passive connection method, as described in \fBovsdb\fR(7)\[char46]
+.SS "Daemon Options"
+.TP
+\fB\-\-pidfile\fR[\fB=\fR\fIpidfile\fR]
+Causes a file (by default, \fB\fIprogram\fB\[char46]pid\fR) to be created indicating the PID of the running process\[char46] If the \fIpidfile\fR argument is not specified, or if it does not begin with \fB/\fR, then it is created in \fB\fR\[char46]
+.IP
+If \fB\-\-pidfile\fR is not specified, no pidfile is created\[char46]
+.TP
+\fB\-\-overwrite\-pidfile\fR
+By default, when \fB\-\-pidfile\fR is specified and the specified pidfile already exists and is locked by a running process, the daemon refuses to start\[char46] Specify \fB\-\-overwrite\-pidfile\fR to cause it to instead overwrite the pidfile\[char46]
+.IP
+When \fB\-\-pidfile\fR is not specified, this option has no effect\[char46]
+.TP
+\fB\-\-detach\fR
+Runs this program as a background process\[char46] The process forks, and in the child it starts a new session, closes the standard file descriptors (which has the side effect of disabling logging to the console), and changes its current directory to the root (unless \fB\-\-no\-chdir\fR is specified)\[char46] After the child completes its initialization, the parent exits\[char46]
+.TP
+\fB\-\-monitor\fR
+Creates an additional process to monitor this program\[char46] If it dies due to a signal that indicates a programming error (\fBSIGABRT\fR, \fBSIGALRM\fR, \fBSIGBUS\fR, \fBSIGFPE\fR, \fBSIGILL\fR, \fBSIGPIPE\fR, \fBSIGSEGV\fR, \fBSIGXCPU\fR, or \fBSIGXFSZ\fR) then the monitor process starts a new copy of it\[char46] If the daemon dies or exits for another reason, the monitor process exits\[char46]
+.IP
+This option is normally used with \fB\-\-detach\fR, but it also functions without it\[char46]
+.TP
+\fB\-\-no\-chdir\fR
+By default, when \fB\-\-detach\fR is specified, the daemon changes its current working directory to the root directory after it detaches\[char46] Otherwise, invoking the daemon from a carelessly chosen directory would prevent the administrator from unmounting the file system that holds that directory\[char46]
+.IP
+Specifying \fB\-\-no\-chdir\fR suppresses this behavior, preventing the daemon from changing its current working directory\[char46] This may be useful for collecting core files, since it is common behavior to write core dumps into the current working directory and the root directory is not a good directory to use\[char46]
+.IP
+This option has no effect when \fB\-\-detach\fR is not specified\[char46]
+.TP
+\fB\-\-no\-self\-confinement\fR
+By default this daemon will try to self-confine itself to work with files under well-known directories determined at build time\[char46] It is better to stick with this default behavior and not to use this flag unless some other Access Control is used to confine daemon\[char46] Note that in contrast to other access control implementations that are typically enforced from kernel-space (e\[char46]g\[char46] DAC or MAC), self-confinement is imposed from the user-space daemon itself and hence should not be considered as a full confinement strategy, but instead should be viewed as an additional layer of security\[char46]
+.TP
+\fB\-\-user=\fR\fIuser\fR\fB:\fR\fIgroup\fR
+Causes this program to run as a different user specified in \fIuser\fR\fB:\fR\fIgroup\fR, thus dropping most of the root privileges\[char46] Short forms \fIuser\fR and \fB:\fR\fIgroup\fR are also allowed, with current user or group assumed, respectively\[char46] Only daemons started by the root user accepts this argument\[char46]
+.IP
+On Linux, daemons will be granted \fBCAP_IPC_LOCK\fR and \fBCAP_NET_BIND_SERVICES\fR before dropping root privileges\[char46] Daemons that interact with a datapath, such as \fBovs\-vswitchd\fR, will be granted three additional capabilities, namely \fBCAP_NET_ADMIN\fR, \fBCAP_NET_BROADCAST\fR and \fBCAP_NET_RAW\fR\[char46] The capability change will apply even if the new user is root\[char46]
+.IP
+On Windows, this option is not currently supported\[char46] For security reasons, specifying this option will cause the daemon process not to start\[char46]
+.SS "Logging Options"
+.TP
+\fB\-v\fR[\fIspec\fR]
+.TQ .5in
+\fB\-\-verbose=\fR[\fIspec\fR]
+Sets logging levels\[char46] Without any \fIspec\fR, sets the log level for every module and destination to \fBdbg\fR\[char46] Otherwise, \fIspec\fR is a list of words separated by spaces or commas or colons, up to one from each category below:
+.RS
+.IP \(bu
+A valid module name, as displayed by the \fBvlog/list\fR command on \fBovs\-appctl\fR(8), limits the log level change to the specified module\[char46]
+.IP \(bu
+\fBsyslog\fR, \fBconsole\fR, or \fBfile\fR, to limit the log level change to only to the system log, to the console, or to a file, respectively\[char46] (If \fB\-\-detach\fR is specified, the daemon closes its standard file descriptors, so logging to the console will have no effect\[char46])
+.IP
+On Windows platform, \fBsyslog\fR is accepted as a word and is only useful along with the \fB\-\-syslog\-target\fR option (the word has no effect otherwise)\[char46]
+.IP \(bu
+\fBoff\fR, \fBemer\fR, \fBerr\fR, \fBwarn\fR, \fBinfo\fR, or \fBdbg\fR, to control the log level\[char46] Messages of the given severity or higher will be logged, and messages of lower severity will be filtered out\[char46] \fBoff\fR filters out all messages\[char46] See \fBovs\-appctl\fR(8) for a definition of each log level\[char46]
+.RE
+.IP
+Case is not significant within \fIspec\fR\[char46]
+.IP
+Regardless of the log levels set for \fBfile\fR, logging to a file will not take place unless \fB\-\-log\-file\fR is also specified (see below)\[char46]
+.IP
+For compatibility with older versions of OVS, \fBany\fR is accepted as a word but has no effect\[char46]
+.TP
+\fB\-v\fR
+.TQ .5in
+\fB\-\-verbose\fR
+Sets the maximum logging verbosity level, equivalent to \fB\-\-verbose=dbg\fR\[char46]
+.TP
+\fB\-vPATTERN:\fR\fIdestination\fR\fB:\fR\fIpattern\fR
+.TQ .5in
+\fB\-\-verbose=PATTERN:\fR\fIdestination\fR\fB:\fR\fIpattern\fR
+Sets the log pattern for \fIdestination\fR to \fIpattern\fR\[char46] Refer to \fBovs\-appctl\fR(8) for a description of the valid syntax for \fIpattern\fR\[char46]
+.TP
+\fB\-vFACILITY:\fR\fIfacility\fR
+.TQ .5in
+\fB\-\-verbose=FACILITY:\fR\fIfacility\fR
+Sets the RFC5424 facility of the log message\[char46] \fIfacility\fR can be one of \fBkern\fR, \fBuser\fR, \fBmail\fR, \fBdaemon\fR, \fBauth\fR, \fBsyslog\fR, \fBlpr\fR, \fBnews\fR, \fBuucp\fR, \fBclock\fR, \fBftp\fR, \fBntp\fR, \fBaudit\fR, \fBalert\fR, \fBclock2\fR, \fBlocal0\fR, \fBlocal1\fR, \fBlocal2\fR, \fBlocal3\fR, \fBlocal4\fR, \fBlocal5\fR, \fBlocal6\fR or \fBlocal7\fR\[char46] If this option is not specified, \fBdaemon\fR is used as the default for the local system syslog and \fBlocal0\fR is used while sending a message to the target provided via the \fB\-\-syslog\-target\fR option\[char46]
+.TP
+\fB\-\-log\-file\fR[\fB=\fR\fIfile\fR]
+Enables logging to a file\[char46] If \fIfile\fR is specified, then it is used as the exact name for the log file\[char46] The default log file name used if \fIfile\fR is omitted is \fB/usr/local/var/log/ovn/\fIprogram\fB\[char46]log\fR\[char46]
+.TP
+\fB\-\-syslog\-target=\fR\fIhost\fR\fB:\fR\fIport\fR
+Send syslog messages to UDP \fIport\fR on \fIhost\fR, in addition to the system syslog\[char46] The \fIhost\fR must be a numerical IP address, not a hostname\[char46]
+.TP
+\fB\-\-syslog\-method=\fR\fImethod\fR
+Specify \fImethod\fR as how syslog messages should be sent to syslog daemon\[char46] The following forms are supported:
+.RS
+.IP \(bu
+\fBlibc\fR, to use the libc \fBsyslog()\fR function\[char46] Downside of using this options is that libc adds fixed prefix to every message before it is actually sent to the syslog daemon over \fB/dev/log\fR UNIX domain socket\[char46]
+.IP \(bu
+\fBunix:\fIfile\fB\fR, to use a UNIX domain socket directly\[char46] It is possible to specify arbitrary message format with this option\[char46] However, \fBrsyslogd 8\[char46]9\fR and older versions use hard coded parser function anyway that limits UNIX domain socket use\[char46] If you want to use arbitrary message format with older \fBrsyslogd\fR versions, then use UDP socket to localhost IP address instead\[char46]
+.IP \(bu
+\fBudp:\fIip\fB:\fIport\fB\fR, to use a UDP socket\[char46] With this method it is possible to use arbitrary message format also with older \fBrsyslogd\fR\[char46] When sending syslog messages over UDP socket extra precaution needs to be taken into account, for example, syslog daemon needs to be configured to listen on the specified UDP port, accidental iptables rules could be interfering with local syslog traffic and there are some security considerations that apply to UDP sockets, but do not apply to UNIX domain sockets\[char46]
+.IP \(bu
+\fBnull\fR, to discard all messages logged to syslog\[char46]
+.RE
+.IP
+The default is taken from the \fBOVS_SYSLOG_METHOD\fR environment variable; if it is unset, the default is \fBlibc\fR\[char46]
+.SS "PKI Options"
+.PP
+.PP
+PKI configuration is required in order to use SSL for the connections to the Northbound and Southbound databases\[char46]
+.RS
+.TP
+\fB\-p\fR \fIprivkey\[char46]pem\fR
+.TQ .5in
+\fB\-\-private\-key=\fR\fIprivkey\[char46]pem\fR
+Specifies a PEM file containing the private key used as identity for outgoing SSL connections\[char46]
+.TP
+\fB\-c\fR \fIcert\[char46]pem\fR
+.TQ .5in
+\fB\-\-certificate=\fR\fIcert\[char46]pem\fR
+Specifies a PEM file containing a certificate that certifies the private key specified on \fB\-p\fR or \fB\-\-private\-key\fR to be trustworthy\[char46] The certificate must be signed by the certificate authority (CA) that the peer in SSL connections will use to verify it\[char46]
+.TP
+\fB\-C\fR \fIcacert\[char46]pem\fR
+.TQ .5in
+\fB\-\-ca\-cert=\fR\fIcacert\[char46]pem\fR
+Specifies a PEM file containing the CA certificate for verifying certificates presented to this program by SSL peers\[char46] (This may be the same certificate that SSL peers use to verify the certificate specified on \fB\-c\fR or \fB\-\-certificate\fR, or it may be a different one, depending on the PKI design in use\[char46])
+.TP
+\fB\-C none\fR
+.TQ .5in
+\fB\-\-ca\-cert=none\fR
+Disables verification of certificates presented by SSL peers\[char46] This introduces a security risk, because it means that certificates cannot be verified to be those of known trusted hosts\[char46]
+.RE
+.SS "Other Options"
+.TP
+\fB\-\-unixctl=\fIsocket\fB\fR
+Sets the name of the control socket on which \fB\fIprogram\fB\fR listens for runtime management commands (see \fIRUNTIME MANAGEMENT COMMANDS,\fR below)\[char46] If \fIsocket\fR does not begin with \fB/\fR, it is interpreted as relative to \fB\fR\[char46] If \fB\-\-unixctl\fR is not used at all, the default socket is \fB/\fIprogram\fB\[char46]\fR\fIpid\fR\fB\[char46]ctl\fR, where \fIpid\fR is \fB\fIprogram\fB\fR\(cqs process ID\[char46]
+.IP
+On Windows a local named pipe is used to listen for runtime management commands\[char46] A file is created in the absolute path as pointed by \fIsocket\fR or if \fB\-\-unixctl\fR is not used at all, a file is created as \fB\fIprogram\fB\fR in the configured \fIOVS_RUNDIR\fR directory\[char46] The file exists just to mimic the behavior of a Unix domain socket\[char46]
+.IP
+Specifying \fBnone\fR for \fIsocket\fR disables the control socket feature\[char46]
+.ST ""
+.TP
+\fB\-h\fR
+.TQ .5in
+\fB\-\-help\fR
+Prints a brief help message to the console\[char46]
+.TP
+\fB\-V\fR
+.TQ .5in
+\fB\-\-version\fR
+Prints version information to the console\[char46]
+.SH "RUNTIME MANAGEMENT COMMANDS"
+.PP
+.PP
+\fBovs\-appctl\fR can send commands to a running \fBovn\-ic\fR process\[char46] The currently supported commands are described below\[char46]
+.RS
+.TP
+\fBexit\fR
+Causes \fBovn\-ic\fR to gracefully terminate\[char46]
+.TP
+\fBpause\fR
+Pauses the ovn-ic operation from processing any database changes\[char46] This will also instruct ovn-ic to drop any lock on SB DB\[char46]
+.TP
+\fBresume\fR
+Resumes the ovn-ic operation to process database contents\[char46] This will also instruct ovn-northd to aspire for the lock on SB DB\[char46]
+.TP
+\fBis\-paused\fR
+Returns \(dqtrue\(dq if ovn-ic is currently paused, \(dqfalse\(dq otherwise\[char46]
+.TP
+\fBstatus\fR
+Prints this server\(cqs status\[char46] Status will be \(dqactive\(dq if ovn-ic has acquired OVSDB lock on SB DB, \(dqstandby\(dq if it has not or \(dqpaused\(dq if this instance is paused\[char46]
+.RE
+.SH "ACTIVE-STANDBY FOR HIGH AVAILABILITY"
+.PP
+.PP
+You may run \fBovn\-ic\fR more than once in an OVN deployment\[char46] When connected to a standalone or clustered DB setup, OVN will automatically ensure that only one of them is active at a time\[char46] If multiple instances of \fBovn\-ic\fR are running and the active \fBovn\-ic\fR fails, one of the hot standby instances of \fBovn\-ic\fR will automatically take over\[char46]
diff --git a/support/dist-docs-branch-23.06/ovn-ic.8.html b/support/dist-docs-branch-23.06/ovn-ic.8.html
new file mode 100644
index 00000000..8d78730c
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-ic.8.html
@@ -0,0 +1,310 @@
+<html><head><meta charset="UTF-8"></head><body><pre>
+<u>o</u><u>v</u><u>n</u><u>-</u><u>i</u><u>c</u>(8)                         OVN Manual                         <u>o</u><u>v</u><u>n</u><u>-</u><u>i</u><u>c</u>(8)
+
+<b>N</b><b>A</b><b>M</b><b>E</b>
+       ovn-ic - Open Virtual Network interconnection controller
+
+<b>S</b><b>Y</b><b>N</b><b>O</b><b>P</b><b>S</b><b>I</b><b>S</b>
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b> [<u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u>]
+
+<b>D</b><b>E</b><b>S</b><b>C</b><b>R</b><b>I</b><b>P</b><b>T</b><b>I</b><b>O</b><b>N</b>
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b>,  OVN  interconnection controller, is a centralized daemon which
+       communicates with global interconnection databases IC_NB/IC_SB to  con‐
+       figure  and  exchange  data  with  local NB/SB for interconnecting with
+       other OVN deployments.
+
+<b>O</b><b>P</b><b>T</b><b>I</b><b>O</b><b>N</b><b>S</b>
+       <b>-</b><b>-</b><b>o</b><b>v</b><b>n</b><b>n</b><b>b</b><b>-</b><b>d</b><b>b</b><b>=</b><u>d</u><u>a</u><u>t</u><u>a</u><u>b</u><u>a</u><u>s</u><u>e</u>
+              The OVSDB database containing the OVN  Northbound  Database.  If
+              the  <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>B</b><b>_</b><b>D</b><b>B</b> environment variable is set, its value is used as
+              the default. Otherwise, the default is <b>u</b><b>n</b><b>i</b><b>x</b><b>:</b><b>/</b><b>o</b><b>v</b><b>n</b><b>n</b><b>b</b><b>_</b><b>d</b><b>b</b><b>.</b><b>s</b><b>o</b><b>c</b><b>k</b>.
+
+       <b>-</b><b>-</b><b>o</b><b>v</b><b>n</b><b>s</b><b>b</b><b>-</b><b>d</b><b>b</b><b>=</b><u>d</u><u>a</u><u>t</u><u>a</u><u>b</u><u>a</u><u>s</u><u>e</u>
+              The OVSDB database containing the OVN  Southbound  Database.  If
+              the  <b>O</b><b>V</b><b>N</b><b>_</b><b>S</b><b>B</b><b>_</b><b>D</b><b>B</b> environment variable is set, its value is used as
+              the default. Otherwise, the default is <b>u</b><b>n</b><b>i</b><b>x</b><b>:</b><b>/</b><b>o</b><b>v</b><b>n</b><b>s</b><b>b</b><b>_</b><b>d</b><b>b</b><b>.</b><b>s</b><b>o</b><b>c</b><b>k</b>.
+
+       <b>-</b><b>-</b><b>i</b><b>c</b><b>-</b><b>n</b><b>b</b><b>-</b><b>d</b><b>b</b><b>=</b><u>d</u><u>a</u><u>t</u><u>a</u><u>b</u><u>a</u><u>s</u><u>e</u>
+              The OVSDB database containing the OVN Interconnection Northbound
+              Database. If the <b>O</b><b>V</b><b>N</b><b>_</b><b>I</b><b>C</b><b>_</b><b>N</b><b>B</b><b>_</b><b>D</b><b>B</b> environment variable is  set,  its
+              value  is  used  as  the  default.  Otherwise,  the  default  is
+              <b>u</b><b>n</b><b>i</b><b>x</b><b>:</b><b>/</b><b>o</b><b>v</b><b>n</b><b>_</b><b>i</b><b>c</b><b>_</b><b>n</b><b>b</b><b>_</b><b>d</b><b>b</b><b>.</b><b>s</b><b>o</b><b>c</b><b>k</b>.
+
+       <b>-</b><b>-</b><b>i</b><b>c</b><b>-</b><b>s</b><b>b</b><b>-</b><b>d</b><b>b</b><b>=</b><u>d</u><u>a</u><u>t</u><u>a</u><u>b</u><u>a</u><u>s</u><u>e</u>
+              The OVSDB database containing the OVN Interconnection Southbound
+              Database. If the <b>O</b><b>V</b><b>N</b><b>_</b><b>I</b><b>C</b><b>_</b><b>S</b><b>B</b><b>_</b><b>D</b><b>B</b> environment variable is  set,  its
+              value  is  used  as  the  default.  Otherwise,  the  default  is
+              <b>u</b><b>n</b><b>i</b><b>x</b><b>:</b><b>/</b><b>o</b><b>v</b><b>n</b><b>_</b><b>i</b><b>c</b><b>_</b><b>s</b><b>b</b><b>_</b><b>d</b><b>b</b><b>.</b><b>s</b><b>o</b><b>c</b><b>k</b>.
+
+       <u>d</u><u>a</u><u>t</u><u>a</u><u>b</u><u>a</u><u>s</u><u>e</u> in the above options must be an OVSDB active or  passive  con‐
+       nection method, as described in <b>o</b><b>v</b><b>s</b><b>d</b><b>b</b>(7).
+
+   <b>D</b><b>a</b><b>e</b><b>m</b><b>o</b><b>n</b> <b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+       <b>-</b><b>-</b><b>p</b><b>i</b><b>d</b><b>f</b><b>i</b><b>l</b><b>e</b>[<b>=</b><u>p</u><u>i</u><u>d</u><u>f</u><u>i</u><u>l</u><u>e</u>]
+              Causes a file (by default, <u>p</u><u>r</u><u>o</u><u>g</u><u>r</u><u>a</u><u>m</u><b>.</b><b>p</b><b>i</b><b>d</b>) to be created indicating
+              the  PID  of the running process. If the <u>p</u><u>i</u><u>d</u><u>f</u><u>i</u><u>l</u><u>e</u> argument is not
+              specified, or if it does not begin with <b>/</b>, then it is created in
+              .
+
+              If <b>-</b><b>-</b><b>p</b><b>i</b><b>d</b><b>f</b><b>i</b><b>l</b><b>e</b> is not specified, no pidfile is created.
+
+       <b>-</b><b>-</b><b>o</b><b>v</b><b>e</b><b>r</b><b>w</b><b>r</b><b>i</b><b>t</b><b>e</b><b>-</b><b>p</b><b>i</b><b>d</b><b>f</b><b>i</b><b>l</b><b>e</b>
+              By default, when <b>-</b><b>-</b><b>p</b><b>i</b><b>d</b><b>f</b><b>i</b><b>l</b><b>e</b> is specified and the  specified  pid‐
+              file already exists and is locked by a running process, the dae‐
+              mon refuses to start. Specify <b>-</b><b>-</b><b>o</b><b>v</b><b>e</b><b>r</b><b>w</b><b>r</b><b>i</b><b>t</b><b>e</b><b>-</b><b>p</b><b>i</b><b>d</b><b>f</b><b>i</b><b>l</b><b>e</b> to cause it to
+              instead overwrite the pidfile.
+
+              When <b>-</b><b>-</b><b>p</b><b>i</b><b>d</b><b>f</b><b>i</b><b>l</b><b>e</b> is not specified, this option has no effect.
+
+       <b>-</b><b>-</b><b>d</b><b>e</b><b>t</b><b>a</b><b>c</b><b>h</b>
+              Runs  this  program  as a background process. The process forks,
+              and in the child it starts a new session,  closes  the  standard
+              file descriptors (which has the side effect of disabling logging
+              to  the  console), and changes its current directory to the root
+              (unless <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>c</b><b>h</b><b>d</b><b>i</b><b>r</b> is specified). After the child completes  its
+              initialization, the parent exits.
+
+       <b>-</b><b>-</b><b>m</b><b>o</b><b>n</b><b>i</b><b>t</b><b>o</b><b>r</b>
+              Creates  an  additional  process  to monitor this program. If it
+              dies due to a signal that indicates a programming  error  (<b>S</b><b>I</b><b>G</b><b>A</b>‐‐
+              <b>B</b><b>R</b><b>T</b>, <b>S</b><b>I</b><b>G</b><b>A</b><b>L</b><b>R</b><b>M</b>, <b>S</b><b>I</b><b>G</b><b>B</b><b>U</b><b>S</b>, <b>S</b><b>I</b><b>G</b><b>F</b><b>P</b><b>E</b>, <b>S</b><b>I</b><b>G</b><b>I</b><b>L</b><b>L</b>, <b>S</b><b>I</b><b>G</b><b>P</b><b>I</b><b>P</b><b>E</b>, <b>S</b><b>I</b><b>G</b><b>S</b><b>E</b><b>G</b><b>V</b>, <b>S</b><b>I</b><b>G</b><b>X</b><b>C</b><b>P</b><b>U</b>,
+              or <b>S</b><b>I</b><b>G</b><b>X</b><b>F</b><b>S</b><b>Z</b>) then the monitor process starts a new copy of it. If
+              the daemon dies or exits for another reason, the monitor process
+              exits.
+
+              This  option  is  normally used with <b>-</b><b>-</b><b>d</b><b>e</b><b>t</b><b>a</b><b>c</b><b>h</b>, but it also func‐
+              tions without it.
+
+       <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>c</b><b>h</b><b>d</b><b>i</b><b>r</b>
+              By default, when <b>-</b><b>-</b><b>d</b><b>e</b><b>t</b><b>a</b><b>c</b><b>h</b> is specified, the daemon  changes  its
+              current  working  directory  to  the root directory after it de‐
+              taches. Otherwise, invoking the daemon from a carelessly  chosen
+              directory  would  prevent  the administrator from unmounting the
+              file system that holds that directory.
+
+              Specifying <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>c</b><b>h</b><b>d</b><b>i</b><b>r</b> suppresses this behavior,  preventing  the
+              daemon  from changing its current working directory. This may be
+              useful for collecting core files, since it is common behavior to
+              write core dumps into the current working directory and the root
+              directory is not a good directory to use.
+
+              This option has no effect when <b>-</b><b>-</b><b>d</b><b>e</b><b>t</b><b>a</b><b>c</b><b>h</b> is not specified.
+
+       <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>s</b><b>e</b><b>l</b><b>f</b><b>-</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>n</b><b>e</b><b>m</b><b>e</b><b>n</b><b>t</b>
+              By default this daemon will try to self-confine itself  to  work
+              with  files  under  well-known  directories  determined at build
+              time. It is better to stick with this default behavior  and  not
+              to  use  this  flag  unless some other Access Control is used to
+              confine daemon. Note that in contrast to  other  access  control
+              implementations  that  are  typically enforced from kernel-space
+              (e.g. DAC or MAC), self-confinement is imposed  from  the  user-
+              space daemon itself and hence should not be considered as a full
+              confinement  strategy,  but instead should be viewed as an addi‐
+              tional layer of security.
+
+       <b>-</b><b>-</b><b>u</b><b>s</b><b>e</b><b>r</b><b>=</b><u>u</u><u>s</u><u>e</u><u>r</u><b>:</b><u>g</u><u>r</u><u>o</u><u>u</u><u>p</u>
+              Causes this program to run as  a  different  user  specified  in
+              <u>u</u><u>s</u><u>e</u><u>r</u><b>:</b><u>g</u><u>r</u><u>o</u><u>u</u><u>p</u>,  thus  dropping  most  of the root privileges. Short
+              forms <u>u</u><u>s</u><u>e</u><u>r</u> and <b>:</b><u>g</u><u>r</u><u>o</u><u>u</u><u>p</u> are also allowed,  with  current  user  or
+              group  assumed,  respectively.  Only daemons started by the root
+              user accepts this argument.
+
+              On   Linux,   daemons   will   be   granted   <b>C</b><b>A</b><b>P</b><b>_</b><b>I</b><b>P</b><b>C</b><b>_</b><b>L</b><b>O</b><b>C</b><b>K</b>   and
+              <b>C</b><b>A</b><b>P</b><b>_</b><b>N</b><b>E</b><b>T</b><b>_</b><b>B</b><b>I</b><b>N</b><b>D</b><b>_</b><b>S</b><b>E</b><b>R</b><b>V</b><b>I</b><b>C</b><b>E</b><b>S</b>  before  dropping root privileges. Daemons
+              that interact with a datapath, such  as  <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>d</b>,  will  be
+              granted  three  additional  capabilities,  namely <b>C</b><b>A</b><b>P</b><b>_</b><b>N</b><b>E</b><b>T</b><b>_</b><b>A</b><b>D</b><b>M</b><b>I</b><b>N</b>,
+              <b>C</b><b>A</b><b>P</b><b>_</b><b>N</b><b>E</b><b>T</b><b>_</b><b>B</b><b>R</b><b>O</b><b>A</b><b>D</b><b>C</b><b>A</b><b>S</b><b>T</b> and <b>C</b><b>A</b><b>P</b><b>_</b><b>N</b><b>E</b><b>T</b><b>_</b><b>R</b><b>A</b><b>W</b>. The  capability  change  will
+              apply even if the new user is root.
+
+              On Windows, this option is not currently supported. For security
+              reasons,  specifying  this  option will cause the daemon process
+              not to start.
+
+   <b>L</b><b>o</b><b>g</b><b>g</b><b>i</b><b>n</b><b>g</b> <b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+       <b>-</b><b>v</b>[<u>s</u><u>p</u><u>e</u><u>c</u>]
+       <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>b</b><b>o</b><b>s</b><b>e</b><b>=</b>[<u>s</u><u>p</u><u>e</u><u>c</u>]
+            Sets logging levels. Without any <u>s</u><u>p</u><u>e</u><u>c</u>,  sets  the  log  level  for
+            every  module and destination to <b>d</b><b>b</b><b>g</b>. Otherwise, <u>s</u><u>p</u><u>e</u><u>c</u> is a list of
+            words separated by spaces or commas or colons, up to one from each
+            category below:
+
+            •      A valid module name, as displayed by the <b>v</b><b>l</b><b>o</b><b>g</b><b>/</b><b>l</b><b>i</b><b>s</b><b>t</b>  command
+                   on <b>o</b><b>v</b><b>s</b><b>-</b><b>a</b><b>p</b><b>p</b><b>c</b><b>t</b><b>l</b>(8), limits the log level change to the speci‐
+                   fied module.
+
+            •      <b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b>,  <b>c</b><b>o</b><b>n</b><b>s</b><b>o</b><b>l</b><b>e</b>, or <b>f</b><b>i</b><b>l</b><b>e</b>, to limit the log level change to
+                   only to the system log, to the console, or to a  file,  re‐
+                   spectively.  (If  <b>-</b><b>-</b><b>d</b><b>e</b><b>t</b><b>a</b><b>c</b><b>h</b>  is specified, the daemon closes
+                   its standard file descriptors, so logging  to  the  console
+                   will have no effect.)
+
+                   On  Windows  platform,  <b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b> is accepted as a word and is
+                   only useful along with the <b>-</b><b>-</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>-</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> option (the word
+                   has no effect otherwise).
+
+            •      <b>o</b><b>f</b><b>f</b>, <b>e</b><b>m</b><b>e</b><b>r</b>, <b>e</b><b>r</b><b>r</b>, <b>w</b><b>a</b><b>r</b><b>n</b>, <b>i</b><b>n</b><b>f</b><b>o</b>, or  <b>d</b><b>b</b><b>g</b>,  to  control  the  log
+                   level.  Messages  of  the  given severity or higher will be
+                   logged, and messages of lower  severity  will  be  filtered
+                   out.  <b>o</b><b>f</b><b>f</b> filters out all messages. See <b>o</b><b>v</b><b>s</b><b>-</b><b>a</b><b>p</b><b>p</b><b>c</b><b>t</b><b>l</b>(8) for a
+                   definition of each log level.
+
+            Case is not significant within <u>s</u><u>p</u><u>e</u><u>c</u>.
+
+            Regardless of the log levels set for <b>f</b><b>i</b><b>l</b><b>e</b>, logging to a file  will
+            not take place unless <b>-</b><b>-</b><b>l</b><b>o</b><b>g</b><b>-</b><b>f</b><b>i</b><b>l</b><b>e</b> is also specified (see below).
+
+            For compatibility with older versions of OVS, <b>a</b><b>n</b><b>y</b> is accepted as a
+            word but has no effect.
+
+       <b>-</b><b>v</b>
+       <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>b</b><b>o</b><b>s</b><b>e</b>
+            Sets  the  maximum  logging  verbosity level, equivalent to <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b>‐‐
+            <b>b</b><b>o</b><b>s</b><b>e</b><b>=</b><b>d</b><b>b</b><b>g</b>.
+
+       <b>-</b><b>v</b><b>P</b><b>A</b><b>T</b><b>T</b><b>E</b><b>R</b><b>N</b><b>:</b><u>d</u><u>e</u><u>s</u><u>t</u><u>i</u><u>n</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u><b>:</b><u>p</u><u>a</u><u>t</u><u>t</u><u>e</u><u>r</u><u>n</u>
+       <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>b</b><b>o</b><b>s</b><b>e</b><b>=</b><b>P</b><b>A</b><b>T</b><b>T</b><b>E</b><b>R</b><b>N</b><b>:</b><u>d</u><u>e</u><u>s</u><u>t</u><u>i</u><u>n</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u><b>:</b><u>p</u><u>a</u><u>t</u><u>t</u><u>e</u><u>r</u><u>n</u>
+            Sets the log pattern for <u>d</u><u>e</u><u>s</u><u>t</u><u>i</u><u>n</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u> to <u>p</u><u>a</u><u>t</u><u>t</u><u>e</u><u>r</u><u>n</u>. Refer to  <b>o</b><b>v</b><b>s</b><b>-</b><b>a</b><b>p</b>‐‐
+            <b>p</b><b>c</b><b>t</b><b>l</b>(8) for a description of the valid syntax for <u>p</u><u>a</u><u>t</u><u>t</u><u>e</u><u>r</u><u>n</u>.
+
+       <b>-</b><b>v</b><b>F</b><b>A</b><b>C</b><b>I</b><b>L</b><b>I</b><b>T</b><b>Y</b><b>:</b><u>f</u><u>a</u><u>c</u><u>i</u><u>l</u><u>i</u><u>t</u><u>y</u>
+       <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>b</b><b>o</b><b>s</b><b>e</b><b>=</b><b>F</b><b>A</b><b>C</b><b>I</b><b>L</b><b>I</b><b>T</b><b>Y</b><b>:</b><u>f</u><u>a</u><u>c</u><u>i</u><u>l</u><u>i</u><u>t</u><u>y</u>
+            Sets  the RFC5424 facility of the log message. <u>f</u><u>a</u><u>c</u><u>i</u><u>l</u><u>i</u><u>t</u><u>y</u> can be one
+            of <b>k</b><b>e</b><b>r</b><b>n</b>, <b>u</b><b>s</b><b>e</b><b>r</b>, <b>m</b><b>a</b><b>i</b><b>l</b>, <b>d</b><b>a</b><b>e</b><b>m</b><b>o</b><b>n</b>, <b>a</b><b>u</b><b>t</b><b>h</b>, <b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b>, <b>l</b><b>p</b><b>r</b>, <b>n</b><b>e</b><b>w</b><b>s</b>, <b>u</b><b>u</b><b>c</b><b>p</b>, <b>c</b><b>l</b><b>o</b><b>c</b><b>k</b>,
+            <b>f</b><b>t</b><b>p</b>, <b>n</b><b>t</b><b>p</b>, <b>a</b><b>u</b><b>d</b><b>i</b><b>t</b>, <b>a</b><b>l</b><b>e</b><b>r</b><b>t</b>, <b>c</b><b>l</b><b>o</b><b>c</b><b>k</b><b>2</b>, <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>0</b>,  <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>1</b>,  <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>2</b>,  <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>3</b>,
+            <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>4</b>, <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>5</b>, <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>6</b> or <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>7</b>. If this option is not specified,
+            <b>d</b><b>a</b><b>e</b><b>m</b><b>o</b><b>n</b>  is used as the default for the local system syslog and <b>l</b><b>o</b>‐‐
+            <b>c</b><b>a</b><b>l</b><b>0</b> is used while sending a message to the  target  provided  via
+            the <b>-</b><b>-</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>-</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> option.
+
+       <b>-</b><b>-</b><b>l</b><b>o</b><b>g</b><b>-</b><b>f</b><b>i</b><b>l</b><b>e</b>[<b>=</b><u>f</u><u>i</u><u>l</u><u>e</u>]
+            Enables  logging  to a file. If <u>f</u><u>i</u><u>l</u><u>e</u> is specified, then it is used
+            as the exact name for the log file. The default log file name used
+            if <u>f</u><u>i</u><u>l</u><u>e</u> is omitted is <b>/</b><b>u</b><b>s</b><b>r</b><b>/</b><b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>/</b><b>v</b><b>a</b><b>r</b><b>/</b><b>l</b><b>o</b><b>g</b><b>/</b><b>o</b><b>v</b><b>n</b><b>/</b><u>p</u><u>r</u><u>o</u><u>g</u><u>r</u><u>a</u><u>m</u><b>.</b><b>l</b><b>o</b><b>g</b>.
+
+       <b>-</b><b>-</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>-</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b><b>=</b><u>h</u><u>o</u><u>s</u><u>t</u><b>:</b><u>p</u><u>o</u><u>r</u><u>t</u>
+            Send syslog messages to UDP <u>p</u><u>o</u><u>r</u><u>t</u> on <u>h</u><u>o</u><u>s</u><u>t</u>, in addition to the  sys‐
+            tem  syslog.  The <u>h</u><u>o</u><u>s</u><u>t</u> must be a numerical IP address, not a host‐
+            name.
+
+       <b>-</b><b>-</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>-</b><b>m</b><b>e</b><b>t</b><b>h</b><b>o</b><b>d</b><b>=</b><u>m</u><u>e</u><u>t</u><u>h</u><u>o</u><u>d</u>
+            Specify <u>m</u><u>e</u><u>t</u><u>h</u><u>o</u><u>d</u> as how syslog messages should  be  sent  to  syslog
+            daemon. The following forms are supported:
+
+            •      <b>l</b><b>i</b><b>b</b><b>c</b>,  to use the libc <b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>(</b><b>)</b> function. Downside of using
+                   this options is that libc adds fixed prefix to  every  mes‐
+                   sage  before  it is actually sent to the syslog daemon over
+                   <b>/</b><b>d</b><b>e</b><b>v</b><b>/</b><b>l</b><b>o</b><b>g</b> UNIX domain socket.
+
+            •      <b>u</b><b>n</b><b>i</b><b>x</b><b>:</b><u>f</u><u>i</u><u>l</u><u>e</u>, to use a UNIX domain socket directly. It is pos‐
+                   sible to specify arbitrary message format with this option.
+                   However, <b>r</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>d</b> <b>8</b><b>.</b><b>9</b> and older  versions  use  hard  coded
+                   parser  function anyway that limits UNIX domain socket use.
+                   If you want to use  arbitrary  message  format  with  older
+                   <b>r</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>d</b>  versions, then use UDP socket to localhost IP ad‐
+                   dress instead.
+
+            •      <b>u</b><b>d</b><b>p</b><b>:</b><u>i</u><u>p</u><b>:</b><u>p</u><u>o</u><u>r</u><u>t</u>, to use a UDP socket. With this  method  it  is
+                   possible  to  use  arbitrary message format also with older
+                   <b>r</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>d</b>. When sending syslog messages over UDP socket  ex‐
+                   tra precaution needs to be taken into account, for example,
+                   syslog daemon needs to be configured to listen on the spec‐
+                   ified  UDP  port, accidental iptables rules could be inter‐
+                   fering with local syslog traffic and there are  some  secu‐
+                   rity  considerations  that apply to UDP sockets, but do not
+                   apply to UNIX domain sockets.
+
+            •      <b>n</b><b>u</b><b>l</b><b>l</b>, to discard all messages logged to syslog.
+
+            The default is taken from the <b>O</b><b>V</b><b>S</b><b>_</b><b>S</b><b>Y</b><b>S</b><b>L</b><b>O</b><b>G</b><b>_</b><b>M</b><b>E</b><b>T</b><b>H</b><b>O</b><b>D</b> environment  vari‐
+            able; if it is unset, the default is <b>l</b><b>i</b><b>b</b><b>c</b>.
+
+   <b>P</b><b>K</b><b>I</b> <b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+       PKI  configuration  is required in order to use SSL for the connections
+       to the Northbound and Southbound databases.
+
+              <b>-</b><b>p</b> <u>p</u><u>r</u><u>i</u><u>v</u><u>k</u><u>e</u><u>y</u><u>.</u><u>p</u><u>e</u><u>m</u>
+              <b>-</b><b>-</b><b>p</b><b>r</b><b>i</b><b>v</b><b>a</b><b>t</b><b>e</b><b>-</b><b>k</b><b>e</b><b>y</b><b>=</b><u>p</u><u>r</u><u>i</u><u>v</u><u>k</u><u>e</u><u>y</u><u>.</u><u>p</u><u>e</u><u>m</u>
+                   Specifies a PEM file containing the  private  key  used  as
+                   identity for outgoing SSL connections.
+
+              <b>-</b><b>c</b> <u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+              <b>-</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>i</b><b>f</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b><b>=</b><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+                   Specifies  a  PEM file containing a certificate that certi‐
+                   fies the private key specified on <b>-</b><b>p</b> or <b>-</b><b>-</b><b>p</b><b>r</b><b>i</b><b>v</b><b>a</b><b>t</b><b>e</b><b>-</b><b>k</b><b>e</b><b>y</b> to be
+                   trustworthy. The certificate must be signed by the certifi‐
+                   cate authority (CA) that the peer in SSL  connections  will
+                   use to verify it.
+
+              <b>-</b><b>C</b> <u>c</u><u>a</u><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+              <b>-</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>=</b><u>c</u><u>a</u><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+                   Specifies a PEM file containing the CA certificate for ver‐
+                   ifying certificates presented to this program by SSL peers.
+                   (This  may  be  the  same certificate that SSL peers use to
+                   verify the certificate specified on <b>-</b><b>c</b> or <b>-</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>i</b><b>f</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b>, or
+                   it may be a different one, depending on the PKI  design  in
+                   use.)
+
+              <b>-</b><b>C</b> <b>n</b><b>o</b><b>n</b><b>e</b>
+              <b>-</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>=</b><b>n</b><b>o</b><b>n</b><b>e</b>
+                   Disables  verification  of  certificates  presented  by SSL
+                   peers. This introduces a security risk,  because  it  means
+                   that  certificates  cannot be verified to be those of known
+                   trusted hosts.
+
+   <b>O</b><b>t</b><b>h</b><b>e</b><b>r</b> <b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+       <b>-</b><b>-</b><b>u</b><b>n</b><b>i</b><b>x</b><b>c</b><b>t</b><b>l</b><b>=</b><u>s</u><u>o</u><u>c</u><u>k</u><u>e</u><u>t</u>
+              Sets the name of the control socket on which <u>p</u><u>r</u><u>o</u><u>g</u><u>r</u><u>a</u><u>m</u> listens for
+              runtime management commands (see  <u>R</u><u>U</u><u>N</u><u>T</u><u>I</u><u>M</u><u>E</u>  <u>M</u><u>A</u><u>N</u><u>A</u><u>G</u><u>E</u><u>M</u><u>E</u><u>N</u><u>T</u>  <u>C</u><u>O</u><u>M</u><u>M</u><u>A</u><u>N</u><u>D</u><u>S</u><u>,</u>
+              below).  If  <u>s</u><u>o</u><u>c</u><u>k</u><u>e</u><u>t</u>  does not begin with <b>/</b>, it is interpreted as
+              relative to . If <b>-</b><b>-</b><b>u</b><b>n</b><b>i</b><b>x</b><b>c</b><b>t</b><b>l</b> is  not  used  at  all,  the  default
+              socket is <b>/</b><u>p</u><u>r</u><u>o</u><u>g</u><u>r</u><u>a</u><u>m</u><b>.</b><u>p</u><u>i</u><u>d</u><b>.</b><b>c</b><b>t</b><b>l</b>, where <u>p</u><u>i</u><u>d</u> is <u>p</u><u>r</u><u>o</u><u>g</u><u>r</u><u>a</u><u>m</u>’s process ID.
+
+              On Windows a local named pipe is used to listen for runtime man‐
+              agement  commands.  A  file  is  created in the absolute path as
+              pointed by <u>s</u><u>o</u><u>c</u><u>k</u><u>e</u><u>t</u> or if <b>-</b><b>-</b><b>u</b><b>n</b><b>i</b><b>x</b><b>c</b><b>t</b><b>l</b> is not used at all, a file  is
+              created  as  <u>p</u><u>r</u><u>o</u><u>g</u><u>r</u><u>a</u><u>m</u> in the configured <u>O</u><u>V</u><u>S</u><b>_</b><u>R</u><u>U</u><u>N</u><u>D</u><u>I</u><u>R</u> directory. The
+              file exists just to mimic the behavior of a Unix domain socket.
+
+              Specifying <b>n</b><b>o</b><b>n</b><b>e</b> for <u>s</u><u>o</u><u>c</u><u>k</u><u>e</u><u>t</u> disables the control socket feature.
+
+
+
+       <b>-</b><b>h</b>
+       <b>-</b><b>-</b><b>h</b><b>e</b><b>l</b><b>p</b>
+            Prints a brief help message to the console.
+
+       <b>-</b><b>V</b>
+       <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>s</b><b>i</b><b>o</b><b>n</b>
+            Prints version information to the console.
+
+<b>R</b><b>U</b><b>N</b><b>T</b><b>I</b><b>M</b><b>E</b> <b>M</b><b>A</b><b>N</b><b>A</b><b>G</b><b>E</b><b>M</b><b>E</b><b>N</b><b>T</b> <b>C</b><b>O</b><b>M</b><b>M</b><b>A</b><b>N</b><b>D</b><b>S</b>
+       <b>o</b><b>v</b><b>s</b><b>-</b><b>a</b><b>p</b><b>p</b><b>c</b><b>t</b><b>l</b> can send commands to a running <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b> process. The currently
+       supported commands are described below.
+
+              <b>e</b><b>x</b><b>i</b><b>t</b>   Causes <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b> to gracefully terminate.
+
+              <b>p</b><b>a</b><b>u</b><b>s</b><b>e</b>  Pauses the ovn-ic operation from processing any  database
+                     changes.  This will also instruct ovn-ic to drop any lock
+                     on SB DB.
+
+              <b>r</b><b>e</b><b>s</b><b>u</b><b>m</b><b>e</b> Resumes the ovn-ic operation  to  process  database  con‐
+                     tents.  This  will also instruct ovn-northd to aspire for
+                     the lock on SB DB.
+
+              <b>i</b><b>s</b><b>-</b><b>p</b><b>a</b><b>u</b><b>s</b><b>e</b><b>d</b>
+                     Returns "true" if ovn-ic  is  currently  paused,  "false"
+                     otherwise.
+
+              <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> Prints  this  server’s status. Status will be "active" if
+                     ovn-ic has acquired OVSDB lock on SB DB, "standby" if  it
+                     has not or "paused" if this instance is paused.
+
+<b>A</b><b>C</b><b>T</b><b>I</b><b>V</b><b>E</b><b>-</b><b>S</b><b>T</b><b>A</b><b>N</b><b>D</b><b>B</b><b>Y</b> <b>F</b><b>O</b><b>R</b> <b>H</b><b>I</b><b>G</b><b>H</b> <b>A</b><b>V</b><b>A</b><b>I</b><b>L</b><b>A</b><b>B</b><b>I</b><b>L</b><b>I</b><b>T</b><b>Y</b>
+       You  may run <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b> more than once in an OVN deployment. When connected
+       to a standalone or clustered DB setup, OVN  will  automatically  ensure
+       that  only  one  of  them is active at a time. If multiple instances of
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b> are running and the active <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b> fails, one of the hot  standby
+       instances of <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b> will automatically take over.
+
+OVN 23.06.3                         ovn-ic                           <u>o</u><u>v</u><u>n</u><u>-</u><u>i</u><u>c</u>(8)
+</pre></body></html>
diff --git a/support/dist-docs-branch-23.06/ovn-ic.8.pdf b/support/dist-docs-branch-23.06/ovn-ic.8.pdf
new file mode 100644
index 0000000000000000000000000000000000000000..a134eb5737aa5a6788a1fdefa13d599fca8c5741
GIT binary patch
literal 38755
zcmce;1yo(hwy2E<cL@a9SOP&dZo%DMg6qcJCAho0y9KudcL?qpf@_cf0fN5`-RaZk
zoqO--|BdnAv00Q?%~kcSSv8jwrM$2x9V0ypBIUqgbRHrlrG&M!jiJ7ynT<6Uz*gVU
z6lmfApp&Nq&>1NSh>9qJT_GDQaDthEnWdSdn>5H7WXS`r06=H=XFgduc>xtA5pYgH
z0c9a^0G)%dh^mB;2#>9iv5UQ#BM2Ph;Amvy<jBJZ_R2Xq+B!LknpuLLg8!%`L{<O;
zz{bEFk((PR4YD?IGzGAMV-$hlS{y<40HCO)z9UE&WN2dq;^jqjaI^>MTOqn;Y^yKZ
zFArjP&Z~`Rb|!FiBOjLz`Gee=5^5<$w%(?TYto}bNc2+V!150dvHw#08NHuH0})s2
z63<<z4EoY3Ehl%iKaF=MsWlW5&UfI_$Yb~AU~3-hbr$9Y&2rrN^%rcl(YpA$Wq93@
z<Tv(M<QQ*aPvWmHdrSG`b{=6!tLbyIl6!eSrtH3vWu;^O;N+aXw*na{lstSz8)3Qz
zYxLl_!Od~n6QH$ejyo`8;;Xe8*5snLC8TjQh0?w{AIgm0I~%oH5j7)_*{M!8u7^A~
zMbWvf#0Oux8()eShN5OOA_1Tl=ce52c~@Zq2;4jWB<0CYrqqAM8kzWTB`9|$SV<Bd
z_EknOx!HP)6Ey7$IjAzpBa`B;%APH*?j#aFtD<70t*!?1aG2&^N1gTsc;0ci3W1hZ
z8`CcsxVTzXX=9vRm#g20tA&QgQ(~DXbHl_&t;HCsUG!~rIC)8d_*ajU;Zcd0@+YDr
zxsocL>+lb(pZMb@(6x=LY)`E(FE7uGz1%!6NWOLF=khtegr-_r&d|~HKIe_0K4+EH
zwG%sm>F3nbdUsc!;hKv^FO$JG8nE0;%3UOpVoHaEo?t!Xjl=n6+5o9Gdk)kXgw?pL
ztzvAZR=-txIA_#QiU)y{i<mXk7Sp^`qNGnjViXJ)N{<3%=kHNm?4ISkPi7@>u)Q3u
zwrld^<S@gL_1pe;^LcEF3VTIqh}#_Z!w+BP%o^VI@|F%3jiJ}>npE4UvkPr1)7UA^
zthGg)Uz3~=)l?nNi9lPTe=?nFb^SVnWvh0`Jnr_*k5t1Q{%iL*0q#5$MjdfLko+eX
z9Ub!!id_d4I-Rq=>_p*6m5_H<OjaSJip5`xeH-+;$<4a1o6*aZ@LCVQj?#}sQo<5U
z)%vx>%hF=u!sF{{U=hP3vZhoX6lnqvh*GWvLvyz5Lp^Y2{4r)y@f3Q5=3Q{B+CPut
z{5sq0yZ*t%3y~SDMP6I-npdY2Epr^Cq^6Wh^)dx|lF4&F1}+9pUhO9WM((y7i|Co-
z1(ciyrPYvQ4Yl}UT;ras#9~7=q;v{}!d^jorfY)*<cb+hL_D69kmJ7fw1RzPwd>pE
zjru13R{u6nesLBmnTQTj@%Fp@5i$g#M@HRF8KR}R#W$1!=`d6B1=6BoR8X<Jk+ci$
z@6FNlsYA>T@d-HL-q7Pwd*VCguSQc@D^Vdbg`~~4tVU4jg>AhGNh9J{7RSPU$c8M#
z@i|+AoaoY57MW>~=YXI^`*vk|2x~tbPF5m7j{=ymI<iMrlBQRDdz<jaGJ=}jXtg`R
zN2eE^KRN&Il0XCj?}Qvt;b$;308`x<O)Tc6dJ024%&8R=8<P{!>ndR#Nq#AT7qRFs
z9%wj1-R!a7lyI4>Az7owGCIO=OndD!29gDfeg*WY7rnM5%W;Pg>u6T7eMJVj;PWbj
z&~Isg>9*ur%HRh5YsxEm&n3uu5o7?5sHO+J73sDerZ==zrPhp)CW&Rc@`Fcb&^#wZ
z<NU(+CjTP{Gf1L9Zg&)mT#9YT8NI~lVKQU2zN%VmRp|%2p9o2QVFy$TGa$;P6g>Ik
zn@5NGhANQMj$eyE=>%Cg^CXgb1`!<k591NTqG?={?hsk^P><qp_X*W&WCL0jO4l4!
zZ+da7c;$%qVFQ?;O@YRiMsg%tL(ne%E%t|$h1scDs48lJtt)p9b=cwl<eFo&=r3W5
zoWm*Z%UAI8>~5@9%eju7<^>f9Ow297y!J&Cr+UU(x@M=$Y_g2AywNm!$c4A%<Q0<%
zZ}?S6z1sxLyG}Oy7eQ_PobD-yu}Jl42;W`IF}?9>T|PICW{*C0@<oFloS6Gz7i_DF
z>nZPZN(s-CO4m^lcKl_r$}omfMw2E!N_}dTaan*Zgn@~9VRB0AhYh)@u*zoovZA<W
zvu3?1jgQR}$ltf}N_M8)_p##W)vHnYm`i6%G3O9lQ~l4x$21X0q}&H)LS-V{(p+sp
zUzAoB2yIVh!V%;QswLL2?;B@|I}vMkxcG1>1E;Yke930)4@FqBSG9CvG#FUSoD*}d
z2a3kR8bx++UHX0H&^6IZH0s$M{PgttM_v%&Pd;?QySezq4nXaEboMLqH7;)^KQfF>
z)J1|vKNL&mAEc;4y0-Rh`&b9n-bL@I^{CH@ZrYh4(Gt1)jwOr^Tdsu|?MnA!IN~^L
zB$FWv*@nqb5Bl0yLrJszECPfCp-TFX(J;u$Fus8+-$u*R2DN!`F1y)-CQeuM?c}dc
zk;Zv?<i$j-N0pSE`vizc2i)}e76h}URx^ixb(3-Z{D7~zg%H7ZDc)P7zEhPB#W7Wn
z<{DDw%}7e)AHoO+HN!1GC&8|ley1MEQSEZA*cj7k$8)%<hl^cGpvZX$r6Ue9HuibH
zGtj0QH4HgP1*0sO9I=2cCBUpLvqWzNI31VI-agl<?4Mar)qG^n^gDWwo`QU6&zaem
zie?YU!+oGHZ-nkahPOEIrTm0<g&E32GP=Hhpil%^8t|z@S$IRYs=nlQSz}J$6RDGu
zuC;?4=J?7mN3(~V)0g5q_9|v)hBZM_jP$+^H2i1CrBVUmEs<p7?+VR`bS3I!=jTV2
z=G&=jH!AVgjC{pLvBue|kyNHAGzK*vAN+;t<a{t8In-f6-|ge`Nnk|fMODP<5d~PQ
z8(uW1u9?+-Ft5PM@pOV_mazm4Z|F~MUhTZsa$2K%zms5;uAzsSpAXGC^%_rIJ_$Ek
zd!;@GV;f*!@phqc1c?lb0u4gA$a$yM1#hmeASRg(d*CHnx_bjAetuGNFQjjd(C5`&
zg&3;s1DR8X*q~UY0o8=L#Y(f7!}D5S=7Sw|DNFMo575|+uNc0+l=TYGjuBN-=`gZD
zXK*x!*v=ZD%QvSGSQq+6n=8Xej*TY20h_ciqowkTuDmHaJx^&#aDF<GV@l?oz9j~7
z=_d&JD8G$ldzPcGBu?$E5Z(#4E1Mj`-ROl8dL9J~aXW6IyG5^{*%^}JSUSu0Y8Vuf
zs+oh6VCM?gc5sf5=FE!Y+o|I8;%$lZvj{`Es0_o8>C)hY`8XzGFU$z<!bWlhot&>X
z)6X@T>C>VKP)b^a<{k5j$#tQaf5hykp^3D0+%p)!#YQY%!J`jlY)bDHFN&j-;P{^;
z_z8M_a$|Q!olz+&y54yhzB&=R^`zpFfqfXgXHPbS4e;#H?L1tGb|HtXGH1BJq)I;I
zzyjUfUGBV5v4NYcwr5)XAnP&uY9`6oEb|h3%dR&?<;O0G@gv7;!tYGb_$oikdiR22
zD^P!Mz|i8FzKq~{>G<K$&Kk3qspE5J#S*q$n>9-3(BV~O*K4JX)pz5p*h`QxF?F;a
zPHY1(mfsKgoyjwa-S)Z#0zg*o;hhmVn5$kEwCz9XN39a8_7L{rJ0=Pe?=GQOCe0-Y
zGzC0QLtBa2Wg6s%CC_z&aQ2%Pi_%By2%STqJoXgs9J{R44Vk~|q#jXDz%MRn{_Myr
z3vNM0pjoMBRX;A1zPxocrTaGVQ2nYF*-@20337fl>ezi(@SC*s>4w&6yMvWxcQ?N`
z>`w?~`9K7K&_i*%h962mnnH+ND>7bddiEWT*8>V=3Ih$u+UU<UE7<q6&V5?lKDkWn
z%nXQs#xefqBAD?Xt%55whQX^~oR#l1)krCM?h}z$%A<nh9%UH|bG?dgxN`|eWCDoz
z=z0+H5p#7aydsY&4!41D6zUSMx8E+4`7U3%9e-}RKm+Q1McRvgaA|ml(0cTRPxjN@
z%=F_&=Wo$!Z;F4;%pPpD$WeRRHE=2b?SMEs1R~#Nk9%!SaMiqn(YcfB7)I*g<+Li~
z?sn=mCe>CwhenqfhvWE5PTb;ZIU?H1H$%OTOy-eJ{IYh``^kvQO`xuicB8)q=W$}Q
zdOj+@=^_>1V}CGlN<ck;9J|0Oj)i~!(ydsZEZgma<<h|HQS(7j+>Z-tJVnDKxTzxG
zL-f_R=C8D_oqhn6`we+CsS{UCws765hmEYbponv-X?Jek%HiDiE3$GSFvC6Xze@%S
zAH<Yh-FSX3BObb#dSxwTqn*&wc&geYQb*@eMc{7ZwAWmV-?~X=;s%#}YjveLYss^q
zP#M(Naut-MlN6R|pT)4Chk_U<9F%LZ+~rodfDC$Zou$}xnCb$FzfyBBT&Tv%_1=%H
zOR1Mku0GJE0*lPBQF)M2Z@S@K)elt>wK>r0{1rp#(XjDM=V*{p)^@}$8}fr4w?EP+
z_VJYnt{DrP)kIN2>FCgz1A8?t#ITW_2|N-V3Zn3fO7k+WJw&QJWgeE6%L(NEu;AvO
zH@99?F28DCwk|j7Tpe`eLrMsrhI}X@Bw4QpjOz(Osffo)As+1z3z~%DlR8ZcFC@6}
z(isYzMQ+oEC<AVLi2JWRB@jt{t%sKVbVi_(cDv!*$~CBEt5d#dDts>Znlx<B$MrsJ
z=O#Q=Qz6~9-L<cdLO`HvPmmqMh-(^8mRD{A7@!yH%6gX(XjV|`rUCiW6+T<^rzB=I
z70aitN-c%S6r`<YZ9B9px8U}#gyuH>M(-P(P+}=Q%sMk++!W5Mjg}P{biFHg7IT)U
za!@uRcG$PX&K>fnH5N$OF@zPZ2}&?jLn(}F;XS;hIuTVluJ3n<HIlPvHJv+~R3{S3
zha<uM)@U^!B_xicxYkyQPYA=jxFPrEEzfGU*8O$3w}_7El@M&WH4^4F<T(uOn!<(+
z;Jf<ZrfWCZd3ea1?oOk`xhXxObm#_nGTZ{${lT=oVfXV-=IOyjU-u*2i0kud(|y<=
zL1{af^(wJ@mfWgNM<|Gl5;vuBvTmW-drCOI`~ldI+<ae$2qE}C`X&$5R?2x>Xzb?!
zhVJu4>XqiV_qe#^Xj+jT6NmuCS{@KFuX+KLC|2*_^W{suOMEPa8fa3lWM41KaH31c
zHwraO-B9^E+H43?F=xM~03o|+2kNw4RvDDnDqHAji~pjpX&`OAym3}@r(=aVv24hb
z8(TKsTS}|<t7ny%9aCxteH(D5!Vy(P@qF>&XnS8$mUMg2+{lfL?ov&3&sul*C0;@p
zf!XA{)^#u4iZFuvd`tOk8bVr(ZFUX?;k^QCcAXK(5{kORv|8SyD_F_PCE#L`n+?l?
zxU0BQj!G{|UcpU6okNuh114qdcZ4zf>Dv2ae;TOwX(>O}`!Mu>Fv;6hPF@(4*2)aQ
z$0Hkcb_Mfqy}dImi%(vUZ)Cqz-0nGA5ripYYw+c&a(YngRjB;c+F?~HrTEJR-af5e
z@IevkQiqh8zZ*&)BB$yyBOjzoi>Kw^sj81~6B6M0)662bqt#6kHl{BDVlT6AsRR<|
zxNK@;Na6cr4ptRSn5%+^lU+208T$|HiE4tK``JJw;`Q<mP<UGzB-ny4jq&^UpmF^Q
zu8OLmcc?9GPCK&OP;T&H=1Q!ZLd5Smu9karED|&WOVVs-#K{eDZq7IKUR|_XG-=o5
zhwY(8{)Ff>BsXJ5-UvM^G8@@mPFHk>Ra`MB-Z9S4bL$o)zRw;NPKZb)#j4pk?AP(-
zMjN1gX^Cr;g5Wp8(6<b2TV`?PabVPftLO6rQ=yOvopVp-IKfxmN)cn$Q%&MBu5M-w
z&P7H0tx3(uhepZ`ceiC{=!O$*K34iK>M>&1Sn~@QQ2J7lRM_K61E;4Kk4tt@9hhq9
z>lzAIbPr{eTf(-QxbFd2HGUi9D6p8PC_FKt5Js!c9MA|eB+jm)pOqj~$cAsbHmUT3
z%)58G^?rVp(i*EeVYN}di;h;kIqarXGLRe=sDhkEjG5pM%6k=4!G1+<5qqHYY5}d8
zBFwsr+1mrKHp#*@h7+{3v6G{O3AhjM_t0ex_NG6guFZzlmRCcOO&<V?>ee}DX5Zgk
ztc>sKuIgqyI;Fwkt7tt`unbPqvd6yWBw5w*ygywTVAln%dTI0$6!Uhx^Y-8j=SEXl
znDb^Yw1&hFd+RtsHh)21np^s^37vri)^1R@5(YC5AePko>IkqBB|wI_VV@ukk!e76
z*=HMG>G*!#--|0%vj_H~Zib2ve>Ae`W}t;wk+H4h8?`-SU>Frh-=NFH&C!E$Fq|^P
zse&iImZGLoAQralWj~;&sFHSNuEvj*T_utv^doy;r7|ZsBWxybSf+9gdRE)@kK;{R
zJWOLpjWHu5`PYp#^=3c5fZ+DjOTE@MEbCbf;ILLxkog@5$}jE?&&<nS#6(AXdAz2^
zBEwkZrsm6}ldpaNT8|S47Gczx9-xX6GAH4q%zol$4m~|+(-A8%r@8bnFvQYYCpD4a
zg2e5?Glq6;K*z9C_GW&G>o?DwwC&8&HyKF-#T^lCb?0i^mKNn1Sq&Q^DAJP<4%<nS
zxh8I`w}nSdGRy2-Q>HG(P~?=rgUYPgp)6lmOu_TTR5<93DWMI*LCV#%9~KaU+W3W(
zVQVF=d%}jIlkI0zTgroNUwM!LK!6qE?5a$DYsH>t0$yT}wIP}R)+i@zMgPFFC2{&H
zkXv50rCO`cyEUD)ue0b!vQ0gA_DE`5s-MiV&mGr1f<#=ZQio6NioOq|W(VZ(y*^y}
zAcoi!iP|PML&oO^kX_m9m|@Jek~!3}VzbN%Q)6~=U{#_y#4#{DB*l&RwsQd&`;&ZZ
zB$i3&=Bgas7lxluO2$b6Klkfxi(k`uh+#?76tQ0y9+p!sGB;6*c8t~Shee=bj-&fT
zl4qHa!OMh)D$N?id}D?PQ9nG)(#gYp+3Iq1BcE)qsGj`N{1xZv<e5>B%?B;|N}I+y
z_%~yUgY(;2!Im&HcFCL<t_eQ!_74WfdaXnD!@ZbYM_G+O4kQ^D@(Eg%Q29P~ISzRW
zV8w57*}whH^I2l)2=Tr{V~&sN6-rM^%C@-L)R-`?w_n!4K-i3>d0`QQx0FRzdTmjm
zzxSO^1^!Refkz?-TlhnjpJObkbu}u}B?KbQ-u+4<wc*Vg>F?!xw5B*}D{pur^@AFC
z%s5GFC(gtu7G1XD7ByZ|Vp@{D$@GzLGS22Men}PWnDIt8=cOrUd2UvfcS?%YV{*s@
zYJ9cii!Hg7ekFd-Ts8m=N%{BfhwXV9v5pz_h_Z*0WH)C;r3aP$REL<suOi#4CdUnv
z-%mWKIESUM7fg>cQhW8{lX9mBa&0WEL<o$Ps1R0+Pk@;+7W|44G1us+)d14_*(Nk#
z*nn1yvEgm6CDl|6NMNh!qF{4i{nHX|?!gFlJ02vmA^0xcG+_U{1EYvrw$848Dn1}m
zO^P`@G+pD@=3(JAe5LY-$Z1uVugP{rm7yQ(e@?|O>jHYA?|&R_^+Ees{UqR>bB`tB
zWB1U$9n;ij^E$U?1}eYg3i=gzPy5Mz=h!5>Be-l?M_0(#gynmlriF`7RlxK{-a9P*
zo3iptp=FF!Gb=-)6$w-&VZ{}V2x2I&^mng+YEz$~u5DqHXZr<yLBp`Xe1~b^&3suM
zAi}*?^a&lmh#rxVDZlOW9mAG^BszwJ@^uqD*{|FeBZQ{cKMLMLwk2e*mY8=_S-+7w
zV6x|$yJcK4^UJ7&o~t#%v?@rLRl|kl8lJNZ94_`?l3$}pi=i*<Cl}9eGhayRiSR1)
zO;vLQPHkOjkd=5y)Hqk6uv{n3!&R7d&Li<GoCEZ~c>8%D88cg4rO>y-dd-B>!7hy^
zbElA4PP=cfShtfv%@Vrxv+MR3@DC%mA)4+W0eq#IxDQwbRPrnJ_Le@g`V+oRr5;n%
zh%S@SBb@3*VvxOJlQ7oP!YbeGi$<2}a*aSp^FRMc_)-inLI`OSQi9aIB<ThS!TBBr
zk;xkeDfJ4{P*z}m&D?6wsyIdRC3b<5q*M`wTp;T`Ax&OqeYO(m_T*?+Cc8Pg%XQ<(
zwx9+I<`%xmv=l)J!G7zqxfDB*F^$Ncn2%&&i-RTU+hVM3@pNrZ2b-!|=&rLpCnlMm
zLe7I+;w^WQ_<;|&BZiLQ7_8aYYQox+&Vzta)-)kKxwD@Pk?VA+ipnvAOG|yN!&Cik
zqGyWhm-&36XIpeuzM|(7gBNJm@hLwYQiCq9-IGdHeRkqMtvTxG?Xfi_%{G=2tBT~~
znx5akdy!h>a$O~pf53s-BY5?&5wE~KVF_6=vD8NQI&$^1)A$9QP*YN}bF*~Tsc>4Y
z>6SB4cXRh<Be$qVv~p$_5E(X(5@m)PBABX+F8w~I<KvMV{>x=o0ft)WFPX}0!)>Cc
z%fd`ztUIws>tjG*h@H;4MKgvHUJ7#qx%3h$X&!1xqRUGRoW{OF$!HAxdxE%>NMm~s
z8?%Ro)#Spg2}dOErAiaBwa1yML`vq<$bP>)(PqgJI(+@6l_N&t@01ybXI3)v6E4n^
z0R)M7Mez51g4T0C)^~@u<6qrU7?(=i<bBTGruu4lek4LncEUDsYBR&?0N5+CnR_@T
zZSc1E@X@P{T%-vKMM9=s_k**U_8wDH^u{$TiF)U3Ay)~@ftdFE8DVJ!Nv>xD0mbp&
zd>=RU{?Y80)gQa7yYIP{{=;&8Hc6jMS7tVLj=xM-&i{CR!^H4U9^i~>EZc82K0Ux$
zqf?gjgU4K>q~_ze<WjBuw(_yxS*vzfB=%*fIx6RmNU}-Can&JT(JS`2ml8>t$qB>X
zE|6cDI%e~F5@hI#i{m4llAN1-euwzwViG7O?I}4zvK@72<=_}5XEl^xcSY@0vq)@4
zE;<!bkP$z6Otohn&Hm^svi3Qn-!99})j){|_Q*_oL(SyG!Gg{-DIoSCi;^0r29Vy8
zzcv84JxyutD^^cZ7z^-vt-R`W74$)=UTJdeDwtOU88<AVkHlH*HitxSgxhW?Kc+t;
zqd(MrCtf2%#OVCS^n7=C4eLW^H~*#D3Lx5h>CUi*D<xwies&UMOFG~i!5()QcI(c5
zBtEUJJAcFq=^%S9ZQCZw!y6+C4A{kXMSP9<_Hf^Nd&5zIExVGF^enlQ4I?Z8)N6Kt
z93DujNigJ0VYo}gEoqh(D9yK-d0uyLu=LIXDmH+1G;Su^fN(nj30_Q)8Ee3$e_AV>
zF;_osxBuZh@;p(5C3>YhUF~G`P6TKjPr^KuGOSM-Tw@(xbF4A`Vr&xnKA{7qlLGmO
z_|||BbdsK3%TRcoG2z7jZ82hh8eU-W@aN;WnZ3(PxXPkS7Kr+QazO_MSXWF#$wuvt
zZ=}JasZw*k@y>Wz-Rhrw<@GRjLMRF{T5RyFMOg%FhWaEG8U^QXIkO^+YhY`?4t;}g
z+X=y+z?X5od?~izkDMKL-%gl*LA?<m8b!{aDAnyZ5#z@XGt~ag5JtR7<#d{*%V6l}
zKtxGxsDZ<f{)c(#dM;7;Z4bkFNRfjKcbYhmAzGhJLKSqCh!D*%BY2K)o$bx|f=!3^
z1Aaya@9Ldxh8VU_AB1i5FQSd^RO3bwb@on!cAC(ov(U5ap`_?bNdURVv0Ey5Y5uO&
z9u(8dA^>RN8qBSzI9R(^(}gFts}&iJP#_NfDo84q>b~&NN-4UqF1|-zOX@&?c!*Cr
z>k0uLfH`7ZK&xR-DKX#OvHZq|4x-D<lJSSY(m*f43IW%8bG3b%x{GXU1Om6NX+^QX
zrOwGnjLAayM;DP5!uLR*+g2x)!OU?wySt2gvkb%S&%JPcEZ<yFx0rp2tx4WcJJkPR
z;FoM`#!?>XUU$1SJ`tnWsGl2%^i7X6j&<>Gx+oLkw&9W4e!#F8pdQyumQnNiF+xtz
zHuK@#G1}O@!RBRW%A;s|h8d&Eh3np>!+Y&i_F59O>Nvg^bN)FZ-!Auu(NK3pux?B}
zK2zUr7PZfJ^ssp4mcEsqhpVUaK5f(=Trk%>9gvCl#}1vCtUT(qhD4`PKZKW{i!rZ&
zQq5AuXylnZ-xP<yV1{hSNmDW{upU!4ZV`WZKyR;vRxnKf^)Tm5j(=JEk#A^-55@Un
zury0-kukRh`XeTOG9)b`g-)y>d!wXvE@aQK8ywDbgyc{sUNe@MI(N9XC~S0M^uZbo
zyj{Y(JhxbEE2lLQ@d<8s)Co?M%*&qb>!pE~^yXNj7^^^XMg3*!kayd+?|%+V@B?(s
zZ0W>mPu{VMtjyui+G^q*GtdZNi%oRL7otuM{0guTOx?wxLU=#@%4RC&HSVjoV$tFi
z0hI}JZ?rB9$$4ZV4(4jE3Y&&Bn!OuU(fl+ZNIo_j&t)e-K?u{B?bb(%E2HW*^r?`)
zVD}M}MuMVIv~R!IMvREQ`@#boksYN(>VR7L(hcHNoO`eoRu7Pqsx%EXgU#inn?P<B
zo>|YJ{8rMf;dAT`x89)I&^41Sm8@Z;fnm|SV*0$M9NtFF#;-4iU8%eB1~SLy=-;Zx
z*5VOM1T+s!rYEwg3$j<ZUgG?kyinie{bV)Ht?PqwBqNps^22e(UvtcwY<O^$o*h;4
z6rB$28#`BR0w8g_=a|mza}%z?>JW_l@@lr{J&#K9Q)Djx=Ge360INL8y~)k@#o0@j
z7l(S(*yoLGYf~cVO%EY-_uVpZ)eRyV^WbJ-{cPfrnfP<ognNHXv-;Lz{(A6aGwH`D
zSNx2b0Y-nz05a3?&on*^NLcKsY5@Iete4%IjFmK@g}|6Q3SRj01Bx2DW{O$M_Vgf(
z;&8#}LZ~#+div^|Oy}CF*q`I8v3X_g@VlYrvanrN)g!1iwL1dP@tK4+%|n~@$W(fw
znO?oajJr1&<@oe5#*JviiUtHl>JKAa3~JjFV_Nf(ET<5xD~?6+n_@BW@G;+iYJ3Pb
zzLYj-;a|(O__SYC)UAhl!#27h=VFq`l+#!==^@~4Y`HE~^x?A*7u>@#O2HoMeqT)v
zw<8{F7sC-oajjxvp8wqq)vt?Ra^-9W9x6(@i3EwI;ylXqZ(j0myAl@ry;jF{oQ6td
zDBE(#kFv#St%*s?A3YoPpthy16=Tkyj`nR+b^6i?IX;S@q*<0E*{(bZse?n7*~HRi
z_G0gl!%)uOT(eGxpn5Wby|08&Fs1BcrXb}MOGa>K^wnEa(rrt(?0gC6mtL#G(N`%g
z7w~j?iBvT#Kep~I9@mV95(8)@ry+CeWJIR9IgC>LvL*$ZXT21Vm0vwvdId8(5HpG~
zn<OfyQK99p;oim+o5~sj_)cCQF#Wn5z3z~h?P~oN2U*OwthFuPz@&w9Rn_iQ)0w_>
z^Nsxc0@?V6UV2~R7}B8>#KHin%qiumCt4RY7O!=S)=4|qMOyu?kjz&ortBER$%bZ5
z+4OD`0<i}B*m=BW&Ku=iZ()3SfFDymZj4<3QD}u>CZ|IA+9JtMu)S=cePWGcRuC>>
zk<c~g{yh>iED^0Y#F;kFH(FBJFY|~Lv~WiTNW0dNO8vN<Y@d9A*W?qN>RPa$w?OFq
z>S>n*c{sk&^L^#?O+<D+cW<<nzI<!_!r%JEOCE%96aE$3Q)CEL_;V_44qlDXWCQ2)
zimC2T=#K`A5IcxpaV0sVv`=}ymI8!_-$iV6&GEuFtTSA{HD`cmW|yqa$7hE?TO&i%
zJ)4l(lFiTDwWU%i-RqFbu_IZ6j)-%(tlm;)W^L$@&It<#y5>X|aG&P2N^beRA+>SP
z^aw*tc?;`AM&z2`Iq5mUT?tnkQ|xNYks4RF(CMVhHyaF1U%-fEfso_QTdFA!5D{@w
zbH{(7?2!${;Ebw&@xY%~v`BlUQvjQ5am#qVJqItu;fPJOhT|Q8y>smbZ(<+;U^7L!
zBwwZ3#7;=)Azs>Fa@sB{49<PH_d{2GUz;h|M2#B1WFR}t!VT?TkcZz~yq*9}0w2o<
z^#=Z>s_JL!mT*m}oBNMe{CD9C2yr6`6n=xK>+M-OSG0u%b*xt$FSyUHovBM}DeOx%
z_*wC21xpSPvY<gfdK;r|YuLk7I$+W-Iuzba3=A76QcOvzQy+N;Ho>JK3$}XOrOE|R
z6A`Lw5(W*|rZ1fe%j6XW7a>TOw0M%swT`uEbsTDFiW!G5GFR#nc(!J_qZ7RMVV%Kp
zd{7;RWagsTB5jnLK$&=V1V7dCE!y4a<jtLpS>fwXG`Dnn=a(AOWaa{<P=2pC5mM~f
z+4fjqtdS%chkaB&D(aP;QtwK(4hwj@2fTHiJ(3?!Qi`@=Uvn+#yb+Y5@B7^6h1P9M
zTp@cjWudZO8%CZ-=$l;`HJe$s)&;}!c^WHF^RVW@O4>Ua(X6<Lk=AYyBRm=W-Vq^t
zsDGt~UGG6qey=K=qBT8KtI*^%OMWUM)X$IH3hcmsp|v#b$=rpMa`vxuQlqo4hUN`O
zl{9LPT2?;1!qa%%rH5*_yE@o8a&eI8syE_o`*pn$96oRJ_;Ai%#irYFKa~zIL|A^9
zuXwRUSP)XK^mEa6!)nFl2zB;5U9Uvbue>UZcyG#!xo<z~{R!o8)k3)QL#u#j#})@&
z9r@uG(QK^<JE2|Mv1(ZW|1(&QZ};aJt+R%HkFSj?$62OFe9@rCYNU}ou$DKg-d3AK
zMr!Mps*Qw=0_k;Hmftd%gUsFvN!_u__p__<QzpJG54UD|47Y|+fn?Q2#)LSEwhmu(
z^S0fN853K*x;T2#(_Pb5?jb@(f_o*np64*t_OmKTmNUeRR~M&y1l0lv%m;j5*Fq@Q
zjpMi^-Yym?<oz|z575Hn`|(THGkbMS(5iQxEOF#6XHQV+?TGHyO1aHUCV;{WMs{*K
zpW+;!{G9%d-TN)G<eC1;)sGi!-K?_KY{_UwX;PSJ0$aVs7vo>U-$seKi%>ucSH5#Z
z%Pk}=6oX4bis_=~Lo}J;$h-4Nf<Ah^U2;i8`f>?+hStmB?6rn{--p>Rm@ya4cD*sw
zgJHxRXEXN!q}^T>S)cl{6)`TRc4v3?bbpL{Ltd*FbNq)v^la!n8$?X3Our2xCg%S%
zh*<uKLDZnWsJJDH>$ywAbW_*|lbDpCL9*kk({Eh#id)_~*gq=;{VfiqOQJGeY3H5L
zBjO{+?oLsH&tf+!u}_)u&Zxr)r^}?;&biO^&wTIX7V_*BVox5#tzzlNw=RdHXQl$>
zN!yby$<&@TS|p{xP)R|wkz|cuiQJA>PS4aV{hT=Q$i~S&zORgGHC9OeIqQ=A*^O&Q
zeIxkb79in9YtY!rcgE|nxNGPvQ0`B=seoS2+J1LA&3XHtCD=e}m9K#sxmuwl`&Y-P
z0$T~JK#m%%Fs>a&O`!Nznpm5EAo&(T)Wo|474{#V4e2%ps_SSC!{ikoI}-ck@7<d9
zk<+tRMi*M)VO94sKM=pk4cIf+O}uC-Gl9K5y%)Q*(yXbq3d*xS*uf=<dQq#dgnZ-u
zk%SFr*`+}gmkO$h;dFm$D59mii+NC#yJi+|6aD(-8ZuL45t>mVXcqeW5vo9U4^_Rz
zhVUTk&@UW|bbLpJp=sK&i_qv>d|a|2R|0jdW$Q~<blWxSujjuwbd-bSU)u4V`|r}1
zMYs0Tk#rDlK5|Pleck>=GTgz18{#8IhSq<(b;c_+Yz^V)vKQ>Jgl!yTXMSkfqMtu1
zZV(y9Hw86Vs!hzH**tiypA`KDWRKFi`^h;NdVj0E-3nrN)ZekHE{B75>x)3f8ANb8
zM_!xlyv*`!5A^L}8xJfIC};3jNm<k^N=x$%zrw8YwtSP!`0@9nBqH~(^&po4fkPGT
zHZQ%4PF88uXv~bnAJUu~M-d{7FSB0(ll#KCr@j*s<HSiaV?rL&zEW3j?WCAcq^~m?
zI#Y%`Jy{fvY2|U!*KW#$@wpYKRLBY33?n8izbV6COUzB&o5&@xHPtgPR+=umY@~7C
z;)F`~IpMskDFC|k`6JU1uHv;EAQT^A<;&@igi@^um~zm_#AE33HYKCYY`3ZR{sh`H
z|4=%Pv8b$oP%H37xh@|0*)xObz#TIuK>sCWYLOn7n=yggEV_qc*9_f#jrl%w`&%{m
z_GN8Ij8G4)x*xZamkI=~rAk$_&{2icY!~p8j#IblY`eMY7T4D#XH9u)31~*ruz<aR
zj!b<{jK~zo&THl`h6F!9c9GWiBWPVuTBs>tI^Y(-YS0{csa^Gr;wlvQ)1nN<2jIC5
zE?pqSvPF{N3pp`69v#RJEgYAh@dv1#4hAY7Zf95eT0CyUyibG;ROG4FR$*yN=bBLm
zO|n!Z5WdGHCG6JHc-^A~YY~p3x1KB-*aiWR$a-0U#RdJ9U6Q^$F-*2?h=HgDnJ0TQ
zJsd-KI~D0uks+Q(sT@-Rlo%bV%)KV3<*s?`j|FTrPt9foGIVZqHh~YN9|_2hjM{As
zyi<w`W5fz}lQacQwM*d=?OtsF<ztO3zP!;4s_P(p!Ta?UrH%;3mt%IP&yyPFeV8~B
z=JocgpLdKCA}qbEZQd*{?yywReD&av8-a<lWbCxG_yvc-FF8+?mK${6l1FV_PE=ED
z>GI2ll2kW9zth3PV@AbO#Y`zroi)|LyZ7p>m~lCfyGeJA5r<-TxGwr+abVh^Ej<R$
zpQRvll(=|RjtzhM_BQ%tJo)gbPmKHV_`t}0mT;ZTI3nGAc}S6E{rc1S{jTBI*xdA*
zZ&>eU+$!Y<1NbPC_YIm2YpG<ZdG86`nqo3;-4{ltE#bBaZSFFs6swKM3UfU;X0S2S
zuoSyr?aBE<jI_2B&$38M%eWs2s5Ng+T;WO*i=^4F!?<IXx)T!!Ln;6KSl%dKDnXIg
zKMK8y>+43LGS=d+F~Q}7E7F{W>_1q9?#1SgJ1eEPra5jzx~}k+N#7yd_#S&pJf|Ss
z(uXoubxA`XW!C=!nx=6XOJYi;A?fSS^AQ@<<t}|1(4Ft>{a1WtLy*@7S5IiV1k4>N
zOJh)h55`6LL((`3BlhZixm#S4D!~g|l)Q`Rd~5^duy~JTA9VvFcu-}L3Hb-6DW-hv
zIjCX*Br)g%uNzm{hWNI55+73Hkj;IWH}BybamlV&<BnbT#nZMgtF*&EEZ5b!VBU%#
zHj<k6e+|^2QfvKex-cHsfHA(Ypwp^O&65|j*lj0A{b4z&Pqio>XL;UZ>p%w<I8`-u
z_(-vskvRmVmfI2{NME~<>$p`em87kLUQEg(9I{bl)ARy6<knyTee%kxB0NgnF57Rz
z?(+66g)%+!NcY9TXSe`UkkwinEo3P^vn{2-cumK|9s`Pxq#c4QGh0?4EmJPi=L){Z
z1&T~^c|SlyVWs@HDIGzp)1%7?vvQ2F={ux(3JKGw)?Y08l@~|{N!~id;ab~S*<-7j
z+G9(4=AWeT4l52&Q4E%O_7rsnEs%a%i;{hso`Z|Z*JIG9%ZJDWKP5Co018r0bdZ*K
zT+*;M!=Gxml}ouzr<*GQ7)uZKD@En&EzCeA^lk8lp__Yk*+mHr2ojn8A^PRc!AWuw
zZLMv9Qnk^eZf+LUU$qtqnX4bdFy5KE7a`d))!N>8+gPPhzLKeQ>%j9DY=V2A`mmAe
zo)EW85F1V9zBC7Ix!)0(^B^5(mH#e7reS6L-7C;=G*N<I@Asnea@PF7J>U)TkTCBo
z8^2E38=S}b{J2xeqoK{s%=-H87Av24=H<21<DKwuc5e_&3HVn_t<9}{9ofufCWP(9
z2zn%{<|($Lc&zWkOveSGA6l&`O$-$LB!M!>Z>`tEToGg-nJYAlu_iE5U^pp|G8IzZ
z!8UB~8`iAyO$wmD8^h8>1hE`Yv;ont_kyhQ07i&I6p>LsOb+2;B6U78@tFvpbCC4p
zX%9-bN$sX%DjLfiXs$;JiD}<l`d$Rzw;xeWzHbSOI;aag<^e#CNsC#}CTn{Nl}gNC
zIRAiK!4yq6{><vk)`BBjc3HN1fS+us)lq2t*&7mny@lY%D%oZW5%Q0Yqp(^Hl12!q
zz+aWtF|k>VeJr&pRMT0s=@e<Zru$=j%<1?-y2<^HoDz|$m!xilt}ZM}CP(cD*e-M0
zErv^W_QzjM5oA48CQW9L(xoq}?ayTnkf4PbvDrn?s%*k`8kzEuIIU<KJ&~F(g<PnD
zzeM8Z%AL0!x*;0H;~`F2c78rs;=!lJN<5IMWt8Eu6ubS<gdWJC=;Cz|)aKC>iLn?z
z2q|f|<C>cuQn$XP&pr-UYSz?g#uL-}(KIuV<Y2pa1L5vdEL?U4ZIHYJ!!8ItHEWpv
z3zi`^+nkW#^?HCbN@NwtQ~jq$fxEhHoc8jY>eiC4PLEVV_7?#Xs%1bLql_YxDm|kM
zM4T*y7KYiYqPUSEzop}Vwmi1c9@tZ9sh*tMX7ATFG9UL}7&Se(Dc<J9O_685+e&Gy
z;=<QLXeXA?cB)eG#y+?rZD)Reu<~B;yP1J@*63p5UBy=ir5ZI6PKz{XzO~O6a;%(G
zVzx_Ar%N6xBuJ*_3A-hf8EnKPi~U;~{+|T4brN*ZY`4O+2?yG*_77HGZAvji7rLgm
z)BY$(_GRz1P-RD(61o6f<zo^so=RQ|doh<RlGD+H7%SSDw<ZznlC+>#LF4<H?0i99
z*5%3Di^W&r<=b|s`_X=#LRlZqk#2|kC~wyfZ%GzPE9YGkjLVjWDQyvl<ch8FIl`tF
zgQwX|NXC*nO0FnH#|M&Mm?liQ(!TLFOAN~)n0K;bXrJOZ)LO=3j4BfOcyO`d%k&-T
zGkE~jqQ)=p!Ln{*$D^Yq+4k3_YpV7F&@1t%YKmw389}R>_vV7a+!67Uq8D6YOQK_5
z-*Sp)Y<!io)fw<%`fvm3INQHY0p?kV5@MD3T!L~-Q_VXdV}p7gdKX9)YlS3c^i4|v
zLM}+oYBJt?KQ*HoyI!18aPqDwut+rS3Cbvtjri2<b7AO}W-{U|$(a@CmQxyTKq6?1
z6~?ac7a+p0OtQcjwe&cbT+O^Z$T==uwN3jN7(zaiVu=BgbttSu4!ivD!RiBXGil0F
zHG(_<ZphjkJqBk68{&FpP%I>KCY)bnHw3p;m-wED?-9x<ht2Fi4TmR#;Ms6sU}pQv
zaA5yW!-3<U7!H~7<FcFl$o(hh*t|tk{k`YjmEweW^;8?ZAhrUQnAdqS;jSf~1DUB5
zbacuZ74|7q4~Hiv(dTfmnAoSOW9FlXuEsVIQ)($u<|y-&!}(<&7iQZ+eeJ*WQ$Y1}
zi6d;Mf$qH&+5^Z0cIDwsK=KK4wBOH)!g9+!*iC5ao7W68>IEpV6HaJ7Mh-Wjj`Pw!
zib$BxU{l}NBJp`Pom)kCgEp`cPpLOM>_mf<UgSxnO6lap#30?z_Kw1NkD+knGP*NS
zO>ku1oTd}7wNzR(oBUY8LM|uxz{*nhS<(pwk#cA0_67>yPFeNzB#m#E%Q*YTsK4fo
zP^Cac=4~&}H^pgdZ~oQU2_V*a8HwJz08}q;{^`D^vTs3al**&AhaE9GfDblHxOdij
z^IoQBTVxT!ui%of_>QHvmoK5=9tkM*c_)R%X`@`Uuin%Ztr=wUWH%51p+56iPr~i$
zMQlgKbVmtP%0LYs6Z59V@xMWJvboL$#hDI%z7~@gXNnDn2!+BV3Pg#C4+xfIqrS9@
z6cFi>`QjD03zS9P-1$!co(A>_02ZddUIP8i1o%TJWj9+8P+s2z1e5_8nduAKxB@hv
z9;&f1G6C2*nY0msiZ+hm&!PYf;9T|~Ye&G7(WwZI207R`*&Bi!z?I0`+ZZZ=95sR9
z&%yveWss{QxSXgBI5XoPxxt@P0foR}aCry7(;KLYh~Ox&tWSb5{x6F21paf|{}Si<
zjo5#a=Xa0&|KB}KjQ@o^PmekOE)NqEIO3_J{uku=Yi$12KhJj={!O0W?-l<q$n#fU
z{7s&}#_&&m{&g1w%pMqLz%$Pd0HBnakpn;z@%fg>ACxH~GCu1$#OFR$L}Yq?^%+qc
z0IuE%j4SKkvHbU52WQcD)VH)T`Ca{=*MSVkQQruh0$~25uD@~pFTsF{jEsnk&w~wA
z<V1WvE1)7f;`6Eet;FB-@;@u_4A7r!{KFD|djb3(miXIq_kUL6`Aq+mN>JYc^rQ-a
zlJf60B!y^{&8$EUbb>aPM$Z~T8027RZ)WRgV-Emp95DEQXr!kSU=?C!@8Bq8s&5Zq
zW&%p<|LJFBX9lX789ACdXd*JPJ}Ile|CpJX0Z+#taZkRdJWSx%2v`{y0RQCpU7D5s
zxei1I06Q2LHa7NW_qU%7e3I<!9M1<c$5R(Qg`RS8vatM-6Wr!gu0P7Nva<bK9gGZM
zah@vsUE%MO0E-B2@>x)D5f*S|Peq^HC&7NlgHH%t@l(o^kK-u??0+iz<TCt`A1u~$
znLkpVTY4@JZuxINaBKhd?~j_mY5#4GKg<0O>EKQT&jljZ;E!s}tWCh;fZI|8DmfWA
zK21DNmn-AH_<v6QyQceH4){dTUja2UYXNHqv%kW^X2!-K@Z1ERj5NX5IRntx4DksP
zD>G{+2kn1V|2K~RqEcC1P+eZ`Pbw8{tn{t_1IwqA{C~odh2d$8{`ftO!|&rM<_XHD
z@c$P$pD}(O?>}n=_xo>pe&hKB+#loil=9TVpLxLX9AF;)B<@d2o=QFCeunu^7XQK*
z9R5Sb-~XTJ`h%<|ik`{*(|u~^H(5_SJ{?ctC->>H_%rRVOYpfTz|#EA_muu5+3z}@
z>i*qxzv*NCk4yaz{{N)(e_-&rrvD+Gm5t@!7=4~F{#!=>@72m*82)ocnK^-WPB!3g
z&dp3r9T6Fs8G!~)mX;u}_ZeQGvE_fs@84#JzxY*<SCv$k{*zw`@C0RM_<sZZJmdWX
zwF++gzgMfjN8|6@{vMg%Y5(DZ`}_|D_;))080p_kJ(YRVUVr9z9;Ii7!9+Zb>@(lb
zO7!1r2a^KM`*&WR{7>BcovA1PzheJJ*fWV>8J;xc-#Glu-Ea5LHve08z-|5;InT?d
z|CXG;&AiXc?*9jJ{s81}I_-JV{JYA0nmPY9sXntHt8WGRZ>C>C@Pc2HjtRUE0}}%q
zfRlp}z{bg<{j?JTcmoF(M4*6!;nSKQ90^{)>)VQho{0S;_|(W#+EYnH;2-D-Sesaa
zO$9`tk|W4U6~M^CjtG=7b8rBw{%5qF)E&4Y@Qe;N7pQ;&KtZ4oP#7oz6a|U_#eot)
zDWEh^1}F=Z1Ih!z(*#f%r~*_4ssY~v)qxs7eV_r*5NK#)X=4pE0)l|g(f~nrPWqNW
zW3bi-|2czz#$dYyXaY0^n!4GVf~<jNKntKH(CUxr0B8-gHnRo+ZGbl5|F%HeC!@v^
zWbF8d@A--Z+Jdi48zZ1S&;jTG-l@VG=wRjwbg<NSFa<i;>KlT9jzC9Kdl1-lu>m>(
zove*O_6~+N_8_1$&;{rUbOXAB>}{x@JO62m3b5*bB1!RIQ_*wy&tdyx`-#8rJ^}8(
zzfX`te{EO6%*e^h``5-4neW|{mFAoI7+>#}B)mN}-H0*$?o**^RiTvGhk#?JY81o}
zjUeQM9>frE$ROkc10Mqs1^^6|^l{DQntzvHUcOwKvuJ2*YG^$13by{HY4ZYX`_8%B
zR5X3tK#Oy5zFb_rx^G`SxgsKFbw=*nJbg_FADKXdXB8F&U+?YdpFXx}9I<YEmbmcP
zG(oBc`Nk<H2AYI3!YYNar!RDw1HoMvwollcHoD2+)|YA5{}vVKdOjMMo^Ke3o!dof
zSNBb))^U;cu|U0JHFcXzEeK9*G);_`Vvsz~kZfDQ&N?^t;dDs-Hjn&1&v=pKVHfGK
zVfN9+AuLaeO_XR6+tbk@B6t|LPj$QT)6wZWOw4=dvO5<_*h5su_!9(sG}J}B=12Zt
zT_HlT!D<yc-@i6?R`1be_emwS-;dS0B#&#<#O3MaU&@!4%u~CVv$6&+NwtZM7VaqA
zmR`?54yAI5)8(Kl*vJQ$lFz(0Cv{3#lBUb!roua*Ge>GjS(2p7ZB&pdJ(@v1AR0>4
z5N(q>%1cseDaA>6)ex5^DpOoA!%-GWASa?2HB&wVXHLc%YM&=OV-!|cB(FqGOj$%R
zgR4kmPKzV$`9*32C32CWD4j2Pb<ms3d3k{uN=zVOO-w(cIx|b``@Y4<_mNXOivevS
z5|)QEm;r=YEH7J*oge!&C+&)NL(Bt5Q6@Sl?iZ87RiT;jT5l5H)yVG4YUd&3oyTjx
z*3F1eXZ$|gU+bxaDi@li$WrJfc``$-#8ZSCrWVHBrz>$Ofhx%|-7ny~DUV*;nKb=X
z70JdlJn}+dU*&~9rm8*4hAF8k^3@PtVIlEw0#)aL=m~WMd!DGWx<SQb=L}_#tNwCY
z7&><J25Ty*8>f3DugW;p8V1itf5%JCt@h5(P-4eWwYEyu!I~MwKF9@t^tW8y4VsHN
zA0od@^zoD4U*v|DU%HC4ypRxSLp$}NT!~jnGy4Iu<*T@wHNG*$r!>;sUlWYPcVf`X
zRS*cRY0bdkDXVHyWs&AnA*$02axiVvipMM>51-zP?F@PySE3c9TKkEgv^7;J&EG&?
z&^@o%LPOG^p6L+9Rp?{Q7I?=GWi^GREIHnnWyldIk0m+FPKo$*-`0FRdR>{LB9Rr%
zqm1Ke!JjKMZS>m51vW1w1p~QO@j5z(X_P^BR5E^X@e%~~3S1H}5<SeXh|J~Hh+BfS
zbG7gA*1VBWBOA~pDWZhJCnb)Xuw*+rnchQ{S7WnD<9M28L7@d!<M#8y2xOPh6o}y3
zlg-rk^@iv`OwW1lOq&7mbo(s|el-iaYO0lw@%18?@3r=rM@q3l!~F{2A;sqLaC-m{
zp9eio&hmbl<zX6QXlyI1m3r%bdMdFhQWYq&spiBaCY!v}U17DpsK-kic>RHDi%gx{
zt;@m{&g=e~5WOeiM7NtZ<$gzMWC$7KFmVammC}pm^oPz>@70%Rws~Zo<a?UF38>*~
zA&*11C<XYFt&|2TL`w5+Lr+GM6I{a=^54ULUb~6J%>;c#RPLHdmmC+jg7Zc3F3(v$
zBTz|_UkD`$KmEXEBjn!ip-$n!x43sD$ux9M%v2p7bZ<L7BX40zL-qwp5d}HYVms5H
z?k@Lpb&S(0QRPp0k-|WbSU!>Id}&En2~ufx4jwYh*8s+~32!!uZ{$ZwnnFu#3~Up<
z@Uva1_y|;3g}D96Cw1;Gqe<aBHeg*bE_)yu(8dG#b51g#9+2Y7krvSISnxidCL{Qf
zV8Q@j?3U)i@Ab7T@LW?jxVhk`$e_6{v9yIicI|ffFpn(#AUt33-@FtZ6rObvL(kOC
zin>c#=hiqWo^@ZsSP>5=o3n?eeM`-(rmS)B>g@prv+0U|@kS`)u}4oH0oN?kJ5^bf
zQ}`$%()36i_s!WCe$`q7me}@Hs0c7S>s(xrw@7J$(17n&zSnLzL2N?7`V0H3up8LN
zlj7tV8(wCc_nCyPglwnfMV;ED!kvUuVUTOlpn{cIrVk>dt+7hwY_3c_`1NwqcV5(6
zcG-0(Nnz7hW5HHDlvZ3?4G45%;h4#R9>MNJ;SM4ZO+~dXTLE;0^`~B>R19ce-usOv
z-1U$za3`cSa;7WT>P~5+Q-$D)TFOPBMx7yYrPQJ_R!StUFb(GV29Lq0>IInv6xRr{
z;=;ih4t4sZ9e<>K6@arVSkwEu!FT=#bT0X>?4VJih=twFkSv9iUguCVPJ!Bi4MTM@
zvE{Kf9o?`bqojqQbZTVCzNzK$A(GVv_uJ@|9crwVd(0D+DHDeXGq?^6=hI>Ft5LFs
zl0qU*fGP3$E(5K3PcC0DWDncT5tNF^H%d6g{p@otzp}wns~^gw(%s!LG1q%nLLHAQ
z4O=l-Q|^I`Mdo;hly5pDWa%ZWHdPzX(!8Md(LT7sW!EvVXN{?v?3&864UNcABeM77
z^phHYiCUp?&Ny{nr)hb$Sirw7t!MP{3b*Q;4Q9clYod(lM<6}DkVpwj75A0v()G{H
z5I6VDn^oRemvKItWoPcCprw>KV@(q!LwCWpdiu!}qceTNU~`oUp$%1?7nZ&P@4HEc
z0_kxdbI>1H=M!Q(vfUziF>yLPlXb0JQf77)yXWBvU&1#FaP1{N98<VmJ=XX`RrBrV
zaH9Xjq_Wth!w=cJyX_CVrHml|ka>x4H`mkhf{9ma{cb^|T9wq%gS~V40s@OUgk-XE
z1=7XFCG*!=gtESLLUF-sfP|yFQ!+BItE`WfRKbBcU%jU5qiA)8)f*xs!={ASY6s)Y
z8DVU#x@z|dkn1NVh&NGV1}{iCW!YdNzJ50BIA@3Tq$w87^zPMByPw1!Wuq(ozG_)7
zC81dO;0YH;`s&T}|KaQ%gCy<RbnUWjqsz8!+qP}nt}eUFwryKoc9(5q*Q=T5otYhb
zzAqww+$(b_^UjEjSjTl9=^>WDLhFj=DQfRP_^^b?b(m%QL8#ZIt;Keh`AfCz%2Xf2
zi{iwoJ(4*HK4|@<ws!EIeDJw~=4xVx>%6*f#$1Z=!k#LBo5Sz9qEG4YPOY%oxn)e#
zy&@P9w@p`&Sn-xC5lUP>Yj)U{TDo#x4+HX4u<J#am*Z6m^rNo&GH#kPp>Qin2<|zd
zxuGp&-E`MMg1G2erl^*y<_9!|LI$l$#agt^kX5gk)f{?05+q}C>dGy&d_>-2uew7(
zg6%BoStJv*{I<6f0Q-*9o+u&pAJgBDNh!@JD`T$CS9t@ET_sc@xNV{|kwRE8+=e=q
zwXC|xSzFmkna)x!N?u6GL{1(GW`L_21%+})Socj_Fzwzp0j}7(bgEl0zQvrsj08m?
z%W3H>Xo)9KB-<HE=sPUH+2P~RwL<72ZQrBqAh3dK(=x42$!TnUMDt<oNRVMq0*l4(
zrPDi=AJd|HBu<Uao;bha5KBx^R;37_ez<=SxDEzBh_OCvB%8HoRN1I-Bx5x&H)yLx
zN2a%vI&~=DpO@1N%QQy}BM0&*3)J!cjK~{JbvV20c4?b&{LEi;FVuB`b16V`I>P+X
z{d{f0O8SFACL(P#xVW0iZ055_mNjtrXF^QFpW2OKN|+N7EadKfj>tY-xTf__UCDA+
zRRO;ool2qu@v%8k;T>@tl2H12B+`X0LC3GMz-Fr#^0{O967y!`IG|fM^#R28F|ca(
zI#rFNh<Ot6#0=z=)F5W_K}(*xRKH+EkF4?WViXfpQ_MQ1(m}f3vgSTRYl;N*8!Qr@
zc%@u13GwWoIJi04RjOskNEs|FZ9|Y`3#SSc<(1U7Z@7pt97Am>;%U)wkp+Q<{ftTl
zzy(Cg7U`=e?S<Te$yQa&4z?tt!ILp&oNrK2ky29QmiZM(<4Q6&dyXz;P!<Xqq+A=_
z>|TX_vW`xC{@G|=e+HoT*vi99>$=wJrGxmG-oL+SFGajPt`8o>fMX4**I=VdK5;L2
zgcN{|n94gs%sBmSs~MM?PE>}~E$6+4)KMF43v|UM`pVv+AZS}PkCf~JKd?z)v@$Ue
zkuLEY`7CG*H_m?yh|Ipkl~dxcuOFL%ejp-}5A4nbmlSs(fbHO|-GzV9I_YV-o2K<1
z?R|RD6&;zFQa0}b?@iTm-S`B{Q=Ak<B54Jz5_~%0pS+=^eMsQLh9|<2;Hv~v{Ulb>
z(lq6N2?a{e8<h`+O8?`Kg5Y6YxzRxN?zrw?<dfZ4-8b)Y%0azj8dWiqlG=hoFMOnE
z=Y-TDk~wvh0uTp#8zu7~Hdzn6-5Z@sW(SiYvvzNY*#{!%8(Q%DCOe#C-JHkA=dG8^
zefWLV9WI4O10WGk$I`=I<nTFjf?U&&XM$zG@Y62J`uvq~ulkZH3p@KOx7-pWT7>x#
zC$=|7I~V|+D)`B<TnTYZiMh&cp|GmqE^k=0hE`GI9v*`>Iy8UxyONy{#o>z-gSPnY
z(PEx;ZSKvz@Hq9IdgENG@VwA2TVfT`F6WPCyT(=EqNH=m?&YpMi4Ro^ca%C@XX4{U
z6tfp1DrSQvT27RiZ~M+Nbk*VA2cueh&Ah5}HvK{MSrL!|)#G!l$SUTTMaE!j@V)yW
zj-qzRSTCzi*Zf+3lG>_`MFPnTUey8}&&DAhqYZ*twmEV&olN=fZKGBXX2R=_0W*-P
zjb%aSw)#_5%m^NBf$f=kVght9y}X;54N*WiRS23=O`h5~%-H;gOA0I?R4;?ez8pC9
zrT#yMeZ))KM2utTp!ua4!AcTjO;v4!aA=SXU*(tZS1^1R7OQfG8Lj=8GXr<s-pHiB
z4%G)QG?=V?p3ML_mhIDdzQ#~fBi^DiUsCyUh!LM;buAl{c{bE={nPHeDadA=_%mcF
zG4Eu40XtH!?=t5!3t@Hihorus;D&x|lLIitZou%~1bblg^s=JPsq};Ac<f94Z^7bp
z4E{8#yG!rP1)oG<wtfo@FgPbsDi0Sd!<CIVI<Bsv%u3mr0rTnMq9$5lQ%epmSLp}q
z@KipAg^+}re)qHuGe?Y{nx#(?a(B}vqS?q-C|6|p;}r(LzY5>5Gwp5Co2jn=fo++k
z*&0zFmHp=ConU>20UEA}-g8j+8snf;PT!{{Yq6`gv$3wSD}*pTPCQ_a+h$fmPa~IV
zG=1ossATZ4$y7)~P1*>Cw~9W=+B(n~wX!mLbby)0Dj9i>@5=How1J+mya46$L`J4~
z=Y{|mZh}#{&_b1iwF*ogA~j`tEM=tm2{;4atrBd98S)o88V%|`7an<GK*`*%GW+oH
zFD`Pj>0DT-*-E428w!iss?RzEjV+TSY4xnQ=X`vyP9?bzHz&h+HQ2nvKXMsJ7SH%A
z@3?efd0a?_55dyScadomFKUu|9#j>t>x?8ya`<XaFycQLKG$BZE=vP;oM=>82jew^
zrsLaej9+<Bl3Jf?QP!>jNj6h8vSdQHcN4yBo@uBl=;-j%y%FzvV!H>&0^?DP$tsWF
zUshI#3n|7+`*mk2x;3pT%x$^1j4uVd3UQ{FZ>E1bZcJ23PHmghiERx}M!UG0-7ktF
z=g=Q+5(zE}3jutJ1NipuW^Zh3C~KQjlGD<%p|2v`>4aTbas3Y1g{)uMpRIiGG<?()
zH9jGvc5MfXy5aWv;tNuw!qzNh$de7tG>>Z%)5>@WL!FuTG>ZplWd6C~0P@^TNa(v&
zWx&H@Q^muRXVd+tobZ{plwZ&OfZ%U75L}j@oD~^mO30Y7G;C}}f+&@t8qYtvr_iM4
z?y%#`ZFIm%t;yO7O?sZV3HP-$gB1lQ(d_wL>GV{aohW6*si>96XPQsXNlR@@O~Zmr
z!+d($FiqlS{D8o9^}b+a?|J+&`%nlo)6>&VwG|3RygcK&b;45tWtrL>l2$-n9jy~0
zI>leN*@MVb+eyEf_7uKb$=sR2b*vIYMn4kbu|tCK*&!d+1u_!yo8F)no)nF7K$X+Z
z$8#8p%L#6-z+S^7U;ypgbW)nM9zsqn>;9vJvqfC3lxkFzgPe$nf(KV_IB{shv{Ovt
z*J5S@OaM_lq_~2}@r6a>d=5$5(5o+4uyfFZ7k8DYLRM%aQc_9=u8m$^-TVo82|=Pb
z^<sqIYg65!D1{Mz%?vCgO{ZTk*L7_eU*pqL-KT=A4$vC2VC?i;%O0eYcXdAug*Q`v
zrQUv=W_rh}s0^>hJ!}lxqKEe}6M`et39qL=Z}rvX@rCs}3Xjnao=vN&Nw)$k6r$IX
z?fMa5V6=Ub;hY=826CsIM9XP~3fPOd_-$eE_0RZYL|c5%nCH2lMj@2J_(vH{;qUUP
zDd$ll&r%GeW{M97SU)8Kv80Em-+w4u(64Tvax2UpHH<el1Ix3%2c;dSM7~u#c&Z%a
ze#A@$@og#iFs>C8h;BO_=O-s)Gm{Ra^KB_zKu5282xEB=4YosH2yZdm@<bnRj7n8B
zaG?5OQTd!3nWQAc(MVSamWaJJuV^b-7z^vAolTOkEXZZ<J+5#qBa|wDpNXC!YVv1v
zIvG3sY-_IX?9QkZmM)Pv;jL%pFMz9GFPC1sVQX4rByPC&g>EwIS0Q}oHyh_i6faOZ
zD&DJm24^VVk?_o{21=HS|E;{F6fb8wZ0JR5OL5HPks@7iyO?RnjprAR%T8IsSp$+R
zF?$nPFVKO0tTt=bFu_#8Lty+Y=Fot!(W<V_hhv5AEq6IGUj5qM4AjB4tPb$d@5g+D
zWk5K#j^rB^8lsWH)jU)E`F;Y<Pl&)!>%ahUP0ejl#*`B=vh4@&UQ#8ZGNq{3Y5#!5
zO%@s8pNDBp#Av2WF2is@I|@3qA9B`t$4svDt77@s$=PEqt5BQ8&~-#7pe3M;ok3rX
z6}FPZur=k0r1AjyMx)<z>_B&9E$9`TbNvl`KRbu9l`BR2?$I0`>-g&Y{H#UKY2Wti
zPD{W0z`<tY?7VgtcbZ^ua%B$QcscI?O&1^H+1_O|c@q~c8{xReyAB;M?i!_WrP*3v
zXZ!Hd->;Qv>b@H;geH&e*7MX2!t_VH%EzMj)Vz^Z=aNX{DeLG(9011~&1%M{kI{;-
zt8Ks4%30NvOUVqc?;1EVLhW(c-nvm-=jDqlP3ySuLTZproy!)Ps~U}{J8A#?qQ{&U
zk`GFq7f_l)EJ5I<#~ys^-pLNV%Ai9PQNN*RVU+1?MI)Ev9?YaQ;cL@%QdwDj_tr`%
z##{|qrG;geZpreP<ARHY@X-MFA1<!U%8S&N?EcP}x5U7pLO?*vn$Dsxq}OQY8l1om
zZ7N(r=TUy=<1xC%V~v7tW-3>#ZgK2=EEn<1()ZrwT09J0`2E|wiO*O<bf$Qzc}@Pv
zAuc1j#lo*Lc~=|158Akip_&G_u!fd|Y>40RT{4WWKS%o%31z?B;QO|NT_;)KB{Doz
z1A{QHS@EGlwbj)c2S)syo&%mm%t<icejyM2>`l6gc(@0fVGCC<EOHACQs1xE$;3>=
zOHRNFODia+s^tfhV5Y8Y^S;b7VauVzO)m*GjSp)NVEX0MP%i~5VJh7E?#dVwMK6aS
zm5Q2#f^x`~ye>(JXv8$^H6E(5R?A5^mOhKZW?)PT4B3Jm%-ssW^qd70s8K{ePQv3A
zo6~2v=JHZCgP+qL!<+o>^ih)LcCT(|AI?lq&%o>nyg+T;HaB+<cq(91-o6tVJa5iu
z|5geY?1iI&z9$vEk3<@)#me~f>*&&Z7vzH84j7^&5>IcJ+WIK03N|Rb&4JVYC^kMm
z<Y&F{YenhO{-eC8a|=oN@Y_n`lw%E#Wb%!18uPVt5(f~&Er!W)pH<&>AJ$%RFnx`l
z59?_Xbzh1#OsRozoLx>ekFU$xvhCH3%a*<Kbif=;pYV>86pgHYK-;s6yHEKsD5jF6
zhV6t`;~VFBu$rw_t63fhbg%yrLSe6VniKG|;2hIAALv8~LD(Hoed41KEwnJV?S`2*
z<JW!N?2mJ>p8$L)-2q=WKB{W2cIEpL_aPtVTn*bJW`5ezLlFRFS7W2&>VqI7l!9<N
zkRCu4`WtfeZ>iaSeVu6O8yE_$<)fD<EHc;lU4xmo83vFRi6P#!(Ey-Q${l-bIKxKE
zZGY+@q%b;fC^!zS)1L3efJ)R@eL_QaZ`v}%Ex;$gPNCD>0{bwZnY}u834Fo13Pn7~
z6DO>gjK``lpXQjHyPh2-6f7J}@*-N5$T4t7rsxw#hL8;LbV={~paNvneLh-U<mJp|
z#YHP!`<{r%c{!M0T9ueO14jU)0^<!LHs`s6s;<K~OB5|pB1_Gia9-%0@a=#RM{_<v
zak_81c+X;$oxj4GtE;sZa;#f}aj)-NTBdckU9QF4DA?bFbmlHx5OoY+*Vo_ZvhQ`>
zq_NQtiBNg8{4vqoGb?w^i5hq&zjC#%L&(r$$l9wVa8;VJ^gy4}f~)=raOO3Q_5l_i
zz}3hv`T;dSY+U}W+Uwu-gbaUUBL5q7^?zaX|6o_&MH)1W-&H*vOy4yc?Ck#oyJBbm
zH+J>6=6|v)hVRz@%&wR?{@3j4|3$9;#;pt;4UDWzod1rR{(1cm*z^zd`yX7($j-*b
z;4gIRFI?*za{V{7W%*y=*8hfUIsAh@8yi~x1w;RncG+0`1F!x6<zD}teEq%Z=`ZB#
zZ|(oj<cp1-iT<zT%fmzan|wXS26VYqX@V9+tPHMcRyC+rsGfx@iHO8&h{zv$z!4Hc
z5(gNQ01Ao|@b_~Q6%fd>?`l`M2(C+>n1?x0+FWU5HXOV4px$q7U2WZU_<8d^2N_><
zg&z5AeLp~>?9=#b)hi{yi3|l3QrriJK!(=%=!~`1C(j`#GtV!`AAebi>EL315(7ya
z21&r7Hh^YkVSHI!-(u6dQ112`R;~Uq(%m`Oz1zwciE0@dDj^dM4k4S-X!9N_=jc0e
z(v6vPfR%`Zh|0dB{Ul-`=A`8%C1&-|6PC7@oX@&(IdTsUE)oVO`CPvG%((cn^9>|;
zw2pY##5!uB*<vy9+KVmR*P-Z8S_piE2-=*FyFkU=Mz7~v<e}am>SwyuPf}}ii=GKP
zJEAlH79w}3ySb0e_nJ(oRZjZ){XT_1tkmF2B{)QSi*OlS59Ycdyn%D@PZM)TxI)Sq
z^xh-b73manM}~&P?@wKkq$Yh2w;4q0|7A~-f&@6|YKU1Eq%M0-tcuVPzB%|dI5J3S
z2w#_BPsB^`h-4M+GpN}gk|r}dXeErx@N<QK5Fs%_-H?bO#64(5TAHL7Q8t+Ar?fN~
z`yh-VY2S}lkT`v0TlVl^U_?P~!yy^_90c}VUN5e<@&U^*%@K`Q!4U(-g!3Xa#g|1H
zPf(wWrtoFo%ruspw`H}?Ee?yl!f1)EL^U~9xzCZLK?=9+6>gWc#SII%1vr^Ew-V<P
zKr^|cfRjOIJ-8tTd)p~>dLnbt&FC#mBc|<4j{qtAidMI_?dz4!lTHzCnyXjp&&sKW
z>JIi+<M#KdgQ4@)hA1;X$Ok1+p#a!dS0=kv^@1(cX~eEh@^`{{hL$!9VoqMt&7iGh
zQ;<>*!DG83p!rEyQy&T6x?K3~LkJq<ryow8gn;7i1PVzPRe2$`@mLeVA~@oGp5g_b
zBNWoKwG3HOl`~<vX9ykMU@$H5zOT`Sv!Vm4r;}xpPSCkCs$y4Yxd@UUb<6{Nsb~X#
z(8l@nOqa5X3^*T*b`EI53PikIZ+|I5WyjGA9ugf!kOys*vH-Skkw2mn&=fhOn!Fy&
z{~^Q5_K*9++8!TNAG|N(QU*i}T*u8r3d8Y(m+knpd$%w#Hv!x_r60|vE5%AAHF)u2
z!|`T29-w}fl2$XIQ?<Kj{AQ|;ELEN2iCclN6bMa9#tYvYmv-kf_^|OcMFfxmzR+xx
zh?#@G_~#lRyID~u^q`0s_^g2XNXS)xoE=|Xy4}G|aWpOP#bo#tBxfxD@6oXMjFb0H
zYiCk3agziqwgschBvYqiXC2y{eJe|ZjT&=18>{AQAT$1&QmS&oV%n{D2Ma$35d{~}
zi}(EE`FU4IG-q`Nf7Uw%XvmMbmMlH~U-dH5TzowV+UT8bXxEZFzSJC)JnUX<xgR9M
zrhw;;{y!wO($(aPFMc~_>+v^#HeZcv=m*)&{(y}sAgM7^U24GU4kFpE%gf;y7hqDO
z7W8I*d+|O7$@cvOh9YoVjWcg2V2WjOc0u$+{wd~a!;7c6nM@geHq#2uTi|!v;qdG0
zSAf5p*h)dpqy8Y|n6Hcmt2ofN{zyA|OSDY85rA}DGTEee5O^t}-&6;W9Eg<0MubN2
zG`d~*mdX=)S{S^|oT|u!kIKpeZuqD?S+i_{*#gYsSf&q@{^6CaDfwuGA?2R2$EA+`
zWu*Y*&%jt9MQm9iBa2W5SiQeG-SiXP9ThjoQb5z37rgEEw^le8l9?0A!<-eyKep%5
z$06pIZuf5&wMorhC*Yjs0$lJJQ9tlpU|2W4Fy<_`BEAQA^d63JB(sl|Sd7R3hFeq9
zah4J>A$k+{VkZaQ$X$LFjy4S{n)!|VU8r#lj8#<<z7rt5FFej(5Bt+cJ9JMlQd}4m
z7)8l!HB0wH0YthWMoZ}HlM~gT_jrBkETApMwvGf>UeHuVnXKUn8z1-?Tfv%}Y@a!h
zuc>u7k4Bc*fsJYJ-_x%?!GwfSI-J1GiSb~5jT^1rZ<cQ@JLuOs=g2csTzn#xtoNk3
z3d!-_<>ZsTB5hTQC#I;dJZV~4#rge-dfVgS>;ry#zq_yqfN~@Hta!QivAy`)p=L)4
z)A(IOwatouH<X7N3?pF2GT=MJE)HYF?M7sy5wT{375miRjs!?GnR$Xj%v`1C)bWI&
z31~nbn5beb@-W{Kkt}f9ip;PRP>?C*Bq!ie#DL8abdyhE{Z8|Q-pJb>gof{KpF?TO
z<O>N<&#iV5G6FxlBC<XddqyOSg>gR<|KX`6G?Hj{#-ceZAq0@BD0FIQal_dT6`3e;
z5{7hw#S)X!FRZwpmZ}DCejMnauufb=b%Mo+-hIKYN=J-eI+@;X<4U}^&PcLO-<IZT
z357G9-?TLB$vrsz3lJ5}F_pGJ*e5xZLiujY=>b$Ud1J68e5%}#UrlTLR7=qYQNV#>
z{T+l)o-*4^GHs9vH>?4KDhYFzWjLB2a9+t0zi3`2l)`EEi$f7<a%YD|sUG&n7-#2!
z#~-bwv$H1VtdAaR53ZsYe%kfI{+C(9BGwZUk_>R>=#aZoI+h}&yD)dcoK8hcBULqy
z>>j}7&CG}hXY{Sz{a!X)lR`?Z<O&c;g5|N>MCio3M1Zco0kcfAySf@65a6F=^WzEp
z%yjgW({5t!BjSvFz%+EEup%Cu-apLrkm)Nb&KH%Jejl!A=WO7#y3v-I_+<hhw(N}$
z{?3hE-c(+8D`IdILG^>OPIzKU%+PqEH-f^no9>7wjau|X{p!s~3s?Uso!59ptX8p9
zaRPn(qpkSn_;&;D?+==HX(dTPQB|m&kjOJzDE%YoQ<E{y1?Y9_O26pd2_ow=m=$9Z
zHgxf+j5lVO(A1ysp`=oeKXEfisU9qY9ZDMEBO}3J)wME$7jx^yt2YIS?3^*9Mtd+Y
z!QH*lxK6+^$gs~E2wROH#LjWVL|)HOLNXSZ-!ZFD6xbZ69CyTsC_wj=ks_#hNi?y5
zkN+rCk%3-Qc&Z6z4=WbK<|^<u?M7b(Jx<TJbNb4~{n4b9^O;^U<<#rPHrs5~S0s8A
z^q7{cUXYMngumcg=AmTeTli+l$clO&D)g)pCRUCYZ;2~uu&ii_{(T}q469jIKY<D3
zD-JkrK}RRE!DGe~Hjwo90~`}~gL9e*^ca5Uv5vlN1tiL&tCcKL-LF22<*A)G-Y$B|
z1HcTWxU%E&?z3*t&@-Q26g~WAbh}|RELTw|1o%OqN;<ZumMeUTl}3FE41jXSUo>XF
z=8q1EqIAJwS~kU{XDCgLKqCgY0a{C3BCZ1x>7LuK?EV9uuSrT;r40HYxqBA$V~|A*
z-4xB=Ti%>?*`Q9@zDJBvDqPkCfE##}EyY!U_noWdy^wc1G&Q%F{_>Uz4;ZFp?c|oJ
zbq9LV(R7;(=cjNv5-_KR!aS8fFUqkR%eU2HEmm_Au**2AN2{Kts=d8mHN9kP83V+!
zpcnz;xczXvy1}JR_uU6Yv!0IU%v@YDgBVEIu)pI0O!w-d`nYG>jrMVxPVUUr0u=QS
z8P^?xW<U|GAfZSSndD}*%pWe!>H=|JVa=)w_qyq_hZ-^~a={0b_GQ@-+Q}YOS|XO?
zII6kew>E~b1wJZf4|y-5?Ffu=dSQDN9VWTg*dJt7OQY_^LJ#qQ4`rL7o+;c7cLQ+o
zJwS(IM%4l!MtWO5u*#%3RmH}4bm9O{+I#;?H@j4{t*Il8pSYAAm|olcfig@x2GE$W
z^O6N#bI!*TK44@TXIRuUoH?LXC`vJ>KS<&M%9u$QG>ejo&5BJj+xE&U4PA0-B@`l~
zl8Rb$6{3vXq^%3F1T0J!^6=-lw1x9s82TJVjA`Xyjx<WuHGJ#xa$5@puTi>hcrp@8
z7R&sByhuf43q84OGSZjr>UnVkEw*cS6XxRBDRpXzd8r5z(K9d71W?T%auH^AhARpB
z)G1JTP+mayV|yX5ZP;BF?q1&Dg5Qd6x^Ow=S{{~{M?+BG50A&Q^|51C0KJx8aLOui
z=?JnXYgjuL`xji%9ryIgKOs+HHcr#T@iM%a0UaEVb@oMdnspaMnHZ8T1srY?J8v}c
zxdydIAQ8-Fn9#G#iZn1euuQ52YY|uopwP&r93{^eX<INnoiTFsAyqP!NU2Z+kStmc
z-K$9Tbg$H~pauzuJbsaDW~EUk>0eCrQ)bzU&rAR~C&;H^tR}5EwOk=(xk>n2eeLa;
zDk(JOn3cTx4A%vyFpZiX_8(;VUl>T>`Rg7&auoXZIA29I8+wTU%q1wIZ`M|ZbZ<gk
zDxX-FtGRiSfrdtV1|7ZtIkOn_Xh*4+b4g}xx;ZPae27syq4>&rkIb#qEyn3++P+{1
zjVCvd4r9c~Cb~sW&^t^s=B(s|rg+dw&v$W^m1H2h8$><bHaF!3y&IP0N{OEx-EhLW
z!zQ~7Rco@)(lw3n)b@9Ini_(?Wk|Tp{h9uI)R5PoHtW9go&@P6UmI^Pu{ObDW-idT
z$Z<}1#IgRm0cipj7xsm?KDO(K+>~@(B06fU(o=PlUV6Zg8h6LoGKm1ZL?@+8u6Ls!
z^;upt*t%s?9@X+L0CDz0)T0)FrbIB~kBn=HAk9!ruQv0?F6C(Vh5^?m<%-b3LI2A~
ztoa-ZoIH7<V>&sF03P%)i|((1vf179ff4i>oLjUV?UdE}bA680KF=Pv;s*Q05x7)k
zao=i6w3F@pIk!cOFhtIL8Nqt+Bx5(+{E^2`sYO#I*Sh}JWCoSO&!@fm5-={-TR8)3
zrouJ#$?ua=<k}PSbG#kESk^&Zi7R>L3cJ~B&U7EGt@st31=rSo@aF)b6GFtWz&|>D
zoLDzkHKB`gan*u*#P~b`Q5?l&RTs;BF7mi)otD~z>uFyL!<He$4TuTW&qv3aaJRw@
zb+~->g&wOS@O}R4Eh9aBp=0pV!?s_e+eTsVx~Q!_?Zq~TxdS+_{Cb{Riy~jeBmiA-
z8%11-KJ`c<5o2S!yJGWQeFpZ0+?8W3bhn`X*7S;B6Jra`W;3hfQvSXt6^E<?xt>dQ
zD^MG?W^>pp(ArI`uF7Z=MiVbZkft7(tSScwDmDR4Z=2qGal{ZvvBqH*OABZD-NJ6-
z52kICzqg3cv`Sq((;>O@cX8Q6JS{3H+jrVrmuiUU2QEYE7I`OGO)c~!%6?cS?vW6&
z?etrw&c~H$x}+DQaf6~qdY0F)wCI5U@=r{NeGWD1syI#6FHibu|BI?*TE8@imJP0}
zVRjQ<!2+p@Hl2?aTy19x3u851Z>GEloC)mgbXA&o;K13oP%%LGm#H|#J}Ju30U3bj
z3EHxWZ4;r}4^T*nG7CiwTR1uv5sCp&<{@IP^yVotLZsmNt)KutK2Jrj`d`~~%1bbu
zy)i<YTDJ%#{%1u}jDd>!RvZdyD=AhgXZ&2p^~}GU7PVykopJ?KNGytf8d{^3sN4v9
z;LUC~8HeJoIOA|s-<uy-F>1C?L)`8<P5*vH_K|7IPgCq>*>DEIDd73j4}S&Q{lWBQ
z;*sX?^Fbftav(j~VAmZ}1#HTU87B7=qPumPhuq@JfVWey?0$EC@H_~!)4fCd$iiiX
zW|k*pRSeWfL0wU06%Pt0*Bsh~fN#BU_=>75(I>`4r*)wQa-Ej{Gii-Q>M*Y#K1Atp
zcx5=cu|ZT+pEP#u*qe$>_?IfmdSsvhAUfx=HaEC008jb_BrM^km1XK)DKo@a*s91E
z<_h(TDG8kQANLsMb(>mz7Y*=+Sr@U^3>;|vP>zS<ep+^$onxe)#aw#AFMGjON5pFW
zTF4q6`n`MO{h++`>0f)761IeHM^w>|5(LQwViRzjk#(_YE~Yk!J1TKr9t=fW2_)O;
zQe1wZxT2{}dx?pE45^e(v8kxAu@b0^95S5+=2Hxf<lTa&P8tlzJs1`|82&^s(Ih+P
zWG4_MMr!Z#Cy`MWW@||b3PBU;1oG#SGqQ4X@<2TMKXm2H_I-Tbd>XM34o|)-$BSQm
zOD|o9wxsMM@%hrNg?D3<3mY<3tZ3_6)A%)FRRYYA+?>ta+WB8IOM3h~uF>|k&?mc)
z7NKe9Qe~UB*<BPdTm!dJR1)M*W7i?Qol(}IHizTB2A*$z3DF(Wixq8Wq9mMHq|SI(
ziI~;lcZ`$w*ZBkiWjZ38SV*=JYXwrJZ4i`;*Cb##%t^|k7YVzN>YZLtmX#qlvZ!r=
z%2^ztcNb)SqO!M^82NIH1%jQ2c~@n*c%++V#YpdpK(%n8=1UIdS4fa-9J9M-E9b|=
z{x(K6R!I_&6w||*AYrL!*ta@Y^gK;2(y%o0;TU9{^iM})l))|>;VsJs-y~-TznD=v
zQF+zY&C{*{q2#2JqBwvaqF)jOJ1wXZIGRH`p0X(oTF4dBIiX=`<`W}PE*VY&W)x6W
zEha|piYT^EZ&HrEY-MJh5SomtbLv*NT3q9DF*5bnr%s-CKRRq5A0BE-HLz~Q4D)-e
z7wb9?5uhdpS4m;s<Z68=?v*tOCnx3Am%BIJfqJj_BUi#kwbmzt#fxzzz}xafU?X^X
zQgOM@8q(}t2WJ~xDMohbdRrlf_0~%OD@DGEUz|V}O$Ryox{lCc2$rNF&el~a?zFmP
zcy#Q|Bxq929toNxVYOt4{#%=vgBU|9msuBSYzxP;Gbu*4xlZ(Htp$^qnC>8HLI7t}
zeo)G2_ML$hohEQwjCZmc1P!k?86(r>rMHl#S#MfBWKm;d?!GcOqmH*aBsgM{e?lqo
z1jd!3Kotkcme0x^qJ7ox!VM_`ZC)+YVBUG|8U)liL<CGoMn!HFlK)9H)JP;eZxPQi
zy+mg@ktT^OKB?Spj{cYBxdkmB>@n5BjTI<)v|<MpDtOX!9y@e$Zq#_H20s}*n3Db8
zjTJWhGbzsXUWr~r=^c<5zxUx9&pnZ3-W{6gXy*lb=wT{)Xwz^s03c=VVorKOP%HVz
z!UGA+m$p?HAXoNXxg%ycxW%};2Tn$)@6Hd}cLjwUt<vc~CMx7ry&&Zkk+f?DwUA|0
z8Tpk<4>V`3PP35ra7+>kIZVFkDjJIRyzqSaXo^QFDff>gvsRVAV;2=od9+!Yx8?-l
zgrf3*>UTk{ddA%IM)9OEKTAWbm(b&<LL1WgWu*-bm91qAg_LYujFbdzq5%lQzHV@R
z6)Yy6aV-hfA$uq;vQ9eB@Q-PxOR9L5ds$w+-A8`b?k7QXJJ}i+)o$v~T0%ch@3wo>
z%(kPTkvA0V33dsB;!YyRI=$;9E`I}c@3fbDH?)n_u}?Nrt|QrrvNQK-r`>F^{=@{L
ze992qP@uQq7ft|Y|K=HVO!UyB0lL_3Bcp6g(*Y*+m*(dY;!r$S9aLWY++~1_t?uhg
zk4?ZPiVuZD#mm=B2b&xC#LH2<0Q8->Ju{c(Gdt$yP5fThW6tQW;34Kd_h~Ytwavu}
z4TE0#4q%%jZtivUg{`O6WinsTYZic#u+Q61@$2+p$zP@xU{6jh?bokUzdNKe`#SV(
z58I!8ZoCSFT5xN*5F0y97u5$|4;io@<7EFV=GOAn^w(zmRt{D*?CbV(MlG^oP1kIs
zqq9zH(cHPgTG|fV`6P5jZpd&#=OO*waWEf*B|YLksbTF{H{VYeR;K5#TlLVt6)=A;
zZ+fNjF#>#RIAw#SNv;ouR;98&Gc|{=Bzyn{jHfv#WVv?7c_$U+)s7_>;3-dA1=%u;
zzCI-%Qq)*JQe*q47#Q-?ATUi|qtub73mCd}3(uLX6({WNm<i|d3k|E=Nn}xPm-lsh
z;Nw<(C1%RAwA#s&0c6tw@;N{K#s7}tHCWkBdGzT^jPtwN`>`SxKbPw@WBxgU$@_vx
z0d1U0&K3mS{1Dx`y<zcIyDZ_TlU<5j)uf};Uz={aBpW_`&k!0(2QFwp!ePWHc0BH=
zQ?4W7dIWPcd-2{%S6Sy6v{O=lnl`Q^yWmgdkcJ9v2!G8K-7}p+AU=<2OMZHmFb1n9
zY6uCOQdI_09c%Qb6KYXJ!q^X%$FRI78C9~yS}p^`5m-xG!|G!P!Me-UM2oeWFQ(LU
zv{<j$p?w0{qm8tA_?}tfx|myru6BAOx1Z!6Gq|yC5^tbV7o|!x6|ZLM?@ZWO*E<3T
zNr+gky-Xkqf4p;M1CJMSE&`4c!FoMrm6lu$cND=30kfnBau2R)m=k|x_F{5|aK#~@
zAhDZ0oc8+l{-NJP$)cympff5^x@kvb*CL(vhedNFLP%#eJ6|z9o2@>GZKc*Ihi%O)
zqmL{AX&qARh#<}!rn~4fDn2EI_T`&2-P_5`ntY!HW*j1fg*QpG2X_8=^f)rQ4t_cd
z3$nw%m*7AfkBdYQi_oT0-l*=$Htz;MuA%j+T(x&!%}54n1je;bVr-yC>Jh+K?>h}e
zwQf!37+&4G>^50Yc@l%K*6ZLq_H{}0nQ2XY{>(srKerh5vCi2+dX9ENRW7Tjw<UFR
z55&C(&+%#=EW#`odTAwO39pqwkWw7*QoQ8x)m--xwQuh*1=s-m!1QsDDN7c-Q=np1
zc9UCf)XRD(S}!W{4ahI0_m#%E{Q0Ei*s23B$FdD_Pu3;&6dW;tj10oyZf-XJ{9<GO
zNpncFk(ljS?|^`fNs47^f5-q1B;jm!?*9jGC2~n=nhtFD6%py8eMkTbiE?M=(N9id
zEuBhEBff1Uv?G0nV>Xp~;Cuny)q7%!F?^vuiGrO+NPJMxF$T-rKci$)37yrAl2PuK
z5Ou8wezFApV!M-&W<VZuAg)}NffSfi_J<72iInI2x$ox7U7%74WwrmvPIv9hm$rV5
z7;1((gRhy|4EueZ=C6UytCi@HV^g>v2jIb4K8SU5xIY1=fGSS6u5QjCI@6qi-HepN
z`~tm4S06b%Y3OAT_ee{FqH=+WcOo^hKnrB2m(5ys9a(mtyDzT1J|I%F=_*?^Kv0Wh
zhLInaq~g>jn;GEo>M=TKFo`7Gn0u%@-eQ}c>r=pu#P|6gH*Q!V2gHtI|0wct7Hyr}
z{<(lR*eC(VpK-<u=7AY{c`&qMYn9@2>UyO$^l7zv8ChE4OS#GJ5vgn{tK%~5dNM{Q
z-Yx8t^Tm#44<hxOk@E|?>n-7gai7P>=eWHg-457YN8MDLxy}Zkfpb)a3w{WgxbH2y
z%yjbtayyq|Z@z=D6+(-H_U3DdDWF?MJ&P`ii&^Fe)}f%5lSL{fi;`4LqT4S3W%^8=
zqews+?ts9fAmk$D_39GhvzTA#lt_f!`vOu<WG4FW0QYa%%Kr_&{l8^Y{{e8nLxO+H
z5V8@lvwg=v*_r-DaKA%^|4JXSGyNOEW&JmTOaGlQ{GSQ#w{zitNFS>IGsMWu%=m9n
z#D4@4#lAy`{|F%dXZ-MAvBQ6X*}o&%{~=&#`<*KMP89wnJowMB;D3n-di+~5@bA`x
zzwpt&*gpRE$v|c{cJ{yW(KHWdrQh8nau5=5qXbm}!rmMri0O#n!d+^n0fJgkMaty!
z9<oQ#WOrHTg%TOfjWTPEMRyQMf)pV?KoLQHww0=Zfaq*_rK;7m%UxY|TwUZ^b-g`l
zX=qSU4e)w>`EGANy>S>ICXyjiqgi=sH?wycuP)8+cb+fKVoRm9Q6Gj#O#0Q$QIWg6
z_lzvtW6UuFNgD-OBm&cMi-q;+ne`Q?%Rf>xqz`#gF?L(-US@lt(P-2=3kl@qvvV<3
zFz+>~sdXd%%nyJ5lNcUzLb96vf(U&LZQ-dakjKu`!_29b^@Ac}MT0<gI_~-7_3LHn
zi{|l5D~BLl<m?uj6~%T#S-ZYXxn3nBD_=ZDGD<dXY;<xhy^D(0%}uv+rOkQu78nua
z<_DtCIl&=v-QdI^kRdvv7&Wmg^39;(H_6Od;Xfx~MVg3^8HC#N*;6rOstZ|>?35Ko
zvO};#T8~f>M!7*llnIYG`5VEkOVLM+a`1^569xm+aH!0am`kLshp!bQwM&0THG@8~
zx{T7MvjeP2_l~Q~x$RHdEu$*-EctwlcGWy@yedJL^Wz?1|1&%}n9i1?^IU1T^jW(?
zZ<5AU$!1M_jzgW<$Bz(9;WK$o5cM)Rvwgzw#@v#^kP0fI?d;wENJhMPrWhlLHT>)W
ziB|y59Q0Zr$v@*Uir6b?i!kMYl?A4c66oAykeObX7sN&w+~nPgq56yecNS*!6nzq&
zajRLs{ul0uno~bKlY~8#-;-%oELdTmvhJ?avf87<kpUE0=jOtWZKcPj{cc{P&3eJy
z*`3I*KJQE_U9!4v0ceXYOtB`+QU6r~SM|~BN|Ix<Y1~T$@2dQp!KSF~Yz`lc_$E}&
zkfki6$pX0C7LHxKDZEV4FK<uSO`a8;_s@0+JMraSYCHX=tuUIW)oVQDAvqw6c9gOA
z71(g_!=HB1!+dS87H=WY`4wufS3w>7%XLR;5siwUH_g%6XO8H;7!oFfCFo>;j0`nb
z8yAma18k)QN8oF5z>dSuP(uWFM)+rxS(A8i`tvVgyS%YUR)r6ynDhYIQl}j9$){6*
z#Nz@E<cP_+Ch`0r+K+dsBYr;86jrL;cvQaF5Qtvuxa`=xPEfKvPpB@I&yMRV*SPEr
z9Y~1A#}E&bcOx2;lOyK}hp4`Z4Re@_0Gbeu8sX!@f%7W$P30G_AC@)=z)!?&DXFFR
zEK4AlU{{J$8Jt$g1iL`3INi|Ot#10}M*H0xEk<RJe(XHci~zwVuBkHnJNXAlaQA<V
z*3Y7PWotS7R1}pRCwXu1_|Zl!vAsNZ&ttii&zhhIN^G9@F>`}FHu?<l_*t>1@qP{U
zSXVOy3g*_Qq(#n6MwkcuSTf!!8hN|9-9fq5I$Am2w#^Dl1R$1Z#d7cyxQdb|L$_V;
zdtzNmc?!DQX)LZVX0LF;erDoNOhELyJH%zU3fBYL_w`VbY9hmE6%HZZnA*59jhVst
zHS&voVMFS0ZPuj@g8H^(S>=*BLvYz-qf^Qr^+GC|no>3ak|`<k!3v<QqVaaNFGwg1
zPf;iS$Ze7Ho!@<a?vUM>f(@EVnid%?tG~KQJP@sqrBtzXLG46_%0`f8)Ww*iTCk~i
zU0K5wQ0@M=u1xfBo+Eh~7#CVM0!Vsl5H-8cBZM|GyQ^cRSz{9uz<9v=>D*fquM|Q&
z?q_>7oQIHrMP7MrxTJ(+Op(&>^uPvrYp1GZjPtW5L6Vxe3)feGRrM;hQovj`rK{Y&
z+1HHR`~ZzLV)#&jrK&`?qhPML9iVQQuIU>mDj-`o)KVaqC4!tJZY8BE8v3Wtp}0%D
zWIVY}{v!Cf?A(}hTZqS4XXE!a#r>nu9)w^Nu_>0)DOFT@pdhKszMgy33Z3z`Go-}k
zeO6-F^Ws=ika~XJHoYu2{nY0b_(ljfU57NxD}$I`iSwJ_n<4LHEsgv|bf7#uXx%-j
z`>UrS{XR2ZRPWuxM;W2FQYOe2DEvUN9n+7M8v_g?i0CD}&OOqP(wxI=7GQZB$`;Ss
zI)DfX>P>=8a~AU^B#Cd)VJCv$hYdUUG*0M@&kYL;yK~tCWh>A$s_Xd^da4vR_^EXu
zW~~w%%-8Rsz=284&yJ1eU)i+&_<}WElh(}~(WVM(;0lm!p@s!xFwVVz=d#!ynH_*l
ztFUktQ{;<BX}A74NvyL~WF70>J=F6_SDUg6%m`SM2ft+jvTRQgy?fhcU}gTS1{0cE
z%A><zV+37oW+LZ|5F5osZI>_U$1!PisptZn+9~SwB2IH&+BV9oz3+-La@R7O+6i82
z$JEs~!z6J`l#*ThSy!vOgmO$1E8o510w`;8yJ~|W)2mCutYRLE1bAn2z>|+gbBbKW
zG~oAb#*-lt2{wU>k6vGRxQxf<4ZrsI(PjYR>%YW+YYeZ>9v)p%FM9}JL$p&;weL!k
zipsm?ZFqGfEo0Ai#>J?R$^$5~rq^BbfxCb;2q7A8_0L^TV!8r9rc+W6P}-v?Q(CDi
z+ms8|_?t6sTRgJxy+G1Fmy|v^Pn7IHtg0+h(yCY$HmYffMU^+<5zPh-iZfdbw0CL;
zKu$BoncGhI0?`830wfNY7gQ;%;Y=uLVQ--ur?7;AUJe9nIrW35GqXqN$;W3_Fk$%5
znm?w1gYT>nwuVwxIJaw~7BdPoj+ri8FyT$xiT77i2v5ipd-^Q=Op>d?zY3k<%`dcD
zkI7AgNj<_}Y<|Em_j42r-U?xR;dvZJiU-}2<X2*=AsPUOma0#FabhB|ArpiD`ZH)!
z{?$KLZPZ+nX=#{)YswI4w_-p4jPohdF#<;1tG}Esd12Zy7Vrz`zCSqI=pcCu^;ekG
z4wpTT_r>ehf)?wAgg_!|<a95F-a3J{*$o5|%uC7x7*cT_*k?pa)^ioU@Sv~)=81%2
z7MVwRd2tl3A8xBqHU>7gBUCV_zhdAdp98e%Q-f9d%X^RsuNf*k*y+j6<&p~#Id~!P
znsCJdC}t6;W{h$^lVz>;qzUJ*)7-5B&_dy|Bor2MPTnDhdWg#)>Qk(&Raaz~MBJgN
zJw;8DJfGKGQRNycHUJj!Deo(p`+S%Lpx-SWJC>*fRoWc`V3obcqx2(ZG;lF8Ht-kH
z%Omozm9gOReu=PtpUL<wL^Ad0@mvkyw!RB*?)N~yx90Sg;YW+H3YH98)M1k(jM)C<
zQI@ITTS70jz~LT8h(;-ZX!`5wyee!wxlOx9`viXMKVFRw4YJ3@Z5`y>k=;8)=L9v+
zZ!9zmamqtQt0rq0w5;8$t`#FsW)j@#Dvmv-F_fGSW$mTl4r<mo;@>Xzl}(cNks*(8
z0MasLxA{LKb2xWOqgwRq+1%W*dco?>LIPEvMow>!?B$Q#If#^=t!T?JG-UK!;`ftV
zS2>cR*1tHcKZueLJcw=!_>pC;0h1}o=z-bA^aE|I@w7`z6-FrEPOnbb@Ix)aWpaK3
zXwuNbk-uB4w3rsCn1gF}*72Q;HzDir=@vLcx}uW9M$qM&<FR|4FJU5T!q(hzoi{ng
zN3cYtbO$e0k5by4d`(!eADp@<Xua*evU-IxDGNxIN*e4+{AtVMyeMcpqWSF^580@m
zt{66D02-T0mV=thJUlL7H@`t>C9m`=G$-9%DLyub$<hsLtmI+skE-&nr%Ebl7i|1Q
zClQ35|9AwUEH3)AS+4>6`bC>I5e$oWyhnA!?-zven)=-yf~Xz?F+3jtGIP=GHchpd
znkY-Bfg#wQEl~Ji;Jp<1S?@-qDp9Ge7xU#VY@-q0H}&A#T`1p~mX?uefciX9l?1Yx
zNn|BVjgv^WBEn#KXQr=9Q=Rt^jVI_#3JkqzJy6x+?hfC+TU>K6ekE~~8)HJ4FpF!U
zG{7R2d`EV>8@pqVjh{H5sRMNr2tUKoglP-*K2frp5##MHdLT6TU<N{daTkjAyzY<E
za4Xaz7qQaoISY6YL3iC^HoQ2w(joWxP5Ss4HWB|Iqs4@18oq^USx`C5+t4k+b{_*1
z;ioJ@Ez;l-3EKAkbi-gFXos|OAc#7<*dqvBhtuQo_Cbkf;f+F^iJX$uh=zlvH!NC+
zk$G^55o6TkTS+Bd{Y8OPGX5Bq8c!uy7odo>TL6aP*I3Lj=~n%Qr|rma6veUoWqO+?
z@@`%YtFA3-XP_f%!ifg&b>KDe$Q(|GqQIqy$|w)S%xlx-X+Z4T^~?L~H0;aY;EB)I
zo#W;?0c|dz{0CntiB+a%xeo0PIkL)11&)e8%-2cBRZly5E$C#-qJ`~q&n$*#zZ+2M
zzyZ0F^4fdKcKsXFjbn$A(zX}d&1gwjC!k+fY4N2x`f%K}-mai2?U%iegkdqOM2?Jv
z;w|y2zjSINtdHC01l6Kn{%0NC_+`jD7f<l3R^wVp=~YGLtsYdg{KfY2HsF-8pMjO;
z{;+tXej9|W(H?aUhD!zqnjC4((CU8W0$?&isl)jJ*STtw2o_dY8!{@!^V{z2Y0jsd
zXm_h?89K0Eld4gZMI|$8m?DdpgSA!2?r#ym_6ujbvw^7mk|*}bxHM@Kb>&~LFW}?G
zfG?wt=IGI&?N+bt?dxZ;fdaR0E@rcLKlTgTfKB5H=Jy-in=oJ-Q;-($%UXd;@&RX}
zr)HvV(>HU`mA`+C;N$w8`%s~?B8J)R3DI$lyZ?A$mrry6ygbxJvqUwM<Z3__Ea*sw
zlp2S>5RPJX4}=cIPtZ*>U_W>kDHgE-%$rj`sieG2oRQ0AFAO={;Pr8_E>AeN(M*L}
z-To}-50zLnSIRhen<WLrHJS!zWE`M7!#F)__0uIbk-dR7N$A}0wD6KrQquCWkTNJG
zi_|sE=Nb%m!t2w3KMJlftxu!&<?E)S`2P17uqY67|7Ph^qJa_0LXMoyHo7V=zq!k`
z_o#L9I2Ho<(T{P>H8YGgEgg`A(I$twv#rSX8#n2?YN(%+$uW|(3Q24#Dqsv)i<(+6
zWXV;BveE;cVekY`k^7?++X_^_Ff8r2wDH(qSLfhlB!WuoR#N}01=>7P+fKoERo<Ks
zy4oF)796-NHN+po^%l7jX7J5PkEG6O(X3R(y?NNBXzA?Gvxi4*fm00sU?1sPRq2E#
zYSEDZ6&&pnVoM05Q5fkA-K1a|w^r51PjM~z_^nuVs)QE;y_@y8Q^pw0vu?iSFd{(3
z+i@P`Gr?BsZ28{HxItIzp8xygFq;q;j_XWXwoS)^a`C*S+=jDb&K4oKMr0S6k$OPM
zeu6*si(g7vCxu?SrK>`Ai?;=zneA8S*W!3ALl3A1ACGCA*H`UP16rj8LvEDrYS@zb
zBa}U}^?EcZpyR`I9(I>ad@Hb3+0M~t#*B}95DoJclT$M0J}?a!u?cr1ayX(CGHAkB
zk=)h@Df`hGw*3v{-17D4&v+5NezceeRAXFhBO#8gu{doTX31J6%}#J1lixX<<0r#z
zZnE=3K~iZQc@|P%K5Md|Q<7B07(^k$$WyFcz<0&;L<Cn@Cl+t($+Pd|fq!OpxVJDk
z#hIsY8y8Oka7GWtIO@nj83L=MqX&R%m7oOVWQGoAAE%h@7WeDfa%=5KfdV~gnL-2t
zRKNO2OAyeH%H-@t`*-Y&>`|LL`)*`b$ScvJhAdUbVK~Et6!Y22ZsgT@RBYXPy&#05
z)=wN>1lnqAT3N(MnaU)Ey_}RDyW&WjHYzy4Psh6Fg;wV>oAXoE!fAV*Gp$-=Ep<>|
zmv@N4PM~1sZIMZdY{nv~nV~ZyjAN3Qh~x8kyH&jk&Gz4e;$|KI>f1N?tp?34DKo?{
z@2V`PbQ$;AYrtl*+IYP$?jv0JRaG$PXOC$ZDbXk%ELcfqjYbfcXK94U+U<U!dW;MC
zdF3t&*$)s1>%<RBFkLZ)IvuUJu%hhLGAzuCl#vTWqgnDPA5z{XWf=08Q=23|lM*Cx
z9<aM``xVC4GdFaYU*8=01<m;tPD9xykC@hTp0^uYf{!bT1R*i@=q_z-ud}-93agP9
za#sERktEIx#zQcL*0Q_|{34bcUVi-8<OL+#(tF{S0vuN)tv{q)(t@r9eeuF>gyzKM
zTXq5O%8GvifinQ9W3#l5<BDTOnz#w%Y+R?ex`6}13{Tu5aurD>F@Z!vHm-Q9OS-+2
z;mE<HpALTWvJC?p8>mp<)5=7q_k$|I>)}CCq3ZQShd-~7o)_Be8W_VZ9n>o?E)J^o
z^a4kHbf{-ZfVBd(e%0^g=eILsddiO0_RNxFaZY3L2OK75hEK-Oe(vh~0&+3D`|}$U
zip%6MRGP|^O@`-HdU3hM0>qvlATR<L?tedB{JT%}ug8o3GOhln9ZOwC`d?}+1_m~k
z|2P2S=5zl(dHYUV5Ez=6S=jQBU3K)35m*@Wkg2iA(975hnV4IMdpepZdCDpqd0H89
z7?bhwLUHpMeEWz^Xxt6#X-qAwzx8}h1mBJ`o*zPr(xN~9*1?_A-NxSLTlh-gZewlh
z#OcmM_V*#2-`9V8nvRU%?_Hd&c*xXc<O!VZ?5wRUoCz3dIcOPZ7?`LDOdY>nY;Jar
zRs;;RtYqI)IvSgDDt=p&|1sfri-*kI+1Z|xj?T@^jn<8c*3Qw4j)8-NgN~k&j**e(
zy9bSvhpn@LJB_Uq(f4|P--w0!e+;vAqW$}xXupFbbQbD#47Bug|61r@UN{RoTY|qW
zY+z{T;>`2o$3JJW|I6zCHqG}7-}5kizrF7(&TreZv5S$3BM+IFyflHBxt){qKOC+E
z4D_`0jI<17bpL!~|Bv;)Kg|Dm+uwKKpZn(i?!zhb?G82d5dOAM^D@#iGSkpA($KRj
zGcs{9b8s@!YjV^5mrma|>U)%sqsjM(|Hr7mbo$FEJ4fa3JI8DGe_FeG-nL;Ny8Bmf
z3FHipcqBzihAqIZ9l%4-q3Bd}P%W_#Ab&uS+n~R`kCNk9RN7>SU<ktL9eFyw<6wf1
z^}$;93p{WMqdOt*c-L9$c1F!Ym&&V8edot#$A^difBtUg2<33o)nR+uL2Yldng^#-
znNMY=5*7bQCbqE2ga|hX%JPXYxZ5Pptkv%whkSd9<9Mp8mU8(vEULnF`G}z)1d?y3
z_E7J#2Bbe8p);8^NJ|Jt1nCSfn-ZIw(w5MRs_7o8(ot(#W&5A=;AxT<Hak^Kkbd2_
z=)B8aRi@oT>lePX^-5-26AA`N4lm`Hj@SoXAJ@>!9E6Q;^We9eVFp{^uKw$PuB!1r
zis}}N6^_x!x#RSB1?mgM1&@VP3Ce);06)M`E^i>t^c}xO@Y^&+m~P&EstXI{OKC=q
zS>45S6v>EL*4aowJC(Js*#2yj#&F+8N*Sn^y6b`?X(A}{_H5XL8Y3rtn@9#W(n3My
zxQCM@Bvzz)Hi{zUw<n}_s@Z*<ij5x&X{TK4<FpvyWWxRSuv?A${c>$0-$qIg`&C>)
zDYO?Ke6cvzw?RNU8RS%%VSI|9aO(S#6GHFxK~gw5^u7(lHt<!gs&F4C1y=DqUuopf
zHy*}k1o^%~VKBY+Bt^qmA`r{N5sohKeM#%Yw@Iz8$D^q;D0S8l*=OOG@=pQYGn{>J
zz!?Tkx|4;Qy*)4tpga6vvtr+7%S1(sC10DhCT{qr<wA&<bhKQqwYnEFeH-!J>CHbj
TS>3e7CQYnqbaS)*d_VdN#0U0-

literal 0
HcmV?d00001

diff --git a/support/dist-docs-branch-23.06/ovn-ic.8.txt b/support/dist-docs-branch-23.06/ovn-ic.8.txt
new file mode 100644
index 00000000..e8e0176c
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-ic.8.txt
@@ -0,0 +1,308 @@
+ovn-ic(8)                         OVN Manual                         ovn-ic(8)
+
+NAME
+       ovn-ic - Open Virtual Network interconnection controller
+
+SYNOPSIS
+       ovn-ic [options]
+
+DESCRIPTION
+       ovn-ic,  OVN  interconnection controller, is a centralized daemon which
+       communicates with global interconnection databases IC_NB/IC_SB to  con‐
+       figure  and  exchange  data  with  local NB/SB for interconnecting with
+       other OVN deployments.
+
+OPTIONS
+       --ovnnb-db=database
+              The OVSDB database containing the OVN  Northbound  Database.  If
+              the  OVN_NB_DB environment variable is set, its value is used as
+              the default. Otherwise, the default is unix:/ovnnb_db.sock.
+
+       --ovnsb-db=database
+              The OVSDB database containing the OVN  Southbound  Database.  If
+              the  OVN_SB_DB environment variable is set, its value is used as
+              the default. Otherwise, the default is unix:/ovnsb_db.sock.
+
+       --ic-nb-db=database
+              The OVSDB database containing the OVN Interconnection Northbound
+              Database. If the OVN_IC_NB_DB environment variable is  set,  its
+              value  is  used  as  the  default.  Otherwise,  the  default  is
+              unix:/ovn_ic_nb_db.sock.
+
+       --ic-sb-db=database
+              The OVSDB database containing the OVN Interconnection Southbound
+              Database. If the OVN_IC_SB_DB environment variable is  set,  its
+              value  is  used  as  the  default.  Otherwise,  the  default  is
+              unix:/ovn_ic_sb_db.sock.
+
+       database in the above options must be an OVSDB active or  passive  con‐
+       nection method, as described in ovsdb(7).
+
+   Daemon Options
+       --pidfile[=pidfile]
+              Causes a file (by default, program.pid) to be created indicating
+              the  PID  of the running process. If the pidfile argument is not
+              specified, or if it does not begin with /, then it is created in
+              .
+
+              If --pidfile is not specified, no pidfile is created.
+
+       --overwrite-pidfile
+              By default, when --pidfile is specified and the  specified  pid‐
+              file already exists and is locked by a running process, the dae‐
+              mon refuses to start. Specify --overwrite-pidfile to cause it to
+              instead overwrite the pidfile.
+
+              When --pidfile is not specified, this option has no effect.
+
+       --detach
+              Runs  this  program  as a background process. The process forks,
+              and in the child it starts a new session,  closes  the  standard
+              file descriptors (which has the side effect of disabling logging
+              to  the  console), and changes its current directory to the root
+              (unless --no-chdir is specified). After the child completes  its
+              initialization, the parent exits.
+
+       --monitor
+              Creates  an  additional  process  to monitor this program. If it
+              dies due to a signal that indicates a programming  error  (SIGA�‐
+              BRT, SIGALRM, SIGBUS, SIGFPE, SIGILL, SIGPIPE, SIGSEGV, SIGXCPU,
+              or SIGXFSZ) then the monitor process starts a new copy of it. If
+              the daemon dies or exits for another reason, the monitor process
+              exits.
+
+              This  option  is  normally used with --detach, but it also func‐
+              tions without it.
+
+       --no-chdir
+              By default, when --detach is specified, the daemon  changes  its
+              current  working  directory  to  the root directory after it de‐
+              taches. Otherwise, invoking the daemon from a carelessly  chosen
+              directory  would  prevent  the administrator from unmounting the
+              file system that holds that directory.
+
+              Specifying --no-chdir suppresses this behavior,  preventing  the
+              daemon  from changing its current working directory. This may be
+              useful for collecting core files, since it is common behavior to
+              write core dumps into the current working directory and the root
+              directory is not a good directory to use.
+
+              This option has no effect when --detach is not specified.
+
+       --no-self-confinement
+              By default this daemon will try to self-confine itself  to  work
+              with  files  under  well-known  directories  determined at build
+              time. It is better to stick with this default behavior  and  not
+              to  use  this  flag  unless some other Access Control is used to
+              confine daemon. Note that in contrast to  other  access  control
+              implementations  that  are  typically enforced from kernel-space
+              (e.g. DAC or MAC), self-confinement is imposed  from  the  user-
+              space daemon itself and hence should not be considered as a full
+              confinement  strategy,  but instead should be viewed as an addi‐
+              tional layer of security.
+
+       --user=user:group
+              Causes this program to run as  a  different  user  specified  in
+              user:group,  thus  dropping  most  of the root privileges. Short
+              forms user and :group are also allowed,  with  current  user  or
+              group  assumed,  respectively.  Only daemons started by the root
+              user accepts this argument.
+
+              On   Linux,   daemons   will   be   granted   CAP_IPC_LOCK   and
+              CAP_NET_BIND_SERVICES  before  dropping root privileges. Daemons
+              that interact with a datapath, such  as  ovs-vswitchd,  will  be
+              granted  three  additional  capabilities,  namely CAP_NET_ADMIN,
+              CAP_NET_BROADCAST and CAP_NET_RAW. The  capability  change  will
+              apply even if the new user is root.
+
+              On Windows, this option is not currently supported. For security
+              reasons,  specifying  this  option will cause the daemon process
+              not to start.
+
+   Logging Options
+       -v[spec]
+       --verbose=[spec]
+            Sets logging levels. Without any spec,  sets  the  log  level  for
+            every  module and destination to dbg. Otherwise, spec is a list of
+            words separated by spaces or commas or colons, up to one from each
+            category below:
+
+            •      A valid module name, as displayed by the vlog/list  command
+                   on ovs-appctl(8), limits the log level change to the speci‐
+                   fied module.
+
+            •      syslog,  console, or file, to limit the log level change to
+                   only to the system log, to the console, or to a  file,  re‐
+                   spectively.  (If  --detach  is specified, the daemon closes
+                   its standard file descriptors, so logging  to  the  console
+                   will have no effect.)
+
+                   On  Windows  platform,  syslog is accepted as a word and is
+                   only useful along with the --syslog-target option (the word
+                   has no effect otherwise).
+
+            •      off, emer, err, warn, info, or  dbg,  to  control  the  log
+                   level.  Messages  of  the  given severity or higher will be
+                   logged, and messages of lower  severity  will  be  filtered
+                   out.  off filters out all messages. See ovs-appctl(8) for a
+                   definition of each log level.
+
+            Case is not significant within spec.
+
+            Regardless of the log levels set for file, logging to a file  will
+            not take place unless --log-file is also specified (see below).
+
+            For compatibility with older versions of OVS, any is accepted as a
+            word but has no effect.
+
+       -v
+       --verbose
+            Sets  the  maximum  logging  verbosity level, equivalent to --ver�‐
+            bose=dbg.
+
+       -vPATTERN:destination:pattern
+       --verbose=PATTERN:destination:pattern
+            Sets the log pattern for destination to pattern. Refer to  ovs-ap�‐
+            pctl(8) for a description of the valid syntax for pattern.
+
+       -vFACILITY:facility
+       --verbose=FACILITY:facility
+            Sets  the RFC5424 facility of the log message. facility can be one
+            of kern, user, mail, daemon, auth, syslog, lpr, news, uucp, clock,
+            ftp, ntp, audit, alert, clock2, local0,  local1,  local2,  local3,
+            local4, local5, local6 or local7. If this option is not specified,
+            daemon  is used as the default for the local system syslog and lo�‐
+            cal0 is used while sending a message to the  target  provided  via
+            the --syslog-target option.
+
+       --log-file[=file]
+            Enables  logging  to a file. If file is specified, then it is used
+            as the exact name for the log file. The default log file name used
+            if file is omitted is /usr/local/var/log/ovn/program.log.
+
+       --syslog-target=host:port
+            Send syslog messages to UDP port on host, in addition to the  sys‐
+            tem  syslog.  The host must be a numerical IP address, not a host‐
+            name.
+
+       --syslog-method=method
+            Specify method as how syslog messages should  be  sent  to  syslog
+            daemon. The following forms are supported:
+
+            •      libc,  to use the libc syslog() function. Downside of using
+                   this options is that libc adds fixed prefix to  every  mes‐
+                   sage  before  it is actually sent to the syslog daemon over
+                   /dev/log UNIX domain socket.
+
+            •      unix:file, to use a UNIX domain socket directly. It is pos‐
+                   sible to specify arbitrary message format with this option.
+                   However, rsyslogd 8.9 and older  versions  use  hard  coded
+                   parser  function anyway that limits UNIX domain socket use.
+                   If you want to use  arbitrary  message  format  with  older
+                   rsyslogd  versions, then use UDP socket to localhost IP ad‐
+                   dress instead.
+
+            •      udp:ip:port, to use a UDP socket. With this  method  it  is
+                   possible  to  use  arbitrary message format also with older
+                   rsyslogd. When sending syslog messages over UDP socket  ex‐
+                   tra precaution needs to be taken into account, for example,
+                   syslog daemon needs to be configured to listen on the spec‐
+                   ified  UDP  port, accidental iptables rules could be inter‐
+                   fering with local syslog traffic and there are  some  secu‐
+                   rity  considerations  that apply to UDP sockets, but do not
+                   apply to UNIX domain sockets.
+
+            •      null, to discard all messages logged to syslog.
+
+            The default is taken from the OVS_SYSLOG_METHOD environment  vari‐
+            able; if it is unset, the default is libc.
+
+   PKI Options
+       PKI  configuration  is required in order to use SSL for the connections
+       to the Northbound and Southbound databases.
+
+              -p privkey.pem
+              --private-key=privkey.pem
+                   Specifies a PEM file containing the  private  key  used  as
+                   identity for outgoing SSL connections.
+
+              -c cert.pem
+              --certificate=cert.pem
+                   Specifies  a  PEM file containing a certificate that certi‐
+                   fies the private key specified on -p or --private-key to be
+                   trustworthy. The certificate must be signed by the certifi‐
+                   cate authority (CA) that the peer in SSL  connections  will
+                   use to verify it.
+
+              -C cacert.pem
+              --ca-cert=cacert.pem
+                   Specifies a PEM file containing the CA certificate for ver‐
+                   ifying certificates presented to this program by SSL peers.
+                   (This  may  be  the  same certificate that SSL peers use to
+                   verify the certificate specified on -c or --certificate, or
+                   it may be a different one, depending on the PKI  design  in
+                   use.)
+
+              -C none
+              --ca-cert=none
+                   Disables  verification  of  certificates  presented  by SSL
+                   peers. This introduces a security risk,  because  it  means
+                   that  certificates  cannot be verified to be those of known
+                   trusted hosts.
+
+   Other Options
+       --unixctl=socket
+              Sets the name of the control socket on which program listens for
+              runtime management commands (see  RUNTIME  MANAGEMENT  COMMANDS,
+              below).  If  socket  does not begin with /, it is interpreted as
+              relative to . If --unixctl is  not  used  at  all,  the  default
+              socket is /program.pid.ctl, where pid is program’s process ID.
+
+              On Windows a local named pipe is used to listen for runtime man‐
+              agement  commands.  A  file  is  created in the absolute path as
+              pointed by socket or if --unixctl is not used at all, a file  is
+              created  as  program in the configured OVS_RUNDIR directory. The
+              file exists just to mimic the behavior of a Unix domain socket.
+
+              Specifying none for socket disables the control socket feature.
+
+
+
+       -h
+       --help
+            Prints a brief help message to the console.
+
+       -V
+       --version
+            Prints version information to the console.
+
+RUNTIME MANAGEMENT COMMANDS
+       ovs-appctl can send commands to a running ovn-ic process. The currently
+       supported commands are described below.
+
+              exit   Causes ovn-ic to gracefully terminate.
+
+              pause  Pauses the ovn-ic operation from processing any  database
+                     changes.  This will also instruct ovn-ic to drop any lock
+                     on SB DB.
+
+              resume Resumes the ovn-ic operation  to  process  database  con‐
+                     tents.  This  will also instruct ovn-northd to aspire for
+                     the lock on SB DB.
+
+              is-paused
+                     Returns "true" if ovn-ic  is  currently  paused,  "false"
+                     otherwise.
+
+              status Prints  this  server’s status. Status will be "active" if
+                     ovn-ic has acquired OVSDB lock on SB DB, "standby" if  it
+                     has not or "paused" if this instance is paused.
+
+ACTIVE-STANDBY FOR HIGH AVAILABILITY
+       You  may run ovn-ic more than once in an OVN deployment. When connected
+       to a standalone or clustered DB setup, OVN  will  automatically  ensure
+       that  only  one  of  them is active at a time. If multiple instances of
+       ovn-ic are running and the active ovn-ic fails, one of the hot  standby
+       instances of ovn-ic will automatically take over.
+
+OVN 23.06.3                         ovn-ic                           ovn-ic(8)
diff --git a/support/dist-docs-branch-23.06/ovn-nb.5 b/support/dist-docs-branch-23.06/ovn-nb.5
new file mode 100644
index 00000000..c098c2f9
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-nb.5
@@ -0,0 +1,3665 @@
+'\" p
+.\" -*- nroff -*-
+.TH "ovn-nb" 5 " DB Schema 7.0.4" "Open vSwitch 23.06.3" "Open vSwitch Manual"
+.fp 5 L CR              \\" Make fixed-width font available as \\fL.
+.de TQ
+.  br
+.  ns
+.  TP "\\$1"
+..
+.de ST
+.  PP
+.  RS -0.15in
+.  I "\\$1"
+.  RE
+..
+.SH NAME
+ovn-nb \- OVN_Northbound database schema
+.PP
+.PP
+.PP
+.PP
+This database is the interface between OVN and the cloud management system (CMS), such as OpenStack, running above it\[char46] The CMS produces almost all of the contents of the database\[char46] The \fBovn\-northd\fR program monitors the database contents, transforms it, and stores it into the \fBOVN_Southbound\fR database\[char46]
+.PP
+.PP
+We generally speak of ``the\(cq\(cq CMS, but one can imagine scenarios in which multiple CMSes manage different parts of an OVN deployment\[char46]
+.SS "External IDs"
+.PP
+.PP
+Each of the tables in this database contains a special column, named \fBexternal_ids\fR\[char46] This column has the same form and purpose each place it appears\[char46]
+.RS
+.TP
+\fBexternal_ids\fR: map of string-string pairs
+Key-value pairs for use by the CMS\[char46] The CMS might use certain pairs, for example, to identify entities in its own configuration that correspond to those in this database\[char46]
+.RE
+.SH "TABLE SUMMARY"
+.PP
+The following list summarizes the purpose of each of the tables in the
+\fBOVN_Northbound\fR database.  Each table is described in more detail on a later
+page.
+.IP "Table" 1in
+Purpose
+.TQ 1in
+\fBNB_Global\fR
+Northbound configuration
+.TQ 1in
+\fBCopp\fR
+Control plane protection
+.TQ 1in
+\fBLogical_Switch\fR
+L2 logical switch
+.TQ 1in
+\fBLogical_Switch_Port\fR
+L2 logical switch port
+.TQ 1in
+\fBForwarding_Group\fR
+forwarding group
+.TQ 1in
+\fBAddress_Set\fR
+Address Sets
+.TQ 1in
+\fBPort_Group\fR
+Port Groups
+.TQ 1in
+\fBLoad_Balancer\fR
+load balancer
+.TQ 1in
+\fBLoad_Balancer_Group\fR
+load balancer group
+.TQ 1in
+\fBLoad_Balancer_Health_Check\fR
+load balancer
+.TQ 1in
+\fBACL\fR
+Access Control List (ACL) rule
+.TQ 1in
+\fBLogical_Router\fR
+L3 logical router
+.TQ 1in
+\fBQoS\fR
+QoS rule
+.TQ 1in
+\fBMirror\fR
+Mirror Entry
+.TQ 1in
+\fBMeter\fR
+Meter entry
+.TQ 1in
+\fBMeter_Band\fR
+Band for meter entries
+.TQ 1in
+\fBLogical_Router_Port\fR
+L3 logical router port
+.TQ 1in
+\fBLogical_Router_Static_Route\fR
+Logical router static routes
+.TQ 1in
+\fBLogical_Router_Policy\fR
+Logical router policies
+.TQ 1in
+\fBNAT\fR
+NAT rules
+.TQ 1in
+\fBDHCP_Options\fR
+DHCP options
+.TQ 1in
+\fBConnection\fR
+OVSDB client connections\[char46]
+.TQ 1in
+\fBDNS\fR
+Native DNS resolution
+.TQ 1in
+\fBSSL\fR
+SSL configuration\[char46]
+.TQ 1in
+\fBGateway_Chassis\fR
+Gateway_Chassis configuration\[char46]
+.TQ 1in
+\fBHA_Chassis_Group\fR
+HA_Chassis_Group configuration\[char46]
+.TQ 1in
+\fBHA_Chassis\fR
+HA_Chassis configuration\[char46]
+.TQ 1in
+\fBBFD\fR
+BFD configuration\[char46]
+.TQ 1in
+\fBStatic_MAC_Binding\fR
+Static_MAC_Binding configuration\[char46]
+.TQ 1in
+\fBChassis_Template_Var\fR
+Chassis_Template_Var configuration\[char46]
+.\" check if in troff mode (TTY)
+.if t \{
+.bp
+.SH "TABLE RELATIONSHIPS"
+.PP
+The following diagram shows the relationship among tables in the
+database.  Each node represents a table.  Tables that are part of the
+``root set'' are shown with double borders.  Each edge leads from the
+table that contains it and points to the table that its value
+represents.  Edges are labeled with their column names, followed by a
+constraint on the number of allowed values: \fB?\fR for zero or one,
+\fB*\fR for zero or more, \fB+\fR for one or more.  Thick lines
+represent strong references; thin lines represent weak references.
+.RS -1in
+.ps -3
+.PS
+linethick = 1;
+linethick = 0.500000;
+box at 0.297039,0.190275 wid 0.330865 height 0.152220 "NB_Global"
+box at 0.297039,0.190275 wid 0.275310 height 0.096664
+linethick = 1.000000;
+box at 1.636365,0.304440 wid 0.330865 height 0.152220 "Connection"
+linethick = 1.000000;
+box at 1.636365,0.076110 wid 0.228330 height 0.152220 "SSL"
+linethick = 0.500000;
+box at 1.636365,2.131080 wid 0.228330 height 0.152220 "Copp"
+box at 1.636365,2.131080 wid 0.172774 height 0.096664
+linethick = 0.500000;
+box at 0.297039,1.357285 wid 0.432335 height 0.152220 "Logical_Switch"
+box at 0.297039,1.357285 wid 0.376780 height 0.096664
+linethick = 1.000000;
+box at 1.636365,0.549697 wid 0.559195 height 0.152220 "Logical_Switch_Port"
+linethick = 1.000000;
+box at 1.636365,0.778027 wid 0.228330 height 0.152220 "ACL"
+linethick = 1.000000;
+box at 1.636365,1.234687 wid 0.228330 height 0.152220 "QoS"
+linethick = 0.500000;
+box at 2.880550,2.570813 wid 0.419671 height 0.152220 "Load_Balancer"
+box at 2.880550,2.570813 wid 0.364115 height 0.096664
+linethick = 0.500000;
+box at 1.636365,2.570813 wid 0.594084 height 0.152220 "Load_Balancer_Group"
+box at 1.636365,2.570813 wid 0.538529 height 0.096664
+linethick = 0.500000;
+box at 1.636365,1.006357 wid 0.228330 height 0.152220 "DNS"
+box at 1.636365,1.006357 wid 0.172774 height 0.096664
+linethick = 1.000000;
+box at 1.636365,1.463017 wid 0.511642 height 0.152220 "Forwarding_Group"
+linethick = 0.500000;
+box at 2.880550,0.663862 wid 0.429169 height 0.152220 "DHCP_Options"
+box at 2.880550,0.663862 wid 0.373614 height 0.096664
+linethick = 0.500000;
+box at 2.880550,0.393245 wid 0.228330 height 0.152220 "Mirror"
+box at 2.880550,0.393245 wid 0.172774 height 0.096664
+linethick = 0.500000;
+box at 4.132773,1.446090 wid 0.530669 height 0.152220 "HA_Chassis_Group"
+box at 4.132773,1.446090 wid 0.475114 height 0.096664
+linethick = 0.500000;
+box at 2.880550,1.577182 wid 0.356225 height 0.152220 "Address_Set"
+box at 2.880550,1.577182 wid 0.300670 height 0.096664
+linethick = 0.500000;
+box at 0.297039,0.617343 wid 0.340394 height 0.152220 "Port_Group"
+box at 0.297039,0.617343 wid 0.284839 height 0.096664
+linethick = 1.000000;
+box at 4.132773,2.570813 wid 0.774830 height 0.152220 "Load_Balancer_Health_Check"
+linethick = 0.500000;
+box at 0.297039,3.467267 wid 0.228330 height 0.152220 "Meter"
+box at 0.297039,3.467267 wid 0.172774 height 0.096664
+linethick = 1.000000;
+box at 1.636365,3.467267 wid 0.356225 height 0.152220 "Meter_Band"
+linethick = 0.500000;
+box at 0.297039,2.570813 wid 0.429169 height 0.152220 "Logical_Router"
+box at 0.297039,2.570813 wid 0.373614 height 0.096664
+linethick = 1.000000;
+box at 2.880550,1.847768 wid 0.556029 height 0.152220 "Logical_Router_Port"
+linethick = 1.000000;
+box at 1.636365,3.238937 wid 0.752637 height 0.152220 "Logical_Router_Static_Route"
+linethick = 1.000000;
+box at 1.636365,3.010577 wid 0.603583 height 0.152220 "Logical_Router_Policy"
+linethick = 1.000000;
+box at 1.636365,1.691347 wid 0.228330 height 0.152220 "NAT"
+linethick = 1.000000;
+box at 4.132773,1.847768 wid 0.473587 height 0.152220 "Gateway_Chassis"
+linethick = 0.500000;
+box at 2.880550,3.238937 wid 0.228330 height 0.152220 "BFD"
+box at 2.880550,3.238937 wid 0.172774 height 0.096664
+linethick = 1.000000;
+box at 5.123116,1.446090 wid 0.356225 height 0.152220 "HA_Chassis"
+linethick = 0.500000;
+box at 0.297039,3.695597 wid 0.568724 height 0.152220 "Static_MAC_Binding"
+box at 0.297039,3.695597 wid 0.513169 height 0.096664
+linethick = 0.500000;
+box at 0.297039,3.923927 wid 0.594084 height 0.152220 "Chassis_Template_Var"
+box at 0.297039,3.923927 wid 0.538529 height 0.096664
+linethick = 1.000000;
+spline -> from 0.464454,0.204273 to 0.464454,0.204273 to 0.720579,0.226245 to 1.214046,0.268574 to 1.469684,0.290506
+"connections*" at 0.927050,0.296512
+linethick = 1.000000;
+spline -> from 0.464545,0.169546 to 0.464545,0.169546 to 0.528599,0.161819 to 0.602791,0.153374 to 0.670194,0.146935 to 0.977740,0.117560 to 1.341637,0.093740 to 1.520921,0.082725
+"ssl?" at 0.927050,0.178119
+linethick = 0.500000;
+spline -> from 0.358539,1.434552 to 0.358539,1.434552 to 0.424237,1.517146 to 0.539772,1.645285 to 0.670194,1.712475 to 0.876696,1.818877 to 1.004013,1.661755 to 1.183937,1.808678 to 1.253471,1.865456 to 1.195384,1.933498 to 1.260047,1.995787 to 1.331347,2.064438 to 1.440153,2.098657 to 1.521743,2.115462
+"copp?" at 0.927050,1.835621
+linethick = 1.000000;
+spline -> from 0.336924,1.279166 to 0.336924,1.279166 to 0.423354,1.090535 to 0.639233,0.624132 to 0.670194,0.603583 to 0.778727,0.531583 to 1.111267,0.527229 to 1.355062,0.534871
+"ports*" at 0.927050,0.634788
+linethick = 1.000000;
+spline -> from 0.357352,1.280322 to 0.357352,1.280322 to 0.422806,1.196297 to 0.538950,1.064231 to 0.670194,0.992596 to 0.951071,0.839311 to 1.334878,0.795471 to 1.521378,0.782959
+"acls*" at 0.927050,1.019570
+linethick = 1.000000;
+spline -> from 0.513712,1.328059 to 0.513712,1.328059 to 0.564888,1.321513 to 0.619444,1.314968 to 0.670194,1.309731 to 0.977618,1.277948 to 1.341576,1.252984 to 1.520891,1.241537
+"qos_rules*" at 0.927050,1.336674
+linethick = 0.500000;
+spline -> from 0.500804,1.435374 to 0.500804,1.435374 to 0.742499,1.530724 to 1.124814,1.684406 to 1.183937,1.725170 to 1.224427,1.753087 to 1.216999,1.781674 to 1.260047,1.805512 to 1.558581,1.970671 to 1.699536,1.821221 to 2.012683,1.956666 to 2.330153,2.093969 to 2.647106,2.360810 to 2.793085,2.492907
+"load_balancer*" at 1.636365,1.983609
+linethick = 1.000000;
+spline -> from 0.320332,1.435161 to 0.320332,1.435161 to 0.359513,1.577486 to 0.463358,1.878425 to 0.670194,2.025378 to 0.859008,2.159515 to 1.015094,1.954535 to 1.183937,2.113118 to 1.291252,2.213918 to 1.162200,2.325495 to 1.260047,2.435520 to 1.281966,2.460180 to 1.308757,2.480334 to 1.337801,2.496834
+"load_balancer_group*" at 0.927050,2.140061
+linethick = 0.500000;
+spline -> from 0.448714,1.279135 to 0.448714,1.279135 to 0.514899,1.246712 to 0.594937,1.211123 to 0.670194,1.187103 to 0.969672,1.091509 to 1.338653,1.039693 to 1.520312,1.018291
+"dns_records*" at 0.927050,1.214046
+linethick = 1.000000;
+spline -> from 0.515082,1.374273 to 0.515082,1.374273 to 0.750597,1.392996 to 1.128955,1.423044 to 1.379052,1.442893
+"forwarding_groups*" at 0.927050,1.455071
+linethick = 0.500000;
+spline -> from 1.917637,0.529269 to 1.917637,0.529269 to 2.093147,0.521567 to 2.324339,0.521201 to 2.526426,0.552863 to 2.572396,0.560048 to 2.620589,0.572165 to 2.666012,0.585834
+"dhcpv4_options?" at 2.307625,0.584038
+linethick = 0.500000;
+spline -> from 1.917546,0.592227 to 1.917546,0.592227 to 1.974111,0.599990 to 2.033294,0.607388 to 2.088793,0.613112 to 2.283696,0.633144 to 2.506576,0.646631 to 2.665372,0.654637
+"dhcpv6_options?" at 2.307625,0.677075
+linethick = 0.500000;
+spline -> from 1.918002,0.482416 to 1.918002,0.482416 to 1.974263,0.470573 to 2.033233,0.459491 to 2.088793,0.451363 to 2.328235,0.416443 to 2.611852,0.402043 to 2.764924,0.396472
+"mirror_rules*" at 2.307625,0.482568
+linethick = 1.000000;
+spline -> from 1.917424,0.622214 to 1.917424,0.622214 to 1.950243,0.634423 to 1.982696,0.648275 to 2.012683,0.663862 to 2.050708,0.683620 to 2.051195,0.702465 to 2.088793,0.723045 to 2.688571,1.051384 to 3.466354,1.278313 to 3.866084,1.382066
+"ha_chassis_group?" at 2.880550,1.197149
+linethick = 1.000000;
+spline -> from 3.091588,2.570813 to 3.091588,2.570813 to 3.268772,2.570813 to 3.528460,2.570813 to 3.744003,2.570813
+"health_check*" at 3.452045,2.600953
+linethick = 0.500000;
+spline -> from 1.935021,2.570813 to 1.935021,2.570813 to 2.161311,2.570813 to 2.468217,2.570813 to 2.669178,2.570813
+"load_balancer*" at 2.307625,2.600953
+linethick = 1.000000;
+spline -> from 4.400071,1.446090 to 4.400071,1.446090 to 4.572080,1.446090 to 4.792494,1.446090 to 4.943497,1.446090
+"ha_chassis*" at 4.732520,1.476230
+linethick = 0.500000;
+spline -> from 0.451363,0.539194 to 0.451363,0.539194 to 0.516726,0.509389 to 0.595363,0.478975 to 0.670194,0.464058 to 0.898737,0.418483 to 1.162687,0.447618 to 1.356219,0.483816
+"ports*" at 0.927050,0.495233
+linethick = 1.000000;
+spline -> from 0.468016,0.648518 to 0.468016,0.648518 to 0.531187,0.659691 to 0.603857,0.671716 to 0.670194,0.680758 to 0.977039,0.722588 to 1.341241,0.754646 to 1.520739,0.769289
+"acls*" at 0.927050,0.765849
+linethick = 1.000000;
+spline -> from 0.412455,3.467267 to 0.412455,3.467267 to 0.643921,3.467267 to 1.179066,3.467267 to 1.457202,3.467267
+"bands+" at 0.927050,3.497407
+linethick = 0.500000;
+spline -> from 0.373974,2.493729 to 0.373974,2.493729 to 0.443265,2.425321 to 0.554020,2.328692 to 0.670194,2.278003 to 0.747218,2.244423 to 1.285772,2.174280 to 1.521774,2.144688
+"copp?" at 0.927050,2.304976
+linethick = 0.500000;
+spline -> from 0.513042,2.619767 to 0.513042,2.619767 to 0.564249,2.630148 to 0.618987,2.640043 to 0.670194,2.646923 to 1.487798,2.757100 to 1.709979,2.765381 to 2.526426,2.646923 to 2.573188,2.640165 to 2.623025,2.630696 to 2.669969,2.620741
+"load_balancer*" at 1.636365,2.761636
+linethick = 1.000000;
+spline -> from 0.513621,2.570813 to 0.513621,2.570813 to 0.736349,2.570813 to 1.088038,2.570813 to 1.337557,2.570813
+"load_balancer_group*" at 0.927050,2.600953
+linethick = 1.000000;
+spline -> from 0.512342,2.532088 to 0.512342,2.532088 to 0.954115,2.450803 to 1.941292,2.268078 to 2.012683,2.245245 to 2.277577,2.160489 to 2.567921,2.015119 to 2.735454,1.925644
+"ports*" at 1.636365,2.419141
+linethick = 1.000000;
+spline -> from 0.336376,2.648171 to 0.336376,2.648171 to 0.390962,2.758896 to 0.507106,2.960375 to 0.670194,3.061449 to 0.845278,3.169829 to 1.070320,3.215191 to 1.258677,3.233153
+"static_routes*" at 0.927050,3.252028
+linethick = 1.000000;
+spline -> from 0.377018,2.648993 to 0.377018,2.648993 to 0.446705,2.715848 to 0.556212,2.808885 to 0.670194,2.858357 to 0.880349,2.949567 to 1.137540,2.986861 to 1.333082,3.001778
+"policies*" at 0.927050,3.015326
+linethick = 1.000000;
+spline -> from 0.325203,2.493150 to 0.325203,2.493150 to 0.370047,2.361663 to 0.479706,2.096678 to 0.670194,1.965130 to 0.861322,1.833094 to 0.965410,1.947716 to 1.183937,1.868927 to 1.220348,1.855805 to 1.224823,1.842684 to 1.260047,1.826640 to 1.345716,1.787550 to 1.446273,1.751565 to 1.521226,1.726540
+"nat*" at 0.927050,1.992073
+linethick = 1.000000;
+spline -> from 3.125990,1.769862 to 3.125990,1.769862 to 3.345491,1.699019 to 3.667284,1.595022 to 3.886785,1.524148
+"ha_chassis_group?" at 3.452045,1.755279
+linethick = 1.000000;
+spline -> from 3.159174,1.847768 to 3.159174,1.847768 to 3.379588,1.847768 to 3.685551,1.847768 to 3.894396,1.847768
+"gateway_chassis*" at 3.452045,1.877908
+linethick = 0.500000;
+spline -> from 2.014693,3.238937 to 2.014693,3.238937 to 2.272584,3.238937 to 2.597878,3.238937 to 2.765411,3.238937
+"bfd?" at 2.307625,3.269077
+linethick = 1.000000;
+spline -> from 1.751474,1.662851 to 1.751474,1.662851 to 1.826396,1.642271 to 1.926923,1.612040 to 2.012683,1.577182 to 2.047907,1.562843 to 2.051834,1.547012 to 2.088793,1.538061 to 2.277851,1.492334 to 2.332224,1.527223 to 2.526426,1.538061 to 2.583173,1.541227 to 2.644883,1.547255 to 2.700444,1.553649
+"allowed_ext_ips?" at 2.307625,1.565004
+linethick = 1.000000;
+spline -> from 1.752448,1.680996 to 1.752448,1.680996 to 1.968113,1.661086 to 2.442887,1.617216 to 2.700961,1.593378
+"exempted_ext_ips?" at 2.307625,1.674938
+linethick = 0.500000;
+spline -> from 1.752448,1.705503 to 1.752448,1.705503 to 1.942540,1.729554 to 2.334050,1.779117 to 2.600922,1.812910
+"gateway_port?" at 2.307625,1.831389
+.ps +3
+.PE
+.RE\}
+.bp
+.SH "NB_Global TABLE"
+.PP
+.PP
+.PP
+Northbound configuration for an OVN system\[char46] This table must have exactly one row\[char46]
+.SS "Summary:
+.TQ .25in
+\fIIdentity:\fR
+.RS .25in
+.TQ 2.75in
+\fBname\fR
+string
+.RE
+.TQ .25in
+\fIStatus:\fR
+.RS .25in
+.TQ 2.75in
+\fBnb_cfg\fR
+integer
+.TQ 2.75in
+\fBnb_cfg_timestamp\fR
+integer
+.TQ 2.75in
+\fBsb_cfg\fR
+integer
+.TQ 2.75in
+\fBsb_cfg_timestamp\fR
+integer
+.TQ 2.75in
+\fBhv_cfg\fR
+integer
+.TQ 2.75in
+\fBhv_cfg_timestamp\fR
+integer
+.RE
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.RE
+.TQ .25in
+\fICommon options:\fR
+.RS .25in
+.TQ 2.75in
+\fBoptions\fR
+map of string-string pairs
+.TQ .25in
+\fIOptions for configuring OVS BFD:\fR
+.RS .25in
+.TQ 2.50in
+\fBoptions : bfd-min-rx\fR
+optional string
+.TQ 2.50in
+\fBoptions : bfd-decay-min-rx\fR
+optional string
+.TQ 2.50in
+\fBoptions : bfd-min-tx\fR
+optional string
+.TQ 2.50in
+\fBoptions : bfd-mult\fR
+optional string
+.RE
+.TQ 2.75in
+\fBoptions : mac_prefix\fR
+optional string
+.TQ 2.75in
+\fBoptions : mac_binding_removal_limit\fR
+optional string, containing an integer, in range 0 to 4,294,967,295
+.TQ 2.75in
+\fBoptions : controller_event\fR
+optional string, either \fBtrue\fR or \fBfalse\fR
+.TQ 2.75in
+\fBoptions : northd_probe_interval\fR
+optional string
+.TQ 2.75in
+\fBoptions : ic_probe_interval\fR
+optional string
+.TQ 2.75in
+\fBoptions : nbctl_probe_interval\fR
+optional string
+.TQ 2.75in
+\fBoptions : northd_trim_timeout\fR
+optional string
+.TQ 2.75in
+\fBoptions : use_logical_dp_groups\fR
+optional string
+.TQ 2.75in
+\fBoptions : use_parallel_build\fR
+optional string
+.TQ 2.75in
+\fBoptions : ignore_lsp_down\fR
+optional string
+.TQ 2.75in
+\fBoptions : use_ct_inv_match\fR
+optional string
+.TQ 2.75in
+\fBoptions : default_acl_drop\fR
+optional string
+.TQ 2.75in
+\fBoptions : debug_drop_domain_id\fR
+optional string
+.TQ 2.75in
+\fBoptions : debug_drop_collector_set\fR
+optional string
+.TQ 2.75in
+\fBoptions : use_common_zone\fR
+optional string, either \fBtrue\fR or \fBfalse\fR
+.TQ .25in
+\fIOptions for configuring interconnection route advertisement:\fR
+.RS .25in
+.TQ 2.50in
+\fBoptions : ic-route-adv\fR
+optional string
+.TQ 2.50in
+\fBoptions : ic-route-learn\fR
+optional string
+.TQ 2.50in
+\fBoptions : ic-route-adv-default\fR
+optional string
+.TQ 2.50in
+\fBoptions : ic-route-learn-default\fR
+optional string
+.TQ 2.50in
+\fBoptions : ic-route-blacklist\fR
+optional string
+.RE
+.RE
+.TQ .25in
+\fIConnection Options:\fR
+.RS .25in
+.TQ 2.75in
+\fBconnections\fR
+set of \fBConnection\fRs
+.TQ 2.75in
+\fBssl\fR
+optional \fBSSL\fR
+.RE
+.TQ .25in
+\fISecurity Configurations:\fR
+.RS .25in
+.TQ 2.75in
+\fBipsec\fR
+boolean
+.RE
+.TQ .25in
+\fIRead-only Options:\fR
+.RS .25in
+.TQ 2.75in
+\fBoptions : max_tunid\fR
+optional string
+.RE
+.SS "Details:
+.ST "Identity:"
+.PP
+.IP "\fBname\fR: string"
+The name of the OVN cluster, which uniquely identifies the OVN cluster throughout all OVN clusters supposed to interconnect with each other\[char46]
+.ST "Status:"
+.PP
+These columns allow a client to track the overall configuration state of the system\[char46]
+.IP "\fBnb_cfg\fR: integer"
+Sequence number for client to increment\[char46] When a client modifies any part of the northbound database configuration and wishes to wait for \fBovn\-northd\fR and possibly all of the hypervisors to finish applying the changes, it may increment this sequence number\[char46]
+.IP "\fBnb_cfg_timestamp\fR: integer"
+The timestamp, in milliseconds since the epoch, when \fBovn\-northd\fR sees the latest \fBnb_cfg\fR and starts processing\[char46]
+.IP
+To print the timestamp as a human-readable date:
+.IP
+.nf
+\fB
+.br
+\fB          date \-d \(dq@$(ovn\-nbctl get NB_Global \[char46] nb_cfg_timestamp | sed \(cqs/\[char46]\[char46]\[char46]$//\(cq)\(dq
+.br
+\fB        \fR
+.fi
+.IP "\fBsb_cfg\fR: integer"
+Sequence number that \fBovn\-northd\fR sets to the value of \fBnb_cfg\fR after it finishes applying the corresponding configuration changes to the \fBOVN_Southbound\fR database\[char46]
+.IP "\fBsb_cfg_timestamp\fR: integer"
+The timestamp, in milliseconds since the epoch, when \fBovn\-northd\fR finishes applying the corresponding configuration changes to the \fBOVN_Southbound\fR database successfully\[char46]
+.IP "\fBhv_cfg\fR: integer"
+Sequence number that \fBovn\-northd\fR sets to the smallest sequence number of all the chassis in the system, as reported in the \fBChassis_Private\fR table in the southbound database\[char46] Thus, \fBhv_cfg\fR equals \fBnb_cfg\fR if all chassis are caught up with the northbound configuration (which may never happen, if any chassis is down)\[char46] This value can regress, if a chassis was removed from the system and rejoins before catching up\[char46]
+.IP
+If there are no chassis, then \fBovn\-northd\fR copies \fBnb_cfg\fR to \fBhv_cfg\fR\[char46] Thus, in this case, the (nonexistent) hypervisors are always considered to be caught up\[char46] This means that hypervisors can be \(dqcaught up\(dq even in cases where \fBsb_cfg\fR would show that the southbound database is not\[char46] To detect when both the hypervisors and the southbound database are caught up, a client should take the smaller of \fBsb_cfg\fR and \fBhv_cfg\fR\[char46]
+.IP "\fBhv_cfg_timestamp\fR: integer"
+The largest timestamp, in milliseconds since the epoch, of the smallest sequence number of all the chassis in the system, as reported in the \fBChassis_Private\fR table in the southbound database\[char46] In other words, this timestamp reflects the time when the slowest chassis catches up with the northbound configuration, which is useful for end-to-end control plane latency measurement\[char46]
+.ST "Common Columns:"
+.PP
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+See \fBExternal IDs\fR at the beginning of this document\[char46]
+.ST "Common options:"
+.PP
+.IP "\fBoptions\fR: map of string-string pairs"
+This column provides general key/value settings\[char46] The supported options are described individually below\[char46]
+.ST "Options for configuring OVS BFD:"
+.PP
+.PP
+.PP
+These options apply when \fBovn\-controller\fR configures OVS BFD on tunnels interfaces\[char46] Please note these parameters refer to legacy OVS BFD implementation and not to OVN BFD one\[char46]
+.IP "\fBoptions : bfd-min-rx\fR: optional string"
+BFD option \fBmin\-rx\fR value to use when configuring BFD on tunnel interfaces\[char46]
+.IP "\fBoptions : bfd-decay-min-rx\fR: optional string"
+BFD option \fBdecay\-min\-rx\fR value to use when configuring BFD on tunnel interfaces\[char46]
+.IP "\fBoptions : bfd-min-tx\fR: optional string"
+BFD option \fBmin\-tx\fR value to use when configuring BFD on tunnel interfaces\[char46]
+.IP "\fBoptions : bfd-mult\fR: optional string"
+BFD option \fBmult\fR value to use when configuring BFD on tunnel interfaces\[char46]
+.IP "\fBoptions : mac_prefix\fR: optional string"
+Configure a given OUI to be used as prefix when L2 address is dynamically assigned, e\[char46]g\[char46] \fB00:11:22\fR
+.IP "\fBoptions : mac_binding_removal_limit\fR: optional string, containing an integer, in range 0 to 4,294,967,295"
+MAC binding aging bulk removal limit\[char46] This limits how many rows can expire in a single transaction\[char46] Default value is 0 which is unlimited\[char46] When we hit the limit next batch removal is delayed by 5 s\[char46]
+.IP "\fBoptions : controller_event\fR: optional string, either \fBtrue\fR or \fBfalse\fR"
+Value set by the CMS to enable/disable ovn-controller event reporting\[char46] Traffic into OVS can raise a \(cqcontroller\(cq event that results in a Controller_Event being written to the \fBController_Event\fR table in SBDB\[char46] When the CMS has seen the event and taken appropriate action, it can remove the corresponding row in \fBController_Event\fR table\[char46] The intention is for a CMS to see the events and take some sort of action\[char46] Please see the \fBController_Event\fR table in SBDB\[char46] It is possible to associate a meter to each controller event type in order to not overload the pinctrl thread under heavy load\[char46] Each event type relies on a meter with a defined name:
+.RS
+.IP \(bu
+empty_lb_backends: event-elb
+.RE
+.IP "\fBoptions : northd_probe_interval\fR: optional string"
+The inactivity probe interval of the connection to the OVN Northbound and Southbound databases from \fBovn\-northd\fR, in milliseconds\[char46] If the value is zero, it disables the connection keepalive feature\[char46]
+.IP
+If the value is nonzero, then it will be forced to a value of at least 1000 ms\[char46]
+.IP "\fBoptions : ic_probe_interval\fR: optional string"
+The inactivity probe interval of the connection to the OVN Northbound and Southbound databases from \fBovn\-ic\fR, in milliseconds\[char46] If the value is zero, it disables the connection keepalive feature\[char46]
+.IP
+If the value is nonzero, then it will be forced to a value of at least 1000 ms\[char46]
+.IP "\fBoptions : nbctl_probe_interval\fR: optional string"
+The inactivity probe interval of the connection to the OVN Northbound database from \fBovn\-nbctl\fR utility, in milliseconds\[char46] If the value is zero, it disables the connection keepalive feature\[char46]
+.IP
+If the value is nonzero, then it will be forced to a value of at least 1000 ms\[char46]
+.IP
+If the value is less than zero, then the default inactivity probe interval for \fBovn\-nbctl\fR would be left intact (120000 ms)\[char46]
+.IP "\fBoptions : northd_trim_timeout\fR: optional string"
+When used, this configuration value specifies the time, in milliseconds, since the last \fBovn\-northd\fR active operation after which memory trimming is performed\[char46] By default this is set to 30000 (30 seconds)\[char46]
+.IP "\fBoptions : use_logical_dp_groups\fR: optional string"
+Note: This option is deprecated, the only behavior is to always combine logical flows by datapath groups\[char46] Changing the value or removing this option all toghether will have no effect\[char46]
+.IP
+\fBovn\-northd\fR combines logical flows that differs only by logical datapath into a single logical flow with logical datapath group attached\[char46]
+.IP "\fBoptions : use_parallel_build\fR: optional string"
+If set to \fBtrue\fR, \fBovn\-northd\fR will attempt to compute logical flows in parallel\[char46]
+.IP
+Parallel computation is enabled only if the system has 4 or more cores/threads available to be used by ovn-northd\[char46]
+.IP
+The default value is \fBfalse\fR\[char46]
+.IP "\fBoptions : ignore_lsp_down\fR: optional string"
+If set to false, ARP/ND reply flows for logical switch ports will be installed only if the port is up, i\[char46]e\[char46] claimed by a Chassis\[char46] If set to true, these flows are installed regardless of the status of the port, which can result in a situation that ARP request to an IP is resolved even before the relevant VM/container is running\[char46] For environments where this is not an issue, setting it to \fBtrue\fR can reduce the load and latency of the control plane\[char46] The default value is \fBtrue\fR\[char46]
+.IP "\fBoptions : use_ct_inv_match\fR: optional string"
+If set to false, \fBovn\-northd\fR will not use the \fBct\[char46]inv\fR field in any of the logical flow matches\[char46] The default value is true\[char46] If the NIC supports offloading OVS datapath flows but doesn\(cqt support offloading ct_state \fBinv\fR flag, then the datapath flows matching on this flag (either \fB+inv\fR or \fB\-inv\fR) will not be offloaded\[char46] CMS should consider setting \fBuse_ct_inv_match\fR to \fBfalse\fR in such cases\[char46] This results in a side effect of the invalid packets getting delivered to the destination VIF, which otherwise would have been dropped by \fBOVN\fR\[char46]
+.IP "\fBoptions : default_acl_drop\fR: optional string"
+If set to \fBtrue\fR\[char46], \fBovn\-northd\fR will generate a logical flow to drop all traffic in the ACL stages\[char46] By default this option is set to \fBfalse\fR\[char46]
+.IP "\fBoptions : debug_drop_domain_id\fR: optional string"
+If set to a 8-bit number and if \fBdebug_drop_collector_set\fR is also configured, \fBovn\-northd\fR will add a \fBsample\fR action to every logical flow that contains a \(cqdrop\(cq action\[char46] The 8 most significant bits of the observation_domain_id field will be those specified in the \fB debug_drop_domain_id\fR\[char46] The 24 least significant bits of the observation_domain_id field will be the datapath\(cqs key\[char46]
+.IP
+The observation_point_id will be set to the first 32 bits of the logical flow\(cqs UUID\[char46]
+.IP "\fBoptions : debug_drop_collector_set\fR: optional string"
+If set to a 32-bit number \fBovn\-northd\fR will add a \fBsample\fR action to every logical flow that contains a \(cqdrop\(cq action\[char46] The sample action will have the specified collector_set_id\[char46] The value must match that of the local OVS configuration as described in \fBovs\-actions\fR(7)\[char46]
+.IP "\fBoptions : use_common_zone\fR: optional string, either \fBtrue\fR or \fBfalse\fR"
+Default value is \fBfalse\fR\[char46] If set to \fBtrue\fR the SNAT and DNAT happens in common zone, instead of happening in separate zones, depending on the configuration\[char46] However, this option breaks traffic when there is configuration of DGP + LB + SNAT on this LR\[char46] The value \fBtrue\fR should be used only in case of HWOL compatibility with GDP\[char46]
+.ST "Options for configuring interconnection route advertisement:"
+.PP
+.PP
+.PP
+These options control how routes are advertised between OVN deployments for interconnection\[char46] If enabled, \fBovn\-ic\fR from different OVN deployments exchanges routes between each other through the global \fBOVN_IC_Southbound\fR database\[char46] Only routers with ports connected to interconnection transit switches participate in route advertisement\[char46] For each of these routers, there are two types of routes to be advertised:
+.PP
+.PP
+Firstly, the static routes configured in the router are advertised\[char46]
+.PP
+.PP
+Secondly, the \fBnetworks\fR configured in the logical router ports that are not on the transit switches are advertised\[char46] These are considered as directly connected subnets on the router\[char46]
+.PP
+.PP
+Link local prefixes (IPv4 169\[char46]254\[char46]0\[char46]0/16 and IPv6 FE80::/10) are never advertised\[char46]
+.PP
+.PP
+The learned routes are added to the \fBstatic_routes\fR column of the \fBLogical_Router\fR table, with \fBexternal_ids:ic\-learned\-route\fR set to the uuid of the row in \fBRoute\fR table of the \fBOVN_IC_Southbound\fR database\[char46]
+.IP "\fBoptions : ic-route-adv\fR: optional string"
+A boolean value that enables route advertisement to the global \fBOVN_IC_Southbound\fR database\[char46] Default is \fBfalse\fR\[char46]
+.IP "\fBoptions : ic-route-learn\fR: optional string"
+A boolean value that enables route learning from the global \fBOVN_IC_Southbound\fR database\[char46] Default is \fBfalse\fR\[char46]
+.IP "\fBoptions : ic-route-adv-default\fR: optional string"
+A boolean value that enables advertising default route to the global \fBOVN_IC_Southbound\fR database\[char46] Default is \fBfalse\fR\[char46] This option takes effect only when option \fBic\-route\-adv\fR is \fBtrue\fR\[char46]
+.IP "\fBoptions : ic-route-learn-default\fR: optional string"
+A boolean value that enables learning default route from the global \fBOVN_IC_Southbound\fR database\[char46] Default is \fBfalse\fR\[char46] This option takes effect only when option \fBic\-route\-learn\fR is \fBtrue\fR\[char46]
+.IP "\fBoptions : ic-route-blacklist\fR: optional string"
+A string value contains a list of CIDRs delimited by \(dq,\(dq\[char46] A route will not be advertised or learned if the route\(cqs prefix belongs to any of the CIDRs listed\[char46]
+.ST "Connection Options:"
+.PP
+.IP "\fBconnections\fR: set of \fBConnection\fRs"
+Database clients to which the Open vSwitch database server should connect or on which it should listen, along with options for how these connections should be configured\[char46] See the \fBConnection\fR table for more information\[char46]
+.IP "\fBssl\fR: optional \fBSSL\fR"
+Global SSL configuration\[char46]
+.ST "Security Configurations:"
+.PP
+.IP "\fBipsec\fR: boolean"
+Tunnel encryption configuration\[char46] If this column is set to be true, all OVN tunnels will be encrypted with IPsec\[char46]
+.ST "Read-only Options:"
+.PP
+.IP "\fBoptions : max_tunid\fR: optional string"
+The maximum supported tunnel ID\[char46] Depends on types of encapsulation enabled in the cluster\[char46]
+.bp
+.SH "Copp TABLE"
+.PP
+.PP
+.PP
+This table is used to define control plane protection policies, i\[char46]e\[char46], associate entries from table \fBMeter\fR to control protocol names\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBname\fR
+string (must be unique within table)
+.TQ 3.00in
+\fBmeters : arp\fR
+optional string
+.TQ 3.00in
+\fBmeters : arp-resolve\fR
+optional string
+.TQ 3.00in
+\fBmeters : dhcpv4-opts\fR
+optional string
+.TQ 3.00in
+\fBmeters : dhcpv6-opts\fR
+optional string
+.TQ 3.00in
+\fBmeters : dns\fR
+optional string
+.TQ 3.00in
+\fBmeters : event-elb\fR
+optional string
+.TQ 3.00in
+\fBmeters : icmp4-error\fR
+optional string
+.TQ 3.00in
+\fBmeters : icmp6-error\fR
+optional string
+.TQ 3.00in
+\fBmeters : igmp\fR
+optional string
+.TQ 3.00in
+\fBmeters : nd-na\fR
+optional string
+.TQ 3.00in
+\fBmeters : nd-ns\fR
+optional string
+.TQ 3.00in
+\fBmeters : nd-ns-resolve\fR
+optional string
+.TQ 3.00in
+\fBmeters : nd-ra-opts\fR
+optional string
+.TQ 3.00in
+\fBmeters : tcp-reset\fR
+optional string
+.TQ 3.00in
+\fBmeters : bfd\fR
+optional string
+.TQ 3.00in
+\fBmeters : reject\fR
+optional string
+.TQ 3.00in
+\fBmeters : svc-monitor\fR
+optional string
+.TQ 3.00in
+\fBexternal_ids\fR
+map of string-string pairs
+.SS "Details:
+.IP "\fBname\fR: string (must be unique within table)"
+CoPP name\[char46]
+.IP "\fBmeters : arp\fR: optional string"
+Rate limiting meter for ARP packets (request/reply) used for learning neighbors\[char46]
+.IP "\fBmeters : arp-resolve\fR: optional string"
+Rate limiting meter for packets that require resolving the next-hop (through ARP)\[char46]
+.IP "\fBmeters : dhcpv4-opts\fR: optional string"
+Rate limiting meter for packets that require adding DHCPv4 options\[char46]
+.IP "\fBmeters : dhcpv6-opts\fR: optional string"
+Rate limiting meter for packets that require adding DHCPv6 options\[char46]
+.IP "\fBmeters : dns\fR: optional string"
+Rate limiting meter for DNS query packets that need to be replied to\[char46]
+.IP "\fBmeters : event-elb\fR: optional string"
+Rate limiting meter for empty load balancer events\[char46]
+.IP "\fBmeters : icmp4-error\fR: optional string"
+Rate limiting meter for packets that require replying with an ICMP error\[char46]
+.IP "\fBmeters : icmp6-error\fR: optional string"
+Rate limiting meter for packets that require replying with an ICMPv6 error\[char46]
+.IP "\fBmeters : igmp\fR: optional string"
+Rate limiting meter for IGMP packets\[char46]
+.IP "\fBmeters : nd-na\fR: optional string"
+Rate limiting meter for ND neighbor advertisement packets used for learning neighbors\[char46]
+.IP "\fBmeters : nd-ns\fR: optional string"
+Rate limiting meter for ND neighbor solicitation packets used for learning neighbors\[char46]
+.IP "\fBmeters : nd-ns-resolve\fR: optional string"
+Rate limiting meter for packets that require resolving the next-hop (through ND)\[char46]
+.IP "\fBmeters : nd-ra-opts\fR: optional string"
+Rate limiting meter for packets that require adding ND router advertisement options\[char46]
+.IP "\fBmeters : tcp-reset\fR: optional string"
+Rate limiting meter for packets that require replying with TCP RST packet\[char46]
+.IP "\fBmeters : bfd\fR: optional string"
+Rate limiting meter for BFD packets\[char46]
+.IP "\fBmeters : reject\fR: optional string"
+Rate limiting meter for packets that trigger a reject action
+.IP "\fBmeters : svc-monitor\fR: optional string"
+Rate limiting meter for packets that are arriving to service monitor MAC address\[char46]
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+See \fBExternal IDs\fR at the beginning of this document\[char46]
+.bp
+.SH "Logical_Switch TABLE"
+.PP
+.PP
+.PP
+Each row represents one L2 logical switch\[char46]
+.PP
+.PP
+There are two kinds of logical switches, that is, ones that fully virtualize the network (overlay logical switches) and ones that provide simple connectivity to physical networks (bridged logical switches)\[char46] They work in the same way when providing connectivity between logical ports on same chassis, but differently when connecting remote logical ports\[char46] Overlay logical switches connect remote logical ports by tunnels, while bridged logical switches provide connectivity to remote ports by bridging the packets to directly connected physical L2 segments with the help of \fBlocalnet\fR ports\[char46] Each bridged logical switch has one or more \fBlocalnet\fR ports, which have only one special address \fBunknown\fR\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBports\fR
+set of \fBLogical_Switch_Port\fRs
+.TQ 3.00in
+\fBload_balancer\fR
+set of weak reference to \fBLoad_Balancer\fRs
+.TQ 3.00in
+\fBload_balancer_group\fR
+set of \fBLoad_Balancer_Group\fRs
+.TQ 3.00in
+\fBacls\fR
+set of \fBACL\fRs
+.TQ 3.00in
+\fBqos_rules\fR
+set of \fBQoS\fRes
+.TQ 3.00in
+\fBdns_records\fR
+set of weak reference to \fBDNS\fRes
+.TQ 3.00in
+\fBforwarding_groups\fR
+set of \fBForwarding_Group\fRs
+.TQ .25in
+\fINaming:\fR
+.RS .25in
+.TQ 2.75in
+\fBname\fR
+string
+.TQ 2.75in
+\fBexternal_ids : neutron:network_name\fR
+optional string
+.RE
+.TQ .25in
+\fIIP Address Assignment:\fR
+.RS .25in
+.TQ 2.75in
+\fBother_config : subnet\fR
+optional string
+.TQ 2.75in
+\fBother_config : exclude_ips\fR
+optional string
+.TQ 2.75in
+\fBother_config : ipv6_prefix\fR
+optional string
+.TQ 2.75in
+\fBother_config : mac_only\fR
+optional string, either \fBtrue\fR or \fBfalse\fR
+.RE
+.TQ .25in
+\fIIP Multicast Snooping Options:\fR
+.RS .25in
+.TQ 2.75in
+\fBother_config : mcast_snoop\fR
+optional string, either \fBtrue\fR or \fBfalse\fR
+.TQ 2.75in
+\fBother_config : mcast_querier\fR
+optional string, either \fBtrue\fR or \fBfalse\fR
+.TQ 2.75in
+\fBother_config : mcast_flood_unregistered\fR
+optional string, either \fBtrue\fR or \fBfalse\fR
+.TQ 2.75in
+\fBother_config : mcast_table_size\fR
+optional string, containing an integer, in range 1 to 32,766
+.TQ 2.75in
+\fBother_config : mcast_idle_timeout\fR
+optional string, containing an integer, in range 15 to 3,600
+.TQ 2.75in
+\fBother_config : mcast_query_interval\fR
+optional string, containing an integer, in range 1 to 3,600
+.TQ 2.75in
+\fBother_config : mcast_query_max_response\fR
+optional string, containing an integer, in range 1 to 10
+.TQ 2.75in
+\fBother_config : mcast_eth_src\fR
+optional string
+.TQ 2.75in
+\fBother_config : mcast_ip4_src\fR
+optional string
+.TQ 2.75in
+\fBother_config : mcast_ip6_src\fR
+optional string
+.RE
+.TQ .25in
+\fIInterconnection:\fR
+.RS .25in
+.TQ 2.75in
+\fBother_config : interconn-ts\fR
+optional string
+.RE
+.TQ .25in
+\fITunnel Key:\fR
+.RS .25in
+.TQ 2.75in
+\fBother_config : requested-tnl-key\fR
+optional string, containing an integer, in range 1 to 16,777,215
+.RE
+.TQ 3.00in
+\fBcopp\fR
+optional weak reference to \fBCopp\fR
+.TQ .25in
+\fIOther options:\fR
+.RS .25in
+.TQ 2.75in
+\fBother_config : vlan-passthru\fR
+optional string, either \fBtrue\fR or \fBfalse\fR
+.TQ 2.75in
+\fBother_config : broadcast-arps-to-all-routers\fR
+optional string, either \fBtrue\fR or \fBfalse\fR
+.RE
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.RE
+.SS "Details:
+.IP "\fBports\fR: set of \fBLogical_Switch_Port\fRs"
+The logical ports connected to the logical switch\[char46]
+.IP
+It is an error for multiple logical switches to include the same logical port\[char46]
+.IP "\fBload_balancer\fR: set of weak reference to \fBLoad_Balancer\fRs"
+Set of load balancers associated to this logical switch\[char46]
+.IP "\fBload_balancer_group\fR: set of \fBLoad_Balancer_Group\fRs"
+Set of load balancers groups associated to this logical switch\[char46]
+.IP "\fBacls\fR: set of \fBACL\fRs"
+Access control rules that apply to packets within the logical switch\[char46]
+.IP "\fBqos_rules\fR: set of \fBQoS\fRes"
+QoS marking and metering rules that apply to packets within the logical switch\[char46]
+.IP "\fBdns_records\fR: set of weak reference to \fBDNS\fRes"
+This column defines the DNS records to be used for resolving internal DNS queries within the logical switch by the native DNS resolver\[char46] Please see the \fBDNS\fR table\[char46]
+.IP "\fBforwarding_groups\fR: set of \fBForwarding_Group\fRs"
+Groups a set of logical port endpoints for traffic going out of the logical switch\[char46]
+.ST "Naming:"
+.PP
+.PP
+.PP
+These columns provide names for the logical switch\[char46] From OVN\(cqs perspective, these names have no special meaning or purpose other than to provide convenience for human interaction with the database\[char46] There is no requirement for the name to be unique\[char46] (For a unique identifier for a logical switch, use its row UUID\[char46])
+.PP
+.PP
+(Originally, \fBname\fR was intended to serve the purpose of a human-friendly name, but the Neutron integration used it to uniquely identify its own switch object, in the format \fBneutron\-\fIuuid\fB\fR\[char46] Later on, Neutron started propagating the friendly name of a switch as \fBexternal_ids:neutron:network_name\fR\[char46] Perhaps this can be cleaned up someday\[char46])
+.IP "\fBname\fR: string"
+A name for the logical switch\[char46]
+.IP "\fBexternal_ids : neutron:network_name\fR: optional string"
+Another name for the logical switch\[char46]
+.ST "IP Address Assignment:"
+.PP
+.PP
+.PP
+These options control automatic IP address management (IPAM) for ports attached to the logical switch\[char46] To enable IPAM for IPv4, set \fBother_config:subnet\fR and optionally \fBother_config:exclude_ips\fR\[char46] To enable IPAM for IPv6, set \fBother_config:ipv6_prefix\fR\[char46] IPv4 and IPv6 may be enabled together or separately\[char46]
+.PP
+.PP
+To request dynamic address assignment for a particular port, use the \fBdynamic\fR keyword in the \fBaddresses\fR column of the port\(cqs \fBLogical_Switch_Port\fR row\[char46] This requests both an IPv4 and an IPv6 address, if IPAM for IPv4 and IPv6 are both enabled\[char46]
+.IP "\fBother_config : subnet\fR: optional string"
+Set this to an IPv4 subnet, e\[char46]g\[char46] \fB192\[char46]168\[char46]0\[char46]0/24\fR, to enable \fBovn\-northd\fR to automatically assign IP addresses within that subnet\[char46]
+.IP "\fBother_config : exclude_ips\fR: optional string"
+To exclude some addresses from automatic IP address management, set this to a list of the IPv4 addresses or \fB\[char46]\[char46]\fR-delimited ranges to exclude\[char46] The addresses or ranges should be a subset of those in \fBother_config:subnet\fR\[char46]
+.IP
+Whether listed or not, \fBovn\-northd\fR will never allocate the first or last address in a subnet, such as 192\[char46]168\[char46]0\[char46]0 or 192\[char46]168\[char46]0\[char46]255 in 192\[char46]168\[char46]0\[char46]0/24\[char46]
+.IP
+Examples:
+.RS
+.IP \(bu
+\fB192\[char46]168\[char46]0\[char46]2 192\[char46]168\[char46]0\[char46]10\fR
+.IP \(bu
+\fB192\[char46]168\[char46]0\[char46]4 192\[char46]168\[char46]0\[char46]30\[char46]\[char46]192\[char46]168\[char46]0\[char46]60 192\[char46]168\[char46]0\[char46]110\[char46]\[char46]192\[char46]168\[char46]0\[char46]120\fR
+.IP \(bu
+\fB192\[char46]168\[char46]0\[char46]110\[char46]\[char46]192\[char46]168\[char46]0\[char46]120 192\[char46]168\[char46]0\[char46]25\[char46]\[char46]192\[char46]168\[char46]0\[char46]30 192\[char46]168\[char46]0\[char46]144\fR
+.RE
+.IP "\fBother_config : ipv6_prefix\fR: optional string"
+Set this to an IPv6 prefix to enable \fBovn\-northd\fR to automatically assign IPv6 addresses using this prefix\[char46] The assigned IPv6 address will be generated using the IPv6 prefix and the MAC address (converted to an IEEE EUI64 identifier) of the port\[char46] The IPv6 prefix defined here should be a valid IPv6 address ending with \fB::\fR\[char46]
+.IP
+Examples:
+.RS
+.IP \(bu
+\fBaef0::\fR
+.IP \(bu
+\fBbef0:1234:a890:5678::\fR
+.IP \(bu
+\fB8230:5678::\fR
+.RE
+.IP "\fBother_config : mac_only\fR: optional string, either \fBtrue\fR or \fBfalse\fR"
+Value used to request to assign L2 address only if neither subnet nor ipv6_prefix are specified
+.ST "IP Multicast Snooping Options:"
+.PP
+.PP
+.PP
+These options control IP Multicast Snooping configuration of the logical switch\[char46] To enable IP Multicast Snooping set \fBother_config:mcast_snoop\fR to true\[char46] To enable IP Multicast Querier set \fBother_config:mcast_querier\fR to true\[char46] If IP Multicast Querier is enabled \fBother_config:mcast_eth_src\fR and \fBother_config:mcast_ip4_src\fR must be set\[char46]
+.IP "\fBother_config : mcast_snoop\fR: optional string, either \fBtrue\fR or \fBfalse\fR"
+Enables/disables IP Multicast Snooping on the logical switch\[char46] Default: \fBfalse\fR\[char46]
+.IP "\fBother_config : mcast_querier\fR: optional string, either \fBtrue\fR or \fBfalse\fR"
+Enables/disables IP Multicast Querier on the logical switch\[char46] Only applicable if \fBother_config:mcast_snoop\fR is enabled\[char46] Default: \fBtrue\fR\[char46]
+.IP "\fBother_config : mcast_flood_unregistered\fR: optional string, either \fBtrue\fR or \fBfalse\fR"
+Determines whether unregistered multicast traffic should be flooded or not\[char46] Only applicable if \fBother_config:mcast_snoop\fR is enabled\[char46] Default: \fBfalse\fR\[char46]
+.IP "\fBother_config : mcast_table_size\fR: optional string, containing an integer, in range 1 to 32,766"
+Number of multicast groups to be stored\[char46] Default: 2048\[char46]
+.IP "\fBother_config : mcast_idle_timeout\fR: optional string, containing an integer, in range 15 to 3,600"
+Configures the IP Multicast Snooping group idle timeout (in seconds)\[char46] Default: 300 seconds\[char46]
+.IP "\fBother_config : mcast_query_interval\fR: optional string, containing an integer, in range 1 to 3,600"
+Configures the IP Multicast Querier interval between queries (in seconds)\[char46] Default: \fBother_config:mcast_idle_timeout\fR / 2\[char46]
+.IP "\fBother_config : mcast_query_max_response\fR: optional string, containing an integer, in range 1 to 10"
+Configures the value of the \(dqmax-response\(dq field in the multicast queries originated by the logical switch\[char46] Default: 1 second\[char46]
+.IP "\fBother_config : mcast_eth_src\fR: optional string"
+Configures the source Ethernet address for queries originated by the logical switch\[char46]
+.IP "\fBother_config : mcast_ip4_src\fR: optional string"
+Configures the source IPv4 address for queries originated by the logical switch\[char46]
+.IP "\fBother_config : mcast_ip6_src\fR: optional string"
+Configures the source IPv6 address for queries originated by the logical switch\[char46]
+.ST "Interconnection:"
+.PP
+.IP "\fBother_config : interconn-ts\fR: optional string"
+The \fBname\fR of corresponding transit switch in \fBOVN_IC_Northbound\fR database\[char46] This kind of logical switch is created and controlled by \fBovn\-ic\fR\[char46]
+.ST "Tunnel Key:"
+.PP
+.IP "\fBother_config : requested-tnl-key\fR: optional string, containing an integer, in range 1 to 16,777,215"
+Configures the datapath tunnel key for the logical switch\[char46] Usually this is not needed because \fBovn\-northd\fR will assign an unique key for each datapath by itself\[char46] However, if it is configured, \fBovn\-northd\fR honors the configured value\[char46] The typical use case is for interconnection: the tunnel keys for transit switches need to be unique globally, so they are maintained in the global \fBOVN_IC_Southbound\fR database, and \fBovn\-ic\fR simply syncs the value from \fBOVN_IC_Southbound\fR through this config\[char46]
+.IP "\fBcopp\fR: optional weak reference to \fBCopp\fR"
+The control plane protection policy from table \fBCopp\fR used for metering packets sent to \fBovn\-controller\fR from ports of this logical switch\[char46]
+.ST "Other options:"
+.PP
+.IP "\fBother_config : vlan-passthru\fR: optional string, either \fBtrue\fR or \fBfalse\fR"
+Determines whether VLAN tagged incoming traffic should be allowed\[char46] Note that this may have security implications when enabled for a logical switch with a tag=0 localnet port\[char46] If not properly isolated from other localnet ports, fabric traffic that belongs to other tagged networks may be passed through such a port\[char46]
+.IP "\fBother_config : broadcast-arps-to-all-routers\fR: optional string, either \fBtrue\fR or \fBfalse\fR"
+Determines whether arp requests and ipv6 neighbor solicitations should be sent to all routers and other switchports (default) or if it should only be sent to switchports where the ip/mac address is unknown\[char46] Setting this to false can significantly reduce the load if the logical switch can receive arp requests for ips it does not know about\[char46] However setting this to false also means that garps are no longer forwarded to all routers and therefor the mac bindings of the routers are no longer updated\[char46]
+.ST "Common Columns:"
+.PP
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+See \fBExternal IDs\fR at the beginning of this document\[char46]
+.bp
+.SH "Logical_Switch_Port TABLE"
+.PP
+.PP
+.PP
+A port within an L2 logical switch\[char46]
+.SS "Summary:
+.TQ .25in
+\fICore Features:\fR
+.RS .25in
+.TQ 2.75in
+\fBname\fR
+string (must be unique within table)
+.TQ 2.75in
+\fBtype\fR
+string
+.RE
+.TQ .25in
+\fIOptions:\fR
+.RS .25in
+.TQ 2.75in
+\fBoptions\fR
+map of string-string pairs
+.TQ .25in
+\fIOptions for router ports:\fR
+.RS .25in
+.TQ 2.50in
+\fBoptions : router-port\fR
+optional string
+.TQ 2.50in
+\fBoptions : nat-addresses\fR
+optional string
+.TQ 2.50in
+\fBoptions : exclude-lb-vips-from-garp\fR
+optional string
+.TQ 2.50in
+\fBoptions : arp_proxy\fR
+optional string
+.RE
+.TQ .25in
+\fIOptions for localnet ports:\fR
+.RS .25in
+.TQ 2.50in
+\fBoptions : network_name\fR
+optional string
+.TQ 2.50in
+\fBoptions : ethtype\fR
+optional string
+.TQ 2.50in
+\fBoptions : localnet_learn_fdb\fR
+optional string, either \fBtrue\fR or \fBfalse\fR
+.RE
+.TQ .25in
+\fIOptions for l2gateway ports:\fR
+.RS .25in
+.TQ 2.50in
+\fBoptions : network_name\fR
+optional string
+.TQ 2.50in
+\fBoptions : l2gateway-chassis\fR
+optional string
+.RE
+.TQ .25in
+\fIOptions for vtep ports:\fR
+.RS .25in
+.TQ 2.50in
+\fBoptions : vtep-physical-switch\fR
+optional string
+.TQ 2.50in
+\fBoptions : vtep-logical-switch\fR
+optional string
+.RE
+.TQ .25in
+\fIVMI (or VIF) Options:\fR
+.RS .25in
+.TQ 2.50in
+\fBoptions : requested-chassis\fR
+optional string
+.TQ 2.50in
+\fBoptions : activation-strategy\fR
+optional string
+.TQ 2.50in
+\fBoptions : iface-id-ver\fR
+optional string
+.TQ 2.50in
+\fBoptions : qos_min_rate\fR
+optional string
+.TQ 2.50in
+\fBoptions : qos_max_rate\fR
+optional string
+.TQ 2.50in
+\fBoptions : qos_burst\fR
+optional string
+.TQ 2.50in
+\fBoptions : hostname\fR
+optional string
+.TQ .25in
+\fIVIF Plugging Options:\fR
+.RS .25in
+.TQ 2.25in
+\fBoptions : vif-plug-type\fR
+optional string
+.TQ 2.25in
+\fBoptions : vif-plug-mtu-request\fR
+optional string
+.RE
+.RE
+.TQ .25in
+\fIVirtual port Options:\fR
+.RS .25in
+.TQ 2.50in
+\fBoptions : virtual-ip\fR
+optional string
+.TQ 2.50in
+\fBoptions : virtual-parents\fR
+optional string
+.RE
+.TQ .25in
+\fIIP Multicast Snooping Options:\fR
+.RS .25in
+.TQ 2.50in
+\fBoptions : mcast_flood\fR
+optional string, either \fBtrue\fR or \fBfalse\fR
+.TQ 2.50in
+\fBoptions : mcast_flood_reports\fR
+optional string, either \fBtrue\fR or \fBfalse\fR
+.RE
+.RE
+.TQ .25in
+\fIContainers:\fR
+.RS .25in
+.TQ 2.75in
+\fBparent_name\fR
+optional string
+.TQ 2.75in
+\fBtag_request\fR
+optional integer, in range 0 to 4,095
+.TQ 2.75in
+\fBtag\fR
+optional integer, in range 1 to 4,095
+.RE
+.TQ .25in
+\fIPort State:\fR
+.RS .25in
+.TQ 2.75in
+\fBup\fR
+optional boolean
+.TQ 2.75in
+\fBenabled\fR
+optional boolean
+.RE
+.TQ .25in
+\fIAddressing:\fR
+.RS .25in
+.TQ 2.75in
+\fBaddresses\fR
+set of strings
+.TQ 2.75in
+\fBdynamic_addresses\fR
+optional string
+.TQ 2.75in
+\fBport_security\fR
+set of strings
+.RE
+.TQ .25in
+\fIDHCP:\fR
+.RS .25in
+.TQ 2.75in
+\fBdhcpv4_options\fR
+optional weak reference to \fBDHCP_Options\fR
+.TQ 2.75in
+\fBdhcpv6_options\fR
+optional weak reference to \fBDHCP_Options\fR
+.RE
+.TQ 3.00in
+\fBmirror_rules\fR
+set of weak reference to \fBMirror\fRs
+.TQ 3.00in
+\fBha_chassis_group\fR
+optional \fBHA_Chassis_Group\fR
+.TQ .25in
+\fINaming:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids : neutron:port_name\fR
+optional string
+.RE
+.TQ .25in
+\fITunnel Key:\fR
+.RS .25in
+.TQ 2.75in
+\fBoptions : requested-tnl-key\fR
+optional string, containing an integer, in range 1 to 32,767
+.RE
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.RE
+.SS "Details:
+.ST "Core Features:"
+.PP
+.IP "\fBname\fR: string (must be unique within table)"
+The logical port name\[char46]
+.IP
+For entities (VMs or containers) that are spawned in the hypervisor, the name used here must match those used in the \fBexternal_ids:iface-id\fR in the \fBOpen_vSwitch\fR database\(cqs \fBInterface\fR table, because hypervisors use \fBexternal_ids:iface-id\fR as a lookup key to identify the network interface of that entity\[char46]
+.IP
+For containers that share a VIF within a VM, the name can be any unique identifier\[char46] See \fBContainers\fR, below, for more information\[char46]
+.IP
+A logical switch port may not have the same name as a logical router port, but the database schema cannot enforce this\[char46]
+.IP "\fBtype\fR: string"
+Specify a type for this logical port\[char46] Logical ports can be used to model other types of connectivity into an OVN logical switch\[char46] The following types are defined:
+.RS
+.TP
+(empty string)
+A VM (or VIF) interface\[char46]
+.TP
+\fBrouter\fR
+A connection to a logical router\[char46] The value of \fBoptions:router-port\fR specifies the \fBname\fR of the \fBLogical_Router_Port\fR to which this logical switch port is connected\[char46]
+.TP
+\fBlocalnet\fR
+A connection to a locally accessible network from \fBovn\-controller\fR instances that have a corresponding bridge mapping\[char46] A logical switch can have multiple \fBlocalnet\fR ports attached\[char46] This type is used to model direct connectivity to existing networks\[char46] In this case, each chassis should have a mapping for one of the physical networks only\[char46] Note: nothing said above implies that a chassis cannot be plugged to multiple physical networks as long as they belong to different switches\[char46]
+.TP
+\fBlocalport\fR
+A connection to a local VIF\[char46] Traffic that arrives on a \fBlocalport\fR is never forwarded over a tunnel to another chassis\[char46] These ports are present on every chassis and have the same address in all of them\[char46] This is used to model connectivity to local services that run on every hypervisor\[char46]
+.TP
+\fBl2gateway\fR
+A connection to a physical network\[char46]
+.TP
+\fBvtep\fR
+A port to a logical switch on a VTEP gateway\[char46]
+.TP
+\fBexternal\fR
+Represents a logical port which is external and not having an OVS port in the integration bridge\[char46] \fBOVN\fR will never receive any traffic from this port or send any traffic to this port\[char46] \fBOVN\fR can support native services like DHCPv4/DHCPv6/DNS for this port\[char46] If \fBha_chassis_group\fR is defined, \fBovn\-controller\fR running in the master chassis of the HA chassis group will bind this port to provide these native services\[char46] It is expected that this port belong to a bridged logical switch (with a \fBlocalnet\fR port)\[char46]
+.IP
+It is recommended to use the same HA chassis group for all the external ports of a logical switch\[char46] Otherwise, the physical switch might see MAC flap issue when different chassis provide the native services\[char46] For example when supporting native DHCPv4 service, DHCPv4 server mac (configured in \fBoptions:server_mac\fR column in table \fBDHCP_Options\fR) originating from different ports can cause MAC flap issue\[char46] The MAC of the logical router IP(s) can also flap if the same HA chassis group is not set for all the external ports of a logical switch\[char46]
+.IP
+Below are some of the use cases where \fBexternal\fR ports can be used\[char46]
+.RS
+.IP \(bu
+VMs connected to SR-IOV nics - Traffic from these VMs by passes the kernel stack and local \fBovn\-controller\fR do not bind these ports and cannot serve the native services\[char46]
+.IP \(bu
+When CMS supports provisioning baremetal servers\[char46]
+.RE
+.TP
+\fBvirtual\fR
+Represents a logical port which does not have an OVS port in the integration bridge and has a virtual ip configured in the \fBoptions:virtual-ip\fR column\[char46] This virtual ip can move around between the logical ports configured in the \fBoptions:virtual-parents\fR column\[char46]
+.IP
+One of the use case where \fBvirtual\fR ports can be used is\[char46]
+.RS
+.IP \(bu
+The \fBvirtual ip\fR represents a load balancer vip and the \fBvirtual parents\fR provide load balancer service in an active-standby setup with the active virtual parent owning the \fBvirtual ip\fR\[char46]
+.RE
+.TP
+\fBremote\fR
+A remote port is to model a port that resides remotely on another OVN, which is on the other side of a transit logical switch for OVN interconnection\[char46] This type of ports are created by \fBovn\-ic\fR instead of by CMS\[char46] Any change to the port will be automatically overwritten by \fBovn\-ic\fR\[char46]
+.RE
+.ST "Options:"
+.PP
+.IP "\fBoptions\fR: map of string-string pairs"
+This column provides key/value settings specific to the logical port \fBtype\fR\[char46] The type-specific options are described individually below\[char46]
+.ST "Options for router ports:"
+.PP
+.PP
+.PP
+These options apply when \fBtype\fR is \fBrouter\fR\[char46]
+.IP "\fBoptions : router-port\fR: optional string"
+Required\[char46] The \fBname\fR of the \fBLogical_Router_Port\fR to which this logical switch port is connected\[char46]
+.IP "\fBoptions : nat-addresses\fR: optional string"
+This is used to send gratuitous ARPs for SNAT and DNAT IP addresses via the \fBlocalnet\fR port that is attached to the same logical switch as this type \fBrouter\fR port\[char46] This option is specified on a logical switch port that is connected to a gateway router, or a logical switch port that is connected to a distributed gateway port on a logical router\[char46]
+.IP
+This must take one of the following forms:
+.RS
+.TP
+\fBrouter\fR
+Gratuitous ARPs will be sent for all SNAT and DNAT external IP addresses and for all load balancer IP addresses defined on the \fBoptions:router-port\fR\(cqs logical router, using the \fBoptions:router-port\fR\(cqs MAC address\[char46]
+.IP
+This form of \fBoptions:nat-addresses\fR is valid for logical switch ports where \fBoptions:router-port\fR is the name of a port on a gateway router, or the name of a distributed gateway port\[char46]
+.IP
+Supported only in OVN 2\[char46]8 and later\[char46] Earlier versions required NAT addresses to be manually synchronized\[char46]
+.TP
+\fBEthernet address followed by one or more IPv4 addresses\fR
+Example: \fB80:fa:5b:06:72:b7 158\[char46]36\[char46]44\[char46]22
+158\[char46]36\[char46]44\[char46]24\fR\[char46] This would result in generation of gratuitous ARPs for IP addresses 158\[char46]36\[char46]44\[char46]22 and 158\[char46]36\[char46]44\[char46]24 with a MAC address of 80:fa:5b:06:72:b7\[char46]
+.IP
+This form of \fBoptions:nat-addresses\fR is only valid for logical switch ports where \fBoptions:router-port\fR is the name of a port on a gateway router\[char46]
+.RE
+.IP "\fBoptions : exclude-lb-vips-from-garp\fR: optional string"
+If \fBoptions:nat-addresses\fR is set to \fBrouter\fR, Gratuitous ARPs will be sent for all SNAT and DNAT external IP addresses defined on the \fBoptions:router-port\fR\(cqs logical router, using the \fBoptions:router-port\fR\(cqs MAC address, not cosidering configured load balancers\[char46]
+.IP "\fBoptions : arp_proxy\fR: optional string"
+Optional\[char46] A list of MAC and addresses/cidrs or just addresses/cidrs that this logical switch \fBrouter\fR port will reply to ARP/NDP requests\[char46] Examples: \fB169\[char46]254\[char46]239\[char46]254 169\[char46]254\[char46]239\[char46]2\fR, \fB0a:58:a9:fe:01:01 169\[char46]254\[char46]239\[char46]254 169\[char46]254\[char46]239\[char46]2
+169\[char46]254\[char46]238\[char46]0/24\fR, \fBfd7b:6b4d:7b25:d22f::1 fd7b:6b4d:7b25:d22f::2\fR, \fB0a:58:a9:fe:01:01 fd7b:6b4d:7b25:d22f::0/64\fR\[char46] The\fBoptions:router-port\fR\(cqs logical router should have a route to forward packets sent to configured proxy ARP MAC/IPs to an appropriate destination\[char46]
+.ST "Options for localnet ports:"
+.PP
+.PP
+.PP
+These options apply when \fBtype\fR is \fBlocalnet\fR\[char46]
+.IP "\fBoptions : network_name\fR: optional string"
+Required\[char46] The name of the network to which the \fBlocalnet\fR port is connected\[char46] Each hypervisor, via \fBovn\-controller\fR, uses its local configuration to determine exactly how to connect to this locally accessible network, if at all\[char46]
+.IP "\fBoptions : ethtype\fR: optional string"
+Optional\[char46] VLAN EtherType field value for encapsulating VLAN headers\[char46] Supported values: 802\[char46]1q (default), 802\[char46]1ad\[char46]
+.IP "\fBoptions : localnet_learn_fdb\fR: optional string, either \fBtrue\fR or \fBfalse\fR"
+Optional\[char46] Allows localnet port to learn MACs and store them in FDB table if set to \fBtrue\fR\[char46] The default value is \fBfalse\fR\[char46]
+.ST "Options for l2gateway ports:"
+.PP
+.PP
+.PP
+These options apply when \fBtype\fR is \fBl2gateway\fR\[char46]
+.IP "\fBoptions : network_name\fR: optional string"
+Required\[char46] The name of the network to which the \fBl2gateway\fR port is connected\[char46] The L2 gateway, via \fBovn\-controller\fR, uses its local configuration to determine exactly how to connect to this network\[char46]
+.IP "\fBoptions : l2gateway-chassis\fR: optional string"
+Required\[char46] The chassis on which the \fBl2gateway\fR logical port should be bound to\[char46] \fBovn\-controller\fR running on the defined chassis will connect this logical port to the physical network\[char46]
+.ST "Options for vtep ports:"
+.PP
+.PP
+.PP
+These options apply when \fBtype\fR is \fBvtep\fR\[char46]
+.IP "\fBoptions : vtep-physical-switch\fR: optional string"
+Required\[char46] The name of the VTEP gateway\[char46]
+.IP "\fBoptions : vtep-logical-switch\fR: optional string"
+Required\[char46] A logical switch name connected by the VTEP gateway\[char46]
+.ST "VMI (or VIF) Options:"
+.PP
+.PP
+.PP
+These options apply to logical ports with \fBtype\fR having (empty string)
+.IP "\fBoptions : requested-chassis\fR: optional string"
+If set, identifies a specific chassis (by name or hostname) that is allowed to bind this port\[char46] Using this option will prevent thrashing between two chassis trying to bind the same port during a live migration\[char46] It can also prevent similar thrashing due to a mis-configuration, if a port is accidentally created on more than one chassis\[char46]
+.IP
+If set to a comma separated list, the first entry identifies the main chassis and the rest are one or more additional chassis that are allowed to bind the same port\[char46]
+.IP
+When multiple chassis are set for the port, and the logical switch is connected to an external network through a \fBlocalnet\fR port, tunneling is enforced for the port to guarantee delivery of packets directed to the port to all its locations\[char46] This has MTU implications because the network used for tunneling must have MTU larger than \fBlocalnet\fR for stable connectivity\[char46]
+.IP
+If the same host co-hosts more than one controller instance (either belonging to the same or separate clusters), special attention should be given to consistently using unique chassis names used in this option\[char46] It is advised that chassis names - and not host names - are used for this option\[char46]
+.IP "\fBoptions : activation-strategy\fR: optional string"
+If used with multiple chassis set in \fBrequested-chassis\fR, specifies an activation strategy for all additional chassis\[char46] By default, no activation strategy is used, meaning additional port locations are immediately available for use\[char46] When set to \(dqrarp\(dq, the port is blocked for ingress and egress communication until a RARP packet is sent from a new location\[char46] The \(dqrarp\(dq strategy is useful in live migration scenarios for virtual machines\[char46]
+.IP "\fBoptions : iface-id-ver\fR: optional string"
+If set, this port will be bound by \fBovn\-controller\fR only if this same key and value is configured in the \fBexternal_ids\fR column in the Open_vSwitch database\(cqs \fBInterface\fR table\[char46]
+.IP "\fBoptions : qos_min_rate\fR: optional string"
+If set, indicates the minimum guaranteed rate available for data sent from this interface, in bit/s\[char46]
+.IP "\fBoptions : qos_max_rate\fR: optional string"
+If set, indicates the maximum rate for data sent from this interface, in bit/s\[char46] The traffic will be shaped according to this limit\[char46]
+.IP "\fBoptions : qos_burst\fR: optional string"
+If set, indicates the maximum burst size for data sent from this interface, in bits\[char46]
+.IP "\fBoptions : hostname\fR: optional string"
+If set, indicates the DHCPv4 option \(dqHostname\(dq (option code 12) associated for this Logical Switch Port\[char46] If DHCPv4 is enabled for this Logical Switch Port, hostname dhcp option will be included in DHCP reply\[char46]
+.ST "VIF Plugging Options:"
+.PP
+.IP "\fBoptions : vif-plug-type\fR: optional string"
+If set, OVN will attempt to perform plugging of this VIF\[char46] In order to get this port plugged by the OVN controller, OVN must be built with support for VIF plugging\[char46] The default behavior is for the CMS to do the VIF plugging\[char46] Each VIF plug provider have their own options namespaced by name, for example \(dqvif-plug:representor:key\(dq\[char46] Please refer to the VIF plug provider documentation located in Documentation/topics/vif-plug-providers/ for more information\[char46]
+.IP "\fBoptions : vif-plug-mtu-request\fR: optional string"
+Requested MTU for plugged interfaces\[char46] When set the OVN controller will fill the \fBmtu_request\fR column of the Open vSwitch database\(cqs \fBInterface\fR table\[char46] This in turn will make OVS vswitchd update the MTU of the linked interface\[char46]
+.ST "Virtual port Options:"
+.PP
+.PP
+.PP
+These options apply when \fBtype\fR is \fBvirtual\fR\[char46]
+.IP "\fBoptions : virtual-ip\fR: optional string"
+This option represents the virtual IPv4 address\[char46]
+.IP "\fBoptions : virtual-parents\fR: optional string"
+This options represents a set of logical port names (with in the same logical switch) which can own the \fBvirtual ip\fR configured in the \fBoptions:virtual-ip\fR\[char46] All these virtual parents should add the \fBvirtual ip\fR in the \fBport_security\fR if port security addressed are enabled\[char46]
+.ST "IP Multicast Snooping Options:"
+.PP
+.PP
+.PP
+These options apply when the port is part of a logical switch which has \fBother_config\fR :mcast_snoop set to \fBtrue\fR\[char46]
+.IP "\fBoptions : mcast_flood\fR: optional string, either \fBtrue\fR or \fBfalse\fR"
+If set to \fBtrue\fR, multicast packets (except reports) are unconditionally forwarded to the specific port\[char46] Default: \fBfalse\fR\[char46]
+.IP "\fBoptions : mcast_flood_reports\fR: optional string, either \fBtrue\fR or \fBfalse\fR"
+If set to \fBtrue\fR, multicast reports are unconditionally forwarded to the specific port\[char46] Default: \fBfalse\fR\[char46]
+.ST "Containers:"
+.PP
+.PP
+.PP
+When a large number of containers are nested within a VM, it may be too expensive to dedicate a VIF to each container\[char46] OVN can use VLAN tags to support such cases\[char46] Each container is assigned a VLAN ID and each packet that passes between the hypervisor and the VM is tagged with the appropriate ID for the container\[char46] Such VLAN IDs never appear on a physical wire, even inside a tunnel, so they need not be unique except relative to a single VM on a hypervisor\[char46]
+.PP
+.PP
+These columns are used for VIFs that represent nested containers using shared VIFs\[char46] For VMs and for containers that have dedicated VIFs, they are empty\[char46]
+.IP "\fBparent_name\fR: optional string"
+The VM interface through which the nested container sends its network traffic\[char46] This must match the \fBname\fR column for some other \fBLogical_Switch_Port\fR\[char46]
+.IP "\fBtag_request\fR: optional integer, in range 0 to 4,095"
+The VLAN tag in the network traffic associated with a container\(cqs network interface\[char46] The client can request \fBovn\-northd\fR to allocate a tag that is unique within the scope of a specific parent (specified in \fBparent_name\fR) by setting a value of \fB0\fR in this column\[char46] The allocated value is written by \fBovn\-northd\fR in the \fBtag\fR column\[char46] (Note that these tags are allocated and managed locally in \fBovn\-northd\fR, so they cannot be reconstructed in the event that the database is lost\[char46]) The client can also request a specific non-zero tag and \fBovn\-northd\fR will honor it and copy that value to the \fBtag\fR column\[char46]
+.IP
+When \fBtype\fR is set to \fBlocalnet\fR or \fBl2gateway\fR, this can be set to indicate that the port represents a connection to a specific VLAN on a locally accessible network\[char46] The VLAN ID is used to match incoming traffic and is also added to outgoing traffic\[char46]
+.IP "\fBtag\fR: optional integer, in range 1 to 4,095"
+The VLAN tag allocated by \fBovn\-northd\fR based on the contents of the \fBtag_request\fR column\[char46]
+.ST "Port State:"
+.PP
+.IP "\fBup\fR: optional boolean"
+This column is populated by \fBovn\-northd\fR, rather than by the CMS plugin as is most of this database\[char46] When a logical port is bound to a physical location in the OVN Southbound database \fBBinding\fR table, \fBovn\-northd\fR sets this column to \fBtrue\fR; otherwise, or if the port becomes unbound later, it sets it to \fBfalse\fR\[char46] If this column is empty, the port is not considered up\[char46] This allows the CMS to wait for a VM\(cqs (or container\(cqs) networking to become active before it allows the VM (or container) to start\[char46]
+.IP
+Logical ports of router type are an exception to this rule\[char46] They are considered to be always up, that is this column is always set to \fBtrue\fR\[char46]
+.IP "\fBenabled\fR: optional boolean"
+This column is used to administratively set port state\[char46] If this column is empty or is set to \fBtrue\fR, the port is enabled\[char46] If this column is set to \fBfalse\fR, the port is disabled\[char46] A disabled port has all ingress and egress traffic dropped\[char46]
+.ST "Addressing:"
+.PP
+.IP "\fBaddresses\fR: set of strings"
+Addresses owned by the logical port\[char46]
+.IP
+Each element in the set must take one of the following forms:
+.RS
+.TP
+\fBEthernet address followed by zero or more IPv4 or IPv6 addresses (or both)\fR
+An Ethernet address defined is owned by the logical port\[char46] Like a physical Ethernet NIC, a logical port ordinarily has a single fixed Ethernet address\[char46]
+.IP
+When a OVN logical switch processes a unicast Ethernet frame whose destination MAC address is in a logical port\(cqs \fBaddresses\fR column, it delivers it only to that port, as if a MAC learning process had learned that MAC address on the port\[char46]
+.IP
+If IPv4 or IPv6 address(es) (or both) are defined, it indicates that the logical port owns the given IP addresses\[char46]
+.IP
+If IPv4 address(es) are defined, the OVN logical switch uses this information to synthesize responses to ARP requests without traversing the physical network\[char46] The OVN logical router connected to the logical switch, if any, uses this information to avoid issuing ARP requests for logical switch ports\[char46]
+.IP
+Note that the order here is important\[char46] The Ethernet address must be listed before the IP address(es) if defined\[char46]
+.IP
+Examples:
+.RS
+.TP
+\fB80:fa:5b:06:72:b7\fR
+This indicates that the logical port owns the above mac address\[char46]
+.TP
+\fB80:fa:5b:06:72:b7 10\[char46]0\[char46]0\[char46]4 20\[char46]0\[char46]0\[char46]4\fR
+This indicates that the logical port owns the mac address and two IPv4 addresses\[char46]
+.TP
+\fB80:fa:5b:06:72:b7 fdaa:15f2:72cf:0:f816:3eff:fe20:3f41\fR
+This indicates that the logical port owns the mac address and 1 IPv6 address\[char46]
+.TP
+\fB80:fa:5b:06:72:b7 10\[char46]0\[char46]0\[char46]4 fdaa:15f2:72cf:0:f816:3eff:fe20:3f41\fR
+This indicates that the logical port owns the mac address and 1 IPv4 address and 1 IPv6 address\[char46]
+.RE
+.TP
+\fBunknown\fR
+This indicates that the logical port has an unknown set of Ethernet addresses\[char46] When an OVN logical switch processes a unicast Ethernet frame whose destination MAC address is not in any logical port\(cqs \fBaddresses\fR column, it delivers it to the port (or ports) whose \fBaddresses\fR columns include \fBunknown\fR\[char46]
+.TP
+\fBdynamic\fR
+Use \fBdynamic\fR to make \fBovn\-northd\fR generate a globally unique MAC address, choose an unused IPv4 address with the logical port\(cqs subnet (if \fBother_config:subnet\fR is set in the port\(cqs \fBLogical_Switch\fR), and generate an IPv6 address from the MAC address (if \fBother_config:ipv6_prefix\fR is set in the port\(cqs \fBLogical_Switch\fR) and store them in the port\(cqs \fBdynamic_addresses\fR column\[char46]
+.IP
+Only one element containing \fBdynamic\fR may appear in \fBaddresses\fR\[char46]
+.TP
+\fBdynamic\fR \fIip\fR
+.TQ .5in
+\fBdynamic\fR \fIipv6\fR
+.TQ .5in
+\fBdynamic\fR \fIip\fR \fIipv6\fR
+These act like \fBdynamic\fR alone but specify particular IPv4 or IPv6 addresses to use\[char46] OVN IPAM will still automatically allocate the other address if configured appropriately\[char46] Example: \fBdynamic 192\[char46]168\[char46]0\[char46]1 2001::1\fR\[char46]
+.TP
+\fImac\fR \fBdynamic\fR
+This acts like \fBdynamic\fR alone but specifies a particular MAC address to use\[char46] OVN IPAM will still automatically allocate IPv4 or IPv6 addresses, or both, if configured appropriately\[char46] Example: \fB80:fa:5b:06:72:b7 dynamic\fR
+.TP
+\fBrouter\fR
+Accepted only when \fBtype\fR is \fBrouter\fR\[char46] This indicates that the Ethernet, IPv4, and IPv6 addresses for this logical switch port should be obtained from the connected logical router port, as specified by \fBrouter\-port\fR in \fBoptions\fR\[char46]
+.IP
+The resulting addresses are used to populate the logical switch\(cqs destination lookup, and also for the logical switch to generate ARP and ND replies\[char46]
+.IP
+If the connected logical router port has a distributed gateway port specified and the logical router has rules specified in \fBnat\fR with \fBexternal_mac\fR, then those addresses are also used to populate the switch\(cqs destination lookup\[char46]
+.IP
+Supported only in OVN 2\[char46]7 and later\[char46] Earlier versions required router addresses to be manually synchronized\[char46]
+.RE
+.IP "\fBdynamic_addresses\fR: optional string"
+Addresses assigned to the logical port by \fBovn\-northd\fR, if \fBdynamic\fR is specified in \fBaddresses\fR\[char46] Addresses will be of the same format as those that populate the \fBaddresses\fR column\[char46] Note that dynamically assigned addresses are constructed and managed locally in ovn-northd, so they cannot be reconstructed in the event that the database is lost\[char46]
+.IP "\fBport_security\fR: set of strings"
+This column controls the addresses from which the host attached to the logical port (``the host\(cq\(cq) is allowed to send packets and to which it is allowed to receive packets\[char46] If this column is empty, all addresses are permitted\[char46]
+.IP
+Each element in the set must begin with one Ethernet address\[char46] This would restrict the host to sending packets from and receiving packets to the ethernet addresses defined in the logical port\(cqs \fBport_security\fR column\[char46] It also restricts the inner source MAC addresses that the host may send in ARP and IPv6 Neighbor Discovery packets\[char46] The host is always allowed to receive packets to multicast and broadcast Ethernet addresses\[char46]
+.IP
+Each element in the set may additionally contain one or more IPv4 or IPv6 addresses (or both), with optional masks\[char46] If a mask is given, it must be a CIDR mask\[char46] In addition to the restrictions described for Ethernet addresses above, such an element restricts the IPv4 or IPv6 addresses from which the host may send and to which it may receive packets to the specified addresses\[char46] A masked address, if the host part is zero, indicates that the host is allowed to use any address in the subnet; if the host part is nonzero, the mask simply indicates the size of the subnet\[char46] In addition:
+.RS
+.IP \(bu
+If any IPv4 address is given, the host is also allowed to receive packets to the IPv4 local broadcast address 255\[char46]255\[char46]255\[char46]255 and to IPv4 multicast addresses (224\[char46]0\[char46]0\[char46]0/4)\[char46] If an IPv4 address with a mask is given, the host is also allowed to receive packets to the broadcast address in that specified subnet\[char46]
+.IP
+If any IPv4 address is given, the host is additionally restricted to sending ARP packets with the specified source IPv4 address\[char46] (RARP is not restricted\[char46])
+.IP \(bu
+If any IPv6 address is given, the host is also allowed to receive packets to IPv6 multicast addresses (ff00::/8)\[char46]
+.IP
+If any IPv6 address is given, the host is additionally restricted to sending IPv6 Neighbor Discovery Solicitation or Advertisement packets with the specified source address or, for solicitations, the unspecified address\[char46]
+.RE
+.IP
+If an element includes an IPv4 address, but no IPv6 addresses, then IPv6 traffic is not allowed\[char46] If an element includes an IPv6 address, but no IPv4 address, then IPv4 and ARP traffic is not allowed\[char46]
+.IP
+This column uses the same lexical syntax as the \fBmatch\fR column in the OVN Southbound database\(cqs \fBPipeline\fR table\[char46] Multiple addresses within an element may be space or comma separated\[char46]
+.IP
+This column is provided as a convenience to cloud management systems, but all of the features that it implements can be implemented as ACLs using the \fBACL\fR table\[char46]
+.IP
+Examples:
+.RS
+.TP
+\fB80:fa:5b:06:72:b7\fR
+The host may send traffic from and receive traffic to the specified MAC address, and to receive traffic to Ethernet multicast and broadcast addresses, but not otherwise\[char46] The host may not send ARP or IPv6 Neighbor Discovery packets with inner source Ethernet addresses other than the one specified\[char46]
+.TP
+\fB80:fa:5b:06:72:b7 192\[char46]168\[char46]1\[char46]10/24\fR
+This adds further restrictions to the first example\[char46] The host may send IPv4 packets from or receive IPv4 packets to only 192\[char46]168\[char46]1\[char46]10, except that it may also receive IPv4 packets to 192\[char46]168\[char46]1\[char46]255 (based on the subnet mask), 255\[char46]255\[char46]255\[char46]255, and any address in 224\[char46]0\[char46]0\[char46]0/4\[char46] The host may not send ARPs with a source Ethernet address other than 80:fa:5b:06:72:b7 or source IPv4 address other than 192\[char46]168\[char46]1\[char46]10\[char46] The host may not send or receive any IPv6 (including IPv6 Neighbor Discovery) traffic\[char46]
+.TP
+\fB\(dq80:fa:5b:12:42:ba\(dq, \(dq80:fa:5b:06:72:b7 192\[char46]168\[char46]1\[char46]10/24\(dq\fR
+The host may send traffic from and receive traffic to the specified MAC addresses, and to receive traffic to Ethernet multicast and broadcast addresses, but not otherwise\[char46] With MAC 80:fa:5b:12:42:ba, the host may send traffic from and receive traffic to any L3 address\[char46] With MAC 80:fa:5b:06:72:b7, the host may send IPv4 packets from or receive IPv4 packets to only 192\[char46]168\[char46]1\[char46]10, except that it may also receive IPv4 packets to 192\[char46]168\[char46]1\[char46]255 (based on the subnet mask), 255\[char46]255\[char46]255\[char46]255, and any address in 224\[char46]0\[char46]0\[char46]0/4\[char46] The host may not send or receive any IPv6 (including IPv6 Neighbor Discovery) traffic\[char46]
+.RE
+.ST "DHCP:"
+.PP
+.IP "\fBdhcpv4_options\fR: optional weak reference to \fBDHCP_Options\fR"
+This column defines the DHCPv4 Options to be included by the \fBovn\-controller\fR when it replies to the DHCPv4 requests\[char46] Please see the \fBDHCP_Options\fR table\[char46]
+.IP "\fBdhcpv6_options\fR: optional weak reference to \fBDHCP_Options\fR"
+This column defines the DHCPv6 Options to be included by the \fBovn\-controller\fR when it replies to the DHCPv6 requests\[char46] Please see the \fBDHCP_Options\fR table\[char46]
+.IP "\fBmirror_rules\fR: set of weak reference to \fBMirror\fRs"
+Mirror rules that apply to logical switch port which is the source\[char46] Please see the \fBMirror\fR table\[char46]
+.IP "\fBha_chassis_group\fR: optional \fBHA_Chassis_Group\fR"
+References a row in the OVN Northbound database\(cqs \fBHA_Chassis_Group\fR table\[char46] It indicates the HA chassis group to use if the \fBtype\fR is set to \fBexternal\fR\[char46] If \fBtype\fR is not \fBexternal\fR, this column is ignored\[char46]
+.ST "Naming:"
+.PP
+.IP "\fBexternal_ids : neutron:port_name\fR: optional string"
+This column gives an optional human-friendly name for the port\[char46] This name has no special meaning or purpose other than to provide convenience for human interaction with the northbound database\[char46]
+.IP
+Neutron copies this from its own port object\(cqs name\[char46] (Neutron ports do are not assigned human-friendly names by default, so it will often be empty\[char46])
+.ST "Tunnel Key:"
+.PP
+.IP "\fBoptions : requested-tnl-key\fR: optional string, containing an integer, in range 1 to 32,767"
+Configures the port binding tunnel key for the port\[char46] Usually this is not needed because \fBovn\-northd\fR will assign an unique key for each port by itself\[char46] However, if it is configured, \fBovn\-northd\fR honors the configured value\[char46] The typical use case is for interconnection: the tunnel keys for ports on transit switches need to be unique globally, so they are maintained in the global \fBOVN_IC_Southbound\fR database, and \fBovn\-ic\fR simply syncs the value from \fBOVN_IC_Southbound\fR through this config\[char46]
+.ST "Common Columns:"
+.PP
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+See \fBExternal IDs\fR at the beginning of this document\[char46]
+.IP
+The \fBovn\-northd\fR program copies all these pairs into the \fBexternal_ids\fR column of the \fBPort_Binding\fR table in \fBOVN_Southbound\fR database\[char46]
+.bp
+.SH "Forwarding_Group TABLE"
+.PP
+.PP
+.PP
+Each row represents one forwarding group\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBname\fR
+string
+.TQ 3.00in
+\fBvip\fR
+string
+.TQ 3.00in
+\fBvmac\fR
+string
+.TQ 3.00in
+\fBliveness\fR
+boolean
+.TQ 3.00in
+\fBchild_port\fR
+set of 1 or more strings
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.RE
+.SS "Details:
+.IP "\fBname\fR: string"
+A name for the forwarding group\[char46] This name has no special meaning or purpose other than to provide convenience for human interaction with the ovn-nb database\[char46]
+.IP "\fBvip\fR: string"
+The virtual IP address assigned to the forwarding group\[char46] It will respond with vmac when an ARP request is sent for vip\[char46]
+.IP "\fBvmac\fR: string"
+The virtual MAC address assigned to the forwarding group\[char46]
+.IP "\fBliveness\fR: boolean"
+If set to \fBtrue\fR, liveness is enabled for child ports otherwise it is disabled\[char46]
+.IP "\fBchild_port\fR: set of 1 or more strings"
+List of child ports in the forwarding group\[char46]
+.ST "Common Columns:"
+.PP
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+See \fBExternal IDs\fR at the beginning of this document\[char46]
+.bp
+.SH "Address_Set TABLE"
+.PP
+.PP
+.PP
+Each row in this table represents a named set of addresses\[char46] An address set may contain Ethernet, IPv4, or IPv6 addresses with optional bitwise or CIDR masks\[char46] Address set may ultimately be used in ACLs to compare against fields such as \fBip4\[char46]src\fR or \fBip6\[char46]src\fR\[char46] A single address set must contain addresses of the same type\[char46] As an example, the following would create an address set with three IP addresses:
+.PP
+.nf
+\fB
+.br
+\fB      ovn\-nbctl create Address_Set name=set1 addresses=\(cq10\[char46]0\[char46]0\[char46]1 10\[char46]0\[char46]0\[char46]2 10\[char46]0\[char46]0\[char46]3\(cq
+.br
+\fB    \fR
+.fi
+.PP
+.PP
+Address sets may be used in the \fBmatch\fR column of the \fBACL\fR table\[char46] For syntax information, see the details of the expression language used for the \fBmatch\fR column in the \fBLogical_Flow\fR table of the \fBOVN_Southbound\fR database\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBname\fR
+string (must be unique within table)
+.TQ 3.00in
+\fBaddresses\fR
+set of strings
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.RE
+.SS "Details:
+.IP "\fBname\fR: string (must be unique within table)"
+A name for the address set\[char46] Names are ASCII and must match \fB[a\-zA\-Z_\[char46]][a\-zA\-Z_\[char46]0\-9]*\fR\[char46]
+.IP "\fBaddresses\fR: set of strings"
+The set of addresses in string form\[char46]
+.ST "Common Columns:"
+.PP
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+See \fBExternal IDs\fR at the beginning of this document\[char46]
+.bp
+.SH "Port_Group TABLE"
+.PP
+.PP
+.PP
+Each row in this table represents a named group of logical switch ports\[char46]
+.PP
+.PP
+Port groups may be used in the \fBmatch\fR column of the \fBACL\fR table\[char46] For syntax information, see the details of the expression language used for the \fBmatch\fR column in the \fBLogical_Flow\fR table of the \fBOVN_Southbound\fR database\[char46]
+.PP
+.PP
+For each port group, there are two address sets generated to the \fBAddress_Set\fR table of the \fBOVN_Southbound\fR database, containing the IP addresses of the group of ports, one for IPv4, and the other for IPv6, with \fBname\fR being the \fBname\fR of the \fBPort_Group\fR followed by a suffix \fB_ip4\fR for IPv4 and \fB_ip6\fR for IPv6\[char46] The generated address sets can be used in the same way as regular address sets in the \fBmatch\fR column of the \fBACL\fR table\[char46] For syntax information, see the details of the expression language used for the \fBmatch\fR column in the \fBLogical_Flow\fR table of the \fBOVN_Southbound\fR database\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBname\fR
+string (must be unique within table)
+.TQ 3.00in
+\fBports\fR
+set of weak reference to \fBLogical_Switch_Port\fRs
+.TQ 3.00in
+\fBacls\fR
+set of \fBACL\fRs
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.RE
+.SS "Details:
+.IP "\fBname\fR: string (must be unique within table)"
+A name for the port group\[char46] Names are ASCII and must match \fB[a\-zA\-Z_\[char46]][a\-zA\-Z_\[char46]0\-9]*\fR\[char46]
+.IP "\fBports\fR: set of weak reference to \fBLogical_Switch_Port\fRs"
+The logical switch ports belonging to the group in uuids\[char46]
+.IP "\fBacls\fR: set of \fBACL\fRs"
+Access control rules that apply to the port group\[char46] Applying an ACL to a port group has the same effect as applying the ACL to all logical lswitches that the ports of the port group belong to\[char46]
+.ST "Common Columns:"
+.PP
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+See \fBExternal IDs\fR at the beginning of this document\[char46]
+.bp
+.SH "Load_Balancer TABLE"
+.PP
+.PP
+.PP
+Each row represents one load balancer\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBname\fR
+string
+.TQ 3.00in
+\fBvips\fR
+map of string-string pairs
+.TQ 3.00in
+\fBprotocol\fR
+optional string, one of \fBsctp\fR, \fBtcp\fR, or \fBudp\fR
+.TQ .25in
+\fIHealth Checks:\fR
+.RS .25in
+.TQ 2.75in
+\fBhealth_check\fR
+set of \fBLoad_Balancer_Health_Check\fRs
+.TQ 2.75in
+\fBip_port_mappings\fR
+map of string-string pairs
+.RE
+.TQ 3.00in
+\fBselection_fields\fR
+set of strings, one of \fBeth_dst\fR, \fBeth_src\fR, \fBip_dst\fR, \fBip_src\fR, \fBtp_dst\fR, or \fBtp_src\fR
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.RE
+.TQ .25in
+\fILoad_Balancer options:\fR
+.RS .25in
+.TQ 2.75in
+\fBoptions : reject\fR
+optional string, either \fBtrue\fR or \fBfalse\fR
+.TQ 2.75in
+\fBoptions : hairpin_snat_ip\fR
+optional string
+.TQ 2.75in
+\fBoptions : skip_snat\fR
+optional string
+.TQ 2.75in
+\fBoptions : add_route\fR
+optional string
+.TQ 2.75in
+\fBoptions : neighbor_responder\fR
+optional string
+.TQ 2.75in
+\fBoptions : template\fR
+optional string
+.TQ 2.75in
+\fBoptions : address-family\fR
+optional string
+.TQ 2.75in
+\fBoptions : affinity_timeout\fR
+optional string
+.TQ 2.75in
+\fBoptions : ct_flush\fR
+optional string, either \fBtrue\fR or \fBfalse\fR
+.RE
+.SS "Details:
+.IP "\fBname\fR: string"
+A name for the load balancer\[char46] This name has no special meaning or purpose other than to provide convenience for human interaction with the ovn-nb database\[char46]
+.IP "\fBvips\fR: map of string-string pairs"
+A map of virtual IP addresses (and an optional port number with \fB:\fR as a separator) associated with this load balancer and their corresponding endpoint IP addresses (and optional port numbers with \fB:\fR as separators) separated by commas\[char46] If the destination IP address (and port number) of a packet leaving a container or a VM matches the virtual IP address (and port number) provided here as a key, then OVN will statefully replace the destination IP address by one of the provided IP address (and port number) in this map as a value\[char46] IPv4 and IPv6 addresses are supported for load balancing; however a VIP of one address family may not be mapped to a destination IP address of a different family\[char46] If specifying an IPv6 address with a port, the address portion must be enclosed in square brackets\[char46] Examples for keys are \(dq192\[char46]168\[char46]1\[char46]4\(dq and \(dq[fd0f::1]:8800\(dq\[char46] Examples for value are \(dq10\[char46]0\[char46]0\[char46]1, 10\[char46]0\[char46]0\[char46]2\(dq and \(dq20\[char46]0\[char46]0\[char46]10:8800, 20\[char46]0\[char46]0\[char46]11:8800\(dq\[char46]
+.IP
+When the \fBLoad_Balancer\fR is added to the \fBlogical_switch\fR, the VIP has to be in a different subnet than the one used for the \fBlogical_switch\fR\[char46] Since VIP is in a different subnet, you should connect your logical switch to either a OVN logical router or a real router (this is because the client can now send a packet with VIP as the destination IP address and router\(cqs mac address as the destination MAC address)\[char46]
+.IP "\fBprotocol\fR: optional string, one of \fBsctp\fR, \fBtcp\fR, or \fBudp\fR"
+Valid protocols are \fBtcp\fR, \fBudp\fR, or \fBsctp\fR\[char46] This column is useful when a port number is provided as part of the \fBvips\fR column\[char46] If this column is empty and a port number is provided as part of \fBvips\fR column, OVN assumes the protocol to be \fBtcp\fR\[char46]
+.ST "Health Checks:"
+.PP
+.PP
+.PP
+OVN supports health checks for load balancer endpoints\[char46] When health checks are enabled, the load balancer uses only healthy endpoints\[char46]
+.PP
+.PP
+Suppose that \fBvips\fR contains a key-value pair \fB10\[char46]0\[char46]0\[char46]10:80\fR=\fB10\[char46]0\[char46]0\[char46]4:8080,20\[char46]0\[char46]0\[char46]4:8080\fR\[char46] To enable health checks for this virtual\(cqs endpoints, add two key-value pairs to \fBip_port_mappings\fR, with keys \fB10\[char46]0\[char46]0\[char46]4\fR and \fB20\[char46]0\[char46]0\[char46]4\fR, and add to \fBhealth_check\fR a reference to a \fBLoad_Balancer_Health_Check\fR row whose \fBvip\fR is set to \fB10\[char46]0\[char46]0\[char46]10\fR\[char46] The same approach can be used for IPv6 as well\[char46]
+.IP "\fBhealth_check\fR: set of \fBLoad_Balancer_Health_Check\fRs"
+Load balancer health checks associated with this load balancer\[char46]
+.IP "\fBip_port_mappings\fR: map of string-string pairs"
+Maps from endpoint IP to a colon-separated pair of logical port name and source IP, e\[char46]g\[char46] \fB\fIport_name\fB:\fIsourc_ip\fB\fR for IPv4\[char46] Health checks are sent to this port with the specified source IP\[char46] For IPv6 square brackets must be used around IP address, e\[char46]g: \fB\fIport_name\fB:\fI[sourc_ip]\fB\fR
+.IP
+For example, in the example above, IP to port mappings might be defined as \fB10\[char46]0\[char46]0\[char46]4\fR=\fBsw0\-p1:10\[char46]0\[char46]0\[char46]2\fR and \fB20\[char46]0\[char46]0\[char46]4\fR=\fBsw1\-p1:20\[char46]0\[char46]0\[char46]2\fR, if the values given were suitable ports and IP addresses\[char46]
+.IP
+For IPv6 IP to port mappings might be defined as \fB[2001::1]\fR=\fBsw0\-p1:[2002::1]\fR\[char46]
+.IP "\fBselection_fields\fR: set of strings, one of \fBeth_dst\fR, \fBeth_src\fR, \fBip_dst\fR, \fBip_src\fR, \fBtp_dst\fR, or \fBtp_src\fR"
+OVN native load balancers are supported using the OpenFlow groups of type \fBselect\fR\[char46] OVS supports two selection methods: \fBdp_hash\fR and \fBhash (with optional fields
+specified)\fR in selecting the buckets of a group\[char46] Please see the OVS documentation (man ovs-ofctl) for more details on the selection methods\[char46] Each endpoint IP (and port if set) is mapped to a bucket in the group flow\[char46]
+.IP
+CMS can choose the \fBhash\fR selection method by setting the selection fields in this column\[char46] \fBovs\-vswitchd\fR uses the specified fields in generating the hash\[char46]
+.IP
+\fBdp_hash\fR selection method uses the assistance of datapath to calculate the hash and it is expected to be faster than \fBhash\fR selection method\[char46] So CMS should take this into consideration before using the \fBhash\fR method\[char46] Please consult the OVS documentation and OVS sources for the implementation details\[char46]
+.ST "Common Columns:"
+.PP
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+See \fBExternal IDs\fR at the beginning of this document\[char46]
+.ST "Load_Balancer options:"
+.PP
+.IP "\fBoptions : reject\fR: optional string, either \fBtrue\fR or \fBfalse\fR"
+If the load balancer is created with \fB\-\-reject\fR option and it has no active backends, a TCP reset segment (for tcp) or an ICMP port unreachable packet (for all other kind of traffic) will be sent whenever an incoming packet is received for this load-balancer\[char46] Please note using \fB\-\-reject\fR option will disable empty_lb SB controller event for this load balancer\[char46]
+.IP "\fBoptions : hairpin_snat_ip\fR: optional string"
+IP to be used as source IP for packets that have been hair-pinned after load balancing\[char46] The default behavior when the option is not set is to use the load balancer VIP as source IP\[char46] This option may have exactly one IPv4 and/or one IPv6 address on it, separated by a space character\[char46]
+.IP "\fBoptions : skip_snat\fR: optional string"
+If the load balancing rule is configured with \fBskip_snat\fR option, the option lb_force_snat_ip configured for the logical router that references this load balancer will not be applied for this load balancer\[char46]
+.IP "\fBoptions : add_route\fR: optional string"
+If set to \fBtrue\fR, then neighbor routers will have logical flows added that will allow for routing to the VIP IP\[char46] It also will have ARP resolution logical flows added\[char46] By setting this option, it means there is no reason to create a \fBLogical_Router_Static_Route\fR from neighbor routers to this NAT address\[char46] It also means that no ARP request is required for neighbor routers to learn the IP-MAC mapping for this VIP IP\[char46] For more information about what flows are added for IP routes, please see the \fBovn\-northd\fR manpage section on IP Routing\[char46]
+.IP "\fBoptions : neighbor_responder\fR: optional string"
+If set to \fBall\fR, then routers on which the load balancer is applied reply to ARP/neighbor discovery requests for all VIPs of the load balancer\[char46] If set to \fBreachable\fR, then routers on which the load balancer is applied reply to ARP/neighbor discovery requests only for VIPs that are part of a router\(cqs subnet\[char46] If set to \fBnone\fR, then routers on which the load balancer is applied never reply to ARP/neighbor discovery requests for any of the load balancer VIPs\[char46] Load balancers with \fBoptions:template=true\fR do not support \fBreachable\fR as a valid mode\[char46] The default value of this option, if not specified, is \fBreachable\fR for regular load balancers and \fBnone\fR for template load balancers\[char46]
+.IP "\fBoptions : template\fR: optional string"
+Option to be set to \fBtrue\fR, if the load balancer is a template\[char46] The load balancer VIPs and backends must be using \fBChassis_Template_Var\fR in their definitions\[char46]
+.IP
+Load balancer template VIP supported formats are:
+.IP
+.nf
+\fB
+.br
+\fB^VIP_VAR[:^PORT_VAR|:port]
+.br
+\fB        \fR
+.fi
+.IP
+where \fBVIP_VAR\fR and \fBPORT_VAR\fR are keys of the \fBChassis_Template_Var\fR \fBvariables\fR records\[char46]
+.IP
+Note: The VIP and PORT cannot be combined into a single template variable\[char46] For example, a \fBChassis_Template_Var\fR variable expanding to \fB10\[char46]0\[char46]0\[char46]1:8080\fR is not valid if used as VIP\[char46]
+.IP
+Load balancer template backend supported formats are:
+.IP
+.nf
+\fB
+.br
+\fB^BACKEND_VAR1[:^PORT_VAR1|:port],^BACKEND_VAR2[:^PORT_VAR2|:port]
+.br
+\fB
+.br
+\fBor
+.br
+\fB
+.br
+\fB^BACKENDS_VAR1,^BACKENDS_VAR2
+.br
+\fB        \fR
+.fi
+.IP
+where \fBBACKEND_VAR1\fR, \fBPORT_VAR1\fR, \fBBACKEND_VAR2\fR, \fBPORT_VAR2\fR, \fBBACKENDS_VAR1\fR and \fBBACKENDS_VAR2\fR are keys of the \fBChassis_Template_Var\fR \fBvariables\fR records\[char46]
+.IP "\fBoptions : address-family\fR: optional string"
+Address family used by the load balancer\[char46] Supported values are \fBipv4\fR and \fBipv6\fR\[char46] The address-family is only used for load balancers with \fBoptions:template=true\fR\[char46] For explicit load balancers, setting the address-family has no effect\[char46]
+.IP "\fBoptions : affinity_timeout\fR: optional string"
+If the CMS provides a positive value (in seconds) for \fBaffinity_timeout\fR, OVN will dnat connections received from the same client to this lb to the same backend if received in the affinity timeslot\[char46] Max supported affinity_timeout is 65535 seconds\[char46]
+.IP "\fBoptions : ct_flush\fR: optional string, either \fBtrue\fR or \fBfalse\fR"
+The value indicates whether ovn-controller should flush CT entries that are related to this LB\[char46] The flush happens if the LB is removed, any of the backends is updated/removed or the LB is not considered local anymore by the ovn-controller\[char46] This option is set to \fBfalse\fR by default\[char46]
+.bp
+.SH "Load_Balancer_Group TABLE"
+.PP
+.PP
+.PP
+Each row represents a logical grouping of load balancers\[char46] It is up to the CMS to decide the criteria on which load balancers are grouped together\[char46] To simplify configuration and to optimize its processing load balancers that must be associated to the same set of logical switches and/or logical routers should be grouped together\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBname\fR
+string (must be unique within table)
+.TQ 3.00in
+\fBload_balancer\fR
+set of weak reference to \fBLoad_Balancer\fRs
+.SS "Details:
+.IP "\fBname\fR: string (must be unique within table)"
+A name for the load balancer group\[char46] This name has no special meaning or purpose other than to provide convenience for human interaction with the ovn-nb database\[char46]
+.IP "\fBload_balancer\fR: set of weak reference to \fBLoad_Balancer\fRs"
+A set of load balancers\[char46]
+.bp
+.SH "Load_Balancer_Health_Check TABLE"
+.PP
+.PP
+.PP
+Each row represents one load balancer health check\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBvip\fR
+string
+.TQ .25in
+\fIHealth check options:\fR
+.RS .25in
+.TQ 2.75in
+\fBoptions : interval\fR
+optional string, containing an integer
+.TQ 2.75in
+\fBoptions : timeout\fR
+optional string, containing an integer
+.TQ 2.75in
+\fBoptions : success_count\fR
+optional string, containing an integer
+.TQ 2.75in
+\fBoptions : failure_count\fR
+optional string, containing an integer
+.RE
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.RE
+.SS "Details:
+.IP "\fBvip\fR: string"
+\fBvip\fR whose endpoints should be monitored for health check\[char46]
+.ST "Health check options:"
+.PP
+.IP "\fBoptions : interval\fR: optional string, containing an integer"
+The interval, in seconds, between health checks\[char46]
+.IP "\fBoptions : timeout\fR: optional string, containing an integer"
+The time, in seconds, after which a health check times out\[char46]
+.IP "\fBoptions : success_count\fR: optional string, containing an integer"
+The number of successful checks after which the endpoint is considered online\[char46]
+.IP "\fBoptions : failure_count\fR: optional string, containing an integer"
+The number of failure checks after which the endpoint is considered offline\[char46]
+.ST "Common Columns:"
+.PP
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+See \fBExternal IDs\fR at the beginning of this document\[char46]
+.bp
+.SH "ACL TABLE"
+.PP
+.PP
+.PP
+Each row in this table represents one ACL rule for a logical switch or a port group that points to it through its \fBacls\fR column\[char46] The \fBaction\fR column for the highest-\fBpriority\fR matching row in this table determines a packet\(cqs treatment\[char46] If no row matches, packets are allowed by default\[char46] (Default-deny treatment is possible: add a rule with \fBpriority\fR 0, \fB1\fR as \fBmatch\fR, and \fBdeny\fR as \fBaction\fR\[char46])
+.SS "Summary:
+.TQ 3.00in
+\fBlabel\fR
+integer, in range 0 to 4,294,967,295
+.TQ 3.00in
+\fBpriority\fR
+integer, in range 0 to 32,767
+.TQ 3.00in
+\fBdirection\fR
+string, either \fBfrom\-lport\fR or \fBto\-lport\fR
+.TQ 3.00in
+\fBmatch\fR
+string
+.TQ 3.00in
+\fBaction\fR
+string, one of \fBallow\-related\fR, \fBallow\-stateless\fR, \fBallow\fR, \fBdrop\fR, \fBpass\fR, or \fBreject\fR
+.TQ 3.00in
+\fBtier\fR
+integer, in range 0 to 3
+.TQ .25in
+\fIoptions:\fR
+.RS .25in
+.TQ 2.75in
+\fBoptions : apply-after-lb\fR
+optional string
+.RE
+.TQ .25in
+\fILogging:\fR
+.RS .25in
+.TQ 2.75in
+\fBlog\fR
+boolean
+.TQ 2.75in
+\fBname\fR
+optional string, at most 63 characters long
+.TQ 2.75in
+\fBseverity\fR
+optional string, one of \fBalert\fR, \fBdebug\fR, \fBinfo\fR, \fBnotice\fR, or \fBwarning\fR
+.TQ 2.75in
+\fBmeter\fR
+optional string
+.RE
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBoptions\fR
+map of string-string pairs
+.TQ .25in
+\fIACL configuration options:\fR
+.RS .25in
+.TQ 2.50in
+\fBoptions : log-related\fR
+optional string
+.RE
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.RE
+.SS "Details:
+.IP "\fBlabel\fR: integer, in range 0 to 4,294,967,295"
+Associates an identifier with the ACL\[char46] The same value will be written to corresponding connection tracker entry\[char46] The value should be a valid 32-bit unsigned integer\[char46] This value can help in debugging from connection tracker side\[char46] For example, through this \(dqlabel\(dq we can backtrack to the ACL rule which is causing a \(dqleaked\(dq connection\[char46] Connection tracker entries are created only for allowed connections so the label is valid only for allow and allow-related actions\[char46]
+.IP "\fBpriority\fR: integer, in range 0 to 32,767"
+The ACL rule\(cqs priority\[char46] Rules with numerically higher priority take precedence over those with lower\[char46] If two ACL rules with the same priority both match, then the one actually applied to a packet is undefined\[char46]
+.IP
+Return traffic from an \fBallow\-related\fR flow is always allowed and cannot be changed through an ACL\[char46]
+.IP
+\fBallow\-stateless\fR flows always take precedence before stateful ACLs, regardless of their priority\[char46] (Both \fBallow\fR and \fBallow\-related\fR ACLs can be stateful\[char46])
+.IP "\fBdirection\fR: string, either \fBfrom\-lport\fR or \fBto\-lport\fR"
+Direction of the traffic to which this rule should apply:
+.RS
+.IP \(bu
+\fBfrom\-lport\fR: Used to implement filters on traffic arriving from a logical port\[char46] These rules are applied to the logical switch\(cqs ingress pipeline\[char46]
+.IP \(bu
+\fBto\-lport\fR: Used to implement filters on traffic forwarded to a logical port\[char46] These rules are applied to the logical switch\(cqs egress pipeline\[char46]
+.RE
+.IP "\fBmatch\fR: string"
+The packets that the ACL should match, in the same expression language used for the \fBmatch\fR column in the OVN Southbound database\(cqs \fBLogical_Flow\fR table\[char46] The \fBoutport\fR logical port is only available in the \fBto\-lport\fR direction (the \fBinport\fR is available in both directions)\[char46]
+.IP
+By default all traffic is allowed\[char46] When writing a more restrictive policy, it is important to remember to allow flows such as ARP and IPv6 neighbor discovery packets\[char46]
+.IP
+Note that you can not create an ACL matching on a port with type=router or type=localnet\[char46]
+.IP "\fBaction\fR: string, one of \fBallow\-related\fR, \fBallow\-stateless\fR, \fBallow\fR, \fBdrop\fR, \fBpass\fR, or \fBreject\fR"
+The action to take when the ACL rule matches:
+.RS
+.IP \(bu
+\fBallow\-stateless\fR: Always forward the packet in stateless manner, omitting connection tracking mechanism, regardless of other rules defined for the switch\[char46] May require defining additional rules for inbound replies\[char46] For example, if you define a rule to allow outgoing TCP traffic directed to an IP address, then you probably also want to define another rule to allow incoming TCP traffic coming from this same IP address\[char46] In addition, traffic that matches stateless ACLs will bypass load-balancer DNAT/un-DNAT processing\[char46] Stateful ACLs should be used instead if the traffic is supposed to be load-balanced\[char46]
+.IP \(bu
+\fBallow\fR: Forward the packet\[char46] It will also send the packets through connection tracking when \fBallow\-related\fR rules exist on the logical switch\[char46] Otherwise, it\(cqs equivalent to \fBallow\-stateless\fR\[char46]
+.IP \(bu
+\fBallow\-related\fR: Forward the packet and related traffic (e\[char46]g\[char46] inbound replies to an outbound connection)\[char46]
+.IP \(bu
+\fBdrop\fR: Silently drop the packet\[char46]
+.IP \(bu
+\fBreject\fR: Drop the packet, replying with a RST for TCP or ICMPv4/ICMPv6 unreachable message for other IPv4/IPv6-based protocols\[char46]
+.IP \(bu
+\fBpass\fR: Pass to the next ACL tier\[char46] If using multiple ACL tiers, a match on this ACL will stop evaluating ACLs at the current tier and move to the next one\[char46] If not using ACL tiers or if a \fBpass\fR ACL is matched at the final tier, then the \fBoptions:default_acl_drop\fR option from the \fBNB_Global\fR table is used to determine how to proceed\[char46]
+.RE
+.IP "\fBtier\fR: integer, in range 0 to 3"
+The hierarchical tier that this ACL belongs to\[char46]
+.IP
+ACLs can be assigned to numerical tiers\[char46] When evaluating ACLs, an internal counter is used to determine which tier of ACLs should be evaluated\[char46] Tier 0 ACLs are evaluated first\[char46] If no verdict can be determined, then tier 1 ACLs are evaluated next\[char46] This continues until the maximum tier value is reached\[char46] If all tiers of ACLs are evaluated and no verdict is reached, then the \fBoptions:default_acl_drop\fR option from table \fBNB_Global\fR is used to determine how to proceed\[char46]
+.IP
+In this version of OVN, the maximum tier value for ACLs is 3, meaning there are 4 tiers of ACLs allowed (0\-3)\[char46]
+.ST "options:"
+.PP
+.PP
+.PP
+ACLs options\[char46]
+.IP "\fBoptions : apply-after-lb\fR: optional string"
+If set to true, the ACL will be applied after load balancing stage\[char46] Supported only for \fBfrom\-lport\fR direction\[char46]
+.IP
+The main use case of this option is to support ACLs matching on the destination IP address of the packet for the backend IPs of load balancers\[char46]
+.IP
+\fBOVN\fR will apply the \fBfrom\-lport\fR ACLs in two stages\[char46] ACLs without this option \fBapply\-after\-lb\fR set, will be applied before the load balancer stage and ACLs with this option set will be applied after the load balancer stage\[char46] The priorities are indepedent between these stages and may not be obvious to the CMS\[char46] Hence CMS should be extra careful when using this option and should carefully evaluate the priorities of all the ACLs and the default deny/allow ACLs if any\[char46]
+.ST "Logging:"
+.PP
+.PP
+.PP
+These columns control whether and how OVN logs packets that match an ACL\[char46]
+.IP "\fBlog\fR: boolean"
+If set to \fBtrue\fR, packets that match the ACL will trigger a log message on the transport node or nodes that perform ACL processing\[char46] Logging may be combined with any \fBaction\fR\[char46]
+.IP
+If set to \fBfalse\fR, the remaining columns in this group have no significance\[char46]
+.IP "\fBname\fR: optional string, at most 63 characters long"
+This name, if it is provided, is included in log records\[char46] It provides the administrator and the cloud management system a way to associate a log record with a particular ACL\[char46]
+.IP "\fBseverity\fR: optional string, one of \fBalert\fR, \fBdebug\fR, \fBinfo\fR, \fBnotice\fR, or \fBwarning\fR"
+The severity of the ACL\[char46] The severity levels match those of syslog, in decreasing level of severity: \fBalert\fR, \fBwarning\fR, \fBnotice\fR, \fBinfo\fR, or \fBdebug\fR\[char46] When the column is empty, the default is \fBinfo\fR\[char46]
+.IP "\fBmeter\fR: optional string"
+The name of a meter to rate-limit log messages for the ACL\[char46] The string must match the \fBname\fR column of a row in the \fBMeter\fR table\[char46] By default, log messages are not rate-limited\[char46] In order to ensure that the same \fBMeter\fR rate limits multiple ACL logs separately, set the \fBfair\fR column\[char46]
+.ST "Common Columns:"
+.PP
+.IP "\fBoptions\fR: map of string-string pairs"
+This column provides general key/value settings\[char46] The supported options are described individually below\[char46]
+.ST "ACL configuration options:"
+.PP
+.IP "\fBoptions : log-related\fR: optional string"
+If set to \fBtrue\fR, then log when reply or related traffic is admitted from a stateful ACL\[char46] In order for this option to function, the \fBlog\fR option must be set to \fBtrue\fR and a \fBlabel\fR must be set, and it must be unique to the ACL\[char46] The label is necessary as it is the only means to associate the reply traffic with the ACL to which it belongs\[char46] It must be unique, because otherwise it is ambiguous which ACL will be matched\[char46] Note: If this option is enabled, an extra flow is installed in order to log the related traffic\[char46] Therefore, if this is enabled on all ACLs, then the total number of flows necessary to log the ACL traffic is doubled, compared to if this option is not enabled\[char46]
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+See \fBExternal IDs\fR at the beginning of this document\[char46]
+.bp
+.SH "Logical_Router TABLE"
+.PP
+.PP
+.PP
+Each row represents one L3 logical router\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBports\fR
+set of \fBLogical_Router_Port\fRs
+.TQ 3.00in
+\fBstatic_routes\fR
+set of \fBLogical_Router_Static_Route\fRs
+.TQ 3.00in
+\fBpolicies\fR
+set of \fBLogical_Router_Policy\fRs
+.TQ 3.00in
+\fBenabled\fR
+optional boolean
+.TQ 3.00in
+\fBnat\fR
+set of \fBNAT\fRs
+.TQ 3.00in
+\fBload_balancer\fR
+set of weak reference to \fBLoad_Balancer\fRs
+.TQ 3.00in
+\fBload_balancer_group\fR
+set of \fBLoad_Balancer_Group\fRs
+.TQ .25in
+\fINaming:\fR
+.RS .25in
+.TQ 2.75in
+\fBname\fR
+string
+.TQ 2.75in
+\fBexternal_ids : neutron:router_name\fR
+optional string
+.RE
+.TQ 3.00in
+\fBcopp\fR
+optional weak reference to \fBCopp\fR
+.TQ .25in
+\fIOptions:\fR
+.RS .25in
+.TQ 2.75in
+\fBoptions : chassis\fR
+optional string
+.TQ 2.75in
+\fBoptions : dnat_force_snat_ip\fR
+optional string
+.TQ 2.75in
+\fBoptions : lb_force_snat_ip\fR
+optional string
+.TQ 2.75in
+\fBoptions : mcast_relay\fR
+optional string, either \fBtrue\fR or \fBfalse\fR
+.TQ 2.75in
+\fBoptions : dynamic_neigh_routers\fR
+optional string, either \fBtrue\fR or \fBfalse\fR
+.TQ 2.75in
+\fBoptions : always_learn_from_arp_request\fR
+optional string, either \fBtrue\fR or \fBfalse\fR
+.TQ 2.75in
+\fBoptions : requested-tnl-key\fR
+optional string, containing an integer, in range 1 to 16,777,215
+.TQ 2.75in
+\fBoptions : snat-ct-zone\fR
+optional string, containing an integer, in range 0 to 65,535
+.TQ 2.75in
+\fBoptions : mac_binding_age_threshold\fR
+optional string, containing an integer, in range 0 to 4,294,967,295
+.RE
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.RE
+.SS "Details:
+.IP "\fBports\fR: set of \fBLogical_Router_Port\fRs"
+The router\(cqs ports\[char46]
+.IP "\fBstatic_routes\fR: set of \fBLogical_Router_Static_Route\fRs"
+Zero or more static routes for the router\[char46]
+.IP "\fBpolicies\fR: set of \fBLogical_Router_Policy\fRs"
+Zero or more routing policies for the router\[char46]
+.IP "\fBenabled\fR: optional boolean"
+This column is used to administratively set router state\[char46] If this column is empty or is set to \fBtrue\fR, the router is enabled\[char46] If this column is set to \fBfalse\fR, the router is disabled\[char46] A disabled router has all ingress and egress traffic dropped\[char46]
+.IP "\fBnat\fR: set of \fBNAT\fRs"
+One or more NAT rules for the router\[char46] NAT rules only work on Gateway routers, and on distributed routers with one and only one distributed gateway port\[char46]
+.IP "\fBload_balancer\fR: set of weak reference to \fBLoad_Balancer\fRs"
+Set of load balancers associated to this logical router\[char46] Load balancer Load balancer rules only work on the Gateway routers or routers with one and only one distributed gateway port\[char46]
+.IP "\fBload_balancer_group\fR: set of \fBLoad_Balancer_Group\fRs"
+Set of load balancers groups associated to this logical router\[char46]
+.ST "Naming:"
+.PP
+.PP
+.PP
+These columns provide names for the logical router\[char46] From OVN\(cqs perspective, these names have no special meaning or purpose other than to provide convenience for human interaction with the northbound database\[char46] There is no requirement for the name to be unique\[char46] (For a unique identifier for a logical router, use its row UUID\[char46])
+.PP
+.PP
+(Originally, \fBname\fR was intended to serve the purpose of a human-friendly name, but the Neutron integration used it to uniquely identify its own router object, in the format \fBneutron\-\fIuuid\fB\fR\[char46] Later on, Neutron started propagating the friendly name of a router as \fBexternal_ids:neutron:router_name\fR\[char46] Perhaps this can be cleaned up someday\[char46])
+.IP "\fBname\fR: string"
+A name for the logical router\[char46]
+.IP "\fBexternal_ids : neutron:router_name\fR: optional string"
+Another name for the logical router\[char46]
+.IP "\fBcopp\fR: optional weak reference to \fBCopp\fR"
+The control plane protection policy from table \fBCopp\fR used for metering packets sent to \fBovn\-controller\fR from logical ports of this router\[char46]
+.ST "Options:"
+.PP
+.PP
+.PP
+Additional options for the logical router\[char46]
+.IP "\fBoptions : chassis\fR: optional string"
+If set, indicates that the logical router in question is a Gateway router (which is centralized) and resides in the set chassis\[char46] The same value is also used by \fBovn\-controller\fR to uniquely identify the chassis in the OVN deployment and comes from \fBexternal_ids:system\-id\fR in the \fBOpen_vSwitch\fR table of Open_vSwitch database\[char46]
+.IP
+The Gateway router can only be connected to a distributed router via a switch if SNAT and DNAT are to be configured in the Gateway router\[char46]
+.IP "\fBoptions : dnat_force_snat_ip\fR: optional string"
+If set, indicates a set of IP addresses to use to force SNAT a packet that has already been DNATed in the gateway router\[char46] When multiple gateway routers are configured, a packet can potentially enter any of the gateway router, get DNATted and eventually reach the logical switch port\[char46] For the return traffic to go back to the same gateway router (for unDNATing), the packet needs a SNAT in the first place\[char46] This can be achieved by setting the above option with a gateway specific set of IP addresses\[char46] This option may have exactly one IPv4 and/or one IPv6 address on it, separated by a a space\[char46]
+.IP "\fBoptions : lb_force_snat_ip\fR: optional string"
+If set, this option can take two possible type of values\[char46] Either a set of IP addresses or the string value - \fBrouter_ip\fR\[char46]
+.IP
+If a set of IP addresses are configured, it indicates to use to force SNAT a packet that has already been load-balanced in the gateway router\[char46] When multiple gateway routers are configured, a packet can potentially enter any of the gateway routers, get DNATted as part of the load-balancing and eventually reach the logical switch port\[char46] For the return traffic to go back to the same gateway router (for unDNATing), the packet needs a SNAT in the first place\[char46] This can be achieved by setting the above option with a gateway specific set of IP addresses\[char46] This option may have exactly one IPv4 and/or one IPv6 address on it, separated by a space character\[char46]
+.IP
+If it is configured with the value \fBrouter_ip\fR, then the load balanced packet is SNATed with the IP of router port (attached to the gateway router) selected as the destination after taking the routing decision\[char46]
+.IP "\fBoptions : mcast_relay\fR: optional string, either \fBtrue\fR or \fBfalse\fR"
+Enables/disables IP multicast relay between logical switches connected to the logical router\[char46] Default: False\[char46]
+.IP "\fBoptions : dynamic_neigh_routers\fR: optional string, either \fBtrue\fR or \fBfalse\fR"
+If set to \fBtrue\fR, the router will resolve neighbor routers\(cq MAC addresses only by dynamic ARP/ND, instead of prepopulating static mappings for all neighbor routers in the ARP/ND Resolution stage\[char46] This reduces number of flows, but requires ARP/ND messages to resolve the IP-MAC bindings when needed\[char46] It is \fBfalse\fR by default\[char46] It is recommended to set to \fBtrue\fR when a large number of logical routers are connected to the same logical switch but most of them never need to send traffic between each other\[char46] By default, ovn-northd does not create mappings to NAT and load balancer addresess\[char46] However, for NAT and load balancer addresses that have the \fBadd_route\fR option added, ovn-northd will create logical flows that map NAT and load balancer IP addresses to the appropriate MAC address\[char46] Setting \fIdynamic_neigh_routers\fR to \fBtrue\fR will prevent the automatic creation of these logical flows\[char46]
+.IP "\fBoptions : always_learn_from_arp_request\fR: optional string, either \fBtrue\fR or \fBfalse\fR"
+This option controls the behavior when handling IPv4 ARP requests or IPv6 ND-NS packets - whether a dynamic neighbor (MAC binding) entry is added/updated\[char46]
+.IP
+\fBtrue\fR - Always learn the MAC-IP binding, and add/update the MAC binding entry\[char46]
+.IP
+\fBfalse\fR - If there is a MAC binding for that IP and the MAC is different, or, if TPA of ARP request belongs to any router port on this router, then update/add that MAC-IP binding\[char46] Otherwise, don\(cqt update/add entries\[char46]
+.IP
+It is \fBtrue\fR by default\[char46] It is recommended to set to \fBfalse\fR when a large number of logical routers are connected to the same logical switch but most of them never need to send traffic between each other, to reduce the size of the MAC binding table\[char46]
+.IP "\fBoptions : requested-tnl-key\fR: optional string, containing an integer, in range 1 to 16,777,215"
+Configures the datapath tunnel key for the logical router\[char46] This is not needed because \fBovn\-northd\fR will assign an unique key for each datapath by itself\[char46] However, if it is configured, \fBovn\-northd\fR honors the configured value\[char46]
+.IP "\fBoptions : snat-ct-zone\fR: optional string, containing an integer, in range 0 to 65,535"
+Use the requested conntrack zone for SNAT with this router\[char46] This can be useful if egress traffic from the host running OVN comes from both OVN and other sources\[char46] This way, OVN and the other sources can make use of the same conntrack zone\[char46]
+.IP "\fBoptions : mac_binding_age_threshold\fR: optional string, containing an integer, in range 0 to 4,294,967,295"
+MAC binding aging \fBthreshold\fR value in seconds\[char46] MAC binding exceeding this timeout will be automatically removed\[char46] The value defaults to 0, which means disabled\[char46]
+.ST "Common Columns:"
+.PP
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+See \fBExternal IDs\fR at the beginning of this document\[char46]
+.bp
+.SH "QoS TABLE"
+.PP
+.PP
+.PP
+Each row in this table represents one QoS rule for a logical switch that points to it through its \fBqos_rules\fR column\[char46] Two types of QoS are supported: DSCP marking and metering\[char46] A \fBmatch\fR with the highest-\fBpriority\fR will have QoS applied to it\[char46] If the \fBaction\fR column is specified, then matching packets will have DSCP marking applied\[char46] If the \fBbandwidth\fR column is specified, then matching packets will have metering applied\[char46] \fBaction\fR and \fBbandwidth\fR are not exclusive, so both marking and metering by defined for the same QoS entry\[char46] If no row matches, packets will not have any QoS applied\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBpriority\fR
+integer, in range 0 to 32,767
+.TQ 3.00in
+\fBdirection\fR
+string, either \fBfrom\-lport\fR or \fBto\-lport\fR
+.TQ 3.00in
+\fBmatch\fR
+string
+.TQ 3.00in
+\fBaction\fR
+map of string-integer pairs, key must be \fBdscp\fR, value in range 0 to 63
+.TQ 3.00in
+\fBbandwidth\fR
+map of string-integer pairs, key either \fBburst\fR or \fBrate\fR, value in range 1 to 4,294,967,295
+.TQ 3.00in
+\fBexternal_ids\fR
+map of string-string pairs
+.SS "Details:
+.IP "\fBpriority\fR: integer, in range 0 to 32,767"
+The QoS rule\(cqs priority\[char46] Rules with numerically higher priority take precedence over those with lower\[char46] If two QoS rules with the same priority both match, then the one actually applied to a packet is undefined\[char46]
+.IP "\fBdirection\fR: string, either \fBfrom\-lport\fR or \fBto\-lport\fR"
+The value of this field is similar to \fBACL\fR column in the OVN Northbound database\(cqs \fBACL\fR table\[char46]
+.IP "\fBmatch\fR: string"
+The packets that the QoS rules should match, in the same expression language used for the \fBmatch\fR column in the OVN Southbound database\(cqs \fBLogical_Flow\fR table\[char46] The \fBoutport\fR logical port is only available in the \fBto\-lport\fR direction (the \fBinport\fR is available in both directions)\[char46]
+.IP "\fBaction\fR: map of string-integer pairs, key must be \fBdscp\fR, value in range 0 to 63"
+When specified, matching flows will have DSCP marking applied\[char46]
+.RS
+.IP \(bu
+\fBdscp\fR: The value of this action should be in the range of 0 to 63 (inclusive)\[char46]
+.RE
+.IP "\fBbandwidth\fR: map of string-integer pairs, key either \fBburst\fR or \fBrate\fR, value in range 1 to 4,294,967,295"
+When specified, matching packets will have bandwidth metering applied\[char46] Traffic over the limit will be dropped\[char46]
+.RS
+.IP \(bu
+\fBrate\fR: The value of rate limit in kbps\[char46]
+.IP \(bu
+\fBburst\fR: The value of burst rate limit in kilobits\[char46] This is optional and needs to specify the \fBrate\fR\[char46]
+.RE
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+See \fBExternal IDs\fR at the beginning of this document\[char46]
+.bp
+.SH "Mirror TABLE"
+.PP
+.PP
+.PP
+Each row in this table represents a mirror that can be used for port mirroring\[char46] These mirrors are referenced by the \fBmirror_rules\fR column in the \fBLogical_Switch_Port\fR table\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBname\fR
+string (must be unique within table)
+.TQ 3.00in
+\fBfilter\fR
+string, one of \fBboth\fR, \fBfrom\-lport\fR, or \fBto\-lport\fR
+.TQ 3.00in
+\fBsink\fR
+string
+.TQ 3.00in
+\fBtype\fR
+string, one of \fBerspan\fR, \fBgre\fR, or \fBlocal\fR
+.TQ 3.00in
+\fBindex\fR
+integer
+.TQ 3.00in
+\fBexternal_ids\fR
+map of string-string pairs
+.SS "Details:
+.IP "\fBname\fR: string (must be unique within table)"
+Represents the name of the mirror\[char46]
+.IP "\fBfilter\fR: string, one of \fBboth\fR, \fBfrom\-lport\fR, or \fBto\-lport\fR"
+The value of this field represents selection criteria of the mirror\[char46] \fBto\-lport\fR mirrors the packets coming into logical port\[char46] \fBfrom\-lport\fR mirrors the packets going out of logical port\[char46] \fBboth\fR mirrors for both directions\[char46]
+.IP "\fBsink\fR: string"
+The value of this field represents the destination/sink of the mirror\[char46] If the \fItype\fR is \fBgre\fR or \fBerspan\fR, the value indicates the tunnel remote IP (either IPv4 or IPv6)\[char46] For a \fItype\fR of \fBlocal\fR, this field defines a local interface on the OVS integration bridge to be used as the mirror destination\[char46] The interface must possess external-ids:mirror-id that matches this string\[char46]
+.IP "\fBtype\fR: string, one of \fBerspan\fR, \fBgre\fR, or \fBlocal\fR"
+The value of this field specifies the mirror type - \fBgre\fR, \fBerspan\fR or \fBlocal\fR\[char46]
+.IP "\fBindex\fR: integer"
+The value of this field represents the tunnel ID\[char46] If the configured tunnel type is \fBgre\fR, this field represents the \fBGRE\fR key value and if the configured tunnel type is \fBerspan\fR it represents the \fBerspan_idx\fR value\[char46] It is ignored if the type is \fBlocal\fR\[char46]
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+See \fBExternal IDs\fR at the beginning of this document\[char46]
+.bp
+.SH "Meter TABLE"
+.PP
+.PP
+.PP
+Each row in this table represents a meter that can be used for QoS or rate-limiting\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBname\fR
+string (must be unique within table)
+.TQ 3.00in
+\fBunit\fR
+string, either \fBkbps\fR or \fBpktps\fR
+.TQ 3.00in
+\fBbands\fR
+set of 1 or more \fBMeter_Band\fRs
+.TQ 3.00in
+\fBfair\fR
+optional boolean
+.TQ 3.00in
+\fBexternal_ids\fR
+map of string-string pairs
+.SS "Details:
+.IP "\fBname\fR: string (must be unique within table)"
+A name for this meter\[char46]
+.IP
+Names that begin with \(dq__\(dq (two underscores) are reserved for OVN internal use and should not be added manually\[char46]
+.IP "\fBunit\fR: string, either \fBkbps\fR or \fBpktps\fR"
+The unit for \fBrate\fR and \fBburst_rate\fR parameters in the \fBbands\fR entry\[char46] \fBkbps\fR specifies kilobits per second, and \fBpktps\fR specifies packets per second\[char46]
+.IP "\fBbands\fR: set of 1 or more \fBMeter_Band\fRs"
+The bands associated with this meter\[char46] Each band specifies a rate above which the band is to take the action \fBaction\fR\[char46] If multiple bands\(cq rates are exceeded, then the band with the highest rate among the exceeded bands is selected\[char46]
+.IP "\fBfair\fR: optional boolean"
+This column is used to further describe the desired behavior of the meter when there are multiple references to it\[char46] If this column is empty or is set to \fBfalse\fR, the rate will be shared across all rows that refer to the same Meter \fBname\fR\[char46] Conversely, when this column is set to \fBtrue\fR, each user of the same Meter will be rate-limited on its own\[char46]
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+See \fBExternal IDs\fR at the beginning of this document\[char46]
+.bp
+.SH "Meter_Band TABLE"
+.PP
+.PP
+.PP
+Each row in this table represents a meter band which specifies the rate above which the configured action should be applied\[char46] These bands are referenced by the \fBbands\fR column in the \fBMeter\fR table\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBaction\fR
+string, must be \fBdrop\fR
+.TQ 3.00in
+\fBrate\fR
+integer, in range 1 to 4,294,967,295
+.TQ 3.00in
+\fBburst_size\fR
+integer, in range 0 to 4,294,967,295
+.TQ 3.00in
+\fBexternal_ids\fR
+map of string-string pairs
+.SS "Details:
+.IP "\fBaction\fR: string, must be \fBdrop\fR"
+The action to execute when this band matches\[char46] The only supported action is \fBdrop\fR\[char46]
+.IP "\fBrate\fR: integer, in range 1 to 4,294,967,295"
+The rate limit for this band, in kilobits per second or bits per second, depending on whether the parent \fBMeter\fR entry\(cqs \fBunit\fR column specified \fBkbps\fR or \fBpktps\fR\[char46]
+.IP "\fBburst_size\fR: integer, in range 0 to 4,294,967,295"
+The maximum burst allowed for the band in kilobits or packets, depending on whether \fBkbps\fR or \fBpktps\fR was selected in the parent \fBMeter\fR entry\(cqs \fBunit\fR column\[char46] If the size is zero, the switch is free to select some reasonable value depending on its configuration\[char46]
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+See \fBExternal IDs\fR at the beginning of this document\[char46]
+.bp
+.SH "Logical_Router_Port TABLE"
+.PP
+.PP
+.PP
+A port within an L3 logical router\[char46]
+.PP
+.PP
+Exactly one \fBLogical_Router\fR row must reference a given logical router port\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBname\fR
+string (must be unique within table)
+.TQ 3.00in
+\fBnetworks\fR
+set of 1 or more strings
+.TQ 3.00in
+\fBmac\fR
+string
+.TQ 3.00in
+\fBenabled\fR
+optional boolean
+.TQ .25in
+\fIDistributed Gateway Ports:\fR
+.RS .25in
+.TQ 2.75in
+\fBha_chassis_group\fR
+optional \fBHA_Chassis_Group\fR
+.TQ 2.75in
+\fBgateway_chassis\fR
+set of \fBGateway_Chassis\fRes
+.TQ .25in
+\fIOptions for Physical VLAN MTU Issues:\fR
+.RS .25in
+.TQ 2.50in
+\fBoptions : reside-on-redirect-chassis\fR
+optional string, either \fBtrue\fR or \fBfalse\fR
+.TQ 2.50in
+\fBoptions : redirect-type\fR
+optional string, either \fBbridged\fR or \fBoverlay\fR
+.RE
+.RE
+.TQ 3.00in
+\fBipv6_prefix\fR
+set of strings
+.TQ .25in
+\fIipv6_ra_configs:\fR
+.RS .25in
+.TQ 2.75in
+\fBipv6_ra_configs : address_mode\fR
+optional string
+.TQ 2.75in
+\fBipv6_ra_configs : router_preference\fR
+optional string
+.TQ 2.75in
+\fBipv6_ra_configs : route_info\fR
+optional string
+.TQ 2.75in
+\fBipv6_ra_configs : mtu\fR
+optional string
+.TQ 2.75in
+\fBipv6_ra_configs : send_periodic\fR
+optional string
+.TQ 2.75in
+\fBipv6_ra_configs : max_interval\fR
+optional string
+.TQ 2.75in
+\fBipv6_ra_configs : min_interval\fR
+optional string
+.TQ 2.75in
+\fBipv6_ra_configs : rdnss\fR
+optional string
+.TQ 2.75in
+\fBipv6_ra_configs : dnssl\fR
+optional string
+.RE
+.TQ .25in
+\fIOptions:\fR
+.RS .25in
+.TQ 2.75in
+\fBoptions : mcast_flood\fR
+optional string, either \fBtrue\fR or \fBfalse\fR
+.TQ 2.75in
+\fBoptions : requested-tnl-key\fR
+optional string, containing an integer, in range 1 to 32,767
+.TQ 2.75in
+\fBoptions : prefix_delegation\fR
+optional string, either \fBtrue\fR or \fBfalse\fR
+.TQ 2.75in
+\fBoptions : prefix\fR
+optional string, either \fBtrue\fR or \fBfalse\fR
+.TQ 2.75in
+\fBoptions : route_table\fR
+optional string
+.TQ 2.75in
+\fBoptions : gateway_mtu\fR
+optional string, containing an integer, in range 68 to 65,535
+.TQ 2.75in
+\fBoptions : gateway_mtu_bypass\fR
+optional string
+.RE
+.TQ .25in
+\fIAttachment:\fR
+.RS .25in
+.TQ 2.75in
+\fBpeer\fR
+optional string
+.RE
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.RE
+.SS "Details:
+.IP "\fBname\fR: string (must be unique within table)"
+A name for the logical router port\[char46]
+.IP
+In addition to provide convenience for human interaction with the northbound database, this column is used as reference by its patch port in \fBLogical_Switch_Port\fR or another logical router port in \fBLogical_Router_Port\fR\[char46]
+.IP
+A logical router port may not have the same name as a logical switch port, but the database schema cannot enforce this\[char46]
+.IP "\fBnetworks\fR: set of 1 or more strings"
+The IP addresses and netmasks of the router\[char46] For example, \fB192\[char46]168\[char46]0\[char46]1/24\fR indicates that the router\(cqs IP address is 192\[char46]168\[char46]0\[char46]1 and that packets destined to 192\[char46]168\[char46]0\[char46]\fIx\fR should be routed to this port\[char46]
+.IP
+A logical router port always adds a link-local IPv6 address (fe80::/64) automatically generated from the interface\(cqs MAC address using the modified EUI\-64 format\[char46]
+.IP "\fBmac\fR: string"
+The Ethernet address that belongs to this router port\[char46]
+.IP "\fBenabled\fR: optional boolean"
+This column is used to administratively set port state\[char46] If this column is empty or is set to \fBtrue\fR, the port is enabled\[char46] If this column is set to \fBfalse\fR, the port is disabled\[char46] A disabled port has all ingress and egress traffic dropped\[char46]
+.ST "Distributed Gateway Ports:"
+.PP
+.PP
+.PP
+Gateways, as documented under \fBGateways\fR in the OVN architecture guide, provide limited connectivity between logical networks and physical ones\[char46] OVN support multiple kinds of gateways\[char46] The \fBLogical_Router_Port\fR table can be used two different ways to configure \fIdistributed gateway ports\fR, which are one kind of gateway\[char46] These two forms of configuration exist for historical reasons\[char46] Both of them produce the same kind of OVN southbound records and the same behavior in practice\[char46]
+.PP
+.PP
+If either of these are set, this logical router port represents a distributed gateway port that connects this router to a logical switch with a \fBlocalnet\fR port or a connection to another OVN deployment\[char46]
+.PP
+.PP
+Also mentioned in the OVN architecture guide, distributed gateway ports can also be used for scalability reasons in deployments where logical switches are dedicated to chassises rather than distributed\[char46]
+.PP
+.PP
+The preferred way to configure a gateway is \fBha_chassis_group\fR, but \fBgateway_chassis\fR is also supported for backward compatibility\[char46] Only one of these should be set at a time on a given LRP, since they configure the same features\[char46]
+.PP
+.PP
+Even when a gateway is configured, the logical router port still effectively resides on each chassis\[char46] However, due to the implications of the use of L2 learning in the physical network, as well as the need to support advanced features such as one-to-many NAT (aka IP masquerading), a subset of the logical router processing is handled in a centralized manner on the gateway chassis\[char46]
+.PP
+.PP
+There can be more than one distributed gateway ports configured on each logical router, each connecting to different L2 segments\[char46] Load-balancing is not yet supported on logical routers with more than one distributed gateway ports\[char46]
+.PP
+.PP
+For each distributed gateway port, it may have more than one gateway chassises\[char46] When more than one gateway chassis is specified, OVN only uses one at a time\[char46] OVN can rely on OVS BFD implementation to monitor gateway connectivity, preferring the highest-priority gateway that is online\[char46] Priorities are specified in the \fBpriority\fR column of \fBGateway_Chassis\fR or \fBHA_Chassis\fR\[char46]
+.PP
+.PP
+\fBovn\-northd\fR programs the \fBexternal_mac\fR rules specified in the LRP\(cqs LR into the peer logical switch\(cqs destination lookup on the chassis where the \fBlogical_port\fR resides\[char46] In addition, the logical router\(cqs MAC address is automatically programmed in the peer logical switch\(cqs destination lookup flow on the gateway chasssis\[char46] If it is desired to generate gratuitous ARPs for NAT addresses, then set the peer LSP\(cqs \fBoptions:nat-addresses\fR to \fBrouter\fR\[char46]
+.PP
+.PP
+OVN 20\[char46]03 and earlier supported a third way to configure distributed gateway ports using \fBoptions:redirect\-chassis\fR to specify the gateway chassis\[char46] This method is no longer supported\[char46] Any remaining users should switch to one of the newer methods instead\[char46] A \fBgateway_chassis\fR may be easily configured from the command line, e\[char46]g\[char46] \fBovn\-nbctl lrp\-set\-gateway\-chassis
+\fIlrp\fB \fIchassis\fB\fR\[char46]
+.IP "\fBha_chassis_group\fR: optional \fBHA_Chassis_Group\fR"
+Designates an \fBHA_Chassis_Group\fR to provide gateway high availability\[char46]
+.IP "\fBgateway_chassis\fR: set of \fBGateway_Chassis\fRes"
+Designates one or more \fBGateway_Chassis\fR for the logical router port\[char46]
+.ST "Options for Physical VLAN MTU Issues:"
+.PP
+.PP
+.PP
+MTU issues arise in mixing tunnels with logical networks that are bridged to a physical VLAN\[char46] For an explanation of the MTU issues, see \fBPhysical VLAN MTU Issues\fR in the OVN architecture document\[char46] The following options, which are alternatives, provide solutions\[char46] Both of them cause packets to be sent over \fBlocalnet\fR instead of tunnels, but they differ in whether some or all packets are sent this way\[char46] The most prominent tradeoff between these options is that \fBreside\-on\-redirect\-chassis\fR is easier to configure and that \fBredirect\-type\fR performs better for east-west traffic\[char46]
+.IP "\fBoptions : reside-on-redirect-chassis\fR: optional string, either \fBtrue\fR or \fBfalse\fR"
+If set to \fBtrue\fR, this option forces all traffic across the logical router port to pass through the gateway chassis using a hop across a \fBlocalnet\fR port\[char46] This changes behavior in two ways:
+.RS
+.IP \(bu
+Without this option, east-west traffic passes directly between source and destination chassis (or even within a single chassis, for co-located VMs)\[char46] With this option, all east-west traffic passes through the gateway chassis\[char46]
+.IP \(bu
+Without this option, traffic between the gateway chassis and other chassis is encapsulated in tunnels\[char46] With this option, traffic passes over a \fBlocalnet\fR interface\[char46]
+.RE
+.IP
+This option may usefully be set only on logical router ports that connect a distributed logical router to a logical switch with VIFs\[char46] It should not be set on a distributed gateway port\[char46]
+.IP
+OVN honors this option only if the logical router has one and only one distributed gateway port and if the LRP\(cqs peer switch has a \fBlocalnet\fR port\[char46]
+.IP "\fBoptions : redirect-type\fR: optional string, either \fBbridged\fR or \fBoverlay\fR"
+If set to \fBbridged\fR on a distributed gateway port, this option causes OVN to redirect packets to the gateway chassis over a \fBlocalnet\fR port instead of a tunnel\[char46] The relevant chassis must share a \fBlocalnet\fR port\[char46]
+.IP
+This feature requires the administrator or the CMS to configure each participating chassis with a unique Ethernet address for the logical router by setting \fBovn\-chassis\-mac\-mappings\fR in the Open vSwitch database, for use by \fBovn\-controller\fR\[char46]
+.IP
+Setting this option to \fBoverlay\fR or leaving it unset has no effect\[char46] This option may usefully be set only on a distributed gateway port when there is one and only one distributed gateway port on the logical router\[char46] It is otherwise ignored\[char46]
+.IP "\fBipv6_prefix\fR: set of strings"
+This column contains IPv6 prefix obtained by prefix delegation router according to RFC 3633
+.ST "ipv6_ra_configs:"
+.PP
+.PP
+.PP
+This column defines the IPv6 ND RA address mode and ND MTU Option to be included by \fBovn\-controller\fR when it replies to the IPv6 Router solicitation requests\[char46]
+.IP "\fBipv6_ra_configs : address_mode\fR: optional string"
+The address mode to be used for IPv6 address configuration\[char46] The supported values are:
+.RS
+.IP \(bu
+\fBslaac\fR: Address configuration using Router Advertisement (RA) packet\[char46] The IPv6 prefixes defined in the \fBLogical_Router_Port\fR table\(cqs \fBnetworks\fR column will be included in the RA\(cqs ICMPv6 option - Prefix information\[char46]
+.IP \(bu
+\fBdhcpv6_stateful\fR: Address configuration using DHCPv6\[char46]
+.IP \(bu
+\fBdhcpv6_stateless\fR: Address configuration using Router Advertisement (RA) packet\[char46] Other IPv6 options are provided by DHCPv6\[char46]
+.RE
+.IP "\fBipv6_ra_configs : router_preference\fR: optional string"
+Default Router Preference (PRF) indicates whether to prefer this router over other default routers (RFC 4191)\[char46] Possible values are:
+.RS
+.IP \(bu
+HIGH: mapped to 0x01 in RA PRF field
+.IP \(bu
+MEDIUM: mapped to 0x00 in RA PRF field
+.IP \(bu
+LOW: mapped to 0x11 in RA PRF field
+.RE
+.IP "\fBipv6_ra_configs : route_info\fR: optional string"
+Route Info is used to configure Route Info Option sent in Router Advertisement according to RFC 4191\[char46] Route Info is a comma separated string where each field provides PRF and prefix for a given route (e\[char46]g: HIGH-aef1::11/48,LOW-aef2::11/96) Possible PRF values are:
+.RS
+.IP \(bu
+HIGH: mapped to 0x01 in RA PRF field
+.IP \(bu
+MEDIUM: mapped to 0x00 in RA PRF field
+.IP \(bu
+LOW: mapped to 0x11 in RA PRF field
+.RE
+.IP "\fBipv6_ra_configs : mtu\fR: optional string"
+The recommended MTU for the link\[char46] Default is 0, which means no MTU Option will be included in RA packet replied by ovn-controller\[char46] Per RFC 2460, the mtu value is recommended no less than 1280, so any mtu value less than 1280 will be considered as no MTU Option\[char46]
+.IP "\fBipv6_ra_configs : send_periodic\fR: optional string"
+If set to true, then this router interface will send router advertisements periodically\[char46] The default is false\[char46]
+.IP "\fBipv6_ra_configs : max_interval\fR: optional string"
+The maximum number of seconds to wait between sending periodic router advertisements\[char46] This option has no effect if \fBipv6_ra_configs:send_periodic\fR is false\[char46] The default is 600\[char46]
+.IP "\fBipv6_ra_configs : min_interval\fR: optional string"
+The minimum number of seconds to wait between sending periodic router advertisements\[char46] This option has no effect if \fBipv6_ra_configs:send_periodic\fR is false\[char46] The default is one-third of \fBipv6_ra_configs:max_interval\fR, i\[char46]e\[char46] 200 seconds if that key is unset\[char46]
+.IP "\fBipv6_ra_configs : rdnss\fR: optional string"
+IPv6 address of RDNSS server announced in RA packets\[char46] At the moment OVN supports just one RDNSS server\[char46]
+.IP "\fBipv6_ra_configs : dnssl\fR: optional string"
+DNS Search List announced in RA packets\[char46] Multiple DNS Search List must be \(cqcomma\(cq separated (e\[char46]g\[char46] \(dqa\[char46]b\[char46]c, d\[char46]e\[char46]f\(dq)
+.ST "Options:"
+.PP
+.PP
+.PP
+Additional options for the logical router port\[char46]
+.IP "\fBoptions : mcast_flood\fR: optional string, either \fBtrue\fR or \fBfalse\fR"
+If set to \fBtrue\fR, multicast traffic (including reports) are unconditionally forwarded to the specific port\[char46]
+.IP
+This option applies when the port is part of a logical router which has \fBoptions\fR:mcast_relay set to \fBtrue\fR\[char46]
+.IP
+Default: \fBfalse\fR\[char46]
+.IP "\fBoptions : requested-tnl-key\fR: optional string, containing an integer, in range 1 to 32,767"
+Configures the port binding tunnel key for the port\[char46] Usually this is not needed because \fBovn\-northd\fR will assign an unique key for each port by itself\[char46] However, if it is configured, \fBovn\-northd\fR honors the configured value\[char46]
+.IP "\fBoptions : prefix_delegation\fR: optional string, either \fBtrue\fR or \fBfalse\fR"
+If set to \fBtrue\fR, enable IPv6 prefix delegation state machine on this logical router port (RFC3633)\[char46] IPv6 prefix delegation is available just on a gateway router or on a gateway router port\[char46]
+.IP "\fBoptions : prefix\fR: optional string, either \fBtrue\fR or \fBfalse\fR"
+If set to \fBtrue\fR, this interface will receive an IPv6 prefix according to RFC3663
+.IP "\fBoptions : route_table\fR: optional string"
+Designates lookup Logical_Router_Static_Routes with specified \fBroute_table\fR value\[char46] Routes to directly connected networks from same Logical Router and routes without \fBroute_table\fR option set have higher priority than routes with \fBroute_table\fR option set\[char46]
+.IP "\fBoptions : gateway_mtu\fR: optional string, containing an integer, in range 68 to 65,535"
+If set, logical flows will be added to router pipeline to check packet length\[char46] If packet length is greater than the value set, ICMPv4 type 3 (Destination Unreachable) code 4 (Fragmentation Needed and Don\(cqt Fragment was Set) or ICMPv6 type 2 (Packet Too Big) code 0 (no route to destination) packets will be generated\[char46] This allows for Path MTU Discovery\[char46]
+.IP "\fBoptions : gateway_mtu_bypass\fR: optional string"
+When configured, represents a match expression, in the same expression language used for the \fBmatch\fR column in the OVN Southbound database\(cqs \fBLogical_Flow\fR table\[char46] Packets matching this expression will bypass the length check configured through the \fBoptions:gateway_mtu\fR option\[char46]
+.ST "Attachment:"
+.PP
+.PP
+.PP
+A given router port serves one of two purposes:
+.RS
+.IP \(bu
+To attach a logical switch to a logical router\[char46] A logical router port of this type is referenced by exactly one \fBLogical_Switch_Port\fR of type \fBrouter\fR\[char46] The value of \fBname\fR is set as \fBrouter\-port\fR in column \fBoptions\fR of \fBLogical_Switch_Port\fR\[char46] In this case \fBpeer\fR column is empty\[char46]
+.IP \(bu
+To connect one logical router to another\[char46] This requires a pair of logical router ports, each connected to a different router\[char46] Each router port in the pair specifies the other in its \fBpeer\fR column\[char46] No \fBLogical_Switch\fR refers to the router port\[char46]
+.RE
+.IP "\fBpeer\fR: optional string"
+For a router port used to connect two logical routers, this identifies the other router port in the pair by \fBname\fR\[char46]
+.IP
+For a router port attached to a logical switch, this column is empty\[char46]
+.ST "Common Columns:"
+.PP
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+See \fBExternal IDs\fR at the beginning of this document\[char46]
+.IP
+The \fBovn\-northd\fR program copies all these pairs into the \fBexternal_ids\fR column of the \fBPort_Binding\fR table in \fBOVN_Southbound\fR database\[char46]
+.bp
+.SH "Logical_Router_Static_Route TABLE"
+.PP
+.PP
+.PP
+Each record represents a static route\[char46]
+.PP
+.PP
+When multiple routes match a packet, the longest-prefix match is chosen\[char46] For a given prefix length, a \fBdst\-ip\fR route is preferred over a \fBsrc\-ip\fR route\[char46]
+.PP
+.PP
+When there are ECMP routes, i\[char46]e\[char46] multiple routes with same prefix and policy, one of them will be selected based on the 5-tuple hashing of the packet header\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBip_prefix\fR
+string
+.TQ 3.00in
+\fBpolicy\fR
+optional string, either \fBdst\-ip\fR or \fBsrc\-ip\fR
+.TQ 3.00in
+\fBnexthop\fR
+string
+.TQ 3.00in
+\fBoutput_port\fR
+optional string
+.TQ 3.00in
+\fBbfd\fR
+optional weak reference to \fBBFD\fR
+.TQ 3.00in
+\fBroute_table\fR
+string
+.TQ 3.00in
+\fBexternal_ids : ic-learned-route\fR
+optional string
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.RE
+.TQ .25in
+\fICommon options:\fR
+.RS .25in
+.TQ 2.75in
+\fBoptions\fR
+map of string-string pairs
+.TQ 2.75in
+\fBoptions : ecmp_symmetric_reply\fR
+optional string
+.TQ 2.75in
+\fBoptions : origin\fR
+optional string
+.RE
+.SS "Details:
+.IP "\fBip_prefix\fR: string"
+IP prefix of this route (e\[char46]g\[char46] 192\[char46]168\[char46]100\[char46]0/24)\[char46]
+.IP "\fBpolicy\fR: optional string, either \fBdst\-ip\fR or \fBsrc\-ip\fR"
+If it is specified, this setting describes the policy used to make routing decisions\[char46] This setting must be one of the following strings:
+.RS
+.IP \(bu
+\fBsrc\-ip\fR: This policy sends the packet to the \fBnexthop\fR when the packet\(cqs source IP address matches \fBip_prefix\fR\[char46]
+.IP \(bu
+\fBdst\-ip\fR: This policy sends the packet to the \fBnexthop\fR when the packet\(cqs destination IP address matches \fBip_prefix\fR\[char46]
+.RE
+.IP
+If not specified, the default is \fBdst\-ip\fR\[char46]
+.IP "\fBnexthop\fR: string"
+Nexthop IP address for this route\[char46] Nexthop IP address should be the IP address of a connected router port or the IP address of a logical port or can be set to \fBdiscard\fR for dropping packets which match the given route\[char46]
+.IP "\fBoutput_port\fR: optional string"
+The name of the \fBLogical_Router_Port\fR via which the packet needs to be sent out\[char46] This is optional and when not specified, OVN will automatically figure this out based on the \fBnexthop\fR\[char46] When this is specified and there are multiple IP addresses on the router port and none of them are in the same subnet of \fBnexthop\fR, OVN chooses the first IP address as the one via which the \fBnexthop\fR is reachable\[char46]
+.IP "\fBbfd\fR: optional weak reference to \fBBFD\fR"
+Reference to \fBBFD\fR row if the route has associated a BFD session
+.IP "\fBroute_table\fR: string"
+Any string to place route to separate routing table\[char46] If Logical Router Port has configured value in \fBoptions:route_table\fR other than empty string, OVN performs route lookup for all packets entering Logical Router ingress pipeline from this port in the following manner:
+.RS
+.IP \(bu
+1\[char46] First lookup among \(dqglobal\(dq routes: routes without \fBroute_table\fR value set and routes to directly connected networks\[char46]
+.IP \(bu
+2\[char46] Next lookup among routes with same \fBroute_table\fR value as specified in LRP\(cqs options:route_table field\[char46]
+.RE
+.IP "\fBexternal_ids : ic-learned-route\fR: optional string"
+\fBovn\-ic\fR populates this key if the route is learned from the global \fBOVN_IC_Southbound\fR database\[char46] In this case the value will be set to the uuid of the row in \fBRoute\fR table of the \fBOVN_IC_Southbound\fR database\[char46]
+.ST "Common Columns:"
+.PP
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+See \fBExternal IDs\fR at the beginning of this document\[char46]
+.ST "Common options:"
+.PP
+.IP "\fBoptions\fR: map of string-string pairs"
+This column provides general key/value settings\[char46] The supported options are described individually below\[char46]
+.IP "\fBoptions : ecmp_symmetric_reply\fR: optional string"
+If true, then new traffic that arrives over this route will have its reply traffic bypass ECMP route selection and will be sent out this route instead\[char46] Note that this option overrides any rules set in the \fBLogical_Router_policy\fR table\[char46] This option only works on gateway routers (routers that have \fBoptions:chassis\fR set)\[char46]
+.IP "\fBoptions : origin\fR: optional string"
+In case ovn-interconnection has been learned this route, it will have its origin set: either \(dqconnected\(dq or \(dqstatic\(dq\[char46] This key is supposed to be written only by \fBovn\-ic\fR daemon\[char46] ovn-northd then checks this value when generating Logical Flows\[char46] \fBLogical_Router_Static_Route\fR records with same \fBip_prefix\fR within same Logical Router will have next lookup order based on \fBorigin\fR key value:
+.RS
+.IP 1. .4in
+connected
+.IP 2. .4in
+static
+.RE
+.bp
+.SH "Logical_Router_Policy TABLE"
+.PP
+.PP
+.PP
+Each row in this table represents one routing policy for a logical router that points to it through its \fBpolicies\fR column\[char46] The \fBaction\fR column for the highest-\fBpriority\fR matching row in this table determines a packet\(cqs treatment\[char46] If no row matches, packets are allowed by default\[char46] (Default-deny treatment is possible: add a rule with \fBpriority\fR 0, \fB1\fR as \fBmatch\fR, and \fBdrop\fR as \fBaction\fR\[char46])
+.SS "Summary:
+.TQ 3.00in
+\fBpriority\fR
+integer, in range 0 to 32,767
+.TQ 3.00in
+\fBmatch\fR
+string
+.TQ 3.00in
+\fBaction\fR
+string, one of \fBallow\fR, \fBdrop\fR, or \fBreroute\fR
+.TQ 3.00in
+\fBnexthop\fR
+optional string
+.TQ 3.00in
+\fBnexthops\fR
+set of strings
+.TQ 3.00in
+\fBoptions : pkt_mark\fR
+optional string
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.RE
+.SS "Details:
+.IP "\fBpriority\fR: integer, in range 0 to 32,767"
+The routing policy\(cqs priority\[char46] Rules with numerically higher priority take precedence over those with lower\[char46] A rule is uniquely identified by the priority and match string\[char46]
+.IP "\fBmatch\fR: string"
+The packets that the routing policy should match, in the same expression language used for the \fBmatch\fR column in the OVN Southbound database\(cqs \fBLogical_Flow\fR table\[char46]
+.IP
+By default all traffic is allowed\[char46] When writing a more restrictive policy, it is important to remember to allow flows such as ARP and IPv6 neighbor discovery packets\[char46]
+.IP "\fBaction\fR: string, one of \fBallow\fR, \fBdrop\fR, or \fBreroute\fR"
+The action to take when the routing policy matches:
+.RS
+.IP \(bu
+\fBallow\fR: Forward the packet\[char46]
+.IP \(bu
+\fBdrop\fR: Silently drop the packet\[char46]
+.IP \(bu
+\fBreroute\fR: Reroute packet to \fBnexthop\fR or \fBnexthops\fR\[char46]
+.RE
+.IP "\fBnexthop\fR: optional string"
+Note: This column is deprecated in favor of \fBnexthops\fR\[char46]
+.IP
+Next-hop IP address for this route, which should be the IP address of a connected router port or the IP address of a logical port\[char46]
+.IP "\fBnexthops\fR: set of strings"
+Next-hop ECMP IP addresses for this route\[char46] Each IP in the list should be the IP address of a connected router port or the IP address of a logical port\[char46]
+.IP
+One IP from the list is selected as next hop\[char46]
+.IP "\fBoptions : pkt_mark\fR: optional string"
+Marks the packet with the value specified when the router policy is applied\[char46] CMS can inspect this packet marker and take some decisions if desired\[char46] This value is not preserved when the packet goes out on the wire\[char46]
+.ST "Common Columns:"
+.PP
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+See \fBExternal IDs\fR at the beginning of this document\[char46]
+.bp
+.SH "NAT TABLE"
+.PP
+.PP
+.PP
+Each record represents a NAT rule\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBtype\fR
+string, one of \fBdnat\fR, \fBdnat_and_snat\fR, or \fBsnat\fR
+.TQ 3.00in
+\fBexternal_ip\fR
+string
+.TQ 3.00in
+\fBexternal_mac\fR
+optional string
+.TQ 3.00in
+\fBexternal_port_range\fR
+string
+.TQ 3.00in
+\fBlogical_ip\fR
+string
+.TQ 3.00in
+\fBlogical_port\fR
+optional string
+.TQ 3.00in
+\fBallowed_ext_ips\fR
+optional \fBAddress_Set\fR
+.TQ 3.00in
+\fBexempted_ext_ips\fR
+optional \fBAddress_Set\fR
+.TQ 3.00in
+\fBgateway_port\fR
+optional weak reference to \fBLogical_Router_Port\fR
+.TQ 3.00in
+\fBoptions : stateless\fR
+optional string
+.TQ 3.00in
+\fBoptions : add_route\fR
+optional string
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.RE
+.SS "Details:
+.IP "\fBtype\fR: string, one of \fBdnat\fR, \fBdnat_and_snat\fR, or \fBsnat\fR"
+Type of the NAT rule\[char46]
+.RS
+.IP \(bu
+When \fBtype\fR is \fBdnat\fR, the externally visible IP address \fBexternal_ip\fR is DNATted to the IP address \fBlogical_ip\fR in the logical space\[char46]
+.IP \(bu
+When \fBtype\fR is \fBsnat\fR, IP packets with their source IP address that either matches the IP address in \fBlogical_ip\fR or is in the network provided by \fBlogical_ip\fR is SNATed into the IP address in \fBexternal_ip\fR\[char46]
+.IP \(bu
+When \fBtype\fR is \fBdnat_and_snat\fR, the externally visible IP address \fBexternal_ip\fR is DNATted to the IP address \fBlogical_ip\fR in the logical space\[char46] In addition, IP packets with the source IP address that matches \fBlogical_ip\fR is SNATed into the IP address in \fBexternal_ip\fR\[char46]
+.RE
+.IP "\fBexternal_ip\fR: string"
+An IPv4 address\[char46]
+.IP "\fBexternal_mac\fR: optional string"
+A MAC address\[char46]
+.IP
+This is only used on the gateway port on distributed routers\[char46] This must be specified in order for the NAT rule to be processed in a distributed manner on all chassis\[char46] If this is not specified for a NAT rule on a distributed router, then this NAT rule will be processed in a centralized manner on the gateway port instance on the gateway chassis\[char46]
+.IP
+This MAC address must be unique on the logical switch that the gateway port is attached to\[char46] If the MAC address used on the \fBlogical_port\fR is globally unique, then that MAC address can be specified as this \fBexternal_mac\fR\[char46]
+.IP "\fBexternal_port_range\fR: string"
+L4 source port range
+.IP
+Range of ports, from which a port number will be picked that will replace the source port of to be NATed packet\[char46] This is basically PAT (port address translation)\[char46]
+.IP
+Value of the column is in the format, port_lo-port_hi\[char46] For example: external_port_range : \(dq1\-30000\(dq
+.IP
+Valid range of ports is 1\-65535\[char46]
+.IP "\fBlogical_ip\fR: string"
+An IPv4 network (e\[char46]g 192\[char46]168\[char46]1\[char46]0/24) or an IPv4 address\[char46]
+.IP "\fBlogical_port\fR: optional string"
+The name of the logical port where the \fBlogical_ip\fR resides\[char46]
+.IP
+This is only used on distributed routers\[char46] This must be specified in order for the NAT rule to be processed in a distributed manner on all chassis\[char46] If this is not specified for a NAT rule on a distributed router, then this NAT rule will be processed in a centralized manner on the gateway port instance on the gateway chassis\[char46]
+.IP "\fBallowed_ext_ips\fR: optional \fBAddress_Set\fR"
+It represents Address Set of external ips that NAT rule is applicable to\[char46] For SNAT type NAT rules, this refers to destination addresses\[char46] For DNAT type NAT rules, this refers to source addresses\[char46]
+.IP
+This configuration overrides the default NAT behavior of applying a rule solely based on internal IP\[char46] Without this configuration, NAT happens without considering the external IP (i\[char46]e dest/source for snat/dnat type rule)\[char46] With this configuration NAT rule is applied ONLY if external ip is in the input Address Set\[char46]
+.IP "\fBexempted_ext_ips\fR: optional \fBAddress_Set\fR"
+It represents Address Set of external ips that NAT rule is NOT applicable to\[char46] For SNAT type NAT rules, this refers to destination addresses\[char46] For DNAT type NAT rules, this refers to source addresses\[char46]
+.IP
+This configuration overrides the default NAT behavior of applying a rule solely based on internal IP\[char46] Without this configuration, NAT happens without considering the external IP (i\[char46]e dest/source for snat/dnat type rule)\[char46] With this configuration NAT rule is NOT applied if external ip is in the input Address Set\[char46]
+.IP
+If there are NAT rules in a logical router with overlapping IP prefixes (including /32), then usage of \fIexempted_ext_ips\fR should be avoided in following scenario\[char46] a\[char46] SNAT rule (let us say RULE1) with logical_ip PREFIX/MASK (let us say 50\[char46]0\[char46]0\[char46]0/24)\[char46] b\[char46] SNAT rule (let us say RULE2) with logical_ip PREFIX/MASK+1 (let us say 50\[char46]0\[char46]0\[char46]0/25)\[char46] c\[char46] Now, if exempted_ext_ips is associated with RULE2, then a logical ip which matches both 50\[char46]0\[char46]0\[char46]0/24 and 50\[char46]0\[char46]0\[char46]0/25 may get the RULE2 applied to it instead of RULE1\[char46]
+.IP
+\fIallowed_ext_ips\fR and \fIexempted_ext_ips\fR are mutually exclusive to each other\[char46] If both Address Sets are set for a rule, then the NAT rule is not considered\[char46]
+.IP "\fBgateway_port\fR: optional weak reference to \fBLogical_Router_Port\fR"
+A distributed gateway port in the \fBLogical_Router_Port\fR table where the NAT rule needs to be applied\[char46]
+.IP
+When multiple distributed gateway ports are configured on a \fBLogical_Router\fR, applying a NAT rule at each of the distributed gateway ports might not be desired\[char46] Consider the case where a logical router has 2 distributed gateway port, one with \fBnetworks\fR \fB50\[char46]0\[char46]0\[char46]10/24\fR and the other with \fBnetworks\fR \fB60\[char46]0\[char46]0\[char46]10/24\fR\[char46] If the logical router has a NAT rule of \fBtype\fR \fBsnat\fR, \fBlogical_ip\fR \fB10\[char46]1\[char46]1\[char46]0/24\fR and \fBexternal_ip\fR \fB50\[char46]1\[char46]1\[char46]20/24\fR, the rule needs to be selectively applied on matching packets entering/leaving through the distributed gateway port with \fBnetworks\fR \fB50\[char46]0\[char46]0\[char46]10/24\fR\[char46]
+.IP
+When a logical router has multiple distributed gateway ports and this column is not set for a NAT rule, then the rule will be applied at the distributed gateway port which is in the same network as the \fBexternal_ip\fR of the NAT rule, if such a router port exists\[char46] If logical router has a single distributed gateway port and this column is not set for a NAT rule, the rule will be applied at the distributed gateway port even if the router port is not in the same network as the \fBexternal_ip\fR of the NAT rule\[char46]
+.IP "\fBoptions : stateless\fR: optional string"
+Indicates if a dnat_and_snat rule should lead to connection tracking state or not\[char46]
+.IP "\fBoptions : add_route\fR: optional string"
+If set to \fBtrue\fR, then neighbor routers will have logical flows added that will allow for routing to the NAT address\[char46] It also will have ARP resolution logical flows added\[char46] By setting this option, it means there is no reason to create a \fBLogical_Router_Static_Route\fR from neighbor routers to this NAT address\[char46] It also means that no ARP request is required for neighbor routers to learn the IP-MAC mapping for this NAT address\[char46] This option only applies to NATs of type \fBdnat\fR and \fBdnat_and_snat\fR\[char46] For more information about what flows are added for IP routes, please see the \fBovn\-northd\fR manpage section on IP Routing\[char46]
+.ST "Common Columns:"
+.PP
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+See \fBExternal IDs\fR at the beginning of this document\[char46]
+.bp
+.SH "DHCP_Options TABLE"
+.PP
+.PP
+.PP
+OVN implements native DHCPv4 support which caters to the common use case of providing an IPv4 address to a booting instance by providing stateless replies to DHCPv4 requests based on statically configured address mappings\[char46] To do this it allows a short list of DHCPv4 options to be configured and applied at each compute host running \fBovn\-controller\fR\[char46]
+.PP
+.PP
+OVN also implements native DHCPv6 support which provides stateless replies to DHCPv6 requests\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBcidr\fR
+string
+.TQ .25in
+\fIDHCPv4 options:\fR
+.RS .25in
+.TQ .25in
+\fIMandatory DHCPv4 options:\fR
+.RS .25in
+.TQ 2.50in
+\fBoptions : server_id\fR
+optional string
+.TQ 2.50in
+\fBoptions : server_mac\fR
+optional string
+.TQ 2.50in
+\fBoptions : lease_time\fR
+optional string, containing an integer, in range 0 to 4,294,967,295
+.RE
+.TQ .25in
+\fIIPv4 DHCP Options:\fR
+.RS .25in
+.TQ 2.50in
+\fBoptions : router\fR
+optional string
+.TQ 2.50in
+\fBoptions : netmask\fR
+optional string
+.TQ 2.50in
+\fBoptions : dns_server\fR
+optional string
+.TQ 2.50in
+\fBoptions : log_server\fR
+optional string
+.TQ 2.50in
+\fBoptions : lpr_server\fR
+optional string
+.TQ 2.50in
+\fBoptions : swap_server\fR
+optional string
+.TQ 2.50in
+\fBoptions : policy_filter\fR
+optional string
+.TQ 2.50in
+\fBoptions : router_solicitation\fR
+optional string
+.TQ 2.50in
+\fBoptions : nis_server\fR
+optional string
+.TQ 2.50in
+\fBoptions : ntp_server\fR
+optional string
+.TQ 2.50in
+\fBoptions : netbios_name_server\fR
+optional string
+.TQ 2.50in
+\fBoptions : classless_static_route\fR
+optional string
+.TQ 2.50in
+\fBoptions : ms_classless_static_route\fR
+optional string
+.TQ 2.50in
+\fBoptions : next_server\fR
+optional string
+.RE
+.TQ .25in
+\fIBoolean DHCP Options:\fR
+.RS .25in
+.TQ 2.50in
+\fBoptions : ip_forward_enable\fR
+optional string, either \fB0\fR or \fB1\fR
+.TQ 2.50in
+\fBoptions : router_discovery\fR
+optional string, either \fB0\fR or \fB1\fR
+.TQ 2.50in
+\fBoptions : ethernet_encap\fR
+optional string, either \fB0\fR or \fB1\fR
+.RE
+.TQ .25in
+\fIInteger DHCP Options:\fR
+.RS .25in
+.TQ 2.50in
+\fBoptions : default_ttl\fR
+optional string, containing an integer, in range 0 to 255
+.TQ 2.50in
+\fBoptions : tcp_ttl\fR
+optional string, containing an integer, in range 0 to 255
+.TQ 2.50in
+\fBoptions : mtu\fR
+optional string, containing an integer, in range 68 to 65,535
+.TQ 2.50in
+\fBoptions : T1\fR
+optional string, containing an integer, in range 68 to 4,294,967,295
+.TQ 2.50in
+\fBoptions : T2\fR
+optional string, containing an integer, in range 68 to 4,294,967,295
+.TQ 2.50in
+\fBoptions : arp_cache_timeout\fR
+optional string, containing an integer, in range 0 to 255
+.TQ 2.50in
+\fBoptions : tcp_keepalive_interval\fR
+optional string, containing an integer, in range 0 to 255
+.TQ 2.50in
+\fBoptions : netbios_node_type\fR
+optional string, containing an integer, in range 0 to 255
+.RE
+.TQ .25in
+\fIString DHCP Options:\fR
+.RS .25in
+.TQ 2.50in
+\fBoptions : wpad\fR
+optional string
+.TQ 2.50in
+\fBoptions : bootfile_name\fR
+optional string
+.TQ 2.50in
+\fBoptions : path_prefix\fR
+optional string
+.TQ 2.50in
+\fBoptions : tftp_server_address\fR
+optional string
+.TQ 2.50in
+\fBoptions : hostname\fR
+optional string
+.TQ 2.50in
+\fBoptions : domain_name\fR
+optional string
+.TQ 2.50in
+\fBoptions : bootfile_name_alt\fR
+optional string
+.TQ 2.50in
+\fBoptions : broadcast_address\fR
+optional string
+.RE
+.TQ .25in
+\fIDHCP Options of type host_id:\fR
+.RS .25in
+.TQ 2.50in
+\fBoptions : tftp_server\fR
+optional string
+.RE
+.TQ .25in
+\fI DHCP Options of type domains:\fR
+.RS .25in
+.TQ 2.50in
+\fBoptions : domain_search_list\fR
+optional string
+.RE
+.RE
+.TQ .25in
+\fIDHCPv6 options:\fR
+.RS .25in
+.TQ .25in
+\fIMandatory DHCPv6 options:\fR
+.RS .25in
+.TQ 2.50in
+\fBoptions : server_id\fR
+optional string
+.RE
+.TQ .25in
+\fIIPv6 DHCPv6 options:\fR
+.RS .25in
+.TQ 2.50in
+\fBoptions : dns_server\fR
+optional string
+.RE
+.TQ .25in
+\fIString DHCPv6 options:\fR
+.RS .25in
+.TQ 2.50in
+\fBoptions : domain_search\fR
+optional string
+.TQ 2.50in
+\fBoptions : dhcpv6_stateless\fR
+optional string
+.RE
+.RE
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.RE
+.SS "Details:
+.IP "\fBcidr\fR: string"
+The DHCPv4/DHCPv6 options will be included if the logical port has its IP address in this \fBcidr\fR\[char46]
+.ST "DHCPv4 options:"
+.PP
+.PP
+.PP
+The CMS should define the set of DHCPv4 options as key/value pairs in the \fBoptions\fR column of this table\[char46] For \fBovn\-controller\fR to include these DHCPv4 options, the \fBdhcpv4_options\fR of \fBLogical_Switch_Port\fR should refer to an entry in this table\[char46]
+.ST "Mandatory DHCPv4 options:"
+.PP
+.PP
+.PP
+The following options must be defined\[char46]
+.IP "\fBoptions : server_id\fR: optional string"
+The IP address for the DHCP server to use\[char46] This should be in the subnet of the offered IP\[char46] This is also included in the DHCP offer as option 54, ``server identifier\[char46]\(cq\(cq
+.IP "\fBoptions : server_mac\fR: optional string"
+The Ethernet address for the DHCP server to use\[char46]
+.IP "\fBoptions : lease_time\fR: optional string, containing an integer, in range 0 to 4,294,967,295"
+The offered lease time in seconds,
+.IP
+The DHCPv4 option code for this option is 51\[char46]
+.ST "IPv4 DHCP Options:"
+.PP
+.PP
+.PP
+Below are the supported DHCPv4 options whose values are an IPv4 address, e\[char46]g\[char46] \fB192\[char46]168\[char46]1\[char46]1\fR\[char46] Some options accept multiple IPv4 addresses enclosed within curly braces, e\[char46]g\[char46] \fB{192\[char46]168\[char46]1\[char46]2,
+192\[char46]168\[char46]1\[char46]3}\fR\[char46] Please refer to RFC 2132 for more details on DHCPv4 options and their codes\[char46]
+.IP "\fBoptions : router\fR: optional string"
+The IP address of a gateway for the client to use\[char46] This should be in the subnet of the offered IP\[char46] The DHCPv4 option code for this option is 3\[char46]
+.IP "\fBoptions : netmask\fR: optional string"
+The DHCPv4 option code for this option is 1\[char46]
+.IP "\fBoptions : dns_server\fR: optional string"
+The DHCPv4 option code for this option is 6\[char46]
+.IP "\fBoptions : log_server\fR: optional string"
+The DHCPv4 option code for this option is 7\[char46]
+.IP "\fBoptions : lpr_server\fR: optional string"
+The DHCPv4 option code for this option is 9\[char46]
+.IP "\fBoptions : swap_server\fR: optional string"
+The DHCPv4 option code for this option is 16\[char46]
+.IP "\fBoptions : policy_filter\fR: optional string"
+The DHCPv4 option code for this option is 21\[char46]
+.IP "\fBoptions : router_solicitation\fR: optional string"
+The DHCPv4 option code for this option is 32\[char46]
+.IP "\fBoptions : nis_server\fR: optional string"
+The DHCPv4 option code for this option is 41\[char46]
+.IP "\fBoptions : ntp_server\fR: optional string"
+The DHCPv4 option code for this option is 42\[char46]
+.IP "\fBoptions : netbios_name_server\fR: optional string"
+The DHCPv4 option code for this option is 44\[char46]
+.IP "\fBoptions : classless_static_route\fR: optional string"
+The DHCPv4 option code for this option is 121\[char46]
+.IP
+This option can contain one or more static routes, each of which consists of a destination descriptor and the IP address of the router that should be used to reach that destination\[char46] Please see RFC 3442 for more details\[char46]
+.IP
+Example: \fB{30\[char46]0\[char46]0\[char46]0/24,10\[char46]0\[char46]0\[char46]10, 0\[char46]0\[char46]0\[char46]0/0,10\[char46]0\[char46]0\[char46]1}\fR
+.IP "\fBoptions : ms_classless_static_route\fR: optional string"
+The DHCPv4 option code for this option is 249\[char46] This option is similar to \fBclassless_static_route\fR supported by Microsoft Windows DHCPv4 clients\[char46]
+.IP "\fBoptions : next_server\fR: optional string"
+The DHCPv4 option code for setting the \(dqNext server IP address\(dq field in the DHCP header\[char46]
+.ST "Boolean DHCP Options:"
+.PP
+.PP
+.PP
+These options accept a Boolean value, expressed as \fB0\fR for false or \fB1\fR for true\[char46]
+.IP "\fBoptions : ip_forward_enable\fR: optional string, either \fB0\fR or \fB1\fR"
+The DHCPv4 option code for this option is 19\[char46]
+.IP "\fBoptions : router_discovery\fR: optional string, either \fB0\fR or \fB1\fR"
+The DHCPv4 option code for this option is 31\[char46]
+.IP "\fBoptions : ethernet_encap\fR: optional string, either \fB0\fR or \fB1\fR"
+The DHCPv4 option code for this option is 36\[char46]
+.ST "Integer DHCP Options:"
+.PP
+.PP
+.PP
+These options accept a nonnegative integer value\[char46]
+.IP "\fBoptions : default_ttl\fR: optional string, containing an integer, in range 0 to 255"
+The DHCPv4 option code for this option is 23\[char46]
+.IP "\fBoptions : tcp_ttl\fR: optional string, containing an integer, in range 0 to 255"
+The DHCPv4 option code for this option is 37\[char46]
+.IP "\fBoptions : mtu\fR: optional string, containing an integer, in range 68 to 65,535"
+The DHCPv4 option code for this option is 26\[char46]
+.IP "\fBoptions : T1\fR: optional string, containing an integer, in range 68 to 4,294,967,295"
+This specifies the time interval from address assignment until the client begins trying to renew its address\[char46] The DHCPv4 option code for this option is 58\[char46]
+.IP "\fBoptions : T2\fR: optional string, containing an integer, in range 68 to 4,294,967,295"
+This specifies the time interval from address assignment until the client begins trying to rebind its address\[char46] The DHCPv4 option code for this option is 59\[char46]
+.IP "\fBoptions : arp_cache_timeout\fR: optional string, containing an integer, in range 0 to 255"
+The DHCPv4 option code for this option is 35\[char46] This option specifies the timeout in seconds for ARP cache entries\[char46]
+.IP "\fBoptions : tcp_keepalive_interval\fR: optional string, containing an integer, in range 0 to 255"
+The DHCPv4 option code for this option is 38\[char46] This option specifies the interval that the client TCP should wait before sending a keepalive message on a TCP connection\[char46]
+.IP "\fBoptions : netbios_node_type\fR: optional string, containing an integer, in range 0 to 255"
+The DHCPv4 option code for this option is 46\[char46]
+.ST "String DHCP Options:"
+.PP
+.PP
+.PP
+These options accept a string value\[char46]
+.IP "\fBoptions : wpad\fR: optional string"
+The DHCPv4 option code for this option is 252\[char46] This option is used as part of web proxy auto discovery to provide a URL for a web proxy\[char46]
+.IP "\fBoptions : bootfile_name\fR: optional string"
+The DHCPv4 option code for this option is 67\[char46] This option is used to identify a bootfile\[char46]
+.IP "\fBoptions : path_prefix\fR: optional string"
+The DHCPv4 option code for this option is 210\[char46] In PXELINUX\(cq case this option is used to set a common path prefix, instead of deriving it from the bootfile name\[char46]
+.IP "\fBoptions : tftp_server_address\fR: optional string"
+The DHCPv4 option code for this option is 150\[char46] The option contains one or more IPv4 addresses that the client MAY use\[char46] This option is Cisco proprietary, the IEEE standard that matches with this requirement is option 66 (tftp_server)\[char46]
+.IP "\fBoptions : hostname\fR: optional string"
+The DHCPv4 option code for this option is 12\[char46] If set, indicates the DHCPv4 option \(dqHostname\(dq\[char46] Alternatively, this option can be configured in \fBoptions:hostname\fR column in table \fBLogical_Switch_Port\fR\[char46] If Hostname option value is set in both conflicting \fBLogical_Switch_Port\fR and \fBDHCP_Options\fR tables, \fBLogical_Switch_Port\fR takes precedence\[char46]
+.IP "\fBoptions : domain_name\fR: optional string"
+The DHCPv4 option code for this option is 15\[char46] This option specifies the domain name that client should use when resolving hostnames via the Domain Name System\[char46]
+.IP "\fBoptions : bootfile_name_alt\fR: optional string"
+\(dqbootfile_name_alt\(dq option is used to support iPXE\[char46] When both \(dqbootfile_name\(dq and \(dqbootfile_name_alt\(dq are provided by the CMS, \(dqbootfile_name\(dq will be used for option 67 if the dhcp request contains etherboot option (175), otherwise \(dqbootfile_name_alt\(dq will be used\[char46]
+.IP "\fBoptions : broadcast_address\fR: optional string"
+The DHCPv4 option code for this option is 28\[char46] This option specifies the IP address used as a broadcast address\[char46]
+.ST "DHCP Options of type host_id:"
+.PP
+.PP
+.PP
+These options accept either an IPv4 address or a string value\[char46]
+.IP "\fBoptions : tftp_server\fR: optional string"
+The DHCPv4 option code for this option is 66\[char46]
+.ST " DHCP Options of type domains:"
+.PP
+.PP
+.PP
+These options accept string value which is a comma separated list of domain names\[char46] The domain names are encoded based on RFC 1035\[char46]
+.IP "\fBoptions : domain_search_list\fR: optional string"
+The DHCPv4 option code for this option is 119\[char46]
+.ST "DHCPv6 options:"
+.PP
+.PP
+.PP
+OVN also implements native DHCPv6 support\[char46] The CMS should define the set of DHCPv6 options as key/value pairs\[char46] The define DHCPv6 options will be included in the DHCPv6 response to the DHCPv6 Solicit/Request/Confirm packet from the logical ports having the IPv6 addresses in the \fBcidr\fR\[char46]
+.ST "Mandatory DHCPv6 options:"
+.PP
+.PP
+.PP
+The following options must be defined\[char46]
+.IP "\fBoptions : server_id\fR: optional string"
+The Ethernet address for the DHCP server to use\[char46] This is also included in the DHCPv6 reply as option 2, ``Server Identifier\(cq\(cq to carry a DUID identifying a server between a client and a server\[char46] \fBovn\-controller\fR defines DUID based on Link-layer Address [DUID-LL]\[char46]
+.ST "IPv6 DHCPv6 options:"
+.PP
+.PP
+.PP
+Below are the supported DHCPv6 options whose values are an IPv6 address, e\[char46]g\[char46] \fBaef0::4\fR\[char46] Some options accept multiple IPv6 addresses enclosed within curly braces, e\[char46]g\[char46] \fB{aef0::4,
+aef0::5}\fR\[char46] Please refer to RFC 3315 for more details on DHCPv6 options and their codes\[char46]
+.IP "\fBoptions : dns_server\fR: optional string"
+The DHCPv6 option code for this option is 23\[char46] This option specifies the DNS servers that the VM should use\[char46]
+.ST "String DHCPv6 options:"
+.PP
+.PP
+.PP
+These options accept string values\[char46]
+.IP "\fBoptions : domain_search\fR: optional string"
+The DHCPv6 option code for this option is 24\[char46] This option specifies the domain search list the client should use to resolve hostnames with DNS\[char46]
+.IP
+Example: \fB\(dqovn\[char46]org\(dq\fR\[char46]
+.IP "\fBoptions : dhcpv6_stateless\fR: optional string"
+This option specifies the OVN native DHCPv6 will work in stateless mode, which means OVN native DHCPv6 will not offer IPv6 addresses for VM/VIF ports, but only reply other configurations, such as DNS and domain search list\[char46] When setting this option with string value \(dqtrue\(dq, VM/VIF will configure IPv6 addresses by stateless way\[char46] Default value for this option is false\[char46]
+.ST "Common Columns:"
+.PP
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+See \fBExternal IDs\fR at the beginning of this document\[char46]
+.bp
+.SH "Connection TABLE"
+.PP
+.PP
+.PP
+Configuration for a database connection to an Open vSwitch database (OVSDB) client\[char46]
+.PP
+.PP
+This table primarily configures the Open vSwitch database server (\fBovsdb\-server\fR)\[char46]
+.PP
+.PP
+The Open vSwitch database server can initiate and maintain active connections to remote clients\[char46] It can also listen for database connections\[char46]
+.SS "Summary:
+.TQ .25in
+\fICore Features:\fR
+.RS .25in
+.TQ 2.75in
+\fBtarget\fR
+string (must be unique within table)
+.RE
+.TQ .25in
+\fIClient Failure Detection and Handling:\fR
+.RS .25in
+.TQ 2.75in
+\fBmax_backoff\fR
+optional integer, at least 1,000
+.TQ 2.75in
+\fBinactivity_probe\fR
+optional integer
+.RE
+.TQ .25in
+\fIStatus:\fR
+.RS .25in
+.TQ 2.75in
+\fBis_connected\fR
+boolean
+.TQ 2.75in
+\fBstatus : last_error\fR
+optional string
+.TQ 2.75in
+\fBstatus : state\fR
+optional string, one of \fBACTIVE\fR, \fBBACKOFF\fR, \fBCONNECTING\fR, \fBIDLE\fR, or \fBVOID\fR
+.TQ 2.75in
+\fBstatus : sec_since_connect\fR
+optional string, containing an integer, at least 0
+.TQ 2.75in
+\fBstatus : sec_since_disconnect\fR
+optional string, containing an integer, at least 0
+.TQ 2.75in
+\fBstatus : locks_held\fR
+optional string
+.TQ 2.75in
+\fBstatus : locks_waiting\fR
+optional string
+.TQ 2.75in
+\fBstatus : locks_lost\fR
+optional string
+.TQ 2.75in
+\fBstatus : n_connections\fR
+optional string, containing an integer, at least 2
+.TQ 2.75in
+\fBstatus : bound_port\fR
+optional string, containing an integer
+.RE
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.TQ 2.75in
+\fBother_config\fR
+map of string-string pairs
+.RE
+.SS "Details:
+.ST "Core Features:"
+.PP
+.IP "\fBtarget\fR: string (must be unique within table)"
+Connection methods for clients\[char46]
+.IP
+The following connection methods are currently supported:
+.RS
+.TP
+\fBssl:\fIhost\fB\fR[\fB:\fIport\fB\fR]
+The specified SSL \fIport\fR on the host at the given \fIhost\fR, which can either be a DNS name (if built with unbound library) or an IP address\[char46] A valid SSL configuration must be provided when this form is used, this configuration can be specified via command-line options or the \fBSSL\fR table\[char46]
+.IP
+If \fIport\fR is not specified, it defaults to 6640\[char46]
+.IP
+SSL support is an optional feature that is not always built as part of Open vSwitch\[char46]
+.TP
+\fBtcp:\fIhost\fB\fR[\fB:\fIport\fB\fR]
+The specified TCP \fIport\fR on the host at the given \fIhost\fR, which can either be a DNS name (if built with unbound library) or an IP address\[char46] If \fIhost\fR is an IPv6 address, wrap it in square brackets, e\[char46]g\[char46] \fBtcp:[::1]:6640\fR\[char46]
+.IP
+If \fIport\fR is not specified, it defaults to 6640\[char46]
+.TP
+\fBpssl:\fR[\fIport\fR][\fB:\fIhost\fB\fR]
+Listens for SSL connections on the specified TCP \fIport\fR\[char46] Specify 0 for \fIport\fR to have the kernel automatically choose an available port\[char46] If \fIhost\fR, which can either be a DNS name (if built with unbound library) or an IP address, is specified, then connections are restricted to the resolved or specified local IPaddress (either IPv4 or IPv6 address)\[char46] If \fIhost\fR is an IPv6 address, wrap in square brackets, e\[char46]g\[char46] \fBpssl:6640:[::1]\fR\[char46] If \fIhost\fR is not specified then it listens only on IPv4 (but not IPv6) addresses\[char46] A valid SSL configuration must be provided when this form is used, this can be specified either via command-line options or the \fBSSL\fR table\[char46]
+.IP
+If \fIport\fR is not specified, it defaults to 6640\[char46]
+.IP
+SSL support is an optional feature that is not always built as part of Open vSwitch\[char46]
+.TP
+\fBptcp:\fR[\fIport\fR][\fB:\fIhost\fB\fR]
+Listens for connections on the specified TCP \fIport\fR\[char46] Specify 0 for \fIport\fR to have the kernel automatically choose an available port\[char46] If \fIhost\fR, which can either be a DNS name (if built with unbound library) or an IP address, is specified, then connections are restricted to the resolved or specified local IP address (either IPv4 or IPv6 address)\[char46] If \fIhost\fR is an IPv6 address, wrap it in square brackets, e\[char46]g\[char46] \fBptcp:6640:[::1]\fR\[char46] If \fIhost\fR is not specified then it listens only on IPv4 addresses\[char46]
+.IP
+If \fIport\fR is not specified, it defaults to 6640\[char46]
+.RE
+.IP
+When multiple clients are configured, the \fBtarget\fR values must be unique\[char46] Duplicate \fBtarget\fR values yield unspecified results\[char46]
+.ST "Client Failure Detection and Handling:"
+.PP
+.IP "\fBmax_backoff\fR: optional integer, at least 1,000"
+Maximum number of milliseconds to wait between connection attempts\[char46] Default is implementation-specific\[char46]
+.IP "\fBinactivity_probe\fR: optional integer"
+Maximum number of milliseconds of idle time on connection to the client before sending an inactivity probe message\[char46] If Open vSwitch does not communicate with the client for the specified number of seconds, it will send a probe\[char46] If a response is not received for the same additional amount of time, Open vSwitch assumes the connection has been broken and attempts to reconnect\[char46] Default is implementation-specific\[char46] A value of 0 disables inactivity probes\[char46]
+.ST "Status:"
+.PP
+.PP
+.PP
+Key-value pair of \fBis_connected\fR is always updated\[char46] Other key-value pairs in the status columns may be updated depends on the \fBtarget\fR type\[char46]
+.PP
+.PP
+When \fBtarget\fR specifies a connection method that listens for inbound connections (e\[char46]g\[char46] \fBptcp:\fR or \fBpunix:\fR), both \fBn_connections\fR and \fBis_connected\fR may also be updated while the remaining key-value pairs are omitted\[char46]
+.PP
+.PP
+On the other hand, when \fBtarget\fR specifies an outbound connection, all key-value pairs may be updated, except the above-mentioned two key-value pairs associated with inbound connection targets\[char46] They are omitted\[char46]
+.IP "\fBis_connected\fR: boolean"
+\fBtrue\fR if currently connected to this client, \fBfalse\fR otherwise\[char46]
+.IP "\fBstatus : last_error\fR: optional string"
+A human-readable description of the last error on the connection to the manager; i\[char46]e\[char46] \fBstrerror(errno)\fR\[char46] This key will exist only if an error has occurred\[char46]
+.IP "\fBstatus : state\fR: optional string, one of \fBACTIVE\fR, \fBBACKOFF\fR, \fBCONNECTING\fR, \fBIDLE\fR, or \fBVOID\fR"
+The state of the connection to the manager:
+.RS
+.TP
+\fBVOID\fR
+Connection is disabled\[char46]
+.TP
+\fBBACKOFF\fR
+Attempting to reconnect at an increasing period\[char46]
+.TP
+\fBCONNECTING\fR
+Attempting to connect\[char46]
+.TP
+\fBACTIVE\fR
+Connected, remote host responsive\[char46]
+.TP
+\fBIDLE\fR
+Connection is idle\[char46] Waiting for response to keep-alive\[char46]
+.RE
+.IP
+These values may change in the future\[char46] They are provided only for human consumption\[char46]
+.IP "\fBstatus : sec_since_connect\fR: optional string, containing an integer, at least 0"
+The amount of time since this client last successfully connected to the database (in seconds)\[char46] Value is empty if client has never successfully been connected\[char46]
+.IP "\fBstatus : sec_since_disconnect\fR: optional string, containing an integer, at least 0"
+The amount of time since this client last disconnected from the database (in seconds)\[char46] Value is empty if client has never disconnected\[char46]
+.IP "\fBstatus : locks_held\fR: optional string"
+Space-separated list of the names of OVSDB locks that the connection holds\[char46] Omitted if the connection does not hold any locks\[char46]
+.IP "\fBstatus : locks_waiting\fR: optional string"
+Space-separated list of the names of OVSDB locks that the connection is currently waiting to acquire\[char46] Omitted if the connection is not waiting for any locks\[char46]
+.IP "\fBstatus : locks_lost\fR: optional string"
+Space-separated list of the names of OVSDB locks that the connection has had stolen by another OVSDB client\[char46] Omitted if no locks have been stolen from this connection\[char46]
+.IP "\fBstatus : n_connections\fR: optional string, containing an integer, at least 2"
+When \fBtarget\fR specifies a connection method that listens for inbound connections (e\[char46]g\[char46] \fBptcp:\fR or \fBpssl:\fR) and more than one connection is actually active, the value is the number of active connections\[char46] Otherwise, this key-value pair is omitted\[char46]
+.IP "\fBstatus : bound_port\fR: optional string, containing an integer"
+When \fBtarget\fR is \fBptcp:\fR or \fBpssl:\fR, this is the TCP port on which the OVSDB server is listening\[char46] (This is particularly useful when \fBtarget\fR specifies a port of 0, allowing the kernel to choose any available port\[char46])
+.ST "Common Columns:"
+.PP
+The overall purpose of these columns is described under \fBCommon
+Columns\fR at the beginning of this document\[char46]
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+.IP "\fBother_config\fR: map of string-string pairs"
+.bp
+.SH "DNS TABLE"
+.PP
+.PP
+.PP
+Each row in this table stores the DNS records\[char46] The \fBLogical_Switch\fR table\(cqs \fBdns_records\fR references these records\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBrecords\fR
+map of string-string pairs
+.TQ 3.00in
+\fBexternal_ids\fR
+map of string-string pairs
+.SS "Details:
+.IP "\fBrecords\fR: map of string-string pairs"
+Key-value pair of DNS records with \fBDNS query name\fR as the key and value as a string of IP address(es) separated by comma or space\[char46] For PTR requests, the key-value pair can be \fBReverse IPv4 address\[char46]in\-addr\[char46]arpa\fR and the value \fBDNS domain name\fR\[char46] For IPv6 addresses, the key has to be \fBReverse IPv6 address\[char46]ip6\[char46]arpa\fR\[char46]
+.IP
+\fBExample: \fR \(dqvm1\[char46]ovn\[char46]org\(dq = \(dq10\[char46]0\[char46]0\[char46]4 aef0::4\(dq
+.IP
+\fBExample: \fR \(dq4\[char46]0\[char46]0\[char46]10\[char46]in-addr\[char46]arpa\(dq = \(dqvm1\[char46]ovn\[char46]org\(dq
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+See \fBExternal IDs\fR at the beginning of this document\[char46]
+.bp
+.SH "SSL TABLE"
+.PP
+SSL configuration for ovn-nb database access\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBprivate_key\fR
+string
+.TQ 3.00in
+\fBcertificate\fR
+string
+.TQ 3.00in
+\fBca_cert\fR
+string
+.TQ 3.00in
+\fBbootstrap_ca_cert\fR
+boolean
+.TQ 3.00in
+\fBssl_protocols\fR
+string
+.TQ 3.00in
+\fBssl_ciphers\fR
+string
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.RE
+.SS "Details:
+.IP "\fBprivate_key\fR: string"
+Name of a PEM file containing the private key used as the switch\(cqs identity for SSL connections to the controller\[char46]
+.IP "\fBcertificate\fR: string"
+Name of a PEM file containing a certificate, signed by the certificate authority (CA) used by the controller and manager, that certifies the switch\(cqs private key, identifying a trustworthy switch\[char46]
+.IP "\fBca_cert\fR: string"
+Name of a PEM file containing the CA certificate used to verify that the switch is connected to a trustworthy controller\[char46]
+.IP "\fBbootstrap_ca_cert\fR: boolean"
+If set to \fBtrue\fR, then Open vSwitch will attempt to obtain the CA certificate from the controller on its first SSL connection and save it to the named PEM file\[char46] If it is successful, it will immediately drop the connection and reconnect, and from then on all SSL connections must be authenticated by a certificate signed by the CA certificate thus obtained\[char46] \fBThis option exposes the
+SSL connection to a man\-in\-the\-middle attack obtaining the initial
+CA certificate\[char46]\fR It may still be useful for bootstrapping\[char46]
+.IP "\fBssl_protocols\fR: string"
+List of SSL protocols to be enabled for SSL connections\[char46] The default when this option is omitted is \fBTLSv1,TLSv1\[char46]1,TLSv1\[char46]2\fR\[char46]
+.IP "\fBssl_ciphers\fR: string"
+List of ciphers (in OpenSSL cipher string format) to be supported for SSL connections\[char46] The default when this option is omitted is \fBHIGH:!aNULL:!MD5\fR\[char46]
+.ST "Common Columns:"
+.PP
+The overall purpose of these columns is described under \fBCommon
+Columns\fR at the beginning of this document\[char46]
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+.bp
+.SH "Gateway_Chassis TABLE"
+.PP
+.PP
+.PP
+Association of a chassis to a logical router port\[char46] The traffic going out through an specific router port will be redirected to a chassis, or a set of them in high availability configurations\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBname\fR
+string (must be unique within table)
+.TQ 3.00in
+\fBchassis_name\fR
+string
+.TQ 3.00in
+\fBpriority\fR
+integer, in range 0 to 32,767
+.TQ 3.00in
+\fBoptions\fR
+map of string-string pairs
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.RE
+.SS "Details:
+.IP "\fBname\fR: string (must be unique within table)"
+Name of the \fBGateway_Chassis\fR\[char46]
+.IP
+A suggested, but not required naming convention is \fB${port_name}_${chassis_name}\fR\[char46]
+.IP "\fBchassis_name\fR: string"
+Name of the chassis that we want to redirect traffic through for the associated logical router port\[char46] The value must match the \fBname\fR column of the \fBChassis\fR table in the \fBOVN_Southbound\fR database\[char46]
+.IP "\fBpriority\fR: integer, in range 0 to 32,767"
+This is the priority of a chassis among all \fBGateway_Chassis\fR belonging to the same logical router port\[char46]
+.IP "\fBoptions\fR: map of string-string pairs"
+Reserved for future use\[char46]
+.ST "Common Columns:"
+.PP
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+See \fBExternal IDs\fR at the beginning of this document\[char46]
+.bp
+.SH "HA_Chassis_Group TABLE"
+.PP
+.PP
+.PP
+Table representing a group of chassis which can provide high availability services\[char46] Each chassis in the group is represented by the table \fBHA_Chassis\fR\[char46] The HA chassis with highest priority will be the master of this group\[char46] If the master chassis failover is detected, the HA chassis with the next higher priority takes over the responsibility of providing the HA\[char46] If a distributed gateway router port references a row in this table, then the master HA chassis in this group provides the gateway functionality\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBname\fR
+string (must be unique within table)
+.TQ 3.00in
+\fBha_chassis\fR
+set of \fBHA_Chassis\fRes
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.RE
+.SS "Details:
+.IP "\fBname\fR: string (must be unique within table)"
+Name of the \fBHA_Chassis_Group\fR\[char46] Name should be unique\[char46]
+.IP "\fBha_chassis\fR: set of \fBHA_Chassis\fRes"
+A list of HA chassis which belongs to this group\[char46]
+.ST "Common Columns:"
+.PP
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+See \fBExternal IDs\fR at the beginning of this document\[char46]
+.bp
+.SH "HA_Chassis TABLE"
+.PP
+.SS "Summary:
+.TQ 3.00in
+\fBchassis_name\fR
+string
+.TQ 3.00in
+\fBpriority\fR
+integer, in range 0 to 32,767
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.RE
+.SS "Details:
+.IP "\fBchassis_name\fR: string"
+Name of the chassis which is part of the HA chassis group\[char46] The value must match the \fBname\fR column of the \fBChassis\fR table in the \fBOVN_Southbound\fR database\[char46]
+.IP "\fBpriority\fR: integer, in range 0 to 32,767"
+Priority of the chassis\[char46] Chassis with highest priority will be the master\[char46]
+.ST "Common Columns:"
+.PP
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+See \fBExternal IDs\fR at the beginning of this document\[char46]
+.bp
+.SH "BFD TABLE"
+.PP
+.PP
+.PP
+Contains BFD parameter for ovn-controller BFD configuration\[char46] OVN BFD implementation is used to provide detection of failures in the path between adjacent forwarding engines, including the OVN interfaces\[char46] OVN BFD provides link status info to OVN northd in order to update logical flows according to the status of BFD endpoints\[char46] In the current implementation OVN BFD is used to check next-hop status for ECMP routes\[char46] Please note BFD table refers to OVN BFD implementation and not to OVS legacy one\[char46]
+.SS "Summary:
+.TQ .25in
+\fIConfiguration:\fR
+.RS .25in
+.TQ 2.75in
+\fBlogical_port\fR
+string
+.TQ 2.75in
+\fBdst_ip\fR
+string
+.TQ 2.75in
+\fBmin_tx\fR
+optional integer, at least 1
+.TQ 2.75in
+\fBmin_rx\fR
+optional integer
+.TQ 2.75in
+\fBdetect_mult\fR
+optional integer, at least 1
+.TQ 2.75in
+\fBoptions\fR
+map of string-string pairs
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.RE
+.TQ .25in
+\fIStatus Reporting:\fR
+.RS .25in
+.TQ 2.75in
+\fBstatus\fR
+optional string, one of \fBadmin_down\fR, \fBdown\fR, \fBinit\fR, or \fBup\fR
+.RE
+.SS "Details:
+.ST "Configuration:"
+.PP
+.PP
+.PP
+\fBovn\-northd\fR reads configuration from these columns\[char46]
+.IP "\fBlogical_port\fR: string"
+OVN logical port when BFD engine is running\[char46]
+.IP "\fBdst_ip\fR: string"
+BFD peer IP address\[char46]
+.IP "\fBmin_tx\fR: optional integer, at least 1"
+This is the minimum interval, in milliseconds, that the local system would like to use when transmitting BFD Control packets, less any jitter applied\[char46] The value zero is reserved\[char46] Default value is 1000 ms\[char46]
+.IP "\fBmin_rx\fR: optional integer"
+This is the minimum interval, in milliseconds, between received BFD Control packets that this system is capable of supporting, less any jitter applied by the sender\[char46] If this value is zero, the transmitting system does not want the remote system to send any periodic BFD Control packets\[char46]
+.IP "\fBdetect_mult\fR: optional integer, at least 1"
+Detection time multiplier\[char46] The negotiated transmit interval, multiplied by this value, provides the Detection Time for the receiving system in Asynchronous mode\[char46] Default value is 5\[char46]
+.IP "\fBoptions\fR: map of string-string pairs"
+Reserved for future use\[char46]
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+See \fBExternal IDs\fR at the beginning of this document\[char46]
+.ST "Status Reporting:"
+.PP
+.PP
+.PP
+\fBovn\-northd\fR writes BFD status into these columns\[char46]
+.IP "\fBstatus\fR: optional string, one of \fBadmin_down\fR, \fBdown\fR, \fBinit\fR, or \fBup\fR"
+BFD port logical states\[char46] Possible values are:
+.RS
+.IP \(bu
+\fBadmin_down\fR
+.IP \(bu
+\fBdown\fR
+.IP \(bu
+\fBinit\fR
+.IP \(bu
+\fBup\fR
+.RE
+.bp
+.SH "Static_MAC_Binding TABLE"
+.PP
+.PP
+.PP
+Each record represents a Static_MAC_Binding entry for a logical router\[char46]
+.SS "Summary:
+.TQ .25in
+\fIConfiguration:\fR
+.RS .25in
+.TQ 2.75in
+\fBlogical_port\fR
+string
+.TQ 2.75in
+\fBip\fR
+string
+.TQ 2.75in
+\fBmac\fR
+string
+.TQ 2.75in
+\fBoverride_dynamic_mac\fR
+boolean
+.RE
+.SS "Details:
+.ST "Configuration:"
+.PP
+.PP
+.PP
+\fBovn\-northd\fR reads configuration from these columns and propagates the value to SBDB\[char46]
+.IP "\fBlogical_port\fR: string"
+The logical router port for the binding\[char46]
+.IP "\fBip\fR: string"
+The bound IP address\[char46]
+.IP "\fBmac\fR: string"
+The Ethernet address to which the IP is bound\[char46]
+.IP "\fBoverride_dynamic_mac\fR: boolean"
+Override dynamically learnt MACs\[char46]
+.bp
+.SH "Chassis_Template_Var TABLE"
+.PP
+.PP
+.PP
+One record per chassis, each containing a map, \fBvariables\fR, between template variable names and their value for that specific chassis\[char46] A template variable has a name and potentially different values on different hypervisors in the OVN cluster\[char46] For example, two rows, \fBR1 = (\[char46]chassis=C1, variables={(N: V1)}\fR and \fBR2 = (\[char46]chassis=C2, variables={(N: V2)}\fR will make \fBovn\-controller\fR running on chassis \fBC1\fR and \fBC2\fR interpret the token \fBN\fR either as \fBV1\fR (on \fBC1\fR) or as \fBV2\fR (on \fBC2\fR)\[char46] Users can refer to template variables from within other logical components, e\[char46]g\[char46], within ACL, QoS or Logical_Router_Policy matches or from Load_Balancer VIP and backend definitions\[char46]
+.PP
+.PP
+If a template variable is referenced on a chassis for which that variable is not defined then \fBovn\-controller\fR running on that chassis will just interpret it as a raw string literal\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBchassis\fR
+string (must be unique within table)
+.TQ 3.00in
+\fBvariables\fR
+map of string-string pairs
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.RE
+.SS "Details:
+.IP "\fBchassis\fR: string (must be unique within table)"
+The chassis this set of variable values applies to\[char46]
+.IP "\fBvariables\fR: map of string-string pairs"
+The set of variable values for a given chassis\[char46]
+.ST "Common Columns:"
+.PP
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+See \fBExternal IDs\fR at the beginning of this document\[char46]
diff --git a/support/dist-docs-branch-23.06/ovn-nb.5.html b/support/dist-docs-branch-23.06/ovn-nb.5.html
new file mode 100644
index 00000000..24ae1893
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-nb.5.html
@@ -0,0 +1,4100 @@
+<html><head><meta charset="UTF-8"></head><body><pre>
+<u>o</u><u>v</u><u>n</u><u>-</u><u>n</u><u>b</u>(5)                     Open vSwitch Manual                    <u>o</u><u>v</u><u>n</u><u>-</u><u>n</u><u>b</u>(5)
+
+<b>N</b><b>A</b><b>M</b><b>E</b>
+       ovn-nb - OVN_Northbound database schema
+
+       This  database  is  the  interface between OVN and the cloud management
+       system (CMS), such as OpenStack, running above it. The CMS produces al‐
+       most all of the contents of the database. The <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> program  moni‐
+       tors  the  database  contents,  transforms  it,  and stores it into the
+       <b>O</b><b>V</b><b>N</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database.
+
+       We generally speak of ``the’’ CMS, but one  can  imagine  scenarios  in
+       which multiple CMSes manage different parts of an OVN deployment.
+
+   <b>E</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> <b>I</b><b>D</b><b>s</b>
+       Each  of  the  tables in this database contains a special column, named
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>. This column has the same form and purpose each  place  it
+       appears.
+
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+                     Key-value  pairs  for  use  by the CMS. The CMS might use
+                     certain pairs, for example, to identify entities  in  its
+                     own  configuration that correspond to those in this data‐
+                     base.
+
+<b>T</b><b>A</b><b>B</b><b>L</b><b>E</b> <b>S</b><b>U</b><b>M</b><b>M</b><b>A</b><b>R</b><b>Y</b>
+       The following list summarizes the purpose of each of the tables in  the
+       <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b>  database.   Each table is described in more detail on a
+       later page.
+
+       Table     Purpose
+       <b>N</b><b>B</b><b>_</b><b>G</b><b>l</b><b>o</b><b>b</b><b>a</b><b>l</b> Northbound configuration
+       <b>C</b><b>o</b><b>p</b><b>p</b>      Control plane protection
+       <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b>
+                 L2 logical switch
+       <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b>
+                 L2 logical switch port
+       <b>F</b><b>o</b><b>r</b><b>w</b><b>a</b><b>r</b><b>d</b><b>i</b><b>n</b><b>g</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b>
+                 forwarding group
+       <b>A</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>_</b><b>S</b><b>e</b><b>t</b>
+                 Address Sets
+       <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b>
+                 Port Groups
+       <b>L</b><b>o</b><b>a</b><b>d</b><b>_</b><b>B</b><b>a</b><b>l</b><b>a</b><b>n</b><b>c</b><b>e</b><b>r</b>
+                 load balancer
+       <b>L</b><b>o</b><b>a</b><b>d</b><b>_</b><b>B</b><b>a</b><b>l</b><b>a</b><b>n</b><b>c</b><b>e</b><b>r</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b>
+                 load balancer group
+       <b>L</b><b>o</b><b>a</b><b>d</b><b>_</b><b>B</b><b>a</b><b>l</b><b>a</b><b>n</b><b>c</b><b>e</b><b>r</b><b>_</b><b>H</b><b>e</b><b>a</b><b>l</b><b>t</b><b>h</b><b>_</b><b>C</b><b>h</b><b>e</b><b>c</b><b>k</b>
+                 load balancer
+       <b>A</b><b>C</b><b>L</b>       Access Control List (ACL) rule
+       <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b>
+                 L3 logical router
+       <b>Q</b><b>o</b><b>S</b>       QoS rule
+       <b>M</b><b>i</b><b>r</b><b>r</b><b>o</b><b>r</b>    Mirror Entry
+       <b>M</b><b>e</b><b>t</b><b>e</b><b>r</b>     Meter entry
+       <b>M</b><b>e</b><b>t</b><b>e</b><b>r</b><b>_</b><b>B</b><b>a</b><b>n</b><b>d</b>
+                 Band for meter entries
+       <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b>
+                 L3 logical router port
+       <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>S</b><b>t</b><b>a</b><b>t</b><b>i</b><b>c</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b>
+                 Logical router static routes
+       <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>P</b><b>o</b><b>l</b><b>i</b><b>c</b><b>y</b>
+                 Logical router policies
+       <b>N</b><b>A</b><b>T</b>       NAT rules
+       <b>D</b><b>H</b><b>C</b><b>P</b><b>_</b><b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+                 DHCP options
+       <b>C</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>
+                 OVSDB client connections.
+       <b>D</b><b>N</b><b>S</b>       Native DNS resolution
+       <b>S</b><b>S</b><b>L</b>       SSL configuration.
+       <b>G</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>_</b><b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>
+                 Gateway_Chassis configuration.
+       <b>H</b><b>A</b><b>_</b><b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b>
+                 HA_Chassis_Group configuration.
+       <b>H</b><b>A</b><b>_</b><b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>
+                 HA_Chassis configuration.
+       <b>B</b><b>F</b><b>D</b>       BFD configuration.
+       <b>S</b><b>t</b><b>a</b><b>t</b><b>i</b><b>c</b><b>_</b><b>M</b><b>A</b><b>C</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>
+                 Static_MAC_Binding configuration.
+       <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>T</b><b>e</b><b>m</b><b>p</b><b>l</b><b>a</b><b>t</b><b>e</b><b>_</b><b>V</b><b>a</b><b>r</b>
+                 Chassis_Template_Var configuration.
+
+<b>N</b><b>B</b><b>_</b><b>G</b><b>l</b><b>o</b><b>b</b><b>a</b><b>l</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Northbound configuration for an OVN system. This table  must  have  ex‐
+       actly one row.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <u>I</u><u>d</u><u>e</u><u>n</u><u>t</u><u>i</u><u>t</u><u>y</u><u>:</u>
+         <b>n</b><b>a</b><b>m</b><b>e</b>                        string
+       <u>S</u><u>t</u><u>a</u><u>t</u><u>u</u><u>s</u><u>:</u>
+         <b>n</b><b>b</b><b>_</b><b>c</b><b>f</b><b>g</b>                      integer
+         <b>n</b><b>b</b><b>_</b><b>c</b><b>f</b><b>g</b><b>_</b><b>t</b><b>i</b><b>m</b><b>e</b><b>s</b><b>t</b><b>a</b><b>m</b><b>p</b>            integer
+         <b>s</b><b>b</b><b>_</b><b>c</b><b>f</b><b>g</b>                      integer
+         <b>s</b><b>b</b><b>_</b><b>c</b><b>f</b><b>g</b><b>_</b><b>t</b><b>i</b><b>m</b><b>e</b><b>s</b><b>t</b><b>a</b><b>m</b><b>p</b>            integer
+         <b>h</b><b>v</b><b>_</b><b>c</b><b>f</b><b>g</b>                      integer
+         <b>h</b><b>v</b><b>_</b><b>c</b><b>f</b><b>g</b><b>_</b><b>t</b><b>i</b><b>m</b><b>e</b><b>s</b><b>t</b><b>a</b><b>m</b><b>p</b>            integer
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>                     map of string-string pairs
+         <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u> <u>f</u><u>o</u><u>r</u> <u>c</u><u>o</u><u>n</u><u>f</u><u>i</u><u>g</u><u>u</u><u>r</u><u>i</u><u>n</u><u>g</u> <u>O</u><u>V</u><u>S</u> <u>B</u><u>F</u><u>D</u><u>:</u>
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>b</b><b>f</b><b>d</b><b>-</b><b>m</b><b>i</b><b>n</b><b>-</b><b>r</b><b>x</b>     optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>b</b><b>f</b><b>d</b><b>-</b><b>d</b><b>e</b><b>c</b><b>a</b><b>y</b><b>-</b><b>m</b><b>i</b><b>n</b><b>-</b><b>r</b><b>x</b>
+                                     optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>b</b><b>f</b><b>d</b><b>-</b><b>m</b><b>i</b><b>n</b><b>-</b><b>t</b><b>x</b>     optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>b</b><b>f</b><b>d</b><b>-</b><b>m</b><b>u</b><b>l</b><b>t</b>       optional string
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>m</b><b>a</b><b>c</b><b>_</b><b>p</b><b>r</b><b>e</b><b>f</b><b>i</b><b>x</b>        optional string
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>m</b><b>a</b><b>c</b><b>_</b><b>b</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b><b>_</b><b>r</b><b>e</b><b>m</b><b>o</b><b>v</b><b>a</b><b>l</b><b>_</b><b>l</b><b>i</b><b>m</b><b>i</b><b>t</b>
+                                     optional  string,  containing an integer,
+                                     in range 0 to 4,294,967,295
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b><b>_</b><b>e</b><b>v</b><b>e</b><b>n</b><b>t</b>  optional string, either <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b><b>_</b><b>p</b><b>r</b><b>o</b><b>b</b><b>e</b><b>_</b><b>i</b><b>n</b><b>t</b><b>e</b><b>r</b><b>v</b><b>a</b><b>l</b>
+                                     optional string
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>i</b><b>c</b><b>_</b><b>p</b><b>r</b><b>o</b><b>b</b><b>e</b><b>_</b><b>i</b><b>n</b><b>t</b><b>e</b><b>r</b><b>v</b><b>a</b><b>l</b>
+                                     optional string
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>n</b><b>b</b><b>c</b><b>t</b><b>l</b><b>_</b><b>p</b><b>r</b><b>o</b><b>b</b><b>e</b><b>_</b><b>i</b><b>n</b><b>t</b><b>e</b><b>r</b><b>v</b><b>a</b><b>l</b>
+                                     optional string
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b><b>_</b><b>t</b><b>r</b><b>i</b><b>m</b><b>_</b><b>t</b><b>i</b><b>m</b><b>e</b><b>o</b><b>u</b><b>t</b>
+                                     optional string
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>u</b><b>s</b><b>e</b><b>_</b><b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>d</b><b>p</b><b>_</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b><b>s</b>
+                                     optional string
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>u</b><b>s</b><b>e</b><b>_</b><b>p</b><b>a</b><b>r</b><b>a</b><b>l</b><b>l</b><b>e</b><b>l</b><b>_</b><b>b</b><b>u</b><b>i</b><b>l</b><b>d</b>
+                                     optional string
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>i</b><b>g</b><b>n</b><b>o</b><b>r</b><b>e</b><b>_</b><b>l</b><b>s</b><b>p</b><b>_</b><b>d</b><b>o</b><b>w</b><b>n</b>   optional string
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>u</b><b>s</b><b>e</b><b>_</b><b>c</b><b>t</b><b>_</b><b>i</b><b>n</b><b>v</b><b>_</b><b>m</b><b>a</b><b>t</b><b>c</b><b>h</b>  optional string
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>d</b><b>e</b><b>f</b><b>a</b><b>u</b><b>l</b><b>t</b><b>_</b><b>a</b><b>c</b><b>l</b><b>_</b><b>d</b><b>r</b><b>o</b><b>p</b>  optional string
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>d</b><b>e</b><b>b</b><b>u</b><b>g</b><b>_</b><b>d</b><b>r</b><b>o</b><b>p</b><b>_</b><b>d</b><b>o</b><b>m</b><b>a</b><b>i</b><b>n</b><b>_</b><b>i</b><b>d</b>
+                                     optional string
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>d</b><b>e</b><b>b</b><b>u</b><b>g</b><b>_</b><b>d</b><b>r</b><b>o</b><b>p</b><b>_</b><b>c</b><b>o</b><b>l</b><b>l</b><b>e</b><b>c</b><b>t</b><b>o</b><b>r</b><b>_</b><b>s</b><b>e</b><b>t</b>
+                                     optional string
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>u</b><b>s</b><b>e</b><b>_</b><b>c</b><b>o</b><b>m</b><b>m</b><b>o</b><b>n</b><b>_</b><b>z</b><b>o</b><b>n</b><b>e</b>   optional string, either <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+         <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u> <u>f</u><u>o</u><u>r</u> <u>c</u><u>o</u><u>n</u><u>f</u><u>i</u><u>g</u><u>u</u><u>r</u><u>i</u><u>n</u><u>g</u> <u>i</u><u>n</u><u>t</u><u>e</u><u>r</u><u>c</u><u>o</u><u>n</u><u>n</u><u>e</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u> <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u> <u>a</u><u>d</u><u>v</u><u>e</u><u>r</u><u>t</u><u>i</u><u>s</u><u>e</u><u>m</u><u>e</u><u>n</u><u>t</u><u>:</u>
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>i</b><b>c</b><b>-</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>-</b><b>a</b><b>d</b><b>v</b>   optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>i</b><b>c</b><b>-</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>-</b><b>l</b><b>e</b><b>a</b><b>r</b><b>n</b> optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>i</b><b>c</b><b>-</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>-</b><b>a</b><b>d</b><b>v</b><b>-</b><b>d</b><b>e</b><b>f</b><b>a</b><b>u</b><b>l</b><b>t</b>
+                                     optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>i</b><b>c</b><b>-</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>-</b><b>l</b><b>e</b><b>a</b><b>r</b><b>n</b><b>-</b><b>d</b><b>e</b><b>f</b><b>a</b><b>u</b><b>l</b><b>t</b>
+                                     optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>i</b><b>c</b><b>-</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>-</b><b>b</b><b>l</b><b>a</b><b>c</b><b>k</b><b>l</b><b>i</b><b>s</b><b>t</b>
+                                     optional string
+       <u>C</u><u>o</u><u>n</u><u>n</u><u>e</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+         <b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>                 set of <b>C</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>s
+         <b>s</b><b>s</b><b>l</b>                         optional <b>S</b><b>S</b><b>L</b>
+       <u>S</u><u>e</u><u>c</u><u>u</u><u>r</u><u>i</u><u>t</u><u>y</u> <u>C</u><u>o</u><u>n</u><u>f</u><u>i</u><u>g</u><u>u</u><u>r</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+         <b>i</b><b>p</b><b>s</b><b>e</b><b>c</b>                       boolean
+       <u>R</u><u>e</u><u>a</u><u>d</u><u>-</u><u>o</u><u>n</u><u>l</u><u>y</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>m</b><b>a</b><b>x</b><b>_</b><b>t</b><b>u</b><b>n</b><b>i</b><b>d</b>         optional string
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+     <u>I</u><u>d</u><u>e</u><u>n</u><u>t</u><u>i</u><u>t</u><u>y</u><u>:</u>
+
+       <b>n</b><b>a</b><b>m</b><b>e</b>: string
+              The name of the OVN cluster, which uniquely identifies  the  OVN
+              cluster  throughout  all  OVN  clusters supposed to interconnect
+              with each other.
+
+     <u>S</u><u>t</u><u>a</u><u>t</u><u>u</u><u>s</u><u>:</u>
+
+       These columns allow a client to track the overall  configuration  state
+       of the system.
+
+       <b>n</b><b>b</b><b>_</b><b>c</b><b>f</b><b>g</b>: integer
+              Sequence  number for client to increment. When a client modifies
+              any part of the northbound database configuration and wishes  to
+              wait  for <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> and possibly all of the hypervisors to fin‐
+              ish applying the changes, it may increment this sequence number.
+
+       <b>n</b><b>b</b><b>_</b><b>c</b><b>f</b><b>g</b><b>_</b><b>t</b><b>i</b><b>m</b><b>e</b><b>s</b><b>t</b><b>a</b><b>m</b><b>p</b>: integer
+              The timestamp, in milliseconds since the epoch, when  <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>
+              sees the latest <b>n</b><b>b</b><b>_</b><b>c</b><b>f</b><b>g</b> and starts processing.
+
+              To print the timestamp as a human-readable date:
+
+                        <b>d</b><b>a</b><b>t</b><b>e</b> <b>-</b><b>d</b> <b>"</b><b>@</b><b>$</b><b>(</b><b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b> <b>g</b><b>e</b><b>t</b> <b>N</b><b>B</b><b>_</b><b>G</b><b>l</b><b>o</b><b>b</b><b>a</b><b>l</b> <b>.</b> <b>n</b><b>b</b><b>_</b><b>c</b><b>f</b><b>g</b><b>_</b><b>t</b><b>i</b><b>m</b><b>e</b><b>s</b><b>t</b><b>a</b><b>m</b><b>p</b> <b>|</b> <b>s</b><b>e</b><b>d</b> ’’<b>s</b><b>/</b><b>.</b><b>.</b><b>.</b><b>$</b><b>/</b><b>/</b>’’<b>)</b><b>"</b>
+
+
+       <b>s</b><b>b</b><b>_</b><b>c</b><b>f</b><b>g</b>: integer
+              Sequence  number that <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> sets to the value of <b>n</b><b>b</b><b>_</b><b>c</b><b>f</b><b>g</b> af‐
+              ter it finishes applying the corresponding configuration changes
+              to the <b>O</b><b>V</b><b>N</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database.
+
+       <b>s</b><b>b</b><b>_</b><b>c</b><b>f</b><b>g</b><b>_</b><b>t</b><b>i</b><b>m</b><b>e</b><b>s</b><b>t</b><b>a</b><b>m</b><b>p</b>: integer
+              The timestamp, in milliseconds since the epoch, when  <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>
+              finishes applying the corresponding configuration changes to the
+              <b>O</b><b>V</b><b>N</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database successfully.
+
+       <b>h</b><b>v</b><b>_</b><b>c</b><b>f</b><b>g</b>: integer
+              Sequence  number  that  <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> sets to the smallest sequence
+              number of all the chassis in the  system,  as  reported  in  the
+              <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>P</b><b>r</b><b>i</b><b>v</b><b>a</b><b>t</b><b>e</b>  table  in the southbound database. Thus, <b>h</b><b>v</b><b>_</b><b>c</b><b>f</b><b>g</b>
+              equals <b>n</b><b>b</b><b>_</b><b>c</b><b>f</b><b>g</b> if all chassis are caught up with  the  northbound
+              configuration  (which may never happen, if any chassis is down).
+              This value can regress, if a chassis was removed from the system
+              and rejoins before catching up.
+
+              If there are  no  chassis,  then  <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>  copies  <b>n</b><b>b</b><b>_</b><b>c</b><b>f</b><b>g</b>  to
+              <b>h</b><b>v</b><b>_</b><b>c</b><b>f</b><b>g</b>.  Thus,  in  this case, the (nonexistent) hypervisors are
+              always considered to be caught up. This means  that  hypervisors
+              can  be  "caught  up" even in cases where <b>s</b><b>b</b><b>_</b><b>c</b><b>f</b><b>g</b> would show that
+              the southbound database is not. To detect when both the hypervi‐
+              sors and the southbound database are caught up, a client  should
+              take the smaller of <b>s</b><b>b</b><b>_</b><b>c</b><b>f</b><b>g</b> and <b>h</b><b>v</b><b>_</b><b>c</b><b>f</b><b>g</b>.
+
+       <b>h</b><b>v</b><b>_</b><b>c</b><b>f</b><b>g</b><b>_</b><b>t</b><b>i</b><b>m</b><b>e</b><b>s</b><b>t</b><b>a</b><b>m</b><b>p</b>: integer
+              The  largest  timestamp, in milliseconds since the epoch, of the
+              smallest sequence number of all the chassis in  the  system,  as
+              reported  in  the  <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>P</b><b>r</b><b>i</b><b>v</b><b>a</b><b>t</b><b>e</b> table in the southbound data‐
+              base. In other words, this timestamp reflects the time when  the
+              slowest  chassis  catches  up with the northbound configuration,
+              which is useful for end-to-end control  plane  latency  measure‐
+              ment.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+              See <b>E</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> <b>I</b><b>D</b><b>s</b> at the beginning of this document.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>: map of string-string pairs
+              This  column  provides general key/value settings. The supported
+              options are described individually below.
+
+     <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u> <u>f</u><u>o</u><u>r</u> <u>c</u><u>o</u><u>n</u><u>f</u><u>i</u><u>g</u><u>u</u><u>r</u><u>i</u><u>n</u><u>g</u> <u>O</u><u>V</u><u>S</u> <u>B</u><u>F</u><u>D</u><u>:</u>
+
+       These options apply when <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> configures OVS BFD  on  tunnels
+       interfaces. Please note these parameters refer to legacy OVS BFD imple‐
+       mentation and not to OVN BFD one.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>b</b><b>f</b><b>d</b><b>-</b><b>m</b><b>i</b><b>n</b><b>-</b><b>r</b><b>x</b>: optional string
+              BFD  option  <b>m</b><b>i</b><b>n</b><b>-</b><b>r</b><b>x</b>  value to use when configuring BFD on tunnel
+              interfaces.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>b</b><b>f</b><b>d</b><b>-</b><b>d</b><b>e</b><b>c</b><b>a</b><b>y</b><b>-</b><b>m</b><b>i</b><b>n</b><b>-</b><b>r</b><b>x</b>: optional string
+              BFD option <b>d</b><b>e</b><b>c</b><b>a</b><b>y</b><b>-</b><b>m</b><b>i</b><b>n</b><b>-</b><b>r</b><b>x</b> value to use  when  configuring  BFD  on
+              tunnel interfaces.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>b</b><b>f</b><b>d</b><b>-</b><b>m</b><b>i</b><b>n</b><b>-</b><b>t</b><b>x</b>: optional string
+              BFD  option  <b>m</b><b>i</b><b>n</b><b>-</b><b>t</b><b>x</b>  value to use when configuring BFD on tunnel
+              interfaces.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>b</b><b>f</b><b>d</b><b>-</b><b>m</b><b>u</b><b>l</b><b>t</b>: optional string
+              BFD option <b>m</b><b>u</b><b>l</b><b>t</b> value to use when configuring BFD on tunnel  in‐
+              terfaces.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>m</b><b>a</b><b>c</b><b>_</b><b>p</b><b>r</b><b>e</b><b>f</b><b>i</b><b>x</b>: optional string
+              Configure  a  given  OUI to be used as prefix when L2 address is
+              dynamically assigned, e.g. <b>0</b><b>0</b><b>:</b><b>1</b><b>1</b><b>:</b><b>2</b><b>2</b>
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>m</b><b>a</b><b>c</b><b>_</b><b>b</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b><b>_</b><b>r</b><b>e</b><b>m</b><b>o</b><b>v</b><b>a</b><b>l</b><b>_</b><b>l</b><b>i</b><b>m</b><b>i</b><b>t</b>: optional string, containing an in‐
+       teger, in range 0 to 4,294,967,295
+              MAC binding aging bulk removal limit. This limits how many  rows
+              can  expire in a single transaction. Default value is 0 which is
+              unlimited. When we hit the limit next batch removal  is  delayed
+              by 5 s.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b><b>_</b><b>e</b><b>v</b><b>e</b><b>n</b><b>t</b>: optional string, either <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+              Value  set by the CMS to enable/disable ovn-controller event re‐
+              porting. Traffic into OVS can raise a  ’controller’  event  that
+              results   in  a  Controller_Event  being  written  to  the  <b>C</b><b>o</b><b>n</b>‐‐
+              <b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b><b>_</b><b>E</b><b>v</b><b>e</b><b>n</b><b>t</b> table in SBDB. When the CMS has seen the event and
+              taken appropriate action, it can remove the corresponding row in
+              <b>C</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b><b>_</b><b>E</b><b>v</b><b>e</b><b>n</b><b>t</b> table. The intention is for a CMS  to  see  the
+              events  and  take  some  sort  of  action.  Please  see the <b>C</b><b>o</b><b>n</b>‐‐
+              <b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b><b>_</b><b>E</b><b>v</b><b>e</b><b>n</b><b>t</b> table in SBDB. It is possible to associate a meter
+              to each controller event type in order to not overload the pinc‐
+              trl thread under heavy load. Each event type relies on  a  meter
+              with a defined name:
+
+              •      empty_lb_backends: event-elb
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b><b>_</b><b>p</b><b>r</b><b>o</b><b>b</b><b>e</b><b>_</b><b>i</b><b>n</b><b>t</b><b>e</b><b>r</b><b>v</b><b>a</b><b>l</b>: optional string
+              The  inactivity  probe  interval  of  the  connection to the OVN
+              Northbound and Southbound databases  from  <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>,  in  mil‐
+              liseconds.  If  the  value  is  zero, it disables the connection
+              keepalive feature.
+
+              If the value is nonzero, then it will be forced to a value of at
+              least 1000 ms.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>i</b><b>c</b><b>_</b><b>p</b><b>r</b><b>o</b><b>b</b><b>e</b><b>_</b><b>i</b><b>n</b><b>t</b><b>e</b><b>r</b><b>v</b><b>a</b><b>l</b>: optional string
+              The inactivity probe interval  of  the  connection  to  the  OVN
+              Northbound  and  Southbound  databases from <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b>, in millisec‐
+              onds. If the value is zero, it disables the connection keepalive
+              feature.
+
+              If the value is nonzero, then it will be forced to a value of at
+              least 1000 ms.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>n</b><b>b</b><b>c</b><b>t</b><b>l</b><b>_</b><b>p</b><b>r</b><b>o</b><b>b</b><b>e</b><b>_</b><b>i</b><b>n</b><b>t</b><b>e</b><b>r</b><b>v</b><b>a</b><b>l</b>: optional string
+              The inactivity probe interval  of  the  connection  to  the  OVN
+              Northbound  database from <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b> utility, in milliseconds. If
+              the value is zero, it disables the connection keepalive feature.
+
+              If the value is nonzero, then it will be forced to a value of at
+              least 1000 ms.
+
+              If the value is less than  zero,  then  the  default  inactivity
+              probe interval for <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b> would be left intact (120000 ms).
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b><b>_</b><b>t</b><b>r</b><b>i</b><b>m</b><b>_</b><b>t</b><b>i</b><b>m</b><b>e</b><b>o</b><b>u</b><b>t</b>: optional string
+              When  used, this configuration value specifies the time, in mil‐
+              liseconds, since the  last  <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>  active  operation  after
+              which  memory  trimming  is performed. By default this is set to
+              30000 (30 seconds).
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>u</b><b>s</b><b>e</b><b>_</b><b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>d</b><b>p</b><b>_</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b><b>s</b>: optional string
+              Note: This option is deprecated, the only behavior is to  always
+              combine  logical flows by datapath groups. Changing the value or
+              removing this option all toghether will have no effect.
+
+              <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> combines logical flows that differs only  by  logical
+              datapath  into a single logical flow with logical datapath group
+              attached.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>u</b><b>s</b><b>e</b><b>_</b><b>p</b><b>a</b><b>r</b><b>a</b><b>l</b><b>l</b><b>e</b><b>l</b><b>_</b><b>b</b><b>u</b><b>i</b><b>l</b><b>d</b>: optional string
+              If set to <b>t</b><b>r</b><b>u</b><b>e</b>, <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> will attempt to compute logical flows
+              in parallel.
+
+              Parallel computation is enabled only if the system has 4 or more
+              cores/threads available to be used by ovn-northd.
+
+              The default value is <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>i</b><b>g</b><b>n</b><b>o</b><b>r</b><b>e</b><b>_</b><b>l</b><b>s</b><b>p</b><b>_</b><b>d</b><b>o</b><b>w</b><b>n</b>: optional string
+              If set to false, ARP/ND reply flows  for  logical  switch  ports
+              will  be  installed  only  if  the port is up, i.e. claimed by a
+              Chassis. If set to true, these flows are installed regardless of
+              the status of the port, which can result in a situation that ARP
+              request to an IP is resolved even before  the  relevant  VM/con‐
+              tainer  is running. For environments where this is not an issue,
+              setting it to <b>t</b><b>r</b><b>u</b><b>e</b> can reduce the load and latency of  the  con‐
+              trol plane. The default value is <b>t</b><b>r</b><b>u</b><b>e</b>.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>u</b><b>s</b><b>e</b><b>_</b><b>c</b><b>t</b><b>_</b><b>i</b><b>n</b><b>v</b><b>_</b><b>m</b><b>a</b><b>t</b><b>c</b><b>h</b>: optional string
+              If set to false, <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> will not use the <b>c</b><b>t</b><b>.</b><b>i</b><b>n</b><b>v</b> field in any
+              of  the  logical flow matches. The default value is true. If the
+              NIC supports offloading OVS datapath flows but  doesn’t  support
+              offloading  ct_state  <b>i</b><b>n</b><b>v</b> flag, then the datapath flows matching
+              on this flag (either <b>+</b><b>i</b><b>n</b><b>v</b> or <b>-</b><b>i</b><b>n</b><b>v</b>) will not  be  offloaded.  CMS
+              should consider setting <b>u</b><b>s</b><b>e</b><b>_</b><b>c</b><b>t</b><b>_</b><b>i</b><b>n</b><b>v</b><b>_</b><b>m</b><b>a</b><b>t</b><b>c</b><b>h</b> to <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b> in such cases.
+              This results in a side effect of the invalid packets getting de‐
+              livered  to the destination VIF, which otherwise would have been
+              dropped by <b>O</b><b>V</b><b>N</b>.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>d</b><b>e</b><b>f</b><b>a</b><b>u</b><b>l</b><b>t</b><b>_</b><b>a</b><b>c</b><b>l</b><b>_</b><b>d</b><b>r</b><b>o</b><b>p</b>: optional string
+              If set to <b>t</b><b>r</b><b>u</b><b>e</b>., <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> will generate a logical flow to drop
+              all traffic in the ACL stages. By default this option is set  to
+              <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>d</b><b>e</b><b>b</b><b>u</b><b>g</b><b>_</b><b>d</b><b>r</b><b>o</b><b>p</b><b>_</b><b>d</b><b>o</b><b>m</b><b>a</b><b>i</b><b>n</b><b>_</b><b>i</b><b>d</b>: optional string
+              If set to a 8-bit number and if <b>d</b><b>e</b><b>b</b><b>u</b><b>g</b><b>_</b><b>d</b><b>r</b><b>o</b><b>p</b><b>_</b><b>c</b><b>o</b><b>l</b><b>l</b><b>e</b><b>c</b><b>t</b><b>o</b><b>r</b><b>_</b><b>s</b><b>e</b><b>t</b> is also
+              configured, <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> will add a <b>s</b><b>a</b><b>m</b><b>p</b><b>l</b><b>e</b> action to every logical
+              flow  that contains a ’drop’ action. The 8 most significant bits
+              of the observation_domain_id field will be  those  specified  in
+              the   <b>d</b><b>e</b><b>b</b><b>u</b><b>g</b><b>_</b><b>d</b><b>r</b><b>o</b><b>p</b><b>_</b><b>d</b><b>o</b><b>m</b><b>a</b><b>i</b><b>n</b><b>_</b><b>i</b><b>d</b>. The 24 least significant bits of the
+              observation_domain_id field will be the datapath’s key.
+
+              The observation_point_id will be set to the first 32 bits of the
+              logical flow’s UUID.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>d</b><b>e</b><b>b</b><b>u</b><b>g</b><b>_</b><b>d</b><b>r</b><b>o</b><b>p</b><b>_</b><b>c</b><b>o</b><b>l</b><b>l</b><b>e</b><b>c</b><b>t</b><b>o</b><b>r</b><b>_</b><b>s</b><b>e</b><b>t</b>: optional string
+              If set to a 32-bit number <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> will add a <b>s</b><b>a</b><b>m</b><b>p</b><b>l</b><b>e</b> action to
+              every logical flow that contains a ’drop’ action. The sample ac‐
+              tion will have the specified collector_set_id.  The  value  must
+              match  that  of  the  local  OVS  configuration  as described in
+              <b>o</b><b>v</b><b>s</b><b>-</b><b>a</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>(7).
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>u</b><b>s</b><b>e</b><b>_</b><b>c</b><b>o</b><b>m</b><b>m</b><b>o</b><b>n</b><b>_</b><b>z</b><b>o</b><b>n</b><b>e</b>: optional string, either <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+              Default value is <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>. If set to <b>t</b><b>r</b><b>u</b><b>e</b> the SNAT and DNAT happens
+              in common zone, instead of happening in separate zones,  depend‐
+              ing  on  the  configuration. However, this option breaks traffic
+              when there is configuration of DGP + LB + SNAT on this  LR.  The
+              value  <b>t</b><b>r</b><b>u</b><b>e</b>  should  be  used only in case of HWOL compatibility
+              with GDP.
+
+     <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u> <u>f</u><u>o</u><u>r</u> <u>c</u><u>o</u><u>n</u><u>f</u><u>i</u><u>g</u><u>u</u><u>r</u><u>i</u><u>n</u><u>g</u> <u>i</u><u>n</u><u>t</u><u>e</u><u>r</u><u>c</u><u>o</u><u>n</u><u>n</u><u>e</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u> <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u> <u>a</u><u>d</u><u>v</u><u>e</u><u>r</u><u>t</u><u>i</u><u>s</u><u>e</u><u>m</u><u>e</u><u>n</u><u>t</u><u>:</u>
+
+       These options control how routes are advertised between OVN deployments
+       for interconnection. If enabled, <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b> from different OVN  deployments
+       exchanges  routes  between  each other through the global <b>O</b><b>V</b><b>N</b><b>_</b><b>I</b><b>C</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b>‐‐
+       <b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database. Only routers with ports  connected  to  interconnection
+       transit  switches participate in route advertisement. For each of these
+       routers, there are two types of routes to be advertised:
+
+       Firstly, the static routes configured in the router are advertised.
+
+       Secondly, the <b>n</b><b>e</b><b>t</b><b>w</b><b>o</b><b>r</b><b>k</b><b>s</b> configured in the logical router ports that  are
+       not on the transit switches are advertised. These are considered as di‐
+       rectly connected subnets on the router.
+
+       Link  local prefixes (IPv4 169.254.0.0/16 and IPv6 FE80::/10) are never
+       advertised.
+
+       The learned routes are added to the <b>s</b><b>t</b><b>a</b><b>t</b><b>i</b><b>c</b><b>_</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>s</b> column of  the  <b>L</b><b>o</b><b>g</b><b>i</b>‐‐
+       <b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b> table, with <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>i</b><b>c</b><b>-</b><b>l</b><b>e</b><b>a</b><b>r</b><b>n</b><b>e</b><b>d</b><b>-</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b> set to the uuid of
+       the row in <b>R</b><b>o</b><b>u</b><b>t</b><b>e</b> table of the <b>O</b><b>V</b><b>N</b><b>_</b><b>I</b><b>C</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>i</b><b>c</b><b>-</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>-</b><b>a</b><b>d</b><b>v</b>: optional string
+              A  boolean  value that enables route advertisement to the global
+              <b>O</b><b>V</b><b>N</b><b>_</b><b>I</b><b>C</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database. Default is <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>i</b><b>c</b><b>-</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>-</b><b>l</b><b>e</b><b>a</b><b>r</b><b>n</b>: optional string
+              A boolean value that enables  route  learning  from  the  global
+              <b>O</b><b>V</b><b>N</b><b>_</b><b>I</b><b>C</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database. Default is <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>i</b><b>c</b><b>-</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>-</b><b>a</b><b>d</b><b>v</b><b>-</b><b>d</b><b>e</b><b>f</b><b>a</b><b>u</b><b>l</b><b>t</b>: optional string
+              A  boolean  value  that enables advertising default route to the
+              global <b>O</b><b>V</b><b>N</b><b>_</b><b>I</b><b>C</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database. Default is <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>. This option
+              takes effect only when option <b>i</b><b>c</b><b>-</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>-</b><b>a</b><b>d</b><b>v</b> is <b>t</b><b>r</b><b>u</b><b>e</b>.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>i</b><b>c</b><b>-</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>-</b><b>l</b><b>e</b><b>a</b><b>r</b><b>n</b><b>-</b><b>d</b><b>e</b><b>f</b><b>a</b><b>u</b><b>l</b><b>t</b>: optional string
+              A boolean value that enables learning  default  route  from  the
+              global <b>O</b><b>V</b><b>N</b><b>_</b><b>I</b><b>C</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database. Default is <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>. This option
+              takes effect only when option <b>i</b><b>c</b><b>-</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>-</b><b>l</b><b>e</b><b>a</b><b>r</b><b>n</b> is <b>t</b><b>r</b><b>u</b><b>e</b>.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>i</b><b>c</b><b>-</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>-</b><b>b</b><b>l</b><b>a</b><b>c</b><b>k</b><b>l</b><b>i</b><b>s</b><b>t</b>: optional string
+              A  string  value  contains  a  list of CIDRs delimited by ",". A
+              route will not be advertised or learned if  the  route’s  prefix
+              belongs to any of the CIDRs listed.
+
+     <u>C</u><u>o</u><u>n</u><u>n</u><u>e</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       <b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>: set of <b>C</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>s
+              Database  clients  to  which  the  Open  vSwitch database server
+              should connect or on which it should listen, along with  options
+              for  how these connections should be configured. See the <b>C</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b>‐‐
+              <b>t</b><b>i</b><b>o</b><b>n</b> table for more information.
+
+       <b>s</b><b>s</b><b>l</b>: optional <b>S</b><b>S</b><b>L</b>
+              Global SSL configuration.
+
+     <u>S</u><u>e</u><u>c</u><u>u</u><u>r</u><u>i</u><u>t</u><u>y</u> <u>C</u><u>o</u><u>n</u><u>f</u><u>i</u><u>g</u><u>u</u><u>r</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       <b>i</b><b>p</b><b>s</b><b>e</b><b>c</b>: boolean
+              Tunnel encryption configuration. If this column  is  set  to  be
+              true, all OVN tunnels will be encrypted with IPsec.
+
+     <u>R</u><u>e</u><u>a</u><u>d</u><u>-</u><u>o</u><u>n</u><u>l</u><u>y</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>m</b><b>a</b><b>x</b><b>_</b><b>t</b><b>u</b><b>n</b><b>i</b><b>d</b>: optional string
+              The  maximum supported tunnel ID. Depends on types of encapsula‐
+              tion enabled in the cluster.
+
+<b>C</b><b>o</b><b>p</b><b>p</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       This table is used to define control plane protection  policies,  i.e.,
+       associate entries from table <b>M</b><b>e</b><b>t</b><b>e</b><b>r</b> to control protocol names.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>                          string (must be unique within table)
+       <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b> <b>:</b> <b>a</b><b>r</b><b>p</b>                  optional string
+       <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b> <b>:</b> <b>a</b><b>r</b><b>p</b><b>-</b><b>r</b><b>e</b><b>s</b><b>o</b><b>l</b><b>v</b><b>e</b>          optional string
+       <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b> <b>:</b> <b>d</b><b>h</b><b>c</b><b>p</b><b>v</b><b>4</b><b>-</b><b>o</b><b>p</b><b>t</b><b>s</b>          optional string
+       <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b> <b>:</b> <b>d</b><b>h</b><b>c</b><b>p</b><b>v</b><b>6</b><b>-</b><b>o</b><b>p</b><b>t</b><b>s</b>          optional string
+       <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b> <b>:</b> <b>d</b><b>n</b><b>s</b>                  optional string
+       <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b> <b>:</b> <b>e</b><b>v</b><b>e</b><b>n</b><b>t</b><b>-</b><b>e</b><b>l</b><b>b</b>            optional string
+       <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b> <b>:</b> <b>i</b><b>c</b><b>m</b><b>p</b><b>4</b><b>-</b><b>e</b><b>r</b><b>r</b><b>o</b><b>r</b>          optional string
+       <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b> <b>:</b> <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b><b>-</b><b>e</b><b>r</b><b>r</b><b>o</b><b>r</b>          optional string
+       <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b> <b>:</b> <b>i</b><b>g</b><b>m</b><b>p</b>                 optional string
+       <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b> <b>:</b> <b>n</b><b>d</b><b>-</b><b>n</b><b>a</b>                optional string
+       <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b> <b>:</b> <b>n</b><b>d</b><b>-</b><b>n</b><b>s</b>                optional string
+       <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b> <b>:</b> <b>n</b><b>d</b><b>-</b><b>n</b><b>s</b><b>-</b><b>r</b><b>e</b><b>s</b><b>o</b><b>l</b><b>v</b><b>e</b>        optional string
+       <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b> <b>:</b> <b>n</b><b>d</b><b>-</b><b>r</b><b>a</b><b>-</b><b>o</b><b>p</b><b>t</b><b>s</b>           optional string
+       <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b> <b>:</b> <b>t</b><b>c</b><b>p</b><b>-</b><b>r</b><b>e</b><b>s</b><b>e</b><b>t</b>            optional string
+       <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b> <b>:</b> <b>b</b><b>f</b><b>d</b>                  optional string
+       <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b> <b>:</b> <b>r</b><b>e</b><b>j</b><b>e</b><b>c</b><b>t</b>               optional string
+       <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b> <b>:</b> <b>s</b><b>v</b><b>c</b><b>-</b><b>m</b><b>o</b><b>n</b><b>i</b><b>t</b><b>o</b><b>r</b>          optional string
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                  map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>: string (must be unique within table)
+              CoPP name.
+
+       <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b> <b>:</b> <b>a</b><b>r</b><b>p</b>: optional string
+              Rate  limiting  meter  for  ARP packets (request/reply) used for
+              learning neighbors.
+
+       <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b> <b>:</b> <b>a</b><b>r</b><b>p</b><b>-</b><b>r</b><b>e</b><b>s</b><b>o</b><b>l</b><b>v</b><b>e</b>: optional string
+              Rate limiting meter for packets that require resolving the next-
+              hop (through ARP).
+
+       <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b> <b>:</b> <b>d</b><b>h</b><b>c</b><b>p</b><b>v</b><b>4</b><b>-</b><b>o</b><b>p</b><b>t</b><b>s</b>: optional string
+              Rate limiting meter for packets that require adding  DHCPv4  op‐
+              tions.
+
+       <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b> <b>:</b> <b>d</b><b>h</b><b>c</b><b>p</b><b>v</b><b>6</b><b>-</b><b>o</b><b>p</b><b>t</b><b>s</b>: optional string
+              Rate  limiting  meter for packets that require adding DHCPv6 op‐
+              tions.
+
+       <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b> <b>:</b> <b>d</b><b>n</b><b>s</b>: optional string
+              Rate limiting meter for  DNS  query  packets  that  need  to  be
+              replied to.
+
+       <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b> <b>:</b> <b>e</b><b>v</b><b>e</b><b>n</b><b>t</b><b>-</b><b>e</b><b>l</b><b>b</b>: optional string
+              Rate limiting meter for empty load balancer events.
+
+       <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b> <b>:</b> <b>i</b><b>c</b><b>m</b><b>p</b><b>4</b><b>-</b><b>e</b><b>r</b><b>r</b><b>o</b><b>r</b>: optional string
+              Rate  limiting  meter  for packets that require replying with an
+              ICMP error.
+
+       <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b> <b>:</b> <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b><b>-</b><b>e</b><b>r</b><b>r</b><b>o</b><b>r</b>: optional string
+              Rate limiting meter for packets that require  replying  with  an
+              ICMPv6 error.
+
+       <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b> <b>:</b> <b>i</b><b>g</b><b>m</b><b>p</b>: optional string
+              Rate limiting meter for IGMP packets.
+
+       <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b> <b>:</b> <b>n</b><b>d</b><b>-</b><b>n</b><b>a</b>: optional string
+              Rate  limiting  meter for ND neighbor advertisement packets used
+              for learning neighbors.
+
+       <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b> <b>:</b> <b>n</b><b>d</b><b>-</b><b>n</b><b>s</b>: optional string
+              Rate limiting meter for ND neighbor  solicitation  packets  used
+              for learning neighbors.
+
+       <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b> <b>:</b> <b>n</b><b>d</b><b>-</b><b>n</b><b>s</b><b>-</b><b>r</b><b>e</b><b>s</b><b>o</b><b>l</b><b>v</b><b>e</b>: optional string
+              Rate limiting meter for packets that require resolving the next-
+              hop (through ND).
+
+       <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b> <b>:</b> <b>n</b><b>d</b><b>-</b><b>r</b><b>a</b><b>-</b><b>o</b><b>p</b><b>t</b><b>s</b>: optional string
+              Rate  limiting  meter  for packets that require adding ND router
+              advertisement options.
+
+       <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b> <b>:</b> <b>t</b><b>c</b><b>p</b><b>-</b><b>r</b><b>e</b><b>s</b><b>e</b><b>t</b>: optional string
+              Rate limiting meter for packets that require replying  with  TCP
+              RST packet.
+
+       <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b> <b>:</b> <b>b</b><b>f</b><b>d</b>: optional string
+              Rate limiting meter for BFD packets.
+
+       <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b> <b>:</b> <b>r</b><b>e</b><b>j</b><b>e</b><b>c</b><b>t</b>: optional string
+              Rate limiting meter for packets that trigger a reject action
+
+       <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b> <b>:</b> <b>s</b><b>v</b><b>c</b><b>-</b><b>m</b><b>o</b><b>n</b><b>i</b><b>t</b><b>o</b><b>r</b>: optional string
+              Rate  limiting  meter  for  packets that are arriving to service
+              monitor MAC address.
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+              See <b>E</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> <b>I</b><b>D</b><b>s</b> at the beginning of this document.
+
+<b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Each row represents one L2 logical switch.
+
+       There are two kinds of logical switches, that is, ones that fully  vir‐
+       tualize  the  network  (overlay logical switches) and ones that provide
+       simple connectivity to physical networks  (bridged  logical  switches).
+       They  work  in the same way when providing connectivity between logical
+       ports on same chassis, but differently when connecting  remote  logical
+       ports.  Overlay  logical  switches connect remote logical ports by tun‐
+       nels, while bridged logical switches  provide  connectivity  to  remote
+       ports  by  bridging  the packets to directly connected physical L2 seg‐
+       ments with the help of <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b> ports. Each bridged logical switch  has
+       one  or  more  <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b>  ports, which have only one special address <b>u</b><b>n</b>‐‐
+       <b>k</b><b>n</b><b>o</b><b>w</b><b>n</b>.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>p</b><b>o</b><b>r</b><b>t</b><b>s</b>                         set of <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b>s
+       <b>l</b><b>o</b><b>a</b><b>d</b><b>_</b><b>b</b><b>a</b><b>l</b><b>a</b><b>n</b><b>c</b><b>e</b><b>r</b>                 set of weak reference to <b>L</b><b>o</b><b>a</b><b>d</b><b>_</b><b>B</b><b>a</b><b>l</b><b>a</b><b>n</b><b>c</b><b>e</b><b>r</b>s
+       <b>l</b><b>o</b><b>a</b><b>d</b><b>_</b><b>b</b><b>a</b><b>l</b><b>a</b><b>n</b><b>c</b><b>e</b><b>r</b><b>_</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b>           set of <b>L</b><b>o</b><b>a</b><b>d</b><b>_</b><b>B</b><b>a</b><b>l</b><b>a</b><b>n</b><b>c</b><b>e</b><b>r</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b>s
+       <b>a</b><b>c</b><b>l</b><b>s</b>                          set of <b>A</b><b>C</b><b>L</b>s
+       <b>q</b><b>o</b><b>s</b><b>_</b><b>r</b><b>u</b><b>l</b><b>e</b><b>s</b>                     set of <b>Q</b><b>o</b><b>S</b>es
+       <b>d</b><b>n</b><b>s</b><b>_</b><b>r</b><b>e</b><b>c</b><b>o</b><b>r</b><b>d</b><b>s</b>                   set of weak reference to <b>D</b><b>N</b><b>S</b>es
+       <b>f</b><b>o</b><b>r</b><b>w</b><b>a</b><b>r</b><b>d</b><b>i</b><b>n</b><b>g</b><b>_</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b><b>s</b>             set of <b>F</b><b>o</b><b>r</b><b>w</b><b>a</b><b>r</b><b>d</b><b>i</b><b>n</b><b>g</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b>s
+       <u>N</u><u>a</u><u>m</u><u>i</u><u>n</u><u>g</u><u>:</u>
+         <b>n</b><b>a</b><b>m</b><b>e</b>                        string
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b> <b>:</b> <b>n</b><b>e</b><b>u</b><b>t</b><b>r</b><b>o</b><b>n</b><b>:</b><b>n</b><b>e</b><b>t</b><b>w</b><b>o</b><b>r</b><b>k</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b>
+                                     optional string
+       <u>I</u><u>P</u> <u>A</u><u>d</u><u>d</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>A</u><u>s</u><u>s</u><u>i</u><u>g</u><u>n</u><u>m</u><u>e</u><u>n</u><u>t</u><u>:</u>
+         <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>s</b><b>u</b><b>b</b><b>n</b><b>e</b><b>t</b>       optional string
+         <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>e</b><b>x</b><b>c</b><b>l</b><b>u</b><b>d</b><b>e</b><b>_</b><b>i</b><b>p</b><b>s</b>  optional string
+         <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>i</b><b>p</b><b>v</b><b>6</b><b>_</b><b>p</b><b>r</b><b>e</b><b>f</b><b>i</b><b>x</b>  optional string
+         <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>m</b><b>a</b><b>c</b><b>_</b><b>o</b><b>n</b><b>l</b><b>y</b>     optional string, either <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+       <u>I</u><u>P</u> <u>M</u><u>u</u><u>l</u><u>t</u><u>i</u><u>c</u><u>a</u><u>s</u><u>t</u> <u>S</u><u>n</u><u>o</u><u>o</u><u>p</u><u>i</u><u>n</u><u>g</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+         <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>s</b><b>n</b><b>o</b><b>o</b><b>p</b>  optional string, either <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+         <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>q</b><b>u</b><b>e</b><b>r</b><b>i</b><b>e</b><b>r</b>
+                                     optional string, either <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+         <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>f</b><b>l</b><b>o</b><b>o</b><b>d</b><b>_</b><b>u</b><b>n</b><b>r</b><b>e</b><b>g</b><b>i</b><b>s</b><b>t</b><b>e</b><b>r</b><b>e</b><b>d</b>
+                                     optional string, either <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+         <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>t</b><b>a</b><b>b</b><b>l</b><b>e</b><b>_</b><b>s</b><b>i</b><b>z</b><b>e</b>
+                                     optional string, containing  an  integer,
+                                     in range 1 to 32,766
+         <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>i</b><b>d</b><b>l</b><b>e</b><b>_</b><b>t</b><b>i</b><b>m</b><b>e</b><b>o</b><b>u</b><b>t</b>
+                                     optional  string,  containing an integer,
+                                     in range 15 to 3,600
+         <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>q</b><b>u</b><b>e</b><b>r</b><b>y</b><b>_</b><b>i</b><b>n</b><b>t</b><b>e</b><b>r</b><b>v</b><b>a</b><b>l</b>
+                                     optional string, containing  an  integer,
+                                     in range 1 to 3,600
+         <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>q</b><b>u</b><b>e</b><b>r</b><b>y</b><b>_</b><b>m</b><b>a</b><b>x</b><b>_</b><b>r</b><b>e</b><b>s</b><b>p</b><b>o</b><b>n</b><b>s</b><b>e</b>
+                                     optional  string,  containing an integer,
+                                     in range 1 to 10
+         <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>e</b><b>t</b><b>h</b><b>_</b><b>s</b><b>r</b><b>c</b>
+                                     optional string
+         <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>i</b><b>p</b><b>4</b><b>_</b><b>s</b><b>r</b><b>c</b>
+                                     optional string
+         <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>i</b><b>p</b><b>6</b><b>_</b><b>s</b><b>r</b><b>c</b>
+                                     optional string
+       <u>I</u><u>n</u><u>t</u><u>e</u><u>r</u><u>c</u><u>o</u><u>n</u><u>n</u><u>e</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u><u>:</u>
+         <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>i</b><b>n</b><b>t</b><b>e</b><b>r</b><b>c</b><b>o</b><b>n</b><b>n</b><b>-</b><b>t</b><b>s</b>
+                                     optional string
+       <u>T</u><u>u</u><u>n</u><u>n</u><u>e</u><u>l</u> <u>K</u><u>e</u><u>y</u><u>:</u>
+         <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>r</b><b>e</b><b>q</b><b>u</b><b>e</b><b>s</b><b>t</b><b>e</b><b>d</b><b>-</b><b>t</b><b>n</b><b>l</b><b>-</b><b>k</b><b>e</b><b>y</b>
+                                     optional string, containing  an  integer,
+                                     in range 1 to 16,777,215
+       <b>c</b><b>o</b><b>p</b><b>p</b>                          optional weak reference to <b>C</b><b>o</b><b>p</b><b>p</b>
+       <u>O</u><u>t</u><u>h</u><u>e</u><u>r</u> <u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+         <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>v</b><b>l</b><b>a</b><b>n</b><b>-</b><b>p</b><b>a</b><b>s</b><b>s</b><b>t</b><b>h</b><b>r</b><b>u</b>
+                                     optional string, either <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+         <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>b</b><b>r</b><b>o</b><b>a</b><b>d</b><b>c</b><b>a</b><b>s</b><b>t</b><b>-</b><b>a</b><b>r</b><b>p</b><b>s</b><b>-</b><b>t</b><b>o</b><b>-</b><b>a</b><b>l</b><b>l</b><b>-</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>s</b>
+                                     optional string, either <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>p</b><b>o</b><b>r</b><b>t</b><b>s</b>: set of <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b>s
+              The logical ports connected to the logical switch.
+
+              It is an error for multiple logical switches to include the same
+              logical port.
+
+       <b>l</b><b>o</b><b>a</b><b>d</b><b>_</b><b>b</b><b>a</b><b>l</b><b>a</b><b>n</b><b>c</b><b>e</b><b>r</b>: set of weak reference to <b>L</b><b>o</b><b>a</b><b>d</b><b>_</b><b>B</b><b>a</b><b>l</b><b>a</b><b>n</b><b>c</b><b>e</b><b>r</b>s
+              Set of load balancers associated to this logical switch.
+
+       <b>l</b><b>o</b><b>a</b><b>d</b><b>_</b><b>b</b><b>a</b><b>l</b><b>a</b><b>n</b><b>c</b><b>e</b><b>r</b><b>_</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b>: set of <b>L</b><b>o</b><b>a</b><b>d</b><b>_</b><b>B</b><b>a</b><b>l</b><b>a</b><b>n</b><b>c</b><b>e</b><b>r</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b>s
+              Set of load balancers groups associated to this logical switch.
+
+       <b>a</b><b>c</b><b>l</b><b>s</b>: set of <b>A</b><b>C</b><b>L</b>s
+              Access  control  rules  that apply to packets within the logical
+              switch.
+
+       <b>q</b><b>o</b><b>s</b><b>_</b><b>r</b><b>u</b><b>l</b><b>e</b><b>s</b>: set of <b>Q</b><b>o</b><b>S</b>es
+              QoS marking and metering rules that apply to packets within  the
+              logical switch.
+
+       <b>d</b><b>n</b><b>s</b><b>_</b><b>r</b><b>e</b><b>c</b><b>o</b><b>r</b><b>d</b><b>s</b>: set of weak reference to <b>D</b><b>N</b><b>S</b>es
+              This column defines the DNS records to be used for resolving in‐
+              ternal  DNS  queries within the logical switch by the native DNS
+              resolver. Please see the <b>D</b><b>N</b><b>S</b> table.
+
+       <b>f</b><b>o</b><b>r</b><b>w</b><b>a</b><b>r</b><b>d</b><b>i</b><b>n</b><b>g</b><b>_</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b><b>s</b>: set of <b>F</b><b>o</b><b>r</b><b>w</b><b>a</b><b>r</b><b>d</b><b>i</b><b>n</b><b>g</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b>s
+              Groups a set of logical port endpoints for traffic going out  of
+              the logical switch.
+
+     <u>N</u><u>a</u><u>m</u><u>i</u><u>n</u><u>g</u><u>:</u>
+
+       These columns provide names for the logical switch. From OVN’s perspec‐
+       tive, these names have no special meaning or purpose other than to pro‐
+       vide  convenience  for human interaction with the database. There is no
+       requirement for the name to be unique. (For a unique identifier  for  a
+       logical switch, use its row UUID.)
+
+       (Originally, <b>n</b><b>a</b><b>m</b><b>e</b> was intended to serve the purpose of a human-friendly
+       name,  but the Neutron integration used it to uniquely identify its own
+       switch object, in the format <b>n</b><b>e</b><b>u</b><b>t</b><b>r</b><b>o</b><b>n</b><b>-</b><u>u</u><u>u</u><u>i</u><u>d</u>. Later  on,  Neutron  started
+       propagating  the friendly name of a switch as <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>n</b><b>e</b><b>u</b><b>t</b><b>r</b><b>o</b><b>n</b><b>:</b><b>n</b><b>e</b><b>t</b>‐‐
+       <b>w</b><b>o</b><b>r</b><b>k</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b>. Perhaps this can be cleaned up someday.)
+
+       <b>n</b><b>a</b><b>m</b><b>e</b>: string
+              A name for the logical switch.
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b> <b>:</b> <b>n</b><b>e</b><b>u</b><b>t</b><b>r</b><b>o</b><b>n</b><b>:</b><b>n</b><b>e</b><b>t</b><b>w</b><b>o</b><b>r</b><b>k</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b>: optional string
+              Another name for the logical switch.
+
+     <u>I</u><u>P</u> <u>A</u><u>d</u><u>d</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>A</u><u>s</u><u>s</u><u>i</u><u>g</u><u>n</u><u>m</u><u>e</u><u>n</u><u>t</u><u>:</u>
+
+       These options control automatic IP address management (IPAM) for  ports
+       attached to the logical switch. To enable IPAM for IPv4, set <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b>‐‐
+       <b>f</b><b>i</b><b>g</b><b>:</b><b>s</b><b>u</b><b>b</b><b>n</b><b>e</b><b>t</b>  and optionally <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>:</b><b>e</b><b>x</b><b>c</b><b>l</b><b>u</b><b>d</b><b>e</b><b>_</b><b>i</b><b>p</b><b>s</b>. To enable IPAM for
+       IPv6, set <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>:</b><b>i</b><b>p</b><b>v</b><b>6</b><b>_</b><b>p</b><b>r</b><b>e</b><b>f</b><b>i</b><b>x</b>. IPv4 and IPv6 may  be  enabled  to‐
+       gether or separately.
+
+       To  request  dynamic  address assignment for a particular port, use the
+       <b>d</b><b>y</b><b>n</b><b>a</b><b>m</b><b>i</b><b>c</b>  keyword  in  the  <b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>e</b><b>s</b>  column  of   the   port’s   <b>L</b><b>o</b><b>g</b><b>i</b>‐‐
+       <b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b> row. This requests both an IPv4 and an IPv6 address, if
+       IPAM for IPv4 and IPv6 are both enabled.
+
+       <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>s</b><b>u</b><b>b</b><b>n</b><b>e</b><b>t</b>: optional string
+              Set  this  to  an  IPv4  subnet,  e.g. <b>1</b><b>9</b><b>2</b><b>.</b><b>1</b><b>6</b><b>8</b><b>.</b><b>0</b><b>.</b><b>0</b><b>/</b><b>2</b><b>4</b>, to enable
+              <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> to automatically assign IP addresses within that sub‐
+              net.
+
+       <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>e</b><b>x</b><b>c</b><b>l</b><b>u</b><b>d</b><b>e</b><b>_</b><b>i</b><b>p</b><b>s</b>: optional string
+              To exclude some addresses from automatic IP address  management,
+              set  this to a list of the IPv4 addresses or <b>.</b><b>.</b>-delimited ranges
+              to exclude. The addresses or ranges should be a subset of  those
+              in <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>:</b><b>s</b><b>u</b><b>b</b><b>n</b><b>e</b><b>t</b>.
+
+              Whether  listed or not, <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> will never allocate the first
+              or  last  address  in  a  subnet,   such   as   192.168.0.0   or
+              192.168.0.255 in 192.168.0.0/24.
+
+              Examples:
+
+              •      <b>1</b><b>9</b><b>2</b><b>.</b><b>1</b><b>6</b><b>8</b><b>.</b><b>0</b><b>.</b><b>2</b> <b>1</b><b>9</b><b>2</b><b>.</b><b>1</b><b>6</b><b>8</b><b>.</b><b>0</b><b>.</b><b>1</b><b>0</b>
+
+              •      <b>1</b><b>9</b><b>2</b><b>.</b><b>1</b><b>6</b><b>8</b><b>.</b><b>0</b><b>.</b><b>4</b>                    <b>1</b><b>9</b><b>2</b><b>.</b><b>1</b><b>6</b><b>8</b><b>.</b><b>0</b><b>.</b><b>3</b><b>0</b><b>.</b><b>.</b><b>1</b><b>9</b><b>2</b><b>.</b><b>1</b><b>6</b><b>8</b><b>.</b><b>0</b><b>.</b><b>6</b><b>0</b>
+                     <b>1</b><b>9</b><b>2</b><b>.</b><b>1</b><b>6</b><b>8</b><b>.</b><b>0</b><b>.</b><b>1</b><b>1</b><b>0</b><b>.</b><b>.</b><b>1</b><b>9</b><b>2</b><b>.</b><b>1</b><b>6</b><b>8</b><b>.</b><b>0</b><b>.</b><b>1</b><b>2</b><b>0</b>
+
+              •      <b>1</b><b>9</b><b>2</b><b>.</b><b>1</b><b>6</b><b>8</b><b>.</b><b>0</b><b>.</b><b>1</b><b>1</b><b>0</b><b>.</b><b>.</b><b>1</b><b>9</b><b>2</b><b>.</b><b>1</b><b>6</b><b>8</b><b>.</b><b>0</b><b>.</b><b>1</b><b>2</b><b>0</b>   <b>1</b><b>9</b><b>2</b><b>.</b><b>1</b><b>6</b><b>8</b><b>.</b><b>0</b><b>.</b><b>2</b><b>5</b><b>.</b><b>.</b><b>1</b><b>9</b><b>2</b><b>.</b><b>1</b><b>6</b><b>8</b><b>.</b><b>0</b><b>.</b><b>3</b><b>0</b>
+                     <b>1</b><b>9</b><b>2</b><b>.</b><b>1</b><b>6</b><b>8</b><b>.</b><b>0</b><b>.</b><b>1</b><b>4</b><b>4</b>
+
+       <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>i</b><b>p</b><b>v</b><b>6</b><b>_</b><b>p</b><b>r</b><b>e</b><b>f</b><b>i</b><b>x</b>: optional string
+              Set this to an IPv6 prefix to enable <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> to automatically
+              assign  IPv6  addresses using this prefix. The assigned IPv6 ad‐
+              dress will be generated using the IPv6 prefix and  the  MAC  ad‐
+              dress  (converted  to an IEEE EUI64 identifier) of the port. The
+              IPv6 prefix defined here should be a valid IPv6  address  ending
+              with <b>:</b><b>:</b>.
+
+              Examples:
+
+              •      <b>a</b><b>e</b><b>f</b><b>0</b><b>:</b><b>:</b>
+
+              •      <b>b</b><b>e</b><b>f</b><b>0</b><b>:</b><b>1</b><b>2</b><b>3</b><b>4</b><b>:</b><b>a</b><b>8</b><b>9</b><b>0</b><b>:</b><b>5</b><b>6</b><b>7</b><b>8</b><b>:</b><b>:</b>
+
+              •      <b>8</b><b>2</b><b>3</b><b>0</b><b>:</b><b>5</b><b>6</b><b>7</b><b>8</b><b>:</b><b>:</b>
+
+       <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>m</b><b>a</b><b>c</b><b>_</b><b>o</b><b>n</b><b>l</b><b>y</b>: optional string, either <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+              Value  used to request to assign L2 address only if neither sub‐
+              net nor ipv6_prefix are specified
+
+     <u>I</u><u>P</u> <u>M</u><u>u</u><u>l</u><u>t</u><u>i</u><u>c</u><u>a</u><u>s</u><u>t</u> <u>S</u><u>n</u><u>o</u><u>o</u><u>p</u><u>i</u><u>n</u><u>g</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       These options control IP Multicast Snooping configuration of the  logi‐
+       cal   switch.   To   enable   IP   Multicast  Snooping  set  <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b>‐‐
+       <b>f</b><b>i</b><b>g</b><b>:</b><b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>s</b><b>n</b><b>o</b><b>o</b><b>p</b> to true. To enable IP Multicast Querier set  <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b>‐‐
+       <b>f</b><b>i</b><b>g</b><b>:</b><b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>q</b><b>u</b><b>e</b><b>r</b><b>i</b><b>e</b><b>r</b>   to   true.  If  IP  Multicast  Querier  is  enabled
+       <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>:</b><b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>e</b><b>t</b><b>h</b><b>_</b><b>s</b><b>r</b><b>c</b> and <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>:</b><b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>i</b><b>p</b><b>4</b><b>_</b><b>s</b><b>r</b><b>c</b> must be set.
+
+       <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>s</b><b>n</b><b>o</b><b>o</b><b>p</b>: optional string, either <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+              Enables/disables IP Multicast Snooping on  the  logical  switch.
+              Default: <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>.
+
+       <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>q</b><b>u</b><b>e</b><b>r</b><b>i</b><b>e</b><b>r</b>: optional string, either <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+              Enables/disables  IP  Multicast  Querier  on the logical switch.
+              Only applicable if <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>:</b><b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>s</b><b>n</b><b>o</b><b>o</b><b>p</b> is enabled. Default:
+              <b>t</b><b>r</b><b>u</b><b>e</b>.
+
+       <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>f</b><b>l</b><b>o</b><b>o</b><b>d</b><b>_</b><b>u</b><b>n</b><b>r</b><b>e</b><b>g</b><b>i</b><b>s</b><b>t</b><b>e</b><b>r</b><b>e</b><b>d</b>: optional string, either <b>t</b><b>r</b><b>u</b><b>e</b>
+       or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+              Determines whether  unregistered  multicast  traffic  should  be
+              flooded  or  not. Only applicable if <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>:</b><b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>s</b><b>n</b><b>o</b><b>o</b><b>p</b> is
+              enabled. Default: <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>.
+
+       <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>t</b><b>a</b><b>b</b><b>l</b><b>e</b><b>_</b><b>s</b><b>i</b><b>z</b><b>e</b>: optional string, containing an inte‐
+       ger, in range 1 to 32,766
+              Number of multicast groups to be stored. Default: 2048.
+
+       <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>i</b><b>d</b><b>l</b><b>e</b><b>_</b><b>t</b><b>i</b><b>m</b><b>e</b><b>o</b><b>u</b><b>t</b>: optional string, containing an inte‐
+       ger, in range 15 to 3,600
+              Configures the IP Multicast Snooping group idle timeout (in sec‐
+              onds). Default: 300 seconds.
+
+       <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>q</b><b>u</b><b>e</b><b>r</b><b>y</b><b>_</b><b>i</b><b>n</b><b>t</b><b>e</b><b>r</b><b>v</b><b>a</b><b>l</b>: optional string, containing an in‐
+       teger, in range 1 to 3,600
+              Configures the IP Multicast Querier interval between queries (in
+              seconds). Default: <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>:</b><b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>i</b><b>d</b><b>l</b><b>e</b><b>_</b><b>t</b><b>i</b><b>m</b><b>e</b><b>o</b><b>u</b><b>t</b> / 2.
+
+       <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>q</b><b>u</b><b>e</b><b>r</b><b>y</b><b>_</b><b>m</b><b>a</b><b>x</b><b>_</b><b>r</b><b>e</b><b>s</b><b>p</b><b>o</b><b>n</b><b>s</b><b>e</b>: optional string, containing an
+       integer, in range 1 to 10
+              Configures the value of the "max-response" field in  the  multi‐
+              cast  queries  originated by the logical switch. Default: 1 sec‐
+              ond.
+
+       <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>e</b><b>t</b><b>h</b><b>_</b><b>s</b><b>r</b><b>c</b>: optional string
+              Configures the source Ethernet address for queries originated by
+              the logical switch.
+
+       <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>i</b><b>p</b><b>4</b><b>_</b><b>s</b><b>r</b><b>c</b>: optional string
+              Configures the source IPv4 address for queries originated by the
+              logical switch.
+
+       <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>i</b><b>p</b><b>6</b><b>_</b><b>s</b><b>r</b><b>c</b>: optional string
+              Configures the source IPv6 address for queries originated by the
+              logical switch.
+
+     <u>I</u><u>n</u><u>t</u><u>e</u><u>r</u><u>c</u><u>o</u><u>n</u><u>n</u><u>e</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u><u>:</u>
+
+       <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>i</b><b>n</b><b>t</b><b>e</b><b>r</b><b>c</b><b>o</b><b>n</b><b>n</b><b>-</b><b>t</b><b>s</b>: optional string
+              The <b>n</b><b>a</b><b>m</b><b>e</b> of corresponding transit  switch  in  <b>O</b><b>V</b><b>N</b><b>_</b><b>I</b><b>C</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b>
+              database.  This kind of logical switch is created and controlled
+              by <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b>.
+
+     <u>T</u><u>u</u><u>n</u><u>n</u><u>e</u><u>l</u> <u>K</u><u>e</u><u>y</u><u>:</u>
+
+       <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>r</b><b>e</b><b>q</b><b>u</b><b>e</b><b>s</b><b>t</b><b>e</b><b>d</b><b>-</b><b>t</b><b>n</b><b>l</b><b>-</b><b>k</b><b>e</b><b>y</b>: optional string, containing an inte‐
+       ger, in range 1 to 16,777,215
+              Configures the datapath tunnel key for the logical switch.  Usu‐
+              ally this is not needed because <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> will assign an unique
+              key  for  each datapath by itself. However, if it is configured,
+              <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> honors the configured value. The typical use case  is
+              for  interconnection:  the tunnel keys for transit switches need
+              to be unique globally, so they  are  maintained  in  the  global
+              <b>O</b><b>V</b><b>N</b><b>_</b><b>I</b><b>C</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b>  database,  and  <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b> simply syncs the value
+              from <b>O</b><b>V</b><b>N</b><b>_</b><b>I</b><b>C</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> through this config.
+
+       <b>c</b><b>o</b><b>p</b><b>p</b>: optional weak reference to <b>C</b><b>o</b><b>p</b><b>p</b>
+              The control plane protection policy from table <b>C</b><b>o</b><b>p</b><b>p</b> used for me‐
+              tering packets sent to <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> from ports of this logical
+              switch.
+
+     <u>O</u><u>t</u><u>h</u><u>e</u><u>r</u> <u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>v</b><b>l</b><b>a</b><b>n</b><b>-</b><b>p</b><b>a</b><b>s</b><b>s</b><b>t</b><b>h</b><b>r</b><b>u</b>: optional string, either <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+              Determines whether VLAN tagged incoming traffic  should  be  al‐
+              lowed.  Note  that  this may have security implications when en‐
+              abled for a logical switch with a tag=0 localnet  port.  If  not
+              properly isolated from other localnet ports, fabric traffic that
+              belongs  to  other  tagged networks may be passed through such a
+              port.
+
+       <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>b</b><b>r</b><b>o</b><b>a</b><b>d</b><b>c</b><b>a</b><b>s</b><b>t</b><b>-</b><b>a</b><b>r</b><b>p</b><b>s</b><b>-</b><b>t</b><b>o</b><b>-</b><b>a</b><b>l</b><b>l</b><b>-</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>s</b>: optional string, either
+       <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+              Determines whether arp requests and ipv6 neighbor  solicitations
+              should be sent to all routers and other switchports (default) or
+              if  it  should  only be sent to switchports where the ip/mac ad‐
+              dress is unknown. Setting this to false can significantly reduce
+              the load if the logical switch can receive arp requests for  ips
+              it does not know about. However setting this to false also means
+              that  garps  are no longer forwarded to all routers and therefor
+              the mac bindings of the routers are no longer updated.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+              See <b>E</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> <b>I</b><b>D</b><b>s</b> at the beginning of this document.
+
+<b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       A port within an L2 logical switch.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <u>C</u><u>o</u><u>r</u><u>e</u> <u>F</u><u>e</u><u>a</u><u>t</u><u>u</u><u>r</u><u>e</u><u>s</u><u>:</u>
+         <b>n</b><b>a</b><b>m</b><b>e</b>                        string (must be unique within table)
+         <b>t</b><b>y</b><b>p</b><b>e</b>                        string
+       <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>                     map of string-string pairs
+         <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u> <u>f</u><u>o</u><u>r</u> <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u> <u>p</u><u>o</u><u>r</u><u>t</u><u>s</u><u>:</u>
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>-</b><b>p</b><b>o</b><b>r</b><b>t</b>    optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>n</b><b>a</b><b>t</b><b>-</b><b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>e</b><b>s</b>  optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>e</b><b>x</b><b>c</b><b>l</b><b>u</b><b>d</b><b>e</b><b>-</b><b>l</b><b>b</b><b>-</b><b>v</b><b>i</b><b>p</b><b>s</b><b>-</b><b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>g</b><b>a</b><b>r</b><b>p</b>
+                                     optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>a</b><b>r</b><b>p</b><b>_</b><b>p</b><b>r</b><b>o</b><b>x</b><b>y</b>      optional string
+         <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u> <u>f</u><u>o</u><u>r</u> <u>l</u><u>o</u><u>c</u><u>a</u><u>l</u><u>n</u><u>e</u><u>t</u> <u>p</u><u>o</u><u>r</u><u>t</u><u>s</u><u>:</u>
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>n</b><b>e</b><b>t</b><b>w</b><b>o</b><b>r</b><b>k</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b>   optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>e</b><b>t</b><b>h</b><b>t</b><b>y</b><b>p</b><b>e</b>        optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b><b>_</b><b>l</b><b>e</b><b>a</b><b>r</b><b>n</b><b>_</b><b>f</b><b>d</b><b>b</b>
+                                     optional string, either <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+         <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u> <u>f</u><u>o</u><u>r</u> <u>l</u><u>2</u><u>g</u><u>a</u><u>t</u><u>e</u><u>w</u><u>a</u><u>y</u> <u>p</u><u>o</u><u>r</u><u>t</u><u>s</u><u>:</u>
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>n</b><b>e</b><b>t</b><b>w</b><b>o</b><b>r</b><b>k</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b>   optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>l</b><b>2</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>
+                                     optional string
+         <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u> <u>f</u><u>o</u><u>r</u> <u>v</u><u>t</u><u>e</u><u>p</u> <u>p</u><u>o</u><u>r</u><u>t</u><u>s</u><u>:</u>
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>v</b><b>t</b><b>e</b><b>p</b><b>-</b><b>p</b><b>h</b><b>y</b><b>s</b><b>i</b><b>c</b><b>a</b><b>l</b><b>-</b><b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b>
+                                     optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>v</b><b>t</b><b>e</b><b>p</b><b>-</b><b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>-</b><b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b>
+                                     optional string
+         <u>V</u><u>M</u><u>I</u> <u>(</u><u>o</u><u>r</u> <u>V</u><u>I</u><u>F</u><u>)</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>r</b><b>e</b><b>q</b><b>u</b><b>e</b><b>s</b><b>t</b><b>e</b><b>d</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>
+                                     optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>a</b><b>c</b><b>t</b><b>i</b><b>v</b><b>a</b><b>t</b><b>i</b><b>o</b><b>n</b><b>-</b><b>s</b><b>t</b><b>r</b><b>a</b><b>t</b><b>e</b><b>g</b><b>y</b>
+                                     optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>i</b><b>f</b><b>a</b><b>c</b><b>e</b><b>-</b><b>i</b><b>d</b><b>-</b><b>v</b><b>e</b><b>r</b>   optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>q</b><b>o</b><b>s</b><b>_</b><b>m</b><b>i</b><b>n</b><b>_</b><b>r</b><b>a</b><b>t</b><b>e</b>   optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>q</b><b>o</b><b>s</b><b>_</b><b>m</b><b>a</b><b>x</b><b>_</b><b>r</b><b>a</b><b>t</b><b>e</b>   optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>q</b><b>o</b><b>s</b><b>_</b><b>b</b><b>u</b><b>r</b><b>s</b><b>t</b>      optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>h</b><b>o</b><b>s</b><b>t</b><b>n</b><b>a</b><b>m</b><b>e</b>       optional string
+            <u>V</u><u>I</u><u>F</u> <u>P</u><u>l</u><u>u</u><u>g</u><u>g</u><u>i</u><u>n</u><u>g</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+              <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>v</b><b>i</b><b>f</b><b>-</b><b>p</b><b>l</b><b>u</b><b>g</b><b>-</b><b>t</b><b>y</b><b>p</b><b>e</b>
+                                     optional string
+              <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>v</b><b>i</b><b>f</b><b>-</b><b>p</b><b>l</b><b>u</b><b>g</b><b>-</b><b>m</b><b>t</b><b>u</b><b>-</b><b>r</b><b>e</b><b>q</b><b>u</b><b>e</b><b>s</b><b>t</b>
+                                     optional string
+         <u>V</u><u>i</u><u>r</u><u>t</u><u>u</u><u>a</u><u>l</u> <u>p</u><u>o</u><u>r</u><u>t</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>v</b><b>i</b><b>r</b><b>t</b><b>u</b><b>a</b><b>l</b><b>-</b><b>i</b><b>p</b>     optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>v</b><b>i</b><b>r</b><b>t</b><b>u</b><b>a</b><b>l</b><b>-</b><b>p</b><b>a</b><b>r</b><b>e</b><b>n</b><b>t</b><b>s</b>
+                                     optional string
+         <u>I</u><u>P</u> <u>M</u><u>u</u><u>l</u><u>t</u><u>i</u><u>c</u><u>a</u><u>s</u><u>t</u> <u>S</u><u>n</u><u>o</u><u>o</u><u>p</u><u>i</u><u>n</u><u>g</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>f</b><b>l</b><b>o</b><b>o</b><b>d</b>    optional string, either <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>f</b><b>l</b><b>o</b><b>o</b><b>d</b><b>_</b><b>r</b><b>e</b><b>p</b><b>o</b><b>r</b><b>t</b><b>s</b>
+                                     optional string, either <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+       <u>C</u><u>o</u><u>n</u><u>t</u><u>a</u><u>i</u><u>n</u><u>e</u><u>r</u><u>s</u><u>:</u>
+         <b>p</b><b>a</b><b>r</b><b>e</b><b>n</b><b>t</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b>                 optional string
+         <b>t</b><b>a</b><b>g</b><b>_</b><b>r</b><b>e</b><b>q</b><b>u</b><b>e</b><b>s</b><b>t</b>                 optional integer, in range 0 to 4,095
+         <b>t</b><b>a</b><b>g</b>                         optional integer, in range 1 to 4,095
+       <u>P</u><u>o</u><u>r</u><u>t</u> <u>S</u><u>t</u><u>a</u><u>t</u><u>e</u><u>:</u>
+         <b>u</b><b>p</b>                          optional boolean
+         <b>e</b><b>n</b><b>a</b><b>b</b><b>l</b><b>e</b><b>d</b>                     optional boolean
+       <u>A</u><u>d</u><u>d</u><u>r</u><u>e</u><u>s</u><u>s</u><u>i</u><u>n</u><u>g</u><u>:</u>
+         <b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>e</b><b>s</b>                   set of strings
+         <b>d</b><b>y</b><b>n</b><b>a</b><b>m</b><b>i</b><b>c</b><b>_</b><b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>e</b><b>s</b>           optional string
+         <b>p</b><b>o</b><b>r</b><b>t</b><b>_</b><b>s</b><b>e</b><b>c</b><b>u</b><b>r</b><b>i</b><b>t</b><b>y</b>               set of strings
+       <u>D</u><u>H</u><u>C</u><u>P</u><u>:</u>
+         <b>d</b><b>h</b><b>c</b><b>p</b><b>v</b><b>4</b><b>_</b><b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>              optional weak reference to <b>D</b><b>H</b><b>C</b><b>P</b><b>_</b><b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+         <b>d</b><b>h</b><b>c</b><b>p</b><b>v</b><b>6</b><b>_</b><b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>              optional weak reference to <b>D</b><b>H</b><b>C</b><b>P</b><b>_</b><b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+       <b>m</b><b>i</b><b>r</b><b>r</b><b>o</b><b>r</b><b>_</b><b>r</b><b>u</b><b>l</b><b>e</b><b>s</b>                  set of weak reference to <b>M</b><b>i</b><b>r</b><b>r</b><b>o</b><b>r</b>s
+       <b>h</b><b>a</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b>              optional <b>H</b><b>A</b><b>_</b><b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b>
+       <u>N</u><u>a</u><u>m</u><u>i</u><u>n</u><u>g</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b> <b>:</b> <b>n</b><b>e</b><b>u</b><b>t</b><b>r</b><b>o</b><b>n</b><b>:</b><b>p</b><b>o</b><b>r</b><b>t</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b>
+                                     optional string
+       <u>T</u><u>u</u><u>n</u><u>n</u><u>e</u><u>l</u> <u>K</u><u>e</u><u>y</u><u>:</u>
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>r</b><b>e</b><b>q</b><b>u</b><b>e</b><b>s</b><b>t</b><b>e</b><b>d</b><b>-</b><b>t</b><b>n</b><b>l</b><b>-</b><b>k</b><b>e</b><b>y</b>
+                                     optional string, containing  an  integer,
+                                     in range 1 to 32,767
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+     <u>C</u><u>o</u><u>r</u><u>e</u> <u>F</u><u>e</u><u>a</u><u>t</u><u>u</u><u>r</u><u>e</u><u>s</u><u>:</u>
+
+       <b>n</b><b>a</b><b>m</b><b>e</b>: string (must be unique within table)
+              The logical port name.
+
+              For  entities (VMs or containers) that are spawned in the hyper‐
+              visor, the name used here must match those used  in  the  <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b>‐‐
+              <b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>i</b><b>f</b><b>a</b><b>c</b><b>e</b><b>-</b><b>i</b><b>d</b> in the <b>O</b><b>p</b><b>e</b><b>n</b><b>_</b><b>v</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b> database’s <b>I</b><b>n</b><b>t</b><b>e</b><b>r</b><b>f</b><b>a</b><b>c</b><b>e</b> table,
+              because hypervisors use <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>i</b><b>f</b><b>a</b><b>c</b><b>e</b><b>-</b><b>i</b><b>d</b> as a lookup key to
+              identify the network interface of that entity.
+
+              For containers that share a VIF within a VM, the name can be any
+              unique identifier. See <b>C</b><b>o</b><b>n</b><b>t</b><b>a</b><b>i</b><b>n</b><b>e</b><b>r</b><b>s</b>, below, for more information.
+
+              A  logical  switch  port may not have the same name as a logical
+              router port, but the database schema cannot enforce this.
+
+       <b>t</b><b>y</b><b>p</b><b>e</b>: string
+              Specify a type for this logical port. Logical ports can be  used
+              to model other types of connectivity into an OVN logical switch.
+              The following types are defined:
+
+              (empty string)
+                     A VM (or VIF) interface.
+
+              <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b> A  connection  to  a  logical  router.  The  value of <b>o</b><b>p</b>‐‐
+                     <b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>-</b><b>p</b><b>o</b><b>r</b><b>t</b>  specifies  the  <b>n</b><b>a</b><b>m</b><b>e</b>  of   the   <b>L</b><b>o</b><b>g</b><b>i</b>‐‐
+                     <b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b> to which this logical switch port is con‐
+                     nected.
+
+              <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b>
+                     A   connection  to  a  locally  accessible  network  from
+                     <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> instances that have a corresponding bridge
+                     mapping. A logical  switch  can  have  multiple  <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b>
+                     ports attached. This type is used to model direct connec‐
+                     tivity  to  existing networks. In this case, each chassis
+                     should have a mapping for one of  the  physical  networks
+                     only.  Note:  nothing  said  above implies that a chassis
+                     cannot be plugged to multiple physical networks  as  long
+                     as they belong to different switches.
+
+              <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b>
+                     A  connection  to  a local VIF. Traffic that arrives on a
+                     <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b> is never forwarded over  a  tunnel  to  another
+                     chassis.  These  ports  are  present on every chassis and
+                     have the same address in all of them.  This  is  used  to
+                     model  connectivity  to  local services that run on every
+                     hypervisor.
+
+              <b>l</b><b>2</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b>
+                     A connection to a physical network.
+
+              <b>v</b><b>t</b><b>e</b><b>p</b>   A port to a logical switch on a VTEP gateway.
+
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b>
+                     Represents a logical port which is external and not  hav‐
+                     ing an OVS port in the integration bridge. <b>O</b><b>V</b><b>N</b> will never
+                     receive any traffic from this port or send any traffic to
+                     this   port.   <b>O</b><b>V</b><b>N</b>   can  support  native  services  like
+                     DHCPv4/DHCPv6/DNS for this port. If  <b>h</b><b>a</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b>  is
+                     defined,  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> running in the master chassis of
+                     the HA chassis group will bind this port to provide these
+                     native services. It is expected that this port belong  to
+                     a bridged logical switch (with a <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b> port).
+
+                     It  is  recommended  to use the same HA chassis group for
+                     all the external ports of a  logical  switch.  Otherwise,
+                     the physical switch might see MAC flap issue when differ‐
+                     ent chassis provide the native services. For example when
+                     supporting native DHCPv4 service, DHCPv4 server mac (con‐
+                     figured  in  <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b><b>_</b><b>m</b><b>a</b><b>c</b>  column in table <b>D</b><b>H</b><b>C</b><b>P</b><b>_</b><b>O</b><b>p</b>‐‐
+                     <b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>) originating from different  ports  can  cause  MAC
+                     flap  issue. The MAC of the logical router IP(s) can also
+                     flap if the same HA chassis group is not set for all  the
+                     external ports of a logical switch.
+
+                     Below  are some of the use cases where <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> ports can
+                     be used.
+
+                     •      VMs connected to SR-IOV nics - Traffic from  these
+                            VMs  by passes the kernel stack and local <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b>‐‐
+                            <b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> do not bind these ports and  cannot  serve
+                            the native services.
+
+                     •      When CMS supports provisioning baremetal servers.
+
+              <b>v</b><b>i</b><b>r</b><b>t</b><b>u</b><b>a</b><b>l</b>
+                     Represents a logical port which does not have an OVS port
+                     in the integration bridge and has a virtual ip configured
+                     in  the  <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>v</b><b>i</b><b>r</b><b>t</b><b>u</b><b>a</b><b>l</b><b>-</b><b>i</b><b>p</b>  column.  This virtual ip can
+                     move around between the logical ports configured  in  the
+                     <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>v</b><b>i</b><b>r</b><b>t</b><b>u</b><b>a</b><b>l</b><b>-</b><b>p</b><b>a</b><b>r</b><b>e</b><b>n</b><b>t</b><b>s</b> column.
+
+                     One of the use case where <b>v</b><b>i</b><b>r</b><b>t</b><b>u</b><b>a</b><b>l</b> ports can be used is.
+
+                     •      The  <b>v</b><b>i</b><b>r</b><b>t</b><b>u</b><b>a</b><b>l</b> <b>i</b><b>p</b> represents a load balancer vip and
+                            the <b>v</b><b>i</b><b>r</b><b>t</b><b>u</b><b>a</b><b>l</b> <b>p</b><b>a</b><b>r</b><b>e</b><b>n</b><b>t</b><b>s</b> provide load balancer  service
+                            in an active-standby setup with the active virtual
+                            parent owning the <b>v</b><b>i</b><b>r</b><b>t</b><b>u</b><b>a</b><b>l</b> <b>i</b><b>p</b>.
+
+              <b>r</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b> A remote port is to model a port that resides remotely on
+                     another OVN, which is on the other side of a transit log‐
+                     ical  switch  for OVN interconnection. This type of ports
+                     are created by <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b> instead of by CMS.  Any  change  to
+                     the port will be automatically overwritten by <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b>.
+
+     <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>: map of string-string pairs
+              This  column provides key/value settings specific to the logical
+              port <b>t</b><b>y</b><b>p</b><b>e</b>. The type-specific options are described  individually
+              below.
+
+     <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u> <u>f</u><u>o</u><u>r</u> <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u> <u>p</u><u>o</u><u>r</u><u>t</u><u>s</u><u>:</u>
+
+       These options apply when <b>t</b><b>y</b><b>p</b><b>e</b> is <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b>.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>-</b><b>p</b><b>o</b><b>r</b><b>t</b>: optional string
+              Required. The <b>n</b><b>a</b><b>m</b><b>e</b> of the <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b> to which this log‐
+              ical switch port is connected.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>n</b><b>a</b><b>t</b><b>-</b><b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>e</b><b>s</b>: optional string
+              This  is  used  to send gratuitous ARPs for SNAT and DNAT IP ad‐
+              dresses via the <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b> port that is attached to the same logi‐
+              cal switch as this type <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b> port. This option is specified on
+              a logical switch port that is connected to a gateway router,  or
+              a logical switch port that is connected to a distributed gateway
+              port on a logical router.
+
+              This must take one of the following forms:
+
+              <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b> Gratuitous ARPs will be sent for all SNAT and DNAT exter‐
+                     nal  IP  addresses and for all load balancer IP addresses
+                     defined on the <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>-</b><b>p</b><b>o</b><b>r</b><b>t</b>’s logical router,  us‐
+                     ing the <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>-</b><b>p</b><b>o</b><b>r</b><b>t</b>’s MAC address.
+
+                     This  form  of <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>n</b><b>a</b><b>t</b><b>-</b><b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>e</b><b>s</b> is valid for logical
+                     switch ports where <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>-</b><b>p</b><b>o</b><b>r</b><b>t</b> is the name  of  a
+                     port  on  a  gateway router, or the name of a distributed
+                     gateway port.
+
+                     Supported only in OVN 2.8 and later. Earlier versions re‐
+                     quired NAT addresses to be manually synchronized.
+
+              <b>E</b><b>t</b><b>h</b><b>e</b><b>r</b><b>n</b><b>e</b><b>t</b> <b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b> <b>f</b><b>o</b><b>l</b><b>l</b><b>o</b><b>w</b><b>e</b><b>d</b> <b>b</b><b>y</b> <b>o</b><b>n</b><b>e</b> <b>o</b><b>r</b> <b>m</b><b>o</b><b>r</b><b>e</b> <b>I</b><b>P</b><b>v</b><b>4</b> <b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>e</b><b>s</b>
+                     Example:  <b>8</b><b>0</b><b>:</b><b>f</b><b>a</b><b>:</b><b>5</b><b>b</b><b>:</b><b>0</b><b>6</b><b>:</b><b>7</b><b>2</b><b>:</b><b>b</b><b>7</b>  <b>1</b><b>5</b><b>8</b><b>.</b><b>3</b><b>6</b><b>.</b><b>4</b><b>4</b><b>.</b><b>2</b><b>2</b>   <b>1</b><b>5</b><b>8</b><b>.</b><b>3</b><b>6</b><b>.</b><b>4</b><b>4</b><b>.</b><b>2</b><b>4</b>.
+                     This would result in generation of gratuitous ARPs for IP
+                     addresses  158.36.44.22  and  158.36.44.24 with a MAC ad‐
+                     dress of 80:fa:5b:06:72:b7.
+
+                     This form of <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>n</b><b>a</b><b>t</b><b>-</b><b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>e</b><b>s</b> is only valid for log‐
+                     ical switch ports where <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>-</b><b>p</b><b>o</b><b>r</b><b>t</b> is  the  name
+                     of a port on a gateway router.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>e</b><b>x</b><b>c</b><b>l</b><b>u</b><b>d</b><b>e</b><b>-</b><b>l</b><b>b</b><b>-</b><b>v</b><b>i</b><b>p</b><b>s</b><b>-</b><b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>g</b><b>a</b><b>r</b><b>p</b>: optional string
+              If  <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>n</b><b>a</b><b>t</b><b>-</b><b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>e</b><b>s</b> is set to <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b>, Gratuitous ARPs will
+              be sent for all SNAT and DNAT external IP addresses  defined  on
+              the   <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>-</b><b>p</b><b>o</b><b>r</b><b>t</b>’s   logical   router,  using  the  <b>o</b><b>p</b>‐‐
+              <b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>-</b><b>p</b><b>o</b><b>r</b><b>t</b>’s MAC address, not cosidering configured  load
+              balancers.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>a</b><b>r</b><b>p</b><b>_</b><b>p</b><b>r</b><b>o</b><b>x</b><b>y</b>: optional string
+              Optional.  A  list  of  MAC  and  addresses/cidrs  or  just  ad‐
+              dresses/cidrs that this logical switch <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b> port will reply to
+              ARP/NDP  requests.  Examples:   <b>1</b><b>6</b><b>9</b><b>.</b><b>2</b><b>5</b><b>4</b><b>.</b><b>2</b><b>3</b><b>9</b><b>.</b><b>2</b><b>5</b><b>4</b>   <b>1</b><b>6</b><b>9</b><b>.</b><b>2</b><b>5</b><b>4</b><b>.</b><b>2</b><b>3</b><b>9</b><b>.</b><b>2</b>,
+              <b>0</b><b>a</b><b>:</b><b>5</b><b>8</b><b>:</b><b>a</b><b>9</b><b>:</b><b>f</b><b>e</b><b>:</b><b>0</b><b>1</b><b>:</b><b>0</b><b>1</b>          <b>1</b><b>6</b><b>9</b><b>.</b><b>2</b><b>5</b><b>4</b><b>.</b><b>2</b><b>3</b><b>9</b><b>.</b><b>2</b><b>5</b><b>4</b>         <b>1</b><b>6</b><b>9</b><b>.</b><b>2</b><b>5</b><b>4</b><b>.</b><b>2</b><b>3</b><b>9</b><b>.</b><b>2</b>
+              <b>1</b><b>6</b><b>9</b><b>.</b><b>2</b><b>5</b><b>4</b><b>.</b><b>2</b><b>3</b><b>8</b><b>.</b><b>0</b><b>/</b><b>2</b><b>4</b>, <b>f</b><b>d</b><b>7</b><b>b</b><b>:</b><b>6</b><b>b</b><b>4</b><b>d</b><b>:</b><b>7</b><b>b</b><b>2</b><b>5</b><b>:</b><b>d</b><b>2</b><b>2</b><b>f</b><b>:</b><b>:</b><b>1</b> <b>f</b><b>d</b><b>7</b><b>b</b><b>:</b><b>6</b><b>b</b><b>4</b><b>d</b><b>:</b><b>7</b><b>b</b><b>2</b><b>5</b><b>:</b><b>d</b><b>2</b><b>2</b><b>f</b><b>:</b><b>:</b><b>2</b>,
+              <b>0</b><b>a</b><b>:</b><b>5</b><b>8</b><b>:</b><b>a</b><b>9</b><b>:</b><b>f</b><b>e</b><b>:</b><b>0</b><b>1</b><b>:</b><b>0</b><b>1</b> <b>f</b><b>d</b><b>7</b><b>b</b><b>:</b><b>6</b><b>b</b><b>4</b><b>d</b><b>:</b><b>7</b><b>b</b><b>2</b><b>5</b><b>:</b><b>d</b><b>2</b><b>2</b><b>f</b><b>:</b><b>:</b><b>0</b><b>/</b><b>6</b><b>4</b>.  The<b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>-</b>
+              <b>p</b><b>o</b><b>r</b><b>t</b>’s  logical  router  should  have a route to forward packets
+              sent to configured proxy ARP MAC/IPs to an appropriate  destina‐
+              tion.
+
+     <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u> <u>f</u><u>o</u><u>r</u> <u>l</u><u>o</u><u>c</u><u>a</u><u>l</u><u>n</u><u>e</u><u>t</u> <u>p</u><u>o</u><u>r</u><u>t</u><u>s</u><u>:</u>
+
+       These options apply when <b>t</b><b>y</b><b>p</b><b>e</b> is <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b>.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>n</b><b>e</b><b>t</b><b>w</b><b>o</b><b>r</b><b>k</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b>: optional string
+              Required.  The name of the network to which the <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b> port is
+              connected. Each hypervisor, via <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>, uses  its  local
+              configuration  to  determine  exactly how to connect to this lo‐
+              cally accessible network, if at all.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>e</b><b>t</b><b>h</b><b>t</b><b>y</b><b>p</b><b>e</b>: optional string
+              Optional. VLAN EtherType  field  value  for  encapsulating  VLAN
+              headers. Supported values: 802.1q (default), 802.1ad.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b><b>_</b><b>l</b><b>e</b><b>a</b><b>r</b><b>n</b><b>_</b><b>f</b><b>d</b><b>b</b>: optional string, either <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+              Optional.  Allows  localnet port to learn MACs and store them in
+              FDB table if set to <b>t</b><b>r</b><b>u</b><b>e</b>. The default value is <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>.
+
+     <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u> <u>f</u><u>o</u><u>r</u> <u>l</u><u>2</u><u>g</u><u>a</u><u>t</u><u>e</u><u>w</u><u>a</u><u>y</u> <u>p</u><u>o</u><u>r</u><u>t</u><u>s</u><u>:</u>
+
+       These options apply when <b>t</b><b>y</b><b>p</b><b>e</b> is <b>l</b><b>2</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b>.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>n</b><b>e</b><b>t</b><b>w</b><b>o</b><b>r</b><b>k</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b>: optional string
+              Required. The name of the network to which the <b>l</b><b>2</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b> port is
+              connected. The L2 gateway, via <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>,  uses  its  local
+              configuration  to  determine exactly how to connect to this net‐
+              work.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>l</b><b>2</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>: optional string
+              Required. The chassis on which the <b>l</b><b>2</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b> logical port should
+              be bound to. <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> running on the defined chassis  will
+              connect this logical port to the physical network.
+
+     <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u> <u>f</u><u>o</u><u>r</u> <u>v</u><u>t</u><u>e</u><u>p</u> <u>p</u><u>o</u><u>r</u><u>t</u><u>s</u><u>:</u>
+
+       These options apply when <b>t</b><b>y</b><b>p</b><b>e</b> is <b>v</b><b>t</b><b>e</b><b>p</b>.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>v</b><b>t</b><b>e</b><b>p</b><b>-</b><b>p</b><b>h</b><b>y</b><b>s</b><b>i</b><b>c</b><b>a</b><b>l</b><b>-</b><b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b>: optional string
+              Required. The name of the VTEP gateway.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>v</b><b>t</b><b>e</b><b>p</b><b>-</b><b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>-</b><b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b>: optional string
+              Required. A logical switch name connected by the VTEP gateway.
+
+     <u>V</u><u>M</u><u>I</u> <u>(</u><u>o</u><u>r</u> <u>V</u><u>I</u><u>F</u><u>)</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       These options apply to logical ports with <b>t</b><b>y</b><b>p</b><b>e</b> having (empty string)
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>r</b><b>e</b><b>q</b><b>u</b><b>e</b><b>s</b><b>t</b><b>e</b><b>d</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>: optional string
+              If set, identifies a specific chassis (by name or hostname) that
+              is  allowed  to  bind  this port. Using this option will prevent
+              thrashing between two chassis trying to bind the same port  dur‐
+              ing  a live migration. It can also prevent similar thrashing due
+              to a mis-configuration, if a port  is  accidentally  created  on
+              more than one chassis.
+
+              If set to a comma separated list, the first entry identifies the
+              main  chassis  and  the  rest are one or more additional chassis
+              that are allowed to bind the same port.
+
+              When multiple chassis are set for  the  port,  and  the  logical
+              switch  is  connected  to an external network through a <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b>
+              port, tunneling is enforced for the port to  guarantee  delivery
+              of  packets  directed to the port to all its locations. This has
+              MTU implications because the network  used  for  tunneling  must
+              have MTU larger than <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b> for stable connectivity.
+
+              If the same host co-hosts more than one controller instance (ei‐
+              ther belonging to the same or separate clusters), special atten‐
+              tion  should be given to consistently using unique chassis names
+              used in this option. It is advised that chassis names - and  not
+              host names - are used for this option.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>a</b><b>c</b><b>t</b><b>i</b><b>v</b><b>a</b><b>t</b><b>i</b><b>o</b><b>n</b><b>-</b><b>s</b><b>t</b><b>r</b><b>a</b><b>t</b><b>e</b><b>g</b><b>y</b>: optional string
+              If  used  with multiple chassis set in <b>r</b><b>e</b><b>q</b><b>u</b><b>e</b><b>s</b><b>t</b><b>e</b><b>d</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>, speci‐
+              fies an activation strategy for all additional chassis.  By  de‐
+              fault,  no  activation strategy is used, meaning additional port
+              locations are immediately available for use. When set to "rarp",
+              the port is blocked for ingress and egress communication until a
+              RARP packet is sent from a new location. The "rarp" strategy  is
+              useful in live migration scenarios for virtual machines.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>i</b><b>f</b><b>a</b><b>c</b><b>e</b><b>-</b><b>i</b><b>d</b><b>-</b><b>v</b><b>e</b><b>r</b>: optional string
+              If  set,  this port will be bound by <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> only if this
+              same key and value is configured in the <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>  column  in
+              the Open_vSwitch database’s <b>I</b><b>n</b><b>t</b><b>e</b><b>r</b><b>f</b><b>a</b><b>c</b><b>e</b> table.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>q</b><b>o</b><b>s</b><b>_</b><b>m</b><b>i</b><b>n</b><b>_</b><b>r</b><b>a</b><b>t</b><b>e</b>: optional string
+              If set, indicates the minimum guaranteed rate available for data
+              sent from this interface, in bit/s.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>q</b><b>o</b><b>s</b><b>_</b><b>m</b><b>a</b><b>x</b><b>_</b><b>r</b><b>a</b><b>t</b><b>e</b>: optional string
+              If  set,  indicates the maximum rate for data sent from this in‐
+              terface, in bit/s. The traffic will be shaped according to  this
+              limit.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>q</b><b>o</b><b>s</b><b>_</b><b>b</b><b>u</b><b>r</b><b>s</b><b>t</b>: optional string
+              If set, indicates the maximum burst size for data sent from this
+              interface, in bits.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>h</b><b>o</b><b>s</b><b>t</b><b>n</b><b>a</b><b>m</b><b>e</b>: optional string
+              If  set, indicates the DHCPv4 option "Hostname" (option code 12)
+              associated for this Logical Switch Port. If  DHCPv4  is  enabled
+              for  this  Logical Switch Port, hostname dhcp option will be in‐
+              cluded in DHCP reply.
+
+     <u>V</u><u>I</u><u>F</u> <u>P</u><u>l</u><u>u</u><u>g</u><u>g</u><u>i</u><u>n</u><u>g</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>v</b><b>i</b><b>f</b><b>-</b><b>p</b><b>l</b><b>u</b><b>g</b><b>-</b><b>t</b><b>y</b><b>p</b><b>e</b>: optional string
+              If set, OVN will attempt to perform plugging of this VIF. In or‐
+              der to get this port plugged by the OVN controller, OVN must  be
+              built with support for VIF plugging. The default behavior is for
+              the  CMS  to  do  the  VIF plugging. Each VIF plug provider have
+              their own options namespaced by name, for example "vif-plug:rep‐
+              resentor:key". Please refer to the VIF plug provider  documenta‐
+              tion  located  in  Documentation/topics/vif-plug-providers/  for
+              more information.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>v</b><b>i</b><b>f</b><b>-</b><b>p</b><b>l</b><b>u</b><b>g</b><b>-</b><b>m</b><b>t</b><b>u</b><b>-</b><b>r</b><b>e</b><b>q</b><b>u</b><b>e</b><b>s</b><b>t</b>: optional string
+              Requested MTU for plugged interfaces.  When  set  the  OVN  con‐
+              troller  will  fill  the  <b>m</b><b>t</b><b>u</b><b>_</b><b>r</b><b>e</b><b>q</b><b>u</b><b>e</b><b>s</b><b>t</b> column of the Open vSwitch
+              database’s <b>I</b><b>n</b><b>t</b><b>e</b><b>r</b><b>f</b><b>a</b><b>c</b><b>e</b> table. This in turn will make OVS  vswitchd
+              update the MTU of the linked interface.
+
+     <u>V</u><u>i</u><u>r</u><u>t</u><u>u</u><u>a</u><u>l</u> <u>p</u><u>o</u><u>r</u><u>t</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       These options apply when <b>t</b><b>y</b><b>p</b><b>e</b> is <b>v</b><b>i</b><b>r</b><b>t</b><b>u</b><b>a</b><b>l</b>.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>v</b><b>i</b><b>r</b><b>t</b><b>u</b><b>a</b><b>l</b><b>-</b><b>i</b><b>p</b>: optional string
+              This option represents the virtual IPv4 address.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>v</b><b>i</b><b>r</b><b>t</b><b>u</b><b>a</b><b>l</b><b>-</b><b>p</b><b>a</b><b>r</b><b>e</b><b>n</b><b>t</b><b>s</b>: optional string
+              This options represents a set of logical port names (with in the
+              same  logical switch) which can own the <b>v</b><b>i</b><b>r</b><b>t</b><b>u</b><b>a</b><b>l</b> <b>i</b><b>p</b> configured in
+              the <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>v</b><b>i</b><b>r</b><b>t</b><b>u</b><b>a</b><b>l</b><b>-</b><b>i</b><b>p</b>. All these virtual parents should add the
+              <b>v</b><b>i</b><b>r</b><b>t</b><b>u</b><b>a</b><b>l</b> <b>i</b><b>p</b> in the <b>p</b><b>o</b><b>r</b><b>t</b><b>_</b><b>s</b><b>e</b><b>c</b><b>u</b><b>r</b><b>i</b><b>t</b><b>y</b> if port security  addressed  are
+              enabled.
+
+     <u>I</u><u>P</u> <u>M</u><u>u</u><u>l</u><u>t</u><u>i</u><u>c</u><u>a</u><u>s</u><u>t</u> <u>S</u><u>n</u><u>o</u><u>o</u><u>p</u><u>i</u><u>n</u><u>g</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       These options apply when the port is part of a logical switch which has
+       <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> :mcast_snoop set to <b>t</b><b>r</b><b>u</b><b>e</b>.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>f</b><b>l</b><b>o</b><b>o</b><b>d</b>: optional string, either <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+              If  set to <b>t</b><b>r</b><b>u</b><b>e</b>, multicast packets (except reports) are uncondi‐
+              tionally forwarded to the specific port. Default: <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>f</b><b>l</b><b>o</b><b>o</b><b>d</b><b>_</b><b>r</b><b>e</b><b>p</b><b>o</b><b>r</b><b>t</b><b>s</b>: optional string, either <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+              If set to <b>t</b><b>r</b><b>u</b><b>e</b>, multicast reports are unconditionally  forwarded
+              to the specific port. Default: <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>.
+
+     <u>C</u><u>o</u><u>n</u><u>t</u><u>a</u><u>i</u><u>n</u><u>e</u><u>r</u><u>s</u><u>:</u>
+
+       When a large number of containers are nested within a VM, it may be too
+       expensive to dedicate a VIF to each container. OVN can use VLAN tags to
+       support  such  cases.  Each  container  is  assigned a VLAN ID and each
+       packet that passes between the hypervisor and the VM is tagged with the
+       appropriate ID for the container. Such VLAN IDs never appear on a phys‐
+       ical wire, even inside a tunnel, so they need not be unique except rel‐
+       ative to a single VM on a hypervisor.
+
+       These columns are used for VIFs that represent nested containers  using
+       shared  VIFs. For VMs and for containers that have dedicated VIFs, they
+       are empty.
+
+       <b>p</b><b>a</b><b>r</b><b>e</b><b>n</b><b>t</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b>: optional string
+              The VM interface through which the nested  container  sends  its
+              network  traffic. This must match the <b>n</b><b>a</b><b>m</b><b>e</b> column for some other
+              <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b>.
+
+       <b>t</b><b>a</b><b>g</b><b>_</b><b>r</b><b>e</b><b>q</b><b>u</b><b>e</b><b>s</b><b>t</b>: optional integer, in range 0 to 4,095
+              The VLAN tag in the  network  traffic  associated  with  a  con‐
+              tainer’s network interface. The client can request <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> to
+              allocate  a  tag  that  is unique within the scope of a specific
+              parent (specified in <b>p</b><b>a</b><b>r</b><b>e</b><b>n</b><b>t</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b>) by setting a  value  of  <b>0</b>  in
+              this column. The allocated value is written by <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> in the
+              <b>t</b><b>a</b><b>g</b>  column. (Note that these tags are allocated and managed lo‐
+              cally in <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>, so they  cannot  be  reconstructed  in  the
+              event  that the database is lost.) The client can also request a
+              specific non-zero tag and <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> will honor it and copy that
+              value to the <b>t</b><b>a</b><b>g</b> column.
+
+              When <b>t</b><b>y</b><b>p</b><b>e</b> is set to <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b> or <b>l</b><b>2</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b>, this can  be  set  to
+              indicate  that  the  port  represents a connection to a specific
+              VLAN on a locally accessible network. The VLAN  ID  is  used  to
+              match incoming traffic and is also added to outgoing traffic.
+
+       <b>t</b><b>a</b><b>g</b>: optional integer, in range 1 to 4,095
+              The  VLAN  tag  allocated by <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> based on the contents of
+              the <b>t</b><b>a</b><b>g</b><b>_</b><b>r</b><b>e</b><b>q</b><b>u</b><b>e</b><b>s</b><b>t</b> column.
+
+     <u>P</u><u>o</u><u>r</u><u>t</u> <u>S</u><u>t</u><u>a</u><u>t</u><u>e</u><u>:</u>
+
+       <b>u</b><b>p</b>: optional boolean
+              This column is populated by <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>, rather than by  the  CMS
+              plugin as is most of this database. When a logical port is bound
+              to  a  physical  location in the OVN Southbound database <b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>
+              table, <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> sets this column to <b>t</b><b>r</b><b>u</b><b>e</b>; otherwise, or if the
+              port becomes unbound later, it sets it to <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>. If this  column
+              is  empty, the port is not considered up. This allows the CMS to
+              wait for a VM’s (or container’s) networking to become active be‐
+              fore it allows the VM (or container) to start.
+
+              Logical ports of router type are an exception to this rule. They
+              are considered to be always up, that is this  column  is  always
+              set to <b>t</b><b>r</b><b>u</b><b>e</b>.
+
+       <b>e</b><b>n</b><b>a</b><b>b</b><b>l</b><b>e</b><b>d</b>: optional boolean
+              This  column is used to administratively set port state. If this
+              column is empty or is set to <b>t</b><b>r</b><b>u</b><b>e</b>, the port is enabled. If  this
+              column  is  set  to <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>, the port is disabled. A disabled port
+              has all ingress and egress traffic dropped.
+
+     <u>A</u><u>d</u><u>d</u><u>r</u><u>e</u><u>s</u><u>s</u><u>i</u><u>n</u><u>g</u><u>:</u>
+
+       <b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>e</b><b>s</b>: set of strings
+              Addresses owned by the logical port.
+
+              Each element in the set must take one of the following forms:
+
+              <b>E</b><b>t</b><b>h</b><b>e</b><b>r</b><b>n</b><b>e</b><b>t</b> <b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b> <b>f</b><b>o</b><b>l</b><b>l</b><b>o</b><b>w</b><b>e</b><b>d</b> <b>b</b><b>y</b> <b>z</b><b>e</b><b>r</b><b>o</b> <b>o</b><b>r</b> <b>m</b><b>o</b><b>r</b><b>e</b> <b>I</b><b>P</b><b>v</b><b>4</b> <b>o</b><b>r</b> <b>I</b><b>P</b><b>v</b><b>6</b> <b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>e</b><b>s</b>
+              <b>(</b><b>o</b><b>r</b> <b>b</b><b>o</b><b>t</b><b>h</b><b>)</b>
+                     An Ethernet address defined is owned by the logical port.
+                     Like a physical Ethernet NIC, a logical  port  ordinarily
+                     has a single fixed Ethernet address.
+
+                     When  a  OVN  logical switch processes a unicast Ethernet
+                     frame whose destination  MAC  address  is  in  a  logical
+                     port’s  <b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>e</b><b>s</b>  column,  it  delivers  it only to that
+                     port, as if a MAC learning process had learned  that  MAC
+                     address on the port.
+
+                     If IPv4 or IPv6 address(es) (or both) are defined, it in‐
+                     dicates  that  the  logical  port  owns  the given IP ad‐
+                     dresses.
+
+                     If IPv4 address(es) are defined, the OVN  logical  switch
+                     uses  this information to synthesize responses to ARP re‐
+                     quests without traversing the physical network.  The  OVN
+                     logical  router  connected to the logical switch, if any,
+                     uses this information to avoid issuing ARP  requests  for
+                     logical switch ports.
+
+                     Note  that  the order here is important. The Ethernet ad‐
+                     dress must be listed before the  IP  address(es)  if  de‐
+                     fined.
+
+                     Examples:
+
+                     <b>8</b><b>0</b><b>:</b><b>f</b><b>a</b><b>:</b><b>5</b><b>b</b><b>:</b><b>0</b><b>6</b><b>:</b><b>7</b><b>2</b><b>:</b><b>b</b><b>7</b>
+                            This  indicates  that  the  logical  port owns the
+                            above mac address.
+
+                     <b>8</b><b>0</b><b>:</b><b>f</b><b>a</b><b>:</b><b>5</b><b>b</b><b>:</b><b>0</b><b>6</b><b>:</b><b>7</b><b>2</b><b>:</b><b>b</b><b>7</b> <b>1</b><b>0</b><b>.</b><b>0</b><b>.</b><b>0</b><b>.</b><b>4</b> <b>2</b><b>0</b><b>.</b><b>0</b><b>.</b><b>0</b><b>.</b><b>4</b>
+                            This indicates that the logical port owns the  mac
+                            address and two IPv4 addresses.
+
+                     <b>8</b><b>0</b><b>:</b><b>f</b><b>a</b><b>:</b><b>5</b><b>b</b><b>:</b><b>0</b><b>6</b><b>:</b><b>7</b><b>2</b><b>:</b><b>b</b><b>7</b> <b>f</b><b>d</b><b>a</b><b>a</b><b>:</b><b>1</b><b>5</b><b>f</b><b>2</b><b>:</b><b>7</b><b>2</b><b>c</b><b>f</b><b>:</b><b>0</b><b>:</b><b>f</b><b>8</b><b>1</b><b>6</b><b>:</b><b>3</b><b>e</b><b>f</b><b>f</b><b>:</b><b>f</b><b>e</b><b>2</b><b>0</b><b>:</b><b>3</b><b>f</b><b>4</b><b>1</b>
+                            This  indicates that the logical port owns the mac
+                            address and 1 IPv6 address.
+
+                     <b>8</b><b>0</b><b>:</b><b>f</b><b>a</b><b>:</b><b>5</b><b>b</b><b>:</b><b>0</b><b>6</b><b>:</b><b>7</b><b>2</b><b>:</b><b>b</b><b>7</b> <b>1</b><b>0</b><b>.</b><b>0</b><b>.</b><b>0</b><b>.</b><b>4</b>
+                     <b>f</b><b>d</b><b>a</b><b>a</b><b>:</b><b>1</b><b>5</b><b>f</b><b>2</b><b>:</b><b>7</b><b>2</b><b>c</b><b>f</b><b>:</b><b>0</b><b>:</b><b>f</b><b>8</b><b>1</b><b>6</b><b>:</b><b>3</b><b>e</b><b>f</b><b>f</b><b>:</b><b>f</b><b>e</b><b>2</b><b>0</b><b>:</b><b>3</b><b>f</b><b>4</b><b>1</b>
+                            This indicates that the logical port owns the  mac
+                            address and 1 IPv4 address and 1 IPv6 address.
+
+              <b>u</b><b>n</b><b>k</b><b>n</b><b>o</b><b>w</b><b>n</b>
+                     This  indicates  that the logical port has an unknown set
+                     of  Ethernet  addresses.  When  an  OVN  logical   switch
+                     processes  a unicast Ethernet frame whose destination MAC
+                     address is not in any logical port’s <b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>e</b><b>s</b> column, it
+                     delivers it  to  the  port  (or  ports)  whose  <b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>e</b><b>s</b>
+                     columns include <b>u</b><b>n</b><b>k</b><b>n</b><b>o</b><b>w</b><b>n</b>.
+
+              <b>d</b><b>y</b><b>n</b><b>a</b><b>m</b><b>i</b><b>c</b>
+                     Use <b>d</b><b>y</b><b>n</b><b>a</b><b>m</b><b>i</b><b>c</b> to make <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> generate a globally unique
+                     MAC address, choose an unused IPv4 address with the logi‐
+                     cal  port’s  subnet (if <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>:</b><b>s</b><b>u</b><b>b</b><b>n</b><b>e</b><b>t</b> is set in the
+                     port’s <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b>), and generate an IPv6 address from
+                     the MAC address (if <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>:</b><b>i</b><b>p</b><b>v</b><b>6</b><b>_</b><b>p</b><b>r</b><b>e</b><b>f</b><b>i</b><b>x</b>  is  set  in
+                     the  port’s  <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b>) and store them in the port’s
+                     <b>d</b><b>y</b><b>n</b><b>a</b><b>m</b><b>i</b><b>c</b><b>_</b><b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>e</b><b>s</b> column.
+
+                     Only one element containing <b>d</b><b>y</b><b>n</b><b>a</b><b>m</b><b>i</b><b>c</b>  may  appear  in  <b>a</b><b>d</b>‐‐
+                     <b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>e</b><b>s</b>.
+
+              <b>d</b><b>y</b><b>n</b><b>a</b><b>m</b><b>i</b><b>c</b> <u>i</u><u>p</u>
+              <b>d</b><b>y</b><b>n</b><b>a</b><b>m</b><b>i</b><b>c</b> <u>i</u><u>p</u><u>v</u><u>6</u>
+              <b>d</b><b>y</b><b>n</b><b>a</b><b>m</b><b>i</b><b>c</b> <u>i</u><u>p</u> <u>i</u><u>p</u><u>v</u><u>6</u>
+                   These act like <b>d</b><b>y</b><b>n</b><b>a</b><b>m</b><b>i</b><b>c</b> alone but specify particular IPv4 or
+                   IPv6  addresses  to  use. OVN IPAM will still automatically
+                   allocate the other address if configured appropriately. Ex‐
+                   ample: <b>d</b><b>y</b><b>n</b><b>a</b><b>m</b><b>i</b><b>c</b> <b>1</b><b>9</b><b>2</b><b>.</b><b>1</b><b>6</b><b>8</b><b>.</b><b>0</b><b>.</b><b>1</b> <b>2</b><b>0</b><b>0</b><b>1</b><b>:</b><b>:</b><b>1</b>.
+
+              <u>m</u><u>a</u><u>c</u> <b>d</b><b>y</b><b>n</b><b>a</b><b>m</b><b>i</b><b>c</b>
+                   This acts like <b>d</b><b>y</b><b>n</b><b>a</b><b>m</b><b>i</b><b>c</b> alone but specifies a particular MAC
+                   address to use. OVN IPAM will still automatically  allocate
+                   IPv4  or  IPv6  addresses, or both, if configured appropri‐
+                   ately. Example: <b>8</b><b>0</b><b>:</b><b>f</b><b>a</b><b>:</b><b>5</b><b>b</b><b>:</b><b>0</b><b>6</b><b>:</b><b>7</b><b>2</b><b>:</b><b>b</b><b>7</b> <b>d</b><b>y</b><b>n</b><b>a</b><b>m</b><b>i</b><b>c</b>
+
+              <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b>
+                   Accepted only when <b>t</b><b>y</b><b>p</b><b>e</b> is <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b>. This indicates that  the
+                   Ethernet,  IPv4, and IPv6 addresses for this logical switch
+                   port should be obtained from the connected  logical  router
+                   port, as specified by <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>-</b><b>p</b><b>o</b><b>r</b><b>t</b> in <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>.
+
+                   The  resulting  addresses  are used to populate the logical
+                   switch’s destination  lookup,  and  also  for  the  logical
+                   switch to generate ARP and ND replies.
+
+                   If  the  connected  logical  router  port has a distributed
+                   gateway port specified and the  logical  router  has  rules
+                   specified  in  <b>n</b><b>a</b><b>t</b>  with <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>m</b><b>a</b><b>c</b>, then those addresses
+                   are also used to populate the switch’s destination lookup.
+
+                   Supported only in OVN 2.7 and later. Earlier  versions  re‐
+                   quired router addresses to be manually synchronized.
+
+       <b>d</b><b>y</b><b>n</b><b>a</b><b>m</b><b>i</b><b>c</b><b>_</b><b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>e</b><b>s</b>: optional string
+              Addresses assigned to the logical port by <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>, if <b>d</b><b>y</b><b>n</b><b>a</b><b>m</b><b>i</b><b>c</b>
+              is  specified in <b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>e</b><b>s</b>. Addresses will be of the same format
+              as those that populate the <b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>e</b><b>s</b> column. Note  that  dynami‐
+              cally  assigned addresses are constructed and managed locally in
+              ovn-northd, so they cannot be reconstructed in  the  event  that
+              the database is lost.
+
+       <b>p</b><b>o</b><b>r</b><b>t</b><b>_</b><b>s</b><b>e</b><b>c</b><b>u</b><b>r</b><b>i</b><b>t</b><b>y</b>: set of strings
+              This  column controls the addresses from which the host attached
+              to the logical port (``the host’’) is allowed  to  send  packets
+              and to which it is allowed to receive packets. If this column is
+              empty, all addresses are permitted.
+
+              Each  element  in  the set must begin with one Ethernet address.
+              This would restrict the host to sending packets from and receiv‐
+              ing packets to the ethernet addresses  defined  in  the  logical
+              port’s  <b>p</b><b>o</b><b>r</b><b>t</b><b>_</b><b>s</b><b>e</b><b>c</b><b>u</b><b>r</b><b>i</b><b>t</b><b>y</b> column. It also restricts the inner source
+              MAC addresses that the host may send in ARP  and  IPv6  Neighbor
+              Discovery packets. The host is always allowed to receive packets
+              to multicast and broadcast Ethernet addresses.
+
+              Each  element  in  the  set may additionally contain one or more
+              IPv4 or IPv6 addresses (or both), with optional masks. If a mask
+              is given, it must be a CIDR mask. In addition  to  the  restric‐
+              tions  described  for  Ethernet addresses above, such an element
+              restricts the IPv4 or IPv6 addresses from  which  the  host  may
+              send  and  to  which it may receive packets to the specified ad‐
+              dresses. A masked address, if the host part is  zero,  indicates
+              that  the  host  is allowed to use any address in the subnet; if
+              the host part is nonzero, the mask simply indicates the size  of
+              the subnet. In addition:
+
+              •      If any IPv4 address is given, the host is also allowed to
+                     receive  packets  to  the  IPv4  local  broadcast address
+                     255.255.255.255   and   to   IPv4   multicast   addresses
+                     (224.0.0.0/4).  If  an IPv4 address with a mask is given,
+                     the host is also allowed to receive packets to the broad‐
+                     cast address in that specified subnet.
+
+                     If any IPv4 address is given, the  host  is  additionally
+                     restricted  to  sending  ARP  packets  with the specified
+                     source IPv4 address. (RARP is not restricted.)
+
+              •      If any IPv6 address is given, the host is also allowed to
+                     receive packets to IPv6 multicast addresses (ff00::/8).
+
+                     If any IPv6 address is given, the  host  is  additionally
+                     restricted  to  sending IPv6 Neighbor Discovery Solicita‐
+                     tion or Advertisement packets with the  specified  source
+                     address or, for solicitations, the unspecified address.
+
+              If  an  element includes an IPv4 address, but no IPv6 addresses,
+              then IPv6 traffic is not allowed. If an element includes an IPv6
+              address, but no IPv4 address, then IPv4 and ARP traffic  is  not
+              allowed.
+
+              This  column uses the same lexical syntax as the <b>m</b><b>a</b><b>t</b><b>c</b><b>h</b> column in
+              the OVN Southbound database’s <b>P</b><b>i</b><b>p</b><b>e</b><b>l</b><b>i</b><b>n</b><b>e</b> table. Multiple addresses
+              within an element may be space or comma separated.
+
+              This column is provided as a  convenience  to  cloud  management
+              systems,  but  all of the features that it implements can be im‐
+              plemented as ACLs using the <b>A</b><b>C</b><b>L</b> table.
+
+              Examples:
+
+              <b>8</b><b>0</b><b>:</b><b>f</b><b>a</b><b>:</b><b>5</b><b>b</b><b>:</b><b>0</b><b>6</b><b>:</b><b>7</b><b>2</b><b>:</b><b>b</b><b>7</b>
+                     The host may send traffic from and receive traffic to the
+                     specified MAC address, and to receive traffic to Ethernet
+                     multicast and broadcast addresses, but not otherwise. The
+                     host may not send ARP or IPv6 Neighbor Discovery  packets
+                     with  inner  source Ethernet addresses other than the one
+                     specified.
+
+              <b>8</b><b>0</b><b>:</b><b>f</b><b>a</b><b>:</b><b>5</b><b>b</b><b>:</b><b>0</b><b>6</b><b>:</b><b>7</b><b>2</b><b>:</b><b>b</b><b>7</b> <b>1</b><b>9</b><b>2</b><b>.</b><b>1</b><b>6</b><b>8</b><b>.</b><b>1</b><b>.</b><b>1</b><b>0</b><b>/</b><b>2</b><b>4</b>
+                     This adds further restrictions to the first example.  The
+                     host  may  send IPv4 packets from or receive IPv4 packets
+                     to only 192.168.1.10, except that  it  may  also  receive
+                     IPv4 packets to 192.168.1.255 (based on the subnet mask),
+                     255.255.255.255, and any address in 224.0.0.0/4. The host
+                     may  not  send  ARPs with a source Ethernet address other
+                     than 80:fa:5b:06:72:b7 or source IPv4 address other  than
+                     192.168.1.10.  The  host may not send or receive any IPv6
+                     (including IPv6 Neighbor Discovery) traffic.
+
+              <b>"</b><b>8</b><b>0</b><b>:</b><b>f</b><b>a</b><b>:</b><b>5</b><b>b</b><b>:</b><b>1</b><b>2</b><b>:</b><b>4</b><b>2</b><b>:</b><b>b</b><b>a</b><b>"</b><b>,</b> <b>"</b><b>8</b><b>0</b><b>:</b><b>f</b><b>a</b><b>:</b><b>5</b><b>b</b><b>:</b><b>0</b><b>6</b><b>:</b><b>7</b><b>2</b><b>:</b><b>b</b><b>7</b> <b>1</b><b>9</b><b>2</b><b>.</b><b>1</b><b>6</b><b>8</b><b>.</b><b>1</b><b>.</b><b>1</b><b>0</b><b>/</b><b>2</b><b>4</b><b>"</b>
+                     The host may send traffic from and receive traffic to the
+                     specified MAC addresses, and to receive traffic to Ether‐
+                     net multicast and broadcast addresses, but not otherwise.
+                     With MAC 80:fa:5b:12:42:ba, the  host  may  send  traffic
+                     from  and  receive  traffic  to  any L3 address. With MAC
+                     80:fa:5b:06:72:b7, the host may send IPv4 packets from or
+                     receive IPv4 packets to only 192.168.1.10, except that it
+                     may also receive IPv4 packets to 192.168.1.255 (based  on
+                     the  subnet  mask),  255.255.255.255,  and any address in
+                     224.0.0.0/4. The host may not send or  receive  any  IPv6
+                     (including IPv6 Neighbor Discovery) traffic.
+
+     <u>D</u><u>H</u><u>C</u><u>P</u><u>:</u>
+
+       <b>d</b><b>h</b><b>c</b><b>p</b><b>v</b><b>4</b><b>_</b><b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>: optional weak reference to <b>D</b><b>H</b><b>C</b><b>P</b><b>_</b><b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+              This  column  defines  the  DHCPv4 Options to be included by the
+              <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> when it replies to the  DHCPv4  requests.  Please
+              see the <b>D</b><b>H</b><b>C</b><b>P</b><b>_</b><b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> table.
+
+       <b>d</b><b>h</b><b>c</b><b>p</b><b>v</b><b>6</b><b>_</b><b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>: optional weak reference to <b>D</b><b>H</b><b>C</b><b>P</b><b>_</b><b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+              This  column  defines  the  DHCPv6 Options to be included by the
+              <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> when it replies to the  DHCPv6  requests.  Please
+              see the <b>D</b><b>H</b><b>C</b><b>P</b><b>_</b><b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> table.
+
+       <b>m</b><b>i</b><b>r</b><b>r</b><b>o</b><b>r</b><b>_</b><b>r</b><b>u</b><b>l</b><b>e</b><b>s</b>: set of weak reference to <b>M</b><b>i</b><b>r</b><b>r</b><b>o</b><b>r</b>s
+              Mirror  rules  that  apply  to  logical switch port which is the
+              source. Please see the <b>M</b><b>i</b><b>r</b><b>r</b><b>o</b><b>r</b> table.
+
+       <b>h</b><b>a</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b>: optional <b>H</b><b>A</b><b>_</b><b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b>
+              References a row  in  the  OVN  Northbound  database’s  <b>H</b><b>A</b><b>_</b><b>C</b><b>h</b><b>a</b><b>s</b>‐‐
+              <b>s</b><b>i</b><b>s</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b> table. It indicates the HA chassis group to use if the
+              <b>t</b><b>y</b><b>p</b><b>e</b> is set to <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b>. If <b>t</b><b>y</b><b>p</b><b>e</b> is not <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b>, this column is
+              ignored.
+
+     <u>N</u><u>a</u><u>m</u><u>i</u><u>n</u><u>g</u><u>:</u>
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b> <b>:</b> <b>n</b><b>e</b><b>u</b><b>t</b><b>r</b><b>o</b><b>n</b><b>:</b><b>p</b><b>o</b><b>r</b><b>t</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b>: optional string
+              This  column gives an optional human-friendly name for the port.
+              This name has no special meaning or purpose other than  to  pro‐
+              vide convenience for human interaction with the northbound data‐
+              base.
+
+              Neutron  copies  this  from its own port object’s name. (Neutron
+              ports do are not assigned human-friendly names by default, so it
+              will often be empty.)
+
+     <u>T</u><u>u</u><u>n</u><u>n</u><u>e</u><u>l</u> <u>K</u><u>e</u><u>y</u><u>:</u>
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>r</b><b>e</b><b>q</b><b>u</b><b>e</b><b>s</b><b>t</b><b>e</b><b>d</b><b>-</b><b>t</b><b>n</b><b>l</b><b>-</b><b>k</b><b>e</b><b>y</b>: optional string, containing an integer, in
+       range 1 to 32,767
+              Configures the port binding tunnel key  for  the  port.  Usually
+              this  is not needed because <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> will assign an unique key
+              for  each  port  by  itself.  However,  if  it  is   configured,
+              <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>  honors the configured value. The typical use case is
+              for interconnection:  the  tunnel  keys  for  ports  on  transit
+              switches  need  to be unique globally, so they are maintained in
+              the global <b>O</b><b>V</b><b>N</b><b>_</b><b>I</b><b>C</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database, and <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b>  simply  syncs
+              the value from <b>O</b><b>V</b><b>N</b><b>_</b><b>I</b><b>C</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> through this config.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+              See <b>E</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> <b>I</b><b>D</b><b>s</b> at the beginning of this document.
+
+              The  <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>  program  copies all these pairs into the <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b>‐‐
+              <b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b> column of the <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> table in <b>O</b><b>V</b><b>N</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> data‐
+              base.
+
+<b>F</b><b>o</b><b>r</b><b>w</b><b>a</b><b>r</b><b>d</b><b>i</b><b>n</b><b>g</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Each row represents one forwarding group.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>                          string
+       <b>v</b><b>i</b><b>p</b>                           string
+       <b>v</b><b>m</b><b>a</b><b>c</b>                          string
+       <b>l</b><b>i</b><b>v</b><b>e</b><b>n</b><b>e</b><b>s</b><b>s</b>                      boolean
+       <b>c</b><b>h</b><b>i</b><b>l</b><b>d</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>                    set of 1 or more strings
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>: string
+              A name for the forwarding group. This name has no special  mean‐
+              ing  or  purpose other than to provide convenience for human in‐
+              teraction with the ovn-nb database.
+
+       <b>v</b><b>i</b><b>p</b>: string
+              The virtual IP address assigned to the forwarding group. It will
+              respond with vmac when an ARP request is sent for vip.
+
+       <b>v</b><b>m</b><b>a</b><b>c</b>: string
+              The virtual MAC address assigned to the forwarding group.
+
+       <b>l</b><b>i</b><b>v</b><b>e</b><b>n</b><b>e</b><b>s</b><b>s</b>: boolean
+              If set to <b>t</b><b>r</b><b>u</b><b>e</b>, liveness is enabled for child ports otherwise it
+              is disabled.
+
+       <b>c</b><b>h</b><b>i</b><b>l</b><b>d</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>: set of 1 or more strings
+              List of child ports in the forwarding group.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+              See <b>E</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> <b>I</b><b>D</b><b>s</b> at the beginning of this document.
+
+<b>A</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>_</b><b>S</b><b>e</b><b>t</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Each row in this table represents a named set of addresses. An  address
+       set may contain Ethernet, IPv4, or IPv6 addresses with optional bitwise
+       or  CIDR  masks.  Address set may ultimately be used in ACLs to compare
+       against fields such as <b>i</b><b>p</b><b>4</b><b>.</b><b>s</b><b>r</b><b>c</b> or <b>i</b><b>p</b><b>6</b><b>.</b><b>s</b><b>r</b><b>c</b>. A single  address  set  must
+       contain  addresses of the same type. As an example, the following would
+       create an address set with three IP addresses:
+
+             <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b> <b>c</b><b>r</b><b>e</b><b>a</b><b>t</b><b>e</b> <b>A</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>_</b><b>S</b><b>e</b><b>t</b> <b>n</b><b>a</b><b>m</b><b>e</b><b>=</b><b>s</b><b>e</b><b>t</b><b>1</b> <b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>e</b><b>s</b><b>=</b>’’<b>1</b><b>0</b><b>.</b><b>0</b><b>.</b><b>0</b><b>.</b><b>1</b> <b>1</b><b>0</b><b>.</b><b>0</b><b>.</b><b>0</b><b>.</b><b>2</b> <b>1</b><b>0</b><b>.</b><b>0</b><b>.</b><b>0</b><b>.</b><b>3</b>’’
+
+
+       Address sets may be used in the <b>m</b><b>a</b><b>t</b><b>c</b><b>h</b> column of the <b>A</b><b>C</b><b>L</b> table. For syn‐
+       tax information, see the details of the expression  language  used  for
+       the  <b>m</b><b>a</b><b>t</b><b>c</b><b>h</b> column in the <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>F</b><b>l</b><b>o</b><b>w</b> table of the <b>O</b><b>V</b><b>N</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> data‐
+       base.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>                          string (must be unique within table)
+       <b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>e</b><b>s</b>                     set of strings
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>: string (must be unique within table)
+              A name for the address set.  Names  are  ASCII  and  must  match
+              <b>[</b><b>a</b><b>-</b><b>z</b><b>A</b><b>-</b><b>Z</b><b>_</b><b>.</b><b>]</b><b>[</b><b>a</b><b>-</b><b>z</b><b>A</b><b>-</b><b>Z</b><b>_</b><b>.</b><b>0</b><b>-</b><b>9</b><b>]</b><b>*</b>.
+
+       <b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>e</b><b>s</b>: set of strings
+              The set of addresses in string form.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+              See <b>E</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> <b>I</b><b>D</b><b>s</b> at the beginning of this document.
+
+<b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Each  row  in  this  table  represents  a named group of logical switch
+       ports.
+
+       Port groups may be used in the <b>m</b><b>a</b><b>t</b><b>c</b><b>h</b> column of the <b>A</b><b>C</b><b>L</b> table. For  syn‐
+       tax  information,  see  the details of the expression language used for
+       the <b>m</b><b>a</b><b>t</b><b>c</b><b>h</b> column in the <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>F</b><b>l</b><b>o</b><b>w</b> table of the <b>O</b><b>V</b><b>N</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b>  data‐
+       base.
+
+       For  each  port  group, there are two address sets generated to the <b>A</b><b>d</b>‐‐
+       <b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>_</b><b>S</b><b>e</b><b>t</b> table of the <b>O</b><b>V</b><b>N</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database, containing the  IP  ad‐
+       dresses  of  the  group of ports, one for IPv4, and the other for IPv6,
+       with <b>n</b><b>a</b><b>m</b><b>e</b> being the <b>n</b><b>a</b><b>m</b><b>e</b> of the <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b> followed by  a  suffix  <b>_</b><b>i</b><b>p</b><b>4</b>
+       for  IPv4  and <b>_</b><b>i</b><b>p</b><b>6</b> for IPv6. The generated address sets can be used in
+       the same way as regular address sets in the <b>m</b><b>a</b><b>t</b><b>c</b><b>h</b> column of the <b>A</b><b>C</b><b>L</b> ta‐
+       ble. For syntax information, see the details of the expression language
+       used for the <b>m</b><b>a</b><b>t</b><b>c</b><b>h</b> column in the <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>F</b><b>l</b><b>o</b><b>w</b> table of  the  <b>O</b><b>V</b><b>N</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b>‐‐
+       <b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>                          string (must be unique within table)
+       <b>p</b><b>o</b><b>r</b><b>t</b><b>s</b>                         set    of   weak   reference   to   <b>L</b><b>o</b><b>g</b><b>i</b>‐‐
+                                     <b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b>s
+       <b>a</b><b>c</b><b>l</b><b>s</b>                          set of <b>A</b><b>C</b><b>L</b>s
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>: string (must be unique within table)
+              A name for the port  group.  Names  are  ASCII  and  must  match
+              <b>[</b><b>a</b><b>-</b><b>z</b><b>A</b><b>-</b><b>Z</b><b>_</b><b>.</b><b>]</b><b>[</b><b>a</b><b>-</b><b>z</b><b>A</b><b>-</b><b>Z</b><b>_</b><b>.</b><b>0</b><b>-</b><b>9</b><b>]</b><b>*</b>.
+
+       <b>p</b><b>o</b><b>r</b><b>t</b><b>s</b>: set of weak reference to <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b>s
+              The logical switch ports belonging to the group in uuids.
+
+       <b>a</b><b>c</b><b>l</b><b>s</b>: set of <b>A</b><b>C</b><b>L</b>s
+              Access  control  rules that apply to the port group. Applying an
+              ACL to a port group has the same effect as applying the  ACL  to
+              all  logical  lswitches  that the ports of the port group belong
+              to.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+              See <b>E</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> <b>I</b><b>D</b><b>s</b> at the beginning of this document.
+
+<b>L</b><b>o</b><b>a</b><b>d</b><b>_</b><b>B</b><b>a</b><b>l</b><b>a</b><b>n</b><b>c</b><b>e</b><b>r</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Each row represents one load balancer.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>                          string
+       <b>v</b><b>i</b><b>p</b><b>s</b>                          map of string-string pairs
+       <b>p</b><b>r</b><b>o</b><b>t</b><b>o</b><b>c</b><b>o</b><b>l</b>                      optional string, one of <b>s</b><b>c</b><b>t</b><b>p</b>, <b>t</b><b>c</b><b>p</b>, or <b>u</b><b>d</b><b>p</b>
+       <u>H</u><u>e</u><u>a</u><u>l</u><u>t</u><u>h</u> <u>C</u><u>h</u><u>e</u><u>c</u><u>k</u><u>s</u><u>:</u>
+         <b>h</b><b>e</b><b>a</b><b>l</b><b>t</b><b>h</b><b>_</b><b>c</b><b>h</b><b>e</b><b>c</b><b>k</b>                set of <b>L</b><b>o</b><b>a</b><b>d</b><b>_</b><b>B</b><b>a</b><b>l</b><b>a</b><b>n</b><b>c</b><b>e</b><b>r</b><b>_</b><b>H</b><b>e</b><b>a</b><b>l</b><b>t</b><b>h</b><b>_</b><b>C</b><b>h</b><b>e</b><b>c</b><b>k</b>s
+         <b>i</b><b>p</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b><b>_</b><b>m</b><b>a</b><b>p</b><b>p</b><b>i</b><b>n</b><b>g</b><b>s</b>            map of string-string pairs
+       <b>s</b><b>e</b><b>l</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b><b>_</b><b>f</b><b>i</b><b>e</b><b>l</b><b>d</b><b>s</b>              set of strings, one of <b>e</b><b>t</b><b>h</b><b>_</b><b>d</b><b>s</b><b>t</b>,  <b>e</b><b>t</b><b>h</b><b>_</b><b>s</b><b>r</b><b>c</b>,
+                                     <b>i</b><b>p</b><b>_</b><b>d</b><b>s</b><b>t</b>, <b>i</b><b>p</b><b>_</b><b>s</b><b>r</b><b>c</b>, <b>t</b><b>p</b><b>_</b><b>d</b><b>s</b><b>t</b>, or <b>t</b><b>p</b><b>_</b><b>s</b><b>r</b><b>c</b>
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+       <u>L</u><u>o</u><u>a</u><u>d</u><b>_</b><u>B</u><u>a</u><u>l</u><u>a</u><u>n</u><u>c</u><u>e</u><u>r</u> <u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>r</b><b>e</b><b>j</b><b>e</b><b>c</b><b>t</b>            optional string, either <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>h</b><b>a</b><b>i</b><b>r</b><b>p</b><b>i</b><b>n</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>_</b><b>i</b><b>p</b>   optional string
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>s</b><b>k</b><b>i</b><b>p</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b>         optional string
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>a</b><b>d</b><b>d</b><b>_</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b>         optional string
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>n</b><b>e</b><b>i</b><b>g</b><b>h</b><b>b</b><b>o</b><b>r</b><b>_</b><b>r</b><b>e</b><b>s</b><b>p</b><b>o</b><b>n</b><b>d</b><b>e</b><b>r</b>
+                                     optional string
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>t</b><b>e</b><b>m</b><b>p</b><b>l</b><b>a</b><b>t</b><b>e</b>          optional string
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>-</b><b>f</b><b>a</b><b>m</b><b>i</b><b>l</b><b>y</b>    optional string
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>a</b><b>f</b><b>f</b><b>i</b><b>n</b><b>i</b><b>t</b><b>y</b><b>_</b><b>t</b><b>i</b><b>m</b><b>e</b><b>o</b><b>u</b><b>t</b>  optional string
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>c</b><b>t</b><b>_</b><b>f</b><b>l</b><b>u</b><b>s</b><b>h</b>          optional string, either <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>: string
+              A  name  for the load balancer. This name has no special meaning
+              or purpose other than to provide convenience for human  interac‐
+              tion with the ovn-nb database.
+
+       <b>v</b><b>i</b><b>p</b><b>s</b>: map of string-string pairs
+              A  map of virtual IP addresses (and an optional port number with
+              <b>:</b> as a separator) associated with this load balancer  and  their
+              corresponding  endpoint  IP addresses (and optional port numbers
+              with <b>:</b> as separators) separated by commas. If the destination IP
+              address (and port number) of a packet leaving a container  or  a
+              VM  matches  the  virtual  IP address (and port number) provided
+              here as a key, then OVN will statefully replace the  destination
+              IP  address  by one of the provided IP address (and port number)
+              in this map as a value. IPv4 and IPv6  addresses  are  supported
+              for  load balancing; however a VIP of one address family may not
+              be mapped to a destination IP address of a different family.  If
+              specifying an IPv6 address with a port, the address portion must
+              be   enclosed   in   square  brackets.  Examples  for  keys  are
+              "192.168.1.4"  and  "[fd0f::1]:8800".  Examples  for  value  are
+              "10.0.0.1, 10.0.0.2" and "20.0.0.10:8800, 20.0.0.11:8800".
+
+              When  the  <b>L</b><b>o</b><b>a</b><b>d</b><b>_</b><b>B</b><b>a</b><b>l</b><b>a</b><b>n</b><b>c</b><b>e</b><b>r</b> is added to the <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b>, the VIP
+              has to be in a different subnet than the one used for the  <b>l</b><b>o</b><b>g</b><b>i</b>‐‐
+              <b>c</b><b>a</b><b>l</b><b>_</b><b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b>.  Since VIP is in a different subnet, you should con‐
+              nect your logical switch to either a OVN  logical  router  or  a
+              real  router  (this  is because the client can now send a packet
+              with VIP as the destination IP address and router’s mac  address
+              as the destination MAC address).
+
+       <b>p</b><b>r</b><b>o</b><b>t</b><b>o</b><b>c</b><b>o</b><b>l</b>: optional string, one of <b>s</b><b>c</b><b>t</b><b>p</b>, <b>t</b><b>c</b><b>p</b>, or <b>u</b><b>d</b><b>p</b>
+              Valid  protocols  are  <b>t</b><b>c</b><b>p</b>,  <b>u</b><b>d</b><b>p</b>, or <b>s</b><b>c</b><b>t</b><b>p</b>. This column is useful
+              when a port number is provided as part of the  <b>v</b><b>i</b><b>p</b><b>s</b>  column.  If
+              this  column  is  empty and a port number is provided as part of
+              <b>v</b><b>i</b><b>p</b><b>s</b> column, OVN assumes the protocol to be <b>t</b><b>c</b><b>p</b>.
+
+     <u>H</u><u>e</u><u>a</u><u>l</u><u>t</u><u>h</u> <u>C</u><u>h</u><u>e</u><u>c</u><u>k</u><u>s</u><u>:</u>
+
+       OVN supports health checks for load  balancer  endpoints.  When  health
+       checks are enabled, the load balancer uses only healthy endpoints.
+
+       Suppose      that      <b>v</b><b>i</b><b>p</b><b>s</b>      contains      a     key-value     pair
+       <b>1</b><b>0</b><b>.</b><b>0</b><b>.</b><b>0</b><b>.</b><b>1</b><b>0</b><b>:</b><b>8</b><b>0</b>=<b>1</b><b>0</b><b>.</b><b>0</b><b>.</b><b>0</b><b>.</b><b>4</b><b>:</b><b>8</b><b>0</b><b>8</b><b>0</b><b>,</b><b>2</b><b>0</b><b>.</b><b>0</b><b>.</b><b>0</b><b>.</b><b>4</b><b>:</b><b>8</b><b>0</b><b>8</b><b>0</b>. To enable health  checks  for
+       this  virtual’s endpoints, add two key-value pairs to <b>i</b><b>p</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b><b>_</b><b>m</b><b>a</b><b>p</b><b>p</b><b>i</b><b>n</b><b>g</b><b>s</b>,
+       with keys <b>1</b><b>0</b><b>.</b><b>0</b><b>.</b><b>0</b><b>.</b><b>4</b> and <b>2</b><b>0</b><b>.</b><b>0</b><b>.</b><b>0</b><b>.</b><b>4</b>, and add to <b>h</b><b>e</b><b>a</b><b>l</b><b>t</b><b>h</b><b>_</b><b>c</b><b>h</b><b>e</b><b>c</b><b>k</b> a reference to
+       a <b>L</b><b>o</b><b>a</b><b>d</b><b>_</b><b>B</b><b>a</b><b>l</b><b>a</b><b>n</b><b>c</b><b>e</b><b>r</b><b>_</b><b>H</b><b>e</b><b>a</b><b>l</b><b>t</b><b>h</b><b>_</b><b>C</b><b>h</b><b>e</b><b>c</b><b>k</b> row whose <b>v</b><b>i</b><b>p</b> is  set  to  <b>1</b><b>0</b><b>.</b><b>0</b><b>.</b><b>0</b><b>.</b><b>1</b><b>0</b>.  The
+       same approach can be used for IPv6 as well.
+
+       <b>h</b><b>e</b><b>a</b><b>l</b><b>t</b><b>h</b><b>_</b><b>c</b><b>h</b><b>e</b><b>c</b><b>k</b>: set of <b>L</b><b>o</b><b>a</b><b>d</b><b>_</b><b>B</b><b>a</b><b>l</b><b>a</b><b>n</b><b>c</b><b>e</b><b>r</b><b>_</b><b>H</b><b>e</b><b>a</b><b>l</b><b>t</b><b>h</b><b>_</b><b>C</b><b>h</b><b>e</b><b>c</b><b>k</b>s
+              Load balancer health checks associated with this load balancer.
+
+       <b>i</b><b>p</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b><b>_</b><b>m</b><b>a</b><b>p</b><b>p</b><b>i</b><b>n</b><b>g</b><b>s</b>: map of string-string pairs
+              Maps  from endpoint IP to a colon-separated pair of logical port
+              name and source IP, e.g.  <u>p</u><u>o</u><u>r</u><u>t</u><b>_</b><u>n</u><u>a</u><u>m</u><u>e</u><b>:</b><u>s</u><u>o</u><u>u</u><u>r</u><u>c</u><b>_</b><u>i</u><u>p</u>  for  IPv4.  Health
+              checks  are  sent to this port with the specified source IP. For
+              IPv6 square brackets  must  be  used  around  IP  address,  e.g:
+              <u>p</u><u>o</u><u>r</u><u>t</u><b>_</b><u>n</u><u>a</u><u>m</u><u>e</u><b>:</b><u>[</u><u>s</u><u>o</u><u>u</u><u>r</u><u>c</u><b>_</b><u>i</u><u>p</u><u>]</u>
+
+              For  example, in the example above, IP to port mappings might be
+              defined         as         <b>1</b><b>0</b><b>.</b><b>0</b><b>.</b><b>0</b><b>.</b><b>4</b>=<b>s</b><b>w</b><b>0</b><b>-</b><b>p</b><b>1</b><b>:</b><b>1</b><b>0</b><b>.</b><b>0</b><b>.</b><b>0</b><b>.</b><b>2</b>          and
+              <b>2</b><b>0</b><b>.</b><b>0</b><b>.</b><b>0</b><b>.</b><b>4</b>=<b>s</b><b>w</b><b>1</b><b>-</b><b>p</b><b>1</b><b>:</b><b>2</b><b>0</b><b>.</b><b>0</b><b>.</b><b>0</b><b>.</b><b>2</b>,  if  the  values  given  were suitable
+              ports and IP addresses.
+
+              For  IPv6  IP   to   port   mappings   might   be   defined   as
+              <b>[</b><b>2</b><b>0</b><b>0</b><b>1</b><b>:</b><b>:</b><b>1</b><b>]</b>=<b>s</b><b>w</b><b>0</b><b>-</b><b>p</b><b>1</b><b>:</b><b>[</b><b>2</b><b>0</b><b>0</b><b>2</b><b>:</b><b>:</b><b>1</b><b>]</b>.
+
+       <b>s</b><b>e</b><b>l</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b><b>_</b><b>f</b><b>i</b><b>e</b><b>l</b><b>d</b><b>s</b>: set of strings, one of <b>e</b><b>t</b><b>h</b><b>_</b><b>d</b><b>s</b><b>t</b>, <b>e</b><b>t</b><b>h</b><b>_</b><b>s</b><b>r</b><b>c</b>, <b>i</b><b>p</b><b>_</b><b>d</b><b>s</b><b>t</b>,
+       <b>i</b><b>p</b><b>_</b><b>s</b><b>r</b><b>c</b>, <b>t</b><b>p</b><b>_</b><b>d</b><b>s</b><b>t</b>, or <b>t</b><b>p</b><b>_</b><b>s</b><b>r</b><b>c</b>
+              OVN  native  load  balancers  are  supported  using the OpenFlow
+              groups of type  <b>s</b><b>e</b><b>l</b><b>e</b><b>c</b><b>t</b>.  OVS  supports  two  selection  methods:
+              <b>d</b><b>p</b><b>_</b><b>h</b><b>a</b><b>s</b><b>h</b>  and  <b>h</b><b>a</b><b>s</b><b>h</b> <b>(</b><b>w</b><b>i</b><b>t</b><b>h</b> <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>a</b><b>l</b> <b>f</b><b>i</b><b>e</b><b>l</b><b>d</b><b>s</b> <b>s</b><b>p</b><b>e</b><b>c</b><b>i</b><b>f</b><b>i</b><b>e</b><b>d</b><b>)</b> in selecting
+              the buckets of a group. Please see the  OVS  documentation  (man
+              ovs-ofctl)  for more details on the selection methods. Each end‐
+              point IP (and port if set) is mapped to a bucket  in  the  group
+              flow.
+
+              CMS  can  choose the <b>h</b><b>a</b><b>s</b><b>h</b> selection method by setting the selec‐
+              tion fields in this  column.  <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>d</b>  uses  the  specified
+              fields in generating the hash.
+
+              <b>d</b><b>p</b><b>_</b><b>h</b><b>a</b><b>s</b><b>h</b> selection method uses the assistance of datapath to cal‐
+              culate the hash and it is expected to be faster than <b>h</b><b>a</b><b>s</b><b>h</b> selec‐
+              tion  method.  So CMS should take this into consideration before
+              using the <b>h</b><b>a</b><b>s</b><b>h</b> method. Please consult the OVS documentation  and
+              OVS sources for the implementation details.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+              See <b>E</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> <b>I</b><b>D</b><b>s</b> at the beginning of this document.
+
+     <u>L</u><u>o</u><u>a</u><u>d</u><b>_</b><u>B</u><u>a</u><u>l</u><u>a</u><u>n</u><u>c</u><u>e</u><u>r</u> <u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>r</b><b>e</b><b>j</b><b>e</b><b>c</b><b>t</b>: optional string, either <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+              If  the load balancer is created with <b>-</b><b>-</b><b>r</b><b>e</b><b>j</b><b>e</b><b>c</b><b>t</b> option and it has
+              no active backends, a TCP reset segment (for  tcp)  or  an  ICMP
+              port  unreachable packet (for all other kind of traffic) will be
+              sent whenever an incoming packet is received for this  load-bal‐
+              ancer.  Please  note using <b>-</b><b>-</b><b>r</b><b>e</b><b>j</b><b>e</b><b>c</b><b>t</b> option will disable empty_lb
+              SB controller event for this load balancer.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>h</b><b>a</b><b>i</b><b>r</b><b>p</b><b>i</b><b>n</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>_</b><b>i</b><b>p</b>: optional string
+              IP to be used as source IP for  packets  that  have  been  hair-
+              pinned  after  load balancing. The default behavior when the op‐
+              tion is not set is to use the load balancer VIP  as  source  IP.
+              This option may have exactly one IPv4 and/or one IPv6 address on
+              it, separated by a space character.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>s</b><b>k</b><b>i</b><b>p</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b>: optional string
+              If  the load balancing rule is configured with <b>s</b><b>k</b><b>i</b><b>p</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b> option,
+              the option lb_force_snat_ip configured for  the  logical  router
+              that  references this load balancer will not be applied for this
+              load balancer.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>a</b><b>d</b><b>d</b><b>_</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b>: optional string
+              If set to <b>t</b><b>r</b><b>u</b><b>e</b>, then neighbor routers will  have  logical  flows
+              added  that  will  allow for routing to the VIP IP. It also will
+              have ARP resolution logical flows added. By setting this option,
+              it means there is no  reason  to  create  a  <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>S</b><b>t</b><b>a</b>‐‐
+              <b>t</b><b>i</b><b>c</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b>  from  neighbor  routers  to this NAT address. It also
+              means that no ARP request is required for  neighbor  routers  to
+              learn  the  IP-MAC mapping for this VIP IP. For more information
+              about what flows  are  added  for  IP  routes,  please  see  the
+              <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> manpage section on IP Routing.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>n</b><b>e</b><b>i</b><b>g</b><b>h</b><b>b</b><b>o</b><b>r</b><b>_</b><b>r</b><b>e</b><b>s</b><b>p</b><b>o</b><b>n</b><b>d</b><b>e</b><b>r</b>: optional string
+              If  set  to  <b>a</b><b>l</b><b>l</b>, then routers on which the load balancer is ap‐
+              plied reply to ARP/neighbor discovery requests for all  VIPs  of
+              the  load  balancer.  If set to <b>r</b><b>e</b><b>a</b><b>c</b><b>h</b><b>a</b><b>b</b><b>l</b><b>e</b>, then routers on which
+              the load balancer is applied reply to ARP/neighbor discovery re‐
+              quests only for VIPs that are part of a router’s subnet. If  set
+              to  <b>n</b><b>o</b><b>n</b><b>e</b>,  then  routers  on  which the load balancer is applied
+              never reply to ARP/neighbor discovery requests for  any  of  the
+              load balancer VIPs. Load balancers with <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>t</b><b>e</b><b>m</b><b>p</b><b>l</b><b>a</b><b>t</b><b>e</b><b>=</b><b>t</b><b>r</b><b>u</b><b>e</b> do
+              not support <b>r</b><b>e</b><b>a</b><b>c</b><b>h</b><b>a</b><b>b</b><b>l</b><b>e</b> as a valid mode. The default value of this
+              option,  if  not  specified,  is <b>r</b><b>e</b><b>a</b><b>c</b><b>h</b><b>a</b><b>b</b><b>l</b><b>e</b> for regular load bal‐
+              ancers and <b>n</b><b>o</b><b>n</b><b>e</b> for template load balancers.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>t</b><b>e</b><b>m</b><b>p</b><b>l</b><b>a</b><b>t</b><b>e</b>: optional string
+              Option to be set to <b>t</b><b>r</b><b>u</b><b>e</b>, if the load balancer  is  a  template.
+              The  load  balancer VIPs and backends must be using <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>T</b><b>e</b><b>m</b>‐‐
+              <b>p</b><b>l</b><b>a</b><b>t</b><b>e</b><b>_</b><b>V</b><b>a</b><b>r</b> in their definitions.
+
+              Load balancer template VIP supported formats are:
+
+              <b>^</b><b>V</b><b>I</b><b>P</b><b>_</b><b>V</b><b>A</b><b>R</b><b>[</b><b>:</b><b>^</b><b>P</b><b>O</b><b>R</b><b>T</b><b>_</b><b>V</b><b>A</b><b>R</b><b>|</b><b>:</b><b>p</b><b>o</b><b>r</b><b>t</b><b>]</b>
+
+
+              where <b>V</b><b>I</b><b>P</b><b>_</b><b>V</b><b>A</b><b>R</b> and <b>P</b><b>O</b><b>R</b><b>T</b><b>_</b><b>V</b><b>A</b><b>R</b> are keys of the  <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>T</b><b>e</b><b>m</b><b>p</b><b>l</b><b>a</b><b>t</b><b>e</b><b>_</b><b>V</b><b>a</b><b>r</b>
+              <b>v</b><b>a</b><b>r</b><b>i</b><b>a</b><b>b</b><b>l</b><b>e</b><b>s</b> records.
+
+              Note: The VIP and PORT cannot be combined into a single template
+              variable. For example, a <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>T</b><b>e</b><b>m</b><b>p</b><b>l</b><b>a</b><b>t</b><b>e</b><b>_</b><b>V</b><b>a</b><b>r</b> variable expanding
+              to <b>1</b><b>0</b><b>.</b><b>0</b><b>.</b><b>0</b><b>.</b><b>1</b><b>:</b><b>8</b><b>0</b><b>8</b><b>0</b> is not valid if used as VIP.
+
+              Load balancer template backend supported formats are:
+
+              <b>^</b><b>B</b><b>A</b><b>C</b><b>K</b><b>E</b><b>N</b><b>D</b><b>_</b><b>V</b><b>A</b><b>R</b><b>1</b><b>[</b><b>:</b><b>^</b><b>P</b><b>O</b><b>R</b><b>T</b><b>_</b><b>V</b><b>A</b><b>R</b><b>1</b><b>|</b><b>:</b><b>p</b><b>o</b><b>r</b><b>t</b><b>]</b><b>,</b><b>^</b><b>B</b><b>A</b><b>C</b><b>K</b><b>E</b><b>N</b><b>D</b><b>_</b><b>V</b><b>A</b><b>R</b><b>2</b><b>[</b><b>:</b><b>^</b><b>P</b><b>O</b><b>R</b><b>T</b><b>_</b><b>V</b><b>A</b><b>R</b><b>2</b><b>|</b><b>:</b><b>p</b><b>o</b><b>r</b><b>t</b><b>]</b>
+              <b>o</b><b>r</b>
+              <b>^</b><b>B</b><b>A</b><b>C</b><b>K</b><b>E</b><b>N</b><b>D</b><b>S</b><b>_</b><b>V</b><b>A</b><b>R</b><b>1</b><b>,</b><b>^</b><b>B</b><b>A</b><b>C</b><b>K</b><b>E</b><b>N</b><b>D</b><b>S</b><b>_</b><b>V</b><b>A</b><b>R</b><b>2</b>
+
+
+              where  <b>B</b><b>A</b><b>C</b><b>K</b><b>E</b><b>N</b><b>D</b><b>_</b><b>V</b><b>A</b><b>R</b><b>1</b>,  <b>P</b><b>O</b><b>R</b><b>T</b><b>_</b><b>V</b><b>A</b><b>R</b><b>1</b>,  <b>B</b><b>A</b><b>C</b><b>K</b><b>E</b><b>N</b><b>D</b><b>_</b><b>V</b><b>A</b><b>R</b><b>2</b>, <b>P</b><b>O</b><b>R</b><b>T</b><b>_</b><b>V</b><b>A</b><b>R</b><b>2</b>, <b>B</b><b>A</b><b>C</b><b>K</b>‐‐
+              <b>E</b><b>N</b><b>D</b><b>S</b><b>_</b><b>V</b><b>A</b><b>R</b><b>1</b> and <b>B</b><b>A</b><b>C</b><b>K</b><b>E</b><b>N</b><b>D</b><b>S</b><b>_</b><b>V</b><b>A</b><b>R</b><b>2</b> are keys of the <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>T</b><b>e</b><b>m</b><b>p</b><b>l</b><b>a</b><b>t</b><b>e</b><b>_</b><b>V</b><b>a</b><b>r</b>
+              <b>v</b><b>a</b><b>r</b><b>i</b><b>a</b><b>b</b><b>l</b><b>e</b><b>s</b> records.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>-</b><b>f</b><b>a</b><b>m</b><b>i</b><b>l</b><b>y</b>: optional string
+              Address family used by the load balancer. Supported  values  are
+              <b>i</b><b>p</b><b>v</b><b>4</b>  and  <b>i</b><b>p</b><b>v</b><b>6</b>.  The  address-family is only used for load bal‐
+              ancers with <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>t</b><b>e</b><b>m</b><b>p</b><b>l</b><b>a</b><b>t</b><b>e</b><b>=</b><b>t</b><b>r</b><b>u</b><b>e</b>. For explicit load  balancers,
+              setting the address-family has no effect.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>a</b><b>f</b><b>f</b><b>i</b><b>n</b><b>i</b><b>t</b><b>y</b><b>_</b><b>t</b><b>i</b><b>m</b><b>e</b><b>o</b><b>u</b><b>t</b>: optional string
+              If  the  CMS  provides  a positive value (in seconds) for <b>a</b><b>f</b><b>f</b><b>i</b><b>n</b>‐‐
+              <b>i</b><b>t</b><b>y</b><b>_</b><b>t</b><b>i</b><b>m</b><b>e</b><b>o</b><b>u</b><b>t</b>, OVN will dnat connections received  from  the  same
+              client  to this lb to the same backend if received in the affin‐
+              ity timeslot. Max supported affinity_timeout is 65535 seconds.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>c</b><b>t</b><b>_</b><b>f</b><b>l</b><b>u</b><b>s</b><b>h</b>: optional string, either <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+              The value indicates whether ovn-controller should flush  CT  en‐
+              tries  that  are related to this LB. The flush happens if the LB
+              is removed, any of the backends is updated/removed or the LB  is
+              not  considered local anymore by the ovn-controller. This option
+              is set to <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b> by default.
+
+<b>L</b><b>o</b><b>a</b><b>d</b><b>_</b><b>B</b><b>a</b><b>l</b><b>a</b><b>n</b><b>c</b><b>e</b><b>r</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Each row represents a logical grouping of load balancers. It is  up  to
+       the  CMS to decide the criteria on which load balancers are grouped to‐
+       gether. To simplify configuration and to optimize its  processing  load
+       balancers  that  must be associated to the same set of logical switches
+       and/or logical routers should be grouped together.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>                          string (must be unique within table)
+       <b>l</b><b>o</b><b>a</b><b>d</b><b>_</b><b>b</b><b>a</b><b>l</b><b>a</b><b>n</b><b>c</b><b>e</b><b>r</b>                 set of weak reference to <b>L</b><b>o</b><b>a</b><b>d</b><b>_</b><b>B</b><b>a</b><b>l</b><b>a</b><b>n</b><b>c</b><b>e</b><b>r</b>s
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>: string (must be unique within table)
+              A name for the load balancer group. This  name  has  no  special
+              meaning  or  purpose other than to provide convenience for human
+              interaction with the ovn-nb database.
+
+       <b>l</b><b>o</b><b>a</b><b>d</b><b>_</b><b>b</b><b>a</b><b>l</b><b>a</b><b>n</b><b>c</b><b>e</b><b>r</b>: set of weak reference to <b>L</b><b>o</b><b>a</b><b>d</b><b>_</b><b>B</b><b>a</b><b>l</b><b>a</b><b>n</b><b>c</b><b>e</b><b>r</b>s
+              A set of load balancers.
+
+<b>L</b><b>o</b><b>a</b><b>d</b><b>_</b><b>B</b><b>a</b><b>l</b><b>a</b><b>n</b><b>c</b><b>e</b><b>r</b><b>_</b><b>H</b><b>e</b><b>a</b><b>l</b><b>t</b><b>h</b><b>_</b><b>C</b><b>h</b><b>e</b><b>c</b><b>k</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Each row represents one load balancer health check.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>v</b><b>i</b><b>p</b>                           string
+       <u>H</u><u>e</u><u>a</u><u>l</u><u>t</u><u>h</u> <u>c</u><u>h</u><u>e</u><u>c</u><u>k</u> <u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>i</b><b>n</b><b>t</b><b>e</b><b>r</b><b>v</b><b>a</b><b>l</b>          optional string, containing an integer
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>t</b><b>i</b><b>m</b><b>e</b><b>o</b><b>u</b><b>t</b>           optional string, containing an integer
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>s</b><b>u</b><b>c</b><b>c</b><b>e</b><b>s</b><b>s</b><b>_</b><b>c</b><b>o</b><b>u</b><b>n</b><b>t</b>     optional string, containing an integer
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>f</b><b>a</b><b>i</b><b>l</b><b>u</b><b>r</b><b>e</b><b>_</b><b>c</b><b>o</b><b>u</b><b>n</b><b>t</b>     optional string, containing an integer
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>v</b><b>i</b><b>p</b>: string
+              <b>v</b><b>i</b><b>p</b> whose endpoints should be monitored for health check.
+
+     <u>H</u><u>e</u><u>a</u><u>l</u><u>t</u><u>h</u> <u>c</u><u>h</u><u>e</u><u>c</u><u>k</u> <u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>i</b><b>n</b><b>t</b><b>e</b><b>r</b><b>v</b><b>a</b><b>l</b>: optional string, containing an integer
+              The interval, in seconds, between health checks.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>t</b><b>i</b><b>m</b><b>e</b><b>o</b><b>u</b><b>t</b>: optional string, containing an integer
+              The time, in seconds, after which a health check times out.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>s</b><b>u</b><b>c</b><b>c</b><b>e</b><b>s</b><b>s</b><b>_</b><b>c</b><b>o</b><b>u</b><b>n</b><b>t</b>: optional string, containing an integer
+              The number of successful checks after which the endpoint is con‐
+              sidered online.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>f</b><b>a</b><b>i</b><b>l</b><b>u</b><b>r</b><b>e</b><b>_</b><b>c</b><b>o</b><b>u</b><b>n</b><b>t</b>: optional string, containing an integer
+              The number of failure checks after which the endpoint is consid‐
+              ered offline.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+              See <b>E</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> <b>I</b><b>D</b><b>s</b> at the beginning of this document.
+
+<b>A</b><b>C</b><b>L</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Each row in this table represents one ACL rule for a logical switch  or
+       a port group that points to it through its <b>a</b><b>c</b><b>l</b><b>s</b> column. The <b>a</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b> col‐
+       umn  for  the  highest-<b>p</b><b>r</b><b>i</b><b>o</b><b>r</b><b>i</b><b>t</b><b>y</b> matching row in this table determines a
+       packet’s treatment. If no row matches, packets are allowed by  default.
+       (Default-deny  treatment  is possible: add a rule with <b>p</b><b>r</b><b>i</b><b>o</b><b>r</b><b>i</b><b>t</b><b>y</b> 0, <b>1</b> as
+       <b>m</b><b>a</b><b>t</b><b>c</b><b>h</b>, and <b>d</b><b>e</b><b>n</b><b>y</b> as <b>a</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>.)
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>l</b><b>a</b><b>b</b><b>e</b><b>l</b>                         integer, in range 0 to 4,294,967,295
+       <b>p</b><b>r</b><b>i</b><b>o</b><b>r</b><b>i</b><b>t</b><b>y</b>                      integer, in range 0 to 32,767
+       <b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>                     string, either <b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b> or <b>t</b><b>o</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b>
+       <b>m</b><b>a</b><b>t</b><b>c</b><b>h</b>                         string
+       <b>a</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>                        string,   one   of   <b>a</b><b>l</b><b>l</b><b>o</b><b>w</b><b>-</b><b>r</b><b>e</b><b>l</b><b>a</b><b>t</b><b>e</b><b>d</b>,   <b>a</b><b>l</b>‐‐
+                                     <b>l</b><b>o</b><b>w</b><b>-</b><b>s</b><b>t</b><b>a</b><b>t</b><b>e</b><b>l</b><b>e</b><b>s</b><b>s</b>,  <b>a</b><b>l</b><b>l</b><b>o</b><b>w</b>, <b>d</b><b>r</b><b>o</b><b>p</b>, <b>p</b><b>a</b><b>s</b><b>s</b>, or <b>r</b><b>e</b>‐‐
+                                     <b>j</b><b>e</b><b>c</b><b>t</b>
+       <b>t</b><b>i</b><b>e</b><b>r</b>                          integer, in range 0 to 3
+       <u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>a</b><b>p</b><b>p</b><b>l</b><b>y</b><b>-</b><b>a</b><b>f</b><b>t</b><b>e</b><b>r</b><b>-</b><b>l</b><b>b</b>    optional string
+       <u>L</u><u>o</u><u>g</u><u>g</u><u>i</u><u>n</u><u>g</u><u>:</u>
+         <b>l</b><b>o</b><b>g</b>                         boolean
+         <b>n</b><b>a</b><b>m</b><b>e</b>                        optional string, at  most  63  characters
+                                     long
+         <b>s</b><b>e</b><b>v</b><b>e</b><b>r</b><b>i</b><b>t</b><b>y</b>                    optional  string,  one  of  <b>a</b><b>l</b><b>e</b><b>r</b><b>t</b>, <b>d</b><b>e</b><b>b</b><b>u</b><b>g</b>,
+                                     <b>i</b><b>n</b><b>f</b><b>o</b>, <b>n</b><b>o</b><b>t</b><b>i</b><b>c</b><b>e</b>, or <b>w</b><b>a</b><b>r</b><b>n</b><b>i</b><b>n</b><b>g</b>
+         <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b>                       optional string
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>                     map of string-string pairs
+         <u>A</u><u>C</u><u>L</u> <u>c</u><u>o</u><u>n</u><u>f</u><u>i</u><u>g</u><u>u</u><u>r</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u> <u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>l</b><b>o</b><b>g</b><b>-</b><b>r</b><b>e</b><b>l</b><b>a</b><b>t</b><b>e</b><b>d</b>    optional string
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>l</b><b>a</b><b>b</b><b>e</b><b>l</b>: integer, in range 0 to 4,294,967,295
+              Associates an identifier with the ACL. The same  value  will  be
+              written  to  corresponding  connection  tracker entry. The value
+              should be a valid 32-bit unsigned integer. This value  can  help
+              in  debugging from connection tracker side. For example, through
+              this "label" we can backtrack to the ACL rule which is causing a
+              "leaked" connection. Connection tracker entries are created only
+              for allowed connections so the label is valid only for allow and
+              allow-related actions.
+
+       <b>p</b><b>r</b><b>i</b><b>o</b><b>r</b><b>i</b><b>t</b><b>y</b>: integer, in range 0 to 32,767
+              The ACL rule’s priority. Rules with numerically higher  priority
+              take precedence over those with lower. If two ACL rules with the
+              same  priority  both  match,  then the one actually applied to a
+              packet is undefined.
+
+              Return traffic from an <b>a</b><b>l</b><b>l</b><b>o</b><b>w</b><b>-</b><b>r</b><b>e</b><b>l</b><b>a</b><b>t</b><b>e</b><b>d</b> flow is always allowed  and
+              cannot be changed through an ACL.
+
+              <b>a</b><b>l</b><b>l</b><b>o</b><b>w</b><b>-</b><b>s</b><b>t</b><b>a</b><b>t</b><b>e</b><b>l</b><b>e</b><b>s</b><b>s</b>  flows  always  take  precedence before stateful
+              ACLs, regardless of their priority. (Both  <b>a</b><b>l</b><b>l</b><b>o</b><b>w</b>  and  <b>a</b><b>l</b><b>l</b><b>o</b><b>w</b><b>-</b><b>r</b><b>e</b>‐‐
+              <b>l</b><b>a</b><b>t</b><b>e</b><b>d</b> ACLs can be stateful.)
+
+       <b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>: string, either <b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b> or <b>t</b><b>o</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b>
+              Direction of the traffic to which this rule should apply:
+
+              •      <b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b>: Used to implement filters on traffic arriving
+                     from a logical port. These rules are applied to the logi‐
+                     cal switch’s ingress pipeline.
+
+              •      <b>t</b><b>o</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b>:  Used to implement filters on traffic forwarded
+                     to a logical port. These rules are applied to the logical
+                     switch’s egress pipeline.
+
+       <b>m</b><b>a</b><b>t</b><b>c</b><b>h</b>: string
+              The packets that the ACL should match, in  the  same  expression
+              language  used  for the <b>m</b><b>a</b><b>t</b><b>c</b><b>h</b> column in the OVN Southbound data‐
+              base’s <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>F</b><b>l</b><b>o</b><b>w</b> table. The  <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b>  logical  port  is  only
+              available  in the <b>t</b><b>o</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b> direction (the <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> is available in
+              both directions).
+
+              By default all traffic is allowed. When writing a more  restric‐
+              tive  policy, it is important to remember to allow flows such as
+              ARP and IPv6 neighbor discovery packets.
+
+              Note that you can not create an ACL  matching  on  a  port  with
+              type=router or type=localnet.
+
+       <b>a</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>: string, one of <b>a</b><b>l</b><b>l</b><b>o</b><b>w</b><b>-</b><b>r</b><b>e</b><b>l</b><b>a</b><b>t</b><b>e</b><b>d</b>, <b>a</b><b>l</b><b>l</b><b>o</b><b>w</b><b>-</b><b>s</b><b>t</b><b>a</b><b>t</b><b>e</b><b>l</b><b>e</b><b>s</b><b>s</b>, <b>a</b><b>l</b><b>l</b><b>o</b><b>w</b>, <b>d</b><b>r</b><b>o</b><b>p</b>,
+       <b>p</b><b>a</b><b>s</b><b>s</b>, or <b>r</b><b>e</b><b>j</b><b>e</b><b>c</b><b>t</b>
+              The action to take when the ACL rule matches:
+
+              •      <b>a</b><b>l</b><b>l</b><b>o</b><b>w</b><b>-</b><b>s</b><b>t</b><b>a</b><b>t</b><b>e</b><b>l</b><b>e</b><b>s</b><b>s</b>:  Always  forward the packet in stateless
+                     manner, omitting connection tracking  mechanism,  regard‐
+                     less  of  other rules defined for the switch. May require
+                     defining additional rules for inbound replies. For  exam‐
+                     ple,  if  you define a rule to allow outgoing TCP traffic
+                     directed to an IP address, then you probably also want to
+                     define another rule to allow incoming TCP traffic  coming
+                     from  this  same  IP  address.  In addition, traffic that
+                     matches stateless ACLs will bypass load-balancer DNAT/un-
+                     DNAT processing. Stateful ACLs should be used instead  if
+                     the traffic is supposed to be load-balanced.
+
+              •      <b>a</b><b>l</b><b>l</b><b>o</b><b>w</b>:  Forward the packet. It will also send the packets
+                     through connection tracking when <b>a</b><b>l</b><b>l</b><b>o</b><b>w</b><b>-</b><b>r</b><b>e</b><b>l</b><b>a</b><b>t</b><b>e</b><b>d</b> rules  ex‐
+                     ist  on the logical switch. Otherwise, it’s equivalent to
+                     <b>a</b><b>l</b><b>l</b><b>o</b><b>w</b><b>-</b><b>s</b><b>t</b><b>a</b><b>t</b><b>e</b><b>l</b><b>e</b><b>s</b><b>s</b>.
+
+              •      <b>a</b><b>l</b><b>l</b><b>o</b><b>w</b><b>-</b><b>r</b><b>e</b><b>l</b><b>a</b><b>t</b><b>e</b><b>d</b>: Forward the  packet  and  related  traffic
+                     (e.g. inbound replies to an outbound connection).
+
+              •      <b>d</b><b>r</b><b>o</b><b>p</b>: Silently drop the packet.
+
+              •      <b>r</b><b>e</b><b>j</b><b>e</b><b>c</b><b>t</b>:  Drop  the packet, replying with a RST for TCP or
+                     ICMPv4/ICMPv6    unreachable    message     for     other
+                     IPv4/IPv6-based protocols.
+
+              •      <b>p</b><b>a</b><b>s</b><b>s</b>:  Pass  to  the next ACL tier. If using multiple ACL
+                     tiers, a match on this ACL will stop evaluating  ACLs  at
+                     the  current  tier and move to the next one. If not using
+                     ACL tiers or if a <b>p</b><b>a</b><b>s</b><b>s</b> ACL is matched at the final  tier,
+                     then   the   <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>d</b><b>e</b><b>f</b><b>a</b><b>u</b><b>l</b><b>t</b><b>_</b><b>a</b><b>c</b><b>l</b><b>_</b><b>d</b><b>r</b><b>o</b><b>p</b>   option  from  the
+                     <b>N</b><b>B</b><b>_</b><b>G</b><b>l</b><b>o</b><b>b</b><b>a</b><b>l</b> table is used to determine how to proceed.
+
+       <b>t</b><b>i</b><b>e</b><b>r</b>: integer, in range 0 to 3
+              The hierarchical tier that this ACL belongs to.
+
+              ACLs can be assigned to numerical tiers. When  evaluating  ACLs,
+              an  internal  counter  is  used  to determine which tier of ACLs
+              should be evaluated. Tier 0 ACLs are evaluated first. If no ver‐
+              dict can be determined, then tier 1  ACLs  are  evaluated  next.
+              This  continues  until the maximum tier value is reached. If all
+              tiers of ACLs are evaluated and no verdict is reached, then  the
+              <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>d</b><b>e</b><b>f</b><b>a</b><b>u</b><b>l</b><b>t</b><b>_</b><b>a</b><b>c</b><b>l</b><b>_</b><b>d</b><b>r</b><b>o</b><b>p</b>  option from table <b>N</b><b>B</b><b>_</b><b>G</b><b>l</b><b>o</b><b>b</b><b>a</b><b>l</b> is used to
+              determine how to proceed.
+
+              In this version of OVN, the maximum tier value for  ACLs  is  3,
+              meaning there are 4 tiers of ACLs allowed (0-3).
+
+     <u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       ACLs options.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>a</b><b>p</b><b>p</b><b>l</b><b>y</b><b>-</b><b>a</b><b>f</b><b>t</b><b>e</b><b>r</b><b>-</b><b>l</b><b>b</b>: optional string
+              If  set  to  true,  the ACL will be applied after load balancing
+              stage. Supported only for <b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b> direction.
+
+              The main use case of this option is to support ACLs matching  on
+              the  destination IP address of the packet for the backend IPs of
+              load balancers.
+
+              <b>O</b><b>V</b><b>N</b> will apply the <b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b> ACLs in two stages.  ACLs  without
+              this  option <b>a</b><b>p</b><b>p</b><b>l</b><b>y</b><b>-</b><b>a</b><b>f</b><b>t</b><b>e</b><b>r</b><b>-</b><b>l</b><b>b</b> set, will be applied before the load
+              balancer stage and ACLs with this option set will be applied af‐
+              ter the load balancer stage. The priorities are  indepedent  be‐
+              tween  these stages and may not be obvious to the CMS. Hence CMS
+              should be extra careful when using this option and should  care‐
+              fully  evaluate  the  priorities of all the ACLs and the default
+              deny/allow ACLs if any.
+
+     <u>L</u><u>o</u><u>g</u><u>g</u><u>i</u><u>n</u><u>g</u><u>:</u>
+
+       These columns control whether and how OVN logs packets  that  match  an
+       ACL.
+
+       <b>l</b><b>o</b><b>g</b>: boolean
+              If  set  to  <b>t</b><b>r</b><b>u</b><b>e</b>, packets that match the ACL will trigger a log
+              message on the transport node or nodes that perform ACL process‐
+              ing. Logging may be combined with any <b>a</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>.
+
+              If set to <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>, the remaining columns in  this  group  have  no
+              significance.
+
+       <b>n</b><b>a</b><b>m</b><b>e</b>: optional string, at most 63 characters long
+              This  name,  if  it  is provided, is included in log records. It
+              provides the administrator and the cloud management system a way
+              to associate a log record with a particular ACL.
+
+       <b>s</b><b>e</b><b>v</b><b>e</b><b>r</b><b>i</b><b>t</b><b>y</b>: optional string, one of <b>a</b><b>l</b><b>e</b><b>r</b><b>t</b>, <b>d</b><b>e</b><b>b</b><b>u</b><b>g</b>, <b>i</b><b>n</b><b>f</b><b>o</b>, <b>n</b><b>o</b><b>t</b><b>i</b><b>c</b><b>e</b>, or <b>w</b><b>a</b><b>r</b><b>n</b>‐‐
+       <b>i</b><b>n</b><b>g</b>
+              The severity of the ACL. The severity levels match those of sys‐
+              log, in decreasing level of severity:  <b>a</b><b>l</b><b>e</b><b>r</b><b>t</b>,  <b>w</b><b>a</b><b>r</b><b>n</b><b>i</b><b>n</b><b>g</b>,  <b>n</b><b>o</b><b>t</b><b>i</b><b>c</b><b>e</b>,
+              <b>i</b><b>n</b><b>f</b><b>o</b>, or <b>d</b><b>e</b><b>b</b><b>u</b><b>g</b>. When the column is empty, the default is <b>i</b><b>n</b><b>f</b><b>o</b>.
+
+       <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b>: optional string
+              The  name of a meter to rate-limit log messages for the ACL. The
+              string must match the <b>n</b><b>a</b><b>m</b><b>e</b> column of a row in the  <b>M</b><b>e</b><b>t</b><b>e</b><b>r</b>  table.
+              By  default,  log messages are not rate-limited. In order to en‐
+              sure that the same <b>M</b><b>e</b><b>t</b><b>e</b><b>r</b> rate limits  multiple  ACL  logs  sepa‐
+              rately, set the <b>f</b><b>a</b><b>i</b><b>r</b> column.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>: map of string-string pairs
+              This  column  provides general key/value settings. The supported
+              options are described individually below.
+
+     <u>A</u><u>C</u><u>L</u> <u>c</u><u>o</u><u>n</u><u>f</u><u>i</u><u>g</u><u>u</u><u>r</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u> <u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>l</b><b>o</b><b>g</b><b>-</b><b>r</b><b>e</b><b>l</b><b>a</b><b>t</b><b>e</b><b>d</b>: optional string
+              If set to <b>t</b><b>r</b><b>u</b><b>e</b>, then log when reply or related traffic is admit‐
+              ted from a stateful ACL. In order for this option  to  function,
+              the  <b>l</b><b>o</b><b>g</b> option must be set to <b>t</b><b>r</b><b>u</b><b>e</b> and a <b>l</b><b>a</b><b>b</b><b>e</b><b>l</b> must be set, and
+              it must be unique to the ACL. The label is necessary  as  it  is
+              the  only  means  to associate the reply traffic with the ACL to
+              which it belongs. It must be unique, because otherwise it is am‐
+              biguous which ACL will be matched. Note: If this option  is  en‐
+              abled,  an  extra  flow is installed in order to log the related
+              traffic. Therefore, if this is enabled on all ACLs, then the to‐
+              tal number of flows necessary to log the ACL traffic is doubled,
+              compared to if this option is not enabled.
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+              See <b>E</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> <b>I</b><b>D</b><b>s</b> at the beginning of this document.
+
+<b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Each row represents one L3 logical router.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>p</b><b>o</b><b>r</b><b>t</b><b>s</b>                         set of <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b>s
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>i</b><b>c</b><b>_</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>s</b>                 set of <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>S</b><b>t</b><b>a</b><b>t</b><b>i</b><b>c</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b>s
+       <b>p</b><b>o</b><b>l</b><b>i</b><b>c</b><b>i</b><b>e</b><b>s</b>                      set of <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>P</b><b>o</b><b>l</b><b>i</b><b>c</b><b>y</b>s
+       <b>e</b><b>n</b><b>a</b><b>b</b><b>l</b><b>e</b><b>d</b>                       optional boolean
+       <b>n</b><b>a</b><b>t</b>                           set of <b>N</b><b>A</b><b>T</b>s
+       <b>l</b><b>o</b><b>a</b><b>d</b><b>_</b><b>b</b><b>a</b><b>l</b><b>a</b><b>n</b><b>c</b><b>e</b><b>r</b>                 set of weak reference to <b>L</b><b>o</b><b>a</b><b>d</b><b>_</b><b>B</b><b>a</b><b>l</b><b>a</b><b>n</b><b>c</b><b>e</b><b>r</b>s
+       <b>l</b><b>o</b><b>a</b><b>d</b><b>_</b><b>b</b><b>a</b><b>l</b><b>a</b><b>n</b><b>c</b><b>e</b><b>r</b><b>_</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b>           set of <b>L</b><b>o</b><b>a</b><b>d</b><b>_</b><b>B</b><b>a</b><b>l</b><b>a</b><b>n</b><b>c</b><b>e</b><b>r</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b>s
+       <u>N</u><u>a</u><u>m</u><u>i</u><u>n</u><u>g</u><u>:</u>
+         <b>n</b><b>a</b><b>m</b><b>e</b>                        string
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b> <b>:</b> <b>n</b><b>e</b><b>u</b><b>t</b><b>r</b><b>o</b><b>n</b><b>:</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b>
+                                     optional string
+       <b>c</b><b>o</b><b>p</b><b>p</b>                          optional weak reference to <b>C</b><b>o</b><b>p</b><b>p</b>
+       <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>           optional string
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>d</b><b>n</b><b>a</b><b>t</b><b>_</b><b>f</b><b>o</b><b>r</b><b>c</b><b>e</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>_</b><b>i</b><b>p</b>
+                                     optional string
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>l</b><b>b</b><b>_</b><b>f</b><b>o</b><b>r</b><b>c</b><b>e</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>_</b><b>i</b><b>p</b>  optional string
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>r</b><b>e</b><b>l</b><b>a</b><b>y</b>       optional string, either <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>d</b><b>y</b><b>n</b><b>a</b><b>m</b><b>i</b><b>c</b><b>_</b><b>n</b><b>e</b><b>i</b><b>g</b><b>h</b><b>_</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>s</b>
+                                     optional string, either <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>a</b><b>l</b><b>w</b><b>a</b><b>y</b><b>s</b><b>_</b><b>l</b><b>e</b><b>a</b><b>r</b><b>n</b><b>_</b><b>f</b><b>r</b><b>o</b><b>m</b><b>_</b><b>a</b><b>r</b><b>p</b><b>_</b><b>r</b><b>e</b><b>q</b><b>u</b><b>e</b><b>s</b><b>t</b>
+                                     optional string, either <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>r</b><b>e</b><b>q</b><b>u</b><b>e</b><b>s</b><b>t</b><b>e</b><b>d</b><b>-</b><b>t</b><b>n</b><b>l</b><b>-</b><b>k</b><b>e</b><b>y</b>
+                                     optional string, containing  an  integer,
+                                     in range 1 to 16,777,215
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>s</b><b>n</b><b>a</b><b>t</b><b>-</b><b>c</b><b>t</b><b>-</b><b>z</b><b>o</b><b>n</b><b>e</b>      optional  string,  containing an integer,
+                                     in range 0 to 65,535
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>m</b><b>a</b><b>c</b><b>_</b><b>b</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b><b>_</b><b>a</b><b>g</b><b>e</b><b>_</b><b>t</b><b>h</b><b>r</b><b>e</b><b>s</b><b>h</b><b>o</b><b>l</b><b>d</b>
+                                     optional string, containing  an  integer,
+                                     in range 0 to 4,294,967,295
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>p</b><b>o</b><b>r</b><b>t</b><b>s</b>: set of <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b>s
+              The router’s ports.
+
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>i</b><b>c</b><b>_</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>s</b>: set of <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>S</b><b>t</b><b>a</b><b>t</b><b>i</b><b>c</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b>s
+              Zero or more static routes for the router.
+
+       <b>p</b><b>o</b><b>l</b><b>i</b><b>c</b><b>i</b><b>e</b><b>s</b>: set of <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>P</b><b>o</b><b>l</b><b>i</b><b>c</b><b>y</b>s
+              Zero or more routing policies for the router.
+
+       <b>e</b><b>n</b><b>a</b><b>b</b><b>l</b><b>e</b><b>d</b>: optional boolean
+              This  column  is  used  to administratively set router state. If
+              this column is empty or is set to <b>t</b><b>r</b><b>u</b><b>e</b>, the router  is  enabled.
+              If  this  column is set to <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>, the router is disabled. A dis‐
+              abled router has all ingress and egress traffic dropped.
+
+       <b>n</b><b>a</b><b>t</b>: set of <b>N</b><b>A</b><b>T</b>s
+              One or more NAT rules for the router. NAT  rules  only  work  on
+              Gateway  routers,  and  on distributed routers with one and only
+              one distributed gateway port.
+
+       <b>l</b><b>o</b><b>a</b><b>d</b><b>_</b><b>b</b><b>a</b><b>l</b><b>a</b><b>n</b><b>c</b><b>e</b><b>r</b>: set of weak reference to <b>L</b><b>o</b><b>a</b><b>d</b><b>_</b><b>B</b><b>a</b><b>l</b><b>a</b><b>n</b><b>c</b><b>e</b><b>r</b>s
+              Set of load balancers associated to this  logical  router.  Load
+              balancer Load balancer rules only work on the Gateway routers or
+              routers with one and only one distributed gateway port.
+
+       <b>l</b><b>o</b><b>a</b><b>d</b><b>_</b><b>b</b><b>a</b><b>l</b><b>a</b><b>n</b><b>c</b><b>e</b><b>r</b><b>_</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b>: set of <b>L</b><b>o</b><b>a</b><b>d</b><b>_</b><b>B</b><b>a</b><b>l</b><b>a</b><b>n</b><b>c</b><b>e</b><b>r</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b>s
+              Set of load balancers groups associated to this logical router.
+
+     <u>N</u><u>a</u><u>m</u><u>i</u><u>n</u><u>g</u><u>:</u>
+
+       These columns provide names for the logical router. From OVN’s perspec‐
+       tive, these names have no special meaning or purpose other than to pro‐
+       vide  convenience  for  human interaction with the northbound database.
+       There is no requirement for the name to be unique. (For a unique  iden‐
+       tifier for a logical router, use its row UUID.)
+
+       (Originally, <b>n</b><b>a</b><b>m</b><b>e</b> was intended to serve the purpose of a human-friendly
+       name,  but the Neutron integration used it to uniquely identify its own
+       router object, in the format <b>n</b><b>e</b><b>u</b><b>t</b><b>r</b><b>o</b><b>n</b><b>-</b><u>u</u><u>u</u><u>i</u><u>d</u>. Later  on,  Neutron  started
+       propagating   the  friendly  name  of  a  router  as  <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>n</b><b>e</b><b>u</b>‐‐
+       <b>t</b><b>r</b><b>o</b><b>n</b><b>:</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b>. Perhaps this can be cleaned up someday.)
+
+       <b>n</b><b>a</b><b>m</b><b>e</b>: string
+              A name for the logical router.
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b> <b>:</b> <b>n</b><b>e</b><b>u</b><b>t</b><b>r</b><b>o</b><b>n</b><b>:</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b>: optional string
+              Another name for the logical router.
+
+       <b>c</b><b>o</b><b>p</b><b>p</b>: optional weak reference to <b>C</b><b>o</b><b>p</b><b>p</b>
+              The control plane protection policy from table <b>C</b><b>o</b><b>p</b><b>p</b> used for me‐
+              tering packets sent to <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> from logical ports of this
+              router.
+
+     <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       Additional options for the logical router.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>: optional string
+              If set, indicates that the logical router in question is a Gate‐
+              way router (which is centralized) and resides in the  set  chas‐
+              sis.  The  same value is also used by <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> to uniquely
+              identify the chassis in the OVN deployment and comes from <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b>‐‐
+              <b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>s</b><b>y</b><b>s</b><b>t</b><b>e</b><b>m</b><b>-</b><b>i</b><b>d</b> in  the  <b>O</b><b>p</b><b>e</b><b>n</b><b>_</b><b>v</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b>  table  of  Open_vSwitch
+              database.
+
+              The Gateway router can only be connected to a distributed router
+              via  a switch if SNAT and DNAT are to be configured in the Gate‐
+              way router.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>d</b><b>n</b><b>a</b><b>t</b><b>_</b><b>f</b><b>o</b><b>r</b><b>c</b><b>e</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>_</b><b>i</b><b>p</b>: optional string
+              If set, indicates a set of IP addresses to use to force  SNAT  a
+              packet  that has already been DNATed in the gateway router. When
+              multiple gateway routers are configured,  a  packet  can  poten‐
+              tially  enter any of the gateway router, get DNATted and eventu‐
+              ally reach the logical switch port. For the return traffic to go
+              back to the same gateway  router  (for  unDNATing),  the  packet
+              needs a SNAT in the first place. This can be achieved by setting
+              the  above  option  with a gateway specific set of IP addresses.
+              This option may have exactly one IPv4 and/or one IPv6 address on
+              it, separated by a a space.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>l</b><b>b</b><b>_</b><b>f</b><b>o</b><b>r</b><b>c</b><b>e</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>_</b><b>i</b><b>p</b>: optional string
+              If set, this option can take two possible type of values. Either
+              a set of IP addresses or the string value - <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>i</b><b>p</b>.
+
+              If a set of IP addresses are configured, it indicates to use  to
+              force  SNAT  a packet that has already been load-balanced in the
+              gateway router. When multiple gateway routers are configured,  a
+              packet  can  potentially  enter  any of the gateway routers, get
+              DNATted as part of the load-balancing and eventually  reach  the
+              logical  switch  port.  For the return traffic to go back to the
+              same gateway router (for unDNATing), the packet needs a SNAT  in
+              the  first  place. This can be achieved by setting the above op‐
+              tion with a gateway specific set of IP  addresses.  This  option
+              may  have  exactly one IPv4 and/or one IPv6 address on it, sepa‐
+              rated by a space character.
+
+              If it is configured with the value <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>i</b><b>p</b>, then the load bal‐
+              anced packet is SNATed with the IP of router port  (attached  to
+              the gateway router) selected as the destination after taking the
+              routing decision.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>r</b><b>e</b><b>l</b><b>a</b><b>y</b>: optional string, either <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+              Enables/disables  IP  multicast  relay  between logical switches
+              connected to the logical router. Default: False.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>d</b><b>y</b><b>n</b><b>a</b><b>m</b><b>i</b><b>c</b><b>_</b><b>n</b><b>e</b><b>i</b><b>g</b><b>h</b><b>_</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>s</b>: optional string, either <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+              If set to <b>t</b><b>r</b><b>u</b><b>e</b>, the router will resolve  neighbor  routers’  MAC
+              addresses  only by dynamic ARP/ND, instead of prepopulating sta‐
+              tic mappings for all neighbor routers in the  ARP/ND  Resolution
+              stage.  This  reduces  number of flows, but requires ARP/ND mes‐
+              sages to resolve the IP-MAC bindings when needed. It is <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b> by
+              default. It is recommended to set to <b>t</b><b>r</b><b>u</b><b>e</b> when a large number of
+              logical routers are connected to the  same  logical  switch  but
+              most  of  them never need to send traffic between each other. By
+              default, ovn-northd does not create mappings  to  NAT  and  load
+              balancer addresess. However, for NAT and load balancer addresses
+              that  have  the  <b>a</b><b>d</b><b>d</b><b>_</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b>  option added, ovn-northd will create
+              logical flows that map NAT and load balancer IP addresses to the
+              appropriate MAC address. Setting <u>d</u><u>y</u><u>n</u><u>a</u><u>m</u><u>i</u><u>c</u><b>_</b><u>n</u><u>e</u><u>i</u><u>g</u><u>h</u><b>_</b><u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u><u>s</u>  to  <b>t</b><b>r</b><b>u</b><b>e</b>
+              will prevent the automatic creation of these logical flows.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>a</b><b>l</b><b>w</b><b>a</b><b>y</b><b>s</b><b>_</b><b>l</b><b>e</b><b>a</b><b>r</b><b>n</b><b>_</b><b>f</b><b>r</b><b>o</b><b>m</b><b>_</b><b>a</b><b>r</b><b>p</b><b>_</b><b>r</b><b>e</b><b>q</b><b>u</b><b>e</b><b>s</b><b>t</b>: optional string, either <b>t</b><b>r</b><b>u</b><b>e</b>
+       or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+              This  option  controls  the  behavior when handling IPv4 ARP re‐
+              quests or IPv6 ND-NS packets - whether a dynamic  neighbor  (MAC
+              binding) entry is added/updated.
+
+              <b>t</b><b>r</b><b>u</b><b>e</b>  -  Always learn the MAC-IP binding, and add/update the MAC
+              binding entry.
+
+              <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b> - If there is a MAC binding for that IP  and  the  MAC  is
+              different,  or, if TPA of ARP request belongs to any router port
+              on this router, then update/add that MAC-IP binding.  Otherwise,
+              don’t update/add entries.
+
+              It  is <b>t</b><b>r</b><b>u</b><b>e</b> by default. It is recommended to set to <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b> when a
+              large number of logical routers are connected to the same  logi‐
+              cal  switch  but most of them never need to send traffic between
+              each other, to reduce the size of the MAC binding table.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>r</b><b>e</b><b>q</b><b>u</b><b>e</b><b>s</b><b>t</b><b>e</b><b>d</b><b>-</b><b>t</b><b>n</b><b>l</b><b>-</b><b>k</b><b>e</b><b>y</b>: optional string, containing an integer, in
+       range 1 to 16,777,215
+              Configures the datapath tunnel key for the logical router.  This
+              is  not  needed because <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> will assign an unique key for
+              each  datapath  by  itself.  However,  if  it   is   configured,
+              <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> honors the configured value.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>s</b><b>n</b><b>a</b><b>t</b><b>-</b><b>c</b><b>t</b><b>-</b><b>z</b><b>o</b><b>n</b><b>e</b>: optional string, containing an integer, in
+       range 0 to 65,535
+              Use the requested conntrack zone for SNAT with this router. This
+              can  be useful if egress traffic from the host running OVN comes
+              from both OVN and other sources. This way,  OVN  and  the  other
+              sources can make use of the same conntrack zone.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>m</b><b>a</b><b>c</b><b>_</b><b>b</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b><b>_</b><b>a</b><b>g</b><b>e</b><b>_</b><b>t</b><b>h</b><b>r</b><b>e</b><b>s</b><b>h</b><b>o</b><b>l</b><b>d</b>: optional string, containing an in‐
+       teger, in range 0 to 4,294,967,295
+              MAC  binding  aging  <b>t</b><b>h</b><b>r</b><b>e</b><b>s</b><b>h</b><b>o</b><b>l</b><b>d</b> value in seconds. MAC binding ex‐
+              ceeding this timeout will be automatically  removed.  The  value
+              defaults to 0, which means disabled.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+              See <b>E</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> <b>I</b><b>D</b><b>s</b> at the beginning of this document.
+
+<b>Q</b><b>o</b><b>S</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Each  row  in  this  table represents one QoS rule for a logical switch
+       that points to it through its <b>q</b><b>o</b><b>s</b><b>_</b><b>r</b><b>u</b><b>l</b><b>e</b><b>s</b> column. Two types  of  QoS  are
+       supported: DSCP marking and metering. A <b>m</b><b>a</b><b>t</b><b>c</b><b>h</b> with the highest-<b>p</b><b>r</b><b>i</b><b>o</b><b>r</b><b>i</b><b>t</b><b>y</b>
+       will  have  QoS  applied to it. If the <b>a</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b> column is specified, then
+       matching packets will have DSCP marking applied. If the <b>b</b><b>a</b><b>n</b><b>d</b><b>w</b><b>i</b><b>d</b><b>t</b><b>h</b>  col‐
+       umn is specified, then matching packets will have metering applied. <b>a</b><b>c</b>‐‐
+       <b>t</b><b>i</b><b>o</b><b>n</b>  and  <b>b</b><b>a</b><b>n</b><b>d</b><b>w</b><b>i</b><b>d</b><b>t</b><b>h</b> are not exclusive, so both marking and metering by
+       defined for the same QoS entry. If no row  matches,  packets  will  not
+       have any QoS applied.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>p</b><b>r</b><b>i</b><b>o</b><b>r</b><b>i</b><b>t</b><b>y</b>                      integer, in range 0 to 32,767
+       <b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>                     string, either <b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b> or <b>t</b><b>o</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b>
+       <b>m</b><b>a</b><b>t</b><b>c</b><b>h</b>                         string
+       <b>a</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>                        map  of string-integer pairs, key must be
+                                     <b>d</b><b>s</b><b>c</b><b>p</b>, value in range 0 to 63
+       <b>b</b><b>a</b><b>n</b><b>d</b><b>w</b><b>i</b><b>d</b><b>t</b><b>h</b>                     map of string-integer pairs,  key  either
+                                     <b>b</b><b>u</b><b>r</b><b>s</b><b>t</b>  or  <b>r</b><b>a</b><b>t</b><b>e</b>,  value  in  range  1  to
+                                     4,294,967,295
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                  map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>p</b><b>r</b><b>i</b><b>o</b><b>r</b><b>i</b><b>t</b><b>y</b>: integer, in range 0 to 32,767
+              The QoS rule’s priority. Rules with numerically higher  priority
+              take precedence over those with lower. If two QoS rules with the
+              same  priority  both  match,  then the one actually applied to a
+              packet is undefined.
+
+       <b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>: string, either <b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b> or <b>t</b><b>o</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b>
+              The value of this field is similar to  <b>A</b><b>C</b><b>L</b>  column  in  the  OVN
+              Northbound database’s <b>A</b><b>C</b><b>L</b> table.
+
+       <b>m</b><b>a</b><b>t</b><b>c</b><b>h</b>: string
+              The packets that the QoS rules should match, in the same expres‐
+              sion  language  used  for the <b>m</b><b>a</b><b>t</b><b>c</b><b>h</b> column in the OVN Southbound
+              database’s <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>F</b><b>l</b><b>o</b><b>w</b> table. The <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> logical port is  only
+              available  in the <b>t</b><b>o</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b> direction (the <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> is available in
+              both directions).
+
+       <b>a</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>: map of string-integer pairs, key must be <b>d</b><b>s</b><b>c</b><b>p</b>, value in range 0
+       to 63
+              When specified, matching flows will have DSCP marking applied.
+
+              •      <b>d</b><b>s</b><b>c</b><b>p</b>: The value of this action should be in the range  of
+                     0 to 63 (inclusive).
+
+       <b>b</b><b>a</b><b>n</b><b>d</b><b>w</b><b>i</b><b>d</b><b>t</b><b>h</b>: map of string-integer pairs, key either <b>b</b><b>u</b><b>r</b><b>s</b><b>t</b> or <b>r</b><b>a</b><b>t</b><b>e</b>, value
+       in range 1 to 4,294,967,295
+              When  specified,  matching  packets will have bandwidth metering
+              applied. Traffic over the limit will be dropped.
+
+              •      <b>r</b><b>a</b><b>t</b><b>e</b>: The value of rate limit in kbps.
+
+              •      <b>b</b><b>u</b><b>r</b><b>s</b><b>t</b>: The value of burst rate limit in kilobits. This is
+                     optional and needs to specify the <b>r</b><b>a</b><b>t</b><b>e</b>.
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+              See <b>E</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> <b>I</b><b>D</b><b>s</b> at the beginning of this document.
+
+<b>M</b><b>i</b><b>r</b><b>r</b><b>o</b><b>r</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Each row in this table represents a mirror that can be  used  for  port
+       mirroring.  These  mirrors are referenced by the <b>m</b><b>i</b><b>r</b><b>r</b><b>o</b><b>r</b><b>_</b><b>r</b><b>u</b><b>l</b><b>e</b><b>s</b> column in
+       the <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b> table.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>                          string (must be unique within table)
+       <b>f</b><b>i</b><b>l</b><b>t</b><b>e</b><b>r</b>                        string,  one  of  <b>b</b><b>o</b><b>t</b><b>h</b>,  <b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b>,   or
+                                     <b>t</b><b>o</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b>
+       <b>s</b><b>i</b><b>n</b><b>k</b>                          string
+       <b>t</b><b>y</b><b>p</b><b>e</b>                          string, one of <b>e</b><b>r</b><b>s</b><b>p</b><b>a</b><b>n</b>, <b>g</b><b>r</b><b>e</b>, or <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b>
+       <b>i</b><b>n</b><b>d</b><b>e</b><b>x</b>                         integer
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                  map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>: string (must be unique within table)
+              Represents the name of the mirror.
+
+       <b>f</b><b>i</b><b>l</b><b>t</b><b>e</b><b>r</b>: string, one of <b>b</b><b>o</b><b>t</b><b>h</b>, <b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b>, or <b>t</b><b>o</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b>
+              The  value  of  this  field represents selection criteria of the
+              mirror. <b>t</b><b>o</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b> mirrors the packets coming into  logical  port.
+              <b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b>  mirrors  the packets going out of logical port. <b>b</b><b>o</b><b>t</b><b>h</b>
+              mirrors for both directions.
+
+       <b>s</b><b>i</b><b>n</b><b>k</b>: string
+              The value of this field represents the destination/sink  of  the
+              mirror.  If  the  <u>t</u><u>y</u><u>p</u><u>e</u> is <b>g</b><b>r</b><b>e</b> or <b>e</b><b>r</b><b>s</b><b>p</b><b>a</b><b>n</b>, the value indicates the
+              tunnel remote IP (either IPv4 or IPv6). For  a  <u>t</u><u>y</u><u>p</u><u>e</u>  of  <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b>,
+              this  field  defines  a  local  interface on the OVS integration
+              bridge to be used as the mirror destination. The interface  must
+              possess external-ids:mirror-id that matches this string.
+
+       <b>t</b><b>y</b><b>p</b><b>e</b>: string, one of <b>e</b><b>r</b><b>s</b><b>p</b><b>a</b><b>n</b>, <b>g</b><b>r</b><b>e</b>, or <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b>
+              The  value of this field specifies the mirror type - <b>g</b><b>r</b><b>e</b>, <b>e</b><b>r</b><b>s</b><b>p</b><b>a</b><b>n</b>
+              or <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b>.
+
+       <b>i</b><b>n</b><b>d</b><b>e</b><b>x</b>: integer
+              The value of this field represents the tunnel ID. If the config‐
+              ured tunnel type is <b>g</b><b>r</b><b>e</b>, this field represents the <b>G</b><b>R</b><b>E</b> key value
+              and if the configured tunnel type is <b>e</b><b>r</b><b>s</b><b>p</b><b>a</b><b>n</b>  it  represents  the
+              <b>e</b><b>r</b><b>s</b><b>p</b><b>a</b><b>n</b><b>_</b><b>i</b><b>d</b><b>x</b> value. It is ignored if the type is <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b>.
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+              See <b>E</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> <b>I</b><b>D</b><b>s</b> at the beginning of this document.
+
+<b>M</b><b>e</b><b>t</b><b>e</b><b>r</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Each  row  in this table represents a meter that can be used for QoS or
+       rate-limiting.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>                          string (must be unique within table)
+       <b>u</b><b>n</b><b>i</b><b>t</b>                          string, either <b>k</b><b>b</b><b>p</b><b>s</b> or <b>p</b><b>k</b><b>t</b><b>p</b><b>s</b>
+       <b>b</b><b>a</b><b>n</b><b>d</b><b>s</b>                         set of 1 or more <b>M</b><b>e</b><b>t</b><b>e</b><b>r</b><b>_</b><b>B</b><b>a</b><b>n</b><b>d</b>s
+       <b>f</b><b>a</b><b>i</b><b>r</b>                          optional boolean
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                  map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>: string (must be unique within table)
+              A name for this meter.
+
+              Names that begin with "__" (two underscores)  are  reserved  for
+              OVN internal use and should not be added manually.
+
+       <b>u</b><b>n</b><b>i</b><b>t</b>: string, either <b>k</b><b>b</b><b>p</b><b>s</b> or <b>p</b><b>k</b><b>t</b><b>p</b><b>s</b>
+              The  unit for <b>r</b><b>a</b><b>t</b><b>e</b> and <b>b</b><b>u</b><b>r</b><b>s</b><b>t</b><b>_</b><b>r</b><b>a</b><b>t</b><b>e</b> parameters in the <b>b</b><b>a</b><b>n</b><b>d</b><b>s</b> entry.
+              <b>k</b><b>b</b><b>p</b><b>s</b> specifies kilobits per second, and <b>p</b><b>k</b><b>t</b><b>p</b><b>s</b> specifies  packets
+              per second.
+
+       <b>b</b><b>a</b><b>n</b><b>d</b><b>s</b>: set of 1 or more <b>M</b><b>e</b><b>t</b><b>e</b><b>r</b><b>_</b><b>B</b><b>a</b><b>n</b><b>d</b>s
+              The bands associated with this meter. Each band specifies a rate
+              above  which  the band is to take the action <b>a</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>. If multiple
+              bands’ rates are exceeded, then the band with the  highest  rate
+              among the exceeded bands is selected.
+
+       <b>f</b><b>a</b><b>i</b><b>r</b>: optional boolean
+              This  column is used to further describe the desired behavior of
+              the meter when there are multiple references to it. If this col‐
+              umn is empty or is set to <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>, the rate will be shared  across
+              all  rows  that  refer  to the same Meter <b>n</b><b>a</b><b>m</b><b>e</b>. Conversely, when
+              this column is set to <b>t</b><b>r</b><b>u</b><b>e</b>, each user of the same Meter will  be
+              rate-limited on its own.
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+              See <b>E</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> <b>I</b><b>D</b><b>s</b> at the beginning of this document.
+
+<b>M</b><b>e</b><b>t</b><b>e</b><b>r</b><b>_</b><b>B</b><b>a</b><b>n</b><b>d</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Each row in this table represents a meter band which specifies the rate
+       above  which  the  configured action should be applied. These bands are
+       referenced by the <b>b</b><b>a</b><b>n</b><b>d</b><b>s</b> column in the <b>M</b><b>e</b><b>t</b><b>e</b><b>r</b> table.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>a</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>                        string, must be <b>d</b><b>r</b><b>o</b><b>p</b>
+       <b>r</b><b>a</b><b>t</b><b>e</b>                          integer, in range 1 to 4,294,967,295
+       <b>b</b><b>u</b><b>r</b><b>s</b><b>t</b><b>_</b><b>s</b><b>i</b><b>z</b><b>e</b>                    integer, in range 0 to 4,294,967,295
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                  map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>a</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>: string, must be <b>d</b><b>r</b><b>o</b><b>p</b>
+              The action to execute when this band matches. The only supported
+              action is <b>d</b><b>r</b><b>o</b><b>p</b>.
+
+       <b>r</b><b>a</b><b>t</b><b>e</b>: integer, in range 1 to 4,294,967,295
+              The rate limit for this band, in kilobits per second or bits per
+              second, depending on whether the parent <b>M</b><b>e</b><b>t</b><b>e</b><b>r</b> entry’s <b>u</b><b>n</b><b>i</b><b>t</b>  col‐
+              umn specified <b>k</b><b>b</b><b>p</b><b>s</b> or <b>p</b><b>k</b><b>t</b><b>p</b><b>s</b>.
+
+       <b>b</b><b>u</b><b>r</b><b>s</b><b>t</b><b>_</b><b>s</b><b>i</b><b>z</b><b>e</b>: integer, in range 0 to 4,294,967,295
+              The  maximum  burst allowed for the band in kilobits or packets,
+              depending on whether <b>k</b><b>b</b><b>p</b><b>s</b> or <b>p</b><b>k</b><b>t</b><b>p</b><b>s</b> was selected  in  the  parent
+              <b>M</b><b>e</b><b>t</b><b>e</b><b>r</b>  entry’s  <b>u</b><b>n</b><b>i</b><b>t</b>  column. If the size is zero, the switch is
+              free to select some reasonable value depending on its configura‐
+              tion.
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+              See <b>E</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> <b>I</b><b>D</b><b>s</b> at the beginning of this document.
+
+<b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       A port within an L3 logical router.
+
+       Exactly one <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b> row must reference a  given  logical  router
+       port.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>                          string (must be unique within table)
+       <b>n</b><b>e</b><b>t</b><b>w</b><b>o</b><b>r</b><b>k</b><b>s</b>                      set of 1 or more strings
+       <b>m</b><b>a</b><b>c</b>                           string
+       <b>e</b><b>n</b><b>a</b><b>b</b><b>l</b><b>e</b><b>d</b>                       optional boolean
+       <u>D</u><u>i</u><u>s</u><u>t</u><u>r</u><u>i</u><u>b</u><u>u</u><u>t</u><u>e</u><u>d</u> <u>G</u><u>a</u><u>t</u><u>e</u><u>w</u><u>a</u><u>y</u> <u>P</u><u>o</u><u>r</u><u>t</u><u>s</u><u>:</u>
+         <b>h</b><b>a</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b>            optional <b>H</b><b>A</b><b>_</b><b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b>
+         <b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>             set of <b>G</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>_</b><b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>es
+         <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u> <u>f</u><u>o</u><u>r</u> <u>P</u><u>h</u><u>y</u><u>s</u><u>i</u><u>c</u><u>a</u><u>l</u> <u>V</u><u>L</u><u>A</u><u>N</u> <u>M</u><u>T</u><u>U</u> <u>I</u><u>s</u><u>s</u><u>u</u><u>e</u><u>s</u><u>:</u>
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>r</b><b>e</b><b>s</b><b>i</b><b>d</b><b>e</b><b>-</b><b>o</b><b>n</b><b>-</b><b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>
+                                     optional string, either <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b><b>-</b><b>t</b><b>y</b><b>p</b><b>e</b>  optional  string, either <b>b</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b><b>d</b> or <b>o</b><b>v</b><b>e</b><b>r</b>‐‐
+                                     <b>l</b><b>a</b><b>y</b>
+       <b>i</b><b>p</b><b>v</b><b>6</b><b>_</b><b>p</b><b>r</b><b>e</b><b>f</b><b>i</b><b>x</b>                   set of strings
+       <u>i</u><u>p</u><u>v</u><u>6</u><b>_</b><u>r</u><u>a</u><b>_</b><u>c</u><u>o</u><u>n</u><u>f</u><u>i</u><u>g</u><u>s</u><u>:</u>
+         <b>i</b><b>p</b><b>v</b><b>6</b><b>_</b><b>r</b><b>a</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>s</b> <b>:</b> <b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>_</b><b>m</b><b>o</b><b>d</b><b>e</b>
+                                     optional string
+         <b>i</b><b>p</b><b>v</b><b>6</b><b>_</b><b>r</b><b>a</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>s</b> <b>:</b> <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>p</b><b>r</b><b>e</b><b>f</b><b>e</b><b>r</b><b>e</b><b>n</b><b>c</b><b>e</b>
+                                     optional string
+         <b>i</b><b>p</b><b>v</b><b>6</b><b>_</b><b>r</b><b>a</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>s</b> <b>:</b> <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>_</b><b>i</b><b>n</b><b>f</b><b>o</b>
+                                     optional string
+         <b>i</b><b>p</b><b>v</b><b>6</b><b>_</b><b>r</b><b>a</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>s</b> <b>:</b> <b>m</b><b>t</b><b>u</b>       optional string
+         <b>i</b><b>p</b><b>v</b><b>6</b><b>_</b><b>r</b><b>a</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>s</b> <b>:</b> <b>s</b><b>e</b><b>n</b><b>d</b><b>_</b><b>p</b><b>e</b><b>r</b><b>i</b><b>o</b><b>d</b><b>i</b><b>c</b>
+                                     optional string
+         <b>i</b><b>p</b><b>v</b><b>6</b><b>_</b><b>r</b><b>a</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>s</b> <b>:</b> <b>m</b><b>a</b><b>x</b><b>_</b><b>i</b><b>n</b><b>t</b><b>e</b><b>r</b><b>v</b><b>a</b><b>l</b>
+                                     optional string
+         <b>i</b><b>p</b><b>v</b><b>6</b><b>_</b><b>r</b><b>a</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>s</b> <b>:</b> <b>m</b><b>i</b><b>n</b><b>_</b><b>i</b><b>n</b><b>t</b><b>e</b><b>r</b><b>v</b><b>a</b><b>l</b>
+                                     optional string
+         <b>i</b><b>p</b><b>v</b><b>6</b><b>_</b><b>r</b><b>a</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>s</b> <b>:</b> <b>r</b><b>d</b><b>n</b><b>s</b><b>s</b>     optional string
+         <b>i</b><b>p</b><b>v</b><b>6</b><b>_</b><b>r</b><b>a</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>s</b> <b>:</b> <b>d</b><b>n</b><b>s</b><b>s</b><b>l</b>     optional string
+       <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>f</b><b>l</b><b>o</b><b>o</b><b>d</b>       optional string, either <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>r</b><b>e</b><b>q</b><b>u</b><b>e</b><b>s</b><b>t</b><b>e</b><b>d</b><b>-</b><b>t</b><b>n</b><b>l</b><b>-</b><b>k</b><b>e</b><b>y</b>
+                                     optional string, containing  an  integer,
+                                     in range 1 to 32,767
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>p</b><b>r</b><b>e</b><b>f</b><b>i</b><b>x</b><b>_</b><b>d</b><b>e</b><b>l</b><b>e</b><b>g</b><b>a</b><b>t</b><b>i</b><b>o</b><b>n</b>
+                                     optional string, either <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>p</b><b>r</b><b>e</b><b>f</b><b>i</b><b>x</b>            optional string, either <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>_</b><b>t</b><b>a</b><b>b</b><b>l</b><b>e</b>       optional string
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>_</b><b>m</b><b>t</b><b>u</b>       optional  string,  containing an integer,
+                                     in range 68 to 65,535
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>_</b><b>m</b><b>t</b><b>u</b><b>_</b><b>b</b><b>y</b><b>p</b><b>a</b><b>s</b><b>s</b>
+                                     optional string
+       <u>A</u><u>t</u><u>t</u><u>a</u><u>c</u><u>h</u><u>m</u><u>e</u><u>n</u><u>t</u><u>:</u>
+         <b>p</b><b>e</b><b>e</b><b>r</b>                        optional string
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>: string (must be unique within table)
+              A name for the logical router port.
+
+              In addition to provide convenience for  human  interaction  with
+              the northbound database, this column is used as reference by its
+              patch port in <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b> or another logical router port
+              in <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b>.
+
+              A  logical  router  port may not have the same name as a logical
+              switch port, but the database schema cannot enforce this.
+
+       <b>n</b><b>e</b><b>t</b><b>w</b><b>o</b><b>r</b><b>k</b><b>s</b>: set of 1 or more strings
+              The IP addresses  and  netmasks  of  the  router.  For  example,
+              <b>1</b><b>9</b><b>2</b><b>.</b><b>1</b><b>6</b><b>8</b><b>.</b><b>0</b><b>.</b><b>1</b><b>/</b><b>2</b><b>4</b>   indicates  that  the  router’s  IP  address  is
+              192.168.0.1 and that packets destined to 192.168.0.<u>x</u>  should  be
+              routed to this port.
+
+              A  logical  router  port  always  adds a link-local IPv6 address
+              (fe80::/64) automatically generated from the interface’s MAC ad‐
+              dress using the modified EUI-64 format.
+
+       <b>m</b><b>a</b><b>c</b>: string
+              The Ethernet address that belongs to this router port.
+
+       <b>e</b><b>n</b><b>a</b><b>b</b><b>l</b><b>e</b><b>d</b>: optional boolean
+              This column is used to administratively set port state. If  this
+              column  is empty or is set to <b>t</b><b>r</b><b>u</b><b>e</b>, the port is enabled. If this
+              column is set to <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>, the port is disabled.  A  disabled  port
+              has all ingress and egress traffic dropped.
+
+     <u>D</u><u>i</u><u>s</u><u>t</u><u>r</u><u>i</u><u>b</u><u>u</u><u>t</u><u>e</u><u>d</u> <u>G</u><u>a</u><u>t</u><u>e</u><u>w</u><u>a</u><u>y</u> <u>P</u><u>o</u><u>r</u><u>t</u><u>s</u><u>:</u>
+
+       Gateways,  as  documented under <b>G</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>s</b> in the OVN architecture guide,
+       provide limited connectivity  between  logical  networks  and  physical
+       ones.  OVN  support multiple kinds of gateways. The <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b>
+       table can be used two different ways to configure  <u>d</u><u>i</u><u>s</u><u>t</u><u>r</u><u>i</u><u>b</u><u>u</u><u>t</u><u>e</u><u>d</u>  <u>g</u><u>a</u><u>t</u><u>e</u><u>w</u><u>a</u><u>y</u>
+       <u>p</u><u>o</u><u>r</u><u>t</u><u>s</u>,  which are one kind of gateway. These two forms of configuration
+       exist for historical reasons. Both of them produce the same kind of OVN
+       southbound records and the same behavior in practice.
+
+       If either of these are set, this logical router port represents a  dis‐
+       tributed  gateway  port  that  connects this router to a logical switch
+       with a <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b> port or a connection to another OVN deployment.
+
+       Also mentioned in the OVN architecture guide, distributed gateway ports
+       can also be used for scalability reasons in deployments  where  logical
+       switches are dedicated to chassises rather than distributed.
+
+       The preferred way to configure a gateway is <b>h</b><b>a</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b>, but <b>g</b><b>a</b><b>t</b><b>e</b>‐‐
+       <b>w</b><b>a</b><b>y</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>  is  also supported for backward compatibility. Only one of
+       these should be set at a time on a given LRP, since they configure  the
+       same features.
+
+       Even when a gateway is configured, the logical router port still effec‐
+       tively resides on each chassis. However, due to the implications of the
+       use of L2 learning in the physical network, as well as the need to sup‐
+       port advanced features such as one-to-many NAT (aka IP masquerading), a
+       subset  of  the  logical  router processing is handled in a centralized
+       manner on the gateway chassis.
+
+       There can be more than one distributed gateway ports configured on each
+       logical router, each connecting to different L2 segments.  Load-balanc‐
+       ing is not yet supported on logical routers with more than one distrib‐
+       uted gateway ports.
+
+       For  each  distributed  gateway port, it may have more than one gateway
+       chassises. When more than one gateway chassis is  specified,  OVN  only
+       uses  one  at a time. OVN can rely on OVS BFD implementation to monitor
+       gateway connectivity, preferring the highest-priority gateway  that  is
+       online.  Priorities  are  specified  in  the  <b>p</b><b>r</b><b>i</b><b>o</b><b>r</b><b>i</b><b>t</b><b>y</b>  column of <b>G</b><b>a</b><b>t</b><b>e</b>‐‐
+       <b>w</b><b>a</b><b>y</b><b>_</b><b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> or <b>H</b><b>A</b><b>_</b><b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>.
+
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> programs the <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>m</b><b>a</b><b>c</b> rules specified in  the  LRP’s  LR
+       into  the peer logical switch’s destination lookup on the chassis where
+       the <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b> resides. In addition, the logical router’s MAC address
+       is automatically programmed in the peer  logical  switch’s  destination
+       lookup  flow on the gateway chasssis. If it is desired to generate gra‐
+       tuitous ARPs for NAT addresses, then set the peer LSP’s <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>n</b><b>a</b><b>t</b><b>-</b><b>a</b><b>d</b>‐‐
+       <b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>e</b><b>s</b> to <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b>.
+
+       OVN 20.03 and earlier supported a third way  to  configure  distributed
+       gateway  ports  using  <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>  to specify the gateway
+       chassis. This method is no longer supported. Any remaining users should
+       switch to one of the newer methods instead. A  <b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>  may  be
+       easily  configured  from the command line, e.g. <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b> <b>l</b><b>r</b><b>p</b><b>-</b><b>s</b><b>e</b><b>t</b><b>-</b><b>g</b><b>a</b><b>t</b><b>e</b>‐‐
+       <b>w</b><b>a</b><b>y</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> <u>l</u><u>r</u><u>p</u> <u>c</u><u>h</u><u>a</u><u>s</u><u>s</u><u>i</u><u>s</u>.
+
+       <b>h</b><b>a</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b>: optional <b>H</b><b>A</b><b>_</b><b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b>
+              Designates an <b>H</b><b>A</b><b>_</b><b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b> to provide  gateway  high  avail‐
+              ability.
+
+       <b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>: set of <b>G</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>_</b><b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>es
+              Designates  one  or  more <b>G</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>_</b><b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> for the logical router
+              port.
+
+     <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u> <u>f</u><u>o</u><u>r</u> <u>P</u><u>h</u><u>y</u><u>s</u><u>i</u><u>c</u><u>a</u><u>l</u> <u>V</u><u>L</u><u>A</u><u>N</u> <u>M</u><u>T</u><u>U</u> <u>I</u><u>s</u><u>s</u><u>u</u><u>e</u><u>s</u><u>:</u>
+
+       MTU issues arise in mixing  tunnels  with  logical  networks  that  are
+       bridged  to  a physical VLAN. For an explanation of the MTU issues, see
+       <b>P</b><b>h</b><b>y</b><b>s</b><b>i</b><b>c</b><b>a</b><b>l</b> <b>V</b><b>L</b><b>A</b><b>N</b> <b>M</b><b>T</b><b>U</b> <b>I</b><b>s</b><b>s</b><b>u</b><b>e</b><b>s</b> in the OVN architecture document. The  follow‐
+       ing  options,  which  are alternatives, provide solutions. Both of them
+       cause packets to be sent over <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b> instead  of  tunnels,  but  they
+       differ  in  whether  some  or  all  packets are sent this way. The most
+       prominent  tradeoff  between  these  options  is  that  <b>r</b><b>e</b><b>s</b><b>i</b><b>d</b><b>e</b><b>-</b><b>o</b><b>n</b><b>-</b><b>r</b><b>e</b><b>d</b><b>i</b>‐‐
+       <b>r</b><b>e</b><b>c</b><b>t</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>  is  easier  to  configure and that <b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b><b>-</b><b>t</b><b>y</b><b>p</b><b>e</b> performs
+       better for east-west traffic.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>r</b><b>e</b><b>s</b><b>i</b><b>d</b><b>e</b><b>-</b><b>o</b><b>n</b><b>-</b><b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>: optional string, either <b>t</b><b>r</b><b>u</b><b>e</b> or
+       <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+              If set to <b>t</b><b>r</b><b>u</b><b>e</b>, this option forces all traffic across the  logi‐
+              cal  router port to pass through the gateway chassis using a hop
+              across a <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b> port. This changes behavior in two ways:
+
+              •      Without this option, east-west  traffic  passes  directly
+                     between  source and destination chassis (or even within a
+                     single chassis, for co-located VMs).  With  this  option,
+                     all east-west traffic passes through the gateway chassis.
+
+              •      Without  this option, traffic between the gateway chassis
+                     and other chassis is encapsulated in tunnels.  With  this
+                     option, traffic passes over a <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b> interface.
+
+              This  option  may  usefully  be set only on logical router ports
+              that connect a distributed logical router to  a  logical  switch
+              with VIFs. It should not be set on a distributed gateway port.
+
+              OVN  honors  this  option only if the logical router has one and
+              only one distributed gateway port and if the LRP’s  peer  switch
+              has a <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b> port.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b><b>-</b><b>t</b><b>y</b><b>p</b><b>e</b>: optional string, either <b>b</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b><b>d</b> or <b>o</b><b>v</b><b>e</b><b>r</b><b>l</b><b>a</b><b>y</b>
+              If  set  to  <b>b</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b><b>d</b>  on a distributed gateway port, this option
+              causes OVN to redirect packets to the gateway chassis over a <b>l</b><b>o</b>‐‐
+              <b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b> port instead of a tunnel. The relevant chassis must share
+              a <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b> port.
+
+              This feature requires the administrator or the CMS to  configure
+              each  participating  chassis  with a unique Ethernet address for
+              the logical router by setting  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>-</b><b>m</b><b>a</b><b>c</b><b>-</b><b>m</b><b>a</b><b>p</b><b>p</b><b>i</b><b>n</b><b>g</b><b>s</b>  in  the
+              Open vSwitch database, for use by <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>.
+
+              Setting  this  option  to <b>o</b><b>v</b><b>e</b><b>r</b><b>l</b><b>a</b><b>y</b> or leaving it unset has no ef‐
+              fect. This option may usefully be  set  only  on  a  distributed
+              gateway  port when there is one and only one distributed gateway
+              port on the logical router. It is otherwise ignored.
+
+       <b>i</b><b>p</b><b>v</b><b>6</b><b>_</b><b>p</b><b>r</b><b>e</b><b>f</b><b>i</b><b>x</b>: set of strings
+              This column contains IPv6 prefix obtained by  prefix  delegation
+              router according to RFC 3633
+
+     <u>i</u><u>p</u><u>v</u><u>6</u><b>_</b><u>r</u><u>a</u><b>_</b><u>c</u><u>o</u><u>n</u><u>f</u><u>i</u><u>g</u><u>s</u><u>:</u>
+
+       This column defines the IPv6 ND RA address mode and ND MTU Option to be
+       included by <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> when it replies to the IPv6 Router solicita‐
+       tion requests.
+
+       <b>i</b><b>p</b><b>v</b><b>6</b><b>_</b><b>r</b><b>a</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>s</b> <b>:</b> <b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>_</b><b>m</b><b>o</b><b>d</b><b>e</b>: optional string
+              The  address mode to be used for IPv6 address configuration. The
+              supported values are:
+
+              •      <b>s</b><b>l</b><b>a</b><b>a</b><b>c</b>: Address configuration using  Router  Advertisement
+                     (RA)  packet.  The  IPv6  prefixes  defined  in the <b>L</b><b>o</b><b>g</b><b>i</b>‐‐
+                     <b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b> table’s <b>n</b><b>e</b><b>t</b><b>w</b><b>o</b><b>r</b><b>k</b><b>s</b> column will be  included
+                     in the RA’s ICMPv6 option - Prefix information.
+
+              •      <b>d</b><b>h</b><b>c</b><b>p</b><b>v</b><b>6</b><b>_</b><b>s</b><b>t</b><b>a</b><b>t</b><b>e</b><b>f</b><b>u</b><b>l</b>: Address configuration using DHCPv6.
+
+              •      <b>d</b><b>h</b><b>c</b><b>p</b><b>v</b><b>6</b><b>_</b><b>s</b><b>t</b><b>a</b><b>t</b><b>e</b><b>l</b><b>e</b><b>s</b><b>s</b>:  Address configuration using Router Ad‐
+                     vertisement (RA) packet. Other IPv6 options are  provided
+                     by DHCPv6.
+
+       <b>i</b><b>p</b><b>v</b><b>6</b><b>_</b><b>r</b><b>a</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>s</b> <b>:</b> <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>p</b><b>r</b><b>e</b><b>f</b><b>e</b><b>r</b><b>e</b><b>n</b><b>c</b><b>e</b>: optional string
+              Default Router Preference (PRF) indicates whether to prefer this
+              router  over  other  default routers (RFC 4191). Possible values
+              are:
+
+              •      HIGH: mapped to 0x01 in RA PRF field
+
+              •      MEDIUM: mapped to 0x00 in RA PRF field
+
+              •      LOW: mapped to 0x11 in RA PRF field
+
+       <b>i</b><b>p</b><b>v</b><b>6</b><b>_</b><b>r</b><b>a</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>s</b> <b>:</b> <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>_</b><b>i</b><b>n</b><b>f</b><b>o</b>: optional string
+              Route Info is used to configure Route Info Option sent in Router
+              Advertisement according to RFC 4191. Route Info is a comma sepa‐
+              rated string where each field provides  PRF  and  prefix  for  a
+              given route (e.g: HIGH-aef1::11/48,LOW-aef2::11/96) Possible PRF
+              values are:
+
+              •      HIGH: mapped to 0x01 in RA PRF field
+
+              •      MEDIUM: mapped to 0x00 in RA PRF field
+
+              •      LOW: mapped to 0x11 in RA PRF field
+
+       <b>i</b><b>p</b><b>v</b><b>6</b><b>_</b><b>r</b><b>a</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>s</b> <b>:</b> <b>m</b><b>t</b><b>u</b>: optional string
+              The  recommended  MTU for the link. Default is 0, which means no
+              MTU Option will be included in RA  packet  replied  by  ovn-con‐
+              troller. Per RFC 2460, the mtu value is recommended no less than
+              1280,  so  any mtu value less than 1280 will be considered as no
+              MTU Option.
+
+       <b>i</b><b>p</b><b>v</b><b>6</b><b>_</b><b>r</b><b>a</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>s</b> <b>:</b> <b>s</b><b>e</b><b>n</b><b>d</b><b>_</b><b>p</b><b>e</b><b>r</b><b>i</b><b>o</b><b>d</b><b>i</b><b>c</b>: optional string
+              If set to true, then this router interface will send router  ad‐
+              vertisements periodically. The default is false.
+
+       <b>i</b><b>p</b><b>v</b><b>6</b><b>_</b><b>r</b><b>a</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>s</b> <b>:</b> <b>m</b><b>a</b><b>x</b><b>_</b><b>i</b><b>n</b><b>t</b><b>e</b><b>r</b><b>v</b><b>a</b><b>l</b>: optional string
+              The  maximum  number of seconds to wait between sending periodic
+              router advertisements. This option has no effect if <b>i</b><b>p</b><b>v</b><b>6</b><b>_</b><b>r</b><b>a</b><b>_</b><b>c</b><b>o</b><b>n</b>‐‐
+              <b>f</b><b>i</b><b>g</b><b>s</b><b>:</b><b>s</b><b>e</b><b>n</b><b>d</b><b>_</b><b>p</b><b>e</b><b>r</b><b>i</b><b>o</b><b>d</b><b>i</b><b>c</b> is false. The default is 600.
+
+       <b>i</b><b>p</b><b>v</b><b>6</b><b>_</b><b>r</b><b>a</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>s</b> <b>:</b> <b>m</b><b>i</b><b>n</b><b>_</b><b>i</b><b>n</b><b>t</b><b>e</b><b>r</b><b>v</b><b>a</b><b>l</b>: optional string
+              The minimum number of seconds to wait between  sending  periodic
+              router advertisements. This option has no effect if <b>i</b><b>p</b><b>v</b><b>6</b><b>_</b><b>r</b><b>a</b><b>_</b><b>c</b><b>o</b><b>n</b>‐‐
+              <b>f</b><b>i</b><b>g</b><b>s</b><b>:</b><b>s</b><b>e</b><b>n</b><b>d</b><b>_</b><b>p</b><b>e</b><b>r</b><b>i</b><b>o</b><b>d</b><b>i</b><b>c</b>   is  false.  The  default  is  one-third  of
+              <b>i</b><b>p</b><b>v</b><b>6</b><b>_</b><b>r</b><b>a</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>s</b><b>:</b><b>m</b><b>a</b><b>x</b><b>_</b><b>i</b><b>n</b><b>t</b><b>e</b><b>r</b><b>v</b><b>a</b><b>l</b>, i.e. 200 seconds if  that  key  is
+              unset.
+
+       <b>i</b><b>p</b><b>v</b><b>6</b><b>_</b><b>r</b><b>a</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>s</b> <b>:</b> <b>r</b><b>d</b><b>n</b><b>s</b><b>s</b>: optional string
+              IPv6 address of RDNSS server announced in RA packets. At the mo‐
+              ment OVN supports just one RDNSS server.
+
+       <b>i</b><b>p</b><b>v</b><b>6</b><b>_</b><b>r</b><b>a</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>s</b> <b>:</b> <b>d</b><b>n</b><b>s</b><b>s</b><b>l</b>: optional string
+              DNS  Search  List  announced  in RA packets. Multiple DNS Search
+              List must be ’comma’ separated (e.g. "a.b.c, d.e.f")
+
+     <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       Additional options for the logical router port.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>f</b><b>l</b><b>o</b><b>o</b><b>d</b>: optional string, either <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+              If set to <b>t</b><b>r</b><b>u</b><b>e</b>, multicast traffic (including reports) are uncon‐
+              ditionally forwarded to the specific port.
+
+              This option applies when the port is part of  a  logical  router
+              which has <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>:mcast_relay set to <b>t</b><b>r</b><b>u</b><b>e</b>.
+
+              Default: <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>r</b><b>e</b><b>q</b><b>u</b><b>e</b><b>s</b><b>t</b><b>e</b><b>d</b><b>-</b><b>t</b><b>n</b><b>l</b><b>-</b><b>k</b><b>e</b><b>y</b>: optional string, containing an integer, in
+       range 1 to 32,767
+              Configures  the  port  binding  tunnel key for the port. Usually
+              this is not needed because <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> will assign an unique  key
+              for   each  port  by  itself.  However,  if  it  is  configured,
+              <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> honors the configured value.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>p</b><b>r</b><b>e</b><b>f</b><b>i</b><b>x</b><b>_</b><b>d</b><b>e</b><b>l</b><b>e</b><b>g</b><b>a</b><b>t</b><b>i</b><b>o</b><b>n</b>: optional string, either <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+              If set to <b>t</b><b>r</b><b>u</b><b>e</b>, enable IPv6 prefix delegation state  machine  on
+              this  logical  router  port (RFC3633). IPv6 prefix delegation is
+              available just on a gateway router or on a gateway router port.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>p</b><b>r</b><b>e</b><b>f</b><b>i</b><b>x</b>: optional string, either <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+              If set to <b>t</b><b>r</b><b>u</b><b>e</b>, this interface will receive an IPv6  prefix  ac‐
+              cording to RFC3663
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>_</b><b>t</b><b>a</b><b>b</b><b>l</b><b>e</b>: optional string
+              Designates  lookup  Logical_Router_Static_Routes  with specified
+              <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>_</b><b>t</b><b>a</b><b>b</b><b>l</b><b>e</b> value. Routes to directly  connected  networks  from
+              same  Logical  Router  and routes without <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>_</b><b>t</b><b>a</b><b>b</b><b>l</b><b>e</b> option set
+              have higher priority than routes with <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>_</b><b>t</b><b>a</b><b>b</b><b>l</b><b>e</b> option set.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>_</b><b>m</b><b>t</b><b>u</b>: optional string, containing an integer, in range
+       68 to 65,535
+              If set, logical flows will be added to router pipeline to  check
+              packet  length.  If packet length is greater than the value set,
+              ICMPv4 type 3 (Destination Unreachable)  code  4  (Fragmentation
+              Needed  and Don’t Fragment was Set) or ICMPv6 type 2 (Packet Too
+              Big) code 0 (no route to destination) packets will be generated.
+              This allows for Path MTU Discovery.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>_</b><b>m</b><b>t</b><b>u</b><b>_</b><b>b</b><b>y</b><b>p</b><b>a</b><b>s</b><b>s</b>: optional string
+              When configured, represents a match expression, in the same  ex‐
+              pression  language  used  for the <b>m</b><b>a</b><b>t</b><b>c</b><b>h</b> column in the OVN South‐
+              bound database’s <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>F</b><b>l</b><b>o</b><b>w</b> table. Packets matching  this  ex‐
+              pression will bypass the length check configured through the <b>o</b><b>p</b>‐‐
+              <b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>_</b><b>m</b><b>t</b><b>u</b> option.
+
+     <u>A</u><u>t</u><u>t</u><u>a</u><u>c</u><u>h</u><u>m</u><u>e</u><u>n</u><u>t</u><u>:</u>
+
+       A given router port serves one of two purposes:
+
+              •      To attach a logical switch to a logical router. A logical
+                     router  port  of  this  type is referenced by exactly one
+                     <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b> of type <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b>. The value of <b>n</b><b>a</b><b>m</b><b>e</b>  is
+                     set   as   <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>-</b><b>p</b><b>o</b><b>r</b><b>t</b>   in   column   <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>  of  <b>L</b><b>o</b><b>g</b><b>i</b>‐‐
+                     <b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b>. In this case <b>p</b><b>e</b><b>e</b><b>r</b> column is empty.
+
+              •      To connect one logical router to another. This requires a
+                     pair of logical router ports, each connected to a differ‐
+                     ent router. Each router port in the  pair  specifies  the
+                     other in its <b>p</b><b>e</b><b>e</b><b>r</b> column. No <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b> refers to the
+                     router port.
+
+       <b>p</b><b>e</b><b>e</b><b>r</b>: optional string
+              For  a  router  port  used  to connect two logical routers, this
+              identifies the other router port in the pair by <b>n</b><b>a</b><b>m</b><b>e</b>.
+
+              For a router port attached to a logical switch, this  column  is
+              empty.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+              See <b>E</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> <b>I</b><b>D</b><b>s</b> at the beginning of this document.
+
+              The  <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>  program  copies all these pairs into the <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b>‐‐
+              <b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b> column of the <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> table in <b>O</b><b>V</b><b>N</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> data‐
+              base.
+
+<b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>S</b><b>t</b><b>a</b><b>t</b><b>i</b><b>c</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Each record represents a static route.
+
+       When multiple routes match a packet, the longest-prefix match  is  cho‐
+       sen.  For  a  given  prefix  length, a <b>d</b><b>s</b><b>t</b><b>-</b><b>i</b><b>p</b> route is preferred over a
+       <b>s</b><b>r</b><b>c</b><b>-</b><b>i</b><b>p</b> route.
+
+       When there are ECMP routes, i.e. multiple routes with same  prefix  and
+       policy,  one  of  them will be selected based on the 5-tuple hashing of
+       the packet header.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>i</b><b>p</b><b>_</b><b>p</b><b>r</b><b>e</b><b>f</b><b>i</b><b>x</b>                     string
+       <b>p</b><b>o</b><b>l</b><b>i</b><b>c</b><b>y</b>                        optional string, either <b>d</b><b>s</b><b>t</b><b>-</b><b>i</b><b>p</b> or <b>s</b><b>r</b><b>c</b><b>-</b><b>i</b><b>p</b>
+       <b>n</b><b>e</b><b>x</b><b>t</b><b>h</b><b>o</b><b>p</b>                       string
+       <b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>                   optional string
+       <b>b</b><b>f</b><b>d</b>                           optional weak reference to <b>B</b><b>F</b><b>D</b>
+       <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>_</b><b>t</b><b>a</b><b>b</b><b>l</b><b>e</b>                   string
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b> <b>:</b> <b>i</b><b>c</b><b>-</b><b>l</b><b>e</b><b>a</b><b>r</b><b>n</b><b>e</b><b>d</b><b>-</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b>
+                                     optional string
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>                     map of string-string pairs
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>e</b><b>c</b><b>m</b><b>p</b><b>_</b><b>s</b><b>y</b><b>m</b><b>m</b><b>e</b><b>t</b><b>r</b><b>i</b><b>c</b><b>_</b><b>r</b><b>e</b><b>p</b><b>l</b><b>y</b>
+                                     optional string
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>o</b><b>r</b><b>i</b><b>g</b><b>i</b><b>n</b>            optional string
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>i</b><b>p</b><b>_</b><b>p</b><b>r</b><b>e</b><b>f</b><b>i</b><b>x</b>: string
+              IP prefix of this route (e.g. 192.168.100.0/24).
+
+       <b>p</b><b>o</b><b>l</b><b>i</b><b>c</b><b>y</b>: optional string, either <b>d</b><b>s</b><b>t</b><b>-</b><b>i</b><b>p</b> or <b>s</b><b>r</b><b>c</b><b>-</b><b>i</b><b>p</b>
+              If it is specified, this setting describes the  policy  used  to
+              make  routing decisions. This setting must be one of the follow‐
+              ing strings:
+
+              •      <b>s</b><b>r</b><b>c</b><b>-</b><b>i</b><b>p</b>: This policy sends the packet to the <b>n</b><b>e</b><b>x</b><b>t</b><b>h</b><b>o</b><b>p</b>  when
+                     the packet’s source IP address matches <b>i</b><b>p</b><b>_</b><b>p</b><b>r</b><b>e</b><b>f</b><b>i</b><b>x</b>.
+
+              •      <b>d</b><b>s</b><b>t</b><b>-</b><b>i</b><b>p</b>:  This policy sends the packet to the <b>n</b><b>e</b><b>x</b><b>t</b><b>h</b><b>o</b><b>p</b> when
+                     the packet’s destination IP address matches <b>i</b><b>p</b><b>_</b><b>p</b><b>r</b><b>e</b><b>f</b><b>i</b><b>x</b>.
+
+              If not specified, the default is <b>d</b><b>s</b><b>t</b><b>-</b><b>i</b><b>p</b>.
+
+       <b>n</b><b>e</b><b>x</b><b>t</b><b>h</b><b>o</b><b>p</b>: string
+              Nexthop IP address for this route. Nexthop IP address should  be
+              the IP address of a connected router port or the IP address of a
+              logical port or can be set to <b>d</b><b>i</b><b>s</b><b>c</b><b>a</b><b>r</b><b>d</b> for dropping packets which
+              match the given route.
+
+       <b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>: optional string
+              The  name  of the <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b> via which the packet needs
+              to be sent out. This is optional and  when  not  specified,  OVN
+              will  automatically  figure  this out based on the <b>n</b><b>e</b><b>x</b><b>t</b><b>h</b><b>o</b><b>p</b>. When
+              this is specified and there are multiple  IP  addresses  on  the
+              router  port and none of them are in the same subnet of <b>n</b><b>e</b><b>x</b><b>t</b><b>h</b><b>o</b><b>p</b>,
+              OVN chooses the first IP address as the one via which  the  <b>n</b><b>e</b><b>x</b>‐‐
+              <b>t</b><b>h</b><b>o</b><b>p</b> is reachable.
+
+       <b>b</b><b>f</b><b>d</b>: optional weak reference to <b>B</b><b>F</b><b>D</b>
+              Reference to <b>B</b><b>F</b><b>D</b> row if the route has associated a BFD session
+
+       <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>_</b><b>t</b><b>a</b><b>b</b><b>l</b><b>e</b>: string
+              Any  string to place route to separate routing table. If Logical
+              Router Port has configured value  in  <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>_</b><b>t</b><b>a</b><b>b</b><b>l</b><b>e</b>  other
+              than empty string, OVN performs route lookup for all packets en‐
+              tering  Logical  Router  ingress  pipeline from this port in the
+              following manner:
+
+              •      1. First lookup among  "global"  routes:  routes  without
+                     <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>_</b><b>t</b><b>a</b><b>b</b><b>l</b><b>e</b>  value  set  and routes to directly connected
+                     networks.
+
+              •      2. Next lookup among routes with same  <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>_</b><b>t</b><b>a</b><b>b</b><b>l</b><b>e</b>  value
+                     as specified in LRP’s options:route_table field.
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b> <b>:</b> <b>i</b><b>c</b><b>-</b><b>l</b><b>e</b><b>a</b><b>r</b><b>n</b><b>e</b><b>d</b><b>-</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b>: optional string
+              <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b>  populates  this  key  if  the  route is learned from the
+              global <b>O</b><b>V</b><b>N</b><b>_</b><b>I</b><b>C</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database. In this case the  value  will
+              be   set  to  the  uuid  of  the  row  in  <b>R</b><b>o</b><b>u</b><b>t</b><b>e</b>  table  of  the
+              <b>O</b><b>V</b><b>N</b><b>_</b><b>I</b><b>C</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+              See <b>E</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> <b>I</b><b>D</b><b>s</b> at the beginning of this document.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>: map of string-string pairs
+              This column provides general key/value settings.  The  supported
+              options are described individually below.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>e</b><b>c</b><b>m</b><b>p</b><b>_</b><b>s</b><b>y</b><b>m</b><b>m</b><b>e</b><b>t</b><b>r</b><b>i</b><b>c</b><b>_</b><b>r</b><b>e</b><b>p</b><b>l</b><b>y</b>: optional string
+              If true, then new traffic that arrives over this route will have
+              its  reply  traffic bypass ECMP route selection and will be sent
+              out this route instead. Note  that  this  option  overrides  any
+              rules  set  in the <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>p</b><b>o</b><b>l</b><b>i</b><b>c</b><b>y</b> table. This option only
+              works on gateway  routers  (routers  that  have  <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>
+              set).
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>o</b><b>r</b><b>i</b><b>g</b><b>i</b><b>n</b>: optional string
+              In case ovn-interconnection has been learned this route, it will
+              have its origin set: either "connected" or "static". This key is
+              supposed  to  be  written only by <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b> daemon. ovn-northd then
+              checks  this  value  when  generating   Logical   Flows.   <b>L</b><b>o</b><b>g</b><b>i</b>‐‐
+              <b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>S</b><b>t</b><b>a</b><b>t</b><b>i</b><b>c</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b>  records with same <b>i</b><b>p</b><b>_</b><b>p</b><b>r</b><b>e</b><b>f</b><b>i</b><b>x</b> within same
+              Logical Router will have next lookup order based on  <b>o</b><b>r</b><b>i</b><b>g</b><b>i</b><b>n</b>  key
+              value:
+
+              1.  connected
+
+              2.  static
+<b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>P</b><b>o</b><b>l</b><b>i</b><b>c</b><b>y</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Each  row  in  this  table  represents one routing policy for a logical
+       router that points to it through its <b>p</b><b>o</b><b>l</b><b>i</b><b>c</b><b>i</b><b>e</b><b>s</b> column. The <b>a</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b> column
+       for the highest-<b>p</b><b>r</b><b>i</b><b>o</b><b>r</b><b>i</b><b>t</b><b>y</b>  matching  row  in  this  table  determines  a
+       packet’s  treatment. If no row matches, packets are allowed by default.
+       (Default-deny treatment is possible: add a rule with <b>p</b><b>r</b><b>i</b><b>o</b><b>r</b><b>i</b><b>t</b><b>y</b> 0,  <b>1</b>  as
+       <b>m</b><b>a</b><b>t</b><b>c</b><b>h</b>, and <b>d</b><b>r</b><b>o</b><b>p</b> as <b>a</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>.)
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>p</b><b>r</b><b>i</b><b>o</b><b>r</b><b>i</b><b>t</b><b>y</b>                      integer, in range 0 to 32,767
+       <b>m</b><b>a</b><b>t</b><b>c</b><b>h</b>                         string
+       <b>a</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>                        string, one of <b>a</b><b>l</b><b>l</b><b>o</b><b>w</b>, <b>d</b><b>r</b><b>o</b><b>p</b>, or <b>r</b><b>e</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b>
+       <b>n</b><b>e</b><b>x</b><b>t</b><b>h</b><b>o</b><b>p</b>                       optional string
+       <b>n</b><b>e</b><b>x</b><b>t</b><b>h</b><b>o</b><b>p</b><b>s</b>                      set of strings
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>p</b><b>k</b><b>t</b><b>_</b><b>m</b><b>a</b><b>r</b><b>k</b>            optional string
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>p</b><b>r</b><b>i</b><b>o</b><b>r</b><b>i</b><b>t</b><b>y</b>: integer, in range 0 to 32,767
+              The  routing  policy’s  priority.  Rules with numerically higher
+              priority take precedence  over  those  with  lower.  A  rule  is
+              uniquely identified by the priority and match string.
+
+       <b>m</b><b>a</b><b>t</b><b>c</b><b>h</b>: string
+              The  packets  that  the routing policy should match, in the same
+              expression language used for the <b>m</b><b>a</b><b>t</b><b>c</b><b>h</b> column in the OVN  South‐
+              bound database’s <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>F</b><b>l</b><b>o</b><b>w</b> table.
+
+              By  default all traffic is allowed. When writing a more restric‐
+              tive policy, it is important to remember to allow flows such  as
+              ARP and IPv6 neighbor discovery packets.
+
+       <b>a</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>: string, one of <b>a</b><b>l</b><b>l</b><b>o</b><b>w</b>, <b>d</b><b>r</b><b>o</b><b>p</b>, or <b>r</b><b>e</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b>
+              The action to take when the routing policy matches:
+
+              •      <b>a</b><b>l</b><b>l</b><b>o</b><b>w</b>: Forward the packet.
+
+              •      <b>d</b><b>r</b><b>o</b><b>p</b>: Silently drop the packet.
+
+              •      <b>r</b><b>e</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b>: Reroute packet to <b>n</b><b>e</b><b>x</b><b>t</b><b>h</b><b>o</b><b>p</b> or <b>n</b><b>e</b><b>x</b><b>t</b><b>h</b><b>o</b><b>p</b><b>s</b>.
+
+       <b>n</b><b>e</b><b>x</b><b>t</b><b>h</b><b>o</b><b>p</b>: optional string
+              Note: This column is deprecated in favor of <b>n</b><b>e</b><b>x</b><b>t</b><b>h</b><b>o</b><b>p</b><b>s</b>.
+
+              Next-hop  IP  address for this route, which should be the IP ad‐
+              dress of a connected router port or the IP address of a  logical
+              port.
+
+       <b>n</b><b>e</b><b>x</b><b>t</b><b>h</b><b>o</b><b>p</b><b>s</b>: set of strings
+              Next-hop  ECMP  IP addresses for this route. Each IP in the list
+              should be the IP address of a connected router port  or  the  IP
+              address of a logical port.
+
+              One IP from the list is selected as next hop.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>p</b><b>k</b><b>t</b><b>_</b><b>m</b><b>a</b><b>r</b><b>k</b>: optional string
+              Marks the packet with the value specified when the router policy
+              is applied. CMS can inspect this packet marker and take some de‐
+              cisions  if desired. This value is not preserved when the packet
+              goes out on the wire.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+              See <b>E</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> <b>I</b><b>D</b><b>s</b> at the beginning of this document.
+
+<b>N</b><b>A</b><b>T</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Each record represents a NAT rule.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>t</b><b>y</b><b>p</b><b>e</b>                          string, one of  <b>d</b><b>n</b><b>a</b><b>t</b>,  <b>d</b><b>n</b><b>a</b><b>t</b><b>_</b><b>a</b><b>n</b><b>d</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b>,  or
+                                     <b>s</b><b>n</b><b>a</b><b>t</b>
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>p</b>                   string
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>m</b><b>a</b><b>c</b>                  optional string
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b><b>_</b><b>r</b><b>a</b><b>n</b><b>g</b><b>e</b>           string
+       <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>i</b><b>p</b>                    string
+       <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>                  optional string
+       <b>a</b><b>l</b><b>l</b><b>o</b><b>w</b><b>e</b><b>d</b><b>_</b><b>e</b><b>x</b><b>t</b><b>_</b><b>i</b><b>p</b><b>s</b>               optional <b>A</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>_</b><b>S</b><b>e</b><b>t</b>
+       <b>e</b><b>x</b><b>e</b><b>m</b><b>p</b><b>t</b><b>e</b><b>d</b><b>_</b><b>e</b><b>x</b><b>t</b><b>_</b><b>i</b><b>p</b><b>s</b>              optional <b>A</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>_</b><b>S</b><b>e</b><b>t</b>
+       <b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>                  optional    weak   reference   to   <b>L</b><b>o</b><b>g</b><b>i</b>‐‐
+                                     <b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b>
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>s</b><b>t</b><b>a</b><b>t</b><b>e</b><b>l</b><b>e</b><b>s</b><b>s</b>           optional string
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>a</b><b>d</b><b>d</b><b>_</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b>           optional string
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>t</b><b>y</b><b>p</b><b>e</b>: string, one of <b>d</b><b>n</b><b>a</b><b>t</b>, <b>d</b><b>n</b><b>a</b><b>t</b><b>_</b><b>a</b><b>n</b><b>d</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b>, or <b>s</b><b>n</b><b>a</b><b>t</b>
+              Type of the NAT rule.
+
+              •      When <b>t</b><b>y</b><b>p</b><b>e</b> is <b>d</b><b>n</b><b>a</b><b>t</b>, the externally visible IP address  <b>e</b><b>x</b>‐‐
+                     <b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>p</b>  is DNATted to the IP address <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>i</b><b>p</b> in the
+                     logical space.
+
+              •      When <b>t</b><b>y</b><b>p</b><b>e</b> is <b>s</b><b>n</b><b>a</b><b>t</b>, IP packets with their  source  IP  ad‐
+                     dress that either matches the IP address in <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>i</b><b>p</b> or
+                     is  in  the network provided by <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>i</b><b>p</b> is SNATed into
+                     the IP address in <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>p</b>.
+
+              •      When <b>t</b><b>y</b><b>p</b><b>e</b> is <b>d</b><b>n</b><b>a</b><b>t</b><b>_</b><b>a</b><b>n</b><b>d</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b>, the externally visible IP ad‐
+                     dress <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>p</b> is DNATted to the IP address <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>i</b><b>p</b>
+                     in the logical space. In addition, IP  packets  with  the
+                     source  IP address that matches <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>i</b><b>p</b> is SNATed into
+                     the IP address in <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>p</b>.
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>p</b>: string
+              An IPv4 address.
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>m</b><b>a</b><b>c</b>: optional string
+              A MAC address.
+
+              This is only used on the gateway port  on  distributed  routers.
+              This must be specified in order for the NAT rule to be processed
+              in a distributed manner on all chassis. If this is not specified
+              for  a NAT rule on a distributed router, then this NAT rule will
+              be processed in a centralized manner on  the  gateway  port  in‐
+              stance on the gateway chassis.
+
+              This  MAC  address must be unique on the logical switch that the
+              gateway port is attached to. If the MAC address used on the <b>l</b><b>o</b><b>g</b>‐‐
+              <b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b> is globally unique, then that MAC address can be spec‐
+              ified as this <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>m</b><b>a</b><b>c</b>.
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b><b>_</b><b>r</b><b>a</b><b>n</b><b>g</b><b>e</b>: string
+              L4 source port range
+
+              Range of ports, from which a port number  will  be  picked  that
+              will  replace the source port of to be NATed packet. This is ba‐
+              sically PAT (port address translation).
+
+              Value of the column is in the format, port_lo-port_hi. For exam‐
+              ple: external_port_range : "1-30000"
+
+              Valid range of ports is 1-65535.
+
+       <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>i</b><b>p</b>: string
+              An IPv4 network (e.g 192.168.1.0/24) or an IPv4 address.
+
+       <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>: optional string
+              The name of the logical port where the <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>i</b><b>p</b> resides.
+
+              This is only used on distributed routers. This must be specified
+              in order for the NAT rule to be processed in a distributed  man‐
+              ner on all chassis. If this is not specified for a NAT rule on a
+              distributed  router,  then  this NAT rule will be processed in a
+              centralized manner on the gateway port instance on  the  gateway
+              chassis.
+
+       <b>a</b><b>l</b><b>l</b><b>o</b><b>w</b><b>e</b><b>d</b><b>_</b><b>e</b><b>x</b><b>t</b><b>_</b><b>i</b><b>p</b><b>s</b>: optional <b>A</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>_</b><b>S</b><b>e</b><b>t</b>
+              It  represents  Address Set of external ips that NAT rule is ap‐
+              plicable to. For SNAT type NAT rules, this refers to destination
+              addresses. For DNAT type NAT rules, this refers  to  source  ad‐
+              dresses.
+
+              This  configuration overrides the default NAT behavior of apply‐
+              ing a rule solely based on internal IP. Without this  configura‐
+              tion,  NAT  happens  without  considering  the  external IP (i.e
+              dest/source for snat/dnat type rule).  With  this  configuration
+              NAT  rule is applied ONLY if external ip is in the input Address
+              Set.
+
+       <b>e</b><b>x</b><b>e</b><b>m</b><b>p</b><b>t</b><b>e</b><b>d</b><b>_</b><b>e</b><b>x</b><b>t</b><b>_</b><b>i</b><b>p</b><b>s</b>: optional <b>A</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>_</b><b>S</b><b>e</b><b>t</b>
+              It represents Address Set of external ips that NAT rule  is  NOT
+              applicable  to. For SNAT type NAT rules, this refers to destina‐
+              tion addresses. For DNAT type NAT rules, this refers  to  source
+              addresses.
+
+              This  configuration overrides the default NAT behavior of apply‐
+              ing a rule solely based on internal IP. Without this  configura‐
+              tion,  NAT  happens  without  considering  the  external IP (i.e
+              dest/source for snat/dnat type rule).  With  this  configuration
+              NAT  rule  is NOT applied if external ip is in the input Address
+              Set.
+
+              If there are NAT rules in a logical router with  overlapping  IP
+              prefixes  (including /32), then usage of <u>e</u><u>x</u><u>e</u><u>m</u><u>p</u><u>t</u><u>e</u><u>d</u><b>_</b><u>e</u><u>x</u><u>t</u><b>_</b><u>i</u><u>p</u><u>s</u> should
+              be avoided in following scenario.  a.  SNAT  rule  (let  us  say
+              RULE1)  with logical_ip PREFIX/MASK (let us say 50.0.0.0/24). b.
+              SNAT rule (let us say RULE2) with logical_ip PREFIX/MASK+1  (let
+              us  say  50.0.0.0/25). c. Now, if exempted_ext_ips is associated
+              with RULE2, then a logical ip which matches both 50.0.0.0/24 and
+              50.0.0.0/25 may get the RULE2 applied to it instead of RULE1.
+
+              <u>a</u><u>l</u><u>l</u><u>o</u><u>w</u><u>e</u><u>d</u><b>_</b><u>e</u><u>x</u><u>t</u><b>_</b><u>i</u><u>p</u><u>s</u> and <u>e</u><u>x</u><u>e</u><u>m</u><u>p</u><u>t</u><u>e</u><u>d</u><b>_</b><u>e</u><u>x</u><u>t</u><b>_</b><u>i</u><u>p</u><u>s</u> are mutually  exclusive  to
+              each  other.  If  both Address Sets are set for a rule, then the
+              NAT rule is not considered.
+
+       <b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>: optional weak reference to <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b>
+              A distributed gateway  port  in  the  <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b>  table
+              where the NAT rule needs to be applied.
+
+              When multiple distributed gateway ports are configured on a <b>L</b><b>o</b><b>g</b>‐‐
+              <b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b>,  applying  a  NAT  rule  at each of the distributed
+              gateway ports might not be desired. Consider the  case  where  a
+              logical router has 2 distributed gateway port, one with <b>n</b><b>e</b><b>t</b><b>w</b><b>o</b><b>r</b><b>k</b><b>s</b>
+              <b>5</b><b>0</b><b>.</b><b>0</b><b>.</b><b>0</b><b>.</b><b>1</b><b>0</b><b>/</b><b>2</b><b>4</b>  and  the  other with <b>n</b><b>e</b><b>t</b><b>w</b><b>o</b><b>r</b><b>k</b><b>s</b> <b>6</b><b>0</b><b>.</b><b>0</b><b>.</b><b>0</b><b>.</b><b>1</b><b>0</b><b>/</b><b>2</b><b>4</b>. If the
+              logical  router  has  a  NAT  rule  of  <b>t</b><b>y</b><b>p</b><b>e</b>  <b>s</b><b>n</b><b>a</b><b>t</b>,   <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>i</b><b>p</b>
+              <b>1</b><b>0</b><b>.</b><b>1</b><b>.</b><b>1</b><b>.</b><b>0</b><b>/</b><b>2</b><b>4</b>  and  <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>p</b> <b>5</b><b>0</b><b>.</b><b>1</b><b>.</b><b>1</b><b>.</b><b>2</b><b>0</b><b>/</b><b>2</b><b>4</b>, the rule needs to be
+              selectively applied on matching packets entering/leaving through
+              the distributed gateway port with <b>n</b><b>e</b><b>t</b><b>w</b><b>o</b><b>r</b><b>k</b><b>s</b> <b>5</b><b>0</b><b>.</b><b>0</b><b>.</b><b>0</b><b>.</b><b>1</b><b>0</b><b>/</b><b>2</b><b>4</b>.
+
+              When a logical router has multiple distributed gateway ports and
+              this column is not set for a NAT rule, then the rule will be ap‐
+              plied at the distributed gateway port which is in the same  net‐
+              work  as  the <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>p</b> of the NAT rule, if such a router port
+              exists. If logical router has a single distributed gateway  port
+              and  this column is not set for a NAT rule, the rule will be ap‐
+              plied at the distributed gateway port even if the router port is
+              not in the same network as the <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>p</b> of the NAT rule.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>s</b><b>t</b><b>a</b><b>t</b><b>e</b><b>l</b><b>e</b><b>s</b><b>s</b>: optional string
+              Indicates if a dnat_and_snat  rule  should  lead  to  connection
+              tracking state or not.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>a</b><b>d</b><b>d</b><b>_</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b>: optional string
+              If  set  to  <b>t</b><b>r</b><b>u</b><b>e</b>, then neighbor routers will have logical flows
+              added that will allow for routing to the NAT  address.  It  also
+              will  have  ARP  resolution logical flows added. By setting this
+              option,  it  means  there  is  no  reason  to  create  a   <b>L</b><b>o</b><b>g</b><b>i</b>‐‐
+              <b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>S</b><b>t</b><b>a</b><b>t</b><b>i</b><b>c</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b>  from  neighbor  routers to this NAT ad‐
+              dress. It also means that no ARP request is required for  neigh‐
+              bor  routers  to  learn the IP-MAC mapping for this NAT address.
+              This option only applies to NATs of type <b>d</b><b>n</b><b>a</b><b>t</b> and <b>d</b><b>n</b><b>a</b><b>t</b><b>_</b><b>a</b><b>n</b><b>d</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b>.
+              For more information about what flows are added for  IP  routes,
+              please see the <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> manpage section on IP Routing.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+              See <b>E</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> <b>I</b><b>D</b><b>s</b> at the beginning of this document.
+
+<b>D</b><b>H</b><b>C</b><b>P</b><b>_</b><b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       OVN  implements  native  DHCPv4  support which caters to the common use
+       case of providing an IPv4 address to a booting  instance  by  providing
+       stateless replies to DHCPv4 requests based on statically configured ad‐
+       dress  mappings. To do this it allows a short list of DHCPv4 options to
+       be configured and applied at each compute host running <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>.
+
+       OVN also implements native  DHCPv6  support  which  provides  stateless
+       replies to DHCPv6 requests.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>c</b><b>i</b><b>d</b><b>r</b>                          string
+       <u>D</u><u>H</u><u>C</u><u>P</u><u>v</u><u>4</u> <u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+         <u>M</u><u>a</u><u>n</u><u>d</u><u>a</u><u>t</u><u>o</u><u>r</u><u>y</u> <u>D</u><u>H</u><u>C</u><u>P</u><u>v</u><u>4</u> <u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b><b>_</b><b>i</b><b>d</b>      optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b><b>_</b><b>m</b><b>a</b><b>c</b>     optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>l</b><b>e</b><b>a</b><b>s</b><b>e</b><b>_</b><b>t</b><b>i</b><b>m</b><b>e</b>     optional  string,  containing an integer,
+                                     in range 0 to 4,294,967,295
+         <u>I</u><u>P</u><u>v</u><u>4</u> <u>D</u><u>H</u><u>C</u><u>P</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b>         optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>n</b><b>e</b><b>t</b><b>m</b><b>a</b><b>s</b><b>k</b>        optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>d</b><b>n</b><b>s</b><b>_</b><b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b>     optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>l</b><b>o</b><b>g</b><b>_</b><b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b>     optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>l</b><b>p</b><b>r</b><b>_</b><b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b>     optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>s</b><b>w</b><b>a</b><b>p</b><b>_</b><b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b>    optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>p</b><b>o</b><b>l</b><b>i</b><b>c</b><b>y</b><b>_</b><b>f</b><b>i</b><b>l</b><b>t</b><b>e</b><b>r</b>  optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>s</b><b>o</b><b>l</b><b>i</b><b>c</b><b>i</b><b>t</b><b>a</b><b>t</b><b>i</b><b>o</b><b>n</b>
+                                     optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>n</b><b>i</b><b>s</b><b>_</b><b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b>     optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>n</b><b>t</b><b>p</b><b>_</b><b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b>     optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>n</b><b>e</b><b>t</b><b>b</b><b>i</b><b>o</b><b>s</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b><b>_</b><b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b>
+                                     optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>c</b><b>l</b><b>a</b><b>s</b><b>s</b><b>l</b><b>e</b><b>s</b><b>s</b><b>_</b><b>s</b><b>t</b><b>a</b><b>t</b><b>i</b><b>c</b><b>_</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b>
+                                     optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>m</b><b>s</b><b>_</b><b>c</b><b>l</b><b>a</b><b>s</b><b>s</b><b>l</b><b>e</b><b>s</b><b>s</b><b>_</b><b>s</b><b>t</b><b>a</b><b>t</b><b>i</b><b>c</b><b>_</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b>
+                                     optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>n</b><b>e</b><b>x</b><b>t</b><b>_</b><b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b>    optional string
+         <u>B</u><u>o</u><u>o</u><u>l</u><u>e</u><u>a</u><u>n</u> <u>D</u><u>H</u><u>C</u><u>P</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>i</b><b>p</b><b>_</b><b>f</b><b>o</b><b>r</b><b>w</b><b>a</b><b>r</b><b>d</b><b>_</b><b>e</b><b>n</b><b>a</b><b>b</b><b>l</b><b>e</b>
+                                     optional string, either <b>0</b> or <b>1</b>
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>d</b><b>i</b><b>s</b><b>c</b><b>o</b><b>v</b><b>e</b><b>r</b><b>y</b>
+                                     optional string, either <b>0</b> or <b>1</b>
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>e</b><b>t</b><b>h</b><b>e</b><b>r</b><b>n</b><b>e</b><b>t</b><b>_</b><b>e</b><b>n</b><b>c</b><b>a</b><b>p</b> optional string, either <b>0</b> or <b>1</b>
+         <u>I</u><u>n</u><u>t</u><u>e</u><u>g</u><u>e</u><u>r</u> <u>D</u><u>H</u><u>C</u><u>P</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>d</b><b>e</b><b>f</b><b>a</b><b>u</b><b>l</b><b>t</b><b>_</b><b>t</b><b>t</b><b>l</b>    optional string, containing  an  integer,
+                                     in range 0 to 255
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>t</b><b>c</b><b>p</b><b>_</b><b>t</b><b>t</b><b>l</b>        optional  string,  containing an integer,
+                                     in range 0 to 255
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>m</b><b>t</b><b>u</b>            optional string, containing  an  integer,
+                                     in range 68 to 65,535
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>T</b><b>1</b>             optional  string,  containing an integer,
+                                     in range 68 to 4,294,967,295
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>T</b><b>2</b>             optional string, containing  an  integer,
+                                     in range 68 to 4,294,967,295
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>a</b><b>r</b><b>p</b><b>_</b><b>c</b><b>a</b><b>c</b><b>h</b><b>e</b><b>_</b><b>t</b><b>i</b><b>m</b><b>e</b><b>o</b><b>u</b><b>t</b>
+                                     optional  string,  containing an integer,
+                                     in range 0 to 255
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>t</b><b>c</b><b>p</b><b>_</b><b>k</b><b>e</b><b>e</b><b>p</b><b>a</b><b>l</b><b>i</b><b>v</b><b>e</b><b>_</b><b>i</b><b>n</b><b>t</b><b>e</b><b>r</b><b>v</b><b>a</b><b>l</b>
+                                     optional string, containing  an  integer,
+                                     in range 0 to 255
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>n</b><b>e</b><b>t</b><b>b</b><b>i</b><b>o</b><b>s</b><b>_</b><b>n</b><b>o</b><b>d</b><b>e</b><b>_</b><b>t</b><b>y</b><b>p</b><b>e</b>
+                                     optional  string,  containing an integer,
+                                     in range 0 to 255
+         <u>S</u><u>t</u><u>r</u><u>i</u><u>n</u><u>g</u> <u>D</u><u>H</u><u>C</u><u>P</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>w</b><b>p</b><b>a</b><b>d</b>           optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>b</b><b>o</b><b>o</b><b>t</b><b>f</b><b>i</b><b>l</b><b>e</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b>  optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>p</b><b>r</b><b>e</b><b>f</b><b>i</b><b>x</b>    optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>t</b><b>f</b><b>t</b><b>p</b><b>_</b><b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b><b>_</b><b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b>
+                                     optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>h</b><b>o</b><b>s</b><b>t</b><b>n</b><b>a</b><b>m</b><b>e</b>       optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>d</b><b>o</b><b>m</b><b>a</b><b>i</b><b>n</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b>    optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>b</b><b>o</b><b>o</b><b>t</b><b>f</b><b>i</b><b>l</b><b>e</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b><b>_</b><b>a</b><b>l</b><b>t</b>
+                                     optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>b</b><b>r</b><b>o</b><b>a</b><b>d</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b>
+                                     optional string
+         <u>D</u><u>H</u><u>C</u><u>P</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u> <u>o</u><u>f</u> <u>t</u><u>y</u><u>p</u><u>e</u> <u>h</u><u>o</u><u>s</u><u>t</u><b>_</b><u>i</u><u>d</u><u>:</u>
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>t</b><b>f</b><b>t</b><b>p</b><b>_</b><b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b>    optional string
+          <u>D</u><u>H</u><u>C</u><u>P</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u> <u>o</u><u>f</u> <u>t</u><u>y</u><u>p</u><u>e</u> <u>d</u><u>o</u><u>m</u><u>a</u><u>i</u><u>n</u><u>s</u><u>:</u>
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>d</b><b>o</b><b>m</b><b>a</b><b>i</b><b>n</b><b>_</b><b>s</b><b>e</b><b>a</b><b>r</b><b>c</b><b>h</b><b>_</b><b>l</b><b>i</b><b>s</b><b>t</b>
+                                     optional string
+       <u>D</u><u>H</u><u>C</u><u>P</u><u>v</u><u>6</u> <u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+         <u>M</u><u>a</u><u>n</u><u>d</u><u>a</u><u>t</u><u>o</u><u>r</u><u>y</u> <u>D</u><u>H</u><u>C</u><u>P</u><u>v</u><u>6</u> <u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b><b>_</b><b>i</b><b>d</b>      optional string
+         <u>I</u><u>P</u><u>v</u><u>6</u> <u>D</u><u>H</u><u>C</u><u>P</u><u>v</u><u>6</u> <u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>d</b><b>n</b><b>s</b><b>_</b><b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b>     optional string
+         <u>S</u><u>t</u><u>r</u><u>i</u><u>n</u><u>g</u> <u>D</u><u>H</u><u>C</u><u>P</u><u>v</u><u>6</u> <u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>d</b><b>o</b><b>m</b><b>a</b><b>i</b><b>n</b><b>_</b><b>s</b><b>e</b><b>a</b><b>r</b><b>c</b><b>h</b>  optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>d</b><b>h</b><b>c</b><b>p</b><b>v</b><b>6</b><b>_</b><b>s</b><b>t</b><b>a</b><b>t</b><b>e</b><b>l</b><b>e</b><b>s</b><b>s</b>
+                                     optional string
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>c</b><b>i</b><b>d</b><b>r</b>: string
+              The DHCPv4/DHCPv6 options will be included if the  logical  port
+              has its IP address in this <b>c</b><b>i</b><b>d</b><b>r</b>.
+
+     <u>D</u><u>H</u><u>C</u><u>P</u><u>v</u><u>4</u> <u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       The  CMS  should define the set of DHCPv4 options as key/value pairs in
+       the <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> column of this table. For <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> to  include  these
+       DHCPv4  options, the <b>d</b><b>h</b><b>c</b><b>p</b><b>v</b><b>4</b><b>_</b><b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> of <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b> should refer
+       to an entry in this table.
+
+     <u>M</u><u>a</u><u>n</u><u>d</u><u>a</u><u>t</u><u>o</u><u>r</u><u>y</u> <u>D</u><u>H</u><u>C</u><u>P</u><u>v</u><u>4</u> <u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       The following options must be defined.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b><b>_</b><b>i</b><b>d</b>: optional string
+              The IP address for the DHCP server to use. This should be in the
+              subnet of the offered IP. This is also included in the DHCP  of‐
+              fer as option 54, ``server identifier.’’
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b><b>_</b><b>m</b><b>a</b><b>c</b>: optional string
+              The Ethernet address for the DHCP server to use.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>l</b><b>e</b><b>a</b><b>s</b><b>e</b><b>_</b><b>t</b><b>i</b><b>m</b><b>e</b>: optional string, containing an integer, in range
+       0 to 4,294,967,295
+              The offered lease time in seconds,
+
+              The DHCPv4 option code for this option is 51.
+
+     <u>I</u><u>P</u><u>v</u><u>4</u> <u>D</u><u>H</u><u>C</u><u>P</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       Below  are  the  supported  DHCPv4 options whose values are an IPv4 ad‐
+       dress, e.g. <b>1</b><b>9</b><b>2</b><b>.</b><b>1</b><b>6</b><b>8</b><b>.</b><b>1</b><b>.</b><b>1</b>. Some options accept  multiple  IPv4  addresses
+       enclosed  within  curly braces, e.g. <b>{</b><b>1</b><b>9</b><b>2</b><b>.</b><b>1</b><b>6</b><b>8</b><b>.</b><b>1</b><b>.</b><b>2</b><b>,</b> <b>1</b><b>9</b><b>2</b><b>.</b><b>1</b><b>6</b><b>8</b><b>.</b><b>1</b><b>.</b><b>3</b><b>}</b>. Please
+       refer to RFC 2132 for more details on DHCPv4 options and their codes.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b>: optional string
+              The IP address of a gateway for the client to use.  This  should
+              be  in  the subnet of the offered IP. The DHCPv4 option code for
+              this option is 3.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>n</b><b>e</b><b>t</b><b>m</b><b>a</b><b>s</b><b>k</b>: optional string
+              The DHCPv4 option code for this option is 1.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>d</b><b>n</b><b>s</b><b>_</b><b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b>: optional string
+              The DHCPv4 option code for this option is 6.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>l</b><b>o</b><b>g</b><b>_</b><b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b>: optional string
+              The DHCPv4 option code for this option is 7.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>l</b><b>p</b><b>r</b><b>_</b><b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b>: optional string
+              The DHCPv4 option code for this option is 9.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>s</b><b>w</b><b>a</b><b>p</b><b>_</b><b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b>: optional string
+              The DHCPv4 option code for this option is 16.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>p</b><b>o</b><b>l</b><b>i</b><b>c</b><b>y</b><b>_</b><b>f</b><b>i</b><b>l</b><b>t</b><b>e</b><b>r</b>: optional string
+              The DHCPv4 option code for this option is 21.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>s</b><b>o</b><b>l</b><b>i</b><b>c</b><b>i</b><b>t</b><b>a</b><b>t</b><b>i</b><b>o</b><b>n</b>: optional string
+              The DHCPv4 option code for this option is 32.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>n</b><b>i</b><b>s</b><b>_</b><b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b>: optional string
+              The DHCPv4 option code for this option is 41.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>n</b><b>t</b><b>p</b><b>_</b><b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b>: optional string
+              The DHCPv4 option code for this option is 42.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>n</b><b>e</b><b>t</b><b>b</b><b>i</b><b>o</b><b>s</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b><b>_</b><b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b>: optional string
+              The DHCPv4 option code for this option is 44.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>c</b><b>l</b><b>a</b><b>s</b><b>s</b><b>l</b><b>e</b><b>s</b><b>s</b><b>_</b><b>s</b><b>t</b><b>a</b><b>t</b><b>i</b><b>c</b><b>_</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b>: optional string
+              The DHCPv4 option code for this option is 121.
+
+              This option can contain one or more static routes, each of which
+              consists of a destination descriptor and the IP address  of  the
+              router that should be used to reach that destination. Please see
+              RFC 3442 for more details.
+
+              Example: <b>{</b><b>3</b><b>0</b><b>.</b><b>0</b><b>.</b><b>0</b><b>.</b><b>0</b><b>/</b><b>2</b><b>4</b><b>,</b><b>1</b><b>0</b><b>.</b><b>0</b><b>.</b><b>0</b><b>.</b><b>1</b><b>0</b><b>,</b> <b>0</b><b>.</b><b>0</b><b>.</b><b>0</b><b>.</b><b>0</b><b>/</b><b>0</b><b>,</b><b>1</b><b>0</b><b>.</b><b>0</b><b>.</b><b>0</b><b>.</b><b>1</b><b>}</b>
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>m</b><b>s</b><b>_</b><b>c</b><b>l</b><b>a</b><b>s</b><b>s</b><b>l</b><b>e</b><b>s</b><b>s</b><b>_</b><b>s</b><b>t</b><b>a</b><b>t</b><b>i</b><b>c</b><b>_</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b>: optional string
+              The  DHCPv4  option  code for this option is 249. This option is
+              similar to <b>c</b><b>l</b><b>a</b><b>s</b><b>s</b><b>l</b><b>e</b><b>s</b><b>s</b><b>_</b><b>s</b><b>t</b><b>a</b><b>t</b><b>i</b><b>c</b><b>_</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b> supported by Microsoft Windows
+              DHCPv4 clients.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>n</b><b>e</b><b>x</b><b>t</b><b>_</b><b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b>: optional string
+              The DHCPv4 option code for setting the "Next server IP  address"
+              field in the DHCP header.
+
+     <u>B</u><u>o</u><u>o</u><u>l</u><u>e</u><u>a</u><u>n</u> <u>D</u><u>H</u><u>C</u><u>P</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       These options accept a Boolean value, expressed as <b>0</b> for false or <b>1</b> for
+       true.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>i</b><b>p</b><b>_</b><b>f</b><b>o</b><b>r</b><b>w</b><b>a</b><b>r</b><b>d</b><b>_</b><b>e</b><b>n</b><b>a</b><b>b</b><b>l</b><b>e</b>: optional string, either <b>0</b> or <b>1</b>
+              The DHCPv4 option code for this option is 19.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>d</b><b>i</b><b>s</b><b>c</b><b>o</b><b>v</b><b>e</b><b>r</b><b>y</b>: optional string, either <b>0</b> or <b>1</b>
+              The DHCPv4 option code for this option is 31.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>e</b><b>t</b><b>h</b><b>e</b><b>r</b><b>n</b><b>e</b><b>t</b><b>_</b><b>e</b><b>n</b><b>c</b><b>a</b><b>p</b>: optional string, either <b>0</b> or <b>1</b>
+              The DHCPv4 option code for this option is 36.
+
+     <u>I</u><u>n</u><u>t</u><u>e</u><u>g</u><u>e</u><u>r</u> <u>D</u><u>H</u><u>C</u><u>P</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       These options accept a nonnegative integer value.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>d</b><b>e</b><b>f</b><b>a</b><b>u</b><b>l</b><b>t</b><b>_</b><b>t</b><b>t</b><b>l</b>: optional string, containing an integer, in range
+       0 to 255
+              The DHCPv4 option code for this option is 23.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>t</b><b>c</b><b>p</b><b>_</b><b>t</b><b>t</b><b>l</b>: optional string, containing an integer, in range 0
+       to 255
+              The DHCPv4 option code for this option is 37.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>m</b><b>t</b><b>u</b>: optional string, containing an integer, in range 68 to
+       65,535
+              The DHCPv4 option code for this option is 26.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>T</b><b>1</b>: optional string, containing an integer, in range 68 to
+       4,294,967,295
+              This  specifies  the time interval from address assignment until
+              the client begins trying to renew its address. The DHCPv4 option
+              code for this option is 58.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>T</b><b>2</b>: optional string, containing an integer, in range 68 to
+       4,294,967,295
+              This specifies the time interval from address  assignment  until
+              the  client  begins trying to rebind its address. The DHCPv4 op‐
+              tion code for this option is 59.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>a</b><b>r</b><b>p</b><b>_</b><b>c</b><b>a</b><b>c</b><b>h</b><b>e</b><b>_</b><b>t</b><b>i</b><b>m</b><b>e</b><b>o</b><b>u</b><b>t</b>: optional string, containing an integer, in
+       range 0 to 255
+              The DHCPv4 option code for this option is 35. This option speci‐
+              fies the timeout in seconds for ARP cache entries.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>t</b><b>c</b><b>p</b><b>_</b><b>k</b><b>e</b><b>e</b><b>p</b><b>a</b><b>l</b><b>i</b><b>v</b><b>e</b><b>_</b><b>i</b><b>n</b><b>t</b><b>e</b><b>r</b><b>v</b><b>a</b><b>l</b>: optional string, containing an inte‐
+       ger, in range 0 to 255
+              The DHCPv4 option code for this option is 38. This option speci‐
+              fies the interval that the client TCP should wait before sending
+              a keepalive message on a TCP connection.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>n</b><b>e</b><b>t</b><b>b</b><b>i</b><b>o</b><b>s</b><b>_</b><b>n</b><b>o</b><b>d</b><b>e</b><b>_</b><b>t</b><b>y</b><b>p</b><b>e</b>: optional string, containing an integer, in
+       range 0 to 255
+              The DHCPv4 option code for this option is 46.
+
+     <u>S</u><u>t</u><u>r</u><u>i</u><u>n</u><u>g</u> <u>D</u><u>H</u><u>C</u><u>P</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       These options accept a string value.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>w</b><b>p</b><b>a</b><b>d</b>: optional string
+              The DHCPv4 option code for this option is 252.  This  option  is
+              used  as part of web proxy auto discovery to provide a URL for a
+              web proxy.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>b</b><b>o</b><b>o</b><b>t</b><b>f</b><b>i</b><b>l</b><b>e</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b>: optional string
+              The DHCPv4 option code for this option is  67.  This  option  is
+              used to identify a bootfile.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>p</b><b>r</b><b>e</b><b>f</b><b>i</b><b>x</b>: optional string
+              The DHCPv4 option code for this option is 210. In PXELINUX’ case
+              this  option is used to set a common path prefix, instead of de‐
+              riving it from the bootfile name.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>t</b><b>f</b><b>t</b><b>p</b><b>_</b><b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b><b>_</b><b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b>: optional string
+              The DHCPv4 option code for this option is 150. The  option  con‐
+              tains  one  or more IPv4 addresses that the client MAY use. This
+              option is Cisco proprietary, the IEEE standard that matches with
+              this requirement is option 66 (tftp_server).
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>h</b><b>o</b><b>s</b><b>t</b><b>n</b><b>a</b><b>m</b><b>e</b>: optional string
+              The DHCPv4 option code for this option is 12. If set,  indicates
+              the  DHCPv4 option "Hostname". Alternatively, this option can be
+              configured   in   <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>h</b><b>o</b><b>s</b><b>t</b><b>n</b><b>a</b><b>m</b><b>e</b>   column   in   table   <b>L</b><b>o</b><b>g</b><b>i</b>‐‐
+              <b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b>.  If  Hostname  option value is set in both con‐
+              flicting  <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b>  and  <b>D</b><b>H</b><b>C</b><b>P</b><b>_</b><b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>  tables,  <b>L</b><b>o</b><b>g</b><b>i</b>‐‐
+              <b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b> takes precedence.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>d</b><b>o</b><b>m</b><b>a</b><b>i</b><b>n</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b>: optional string
+              The DHCPv4 option code for this option is 15. This option speci‐
+              fies the domain name that client should use when resolving host‐
+              names via the Domain Name System.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>b</b><b>o</b><b>o</b><b>t</b><b>f</b><b>i</b><b>l</b><b>e</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b><b>_</b><b>a</b><b>l</b><b>t</b>: optional string
+              "bootfile_name_alt"  option  is  used to support iPXE. When both
+              "bootfile_name" and "bootfile_name_alt" are provided by the CMS,
+              "bootfile_name" will be used for option 67 if the  dhcp  request
+              contains  etherboot  option (175), otherwise "bootfile_name_alt"
+              will be used.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>b</b><b>r</b><b>o</b><b>a</b><b>d</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b>: optional string
+              The DHCPv4 option code for this option is 28. This option speci‐
+              fies the IP address used as a broadcast address.
+
+     <u>D</u><u>H</u><u>C</u><u>P</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u> <u>o</u><u>f</u> <u>t</u><u>y</u><u>p</u><u>e</u> <u>h</u><u>o</u><u>s</u><u>t</u><b>_</b><u>i</u><u>d</u><u>:</u>
+
+       These options accept either an IPv4 address or a string value.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>t</b><b>f</b><b>t</b><b>p</b><b>_</b><b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b>: optional string
+              The DHCPv4 option code for this option is 66.
+
+      <u>D</u><u>H</u><u>C</u><u>P</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u> <u>o</u><u>f</u> <u>t</u><u>y</u><u>p</u><u>e</u> <u>d</u><u>o</u><u>m</u><u>a</u><u>i</u><u>n</u><u>s</u><u>:</u>
+
+       These options accept string value which is a comma  separated  list  of
+       domain names. The domain names are encoded based on RFC 1035.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>d</b><b>o</b><b>m</b><b>a</b><b>i</b><b>n</b><b>_</b><b>s</b><b>e</b><b>a</b><b>r</b><b>c</b><b>h</b><b>_</b><b>l</b><b>i</b><b>s</b><b>t</b>: optional string
+              The DHCPv4 option code for this option is 119.
+
+     <u>D</u><u>H</u><u>C</u><u>P</u><u>v</u><u>6</u> <u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       OVN  also  implements  native DHCPv6 support. The CMS should define the
+       set of DHCPv6 options as key/value pairs.  The  define  DHCPv6  options
+       will  be  included  in  the  DHCPv6  response to the DHCPv6 Solicit/Re‐
+       quest/Confirm packet from the logical ports having the  IPv6  addresses
+       in the <b>c</b><b>i</b><b>d</b><b>r</b>.
+
+     <u>M</u><u>a</u><u>n</u><u>d</u><u>a</u><u>t</u><u>o</u><u>r</u><u>y</u> <u>D</u><u>H</u><u>C</u><u>P</u><u>v</u><u>6</u> <u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       The following options must be defined.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b><b>_</b><b>i</b><b>d</b>: optional string
+              The  Ethernet  address  for the DHCP server to use. This is also
+              included in the DHCPv6 reply as option 2, ``Server  Identifier’’
+              to  carry  a  DUID  identifying  a server between a client and a
+              server. <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> defines DUID based on Link-layer  Address
+              [DUID-LL].
+
+     <u>I</u><u>P</u><u>v</u><u>6</u> <u>D</u><u>H</u><u>C</u><u>P</u><u>v</u><u>6</u> <u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       Below  are  the  supported  DHCPv6 options whose values are an IPv6 ad‐
+       dress, e.g. <b>a</b><b>e</b><b>f</b><b>0</b><b>:</b><b>:</b><b>4</b>. Some options accept multiple  IPv6  addresses  en‐
+       closed  within  curly  braces, e.g. <b>{</b><b>a</b><b>e</b><b>f</b><b>0</b><b>:</b><b>:</b><b>4</b><b>,</b> <b>a</b><b>e</b><b>f</b><b>0</b><b>:</b><b>:</b><b>5</b><b>}</b>. Please refer to
+       RFC 3315 for more details on DHCPv6 options and their codes.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>d</b><b>n</b><b>s</b><b>_</b><b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b>: optional string
+              The DHCPv6 option code for this option is 23. This option speci‐
+              fies the DNS servers that the VM should use.
+
+     <u>S</u><u>t</u><u>r</u><u>i</u><u>n</u><u>g</u> <u>D</u><u>H</u><u>C</u><u>P</u><u>v</u><u>6</u> <u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       These options accept string values.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>d</b><b>o</b><b>m</b><b>a</b><b>i</b><b>n</b><b>_</b><b>s</b><b>e</b><b>a</b><b>r</b><b>c</b><b>h</b>: optional string
+              The DHCPv6 option code for this option is 24. This option speci‐
+              fies the domain search list the client  should  use  to  resolve
+              hostnames with DNS.
+
+              Example: <b>"</b><b>o</b><b>v</b><b>n</b><b>.</b><b>o</b><b>r</b><b>g</b><b>"</b>.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>d</b><b>h</b><b>c</b><b>p</b><b>v</b><b>6</b><b>_</b><b>s</b><b>t</b><b>a</b><b>t</b><b>e</b><b>l</b><b>e</b><b>s</b><b>s</b>: optional string
+              This  option specifies the OVN native DHCPv6 will work in state‐
+              less mode, which means OVN native DHCPv6 will not offer IPv6 ad‐
+              dresses for VM/VIF ports, but only reply  other  configurations,
+              such  as  DNS  and  domain search list. When setting this option
+              with string value "true", VM/VIF will configure  IPv6  addresses
+              by stateless way. Default value for this option is false.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+              See <b>E</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> <b>I</b><b>D</b><b>s</b> at the beginning of this document.
+
+<b>C</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Configuration  for  a  database  connection to an Open vSwitch database
+       (OVSDB) client.
+
+       This table  primarily  configures  the  Open  vSwitch  database  server
+       (<b>o</b><b>v</b><b>s</b><b>d</b><b>b</b><b>-</b><b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b>).
+
+       The  Open vSwitch database server can initiate and maintain active con‐
+       nections to remote clients. It can also  listen  for  database  connec‐
+       tions.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <u>C</u><u>o</u><u>r</u><u>e</u> <u>F</u><u>e</u><u>a</u><u>t</u><u>u</u><u>r</u><u>e</u><u>s</u><u>:</u>
+         <b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b>                      string (must be unique within table)
+       <u>C</u><u>l</u><u>i</u><u>e</u><u>n</u><u>t</u> <u>F</u><u>a</u><u>i</u><u>l</u><u>u</u><u>r</u><u>e</u> <u>D</u><u>e</u><u>t</u><u>e</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u> <u>a</u><u>n</u><u>d</u> <u>H</u><u>a</u><u>n</u><u>d</u><u>l</u><u>i</u><u>n</u><u>g</u><u>:</u>
+         <b>m</b><b>a</b><b>x</b><b>_</b><b>b</b><b>a</b><b>c</b><b>k</b><b>o</b><b>f</b><b>f</b>                 optional integer, at least 1,000
+         <b>i</b><b>n</b><b>a</b><b>c</b><b>t</b><b>i</b><b>v</b><b>i</b><b>t</b><b>y</b><b>_</b><b>p</b><b>r</b><b>o</b><b>b</b><b>e</b>            optional integer
+       <u>S</u><u>t</u><u>a</u><u>t</u><u>u</u><u>s</u><u>:</u>
+         <b>i</b><b>s</b><b>_</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>e</b><b>d</b>                boolean
+         <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>l</b><b>a</b><b>s</b><b>t</b><b>_</b><b>e</b><b>r</b><b>r</b><b>o</b><b>r</b>         optional string
+         <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>s</b><b>t</b><b>a</b><b>t</b><b>e</b>              optional  string, one of <b>A</b><b>C</b><b>T</b><b>I</b><b>V</b><b>E</b>, <b>B</b><b>A</b><b>C</b><b>K</b><b>O</b><b>F</b><b>F</b>,
+                                     <b>C</b><b>O</b><b>N</b><b>N</b><b>E</b><b>C</b><b>T</b><b>I</b><b>N</b><b>G</b>, <b>I</b><b>D</b><b>L</b><b>E</b>, or <b>V</b><b>O</b><b>I</b><b>D</b>
+         <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>s</b><b>e</b><b>c</b><b>_</b><b>s</b><b>i</b><b>n</b><b>c</b><b>e</b><b>_</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b>  optional string, containing  an  integer,
+                                     at least 0
+         <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>s</b><b>e</b><b>c</b><b>_</b><b>s</b><b>i</b><b>n</b><b>c</b><b>e</b><b>_</b><b>d</b><b>i</b><b>s</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b>
+                                     optional  string,  containing an integer,
+                                     at least 0
+         <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>l</b><b>o</b><b>c</b><b>k</b><b>s</b><b>_</b><b>h</b><b>e</b><b>l</b><b>d</b>         optional string
+         <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>l</b><b>o</b><b>c</b><b>k</b><b>s</b><b>_</b><b>w</b><b>a</b><b>i</b><b>t</b><b>i</b><b>n</b><b>g</b>      optional string
+         <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>l</b><b>o</b><b>c</b><b>k</b><b>s</b><b>_</b><b>l</b><b>o</b><b>s</b><b>t</b>         optional string
+         <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>n</b><b>_</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>      optional string, containing  an  integer,
+                                     at least 2
+         <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>b</b><b>o</b><b>u</b><b>n</b><b>d</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>         optional string, containing an integer
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+         <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b>                map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+     <u>C</u><u>o</u><u>r</u><u>e</u> <u>F</u><u>e</u><u>a</u><u>t</u><u>u</u><u>r</u><u>e</u><u>s</u><u>:</u>
+
+       <b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b>: string (must be unique within table)
+              Connection methods for clients.
+
+              The following connection methods are currently supported:
+
+              <b>s</b><b>s</b><b>l</b><b>:</b><u>h</u><u>o</u><u>s</u><u>t</u>[<b>:</b><u>p</u><u>o</u><u>r</u><u>t</u>]
+                     The  specified  SSL  <u>p</u><u>o</u><u>r</u><u>t</u>  on the host at the given <u>h</u><u>o</u><u>s</u><u>t</u>,
+                     which can either be a DNS name (if built with unbound li‐
+                     brary) or an IP address. A valid SSL  configuration  must
+                     be  provided  when  this form is used, this configuration
+                     can be specified via command-line options or the <b>S</b><b>S</b><b>L</b>  ta‐
+                     ble.
+
+                     If <u>p</u><u>o</u><u>r</u><u>t</u> is not specified, it defaults to 6640.
+
+                     SSL  support  is  an  optional feature that is not always
+                     built as part of Open vSwitch.
+
+              <b>t</b><b>c</b><b>p</b><b>:</b><u>h</u><u>o</u><u>s</u><u>t</u>[<b>:</b><u>p</u><u>o</u><u>r</u><u>t</u>]
+                     The specified TCP <u>p</u><u>o</u><u>r</u><u>t</u> on the host  at  the  given  <u>h</u><u>o</u><u>s</u><u>t</u>,
+                     which can either be a DNS name (if built with unbound li‐
+                     brary) or an IP address. If <u>h</u><u>o</u><u>s</u><u>t</u> is an IPv6 address, wrap
+                     it in square brackets, e.g. <b>t</b><b>c</b><b>p</b><b>:</b><b>[</b><b>:</b><b>:</b><b>1</b><b>]</b><b>:</b><b>6</b><b>6</b><b>4</b><b>0</b>.
+
+                     If <u>p</u><u>o</u><u>r</u><u>t</u> is not specified, it defaults to 6640.
+
+              <b>p</b><b>s</b><b>s</b><b>l</b><b>:</b>[<u>p</u><u>o</u><u>r</u><u>t</u>][<b>:</b><u>h</u><u>o</u><u>s</u><u>t</u>]
+                     Listens  for  SSL  connections on the specified TCP <u>p</u><u>o</u><u>r</u><u>t</u>.
+                     Specify 0 for  <u>p</u><u>o</u><u>r</u><u>t</u>  to  have  the  kernel  automatically
+                     choose  an available port. If <u>h</u><u>o</u><u>s</u><u>t</u>, which can either be a
+                     DNS name (if built with unbound library)  or  an  IP  ad‐
+                     dress,  is  specified, then connections are restricted to
+                     the resolved or specified local IPaddress (either IPv4 or
+                     IPv6 address). If <u>h</u><u>o</u><u>s</u><u>t</u> is an IPv6 address, wrap in square
+                     brackets, e.g. <b>p</b><b>s</b><b>s</b><b>l</b><b>:</b><b>6</b><b>6</b><b>4</b><b>0</b><b>:</b><b>[</b><b>:</b><b>:</b><b>1</b><b>]</b>. If <u>h</u><u>o</u><u>s</u><u>t</u> is not  specified
+                     then  it listens only on IPv4 (but not IPv6) addresses. A
+                     valid SSL configuration must be provided when  this  form
+                     is  used,  this  can be specified either via command-line
+                     options or the <b>S</b><b>S</b><b>L</b> table.
+
+                     If <u>p</u><u>o</u><u>r</u><u>t</u> is not specified, it defaults to 6640.
+
+                     SSL support is an optional feature  that  is  not  always
+                     built as part of Open vSwitch.
+
+              <b>p</b><b>t</b><b>c</b><b>p</b><b>:</b>[<u>p</u><u>o</u><u>r</u><u>t</u>][<b>:</b><u>h</u><u>o</u><u>s</u><u>t</u>]
+                     Listens  for connections on the specified TCP <u>p</u><u>o</u><u>r</u><u>t</u>. Spec‐
+                     ify 0 for <u>p</u><u>o</u><u>r</u><u>t</u> to have the kernel automatically choose an
+                     available port. If <u>h</u><u>o</u><u>s</u><u>t</u>, which can either be a  DNS  name
+                     (if  built  with  unbound  library)  or an IP address, is
+                     specified, then connections are  restricted  to  the  re‐
+                     solved or specified local IP address (either IPv4 or IPv6
+                     address).  If  <u>h</u><u>o</u><u>s</u><u>t</u> is an IPv6 address, wrap it in square
+                     brackets, e.g. <b>p</b><b>t</b><b>c</b><b>p</b><b>:</b><b>6</b><b>6</b><b>4</b><b>0</b><b>:</b><b>[</b><b>:</b><b>:</b><b>1</b><b>]</b>. If <u>h</u><u>o</u><u>s</u><u>t</u> is not  specified
+                     then it listens only on IPv4 addresses.
+
+                     If <u>p</u><u>o</u><u>r</u><u>t</u> is not specified, it defaults to 6640.
+
+              When  multiple clients are configured, the <b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> values must be
+              unique. Duplicate <b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> values yield unspecified results.
+
+     <u>C</u><u>l</u><u>i</u><u>e</u><u>n</u><u>t</u> <u>F</u><u>a</u><u>i</u><u>l</u><u>u</u><u>r</u><u>e</u> <u>D</u><u>e</u><u>t</u><u>e</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u> <u>a</u><u>n</u><u>d</u> <u>H</u><u>a</u><u>n</u><u>d</u><u>l</u><u>i</u><u>n</u><u>g</u><u>:</u>
+
+       <b>m</b><b>a</b><b>x</b><b>_</b><b>b</b><b>a</b><b>c</b><b>k</b><b>o</b><b>f</b><b>f</b>: optional integer, at least 1,000
+              Maximum number of milliseconds to wait  between  connection  at‐
+              tempts. Default is implementation-specific.
+
+       <b>i</b><b>n</b><b>a</b><b>c</b><b>t</b><b>i</b><b>v</b><b>i</b><b>t</b><b>y</b><b>_</b><b>p</b><b>r</b><b>o</b><b>b</b><b>e</b>: optional integer
+              Maximum number of milliseconds of idle time on connection to the
+              client  before  sending  an  inactivity  probe  message. If Open
+              vSwitch does not communicate with the client for  the  specified
+              number  of  seconds,  it will send a probe. If a response is not
+              received for the same additional amount of  time,  Open  vSwitch
+              assumes  the  connection  has been broken and attempts to recon‐
+              nect. Default is implementation-specific. A value of 0  disables
+              inactivity probes.
+
+     <u>S</u><u>t</u><u>a</u><u>t</u><u>u</u><u>s</u><u>:</u>
+
+       Key-value pair of <b>i</b><b>s</b><b>_</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>e</b><b>d</b> is always updated. Other key-value pairs
+       in the status columns may be updated depends on the <b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> type.
+
+       When <b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> specifies a connection method that listens for inbound con‐
+       nections  (e.g.  <b>p</b><b>t</b><b>c</b><b>p</b><b>:</b>  or <b>p</b><b>u</b><b>n</b><b>i</b><b>x</b><b>:</b>), both <b>n</b><b>_</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> and <b>i</b><b>s</b><b>_</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>e</b><b>d</b>
+       may also be updated while the remaining key-value pairs are omitted.
+
+       On the other hand, when <b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> specifies an  outbound  connection,  all
+       key-value  pairs  may  be  updated, except the above-mentioned two key-
+       value pairs associated with inbound connection targets. They are  omit‐
+       ted.
+
+       <b>i</b><b>s</b><b>_</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>e</b><b>d</b>: boolean
+              <b>t</b><b>r</b><b>u</b><b>e</b> if currently connected to this client, <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b> otherwise.
+
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>l</b><b>a</b><b>s</b><b>t</b><b>_</b><b>e</b><b>r</b><b>r</b><b>o</b><b>r</b>: optional string
+              A human-readable description of the last error on the connection
+              to  the  manager; i.e. <b>s</b><b>t</b><b>r</b><b>e</b><b>r</b><b>r</b><b>o</b><b>r</b><b>(</b><b>e</b><b>r</b><b>r</b><b>n</b><b>o</b><b>)</b>. This key will exist only
+              if an error has occurred.
+
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>s</b><b>t</b><b>a</b><b>t</b><b>e</b>: optional string, one of <b>A</b><b>C</b><b>T</b><b>I</b><b>V</b><b>E</b>, <b>B</b><b>A</b><b>C</b><b>K</b><b>O</b><b>F</b><b>F</b>, <b>C</b><b>O</b><b>N</b><b>N</b><b>E</b><b>C</b><b>T</b><b>I</b><b>N</b><b>G</b>,
+       <b>I</b><b>D</b><b>L</b><b>E</b>, or <b>V</b><b>O</b><b>I</b><b>D</b>
+              The state of the connection to the manager:
+
+              <b>V</b><b>O</b><b>I</b><b>D</b>   Connection is disabled.
+
+              <b>B</b><b>A</b><b>C</b><b>K</b><b>O</b><b>F</b><b>F</b>
+                     Attempting to reconnect at an increasing period.
+
+              <b>C</b><b>O</b><b>N</b><b>N</b><b>E</b><b>C</b><b>T</b><b>I</b><b>N</b><b>G</b>
+                     Attempting to connect.
+
+              <b>A</b><b>C</b><b>T</b><b>I</b><b>V</b><b>E</b> Connected, remote host responsive.
+
+              <b>I</b><b>D</b><b>L</b><b>E</b>   Connection is idle. Waiting for response to keep-alive.
+
+              These values may change in the future. They  are  provided  only
+              for human consumption.
+
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>s</b><b>e</b><b>c</b><b>_</b><b>s</b><b>i</b><b>n</b><b>c</b><b>e</b><b>_</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b>: optional string, containing an integer, at
+       least 0
+              The amount of time since this client last successfully connected
+              to the database (in seconds). Value is empty if client has never
+              successfully been connected.
+
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>s</b><b>e</b><b>c</b><b>_</b><b>s</b><b>i</b><b>n</b><b>c</b><b>e</b><b>_</b><b>d</b><b>i</b><b>s</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b>: optional string, containing an integer,
+       at least 0
+              The  amount of time since this client last disconnected from the
+              database (in seconds). Value is empty if client has  never  dis‐
+              connected.
+
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>l</b><b>o</b><b>c</b><b>k</b><b>s</b><b>_</b><b>h</b><b>e</b><b>l</b><b>d</b>: optional string
+              Space-separated  list  of the names of OVSDB locks that the con‐
+              nection holds. Omitted if  the  connection  does  not  hold  any
+              locks.
+
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>l</b><b>o</b><b>c</b><b>k</b><b>s</b><b>_</b><b>w</b><b>a</b><b>i</b><b>t</b><b>i</b><b>n</b><b>g</b>: optional string
+              Space-separated  list  of the names of OVSDB locks that the con‐
+              nection is currently waiting to acquire. Omitted if the  connec‐
+              tion is not waiting for any locks.
+
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>l</b><b>o</b><b>c</b><b>k</b><b>s</b><b>_</b><b>l</b><b>o</b><b>s</b><b>t</b>: optional string
+              Space-separated  list  of the names of OVSDB locks that the con‐
+              nection has had stolen by another OVSDB client.  Omitted  if  no
+              locks have been stolen from this connection.
+
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>n</b><b>_</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>: optional string, containing an integer, at
+       least 2
+              When  <b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b>  specifies a connection method that listens for in‐
+              bound connections (e.g. <b>p</b><b>t</b><b>c</b><b>p</b><b>:</b> or <b>p</b><b>s</b><b>s</b><b>l</b><b>:</b>) and more than  one  con‐
+              nection  is  actually  active, the value is the number of active
+              connections. Otherwise, this key-value pair is omitted.
+
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>b</b><b>o</b><b>u</b><b>n</b><b>d</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>: optional string, containing an integer
+              When <b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> is <b>p</b><b>t</b><b>c</b><b>p</b><b>:</b> or <b>p</b><b>s</b><b>s</b><b>l</b><b>:</b>, this is the TCP port on which the
+              OVSDB server is listening. (This  is  particularly  useful  when
+              <b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b>  specifies a port of 0, allowing the kernel to choose any
+              available port.)
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       The overall purpose of these columns is described under <b>C</b><b>o</b><b>m</b><b>m</b><b>o</b><b>n</b>  <b>C</b><b>o</b><b>l</b><b>u</b><b>m</b><b>n</b><b>s</b>
+       at the beginning of this document.
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+
+       <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b>: map of string-string pairs
+<b>D</b><b>N</b><b>S</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Each  row  in this table stores the DNS records. The <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b> ta‐
+       ble’s <b>d</b><b>n</b><b>s</b><b>_</b><b>r</b><b>e</b><b>c</b><b>o</b><b>r</b><b>d</b><b>s</b> references these records.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>r</b><b>e</b><b>c</b><b>o</b><b>r</b><b>d</b><b>s</b>                       map of string-string pairs
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                  map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>r</b><b>e</b><b>c</b><b>o</b><b>r</b><b>d</b><b>s</b>: map of string-string pairs
+              Key-value pair of DNS records with <b>D</b><b>N</b><b>S</b> <b>q</b><b>u</b><b>e</b><b>r</b><b>y</b> <b>n</b><b>a</b><b>m</b><b>e</b> as the key and
+              value as a string of IP address(es) separated by comma or space.
+              For PTR requests, the key-value pair can  be  <b>R</b><b>e</b><b>v</b><b>e</b><b>r</b><b>s</b><b>e</b>  <b>I</b><b>P</b><b>v</b><b>4</b>  <b>a</b><b>d</b>‐‐
+              <b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>.</b><b>i</b><b>n</b><b>-</b><b>a</b><b>d</b><b>d</b><b>r</b><b>.</b><b>a</b><b>r</b><b>p</b><b>a</b>  and  the value <b>D</b><b>N</b><b>S</b> <b>d</b><b>o</b><b>m</b><b>a</b><b>i</b><b>n</b> <b>n</b><b>a</b><b>m</b><b>e</b>. For IPv6 ad‐
+              dresses, the key has to be <b>R</b><b>e</b><b>v</b><b>e</b><b>r</b><b>s</b><b>e</b> <b>I</b><b>P</b><b>v</b><b>6</b> <b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>.</b><b>i</b><b>p</b><b>6</b><b>.</b><b>a</b><b>r</b><b>p</b><b>a</b>.
+
+              <b>E</b><b>x</b><b>a</b><b>m</b><b>p</b><b>l</b><b>e</b><b>:</b>  "vm1.ovn.org" = "10.0.0.4 aef0::4"
+
+              <b>E</b><b>x</b><b>a</b><b>m</b><b>p</b><b>l</b><b>e</b><b>:</b>  "4.0.0.10.in-addr.arpa" = "vm1.ovn.org"
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+              See <b>E</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> <b>I</b><b>D</b><b>s</b> at the beginning of this document.
+
+<b>S</b><b>S</b><b>L</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       SSL configuration for ovn-nb database access.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>p</b><b>r</b><b>i</b><b>v</b><b>a</b><b>t</b><b>e</b><b>_</b><b>k</b><b>e</b><b>y</b>                   string
+       <b>c</b><b>e</b><b>r</b><b>t</b><b>i</b><b>f</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b>                   string
+       <b>c</b><b>a</b><b>_</b><b>c</b><b>e</b><b>r</b><b>t</b>                       string
+       <b>b</b><b>o</b><b>o</b><b>t</b><b>s</b><b>t</b><b>r</b><b>a</b><b>p</b><b>_</b><b>c</b><b>a</b><b>_</b><b>c</b><b>e</b><b>r</b><b>t</b>             boolean
+       <b>s</b><b>s</b><b>l</b><b>_</b><b>p</b><b>r</b><b>o</b><b>t</b><b>o</b><b>c</b><b>o</b><b>l</b><b>s</b>                 string
+       <b>s</b><b>s</b><b>l</b><b>_</b><b>c</b><b>i</b><b>p</b><b>h</b><b>e</b><b>r</b><b>s</b>                   string
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>p</b><b>r</b><b>i</b><b>v</b><b>a</b><b>t</b><b>e</b><b>_</b><b>k</b><b>e</b><b>y</b>: string
+              Name of a PEM file  containing  the  private  key  used  as  the
+              switch’s identity for SSL connections to the controller.
+
+       <b>c</b><b>e</b><b>r</b><b>t</b><b>i</b><b>f</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b>: string
+              Name  of a PEM file containing a certificate, signed by the cer‐
+              tificate authority (CA) used by the controller and manager, that
+              certifies the switch’s private key,  identifying  a  trustworthy
+              switch.
+
+       <b>c</b><b>a</b><b>_</b><b>c</b><b>e</b><b>r</b><b>t</b>: string
+              Name  of a PEM file containing the CA certificate used to verify
+              that the switch is connected to a trustworthy controller.
+
+       <b>b</b><b>o</b><b>o</b><b>t</b><b>s</b><b>t</b><b>r</b><b>a</b><b>p</b><b>_</b><b>c</b><b>a</b><b>_</b><b>c</b><b>e</b><b>r</b><b>t</b>: boolean
+              If set to <b>t</b><b>r</b><b>u</b><b>e</b>, then Open vSwitch will attempt to obtain the  CA
+              certificate  from the controller on its first SSL connection and
+              save it to the named PEM file. If it is successful, it will  im‐
+              mediately  drop  the  connection and reconnect, and from then on
+              all SSL connections  must  be  authenticated  by  a  certificate
+              signed  by the CA certificate thus obtained. <b>T</b><b>h</b><b>i</b><b>s</b> <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b> <b>e</b><b>x</b><b>p</b><b>o</b><b>s</b><b>e</b><b>s</b>
+              <b>t</b><b>h</b><b>e</b> <b>S</b><b>S</b><b>L</b> <b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b> <b>t</b><b>o</b> <b>a</b> <b>m</b><b>a</b><b>n</b><b>-</b><b>i</b><b>n</b><b>-</b><b>t</b><b>h</b><b>e</b><b>-</b><b>m</b><b>i</b><b>d</b><b>d</b><b>l</b><b>e</b> <b>a</b><b>t</b><b>t</b><b>a</b><b>c</b><b>k</b>  <b>o</b><b>b</b><b>t</b><b>a</b><b>i</b><b>n</b><b>i</b><b>n</b><b>g</b>  <b>t</b><b>h</b><b>e</b>
+              <b>i</b><b>n</b><b>i</b><b>t</b><b>i</b><b>a</b><b>l</b>  <b>C</b><b>A</b>  <b>c</b><b>e</b><b>r</b><b>t</b><b>i</b><b>f</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b><b>.</b>  It may still be useful for bootstrap‐
+              ping.
+
+       <b>s</b><b>s</b><b>l</b><b>_</b><b>p</b><b>r</b><b>o</b><b>t</b><b>o</b><b>c</b><b>o</b><b>l</b><b>s</b>: string
+              List of SSL protocols to be enabled for SSL connections. The de‐
+              fault when this option is omitted is <b>T</b><b>L</b><b>S</b><b>v</b><b>1</b><b>,</b><b>T</b><b>L</b><b>S</b><b>v</b><b>1</b><b>.</b><b>1</b><b>,</b><b>T</b><b>L</b><b>S</b><b>v</b><b>1</b><b>.</b><b>2</b>.
+
+       <b>s</b><b>s</b><b>l</b><b>_</b><b>c</b><b>i</b><b>p</b><b>h</b><b>e</b><b>r</b><b>s</b>: string
+              List of ciphers (in OpenSSL cipher string  format)  to  be  sup‐
+              ported  for  SSL  connections.  The  default when this option is
+              omitted is <b>H</b><b>I</b><b>G</b><b>H</b><b>:</b><b>!</b><b>a</b><b>N</b><b>U</b><b>L</b><b>L</b><b>:</b><b>!</b><b>M</b><b>D</b><b>5</b>.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       The overall purpose of these columns is described under <b>C</b><b>o</b><b>m</b><b>m</b><b>o</b><b>n</b>  <b>C</b><b>o</b><b>l</b><b>u</b><b>m</b><b>n</b><b>s</b>
+       at the beginning of this document.
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+<b>G</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>_</b><b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Association  of  a  chassis to a logical router port. The traffic going
+       out through an specific router port will be redirected to a chassis, or
+       a set of them in high availability configurations.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>                          string (must be unique within table)
+       <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b>                  string
+       <b>p</b><b>r</b><b>i</b><b>o</b><b>r</b><b>i</b><b>t</b><b>y</b>                      integer, in range 0 to 32,767
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>                       map of string-string pairs
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>: string (must be unique within table)
+              Name of the <b>G</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>_</b><b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>.
+
+              A   suggested,   but   not   required   naming   convention   is
+              <b>$</b><b>{</b><b>p</b><b>o</b><b>r</b><b>t</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b><b>}</b><b>_</b><b>$</b><b>{</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b><b>}</b>.
+
+       <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b>: string
+              Name of the chassis that we want to redirect traffic through for
+              the  associated  logical  router  port. The value must match the
+              <b>n</b><b>a</b><b>m</b><b>e</b> column of the <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> table in the <b>O</b><b>V</b><b>N</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database.
+
+       <b>p</b><b>r</b><b>i</b><b>o</b><b>r</b><b>i</b><b>t</b><b>y</b>: integer, in range 0 to 32,767
+              This is the priority of a chassis among all <b>G</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>_</b><b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>  be‐
+              longing to the same logical router port.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>: map of string-string pairs
+              Reserved for future use.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+              See <b>E</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> <b>I</b><b>D</b><b>s</b> at the beginning of this document.
+
+<b>H</b><b>A</b><b>_</b><b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Table representing a group of chassis which can provide high availabil‐
+       ity  services.  Each  chassis  in the group is represented by the table
+       <b>H</b><b>A</b><b>_</b><b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>. The HA chassis with highest priority will be the master  of
+       this  group. If the master chassis failover is detected, the HA chassis
+       with the next higher priority takes over the responsibility of  provid‐
+       ing  the  HA.  If a distributed gateway router port references a row in
+       this table, then the master HA chassis in this group provides the gate‐
+       way functionality.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>                          string (must be unique within table)
+       <b>h</b><b>a</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>                    set of <b>H</b><b>A</b><b>_</b><b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>es
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>: string (must be unique within table)
+              Name of the <b>H</b><b>A</b><b>_</b><b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b>. Name should be unique.
+
+       <b>h</b><b>a</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>: set of <b>H</b><b>A</b><b>_</b><b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>es
+              A list of HA chassis which belongs to this group.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+              See <b>E</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> <b>I</b><b>D</b><b>s</b> at the beginning of this document.
+
+<b>H</b><b>A</b><b>_</b><b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b>                  string
+       <b>p</b><b>r</b><b>i</b><b>o</b><b>r</b><b>i</b><b>t</b><b>y</b>                      integer, in range 0 to 32,767
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b>: string
+              Name of the chassis which is part of the HA chassis  group.  The
+              value  must  match  the  <b>n</b><b>a</b><b>m</b><b>e</b> column of the <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> table in the
+              <b>O</b><b>V</b><b>N</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database.
+
+       <b>p</b><b>r</b><b>i</b><b>o</b><b>r</b><b>i</b><b>t</b><b>y</b>: integer, in range 0 to 32,767
+              Priority of the chassis. Chassis with highest priority  will  be
+              the master.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+              See <b>E</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> <b>I</b><b>D</b><b>s</b> at the beginning of this document.
+
+<b>B</b><b>F</b><b>D</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Contains  BFD  parameter  for ovn-controller BFD configuration. OVN BFD
+       implementation is used to provide detection of failures in the path be‐
+       tween adjacent forwarding engines, including the  OVN  interfaces.  OVN
+       BFD  provides link status info to OVN northd in order to update logical
+       flows according to the status of BFD endpoints. In the  current  imple‐
+       mentation  OVN  BFD  is  used to check next-hop status for ECMP routes.
+       Please note BFD table refers to OVN BFD implementation and not  to  OVS
+       legacy one.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <u>C</u><u>o</u><u>n</u><u>f</u><u>i</u><u>g</u><u>u</u><u>r</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u><u>:</u>
+         <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>                string
+         <b>d</b><b>s</b><b>t</b><b>_</b><b>i</b><b>p</b>                      string
+         <b>m</b><b>i</b><b>n</b><b>_</b><b>t</b><b>x</b>                      optional integer, at least 1
+         <b>m</b><b>i</b><b>n</b><b>_</b><b>r</b><b>x</b>                      optional integer
+         <b>d</b><b>e</b><b>t</b><b>e</b><b>c</b><b>t</b><b>_</b><b>m</b><b>u</b><b>l</b><b>t</b>                 optional integer, at least 1
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>                     map of string-string pairs
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+       <u>S</u><u>t</u><u>a</u><u>t</u><u>u</u><u>s</u> <u>R</u><u>e</u><u>p</u><u>o</u><u>r</u><u>t</u><u>i</u><u>n</u><u>g</u><u>:</u>
+         <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b>                      optional string, one of <b>a</b><b>d</b><b>m</b><b>i</b><b>n</b><b>_</b><b>d</b><b>o</b><b>w</b><b>n</b>, <b>d</b><b>o</b><b>w</b><b>n</b>,
+                                     <b>i</b><b>n</b><b>i</b><b>t</b>, or <b>u</b><b>p</b>
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+     <u>C</u><u>o</u><u>n</u><u>f</u><u>i</u><u>g</u><u>u</u><u>r</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u><u>:</u>
+
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> reads configuration from these columns.
+
+       <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>: string
+              OVN logical port when BFD engine is running.
+
+       <b>d</b><b>s</b><b>t</b><b>_</b><b>i</b><b>p</b>: string
+              BFD peer IP address.
+
+       <b>m</b><b>i</b><b>n</b><b>_</b><b>t</b><b>x</b>: optional integer, at least 1
+              This  is  the  minimum interval, in milliseconds, that the local
+              system would like to use when transmitting BFD Control  packets,
+              less  any  jitter  applied.  The value zero is reserved. Default
+              value is 1000 ms.
+
+       <b>m</b><b>i</b><b>n</b><b>_</b><b>r</b><b>x</b>: optional integer
+              This is the minimum interval, in milliseconds, between  received
+              BFD  Control  packets that this system is capable of supporting,
+              less any jitter applied by the sender. If this  value  is  zero,
+              the  transmitting system does not want the remote system to send
+              any periodic BFD Control packets.
+
+       <b>d</b><b>e</b><b>t</b><b>e</b><b>c</b><b>t</b><b>_</b><b>m</b><b>u</b><b>l</b><b>t</b>: optional integer, at least 1
+              Detection time multiplier.  The  negotiated  transmit  interval,
+              multiplied  by  this  value, provides the Detection Time for the
+              receiving system in Asynchronous mode. Default value is 5.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>: map of string-string pairs
+              Reserved for future use.
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+              See <b>E</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> <b>I</b><b>D</b><b>s</b> at the beginning of this document.
+
+     <u>S</u><u>t</u><u>a</u><u>t</u><u>u</u><u>s</u> <u>R</u><u>e</u><u>p</u><u>o</u><u>r</u><u>t</u><u>i</u><u>n</u><u>g</u><u>:</u>
+
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> writes BFD status into these columns.
+
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b>: optional string, one of <b>a</b><b>d</b><b>m</b><b>i</b><b>n</b><b>_</b><b>d</b><b>o</b><b>w</b><b>n</b>, <b>d</b><b>o</b><b>w</b><b>n</b>, <b>i</b><b>n</b><b>i</b><b>t</b>, or <b>u</b><b>p</b>
+              BFD port logical states. Possible values are:
+
+              •      <b>a</b><b>d</b><b>m</b><b>i</b><b>n</b><b>_</b><b>d</b><b>o</b><b>w</b><b>n</b>
+
+              •      <b>d</b><b>o</b><b>w</b><b>n</b>
+
+              •      <b>i</b><b>n</b><b>i</b><b>t</b>
+
+              •      <b>u</b><b>p</b>
+<b>S</b><b>t</b><b>a</b><b>t</b><b>i</b><b>c</b><b>_</b><b>M</b><b>A</b><b>C</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Each record represents a Static_MAC_Binding entry for a logical router.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <u>C</u><u>o</u><u>n</u><u>f</u><u>i</u><u>g</u><u>u</u><u>r</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u><u>:</u>
+         <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>                string
+         <b>i</b><b>p</b>                          string
+         <b>m</b><b>a</b><b>c</b>                         string
+         <b>o</b><b>v</b><b>e</b><b>r</b><b>r</b><b>i</b><b>d</b><b>e</b><b>_</b><b>d</b><b>y</b><b>n</b><b>a</b><b>m</b><b>i</b><b>c</b><b>_</b><b>m</b><b>a</b><b>c</b>        boolean
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+     <u>C</u><u>o</u><u>n</u><u>f</u><u>i</u><u>g</u><u>u</u><u>r</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u><u>:</u>
+
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> reads configuration from these columns  and  propagates  the
+       value to SBDB.
+
+       <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>: string
+              The logical router port for the binding.
+
+       <b>i</b><b>p</b>: string
+              The bound IP address.
+
+       <b>m</b><b>a</b><b>c</b>: string
+              The Ethernet address to which the IP is bound.
+
+       <b>o</b><b>v</b><b>e</b><b>r</b><b>r</b><b>i</b><b>d</b><b>e</b><b>_</b><b>d</b><b>y</b><b>n</b><b>a</b><b>m</b><b>i</b><b>c</b><b>_</b><b>m</b><b>a</b><b>c</b>: boolean
+              Override dynamically learnt MACs.
+
+<b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>T</b><b>e</b><b>m</b><b>p</b><b>l</b><b>a</b><b>t</b><b>e</b><b>_</b><b>V</b><b>a</b><b>r</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       One  record per chassis, each containing a map, <b>v</b><b>a</b><b>r</b><b>i</b><b>a</b><b>b</b><b>l</b><b>e</b><b>s</b>, between tem‐
+       plate variable names and their value for that specific chassis. A  tem‐
+       plate variable has a name and potentially different values on different
+       hypervisors  in  the  OVN  cluster. For example, two rows, <b>R</b><b>1</b> <b>=</b> <b>(</b><b>.</b><b>c</b><b>h</b><b>a</b><b>s</b>‐‐
+       <b>s</b><b>i</b><b>s</b><b>=</b><b>C</b><b>1</b><b>,</b> <b>v</b><b>a</b><b>r</b><b>i</b><b>a</b><b>b</b><b>l</b><b>e</b><b>s</b><b>=</b><b>{</b><b>(</b><b>N</b><b>:</b> <b>V</b><b>1</b><b>)</b><b>}</b> and <b>R</b><b>2</b> <b>=</b> <b>(</b><b>.</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>=</b><b>C</b><b>2</b><b>,</b> <b>v</b><b>a</b><b>r</b><b>i</b><b>a</b><b>b</b><b>l</b><b>e</b><b>s</b><b>=</b><b>{</b><b>(</b><b>N</b><b>:</b>  <b>V</b><b>2</b><b>)</b><b>}</b>
+       will make <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> running on chassis <b>C</b><b>1</b> and <b>C</b><b>2</b> interpret the to‐
+       ken  <b>N</b>  either  as <b>V</b><b>1</b> (on <b>C</b><b>1</b>) or as <b>V</b><b>2</b> (on <b>C</b><b>2</b>). Users can refer to tem‐
+       plate variables from within other logical components, e.g., within ACL,
+       QoS or Logical_Router_Policy matches  or  from  Load_Balancer  VIP  and
+       backend definitions.
+
+       If  a template variable is referenced on a chassis for which that vari‐
+       able is not defined then <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> running on  that  chassis  will
+       just interpret it as a raw string literal.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>                       string (must be unique within table)
+       <b>v</b><b>a</b><b>r</b><b>i</b><b>a</b><b>b</b><b>l</b><b>e</b><b>s</b>                     map of string-string pairs
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>: string (must be unique within table)
+              The chassis this set of variable values applies to.
+
+       <b>v</b><b>a</b><b>r</b><b>i</b><b>a</b><b>b</b><b>l</b><b>e</b><b>s</b>: map of string-string pairs
+              The set of variable values for a given chassis.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+              See <b>E</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> <b>I</b><b>D</b><b>s</b> at the beginning of this document.
+
+Open vSwitch 23.06.3            DB Schema 7.0.4                      <u>o</u><u>v</u><u>n</u><u>-</u><u>n</u><u>b</u>(5)
+</pre></body></html>
diff --git a/support/dist-docs-branch-23.06/ovn-nb.5.pdf b/support/dist-docs-branch-23.06/ovn-nb.5.pdf
new file mode 100644
index 0000000000000000000000000000000000000000..58dca0ac5544a855240d3a1d91e3443d23ab9b60
GIT binary patch
literal 211737
zcma&NV~j4q(k=XqZQI;q+qP}nwr%aPZF|oi+qP{Rcb_-+yUCaH=l#{))t%~2DydqX
zwTetZM2wb^js==*<TAbxnv6`+&duJ~(8bc;j*HO2(8Yq@+?kM8ftHZgL|ITwRO#O+
zY;XH-!_vso#?r-8#?;N!hWDQXLR!cFdrnSXK~Pm$^xsJ#K^0*MLRx1LQ8h_nQC<fV
zGj}IT7t?<hXBQKDR~KIXe^Yr^7YA1tF-sfM|1AGkH$k%!G7#DuSwZvg(94+GnY&mJ
zvi-9t(f{+}V(LUlFJ@!tVk%;4Y;R)9#|Q1~;$&)Q3+<7eqp{(%A%^UGqCT0`M{O9?
zhxb7~re%&2<t9_BOl2936-0t;y%`jZb&PZW>utnkW>*Ti@mC21WOi<DPd49H@J@sv
z7UON5XV};z;m4XiGr2$66p75}mRD)fB3HKW%iKWd(}awz(I9iA`G!f(Wb@^O&zHXf
zuoF;Ab#I%X(Vr~Kid;L#v#xl-u8p!d>vXG}H99z(@alNxD^2IzlS5xRrOjTS@XXqx
zL0GC=Q`eZvTLFAetq06dI$LHen}<x>pH&)DY3HCZU{`QsLTM0)A=eGZ3R9FVr=zeV
zTX$rQT~M{6)4PI}1x2a#2btjYFmV?%J*{*0XMRcUG5y1@O~&%RY=MvFO`4`cE}JH<
ztwg-K*R<b3DSLvXKHq<z5SVqZS2Co1vAD*82?kz@YY-II>;r$QKzQb*Q0bi=CK)aT
z4hjgh74bqP_EZ)}bdoc}c1VGnJ(;lb(n5m4%86r|yu^`n@Bc`MXeHjOs1Xy*tbZMx
zd-@5FV>b><XKbhr4a~4JQPv!jgM+)ugoYH#El_Tu^h}A(HTha)(UO+$NcaO$g!Qol
zb6c3=E~GM{ky+QHUJ`jGUY#qXgp5e4soh3MJ{RJS5n@`Zw%*uQA09JqlcJm8`v!zu
z=!59Y23^&mD!1Z*Ot+SsbJoCWw9tDHBLHP9nXT*U6hla+iK(ikkPL7|+e@h4Hv5c4
z6_YBuk~k{|b@!^vIECTh5M(<O=)|wrz})aZ^)*{+OHNEtSK+M2emN8bZRI}|!Du?C
z#Cy5GFk!$7jFn$VD_HTvG~P@HXF6=bTZ)koD=7*j$rVq6{ls*<p}BjYLvB=azNp_`
z!+qN*jr<N55@e1rY5G3yd4U$~Ufvy9f=g5}SnoyDo6W0r&{HRsCYt3TQ|y0Hj2a?W
z(i6c7VIvz62HllAZ;!gyAchsHwF<l}#Hd(%syJ#P`y!6&u(ar;R?G5SbpBGT&10b{
z%*KF@<Vk&sM{7gz%$@?$>@ntChl-As;te)AC%*vsD(3x!f8q_70S`R0q>3N&-%gv#
zjf>Xs<|~2~3h?81aHy&Pk+7sGZd-~FLiFX4Do9~qHv}CYps7uM3@heAf>Qu50VdrP
z!^~Dm<Fr^LU#BV}toTl+#7oBJ?K$;I7oS}v#e`M25Clm@I_#Z*e@qKLLXWYo1SNr5
zj-mP8O?MC5jeP2fPl6(Jc8jZ^p7J<}k^d!_P}gasbiykCo%)!oQ9t{HpKH81Q3-%v
zTmtDuL^IupFV@<E1?-6Z=G;mlh0^<?9Ia5l62iDrxk$?O0kq9Aciu3Da^bHC<%9?l
zu?`w}CjkH|FQAzsAHrnn!iompOSw25l9c6~G9Nh<3Wx$S8A4pkzv0qi67jD919KCR
zyG2o`<HVrfn>GyIGDsHw*B3$RieZ?CXrD@ewj-=o!eTa=O-?>lOMyY)oj>z^88*DK
z@GVbQ3C}VMjoR7UwD_avf8*oZ2u{$`4{>BZjtT?HPde;&#%xy7I(pOpm^jjWq#p@J
zRmU0Hs2^QKK*f<*h??e*3efmN4&Bod0>K#-VpCvkfhR%s^q+naIu4)W!>uEYgF303
zJx?K42%@FpDE!VrOJzYQi_W1OAYPBc%ghw`6{HWKo3&LYj7b+B12{b&s1@8d1dQIj
zWwj=HZSjCso^%>xracRSodkUqyKt-0-mu;5+f;=OZ41`bg!fUhhOBDVT<C>sUGYsk
zK$*VuhKZt+xC$f(gy}`z{#r+0<AV-lS~TD;a5qfS7)x{_beG**$QYi2uwZ3a^-KfL
z%?)(37<oe?6@Mezk@2{_sUATut}n`@sNuLbf|%Xz1~Ged^fJ{_J24k)mvKFt1|m!(
zacc*3mX@+4_|DmPUq4^jg_l_r(y;$>98yM;LIptrCdSL^+20ILbOyrVP?v1WSMb^R
zbDcK#L_Vvma)`&J*aHpTv$5$YfN*;bif)uZw2?T83J*T60$rQV$>Cev5&6o#-ub3?
z+s<WkjX?bAWB9rRqP6Y?r`7f{0DkterxP>dU@(hQe9Q*RIAqI8m!Of?ve6OCPARec
z1#Figil?tMlG^_XDSTtXgs!H}IwWvi*`L?A6oRgyc-);dHBzo1YT}VFYy`bc3C{Zp
z#KZr`Xrd_nS+drU`MVQ*^vCn$ba6K+8zM=L;PKg>hz{+}p1k$})n)KWHgc=iwmC}Z
zi7j$-=ru&?TG9SzwuA#(zK+B78YzN(?gQEo?yrzW@R^1-dsfXu;$oSeI``DGnO*1|
zwt0@4;GDG?%PGBDz-BZdr~{daAUlSI{olVo^`3dg%rq25F+!v`(6TJMELR^^{O>vf
z4jfM!!qMvXHxiiQ9wX4)rWhbS*W6ah<~vT6LB9jS=iH&$x{-xvH)c@ny`zB%i`cHM
z?6iR4B9QIqR?NW7464p-G;7dNT6@PWQaT*05y#ybg7Ds;JhFb9vgBZ;;P`z3h@EQS
zvBddAhIeta%3kLQb2J6k0f-|7vJJa!MDu=o%y&W}H68GS@EGjk!6`L|6m<KF>Dh)v
z47Ld9=`=;*PnQ(0A2=g3-dU!0CjYl!|C{}%$p5Fb|7T?6WaWhZzc$AIMgWZeI|z_8
zAveH)DEjgprO6eY-e5d3)<{cFqzY-(Kt%~{X%Q^(9+tOT)R3H#HeU$sX*lM5lTmdy
z34{gVQue1Qi7;j?`}Q4e{nxJo>xdf_auV~Gb+kzsOBvi|04-U1((GB6xgPD{xe+?3
zBWX>43}nsc`C97q^+7DR5w*zNVh5}y4O%*a5J834<E~qp`gAYJkVrW;)^gBGpLoMK
z`K)}E>-(|D-zF$K+s>9RZnfkRB!_KkAF2c}<WEAEOrk&6q<<tkb<igct@bnlg>k1Y
zybrmPQ}FB4V<&~j-}M?~CJX1z-Fn4UMp_MDVGyzW#uu{tHM=HeFZZ92lWKA$uxAFQ
zteW#T9#V69^R$(Uim~z21}lV#1-gMX)^*kc9Gh;;;s-<7Lk);5^yc<w)bjW}`tw5s
zjIDs!e+dx}aI(oKita#|IKv3cFJi-CXKdJ%MQniC*!#dKj>aH5)5S1K?wJu}Hd;(O
zC}gFL$a>MA!0p`w5DYl&`mf;rPt^VsU1ko}{})`&|AKc+4F4N^SEHlpoHdf_ds5e%
zRY5A`rEi9>vu$KPu33_aVICDIF}fc@ikg&`^!DUD!}$e7Ah2#qNX0*@-?Xyf&gpLX
z>ARQaw|Beq`f~p~N!!E!@sVMEVf5+j+4cJQv?l%N<?H!;!LR<g_q4$bcOQ+7&RQ~b
zvC;G}6^>E&vqIkB=Zj@*Kjzil!^QpA+w%q7|NSZNgQb(!*-_B{rGmzLJbHy-X8Ok|
z_vhZ|F8t+!8}^o#UU=;Mcy(`}Dt;yY_YL}A?X9o+PQkJ=Z<y_{CC1A`TT6Q5(Cw(@
z+wFHcZ?Tu(RKHDSqJK9y^j^%g{(5VMC5lV!;r{vDs6+SvKHr$pdu+ZOT6$Rd`!#T*
z@B6U9-{W=1U-x6(8oc|vC9Top3}mKTretq(C+DwUn_l<U=BABaNViMR&_n!+`wo3=
zt@_SRogD_k%_Rbxr~BUL!NC5U*G`?iTKq~@SGfDi4Mx>Q?316)pAJoan%bMyJuB0l
zs_>`#p$Qvz1#ONWE7Rsb8#;!MA0JNx@7H&R4fE|}FIIyVJO#G5+T0K4Llh{E6iHpC
z8E#WY_&YWD7*!un`(NkZjt!m@LqG3@r6tY{c|T8nO`bYD)dc)|z>a6pY7wqj!dPv0
zV^-oiT>%;&B05<fT)tITp9fq08i!l^Ru927JswRRf3<e_cVkLuvZT2V-p~K}HT%=)
zrP2LoXVXcVhs?by`F%5H-qIZl2qV^5*X|l$eZ^f&l6!S)Y5(gOJH%@fchcD3U&Cj1
z*@;Vk>yv?k<{5RLsm<v-)%GNirBm~d=1z5;3wYMmyPso6$J^esonu?4F8?RA%x%&K
zH@n{JVKtqzORa2*Jg-GGfo&Z7Pjgq(A3mP#4ZGOK&X+C%yPfJAN2Fi(C~g>B;y$~R
z+pEoCj1=x)w**P3jr>?k9Q?125GQ%p6N;>Sn_qWV$9{MI7avpo-&>nC{;mwkTT$+=
zT9+97?xh=3U&$3#8d~Q3UO!I$m8~?qkDVkc#X_D{x@#$@Ppf})N1vw$l)Rv-Xff(`
zboIaCww!cYk3V%7w{&*a;Oyw#4Ozkmx9WCkZ&uuYUxfd#tY_`wJ%6<8ec3KsN1pxl
z@_nY*@Vt$_A(+13FS69`N&#E_xo9%$BnuOrB%`_77PfhPtfg1BVOv<MB2e5X6x~|b
za>Y`*i`I|{l?wm)eu%EKXR|NX?1)8wn18XmU@fxKdfi4Zq0gdHqBXN#1-HJECefs!
z%J{s#qJArKJF?bE%eJA;B4)L_h@RTodPg3&>7w89VYK~IPsdj2u#}u;?WhTJdL~;1
zO80WU)VAR&@!g<y-a$XHZ6%(x864qeU4aATjT!F!<L6c#;Tn^<q{c8e*>SVbrIy4-
zhA|4UO)ndr>+*a~Mj!c`9RAhq;p^$>{8-4%t*dVR*I0@Yq;yxRfwAMOxkiD8y7|k>
zWO@d2AD?Zn<Ra6s%h>el_<X8)tNY!^)YpM>8iT2IGsk}JWO*n#$j@YGAgxDKC9lu(
z5Ue7mAbE+?_f>LDvBiAU!jCm<rgU4yJ(Cpfce7{9NL~Ty#ujn7)@5EqP3MA&P{7!P
zUt&>3A2#@yx;jQ)ot;`~-gVnWm=bYBn(&OYayrm?IX;t!C6tuaB~55&bJ~Ij5e~@v
z^8t6)>$~5>fJ{QA^sM^Aw^37ai$ne2vrM0Nc1SnYK)Em?ioWmrmpb^vb&~_}Bd=3M
z`}LXP$&hXdh%^m<_#FUv*C!9c#u7{Ryo%1%{@#vFE02v@zUobz!}$RWhz4EA!_rr(
z;H04XZV=YMP|qZJ`qoeh9t{__E3YgRSeHiD%yHufwb3p8-?#mE41W*#N3H`7<7xOi
zHZ&9L(Q*u{EsDYlGOY>?Tk$<iv|AT_G*s3L3yu~u#VhxfmzS&zSQTTj4JVd*lgqEm
zmSGw`nF<9CZH^_KkwaOaRhczgvfZp1x*m@<FOPOV4uhX`TV{<GxL=;VZ{$5-DU2Ay
zSj$b?lx5hL3NbY{RFu{fB=>7eseM`D(dri?Yfl+!!$DI#kX?Mq-RB4qOOxq_p31L>
zbp~N$G&7dNQ?q`x28!Bp8$m4``O498+1BR;2h_pLJ99(kA`7GXZc=O~3o@CUEEA}H
zLVbEZO?q2AJx$iSFxGaVwSqoVpytAZgwuZwlrPD3c2&$YARPVL{IV<D7a&7?J181C
zJiB<rG4x9oOKrbkvJZiFy*)c=i>9}h@ENI*lvdZeGl03!!Et8ZTr4y}nZLW=4CPX-
z>SI;buz42*r}%|a4MK{1mL_w@I+BkjY?3)!*;2<s=w~i(0N`lMO=1~VQA;k)Y&H(m
zj}piJ8P#Um9k5G2_4idHO9xLSJ!aetSP-JI6u0(KXC@DTt{Yn$@XgWgoSR(ypX2xY
zP@)<=X`Y{xX*Js`Zh#UuGGZw~LuuGZcgBQCE2l@p#0`HIk<iNJH3YE_ulgt!{`?@~
z>@kCW*(_<M77M#WJV}q<8L-VsEwzu)s^@(u|8*e+c(57W6F<dA0|I3@R*uK1z5;8X
zNoPp+h;ZJ|@dO1Mi@LLT!IB>;P6?nk6ZTAJ3YY4Z3e$oJ-)lPIx+(*JYX*F6(7ii3
zE0rx20UTiQx=P87{&npmF>}M`ooK-`@P>hrr@sT_c9q^vzTR(i8y91o5-FeEziR`O
zT?U)tyN(ZMnDFXm1IfqE2^6zJ4~xV}u<-W&{1w}<G35XEHe$$CU}(*+2%Szqffdq|
z{|<I{7<o5yUvCq*mK``%iK%-8r`aU%*U3_luOE-)VOLFqQwF>wjafKOI6?EO12eBQ
zTf#N|ou$AyFm3Cr!*MW4pmASGA4}%I1YEI{OP<fLOhfwZYG?+f8BWx$1fwtX030A1
zo^^uL2LB4lYC)}g5UWDKQzBgU%f}ZBH+YBbtr7mXXERJ5-;dE<u_D1Ju6ZY)bW37E
zMKoGVcz;Z++R_`W40h`;NH(0`xeLgK{p?>*ylv0UyV|6<;m2;oE}#{X(~Q_#F?$EE
zA*Gy^Yu|kG2Kx{<0l7RTA64tS^sxaFBM9-9<Jh8C^CCC0FC?H){bZbO5|T<hm7PR&
zeBVV#VS-!|Vz2%79OY7`XB`WVMk?P=R%RBXEyDzf+)2X72AjEDlv2iXRVLH0Qt_YT
zQLbf!ulW6N%-<EsUc(rTXb1@GdDjntwyfM3VFD%K&oX#2<y|RJZb?<VY#dIc?SQBj
z;RqZZrOm^uzLzOY_P=1`#6&`J3kMd7N^;#m41r}fq`gWvmqELJ2hf)2(58%NI}k&<
zWgm)3Iu87kjun|Z6S?WCHyRK;v!h~A>!8Zu##Qhl6!`3PRkw3f`5#0rj4IQLvA?Rz
z!eI-86+v_`Vs!;`uscW_MM}+)Fer7S2+`^zeaV?b-C_?4B321DgYeQhheJBf7FuKA
zj;F7uHZdI1PjmzX5Tk<p@6<E25iF}-y@~xzt&|_olS_lxL$+I_jr(Z(-3dN5fM-(P
z86wEk`nT*%LN{^>ZjrOYr*kj{vFCPtJl^TTU^#o{aULDOu$~u9RZ%qLR!HGXBI-H^
z>(~M>wmmsU!^`N%f8kd!Oo6cYJNG3>=b|2eyf8yinc!Wdj8(aLgzjo*(o7f6X>YWt
zQp9YYkJ(j%tdjJ(=htxAFfuZ_EJe47l-Glu27{VKB_5WfP<|rDB*6}tX{Dj!iY}#4
zfFOh0kS`rFM@~>uPv%v0hviErZo251gtW1rjf*+2LX;7GK|gK9nuDJ57;DzF5NQI9
z&tYF)Q<3kJ6(uz@%c)DU<{~>8g&|2}Hj;B6FNV-SgR~9jN{Y~E`&o~R2NWzMf-f$g
z^6bsS)b+5xoMTO7=tOxR({qZTm@U(DGF+o{c@FmCv8T5RX760%3;BDm0#YSw64LvF
zpjnv6eX>q7l8ES0Hywp)LGTJ)OkkViN|`H&K++|!nVo<^Jp^2vf>hf3hWqG(74r#&
z9fb3U3=z<<a5L7y1#n39p(1#Q7gh@_`x$!)v7JG8g=C;4;>cj>=WWQTeAUU9fgpv2
z(TBnMgV90MgHr|g=6{zOnzK_x5tLxW#Bk(lCdjdA=x+0jfX&fJz&A~VRM=YjWhw3j
zQTRAa&SLqU6Dvi*?rrf|0);V6McBxuT;11`-sVg`qMn284)znFV##L*$V;LM(C^RQ
z`WK^eT?XF;Y4knHnXyTPP2k+9K9?O8s+GT{^nm*S>l1S6CGDb2O5fX!{@P7$)B;sQ
z@oPN5U<w1M2(i#l0j0e8MdE=6G}=SV%R!Dy$oye94i$VXQVEJJM`T@<87lei@oaDZ
z*)!ukfOIzX%*Lf2=eaZjUQ`fIiP~<j!P+e$4M8%_Gp<+|ma`bI{aw3^E{Dg0DGZyC
zjfgSqitr9>pF|L}MGAyUid+aCni7>9jUrA6VWy`>42PmaZATHcD)DvKXmVLqC2Zqd
zKwO^t<x?B76lTLT0Mn5g7}KAi9RfhnE{7bSHSGm6AQZ?MKh;9???>x}w<1@&f5Zz&
zX}pd8om;+y&<p6gfSfL#OqlKmor3$0oG*o=lSBMbAO%DcD%Fd=dLL-|21^Isq(J<A
zQW%NJ?wc&87-35m)#hxM@wOxZmxn0FWl^ad1Mnv!Ml**Qgkh4NCFak)i{mXjpu8Xw
zUV(XRx(_|NS_LO2mecm;FeZew;|txU5PfiW;}t1U&M$C+`fUVI*N#HEJRg`0tGEfJ
z!|pDQ#cdPLewl%G`ZFS6Fh!>X<MQqo*P`dc-_zSA(9VByhq#Wf=BToE5wRQJ3qRvb
zR%Y%CJ`$T+3^$(wP<stD72blejEZW7VeZ^-<Pxe)w%asyCDq_M!ETaJ+T1gZRsJGY
zkWBx&LG!nToR>~ruC!)Lg|iGSZwwPigo)>X2?60t9;EGO1R-FcMPokbn|@7DTeZU(
zZ^K|WA(FgQ5`PC9UwMt(i96m5j^_Y&1s05xAnXz61Uc-On_LZ21cK{&mGM9_X^!p|
z=wrrqgy2gJH|>{NYce(1Wc(u;0AWn-If6B5l1JhP%-)006Km+?R*nU-gzuTJs64Kh
zDiLfwP9M?48^nHUAQ6a%cnEZ1&M9yV#ZZCdL?BMr@hi_JDu_fXseW{!*`E3+W`mMR
zv86m*<(;t~WK15-y>;@e;!?*ao^%->orngSZ`33G%^4(8G)UM>C2+T<$uL?Z4zIn5
zGqTj{Bp0_85Qb=3N_i5b#|dO{fkJ94617a+w#Yr~5gz*tPLl6jWC5p{&&wbxuJ$qt
zpYL6Ga0<lohSf$HQcgaMq#XzQi1}BX`VF!U$^Ul-348%`7+YV6ByLtOxXIupsHZZP
zpTi{xO0+$7X>b5?j$AQJG6@K5&|WXUc=(e-4*;+thWT|qO*s1Q<m}HHUIMwrPF>Gd
zi)xj-T4`<=*bhmok{KkaZ1D7&_>qsQJ`=MVBIyn%K$u&YlCSGDXNts39R?1I9PG5L
zA`>PUrBLIvim!o~w^6T$jf5Qm^`t_CvgTeu61gkC8`%9g4hj1ZLWC#ke~_{ZS)OJn
za<gN1&EIoc&h?~R19~)XXN&`zrz)jjj#WF6+BvSXu$KgyPa=Y$ZGLMN4JD7wJ!XDe
zIDRO$!)Mtr$EWZhALn{&I!M7JWHa1WiEoj?Zs?PvIgn5x3o=-C)e|TIy>!|tj$FV<
zpaws>HR?#OloY0jiDjD#0|Cm@AsW2Viv3*&$80K&7iwBwKuL*fxo%S=2m`5AF<(Ya
zh!FrRiffUoprIEa556l@ps>dcLy(HuB6K6}6%AyFzNpmNItg;E^QX(_he+2(W#s;>
z8aYU6l84*#o(J=Wv-2(WS?RdjVKAM7XBO}2=qefgHo%yrRGAe^{1xfXS(4O(s^%Tx
z45X?+O^R{1IK$HK@`wca;7b6FBoNW$>es2fu%(PB!Ca3l*WA{-^_akf<*D;~9QN!;
zz$_{RoJ6kExWp~SK5B~57{|ESX&m-^Mt+MR+Ek)~ECe43V!gd1n@6NzH4CQTP-;N%
z6{YAOQ_%8BMR;K`${7ZsPyj7)H>&*GFztZ>>w_8vn8HR3N*vCk3LdD`+*NW~A9PGp
zUqB=VrU*<7S~5n;l4Z}uwQ_R6SObhiwSjFv^czcyg%rYo)nxu4dNwg?G{9^Z-vD!B
z5H?$}a$QAEfnj#;Ug^X@z9qb78mUV~<$nJjY|%JXytnGaJjodS77-90zzj*I>Vqbj
zWyR$*3ta+_ry3b5ap#t@1X*8<6uz<nbP%eYmVg%qUszxYred{xC1TQ|93_k-DrRJW
zTS7@;$6>g;Y?cg!I)T@-U<jibR55{XAr;&~K`IwtO${UsYD8&0ri6fvy;mwUCgiK2
zNXB0gK6r`O4TT<L8pSIT?^iox9E2Nk9b46yHY%#DCaaJQ-b_?Y2J@_VBrr$PCD2+t
zT%`iNAf88lLcwF=kmXzy)E@bfvK;|gy;4wJ9F7(MNeL<h4#B5e03&CT1#mkoHs>sd
zGIY8up?1re{5VF=#~En$0~IBSVG{ZU=p%%cvX1QUZcv)MC%>w5dWQX=c22EC{6I?m
zT?!J*yZ4=X7jdz5zVCGS5ozi+PEA|`2SFi5KZFw4w6+gbW^YDYQDy3ICTZ**vz{8X
z1IKT}D0Za;qAVTK6&<kt`t5+OYnI@-G4RW}{(~+?N_Iy~t84qM)z|>);F&q<$Q(q0
z0NJeT{f&&b8sR``f-9G(TbXQ^j2g&XahS=elH2HT&&$rT!+Py+_`>kD45Tq}Q{M;N
zEPAA=ow9U5c<#w>#9fCQHiL5=zvt(!)Hl37Ck*OO+xW|m&*caotMqt-xcnR^7#gW7
z&l_|<QVUZ$qu=yM;H>lIFp>&mI_@jTFSUEk4cd+Z<hE>XHw%a5+*F@)MqaMP!vmy{
ze-?fbz>N)+F1|l*K|Pk<Of-SUZkh2WV4L6FzOvPD+{BF#wM;%gJ`4ef8gv+4D8RM<
z(K=XCXILx+a|WyOWDgz{NdqZbU=FqtVbjiyBM3QQyz>qQ<x}=~%?ziE0trs>_-nuV
z%Voa$%f%NlOS*V2CbgC3VM~MSX^xTdglCIx+;|G{pDQk-3h@U`EYY7LWL+ijwPMy3
z(WKt;MfO~DM0kxTfURIVvx;hjKDeBINrI1p!}4>5D;g|i?Z324G&qrL;zOnf0Hdi<
zC0h@>2UC<7PmO-$O%IE$$8TsNFU6KWse~JuaaA2L5P46odXgz8GN(pR{(E74CKcT0
zKzps=C0%=w0&-PGSX+`fRTRN?tjr%lI?_F2DGHZA6%zFm5g84`l*CMUDwBh6a7V*T
zXv}kY)V3mhodSBYBslCo1!-cv=vtV+8rOq6IFQE@CHTyze`oif!<KrXaaOH|Iij2C
zYO=-&Xeef~Eh71C9h(|+u(5F+nI=BtKea(*XsQ$s(7kYVZ=cC(fx`u#)0L*>E;51j
z$zgFHK&Gxuh7mMxN*EL3F=}0Y6ZtMsI5lM~v2DORM10u<czQKg9^e2&v0E({m2djI
z=+66~K!&27A8)nBB}f=En2RCPJq5(ttGTNq{Pig<jj2;;eY=X$k-#%ND%?cXXXQ~=
zetr<QvmVc^ymKzsocCFEa$YWYa8h5*RYm5bV(yh-EoS5zx-(AdKF*&EFkcQ`!zLs6
zL=-RExE1c^u@wu`9tg@1njsX9l-_t3W6kxYq^48xBJ<{lo+w0&cTa8xu&hDL8B%Er
zcyhB>q9CP!k~&pln{r}+5Q~vS(o}AyJ4#X?l?y7Y40Yq)ucmORXl_D1DZ6Exde!<^
zdF5c1h(&N_^?GC7GY_%CUASoO((3X0ozhU%iWr#my<Qm(#99GIqE1kf)&wOjDZ+l;
z5>m7Ed6UuAE=HA8k->}7c~d7k*z9Tx>GKBK9UL_Z1@!=L_9?QLq$C#rjy9lDx>zW)
zxhAK9VN8=X9x^>wM%fQ&O{iNDbI(EjWG?4R+?b7SA}lzF-ePvD6ar!emnZLq18s^)
zYx+1t4J64n)CIOgGwieGP;P%XFiFfeJ@F(@_~Z(!$%^U?n@vOwNxt<HyO2Ng3kiUV
zgwiHG-qYimVMz{bMw)B*l3BgU54v4VTRHb@2%4?eUJB%JK8n4}**^0_E0D<<O3@F<
z*!7c+upO_#u%w{9ck;h&K$FNSYd4-p9sNbrOzhZ<#`W=U#BCpb^B;@jkuzvs2I02f
zgFsq&nT=;Mj7=?9NpDGeP{27p_O7Y2Q2jYAG%^pTZI9YxETWE6?WMkFkM4)5uZrNL
zUdawk1Bx^B7S6Y}PDAgwht(-v0sN6xBupPKmNvi>FpIP7yT$yuoR{!<-2)c>`6#4R
zHTup5auZ1^-<*&z&WFz!=TY1(G>FPj804HPNMl~nF6I$eeIxn=zrzdFfE^a*Yl;Z(
zB^+vs?cAG>k7n~kZx5nlbM)w`N496^4HgKmjGt7}#Ol*6L2^!`vi2iIr)c0Yy{ukE
z4@<PN6?hv!AAo1NU7T}!DnAiia}ra;P4qFxgG0Nb)FLp265~q`NhD~~m8srE4VupH
z#1&LAH+_|-*^qujVb)7KR5TnbmZoc_QvrERYGDxT4?P)&nD4!-CLAX@JT+d<i$)i&
zr#{<TqHLnguAzP%YecB$I#($t3i)ux={C@kt0YKO6!&t4jPDF62qP=0B6!3+$G3lf
zP8Z@2OWZRdC2|s7BRm6jUG9ZDOgiv$oP`p0r<r@g<P`6#-k_ijNUmfSYz?1*2Va$+
z<Uo-Xa}-D)uR~*!ksO+@_5AwdVkkNM4<2`85-LTTc7sNU*5bQ>gp49ENUm^`kkFgw
zvGEp(WG=0?ScY-^p^Xx>0K_vhmaTbuVThiN7+ae#W{XaTzWSX8QBCE-<Ra6!p~hHh
zU()l@kKvtY?3M*U=Xu3d{(kXT^ZesCy(P}6D)o?r)}5R%lB-&yA-!2O%x`*HtwJ+Z
z$$X+uiF{FwZQOwvHF&!L<U<i-0?7iBjR@c);qU+#ea9MO{>ByqwAy=mn87N8M8a_N
zlin485>cYLrX!Ljmfk`0!Y+pjy0(qq#)@OYD|V)xQ-(+O?2AGMt(L-S*v$E;IEDg(
zU7r^YQtp@lfwX+q%JWO5>Z?$$m_8&)ZK{Tmq9d|U#_=PHrvyoh;eM$@J%6a#l1m?=
zqI+{pwzAAw2F)YYtnTA_)hZ=z?Rbb3bxnk3#~Rj2tbk9#y`TkEOMQ8aVmIZloF;F1
z;#o^<MOvhmf(x|<B8<vc&2NJ^Wi3&2;+R@8JEfFNkF&-<RT`pJu^>h`4(*^lRmj!j
z@9QTI?~mV~%V4k7;vX&x2#9vLSX4#8vu`R=aD?$0sxYC9w%oYxn;V)IWAHuU3perE
z2pJd9_$r;!3vuo&x@(SbQcp*;i^p*p9~gYPhM<Xq@4I(YQvCk#MBn<qsY!>XAfacr
zj0&zvr}RB6wIxmb<|tOOB2n;^kpkSj>JGd8zG5K!A{7r?v8q0MlA|Q<*Z+0cNr>8D
zYia1gu^^hw<mQGHb$=B`(7NhSCe&OpwA;6x)DB%xZi|rqyYT}SIrI$29q9#PP%(nn
zH#lQ`JK}QUyVY+WsV91dzh8WP=@N}xGwrVO?qdtbz3Ur$>k%da0^#6J8`SpWmm~ij
z)3@ZZVTvB64=nU|d?oHdW%26IVn806<HPxP5yW+p-IKwo-vC@?bI5|2bT3(|Zajhm
zWO`dR7og^Fjh$(v$({qOQg{2Al6qy;m*RYS4f1nS3AV}h%Li%zCPjyFkyIwGFRM-c
z0f79Jd^u3#rxi?9$7M94JlO}@Q(@`^ACKSe4FBOFsAz)uuUv2Dm&B(P3q%vD2+=Y?
z#XDqTt9b8*)FAtfL-wJtQ`ac|s=W<INs@Ub;$3|7=1(y+F=8Q%iGUJX5RU1sSDu$v
zmpOCIfI3b%f|n($9_lIqcPSGutF1IBLijo_R1>h**kKwcNwXR)@|uVa<2~KrK6*dh
zuNM%K7r!fHVO&*NEb#nerLYH2kU6Ryt9ne1Qr#4mfMOz>@1eCn<9-iNJZB)fA2CN5
z!0pW_r(r@(5;z)a9ZpcKij8v<2#G*xu1rW(*l0G5DL3SyNE?}Q-{m4zqwzA$REVI%
zz)Mp!iK?W6COKQjLWML1$o43zXa9=dU($<bl>~6%a{9I2bvb_}m=D`~=vC_zD&hHX
z{)`+9J$;1BpDdM=MG^>O)x|h~W;|Eh+LV~w9_pmW5pe&eV4JHPA@p3gZrDp8Xfz{H
zfu>__502O<7gd2XqNe_W9d$|SP<0{Ly}j>>39>Ve>-&C3iv^g6l}S`PX9JHz8II^3
zV<-!Koe^K<y^gVlJd$h&ES`nKto&%q_>quv9}Eq>4z+B&#CNiNB3j4H=-`CH0V+(-
z3I*x`2}@!rzv8t{*2OoiH`l3z+mIg5!l<hr>=1A~jJ@<=K_HxfH(CASP0-P>!$FrZ
zU?lcia4u>Z$4e@mc6=6!9Z+{kymozwcNQ<EynAn2kqcH7byLBbR6%^O(*vT&gjm%u
z|8Bk5L!dyq;(f|oODhea&P{}z-1A1@-CnFjpSjm2?z7k34M`Vg$TZ~nzrF1*9d$ij
zSs7Nh$UKL~C7AHVbNjt5to?xO3S9&J7xDi;jQ)R!e+~vt=KqiRXZmkh2h;yb*6~MU
zBPojm(f39D6sZy%EU^8^mSW8AN{vmK+wI7-QFM%O<1*+lAbrA5n9oZ)AkZ*~*)f}n
zU%^zXOxu@x%SVije02Hmbp|R7jx9zWM)4blYkaZ5@2b#}61B1YCD(lYYPRTSM8Uvd
zV5zxE4b1yxoi7kVLJY%|SRrWSDi=dY>FTE{^_96jmk8b+xAm8hcaB1Qtu5LZ`LLHU
z5p{36M<8Uc)w@4xlXjqXzuhyW+)m}mt<tOu%33)=<G{8WlBcX}Ex{mxpm064MhkP}
zb)#rjR*cw(!zW(bbZRx@)XYqbH<<l8e14`sy`M%Pu|sJ0T_8*<+^jXDQOT5i)|SbX
zGf*u^qz6GenJhz!MxkQj2^5|bsPqh)*G<usY;v4c7E^_|mnmm|zdSDC?)34U@q}(I
ztK;5%eBZ<OxmhGPFl!dxLy&@rmt5+cv0HEv2a{YoAk23Z-UVME(b^#qgvV|+(m|{7
zb=&!}i5xgMAH1Z%q*errAc*$siPQ(l2O)>%;H6SCH~7ZbaTdQ+H>k)gEipd2X4|wf
zzp{&wqq0Yu+jy>p+PBxBd&8nsRqv)64Sk0LRXwb#=4{k%U1?rg8Ok+YR5|*QL<656
z#ZF!b;YPm1_T8Wf02LZ|W|u4#Q-^O-ui}rvSt(Ci5m?MLHgYA|=ioWjO}uDqyCOSB
ze%Tz6lx<_G(^@RBb@CO?=w{%v5OF)i#!I`rU2Lo@%<{Cr{1Lm5wL;6NAOEnFZbtBJ
zP7I}EryEf07QDTvr;=YCm;qj?Kd0zj?%+am!7T!6F_7#ISAlJi<@rZ<zBF}sbOyPS
zD{&wN=K?4PU19Y`b17XwC<H*}0<rDaBCw0DXLzQYh_g1gUsz|FU1CAP*&Z1i9)!#b
zj5205A$gWjo6H=g7@of1^?tK`N;VWJHVdvk6`jrk(J>`+!I!!jM6^OQA07ef!1oLU
zCmdvKI6up@o{0m)2O^${N-*R^=!y9Q%G?K|;jrR#D{dG=q>ef1jlV}@dmjYtSrM-`
zBN!cxQ3C>b>-g>nW)^E*XGZ54Ku1CBaVo1RK2KK}NS;bZ&m7aW`}bbMj#Qnuorr|X
zKUzePy?7)M#;hO;h*o%(=V&M@L>QssO6N%<b#UQIv(t{&il{RgC&O^db__Kj*REzl
zk21m{Sz(oD>fuVs*x%tdfJfb&f^6kMpedrlf=zj^Z24Ec&Z9;;HqD?CY&zrH)}g|x
zUmje%J9Bw|VWFDf*U8Suj=83lnJ=f<_F2B8J2Y4kl+D|?ycIZ7`1O|{gH;$QZM4V2
zfL}~ys22MS1k4(x3HXR%b@F%RvQZL|iT$xvab+QGL4er>$L!ZrvMkJUFEqhY*U1sQ
zW3ih8VE#b-T4erpE}Hde;gsF_k+Iict6>N5C2+#igS^e%mX%KSx>AAK3MNV0zE?6u
zqc<qxW-{cn+fu{HN_dBh0;60=&t~YvTS;^-#Ryn_rfBhYb9ErA`qhTfvmRZcdqVTZ
zK2v$K$kHVEgyr@$MQbH7vL*{%iOW_21v*K!cqIy+8ZT%OG2j5m>>L3icKZNks-*r=
z8<I!VLE!#+!7%Rd;dhM|7chYAOQKLnJ_lOfEaj0E((W|Q$va-@w9&saneJ{$N#NL*
zP^jgUrlq<MHy<?V_TL<-M4#P}&!WX;$Mlu<nlMZrtr}}1J#`Lz-kXFdvA8v*I2oXJ
zwD8c$A6O9{8Dg6>EESEo>R4so)+;n^JOC4(eP;;8NE8O~5X52st4;eIwDZ%*p8uab
z{Qno<{ZIP+AN3tGE6e{&)Bi2dV*XzVw5BvS>~O}A{t56|V!(Jn2j^U7w&Vk^WOoT0
z*njnVCIA<3+9WpR!nk{h=>Wfho+y9DSDa65N~~F%5&-i`5PNrCIGrz6<myMBDDCgX
zzvZOD#9yNSr7M3=N!Qnu)T_hzrPDHvzQRB9I`nQ>Ku}0(MhXwyNQWW!)vogcoYmX8
z`1HjBWiaH`<xr{G(pOjOFL$*Ni6e%;u(Lquv_MFDanRr4+}}m^=75OCCy+dAs#yNp
z)2i=aiqXD__l>)bOK-Q(c>^<a#OPtQX==Xp6f7kZtt!B?mLMUO;EdOU$^pt**fw}8
z>dhfdd`hkEa1<Q7q=L7|_TDOd=dHdkis`8QVvk^CsHSNfCP+NtJ+S%qCEPTj(-N6t
zdgO)l7uQ;p*<0O{{+*8xxwZm!SHsio`6_{Q#)Oaac}>#{QHXBp&wAv($bC)u`e##u
zd@hhai)-7)imtSWVs9p5jf`-YSxGejVplOB<VnOE2uFgrYoH*_NP0c<5X~oLNtLWI
zO@Qx3#DSqa>>$e&vojatBd)3yx3LpA9TbskmB$I?Xh(KpL#`*2Y%YsFm{LlxvGa6X
zs_^TH($o>QAoz&ONIdt6$at~k?Uz#oqSiJW&qr~;iuUE1ZaNNJ7f+O8rzVp?ZQpL-
zL7uzrz(#j%1SrP)<2VXvm&-|dQRGS3_h^BYa~|&{-2t5=3dig|-3^?i4*k7_2@(KH
zLkZ<92MEa{IZk1;P$P9S7LcxjMcD9*Js>o^GcbE2;!t%t0{Po<jQ^#Oc+*dPSv!<U
z&r<k+Qb{ouBp{;U#sw1uRo&zHQX*$6YZ<((GRy66MVFOyYxmJFH2*ZfW&t`x5lE$A
z+aC2vk%F_wefk9NemD6DnJ6Sg;=lvCZzB<d$$WU8STD4mPo%6(PZj-m`xR<L;0?G&
z>T*dhD(gB>3E>0WB0g|GN4tL5cs^o3aps85a%|(HGnkn51*QQLRI;Y;-9P~cP<**=
zBX6CXkRH-)<zX2S|E(>&DTge%inhK5$gYY&nL(HRgAzbvVnB3t2(l~ix(C6nm&|ha
zsakN0;Ysy5@%!DmuP7?TQ}IwqK(B3AIxa4MVPC=g<CoLsMUNv<^kkVr!8dawX1nB0
zMK4pTh&c2>8dyr5jX4?)Bbb4`TJ=CFA4pgWFW@#m<{4#`|DIyZwfCts^>B7E12C$>
zy~2@RUZ^Pfj)Pe`VXB)va9=`IzA9VZqGJy}RjR7?B1nb{opRZgq+TU<OS^*#JR#kk
z*@4=na;Fg=tqt)zkzV_LU!H%HvxS;M=7MC<F}Ve7Ei$d!-}mQt;r4A%y9qq$y?xNv
z?$Lbw-Wa9hVar7)zmERjZtb4g(FjUSqM{0pvATM_%f>*zzX*Q0I0HpC7FxA4LD7RN
z*Pb7s-Adq<0S)GfBBv0`d{kPh_vu9=WWsy~lY64!v_^WR8qS9DPZ)+`eQmvJWd6N!
z@Xh&<U>TnMIIatj!j*=H?|ZP}5R{xc+yyGaY{MofSq^gfh5$265<VYXOn!$NF>il=
zka?k|kHt{PX2V5u^hkopuWC^yi(VG2hO|%J>d^YLr)~E}^m0;k@9$o%N%<d#W#HS9
zF=qp`cEJP<8z1Jq$Qz}+ZvwN=R(Vdy(SI#F1;3&en1GQIL;6CuUBg1Y4ps)|HH!V~
zH13t-_h<|}NuuasO6%^xEkNV>;@Ojm<L}bhO`tM?d)e)uD47*(F%tn(BE)RA=#~Mf
zc`+IZR+yBsUZJstK)r0V3eUHz9A|ov{nJ`sVtEcf%E|G%2#VP+XfLDmuNzU!yadCN
zR;DR8XVliJRr6_xYsQg}sDjHMa(Yv-A<LI#YH<j&=?>&i$~YR3MD&N*wx6rQmgdG!
zs4x9AYgw|!c+)x*edGb`39#_Vs?wdo_@QQ6?n=Jy|MV4hl$X@nzFxq0e@u$0@TXL;
zhc5e38wseBfGgJwiq+VAQ3`>Ny=FT}fm;|KK}Mk8DS39@Sz_b~PyhHK&#4t^w2UU3
zXwzp<9T>Z|4TkiU#h(wP40T?ab^~wHR%o_c2LR79WiwBzl^^1P%`{$%b~na?0me-5
zlVHs33Ba2KW8kG)D<<YlO2s0?K9x>VFGu1#j5Z)K$!BlbHb{KkAeL$b@G?$&l${9D
z4DPGe-yK8q)bh9KrU+HeqRr<(F9Z{p!gVJ5U~we`xqWp-L6Mq}EH9cmAsTw8si8;J
zjBltqT~~}z=eMP*wRBe!HejhW!NBwNm$2^_qjhGe-*%ij&X=0lVUYlQ#~T;nm4CGR
zJwh>~4qSNj452+3vA&dMr$B&k-&V)xu4W~TEXRFdGE{zJXDO25(EJWkSDNEjBpaa=
z8;VJ?C;%TE#Si%q!)Qfl(!-7y)0Rlq`Yz-@2Fq{)H0z@0DgwC602Y>SNqg!0p>nB~
zc-7Qlg0(e9gCuZ75*BabpjR|+K$N1t^u>XF103=`7G=Q$eX2)T1R>70(X@$Qo(7#f
z7IApj;|OBGPmNOYPQgamRJVlG$Z-|`<lcYlDz8v*qSZ_~{XYmX&n)Cv+fdu!r8pWZ
z;Jhyc`QW~w=6iF?CbL`utM;J5hy#Hv-zZXvcD4&%9U(cOy*^40(VmeQ1*C`p*D{+_
zi2<1gxeDE3XA4C1vp~fp_{hUGJ~%BJ>`&gye-@3*c^urf&<cypp|3aC5x<?q1-b)o
z6CcG_BqZyOV7ALqP}rm1-G+f_h26@Vd&I9cs(S3JSQZQyD+ZPzm$02HcSmp3Eg7K+
zz1i;|Dp@dDA$Z?y9iQdmd0@d)8E(a~xfr<wb-{)0<rQH?B9+;-mx%jL_P`5}egfB1
zzH-7cOCAeCmw_ioG?#mX0<NA!$B=~Wjmx!I5jQh{nHLh*jMk542C?9s%BKtl<e)K?
z7ey<|TdP|2p#HSmo(JJV>zzdxQR4_=wTM_u9IL>y;sHCqED^U~PWo2K3Hb9~4+vz|
zE3S1{Odzuy;P~F~{+$)9jNoDGnML}$cL55G7l`rlrnb%wvmgXh;0OnMXJt|zpSrwb
zg@-t<^k-M&O#iU=VHmOuRpnX1fq^Lp$W?}<Z90CPjRdYw;QqRXWkBCvlc(`=neoej
z<bA}=Q?&rE5<C@niVJUitqOdcr@NRh+SIpK#-BSaPSYc?!l6I^#~L8mLYB*py@Dxy
z$xRZ{EXAdVV|8*c>IqswJSL}77<lTNNo_iAlrQhy%)xv2y{|<j-&+xHu1#%{nUtaz
zF4+twO-4;vp#M(E!~~>R1AjT1=~F~$m1S+1vR`iiMX}SrsG2?b??;;kC$SdM-{UnW
zl`Cf#5oc%rPMKFP&g4mPc&6dYpjM%d-I>NX`Tm6N77@>W_>{NPlL-X(z<UXH1`D!5
zo1gVkyKg(OV&_hoVAfBAp|A8bTiZjquAyWgaJlL{dQhcYwK9u1kUNYe(e9Z8(Uklg
z3W(XLtrQ`8@@|J<<ue6VdR8V<hzn3rqLqezP($#t{>K8}^y272Kbh4bA$W`_Cihn=
z%9D{piG$=f9iUWX3JqL2f^Dg@x1gkNsDnf_oqavkxDwGLgzoq54Z*L*kXzU{Ec5rU
zZ$qzm09hdr1x(3~pzAZEd<bP2-gSICiB>=Wle%p8kh9OCOUVVOZ322EGy${jLM=P-
z7eoBJCx2h`m4yEbM*j~y{tt|1V(0vSFq)b9zxo`QS^hVD4qIBX&Ij#Ce?HWATUEyU
z0lOHd+Gb|TEfrg9CL<ZRJX9DWg2+v%6=YPFDb}^gd5u4eTL7q_#_s1=21(lvGn?pF
zi*CQKPMk;j5Jfpmzo(stD>RaeD*f8_x0J`7ds<IlZ`KjTwzs9KJS888uFl3}4oNV{
zqKHkqx}bN4t}hB2-~%S?u#6ak!K-`f^5Z37f<Nz6IA+q=6f&zPJW>|uLx;~EXg;v}
z@yz!Ja_Ss`6X{W;tpn*;4j%qAoj$^T3QKya9H#}gK?BXrdCx{o)wFJaldlL*QcO4!
zCIpnO*V<p_m1OKD4O-J}qOA6Od#HlO)(iE`G8RcDntvZ<uWa^XpvOFZdTGj}=G|l!
zYo_jy#hTJ5I~YLpe$HqcvT`-inaA6k@Mzwaw196Tn6>*O!VYGG?{D|!_na|Oyk$Ex
zFSTXkaC8&9Yx(M4EHD|(REjs$Q|TlXT{|_Wm@>yWVn9+a(x$&1KTe>WbWB)|9TGyu
zVOD8fYvuli5}qK%7GeM>$z(YNenJtkgZ;i_2~p}Pzt<Utv1Iqf4MhN5;*^*lm*2>s
zhSFGllNbs0-YFqOU+=IfEMB-BzH7RJw6YbDcs%+cI1s~s0d3n!Fy&Cq*T0H}l{4eY
zw>;}@RsH^2n-ONkjPT6n@n@_dWc*eF@Bcu)J0MgwzJ$gmn?DR>f0oIlY@`cgF=!2?
z!it6{;kEF=oP#|fQWEmQ+8vooLS>No&}^5rYJJ;qk2n+}NtZ6vYP8->L0`TBQ=Bj@
z+DJpC)y$=Cp><MCqrhB2zmTG@i!8PF$`ulb7lL{-HUKkb&)$JFlr!YJDPY68!Mzbx
zqy@_H4&W`(M2`}%w+8u0fb7^!XQZn)0hDypN837PTmg5}=9zqKWi-_$n&ePZlV()H
zHkl=aVMz}d)ZpY{@Bn|{YSu+(MD#Y(lwVSIWfYHLB35cyzasG<=|<CZPA8%EjDRz|
z;&mVOe(uFTt5_mux*E;;wM}OYd0?lbMdc<rFyY1-XuCve9sERR^!COi8R&n@U?W)I
z{H|w>F3uLXYRv^TRY<e5cHlo9+a+`XC2PaUPjHlyW_vQhOCcb%<^ODdqRJvCcE-%P
zx<>h0lz9ws9&dCgkB?Ix?Bz5rm_I&n+b-r_jeCTTYusI^4UnLrh8#wB_$BCvt=dAJ
zr`;XEo+2&>v4=rUyD32|wSB%6Lo&|<iyA?|neNGmm_0JKOERs*Em_bDqzAiSAE1Tk
zx2X=!^QZXm1~W@smQ7T=Gq$xn3A!2#ErAA}&()-$KFsG-A(06i#_xC*l-;kqQ9!4B
z3K<LRYTlTx_=FTYZMK9f(1AuyuX;+DBYm{}z-IHEFnpfs2;?k6>EqQgvX=oDt%FW_
zYx5$K#{^a<NA~GX$<;>_pEMP}E|=;kKNzgNkdr$O)=-?i#QNDwD-I?`+T7BY56>;-
z;4zh2o7sPw>O{HdgeO=73+N}`r|F=eFCU3xXg3nnn)UY3g!1t?{DqRQQz=^MuNFG3
zA4SU^KL#;}igR#RU{;KSwp>A-kSCNqy@;c;p_1GZ5Tm>60+0hCEC)}TM3Y~rSdEN5
zXjwc2o!_*gqxJp4qy&}6_keeja12|eg)4oJlGbxW2s9r$**OjY?20YWTny(yUk{O2
zl10(v%d0U&*8qqsPH34GQLA<piv4Ee%MQMbg&8p%ON_2X%C@nx3mzyFE;NsWUJB$X
znUecEd)xy}YM{0YrM1DFUyu6SP{sr_p4S5T4oe`iX9^X#B{U--dgrg-N9RgfAQBEG
zgw~cnLui;V5^;$KJWHiklH8X~wd?|HHJMeL^|`KcIsAAQF3DMDKnRxq``ET!su-aj
zU1Dg4Z81WApI;-0tdp?@KltSIMd{o_&wai8<{7hefSdY8_G-ETf~AQEs^nj4KJ)`K
zj(%Q_Iu|lNll!CE<dnP)_@**8H1SXkLoSUaIH$=l+Sk*h=z3b8e!<<mWlqS6(beJr
z!3|m)tUL#D!-CM7?VvCL%w(@6@5H3PDOxRF^`|;Bg$bRLcT8&1*XKYWaE_B-wZb}X
ztSY6ioV~!JRyo>nYeLZD!<7Grv3G0^Y~8}OW81cE+v(W0ZQHi(q+{E*ZQE8SIlcB<
zXP<g&ec69uR?RuC@yz?ap4iYNffjZ{3~N>vNU?8}qp64)nLA^~>0Cul^<<Nv374`Q
z#yZ<n*Psfpx*4?L&D67T4$BEm+L$Ca(G)isNPc!Kz74gu7cpwJaa>st@Wmb`#C)D9
z+>PSJJuRNICubr+P+!H%t#T|Kw2om}Da5E<L?nVg4NG|i^aOKMXV_ACYpGhge$Th-
zJSdDo9lonMH<QC(LdX1GzIrX}r<|ct>7nC`E7LCR9JQ406J+R6zN`v>e(aM4qs%<o
zXI_hJxy?9;$8?!=EjVdeuve^WQdq)pDM;|$kxbLp7cH9pfb7WWxk`9AkvAYQ*y*<1
zJ3$@;A|NRwVrFK+2waB9B|Z}Y+LjAsVxXrrV9l9t`?wxqb2OF&=?dYm&%SRi<peJT
zQ=5!cZ|YuEnV#I;El&+tOP%ZXXXD++07lQ1E|RrF?&kQj;U3qq=hZ?Km<7!nv7i-#
z!^eSB2WTiJkSRd<b=HD3G-M<GC=&w|<0JQI0R><`X||S0IUg0jdBqnY$mNire!%vZ
zxK(7cTmctO8z9RHcR?H0ERRHh-p3<qFB;KM63Ua|c5HXeEn7vn{Op83Uf|sVxRcMK
zV)h|abk>!e)3^62!~uZ4e8-45L8vW{-&vNPV)HZI0C<gzz4lLrZjZlyQ<1fj#fhL`
zXC2idE5yS$?rQJ=1|K#r65lHyrP*bbs13WfqU^Jz3QcUKSnfvY#F7}tMHkUWU|)p?
z+zGcyXGL;21;SH42-OLc59r($r$j|@QU!XuPd@!1<1G{2PMC>6Ou;tRW;$W8ROtrb
zIC*f2(S<@B3=TC4f!H;HDfZKyhhSg^2L1v2x$ogNk-OW?=e_RiXYRXP3R&x+{>2d&
zMs}w=)H}N7PsKR>EneTRz2Wrf<3xJ5Lg{+02GhW!E`RXM+_Z{%57R#`WkdJUm=5h#
z_QHc0$7D>A&L6?5r<}Be0ys;&+~)6fiwsP@ZBvTwGvGGSqfHcDqU++5fuoQSvdD#d
z6-t~C2Z%le^zQJoH!-D_5tc#=^7_(4-Ga3+eawRpi!P!^fu>)tmLFR0lHD%U*9v(?
zZLk01D28dMMXsM^_-FIRS=amKJx*2EsJH34@C=Jy+i7z*weR<67n;!J#n8j}#6nsi
zN2#H=n<WLy`5aL#=?O~h(x>}l-N48atie}&&JBFEYN;TTTDw+vbr!N<tM&a1pqJ`4
z0B);$^XG@Ld5kYmf5bw4B}z*qs|b4?T6KG05C9A;J0BQf<8x5(hhXfg9&fxHLs-sk
zV<7nLq-PAh_f1;oC#z{?{?6^jq+OqT`rhPi+7o9t(KAbA;ZWv7&COGckDY!s6Mex`
z%{=GRQ>e~fPz8@5j?GfE*~`PH{1R-ehzS+BHKIYdiy(gb4lL!XF7_@cdGVF2g0cXI
zm+wQ~1{F^6g;A7SX?nJ6#pV+)oBeF(pVpIFY>=o#b^@Ifok`FDP^oDj^jo6?{m~e5
zRe~0s?j7?k?UoH_@f<Q>3M-R00!(Gyx}dnld(|>LEWg)^p-MtEBP7Yc2hLl~EFR+c
z;{)-^Lh{mjA-VW|3J`l{vfqO{@7>@V;B)|IvDMwSI%w3upf4vxxN3E+T-4i5yu7lu
zDgAaYOzYiK_iTboccSr&iAK92f+hR&OV$Q8Ja{xVIPjPV#a_USHl<~Ku?V}<*rEG+
zKk@sw-qNUogP34KF!~^NdP%PgPL&eB2yylV$?^+hf`+nRHa9DK2Uh(64e=ZO{|)m0
z0Q!GGo|EbSfjs-aL7wA(0r?!w|4&G>`j3z%hGPWg#y9GkV?Nc$!)ExCz@}UP38@|o
z5DcKiyjSoY<>xRr7uuGjNIj)mMid98!%H^rA16)5B&gFl{^RZO$&g7ad2b%XvzqC5
z^H$v|I=PdkOFfUrJ7pn0ovrMXaG+?SXwNJi8@a3td*>THTYpEemoCz$x<fse!-PkB
zex9!Hud78ycp<fm-4OhTA^5f7uL!4O5H)7kp6Oqn0z-gl2Kj02mi^nOpItgN>$Mi`
zQqY=Bc3CLyG)!^4n>032x&*-*jISk=ym`~z@hjR~%PrHD4F<JqHRCm{7CC65s@n9X
zMEjCN#Aa#emFs?V-yTFB`O{ZBp{o&dT~{j08kE{}Mr!H!OWzj#nJqJuTF3T8?YDzd
z?eUi5>#$Z0sm;qn>a&M6F+y6m4H1oqaRVfby?L?1>(>qpkuL=gS{lpOo~%1-uWcx7
zk!dqNx+pX@o7Rn_*y{}&)^0W<kr!-w1NHos8BZQa;5|;ebzR16;o2cF)`|gH(CjA>
z;I+bdm8*Wz;B3QaWZELRfss4IUGyak4P6Er8FZ1>!xatg`tPt-tC&`JSm~oH7K7fZ
z%hpQEn7NgWCnlXWjn2z;OGDyRT0DgI&TKGl!rUTT#5DA0I!8}L#NNLJrg`Bv+ah@R
zLN2Au?)xe-AhNmp6hT!wYjb@39Pi_#PJv2m8nQ3}4muJ}i#rQV+?X*rEb1rsvONv$
z-Rt*q8IQ?mGbsU(ZisQGfcQi^?u78(ecHm*XYC9QrH5o)byzkpRalkG;f+pvc)(oy
zlTQ74;o5Qhw~u?UFT-8x%*aS2uj13nu14kX^?cnYFRY`O!FrSlc>9gmTL|tQ06>rg
zZotTG``64}*AGCjO5>xFCMQctX<`J0tsvw(t7mXO183y-F@>FS9a?A>yn|@%XDGdZ
zf3tcFYTN>oo>AIt8B>u0`Ha-jSBH@;WynCQg{X&0<jxV@xI&290StSp7|RS&0lOa!
z)_l@Gh<p+d=XnL#`5^E_3*nZ!#MaR)BHh|SxQ;C*vwCzcMl9DXrVhmB`R$s-JU~Rv
z@+k)2NvKeK#|s!+6N-0=Te`KSXnZTk24oqsH=LLFJ|?Utyhy?QSwN{NC{8=;HDga6
zJkrTQU8nE}0x;g^&FC_zY-EiUG&At4T6li0_kDjpZlKy^p>Nb|Z>N^ZPi=G?Gs@1*
z;}Afj%7|-3O0d6q=%8ZPket&ro8aLI{Yg=gnxDuDWdIOpS_?alTp*{s_DGyO;;1a*
zc~3A?pwp2F`PftKEQt+9m$3KaF(e2xR8c;MO07~)Xwhg_7B6MyglfZx{{SXja<SDk
z$&1WIDMGa}oNK7A477=A5&?U9dS-Eo=sRACA-7t^bMc_dO${rLns{pHo;g>~?!1(V
z^yU}S0E`=QqKF!^m(Y-)Mm-=jGAKa5r_;}Dk3})Sv83sK(<oVM^><AnQyiD>5=$4R
zp%5k8Cl)$Sd|J?G!RdcM(kZ;1l5}y0KD%9s7_CyLw4`8lE|eHXf!u>nKo;dmHzdCb
zS@k4=3&jR(4LF<m@?Ff6EKW_AKagk~0kY+Tp^B`X9gN+RN9&{|O83Vy4LSzpnuJxP
zB<rcOSFx^M%W60oT*qFyYUwanX7AVnxnsOydqnQu%#&c4xPH{om)M^)Yx%Y5oYis}
z``VAQ_cbitF;inwNo6&G4pzi?4dN#(Ky+iCk4XUZ_n2w0Nx?WNH0zQSt<^XJE(Tqa
zp`M*WyMWAx38h?U*f0{2U#zLPE-Vu}5jv6ApCCery-xha%(F65yBvt!Is2%G+CACX
z9@W5Ds%b)zNjwE>2>-K=ntZZeikDGFBD}xtumHcx#<vY#_pGR9O4$p$UBZa^fiB0+
z3!Bi|fMp+MsAN@Ht??7Dpg58k+94|dT6l~@Ho()?pd6m&#P;eXQPfkjVQ$=ndS>U(
zM+WPqWmq!sBHKHZ$=FhCIeEY+au%Nd6C>2sS2#g)(%MJ;ss;fINaNv#;;*Fxj&qqf
z*ur><UlJ@_g3Vk4v6RPoScnJr6c}@6#!d;|#=i-YNrIcRtk*RWlhRbt&#CYQw_Rym
zn<f@d3U<22)XaHP^&}@om=I;bifm<QbxlP1Y{ln-LmaH7l2<5hdiVsFRW4)|6oR^&
zbUz$lWJ^ehkS{WU0?!v-oB^=Mlk%nTO9rTbzI@<rR3`_5!y=mch&a-#LT%5zhMH~k
zqo0FI`5-h&w@j?_OY^@w-z-An32oF|nzyMitzMwXnxU43)pfakm{81KYVk+pBjV9<
zZ}H59|Ado=NpTK=Kt}w{6>Hc2#wApSpy5!RHQ9ytGlLGym3i`a4q>l31;@JOXb5{L
z_U2T5Q4kD9S*g3d>O)la>Y!V<x%{>PYljjF^UgzC_g|q!h5htZ`?=LR%E~Wxs94T7
zCI&Crou|?7pUcl@C{50rIZQ;#)c-LW&9vK5I&_fA`1uf2G0jq_V39)keRR8IdJMB{
zq5{Q&_nQKrCkmw0>qbw0S;@wJuLzJAOn~>4(4?+Y1tS<bLZJ9J<xW0p+f1B{pEnBr
zI}A%A4Q>-L5hVErlgYhzz)8WD4H^X`$?0QOHxZ@#T%N-z1j<eyqFf^JBvj04L-mE#
z-%#szf|3p-sgd*ehylSI%Oxego!eet5du6X&^?dAriv}EfhOh-G_U$n5k-zW9EGG5
zkW9xq8Zrlgn<%-tj(u0^&AH-h`*N|;vt-uD!8p?$!#JB~lpRTR@;2D(wLC+3ThjEB
zUY0F#y$OAjZ}I}6kZ*sJhvvhGwNe4F-NPo6pU5eAO2X>^iock_S(zM*qSAAmW3wiU
z2CsZ)lLfqS=}~u1WYZ-S>F;&Z$v=!*8P<6(4onhl$$rqLhu;0~o=L%gw8JlB@56OM
z9X{U!kmp%I;Q*dVlv)WT;KGBYJA(t{UAM=VQ3j!2wsX@&IVYFyRfH%MSK$W*kAjtA
zeq(}8@G#iJ!Uydfu0oqs^jb{wnr3Fd-1q832MIC@iU#Mc^4s5ikAkJG^RsqC{b4?R
zpIaMSKYd#94ab?=9P<p}?o0-@Phk*3o|cAs^6<sHg3reRjqnPnV))-_YM{K1?ZzWz
zA|NM4c7gGW$;|s}Qi#L{%6^xt0qzRQJfV^P0?wRs!G<ZfFdqxgWNB^>uxKgR2I{r5
zT0kE(dgQVJMwOK7OY>n{3}EnE0LU}fxCqf%f8MBHhq83lcjy~Fb5VTk_w3UrMj*<1
z`ULkD=>9PcbH3m%<<wDlPg1~gu-JGR7c1b+dk=k^yUS|$trgHzFr%+=3O!s%EW?rs
z`2OcECzUtsBnwWFSx{ymDA&0r`^>T>t&Pb+oXCuezLE`lZtACk2|F4jj0ym2;-_be
z#{|6db!}1eGu=6Lts!kD%=6`qetAc`gK>XE=)tD67;z)XogrP!U>STJmdd4`m#Mn=
zWdpwOTr1&KQJRPqB`Xb%Kg)ygLhXu^eOf?kaJ;63*ovhPeq4)XLw^6ky(^!oQ!Hoi
z?LEj;lrGr<$&jESLQte!@A(k)a=BG`G+lZ+pvIef9mXf74q7~`IxK5g_5Rtb#GFcs
z6?jhFD7ab4<vO8+nz=7i>L`9SPBLF7IM=*p`O(r`H*onJ3=tRZdOn+|^KP>u3(utJ
z>F^3&#?xTzOIBXimUs^SIplWc`|Q@C-2ZbU|HD~=uW&URIO}uAM8WKQRqR!k<yBBh
z8l__QwT<N!L3kcNQ?e$bc-fMIvk<jzb~BH^0e|gt^{scj9QvpeA0sJ$@30Rqxg5aY
zH*cAOCi^z+rh(~a&u$8l75w|tcM_>A4IEJ4VvW){vy6JSIsXQqciuj%SfFN1R()E#
zipr`Zmjp{gT$#1>?_UKfh>3dN+uO>yy=rQM;VVS+4=;etB|43HyS~};IwjOXVOcz_
zyQov=!XX76oa{7`?BQf@SV6SzF(cJ<J3;sp(rUGyCs|hAk+yw{%Q~v99!c{#bCnim
z$8ftLQ0SM48zCKpO@FLw)mK_V%2WhQgj)C5Dqf#|m){lImP(qQL5r;w+EwdkvqcVU
z?krB7YRfe#fDhJLMQ^P|H}!hw!%$PXfJ-4?gZm7N3MwR=0q2vQoB(}4sTX8P!5hSW
zz}<u|O{5_gzir)OQOe0MB>S+tG#gMm_bHDi32?AWpi}tq29`-3)`Lsx^NvlC>|VOy
zUsoO<;!nD0?htu4!xh4+rfwkOA|dx~*Pxzmp)D7F>Y8vd2SozFy20UNX6fX0w|_^c
zRiiK0WSdJTPv6`i%ciqsV<m&e&#rUoXj4mFiUI5Fs-`#23r~z&AmXRM8rS!rgvIUs
zebhXe(b$boxIjd;q5H^~$@Gu3jEqcmE%AAfi=9tvw>8p~%$CRl*iM+XReY>G;`%nX
z;?uuG(6Ln!qd6+n@Y7}n*_2@8IqAO?#LVD>GXlD0huT4)y@GT{JkpAi7I=*Gq!(&`
z0!#gvC-nK-R*91M1T;3>+>8*pi5K}|krFbQj1t}vMjp+Zwy~c$2l=S26skIB<H5mY
zA}yd!UUVLIc+BTAbh$|Tq+gp<zM3=ckUF5|XG5l0Ga645Y$&76uxx&zB_%mO8${mY
zjaef=n9I{kvhxCz{Yt7gbv#?ldBi)RFqB?2uIM?OcO$NgDR$Kb-j)c(d!M#dSg7j7
z${nU*a9`>#o3-0HJyt6^X?1yd6Nf(v)!{V5zx5^)It%DKWq2%sSU!XGgJ18=GkjgH
zOdIIVwD@VfHwlcMQ-}$Z05eL`rNu4i<UW@YFE9ndki?G^<u$A`(YJ!2ZfK%A_ewN?
zRd;DcRq~$mF*4UHo%iO&*qy^e&Igfvy+`D#+%9FI<Xz_!8D^W@v6|BMTOeoXAtkU`
zwx~<}HC9g4V1W)hO!QG_?Dty{M{zn0*IK*Sl^qax<9^0_xoaYAmxAg-`+Si%_%y3W
z)xJpmy^Z}#MES}L%HOc?^eX6l(l)Kunpi!nUoTxksVHpQg)g)537zY>Nw5&Vb5!{^
znF|A^3&;g@6W;@P1^k9Lds9-%=@MR^CWIB@GL90mIn%1&>B;Y3#->fyH={wtCGdP1
zUrkD$bzxqOoC8rC*c^6xjkEcoG7|z%Tchw1#p8j<<&SUY2S<8ur$3jcEMNa#+y7a|
z|5@9aIhh&$Z;XwF@n35@3)BCywjZZ$+HSESgx<bVhHoiDi@?AaQhd<WM-7N#m%R|N
z%OaYS)~Lm(Zk!>E-o~qqbGu4hG?A~#daAt*gtC%^G4K9i{u2#R8lIka<JORY=*<4f
zQ}ojN`!mIQE^By-T{X)1<w7$PK5BW2wornJBnW_(jk)#@linZTEdQK=>`DrNC{eCQ
zs9yC<x!M|)UakQmk}01u!EhCVxdY!5pSz(j&W??X0h;`TJ{pvnX!Rg^_E(Lhs`)&J
z`H^-;uBR9Ub+S$q{;Sl-VNCfAjW<Bzbnvm$g8KI737e!8(U=+e)VJmAUohaoy6bEk
zaf|eiz39EO7-%#7-#DTU2#6awPO5Nlih=8I{kFKLzilh3+L*;~9>Xz(`BBud)O;qY
zt}l<<BKihNA!4V1Ahb13xai_x!QktZtqlia#;eg!tHq|dY~$$;Olqu@GolEb5Z6-V
zM|gBtHLBS=%;l8=>&4tW+JlwTvxMk6D&Y`~PGp<n-j_e;rvY9mJwNXs{v5*MH0!3?
zB;1gZ9;k;%yOdgN4NbPKtd-_MheQ<npoDjhgy>H1D+`4@9I)BRt7_en>4Ks_7Zlnq
zs${Qv!h?nY^I`1yz$6DV3*+#@0g7}t^b;p~4MXDT2Vk{%fx*LwFWnPh63D$l;z8gi
zPE$H5VEOCon97;#Zsq#}&sR{f%Z+nH<%=B2nPgLQaY@tm37^b|yp)C9I*pMf4KAzQ
z+ZPTQ{6@)wk{BJd<--(-gLm-dgUeSE)5x6wSxU;gNHKWiK=}LBT*sdWry|Bi1`R2Y
zy%@Ad4HRzNiwE}v2@?b(abeQW_xGAY-J_;(8a~PQ$YcwKaT4^4M4>EQ*z4P43igb8
zF)j!j{lErI&O-`g@VCZWuum`1p+GD8L{ZvUeXMSsu{^RDkof~yJRYPUh%N0-ox}2*
z<^kNfcSY2!`4&EeA*5oLR;q_P8^sK*?A9j_lNVUS7{K>*9q<Nfv7V-@)biCLZB9G%
z7`(};yw02HsuSo9;x*gw8<-1XD{R404$`?-X-V8sK4oqVUtbQ$CHPYiV6ms3g3;uw
zyu;i)?c&rNUdR*2ZQ`504PKys?+n%JD68F^<d~nFABr)WNRGrWV|2WXr&8{3DU+=K
z(ZGxWUSp*nbEcHHH<w5>)C&P8I2N)q%w*djH(3<fY|l43I`6l3!Q*7qC6>f&qs+<~
z3N8LzR2n^l=XSqu-Z3ZD1Q;#36XDj{bO<FCwHiH_i_4rBQ^?|^YK!hwY_GI_P?`V-
z+}^WmBt{(A3)R;(b#`9bu#OFvjJEVky!~GANEni>R9A{r;C8f($8#UNn;9}-jw|Qw
zE)pLxgXtaP@s5WEihq6o=LG4GH9WFJzGI_DFB#^_lDL#qJYEoENat_Mr0lP9P?l2k
z*!fDG{2+*tPeOZFH$6cgMAjDZv;K+F<3j9u`9w2@z0I|qT4s0K4C@Rv%!^&UFP2bC
zoppB5Lm+TN9Oe*QY5-{E+DSG!1$1Cwh~OEUEY@wcOSRtNJ#?p}JQ?YGq+zms0R2WW
zpY>|}R+n=_s&ZU#%ILhp-a8*=B4e5{d88_A>eY@F^TfQJ?UJwC*3K3nvbh*GUcp;(
zEF#KaZxYZzp|<mU&TjL;DGU%V7r^TgT?-{uEECW_?Ge+VVL~XfXBC%!+Vqpoon9D2
z*0}?3*S5C))O%6lU*yUTpR#X$B4E5YWO?!>BP+Y_9qGr<VdpfdtnlPJwc5fZ0`5uC
z-&9!j^2c}6c3Ep(9+^Y9N_|;-5P{f2oZ+DcBoQeQJ9?|oY@Bb{KMarwakzv$oiebH
zEC*fsaytm5i9P1Cl9}w-LY)oDbG^XA7H5bVzs<}q^Dta%g6w>@{<fG-ZC=!7xO~AY
zZhkZZC)C1AyConH7m{;3bge#IYQ27IO1!4U{M;t{{y@Z;S||zt?-*W_$eZ8xPS+ux
z-#uT^@_*=4STEhq@7T7ToNy*Z$8`2EAj6p}X<{o};ITGX@+Sieh-`Jq+MIK9(uM*x
zaiJO4noF{z1NyuOrL!xdB#f7a+{)=Ja*Y;79`wEemJT%9*Xa^uAJ?=qBw<7V#z%oB
z@eaQ-?WHsI>!0lvy#l}Z*NFPh==o<vF|skR{dYwDyAZ?jKNVt@)u$b^BoKNoDL=w1
z2GRjT@plcWo3pB2R;-*FmC6yZFdO>xF(~i3uY~R3^{XH#Q;l0JTb%_Ko}B&kUY};~
zAkYf*&*fgDA0t5FlSUzJzC&&hPwf$9q-jxylNz!0=tU+aJ0k+^f^Ityj**3H%I4LS
z104w+vKj0Zh%}|62WU<_&#%b5cW@C-G+aAnb>f2Qg3dOF+Su2=P`)Wd3)tuU5jTyh
z)0ZKt?0QS6WcMP`sdFs~2-&g@*m^fznX1sFs0Ap0#m8F^E}GyuXfxo-MQvlIHP8@d
zhN9JL|B87<@AXUfjrHA}i%KMG#zqSMXd*-+wSbMBWd?jRQHcVjfc)!iAtXo*sW1jJ
z8M#-}kR&xsnE?8gQQ|;#;TDf1xC2;gg;}NziO>d&uCFoPrP3MD)xXDVs8D<8N}BxJ
zm&6Wy=+%0I6Wd_}Ru&}0erjZ~<``iY-jk_XAP9wV0;3m&2c31j!KP3%$&<v~dbj2w
zTTSj%^S4Ibrv2UwtqAWH);KD>z1>lzX1{h{g#^AD&>anl#r(q;p=!?Z&aInR4d$vn
zTvw(c4ef+b(N^SQl%R&C-y@9X<fs+fy_bHtrs<`H#NC|2C<1Z1SAC1bf#Y>%Tl3Co
zOVYCEVI{4Y3OO6|ZpjerK)zBd+UJ8#2GQn>d)&UHpVZtU2fdDx^51q}Fd;0gMvPZg
z6R4dxG&UICgX7d53UuS15jD>K+m?-mwWIPW^_Lnls*Q?waqvcd{y_t={(Hv)1S{3W
zyCWmj*2@!Ejahi@+O*iPW~~u(nrOw5s~k6E<6BJ@vB_Fu1O0j7P891Y>6l5`!d0g7
z_+ka#ncJTjI1c2<GL7z9;EmvBU>Uplej!tr>UEA<b|{?ZfjbX<&NfLd^S$-6lCB=x
zj+cB3b|oqBce5`ifVB1EQ7W&hwsAO5q(S?1wpbO-{J6mwJnIG)xs;P-0RNJzy{~Cj
zPtNbkeuMY)+6u9a6oHmzu1b*%-hGtyDP>JQ<SweehUH@TacxzO{3b%)$gA&EzB_=K
z>ZNn;1x8tYLI(?so}1tRVC4Z+bNu3zzOvAAx8EWJx0Ei3j7~AP6Vk>JJBpH|YVZ-R
zCtpve-)r1XFdoDoF+rXncJSm<kwvfA9*@I9QM10?UAmofWM9<tJKP_CTGu_q8>w9z
z2dtYd{LVR<47TqOR2$`5{o6HoyYGrR5P2S{MZ7*UE`zj8EgmoBb?vZ0!<tib5}VC;
zpgyDKb;ZNGl;z?jd;B>^Cv~EKUf-|@So-YO{;tyfWZ$@MG@InnH&upSW=lHaTPw$>
z#l$l^y3KWtm#`fsfb@HZ$IGk)w!xDfK(6-ZJKStP_!35*_`+Tslkkf?1OaYHlB4rx
zk1DD7e(hK-$HE4$YN3F(w?_|0IGVY9(;wpiQdd~yy>Nad3z|oT@`D{N5BBwks?0~y
za#;B|u6qE@l5MuSl$1Mvjle9=)`K{%7&43E;LLf>w*yaE-0r^OVMdi9%-c)FONQx`
zBUeDShayKf-iC<i=t7&r6(+$kHSqICa)15+*Ig&1|N9g8U)3`s=l`Shf0s>I|EID^
zNs5%+CIigq?KcX~26$y6&HMc3hI1cS(<ahxrh&Z;sVh3aCAG!twfOoBunk)=r8k0p
z!b04iq$One0sl-p?Zt({x~5#3m7fp?NvXC-+Ew-8au-I}DY33PFmf=!Fad~gsmU64
z*+1c7`8pyz^iZIhLm4J&f2+GKbfxnv+$0NS-fLz9<O%Tz{8}$tsZQWMtQAafG|9oA
zjtoWJ{iZM4XDnfx#hT>QMo+0R%+Anat&R0ysr~--^8={aNOJy{?;|HWbSbJf;A!$E
zw#)6+L1yw~8Py%0%??C?uZ***GqZ1%!x1<Vt>|Kb3?x|eT~%(y(MWiTY_=>NzblPF
zb8Mq5*TJvDMCvGj((VC`GtEIO3u#y~1>!)XIzq@K{kYw6N&pSd;GA>K&6gKD%u#E=
z7TwRZ1xs+q;?<!(MLRvV`?gj*v})5hw`5M>&Wkvt!Atv1_#nNe2DO_awAeeCtLzHl
zIQPwhX?%#H`@w}}8>Z5CWdMMg=_Fg$L#j1(oGX-5LOaCIzVROg0neH+kN<8e57a)|
zj{*p`$zFayAgQOLpmwT$(ZDSVaQDw{=`#n_@R@m3_k%>-71hSZn{~I5F;Yk#W#L}W
z9uH(gNvuLXK#K`I)p#l&@B!Xp!TG1kzsV*0%H3+j+~*uEppaCU+~bQ+Vv$kL*~+z6
zR0=L%+*d<}xXtGF1o6*0hMcuG(cscv7|blslshREL5XR%e7R5p!|+lEAe?iqBzX@S
zb7(X|i=adNSaW%2i4}1yYjqLk3>HS(d{H&rw4KHwpI>D(@OFN^$_Xt9bYnCg!a<Md
zG;PZdBFaAcR9s~!*1jQ7Z%luBeVXbIt|Q;~0Su%`vQKmqL&J^T*eH>4l;bbW*k~xH
z><cjDpyL|5bg%(in?tR3)r3llAY!7j%u-w9E7}5)<Q_7Kk&?~kYWLGjt7HJ|NQ2l0
z2SC^d&3_MNt$hUS>fM?%-2Ll4`p^6E4@$7Ju>W6@VEuR4l=XiKn=Wgt|GhK??Qdu6
ziCCS~c`ioBZikGO`B%1xcT$-;!5k4I&>RCm<chcON#3cm5vjz4Vs^RXuj52%=UuOx
zcJ8+f^<+e;FX!GvZ-a#EgU7&gImuV*neol#0p&8)`-8Au?`M6NUUPcJ1E&LSIE`ay
zVLm#wpHPHs=yIE|fFR^bV*?b^dWAUOH`*&Z@TF&(9X_*Iap6(Y%E5s*<F>riBO^*E
zmjF<@<J?WW#;1VMP2r6p?gu61t0HM!uHg~Pn)mHyewfPP1w4Hia`Uqa;nG9TCD(8Z
zuZy)D2jW%>9Ft49bxTamB}bf5_s5r$!3VucKWUb|*zq>BAHsqCUsRyk9Z<P8f<73o
z7x2seS?fy|(}*UdmI^Ga2_XdR*~ZnLidN6cN(XC8M)Af>abTH77o7oQ_RYvC1c=|P
z;4Ui#+Po3yHL&#VRc6-)OEs}?f~PbP4=MTF#I#8MZFztQ&!`rz3c`wi0K;8Adp~_r
zc@svPEcaTT_~&|%ixK(|78sl{*^QqC_%IcbOT9M~4wOc3d0!~VYL5EPCa9uvJ#jJt
zxb4l)KzY~Ep0Daew~Iv5MMaqe)d$cSSYh1Fc}gP)Tr$%#2<mB|5ZTWYxv?nm*yM^6
zinnNWEH!X)eJfajH}FF8z|mZ`Vx=hDSf1<ZLL;)MWLk(g_pcWdk=(_>`4k7PdB0g=
z92fWbk{bx4;T)Y&%A%j|jTG{{s>cb~Xj%4MlA#^diBf5)VPN82*CGrVc%OJpJT<M&
zR4-=@p25JNw9g9C8WsZ9pkmz=bf{bHQl&kX4@P<jB|U37>x2AX6pXisA)?5vWSnS@
zRP7LortHoa<~(uyl_Rv-4%FF6@m)Nbcg3=w2q*ruWQJR4!|=Q^%|el2zq!VpYWS4&
zyCjAQ7z(0Ggy}?{wH-}ymOXMDd?SeCMhkYMmBXmwQ5U@xl)$Tuo(kS-qcxq=*n=}A
zHU(N6V>G4PfH|Ln@7acF1pw@^d1he0`8*Y-E*Xw%8)aR707<!G4aypmB6U-nbfC2?
zFO&srqen{%fg$a+6>i|Ua9|_#!)AzWzssieJ;ERjCDzzC5Vcng6~kQ;O|@72@|FmK
zzR)3PT5Ae0UsenMRHi<6l2XHlFF=MFE#G#<(Z^7NDK5N`21V1?0j!onEbGH3g`{%k
z1;(kEScvLjei;@fbipH9juB?GLzc)ROoH_^>_S)cqq!Nm=9?|LIM;kltY<M-ii6yr
zx(r?^RN&)Hg;B)qWVhQ{U+JasP~#wQ59JUL#Iwb6x|GQZbEX-+Q%$a7S3pCp|D7u?
z0Y~I15PKGhSY$WG*$60sllc;p_~)g{cs9rNRVmz8Vw-UOHkPrbbs1?fz~r65S8pcT
zkG2vy{1TsVO<a(J9KH122qT+FEWOSlKm6bdbVsbN)0Ue)2i&~NgB_PAkZ>y|3o~zN
zu*oq&?j|PTO=IQKGB3g|T<lQI!;7hU{m{q(s&5(A%-&oPU}#SiagwUM_h3v7Z1*$I
z458g67;fv4^YyM!nEdOHFAZBfuKEfB`!ZpLvfWC3cs!&$Cjv7$o4zqtH`DWH#Entl
z4;!Tu8f>U?hWU5>aoqb(hPh~w@l6-Vn-Qpg1EacMtRqBM?)>-&l7fC=`ny;1wsITK
zYpW+8hnBZR{ExXQ=!IIO;4{|ZdXK^ztcLcbWHo(n`s9k{c0F$qp9Whwjj~-P1s=_z
z5!?=@-%m)FAh7y|<u7Oq9K9s=^vISF%Zk-9US|gN!ev#fr`z3D0Igeg^6e{X{~0Dm
zWa^%wbw0$)rm9|@mu+cxO+L>{$3(+kKM&jz`g(%6gJznI@q5s~+Hi^GuZ%!}<=7rv
zY?)^C$D!c^PGw!r-kJxaE?<0;=JYUbG5AqDYXS8?O|w|eiyefmA;~3JcYKyr&&(PO
zjXFAds}~=y<~<fgG&0eA;NOqB%I96oerb27^V<hMwaMe2dS_fjEf&?4(Nq!YFrp6&
z_CGgU3nE$4RaP`7=sZE)d2U))TPPBig-!B+xTtF^S+;-mg0Fv#2`w##rfP~$6_)U+
zTbOF+3;WqzsdoOFqJ_4?Z)2G~9(&g!c&J)}>Z{T9`37U~IsH6YdhfZf(t;MFFHSVY
zkP_w#+GAfO3zHNlyK49P;4DvXjPPu11$R8~Em7-!Gr%}j@5mtg!QgHrK%YOsVbrq?
z-w3c&;(03*{+1sX0i4+{{m&ROJ3~)^8Msa-?tbla9*`!dmqL>ocs?3(7lJy49eOy_
zH@ZXMPMaxG^Z9zT&9_jSX{E?WZAH56I1T_fI~>_?rNE=(Wc%xu)b1@05vHv*ohHL4
zVt>e+ULGSC7Um<l(0=kFyX@qh4ZasO7UlfDxbda4)5v?17=J}!xQ9YCX28GC8fI0w
zp9)}AemT$OUD01OqraPx53E=mDOfca@yfU&yKTutzk>uF$9cZAEl<g0PlZe1u*?rx
zM^1Um(+2^sx~7yugT=M~sjwXQ*|I#)t|9}Toa%h=`H5tH4bG0BH`JIhZ8rdKj;;Q)
zK{Zk35B9}<=oYkA1WJS9xb^lMN9c%}d~TG6YKp1i(p2sGCs25+REh=-i|Lm#DnpT_
zI>_XPbup$%2B#`$G*F?Z!-o&~<p_7iX#>Hnam#Gp<IQ=l_xv1>;;lb7^YjZkWl<BC
z&#j@{u1pX5*m%__0^BfW!dXbuCzOoOzW7J&OPdUB+=f&V<D{q_(@rmG>%Hs|qM$|z
z93Du|;US<A)=k**f!d!x@UT9)|3>`(FvoxLbANrt|7DYZ=jT}er~F*=-#+;k2hv~d
z#~rO@-*kA#q}_}ul5xVOw5KcnRfwS5qK(XwqPXJbJ^!293H~XHq-3(S99@to!rKCp
z29L|d66FW<W4k`zSEJr)Cvl!lTn`T9mzHU7mD|<ug}J0$^@{kcpVWEK@^XTQWF3pX
z1xo$$%~+)!S|xuSMDC;q#)(ESxoQ@1t)^<))BNM^!}oRcXas)xtZ4EbPvrW=%NY0T
z!6WErof>L4K|?yYq&42-GcbFeZIrFg^v?JNft2T&fptKiRk_b~*&tJWI(TrM98FQ*
zsliaHL1Etds?6#FGhmzy!k4CCA8^8{Yjx5Jq!5Y6j$I*_s@^nPKU#gv_mr2GT~sp-
z{Zu<WAKhK~ZCOEB4*HMQ*XBCYq=*0GddhRG)c&Zpu{9;o*W_}uVTne<`PzC%4OR2a
zQm6~-Wp<oaH{q&>g!_o9U0fGCF102Zb!ld)?HcO$Eu4wk)#STZMagrdr4An3uiDLt
zZD+e4ceVhuc)Dp>h^DIJlLN)n2F=P71%KpSnU!7ODch7kQ&=t~SRtT@8!!(%2ZmEC
zS{r{t8rvJKu5K(DXN2)001xF%rMLhu<pAb3T6EDJ0kAmu0-u!Jvt<C=*Vv%rQF+F?
zKI&F^+yUfo9=(eP`3>@eMux36Jl2-hX%ElC^Fhg=J<@%E(`|x=zbW~0wbSBO33Cw+
zxGfBiNm`_Mz{1=<Y7IaUA84=ve7T9C<g$-p@d%rObnE=HJ<2YdEnQ$;Wpo-&<Q2EI
zCu7IIdb)^7UL3zX2(727QE2+w=qkjemW_`fgL{^)Lw5EQ(hKo_mzIqmd};c55|r;t
z2sOSl!MO`*W7_vwS(9hYiZ+LISg*;tR21NU=Y?l`WI@HlgcPs1G+N--l8RjU+0lOG
zuXTCz2hrS>nMcHbsKTSo;6iOfsVNg*cJN$LwJ5x%fc;{u3Y&h`fT)%lhNF#)Z0b<3
z(b++$5e4<91`w6=;{>o~9d#&A;V0N;uU-XA)!8{8rCLXocd+cos-ro+w`YpqZn7R?
zS&^RkD!_T}Fw2EYC(_Dy$f{zq#oB{ksGoTob*P85kRsJ;!YtXGhH*TipYXmXIciFJ
zuS!ZQIZ%ZRY)7IAVmZjrQdN6KfOG$As9w1=b)wFK?OQR-am0uVc7B8mHP|M29>kw7
z2cK_Gd8=?Wm;g)9ZqvoSiBjh&JhceVo|y*mthr6TwxZq!*rxhi+s>$9`^4h0Vtwuq
z)1?gzKO`x4>owiXG*`!e@{&`t<$9wVYYY1DY9IV0XRf~AHoF6!se%Ms1vX7rv{>&c
zhn;_z>ZD{FI>>2I;DZV7w!Fao)K5g~R}bYS`|<esTO%=$VkoOQw0b4}4ixubFs`$B
zWzZJA)p0?Z$86wpVz+Fdk=9|$TsgE=XA^ye1RFUc&P>vt9N%!5SR_I6Q4j+|rJA(F
z;`hfM{Hu~X5Wfp?*-6NAus4t|C6IVt;3lQc*$KUdpY9PeX3Zz{-p7?3z@C;xJm$GU
zFI`1O#v}#hb%>M?hl+gs+o}-ut`M@KBYpg+8?@CtC%LPkrnTo9#g1SK)3gV(WQmlv
zQPHADzjL;pS1rJLK9*;(EUU2HgEZKNwpI}k=H!0WwJ?ROcmi`V;M3=jTSk4I;4tMZ
zT4RJ{p_Zo*7@iMhAO$v?b@}{Ej~#k;>FxCxpH6RpA?($-U~6-_6;`r_hVb!dm7r+g
zc#S>PVVrQsgP&VyFLheZPh^~6KNo#c)qEj|AdRq!jvAjsJypmvPDm#qrd=LM?^b1H
zPijUA$c~LXrAaXvR5Z)~BT-A;SApEqCG<C@QU~Q6Z{%tLR!Z@j&zju&dI8XA5^k^u
zx4(RlEAaPPO*NWc;oM^4-t)Um_>LkpTu?j3=xgc3+8bvwt0EWQy=_&W*(&-Ufo*)|
zO+&$uoU4=ezP8Dt9`)I-$iU^$&JQQD2z$_Zb8Gl8Lt)0h>2OmpjAQ;5zHiqfL>?I?
zw#%&}P`EAw7Z;wrCD(=kYIYcC;@pqJ-$7hElhrdi7i)fie#o2465vk`+fC`-8rsI(
zRx3d7;8$os&!~t6RRU8Fg=<aZaAa>ioy)p&$y=w;)4D)V8OV<c1hQ`gMl~_{*9U^R
zwZ}cIz++e+4i=Gw!I5C`XXSKN`<ztr`*mhE-AdS;s+g$9G_8Xe)j{4bV>y5$CH4}_
zNqG6hR#$Cr@$e2FWy|hWV>x3G&*Yk0-gS{akA=h}k0f=-FFqFT#(2m^NU~&Pq!<<*
zWmv@!VT}V|qe)Jgv5G#A+BG2%rlX#Z2|2cG(?rsQh#7b07~D3ShFS?rc~dlqAsib1
zG-5}Z(VC;YaLx~N%M=fW({)KhvQ2;@ziegbImJPsopJPzcFsE=L--=v(-L&ZS6Ah9
zC+kw+=%5yQ^stAaaM~YaB#FIHGc?7#Ab%^O88UY-XT`D4Gq$&aD?cmY!KwPk_w;4l
zw31)%H!wwBZE^QM$N2=Dv~HZh>zGZ@Vn{GPvAF3xtL&oapnUrBO)p|PcxN7Ysq9sP
zp8U!^Dp$iUwLt416Q4hG`Ll(Qxc{d(KH!DYHPg>bUwC!qLDInsEpKR#8Jj#GBeuvD
zUh&E<F{+zcWyjB_5W!m-DG00Ep%lWrk3*C|*psAGULc420h=sOB&K>n#a~{lIn7+B
z!tRMe#Het7lvxwKYB)4jkn9jWL$bkiT0NW+9XL2pv&<I^PNEribF1K>?=*MH@i*F~
z4Fc$!FGUGq10y>;cmu(>yCJ;Ys`r+&$eRq8`^{|4EpqH_XD91n1-FI~NXxWqiwDXB
z4OHmUyv9>-Y8arTzol77FN^|vkCKL@`9@Yw&ozYb=`yikroorFBl^h|Ts5Tci6=T2
zBAm?xhIwDg5WJY&Qd`Vzs<WX4O*&~|Rc#Cj3v3>ij#0yAgOq&6joa>16Z0;)PtU$?
zjWsT)d6wXxZI`1u^#O;=7@D|K*s*GI7A$JcxTndjp9sD{syTR=@u@2Tk=3M*Yhed3
zh^d`X>HBM*Ux@nd_g>%gTLgU;#<v~_nB-`g?Us%vyd$n+jX1w>1Jh+#r3E~TbTL^(
z78fw0An=$WKN@Af=NQ}G`KcMsJ(*RmC<2B4-k;#{DJGg}6SZ;T5pfSyq{c8^aUA4j
zMZyiey1Tn1oAfFFYDPsll>fn>e4_i@kREoo@AI_QC+9h@WNY*0%j0SA84W4x#m$!c
z7HJF8Gr!@oig7+PQHWc^6|V8(yLH7S&-gTm+2QhdM@Eei#yV3Laee8~u3%D6ea6<E
zu)OkzRSX|}nrr-_KsYq@&q=W-p6Sia*X6Z~4+Z;@H;Ku*?wj)}i#O^r&%Qaqhn#1(
z)@NzZ*&!Rc-G&)F9yL^S`q%3Q3wI#WsgU)Z|EOFt7|3QutZy-kkmBq2@Ma;+zB4&H
zB8JO|LqTuV__WE^6H{RVonDf+Ii!h3?R+IG_6@cnSS;y%GdU8}FSvt6yiiKXT{)6(
zXE=x9FjXu+5GC{Sat@2=ZoQs~?H=W8$nD+I-|&v$VrgfywN*dD)TT%nwf6NW196NN
z?(}+fatx*1<8x!~!SD?%fxu59`K(uI%k#BwujtkM(Eo7n|6jB8AKd*97PGVb_vatm
zzw;?<|5H9?SwkvmlMSioQZ3&Rve~46C<uU~RfZ>Qy<t_hYJ1XMYB+%)f-)jm@|V#q
z>*~1NxSupI!5b2*5qC|p65mw1yNln~^D69=7m8t^&|~d)`<9$gQ$|-F!YAr7f2!Bh
zpf?k9<H_XsV_pendM&vvqF^G?IA`W9xu9?6j9-9^zHT&T6lxge<1)#Z>3R;P=eN_9
z8Z}Nte22pTXsk!@$!pS{4nlWU;VO7e2B?T=dgPc4^mXv!=4X?p?R+H(HyJnc`4-zR
z{fw$KpL&fMG%p|}9OhV4>9qj8Z7QJ)le_h50>)tx3LL}8ja|t#{$XooVxUU7?PxbP
zBf^pEACWcQu%{7-ug23{yEV=jv2Df`=3pmiZ2Kb4Teh*vYC5z@9<Q~0>SR1wLkEgd
z01u2`sApmDi$BvptOXp7{nmy^BkJ$*+Q%|9{cIINitsoUEVGHYRFy>2Y%k8?m;sOF
z$8aZzjek5Usg-ROkyJQ;F*!e;kjxeMFHVE!kh*bildAwDxQ9d>8C6B{7WvLT6mHaf
zv^j-_<UivWK{lsi0LQBI$W=IJT)E;aD5jp5vQcVOL+PY;h>RlPG>~a^O3>6BH@MKK
z4%nLI^qKc8KZ|)TZ$fRCb>em`ninzakf6eRR=c2wl4z~V)qY#d7^P=@r6Hq<s*CP?
z;wQ1e;fUAYIoO-E7blFU*-;oH2k!`58A+3v61}YDID^YqWU{b2I~Gt!PrIzu)Yi^F
z``LnspZ_vb`N)T!i}ALR;TJ%_LBj1-{pc3}!dd#gbuzj=;h#W&EsmA}@+wQx>8x_f
z3+UQH(_s1}u)IE@50Tk~dxQ*$sXFoaQXvNk7!46I%W*{n9S!Ec3Df-@e+AF2v(bEW
zDV5Z^8&_&mxVnFrE;seY-Iy#tQj3Hdrj`(Y0qv%k?6UfbqE7(uY1}^6xGm0XM{-V?
z`tX?ejk!?HY4Ep*NANM7Siy18V}{aVt&t9&HW*Q%(<AFzvIq`zvDS*I__yK868vMg
zz{>q_Z0@!c?;blI;_J6$Vj_8+_(N**+oVtM9Lr>eRvGV>34vZ7gFcr{2Q~-Z6B1K?
zGPX9bQ9|E>$BNkg5v-f*CVHo@z^;*pALF5?g(Ed69Q(JV8!O<rTLeUgie+-A2?UTP
z>N{MFo$a6xNOwRxAHUoChy)&$4P}_L%P->TmwcA&19c|+cvUorpuodkt&*FZb0)NG
zGNCsDdufj==Ur^&3rhq;z*C33a@<7S>*<!Lg(@6<V3nw_XC$Z4he+Eu6>gBTtlLS*
zCD{H#_aVYMmGQSi@w2ibIz{9U<}5+v`eNZMvt~<C4qNlJxBDHNl~)m}Io|mtGPH>v
za`sDysD%c))XD+_pb5firB_!FSsfd6(j}jW!}NK5i%MT`%`tH@AC`O!*w-|)n=;&9
z8(um1Ej*1@tU+SZr2+=kZ8|4E5WNB(fID~nzA3q03TvO0Y%6TWiyv4kE%60&jQy7N
zHrN`QsmasIrlwwP2~UaVdLF-mRVDqfNOcsFx{C@p5hH|<T$$mtYeL48DRC-}D44@O
z+!qmjE(?1+EGYlPUP*I^VZ!GEgS*a7L0&wfyk2yor;VlTBm1>}wIZ=|PxW(75QZc4
zhgv+Iq+CSE6cFZRsgBKj)D*eB$iSOKcDH6He?bak=sQd`n8xAb%ZSF$Rvtat*o=f&
z0lS5U1zAxE5g_@V`%ftMldLbhTw!~^svuE->amdh5HS8%3$U&BUCT``05DIe9KN9-
za5#uF{TJBk3L*`;eKCvy9X@w;S1fB_Lg|oF(#cANK-dGzDG!f!IKN#b#kPcqTG4{p
zRcx#fjw87<8IvlF<ny2Bwxc?^`0P#Qp7c^`NoL{}d)!}*Py@&r4<muFcfSXv2Oyi+
zee=xDlQU^zG~(MWZdgJ<E#f5_V#J1=OQQLbgw~Eq?VHKFXhDDYZf>LFtGHR#P~PwL
zYgbBLRXz3x0d~|a*BA(}97DqT&vqF`;-%F9j8kr0e5*$4k3tLlcvIzsFg0lMA{d<I
zCorfNgx-rT69{*=biAvIHO&(O0G1K*-2^iQ!+=g|C)||aonsiGh527V<+F(19Srg*
zI%)|)G@WLbmAtww@C96p90EGCp$6?38G_n=W0W>Uju~DkA145?!q)d+fShv0NKYwA
zxzxIZY7Z*JhE8IP{vKG;v&xozb_qqIAt8)g)^^l&%9~2%7-<+j<m{F&pHYspKWpHA
z9nkckUo_A2R(HNI_3+m!>XGM3v9atyQ!spHjX2nGFq`7QbJ0aRr;w6u!NWpEayqW9
z?b!vyXe=Dr<9^C7_*GhiZe_B>Oh&&Tleu2j(HXbxJH6@2pYe0ZcGj{g^PQAw8Atx(
zz9v>{PCU)z{V~Ok1+Bj|{P(Of13#)nY;}a{abq7}cx6t22QtdeX!ZtF&U34s5G$7N
z<X(x%b^cJD_vUdr3;E~r59)4U@4@WbW|xx#qkDM=tgZF2Arg{2;^STRc?sjArTudl
z+RPGJyd0r}PRulZUi=R;vNnWp!1_|xj2Mh~e-!@Q=CSH6GRd@_slI?Doq<0?=j*fg
z1M;6wV0=?mfqzlKf2RF^B0-$&|NW82_U}j#+y4{^8dm>XHXZv%zBr}Tm&`D-2d8pO
zXl198ZGE+Y>ZW&;3=I-SLSzqcNEGt3r#H@j@&p40KxskmD>+U&ku9|=>z0>GKXn-B
z@x<(lR+cgfS4mG@&}(ui?qIlUqe^$Zfl|rNPuf(sUOPqDkCaDhFveDvqQqar{xd?l
zmUd4twt&FR)|pbI-CR<_&TsPKJW;gvINbqZlpBJ$$y1#zC;MbE&BvxV511gf6-V4S
zy@-u>n>*3N(cpJtIYzzlq|L6kr_O};Y1$l3XBvcX2*>`!ix)fvYq;TbyY!{dk{6}v
z!&|4NTA|xwm2gLcoDpP~vgvl|XY<|j;9;DcZ5-hbT{&UHdrrY~Q<jT?p4n5SqFY~M
zC*?ACQVJP{1n3k}+iD&A@JlisakQXY=$PEYq7?s;q3IGYt^lmPWv8*wR%@NLc|#EE
za#P#IWR~mjK{4hAk2d2N6cc7f%md#q!v?ZFW*}_#cGve?zV*vN3*OSLTpr7j|87yE
zK!Cbw^3yxZEwORB{%TFQ+!f}R>T`i}GnFrveX!G0Frb9s4i@T-`us#!8h7d;#lU>4
zi^_iQ<|C=2sZwEh89m^rX4$tE+N=Qb4B+94_&h0@4*#8ds?aJ1kn>ik$rLZ+zAU9i
zy<hYzNK>r82f$4m-Rz>^9_uqtr@a^K3cw9y{szetR&Af<1TVcL?z>4mF3<5xg(Ln7
z14m3?xN&#%4#A1w1NK>WZ{TeVoS-fhkXns%OI1RpJb^u&M0N-TA`}X!*Q`wYi!hMJ
z9!2A{1n`_$@9_nJLc&L8#2cApBK8s>aFU4qZXw93kb}^Kmg4|G7xP;%;#y`Ge}nHF
zpnDwz;{^z0T+sYH-(2Pe^-;#P*(UOh=y+S$P&%(m<t_Qr%-Ye_Dco}<mk}((Fu%&H
zv}8N6^8^t-*E^Jm4q^z;%t1LoSD=#UxNC~J!Pp?dcvWPNow7GoW#qAr8Xn59i9G3?
z{c!-y3TTVr<Nsmoow_rDx^>&wwo|cf+qP}nsMvPi*tTukb}F`AyVg2w?S1i`i}fdF
zn`4Zp_h(!|-w}urc{F+p^%5wP1fK%YVXpd$N9&sFGb=3a4%BlkEsDbH+<Rb%Ydqea
ziS^~<Ty@^>CKhE2SADTHfZ{2(7gQ<Fu!CVu=x``fUf_ELouw9JK#aP29GSc;YYhY?
z-!kGD_b5=AU+s`~DfMlaYjxeuQA_jw3YjaQ`H7gK4nhx&>~bzv9DRQfCPi9!kpN*W
zHsT|mmJ;0ISq)-iQ`RO7miC`?jr#8|%*p5y7Z#&_XLc0&EYPHgewm53RE&Sk4ZA3#
z=c7<U%LR9d%~ISJ?rm`i7fxyUtTV`W71Us>UZq2F8oHu8T&Gk1$>I~$cM%X1@|4`F
zp7}-<%?vU2b*!waF(I%5fbItxzUx{7{TnOG+l}SLka2qLO?bCrjXSgv-j^hS^-$k|
z9$L8?ovw%F{B~ChH7qP(-s45arG2B%R(`Etyf&wl6Aks^{=w(=0l30{8yQ~5S_u#&
zRBl<z-<#ag88%InIN<F(SG@)MF-WgDGMAF42{mb68&fL<5ti3XCq$B)&3o`e>1`+G
zO_&|n!^TL|b~27hr3V1i8cA$+J6XOaa(bCi$P>6cP=J<|k8Vl;r30#lm?{>KvK|Y!
zsU$aQz^OJ$k<9h=D?;UfJjJ<GA)I2H-GeZPn<ffp<E<uzn!>CmMlh^&I!JFHf)JL2
zr6!Wdm#Xkh&h9)6GIaP^n$<e284D+|Oj>pBK2%<dA{>~4$Z@3sjt>QUsvz+W)6pLi
zWL)*jdXF_(sQGaW9|oy;lAu#|%ijTKcf`jbquYc>7aX!_q$kp-DWShI;-0P@XJ(wt
zc%9BaJ~&BBAMgG2-84@1_C&m7&D*`h!nS#Cp<pSN`{VfVOI}tP1iqd@@7y`hIyINe
z5}$9~8v1oleCaejs>7osp+)HGW~7PdOFXjufcBAVyE&M6{#dwAQ^;B|DEq`-<%9C`
zG!{xsbZ*2WD-4S|NGO(2!GkvuVO78l5N<X?1`7s)3c9vW{2D1PoM!5utGgSz`;2ff
zx-#IcHWHiA7l~_n^_l5S=#90N>mn`?2pA$wlz*AYyUl5=qT!RVtha{J(_h{RfVHAV
z9Q(7?N?Xk^5xXh#530YISIT0=jF}xnSNNc`<_!8V)a^)ZB^tB^p=4Wch;bJYda(pu
z{q5ZnqmTM?&6~6Oju2De@#wDHdA{B2j%@CcH~?z+xCs~i&ik{I`t~;)Qwj<?nwbEL
zvnK(=Yb)R6EU<hj*<^!vG(yQsu+2tGqNV3b;%w%eDNR)xbrq*=gC5bT0oh{EUeF3=
zm%@VL6^iICx8#Qvbf~UbfUxps34mO(#Zssvu3J<2sC@DuoUtIi^E7obL&c!kyJa+4
zKsChs3ri?%3+_Vbd_GWbQyh#p<{=Nw!lUul%`6`;oN=ccWxky=rw#XU{Qg&A)B>%N
z|A+zKzxNIwhAU3!Jx<n(ALZPnhSt<e=<he@ffcXPu_0Q>N5j4!(<=+^S1a}<BzdbC
zKHP{T#8|s^+P3TQk{;d6ml^&5%MN1b$(B2HM}Fo)j2Ke>E&?+!L||stSDesjRA+Is
zU7IW!@-*mkljK=p;Jp?PL7(-LFOrLjJ%Y_N3|-7LFccfR&t9~r>$|1%t)dnP{Xq(a
z9O@V6$V86OlSV-4dZ1#g3mven&IM%Azan+7CXA`ksc>_N=j3=-!;3#pUzj#wW}lB+
zAFd#g-Z~mX=YP!o8wl;+<NZCN@s=~^{@kQGqZ<ilAG!Mga_|g|{3R^M5mah)AAx^V
z0r~BQ41?Vj8BZO_bGdtlbE2y^Ik&O)L|$w};2WPFJLqIlNulPiaW`d27kzy0l&St~
z4Of;Lm_yJV4%z36sMP0Z`S0<F$xmUES2h(25D$jeFb875@!1}G4Lq`TW!XZ^hz$wk
zMnT}n7r1?U)&9eCe}UTZPjCM7JM=&CKxSs<|F<Oh&v+om|0*6hqp9PP#fj$sS~pLU
z8>u?1=Vjxac`eT~!=Bqq$`fNd#oi^3ge3Jv@*;4H3=&M`lr*}taSsa3oqmg#L(?`+
zj<)f!#*2AAEPgq09kS}6^r%^UX3RbSux`!he#f{7-mo^#poGCk^Cke4pwe_@&HjK8
z364cvHjaZvZ8#fC(Vl*s&2X$bOAI60j%BMb{F;7TxbipN(fpY~^P34>hGTt*M12dJ
zu7$p-y+LhR&u7q8_pOTbA3jkugvD*m3p1<70+9|3Vl+TCnnR4ZB)WnCTy1`2*Cd1Q
zjY4Soa+So?M|i2LQ?h0;XRYgFX*n?P|IYZ~`t&<Q+S|8V3Hl|QqkX#Ni<st3S{&1&
z9zdJWCq;UQ;^#iUYAI$`lltVi`b%%m(F7-<Jk3$9go?raG_3J)MgO&{dfoz__l_u5
zbGaOokVhB6X=ckt#!(Gjg@cs+nNKF=v?b6FFUB*`-K$FUK@~2$S3|jyIMK${q(rS^
zUN>Kwye-x8THUu79g;)YX8x<jwPh+V!QYb4-SYIau0xtxD;E)MUf$Q7l3*#}0nd!a
z6zyOXkWC@RHNP3`yHhDvRV_HO{0L<tZ)ui_0zP@L`P-HH+KD4!p6hNA>2MYnj$u10
zl<oJ>&Pe-CnCeWWNcm}Iu0f!qXzVe};~$h}F~@@vN(EX2UfR|b<^5~CJu<II4Q<p0
zyYYP55gUZRo9h0?B`vD>!_$*T+nz}sajAS)`lVJ^QHb`QSwf4_1)EiVw5tfZ^vgZ1
z+%!LNmtS5z_kQ73Gm@L#iv=~A_v)5=ANx8`ve<QLkEewKA|Ma?XrQr5U}D>)@bT1@
zz|Lb~X$v%2B8Xe07wa0nI#B~N9ggq0Jh^!~7Bi`gFM`$Ek2}%IPiy+cz>pbt#zRxg
z*sB#9;x{=c?=pqzOGmyeC30e0shtK!OLg)#UNx0g5j8;?TR-1Z6qaI!Z?6i3mzl?r
zH;nqx;H>q^k$-;V<*hjl%8La+-}f)Yckypy`L1PV%5YJKC%icv6A1wNsgDy;3}EtU
zZ?kABc79IUJ`PRH@~GH0p!x>&VL|UhkzfXhq;oTpP$bG~DP@-9eD7J+sw5&SE}*@L
zI3W0X_Epcln6=M9O^9C-GP(k&$>_5}U<6iF11>|bP-7QTG~8<FH`>io^#uy?=Ru~>
zJwvevjQ7cYC!!&(HlhWFd*zpVCM5xh<AiQfGf~N3&4DYEGaZ=;<qC8}E3h=v<^PHa
z3mI0_g}6ewzNF2y{E?s(X2yW%SE}y?v|4>j7yeqcjUkvo^7+GgZo}sm+WY+d8~}Ik
z?Nz#EuJ9xVj-cl!aH~0Tk;av58Bvavr~K4At;o1`;Ebv}(vOKFx21XOOwN|%vu0Zw
z>a-%8amP8c7;;RL#g9L?Hk1-EeOZnGbM2dU>A<)vn@sR9XZanm28~^?Lk$-}sP*7a
z#qS+}c%jNlse%Ce$;i-TPtz8;B^6BUR+66z@4`kpFu<-4Z?hQx$}`8Daqy?1Mn|$I
z6OrW`TFHdwt>szWA<aJD@8awkMflQk8X%|I1~NIiwqXA^yu_w2CtU*6y(4&C0posw
z@0CJ%V9||~ex#5Zg)O@;4g~+(@cyUGBmFd7`ALEbFT}L33o3F`!8}gpDxh6Ow&J>L
zxNX-UziLFh7%y~~oB&U>0CN!d*~Ua*n*4YFt-%_duEKx3wg3Hw{`cs~%*FOUISr2g
z%#d>YuQH@PS~E%iwUC}u**CAW21ETdkk`R=WO}r-e!od=a8*MU2Nv62Dj8aAUg&XG
zb&TJJ`?r`C*8)+8f4vkcf8pOU+JNIX36mM=sKCkX^A9ySqDG${({oBj->T2U(1mrR
zL(QrNgTV3IkhM<<CR372QW=%jbzR|&Q^N;`Ey!&utJEZMD2IAhRk>d4>)X;4Vu_xf
zV&aJI-`T~Ow2EI<WmRV~q`kD`b&wl}AnH()ECmM9E3ol|c^6JSBo0+Cnrv^29d_9R
zjoY-JdH<#T$HZcBpk2yXA|;z5Rk^iwzZ^30Uc(>lv<cs^H#3q`6wrY8N?OraoT|Ap
z>q;}dGT&-y&ktq$dY)^$z4d?QVMyj2GDwg4Y-;+uw!sTO`-69V*=tar9mLaAetG+0
zLJ~gGr~Vr;W}lX23*MP@=S4w|5*CN$^6%V&jvEAT^drb@#&zy6EAkCsh*wbxut@p}
zaa-B-T#FOt-R=YB&PR~Tw&`u(>H@M)ZEPO<^}e!Gv+?SX{?d}K>pWms5WU-FZP13u
z@%RgE*ZBRD(ntb15Z>e2{1-=Y>KHO&WarDt{PU5X&h?)w5KLi#7`|+?B(VsqR@(c~
z)ykCxGT7)~Ls2^#+y}%av7o-kn9)ccncQt*$wK0|Ys5!fdLzBGfWO;(@Bs(j1WFHW
zMR?*JT5)zwU!9Z(6_Q}N57TDYGhUTg#_pFkjW?SOl{#-6723*eMXK9L%m8!tRm6QO
z&kW_buKqtnQ%#M{LcO(^RHv-5kL4?zsvMyb4dbA&C}u({{F3?N@V8`B;B=GA9h?Vi
zUTHRUx>12A9b5K&x7yBIY-4^rU+5XUu;G4g{iMtGS{Hre1(lyo+XvK60k*9F6g>te
zc8=h`Ru9_NI<He8xzz4JAk0G{#}o+E_BAinv|`8n6ORK}62(#E=SzJ=`XL6U=CQy%
zf6FJdK__&{O`VxTN#+TW(#1X3^of2RF(&y)#o56tk|?UWyUC1R^d<tHP%kpwTat^<
z2`<?3VV2_Z(U&m@{fx}^88j9Yb`HV!p;#m+lrECX({~YLFt}*wT<b3k*S8u7Y`6jf
z^L7!6FX=qZ1O)Z)JXRzt^^*=1so*SvqEbHPSbuW0JBU1S8GXWUBZJban|rzNP5){l
z<_Pgdt8t59@g5dkGSLFS8Lo`iQ5Y2BK(iY_i7C#c{=n#yv(n+m1ztbpyr5%TIjzB)
zXR=>ce+l}dBjB(o?k#Uw)1^O~hutujc90yM9ggyrRh&|#V0eg&%F2+xHKM(I$$=}D
zL%bUkDIe#u;+*V<d???o2XJ|VHZK;%F3G9%SImKe*V*VPJf@8DpH`69%`NokYV4Cn
zWc4>wIuq6c_i(fo(pn*>|K4x_r)3dW1FZns*;zXZ^vyBUCS`R=2pBAQSIZqQXJK4Z
zh4#Ngy1l3mfI3Ov!nG$2@bytXv;FhdEJz+mBN+O(a=l}ZcrTqvfw&%@Qf33ettcNm
ztN!>@(hSU=GZzC}wDQ<X^!f7zgPUYv^GaB_mSUCr2grs+PuBM3d>hw2!w>!a>4ZWC
z`!26-?SnZ3(}t2skVef$msDDfGJhQkHg$=~RK#~EH<Ez_no_zlwWxQ(zfmR3yi>K5
zP~;Of@92THCxGCqQ^&8aB#d|-^i-Z&Oc^tTB}~i&G^`yluC<Ik2Uw9DZX(qlyeKTE
zc4CzwG$ZtZ0Lx)7F#6Jc>sb&_aiXHMqF6PgQ&y&15;-MAL#`da`xL5yk_{C5g244M
zAIsMuM{+CHR71`RZ@rMQFhIq8RY3ai9cfmMW%k4Z2nYf!Ksa!M%FlKWA9(p<-KMa6
zRQ18aAND%)sNB)CLjsZlxDHdrj<MRq*??&I4gy6l)Y@AE@ktikBCtq2KWQqFuD8$q
z&>^%g_7{Z7PNyI5INOPv*c~2-I8`!vXmXN4&|i3V9aS|f9;j~!RdY!BvlVjC3-t1U
z8r}FPjU<pojt03&67wGCBro1S5c^38=zDdrfpEzb3uPX&II-Z;_00}l5CK#03jzg#
z^JOND4#ymnW!eBi8Oqo2ds9|4s8Gz+OsNy}jVcA$IEhAD?@zJ^XQn_rwA`uzp?(s@
zRnSGyB$35OH1#vd_XzWj-Qn<-+aS+-T6cK3LHV(+@e^yRq7H_rx>X|xXnP)eMX<s7
zd>CLTW!H1Kjbsw6;KD>5Z|zWTiWxmG@G=4Fa1sNJnS};lO#>IeX{HT?T)Lx)cL-_h
z(*Y%+2>~6l;v+Fd0CnTAfw;>@fZ#WIIIOnNU4TILYIb{UYNlL@z0DiyA)sp#O>dr^
zY9{lRToz&5Pm!bDr*9u3?^J_wpn+bV`;!Pnp-Y>p@>iFzeef8$)$vITvL?(VyJ=`?
z@Uvn>%h?~6d{5muMdeOv7!+DMx5=CXuvYs3lvNvOeC7y3y?eUFhC_!>``dYbP#&5B
zqA9zbY&hp^mMsBAVjI=`2umEUJhTYf>P$DD7`3jn(&9N7pkj?fpGi#vI9S0y2nOW)
z!tLGnuulPDz-xMYQwQ@cxWx&dy}N>hP<m^?KQa?lUeyU-=4Fqff=<Y-Kcr6P@q1lI
zT$0e~m<tWqmm(~Xx+tF?%+QWVnv|}QD+Hd9ekmt^taUpp6f((kuO72;57dN^H-G&G
z*+e^78;Tj@a6>e_`<hW&5O#=fj&+clued8lTey8@ES#d{jN+U@#sejD(2jj%LmRe1
z*I@mFDSN7_A*WTq@C*e3rtM+NezuCaTSW%eNSV_-H7yKheYVCsZnwRAriL$|HrI&}
zDUE&}jB$okea2c|&TR@intFfdU37|`FkG=Z2~HkeqW3|M7DOzA-w^Wvu`)3$Z-<hv
zpmf5IFfAEYP{~o;c}q?y4U}6_)YI&`Rx<<!0mt>ns`V4^8d1)UrN~*IO&XN?xqyqG
zH{%!XSpkhQYSTRW#UXZcNTk5XIFqY<=r+1;JZ2NL<R7Tb6wO(?Rf)3C$Wz_dV4gy|
zEbq&U4gh-``T4QnTo@czN+}m%rFCH(z1MwC4Acz3#WJdj9$nrQQPr=jZSl!W2)nH*
zKx@Gip<T(K!aG>l;LU|q$WLeMK+r&;9!Ssn;tB*#77?PZ%j@mb5(qg2ylg!G$!ml8
zx&(X5OOkd~MQCnHmBM7*9f(zy%pEvrRqvut3+;I;;JzR}ZpX6qw{k5|YqN3v1xLV?
z6|v)S(k-v`;4K+ECj&B0>yZ+?P-^)y&dPDPa^idw?hV+2X8?CVesH@2!`#73MC^Rw
zTM!#Xx{q2HSCtZYGhA*3vr~l(@Dq>hJI^|O$tEpd1L*-C@q(KnC<m6KGAQ`A<L++#
zH}*m}OwJfcbKIq6vTl|+rNPnf{=hJr{_h69S5z71Y`(9Kyy;5Kv+)A7U^8|hk21r8
zyqk953?yyOoMhq3QXycPyKw6ig_Uz-&}Ui-##b(?-tq)Ek3(CYWBC)XgEg0>{1(M6
z?;`>UFV9)}qB}&?3&decn9;~`j*DWIqS%%A+le7zQODQFf33MGDqZi%p=FmJ!F84t
z7xK9=84EE1?qx+)?`63_`BIgc&%vxx7_FPqKh|z=lx!~k5yHytqLME7P`vPcD2D!-
z|6B$p6oOShssXVkPv=F*E8e-4{DhR)%Et*@>RJ3x*6K#uFIEEiq51fj(U}zcW&|-5
z0&>(*ULW=^P7K*bfopEio|ReVvn~B=C40JMN+51;!sO3FrR{S8&U9sez_8XZ^A^kf
zOXAX}n_cK;A^qm2hQuG0p{D}!<)DZ31*iD_I4kNR?Z;x57VO~oP~ytK_Nw%I87j}_
zGNe~ZyZ;273O62;rQr%7fA*I5Gt{z!w9Cl(l|O_Z4fwKSmEBAi92{a~dsb~TcjOHS
zx@4TZ`|8LP$kmv)a*fQ9YTmNoY_*ZRZ*J)U<!zh_?DhVZH8|wh9lQE-=|T8iFOF!n
zYda%I*p3GSnPi0Fh&4MO`HeIuWNXeE_|~K;XoKDJ6X?4PN_{qM1tWmQ_4Gh&oEbC{
zUsd&cFz+wW7rz1Qe-0P_BT;2x<Y4~4!^MAwz&ZX`A@CCIss94hb}nhWF&!tb@&h4o
z?q(ZK4=Olc)~V-&bDf1qNsVMd;DDqTxVMf~{>8wz{R@DVb4gX?CnKR;_fEM^^)Dna
zTn3CkO#bd(F&Ml1+#iL`|GQAt&E)!dcr}!k(Q{z#^=do~{Fw>$l449{BqQtEHW1zU
zzIfQ<1e;6cm75YijGVd_Tdv)*`8eBpE%E8v*CL=eaUpWipN!Gt*A>kxyjqIt;ajHb
z`4tsI;bl$`{S5j_NC0qh8QWF8ZrEH9DQhJIsiXSbBxIjjHzq(D<ZqBS8&H{8wUVFH
z74uj*ozY{1o4I>$H8=?1R2N&uN38m-_ru4jovMpA`%jD!`BI9#-uhEg(>8aK`}T>1
zqa^J#o4WXQM{WJL>3lPhKE89O_6C!~B5F)bSyrR$<Kkz%RnBJ$kQVE~wxuzo`8xeE
z*ophS)Ymib9?5)QrQX;g=}O*C{fvEczD0o06mH&TvL@FxQuTIFa4Es=el_pGovt;(
zk}h2f<1*;iRC8WhU~b38P7j0K5rKKQxb+V{vSxpyjL4qqMvGRdE9~rZV1Mr4xJ(>K
z@g^f>n35G0z`vN$Ob%TspIIKzrmz|fRooTwOLpJy+;xjU`6^#`+p~4Jf2i%UV_%7b
zFGUj&d;5%2i&jPsJzNA3UUPTPuO4;pI@%<T(s#M;m7%XONhYO~fxH}dGxkP`V(-Ps
z`1PE>e0J_6vEcI{aL3q|zof9S&rQp%HNi|2P#{IejGc9yQIK|r;=0z&dj8>E5-L#i
zRS-gVz5SC{OMJv&;ov0ycOLGU#qaRIKJ*Mj3m_IRf|cRt;=|EcP`i<Z`7xeC(b<ps
z6zOQ+_vI#SF=}?9?2oPn>B)^}^Wvz{X1ldrjbig5x3hMA*6qqAThVU|L!#kM^)VaD
zIkNTG$)n=dA6I<GP<*JnfzHbiZR}*J=>D5YNS#>t*zTE(`lDi#(0w)Mz%##J1=bq3
z8F3a0q<5WYeL6y8H-hxQNjXJk?&sxUr$=<Yg$hDFNtyU=FjV}moAIR=K(NY=kr{&6
z9|RwTlm9Sv-5}w|Ruh_1(aHiOe6D!T$gao3JH|v5B^8R7epB%I0gZMeaMUTL1C@(W
z3uicX)9%0~ueR3Zy<p}wu>!VnJb&62-qK1kf?A8y9Qw2ra$3Rs>#|nn5c{I8lWLBM
z!6lW`6S;zUeq)<Gg{AnW^!BBb`93NMh=i)N%q>N)20*{1O7~M@@Ao*EsghB}d{YN_
z4mlRPF+Si9YMSawCP@+O-}%;9n6ghjreY9;<tUQRr@~E<PU~piM_YU3HjN048UcHX
z6j9xWx*xjq$SVYflk->YDlq9wlHxEJAo!BlLWYSsH7uV#VLZMP-4+&Xj2P6|)5Q|~
z`XT;67?1g@;CZ6GC?fHs7<!MY;_j2NF(5nTkP;!swha1g+E+~n+^&>sZo`bGE>QzM
zo^O~+e-1PzS6cTBuVXL8dbF>Pc)l?AWO4?j!yuOVPiWFRFr~MpU3jq`{(8CQ@Z5CP
zv5f|sjdIf)ZwHm%QBNU0V{T~UUSUH@0rVhL?%Gq>2}_aWzmcKLt}08eE6@n~5HYWq
z-+P9cFK&7vFSKf{!^TJv7hPdpyqt{;Z_@HUSeZuY(xhsm0vn9c`1E&)lS^T79sRj=
ziOiw|ipx}4IP4c)Dc+~g5^o7>ASm_7WCwc~5@RZ&S1JC|a6{|9_OBRXK>$|{P`AlJ
za&|5e>hUy7N*R)$q`1}4pJX`3nYTxn9KgteK%}I8@B99^>AZ0?4vjh$r#;XGvb3It
zUr(LH1quA~lc3f<{dSX}J4&lc<SxgzrJ1|p^={Vm{=w(RJjo<o=(<O>x&opHyla1J
z6+G0oTGKjINjZt`Hw|XiB$`ik^{`9mZZCY7wpWy6n64P1K!#6Ex!q>N%kJ(AdP9Jk
zlPa7#$1qaqglJsF%84LTy9r4@02CHFG0vbc6s&<-!X^&w`t$OH5wVck6B||lskr1E
zOT-=Qwtwc%K7XP&OM-zc&Iumx?vi_^**Yt71I94sp|5r<ypw$anuYC);Wi2D?5NY}
ze7k_TC|=P^)U5tYo)rkXFJZO=GLBZUV`1wB3@}IH0_SuvdFY!s%Q_5A8k|N;T?Vce
z&tYUu&v@0yC5bC7kQmWeuf14eWgnEntMCx%WiF>o^v{E5&GBo+hqRqpv*n4UY*BG3
z_Rp1g6pwzuViLiZ>z9Rlz><uTw_ZMxu(ja=^SZkb^s{c73a+GCcUG3Q8`%mJRlp3$
zbvbz|C*4F+NJzS`&7E);_<$hVSqJhGYRT6V=iulxM`R;8Ffn<O;0{^GTx63s4AP;|
zoa|HPrD#d_(>H+|;*t`G^Bk4>5<3pR!XtCb4r+%2kxbb{98X;o_;Zbz`d$7<p??&%
zpP~Mqhl$-U<W8Rgz0}LeGcf_KB;gUS*~zBmI11MU@bSQuk>0IUo|Gc&6)RHl$U;)f
z?qUm%`065257xVeHX7HFF~VFe)iSz3As9Wumsu&$;ZpUPF4szIrm<e@aC2RRg<^QN
zZdgihD)PZtIbngH{DtneNvJy$A!lFSvt+svk$t<5O~odj$u(D6_-2jb>RQ6Qd6Ep0
z)US(KaOYyJX<Ba_)SJgr{81b~&@ROjL(5tHX7bQX*=H@Tgt>vGBXendG^zTUNHgn+
za&QYGGw=P?<;pfXOTf|k^?+>zS&7ZA0F<Ea^k*W@K{MH>n<Qa9Gu_G8{XEAJ)S)M{
zHOd#G+LuEN4nPCrkv((O(-Ps=SquT~ZFW5{LvR@_54KnO%qJQ8f#QcRVXG`}EHsvN
zLZ{Ky!jH`(W_|JbbHQbhI!wVXdh39z(59DL?QnTn@3e(4+#j(M>`H%M5Zb<#MAdO9
zy>s)aVOEV6p4E^-)@TG<&gCo!>D@G`@!P401!j8paUnWW3Mp<676ruwHGgblvm|b1
zB0kyh>Kt$(7{Q1A5Gg|~XqnikeA|x`ZJ9W`qja8#RV7T8>s{SxXO(%@p3W;iM+Z60
zf5-PmIOrYq*su(LvTOR$=_VYu+`O|?Ek3;q<iXD2$|2y=1(?$q@_XvBP}kAHf!aFk
z+`<r)M+i7qzl~6{#7`+=;!Dh);`WEDKi*V^0A1nk5GN-BJ_*%3W@&m3C9M)_?aRu7
z_UtFcz~~f)+|wpEDQ34O{v06vws?0ANJ;aCr|r+)pZj$|=L@&dK||GYlwP7O>%N#%
zTMui|BjqM@|07>?KZnkPN1yA%Qx6(aQI4`l7w%43$L3pE*JL8zo_|P28i|TPecmv>
z9y9LeP<z`-du^)@-|8x>O&+3Wh35}sVGS5Vlw&4IDs}^_>;WNN$N_=sdD?=ftL^9w
zXFcZaUZ(x~UGRaD_NsM-n4*Q8lqGm&ypPjFkeiGYEPGi&H^C5i-ATAm$FO|c%&fQF
zsk54<SNgk~?Gt^wqyTXmCJ}%;329{|Gie<C8b>#ow;^@T3LPm9K^qsFG58n5(07I&
zG%;X>Q$33ZRjCg_Cq;%WgWCDd5djDVkam1~`&--O10F)l4m^p9W3o-iLQ}HPzV%h6
zKiV>EqK=aT3^lC-BVxvwORYht$sDo(4FR=s!N;OQSiZ*A-G%a@yO|JTYi*3b`gV|E
zgN`wjfgB)d=OJ(@NO)FH9PQneyA(bT!QdjqwbZHb)@%pSwIjs$PoIGOARMn}^92;I
zOg_&?Bk~;ivUA_9ADm7^>vKBS?hj?N<s+^h_HJyB+BMlYPV2CmVZn+L76YFCG6wvk
zW)K8hQ1*4K3@I4|K<IVPG{4KThlG%)HQ_%C^;o;5Gs?xce9)~*cPxI#C(Aam2DEaE
zS+&~z))P!l?q!wxEO|hwa^`}zg_9RAoN0(+KEsT6)%##omtvT-2wx$(OT9lgvhVu-
zz^~$EU#NGue!12#7y2|~7GUw6n`PX??LxLC5(D~<{A~5oUi)V>EGhF^wnb6oV+PPo
z@I#O5-|6CXe?rJ&rBw~@U!^;}WP0@gQgfGidT77&$-Ld+d<bg0%&}(?_byqffD|iW
z*Vgd9^k$(?H*ur&7nv3DYy;>Nda~CNvx_4p5_agxBt<y~B~^6=2bbk6TgjvrG!leq
zmpt_8z?gv-7mV<Cl5y(`#R_i@h^d$uSxcX0&#+#}#vi(Rh4X3j8o6Kp;C!10Whn2X
zDrQIf)xS=+E55Vto^~85Jlb9D)<Po?yu$S%k$yNV{YLFe@%nM|FW3tmAED}7$5eO=
z6@O6{^Sd*{0q`eF?Z*Oo2^@0+WLORMZABOViU*&-Uy9kXt5k^cVJvAtx2XkWTQQ=}
z?#w-}UWDlXCK*B+ST|117-cFGDwztnI!kxT_-w%i^!<ugw;?jtMis5=H6hIRenAJ#
zaEwHRA!Di$7d~hFet$S5e0wx7KJg|0&q3_}YB5><-yp{MpV$HC{|Y;p`G0K|TS01r
zP%hy893xJx-RL~}S${BnrofZ(Bd|a$fzWEc!@eeej@;+KIh5m4%TjbpV3`CJ=FVN@
zIlfXwQxc*2wqIwy)kJS<d-a(fH4c02ZYC6}s*vim?P~3JN8SdkJ<KqfP+U-Cq|{$E
zgud%FzY#bBFO{i90g~;;Ej=)m_1Z@g9Jk7S+y&AS+y1k~r4_3GBr7od;1^3lU+&{H
zy8S3(9qKQQ<GOcuKdP=-d|o+fW7WgavnEGyX(RR<1_)E5#<{;tg+oaT=E;#JGe!;h
zA#UTtMRr`@)0WlVC8MIgS{46Qz_CK}cN1lklUB7BPj_}}eOWx$(a5va?(~<MRH9xJ
zh#9;vF^hAp(TBwgt)__WCWM10v;J#ZJ(km1R+9mIT{c+mPdH4+ia;o3J|mX}k-77I
zQQ8_iXprLOCL+8K?5xYQZjn1|b(87It#WnDRnA}KQXs1(5)&N_aS1*c4PBeGY;d@#
zeR1q5XURkilA|`EGs9Cc;(Bdd6G1vMBdb^`{=uKv4}`@~;Y40n-%8pEs>-LI@=hEi
zOjR6!erfX$IX)@2ANRXXE}y117E-%n&gjE&$6OE<owm5U4t9-~zT2Q>%wpxhk>@vc
z9A0!_@_eW35=eP>ZY7JfK>h5FWM!|AEc`>SQ~AuiIF-S$1|$ORxu7cD?)w!z{0U6y
zcwipHBdK!XB&A`(SZ?{$KRjq}(0tr%h+z5LunmH@X|h2Ca{EB-(1;*t95^5*&8F~i
zRHO`z>d`~u;dsz+c3~o8zt<Cr8bI6UZL?@rz_<Y|?A476QqoR=?d50lno1of1RGZX
z)0TxvvMz;Vb%QWEFteJTfV6^UM99Q1TeCsoD9Sj&#Fo``_ko^^@06Tn7}^nNx1H?W
z_BQr*rz)M9K!E-X%(6^hRSk>JO%Fm6OLY_(k9}hYv!fU#NvT2ooQiS3ESiuyvP#-m
zeH$gGp0vu0fdY<)t184Fj2@6w`SW%uawaJuV&$Bd5+4Y^E~-tKs3?jT;<=_Z-cZc+
zNPFT89VqghNZl1Ky*ZG1z`YLp<=Peih%x>bi=u+X9xI1KNcwc)HG4@&9s47g5<jET
zVsWHOolid+i0>I>%WDqhL24@X;E?suJ~QNu&yN<)zP)i6YrOvM=b1iGr{sv`GEkoO
zD|2wcpuT!65jgQZm^FT|=^Rkl$?|Tlt5o9y<Jppxqb!YDQh2-pq|7RBc44DgmS%e(
zsJ-7``+}0TZub<A8pV9R1}?{k!c<Fgk~&0+H6W?QJtrz_lJmi%``1MhJcar$r|&rh
zL|#mb_`A((1se-=A^Fw8HmZA+Qfx`m>v(8}-WpEv&2sMrCqE&tjN^z2F9!1O_2lW0
zEje0bz7z3>%0yr6W5Sa$f@=zv9KtU`&w5mht&`uX;zbQmCnIG-q^Y@tRVw5}3@bRp
zW#$v|oUupa=+Pixo0dNdNzRgyVa^XBfyg@Fj;ssIKeTMN8<ZhI(l1Yhx`bn*FwuNz
zI)Znhu~PCSX|}V}NR+w{!Ntx-MNDPg7MNk8Ms4q#_}Q$$!YwafNJ=s@Z4BafK-P(T
zN}?oxo#ZMzNwPZWTDexqzcjy{JVeV>R<YLutEVgB+w)oa0{NMHWhuj$svkLh`PZA|
zv~ZU92pF0qiK+gTt8%e|d{9D?6%n_#|DDm3o}i<OZWY0J>C7A^x1z$+JUn1pkQ4IB
zKf({KD<(ML$THq)K1=i$Xx-V^>+*w84W8s&DK2Y={Gv#;`YPIHX;dPXj}deJgcSG(
z&@SK((aHG(frH0GyShA{oVJZloY<`?AKGg0yz1$WEMF7eS{{I%f_}iJ{+jk+e)l`M
z9B2qoc?fkiS5*Pty2ek+Ppqek>vtxdqSd>3FdN<{e7_Nq=mY+7sNTUX1PUwk-9OSo
zs|Sfm*4Wx%*JpUvwoktYRQ*YN+;N_$##bPNvM?A-XUL)WWvn`;z>Dpg0Xuhs^4rV!
z5i<{M$I?oQ=D?X;FyF6}BgjOjD*uh|Pad)c4B?CCUjmX~l6@h|NEl|2v|@!QBgW_(
zu0UXp$XqY5Vlh2KYbo^GXSog;a#6X>9;V$-+d@sNDEYMal1QD8gy1C{TNG=3g~D&p
zYJ<T=pdCIV)D-6&LD+V(aN9?4IfdO8^~{69KrBRfB<$5>8}NY(YJQg`L3WTW>WLss
zj=Eg{Jp<@pkARWzQlMK%<_&i-Gi}J*HD4Kg<9L3@s-mXVcinLqcGuAZ`qS~OYMtvx
z47_q3ctl8QAQ{~mF|I){t^n8ga9?#PlXPhH3pl~?o!y*|yV5o!<B*_zT^VDbxNcf<
zM+V#8pw9OPZ1`tXepZxVFaNlJVJ5YRSbbr%R<(cvkJ_U$Q?|y3(Nz;sPKE*EGc}EO
z{<`;|aKBB=`Oxf7u-NjqWK%0f*6qi#0_S;@euGp8Zn!fuh&FcTprdfs8=hd1U0yW1
zYg+3NWT9Xz5m+vygCR~1B-h`yer7Yr(6X{17!?dJ6Co7O-AdnxAXn8*R8vMj#KTYd
zDU9L|K~q5#uzfaPTI<rn5?Zb`BRzG(Dr^}ib_mCg2C7^W*VEz+`#P=XKxd!cIG~`7
zhTRTn@;gB`0c405u^scu;NJba=<6v*F4@@*(|F`t?Mm>iRge7Mpz8UW>F-$WYsCTd
z^&&36cLA}G97na)Tc66jB0e$py$(=$pdQfXT=@G4DO5WtCiSv}{ylyo(?C`&lEh0j
z#LeS`Tu66AL0t=)>I5!Bl3pzn2-giEBEX<l>bH-!(WQxSBwdhAPQYQU>EhkNX7%&m
zet=1^`I+7%g#q@l4$%bsshg!kKt`X%)@_;dG*Ry?f4UbtAj)soZcSkx`blNZG}$Hz
z)BKE`1qb!y5^%)T@le2h`TigkPI%SWm{Wu36%yRK&`qWG2--73M5r-Pky8l?g3F?e
z%%C9+!Jy6JW!=>|k=S?RH2FL=Cy+=lq6(UzN5Lo4n-C+-zeO<?^`)Q3o6~zfZo~D4
zR(|a$D;1Ck1@K|hY#3-7Q$@r%o(~4)j#gJS3SKSDk%(0x+|XDI{bIh1FP&VuWSzBz
z1AWTRl4R=}B8nf|qVjnv<ipqgf>+%Vg#nho1(v&htDZH(WqN!~xK`!qc|+Z4C6Yt;
z4udA3n*8v;s#xB4HA<*bohrBoRI-KL(@>DxL*T6RQ486|+`+%4gI45q<6X*-^k4F;
z<j<Z<h6IIExZxR=hljmlQzKjhRt0JgD^^9+pA1l(ELls5cf<QhtRVL2rE=W37s)2{
zPuSZtW%s?!2g-GWnbbT2#$p^e$EyjHeJaO1z#`AaLJel6MaW-*dfACT$Ayx3s|RQJ
zLC5Cx(Y$@Np1uwxm3;zXvk#)9VRKjcupr$OI@C%7oKwFZl_OB|-~=8SQ};Vt-Q-uF
zkyT5o&Q;FPqDIsAh;xfjPo+#k;v|U2wUn4$P-Yq`=d;%{i}Msez%qm;Mu&`e+wZ9(
zqY-@Yc3Aqg@74hd_yz5+!Vy7)4o3u?Uw0gK2aL^494&ixdnw+HenVNI3EV1cyzUjS
zJEB*Ol#V;EYI8niNC$UKgsuEFV1()nd;Yg_F$Hae#KxNv99~;Nf#cDwyT?NVG<YXL
znE2%>zloqL@*B)@n^?DJ4U#gmpOiyy{UtUM{eLk}A*5^i&&|pkpb;;sW)-y0&4#bl
z^&g8U`FcJ_zyF1D2V>*tL_*?bx-x3!(D4%c`m3}*e=mI64OPGv1gZ+`x%!IBSdSe^
z^=AC`E0V|^y?)sC?9au;-re(W)w0yn|M;)}_doo<F=0+FuKzilaQ-I{#QDDhf^z<u
z{kGfD{nj+{znHI5aLC)295Tt+<YUL;YMcm;Q=*9%tcT?qXT%y$aKC8Y$FgAqer+Vx
zG|2o(8Ub&g>Nw4X^*80moGv5$?5dvgb@zL@mp!YR{-L&cIU3nW%k89`%k7mvA04@w
z?k3g5sb`H^7xO!5;mC^qYmCgB{>V7p1f`&>YN6j`S9`X)wD$hwK6*5aIPHf_#v5<!
z?&NdQ^LXfi`|?1E>n&u;gqXC>dvXbBzq?&ou-$|y#)1Lqeb#ID|H*T@W|&*g@C*M-
zoYQJl=%9OL#-Qbcr@Hl2%}IdhVQaZj(4%hVWH{D}>kYy3YVJl<`X@QVqCn5DooDj-
zW}Ot)&*;X$`_nj>hQIJ=r~Cxa^JwaaccUrb`i7eJeR`NTwbDi`<C#=nBk5_LmLcmq
z+8Ha!rK`aE?v(QVtIDo};Y0t~J2PO6JcJ&F__%^?#Ame=3MLP7!?dU@J$!7G6u%N~
z>lo@l9gN$Gmo2mBDfd>BA>5^udIRpFN%UCrcS^~JF0&1+Z+EAOoDxYV{#M(!;9tmJ
zVSY@E+YAWd?x@4NHPw`d8kGaLeD;ddT%Sc0EaOC*-yB!DVjW?z{^KE_nOwi5a<;$n
z8;bZ8Sm=dM?_zZY$;UAgu<P|So_wUoQ}OIeY}XxS6v721Yxl+jHe5lJbY>f1Jpq5*
z5i`t@9QX)3d9+>Jr5ke(1>+j5i{FU#A=!xZb?BI{(04h!aY0}zpiXH+yz8{}Jitc+
znodD!q9K5<b?~EC8hiH#3?jwqtlcO(#bhg$k`TeG)cWYQP9C2v-9>jj+N*a8MAJ$}
zfl<86UNHpKudY^B({gBmRKrqM>?okY;C~WOwcAUf;N7L&03{!6!7L_X8>?)J<ndx<
z>D=W6P{sTHHy?om0XO!*lATJJl}?_tw$$7ya5RRXc6;uEao||jp7(7s3b>l8sg3AN
zboqfY4BE#4Z~Y;UL@WFLOW!CL(4^nDflc1La2K8lO>Ua$x;rg7`eEvv9_$LP%eaHX
zkK+;~Qv<efn#$ln&Ff}^rr8qSeG0)><FVohTV!MQ*GKFMyLMfoZAcwD6PTI$6`z7<
zmSdNEH1cPR7`!kPtoYjNQP-;}SV4?Mw#K;EyNrX8phoZn6A-=Wj+WRU4>#VTqgg`I
z>J!O@&_My8UUyjCz%lM)aboX*1QEUjB~pw&7M5Z`XEbKQU>|}9b7T~7*KYKOGM_+@
zrFYC7HC%uu*g{Ivw4V02;EE4V#TSf-Qrc1d3vi^uEqLpZ*T-oaWWDYBoA?>`3BOH2
z+)8gS{{=;i7)%S^z^-J8uwVA1J_m<^H_4o}udy7A@Zf#OnI3dJdWmIrl*qd6Zhc9s
zVr3+kp9Ss2mbekrdjH6@!e@AoEK=dyD3ZC9G4*0-#K(>WA`W7J_1+3<3u1L!$=)|r
zaC7<Bi(>#{<-n>ORYhN++0kSwZ}UuxnMoVo1{A?Uhj=@P(LTJk(I4Q0RK36UF816w
z)MZ!@#^{b3eGX$Hp=ui~+T?=8$O_-4p+f-{f$iZVGLF~e<3L-q#bLrijM#&ZQv2M}
zSe98p*z<Vq;k4KlB#jM9XCHAK<rOawoYI%ocKakLPOT?<Vsp#iL0Dy-N>6~&mS<-j
zIbJ!QjQ*}@s86_skthmN!OclBS0Y^)kfESJV?iSrtp>`SbK;)1Py!+S+FMykg<^R1
z2)wsmsjXw8_z~r;5aJBOGC$H8kG#^zLc8n(QS<6dF(Wi(l?+Xb(xRBMm%|EU7Qup^
zbbldT`r%8jzGJq#71HpQL*n}tS`%C>`Ejq4aKup!+VX{d?J-Rn!tPWqYq-#Yq)VP0
zXJYP)=rj_gccbnY!xSuItyj5O|87v1Tf8N7s0*%nGuu^KMr^vl1dDSLc7xg&3?QXk
za?>K_P{&zoEmm#Q89CkL786T&Gc^Y~NTp2-Tf%jDy(wuU*cAN+7&`Op@mNxW7}{mD
zhF{<a>Q1Gfy=p89orOI7TzOkivVB2rodV$gA>#^MP|mn&Iv#hhFr(wxM|=$x9pWff
z&GO(tg1NKIaNX8jnkHGu<)(_`ls@0DYjv_7(^f5vFU76pkhk@EYpb56iSF&=p^VPx
zyX2_d_J}gq39x%s;p6t!BnmZ3+OK*LHA&9c+p(7A@X)5P2r`XQ7vl7J<TzV@F1#EX
z_td^aR5Ss9Y`B{jGoMRrqvTt95Uyh{Am9oUV#&bjulgo!rXpppqm=E{T6z|KVLIJR
z+#DFisP-nS?+t58)g!I&-j4_q<;^80V@J*x)NUdpb#&^?t*~em_@a&>Rt<1_)Li`T
z>_`%whhMz_9qV201RcW=)hx9rFkYU`DE_<-Pqh>o!)(%=xYk)z&xD2u!po(H^PzS(
zSr$$483DGNr!)e{%7U`a&ncltI!<D!xpVgv>2=ZOH%pR$h7$<?=&OBK<RP!GPZ*g<
zZxD=j5@jgEFA<G>o^uva=l_n<|EZ5OsS{XHB?jJ*#k<FAY$ds?W>X{eJY#=q26V=Y
z2}r1TmCyLwe!jL??<!>bBL;g#0bh1?n#1fQP3yVvLt0W3r&?Vp$5xJcW89!GZCcM1
z63cku@l8I%;*|8$OG+KdoI@2}@rowG4Un?)UcdLCrv4fpC-CPo94V^<qYa;S<bKNn
z!NAGi2q3Bx>aN^M9!Jk}J$7v;aLR-u%R$<Z7qyXq$i7sxoCIIF*`EIB$krUhh|#kc
zN&N2RBzDQT*{XGh!TBUqtqJR!jz!z9iZwrx^du2~W<Vk#AHM}P!+UfEo}7{}_Gy9k
zwS&A|$&3HD_L49>U@k@sxP%Sz;C}W-QqAmJ_S`#m43YA7*UX=jFaTbe>-%}SAP2}#
z=YCnodIwQW=+kUTGb49zF;cd+s($#6M1Ji}9|Ys4`O-=7PPx@RY2m-LWSw#4!o2)^
z+TKrgz`|F({Bd#vgs+w`e*Z8MjvJC!vG!c*X;Q?8FL62ZGwzC?4=eqXH01pa?%|GE
ztL3?jyepYlYVv`jlgH3BeG<QJm8fpciSxa60T)kt^V#Gv2g5Pb4Ub=9Q|Vs*;5{bJ
z&a%h`*mi&K49AhLe3X-&AfMTF0TNp_cUIj^!G^M(KAxB($t9D{4Nn%2<~R!S9zr^e
zy08=i8?6}cI-?NawB6;bSD_Jml1V29Y{zy!$hnb<h!9oQ*!6qa3S`9WRR!iOyubaN
zCSi!O&E<<^U4Ab9FdqJVJ-ko7n+a9Ta&O{2>MB=1A;U<K&d8KIIH-mX#Q1)DF7G1w
zLUX8m!No4(6`j+BG|!y2u*h^{+120mGQy4xb}1Eae4Z;#-Pu8f=9zEk_B){f!2P}N
z!$5R0hoYW;`UKNDWv<p+#J@k8*b71o*HZNnh{33G03vCk$%X`J+%mFb?xvyFggzDA
ztM)<TZ;o5-h@>BsKt)0FkF1uaNKOk^G03G)#~toEBEV|cFt4c*pB-GTpQ_8O`U063
z7uZp_MR4Wq*SR%jMFCt^+<`*7e7>t5=X?j{ZqVQ0h3nYa^d?pym|058V71m$4W*!0
zRs^C9FiX$lhT-yjLfZ6z-9lW2@R#z*pNb>MbOObc-ICvx!3A@*X!vfc=D$9y89IC;
zyf2Kl0S<y*SnCdg25%3jrfA&`6eOlFQ5K2HMYP>(OPCaX^-@2wVgk`9fKrx3*-Q+f
zD^aPw>>w$22jfpQII#}Su_fIX?7yW^T8%7c)RTu)TmKqcAcL7CjBpE))R$q#0d*+i
z!)-hihZ}y#3iLw8oLswklzAZ(Nc1Wxebr~lzp{w!(R#SZN}-LfY;UWg|9Mdlrya2l
zS)8(T9dWT#WY_k3jW|w*1V=`T@V!AloY8Xx+ljTLYL#EA*C1DDPkyZF%HM}6Nf{^A
z(#b+*@gHimv)#DHGo7@TDr{OW=ZbkFF{^l=m|ol+dI=eb0)CErt@s|US5(U07f&%B
zIY3z+^Qsf>ZTVkM{^1HhO?D(Y=`{6VuKvSA@P6;YWzju(zfBz`d#Yg}m<CC<$CVik
zuOf9Np3<Y6ejl9vC1M!(|Cu-bhqz;5<odt1PR{=%?zsL}#NCSag!9oja?d5r1$(~8
za6XLBC##Jpk2c?RVxgZR4;m75<Xr*~WHc+l!SZ+1-vtI6NU4hS=%EEjv1CCt^^>V|
zhNd^3XyIAnkFvkD?iR>h0-xV8Qwo_sO`8q3b+c(t%PSXGTLvy4hZi@pJ;Pe`nz^J`
z)*cwHh|yKQjgWaY!klz5pmW=`^T4kgdrInhzgt)xFpU6W!hUnfw6w`7dVIOygh5Y3
zLEnvaI^KbpR+NpZd>9ju1oVViPAx{5YCLK>-e>FV1NYjs2A|eVDRdXWv(KngqM}CG
z^=8=>Bd;b)EucOl1OWdKu_<$fx(G%!_RNxK%9wV&4>b$BLnX?nh)afJ=an>glfCBG
z2Tv=MC=>_!j)Zt!J3wHCpO(Sxr+4|5li^V*JA3`wEdh#p&Dxti6ruvqR5~v#toGH%
zFz}07UjPYl?n8jO{@3G$!`SJ865h!dO<eM+kyc757XqSJ?$o&VDb820nr*qn>P~~5
z$6j^)dheygs(P2VAt6Y<(GWnL;CH{pONG!On4$MJYyVWGHJfG#FZA^f#J!KMuM0-F
zRLVG_m!`Ry)g4o(%7AQimYm<dGW{U2)Kg|reenoXB{vQX@~oQ_inx=#yO!Ja*k?uE
z+6Nk>%_+zYbN#}u7uy(sZO<;TjDK_Rc3bE$A-dhMbaZj~I<1ueF9-<a{L5%bZi~(6
zJj6~Wv7ezL)con8L5$KkIwm<Bo!o+Im_wuo@L}!?U`S5u&*9T{Dcd*9Wh)QoaRO0q
zTe)u4zr<twsz2u1-Y*fl`@rwYXe9|?iMeXL?&RBt!BM{9{{<}=0ZRIEO*t)EN+iqA
zidFmad5yZSLE|dT1MJkUKG?w>PziBSii6OjTxz7N%{`?39V<E$Xwt|i<$}5)TVCzm
zQpB<Y=SrR_Y2qOYMTH29IbwKK_OU<imC@DBX^i&R@))tbsTAFKu&39?KM`woymVuc
zG{IGc>pT+3BnB7PR)<Fj{zSK})H$@)U~-_}SJgT+@X2W#d1y>T2t#yiWw4jy?jXyX
ziN8)Vn60nFcX{-flh>H&H0x%l)LEzAM<<;il5#A>hl079RO!NRLPEs3;er3vQ29!N
zOykHIfJr4#iXo`YG1&lgskbJuSZFpWrub}Ays%DXzq3|#awJ{Ines{Nl|8VA!Lc?F
z|GX2Vk|Q&fA5>6x?9$7iT%5yq1bzF!EUQ?M2Z|GrB-ZHuCfLOv*^H|;QrHc(oS0W(
z0%E1|^;<CB6`sK^w>O}jk`HA2pd&97x84fz=0Fbg)NDPX+7p;P21qzT?&yhCP!t;I
z*dPK?<}xzD!RO*6ycWNzRIJ=`D`afI@a5^Od%C#W*;OAZwCXpKM{rpSan$5~ulaRz
zSB;PHU8<IzS4mAcG6jX$;=Ii*!>krdqu%qdy$xrv3AK<(IW%gXK)!4E=(r{}Nn%*2
znFy9fIm&kcnQF`F6Ep~TV%8`GLzK2%EJH}meWrfCK1qU!Tv*SKRuP0TBm5(?i|c3y
z3WJ+i;Y6o`Fy)c5d9hbUT9{$b9i{;pdV`YG?OxJ}F)GaAC&ylonTeYK5_OnW9rX*T
z+J+(`(Wg}_Hu{7$7T`0jvfcah`TsEXPF<o!OS)~^wr$(CZQHhO+qUh@m9}l$#!BB+
z=d`N(u+KyNh1uGS5o1K}U&Pl~ogk)T2GKy>%E&G0gi3GPcr;EQk`z3ztB9l}fB+9N
z@U3>?*rQQ43eyCY`|j|w2(K-nJ$ApLn*h`Fu05pW7v;U}^xBU{Hh>qT;}6}I##k5l
ziUuLY$QPnWQCZ0Ae&jjn6NpIhC5S&;f)`kZK~Z$A)4nKJQ<zlMB8FO9e@v1$GP!m3
z?5&{&NUv|(qeafHl?z5CjFr{Tu?pSP;ZWZf%Pu{7thHs{X>9_fEF5v*I`on~$0~2F
zZaK5LhyiYrM$=3uO%q&I<_dDLx-COUZN;XjC~tl7&ESG^0#6Y{z{;-rdwl1cHz84W
zQP@>G=7lmUoSGi+fU{;lf^>}_b|KkK?haCec1aXE*pRlE008iV_lQ<CV4P2CIe5&N
zljvDRP=|J2wk_4I=*VcLH$>Fnp={bdnNUm+S6LF6a@$Z{a-63oeE00P_$q<5OpXvN
z1*o-*tJN_{kMpvjI@tXI{hT6J_l!v?EW_B0^I=nB%fTkG7%RG<ynY%`J~@-MeE;Pl
z2<_V{79KbI$+lEBqCQvyS=y5_osVN*mdslPE2+o@`<q0@9;cwII~O;ZH(Vy1aJ?Ak
z>MtG-RAZW=b%q*A$GZZhvGx2f+!zb^Fl)#|2%zN(P&MqYkqRpZ5+l$%HumSG9ifW}
zf1MB+_Vo^nf}~JiVS(9e`{8d#w=98yuCmN-)>PK=5-nFH2_I=#7#y#syAW+^qqxP|
z0QL&>PQ}CQOgHFq5)7r)h~Nla!YF-&NFcG}tvHT|-_Z<9KgN&;*P$dPn&LYpr-!Yu
zoTHAzL<wh$;9b2`Kl5BZJ9MIg!(qXVtdwNdxDLH`s{%UW%J?x4l`<p=o}n>2b!0~=
zptkDF^AJ#ggfARG2O<^>YlAjx>H-A;VRW&53In7vrzCP`P7*~mSbV6c#d+Rq5uh#+
zxz%Y#OLZ7qJj5Uf*ZfMGU=d|cBop-1;u1F0J)mW%Ubq?Ca&w?80{_<9bh#H=&aWk4
z`pk#HJwQq6=)^r8iFJ7@LZ|#9CX?_A67gP%hpy|VR_mqO*kmV!7wv~ZrErMREeXn4
zq6()y-(=xzAs2enMjW4@7^CVS`uRE6--Zs|VN59n#Nse+1xTOaP~RFnaigy&UVxw^
zydW#?g+{neq*&ui9Gsb4jRf9AH<nyRc2(HApf{DtY7cDidQ15%5z@>}<T>8g84jVK
z9X`!cM}#v{dP{**sK4nUSUM(;kd_)$Hn};hfkitK@EjajAmoD-_*#+P!)Qc5_T7zY
z^NPXDl=hW)-9yTlJF2##L`i(ba+Q|(g6sw%I#E$`{H(CJ@axo%V#WlyhJ^FUK?p&1
z&l2D`=1E&Bx~+>k3%s>o!|vDQXM4vnRV!3A^@1c7eoIy@#xiW`raJuy$-z<*c?u>P
zn(v*swe}lbSk>CkkRf@t>@f%7p<`5T4b%ZFi5x}~E1^JM<Fg3S>0`7dGx@H2l3)zE
zBaSK@kJT}KQBG3o%TFSd`(tL^rrB`x3i=ZF00R_&G)Tk&q2n?6d1k=p5P3|6q<a-U
zbc-S<X;vNZ&RkO#9F%#%?@V;_s~eVS1MMYlntXdX6J!`#b9al*EgNmL7=*^~D1a(i
zvUnJFiw+)UdV<Cz-suF)pshB&Bzcsfu)_=IA>Mm-BfN`ujb2K5vQvKvq=#)D4}5e&
zMDemGATw)8vQ5}k$N_XS;X|&}HjPx=T7Ggvt6-RN@*tKs;WidmsXYUQPsW3k)Lb@j
zF}f<$s<CqKZ`9J=Idy@vi{`1SSZ5el>IGwUb2^mWag>sDze6j$R&FZLC=3(EBO_42
z1c+X?Q>a$7<n6mGd+xTE)WmS4ZGMF&1g<@HS+L{2=~GbisjF$=oDoNMTeHY3aU%El
zc*S8E;>h(yVFxwEhTF<At|SL34uB^dg~EqIMeSy9EH`<cSZmACL7<{goAs=YSVq1^
zQFsCvhV^jvW{6O@qXD0%5bHc$4fH@9fdoi*v6e2X6}n`cVMoZfs<!I3R-=v&oa|Ln
zPeZ#omTAFv>Rmo9KP%T2ciwF%F~b%0dKIjKpLU58nVf3rY*d!@6~RS(1SiG8KEtD>
z+xFz%Sg3HuZ*i@%qj-LVMdhcaaC(m6awC)yAqdG$%!DrVV-H`p?5x(Jbe>DXyM%Zz
z66eVt7g9gaQ?)5jd79qDBNb+Sf75h>pxCTLm80Xu*3N&WlVSFP@l$UYu{_6(vyHoW
zUkefd`v&8tFPd(@GBX0}ncmLPCw~XwoIL8H78Itqox^jAn?%r8woT%*i_PDo(b@fT
z2RJ4F#Hw-<67aAI`_4-Ii^h9&ghmy0-&C&lk;PyOUel5Fxi~{u1wFGn1e0FM$Ofvw
zs=$D4)Axb6d)=S8V9MEOY{c$eas}Y$Xygy=gBx6f2220~8OW_?9#~`(KBcS*WBWM-
zy|lGq&qqChunk9zfJ#LWxaCU~p}3ec(_NCW-n^0ockD=&h!2+KG8rir;$f-WX|ihB
zf(mL%cW6{_EH(t2dG1??(i~3+0B>5CBMXNQ#Q&y<)HT0m-*Va}PYS3z(9xw=uDWVE
zcEf^205EoDNSfKVdOAYuI%|Du({6W%3q!RdD$f(7j}Tr~^2XXz;I8m}`T??ywI`1O
zmQY#48=}rU*)_nR?gD!@A=<%75wq-hIG0ds#zPVM0<WydDoLxn)GN44MNig(nTWYA
zug$_aFUo&VVr_%OLOrtfr=k$z7Anpx2nV~6Wcw{d5MAf}<;bQh+nr8#77dgipZM-X
z@rELz<Z9h+#S+_&b559JpK;VsXUN-1dF852RPJN(TZR2rnqM>s5Q!f+S67|>@`GBB
zFX%>>j_V1Pg7f>z)2(BBsWb9~I2=S5%_9f}Mx0>ya&dii|N5lAT?5+wkMYs}xu*Ts
z_=uT><$t^z&i|D9IsaEuf34;}?`9lz=ZV_OoPqSUp!?x?_Q<0!Wz3Cd+JvxF2VnyR
zF%UpDAc=MF|HjEdTLdghuu3`-LY<HOIotKVy*On@QW6t-Y4l(F)ReF@-!qfpCw-ms
zlK0b_L9<%6;{CjkuF|V%V`h#_Oi5;m8n@zy&iZ`6+|vL#a-tH+6UAuUoDT9*+^bOM
z_np|ejv194pYcW`Wr;Ux^2z{R6ZGLF&xdPLL)Ji3&Kow<r~u#o{ZMeb!hJ8TkQXfl
z%iS8qEGu=}%>OUt28_W>oQ4Qb2{AEL;u%8|ojrBCLNRA_6sA23!Hc_lv*}{Sfbc|f
z{5o1#oy}D-F}tkNr0`p>gvHQvb|T2}h6^>v`c1vNiS(+B>&80BzFf^tVlBa_nf|Kj
zCQekHOQwaD=5YDlnVy%xV->hi4c+VIGO?wJIQ(=yv5lHba^fV-<%sv>XP!6dw4%3q
zL6><TBAhey#cl1@BMB@|=H?K1SSgF_yFa>)oxYd`MP?nHo7bPP31s1cLGnmMyLLu3
zEK`HW^eNe`DMT5u+h!e2wVE9%r8-nR?34wIh?9v0%@OY<49R?|%%+yn{`2niq|QQ8
zQMIJTKEBDe)tW{eM&vH@@sf(-5;oBpO_4+h>wEwNaCf%T_t{vMZS2&cpYF-O_U9C}
zpD4;Q3cz?I#LQ}@djH1EIVV~~_5^Ts@JE`vR-9z5naE$Ou#8Z_bJmGfw#{o%vq_wA
zMl^qEYE_ywtwM#39wFQ;dYjA0`^r1yu{95y`h~6}^NGWw0&r`Fc#u+ZWjoD!IZ|kW
z!=~no0eTnR07P@*Pfeg-ZFqIUojmQK-uBEMM=+*3&VI~;RMLPC`ayL;+N4bDbX#Rr
zS@;*A+0laIUY;SiIEKd9*ex#_fCnS2W{&Yp+_Qz5V$nQ__DSh3(U>ra^1T7i4=yur
zLFTySV)hz^!{C0$ns5uSkBaonf-wn-H&W9ur|-p+!s^&H)n6a{%BJ2gpM03G)1d5z
zWa}EJq)Rsf(IfBOZaiizabZ)YA#w<FSr&*{_mfAl9|c8P*@!^c0uQ#?V_{EoM+uJ-
zT+wz136LfZjV@?dnQ^wfPMU3AFU^c@wjjjB(^xh8rLDJz#~o10XD16hgLE6EgkD1c
zE9KRZMiA4>D6*;oDoH;dc0l!qog7a4N465jx-^~d6RN*wa;q8NmUu(q45$P4_}(B|
zOP6qCX0}2K3CgkT5|@4lH;wDkj}6vZkS1GjVwHYEexB9sNR1ee-?;~hPvak>7ABU<
zBjACQsgk|j_AcyV|73LC>f8iNsl-LYTc-;ie=<&FQI;vA^!l($dWnsJNUQBZBnDpd
zcW7Ce_e3lHxLU2UN<>VTQ9JdFu(0*RkyTNR5*9PxNw5HG3Jeei(?2jC>aiL|C1NIy
zHK?TP2!yC?B}(wB+G^bKYq3gLU0gouFjG)1pMLz<VWaaIhTO6#nr4S)@1XBQ{~Rs%
z^rgcQq%{CMqseM*C7jY){#aK{dxS%{%+lCgHT;Dy3V}?S=M`kAWIFiPEK}`f+{5`E
zTyX@2XohJqM4S%G2ttoHB$e#y8c05Lyw1v)o9t+7M6fi8yTd{tES8r`1I(cV;R2kt
z)Ujf6s=H+?3l~v}Rrb=*8Y_J3Y26IEVO97+tjOZjJ<@@&@Uqn<?8nzBbDqC$LY{3P
z)OT6R<yxGZiv-I`sizCjntq|zYVT#t#_a04lx930EGl4p9vRID552`ErM}TF+7G@<
zY{Z#DqDsJ~;)#tv5L?HHi<NaJUCft@bI`%lp>-vjVw{b5Bnonw)MLwZe?0`{gv){j
zA0s+-oU-}AoekOdu^=K20~v4sZ4a~2n8zWOTG8K34uaaxj+#r=z;^bU7YE(STcD%r
zKh9Xfv`9~*=4Z>ru>$)8kPw(qN;dZ=OLI9lazOKUspuFiLa4sFj=Zsb`AWx6Ol;ld
zk#fU~j(|N<dZj_{(}(^wTuLaR=i!}WeDI`AW0ZZ0L9@)qGx_rEdxHd%Wo?q+7YX$l
zYaE4-(he(G+862!L4a3219{{R$tU3lCrHl{#p=+@JQg`Q?aDbbpUP{eIELg3InlNs
zCjJ>1IcF6!Hk?BJAuk#^0e7~RRp9m+Zxg-@xl~p0GXtd(9#-K5q0c9C1$mbP!X&eJ
zSXe$9n=q!TZGU5hyfYueCat*pW|^}|TXvB~lgHG<uUGf*XAG${Vf(+B)kg=)Hbif@
z8va~FWr_6)+y&;5Ywkz!g>U^FK_|1!3-J0Esfl);ALDwW-vx<^t4G*%(#abglWd1r
zflLtgBeM?o7>*TpS7vpK3gcm6UPYzedQZGRd{eD<wUL^7q&{)YiqpD)#jWchYvz<W
z;bkge+azLrU2+A48XciJME)N$dDWe&+(U}ge>L8jBHrG>&cmirwtvN8uz@q`Wb>S}
z$gd#@(G&yixEC?S_9GxZoaUzqiAp|Yq%XzrIblJ9Mhkmml%(RhcfL845_q6LjW<OM
zsYj8&x11wsAN9z3<&4CG9@HhSF=$g9UyFvrWFAS{RKd8?TgI1hkz=L6_hV)`&rxo=
z$urIE(0D#UukqF69ED0>ySQx2yh$?2k;Pq$<1?1J0$H%?Drcb*O{MHTKw3R(qJ2C4
z;w*yvbKa+!vS7>~%g?f@(bJzI2hhiFqq%95nMK9yAUS*Qo|%YW<^C2!%d@xs$j6>v
zvmM<4J_yJS)YhCJh6FBl)n;WE4I)CZf<-Q?BQTT3XpG9I!RJptLpSZRR^ic#JLDJ{
z#W%zZm22&p#6_q=o-i+Z8Ba&VU{X%ICw1D2i<;%<*`d(ufS<S_VJE)eu|)Cp3O)RE
z=(c$cVvuOyz%n+pN1molBm{GzdF?E%V{TdJyKTNAEVA6XUV|TPt2@{7?s7!_xw7EM
z#d`4M?VFFafKcbPYAF~nt50NBjJC|XWI7{M+N8`<-0xS@ytXyT*rR&`@w(>>=Xk8z
z0B_{kCfA3jxRuehGzt8A@Ky4r2|;mrL&E8y!O4YNhkK9<9C83=C>2G)q%oX3j3fq+
z9!*arHV7;a2PsdKrZi2rEC=Ymsgc_IEIgxx<0|y<y<UMw_PoTHR2ozl4&6wm$rwqA
zrP$sD3s@6jLk-Gbt`%3F`e8x=yogfTQIzR~96<a6wK4+szKIrB!hvhz82p{kvcRYD
z^VP=MLCK%`!I5S0jdNcjkEMn;UJ8UOVL_8bkTXvEkc{lWkM9V`DL1N9h-uWlU(27U
zw;paIsN@r)com0^2cB(txl?cMJ9^TWiDgv#&sOoj6>TO~#{XHx%lV&*Hs}9J(Qeg}
zb>3z}`g5gzf2x@JFaJpbpqZTXRZtt7+`9VJ$et7juJphwEGGenGTFNBo%%g~E7o4A
zSdmIwn@YL~0x0(OP0wF~pPaH#G7A6Iy0u#(IXpU_zT(Hys86N)IJ-OATE|sgx96MU
zeqiT2)H9MSh&1Tw*v`H29FP9)2ROT*OSDNw5{~+I6+Qa3OZT9-9Y57uJE=z^(^Jk<
z5M?g8yF7X%UG(RK>D^Di{Vz}|r=h4_TB+B-QF*yp4cmmfsW(M?$9bo1%%JsP?`!%$
z+9(4wWfOHR^O)pl!d2~@^~zZLHfyrR>C8N8UWl?=w%MO1@5V@7NBQ-vU2;%v(!L~}
zp<PkRiK;dKmhDA>+?17U>y)}Tg*nNrbE`H_lLTTewB+?-7zcHlvZMjqM=xcot~Pmv
zR8>Th5Ivj`^VM}_8$a21BVN{ZJ<ZqYbBI`;>$_EA@};Xjybv#`Q5sHIHtCN3*Z1uW
z8Vq2(g!fY)-$j8rPnhOw1g)KaKOR)^qYI3kL>AV{u2(uQ>xK<e>`Mpl-;o^zdgA6S
zv#+e4YMdLB&2_P_e0MF8^;vScxrYzu`$ul_yZ7$Z7g)MooQIm&Q;Wc=DJE$<Q+(H(
zMNy1`_Il30lg;cb1x55=hR*%d_D>FHHYHI7bWLFEi-!=Zjg~}EhMA>Qx-?fXg>>X}
z4x@6vj<RL~Pxuft(Myo7=FDsv1Qq;4a^PrtAQ@sAlNsX*3`FICVH7pd(=|*PNa`V~
z45WRGFiH&oyyM6<FiU_HFwUqSI7BMrbZ<8!qBJutD2fnq<<Wb)DFh~YiZZw%bTEKe
zN4ydzC=8GRD~qaBhd;1`Sz{(5C9gMN_%z44D?;As5bBQw=zb4ZtYj=L&o%x&Y3v+3
zdd%^MSQ12~TwyX0*B^U-PRQXHe&8aR^tTfxecB}>%5^8wBnk(LRwVYmGD|5IZrsHW
zIweiDl01y?#@lj1b5O)gX3Vw;CgH=Xe-HHAUDgA}^4Q5hMAnGgKV?Ub`g3iiA?VYg
zRhVR8;#&Y_%2hgU9xHYV8X^9u$RY@cA(`7FeCRy=Z4Etwn=Ch7f*=6fY$p{X=e$vh
z+VSdGsOpj%b+~jf8S^~>ydDHa5~+&N)WvTA*@*6YZtxK;CJYmfdoTSdvhM43$*2{(
zRy5gYJl=cm+`cRVHMP_(ZQjjy+o7;<4$usi4k5v@2(INgRG0^VLFTw0;C9@w*x^2x
zMr`pMvXH?Bog%&X*>$*PP(cjvjSPOs8M8nfh*f;lWc%GiZZ@0Y6!@vWu~-dawCnEP
z^C;O2WpTd7fCDYi8gvIXV-1G5<Y6gX{>ug6wvlN=W;<&`df-}H6CfVUPX{Y#X<LQO
zj=A}9qrA(uJH?Ld`2O<&@Aq(YEqiP)1$TCJU+~M*gY%cKKQ_a#YHXxXmtB~ny_$j<
zm4^u2w=d|utRK*K{1$;>P}I&q(67Ux7!3j7C!SQbEJt`BhAKw5Zv&QIk@2qlV8;i%
zx!f?!8hKYW$EX?5wgxWrJxc!TtB67QN7Pe-%sQMJvk8za=>sYd17>++fw%uq^cVVZ
z{H!6qEqum1qmS_jB;}iNP|6_Zy3q_8xnzNl{a)Nvd*l!zw&@p6QY)~W<oj5It4Gig
zpc4=?$`pf3(RnQ+MhGPlnh4URsAtcIiw1EL&UZU4iE>XUR4nxjIZQ;Z7z@pM-62A2
zDqp4w99NC(6?M@v9HL1)fnD<WHXen97ahzD?2@(bfDZtlzwh$~A1x9YDY?|Zs#Og3
zO_k8@UF85*;l|pwA9c2VwQDAN-O&^`zHX*7@gC!(snEU&l~%Ds!smkIxku@OB;{D;
zq;Qz<A~vi`bp!wANFt=Y6F}^MI79P1Eo489b{2N^aZ7ZR1^Na)Ie+CgNy^J_@M&!t
zHMOCXS^pr0r=SFOK5$D6raYToeou!g+&E`)we;=Ugw&OBj-BcNax~8uoJR<Z6)>TN
zk}hrX^o33OK#a@A2qbb+qp?w&BT>)@aZqHFnd*WVt+Ebsr*vb1;zkL|l!vW#fkk9;
zsiTcY$xN!(A?*NUq3&&|?z}cwOFkB2-$;&*sBsPWOb~xI>tH}_DXkb<R`DkA10;jz
z3MP#Ar#=drBR^pw^a8&C3s81?gsf^Eol;@45YZBv(8&mcZUlFZ?rV(vn9c8Vj<(yf
z7m<H%dgVbQ;P8>!+Gs3UrGMI#KthZNs1Wk6HXcq|U@?SE+UUleRE2O{ELvgYTLz#B
zVW#$tx8R3&aXrs?#2mX3ebG3Wa*CME&o9wkA_f|t+e@v(2(cXSn{I>1ycv^iV&pg8
zwFS5Fhsde>$Y+C9gL?q%1Ea(lYuf55MAJv-(}C)L9jo;P{uWAAjAYZN@5AFtu0;u`
z2af=~St4Xy&Oe*LVORl7_15(28QG^c!Ps$R#O!JgWg&joup8%4D1f~=>8raI%Reue
z?7!zgyXUZs32G!)q#zJ50E(sFsuuPl=$S9f4wA$=5=7P|2GJjMd$r@=pb*SJr*i}^
zr#5O-5xIuj&PY%V^*VwrQ|7<A_F0cEoTe+ZEi6;)cta>E*<b0x_P2E40pN5G1>^{{
zGXu`l*cV$^F+Tv;j2e*+*loUGz#)+=6nJ)pv;^zU3%x<yg8-<<0ur-1t&P6lQs~=J
z8WKjBw#3ohrYn^dR||#{vOPEp`aVaqhB@6rBW^P|A2>ABn3n|~t-jpZ7I?;JD<7ID
zym8ymgq;bqgXuj^zU4Fr)_{_n<b=Hgm#bOFH0{Q9p*{IA*H{+}-U{Bs`KpFTg0QnP
zlK7v>X3LV0k!Pkcru_RmT{PTI78oW;_$z`7g^#H$fRRsq*YM8$9))*!Y}DqJd#uB%
zvLlEsAQPWi9lv_c;{%6@=wWPcb2PJh^UBMr0=qesctqD?r+(+6jfcGv!kK%}74D;n
z{!Z*V&wjGV0LVS<a*hMpy03Q);HsDxWhkMIu~TI1kE`ybT7UO(mfD<wvWC#iDx(L1
z-?5Yp2j@g)=^7n^6bZSw>HaPTK$vXEMfB?ES>9^5HZ&s-xvTTsP99V%wkr9@KX_W$
zyx9%TVk-6?dUBHM6>?}#1kUvS@qJUggUD|Gp^IyXgYAOQU$YAXEKz33N`)LMEeuja
zHb-)3JfoAHT!E>We>CwcF{cTWAvkxgu0Pz4+MNFGSqJ+C0Ho5!FQ$yuj{u0u>QoGb
zb;LU{-ol+*tU0^n**E|WzW*CUGqO<<OxeEkiLwW($N|M0Zm-3Iyf`oJ-A~5O74zYn
zqanTbx7IdRyC1hWi#RzG(Wg5cPvxWfkOWQe)q2NWy<ALJkW?qhd@}Jnz}N1IN`wcT
zN+bpTf-A(h1V6@v#yNe4Bz}3(`KAGg=6gmbglPUGWwl(!zI#<8UY^A=%&dJa)V2fm
z8kV-O{`!RznTqDfr1vi@MLMcs1nrJMnaxgz);eb0<IL=#2e;)UG-B+4Y-2FMOW)A^
za$KN_1deuvI_aN3S)pJ^S_sBuvk{Cl1>UdD#zf8NQ4IP=eG0)FZ$vd#j~97^a^oZi
zELl$t+h3#P<BiTBaUn(iajsrNxNu*GD_V+}IxHjc?O#)+iBoJao0N!UvwGX3KdVxo
zMKxv|h=;$ySA~H^Jsf9V=Yb7k%iN3=67m-zAz_)h)&37o&bbUeh8i8G%Dp`9ZDv}S
zvF9}CMt_xsh<kvMBPxqgf1)l?mW%Pecm_qW+Bnj?$@t=s>yf|aiwrEISeJIaprt3a
z3(<W{KIIG2vOdI)42zoD0Adt{0c`Ody=hsDUHBOL3`h0J!_6MqYvJ@bI8Kxg03?gI
z!L-6MFP5`op7v)Bd-Ou~TEFuJpm$X=?Nvc|LAB1~m(-K6%aP|VVQxBYL4k85E=a`k
z(HXDq{`BsYUpT$10ll@hYN$kE8YvUfm@P5XXLMwiAI^DUW)-ZdywexBDIH`3k%GF)
z@rI+%Rr{S6R{FGl36oO902hA!F56~TVa_OEOcrOq6z9J!f3L%orA2*kE081Frhd-<
z8OJ>1b4E1#p#mWvPBMwRSASbbQ4HyOWN<(045~xom~>VWf#~m}klfyj+rKX(*f?P=
zwS*HrKHOoSD7R9+n*`y47(56>;jj)uDZG39xjoFkf6zCwa*g}XTg(6W%#3XR!z(c|
z{HM^&$nd{1npd>8?6$bjeCN~=d^sNr%tVz+N_t*eMp%M(%V5p$76l8|U1}<6JCn9q
ze&_Ww{d4|!BA;-`dN~9P6!2OYJvGr=*ZUs4ODRoCMEP&`Mc+tD)yenfF+5Q^{?fD^
zzda>$)^X|Q@O)+*p`TSFcSk1XB=by-zrT`L_RY-x!iM*EB|#~oVb*Zy=aJ0xbPm?%
z`O<vf21%tleezDB&@xNT+RG))MSk%R-??`Uz}6(BP+O*#nhmtev%fTGB)6+J*Ryq;
z*V*I@v~Amd4jE}`PQwyWSB#JAP&|q5*<FhAstE6}eJeB7ux_w_%h6xrdr4NEG%fkc
z-^huc$}9|00E9EE91?MACsq-96}NX`O6<_EeU{!nG&jTVG5HTGJFyy*(oUt2e+IJ9
z`c;3mZ|d!=!-v;t&HT9jv?C9I%!E3y1ygtac^nH`=FMSDuxhq6*I8tlnLHMwr{rwb
zKJ&ZFaXiA9%w$sQ)7L<Sj;2$_ktxkFKLD_-hkq2`^t?DIHj~Wr|1xOZ$E1bMlqJd2
z2K>H|>yHLu4Ll*8izPElZGFR5;A8E||2-k%)E`oec5B{aGl4H-mb<F1CBx<g?kE8m
zJof%m!B)~|8+OTEIgRDK-y9#~8Ilr21)pFGDv?7Jk)DD|*$hpG<Zir^@wq$4bT;GP
zL!7_)-Oy|GR`A}0RaITJ*2nn(Sausy(modcc~*3c;^zz|!S^qTpc0!mRY*WUwg_x?
z&q8YV_8+;lb&e<mQe+8xC<?c$)_x2X(_D@AZ$p}fZFj9iy}PP9tc7v3bq}FH_Cm{a
zO|h}`kbHMtZsWAocdee04}gn-pfNAh05u~^CI!VAA4}f_g_$R!5!xN%YhKwZECff3
zNu%YPG(vY}T`kzRE&sVK1pe^iZhu}2^-)A>T^KJ$e<0OVrAcPHrPUn%Drx}kkDdD}
zLjkG=Bn>iO<0MbMX+R4L`b0E4Z$PzO9k7!CFC{G}D7q7&g&K!wejh}X&^2m7<>%qd
zaxnlkD22PemOGZXLuJLZm^?{+uR4XkzgIv`iG;lRN@Wk1?26^AeEs8wJ@Ponw<Tf6
zTPfL9TYJVitAH!ad`~}suItUJh<!PF7oS7rq$QtM+=lW%y9q{W8Vhttv^jBT00`b6
zJ+vNZ9owQ+<eROt4lRIkXW*2WNh10kP5P>bxEM3cw{(w3!NTy>AWl>k)d7IWm61}k
zYAKvm0+qtJs=*Q(|Dx!YExH`0dV%b^1p{4}DN#^2vBJ8pHm%J)u_As65MWEkC)pig
z6>oaYD{}%dKqC<QG*i0}QT#)>BXJV#2wUO(I~QMAndQWE*FKAKFLcTok9PqTJ(3+-
zz^=bc!kEsLNW2<mfTz|j;va5%f;C{F)um@oMJ1fn<b~-TR!meuQ`A#=w#*-SyM-eZ
zbGxEkhT~aP1p$N4m~(I&PAqAYsv^ew0eLmAxriVoSY2L*Nxfr-@o?KEumh--GB)S2
zc$i0{CY;7Z$;F*PK&AH`3Z1lm^HvxNXeoBG2(gaPU2VkffK>b72Ls`J&;Y#AfRoIq
z0@t(M5<wP?Zvq2t8{2X;Zz&pT#+VEl7;}w(KYHi813flHW~ycP@Dfu?IcbGd!JAIs
zCbaN&5k*G&!%<59t^Of!rdWw$B9V|wrLuvtA=c$+csv7fzC~JYX=&<XYSehq=bOtz
z(hw~ErO{U@qe}INVC5p9OL)8qaa6hdzQO<(8hB4t<W$ozwJZr<7FYgyqTvpZ$7!Og
zs3Hb5y~7Y5O@JR``e!FO@P>#_@~mm;8<?_3CbJD&=~Rv+VjLadNycXVv`L!mf$wP0
zrSAg5uGqw-Vw$a<qBR80GoPXwv^j<YhXI9eZlWOH2M>eshMUCiv!09D%sR6k#)I<K
zKoWurZ%h*dc_Cp$JS@S`X!CkX<?%>J%io@n+Ie2|#=v~;Q)EUVF!Id#?(&TP%QbZp
z6UD?3Jbh1WNn0QiIb3K#({<$$b<R3U0-dB#aU>BozDRDC>^ZlLJ1qs_d>lKq=!h^C
zPXVkC|GBH9!|}zrc(lgEVhx2;DjD&}5`0R``Igtw6&M-pc}I@088aYVrZ$eeo5CqC
z4GF=dDnlO`malpC8%z-2Stn^zL3zT<Z1d-hqa*{wU$A?{kO2I5LF1s=DH~FXbRP8!
zsywH=4=!b93A}hN3_#Oh?I8H$%Z#kyQ|d`nl}Jk9kH)0p>ujy90D&wNL46)bySJW)
z`$eQP79av$Hg?3&#KfZ%iP49=)vSZU-}pU}ViAw|O*1<bio&!EOmcr((tA4Zek=ug
zC^NFaGua`%lEI5R*aSJ~BL;eZN*Dx?trXgH-0ReDf;qnnj(YpC;?z$9aPfxzsKKcq
zl$e6AgQ!YJ(|T<q+G=)4P?Z!Y45|XXD&Vh#Szr+cZUi*d|2I$dkV#;X2~}AOdkTPH
zmIWU=u;n<u79_4rk!GcsPcy|QNkVtZEkT0$x;#2~_v66CDj0Ii=0c;844l#}N$PH<
zv2N=}v*^Y652th>Q4!1M<4ZJrxGfz)ATexQb=uX)t+w07t;~ttQ{vTxZ&|2VYV^EU
zep@m4K??$6Bxm7f0=BL%AbgF>nHYk*2}0mxOhWqI*wmQz03}icjnt#%ZPFKqkme<R
zEVlZAB!GuIS{Ml&@ihlr(qe5Umke0Z(X=2Szk{m{5tc>E`&^N2nBAxog;aFOj*ZJ1
z&pv4w0mW2f@O~v}1a{7mV1m0>d!;M>rq#8<UqMI=%EgO%@AJw4SAH9oVS)f{Z(Jj5
zA--vRma-sGA`dH^1eq(ANZ%<ymgQe?mgV4i1%DhYnqTJv#<YC6N&eu`fpOYMl=pn$
zBchGfTvd!JeG47B?(b1pm^%ZI*Qke${g!wc4EY;^+Lmf?L?t0MSl4aQ$JGc$18k5m
z{uZthx$_TRE?e;F0&L0RM?|>(kif$&7o8iogb6_6?AJ}Xo}1*!x*IU3=DLHiP1tc+
z`o96l49SwO5}up|{Nvu+s6`aC&%xBID<?*}FTOkadg9@C?qfTN!Q4^e;n#(14_VR2
zFHckGx0ijpf4HF5ds=`W7=&8?{+{E;3g6Ye08eeJCP$ebRAqaS6*Q@eX0iyYj0)9~
zeYb$x1kOPqP2t+*A?^k)#qkphL@;{paRW7AssF_8KUkqD5ISLksfQ{&JPl&@!qEaM
z1(%XyUmCck#cKjcscCQa`N`#|Pq>1s6B4}zG<mtwEON4_O^$sybaQ(=^cPO9OTGZC
z9N1Yv0*qQne)|HT88ZnYWK`muM9CI{fGROI@$*I#asL|)PF(I2g${<;<ENofbq6CC
zKv5N=ovoSra=B@PrfyKoJbRY)=79^%uB_{^+oG4%6#h&CC@Q}CsM{8D@hAm|M(cQ@
zPx))odpk*C{TYh^qOg`r^rXwSs*VR|3HA%+WdlA+XzOf~iP-U2zJ~l1W0fpgTcXl3
zM7_4PuvROmVd7@OzO2Ull4DK_ZY6twdJ8L?PF>dPdhyd{eNt5y#)T(|;YwEB!fX?z
zHkgPH=$|9xxSv^uQ8u_z8<HcY>2)c2h|s548!>8yE5CW&sS8zzB0sP7jT#EXnwwVM
zP88<=oh(y+iBGw9$j2q=VCPWjrvN*E_p6(Z*^Z-9tT&TVR0A&nF}8%~Affv#3e_Qe
z2jTns3ykplIQP&P26b+!0aYnSM(<Cak7oU+Rszmf8B8CAlkb952jfLAH~$Ow=L<cp
zFpc0pdhq|-TK`{3nU(p!C1pm2|Fo1D8UA;gviers78`=^oBDk%lL7OgY`X6>nZQz!
zWwz^Q6D3-c$d(kzVq(S42mS~3_ZXa{VpA>#C=hm<p%aI>*=$Z>UjYU(%GTOnnk~_o
z*Jyg^LqE}@Vw;7l86#VF+sTn?_)6XNYqZ^nf|Q~Z=N3!!L_a+{z5&7p`mvZ3%y8Un
zE5ypy&CODE{6~Xa!^Gj`dgQ$Q9OxELO%Z(J2ggW1UMW*p2{H!RkUg|+*g1ImR!aEu
zbRk$#V|L%zSR@8%@#ed*lSU4BnxhQI7PCm;Am%JihPx93u3Cl4_}1%0&Sl<B*Dlf4
zi$pg>g|H(8fc4VZThYSeTbRWy`6d?r^;j6@ZVfu5D9h<bMB#d}dk{1UtbWwm;q#-A
ze!R6}sp6t!3CrN9-ugEwwR47+P_1qTi9Dk`q!uz4sdM9&E33+?(-4%Ljp7?fRj2l8
z$Gjzy=%_+Q>Sb#P$Un=n!Oyc2p>0SLuNHFuL<Wqe=e1LEZ3sd->c+4|v;8?gt>tV(
zIPy`(OsCouoB26o&P?5M$S@X@qb?rVFoj~8xS_$^dIG`$Vq*?t#>`wku@4KYS}&LI
zE>cNG27<`rbir3KHS6N67jtYovWx~l8w!;8K$&R*oMe)}%V&!7G-Q4Uj81V;U@v9W
zD}JEE3S||jKH{N5txQgk+c8HeqTU<1-9$M8$RW;ZFG)_?KxmYGGu~4UOlLI;-jKK!
zEJiM=WR+8RCzu(bNX$7V(~7rx)&8%-XBt$zpKYyGG)&AL*Zy!b#}6bh(LN@0!PkF{
zk0EbP_nC7>VnTQaQg6xdF}@dsvw=Ew?EANzlqEF*ncJIa!u0fB?{y@S6m1|G!kjk7
z3i+4&ptf<Urua^Q$WvmxDNbKOw%pSCdKqmv!Bl}E>yF|e<^E0d%8D;cw<*zL^zz{h
zr+`u>&R$Je1=zS_{GNpb_O}B*MD;#M9L7~v&l<*kD_F8gq62|E%y*zx+_1+wzd>gW
zGGqvamDi;6kk{pinEh|2GNu20gvbC36Y<tARai0*vI}?AU~NHSL11Tt&ZXSou${a(
zQ-}Dxz&C+54G~f1fI(Y>m7F+NNLf%FK~q3{HB-W^wp=a-)q=u#H}_i#`O^Y%x|r60
z-Bt*ozjKc;Jef<-AE3N;OWu!oJyk(HS#=7$6b5%;@GOa?4L3aV1BqgvV)nF4e=^2;
zn^FLg%gb)l31l+PSQgFbKtLfekv$U7SJ7MJ<wo8q_JtBKTk-P<zG*9BRdEE=snZeS
zt!b(|=%{Cqq=PA0`+hjN4>)4x-{kLZ^YNYy;Iw%wsz1#7dkU5k9QO-Glu*moh5iA#
zmMgGIks#!bSSep%rI(M3xTGAj%`_yf^;^W_(*8=NXGjd=R5WwA!P^{pWlO34Kw3Eo
z2*>Ury=D$T<><hyOyP3ypTX)pV>Z{dv*AW|^_WjOJ!`hmEZu7}^Ho1yWdjMF+rJnS
zeSx10(nJ|-@~$iX-d2!NM<no_J=SLcfyPgw<s5@5_~xsd{PT?!-MjKA=ZO3YyrOs|
zJ)__cGQ}T^URRBd-oX;I0?)Ux;2vQ#yuz;-sG}=()a1>+wcG0;26Tz3bm3}L!M=>j
zaICZRb!g$*$-{A!gTLWsdn$Ap-WM*O(#U(JV{&)hMX>37=bq8HCKIL8RY`69KB>eV
zcM+ET{>^^o7l;nZC(Y*MnTi+Z2g*o6rRoDg*rS#e*Y^JyH6J{tTu(39qrE+7LzsZ>
z%Kn7cYU{=T>XqfgyyKBJKteTkm(Y#wOOYP!T-WMaq%HhpR|TZ&4G1VI0P2d0xsvbt
zfWbZ>?=3k7?K;RvP#uFJ_WA{22sdp40-V!^gi@SQcacu%_pO;jcaLvy84C@#|3}6D
zZ%vGm<^NyI#>nuWo*3i5g1|taL@#D(<6`PWKrd!v=wd2jYHV*}%Et%g?BZl<Xba_$
zQ>rHGT+D&+=TrR|QJoeG1W3^CeY4hPW_gxun@5`xle)1jMg(As``1q!2&V0ckyV*5
zAxdkfzFWU<6&fT&$iV-*ox&WDXHL&-`5XO1UU5*B@2OT*Z<=q%**k%Mrb`;d10siU
zd@9r2?deP3CCCjkvWUjiBC*~q@AYL7&$nwXY>P57nc#YsQd(lvX#9=&E*srHdq_WZ
z`4vdk7>Uf$9E~G*XGpJg1gjU~4=T2`OB`*9N9^00AC_8pX*`0{>PP{Ktt6VZbN&cq
zB*tIGL%J_JxI_w4OR-N0==$AguhQqIBm9>fr=(KD%S>C)cOGa71jk!lJ>TBk-{fCT
zL1ZSOU>3mqu-Wh0{vK;|Vv@#KB+v-<DX*SSFBtqp0=%H9s<hZ;TVOG152hEtyhIx4
z<mD@c0q0l)3H)8t^F?V4Ns6vFOCcrnLqqMfq94BlhIwEnS}9MRi3Bp<s<K)}5qGYx
zwzHv|+$z5VC(5Y&zCVh}U?U-<0|&2iy(8EgEaZg1Qedkzu^SSFd(m1oD`qbmnO(lf
zoi+nJ2OgPNQp(cjN*6<qYdLz^P5&5@88hw6(?b$IS#aUwA^%zttkLzhnPM$g@|I%F
z&0-2sQ$?4??_1zh1y|=Z-C=T?&cs@U>{Hsb=i}UCTti>rP4Pb#WUl2BcZE&ic3~mh
zuf_QTZ>4yha}r|Vh5Zw)O^x>qZKZrISAHN4QNaP?W5fXOTC4_vgIfFeU|CXVQZ@y{
zd0N~qindpiEJ!dPO>m)Ms{*Rnd#a200MF}QJ4)1$p$ou!UGK3F_%Ejs4u)O?+k;C|
zmqkN;yJ;BmmNtbHTA{e&ygJ=2F*g^pRaiA5)M-VDXUsFq)iB2O9|zo5kg+&t{vG5N
zb4)U(5?KtlRCgy4HszOSD_FO^K^nCRu~-PQ#d)nd8;iJJM&Ax$S)*aMjB>f@M|3-_
z8881B{YoaUmDGMJ!0R<7V6^kcpX%!8{o4xkR-cW@GEke=6;XBd8emRS*AyA(73djG
z@5H!b2!9<)F`#lLVApcckAG2{i6JCdxcbqRUF0qWGlSmsMfFWzF(@c&s%dgb-=w-c
zXGr8cxM$v+WI;!qcrk+)#Bs$~JB3h%ByFc9q6-~o4gFhdCnI6_SAVzeEg*6;gVCOO
z-h|mRBoJGJ8D+bt#YG*@*wm-+D@UAyS=&*Zn&8w{v*oZ~p;U!9^J-O&VCFc)f<qb{
zls=A59MWKnLq_l&Z*p$}kr`=T{BV8LVwv*?)j!54T-HTiA=5#Yc=*=E2O__*tuJVP
zIffrF%WHYO9%HmVZciVDY0`B$fdAl?@Qj4N;~d)`?6|FG__8@dBi!1_y_rpuk2@T+
z)P+cUcD&ZOv<v0k4?7K_Y$3gb!&nm&qA3p>CAsijb7O>|+gl)$EZ~&0MmWBCva8=K
z)R<BN5F>|yQ<~$z53YOm%$WNh-TCVw!?yot`T9Ra>AxCQMn=Z}N!4Lw{7){Lk@0^8
zM(3*i^IX{w{&}tr*c7Hl5C{a2>NA3RWs{WVWQ{7E!)~1fP-z(siJcx3?8oX~@s<JA
zl@BshrNJh}3sc_p-46jeLW$OVH|{C3IxV@p(-q(JR((Y%xiw~Sjas73@#=w`8as1Y
z(kP%XpgF~=Ttn|iJ}=}PfZUQi@?khMYT1~xIX1R&e0meNZW1APO{Y0d`4V*VmzH7n
z4IP=q_1?Le&@3n+??sHxwF5_wlyyb8AEKtMQZWmLb}@sk1%F=qmaLpCVJJYMi9#8j
zI_@LK5|7?Tud(RavW?_`iGT?k=%%_$>*lTKbPt{8hN6?Fp5AXR&lGVwE)>k7iTn(%
zxYQL?60;rf3Iiuri$esvWZBmKQs#LhjJOKtsIC^)Mmh>rrr6GQcZj5Fkz=8H>7Of^
zt45+ss#LL8g!DXmmk{VnD5rzaHr>*DXH=o1oM@IF!sM!R>zZ_N38DA#Jrbv&quCHf
zkpBak{6{Nk0cySmSb@^qDE8DH^D04Vk1i?cSUCjC(aqHnD!!&d@`vk^spM2klhIpN
zE9eN#$4v|cAt@1Sl7U281?A}rw{e{0aI<yISxv}o-PSznp<<WaW+PJ!5sWArYv%d6
zHU$1+HK?0PC!K6o4ZupwPn=_odCN%=aFNiVqKGTY1=5~^<(@|+I@B;rQ4~8loZ@pC
zlO)t6I-RA4hA?k<l14YJF{Oq`$$1M*%L<Upwh8=TD_K*t7`qZcgaE)4Bc%jZrT-yA
z6QC+IyWa#{4`>H~HI<kvtS8Wo%vbG_e@=9D$S0TNGY5Lkv|U)j`51NuhCg#{5>zY<
zlymmXNn8<YrEUSUg{8#RMhJ7mYhVufAmOn&!<)Ni)fQI;0<<NUqH2uYelt6N=w+8>
z_X!fIh_#h;5JX~&l*g9=941-#G1!5>8wzm(_mU?9=YYaSs<7w8nCNQh!i&Tt$fg2L
zIcn976Z~Gdy-_e?Xbl64e=Lz}PW$8b1<42~(~o0p=x*xB6){R|xE_n*^Uj7a94P&#
zDBwKIms=j<!{)*r6Wp=*5%l>P26X2P^cY6h59GwEIwBUVl2ptPwlIcy@ZG`$WYC&7
z*tMD}Du1SjY5-YErLA_Q4HTAWU8{VD664|f?uhJSo*>XdObmLTy%He_gs(Wag6_!{
zr}Frg83HFKbPzaIo@IYX>%J>?QD(P&Tc+XwLC6LB^y&_nImZS1YHEk6zIunNzIkRV
z$>0P8q~AJm7#kE(b>sP#B4X&g!Z^(}tLpG%9iy?gwecbd(x_l>p^CP8u;m%H4SCpt
zBO2ezc5AKQJj%D3U~B%{se81_ntv;ytdH#eh0w7(C#%5pi1lxnvQJhyWyJCFqXwRQ
zHziKd)tQvA2Vg0g`-2%)_M{;1Ct=&t>K}DSMLd-=P-2rgtkS-4nydA@>X&`M!?usX
zu@j3VMg2)Rv|r3OwgB;u*l_d>4W$7Fj_DkGZA+dQ$PXZLhCM@Gy0mh1bcP!CnOTe%
z6?lLrpF_74-RiYI^m_m8#I2w7Pbz!=ES@TZ-bc6#;8LeGo(C|Qy_IRejBS_Q_yL}T
zRNxL6o!V)*oSx`uhktuRN3k;_7I@TWs2%4A;7KmzuJ;sA1w$DQbo$8eIdJ10-95_v
z)O+A!1g#7%q4X|;K|x+(b~Ddp?M@4afszTjII`Q~AjC2OO;b}>wBFX*9Mdv+u4zKp
zFUaCAQSgdOG$BtX?42Hk^6y8(J)eqiUFT#1hqJj;x`2*j=j7&@HZN2NBV;&mLIA@x
zBQouI^Xkp|2F~;wgLFUtA7%T$5k*F3HunE{XJGtKMv;;6e+4O)YHT=dv7!8nL)))a
z854?#jow2UyXZI~v#Yrf&W!;}Gti_JrP3kl-kaB-;C}@o5Qus#YAb#iCk8@)%X7X3
z@)IQ_qgc*=^=`xrwP5|=B05!H_M>Gxzp-Iis5XmU$d+&PW9Y`-kOdh*8ObT$FhfDv
z8*S$Ahp3TeG`1Wx9I@eqdX)65#{cu4(zOGLrYLdaJV>156lm71c+ZKDKX!hkcH#vr
z2~w8WFeTKyzx86LOMkmS&tz{>hK~Co25A$$W&689dnN4+L|VxkjGz&%T$nE35y5a|
zF-X*WP<2m^2t>#^XCKs*_p1^o8MDM;D7av=V3QNZVd97*v!|CA-#6`d`!2`{2a0SV
zRKe&&M|ilXQLbU}NdqFkw7jubJEjsMsD~{)3M}QA6H*d;;-_1vwQB~IYNcHzb>bRI
zGI=6KyHK@^hw4s2t#%bUtzgQyi)N~87#v`*{ulXR*db7J7#3f>VHB%kUW~6uJ2VT*
zrp{Sqj~cpuV0vE~IcKrt#gh0S!57FP3e?nYplCcxwhq@?77$VB*<)T?Bnq-TuK7Y!
z9B@c7iAy{E6MTSE3+hHV7)I>w1*>f0l-7<*&g_szN`?2d)hA&5HVVl{AN?J&DrIrD
zu(axgtGZwPh&&duEQSk67zf(;lx#kF1p@>N35myoii#nGDYG7{(`q0XSY})e71t-|
zkirYIx8=;6hDMw=PF@M<egu(JP9j|m@aavH5zH8}f?*wY88h$)^G=w(z@i@^oH&H|
z{Ky_x5T_gGo1u>`>*J@*;_<{!B0-zc;Y8Vx@<2qB@>*#x$IR7}6KWUz2wx0F+|kGn
zj**-%UwTDeepZ_RlFW;BpG12`n>YVFK`NBwYlWK_)*gM<n64FSBOQm3x4DtATgNI*
zkSf86I<;D9wck;fCzU{fC}}=DmeK|{nIz!m$yycOBj7N3{;vlf$N(YfF$NLYD2Oy5
zS(?{%egSw>X*H9<9@K22OAs39@idqI8Fexly1IlGhsp}qmMXroot#1<bus|D`rcp2
zr1!-dDi+M!xAWnTHN4xe;3`*sfRr$fgK1Qs3b)`8Ks@EsN70r}ziKUi@X-!EBwSOP
zb>kqojDS=`6W#8AR3AZWkHM!cv7t_TY#<QFP$mCE-FVZWn=FoNt1Y-zw{M7+K5H49
zAZ%fgEzZCmyf9$UXk{~pzWqCa2ttUne6S#_UL39LYD15M1Ta1&Mob?2`LzhfjMjMp
zzYuwR7Z+AoVr{W5(S)BLtqGrnU<FXoyq(Om*(C6}Vp9;Eg_XnjlEI2e({}r!+N9vS
z>3o_c#vcv8$h9%Y8R~&T`tz~ZI>>S$uuM1<L6I#T9en0*(ULKD+U1v02D9HbM#hZ&
zifpkwL9!@a{WZA0-HZTlz@sGirv`S%!Msb^;Wc7zM!cm$qiODrU)$&?1D}`Xb-&=t
zF=4?#g!cTxpewWH#FL{+%&RV{R}n)(ITcmi%f)BTbrx0Iki7anHUj$!A1qPas$9)C
z`BzMo45H5(PgUyzH>n>;OegRidi?;UsK5afm91)}ICSpJx%yF+e~S|XKEi0JB@JmF
z1=NMbJ;w_;JoQhAyhm2f9-)|0-Oq5cH55_<#k=lwuN7ms;%1{}z><!p&)d0h(H2UO
zYrQH^Qyc(W%${DFumFS>?Q)o9=b3mcBX=iVJp+(T9py#uY~c9Ii7tn42}30F-n|Db
zSGsW$^`6C{XLKbT#<p1Q$Q5LK?9QdO(-L+ILKnb26fy;^y?osq4YPVVJJhAP>@X9y
zuzC{rezW|3edGH6{tn(<q~n9Hah*rlZ9>C6Dn-*>0$ws7BXCvS1zuRs<7SG?V@kRQ
zdviq=px~#9AY&LBj=#bP{Q5jHfy<bQ_A(vGE@bxxES3Sf;sp$SjCc6(0D!3_*v<N3
zW|%9le!cb~tHFoL*x&Co;wqIzhu+?K5zt1%q{@ONRo|J$9=m1pa`AjL<y?YeQDab*
zk=;X-9M-FUY?jdG>t4<@wWID#P0r!H3R$>wmD_ZyxjR_5)9h7>)}A3<#4UH18=Ku4
zY~v=H=B-RGUK%;ned_Hxk2=ADIZ%`6FFr@3fA<y_|4ki4gIncS-h%@H5;k9N9bb~o
z-)-<ddNhK}Ie&<H8U40)b?^=H@G;v4Ia_6i6K0BS4L(2IX#j}sINOk&7xJwBVv|5~
z_GRp-qi&%=n-M!{1$8dc*R#yWkZDS6E!@*1e9Mcv1YpFLClCZdnb_a?{}?-`Ho>}V
zS*LB=&aAX;+qP}nwr$(CZQGSLD>F}ZpJ(sB*xyC}hV{%fW6beJgqAaGw+%^P5<?ic
z1k7U?gt;|M?wn}f;2C~NAL7<OT$}&H$T0jx=>GTGWc&w4hVj2+WHh#Hw?&cuUYpE+
zkl+Xyt#>O%c-LbCW{4u18uoqSg9NNf$A;2{WW{4~zJwm;yejFe6NxQaG>ig5K+Ku1
zYHOz|lvHN)G%)PZ7USN#IJASWjz;RxwSA_h^JW5iI(zRdR-R7}FY_Ed?R&cBv)HGI
zQ^_H_c(vWHcP>8AAqF}b!;c!p>kmD>4p@Ahq~dzNE1J8a2xbPw`OYNJk|ic<`SjfJ
zyPt;s7O+i*vfdHF7SgOt3AXIt?3`JyUv0b=aztdJ<y@jUSWnHg^3|lSiqP%jPzN%W
zi1;R&3S`ss&6;n-yy{T5UaA%T{Uokeo+_aN=_C=a4=ZkVs(gAsK8^sbZ`_KDdl2di
zEhKzUii@;x4xSpBOMGrco7`}MMl&(waXD8eOi$G|BvlTqT`XpGi_8!QGIaD~R4pm9
z8c4=CjXt@cA&EaX&g|hg-;$L5Vl7w>@lIvJ+)Px@LTW7d<ai2&zdLq()Nnt?T=9n!
zTDVF>-ag>DA}cTR;@yvMyHE#_LOl*zgt{y)L!@>9uN}%aMVC**rB3o)+u~!-Q5?o=
zB(e_L`}y&Ny`u+D4BJ3g>N#YI*fwy14U3+pR!8WW_gthRie=T)%gSmL#tb*&mWb@{
zJMO>9M0l<?E_=4C3*&K+z4AV)Oolxez)b2~tJ&7?EexzI=B`idZz?Gu6Wz5LgWff(
z8hpR}=hMM8Y)@#7u*)R+akndvKGt1_u=d%BOuvjiz9{edD>ZE)P%igOdVF9q><v{Z
z92a!y%bwx@%EciFScj2h*I$OTnYsJl$BE4_20b|F#)3nG@d)OE8l#Ernu=lWW|7^q
zCyDHGe<PX9pLl%QiSySz#++?rP$^&~D`fByLFL9Jz^%Rxl}~9T@|R2_?)YVsu#s$4
zW;`g&FqjY(PnU<&V%KdA71*p_w({a;ep?dml0pyOZvl{<P^Q=GssYSwgU^K-e<Ki`
zwFok;CS9bHUPW4jqvX52L(6}a>zXlBR2k5v;r)uFRDj*FnD`*1y2U7R?Z}x^cP78k
zy?!-1PalS_=nFGbC8ftR2?^8IdyT<ZUAgaYrCAV#u2I{e{2~veC*cz%nM>nT(Y0=~
zN-FGr+FT;&^WR(o#?tWF-fP9pQFL$QYn?%3_$=(jJU&p567Y3cW1k!EeRVsOUwPG2
zb!qtQsR;dimd7RO{@K%_Pw2s1^~?VFVlw%TTY{`9l_cM4@gW9RSot#2+2UB4{Ya?t
zU4(KvM~;EQb`uc*oT|Xgk$;~WWpIwPR9x?rm;r2{mNn~YHL{;BBxWI!nz=#50`@Yt
zzYcyNfR!R|Ru=plp*&7Y56;_M%{M6%!j4mH9&YKdd%ujkg~yUf6u2ZZ6q<@Fqn48_
zkf@cmr=oSV*bVWp4QQ~$>KZBEdnAF-S$ZZb%Z-M5beCT_8MCI0WJ<O5S_T|jhouZ(
z;0YHhU{a^OsL0V#<Pc;tLSQRGH^=paG6adLhHkYboyV48u0SrpGYtmH*2k@pSC}tM
zQBMy0P(SU2eigxP{Jf46Y;RgzRCBzmvf~dK?ekew2w>cMwE-^2tOdpwts%67Yb6_|
z1rm<qxN4~AX2sH*Ne(+&9iLXgm3R5*MW#*{SBNaMWuT4Xvj>C~v>hw<rho@3!GNaw
z<nB@G3LjjBDUSI&nq38Vt68UPA}yOV>$*Wi7{BqJ5co5UCR$3+=b=8N*N3xG!?c9O
zk+~r(<`h5O-3y+Dq3ap&)3xlbCFM)L;BSgxcBSY-gfBu+KcqkZ>lK4KHQkjsF?bIC
zsZ>;$CKOBLBLQXsDwsy{xkL6Jl6-k!UCZ*40IrSC+YJGI$*?x@KBsc-@~nw1b|BWK
z>73-uq*i)74_Zt>ea`n!hiC~>N1au23p}%m1J1M#3|Ylr_uq-IaF-xy&dqeJRxgbP
zb}U)*=GW<TGR(l;KY#*t6`Ta@T}nE8O|pg4fvC9<u!iMk&@JIG;Md8dnHn~wT9xjD
za*G7i+Rsoy%(GAL@Enamut<{?LMjuEZGxA0p$dl)A0z=;__s(Qp5EhR^Jw<Aew>NS
z6av+(5-55Vf>7RKaP;V`;Xiuoy*fTFh^YGW%Z-a>9A+y0V=}^SrRt~>o}<;e<hyYS
z0vpp%Q_jxi_nd!#_Y$CM#N4Qt<z3zjHsRNO;|dw-wIpoW2XU0a?$x=KHLa_1S{LRd
z*)jC(H6~b|uK@V&0<a*7nVT|xX?-Yz>S0vMLt;3MEe^E37#K_Ez8RfeFjkKrB8HN#
zB}<jqxz#z=WPr+`V-^6|SM(d>&$Ahy94u4Q<;$;>r)cF1iIAPi^Bo`uGRNQg@gTz4
zat$F_U>s)%`IaZZcLD(RyvyX5fjB}?=b0kTDHLxTQ{Bpt7VS)hzZzQl8uazu=Z`|e
zg&t$pqms~}nCfj`wI1ADME-cIpcuRv7J$~<Dn``H#;-D*R4(4VtG@;E2jTlpOqY%0
zAZ36Ta2_Xa{B&?AI}}zfC&OZ{#mw_X&>?^p4;6!uAZFGtcN($+(L(747|KW6&$ZWr
zikk?l2&D(lK}&}g;+vpJx_mZl>N{SquvCoVoSk$Bj9+E@{D!E{x2+AYxeO?N6-T(}
zv8TENR#c!YtSF|jrhO{g61}ikj?=e5N?YodkXb;Du?>lDEZdEr>iESy9oXzXm>f(V
zmyXn(^^zokhfW&-W2L-Ym7rpOK8;ftlfjX8)yvc1yO(?M3$<+&Zkt!^Q=F1MQ~eyn
zfTy8kG2J3&!ogF$U!gMmjvelSp<ARv0+e*v_R74OS)@7XCJMgOX5hAF8-iV)!%0c4
z_(AkMnssq3Bfn**jd0^$^v`3kt^DfXGNN_G5otvf_Gd7NuiOq&)=#F_cwV7j<+=i|
z1y^q)Rt16R^6S~r$%8?qvgERHy2}yC%<R2Ok=ke_#>|6e#ogD`?-Ne%Be424<k5%(
zGh*b+Al~Z0lPmRoluBVEukZDlCyh3|GJz}E-ppOs0MId@`|7DnqA$Mo?w8*$PP7|k
zZrrulue);?d@?pxXqIm)E2)`8C(0`+G_f-k;;~Gb3}*^lsoosD(hX2!#RJ>O8^yQj
z9)VpuQfB>wgB(L(XMhJy1Tts(mCk69Y?c7K<<L@+-XuJmQZE@)(djWN?&X}~LdKmz
zD5Xxvn50QX)Jttf=@`<V9rZ*Kf$J7---2OETTHxb9~lzHrFGmmVO}Yp@Rm|<Q3C<Q
z&%zEIzaJBRi;k2eCCG?;+%6x<^6W{oq~kAfNNu~zKO;?NhYk;<6Ul)yHK^bH-gJAh
z4cToXofFctcg2i$PgcV6xCnvktRQt4gvE1{xqIme)hKlcJ(5bp=9@0xeRjz9bUCrx
zxp|fDBQ?DErO<cvg~-MQQ*^1MGwaRc65WW{*0QZTTN?l)VN?o}<So0Xc@qH^*D5eo
zODdZVnPh$;-I2CLlfBMPRXRZ~Tnv4NpQ+VSayzc9!g>8%f5brJ3-yHfM}-XT$#Sz~
z!gBYqP^I-mnyvf5qv^70ZJ`_+xmG@hN@s?~2{AAyXS=2NK)c7;)#q)EDRGv}t|ulL
zL@@G>G4s33LD^Jl9FXHhX9M<LCDBYkF;%yUNl4C;GW1FTG$dGp|10<=(eM~wrZEYo
znC)x2cPZ}tgDPB&_sjrl_o>%oWEW5$e85o=2|kj0;+}wNdBU!i?mHmQ50Kg_2L1mE
z?0?JV|IfcL{O4VY@gMjX#{Y_csrgT>mRA2S!~vL_%1!Vs398LTqnet@sBFc6V|ig|
zAZ9?x7e4m9L%;1Mry+piwaevH#S(Q8Q_oJhJl>rlcp4~<sPnNux;L~$FZTBbfmMBs
zk5(N<b9Qv6Ps`U2hhuCUKK5O`^K=fW(ErlcJ31iOM^`U$G=XQ6^s!S!1ITSvQTZ8c
z&>!bxY$ZNj5KA;jA5OW(1{uXyFTaW0(Ti_Quby>TpMdBV<&7(RX%ykPdwnWDPeOYt
zGmTnG!enibaq3P^Tl#ELTSczp!zrSXS>u>Y#M8+qQ%^)`_uQ;^@YMS%xL(xpJu#kv
zdyvD36to`dqls-(uZo*OoUT+-Pp#Dxt5~vDdTX+JyNp*XM?T2AQaKG%!#rlCyy{<H
z-YPWd;XDl467#x+q72!ev^|O-iijei9@{LvlCAYt!eXCmULej!NiA?p6|B>0USB_7
z=J#$Zzj|%)Iul%i@E?hyYd-1nLW!g5r-`h5ckI@WK}6EUw7oAOc7}(!j~$eaPnGaO
zo|2-8vCAfhPP=C;8;7|MI0gq!*K=|ac8Q3jrwqM&G5ngws<^3_*y*%|i9Mx6l*1e^
zHbCNF0Jp|1x9o0Ei?3?m-Pe-0le+S8!TNx5G-yL(oLU;Rr-H0gk+hmFn5#u*uTSZ=
zEM0!OH&xv~?0>3QPeNEmrsCKIcu!Ajgt!=;qbtbit~@YCI=IZMlKPpzc4<R&o*Q=M
zSY;9fZd{5r$Ul|rW|P8!!-XJV;oOa*vxVv15Mk`TvX8e<`%bfBjCER)VEp--QNztN
zSgZ**8j`3}-q+aTFsnFUNZPjUhRcbj%?CK<1`n+qa)mh_ts!bT;dODm4;qWiu0NLJ
zEIxJ!PYR;SH?3!(<&&O|ax^1;O-o8|&A~jY=&aFRR)*2#Qskk++J2$`_5ae(1=_!i
zUH6I3Mlj9Mou!`)v+>qxUx(I@7%<PfwuG6fui@8EYyT`Bm%@QNA>ksra3iAW!$Cb&
zS;ABCHFJ@{f)h7WxvV$tw9a%VeO~0pN>(l4ZM_ues%nXbHi;I1OzgId0Vm#kguX}(
zrLXD%*%K^oE3TJ3{S|H*EWF<I7?U|^k$_8+Ld^@wl7=X(YR0vr)a7&5y1SspyELLB
zzY-bMcZvU!lHJqejCfj%5=J^{Fw05tU!0=-fRIGklj68OCosTZ-py%KA5Gcrp!bo#
zuL@DZMXl$)qvp&>sak$HM_%klXm`xJ3!R+l<UiDX+LH*Og+aZYA~qHobs4R7N!P$#
zBQ^*K4~&3s6!cEs9ZY8LK!V?8wVeJOTykAo-|3Mg*Zs(2cLuV#`_Mw+Y{-S{p$sX=
zP)3U-2B5($nyKY(R`N@0nfG~DyMESm8@m(%5t?xeOfL<4_g9K=v4)O;rjOm+QHX8D
zQQhg-d+<<K1Pe>pFIAbGPbdQBJn@@;E!}_%tq^<DH!JrOwXYYOb$u8V1-2&UVMA>-
zug-<|gGnw?&d5!D$>;xY)OZ`5TJ+ygel(t`nW8f2l7hpZree#90CVfvYq^Rg9@t?H
zP9Pj$0@0r!L&l>P*fW%yF_2nmfLP%MjfYd@s%sz?OrBxE_xB%3BY+huQ})L4EE|E4
zm|#R0M*}btajodbsO>6I_)l-iKUR<!vakBI0IXAFF#n7KooJ&Jk&x|qR#0}?(?F|8
zb}Lif2mOLd@@~gVnF!Zn5kJni@c!}PKN=S^fIOEKM(pc6^pg&ZavZJ+{@L>vrH)ui
zc>obvtZ^nHHk@o(Ck~UfJ!!1lI{j|iuAN1ng1JSB75eFlr$0feUT1w!RzD`yKT1uM
zN2;pLdmBuX9XMG=M{9nvbxS97nPdbbmyLoKx4#=wQzfjiZ|o!3c&cH$Jy+Sp(@ZJ*
zW9$_&!}v4$(zEqFd{$311xBq|m#<Nrn_qlKEy}l^W;V)8GAPkPQ9vgATmA0&RyA@<
zb)Gt}k0l5bl7iadm#|(OQVopFQgmqHGVFVivDVKsO;epxQ9<7QbFKo&7|#hd(&c)>
zcOjIp%op93tF?JR(x$eL=UZe>`Ods4zr~LQ-><QGCyPwDFP4)Lb7(sDhP>JXE4>%5
zuCMRaOgjwfi9v4HM&fxMj#Y3as<IB>?ngE0!vex0@(3iE#YWu4d>t3HCFZCBi&|ps
z>svOJHjaX9>vVwZ3JH=cYqZ77E1mpd^{%oULRC})cAZji9N#8V!CZKr>I_MKVT?(J
z0p*}17>(>Pv`#V7p62zi@5T8TrwfVf?NfQdhFUQQvk^RsX2PzG$x32eN)|;^NJLp(
zc^cL0hxVZU>g2OsP_8FE%?^lSE0hfDl9XrV(}t|JOOrkyHl?qPS{{U{SCt;n&}IzB
zrwSnJHOxy%<f8a5X`Q@1<Zh*B$(1BenH>t(z`K%7BDGE<^=V;dhj3KGi}5Qu@?ORe
zMXIPlq-mvde`Yp(_6u}ni1Tzh-5!;mbH}B^qS6v_c?za}o`(i{gX!c_127wPRdb$I
z8Tm=Hyz^+<hoLhpi3@dh-pt~oT89*^vR(PXcK*B!m}r*FNeyl{Jv=U!U9A`yP@G5u
z)zazU%G*)gP^L2h)(3fxpx?*js4Sps3z0$+JbAVy<fe$!xp}V%O<=GNJI}+x!)jHP
zbuXwbg1-z~bnx2F@pBX^wW_@aV^cN5#Zxu0KEj;>_*p<r=4}?{--9d0nI#+Og{L(S
zXat4STzZNvj8~+$Y{bW+Nj}sL_+>OM82M0tZxn@I*-Sxr?UeG^0={1K{5}shb;iOV
zLz`%P)#6MbvHi&u6tT6)s@1J<Z(&x~Q0lBKEO1JC>%nM$1vyz>xjVcpL)x8&sb^;5
z@In*fHXe4^!hR?iVA4O3SuVGvaLc<x47q!zVc9KPEcnpoLP@PIHJ#$AOUf;ipqM;R
z4$Ude;fonz@^ddv_$l1Eu78A1u_I>*<~&=Fn%Bk;h`^Ksp8xUbS)BIfbVDj1uI2om
z`5j4Nfi|@>u{)XMZj#H~0qwimN*G=;KEdz$rNpLSVsWG43cgZE9q(Mnvn(Uz8ZSto
zzkv{v^n#}f7~C6+Co>@(!+oYW;8V+gzbMy8UD{$Tfbv5w5!cikf-*O0P`VbISZF^4
zqE*<UMVBFbkg7DG9(@Y`bwEKLK9(qiv-SIOy#Yg4Pi@Qg;X9keUyOx&G25+2)fON2
zHM}zw{P(FJdB=p17>C<H8r`Ud!y$)Nv5m0dbFf3hiMTPVmApop(u8EApM0@Ivc^g$
zMs{?42N+BF69`KAY|h#5<WegeRp;lwwU^uUPlXg)n|z>8BEO3_hPJWA9p=<J=%4<&
zePm~*KThx-0DgiLeZCG?Vpd_tz;v~2o$aiDQ8@{-I-#A2Qb=?ux9l{gA`I-V-9Z(6
z$=8@k_9Tnkc|^qIT5>nj6L*xwSf8qznS17L=|s;s72rsa`!TCP1cqdF%Vme%1PZYL
z+wR-kiStBbgUpD($+NPrsj^MEmURG@35C!-Dp%#h`RYtg92W><D-SPC1Th$Md#Km=
zr2GxnUYBAAI^UMb`*MLgusXZ@YeB`L6>^p^-`uSd^2G%WBsA>>UcLcB-d*@g3}qdW
zJfb*p#%9WmsJ@UL5W0E!D*L<+?D3IxspM<k`b9u6MvT<FH;WuMWN**d3QV@zo7YX*
zQ?R&1$@4K!&o}3Teb*aVGajk0$M&kD^z2&bEf`3E)cDfHE|1%oZ%XyBND~W7S}_od
zeeXIHuYtQns)~dN*gmT&C%zJmAsEqaax4|EdJOh3?|pjDP_j=^xSvFtP}R7gTfm`9
zlBf^YR{p-2>6~%qghOlGhHWXcI;rP;sR&oYaU6btf#NJjO;gO82CRnXS5opf7y=8t
ztXs|4#$OfL?d4*(x|CY?VGWb<Cr8wNXQH@Qc>-AsiqPzKI#f!FQP?P(z_fKwCGSbW
z&>6?$Dwgq{tDbXuYG3Kn<$d8Av@s%7$SSRf#G0?70aZs%zUK{*mi}k<N;-kFud~m1
zh!k!!6KX~%q$n^PUR_j2HD|(~X2~f?fE9*vzNah#N#D;EM_Kq={nm><Z&4%|xSM`~
zr)EI7A&l5u&_#ddEbQojx+UG(A?=vBsfQPOlL#43xiFfixATdxMQ59MBz3X0d)M3c
z!$LXM7~{ThX>mkl!!)F!hg*otS~C?dWk6fQ&5T`gjTPuYP-o26sx9-ioH2ma*Tdlx
zK7VLi!1w55LEj>rTHncTG`SmQeE6{#jAgXx_HQT3AV)T{wy@|0HZ|F}nO(b4XQLaF
zc+uzl?y*wtjEhwjem4$hJyG=Hvd%oR7;~fVI?cWyZm?{Zdtw@nAc50W#_8EvV94e5
zw#2?1?qQ#1c=CP)aou8YuwadAU?D>hju%Y5r8-;?LftBG=FRP>;mSdq>l2`F002&H
zsQ82V1)1TJbEuD^OP)y3=CBLl!7~hN80eXRUQDf`qSu4|R*TtAkfQ>c?p}7M<Nb8s
zhhT*B4MSYF0ur)K_H6lphVy->{>a2#D6RWy2%*;vya~>VZldz;M5V$IgpUL}y8g{F
zI9A+Ku~-Udy1WZBnpI39-+QHa#9COzv6Ri}7j{VcXWQ}`?Q<VllJHaD;0LKZ`X#x2
zliO$?rI3WSCCq#?aZ6BzdeVH8mTC;{1$`|gFLP0%c8Y@ACe6aJ(+;q0c!3K%efSce
zlE9mNa!x`ier$_Lh101Z4xY13Pj5z_XQ>p4+!HFFaW=L{_Z`;xb{7Hk6Krxr3&2g2
z0Xr6XM3=Q%EM`2mQfS4kzk=M!MZKFzEazVa$n`;kP2Jio6cri=<N`oUjj}>4NzT)_
z&Phq{@e;WRaWf9ANw!HY%*z9&QL2w&+p3q@+(%Z_%iZN6B}-@JstSBl1wQu<U)r+>
zSywD$$laPxtjbcEa)*}w^MpUsq`-XcG+WF9r*uGWZe#02^oA<6iffaD?g7LAQn&){
z`SE(B@BR`0cUGm>KTOR3!w)mDaWMa9CG`*dFw=j<57%gDIc>3``Ti~A)2fIKK>(oh
zH+vzJ-O9K+ZEYZ<lT9ihr7)CAfRdoRm-Z8U<-6qo5D!d79m|NtvyN!bo^tDTIxzcJ
zGU=c8zN#G>l04Hqv*|yQ+j%Ro+P}=8wOh1ja=T^j2OOE2vM?k#B#Odm+?w(^XVd)p
z3F~DQ2$Q4rM;v*eCq+D>;&QuHc5Ee%NRD4PqL3;J(`ovq178LH_{!?ux<p{7M^nlf
zcF{0H$FAu;xVDheH9f?mwx27r&gyGjwEiu&Rz>UbXJ|7-ypN9zrx6acvJJG{J5||;
zmr}g=v-Hwh$+zl62E21s<ydq1emmti#~xD?{3XH-ma@Z>rb0&mO_@gM1V6o?A&}WR
zJ0&NohBgQ#ix!QYG#{_g#j_VL+E!dc_5dXygi7hAuZj^Bz-~<?e{SWw@Pbsr9P+gj
zR6{GFgR7~-R!lXKW&>Ai-j<1?(n{8*k&r^IlhjSP;j4G-DP!3~cf(Kn@N}I;o)a<7
zX{V}k#!Vcl9~gO)S@fbkYI4iC%*Ob!>Sq5im`$)49y+0qL>jE|@SdO5N{HPK_e6G^
z+XtAzR<?LZ7%18fjT29wDS76f<<FZJ1p#72v(7x4vMLivmCA15)l@{gnAy_CXQoWH
zGwCTWwb=YPVVSjq=1DTLk3Jxfjfaq{w+{f8`gb%7ZkY;#Yh*oY$hWw{l(9E?`KkX&
z2ay>%2L#vb<Cs$>&5pidsI_R*kZROS@=<L&FQ2A-ND8nXH;11a{m^lk1b~wT2h>Yn
zDB##m?JPOgmM(^r8EkK|&`1$oPbYJaxAXR;r6ABOKD+_co$i}^BVTP%dlfw<DzzXI
z6TLdg#Aw7TKInI?j&eAovnnJh6)eq(=ohL$d;-*yRHpQ%z!2+YRxoAfDkM?}<uIJ|
zyxakCTj556Oksp$y+)AaE@X7XGODI9n~0b}AWH7O^Rt354!j<2lcvfHEiC%(DT0`Q
z<;=zf652?s*}aacUiq=S48kJ^%1|6d-fe;lhKg*d71wAf=D2!Q*~yK1Cn;7aTMS~j
z4dHx~9JXv<db{}Buts~#9u|!l$_)fJw`QzX!$K-Wzocn*3NS_=tsIXViKZs1T#-I7
z8PpmL9^T|}5qOMk^a-j2<G+IJuP}Gsx>ohat|v5QMg#N+U%^(~nhkIel$9wtxon_J
zC}G7YE@<&&GyK8}{k(bZQfJ@u9%{liT&=sv>HgT7bLIlapr{`UKt3#+w#H4YeVD@(
zqB!wjbd2NygPjYiM>^MDil}bJ(0E(RC$tYGCix0rH2~c(wMjxT>^O&F1@nt24|+dR
zK2iZ>uu}L*UXHzs4=AC<(@6a)CzOH{)>q@pqB@2DL6Qsm-0|9-D+F4JH+1)AzPbFa
zzya*xDW>FXHEVx^)he_5y*(Q^7?79SUeL#T?I&>sj#J3T=u$hGgf1c3NuT%2Ed!fR
zNlSY`hUQ+L{xAzrI^SXpu>ZinNe2uCqT|wWQuH(*z3F6*Z2){76p1mwAsYyEPuti1
z@#C7CQA7rbrYnplG|W%u@OPhF^ZsHky7z`9L|&d~3K+_QVL1IQYifT$QWDWyP8F{)
z;j%1=nmm<TSwTKfBp#+1vH<znDE~*}7P>y?kCQeTg?<jN{!<RRO3|?+GBc`tE~Wk0
zJJFTYLdCc>$;0aa$ax|MxUoxY_lk4^G6R*eoO@NJE>}CmxfaNydXRxO7JFZ%rjLao
zNJF4N02;GGWpXnJAmElsx_$>%I&tBBJOXivHX21j4xymx$_*<WpqmFIP68rKx*+`i
z)7u`E@Pu8c`GOmNMCZ=~OVF>6Kx3s$9eU$fUJh=m<Nl>T#cddde;>L>Kpv^Qs!CGU
z(;VPOfngIs$rXWMJy$S25qYl^Lm6?(K*KE$M8FU*Gm)4oWlG<{%)w!xBG9^7!UO?{
zm?6to!o(;|`*$bU&eR9yb-~H>yPQxMW-MZf1L4&W=Jk8mMTF3^<?>+H5#;$`5q{?C
z>U<dn%%edE#(O6yrxPYYw~w_=ZVe@XP>+x5j`q4^KXF?330-k~KvgpyQ2YMWpRN(J
znviP>*sA`eUE(;R<R}3C{(n|sh<1?fI*IkCtPK_MBG%8^tIEDd3g+Z{1ycA)$<TxJ
zh*nAO_6;T71Ict{Tyl%b#zz09kSF%C7mc33iB&MP?C}+kKCSyH!p<8WsE`9czwgsW
zJPnHlj&f%kFM1vOn<`Go`{Z%d^;Ni2^-vRIiMASZ&9urRkTYPLZGkL8ck%6!IRxWA
zv+oJslZM^TExR#LJnN)j;!%{WAr@|LPsqf!j)k>f)m}8+hffw1g~-w>^TfSDZp`Tq
zQXgsCVoH8k_tc)nA0``8&C4{c8+UcLb1_vyb6kV5$5GxXUAYVu3;{KipdM3d!?z)A
zwKGtR%{;S0?(FU`6*LBt7S!P6SHx+AX?b2pC6n;PejFQViIo~IA!L#;&j=v>+G}}!
z|HhE{pt@2y#yH@GP_!?>aV2jpmjWm-l9FWdy#~>P3uKzq*lZ)9k?ukxX)4vUo;C*5
zuS@hzwa_*dQgvri07GaM3f_)MkJf3xroqF*AKv$4h=!kqfg-3*$D%IFzq^i#_WwSm
zMt=?B)bckt4T`2lxt!!?<NxTSdr;Yx1?lN$t-rP(S;BB!Xm{#^+)QYg<|nwe2UUPX
zg<rtd!W8W5S*S|QRrc|nep_f9p#6Pgly&RuVt#uaG+@G<!iPYbxV39*uRC5XI(J?E
zvN2`VSXag2gu#1iHB7&u2HR|_GwL=2I#gl4y*B$&zF$6Z2L;fzV_x5-WhhE|+rVV)
zFQ2dE!zVT@JrDSYwBsE3V42oGszC>-?+J!h_mhchqfA(|2IW>4kSr>&da62vvybL^
zlC%VY6ZSyHYA1cV^Y4c1jCeOLosW>cb0ehLspB5OuID~sGE~Q<g$d5Q5tkWPq*e+?
zWZgi~!Rp6Ft}7Hj%ud?bfW{idh!h6(g+~x5_Vf2Jfw8BYt>&2%tx~ohXh~jHKGS6?
z!8dNdLCQUhz#KDl6yiWZwA_-!I*N+a#MD)lTGbJy1HI#~S>8l;G>5R*+t?hH&wIZx
zQ?H*Z2(izL1OX=j=K54#fzmq%SI#*Qu(O~VIscf)D}zrm>dc96&|dTiaDWGj2C!kY
z*Y&KOU<EkXEvR)Q2-hkFRYNVd(4(hzzoelZ>^`FofUH&*6_ons4b?D1nR)Z$jYNR+
z3vDktaLX9s?wf?S!^!BvtG7`d`d|t3vDVXOo7O!mdr4c5lMz(UmesBaD;R%B^a+UM
z10DsZgVG&<b$W*&SaDe&R4+BazYR)qW$4kR*_80jWUlqwCy^PLn2|2)bqZ7DqTP@q
z0>5%{g<De$uvmg%o;ffBcTv`ngNShs>~TcJlFTjqy{zbc6>0$D_5Ew5`nFW|vDG@&
zYe%1$9BcG+8kn(6sg4Buz3%CwYZQ7v#R?h}-ns4H-6=qbUVxoQXZp8W-hnLlP$*Rc
zP_GTWp=CN>XG~kAM{qm`=tC3v-cBO5>sme25DCbz27og}DY+2}IPTX@uKMoY`9K<<
z1OBfD{<pII_tuDw@jn`v=^soeO#ht;MdfdF5j(<PENi+*yB~&9p>U(E7#6KdykT9`
zZk9;jc=NQDl(YCa{}cA>99J=sjs*xM1VDlyjLB>^8?zUP6vo_r)NY3ag>}Me@Q^Ax
zuQQ;FDg(T#Qr5ONvR<Jk=>P#ZAz&Y;l1$>-K=ms~c3w7-I}JJ(ZG}o=%i|NN)wXx?
z_fsGW=}f54s1%V0;EGlvZ^_6K%=h*sD~^6tps@)<`hvN=yEl_gPY7M*^$IP9j?okb
z9`aFxUMPz`Cd}Wed!i_P<}(oqN4Ups7}Kezfy$M~oXv{X)th%VHlsjsg~sI<uX58w
zq)h09-CdsTx$oL<_NXwtQ<^9o1X&a5J6!|U+0b^51cL@y$51$Q$KmJGSV#t0cZQnF
zo+aJ39B@#sE{2xPfl)$;CENa52br3Eli}Zxe|7`z{V}+pcT|VU=;99CO01d|9ZFnF
zmu4yI8*rRxQ079o14^ZZ=k2tD%ISdp9X-SA)Xv?C7K*SJsRkK@>DVXE)yqsID>28U
zK~E~46Drb;QjrtnSeRyf%~tpFTd!YbZk5ffp(|kl`)|0G(tnsSiuG@;YkJ@-z||3X
zlho7y!1N0D0e(X|wW;7T_uTG_1U>Aoin<{BkqlRX>2+eC<50XP#BYLQu&v^*F+9??
zKWS~<#-rn+#w6f_QL5pm{zl~y3CKocBrQ@byeqt53~iTc3}@zkkty14iyJW69tRU4
z?v@fUtH#NA%z-xME>UvzvC{Q|4fnOuJYSxY)f@MT_DnX%a`(<H_hg&qpUqPJ30$(e
zX4W+F<zr8Uo_<`nK*x3d-9a;}wfGYrrz8pGFgk6vL)r9r%aD{{n2suT%rOfxDf)x|
zwNb5KlB~3!M@C1!K@`Okl~8)#c3ok_kVlCtDO@iC2&Pe^z$IXWuEWfX5MUWqgO%uC
zGl&oE8)p+qWz}qH<j1xCYHQa6hMkO(ydB#;H<nMFUEXUFiOV?j9>5X#gusdCMO8@)
zvplYtJtcMn{}G*K?T}qG)y&c`P8eXbr?0+L_@IKD#UzjNIA|{72_b~83Wcept5>CM
zN&<btj`}3&qDD&dyF+;Q*MS^V67p#AA5w$Zar@ch;JjuxFTr6)#av^)nS`hY9O%$j
z-R3OxgW-P1b`*ooZ~0afyMm2u2F?8C#W}aTaHVnu0tiwZHnc$K?Qso~_g=~G!85<!
zAF_Yg6#x4q|Le?iFtGmb*vs?}1_q}8%D~X0y74zC;a>)Zy96Ln7>R4&OB#O7Vv5X#
zEF}z_47`d2aj~iPukb%kbS>(MsAU#QlurZ#-N!s<+c9|vq%aDPFt^Rk6rQcT8r7ds
zp=z3iTf>ggDv6qQyJ4n;9O_?Wp@Ol3b3zgp249BceM5x$=*Vj^#PBqUJs~MYxzmeT
zulMa-M85nUeY4&E!?|&ZNg;gtKS43R9Fiui_2cB+cV0}JnBCmD4`eg*bAl~}^rBY(
ziYBvPf2lKgR`&!R?GGI8WpL!?Bd86-VWT(I`Xd|lb)$+RSkk!JlTv8jxT8b16i3lu
zBuNoR^k?Y03;eU~xGaNh{g!^W!xMqOVsR9cyf@%N(I06HI9bW%v|n3L%<@5fLbI||
zR8vA30Pcx-pI;*kxC9J5qv4za1P>A;`=;Jsct;`5MkDfKP6j+6C!ptetVB2)H0ZIj
z!tr^#E_Ra3)MLGC#10&S^$}uxmR|oiGX}dSA>?7xHvaQ)LIMU53k^<|c9o~o#DEcr
z{cjMJS6A~O$CYu*Tr6K{QBu8O8tl=$5fQAraG3Jep@u?!o;~bj%aw5L0XC${M-!o5
z1uU^Q%<UJ3Tz$s<hS2rnl4TpG1GnNon!1;)GA25=iaV7*Bd@Nfe+V85Ypl^SwIS+p
z<Y}x9y9~T3k?(V8rE2DLXg3{mB&@;Iz6}(^-Z5})AAEdZ@n}a7e-HW3{MI|Cc&O~1
zR=Npo;_OQ6FDS2D-jK&&3bS2n1S`w(Ozno*98%|MQp`5*7-m{=X-O97Hs}0I{;f$=
z@gkO!6{~30`71w99Axn%ruG;Q_X+)TQsdEI$nK($Z{Ft_4*@yO1xL)MuMN7Is9yp@
z!85iWhJcj2&{}%UZf13!$E*rChz_b0!NwtR0`E0yMxZV|OdW;o4tfO%ZhMUlA^w!4
zM02=+tcvI=bV@T>V^4ztmgC@x+wt3}^qT`2RtnfyLK?@Pjnjl9TCgF14Ra{kDr<$H
zOVDZMT-Ep}Tv*``rvdCvEjzlmiWV;*&l01jbyzD#V4MD~u@YioH|zI>H=WG0h03v{
zuS%fZRhtz{V6R$tBvx`Tp-Y+s?}S5r0TA)tvqPBLw~_*!Pl<dipWB6YG@w%(3>xmC
zT_|8reIFyTD$>XNXDRenskZidsnm(uSm;ne&D<?>oTBa_w5g3l6uzgmP#t~2`~A10
z`TGIP23l0<(xXIf8_!uKG$DW$W4v44Qfsi430<kt%^6tI<$?l|lYrQfN;Y=ja0~8e
z`7ILu-d>?txFIEiI~g90FyWI2epffwJz;}y$Qd0Dv}WZ$2#5dSxj8u4|Mw@t{0}%c
z^M8eNk7!E89gQOP&efT}8B$@iY{0Wl^juH*2T4R<$vS4h!o&_Im@5@aD{|#F)n(-!
z{-js>MkSh}i=qX<KS=JZtUSM6R9(EM6elO3{50iN?Wjnys`cqIeEn*`ufp|k@oE`X
zX{)Nb-9335x*kf|7#5$Epe60t(INdB8@Zk%09j2@4sVRFKXmm;ah|%t^ZU5b`R$6%
ztVGGy$5dfX$>jLyp5iUu2oL>m)O%wOOwBl{V*0P7_OaKvndZ&JK9!vUONWID+kZtK
z+I}usV(MH$zSZysF{n#T!KBfdl$OUEQzq};J+RcCGNXgiivC(`tY5UX?ZJX^H7QX#
zI;qNP8?zLr649h+G}hM3hSEKs>Z{p56|$41Z08jzZnh8GCXJg3M9&vcAlYetd%f11
ziO}{RuWk+n@!**3l4_k1FTLoknUKE?^Q`W&An{R4N`uZ=WIkc^@DU0Hrg1+9S4?Q#
zW3H+sExHf<w%vnA-hlZskSn!e8R)}CVR|mk*vEb|Xj-YHVS<E<ztNRoia9;pEZ+o7
zWK>|Z%CKCC9ZNl+oS7QjO;u7&-lVPS<+<XNv~7Eq)=yQMh$67J{J2ps4j0js_-I^e
zCEGG>su{E3P-6;7SL)bl!q4<IFD=X14lJG4Gf@lZ$h0-;A+MlXpld8PIY6_xl~5Vv
z^|<QEZmfoBV@-qW)ml^Hxyr1?lPEb-=|9L|demwBTTDu`Uz}J)R8eNvVl1FU+x!GH
zNa_+9tCak!^4R1iknBi1k863QIf%dDI1GI8`9+jMwoH7Mf-VL5wH;ak9_*mn*-a#9
z`H00~618GlfTMj-KB>~?6Ev;dF_(MQ%JB!J&0C%SqJ+jw!o~dH5Bvo78ywxxgZ8D_
z4on~I8kk_WZlKbLq?h*tN-ZQKbl&5QBS>`D?N|fgXD>Z#iaz;4jpcl~W*s4*voF7(
zwV6R7`^j`vF9I3nui!RcPah<U7j)Nd*xE~4uS6jW8U^rN!02g$^f^)y6@acws)w#<
z1xKE=xvvfVqYW1T^F@Lurp_EGvH3{QECt~HgkaJ+M$J>0Kl$bb=skQ_t}A!NJHr`b
zX|0`gTN(DH+HZiuE6}N=S)TKV#xuYbqdv*oq-y|W=|v^torEML!HrOosyn5jKcL-7
zYu(9fC6fnCTngF@?cHj(-t68su%LajD&O6fZWEoDXfXMMZ{Q)h3kdm!0K#2lEW*6!
z?7+GZ!PAuQ{)YrkOsP*@e3~>EOcffE9b=irc~V@lSru)JFsp!Q;B}wwebx69*BNvz
zXF`kDVUmQfV4YP)6<7GOR<gO&Hvw=BFo3kk8V_&a=|o~~_r<nV6}oe<3IM%f)!9*^
zutYFCXgsn6^)+J-WJ-`!56XWqGn~$V!$UP0(m+yCn58sO#7FNfbV<H^X`$W6O*G&P
zUsl+2L+Ik8jAw0biMid>Z`KVE71*4NAWD~Qa4q{#5q5pwnTC6JXQ3rJ#J-FzwTt~$
zqFYu-i)%QT`us`1@QPf$8RjyH+y`k1>BL+1+T^A#0NIBGk0%;?@;E|0sxoE7UkisP
z=1yj0@Rc0I)i5jjO_5X3)cgguwRcF%1WOX+39^`cZ&<o+KU-@%J3zGeUENk{dz*b+
z8?1nuUDo1|6#}bUR{-ec;fd>al$yiiFfQL#<2ytks^VOnFWax#L4DRmOLoR6m=K%_
z4>hVOnW%`e?W}?#?{g9i(9j!UqJG)apl4ow_!h7kGjdp;zC*dB=?N!f6qkCb_lKf<
z<Q3<Qr4=&LH<*Ev>hQ5tZ6a`tn1PTLX}FU8WTgJ(y%|ISLr(}9@TmJKEN-?9;xA=M
zU;bKjpF_kY=iV<exIK1mU46v<Uj9cJ!7lHfl>Tljc!2}CZOr)mC0Pc|h?KEfhegmG
zyedV==|W%_y&9lgp1I)X3qG4T{j!*7_ekwr=c3#f7_VT+)W(m$HSPkEbwe}lTY&^w
zxxx9&nC@vS{DjB>-v&SOGM~Fad@D|3iA0VOr@WQqRF-1VHBKq}WRDC6qsS^5D?&M}
zw3L|V2@Z=L#bri*)U2H$XF>&u_Q9bm4owm69C1EXfOq}BtB7F{J}cgp;XA7qa_Hee
z64%%|$H<8Jso%}9nzaG1aO!_7v>f5{{Oy!>3V^D7F)keT+^m}KD{ni)6$+u)<mJJy
zetJc+skmhUx0-~Zl>t;j$%6m{GgV^+FdWevpIBwT7#}g3c@`YDU&35tG*w^9fC}p^
zvse(0PJEaWgxFZK;IL$Mrdo1I;hb@TwlPTVD(Uf7Ud)sOTo*4A9gC)*uDWZsc(R2N
z+@3Wk%Y2RP*J)ywpg?HwvPV-GWw-J*@I!skH&QWz42z=Ip<l2EvXZ^+64RUr)<{6M
z?N)5}R@ZE$f%EczvvHR95ypv5c_EaS6w1laoC69HmfLmc?WyZLyQ!*(GK4%$^Sh02
znYN6KdaB@xD)$5?U0k5^{0_3F+!=>^-Jo8*v@4ua0GMS$H!(Q{Dyf(OFbIj^Zg05V
zBxmZhOhenamT<uLOPd~rJs3}jK3&`-8-8P8VnBwp`z-2~VY<Kqpr9wDAThy1B6wVL
zod*>5;=rIMDFw#-4OwY;l!cB+G=h5!`2hj3FwgLXKTqzQDWxG#xkM2t1<uvRnF%7P
zG8luk<1LvPSm%#ZGFY<S9tWK~{%4<TeegCI8bS==yvscg$reAG4J-K)uFJFkfQ(&b
z?hEXYMw$${ghC@7vbJy%vGYT`gb{VRKs}=BdE8nBxVYB8pJTB67fk2@`)CYi5noa8
z9?>es+)1N$`zhzfixCDd;2?0vAz}{)l=Ts-gc1|yslNi1{~Ek0W5%I9h8$(%wwx?}
zDQ2G;kr}O)6O*hgo|k>;5|ZW!lEGB%#1+=%5rZ<Cj&yg)t=F3-+dYJ&x|lwsqTYB^
z&<pGf9V`jdaC(L-ReRokQ*iDKH-iKGPUknsx~<|=@d7N;jdIY;wcbsl+p{wUb2G-r
zWU(Y~4a}(O4mYWk_?fi!#VFs>xe$0-7{_nFD+HAS+Rgre)yocgXVG{w4MtV4(Q5K|
zV5w80a-LBvypN-@1%6mT(B>jVkF$nlPWT3J1V{vYakf=)^I(FkwO-bAS7_N(3jA|K
zeIEw1lv8Vn!+GcJdE`@5zgKlMOgYB;Z3<v7i@c{%OR-Ty`HUH*MPgl!Sk3V9zcFJY
zsfG*+URXk{=!<{`2_{$4okgHPAn!DNbp=%X#z&-ha5WQ9U{yYwg_(<F!|pO*YvQFD
zK1&LNCf{Va(~%fRtL6kGP4UDs{M6dIKp~SEayCJ*q_Sq-g(UciYF`u6SU{1VuKG8r
zOR@1Gs|B1nC_=;tsPS|Y@aQ@TV*_Xg1g@0h()g}SSc6E?ey0A_dr+~4x6a!hnzGQr
z)>_hI<Al;7rq3N7<uq}UKWf?GV2JzX5H^^R16ii^#}gniz?{SE{z^jg%%ID`Gm9oX
z^o%;X4_xxk;?M=WZiH~ny0}}4r}7McW_15B)#i#I_9&vgq&PC0?-8i1#4+V*^5p);
zRor^PwN-!>GWyOjoe-Og8yX^|D$T+u&+J6VsAoE_jExj8)GHKhS)jQ)|9aeNk3$=u
z#+9<54Hj?1q&It=>9x(OWsR74fJs*!zVglE*lNRX$m2je*GM*f^VZC6vp&^(5H=<F
zadKVh))s6uHYhteQAhbaSa`zZ$E`B3k$NzZB4%jA;RY{4^)|hxYh{iC<1@l&3ZPxE
z|A;Oy8v-tmOPJ|<D!6*TTI<WGBkqklUVGG;lLk0^4l46ycH?P1!0Au4e$b#=b`GG%
zBo^F)^r>)yp*OY}-n&Ef8-}qfaL1?8KLU4d@|n*Kf^c4(&U)Bhg0z<z(ZSSsuCbE%
zYZnjZg-6)YM!=t|spX?}ZUY#8)bk_1{TyoUxeW+RaA8q-T`{-d1%4?_em#{Ipg`D$
zFR+ys{`2(31dlRa3B)%)cXakm!*2-EVHIFmwoZw1lDl;PD$^1hgv~+P>fh>onQBCd
z0Y?u^T{)<ihvJDu9Y^*@rb_QFX5v(iz@g0@@Nb5-^nlr)&7;q-<7jRX9Y^M!3JTl7
zjT(DDsrbXkuwQKjbDtPVNN5R(_JlLXJ)%cppe^uJ@udLG2p6q?4)s0}Ufp;;05c*-
z5*wI-dlS1oM0V?1pKFOYLdt{iBXOw2Qy~g`eqLTK@bC8g0F(WcyZ-N-^Y8KHUymhB
zjP(CW>0$l{te*M5!s>H0Ws<f=5qoay(z6DZ9fJqhTB*WPaL6Sm5(`Z@!c-<f6NPB4
z5%K};DRZ4vd?UY&bmze73Dh*VPJ+6R^-Ie>pD)*7zel}k)8&3L{M5Rr^K9yTyO1uF
zOusd**QZ8SvQ>Yns?qTlKaChVmEa@Mz^Y@3ST}S%WR7hdqFV>LaKI07N7WlP^gdj8
z^c2_WdXHZ(Va6fz&F@7~9C)BKjoeRuo{!+0UG3<uKKYLu;*m7yo>qazxs5gI@zmo-
zeaI^}pD(uZ?>8)Szm&}^ww5Cg(i|ELpBfax9601x_q^)nu4~$w4xaUfJJqo(^H5ht
zKHD^8fFjO45<K(Psc$Td&CrB*+?Ex%C0osYe-T)@TK{byX{*-nDov?Q(b-F_>dpQ#
zyO(omNr!<q9B3MT3o!d|zg1}bvS&+pkQdJAaaO5~c0y_i3U@c<CJKd>U8^ouA$$ey
zq3VB7KX-Y>n}+!E7t^?M*(CB&9u1mCU&T3swQIB6>@D|NWosXky*b_VVCR%u*9I{{
zNoy=onIu<7ws-M7ew<(T`;*tOyN=35?m4sIAr5hsdv;n?i;a8OHHYJ$QE1eLzuQ!(
z+q8CzkE}Z7_*rkQ*-G1`V$@)~o#MF1j^pc!fMN_Bc+>MT{4#Q}rZM|S17{@ng1eRg
zJs2JZ(<bX)y4GvsIq?xzXjXRGuPQQgQEFDDiuQ)%w=+Aa4Sc$S-AWDMI4Gh7jCHII
zw#`@n-JIrUlO+TXK4|}Jwo)BgncBnqJ_1e%lMPuH1gHzB%+hkyf%qyg7=mH%x5TlA
zdROxWG+y1dMlaE5TEt|=4h<j^y4>-qY+R!jtG9`{pK)feKLNF-gDrLa?l3CCo9*Y*
z`>e)#?P;wd5$xTmh4euGJjB<!wSfnSWB@X!_Nsnlh*{!%%JTX6%m37@?d~Nc^h!j!
zo-QH9r`y5ahS%zsA=B4!JKLP#URzu%u_se*CcNKYyXU0OBf*S23RG74?jc~ka(aRC
zb(9`16LP!^D+YO7kpq7ZFtA}e-luf^4jxqnAZ-_R&aaGphb#T(KC@k@q^NQcqV9hF
z;Uy+I*#>*3OEj2*)JwZcqk~;S3~qe;spqm-o6MK;@m%(9^R)}xNPw%bMl+KcuqykR
z&eZE+_JmU4G`Yjd*hT!?NnMo?m7uY(?i_H;adzDD<T4@^=Sat<kCfHh<BNjwDO<N0
z=XD1)y`0RTpQU+GYb|z4yx3?_EmO-W*P1Ik*6IOLE!1YXksGI9YscU&&$26qv4-A*
z9(}ly%JiCr5qfX-#z--zp$^456;QjLI*TKblUFiXsn3lZ{<&Hmb&?wnFGJGu6VnNL
zzmhKC6QFLD8n)DsR;-G~l`}wdmB$-hLcH<v&qbW4=pj7Fs@LLT*BXw_(}enLq*tJr
za!oppE=h1>^twImEV(t%g_V!i+P|Q-OJT|t49+9V&vsbeD^){pwoEl>s*q`}uu3Js
zB|)>|0L7gFqzPHns#H*zA*MeD8Y$pi#<#bsv`H^YJFyB<VcqC-h7CmY<zmfQcItIm
zx~8;<z}idREtgoiw4pmosa+R4Xw2#^30v1b99*Vw!bDOJ`K%m}Mtgg}B;tkf>nw{8
zz{yi!!iIrx77MThO@GM==T%!qK6`5@i}U~~_W4zDh~$@AT%!oAY$VyCCj}!1Il4QP
zpSddou5n`u3Y^;!@)6}&wn2+I6-X8<7`mBfp<V^MwJ-2+$OU;5dEfMKb<Um2%TOS$
zd7HznWd0)Ma`u<kaO<I24Yr$PLIx=!=^FCgbH*}v@9+8AERT~o_~|jWWF&hjVsfFc
z2w~%EhoYV+5=d#Ogdr#(s#*`gO1ejGEJj{p2G;=k)dN=|87{kemJPKmpnM<{o_if6
z6mCt>L)>^N_#rI52jI@M+ed*jN0A6Z#U(B11>a2ZftOjyFFfC@5$}~ZSxX)xDylZq
z8jOUkeveyn)o>MF_Hi5ShCGNUaSqbklz&xxxy0R~f)&k~G7v7y{x|cT)ZrkponF7D
zm?)v?4Ln20L$0c_BOn33Bo7|pMY$lyRl3#CVtVXw4&|QQC}1-|#(`ZWf)-8zbqsAE
zDJ-yTV~Kt`DEO{KGf)+umk}>e7V~u>$$M%}D#^fu!r`cD+Wg!iuLuuQ;M2jh{owWF
ztfad;`35<~!|4o&5?dLj63qZG#B7K4(;{+##paPdtX?VG-E>EZYAN&GCIAzN|4@2k
zl>eRp&#o6=W;M!&u=uRJx&zF}A{quUph;Tgm-d0?$Z0V}fM-ddPrDX{hCm3+Pq**$
z(dXEC$OpMW7*-AX@nYkmBxTT_m_ds_t^nQ*DVE4JLAq7Acia?d>=>v$cB(QfUjhAa
zg?z^i<9(!`cDr%2fRSI@K$~S}D1}_0B98Jl<`Z!}ay=Dv@q8p5pNrx12gBTD6O#nX
z@0S|kXtd}RZ5+`#zW$2r^9wy|lrbLVA4nI_<ifqGe5W83IfCf6G7+SxHk(l-c1U1F
z_nL?M42Qng?DdJ^+70Pd*q%CZZ&Q%4f>R|9-!Ra-UMmIiME{SmckIqI?6$OHRBYR}
zZQHhOr()Z-ZQZeriYm5kCtbbY(Y@a>`uVVb!u936=2~kWb82r$H6>EhwSaTkxLN9q
z#5L%Y{?uj0>59r8`BVT!GMykTYerYo&dIeWP`oLEeMq^<Hv1}SaO<1o2%4c%xGq)%
z;jqDSx~^;wl$vJ=Hehy!o&>JPi87H2JIUWVhQM6~w01HZ3F8I1mb898r;3}Rijrd#
z+m^(09MQ&rfRR0R<p#&6Ncfw_D<|36@qK2N^nm28aj3!qD~eCdqrK3(y%u7A=0a*O
zWx?O`CI^`82=C$_N*=Cn)f|P1I|^V_pIZ#&63hLYU=Z2fDL2s0%VW>u1wkxG?OU!x
z;UZb?Znt|s-)_)`{n%>b8|xv&-2;S8MUbxz4>z=*n?eiHE(h>Jpm#~ItNI%yxbCm$
zT6XN#$Y!Lf9IV%Q$A!%8>Drt+a9I#dVtiG&?`}~HV8xeuu6rvcwy>F*vcVZwDp^;L
zXd^1x!t}S~!@?#wO{lFKsubv<S`R8I2wJdX@$n6v7V7X*N|d##-a&?_xkb{Ntk3C?
z2-_#B2deA7!~@>}g>5mO5O|{4`h;Lv!$RUDa+7woL&^m1O?dFv(-rR0!o)C0Kc`se
zMai<q@vf}MEKKHbR=}u=Z8d}#mQ5T&5epcB`L~Y33F^t(P<VUQkXO_#S7Et@`Q=}s
zEqTnV0e|4auTM8jrA02lJq2Abat}7xA%4?1+c6;A3gMiwd}Lp(owQxR;V`qcNz~)O
z(?M)$#b=oT=r#C4XCD)xUk!7ZL?ScQ-KoZKb+W~Ey(DE1ZcC1s;O6q98{B4EJ_nV+
zR4E09KY=<U`qNVPNA&J0H}TxpV<c)>A273C1(yuHHBj?yVcA>Z3atbsn-vLnNuSCB
zfvOI^F5SQgV3u7H3z95@6BPL-u6Su9K{)<B$c+<SFF{n`&IYC^ZDe)q!RW5mfs5sO
z%$(fcFc1pH_Ckd)h3m^PWHlu&vXX^%;#yCD@prGRSx{w_H-bYe$6Rj=mIM~Eg1v}U
zady6QsegXVDLg$`V1JJ2*v<E|t0#>_FsAwh(WqrKOFVGuZgU>3rD0)G^U@%xLt{y+
zVb<`!4cch&*3~oRi%$QRVPXs|^OSD}!sm{z6@LoRB%H~U^9GG~t@MKSecSYHl4bBI
z-r0ThQUn3>UZ5svO*rb83zXB*aD&`1Dh~Q|`PX%d;$u)g9M_23ew{5G!PD|RL`v<_
zM2Hgn(yVqw7Ce=s-hMs_tLCiotm#}2uC(#a8idvNE#++}UQ+DUnFxz41i#3=pXpQ&
z@!-O=C%4PQt0AFsU_?xv)8GTPIFYShN{cM!{>WNbFv|lyCZM#deLtfS8=mbmbXnd+
zHI>x>vv@ovNfxh>T2ykU%Hw#AYFvNN-%o106V3|ralm6d#bvFI7jR&QxxRZzI7lo_
zO`M$1<gbt35vqC0q~2*I^H4^52*61b@3U9$<iUwl$VozsD8!<ODb2M*IVm`jOgf;x
zV-OL|x`;Suk{Leqx4S**KnF!UN)!*Mu=xsuD+o`$#6FCorgBS#=OqY&Uzx0z6EeE2
z;wu+<fco(JppX{10Q$OKF~Bz%me)SqPwl+1_>LnTkV}j0zj5DXItw)py_b$f6^0Dd
zXj5f@!K^sDY0D?tXG>?hh203H);u$fx)?L<#CuAmvJO{PZ40Ux)_Uo1ysH`9u;?#Z
zH>cRxvSro?O6e0N5uPN=v*-3pumv*~XqWFGwl@(#VD846xL{|#s|jv6Kf;IC9{W)I
zIHt)z+60N)tT$yvlot)U;0uOkn$6AJvL+!EgsEeQy>Z#!iffjIoUXSpo$d|G!Bo>z
z=$SzEzpA0Xf}uOa(|KyRdK|a6GRy`3{q8Io@f;)?$gfeQ&^U3m75pC&|Hym>_A2;#
z{;iZ}eMYQQvE7F417j2=h}GM6zo;MwF!*}AgxLtOXtKe!0O(c6HU5>-E^A}7#YRPC
zQ77t@;ThU;9ly@@G;LUZJ*J7zZoQG#n;gKT+<Aa!Szg7X_&#1KrYlXO^k97Lhpp|b
zfDx6Oo3Kmd;}$PI_x_%^F1U3E4;JwXVQ6BNz7xZ&g!^ghc*pqu5Qwl0wfPUD;s5oI
zvoW##_YLen_{Z7)NB;3r%?;;&b;W-9_5CDjrGe15bsRbq!R<L)>z-B5LTl^$j*KMs
zo>&jYVn4f|F7lv+<AvfY<|_WT5nx%d*DmrN2QUwv|6HTZKNwG=7UeVPvGWR<U-cDh
z;alc1)$Sw5TXWDofAKiXlMN$Hr7)ZHdhXWiIRHO{P%CD<P))4EQCmg_Y#ZhZ_1j-L
zasU<lkzUptG0X?rn7`Ln2VeVQeVYxxbJRp|M6sQ)B+N7GF?_#1RpCcSKByc<yNkpa
z{E|U7kO5ae?o+SE=uk!)wjyT_gr*yWD>hZnqBNxOF)*`9hf?P-HfQ!Xx`_Pg57BM4
zs`hczUJyHf)g|#z@J%!MZ^uY3mixopkE9YDu|_l5SY3;Yz=0L4c0y^O74~hlJ$>@@
z3gb&E{Sq<ytObHf53EnuZZi;SW~okxij8lq(C&jaHM7@ao}a!^e5k9V;Pkw>E8~t}
z?~Gc{KR!z|H!ML#(mB35uOL=hAbGD`k;QQD2vZl|+?oh@wT<{VtFQmMv-J{~^2!t^
z^txZKgRD#)53iL!yAC3ByiY$zq1p8?;J5`y43UT=h*`Gr?R@&Yw40Hdg>gi}3@NtF
zkkOh>hdMUwuI~u`x>o5j&O0BgKc?FK1{*Qae>&&ZXU11XwM&9XFA4dxr@(;NE5Gcu
zHZK(2hJ8_HK{nEQxmIa2#^N(gp?s<kLAl$w1%HSQPqjkZ-H(*C<OjH70AlW=RFHeC
z9nTiNW1})naz>&JS~z@qa+w4|&GA~$KM5^-&ty*2sDaGMTBIYvZ2Rip4?v6e3YV>{
zgB-+`5xQq{1==qpz(TyD<UCxUqlvG<#ry_y#3k%agLLaCEjLq9CHXE$Kz8O)YuPG1
zxjZQFKy)<446IZU6cJ!2qJvXJn?hjw1DgL(2o9PR?60kQ<vAbO_`%?$e*%Z8Ty1Xn
z<swjlz2wy;B<mYd3@L~}H}%m=H|eXGrasCA<KR9ED5M>wzUfbxx9|QLUj278%X%=K
z=cJ-c>gZqBc#5)jKf3kB8%ByR;!yq|uC@b(<E%pj_mi^7I7~ecOI1#WnD*7OYnSKs
zglz3YQl}qHjtw0mMke~&rNc3E=^jwtQ2?pe%M>IOVY0b!Ls4WZIY#5B6?O-}uAyGE
zN<~ej6hYol-QdPZp{QTmkx}NDvrvGcrtNltlAdhZ<P$mvChTk9o1G{96g0<&tZ6q0
zVmFIVfLpM^c&2bV`OQ=@Y1iTot|(5nx2gBg$lEC>5<>(Mw2STsQ*)=P_-X23I7N(y
zV62d(DC=@LFK>@y9^R7N{8czf9+k4R<`uJ}X>}Ub@H1=fqpaME`OSU4r7aj7Ldkw~
z#sIVpOpLk;ge2NuU2W=c@Pt<IeWU7CiIg7m_K?sgd}dRl&6xdT^DWsy*<3csOTCzu
zVJ)pDxO@T=IEB1Bcy!ac{wX-}RuISW&jovb-&myFjJ_*LyX1(}MC&J_r?0w27zpZI
zc-$&1)=kd>7RfPnEuH;DoR@GPE(1ML)>P%HMmBjQ`#XCQ^*nD~-7J<HVEOGGc5GLO
z<*Hkb^=?yx{~?y&39o~wbY7Ms|1}~Oe;jSg4VBc%W~Uv6jW=PYfq34cQrCK*XG5H}
z5N(V?Zh1qo44glSlWBzUm(?=;Q!49^sq}QQwi!f^FJf3SgMgft7H9T7Eesw+n6ClV
zEI+T!Cln6;;M|oN>;pWJL%3MXGVlzv{2x5oN43TH++{;xfdU<j+OTpTt4Wa?VNQ|c
zGP>~g3x5gu5XD~=SPS-o!FzUIb@VnMUOUC)1zZDv&b=nok<1F_M5{W_WWBl+JxX)+
z-l)=P#Z~m`Hit1!wCzP~rgDdsC{Qimn!!D;H@ZdxoE^N+TLnodu;9WT-ql@7`zG52
z4fP$Jx~tPu`}0qxK5ME|#eY_kc4LMti#IB<T*gzGwH}+*>&p1qlOwN$6snZ)I6p7U
zh|rPy-FtGq{Y$fY7l)h&i?y7UV#TR1hkzh`WY+FvQE<7<a3JC2e0xtPd#>{lO5x#B
z))mSn`-P@2mz#~uaUH3UH6EU;tnEVM${R_u7hZ?2rgoiIb_Qec9Zr_I`wZYYoV9!f
z&|K&(2XrCvyW8H}v6c9UM*GXs7dy)iwt6g!kz9q`w=4+AB^!8xzR=T@t3oQvsRMo-
zdz1?o;EqMUp^dhK_#=`<Bw(*TuHAsi-MJ=Ce02nq-g-8Ij0UC{k-lrZ%!R#+2y(eK
zPN8`|=Os#!ek|!x4C!LZji}mE4|Igg(jZC$)d>J;$GQIf+XtFf;0q%I&^XrNsV%gi
zt?1?GjcRO|talV>ym7Jk2M+ZS;es-_@~ADV92g|BStHlpqnb;pR`qp|?4fCMruoEx
zd0B!WcD+<jR)k|4E)nbFS-|8#NGf#9trV>uW+*y{!`@0QKC6=R6$^_Mi0&G(CUb<`
z=UCY%h%|{}8R256G&;0KLMu#4k@&)u^fsT#YfCW8l_gFIK%J|>pD7*w-8-nE09X(U
z#@IEd67V}A@GL$MC`+dnF@x;-cuJu*zuBX5x*})SMj@UIJ0uBSD!DInrd%>3cx&Gx
zF`gB+U-(6JKi!GH{^iKZc5FM#%fVMxDw0<E4r_xmBb?s5mn@@qcd*^HT=?ka=BnWO
z?-+?rP{R6n*yMYlvPl>)RfSKM@Lu*s&kiE>GvG>y*v~DT8fO-c4;xW&3!`y0JsKX&
zCD&$kAg7AC9lZ{T&^gN&^JyU<Vqu~~(1%6F>oUx)fDMWw%bL^m*CUGu#e2xZ!l^id
zL7sES-RZYVJ(q>UyEf-&R^#>%MM~F>TyV6*o$Bbr3oLnFnkNedV<r&A5T*WB2JPtF
zxM8q7$<?U|>hXLWIjERUF*uQt^%m2ysFH-4!sFLP5~RYHIA3DKe1Q576~dRBQatJ8
zr$OxxvNXnPT<^BUlkkMGi<xcWeevB4JE$rh|Mz@7c@(9V=kxBGI-)m|9Zza(ua2!<
z3cMZDpH|fNcO2#HnYKUzd7?sqH~ZG43^yTy{k+dRQkLmWIKm~1rSb`^!7-733AFa*
zI1I7f-PqP~{_6{5g|}ML|Et3OOI!VygPDbu`Twdgw*TN@X8RvGn3uI?oDVvXdM~IP
zVbsWsfe}e1cg)QxbfmagCNx{aJyoc)g2>D%l|__SxaShWw;=?P3CZ3pda~D35Sqjq
zes0}fR<9f)45K36&-k0SVhUz1H)75mlwK0A=0A?6HOkZ0E&&X}e45*H(=w>gVPGeg
zo!MT?L%wegh#)7(xL{J#d&ACr57K?zD)GG^NskU=oH0-=b5!w;gCZ@wv)%dKx8+>#
z-RY&?fuls`N|td*e!F|e8SQK6UvzW`R)z4n>!Xz2<Xx-&ty-h#F8_8Ufys(^_g<KL
z0VDzuON}}=UF(Nh+BLnZ;p!`vTnbR+O8q?^H}wLuKdqnD#lYKlREzrpWxL{fRN%1T
zlidLU@1$o-1Q!GL*oJ>PUH&!S(cx&d!Bt5|)`6;Gei6!?<%i=^IF0jdR<5+!43Wf<
z{JQtU-qXD3;JS3T`tmG|EeN*ysIt#?vc&xNL&07vI^T|r_Mc`7pMPeL6KQ(?$Ptp1
zMD`){L`H&AXY4*>L+SJf5<+rvSgT!avC6in_Lc{iN6zw;7GX(z!!{{z+r|WcuZQN=
z4Dn&iV`4?lAeD!T=AAmaK^05*;*2eJ9B?6zV<LYJGt1mYbM~9)`rqs#bVgTom2laS
zY8LleH1*=M7X^`2rqmyp_S>`EXm@l3gfx>qNAO)Tz#(}w)N!ztSZbYyhgD))W=%f(
zzi8oiwB>vK6=eD1wyX$w)z7eX$6C@p0UEAfTg1-ZNW=q$4FULT9qT|1LP$uC6X9Pt
zhJHNkPER7~OecpyHbL@*B(%=Rm%1<IuIcI7)sgntJf45$P{ztUbcUuD6Dm$bcn{~Q
zA{G!2QLBBo3TRX(MXLAr)s9l%mfi}`V)+`gAi(l9&OkV;pFb>6_P9J1kq<f;;0Yii
z*`pkJZo60Cw5IIxpo$l2Hs{)`77u4iGx!hAC_B_ovH!Tc2|!j8W`ix6!Nq4t=#y*2
zdS@sY-K(dL<SJuQyF&h;gaT;o)>Fk}X#ZFZbW{2Tnr_>FwBWZ4GqF+&13cE>8HKn|
zEzDsY+5GTcMQjcF6r#oZZXgjM@N;^KBm_BIij<GDuO{hW1HP@MK8Adf(Z?PewS+jB
z)_S@)D!X+m86t#6ww+Y`dB)8r(Z6r)wKZ`*j@BKf27kB}P-$R<74(ORMuME=oE3bh
zs+!~;ko_gBBJckwqD)d9D;ZR=k9x&rCV|+c>=`;<t>_%O%wiskdYaYB&Cj6s5*Iqs
zLbZTfbtd*-%Vj=PLOJF9?UgPLMKlKH{fLw$jiaGvrXKsMdHMluc@m~;em6h^e%=rd
z*nmoK0t*8Y-2=J4=Q@#SrJPas@alwsR6i51Tek~G%|J12u8n&7fukKK)4T<jc_oen
z!jj@V`z=4j*8i$_<*pXVuR3D%qDsPR28JOsNWVoxZc%iQjnJa-@SZ{rF_;<Dn~peA
z)X53%c95yUhH0M0sK+)NAcg1domMgs!x7_r0^NHZ$AFpaD@|-T8Qe2fduiS;z@_d2
ze>nSRp{H~W6*A47#^8=s7J6uD^lW19f>fL_tm!ru$$QEc;xxo5T?_L|Wd*Iux~1AW
zGKPX&7p^P3euK#Sq2YkC9Hj++$LDVc$#&!i@N)3v4OC+KOu#Pxkd!MC?4(gHX)aA4
zGx98}7j{HH__dnZ9b_#BzV}6D;39^%9+NInAT#ROdgJCX9IAjC7viV8<sr5;vh*rr
z)?vbnWBZr6q>e}@_3zv=$g|B*Y*v6@0y0C(>poH?@YJxNh?wzXx)0Q}WbNkFh6I}Q
zt6r`^CUiy>$|dt#04?%!7kZc$DKPw10lXGNjMB4ui#^Jni+L_v=qTzK1#j4%rqrDH
z@>1?3#uZ{UrZJV|JRc@j^KABPmdDV|mq~_Rz<Z_`9!aD%Ycf9cYqc3@`6OGCOI4dj
zj`uN7hcr*|Cx^%dHaU&rBP%W-b{HDfD!@eNE^ltaMFysvv&YD6k0rOVu*V!ER9Ele
zL>YeVZGx1s%)1W@Bv{tdBOHj<Uf;7_bhZewqxtk^?H3<vd8Hjl3A`zbkfU%AeuQTY
z#{2N@diByac8?nLo2%+42a*w3>@kgRsDD7opZ34?4!|#@*TJr`J|9W5U>2qKngBLZ
zc$8`mCSEB7Ntjql#a4APqSfl{j02#g&GA4Ln`9SaclQ`PTDc5t*N{eG2kltaTd}W&
zsgg*oHfk+P7LKDNFO?HZ+=`>!;ZBx1t}87(Oz#IN8*^U8k(r=x(^WT+pNNjCys)2#
z3r6@`OzYK)6(hkE(CKh&$lRoitDo3~T3w+Y8b!>kvdQ}vHZgq-z{I4^gO0TDkZxwJ
z>+5=Kd4X>MPaK3R-+MK_;>EWIFeM4+;3dR~W@nKdEi8bIP~)sD@EYn@A@1L{7gY37
zMuO4#4fvfZ*>2ntXd`+_6e4-S$%2lN1qbLqf)(R2l!wh1vnYQ-9^`^FRIjFFt-BEX
z_UM;1)^IpMC%iK3cbT6VgsO?vQY1htvCT>GJ6(Oct?;}to#rTik;(ReJnxLhL9kjH
zXfQGb;tTbJ`_d(9r>)~NHjWSL4QIhHf^^g1W)0*^P#!A%6x6w&Hjhd|vC2KJ-X4_O
zzn+!=k2#5#-n}A4_M(b>J~L-Gv<3W)JrBMt9i<qyn^u-2MPBd#L(jG^H8Bxxkdu%W
z-en84BQkm!1jQw=0u!)}eyB3P9J>YT9tZrEaVE?Sz|0?$*HHRd6aD&O#9|GFf^^9j
zz5-c4@%zEwGS%snL9!ge#UBm=Rk;n4+*ueqx+J)LfXTNhTK^A%<$ueN{}L=r%>V5u
zVEYgJ1>66Kzi8E-a^4U}-@2gj#&DDlSwH}SyUKB5KB^p^{X01=oaZb=N=ZZnj15$3
z**nme^gG7|un-$wkzTE=FNwae_2P8hdBXl0Dn?|1^mXyO&Yc1Y!2RYt_%9m!$E4L{
zCqJL|tny)bq8fq9&#{-QF`82bTqf1{1dv?NtCjN;CU>igE}dx=N-?`iA=Fw!e^#tP
zz}&7K?t~2e!KERUQJImulLwX`^tu?-vx9*~x62JLhP*LG{Lnu$w$Y@c*PQ=wp5Sm+
z_|XO(XJ*xRnLX3gmVuHIAzb-anS3-Mp&Sd#1?e)Xo4T4tox}FG<+GbkLl=M^dqwXA
z?ZUdv;T*gslDIG^+gYzcO^@!|=Uc(VO_tq>t}*{|uA54H^w(8vDN8G~pc?vel_3tU
zm*3yLl&142asxLrJ*MGfYzvH<s_g6cCVo|$wpqX@vqSWJ#~=$*m1q+ghPy#&48s7|
zG`;4UF_ldeLwFOFyV!DO@O0c;9br5@jC;i-LpZT%eh`6`!a(ypINZmYsIl6%!1%7m
za;gDRTI}0HTQ9Z7TN>LFa9K9p;4}nDqR}O?hxcvcuDQX7#c;=^Hf@;#8NwowNxNU0
zYJ}kvK1AR5`?H)S%0x1v(C69Vrvt|L^+(yi&-VrN=#WYx#W(LR9Ud=3&iaT_!cFZ@
z6G1R#2+tBp3>&49ZLTHilqZogtvoQ*tUCvdapEY;#;ZgDinK9oqTF>@Ig)#j;WayI
zqwHH!SNyA^fuJ7(HVF?QsHfyWZ)@5;$TQ0?oq=^F5+{R1ESx{<I9=uJh|GwIOp(bO
zX)>zGDN@!5C75NEF-+y}3W7LW8UUB$uGzl0=8JuuELPPR<ML^dtR1!9Kn?Hr?Z(Tw
z`<f=;f=yEZFLKeM-J*wjVi^qGf7f%1pOR|-%+RP0O9J?#bs#d?GOPnCLFCSuPyski
zltRpvlhOY3rLnTB`!bs8JQ*sqroF^4<DC-?a=pJf7JRl~#<X(ANc;(*cTPFb*+u-A
zUN&44Jn*U^jY+c)`v_H7_@FTxb4Oi#IHCK~-z9$hI5o<qs+dFBl{eIItq-5+jVDgT
zuZFFR>KHR_y$(j~<3`|voh@vHCTQfu&$7nA4eLS3fq_GLtxt8DCn8QtNV7@SH0M0H
z=yT^%MXbK=v+GE+ULdcJ1g>x())zyzK+m^po_cU`l}g<7Aip|`Td^=kOsl1X9PQ7T
z<1X=KWQfO<2WJ1OOmv)3#)m45Xz`KrG8MQem_d^0+%V+G4vmZ4fNZais_-4-QY(y|
zN4QwpZr2;C-MkcM#3doedR<D{I7EMXv?Rg3|8lFT%LBzhEyAn*=@D?{w97nWoN&x>
zP?OrxnXjsdFT!oN?E~Mem~jua3;gibsk0q%G0Tn;)$vf@v4g1gs_2%sJjWBs-$Z92
zK|^3;9ST;DB2`_#+I}Di{jEW`uX^?2`}9E!dL$+s)S#p2E%te;77%-fh^9HEH<W3K
zu@m|o@*txVybCb`iHdot)OuI2ZJ+3zZRubeCTMylsh|gj^DlPW3}I~^886eAU|BRp
z8UaV5WePQX(H+!vJA1R;f<+50G`Y*GM?alU+#0Yu5&^e4$kNs|yU}JF-zZt+H?Oa(
z^J~5klK0k|*cTvlFPpDDG+sw2KMf#pSD_HOv4JB*8qfIxjgL<aPC!O>BgZg4{L0hq
zuo(@rIr1i~*;nseBM|^^UnL7+N@PV`Io!DaJ%Vk_9S&jpD;gtEm)wfI<%+VYs!1%_
zUJo=ZnZAms*w`jg6&AJ9MKbkq5O1m$`t8}U#iZA6;k6Qi{-#WL!U8@?-?@|k_}@#(
zX~ZSAby}<#m&`b$OB+<|3|gmI&T?8~df1%iSKq|X-M+(M{L6YW_;;Vlg>he~YkZAs
zAB%DZai_2fsIC(03z&2WJxV3yhpW%3`^dGzcw!|5@4nHo1(Bx3fO%|IBa&o3#iUUB
zXvy4{AnSoVv~THI2?u1@c16e7McDx`HOX<F37lo$gH#Cmv}wwWVD{*z(|nSQJ=zt6
z?Jb?Pl)@5Ple-mV4@jiWUUsva6xo`M>fx?n{^OII%CTorD}D;j^IdMK%BiA`K2-t=
zh5SUt(&*z8*A(QCBn5Zt0US)i0mqGPv|DyyM~Y)z5C01fEtz?{YP40x!|05Z<LSk6
zA(5CZ61xR(T%*tw7Yy$Nus-IK5|{|V*_p0LP88D(d`@TG{q@7B%-wogR@ki;TE5PE
z!=^xi1{eh56I@Bw$SL1~<t=I(Y<z>YJtmZ(-v`Xp>P4BQ&c5~#?IY+6i1+>ht&DI6
zaFv4Bri{Hb*M<*^lAtiD{$?>7O69}?B_pP~Yue5LGGSZU_$t_9QPx2)iPrj-GGS|`
zJH<bX+n6usVRJq{GjDcju@di;c<G$%CTZTCEmt@KfdV(YfY!4p#$F-nI!(+1ls!h&
zxE#a}7R;%vIXz%CV&J;rYVxbCoq5HGn)N4oMie_sNiA2|T<=$)0X<6k;9s(YS2F~=
zh&aJuewrLd5d9-YKtX@%kz`gsH4OpTSFASMQh>;(-W7kcy7nKH*_#<pT#d%VKWoLQ
zp(#_;aQU~_Z+F=8zNGq*ed708PZuGb4o&%a`f_BUI-#C3l?WvGpB)N*=92CxYJ$_U
zGYbHt@J7~{(mo!qQ*)TDUY?B2f<g6F6t-m)-pW4-UzYTLJkcT5X|zW%B!x<vkZMWS
z*)z&c;o+z&C+HT=R3QyCh6ywbEq25FuX4INnKy(u!?UW>cR5QR@=kyI`#UPf9$pt_
zf#bL|Q84CYdV<i5xt-RF<dzG$Jy|(f^ExdDWGa(S-0B`r7E(vC-Ce}+m~eBU_3E8p
zjxPk*?o$<<W5tl}N>aYCC({{Zw-uk+swIRyYCytr(U)`XDJS5WWE318B9+uIU?icq
zjqld6K{uD+``8YF?R7t;)4iGTaUouhPEMWH7&wC3u|BKc#msSRA+*<c&H3))<wd2d
zGGmNo)Z?wHAI`x)k5qx#`bk_e<SAZR4vAcxHtuei5x8#LuhI93;AD&AeJPuLud`oq
z2%<&_gt<?QCEkbEaHrVBc79wja70o6sBLxpP}G^RWckgnZW!ltcv+Z(h|XvaqzbRS
z1G3x|I5Q)+CTc|mYT=R1eWXCj2;>Zi4F$d8G7Lx!3Cm@f{ia#i@L&K+{m_?s-vGG|
z<-xoF1D3f~lmZ~*?_)T%wHsfZ_);0xu3Q}XdZxjIx|{1~@y+bOU%~ZJ`?j8GA53uL
zuZ64{Vq<3N0uk}J6n3_U^oKb87s>9)@tC>s+iDrjmc+W;1W&e5qy}Nx=}sn+#CaXn
zI$c~e7B6&3oKqUHe&vbc&kmrPgMZ79JJMN*l-v&rzo82&m7v$1%&PDcGVMDA>X>{!
z;v{8tb||}Pu?omZd}0#wH@FQL7#{5OYr_@>Cx1CcX$Z~P7;q~qv@+1^iQq<#_-}z4
zGvSFYC^b@=Wqq}(^H-svSoWD}M<`!RP)e8@3;P=g#jzFr8Et^&F(2Fk5hjxsBO8}O
zf%p5ROtvfne&I>~tF<rQSDixXJ<@2QA~W*UQekb`FE?G(gzKea)&^<3tT{bo1T$vI
zegVcj2e>HyE2bH>>;v)MVRR9x6WQxMdJBB!A(aTO$@R=?!iM<ky}e#RO29i8sn7IJ
zR9uKZ>*^V>w3GSH1zY@-KtcsT(m(F=!lNhSLZGWz*d>3WXW|Je-ckLWQue{r8C5ZB
z?IkVC{~^gC!`{+b5`{@KiJP!b@Co`aq26K6Wwd2=aTfx4x$d-^!68L+(FFw$-XdUs
zuT4So0ADrumpfD?-mB@)r!Ks8{k`SfArTjpy+~|dNrZ{hA=#ZOJoOIBiFHDc;H??5
ze9Wh895g>_1qQtO=~_jZl;q7oIm1V<5(svy1jqDaYp75AX8`}pRyMW^PnYC_fn$f3
zZ+ODUaaRimdei|?&j4`VQlFYv+<w5Hz2^2Zl`|*qlwk7v7l6u;%k;Q!HhvaD&)9tu
z_uh9MwEt`h#Bq^k=R4qcqbT_#NxDq?feyu4JyzI|F6<T~@cg|ctE}aM%v3DEfh-T)
z;YcrBxDBHv_*9VSgTrvHdkRru8;gSJ<+BK!K;P9@8%SQqM<J(uG={Cms&d)`MYEU4
zhp0!dGa2%`)CvSH|D9*tFxJ|-@!TwV%s#b!%i_Vk{qM2I*cj|Nu*iY$agNjEFOnIH
z<I{<$+d3{(6*=1Jn49{^<0%S_(E;+Ew&o|9JoCL*9-*%Eask!H$pXJtdYuOtq__oV
zRA5&vPXy;1`&w!|kK>|T{SyMOc8f$r86P!Ngc$~?otRXiLx<L=BTQ}arpP@QsM~1<
z87BER2k1xWkS&X2WU2xv%{r~51Jo|EE(hamxE?&C>nkWJc1yqrvKvltbuh<HbG)NN
zdNb=VZUBO7m9j6PO7j823B}J~-w!A_85Qh*n9}|a-^#-B{{vjv{{!I4{yzd-Xa22~
zH~+u2GE2EN1i4@Uq3^?_4q7RDn+Z*)r3y8C<O1VyLNlp^_7#gQKG{u%{bvHMbQ8x~
z6=~_vUy-7P*RGF?dM1Iy3})nm{2y9)45m)N>sip6L*x%7{2|~X8m`w(Pq+KK<aXfc
zdXUao)Tt<ha5X%-qQ^k*2QQ}ICyP9C7OdMzPhWJVY;C`IHQ!Y;S1EIJlh1;<R9n*d
z%Ms}dbAmwQaA<+GBfu=_UbSo0_+#+vB;1<v`B1^jWzxp?tkNN8fcYr>Ys{X@U=t?h
zje|XCj1|c=x#V?LZV5lU%Fg>fEG1sfzana5RMq2S!ybHeU(@U#QzE-s|Ly)Y1|whk
z;JT?8&^mqdQig|T#&o1L{Rs*X(@*w4tva@slV!V<YrmzH*>yZfD&)z0Xb#-rUFHsG
z(uL<SU%c1Te~Es=nPrP*TVu2@7V;{x6|HkG;Q+;24;>*bq>g<WB$7v~;{g>Kh%UCc
zFcJj@GK~s_^bz5XCiAK|&vGquxcFd6#sXy=!_)i4#mQwR9eP8=yV3SA`mS-P;1Ha;
zq`em)I-WS?%bYYXTY^u->u()zkhUx3;QfdFiDZpGjF-?sz|Z&VduzRn5+kdMHaGC(
zPmlHcz#*BH$Kl^h6Cd8?Hz1}k#UTqJ__sT#pQ{OY+}XXQe|^cyY+y+P4&wYoloYZU
zEshoywZwlP!ePX<(*DZTzo;SHrj~<r+slX33I2lrEY|DkG6X`yC}cE(9wXye5a}b|
zKwDI`XpE5ut@$}q9hexJg#-d-za&Bswq!g&$tr>tWKdCrFKn4+RB+?-N1*6@?{EUf
zO8+Hpg0<bTDNjQtH+oZDCR#wdE|sNBMbUub6LD(ffDJUCQdV+kO{ms4t_eOBK%id-
z48I%m>4;*~Fk=r+5fM04^r?!l%_ykY5*}=2$RIk50Y%JQ&y^`u<yUKLhQ8V9bbV4X
z8>o#sOoX(Mn>kW%e^V8^Wjv%N&Xo@ok?L$j8z3fpe3(llw!vD4nUkC$;pfk|g50~t
zQ}yHoNgdolu<qZ#wR;2_aP|xe(KbBFB8LS->U;yEU$vCTz>7c8ZZpdwc&@0~D4p9(
zZuqYRHT_0iSFx5X+MjNG<+YfcDZ#s@tXcX<+QySHAbnyF$gW@tEJjCS5muQ3NTyFG
z5S-csjW2Db$}L*NyD>41aMn<80X4%~7AWR5tA&QV*yohoj^k2BxlL33N-%2nFgVj1
zbM}6l3og`52YnG1xt|9FtOT#LyN8@*9r#$1+_gl60z~#4J;Nk>)k{SX;_zscOhB~(
z;sGDAM09L%Tt%@Y<#T|!RdIZmNF9N^ML8P5M75!j`esPvjx<iNX4|)&9Kf|#M!Xy-
zo;1w`*Zs7el?7Dbgboi0P9OjZlr}I9NUpU2f|BLEd<eXJctC-M@<)#;*&gp98p=^<
zNl^i4xl39$@a7sDq_x)}yA9eUzZ~IBVgRMRSMJC&7POb?=67~T3Boaw37^iU%AlJf
zdJ^dc#!y+{6e+YTb_<^9f;jN75<=&b612&%k>@}Dvd#1*hQW>I=?nN;9^?9qlP0_Z
zJpWarr{hxX%rYZ$0ThmrZ0VpP8-7$?9)D>R<Yj38ixd5pnXq6nJaH9*k!BnrFLI4o
zQ!au&%h+Jv|0N|)&U}s$xKtp*%tu{aIy;~p80DEc+L$(a#I8DjF-MGGp`Hw_VSlGG
zYYPE+X=RC^j{i5oguRsq(mAX*1{xK>8p!tLrB4{|3_c;0P6zFF6;{fsQ?=3UKThzm
zv2OU0sN@0=3B_p**ZCwCugn%5%e(~lGko6zU#mvNt33J9dk)G#^p(~{`Z#Z9p44D@
zTqv};*dDd83Git!BOZN0OUSd^`sk*zS#sAPxB;IeuPy{4X$V4d%};u{VZRYbHqrM5
zmJ}j=GDUe$Tx5U(vJ4<(l3;r^0TX+q2AV;Jw)%-NL{5>@<QxH8OatB_P-@YX_x9sX
zQ%oh(ljm1-loU2`pC<hx?mo$I*q$wCHC*77HBV4>+3{qK%pJ=!tm1Nlv5>KKiaK=$
zRc&^wtA{3xlJ`j;0yL)#Njb(`%Sdi|QsN?3t9I1ptw2BqTAuxLmL0?3Mlmq%s!o^e
zAOB*77)pt7A1Yxg&}?d)6V7)LMhmjF<rTMfT_I~@{PHziJPQ<ni-S%3NX$_ZzM2`t
z2ep<C4o^q(9B*_l_OA;9n^grKoV<@I(ZX(KMTPU+D1bdbZcBD$U)mDAFvOevjVD@s
z+}o$nJzGgo&EHFQm06$Qn@j*`e`u7A!-++dUp^8|1S@1iiLAWf*HLNL&pe9Vm_cen
zoqrkK!UtG!u=@nKXV{#()AI>)gfSr|j6(Obp*bua_o}B@A=Tu;b^UAWV?rHAr!O@S
zaR(3zAA-$dY3D5ikr5=I;8$(e2zjyB>pq(pCL<Ce1j-wd8(Q=bWnBeL7-VkC#jp?j
z7UT@gzPoC9JdfdGnFjf0+s{?@$w?KC|9Y_~U6L0u$ejt9EaR1I$=975Bd1#|H(4~M
zy%#|pqY1Pn*K*A$^50k*ZlwA3byW!sQY{kS_u`vm{q$4_9Tiy}aJ{G`)zx!V!5S<4
zZAvxWs4U0L^0?fewbHEEIrPhcLGZ}<C5J_Wn<-rm*{68-w!)w3yW`+0s<nm!@1u59
zG|X2gyIhZQs$w#4mC~OPLg++#CndYElEYxMh9#ci6zQU$<8gcjMJPy5pdQ<m-9d7>
zA1dGrB6U9Z>{y3sU=&e@88(5PK?wT@u7ql+qRF*3MO%d7!9xm*HW#kj-?Ga#+u%k%
z*NGVHoLk^{C=ZrGawW@`D?d!o$(mfa(R4e+D`(D;ka*O~Vtv#dt(g*MZmAI<7_6sh
zDgNj^n`<SAb;SiQURSf(e|c?AXcYaql-+5~sbWi&@%!1CgH-WBfdhjsMVFXNeNlBj
z2e7bgecydk4S)dkvZj{I2RH8DVj90-^pos+#BEF=Z?5FXfE>PL8^-)+MY2AX>w#(J
zJW#yd!{7Co-rqIK7@@&H4&Bkj;m$lRz;iVj3CvHn%=lizP@yM(?qW;{nX9qV*Bcgv
zqAs2E|1JAD+~lxlmOdu-H+yrV6FgN*KYx0aA{~qBQI6j>%IHC6gSTFtt#}7p>>Hz$
zz~rpl8Ls<i5}#6!LgjvxzVrJJ&*T-z(HalmDewqJkVG5v?Zf^G890JwhpW)**X|Fa
zUY8+Td?s%Bb?UD-Q!0B>ey|DB#-ApONqmN#W~LWMFW?M2xIp5aTx;bks3MH5J;IxH
z43MGSe$Hv`;68Nu5!v)pMZ>|;k2)I!^bo$bHFzk5gZlw>^%xDfgHm7&eYDRfzFk+K
zx)z)EdEh-iSlLlFe$fHj4dSy66^#ITV)t#I+xK6Odz^nx;(J#@+>PaDw4dLHaG`SJ
zsz1qt0T%0|!ULB75(m~YA<<h!zRl8xGt2H=jqK!Is+Jdn{cT6pD{?5t7vW+4==IGT
zA$U1mq@LLMTiAzxxnkM9`{|@Juxdib8hpM~Uvi*jYP!&^aEGE-`_)=uR*?IllExgb
zbBMF8aiudUTWFm+27OdHd6W0y)R&7lkllX|PodA+#vP7+sj`kKld@v{KJ1#a(48{(
zf<%q%gL^8d%|>qWaDo8WlzhU8OX&25M!AoIeo^V41823NS!|#UJ2wnK-V{4Tudf(n
zK+;udm9_cpm%92ya=TK<XX8;>w9^Fzh?J(42&NNSw?{OGnOU5kMRzZYUOhB25IW(@
z!2Q!+<DHUXW{GD#?MZ3D-nZ5f;stixG4)@qi8G5lB)RJ>v1rEr;@rbNjorPqlNkP2
zskoV}IoC5r{6nLQw5bG*x_WT7n~+?`YO5ccC9n=P!p{Ee3iMTrT6a65J3Kp|xddse
z%YY-aa#fZ&`y$_446Os^aXp=|Gzr38Go2hmQ=E!E6?CfYW?RoeP|{Z%e(1gx6CPlv
zmUTvSk=d!!EssMN;2}kMLksHNf60Y|ywc1zcOMtg0z*4}Kw|l}T>tN2@n7S@e*vY8
z?Emc=X8#XBDf|BjDDBabaoHG0>V43dwi}>!LVxH7nxE0<QIqEaXho;u9;U#M5+N}`
zI|3^<&31ANko_=iJ%9-+r|G4pz_&z>$_n&-cfCPIQjsuyugyLAqbGl?5wMi?kv;#*
zXQ@wb2A8H=ZO#`cc{TLnU}0cNa!!(#O8d}S;+;<a2@w&bFBd+{1dBW}M_-Qi4vqK!
zP5`vCWL0EjpZtppo(iEQuvi$QeB-3(!<)o5Fw_$6l#bD?0mrw;ulDaD`%QIj(kN1>
zvc(y^s{FBzP;KVQ1QHVnHiLqyJua$5G$Blh3W)W0upf8M8)Hq25v$kl`_1z+c0U(v
zBIG#G(H3a_ivIVm4TxkNA|9h4Rrm?4m|5Q0<;(6-b0!o~b%eUg$FGDvNQN4v{Gjbz
z(xAqj%xX$R$K7npqoh(MNV-+x^}EhWO2~cY-!$r8!m@qQE~Wr47y8Ffqzb>+D*NCI
z{d)~gc4a*}gxt!S;j{RRf3I`vuM13K@I5hfSQG1FSY7s(lYz?ZJfS*s8M91nDHEFd
zb0bj?0=mrJdJGp91a-mmVj&pJO-rDdPSUj}C##)-eceQMw!ydbv)D&x)s2*r!+7uI
z6#BQwM0KQ+Zji~<*FrB)e$3Tg26bf*F7ZO~oODy|b-URr19>@>s+y_#`@FiG&XWQK
z{$z#nS-(hR<7wmi)p(oZx0Gvw3Y7D?ZMynB@ILluvPzlq^_Pj+JYD!u9W@7eQ%W~L
zWQ&4Yq>FkaH*ln@KFfPQD5mV&7e^fAYz1%9?WuKBcdwFdVOAuZAnM6NuO&)pHn|`@
z(hj=PeO5X0PZXpIi^X|%W98bTD25$gZ0NXhl`_(1HZ@6E@_^@I5Q8$f1G9k#jbtuY
zGV7ezuYtA44Jp2<9Oq1~I}C5~u?JQ5dr*8FVSJh_XEUb6(McZT8@vG%Ss4S4S<&p{
z?P)7->UoV&O`LG4Tk4nZD0vj1ynhj_$gY#Gnv{xZM{84C5YS}C2J@SQ{40)IkD`!b
zl3C{Rr0-4JcmQi%48^v=E$H5X@SL(pA&)#S*S^@gE-qGJ>}FDHb<kH+)(33~IMipZ
zVZv&PCaS&_MKP!X%@4gsj)q^D8~kt#$IL=c(~*z4@#wC}v~gQ%9-|kE>Y#}8^c6T8
z(44KA0Sw-^Yw?5&nc)*^?i%Es1zaOe)WXh%66MgN#!zwh8POU$#@=WT;H<J={$F4~
z2YTTBH&ON=bc?V$f_aLLUqMu!;H|w}*8}wmtLwDK&6m9F&Sg1T^GTCjA(y?jt;Dlr
zR7d<6L~YACGBuQnop8TIe$=O5Zi;#t_VNRQf((FD<lK&dR5KX@HY`<IT_C`%8ys^0
z`a=~LOagV1(0stIxcQk-*dI_^drld@X|11s){N4#a<T-`ZZ}(3%)PNix^^E594@i2
zufRmvI-YbPvn_p%`5tNxc|V(h#Qu;^^>P|sutCzxRy6FI#N7p{)@YB9&n346yB>EQ
zc=zXY4Ahh})lnUHA?aJ1#_1`jtF(lH7<anruen|X6DdLWw&d-mS5H<8f(%q!&H5!>
z#=V2&4hT0nnW?i`iC|OR#h@4f1#FiJlI6Qurj4KA{t7GI&fm^HLL}E5$H^~u40uw!
zCBqSPZsCT{O@X|00QmpG24VnF;+NZ8XtY~MPhM@z`nu4N=d#0lMK#6>-}I-1_{;?l
z;Xn$yMIs;zQ%cg{P1op@-eci{#)Pbx6`7u72zZI$_*Yk}YS$HQCJ>kM#(2loDO>`I
z>#OoC)_RdQBn0CW>;+5#a?^WZJ+Ih*0Zap@ihY>3PX-H3{CG?-It9*ZM<p~&JxdwQ
zhABE_hso^Ej8<{G;GJg5s)FwePgKsC+UY2Tbos&%^k=Yr0b%Ink7|dngdZDwKddk-
zQ+>S8=^EqKWge_h_+aDMknQ7|UZD#CCd;h-ah!8Ow&1)|p5>HVC)I_UR2Gv4xP_wx
zD&5DeMEt45(sOW)9PoxNXS<w+bq`$J5bZ=WE$LxhprjU5BT=g2%pc`+-B5BUS&^V^
z;`9Z*8=}EMs(2OzB&=Th(P~D1pyVWfbEE#Ml8ZY#$J!IV?LwNNjDjuAv}j^ZM_~l6
zb41uOgrP?@VYNYtes3H(PNqL6CU%$@tzwwc(g^cyMYB(5i@zp8hyd4NufX3fO8#|;
zGN^8;cLH`t!O%!eU|pKy;Ixh5Tnetq!jET8n?Ksu?B44Y&&zc{_Uj#gDJH<SGsi1;
zg1g_%GOj@3KmBV)$EA$AnG(P4@-(a7+6^Y^4F}zq1vkgbPNUTpfRRbl5M9$-LDa9?
za0SZLN;L2(NL3Fx*-k(opSn*;ML4H@3xoOcN!~NxxJ#IhDjx+;%?%QX`QP7S%F{TB
z7*=`G{R6TP2kl%!4A-5T=vSW9y@~I@SGn;_xz~UN31Iq9O)y52tZJbKjH+aOSGo5>
z6=l8Q&|#&Vty*|-tTRn29I_6qD(<Y)oGmBeFUx}|lr!h+x3kHX$_0SOk6tB77Y<6|
zP#c<;7!Z;+VI#@6O}&`A4zMX=qzewMv<6T~GH_N&+Mz_aYKqFX`QRoNgar#vj1tk%
z5Q3kx70w_Z-Fy64__O6foq>okqVSo`8RtP-urx^sidjym&ZYGHyiqwSFG#uf(doi8
zg}f%_FBuxEC^1V4w{4dEa`I7e(~+wz6&;KcI5iw;b$|B|r1|j%tizB%s1CBkaL)Q_
zv?pJA_5zLOc&-l5O{0^LZP_{*PlZkx1GSArq{EkmgHNHh*rF?b-~1IDIv;n4{kF>h
zngxl+P#33_vPz4)%A=n(c2MA5&ysr)gGm!cZ5CquVbcSvzPX!vVzvZU*)dcy1z=l}
zFL$(NJ~}mYIGdUEKq;>zD&ncxrHLG%X%ALz@M?Rb=PNg}MAD)v&e=*b)5E$@kWYaL
zqjtRikkmp3<0p(^z<ZN?-{A#sLk;!{*=X~e<{poDZu4j`q01XE&JF~CzoDiPz?MZV
zu{Ow*9!{7~j~s#1$^-^<JO)CuzsS6(Ich*uro4-V_F$zKb4v_<&pYI}VKKrt$N%#G
z0}yo8N0w*qgYnZ-Fo*A8f~oJyB$-=oW`WF^`Bae7bmB3Lc6Tc&u&6TaKAndT4BBX!
z*)v2MKppY{3(B9}?}s_~%9RW#$97{v;jf3!#ezatEVlloV4=KK{ZdPd5rAe~#EH{5
z7`Wf>TypF4GJMbNAUIvhVaR4dzFI`G$=X`J&Q@J@lQ8`++#QsQ@D!MA;LAlX4d*L4
zXLcV@?t<zNsB=GX-1{}^e*|{bw8@L#zqQ6UE~N{sf6&iJADBybbn;9Fb4YF6aM(#z
zUW@5E1&I^WE-n<Ed0OY;P_}`68g^&M-{$JW7O-Abr-ZQTz&`Wd!Emunj`@vP>o#d;
zGrCh4`7x4N9IHBw(T|8Mlzcj4<J`QR_7T+IqdFK&oBA&vx|9Fr%K4e+^9uuH>j>>X
zh}HjtxG}S{{CBA+`+q>(IQ~b7+p^|XT(&rB?~BSbS=#=@=U@Urd`-O)xphXnXH69;
z+M<UQ0=GZ=5bs&-J&w=95GeS{R;5z;2xen?`t5CY&Ld1AL`fdgzw3t8fU!x>SKIL=
z#nr${UcU~5X0ufuV{S*RqoG%)C7d%7EHZ`o!WSt8Vd^QL5bSwGb@DIe-^Oj)AY--7
z{XY*LjRJNR@R^pYoxiMVSharZgWZ6B`Ahk)ZGa#+7FR;K0b)Dh5LWY>$$KaqlJ^rX
z9Tzv*2lh0V@ILIDwRP6va)#isZ8lq!xl5E2Q(>Jp<ZjvjMJvWz;!2QH(lqIh#xya$
z?j2=U9}!&SOZ?g$kAgXYOD%N9*CX4NS1TeGg5#IPKu(#Moz32LX+wo@9i^tkrdaSI
zAzhw!T`A%{JKVBhvr5{?B}?7XXloNwNe($QB*R?Yq=1u34%*aquDA-@92oM`V%rL<
z`K#R28*Z`%%BfRW!K1TA+=>I)sjf;z<ZY3&zfn)P6$j+f7*X*rT0?JwPhC7TU^)D}
zq4^1n6b~5I5A~0;$2d$98b!#E{1sUrRl8Q!C4bA?-QH?x0AYh<P?~uW;W29v?<p#0
z&8g_Uw51#wH>UDIn;yYEZ)I<<qtpKOLxH5TPmX9%c<y1B5a+}Pp}<lsX!kfj9xX7;
z%>sd{Z;DZ^`8I{rZHJAmo7N|bGJ0Byhl(ZZaxaMe)UkikDU+K2)7rm=qepmRGs*)b
zQR*L?_7}llKwHb%>1D*&k(~GUlfB!z2m=<&s*r3+jr<^H6nH8!=a^9q5(TqS@#(-F
zAqEd_Ke4C0!2CMPA0-(POiLO3p|iprS4nzR{duEtGVfpgSCcIlfy&gskZ%1gMn?U)
z4qoAE*xe`G8bUX%X%0xeIRd|e&LDYUC~It4=$3$|c-KI~N<v+ikG}XPs=U$huwtXm
zQ|*#$HS%eyu(apzOH8{L-;40w-0?>nZ?F{Vcuos~+i$|$p=-kmkWNv*?REB$*Y#~%
zex1Uyum0`P@LQg}vJlbMYx~yKcgBYAxidg-JN_{;LQvMw6~;UWgwAw2{EY&1lMr4i
zn1Y6ov{eWL#JFC(Wj7k4zL6`JT|+CWZ3g6#CTo0z`zM1TmuV5bUdf?`K8qSDprKsT
z{2!F25L@ApUqX=1)F6Pu++e7!eN0pCPqv@n%r;N@dIScRk*63+w$@s6gz0Hrz?9-L
z(udZH<m9}bPI~_5B$iFv+TyZJRA*8o_!duxWx~mxP;O2o3X!qNGCx!Q-`zq_<3!bo
z4+~QeYRyy)XWV;qKtk*&(r{adNL+-bS68hAU8Rgr_23a@@iAJ&i|Y$<Dz-MeMsoi7
z#B!?=tOPrBs0O`Al|cI4n~GI*HDlMFbv}?Hhbq6`fBlTYUI;5jc{>-YS?CNVXJY-y
zcHPTJO@@Asc~MePGBi<Nk&Dg=H>C5{9riGycTx(#V?I%a04MJ`I4qGjh|8dBsev4}
zwE%US5F=v!4xG23=>8N@2r?UdXlIL)bF7H!4oNgMHJY^A2ZEz%`O_A(gAkQ+&Ewlw
zayUkIv(C*c%T4=U4F(V5*T)C#jrxzuHowXeSqaZ0^=V5>Dc&0!W`vv&9D(iWog0kx
zqwSw4sihfLUwhymv#J#VOErpbT+XHOtOzBPA}Zb@l=Ig*x99)<%5nt-&OrxZ9x7$+
ztZkY>51{?17FLeG_sRMGUyPkommo^kZPT`G+qP|2+P0mQwr$&XW~FW0wtcI6jK2Nw
zornGtu_Jb@IoI{@ZZe_&JOtJ=JA=Xo)&?&wdq8GN(Tj=BMh96oCKsIjqkp{-sL@Dd
zO#uk>uANu#7;@UZP8DFP>+UNU^~dfMc9_Sz!X1g$H$F_15u2%kjVVT82VI#wOP{CR
z!sQ%ZG2kC5HRgt}Jt*6pd26xjEU+VztORAwK936VbiyL?uImdMIj&i=k(VCdBtG6K
zxWU9|sMKI<j8-29gZj7lUvqPr0Ho`gUXeT%2`Uh0oj7bR+TUb^F1$BS)Ka>wDoH6r
z2hR$ESFTocTFkZxj8V~ZZ}x!A&<=dCBec>C5MNCu0oj!;z!dgbPn*yH4Xy-O?G6P^
z@8j=hTT6G;xqN7d9J}DnyM@R=<uiXUtw8ibUj%XNJUR*qS;(;b<sx9mz7ZofMN}$p
zm6m_MIGkG0Taf`~6&FAdCWiddp+=%J)Qfp_WT^$lhPCiZVb4z7B`%T#wvDs?m2|3e
za*cVjdreeuQ%*t1dUU6tWOkk0_&(2Y8{}&arF$s6N`jUK|2$Ml9<?jbV%?^tyFodr
zueO<bCu_g79&(ToHY-q8ifmT~Hem~tM?847{5;a4so2)uQMoLej^_yBB&|s8eGtwj
zNmgcQvP&($uV)M895;Rx;RL3Rf!pONSrc%5ALMUZq2DiJ&$$p_D7U}ld57)&4Q5at
z2mODi?Z0Q}zg9zx91Q<8v$OvL%EbOZp-j~p6MxGXP_{m(!)&Pl8Kol<C|p)#8c*}!
zn;1<K;efPCjAS3}MLBK14fs6iBo&j6$gW_(G%@P04>niY)xSd^O2STi_ZrL4LAGdn
zXv^NvVDUwx>C_{OQ?yVc)%DtZ>(=S2kVJWecw*)%bV06!+uot0{Iz2+CmJzG)G|e9
zX)>FAAJ3()o0zkTNE&7=vi5o8X3yIodcek35Pa4r#HeR!`V})Y7!5)2YGO_FE@#2#
za72oOr|U&g7GLw8a}6|U)clp=`aBAPQydZu(F#eWn^$FT1)m#)D;dbs>Nw!GwR?J@
zezd>%7-0&eu`nyufo9#RTd?;;3JpQJj@zF+k#Qy%q$Fk^heP^tMbpfJ;M!b^g}OD=
zkz5>iBuO)M2?H#F3wOftPzwaD!r`QBXIrjjPoA;*#mPO}tHwJnCywFdiI@%UFd9Mh
zOE{QqYv5gIJ4RN(C~@!D3sOooBh9%8lzqTc=2r6f%C-s2$L+ww^Nc$i>ht84EOD%S
z%y3cOPpb6@AeW8V8xt60w1;k1yjYom<VR4zue32OGwT_9KR&k4=`q8d=WyGa&Dop=
z@UkxzJA=dhMOJLc&FJPq%$!B^wT_>WF8>OuD46ujS!Ym;AdiW&swp~4XPZ8Htg#jI
zT{hH|SY{4C$>MeZWhIcyY+QZ`g_TZSR4*IW8Z`xLz%6Y9M==*69we%HQhO<?otLX&
z9q$%tPp%v^XTUH7Gj#xd9oaeshWOC#uoNm{8OeQp0#Y!ubmuTLs~9Bc1JR)BC#DxG
zV*rz+0aN6aX6_P~QF8}dVg5GGA$70^cW0q_+<$%sCAf|qMjD7;28QSZWOQrhb~hIz
za-7YGzElC6D)uK4Erk>qyY6orBgTU{_@<QckC4a#_45`n0Y*HP17H)FwU@YB7j71m
z-RLyOIJP)s61K*PldE6z?_Wo-dBP|mm*lXRa8|Nn?>7@I#u4w;S|ktQSuP;v|IstL
zeoD>S)8Mvm@8b-gTGzai@p|Iwbvg!&8O0%!t!I`2DP?h$3k?s=MqRsfx5qKNqiD@}
z1jxIcoGbr+-h>R?bWCX<6(N^7pej1iXFnm*_hcgaMl3hsz^?}6W$`JU@Y8*Rkch7P
zZ1;2*4p^Tk_{1(b=&4$Fft0p_hn5~Qv`_+yh8vraduK4uoC3wNaCDyBHT0MLb|x)E
z8G-vbb)%2?h&!L#rHR|-=iszE-^7DXoW^5znN}Y&4&>ij=U+oWF~sV8(6bIB4SthH
z+G*N+sp^jkQnFDLTCt{qmMw#Q3@|cWFz>^n#HKl*-tk8<vu!><FtO1XB>kHj0}6M!
zh^Zf>a>#-MEpSgO04FfBV;i{^!zR2L7b<LQi|=vL+P(9tPE@|6>lawRg3%)_hvzPM
z4q1FJnEkMm!$*AlT4mJ*siEeoHIJYqCBEBtGZ^g09t*VbaZF{@dl6nr{jeN;lTJi4
z(OB=BVwR>I43LFgy$MbdXhi2a9}eY9k}S~iXico!wobTcX>TN*apYh#%c?#K%|=!>
z^DqY-Elx<L$piNl+P$vgAiouHTbn(&O3EeLiRW+Q77&mRpjY`*2HG|6qtUdKZ_6U!
zR4X*p8Y-8_zb>KbOlnPpi}9)K%7xR8Oc+O%p9Ka_I*BxygjV-*;~+s?q*L017hx#0
z{Jj(Chs2opA!jRCLs@jz*f4UswLBd%LUQ5rQ%1f_QU~6DdjtuJgfY5^EAdN_(rw<H
zocwIU;ga*B03UgjHGIB)g#bnQ(nwSFy+V;Y{{T&Nh3b_26=@sK-vJ{0Vb|OawsVYF
zjFB`^q><(&AVU-AKnkA&fAdyeXpA$;;Id;4-z>f5{?Q}E@1Yt1I3?<$m6I?Cr;~(t
z6p~*o-H-4hPZ(d``wukc3$m9(mZwzsgR!))QcJ$d!<T%2*2A(}XekiL^}cTneTh3W
zfDE}Y1TVL19+px|kfo4p;+p&Vi-`KNtv6=iehUEBb9{9rUqj5)gYx^}oG)9WeU=Pe
z!OGKP1Ic%i=W|WyR8)CQYiD-tk+<928D9@%4Nc1))spk=_0?xJ(H^p~y~|6==V2Kb
zyHlY<(}0Za`o6*dEfd}z<#HMZuwgUX;|$p7mw>*l;H1!M3`mM8QdhUg%8=YLP=FcE
zKw#9!U-V^Bqf3jHZ(xVNM#qfxA4c1Mpch6q*8f5;?Ee70u>Vic%aFQs>;@Y`&xiUg
z8fG2F9cg&GOFVCpgaXS&rZSCrx^88q`lE)~1NMC(Hwme9%F0=Rx#BB<KhE?+rroff
zqCX_mWbF^x8<7BfWG%FzyyB0fqjRI~tC(dr&9-mM<dA2teJn%-MFfZVh4)^v{NG1p
z9>^hysmw4A$#Q3~`s>iLcJ~)e=n5m6fxs5;9$|`h-jl<g&)r}u>3j8ju!n$QfCWXC
zhCXP{b&N$O&MdjAGZnK?>fbQnOu_dWzw5-?J_rOLBuy~leLDo>!Khh2;)Z*!bLGVc
zw(8}qCnYcr!~U1!!=3Bf$oopTBf<-0bNsG?BlcAFZ-w)D41=_^0pos%!O3tZ!-Ky?
z#KgPqIG&<bs_P0ABP3BDlm2|EJ;LjGYBtQ#mO4uvbD|pr!Hx%n>sauyp(rwJ$#V1f
zSV8av6<X1YEjS63Rla~)Yk7Ll@3|~oISr7yq5%Y{eExui?39uC@H*9Q5~Ma->k;o!
zP&mPJl&H^=P86Mgn=W?6R87ja4Vw7;UzSZE^4RV!U8*BNnrw2T-z5#Sr#KJGYO{P?
zb+xb#2$CAmCB~~Jpp($(&5;oC@{Fjx^2G-o8H}Bx&7i!8NznihkoH$2wp=`F&QILL
z;t~j5?PMlI_#wTvWPg<o4L}{~EC^YeiV6K5Q0Bq5Q>O>)5=0o%)znOSWr?^=GoMj;
ziztsyMYER-dI8wW7(wAi5J^jz8>P}wf{>LuMty=1Wxz>LUMbrb1g38y-KVB{lL|rf
z7KNuf=W>}u4HhtTy?5M*z6Dy%j`DI@*k(U_@qh^E6a3T@MeM>Da=Bs8`8EXrrbD6X
zlm`qvL192+S4X9K8C_a+!&fP9vZa%$Gyh%m(xGaxtSzpD|1fA8Hiog%X(|)~0>GmE
ziDEsAq=*xDp^rWFMu3e0hpQbZcKxwqtehJk6{p<uRYKk~=T3571pJ!|ujx#UfMdd_
z{WoPEwlqo^O@rB@v#RRyRk*DJ*9@tNz~-J+K^|b-7($)f+OC2tA-M@=#s$&GpuXLt
zuV=*UtRe$jo^Z`wh)!Rs(X{brEh}MR+MIv%fW-W2!>wl;sAfhf?Rx4{+D-D__y`Mi
zE2T^lREcC^z>XV4kf}Iz(*i@U8`zuzXc@M>H7`On<GaJ2YTp^d^mbM<`5*71<=z8b
z^Ol0@+#MRwP~+KA><pVl@COT$xEhI#wWd%nHk38k0$;kv0|)j>FBE;osE`pG)?5Z_
zE`xE;XN*%CKFx=Uk>}tSN2s>cHKl!y9Do~DZ;t>e|GuA)@l?qrbjA|zBG})O`YYkl
z!6r35#U81JS4dn79Sef~5+<6Et~y__vu|*XwssuCG+F9Y9?pmm8{Pf-<W0pZHV;gW
zCoUu)6aIRkfHbCx61Dw(W_N2Ee1HbpM&y&U;QZZ%j?#tz<Ye{6<5{xIqJoo$7L>?h
zn<A-ag9?Qk?g~4;CpG;IwC)nV^L`9W?w{x1MgY4MJ==Z?Qu=TGIaa(;e3#XsV4Z!t
zr=2wu$=nW+{8?94SI1$R?|&R%z~C7CYlnv;Gnm*j3oXb0&<)8;uNP{XWb@Uw2uk+W
zQ!(@1^5E>y-TEBpU_PN|lbt4^Y#$kAr(q}hn0;Df-^y;oy1=BhFFXLk+Kx%GZ*%Ru
z|M3qz9r$>oGdy{0LoHusjp5_<l8F3sY<e@?S0mGbV|k5qkm+YLOg{a-HS%d8Jg~zo
z9g;@tv&suH@W;z9@LFI01S&vha*rs6!+IUBRBh+V^N#!T8;FIhPUasD>i^_k8JSs`
z|G!Rw;~#Rb9RE}9bxHFtoydm1eL-1A&1ysh;{Gz-{%OHwaY1IuE+-BgUN;y5g894Q
z?-8@p4h|rwlypcUyMD&6Yix~|b>UX?=FcM&SL)m0w{kQooVgZ?Ip-(3#eadst23!B
z+N?2?(-poHI&?M3Lqt(R0SDAXVJ7FouJ;Kj<4-r#lS>AuK+}*;tX;2^o6{wEbpa9@
zFFxglB*FnJ)YO*Cd6RX!h4ZEDl#drjGROi2n_dcey}f;M<r(Q~Y&ZfX>Rg3QdP{Si
z^JUW<MHk|akk@BX7Pd(cRfkWo5{t4H{qR?$V5LU0qtcneK5@bMRChuepv+3EHL3hc
z8-{#xes+QWu!GJ&NdXt#qejEv2)V>md#<aAw3}8`u6QiQ47||VE+CV)!bcUQv1nfZ
zzyOk8f1^)3&|Is7v?tQ&d)K#YQ!k#pOI(=rNibxQK$g80dW^$GA;pM^v#4@zWhVE#
z8>H%*Z!0wrm$4;(bqtO5GlgBdiqp_MaRa~-O%dqsPD0#!M0`_OCQ<P)BA^po@0}f-
zPLTB#M&8=R;`Cq?|Ly3ihDNiocX3_<AF^M{*PMq`kzA}rmX7T-TbU|S4d+Va+hD}T
zTdRfY70@}#cz)z<7_qB67a9J~yY6{dcGAEvl`WwZRamOZ5Mp8tzCUY}Ywr%t_+FF2
zO1#`7d4CgoNV~hLs;F6z!sxjyw;nZv)y_<D3@!vjn4V)=eBkCn6yZ)Y&!?U_?qID5
z)E;Xd1?n**zyq|uYFcH+wdvTWaFkGUNadO<$*+ld6RJCqBfsoH(y>oIDvugtZYGR+
z=$?ECZg`sjp#>Z&$BTR)3uF(;ep~nh_mX?8Ie5B8DC>2%WpQyvGool$&djWfh1&uW
zt!#8JzW!W2Ey<sb4Aq_{Cvnr!lY2&WYq{LeBd+3A_K6TM&$Ru5Txkmo8r;+5dpFtY
zSpE*bLAHZJ1@3?zBxJYdJY$uFW9qSST}TSNjIo9V36p`nvuEPzH3?q4=@+MTe@7OR
zqqTft{V6%F%HY|MNrdc6g~4DzgT=j!GD$8EZlRqG5LB+~Hr*5VKi6mAti35P;bnR`
z7$_Z|6m;OsUd*ssFk>(_CgromoB8!HoFD|FkrK^Af7DRbKs<v_%E+bDjk4#Vc;Kzp
z-Hrzt!nWwA`gOW9tDhdZ!3mpvjt#+`qT15w^mJ;qDn-{|GL_jie*eTzm}d;Xn`XOO
zHzpuaQBq}#reBCTof2rslu5#YXPQ_$PmW&t819hd9l%!~3e2=vQ#)Ha7R0k*(Gya?
z|H~WkK-r}KIq$*7RK<USHSy|xred5=`MP(5(>v^*oEtpK6R8BV6*c(7w<hFd79O{U
zKXnmgWN~F<BHjieBIW4s?UiAPdiJcFoPZ;YCW(F6z3f9_7Zr)}xzK>IZS(}NnB&$^
zoJ9*XTKY8+eV7;)s2UI%8xGi{Qrs<da5iS1Plm5Mtnd{P;tbdNGTBo_n4gb^S=T--
zZuj5>t?ft39Uk`0Z^0L!^qR>N@C}XDG*16y`++w^A717iDd_`JuJ9D$hz|}mRhi;N
zSfZJ7ykAw9XPy940dA=ylyk_Kg++W1)cCU0-go`|$WpJ7o@S&pw7jw<SZ8WlX(J)>
zIbLwQ{LLBrhr9V*Q#B=7V5Y)QolmX74(B_MivZF9nJ&e{mF4{9kF*;6LE*;LFzZC-
z0q;_*c;t%{Tpq<?`_RX!jL?^Zn$EZ)G?_ojdg+GQ^>H?Uz^1(~V(AP$+-Z?Ijl}cV
zo=F=M&W<(@&PY6EdTmgKmlG<P0BKUDlsI3o<Re@QZ8DMRPSXg&zG&R#7r>zSGG3OD
zqmQ&=hmD&_st)WgE5UKo>IMMZ)=EoqrX)stz{F1=zC)x#v>L^npbp7Z7=KDla=<<i
zz%98y@6(5;-i_;pUC9XME-}h-0CUP5LkbX~I4!B9PJbFhnHoRjXOo3Spc3E=A}T6r
zU{T_vR5z6sIn?@!8G_^WgU%O5Iu^Lx-?djcu`=;4fu{)|YQ8x7-YPJRz)vqdkhy4B
z*YT~i8+buVMSr>4LlU#7h*N#xNvXel#}vB8A(kTs$e0M!6$4d{6QR;Cb4z6mlp}cs
zJnkh9B9>UN)G-K;*DR&g3ourXlyc-GiMMaxC;ZKwjswvF1Oh+@R}>az_Sn0|a5;Q%
z^@Noet>nr+iBB8lQNnfS7buTn8Epeud%0A%DroR=wm~!isZgbR)1&g6crW1d6P7Ls
z+qeBOHk^R}-a&wjC|tbB<YbzH)oMQZbq=n!4BDH9S3tyzfrSLYv<gNHK_+j`plKs?
zDZ02^pxuWD1}piyL}p|>2;$rb<>?^6Nal4~rGsO(t{5?H758j7zV?^}jzLoCBm*}p
zrXKy3?af?37M2-Lc}c&h$~9N5$n@fcstTt<2n^YgF3(t?8au2L<l^R05MXN?4gfy!
z339O@=P71Wt&>RkNISFmjj9N9f)_}VPlHe8FpY>E=FZ(!^{3VU@`uQOB5(5Dsmxaw
zBD&Ax8>O4IE=F(%fRDrhVIZ_`WxQ8o(l;Qt7a&u%Xzc$E{(q12e=i?7S^k?#<M@YM
z8pr>XODopea6D{5^jT5goytlIA#*?J8LQ8>mTF0EzT`1i{<VmZVUQvmBN=0Sgq<b7
z<~M1v3E?Q_C23jNgaio`-IK+))n`X@%L#p&`|a1*3$gmV-wI8a%k;HlI@8nMt+7zH
zF*USe$K>hoVV}>pPXn!qHgf6ex91XDx#4Gk6h-|>L3NKoY+DIktJC`Ocz(ei{KoZ?
z$O5tCg;(l}NPhWz_Q&gj)K2~HAHVq-a1Oa|8kwaA0XWb1r%G%l?nl0Ltch@-oC!21
z-^8QYPostu8WzHvX#DKU1x4%^h3N%FGI0$SH*2Y&L%!SLNbtIRYc;#c!22~vL=J9;
zud!44!>D}0AkCYK9I~T&%1J=7YA}9P`NqpdNuj3R4o}Hr8~Q-swkJFhyl(e9S9E^=
zJ%{UuW6@BiSqp0Q>4c(+qX{00uR<Lwe6`k1S7^^hqXW6dme71CD*PwGC{gWZSgqPm
z*Vl&VsWhsw0s#FZU-uq(cdAANO!Eog%JIEZc|aw9qlGe|n3!vjckK{AoJ(gi&}C=E
zx3J1(r=G5#gwgZt(`r~P%usvFVn!BOSY3G1asb7Lqp(p^T8u0+zjSq9E!YSqM-Db<
zEbnru+pH|s?PA$TXRySMU`-Edq3UxRwYV#NM$OiKES%p;pw%I=L*XK#YSWQVVUz=r
zEs7*Q>%MCuKS+#Y_ke~Qt@duu1(xEtzNVS)xP|a=oi9p=(oieOR*6;2N6J!>r8&A#
z>QayGg+Y+n;xK733lE%6VXF8Z1<j<*<LqU87VbBz0PB2fD5CCh;|jbK@j`~7A4aa`
z%EAqc=Or2z)Lv4eUi6nD#nWNa_{4J;PPKdcOkkM!`;eS(tiLRxSd3f)NwSi(gCv7V
zq!Uwaa$;#dJ}H<G-nc0O6p>JdJDEA4UTaDgWJDOfAvFbagUVB0aC<{<Wojo<{tgSo
zH0@h1)BzA%7@C203o0`8U(3Ls$qg#AtBFw6GW@T41JxZ|I1SN|r=Scg5furtx){$B
zAL(nwomzxeKzS&5INkc*zG263o@0S3GuOs(RxN?$z2uygb3zT7i!n$X7?8^nG*sO|
z0T{X@et!5=7^w1&DF=Ejq_b7E0zEA%2p>GmuZ4^_mo#8s7#8MTual)}ki1+qNSo5p
zZaqI^liszZ!qun|-MXv#nn6<T$LvkwSSWs{qR1pzJVpqH?pnzP*_D>pjuf!bKoC1b
zh!;azGYxSCDQoL66eLp1m^;a^6jm-D0M8t?U=@zDSKcf@SH4TN`7#T*=urn9YB2nJ
z=`OfDo-1P(2O8B-T-cGo$MUaw%nM=S)sGHQ(=)uZL4LUGv{S8hNRMdn-1tgw*UJ4F
zMsVk3@N~uzR@askrxA$HxDzpOH$1lc>*%0)H}?6vCL`L-2qZ<kW3i9m`5tzq#X8wF
zp%JXJ92NiJU=bwaTO!!#MwjHwev2?qUH;jJ!5I^}I;%l0%?Lc-ksOs27$f)?(J&~Z
zpZefJ8Y1Yn!_eTI;Yw#2#4b`_1Hl_P(G@i@bt2%%OP0|wi5B-5dQGrp<GrJ?E%8yK
z#(o{x29;+lSZL!`n(Wy)q=+KQYDeG;P|5uffrXhD;4bMzWIX|pbJUzY<is$63>FF+
z#aSa)Lxg2*5C{w`!7I$xV^4b@xI6<MR1(3Cx)uS+vv|pTXbi@1w4y_|RsS?l;Qd&g
zT8<2g(3;>I--T%I3}}tNzqPe7*v(%EW1OR@li>tL6fcQDko?AZ{o!sexOI?Db{#!R
z238|Gkvi={DRFI|8p@8=^}3Kvs}RA{P)xOg6vU`~t$rO3apfYiQ6kWg#r=IrHFT;_
zR?~IUx;Sw#yUl}y)ZojICrJmC;?Qy82e%Kf_-`I4xqtzI7jY~i%m)<nlNdshSjC8r
zaShb$q!1Ac={daJnESM@fq@mEw@#%JCD1<xg3e-+#BWRr&N1JJ+5^Yg+@g^B!Slb_
zyu+5QxXW#fR-|w;<o+<;x4p<vN@zl3#t8V1JKt`RsOUN_!Qd9=r=g60Z>kv4h}tHE
z23wUglsJ-oAxRIBOpVZ@ZfFJ7i33?k7GSd!=V9he-uKwXjj3qo$xI}8BcgNVm{&>}
zX(vLI*9Y(lmKqvJF-oY{hy;fg7L;Sh<>uqvLK(=q`mZ#_Kuc#+0Q(~hwL>BkUEg}>
zyTpd0s1;fQsC6p9T2Z^)V;s&Nm(D1Vw^5#VE4wVynaB&K%T_np&o0gs5J^P8T#dVV
zmfo~{K_x+W(7$vX2&(IOGXB+~k@SV@ZFf%GbFkCL96-`L7Ozw38ZYO7OQ0bgwXR~u
zLqH69D)8l}2i-&Awg=}LrzCm4936KLKFpHMQA{0@n8+WR`vIuP*96(jUrdQ+6!wfZ
zMSaUJY%4Gvt&u2Jta?Wh1v#dH4jQcBW=3?SXz(bM7#qP(ii!;EMmmy%D+N9L4h4~v
zkHD+#&O!auwCwS8V*Y@l>o2uDo~Pv+AQ_XLUA_{F>ua<lZc~oWh<fRAc)<e=pK@RK
z6aRH4@=XNBn{J9HA{oXsnz8tC?eK)!F0gld{+n6?>_9|83RV)%-#<+YITxJaGYNQ8
zQ9^_f4>XwFS|xAXQ~*LtO9m#UG$V2}S~V4k@Nb!#L6ssj<QS+sREH7jJ3;yLWLtW!
zOp1GXMllf@70@BvAyI*d+8p9uWA8XtTxh(Vmz2C!w?x^ykOPDZ$)>p<?z>oV>|_}&
z8-!J*JBhHUxF<mOg$879RN^6&T&xf)7D(kwXvl6onX@XM{Hjc^ZfF&v$&M1eXeovY
zWH?CApbBI|#x5W#QbUX<(yS@x=v=izUgYdDs#MzVJP<ihSy)cW_;XX$*h&V)KHWdr
z)E9PXfo0^BDpe!4-Sod;P0~#xFkc$`${yduRhNkDRp5ah>FQaSrjwntw;Ecvi>UGj
zMP`Iy!Hzx>x_b;h9AB>}-Wz^1ZP(N(LpaNu=c%?lR`n>0!2;7{7e!jP2$Iq^bLC;!
zRf-+iD}Ww0^jM$!9RRwnB2g<x>?CX}b_Ovy7ty&~2C49fM;bd~aWt-;$W^(oGqX}o
zeQ`K)ijT@}gd$bZ1wUsGLVXHyoGlV0z3gvx{2E0?Ul9ouiTvV$@5v(x3gG<Vn8_oA
zb0aS>__IB{v&r`mjw~fM>_oSfCx<*OyB()kRgS}o&JCJG`2zgQsSrn*14*IUY$-0?
zP&d^RqDt^Z_4n+C6xc!IMNQT63xV*J*auh{kyl8pY<ayEIyWYY9<LPwu9H|=JG5nD
z*P*In#J=&IDCdnDvoJ{v>L;dijWQ9E63jyTTaR*MNro9m%MCfTz0_nd?M<7lY(Lgg
zyKln2p2c|~$tTfwvahAxSyQXDS}eq@naGWGqU51#k<SvThe(&qLtlAH=bh=W@*2~_
zThaHA=C@`Cd<vobRkoi(#C9%J-vG`iS9Px|sK$sy5MV2&<$bI?q`@<8(Rh>;!Wuqr
z7_7@Vz2fj-15QMF)LB>*E_k}+kVyCE8^!NpU5WJ)Jq6Uyi<!&Jo8DwhIfba?60i-o
z>M`+nq^09RA^he=ibGbzU=<TzOb1H7fZjpX61jYv^Rr2DS>BD(c;@^d)*gEgdtxIl
z(t8yL!)adEC$vQuZT$C+i*m`bYN%J)gdab8<sVG?%d<2aOAnQZ730PdTZ6w_BGGDU
zCL=2n-eeaAtid^FDW;sq5C7yfk*>)SJ|%zZ@rsR`in#+B^o8~?So*CgpO=$HRq12@
zb&EUZ>eH{M^G_Ja^Bjw$n~F`|MaaU{SR-&eGx2ECi>pwy*Tzb;>=TI=XPB~}aR>s!
zjh;>TOO;$npme4UYLs4OrNi)*lqqhmj|?|)z^(lB?TgrG3~gj7zfNDLhveaW1&0NH
zf>pGlfhQ^%1CtyNJIm1KKwQ*x$@=Q!B5=Tc=Gvpw#1miJwhVTa8g??}P9>NQYMlAK
z;YG`byYBOw<!Yedl8bG8_z-K0hMG($vo1svAvKvR0?JcvsX6EgBMdjs_W&w27n|M2
z720gTWs?5(_rXifQ54y52)xOhRI}oE<xw=x{38nsq;$sjJe8M8<<?CB!P;iw<hRR1
zb?!x9rVr_q2ya8<2AYYi2us`Yf>E1pF<5QQeHiJ?&(ciUus=zeJgz6aE|p>W45NEI
zF~5rMQ3S}j6X%)yHNQc#`fA=73FJ$TAv~f@<{kPV8=}-8Nt4y|_z^tvfVtWPYoSP-
zil+0n@4_~na8{QxGX>d3kBen62%M(`nfsk=rP7D`-A!xZ(~^^?h6sGBRml^ELss}J
zUyl}(+46g=nM`)+Gz|)x6Gw&zsMD-qk1Ng?yeS>0^(x9gNLF+Sq(!15&hlEA$;Qx6
zIrwX@xxq09&J>22H@}O4b%A>#;!OjHG?5R#A1fQYGE7RSnd3|F2ga@?SVb*SCz*BB
zz?~xnaxzkUl!dF2o#@Mnw=$OrSuN132Q;yHqs*o>3mVr_IczhIa?hs>!+0U`GbFdu
zHIBzt;r}=jQLXRSS%6)m4&{`cH&<gjx>S-9UvoJKhmHp-oujfJgf{a2!RVU5+f1S+
zD8vII%?dTsfjJ;P4f0bYg@hYwj16U8)lcA@)1DX*A3WEM>a0;>#Vm}(s<H8LU7ALx
zI7OKcd*1AHM;sZp<Ef{&TGIyXy?QbLeIs#uHODzs7TOA23`J2GUCcMGt|PyfN05P(
z?!GrbAq_7rwC%tLByTL=RhHeLh_UHL0*}B`zH*}f+iD%%#gM#lydPWO0$K-R?X)bq
z>HNVf3V}EvP4;;u9YirvuB@-~2!q){%;wySiM{-|_?yccpvY%-qyD>@gBMhF{EAR^
z0e@9&i%)=%@uSa^r0xAsl3d-P&*y8f`|!4W`eQ$2y6fh<9Gfe0iP&v2TUcP{>*%jh
zWXc5$Rjbi`hX~#Va9?D4gH(Pp8(J&3S1707RXHW3b)FWy(9ENF?`T<AiJ&|usr95H
zZmWG67z*FC!f{DKbn430MtUUib+Nho!O{yZnGCAn%Vf8&)QI096T__FWN`HC@_st9
zb=a8Q!2rO}#?%bIR(X;lpZ-y#{YIO|DT*ebFje%&u%4)qy_v6-jOh2hkeSX%L^mQz
z2!Qin-Gem|=k%0ZYocFw&wKor{RgxcFN`>2mzJ@U0&gp4`Az=pt5%G-hbFx9RovCZ
zjtQ-|h{M(?-P$D>3}(bS#)77j3PoA6o8h4a6Kds)kB-d~F8kWgGmfIqGw(Rr5smYz
z^a{wL52mp-a#wFARZzmU2!u`ga#F^fB}Z<H6J&y`7F6MR)6htC6rkoa3Nk(<vQP6_
zmK-`&@N0Q+oO}*Rrj^pUQcQ;n3W7914uIAc9Pw7C$#DqnGhDJrCF=<wRQlk@Gxqa?
zX(-C5J~01qB#-d3d>2Q`g0Gv`o!jRJJxXyt*FS6^{u4H4VPt0b@7KdWgpE1>r?7Fg
z)`aVZ7}CGQh-UUN;d$70S2*11<}s*V#>1MUPTm9sl!jm+=0GTgE-l}vKL?xV;JQSl
zoXq0S@gjetr>d>CTU4je58Bf_?@T+Xnar_UIX;{Re~T7-XxT4EhSsvKwP<F1+ak{X
z7`l|;@6({szyY<aW^q1kS>M^w{Qgi{d08Oo!;So$EI(d?)p_5eYL+Lr#qbc)I}toA
z5gbJeWj;wn_RXkw`=vPt%mb-|82rvAzh(cjr_eOP+BsR_qc$%KZ-a~zJ9J#%Yn{>}
zdW8Tn^90QHLhNFonrc#g<wQ(le(7|^B*TNUL|fTvqo_V5?W%#!z`h}wl3cy1s`*Q!
zQn(@f11K|t_U5opE&j2^F#k&KiZTfM74PO5MtS{ly`9=|ETdzy(nsgnXsbrE+we-u
zc9m&^J;A2&$j`JqvxE>m#u|Hh`4S9%tit5!QZLf)Q4MmP%xAnJ+ZF$0*e`w}aj`L!
z^1|b!n?!Og3;OAeiJE#XhL;{`MgA(}&>A+hz)~yy=p5&xB7yWX&oIS)MP6ubr&g!e
z?yPHE)>bHYPI8kXI;uD8ql+6#y>%6OD1t7?7Rh51XLnt5440ZJNWpLkx2rS0YMU^w
z_?h%YdnVH7NIIhK-uSNv(pBO5&|-hMevPmbe=V3ASiU22o9-ISz}%-d#afx2R@6_~
z-0z*S0Avx<Z$Fhlt+aOWxsxXKN$Li5F8N3kp|c!+qp-&Iy_<*q3MT1Fa6AGBq6*`a
zDXUn=tUB1bfVn!7<D`dLBs3I{f+Oe25ZKtaveK>-^M2@n(9KvE##ggtC*`8bB0`MQ
zCN2iA?_8X1bQ1)VY^;hB0b$ooQ(e#QB}qs1yRA6r58Ygh=K0}p|FcE*OM&?HT&cdV
zS8uWr&qu%oy!plY+W1z*whb1EHZ+$0Yp~qhG<<`i;IAo>vbjf>Gc0lE;Td3jF%jDW
zUduqI>0Plwv^YnSb`M?khXval_$`>_IlS{OTmtauxoHpH!7vG$Jr2v0Dr4DB;Hhro
zhP=hJTY-I};_G<V)?9aRTU13$LS1?Mkr>IJS1Rhvu?MHUks9<z%w19_OmylZf-X&Y
zv_~J&U&vm&0ml2kSEIc;bz8FG_ZjIGLM|{Aa8er-lkx&F2yhJi2^y^1E3u{U$Hw1V
z0IuqFx=VNME^sv=krY?%&aSk!+$x0*fL}K8_^poW#u2%1YeaAx2yI|2SGr9jlHB-|
z;FtjPKSC^3hL@j~Gty-P{U_!2W5#3STkzrbLBbAH=zhgH)ycb1Ltb8350@W?VW3v1
zIj`e|031TdnZK07e|Z40@9WSsd>m`zN*0BQu9F8ol-|h+z-u<x`_hNRNOlD84oNgh
zbk@9tRJl;-$vwnF@%+IY7W}EAlZK!Rh65J~A*>(wlCm1gk?jU2K*2uJD9`hRPm4QX
zZMWwyP+Bo!AEs}j7&=N6Zeo}Rj{~;=*U<?NIA(Fzh^`EH5Mn<RRNt^4hng$NOHIH;
z=u*LHsyad0R6D*rFnO>zZrEvV0PKIuZU|Raj@@`#H3|Bdw&4;`a57-{z16%>47Qi|
zvW@Y6?wCX|_=~XsIPFnlG3@UP)5w=I%3~dpSv+@T={mOG@$SbTA2Fo#)<`jNmqan{
zQ62=1mE9+LD8RuAg#8!hLzW798?XE4DbRi%boZFsZ=-6KC=&pxf+eO6wvUA0wZbQa
z^LV*~F-&S!^nXHfEq%TGL6rZ1&1FkS;R%1-BF4#LkQX$ZG%3E}DLpj4mX-B2SEe(q
z!e?7ky69v_QaFMm><V=7of`^VW?tg4P^y0@nY2>TxCG}qTtQ@8rHeQg0TB|c-T#(4
zj5g($7swzQnhey!`7>tMoQUq%={l)Z2Bq2RTj-Sy%=vLJGy~BmI)MdHJE^JK+N~M*
z1!6JJGWW4HEuk#1&nrQ-6S;YExabN|RZ|Q!hh0=*c3k!hF+)(f?XxH%Dp@Asn-<$!
z6DopwN2gpSrd+b9+HDnbJD)?ZHWEPz5IvFMDC=*00?Va--Wh=Y=rvfPs_>nUEs&!4
zi7P2F5`q7Mx`p%vB(7WtZzwTuuAMMu?NryQexnCNgs2$1z*)TphiPFisAN_UAXJmK
z?4ZAOVdpEhf6B$DX+lRZzE942s$x%N;H_d)Qh5LUla$HcNz}U(#l~rH0$R=S(ccew
zqzR9uH;On%Uq|i2&Yn~h#)+TwBoQ{kN*NKPnnZ3Lvq^x2n;qSdg^k5VL54me5RCt}
z18gM6#s_Ca_X;pfFD_YL0tM?O{!+LgD>@%dN@PIsbWkf|!CfAlV3T?E7?9yIAeCc^
zgeV;NVX)%3^}Ix&TGnb}=-mT>ihgb&Wp40TBy(yCZ2UVVq(o%d2zNNYqX7I#`sQ{L
zDurZ!j7O$pS<eMB5K_YQoWa5xGBsrx_z#3dEPy^N&U^IB@Em2cfBCu`jP*0@5-Mv^
zMjuNt9f9}ac{@HNdj$8^EOMA>WUG`w1+Qv=&RA7(j1PJ5WdPI`p~+iG8N{Y0v}%Ok
z<KD#td?B8mDM7nUi&dmaeQ=!^yishPr7@eA!2}hD#K}$%RnH~qN4Pt1iBTbr7n{^4
zUO5^2OHxe}%QDv=1fZoq@EyJ;9KV_zDla(>HpqVM|F}jjWsDUedhZYM-q-cyxKU<a
zemY%)1MtcZqYlIfJXB5DHi%gg$^-XgekgZ=g`mZ*ddrHfs7ha6Et)_^;KmyMQ3SUs
zat7)v7RDVi$`-(H0v9))TPC-b4tEOd6=-LfJ!87h;3`$huw{;!wfW;;VDb@hno4D)
z%G^Fb4}G0ykzh8poS+XH!UTJ1foPtA!$5pP&8Zb3@{pYzh71_iVkWRe*;Zuqd@}Y;
zBA26N))xGtBC9MNOm--H*Cw=oDx|cH7=(|nD4{z$mTtEG5hOI<`gpvYjJq}ch2T8B
zz<565!4)UzUxKcM(1vc#Jhs=ffc8E@;*7NwQ5Fq)E?rAM${z|;uDmJaH2xWIy%%&n
zcU!%>Et=a3JooSvdw@hPp}n2^)rE<4pQjP;uZJ11VD9WtZAO!O9xtVH&5r6|keN?W
z7y06bxN%*_U1@hp3<7;v%s=+Aznkvid+9oK;Ver!iA^+_GU1t8NmH}7G*gS&6kOYl
z?3MvOPA!Me0p62OsnM5x*|>jw{Mm1;F54TrNeFWu5;}FXGQJ4zvZ=RISE-I0Xm_q{
zgoUq1=L>9wRgf=3TVc{ZlPoWH8<R_9_z6i=OZ@;hfGp4+4FSu-mF*QpCwd-26b+87
zFJ4UiYEIs2LRkGichWIWXLpViT)l)$ToKb?kr^trS@qR-vAh;{cvzqt#y(|szZ70i
zKQ?)@xR>!w8Rl@45L~ezID0DK&*!9?w<vi9TT)b6Xvw>9*;<5c|B#&%R2Vun-mPM%
z#^PI*W&bT=gC{m0kyA3+P>h+F#}qvsUbN3Eo861Wq$m@pG~oM(oqjP!!}7R<OuP1;
z8`Syynv_M7nEesxIMM0pe8KwmH-$v}!F!y~{J9`K2g%vFzctK<LmB0T`e&6()Oc_f
zDy}S?7tb|WksAzT&yvcU=EmDwcMjxWkEO_nfG9Sah;Atm0fp3?AzB7I;?yH=ko@<V
zU1$zhTt=<iPkK+MV8A7MiLiNq5z>c3(h-I9htU)$K+ZF=i2FhemJoIgT<Yf1L=ONy
z9;V9aq?eDRE<38v^fq+}4V5Qu;a%x+C_L&md1Aj2!^DcTR2x{j)V#hz<oknoAro^*
zX7WNQ;`4FpO5NHh4F*ZVO>^bo_;8&@lx!saSP;YUR#D>PnVT^X!@$C=3fW_Aw$8KM
z({06#FktvBN;G*4x=+`mm#XK}6z~U{V58?r;aO#a29H#926{IJm%7P_t3VR<nqKnK
zJ&I8XOXMeY6lI8Abr!o)uMx!Ql{-6dWLplJ*+)b3H>j}zmL^DUPwzXX9BoBcUcJvk
zcXr8(<T)R0rz|Eud%a5C-%YDedf!_;<>jt6g1g|4E#H1V=J`TRJC2OTm~nS)Ng$^u
z`eK+plHM+mC($lt=?m<Q)uU7%?$C$wc<I<_Zeu&W(9GM>{!MQd^LZ%%K-TgH@HCi%
z08$_MWhKo6_>A`V<MDp$#F+B7vV6CXSt(MFuOFOG)}x;j;swN4j0rb6<lg=F43jg+
z2kjfMFe;u3djGMa{+v`ae&biRe_gb;pI9;)5xevD=O`b|ien<<?kKE1VR#@0`fr7`
zkA?lq+}C&d5GWUw|N92|_sizrb`U1!{~{oq|A2sS{!a+V)W70af93EG)Ey0w9Hg$Z
zTke)8gJXlru9xxYV?sGfg8IrrGC(i@Qp=t#Ir8cMvcun*|4u@xEGbc{NT4Xd|Cb*g
z{`22`^ZZ*o-rNssQ<tsj3_A_i@;xRybY{?6&68$3+Jle!?Kx|*zlRcr1p87p($%-7
zQhWCis-)YMERghv99bX6MLlF=d)g&Fwjkk&_0~^_!rZZftUdT2_}uqGIlVd;NNo@#
zM@>-HO?ou#U%q?HAAUWPQNOH(py5uCfwl~7wU|YknAAfDovP6QojIY_1xJ`q6{}xf
z7gTa}j#u74$PP?v@{UmU;FIe%+dZi&)|@asR=n}2`ejPuX-S4ci;fSpb>4JgfuQoG
zhSPU|cea#`TMuNk(2ZjkI#swMH3Y{EGikp=YM#t@=1H$rI_lIH7<`D;YW!j(-t1YP
z^!QxP8pqOUsiL?_%;?tGnlj+U=eu*>LW|y>|4lPf=@~q6))a}~!@NFwRO`@=FL{t5
zQ1rV|7?NqTd&{)VG<8W6+Mx>R@>@+9FS|cE_sMj~)rIxPldLf8qrwRwyQ*p-GTC;u
zGZJ4zZC>f?4f&Tkt6VRoCj`a>)F|GNq**KXmAfuk%*hm4azy{{<BavN@BW3)<E*dO
z^ICp7rf#&86CrP860_PJS9Q^6DpHSiqs!ExQ?9YSrA5BBNBiF_<VA@7Up1B)`<{i-
zbZ$<Vw=9sr^c$D?dTJL=MytUPyT391i1O5rd|LG=Fg@}noM+iIZcTeG|9~XLedwkU
zk0mX$o1R>(-P0dzv+wkJKRslQ+5Rlrx}h(!F#$d^o}rV(wTG6>9Q37KqvLR=3H$-E
z)G*B9R*xVKASWdI#2~|I=8vhj=`58M-%FChi#2#4y+auSz$Wqwqe#{e(%QCEvjVE8
zQ&-rVx;F#vM%%HAxF<HFe_FR!6*-*C6eV4zTk~B|!g)0l@CK~2b5Ucfs+ttkf!RjS
zgza2rknUMKKq6Lj+a`!pVEa>j<*NDZkn;yQKq1GLaNky0pz8wMv|Q{p0-SgIW*pRd
zWqHZ8(8`K4qRJZ$3NJcnWTzc05`m$cO9;}7n*wNW#u!16xB*am4v;gs9+0X0LJOwD
z)_FnSMa}g#MhLGow4Qu7mw8zw%zmUfEYSRMV*rBD@O7`h*o|h;p0qF#9C-i+cC;u&
zdu<SQ6XFDjQB=1f&mAQ^Z)RypZbh`2>OL_ICF1lEGY*AM!m0@gUg_euy4B{o5>4}y
zE;fDAtEgHlj&9Oxcg_Kj@PTGc^*f1GFB$jP1MG$B7+Yp2ok_q1L5&h%tS8UiQ5hJ*
zq8FgOhDAqPsLu=z89zPBeHV;paF+`k4ia#%y^h;^$=oN!6;-3LbFk<XBeQXCP1Luo
ziGZdWY<(Q3B;i#p&l%SMneRQ#j;Qui1{B?A-+Rm|2oc)GS4#576)TToJU8J_1!3y;
zuhyYI6A@_sHaE>|lItWp+uSwiV}nv+yAg829n+4f2O85U0%5XVTZZhPblu}hbJfvM
z?)5XWR@no|7Z&zKB*%R?p}rja5m4+n`p1N}fLf90_ng1r0E7UO$$&k?di-#*m_YdX
zFf%s_c!ELwY2SVf`$eV!z%a`Q8wCbS>-6U%KwJ~Io0;O4_54uqeoM@ylGn{D*7Nox
z!p-4f@5Sr_C>o9><~QUglaa#!a7Jmgt-&8U-6Gx-aDqr!swf~Q!R)wFluLC3z%Em#
z-C@uICSM6l$botWvHku5w8=t+o8pA032>kwQ4D&rrC&~J(t5tjtC9`KBV5f3i@pX|
z<9HEXWjOCXVD(DPUy2*=MruC@(;<a&L;ay^U#@JhkVDrU(@&&_jMi`vgbu+G?=nu@
z?CgYi)mcg!MnprW_w)S0Q>)l&3f9W6dNzqM_SHbe)HWA-k6c!xOtvuEo)#`hA$a<}
zL$-SE)KMiq`RcIK5{lhej6+cYmA`>i-sFZCKEF+Jo0OvRjEEogEoDp`)~<Nud_;o2
zwK!jd)LC#o6LfyoHDj%qUIA6%vG|)SWvW~D3{;?UHJ2~>)oM(XB(Ilgdwo%#%?yT7
zWuiqs-826B#B*ES?(RFR=KuCi&9bnpeHXW+sL%P_;G*HgX8`h}KNq=FaayG>S%G<R
zcOF8On)5x{sa*Er6TfmJnlai~(*5qHT3rUn>lk$t1M;0`G@V9ApupSCqo@t*6ED8B
zkzax&9z&=t+j=l;yxBv>#<SUrz$i8BF2fqopfjq#BqzyrOqGP}fg*3QAqWe7j0MW=
zG=A$ZjR<2cdrN3lz%*rkX|V8mg2UT<WkVsIubN*c%pMhz3K&PwGhLVoet*<W%L8n2
zPS&eF)S#<YYfUT(XXnaA&v(*N1vmq0<ig2;|1DiWx2Kd+7Y_SH@m?G<j8M!Ov8;>+
zSo4c0%Q}K=qlb_Xh%^S$B;i)$S+hWRDgRfJJsHq;`_Qjy_O$_vT7l#w@))`i2~KB-
zRu{3CY-U#XHB@Dk&?K^%Qtx16>R~520jLBJVtQOsI1zCWba|$cVq~2s9LIcFP`#g)
z6<7+Rxs=Rc8(m>kqG(<=ENFs_o58Ik#a+eR%=`+V+1U?8Irc$WYo9=W=Ncee53I)%
z0@(?FrO^BF4zuPgvfoC>PYw5C%z~%N_cSqvMsAYG@d18wr6g$OJ1)Ylrh_Xk2GGr}
zdMTdFlJ`VPJeTBB5Pys%9xfE$g2;Q2zB0ZmVt!zb*Jh@+MG`C^p(}Q@)GTEUoT?wJ
z?R0qLWV8FFe;YF3M)VJiS->aU^OM%J>)`GOVYyI-tTQ0El9<0w|6O=xCT!NzL;LGj
zw9*4?7VTiU{epjr@mP%o9a+e4!6eYyD8RAA?$&gAE)<LeARO#oe0jf>vmZKL?))~e
zXQ5KrW%ttbF`b}YTzG_q1!%`m>3Lip;t{|k4ZdB!GfIrr5CX@ow9j*kj9FSU+EyrI
z68WSti(3?KHz&St`6C5A<crmnAwv*bnN9-g)DDcm-r#mn^vmztxp^MjCvk3IWMA{k
zm*+?Fz6^vU(VeE;kTiF?kPxfUoC={U?=Uf3rBh8{As0?rmD}!NJSt?U1fxaSuE7x;
zW2Xh|HEuK~&u)`WloQ#G`@&AKp`KQ#go2eyR~nJLg6#0(@0eGPSHeHmaTLtO5KZ)W
zQ+5oP+@BkjpAfx)?3nrsTMxsCG2=Gr8g52i+Z$ajpx!=m>Ek(DfM(#y<nE_|*VlS-
zjc!g$wvlcNUvZg$j2D|-0neY+FdfO_;On3kU(eoSs(Zw))ItYWp>{6ZjR@a6<A?=d
z<M`bRpyVIQ33;-7qvT&JL>K{aMRh+r|AH$iYO)Y7Q-L3)z!WcQo_1m6*w7Yu(&M_C
zx?$nA_X459K%v#kcI||%U@R%2-%>#-FPz3D2idduTP%?3fxM<vl{F0FjIftV_@{?e
zkWS6^2QS$5{#8kNTwEWaTLu4x`+2=#GTCRw{RvM+<?xwbWe-4IebUX2Uw_Lu0f98`
zqSObhoH`W6_z=F_L}keYg`899!+H07q%BybUI&;|Y<UclzbZnMT~yQ+u88^Is>4>G
zNc1U~<kvoO_s{Irm%^3WllWt$OS6e=%Tl-MU+=pne_ktDe<`4qvK58i+~~1%l!F4n
ztDN?;-EUb58lZ50edvnQtoH!jvBvMC&Y~~vDfBWpA(iUw3A?qAPc=JcG$#Ng_yi7t
zsbkRix!sSW%bV9XdYRZ@^?$f}{|8ZH;$ZnN`M~)Ph#Kergs5d}$o@;r*Zo(_H>EF?
zHRNpouw^|_<7jC^O?`b#P^yB!K@?B=x0i|ZBJ1L~^wLk}#d}veA-l*qP6}hvx!3pW
z9kwUoU$*bq9~~St#x=Sgy0kC)yWR+3k4D`p`=t(z&&SAN@Qco1uW-bv@RWoq_{g#z
zy_z4$%)X8&sQ6+ewJP?=GA-5C*V9tHhFe!DRV1gEtg#?drTC`-qIaZndg=Q&b1LtE
z;)r{Zc9VJ?d%q_I*P$5i$x7v(5m9-g0~p<f@8%zF8uUnB!J-5xNj0K+cvlY&^>&@N
zIxCsr$b~o^KRW3$xkl$K@%F9s5S+{g+wtpo=gux7S)X$mX@Y(o4g!~SMl_<stno?k
z)y2X|ccjKaet#R=j!##+k~2v$X2d^X=SJ$ws1~x~TMgfFsOS+w2I>fITv{6mP7PDs
z4{`k4I3376L*<T$A<PXyWWYfu!a+18JkjZ1_PA@X54;wgB~>kEMP-$A^wh7J07xcF
z>7*)*G0kBuC7RzxUn}-#11!d?Cso>x>2oy5ibpB!3rZPvd{JHNSP4Z%m68S1NeXDX
zbQp&1hMNrtR8{pXD|4aTB1ch|7dDy#Q9m_%FdRbUbHFKPz2vPShndl9yD2T!3KRF{
z&n70fdPCDFy?<rFpFM-CC<pOpquVMQw&IYN_;|(jivz?;Eo`7sr)Hz-Wgx^_KSx~a
zY-A(KG>RSBgfG%DulATnABhfte(oQ4_qqw!cjjRPdIiu6t|rMFTt8a<a6@pKfVgUl
z*uo?<9y^B{fq<6|@dL39gAT8WjA@3tHlw0C-C8}r;}S%Odbmo$<$!v&KJq7Fej{m`
zgM~~WD*M5BXaFJZb4V9<k*b#jYMc*)=Ct*3inyHVE6lRf+@c~1%OcE51IGe%J}D6=
zNQt?~ZYOQT>B3;E_V8#VMO&!5?x3n?F=dC$kI)SQpmy0!7y*NRr`uAzFRPRU2w78T
z-uyqt&apcaDC@SdZ6_7mwr!_k+pgHQZQHh=*tVUDUAMaL=zc$Rf9M}^&RFN{IoAfH
z9)0wXKoTGxwFjBdr@^fcx+aTA3Do+LVVY_$-JB8O=)h8oSiP8SjaxF118p8M4@?^o
zD0L0A%YoPHToSgNPhTH0*>9S6r9@z%-9k=tU#e~L(59jlUU^9{hwbmWmk#QE8+%zz
zokX*qtfgbXASxz^!~$$-dBayZyjKQy%;)Y>mu!6*XX%K%EcR6pbiJ(t62h5j^FUG7
zLH$cb0(pz1Emo|Xp6T?KJ{AjL#(eb(gNu2id_P2M{TaG8-@&SPkMavWt@XILt@hk7
zMx}XB<?^ixS@2<AnigZTUiuLy<qHZS2_2y5f$!7+VSCD(Zt5LWb5IEW?+&?*x6S?~
zWpa2eO(M!a*)8MmdXbClX#~buAL+7?1TKW!NZV{0>OGX4j8-tw34~;9-CIFa;M#)+
zs>mNo`10hU=gZ@X5PQVCj(yS2a}UmdAVT#e>bmF|@PtUC+{&p=56>Alc4l<Atm0O+
z1=KqTN%QG5BrHa3jSozE-GM?Khb%Vg2C-Q#5>$h!J)nOl<=b&19i8+N8Zs_hr^7wr
zpA(Qb(S|x!c!7oX{O-s*o^G&{^SarH1vMR|`kFL1@d>=kfupwFWcs;EO86{0PXab8
zX50q0za?ZJs<q1P1@6T4ISbDzBT<>o!irLUNm5+*GW2849`t9@3qCCru+x$>->2PF
z&SoanWy4lfZVjLibsWZz2C}IFW^e!cP?P$;a8rO7;H)Oe0%(kXnM<FM*wLZyNb?N0
zTgk)rsM)Ky>TU`*gh2X~L4cPP^V@L8&xB0gZ$*_`$tUFtcHtwa;a1a<9QFd@_`dA&
z+(0oC!5b#46x1x+9z(4>sMiKd0fH2|e=ccO544V7@HO)lXc1^wVR@*?*A09#saHGc
zgdYR9`YkK%(6OLWw;}HimIQbQ1M)wIm=h+RSo70$lTxCiNRiBGLe!o^l);A0Eak53
z9I$c{Phv&qM>ui=CNai{@u!)IpP6sJh^rj192IW<a&cNlnp5Sy6vI99<8<4DO>P78
zpnD4-2BK(zN>qf44z%naVf5Qd?5vcX*BZ#A_E!t3gxI#v7A$>*fT2PleWEos1uX6Z
zSwql?$GrWbHoWtn!h2{G(p?isiF%ICw{+bo+wTX4KoX`OVr)a^;mA#r^E{>1swPIl
zbji^hK%x^erq3BA76Gw7?{Zv{suL}bHU7Gf9T?prkW>0L+^TP`-#cu~(gr2427t`W
zqWO{SNe97_8?Pt$Cn`L3vo+3dWg>fZIwmf7q}QukX%9mk;*&iceUB;Q<&r3er03y`
zqrDfj5&ww_f)nR#Xq?lYIP<wiScrb}IdVv_zMuaD2R^LsvvfFt*eF+Dp*gUfV!<)H
zHL=d`!@2_a;&oklISNbf73Jt1Luj(me8JK>ZiVcZ9uwuZ#VIUH_s}i}M($XOx_}VE
zNtug;8i9i?BmVZ9?><_=2oBBs1&SzCr({AdLGlvnj>lL~w6?Pn2Ff|z_H1fyHA*?m
zD$*PKnfn$RGl|yU*hj^2{h)_<<NTYEWfoB+(P#_!4cT=x!Qt3<9fvC?qzlAZvXfXh
zqa#v8bKQcd+qvOwlHmShNQ~zJNji?WD-^eYY_#TFe={}Z>jF7?zLZ}6%&Mo=+R}cK
z1ZuTw$7@OeL5QXCTbb+aX8B`PfTsM`jwNdv<V56k3gSlO%}c1q_8wIAT@%M^d1Osn
z;u528era|KxPM_$^9gg!{E{P30=VVap%G6iFNl<M(tKi&N%&rIeKO+Sgk;p6!yaIT
z3P<J(d<A<|Vo_{n9EXCK#x%YxQE*}x7j*YH{PDSo6mo_8zBuhrl6}r{XPIx?ZrcfQ
z%9Kgkh{DMGxivOhNa_uAJZ?jsN;7H%-pkwRAyS)fj>rWJP=ZEOrW<GyQ`Vl_t-<sQ
z%KHQ43f7MLUn0=I<WFX1CZ>N87|e|SDSt9E{!j8}jh2-2Av;FzrN$mcB|sRJsQoQf
zPdTMRzH_lg8sR1xwv;GhaZ6a)?IYXzPs&@|13^DHDV=swW}|MS)ZX>2SJWS3deh;N
zx*L`W4SKHX@1IOx$u5La@_P0fxV$ZL>UI1fuSQ+^88Xqq*}=l`w!Kb(kEiEdL9m&T
zrH2E_{)lV4W3;RT1pS_Ow3jxL3rKp7+YBfRTJJ_5O)h=BKa-i><*EUgnnx-GuP5nM
zh+BTXlAA}8z6m2zW*!z)xaJOYSG8Zp4bikGK*kP%qx=LLPy+e6M7Rw7#vC&r_wnS+
zU0<rXKh<`9?M$=CPZ%0?$LL)_XL1Pj`~2Fzoj(|&@R8OSYdw3C@>OaQ8+QgI)T+eM
zZAC~eS=p3H*eY#N=E7}u>#*QS6ta%uil`-h0UOPLWUlpiox&8-3X^-+uc62{dib6h
zQV+GgWn76Cjbc9P#FP;swrdDZzdtLw^0<k3GDyLRc`H-y0Gu;?<r*-YZHc5t&ccM<
ztSh~O@Ia^HxaX4u(_1SCFcyg^=V@k@kpezFWJ_!v?M+xd00_IL)oSw}sj7-yPR`Vk
z27HPQxN;DSW)0UGx8kcJF<1hKWEOX7&a!XitDgu)+D=UJL;2>OhpbPTV)B8Baz1c{
zOtYqZH3KoY5K3SZO-$cl4OFK#j})9G>Y{_QT^xPhSKYtFlq=5$SL2Z-7RGgu5BasO
zB-P9;7pU+oYIs-g(TeVHnZ3H1-OjfU5Ty$Q-z5tqJ0t>}_L5DH<P*eAsV$e~S?<~;
zz)yR^bWpY28-=p0<-+?c6)5kN*vFbVT^?l}Mp<LMXTuapCCJ<>^*;Drx96NK%qN+!
zIC0@my!nqistM~_PD6n@92YKHLEM7{HNX(COm0vxTy88jaEdb|@Op2H<g$J{V%QFS
zHCin;#$z)D*M>{a+p`2Jfz`7F_ecGP^<*ajnnQ&LldTSLYCyNgRe+){6uJ`jv5q^=
zp8S)~0jBP1Wna~3$DsPnW##^{9i>W;{3-2HTS=@`Oou7ne|K%y^L=icH-!vAKb+s+
z#y8a2%$Nsx(~od}+?wK^kvVZF%p56G16uzEA5Xx9Oxh>s4&Om;**K9L90qb28vyHu
z3lEcCWKMD?MG~s8ekYf48ZT!LxJt&He%j)m_uMy|0&d_r>8NHzg};n>^Us#OJTc{p
z-kTktuUMI)z8aa5m^{o8>WHPr(joJ7-Q+##2<)1$P5Yhepqj#$yZjbX-r}KE4dCW0
z9^sPHlLljG7QC#nGR<Ve3{=;MuTK3DXvC>nb2$p*3^BglhXuCIXx3k*ad8@_n=pq2
z_cV_NV2CY*l-8UIK)7=#u=X4oNn_JpI_zIC3myw8-fHuzu&x>xG>m}Y?1mHS`6Cd>
zuT?W3-ET!}I!7Gb3Gv-cVHtHTs!~DvRqLiP`YXmt8*VGdDv`S<$f)}Ar@nWA6eG|`
zVS1-w-cwxJJkE)vzT<D!`k{sO)VVO997SXT_`uxo24#C?<dC4}GWlXsTSkAX^^L-l
zGI8VgP?4ONvBLRP+wy0T5sDAyNdVg|%suE1M{XdL_#&5|h_fa32JFmQ`XXnz88XV8
z!Q;h~n`#(vYFLnxs6lj~^k4lpNU@D=aOJBZLkT+~Sa(eODpTqK`GIKg1oR3%?vzdf
z?v3TSO<_fip*S$)D<Q1bi{)`YA5lb%_7|Jl$B?KupV@ik;@S<I7-MHs=r1Tw8h4&_
zSe!#1$t6xaB`x<WD})?^SOw!GD?_-!qe7<4K$+FjPA2r+lzYEfPq3(FuzAJmjJhHw
z0rTD)t-v%azlG(gOWo_=WqjAaY)B9Ij;-n|Cy})C9RJGpzXq1|`VY-@=!gaM+Bd=l
zI)A-1pCQN^SpGmpj_Kpbsrzx=k$zNBBoe@T?S^CwHsp8a7MJDQ===dsY@pPN`l;g2
z^zkEvRF=#?-nohyV*FG9ayw~Ga|stCAmR$fipxxk;D_)pJxsK*cnG+>7p=!CJJ<n=
zZ$@lpfSApoR8tEIa(_ds6(yNN4zO}#Jl!n&*nRS~gPU-d76Xt4nG~Rq5j5rI#0xr<
zne@{j+sZo7mTP`0t(dtf25W}2kr7q9>#Cvyv3RUAlRcu^JcnD8b&n+S9Y3=0qN}r-
zda=b-@`43H2@&+1NiJ3#oghH$wRs$?d0~NYVM39<UuAwylaD1CGwFb1#myY6o`UJ<
zJsw#dZhACJ4DSsN<{C;Pjg3K9X@qTlO(1yGQG2eXA9{OfIm3U>Q7iy!BWYdu{4let
z^t-TqaSPnSV2IH%Puln$nlglFUXe(*2TLS^hybPpiAV;O5IlIY;yM%j^=9*D5e5+<
z#+?vT8ZL9Y^&BTBco-sgf==ACHD|Y>?C*~{vlt=;+l)ge8MAegH($<WfC;Lk(AD(-
zuZ8YeSi9yRs|T`H_7LcMSkEbv2%)K<&ZW%?_8f-i?{drj=&c^7Up>sV=Aouj>EUzW
zZeEBy`oDiF{hUPW&dGFc@1DmvY~L8VXMmes)CG>Eep#fKX=gn_*3Rq)ZALkjb9frK
z;Tb`48lSt(Ny3|KJjYqTbzR(mBAGT`GD5L&#uPf7Z__h}wM2^IA3zdLk&P|g@dQRQ
z;=ohH9(y_+i?{2mmozp@3u2M7K{~&u3vOEz);t7tG4(Z()6Sbwxi_4{dWnNo#!GRm
zF%>V<5#1hlEh3;MP_~%SHMe&VvL0)Q!G?Mf3a{dD&{rX^uwe>^t`DxZcMwg#QYP=G
zvRUf3scNJJtO+6H`wD46z!Qt^?nDY;khgB<N9ni^pIG8zAzB#2oWvAFVriH%pW6ca
zu~#OtX$lL>OSq&XTR3ySl0o=RNXY6n6QEhfDDyb=oqzyxCh;?J7$ef6q=9|<%LnV*
z+6l}*otih$7K?yzN*j(k%|PgoorqTRv#YwT2*V;ef;RjS*hgg&lnC!Tl-X1-yYn8K
z8b5zky4-^FTeplh)LC;Z0hjO@awCUZ?0+<2JDUCAteG#6rb#LBhyUoDf-ki?x)iL<
zB6Actfn||7L3z*Jh)%@a3Jr^I7&UkmAX@m-7FP67(H1&09y0tpr>$<n{LI@~N*Ly1
zFp3iGM>kRe`LkWu-yfiF*j^`8%Kyk}|388KV^Yk_!ufAnmYMNCeO+e8|IOFcoNzi6
zN9lQ>p?1M`7_6?PwgJcAwv%`i^~%67roVs&he{=l76gJ2Z18+;@iYB))U(y3T)$}$
zffN>`(_+v+nXJ}_D#~X3I`xejicAPwW}va#L3vTZ8*kfO7LVJ&sNx`0`7-qCYfR#l
z0+%WZw?VAR_tdlh6C}n+Uu2j*0Y%dKp{8hmk@I){ZhT@cgF_*^cFQYmfiYs@^%MLb
z8^kj|mnwfM>@k-TM_e<SLGbQo0}4Dy1&*GW>K^mc{w@%=tjKyU`^N%td|~W)M&c|+
zCPLq3hTk^RfgywGqf~FbSMLF;at|&xQoa@!kWNpEY+c=dUj@#1s(#nL(6PV6Df~bz
z<NDt`Af!ZYX6M+NSi*xH+dTbCZbH2^sM=z~uerZP6Y>Kc{R&ULTjA13(B9#;vJ1GW
z7pek|o_27#(|b6GQ&?qC8V9U)aN7oYuT+^-&6QbQV<=iET5#kqqs=lTP3Bw__;mkx
zeZ-|e*bkvn>kE%t;!wEp2~EUVO_Ru`F~52T9K&%hoI;vn`hxT24jMMRPM(FZPM~~4
zo?*}3=RVd@0~iGJt0%(Z1pdgy#nziunmdqFqWX#pXbp=*0*!Blxfw%aI%n=3<6Rk0
zW_9+lV`)}RV5(hLl-zkd!V^0Uzp*RkK`z&L;w^c)YTS4^$pMU1D!N%HC&M9IHtg>R
zvqMtgiv#t52Eem#WBPKj5vNEWfLb;NyNSQ%Ql5sG*(p9aVJncnEhg_C8JGUhMVVT_
z$crTW>I_w~BC^bS);ta^i8EEm{mdQxBrP_?krtqcfExpGB`+bMC||O7fZAhJKJdkw
z9!NOUBwx&R`z~taC0$cIgnAwKS;aF5BxYaB!TwD~gB&Auq4l=dM~+2uLGm@$^<sZ(
zSO0xj%eC@B2E|;QFvIS4#t#X5ucsuD5#5;VrNd>qu<_B`x`&2kWy9)U)}IuTfhb5$
zm)~)6Ur|ln*c4%4F_nGTu$6SO!@KDKV@XTbG_XtwougFdG-Ctz`>343gL+!x&r{L<
z&cY#7qeHeGv_0J`yoYfp?_eK>9;U?)R-xzsjBXI_E6D<!x&VHu8FD!b?vWh$wYF(s
z%cySK%0u7;FJK@eibbObo`LsYjHBbEQYRwE?~IVya`!21IP|ztxE~@Lcp#>W9pY&*
zF3@(#oy~}qytyCj9_F@-8Ct~~g7@D%)_YTpE@tbt@ra=eJZ$n_l$Sp@4L_meZ?X<N
z6rTjQg-Nn?fO4?&2_{QhwC>{S;kE>E&oF^Pvz@**fRp2aMvu}96Bdh?>uVy|4_y|B
zHK+C$Nj>OaBvlbB)$!-Na7HFI$HZWIUbL$obQ;W*A4VY<Vnlk{FzuOO|8{u-$#_Y(
z_V)_3+AdmZx%tO;tAM$o>2|Ovx3o>flXyuYLeq*ls^!>*lXB}T$gWpZIwGfQE(#?_
z#8Gf(^3T2#)nGTnC1~GLj3-hfT<iMr<Duo#-}JYjy`zZ-SQ$=SHU^)e`-!Kv&&V0w
z<2RvidCfKQRNAxJTB9+?@(I^r%Vf%0=aOgaVKFsSOy0^J1Iiz{PGtg~kYGJmQ(yxY
zjz_?@9*nw5Hb2am5}b8M!|T%5rjKbel0u=ie_J;G<YTe?!=!ITsa%G3SUe~9OTAd9
zcr{wT+6xy>Q=<zZ9t5=@3Le9n(e0G|*6aS}8d0Dt$E&4bo(M=PT{Ov9nW7WjO2%V;
zsU(Sa8FauqOFEl;^(+6LuX5Z>5yS0ac_EtC5DkS*kQ$S*H=4^f*j9c|0Dr*K_DMn1
zEQK*NaWog})NU|j(c?-u7TwHBh|Ze9@ZoNbd$^D(3yd%`tkE9|OZVz#qm(-8L9A)e
zKnp7dW`-oJOI;fOtI2rPVaO6*nfWidNjb)IZy<Qu&wGDKWbWm8d;^C}nBfM<xxehW
z0;a&BSD-H%7cq*ROHvRz&5hQk4^PE*GG*{#n!R^e4R$%SHuXqok{YZLM2p+gTxa+Z
zWlT*$6~@6|qn|vB-DXVR><v(n(-0ojLr*0Q#T6I)&I>L^)fydE?GbCO=w3d~s@Teo
z4c5BTu?OG?cBabkV1<c^5}CgRy1+!(OL9dQ^u*&ek0*~9!=7}mnOaaJhxE$5u%C~&
z5?Kh7I2Pfn;CBS_;c94~1v;hb%}-@Sw2E{O+BhvEzA0j8#FkG2a#$p#d2eX8T=YAF
z>c%rmAHjen+@GDl3v{QwKh1uzo><dev2n)86PDHDK^zAfyMM>HiCsFOe4M?$n~~wZ
zNF-&`EYYiWF|O=X6^zGukucL=n@W1^Pkm4+)VxGVsPT5(oUD`2b2_PYu25>rSqxCn
zo5tV%m?f`esn?Ay*wkmnzo#xUJ0RZQ!n)n+QBEzgDrU~$cDF-yDT^%K+}zn><_@GS
zHl{|D?dxp@8cQ(t^1)5M*1c2}kOp}=eh_nwxS=xZo!@Kq;yI56JzF~AHyG~EJx~)n
zv_SQ?Lg{>Zu6E~;SDaY$Quk@)>$c=zC~+-6(J`RP(lWbb@^S^%G>E*xRt(m46VfVV
zfZ`1)TViH%TnRNm<+!t~RePv{QZV*P3TS3tw(WEGF}ygB@#DLc<kYnX(;<j{;Yrmt
z>knIgzI_Lb!Z#q>V%ISI7#xvH=v^fFewIHI&I+|gGolU61>5zJvFm>lk)IQugCaD+
zDVTyUoT7dG8!{-qzac;F<stq{$oQ9%^EX)hdnU%r_@7D+Gt>X1<ovS@jQbx-PCYD}
z={^eS>pgv)c1lGzx%zgOL#Z+=xOTQ=v9PjwckW*&G#AwWZzGsn;<}vaz9d+{&0<-X
zg2-;T0`~9YzHj>m{nsPA-?jrwZN-07t|p?MjL0-<qDJiVP~HrDy5|1wssbb3&#r!f
zt^3DJEJUvUA0eXzk7gw+M5Cq>_wB4rA;XiWMCl6ho$HWk+Cy}uEaYW9il1R3EU5el
zmNv!$N#a*V9mbY^4xn}|(cRN^%H3&xtJQzMrP%M<k6mW75R)+!oi*yH5IxQa$Egv<
zxZ`TWOM5p(toP%-g5Rz1?cNdlb?HUrX1S};gXq#UbXEz;V^+W0r|0wZ{dOi|&3FXl
znBZA9C92N(b#>|f$iMV{(g^v$CDm%EwnwD{PFX&Q_P$d7x_k>(7?8A<-bbgsaLmCY
zgyU!-N>f=&<{A=L-&B1wF0^4TFLeYFZN8-N{z7O+XBVxM`nW5@gKBEN9iM&G{9vUr
zA8(iCzSf>>?#f2R;~ga7uKn5OTEAo=!8-H4n9NjSF$S#VNO&4D1w64zg#L8XUPq~A
zKVq^;S?q}SvUwt=v9j#3NQ7U1_41>wrCB%L*0T-Wwk`82!x0C(!1Hu2*;U02@z8cC
zy^+xvgG@jr^u~EkZP1p4nh*^(SNX)eD4ckd|L^LD;2dxl691>(YSAbty!(SHX$*m)
zY}_%i7aNysY4f-I>ui@jDJ$A%oCNDWjcnjSQkHy@S0A^VfgjR4TZxr7+XKRH)taIX
zW2IY`0*VwPFm_+b2I0@bxG~B137_@ozN~>qUAjGRoYM>8UK9;KI1nA4)N3A+<|gBK
z@cyiOh1`;g(wb5tk}r6)Z=7`+*1&+`G)*~N6*yy02aW&M=@bXLE3n%{!O~CkZUX+>
zzflI&3iIX9+`SMK81A|WEffC&MeLPHhAb!2HQJYc5)6%s+n1_nY{M@@vb(J`FDJpj
zpf<n2FRr(C;Fi$E>QHrH*6C+3)BDUmjRGvjs9eV{E3E}o3%~QHf2zqd0?cSdkh`*{
z5({k46lc;1X;GD~ll$hy^TDA4uT|{;`3w{TS3oguI8kgT$08Y%Pg6)3R3^>(7DOr{
zGTpR5gH1$PT3VaORRd7P6EIuuVd#)BJTY~jKHz1Y2fu)Q7@rRh7};{)q?!rh@cbj3
z^8W7j6OROE-J;Ta(xfva!96pKg<z2D_#8Dl9Tjn8ZoPsaaW1}x$%l8@9$`#!=C$>f
z?eAa|8YJ--rGSXw-EzOp<Byzr3$QIC^@!VT3=DpdpFZ*Nf48_}efgF>D}9PVZhgd*
zYB6p|5pE>PIK6K804MZ)CwfkF@aeC7_~<62Ro1kmHKkf(=y^GSUP+)B>@pme<_zbp
z_cqNU28qyoL4tSNoXmtoBxTo$rloZ~R~%(Kl8FxCRt}q5c7Vi=e8=~5`?+eTlQU^N
zU1=n~+I-i}6>yCu7QhpSn6`>IPl>4xTHuMbF7sY~#Cw+rzR4?38rSi`Q2`Yt%@q#-
zMf;%c1eZQ8D%^OD{|rL?r7B}0LcHwAfI~IzhWK-mb$Ac{`fk}~dYOP}>cGr-9}B&3
z5xa$C`vh<;js^nXDyYTuhVvv%elK$P)`NwgSU`p_UE(+*k?3efU~}0zyFn_H)wm&&
zvTD6-6M+nwErb^>JOgT##pScpelQdV5pCippnlv|1jJ3Ia}MZh2E;GS9wckv7E-$?
zcygC`LVVrceVS|Em|k+u9?-HN+Q@&rTc<hwScQ_Dp_(r)&!(C#9(Lm(DFTCd4dWg+
zgb2k}ZzVZc$I=J=b6ETG9+;f6(K7uKNHp#5i9x#K&L!GRDPj`l!gVs9ZVdbS>wGIM
z4wwuBd};PINlxK_@uGNDJpP5<TT{H}_2ZDQBQR?->plF{#))#j8+|tQ%tBhURRxqt
zqM`=VO#I_3A{KKJ!o)gGd4u}#Y{%ap5%~pJx46cKiBc8AR61B1Tc(q|Pt7J}{7X&p
z#L{(hm9|`4`g<!fGP|D(yDR(ZQhdfL(Z%8pz?o$%1O|+pwNAV|MzR{7)B+8U&A~RB
zOm_A6;%yZfVWhHU_Ykai?R*znS_Dyx#$GcBUFzYD>2AeCpA|a$$=dx@VAqMqjpN#k
z?A5S(C`yTq7RS8NmC$5V!-UNoCPI~td?3*C)T5g~Q*)X0fKu#@p&hf!jYc@}o8+F$
ze&RuaP%W_U&4VyWI$w0hzb~tiZd5GhHyFOT>f)ysUl6fpy;cQhNON(MEEEcvZD=GD
zRJ$|T5b}URTJ#tzfpg`|pDMrybjYa=DkI#lzx(FlwCLEz6HR>%FaP=`uqrfm!<LN6
zJj>%r9b9!aL+qA<woUG%+sFz}%~fDXE;QV^o9y3wz&z3B$U{Us5;h1gln!ZqUDa`m
zLf=c%(908(Suu7_W;dx~k}jE5Rh&fyvITieH)$0Pp2r)h+zZuP1>i;K_L=XDt@67t
zSeNe=Hb&cA<nU(Sv=L^bO${Kfq?k#V{$J0++wOAvVC$t5gk!8&m5b|Cq|w)-P^(GC
z4{z%vvdcZC$bt|1sEGj6T;mZPe-S=hWBN-8t8;H0trDWPDZ`|I+e>+!#Fp+RX8azp
zs^Cz{dxT2hudfwVj~s907RKWjI}Jg-_aHAhzS1N%D|LwN%KL}$nxpH6+rcM2WbpmC
z&<esHR`r-GueQNf3yS+*Ntj|i!~t!w1X!nyRAp(a5LXhk`JChQY9~QewZi!J$CvWP
zBow*O6fVyt!P#r08>8b%7L4+&6KK$l2Q;jJdkfgim=1uVfHS890_ThfX8S6`u8#{I
zvdSl=((1nEJk6l)x|@Kw^Ao3&c>sUcESy5j?&iq5{pwDbbdSU4(#HV3=5}NbKaf$;
zf=Fex*)9)=`{{-OTIvHPNE1-O6PSF&dkAgJ0TU6cC}&E%PuS3gR1{P@Tw`X>QIHp%
z#TO9#MfmSMA{aJ-oGtYVA~qGM&?VZrd$tCSmerl0?yJyvqb+Oa(?;A*R$TgZ#4hE?
zqqN&v$%M%OL4q|Zt216P5z~1_{WY&URfNqc$?b2A6zlUyVbu-{a>{*aC~3!hiqh}0
zRMKMPQwUKeoD9vxpSC);$70?}t<)yRbo|YxBy#F%h!$cvl-}hRvE{o4nO>fU2Z5zi
z>INm*5E08{IV&?2k7lxaT{v1G<x(~7ocpTW9Vm$c6(iJhq1poNSoai{gdK#Lj!Fog
zB7R*i$%>TrHdo-2DjJeBT#(YjS&DiQ=W*POG|tIG*0$OL`cjE~o@_n+ktk!#Z<9eF
zmu6TNw}8q-w|+)7dv;ex)jkJ{^&ftzs_bukME4p}M!tS<#a^tz;|9K9qaJm7@igT<
zKJpIq$I3pW=|6}W?w5V*R-^p(cKv`qJ$#k_GkpFtQvUOYi;eT&o#D((|LH<7GyRV)
zgpB<r0Db2}1McQT*`F-~GK}Rg=YevMxPv1m#0?n}f^ME2H$qhs5ZQIz>UaD-mh0*8
zn)oT%Wq~K?&&hlHkaHW|OA<&$d@}1t&p`pUo#QP~@T`3#kc#{0=E%%ZhB2AMp<nD-
z-_GaAphSwD=opQWl~nGXPWKHgyq7(iZH+z@F>*mleKHc``FIj#x2vv68r*TpDqkN9
z{_{$quu4*AdhT|!nvp?~j8P_-NBk-vY|>|k_IAFkd9B3S*}@99=q~fI?yFgA2BR)O
z>DomR#=HUJ<dqi#`h+R-VYv5hvx958{s@3q%7hUp#bDb2Wv1vMbG8!w&_*Z#H;t4|
zS;3mAVy56NIj~Qyow^Le->Rl=E~Zk1_GMO6l)eF^NX%r>s*G(mHG1hCP$}OqSPVaD
zmt$DA(rNO=lo8H#CRg7WM(>^__meMItIvY5+;huJBneyYU8^#Sn&C!XNz0_X8@~b>
z<lvx26Wx*p5HRZa@#yktc3X4Vtf{;D?HU>)qd-Hpk943ey$<gGdRy6GQqB2;-$RMU
zZKkAOwZ+#jrjbxieY!k6(#0po-rP_B^Gy+{`_JKB=4qIi?ZUB=)^Y2E3}>(&jf=MW
zv}+26`}*uAcFkm$_jxv7_MOH!BLsfZJr2X-Q)jj%T#l?~^Q`*n-rp}U0o=g^RRqQY
zDA%xF@zW~wVR<nvU44DCm=t#Nz`=q&>1UEno2*=b`PSPl+fIpGs{)}uMz>F@FKBrC
zbY-=sSvi%&JC%}Vg!-36UK+zO0^sERAsSgWTs=X_)OMei{Zv~!I~ONMD7C+uZSAXX
z+?;}4x2E<7F^aXEtI5<aUF~s^<Coek8vsZT&1#pNQeKRRQ*)2TVPIh=c(`0AxXwf6
z=?$puVs|A)tke3?;)_<&$>lp%uDk&pP}W1MUSU%w$Am?pD^EqPsCHzMUFlceA>Du#
z<!UVHdd%R6u>$)ED`zWPZP5uoF8m1RC~y0p`wGr9#!>9^>A|}BKC?N*KvBOgNVfxO
zl2_30vEWc|y!5y^iG5FgdeplRD{cVtSm3-8-(%7;7-D_}bV;tIqU@BlS3Oo?!nA*=
z#fXcE74F5auW*8U?mjK^vx6qfc7V(8aeM$aQUDN|LL6T?BeplkhHdx*P7h%zNPRJ=
zfTU0wklAaBT~JyLP`eE^1AiBltSqj}^#TsxpgN;g2m&8_n^A01{$xT*cRk<}w|u8m
zMjs4~w&-z$4T!8r7z1$y=y3n77=jg}XSGXyQ8X@6Ffi9HJX>!nJ#=*5@o~Lm6e2}P
zF~W+5Ue~uNIP*o1jI-4h#Z-_yKy5dR@d&+gQn%$w1JXN>oiYejD}<eD?zZ~*Er7(C
zkUBDeu7wL^T~>QvURW=>2_3W{@x8-lBz;)Ar8X5E5JOwlJ)ZdmhZ6=Q+Mi@^p`FsY
z#+EcM(i_O!>6wke?vip;r({k2=A=3SSE=K92;7{1!CUEpwK`=B1ae96eByJJC|Vg0
zc>?wq)fLg<V$v4HT%|Aucr6}u)W)Eb61f;_-=ajVE_JO;Bs~#~O`tx}tF?j4iNl3y
zQYgS>@V`5TJ8dq^?My&@u^QHi3M}F<L>C!abDvwLjqSx5lO4m(%^vfG(%(W5CU>ki
z3OV$NA`BQ58fHSjgJ8*O)@Sywm>atx!On{rCLf17<lszegHn_}NmfIi%^QXt#z6?0
zj@9ctAt;UvO^ic#y@ZW=BBv5sspRvId8zWQ7HroOFW&Gj1i~25jekU7T&YOZ8l;m4
zx$%<P4~~Qy<&np*>mgC>Bz!)A@Op=96PB5gNzhrXu0==*3zrI~&jN-FV@s2FWHO!i
z6y`>A67qQUqxpg^hqVzbnZFQ9gb;1m9VLpra;Lc-Wo*d2^75-ox}tw>Wm&3#)<LYT
zEi)=guM(`VO1F35-aWKTyt^wg!X3`+`dsKH3<_LrGxOPfND_5gS5-1ysCPhz_LMQp
z_7>3_l#Fy(m_w<UYP92!SU;F)aGXJOI%d&5_zf9bTsHn3c<c>9h9U6K?trBSfA2r6
z1=-@m2y17wPrY$!E`NU>r54p4j(r6VVgH0*8WPkK&d&L6zJ&p&r<A%?+vsSNiUOep
z-vzFnzvr*H#KY@iyxKV~qRg6MJDh(dk9G`#vx#h(Q|b3NSs181p<hj5>cY#&fXW7=
zWizKhb`Oa3JaC5xgz&Q#n1sPFroo&7EL03R_rKv(Qza4XsDDE9H9*Slo+4FSPNiwh
ztDbZJIVGys1xL~chJi_o*eMbDGo$M2UOL3A0L0592yOaplklSWR7LmLU7oeHr5Ox?
z+FEjj^c%pcs?B^|0SZXXVTKWc;R#?M!*q3at$Np;rM&L^R`E)?bQ(e>S}e%lah(Si
zuED}TkhbX4P4L?V&l{9=#awfH2WK=ikf_!NB~RqXG+Pf6ZA0$VT&1+lL@TXbZ}K)a
z&9xcqE%KxcVuyh?_SJM_mQaf4JuCE`c%DB4KD9_52a7sKVC*?VQSZJudPp_eu9?J@
zxzH(Bh)Em_X>H2+OIacfGi@$222D1f9hM;?v>h`ZF}K(rCm7qb7w|bR^WeoU%6PKm
zKFw$FbROqK>#^bW%r*rC{}sWBU$NS%XUc`;QwAKYXC)+|Y@pb&^ruLi;f)bi%FbG;
zIV}A0L|V#jj*Z$nfT3UvQb6NA(O0M<H*=;WokdrZ%cP3=bWAs0t?XENV*g_KJcKOP
zp`g>Scrz>>w20A7{J2Z|POLxq0yIOvteVWpVb<#MI`00E*T{j3aJ4?JigZDUV-R)*
zcSa&?3wJCueuLM-8P=^<>`Q2{@TTJenF4|EfuMf1Xl#>yu7FIUF3$u!(Ql>FUDsIH
z*Mxe)WPdJ&zWmaixjyxYozL5%C!21J@os=N^<}UcVWIev=v=RDYC6APu2OS3Vdz3-
zSr9JuE%0*y`QwZ2VS)GVdJq@2z^&hr2<K|<UEtThbz-z2;~02Nzb$Unt|gn%+(1N&
z#c+miRom`zE8ao2_}w_TqoN~*-7A82f(?EfaM)+~dl?R!fTeVYT^z+JYuNT7Ygb(9
zgNE`d8SG>Y4ucMalB)2<ex8izgIo*+^f&}kdXSuoSg58RF)FFAf7cIaIWx`fzr?nG
zbM!1+{|AvV{U=Ay%=ABT^v8dTgttbKeNO)t39kk73~vGVO*H71h^C@P&{K$&sP55^
zi#3B;0MR6VL!9O<@@W9UMi$Z>rzPu@iUP6taQVD5Kgc8^XPUf@eQj-Jn@l`SFi<Rg
zvO5Z}b4+lYQdoOmdOJHks~-kERH1$#%dyHdBTc+bOKtf6%=z<|ba;Uo^h|*DIP~^P
zWWPK?A<XHa`&{Kppf-NyLXSifCO>tjIR8-X)h83!QHS>xbe2j_d~TWQzB}L6<+E{{
zKs0rxe0g1Hu!$Zt-|%_v8fk1?!=!YzuLhrl!koyYd6?<#spUBS9<tqpf2Af_034(x
zCoAHles;n)&PCVr7TpY7E4ImXD7+U`Wmy+tBn4yM9cMB>0N!e)Gw(~KH>ynh`?_jS
zx41ht)pSGpawlX;$Tw)NLTc>GtYGEQ=wM#dHJ+YYFCx&1i@;QMRm7YQX@tonBy{|F
zUGw_=Y@7Tf5qw%g`p7nM*xGgG1JOFr&JF!{-RVBhekG<W*dcty>!?flY1>}x?m2Fg
z+P2kn9#vjPo7HLj;r??ufkPLTdO%E);c{~n40?nF%`lTh|FemRb`RR5xeo8yAPIw=
zrPBeL;je)YQ{O<NTimAGRq?(9P?k?I2vIvIwZVx;cA<UwFlnOs=!HnpD`ctuk?9sL
zT|j@FK(2~(qBGOqB@=lR%yi)$KzyGs#gk}j%XSbAHB%@qy}^i+fv<mLfE*-q=R#is
zxqXh*I&FwAm9ncYWw^4g7Nd6CvOatH18YL{=4re|b4kR!JDnl?*VeLuAW;9*MOGzt
zr<494ZYK7FfniY15U98#r}EJPg?%Ns#;%1++N~iaMS(4G<lpEFMv+RY95b~zq-NA>
z%Z0^+05cV_0<e4$MY~`oJGTW3Y34Z};+Vsb4B9M8STb<MB(J@Gwo?KCi_zU>;BR7Z
z%GRpE2}ccE0o51KV0Zf?t^?wdh{)szG|XwY(?fUq1<Xy`wn9%BgwMNLoT*U9vKF)8
z2%BKp)Kdr`hOpu)y8z?<O`pK3ei-O#|7NpnX=HBT2wH|I_ZJ{jQb|RGDSZSM(aJ!|
z8a`rEby{MSwY(XOUdDK^;Iy_jFM}}|5p2>oUvMeXNm1Z_$(`u~EUcV69eNu~l1Px>
zClZ^$-<26>vhmg94-9GeWH$=<ifmAcv;J1ZtyQ)D&I#ZCQ(>J{^Hoxo@Cc8wI508`
z`TK3o@B;yfUKv>0OZJKBm}sDl&`Ml-CWRX8S|jDDQ)p+KB9H-?rfn4wDj?$U^Zq}q
zR~WU-7TNoB3Aw9WFDC}UL=hS}Wqd2eTY%fgS0OMhR}E2E6MAcE)mddGhkVmfJ7=VF
zF%zIck@Z4d8}z~xbg$v?fu4pX;R5|C2T+k9phh777QdqLh??)-(2O^vmB=)@8V3!S
zS_p|!qUiNDY*D1_^A8)OzD-Ze&fg`@3C{Lw0HpO0c_eXGzKvmXXLMu&>MUlwrOlLn
zZ)-YUUt_xiZC93t;TgCG%GGc57mlrMFaxED%AgCRpu%{(k$dK?6f^hpH|^DzQuZfn
z72DPaGV2>L-~0fXX}#++5iBn>+^v%|k`-n#5Z5Q)H($^`Ttj1#K{NQ04b84~?g)1h
z6XVzSmF3-A`wNIR_OiSO-m(@WpZ|WH{WZcOMv8u(BFB*t)u4DL9yx4!Ihqz^jZmSo
zU^IwgxxE$mB?0E0Y&Ytv|8rY|qiu+Ch!(x;XMzA}*U_Fi+YEg-QtErIB*XamoE@!c
z64lqSBxFEmzgLtVx^OU-8?i@S@Av#qN(NaXr*X@rv3*ajTA>4C#c=xLd}4io5Eofz
zz9*Uzy%Xz|z9{nXAy+s!+7OOm2-_^M;g12u!r<1_8;pwgrjF7%E2`CcINI|~#BpqC
z1`B1RJMBFhijhR}M5qePmCQ$&O02q)UZSV9!FZvcaHEoA=i?B7s#)`by6@e@cyDfK
z&!w*bsk4J~T2_k4k!<50BJf95mnF3grO}boCWPna_5ouqGieF%{=BeXNma+BA`%Vq
zB$Z<>CjEA2lx`U;{DmQzcgWA?p*#&gr;dy=nR1elGpG!>nQ9~#OJsxmi(1JTAEFTo
ztA{MUsW0dTV8P@1OD8+j7Lmg(q0Bbb-<cw=|3c&DPeg1)N(!Pyh)Cf8zJAC8kbHmD
zhfN<r*ehsCOZJZ;jJ!O@XWx)y5Z%WDhB|yB%~2*vpXO!_c^vkvdLbDsO2qryat#fp
zTzciaG>v@mRLk7hpZ!X=6hglE5Tr}@Mu>O2_6^t!W5Q77*F))7Dm=`RYv_X`kJlP>
zt@&{9`If)JtX}3O{w`~Pt|lF;LDeYEcT68jgU+O$J{crV-YxSQKMvzRpA0*q^9A-u
z%6PuIU#z+<$KMco3nU^ep$A-XLx4D9q;`9LY`-x4aeN+%a`(%sWf;hRJ&lHj+mM;G
z;>2R4LZ#*+w5Resy&Ch$t8+Rh?Db`OOJs&4&9j;9a=bI8PVPyrSj(SzJhAJBxBwZ3
zE5~mo!mjro78f%FHPYG@SR7+bE&m-#TIW-(NpCJJ<V=8Ld!pXQBWG1rL|I<sb~A}X
zt4Z<OOuTT1^CfOr`@%4066RqTvT$_*WP54OXV>lmg}=Tw%%(a@@s62A6rq-*-Y}k3
zL@t(L?I-}k6&bez)W)r?ilghO6px(;>V6U<6}y0hD(ia9?e0LtNf*8VWH!74WYt%L
z@Wb9OQ#DXY;?fg|yctq4dWo~(BCK-DD6o~1GMzo2f_}#p4`cnwY>}9Sv@uCeh_C?0
z0`Nu22tG|vKoPSz`sW896M0Y=Tgy5u%iy#jr~eURD@U>>4YNM?Ht6#66PWHCa)siB
zVlkQaifU_SFgLKDF%rP(`p1Siny?48zEC0Q^9Rb-u2E(t?O=ffY{`+Bv|erf>cU#F
zZfqv2L1ds;r0`XAqT%gNR(N2NGE3B!TVOG_)aaI=pi=zAS?eDd^PeF_7y>QNPYNx3
zxm<zfoP=zFt4OBq$3y1wyiS9MmV-$Y1nz2Y^B7y`@)}`ozJUSj%*_LJcriU}>z_ke
z{?y5%2z-un?5XB4R1}#Qzb2)CaZX3=F5<X><HDHep5+|N?ab%nZw|0tU_<BiD#y&{
zZB&Q4v>pc?5k$LJJb#a@gsW3>k`JxHbUGdxWKKK$Viid#ZLsh!_b_3m5?4{{qYtdA
zsI;}8)%PFSGQm%mDA)YNvTK4z+uIG^c*~<-$U{Enn7dqRtB)6m6S}SkIK&EqQ|%>&
z44h%&!yX9>xYEXtb;8oFXALebpSHeHVG34$4qKgI^jY)cj?(Z9)#qiW9x~2%AY4;n
zx;YSRHmqyO8jkA3x!g3kN=S~)@CC#cGiRG2q83F^teC<C{o!KNP#EOpXKd}MsB;f8
zERb2$T^<*n(8nXe-e;e4=8oPdwrLPW58`%Iy@X29hL?EyuDwEK7ebnOJcar-+JS;*
ze=(sMsv#^%lsXrXe@$gj*0{WZCNL*rMUbeZ0`DFhD#|%>!~fhnoUiHp_mm#NYo9BE
z8*>GQvOrr~3c%YC2!d|bjQy<Zpr68Si<<9ptHy!fLSQQhQH^Y@$gr7{baHk19%kX1
zNJX+~q+F=_VJ5>1T=JdFijVIS$IFcfl4&~Z?f}G8k%~K_m?$wnJ#eu+#S8So+d5Y2
zJSOgI<+Nv19y+9Tu~k$bL>sHHv(E%vG0^}E8=7N-tn0xVH;wE#K)2jOf|-5uYdIi1
z`e)3x?8bEZt{hOrLxsvz;gmfOH%h1(!<ahpYe81hFa7JPX-2v}N{?i8f|fY8MapvA
z5kbRK866^Z6+@Eg?bNI|nu|g7%HrZd&!ia53h1X)SIZGBdp9_U$?WSYX3`M_w{B3z
z&Yfw=+1@=(p-jJqB4^z#jztz`P41N(MIpF7Ln;(5Lb7jI+;>)Os2446LP#Sk#9<G!
zD`sva)G6eH*~L&ZG^r>lc4H&qgb@Gjr6$hAV+AJ@AWWD_K8fcDQwA24O+vd&hZbVh
z!KSse_|xQB<uPmrmwl1<`K{{Io6%JiUYtooki>}?3~S6#l7`b{f(#E3`qxM(FiVDK
zgF|dcTfQA2X3BvR24l@jpWyG+mOnt)*|i?Anw>~sczAC0c)}%zQP|_8jAN7uQW~2b
ziG~;8v7!X#b8*R$k%V;SC%9#tMpuaWmgfVOwQTDZB+u<Hdk|jRW=!~xNSnyRb{G*H
z(DxSb<^JiJ8u#tpzr??wIvdKY@k+(nW}1NMoG6JvRHPfSr`y#VL=1mq<@iz+Zbv{&
z{!n_D7lWU{v`PMLzAowfogCwDDAF~{`LLfiWhOS)a(^xq@#eB$UtFOfE3%w$y66OA
zg-zA&2W!g$lI}dB>~K7%(Z0u=lO7X;B`G+tartaQYN#2SX~yMW4~iDopow>mee-^$
zWou?@iF3vO#(fTXx88d}$kl|t*8c|h&4q~uo@+TurTyNxE^L6n>CrcsWu?gE19axs
zzc7*WW8LwAfI?GISWsr!062i7l6(Bc%p-b`90`3db=Jz0X`z10PQd>+n><7m+IE*W
zFbu8K@@;1{bcMd`EsNzjA_HS=+$cu+>d?gJ96qnhlPqaBd2wXOJ?t18b9Sa-sTH+F
z3jF}<4Sz|@tu7Zl7Vk1_TUl|^J*w)wk{0l`1uvCTravED-8bae+qrI>`bY-}L0neO
zlqrj~Mi~V7J!Sgp{f$-jIA>H!T*8{F{<Q_EmBg|2Ov7{p*QETU;}#KS>G5Jwr9&EW
z6=_vvPPI@e(9ZVDbzy=NS8mGzID&l%W|Bzwd<lHpr`Y?m90)E@0`ArgW{h~EJpmGi
zy19vO)UpcR{*J2Y;R2i9*&=bSqDd=EW0_%Sra@if*sH%qKp(>L?=#>!tq`RT8{$WV
z!it?WKe;aWt;`0G=gMozuS#qC*Z{LFHy7CCMi3}LdPR)(MGQUOu>tq;@!xvx2lfsu
zyw^nD;FjD$DDtJdzDeDiSCv`J0o++o9`V+^5z=HVC+|0(N4IyUePer%ssH6M{VyYn
zg_HUJ9@EVK#mHj*pNy;=)d{;zMx>rgniEM-bQ1avr%81p@P*O{J9%VA4CAVLNwLJF
zXOefSuQ3FviFFt>N|*fp^_?lNAxKHepkbfI4yz)tm3fijPdeGL%8*0q$Q+H9NQ7D^
z^YWV_q+z1dco}FlT;z}T@?K+<N16&G(;xFil_W++&Zn}F8pn9LbF4BR^(-0l%B6~Y
zVn?CH9I&qomWLpk3Cg)819ZO;;#L)=+c)|{n0Z=U<!>7tLk-{1o_Fg(F!Y7c5@Dbl
z#(9x`k`4wbxo%$?<~#5QZXjU%teFBj6pt~W#naUlt|N5&g;jw4X}@@hb7PAr&T%=7
z|NZF3aX}D7YtwQ8FK*4*7tIi>W2r=BrY9RNPtLkeZ^qj%G>jlu)mh7Ao#(q{FfhB5
zqjYkbRK_}TBSJ0T@hBvLUjF5+DW#QAZ@H76=9$+q2_S3PUeg3!vGD`J*ka!>_S21;
zz{4IVUz12-amu_m7(S?`4RVx%==$40Mw@WttK(h84^E4BDZ}pm-Lx1$Jtg26QaF)F
z1zQn=qwhR{P3O%1B%ECF2iq@7zHO*WG$Y?=1tkYOjXS)75?szv4;A&O=qY<2DcGL1
zAo2QmscqIdHQAXdj>}k2PR7U!K1S&M=dpS9jUw*d(b6Mq7^$Tec{VS6{v2`(ht&Be
zbGXGT5Wcj<9HYgx$x+x_H^Ik>XU3w5`rzeP`l+EW?q*!p`x9kxKDaW+TQgu-D4voo
zBeI96$AY`XO;A1QCmw)CGy<gL$9Z>6!(ZD9Zq@?X#cmTrME=TcHFN)t&Upg&581qc
zLl_1vnYgWe)~~yqqCMe57H?Ip#OXnjFostoi#5~|?)n$TXg;HuA>bUV_W_PcM~PwB
znYyRl<PQC2GA`IPJTG2%p#4u)AnyQLzW^Jlc!w95t#hBXPNva)K?C0w>#mKKjc8Vf
zt6aq}=&XF^BL{oRsX8)uc;$w0Y#HSxS}wlO%VqI4n0n?E3reT0_2l9~bKa`Ly4Nq@
zzoo<#|9Qgxd2aqOW#r)aKa8IFzhLyt{}V>Pt+i=)$d2UmqH(7LVMNbRD0-v4NIOTj
zQM!%gGl2m?!qU*$StB|&EpS!$NXWA^-H5{Dh?3t0OX6q%&*f}3gNKka8*UI8?$vUu
z#Qo#U?A}xOQbFkhqvXtmKZC2vlhyO#hYRA#YLXeU*bk9{+agcy-}js6pZ05DS7;|X
zQiQZ8lM!jtjWjQ3(|-x?R86p8w%H0ogJW3MUD@uq+*eMq(~yZR5NdF<0E;O}TL-U(
z2-{}iz6+ZgRC5;rc5y?kHF_^MO*z^a;1Yv?6bEq@eX#Toi&0Q>xAUB@$HUvGhrv-#
z^@2B5WLZ(9Ujo_R_jd2ApXQkP79dxj{Qzv!mZS%P9LU&=x@`DkO`&jGu)YzWv!#sj
zXW)SXmN1uMF(c)qbr{o)QC)5;ci<6a>WveuB)5?oA@faLbc7Hbdl(NpAJv*DVg|a6
zYNK)Y;u<O%6K4|*2r<vh6YQTFcV(gaZ*0_nE!)Zbblr=HkE&;EhQlj}bGRONp3CFv
z*kss%5V$U#_U^ZquSQn2Ynh@d-Znei?7ySV1R)Lg92$TR9#Y?f7#JZpsIxUnn}TH|
zDf^SJIehbiw_X-Zq8s=C12U20iequo5kkGGzTHZR)(VrG{5uvGqBX~_b<vEALLfi%
z&;_1PP3|BIV(gQE-O@h`lW8jCTnNSYPTGrw^gxGenEdvaJ&`nM+F*uDK%U{C10VMe
z^wzUkF!#zeI<|@Jjr4DHwcTVth<cc{iQ+w8sdO;*wuy_1)Iet-U*-nz+kbhL+cva9
z)Htnm>6l~ZZ(cWb;^M`T&4p1vDHc^Acsw%<8%|QC=;e}@RyWvd3jx)cDtK&hS3>g^
z1sW3FMMG#JWQMTCNz@d!6+bg=yE!T!Q}WM|7Yr980wsPLBq42FYn+}n+9en)5yz(H
z^9BcRB_Lt7<pl}N3T=@WD_l&S|G>@f)hw%^zuj3`v#i5Y>ZWx+j+)O0*IjR{*-%F}
zzj18yNMp3eZMe=0Y^QITp5%G--zHibNR0huuVf1Np_?D-GMS*=BoRF+){Pg@pmKQQ
z*wiCGhqO*)n%HebS`n+qlRWIdKx>no`8z^{I{-n8#JA{6L5ENq-@GPpG^6GvpMS)6
z4*jz<;KKOC4S0t8Ny!H_cUUEl>FO`l2MBm)RGe0{Be7VkYr+N1Tkl4WP&BCc1^)Pn
zTKb8K9(+eHj#ean6Dd{m5-WQ4$poW|umJ9aY(y!wcT6N^Jbjk*{Qnp`r!GOXCEccN
z+qP}n&aAX;+qP}nuC#62HY#=N>@m9g;qHg?CsxFYm@&V<ZvBzc&Ogm%2(z0`8LCl;
z+d}!+<WGv7*CPe~7MrTGhg!bOv7~39@8baqK%;JVg&dI&RpCV&X9v0tByeq`Gf7dv
z#Htc+(t(r@B(XPWdPr6y0(t#?z`RZ6*=1|ftR62DuqeC4+$gD0Mby%aeu#_AUcc*6
z#NNomKg;XwhpK#y-D@j#hCN!woGnKL6*(s3)PMkk%G?o&3q{mZu=&xZ-Mh>w3OTAM
zAE1gcJf*9Kh2f5^-Z#dd`CoMRL1h+3Q*m!1p6u80xi-2NdBT8sy+-=c(4#IXt-^-7
zx6T|p7&3aLa<dDNjSbraQ;6M^faY?IjM2@)y@+B~`&-m(SLeBkWWYEeatj$J+an)t
z61CF=9WW^IXa~0`_}b5|Y6gFx)|PVj#R`h=c+VWl)rzC)$~1sO9S`6Y+;2Ap8_)^&
zZF#oaIoc&+EScNi?hG{H?0rVE<G@RaoN87heraUkV0gXX8_{1nbWf~Z-r{<BDaeEa
zZ-{^);MilM#`%A<nSLEAl)3hxGb%n%4CxrM(lL(;RfHir0VW+|Fgio86Ol>TAc8wW
zW1c+G9tdPZ_`;lV^7?Dy#&Np;nsVen2~zJYGceor?uiTJ<H2OXfd(n%D(E&uJU3s~
zx!u><a^vt;xAEgt>XMgb(`RBRos;ZlM(Ohqe?M%i2?6e9UTWA^C<CAD1oR_m@C~={
z6a0{yP5mxRpbv0#8*clFQHt~Xd6htSIg-a|2Or-+@%(H#D5x5Zh72_Y+_O~Z^b;w#
z(UXG_+XQ$#k5(cQ$m(uVb_VpxvqUir^l>K;*3Z8S)-yZW_I?2G{s#6DL*o9Idh|cY
zH6ts>|K>0<G5rg2&HP^>*EJfOe*>5i{*%K<t0Eo<i9jI1KO$LrPJ+z7lC`L4j?}oO
z@RzuD<;nRD@GJRQ1MP#B7;mU?|0LKPGMQa(GE4gtt0NO%<(oO{&g?M%eDo1~_EUI5
zypz8gHLg>mHI$SzE5xf&O=gNL7)aEQp=C`b=fM2y6E>``6TwRtgF&M~f=rHYwr;5?
zY1W{NyKl>_!b2`SPIzSg!1ch};Vq5wPjgDgh5%4(#q2bbI(>UbyX>WV44>FL-NaJi
z*BV8DP2sw$vj!PjlYhMF@D?=23r40_FQ>P5nW%1ova>46vkzICM{~lV@-`bv57&f(
zYMO;FFP}DTHgaXEt`@mnk!R0Vs&e>@i|F3i2ma!3G{4US*cH&{${jjt%?)d)NFRQf
zEF-%k133B|M@-TPRBhE5LugRA!Pv#318sEGFQ#U#FtTAXsYi6FRbVa+G0m?=t@euw
zx<ZoJ%Fg2-faf?Jvd*r7eBg(Z*CwZOekZ*Kq33P23lN&cBWDy6NL>{fInJXC$cY95
z`zb%T0g~<wU;~@(tyOW-qTC1fo~eaOzC=^0Pr+bzKFeBeR?}5pP$%iaPKw*P0GBvY
z{UP46^muZ6_;*}M)eb_hR{xzU_c#dd@had(!d&TGYHWzE-RGx1`lmqhu<v#?-Id}b
zm+qeXG*#SXCgqlI96iqR{wBjFN=Iik<F4u1gb93B<4}9>8PJ@ocbIx}x?K@%RlAdm
zj(7j>l+<Mml4p?Y+rz%(pz0zPW=4etQH-((Il2&}W!&B_Mg5JaKh2HFf_>&%vu79(
z4e~nBe++453)jaPcF)+RnVd-#Ge_6y5+J4e`TmMBb;=m)J837dYKovrTtas8h>v^Y
zVKv|<7Z_z`Ukm<ZnrpGZ_xBa)Fk%_b*rYlS5nH&Lb(~b&c0_Tq3a1Epz1#z-UK*y6
zQY5@~Eag*aRyo7YiUQndYlmjKK?Stiw2X5{Sz|q!xEG$%6hzM2JR_KJTRhl7Boh06
z0>FRykXXeT3}{FzRHszJ;+BiKIHySRggf6ba?D?I_jeUWp+OiHTag17H4s5DKx>lc
z_g`VOGRuGK=^VA#c8aD7n!rp33}R-pYpUnW8W+%MDN+(qaTfZx`s2+py<{mke>EKo
zX7*8JOma_Z$Hd*Ul(T)pi%m!~OVZDlErCu#0m^XN+VqhR7gk|22eLC!9ZRJ`D2Q?<
z3XJ~J239k)u5yvZzc}W(aO6jPu|F(9dx9#bFHJT|yPNA!6<dUIZ>q9X9n?C5v}Mq&
zu5{vy_ByFD(mo+{LlRsKkON05{tEIb%5{Qw3R=F4$&l|vYTYtbP44u6&Ij(d%0PmL
zN@Vv`)UMcox~XYut|AeGPRS+n+c=7by{dIQ1i7G(hd1GX(YX-_><8S<vjU@pTaK83
z<G~3}1?@iDN1Ot+@K9FA6wdYvGyp6yn><6BDxjjtoAwf+0`cj3AW9+~T8Ht;fr2*`
zBFe7AVo_W->lI2T%l`{lP>PKe&lOM!ZK4Z)Rz{)h?9-fjwyb6gwTEgdeLbIBA`gSN
z2&qD!>6~+F-4hb7995z`pkdIcQsJ*a1}ufDXcS_kg?YB{2J<8-lBT&>?xel=gAhcH
ziu!R1F$qsd8MrGwLyIMzv@BV;`~`5?*R5}eqRXpUPN$UODbpR#I6E{=ZJ|}F?B1gv
ztRQ~_DX|q1W`*?n%h$da)vLr42E@Fe3W|MTu_)!I2v9@LlP$~WnZY8~h#e9oz@A!=
z>%7Gv!@L-_x%w?tFRx9-f9*VIc)96L$|S*@%mku!uErR)DdqvjLPi(YFa}$8Q1vxt
z0J&<jE(2`L6WBxF`XFtaC#il3x;SCL>th>Bfp48zhm!Q}ASa$W%4lx>mVhV$`pVU3
z3hxXX(|0wOem2yn`gJD<7(vnMbVyZz)goz^N`z3ln8`>Md)yjo8ozwbmK5X<7z%O-
z=ng649Zx&9T|0HN_r(=y5@mJ<#X>USrG+M%uj%}K9x#u2@pJdh%3#3|D5*1+v<ozF
z%BF;&m-%D0Z;>9Ypb9sLx5c_Udpm<binrXjiBfXm>6t1<&~vY!MozVFQ4yjQ14!rF
zv}>W?9q@V!u+_4*JScS4(C0oGd+7{=@l=!Q5Bwan;ae6|ibB{!3ZXCSM$!$s&Ihxl
zIhZrw3yyZxhIH|JrAvD~`lEN3OX@JiAytT)v(m(o%`yXsjJobJImWW*8ydVV=#z!`
zeuUF&teUW0R>g<=Y$<TlnTOhf5Kben*$hMu#vRb>S*8k7UGK5*1^O2Tl@7kwA}3+(
z#l}q5>KT#lq--!qs0A2a-y9&?zJ2YuPgnXUB>xX^mKx~e|6g1GshI!y>oKx(aQv^|
zhWTHJQs)1PC|%Z&j{93%dq30>I#hsGbP@}7y|ze1m04snG0qH>F?1qYRmT#E7Ir{H
ze*}G<!;+1yj>UVptd-yN12Qpvce^>3%tRPOhdwucjCl#oIp28-Tv1#6#<8|%$drj$
zrO8(Dg&qxC(^;fYLSRC&i`G34lC|Al$T0vrFuZhe9OBbUkjv81UQd>v!`c^P>+um*
zy32U_7+>eF3=X^<KjrB>)yD@Y=Eg>8?ywmRL0j?hnR2S<v=yyIY=hw%7@;f;s@Sm9
zf=Uqcn^V#q#p*}rm;TBqQf4NE3b2#WENhLo#Zj1Kc!ji`v^{{rmJQbIB%C!kPIxo2
z9Lr=NP3LDSxAl%B&bg>lU0(rO;|?HXDVvCzQbg)}J>PvN6@k%7O{nGzs}pohDz$^l
z0N~GorYT|VSqQSyCJEOGM(&-MpM`Ngiqb>TnQJb7*cacFN-qRez%g<5=ZY7c%oy?y
z9T);>dpJU>m}V2}9_>0(NB2jIcVTit@_@bPyt%x^W(R&>?$`Z-;zYdfqhuE_sD;Us
zfqvZiGJ1I=B!s$-`9u6R1VaP~B!7C?AU&vP41SG#G4=QpBy?!3QgHv+aOt!h79vKt
zesF3>%?PJ~6Kmk*VO-KXE5%Abqy=Z89PjrHoQM=VPO<QL@F3$@phAag+)^=ayt8C=
z#i(6JPL({&QD}rYZ1l%u(*X<Ww~T&!K(7^8jix*U;)qazs9JtwJj7M?q*h@lRwXR4
zOGvSQf3;42m?{{2em+x4iY6jOij-N%wcH73MU&;lHv^;pbgiJwbuE@m6cK1TQjbTR
zNao6(u+c#ES_}+$L4sCF7LVvFl1(zm--7Jw_tDsfEq3cfiQ=Dv<nwk<YP}(oh<7^G
zIiw^>T0e=(mae78QTIFCC1ny@<1!>08RxpJ^EXf6^=;-o^#+f!V@RiJqxR>f7!?fG
zb&+I~+M|&Na*i}6p5Z}^BxZPb+vRy5WTr0iYZN>+o)L>zcWI+bDl`Huc*p@FK6p2;
z>}|I6gps`ChJ~9s>;kvAO=V>@tH{qcwPzNoOT|Qp*zYa`A|avK@yKRpOz<umXFQcr
z>TzaG^Kh4@Nl@IYC_eKwzLQyB4p6)oudv1K4t>gs0+7^JTis8pUl-hZf0IIbLd4BG
z88`$eudS{?|Bw~r<`1}7q0|&h1hm-UNTe^mQ*UjD08N?Wyn4H8rz%*B7Jb(`>`m{*
zih@a{f-aez+9i-QF3d4;8EL1r_>1-?%$d@pP56h-L9@aT6EmEG)S!<aZVO+zQJQBr
z+snGJmBI#lnolZh<xM^XGg?WnVtd&0_%n%oxVM-sdmB__sL)=5E0#HFhJSn>oeRhe
z^HJLLX=4sG;q688j4kF&P~roY2jKZEeSqDhFJN>Z$8m<t=qb&_^jMT8F8rygnpzt?
z+NFNHywC8HvEZwVD?$h}GDW|As0wMereOCig`2XAPmL&-GbUwh%emb!0-<X#;#t`y
zon`4}4@r#!)AI8h)|$|bg<ZH^-jT<HJG;sB=(Lm53@<9@=ghvy64gY(r8r<Wat-ea
zZAbY^41Y;?UO{Z&;(NkcXi+rhnO<d&XykR=>1t{gZ*%~+(cVCsNxQD?&)D&CKghK6
zQ*?h?l06o(cH~{<;@7H*r=9=a9IBY=;+E)fjb}9@#-UpWaNr-O)HyfYS?`$8VZQH+
zK0t}lXwqJa%cDp|!ZW}!>9zYB7a+iSrtRx`3N1;xC{7Ekmt4QymJZI)!Bs4tPV264
zaDYfs4I1zk5Zf*@v?qbAKb4~-<&#mEsnUL8)EsXSVBj{o$t;C3YQB975dHLIdx!P?
z0njo+1p1eU{ePG<Miz$u8<R8t3v<T&UomI@Oz}97{!Z}_JTN^BoJ1~m?09(rxuTwA
zS`YiDh%_;phe)<sNZUj<ll;!UPAiB+rF%;bucVC<z_F3&Rm<d5a~yjS@|X?|^*%D_
z!T3CIyfGOblbiA113y_XqaBt>@IT);`_Yra0=9=F1|*R}jT<rCmpwV&*>Qj_nXo`K
zu?8X~8Sf?>I0x1FeP_0AlEoTkuf5PlSfGiS)?vE6=sWQf_0k%LU}<6~;)uJZ*r8Y2
zuuC4vA0(5h8AnCKS{=YP6J0m6{@O6sK%-lzM+jdn5E2~_HV4zRR853;5<+zMwd9Dc
zqPdwPEpW^<y-vC;tzaH0<$X-`wmeP<7|CO5Ro^*?JX9?Uq~7F2BvmSo5w;$_Nbc}V
zct2N<Zg1$&nEGaOn3aU_Oj#y@>Y697Y$#*aS6CJKq>#!))JbB+6cI29G)MM^7!OUS
zk0cZG_<h?o!-hN|$xst{R9NTbD;?nXvE$D9WB_K<hgr6PEe2wZhA5178O8R)&Gspx
zkl(BefJ{xbtG%%T5(H+s1z-UzQkm5COn?O>3zvnkHZPvzi(E7>0^s3YS_ld$EZ12?
zSYkYB&>NSGRV`WBu^&4Iz?m&*V7%qN@<Rs7*nZ)m_Elb*i2z(xn^4Yo1N2A=VKvuU
ztAv$%m0}-C#2YHr*N~sAt<Xs6&IVBUu!6t+P=X8bd$EG|b+SA7E9RNR0uyq}1!hn|
z7wY(L^8PsaH=zT2uSV6Ehas@!iDtBApAh*aDud)}o%?clnxr+|GF<TmjuT^By%k&R
z34n+c^#Qzleg;C!-{9fi0q+6wOAz<B6!sI#KnFwDZI<`^cnia1gK#KPug~qn*FlBP
zq%Hnf8xb8VO{Ls#KhLm~z;GE|erx5Pr7H{X`!0eqh1Jg2irQsKAHB~TpR!2$@PFMD
z<q9N*{93{+&tWdg?L~NQCD89bp@h}gx*%*HZIsqWMCeq9w3ceC`k;hWJspI#$gN!N
zCdeZEGht-T0u=?0K^CB4V&G3qi#p(*2Zh$bQ7Xq1u+mT|ohXW41f!BzwUnBnAPwRV
z4hI$JDv&LeQ8WrJ8ssDg?Ay$otTd~#EF%rzRGF9dK;ecVa_wb}?Db5PFL?(>i^@ft
zVvTAhBOKf%e6{js3<pwSJ?GU%Zv555yOwNB909C-)S+V;o;n=1)*76Q@R(9OGOxRI
z#kl&VZ<AW+|KNm>i{Zrmp=NnIJi5SD(97CsQ%+-GR*D_>X4~7}rb-NLUTaKgDO(BN
zn84gvUB#alp&>W~wH)0gba{-*(J~zZBXcvcEBEWF#~iudR}8FgK2%e~Vijr%<*03T
zbwp!+n>U*H7U0+cWr1Qmv1pvJit5XSuB=1@XEuuFQtF<wo_tItuP30&!4bz=01yWp
z_7MPsdr+?iFI9+NHjRK#NoIB_N$-b;4m;n1bXP5UR3|nl)|gR#mJ~BvzE;ZdarF3k
znf~|JJur)j1g#HFgqTofOQ{W5((i4+VKiusAYUNNz8=J-A~9)20$ylMqwxYwtPlZ$
zF<FXzF$zO;^L~=CK;iFfg{?n=^kvhwhjQ+IG`!3A0ZYnDk-r!+Puv-VvgLM?Uocsi
zZ6$6^EB173hKY8i)~~sguM8w1XDu81zTHB=TL#pzY+w}D8m2cd8;=&fls61_4N$Gc
z>2LF@X4>LQvpdjZcqGE$E5~IeH3D@O3w>KNHghM1aIkb{VxL~Nf=es%Mry&0iUg_q
zd#ffVr2*uVL&~A4;n0MFNUX=i0P_$qHvI+cLapVAmL4XhmjA}h=j1rZ-0+SjJR@WS
zUB|mO_Tu+u8p^8{$*Ywv-TqWN!m;NQlorf-tz(ItIs$VIECZJkmTDF_7HGe>bp0F{
zT@Hj)sO)@jhBqmhFW-U#Sl-2$?oG?a8<ih5#E?RBRct~t8L`9^vH=TU96G`{n)$#<
znUEz+>*1@jCL^ofpemC1q72`p)v7^11<gkRflDK;Y^SAvJXrQ><r5KUO`SO229ks#
zrghByQjfFTdb#j_u+hmcjd)-BW@7Kbbliois%!<;1JH`Ntq86zL%QMdWQ8%D>!Ezb
z<8!5o8kFOQX>Ck*m^@tJ4_n+=l0Kq|M2F!*`*mloCMX5q{iB*M8ld!1Nfu<^IEERp
zgZn3;M4R8UCsp{WRWQVw$J~|@c*f3)O37wJs%5*J0HL1^R0bk*e#e61HArp)udOM}
zZB`Dfj5~dkC_iNRryZCHkV}ECK>Jku4<xu^I^Ohap_V`ZFRfU59P)_vl7xguYtsF9
z2T^<vi-q=}>`(J?Q&!a##bT_&T<`daWGcvp=-&XrwGvg~6{$5SL--F+_%5GNv|e`$
zB7VY?Qo~w#7%s%^lNU~m(sjAzU|(bn82Xpn9u6`MwMkNj2#PuO<j+`)be@fMZ$M=g
z1N;~p>JY6HkeM4;AkRAF;W18>VbBa-Y!H6$PTcFfZpBB=6<#BRk=5sl;Bs*6p)&9D
zN|5#t8(Fqas}Cf!W%u$;&)Wu)PW)Jj5IZ)gKrfJ}@8P;H3zHR#A}JICkQQW_vKFKu
z$PK?J+i4)ICo&QW#{PBW1!;Z>oo#Es7-wZ=@?Slg+n#4=n$drPsLZ&7Ed7K;ZK9Za
zB#SDj;K*0Dr^(6GDi{Je24A0X7#CI9CtDvnvP@(@^EE?X%s;`A9e$(&=??#1$;M(n
z8d%45=lKz}5mcZB_K8RdyC;wt0MQo?;ka^Qegc1g1Hq&O)ci{?@;@v4zn%=H|NUgL
z{L9Lo<-c0l|4kZl+-ybaT~*e1M6NXI2kFz>Wp(9p8I|0S7(E@hZbtysw0<j!Peze1
zvx`^fymfa4yc18}X6ZO{A9;y~)<^%iZrgnzcAzAt`(FDk$>%UWcyt(iUN-bC>G)vD
zm{G7yl#%@#{(jhymoW+hk`t0Qj^-gk`KBz2Umv+Xssh2`C}7x-)ge-|VMzV-_R!Tu
z<g4%ag!d5$%ZpDFhis-U_UAIWd$SS<y?(5W=kFY<3ijnuc!LD{K@5#MqhP+mF1x>R
zj_$*>Et-DBpV5l(v0XYu+?0qR%Py;##?nzR)1|4WPL<V}@`wfEVC|+&eU_te)&3%j
zLd%Tj0@j*t!j{pAGET=-&m7!X?4ndE3f#wYZy|n^FoUsH77bgp*0=l9;}-FdUUDLZ
z=(3S$nyh9s>`o6s0oi_S_)-xN8<b^1d!H>H581hcZ2C|wK{aEtxtu<ho*9cS7}|kX
zW)Ig>nR-DtTL!7crux;G{}?akkip)#Rr#o1l5lx14J7VS=kEco2`P39k){^=nLlS1
z3X?i3DaQF7WI{^jck7!)AiIMRVKEeppJ-}h=q|$B2R>cD+5Y1Bq(N=WEql_in_Cc1
z)-~Z`V<wQU4tsRAu~XdlS(4nt7)M#{53EHrumB{6w+|L(l>7sR!VEy<XvG$|4G|rU
z?dVL`p~<c7{6dlK-Z=$G3}7i+WLqQrEI0zxN1))Z^Cxc2Ux_Tcrc~;p%EGCc%{3T4
z&O>{BwyMVJ*MtwYX5|9>JlpHR%D1hXjg~Mdbh}fMJ(O<ik=0A5LjAmyeeqy34sRkW
zg9AB?{pF`0+uME^D|AtRI=y*Tp9To73uVc+GR(XeD0U{AEgLHS3J-iFnxbh?C8J0-
z2^j!;rc0TtRC+*}?R#<fa?_Zv8O>N&Fb{C0cQ`dOi>Keco*l|APCgrH_|!Q$61~&^
zqiNmewuio~oO({xe2*ss;Op+lv_3+qT?5r}ebGoZcZd<6Scb~3D5#DO!@3O$L<G7h
z0Ci5Rtwih!1(QDc!pJAOtGELf01nj~FRjKKN0#6fqTm)PH^nHAq@ga`0uTFK<J8Bw
z_BrLwk1dfMiHt46SmIiEpM*o<V<-2Cn7&<HP6~#*5A*5wgGGJ|{4<ENND;}>%doH-
zA5rP=yz!(V#30a*03#5vLCkImh$ULEKLBOWQiXbeoDSTfmUiZ(v1J-(Q`4;dqRY5A
zM2mRO{Lpm*#Rqfy+VKqGf7w*K9!R`Ooge(vRH=JlB^Y7=f{#^uSF@e-*q8xDGsEFJ
zA#yqs4@6SNeKeDRx+j)c^`oPgpmN*gD*_|oL?|F9umvRltMVjYC4iPpx<4M^N{e~=
z6i-Eln(Rh@cxiOl;RxgC>7fW6k_f2vn(jm+VCY(I_$RT^ygq`%Uv+JDuU-^78%d0|
zA#<bzP&+HX^TZ_y4c|1wJ6NH&4WL~(YJGaz?hwl;dOjW2QYP&=ZNh2^K)0g0`7O31
z)J`O*7ZeAKwy&sL76$=JOBf}k#6WlnVJIDroisiN&;}yH6`Z?1R@KESOb3^75mWIg
zAeIFCP=Qxae>=(YT35&22H>h)!~>?VDu^lvUYg}j6MBUS9|~h|kO)F>xUm;YXLqT5
zh5en*O6knghzOK6F(qA6p#{6V#aLZ1fR;L=ysT)y4^;7VERQXl+3@@Rr!ioEeXwtj
zXpm0y>9nYQ!}Zb_N&u9#m#x~r5khL3eIL@_InDxD!Z@?LI$jDp!<6;FVN1OrlVIDT
zWLSz9&Wxfu^3Qj=y&&J;yRM&7?-96NGbHi&RGYW~FExL_BbdAm@n<#CKI@kKg|^4o
z)Q~-bB(8P+lIY4gCAN*vml#?9R-R73Dx3IT`Qu!4oRsS=iYt25kNZmcN|#-fLrLT>
z^2~S4jw>Lm;NAFEgwQs*ddB#q{Z+E*kF4VL3Ls(s1QB`sa{uP1OL6E;p+DXFxPldF
z>v;AyM$3q;OhPt)Al4P6(p-$hFpR;5U|40*l?KC**DvLfj-Q6h>v_ya3va{dCn%kA
zd;}+<emvY6FW7SPZ7QOrQEZoZ`5fcdWE;1^UtNHiHNm1^nr{M@-uu~&Ssu)TpZH5v
zM2?v)JlR1z_BwU1wt86yMK_D4mxF|0H!YD<^W#FH)3dkolO(qTzy!1^@D+qc>Cojg
zeFS`#MB#PXmCRf%r&EHdvEG@PZvfaVFrI)6Sbzf%OzEJt$btIvo|N6Yjo=7}B8o&K
zf?{*aiFcjim&LciqxN2=->;wH#s1_al%#&sy=LRm(B-3Jj;j}r1y4}&@n7i!j6UUM
zXy||Rt=^fd>eIk*Uhkn9*PO$3^;v)_KJ3N}kjomKMDtZ(J>gChC<?hi(BC{&p(1<s
zdCseFKOanm8m=v5;>(Nv(XvJ$uW^6p7&`*29Euira2QjDVZe0tagK-MOScgqt$p@P
zPDkSMn@yI#pXmffk+54<vJgMUv1En=J9g7N;jHeaY5KLJ=uYpZQ@<j*=+ORWNkGq}
z7x)=;Q1XlAe!%_k1;2{!fsYN4o~wYaje|F9Y05hEDcGuXey#ZmZQZG4<Qo(?wF~&q
zLhrshK3-wa(Vt2@>3#b>OmnYA^t4Ltmw2?0+`E+%TXmDh!CPpxf<thzYh?4XzN-K|
z49O4L1S5YHnE;(%I4#*#>c+X&Ds+(9GQ94HA-WLspAxrko{aCHzTfb;>P`Pb3I5Ya
z{9{UBU}OKkmg8R_CYJvSVp`VxyE7j9&&l1Cc3(0_RL6cHyLKb83F@Y1!zWRP3IQh)
zVh{kV|H1|Si~2*{d2YW6KxA`?Bb8)_^?2XZ)AiH&O+WjAvY7Yh;-`)+8DB@9ch=wW
z2g_em!h<Vc#(w3y<HMvKVeemh`HD<TNKS}y+?)A6GVJ^_&mN-sKP?A|!LT>${exz2
zpZf1lw6-qdN}#;WR~ayt)W|7(@|~D6+tQ;$wbS+h(Z~mZ^}mskclOWeE0e76UWvDf
zFzDBpBbe6ESvGZQlNW~Q3}Dpe)%No;mHtqYrbK-vt2>$rr=FT+qH-sTYh}HATV9VZ
z58F?ZpLR3n^}ZwSZKrV`zcSK)xrs_5HA-C=C#Yo7d^}zRl5{wLTfp9?ZoA``F_k(L
z7r(w=eA2$zWR!5#RU}LTVI{mD8-Jf#+4ag%18p+NwwiQGPOx|hF_s60vRnBGh?Pu+
zQ7Y%s31)M)zP8>+IJhAw-Dfu)o*1-feL~AQ29biGCd_7n!v7HnpD^$yNtv0<qGT0^
zqN}*CX~6Io@}WeaF@JNTDe9#+VzGntm3wTKOVSFORX0v5_JH-11S&X_Q7<P32M{q>
z>qDw1pkX0&&cV%xffwy6Rvfz|(l#)c?x7UOjL{Mu7qwZEXsl!i?FXc20E`*-OI2%W
zjrRa!Ky|sZ?3>WM#kjR>3)th&*%0;VY$gIo9XZU#;_m0Ai7Xn~{^MhZV+ZVeeO|ni
zqKv4N2Z-R}vXS4bPFTt`Q0}r<m*fa_e)LgrcjLk<g}fqJeZe$+3+R#cOEoEktc&NX
zbrD3UBeV}gpbZo21+2@$R7ZM8UKlchC?l;H(>w|Y8ymHV=tfC5@0Cqz!jo>!B`E<S
z=Jx<UrnxJZYb#8JQm@fD+54Ak0?lu%Vn$T2;q7fgr@9`)D569de~n8@3WQM}5O`P=
zxI43^eUc2v<HK>?oD5O5=lWkj^MJDr$h)tv{)l2dxfZqxGu~Cl!dm>>wuBOd<$VH|
zA-**$v*IINm4Ix^YXQ~D<I+`|U@M-iMCWk$QH5j9iE*@ppgATfh$3>5V7cwfq!_4#
z4@7ko@IZCU<3xAi{@>o8qWE)5WmK*2{5)^LC>><OzXqeFV$xaBY=L??FZ(IYmwu<~
zdHb>_!$ebPLu9j*Ma}O=R+f`5w%KhB`pl2MUaeN#^~Bxo#!Y4v7f>JU&70x#PesGQ
zL>47GoOZ$A&YYm*e={At`GX1K;B$3&_&WH$&lpq!r=s`B_G&BkVLM(~i4yOB)JXID
zIY$UQ8`=!t@2|(FdEuNL+oYUGZy&q@kk!8S17O!55S(UM2A>C`QpJvt=xdjvFZAJo
zLhK<?<^?#K4N%p5+trLk9<N@w)-(lu-e<D3mGP0yQ8sh?p7d)f;yON8$xYkkob36L
zg?@?~wNtphU$|-~^P~HLM=oeKtP4c&Q#Wpt@hfHLpTGBn7WGLXcxTmC2BjD$SqJQ5
zZ=1>rH_0wEa-sDCaXmb&u$+bU-5r8EA#%~~b%323FPDQ34bbC&eiQo;oaMV;Q9OE+
zx67YTG=IgsEly;hVyHy6ihk^y&bxXKFt%p3v32UAS4}jp+GxjWUm=w2d!(WQIBb&f
z7WN%~-xLSudaI|_<DOJowuu5<F6WAOS5C;4`8ggklwV%@FkzsKUMiLwlsZbSQ49^H
z%@!~1ozb`IhpFYXE-0pZ%d`mVsc84e{LE21y0~znpbF(55+~{t><MDCWjpS(G^dcX
zynpf8h>HdVGn5MA|MXXn<**UsQwj=~6zU&I!N~^^c87-M@pPW08kC)Kh1?^KGUph&
z5)B|Ze(y&fje~{VH(wuc+~hdSm=}B6YF^>AbhXAmnkvXPZ4jU;SaHM|pBDxz!iIWw
z<BW|DlP6ZIG1LrZzlHM1aK5bby(ZGIBASnScoof^^tIB!oPmVN@mb1xNT|0~<U)?E
zBILRO!U@{~eYUS)q%9Q>g!aw;Dp4nYnHNCmG~UnOCzRC(oXU8&1QSMTZqw$z(~=St
zOpC9!vhm+-qIOQIjuHZ|hz0gWzGPcw%*fi`Rq7hFM|Tq@Adr5e;Q$j~8Q!%UP)z79
z=Pr_y&`L__%^Km@0!c`_YTSsv6D08Q+GRRKG+oo*3aw{ZkHZ5IcNxBznJWSFBRj#B
z!qzowpcsNCuX;9GC`#mXQ(4_n7DZEzB~=I8fip-}Q2-YpQUQOx2)emv1mC4p-}UUk
zT?L(rv4!}qdqiBbSUTUEFl?C>e{7N`rt*IYsxksV2#D4l5Er8OHspgc96!Rt?_Wf}
zLrkhZh6}~U*AtY<e$em^OD`rZO}k&<c+?>A-yaw}iztw5W)EW%q~qfSxeg#dY6zwS
zSAxHAd$s{LSuO;?LA>jKbGZ&so2*OEOE4Z-WW8E>@`Znr>S*JFc)MIwemO>YbT7{i
zbT-|Vl4gUsXoB%WTkVcC-2#C-N_S{2En2H;wM@^ilj(Qx#I`+)=FQyMHHxL5){w<?
zTHI{g9x3T~Z2qOGe9>vOMD`1wod1>cdZD%j(Q~Tk7eJ4rEu8rrIvI-7E67g=^+W*<
z=B7RlB=7C6u*~YXzbXS}C$<AVeRCG~@kUPsgvjsWdpM1sWtA0w*S^4g5G$Y=9%k(v
zkh4+GS+T&3>5dtR#;Pb-lt+`qeX{@;MHP2YIjyhuWq2$sN-c3d5;!Y{u;+y-UsHgO
zS4hDS6)|rZs9>lMML3it_2@Rba1cLKa6_ZXqFZ|cmK^%yKIH0SAFkCk(GK(Bae$Tn
z@`W9%83p|!@Ss2QPeK0h!K~G^OdmNwm)v{UB(55>P!O0BZE3Xzd#qai{W19da-_Bn
z7SE=ZK+M@epnY{;b1yQjj@=B%vOEg1+MY0Gn@ga+hF{a{z9<njq_d2k(x=5nHo|V;
znpq){P|Ipi!j5C%sa-aF;uNzX3Vr5T)=!1de?Kw|k(=nm?qJCwh};X;0+EeyctBdA
zBan0voB3rfkD#M&0brI?CfkXu*=k4ePNKHNE{C+GG_B}oT^l%2H^BL<a7(hUb|=Od
zfEt@C_RQA#T;kw?rRS%nhcY56T%^u-1<}HVpeiy2C+|`U$2q@A)hAnaNI=BAsrE%t
z4qoBphsAQ-9>@9jW`6@-DekcS|I?y>8nS;{H)hWN!~IzP1@~k9uW-K-&Gp315!An}
z+f!B_%KAvJOzu%awhWDQ<gg>27#*qvTUdC5f=1{8|67rhtsAhpKXalqrK(4<AiW#s
z>z31IUdA-8=_3A@lRAy{OZ{87{gGY9cLViWT-I==nvH7|zHiLg;7Pqg77khm&4W)X
zC7RlE`_?CVnEtN;Uit{1>a{C$wGO(rr}HqqBwx3wpgGrNw^4YH18{36T@C!2y~D&F
z?ubM-4u`&N28BuMj=lRqPAfO@7ile53%RIT8z)@rsHfIjHtBUDySvYHFFtLrf=~NO
zYKxrFoHf^Gmn}&h6N6TCFIT?E#Fo)&gRn|E3}4rnwYsG`SBvr1KvwdG$?qY<gcfnd
zrcoM`u1bmp$KNweO7#~@rmE}pm8qsr=(V`&8v(KtzN6>3cOFM15w3fKVeHC3I$2!~
zNSCuVoztM|a9~@l_XgL&JgNA%aF$m1i^1Fl*TJ5b6_uNsXXb)_O@F<4pz@QIxLZ06
z)h1pJ8e}|@TMVrWbavP)YBVrDS@eFppH>a7h!*mH*0h1>H5PNuq@aj}$_5fot_T)d
zt3U%YC+wUzQBdS??u*3-IC10mIK)bCYorHTrA0=;&}!%=9b^XOC~d3ZkYZ#G<uols
zyswE|11xSUwsUMv9o#y&OOJiAG~;ku4^N4)AMC@cpFh56j-Om)rlwbC_|&FXXVo<9
zJ*@MmP85$M^?#3NswE@M`CDj4=7^C4ZVNn~ynHP|Nd=yAGsE*Pm6t)iS~$IdGylpx
zg<~8L4TJu6PzYh%LE+fKhj&LRiMWL)#TM;-f<fRZ<+TRtjHe<!N9WpFfyNJLnJ)*>
z{e>T@@JV=1cu>IXPJ5wrlqmyYX5{WepZKv*TNBwl?P`&$w|1kU8bi?h8rreIFe(=D
zT5QBy3f9JXKW3vTH#|)Nls#?53Bf5fl~XWq45|6x&8K!c?~)cKxa4(%OrLm)8J^KD
z`-n+FXHvK0t8bzO@iIRFCxcXbD86<7$6Bf5yf64+iIB;*8Ur=O&G=VGO{e4RgSB?q
zGw3fMhM`|>x0;>1tA!S7B7nr}%|m@;a>@*#D=jXqR)ESRzmO@mUri16wNv=%^k{T;
z^Chtxq>3@uf~djMPf?jnbl|~TcHM6AeY7I;41S&uAGqLcAxPZyDrSN|6tALPhZf*O
z1OME$K;>NDufdJZh4dEc<EA_1<c9k+C9>vmLxBXge;A#cPaxBxL4Mnd+R5!b){93P
zvmIPyePm&ux~UGu@(;^ENJnG!VlyB=g8aUn%?u$*cHs^?B0*_jc0SQGQmhE|@>nT%
zZx0w%jP>DANq`<#Ew8Cmp<JjyjIj=k?Ask%c|Gvr-hE~5nagA4#YU+HnfDuO0rF}@
zzVJvhE3`&U2E69SpZh}jJNqMekZ3T^+GtL#XeFNYM5yU(HbW_r9p-TjvQvQ0C=I8(
z6#-t%Ooi&9Zko;6yHa(V5Hz?>5zL(iex1lC`7Raw8yh3-Y8*}#1i=t-Xt6_|G4@(-
zCjjjz$GN8rQY#sfNP>}QZ?`>R-;|e{Fzb+GRHC`Fyr7jPtvzqwZQNJl&dO9QUysSx
z92u<8?)4)73I1@iZ;DpPYDp_miiUEYCa<kop<pf-ud%$Zzr#O51>ue#mu1Nkq|t1L
z{;Ecw-G~Gk7~yXm3?lO@(tWN@uSA-iAQqyUEiG!PVh~BXc<gsmqm8ztN^_aL1OTg?
zI^sP2d0O=ul$z@>8VaPQsxjw<D!_=BCj2R2p@mqy<*cF59*vE*Vs<>o3)C|S`bR`H
zInj5uKmdw_dS_~=rBYdrRmvaSG#B2HP3UO_Gm}U!6jGwOI8Cp2XCN6u0%Y)j-N-Uv
ze6rFLU%D49BtKR_t6lcYJhflD5IEmC*ZnXyp=jE&2PIh9Comu=mXK7k$zJ+#To9Zz
z=SYG=#`&h%0jD@DzP!`T=%E4Nq`Lmpi{OGj)`b!4y-1Ny=I(%q3h&J8%`qR6teH%T
z10}zm`lQb)bh$mNa8r0ZLr)ig&!8-lnn_C{`3eT3e8I|x<&2ei(S`Fn6lX~ia})}k
zu^S?+>c_wJCvcie1VKY{E&F=Ni!JAbnNpOu!y8E1uo`f^s2(i<--%8krIszR`kO7d
zg4KturuGn($5JcxwbhrZX$vrl>p-L&XrI7#R!=<|-Zy)eS0N1EJH^OM`gI${mpW1c
zCB_A^uA4%ij0T+*+p#K$u`+e3(myF%+88_bb89;?&eV(SHkzKT)XAU$zcuS8(}Ux?
zh?8oMS@4N#2X%s+tXt%{?4_82W}<a`NH`&~1qHkp6qN;7%#+1X`7uLAtaF1!WJ70X
zVUt<pUCVeU^k>((D<FT;`w)F5UIPobb)rX1h3+BE#PKOPp~9G^`eb)d<2gh<6JXz$
zqzmjf;7c^)N&0qs@pnx7BPGNAWO*=Xv7XLi<e}1%d=>3+EKR{MB*vy{`*oXNf4j>M
z^t9&zFdn~41(~x6W=?fdig;DOTxb%om#)anBAloIEX#GeSz@L*ESc?B1n`Nt;hT2(
zLg5a_N<Z;NSLF}UKLQis#n3b2r%_|F<jsKIzQXftR`Sjmfqk(aRDT+`GxY#+@!%i>
zue2+L^I&YQs6!j-fWx9w29hP0cqmhrQ_AGTVY(C&$7qUXrYxD2w!0Pjk0!kO9po<A
zsT$Yh`T!kK;RT6_nq7FTSyw@R<W#0fp&cO-YL1(AR#4e9NQK<!iTc5igc{jD1+x`4
z8mq3(2(}3wJ$M)+oDyp9Vy728neZ{pk8>adyf|J@Y5~K_iPheZ98!U8M<`PVCEHd-
z`0UNv2S-`v%VSDxgVHT1xUSUkM7{-Ku*2CkGM_Sv!IAm0Q)QNJm_UUW^VUY?C^DUw
z42D|5hq+;^D?&CxTXZNIOPEgfuSB(P!Yi!|?|Gp^S?K#y5+Hk;#nu5>_*-k)(dQ~W
z@?j16hh<$a7A{m)>J&R^m9VQ+NPq)h$m#Hd$m?01JD9F6vo46&$@kbui7X_ws5n$r
zy_)8|7G3~wrRyE0PYbSWV@|l>#k5>@@;Jya)_QHgPBQ9wBe6y@loCZpSm!10>!%Lk
z5x+#k;Dd1R0;j<L*`7>evX7Ar8<`-qrH?z&&SRz!gn-j)&{r=$?nFD+?QOjlZK`7S
z2wL)>AZE(z_h!NWlJTUSa{x1T`EpCWubOkma~8ct4H1PW$+dbGbSOj+6vVDd)0JSF
zZdv&fsF{%Ntrp$CYcyRhQ8c_)NWS=S)e&XO<so{Esqo0&R~%W9_n*#QL$ZxiIJ7KB
zL^tIjGaP=xfH5K%a}f9wh*z6y>#yXgmkdbiqH|4R{<?bmFm$ME3=t2g^n`w2Tn5<c
z?UkHmU=BJNjFx@JHD?xU2t_-K{nFcw3;*oSW9dJ=ZC7Wu3=DVX)U;6M)in5V%iqfq
z*V2Q?)W%QGyXpD5DBrYl9FxLbckw;9>1Mav+q=Eh^EE1?HB`Dkd)@2xeDa*6nEPfj
z(oU{?UBw?)408l9w7ZiLN89gyy|l(!j)B6b?^lG{bSC|@9@y<M1K0UyxXlji1J-vZ
zHZ5Q1$-QJ_09iAqTgF@5HbQP$IhBlwl|B)VnOtlt;R0759LnnKQgTVtWx1yGgeMG&
z-utB2fKL@(WN#J0P{@NJBal$)D&9*P2A)ldv0nFUjPELTE|KP7447{y0iM?~r1k0T
z+4SD-^Bv!*4dh?MWdAhK|Fqg1O#e3}W&IcWm-WA*f2TDj|6bOh{3pzSdYMrX2t;qa
z#TNa#IH`5M7`p2)Kw`{T7zs*n<C*`c$O{m`Tf*_cxRe=}o+QdW+iTV*dlH_a4+Qj&
z-RD%6tp5!=KHJb|<Vak%ApaFxuWrjE`|el58F<&=h%FIC0fhm~b!H4Xerwn7eFTlP
zeTFF|FlyJ~5vwoPI((m3@e|iFj!0n3JY=-PXi@Xm_Iul&GuNmc9MLNFc$NW{*sI1q
z8h7^(jc1Pt-{b2(tDZ9)Y|?sK%r+lZnkbWQ!pJMs;ArVD1``hBF?ge<w~xznG^7KT
z>4p2`?b%yjtz98XG7#H)NLK1vlg-F(^kLKs5n`_ZsS3}x+So?blqSYTGw^iN!+Cf^
z158=7$@(69FzG}Hamp=>!=>uC_t91I@;<nx_mTYy<0z_-%0e`ZuMSyY91zK~`^vfv
zFX#9iVG0HM`45}WCKf1S`S7CIOUsYdn>0*zSfVN2(9JSM|0K{gY&&(R_G1HS%o(Ok
z_inskAy_{lkMT{ffJ(II5`nM+d@cd#%jstn?K0AvKytn&5qmVQRNHR3d?WHUk_Ws>
zAry($=Oo5P9ITx}oGYBnB3CFjarz!<%IsmZ9aY|2@DN=>(g$wUmX7wx8s+C_;!4pq
z&<!`@A$7-42%R!O2ZZVCZn4T+{{ZTkic{69b%0>iO=y2R$xig`3BV};oY{^8?dt;o
z>ual~shw2)G^Rk|Pta5tw1c4#D(k@bRSO6_vF-%nO=1rLpJfQ+D-bLK(}zx^yW*A6
za>CgVrLY39uoJo^mof7ZsGUb%a7R1dJ%laNO`&aDM$a-k_#~OrbkGt>_V^J!T(Tf=
zI#hvK<Vv`kmqhBNNYxkPJ-o!4L3`(UE(GqD@Hvpy_RM+~Q+g3@ZRcF4jnVzGqQdee
za$sO7P|}~pzHlN5f>EG=N)$^n+g<_|(@R1ExEyOfbR-3~0)QbhlzcYK@IT+HMkqYU
zK)X|j0I;Mnx_y2PPcB$odS1{&r@>ZcWN8p}Cf~Z-DTQ=&3)#h`^gf}d$eFN^h{FwV
zXO#TJsaj||cph}#q_N$H8$B*1H28b_sq6}T`+4lzvTpGuJ6&!3-}(jvP&-*B?_1zf
zn&?nP?6S+3gOx$rdtD5Gw_U>_!He4KS-%hh_WVwdh6Zq>9KNCputq>{Lpi*5I^tUC
ze?8fW+2hEs`bPK}h2NX+ZwLD%xMiG2TsiG5TQEA~iqNQ}jM8FqVsg`}NafOhc7ME#
zd@!hV&gMKea40d~akw0dZvJ&SlKNi&nCXc^#vsX@J!UTv7}0@yKcVW>Ptm2Xg=4Zh
zyb3Wj=YsStopbvDFoJv2y%j_zcLUHghDQGO1A>>*Smd-R-~YI=F1y(2)`l9;v|Q7f
zXWt-dF>FX7j!n!P>qTKcun$v%gl^8O3m0Unshiuj2<BN)!!=9NJhcuKAx2k~@nW}A
zPGhzv_4r}WiQJGAby?2{e{X6Y93F7hh;Nv~-Fcij$rqfDbF@>s#f$~Yj4pznf>uMQ
zC>pDZL$LD3<cc|y)?6!JFrd^jQL6tdmm-K7Rsy}2+xt*f8z9J@0=qpPRVQx}f%$fs
zHF2A;NDn+u@_vk!T0ZedP!^MG77NXA+PQWuNdiVFr+Z0cGz0J^=H6Zk;8@Q^!_R$X
z$Q9%aq9;d|scaEyyy!>Hc0upGAV*<HpN9-lzc3IubqdsMA2Q94x#&CjnY$7#gYM&u
z_upTN$>-3gt9UR`GI82vczIU~7^#qJYXM=U5n{WXxYM9?Fk!y=(h5+zsz#PiE6c~8
z)syEs8>^DTCb22tz!#8!V9~RVC7Zg5ZS2wsSKe0s2`YXrLP-*B=uLNK)Hgi}(M&VM
z3W2jKk(&uzlQjc%p_C_L?&L`#M>q^_sCaFsDc}eRe6voi9$*GgUQ@}Bh#{N)!3giV
z+>I{<bOhy1Rn^VZvr#w9w>+&yNgRuWSxikn!>jfZM1(*FYmN8+U|fp+#d)EhH-ZUQ
z=zbHI+&K@yWu$j3Jk32eCJ33X2QY+5><Q;m^9~vuZ;qFTemtw?A<&N+2u0B5933N0
zY}$7=ToqW0+JeU6K}kySEtx^GB!yi1n^xRSf&{DM-p5z<u@AjN1dX(~^1av9$jDre
zI=Tfx-|)lN%-8AYQeDxZevXB$t<Gc-z+tr!FH<dNC>2j?#fu@Pj8e1qAulwYMxXzc
zs2F&*;BXGNMZG#%v2!T%(gg-Z==fI)_%gsd?aYBD^tJv1Gz%GewFWj|3W0OGZMP!G
z_2`sohMQgs*&!?jtiVYSYKbqzAF}9D#W}0yN={K@oyU!E^?P~v@B$ZM#f~bd7VAf5
z0t}nL5Ocd!OR97o^YeZ2n8_9LUElOV4=u9hT=D`+=~^W$!m{V-(a9!Zkk;wLT_*;<
zm_BmAVTEpQC@i*Cyp=kR1g{LqXHAZ+KMZ>VAqn6SKWy}(gNlK`Q+tA$3<&JHGSO|m
z8#caSzx@D>!$$r^5C2b*{!ck)<Yf52Y$DcwVZK@aE9N^#P1f$OxuNHuV;(RnI(|_m
z0eIL%(AMqNuD^Pe27O~PH7m*3BaSTmzv!K?QlbgBwmvXEi1gsTm)#D`dpJaC_?zAj
zO(muveA6f<texTy1(kEctP*|-dXwAggx}b$nFFF|Bq1rtM3v^k)yX@5Jjeme$(A`F
z;=5z&l7-JHe@_?Npk<7Sn8v4^XlP74g<mddTSRwG(Qmfe7wGcTbQ7k~1cdr754yHt
zs4s&{@~#)bvNenllS;i8Qw>CEn0yqX`UE}-RHi|l{A4pe>ja%|kD!MR!gPs|L_K;w
z-RYkhzpUbrzU0O}Kr4-N4;@W{c{V;?aFv0<Llo!%*)87$o;0T!&Td1=9#~3XNV0l_
z&e3)%?&cOZtFTU+MXt9d$1z~bU-QkAa7Et7WH><574-_0vv&<16wqDYNG`lf#ETl(
ze0z`|pDbxe$cD}f&oramQvmgho|<lY8=MqU;R})?PQ}p12bFqzDf@yME8ATw%c3NU
zpilWN1HqSqqsIAeBD5wbLQK`dbJNPI>o3RN_7QLo^OA}4m{{<hBKhD<422ANne~m>
zOItxlHk$m!_W^9J)?LaxM%U;OADu1)5i*u@T|5bcqhc`p@p)B{`_gSK$DLlp2B9Wb
zMTqfkWCcE39;|ewI7vQvpY$63{X!c{`i2mP!0E{bSYF?5VY)9B%x7<mE?A!EJjIan
zL5fVK16*Ccjt0cPzlI(mvb(uncqZ$Og-<{BM#)!u^EcFP>er+UM3={CU6+0b6*k@~
zgO=jmrQ^kU3A#=QOFMyhBrHicXEpT(0RgV{zZ`hr;qwu8$pkSgfoYV_ee4VN6Z)2s
zI(xchwZoa3oU*mHXt#;D(U+U|{Y`yUY-<P^Jo8B}#MGZ(_YZk#6kaO(#1a7}?X-D)
zq!wxEPt42(y~~18Dt!%lN}-aCR9?f{#+}WVF$Bi^vuDMQdz3s-TLkKQ!+qFwjZ@x&
z{N)XhP}XCbCT-3d5>o&cd||KogT9NHsDGK4-Z!3PeWi$v6;N_ybRHcIyeV|vEfhe#
zn!ZT6Ozb%|Npm)2J6YOj!utnyq!T4<yA%^`Js$b@E_Z}sZcInMr2v<3F7%vZ-O9AN
zwF(<f-JHK8!<l6snm650uxa#tsGZy;D3H^YDyG=Dwv?D5{8LC2&R%f%@w#yXRT*f3
zh_DT~L2Q7c-<5F^q5Jc)T2>1;zqM7n(H!DF5$C2V3cC|kU#JpE7Zy9<#31G$&>RoD
zK6!%6oALJ!4sO1S1;Xt(TWTT0F})Rwe0nbs0birR6J93FYfeE|ARrtkhy!l%sd4=@
zn3LDFRXd!keD3G6!M$+oztLX)Uby&~e??cI)&gq`$AE?KY2@latb$;_x?yj?xZx)8
zCOU7#k5}}3Q)TZ}Iy|Ee$DZ6I<0Q}cf__UC?k|k-@J^jlj*<1xjvs?|QmVn3mOea(
z!fQc-;xnN={5o!$z54(&(;ZOz|Ca#&JW&5UWsJ=KcfP{*FUTm{e}#;;{O`>_fqVfM
zn$VrxZ&JBZNpZ;y4If7?yzoF8w(by+>ofdM>i1DPIuZd%hpQ=P9^`ePdJZqw*DE5u
zgeXYI;kfUqiHs;)Q#~^g->4^XwL<l(b)hRQlP2^$!-o2enWevJ;PAtO{%Xfl6?Ugp
ze*F+v(hav|k^tOlSsBW-l`R^c_msGD<Q&mD@-;~W0~QE{%iB}$SHXFwXGVim4*n#B
zFNF#=PRF5}lU>>WkGHn~t19T)hABx2=?0Om!#Q+IOLs^~9ZI?pkd{^u5ReW55fBhi
zQc_wvq*Gd2k<kB~1IF{p`&|#;_5EC2oV{o7i8X8Py=Lw;vu9ff?x$%9v$f=!+EDtN
zmWq7sD#0hL@W&bRA5^i?MKTULg=0IpV^ibA4oI-%RyNo`wwkT=uJGpkX>kw&Cgfoc
zwcxREb@d&58@KElT<IFI#!u}wHRf)2jj=p4rP!(srw26RsxuMGNQ?BuuN9R6cNu)|
zS@~2tM!u7n;S!gv-JpaJIURd{{ghfnoQ99*l7rhR7|S=$Fpkg0cNSUJhy41YOKs09
zvIvT(`!2&BI$e9mkxo2xcQ-uCF(0sXpH%z18aR(hB}1N~fT(NP!-$o|Da9<s$!<y}
zMxi-MJ?n++)rim10+fimcg@?zzW~`k<k{#Cfzhm7REd1<x-O%P#<Vn8%<v)ZXR7zl
z3(SxsFj!@6v04SLv8ibThES|6MKa1$c1&4r+~ZW*%Q{ZS?QhOx-iyg0mQgL}<y%e#
zhc<kZ$bF22pi7R!m*Fqg_$UTH9=qJE$u#_j_a5aGkwP5fp&DA-_s2IE0vN=i``T!C
zl)m4_&E`nS1O%?H>HB5#4J_+#tRH`(Jjg~9v%rZl?)57*C6g2k%Z<f7)E|hHC{61z
zAwqd56y3i>NYfi}r;v!JaGrlgez;#vqf`O)Mq)96d?~hcTWw4k#*I%*YU9<6)Dca6
z{91G`oh3jDT|XH;{6p&6WUv<dpKP?ZIzm1bq-u6MC6oRAOTXp=LnliuoXzjWcGp<a
zQzH`k9v<0EGSuKqRt;^osrXq|h|v|TVD{~JJ8&FO=ac>*p*jtBOnLW3<(^>Y!Rdy^
z?TS=t5{$C@3T`+X$-#l;*Bx=IvR#DO*gAA%RqT=P1l)QBPFu<|s8$QBm|_|CoNzy}
zQ_|0~`~I<bI&L;PlEQ7~v;ok8BBDVyX2g(qV?TRi7tJlILWWic?s~4H4K8bt;*+P3
zA`;x#JBH@CpK^wv$WnTlR)jFA4o@SfIuMpMAW<z%sYG@nXtw4nM$-H+wMHaX>E15u
zwXs$grMLwq0=gL=3aEC-2G|xTyY=51SQv}jAD_hPuv(mU`6P9Ry4Aph@d>WfcR@?x
z$ou?dD&OIFDS}jSZoX1S+d)F*S{dU)esvv>T#}N6bwh`aL6NIF&fQa$x|5%U%u%>t
zl%|g%tJZcMSCQbxaOW%3-7$Ha*WLsNDef!vn}_}zawMxO<>Ym6$lb;p!Lv*lZ?7+n
zo8EI(BX%~Jk5Y{7^_fSML5rjZ<uJoBQ4WeX#8kq0T}!GXDI>jQB)m+6QDcaeI#JJu
zH*-gA7x(Mu*$1Vg53UE}CsO+3F)A9n503OSL~a^)?Gst-_WC!Vhq=C+Eg_1JUa~AI
zzsner;d5&tG*E|I630?+7JJ`^l%sxKkV2`lk$O~1*YhFG-2H$6ojOS^!PzXk9Fz?`
zb$8uYm;=F-%tJdd;nYzt;62sw%T{n__SOVbei(jE#<WDGCF!ZRlni{@U@w%{iZ76c
z^+*JNZ)|DCk)tkzUops%traDUUUk*S4clF^mx`szU+>Aa5$jp($2Bq)RLFccm7ljZ
z6sTC<dS^$i%I+L0gjzgXWp(f(K*k|j)5YL+q_P5lxX7;wb3)E4+@$ZP5x$`|o$w|`
zyG4xaBzo~-QFqnH*R2k2iH3X4neJ=-)}Eg79~a+y9PVQo#@hvjd|wZBLI5R>N$fW!
z&w4n7r|}(#pEA_<xU6~N<sR5_oG!}Y&{gcppCaP~CB!vb=FImUC?aky&)s3&$ej74
zmM<X8CyAWb*`3~UjiS}>uwDhUv^L@X{=KlTwCG8lewwJ)Pl1%ObY$j!`jg}YjroXA
z9euvL{9u}wx*P8(9_UGy>o+8Fs5*MsMz>QSxOQ!XO_F}lz3HnsgC2aNAC7J%$h-6S
z8XDOM*tQ;-^vD{~;Mgw=|B#%ai|L5TV|$3ICK#?5*-JRMFv){tdNDrkR+z-3fyJq~
z)`@sI;T{!<5?X<GVt07_lFh*cHf3^K*_`pH+~)xW%)T~-QMKXYzHApU{d`fX*%uE~
zp1ZgyCpQ1^77N8te%t4Hif&*osHKK9{1{Q^&OG&_;P!+&Glk~9jlI6it@z-7J4#sh
z2kR(#IsdrucrIAz$n#$<bbO)JVRwrcx*ehiF|~$~<8!mu^_~*ZMxem4DE-BT4BhgU
z45BI`!4F11j6?*acxt37HcDe|que!*si^x_Kp8E=xVzu>(4w_lBKcEu<ny02$MFO!
zLaA)!n$LSg3}ud}>(UPr7{iIfy{TTbUe|uIw{P!(w1L~?iF<4mQ*7~0KaRy`e@B4C
zu8kH|cqCn2ls1eiW8dnLy`zJm%sscVAtFn1975!}B#Y~m_Guc)w*6aK8<NFQk4;VS
zi>1Df`(nL%@`5)5pY;x|Wp*%CP|&euql9f`%ll9*k+9{Oh$2hU;S85Fj}{E#W{c(Y
z;?KS>-t)814g`Q=u`^4RtipPq=XS<fYHDV!QKH3tN*G6fxHv2grjc<St|*hPDX>G6
zdy899@h+V+ofa)(``dL}W=%UBolG~356Nt}bk=Slb%&KnX=Uc#e!1uEF0AP`w)d;F
zD!O&6z6einD5+>Rzm~2PsCHw)$dN189B({fFz_W@SsMt7F=G6Z?NFe!;4`eruEngq
z$=O-3dz|}9aT?PR-L{~c_|}aOlVDmNBKztroP)iWJZ3KWH0)A0v1{5bEq%Cci{zam
zB8shUnhwRUWyY%bxnVGso5Xho5`Ift9lK>C@9?cMfvT?Tm8Pad=j+;%mI9ll6l9NE
z_Xi0WbBf6$P_t!0I;o77?g*!!-)(Fv_`p}(q)=t)j0zIX^iN5ZG<Lz)z9ZY+)>n|q
z^z(idfk|HSbl$s?gGn^a39^3qRYMIac$ND6-D1Y%L0Kff2lwB#>{7wKP^!iMo~p}>
zSJp@S(1Kj)p^(#UXC}SO-Ot>8V*-Ln&e5n(bYJI1Va(%%nqyB#v0z~#=cPBk1ozRd
z_&qh-a?N50DIx(!@$CenM5`pQS{%1CxzCoiOqt&z%Q!^S?MVs|W9uxCs_<U%JHC$;
z-~SSxR}oPD?&~5JpXJ(ZyVap!{zdkvM=!0^`EJ>y&xE|z4Zi-Oe#+-?O>JXB@(Dj`
zRr2czOG-Lg7qv9CgZ#H*l39nTb=-l$WF1sX0)FUZb#A0p32Q}g#@A50xy2AW{X&b(
z=co&`iV^4gL#?YQC66eFG~d&1;QP_n(tbyrNjG2Zl`lN_dBd=o24#|jm{7b|3bQy(
z(yPf69_`Uc9km(!N~6xR?&z-si61yd3a27w7e(%TJ&eorrzH4F*YI?+{V*%-#GCee
zg6Ox5gO1tNy(!E%<C=nMC!ZDepoux^Cmw7KnU;${6%*q1ut0q6$4^w6unBHQ-4xr+
ze4DUgSQ@r0b#kZDXa33EQ|wQMhrk^l4w9QI5>y8{N^jx#0|mk!*<fj-z@yiS(e&o6
zk*VT7I5AMegFj)jE5HAyXg0ok4qS8t=hfF4OCEBX5v147SSciyw}ot@<c%!wDcpl`
z1(d|SA=^EDj$+Y!|KY?zgVkhATBtWkY_u%qU|~!?Bi($_XVi@wwdR9*Z=U0jRo|mr
z7Kugs>q7P>KRYJ{30aY=>XP=!zJpYFqn0zVd7b3$uRV1Ldwn#vVTcBwbq|miNRs11
z^$9m(gc@F}bB+`)hif8#<c8lub!WBsGp!GV50*xOjvnoH{STI9n%#O`0)l#p@LMp<
z8S8~)cu8#15d1CXo5je#-yjdF_uOGlJ%vyAg?9!Taa>?Qe{U}a;{LPWCC>%xjd=g7
z^+u^$fA+hC?0~XEAMV+OImI?^;F8UohiaBo`e|)`nC{bwPe_hkX>6s=VWS`4VhX?W
z=ja*LAhhre`@`NY&7iNZwpixtv*rMRe$8s#iF~emJ}2~>;z#dxlTn}I%YIbVEe<$h
zQurAlL9Jx`L8Iv=%~Vl<wSn#CK%2ewWUA2(nW5Ksl%}oM<kGbpeW<@k>>uQ_)cDgP
z4C)+~v|kgN5>93p&6s&p(2Gvy@;C~2j6TFx6tl~82R`UFl2#LPQB^2#!LrAMtP)Mc
zKt!Latde`P8K8KFR!g=iuv#>WOXJ4l#JI+#Vf(jp>8q~^ZRh(R%g!ZoXR@0<XUlke
z4Ts!W`>3)nzrRiTZS|T$g$&6!FOTABs1r7vFxB<wSPKFHo(kbe1Ur6;mN<s~4K9Ji
zQ+P09pvG8^zKPh=%#%Di;-}rUNi-ABn_K|-!#%Mbt`YsV=7U(&3c=NZZVc*7z#APp
z#zDbxSOGFvjp|YlLMj1nx7I+6u41+KF(ZI<ruWS|ZHb#>gl=l8DBP8N<dCBD0>|iP
zjCC}AgDg3D`_ZbCdA|!v+Y>uM>VcuCqOYIuuZ>%yly;9R@ix@H1|eXURo&^F%$$P%
z=oD<S|J||5USY8k??Xu>N`4a4n(A;dL(qa*+-|ICut|rv_R3_uVqapkTt+}>#uR^1
zRe)7cl}d*W#|tHd<lF87C?7@nbn+@D?BlVFAJb$>ZfEb=aB-3te09$+QM&>5w^J1k
zp9suNnYDT>w6=2HsqdXQzoG-H#qQG}&mcmiI}1A6MI=Zla&N0E-_gYDP)zV|6YxFe
zEa$WxO)P4b$R>8~Y#TRbHMsZSRYhI4n$gWf(yFcf0hQa#DGHiG7KYZ{l=Fl{S~~-*
z*XYrx;<dk3PPJ99X2i)%t)PFnrgAiwq8xD>ftgb8yN&n<-0oY18dF*E<QO84^M;?1
z#bIM{sy~bEkjn~dvVK`3l|B{y_-Mb-$$`BwRj}M{R3u0_{6ko_`9?`#6QlX-#7v#q
z#;%2KjBQcHMf#OjwVbZ;pDG^#-R00rx=IrtY-9VIN@Wy|9nq6}jwXOdYV|#wlMCN;
z%AJmPGm%(yq9d3&QN;;&b1FF8OWLY)Q+vy$LwJwBPFd01RKyJX`v$N5=f0^~<Ot3T
z<CLg3?k2ihp7E4gOF<I-t=>qZu6IWWs*5A)3&$hWlT!)_=}%C~$<435W1{RXrf5%P
zuR+sEsuFA&ET<e3FweE><ui8b4=0=QH>lXEFi~j<VCy^9Uy-V*y=T(*sbu?oO)GU{
z;ywm#h17MTUW9UL9kw8MCp`uZZcypl3in9$?rj9)ju!kMpmmaJ=^-<U=sMvcpVH(T
z3+i7toTay~`M(CcK1<d+PBmXOsGruL)VG~yaN#x5X|9p_1f*Q8V|^C<gduQP_hZ7_
z5HDXFS5<AV?dS({z(dJVapN!QkuE18<qUTuP6W|Kvu~_L&c9SATGB_GeD+5BbRDMw
zzX_A7hvxmD1pwcpRjIii%}$udB4YqSGTmNDMy35)8D?Uk^Hfn<<))(MU2>(d+l$2?
zk8!8vrWr@SF4+Jbj}hK7jD>KLrne703%UD_o)(vbrLl*gx(mCy8)vbVoDkP4-CK-x
z((~==8usBSVoD(m{=Y^PW*T9`P!RVY*E8=0Gs(RF)lBjW%}<X9Iq-dYwGV;up*vqZ
zrp;sFN|jsW#csXDR8*OdqfhdGzbp_jVRh|Jh7fJpmXr4v{*Ug^t)oN-y$ocKY_qp+
zP-yk<>yEB4N8nP$7iBL~Rm`;4OPk_KJ-^9@)VaoJM@jgJml44c+1XAF{>CTzaD#cR
zhwI;EI4$yYn43QMFyr%xXKet(Mca1w5b7qDJ~H%anB*=JOF!}psc9?IBU*`att;~G
z<L8mSsi<uA^ZNZ35V8vTjj=maai}jjh#2QOL)aFG626TF+fI~8eQLr{$QjsK8eX4h
zP1qPt5sFJ-%(Th(86B;d`dPcZM1tA1Uiz`_jq4A5(roL1VYlM}+b0f~87DvV!EXV{
zKA%oc6obL~)$I3FNbL7c{bGz)SB*(It-Hw&3iUaROMpUdrjxg6qH`>%JF0E5(hUOn
zymI3yz1HC5Ra18THmYB)f5=?VUAsSOm_i<q>pTnk=<5Q9#UY?Km5}T<4^rsN!Sfsc
zqOwO2RY<#lv1wCf-^(~py2g@%<;m-5(N%CdfkbbOmHOfXWSQ^U!+y%J2xe1r!=`9l
z5mbu;<r0M?qFvBK3<{y$;`aU_0%1ZrOEM8Rx0#+~0DJQfx0!vxNRW<?4o4W;4f;yW
z^z3STK@B~7%yxcF$^-;F${^oj_TX#az048C_{cu>fMC=nQVP`A<mgl!R@z7b4$iyt
zR#faIB0(;0noIdE&TJ05l3z3F^)ZFIkEZe(cnCar4kwOla<{@Y2Wxr;-O$U1Sywzv
zGc#?Sz3H#tEa4ydQ0o5?seylz1_eG2UM)O~1|>F%GVq4gLvt>FDZXJ}VzwJh-6-M#
zw$sY(%0a>X-V%+QcQdjk3HevRA`FFE1iDKSa<+Q*!c3+@9gOcjDNA5(n&<v7v2?=y
zNp>$iITAj>*n#N4cw;h_obP+=0Uq+>{XlegyN3lj4+@LH-hw8GK;m5C+xxqp_vhh{
zsiN6TCoofrcB3oVQup{C!NbiZn@^2atxJROe!kgD3_^=Ld`|({p{|<>XHQC;DTci3
z@H6^UQABMeWU39G>?I*7PaG-pw0S>@$3u9D;_sywJeI$90pbJw^;BLkA;kM%O$fE#
z?Q)vrA)NZAZN$65%q@-sM>Q?=EU!~tcCoa&R#lBTT=JFGUO&8SM<>rjl5&!7cO9Hq
z8P!wnT^g|VOV)Wus^v5<_7lM!rduLENFJIGH!-+J%n)^-Ji9Jh7M}8&h(*8RBcZ5w
z<aYCeHzmo$VF<WrVk5&%_rD~p_d;HSlV@C(Wi@IQxaV<DP~WO7>a8&OC9$&)d&8Yx
z{5h)Z2sXx+w(^f^+5|z(1!O{b(x3tMy`F&MS0Pzlm5a;eUj}iBC?*Iw#t1Pd3~irP
zw6Ysr*Xom;&x((}xfD?75!zK;x94jZeE`~d2?%UB-Z{y0@0uC;`J4g+Lz|UDL?wxs
zcbdmFfzVanVUK;->V?3Ij@<qnU>Zuwhq+lk8<ThI<2A3fNj8QQ?>1RaV*EVmHF!N(
zY-ugWo`BnJ6t*vNY9c~3T&xiv(B%Nnq&x7InZZE9t@<vBpmwuCc35ezZGMD)4EaW9
z_q4eLkEJec<1wFGWh)NAR8KdqPK%Andcc-|Z`ih@XpJ(iK=!$>5@!hlg|`kpm+Xn3
z*UOI)N00N5it{zSkOkkA@xE_DWKTdK{GgTrkiwk%MC`>c^X?sOV<{Vj5jC)lr4fPj
zb_23+ZI|*Pe}*jag8K(61Zv{SpH3nHfx%qQ`d1PfmR5-9@9@ggHzYFhs9MS19lCc1
zLv^!%PBHLC>uh$BYj%z8V@FFDEUN(JQ+8!Rsm{;E?E_Cw-U8E*WbgRgQ{dIL5h|zc
zDf@to!eh#@q4`0XGKhX9&^Pj^v~(yC$+%N9b&E7qTfW09IlOR`G|(6Bkvtv|<WoE-
zIdgYo4#wv!5ELpkKM|?DqSGMKN%go_GhF$pijmr7rtb86U~8P<h<_(#L2`YdOAPi4
zIlXKC0g1D01`qU@vxcQtN2Hye9pP~(t&{WCWFXE<t@u>ayeNBX%48y!IgVLloV%qa
zL+F$d;E{unuG?bqr1FTIGRp%=u4p9^{W|tGUyj&yc5#vJ=dbDu)J_jSu&0c*OU;pX
zQN9`ukmcxow`ZOav13N~WR?QQ`3<51g~PC=?u6Ct&P><Csnn-$rxZ)QPJa~S+gHC<
z-k@@t*ytmI<9$}($bm+)rDTQSs+V%}$G$D=#{saB6GL4wSA@;jt+y?R(Jnz0q=b^k
zk5==pA3sx6mhMuSRvb=H4nDEp9WfjiiEm?`x+y#1QVjV%%bfVz-o>xu>i7J0GxLQV
zmUG)D0zV(@?q&Cz^AOg%gFnq>iz78Z;zg<KE)j8@44WXq3<C2LdERdzv9i8qPC=gB
zes@RQzVikXf63u(LhJ+oWHp+f^ntG|P};;Ym7C_q0|T#%I(mBJa1Gv$B%S{hSewOu
zy@f9-D4rvGCIB5J@(l?C@Qv?b#*>DCLb53MO~sDa2$Vf{*2Mj{87B~*Hoe>CXHGLN
zkabYJi{yy^JZ-V~lez&rgdE%0PxhAjg#w9yuXfAj_S}>wqND7XH_ZEZ%W^kfRSVOY
zbugKFX^{^st0cZD=d5WR|CXCd(gTO}rMW#iyAu`3;k|DmXb~++Rp~n!Nh4VfoUSxw
zWk!t6mNZk4f%Z37On1ufs3|lySt(EOs;E3s<oru-49$G~n0Ev5(er}QeD!OjpHETx
z9QfO77V^nl*CUezT4R8d?rz=N8xxFJt_Qek@%`&}TnXsBNcMn_k!{x5TF8E6X&@X&
z6ud5+=E6btP?>w8roSylm`jJQHKy`R>J?l8KjWBPvfJmBvc|>AC$@RayGE8Mbn1f%
z{FZHiKnXP7r(D~reor>Cs=?6>_Bz+s8D9J8oJdL+Td_nuSITp(DQk+Bi3@2H|3O+d
zaPu2!XkEn~B98ml)&b*|SvijSppAg?GMZ$k$?K(Y@Zfrk<%MN_g71#A99TqfasyMv
ztQtxkq~b<dM6F!W9b7D^M74%7qH%WDhca_-j?mBG+W4OmStC|@GL;+gG2CuUYH`!<
z$3j=<U~Z{z+E3g%&UpYYeSk+il@~Y)?|Kap_akqt__FLiO%8nCcInIxEmyJ<LJy{v
zF1TO}uQIZY3%|H|l4ataiO}_RkwlHx3B8Y~&|>XZCIy4S$j0F4vF1%lvqGhX(jco~
zCh|}=0^i=P<~*XTka$n#(tyO9jKW?>0`${QxlMM*g?@~wJZ3^hkfw1qyIk<&2LyEa
z_I|b_%8ZtmW|?nSzpfz6E!|#owh{~PK-flGs6|W{+f1r*U=${M#Fq=?+Bx-X8=k_6
zsP*r-vHUDVRV1fk38RRa{L!Oej?oO>Vq%m;WOBbH@i&6~>V5(){fkm=`YT^V+Np(c
z--}&`OLC9%f%l%|%0yGz+_cZyqlJGIG|htm2)C)zj|31JsEVcf6J0})nvg@y>U)k}
z`$7N3;6cjh{Fo}C-|eaxBJhI2AOT1FGS9bYL+yHGI#tVX*IGxvT>luyPs+FB1u_wl
zyTUMgH*PgMJn=DuGtzN!oc&>iMclysy~@yOk^v8!;)B?vIQmO?%x1BphmRzTVyPzD
z1SZyU?QW-ND;AS4V=1hMx(C$>J?f!+`O!Rfuuz~Q+B%%OynMB8^V5zAfjZ&w4~5K!
z<m1RZA*k<|c+>2Uibv6@*wT0p!>X2v*WnWn>nc$)-X1Ej8Zx=^AqR7|dTiFcsl=oU
z<lg@=@4yk*nZ$~SbC;$nRa4iPmX_4~b|UZHC-#i&91FD{5c;^iuu1YBRSuTTTvwa{
z9M_>3xO9qyJnpsry1D)n_hj(8C+njnUeqqHelrqz(!H>SdiOH&j;#aE7kgcbu`+3*
z+zJ9>5BX$Bv3=UMP8*y1nYXW{)>$Qyz~>Qvs}AGmc<rq?K{$3;6wo|NoqT(6v{UIR
zkF6+Mt!To}M6!nFgb?@iM?ZudzyemGuZ>PxNUn#`k&-w4gm^Z7lBl?b!~wM7xQ4K%
zTluRxD+}b%hNuX(;g3XI7y*&pFSkY_e4EqX!<Az_e|5na2|DzFQWp@2>(BdUd>2eL
z^Zi#-&8gAC%FP@&kKBKTlchFlr@w!r1r`$z9U%jwX7*{&maB<Ag!3gAR6@CJa+^10
zaoOji1=VdD|8DMsN(<cSG5>xKboKjQi8Ay~%#}8k`y?&eTC@nS8^{n#Elw8nTMbB`
zI&oVYpv2<t1n-Dl?<MJZb})=(nW_;S>!?G9vD0+;e8TnGx8t7ZYv_dWZ|LaT8a!QB
zA8!(Vc|JE(yWF=mg-_R`JpO)^xh9f##Ylw=XFO{5jgDmOv&Rwrm{U8)ErqB~#6Jj?
zkEuvI;F|cKFz?Bv`63nDYm>f^FhHZR;?}KCY%Z9xJ3<zc<3dBS_eNmXP~LeqCHXaa
z4P%GFk^f&6!xRToF*pD3%^3JDn4{qPujVLHHG7<rIdJOt@V$Z%nGtrfC+BHH+@8yl
zIm-)>kc29t1l=m(^bDz&n<-^M`XFjGV9sax=+y1o#FYIDhHcbq%D&A>!_QFU*E_OK
z?-4&Pe00~kiZtGQByU28Y(S=qPc_shlq9gca>IN*M-+%U&xeMP#vz$g1(w%lFJB#G
zqpHKhl}@wYh?5F>gEL^!RsXix3&n0EcnFINEsQD{`SXF_=1J8?8G$}V)s1-MRHr?r
z>ej%C5GxXP<l9U%sMy@?U}H%HWIG(Iu~gwLNo{lN(PgD})Mc(x0HyhhZuzR9p*hN(
z0NT=Ci+itAs8$o|T!<T9)T24kl`v|WMRo4zyvkxT8x8Pd64?8SkgZwQV497i#@z+N
zBgi)&B<MtwNWPx*U|QHJ-K02_)(5<&Xn=9xWFDS8&eLCIx%hfXnjfD<j<_O5;#TkD
z>;bd=5)>@#b!k@_#ifqEzDo5wKCiQdIc=%3<JO-XkI;C{c;a@gi#@k3RmT|lf>J{)
z7w@?f{r-;X0-sVW9eh|ee2wMv0-W8%BB~ZIiFd35s#=@<IQh@IBv*Q5Yt<sPUTST}
zeZKv}JMM>ln6vIu2zQC!p-bG))FSklx6w%_KDr(nikMUAtzkc3DYB_%f<h{+M@&|O
zTK47}WWuFhsg}5U@AVQ6=lT`<f8TI&WB$lN9Y<Lr@+?+aTz$2jJLf~|kn_kF0@+(1
zWtzDlJ5eNg2!>5C?F#CX_jMe_4@?r7_qXrh9KWEjBCSh{mdE;%^sQsAuG!<>&lcN$
zo02!_@BQ1IYca>)hFyOkWGrr~LAU&~I|vW3Yw6Okh(3{N)*q#?PoAz#H?3W*++JdX
zski$UQ!wKwoyBc@GT*oK=mDWRZEvLeyFK^g<qwgP_<|*R`N>5RD4K*m(!`+ff(P*X
z>ScjHs_7_26u(N{M_Qj(UoP{z!PC+xgZ^Q;9lOMl)<GYiu7JNBV8PL=CB;TfPibs<
z$AmEZ=Dbh&tD&REGgS7}tMeB;TED#4ygXcg9<2+U*ZlvT^IChtZi4UZV@-x*g?GYe
z2&l0Y$FEhle|_q)H_wV7or_md{q89_ug(V5zV=rtcaK;womF@fHge9*<?f^;&g|EW
zEl9yf%Rk;Y;bu*AjG_URV~)GzT*?x=D~4&3YXz2%Als^yhM>;l@9;@SIN=U`8*H_B
zhqR$aF7-0B(WLY_(r|5c|7*k4ydUKatY|NNl;@H1fD#c?wC~WzhVgyI^5v+g1B{<@
z+$SUrJdQA!2D`5)-?as2Mp2q(BRzI>-$*dN%R1tRQ_{dRD7}|R#~0o&Bv<|k#8($<
zoBVb(!b*-BhZ3b=62DA+G~ui4bEGn{ZGjeJ+*%QSFTqo<owf$RBp1UFQW(=5eIItb
zcvR<_c`#3bSduG9LQZ`Du7NA)_3j#>tVU<gMl>qoC{mo7!kimfUmZC|Om&DNyFL2w
z8ZW-{rVtr*HUdTrx`klPDu5dKWuBa?;0xxVs)m@%6!lPHdUh`(b_Jt>2a@runh|Cd
z;!~-eWL}Sgknldgj&IdUYBy<T%&}`w6Yl}9SNkuNNo-1kzkloA3+i9LLE40h#kAQ^
zD|xSEW3GXJRxJ>e$m5z<z@8wr<EQogfgA}|Gau$if&a3@i-&OW_c<!_iwiX)2jgzo
zyISlj;I-FeJCF$7=E=iP3wnwA`2$>2V1DKoeGeqgh)u{RnsTK)UoeSN<pOgQTWH^T
zKPfYraC3+ip_&MCQ1H&(**caKyM}vjunX=`O+71cPIX%mLBje`_0*5Fp!viDlGkL~
zcjJ<}7;|pY{#g3bApi8}xwS=LCD4_4J|B<`c2MdAR->25kL)ld!DqL`%!39fe>xM?
zii#&JS|4rY8>3qAeR-7w`I;vhxs1>CWqgVnW>DBlL@3>}&o^-kVsxHo%iLMPyK}o1
zckWeq=}_DfI{<y93ovfm!tq3{H|asHI{#z!n^}2WEC=P9KUeGRb0v{nRo^XcWfI@T
z6<IUaBk}R;bZLybGmpS<j3q*Mi)jd#d0?5T((lyjD0|TJT70#YMqbxg3l&<pzj1mv
zxNrC#*E*A;B;2??;(Dr>-cIQE^=Yajxl%v(Qf2s?^soFo8}9}#@@=5%gnJJqEaaOy
z-xY;hvnJ<3RFrRrx5D>OzyjkP1wE~&D9){TyPzb9lECG}SP(P&qm|e*;BLFbJ(>j5
zPRK}X<4xb-GKfdA@a|$UZ!YoaFtbXgf)+>g?N2J&*cBB-;-jpVQ$utCOg<>pn#r{I
z2Sw@vG}Q4n0GA<dg|rTYT-~adEI3NSpSRi4zUvv1!RIk4<*W1g3_Ok<d_!`iagQ3O
z^39RfjI)oSedcVj=!jHW5*AWI(>7U%ird2<qH$jH{u80!hOsanjqHDT<fPR#d=SQJ
z7B9w{uqE;wH#Z<qe{;A+5s#RH7j$gWdYx9QF);qfaLK?>n~jInkJrx`nX7G5A+y!K
zYj%qCLvOSeF<rnn>(Jeive$5}a_$xTK2iHPlT%A2M2V`F>L3+0pUMKkK#3&B`+^&2
zB;mNkhna``B=dbG%JTg}2(ELt+#WqO^Lub2%_iC`B;oa<UC<1<Y!fSd^H5e@LHM0P
zjq*LDqTwxDgX~m%etkL&p|t@1C>qv%dgG^XpNS^Q;(D56b_V6u9H^h43JfWajXbDA
zmy0@<&a{p9onpRMn)-Rl?ul}V(C9Z08GtPqamzTsC$M=SWR1Iw<1<!|^yetS=5!}l
z-2}R5UtLIk)=wxEd+I1(**~bFX3ft?-_;aMdvNODgVq-9A!2kI6>zQ6(zl_y>pS%c
zJ`djV*L;d-X`?+pg&(~+QeCAYqiwZ*6kQ3lI&brX1%k%(MRy)jZBKQWyglvc$!(u|
z|7yoMiknxk{>hIeMQ`%sM#_g8Sn{HizGWvIB+iL&0Tds+aA=HI-`up0ido^=T6lwr
z)`Rb<@y!~}fOl<HokegA|65Jc#7G-A#yxl&9X0?yd-q^VVeiKuNk={{%-OdMMRR>)
zG#TZy+)eH^5y?gE&;>>(H0nht`ZB8&!)LkMf57~32uBi0@J2vP_*<KubKZ;ldaqsy
zOg!TdFo0jH&@c^X#j9~ye`38Tn*I_CM+WlkiJK7|7}F^k7>N&FNY0Y9ZHsRwHe*me
zC!1lXPoMoJ8b-v9`)|hu>yKbF20S31Up?0^ccqXJK*Q4k3{Ww)00R`kW>&`H_8!!F
z&@PMz2%_fY2N|FP)a+f1UBJ{FkXTM&I~Qu`WP=*yGT7PP)yWj>49P^r$=*~Q?4k!y
zk(8zeXn;LjAnBy-A(4S+u|-7C0TPffB)v1_<LA%}AeSK0!X&#waiBg~SlNHX0sbS;
zFQ)SUt9qn7Tx8T?nmzk~>bb%|7bpw}9cTQlG0@d%40M6UU>~Xc4|%RcV=zE*LJ8yl
zXhGOF%Knyz6Urc=(E9(i1<&O9jh;V<f_>NJKjir}db|R8eq-e?d49Ly`4h(leZsFs
zKU^2!8MY<y-}>RYIy`gz*2N$FaQ$w>U;4Q^Jab=wXV@k@f9r?)>hR3{TNi)y1A9~X
zKjgVOJab=wXV|M&f6K#jb$I5v0MD@ZCH_O6tHU$T1$c%nOZ^Xdt`5(<7vLGT$m?%;
zc&`r6ycggZwqD{t<heRL^Im{w-rsF_Zh!c$4$piS;2GwW{aZhLSBGc5-@5o?e_$@m
z|B&bE@XUV!p80;a;dy)UUmc$LFTgYZ?>77;&(-0X|F<swv={&HHawRH$Z>Um26Ft?
z#vh4*9KW0Kw@6oqX&}dMh5Rkj@0R>6($&El2>h*(zeW1pn7>4Vu)wPtDFXixvA;z6
zLm+>Pbamhc{$XB!i}brSe~ARTLU><D5JA6N^S4M>2=9wHBJdxQ2n1aryf31Oz<+om
z@Cu0{kn{KR{uh@1p^8AxD}*=a@8|t*k^X`A71BlEMSKzX4`BpeA!7tyL>Ynqa7G~4
z6~g->)(HHEHUh7ZHv%srj=+DIBar(F;e8Qz1pY%Ffmg^Lffvz7;6MBk$a96(`yvJj
z{D(pUd9D!N7m-NdKP(b>g)|a)5sw7^LnMK`R|xNms3h<oE(yFsG6}qhO#=U+lfWzF
zlfa7zCGa0c3FNy%cwfXRf&Y+7;1#k;;6=0&_z$lH@?RmmFJhL!f2bws3aKUNB5Dcx
zhgyO-uFiUcE~1toj^9Jgb2<RxxH@=)E~1u@PZIu`xA`T~6;eykMbr}X548jVuMXaz
zi>M_C_&>+qpev-7po^#_=pSkcS-*K@J^|20)DrX$wFF%uwFF&6EkXZKOVAZkOVCBs
z67&zX1YIGu1YJZeL9p+l|Lw>HT_LpuT|_NG|4>WN6;eykMbr|qJo<l{$}6Onpo^#_
z=pSkcx<YCRx`<jr-hcg{TDn4N3A%_{g8reFpev-7po^#_=pSkcx<YCRx`<kW{-Ktj
zE2Ng7i>M{&A8HA@LTU-Rh+2aFp_ZU4q?VwIs3qthY6-eRY6-fCT7v$emY^%7mY|EM
zCFmb&3A#dR3A%_{g8reFP}6y~{0FjH53&G|8nyz^nHnH(W#&w+hYlU!si6bU4^Zl$
zh7KF`K@Mjj*yu(L9X6s+Lx=U^ki%I5SZ}3<4(lNx2k4ku4IO3)A&0XluqR#(9rlz#
z4rftdXi`ImwIJkhRuGH?tD(b)CqyI|+k+m@WrOh=NEk*YpvSYUfUsdRBz!LQ+1vvp
zd@lEymmLy5m;B713=N-^dgeKWgwLfv^ASSA=klL<!yw`F8l3rkAmQ^moOw8);q&~?
zt8qr4AzD1I#~D?GhR@=G&g*f;L?GAC>v1;bhKA4Mo!8@RNC&xoUXQcE3p9Kl@4OK}
z=k+-2kRbQZ>v3j!A>s3SoEaHN_`Duxj}tU}mY)GNWTL<ovaXYt<L?EWzu|O_CJAE~
zV;g&mU$8pssUZtYU5w2jcc?-9XSw~g1oRIg0ct=Xq#dE40jTk#!)PNwjTarpjQ&ai
z4WBPz`|nb~h|J%M-hQvZL<gvgQJWjvID<t*ezDWP<~`LwK=d;f^rv_jRk~d9mlhaC
zG%i&Jj0apU1ysM6N&y>1UoOR^YYrQOUaAb(5b<&;E?slj0P9j^z{Wq9N&y?5TrLHa
zEnF_erE3oBdoNW6tZTef3Rur|xfGYKIn1SasWQ%1lUy>%rSX2Y8sl=Mz+76FOmgXl
z2VUOJ0bwqi%L#UQOLsP#e#ufUU;WD)yR+Hi%L#UQb9Xk|ddX5QU;WElJmBR`9`N!u
z?`$^ia@B`Xn#(1*yxBXOZMs}3mp6Q8vo)72<<hNxHrsKjQqE>0E|&y0)VpMoOB?<(
zZ~Ns+xxDE+^HyK3l*^mGGjH!DOSydOU*7bcc{493*yT;%nK$r~rCh%Hmp6T9-mc3D
zc6rlx<}JEpDVMMQ<xSt2H{^1H{a=_qC^0-QMBLaJ41EU+Af>IVEUn6-VPy+;W)ru!
zF@wE(C<%5pb+U4Bv3H_AW7TKxIzm%G-nFxGa(0ohG<Krq1OXI`&(9$XIsn>MW-gY_
zdgzc{YN<IPb12*}YQYU7>}OY?S7CP`*SH}&GX9DQJ%V`o(4levn}28?(1oMWJYXr%
z`8heLc_FU@@<4h~=<(M%55!3FLiUb>{&T{-InXm`EPja31r`%h?(bNTl-v-)|939X
z5`N`&R_<T5KtGokl7<VCA2coW_`8mfFr;4R+BiGsgK35bT2FLn{NHIH(!tU}uR-(x
zE%TQyV0rR$QA3>?oRA|#CP>K_|NYAI{}ksu<^P%oOtX*|QKjrm?ai$0EFgXd*vtw*
z-PObe`r0eh^#%Nk)5C6`gA4Xv?5~snDAaxjw5{yK?3}HBhb67d&B2gYV<GRt>Y;P;
z0~}rLUBFIO7M3pP{9FK2D<@M|TXP$*2h`gHFt-Aj+d%wAoB&%ZJ6C6eKgIv`kp4!t
zy1LF?6}59@tJ&Kc+x-J=s20>N4{Z)=E||~hOo_k1@Vm(&{-OU{SVN%#{fDR@=4FC3
zJEVzzf$tY6p<snJG7P*BkU&d5j|I8I2Z7P~9T>cRrG}<}!TkK;_zizZ7<&CIm$P3e
zG@)lONJF6b_Yr#i7c76t3k^fhp^w)2z2A>AG(PmfgWms@4l2{Hb7<b@aQqEwPS|HZ
ze_w^&|9=E)9<Kj{HO%Sxzrz}O`~NMhdCov?12%Vo_*8)a6IUA>Fy!?A2=KpX@o#|3
z>B?zIX`cgJ7UDIuGX0+jhxrQs3xGq){@Zr{r{ZA^2!j~(Iy3}1!Yl{03D4}`uiw97
zKx4t;LBR$4Kex=#7vv!}`5cC4`9Yx#ZD6QvJcl{VCZENHLFF9q(6q3eA-`w#{OlJJ
z2O`topn{%5!Sy%rpyz+C{sluAT+ed+8?4auP<f!o{{ZT5sQ!}W&k<7Ye?kn}cxwMU
z#QtjA|69v>2A;nR;y(+7pk4Q$ULA%LC1YFg|I+`9L-sPzV}s1evOz5wKg5H}%gtc`
zkhU?laHi%$2Z%YFLbo%3T!idRVC--Q47J#2L1-b+d(f2VfHPQ%*;&{?c0qvnie13A
zT9Azm_|O50R?g0ljs*rgsJ(<_1Q}95c0ynThyla_5&%hn6hImv1Goc_1;_&w0Ez%5
zfHFV@pbCKK5}*Ol1ZV;70(1e!0LTyo(q}l|2N=5mOaLavP5=`pV^c8n2|GK3bttgY
z`(T&fmm%k8H%$NPXaJ`6HuiRqUt3#afEmEd-o^%!9~c0uApq>?YHR}ldzji7+XBpC
z9g>wB7}6^N%pn^(04xBO0838?ORycl3SbSm53m8)p7m7#JAj>)9T;E_u!sCQ034wE
zLBJ$|ot??y0I7w&8Nk8D)fwOju@Ycs7b}P?us+eu#OANg5#R)H1~`M=AO$&Fc>tVk
zjGZk3&JK`D16%+umQG;E(cK>43UIYE13NjJ+B<;(ZUA?H2f!2X0Pq0pWX}YHfV7nj
zm=n^sLp}Ctf4bAN3+HAJ5(lDQXxqDhCBcy402tDae~$tr0199`3l~d>^#^f^h&a1A
zfsJj^JyKFV+;w8zC%#hLs<LOPc($+QKx<7gW}WJ~rTTWZrSVb8&1epUAdaRxyBJ=0
z)VG^(nxu0Hi?UrcY%8pfUDmVRdY7xd?6>WaZvj+h-p;t!Zh3jPxo@LX$$ZgYsQtKC
zYe&ibki2zahn^A>E1{jpKK9Y~39NeyxqI(O7TzVDH1jP#X&vDbR5DY(=_OJ|b&uCn
zDFKn_8%W<5%`Eoij?nblluSg*6ACxI!=v?xO8Hw0;6{J3{x{D629-|F>`w|sUw4n+
zj6p$>?tZQ;(jwQC6EpWTbS1EHt{%91H{`{f$c;BPqCZCQejeoid>^8Y@9KTOg=e*6
zGbYbXax<=uZib*v&|KLjrB@_)>xajCM6@3$bnNiO{viQaC{$?tqz_m(JPyZQorQVX
z9i}I%9lGx4-5UjTe$_d7H2U;KSXW$EtX847^Kjwto6+vfeEv9$1Lh^UqU_IVA^8VG
zLTen{=>p=APZ_9v90FS3bWM2><&>?YGLbJeBx@~LktiUwnK7NAq%Qc9Zb)xP&6=np
za$J!u@2d(+e%+9qHPr!qMY^sOMTV9-%1f&um(Is(sx;x5^eS)ik=L$S^Ki$E-~OaN
zHx!|PR1x-EvQE-AlU^O5{v{4^Neqoid5s|aMXriE6XnvKsO%I*ktJyXg{VA)m%Sd8
zLVNG57Rpc1PU=pc?Zmb*MEM%M9WPcc(aOL%k)+DpTiHs=M+-o!0<e1CJPt;|qr>ys
zSROwf_x&;dh^Wi(#Oi5RPG&;Wy(1r|hQ%$z>62ZFkSVNS@k|xE4R3H0i^PVm7Ef>z
z$h~ufsgo%o&+hpesA8yp!YV%YeXQGffK}t*58&zW>Uv&{GIn~J$mu$X{m0Ps%%q*>
z?jFu#sRhZjENm&NupeyGx9WNC(=RHNAyePl*qEON?G_656cWiXi6R3``L&lB35-77
zd2i<EG_cCWK;n^Pl`xrztMQ~0U7>=ArJCZVbYFEQ7iwz;v8HY`k9yt!-6}DOP>u{&
zbkjq`yP^xMHL{b}%ocMe(YXb@kxX#>JqoswM(s=x%QOj&?2w&SUq62TW~5bOjg%Vq
z>r9)>qRYJp#?Pmd8w1Nf>ZN{uVZIn`oQ3GDi9FQk7bDGojjpvda@*Lp=w-Rx13mEK
z4dBNdS6oe#&_|Og3d&{dVr-LC7UT~D<4f>IOm5gDF?;uNT>FAybSv^bwi{yjmke{q
zzNFdkRD#HD3nN`GFG_`D*A8&4SkUVZq_<qdof`|?p#dY+Oqzlq;=bmP4HEzDPp_As
z%sIaPo~FMXukwlE^Zvp_S68)EQ@W_-j-e2PWca;-PzJ~6Ip%hzoW0jEj7V5#CD@5R
z&TA8XY~<X2HPd}fCUJN3H3x?I`yVXktw$VR<qlM9k>B4~c5CPUV!QidQ?q%rCHu5g
ziDx&1L~EyreT19!aU7bR1?dnYLhDQM>{=idl|#$djG@KVvI<WnS=YNS^5b3>F>c&Q
zI&d>Txg-77dY#~d(OAfPmlh1m&1Z2#2dg=%qDiX<*Iu@cA79_dn?s$<&ws^k)#FU_
zzJRz)sbu?Oqf)&qC98=6c2K7>6U|czP>v<`_zWSC-0|kB#6BnDLtZ2DG3>Ocg#EAw
zbh#NLY>^}yF$iEIU29f33E3)OYlvc=oYF1inuTBw;Mc~798|rCz8Us!;eT4Fy}}qn
z@z&UK0O->*Rw=8Lp{L}bH)l|7Ss0Yzy{d30PE^FMO4d9Lg|AV5h-i^mu|(GGju|O}
zPfw^dO(LZz?TEf>EL~pyQKrc4ZDwv7;Un9{M>-lRW{hl{BO~!6H0EQA0eSNsF~uR`
zG;0F!CS+RUg+d_sSn9wiT#tEI8N?FFW*Y(rz}?M_>$kXFSie@>$G`6X?mY>irTjtB
z5!PvF^ZN~QysD7$B6-_M`=Z({+1b{TsCy#UzMxWH|BU<Y*dIU`8>1G!Ly$E4z`R0j
z>tkfjfME<!Mlxeb#CSdOg@Jo-NbNAawFAq{BdyF<M-~a;Kw%}BEvd-7g2EZC%$$hH
zT0%pXZU)htpPdP7Lk?IKSOyL_Ce`WccG|=0OUh!~(Uk9kLNq)-2afvl4q2~!xnT+{
zns}`=kswZLm$T#et|b?_-6ZgaGxY|&LNE!Nd$BujP#Pth1Sd*S?F{PBbuFMgGBt3*
z)&=e{1D$=Zk=dk$3-95C>^0+>g&hAIl<;l1yf@A5z3;vz23gH!QvOuy<~Z1<mCI;B
z_<37ll|*GA6)e?Ua-`4U28!sO1@6We;V#SR7#FG9x*Se^K$SOcZ=vj#Wg0ZFn8gvE
z9J|lNDyPhPLsLd8XZTibc73Tc_1OGFHQb6W1J>F-5)s<GUh`+P>ps#}O$^+vf~j1!
z&(m7qNs=6W6`S*isD9oj<uJ)jSZ0)~NFctG<=gLu6c?M{vn@#<+7^(Jac!kHV+Qio
zMDacn)uKY$GH+2+nwS~t7(u!Ur~9n6kJ4}NQ&6QfGO%_>WOBxlBr(VN50v5UiOXj>
zXWw|^((6C$^+4$1SHc-I`{+!S528Yy&UrFFM@wm#4DS=h4SilF$`sPbXZvU^Cz3u8
zl*lmp`t(#nb}Qh`yn&(`r!|;0>hs4(M{#4is*3uu-oZqi9lAv&IuvZRSYv3-C2{sW
z0d|DG40zr#nlaCPf|4ZCLqk8+&E!?{N-nxGePu!VdL2oh!Sra}$i6n`+fPS@(-Hv5
zU=_|bi%RatWD}f$Pv7L^wg@<4XJ0L1&pi>DHVBY>*Yv$4!Z=&OVOvqOw@xOh-S{MW
zdScyuS?gO;?*qxQr+l&|YOGFAb2Z!|=H_|LbPK{h>r(`|-P)o;>LKAVmoRs;Fcwex
zBGk-ec{;%zzqQO^exe{fGeT@jO*?1iH?tByQOV+)(9g^HD((}5jn8nZg2tv=Z2gZZ
zg)PQVz+hd^Z3MGfBwa5Wv5IDC*Ivts>r+C;%_+@2%K}5a6<^DyKXrhs4UwfwLQ+KX
zm=s66fbUYV(8A=yZb!ZzIIJX2GtuUs%4WawrjhN5q2u)C-W*T!cb2R=7yDqQZ|3l~
zgdB_fEK>*5U2J8Z&Lf$--M7=P`qE^nMr4iY{zi7?edh``7k4kix@4`B9zEK&_BcI>
zv|U0>TWjpo`O&2SLt86>r`cwTPjyQvwp=IS46U=-i3s>I!{-s4-LRPZh}KB(KE@2X
zKKE99sEb9aW3-Lv<^8eL5RRql?yygAa1Z38A5>nI!#!U&R-MFTw8BWGZpF*tRx&ZE
zP-LSkto9T>e*f}arkz-8yGqJvl0;hJ(?Nr~4-5_{>*)1Tv!{c31v~ALMATDy3vbgY
z<(Iw7047Y*#||DORgqwNHFz#wlZk~3wLQId@9itR23$KsDH&s9#F+R}Bt7!(pjLW+
z)ZU;Z^<ejR+hjJ@1=895V4A#~{U$kJ+~7Ss$`7$6Q=jqlycKrSzDTRz_cTxHq?ThD
zS<Lp%&28*s#}%ouek{Z|Exi!tpN9{xYB=ZE*q+SKH|x2#>$h_vnDrE|BHTHjh?`8n
zE40b<ZI_Lij(!<AaIO?{O8aBlsa})^epEJFvQe{fX;S>E`mP4SAv$lz4gEQfn(xQr
z0~K#TN3oIKm{u|-xdN=$Ll#hFP;cH+RdwV|(D$XuwtZwAY3X7YR**_!>UV-S;t*iR
z(QHVr&DJX~!K8F2K8_@-N0OOqEs1hsT(mP(NXgg)Z*RbPP`-qdk=z$KWKF<S);TQ}
z@-z-gB=HO2KZ$#ZHqaM&{e?IQ*+hOpXXg`J*<z{S{6g0E2g;H|7N0Fhn&$|-2Y@ux
zAX+xrH2|hMZ5}wsa=s#nnfJM+Nh7+-HPFyE7p%p_MIu6cP1!Efh*)M5@`(6g^c?Aq
zf=HE#9+K?6!KR)X)Z@s?#*pEbAq`!N($lppt~vnct{&5A#|!v$w<XU-B&FVm!K1fp
zSM|C@3F1~5Zb&eRC^b8JhZL<9@#x?<7kOg4wajn(9DCCwhkR&hv$j|~wObEBY$?4F
z5FO=cES6ahFEh_e^EpG&>>Y=|v9af;gi7F%l=ORLB)Kgft?isRiXixR$CUym>0OiB
z(rNJYyHzVcou8?dTUnJE9Of^$@!@>q5zmkAR<rWwZ_98$StnmbCM5OlAjjnYK&8yb
zgb{x$kIU6Kh7!E)+;Sx3L)i&_o)snbG@mid%Y9{OB=_k!sj6aXY0V~?PJ54Ap^%>b
zWJ)tms(f`T|0nNR8<Ds89yWf;8czWxT9l`x<|pG$K4U7GN*zRa3e=0)qIXFK!xG;d
z<QCtr3DKG*!7yK_(mC<CS$ndrwkM<A68mEe_-JIN*D0zb=x3V=XH8Y8&O5K`?$IBA
z<kx!RM|yI(QK2<|(NCoKn1J@hT#Npu8Us_2V7}b6*@8rTl3_v~$C`-AI~>wo>9jF!
zRO%<kAyaomii8X0rmZEm684>wK0DqwqGKV*Zyub-%MKJ;d}+Uyhzd{Zgt4(EV<|w<
zTl$J9@qH0*11p7A6rW%x-yEYE`*-51PYI}&?L&fieK;e+ZQS3=()eY;E3C~^t(i_o
z=30&dj#3^}o5DDD+tj37cAKn1PsS31-`^`C{)ip^Z2%Gcx%PgL#kYGb<#@W=FY{PC
z?<n5UYL#lsZJ~yIO_8}4!KQhb<(YX^&gAEmg(zLUBJzjp3zgquUIZro<a=Y}Z0ud}
zg}u2a5ABqSWVQ7EVm)p~7kG&`;?9ydc)!lYly$sumWAs_@Pu^;A{gOTfd&?ZxipPs
z>iw*6xSo-bn%Mz(mSoRKZ;zw{VFJpns1sF5O&dM$i1DXV<oDC47ciELEG;Y(YIaaN
ztahy}gs6IdZn!3%tX6%tw+nZ?W@GN$P+xFNPAW;z_$jfMarGzuArH;=Pg<;$WUHyx
zdAN;8A|o_lFUB^)JadQd?lSgt5S?LLnu!4_#)91}QK{%x;ZV=S#(nr%f1)4*6lD6)
zFzZ;Yk6!`@dup-69Pplu+u+v5r|M^UrTgpM`&JYryDzv@v8hS7+L81;GEzhJIf#Ye
z1&8s$?g-YKs)e=8G|if+MZ=h^G3pAygIN9zR}x>kKF=4lUgkj4`iRjF$6=O70%J`K
zOFzb0$8>Vo2OhRGh>_;5>p34Yi`stiBJ$~md$ZzGYZ$aOQJLff{_1AFNL?ftjlYoe
zLhR)@J{zLI7t_k(vZ39oRt)vySUS~y8c+Q@M_4Um=96!OYn*QueahVFM^2O-dASOo
zu0ZhRvq=^I#x<c}LLQRZobL|@cUp$M2(QIIdY&_{d$+<`rS#@NFIDR8dd(f)EE40<
zhpu<xw#p^G1vbKu_zIsaG)vUIc_Za@@M^zPXlP|<QfKg#i%3&PvZ-rpBz?7x2h)`y
zJ%$I=gv}d8ZUGo!K=vY!ax$D#9o1G>8PH)MWPi~8qBL;$DerVBwvdlN{bsU#fq>14
zR+Rg7U9z9AUX7p%`C}?+S}jBi?iQlkX=>zYwYYoh&X{jdcx>e^vFr;Y{>Z7qC<S~<
zBAk~R^OfCu&T=d%Ov&bmox^STBD{J<UZx(^Cumy2M~Z5g^HAnKFUEqskyij-dY}h6
zJiK$XUjr3_9gYuPXgXkl2lqYa=YT`~H({6q44RpgWpj_e%(o%VV^xJ^5KzSrB3gYX
zF(aU2I!xEvnGBeppYInY2maioq2w@c6T9tDip{fEWN6Mq`EpmSs}#jWz_5rXfoFu5
zo48t4R4jOpyVf3`!2L~UY}wm!mCUK<&#F7jx6%@=#NFt|Ya|uPEVrAtCj6fmnNfWc
zj@Wf(aoXLB!1Oe45!&2Nd!xKcMauG64pnKU@YdrB&$tg?nsGzijnUHVvokGJEKLHP
zH3{-#=jbP#Hr0u8g=ZKBhSOfs!gDKnHzR?3r^UoX(w;@v*K5h&yXWxgZBd+=LLN6u
zB$iK33kio~fdgjVYz}Ks$lzLg<i5xJt5|0fGz;Ovebk<B>5nZ6KLrJ|gnVmmX`a{1
zeB!O3y7F#NFRzxTDh-q#8%iVilogGN;|4J|+U`0A2Bu`6JXgi)GOobDal6v|$zZ~)
z!_3}~X+of(gS~-!Bnc+Jf#8H^&Cf!b41*z3vrvvN6`!0phP&^|ytx*hBWS@o1xm($
z(0Of{3(WIGer)3%NI)`^nek&6Q#*i=Kzs37mdR&@I40WL^cXI6^T(f3F))`&rH0vp
zQ&*TBRrCr4?{3W+**|&K_oIGfWO_P-XG?XJ(plv@&!9Z{P{Cvz?xw^e&i-w+krElY
zw017E@>yfv-MZU>!W++#;yD~W;OLh@x9D|i_~~3L6zvN4iG@Z<8++Q18<2ZU^xALs
z2XH3E-}QX1uc(CFDf#l{4inQM!Abb7w-hz)tAqwpwbQ=%Sr5a)IZ}&k>BsA+S?=++
z`}q}f`b6YucI?K+jHA&pfbZD4=PS6NcXrF(sz<UW_dTksUwd%V)N9A_BQwYDLq7tC
z_fPDF_m?peLXx;kEhqBn`KUZGlvCDS3Cu%h*Hr~~t-dDytcg|4>ZIrOQOpkJ&YRvN
zMX$c$i|rF6lE1mRvQ_Bomj-l57<sQ}_s)<DSypfO|0C`mV{D7oMDLeY)h^q%ZQHhO
z+qG*KcG<RV+uCK@w(Y8SpFVxl-Ea3v?oDoTKd!O9%w#5W&Sd<a|FBz4rU)2RNVHgR
zW!^CM(U8-2NrLJ!VIh_Du{p7jdMGW_JVrp~$5N}6xe-hjj2b~_9fjP|2<3MkBq19T
zP=hRY5c+#|OxCJrsf>Oe`7Lkq?D2fW!cl<&%Uu>RqBr0<=v2#d)d5%&j?e2W_-cSr
z4r4ufqv|?UBTP><@7nV#`KtEULpO5%&ADLlrv?69WMV5rzjHy&#gtj{mnr&l{pH>%
z85ak88;)z#ok(|HdF5|JU#n6^6cyR)@=&)r#-J_zBAA89M`DhUSgGTaNzdT3`n@$N
zCvqb$>VxWnmbbD*U^e=6vwIIJ;#}VschDL<v^c+%y9`yD38pQ!Up|j15a|9w1SSUO
zNVNkEH{;`(w=y67U5~xzOovJA;hnenuGlvlKfpgKnOD3_BxsY=MbNGVxD^W7RQAhM
z^H_9~<%-4^EEdylHKhh|Lc2l6{V92wO_Y^TZAkVy;+`>W4v_1#$Gjv+@JiM}!9%##
zAwo#9u8dllvor5`7V#KZR#rI~EV$XNZarnU`MMuq{@k|F>cBuZSUwl;#77lP1QuXh
z#!RF}*8VQYGqfvgAD`~%Z`_2LDr!l7e+&UZ&A1FrnacrWFjZS(9J~7#@>iTNH8yH!
zQN7QSvJ_rKSwWq_v3H9lM=87w49e9M17Og0MV{=lO(9P(oM7Qsb0%<h*=p%n5z$!u
zg3r!tux)&RCo|K!XnN`U;5tY_>OC%NJ4pO)`D25gmiY03??Z>1oNDTc-%vC4{L*fX
z@kh|x$Ta#uTh>3W{f+(GT)%!kpgIq`&m5XaoQ%%P8h(0uO61Uw&6*e33?`x!myz`G
zX>Zt&HdZs;f%itkt5<oif)dVY{MuHP=DC6XAulLBK^?*dYjgeh-j`%q2=6{JQTMsK
z9G^{;8YZCgrM%zqhtK)5W0Q^8z<S6J@u`Jd=Zg%2O{~AatbZF4m9+ju&+zrJnmlFd
zA(wkX9(#*?%VI+;WidO-a5L-ZP0rZNQmBcdEs`d2D00-qqG#oz`wuNEhe?mbRbI51
zlE@Dt?o32JW*bA^k568C_gFnQ7npcGuUNe;kgzH`0z>>bubE%PVCxccupXe^lXDvL
zu219SpbUt>5!oYnS-vNZ%N^dks$x?5a4h1B9@(4<-C(<EKO*9fq;>Z?O%&;TCkpx1
zD8c<sf8c<PBXGDPLj8h5#&@EJl|!vQ%60;_aj{o&B)AjW3ZFq}DagZ~Q8Tlj9)<1_
zjsmqM+C|R>;O-umeBZII^s%gnbndD6q_z$}dH|jV$qjJzVEUdz#v!`VE7q0(nKD~J
znKy1cm}Chv@PWLH%GQRM9Ed0r89#eHV`NlUGi&H)j>EP?m^yF+a0P7=nuV$#m%Yev
zA|DNZSNt^UH{G2FEuclGQ|sDXqqJ*m#G2I7wy&hNv9E5ESW?nXpU<!r5?w9w{6i#6
zTW)k_N@i)}q~(z*ffk#Lg^)MpxbS$4g1tU|<`k|7Fjia;`#n4;MsiS`I4;8a#aZT+
z;}TU+NXDzbgu7f$6GtRg9vbn3g#_L_?7aa-llQjWW%wo)B`PMF6DjXU?9v~Wr9?E=
z<xuQ)C}?hMXeL}&ymS>&2d79fSW>3G#aUU|rY7?-7EwyExP0mYs)`nZ={iZxRJ%ki
zIW-b?g5tX3;xbi5HyZVew2BGXN*vYYAT;adAop{2KApyD<GM5b7C}=@`kUDj)bnX3
zHHiM(AW`*)30Gi2NT&Wg@j-l^J>(dN?4d8}(24{e5Xcw){x1SeLJVczy@}0f9&!U7
z+=~(@&M79VNtn=+ei*MRFL|@Z>@-?|p5ta!mc+%S<VGT~mv>C%dZm*26PCS76j>(5
zi@Zn1tSs2#r}2(82K)24mtLT_oSZq~jthQVZ>w-|GQ&9<WL%NV%xsRf;hx!k^T+o7
zhf>QITrGM<%E0<RFgOP$82g4npfqi~swY1&ufKXAK7UJS?9ZaCrKH$rxaPI+g~+_S
zFkOs(84rB%^dz8dg-pwmkJ4z;kIPky*~)G3qcnQI)M@498;@ARJ4HYz{{}DTVfnW1
zB<PQ^L`jS%m{dB)v5hlQ&(KEDMgCASZd0{asHktmOm|Tf3s;MpQ#6XJXE~?83{>s8
z)xHrzQ(0QqKy}h}&{R(>b~pSIT@%l&Zi&{kH|AJ@fvJJ7f0?oMo=gwI93eV({&9KZ
zWpnX;_iOm88F0AB%|i#>Gq!~}>Jgz5har0I!~}PZz}zO|r~KtQc6AMc{fkvA3(J#?
zh>qES6W^(ld!@@FCgu8RrhqYG77P6Sr|?HPvdnAp#dP-07uM>N#_VMr5L#O~d$DM-
z2nm@e@loL(6b*_n4{Ss^T@JT7j~{v{nIn<Guj2vc&h$+cx~3C6hT62HpM>@v1#gx~
zZHnJPmm1%>vv;)tlts5rE<_p;l;GF-uImM+)+qXei(`-Lw!?3$=pcq^*_cTT=P>cZ
zf(}Q{5V99cKRbaD8{Db=|9GaFql=;+q8uEUv7=-_k0BV-g*l?f)HeF++H^ACGH!?{
zMT|V--);|cUKH>n+1xA>IPAgs`9Yu?fafF#5>TUyTu6+jRv6!$H+Stu$zQc>3c+W7
zwY>r#W%1ymW02fE$3Q3B8Daq@m$|X%^7$6ZOCf2ZXcO}-4vILiyv_!T3GD0b=}q(7
zk{YW}sDB;n53Xx!L~q$mf`<dgFKuegqyJf4WF*_<U9Wq}v8(dHG>ShBk&GgIn}i{I
z)U-|Ji_%BJM>RYLFWWY=93d;JLXtdgThHMV;GWn92`KBQuW=A-zUP(RWH73Bf4yEu
zMrow@d*s<KJVQwfc(dQ`>BQwc^789+w+?aCQd&YHU%H6F41*Fxhke6aus%@OBUsda
zuYqF?h_-tg&O%}OsKg(4V(PB*i<bJhKHk~)$qCLe;bPhXE9uj;%v^qmN4x5~i)H;e
zZAA(rPTb4$)fu&*dJWcb<3!{(5MDefGHerpZOi`j2z&$G%C#Z_C&xUB?on^Nbhy8H
z?D~g&G)7=+XJ}3UdAQy59<bjxwqEXHzvAbOPlJdp*qsN*&m~+;PBHo8+@(D<QH($e
zOazB(z<9~L7<b82Ki9i^4D}i`l#r4;*z8r(uy?jU1#skvX-JKGLZ^ce9E{0_zEWxJ
zJU+<OdGHL$!R>zv^=HB+<ow-d*cr0LHx{&zNv6_S0EXuKMmfqcbfCI2vR}j{hBC{+
zag@qd(8;2bt1a9To}Ov?7zcO;y_&Y6hQhc{t!S%&P8>KY4wA%FqIejlWoasSR*kY$
z68p;gZHlj5cB4k7aa1q7^mw%1#jG-Ul)dQ8yC42+6H^)9fVt*yqoFbQrDEsPR#IxI
zcw5HA<H@p!c1|q|7bSoLUR#J~bYZd%k<+Jr6U$o}TVYcFqf9BFGu2c73WP8;=M(m#
z=c$|RyjjBIx?}0;Dq|kczD?xm>2!QMy{qkgC8nCF_S;`~^ZXXBeGsO(1zykUcEd#r
z7k7^oiBCHe6U}2?CQszmJ>&(C8^dGwmYdYPeVcRz18;EyHj~-f-;;EJ<b=-B*sn+C
z3|HAJ*Q`k*CmTHleY|&wvWlVS<?{RVjYO37SQ$zW6=WQmAl+iLp#?&*?lS`A5g)7>
z$l@P|8T|XM@xPCdG5$kS{AYIaulT~hKwkg!3x91OEfXUL0q5U|KQ<1I|Lzz5F8*h~
z@NYl=!!I!Y{qtY=1<wCVenFjH<Nt3M{sM--c;SC^3jdTs^nba+e=!RG6({_^Q3?M>
z8U6$B{ku=FwfyIm{$G>||G-E8MJoJb;s0DJa56IeXQ|-nsiC~w{uS-t)nbf_B|Avw
zR=dU}uUg?cSeBnZkt;LCGfimnn<Tc9L;wU5?8iM1d_ZV8GRLx(`MTBRhVpe;_ETol
z>E6b1wZZk}=cae|`|!0tKY{f%Yv=ZR*Y<l=?T-*iu!y1bBTQ8E<oX8(Asva%&+lhU
zbTnprq<e60^6>AUpQ#nZ136-TmNpENc~)EN30bL)nm2!}8Ge%O_8L{K9~)~PxUL*`
z4Mn6}NJvb`M2CmUWc64Ljj`SfGar95GHtWckWvx(es#RWJk+lI9&D|BSpZdZ%(JAt
zCtu3?#X&<v%SQ6r^Xuu@=KI$@GT3e#?UuWDz;?9AujRt5(GDfIk}JvejBLbud5p7U
zPn({T7ysJ8-7CZpB6x965$``9LtewLHZKnQ;?U@}mcOn){f62}-wLEt0JQLWbxx{N
zXROxzsXca|+F-Y6j<G8OowBXS_(<0XA)!%&AbSkAbi0ByBs^iFztL~;c4a%|Ul6(n
z-Haf2#V-hwk-mOY*G2vya6=jo(;b8|Vy}x|5w0Y9LaGRh31c1PGosxU^AWfpUqXZk
zeH_&34@wokflN=8nIOjsr5sc-LS~E#B`!w39W*lnzs0IcN|m%BHba#A%^WAyDd!Nn
zI*1b>>Hvw?N7m`!0|`MC**YzidcZ?zF^Bsk_f!gc8hdn;RnW69c_&*Rq$N9Arf<o=
zCi2bKW-wMxDXjb~dztz6-dJhrUfdy<BLDZ+^)UzQufJ%GPK+|+Plu;HHYw*S_cY|(
zXDtJ2TAaafe#uQ=#I8;szf3Yty#{e-bwogWpu~)GbGdJB>^rm4-RlM%%ci&ZY(;wx
z9~Di3-dA_tZebhR!*tz}@<-~^Iv`pAy!v)Nn(jqs7>sFfRD`zqjwYp+Qd^>sEfi41
zw}icpz}W*uhKEhxXFBRDfneo-eA=oA1Q(4OQP5H#!t{?u&qzJdHj`i_`2B{67v<d2
z()uC0(29cQOaQ<pjKab-XYkC8-_<er`GwNXXR1CC9H%xn9jgk$Ww{~;n^oD|2>j+^
zd!YvmRltHjUjK1#!N_A*^Z|W<c4>)aro<1>-Ed=3YqV$oW-MBG|50$jXOtbvgca^$
zCcuss_6d*>x7<8b>f!O)6ERM>aoqT`b)0KM=&7e%3|1ykIT9Hm5FI)Vi^+RKa|l*?
z<S$iGCc9j^zcvFPbS174`mmP((zJj@uM*L#*it!uJK9T-wn_Bv9s#rRThv-+{ZY~{
zy3v#Sdf9!*C@=w<rWsCQOBZWx>IO8mLUAqR=y>zv?l-K?3*E=dp8~1zN1v_8y2IQE
zPt8*>Tz#R(ad<-3;n(52I?l`zs|KN#Bs}+$M(v_{SWl1mnzE1`IaPIUbL&G%1~71u
zE=E~L*s$c7@nGrlaO(<-V|3TWr72|Ryn!*q#-x}viIbS_Lmr60ayiD!kNu*B;F(Wn
zfAzOp<1)syJWg-mOL|Hx)LuOZihP&F*Pz38VBF<bfC;wUOLaOl+iNh*(j13YxR{wL
zam6XO#v3j+R;mG9dV>?=UV$e+-EX;>)8p-2Ag7e?-+Jg0$Q<(G=mqQun62jLw>N8B
zE`t3IOSU(dpDBG6?l0e{KRnJ!y(b3nBEbkbD`}^JDFx!Fl|yIODY7Ea`b<32%5hRX
zd)2J07LNms43=iu7RU;NS&HKIXEGe%?hf)V6Wv_hp2Bq^r%R)>ic->>;4M#N`$QQ&
z$Jiei&B+;(VHkd$n;PEL4gdHPk^no8GcT#?l}rO_0$L}iv!j1y&IQ8e_gMGN>wX2V
z4L3uA1rWwdhXBpprw`QEIWkwXao<F4!MoY;6E}5eIX+#v26D;W-NGk?Mc2WS<KG&$
zkE$bE;cF%i-ZRL|PfBxKJ^fNneX@ymmIMyp7jOl%sghGK>6PqCjcH<RY8G(pf|U5e
z<L-cPI3KrMdxI5ufJ5RbQFW<%6)q?bj^~HF1id`CbSOHCFyKi7+qd=WigM@t9#2J+
zyC0hB^Db%09rZESXBqu<9!(s=o$<<y@uNMBe3Ryg`D83C13xJ=R0j(+A(HyuUHsew
zHp#!4V=3W~o-2dEG}jP`v)ldSI@;(6N)=ic_tNmpsQb+5^DX}GVN<$n*luyL;5|*c
zT^`1b=h`<oKIq>g`~6q)h!x0Pz!oaRB>2>_oWB&@I{uy>E;}$V;VLIxcRIMd+>jsq
z64Uv%1R?^&Lh7;^BJQ&fKe`0;mI{MBGgV7HQ7NW&$(;I_2s@k>!{PtvC^~#IC?}18
zO)Jn~SN&#rAoMxo2ekXj%hcd@G)F{1U(`t>RZyH`=9_=OHGFvj2~l_;g}Q2)He0WO
z0F4yEY{NKty4*+3lIe7HrLL}>|18(53`zgomv6VEuV0^*vm>4f#<VlpYx2;XEJw1<
zX5pF}5)4FFkZmPpLW+HYMIlFOiZ5ky&cdPvo*=2~?CVRMn+N?zRGE@eTXZ?j^Tu}g
zR*cY7-8SybeI;(@B38=Hz==tB0p<lJV(U$6DX`=sU{%4A^!cPginV}6ra((R(~^cp
ziF(4PVkMsr*rlqevyQfliHd~KHY8^ULaORnA|lqq#E2`=D5wFby_$kr!Vf0#k9d(&
zg7H|^`>*IkkOmHq@kE~liF#mr&%VKA*kCbS*yB%p?JY@5eua^iQb)d~)lyn;$+9Op
z*!^9QGilqj!8<~|(2~+*RVHie%qhJfY`f_`kxl^r?m<60&S4>!cvcArRqo6<w32KY
zfYNWvWyL&1{JgFP1dMnV7xR#kAQ>GcVW)$-{@s*{AG(TyFly-4%ZJEZpSjk;>S95S
zb>Ud8ou{46>0L%@y-yC9sG2-6!deitrl!d7M#=eM467qi!Yl39L%kN^=)|uny!*iK
z9Rg*tR|(s(S^K<M2$hMx!ApxxA&GuaepX+8hxF}VZ(0L?UlN&!ZsIJ%DWr?Ixz-~%
z7`v%r<xEUPrvkwBFlm1T&JmRfj`V=g3W6wJx`M0FHv#PKyzqeuy~{vT7blmwh6qJH
zM$I~7CFZ?oLk!GSNv_z+%Yz=yTR|+Em5imYAxlG|LlFm3Nx1PmS$}f#rt|I(+K+Z-
z=Qo=MY<<c&X(_3>VQ>0}V3)yaj{%S6PjIlkQ&LO(di@dftIeymLt=KciJFb>78p?U
zMEE!bHm~AO7)>js{9+jHQtmCSFL{U&CK0h-rBrGs&9fuex`S3P^kQU0yo?dN?_wAw
zQcLFYyVWJBT;?2BbNV$bmh!VV=8aM!x|0nQe)v%)C=v?NBzJ?28k#t{F~f~H2))B6
zx{$6=*7bCLVt|EW!tD-SUQ<}uk1yZhN0sg)8Pk$i8%q0tFXS=#u156_W;UllJ*DzC
z^X;}T->}0l;Opzi*tfIku@+G>{S@=<oWl53l~JR3hE@pzGVS|HC;~93C?fT`ADXSu
z265#qH7F>z0zs=QhPhQE>N2j@k>P#rJ1h(1ixn_Z!f;=TSPO3(K2g9ZAjV-$(A{v?
zjv02SSQ)TxF*n0ZEjLU?<+_@cU_=CJMI*@S`6gFfsZ>~CK#4a3O{*Sbq3DoE%DQc6
znnmvZg%oWHjUWIA^uD<bBUwg@BY&!fGGcuGCUKcX3z={${gZ&N{-(k7!k}EBRGMV)
z$~UR2X9+vl`HCn%b1;CYX;&=#_gEE&Aw}t+v;s4R`%uvUF-*(S=^k?H33R62gntH3
zoJcVmD3_`x7l9ui3WgecnDsnYpzW2PUi;)W?P9W`wzjHfRt@b879gFd3KHWqc<F3w
z9`;u60~AHei-4J%gN9ZZ36Sr2)CLQti+NIk)!pw-cS~0~a^h?Wp_&|R$MZYcST;&|
zeBN|4elXKTK%A`c8TyWL^U&XpqwQMW9$;>?sTtNae#oOtM|W&l=9t}WL9R6(M3{Kx
z>o|)Z#L=&t>TlH`)ANZ6dRXJJVOYS1J~FZ9&B7zGsQ&p`6_PQ12|~$3kX*jkWJLgh
z%x5(y_Ig4xM4e3x$>OkUc;b65mUgNJJRN+Yu&R4#MGf6N5iDM1LNh`Ufh$lWtbc{f
zF}XBjVmp6dX_1s_wS-dP2R342Ia+6xM5CM@XS^G3T`$e@+K*<6S>3!8-*1K+y~*f^
zxCk>=NGt9ubnSo`#x@v4l{o9k!>D6Ww08&~{nH;mN7ZNivi5A@+bvZCE@ktT*fyIU
z)@fy0tY`f54aLl7AXs{sZ?E(*FMjX>h?1Ufm@$HC0n-n1rb~2{FyNMn>dEo}J@y?*
zF2H^uP1{$;V@IJ-AAEZ~?^xy7!8l7uW5_<LY75qFCKR{UK2YAk^;3lO+|akI(VCCP
zv_%>ByZ*yPLD-?gn91{?YKLTSwCFiD<B=2GmV9zh@vVcDH0F+6M*2hf2ujWm%sabn
zhlhH6YHYFmE-~O)5jo!=ubic2LGBW&qE0_%7cxoVvF*?);YYm0coWH4BOqL?r`~}8
zT(b;9q;BuPB@fJ6pN$S8?a#yqjX=qdpwU^{(a#oe`d$D!*vcRcr6nu+GM0y1`L-cW
zhK4Kr>V&offZV`bWXw>2-u)d%sYkE%Q`9_+s8T~A)hxUQK^0W*XHwPC-jwqB$4_P=
zA%L$SWJjMEmLnd0;6*~0DQ(tAFqXFQJq7Rn^XV^yMAlvvgZ0-6+!7!p(x`Jqv;udL
zFQL0}od%s4)#IO1_r)rWeN&Q{M<(5^QuplXni72<x608)Bs4~L+|lo{2=4RvqE6!7
zjVjE9y>Hyf@f`pRN%xtF30pHpd;xShGv6bnFdIia_*+Sh$<AX7(H;d)i*RFr<y+-~
zm#VxlUzpAQwc#`Crks(E%n@5XR(2l@&7XS2Xq5_(Hjc~s$v}`Ju4WMN`uqd$%c+?{
zY9LX+D=MYmP%}_em8`QiEiwyC8?&83dOa=R_4ID)*;eQm1$Xy5{f6R=FH8^=NlZaH
ziE)LY5D#26)4MV!4sTn5_rl_x0FIQyq*b@t%nO4mywrUfocp=~QsnrY3TcsGcFPA`
z)+xi^(H0T07Z639UE(LVpWjG-x1Dt>8SD;aU@c#o3P0**qoekeF}9(~<j@+xs*k~J
zAfvY--~xAwU!>DE$J8cOvGfR??I_aYwfDJV)Lw!39Y~mI&Lk}IsaFJuzp|QQ-^M=`
zB{Fvk#2p}qKT5mKp;|$#kfoMnLOsauud^!MY@pbL<6*x!o3jIXW_WbQKvSCO_<w0I
z>^)uH+SfYY2i`lZBfTuYm}eJ&w8$^J(t*4D9w5M&xQOJu-mXW<E$h{7rrspy)=bPy
z$HK%+J%x=9=nW4=+wMC-2deKI|8q<(H_Q83Qb7;&mel86ff~$G{}o)-tLlx`72MTZ
zTGiIkE`q4vM=xDZF;>@6QCfNmQ_g>Klz@>+A^|lKHe*-FKIjw1N64y;>ZI=7plwvd
zhH+r#kQ1EKi@8AkOMMY~+NI9d6SCo=7)ScDD>L6_6JM!(Vk_TgXhgQPcCF~axLi-U
zx(XtuuWj#ZZM-T=y;s&jXfA8T#l}E(Ur8p($tFsN6IRR^)TPbqAnSSa6CsIk_Eh;5
z*~tM?uOe`k7Z6qXXPx2PP?$I)%&avtds2lf7K16$lFUxYQAiLeH^tUj_eu@_NwSfE
zl9X4NY<m2#sHE(m)vq}1ketcwg+w&aVeQ>;X8IX_F$d$wy(O_Fz|P@OV!PRAkn+Im
zR5@G#v()C?g2DA@mBniY;8jHnYa6u$=K#)9W=&GXq7*%S*hr0EHU;w5!Dcy_M>`z1
zUp^oU$|}0FMJNdT5y!l?!nmSDA5Oi$PBiJigK-&$;OX+~Br509*YV<!KaA1sN7WI*
zT&?5Iz_wkIOEUb^R>$fmFB}zY%wF|1?gS>c^<Tbl&1#RaIeZOiIr&0!m`MJ-B*wuD
zRt;>X021!%LKxPKjlKI2C}=2t@#?oU1jHF2dJ7$m3k&}!`3MF~P|DM}c&sv^51a{-
z&CYv`eSyuP$_jF#{%G~&xwKhw10?rILp@v}VY}cfHUM<iGINi;A*=+4cQ_!OxQ0L}
zJ#{;=N4i!a)-4xv3B74Q28k9qY!Ib>jH71sXHct57{F-;>#HxCg<(T?4R|<h56uEO
zkhj!nI1E{Q$&(oKJyaO&yfEtWfh<ZDGlsU!WDpi}^x=jI3eq{zasPsO0e+C~h)?f-
zTUw+aV6jAse|8H0j<8$}ucDf0JPOOVtz-Y;yCBLtA*PPAtL4Pw=lREyCBtjCGH$2H
z_mmJ(=xer6V$mpSlWM<7T#t*_>$Pv5b1G-ATgj008I2<1B0+#^*)Q3fE4;2&^8rnl
zac5D^h0{o?fmXYYJI3t`iYxN(Q@*&EY*4*~l}%lpowZ19cpv;OvyizeUht=4l3WgN
zU_82WW(ory$K$-@v8QF5Q`(3qu*fSB^5upa7M@+W8zit`{>jV8$^^m=C>xxI0K_x*
za7fHz5UM2foFG%z^7YA6(mQ=GrtgPJJ*Fs^TEdhaTUOD+nGyJ58yji1<i=*o{65I3
zJ>K_Q(Xs1b7qQ2=(g;wifIi2p>*E2Wp$J3|X)#OL1TMSQ%Lzp{Zo4ebcSzX&_m8gB
z0-PqpUs9<H1J%a>u8J)yemB{;AHz?qP&T8|$>yaf@i>rlWl#mBR1IQEzbh=PiYaJ|
z$shX#>@9Tza~qo8&^%<gdv0*o?`nGcHtFs^z@V|}1n-+1*$$*>HSjRzJ)zhGRP(I{
z^Q|ROH!e7QgH-Y+qnk`%O;nSFrQ~z)r-_@a8&J<L)_m{aW11@C9}ktA9oZ7KMqzYA
zfw5cY@LURZd|VjxZ56QZJjj9s0Shi}%~F5R!wox=V3-Eigr@R~W-`_nfXoF$g6q$*
zE`|e0RbrMhp$iGPwW;Fr*=Jzr8nVY0@l%G(@zL)0E;8w7QBN=22}I|B`aHOb9;e2g
zljKW3fd*9SeSboJbN1rh*Q-<2#rl*so1JXuDZ&EWD*8nn!+_t7T0qoy^fNrD8dO&S
z)w4HOBFYbKU6f}iN-^ISDRv4L>*&}!W+Uy}juj#L-uV^?JcWjoMc<P;Z=$o*APrxa
zlpR)ViQ1Cvft?!Ov%asf70;7UDII$hXi8>Tq9L}r)^!J=20USNUXmp5&Zl8(Tx?zO
ztj*iqlL&;Kge^kANCL@BifAEd(G6`Dj30b&dUC9_cLJuCiWS{Jsjj3?*7O;%Tv6JU
zU#be+d?QWq3~88_-ZpIThU+Y51BAP94cWXwc2D~6wzBm}4~wR0O<gP(xqe$JHY`hv
z4=L_IUb$RI)IvB#oRzWOE6}p#Nq0c;Op~ryXbO{`Rj4IEKg)<5yMRO$u-udGVxjmG
z4T|C)7y(YyC%b(LP;#8Up7(^?g~ECt6Vi&XdISh0Qp?u`*UC~|EeujuwmsoZo$cXO
z^kYy6xk6I=gh?Joi|?C{s4zV>Edzd4%bKo1I3xius`*5~lS2Fsi0EI1l_SiScb==N
zRDWkK*3$Rx-7u(v7D#O!-QNE+!*0Bmf_4qaD61XF=^(46pk+@E$5{Mc&}?FDu%>*#
zvTq@7id_A%9BJ>;7(bo6r~z2L$+TV3aj9OR>s6SY=3uE$|78$U?3gP&3Rth2@8N3&
zF$Xyj8i1wVF=4@$)qSLM5@f#e`4I+9KK3?sD?H0Jm>rW$GV6d6?I<8-*UZDs$SQ*b
zd_oKSyt^Q6no@BFI81UqA`|%a(}{MCq<122zsWUr@(rYZ)d3HAFicu5I;=+8&Z?}&
z)=siK2ASaCriX8UzMQJTH%M#5t>1pk>xkp}6~Zgw-qQQq)FF)zdleTWE*)*ieJY|F
z%?&e(OP6q)Q%OG;lnY%skBXd(aD!TBW|C)*gZzurQ+K{%G>zI}O_t-CEW*;z%=wS2
zHzsb_5m)CMC^y#8yuPM`JN*0ggxnOlEqToj>a@rcm{@V4*pLczM^w<$A=CrV39zj`
zEf*n3O|U+WcS$_!LnLfS?GO9=7-=~Evvx8kLV*Neudee?d$b3@LJ91!##k$M4XF#+
zmh`KLFMcObPZE!1>zqeZ+x=ANCe_gg_^*oJ+!>lJQ(Jyu(MS^m$+JEcoh{Z5H$*^1
zs#PV@T!Q!~$!^6<BCf5=2Enx3ZNGk6XnI-eYHI41jS<nIOGrD*=7!qg+TgV_9dsR+
zE-()z<kZTa)Z8qC--bUs>?tW5?N`ieYgw14XCzqb@5Wm|0LYx|j2KG!<-kC*>pEuT
zrn=@QU3CL<es11E`y~MT@P53WrQ``qF7j2?(_9_f!Nx^tTR*3^1i1HU&%uU4AUzKU
zUvrp{Zw!)9{fQ_TUn=thCn<|JVU#kg{xM={m^PxOYFI%v(NHS=ItORUev%iJ$XG*F
zLRP>Rtd6ctR{`XrTGrIAX9LFs6^$;Y9Y5{_)mnmW`v=%qKCcL4VV*U<o~2GAJ+@yy
zT3S*%iPE|4Q3W*fQX@?@IgSv`eB?eT==5W6BtS#wxKKqyRZLUHT&!y1H?(xHNM^Q8
zLiQAz3uOi>Tbbr4tn8E$?j+m<;-~;pmL5?RB{fxT(tXAn6qL*#BV}J-^{UPHd{kFs
zQP)a)yxQHH6&g9*@RwtX$Wm=-(Nhw&4a?}NJeMjn=M1<32Y~k~F}tS1uLRh~+K@n`
zr+%<R4`j0b-x(CZWLKo*F!c9k*gSf}Z|BM$H<TSgn&WLjc(LhSP-!J-5lTdAbQ|8g
zUeG;0V!ROGQB%;`T2dX-Ne%j+Iq(!xjqDZ{MScJcSGG+C_GJed%mj2O4+~TNvdgh+
zN($=JYg;}@EWw~ky18TxqvsRVrTTQ=p5RGsIMP?~AA3TFyX8?2beTxt-fUcbs2uQt
zIXgTb_?mt0)#0zq@PXgvc->rRc1TBC^DG=)9#ETgh%fm`uYUKG?UGh()Tj{O%8Ae<
zXz#Ea@H4nSWi3AkHM^hUFsKicYA8UCEsi*^01d3+JZa&_og~^6YR9dm{`~}Wxmhu(
z$a~NUy3qjzl#s*w0jR^y>hskkAC_!R<V^!>=&Z-!Ks8tzPE<&i$17mkl5SBEkQgq2
zpl{m5n*xXnH<pkD7~(%-iXwN+<+|EbOQJL1I>MI52X_`#pN1ztqZUD%F7Pxa90S*^
zIaFaZPBmICso2j`zG<DFrUJZ!hYpD7jwf2j;Cp6>%5e7g2Tz8K>Ow@)zBdj%tc8C5
z{p=`NtAX)eVHn^;!}S2dDg3!U0M2b?y{0{Hvny4kR<T#Xs+9|Hi7ua6SekLnTkj4n
z^qnZnR()rtc};_jda;#9h)2b993h5LMCM{CgPkqmX%Cnxj`VBD?dfbVJ`iFr1kRKj
zh(*1TWeLei8T9l*a-TP(pt1N`YZCnS8#Y{!<Ty<;=!cA&9L$L5r(!o{v#F2I@E@tf
zt%o2Jk9n$e7@Yc}Wj%=Nr5eW}#&9KWxgioyi@aUx4<R$ji}vw_nIY+C?@$QX4LKMi
z*1{Vj+$B4CyNuz5?<L-%$LI4|pC`Z6;NT~d!Xb95QgZhGt}1wB%k63R@YpOa7+<bJ
z%GEuIEr?8uF#N!N@K>$m(-;a~PczQ6y}DX&j%?rV@jkrE3b`uKCKEU{>F&7z<M+mK
zgLt=ZMd90x48W3=eQH{;gRhPF>NVbO{taVn%fa6*WP)N?LYZ7B{#3H*d(+x&FX2#L
zV+ZB~65IfetTk5=lx%?gbkHKV=$e)DUbG%$>MNL^`omWzfP?chmo;VG``YB3RbU(E
z#}+zaw2U0m;BMX~Wepd8>kZevVi7XWtHr(WMNpbX>X2qH4iwQW`F;q_bDvvdoRjY@
zf}M|KKJPN8grpGZ$LiN+U13DqLn<I`-KI6=H52sbsFRFtVA;F2U9)0lT$R*78?G1;
znvw-;DjHTcmA<jnrJ|Jl4IwI@4-icuI{rpGCGofh?r=<*EVUHCB|sz@hb{GPXEZCg
z!5ly?uciwE-;2AO`<<5SKfr1swK&M@LcGr~V)c!9^lR7*F2;5Uws0@jp@W`?t%DdT
zx6MFy;LNw@D)*jJ9T?V}?;ZL;cq)2&_8=F=G&Lg^m@XJD){pw!5+&S=LqBKBA9uQN
zAHuEr=?#*O-`c9O5vqJlE1c_M84|qHNRHI`884!ad)+bKMI3tE`HinGNoV2K04MBY
z_?JtkVE;&63z>r@PR8ts%WdD3H^Z*-G=y^|e!p+<-iK3n7yL$kPHS{`ga-bV=4~DA
zSIeQ#u|1;oPp^;awrk!sP)Ux<-N_!_NGzfGo@4XwfwpsHY+#;~7*J6Dtv&9$3o+I0
z6NK&8-P4dvRbs@z9U@+*`s=l-uUuV-_~=WxgK2|gnS~}pGl*e@Jo;JmBwmVknDi4X
zLs6@624+>2_WHe_d|E8;-xyhhl%|~#h6a?YyoaL;b_0!;G5001<e}d{1RePN|D9R<
zqlNLmqb&YaY2=^G;vd;Y+JEHhIR1v$**KX0CuhO@Uz`QoUs>@V&VqscUpkAwRfzxI
ziO~4>+yn~?)Bg~S_@9yy{}GHZ{6`?-U-^pv1uIPc_8$JpDE?d2;h#wdyT2WWf6;LG
zw=ly$k_`VV#_%sP4F9#i@NY%#|J+~r$HM=yYWSN*VffFgLBrhzS-l;9*MbK@tMZ3*
zuhj?{;cqMg1R<n=K9)dPW&^G()j!QN<MB3+zN8haPH{GE&*8QV;Gn?BNKz-Ps|ZRG
zY#Bc(GY+Dky|%s8<+fHg`JZy!k4`dYC7fBG-@EmZBRtG-`i$zxL`$HMMWNXa|Ckm2
zfuNf(Hmgld+fU^O%TrhQ7~vP&GGz`3153pKBjel8;Ot`ko%V`zkq$zt9A>Uj$xh_v
zeRQ!_cf9C%e^kSpPC6+mD>s_ebkH<ZGaa5V_4b*dxf_<ha4@0Sa4V^2^k<gF(8$bA
zrJO;ICcSCDl!488$-d{iCgrPb<=fsffFL=<w3@S>jhe^2%R=}{?6#Ok^5W>Dm3HoB
z<ag;{mE?N7vRmO*q}+B=op!6!RK<H01Uio1-P@fe*sZt`^(|3dlt<W#T&K(hi5_8o
z80R3}o~jW$W6Fx~AcA%1>!6+yZJpnW_-|zBFxNpMBi_H-z+XeghJ+1KI_$@us}W{h
zkcONHl0AarAdC?YqrXQ60#Zfj=%7`AutS(afM}=xx&V(b31X~j|C^=GMC)|`QXm~4
z^6iAJ8`C=*rgZ;KOMrG6##zliE^<Fv=FjAJo8`e<WZMKZneuENJEyw?{9=h>yY#nJ
zXUpkNN)bG#G~~&)kB`dZhPIB@p$+f(m-*(P;E*w)%e+M%v};^Fh#G7(Su=v0fmS-R
z^qe7|ox>}Klg)5$=+yB}8zfwO)~=`*E7i_q`Vj4|K1R4I(1pPAd?Wo~29tXOv{Ugs
zwJ254MxR)X($&h6gBc{Au@F=p4)o+K0n>}oNJ-|@6Y~*f!rJHT!vqC6c4x5Y<Eyn?
zl~LfL*|zY_r}B6@FN{BRoRiU3-m<R`SC#F*C$;lu=2F1$`(zSqTcm7!bf;1va_SOK
z{lQLXy(0Yg3MYj5>#pMh9V8tm!_HH>`Ir}AOT&$lRLbP%&1OPoGi;)T>xK&z<mG8n
zTHqJnd)g>}*t7+`mXrS0gbw57|Lw##FBh0aq5~5qztiB()PDRt+u}1>WGjnuET*h0
zDt`T7KQK*H4di)nU@F`OXA%Hn94+^|I8yAkaNYGS%PRaHv$6MlgL<cRw&pTn5g&LK
zg{Yq`Z?tajuDE_qxhV$Bba<0CJHcbtduG^mDUmA%_$;A%p%yn^SX{)#>Wl9Zi8^S!
zsN4)qtpN*vAb42th7fs_7X(SgaWAF0Mzn7SaP|n@k)zi!=X0CCv$nW3yu<f+`m}op
zVv6_dp*$B|`@k7ObW*q(#wiZuN>FhAv3W!<x1ApY`^=6Hv2YM4ItP68{x_EJA~Q2W
zLl(CV``mCZQKeIr0tBnDdWRFjdppG<kjH`&1xJ9W1q3P53*i6h^N~_xq4~P^_d~%R
zgb!-X2VO34Iy)c%&sQji>u1|3)(ckVs%k)J9jyxEd`v?sr9ME{KyP<R%evAR5PR>>
z1ehHSP3h37Z#Rf|GswFO1<1?Th~5CFbrf&7Z~w}vR#(BY1_qc91l`cSybTNl?jpX=
zZ*R!4e;c@JL;&rer`eME2Z=xr*_;fmv#FZ~;u;7a-4VytX+J|h1D%x?<`)+r%UQRH
zv+MPEc#Zsa&t_S2LAwV72lQDIPdn0|k2euOw<r~kzb>nd<uPMKL-aKBwcc!28FIi0
zga=R~yfSOi3sjM8bi%UN^e;jO_r>PRx^NXaGJ8PeI@VEG3<TS1t3&C7E%f=w3#ScS
zzsF`z-1z5su1*Ie6lVopzrD%vowUxZoPp9AuyZZgrLFHks6@2XSCRI-S=gxws<Gj^
zllXS<bTg#6!$HY5vqD9AM#a-ZSJ$mq*$FHrmK6m7jj+#9&jNYF^iH^6Rw90lKyN4p
zW_Fg-FMhv=+AW^CTikZzZ0%f%D#2R-4>c>PZ-yugp0h1$SoJdQ)T3ZiH_`$AByUtM
zn7_buzAF&A;%M2_=eA6KSl7;+(z`za^ZAr0*J(n)pt0J{0yT(g+aB%8Qhm%>nfcmw
z^Mlo2Wp?6^)w%Vp>Og9ZJ;e|4b!>w2<j$Q8=T6Qns-^lc<LP@{f7NyFL(t8I1>UL6
zh%~9cb5A#ubSV?v#Al}YN;E)A%I0lp05u92kGt=1Z*m5)twz>@inA4~<DYJe;z!&T
z`N^E+GVI^T8E&^Y0oye+W?-HgWCiU9h#83;{heZEij&C#yjbyU8a)GF3%cWEUmet)
zPOZ&!+Bxw5Bs-E@I^KbH=s4@Uop+#~cF)UyD9^gfr}Dhv<OMS2N}2WNgbQ`;?`-ni
z6^l}$L?fqy-wkTDzUo)tIArnpnk{+g-3f_W?p1Z*t2oSMA0~Cfsb;w)8&F%ce0gR=
z<C&~H>K0}DG-(3%xyd>r>e@1yJp({`6C2O5a%yGamHGivtH{pi+R#|jSkVe3$JI+t
znf%hnDw5f=ZS3EU>IHV!T14qmK)c1RsTx2Gn&$O;$uEXY3?@ErK7BP#&7)dx1qcYp
z>CdE^b|@$qBpWp$W})!T2)6^hsis&|bnEZCN(J$Fz=I~XyKk=*YCQs5+EwXhV06@4
zCS76EJ!(TD1*l%}Bn5xNoeKrBbM%)v?AxPgXR)y#FdAiF=dW|>Fo}U38-b@m`X=!g
zego?~G9)JS4I15Tca<slkLsJdcx3{qY!>79HC!+_p{Ey&aiYjM`rNl%MM&o4%_OU!
z_!C(pexiKEj5c>MNa9!Rqk}(d0Z}k=OteyR<uZn{lu4e%bbc`W1dmmcOq!e0KHduK
zFsKy>4GoAAka27_Q5n+$w=Vzk5@x{U>kGxaZD6>}=sbW+8G}ss+g4NBfGc6p_Dn+8
z^$&U8n*;RJJf3{jxO{7+j!v+Z<#>WxA2pZ<lrs)_GBELCh?CaeiDtXvJwS!#GgW!H
zf6n9YUi3h6g<w_t;g!>ND5h$cjwEm=B{>PE&E)~C90)+7w6T-prsn(5AIwqRN%=uC
zz%l%$@>xft;>K78Fznyc4t*o(jyja{GO_hO5`3*ohAiC<Z>8sbEQ){n|D>EwHke1-
zKfYOX-*oW!$f7;&{#|pMK5MI;Jb3`(!%jhIcLCJ9+sM6xzZ355K-DVL6mI>S^Q8<0
zE~-Ught{Fo4+%$dGfHR{`}D><8)CYw&twS;41;B$IHNpAmHj1ixw>?M?huBjjw}dK
zBi{8CoLC`E^{B2nXY1M=ZQ=I|-asmMUM4UZaP&SNZ+dq1oCT16g?szQr^6$GPYNAX
z-I~o%JCR=El!?;ivYWXYe&1ccIJ5$oR(m!1)!5|zrNbGz%T|UN?MNQSYg*A*@m70z
z$@AZLqesTNVKt&Z%8eLIdM#n(9*jwtl4%-q{E#d;z00@59@D1xt%<h201(>e(qmj9
z5RKD;Nm<d#USpz`)P$UIT-%7BG+p>s6A9AfFJR>BtMELr@Aq#+d~MiZTdYX<3U-eO
z>3y)OUSrp`a$C8K@uM$<qx&6_L<My9Y>>Ox++2kWJ0_qcQNuqiEW6s7Z}|m*7O<VY
zfyV}V%C1!<Q&YpjMeRRw^b8mq3=z~T7*ANobn=v{z=8yni>;YF{U((X?+eaIN-;cE
zJUfv%1nbIH6v~~`B7hI+Yf7u*R72s&NvE~ME2hx()L$8|4+C6mO|rLO{Q7L@cW|j4
zHKl9AoUO)M*a|2+*=JvP47*hTFJ8HHO5CV)u5sWB@%<o@Zb_X@O^q*e2%9T<^K<Uq
z0NI12OG;`BP~P0Ut37q&sA|*VY%|8r>42TqIE5?Hh5@ia0b{jOr%A7dsQ`T*7UzWt
zHt^#ubhrUe2T~o-l#LDcM#s%;4i-8c2XH%AcGzBqz(DkZzj%LEfdN?6S)Qfva;wpO
zX-R^M@>T+mjTsY=y(Ufj>$FEa$Ae+U87c$w2<OD;E0Xa=Dz^Z3CG(RU%Q&+SeHT28
z`EL#H&5)5_6s<%bs&tX_3cRIjO;Z-a;hP(Ok1Usi|DL_`qH!x1>WI|NGH(40_-C%v
z)%GHW8(NXS2*L6w^nDE3A)YGL-5^yJ$b4+K#33DpDtDqE(zwaqg_Y$v>P4(x&^uv7
zH(UwJCU{9%a;BGIb*BK0d&MV|VA5DoUssg8UK7lxA_%2kUkdkbIEVnIWWx|xq=2>L
z+_f4u4V1DWklMP6E{yJ^l_$tzOW=-tk3&HVY3MVsmAKXS<uq4MyF;9v-D%YYK*hFA
z&5{8-5=*OuVZU1`KfJ%4?3e2P&TcdX3;Lu`!>slFcEs1wR$DRzzQJPWJ2%@GV(Ec4
z$(xf3?qunzMM5SH(_)zb-3%7=gHpq6A={WN)fRMt%AW{8Jg*lG(7OXet+W(lh}VT{
zv=oQG=J3101IM~JQ$lJ)D0e#9_NRQ+$_|cj#I%~)#vAsgo)gCwJ=_FRGeSw~v6V0t
zUr5}Fzyb3u2KcP@f)-}(f|h$(3##0S-``OU{P$}eKk?h%3q?|FB9}y(m(EpF5YOBh
zBdU#`7}A-|`e(AeXFRa9;_EXTH(SK&H8~dVUtCq;jOczFK(a4|kDteHSDA>ps5fLS
zLppKr@r)h0uk`tg5lT+jUf(QW!}=YR7FJi)R!k5t1-<q^R49Ktn~?A-lzcilttb?O
zj|zkx^G+Mp8{qkPx=_KBGKjHhk&#10`HHH7c)7V?(j)TLs7ALj=+yAKUG%35XvS@8
z!b+Nv#wf#@76e{MA$1S>*>Ox>wd(NwfdHMjZ>n6HHvDQLcyS-utKLi|<cBHElGHt>
zwmH0FYafL>R{M6s=h=OR#(v6AnK5bvnbdyWnhI&bd-(a#4P^S4)kf1_^KpQdp51{c
ziupPP$I3}bCen>Vw;EY;-)~=5O7k-t@<T9+i=#QE1P<NWSEY41V5h^(ctA~haX~m4
zfbf7N7-Wm@1kg`>qRI~AO78pmc)f#&;0QDjqs`3Pi<ABaJ&OuVAvj;3cbJ06nMdb)
z%{_+uLun&=yEsw6ma0D>RO2&f(~7t-I<e;~N{6dUn4N@%3;iNhRk32%gvx2rF>eJS
zSFUw7KAs@$tjtvp(cO8gj<HJL3VU5k7~#@fhbYK4K)T6J4^+NkJ7ZLt8rdjl%?L!B
z?cynGt7<AMue87Q3Aq<I3S!uKkn4cg6#7AX{^T+MhXYE(59nLv0KlA&u@Yc+n3nAU
zr8B%u@o&~+-n-Q0{cr(^nbe(ghP&EhJvpEF+>zgDujz3u?Re$!$axz-bG9f3(v-yL
z&N{E8b7eI|pDDOSXOZ9)asU!Jz~jlxB9xvH1EEw)l@T|XQ`CX|$j7?kQ`1A<<J<m1
znCeJ;qDZ{omI1$~Vh?8l4wOBgD3_s@9Aw66^jHkwUF?roeQ5S50}J)*ud1ZVME0MC
zS30l3eFF~W@%_FZhlrlGM!<P8@fHNADy}P-H2_P;<*r=Rc>oQ)-k#g@d7d!8KCnI@
zjJ|Sv`DHs*X~@;)YDmfG4b+tBYI?NkuJ5aNx#k{AWz8Q~AtkCmHSPBHy#l5T%^W%^
zL?Ggm#P5_X9d&{^P!+=Viu-Cp_`9XPtp~5YRUQ}!Uc&rCdlbuXB3`bLVxEP!HQQe^
z%Dr>5&nB&8LVv^vG@wK6h>)%AtZ1d?Zbw5Bwf1RQSE=}e@KFp_)6E;Pp<&&Dlx8w&
zMF#rP>u4;^zW1$)FY{jv3iim9F&NzwmJ}#<8sR^UNb!}>tdrYgo!NYR#P76NJn-5z
zgH1o7(my-I4W|5ZBV@V9ds+KCkhzvY9pevtmQl-W!DW}1d9ln*L(0|CS2oC}V~KF;
zn-XWMAqHY)e+Mq!{^-VoMA{r5e+A7D=e`J3k_%zO5h7AFvFrgdreo{()<}Q4sm?x}
zdt9hh!5ac6;wN~d&42#TMUV<AX(yMiSD`j;0<fxV(yAKQRXT80or{*Lh_Z$L0@-3-
z)tj1TCrx#b-D*I|aG;q_H+lQ`w7`|`R?UGVQHfWdV_I3f^U#PL&fGJT9K<|T^_+xl
zYLcC7gVprUmf%jCeG(vm{siHB_M|WeB=i?LcsuS*lS1FKfHNupnJQ*y?D0@cNjsZN
zcre<0R&-D?(c2c|is^ULZ&O#qcCZG%kJa}fTDd+v)v^=Wf1)0%Y1auDNsAIqs8?&r
zhv9QiK^X@g6;>*4hbMU79Lp1Us&3q`EkEp)q&v}gr@Y7fbg2|2EJs^7Xq~sg9&TKp
z_E{grN<)#Tnlz!&(y-)#2y?^Fv_C3H5j#KZ5WSNHr@<QT>KoS)!#)8oYCX}7HG}EA
zKe%kp%z~2k*A#o7xBybljvAP#G)gvzmx*3DFVcX!TSNXbqM$yB#|?BguxR*JL3De}
z_&Z%lTO`)$KDzY@y^K~0b?ZNTLomG)N+q*!{bOR+(z<9W-9GuW9t9#Qh%8Cddg+Fv
z0?}M0VE6`QV`ck@cLPB)t^c^Rxl#3qefk9O_(+Z)!)S$nUy<{;uP#VDwXM3B2|V41
zFw&sE8ndN(@plY&trIv3bRir!u;nlCc7#`(`NH11!?v@Uu=g!|1|#Z3djGX*hcbyw
zluU#)sC1uGJ*<QCc1p|f{Ch`vWgb}}9KKFz=k>1P4G*l(ha(8PPN)LaIDm~qdQ;Ri
zT58Rz1r3<m6gv1m^&Pm8^eebo*|%#Vlr}wCEMV3v0qfWkmwz;6+pW3aw4(y}L*kQo
z+DID#Z$%<86Nf>iT##>MI!1OqdJkb>ebA<f1BlFq?}UQB8^^<^i{~X^%B)(9FemEG
zLzRR%Td-Tq-m)qwCW847@<jvT%`$`oXK|;0oNFpYBzRz7X^JEZRfH&w(m50(MI>Cz
z=9Tl3;k8K%myO=ep8Fw7u_Q@5NSuMb*T&bQh0egh-F<HO*;tiylvWF5SEqynB3Zgk
zhl=N)L;qjU@_U&Yk<R(LA+YI6jT8XhkWrD3YQ^f%JdmF{O0)BhZZD(n$J{`wM{^^n
zLM()MT>{q3Q9<E9Rs0<F?sGVu?;jrXkSG1_P^@cfl(0!2+(?wkQ%wY-FvT_K>@j#|
zeV;RXca8R4$^rxxzypPX4G{QX4}G4-pEn{iFCr)2GLM?y+LM<u!3ihZZuM`bH((Uy
z+H2(&kXkpAm2>>l_C`nWKPtbl1sy20#%13WAAw)sdL?CVh6FJdzDiwh&Rj(S@YorU
zj2TAye<fEqNJVe?+#>7wxH0uy2b*F~4N!v}7;8b44hJfdc{Q9s{;AffsRKNWH9fjs
zye|C-*MnoX|8iZu5vd1&K#oeQ867bVv45p>5+jSlmo*xNwLbM&yx2)M$_7O&zv~;r
zY`~Vpw<SR)1y!9BsMg!^<!wYt-8ifQ(1H%F?Sres4Wx*jXk7JcmpJ%m&9xcAfnnS7
z_`P0~IHM4YxTi!i-DE7K6OgI_1y$cIU+z0y<$LtDtA29EMmF!wV$`+4!gYI3=mUog
zSHVzacu`AUVgLm}K2rtBWLK6f{QuY5^~Y9SUGWV^oF$HhEifh|Us&;#WbeIuzd!E%
zeqZ`pp`{Mj3aO}s4YSw2zVf8)d%V8dS~iG7!NA<IIdB>xBF4mx1yef+LDcEgWXwQ9
zHs-d(WOE}?!D%K&aABYOZ42*v&UfM;zBJ@<dd|7$o_o%@=YC(`{cN57epm6)n~Ltg
zU+%iE?b?Q;zdc(WzF}bIS5Lfr=4@fx@jFkye)P6E<*#iYX?th?AOAJ4dspz4V{d<V
z?4PH%-?4f94_53rFmvM*_R+uOWp~TolMinw?5jLGc7Alvf#;eJF21vOykWtzFK@hI
z)<f^vA7q~TcJIY!R^8fg@2`$^y(DIxoj<p*?@awB-F|SR*Ll_FRzGoKY%?Bm6vyYz
z{?Vy~IB(CmYpI?yf6<IXPv>UOZFpmR!R!aOKDl9A+t9`>?@cf7dFseZU9V)X>AK^G
zt{&dgdiZ4f-uYje)%K6>#(8h3FEssq^L3j({LP#7541PjA3U=2k;4bqy!!TYqtAXc
z>#>17e|;u({O1R5Kk@k5s}HsAZ&}{(P-2T1`QrQ2How;0GXAE$<MkOI{OzOq-M{Pm
z-m5>|cdYHyO=>JR{qW3R_ckwF@nZShhxKbV?cCA%PW`;ChyHx-g_Cc6{TC0f-M{O?
z({CNKUeRM)cRYDaZ{O9wWWkKv_BK!Z&%*m2eg5dQExAm+?0@Zo{P^tdeZ@7)cD=Cf
z$UW&leEj(zr%&&zTlM>+8@k^8<+YC=dhpzd7h4wJGd^eM_s_35_1`^e_hZ+sIC$ae
zt5Rd@#>RhkO?vC%p8T16w;lh}==C?(-+yuX#h+Y%ntzrv0SsCDY0ea8<mKy{S9i2e
z-PJ6C19j=Mg2v_%d|ZL=oLXHyy~TlS;@u<9C#+&Vo4DQU5FO=~o^{1<jaGVY8NGQ`
z_vrfWAfIS%s%vb{<x5>X$&p++SqLwQ9<*@zcXnY*XM5X1!!VK==`Z&Ky3!iy?;9A*
zjARp`NCxi>Ii0XVmg@R!Vs*z#t6D1ctuIzBI~Am4QaazX3Kd*ZK3uA-w`58spt6!L
zWI9{hCKcj;*~GePwVX+(hlht#!%nJH=}pTZ2-3n%+jbHh$-%n^s=1Nmz~DD9UT8>h
z^(C=^!Bl8d3Rixoi>uQzCDKy^O<kCdTevMVaIUK~RLw42IH{#vGkQb~egQoWriXW#
zm6cL{sJo|<P29M$-MVpIX|Othu3|}%5_U=^(vuUr!gz3IyxCZRNxK`tlj#6tN8#>P
z+}GV?3)@W!J1P8Cwv%y#j4jqQrU?@k3Q{e&wi`Emf3j2!Q;k%qvI;BL)LSVP3f5h?
zaNIadrferACI$<|Cb=5Z#+5Zw{gji>l{-2<dHVhRCZG&ornLm%5L`pQyfvE`8Y<>9
zPR<Qnzbi-<dI~{OO8g`6O7^%Sa8-{ixCrV`xeod6OLmlpDt%$d<-60kaNZ0#h^3G)
zB;TDWlq&tXDuTXT1~@}5yv-dEk!WhfFRMjdMc)(#^pd{n#GAgN39U?DZlE`t7)j=P
z3b~=aYNF}Zfsi{t;k&+K)5M!lE`3>7jAug<5(Z9AUrNWOI_oofeRhg2*C5;hkWCDm
z3d8ONs6m#U%BqI{lT?fG*|3RdgrbS*hE{|=pnicCY&&j%G!P<zAFv@^uD~%Fz725!
zzW5UE?MS7k00;^@2<l8|O}s4Sd4QHJSRqYnHvqy#_$zB*f@TZPHGpB}HAMrT<6^QA
znsTKeH2hxrjAq*gBO@Z~3t=w#kI(|``G7Zx&~)G!%%%v<4}<~7jnK5O3_Ns%<_l#Y
zlOr_D*8qn`Xvz(tmTPH3*tS7)BQ#vd5T#+$5-!*0P(J9>2BIgTPYUw~3K5#o$L!Ny
z2x(m_3%(GhIzm&fXJBe-X#!&ybfzfHb_^7CEe-l?oBCe4Do)m=egVKX{@8-)Gf3c(
zF_h~&%m)~k(fkl1J0hz+C&s>j#Tuf|C9#2}4AJbUK5m~U=@>@V;G5UV3LAh|bZ**n
zsjNiw88k2|3-lI3gAZs7L0^o0u7Pon>hlaB3ZW^XxIQn&KF?!wQwSKU&krHRYsW>r
zcro^ARu6374oHj(2N1a=hM-Ty*ymF}8(9OFUTceR9O=jCi?J^VsIMHP0@H^yB7Cq<
zbNiHZ=z5@98F=xieJC5m&qg1&PlaeeL^cp~JzOC?;#27JW9)N*X%w{uvYOiLIvy^i
ziSQYHG4^?i#Jzy5!|YR@xi6=79?%!W*rzF<aFxgEt{bpAWc0<@=X-2!fi~dEwYI={
zG5MxMjD3Ltx2Li!-;hN#CQ+OPw@*vDhYHBjwG>_;_&%suZ2~;6P5B@zX)P8C=&!^t
zurFr+z$Q=P%E$ueD(VA;ASW~^3jtGWeFghGpTvQHtU<i0<rB))20OEsX7o`$=+g#|
zx|Yw#vihPFI;toi^f|1?D($mefGnMxP`=>xMLBeC5_~N8l^>#xM{L&E;<<e;jeF?B
zPjnsv86%1Bk<h*$qmS;5Q0A~)KtCjyKCK1U=h4`JK3CEDqOnFypRcLSSPzfctbE04
z9hS(UYpw&I@<AUWE9xuQhg~H~6OaWiXEcW37D?jX=%cv>eP}$nEFBlgt649q6`O}t
zfnc=+vTV=u14;c1`!w5AR3HQDE67qmivW0Mgb(_BTE}6ZW1tWtu^Rx{jn;ddV`K6I
z&Wg%HpKCy3qxukk)TdZpS|?#&K>JSULlRPbX!?oG5?h|8u>pPT{GkHvQ$EO2pW@Ji
zN)#Penv@~)fPLnox5#{rEbH$Dj$4!u`gn~n#!!8(OZPk}yqNXC-b3exZjI(DWZ8OP
zLkVaff%(dS<d)RJVdojh(ioD`mM&R0=!@ym1r8QuzL2FowUnOAYBBWDy&HlCIWf8(
z61^VvJu*g8KWmLcI+4YRj`rgcvMf$<I%0m-8l4!^7bub+60*!!=J-Z!hCTzoU7K4{
z<Ik_DpCQX?lZ^)gOcn=GHiiuGx+7yimaVz%3x~x94h%Fu5Rz;R$kH>3bPxwj77Z57
zb98!ajUdb79#zd{zQ=~d^21aZ;#0`7T8tK$?xBchL>rOS2o5?A$kLuhIx1j$5A*^3
zlCCd1&qzlLw&r*m!Ey$`xQtKR5GP|mmeolY%S-v7&tv(4qdi?C$kOvAn&J?bI}%q~
zqmd=HphU1939_sfyDmIUWi`(&4Oz+uSr!|vw&|WH;XVUt8nqe6WEw+|Wj1?)onehW
zgHliQ`I?RaSyu0H;$&lJU$WYy9l`1vWLaLK(_=XZeTvRaJCdFUp^W#%o+s(PkNMiX
zC&WRX`oJ8g84YJd7JoSYGMeKm8bcn^oW?1lfae>ULK+*|!J&?<k*9H3qck5yjL@`?
ztfn*vPk9IpTQ}P)@HHA%!?f?Ry-_=XpmiLw%r8pDJm2t<G{hEU0^55aOV2oHP95e`
zlmp%~U|Xerfh^m*70}G-x<Mb?XMD-~7e9ap$vgrbbKXKrL;1kQ_5iFTjd5FG9yRt=
zD><OnR_YoXt@JI$(H`@_-AZ?sN>vLUwK}cz@_|ChLMB_C_+nYB^_@n0DW0vi`F2YS
w%+M{4Xjy_dQp?a2$fa7yrYm!-t;5%|2CKPBHGIr(j_ClLUbJZ0inhA{0fL-2BLDyZ

literal 0
HcmV?d00001

diff --git a/support/dist-docs-branch-23.06/ovn-nb.5.txt b/support/dist-docs-branch-23.06/ovn-nb.5.txt
new file mode 100644
index 00000000..21f18325
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-nb.5.txt
@@ -0,0 +1,4098 @@
+ovn-nb(5)                     Open vSwitch Manual                    ovn-nb(5)
+
+NAME
+       ovn-nb - OVN_Northbound database schema
+
+       This  database  is  the  interface between OVN and the cloud management
+       system (CMS), such as OpenStack, running above it. The CMS produces al‐
+       most all of the contents of the database. The ovn-northd program  moni‐
+       tors  the  database  contents,  transforms  it,  and stores it into the
+       OVN_Southbound database.
+
+       We generally speak of ``the’’ CMS, but one  can  imagine  scenarios  in
+       which multiple CMSes manage different parts of an OVN deployment.
+
+   External IDs
+       Each  of  the  tables in this database contains a special column, named
+       external_ids. This column has the same form and purpose each  place  it
+       appears.
+
+              external_ids: map of string-string pairs
+                     Key-value  pairs  for  use  by the CMS. The CMS might use
+                     certain pairs, for example, to identify entities  in  its
+                     own  configuration that correspond to those in this data‐
+                     base.
+
+TABLE SUMMARY
+       The following list summarizes the purpose of each of the tables in  the
+       OVN_Northbound  database.   Each table is described in more detail on a
+       later page.
+
+       Table     Purpose
+       NB_Global Northbound configuration
+       Copp      Control plane protection
+       Logical_Switch
+                 L2 logical switch
+       Logical_Switch_Port
+                 L2 logical switch port
+       Forwarding_Group
+                 forwarding group
+       Address_Set
+                 Address Sets
+       Port_Group
+                 Port Groups
+       Load_Balancer
+                 load balancer
+       Load_Balancer_Group
+                 load balancer group
+       Load_Balancer_Health_Check
+                 load balancer
+       ACL       Access Control List (ACL) rule
+       Logical_Router
+                 L3 logical router
+       QoS       QoS rule
+       Mirror    Mirror Entry
+       Meter     Meter entry
+       Meter_Band
+                 Band for meter entries
+       Logical_Router_Port
+                 L3 logical router port
+       Logical_Router_Static_Route
+                 Logical router static routes
+       Logical_Router_Policy
+                 Logical router policies
+       NAT       NAT rules
+       DHCP_Options
+                 DHCP options
+       Connection
+                 OVSDB client connections.
+       DNS       Native DNS resolution
+       SSL       SSL configuration.
+       Gateway_Chassis
+                 Gateway_Chassis configuration.
+       HA_Chassis_Group
+                 HA_Chassis_Group configuration.
+       HA_Chassis
+                 HA_Chassis configuration.
+       BFD       BFD configuration.
+       Static_MAC_Binding
+                 Static_MAC_Binding configuration.
+       Chassis_Template_Var
+                 Chassis_Template_Var configuration.
+
+NB_Global TABLE
+       Northbound configuration for an OVN system. This table  must  have  ex‐
+       actly one row.
+
+   Summary:
+       Identity:
+         name                        string
+       Status:
+         nb_cfg                      integer
+         nb_cfg_timestamp            integer
+         sb_cfg                      integer
+         sb_cfg_timestamp            integer
+         hv_cfg                      integer
+         hv_cfg_timestamp            integer
+       Common Columns:
+         external_ids                map of string-string pairs
+       Common options:
+         options                     map of string-string pairs
+         Options for configuring OVS BFD:
+            options : bfd-min-rx     optional string
+            options : bfd-decay-min-rx
+                                     optional string
+            options : bfd-min-tx     optional string
+            options : bfd-mult       optional string
+         options : mac_prefix        optional string
+         options : mac_binding_removal_limit
+                                     optional  string,  containing an integer,
+                                     in range 0 to 4,294,967,295
+         options : controller_event  optional string, either true or false
+         options : northd_probe_interval
+                                     optional string
+         options : ic_probe_interval
+                                     optional string
+         options : nbctl_probe_interval
+                                     optional string
+         options : northd_trim_timeout
+                                     optional string
+         options : use_logical_dp_groups
+                                     optional string
+         options : use_parallel_build
+                                     optional string
+         options : ignore_lsp_down   optional string
+         options : use_ct_inv_match  optional string
+         options : default_acl_drop  optional string
+         options : debug_drop_domain_id
+                                     optional string
+         options : debug_drop_collector_set
+                                     optional string
+         options : use_common_zone   optional string, either true or false
+         Options for configuring interconnection route advertisement:
+            options : ic-route-adv   optional string
+            options : ic-route-learn optional string
+            options : ic-route-adv-default
+                                     optional string
+            options : ic-route-learn-default
+                                     optional string
+            options : ic-route-blacklist
+                                     optional string
+       Connection Options:
+         connections                 set of Connections
+         ssl                         optional SSL
+       Security Configurations:
+         ipsec                       boolean
+       Read-only Options:
+         options : max_tunid         optional string
+
+   Details:
+     Identity:
+
+       name: string
+              The name of the OVN cluster, which uniquely identifies  the  OVN
+              cluster  throughout  all  OVN  clusters supposed to interconnect
+              with each other.
+
+     Status:
+
+       These columns allow a client to track the overall  configuration  state
+       of the system.
+
+       nb_cfg: integer
+              Sequence  number for client to increment. When a client modifies
+              any part of the northbound database configuration and wishes  to
+              wait  for ovn-northd and possibly all of the hypervisors to fin‐
+              ish applying the changes, it may increment this sequence number.
+
+       nb_cfg_timestamp: integer
+              The timestamp, in milliseconds since the epoch, when  ovn-northd
+              sees the latest nb_cfg and starts processing.
+
+              To print the timestamp as a human-readable date:
+
+                        date -d "@$(ovn-nbctl get NB_Global . nb_cfg_timestamp | sed �’s/...$//�’)"
+
+
+       sb_cfg: integer
+              Sequence  number that ovn-northd sets to the value of nb_cfg af‐
+              ter it finishes applying the corresponding configuration changes
+              to the OVN_Southbound database.
+
+       sb_cfg_timestamp: integer
+              The timestamp, in milliseconds since the epoch, when  ovn-northd
+              finishes applying the corresponding configuration changes to the
+              OVN_Southbound database successfully.
+
+       hv_cfg: integer
+              Sequence  number  that  ovn-northd sets to the smallest sequence
+              number of all the chassis in the  system,  as  reported  in  the
+              Chassis_Private  table  in the southbound database. Thus, hv_cfg
+              equals nb_cfg if all chassis are caught up with  the  northbound
+              configuration  (which may never happen, if any chassis is down).
+              This value can regress, if a chassis was removed from the system
+              and rejoins before catching up.
+
+              If there are  no  chassis,  then  ovn-northd  copies  nb_cfg  to
+              hv_cfg.  Thus,  in  this case, the (nonexistent) hypervisors are
+              always considered to be caught up. This means  that  hypervisors
+              can  be  "caught  up" even in cases where sb_cfg would show that
+              the southbound database is not. To detect when both the hypervi‐
+              sors and the southbound database are caught up, a client  should
+              take the smaller of sb_cfg and hv_cfg.
+
+       hv_cfg_timestamp: integer
+              The  largest  timestamp, in milliseconds since the epoch, of the
+              smallest sequence number of all the chassis in  the  system,  as
+              reported  in  the  Chassis_Private table in the southbound data‐
+              base. In other words, this timestamp reflects the time when  the
+              slowest  chassis  catches  up with the northbound configuration,
+              which is useful for end-to-end control  plane  latency  measure‐
+              ment.
+
+     Common Columns:
+
+       external_ids: map of string-string pairs
+              See External IDs at the beginning of this document.
+
+     Common options:
+
+       options: map of string-string pairs
+              This  column  provides general key/value settings. The supported
+              options are described individually below.
+
+     Options for configuring OVS BFD:
+
+       These options apply when ovn-controller configures OVS BFD  on  tunnels
+       interfaces. Please note these parameters refer to legacy OVS BFD imple‐
+       mentation and not to OVN BFD one.
+
+       options : bfd-min-rx: optional string
+              BFD  option  min-rx  value to use when configuring BFD on tunnel
+              interfaces.
+
+       options : bfd-decay-min-rx: optional string
+              BFD option decay-min-rx value to use  when  configuring  BFD  on
+              tunnel interfaces.
+
+       options : bfd-min-tx: optional string
+              BFD  option  min-tx  value to use when configuring BFD on tunnel
+              interfaces.
+
+       options : bfd-mult: optional string
+              BFD option mult value to use when configuring BFD on tunnel  in‐
+              terfaces.
+
+       options : mac_prefix: optional string
+              Configure  a  given  OUI to be used as prefix when L2 address is
+              dynamically assigned, e.g. 00:11:22
+
+       options : mac_binding_removal_limit: optional string, containing an in‐
+       teger, in range 0 to 4,294,967,295
+              MAC binding aging bulk removal limit. This limits how many  rows
+              can  expire in a single transaction. Default value is 0 which is
+              unlimited. When we hit the limit next batch removal  is  delayed
+              by 5 s.
+
+       options : controller_event: optional string, either true or false
+              Value  set by the CMS to enable/disable ovn-controller event re‐
+              porting. Traffic into OVS can raise a  ’controller’  event  that
+              results   in  a  Controller_Event  being  written  to  the  Con�‐
+              troller_Event table in SBDB. When the CMS has seen the event and
+              taken appropriate action, it can remove the corresponding row in
+              Controller_Event table. The intention is for a CMS  to  see  the
+              events  and  take  some  sort  of  action.  Please  see the Con�‐
+              troller_Event table in SBDB. It is possible to associate a meter
+              to each controller event type in order to not overload the pinc‐
+              trl thread under heavy load. Each event type relies on  a  meter
+              with a defined name:
+
+              •      empty_lb_backends: event-elb
+
+       options : northd_probe_interval: optional string
+              The  inactivity  probe  interval  of  the  connection to the OVN
+              Northbound and Southbound databases  from  ovn-northd,  in  mil‐
+              liseconds.  If  the  value  is  zero, it disables the connection
+              keepalive feature.
+
+              If the value is nonzero, then it will be forced to a value of at
+              least 1000 ms.
+
+       options : ic_probe_interval: optional string
+              The inactivity probe interval  of  the  connection  to  the  OVN
+              Northbound  and  Southbound  databases from ovn-ic, in millisec‐
+              onds. If the value is zero, it disables the connection keepalive
+              feature.
+
+              If the value is nonzero, then it will be forced to a value of at
+              least 1000 ms.
+
+       options : nbctl_probe_interval: optional string
+              The inactivity probe interval  of  the  connection  to  the  OVN
+              Northbound  database from ovn-nbctl utility, in milliseconds. If
+              the value is zero, it disables the connection keepalive feature.
+
+              If the value is nonzero, then it will be forced to a value of at
+              least 1000 ms.
+
+              If the value is less than  zero,  then  the  default  inactivity
+              probe interval for ovn-nbctl would be left intact (120000 ms).
+
+       options : northd_trim_timeout: optional string
+              When  used, this configuration value specifies the time, in mil‐
+              liseconds, since the  last  ovn-northd  active  operation  after
+              which  memory  trimming  is performed. By default this is set to
+              30000 (30 seconds).
+
+       options : use_logical_dp_groups: optional string
+              Note: This option is deprecated, the only behavior is to  always
+              combine  logical flows by datapath groups. Changing the value or
+              removing this option all toghether will have no effect.
+
+              ovn-northd combines logical flows that differs only  by  logical
+              datapath  into a single logical flow with logical datapath group
+              attached.
+
+       options : use_parallel_build: optional string
+              If set to true, ovn-northd will attempt to compute logical flows
+              in parallel.
+
+              Parallel computation is enabled only if the system has 4 or more
+              cores/threads available to be used by ovn-northd.
+
+              The default value is false.
+
+       options : ignore_lsp_down: optional string
+              If set to false, ARP/ND reply flows  for  logical  switch  ports
+              will  be  installed  only  if  the port is up, i.e. claimed by a
+              Chassis. If set to true, these flows are installed regardless of
+              the status of the port, which can result in a situation that ARP
+              request to an IP is resolved even before  the  relevant  VM/con‐
+              tainer  is running. For environments where this is not an issue,
+              setting it to true can reduce the load and latency of  the  con‐
+              trol plane. The default value is true.
+
+       options : use_ct_inv_match: optional string
+              If set to false, ovn-northd will not use the ct.inv field in any
+              of  the  logical flow matches. The default value is true. If the
+              NIC supports offloading OVS datapath flows but  doesn’t  support
+              offloading  ct_state  inv flag, then the datapath flows matching
+              on this flag (either +inv or -inv) will not  be  offloaded.  CMS
+              should consider setting use_ct_inv_match to false in such cases.
+              This results in a side effect of the invalid packets getting de‐
+              livered  to the destination VIF, which otherwise would have been
+              dropped by OVN.
+
+       options : default_acl_drop: optional string
+              If set to true., ovn-northd will generate a logical flow to drop
+              all traffic in the ACL stages. By default this option is set  to
+              false.
+
+       options : debug_drop_domain_id: optional string
+              If set to a 8-bit number and if debug_drop_collector_set is also
+              configured, ovn-northd will add a sample action to every logical
+              flow  that contains a ’drop’ action. The 8 most significant bits
+              of the observation_domain_id field will be  those  specified  in
+              the   debug_drop_domain_id. The 24 least significant bits of the
+              observation_domain_id field will be the datapath’s key.
+
+              The observation_point_id will be set to the first 32 bits of the
+              logical flow’s UUID.
+
+       options : debug_drop_collector_set: optional string
+              If set to a 32-bit number ovn-northd will add a sample action to
+              every logical flow that contains a ’drop’ action. The sample ac‐
+              tion will have the specified collector_set_id.  The  value  must
+              match  that  of  the  local  OVS  configuration  as described in
+              ovs-actions(7).
+
+       options : use_common_zone: optional string, either true or false
+              Default value is false. If set to true the SNAT and DNAT happens
+              in common zone, instead of happening in separate zones,  depend‐
+              ing  on  the  configuration. However, this option breaks traffic
+              when there is configuration of DGP + LB + SNAT on this  LR.  The
+              value  true  should  be  used only in case of HWOL compatibility
+              with GDP.
+
+     Options for configuring interconnection route advertisement:
+
+       These options control how routes are advertised between OVN deployments
+       for interconnection. If enabled, ovn-ic from different OVN  deployments
+       exchanges  routes  between  each other through the global OVN_IC_South�‐
+       bound database. Only routers with ports  connected  to  interconnection
+       transit  switches participate in route advertisement. For each of these
+       routers, there are two types of routes to be advertised:
+
+       Firstly, the static routes configured in the router are advertised.
+
+       Secondly, the networks configured in the logical router ports that  are
+       not on the transit switches are advertised. These are considered as di‐
+       rectly connected subnets on the router.
+
+       Link  local prefixes (IPv4 169.254.0.0/16 and IPv6 FE80::/10) are never
+       advertised.
+
+       The learned routes are added to the static_routes column of  the  Logi�‐
+       cal_Router table, with external_ids:ic-learned-route set to the uuid of
+       the row in Route table of the OVN_IC_Southbound database.
+
+       options : ic-route-adv: optional string
+              A  boolean  value that enables route advertisement to the global
+              OVN_IC_Southbound database. Default is false.
+
+       options : ic-route-learn: optional string
+              A boolean value that enables  route  learning  from  the  global
+              OVN_IC_Southbound database. Default is false.
+
+       options : ic-route-adv-default: optional string
+              A  boolean  value  that enables advertising default route to the
+              global OVN_IC_Southbound database. Default is false. This option
+              takes effect only when option ic-route-adv is true.
+
+       options : ic-route-learn-default: optional string
+              A boolean value that enables learning  default  route  from  the
+              global OVN_IC_Southbound database. Default is false. This option
+              takes effect only when option ic-route-learn is true.
+
+       options : ic-route-blacklist: optional string
+              A  string  value  contains  a  list of CIDRs delimited by ",". A
+              route will not be advertised or learned if  the  route’s  prefix
+              belongs to any of the CIDRs listed.
+
+     Connection Options:
+
+       connections: set of Connections
+              Database  clients  to  which  the  Open  vSwitch database server
+              should connect or on which it should listen, along with  options
+              for  how these connections should be configured. See the Connec�‐
+              tion table for more information.
+
+       ssl: optional SSL
+              Global SSL configuration.
+
+     Security Configurations:
+
+       ipsec: boolean
+              Tunnel encryption configuration. If this column  is  set  to  be
+              true, all OVN tunnels will be encrypted with IPsec.
+
+     Read-only Options:
+
+       options : max_tunid: optional string
+              The  maximum supported tunnel ID. Depends on types of encapsula‐
+              tion enabled in the cluster.
+
+Copp TABLE
+       This table is used to define control plane protection  policies,  i.e.,
+       associate entries from table Meter to control protocol names.
+
+   Summary:
+       name                          string (must be unique within table)
+       meters : arp                  optional string
+       meters : arp-resolve          optional string
+       meters : dhcpv4-opts          optional string
+       meters : dhcpv6-opts          optional string
+       meters : dns                  optional string
+       meters : event-elb            optional string
+       meters : icmp4-error          optional string
+       meters : icmp6-error          optional string
+       meters : igmp                 optional string
+       meters : nd-na                optional string
+       meters : nd-ns                optional string
+       meters : nd-ns-resolve        optional string
+       meters : nd-ra-opts           optional string
+       meters : tcp-reset            optional string
+       meters : bfd                  optional string
+       meters : reject               optional string
+       meters : svc-monitor          optional string
+       external_ids                  map of string-string pairs
+
+   Details:
+       name: string (must be unique within table)
+              CoPP name.
+
+       meters : arp: optional string
+              Rate  limiting  meter  for  ARP packets (request/reply) used for
+              learning neighbors.
+
+       meters : arp-resolve: optional string
+              Rate limiting meter for packets that require resolving the next-
+              hop (through ARP).
+
+       meters : dhcpv4-opts: optional string
+              Rate limiting meter for packets that require adding  DHCPv4  op‐
+              tions.
+
+       meters : dhcpv6-opts: optional string
+              Rate  limiting  meter for packets that require adding DHCPv6 op‐
+              tions.
+
+       meters : dns: optional string
+              Rate limiting meter for  DNS  query  packets  that  need  to  be
+              replied to.
+
+       meters : event-elb: optional string
+              Rate limiting meter for empty load balancer events.
+
+       meters : icmp4-error: optional string
+              Rate  limiting  meter  for packets that require replying with an
+              ICMP error.
+
+       meters : icmp6-error: optional string
+              Rate limiting meter for packets that require  replying  with  an
+              ICMPv6 error.
+
+       meters : igmp: optional string
+              Rate limiting meter for IGMP packets.
+
+       meters : nd-na: optional string
+              Rate  limiting  meter for ND neighbor advertisement packets used
+              for learning neighbors.
+
+       meters : nd-ns: optional string
+              Rate limiting meter for ND neighbor  solicitation  packets  used
+              for learning neighbors.
+
+       meters : nd-ns-resolve: optional string
+              Rate limiting meter for packets that require resolving the next-
+              hop (through ND).
+
+       meters : nd-ra-opts: optional string
+              Rate  limiting  meter  for packets that require adding ND router
+              advertisement options.
+
+       meters : tcp-reset: optional string
+              Rate limiting meter for packets that require replying  with  TCP
+              RST packet.
+
+       meters : bfd: optional string
+              Rate limiting meter for BFD packets.
+
+       meters : reject: optional string
+              Rate limiting meter for packets that trigger a reject action
+
+       meters : svc-monitor: optional string
+              Rate  limiting  meter  for  packets that are arriving to service
+              monitor MAC address.
+
+       external_ids: map of string-string pairs
+              See External IDs at the beginning of this document.
+
+Logical_Switch TABLE
+       Each row represents one L2 logical switch.
+
+       There are two kinds of logical switches, that is, ones that fully  vir‐
+       tualize  the  network  (overlay logical switches) and ones that provide
+       simple connectivity to physical networks  (bridged  logical  switches).
+       They  work  in the same way when providing connectivity between logical
+       ports on same chassis, but differently when connecting  remote  logical
+       ports.  Overlay  logical  switches connect remote logical ports by tun‐
+       nels, while bridged logical switches  provide  connectivity  to  remote
+       ports  by  bridging  the packets to directly connected physical L2 seg‐
+       ments with the help of localnet ports. Each bridged logical switch  has
+       one  or  more  localnet  ports, which have only one special address un�‐
+       known.
+
+   Summary:
+       ports                         set of Logical_Switch_Ports
+       load_balancer                 set of weak reference to Load_Balancers
+       load_balancer_group           set of Load_Balancer_Groups
+       acls                          set of ACLs
+       qos_rules                     set of QoSes
+       dns_records                   set of weak reference to DNSes
+       forwarding_groups             set of Forwarding_Groups
+       Naming:
+         name                        string
+         external_ids : neutron:network_name
+                                     optional string
+       IP Address Assignment:
+         other_config : subnet       optional string
+         other_config : exclude_ips  optional string
+         other_config : ipv6_prefix  optional string
+         other_config : mac_only     optional string, either true or false
+       IP Multicast Snooping Options:
+         other_config : mcast_snoop  optional string, either true or false
+         other_config : mcast_querier
+                                     optional string, either true or false
+         other_config : mcast_flood_unregistered
+                                     optional string, either true or false
+         other_config : mcast_table_size
+                                     optional string, containing  an  integer,
+                                     in range 1 to 32,766
+         other_config : mcast_idle_timeout
+                                     optional  string,  containing an integer,
+                                     in range 15 to 3,600
+         other_config : mcast_query_interval
+                                     optional string, containing  an  integer,
+                                     in range 1 to 3,600
+         other_config : mcast_query_max_response
+                                     optional  string,  containing an integer,
+                                     in range 1 to 10
+         other_config : mcast_eth_src
+                                     optional string
+         other_config : mcast_ip4_src
+                                     optional string
+         other_config : mcast_ip6_src
+                                     optional string
+       Interconnection:
+         other_config : interconn-ts
+                                     optional string
+       Tunnel Key:
+         other_config : requested-tnl-key
+                                     optional string, containing  an  integer,
+                                     in range 1 to 16,777,215
+       copp                          optional weak reference to Copp
+       Other options:
+         other_config : vlan-passthru
+                                     optional string, either true or false
+         other_config : broadcast-arps-to-all-routers
+                                     optional string, either true or false
+       Common Columns:
+         external_ids                map of string-string pairs
+
+   Details:
+       ports: set of Logical_Switch_Ports
+              The logical ports connected to the logical switch.
+
+              It is an error for multiple logical switches to include the same
+              logical port.
+
+       load_balancer: set of weak reference to Load_Balancers
+              Set of load balancers associated to this logical switch.
+
+       load_balancer_group: set of Load_Balancer_Groups
+              Set of load balancers groups associated to this logical switch.
+
+       acls: set of ACLs
+              Access  control  rules  that apply to packets within the logical
+              switch.
+
+       qos_rules: set of QoSes
+              QoS marking and metering rules that apply to packets within  the
+              logical switch.
+
+       dns_records: set of weak reference to DNSes
+              This column defines the DNS records to be used for resolving in‐
+              ternal  DNS  queries within the logical switch by the native DNS
+              resolver. Please see the DNS table.
+
+       forwarding_groups: set of Forwarding_Groups
+              Groups a set of logical port endpoints for traffic going out  of
+              the logical switch.
+
+     Naming:
+
+       These columns provide names for the logical switch. From OVN’s perspec‐
+       tive, these names have no special meaning or purpose other than to pro‐
+       vide  convenience  for human interaction with the database. There is no
+       requirement for the name to be unique. (For a unique identifier  for  a
+       logical switch, use its row UUID.)
+
+       (Originally, name was intended to serve the purpose of a human-friendly
+       name,  but the Neutron integration used it to uniquely identify its own
+       switch object, in the format neutron-uuid. Later  on,  Neutron  started
+       propagating  the friendly name of a switch as external_ids:neutron:net�‐
+       work_name. Perhaps this can be cleaned up someday.)
+
+       name: string
+              A name for the logical switch.
+
+       external_ids : neutron:network_name: optional string
+              Another name for the logical switch.
+
+     IP Address Assignment:
+
+       These options control automatic IP address management (IPAM) for  ports
+       attached to the logical switch. To enable IPAM for IPv4, set other_con�‐
+       fig:subnet  and optionally other_config:exclude_ips. To enable IPAM for
+       IPv6, set other_config:ipv6_prefix. IPv4 and IPv6 may  be  enabled  to‐
+       gether or separately.
+
+       To  request  dynamic  address assignment for a particular port, use the
+       dynamic  keyword  in  the  addresses  column  of   the   port’s   Logi�‐
+       cal_Switch_Port row. This requests both an IPv4 and an IPv6 address, if
+       IPAM for IPv4 and IPv6 are both enabled.
+
+       other_config : subnet: optional string
+              Set  this  to  an  IPv4  subnet,  e.g. 192.168.0.0/24, to enable
+              ovn-northd to automatically assign IP addresses within that sub‐
+              net.
+
+       other_config : exclude_ips: optional string
+              To exclude some addresses from automatic IP address  management,
+              set  this to a list of the IPv4 addresses or ..-delimited ranges
+              to exclude. The addresses or ranges should be a subset of  those
+              in other_config:subnet.
+
+              Whether  listed or not, ovn-northd will never allocate the first
+              or  last  address  in  a  subnet,   such   as   192.168.0.0   or
+              192.168.0.255 in 192.168.0.0/24.
+
+              Examples:
+
+              •      192.168.0.2 192.168.0.10
+
+              •      192.168.0.4                    192.168.0.30..192.168.0.60
+                     192.168.0.110..192.168.0.120
+
+              •      192.168.0.110..192.168.0.120   192.168.0.25..192.168.0.30
+                     192.168.0.144
+
+       other_config : ipv6_prefix: optional string
+              Set this to an IPv6 prefix to enable ovn-northd to automatically
+              assign  IPv6  addresses using this prefix. The assigned IPv6 ad‐
+              dress will be generated using the IPv6 prefix and  the  MAC  ad‐
+              dress  (converted  to an IEEE EUI64 identifier) of the port. The
+              IPv6 prefix defined here should be a valid IPv6  address  ending
+              with ::.
+
+              Examples:
+
+              •      aef0::
+
+              •      bef0:1234:a890:5678::
+
+              •      8230:5678::
+
+       other_config : mac_only: optional string, either true or false
+              Value  used to request to assign L2 address only if neither sub‐
+              net nor ipv6_prefix are specified
+
+     IP Multicast Snooping Options:
+
+       These options control IP Multicast Snooping configuration of the  logi‐
+       cal   switch.   To   enable   IP   Multicast  Snooping  set  other_con�‐
+       fig:mcast_snoop to true. To enable IP Multicast Querier set  other_con�‐
+       fig:mcast_querier   to   true.  If  IP  Multicast  Querier  is  enabled
+       other_config:mcast_eth_src and other_config:mcast_ip4_src must be set.
+
+       other_config : mcast_snoop: optional string, either true or false
+              Enables/disables IP Multicast Snooping on  the  logical  switch.
+              Default: false.
+
+       other_config : mcast_querier: optional string, either true or false
+              Enables/disables  IP  Multicast  Querier  on the logical switch.
+              Only applicable if other_config:mcast_snoop is enabled. Default:
+              true.
+
+       other_config : mcast_flood_unregistered: optional string, either true
+       or false
+              Determines whether  unregistered  multicast  traffic  should  be
+              flooded  or  not. Only applicable if other_config:mcast_snoop is
+              enabled. Default: false.
+
+       other_config : mcast_table_size: optional string, containing an inte‐
+       ger, in range 1 to 32,766
+              Number of multicast groups to be stored. Default: 2048.
+
+       other_config : mcast_idle_timeout: optional string, containing an inte‐
+       ger, in range 15 to 3,600
+              Configures the IP Multicast Snooping group idle timeout (in sec‐
+              onds). Default: 300 seconds.
+
+       other_config : mcast_query_interval: optional string, containing an in‐
+       teger, in range 1 to 3,600
+              Configures the IP Multicast Querier interval between queries (in
+              seconds). Default: other_config:mcast_idle_timeout / 2.
+
+       other_config : mcast_query_max_response: optional string, containing an
+       integer, in range 1 to 10
+              Configures the value of the "max-response" field in  the  multi‐
+              cast  queries  originated by the logical switch. Default: 1 sec‐
+              ond.
+
+       other_config : mcast_eth_src: optional string
+              Configures the source Ethernet address for queries originated by
+              the logical switch.
+
+       other_config : mcast_ip4_src: optional string
+              Configures the source IPv4 address for queries originated by the
+              logical switch.
+
+       other_config : mcast_ip6_src: optional string
+              Configures the source IPv6 address for queries originated by the
+              logical switch.
+
+     Interconnection:
+
+       other_config : interconn-ts: optional string
+              The name of corresponding transit  switch  in  OVN_IC_Northbound
+              database.  This kind of logical switch is created and controlled
+              by ovn-ic.
+
+     Tunnel Key:
+
+       other_config : requested-tnl-key: optional string, containing an inte‐
+       ger, in range 1 to 16,777,215
+              Configures the datapath tunnel key for the logical switch.  Usu‐
+              ally this is not needed because ovn-northd will assign an unique
+              key  for  each datapath by itself. However, if it is configured,
+              ovn-northd honors the configured value. The typical use case  is
+              for  interconnection:  the tunnel keys for transit switches need
+              to be unique globally, so they  are  maintained  in  the  global
+              OVN_IC_Southbound  database,  and  ovn-ic simply syncs the value
+              from OVN_IC_Southbound through this config.
+
+       copp: optional weak reference to Copp
+              The control plane protection policy from table Copp used for me‐
+              tering packets sent to ovn-controller from ports of this logical
+              switch.
+
+     Other options:
+
+       other_config : vlan-passthru: optional string, either true or false
+              Determines whether VLAN tagged incoming traffic  should  be  al‐
+              lowed.  Note  that  this may have security implications when en‐
+              abled for a logical switch with a tag=0 localnet  port.  If  not
+              properly isolated from other localnet ports, fabric traffic that
+              belongs  to  other  tagged networks may be passed through such a
+              port.
+
+       other_config : broadcast-arps-to-all-routers: optional string, either
+       true or false
+              Determines whether arp requests and ipv6 neighbor  solicitations
+              should be sent to all routers and other switchports (default) or
+              if  it  should  only be sent to switchports where the ip/mac ad‐
+              dress is unknown. Setting this to false can significantly reduce
+              the load if the logical switch can receive arp requests for  ips
+              it does not know about. However setting this to false also means
+              that  garps  are no longer forwarded to all routers and therefor
+              the mac bindings of the routers are no longer updated.
+
+     Common Columns:
+
+       external_ids: map of string-string pairs
+              See External IDs at the beginning of this document.
+
+Logical_Switch_Port TABLE
+       A port within an L2 logical switch.
+
+   Summary:
+       Core Features:
+         name                        string (must be unique within table)
+         type                        string
+       Options:
+         options                     map of string-string pairs
+         Options for router ports:
+            options : router-port    optional string
+            options : nat-addresses  optional string
+            options : exclude-lb-vips-from-garp
+                                     optional string
+            options : arp_proxy      optional string
+         Options for localnet ports:
+            options : network_name   optional string
+            options : ethtype        optional string
+            options : localnet_learn_fdb
+                                     optional string, either true or false
+         Options for l2gateway ports:
+            options : network_name   optional string
+            options : l2gateway-chassis
+                                     optional string
+         Options for vtep ports:
+            options : vtep-physical-switch
+                                     optional string
+            options : vtep-logical-switch
+                                     optional string
+         VMI (or VIF) Options:
+            options : requested-chassis
+                                     optional string
+            options : activation-strategy
+                                     optional string
+            options : iface-id-ver   optional string
+            options : qos_min_rate   optional string
+            options : qos_max_rate   optional string
+            options : qos_burst      optional string
+            options : hostname       optional string
+            VIF Plugging Options:
+              options : vif-plug-type
+                                     optional string
+              options : vif-plug-mtu-request
+                                     optional string
+         Virtual port Options:
+            options : virtual-ip     optional string
+            options : virtual-parents
+                                     optional string
+         IP Multicast Snooping Options:
+            options : mcast_flood    optional string, either true or false
+            options : mcast_flood_reports
+                                     optional string, either true or false
+       Containers:
+         parent_name                 optional string
+         tag_request                 optional integer, in range 0 to 4,095
+         tag                         optional integer, in range 1 to 4,095
+       Port State:
+         up                          optional boolean
+         enabled                     optional boolean
+       Addressing:
+         addresses                   set of strings
+         dynamic_addresses           optional string
+         port_security               set of strings
+       DHCP:
+         dhcpv4_options              optional weak reference to DHCP_Options
+         dhcpv6_options              optional weak reference to DHCP_Options
+       mirror_rules                  set of weak reference to Mirrors
+       ha_chassis_group              optional HA_Chassis_Group
+       Naming:
+         external_ids : neutron:port_name
+                                     optional string
+       Tunnel Key:
+         options : requested-tnl-key
+                                     optional string, containing  an  integer,
+                                     in range 1 to 32,767
+       Common Columns:
+         external_ids                map of string-string pairs
+
+   Details:
+     Core Features:
+
+       name: string (must be unique within table)
+              The logical port name.
+
+              For  entities (VMs or containers) that are spawned in the hyper‐
+              visor, the name used here must match those used  in  the  exter�‐
+              nal_ids:iface-id in the Open_vSwitch database’s Interface table,
+              because hypervisors use external_ids:iface-id as a lookup key to
+              identify the network interface of that entity.
+
+              For containers that share a VIF within a VM, the name can be any
+              unique identifier. See Containers, below, for more information.
+
+              A  logical  switch  port may not have the same name as a logical
+              router port, but the database schema cannot enforce this.
+
+       type: string
+              Specify a type for this logical port. Logical ports can be  used
+              to model other types of connectivity into an OVN logical switch.
+              The following types are defined:
+
+              (empty string)
+                     A VM (or VIF) interface.
+
+              router A  connection  to  a  logical  router.  The  value of op�‐
+                     tions:router-port  specifies  the  name  of   the   Logi�‐
+                     cal_Router_Port to which this logical switch port is con‐
+                     nected.
+
+              localnet
+                     A   connection  to  a  locally  accessible  network  from
+                     ovn-controller instances that have a corresponding bridge
+                     mapping. A logical  switch  can  have  multiple  localnet
+                     ports attached. This type is used to model direct connec‐
+                     tivity  to  existing networks. In this case, each chassis
+                     should have a mapping for one of  the  physical  networks
+                     only.  Note:  nothing  said  above implies that a chassis
+                     cannot be plugged to multiple physical networks  as  long
+                     as they belong to different switches.
+
+              localport
+                     A  connection  to  a local VIF. Traffic that arrives on a
+                     localport is never forwarded over  a  tunnel  to  another
+                     chassis.  These  ports  are  present on every chassis and
+                     have the same address in all of them.  This  is  used  to
+                     model  connectivity  to  local services that run on every
+                     hypervisor.
+
+              l2gateway
+                     A connection to a physical network.
+
+              vtep   A port to a logical switch on a VTEP gateway.
+
+              external
+                     Represents a logical port which is external and not  hav‐
+                     ing an OVS port in the integration bridge. OVN will never
+                     receive any traffic from this port or send any traffic to
+                     this   port.   OVN   can  support  native  services  like
+                     DHCPv4/DHCPv6/DNS for this port. If  ha_chassis_group  is
+                     defined,  ovn-controller running in the master chassis of
+                     the HA chassis group will bind this port to provide these
+                     native services. It is expected that this port belong  to
+                     a bridged logical switch (with a localnet port).
+
+                     It  is  recommended  to use the same HA chassis group for
+                     all the external ports of a  logical  switch.  Otherwise,
+                     the physical switch might see MAC flap issue when differ‐
+                     ent chassis provide the native services. For example when
+                     supporting native DHCPv4 service, DHCPv4 server mac (con‐
+                     figured  in  options:server_mac  column in table DHCP_Op�‐
+                     tions) originating from different  ports  can  cause  MAC
+                     flap  issue. The MAC of the logical router IP(s) can also
+                     flap if the same HA chassis group is not set for all  the
+                     external ports of a logical switch.
+
+                     Below  are some of the use cases where external ports can
+                     be used.
+
+                     •      VMs connected to SR-IOV nics - Traffic from  these
+                            VMs  by passes the kernel stack and local ovn-con�‐
+                            troller do not bind these ports and  cannot  serve
+                            the native services.
+
+                     •      When CMS supports provisioning baremetal servers.
+
+              virtual
+                     Represents a logical port which does not have an OVS port
+                     in the integration bridge and has a virtual ip configured
+                     in  the  options:virtual-ip  column.  This virtual ip can
+                     move around between the logical ports configured  in  the
+                     options:virtual-parents column.
+
+                     One of the use case where virtual ports can be used is.
+
+                     •      The  virtual ip represents a load balancer vip and
+                            the virtual parents provide load balancer  service
+                            in an active-standby setup with the active virtual
+                            parent owning the virtual ip.
+
+              remote A remote port is to model a port that resides remotely on
+                     another OVN, which is on the other side of a transit log‐
+                     ical  switch  for OVN interconnection. This type of ports
+                     are created by ovn-ic instead of by CMS.  Any  change  to
+                     the port will be automatically overwritten by ovn-ic.
+
+     Options:
+
+       options: map of string-string pairs
+              This  column provides key/value settings specific to the logical
+              port type. The type-specific options are described  individually
+              below.
+
+     Options for router ports:
+
+       These options apply when type is router.
+
+       options : router-port: optional string
+              Required. The name of the Logical_Router_Port to which this log‐
+              ical switch port is connected.
+
+       options : nat-addresses: optional string
+              This  is  used  to send gratuitous ARPs for SNAT and DNAT IP ad‐
+              dresses via the localnet port that is attached to the same logi‐
+              cal switch as this type router port. This option is specified on
+              a logical switch port that is connected to a gateway router,  or
+              a logical switch port that is connected to a distributed gateway
+              port on a logical router.
+
+              This must take one of the following forms:
+
+              router Gratuitous ARPs will be sent for all SNAT and DNAT exter‐
+                     nal  IP  addresses and for all load balancer IP addresses
+                     defined on the options:router-port’s logical router,  us‐
+                     ing the options:router-port’s MAC address.
+
+                     This  form  of options:nat-addresses is valid for logical
+                     switch ports where options:router-port is the name  of  a
+                     port  on  a  gateway router, or the name of a distributed
+                     gateway port.
+
+                     Supported only in OVN 2.8 and later. Earlier versions re‐
+                     quired NAT addresses to be manually synchronized.
+
+              Ethernet address followed by one or more IPv4 addresses
+                     Example:  80:fa:5b:06:72:b7  158.36.44.22   158.36.44.24.
+                     This would result in generation of gratuitous ARPs for IP
+                     addresses  158.36.44.22  and  158.36.44.24 with a MAC ad‐
+                     dress of 80:fa:5b:06:72:b7.
+
+                     This form of options:nat-addresses is only valid for log‐
+                     ical switch ports where options:router-port is  the  name
+                     of a port on a gateway router.
+
+       options : exclude-lb-vips-from-garp: optional string
+              If  options:nat-addresses is set to router, Gratuitous ARPs will
+              be sent for all SNAT and DNAT external IP addresses  defined  on
+              the   options:router-port’s   logical   router,  using  the  op�‐
+              tions:router-port’s MAC address, not cosidering configured  load
+              balancers.
+
+       options : arp_proxy: optional string
+              Optional.  A  list  of  MAC  and  addresses/cidrs  or  just  ad‐
+              dresses/cidrs that this logical switch router port will reply to
+              ARP/NDP  requests.  Examples:   169.254.239.254   169.254.239.2,
+              0a:58:a9:fe:01:01          169.254.239.254         169.254.239.2
+              169.254.238.0/24, fd7b:6b4d:7b25:d22f::1 fd7b:6b4d:7b25:d22f::2,
+              0a:58:a9:fe:01:01 fd7b:6b4d:7b25:d22f::0/64.  Theoptions:router-
+              port’s  logical  router  should  have a route to forward packets
+              sent to configured proxy ARP MAC/IPs to an appropriate  destina‐
+              tion.
+
+     Options for localnet ports:
+
+       These options apply when type is localnet.
+
+       options : network_name: optional string
+              Required.  The name of the network to which the localnet port is
+              connected. Each hypervisor, via ovn-controller, uses  its  local
+              configuration  to  determine  exactly how to connect to this lo‐
+              cally accessible network, if at all.
+
+       options : ethtype: optional string
+              Optional. VLAN EtherType  field  value  for  encapsulating  VLAN
+              headers. Supported values: 802.1q (default), 802.1ad.
+
+       options : localnet_learn_fdb: optional string, either true or false
+              Optional.  Allows  localnet port to learn MACs and store them in
+              FDB table if set to true. The default value is false.
+
+     Options for l2gateway ports:
+
+       These options apply when type is l2gateway.
+
+       options : network_name: optional string
+              Required. The name of the network to which the l2gateway port is
+              connected. The L2 gateway, via ovn-controller,  uses  its  local
+              configuration  to  determine exactly how to connect to this net‐
+              work.
+
+       options : l2gateway-chassis: optional string
+              Required. The chassis on which the l2gateway logical port should
+              be bound to. ovn-controller running on the defined chassis  will
+              connect this logical port to the physical network.
+
+     Options for vtep ports:
+
+       These options apply when type is vtep.
+
+       options : vtep-physical-switch: optional string
+              Required. The name of the VTEP gateway.
+
+       options : vtep-logical-switch: optional string
+              Required. A logical switch name connected by the VTEP gateway.
+
+     VMI (or VIF) Options:
+
+       These options apply to logical ports with type having (empty string)
+
+       options : requested-chassis: optional string
+              If set, identifies a specific chassis (by name or hostname) that
+              is  allowed  to  bind  this port. Using this option will prevent
+              thrashing between two chassis trying to bind the same port  dur‐
+              ing  a live migration. It can also prevent similar thrashing due
+              to a mis-configuration, if a port  is  accidentally  created  on
+              more than one chassis.
+
+              If set to a comma separated list, the first entry identifies the
+              main  chassis  and  the  rest are one or more additional chassis
+              that are allowed to bind the same port.
+
+              When multiple chassis are set for  the  port,  and  the  logical
+              switch  is  connected  to an external network through a localnet
+              port, tunneling is enforced for the port to  guarantee  delivery
+              of  packets  directed to the port to all its locations. This has
+              MTU implications because the network  used  for  tunneling  must
+              have MTU larger than localnet for stable connectivity.
+
+              If the same host co-hosts more than one controller instance (ei‐
+              ther belonging to the same or separate clusters), special atten‐
+              tion  should be given to consistently using unique chassis names
+              used in this option. It is advised that chassis names - and  not
+              host names - are used for this option.
+
+       options : activation-strategy: optional string
+              If  used  with multiple chassis set in requested-chassis, speci‐
+              fies an activation strategy for all additional chassis.  By  de‐
+              fault,  no  activation strategy is used, meaning additional port
+              locations are immediately available for use. When set to "rarp",
+              the port is blocked for ingress and egress communication until a
+              RARP packet is sent from a new location. The "rarp" strategy  is
+              useful in live migration scenarios for virtual machines.
+
+       options : iface-id-ver: optional string
+              If  set,  this port will be bound by ovn-controller only if this
+              same key and value is configured in the external_ids  column  in
+              the Open_vSwitch database’s Interface table.
+
+       options : qos_min_rate: optional string
+              If set, indicates the minimum guaranteed rate available for data
+              sent from this interface, in bit/s.
+
+       options : qos_max_rate: optional string
+              If  set,  indicates the maximum rate for data sent from this in‐
+              terface, in bit/s. The traffic will be shaped according to  this
+              limit.
+
+       options : qos_burst: optional string
+              If set, indicates the maximum burst size for data sent from this
+              interface, in bits.
+
+       options : hostname: optional string
+              If  set, indicates the DHCPv4 option "Hostname" (option code 12)
+              associated for this Logical Switch Port. If  DHCPv4  is  enabled
+              for  this  Logical Switch Port, hostname dhcp option will be in‐
+              cluded in DHCP reply.
+
+     VIF Plugging Options:
+
+       options : vif-plug-type: optional string
+              If set, OVN will attempt to perform plugging of this VIF. In or‐
+              der to get this port plugged by the OVN controller, OVN must  be
+              built with support for VIF plugging. The default behavior is for
+              the  CMS  to  do  the  VIF plugging. Each VIF plug provider have
+              their own options namespaced by name, for example "vif-plug:rep‐
+              resentor:key". Please refer to the VIF plug provider  documenta‐
+              tion  located  in  Documentation/topics/vif-plug-providers/  for
+              more information.
+
+       options : vif-plug-mtu-request: optional string
+              Requested MTU for plugged interfaces.  When  set  the  OVN  con‐
+              troller  will  fill  the  mtu_request column of the Open vSwitch
+              database’s Interface table. This in turn will make OVS  vswitchd
+              update the MTU of the linked interface.
+
+     Virtual port Options:
+
+       These options apply when type is virtual.
+
+       options : virtual-ip: optional string
+              This option represents the virtual IPv4 address.
+
+       options : virtual-parents: optional string
+              This options represents a set of logical port names (with in the
+              same  logical switch) which can own the virtual ip configured in
+              the options:virtual-ip. All these virtual parents should add the
+              virtual ip in the port_security if port security  addressed  are
+              enabled.
+
+     IP Multicast Snooping Options:
+
+       These options apply when the port is part of a logical switch which has
+       other_config :mcast_snoop set to true.
+
+       options : mcast_flood: optional string, either true or false
+              If  set to true, multicast packets (except reports) are uncondi‐
+              tionally forwarded to the specific port. Default: false.
+
+       options : mcast_flood_reports: optional string, either true or false
+              If set to true, multicast reports are unconditionally  forwarded
+              to the specific port. Default: false.
+
+     Containers:
+
+       When a large number of containers are nested within a VM, it may be too
+       expensive to dedicate a VIF to each container. OVN can use VLAN tags to
+       support  such  cases.  Each  container  is  assigned a VLAN ID and each
+       packet that passes between the hypervisor and the VM is tagged with the
+       appropriate ID for the container. Such VLAN IDs never appear on a phys‐
+       ical wire, even inside a tunnel, so they need not be unique except rel‐
+       ative to a single VM on a hypervisor.
+
+       These columns are used for VIFs that represent nested containers  using
+       shared  VIFs. For VMs and for containers that have dedicated VIFs, they
+       are empty.
+
+       parent_name: optional string
+              The VM interface through which the nested  container  sends  its
+              network  traffic. This must match the name column for some other
+              Logical_Switch_Port.
+
+       tag_request: optional integer, in range 0 to 4,095
+              The VLAN tag in the  network  traffic  associated  with  a  con‐
+              tainer’s network interface. The client can request ovn-northd to
+              allocate  a  tag  that  is unique within the scope of a specific
+              parent (specified in parent_name) by setting a  value  of  0  in
+              this column. The allocated value is written by ovn-northd in the
+              tag  column. (Note that these tags are allocated and managed lo‐
+              cally in ovn-northd, so they  cannot  be  reconstructed  in  the
+              event  that the database is lost.) The client can also request a
+              specific non-zero tag and ovn-northd will honor it and copy that
+              value to the tag column.
+
+              When type is set to localnet or l2gateway, this can  be  set  to
+              indicate  that  the  port  represents a connection to a specific
+              VLAN on a locally accessible network. The VLAN  ID  is  used  to
+              match incoming traffic and is also added to outgoing traffic.
+
+       tag: optional integer, in range 1 to 4,095
+              The  VLAN  tag  allocated by ovn-northd based on the contents of
+              the tag_request column.
+
+     Port State:
+
+       up: optional boolean
+              This column is populated by ovn-northd, rather than by  the  CMS
+              plugin as is most of this database. When a logical port is bound
+              to  a  physical  location in the OVN Southbound database Binding
+              table, ovn-northd sets this column to true; otherwise, or if the
+              port becomes unbound later, it sets it to false. If this  column
+              is  empty, the port is not considered up. This allows the CMS to
+              wait for a VM’s (or container’s) networking to become active be‐
+              fore it allows the VM (or container) to start.
+
+              Logical ports of router type are an exception to this rule. They
+              are considered to be always up, that is this  column  is  always
+              set to true.
+
+       enabled: optional boolean
+              This  column is used to administratively set port state. If this
+              column is empty or is set to true, the port is enabled. If  this
+              column  is  set  to false, the port is disabled. A disabled port
+              has all ingress and egress traffic dropped.
+
+     Addressing:
+
+       addresses: set of strings
+              Addresses owned by the logical port.
+
+              Each element in the set must take one of the following forms:
+
+              Ethernet address followed by zero or more IPv4 or IPv6 addresses
+              (or both)
+                     An Ethernet address defined is owned by the logical port.
+                     Like a physical Ethernet NIC, a logical  port  ordinarily
+                     has a single fixed Ethernet address.
+
+                     When  a  OVN  logical switch processes a unicast Ethernet
+                     frame whose destination  MAC  address  is  in  a  logical
+                     port’s  addresses  column,  it  delivers  it only to that
+                     port, as if a MAC learning process had learned  that  MAC
+                     address on the port.
+
+                     If IPv4 or IPv6 address(es) (or both) are defined, it in‐
+                     dicates  that  the  logical  port  owns  the given IP ad‐
+                     dresses.
+
+                     If IPv4 address(es) are defined, the OVN  logical  switch
+                     uses  this information to synthesize responses to ARP re‐
+                     quests without traversing the physical network.  The  OVN
+                     logical  router  connected to the logical switch, if any,
+                     uses this information to avoid issuing ARP  requests  for
+                     logical switch ports.
+
+                     Note  that  the order here is important. The Ethernet ad‐
+                     dress must be listed before the  IP  address(es)  if  de‐
+                     fined.
+
+                     Examples:
+
+                     80:fa:5b:06:72:b7
+                            This  indicates  that  the  logical  port owns the
+                            above mac address.
+
+                     80:fa:5b:06:72:b7 10.0.0.4 20.0.0.4
+                            This indicates that the logical port owns the  mac
+                            address and two IPv4 addresses.
+
+                     80:fa:5b:06:72:b7 fdaa:15f2:72cf:0:f816:3eff:fe20:3f41
+                            This  indicates that the logical port owns the mac
+                            address and 1 IPv6 address.
+
+                     80:fa:5b:06:72:b7 10.0.0.4
+                     fdaa:15f2:72cf:0:f816:3eff:fe20:3f41
+                            This indicates that the logical port owns the  mac
+                            address and 1 IPv4 address and 1 IPv6 address.
+
+              unknown
+                     This  indicates  that the logical port has an unknown set
+                     of  Ethernet  addresses.  When  an  OVN  logical   switch
+                     processes  a unicast Ethernet frame whose destination MAC
+                     address is not in any logical port’s addresses column, it
+                     delivers it  to  the  port  (or  ports)  whose  addresses
+                     columns include unknown.
+
+              dynamic
+                     Use dynamic to make ovn-northd generate a globally unique
+                     MAC address, choose an unused IPv4 address with the logi‐
+                     cal  port’s  subnet (if other_config:subnet is set in the
+                     port’s Logical_Switch), and generate an IPv6 address from
+                     the MAC address (if other_config:ipv6_prefix  is  set  in
+                     the  port’s  Logical_Switch) and store them in the port’s
+                     dynamic_addresses column.
+
+                     Only one element containing dynamic  may  appear  in  ad�‐
+                     dresses.
+
+              dynamic ip
+              dynamic ipv6
+              dynamic ip ipv6
+                   These act like dynamic alone but specify particular IPv4 or
+                   IPv6  addresses  to  use. OVN IPAM will still automatically
+                   allocate the other address if configured appropriately. Ex‐
+                   ample: dynamic 192.168.0.1 2001::1.
+
+              mac dynamic
+                   This acts like dynamic alone but specifies a particular MAC
+                   address to use. OVN IPAM will still automatically  allocate
+                   IPv4  or  IPv6  addresses, or both, if configured appropri‐
+                   ately. Example: 80:fa:5b:06:72:b7 dynamic
+
+              router
+                   Accepted only when type is router. This indicates that  the
+                   Ethernet,  IPv4, and IPv6 addresses for this logical switch
+                   port should be obtained from the connected  logical  router
+                   port, as specified by router-port in options.
+
+                   The  resulting  addresses  are used to populate the logical
+                   switch’s destination  lookup,  and  also  for  the  logical
+                   switch to generate ARP and ND replies.
+
+                   If  the  connected  logical  router  port has a distributed
+                   gateway port specified and the  logical  router  has  rules
+                   specified  in  nat  with external_mac, then those addresses
+                   are also used to populate the switch’s destination lookup.
+
+                   Supported only in OVN 2.7 and later. Earlier  versions  re‐
+                   quired router addresses to be manually synchronized.
+
+       dynamic_addresses: optional string
+              Addresses assigned to the logical port by ovn-northd, if dynamic
+              is  specified in addresses. Addresses will be of the same format
+              as those that populate the addresses column. Note  that  dynami‐
+              cally  assigned addresses are constructed and managed locally in
+              ovn-northd, so they cannot be reconstructed in  the  event  that
+              the database is lost.
+
+       port_security: set of strings
+              This  column controls the addresses from which the host attached
+              to the logical port (``the host’’) is allowed  to  send  packets
+              and to which it is allowed to receive packets. If this column is
+              empty, all addresses are permitted.
+
+              Each  element  in  the set must begin with one Ethernet address.
+              This would restrict the host to sending packets from and receiv‐
+              ing packets to the ethernet addresses  defined  in  the  logical
+              port’s  port_security column. It also restricts the inner source
+              MAC addresses that the host may send in ARP  and  IPv6  Neighbor
+              Discovery packets. The host is always allowed to receive packets
+              to multicast and broadcast Ethernet addresses.
+
+              Each  element  in  the  set may additionally contain one or more
+              IPv4 or IPv6 addresses (or both), with optional masks. If a mask
+              is given, it must be a CIDR mask. In addition  to  the  restric‐
+              tions  described  for  Ethernet addresses above, such an element
+              restricts the IPv4 or IPv6 addresses from  which  the  host  may
+              send  and  to  which it may receive packets to the specified ad‐
+              dresses. A masked address, if the host part is  zero,  indicates
+              that  the  host  is allowed to use any address in the subnet; if
+              the host part is nonzero, the mask simply indicates the size  of
+              the subnet. In addition:
+
+              •      If any IPv4 address is given, the host is also allowed to
+                     receive  packets  to  the  IPv4  local  broadcast address
+                     255.255.255.255   and   to   IPv4   multicast   addresses
+                     (224.0.0.0/4).  If  an IPv4 address with a mask is given,
+                     the host is also allowed to receive packets to the broad‐
+                     cast address in that specified subnet.
+
+                     If any IPv4 address is given, the  host  is  additionally
+                     restricted  to  sending  ARP  packets  with the specified
+                     source IPv4 address. (RARP is not restricted.)
+
+              •      If any IPv6 address is given, the host is also allowed to
+                     receive packets to IPv6 multicast addresses (ff00::/8).
+
+                     If any IPv6 address is given, the  host  is  additionally
+                     restricted  to  sending IPv6 Neighbor Discovery Solicita‐
+                     tion or Advertisement packets with the  specified  source
+                     address or, for solicitations, the unspecified address.
+
+              If  an  element includes an IPv4 address, but no IPv6 addresses,
+              then IPv6 traffic is not allowed. If an element includes an IPv6
+              address, but no IPv4 address, then IPv4 and ARP traffic  is  not
+              allowed.
+
+              This  column uses the same lexical syntax as the match column in
+              the OVN Southbound database’s Pipeline table. Multiple addresses
+              within an element may be space or comma separated.
+
+              This column is provided as a  convenience  to  cloud  management
+              systems,  but  all of the features that it implements can be im‐
+              plemented as ACLs using the ACL table.
+
+              Examples:
+
+              80:fa:5b:06:72:b7
+                     The host may send traffic from and receive traffic to the
+                     specified MAC address, and to receive traffic to Ethernet
+                     multicast and broadcast addresses, but not otherwise. The
+                     host may not send ARP or IPv6 Neighbor Discovery  packets
+                     with  inner  source Ethernet addresses other than the one
+                     specified.
+
+              80:fa:5b:06:72:b7 192.168.1.10/24
+                     This adds further restrictions to the first example.  The
+                     host  may  send IPv4 packets from or receive IPv4 packets
+                     to only 192.168.1.10, except that  it  may  also  receive
+                     IPv4 packets to 192.168.1.255 (based on the subnet mask),
+                     255.255.255.255, and any address in 224.0.0.0/4. The host
+                     may  not  send  ARPs with a source Ethernet address other
+                     than 80:fa:5b:06:72:b7 or source IPv4 address other  than
+                     192.168.1.10.  The  host may not send or receive any IPv6
+                     (including IPv6 Neighbor Discovery) traffic.
+
+              "80:fa:5b:12:42:ba", "80:fa:5b:06:72:b7 192.168.1.10/24"
+                     The host may send traffic from and receive traffic to the
+                     specified MAC addresses, and to receive traffic to Ether‐
+                     net multicast and broadcast addresses, but not otherwise.
+                     With MAC 80:fa:5b:12:42:ba, the  host  may  send  traffic
+                     from  and  receive  traffic  to  any L3 address. With MAC
+                     80:fa:5b:06:72:b7, the host may send IPv4 packets from or
+                     receive IPv4 packets to only 192.168.1.10, except that it
+                     may also receive IPv4 packets to 192.168.1.255 (based  on
+                     the  subnet  mask),  255.255.255.255,  and any address in
+                     224.0.0.0/4. The host may not send or  receive  any  IPv6
+                     (including IPv6 Neighbor Discovery) traffic.
+
+     DHCP:
+
+       dhcpv4_options: optional weak reference to DHCP_Options
+              This  column  defines  the  DHCPv4 Options to be included by the
+              ovn-controller when it replies to the  DHCPv4  requests.  Please
+              see the DHCP_Options table.
+
+       dhcpv6_options: optional weak reference to DHCP_Options
+              This  column  defines  the  DHCPv6 Options to be included by the
+              ovn-controller when it replies to the  DHCPv6  requests.  Please
+              see the DHCP_Options table.
+
+       mirror_rules: set of weak reference to Mirrors
+              Mirror  rules  that  apply  to  logical switch port which is the
+              source. Please see the Mirror table.
+
+       ha_chassis_group: optional HA_Chassis_Group
+              References a row  in  the  OVN  Northbound  database’s  HA_Chas�‐
+              sis_Group table. It indicates the HA chassis group to use if the
+              type is set to external. If type is not external, this column is
+              ignored.
+
+     Naming:
+
+       external_ids : neutron:port_name: optional string
+              This  column gives an optional human-friendly name for the port.
+              This name has no special meaning or purpose other than  to  pro‐
+              vide convenience for human interaction with the northbound data‐
+              base.
+
+              Neutron  copies  this  from its own port object’s name. (Neutron
+              ports do are not assigned human-friendly names by default, so it
+              will often be empty.)
+
+     Tunnel Key:
+
+       options : requested-tnl-key: optional string, containing an integer, in
+       range 1 to 32,767
+              Configures the port binding tunnel key  for  the  port.  Usually
+              this  is not needed because ovn-northd will assign an unique key
+              for  each  port  by  itself.  However,  if  it  is   configured,
+              ovn-northd  honors the configured value. The typical use case is
+              for interconnection:  the  tunnel  keys  for  ports  on  transit
+              switches  need  to be unique globally, so they are maintained in
+              the global OVN_IC_Southbound database, and ovn-ic  simply  syncs
+              the value from OVN_IC_Southbound through this config.
+
+     Common Columns:
+
+       external_ids: map of string-string pairs
+              See External IDs at the beginning of this document.
+
+              The  ovn-northd  program  copies all these pairs into the exter�‐
+              nal_ids column of the Port_Binding table in OVN_Southbound data‐
+              base.
+
+Forwarding_Group TABLE
+       Each row represents one forwarding group.
+
+   Summary:
+       name                          string
+       vip                           string
+       vmac                          string
+       liveness                      boolean
+       child_port                    set of 1 or more strings
+       Common Columns:
+         external_ids                map of string-string pairs
+
+   Details:
+       name: string
+              A name for the forwarding group. This name has no special  mean‐
+              ing  or  purpose other than to provide convenience for human in‐
+              teraction with the ovn-nb database.
+
+       vip: string
+              The virtual IP address assigned to the forwarding group. It will
+              respond with vmac when an ARP request is sent for vip.
+
+       vmac: string
+              The virtual MAC address assigned to the forwarding group.
+
+       liveness: boolean
+              If set to true, liveness is enabled for child ports otherwise it
+              is disabled.
+
+       child_port: set of 1 or more strings
+              List of child ports in the forwarding group.
+
+     Common Columns:
+
+       external_ids: map of string-string pairs
+              See External IDs at the beginning of this document.
+
+Address_Set TABLE
+       Each row in this table represents a named set of addresses. An  address
+       set may contain Ethernet, IPv4, or IPv6 addresses with optional bitwise
+       or  CIDR  masks.  Address set may ultimately be used in ACLs to compare
+       against fields such as ip4.src or ip6.src. A single  address  set  must
+       contain  addresses of the same type. As an example, the following would
+       create an address set with three IP addresses:
+
+             ovn-nbctl create Address_Set name=set1 addresses=�’10.0.0.1 10.0.0.2 10.0.0.3�’
+
+
+       Address sets may be used in the match column of the ACL table. For syn‐
+       tax information, see the details of the expression  language  used  for
+       the  match column in the Logical_Flow table of the OVN_Southbound data‐
+       base.
+
+   Summary:
+       name                          string (must be unique within table)
+       addresses                     set of strings
+       Common Columns:
+         external_ids                map of string-string pairs
+
+   Details:
+       name: string (must be unique within table)
+              A name for the address set.  Names  are  ASCII  and  must  match
+              [a-zA-Z_.][a-zA-Z_.0-9]*.
+
+       addresses: set of strings
+              The set of addresses in string form.
+
+     Common Columns:
+
+       external_ids: map of string-string pairs
+              See External IDs at the beginning of this document.
+
+Port_Group TABLE
+       Each  row  in  this  table  represents  a named group of logical switch
+       ports.
+
+       Port groups may be used in the match column of the ACL table. For  syn‐
+       tax  information,  see  the details of the expression language used for
+       the match column in the Logical_Flow table of the OVN_Southbound  data‐
+       base.
+
+       For  each  port  group, there are two address sets generated to the Ad�‐
+       dress_Set table of the OVN_Southbound database, containing the  IP  ad‐
+       dresses  of  the  group of ports, one for IPv4, and the other for IPv6,
+       with name being the name of the Port_Group followed by  a  suffix  _ip4
+       for  IPv4  and _ip6 for IPv6. The generated address sets can be used in
+       the same way as regular address sets in the match column of the ACL ta‐
+       ble. For syntax information, see the details of the expression language
+       used for the match column in the Logical_Flow table of  the  OVN_South�‐
+       bound database.
+
+   Summary:
+       name                          string (must be unique within table)
+       ports                         set    of   weak   reference   to   Logi�‐
+                                     cal_Switch_Ports
+       acls                          set of ACLs
+       Common Columns:
+         external_ids                map of string-string pairs
+
+   Details:
+       name: string (must be unique within table)
+              A name for the port  group.  Names  are  ASCII  and  must  match
+              [a-zA-Z_.][a-zA-Z_.0-9]*.
+
+       ports: set of weak reference to Logical_Switch_Ports
+              The logical switch ports belonging to the group in uuids.
+
+       acls: set of ACLs
+              Access  control  rules that apply to the port group. Applying an
+              ACL to a port group has the same effect as applying the  ACL  to
+              all  logical  lswitches  that the ports of the port group belong
+              to.
+
+     Common Columns:
+
+       external_ids: map of string-string pairs
+              See External IDs at the beginning of this document.
+
+Load_Balancer TABLE
+       Each row represents one load balancer.
+
+   Summary:
+       name                          string
+       vips                          map of string-string pairs
+       protocol                      optional string, one of sctp, tcp, or udp
+       Health Checks:
+         health_check                set of Load_Balancer_Health_Checks
+         ip_port_mappings            map of string-string pairs
+       selection_fields              set of strings, one of eth_dst,  eth_src,
+                                     ip_dst, ip_src, tp_dst, or tp_src
+       Common Columns:
+         external_ids                map of string-string pairs
+       Load_Balancer options:
+         options : reject            optional string, either true or false
+         options : hairpin_snat_ip   optional string
+         options : skip_snat         optional string
+         options : add_route         optional string
+         options : neighbor_responder
+                                     optional string
+         options : template          optional string
+         options : address-family    optional string
+         options : affinity_timeout  optional string
+         options : ct_flush          optional string, either true or false
+
+   Details:
+       name: string
+              A  name  for the load balancer. This name has no special meaning
+              or purpose other than to provide convenience for human  interac‐
+              tion with the ovn-nb database.
+
+       vips: map of string-string pairs
+              A  map of virtual IP addresses (and an optional port number with
+              : as a separator) associated with this load balancer  and  their
+              corresponding  endpoint  IP addresses (and optional port numbers
+              with : as separators) separated by commas. If the destination IP
+              address (and port number) of a packet leaving a container  or  a
+              VM  matches  the  virtual  IP address (and port number) provided
+              here as a key, then OVN will statefully replace the  destination
+              IP  address  by one of the provided IP address (and port number)
+              in this map as a value. IPv4 and IPv6  addresses  are  supported
+              for  load balancing; however a VIP of one address family may not
+              be mapped to a destination IP address of a different family.  If
+              specifying an IPv6 address with a port, the address portion must
+              be   enclosed   in   square  brackets.  Examples  for  keys  are
+              "192.168.1.4"  and  "[fd0f::1]:8800".  Examples  for  value  are
+              "10.0.0.1, 10.0.0.2" and "20.0.0.10:8800, 20.0.0.11:8800".
+
+              When  the  Load_Balancer is added to the logical_switch, the VIP
+              has to be in a different subnet than the one used for the  logi�‐
+              cal_switch.  Since VIP is in a different subnet, you should con‐
+              nect your logical switch to either a OVN  logical  router  or  a
+              real  router  (this  is because the client can now send a packet
+              with VIP as the destination IP address and router’s mac  address
+              as the destination MAC address).
+
+       protocol: optional string, one of sctp, tcp, or udp
+              Valid  protocols  are  tcp,  udp, or sctp. This column is useful
+              when a port number is provided as part of the  vips  column.  If
+              this  column  is  empty and a port number is provided as part of
+              vips column, OVN assumes the protocol to be tcp.
+
+     Health Checks:
+
+       OVN supports health checks for load  balancer  endpoints.  When  health
+       checks are enabled, the load balancer uses only healthy endpoints.
+
+       Suppose      that      vips      contains      a     key-value     pair
+       10.0.0.10:80=10.0.0.4:8080,20.0.0.4:8080. To enable health  checks  for
+       this  virtual’s endpoints, add two key-value pairs to ip_port_mappings,
+       with keys 10.0.0.4 and 20.0.0.4, and add to health_check a reference to
+       a Load_Balancer_Health_Check row whose vip is  set  to  10.0.0.10.  The
+       same approach can be used for IPv6 as well.
+
+       health_check: set of Load_Balancer_Health_Checks
+              Load balancer health checks associated with this load balancer.
+
+       ip_port_mappings: map of string-string pairs
+              Maps  from endpoint IP to a colon-separated pair of logical port
+              name and source IP, e.g.  port_name:sourc_ip  for  IPv4.  Health
+              checks  are  sent to this port with the specified source IP. For
+              IPv6 square brackets  must  be  used  around  IP  address,  e.g:
+              port_name:[sourc_ip]
+
+              For  example, in the example above, IP to port mappings might be
+              defined         as         10.0.0.4=sw0-p1:10.0.0.2          and
+              20.0.0.4=sw1-p1:20.0.0.2,  if  the  values  given  were suitable
+              ports and IP addresses.
+
+              For  IPv6  IP   to   port   mappings   might   be   defined   as
+              [2001::1]=sw0-p1:[2002::1].
+
+       selection_fields: set of strings, one of eth_dst, eth_src, ip_dst,
+       ip_src, tp_dst, or tp_src
+              OVN  native  load  balancers  are  supported  using the OpenFlow
+              groups of type  select.  OVS  supports  two  selection  methods:
+              dp_hash  and  hash (with optional fields specified) in selecting
+              the buckets of a group. Please see the  OVS  documentation  (man
+              ovs-ofctl)  for more details on the selection methods. Each end‐
+              point IP (and port if set) is mapped to a bucket  in  the  group
+              flow.
+
+              CMS  can  choose the hash selection method by setting the selec‐
+              tion fields in this  column.  ovs-vswitchd  uses  the  specified
+              fields in generating the hash.
+
+              dp_hash selection method uses the assistance of datapath to cal‐
+              culate the hash and it is expected to be faster than hash selec‐
+              tion  method.  So CMS should take this into consideration before
+              using the hash method. Please consult the OVS documentation  and
+              OVS sources for the implementation details.
+
+     Common Columns:
+
+       external_ids: map of string-string pairs
+              See External IDs at the beginning of this document.
+
+     Load_Balancer options:
+
+       options : reject: optional string, either true or false
+              If  the load balancer is created with --reject option and it has
+              no active backends, a TCP reset segment (for  tcp)  or  an  ICMP
+              port  unreachable packet (for all other kind of traffic) will be
+              sent whenever an incoming packet is received for this  load-bal‐
+              ancer.  Please  note using --reject option will disable empty_lb
+              SB controller event for this load balancer.
+
+       options : hairpin_snat_ip: optional string
+              IP to be used as source IP for  packets  that  have  been  hair-
+              pinned  after  load balancing. The default behavior when the op‐
+              tion is not set is to use the load balancer VIP  as  source  IP.
+              This option may have exactly one IPv4 and/or one IPv6 address on
+              it, separated by a space character.
+
+       options : skip_snat: optional string
+              If  the load balancing rule is configured with skip_snat option,
+              the option lb_force_snat_ip configured for  the  logical  router
+              that  references this load balancer will not be applied for this
+              load balancer.
+
+       options : add_route: optional string
+              If set to true, then neighbor routers will  have  logical  flows
+              added  that  will  allow for routing to the VIP IP. It also will
+              have ARP resolution logical flows added. By setting this option,
+              it means there is no  reason  to  create  a  Logical_Router_Sta�‐
+              tic_Route  from  neighbor  routers  to this NAT address. It also
+              means that no ARP request is required for  neighbor  routers  to
+              learn  the  IP-MAC mapping for this VIP IP. For more information
+              about what flows  are  added  for  IP  routes,  please  see  the
+              ovn-northd manpage section on IP Routing.
+
+       options : neighbor_responder: optional string
+              If  set  to  all, then routers on which the load balancer is ap‐
+              plied reply to ARP/neighbor discovery requests for all  VIPs  of
+              the  load  balancer.  If set to reachable, then routers on which
+              the load balancer is applied reply to ARP/neighbor discovery re‐
+              quests only for VIPs that are part of a router’s subnet. If  set
+              to  none,  then  routers  on  which the load balancer is applied
+              never reply to ARP/neighbor discovery requests for  any  of  the
+              load balancer VIPs. Load balancers with options:template=true do
+              not support reachable as a valid mode. The default value of this
+              option,  if  not  specified,  is reachable for regular load bal‐
+              ancers and none for template load balancers.
+
+       options : template: optional string
+              Option to be set to true, if the load balancer  is  a  template.
+              The  load  balancer VIPs and backends must be using Chassis_Tem�‐
+              plate_Var in their definitions.
+
+              Load balancer template VIP supported formats are:
+
+              ^VIP_VAR[:^PORT_VAR|:port]
+
+
+              where VIP_VAR and PORT_VAR are keys of the  Chassis_Template_Var
+              variables records.
+
+              Note: The VIP and PORT cannot be combined into a single template
+              variable. For example, a Chassis_Template_Var variable expanding
+              to 10.0.0.1:8080 is not valid if used as VIP.
+
+              Load balancer template backend supported formats are:
+
+              ^BACKEND_VAR1[:^PORT_VAR1|:port],^BACKEND_VAR2[:^PORT_VAR2|:port]
+              or
+              ^BACKENDS_VAR1,^BACKENDS_VAR2
+
+
+              where  BACKEND_VAR1,  PORT_VAR1,  BACKEND_VAR2, PORT_VAR2, BACK�‐
+              ENDS_VAR1 and BACKENDS_VAR2 are keys of the Chassis_Template_Var
+              variables records.
+
+       options : address-family: optional string
+              Address family used by the load balancer. Supported  values  are
+              ipv4  and  ipv6.  The  address-family is only used for load bal‐
+              ancers with options:template=true. For explicit load  balancers,
+              setting the address-family has no effect.
+
+       options : affinity_timeout: optional string
+              If  the  CMS  provides  a positive value (in seconds) for affin�‐
+              ity_timeout, OVN will dnat connections received  from  the  same
+              client  to this lb to the same backend if received in the affin‐
+              ity timeslot. Max supported affinity_timeout is 65535 seconds.
+
+       options : ct_flush: optional string, either true or false
+              The value indicates whether ovn-controller should flush  CT  en‐
+              tries  that  are related to this LB. The flush happens if the LB
+              is removed, any of the backends is updated/removed or the LB  is
+              not  considered local anymore by the ovn-controller. This option
+              is set to false by default.
+
+Load_Balancer_Group TABLE
+       Each row represents a logical grouping of load balancers. It is  up  to
+       the  CMS to decide the criteria on which load balancers are grouped to‐
+       gether. To simplify configuration and to optimize its  processing  load
+       balancers  that  must be associated to the same set of logical switches
+       and/or logical routers should be grouped together.
+
+   Summary:
+       name                          string (must be unique within table)
+       load_balancer                 set of weak reference to Load_Balancers
+
+   Details:
+       name: string (must be unique within table)
+              A name for the load balancer group. This  name  has  no  special
+              meaning  or  purpose other than to provide convenience for human
+              interaction with the ovn-nb database.
+
+       load_balancer: set of weak reference to Load_Balancers
+              A set of load balancers.
+
+Load_Balancer_Health_Check TABLE
+       Each row represents one load balancer health check.
+
+   Summary:
+       vip                           string
+       Health check options:
+         options : interval          optional string, containing an integer
+         options : timeout           optional string, containing an integer
+         options : success_count     optional string, containing an integer
+         options : failure_count     optional string, containing an integer
+       Common Columns:
+         external_ids                map of string-string pairs
+
+   Details:
+       vip: string
+              vip whose endpoints should be monitored for health check.
+
+     Health check options:
+
+       options : interval: optional string, containing an integer
+              The interval, in seconds, between health checks.
+
+       options : timeout: optional string, containing an integer
+              The time, in seconds, after which a health check times out.
+
+       options : success_count: optional string, containing an integer
+              The number of successful checks after which the endpoint is con‐
+              sidered online.
+
+       options : failure_count: optional string, containing an integer
+              The number of failure checks after which the endpoint is consid‐
+              ered offline.
+
+     Common Columns:
+
+       external_ids: map of string-string pairs
+              See External IDs at the beginning of this document.
+
+ACL TABLE
+       Each row in this table represents one ACL rule for a logical switch  or
+       a port group that points to it through its acls column. The action col‐
+       umn  for  the  highest-priority matching row in this table determines a
+       packet’s treatment. If no row matches, packets are allowed by  default.
+       (Default-deny  treatment  is possible: add a rule with priority 0, 1 as
+       match, and deny as action.)
+
+   Summary:
+       label                         integer, in range 0 to 4,294,967,295
+       priority                      integer, in range 0 to 32,767
+       direction                     string, either from-lport or to-lport
+       match                         string
+       action                        string,   one   of   allow-related,   al�‐
+                                     low-stateless,  allow, drop, pass, or re�‐
+                                     ject
+       tier                          integer, in range 0 to 3
+       options:
+         options : apply-after-lb    optional string
+       Logging:
+         log                         boolean
+         name                        optional string, at  most  63  characters
+                                     long
+         severity                    optional  string,  one  of  alert, debug,
+                                     info, notice, or warning
+         meter                       optional string
+       Common Columns:
+         options                     map of string-string pairs
+         ACL configuration options:
+            options : log-related    optional string
+         external_ids                map of string-string pairs
+
+   Details:
+       label: integer, in range 0 to 4,294,967,295
+              Associates an identifier with the ACL. The same  value  will  be
+              written  to  corresponding  connection  tracker entry. The value
+              should be a valid 32-bit unsigned integer. This value  can  help
+              in  debugging from connection tracker side. For example, through
+              this "label" we can backtrack to the ACL rule which is causing a
+              "leaked" connection. Connection tracker entries are created only
+              for allowed connections so the label is valid only for allow and
+              allow-related actions.
+
+       priority: integer, in range 0 to 32,767
+              The ACL rule’s priority. Rules with numerically higher  priority
+              take precedence over those with lower. If two ACL rules with the
+              same  priority  both  match,  then the one actually applied to a
+              packet is undefined.
+
+              Return traffic from an allow-related flow is always allowed  and
+              cannot be changed through an ACL.
+
+              allow-stateless  flows  always  take  precedence before stateful
+              ACLs, regardless of their priority. (Both  allow  and  allow-re�‐
+              lated ACLs can be stateful.)
+
+       direction: string, either from-lport or to-lport
+              Direction of the traffic to which this rule should apply:
+
+              •      from-lport: Used to implement filters on traffic arriving
+                     from a logical port. These rules are applied to the logi‐
+                     cal switch’s ingress pipeline.
+
+              •      to-lport:  Used to implement filters on traffic forwarded
+                     to a logical port. These rules are applied to the logical
+                     switch’s egress pipeline.
+
+       match: string
+              The packets that the ACL should match, in  the  same  expression
+              language  used  for the match column in the OVN Southbound data‐
+              base’s Logical_Flow table. The  outport  logical  port  is  only
+              available  in the to-lport direction (the inport is available in
+              both directions).
+
+              By default all traffic is allowed. When writing a more  restric‐
+              tive  policy, it is important to remember to allow flows such as
+              ARP and IPv6 neighbor discovery packets.
+
+              Note that you can not create an ACL  matching  on  a  port  with
+              type=router or type=localnet.
+
+       action: string, one of allow-related, allow-stateless, allow, drop,
+       pass, or reject
+              The action to take when the ACL rule matches:
+
+              •      allow-stateless:  Always  forward the packet in stateless
+                     manner, omitting connection tracking  mechanism,  regard‐
+                     less  of  other rules defined for the switch. May require
+                     defining additional rules for inbound replies. For  exam‐
+                     ple,  if  you define a rule to allow outgoing TCP traffic
+                     directed to an IP address, then you probably also want to
+                     define another rule to allow incoming TCP traffic  coming
+                     from  this  same  IP  address.  In addition, traffic that
+                     matches stateless ACLs will bypass load-balancer DNAT/un-
+                     DNAT processing. Stateful ACLs should be used instead  if
+                     the traffic is supposed to be load-balanced.
+
+              •      allow:  Forward the packet. It will also send the packets
+                     through connection tracking when allow-related rules  ex‐
+                     ist  on the logical switch. Otherwise, it’s equivalent to
+                     allow-stateless.
+
+              •      allow-related: Forward the  packet  and  related  traffic
+                     (e.g. inbound replies to an outbound connection).
+
+              •      drop: Silently drop the packet.
+
+              •      reject:  Drop  the packet, replying with a RST for TCP or
+                     ICMPv4/ICMPv6    unreachable    message     for     other
+                     IPv4/IPv6-based protocols.
+
+              •      pass:  Pass  to  the next ACL tier. If using multiple ACL
+                     tiers, a match on this ACL will stop evaluating  ACLs  at
+                     the  current  tier and move to the next one. If not using
+                     ACL tiers or if a pass ACL is matched at the final  tier,
+                     then   the   options:default_acl_drop   option  from  the
+                     NB_Global table is used to determine how to proceed.
+
+       tier: integer, in range 0 to 3
+              The hierarchical tier that this ACL belongs to.
+
+              ACLs can be assigned to numerical tiers. When  evaluating  ACLs,
+              an  internal  counter  is  used  to determine which tier of ACLs
+              should be evaluated. Tier 0 ACLs are evaluated first. If no ver‐
+              dict can be determined, then tier 1  ACLs  are  evaluated  next.
+              This  continues  until the maximum tier value is reached. If all
+              tiers of ACLs are evaluated and no verdict is reached, then  the
+              options:default_acl_drop  option from table NB_Global is used to
+              determine how to proceed.
+
+              In this version of OVN, the maximum tier value for  ACLs  is  3,
+              meaning there are 4 tiers of ACLs allowed (0-3).
+
+     options:
+
+       ACLs options.
+
+       options : apply-after-lb: optional string
+              If  set  to  true,  the ACL will be applied after load balancing
+              stage. Supported only for from-lport direction.
+
+              The main use case of this option is to support ACLs matching  on
+              the  destination IP address of the packet for the backend IPs of
+              load balancers.
+
+              OVN will apply the from-lport ACLs in two stages.  ACLs  without
+              this  option apply-after-lb set, will be applied before the load
+              balancer stage and ACLs with this option set will be applied af‐
+              ter the load balancer stage. The priorities are  indepedent  be‐
+              tween  these stages and may not be obvious to the CMS. Hence CMS
+              should be extra careful when using this option and should  care‐
+              fully  evaluate  the  priorities of all the ACLs and the default
+              deny/allow ACLs if any.
+
+     Logging:
+
+       These columns control whether and how OVN logs packets  that  match  an
+       ACL.
+
+       log: boolean
+              If  set  to  true, packets that match the ACL will trigger a log
+              message on the transport node or nodes that perform ACL process‐
+              ing. Logging may be combined with any action.
+
+              If set to false, the remaining columns in  this  group  have  no
+              significance.
+
+       name: optional string, at most 63 characters long
+              This  name,  if  it  is provided, is included in log records. It
+              provides the administrator and the cloud management system a way
+              to associate a log record with a particular ACL.
+
+       severity: optional string, one of alert, debug, info, notice, or warn�‐
+       ing
+              The severity of the ACL. The severity levels match those of sys‐
+              log, in decreasing level of severity:  alert,  warning,  notice,
+              info, or debug. When the column is empty, the default is info.
+
+       meter: optional string
+              The  name of a meter to rate-limit log messages for the ACL. The
+              string must match the name column of a row in the  Meter  table.
+              By  default,  log messages are not rate-limited. In order to en‐
+              sure that the same Meter rate limits  multiple  ACL  logs  sepa‐
+              rately, set the fair column.
+
+     Common Columns:
+
+       options: map of string-string pairs
+              This  column  provides general key/value settings. The supported
+              options are described individually below.
+
+     ACL configuration options:
+
+       options : log-related: optional string
+              If set to true, then log when reply or related traffic is admit‐
+              ted from a stateful ACL. In order for this option  to  function,
+              the  log option must be set to true and a label must be set, and
+              it must be unique to the ACL. The label is necessary  as  it  is
+              the  only  means  to associate the reply traffic with the ACL to
+              which it belongs. It must be unique, because otherwise it is am‐
+              biguous which ACL will be matched. Note: If this option  is  en‐
+              abled,  an  extra  flow is installed in order to log the related
+              traffic. Therefore, if this is enabled on all ACLs, then the to‐
+              tal number of flows necessary to log the ACL traffic is doubled,
+              compared to if this option is not enabled.
+
+       external_ids: map of string-string pairs
+              See External IDs at the beginning of this document.
+
+Logical_Router TABLE
+       Each row represents one L3 logical router.
+
+   Summary:
+       ports                         set of Logical_Router_Ports
+       static_routes                 set of Logical_Router_Static_Routes
+       policies                      set of Logical_Router_Policys
+       enabled                       optional boolean
+       nat                           set of NATs
+       load_balancer                 set of weak reference to Load_Balancers
+       load_balancer_group           set of Load_Balancer_Groups
+       Naming:
+         name                        string
+         external_ids : neutron:router_name
+                                     optional string
+       copp                          optional weak reference to Copp
+       Options:
+         options : chassis           optional string
+         options : dnat_force_snat_ip
+                                     optional string
+         options : lb_force_snat_ip  optional string
+         options : mcast_relay       optional string, either true or false
+         options : dynamic_neigh_routers
+                                     optional string, either true or false
+         options : always_learn_from_arp_request
+                                     optional string, either true or false
+         options : requested-tnl-key
+                                     optional string, containing  an  integer,
+                                     in range 1 to 16,777,215
+         options : snat-ct-zone      optional  string,  containing an integer,
+                                     in range 0 to 65,535
+         options : mac_binding_age_threshold
+                                     optional string, containing  an  integer,
+                                     in range 0 to 4,294,967,295
+       Common Columns:
+         external_ids                map of string-string pairs
+
+   Details:
+       ports: set of Logical_Router_Ports
+              The router’s ports.
+
+       static_routes: set of Logical_Router_Static_Routes
+              Zero or more static routes for the router.
+
+       policies: set of Logical_Router_Policys
+              Zero or more routing policies for the router.
+
+       enabled: optional boolean
+              This  column  is  used  to administratively set router state. If
+              this column is empty or is set to true, the router  is  enabled.
+              If  this  column is set to false, the router is disabled. A dis‐
+              abled router has all ingress and egress traffic dropped.
+
+       nat: set of NATs
+              One or more NAT rules for the router. NAT  rules  only  work  on
+              Gateway  routers,  and  on distributed routers with one and only
+              one distributed gateway port.
+
+       load_balancer: set of weak reference to Load_Balancers
+              Set of load balancers associated to this  logical  router.  Load
+              balancer Load balancer rules only work on the Gateway routers or
+              routers with one and only one distributed gateway port.
+
+       load_balancer_group: set of Load_Balancer_Groups
+              Set of load balancers groups associated to this logical router.
+
+     Naming:
+
+       These columns provide names for the logical router. From OVN’s perspec‐
+       tive, these names have no special meaning or purpose other than to pro‐
+       vide  convenience  for  human interaction with the northbound database.
+       There is no requirement for the name to be unique. (For a unique  iden‐
+       tifier for a logical router, use its row UUID.)
+
+       (Originally, name was intended to serve the purpose of a human-friendly
+       name,  but the Neutron integration used it to uniquely identify its own
+       router object, in the format neutron-uuid. Later  on,  Neutron  started
+       propagating   the  friendly  name  of  a  router  as  external_ids:neu�‐
+       tron:router_name. Perhaps this can be cleaned up someday.)
+
+       name: string
+              A name for the logical router.
+
+       external_ids : neutron:router_name: optional string
+              Another name for the logical router.
+
+       copp: optional weak reference to Copp
+              The control plane protection policy from table Copp used for me‐
+              tering packets sent to ovn-controller from logical ports of this
+              router.
+
+     Options:
+
+       Additional options for the logical router.
+
+       options : chassis: optional string
+              If set, indicates that the logical router in question is a Gate‐
+              way router (which is centralized) and resides in the  set  chas‐
+              sis.  The  same value is also used by ovn-controller to uniquely
+              identify the chassis in the OVN deployment and comes from exter�‐
+              nal_ids:system-id in  the  Open_vSwitch  table  of  Open_vSwitch
+              database.
+
+              The Gateway router can only be connected to a distributed router
+              via  a switch if SNAT and DNAT are to be configured in the Gate‐
+              way router.
+
+       options : dnat_force_snat_ip: optional string
+              If set, indicates a set of IP addresses to use to force  SNAT  a
+              packet  that has already been DNATed in the gateway router. When
+              multiple gateway routers are configured,  a  packet  can  poten‐
+              tially  enter any of the gateway router, get DNATted and eventu‐
+              ally reach the logical switch port. For the return traffic to go
+              back to the same gateway  router  (for  unDNATing),  the  packet
+              needs a SNAT in the first place. This can be achieved by setting
+              the  above  option  with a gateway specific set of IP addresses.
+              This option may have exactly one IPv4 and/or one IPv6 address on
+              it, separated by a a space.
+
+       options : lb_force_snat_ip: optional string
+              If set, this option can take two possible type of values. Either
+              a set of IP addresses or the string value - router_ip.
+
+              If a set of IP addresses are configured, it indicates to use  to
+              force  SNAT  a packet that has already been load-balanced in the
+              gateway router. When multiple gateway routers are configured,  a
+              packet  can  potentially  enter  any of the gateway routers, get
+              DNATted as part of the load-balancing and eventually  reach  the
+              logical  switch  port.  For the return traffic to go back to the
+              same gateway router (for unDNATing), the packet needs a SNAT  in
+              the  first  place. This can be achieved by setting the above op‐
+              tion with a gateway specific set of IP  addresses.  This  option
+              may  have  exactly one IPv4 and/or one IPv6 address on it, sepa‐
+              rated by a space character.
+
+              If it is configured with the value router_ip, then the load bal‐
+              anced packet is SNATed with the IP of router port  (attached  to
+              the gateway router) selected as the destination after taking the
+              routing decision.
+
+       options : mcast_relay: optional string, either true or false
+              Enables/disables  IP  multicast  relay  between logical switches
+              connected to the logical router. Default: False.
+
+       options : dynamic_neigh_routers: optional string, either true or false
+              If set to true, the router will resolve  neighbor  routers’  MAC
+              addresses  only by dynamic ARP/ND, instead of prepopulating sta‐
+              tic mappings for all neighbor routers in the  ARP/ND  Resolution
+              stage.  This  reduces  number of flows, but requires ARP/ND mes‐
+              sages to resolve the IP-MAC bindings when needed. It is false by
+              default. It is recommended to set to true when a large number of
+              logical routers are connected to the  same  logical  switch  but
+              most  of  them never need to send traffic between each other. By
+              default, ovn-northd does not create mappings  to  NAT  and  load
+              balancer addresess. However, for NAT and load balancer addresses
+              that  have  the  add_route  option added, ovn-northd will create
+              logical flows that map NAT and load balancer IP addresses to the
+              appropriate MAC address. Setting dynamic_neigh_routers  to  true
+              will prevent the automatic creation of these logical flows.
+
+       options : always_learn_from_arp_request: optional string, either true
+       or false
+              This  option  controls  the  behavior when handling IPv4 ARP re‐
+              quests or IPv6 ND-NS packets - whether a dynamic  neighbor  (MAC
+              binding) entry is added/updated.
+
+              true  -  Always learn the MAC-IP binding, and add/update the MAC
+              binding entry.
+
+              false - If there is a MAC binding for that IP  and  the  MAC  is
+              different,  or, if TPA of ARP request belongs to any router port
+              on this router, then update/add that MAC-IP binding.  Otherwise,
+              don’t update/add entries.
+
+              It  is true by default. It is recommended to set to false when a
+              large number of logical routers are connected to the same  logi‐
+              cal  switch  but most of them never need to send traffic between
+              each other, to reduce the size of the MAC binding table.
+
+       options : requested-tnl-key: optional string, containing an integer, in
+       range 1 to 16,777,215
+              Configures the datapath tunnel key for the logical router.  This
+              is  not  needed because ovn-northd will assign an unique key for
+              each  datapath  by  itself.  However,  if  it   is   configured,
+              ovn-northd honors the configured value.
+
+       options : snat-ct-zone: optional string, containing an integer, in
+       range 0 to 65,535
+              Use the requested conntrack zone for SNAT with this router. This
+              can  be useful if egress traffic from the host running OVN comes
+              from both OVN and other sources. This way,  OVN  and  the  other
+              sources can make use of the same conntrack zone.
+
+       options : mac_binding_age_threshold: optional string, containing an in‐
+       teger, in range 0 to 4,294,967,295
+              MAC  binding  aging  threshold value in seconds. MAC binding ex‐
+              ceeding this timeout will be automatically  removed.  The  value
+              defaults to 0, which means disabled.
+
+     Common Columns:
+
+       external_ids: map of string-string pairs
+              See External IDs at the beginning of this document.
+
+QoS TABLE
+       Each  row  in  this  table represents one QoS rule for a logical switch
+       that points to it through its qos_rules column. Two types  of  QoS  are
+       supported: DSCP marking and metering. A match with the highest-priority
+       will  have  QoS  applied to it. If the action column is specified, then
+       matching packets will have DSCP marking applied. If the bandwidth  col‐
+       umn is specified, then matching packets will have metering applied. ac�‐
+       tion  and  bandwidth are not exclusive, so both marking and metering by
+       defined for the same QoS entry. If no row  matches,  packets  will  not
+       have any QoS applied.
+
+   Summary:
+       priority                      integer, in range 0 to 32,767
+       direction                     string, either from-lport or to-lport
+       match                         string
+       action                        map  of string-integer pairs, key must be
+                                     dscp, value in range 0 to 63
+       bandwidth                     map of string-integer pairs,  key  either
+                                     burst  or  rate,  value  in  range  1  to
+                                     4,294,967,295
+       external_ids                  map of string-string pairs
+
+   Details:
+       priority: integer, in range 0 to 32,767
+              The QoS rule’s priority. Rules with numerically higher  priority
+              take precedence over those with lower. If two QoS rules with the
+              same  priority  both  match,  then the one actually applied to a
+              packet is undefined.
+
+       direction: string, either from-lport or to-lport
+              The value of this field is similar to  ACL  column  in  the  OVN
+              Northbound database’s ACL table.
+
+       match: string
+              The packets that the QoS rules should match, in the same expres‐
+              sion  language  used  for the match column in the OVN Southbound
+              database’s Logical_Flow table. The outport logical port is  only
+              available  in the to-lport direction (the inport is available in
+              both directions).
+
+       action: map of string-integer pairs, key must be dscp, value in range 0
+       to 63
+              When specified, matching flows will have DSCP marking applied.
+
+              •      dscp: The value of this action should be in the range  of
+                     0 to 63 (inclusive).
+
+       bandwidth: map of string-integer pairs, key either burst or rate, value
+       in range 1 to 4,294,967,295
+              When  specified,  matching  packets will have bandwidth metering
+              applied. Traffic over the limit will be dropped.
+
+              •      rate: The value of rate limit in kbps.
+
+              •      burst: The value of burst rate limit in kilobits. This is
+                     optional and needs to specify the rate.
+
+       external_ids: map of string-string pairs
+              See External IDs at the beginning of this document.
+
+Mirror TABLE
+       Each row in this table represents a mirror that can be  used  for  port
+       mirroring.  These  mirrors are referenced by the mirror_rules column in
+       the Logical_Switch_Port table.
+
+   Summary:
+       name                          string (must be unique within table)
+       filter                        string,  one  of  both,  from-lport,   or
+                                     to-lport
+       sink                          string
+       type                          string, one of erspan, gre, or local
+       index                         integer
+       external_ids                  map of string-string pairs
+
+   Details:
+       name: string (must be unique within table)
+              Represents the name of the mirror.
+
+       filter: string, one of both, from-lport, or to-lport
+              The  value  of  this  field represents selection criteria of the
+              mirror. to-lport mirrors the packets coming into  logical  port.
+              from-lport  mirrors  the packets going out of logical port. both
+              mirrors for both directions.
+
+       sink: string
+              The value of this field represents the destination/sink  of  the
+              mirror.  If  the  type is gre or erspan, the value indicates the
+              tunnel remote IP (either IPv4 or IPv6). For  a  type  of  local,
+              this  field  defines  a  local  interface on the OVS integration
+              bridge to be used as the mirror destination. The interface  must
+              possess external-ids:mirror-id that matches this string.
+
+       type: string, one of erspan, gre, or local
+              The  value of this field specifies the mirror type - gre, erspan
+              or local.
+
+       index: integer
+              The value of this field represents the tunnel ID. If the config‐
+              ured tunnel type is gre, this field represents the GRE key value
+              and if the configured tunnel type is erspan  it  represents  the
+              erspan_idx value. It is ignored if the type is local.
+
+       external_ids: map of string-string pairs
+              See External IDs at the beginning of this document.
+
+Meter TABLE
+       Each  row  in this table represents a meter that can be used for QoS or
+       rate-limiting.
+
+   Summary:
+       name                          string (must be unique within table)
+       unit                          string, either kbps or pktps
+       bands                         set of 1 or more Meter_Bands
+       fair                          optional boolean
+       external_ids                  map of string-string pairs
+
+   Details:
+       name: string (must be unique within table)
+              A name for this meter.
+
+              Names that begin with "__" (two underscores)  are  reserved  for
+              OVN internal use and should not be added manually.
+
+       unit: string, either kbps or pktps
+              The  unit for rate and burst_rate parameters in the bands entry.
+              kbps specifies kilobits per second, and pktps specifies  packets
+              per second.
+
+       bands: set of 1 or more Meter_Bands
+              The bands associated with this meter. Each band specifies a rate
+              above  which  the band is to take the action action. If multiple
+              bands’ rates are exceeded, then the band with the  highest  rate
+              among the exceeded bands is selected.
+
+       fair: optional boolean
+              This  column is used to further describe the desired behavior of
+              the meter when there are multiple references to it. If this col‐
+              umn is empty or is set to false, the rate will be shared  across
+              all  rows  that  refer  to the same Meter name. Conversely, when
+              this column is set to true, each user of the same Meter will  be
+              rate-limited on its own.
+
+       external_ids: map of string-string pairs
+              See External IDs at the beginning of this document.
+
+Meter_Band TABLE
+       Each row in this table represents a meter band which specifies the rate
+       above  which  the  configured action should be applied. These bands are
+       referenced by the bands column in the Meter table.
+
+   Summary:
+       action                        string, must be drop
+       rate                          integer, in range 1 to 4,294,967,295
+       burst_size                    integer, in range 0 to 4,294,967,295
+       external_ids                  map of string-string pairs
+
+   Details:
+       action: string, must be drop
+              The action to execute when this band matches. The only supported
+              action is drop.
+
+       rate: integer, in range 1 to 4,294,967,295
+              The rate limit for this band, in kilobits per second or bits per
+              second, depending on whether the parent Meter entry’s unit  col‐
+              umn specified kbps or pktps.
+
+       burst_size: integer, in range 0 to 4,294,967,295
+              The  maximum  burst allowed for the band in kilobits or packets,
+              depending on whether kbps or pktps was selected  in  the  parent
+              Meter  entry’s  unit  column. If the size is zero, the switch is
+              free to select some reasonable value depending on its configura‐
+              tion.
+
+       external_ids: map of string-string pairs
+              See External IDs at the beginning of this document.
+
+Logical_Router_Port TABLE
+       A port within an L3 logical router.
+
+       Exactly one Logical_Router row must reference a  given  logical  router
+       port.
+
+   Summary:
+       name                          string (must be unique within table)
+       networks                      set of 1 or more strings
+       mac                           string
+       enabled                       optional boolean
+       Distributed Gateway Ports:
+         ha_chassis_group            optional HA_Chassis_Group
+         gateway_chassis             set of Gateway_Chassises
+         Options for Physical VLAN MTU Issues:
+            options : reside-on-redirect-chassis
+                                     optional string, either true or false
+            options : redirect-type  optional  string, either bridged or over�‐
+                                     lay
+       ipv6_prefix                   set of strings
+       ipv6_ra_configs:
+         ipv6_ra_configs : address_mode
+                                     optional string
+         ipv6_ra_configs : router_preference
+                                     optional string
+         ipv6_ra_configs : route_info
+                                     optional string
+         ipv6_ra_configs : mtu       optional string
+         ipv6_ra_configs : send_periodic
+                                     optional string
+         ipv6_ra_configs : max_interval
+                                     optional string
+         ipv6_ra_configs : min_interval
+                                     optional string
+         ipv6_ra_configs : rdnss     optional string
+         ipv6_ra_configs : dnssl     optional string
+       Options:
+         options : mcast_flood       optional string, either true or false
+         options : requested-tnl-key
+                                     optional string, containing  an  integer,
+                                     in range 1 to 32,767
+         options : prefix_delegation
+                                     optional string, either true or false
+         options : prefix            optional string, either true or false
+         options : route_table       optional string
+         options : gateway_mtu       optional  string,  containing an integer,
+                                     in range 68 to 65,535
+         options : gateway_mtu_bypass
+                                     optional string
+       Attachment:
+         peer                        optional string
+       Common Columns:
+         external_ids                map of string-string pairs
+
+   Details:
+       name: string (must be unique within table)
+              A name for the logical router port.
+
+              In addition to provide convenience for  human  interaction  with
+              the northbound database, this column is used as reference by its
+              patch port in Logical_Switch_Port or another logical router port
+              in Logical_Router_Port.
+
+              A  logical  router  port may not have the same name as a logical
+              switch port, but the database schema cannot enforce this.
+
+       networks: set of 1 or more strings
+              The IP addresses  and  netmasks  of  the  router.  For  example,
+              192.168.0.1/24   indicates  that  the  router’s  IP  address  is
+              192.168.0.1 and that packets destined to 192.168.0.x  should  be
+              routed to this port.
+
+              A  logical  router  port  always  adds a link-local IPv6 address
+              (fe80::/64) automatically generated from the interface’s MAC ad‐
+              dress using the modified EUI-64 format.
+
+       mac: string
+              The Ethernet address that belongs to this router port.
+
+       enabled: optional boolean
+              This column is used to administratively set port state. If  this
+              column  is empty or is set to true, the port is enabled. If this
+              column is set to false, the port is disabled.  A  disabled  port
+              has all ingress and egress traffic dropped.
+
+     Distributed Gateway Ports:
+
+       Gateways,  as  documented under Gateways in the OVN architecture guide,
+       provide limited connectivity  between  logical  networks  and  physical
+       ones.  OVN  support multiple kinds of gateways. The Logical_Router_Port
+       table can be used two different ways to configure  distributed  gateway
+       ports,  which are one kind of gateway. These two forms of configuration
+       exist for historical reasons. Both of them produce the same kind of OVN
+       southbound records and the same behavior in practice.
+
+       If either of these are set, this logical router port represents a  dis‐
+       tributed  gateway  port  that  connects this router to a logical switch
+       with a localnet port or a connection to another OVN deployment.
+
+       Also mentioned in the OVN architecture guide, distributed gateway ports
+       can also be used for scalability reasons in deployments  where  logical
+       switches are dedicated to chassises rather than distributed.
+
+       The preferred way to configure a gateway is ha_chassis_group, but gate�‐
+       way_chassis  is  also supported for backward compatibility. Only one of
+       these should be set at a time on a given LRP, since they configure  the
+       same features.
+
+       Even when a gateway is configured, the logical router port still effec‐
+       tively resides on each chassis. However, due to the implications of the
+       use of L2 learning in the physical network, as well as the need to sup‐
+       port advanced features such as one-to-many NAT (aka IP masquerading), a
+       subset  of  the  logical  router processing is handled in a centralized
+       manner on the gateway chassis.
+
+       There can be more than one distributed gateway ports configured on each
+       logical router, each connecting to different L2 segments.  Load-balanc‐
+       ing is not yet supported on logical routers with more than one distrib‐
+       uted gateway ports.
+
+       For  each  distributed  gateway port, it may have more than one gateway
+       chassises. When more than one gateway chassis is  specified,  OVN  only
+       uses  one  at a time. OVN can rely on OVS BFD implementation to monitor
+       gateway connectivity, preferring the highest-priority gateway  that  is
+       online.  Priorities  are  specified  in  the  priority  column of Gate�‐
+       way_Chassis or HA_Chassis.
+
+       ovn-northd programs the external_mac rules specified in  the  LRP’s  LR
+       into  the peer logical switch’s destination lookup on the chassis where
+       the logical_port resides. In addition, the logical router’s MAC address
+       is automatically programmed in the peer  logical  switch’s  destination
+       lookup  flow on the gateway chasssis. If it is desired to generate gra‐
+       tuitous ARPs for NAT addresses, then set the peer LSP’s options:nat-ad�‐
+       dresses to router.
+
+       OVN 20.03 and earlier supported a third way  to  configure  distributed
+       gateway  ports  using  options:redirect-chassis  to specify the gateway
+       chassis. This method is no longer supported. Any remaining users should
+       switch to one of the newer methods instead. A  gateway_chassis  may  be
+       easily  configured  from the command line, e.g. ovn-nbctl lrp-set-gate�‐
+       way-chassis lrp chassis.
+
+       ha_chassis_group: optional HA_Chassis_Group
+              Designates an HA_Chassis_Group to provide  gateway  high  avail‐
+              ability.
+
+       gateway_chassis: set of Gateway_Chassises
+              Designates  one  or  more Gateway_Chassis for the logical router
+              port.
+
+     Options for Physical VLAN MTU Issues:
+
+       MTU issues arise in mixing  tunnels  with  logical  networks  that  are
+       bridged  to  a physical VLAN. For an explanation of the MTU issues, see
+       Physical VLAN MTU Issues in the OVN architecture document. The  follow‐
+       ing  options,  which  are alternatives, provide solutions. Both of them
+       cause packets to be sent over localnet instead  of  tunnels,  but  they
+       differ  in  whether  some  or  all  packets are sent this way. The most
+       prominent  tradeoff  between  these  options  is  that  reside-on-redi�‐
+       rect-chassis  is  easier  to  configure and that redirect-type performs
+       better for east-west traffic.
+
+       options : reside-on-redirect-chassis: optional string, either true or
+       false
+              If set to true, this option forces all traffic across the  logi‐
+              cal  router port to pass through the gateway chassis using a hop
+              across a localnet port. This changes behavior in two ways:
+
+              •      Without this option, east-west  traffic  passes  directly
+                     between  source and destination chassis (or even within a
+                     single chassis, for co-located VMs).  With  this  option,
+                     all east-west traffic passes through the gateway chassis.
+
+              •      Without  this option, traffic between the gateway chassis
+                     and other chassis is encapsulated in tunnels.  With  this
+                     option, traffic passes over a localnet interface.
+
+              This  option  may  usefully  be set only on logical router ports
+              that connect a distributed logical router to  a  logical  switch
+              with VIFs. It should not be set on a distributed gateway port.
+
+              OVN  honors  this  option only if the logical router has one and
+              only one distributed gateway port and if the LRP’s  peer  switch
+              has a localnet port.
+
+       options : redirect-type: optional string, either bridged or overlay
+              If  set  to  bridged  on a distributed gateway port, this option
+              causes OVN to redirect packets to the gateway chassis over a lo�‐
+              calnet port instead of a tunnel. The relevant chassis must share
+              a localnet port.
+
+              This feature requires the administrator or the CMS to  configure
+              each  participating  chassis  with a unique Ethernet address for
+              the logical router by setting  ovn-chassis-mac-mappings  in  the
+              Open vSwitch database, for use by ovn-controller.
+
+              Setting  this  option  to overlay or leaving it unset has no ef‐
+              fect. This option may usefully be  set  only  on  a  distributed
+              gateway  port when there is one and only one distributed gateway
+              port on the logical router. It is otherwise ignored.
+
+       ipv6_prefix: set of strings
+              This column contains IPv6 prefix obtained by  prefix  delegation
+              router according to RFC 3633
+
+     ipv6_ra_configs:
+
+       This column defines the IPv6 ND RA address mode and ND MTU Option to be
+       included by ovn-controller when it replies to the IPv6 Router solicita‐
+       tion requests.
+
+       ipv6_ra_configs : address_mode: optional string
+              The  address mode to be used for IPv6 address configuration. The
+              supported values are:
+
+              •      slaac: Address configuration using  Router  Advertisement
+                     (RA)  packet.  The  IPv6  prefixes  defined  in the Logi�‐
+                     cal_Router_Port table’s networks column will be  included
+                     in the RA’s ICMPv6 option - Prefix information.
+
+              •      dhcpv6_stateful: Address configuration using DHCPv6.
+
+              •      dhcpv6_stateless:  Address configuration using Router Ad‐
+                     vertisement (RA) packet. Other IPv6 options are  provided
+                     by DHCPv6.
+
+       ipv6_ra_configs : router_preference: optional string
+              Default Router Preference (PRF) indicates whether to prefer this
+              router  over  other  default routers (RFC 4191). Possible values
+              are:
+
+              •      HIGH: mapped to 0x01 in RA PRF field
+
+              •      MEDIUM: mapped to 0x00 in RA PRF field
+
+              •      LOW: mapped to 0x11 in RA PRF field
+
+       ipv6_ra_configs : route_info: optional string
+              Route Info is used to configure Route Info Option sent in Router
+              Advertisement according to RFC 4191. Route Info is a comma sepa‐
+              rated string where each field provides  PRF  and  prefix  for  a
+              given route (e.g: HIGH-aef1::11/48,LOW-aef2::11/96) Possible PRF
+              values are:
+
+              •      HIGH: mapped to 0x01 in RA PRF field
+
+              •      MEDIUM: mapped to 0x00 in RA PRF field
+
+              •      LOW: mapped to 0x11 in RA PRF field
+
+       ipv6_ra_configs : mtu: optional string
+              The  recommended  MTU for the link. Default is 0, which means no
+              MTU Option will be included in RA  packet  replied  by  ovn-con‐
+              troller. Per RFC 2460, the mtu value is recommended no less than
+              1280,  so  any mtu value less than 1280 will be considered as no
+              MTU Option.
+
+       ipv6_ra_configs : send_periodic: optional string
+              If set to true, then this router interface will send router  ad‐
+              vertisements periodically. The default is false.
+
+       ipv6_ra_configs : max_interval: optional string
+              The  maximum  number of seconds to wait between sending periodic
+              router advertisements. This option has no effect if ipv6_ra_con�‐
+              figs:send_periodic is false. The default is 600.
+
+       ipv6_ra_configs : min_interval: optional string
+              The minimum number of seconds to wait between  sending  periodic
+              router advertisements. This option has no effect if ipv6_ra_con�‐
+              figs:send_periodic   is  false.  The  default  is  one-third  of
+              ipv6_ra_configs:max_interval, i.e. 200 seconds if  that  key  is
+              unset.
+
+       ipv6_ra_configs : rdnss: optional string
+              IPv6 address of RDNSS server announced in RA packets. At the mo‐
+              ment OVN supports just one RDNSS server.
+
+       ipv6_ra_configs : dnssl: optional string
+              DNS  Search  List  announced  in RA packets. Multiple DNS Search
+              List must be ’comma’ separated (e.g. "a.b.c, d.e.f")
+
+     Options:
+
+       Additional options for the logical router port.
+
+       options : mcast_flood: optional string, either true or false
+              If set to true, multicast traffic (including reports) are uncon‐
+              ditionally forwarded to the specific port.
+
+              This option applies when the port is part of  a  logical  router
+              which has options:mcast_relay set to true.
+
+              Default: false.
+
+       options : requested-tnl-key: optional string, containing an integer, in
+       range 1 to 32,767
+              Configures  the  port  binding  tunnel key for the port. Usually
+              this is not needed because ovn-northd will assign an unique  key
+              for   each  port  by  itself.  However,  if  it  is  configured,
+              ovn-northd honors the configured value.
+
+       options : prefix_delegation: optional string, either true or false
+              If set to true, enable IPv6 prefix delegation state  machine  on
+              this  logical  router  port (RFC3633). IPv6 prefix delegation is
+              available just on a gateway router or on a gateway router port.
+
+       options : prefix: optional string, either true or false
+              If set to true, this interface will receive an IPv6  prefix  ac‐
+              cording to RFC3663
+
+       options : route_table: optional string
+              Designates  lookup  Logical_Router_Static_Routes  with specified
+              route_table value. Routes to directly  connected  networks  from
+              same  Logical  Router  and routes without route_table option set
+              have higher priority than routes with route_table option set.
+
+       options : gateway_mtu: optional string, containing an integer, in range
+       68 to 65,535
+              If set, logical flows will be added to router pipeline to  check
+              packet  length.  If packet length is greater than the value set,
+              ICMPv4 type 3 (Destination Unreachable)  code  4  (Fragmentation
+              Needed  and Don’t Fragment was Set) or ICMPv6 type 2 (Packet Too
+              Big) code 0 (no route to destination) packets will be generated.
+              This allows for Path MTU Discovery.
+
+       options : gateway_mtu_bypass: optional string
+              When configured, represents a match expression, in the same  ex‐
+              pression  language  used  for the match column in the OVN South‐
+              bound database’s Logical_Flow table. Packets matching  this  ex‐
+              pression will bypass the length check configured through the op�‐
+              tions:gateway_mtu option.
+
+     Attachment:
+
+       A given router port serves one of two purposes:
+
+              •      To attach a logical switch to a logical router. A logical
+                     router  port  of  this  type is referenced by exactly one
+                     Logical_Switch_Port of type router. The value of name  is
+                     set   as   router-port   in   column   options  of  Logi�‐
+                     cal_Switch_Port. In this case peer column is empty.
+
+              •      To connect one logical router to another. This requires a
+                     pair of logical router ports, each connected to a differ‐
+                     ent router. Each router port in the  pair  specifies  the
+                     other in its peer column. No Logical_Switch refers to the
+                     router port.
+
+       peer: optional string
+              For  a  router  port  used  to connect two logical routers, this
+              identifies the other router port in the pair by name.
+
+              For a router port attached to a logical switch, this  column  is
+              empty.
+
+     Common Columns:
+
+       external_ids: map of string-string pairs
+              See External IDs at the beginning of this document.
+
+              The  ovn-northd  program  copies all these pairs into the exter�‐
+              nal_ids column of the Port_Binding table in OVN_Southbound data‐
+              base.
+
+Logical_Router_Static_Route TABLE
+       Each record represents a static route.
+
+       When multiple routes match a packet, the longest-prefix match  is  cho‐
+       sen.  For  a  given  prefix  length, a dst-ip route is preferred over a
+       src-ip route.
+
+       When there are ECMP routes, i.e. multiple routes with same  prefix  and
+       policy,  one  of  them will be selected based on the 5-tuple hashing of
+       the packet header.
+
+   Summary:
+       ip_prefix                     string
+       policy                        optional string, either dst-ip or src-ip
+       nexthop                       string
+       output_port                   optional string
+       bfd                           optional weak reference to BFD
+       route_table                   string
+       external_ids : ic-learned-route
+                                     optional string
+       Common Columns:
+         external_ids                map of string-string pairs
+       Common options:
+         options                     map of string-string pairs
+         options : ecmp_symmetric_reply
+                                     optional string
+         options : origin            optional string
+
+   Details:
+       ip_prefix: string
+              IP prefix of this route (e.g. 192.168.100.0/24).
+
+       policy: optional string, either dst-ip or src-ip
+              If it is specified, this setting describes the  policy  used  to
+              make  routing decisions. This setting must be one of the follow‐
+              ing strings:
+
+              •      src-ip: This policy sends the packet to the nexthop  when
+                     the packet’s source IP address matches ip_prefix.
+
+              •      dst-ip:  This policy sends the packet to the nexthop when
+                     the packet’s destination IP address matches ip_prefix.
+
+              If not specified, the default is dst-ip.
+
+       nexthop: string
+              Nexthop IP address for this route. Nexthop IP address should  be
+              the IP address of a connected router port or the IP address of a
+              logical port or can be set to discard for dropping packets which
+              match the given route.
+
+       output_port: optional string
+              The  name  of the Logical_Router_Port via which the packet needs
+              to be sent out. This is optional and  when  not  specified,  OVN
+              will  automatically  figure  this out based on the nexthop. When
+              this is specified and there are multiple  IP  addresses  on  the
+              router  port and none of them are in the same subnet of nexthop,
+              OVN chooses the first IP address as the one via which  the  nex�‐
+              thop is reachable.
+
+       bfd: optional weak reference to BFD
+              Reference to BFD row if the route has associated a BFD session
+
+       route_table: string
+              Any  string to place route to separate routing table. If Logical
+              Router Port has configured value  in  options:route_table  other
+              than empty string, OVN performs route lookup for all packets en‐
+              tering  Logical  Router  ingress  pipeline from this port in the
+              following manner:
+
+              •      1. First lookup among  "global"  routes:  routes  without
+                     route_table  value  set  and routes to directly connected
+                     networks.
+
+              •      2. Next lookup among routes with same  route_table  value
+                     as specified in LRP’s options:route_table field.
+
+       external_ids : ic-learned-route: optional string
+              ovn-ic  populates  this  key  if  the  route is learned from the
+              global OVN_IC_Southbound database. In this case the  value  will
+              be   set  to  the  uuid  of  the  row  in  Route  table  of  the
+              OVN_IC_Southbound database.
+
+     Common Columns:
+
+       external_ids: map of string-string pairs
+              See External IDs at the beginning of this document.
+
+     Common options:
+
+       options: map of string-string pairs
+              This column provides general key/value settings.  The  supported
+              options are described individually below.
+
+       options : ecmp_symmetric_reply: optional string
+              If true, then new traffic that arrives over this route will have
+              its  reply  traffic bypass ECMP route selection and will be sent
+              out this route instead. Note  that  this  option  overrides  any
+              rules  set  in the Logical_Router_policy table. This option only
+              works on gateway  routers  (routers  that  have  options:chassis
+              set).
+
+       options : origin: optional string
+              In case ovn-interconnection has been learned this route, it will
+              have its origin set: either "connected" or "static". This key is
+              supposed  to  be  written only by ovn-ic daemon. ovn-northd then
+              checks  this  value  when  generating   Logical   Flows.   Logi�‐
+              cal_Router_Static_Route  records with same ip_prefix within same
+              Logical Router will have next lookup order based on  origin  key
+              value:
+
+              1.  connected
+
+              2.  static
+Logical_Router_Policy TABLE
+       Each  row  in  this  table  represents one routing policy for a logical
+       router that points to it through its policies column. The action column
+       for the highest-priority  matching  row  in  this  table  determines  a
+       packet’s  treatment. If no row matches, packets are allowed by default.
+       (Default-deny treatment is possible: add a rule with priority 0,  1  as
+       match, and drop as action.)
+
+   Summary:
+       priority                      integer, in range 0 to 32,767
+       match                         string
+       action                        string, one of allow, drop, or reroute
+       nexthop                       optional string
+       nexthops                      set of strings
+       options : pkt_mark            optional string
+       Common Columns:
+         external_ids                map of string-string pairs
+
+   Details:
+       priority: integer, in range 0 to 32,767
+              The  routing  policy’s  priority.  Rules with numerically higher
+              priority take precedence  over  those  with  lower.  A  rule  is
+              uniquely identified by the priority and match string.
+
+       match: string
+              The  packets  that  the routing policy should match, in the same
+              expression language used for the match column in the OVN  South‐
+              bound database’s Logical_Flow table.
+
+              By  default all traffic is allowed. When writing a more restric‐
+              tive policy, it is important to remember to allow flows such  as
+              ARP and IPv6 neighbor discovery packets.
+
+       action: string, one of allow, drop, or reroute
+              The action to take when the routing policy matches:
+
+              •      allow: Forward the packet.
+
+              •      drop: Silently drop the packet.
+
+              •      reroute: Reroute packet to nexthop or nexthops.
+
+       nexthop: optional string
+              Note: This column is deprecated in favor of nexthops.
+
+              Next-hop  IP  address for this route, which should be the IP ad‐
+              dress of a connected router port or the IP address of a  logical
+              port.
+
+       nexthops: set of strings
+              Next-hop  ECMP  IP addresses for this route. Each IP in the list
+              should be the IP address of a connected router port  or  the  IP
+              address of a logical port.
+
+              One IP from the list is selected as next hop.
+
+       options : pkt_mark: optional string
+              Marks the packet with the value specified when the router policy
+              is applied. CMS can inspect this packet marker and take some de‐
+              cisions  if desired. This value is not preserved when the packet
+              goes out on the wire.
+
+     Common Columns:
+
+       external_ids: map of string-string pairs
+              See External IDs at the beginning of this document.
+
+NAT TABLE
+       Each record represents a NAT rule.
+
+   Summary:
+       type                          string, one of  dnat,  dnat_and_snat,  or
+                                     snat
+       external_ip                   string
+       external_mac                  optional string
+       external_port_range           string
+       logical_ip                    string
+       logical_port                  optional string
+       allowed_ext_ips               optional Address_Set
+       exempted_ext_ips              optional Address_Set
+       gateway_port                  optional    weak   reference   to   Logi�‐
+                                     cal_Router_Port
+       options : stateless           optional string
+       options : add_route           optional string
+       Common Columns:
+         external_ids                map of string-string pairs
+
+   Details:
+       type: string, one of dnat, dnat_and_snat, or snat
+              Type of the NAT rule.
+
+              •      When type is dnat, the externally visible IP address  ex�‐
+                     ternal_ip  is DNATted to the IP address logical_ip in the
+                     logical space.
+
+              •      When type is snat, IP packets with their  source  IP  ad‐
+                     dress that either matches the IP address in logical_ip or
+                     is  in  the network provided by logical_ip is SNATed into
+                     the IP address in external_ip.
+
+              •      When type is dnat_and_snat, the externally visible IP ad‐
+                     dress external_ip is DNATted to the IP address logical_ip
+                     in the logical space. In addition, IP  packets  with  the
+                     source  IP address that matches logical_ip is SNATed into
+                     the IP address in external_ip.
+
+       external_ip: string
+              An IPv4 address.
+
+       external_mac: optional string
+              A MAC address.
+
+              This is only used on the gateway port  on  distributed  routers.
+              This must be specified in order for the NAT rule to be processed
+              in a distributed manner on all chassis. If this is not specified
+              for  a NAT rule on a distributed router, then this NAT rule will
+              be processed in a centralized manner on  the  gateway  port  in‐
+              stance on the gateway chassis.
+
+              This  MAC  address must be unique on the logical switch that the
+              gateway port is attached to. If the MAC address used on the log�‐
+              ical_port is globally unique, then that MAC address can be spec‐
+              ified as this external_mac.
+
+       external_port_range: string
+              L4 source port range
+
+              Range of ports, from which a port number  will  be  picked  that
+              will  replace the source port of to be NATed packet. This is ba‐
+              sically PAT (port address translation).
+
+              Value of the column is in the format, port_lo-port_hi. For exam‐
+              ple: external_port_range : "1-30000"
+
+              Valid range of ports is 1-65535.
+
+       logical_ip: string
+              An IPv4 network (e.g 192.168.1.0/24) or an IPv4 address.
+
+       logical_port: optional string
+              The name of the logical port where the logical_ip resides.
+
+              This is only used on distributed routers. This must be specified
+              in order for the NAT rule to be processed in a distributed  man‐
+              ner on all chassis. If this is not specified for a NAT rule on a
+              distributed  router,  then  this NAT rule will be processed in a
+              centralized manner on the gateway port instance on  the  gateway
+              chassis.
+
+       allowed_ext_ips: optional Address_Set
+              It  represents  Address Set of external ips that NAT rule is ap‐
+              plicable to. For SNAT type NAT rules, this refers to destination
+              addresses. For DNAT type NAT rules, this refers  to  source  ad‐
+              dresses.
+
+              This  configuration overrides the default NAT behavior of apply‐
+              ing a rule solely based on internal IP. Without this  configura‐
+              tion,  NAT  happens  without  considering  the  external IP (i.e
+              dest/source for snat/dnat type rule).  With  this  configuration
+              NAT  rule is applied ONLY if external ip is in the input Address
+              Set.
+
+       exempted_ext_ips: optional Address_Set
+              It represents Address Set of external ips that NAT rule  is  NOT
+              applicable  to. For SNAT type NAT rules, this refers to destina‐
+              tion addresses. For DNAT type NAT rules, this refers  to  source
+              addresses.
+
+              This  configuration overrides the default NAT behavior of apply‐
+              ing a rule solely based on internal IP. Without this  configura‐
+              tion,  NAT  happens  without  considering  the  external IP (i.e
+              dest/source for snat/dnat type rule).  With  this  configuration
+              NAT  rule  is NOT applied if external ip is in the input Address
+              Set.
+
+              If there are NAT rules in a logical router with  overlapping  IP
+              prefixes  (including /32), then usage of exempted_ext_ips should
+              be avoided in following scenario.  a.  SNAT  rule  (let  us  say
+              RULE1)  with logical_ip PREFIX/MASK (let us say 50.0.0.0/24). b.
+              SNAT rule (let us say RULE2) with logical_ip PREFIX/MASK+1  (let
+              us  say  50.0.0.0/25). c. Now, if exempted_ext_ips is associated
+              with RULE2, then a logical ip which matches both 50.0.0.0/24 and
+              50.0.0.0/25 may get the RULE2 applied to it instead of RULE1.
+
+              allowed_ext_ips and exempted_ext_ips are mutually  exclusive  to
+              each  other.  If  both Address Sets are set for a rule, then the
+              NAT rule is not considered.
+
+       gateway_port: optional weak reference to Logical_Router_Port
+              A distributed gateway  port  in  the  Logical_Router_Port  table
+              where the NAT rule needs to be applied.
+
+              When multiple distributed gateway ports are configured on a Log�‐
+              ical_Router,  applying  a  NAT  rule  at each of the distributed
+              gateway ports might not be desired. Consider the  case  where  a
+              logical router has 2 distributed gateway port, one with networks
+              50.0.0.10/24  and  the  other with networks 60.0.0.10/24. If the
+              logical  router  has  a  NAT  rule  of  type  snat,   logical_ip
+              10.1.1.0/24  and  external_ip 50.1.1.20/24, the rule needs to be
+              selectively applied on matching packets entering/leaving through
+              the distributed gateway port with networks 50.0.0.10/24.
+
+              When a logical router has multiple distributed gateway ports and
+              this column is not set for a NAT rule, then the rule will be ap‐
+              plied at the distributed gateway port which is in the same  net‐
+              work  as  the external_ip of the NAT rule, if such a router port
+              exists. If logical router has a single distributed gateway  port
+              and  this column is not set for a NAT rule, the rule will be ap‐
+              plied at the distributed gateway port even if the router port is
+              not in the same network as the external_ip of the NAT rule.
+
+       options : stateless: optional string
+              Indicates if a dnat_and_snat  rule  should  lead  to  connection
+              tracking state or not.
+
+       options : add_route: optional string
+              If  set  to  true, then neighbor routers will have logical flows
+              added that will allow for routing to the NAT  address.  It  also
+              will  have  ARP  resolution logical flows added. By setting this
+              option,  it  means  there  is  no  reason  to  create  a   Logi�‐
+              cal_Router_Static_Route  from  neighbor  routers to this NAT ad‐
+              dress. It also means that no ARP request is required for  neigh‐
+              bor  routers  to  learn the IP-MAC mapping for this NAT address.
+              This option only applies to NATs of type dnat and dnat_and_snat.
+              For more information about what flows are added for  IP  routes,
+              please see the ovn-northd manpage section on IP Routing.
+
+     Common Columns:
+
+       external_ids: map of string-string pairs
+              See External IDs at the beginning of this document.
+
+DHCP_Options TABLE
+       OVN  implements  native  DHCPv4  support which caters to the common use
+       case of providing an IPv4 address to a booting  instance  by  providing
+       stateless replies to DHCPv4 requests based on statically configured ad‐
+       dress  mappings. To do this it allows a short list of DHCPv4 options to
+       be configured and applied at each compute host running ovn-controller.
+
+       OVN also implements native  DHCPv6  support  which  provides  stateless
+       replies to DHCPv6 requests.
+
+   Summary:
+       cidr                          string
+       DHCPv4 options:
+         Mandatory DHCPv4 options:
+            options : server_id      optional string
+            options : server_mac     optional string
+            options : lease_time     optional  string,  containing an integer,
+                                     in range 0 to 4,294,967,295
+         IPv4 DHCP Options:
+            options : router         optional string
+            options : netmask        optional string
+            options : dns_server     optional string
+            options : log_server     optional string
+            options : lpr_server     optional string
+            options : swap_server    optional string
+            options : policy_filter  optional string
+            options : router_solicitation
+                                     optional string
+            options : nis_server     optional string
+            options : ntp_server     optional string
+            options : netbios_name_server
+                                     optional string
+            options : classless_static_route
+                                     optional string
+            options : ms_classless_static_route
+                                     optional string
+            options : next_server    optional string
+         Boolean DHCP Options:
+            options : ip_forward_enable
+                                     optional string, either 0 or 1
+            options : router_discovery
+                                     optional string, either 0 or 1
+            options : ethernet_encap optional string, either 0 or 1
+         Integer DHCP Options:
+            options : default_ttl    optional string, containing  an  integer,
+                                     in range 0 to 255
+            options : tcp_ttl        optional  string,  containing an integer,
+                                     in range 0 to 255
+            options : mtu            optional string, containing  an  integer,
+                                     in range 68 to 65,535
+            options : T1             optional  string,  containing an integer,
+                                     in range 68 to 4,294,967,295
+            options : T2             optional string, containing  an  integer,
+                                     in range 68 to 4,294,967,295
+            options : arp_cache_timeout
+                                     optional  string,  containing an integer,
+                                     in range 0 to 255
+            options : tcp_keepalive_interval
+                                     optional string, containing  an  integer,
+                                     in range 0 to 255
+            options : netbios_node_type
+                                     optional  string,  containing an integer,
+                                     in range 0 to 255
+         String DHCP Options:
+            options : wpad           optional string
+            options : bootfile_name  optional string
+            options : path_prefix    optional string
+            options : tftp_server_address
+                                     optional string
+            options : hostname       optional string
+            options : domain_name    optional string
+            options : bootfile_name_alt
+                                     optional string
+            options : broadcast_address
+                                     optional string
+         DHCP Options of type host_id:
+            options : tftp_server    optional string
+          DHCP Options of type domains:
+            options : domain_search_list
+                                     optional string
+       DHCPv6 options:
+         Mandatory DHCPv6 options:
+            options : server_id      optional string
+         IPv6 DHCPv6 options:
+            options : dns_server     optional string
+         String DHCPv6 options:
+            options : domain_search  optional string
+            options : dhcpv6_stateless
+                                     optional string
+       Common Columns:
+         external_ids                map of string-string pairs
+
+   Details:
+       cidr: string
+              The DHCPv4/DHCPv6 options will be included if the  logical  port
+              has its IP address in this cidr.
+
+     DHCPv4 options:
+
+       The  CMS  should define the set of DHCPv4 options as key/value pairs in
+       the options column of this table. For ovn-controller to  include  these
+       DHCPv4  options, the dhcpv4_options of Logical_Switch_Port should refer
+       to an entry in this table.
+
+     Mandatory DHCPv4 options:
+
+       The following options must be defined.
+
+       options : server_id: optional string
+              The IP address for the DHCP server to use. This should be in the
+              subnet of the offered IP. This is also included in the DHCP  of‐
+              fer as option 54, ``server identifier.’’
+
+       options : server_mac: optional string
+              The Ethernet address for the DHCP server to use.
+
+       options : lease_time: optional string, containing an integer, in range
+       0 to 4,294,967,295
+              The offered lease time in seconds,
+
+              The DHCPv4 option code for this option is 51.
+
+     IPv4 DHCP Options:
+
+       Below  are  the  supported  DHCPv4 options whose values are an IPv4 ad‐
+       dress, e.g. 192.168.1.1. Some options accept  multiple  IPv4  addresses
+       enclosed  within  curly braces, e.g. {192.168.1.2, 192.168.1.3}. Please
+       refer to RFC 2132 for more details on DHCPv4 options and their codes.
+
+       options : router: optional string
+              The IP address of a gateway for the client to use.  This  should
+              be  in  the subnet of the offered IP. The DHCPv4 option code for
+              this option is 3.
+
+       options : netmask: optional string
+              The DHCPv4 option code for this option is 1.
+
+       options : dns_server: optional string
+              The DHCPv4 option code for this option is 6.
+
+       options : log_server: optional string
+              The DHCPv4 option code for this option is 7.
+
+       options : lpr_server: optional string
+              The DHCPv4 option code for this option is 9.
+
+       options : swap_server: optional string
+              The DHCPv4 option code for this option is 16.
+
+       options : policy_filter: optional string
+              The DHCPv4 option code for this option is 21.
+
+       options : router_solicitation: optional string
+              The DHCPv4 option code for this option is 32.
+
+       options : nis_server: optional string
+              The DHCPv4 option code for this option is 41.
+
+       options : ntp_server: optional string
+              The DHCPv4 option code for this option is 42.
+
+       options : netbios_name_server: optional string
+              The DHCPv4 option code for this option is 44.
+
+       options : classless_static_route: optional string
+              The DHCPv4 option code for this option is 121.
+
+              This option can contain one or more static routes, each of which
+              consists of a destination descriptor and the IP address  of  the
+              router that should be used to reach that destination. Please see
+              RFC 3442 for more details.
+
+              Example: {30.0.0.0/24,10.0.0.10, 0.0.0.0/0,10.0.0.1}
+
+       options : ms_classless_static_route: optional string
+              The  DHCPv4  option  code for this option is 249. This option is
+              similar to classless_static_route supported by Microsoft Windows
+              DHCPv4 clients.
+
+       options : next_server: optional string
+              The DHCPv4 option code for setting the "Next server IP  address"
+              field in the DHCP header.
+
+     Boolean DHCP Options:
+
+       These options accept a Boolean value, expressed as 0 for false or 1 for
+       true.
+
+       options : ip_forward_enable: optional string, either 0 or 1
+              The DHCPv4 option code for this option is 19.
+
+       options : router_discovery: optional string, either 0 or 1
+              The DHCPv4 option code for this option is 31.
+
+       options : ethernet_encap: optional string, either 0 or 1
+              The DHCPv4 option code for this option is 36.
+
+     Integer DHCP Options:
+
+       These options accept a nonnegative integer value.
+
+       options : default_ttl: optional string, containing an integer, in range
+       0 to 255
+              The DHCPv4 option code for this option is 23.
+
+       options : tcp_ttl: optional string, containing an integer, in range 0
+       to 255
+              The DHCPv4 option code for this option is 37.
+
+       options : mtu: optional string, containing an integer, in range 68 to
+       65,535
+              The DHCPv4 option code for this option is 26.
+
+       options : T1: optional string, containing an integer, in range 68 to
+       4,294,967,295
+              This  specifies  the time interval from address assignment until
+              the client begins trying to renew its address. The DHCPv4 option
+              code for this option is 58.
+
+       options : T2: optional string, containing an integer, in range 68 to
+       4,294,967,295
+              This specifies the time interval from address  assignment  until
+              the  client  begins trying to rebind its address. The DHCPv4 op‐
+              tion code for this option is 59.
+
+       options : arp_cache_timeout: optional string, containing an integer, in
+       range 0 to 255
+              The DHCPv4 option code for this option is 35. This option speci‐
+              fies the timeout in seconds for ARP cache entries.
+
+       options : tcp_keepalive_interval: optional string, containing an inte‐
+       ger, in range 0 to 255
+              The DHCPv4 option code for this option is 38. This option speci‐
+              fies the interval that the client TCP should wait before sending
+              a keepalive message on a TCP connection.
+
+       options : netbios_node_type: optional string, containing an integer, in
+       range 0 to 255
+              The DHCPv4 option code for this option is 46.
+
+     String DHCP Options:
+
+       These options accept a string value.
+
+       options : wpad: optional string
+              The DHCPv4 option code for this option is 252.  This  option  is
+              used  as part of web proxy auto discovery to provide a URL for a
+              web proxy.
+
+       options : bootfile_name: optional string
+              The DHCPv4 option code for this option is  67.  This  option  is
+              used to identify a bootfile.
+
+       options : path_prefix: optional string
+              The DHCPv4 option code for this option is 210. In PXELINUX’ case
+              this  option is used to set a common path prefix, instead of de‐
+              riving it from the bootfile name.
+
+       options : tftp_server_address: optional string
+              The DHCPv4 option code for this option is 150. The  option  con‐
+              tains  one  or more IPv4 addresses that the client MAY use. This
+              option is Cisco proprietary, the IEEE standard that matches with
+              this requirement is option 66 (tftp_server).
+
+       options : hostname: optional string
+              The DHCPv4 option code for this option is 12. If set,  indicates
+              the  DHCPv4 option "Hostname". Alternatively, this option can be
+              configured   in   options:hostname   column   in   table   Logi�‐
+              cal_Switch_Port.  If  Hostname  option value is set in both con‐
+              flicting  Logical_Switch_Port  and  DHCP_Options  tables,  Logi�‐
+              cal_Switch_Port takes precedence.
+
+       options : domain_name: optional string
+              The DHCPv4 option code for this option is 15. This option speci‐
+              fies the domain name that client should use when resolving host‐
+              names via the Domain Name System.
+
+       options : bootfile_name_alt: optional string
+              "bootfile_name_alt"  option  is  used to support iPXE. When both
+              "bootfile_name" and "bootfile_name_alt" are provided by the CMS,
+              "bootfile_name" will be used for option 67 if the  dhcp  request
+              contains  etherboot  option (175), otherwise "bootfile_name_alt"
+              will be used.
+
+       options : broadcast_address: optional string
+              The DHCPv4 option code for this option is 28. This option speci‐
+              fies the IP address used as a broadcast address.
+
+     DHCP Options of type host_id:
+
+       These options accept either an IPv4 address or a string value.
+
+       options : tftp_server: optional string
+              The DHCPv4 option code for this option is 66.
+
+      DHCP Options of type domains:
+
+       These options accept string value which is a comma  separated  list  of
+       domain names. The domain names are encoded based on RFC 1035.
+
+       options : domain_search_list: optional string
+              The DHCPv4 option code for this option is 119.
+
+     DHCPv6 options:
+
+       OVN  also  implements  native DHCPv6 support. The CMS should define the
+       set of DHCPv6 options as key/value pairs.  The  define  DHCPv6  options
+       will  be  included  in  the  DHCPv6  response to the DHCPv6 Solicit/Re‐
+       quest/Confirm packet from the logical ports having the  IPv6  addresses
+       in the cidr.
+
+     Mandatory DHCPv6 options:
+
+       The following options must be defined.
+
+       options : server_id: optional string
+              The  Ethernet  address  for the DHCP server to use. This is also
+              included in the DHCPv6 reply as option 2, ``Server  Identifier’’
+              to  carry  a  DUID  identifying  a server between a client and a
+              server. ovn-controller defines DUID based on Link-layer  Address
+              [DUID-LL].
+
+     IPv6 DHCPv6 options:
+
+       Below  are  the  supported  DHCPv6 options whose values are an IPv6 ad‐
+       dress, e.g. aef0::4. Some options accept multiple  IPv6  addresses  en‐
+       closed  within  curly  braces, e.g. {aef0::4, aef0::5}. Please refer to
+       RFC 3315 for more details on DHCPv6 options and their codes.
+
+       options : dns_server: optional string
+              The DHCPv6 option code for this option is 23. This option speci‐
+              fies the DNS servers that the VM should use.
+
+     String DHCPv6 options:
+
+       These options accept string values.
+
+       options : domain_search: optional string
+              The DHCPv6 option code for this option is 24. This option speci‐
+              fies the domain search list the client  should  use  to  resolve
+              hostnames with DNS.
+
+              Example: "ovn.org".
+
+       options : dhcpv6_stateless: optional string
+              This  option specifies the OVN native DHCPv6 will work in state‐
+              less mode, which means OVN native DHCPv6 will not offer IPv6 ad‐
+              dresses for VM/VIF ports, but only reply  other  configurations,
+              such  as  DNS  and  domain search list. When setting this option
+              with string value "true", VM/VIF will configure  IPv6  addresses
+              by stateless way. Default value for this option is false.
+
+     Common Columns:
+
+       external_ids: map of string-string pairs
+              See External IDs at the beginning of this document.
+
+Connection TABLE
+       Configuration  for  a  database  connection to an Open vSwitch database
+       (OVSDB) client.
+
+       This table  primarily  configures  the  Open  vSwitch  database  server
+       (ovsdb-server).
+
+       The  Open vSwitch database server can initiate and maintain active con‐
+       nections to remote clients. It can also  listen  for  database  connec‐
+       tions.
+
+   Summary:
+       Core Features:
+         target                      string (must be unique within table)
+       Client Failure Detection and Handling:
+         max_backoff                 optional integer, at least 1,000
+         inactivity_probe            optional integer
+       Status:
+         is_connected                boolean
+         status : last_error         optional string
+         status : state              optional  string, one of ACTIVE, BACKOFF,
+                                     CONNECTING, IDLE, or VOID
+         status : sec_since_connect  optional string, containing  an  integer,
+                                     at least 0
+         status : sec_since_disconnect
+                                     optional  string,  containing an integer,
+                                     at least 0
+         status : locks_held         optional string
+         status : locks_waiting      optional string
+         status : locks_lost         optional string
+         status : n_connections      optional string, containing  an  integer,
+                                     at least 2
+         status : bound_port         optional string, containing an integer
+       Common Columns:
+         external_ids                map of string-string pairs
+         other_config                map of string-string pairs
+
+   Details:
+     Core Features:
+
+       target: string (must be unique within table)
+              Connection methods for clients.
+
+              The following connection methods are currently supported:
+
+              ssl:host[:port]
+                     The  specified  SSL  port  on the host at the given host,
+                     which can either be a DNS name (if built with unbound li‐
+                     brary) or an IP address. A valid SSL  configuration  must
+                     be  provided  when  this form is used, this configuration
+                     can be specified via command-line options or the SSL  ta‐
+                     ble.
+
+                     If port is not specified, it defaults to 6640.
+
+                     SSL  support  is  an  optional feature that is not always
+                     built as part of Open vSwitch.
+
+              tcp:host[:port]
+                     The specified TCP port on the host  at  the  given  host,
+                     which can either be a DNS name (if built with unbound li‐
+                     brary) or an IP address. If host is an IPv6 address, wrap
+                     it in square brackets, e.g. tcp:[::1]:6640.
+
+                     If port is not specified, it defaults to 6640.
+
+              pssl:[port][:host]
+                     Listens  for  SSL  connections on the specified TCP port.
+                     Specify 0 for  port  to  have  the  kernel  automatically
+                     choose  an available port. If host, which can either be a
+                     DNS name (if built with unbound library)  or  an  IP  ad‐
+                     dress,  is  specified, then connections are restricted to
+                     the resolved or specified local IPaddress (either IPv4 or
+                     IPv6 address). If host is an IPv6 address, wrap in square
+                     brackets, e.g. pssl:6640:[::1]. If host is not  specified
+                     then  it listens only on IPv4 (but not IPv6) addresses. A
+                     valid SSL configuration must be provided when  this  form
+                     is  used,  this  can be specified either via command-line
+                     options or the SSL table.
+
+                     If port is not specified, it defaults to 6640.
+
+                     SSL support is an optional feature  that  is  not  always
+                     built as part of Open vSwitch.
+
+              ptcp:[port][:host]
+                     Listens  for connections on the specified TCP port. Spec‐
+                     ify 0 for port to have the kernel automatically choose an
+                     available port. If host, which can either be a  DNS  name
+                     (if  built  with  unbound  library)  or an IP address, is
+                     specified, then connections are  restricted  to  the  re‐
+                     solved or specified local IP address (either IPv4 or IPv6
+                     address).  If  host is an IPv6 address, wrap it in square
+                     brackets, e.g. ptcp:6640:[::1]. If host is not  specified
+                     then it listens only on IPv4 addresses.
+
+                     If port is not specified, it defaults to 6640.
+
+              When  multiple clients are configured, the target values must be
+              unique. Duplicate target values yield unspecified results.
+
+     Client Failure Detection and Handling:
+
+       max_backoff: optional integer, at least 1,000
+              Maximum number of milliseconds to wait  between  connection  at‐
+              tempts. Default is implementation-specific.
+
+       inactivity_probe: optional integer
+              Maximum number of milliseconds of idle time on connection to the
+              client  before  sending  an  inactivity  probe  message. If Open
+              vSwitch does not communicate with the client for  the  specified
+              number  of  seconds,  it will send a probe. If a response is not
+              received for the same additional amount of  time,  Open  vSwitch
+              assumes  the  connection  has been broken and attempts to recon‐
+              nect. Default is implementation-specific. A value of 0  disables
+              inactivity probes.
+
+     Status:
+
+       Key-value pair of is_connected is always updated. Other key-value pairs
+       in the status columns may be updated depends on the target type.
+
+       When target specifies a connection method that listens for inbound con‐
+       nections  (e.g.  ptcp:  or punix:), both n_connections and is_connected
+       may also be updated while the remaining key-value pairs are omitted.
+
+       On the other hand, when target specifies an  outbound  connection,  all
+       key-value  pairs  may  be  updated, except the above-mentioned two key-
+       value pairs associated with inbound connection targets. They are  omit‐
+       ted.
+
+       is_connected: boolean
+              true if currently connected to this client, false otherwise.
+
+       status : last_error: optional string
+              A human-readable description of the last error on the connection
+              to  the  manager; i.e. strerror(errno). This key will exist only
+              if an error has occurred.
+
+       status : state: optional string, one of ACTIVE, BACKOFF, CONNECTING,
+       IDLE, or VOID
+              The state of the connection to the manager:
+
+              VOID   Connection is disabled.
+
+              BACKOFF
+                     Attempting to reconnect at an increasing period.
+
+              CONNECTING
+                     Attempting to connect.
+
+              ACTIVE Connected, remote host responsive.
+
+              IDLE   Connection is idle. Waiting for response to keep-alive.
+
+              These values may change in the future. They  are  provided  only
+              for human consumption.
+
+       status : sec_since_connect: optional string, containing an integer, at
+       least 0
+              The amount of time since this client last successfully connected
+              to the database (in seconds). Value is empty if client has never
+              successfully been connected.
+
+       status : sec_since_disconnect: optional string, containing an integer,
+       at least 0
+              The  amount of time since this client last disconnected from the
+              database (in seconds). Value is empty if client has  never  dis‐
+              connected.
+
+       status : locks_held: optional string
+              Space-separated  list  of the names of OVSDB locks that the con‐
+              nection holds. Omitted if  the  connection  does  not  hold  any
+              locks.
+
+       status : locks_waiting: optional string
+              Space-separated  list  of the names of OVSDB locks that the con‐
+              nection is currently waiting to acquire. Omitted if the  connec‐
+              tion is not waiting for any locks.
+
+       status : locks_lost: optional string
+              Space-separated  list  of the names of OVSDB locks that the con‐
+              nection has had stolen by another OVSDB client.  Omitted  if  no
+              locks have been stolen from this connection.
+
+       status : n_connections: optional string, containing an integer, at
+       least 2
+              When  target  specifies a connection method that listens for in‐
+              bound connections (e.g. ptcp: or pssl:) and more than  one  con‐
+              nection  is  actually  active, the value is the number of active
+              connections. Otherwise, this key-value pair is omitted.
+
+       status : bound_port: optional string, containing an integer
+              When target is ptcp: or pssl:, this is the TCP port on which the
+              OVSDB server is listening. (This  is  particularly  useful  when
+              target  specifies a port of 0, allowing the kernel to choose any
+              available port.)
+
+     Common Columns:
+
+       The overall purpose of these columns is described under Common  Columns
+       at the beginning of this document.
+
+       external_ids: map of string-string pairs
+
+       other_config: map of string-string pairs
+DNS TABLE
+       Each  row  in this table stores the DNS records. The Logical_Switch ta‐
+       ble’s dns_records references these records.
+
+   Summary:
+       records                       map of string-string pairs
+       external_ids                  map of string-string pairs
+
+   Details:
+       records: map of string-string pairs
+              Key-value pair of DNS records with DNS query name as the key and
+              value as a string of IP address(es) separated by comma or space.
+              For PTR requests, the key-value pair can  be  Reverse  IPv4  ad�‐
+              dress.in-addr.arpa  and  the value DNS domain name. For IPv6 ad‐
+              dresses, the key has to be Reverse IPv6 address.ip6.arpa.
+
+              Example:  "vm1.ovn.org" = "10.0.0.4 aef0::4"
+
+              Example:  "4.0.0.10.in-addr.arpa" = "vm1.ovn.org"
+
+       external_ids: map of string-string pairs
+              See External IDs at the beginning of this document.
+
+SSL TABLE
+       SSL configuration for ovn-nb database access.
+
+   Summary:
+       private_key                   string
+       certificate                   string
+       ca_cert                       string
+       bootstrap_ca_cert             boolean
+       ssl_protocols                 string
+       ssl_ciphers                   string
+       Common Columns:
+         external_ids                map of string-string pairs
+
+   Details:
+       private_key: string
+              Name of a PEM file  containing  the  private  key  used  as  the
+              switch’s identity for SSL connections to the controller.
+
+       certificate: string
+              Name  of a PEM file containing a certificate, signed by the cer‐
+              tificate authority (CA) used by the controller and manager, that
+              certifies the switch’s private key,  identifying  a  trustworthy
+              switch.
+
+       ca_cert: string
+              Name  of a PEM file containing the CA certificate used to verify
+              that the switch is connected to a trustworthy controller.
+
+       bootstrap_ca_cert: boolean
+              If set to true, then Open vSwitch will attempt to obtain the  CA
+              certificate  from the controller on its first SSL connection and
+              save it to the named PEM file. If it is successful, it will  im‐
+              mediately  drop  the  connection and reconnect, and from then on
+              all SSL connections  must  be  authenticated  by  a  certificate
+              signed  by the CA certificate thus obtained. This option exposes
+              the SSL connection to a man-in-the-middle attack  obtaining  the
+              initial  CA  certificate.  It may still be useful for bootstrap‐
+              ping.
+
+       ssl_protocols: string
+              List of SSL protocols to be enabled for SSL connections. The de‐
+              fault when this option is omitted is TLSv1,TLSv1.1,TLSv1.2.
+
+       ssl_ciphers: string
+              List of ciphers (in OpenSSL cipher string  format)  to  be  sup‐
+              ported  for  SSL  connections.  The  default when this option is
+              omitted is HIGH:!aNULL:!MD5.
+
+     Common Columns:
+
+       The overall purpose of these columns is described under Common  Columns
+       at the beginning of this document.
+
+       external_ids: map of string-string pairs
+Gateway_Chassis TABLE
+       Association  of  a  chassis to a logical router port. The traffic going
+       out through an specific router port will be redirected to a chassis, or
+       a set of them in high availability configurations.
+
+   Summary:
+       name                          string (must be unique within table)
+       chassis_name                  string
+       priority                      integer, in range 0 to 32,767
+       options                       map of string-string pairs
+       Common Columns:
+         external_ids                map of string-string pairs
+
+   Details:
+       name: string (must be unique within table)
+              Name of the Gateway_Chassis.
+
+              A   suggested,   but   not   required   naming   convention   is
+              ${port_name}_${chassis_name}.
+
+       chassis_name: string
+              Name of the chassis that we want to redirect traffic through for
+              the  associated  logical  router  port. The value must match the
+              name column of the Chassis table in the OVN_Southbound database.
+
+       priority: integer, in range 0 to 32,767
+              This is the priority of a chassis among all Gateway_Chassis  be‐
+              longing to the same logical router port.
+
+       options: map of string-string pairs
+              Reserved for future use.
+
+     Common Columns:
+
+       external_ids: map of string-string pairs
+              See External IDs at the beginning of this document.
+
+HA_Chassis_Group TABLE
+       Table representing a group of chassis which can provide high availabil‐
+       ity  services.  Each  chassis  in the group is represented by the table
+       HA_Chassis. The HA chassis with highest priority will be the master  of
+       this  group. If the master chassis failover is detected, the HA chassis
+       with the next higher priority takes over the responsibility of  provid‐
+       ing  the  HA.  If a distributed gateway router port references a row in
+       this table, then the master HA chassis in this group provides the gate‐
+       way functionality.
+
+   Summary:
+       name                          string (must be unique within table)
+       ha_chassis                    set of HA_Chassises
+       Common Columns:
+         external_ids                map of string-string pairs
+
+   Details:
+       name: string (must be unique within table)
+              Name of the HA_Chassis_Group. Name should be unique.
+
+       ha_chassis: set of HA_Chassises
+              A list of HA chassis which belongs to this group.
+
+     Common Columns:
+
+       external_ids: map of string-string pairs
+              See External IDs at the beginning of this document.
+
+HA_Chassis TABLE
+   Summary:
+       chassis_name                  string
+       priority                      integer, in range 0 to 32,767
+       Common Columns:
+         external_ids                map of string-string pairs
+
+   Details:
+       chassis_name: string
+              Name of the chassis which is part of the HA chassis  group.  The
+              value  must  match  the  name column of the Chassis table in the
+              OVN_Southbound database.
+
+       priority: integer, in range 0 to 32,767
+              Priority of the chassis. Chassis with highest priority  will  be
+              the master.
+
+     Common Columns:
+
+       external_ids: map of string-string pairs
+              See External IDs at the beginning of this document.
+
+BFD TABLE
+       Contains  BFD  parameter  for ovn-controller BFD configuration. OVN BFD
+       implementation is used to provide detection of failures in the path be‐
+       tween adjacent forwarding engines, including the  OVN  interfaces.  OVN
+       BFD  provides link status info to OVN northd in order to update logical
+       flows according to the status of BFD endpoints. In the  current  imple‐
+       mentation  OVN  BFD  is  used to check next-hop status for ECMP routes.
+       Please note BFD table refers to OVN BFD implementation and not  to  OVS
+       legacy one.
+
+   Summary:
+       Configuration:
+         logical_port                string
+         dst_ip                      string
+         min_tx                      optional integer, at least 1
+         min_rx                      optional integer
+         detect_mult                 optional integer, at least 1
+         options                     map of string-string pairs
+         external_ids                map of string-string pairs
+       Status Reporting:
+         status                      optional string, one of admin_down, down,
+                                     init, or up
+
+   Details:
+     Configuration:
+
+       ovn-northd reads configuration from these columns.
+
+       logical_port: string
+              OVN logical port when BFD engine is running.
+
+       dst_ip: string
+              BFD peer IP address.
+
+       min_tx: optional integer, at least 1
+              This  is  the  minimum interval, in milliseconds, that the local
+              system would like to use when transmitting BFD Control  packets,
+              less  any  jitter  applied.  The value zero is reserved. Default
+              value is 1000 ms.
+
+       min_rx: optional integer
+              This is the minimum interval, in milliseconds, between  received
+              BFD  Control  packets that this system is capable of supporting,
+              less any jitter applied by the sender. If this  value  is  zero,
+              the  transmitting system does not want the remote system to send
+              any periodic BFD Control packets.
+
+       detect_mult: optional integer, at least 1
+              Detection time multiplier.  The  negotiated  transmit  interval,
+              multiplied  by  this  value, provides the Detection Time for the
+              receiving system in Asynchronous mode. Default value is 5.
+
+       options: map of string-string pairs
+              Reserved for future use.
+
+       external_ids: map of string-string pairs
+              See External IDs at the beginning of this document.
+
+     Status Reporting:
+
+       ovn-northd writes BFD status into these columns.
+
+       status: optional string, one of admin_down, down, init, or up
+              BFD port logical states. Possible values are:
+
+              •      admin_down
+
+              •      down
+
+              •      init
+
+              •      up
+Static_MAC_Binding TABLE
+       Each record represents a Static_MAC_Binding entry for a logical router.
+
+   Summary:
+       Configuration:
+         logical_port                string
+         ip                          string
+         mac                         string
+         override_dynamic_mac        boolean
+
+   Details:
+     Configuration:
+
+       ovn-northd reads configuration from these columns  and  propagates  the
+       value to SBDB.
+
+       logical_port: string
+              The logical router port for the binding.
+
+       ip: string
+              The bound IP address.
+
+       mac: string
+              The Ethernet address to which the IP is bound.
+
+       override_dynamic_mac: boolean
+              Override dynamically learnt MACs.
+
+Chassis_Template_Var TABLE
+       One  record per chassis, each containing a map, variables, between tem‐
+       plate variable names and their value for that specific chassis. A  tem‐
+       plate variable has a name and potentially different values on different
+       hypervisors  in  the  OVN  cluster. For example, two rows, R1 = (.chas�‐
+       sis=C1, variables={(N: V1)} and R2 = (.chassis=C2, variables={(N:  V2)}
+       will make ovn-controller running on chassis C1 and C2 interpret the to‐
+       ken  N  either  as V1 (on C1) or as V2 (on C2). Users can refer to tem‐
+       plate variables from within other logical components, e.g., within ACL,
+       QoS or Logical_Router_Policy matches  or  from  Load_Balancer  VIP  and
+       backend definitions.
+
+       If  a template variable is referenced on a chassis for which that vari‐
+       able is not defined then ovn-controller running on  that  chassis  will
+       just interpret it as a raw string literal.
+
+   Summary:
+       chassis                       string (must be unique within table)
+       variables                     map of string-string pairs
+       Common Columns:
+         external_ids                map of string-string pairs
+
+   Details:
+       chassis: string (must be unique within table)
+              The chassis this set of variable values applies to.
+
+       variables: map of string-string pairs
+              The set of variable values for a given chassis.
+
+     Common Columns:
+
+       external_ids: map of string-string pairs
+              See External IDs at the beginning of this document.
+
+Open vSwitch 23.06.3            DB Schema 7.0.4                      ovn-nb(5)
diff --git a/support/dist-docs-branch-23.06/ovn-nbctl.8 b/support/dist-docs-branch-23.06/ovn-nbctl.8
new file mode 100644
index 00000000..8f03624e
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-nbctl.8
@@ -0,0 +1,1075 @@
+'\" p
+.\" -*- nroff -*-
+.TH "ovn-nbctl" 8 "ovn-nbctl" "OVN 23\[char46]06\[char46]3" "OVN Manual"
+.fp 5 L CR              \\" Make fixed-width font available as \\fL.
+.de TQ
+.  br
+.  ns
+.  TP "\\$1"
+..
+.de ST
+.  PP
+.  RS -0.15in
+.  I "\\$1"
+.  RE
+..
+.de SU
+.  PP
+.  I "\\$1"
+..
+.PP
+.SH "NAME"
+.PP
+.PP
+ovn-nbctl \- Open Virtual Network northbound db management utility
+.SH "SYNOPSIS"
+.PP
+\fBovn\-nbctl\fR [\fIoptions\fR] \fIcommand\fR [\fIarg\fR\[char46]\[char46]\[char46]]
+.SH "DESCRIPTION"
+.PP
+.PP
+The \fBovn\-nbctl\fR program configures the \fBOVN_Northbound\fR database by providing a high-level interface to its configuration database\[char46] See \fBovn\-nb\fR(5) for comprehensive documentation of the database schema\[char46]
+.PP
+.PP
+\fBovn\-nbctl\fR connects to an \fBovsdb\-server\fR process that maintains an OVN_Northbound configuration database\[char46] Using this connection, it queries and possibly applies changes to the database, depending on the supplied commands\[char46]
+.PP
+.PP
+\fBovn\-nbctl\fR can perform any number of commands in a single run, implemented as a single atomic transaction against the database\[char46]
+.PP
+.PP
+The \fBovn\-nbctl\fR command line begins with global options (see \fBOPTIONS\fR below for details)\[char46] The global options are followed by one or more commands\[char46] Each command should begin with \fB\-\-\fR by itself as a command-line argument, to separate it from the following commands\[char46] (The \fB\-\-\fR before the first command is optional\[char46]) The command itself starts with command-specific options, if any, followed by the command name and any arguments\[char46]
+.SH "DAEMON MODE"
+.PP
+.PP
+When it is invoked in the most ordinary way, \fBovn\-nbctl\fR connects to an OVSDB server that hosts the northbound database, retrieves a partial copy of the database that is complete enough to do its work, sends a transaction request to the server, and receives and processes the server\(cqs reply\[char46] In common interactive use, this is fine, but if the database is large, the step in which \fBovn\-nbctl\fR retrieves a partial copy of the database can take a long time, which yields poor performance overall\[char46]
+.PP
+.PP
+To improve performance in such a case, \fBovn\-nbctl\fR offers a \(dqdaemon mode,\(dq in which the user first starts \fBovn\-nbctl\fR running in the background and afterward uses the daemon to execute operations\[char46] Over several \fBovn\-nbctl\fR command invocations, this performs better overall because it retrieves a copy of the database only once at the beginning, not once per program run\[char46]
+.PP
+.PP
+Use the \fB\-\-detach\fR option to start an \fBovn\-nbctl\fR daemon\[char46] With this option, \fBovn\-nbctl\fR prints the name of a control socket to stdout\[char46] The client should save this name in environment variable \fBOVN_NB_DAEMON\fR\[char46] Under the Bourne shell this might be done like this:
+.PP
+.nf
+\fL
+.br
+\fL      export OVN_NB_DAEMON=$(ovn\-nbctl \-\-pidfile \-\-detach)
+.br
+\fL    \fR
+.fi
+.PP
+.PP
+When \fBOVN_NB_DAEMON\fR is set, \fBovn\-nbctl\fR automatically and transparently uses the daemon to execute its commands\[char46]
+.PP
+.PP
+When the daemon is no longer needed, kill it and unset the environment variable, e\[char46]g\[char46]:
+.PP
+.nf
+\fL
+.br
+\fL      kill $(cat $OVN_RUNDIR/ovn\-nbctl\[char46]pid)
+.br
+\fL      unset OVN_NB_DAEMON
+.br
+\fL    \fR
+.fi
+.PP
+.PP
+When using daemon mode, an alternative to the \fBOVN_NB_DAEMON\fR environment variable is to specify a path for the Unix socket\[char46] When starting the ovn-nbctl daemon, specify the \fB\-u\fR option with a full path to the location of the socket file\[char46] Here is an exmple:
+.PP
+.nf
+\fL
+.br
+\fL      ovn\-nbctl \-\-detach \-u /tmp/mysock\[char46]ctl
+.br
+\fL    \fR
+.fi
+.PP
+.PP
+Then to connect to the running daemon, use the \fB\-u\fR option with the full path to the socket created when the daemon was started:
+.PP
+.nf
+\fL
+.br
+\fL      ovn\-nbctl \-u /tmp/mysock\[char46]ctl show
+.br
+\fL    \fR
+.fi
+.ST "Daemon Commands"
+.PP
+.PP
+Daemon mode is internally implemented using the same mechanism used by \fBovn\-appctl\fR\[char46] One may also use \fBovn\-appctl\fR directly with the following commands:
+.RS
+.TP
+\fBrun\fR [\fIoptions\fR] \fIcommand\fR [\fIarg\fR\[char46]\[char46]\[char46]] [\fB\-\-\fR [\fIoptions\fR] \fIcommand\fR [\fIarg\fR\[char46]\[char46]\[char46]] \[char46]\[char46]\[char46]]
+Instructs the daemon process to run one or more \fBovn\-nbctl\fR commands described above and reply with the results of running these commands\[char46] Accepts the \fB\-\-no\-wait\fR, \fB\-\-wait\fR, \fB\-\-timeout\fR, \fB\-\-dry\-run\fR, \fB\-\-oneline\fR, and the options described under \fBTable Formatting Options\fR in addition to the the command-specific options\[char46]
+.TP
+\fBexit\fR
+Causes \fBovn\-nbctl\fR to gracefully terminate\[char46]
+.RE
+.SH "OPTIONS"
+.PP
+.PP
+The options listed below affect the behavior of \fBovn\-nbctl\fR as a whole\[char46] Some individual commands also accept their own options, which are given just before the command name\[char46] If the first command on the command line has options, then those options must be separated from the global options by \fB\-\-\fR\[char46]
+.PP
+.PP
+\fBovn\-nbctl\fR also accepts options from the \fBOVN_NBCTL_OPTIONS\fR environment variable, in the same format as on the command line\[char46] Options from the command line override those in the environment\[char46]
+.RS
+.TP
+\fB\-\-no\-wait\fR | \fB\-\-wait=none\fR
+.TQ .5in
+\fB\-\-wait=sb\fR
+.TQ .5in
+\fB\-\-wait=hv\fR
+These options control whether and how \fBovn\-nbctl\fR waits for the OVN system to become up-to-date with changes made in an \fBovn\-nbctl\fR invocation\[char46]
+.IP
+By default, or if \fB\-\-no\-wait\fR or \fB\-\-wait=none\fR, \fBovn\-nbctl\fR exits immediately after confirming that changes have been committed to the northbound database, without waiting\[char46]
+.IP
+With \fB\-\-wait=sb\fR, before \fBovn\-nbctl\fR exits, it waits for \fBovn\-northd\fR to bring the southbound database up-to-date with the northbound database updates\[char46]
+.IP
+With \fB\-\-wait=hv\fR, before \fBovn\-nbctl\fR exits, it additionally waits for all OVN chassis (hypervisors and gateways) to become up-to-date with the northbound database updates\[char46] (This can become an indefinite wait if any chassis is malfunctioning\[char46])
+.IP
+Ordinarily, \fB\-\-wait=sb\fR or \fB\-\-wait=hv\fR only waits for changes by the current \fBovn\-nbctl\fR invocation to take effect\[char46] This means that, if none of the commands supplied to \fBovn\-nbctl\fR change the database, then the command does not wait at all\[char46] Use the \fBsync\fR command to override this behavior\[char46]
+.TP
+\fB\-\-db\fR \fIdatabase\fR
+The OVSDB database remote to contact\[char46] If the \fBOVN_NB_DB\fR environment variable is set, its value is used as the default\[char46] Otherwise, the default is \fBunix:/ovnnb_db\[char46]sock\fR, but this default is unlikely to be useful outside of single-machine OVN test environments\[char46]
+.TP
+\fB\-\-leader\-only\fR
+.TQ .5in
+\fB\-\-no\-leader\-only\fR
+By default, or with \fB\-\-leader\-only\fR, when the database server is a clustered database, \fBovn\-nbctl\fR will avoid servers other than the cluster leader\[char46] This ensures that any data that \fBovn\-nbctl\fR reads and reports is up-to-date\[char46] With \fB\-\-no\-leader\-only\fR, \fBovn\-nbctl\fR will use any server in the cluster, which means that for read-only transactions it can report and act on stale data (transactions that modify the database are always serialized even with \fB\-\-no\-leader\-only\fR)\[char46] Refer to \fBUnderstanding Cluster Consistency\fR in \fBovsdb\fR(7) for more information\[char46]
+.TP
+\fB\-\-shuffle\-remotes\fR
+.TQ .5in
+\fB\-\-no\-shuffle\-remotes\fR
+By default, or with \fB\-\-shuffle\-remotes\fR, when there are multiple remotes specified in the OVSDB connection string specified by \fB\-\-db\fR or the \fBOVN_NB_DB\fR environment variable, the order of the remotes will be shuffled before the client tries to connect\[char46] The remotes will be shuffled only once to a new order before the first connection attempt\[char46] The following retries, if any, will follow the same new order\[char46] The default behavior is to make sure clients of a clustered database can distribute evenly to all members of the cluster\[char46] With \fB\-\-no\-shuffle\-remotes\fR, \fBovn\-nbctl\fR will use the original order specified in the connection string to connect\[char46] This allows user to specify the preferred order, which is particularly useful for testing\[char46]
+.TP
+\fB\-\-no\-syslog\fR
+By default, \fBovn\-nbctl\fR logs its arguments and the details of any changes that it makes to the system log\[char46] This option disables this logging\[char46]
+.IP
+This option is equivalent to \fB\-\-verbose=nbctl:syslog:warn\fR\[char46]
+.TP
+\fB\-\-oneline\fR
+Modifies the output format so that the output for each command is printed on a single line\[char46] New-line characters that would otherwise separate lines are printed as \efB\e\en\efR, and any instances of \efB\e\e\efR that would otherwise appear in the output are doubled\[char46] Prints a blank line for each command that has no output\[char46] This option does not affect the formatting of output from the \fBlist\fR or \fBfind\fR commands; see \fBTable Formatting Options\fR below\[char46]
+.TP
+\fB\-\-dry\-run\fR
+Prevents \fBovn\-nbctl\fR from actually modifying the database\[char46]
+.TP
+\fB\-t \fIsecs\fB\fR
+.TQ .5in
+\fB\-\-timeout=\fIsecs\fB\fR
+By default, or with a \fIsecs\fR of \fB0\fR, \fBovn\-nbctl\fR waits forever for a response from the database\[char46] This option limits runtime to approximately \fIsecs\fR seconds\[char46] If the timeout expires, \fBovn\-nbctl\fR will exit with a \fBSIGALRM\fR signal\[char46] (A timeout would normally happen only if the database cannot be contacted, or if the system is overloaded\[char46])
+.TP
+\fB\-\-print\-wait\-time\fR
+When \fB\-\-wait\fR is specified, the option \fB\-\-print\-wait\-time\fR can be used to print the time spent on waiting, depending on the value specified in \fB \-\-wait\fR option\[char46] If \fB\-\-wait=sb\fR is specified, it prints \(dqovn-northd delay before processing\(dq, which is the time between the Northbound DB update by the command and the moment when \fB ovn\-northd\fR starts processing the update, and \(dqovn-northd completion\(dq, which is the time between the Northbound DB update and the moment when \fBovn\-northd\fR completes the Southbound DB updating successfully\[char46] If \fB\-\-wait=hv\fR is specified, in addition to the above information, it also prints \(dqovn-controller(s) completion\(dq, which is the time between the Northbound DB update and the moment when the slowest hypervisor finishes processing the update\[char46]
+.RE
+.SS "Daemon Options"
+.TP
+\fB\-\-pidfile\fR[\fB=\fR\fIpidfile\fR]
+Causes a file (by default, \fB\fIprogram\fB\[char46]pid\fR) to be created indicating the PID of the running process\[char46] If the \fIpidfile\fR argument is not specified, or if it does not begin with \fB/\fR, then it is created in \fB\fR\[char46]
+.IP
+If \fB\-\-pidfile\fR is not specified, no pidfile is created\[char46]
+.TP
+\fB\-\-overwrite\-pidfile\fR
+By default, when \fB\-\-pidfile\fR is specified and the specified pidfile already exists and is locked by a running process, the daemon refuses to start\[char46] Specify \fB\-\-overwrite\-pidfile\fR to cause it to instead overwrite the pidfile\[char46]
+.IP
+When \fB\-\-pidfile\fR is not specified, this option has no effect\[char46]
+.TP
+\fB\-\-detach\fR
+Runs this program as a background process\[char46] The process forks, and in the child it starts a new session, closes the standard file descriptors (which has the side effect of disabling logging to the console), and changes its current directory to the root (unless \fB\-\-no\-chdir\fR is specified)\[char46] After the child completes its initialization, the parent exits\[char46]
+.TP
+\fB\-\-monitor\fR
+Creates an additional process to monitor this program\[char46] If it dies due to a signal that indicates a programming error (\fBSIGABRT\fR, \fBSIGALRM\fR, \fBSIGBUS\fR, \fBSIGFPE\fR, \fBSIGILL\fR, \fBSIGPIPE\fR, \fBSIGSEGV\fR, \fBSIGXCPU\fR, or \fBSIGXFSZ\fR) then the monitor process starts a new copy of it\[char46] If the daemon dies or exits for another reason, the monitor process exits\[char46]
+.IP
+This option is normally used with \fB\-\-detach\fR, but it also functions without it\[char46]
+.TP
+\fB\-\-no\-chdir\fR
+By default, when \fB\-\-detach\fR is specified, the daemon changes its current working directory to the root directory after it detaches\[char46] Otherwise, invoking the daemon from a carelessly chosen directory would prevent the administrator from unmounting the file system that holds that directory\[char46]
+.IP
+Specifying \fB\-\-no\-chdir\fR suppresses this behavior, preventing the daemon from changing its current working directory\[char46] This may be useful for collecting core files, since it is common behavior to write core dumps into the current working directory and the root directory is not a good directory to use\[char46]
+.IP
+This option has no effect when \fB\-\-detach\fR is not specified\[char46]
+.TP
+\fB\-\-no\-self\-confinement\fR
+By default this daemon will try to self-confine itself to work with files under well-known directories determined at build time\[char46] It is better to stick with this default behavior and not to use this flag unless some other Access Control is used to confine daemon\[char46] Note that in contrast to other access control implementations that are typically enforced from kernel-space (e\[char46]g\[char46] DAC or MAC), self-confinement is imposed from the user-space daemon itself and hence should not be considered as a full confinement strategy, but instead should be viewed as an additional layer of security\[char46]
+.TP
+\fB\-\-user=\fR\fIuser\fR\fB:\fR\fIgroup\fR
+Causes this program to run as a different user specified in \fIuser\fR\fB:\fR\fIgroup\fR, thus dropping most of the root privileges\[char46] Short forms \fIuser\fR and \fB:\fR\fIgroup\fR are also allowed, with current user or group assumed, respectively\[char46] Only daemons started by the root user accepts this argument\[char46]
+.IP
+On Linux, daemons will be granted \fBCAP_IPC_LOCK\fR and \fBCAP_NET_BIND_SERVICES\fR before dropping root privileges\[char46] Daemons that interact with a datapath, such as \fBovs\-vswitchd\fR, will be granted three additional capabilities, namely \fBCAP_NET_ADMIN\fR, \fBCAP_NET_BROADCAST\fR and \fBCAP_NET_RAW\fR\[char46] The capability change will apply even if the new user is root\[char46]
+.IP
+On Windows, this option is not currently supported\[char46] For security reasons, specifying this option will cause the daemon process not to start\[char46]
+.SS "Logging options"
+.TP
+\fB\-v\fR[\fIspec\fR]
+.TQ .5in
+\fB\-\-verbose=\fR[\fIspec\fR]
+Sets logging levels\[char46] Without any \fIspec\fR, sets the log level for every module and destination to \fBdbg\fR\[char46] Otherwise, \fIspec\fR is a list of words separated by spaces or commas or colons, up to one from each category below:
+.RS
+.IP \(bu
+A valid module name, as displayed by the \fBvlog/list\fR command on \fBovs\-appctl\fR(8), limits the log level change to the specified module\[char46]
+.IP \(bu
+\fBsyslog\fR, \fBconsole\fR, or \fBfile\fR, to limit the log level change to only to the system log, to the console, or to a file, respectively\[char46] (If \fB\-\-detach\fR is specified, the daemon closes its standard file descriptors, so logging to the console will have no effect\[char46])
+.IP
+On Windows platform, \fBsyslog\fR is accepted as a word and is only useful along with the \fB\-\-syslog\-target\fR option (the word has no effect otherwise)\[char46]
+.IP \(bu
+\fBoff\fR, \fBemer\fR, \fBerr\fR, \fBwarn\fR, \fBinfo\fR, or \fBdbg\fR, to control the log level\[char46] Messages of the given severity or higher will be logged, and messages of lower severity will be filtered out\[char46] \fBoff\fR filters out all messages\[char46] See \fBovs\-appctl\fR(8) for a definition of each log level\[char46]
+.RE
+.IP
+Case is not significant within \fIspec\fR\[char46]
+.IP
+Regardless of the log levels set for \fBfile\fR, logging to a file will not take place unless \fB\-\-log\-file\fR is also specified (see below)\[char46]
+.IP
+For compatibility with older versions of OVS, \fBany\fR is accepted as a word but has no effect\[char46]
+.TP
+\fB\-v\fR
+.TQ .5in
+\fB\-\-verbose\fR
+Sets the maximum logging verbosity level, equivalent to \fB\-\-verbose=dbg\fR\[char46]
+.TP
+\fB\-vPATTERN:\fR\fIdestination\fR\fB:\fR\fIpattern\fR
+.TQ .5in
+\fB\-\-verbose=PATTERN:\fR\fIdestination\fR\fB:\fR\fIpattern\fR
+Sets the log pattern for \fIdestination\fR to \fIpattern\fR\[char46] Refer to \fBovs\-appctl\fR(8) for a description of the valid syntax for \fIpattern\fR\[char46]
+.TP
+\fB\-vFACILITY:\fR\fIfacility\fR
+.TQ .5in
+\fB\-\-verbose=FACILITY:\fR\fIfacility\fR
+Sets the RFC5424 facility of the log message\[char46] \fIfacility\fR can be one of \fBkern\fR, \fBuser\fR, \fBmail\fR, \fBdaemon\fR, \fBauth\fR, \fBsyslog\fR, \fBlpr\fR, \fBnews\fR, \fBuucp\fR, \fBclock\fR, \fBftp\fR, \fBntp\fR, \fBaudit\fR, \fBalert\fR, \fBclock2\fR, \fBlocal0\fR, \fBlocal1\fR, \fBlocal2\fR, \fBlocal3\fR, \fBlocal4\fR, \fBlocal5\fR, \fBlocal6\fR or \fBlocal7\fR\[char46] If this option is not specified, \fBdaemon\fR is used as the default for the local system syslog and \fBlocal0\fR is used while sending a message to the target provided via the \fB\-\-syslog\-target\fR option\[char46]
+.TP
+\fB\-\-log\-file\fR[\fB=\fR\fIfile\fR]
+Enables logging to a file\[char46] If \fIfile\fR is specified, then it is used as the exact name for the log file\[char46] The default log file name used if \fIfile\fR is omitted is \fB/usr/local/var/log/ovn/\fIprogram\fB\[char46]log\fR\[char46]
+.TP
+\fB\-\-syslog\-target=\fR\fIhost\fR\fB:\fR\fIport\fR
+Send syslog messages to UDP \fIport\fR on \fIhost\fR, in addition to the system syslog\[char46] The \fIhost\fR must be a numerical IP address, not a hostname\[char46]
+.TP
+\fB\-\-syslog\-method=\fR\fImethod\fR
+Specify \fImethod\fR as how syslog messages should be sent to syslog daemon\[char46] The following forms are supported:
+.RS
+.IP \(bu
+\fBlibc\fR, to use the libc \fBsyslog()\fR function\[char46] Downside of using this options is that libc adds fixed prefix to every message before it is actually sent to the syslog daemon over \fB/dev/log\fR UNIX domain socket\[char46]
+.IP \(bu
+\fBunix:\fIfile\fB\fR, to use a UNIX domain socket directly\[char46] It is possible to specify arbitrary message format with this option\[char46] However, \fBrsyslogd 8\[char46]9\fR and older versions use hard coded parser function anyway that limits UNIX domain socket use\[char46] If you want to use arbitrary message format with older \fBrsyslogd\fR versions, then use UDP socket to localhost IP address instead\[char46]
+.IP \(bu
+\fBudp:\fIip\fB:\fIport\fB\fR, to use a UDP socket\[char46] With this method it is possible to use arbitrary message format also with older \fBrsyslogd\fR\[char46] When sending syslog messages over UDP socket extra precaution needs to be taken into account, for example, syslog daemon needs to be configured to listen on the specified UDP port, accidental iptables rules could be interfering with local syslog traffic and there are some security considerations that apply to UDP sockets, but do not apply to UNIX domain sockets\[char46]
+.IP \(bu
+\fBnull\fR, to discard all messages logged to syslog\[char46]
+.RE
+.IP
+The default is taken from the \fBOVS_SYSLOG_METHOD\fR environment variable; if it is unset, the default is \fBlibc\fR\[char46]
+.SS "Table Formatting Options"
+These options control the format of output from the \fBlist\fR and \fBfind\fR commands\[char46]
+.RS
+.TP
+\fB\-f\fR \fIformat\fR
+.TQ .5in
+\fB\-\-format=\fR\fIformat\fR
+Sets the type of table formatting\[char46] The following types of \fIformat\fR are available:
+.RS
+.TP
+\fBtable\fR
+2-D text tables with aligned columns\[char46]
+.TP
+\fBlist\fR (default)
+A list with one column per line and rows separated by a blank line\[char46]
+.TP
+\fBhtml\fR
+HTML tables\[char46]
+.TP
+\fBcsv\fR
+Comma-separated values as defined in RFC 4180\[char46]
+.TP
+\fBjson\fR
+JSON format as defined in RFC 4627\[char46] The output is a sequence of JSON objects, each of which corresponds to one table\[char46] Each JSON object has the following members with the noted values:
+.RS
+.TP
+\fBcaption\fR
+The table\(cqs caption\[char46] This member is omitted if the table has no caption\[char46]
+.TP
+\fBheadings\fR
+An array with one element per table column\[char46] Each array element is a string giving the corresponding column\(cqs heading\[char46]
+.TP
+\fBdata\fR
+An array with one element per table row\[char46] Each element is also an array with one element per table column\[char46] The elements of this second-level array are the cells that constitute the table\[char46] Cells that represent OVSDB data or data types are expressed in the format described in the OVSDB specification; other cells are simply expressed as text strings\[char46]
+.RE
+.RE
+.TP
+\fB\-d\fR \fIformat\fR
+.TQ .5in
+\fB\-\-data=\fR\fIformat\fR
+Sets the formatting for cells within output tables unless the table format is set to \fBjson\fR, in which case \fBjson\fR formatting is always used when formatting cells\[char46] The following types of \fIformat\fR are available:
+.RS
+.TP
+\fBstring\fR (default)
+The simple format described in the \fBDatabase Values\fR section of \fBovs\-vsctl\fR(8)\[char46]
+.TP
+\fBbare\fR
+The simple format with punctuation stripped off: \fB[]\fR and \fB{}\fR are omitted around sets, maps, and empty columns, items within sets and maps are space-separated, and strings are never quoted\[char46] This format may be easier for scripts to parse\[char46]
+.TP
+\fBjson\fR
+The RFC 4627 JSON format as described above\[char46]
+.RE
+.TP
+\fB\-\-no\-headings\fR
+This option suppresses the heading row that otherwise appears in the first row of table output\[char46]
+.TP
+\fB\-\-pretty\fR
+By default, JSON in output is printed as compactly as possible\[char46] This option causes JSON in output to be printed in a more readable fashion\[char46] Members of objects and elements of arrays are printed one per line, with indentation\[char46]
+.IP
+This option does not affect JSON in tables, which is always printed compactly\[char46]
+.TP
+\fB\-\-bare\fR
+Equivalent to \fB\-\-format=list \-\-data=bare \-\-no\-headings\fR\[char46]
+.RE
+.SS "PKI Options"
+.PP
+.PP
+PKI configuration is required to use SSL for the connection to the database\[char46]
+.RS
+.TP
+\fB\-p\fR \fIprivkey\[char46]pem\fR
+.TQ .5in
+\fB\-\-private\-key=\fR\fIprivkey\[char46]pem\fR
+Specifies a PEM file containing the private key used as identity for outgoing SSL connections\[char46]
+.TP
+\fB\-c\fR \fIcert\[char46]pem\fR
+.TQ .5in
+\fB\-\-certificate=\fR\fIcert\[char46]pem\fR
+Specifies a PEM file containing a certificate that certifies the private key specified on \fB\-p\fR or \fB\-\-private\-key\fR to be trustworthy\[char46] The certificate must be signed by the certificate authority (CA) that the peer in SSL connections will use to verify it\[char46]
+.TP
+\fB\-C\fR \fIcacert\[char46]pem\fR
+.TQ .5in
+\fB\-\-ca\-cert=\fR\fIcacert\[char46]pem\fR
+Specifies a PEM file containing the CA certificate for verifying certificates presented to this program by SSL peers\[char46] (This may be the same certificate that SSL peers use to verify the certificate specified on \fB\-c\fR or \fB\-\-certificate\fR, or it may be a different one, depending on the PKI design in use\[char46])
+.TP
+\fB\-C none\fR
+.TQ .5in
+\fB\-\-ca\-cert=none\fR
+Disables verification of certificates presented by SSL peers\[char46] This introduces a security risk, because it means that certificates cannot be verified to be those of known trusted hosts\[char46]
+.RE
+.RS
+.TP
+\fB\-\-bootstrap\-ca\-cert=\fR\fIcacert\[char46]pem\fR
+When \fIcacert\[char46]pem\fR exists, this option has the same effect as \fB\-C\fR or \fB\-\-ca\-cert\fR\[char46] If it does not exist, then the executable will attempt to obtain the CA certificate from the SSL peer on its first SSL connection and save it to the named PEM file\[char46] If it is successful, it will immediately drop the connection and reconnect, and from then on all SSL connections must be authenticated by a certificate signed by the CA certificate thus obtained\[char46]
+.IP
+This option exposes the SSL connection to a man-in-the-middle attack obtaining the initial CA certificate, but it may be useful for bootstrapping\[char46]
+.IP
+This option is only useful if the SSL peer sends its CA certificate as part of the SSL certificate chain\[char46] The SSL protocol does not require the server to send the CA certificate\[char46]
+.IP
+This option is mutually exclusive with \fB\-C\fR and \fB\-\-ca\-cert\fR\[char46]
+.RE
+.SS "Other Options"
+.TP
+\fB\-h\fR
+.TQ .5in
+\fB\-\-help\fR
+Prints a brief help message to the console\[char46]
+.TP
+\fB\-V\fR
+.TQ .5in
+\fB\-\-version\fR
+Prints version information to the console\[char46]
+.SH "COMMANDS"
+.PP
+.PP
+The following sections describe the commands that \fBovn\-nbctl\fR supports\[char46]
+.SS "General Commands"
+.TP
+\fBinit\fR
+Initializes the database, if it is empty\[char46] If the database has already been initialized, this command has no effect\[char46]
+.TP
+\fBshow [\fIswitch\fB | \fIrouter\fB]\fR
+Prints a brief overview of the database contents\[char46] If \fIswitch\fR is provided, only records related to that logical switch are shown\[char46] If \fIrouter\fR is provided, only records related to that logical router are shown\[char46]
+.SS "Logical Switch Commands"
+.TP
+\fBls\-add\fR
+Creates a new, unnamed logical switch, which initially has no ports\[char46] The switch does not have a name, other commands must refer to this switch by its UUID\[char46]
+.TP
+[\fB\-\-may\-exist\fR | \fB\-\-add\-duplicate\fR] \fBls\-add\fR \fIswitch\fR
+Creates a new logical switch named \fIswitch\fR, which initially has no ports\[char46]
+.IP
+The OVN northbound database schema does not require logical switch names to be unique, but the whole point to the names is to provide an easy way for humans to refer to the switches, making duplicate names unhelpful\[char46] Thus, without any options, this command regards it as an error if \fIswitch\fR is a duplicate name\[char46] With \fB\-\-may\-exist\fR, adding a duplicate name succeeds but does not create a new logical switch\[char46] With \fB\-\-add\-duplicate\fR, the command really creates a new logical switch with a duplicate name\[char46] It is an error to specify both options\[char46] If there are multiple logical switches with a duplicate name, configure the logical switches using the UUID instead of the \fIswitch\fR name\[char46]
+.TP
+[\fB\-\-if\-exists\fR] \fBls\-del\fR \fIswitch\fR
+Deletes \fIswitch\fR\[char46] It is an error if \fIswitch\fR does not exist, unless \fB\-\-if\-exists\fR is specified\[char46]
+.TP
+\fBls\-list\fR
+Lists all existing switches on standard output, one per line\[char46]
+.SS "ACL Commands"
+.PP
+.PP
+These commands operates on ACL objects for a given \fIentity\fR\[char46] The \fIentity\fR can be either a logical switch or a port group\[char46] The \fIentity\fR can be specified as uuid or name\[char46] The \fB\-\-type\fR option can be used to specify the type of the \fIentity\fR, in case both a logical switch and a port groups exist with the same name specified for \fIentity\fR\[char46] \fBtype\fR must be either \fBswitch\fR or \fBport\-group\fR\[char46]
+.RS
+.TP
+[\fB\-\-type=\fR{\fBswitch\fR | \fBport\-group\fR}] [\fB\-\-log\fR] [\fB\-\-meter=\fR\fImeter\fR] [\fB\-\-severity=\fR\fIseverity\fR] [\fB\-\-name=\fR\fIname\fR] [\fB\-\-label=\fR\fIlabel\fR] [\fB\-\-may\-exist\fR] [\fB\-\-apply\-after\-lb\fR] [\fB\-\-tier\fR] \fBacl\-add\fR \fIentity\fR \fIdirection\fR \fIpriority\fR \fImatch\fR \fIverdict\fR
+Adds the specified ACL to \fIentity\fR\[char46] \fIdirection\fR must be either \fBfrom\-lport\fR or \fBto\-lport\fR\[char46] \fIpriority\fR must be between \fB0\fR and \fB32767\fR, inclusive\[char46] A full description of the fields are in \fBovn\-nb\fR(5)\[char46] If \fB\-\-may\-exist\fR is specified, adding a duplicated ACL succeeds but the ACL is not really created\[char46] Without \fB\-\-may\-exist\fR, adding a duplicated ACL results in error\[char46]
+.IP
+The \fB\-\-log\fR option enables packet logging for the ACL\[char46] The options \fB\-\-severity\fR and \fB\-\-name\fR specify a severity and name, respectively, for log entries (and also enable logging)\[char46] The severity must be one of \fBalert\fR, \fBwarning\fR, \fBnotice\fR, \fBinfo\fR, or \fBdebug\fR\[char46] If a severity is not specified, the default is \fBinfo\fR\[char46] The \fB\-\-meter=\fImeter\fB\fR option is used to rate-limit packet logging\[char46] The \fImeter\fR argument names a meter configured by \fBmeter\-add\fR\[char46]
+.IP
+The \fB\-\-apply\-after\-lb\fR option sets \fBapply\-after\-lb=true\fR in the \fBoptions\fR column of the \fBACL\fR table\[char46] As the option name suggests, the ACL will be applied after the logical switch load balancer stage\[char46]
+.IP
+The \fB\-\-tier\fR option sets the ACL\(cqs tier to the specified value\[char46] For more information about ACL tiers, see the documentation for the \fBovn\-nb\fR(5) database\[char46]
+.TP
+[\fB\-\-type=\fR{\fBswitch\fR | \fBport\-group\fR}] [\fB\-\-tier\fR] \fBacl\-del\fR \fIentity\fR [\fIdirection\fR [\fIpriority\fR \fImatch\fR]]
+Deletes ACLs from \fIentity\fR\[char46] If only \fIentity\fR is supplied, all the ACLs from the \fIentity\fR are deleted\[char46] If \fIdirection\fR is also specified, then all the flows in that direction will be deleted from the \fIentity\fR\[char46] If all the fields are given, then a single flow that matches all the fields will be deleted\[char46]
+.IP
+If the \fB\-\-tier\fR option is provided, then only ACLs of the given tier value will be deleted, in addition to whatever other criteria have been provided\[char46]
+.TP
+[\fB\-\-type=\fR{\fBswitch\fR | \fBport\-group\fR}] \fBacl\-list\fR \fIentity\fR
+Lists the ACLs on \fIentity\fR\[char46]
+.RE
+.SS "Logical Switch QoS Rule Commands"
+.TP
+[\fB\-\-may\-exist\fR] \fBqos\-add\fR \fIswitch\fR \fIdirection\fR \fIpriority\fR \fImatch\fR [\fBdscp=\fR\fIdscp\fR] [\fBrate=\fR\fIrate\fR [\fBburst=\fR\fIburst\fR]]
+Adds QoS marking and metering rules to \fIswitch\fR\[char46] \fIdirection\fR must be either \fBfrom\-lport\fR or \fBto\-lport\fR\[char46] \fIpriority\fR must be between \fB0\fR and \fB32767\fR, inclusive\[char46]
+.IP
+If \fBdscp=\fR\fIdscp\fR is specified, then matching packets will have DSCP marking applied\[char46] \fIdscp\fR must be between \fB0\fR and \fB63\fR, inclusive\[char46] If \fBrate=\fR\fIrate\fR is specified then matching packets will have metering applied at \fIrate\fR kbps\[char46] If metering is configured, then \fBburst=\fR\fIburst\fR specifies the burst rate limit in kilobits\[char46] \fBdscp\fR and/or \fBrate\fR are required arguments\[char46]
+.IP
+If \fB\-\-may\-exist\fR is specified, adding a duplicated QoS rule succeeds but the QoS rule is not really created\[char46] Without \fB\-\-may\-exist\fR, adding a duplicated QoS rule results in error\[char46]
+.TP
+\fBqos\-del\fR \fIswitch\fR [\fIdirection\fR [\fIpriority\fR \fImatch\fR]]
+Deletes QoS rules from \fIswitch\fR\[char46] If only \fIswitch\fR is supplied, all the QoS rules from the logical switch are deleted\[char46] If \fIdirection\fR is also specified, then all the flows in that direction will be deleted from the logical switch\[char46] If all the fields are supplied, then a single flow that matches the given fields will be deleted\[char46]
+.IP
+If \fIswitch\fR and \fIuuid\fR are supplied, then the QoS rule with specified uuid is deleted\[char46]
+.TP
+\fBqos\-list\fR \fIswitch\fR
+Lists the QoS rules on \fIswitch\fR\[char46]
+.SS "Meter Commands"
+.TP
+\fBmeter\-add\fR \fIname\fR \fIaction\fR \fIrate\fR \fIunit\fR [\fIburst\fR]
+Adds the specified meter\[char46] \fIname\fR must be a unique name to identify this meter\[char46] The \fIaction\fR argument specifies what should happen when this meter is exceeded\[char46] The only supported action is \fBdrop\fR\[char46]
+.IP
+The \fIunit\fR specifies the unit for the \fIrate\fR argument; valid values are \fBkbps\fR and \fBpktps\fR for kilobits per second and packets per second, respectively\[char46] The \fIburst\fR option configures the maximum burst allowed for the band in kilobits or packets depending on whether the \fIunit\fR chosen was \fBkbps\fR or \fBpktps\fR, respectively\[char46] If a burst is not supplied, the switch is free to select some reasonable value depending on its configuration\[char46]
+.IP
+\fBovn\-nbctl\fR only supports adding a meter with a single band, but the other commands support meters with multiple bands\[char46]
+.IP
+Names that start with \(dq__\(dq (two underscores) are reserved for internal use by OVN, so \fBovn\-nbctl\fR does not allow adding them\[char46]
+.TP
+\fBmeter\-del\fR [\fIname\fR]
+Deletes meters\[char46] By default, all meters are deleted\[char46] If \fIname\fR is supplied, only the meter with that name will be deleted\[char46]
+.TP
+\fBmeter\-list\fR
+Lists all meters\[char46]
+.SS "Logical Switch Port Commands"
+.TP
+[\fB\-\-may\-exist\fR] \fBlsp\-add\fR \fIswitch\fR \fIport\fR
+Creates on \fIlswitch\fR a new logical switch port named \fIport\fR\[char46]
+.IP
+It is an error if a logical port named \fIport\fR already exists, unless \fB\-\-may\-exist\fR is specified\[char46] Regardless of \fB\-\-may\-exist\fR, it is an error if the existing port is in some logical switch other than \fIswitch\fR or if it has a parent port\[char46]
+.TP
+[\fB\-\-may\-exist\fR] \fBlsp\-add\fR \fIswitch\fR \fIport\fR \fIparent\fR \fItag_request\fR
+Creates on \fIswitch\fR a logical switch port named \fIport\fR that is a child of \fIparent\fR that is identified with VLAN ID \fItag_request\fR, which must be between \fB0\fR and \fB4095\fR, inclusive\[char46] If \fItag_request\fR is \fB0\fR, \fBovn\-northd\fR generates a tag that is unique in the scope of \fIparent\fR\[char46] This is useful in cases such as virtualized container environments where Open vSwitch does not have a direct connection to the container\(cqs port and it must be shared with the virtual machine\(cqs port\[char46]
+.IP
+It is an error if a logical port named \fIport\fR already exists, unless \fB\-\-may\-exist\fR is specified\[char46] Regardless of \fB\-\-may\-exist\fR, it is an error if the existing port is not in \fIswitch\fR or if it does not have the specified \fIparent\fR and \fItag_request\fR\[char46]
+.TP
+[\fB\-\-if\-exists\fR] \fBlsp\-del\fR \fIport\fR
+Deletes \fIport\fR\[char46] It is an error if \fIport\fR does not exist, unless \fB\-\-if\-exists\fR is specified\[char46]
+.TP
+\fBlsp\-list\fR \fIswitch\fR
+Lists all the logical switch ports within \fIswitch\fR on standard output, one per line\[char46]
+.TP
+\fBlsp\-get\-parent\fR \fIport\fR
+If set, get the parent port of \fIport\fR\[char46] If not set, print nothing\[char46]
+.TP
+\fBlsp\-get\-tag\fR \fIport\fR
+If set, get the tag for \fIport\fR traffic\[char46] If not set, print nothing\[char46]
+.TP
+\fBlsp\-set\-addresses\fR \fIport\fR [\fIaddress\fR]\[char46]\[char46]\[char46]
+Sets the addresses associated with \fIport\fR to \fIaddress\fR\[char46] Each \fIaddress\fR should be one of the following:
+.RS
+.TP
+an Ethernet address, optionally followed by a space and one or more IP addresses
+OVN delivers packets for the Ethernet address to this port\[char46]
+.TP
+\fBunknown\fR
+OVN delivers unicast Ethernet packets whose destination MAC address is not in any logical port\(cqs addresses column to ports with address \fBunknown\fR\[char46]
+.TP
+\fBdynamic\fR
+Use this keyword to make \fBovn\-northd\fR generate a globally unique MAC address and choose an unused IPv4 address with the logical port\(cqs subnet and store them in the port\(cqs \fBdynamic_addresses\fR column\[char46]
+.TP
+\fBrouter\fR
+Accepted only when the \fBtype\fR of the logical switch port is \fBrouter\fR\[char46] This indicates that the Ethernet, IPv4, and IPv6 addresses for this logical switch port should be obtained from the connected logical router port, as specified by \fBrouter\-port\fR in \fBlsp\-set\-options\fR\[char46]
+.RE
+.IP
+Multiple addresses may be set\[char46] If no \fIaddress\fR argument is given, \fIport\fR will have no addresses associated with it\[char46]
+.TP
+\fBlsp\-get\-addresses\fR \fIport\fR
+Lists all the addresses associated with \fIport\fR on standard output, one per line\[char46]
+.TP
+\fBlsp\-set\-port\-security\fR \fIport\fR [\fIaddrs\fR]\[char46]\[char46]\[char46]
+Sets the port security addresses associated with \fIport\fR to \fIaddrs\fR\[char46] Multiple sets of addresses may be set by using multiple \fIaddrs\fR arguments\[char46] If no \fIaddrs\fR argument is given, \fIport\fR will not have port security enabled\[char46]
+.IP
+Port security limits the addresses from which a logical port may send packets and to which it may receive packets\[char46] See the \fBovn\-nb\fR(5) documentation for the \fBport_security\fR column in the \fBLogical_Switch_Port\fR table for details\[char46]
+.TP
+\fBlsp\-get\-port\-security\fR \fIport\fR
+Lists all the port security addresses associated with \fIport\fR on standard output, one per line\[char46]
+.TP
+\fBlsp\-get\-up\fR \fIport\fR
+Prints the state of \fIport\fR, either \fBup\fR or \fBdown\fR\[char46]
+.TP
+\fBlsp\-set\-enabled\fR \fIport\fR \fIstate\fR
+Set the administrative state of \fIport\fR, either \fBenabled\fR or \fBdisabled\fR\[char46] When a port is disabled, no traffic is allowed into or out of the port\[char46]
+.TP
+\fBlsp\-get\-enabled\fR \fIport\fR
+Prints the administrative state of \fIport\fR, either \fBenabled\fR or \fBdisabled\fR\[char46]
+.TP
+\fBlsp\-set\-type\fR \fIport\fR \fItype\fR
+Set the type for the logical port\[char46] The type must be one of the following:
+.RS
+.TP
+\fB(empty string)\fR
+A VM (or VIF) interface\[char46]
+.TP
+\fBrouter\fR
+A connection to a logical router\[char46]
+.TP
+\fBlocalnet\fR
+A connection to a locally accessible network from each ovn-controller instance\[char46] A logical switch can only have a single localnet port attached\[char46] This is used to model direct connectivity to an existing network\[char46]
+.TP
+\fBlocalport\fR
+A connection to a local VIF\[char46] Traffic that arrives on a localport is never forwarded over a tunnel to another chassis\[char46] These ports are present on every chassis and have the same address in all of them\[char46] This is used to model connectivity to local services that run on every hypervisor\[char46]
+.TP
+\fBl2gateway\fR
+A connection to a physical network\[char46]
+.TP
+\fBvtep\fR
+A port to a logical switch on a VTEP gateway\[char46]
+.RE
+.TP
+\fBlsp\-get\-type\fR \fIport\fR
+Get the type for the logical port\[char46]
+.TP
+\fBlsp\-set\-options\fR \fIport\fR [\fIkey=value\fR]\[char46]\[char46]\[char46]
+Set type-specific key-value options for the logical port\[char46]
+.TP
+\fBlsp\-get\-options\fR \fIport\fR
+Get the type-specific options for the logical port\[char46]
+.TP
+\fBlsp\-set\-dhcpv4\-options\fR \fIport\fR \fIdhcp_options\fR
+Set the DHCPv4 options for the logical port\[char46] The \fIdhcp_options\fR is a UUID referring to a set of DHCP options in the \fBDHCP_Options\fR table\[char46]
+.TP
+\fBlsp\-get\-dhcpv4\-options\fR \fIport\fR
+Get the configured DHCPv4 options for the logical port\[char46]
+.TP
+\fBlsp\-set\-dhcpv6\-options\fR \fIport\fR \fIdhcp_options\fR
+Set the DHCPv6 options for the logical port\[char46] The \fIdhcp_options\fR is a UUID referring to a set of DHCP options in the \fBDHCP_Options\fR table\[char46]
+.TP
+\fBlsp\-get\-dhcpv6\-options\fR \fIport\fR
+Get the configured DHCPv6 options for the logical port\[char46]
+.TP
+\fBlsp\-get\-ls\fR \fIport\fR
+Get the logical switch which the \fIport\fR belongs to\[char46]
+.TP
+\fBlsp\-attach\-mirror\fR \fIport\fR \fIm\fR
+Attaches the mirror \fIm\fR to the logical port \fIport\fR\[char46]
+.TP
+\fBlsp\-detach\-mirror\fR \fIport\fR \fIm\fR
+Detaches the mirror \fIm\fR from the logical port \fIport\fR\[char46]
+.SS "Forwarding Group Commands"
+.TP
+[\fB\-\-liveness\fR]\fBfwd\-group\-add\fR \fIgroup\fR \fIswitch\fR \fIvip\fR \fIvmac\fR \fIports\fR
+Creates a new forwarding group named \fIgroup\fR as the name with the provided \fIvip\fR and \fIvmac\fR\[char46] \fIvip\fR should be a virtual IP address and \fIvmac\fR should be a virtual MAC address to access the forwarding group\[char46] \fIports\fR are the logical switch port names that are put in the forwarding group\[char46] Example for \fIports\fR is lsp1 lsp2 \[char46]\[char46]\[char46] Traffic destined to virtual IP of the forwarding group will be load balanced to all the child ports\[char46]
+.IP
+When \fB\-\-liveness\fR is specified then child ports are expected to be bound to external devices like routers\[char46] BFD should be configured between hypervisors and the external devices\[char46] The child port selection will become dependent on BFD status with its external device\[char46]
+.TP
+[\fB\-\-if\-exists\fR] \fBfwd\-group\-del\fR \fIgroup
+\fR
+Deletes \fIgroup\fR\[char46] It is an error if \fIgroup\fR does not exist, unless \fB\-\-if\-exists\fR is specified\[char46]
+.TP
+\fBfwd\-group\-list\fR [\fIswitch\fR]
+Lists all existing forwarding groups, If \fIswitch\fR is specified then only the forwarding groups configured for \fIswitch\fR will be listed\[char46]
+.SS "Logical Router Commands"
+.TP
+\fBlr\-add\fR
+Creates a new, unnamed logical router, which initially has no ports\[char46] The router does not have a name, other commands must refer to this router by its UUID\[char46]
+.TP
+[\fB\-\-may\-exist\fR | \fB\-\-add\-duplicate\fR] \fBlr\-add\fR \fIrouter\fR
+Creates a new logical router named \fIrouter\fR, which initially has no ports\[char46]
+.IP
+The OVN northbound database schema does not require logical router names to be unique, but the whole point to the names is to provide an easy way for humans to refer to the routers, making duplicate names unhelpful\[char46] Thus, without any options, this command regards it as an error if \fIrouter\fR is a duplicate name\[char46] With \fB\-\-may\-exist\fR, adding a duplicate name succeeds but does not create a new logical router\[char46] With \fB\-\-add\-duplicate\fR, the command really creates a new logical router with a duplicate name\[char46] It is an error to specify both options\[char46] If there are multiple logical routers with a duplicate name, configure the logical routers using the UUID instead of the \fIrouter\fR name\[char46]
+.TP
+[\fB\-\-if\-exists\fR] \fBlr\-del\fR \fIrouter\fR
+Deletes \fIrouter\fR\[char46] It is an error if \fIrouter\fR does not exist, unless \fB\-\-if\-exists\fR is specified\[char46]
+.TP
+\fBlr\-list\fR
+Lists all existing routers on standard output, one per line\[char46]
+.SS "Logical Router Port Commands"
+.TP
+[\fB\-\-may\-exist\fR] \fBlrp\-add\fR \fIrouter\fR \fIport\fR \fImac\fR \fInetwork\fR\[char46]\[char46]\[char46] [\fBpeer=\fR\fIpeer\fR]
+Creates on \fIrouter\fR a new logical router port named \fIport\fR with Ethernet address \fImac\fR and one or more IP address/netmask for each \fInetwork\fR\[char46]
+.IP
+The optional argument \fBpeer\fR identifies a logical router port that connects to this one\[char46] The following example adds a router port with an IPv4 and IPv6 address with peer \fBlr1\fR:
+.IP
+\fBlrp\-add lr0 lrp0 00:11:22:33:44:55 192\[char46]168\[char46]0\[char46]1/24 2001:db8::1/64 peer=lr1\fR
+.IP
+It is an error if a logical router port named \fIport\fR already exists, unless \fB\-\-may\-exist\fR is specified\[char46] Regardless of \fB\-\-may\-exist\fR, it is an error if the existing router port is in some logical router other than \fIrouter\fR\[char46]
+.TP
+[\fB\-\-if\-exists\fR] \fBlrp\-del\fR \fIport\fR
+Deletes \fIport\fR\[char46] It is an error if \fIport\fR does not exist, unless \fB\-\-if\-exists\fR is specified\[char46]
+.TP
+\fBlrp\-list\fR \fIrouter\fR
+Lists all the logical router ports within \fIrouter\fR on standard output, one per line\[char46]
+.TP
+\fBlrp\-set\-enabled\fR \fIport\fR \fIstate\fR
+Set the administrative state of \fIport\fR, either \fBenabled\fR or \fBdisabled\fR\[char46] When a port is disabled, no traffic is allowed into or out of the port\[char46]
+.TP
+\fBlrp\-get\-enabled\fR \fIport\fR
+Prints the administrative state of \fIport\fR, either \fBenabled\fR or \fBdisabled\fR\[char46]
+.TP
+\fBlrp\-set\-gateway\-chassis\fR \fIport\fR \fIchassis\fR [\fIpriority\fR]
+Set gateway chassis for \fIport\fR\[char46] \fIchassis\fR is the name of the chassis\[char46] This creates a gateway chassis entry in Gateway_Chassis table\[char46] It won\(cqt check if chassis really exists in OVN_Southbound database\[char46] Priority will be set to 0 if \fIpriority\fR is not provided by user\[char46] \fIpriority\fR must be between \fB0\fR and \fB32767\fR, inclusive\[char46]
+.TP
+\fBlrp\-del\-gateway\-chassis\fR \fIport\fR \fIchassis\fR
+Deletes gateway chassis from \fIport\fR\[char46] It is an error if gateway chassis with \fIchassis\fR for \fIport\fR does not exist\[char46]
+.TP
+\fBlrp\-get\-gateway\-chassis\fR \fIport\fR
+Lists all the gateway chassis with priority within \fIport\fR on standard output, one per line, ordered based on priority\[char46]
+.SS "Logical Router Static Route Commands"
+.TP
+[\fB\-\-may\-exist\fR] [\fB\-\-policy\fR=\fIPOLICY\fR] [\fB\-\-ecmp\fR] [\fB\-\-ecmp\-symmetric\-reply\fR] [\fB\-\-bfd[=\fIUUID\fB\fR]] \fBlr\-route\-add\fR \fIrouter\fR \fIprefix\fR \fInexthop\fR [\fIport\fR]
+Adds the specified route to \fIrouter\fR\[char46] \fIprefix\fR describes an IPv4 or IPv6 prefix for this route, such as \fB192\[char46]168\[char46]100\[char46]0/24\fR\[char46] \fInexthop\fR specifies the gateway to use for this route, which should be the IP address of one of \fIrouter\fR logical router ports or the IP address of a logical port\[char46] If \fIport\fR is specified, packets that match this route will be sent out that port\[char46] When \fIport\fR is omitted, OVN infers the output port based on \fInexthop\fR\[char46] Nexthop can be set to \fIdiscard\fR for dropping packets which match the given route\[char46]
+.IP
+\fB\-\-policy\fR describes the policy used to make routing decisions\[char46] This should be one of \(dqdst-ip\(dq or \(dqsrc-ip\(dq\[char46] If not specified, the default is \(dqdst-ip\(dq\[char46]
+.IP
+The \fB\-\-ecmp\fR option allows for multiple routes with the same \fIprefix\fR \fIPOLICY\fR but different \fInexthop\fR and \fIport\fR to be added\[char46]
+.IP
+The \fB\-\-ecmp\-symmetric\-reply\fR option makes it so that traffic that arrives over an ECMP route will have its reply traffic sent out over that same route\[char46] Setting \fB\-\-ecmp\-symmetric\-reply\fR implies \fB\-\-ecmp\fR so it is not necessary to set both\[char46]
+.IP
+\fB\-\-bfd\fR option is used to link a BFD session to the OVN route\[char46] If the BFD session UUID is provided, it will be used for the OVN route otherwise the next-hop will be used to perform a lookup in the OVN BFD table\[char46] If the lookup fails and \fIport\fR is specified, a new entry in the BFD table will be created using the \fInexthop\fR as \fIdst_ip\fR and \fIport\fR as \fIlogical_port\fR\[char46]
+.IP
+It is an error if a route with \fIprefix\fR and \fIPOLICY\fR already exists, unless \fB\-\-may\-exist\fR, \fB\-\-ecmp\fR, or \fB\-\-ecmp\-symmetric\-reply\fR is specified\[char46] If \fB\-\-may\-exist\fR is specified but not \fB\-\-ecmp\fR or \fB\-\-ecmp\-symmetric\-reply\fR, the existed route will be updated with the new nexthop and port\[char46] If \fB\-\-ecmp\fR or \fB\-\-ecmp\-symmetric\-reply\fR is specified, a new route will be added, regardless of the existed route\[char46], which is useful when adding ECMP routes, i\[char46]e\[char46] routes with same \fIPOLICY\fR and \fIprefix\fR but different \fInexthop\fR and \fIport\fR\[char46]
+.TP
+[\fB\-\-if\-exists\fR] [\fB\-\-policy\fR=\fIPOLICY\fR] \fBlr\-route\-del\fR \fIrouter\fR [\fIprefix\fR [\fInexthop\fR [\fIport\fR]]]
+Deletes routes from \fIrouter\fR\[char46] If only \fIrouter\fR is supplied, all the routes from the logical router are deleted\[char46] If \fIPOLICY\fR, \fIprefix\fR, \fInexthop\fR and/or \fIport\fR are also specified, then all the routes that match the conditions will be deleted from the logical router\[char46]
+.IP
+It is an error if there is no matching route entry, unless \fB\-\-if\-exists\fR is specified\[char46]
+.TP
+\fBlr\-route\-list\fR \fIrouter\fR
+Lists the routes on \fIrouter\fR\[char46]
+.SS "Logical Router Policy Commands"
+.TP
+[\fB\-\-may\-exist\fR]\fBlr\-policy\-add\fR \fIrouter\fR \fIpriority\fR \fImatch\fR \fIaction\fR [\fInexthop\fR[,\fInexthop\fR,\[char46]\[char46]\[char46]]] [\fIoptions key=value]\fR]
+Add Policy to \fIrouter\fR which provides a way to configure permit/deny and reroute policies on the router\[char46] Permit/deny policies are similar to OVN ACLs, but exist on the logical-router\[char46] Reroute policies are needed for service-insertion and service-chaining\[char46] \fInexthop\fR is an optional parameter\[char46] It needs to be provided only when \fIaction\fR is \fIreroute\fR\[char46] Multiple \fBnexthops\fR can be specified for ECMP routing\[char46] A policy is uniquely identified by \fIpriority\fR and \fImatch\fR\[char46] Multiple policies can have the same \fIpriority\fR\[char46] \fIoptions\fR sets the router policy options as key-value pair\[char46] The supported option is : \fBpkt_mark\fR\[char46]
+.IP
+If \fB\-\-may\-exist\fR is specified, adding a duplicated routing policy with the same priority and match string is not really created\[char46] Without \fB\-\-may\-exist\fR, adding a duplicated routing policy results in error\[char46]
+.IP
+The following example shows a policy to lr1, which will drop packets from\fB192\[char46]168\[char46]100\[char46]0/24\fR\[char46]
+.IP
+\fBlr\-policy\-add lr1 100 ip4\[char46]src == 192\[char46]168\[char46]100\[char46]0/24 drop\fR\[char46]
+.IP
+\fB
+lr\-policy\-add lr1 100 ip4\[char46]src == 192\[char46]168\[char46]100\[char46]0/24 allow
+pkt_mark=100
+\fR\[char46]
+.TP
+[\fB\-\-if\-exists\fR] \fBlr\-policy\-del\fR \fIrouter\fR [\fI{priority | uuid} [match]\fR]
+Deletes polices from \fIrouter\fR\[char46] If only \fIrouter\fR is supplied, all the polices from the logical router are deleted\[char46] If \fIpriority\fR and/or \fImatch\fR are also specified, then all the polices that match the conditions will be deleted from the logical router\[char46]
+.IP
+If \fIrouter\fR and \fIuuid\fR are supplied, then the policy with specified uuid is deleted\[char46] It is an error if \fIuuid\fR does not exist, unless \fB\-\-if\-exists\fR is specified\[char46]
+.TP
+\fBlr\-policy\-list\fR \fIrouter\fR
+Lists the polices on \fIrouter\fR\[char46]
+.SS "NAT Commands"
+.TP
+[\fB\-\-may\-exist\fR] [\fB\-\-stateless\fR] [\fB\-\-gateway\-port\fR=\fIGATEWAY_PORT\fR] \fBlr\-nat\-add\fR \fIrouter\fR \fItype\fR \fIexternal_ip\fR \fIlogical_ip\fR [\fIlogical_port\fR \fIexternal_mac\fR]
+Adds the specified NAT to \fIrouter\fR\[char46] The \fItype\fR must be one of \fBsnat\fR, \fBdnat\fR, or \fBdnat_and_snat\fR\[char46] The \fIexternal_ip\fR is an IPv4 address\[char46] The \fIlogical_ip\fR is an IPv4 network (e\[char46]g 192\[char46]168\[char46]1\[char46]0/24) or an IPv4 address\[char46] The \fIlogical_port\fR and \fIexternal_mac\fR are only accepted when \fIrouter\fR is a distributed router (rather than a gateway router) and \fItype\fR is \fBdnat_and_snat\fR\[char46] The \fIlogical_port\fR is the name of an existing logical switch port where the \fIlogical_ip\fR resides\[char46] The \fIexternal_mac\fR is an Ethernet address\[char46]
+.IP
+When \fB\-\-stateless\fR is specified then it implies that we will be not use connection tracker, i\[char46]e internal ip and external ip are 1:1 mapped\[char46] This implies that \fB\-\-stateless\fR is applicable only to dnat_and_snat type NAT rules\[char46] An external ip with \fB\-\-stateless\fR NAT cannot be shared with any other NAT rule\[char46]
+.IP
+\fB\-\-gateway\-port\fR option allows specifying the distributed gateway port of \fIrouter\fR where the NAT rule needs to be applied\[char46] \fIGATEWAY_PORT\fR should reference a \fBLogical_Router_Port\fR row that is a distributed gateway port of \fIrouter\fR\[char46] When \fIrouter\fR has multiple distributed gateway ports and the gateway port for this NAT can\(cqt be inferred from the \fIexternal_ip\fR, it is an error to not specify the \fIGATEWAY_PORT\fR\[char46]
+.IP
+When \fItype\fR is \fBdnat\fR, the externally visible IP address \fIexternal_ip\fR is DNATted to the IP address \fIlogical_ip\fR in the logical space\[char46]
+.IP
+When \fItype\fR is \fBsnat\fR, IP packets with their source IP address that either matches the IP address in \fIlogical_ip\fR or is in the network provided by \fIlogical_ip\fR is SNATed into the IP address in \fIexternal_ip\fR\[char46]
+.IP
+When \fItype\fR is \fBdnat_and_snat\fR, the externally visible IP address \fIexternal_ip\fR is DNATted to the IP address \fIlogical_ip\fR in the logical space\[char46] In addition, IP packets with the source IP address that matches \fIlogical_ip\fR is SNATed into the IP address in \fIexternal_ip\fR\[char46]
+.IP
+When the \fIlogical_port\fR and \fIexternal_mac\fR are specified, the NAT rule will be programmed on the chassis where the \fIlogical_port\fR resides\[char46] This includes ARP replies for the \fIexternal_ip\fR, which return the value of \fIexternal_mac\fR\[char46] All packets transmitted with source IP address equal to \fIexternal_ip\fR will be sent using the \fIexternal_mac\fR\[char46]
+.IP
+It is an error if a NAT already exists with the same values of \fIrouter\fR, \fItype\fR, \fIexternal_ip\fR, \fIlogical_ip\fR and \fIGATEWAY_PORT\fR (in case of multiple distributed gateway ports), unless \fB\-\-may\-exist\fR is specified\[char46] When \fB\-\-may\-exist\fR, \fIlogical_port\fR, and \fIexternal_mac\fR are all specified, the existing values of \fIlogical_port\fR and \fIexternal_mac\fR are overwritten\[char46]
+.TP
+[\fB\-\-if\-exists\fR] \fBlr\-nat\-del\fR \fIrouter\fR [\fItype\fR [\fIip\fR] [\fIgateway_port\fR]]
+Deletes NATs from \fIrouter\fR\[char46] If only \fIrouter\fR is supplied, all the NATs from the logical router are deleted\[char46] If \fItype\fR is also specified, then all the NATs that match the \fItype\fR will be deleted from the logical router\[char46] If \fIip\fR is also specified without specifying \fIgateway_port\fR, then all the NATs that match the \fItype\fR and \fIip\fR will be deleted from the logical router\[char46] If \fIgateway_port\fR is specified without specifying \fIip\fR, then all the NATs that match the \fItype\fR and \fIgateway_port\fR will be deleted from the logical router\[char46] If all the fields are given, then a single NAT rule that matches all the fields will be deleted\[char46] When \fItype\fR is \fBsnat\fR, the \fIip\fR should be logical_ip\[char46] When \fItype\fR is \fBdnat\fR or \fBdnat_and_snat\fR, the \fIip\fR should be external_ip\[char46]
+.IP
+It is an error if both \fIip\fR and \fIgateway_port\fR are specified and there is no matching NAT entry, unless \fB\-\-if\-exists\fR is specified\[char46]
+.TP
+\fBlr\-nat\-list\fR \fIrouter\fR
+Lists the NATs on \fIrouter\fR\[char46]
+.SS "Load Balancer Commands"
+.TP
+[\fB\-\-may\-exist\fR | \fB\-\-add\-duplicate\fR | \fB\-\-reject\fR | \fB\-\-event\fR] \fBlb\-add\fR \fIlb\fR \fIvip\fR \fIips\fR [\fIprotocol\fR]
+Creates a new load balancer named \fIlb\fR with the provided \fIvip\fR and \fIips\fR or adds the \fIvip\fR to an existing \fIlb\fR\[char46] \fIvip\fR should be a virtual IP address (or an IP address and a port number with \fB:\fR as a separator)\[char46] Examples for \fIvip\fR are \fB192\[char46]168\[char46]1\[char46]4\fR, \fBfd0f::1\fR, and \fB192\[char46]168\[char46]1\[char46]5:8080\fR\[char46] \fIips\fR should be comma separated IP endpoints (or comma separated IP addresses and port numbers with \fB:\fR as a separator)\[char46] \fIips\fR must be the same address family as \fIvip\fR\[char46] Examples for \fIips\fR are \fB10\[char46]0\[char46]0\[char46]1,10\[char46]0\[char46]0\[char46]2\fRor \fB[fdef::1]:8800,[fdef::2]:8800\fR\[char46]
+.IP
+The optional argument \fIprotocol\fR must be either \fBtcp\fR, \fBudp\fR or \fBsctp\fR\[char46] This argument is useful when a port number is provided as part of the \fIvip\fR\[char46] If the \fIprotocol\fR is unspecified and a port number is provided as part of the \fIvip\fR, OVN assumes the \fIprotocol\fR to be \fBtcp\fR\[char46]
+.IP
+It is an error if the \fIvip\fR already exists in the load balancer named \fIlb\fR, unless \fB\-\-may\-exist\fR is specified\[char46] With \fB\-\-add\-duplicate\fR, the command really creates a new load balancer with a duplicate name\[char46]
+.IP
+If the load balancer is created with \fB\-\-reject\fR option and it has no active backends, a TCP reset segment (for tcp) or an ICMP port unreachable packet (for all other kind of traffic) will be sent whenever an incoming packet is received for this load-balancer\[char46] Please note using \fB\-\-reject\fR option will disable empty_lb SB controller event for this load balancer\[char46]
+.IP
+If the load balancer is created with \fB\-\-event\fR option and it has no active backends, whenever the lb receives traffic, the event is reported in the Controller_Event table in the SB db\[char46] Please note \fB\-\-event\fR option can\(cqt be specified with \fB\-\-reject\fR one\[char46]
+.IP
+The following example adds a load balancer\[char46]
+.IP
+\fBlb\-add lb0 30\[char46]0\[char46]0\[char46]10:80
+192\[char46]168\[char46]10\[char46]10:80,192\[char46]168\[char46]10\[char46]20:80,192\[char46]168\[char46]10\[char46]30:80 udp\fR
+.TP
+[\fB\-\-if\-exists\fR] \fBlb\-del\fR \fIlb\fR [\fIvip\fR]
+Deletes \fIlb\fR or the \fIvip\fR from \fIlb\fR\[char46] If \fIvip\fR is supplied, only the \fIvip\fR will be deleted from the \fIlb\fR\[char46] If only the \fIlb\fR is supplied, the \fIlb\fR will be deleted\[char46] It is an error if \fIvip\fR does not already exist in \fIlb\fR, unless \fB\-\-if\-exists\fR is specified\[char46]
+.TP
+\fBlb\-list\fR [\fIlb\fR]
+Lists the LBs\[char46] If \fIlb\fR is also specified, then only the specified \fIlb\fR will be listed\[char46]
+.TP
+[\fB\-\-may\-exist\fR] \fBls\-lb\-add\fR \fIswitch\fR \fIlb\fR
+Adds the specified \fIlb\fR to \fIswitch\fR\[char46] It is an error if a load balancer named \fIlb\fR already exists in the \fIswitch\fR, unless \fB\-\-may\-exist\fR is specified\[char46]
+.TP
+[\fB\-\-if\-exists\fR] \fBls\-lb\-del\fR \fIswitch\fR [\fIlb\fR]
+Removes \fIlb\fR from \fIswitch\fR\[char46] If only \fIswitch\fR is supplied, all the LBs from the logical switch are removed\[char46] If \fIlb\fR is also specified, then only the \fIlb\fR will be removed from the logical switch\[char46] It is an error if \fIlb\fR does not exist in the \fIswitch\fR, unless \fB\-\-if\-exists\fR is specified\[char46]
+.TP
+\fBls\-lb\-list\fR \fIswitch\fR
+Lists the LBs for the given \fIswitch\fR\[char46]
+.TP
+[\fB\-\-may\-exist\fR] \fBlr\-lb\-add\fR \fIrouter\fR \fIlb\fR
+Adds the specified \fIlb\fR to \fIrouter\fR\[char46] It is an error if a load balancer named \fIlb\fR already exists in the \fIrouter\fR, unless \fB\-\-may\-exist\fR is specified\[char46]
+.TP
+[\fB\-\-if\-exists\fR] \fBlr\-lb\-del\fR \fIrouter\fR [\fIlb\fR]
+Removes \fIlb\fR from \fIrouter\fR\[char46] If only \fIrouter\fR is supplied, all the LBs from the logical router are removed\[char46] If \fIlb\fR is also specified, then only the \fIlb\fR will be removed from the logical router\[char46] It is an error if \fIlb\fR does not exist in the \fIrouter\fR, unless \fB\-\-if\-exists\fR is specified\[char46]
+.TP
+\fBlr\-lb\-list\fR \fIrouter\fR
+Lists the LBs for the given \fIrouter\fR\[char46]
+.SS "DHCP Options commands"
+.TP
+\fBdhcp\-options\-create\fR \fIcidr\fR [\fIkey=value\fR]
+Creates a new DHCP Options entry in the \fBDHCP_Options\fR table with the specified \fBcidr\fR and optional \fBexternal\-ids\fR\[char46]
+.TP
+\fBdhcp\-options\-list\fR
+Lists the DHCP Options entries\[char46]
+.TP
+\fBdhcp\-options\-del\fR \fIdhcp-option\fR
+Deletes the DHCP Options entry referred by \fIdhcp-option\fR UUID\[char46]
+.TP
+\fBdhcp\-options\-set\-options\fR \fIdhcp-option\fR [\fIkey=value\fR]\[char46]\[char46]\[char46]
+Set the DHCP Options for the \fIdhcp-option\fR UUID\[char46]
+.TP
+\fBdhcp\-options\-get\-options\fR \fIdhcp-option\fR
+Lists the DHCP Options for the \fIdhcp-option\fR UUID\[char46]
+.SS "Port Group commands"
+.TP
+\fBpg\-add\fR \fIgroup\fR [\fIport\fR]\[char46]\[char46]\[char46]
+Creates a new port group in the \fBPort_Group\fR table named \fBgroup\fR with optional \fBports\fR added to the group\[char46]
+.TP
+\fBpg\-set\-ports\fR \fIgroup\fR \fIport\fR\[char46]\[char46]\[char46]
+Sets \fBports\fR on the port group named \fBgroup\fR\[char46] It is an error if \fBgroup\fR does not exist\[char46]
+.TP
+\fBpg\-del\fR \fIgroup\fR
+Deletes port group \fBgroup\fR\[char46] It is an error if \fBgroup\fR does not exist\[char46]
+.SS "HA Chassis Group commands"
+.TP
+\fBha\-chassis\-group\-add\fR \fIgroup\fR
+Creates a new HA chassis group in the \fBHA_Chassis_Group\fR table named \fBgroup\fR\[char46]
+.TP
+\fBha\-chassis\-group\-del\fR \fIgroup\fR
+Deletes the HA chassis group \fBgroup\fR\[char46] It is an error if \fBgroup\fR does not exist\[char46]
+.TP
+\fBha\-chassis\-group\-list\fR
+Lists the HA chassis group \fBgroup\fR along with the \fBHA chassis\fR if any associated with it\[char46]
+.TP
+\fBha\-chassis\-group\-add\-chassis\fR \fIgroup\fR \fIchassis\fR \fIpriority\fR
+Adds a new HA chassis \fBchassis\fR to the HA Chassis group \fBgroup\fR with the specified priority\[char46] If the \fBchassis\fR already exists, then the \fBpriority\fR is updated\[char46] The \fBchassis\fR should be the name of the chassis in the \fBOVN_Southbound\fR\[char46]
+.TP
+\fBha\-chassis\-group\-remove\-chassis\fR \fIgroup\fR \fIchassis\fR
+Removes the HA chassis \fBchassis\fR from the HA chassis group \fBgroup\fR\[char46] It is an error if \fBchassis\fR does not exist\[char46]
+.SS "Control Plane Protection Policy commands"
+.PP
+.PP
+These commands manage meters configured in \fBCopp\fR table linking them to logical datapaths through \fBcopp\fR column in \fBLogical_Switch\fR or \fBLogical_Router\fR tables\[char46] Protocol packets for which CoPP is enforced when sending packets to ovn-controller (if configured):
+.RS
+.IP \(bu
+ARP
+.IP \(bu
+ND_NS
+.IP \(bu
+ND_NA
+.IP \(bu
+ND_RA
+.IP \(bu
+ND
+.IP \(bu
+DNS
+.IP \(bu
+IGMP
+.IP \(bu
+packets that require ARP resolution before forwarding
+.IP \(bu
+packets that require ND_NS before forwarding
+.IP \(bu
+packets that need to be replied to with ICMP Errors
+.IP \(bu
+packets that need to be replied to with TCP RST
+.IP \(bu
+packets that need to be replied to with DHCP_OPTS
+.IP \(bu
+packets that trigger a reject action
+.IP \(bu
+packets that trigger a SCTP abort action
+.IP \(bu
+controller_events
+.IP \(bu
+BFD
+.RE
+.RS
+.TP
+\fBcopp\-add\fR \fIname\fR \fIproto\fR \fImeter\fR
+Adds the control \fBproto\fR to \fBmeter\fR mapping to the control plane protection policy \fBname\fR\[char46] If no policy exists yet, it creates one\[char46] If a mapping already existed for \fBproto\fR, this will overwrite it\[char46]
+.TP
+\fBcopp\-del\fR \fIname\fR [\fIproto\fR]
+Removes the control \fBproto\fR mapping for the \fBname\fR control plane protection policy\[char46] If \fBproto\fR is not specified, the whole control plane protection policy is destroyed\[char46]
+.TP
+\fBcopp\-list\fR \fIname\fR
+Display the current control plane protection policy for \fBname\fR\[char46]
+.TP
+\fBls\-copp\-add\fR \fIname\fR \fIswitch\fR
+Adds the control plane protection policy \fBname\fR to the logical switch \fBswitch\fR\[char46]
+.TP
+\fBlr\-copp\-add\fR \fIname\fR \fIrouter\fR
+Adds the control plane protection policy \fBname\fR to the logical router \fBrouter\fR\[char46]
+.RE
+.SS "Mirror commands"
+.TP
+\fBmirror\-add\fR \fIm\fR \fItype\fR [\fIindex\fR] \fIfilter\fR \fIdest\fR
+Creates a new mirror in the \fBMirror\fR table with the name \fBm\fR with the below mandatory arguments\[char46]
+.IP
+\fItype\fR specifies the mirror type - \fBgre\fR , \fBerspan\fR or \fBlocal\fR\[char46]
+.IP
+\fIindex\fR specifies the tunnel index value (which is an integer) if the \fItype\fR is \fBgre\fR or \fBerspan\fR\[char46]
+.IP
+\fIfilter\fR specifies the mirror source selection\[char46] Can be \fBfrom\-lport\fR, \fBto\-lport\fR or \fBboth\fR\[char46]
+.IP
+\fIdest\fR specifies the mirror destination IP (v4 or v6) if the \fItype\fR is \fBgre\fR or \fBerspan\fR\[char46] For a \fItype\fR of \fBlocal\fR, this field defines a local interface on the OVS integration bridge to be used as the mirror destination\[char46] The interface must possess external-ids:mirror-id that matches this string\[char46]
+.TP
+\fBmirror\-del\fR \fIm\fR
+Deletes the mirror \fBm\fR\[char46]
+.TP
+\fBmirror\-list\fR
+Lists the mirrors\[char46]
+.SS "Synchronization Commands"
+.TP
+sync
+Ordinarily, \fB\-\-wait=sb\fR or \fB\-\-wait=hv\fR only waits for changes by the current \fBovn\-nbctl\fR invocation to take effect\[char46] This means that, if none of the commands supplied to \fBovn\-nbctl\fR change the database, then the command does not wait at all\[char46] With the \fBsync\fR command, however, \fBovn\-nbctl\fR waits even for earlier changes to the database to propagate down to the southbound database or all of the OVN chassis, according to the argument to \fB\-\-wait\fR\[char46]
+.SS "Remote Connectivity Commands"
+.PP
+.PP
+These commands manipulate the \fBconnections\fR column in the \fBNB_Global\fR table and rows in the \fBConnection\fR table\[char46] When \fBovsdb\-server\fR is configured to use the \fBconnections\fR column for OVSDB connections, this allows the administrator to use \fBovn\-nbctl\fR to configure database connections\[char46]
+.RS
+.TP
+\fBget\-connection\fR
+Prints the configured connection(s)\[char46]
+.TP
+\fBdel\-connection\fR
+Deletes the configured connection(s)\[char46]
+.TP
+[\fB\-\-inactivity\-probe=\fR\fImsecs\fR] \fBset\-connection\fR \fItarget\fR\[char46]\[char46]\[char46]
+Sets the configured manager target or targets\[char46] Use \fB\-\-inactivity\-probe=\fR\fImsecs\fR to override the default idle connection inactivity probe time\[char46] Use 0 to disable inactivity probes\[char46]
+.RE
+.SS "SSL Configuration Commands"
+.TP
+\fBget\-ssl\fR
+Prints the SSL configuration\[char46]
+.TP
+\fBdel\-ssl\fR
+Deletes the current SSL configuration\[char46]
+.TP
+[\fB\-\-bootstrap\fR] \fBset\-ssl\fR \fIprivate-key\fR \fIcertificate\fR \fIca-cert\fR [\fIssl-protocol-list\fR [\fIssl-cipher-list\fR]]
+Sets the SSL configuration\[char46]
+.SS "Database Commands"
+.PP
+.PP
+These commands query and modify the contents of \fBovsdb\fR tables\[char46] They are a slight abstraction of the \fBovsdb\fR interface and as such they operate at a lower level than other \fBovn\-nbctl\fR commands\[char46]
+.PP
+\fIIdentifying Tables, Records, and Columns\fR
+.PP
+.PP
+Each of these commands has a \fItable\fR parameter to identify a table within the database\[char46] Many of them also take a \fIrecord\fR parameter that identifies a particular record within a table\[char46] The \fIrecord\fR parameter may be the UUID for a record, which may be abbreviated to its first 4 (or more) hex digits, as long as that is unique\[char46] Many tables offer additional ways to identify records\[char46] Some commands also take \fIcolumn\fR parameters that identify a particular field within the records in a table\[char46]
+.PP
+.PP
+For a list of tables and their columns, see \fBovn\-nb\fR(5) or see the table listing from the \fB\-\-help\fR option\[char46]
+.PP
+.PP
+Record names must be specified in full and with correct capitalization, except that UUIDs may be abbreviated to their first 4 (or more) hex digits, as long as that is unique within the table\[char46] Names of tables and columns are not case-sensitive, and \fB\-\fR and \fB_\fR are treated interchangeably\[char46] Unique abbreviations of table and column names are acceptable, e\[char46]g\[char46] \fBd\fR or \fBdhcp\fR is sufficient to identify the \fBDHCP_Options\fR table\[char46]
+.PP
+.PP
+.PP
+\fIDatabase Values\fR
+.PP
+.PP
+Each column in the database accepts a fixed type of data\[char46] The currently defined basic types, and their representations, are:
+.RS
+.TP
+integer
+A decimal integer in the range \-2**63 to 2**63\-1, inclusive\[char46]
+.TP
+real
+A floating-point number\[char46]
+.TP
+Boolean
+True or false, written \fBtrue\fR or \fBfalse\fR, respectively\[char46]
+.TP
+string
+An arbitrary Unicode string, except that null bytes are not allowed\[char46] Quotes are optional for most strings that begin with an English letter or underscore and consist only of letters, underscores, hyphens, and periods\[char46] However, \fBtrue\fR and \fBfalse\fR and strings that match the syntax of UUIDs (see below) must be enclosed in double quotes to distinguish them from other basic types\[char46] When double quotes are used, the syntax is that of strings in JSON, e\[char46]g\[char46] backslashes may be used to escape special characters\[char46] The empty string must be represented as a pair of double quotes (\fB\(dq\(dq\fR)\[char46]
+.TP
+UUID
+Either a universally unique identifier in the style of RFC 4122, e\[char46]g\[char46] \fBf81d4fae\-7dec\-11d0\-a765\-00a0c91e6bf6\fR, or an \fB@\fR\fIname\fR defined by a \fBget\fR or \fBcreate\fR command within the same \fBovs\-vsctl\fR invocation\[char46]
+.RE
+.PP
+.PP
+Multiple values in a single column may be separated by spaces or a single comma\[char46] When multiple values are present, duplicates are not allowed, and order is not important\[char46] Conversely, some database columns can have an empty set of values, represented as \fB[]\fR, and square brackets may optionally enclose other non-empty sets or single values as well\[char46]
+.PP
+.PP
+A few database columns are ``maps\(cq\(cq of key-value pairs, where the key and the value are each some fixed database type\[char46] These are specified in the form \fIkey\fR\fB=\fR\fIvalue\fR, where \fIkey\fR and \fIvalue\fR follow the syntax for the column\(cqs key type and value type, respectively\[char46] When multiple pairs are present (separated by spaces or a comma), duplicate keys are not allowed, and again the order is not important\[char46] Duplicate values are allowed\[char46] An empty map is represented as \fB{}\fR\[char46] Curly braces may optionally enclose non-empty maps as well (but use quotes to prevent the shell from expanding \fBother\-config={0=x,1=y}\fR into \fBother\-config=0=x
+other\-config=1=y\fR, which may not have the desired effect)\[char46]
+.PP
+\fIDatabase Command Syntax\fR
+.RS
+.TP
+[\fB\-\-if\-exists\fR] [\fB\-\-columns=\fR\fIcolumn\fR[\fB,\fR\fIcolumn\fR]\[char46]\[char46]\[char46]] \fBlist\fR \fItable\fR [\fIrecord\fR]\[char46]\[char46]\[char46]
+Lists the data in each specified \fIrecord\fR\[char46] If no records are specified, lists all the records in \fItable\fR\[char46]
+.IP
+If \fB\-\-columns\fR is specified, only the requested columns are listed, in the specified order\[char46] Otherwise, all columns are listed, in alphabetical order by column name\[char46]
+.IP
+Without \fB\-\-if\-exists\fR, it is an error if any specified \fIrecord\fR does not exist\[char46] With \fB\-\-if\-exists\fR, the command ignores any \fIrecord\fR that does not exist, without producing any output\[char46]
+.TP
+[\fB\-\-columns=\fR\fIcolumn\fR[\fB,\fR\fIcolumn\fR]\[char46]\[char46]\[char46]] \fBfind\fR \fItable\fR [\fIcolumn\fR[\fB:\fR\fIkey\fR]\fB=\fR\fIvalue\fR]\[char46]\[char46]\[char46]
+Lists the data in each record in \fItable\fR whose \fIcolumn\fR equals \fIvalue\fR or, if \fIkey\fR is specified, whose \fIcolumn\fR contains a \fIkey\fR with the specified \fIvalue\fR\[char46] The following operators may be used where \fB=\fR is written in the syntax summary:
+.RS
+.TP
+\fB= != < > <= >=\fR
+Selects records in which \fIcolumn\fR[\fB:\fR\fIkey\fR] equals, does not equal, is less than, is greater than, is less than or equal to, or is greater than or equal to \fIvalue\fR, respectively\[char46]
+.IP
+Consider \fIcolumn\fR[\fB:\fR\fIkey\fR] and \fIvalue\fR as sets of elements\[char46] Identical sets are considered equal\[char46] Otherwise, if the sets have different numbers of elements, then the set with more elements is considered to be larger\[char46] Otherwise, consider a element from each set pairwise, in increasing order within each set\[char46] The first pair that differs determines the result\[char46] (For a column that contains key-value pairs, first all the keys are compared, and values are considered only if the two sets contain identical keys\[char46])
+.TP
+\fB{=} {!=}\fR
+Test for set equality or inequality, respectively\[char46]
+.TP
+\fB{<=}\fR
+Selects records in which \fIcolumn\fR[\fB:\fR\fIkey\fR] is a subset of \fIvalue\fR\[char46] For example, \fBflood\-vlans{<=}1,2\fR selects records in which the \fBflood\-vlans\fR column is the empty set or contains 1 or 2 or both\[char46]
+.TP
+\fB{<}\fR
+Selects records in which \fIcolumn\fR[\fB:\fR\fIkey\fR] is a proper subset of \fIvalue\fR\[char46] For example, \fBflood\-vlans{<}1,2\fR selects records in which the \fBflood\-vlans\fR column is the empty set or contains 1 or 2 but not both\[char46]
+.TP
+\fB{>=} {>}\fR
+Same as \fB{<=}\fR and \fB{<}\fR, respectively, except that the relationship is reversed\[char46] For example, \fBflood\-vlans{>=}1,2\fR selects records in which the \fBflood\-vlans\fR column contains both 1 and 2\[char46]
+.RE
+.IP
+The following operators are available only in Open vSwitch 2\[char46]16 and later:
+.RS
+.TP
+\fB{in}\fR
+Selects records in which every element in \fIcolumn\fR[\fB:\fR\fIkey\fR] is also in \fIvalue\fR\[char46] (This is the same as \fB{<=}\fR\[char46])
+.TP
+\fB{not\-in}\fR
+Selects records in which every element in \fIcolumn\fR[\fB:\fR\fIkey\fR] is not in \fIvalue\fR\[char46]
+.RE
+.IP
+For arithmetic operators (\fB= != < > <= >=\fR), when \fIkey\fR is specified but a particular record\(cqs \fIcolumn\fR does not contain \fIkey\fR, the record is always omitted from the results\[char46] Thus, the condition \fBother\-config:mtu!=1500\fR matches records that have a \fBmtu\fR key whose value is not 1500, but not those that lack an \fBmtu\fR key\[char46]
+.IP
+For the set operators, when \fIkey\fR is specified but a particular record\(cqs \fIcolumn\fR does not contain \fIkey\fR, the comparison is done against an empty set\[char46] Thus, the condition \fBother\-config:mtu{!=}1500\fR matches records that have a \fBmtu\fR key whose value is not 1500 and those that lack an \fBmtu\fR key\[char46]
+.IP
+Don\(cqt forget to escape \fB<\fR or \fB>\fR from interpretation by the shell\[char46]
+.IP
+If \fB\-\-columns\fR is specified, only the requested columns are listed, in the specified order\[char46] Otherwise all columns are listed, in alphabetical order by column name\[char46]
+.IP
+The UUIDs shown for rows created in the same \fBovs\-vsctl\fR invocation will be wrong\[char46]
+.TP
+[\fB\-\-if\-exists\fR] [\fB\-\-id=@\fR\fIname\fR] \fBget\fR \fItable record\fR [\fIcolumn\fR[\fB:\fR\fIkey\fR]]\[char46]\[char46]\[char46]
+Prints the value of each specified \fIcolumn\fR in the given \fIrecord\fR in \fItable\fR\[char46] For map columns, a \fIkey\fR may optionally be specified, in which case the value associated with \fIkey\fR in the column is printed, instead of the entire map\[char46]
+.IP
+Without \fB\-\-if\-exists\fR, it is an error if \fIrecord\fR does not exist or \fIkey\fR is specified, if \fIkey\fR does not exist in \fIrecord\fR\[char46] With \fB\-\-if\-exists\fR, a missing \fIrecord\fR yields no output and a missing \fIkey\fR prints a blank line\[char46]
+.IP
+If \fB@\fR\fIname\fR is specified, then the UUID for \fIrecord\fR may be referred to by that name later in the same \fBovs\-vsctl\fR invocation in contexts where a UUID is expected\[char46]
+.IP
+Both \fB\-\-id\fR and the \fIcolumn\fR arguments are optional, but usually at least one or the other should be specified\[char46] If both are omitted, then \fBget\fR has no effect except to verify that \fIrecord\fR exists in \fItable\fR\[char46]
+.IP
+\fB\-\-id\fR and \fB\-\-if\-exists\fR cannot be used together\[char46]
+.TP
+[\fB\-\-if\-exists\fR] \fBset\fR \fItable record column\fR[\fB:\fR\fIkey\fR]\fB=\fR\fIvalue\fR\[char46]\[char46]\[char46]
+Sets the value of each specified \fIcolumn\fR in the given \fIrecord\fR in \fItable\fR to \fIvalue\fR\[char46] For map columns, a \fIkey\fR may optionally be specified, in which case the value associated with \fIkey\fR in that column is changed (or added, if none exists), instead of the entire map\[char46]
+.IP
+Without \fB\-\-if\-exists\fR, it is an error if \fIrecord\fR does not exist\[char46] With \fB\-\-if\-exists\fR, this command does nothing if \fIrecord\fR does not exist\[char46]
+.TP
+[\fB\-\-if\-exists\fR] \fBadd\fR \fItable record column\fR [\fIkey\fR\fB=\fR]\fIvalue\fR\[char46]\[char46]\[char46]
+Adds the specified value or key-value pair to \fIcolumn\fR in \fIrecord\fR in \fItable\fR\[char46] If \fIcolumn\fR is a map, then \fIkey\fR is required, otherwise it is prohibited\[char46] If \fIkey\fR already exists in a map column, then the current \fIvalue\fR is not replaced (use the \fBset\fR command to replace an existing value)\[char46]
+.IP
+Without \fB\-\-if\-exists\fR, it is an error if \fIrecord\fR does not exist\[char46] With \fB\-\-if\-exists\fR, this command does nothing if \fIrecord\fR does not exist\[char46]
+.TP
+[\fB\-\-if\-exists\fR] \fBremove\fR \fItable record column value\fR\[char46]\[char46]\[char46]
+.IP
+[\fB\-\-if\-exists\fR] \fBremove\fR \fItable record column key\fR\[char46]\[char46]\[char46]
+.IP
+[\fB\-\-if\-exists\fR] \fBremove\fR \fItable record column key\fR\fB=\fR\fIvalue\fR\[char46]\[char46]\[char46]
+Removes the specified values or key-value pairs from \fIcolumn\fR in \fIrecord\fR in \fItable\fR\[char46] The first form applies to columns that are not maps: each specified \fIvalue\fR is removed from the column\[char46] The second and third forms apply to map columns: if only a \fIkey\fR is specified, then any key-value pair with the given \fIkey\fR is removed, regardless of its value; if a \fIvalue\fR is given then a pair is removed only if both key and value match\[char46]
+.IP
+It is not an error if the column does not contain the specified key or value or pair\[char46]
+.IP
+Without \fB\-\-if\-exists\fR, it is an error if \fIrecord\fR does not exist\[char46] With \fB\-\-if\-exists\fR, this command does nothing if \fIrecord\fR does not exist\[char46]
+.TP
+[\fB\-\-if\-exists\fR] \fBclear\fR \fItable record column\fR\[char46]\[char46]\[char46]
+Sets each \fIcolumn\fR in \fIrecord\fR in \fItable\fR to the empty set or empty map, as appropriate\[char46] This command applies only to columns that are allowed to be empty\[char46]
+.IP
+Without \fB\-\-if\-exists\fR, it is an error if \fIrecord\fR does not exist\[char46] With \fB\-\-if\-exists\fR, this command does nothing if \fIrecord\fR does not exist\[char46]
+.TP
+[\fB\-\-id=(@\fR\fIname\fR|\fIuuid\fR)] \fBcreate\fR \fItable column\fR[\fB:\fR\fIkey\fR]\fB=\fR\fIvalue\fR\[char46]\[char46]\[char46]
+Creates a new record in \fItable\fR and sets the initial values of each \fIcolumn\fR\[char46] Columns not explicitly set will receive their default values\[char46] Outputs the UUID of the new row\[char46]
+.IP
+If \fB@\fR\fIname\fR is specified, then the UUID for the new row may be referred to by that name elsewhere in the same \fB\e*(PN\fR invocation in contexts where a UUID is expected\[char46] Such references may precede or follow the \fBcreate\fR command\[char46]
+.IP
+If a valid \fIuuid\fR is specified, then it is used as the UUID of the new row\[char46]
+.RS
+.TP
+Caution (ovs-vsctl as example)
+Records in the Open vSwitch database are significant only when they can be reached directly or indirectly from the \fBOpen_vSwitch\fR table\[char46] Except for records in the \fBQoS\fR or \fBQueue\fR tables, records that are not reachable from the \fBOpen_vSwitch\fR table are automatically deleted from the database\[char46] This deletion happens immediately, without waiting for additional \fBovs\-vsctl\fR commands or other database activity\[char46] Thus, a \fBcreate\fR command must generally be accompanied by additional commands \fIwithin the same\fR \fBovs\-vsctl\fR \fIinvocation\fR to add a chain of references to the newly created record from the top-level \fBOpen_vSwitch\fR record\[char46] The \fBEXAMPLES\fR section gives some examples that show how to do this\[char46]
+.RE
+.TP
+[\fB\-\-if\-exists\fR] \fBdestroy\fR \fItable record\fR\[char46]\[char46]\[char46]
+Deletes each specified \fIrecord\fR from \fItable\fR\[char46] Unless \fB\-\-if\-exists\fR is specified, each \fIrecord\fRs must exist\[char46]
+.TP
+\fB\-\-all destroy\fR \fItable\fR
+Deletes all records from the \fItable\fR\[char46]
+.RS
+.TP
+Caution (ovs-vsctl as example)
+The \fBdestroy\fR command is only useful for records in the \fBQoS\fR or \fBQueue\fR tables\[char46] Records in other tables are automatically deleted from the database when they become unreachable from the \fBOpen_vSwitch\fR table\[char46] This means that deleting the last reference to a record is sufficient for deleting the record itself\[char46] For records in these tables, \fBdestroy\fR is silently ignored\[char46] See the \fBEXAMPLES\fR section below for more information\[char46]
+.RE
+.TP
+\fBwait\-until\fR \fItable record\fR [\fIcolumn\fR[\fB:\fR\fIkey\fR]\fB=\fR\fIvalue\fR]\[char46]\[char46]\[char46]
+Waits until \fItable\fR contains a record named \fIrecord\fR whose \fIcolumn\fR equals \fIvalue\fR or, if \fIkey\fR is specified, whose \fIcolumn\fR contains a \fIkey\fR with the specified \fIvalue\fR\[char46] This command supports the same operators and semantics described for the \fBfind\fR command above\[char46]
+.IP
+If no \fIcolumn\fR[\fB:\fR\fIkey\fR]\fB=\fR\fIvalue\fR arguments are given, this command waits only until \fIrecord\fR exists\[char46] If more than one such argument is given, the command waits until all of them are satisfied\[char46]
+.RS
+.TP
+Caution (ovs-vsctl as example)
+Usually \fBwait\-until\fR should be placed at the beginning of a set of \fBovs\-vsctl\fR commands\[char46] For example, \fBwait\-until bridge br0
+\-\- get bridge br0 datapath_id\fR waits until a bridge named \fBbr0\fR is created, then prints its \fBdatapath_id\fR column, whereas \fBget bridge br0 datapath_id \-\- wait\-until bridge br0\fR will abort if no bridge named \fBbr0\fR exists when \fBovs\-vsctl\fR initially connects to the database\[char46]
+.RE
+.IP
+Consider specifying \fB\-\-timeout=0\fR along with \fB\-\-wait\-until\fR, to prevent \fBovs\-vsctl\fR from terminating after waiting only at most 5 seconds\[char46]
+.TP
+\fBcomment\fR [\fIarg\fR]\[char46]\[char46]\[char46]
+This command has no effect on behavior, but any database log record created by the command will include the command and its arguments\[char46]
+.RE
+.SH "ENVIRONMENT"
+.TP
+\fBOVN_NB_DAEMON\fR
+If set, this should name the Unix domain socket for an \fBovn\-nbctl\fR server process\[char46] See \fBDaemon Mode\fR, above, for more information\[char46]
+.TP
+\fBOVN_NBCTL_OPTIONS\fR
+If set, a set of options for \fBovn\-nbctl\fR to apply automatically, in the same form as on the command line\[char46]
+.TP
+\fBOVN_NB_DB\fR
+If set, the default database to contact when the \fB\-\-db\fR option is not used\[char46]
+.SH "EXIT STATUS"
+.TP
+0
+Successful program execution\[char46]
+.TP
+1
+Usage, syntax, or network error\[char46]
+.SH "SEE ALSO"
+\fBovn\-nb\fR(5), \fBovn\-appctl\fR(8)\[char46]
diff --git a/support/dist-docs-branch-23.06/ovn-nbctl.8.html b/support/dist-docs-branch-23.06/ovn-nbctl.8.html
new file mode 100644
index 00000000..e730675b
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-nbctl.8.html
@@ -0,0 +1,1718 @@
+<html><head><meta charset="UTF-8"></head><body><pre>
+<u>o</u><u>v</u><u>n</u><u>-</u><u>n</u><u>b</u><u>c</u><u>t</u><u>l</u>(8)                      OVN Manual                      <u>o</u><u>v</u><u>n</u><u>-</u><u>n</u><u>b</u><u>c</u><u>t</u><u>l</u>(8)
+
+<b>N</b><b>A</b><b>M</b><b>E</b>
+       ovn-nbctl - Open Virtual Network northbound db management utility
+
+<b>S</b><b>Y</b><b>N</b><b>O</b><b>P</b><b>S</b><b>I</b><b>S</b>
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b> [<u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u>] <u>c</u><u>o</u><u>m</u><u>m</u><u>a</u><u>n</u><u>d</u> [<u>a</u><u>r</u><u>g</u>...]
+
+<b>D</b><b>E</b><b>S</b><b>C</b><b>R</b><b>I</b><b>P</b><b>T</b><b>I</b><b>O</b><b>N</b>
+       The <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b> program configures the <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database by provid‐
+       ing a high-level interface to its configuration database. See <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b>(5)
+       for comprehensive documentation of the database schema.
+
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b>  connects  to  an  <b>o</b><b>v</b><b>s</b><b>d</b><b>b</b><b>-</b><b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b>  process  that  maintains  an
+       OVN_Northbound  configuration  database.  Using  this  connection,   it
+       queries  and possibly applies changes to the database, depending on the
+       supplied commands.
+
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b> can perform any number of commands in a  single  run,  imple‐
+       mented as a single atomic transaction against the database.
+
+       The  <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b> command line begins with global options (see <b>O</b><b>P</b><b>T</b><b>I</b><b>O</b><b>N</b><b>S</b> be‐
+       low for details). The global options are followed by one or  more  com‐
+       mands.  Each  command  should begin with <b>-</b><b>-</b> by itself as a command-line
+       argument, to separate it from the following commands.  (The  <b>-</b><b>-</b>  before
+       the first command is optional.) The command itself starts with command-
+       specific  options,  if  any, followed by the command name and any argu‐
+       ments.
+
+<b>D</b><b>A</b><b>E</b><b>M</b><b>O</b><b>N</b> <b>M</b><b>O</b><b>D</b><b>E</b>
+       When it is invoked in the most ordinary way, <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b> connects  to  an
+       OVSDB  server  that  hosts the northbound database, retrieves a partial
+       copy of the database that is complete enough to do its  work,  sends  a
+       transaction  request  to  the  server,  and  receives and processes the
+       server’s reply. In common interactive use, this is  fine,  but  if  the
+       database is large, the step in which <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b> retrieves a partial copy
+       of  the  database  can  take a long time, which yields poor performance
+       overall.
+
+       To improve performance in such  a  case,  <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b>  offers  a  "daemon
+       mode,"  in  which  the user first starts <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b> running in the back‐
+       ground and afterward uses the daemon to execute operations.  Over  sev‐
+       eral  <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b>  command  invocations, this performs better overall be‐
+       cause it retrieves a copy of the database only once at  the  beginning,
+       not once per program run.
+
+       Use the <b>-</b><b>-</b><b>d</b><b>e</b><b>t</b><b>a</b><b>c</b><b>h</b> option to start an <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b> daemon. With this option,
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b>  prints  the  name  of a control socket to stdout. The client
+       should save this name in environment variable <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>B</b><b>_</b><b>D</b><b>A</b><b>E</b><b>M</b><b>O</b><b>N</b>. Under  the
+       Bourne shell this might be done like this:
+
+             export OVN_NB_DAEMON=$(ovn-nbctl --pidfile --detach)
+
+
+       When  <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>B</b><b>_</b><b>D</b><b>A</b><b>E</b><b>M</b><b>O</b><b>N</b>  is  set, <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b> automatically and transparently
+       uses the daemon to execute its commands.
+
+       When the daemon is no longer needed, kill it and unset the  environment
+       variable, e.g.:
+
+             kill $(cat $OVN_RUNDIR/ovn-nbctl.pid)
+             unset OVN_NB_DAEMON
+
+
+       When using daemon mode, an alternative to the <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>B</b><b>_</b><b>D</b><b>A</b><b>E</b><b>M</b><b>O</b><b>N</b> environment
+       variable  is  to  specify a path for the Unix socket. When starting the
+       ovn-nbctl daemon, specify the <b>-</b><b>u</b> option with a full path to  the  loca‐
+       tion of the socket file. Here is an exmple:
+
+             ovn-nbctl --detach -u /tmp/mysock.ctl
+
+
+       Then  to connect to the running daemon, use the <b>-</b><b>u</b> option with the full
+       path to the socket created when the daemon was started:
+
+             ovn-nbctl -u /tmp/mysock.ctl show
+
+
+     <u>D</u><u>a</u><u>e</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>m</u><u>m</u><u>a</u><u>n</u><u>d</u><u>s</u>
+
+       Daemon mode is internally implemented using the same mechanism used  by
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>a</b><b>p</b><b>p</b><b>c</b><b>t</b><b>l</b>.  One  may  also  use <b>o</b><b>v</b><b>n</b><b>-</b><b>a</b><b>p</b><b>p</b><b>c</b><b>t</b><b>l</b> directly with the following
+       commands:
+
+              <b>r</b><b>u</b><b>n</b> [<u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u>] <u>c</u><u>o</u><u>m</u><u>m</u><u>a</u><u>n</u><u>d</u> [<u>a</u><u>r</u><u>g</u>...] [<b>-</b><b>-</b> [<u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u>] <u>c</u><u>o</u><u>m</u><u>m</u><u>a</u><u>n</u><u>d</u> [<u>a</u><u>r</u><u>g</u>...]
+              ...]
+                     Instructs the daemon process to run one or more <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b>
+                     commands described above and reply with  the  results  of
+                     running  these  commands.  Accepts the <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>w</b><b>a</b><b>i</b><b>t</b>, <b>-</b><b>-</b><b>w</b><b>a</b><b>i</b><b>t</b>,
+                     <b>-</b><b>-</b><b>t</b><b>i</b><b>m</b><b>e</b><b>o</b><b>u</b><b>t</b>, <b>-</b><b>-</b><b>d</b><b>r</b><b>y</b><b>-</b><b>r</b><b>u</b><b>n</b>,  <b>-</b><b>-</b><b>o</b><b>n</b><b>e</b><b>l</b><b>i</b><b>n</b><b>e</b>,  and  the  options  de‐
+                     scribed under <b>T</b><b>a</b><b>b</b><b>l</b><b>e</b> <b>F</b><b>o</b><b>r</b><b>m</b><b>a</b><b>t</b><b>t</b><b>i</b><b>n</b><b>g</b> <b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> in addition to the
+                     the command-specific options.
+
+              <b>e</b><b>x</b><b>i</b><b>t</b>   Causes <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b> to gracefully terminate.
+
+<b>O</b><b>P</b><b>T</b><b>I</b><b>O</b><b>N</b><b>S</b>
+       The  options  listed below affect the behavior of <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b> as a whole.
+       Some individual commands also accept their own options, which are given
+       just before the command name. If the first command on the command  line
+       has  options,  then those options must be separated from the global op‐
+       tions by <b>-</b><b>-</b>.
+
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b> also accepts options from the  <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>B</b><b>C</b><b>T</b><b>L</b><b>_</b><b>O</b><b>P</b><b>T</b><b>I</b><b>O</b><b>N</b><b>S</b>  environment
+       variable,  in  the same format as on the command line. Options from the
+       command line override those in the environment.
+
+              <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>w</b><b>a</b><b>i</b><b>t</b> | <b>-</b><b>-</b><b>w</b><b>a</b><b>i</b><b>t</b><b>=</b><b>n</b><b>o</b><b>n</b><b>e</b>
+              <b>-</b><b>-</b><b>w</b><b>a</b><b>i</b><b>t</b><b>=</b><b>s</b><b>b</b>
+              <b>-</b><b>-</b><b>w</b><b>a</b><b>i</b><b>t</b><b>=</b><b>h</b><b>v</b>
+                   These options control whether and how <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b>  waits  for
+                   the OVN system to become up-to-date with changes made in an
+                   <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b> invocation.
+
+                   By default, or if <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>w</b><b>a</b><b>i</b><b>t</b> or <b>-</b><b>-</b><b>w</b><b>a</b><b>i</b><b>t</b><b>=</b><b>n</b><b>o</b><b>n</b><b>e</b>, <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b> exits
+                   immediately after confirming that changes have been commit‐
+                   ted to the northbound database, without waiting.
+
+                   With  <b>-</b><b>-</b><b>w</b><b>a</b><b>i</b><b>t</b><b>=</b><b>s</b><b>b</b>,  before  <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b>  exits,  it  waits  for
+                   <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> to bring the southbound database up-to-date with
+                   the northbound database updates.
+
+                   With <b>-</b><b>-</b><b>w</b><b>a</b><b>i</b><b>t</b><b>=</b><b>h</b><b>v</b>, before  <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b>  exits,  it  additionally
+                   waits for all OVN chassis (hypervisors and gateways) to be‐
+                   come up-to-date with the northbound database updates. (This
+                   can  become  an  indefinite wait if any chassis is malfunc‐
+                   tioning.)
+
+                   Ordinarily, <b>-</b><b>-</b><b>w</b><b>a</b><b>i</b><b>t</b><b>=</b><b>s</b><b>b</b> or <b>-</b><b>-</b><b>w</b><b>a</b><b>i</b><b>t</b><b>=</b><b>h</b><b>v</b> only waits  for  changes
+                   by  the  current  <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b> invocation to take effect. This
+                   means that, if none of the commands supplied  to  <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b>
+                   change the database, then the command does not wait at all.
+                   Use the <b>s</b><b>y</b><b>n</b><b>c</b> command to override this behavior.
+
+              <b>-</b><b>-</b><b>d</b><b>b</b> <u>d</u><u>a</u><u>t</u><u>a</u><u>b</u><u>a</u><u>s</u><u>e</u>
+                   The  OVSDB database remote to contact. If the <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>B</b><b>_</b><b>D</b><b>B</b> en‐
+                   vironment variable is set, its value is  used  as  the  de‐
+                   fault.  Otherwise,  the default is <b>u</b><b>n</b><b>i</b><b>x</b><b>:</b><b>/</b><b>o</b><b>v</b><b>n</b><b>n</b><b>b</b><b>_</b><b>d</b><b>b</b><b>.</b><b>s</b><b>o</b><b>c</b><b>k</b>, but
+                   this default is unlikely to be useful outside of single-ma‐
+                   chine OVN test environments.
+
+              <b>-</b><b>-</b><b>l</b><b>e</b><b>a</b><b>d</b><b>e</b><b>r</b><b>-</b><b>o</b><b>n</b><b>l</b><b>y</b>
+              <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>l</b><b>e</b><b>a</b><b>d</b><b>e</b><b>r</b><b>-</b><b>o</b><b>n</b><b>l</b><b>y</b>
+                   By default, or with <b>-</b><b>-</b><b>l</b><b>e</b><b>a</b><b>d</b><b>e</b><b>r</b><b>-</b><b>o</b><b>n</b><b>l</b><b>y</b>, when the database server
+                   is a clustered database, <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b> will avoid servers other
+                   than the cluster leader. This ensures that  any  data  that
+                   <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b>   reads   and   reports   is   up-to-date.   With
+                   <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>l</b><b>e</b><b>a</b><b>d</b><b>e</b><b>r</b><b>-</b><b>o</b><b>n</b><b>l</b><b>y</b>, <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b> will  use  any  server  in  the
+                   cluster, which means that for read-only transactions it can
+                   report  and act on stale data (transactions that modify the
+                   database are always serialized even with <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>l</b><b>e</b><b>a</b><b>d</b><b>e</b><b>r</b><b>-</b><b>o</b><b>n</b><b>l</b><b>y</b>).
+                   Refer to <b>U</b><b>n</b><b>d</b><b>e</b><b>r</b><b>s</b><b>t</b><b>a</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> <b>C</b><b>l</b><b>u</b><b>s</b><b>t</b><b>e</b><b>r</b> <b>C</b><b>o</b><b>n</b><b>s</b><b>i</b><b>s</b><b>t</b><b>e</b><b>n</b><b>c</b><b>y</b> in <b>o</b><b>v</b><b>s</b><b>d</b><b>b</b>(7)  for
+                   more information.
+
+              <b>-</b><b>-</b><b>s</b><b>h</b><b>u</b><b>f</b><b>f</b><b>l</b><b>e</b><b>-</b><b>r</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b><b>s</b>
+              <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>s</b><b>h</b><b>u</b><b>f</b><b>f</b><b>l</b><b>e</b><b>-</b><b>r</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b><b>s</b>
+                   By  default, or with <b>-</b><b>-</b><b>s</b><b>h</b><b>u</b><b>f</b><b>f</b><b>l</b><b>e</b><b>-</b><b>r</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b><b>s</b>, when there are mul‐
+                   tiple remotes specified  in  the  OVSDB  connection  string
+                   specified  by  <b>-</b><b>-</b><b>d</b><b>b</b>  or the <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>B</b><b>_</b><b>D</b><b>B</b> environment variable,
+                   the order of the remotes will be shuffled before the client
+                   tries to connect. The remotes will be shuffled only once to
+                   a new order before the first connection attempt.  The  fol‐
+                   lowing retries, if any, will follow the same new order. The
+                   default  behavior  is  to  make sure clients of a clustered
+                   database can distribute evenly to all members of the  clus‐
+                   ter.  With  <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>s</b><b>h</b><b>u</b><b>f</b><b>f</b><b>l</b><b>e</b><b>-</b><b>r</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b><b>s</b>,  <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b>  will  use the
+                   original order specified in the connection string  to  con‐
+                   nect.  This  allows  user  to  specify the preferred order,
+                   which is particularly useful for testing.
+
+              <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b>
+                   By default, <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b> logs its arguments and the details of
+                   any changes that it makes to the system  log.  This  option
+                   disables this logging.
+
+                   This option is equivalent to <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>b</b><b>o</b><b>s</b><b>e</b><b>=</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b><b>:</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>:</b><b>w</b><b>a</b><b>r</b><b>n</b>.
+
+              <b>-</b><b>-</b><b>o</b><b>n</b><b>e</b><b>l</b><b>i</b><b>n</b><b>e</b>
+                   Modifies the output format so that the output for each com‐
+                   mand  is printed on a single line. New-line characters that
+                   would otherwise separate lines are  printed  as  \fB\\n\fR,
+                   and  any  instances of \fB\\\fR that would otherwise appear
+                   in the output are doubled. Prints a  blank  line  for  each
+                   command that has no output. This option does not affect the
+                   formatting  of  output  from the <b>l</b><b>i</b><b>s</b><b>t</b> or <b>f</b><b>i</b><b>n</b><b>d</b> commands; see
+                   <b>T</b><b>a</b><b>b</b><b>l</b><b>e</b> <b>F</b><b>o</b><b>r</b><b>m</b><b>a</b><b>t</b><b>t</b><b>i</b><b>n</b><b>g</b> <b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> below.
+
+              <b>-</b><b>-</b><b>d</b><b>r</b><b>y</b><b>-</b><b>r</b><b>u</b><b>n</b>
+                   Prevents <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b> from actually modifying the database.
+
+              <b>-</b><b>t</b> <u>s</u><u>e</u><u>c</u><u>s</u>
+              <b>-</b><b>-</b><b>t</b><b>i</b><b>m</b><b>e</b><b>o</b><b>u</b><b>t</b><b>=</b><u>s</u><u>e</u><u>c</u><u>s</u>
+                   By default, or with a <u>s</u><u>e</u><u>c</u><u>s</u> of <b>0</b>,  <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b>  waits  forever
+                   for  a  response from the database. This option limits run‐
+                   time to approximately <u>s</u><u>e</u><u>c</u><u>s</u> seconds. If the timeout expires,
+                   <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b> will exit with a <b>S</b><b>I</b><b>G</b><b>A</b><b>L</b><b>R</b><b>M</b> signal. (A timeout would
+                   normally happen only if the database cannot  be  contacted,
+                   or if the system is overloaded.)
+
+              <b>-</b><b>-</b><b>p</b><b>r</b><b>i</b><b>n</b><b>t</b><b>-</b><b>w</b><b>a</b><b>i</b><b>t</b><b>-</b><b>t</b><b>i</b><b>m</b><b>e</b>
+                   When  <b>-</b><b>-</b><b>w</b><b>a</b><b>i</b><b>t</b> is specified, the option <b>-</b><b>-</b><b>p</b><b>r</b><b>i</b><b>n</b><b>t</b><b>-</b><b>w</b><b>a</b><b>i</b><b>t</b><b>-</b><b>t</b><b>i</b><b>m</b><b>e</b> can
+                   be used to print the time spent on  waiting,  depending  on
+                   the  value  specified  in   <b>-</b><b>-</b><b>w</b><b>a</b><b>i</b><b>t</b>  option. If <b>-</b><b>-</b><b>w</b><b>a</b><b>i</b><b>t</b><b>=</b><b>s</b><b>b</b> is
+                   specified, it prints "ovn-northd delay before  processing",
+                   which  is  the time between the Northbound DB update by the
+                   command and the moment when  <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>  starts  processing
+                   the  update, and "ovn-northd completion", which is the time
+                   between the  Northbound  DB  update  and  the  moment  when
+                   <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>  completes  the  Southbound DB updating success‐
+                   fully. If <b>-</b><b>-</b><b>w</b><b>a</b><b>i</b><b>t</b><b>=</b><b>h</b><b>v</b> is specified, in addition to the  above
+                   information, it also prints "ovn-controller(s) completion",
+                   which  is the time between the Northbound DB update and the
+                   moment when the slowest hypervisor finishes processing  the
+                   update.
+
+   <b>D</b><b>a</b><b>e</b><b>m</b><b>o</b><b>n</b> <b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+       <b>-</b><b>-</b><b>p</b><b>i</b><b>d</b><b>f</b><b>i</b><b>l</b><b>e</b>[<b>=</b><u>p</u><u>i</u><u>d</u><u>f</u><u>i</u><u>l</u><u>e</u>]
+              Causes a file (by default, <u>p</u><u>r</u><u>o</u><u>g</u><u>r</u><u>a</u><u>m</u><b>.</b><b>p</b><b>i</b><b>d</b>) to be created indicating
+              the  PID  of the running process. If the <u>p</u><u>i</u><u>d</u><u>f</u><u>i</u><u>l</u><u>e</u> argument is not
+              specified, or if it does not begin with <b>/</b>, then it is created in
+              .
+
+              If <b>-</b><b>-</b><b>p</b><b>i</b><b>d</b><b>f</b><b>i</b><b>l</b><b>e</b> is not specified, no pidfile is created.
+
+       <b>-</b><b>-</b><b>o</b><b>v</b><b>e</b><b>r</b><b>w</b><b>r</b><b>i</b><b>t</b><b>e</b><b>-</b><b>p</b><b>i</b><b>d</b><b>f</b><b>i</b><b>l</b><b>e</b>
+              By default, when <b>-</b><b>-</b><b>p</b><b>i</b><b>d</b><b>f</b><b>i</b><b>l</b><b>e</b> is specified and the  specified  pid‐
+              file already exists and is locked by a running process, the dae‐
+              mon refuses to start. Specify <b>-</b><b>-</b><b>o</b><b>v</b><b>e</b><b>r</b><b>w</b><b>r</b><b>i</b><b>t</b><b>e</b><b>-</b><b>p</b><b>i</b><b>d</b><b>f</b><b>i</b><b>l</b><b>e</b> to cause it to
+              instead overwrite the pidfile.
+
+              When <b>-</b><b>-</b><b>p</b><b>i</b><b>d</b><b>f</b><b>i</b><b>l</b><b>e</b> is not specified, this option has no effect.
+
+       <b>-</b><b>-</b><b>d</b><b>e</b><b>t</b><b>a</b><b>c</b><b>h</b>
+              Runs  this  program  as a background process. The process forks,
+              and in the child it starts a new session,  closes  the  standard
+              file descriptors (which has the side effect of disabling logging
+              to  the  console), and changes its current directory to the root
+              (unless <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>c</b><b>h</b><b>d</b><b>i</b><b>r</b> is specified). After the child completes  its
+              initialization, the parent exits.
+
+       <b>-</b><b>-</b><b>m</b><b>o</b><b>n</b><b>i</b><b>t</b><b>o</b><b>r</b>
+              Creates  an  additional  process  to monitor this program. If it
+              dies due to a signal that indicates a programming  error  (<b>S</b><b>I</b><b>G</b><b>A</b>‐‐
+              <b>B</b><b>R</b><b>T</b>, <b>S</b><b>I</b><b>G</b><b>A</b><b>L</b><b>R</b><b>M</b>, <b>S</b><b>I</b><b>G</b><b>B</b><b>U</b><b>S</b>, <b>S</b><b>I</b><b>G</b><b>F</b><b>P</b><b>E</b>, <b>S</b><b>I</b><b>G</b><b>I</b><b>L</b><b>L</b>, <b>S</b><b>I</b><b>G</b><b>P</b><b>I</b><b>P</b><b>E</b>, <b>S</b><b>I</b><b>G</b><b>S</b><b>E</b><b>G</b><b>V</b>, <b>S</b><b>I</b><b>G</b><b>X</b><b>C</b><b>P</b><b>U</b>,
+              or <b>S</b><b>I</b><b>G</b><b>X</b><b>F</b><b>S</b><b>Z</b>) then the monitor process starts a new copy of it. If
+              the daemon dies or exits for another reason, the monitor process
+              exits.
+
+              This  option  is  normally used with <b>-</b><b>-</b><b>d</b><b>e</b><b>t</b><b>a</b><b>c</b><b>h</b>, but it also func‐
+              tions without it.
+
+       <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>c</b><b>h</b><b>d</b><b>i</b><b>r</b>
+              By default, when <b>-</b><b>-</b><b>d</b><b>e</b><b>t</b><b>a</b><b>c</b><b>h</b> is specified, the daemon  changes  its
+              current  working  directory  to  the root directory after it de‐
+              taches. Otherwise, invoking the daemon from a carelessly  chosen
+              directory  would  prevent  the administrator from unmounting the
+              file system that holds that directory.
+
+              Specifying <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>c</b><b>h</b><b>d</b><b>i</b><b>r</b> suppresses this behavior,  preventing  the
+              daemon  from changing its current working directory. This may be
+              useful for collecting core files, since it is common behavior to
+              write core dumps into the current working directory and the root
+              directory is not a good directory to use.
+
+              This option has no effect when <b>-</b><b>-</b><b>d</b><b>e</b><b>t</b><b>a</b><b>c</b><b>h</b> is not specified.
+
+       <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>s</b><b>e</b><b>l</b><b>f</b><b>-</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>n</b><b>e</b><b>m</b><b>e</b><b>n</b><b>t</b>
+              By default this daemon will try to self-confine itself  to  work
+              with  files  under  well-known  directories  determined at build
+              time. It is better to stick with this default behavior  and  not
+              to  use  this  flag  unless some other Access Control is used to
+              confine daemon. Note that in contrast to  other  access  control
+              implementations  that  are  typically enforced from kernel-space
+              (e.g. DAC or MAC), self-confinement is imposed  from  the  user-
+              space daemon itself and hence should not be considered as a full
+              confinement  strategy,  but instead should be viewed as an addi‐
+              tional layer of security.
+
+       <b>-</b><b>-</b><b>u</b><b>s</b><b>e</b><b>r</b><b>=</b><u>u</u><u>s</u><u>e</u><u>r</u><b>:</b><u>g</u><u>r</u><u>o</u><u>u</u><u>p</u>
+              Causes this program to run as  a  different  user  specified  in
+              <u>u</u><u>s</u><u>e</u><u>r</u><b>:</b><u>g</u><u>r</u><u>o</u><u>u</u><u>p</u>,  thus  dropping  most  of the root privileges. Short
+              forms <u>u</u><u>s</u><u>e</u><u>r</u> and <b>:</b><u>g</u><u>r</u><u>o</u><u>u</u><u>p</u> are also allowed,  with  current  user  or
+              group  assumed,  respectively.  Only daemons started by the root
+              user accepts this argument.
+
+              On   Linux,   daemons   will   be   granted   <b>C</b><b>A</b><b>P</b><b>_</b><b>I</b><b>P</b><b>C</b><b>_</b><b>L</b><b>O</b><b>C</b><b>K</b>   and
+              <b>C</b><b>A</b><b>P</b><b>_</b><b>N</b><b>E</b><b>T</b><b>_</b><b>B</b><b>I</b><b>N</b><b>D</b><b>_</b><b>S</b><b>E</b><b>R</b><b>V</b><b>I</b><b>C</b><b>E</b><b>S</b>  before  dropping root privileges. Daemons
+              that interact with a datapath, such  as  <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>d</b>,  will  be
+              granted  three  additional  capabilities,  namely <b>C</b><b>A</b><b>P</b><b>_</b><b>N</b><b>E</b><b>T</b><b>_</b><b>A</b><b>D</b><b>M</b><b>I</b><b>N</b>,
+              <b>C</b><b>A</b><b>P</b><b>_</b><b>N</b><b>E</b><b>T</b><b>_</b><b>B</b><b>R</b><b>O</b><b>A</b><b>D</b><b>C</b><b>A</b><b>S</b><b>T</b> and <b>C</b><b>A</b><b>P</b><b>_</b><b>N</b><b>E</b><b>T</b><b>_</b><b>R</b><b>A</b><b>W</b>. The  capability  change  will
+              apply even if the new user is root.
+
+              On Windows, this option is not currently supported. For security
+              reasons,  specifying  this  option will cause the daemon process
+              not to start.
+
+   <b>L</b><b>o</b><b>g</b><b>g</b><b>i</b><b>n</b><b>g</b> <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+       <b>-</b><b>v</b>[<u>s</u><u>p</u><u>e</u><u>c</u>]
+       <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>b</b><b>o</b><b>s</b><b>e</b><b>=</b>[<u>s</u><u>p</u><u>e</u><u>c</u>]
+            Sets logging levels. Without any <u>s</u><u>p</u><u>e</u><u>c</u>,  sets  the  log  level  for
+            every  module and destination to <b>d</b><b>b</b><b>g</b>. Otherwise, <u>s</u><u>p</u><u>e</u><u>c</u> is a list of
+            words separated by spaces or commas or colons, up to one from each
+            category below:
+
+            •      A valid module name, as displayed by the <b>v</b><b>l</b><b>o</b><b>g</b><b>/</b><b>l</b><b>i</b><b>s</b><b>t</b>  command
+                   on <b>o</b><b>v</b><b>s</b><b>-</b><b>a</b><b>p</b><b>p</b><b>c</b><b>t</b><b>l</b>(8), limits the log level change to the speci‐
+                   fied module.
+
+            •      <b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b>,  <b>c</b><b>o</b><b>n</b><b>s</b><b>o</b><b>l</b><b>e</b>, or <b>f</b><b>i</b><b>l</b><b>e</b>, to limit the log level change to
+                   only to the system log, to the console, or to a  file,  re‐
+                   spectively.  (If  <b>-</b><b>-</b><b>d</b><b>e</b><b>t</b><b>a</b><b>c</b><b>h</b>  is specified, the daemon closes
+                   its standard file descriptors, so logging  to  the  console
+                   will have no effect.)
+
+                   On  Windows  platform,  <b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b> is accepted as a word and is
+                   only useful along with the <b>-</b><b>-</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>-</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> option (the word
+                   has no effect otherwise).
+
+            •      <b>o</b><b>f</b><b>f</b>, <b>e</b><b>m</b><b>e</b><b>r</b>, <b>e</b><b>r</b><b>r</b>, <b>w</b><b>a</b><b>r</b><b>n</b>, <b>i</b><b>n</b><b>f</b><b>o</b>, or  <b>d</b><b>b</b><b>g</b>,  to  control  the  log
+                   level.  Messages  of  the  given severity or higher will be
+                   logged, and messages of lower  severity  will  be  filtered
+                   out.  <b>o</b><b>f</b><b>f</b> filters out all messages. See <b>o</b><b>v</b><b>s</b><b>-</b><b>a</b><b>p</b><b>p</b><b>c</b><b>t</b><b>l</b>(8) for a
+                   definition of each log level.
+
+            Case is not significant within <u>s</u><u>p</u><u>e</u><u>c</u>.
+
+            Regardless of the log levels set for <b>f</b><b>i</b><b>l</b><b>e</b>, logging to a file  will
+            not take place unless <b>-</b><b>-</b><b>l</b><b>o</b><b>g</b><b>-</b><b>f</b><b>i</b><b>l</b><b>e</b> is also specified (see below).
+
+            For compatibility with older versions of OVS, <b>a</b><b>n</b><b>y</b> is accepted as a
+            word but has no effect.
+
+       <b>-</b><b>v</b>
+       <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>b</b><b>o</b><b>s</b><b>e</b>
+            Sets  the  maximum  logging  verbosity level, equivalent to <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b>‐‐
+            <b>b</b><b>o</b><b>s</b><b>e</b><b>=</b><b>d</b><b>b</b><b>g</b>.
+
+       <b>-</b><b>v</b><b>P</b><b>A</b><b>T</b><b>T</b><b>E</b><b>R</b><b>N</b><b>:</b><u>d</u><u>e</u><u>s</u><u>t</u><u>i</u><u>n</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u><b>:</b><u>p</u><u>a</u><u>t</u><u>t</u><u>e</u><u>r</u><u>n</u>
+       <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>b</b><b>o</b><b>s</b><b>e</b><b>=</b><b>P</b><b>A</b><b>T</b><b>T</b><b>E</b><b>R</b><b>N</b><b>:</b><u>d</u><u>e</u><u>s</u><u>t</u><u>i</u><u>n</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u><b>:</b><u>p</u><u>a</u><u>t</u><u>t</u><u>e</u><u>r</u><u>n</u>
+            Sets the log pattern for <u>d</u><u>e</u><u>s</u><u>t</u><u>i</u><u>n</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u> to <u>p</u><u>a</u><u>t</u><u>t</u><u>e</u><u>r</u><u>n</u>. Refer to  <b>o</b><b>v</b><b>s</b><b>-</b><b>a</b><b>p</b>‐‐
+            <b>p</b><b>c</b><b>t</b><b>l</b>(8) for a description of the valid syntax for <u>p</u><u>a</u><u>t</u><u>t</u><u>e</u><u>r</u><u>n</u>.
+
+       <b>-</b><b>v</b><b>F</b><b>A</b><b>C</b><b>I</b><b>L</b><b>I</b><b>T</b><b>Y</b><b>:</b><u>f</u><u>a</u><u>c</u><u>i</u><u>l</u><u>i</u><u>t</u><u>y</u>
+       <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>b</b><b>o</b><b>s</b><b>e</b><b>=</b><b>F</b><b>A</b><b>C</b><b>I</b><b>L</b><b>I</b><b>T</b><b>Y</b><b>:</b><u>f</u><u>a</u><u>c</u><u>i</u><u>l</u><u>i</u><u>t</u><u>y</u>
+            Sets  the RFC5424 facility of the log message. <u>f</u><u>a</u><u>c</u><u>i</u><u>l</u><u>i</u><u>t</u><u>y</u> can be one
+            of <b>k</b><b>e</b><b>r</b><b>n</b>, <b>u</b><b>s</b><b>e</b><b>r</b>, <b>m</b><b>a</b><b>i</b><b>l</b>, <b>d</b><b>a</b><b>e</b><b>m</b><b>o</b><b>n</b>, <b>a</b><b>u</b><b>t</b><b>h</b>, <b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b>, <b>l</b><b>p</b><b>r</b>, <b>n</b><b>e</b><b>w</b><b>s</b>, <b>u</b><b>u</b><b>c</b><b>p</b>, <b>c</b><b>l</b><b>o</b><b>c</b><b>k</b>,
+            <b>f</b><b>t</b><b>p</b>, <b>n</b><b>t</b><b>p</b>, <b>a</b><b>u</b><b>d</b><b>i</b><b>t</b>, <b>a</b><b>l</b><b>e</b><b>r</b><b>t</b>, <b>c</b><b>l</b><b>o</b><b>c</b><b>k</b><b>2</b>, <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>0</b>,  <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>1</b>,  <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>2</b>,  <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>3</b>,
+            <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>4</b>, <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>5</b>, <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>6</b> or <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>7</b>. If this option is not specified,
+            <b>d</b><b>a</b><b>e</b><b>m</b><b>o</b><b>n</b>  is used as the default for the local system syslog and <b>l</b><b>o</b>‐‐
+            <b>c</b><b>a</b><b>l</b><b>0</b> is used while sending a message to the  target  provided  via
+            the <b>-</b><b>-</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>-</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> option.
+
+       <b>-</b><b>-</b><b>l</b><b>o</b><b>g</b><b>-</b><b>f</b><b>i</b><b>l</b><b>e</b>[<b>=</b><u>f</u><u>i</u><u>l</u><u>e</u>]
+            Enables  logging  to a file. If <u>f</u><u>i</u><u>l</u><u>e</u> is specified, then it is used
+            as the exact name for the log file. The default log file name used
+            if <u>f</u><u>i</u><u>l</u><u>e</u> is omitted is <b>/</b><b>u</b><b>s</b><b>r</b><b>/</b><b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>/</b><b>v</b><b>a</b><b>r</b><b>/</b><b>l</b><b>o</b><b>g</b><b>/</b><b>o</b><b>v</b><b>n</b><b>/</b><u>p</u><u>r</u><u>o</u><u>g</u><u>r</u><u>a</u><u>m</u><b>.</b><b>l</b><b>o</b><b>g</b>.
+
+       <b>-</b><b>-</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>-</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b><b>=</b><u>h</u><u>o</u><u>s</u><u>t</u><b>:</b><u>p</u><u>o</u><u>r</u><u>t</u>
+            Send syslog messages to UDP <u>p</u><u>o</u><u>r</u><u>t</u> on <u>h</u><u>o</u><u>s</u><u>t</u>, in addition to the  sys‐
+            tem  syslog.  The <u>h</u><u>o</u><u>s</u><u>t</u> must be a numerical IP address, not a host‐
+            name.
+
+       <b>-</b><b>-</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>-</b><b>m</b><b>e</b><b>t</b><b>h</b><b>o</b><b>d</b><b>=</b><u>m</u><u>e</u><u>t</u><u>h</u><u>o</u><u>d</u>
+            Specify <u>m</u><u>e</u><u>t</u><u>h</u><u>o</u><u>d</u> as how syslog messages should  be  sent  to  syslog
+            daemon. The following forms are supported:
+
+            •      <b>l</b><b>i</b><b>b</b><b>c</b>,  to use the libc <b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>(</b><b>)</b> function. Downside of using
+                   this options is that libc adds fixed prefix to  every  mes‐
+                   sage  before  it is actually sent to the syslog daemon over
+                   <b>/</b><b>d</b><b>e</b><b>v</b><b>/</b><b>l</b><b>o</b><b>g</b> UNIX domain socket.
+
+            •      <b>u</b><b>n</b><b>i</b><b>x</b><b>:</b><u>f</u><u>i</u><u>l</u><u>e</u>, to use a UNIX domain socket directly. It is pos‐
+                   sible to specify arbitrary message format with this option.
+                   However, <b>r</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>d</b> <b>8</b><b>.</b><b>9</b> and older  versions  use  hard  coded
+                   parser  function anyway that limits UNIX domain socket use.
+                   If you want to use  arbitrary  message  format  with  older
+                   <b>r</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>d</b>  versions, then use UDP socket to localhost IP ad‐
+                   dress instead.
+
+            •      <b>u</b><b>d</b><b>p</b><b>:</b><u>i</u><u>p</u><b>:</b><u>p</u><u>o</u><u>r</u><u>t</u>, to use a UDP socket. With this  method  it  is
+                   possible  to  use  arbitrary message format also with older
+                   <b>r</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>d</b>. When sending syslog messages over UDP socket  ex‐
+                   tra precaution needs to be taken into account, for example,
+                   syslog daemon needs to be configured to listen on the spec‐
+                   ified  UDP  port, accidental iptables rules could be inter‐
+                   fering with local syslog traffic and there are  some  secu‐
+                   rity  considerations  that apply to UDP sockets, but do not
+                   apply to UNIX domain sockets.
+
+            •      <b>n</b><b>u</b><b>l</b><b>l</b>, to discard all messages logged to syslog.
+
+            The default is taken from the <b>O</b><b>V</b><b>S</b><b>_</b><b>S</b><b>Y</b><b>S</b><b>L</b><b>O</b><b>G</b><b>_</b><b>M</b><b>E</b><b>T</b><b>H</b><b>O</b><b>D</b> environment  vari‐
+            able; if it is unset, the default is <b>l</b><b>i</b><b>b</b><b>c</b>.
+
+   <b>T</b><b>a</b><b>b</b><b>l</b><b>e</b> <b>F</b><b>o</b><b>r</b><b>m</b><b>a</b><b>t</b><b>t</b><b>i</b><b>n</b><b>g</b> <b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+       These  options control the format of output from the <b>l</b><b>i</b><b>s</b><b>t</b> and <b>f</b><b>i</b><b>n</b><b>d</b> com‐
+       mands.
+
+              <b>-</b><b>f</b> <u>f</u><u>o</u><u>r</u><u>m</u><u>a</u><u>t</u>
+              <b>-</b><b>-</b><b>f</b><b>o</b><b>r</b><b>m</b><b>a</b><b>t</b><b>=</b><u>f</u><u>o</u><u>r</u><u>m</u><u>a</u><u>t</u>
+                   Sets the type of table formatting. The following  types  of
+                   <u>f</u><u>o</u><u>r</u><u>m</u><u>a</u><u>t</u> are available:
+
+                   <b>t</b><b>a</b><b>b</b><b>l</b><b>e</b>  2-D text tables with aligned columns.
+
+                   <b>l</b><b>i</b><b>s</b><b>t</b> (default)
+                          A  list  with one column per line and rows separated
+                          by a blank line.
+
+                   <b>h</b><b>t</b><b>m</b><b>l</b>   HTML tables.
+
+                   <b>c</b><b>s</b><b>v</b>    Comma-separated values as defined in RFC 4180.
+
+                   <b>j</b><b>s</b><b>o</b><b>n</b>   JSON format as defined in RFC 4627. The output is  a
+                          sequence  of JSON objects, each of which corresponds
+                          to one table. Each JSON  object  has  the  following
+                          members with the noted values:
+
+                          <b>c</b><b>a</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b>
+                                 The  table’s  caption. This member is omitted
+                                 if the table has no caption.
+
+                          <b>h</b><b>e</b><b>a</b><b>d</b><b>i</b><b>n</b><b>g</b><b>s</b>
+                                 An array with one element per  table  column.
+                                 Each  array  element  is  a string giving the
+                                 corresponding column’s heading.
+
+                          <b>d</b><b>a</b><b>t</b><b>a</b>   An array with one element per table row. Each
+                                 element is also an array with one element per
+                                 table column. The elements  of  this  second-
+                                 level array are the cells that constitute the
+                                 table.  Cells  that  represent  OVSDB data or
+                                 data types are expressed in  the  format  de‐
+                                 scribed  in  the  OVSDB  specification; other
+                                 cells are simply expressed as text strings.
+
+              <b>-</b><b>d</b> <u>f</u><u>o</u><u>r</u><u>m</u><u>a</u><u>t</u>
+              <b>-</b><b>-</b><b>d</b><b>a</b><b>t</b><b>a</b><b>=</b><u>f</u><u>o</u><u>r</u><u>m</u><u>a</u><u>t</u>
+                   Sets the formatting for cells within output  tables  unless
+                   the table format is set to <b>j</b><b>s</b><b>o</b><b>n</b>, in which case <b>j</b><b>s</b><b>o</b><b>n</b> format‐
+                   ting  is  always  used when formatting cells. The following
+                   types of <u>f</u><u>o</u><u>r</u><u>m</u><u>a</u><u>t</u> are available:
+
+                   <b>s</b><b>t</b><b>r</b><b>i</b><b>n</b><b>g</b> (default)
+                          The simple format described in the  <b>D</b><b>a</b><b>t</b><b>a</b><b>b</b><b>a</b><b>s</b><b>e</b>  <b>V</b><b>a</b><b>l</b><b>u</b><b>e</b><b>s</b>
+                          section of <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>c</b><b>t</b><b>l</b>(8).
+
+                   <b>b</b><b>a</b><b>r</b><b>e</b>   The  simple format with punctuation stripped off: <b>[</b><b>]</b>
+                          and <b>{</b><b>}</b> are omitted  around  sets,  maps,  and  empty
+                          columns,  items within sets and maps are space-sepa‐
+                          rated, and strings are never quoted. This format may
+                          be easier for scripts to parse.
+
+                   <b>j</b><b>s</b><b>o</b><b>n</b>   The RFC 4627 JSON format as described above.
+
+              <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>h</b><b>e</b><b>a</b><b>d</b><b>i</b><b>n</b><b>g</b><b>s</b>
+                   This option suppresses the heading row that  otherwise  ap‐
+                   pears in the first row of table output.
+
+              <b>-</b><b>-</b><b>p</b><b>r</b><b>e</b><b>t</b><b>t</b><b>y</b>
+                   By  default, JSON in output is printed as compactly as pos‐
+                   sible. This option causes JSON in output to be printed in a
+                   more readable fashion. Members of objects and  elements  of
+                   arrays are printed one per line, with indentation.
+
+                   This option does not affect JSON in tables, which is always
+                   printed compactly.
+
+              <b>-</b><b>-</b><b>b</b><b>a</b><b>r</b><b>e</b>
+                   Equivalent to <b>-</b><b>-</b><b>f</b><b>o</b><b>r</b><b>m</b><b>a</b><b>t</b><b>=</b><b>l</b><b>i</b><b>s</b><b>t</b> <b>-</b><b>-</b><b>d</b><b>a</b><b>t</b><b>a</b><b>=</b><b>b</b><b>a</b><b>r</b><b>e</b> <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>h</b><b>e</b><b>a</b><b>d</b><b>i</b><b>n</b><b>g</b><b>s</b>.
+
+   <b>P</b><b>K</b><b>I</b> <b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+       PKI  configuration  is  required  to  use SSL for the connection to the
+       database.
+
+              <b>-</b><b>p</b> <u>p</u><u>r</u><u>i</u><u>v</u><u>k</u><u>e</u><u>y</u><u>.</u><u>p</u><u>e</u><u>m</u>
+              <b>-</b><b>-</b><b>p</b><b>r</b><b>i</b><b>v</b><b>a</b><b>t</b><b>e</b><b>-</b><b>k</b><b>e</b><b>y</b><b>=</b><u>p</u><u>r</u><u>i</u><u>v</u><u>k</u><u>e</u><u>y</u><u>.</u><u>p</u><u>e</u><u>m</u>
+                   Specifies a PEM file containing the  private  key  used  as
+                   identity for outgoing SSL connections.
+
+              <b>-</b><b>c</b> <u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+              <b>-</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>i</b><b>f</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b><b>=</b><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+                   Specifies  a  PEM file containing a certificate that certi‐
+                   fies the private key specified on <b>-</b><b>p</b> or <b>-</b><b>-</b><b>p</b><b>r</b><b>i</b><b>v</b><b>a</b><b>t</b><b>e</b><b>-</b><b>k</b><b>e</b><b>y</b> to be
+                   trustworthy. The certificate must be signed by the certifi‐
+                   cate authority (CA) that the peer in SSL  connections  will
+                   use to verify it.
+
+              <b>-</b><b>C</b> <u>c</u><u>a</u><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+              <b>-</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>=</b><u>c</u><u>a</u><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+                   Specifies a PEM file containing the CA certificate for ver‐
+                   ifying certificates presented to this program by SSL peers.
+                   (This  may  be  the  same certificate that SSL peers use to
+                   verify the certificate specified on <b>-</b><b>c</b> or <b>-</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>i</b><b>f</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b>, or
+                   it may be a different one, depending on the PKI  design  in
+                   use.)
+
+              <b>-</b><b>C</b> <b>n</b><b>o</b><b>n</b><b>e</b>
+              <b>-</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>=</b><b>n</b><b>o</b><b>n</b><b>e</b>
+                   Disables  verification  of  certificates  presented  by SSL
+                   peers. This introduces a security risk,  because  it  means
+                   that  certificates  cannot be verified to be those of known
+                   trusted hosts.
+
+              <b>-</b><b>-</b><b>b</b><b>o</b><b>o</b><b>t</b><b>s</b><b>t</b><b>r</b><b>a</b><b>p</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>=</b><u>c</u><u>a</u><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+                     When <u>c</u><u>a</u><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u> exists, this option has the  same  effect
+                     as  <b>-</b><b>C</b>  or <b>-</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b>. If it does not exist, then the exe‐
+                     cutable will attempt to obtain the  CA  certificate  from
+                     the  SSL  peer on its first SSL connection and save it to
+                     the named PEM file. If it is successful, it will  immedi‐
+                     ately drop the connection and reconnect, and from then on
+                     all  SSL  connections must be authenticated by a certifi‐
+                     cate signed by the CA certificate thus obtained.
+
+                     This option exposes the SSL connection to  a  man-in-the-
+                     middle  attack  obtaining the initial CA certificate, but
+                     it may be useful for bootstrapping.
+
+                     This option is only useful if the SSL peer sends  its  CA
+                     certificate as part of the SSL certificate chain. The SSL
+                     protocol  does not require the server to send the CA cer‐
+                     tificate.
+
+                     This option is mutually exclusive with <b>-</b><b>C</b> and <b>-</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b>.
+
+   <b>O</b><b>t</b><b>h</b><b>e</b><b>r</b> <b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+       <b>-</b><b>h</b>
+       <b>-</b><b>-</b><b>h</b><b>e</b><b>l</b><b>p</b>
+            Prints a brief help message to the console.
+
+       <b>-</b><b>V</b>
+       <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>s</b><b>i</b><b>o</b><b>n</b>
+            Prints version information to the console.
+
+<b>C</b><b>O</b><b>M</b><b>M</b><b>A</b><b>N</b><b>D</b><b>S</b>
+       The following sections describe the commands that <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b> supports.
+
+   <b>G</b><b>e</b><b>n</b><b>e</b><b>r</b><b>a</b><b>l</b> <b>C</b><b>o</b><b>m</b><b>m</b><b>a</b><b>n</b><b>d</b><b>s</b>
+       <b>i</b><b>n</b><b>i</b><b>t</b>   Initializes the database, if it is empty. If  the  database  has
+              already been initialized, this command has no effect.
+
+       <b>s</b><b>h</b><b>o</b><b>w</b> <b>[</b><u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u> <b>|</b> <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u><b>]</b>
+              Prints  a  brief overview of the database contents. If <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u> is
+              provided, only records related to that logical switch are shown.
+              If <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u> is provided, only  records  related  to  that  logical
+              router are shown.
+
+   <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b> <b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b> <b>C</b><b>o</b><b>m</b><b>m</b><b>a</b><b>n</b><b>d</b><b>s</b>
+       <b>l</b><b>s</b><b>-</b><b>a</b><b>d</b><b>d</b> Creates  a  new,  unnamed logical switch, which initially has no
+              ports. The switch does not have a name, other commands must  re‐
+              fer to this switch by its UUID.
+
+       [<b>-</b><b>-</b><b>m</b><b>a</b><b>y</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b> | <b>-</b><b>-</b><b>a</b><b>d</b><b>d</b><b>-</b><b>d</b><b>u</b><b>p</b><b>l</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b>] <b>l</b><b>s</b><b>-</b><b>a</b><b>d</b><b>d</b> <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u>
+              Creates  a  new logical switch named <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u>, which initially has
+              no ports.
+
+              The OVN northbound database  schema  does  not  require  logical
+              switch  names  to be unique, but the whole point to the names is
+              to provide an easy way for humans to refer to the switches, mak‐
+              ing duplicate names unhelpful. Thus, without any  options,  this
+              command  regards  it  as an error if <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u> is a duplicate name.
+              With <b>-</b><b>-</b><b>m</b><b>a</b><b>y</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b>, adding a duplicate name succeeds but does  not
+              create  a  new logical switch. With <b>-</b><b>-</b><b>a</b><b>d</b><b>d</b><b>-</b><b>d</b><b>u</b><b>p</b><b>l</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b>, the command
+              really creates a new logical switch with a duplicate name. It is
+              an error to specify both options. If there are multiple  logical
+              switches  with  a duplicate name, configure the logical switches
+              using the UUID instead of the <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u> name.
+
+       [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] <b>l</b><b>s</b><b>-</b><b>d</b><b>e</b><b>l</b> <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u>
+              Deletes <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u>. It is an error if <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u> does not exist,  unless
+              <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b> is specified.
+
+       <b>l</b><b>s</b><b>-</b><b>l</b><b>i</b><b>s</b><b>t</b>
+              Lists all existing switches on standard output, one per line.
+
+   <b>A</b><b>C</b><b>L</b> <b>C</b><b>o</b><b>m</b><b>m</b><b>a</b><b>n</b><b>d</b><b>s</b>
+       These  commands  operates on ACL objects for a given <u>e</u><u>n</u><u>t</u><u>i</u><u>t</u><u>y</u>. The <u>e</u><u>n</u><u>t</u><u>i</u><u>t</u><u>y</u>
+       can be either a logical switch or a port group. The <u>e</u><u>n</u><u>t</u><u>i</u><u>t</u><u>y</u> can be spec‐
+       ified as uuid or name. The <b>-</b><b>-</b><b>t</b><b>y</b><b>p</b><b>e</b> option can be  used  to  specify  the
+       type of the <u>e</u><u>n</u><u>t</u><u>i</u><u>t</u><u>y</u>, in case both a logical switch and a port groups ex‐
+       ist with the same name specified for <u>e</u><u>n</u><u>t</u><u>i</u><u>t</u><u>y</u>. <b>t</b><b>y</b><b>p</b><b>e</b> must be either <b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b>
+       or <b>p</b><b>o</b><b>r</b><b>t</b><b>-</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b>.
+
+              [<b>-</b><b>-</b><b>t</b><b>y</b><b>p</b><b>e</b><b>=</b>{<b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b> | <b>p</b><b>o</b><b>r</b><b>t</b><b>-</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b>}] [<b>-</b><b>-</b><b>l</b><b>o</b><b>g</b>] [<b>-</b><b>-</b><b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>=</b><u>m</u><u>e</u><u>t</u><u>e</u><u>r</u>] [<b>-</b><b>-</b><b>s</b><b>e</b><b>v</b><b>e</b><b>r</b>‐‐
+              <b>i</b><b>t</b><b>y</b><b>=</b><u>s</u><u>e</u><u>v</u><u>e</u><u>r</u><u>i</u><u>t</u><u>y</u>] [<b>-</b><b>-</b><b>n</b><b>a</b><b>m</b><b>e</b><b>=</b><u>n</u><u>a</u><u>m</u><u>e</u>] [<b>-</b><b>-</b><b>l</b><b>a</b><b>b</b><b>e</b><b>l</b><b>=</b><u>l</u><u>a</u><u>b</u><u>e</u><u>l</u>] [<b>-</b><b>-</b><b>m</b><b>a</b><b>y</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b>] [<b>-</b><b>-</b><b>a</b><b>p</b>‐‐
+              <b>p</b><b>l</b><b>y</b><b>-</b><b>a</b><b>f</b><b>t</b><b>e</b><b>r</b><b>-</b><b>l</b><b>b</b>] [<b>-</b><b>-</b><b>t</b><b>i</b><b>e</b><b>r</b>] <b>a</b><b>c</b><b>l</b><b>-</b><b>a</b><b>d</b><b>d</b> <u>e</u><u>n</u><u>t</u><u>i</u><u>t</u><u>y</u> <u>d</u><u>i</u><u>r</u><u>e</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u> <u>p</u><u>r</u><u>i</u><u>o</u><u>r</u><u>i</u><u>t</u><u>y</u> <u>m</u><u>a</u><u>t</u><u>c</u><u>h</u>
+              <u>v</u><u>e</u><u>r</u><u>d</u><u>i</u><u>c</u><u>t</u>
+                     Adds  the  specified ACL to <u>e</u><u>n</u><u>t</u><u>i</u><u>t</u><u>y</u>. <u>d</u><u>i</u><u>r</u><u>e</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u> must be ei‐
+                     ther <b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b> or <b>t</b><b>o</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b>. <u>p</u><u>r</u><u>i</u><u>o</u><u>r</u><u>i</u><u>t</u><u>y</u> must be  between  <b>0</b>
+                     and  <b>3</b><b>2</b><b>7</b><b>6</b><b>7</b>,  inclusive.  A full description of the fields
+                     are in <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b>(5). If <b>-</b><b>-</b><b>m</b><b>a</b><b>y</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b> is specified,  adding  a
+                     duplicated  ACL  succeeds  but the ACL is not really cre‐
+                     ated. Without <b>-</b><b>-</b><b>m</b><b>a</b><b>y</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b>, adding a  duplicated  ACL  re‐
+                     sults in error.
+
+                     The  <b>-</b><b>-</b><b>l</b><b>o</b><b>g</b> option enables packet logging for the ACL. The
+                     options <b>-</b><b>-</b><b>s</b><b>e</b><b>v</b><b>e</b><b>r</b><b>i</b><b>t</b><b>y</b> and  <b>-</b><b>-</b><b>n</b><b>a</b><b>m</b><b>e</b>  specify  a  severity  and
+                     name, respectively, for log entries (and also enable log‐
+                     ging).  The  severity  must be one of <b>a</b><b>l</b><b>e</b><b>r</b><b>t</b>, <b>w</b><b>a</b><b>r</b><b>n</b><b>i</b><b>n</b><b>g</b>, <b>n</b><b>o</b>‐‐
+                     <b>t</b><b>i</b><b>c</b><b>e</b>, <b>i</b><b>n</b><b>f</b><b>o</b>, or <b>d</b><b>e</b><b>b</b><b>u</b><b>g</b>. If a severity is not specified, the
+                     default is <b>i</b><b>n</b><b>f</b><b>o</b>. The  <b>-</b><b>-</b><b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>=</b><u>m</u><u>e</u><u>t</u><u>e</u><u>r</u>  option  is  used  to
+                     rate-limit packet logging. The <u>m</u><u>e</u><u>t</u><u>e</u><u>r</u> argument names a me‐
+                     ter configured by <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>-</b><b>a</b><b>d</b><b>d</b>.
+
+                     The  <b>-</b><b>-</b><b>a</b><b>p</b><b>p</b><b>l</b><b>y</b><b>-</b><b>a</b><b>f</b><b>t</b><b>e</b><b>r</b><b>-</b><b>l</b><b>b</b>  option sets <b>a</b><b>p</b><b>p</b><b>l</b><b>y</b><b>-</b><b>a</b><b>f</b><b>t</b><b>e</b><b>r</b><b>-</b><b>l</b><b>b</b><b>=</b><b>t</b><b>r</b><b>u</b><b>e</b> in
+                     the <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> column of the <b>A</b><b>C</b><b>L</b> table. As the  option  name
+                     suggests,  the  ACL  will  be  applied  after the logical
+                     switch load balancer stage.
+
+                     The <b>-</b><b>-</b><b>t</b><b>i</b><b>e</b><b>r</b> option sets the ACL’s tier  to  the  specified
+                     value. For more information about ACL tiers, see the doc‐
+                     umentation for the <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b>(5) database.
+
+              [<b>-</b><b>-</b><b>t</b><b>y</b><b>p</b><b>e</b><b>=</b>{<b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b> | <b>p</b><b>o</b><b>r</b><b>t</b><b>-</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b>}] [<b>-</b><b>-</b><b>t</b><b>i</b><b>e</b><b>r</b>] <b>a</b><b>c</b><b>l</b><b>-</b><b>d</b><b>e</b><b>l</b> <u>e</u><u>n</u><u>t</u><u>i</u><u>t</u><u>y</u> [<u>d</u><u>i</u><u>r</u><u>e</u><u>c</u><u>�</u>��
+              <u>t</u><u>i</u><u>o</u><u>n</u> [<u>p</u><u>r</u><u>i</u><u>o</u><u>r</u><u>i</u><u>t</u><u>y</u> <u>m</u><u>a</u><u>t</u><u>c</u><u>h</u>]]
+                     Deletes ACLs from <u>e</u><u>n</u><u>t</u><u>i</u><u>t</u><u>y</u>. If only <u>e</u><u>n</u><u>t</u><u>i</u><u>t</u><u>y</u> is supplied, all
+                     the  ACLs  from  the  <u>e</u><u>n</u><u>t</u><u>i</u><u>t</u><u>y</u> are deleted. If <u>d</u><u>i</u><u>r</u><u>e</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u> is
+                     also specified, then all the flows in that direction will
+                     be deleted from the <u>e</u><u>n</u><u>t</u><u>i</u><u>t</u><u>y</u>. If all the fields are  given,
+                     then  a  single  flow that matches all the fields will be
+                     deleted.
+
+                     If the <b>-</b><b>-</b><b>t</b><b>i</b><b>e</b><b>r</b> option is provided, then only ACLs  of  the
+                     given tier value will be deleted, in addition to whatever
+                     other criteria have been provided.
+
+              [<b>-</b><b>-</b><b>t</b><b>y</b><b>p</b><b>e</b><b>=</b>{<b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b> | <b>p</b><b>o</b><b>r</b><b>t</b><b>-</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b>}] <b>a</b><b>c</b><b>l</b><b>-</b><b>l</b><b>i</b><b>s</b><b>t</b> <u>e</u><u>n</u><u>t</u><u>i</u><u>t</u><u>y</u>
+                     Lists the ACLs on <u>e</u><u>n</u><u>t</u><u>i</u><u>t</u><u>y</u>.
+
+   <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b> <b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b> <b>Q</b><b>o</b><b>S</b> <b>R</b><b>u</b><b>l</b><b>e</b> <b>C</b><b>o</b><b>m</b><b>m</b><b>a</b><b>n</b><b>d</b><b>s</b>
+       [<b>-</b><b>-</b><b>m</b><b>a</b><b>y</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b>] <b>q</b><b>o</b><b>s</b><b>-</b><b>a</b><b>d</b><b>d</b> <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u> <u>d</u><u>i</u><u>r</u><u>e</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u> <u>p</u><u>r</u><u>i</u><u>o</u><u>r</u><u>i</u><u>t</u><u>y</u> <u>m</u><u>a</u><u>t</u><u>c</u><u>h</u> [<b>d</b><b>s</b><b>c</b><b>p</b><b>=</b><u>d</u><u>s</u><u>c</u><u>p</u>]
+       [<b>r</b><b>a</b><b>t</b><b>e</b><b>=</b><u>r</u><u>a</u><u>t</u><u>e</u> [<b>b</b><b>u</b><b>r</b><b>s</b><b>t</b><b>=</b><u>b</u><u>u</u><u>r</u><u>s</u><u>t</u>]]
+              Adds QoS marking and metering rules to <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u>. <u>d</u><u>i</u><u>r</u><u>e</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u> must be
+              either  <b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b>  or  <b>t</b><b>o</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b>. <u>p</u><u>r</u><u>i</u><u>o</u><u>r</u><u>i</u><u>t</u><u>y</u> must be between <b>0</b> and
+              <b>3</b><b>2</b><b>7</b><b>6</b><b>7</b>, inclusive.
+
+              If <b>d</b><b>s</b><b>c</b><b>p</b><b>=</b><u>d</u><u>s</u><u>c</u><u>p</u> is specified, then matching packets will have  DSCP
+              marking  applied.  <u>d</u><u>s</u><u>c</u><u>p</u>  must be between <b>0</b> and <b>6</b><b>3</b>, inclusive. If
+              <b>r</b><b>a</b><b>t</b><b>e</b><b>=</b><u>r</u><u>a</u><u>t</u><u>e</u> is specified then matching packets will have  metering
+              applied   at   <u>r</u><u>a</u><u>t</u><u>e</u>   kbps.  If  metering  is  configured,  then
+              <b>b</b><b>u</b><b>r</b><b>s</b><b>t</b><b>=</b><u>b</u><u>u</u><u>r</u><u>s</u><u>t</u> specifies the burst rate  limit  in  kilobits.  <b>d</b><b>s</b><b>c</b><b>p</b>
+              and/or <b>r</b><b>a</b><b>t</b><b>e</b> are required arguments.
+
+              If  <b>-</b><b>-</b><b>m</b><b>a</b><b>y</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b>  is specified, adding a duplicated QoS rule suc‐
+              ceeds but the QoS rule is not really created. Without  <b>-</b><b>-</b><b>m</b><b>a</b><b>y</b><b>-</b><b>e</b><b>x</b>‐‐
+              <b>i</b><b>s</b><b>t</b>, adding a duplicated QoS rule results in error.
+
+       <b>q</b><b>o</b><b>s</b><b>-</b><b>d</b><b>e</b><b>l</b> <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u> [<u>d</u><u>i</u><u>r</u><u>e</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u> [<u>p</u><u>r</u><u>i</u><u>o</u><u>r</u><u>i</u><u>t</u><u>y</u> <u>m</u><u>a</u><u>t</u><u>c</u><u>h</u>]]
+              Deletes  QoS  rules from <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u>. If only <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u> is supplied, all
+              the QoS rules from the logical switch are deleted. If  <u>d</u><u>i</u><u>r</u><u>e</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u>
+              is  also specified, then all the flows in that direction will be
+              deleted from the logical switch. If all the fields are supplied,
+              then a single  flow  that  matches  the  given  fields  will  be
+              deleted.
+
+              If  <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u>  and <u>u</u><u>u</u><u>i</u><u>d</u> are supplied, then the QoS rule with speci‐
+              fied uuid is deleted.
+
+       <b>q</b><b>o</b><b>s</b><b>-</b><b>l</b><b>i</b><b>s</b><b>t</b> <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u>
+              Lists the QoS rules on <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u>.
+
+   <b>M</b><b>e</b><b>t</b><b>e</b><b>r</b> <b>C</b><b>o</b><b>m</b><b>m</b><b>a</b><b>n</b><b>d</b><b>s</b>
+       <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>-</b><b>a</b><b>d</b><b>d</b> <u>n</u><u>a</u><u>m</u><u>e</u> <u>a</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u> <u>r</u><u>a</u><u>t</u><u>e</u> <u>u</u><u>n</u><u>i</u><u>t</u> [<u>b</u><u>u</u><u>r</u><u>s</u><u>t</u>]
+              Adds the specified meter. <u>n</u><u>a</u><u>m</u><u>e</u> must be a unique name to identify
+              this meter. The <u>a</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u> argument  specifies  what  should  happen
+              when this meter is exceeded. The only supported action is <b>d</b><b>r</b><b>o</b><b>p</b>.
+
+              The  <u>u</u><u>n</u><u>i</u><u>t</u> specifies the unit for the <u>r</u><u>a</u><u>t</u><u>e</u> argument; valid values
+              are <b>k</b><b>b</b><b>p</b><b>s</b> and <b>p</b><b>k</b><b>t</b><b>p</b><b>s</b> for kilobits per second and packets per  sec‐
+              ond, respectively. The <u>b</u><u>u</u><u>r</u><u>s</u><u>t</u> option configures the maximum burst
+              allowed for the band in kilobits or packets depending on whether
+              the  <u>u</u><u>n</u><u>i</u><u>t</u>  chosen was <b>k</b><b>b</b><b>p</b><b>s</b> or <b>p</b><b>k</b><b>t</b><b>p</b><b>s</b>, respectively. If a burst is
+              not supplied, the switch is free to select some reasonable value
+              depending on its configuration.
+
+              <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b> only supports adding a meter with a single  band,  but
+              the other commands support meters with multiple bands.
+
+              Names  that  start  with "__" (two underscores) are reserved for
+              internal use by OVN, so <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b> does not allow adding them.
+
+       <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>-</b><b>d</b><b>e</b><b>l</b> [<u>n</u><u>a</u><u>m</u><u>e</u>]
+              Deletes meters. By default, all meters are deleted. If  <u>n</u><u>a</u><u>m</u><u>e</u>  is
+              supplied, only the meter with that name will be deleted.
+
+       <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>-</b><b>l</b><b>i</b><b>s</b><b>t</b>
+              Lists all meters.
+
+   <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b> <b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b> <b>P</b><b>o</b><b>r</b><b>t</b> <b>C</b><b>o</b><b>m</b><b>m</b><b>a</b><b>n</b><b>d</b><b>s</b>
+       [<b>-</b><b>-</b><b>m</b><b>a</b><b>y</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b>] <b>l</b><b>s</b><b>p</b><b>-</b><b>a</b><b>d</b><b>d</b> <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u> <u>p</u><u>o</u><u>r</u><u>t</u>
+              Creates on <u>l</u><u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u> a new logical switch port named <u>p</u><u>o</u><u>r</u><u>t</u>.
+
+              It  is an error if a logical port named <u>p</u><u>o</u><u>r</u><u>t</u> already exists, un‐
+              less <b>-</b><b>-</b><b>m</b><b>a</b><b>y</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b> is specified. Regardless of <b>-</b><b>-</b><b>m</b><b>a</b><b>y</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b>, it  is
+              an  error  if  the existing port is in some logical switch other
+              than <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u> or if it has a parent port.
+
+       [<b>-</b><b>-</b><b>m</b><b>a</b><b>y</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b>] <b>l</b><b>s</b><b>p</b><b>-</b><b>a</b><b>d</b><b>d</b> <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u> <u>p</u><u>o</u><u>r</u><u>t</u> <u>p</u><u>a</u><u>r</u><u>e</u><u>n</u><u>t</u> <u>t</u><u>a</u><u>g</u><b>_</b><u>r</u><u>e</u><u>q</u><u>u</u><u>e</u><u>s</u><u>t</u>
+              Creates on <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u> a logical switch port named  <u>p</u><u>o</u><u>r</u><u>t</u>  that  is  a
+              child  of  <u>p</u><u>a</u><u>r</u><u>e</u><u>n</u><u>t</u>  that  is identified with VLAN ID <u>t</u><u>a</u><u>g</u><b>_</b><u>r</u><u>e</u><u>q</u><u>u</u><u>e</u><u>s</u><u>t</u>,
+              which must be between <b>0</b> and <b>4</b><b>0</b><b>9</b><b>5</b>, inclusive. If  <u>t</u><u>a</u><u>g</u><b>_</b><u>r</u><u>e</u><u>q</u><u>u</u><u>e</u><u>s</u><u>t</u>  is
+              <b>0</b>,  <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>  generates  a  tag that is unique in the scope of
+              <u>p</u><u>a</u><u>r</u><u>e</u><u>n</u><u>t</u>. This is useful in cases such  as  virtualized  container
+              environments  where  Open vSwitch does not have a direct connec‐
+              tion to the container’s port and it must be shared with the vir‐
+              tual machine’s port.
+
+              It is an error if a logical port named <u>p</u><u>o</u><u>r</u><u>t</u> already exists,  un‐
+              less  <b>-</b><b>-</b><b>m</b><b>a</b><b>y</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b> is specified. Regardless of <b>-</b><b>-</b><b>m</b><b>a</b><b>y</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b>, it is
+              an error if the existing port is not in <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u> or if it does not
+              have the specified <u>p</u><u>a</u><u>r</u><u>e</u><u>n</u><u>t</u> and <u>t</u><u>a</u><u>g</u><b>_</b><u>r</u><u>e</u><u>q</u><u>u</u><u>e</u><u>s</u><u>t</u>.
+
+       [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] <b>l</b><b>s</b><b>p</b><b>-</b><b>d</b><b>e</b><b>l</b> <u>p</u><u>o</u><u>r</u><u>t</u>
+              Deletes <u>p</u><u>o</u><u>r</u><u>t</u>. It is an error if  <u>p</u><u>o</u><u>r</u><u>t</u>  does  not  exist,  unless
+              <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b> is specified.
+
+       <b>l</b><b>s</b><b>p</b><b>-</b><b>l</b><b>i</b><b>s</b><b>t</b> <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u>
+              Lists  all  the  logical  switch ports within <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u> on standard
+              output, one per line.
+
+       <b>l</b><b>s</b><b>p</b><b>-</b><b>g</b><b>e</b><b>t</b><b>-</b><b>p</b><b>a</b><b>r</b><b>e</b><b>n</b><b>t</b> <u>p</u><u>o</u><u>r</u><u>t</u>
+              If set, get the parent port of <u>p</u><u>o</u><u>r</u><u>t</u>. If not set, print nothing.
+
+       <b>l</b><b>s</b><b>p</b><b>-</b><b>g</b><b>e</b><b>t</b><b>-</b><b>t</b><b>a</b><b>g</b> <u>p</u><u>o</u><u>r</u><u>t</u>
+              If set, get the tag for <u>p</u><u>o</u><u>r</u><u>t</u> traffic. If not set, print nothing.
+
+       <b>l</b><b>s</b><b>p</b><b>-</b><b>s</b><b>e</b><b>t</b><b>-</b><b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>e</b><b>s</b> <u>p</u><u>o</u><u>r</u><u>t</u> [<u>a</u><u>d</u><u>d</u><u>r</u><u>e</u><u>s</u><u>s</u>]...
+              Sets the addresses associated with <u>p</u><u>o</u><u>r</u><u>t</u> to <u>a</u><u>d</u><u>d</u><u>r</u><u>e</u><u>s</u><u>s</u>. Each <u>a</u><u>d</u><u>d</u><u>r</u><u>e</u><u>s</u><u>s</u>
+              should be one of the following:
+
+              an Ethernet address, optionally followed by a space and one or
+              more IP addresses
+                     OVN delivers packets for the  Ethernet  address  to  this
+                     port.
+
+              <b>u</b><b>n</b><b>k</b><b>n</b><b>o</b><b>w</b><b>n</b>
+                     OVN  delivers  unicast Ethernet packets whose destination
+                     MAC address is not in any logical port’s addresses column
+                     to ports with address <b>u</b><b>n</b><b>k</b><b>n</b><b>o</b><b>w</b><b>n</b>.
+
+              <b>d</b><b>y</b><b>n</b><b>a</b><b>m</b><b>i</b><b>c</b>
+                     Use this keyword to make <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> generate  a  globally
+                     unique MAC address and choose an unused IPv4 address with
+                     the  logical  port’s  subnet and store them in the port’s
+                     <b>d</b><b>y</b><b>n</b><b>a</b><b>m</b><b>i</b><b>c</b><b>_</b><b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>e</b><b>s</b> column.
+
+              <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b> Accepted only when the <b>t</b><b>y</b><b>p</b><b>e</b> of the logical switch port is
+                     <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b>. This indicates that the Ethernet, IPv4, and  IPv6
+                     addresses for this logical switch port should be obtained
+                     from  the  connected logical router port, as specified by
+                     <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>-</b><b>p</b><b>o</b><b>r</b><b>t</b> in <b>l</b><b>s</b><b>p</b><b>-</b><b>s</b><b>e</b><b>t</b><b>-</b><b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>.
+
+              Multiple addresses may be set. If no <u>a</u><u>d</u><u>d</u><u>r</u><u>e</u><u>s</u><u>s</u> argument is  given,
+              <u>p</u><u>o</u><u>r</u><u>t</u> will have no addresses associated with it.
+
+       <b>l</b><b>s</b><b>p</b><b>-</b><b>g</b><b>e</b><b>t</b><b>-</b><b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>e</b><b>s</b> <u>p</u><u>o</u><u>r</u><u>t</u>
+              Lists all the addresses associated with <u>p</u><u>o</u><u>r</u><u>t</u> on standard output,
+              one per line.
+
+       <b>l</b><b>s</b><b>p</b><b>-</b><b>s</b><b>e</b><b>t</b><b>-</b><b>p</b><b>o</b><b>r</b><b>t</b><b>-</b><b>s</b><b>e</b><b>c</b><b>u</b><b>r</b><b>i</b><b>t</b><b>y</b> <u>p</u><u>o</u><u>r</u><u>t</u> [<u>a</u><u>d</u><u>d</u><u>r</u><u>s</u>]...
+              Sets  the port security addresses associated with <u>p</u><u>o</u><u>r</u><u>t</u> to <u>a</u><u>d</u><u>d</u><u>r</u><u>s</u>.
+              Multiple sets of addresses may be set by  using  multiple  <u>a</u><u>d</u><u>d</u><u>r</u><u>s</u>
+              arguments.  If  no  <u>a</u><u>d</u><u>d</u><u>r</u><u>s</u>  argument is given, <u>p</u><u>o</u><u>r</u><u>t</u> will not have
+              port security enabled.
+
+              Port security limits the addresses from which a logical port may
+              send packets and to  which  it  may  receive  packets.  See  the
+              <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b>(5) documentation for the <b>p</b><b>o</b><b>r</b><b>t</b><b>_</b><b>s</b><b>e</b><b>c</b><b>u</b><b>r</b><b>i</b><b>t</b><b>y</b> column in the <b>L</b><b>o</b><b>g</b>‐‐
+              <b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b> table for details.
+
+       <b>l</b><b>s</b><b>p</b><b>-</b><b>g</b><b>e</b><b>t</b><b>-</b><b>p</b><b>o</b><b>r</b><b>t</b><b>-</b><b>s</b><b>e</b><b>c</b><b>u</b><b>r</b><b>i</b><b>t</b><b>y</b> <u>p</u><u>o</u><u>r</u><u>t</u>
+              Lists  all  the  port security addresses associated with <u>p</u><u>o</u><u>r</u><u>t</u> on
+              standard output, one per line.
+
+       <b>l</b><b>s</b><b>p</b><b>-</b><b>g</b><b>e</b><b>t</b><b>-</b><b>u</b><b>p</b> <u>p</u><u>o</u><u>r</u><u>t</u>
+              Prints the state of <u>p</u><u>o</u><u>r</u><u>t</u>, either <b>u</b><b>p</b> or <b>d</b><b>o</b><b>w</b><b>n</b>.
+
+       <b>l</b><b>s</b><b>p</b><b>-</b><b>s</b><b>e</b><b>t</b><b>-</b><b>e</b><b>n</b><b>a</b><b>b</b><b>l</b><b>e</b><b>d</b> <u>p</u><u>o</u><u>r</u><u>t</u> <u>s</u><u>t</u><u>a</u><u>t</u><u>e</u>
+              Set the administrative state of <u>p</u><u>o</u><u>r</u><u>t</u>,  either  <b>e</b><b>n</b><b>a</b><b>b</b><b>l</b><b>e</b><b>d</b>  or  <b>d</b><b>i</b><b>s</b>‐‐
+              <b>a</b><b>b</b><b>l</b><b>e</b><b>d</b>.  When  a  port is disabled, no traffic is allowed into or
+              out of the port.
+
+       <b>l</b><b>s</b><b>p</b><b>-</b><b>g</b><b>e</b><b>t</b><b>-</b><b>e</b><b>n</b><b>a</b><b>b</b><b>l</b><b>e</b><b>d</b> <u>p</u><u>o</u><u>r</u><u>t</u>
+              Prints the administrative state of <u>p</u><u>o</u><u>r</u><u>t</u>, either <b>e</b><b>n</b><b>a</b><b>b</b><b>l</b><b>e</b><b>d</b> or  <b>d</b><b>i</b><b>s</b>‐‐
+              <b>a</b><b>b</b><b>l</b><b>e</b><b>d</b>.
+
+       <b>l</b><b>s</b><b>p</b><b>-</b><b>s</b><b>e</b><b>t</b><b>-</b><b>t</b><b>y</b><b>p</b><b>e</b> <u>p</u><u>o</u><u>r</u><u>t</u> <u>t</u><u>y</u><u>p</u><u>e</u>
+              Set  the  type for the logical port. The type must be one of the
+              following:
+
+              <b>(</b><b>e</b><b>m</b><b>p</b><b>t</b><b>y</b> <b>s</b><b>t</b><b>r</b><b>i</b><b>n</b><b>g</b><b>)</b>
+                     A VM (or VIF) interface.
+
+              <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b> A connection to a logical router.
+
+              <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b>
+                     A connection to a locally accessible  network  from  each
+                     ovn-controller instance. A logical switch can only have a
+                     single  localnet port attached. This is used to model di‐
+                     rect connectivity to an existing network.
+
+              <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b>
+                     A connection to a local VIF. Traffic that  arrives  on  a
+                     localport  is  never  forwarded  over a tunnel to another
+                     chassis. These ports are present  on  every  chassis  and
+                     have  the  same  address  in all of them. This is used to
+                     model connectivity to local services that  run  on  every
+                     hypervisor.
+
+              <b>l</b><b>2</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b>
+                     A connection to a physical network.
+
+              <b>v</b><b>t</b><b>e</b><b>p</b>   A port to a logical switch on a VTEP gateway.
+
+       <b>l</b><b>s</b><b>p</b><b>-</b><b>g</b><b>e</b><b>t</b><b>-</b><b>t</b><b>y</b><b>p</b><b>e</b> <u>p</u><u>o</u><u>r</u><u>t</u>
+              Get the type for the logical port.
+
+       <b>l</b><b>s</b><b>p</b><b>-</b><b>s</b><b>e</b><b>t</b><b>-</b><b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <u>p</u><u>o</u><u>r</u><u>t</u> [<u>k</u><u>e</u><u>y</u><u>=</u><u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>]...
+              Set type-specific key-value options for the logical port.
+
+       <b>l</b><b>s</b><b>p</b><b>-</b><b>g</b><b>e</b><b>t</b><b>-</b><b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <u>p</u><u>o</u><u>r</u><u>t</u>
+              Get the type-specific options for the logical port.
+
+       <b>l</b><b>s</b><b>p</b><b>-</b><b>s</b><b>e</b><b>t</b><b>-</b><b>d</b><b>h</b><b>c</b><b>p</b><b>v</b><b>4</b><b>-</b><b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <u>p</u><u>o</u><u>r</u><u>t</u> <u>d</u><u>h</u><u>c</u><u>p</u><b>_</b><u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u>
+              Set the DHCPv4 options for the logical port. The <u>d</u><u>h</u><u>c</u><u>p</u><b>_</b><u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u> is
+              a  UUID  referring  to a set of DHCP options in the <b>D</b><b>H</b><b>C</b><b>P</b><b>_</b><b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+              table.
+
+       <b>l</b><b>s</b><b>p</b><b>-</b><b>g</b><b>e</b><b>t</b><b>-</b><b>d</b><b>h</b><b>c</b><b>p</b><b>v</b><b>4</b><b>-</b><b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <u>p</u><u>o</u><u>r</u><u>t</u>
+              Get the configured DHCPv4 options for the logical port.
+
+       <b>l</b><b>s</b><b>p</b><b>-</b><b>s</b><b>e</b><b>t</b><b>-</b><b>d</b><b>h</b><b>c</b><b>p</b><b>v</b><b>6</b><b>-</b><b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <u>p</u><u>o</u><u>r</u><u>t</u> <u>d</u><u>h</u><u>c</u><u>p</u><b>_</b><u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u>
+              Set the DHCPv6 options for the logical port. The <u>d</u><u>h</u><u>c</u><u>p</u><b>_</b><u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u> is
+              a UUID referring to a set of DHCP options  in  the  <b>D</b><b>H</b><b>C</b><b>P</b><b>_</b><b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+              table.
+
+       <b>l</b><b>s</b><b>p</b><b>-</b><b>g</b><b>e</b><b>t</b><b>-</b><b>d</b><b>h</b><b>c</b><b>p</b><b>v</b><b>6</b><b>-</b><b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <u>p</u><u>o</u><u>r</u><u>t</u>
+              Get the configured DHCPv6 options for the logical port.
+
+       <b>l</b><b>s</b><b>p</b><b>-</b><b>g</b><b>e</b><b>t</b><b>-</b><b>l</b><b>s</b> <u>p</u><u>o</u><u>r</u><u>t</u>
+              Get the logical switch which the <u>p</u><u>o</u><u>r</u><u>t</u> belongs to.
+
+       <b>l</b><b>s</b><b>p</b><b>-</b><b>a</b><b>t</b><b>t</b><b>a</b><b>c</b><b>h</b><b>-</b><b>m</b><b>i</b><b>r</b><b>r</b><b>o</b><b>r</b> <u>p</u><u>o</u><u>r</u><u>t</u> <u>m</u>
+              Attaches the mirror <u>m</u> to the logical port <u>p</u><u>o</u><u>r</u><u>t</u>.
+
+       <b>l</b><b>s</b><b>p</b><b>-</b><b>d</b><b>e</b><b>t</b><b>a</b><b>c</b><b>h</b><b>-</b><b>m</b><b>i</b><b>r</b><b>r</b><b>o</b><b>r</b> <u>p</u><u>o</u><u>r</u><u>t</u> <u>m</u>
+              Detaches the mirror <u>m</u> from the logical port <u>p</u><u>o</u><u>r</u><u>t</u>.
+
+   <b>F</b><b>o</b><b>r</b><b>w</b><b>a</b><b>r</b><b>d</b><b>i</b><b>n</b><b>g</b> <b>G</b><b>r</b><b>o</b><b>u</b><b>p</b> <b>C</b><b>o</b><b>m</b><b>m</b><b>a</b><b>n</b><b>d</b><b>s</b>
+       [<b>-</b><b>-</b><b>l</b><b>i</b><b>v</b><b>e</b><b>n</b><b>e</b><b>s</b><b>s</b>]<b>f</b><b>w</b><b>d</b><b>-</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b><b>-</b><b>a</b><b>d</b><b>d</b> <u>g</u><u>r</u><u>o</u><u>u</u><u>p</u> <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u> <u>v</u><u>i</u><u>p</u> <u>v</u><u>m</u><u>a</u><u>c</u> <u>p</u><u>o</u><u>r</u><u>t</u><u>s</u>
+              Creates  a new forwarding group named <u>g</u><u>r</u><u>o</u><u>u</u><u>p</u> as the name with the
+              provided <u>v</u><u>i</u><u>p</u> and <u>v</u><u>m</u><u>a</u><u>c</u>. <u>v</u><u>i</u><u>p</u> should be a virtual  IP  address  and
+              <u>v</u><u>m</u><u>a</u><u>c</u>  should  be  a virtual MAC address to access the forwarding
+              group. <u>p</u><u>o</u><u>r</u><u>t</u><u>s</u> are the logical switch port names that are  put  in
+              the forwarding group. Example for <u>p</u><u>o</u><u>r</u><u>t</u><u>s</u> is lsp1 lsp2 ... Traffic
+              destined to virtual IP of the forwarding group will be load bal‐
+              anced to all the child ports.
+
+              When <b>-</b><b>-</b><b>l</b><b>i</b><b>v</b><b>e</b><b>n</b><b>e</b><b>s</b><b>s</b> is specified then child ports are expected to be
+              bound to external devices like routers. BFD should be configured
+              between hypervisors and the external devices. The child port se‐
+              lection  will  become  dependent on BFD status with its external
+              device.
+
+       [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] <b>f</b><b>w</b><b>d</b><b>-</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b><b>-</b><b>d</b><b>e</b><b>l</b> <u>g</u><u>r</u><u>o</u><u>u</u><u>p</u>
+               Deletes <u>g</u><u>r</u><u>o</u><u>u</u><u>p</u>. It is an error if <u>g</u><u>r</u><u>o</u><u>u</u><u>p</u> does not  exist,  unless
+              <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b> is specified.
+
+       <b>f</b><b>w</b><b>d</b><b>-</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b><b>-</b><b>l</b><b>i</b><b>s</b><b>t</b> [<u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u>]
+              Lists  all  existing  forwarding  groups, If <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u> is specified
+              then only the forwarding groups configured for  <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u>  will  be
+              listed.
+
+   <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b> <b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b> <b>C</b><b>o</b><b>m</b><b>m</b><b>a</b><b>n</b><b>d</b><b>s</b>
+       <b>l</b><b>r</b><b>-</b><b>a</b><b>d</b><b>d</b> Creates  a  new,  unnamed logical router, which initially has no
+              ports. The router does not have a name, other commands must  re‐
+              fer to this router by its UUID.
+
+       [<b>-</b><b>-</b><b>m</b><b>a</b><b>y</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b> | <b>-</b><b>-</b><b>a</b><b>d</b><b>d</b><b>-</b><b>d</b><b>u</b><b>p</b><b>l</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b>] <b>l</b><b>r</b><b>-</b><b>a</b><b>d</b><b>d</b> <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u>
+              Creates  a  new logical router named <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u>, which initially has
+              no ports.
+
+              The OVN northbound database  schema  does  not  require  logical
+              router  names  to be unique, but the whole point to the names is
+              to provide an easy way for humans to refer to the routers,  mak‐
+              ing  duplicate  names unhelpful. Thus, without any options, this
+              command regards it as an error if <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u> is  a  duplicate  name.
+              With  <b>-</b><b>-</b><b>m</b><b>a</b><b>y</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b>, adding a duplicate name succeeds but does not
+              create a new logical router. With <b>-</b><b>-</b><b>a</b><b>d</b><b>d</b><b>-</b><b>d</b><b>u</b><b>p</b><b>l</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b>,  the  command
+              really creates a new logical router with a duplicate name. It is
+              an  error to specify both options. If there are multiple logical
+              routers with a duplicate name, configure the logical routers us‐
+              ing the UUID instead of the <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u> name.
+
+       [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] <b>l</b><b>r</b><b>-</b><b>d</b><b>e</b><b>l</b> <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u>
+              Deletes <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u>. It is an error if <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u> does not exist,  unless
+              <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b> is specified.
+
+       <b>l</b><b>r</b><b>-</b><b>l</b><b>i</b><b>s</b><b>t</b>
+              Lists all existing routers on standard output, one per line.
+
+   <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b> <b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b> <b>P</b><b>o</b><b>r</b><b>t</b> <b>C</b><b>o</b><b>m</b><b>m</b><b>a</b><b>n</b><b>d</b><b>s</b>
+       [<b>-</b><b>-</b><b>m</b><b>a</b><b>y</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b>] <b>l</b><b>r</b><b>p</b><b>-</b><b>a</b><b>d</b><b>d</b> <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u> <u>p</u><u>o</u><u>r</u><u>t</u> <u>m</u><u>a</u><u>c</u> <u>n</u><u>e</u><u>t</u><u>w</u><u>o</u><u>r</u><u>k</u>... [<b>p</b><b>e</b><b>e</b><b>r</b><b>=</b><u>p</u><u>e</u><u>e</u><u>r</u>]
+              Creates on <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u> a new logical router port named <u>p</u><u>o</u><u>r</u><u>t</u> with Eth‐
+              ernet  address  <u>m</u><u>a</u><u>c</u>  and one or more IP address/netmask for each
+              <u>n</u><u>e</u><u>t</u><u>w</u><u>o</u><u>r</u><u>k</u>.
+
+              The optional argument <b>p</b><b>e</b><b>e</b><b>r</b> identifies a logical router port that
+              connects to this one. The following example adds a  router  port
+              with an IPv4 and IPv6 address with peer <b>l</b><b>r</b><b>1</b>:
+
+              <b>l</b><b>r</b><b>p</b><b>-</b><b>a</b><b>d</b><b>d</b> <b>l</b><b>r</b><b>0</b> <b>l</b><b>r</b><b>p</b><b>0</b> <b>0</b><b>0</b><b>:</b><b>1</b><b>1</b><b>:</b><b>2</b><b>2</b><b>:</b><b>3</b><b>3</b><b>:</b><b>4</b><b>4</b><b>:</b><b>5</b><b>5</b> <b>1</b><b>9</b><b>2</b><b>.</b><b>1</b><b>6</b><b>8</b><b>.</b><b>0</b><b>.</b><b>1</b><b>/</b><b>2</b><b>4</b> <b>2</b><b>0</b><b>0</b><b>1</b><b>:</b><b>d</b><b>b</b><b>8</b><b>:</b><b>:</b><b>1</b><b>/</b><b>6</b><b>4</b>
+              <b>p</b><b>e</b><b>e</b><b>r</b><b>=</b><b>l</b><b>r</b><b>1</b>
+
+              It  is  an error if a logical router port named <u>p</u><u>o</u><u>r</u><u>t</u> already ex‐
+              ists, unless <b>-</b><b>-</b><b>m</b><b>a</b><b>y</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b> is specified. Regardless  of  <b>-</b><b>-</b><b>m</b><b>a</b><b>y</b><b>-</b><b>e</b><b>x</b>‐‐
+              <b>i</b><b>s</b><b>t</b>, it is an error if the existing router port is in some logi‐
+              cal router other than <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u>.
+
+       [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] <b>l</b><b>r</b><b>p</b><b>-</b><b>d</b><b>e</b><b>l</b> <u>p</u><u>o</u><u>r</u><u>t</u>
+              Deletes  <u>p</u><u>o</u><u>r</u><u>t</u>.  It  is  an  error if <u>p</u><u>o</u><u>r</u><u>t</u> does not exist, unless
+              <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b> is specified.
+
+       <b>l</b><b>r</b><b>p</b><b>-</b><b>l</b><b>i</b><b>s</b><b>t</b> <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u>
+              Lists all the logical router ports  within  <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u>  on  standard
+              output, one per line.
+
+       <b>l</b><b>r</b><b>p</b><b>-</b><b>s</b><b>e</b><b>t</b><b>-</b><b>e</b><b>n</b><b>a</b><b>b</b><b>l</b><b>e</b><b>d</b> <u>p</u><u>o</u><u>r</u><u>t</u> <u>s</u><u>t</u><u>a</u><u>t</u><u>e</u>
+              Set  the  administrative  state  of <u>p</u><u>o</u><u>r</u><u>t</u>, either <b>e</b><b>n</b><b>a</b><b>b</b><b>l</b><b>e</b><b>d</b> or <b>d</b><b>i</b><b>s</b>‐‐
+              <b>a</b><b>b</b><b>l</b><b>e</b><b>d</b>. When a port is disabled, no traffic is  allowed  into  or
+              out of the port.
+
+       <b>l</b><b>r</b><b>p</b><b>-</b><b>g</b><b>e</b><b>t</b><b>-</b><b>e</b><b>n</b><b>a</b><b>b</b><b>l</b><b>e</b><b>d</b> <u>p</u><u>o</u><u>r</u><u>t</u>
+              Prints  the administrative state of <u>p</u><u>o</u><u>r</u><u>t</u>, either <b>e</b><b>n</b><b>a</b><b>b</b><b>l</b><b>e</b><b>d</b> or <b>d</b><b>i</b><b>s</b>‐‐
+              <b>a</b><b>b</b><b>l</b><b>e</b><b>d</b>.
+
+       <b>l</b><b>r</b><b>p</b><b>-</b><b>s</b><b>e</b><b>t</b><b>-</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> <u>p</u><u>o</u><u>r</u><u>t</u> <u>c</u><u>h</u><u>a</u><u>s</u><u>s</u><u>i</u><u>s</u> [<u>p</u><u>r</u><u>i</u><u>o</u><u>r</u><u>i</u><u>t</u><u>y</u>]
+              Set gateway chassis for <u>p</u><u>o</u><u>r</u><u>t</u>. <u>c</u><u>h</u><u>a</u><u>s</u><u>s</u><u>i</u><u>s</u> is the name of  the  chas‐
+              sis. This creates a gateway chassis entry in Gateway_Chassis ta‐
+              ble.  It  won’t check if chassis really exists in OVN_Southbound
+              database. Priority will be set to 0 if <u>p</u><u>r</u><u>i</u><u>o</u><u>r</u><u>i</u><u>t</u><u>y</u> is not  provided
+              by user. <u>p</u><u>r</u><u>i</u><u>o</u><u>r</u><u>i</u><u>t</u><u>y</u> must be between <b>0</b> and <b>3</b><b>2</b><b>7</b><b>6</b><b>7</b>, inclusive.
+
+       <b>l</b><b>r</b><b>p</b><b>-</b><b>d</b><b>e</b><b>l</b><b>-</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> <u>p</u><u>o</u><u>r</u><u>t</u> <u>c</u><u>h</u><u>a</u><u>s</u><u>s</u><u>i</u><u>s</u>
+              Deletes  gateway  chassis  from  <u>p</u><u>o</u><u>r</u><u>t</u>. It is an error if gateway
+              chassis with <u>c</u><u>h</u><u>a</u><u>s</u><u>s</u><u>i</u><u>s</u> for <u>p</u><u>o</u><u>r</u><u>t</u> does not exist.
+
+       <b>l</b><b>r</b><b>p</b><b>-</b><b>g</b><b>e</b><b>t</b><b>-</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> <u>p</u><u>o</u><u>r</u><u>t</u>
+              Lists all the gateway chassis with priority within <u>p</u><u>o</u><u>r</u><u>t</u> on stan‐
+              dard output, one per line, ordered based on priority.
+
+   <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b> <b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b> <b>S</b><b>t</b><b>a</b><b>t</b><b>i</b><b>c</b> <b>R</b><b>o</b><b>u</b><b>t</b><b>e</b> <b>C</b><b>o</b><b>m</b><b>m</b><b>a</b><b>n</b><b>d</b><b>s</b>
+       [<b>-</b><b>-</b><b>m</b><b>a</b><b>y</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b>] [<b>-</b><b>-</b><b>p</b><b>o</b><b>l</b><b>i</b><b>c</b><b>y</b>=<u>P</u><u>O</u><u>L</u><u>I</u><u>C</u><u>Y</u>] [<b>-</b><b>-</b><b>e</b><b>c</b><b>m</b><b>p</b>] [<b>-</b><b>-</b><b>e</b><b>c</b><b>m</b><b>p</b><b>-</b><b>s</b><b>y</b><b>m</b><b>m</b><b>e</b><b>t</b><b>r</b><b>i</b><b>c</b><b>-</b><b>r</b><b>e</b><b>p</b><b>l</b><b>y</b>]
+       [<b>-</b><b>-</b><b>b</b><b>f</b><b>d</b><b>[</b><b>=</b><u>U</u><u>U</u><u>I</u><u>D</u>]] <b>l</b><b>r</b><b>-</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>-</b><b>a</b><b>d</b><b>d</b> <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u> <u>p</u><u>r</u><u>e</u><u>f</u><u>i</u><u>x</u> <u>n</u><u>e</u><u>x</u><u>t</u><u>h</u><u>o</u><u>p</u> [<u>p</u><u>o</u><u>r</u><u>t</u>]
+              Adds the specified route to <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u>. <u>p</u><u>r</u><u>e</u><u>f</u><u>i</u><u>x</u> describes an IPv4  or
+              IPv6  prefix  for  this route, such as <b>1</b><b>9</b><b>2</b><b>.</b><b>1</b><b>6</b><b>8</b><b>.</b><b>1</b><b>0</b><b>0</b><b>.</b><b>0</b><b>/</b><b>2</b><b>4</b>. <u>n</u><u>e</u><u>x</u><u>t</u><u>h</u><u>o</u><u>p</u>
+              specifies the gateway to use for this route, which should be the
+              IP address of one of <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u> logical router ports or the  IP  ad‐
+              dress  of  a  logical  port.  If <u>p</u><u>o</u><u>r</u><u>t</u> is specified, packets that
+              match this route will be sent out that port. When <u>p</u><u>o</u><u>r</u><u>t</u> is  omit‐
+              ted, OVN infers the output port based on <u>n</u><u>e</u><u>x</u><u>t</u><u>h</u><u>o</u><u>p</u>. Nexthop can be
+              set to <u>d</u><u>i</u><u>s</u><u>c</u><u>a</u><u>r</u><u>d</u> for dropping packets which match the given route.
+
+              <b>-</b><b>-</b><b>p</b><b>o</b><b>l</b><b>i</b><b>c</b><b>y</b>  describes  the  policy used to make routing decisions.
+              This should be one of "dst-ip" or "src-ip".  If  not  specified,
+              the default is "dst-ip".
+
+              The  <b>-</b><b>-</b><b>e</b><b>c</b><b>m</b><b>p</b> option allows for multiple routes with the same <u>p</u><u>r</u><u>e</u><u>�</u>��
+              <u>f</u><u>i</u><u>x</u> <u>P</u><u>O</u><u>L</u><u>I</u><u>C</u><u>Y</u> but different <u>n</u><u>e</u><u>x</u><u>t</u><u>h</u><u>o</u><u>p</u> and <u>p</u><u>o</u><u>r</u><u>t</u> to be added.
+
+              The <b>-</b><b>-</b><b>e</b><b>c</b><b>m</b><b>p</b><b>-</b><b>s</b><b>y</b><b>m</b><b>m</b><b>e</b><b>t</b><b>r</b><b>i</b><b>c</b><b>-</b><b>r</b><b>e</b><b>p</b><b>l</b><b>y</b> option makes it so that traffic  that
+              arrives  over an ECMP route will have its reply traffic sent out
+              over that same  route.  Setting  <b>-</b><b>-</b><b>e</b><b>c</b><b>m</b><b>p</b><b>-</b><b>s</b><b>y</b><b>m</b><b>m</b><b>e</b><b>t</b><b>r</b><b>i</b><b>c</b><b>-</b><b>r</b><b>e</b><b>p</b><b>l</b><b>y</b>  implies
+              <b>-</b><b>-</b><b>e</b><b>c</b><b>m</b><b>p</b> so it is not necessary to set both.
+
+              <b>-</b><b>-</b><b>b</b><b>f</b><b>d</b>  option is used to link a BFD session to the OVN route. If
+              the BFD session UUID is provided, it will be used  for  the  OVN
+              route otherwise the next-hop will be used to perform a lookup in
+              the  OVN BFD table. If the lookup fails and <u>p</u><u>o</u><u>r</u><u>t</u> is specified, a
+              new entry in the BFD table will be created using the <u>n</u><u>e</u><u>x</u><u>t</u><u>h</u><u>o</u><u>p</u>  as
+              <u>d</u><u>s</u><u>t</u><b>_</b><u>i</u><u>p</u> and <u>p</u><u>o</u><u>r</u><u>t</u> as <u>l</u><u>o</u><u>g</u><u>i</u><u>c</u><u>a</u><u>l</u><b>_</b><u>p</u><u>o</u><u>r</u><u>t</u>.
+
+              It is an error if a route with <u>p</u><u>r</u><u>e</u><u>f</u><u>i</u><u>x</u> and <u>P</u><u>O</u><u>L</u><u>I</u><u>C</u><u>Y</u> already exists,
+              unless  <b>-</b><b>-</b><b>m</b><b>a</b><b>y</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b>, <b>-</b><b>-</b><b>e</b><b>c</b><b>m</b><b>p</b>, or <b>-</b><b>-</b><b>e</b><b>c</b><b>m</b><b>p</b><b>-</b><b>s</b><b>y</b><b>m</b><b>m</b><b>e</b><b>t</b><b>r</b><b>i</b><b>c</b><b>-</b><b>r</b><b>e</b><b>p</b><b>l</b><b>y</b> is speci‐
+              fied. If <b>-</b><b>-</b><b>m</b><b>a</b><b>y</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b> is specified but not <b>-</b><b>-</b><b>e</b><b>c</b><b>m</b><b>p</b> or  <b>-</b><b>-</b><b>e</b><b>c</b><b>m</b><b>p</b><b>-</b><b>s</b><b>y</b><b>m</b>‐‐
+              <b>m</b><b>e</b><b>t</b><b>r</b><b>i</b><b>c</b><b>-</b><b>r</b><b>e</b><b>p</b><b>l</b><b>y</b>,  the  existed  route  will be updated with the new
+              nexthop and port. If <b>-</b><b>-</b><b>e</b><b>c</b><b>m</b><b>p</b> or <b>-</b><b>-</b><b>e</b><b>c</b><b>m</b><b>p</b><b>-</b><b>s</b><b>y</b><b>m</b><b>m</b><b>e</b><b>t</b><b>r</b><b>i</b><b>c</b><b>-</b><b>r</b><b>e</b><b>p</b><b>l</b><b>y</b> is  speci‐
+              fied,  a  new  route  will  be  added, regardless of the existed
+              route., which is useful when adding  ECMP  routes,  i.e.  routes
+              with same <u>P</u><u>O</u><u>L</u><u>I</u><u>C</u><u>Y</u> and <u>p</u><u>r</u><u>e</u><u>f</u><u>i</u><u>x</u> but different <u>n</u><u>e</u><u>x</u><u>t</u><u>h</u><u>o</u><u>p</u> and <u>p</u><u>o</u><u>r</u><u>t</u>.
+
+       [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] [<b>-</b><b>-</b><b>p</b><b>o</b><b>l</b><b>i</b><b>c</b><b>y</b>=<u>P</u><u>O</u><u>L</u><u>I</u><u>C</u><u>Y</u>] <b>l</b><b>r</b><b>-</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>-</b><b>d</b><b>e</b><b>l</b> <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u> [<u>p</u><u>r</u><u>e</u><u>f</u><u>i</u><u>x</u> [<u>n</u><u>e</u><u>x</u><u>t</u><u>h</u><u>o</u><u>p</u>
+       [<u>p</u><u>o</u><u>r</u><u>t</u>]]]
+              Deletes  routes from <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u>. If only <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u> is supplied, all the
+              routes from the logical router are deleted. If  <u>P</u><u>O</u><u>L</u><u>I</u><u>C</u><u>Y</u>,  <u>p</u><u>r</u><u>e</u><u>f</u><u>i</u><u>x</u>,
+              <u>n</u><u>e</u><u>x</u><u>t</u><u>h</u><u>o</u><u>p</u> and/or <u>p</u><u>o</u><u>r</u><u>t</u> are also specified, then all the routes that
+              match the conditions will be deleted from the logical router.
+
+              It  is  an  error  if  there  is no matching route entry, unless
+              <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b> is specified.
+
+       <b>l</b><b>r</b><b>-</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>-</b><b>l</b><b>i</b><b>s</b><b>t</b> <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u>
+              Lists the routes on <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u>.
+
+   <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b> <b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b> <b>P</b><b>o</b><b>l</b><b>i</b><b>c</b><b>y</b> <b>C</b><b>o</b><b>m</b><b>m</b><b>a</b><b>n</b><b>d</b><b>s</b>
+       [<b>-</b><b>-</b><b>m</b><b>a</b><b>y</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b>]<b>l</b><b>r</b><b>-</b><b>p</b><b>o</b><b>l</b><b>i</b><b>c</b><b>y</b><b>-</b><b>a</b><b>d</b><b>d</b> <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u> <u>p</u><u>r</u><u>i</u><u>o</u><u>r</u><u>i</u><u>t</u><u>y</u> <u>m</u><u>a</u><u>t</u><u>c</u><u>h</u> <u>a</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u> [<u>n</u><u>e</u><u>x</u><u>t</u><u>h</u><u>o</u><u>p</u>[,<u>n</u><u>e</u><u>x</u><u>�</u>��
+       <u>t</u><u>h</u><u>o</u><u>p</u>,...]] [<u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u> <u>k</u><u>e</u><u>y</u><u>=</u><u>v</u><u>a</u><u>l</u><u>u</u><u>e</u><u>]</u>]
+              Add Policy to <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u> which provides  a  way  to  configure  per‐
+              mit/deny  and  reroute policies on the router. Permit/deny poli‐
+              cies are similar to OVN ACLs, but exist on  the  logical-router.
+              Reroute  policies  are needed for service-insertion and service-
+              chaining. <u>n</u><u>e</u><u>x</u><u>t</u><u>h</u><u>o</u><u>p</u> is an optional parameter. It needs to be  pro‐
+              vided  only  when  <u>a</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u>  is  <u>r</u><u>e</u><u>r</u><u>o</u><u>u</u><u>t</u><u>e</u>. Multiple <b>n</b><b>e</b><b>x</b><b>t</b><b>h</b><b>o</b><b>p</b><b>s</b> can be
+              specified for ECMP routing. A policy is uniquely  identified  by
+              <u>p</u><u>r</u><u>i</u><u>o</u><u>r</u><u>i</u><u>t</u><u>y</u>  and  <u>m</u><u>a</u><u>t</u><u>c</u><u>h</u>. Multiple policies can have the same <u>p</u><u>r</u><u>i</u><u>o</u><u>r</u><u>�</u>��
+              <u>i</u><u>t</u><u>y</u>. <u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u> sets the router policy options as  key-value  pair.
+              The supported option is : <b>p</b><b>k</b><b>t</b><b>_</b><b>m</b><b>a</b><b>r</b><b>k</b>.
+
+              If  <b>-</b><b>-</b><b>m</b><b>a</b><b>y</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b> is specified, adding a duplicated routing policy
+              with the same priority and match string is not  really  created.
+              Without  <b>-</b><b>-</b><b>m</b><b>a</b><b>y</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b>, adding a duplicated routing policy results
+              in error.
+
+              The following example shows a policy to  lr1,  which  will  drop
+              packets from<b>1</b><b>9</b><b>2</b><b>.</b><b>1</b><b>6</b><b>8</b><b>.</b><b>1</b><b>0</b><b>0</b><b>.</b><b>0</b><b>/</b><b>2</b><b>4</b>.
+
+              <b>l</b><b>r</b><b>-</b><b>p</b><b>o</b><b>l</b><b>i</b><b>c</b><b>y</b><b>-</b><b>a</b><b>d</b><b>d</b> <b>l</b><b>r</b><b>1</b> <b>1</b><b>0</b><b>0</b> <b>i</b><b>p</b><b>4</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b><b>=</b> <b>1</b><b>9</b><b>2</b><b>.</b><b>1</b><b>6</b><b>8</b><b>.</b><b>1</b><b>0</b><b>0</b><b>.</b><b>0</b><b>/</b><b>2</b><b>4</b> <b>d</b><b>r</b><b>o</b><b>p</b>.
+
+                 <b>l</b><b>r</b><b>-</b><b>p</b><b>o</b><b>l</b><b>i</b><b>c</b><b>y</b><b>-</b><b>a</b><b>d</b><b>d</b>  <b>l</b><b>r</b><b>1</b>  <b>1</b><b>0</b><b>0</b>  <b>i</b><b>p</b><b>4</b><b>.</b><b>s</b><b>r</b><b>c</b>  <b>=</b><b>=</b>  <b>1</b><b>9</b><b>2</b><b>.</b><b>1</b><b>6</b><b>8</b><b>.</b><b>1</b><b>0</b><b>0</b><b>.</b><b>0</b><b>/</b><b>2</b><b>4</b>  <b>a</b><b>l</b><b>l</b><b>o</b><b>w</b>
+              <b>p</b><b>k</b><b>t</b><b>_</b><b>m</b><b>a</b><b>r</b><b>k</b><b>=</b><b>1</b><b>0</b><b>0</b> .
+
+       [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] <b>l</b><b>r</b><b>-</b><b>p</b><b>o</b><b>l</b><b>i</b><b>c</b><b>y</b><b>-</b><b>d</b><b>e</b><b>l</b> <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u> [<u>{</u><u>p</u><u>r</u><u>i</u><u>o</u><u>r</u><u>i</u><u>t</u><u>y</u> <u>|</u> <u>u</u><u>u</u><u>i</u><u>d</u><u>}</u> <u>[</u><u>m</u><u>a</u><u>t</u><u>c</u><u>h</u><u>]</u>]
+              Deletes polices from <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u>. If only <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u> is supplied, all the
+              polices from the logical router are deleted. If <u>p</u><u>r</u><u>i</u><u>o</u><u>r</u><u>i</u><u>t</u><u>y</u>  and/or
+              <u>m</u><u>a</u><u>t</u><u>c</u><u>h</u>  are  also  specified, then all the polices that match the
+              conditions will be deleted from the logical router.
+
+              If <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u> and <u>u</u><u>u</u><u>i</u><u>d</u> are supplied, then the policy with  specified
+              uuid  is  deleted. It is an error if <u>u</u><u>u</u><u>i</u><u>d</u> does not exist, unless
+              <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b> is specified.
+
+       <b>l</b><b>r</b><b>-</b><b>p</b><b>o</b><b>l</b><b>i</b><b>c</b><b>y</b><b>-</b><b>l</b><b>i</b><b>s</b><b>t</b> <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u>
+              Lists the polices on <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u>.
+
+   <b>N</b><b>A</b><b>T</b> <b>C</b><b>o</b><b>m</b><b>m</b><b>a</b><b>n</b><b>d</b><b>s</b>
+       [<b>-</b><b>-</b><b>m</b><b>a</b><b>y</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b>] [<b>-</b><b>-</b><b>s</b><b>t</b><b>a</b><b>t</b><b>e</b><b>l</b><b>e</b><b>s</b><b>s</b>] [<b>-</b><b>-</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>-</b><b>p</b><b>o</b><b>r</b><b>t</b>=<u>G</u><u>A</u><u>T</u><u>E</u><u>W</u><u>A</u><u>Y</u><b>_</b><u>P</u><u>O</u><u>R</u><u>T</u>] <b>l</b><b>r</b><b>-</b><b>n</b><b>a</b><b>t</b><b>-</b><b>a</b><b>d</b><b>d</b>
+       <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u> <u>t</u><u>y</u><u>p</u><u>e</u> <u>e</u><u>x</u><u>t</u><u>e</u><u>r</u><u>n</u><u>a</u><u>l</u><b>_</b><u>i</u><u>p</u> <u>l</u><u>o</u><u>g</u><u>i</u><u>c</u><u>a</u><u>l</u><b>_</b><u>i</u><u>p</u> [<u>l</u><u>o</u><u>g</u><u>i</u><u>c</u><u>a</u><u>l</u><b>_</b><u>p</u><u>o</u><u>r</u><u>t</u> <u>e</u><u>x</u><u>t</u><u>e</u><u>r</u><u>n</u><u>a</u><u>l</u><b>_</b><u>m</u><u>a</u><u>c</u>]
+              Adds the specified NAT to <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u>. The <u>t</u><u>y</u><u>p</u><u>e</u> must be one of  <b>s</b><b>n</b><b>a</b><b>t</b>,
+              <b>d</b><b>n</b><b>a</b><b>t</b>,  or <b>d</b><b>n</b><b>a</b><b>t</b><b>_</b><b>a</b><b>n</b><b>d</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b>. The <u>e</u><u>x</u><u>t</u><u>e</u><u>r</u><u>n</u><u>a</u><u>l</u><b>_</b><u>i</u><u>p</u> is an IPv4 address. The
+              <u>l</u><u>o</u><u>g</u><u>i</u><u>c</u><u>a</u><u>l</u><b>_</b><u>i</u><u>p</u> is an IPv4 network (e.g 192.168.1.0/24)  or  an  IPv4
+              address.  The  <u>l</u><u>o</u><u>g</u><u>i</u><u>c</u><u>a</u><u>l</u><b>_</b><u>p</u><u>o</u><u>r</u><u>t</u>  and  <u>e</u><u>x</u><u>t</u><u>e</u><u>r</u><u>n</u><u>a</u><u>l</u><b>_</b><u>m</u><u>a</u><u>c</u> are only accepted
+              when <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u> is a  distributed  router  (rather  than  a  gateway
+              router)  and <u>t</u><u>y</u><u>p</u><u>e</u> is <b>d</b><b>n</b><b>a</b><b>t</b><b>_</b><b>a</b><b>n</b><b>d</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b>. The <u>l</u><u>o</u><u>g</u><u>i</u><u>c</u><u>a</u><u>l</u><b>_</b><u>p</u><u>o</u><u>r</u><u>t</u> is the name
+              of an existing logical switch port where the <u>l</u><u>o</u><u>g</u><u>i</u><u>c</u><u>a</u><u>l</u><b>_</b><u>i</u><u>p</u> resides.
+              The <u>e</u><u>x</u><u>t</u><u>e</u><u>r</u><u>n</u><u>a</u><u>l</u><b>_</b><u>m</u><u>a</u><u>c</u> is an Ethernet address.
+
+              When <b>-</b><b>-</b><b>s</b><b>t</b><b>a</b><b>t</b><b>e</b><b>l</b><b>e</b><b>s</b><b>s</b> is specified then it implies that  we  will  be
+              not  use connection tracker, i.e internal ip and external ip are
+              1:1 mapped. This implies that <b>-</b><b>-</b><b>s</b><b>t</b><b>a</b><b>t</b><b>e</b><b>l</b><b>e</b><b>s</b><b>s</b> is applicable only  to
+              dnat_and_snat  type  NAT  rules. An external ip with <b>-</b><b>-</b><b>s</b><b>t</b><b>a</b><b>t</b><b>e</b><b>l</b><b>e</b><b>s</b><b>s</b>
+              NAT cannot be shared with any other NAT rule.
+
+              <b>-</b><b>-</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>-</b><b>p</b><b>o</b><b>r</b><b>t</b> option allows specifying the distributed  gateway
+              port  of  <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u>  where  the NAT rule needs to be applied. <u>G</u><u>A</u><u>T</u><u>E</u><u>�</u>��
+              <u>W</u><u>A</u><u>Y</u><b>_</b><u>P</u><u>O</u><u>R</u><u>T</u> should reference a <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b> row  that  is  a
+              distributed  gateway  port  of  <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u>. When <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u> has multiple
+              distributed gateway ports and the  gateway  port  for  this  NAT
+              can’t  be  inferred  from the <u>e</u><u>x</u><u>t</u><u>e</u><u>r</u><u>n</u><u>a</u><u>l</u><b>_</b><u>i</u><u>p</u>, it is an error to not
+              specify the <u>G</u><u>A</u><u>T</u><u>E</u><u>W</u><u>A</u><u>Y</u><b>_</b><u>P</u><u>O</u><u>R</u><u>T</u>.
+
+              When <u>t</u><u>y</u><u>p</u><u>e</u> is <b>d</b><b>n</b><b>a</b><b>t</b>, the externally visible IP address <u>e</u><u>x</u><u>t</u><u>e</u><u>r</u><u>n</u><u>a</u><u>l</u><b>_</b><u>i</u><u>p</u>
+              is DNATted to the IP address <u>l</u><u>o</u><u>g</u><u>i</u><u>c</u><u>a</u><u>l</u><b>_</b><u>i</u><u>p</u> in the logical space.
+
+              When <u>t</u><u>y</u><u>p</u><u>e</u> is <b>s</b><b>n</b><b>a</b><b>t</b>, IP packets with their source IP address  that
+              either matches the IP address in <u>l</u><u>o</u><u>g</u><u>i</u><u>c</u><u>a</u><u>l</u><b>_</b><u>i</u><u>p</u> or is in the network
+              provided  by  <u>l</u><u>o</u><u>g</u><u>i</u><u>c</u><u>a</u><u>l</u><b>_</b><u>i</u><u>p</u> is SNATed into the IP address in <u>e</u><u>x</u><u>t</u><u>e</u><u>r</u><u>�</u>��
+              <u>n</u><u>a</u><u>l</u><b>_</b><u>i</u><u>p</u>.
+
+              When <u>t</u><u>y</u><u>p</u><u>e</u> is <b>d</b><b>n</b><b>a</b><b>t</b><b>_</b><b>a</b><b>n</b><b>d</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b>, the externally  visible  IP  address
+              <u>e</u><u>x</u><u>t</u><u>e</u><u>r</u><u>n</u><u>a</u><u>l</u><b>_</b><u>i</u><u>p</u> is DNATted to the IP address <u>l</u><u>o</u><u>g</u><u>i</u><u>c</u><u>a</u><u>l</u><b>_</b><u>i</u><u>p</u> in the logi‐
+              cal  space.  In  addition, IP packets with the source IP address
+              that matches <u>l</u><u>o</u><u>g</u><u>i</u><u>c</u><u>a</u><u>l</u><b>_</b><u>i</u><u>p</u> is SNATed into the IP address in  <u>e</u><u>x</u><u>t</u><u>e</u><u>r</u><u>�</u>��
+              <u>n</u><u>a</u><u>l</u><b>_</b><u>i</u><u>p</u>.
+
+              When  the  <u>l</u><u>o</u><u>g</u><u>i</u><u>c</u><u>a</u><u>l</u><b>_</b><u>p</u><u>o</u><u>r</u><u>t</u>  and <u>e</u><u>x</u><u>t</u><u>e</u><u>r</u><u>n</u><u>a</u><u>l</u><b>_</b><u>m</u><u>a</u><u>c</u> are specified, the NAT
+              rule will be programmed on the chassis  where  the  <u>l</u><u>o</u><u>g</u><u>i</u><u>c</u><u>a</u><u>l</u><b>_</b><u>p</u><u>o</u><u>r</u><u>t</u>
+              resides.  This  includes  ARP replies for the <u>e</u><u>x</u><u>t</u><u>e</u><u>r</u><u>n</u><u>a</u><u>l</u><b>_</b><u>i</u><u>p</u>, which
+              return the value of <u>e</u><u>x</u><u>t</u><u>e</u><u>r</u><u>n</u><u>a</u><u>l</u><b>_</b><u>m</u><u>a</u><u>c</u>. All packets  transmitted  with
+              source  IP  address  equal to <u>e</u><u>x</u><u>t</u><u>e</u><u>r</u><u>n</u><u>a</u><u>l</u><b>_</b><u>i</u><u>p</u> will be sent using the
+              <u>e</u><u>x</u><u>t</u><u>e</u><u>r</u><u>n</u><u>a</u><u>l</u><b>_</b><u>m</u><u>a</u><u>c</u>.
+
+              It is an error if a NAT already exists with the same  values  of
+              <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u>,  <u>t</u><u>y</u><u>p</u><u>e</u>, <u>e</u><u>x</u><u>t</u><u>e</u><u>r</u><u>n</u><u>a</u><u>l</u><b>_</b><u>i</u><u>p</u>, <u>l</u><u>o</u><u>g</u><u>i</u><u>c</u><u>a</u><u>l</u><b>_</b><u>i</u><u>p</u> and <u>G</u><u>A</u><u>T</u><u>E</u><u>W</u><u>A</u><u>Y</u><b>_</b><u>P</u><u>O</u><u>R</u><u>T</u> (in case
+              of multiple distributed gateway ports),  unless  <b>-</b><b>-</b><b>m</b><b>a</b><b>y</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b>  is
+              specified.  When <b>-</b><b>-</b><b>m</b><b>a</b><b>y</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b>, <u>l</u><u>o</u><u>g</u><u>i</u><u>c</u><u>a</u><u>l</u><b>_</b><u>p</u><u>o</u><u>r</u><u>t</u>, and <u>e</u><u>x</u><u>t</u><u>e</u><u>r</u><u>n</u><u>a</u><u>l</u><b>_</b><u>m</u><u>a</u><u>c</u> are
+              all specified, the existing values of  <u>l</u><u>o</u><u>g</u><u>i</u><u>c</u><u>a</u><u>l</u><b>_</b><u>p</u><u>o</u><u>r</u><u>t</u>  and  <u>e</u><u>x</u><u>t</u><u>e</u><u>r</u><u>�</u>��
+              <u>n</u><u>a</u><u>l</u><b>_</b><u>m</u><u>a</u><u>c</u> are overwritten.
+
+       [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] <b>l</b><b>r</b><b>-</b><b>n</b><b>a</b><b>t</b><b>-</b><b>d</b><b>e</b><b>l</b> <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u> [<u>t</u><u>y</u><u>p</u><u>e</u> [<u>i</u><u>p</u>] [<u>g</u><u>a</u><u>t</u><u>e</u><u>w</u><u>a</u><u>y</u><b>_</b><u>p</u><u>o</u><u>r</u><u>t</u>]]
+              Deletes  NATs  from  <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u>. If only <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u> is supplied, all the
+              NATs from the logical router are deleted. If <u>t</u><u>y</u><u>p</u><u>e</u> is also speci‐
+              fied, then all the NATs that match the <u>t</u><u>y</u><u>p</u><u>e</u> will be deleted from
+              the logical router. If <u>i</u><u>p</u> is also specified  without  specifying
+              <u>g</u><u>a</u><u>t</u><u>e</u><u>w</u><u>a</u><u>y</u><b>_</b><u>p</u><u>o</u><u>r</u><u>t</u>,  then all the NATs that match the <u>t</u><u>y</u><u>p</u><u>e</u> and <u>i</u><u>p</u> will
+              be deleted from the logical router. If <u>g</u><u>a</u><u>t</u><u>e</u><u>w</u><u>a</u><u>y</u><b>_</b><u>p</u><u>o</u><u>r</u><u>t</u> is specified
+              without specifying <u>i</u><u>p</u>, then all the NATs that match the <u>t</u><u>y</u><u>p</u><u>e</u> and
+              <u>g</u><u>a</u><u>t</u><u>e</u><u>w</u><u>a</u><u>y</u><b>_</b><u>p</u><u>o</u><u>r</u><u>t</u> will be deleted from the logical router. If all the
+              fields are given, then a single NAT rule that  matches  all  the
+              fields will be deleted. When <u>t</u><u>y</u><u>p</u><u>e</u> is <b>s</b><b>n</b><b>a</b><b>t</b>, the <u>i</u><u>p</u> should be log‐
+              ical_ip.  When  <u>t</u><u>y</u><u>p</u><u>e</u>  is <b>d</b><b>n</b><b>a</b><b>t</b> or <b>d</b><b>n</b><b>a</b><b>t</b><b>_</b><b>a</b><b>n</b><b>d</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b>, the <u>i</u><u>p</u> should be
+              external_ip.
+
+              It is an error if both <u>i</u><u>p</u> and  <u>g</u><u>a</u><u>t</u><u>e</u><u>w</u><u>a</u><u>y</u><b>_</b><u>p</u><u>o</u><u>r</u><u>t</u>  are  specified  and
+              there is no matching NAT entry, unless <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b> is specified.
+
+       <b>l</b><b>r</b><b>-</b><b>n</b><b>a</b><b>t</b><b>-</b><b>l</b><b>i</b><b>s</b><b>t</b> <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u>
+              Lists the NATs on <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u>.
+
+   <b>L</b><b>o</b><b>a</b><b>d</b> <b>B</b><b>a</b><b>l</b><b>a</b><b>n</b><b>c</b><b>e</b><b>r</b> <b>C</b><b>o</b><b>m</b><b>m</b><b>a</b><b>n</b><b>d</b><b>s</b>
+       [<b>-</b><b>-</b><b>m</b><b>a</b><b>y</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b> | <b>-</b><b>-</b><b>a</b><b>d</b><b>d</b><b>-</b><b>d</b><b>u</b><b>p</b><b>l</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b> | <b>-</b><b>-</b><b>r</b><b>e</b><b>j</b><b>e</b><b>c</b><b>t</b> | <b>-</b><b>-</b><b>e</b><b>v</b><b>e</b><b>n</b><b>t</b>] <b>l</b><b>b</b><b>-</b><b>a</b><b>d</b><b>d</b> <u>l</u><u>b</u> <u>v</u><u>i</u><u>p</u> <u>i</u><u>p</u><u>s</u>
+       [<u>p</u><u>r</u><u>o</u><u>t</u><u>o</u><u>c</u><u>o</u><u>l</u>]
+              Creates  a  new load balancer named <u>l</u><u>b</u> with the provided <u>v</u><u>i</u><u>p</u> and
+              <u>i</u><u>p</u><u>s</u> or adds the <u>v</u><u>i</u><u>p</u> to an existing <u>l</u><u>b</u>. <u>v</u><u>i</u><u>p</u> should be  a  virtual
+              IP address (or an IP address and a port number with <b>:</b> as a sepa‐
+              rator).   Examples   for   <u>v</u><u>i</u><u>p</u>  are  <b>1</b><b>9</b><b>2</b><b>.</b><b>1</b><b>6</b><b>8</b><b>.</b><b>1</b><b>.</b><b>4</b>,  <b>f</b><b>d</b><b>0</b><b>f</b><b>:</b><b>:</b><b>1</b>,  and
+              <b>1</b><b>9</b><b>2</b><b>.</b><b>1</b><b>6</b><b>8</b><b>.</b><b>1</b><b>.</b><b>5</b><b>:</b><b>8</b><b>0</b><b>8</b><b>0</b>. <u>i</u><u>p</u><u>s</u> should be comma separated IP endpoints (or
+              comma separated IP addresses and port numbers with <b>:</b> as a  sepa‐
+              rator). <u>i</u><u>p</u><u>s</u> must be the same address family as <u>v</u><u>i</u><u>p</u>. Examples for
+              <u>i</u><u>p</u><u>s</u> are <b>1</b><b>0</b><b>.</b><b>0</b><b>.</b><b>0</b><b>.</b><b>1</b><b>,</b><b>1</b><b>0</b><b>.</b><b>0</b><b>.</b><b>0</b><b>.</b><b>2</b>or <b>[</b><b>f</b><b>d</b><b>e</b><b>f</b><b>:</b><b>:</b><b>1</b><b>]</b><b>:</b><b>8</b><b>8</b><b>0</b><b>0</b><b>,</b><b>[</b><b>f</b><b>d</b><b>e</b><b>f</b><b>:</b><b>:</b><b>2</b><b>]</b><b>:</b><b>8</b><b>8</b><b>0</b><b>0</b>.
+
+              The  optional argument <u>p</u><u>r</u><u>o</u><u>t</u><u>o</u><u>c</u><u>o</u><u>l</u> must be either <b>t</b><b>c</b><b>p</b>, <b>u</b><b>d</b><b>p</b> or <b>s</b><b>c</b><b>t</b><b>p</b>.
+              This argument is useful when a port number is provided  as  part
+              of  the <u>v</u><u>i</u><u>p</u>. If the <u>p</u><u>r</u><u>o</u><u>t</u><u>o</u><u>c</u><u>o</u><u>l</u> is unspecified and a port number is
+              provided as part of the <u>v</u><u>i</u><u>p</u>, OVN assumes the <u>p</u><u>r</u><u>o</u><u>t</u><u>o</u><u>c</u><u>o</u><u>l</u> to be <b>t</b><b>c</b><b>p</b>.
+
+              It is an error if the <u>v</u><u>i</u><u>p</u> already exists in  the  load  balancer
+              named <u>l</u><u>b</u>, unless <b>-</b><b>-</b><b>m</b><b>a</b><b>y</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b> is specified. With <b>-</b><b>-</b><b>a</b><b>d</b><b>d</b><b>-</b><b>d</b><b>u</b><b>p</b><b>l</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b>,
+              the  command really creates a new load balancer with a duplicate
+              name.
+
+              If the load balancer is created with <b>-</b><b>-</b><b>r</b><b>e</b><b>j</b><b>e</b><b>c</b><b>t</b> option and it  has
+              no  active  backends,  a  TCP reset segment (for tcp) or an ICMP
+              port unreachable packet (for all other kind of traffic) will  be
+              sent  whenever an incoming packet is received for this load-bal‐
+              ancer. Please note using <b>-</b><b>-</b><b>r</b><b>e</b><b>j</b><b>e</b><b>c</b><b>t</b> option will  disable  empty_lb
+              SB controller event for this load balancer.
+
+              If  the  load balancer is created with <b>-</b><b>-</b><b>e</b><b>v</b><b>e</b><b>n</b><b>t</b> option and it has
+              no active backends, whenever the lb receives traffic, the  event
+              is  reported  in the Controller_Event table in the SB db. Please
+              note <b>-</b><b>-</b><b>e</b><b>v</b><b>e</b><b>n</b><b>t</b> option can’t be specified with <b>-</b><b>-</b><b>r</b><b>e</b><b>j</b><b>e</b><b>c</b><b>t</b> one.
+
+              The following example adds a load balancer.
+
+              <b>l</b><b>b</b><b>-</b><b>a</b><b>d</b><b>d</b>                     <b>l</b><b>b</b><b>0</b>                      <b>3</b><b>0</b><b>.</b><b>0</b><b>.</b><b>0</b><b>.</b><b>1</b><b>0</b><b>:</b><b>8</b><b>0</b>
+              <b>1</b><b>9</b><b>2</b><b>.</b><b>1</b><b>6</b><b>8</b><b>.</b><b>1</b><b>0</b><b>.</b><b>1</b><b>0</b><b>:</b><b>8</b><b>0</b><b>,</b><b>1</b><b>9</b><b>2</b><b>.</b><b>1</b><b>6</b><b>8</b><b>.</b><b>1</b><b>0</b><b>.</b><b>2</b><b>0</b><b>:</b><b>8</b><b>0</b><b>,</b><b>1</b><b>9</b><b>2</b><b>.</b><b>1</b><b>6</b><b>8</b><b>.</b><b>1</b><b>0</b><b>.</b><b>3</b><b>0</b><b>:</b><b>8</b><b>0</b> <b>u</b><b>d</b><b>p</b>
+
+       [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] <b>l</b><b>b</b><b>-</b><b>d</b><b>e</b><b>l</b> <u>l</u><u>b</u> [<u>v</u><u>i</u><u>p</u>]
+              Deletes  <u>l</u><u>b</u> or the <u>v</u><u>i</u><u>p</u> from <u>l</u><u>b</u>. If <u>v</u><u>i</u><u>p</u> is supplied, only the <u>v</u><u>i</u><u>p</u>
+              will be deleted from the <u>l</u><u>b</u>. If only the <u>l</u><u>b</u> is supplied, the  <u>l</u><u>b</u>
+              will be deleted. It is an error if <u>v</u><u>i</u><u>p</u> does not already exist in
+              <u>l</u><u>b</u>, unless <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b> is specified.
+
+       <b>l</b><b>b</b><b>-</b><b>l</b><b>i</b><b>s</b><b>t</b> [<u>l</u><u>b</u>]
+              Lists  the LBs. If <u>l</u><u>b</u> is also specified, then only the specified
+              <u>l</u><u>b</u> will be listed.
+
+       [<b>-</b><b>-</b><b>m</b><b>a</b><b>y</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b>] <b>l</b><b>s</b><b>-</b><b>l</b><b>b</b><b>-</b><b>a</b><b>d</b><b>d</b> <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u> <u>l</u><u>b</u>
+              Adds the specified <u>l</u><u>b</u> to <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u>. It is an error if a  load  bal‐
+              ancer  named <u>l</u><u>b</u> already exists in the <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u>, unless <b>-</b><b>-</b><b>m</b><b>a</b><b>y</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b>
+              is specified.
+
+       [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] <b>l</b><b>s</b><b>-</b><b>l</b><b>b</b><b>-</b><b>d</b><b>e</b><b>l</b> <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u> [<u>l</u><u>b</u>]
+              Removes <u>l</u><u>b</u> from <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u>. If only <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u> is supplied, all the  LBs
+              from  the  logical  switch are removed. If <u>l</u><u>b</u> is also specified,
+              then only the <u>l</u><u>b</u> will be removed from the logical switch. It  is
+              an  error if <u>l</u><u>b</u> does not exist in the <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u>, unless <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>
+              is specified.
+
+       <b>l</b><b>s</b><b>-</b><b>l</b><b>b</b><b>-</b><b>l</b><b>i</b><b>s</b><b>t</b> <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u>
+              Lists the LBs for the given <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u>.
+
+       [<b>-</b><b>-</b><b>m</b><b>a</b><b>y</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b>] <b>l</b><b>r</b><b>-</b><b>l</b><b>b</b><b>-</b><b>a</b><b>d</b><b>d</b> <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u> <u>l</u><u>b</u>
+              Adds the specified <u>l</u><u>b</u> to <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u>. It is an error if a  load  bal‐
+              ancer  named <u>l</u><u>b</u> already exists in the <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u>, unless <b>-</b><b>-</b><b>m</b><b>a</b><b>y</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b>
+              is specified.
+
+       [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] <b>l</b><b>r</b><b>-</b><b>l</b><b>b</b><b>-</b><b>d</b><b>e</b><b>l</b> <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u> [<u>l</u><u>b</u>]
+              Removes <u>l</u><u>b</u> from <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u>. If only <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u> is supplied, all the  LBs
+              from  the  logical  router are removed. If <u>l</u><u>b</u> is also specified,
+              then only the <u>l</u><u>b</u> will be removed from the logical router. It  is
+              an  error if <u>l</u><u>b</u> does not exist in the <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u>, unless <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>
+              is specified.
+
+       <b>l</b><b>r</b><b>-</b><b>l</b><b>b</b><b>-</b><b>l</b><b>i</b><b>s</b><b>t</b> <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u>
+              Lists the LBs for the given <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u>.
+
+   <b>D</b><b>H</b><b>C</b><b>P</b> <b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>c</b><b>o</b><b>m</b><b>m</b><b>a</b><b>n</b><b>d</b><b>s</b>
+       <b>d</b><b>h</b><b>c</b><b>p</b><b>-</b><b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>-</b><b>c</b><b>r</b><b>e</b><b>a</b><b>t</b><b>e</b> <u>c</u><u>i</u><u>d</u><u>r</u> [<u>k</u><u>e</u><u>y</u><u>=</u><u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>]
+              Creates a new DHCP Options entry in the <b>D</b><b>H</b><b>C</b><b>P</b><b>_</b><b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> table  with
+              the specified <b>c</b><b>i</b><b>d</b><b>r</b> and optional <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>-</b><b>i</b><b>d</b><b>s</b>.
+
+       <b>d</b><b>h</b><b>c</b><b>p</b><b>-</b><b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>-</b><b>l</b><b>i</b><b>s</b><b>t</b>
+              Lists the DHCP Options entries.
+
+       <b>d</b><b>h</b><b>c</b><b>p</b><b>-</b><b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>-</b><b>d</b><b>e</b><b>l</b> <u>d</u><u>h</u><u>c</u><u>p</u><u>-</u><u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u>
+              Deletes the DHCP Options entry referred by <u>d</u><u>h</u><u>c</u><u>p</u><u>-</u><u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u> UUID.
+
+       <b>d</b><b>h</b><b>c</b><b>p</b><b>-</b><b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>-</b><b>s</b><b>e</b><b>t</b><b>-</b><b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <u>d</u><u>h</u><u>c</u><u>p</u><u>-</u><u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u> [<u>k</u><u>e</u><u>y</u><u>=</u><u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>]...
+              Set the DHCP Options for the <u>d</u><u>h</u><u>c</u><u>p</u><u>-</u><u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u> UUID.
+
+       <b>d</b><b>h</b><b>c</b><b>p</b><b>-</b><b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>-</b><b>g</b><b>e</b><b>t</b><b>-</b><b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <u>d</u><u>h</u><u>c</u><u>p</u><u>-</u><u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u>
+              Lists the DHCP Options for the <u>d</u><u>h</u><u>c</u><u>p</u><u>-</u><u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u> UUID.
+
+   <b>P</b><b>o</b><b>r</b><b>t</b> <b>G</b><b>r</b><b>o</b><b>u</b><b>p</b> <b>c</b><b>o</b><b>m</b><b>m</b><b>a</b><b>n</b><b>d</b><b>s</b>
+       <b>p</b><b>g</b><b>-</b><b>a</b><b>d</b><b>d</b> <u>g</u><u>r</u><u>o</u><u>u</u><u>p</u> [<u>p</u><u>o</u><u>r</u><u>t</u>]...
+              Creates  a  new  port  group in the <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b> table named <b>g</b><b>r</b><b>o</b><b>u</b><b>p</b>
+              with optional <b>p</b><b>o</b><b>r</b><b>t</b><b>s</b> added to the group.
+
+       <b>p</b><b>g</b><b>-</b><b>s</b><b>e</b><b>t</b><b>-</b><b>p</b><b>o</b><b>r</b><b>t</b><b>s</b> <u>g</u><u>r</u><u>o</u><u>u</u><u>p</u> <u>p</u><u>o</u><u>r</u><u>t</u>...
+              Sets <b>p</b><b>o</b><b>r</b><b>t</b><b>s</b> on the port group named <b>g</b><b>r</b><b>o</b><b>u</b><b>p</b>.  It  is  an  error  if
+              <b>g</b><b>r</b><b>o</b><b>u</b><b>p</b> does not exist.
+
+       <b>p</b><b>g</b><b>-</b><b>d</b><b>e</b><b>l</b> <u>g</u><u>r</u><u>o</u><u>u</u><u>p</u>
+              Deletes  port  group <b>g</b><b>r</b><b>o</b><b>u</b><b>p</b>. It is an error if <b>g</b><b>r</b><b>o</b><b>u</b><b>p</b> does not ex‐
+              ist.
+
+   <b>H</b><b>A</b> <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> <b>G</b><b>r</b><b>o</b><b>u</b><b>p</b> <b>c</b><b>o</b><b>m</b><b>m</b><b>a</b><b>n</b><b>d</b><b>s</b>
+       <b>h</b><b>a</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>-</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b><b>-</b><b>a</b><b>d</b><b>d</b> <u>g</u><u>r</u><u>o</u><u>u</u><u>p</u>
+              Creates a new HA chassis group  in  the  <b>H</b><b>A</b><b>_</b><b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b>  table
+              named <b>g</b><b>r</b><b>o</b><b>u</b><b>p</b>.
+
+       <b>h</b><b>a</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>-</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b><b>-</b><b>d</b><b>e</b><b>l</b> <u>g</u><u>r</u><u>o</u><u>u</u><u>p</u>
+              Deletes the HA chassis group <b>g</b><b>r</b><b>o</b><b>u</b><b>p</b>. It is an error if <b>g</b><b>r</b><b>o</b><b>u</b><b>p</b> does
+              not exist.
+
+       <b>h</b><b>a</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>-</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b><b>-</b><b>l</b><b>i</b><b>s</b><b>t</b>
+              Lists  the  HA  chassis group <b>g</b><b>r</b><b>o</b><b>u</b><b>p</b> along with the <b>H</b><b>A</b> <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> if
+              any associated with it.
+
+       <b>h</b><b>a</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>-</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b><b>-</b><b>a</b><b>d</b><b>d</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> <u>g</u><u>r</u><u>o</u><u>u</u><u>p</u> <u>c</u><u>h</u><u>a</u><u>s</u><u>s</u><u>i</u><u>s</u> <u>p</u><u>r</u><u>i</u><u>o</u><u>r</u><u>i</u><u>t</u><u>y</u>
+              Adds a new HA chassis <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> to the HA Chassis group <b>g</b><b>r</b><b>o</b><b>u</b><b>p</b> with
+              the specified priority. If the <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> already exists, then  the
+              <b>p</b><b>r</b><b>i</b><b>o</b><b>r</b><b>i</b><b>t</b><b>y</b> is updated. The <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> should be the name of the chas‐
+              sis in the <b>O</b><b>V</b><b>N</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b>.
+
+       <b>h</b><b>a</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>-</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b><b>-</b><b>r</b><b>e</b><b>m</b><b>o</b><b>v</b><b>e</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> <u>g</u><u>r</u><u>o</u><u>u</u><u>p</u> <u>c</u><u>h</u><u>a</u><u>s</u><u>s</u><u>i</u><u>s</u>
+              Removes  the HA chassis <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> from the HA chassis group <b>g</b><b>r</b><b>o</b><b>u</b><b>p</b>.
+              It is an error if <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> does not exist.
+
+   <b>C</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b> <b>P</b><b>l</b><b>a</b><b>n</b><b>e</b> <b>P</b><b>r</b><b>o</b><b>t</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b> <b>P</b><b>o</b><b>l</b><b>i</b><b>c</b><b>y</b> <b>c</b><b>o</b><b>m</b><b>m</b><b>a</b><b>n</b><b>d</b><b>s</b>
+       These commands manage meters configured in <b>C</b><b>o</b><b>p</b><b>p</b> table linking  them  to
+       logical  datapaths  through  <b>c</b><b>o</b><b>p</b><b>p</b>  column  in  <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b>  or <b>L</b><b>o</b><b>g</b><b>i</b>‐‐
+       <b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b> tables. Protocol packets for which  CoPP  is  enforced  when
+       sending packets to ovn-controller (if configured):
+
+              •      ARP
+
+              •      ND_NS
+
+              •      ND_NA
+
+              •      ND_RA
+
+              •      ND
+
+              •      DNS
+
+              •      IGMP
+
+              •      packets that require ARP resolution before forwarding
+
+              •      packets that require ND_NS before forwarding
+
+              •      packets that need to be replied to with ICMP Errors
+
+              •      packets that need to be replied to with TCP RST
+
+              •      packets that need to be replied to with DHCP_OPTS
+
+              •      packets that trigger a reject action
+
+              •      packets that trigger a SCTP abort action
+
+              •      controller_events
+
+              •      BFD
+
+              <b>c</b><b>o</b><b>p</b><b>p</b><b>-</b><b>a</b><b>d</b><b>d</b> <u>n</u><u>a</u><u>m</u><u>e</u> <u>p</u><u>r</u><u>o</u><u>t</u><u>o</u> <u>m</u><u>e</u><u>t</u><u>e</u><u>r</u>
+                     Adds  the  control  <b>p</b><b>r</b><b>o</b><b>t</b><b>o</b> to <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b> mapping to the control
+                     plane protection policy <b>n</b><b>a</b><b>m</b><b>e</b>. If no policy exists yet, it
+                     creates one. If a mapping already existed for <b>p</b><b>r</b><b>o</b><b>t</b><b>o</b>, this
+                     will overwrite it.
+
+              <b>c</b><b>o</b><b>p</b><b>p</b><b>-</b><b>d</b><b>e</b><b>l</b> <u>n</u><u>a</u><u>m</u><u>e</u> [<u>p</u><u>r</u><u>o</u><u>t</u><u>o</u>]
+                     Removes the control <b>p</b><b>r</b><b>o</b><b>t</b><b>o</b> mapping for  the  <b>n</b><b>a</b><b>m</b><b>e</b>  control
+                     plane  protection  policy. If <b>p</b><b>r</b><b>o</b><b>t</b><b>o</b> is not specified, the
+                     whole control plane protection policy is destroyed.
+
+              <b>c</b><b>o</b><b>p</b><b>p</b><b>-</b><b>l</b><b>i</b><b>s</b><b>t</b> <u>n</u><u>a</u><u>m</u><u>e</u>
+                     Display the current control plane protection  policy  for
+                     <b>n</b><b>a</b><b>m</b><b>e</b>.
+
+              <b>l</b><b>s</b><b>-</b><b>c</b><b>o</b><b>p</b><b>p</b><b>-</b><b>a</b><b>d</b><b>d</b> <u>n</u><u>a</u><u>m</u><u>e</u> <u>s</u><u>w</u><u>i</u><u>t</u><u>c</u><u>h</u>
+                     Adds the control plane protection policy <b>n</b><b>a</b><b>m</b><b>e</b> to the log‐
+                     ical switch <b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b>.
+
+              <b>l</b><b>r</b><b>-</b><b>c</b><b>o</b><b>p</b><b>p</b><b>-</b><b>a</b><b>d</b><b>d</b> <u>n</u><u>a</u><u>m</u><u>e</u> <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u>
+                     Adds the control plane protection policy <b>n</b><b>a</b><b>m</b><b>e</b> to the log‐
+                     ical router <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b>.
+
+   <b>M</b><b>i</b><b>r</b><b>r</b><b>o</b><b>r</b> <b>c</b><b>o</b><b>m</b><b>m</b><b>a</b><b>n</b><b>d</b><b>s</b>
+       <b>m</b><b>i</b><b>r</b><b>r</b><b>o</b><b>r</b><b>-</b><b>a</b><b>d</b><b>d</b> <u>m</u> <u>t</u><u>y</u><u>p</u><u>e</u> [<u>i</u><u>n</u><u>d</u><u>e</u><u>x</u>] <u>f</u><u>i</u><u>l</u><u>t</u><u>e</u><u>r</u> <u>d</u><u>e</u><u>s</u><u>t</u>
+              Creates  a  new  mirror in the <b>M</b><b>i</b><b>r</b><b>r</b><b>o</b><b>r</b> table with the name <b>m</b> with
+              the below mandatory arguments.
+
+              <u>t</u><u>y</u><u>p</u><u>e</u> specifies the mirror type - <b>g</b><b>r</b><b>e</b> , <b>e</b><b>r</b><b>s</b><b>p</b><b>a</b><b>n</b> or <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b>.
+
+              <u>i</u><u>n</u><u>d</u><u>e</u><u>x</u> specifies the tunnel index value (which is an integer)  if
+              the <u>t</u><u>y</u><u>p</u><u>e</u> is <b>g</b><b>r</b><b>e</b> or <b>e</b><b>r</b><b>s</b><b>p</b><b>a</b><b>n</b>.
+
+              <u>f</u><u>i</u><u>l</u><u>t</u><u>e</u><u>r</u> specifies the mirror source selection. Can be <b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b>,
+              <b>t</b><b>o</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b> or <b>b</b><b>o</b><b>t</b><b>h</b>.
+
+              <u>d</u><u>e</u><u>s</u><u>t</u>  specifies the mirror destination IP (v4 or v6) if the <u>t</u><u>y</u><u>p</u><u>e</u>
+              is <b>g</b><b>r</b><b>e</b> or <b>e</b><b>r</b><b>s</b><b>p</b><b>a</b><b>n</b>. For a <u>t</u><u>y</u><u>p</u><u>e</u> of <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b>, this field defines a  lo‐
+              cal  interface  on  the OVS integration bridge to be used as the
+              mirror destination. The interface must possess external-ids:mir‐
+              ror-id that matches this string.
+
+       <b>m</b><b>i</b><b>r</b><b>r</b><b>o</b><b>r</b><b>-</b><b>d</b><b>e</b><b>l</b> <u>m</u>
+              Deletes the mirror <b>m</b>.
+
+       <b>m</b><b>i</b><b>r</b><b>r</b><b>o</b><b>r</b><b>-</b><b>l</b><b>i</b><b>s</b><b>t</b>
+              Lists the mirrors.
+
+   <b>S</b><b>y</b><b>n</b><b>c</b><b>h</b><b>r</b><b>o</b><b>n</b><b>i</b><b>z</b><b>a</b><b>t</b><b>i</b><b>o</b><b>n</b> <b>C</b><b>o</b><b>m</b><b>m</b><b>a</b><b>n</b><b>d</b><b>s</b>
+       sync   Ordinarily, <b>-</b><b>-</b><b>w</b><b>a</b><b>i</b><b>t</b><b>=</b><b>s</b><b>b</b> or <b>-</b><b>-</b><b>w</b><b>a</b><b>i</b><b>t</b><b>=</b><b>h</b><b>v</b> only waits for changes by the
+              current <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b> invocation to take effect. This means that, if
+              none of the commands supplied to <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b> change the  database,
+              then  the  command  does not wait at all. With the <b>s</b><b>y</b><b>n</b><b>c</b> command,
+              however, <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b> waits even for earlier changes to  the  data‐
+              base  to propagate down to the southbound database or all of the
+              OVN chassis, according to the argument to <b>-</b><b>-</b><b>w</b><b>a</b><b>i</b><b>t</b>.
+
+   <b>R</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b> <b>C</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>v</b><b>i</b><b>t</b><b>y</b> <b>C</b><b>o</b><b>m</b><b>m</b><b>a</b><b>n</b><b>d</b><b>s</b>
+       These commands manipulate the <b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> column in the <b>N</b><b>B</b><b>_</b><b>G</b><b>l</b><b>o</b><b>b</b><b>a</b><b>l</b> table
+       and rows in the <b>C</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b> table. When <b>o</b><b>v</b><b>s</b><b>d</b><b>b</b><b>-</b><b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b>  is  configured  to
+       use  the  <b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> column for OVSDB connections, this allows the ad‐
+       ministrator to use <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b> to configure database connections.
+
+              <b>g</b><b>e</b><b>t</b><b>-</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>
+                     Prints the configured connection(s).
+
+              <b>d</b><b>e</b><b>l</b><b>-</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>
+                     Deletes the configured connection(s).
+
+              [<b>-</b><b>-</b><b>i</b><b>n</b><b>a</b><b>c</b><b>t</b><b>i</b><b>v</b><b>i</b><b>t</b><b>y</b><b>-</b><b>p</b><b>r</b><b>o</b><b>b</b><b>e</b><b>=</b><u>m</u><u>s</u><u>e</u><u>c</u><u>s</u>] <b>s</b><b>e</b><b>t</b><b>-</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b> <u>t</u><u>a</u><u>r</u><u>g</u><u>e</u><u>t</u>...
+                     Sets the configured manager target or targets. Use  <b>-</b><b>-</b><b>i</b><b>n</b>‐‐
+                     <b>a</b><b>c</b><b>t</b><b>i</b><b>v</b><b>i</b><b>t</b><b>y</b><b>-</b><b>p</b><b>r</b><b>o</b><b>b</b><b>e</b><b>=</b><u>m</u><u>s</u><u>e</u><u>c</u><u>s</u> to override the default idle connec‐
+                     tion  inactivity  probe time. Use 0 to disable inactivity
+                     probes.
+
+   <b>S</b><b>S</b><b>L</b> <b>C</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>u</b><b>r</b><b>a</b><b>t</b><b>i</b><b>o</b><b>n</b> <b>C</b><b>o</b><b>m</b><b>m</b><b>a</b><b>n</b><b>d</b><b>s</b>
+       <b>g</b><b>e</b><b>t</b><b>-</b><b>s</b><b>s</b><b>l</b>
+              Prints the SSL configuration.
+
+       <b>d</b><b>e</b><b>l</b><b>-</b><b>s</b><b>s</b><b>l</b>
+              Deletes the current SSL configuration.
+
+       [<b>-</b><b>-</b><b>b</b><b>o</b><b>o</b><b>t</b><b>s</b><b>t</b><b>r</b><b>a</b><b>p</b>] <b>s</b><b>e</b><b>t</b><b>-</b><b>s</b><b>s</b><b>l</b> <u>p</u><u>r</u><u>i</u><u>v</u><u>a</u><u>t</u><u>e</u><u>-</u><u>k</u><u>e</u><u>y</u> <u>c</u><u>e</u><u>r</u><u>t</u><u>i</u><u>f</u><u>i</u><u>c</u><u>a</u><u>t</u><u>e</u> <u>c</u><u>a</u><u>-</u><u>c</u><u>e</u><u>r</u><u>t</u> [<u>s</u><u>s</u><u>l</u><u>-</u><u>p</u><u>r</u><u>o</u><u>t</u><u>o</u><u>c</u><u>o</u><u>l</u><u>-</u>
+       <u>l</u><u>i</u><u>s</u><u>t</u> [<u>s</u><u>s</u><u>l</u><u>-</u><u>c</u><u>i</u><u>p</u><u>h</u><u>e</u><u>r</u><u>-</u><u>l</u><u>i</u><u>s</u><u>t</u>]]
+              Sets the SSL configuration.
+
+   <b>D</b><b>a</b><b>t</b><b>a</b><b>b</b><b>a</b><b>s</b><b>e</b> <b>C</b><b>o</b><b>m</b><b>m</b><b>a</b><b>n</b><b>d</b><b>s</b>
+       These commands query and modify the contents of <b>o</b><b>v</b><b>s</b><b>d</b><b>b</b> tables. They  are
+       a slight abstraction of the <b>o</b><b>v</b><b>s</b><b>d</b><b>b</b> interface and as such they operate at
+       a lower level than other <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b> commands.
+
+       <u>I</u><u>d</u><u>e</u><u>n</u><u>t</u><u>i</u><u>f</u><u>y</u><u>i</u><u>n</u><u>g</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u><u>s</u><u>,</u> <u>R</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u><u>s</u><u>,</u> <u>a</u><u>n</u><u>d</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u>
+
+       Each of these commands has a <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> parameter to identify a table within
+       the database. Many of them also take a <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> parameter that identifies
+       a  particular  record  within  a table. The <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> parameter may be the
+       UUID for a record, which may be abbreviated to its first  4  (or  more)
+       hex  digits,  as  long  as that is unique. Many tables offer additional
+       ways to identify records. Some commands  also  take  <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>  parameters
+       that identify a particular field within the records in a table.
+
+       For  a list of tables and their columns, see <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b>(5) or see the table
+       listing from the <b>-</b><b>-</b><b>h</b><b>e</b><b>l</b><b>p</b> option.
+
+       Record names must be specified in full and with correct capitalization,
+       except that UUIDs may be abbreviated to their first  4  (or  more)  hex
+       digits, as long as that is unique within the table. Names of tables and
+       columns  are  not  case-sensitive, and <b>-</b> and <b>_</b> are treated interchange‐
+       ably. Unique abbreviations of table and column  names  are  acceptable,
+       e.g. <b>d</b> or <b>d</b><b>h</b><b>c</b><b>p</b> is sufficient to identify the <b>D</b><b>H</b><b>C</b><b>P</b><b>_</b><b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> table.
+
+       <u>D</u><u>a</u><u>t</u><u>a</u><u>b</u><u>a</u><u>s</u><u>e</u> <u>V</u><u>a</u><u>l</u><u>u</u><u>e</u><u>s</u>
+
+       Each column in the database accepts a fixed type of data. The currently
+       defined basic types, and their representations, are:
+
+              integer
+                     A  decimal integer in the range -2**63 to 2**63-1, inclu‐
+                     sive.
+
+              real   A floating-point number.
+
+              Boolean
+                     True or false, written <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>, respectively.
+
+              string An arbitrary Unicode string, except that null  bytes  are
+                     not  allowed.  Quotes  are optional for most strings that
+                     begin with an English letter or  underscore  and  consist
+                     only  of letters, underscores, hyphens, and periods. How‐
+                     ever, <b>t</b><b>r</b><b>u</b><b>e</b> and <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b> and strings that match the syntax of
+                     UUIDs (see below) must be enclosed in  double  quotes  to
+                     distinguish  them  from  other  basic  types. When double
+                     quotes are used, the syntax is that of strings  in  JSON,
+                     e.g.  backslashes  may  be used to escape special charac‐
+                     ters. The empty string must be represented as a  pair  of
+                     double quotes (<b>"</b><b>"</b>).
+
+              UUID   Either  a  universally  unique identifier in the style of
+                     RFC 4122, e.g.  <b>f</b><b>8</b><b>1</b><b>d</b><b>4</b><b>f</b><b>a</b><b>e</b><b>-</b><b>7</b><b>d</b><b>e</b><b>c</b><b>-</b><b>1</b><b>1</b><b>d</b><b>0</b><b>-</b><b>a</b><b>7</b><b>6</b><b>5</b><b>-</b><b>0</b><b>0</b><b>a</b><b>0</b><b>c</b><b>9</b><b>1</b><b>e</b><b>6</b><b>b</b><b>f</b><b>6</b>,  or
+                     an  <b>@</b><u>n</u><u>a</u><u>m</u><u>e</u>  defined  by a <b>g</b><b>e</b><b>t</b> or <b>c</b><b>r</b><b>e</b><b>a</b><b>t</b><b>e</b> command within the
+                     same <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>c</b><b>t</b><b>l</b> invocation.
+
+       Multiple values in a single column may be separated by spaces or a sin‐
+       gle comma. When multiple values are present,  duplicates  are  not  al‐
+       lowed,  and  order  is not important. Conversely, some database columns
+       can have an empty set of values, represented as <b>[</b><b>]</b>, and square brackets
+       may optionally enclose other non-empty sets or single values as well.
+
+       A few database columns are ``maps’’ of key-value pairs, where  the  key
+       and the value are each some fixed database type. These are specified in
+       the  form <u>k</u><u>e</u><u>y</u><b>=</b><u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>, where <u>k</u><u>e</u><u>y</u> and <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u> follow the syntax for the col‐
+       umn’s key type and value type, respectively. When  multiple  pairs  are
+       present  (separated  by  spaces or a comma), duplicate keys are not al‐
+       lowed, and again the order is not important. Duplicate values  are  al‐
+       lowed.  An  empty map is represented as <b>{</b><b>}</b>. Curly braces may optionally
+       enclose non-empty maps as well (but use quotes  to  prevent  the  shell
+       from  expanding <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>-</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>=</b><b>{</b><b>0</b><b>=</b><b>x</b><b>,</b><b>1</b><b>=</b><b>y</b><b>}</b> into <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>-</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>=</b><b>0</b><b>=</b><b>x</b> <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>-</b><b>c</b><b>o</b><b>n</b>‐‐
+       <b>f</b><b>i</b><b>g</b><b>=</b><b>1</b><b>=</b><b>y</b>, which may not have the desired effect).
+
+       <u>D</u><u>a</u><u>t</u><u>a</u><u>b</u><u>a</u><u>s</u><u>e</u> <u>C</u><u>o</u><u>m</u><u>m</u><u>a</u><u>n</u><u>d</u> <u>S</u><u>y</u><u>n</u><u>t</u><u>a</u><u>x</u>
+
+              [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] [<b>-</b><b>-</b><b>c</b><b>o</b><b>l</b><b>u</b><b>m</b><b>n</b><b>s</b><b>=</b><u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>,</b><u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>]...] <b>l</b><b>i</b><b>s</b><b>t</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>
+              [<u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>]...
+                     Lists the data in each specified <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>.  If  no  records
+                     are specified, lists all the records in <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>.
+
+                     If <b>-</b><b>-</b><b>c</b><b>o</b><b>l</b><b>u</b><b>m</b><b>n</b><b>s</b> is specified, only the requested columns are
+                     listed,  in  the  specified order. Otherwise, all columns
+                     are listed, in alphabetical order by column name.
+
+                     Without <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>, it is  an  error  if  any  specified
+                     <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>  does not exist. With <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>, the command ig‐
+                     nores any <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> that does not exist,  without  producing
+                     any output.
+
+              [<b>-</b><b>-</b><b>c</b><b>o</b><b>l</b><b>u</b><b>m</b><b>n</b><b>s</b><b>=</b><u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>,</b><u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>]...] <b>f</b><b>i</b><b>n</b><b>d</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> [<u>c</u><u>o</u><u>l</u><u>�</u>��
+              <u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>]<b>=</b><u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>]...
+                     Lists  the  data  in  each  record  in <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> whose <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>
+                     equals <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u> or, if <u>k</u><u>e</u><u>y</u> is specified, whose  <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>  con‐
+                     tains a <u>k</u><u>e</u><u>y</u> with the specified <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>. The following oper‐
+                     ators  may  be used where <b>=</b> is written in the syntax sum‐
+                     mary:
+
+                     <b>=</b> <b>!</b><b>=</b> <lt;<lt; >gt;>gt; <lt;<lt;<b>=</b> >gt;>gt;<b>=</b>
+                            Selects records in which <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>] equals, does
+                            not equal, is less than, is greater than, is  less
+                            than  or  equal to, or is greater than or equal to
+                            <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>, respectively.
+
+                            Consider <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>] and <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u> as  sets  of  ele‐
+                            ments. Identical sets are considered equal. Other‐
+                            wise,  if  the sets have different numbers of ele‐
+                            ments, then the set with more elements is  consid‐
+                            ered  to  be larger. Otherwise, consider a element
+                            from each set pairwise, in increasing order within
+                            each set. The first pair that  differs  determines
+                            the  result. (For a column that contains key-value
+                            pairs, first all the keys are compared, and values
+                            are considered only if the two sets contain  iden‐
+                            tical keys.)
+
+                     <b>{</b><b>=</b><b>}</b> <b>{</b><b>!</b><b>=</b><b>}</b>
+                            Test for set equality or inequality, respectively.
+
+                     <b>{</b><lt;<lt;<b>=</b><b>}</b>   Selects  records in which <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>] is a subset
+                            of <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>. For example, <b>f</b><b>l</b><b>o</b><b>o</b><b>d</b><b>-</b><b>v</b><b>l</b><b>a</b><b>n</b><b>s</b><b>{</b><lt;<lt;<b>=</b><b>}</b><b>1</b><b>,</b><b>2</b>  selects
+                            records  in  which  the  <b>f</b><b>l</b><b>o</b><b>o</b><b>d</b><b>-</b><b>v</b><b>l</b><b>a</b><b>n</b><b>s</b> column is the
+                            empty set or contains 1 or 2 or both.
+
+                     <b>{</b><lt;<lt;<b>}</b>    Selects records in which <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>] is a  proper
+                            subset  of  <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>.  For example, <b>f</b><b>l</b><b>o</b><b>o</b><b>d</b><b>-</b><b>v</b><b>l</b><b>a</b><b>n</b><b>s</b><b>{</b><lt;<lt;<b>}</b><b>1</b><b>,</b><b>2</b>
+                            selects records in which the <b>f</b><b>l</b><b>o</b><b>o</b><b>d</b><b>-</b><b>v</b><b>l</b><b>a</b><b>n</b><b>s</b> column is
+                            the empty set or contains 1 or 2 but not both.
+
+                     <b>{</b>>gt;>gt;<b>=</b><b>}</b> <b>{</b>>gt;>gt;<b>}</b>
+                            Same as <b>{</b><lt;<lt;<b>=</b><b>}</b> and <b>{</b><lt;<lt;<b>}</b>,  respectively,  except  that
+                            the   relationship   is   reversed.  For  example,
+                            <b>f</b><b>l</b><b>o</b><b>o</b><b>d</b><b>-</b><b>v</b><b>l</b><b>a</b><b>n</b><b>s</b><b>{</b>>gt;>gt;<b>=</b><b>}</b><b>1</b><b>,</b><b>2</b> selects records  in  which  the
+                            <b>f</b><b>l</b><b>o</b><b>o</b><b>d</b><b>-</b><b>v</b><b>l</b><b>a</b><b>n</b><b>s</b> column contains both 1 and 2.
+
+                     The  following  operators  are  available  only  in  Open
+                     vSwitch 2.16 and later:
+
+                     <b>{</b><b>i</b><b>n</b><b>}</b>   Selects records in which  every  element  in  <u>c</u><u>o</u><u>l</u><u>�</u>��
+                            <u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>]  is  also in <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>. (This is the same as
+                            <b>{</b><lt;<lt;<b>=</b><b>}</b>.)
+
+                     <b>{</b><b>n</b><b>o</b><b>t</b><b>-</b><b>i</b><b>n</b><b>}</b>
+                            Selects records in which  every  element  in  <u>c</u><u>o</u><u>l</u><u>�</u>��
+                            <u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>] is not in <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>.
+
+                     For  arithmetic  operators  (<b>=</b> <b>!</b><b>=</b> <lt;<lt; >gt;>gt; <lt;<lt;<b>=</b> >gt;>gt;<b>=</b>), when <u>k</u><u>e</u><u>y</u> is
+                     specified but a particular record’s <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> does not  con‐
+                     tain  <u>k</u><u>e</u><u>y</u>, the record is always omitted from the results.
+                     Thus,  the   condition   <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>-</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>:</b><b>m</b><b>t</b><b>u</b><b>!</b><b>=</b><b>1</b><b>5</b><b>0</b><b>0</b>   matches
+                     records  that have a <b>m</b><b>t</b><b>u</b> key whose value is not 1500, but
+                     not those that lack an <b>m</b><b>t</b><b>u</b> key.
+
+                     For the set operators, when <u>k</u><u>e</u><u>y</u> is specified but  a  par‐
+                     ticular record’s <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> does not contain <u>k</u><u>e</u><u>y</u>, the compar‐
+                     ison  is  done  against an empty set. Thus, the condition
+                     <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>-</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>:</b><b>m</b><b>t</b><b>u</b><b>{</b><b>!</b><b>=</b><b>}</b><b>1</b><b>5</b><b>0</b><b>0</b> matches records that have a  <b>m</b><b>t</b><b>u</b>
+                     key  whose  value  is not 1500 and those that lack an <b>m</b><b>t</b><b>u</b>
+                     key.
+
+                     Don’t forget to escape <lt;<lt; or >gt;>gt; from interpretation by  the
+                     shell.
+
+                     If <b>-</b><b>-</b><b>c</b><b>o</b><b>l</b><b>u</b><b>m</b><b>n</b><b>s</b> is specified, only the requested columns are
+                     listed, in the specified order. Otherwise all columns are
+                     listed, in alphabetical order by column name.
+
+                     The  UUIDs  shown  for rows created in the same <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>c</b><b>t</b><b>l</b>
+                     invocation will be wrong.
+
+              [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] [<b>-</b><b>-</b><b>i</b><b>d</b><b>=</b><b>@</b><u>n</u><u>a</u><u>m</u><u>e</u>] <b>g</b><b>e</b><b>t</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> [<u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>]]...
+                     Prints the value of each specified <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>  in  the  given
+                     <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> in <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>. For map columns, a <u>k</u><u>e</u><u>y</u> may optionally be
+                     specified, in which case the value associated with <u>k</u><u>e</u><u>y</u> in
+                     the column is printed, instead of the entire map.
+
+                     Without  <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>,  it  is an error if <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> does not
+                     exist or <u>k</u><u>e</u><u>y</u> is specified,  if  <u>k</u><u>e</u><u>y</u>  does  not  exist  in
+                     <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>. With <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>, a missing <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> yields no out‐
+                     put and a missing <u>k</u><u>e</u><u>y</u> prints a blank line.
+
+                     If  <b>@</b><u>n</u><u>a</u><u>m</u><u>e</u>  is  specified, then the UUID for <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> may be
+                     referred to by that name later in the same <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>c</b><b>t</b><b>l</b>  in‐
+                     vocation in contexts where a UUID is expected.
+
+                     Both <b>-</b><b>-</b><b>i</b><b>d</b> and the <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> arguments are optional, but usu‐
+                     ally  at  least  one or the other should be specified. If
+                     both are omitted, then <b>g</b><b>e</b><b>t</b> has no effect except to verify
+                     that <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> exists in <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>.
+
+                     <b>-</b><b>-</b><b>i</b><b>d</b> and <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b> cannot be used together.
+
+              [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] <b>s</b><b>e</b><b>t</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>]<b>=</b><u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>...
+                     Sets the value of each  specified  <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>  in  the  given
+                     <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>  in <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> to <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>. For map columns, a <u>k</u><u>e</u><u>y</u> may op‐
+                     tionally be specified, in which case the value associated
+                     with <u>k</u><u>e</u><u>y</u> in that column is changed (or added, if none ex‐
+                     ists), instead of the entire map.
+
+                     Without <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>, it is an error if  <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>  does  not
+                     exist.  With  <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>,  this  command does nothing if
+                     <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> does not exist.
+
+              [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] <b>a</b><b>d</b><b>d</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> [<u>k</u><u>e</u><u>y</u><b>=</b>]<u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>...
+                     Adds the specified value or key-value pair to  <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>  in
+                     <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>  in  <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>.  If  <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>  is a map, then <u>k</u><u>e</u><u>y</u> is re‐
+                     quired, otherwise it is prohibited. If <u>k</u><u>e</u><u>y</u> already exists
+                     in a map column, then the current <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u> is  not  replaced
+                     (use the <b>s</b><b>e</b><b>t</b> command to replace an existing value).
+
+                     Without  <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>,  it  is an error if <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> does not
+                     exist. With <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>, this  command  does  nothing  if
+                     <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> does not exist.
+
+              [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] <b>r</b><b>e</b><b>m</b><b>o</b><b>v</b><b>e</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>...
+
+                     [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] <b>r</b><b>e</b><b>m</b><b>o</b><b>v</b><b>e</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> <u>k</u><u>e</u><u>y</u>...
+
+                     [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>]  <b>r</b><b>e</b><b>m</b><b>o</b><b>v</b><b>e</b>  <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>  <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>  <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> <u>k</u><u>e</u><u>y</u><b>=</b><u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>...
+                     Removes the specified values or key-value pairs from <u>c</u><u>o</u><u>l</u><u>�</u>��
+                     <u>u</u><u>m</u><u>n</u> in <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> in <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>. The first form applies to columns
+                     that are not maps: each specified <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u> is  removed  from
+                     the  column.  The  second  and  third  forms apply to map
+                     columns: if only a <u>k</u><u>e</u><u>y</u> is specified, then  any  key-value
+                     pair  with  the  given  <u>k</u><u>e</u><u>y</u> is removed, regardless of its
+                     value; if a <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u> is given then a pair is removed only if
+                     both key and value match.
+
+                     It is not an error if the column  does  not  contain  the
+                     specified key or value or pair.
+
+                     Without  <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>,  it  is an error if <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> does not
+                     exist. With <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>, this  command  does  nothing  if
+                     <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> does not exist.
+
+              [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] <b>c</b><b>l</b><b>e</b><b>a</b><b>r</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>...
+                     Sets  each  <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> in <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> in <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> to the empty set or
+                     empty map, as appropriate. This command applies  only  to
+                     columns that are allowed to be empty.
+
+                     Without  <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>,  it  is an error if <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> does not
+                     exist. With <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>, this  command  does  nothing  if
+                     <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> does not exist.
+
+              [<b>-</b><b>-</b><b>i</b><b>d</b><b>=</b><b>(</b><b>@</b><u>n</u><u>a</u><u>m</u><u>e</u>|<u>u</u><u>u</u><u>i</u><u>d</u>)] <b>c</b><b>r</b><b>e</b><b>a</b><b>t</b><b>e</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>]<b>=</b><u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>...
+                     Creates a new record in <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> and sets the initial values
+                     of  each  <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>. Columns not explicitly set will receive
+                     their default values. Outputs the UUID of the new row.
+
+                     If <b>@</b><u>n</u><u>a</u><u>m</u><u>e</u> is specified, then the UUID for the new row  may
+                     be  referred  to by that name elsewhere in the same <b>\</b><b>*</b><b>(</b><b>P</b><b>N</b>
+                     invocation in contexts where a  UUID  is  expected.  Such
+                     references may precede or follow the <b>c</b><b>r</b><b>e</b><b>a</b><b>t</b><b>e</b> command.
+
+                     If a valid <u>u</u><u>u</u><u>i</u><u>d</u> is specified, then it is used as the UUID
+                     of the new row.
+
+                     Caution (ovs-vsctl as example)
+                            Records  in the Open vSwitch database are signifi‐
+                            cant only when they can be reached directly or in‐
+                            directly from the <b>O</b><b>p</b><b>e</b><b>n</b><b>_</b><b>v</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b> table.  Except  for
+                            records  in  the <b>Q</b><b>o</b><b>S</b> or <b>Q</b><b>u</b><b>e</b><b>u</b><b>e</b> tables, records that
+                            are not reachable from the <b>O</b><b>p</b><b>e</b><b>n</b><b>_</b><b>v</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b> table  are
+                            automatically  deleted  from  the  database.  This
+                            deletion happens immediately, without waiting  for
+                            additional  <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>c</b><b>t</b><b>l</b>  commands  or other database
+                            activity. Thus, a <b>c</b><b>r</b><b>e</b><b>a</b><b>t</b><b>e</b> command must generally be
+                            accompanied by additional commands <u>w</u><u>i</u><u>t</u><u>h</u><u>i</u><u>n</u> <u>t</u><u>h</u><u>e</u> <u>s</u><u>a</u><u>m</u><u>e</u>
+                            <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>c</b><b>t</b><b>l</b> <u>i</u><u>n</u><u>v</u><u>o</u><u>c</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u> to add a chain of  references
+                            to  the  newly  created  record from the top-level
+                            <b>O</b><b>p</b><b>e</b><b>n</b><b>_</b><b>v</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b> record. The  <b>E</b><b>X</b><b>A</b><b>M</b><b>P</b><b>L</b><b>E</b><b>S</b>  section  gives
+                            some examples that show how to do this.
+
+              [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] <b>d</b><b>e</b><b>s</b><b>t</b><b>r</b><b>o</b><b>y</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>...
+                     Deletes each specified <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> from <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>. Unless <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b>‐‐
+                     <b>i</b><b>s</b><b>t</b><b>s</b> is specified, each <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>s must exist.
+
+              <b>-</b><b>-</b><b>a</b><b>l</b><b>l</b> <b>d</b><b>e</b><b>s</b><b>t</b><b>r</b><b>o</b><b>y</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>
+                     Deletes all records from the <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>.
+
+                     Caution (ovs-vsctl as example)
+                            The  <b>d</b><b>e</b><b>s</b><b>t</b><b>r</b><b>o</b><b>y</b> command is only useful for records in
+                            the <b>Q</b><b>o</b><b>S</b> or <b>Q</b><b>u</b><b>e</b><b>u</b><b>e</b> tables. Records in  other  tables
+                            are  automatically  deleted from the database when
+                            they become unreachable from the <b>O</b><b>p</b><b>e</b><b>n</b><b>_</b><b>v</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b>  ta‐
+                            ble.  This  means that deleting the last reference
+                            to a record is sufficient for deleting the  record
+                            itself.  For  records  in these tables, <b>d</b><b>e</b><b>s</b><b>t</b><b>r</b><b>o</b><b>y</b> is
+                            silently ignored. See the <b>E</b><b>X</b><b>A</b><b>M</b><b>P</b><b>L</b><b>E</b><b>S</b>  section  below
+                            for more information.
+
+              <b>w</b><b>a</b><b>i</b><b>t</b><b>-</b><b>u</b><b>n</b><b>t</b><b>i</b><b>l</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> [<u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>]<b>=</b><u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>]...
+                     Waits  until  <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>  contains a record named <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> whose
+                     <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> equals <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u> or, if <u>k</u><u>e</u><u>y</u> is specified, whose <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>
+                     contains a <u>k</u><u>e</u><u>y</u> with the  specified  <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>.  This  command
+                     supports  the  same operators and semantics described for
+                     the <b>f</b><b>i</b><b>n</b><b>d</b> command above.
+
+                     If no <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>]<b>=</b><u>v</u><u>a</u><u>l</u><u>u</u><u>e</u> arguments are given,  this  com‐
+                     mand  waits  only  until  <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> exists. If more than one
+                     such argument is given, the command waits  until  all  of
+                     them are satisfied.
+
+                     Caution (ovs-vsctl as example)
+                            Usually  <b>w</b><b>a</b><b>i</b><b>t</b><b>-</b><b>u</b><b>n</b><b>t</b><b>i</b><b>l</b> should be placed at the begin‐
+                            ning of a set of <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>c</b><b>t</b><b>l</b> commands. For  example,
+                            <b>w</b><b>a</b><b>i</b><b>t</b><b>-</b><b>u</b><b>n</b><b>t</b><b>i</b><b>l</b>  <b>b</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b>  <b>b</b><b>r</b><b>0</b>  <b>-</b><b>-</b>  <b>g</b><b>e</b><b>t</b>  <b>b</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b> <b>b</b><b>r</b><b>0</b> <b>d</b><b>a</b><b>t</b><b>a</b>‐‐
+                            <b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>i</b><b>d</b> waits until a bridge named <b>b</b><b>r</b><b>0</b> is created,
+                            then prints its <b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>i</b><b>d</b>  column,  whereas  <b>g</b><b>e</b><b>t</b>
+                            <b>b</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b>  <b>b</b><b>r</b><b>0</b>  <b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>i</b><b>d</b>  <b>-</b><b>-</b> <b>w</b><b>a</b><b>i</b><b>t</b><b>-</b><b>u</b><b>n</b><b>t</b><b>i</b><b>l</b> <b>b</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b> <b>b</b><b>r</b><b>0</b>
+                            will abort if no  bridge  named  <b>b</b><b>r</b><b>0</b>  exists  when
+                            <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>c</b><b>t</b><b>l</b> initially connects to the database.
+
+                     Consider  specifying <b>-</b><b>-</b><b>t</b><b>i</b><b>m</b><b>e</b><b>o</b><b>u</b><b>t</b><b>=</b><b>0</b> along with <b>-</b><b>-</b><b>w</b><b>a</b><b>i</b><b>t</b><b>-</b><b>u</b><b>n</b><b>t</b><b>i</b><b>l</b>,
+                     to prevent <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>c</b><b>t</b><b>l</b> from terminating after waiting  only
+                     at most 5 seconds.
+
+              <b>c</b><b>o</b><b>m</b><b>m</b><b>e</b><b>n</b><b>t</b> [<u>a</u><u>r</u><u>g</u>]...
+                     This  command has no effect on behavior, but any database
+                     log record created by the command will include  the  com‐
+                     mand and its arguments.
+
+<b>E</b><b>N</b><b>V</b><b>I</b><b>R</b><b>O</b><b>N</b><b>M</b><b>E</b><b>N</b><b>T</b>
+       <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>B</b><b>_</b><b>D</b><b>A</b><b>E</b><b>M</b><b>O</b><b>N</b>
+              If set, this should name the Unix domain socket for an <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b>
+              server process. See <b>D</b><b>a</b><b>e</b><b>m</b><b>o</b><b>n</b> <b>M</b><b>o</b><b>d</b><b>e</b>, above, for more information.
+
+       <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>B</b><b>C</b><b>T</b><b>L</b><b>_</b><b>O</b><b>P</b><b>T</b><b>I</b><b>O</b><b>N</b><b>S</b>
+              If  set,  a set of options for <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b> to apply automatically,
+              in the same form as on the command line.
+
+       <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>B</b><b>_</b><b>D</b><b>B</b>
+              If set, the default database to contact when the <b>-</b><b>-</b><b>d</b><b>b</b> option  is
+              not used.
+
+<b>E</b><b>X</b><b>I</b><b>T</b> <b>S</b><b>T</b><b>A</b><b>T</b><b>U</b><b>S</b>
+       0      Successful program execution.
+
+       1      Usage, syntax, or network error.
+
+<b>S</b><b>E</b><b>E</b> <b>A</b><b>L</b><b>S</b><b>O</b>
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b>(5), <b>o</b><b>v</b><b>n</b><b>-</b><b>a</b><b>p</b><b>p</b><b>c</b><b>t</b><b>l</b>(8).
+
+OVN 23.06.3                        ovn-nbctl                      <u>o</u><u>v</u><u>n</u><u>-</u><u>n</u><u>b</u><u>c</u><u>t</u><u>l</u>(8)
+</pre></body></html>
diff --git a/support/dist-docs-branch-23.06/ovn-nbctl.8.pdf b/support/dist-docs-branch-23.06/ovn-nbctl.8.pdf
new file mode 100644
index 0000000000000000000000000000000000000000..e8038b20d3acb2e3952ce70a8c2287d34a76095d
GIT binary patch
literal 111075
zcma&tQ<Nsbwl?arx@_CFZP!<}ZQC}xY#Uv+tIM`++c>@U*yq1lH~T6gXU2%Q${hKO
zcP1G?RGf~9o)v~{<TAbxhKx+g&duJ~(8bc;j+@ZI(8Yqm+?kLLKu1VtqAVmXru1(V
zvA6wq!_vso#?r-8*3`|^hVS17gmjMoyG~vKAf&1+_HU)Ikcx;TA)T|Rn3|M`7@vcQ
znY)vvi|N0Lvx|wns|%mNzo~+&i-W6+xTTHhe=h$|C&920G7{PwS;6q~GRT_RnY&mJ
zvj3|nG5p)b#ng$ALEOgB#Z=VP*xtmHpC88A#mUsr7RDpHL~FxtQykfMMV&PWXpgp-
zJ<A<pHJp?Ej~=Pgaw;C}Az?me4OT7JVaTCmuK#V_DZz`%j%1t}@`exyCq8>;Rh9e_
zm+B<J<Vn!mWBgm=X7-zn>+?tkpqKeUqTO(&Zie1s$<_1u(p4Iv_GbD~Ca45hrYJ(!
ze!A<~&+$vZCdicwVURca&%T%EF&oB|E!X1X<J!fh4WbF}Aa=Lt5K{a>x~@RB=S}zJ
zSCH<URpKx&jB)p{y26fbLteC*dihpvCfe&NCA0k}UUU=Iaf0CCJ0{Ve)DtGU-iZAW
zc2f+)!tJ)t{v2{6{F8#Uvy-&tWsRGC_(#vfvP)qwg_@~JJiF?e%S2sU)4^>z<ejPx
zV0wczCl8H2!W{*Xx-0%arB`83ww>0gHl7pgV#?Kr;_RRsaH_g+AAjvve*C=PxG#lC
zd6mt&-foVT80_`BGk7$*g)bb}iXcvwo8u*PaFlR;4O2Hy!`aP<x=ufqZ?4?R*GmPU
z<fe52{#m_n7ZmnsR}igw(>rls2#qt`U&AyVV(9|~QpYtht(WY?hxMaZd|W5PNf{hs
znU0C_n{WF^Sp@pM??>-TOGkkU;u3mwN6_}sunuwe#vb1^;U|G|xcEnj(z&)PwH-!-
z<1KGZ>#hyv!8~02oLmYX*x-R&hv!=nwkGLsPxmh}kZo^oQV;}T?N8?om{A*rX_sy@
z216j;hn}=uA6A-dG-`ibo3->8l{`01qo9;>Nh7%~^)#_}|4Q-@jt+;^(wGzQqKCJ~
zy0MI2%P%Fxl#xJ1DK!+Rs!PD!Z@Tx-nwDaFU6cgfj$XoXdXp$X&_s;h_eLxMHw06$
z?|3s=?dWdo-A=XqwqAQ&s`e`8!iWSfm=Q6(>Nc5R;)l{Pn@I1G)4nc;In8QvM|E{4
zT28ZWr+SU#(FJ3oouml(20<hr)%pd}|0P(2=x1vJ4T(TUlZkRd4s3_?nZfXJbY;xY
zdG=w*=~@agnRvc4H6{A`dsIQ31r1>f(30FxhD!ypI1d9~orzB#oNa`vi$s=RBn87O
zHW>=RN<1u-jBd!tte!g?;I*L)4|^dk6sHrsGNZ}%N5HM2iWINiWTWM#YQt+L>Z+xb
zV8V5-y7+#dHTT4Zsvm{A&H$Y6+<oI$3JB*n1t|1-Fs#~9!%6f_9EjH6PYSev8~)a7
zlSqQLfucLj0dws`!wp;6p~PV#+cYTrnCwn_anuDE9O-q*@*KA;?KPy3nxkqf0RL!k
zv&mN6XUp1h)T2XhAprrpNN0sKyNlQYMv2pCC?XdYv)mVsf>@mfol*Qg-(=T>s-S8=
z|25MhpL-6&!3e8!>r>IBNmK`ERTV^uaz9om+pi=8os7y98sTFRw(7M?J9{EH*w}^_
zy}FB~Majhb#c}EzX~%^u&~aHsG3Ca6wdERkE!mL@<lmjdhkTo{ioYDchUQcuX^Ab*
zzrTW5UTs+AI|Wq0^)!Bd(FZxi02{4Hp$=k~L5gDf?eY<p?<Sys_g!b9|H2Jhn<&)T
z=xy-Zx;`iKluMM$Oo&g8E+v-a5-85JvhnlD<^hqOMi8b^Hq5Uz`~!?ibio71gllC7
zMnnU!Ag`c*j2$iig(fKp3kI|z)tyo~agsdPy@_6qn{@wOYs~@Uc6?v2=7EsBaNxQ_
zgNd(0J}PuX!GIFTI#LY7Hg0!>_m(*Qu?T##99%9z4@g*A(Ei)*molKTh?^}o=gMF;
z^C&V02a$3-C)S%{`c%<$E84Ohi<>|h_RDE;m+}w(%%tLnGy9<C?)_h7`NDVf2SCi<
z5o}9F7Fk-Gs95qlL~z0k44`=QRq7HtX+SY<&E+o{t_)_e{Ghhv8#NTX{ic8@CwnUP
z$pMlrQHV@3S1!f4MnB@9O{R_R&o>y|*`??-NF@+;`B2OvQWudY8WpgD%0eSc9_)2C
z^zy3d#}7B@l2gIS8-keY`MC@xsu0~~DCF@vL}?jA#kF6`;@G#luX4W(n(;I$PM<FW
z-DDS}I>Gn4^-1f=mz*g;5vr^?pPn#MR#x}Ej|Bq)rbxQ-AS+(3r=m|JhpzQjU>9)`
zVhexRF4e6xTQ$N~K$~LDG`erqa{wK{&LNv)z^weg9Y^O0V`}EKDne$V-jppjFtptj
zUfHIU%F2TTFQ5)JLmRYOHrDtJhfxwct#7oO*z;BQw&X-YYsnoI(_uth9m%946csZ}
z7OvH-@7EhjNF{Lh+F)@-r%t$dB|>yCr$7ZqzQJN68QDZo{ur&v3-2TTwSp_ssSAn9
zKOW>1wC+mymE%B#(9ie0=gCA4eaa|bbNkmb6B{W?KGli7XfObhL{anSS0etyj|T`c
zxs!b&<pQ!Ihtl*XY{v>l(c8|HTX;r29jq@$Ge4}dw#i}3_RNknV(BKE%I6Ys2wO!&
zS7|nwa^Fe8!Oj!}e{DH9vHuKi0;vusWIhy@dBN}1Sn?7penZ)mlMdYhEaDtQoh0mW
za^Prx0k(k8tDs~w(^<QGY=H~TKjq}eA!^7LAnF=*n;fHbW9{Lts<jF!K&VE!<onjr
zg4__FlHy8ZQRW^{fWf$Z!$}F9c?IGXmFfA}ZhT=|O}df>Mj*i?o7_;sj!|1y$5gWl
z+T(sAxx{k(C<Nu)aUFB|r+`WJkTH!I?Q^zDIG@_j$>)^n#O4ijuW^gVLLv9f=`Iog
z=YYX6{!fK<M`119M1_u6s3-?FR=7c$<Vv-5azaJq-fE-0g{T8!*5+2gqL5vGM^2Ed
z%|{?oqnQ(lVAamvaDsKH*aK3W(8*r-TpB1WG+QF6bQREUMiyP7TnEVZSe)nq$Aqv_
zkllI-@6Rxi{?Pz@vuG7lO`*Ko2~Zq?-;^kP<}e&|fQl^^c6penSqaX_M&ak5bJQ#<
zMVD~t`}`F2a&GLM7S<-xLGRyJ=T7C954^#Gpy8U?e!ReB36JnG3m}P=Sz(*q^VQjZ
zk?NiN8EMAnFvKihv7q>lq^WHbKV55GV58PCr@dQ2$3oSX9g`DvzIE(VLKBB8^D~n#
z=SE>cn|qwik-bOqQqorQY2CWd8RC)!lJZELHH2jcE;WE@%YugDhn>3kJf^N&?XQ9t
zN8LZud?UCyGjqhHQsa6Ss~?;2#d*hrgL}Gdt<GU(te)6><~|aOW1P>wpjJ;3?1S|{
zN0@mKz%N~m5tj1H1h%!w0?H@y+@g@&oPBQ&NL*X<D?LwQItWJMG=3A#k#H{EmW#(D
zzd!EMz?q?blTkiywX-^wJRV%Gh)H78jq+Iyq82w%m5H?=C}#Po0^`Enw&1yhD^6Op
zSePiM!($~#4Lj1bG0oit(-L&FnE7h^5gKNgTON-Ieb}sBL-2`EUPSd+q<{A?z?%(g
zjyAd!!#pTLt1uPDybn2Y<_?=}OY|tV6uys{A!Q)#_%1cazDGFK#UcC2ldUNEsctTp
znVrs3D<ZEA@pFsx77)EZ?C8@9FF1Y*Zf*6ag|lX`w%~Jc(?SA{xpup4Q!9-VFFiXi
zuq`T^MbE4L*jFxj3Cat09SG^lrGQ304N>!PO-L|V*<RjvW08fnSi!tQv0rH&jnHwE
zx;@G7$mpKr?est<z*?;y9JFX{t2Udk2S0|l-1R()T?O%vRNz(k^X(ZZVOXH^@AO;T
z$8mF>4ESCW65*fL0r7d5ah9M4rJod;eK1pHf*qieFN(|?aWvs9ek1?&s(V#)mEI@>
zeZHO0XSNQI`H&aQF;Ww&#uiG3Oyqpt8<Y>NzkDa)@Cst&%0w<PWh*9~U6yQ5o^XCH
z0GY28((JMJs<37hE`veT@XnMBG<5nca3Xt;_OlJ&D6FnT-ly~dD!D81OxJ($v@wBE
zrzhatw;zxqo`mn>y&i>ytjZ?<!-Ck9aaFN#y$JBDoV8E^Ebi`>a-Nom!d{*2V`bUe
zj0J8&69<p665KIYNPIUP=6w=F8d49N9oPqMA>^d5w2KLFMI_Kn;<}-;?9cPIFp;1F
zEK4J|x3*ipgmNnpZjJp<vuawvp(6Ngk!ZKsmn76rSrQM+xe00RyY?l%#6mg{dAhq>
zcluprr?>hC7l<sNVk4&q?;o$nP!|<IM*d``FC{k^xbp<aYF0`hn@OevAn-<GJLt>_
z78h+p6k?t#QnSBg+{PsWVl#wD@ChuF?@u`M(4}?p*AC+NaM(A@v-t1^@>G&V2rn{N
zV#8H47$4|)OzVkvxSh<4r~4&>aQVs>EJl1V+sEb?!>w$5cmFcYv(f|wkISP!`X2YA
zq6gzKT6>hA%feJDD&yzd(tE)nwSU?O@H-MzghTokEuQ^^d<(?;2=g*L&Ix2XaVp51
zco&Dh|AAE<FOss-vdWpFWeB!hE|r&!!Yq`LNkKe4EI@xJ#@O`Wx>d$MYwJ)!Y&t%A
zTJyi1`2nuiRSGh-Gx=X4{hR%VRsX@%e?}G-HWrxwtub-@m${fY|1ap;(%MMc7)J8l
zsY~Z@R^G>C39hQTM;wz%QI2G<xBM_XQVJw350wL96}--@@Co{)dLPNor2$Inc>DMA
zFCh*PQg}IADD%FhiEcAM`l|P@bK^krc7C{so$Y1*Sg{((Ww1MTSut{bIBLbx)v&Rf
z6bUj-GIg9p@66Kt@aTNSir(!BqES6$y4I++H=F9xtcBO^ct2_l)fGJE9pO7hPaNWv
zLT>Ts$mq^Is<T_e+oEd-8KGu+5q&>LU|18FIMz5{nx0BRLXWya@gE{K4)c?uCGkq1
zQmwQ-Qbf1b?xC;J-T0&1S*x+t*ukZut8CXwp?34UVWqwo&c^fX`VfYPPraPh8Ff{;
zB(k>n1&`t2>WOVH3S}KTpdEd<FAvii?SABE-&)|2L}muvN|16VEH<z`dGiS)?5H{9
zhPEE(=mUB%jzZJwTV<=%eyBKoEPM`baE+!c1~T%7;XAu%V2Df9buEOq^Rd=(O}*)1
zr0}#S)M>k5*LqbW>p{Bj@+`Wo)7+`MR{c?D=dbnYYca0V-^H5rhx@4A&(+;#*dC25
z{uJGKt-Jjcs2K5_(uvUGCA`D-9a<jd8tHlA)$$7Jr>WVg!MtDfI_IgUb!TS$8eJ%+
zkTtKnp64k`uup7nbAsz9a;;fdLn$}Rx5t~~F6h4h?Z*-LOCeZAoQlFk^H!W!h6V24
zKJ$APPd!{u#M+kGW2d>Qazud+R7)dT)`I8I)gA7RIZ0>e{wtzakcs-JP!ey~P^B`~
z$-(TRQs4CnxeGwA{bHB13}PR{@-jR!-s@P4Ov}1z8TDkTNITkLB`{fBdmgWC)4esz
zk24|Td-M?5*juf(wC!OILXpw$LB*S$`Mjm9NkCp8=aJ|Q@5`=9OeBb2ufPB42}JWt
zh1nP1d&;A*QG1;X{;Ad~UYW)yAwXid9Zi#3Y<0AQr<;c)k`sq~ri3gE2iT~^RT+yo
zwE`1`=~fSRnHm&HLPuN}f-`-T$N`lu%M%oUo8`Ksse$S=K5(m>+)=F)vz^qQm$ni0
z6<aI0dZ^E5-Kp!z34{>#DmGklFW=KS1SIIhTRq`AIR4a8%0m@9>i0eaV!eG+rTXP|
z^gL7+I2CXWY_8rb7Z|v1E$gdTi1@S;W%h`aa;l_99xTin{AJ(aq-q<dGNHKW?y8Jm
zSujUAwQiS)vIvp7^JRTEwKZ`w9rJQlVbiP&OWalCtpqb+RrOo%esl3&7(}*yqO@%O
zS_@k|U|umYde`jWC2BN6lGDE+{ali^3i8V*+nJ0wo+||l#;dyD<LbCWUyMi~_yz!1
zSbS@;-I&D3*R&DUc%v0j(4o1~(I6oPkFq@Lnj77OXn15*Yw1s~2w{|n;4!V?CqOb#
zNVmM&R}&*7NSwvTHr+XMJM8t;H(qOGZ`GJ?u3F3``Zq!q4Wo(qO70kR?Dc`MAb%3(
zWMEPJag|{A2(EG%@x40m{NOSx_WRB@JZlq88qN7Y=R>y`OFh(_<G04UJTb;I(90X&
zo{(3^6=;;(FwnC4M*|HsAggxkOucKZMW$_e%Tn}&v8S9!D!(yO36Xxu{1b+sFt(p!
z5cZoihSc%0n<@mjIJT!keA=Ov$XcAaL{R8xu;=nR9Feg&>g(y~B5g*W_WSPLC>I^7
zonfX?It?tr$^!Qqc)r$Fa;;G!xS29gyg~-?f~Ak^)Mr=FSZ+uq=_<*218@iwn?C&3
zN7*+8#f$1OeNDbWplfDaK!`H-g$}`O7;^lfxw3RI4l<e<`$aue8DX+YCV;Yve5M5p
z;wuMr$O|vL+l$f_>Vb)Lds51_<P3k&8~}x;r+<^yK`><hbKA?uyY1%~YJ!5qlY~b)
zT4@Wf+X+sfvT8pv8jP^+O)Rv`v&*Y%?cCQz{VfR(JA>e$H&l<A*e+DIE0qArwhMoG
z8gZIR2LZzOGQXT`9rA%PJ{&iG)c`^q18S;u%bOE$(UwQB{)Sy_Fhtm#Z%+*nZ(rVH
z$g=hhOQvoR&`_{$?MS7?iuB(h<ZTIN^IZWb^|h(q?|$(D!J8C^5PhFeSQJgw^jBx5
z%(l!(wyk7QSrIW5Qobd){S{Vf^KIU0$|*GBo$V#r3{y>V2KVW&E1$EtU7`rET;CkT
z>(4xIo$!>OP7==pR(rBjudxmQsw~|UTmgt<O3zm(Rx(*_C*2mH11}yTJ^<oisgu(J
zH+S!mlt=`5jxyZEO$yZt9FY8%AgLAAXxMGtJv3Sn+fK*ej~Xt8%D_}Dyq{5pb$&}8
z)kchT03!!2js+z7Rfo5ygyY}cGR9W)@J3ebWu|-h7akbrhW9+JIVJaxGZc~aH4h_A
zLdJg<v|(7@?X^)*b6kt>DyEM{I{ePfPfj)JLd`TnscC#qST6FA+jvhm*Q-XRa`n3n
zrR3MhKMFF}<c3)1ytNruQwIwAIL+OTOj;$TUl9W#eBC!@A}mIbDyP$esq}~nbo4@C
z3|J<aeu(c60Evl;w^gDy7KA|59Rylaj$zv6X5}kl)l7jp0|x%vEjBe*DMpm8sX^t)
z2FW}7;yR-@)kH8C|FL~<LR^gu?0NtKyN|XWwbpZvf6;U0rR(lmmLdFhlCc40#Px_d
zCcjgzQ<qluy<|%nm=~VId!m>WANuljiFOF;)<KQa%K04{SK_s?*wpo$C+mDqU<Hq+
z=#<0Spi;~_<|JMlwv1soZqu!)OtoznHx)G?f@*F)!wQ_Hx!dxwrrRpcvA(piU@QI3
z5~*lHenc<tNm|k&YFz{!j{WFjeiV00a#YfUS<yxMn8d1(FWDL!hT+<<*eHc$$H+DS
zI<1;=G&Z_!ydvbHw?Hh3n{q^u!C}mV%wxXTva89&tiCFY?^PS^1-59U%}XNdGDq#t
zRO4l+<;n_Rz7;-7u+es91neJ;d}z5&vmU#tu03|#@{^dbc@ei`N&n<NjePlOUm$y>
zSp4C*3nU5o1)oJTL^mFkO^-}cCf9a(xTtEm5gAr$vPE1d=lutfa0}H;CzS7~AiE&W
zyz}Vtqo;$>ezH%{@O3UPbIC-7vVXeP-i2f_kOdiKr+imB?6oC070R{%fa1FUP7Efb
zAUmsgj$8CLYHNgY-9;n(`lK}2W6_PP(DDQwRwptY_*;*sFm=Aly<au+!!gkg(j<z*
z^!rwPt^FBc$M=i(kGA@i768>jnomKhjTtn;I@Y-q$i#g8Y5MJHWo8D7P~l7CeGrc&
z)@y&jb#j-FXERVx!34JjPl`tWJxU44#c=(KIM{Cu|H(6pUx4O{u$MVgU($*}=_E&T
z9Y(Sn_}#+lBiAZg>kBcG*cQpo;W&nqVvkySQ!h^LYeQYXr4<{MI)jgW>Yi;MSAu1`
zwMzf-07g5b90C<{MO2Pd1b}ZA5qlr$laWdsD`9U}n%#c6YIC9QLqu#?CqwjR=Df*#
zTAO<dd!4U5YRk5hQU!^Py}3o6h}Bt8UWABW{uNKc5!py|F_Tz3k2KnfrZswvr}$ki
zA`#Bk<<hPgj+(sIlr~Ys`Kucj?XCij%Y`%L;<N#d=`$_%D^L2`^h5bpK#-tp`X_GK
z2l)w+7JEkYDsiSwHWL_ay)5%Mqv{ID)<YeRJIz{|8QPNc-bGM64=~t3`;en%lk{B?
zW<V4E1Y4XQMyE?}M(L@BUOR;!ir1$$YgUsRlYg%v&yi(3{8w$~u&GZPK`v<#iB%t#
zOg{TnSZ=l^^Ltgbv~bNZSRaCy0K<>oNh{oRl1?5s_5G|0R5FxWcXY;)Zb*r|OI*s>
z8EV0BM7+{%2_Hl$x+$NY>qGGXk4#NUBJs)7xxfQGPIG$R$V4)%gj_-%!!0u*bj}=)
zFU%JEunonR`X!X%g#{z;(g(`#T!Pw%&_lKoDw7Z0FO|l(FlLrjBNy4(Vf%#@){j?*
zidk{)_h)`wQ$(@kRP!;fOB<kevIzksxVSSi7oM~hQxPw58vzdnj|OvV{9UA-4K)DX
zyeZpnt5$a<YayNdRLAg>D~gnfQed%t)>{rc&ue_JV{`cjIQo@b65~t-HY`rOGaokU
zSG^^~^n@fyL{)jnIb9Puyz+891bKzWL(Vjv`HmWnQM4QPb|}D|>y9r+bD(A_vlN(t
zHm@r{=4`e~Q*K*KALLE(bgAM{(nfzW(62k29(K@oyDQVw0*7Nz*-tDOsIKewK9(QN
zHF(sT?G}Iff*>wyr^<b+1}HM=o|)U|uFU&j%>gemwaUX|AqCjYh5ukO>G8{zX;3%v
zzRXtrN-6(i%mF)IZ)%VhH+2Jh4QuhnK(>2_yB!+!LRrsX_3#5=Q}`Rr1szj91(H}9
zPRr;wHyEQ*Q$n3w2@7IH#fj86o_V+i@p5-V(K;1S{-Fu)srwE|_*n!=a<M|<AeQHZ
zg4y)Ztt1@7qooai`5Jeu4+&fjJs5vd<tpQwIbTG+J#3asUzr>4hv+mj+7kXCZtBca
zguVA7_}D=@5*>NCuT|ClBXsz=z|T@7)2-bh!8Y^lW9{^>R<VRqueh_*MzsrxQbVcJ
zdtk0k2G;L;G%5=;X;rddz4~x2uLaPBE6qwsNl#9d&Th6XA69WYN|@aD_RZfpiby|X
zLZ%|&8%$h?%c|=*GncX>f~0IVG3QmAV+_)1zUPlIv7_p6)7GEk4oMu+XSt{xB%{=m
zZSaH10AR^$**RZBBLawR=f_tJymYW~_va#{A6#8GM*NAEfhpe`^A>@77GWz+7YSP1
zk>Xy=ayARMk_#V$Cd1f>50YFfQtbJmi2`Ge(g;qWC=f*Fh)RzHFS|na;>a}_uF3I9
zYw*OwO?m4+XDao{0l_wO!92<g>}LxBFjKGkUV6LlSb-nVDFCC=e<}8Vc=|t#W#?l2
z{~627^k0l+X8yl0wnlR!X|v@&j5T=so4rUci`d0|1Ub>FB%O+8X(Vv@9w=huhUqwp
zG`2Q(jFYUe=09l(1jf)<C4+p?uPu^4cgnxz+i^F2hw0AyZvLHj!@zs;yuSsm-phUL
z|F-Sf($iL`dhxlRwZi19VbAbLem&HK0vXu2t=~4aW%Z>1)!&f}ok$L>RvrDTwWpH9
zQ-5y7Uaw3%Any;D^&>Jq1TCzHxo?Mq{pO+B(WiKoCvJmah*xY`&-eHI8(UR;Mv_}?
z>WvV<!0nR(+mdaOh*;91@!#is3C%-Lh)cWMLuIn-4%gK3Sauh;Tepqr9;#-ZZG$|w
zry7sg+LLX&<{SP)7pr4@x69%A%+pTtGtt@b?_@Gd6ZoFrC?#Jeg)Xi)kFmd1QySAg
zVr`cCzvSU17We}%D5T4wu;Rlu{s>e9@R=DRl^+T&-Pd8VaaeYHsD6Q5>p146>U1I?
zxIWBY#clXcguDGUP9-OHIO;hwEwf`@XN1d;<lBMj&E^@y2c8n{|7)y={a8tWe}`C$
zO5W3sqNzYBn=PGw2<82oF0-YJ?xK2tAk-%3n(*NsG+SwTT}4iJqKhF*>ufkU!qbm+
zGliv}<VyQq%U1@1Lp!~3I|VPJSM#mF?YN@ISzD_Feto-21iof-JT*T*8NiNAOEmWu
zN&svgtiYg9q`%9Jl=<<SxV~evcG4Ywn$N^m|9FJjy2`txBkxsqNX-=wf7Z;qI@=aB
z$7JOI;&QUPiOeXHTfg(Urz&$Jv_hgERyy(0{6(IqwP`XQDHWf?eKbz>C%G)}ow1(j
z2|PDU+k=}n&@D%qc$PWVF(ewT5+3lrh5tg0-Pi%pqcq7&Nr{`*8VQq-F|^8USS4r}
z^5uW;Gba+3_iuA^*Yu^~ftv8by}4{`r8&*<5W1Y7iG?>72x_=JokS`Ix?G>=2EBrF
z%LE0ER}yZiNH+M4m}w2pYtq-#X<ImYmFeM0t*RUA>lw#%><b#=-lfk<Pf=hN2lr0M
zbO!75uHX9iu($5#(rm~rjNK$N^ejcZK7)BXgFbm7o#8SeA`tmNFbkm1nm{y_rmAXA
zlo<?X+?;{jS}PM8@!(C3d^=o1&v?J)TQ@Nr>*Hn+iQb#_Qp_lq6FPar^k7@I2iwxP
zQs+E?c-;BQpH%-iT_p)mdQzzhl3=uz(Y%k1xoc(}@s((}?n0x_n_0x6fr$h@s}LW!
zAUkFdl`OCilr@!^=Qukz`nm=GSbg5TCk0f*oPxyZgT_kEooIgd;Le@aCqts2B+fop
zbn;g@R|N273qrzH&a3i~p1Ew6JFP3dTskCZ@{o!fD|86W;R4SDan+qtx24FZl*jYJ
zjWi*Waf{eiR{K@KI$Xn*%)^(K<2Vlxqhd?#IMmA1T82yx)a*y9`9wcfB`<Qe&A-i5
z=Y-=O*{qrhN^D$O9)RRl7$CK(Rtksa79pp<jNDqS|8;vM!&=yZ^l<IT3Yzs}Pd)vH
zsh0drrtF_cPNEX-IKiDIOb8z?8LFI}N2iiPwdm`w+@h0eq=QH{60td2$rLV;=`2bc
zYZJuB<h|de62N|^iHdRcCE{J37iILK%A+&yfFs>uT<Vpy@wkP876O^iq&CN}5Az$l
zBp@IH!VxTbon+AFM%A;7+wgQ<6Zs&YyYKbz9fBei%sJV{Tb$zIS|>!0Dg9)xfZ+xC
z^wW+WI++H`o=aM~hOhu*^|T0}BKkMklv;Kdp#wYEos$B<6H*KD*FhdxSoT!F6aEj)
zz$~$Urzk%~3#-k`v3I!FJJNER`1XmH6Ds4K1uMQ^CKz-KF5I4M>YQdU6e#jAZahEP
zutl6io|vUe+?X5B75)HYq>ZqkuBEBF;H*@Z@iAw|J$PJ9%?bD~qnw_yvpVXRVlt2@
zgM!tsy;=4fnUI!6Ui+XHRzt<x;tL-gk@OiCt$g{x4v4jIt{K-VgWZ$UD5#0Q&ssMK
zWb{wTFSQ|pl<|SzVu_fcEtqe9m5x;!olT$nd{E1<4GV{u5X+|axj*+`(JQ_5`H<)q
ziAyQ1yFZidj=ilbs;WpKTz5uQ5tz|Na%0KNgK<$taK{0?6E$uoyN!MN%Ndcq6;nmX
zEs9%W3S9*NBn_+IIM|YUc_K&^bf|gbF}6!4;8FE<;^w$CqVu=rYnqPn;mT^y)HA#p
zB|ocU@7ZYY1x)ayi7|iO5L4&8q-=t!8|juyj*-F(+B4C07)=z4)!rqZMC0xUfEnqZ
zX8+J)X9ewxTs29u!|yu)7>SZBZM@n*kqm}1j_si&FeHd?^odRPwF_2*js@Id+*l(d
zef=#4K2==b?bPs&no@Lh7)tN)d^X)qX>7Dq$qN&7MuF$cf3nBlYBwguz$HQI(NxbH
zsD%4N@?ywuc~QQXIiTu-OP%$pFqOy<p9^o}wEWfeiO}D5fk9Q*_-GZdP<e0=<qPNa
zb-Bw5$nd%XRKKLgy$rO}#h*t}<*K_$=dzBWj9w2|PCO_hxa_axjBBwDX1lL&&W|0^
z#m|kqO;HPhkMqhY&e?yV4CsoKk{-oWc)6@D^0H>?!|Xe5huoAF1g0>BDk<v=J9;x$
zkDK{1){|VjmXmUQDwjGZd)A`D^N|w|)?yrcP4eptNN3Nc4uAWb=FEb`JkAmsTpPYO
za7b1vD_~1sD?jD*G0u`Z7jR)!^BkLWUe(Vx%UNU<=EVwS)X=OwL^d$_wbI&QxsN6v
zsG~4;cK-Es*duIssI}}7zW9wMRw3=UQyy)a<(YKM7{1FczYi$u<~fsnZ?YJOI-U2D
ztLa38Dmz_BzgMBl`ol>i8+4ZG=@TZJJ<>2H#t24<meEo{y|&%9HFX}1#NH-n$%@NT
zW4Cg>ps|1^7u&b_`*L=(CV@#=Kzj2d*yd&&KJ-RJ*NtaQZhn|lZMC6Czr;vs$Zzrx
z{~FT^yU<+u-G?$7VX5H{*#iE77claxg2y&vkk;*W0vy>5Q@@+&W7)Ib5NC7jvbRtn
zIrKFG);P+$2_&*054#&66%h$#aLo<Co}<1%XbyBzkW<<L1~)kh`WP_1?-aA|Mmhi;
zO~LbgGB>bSK{V=MDCf6eBGj}OZE(tEul5C_nozMeBK|ezc{;9BMztQXpBm*zT@`*{
zN7JacG+sFA`iKIi$M@risTKUV{MZOQ27s^gNcsb4)?Gho@onYhG`Qo$@maKI%Hqe?
z>0})l!1EZLN=_gS;oM07#i}oo(nJyom#F-LE*0c)hTP0QWew@$Q$&X~eRaB!Jw<%e
z(CQauPC!{HU7~0gdz?-V!lffybP&UwFD|wn!oq777hqPrEs2HBQJ3hsSQ`mr-pwfO
zh3nzmvL-thwL@^!uwb6{yqMbUqaq=nVur1)*k}G#L+l`A@~*A=jE)}(Y^v|GiJV>P
z|JjAUs$%ZXNIpi5S=`3)g<OqTk_svjSf}cv?`C#gecaxTjZ&7&paUh$K02At32sP0
zpjMu?Ot(jjN-xJ#fow?AO5Hw-0?LGX+%?AlC-WWmJ@f18>L;%!GT;)hng%_CNbZGQ
zFeI`2cgHlAor1<p6NVHfRt-_MWBAS|^K$iteM`-f>=7qQDI`N3yW0tD#~2Qlo~!Va
zg?R6s7xi80AGK2hatUT_$N<Kp59eaeEiT`s!VCy+*JqGuwK%9RPxb8aK)0W^Syz@8
z*<4w){@xpv)V9A5yv#K@;n=p_GM(V-v^tS>X+I4lZH^b+8VaCNBOIMK0&+U$pp7mg
zb=R=Yv%q9!Eu#pmGv}$8f2+%xdl1GJMpx6R9MPDhwH_7NufwYXSdbbDwKUM@nd&5n
zS|!QmzBv!XENA0MP~naZO$^NP`NB-kzu2P&RAf#wrMIh_be$etL>5v$S6h<rqZ|HW
z$$1M%+Td{h4D&6cRd<LgBPu)d1ytDK-{XPN4#O|@X>Vhc8m%GkRHr|DwUl89FJMFG
zi-mj#*<1d^qGm19TO%%1Q~#J!7Q;lzZh?i43EuOm<%&4n4TZBRJ<ENt;&%&Le+Nr{
zCy&uGOjG~j(U_9VG*pXCEw@Wu)x>>5otP8Bd~hk{3NVrs@%}qkXO$_-{CsG>)`IAJ
zP?(cp=8B2lWeTN<{ln|s4I|5@!4S4B)JHti!=Xo?jXhW3BluDDyV&5J^VtztI>Y?Y
z?Kz&~7h50d;7qcxu%F-4!aSFOX6n9=)6WA21NsLjy6A)X>(MtW?n|#%kBZ>h%L91V
z+gaKU2FNs<pz5p`k>COTJOFoy53u9^;VYcac_(!-nD*Ud5Hl1X4$Xq1nkiG*SCKTL
zJRP&;%V3r%TJDw&@jEV`O`wM1JI?<Hcn?+|_P^xxKO*`cIWcqnzW|W=znd<Z|4&_)
zHCh`^8_Q__x-NHX48lbn9C!rH?hPj7M`{=<O2~7@u@Jz5P^}ORfB-SM50!pV-}Tmc
zIPiqy<E(fB8pwgZ&#qU^FMAAeH%udC{^vhN?#DbEjr!B+uT@3gG;Y%q6OCwmuA14t
z4~YwqX<009$j%<Sx0Fuw?&fyhoo$~SA-nC9zXoYzZ-<WFCvDZHT$vUh&o~HJ$Ot97
zQD;UaG;lo~ae2~4SYCc-`Dt+yoLUYWGr$<X#W3)H-E}|E+rzgfJZseSh389l-$}40
zS&c$sDl1eEuo81kQ_BvCVAy}(&pZ%(3&n%$p_eIP(aoOL+r;8ez7(ckh;*z0M`9H7
zPA!&^etksy^O5o0-j*x6GikKEL(jB1;Y`bfUf7KfW7$cYudpx8x=r_3M>pK$_>FcJ
zxI2|mQApH}z9{JvIM9mY5HlFQ-(30KD;-;2-DrIQV=zSKJ!)rJRnkp}+qTcT-DY#(
z6x?t#6f`u}j&ED?;Ju`8>xT9q)F(C?1tw^JTaCdfp*SY;s@s9{a4_=OYe`;b*G_)4
zXy&@ev>Vi)eDJ#X|Fz!UKbh#wt!bJ?lj%~)_V82|s`&y4iG40MZPC|V@SM!1S)XXY
zaWo<}CU^^#Z{FVip%3qBOU#Wb1BPdb59eRta<SDc-SWW9wsN@du+Nz)ppuN#!(ES3
z=<@uA08S#WZ}RuBSP$Pf({)|Yf<n1c+Bxte?S8qR)=bL+7tS6wygUx~(%_aTPPvVB
zg-75U25}o0m3lWTsFmQX-ANO3)vrx+n~cutS|h$hZQY-BHD%$H2!ypfuP0oR8uX3C
zvwbPCYLQH-rA3_JF}IM)9?d|U?ekz=Kca~AsIcDX_afVY9ffUEwbFggeF#iC(s(+W
zufR?T2$Zyf*BL`L{cGz@EGkSiQ7pG|4X_s5PGOse%~0BG@?DF;UL9>QvOKPz6dmN#
z0wDKIXqpur6zGxoPe{drZJs)5=hnv2VEB>YJ^Tv~EB#KLD!~fQ3)Y&$&1Tg$S4tLk
zo<!OQ>)v)Zo1Qw-1mYk_kxC>FD+?nX(h-WW7p{YXy4!<iHN(W~)9zPEr_T;!K#>Vf
zcRvzg{rp!4pL-aj2uv1TJ%2AmQxO`0jc-UBNfN$;wKF|)K7i_)dE-=mQO-NCKTy9I
zz4Chu*OLm7ubm3<Ac*=cK&k~P3@Cu(><yg^%ycD4FlUva3C4%tT8h?@2B<4LZ<o+f
zV><`>v`*aY3V_s46`&_*Ho3wjl6G0}Btm`7pH-DoR%qPH&s~o)?zurEj2e-5#S$lb
zCV(i2<i?_5j-~n^;dfe5mTW#5wo3GKG&t2%QbY<R@z>sUX+}$!yVCYy?w;CgxY=@r
zs1Si~S7!DLF)nC-p2?P;Y&1>?=*t;=ky9wb=Q9L=(@Jl`ndFG_hf%;zcp$$9AuXq*
zVt?V2umdJeoQJL_ydD5eQ@+aAD&yJ1*OYPuh8!mueRi5;)Ohi#x;(+6vPnHj^HfZC
zIA5ybeF(x)0T#@}kU)smyGQla7fWfSX!Q3*lYH2s+H3SL1C*q(qa%2(E^XzP0o<pl
zeF+z00hz!WZQ(E)>?)neyn@9mu3U(Wzx_m1DdCEt8DpYSzynz?9buH>67o#{99jR2
zwF<N73$_K!l%j`}Z>7YMLNUPfgHLamovvptBKqPPCHohD@SgbcBqKvqh4F)iJnwT-
zQD8VF821&DB8H=B9oy+gQyw??{vtYs|Cck?!Ss`jL!fEw>HuTw6OsdQ97GCb&?3pZ
zPSjFesP@h%Cg*L=Z+K19gi?S2aZ(5xVY9S(UHxrekj{@dWjMuxt)^b&TJLT&1!DNE
z(yG_RT?nPe!O3&}Xjz|(Mb_z%RCuF}bsoNsL!B`;b}O}E?OoBb=Nh<98@3g;_AW%O
zr-ojoqDCb{BoVrQ!*>dxJMfpITzEuNN=1gRR<|e_vMMnd1A4O>nU`r28-sxcZ9$es
zwVjwP9U*s)s@8>WS<ZJowyr^5Y_E|9rI9F64i@jKrNp~muXx}g1#||Y0EaCx+Sjpb
z{edDdMQI|O@udJ3Mvx+sQ-ug@vbIG96=SRU`{nk`PENSPA#U3#CVD=Sv4Q_AT{KB4
z8W3D0&Wy!!w)OC7z|BVa(lX($LcdjjL=WTvWH*K_??B@PWNDR<l%CEzIq6p(8S#@h
zC9Kk<S%5KQBRvON{K?5oKY~R2v_GqWGN@pz`M?30uex&mve@rNhgi6U8H8;D+}t*&
zE@XqW=u0793M3+wfVr)>w67~`Qeh^iZB&iHVaoy7*?v-HL5a~8-<y+ICyc`2*jE&e
z*Bxy*^>-^cY9B%tEu|(G?4vlw0@9~JA>38Ll!1QDM2OG<`eV;CDn9%ej+dLr8yt8S
zTAJCvNogKtHLxS>|G27rIaPC0-4B}@zudkJnZ*aLj1SKbx0vcsd~8j6`Lrde9P+-1
z`W##t*rokvaSI>H3e`T21-iU68*5gHcsqR9Q=2VZKkXQGt}l>+vKXRl>Hs3(SFG*{
zgWv1tarncGy+HPlE%r~c6WfQ@D@$Wu8?w`OZ_nrF{nUqg9)q60&Jaw7pO5qRyAir0
zy3zN2^W}xoQ!uJ2+B#6;n9>>)bGh|jdSF>mKbvHq1~5IUk@8a5>jV_bB2ti!Ly?}D
zaGa)6kwAgR1=l1d&iv9+oN1T5Vzg5NJ8#Lq*~How2~&c^`+Dh^tD5*%VQ2C9LZ8VJ
zZE2)t@?wf_$PmN31EsaJSLBL)nHQDAbwlG>KI-F}Iq5-R1Y~M3fK$CLub1O5T1ey>
zT0ApmB}$YsXDkMR^-rKJsgH}n=&@<Zucwqa-gSV@F8n+_z4<S$$Hh5EiUua&l+k%l
zc0Zqb!IBPvwJT55agu<kNTdkE%z5Sfx@XfO?VCkv;Z)6@9Tb`@AedhnX}8dY7FLWn
z%`|=3j>_&VlHXK%3f-(M%9L?-Hb}e1HkYd-!B=YhEvz7Dg3xHu6uvQgd3VqO#n=LV
z$oC}PCz@;*YS+3IzDzZD_4?8=4J$gqVMZQ7<Tt5|)6PBmjG=2l=2IGrxv|G$EUz2L
zOPPcTu11ZF>aU%nWR@JL3OA>yB^Xd27A{d&^=G!7Xu&PKfMjn2z=&^KPP5R?;q8*T
zSGLUY<o2P#5;>uOfEFPO!%~@EV9u721F&^3#KxChSlTF(%shd*G5DvP?T;5z8o*nz
z5PE4`=!vxkC3BUSee7Z+=YG5<uuXt&Ko*(3IdIa{#CWmdjL%(JL`k-lHU|g9;IO~R
zt_+>dTPBebxTOL?dQL%x+1yS#hChc)S@|^oR`g&;V;`#&uQXD6Ql!~3d&U3qujXq^
zo(}A4r<-rN3{!5kOiV*;`iF%Svj~Sn{o)Fsxo3NtI9ua_Kt07f%q}GZ%z32yXz@%D
z1bM81q7jnCBNN=LAL6C*i3{nWBdO_$(%f!(H=0dDzJ11$ADLHT(zvMxL#9CIOXU|7
zkZw^uW@BUewX{}3#Jj@mi^h<dvIdbky}Jxg&P9@>;U#`=3J-YmA4mT|Nn8*=vgU=@
z<G-u5mKJQCya7~cG=p8W%iM&EtZA&?)m459B57te@g4FJvaFj(k<W1LCN05xqCT!#
zzbFW|YxMAEEFq|eIwm}W%<?aII~rk77$jvk5Z%>eL@mOxG|a$~C=c&YmGjCGM#qO?
zygNeMT@BAhYS_wc60MxgA=u9JGYYUk11D_^zHN{7P`bZs!;>0^L=$6=r`M!l$ur&}
z9laJ>n;U{q>~nQ$SHJw+gdnNRo|t%u?><S5*O6WnqRd^mINSiTVZaF8tYX^L6mkL(
z!0aLb$}E=98!1E?!Ttfy1dnun6!H#l;|IoO*3wglu@e3`opXWy;G{~X_03WU^*-Xo
zVZ3i$Zll3p25n{f^6=V|kkjHbhQ>9iOLrBH7r(8$(Mk^}?AagQLr6wO`Rjwh<rJ>)
zF3&c~I<A(EP%y<Cr#qXSAk(EeYp6OffU_}ln+ewA(&eqS&QIl?(u))Bt&AQK6L?rI
zK-P@x0;Sa88mPoio1l!u^d+b-?S`LIJdhqTYN17kf48nz1*|qt!HS^ERv60GtjSW8
zl@p~GfR^K0%-oh^2DT-q>Qk8ok(-4{S<xF2s>v`e8CYP%K#;tXAq|Uf*UUGI#)UO3
zdGFreF~c5mM3TG6RNet~Sk$7l95IsUZLSnWSqViw`yuyP>WfxiRRN26|6LNS!nr96
z%{<D;^BB7c>~?F+VDp+p(;ws&UGdSnKK_L#3ty_v_h84d10HA+2YawMq4pTp)C*Yf
zXW4lI8zmL^^bM*M*K3^p>s=+mIc$C_ZOK>3E@UtHD_79IBTGtY>JqJlo6hf04Y}JG
zb_Q0Z?9VLD6a)Me%!K)U^e?NLA27dQUeSZeA69g)X&zWkE?vI~w1UPQBWlBhnKF*f
z;pB=xrFq6;hcpz`AVhJs@OC+hSoPx^s`RPTPC<kt8lB#?c4@O9c9nFxE~jj$h6Mdo
zDOb}CqI6G`a&b*lDW*JnY9E1VVl%o`FtL-0FHeLmZ|R)JEC%RB>M`kW<xRwoI<>(>
zhmWM<Q`6~7NmSz}oQm29To@&hS1~hpeb++%F*9Qf)%oq497Y==dZhC{)Sa`;c{8-l
zHW2zPz-PQ85jFNCRkq4o7@j0AruRGu%kI5>+LLjw?Q6>TBL*54`m#QYQ6Eu6`CnL_
zt#8F^+AC)nUHlH6&21IRC5{6q+1lz`3OvEb==BtNgG^Q%vd&S*1?0ycKhRUoY0X^Z
zC3V;7Vr!$IU@}P=G;SDgX^|#j0~3>RwM{+Ihz7(9CyOp?WH;32RuY(HUk;!9aBMs!
z-C};o9~)dL*r@Y1)0VY5^${Gr-@iA~O0fGM^|l{5^pld&{<x!!A^N}0nK2Z|0k$E_
zI5cR(4oL9>nTSmfyGaLE^B>`Sz|@ZWYTnWFQ07?b7-s(CWbh2s^6me2^8ag;<>2J_
ze+eVke<h48jQ^K}aq6FwH~%%to~Tc1|Dn1@WNC|2_H&@6Qj<<awX_`(E7KtiAVV?^
zWTWrm{YdF8^p}0v1cH@}lGanA)~?i@l>MJZS)31^J1P?X?>YaIaFjfq+)uxO!!psI
z6oOHGcM5GEtF*jqU&-6(t#45}Bho!mXpsh<Y>%ravlshSuv`>YC{gSIl+OJj>y{}o
z{>9g;HOK;vT`IXftS6{wVQev^wXJNAUXL>doO}2@GbzzQLZzA4`wfDfq?<;w$wNEq
z#x?|;P_Mr~Mv2UWxX63x8-#F<7!7bnZ=+S{y(cPu6F%6?c^6B%b_!t(9<(9v`<vDX
zBR1vql^xjEqjGFIi7oWwaXR)IlA*hi>TbSE?0l9lyP<$`1piNuj<=QT8v}Y{axh0x
z6z8JqcJ1x3lEwH~z7xHr-?TFm2LN=^VE^A)aG1x9jL++}gcvwskZ+qfkWSzTtaMZ_
zIQW$aFQ)u}mrpu`y=khohV;_;2!;8bnBQAjzqj&cx)pALANGVXZ1vBNhWT&z(DOtO
z_)|p`!m5&R8#c}v@g=wP^wg$G+@!HXtq@!^YuFnU4HaQ$=k(g>&4EwOP;cLplY8S+
z;waK+_M9Sh)2GlI-Ub@5MrWya)~g;u$SY=IoH1TLJKEY@u3-YDm7{6TZCc>k@&ne|
z33jYyLOYCM>sb-+d)DMu_f=#Qwz@xWpJ|%g$HD^?*$WydKMJgX{A>?a5yKYEVmrYN
zwqK^OfVK-RH;=TBDO6;Eb-53_Bhx$NP!-v+zJ8o>3>iQ(h>)FefV8U9#|BV$r5=?U
z>^qO3LEum3jM+0q2Eb~Ov3X$oXgh_CLW#7s$1HKfqwbHJ*g#jp$8um_We+eJkj7<_
zy$Nw#w?*?%{wQN>SD`;z&aU{6$Bm%5Log*|$Ho*o+``_%dJx`Jl6V1O!EKdk1c3|U
zr}mszCXj<uHO8eqKf6yQY}IbzI%Udo-5C(#&G3e-aq1Os(OjiUD*r-5+3b09ySHK7
zc-{2=I)1u7iQPpF_zUDf{YJO{8EN*cNguhxMwTkUpTu7$`%YO!Z1PXvGmX^py?xYK
z5RQVz<U`4j#D<tjSo;1RPqwJ{374u&NQq^w%mu@;T*<z9x~Yrx0nk7JvD1U>f&&i`
z8UKFL5}}u#XTRO~Mgo!uQ1Pzc85aZ26Rb|yXF!pfU8Lo81wq~0S`hW;c{XjOZV{xp
z)T~0#RIO8+ad>|`C#FH5PXp^$zGw|}X^JgMiycfc4oH7>^7TQa7{J}xc|ug8m?FlO
zYyWwCe?Rq#o1s24N9Q<_yTR?Igi@%(ANhRkvyvfFsGGiE|C!R9rt-hO|8mgT`dEw3
zTH3#DzZ)Me#9lTN2wnPn-*Fj+rZ%K(pvx7@GeR-b%Sk(9wIjCikk-JUIX>i5Vf}<b
z3zyrjLSAa>+sy8BUH<@D^kb&j1rvRh$!(73;LS}WUMp{wGxL7v9N!bR4a^e-l+O^k
zvm&e(Lawjs+Z!}pta_h6&|*yZRX<tv(cmyO;xz?oJRB^Fxgf|`<l&>AMze}Rsr}5S
z@jJ>%t#;TeK^VLTV47OiR~nS{htYx}#Ubg1TrfbylQ0TWY8jP=M947el?v$Bxx)JN
zs++Uw64}{AX<rWoix^6BW|QYA_Y$HAL6*f&fn{LFo+(#?@rs>b{i`2k*F|LjUtQJY
zwsjznN?6RyQ&`6g1+O@Jc0Q(oLRqYoj}?6>@pC|N)S0lN?||;j#XM3kr7@jt9#1DN
z+53vj8YEraw^8#&lF|>Ej6k23G-s7zq2#DVk4-~#$E9r<wBIz8jnvphchTQKTa=<A
z0#3F<Ua3%ET~zH!O<ZF{pe<0x0F6qI$i>d7`#{#U0#=RW0jbPJmOc|;BX*7Q1Lv85
zH3blGvu?l@xkA-*?Y$A_h{vO_!`4`AdQP}iU%k*$r_X?e1@gDeWhV>tOQZF#0$70#
zUh6B!m8lHlUjRaup`xZhBv&dpa}*phZu}%C<&#|D>{2wy5iM1B*wa(#VFN-6vIe_(
z5?ol>RX<+q9=F<bpn_A~x^+JXXi#RebK~4=HSJbR`=XFil(qxX*;p%O%&2+Md6EHt
zkGt)Dc1YnCmg1*xz~w>$P99cAa}|-B@)e8wAi`S%J?*u}b&gtAfDq^BsC7dHX8`WQ
z!R)+yOlO}d41iGsj}?U;N~0v)7`2b^m?m7nr(|#yVO80r@+~Gm;MQX;fc>E0lKSv_
z<wi;k6_4{#1-&w6_c`6dx`|d30D1&~SGV0`)PgBy+LPzo7v+LoA`z$d5j9)e;nILE
z&ns5A0^LfEP}auxq`rYPaWRF+ctrvO$wtsV%Sk?db`8gZj7)b!j0(Xmep0{Ez&Ksj
zlbeA>SDi`~0xhh%a2s^(?+}8AxaN5zy<pvg7HT&@-_{erM=CHS`Yr1DG8OqUa;y-2
zZfI@qnn=S-u6VxdxLpr~A1;?53P8?SiDTgvwk9qdLe<8n@_#BJw&?!yxdbD>>wA^k
zdc#nVOEg#P3$tsnF7#<5$kJI>xi3_8ULk$9%fzSVVqY+3s9G#e^{OTxRArZxK}_$i
zMOj@Ib@Mse+L3mj8d>0kQyK$r^1B@W(1x9F(2U!C-aMWw3SPRNmQIOA2GKa@h6J~r
zJb#}S7CgBI1D&UzJ^;S0`gwa;-m2f7RGQFKtmNvL>9(fjj|*87_EI(<a=HGxeSQ*<
zn*0A4d8hVFfJN&zwr$&QY`bIIwr$(CZQHiZ4m&nG$?3Jv^X;2;vv2Ar)H7$*97EWA
zFM;5bS6T5F-?QH7BVnBZAOSb~V$JZ*w7oQ%{^=+(c%suyF#--1Gj<u(iNA6%BQf>e
z0gOx@XPzKF^$IvwLq#_e@i~_rtbamYn2gvEa*JpmRIu3~l0)Spzwhqj$OIuGkux?H
z!}_xigo|8R*AcbkUX0Bpb7)*G5};sA9ZhL@4cXWQJ_OlJxIm{LIpZKV>5f802efE3
z*R5%U{$z7*1lb2i7%>0G=FS*2BgmhEZ;Ltu1B_p<tS(0<dtC5yTb<)B#Rb!xqW((|
ze4=Ltm|VQBsgB4Kc1fp`G_F#hdXHE+b_{UowXuo>!ixRoF=WZT__-VV1f7q_)WkCk
zNwo0+sW=$mLxBR7X-5czZa^rl@3bCwEMAov;n-0;qszKCrra)tw`##Xn#3X&9|nJV
zm}2MTiinm>=HlB2bs56~9%b{Q>6Fm7=7k#zG03uupUmCTi<%TR2h~xiQl~Minz-%(
zo)3wvKLxD$Befa;GYL~=GW<AE$l0|Mz|hiA9Y;HuRg(PXoyHu3g7E%a@`6)vDtt!u
zmZa;0qw!Rvc^{)^CKsb*!A%K0NCHYE?Y9-uXP&J72T>O;j>S*IU~&aPxpQF6LOMd_
zaCuo_>Y~pVPo5;DQEM2QH}vy(8ihAoV=12^5R^~QL;@~?WI3_h%1g7SBu*|JEaZ%T
zL{MPnM1>o*r*i7YdH!u1jvA<FN`yFNV!;CP*6qB-X7p9}&_;ofw$cd!Up3Rb*d(!x
z4t5hv=YUlxol`+?Ba?mO>(rBneYo;U&=naR+$kGB&eiiG<>uYYbK9oW^`e(ChoEZR
z^flcW@&lx~I>;t4XrBtb;L`}2PV|PF0D-$4ThK&(T*&owH{xeLHU*4y+73~=rxR=t
zGNj&*A)r2!oZ`v@Vis)v3ixc#H;xpCw^d|iaPt~i)so-sEeS+M!gtkFT0!b%CQd?u
zzDslIy)Z5j0Pxl00-CRAKYjD^3hCOaDjTSCe|K+tidGS0S$hsXVwbtz)V7eZ<#Pr-
z5s<&u)YpFIQX@_<LrrspC;}<%rir8>5<s3_jBG=q5<d6YpB=YIR7i$gDc-!wg5Pw%
zHq5GdAN#I^aCip=G2QGYEFXcoW_mcPC-nb*JKf#)`}#h)>2_z#(L?aRHq_rrX_AAX
z>Q!#jRoC6dQwXXef$ud$+l(0&%C!mXf&si@DqYWJl>M0&!az}l78MSDb1qJ=a+k0T
z{Md|KPUKyRsK^BEqd1GpZ-YaN%P=(MfalwIBDviWiSs4TriqCvnFZdw%(cSC1I!#V
z63gTR0l=-;XTeLx7Ft_nG-mr3LR*d;z$&&o7?7uZD-hh!^lG_pM*~g*7cF`Hzx?+(
zcWH;;qjmGz!$EBp>$&acKxt0<K3cNQ7A=&HFYKzh%KXgOiB|=}4kMkad5(eKIl6az
z*8iA;b0e<{cw^thHBBbZl<&qmI`f$RZH>E1aRmMroB)7;vm@p;1O_9P8=|5Zl>y5A
zP==NM#)iq|j{Bh~uUed{(~g%X#0>5{K5*ZJ><OmY>n8}w3lay~K^A%HH+ib5r^`lK
zbrK-P9{!po(#8lg!43bw62m(+*BHbTwSUi1E^DNSPJlAGfn15VEV$r8jk!Q_5&-t4
z%kNn0#~^*+o1WgC6gZgo2h!|0Mfk6>^*<%*|ECgJS^r<zVqy93vc>v;DO>-Ub8dGa
z|L0S3R>=zDSHP?6```<A>eWZneZ^nqJ;<maah+()<OQlKmG6Q7lr0V%B5LUuIV)vl
zHXKETV#g1cSIZg9Q^!Hxzm4^tT#p;WSJN^X<uiT9<ldb*yT7YU`9BXuVhHItSU!>r
z8ciIL8ceye*W;s4ZVkZJN_SqD$pX-)pKbJZ)v9%F@0JPqOV$EpJV2~1BB4MD!icpA
z%pT<*kC%gb$5%-ZJP*QK##r+Ge8%_8R{2@h7<Q8guwbq@zGEbgA?T5Y>N=i-!LA#$
z1(>7V#LDMmBNC=ZP)&{rYHC*hd00H#_AMJ;w;#?jkBPm=_z0rWY@jV|dN-cuV04V=
z2N13l&grXZM<2Y}8EMxl(yn1V@>Q+Z)?l&kSfPX83ypKFn%I}EX4NFp8dn*r`LkPh
zuK4)ja>zq=N%Jzk+PiXqK*GuBzWaPW!~WQ`D&zMDkl}1jbdO(B+?>^4G|kvSz7lxX
zH}C4X(p_$7`PLpJ7a0+LzeItP+%x3zZ{NJu)z#fncBF(c3hej#kF&dKn|(}SB*t)Q
z+o4y#c5Pa#1rP!qruSAkd2|?_UOr!}H6YXVWqR&F+Aloa(yZ^oD{J<RmWJB``yab*
zSJhQkyN<iq2AKsMU9r_QzuZ;Zz<yh7cq`w!J^$XE!Q@92-Z%1N^4{wTPa~&*4nSK4
zrB&@zvXwX%<WcnnUneYwLh-OCQqwGk9k|`(@`;O!h`Rra{b9(3>!Bk)py|{&4f!tz
z^TfS4H^oeV6dY3uYo~{bV@Ai`uWN8nsjxNg=`7Gj5|2udsczyR?CXl|cF}hr^+nD_
zN157Y<A)zB@~BoxXI~ZeQs>%OShQ+~$Y6ov%QE~p3Ea9wZwR3AO~t<v#IuMJ<R|<w
zKMKJ_b{H3G$1gzLk^g8CIqMD(@&d#!AtPPNn6FnNW|#b)L=t>15XMQ2CqBR*Wr!?F
zX*vhOf=8g-37%rR61PSg26%PXg?)$;Wbid){Sv?zJ{iO{{s&Wp*tF!kW!T_ku2$kL
z^zBlw!&cM{u~!biE5>pM$b=yXeu+>JW5A^A?4*kl1kqcgi>Y0^WmG8$8w|@~deyHA
z8qVp#!)mPp!QLU21y4d1UGmuT?|nTby|l)E#s&uz3^X)#nVzZ=;?l(&gmQ`DILyO_
z4)Z~wJf`{|hT)^L(NLCc)T*Ypk6L-i;j={@CM>%8kCaTg#7;%mdxk~6tE&Ykt{DaL
zyNYdI5gB4EJn$lm29s*6i^sDS*Zg6q?z~GvE|<49a;XRS5J=>;%q?}6MINqoG`VsU
zyUfqSzYjzZkB)`uJa`;bQw~|+B}E83mAi0&s2RHr=VL%0GXU9qLOx5j)gQQX&^WPE
zgf%x*<>d@P{z(*PpsA~t${Q=O^KwLf?7+l)%q}`}8!BDqMQ?>iQnAE|&5$)|l%=^`
z83`pi4Lon`v#BXiE3%}6L!($7H-f7`L*)CN5DTljk^PU91Ew^YHmt4!v_Ys(d0fOW
zhrk4it(A!MHqu3T!+-@r@&VV0sh26N<owE;br1t5*hwp-x2^=e2jHf{188tZ5su!E
zQbHBjd>QebGpPg|NeN7L*$gGUY%KaIhWj!XPzgneJmatB6F_O9m_Iut$rX5_B;hsA
zb3_`C1J}>MQ<P_1MBikz5%G|X5pp6g^-yvMx_=qw3Rm7*T8BKB#ykl%!N2X!t7~=-
z$Q_MN>d5{jP|1_5c-I*+&5~}eck1N;pFt}u1AaUAA&KpX@fMaB$$H>St+Wk!{M@IY
zAw;2ZP{kL0W5s~RT=M;U`y<mAZAr9z2<9g*Ntw{pwwJu9jV-$KD_D^PvV{N!I%1yL
z`hX)2xXR{f@#U9?iiPUSD)f4mSVvBjd-92u!Vw313ZyfRdj0H_bfEB6wzUmRDeq;S
z+Fs7<`pYy&%OQbkRcaW!3i;C(I%{VQZNadCtymey7L~<agEFQIGV|{t|0ODej>8rH
z?hHsBB~#k+kPv!EqMqR9V7)}-bYXfJ4_>z`m#T|pR1<3}&lv7b;-MSdi;5Mg8u;oB
zpOj$n1~Fcjd(LxU7Y(Ks-hTz#pAd!$2D=2f;38yj9YcI3Qq>01myK%$Rv_pi1MD%D
zz0#sBff%lV53_+m=@Qz9$Wnizg2m6>rUx=1OR>$`w@2oUAJ_yXk=N7HL_?(Tjf@$+
zEMZT<Cp-+!f_=bLwu-F&*Fi7DDu{hn*Ch<;{#e1;CIPSni;Gg8WLG+t>pRY$i>sl>
zm{hhBX;|bUH$-aE-(VyMHw**PqJLIxXDy!A<m?MfE%8dg@GW(!Gbg7sG7`B<uUzB`
zyxiJBI8;8Ptl-m{{HmOS3F81qsP)#Ns8}V#5L)zM1Nrt2{H_W~6`hTs4A0&nW3Eut
zGd2$)ez!f>M-34QWgbp`)bOTgM#lW4lgeI0f1lHR0k&6*4)u?-YkeY%e#EoK8cv0X
zxGe9b%z4=)4|w$f8LGMG`yL0VNuPD070Yj4=En=|mm*NIRDab91Mh)j5kpVc^}h%A
zvJ>QHCiK>`*_eiWd^g%x(1^2YK?bxUU>0yX=5KEHGH_&AY*jT?f%1PRx2j?&`_J8&
z%FVup@HQOWH^(N}+Yf!v^0?wfYAL|y1xIpJ<roDdQF5aG7<kj^5vlAEWy}lbcO_W4
ze#D58r6M<6y!ntY`Z56~HU%!bqbF^T?~$^N^w&b<O;6|GbU9xe_4WHr^=FabJatrV
ziVQi6Pu$<ao6yHr=g)TGyHq%{$gfW?CSE{gN%N-q0=Ryz0@Mv0sRbR0R0|mRSI!BX
z!Z}6S)k)wzQC{x>$A7=!e^cixoYAQ}tzKA*I#ffD97wZtS54AENuB7ou7!&W8^JpQ
z*S>^wnAmJA?4f16wz<oTP~6i{z3mrc;0#`BMLoj>t;GgYfNs_gMq;cdJZ?}job_=+
z<M-<Re$hAxb?3D@y;k`HgV6C>di9gwzubh-jK638d`6rrO0UuWDMz?q5rFD&^|wO1
zm#=>f1bG*e2zVkfmGtQw;6xzVZAh7wG5aM?xP`(#lH2{eu!zUaw~uIB`!qYc#lfk#
zsNFSM>e2H1Vze9_dGt=?5Z;n)iZGdGVZxn9Ipwe?9u|2{Rof<x=%({>;MBt<{x>BP
z#L@k}Ki;HMMem;k!P{epy@2l@!Hf{-7aZOOL<J#`6;?86yT)<ciGUk)!s~u{jSy=+
zM)RML{2vgIbttU=&VK*NbpOeI%&hGHJ4j>sZzBcE|H(*EsyXTOPXpNds=hLNAnJ~-
z8v4ux8GoE{5JP5F)8<p)0u*S)E^bi}8cHwshWbSN6`!n$i@|Ow!RbN-PR88q<oVw8
zmim^0O!$+T|897a{JFZ0t}Gw<o=7+$&{hpEZTq+y-#_wZ)UEv|9xIY7GC05nk+$Bm
zW9u6;B|t|yR5BTetZj6vn&Vk_PyOv>Twkd;fRYs$n|^30Ak0v*tvvO0@)y5uB5sPA
zqa-M@6}Eow*IQiA>;<v%R$kYruL4>I<9C$A7CikxM&d>UnINADDG9lYUn#kc%7A`a
znYdWqNz?ToMS_1%7CT{%wP!iz=4juaI{H8i<a4E^eJhnmS~C@omPun+wc5ACil-;;
zn~5<!KkxMKdQwRouKB61n)}IqjFZ**P*(K)XPS(Yb(WLE=pARxtWPG|Hw20fDd!W7
zskt@YnhAZKA3a~|FtL5W#dOlDQ6IjMO0&M%_!GON?{|mrT+*9vDLxNvZx0E4Nj#M^
z?wdk#_~);h0)9ea2n1{gONg|{Oj8}R1x~W70lqf~^G}C-Dgui;e-zM4Dlz{U_{l7f
zh`;B|7e^1G1DeTK83fE$&Kkd7cyUCz<Vam8@+)A$V_TkT+wJN+QkF6t>*-hPiEf@D
z(bZJjf|Lo~%L?u+BIl|R48)_H+(%{G+?qmr2JVlu&>pBRL6jlO#cXlsjF`xDGIS#L
zem-$Vx*z%|Ok;t|F)#RoZb`B-iYVEzgfgWLt0V+u5UT#Eg0SEV9#i(~ry07d3!-Ea
zN8wl^?`g8LSi8+>Z1u#d!lt_HvyCQHZQYp(x0?J{o+ZUb7I$9k+mY69rg4l?%{8P=
z<q?>xd34Q`wLR6=W#fgw=Rv3-^JwN(GB1s61%W-@O4m#oiHH=foFdsnVg6K7`0}_M
zwARUyn)2YcJmLFt^__K>{ps$Tjhi13##wrcXCe;ia#Hi(p7yE>8dn+l&D=y(6ZTjI
zZ}iW7XbbXg8&u8f*m1GUsv7ws&3TeVMP?C4)Bah5i>r5o)&om;;QLS;cOZAlH`yf?
zBdGRP7^()_Qzu0Vq>|USPy&r<oP1GHlu!Vim7A-oa4Pt^R=loG5@0NBek1*54I-;0
zlZA%Ma<bNO1;-$CdenGmVc-RHDRV&roAC-S9GaNa3KPGwYsG?8&T7)9`X#Fu*PV{Y
z*M`oOsw&phmmY2$@4CH1yrMt!-o{li-d3A34IPs`i3IJ+PvmL3pLlCqo`?-02~Ry#
zV&)1Aox2K$S}@Y?j89-ij=12%y+@*QKZb0f>~#73m5M}+K4bj>XxJ(DLmF!ntPweI
zgI87ANEDxZM$pEMs>O8@46)--vGxhNSJ-RhEZ~ik5C!3IEhG?BgeI;ekXmGyKu;Nk
z*0v<5S@pNQ0;)gY1M?wBnLCC`Aq0X%lS8E1OULp8H`}yf0)Dy}mw#Nj4WBbn#6Y`K
zEe4C*W@^J~&uz(6>9`ml`g8*uxX?+WG!Gh@Fo0OkZrU5ToGqk-p(3crru#9f(ewi9
zw=GlN+q#;r$@+w$@*efIKS!Us00z&1tyHKPGTcH|QLbIeC5K{t&CUb!uO_Aym*~u1
zr4{tkb*W-HLk7*@GP8}BypBUSf&WW9;>QZ#yhvX~C@VpdCqp~+iUfhjK4!7~B)g|l
z5&%KDF<kqXJEgV|&@>teK?+(N-Nz?e#{a}@C>b6`07Z|tS|E(&vHxIoKE;K>#87cE
zwBoutDFpJ%uz<UU>hlW)4E&k&^&2{9u7Y;u{oyjAjFczO@SJ7g4<EiWFHjYG9QQ6c
z2U2C)4xa9#13QYbE0nIcfeT~xQId&;_N_J%m?ZekmeLIr%uvN`*OeZ!<npR6sKx!m
z-B(0CK<bReWF<Vtt@KbKy<@hv)dos7Ba5-Xx!?*h^SUDwQY+gju&nTbByVKY+x79~
zTK-ngKSRRZ3VqsXT}8F{4`BwM;j|k>aKhq=t)-;f9$vvNtgN?=;-AX1-vfc*|LSD(
z>?DSmZ(jo&w9cZ>G+fuAhs_o&TsSBY3p>|u0aJSI5u~GSlKTLjujJ)zt^^vdGu>dg
z0flz~P-ig+Wu{A@NNFBK2PFQi&S3q+9Ya<WAMRanIOVaPU6Y4~kg=V`;z+wu<EE-q
z%|Iwh!2DYD5EB8a9g9bS`mjYHprXVs0pecaK37wUw|2^I|J+p=6qv5iZIo}fOH_7E
z;rwYKuYo7k_vU=e&k`!afV*hy)+`P3P{;TH%6ywM7}~_|m`H>%f1wV_>Bhxhk4Z(t
zPGp2sf>W4^bmp=sJsZ0}LeS2{3vnJ$^ir6@ecNaMAcw!r$)-N^O8mzs%_VNSx45`)
zo_^b5a(ovX!ZSR^SZES;11Jd=0Liq^xDZS!sg{Ypw%wGsEp)+`0<M;n<vYQvb-t~p
zmbuqKNk1b7CXwNgMF!Y5T-^a(uZVCmmS@IN(h%BtbFNDLfq+b_G|SlrJent6BY<Zu
zQML9kO3lEB@ZoRB`F@+rNz{DW2AeJTUemVO5&cF6TP>vfyDINZ6_eh48mssvByoy;
zSJ~yPhBiMG-&x@WPP9<{tjsu!G%Y#G9FpdqFi~jN`qxr6%u!=p(0^Fbv_#Zu*81#S
zJ9)Ve%p86}@Bq%oqC^#L)MU#s`70*{RwF=TL_&!`^CN*Po}EMv2<FsfLL{6>*GjY-
zP~>4t>z;K@HN%1c6e%YCa#_D#Us<N1jMc4s<AO!$e~dPOGmnB<<asW#p-L(t>!(iz
zt<#zZus$>5R4eTbz)l^>5id@fhb1SLrO1<cwBH6v>v3s9@7p=V-3cnX_p{feftUaW
zE>3jLt!m^R!^mlGs*3M4hBjyh-JFiYc1|`EYdQ<?^v%LKEtX(R&CRoezM4;l8}3VE
z+I`hX<xp>+udYsszde|4+uvscRWJ@O*Zp@(UQw6U<>hs;yfTUC`r)rM6*3qaIRx;`
zygVyG@<5^0)CrI>ZCWW`A6O!)z#)J(k3F#1maCNEkv$3qV$}GFn(dMz*`X^DMx}Ru
zuYQ63LagKdJS@1$$g+&zAV}TCX)9(FTubp6j~~8USvNSW+Tdhck+d{K9`Yj;grwRA
z<qy)XpezWi?-T+V7_zzNjeDC-i8!&$vYCH}@vs&gu6PKf9#vcQWzTFe;<jAH3G>Dj
zudpQsIx*t33+XCEpq%hcOzC)#0WLy;ROe;t=4M~uWlH%QR<@K-mY7?Su11(~<@XnE
z0SX85&+jDmfRrwFjd%&jJ_2%TTt1djm5T1QQuhyTVc~!)D;wHf83#g8rpyD9HTCn(
zAy`PvAd1EZCMaseU9Pf#KoTi0Xcn1>q7(|D2c-~$zUH$;73>TNON7cxKP4i#9v4Lv
zN2AOY4J#PM2XF>%QW=N4vrgxxO)lAd7Vg5$8<Hg=D7Wd*-<@i|f~vK3cJJ%KcnV&a
z9%iEIHVE99fKZhxhZUYr8l9+0*;O<!-$saX{uE8JDNWqI26wV&9O1QjnltJ-gn+!b
z@!8;<GJ~?~Tga_uTj_>aE%=9Zy>sp&jJPQJkC#Is@z{ia7d3|A^k4wl)f5Dk#%TTi
zO`2qpXYj2jZj|!w+5Lg|_fy~^xKr-GGx2}2?*C+B4%Yw8#H{~~x3m7A@b(k!S*Ps@
z<i1Pl(>8<Dh|!sY*Ms2SvQ;@wO`E!_r$nDXNd+Nnk_$i<VyVaQITDLJW!`2?{y>&f
z+S*d&C&9MB=YM{_yS$$gMTyCgzZL!K-PMsh`#(IyM&%<vtb0lOyL+{MYqwuk+xySl
z4PL)U`-w`8Nn(s2ySbyc<YTn=10j3VLvb-aVEv=tbihAP{8|Zcd_Jz@LrDf6n8MwU
zX;~wO$)qN(k5um%CidwkUf<YflbB8;eJD}n{l8h>l{*E}g0@oVF@Os-eDAF}lWZn1
z#ee_G8<z~D^NhOP0sk`QtHESN2xNsPz__*lu|S;}3KF;BZQfBWJm5ZgIQx|q*6HC!
ziCCoKJ9(Hvg`?@|SJytjx_{w!t{Zp6Dg!ru%SQqoVI0Bw^;l-56Bsb4@@FcMJd(1B
z?uZWT7acX~%0J56s=_NB&)hI4{%VFcJT#IuV+~nD<MNyVYM)L+Cq!&8xG?Q!Cb@v|
zS^hP(fYfFxI-yLfUw7TDWX}twY^awJX#udN+hAFpceNd;0-FU^@oDX}!=bugecO`d
zT$sVASp`LET-inWRj9R|UoCr%Z99pLc(n2W&!htirt5VO5VhFufkmAy?tmlCN)6Wi
z{GA6CNhp}$CjU{mV?SjlvUTLZ8N_<sM-pB|D%%U$FIq^HgJMcBET5#=v(qEao`Ot`
z=xlp)aBYomeaFp#xV4KQ_wv+8C;ZQI0N_?Z8^az4>W8%pJdCPYH7@}tm=>CHXg)Yc
zQbg(T`?a;oxQZjXAGG<)Nk5)MVGu8R;Hw$1C!nfEV$hiirQ;4vIN>q3I&3AdGMt>!
z0i;!T)ReGTq);E$F7Aaxk@YQdLLf*iY9T`j$q6hJeGjkli|%2sYbRM%tjf!yLSe70
zw|?EUSVl$xlBB%>gr!oEcHDp9HM|XX!grkjk+}1@Q#!f9fSPAsbz~e9jj<RuxruVz
zxL1fmG>HY$f}=<Zg<>US^3J7#Hy)y%*~s|~Wz!B(1U^iilE9nO*5YJxn-Zjph_saa
z4b{WnMwAd%x_cCp(vz62a#(U^nChM-#rC}Wpi9r;t`=))$<NjaIhtwvLPt3Wwtnl-
z(2Cl@>a7qUAuwi}6V*X}w-uaF1E~uWiX$6bU;R|<%rGwuwaAj@{Iw#_0iYF5{%03;
zJWe9_a0g>(W&98upPW=Oi#I|x3oBfs6x0<fD$2X<2A>7AE&{QhlG{nvI+irY)-<Gu
zM9S(Z7%1MU=ZTQKU|~al-ylZ}|24w?0lc%nYu$gp=e-pP;xNRF<>wFX*O1xXqlL4s
zKlJo3Lr)ix$4Ds4T0@HUd7p&I%?wQ}AluL6j}OtUa(7(y^fejcgRiqva&hfIIOD(d
zjFT1<vka7>i1kNcEexdd!9POzjt(g(1V=NOa?|u3^I{eEC6R1<-i3PNEAqhWmKB%j
zsK&bEkpV}?c^H59oSU99=96V*l0#(h`Bw%`4;OlRF|;4B&d*w<(HVRnm-=z97?Ug|
zabq3xvNEjCI(Ke*(6~0V&eWJFGo}VVz-ekdkRig#wN|@~NwL8Fnmy85X%ta!KMyof
z2SH<7GB21~1SgbP22m(FfKUjI89?XsL$<kiJ|J~5AaAA-I2MGiuww@*78Syto|pys
z%Tk0bhR4>TCsl}Ck^}HzsHe_cqd%crhxSnhUDs5A27gOT4<?Xkc`j{ABI|;%R~?#B
z5=@_mr%;S{0>O~p>?Bdn7#FFwcze%xYOl*dQ`&G9g5A`jBS$+iphJ*j{}>aEC7}hN
zw*tYzp02E`vhn^?4;u4L6UD|?L6M}Byhs{kF4n)|>f1HcggNGzT81$~vHxw8=>>C;
z@HPg^&_&&^&o<VN|D$DOM^Gki%&c#{#c+dQ-<HMTgK>X9h>VjdyIS9^MIr#bH*r=4
zOv%t4wc_3W$e|Dh+%ea=*uMN_-Io7a9m(RHYtPhBi6cUGi$Uz!{Hy{MNiKz*JD->a
zYG#OG{nLQcXAM#bk=>kR6BiCqaA-h+!bBu$;;&O*4RfpuEl~vi=9PvG0q#F8M0F}&
zpe9L5@zw7~8;#|1C4<>0c^ag}-l_`@e}t+zyzk&8`AvgU9b|e?g1A8R!N(Bl5Z&yV
z*{^_E_iGxak$O7;`*bw`=e+8BL(pFRRw~r@i$n@!wRj27LCj95+p-xrgDnolm?Sg;
z&jaIL6p}z*sS<zHR^`(PJeQv<<q{Eg(P1oM07CTPb%NO~N9omq707&`$-*mwj0qdL
zffK%&WDU-jZ6?#eIpNWzB^XwaUe;AmvgEgEC$CBInV`~)2@DQyO%j$`XsYqVh9mEE
zHU3`Fm|=M^q+T%>q6QG25_q^%X{Ufxm7=d^4nR}2Qnj<by{(Ca`!{EbC|d%47Q76%
z3tPsMF40GQnSE;NePzubxGpBU*LXN3>?FZ#V;VtF?+Zz$BOgr&%?DMj@y=hD=IH0T
z^eu|)srs>^wu_89@^^5<jT2a!@uuZxI^G9+jNLCY*SxhrO=7(--a}v#aF~utx9zYw
z_y!3rRv;OLde<Sqg?PA}j=S9G64O`fcdR7}fwKd3T7N)%dIVh2hNUD}h2!qvmu7%3
z&s4r_B0(nLy1{SN*UX#_z@c5QTGM4ZfO^z?Nycs#Vn)>fhD7Lnq<95sD@Yh605(4g
zzGnngTUBTorfjS30!0O3hLL(oDQtvj%B;DLC057;w|}hH3=Icj*)nd~*$AUGjP7VQ
zrb<z$6>FRe_r%Y1+1_ffOgHCO_*hIluWGQ0UQts&wN;?>G>daB7*M3+lV_cVl^IW|
z<;ZP3&jdD!KkyCFZ|x?#*ZkXfe1{&dEDg{D4%awlzEHM$_cJuQv%`0-un77&*?KP9
zf|@z#y;&!6c<^2H7r5H`vBDN?Q9*Wj=3H02rTVa&^HE=+;gLI#R?m#IJ(-alTT}ao
zX~#9yn79VJ>?1o-PnwM~7K@3igMc#PeotG-9KMj3LnaPe!10yv%Dch92w@WLCOY-=
zgwXc=ci%<$_m%-|meF;a#Y6>U!h;5=T4+d|SG6NtR2C{>7pVYOA`KAD2<kljVCq!a
zPW|DuAJy$inB>Q>_8-K3&YOhoM9$?Gj5Qbv80CH77#+(xKqE*@@hJe?qIQuf+JyWI
zf}h<AawT1%HkDP0t418Y#jgEbN<E;7D`@YhU>u;3<6b-P1XNi-F3vE$8X*u!3~<(8
z$_R55=6lSh7q#IUFgRmn0Z#aUxEW~iRh_)rsuN3?c1Ew@S=3qJTtY3ax1uu<5Mn3i
z)ZeTYBRU%3{rbUE{{BduHOYnE;_V)eu(iDHvA31=ceEOWQ{#~z$A4QeX>yaPxjyvf
z@&)?~?CJL8HqmM9U6fX51+QkZLHA;^-O6Jhlq}M7q6t_O!xNXhoN)t1LT*7rnwM&@
zt-XeD*7`Y}M92ABA2`t5Ef*wOHGuy-ESAY$H*&Y!qLysXqC-yDbAYi@o14qp<cE>=
zD(ya;(c-}91bf9TT#mJTVk;WtPSra`1bV5}RM?&V9tw2wra$S|N<>hckyt!HKs*r)
z=qstMjxv%l8{$RKv@sr|N^RA(p3K)Z+dEe>mHB(s^RAf`20jb)h4Uz~VXpI;j4~2q
za<e<e5UP?8=RCihy{^bu0(rLvHM+rT#woMJ|9qa7rveJ4LNJD5*ZC`)MWrN$5~v(|
zc4x_&l}-r|_lx|(pR_PS+11fC$%4wO=tkTIF9FNN`#eMeT4h4fftNb{{%_@;#j6Ez
zMNXiwKwRJ7S$6Oku}U6OP@lO+Y<z94U?XW)ts&;?G}HatI>!ZyInxPWA>HRgxL;7v
zqu<Cj3hxAhk3;5wOv{*Dz4@yzkj4`|k<*&4E;7W@ZCB8xGKjTE07s6nS{N2sfcEEY
zP}LT!cT8;KLLUxIBh`@EAOA)qdCL9DLzL-?P8}yhd|joHJDk{fb%h!<g6XLemeM}G
z!~k$}l;zQFE78RryNo@WlCNZ)x}Sw_Q9oW`W=}rv%aFxrcdzoXuA8|_I`Q|77Z&T%
zoxP|jS}6){haz*FweZ;FCzm^|(ug-85vzR(Y;Z`y1Ccb;Ci{=)LH+Wg-J0=cV|@py
zIsKOQOCtLoCz5UMq)qoTZWhroB@>j1gZ2uNxD0x#ID1}poj`R79%%HjuP#526Qu<z
zFokU3=A?lQHZ<;~Zavhw0-y|3zVe~OFwY7FqVYtSR%!lO(<0PMUY94`O<yF`r!Vn2
z$~%EwWXg4sOHkH<nx~~~hdB?2uD2=1{hQINrE5KmUYl-A<*MmxlWvJa>)xXGsO!BX
zk%0_tfN_i`8d2Gd!(q^@Zq!`m^M&nA6QJ*`&8@N(g5A11vpeMos<jPo{-qW+-HpXT
zcDI_Ei0(SNI{8_Hcnokq?G))uOwvffev~U{?oV--G~jc7=OvYVM>YT*4#bRD3Yi5Y
z7uN^1S4ceUPVoersIikAoUivYI+AIl!K)7(Yl1n&@(~_$i$<xwHGZlK(Zeb)NAEpo
z3Pdz+zB|S$Os&p8+>4MP?yQ%r-QL0Qgd@BCn8TrV({}0@c*{*x{ruEUjUbg&UK~l9
zC)Z;=*J<H0R<EQ3X`Q5#Bs#yfnU{LOmdnqM#p33f@JWehi+NCN_LDL_n4QIdK$$Yw
z=+mQtiG~Z$SO49>{j>p+%?-l6xNL{*L}^7WHh>*Z{w1LI%kdEVPl1A2>VZlNq!h$L
zs+Dnr4g+ueK>mghQfF{L-(Qj4mMLaM;+w?_joR?N@G{PFfoupE+J1i?YE3v8JtNOP
zbGmLP(Iv~q`<trxah!EzD@SD0PA#3Ms>aDx*O_K)p3=nD9Dd(I;&mhvlt&GK($~@~
zgeVP^^p!Sz2Hi*-8^`h0FZd7Kv#ubUQ)jb%r=+gC8^A$5?##Ziq;qnO|FAV&*3Tb4
z2)1_w-?;%n@B`>+g$;fgi5$1&_ojV;_gj1qrJi7$+0zBwMcgsZvkE!3OP6WJv1V+#
zIb!Vwn?wD*{O>hrg9WT{y|oq8p}6s*(d^7h^Pu+iQ@>qP1QlbCF;bkoT>mbkJRPzV
zpn`uxyPPaZTSH+^u2~sJ-$4du_Kw1|iy*_(TAdXNv%b{n=y1$fj#jaBxSWCp%AC*=
zX4POSl@k*fOEfQ|I;z|NAt+&MfPi|7-@TEGu=ha4n4=s1+ySlgksK(oXBtQBr_J2&
z7r{k*b#Z27dSeSF<^h;#P9^Na&-_}^&`&hf6o0d@w%*f%2PG<)plj)g$QBKu@%?Bc
z#V{VKK&_Sf(L}uc_pj?!#JjWoHhqxQ|9T(zpWgqU_W@QW7PkMlmty^Ii398ZN#by=
zHSM%5j<I`5+tmb6A$R=<Je#4Z4=u+t|6S3fs6!nACKe+UKp{AtXFpN@MtHVk=fVM`
zlw{7FU76*ynG`90^x~W2JqNzeGDwd4Wd65vOBc$`|NdJzOMdgsxYc-nPe*6DDtmQw
z-JZG2p}DhxLn@6rZ4}VG`ENWEKAr7vfLcS_u_i`fJUaV9VpYH0y}GclTECBW1VMAg
zwYEXd9O;=vc6EA4@<Bi4-)$nWXq8FMyB4WSI<u;;-%L3DqLH;LH>(7KJ9>ogKSp95
z<{2?(+?A<&xuVlqz0qY=RjB1`Y%=BS_IN?!)!FF-0F)juqcgW|?}~qk@YOJw&KQQq
zw58kIf3y3#jloi{yj?ZvYA^S+E9-$R$BldSGU+;`!v3)nP^l5Pd6m_zt>0*<)%pnk
z+W8tn7%wwwFq!`FZLRvLSc`Epb`{`RUbip7Ywt@#$v%2|$=Ue!UH7-U@XN@qpjMd+
zIg6w9NWutJ+EC5p(>Lt*Gc%p<a{CSucFN_UoXJZVDMtw98Z0aipJJ6moqHmU^E23Y
z?Z)@nU$!Feb>!)K>(pTk`e&%k0oZm{YjomV)R~6=$`n0OXf)PFgl&GvnMSJE21Ks%
zMzSr*LSbHaAF-~&-tY@N@prQ1ogRi6CgSpD>-bo+Cp*MX>;N~q=44%bnDw?P-fbGr
z$-Sb1V{+4;BDi8uwgfw1PGZC2DhQD{uDg%>8B`P{@jiWP0FHVKji0-$!o41$DTs)_
ziqYj2mpIF3oK^yPVEXS75|XOP9PM`1qAwJ6jw2ZvP)kF7?+oxT8M4TQGn|Q=S-S*o
z43Z;%x5_z@rM}parV}I9R(riP&_k}-cN;gGZ9DZ#Z1QbvIfoZAS0~`>M94@Gs;jn&
z4>sa*_E=}jmsxa!MlF;o?Z&?!v8Yqxuycy6uPG#+D7NdX1qgP&sT^TUCA@65q}j{)
zq&}_;!j<06$hs_IqFZf%w7CP3BkYc_?*@J!J+N!GAOs4#A^B4IB01;D5_xHqAQd7p
z4U6FE&Uz$$^4N`Qe5Lw!i1q>NHC5OI*uF7dG;$3I6CEuTaw4kV6yDyve37uQ#^DiM
z25{}<-ERadwfJ-7*Z`fog_HO9RA=ARL2O*xI_X;r&#|r;C7P_&u2xwmLceu0s^41J
zMlle(9RAfOYqO&5#%*@jX%rD7#=gk>i4M73*?cd|ViiaC!D7ol2T_V?qcBKBCCkFV
zlcte1e|C#9)=0su{L6T#F_kI@LwIFpPXk8zee~^t)oicsSK~g8-`y?x0;@^3cn?%V
zoo%f>2*ao6y%U{fH&f&wIk+s0Q_o)jH!f=CjuzSlKRA5GK*c=Qk)+w7`(98(8!*si
zcdNJ;0=_YYIkqC3HBA}K@OaR=<;Hgy6^TM4@LI9Ph^qV`I{CYDWKQWMXc<4R$M@&P
zt3>#X69ECQSyvf6a{-h1NfRi)dYEh%%=P<zs8bXigR<~<-mJ>!v1ZYp_}`OK2nZ-e
z(d>u0kv*HhyI=k7L_LjIc1>UhJ8r`{T!3NbHWypx3Yp}K!DKa!wL)|Js;1km2ZWL+
z1qj3#SWq^ouMDS9@mY-b8cWgSmI51`<c^Y<Q)i<~P+^moQ0I`_mi+lUjRUE}2PvRj
zCGRoIaA1_WSm2Y53^;N+&G>no>>KsE2xe@2$fM}F<6A2-DLck1CIU7&4~FG;sYXwG
z_kH~A!oB$J*VBv!In4%dcnCpq8GIM2#>&o<>V5y8s4on7M9$9N;I+D$PLsSPZsXJx
zi%E+t*1R68z*s~S5lBbv7Y0v2oEkO8w}fmT=5()Jp_8_o4aSJd0zwf1XXv2{2?Xj9
zU3?doJ|!e$2PocUym>JgDxu=CbSNgfs_eMaV?imu%Q#U6A6J&Q!WVc4gH1aOf}<U-
z<uVz&>J?C73^wUEes&nZnxSy_7$&}B3iA%Vlgbaxrn%U>oJfq^<szm3iS+t8ri_mz
z`ONqIgx_r#Ca*P<#K}?4qVNC=OouL3p+c^kaW~`zO+vmaZ6Vb&iIPo2O&MMJDt(pc
z%L>A-3Qk$UR2>xA;nPSP;W!iwBZn)G+<f<535tCl%b^r7XZ)K?lS5(ci`6%Mdc^kr
zjS<i8%Dp2jmEyfknhqmGPIj2x^CExWAM5@;b$)mlF@|^(SZr>OQUHZaQpolTs48-k
z6IfzuNMSbRlKfkdxe3s_A_9enimiiFX%Yvu{Y9YS%UMhYNR1azW-BUyj1rrP3vuBv
zM<R0j9C({vX2>&7B@iuxw@0e-HBeyX$=S7cvV_^%utF$O=cb_o1qN`+U&$lLeugn^
z5ELx{s{#x^k-##kJI_o1xS38@4F@vWgI?K-ix9LDK@5=pIif%-fDp<`f#2!-7WFbu
zIZxsJLPrA``HHLq3~5}LFVi1s*5n2goBLeH1*JA~#Kpp(Caa*}aL(_hqw1`oayx49
zgn?G#K(fbun-d7JH`_H&*cT;N@;okC9mma_ZL(CSZJ$>`SSFmCIkLv|pK7k8e=oPe
z?0~y4&i1~bw6F!1!x9yyKC?j+HU(-0KvV31-dI8XVwrEVGbx!k0*|<eIlI`oyV$7#
zZxTImrh%3Snq@RVF%!nO`&B}4{s?R|i^XZROwIcpU$j^Ytc`b#@{P(YOUiwupeK#I
z`(q~{Rv%yWs!%+=xq#9Uz^WF>3uBNVx>xWh6x5XPh$cEkA>AQNOSwQcG0q>QA0cfK
zDla@F3XbI_(J-vG-KF_y<&<4I3KyS?8QZ^A+H9ebO~>ALM4F|gINT;h4kK5<+LfXr
zWq3AG-{(22=hyE*#SRZaWFsnsmiHrhg`z~}{7OQR*?f6H%$eR2I6ZCKOTujvZs5Lp
zr=WVR<OkgnzvHQv6DRyIB=0S6j^e<BZB{>CBxx~-ZJg?mwzkYFsnqY;Z58(=oNt*I
zrrEM;4lNrYPlltiVIqhbqTT}KV<%2$b?9FB^vIS>#SjE|#zy8PZiMCdVB#z4sAFr<
z{%tv8oI;@4uN!k@d~ME;l-YK&r*7-YWU2##bd&jO%Mna#8=H@8x{tdOE)x_}>|VuG
z5bDy@1(ijChlhUlXlFS^5nO_`j4b%W%GqY3Ky_1nBr37it;eCZ2``Ap0-eThIh21T
z{7{4aSwPW8p;<)ps0GdvANE&yLxHs=uY~gw4A?hiR=gk9WK}xP_R?jwBbI{47U-_g
znJ%G)OV7(Vu`pqeZTbr2(s@Hk?G+jN(5@^QTQ4aL3!ME;H1ygfHHO%i-vv)EnZtlM
z3n7k=;;Xhxd+RbhI_~bU8+k!}t=>#mR7v8>GGdfZx(anj-nT&ICu#|TC)vrr6HWg!
zaC^uCXsD?$&xsrUg(515GxtjsrQA7Rj!U=3BWvWFeko{LabDpbI=z^?GCf2#sIy{4
z`yS44T4*EX#gu$CV`7H6#ga>|P$0XnRMao-wU8j(vi#Ryl_gcYJ6h<WwNO`~UMf_1
zB8K#{?EWQG<d>E0CB{ETXWQ-coS76o6F=})TJ|<wbf>i&T+r+S^0HroW1kZ88+(~b
zz2c0li;i{#<22E_D_6dw9n+CBxqqZs<W<e!%3>7?^&dx|Qty{D6{snSsbCY0jpk()
zsng|w<8!bMSdylOR7Q$3l0(yf#X}ZnEQbZKQi|X<LJ5qX&TQL%VWA7WHsxzr5aeS&
zDI9W?uWZXHT!Me4OUdEiPt*9le1SX-`w4EQKsMYRH3%TEK2**8DuMX=GXg6eC^=gu
zdmQ#@_142UOgo`ak+)>tS2k~2ljgG7d3X}`j7~S$HinEE>M<3uK(PEKF#lT?_d!+e
zk*$aW$Yk_e;pkA3>+S2?B`V9Bz&yHz$Uk6fmR?M?il};yQ>e^s(AbWssl)NsoY!>i
zboDGfZQg;3<Gb{nkTxr8%N^fbuB)Ql8rooP$@I#R@}HLc&O2dL>}?REdEg_z@nI61
zr2>*~#@M|-$HWRi-fhp-ey&^Km3;R?{!xn4ZzjBroh)SgX{VY#EXppoO>_K^PGE4J
zcH!|*n<F9TU^l>NdMz+RuJRVOU}b5^?YaBY)BRKu48nWWj&VZ+3Yu$5lpVLnSK&zT
z5pet#O?ozVY90F_o6r$?&<MCF*QYe4dVb>hRloYADmDQF(l~=4{f7-|eTGvJV~Gut
zocUucm>B2iwM|3F+OMPY4cq@4JXd9Z=)b$o|AO}bF0TLWHvbLYv;CjI`__NpeU2oG
z?`?er$1?H-vzR0G%WO9Q_YmHD%-XsaaVZ3JQF68lmsRjrv44jCy}->R4Ga~It{Wb%
zUxKh;Ql{&}@#IK9ARqR0x&PbTPviZ{?0H-IyuayN!q32;Pv7>u?$PJ@#aS40u3r6=
zcrYn|+;C#<-z2b4KmP|(+(Cb;R7N#|XRe*LeoIB&v%S39UZA`;P|z{ddxo9_#uH8K
z>aXF6uGfXrtY2Zb7|OkZ_$h(D{?`Y~XNKyyj5d!e?VTajRsI`td<^afxl-s8)AmG0
zosNg*sNaQ~m@+#4blY~B#WsuDzN@LO>E{<|ciro!7k&t@s^U2xnzq~X1oPUSspnvm
z)$~P`f$K1Wt8&9@eobtV?vK|uA`A^l{C!(2R10Ij54i-$qdT!Dch~!)8<b)QFS6y9
zKGjR9tfC1@!bZyuW^xOdmE?5jdJCM~UR~%dx^A=}PMDy4k*RKMe|kr!9d})?-=}5-
ze>^U^XHMC%-%KjNr^c=t$E=gFXvMoCM{=B0BZ^B}KZaXT0Ex|~NS!z1F8&|PX3G&)
z^O*R+`V3l`{LoOn9b_BbMq3>-m*eYGK1{5i>P9Ww2}8H`ofg|i0%*k1uVyXz%pu8D
z-EC|F5w$tr(m`?f1KHa;{$()>Nr#H->8or9rz0|{N@GJJyLr5+N4S;^olp`2`?YM#
z&Q@K*_yLQNMOXhiE+R%L@0JkOw5`dT!HokXxQZtoT{*cJ-pKbcnMm4BYV|&|LLn(k
zFo7(+_tH3pV0x2w6M_5hGd$uaRAdRO*A*!67|bf7&Ld|j0u=VPkU$y50q`bikMw~)
zo3`XQ@q{b<R~IbUFg-8K11-L^{x`W_6Lm$Oy5ybRr8riQtdF6hgR+WPva12ATXTIq
z>m^WUKRzr7spqg54cxI$UIjUwxZtWm!#L5zqydzAsw5<wBX%f+M0eH#A_TA6IL6G&
z_p&eNLeLl(@)&_dj*whps1JGpgo%y5b%C)V=C8}Md+BEQil*xbGQ&r~RG~J=Y~iKG
z4T)2toe8QjQ{16Y@Hq}AH~JI~=9>&tbVu(Xh})gK;w*f!85jnN4x0<=-jTkBaG$Fv
zvo#B&JUAT)gcOSQ+lQWxOBgFe&be^i!lT^vG{yngHMds}^%)!35{?$3mGwEt7R~~n
zau%pAPa4+al<JMs=h2P<5@r`m9Wvg?@hpBqL~Jn>ggr&qv{j5cSE3BNbXRtR6yF(<
zg?*p_R`!d5hlfn@z05Hvzvyv_EqD42J(%v@)p0%?W}G|K^i=dE-`y3+SjwIYk@@tL
z)}Fd5l5)_-u&k`0wXnNW4E)}SX#p31{eI0kQygbngFN{Y_a-l;N4{t;Q`ewi>iFyJ
z?pxbMUk;KI*Vz%tQY@SZAy(-Gc^uY>O^(^~Bgg$z_fMmwd65^%_aNW7J^f-S?8jgf
zI8*`+QDHnq&q*){V_jqCF36v-wpeo<LFjmj7H?->H1xsb-Huvb(Yde~zSWuD3!78?
z(6kNAyi<)59kQv@`@)^uO$O&ZTr#35lM1y>%8NdOHrY?{!h$NuKqYhKnesxM?!J7v
zF8-zLR@>a|J$i5nD!I!!sK6}E>6;QhX$ezgI6ELv5l3jzXi5CMW=*Lj%Xop=sW4Ws
zU4zw)@FuZ&iTp*Mq}d!ootzW?pw#2dm3TT}{8hJ#Q#f68Q#W_f$V9n5k-=-l^75$x
z`A$MPtPKp{Ug-Yg@v<ud-T0-5{<VDAS1A{IDK=)Y&Q(_D7|4oRvVY&#sm{vIAkC3k
z3Rx(T{0EFBG`8l(YxnAuTw=BGG!B3&74nygZqIv|n{vkw84akMzccwU@%}C?9r+q1
zv?{ct=GdjBoQsL4Ge%GXaSQ8X#|!ej(dHH&+-;`+Zlqpv4lwk`H`j3#c$W{>`<7@t
z%wk~ZpH9}!dhCRzCkmK3sEM-<2Dsn@`2>6!0o}C$;RJ3S3DohJTVab<!IHK0hF5eS
zcMbv<-pO&S_)&X#GXR=WjSl<r0z=i6mA;LuX2!#p;0#Sk-$}AE#OH&;%QL|8-eOZh
zlDy07G(r}>vMqpW!Ff9yT{32xm0+WL99<}}1oWvJpnM?_yZ=R+_L)V(xN}5YhLvSM
z@a1>xpj`5FzEw=r&lZKQwZl&-Nvdhi`Kg2!{K1urJ5b_hM0-=&cxXid4&aDGIb4cn
zShvwW!*MoqxIX*rY#Hb{LPSY!`j|Cc7Sezsh%0s%AWHjHg>EGhtNS+0Sxu1udX(cR
z<b2W2s8#3t*@ED5n+8^`8EZ&Z#+|_s#vPOrXQ3^)alM@!M(hLrHjgtl3kwhW8n<Ox
zs5sWwY1pawO)ZY-!=&}5gZ!hgJyJ>Cm=JoDdnqpZH;sQ+gWbT}HyHj)Sy|1ubch_T
z{JGUSQSN%hh)Ex0u-OCd&PLkr&?H=aiHs?l!NCoay=bsuB!b_}?z^G+ZJ<YEc}qf!
znOj#2ti(uH>RK8#%N?^sO5UfrC4fQ~VD`ZAt377M_DF`I*5`clUO`PzKX}V+gGSMy
z+HohQl)Tz)>g*fnaq!_cF$7Gx0|`EIz0WiCk_{HGd(;X?*cCSyE+)Smat>apv7vTb
zaHO(C;<^QM&G)t<%Mm!vI13Lqi}eE>ehTpkw-iW@J?f*x-ff(5`H!wgsad!ed}hI9
z?AmZeb{57EmBCv4)pYi1<qjc?JGM$itD}CGLhnRDpJAa_zG#xtPCk((v?OwTc;1mf
zFp0Uy-A{RtDU#T7=+C3iLBP4xT@DiPhXe{8(qKmi_Bngr6&5^fj-C4e-DzE+;nqdD
zcewAD3bLb{9V20!Z8-<w)BE5+&5w#<BUI{FI@fstUeqxD7A8>OWx91mRdO&6W&`G4
zcRiEjEa?lsp4V0mKg&#;V+sN(n$OqA_w54NfbOEsCB8Qjtwm|j_B?30bvq|O{5yPf
zJF<E1d)7N$p4P7f-lO7GfGkBJZ_@_0CGO*vr(8Aapfz){aowYV#w%g`Fega7@sAg&
zucdWlv;qzUmm}@^=RVy$F@v;{kjFBp?{H<dHfd@!97;R8KD9+FZd|dXMOyspDn)&D
z9WX%w-c*z*I6_cwvtc&1>=NqaMlgt}*@oX}ntAG`-kez!7>goFm_pHarMH$r{Bd9%
z&5}dM^cKYV3wSd%D_V{#zVHwfuuJ;KcI2M;GI!q|hW8zdiuZc`UCf#c@x&2T#v%Yq
z&c6aS)LkAYR!OVTi2ft#t+(WsmxH}jEn%;3WcIkWlr03DwdZCenG*{|5NpYJbtq8z
znzIc#4+UfSW=a)-oo~C+XNj^+Idj!|jkTGW73@bdij9S;SC+wt!{)NJWL~lFiAK<r
z&T}T7Bp1v?D@-=-`&5;aG4{N4c;{(HyZ3Z!5iJnsWFQ!U`S)<T!Gy6^4NpA@-T2_8
z9$VcbJIZh;6a^a*sk6*3@>vT9R8=KuqYq@Eep^=1cF~VR8rvJZGmz{zo6xK#yRdLb
zpp(x7=3md2wr4b+>NYF|$s@pJuYX0G9ZahW^T{@rWVbow|Hs%lY>5JFTQ+Um_DS11
zY1_7K+qP}nwr$(CvrfG+URC3EZYw?^){fX~&IEvOKd?6;Vm0}s1#0IH+mvKHXDKEQ
zZsn+NBJILIcf>hSq_mzyXOgr0oirJrjIFsK8HUao<b=(PZXB}Tiatg&v`8Nenx37b
z=Ono5?7Q*6G#~;?jR3Aas<t54D*3nbQ93{T`0U3#J|a;l-kBw544b0}idflYXqANK
z5fH(~rr-EzeRxibvZs~42fMz26B^Zp{}I0bCshB>;vqXT`~QY-mj5hbv;0>@>}mDs
z|Eq`Xd89l+qbH4F2>ksE*P!B(lt3z6k_=q!pzlxU4*@~}Kr&px9iVHx%fQ3arw3q{
zs&JrG++xv81jeK5>ia!8J5&<2_E7rCwoYf&py{PU|CQwQOXB(P?NOglx-x#y`Reag
zw?n%m83mFBQX{$Y8LXV0a_Jj@z>Y3I8ZL+~Q?(eZTr=@mM02!wyCa$nfVY4!Q${@H
zSbpkm<gKIDtFd1z`Jj?x;xDQ_s%UEE^|258PDvZfAdxwEzzX5e$@YUS1Qo*Br{-#K
z98{C^S0yGk6sjju(>{jofuJ-8Xc0Q-@1K$Ty+<KpeOlw5>17t|N-D|tCU@n879s`?
zBgs^e{8P7;;_<{bf?~5-NfX6QIGoA~zWL+P=UtI9ZcTA5hTIUh?Q+!6Q3A^69DFH$
zz(^w4G8@#Sf(=5yldM*85deKD-YVT5;?81I|BbLhSHMShXV3l9w#S&*RVERh>U!t=
z4--X5I1P}R{J--!crFFrW^~~BUvpgR&=js#E8|=Md-cSsS>?dp&%P*m3S?m@!Y#_t
zzvs(|w~Oh8-;fDlaZ2Flr6w>V@a98J4vzHHK&MYD&8(~DmjIPkouxbE`7|gBY&dvY
zKMoO*g&4Yfc33Y#zhaaX4G~`SWD0`nd#2`qb3V&BLJ7Y)ak4xJPjY*61WRbB=)_iT
zWrHS$)iRQBPf>1q;siyFW5lf44@v$sS9=kWwOFhG6P6k}j}3<vz^h$V&t6#jt8P5g
z34`O^G4bnousFa(@uj}l*~@O<5HoO9ATb-fCr!Crd#=9T_cuqpu<2Ee;>>oM6W0RV
zK72ya=<V4&$H!FLC$K@!biG|2#La6F9W#^JP`-27N}5HGufP{~b)q$l^+J{PC&fXW
z^`>WvtZs5Szt`6+M&0^L?W{d?LsKl&1_>vQH{92F?AN?A1bG-HUzGnii(lTZRl*<2
zwC^5h@4wh+?vDQs#K^YSYwCyIc;Vk(5|1S=Ux;uUw<EG}k|_hA>F2yU-ee+TuNl)d
zvf}To<GapmhX4*KmAl$XtJi|E32k7V+)P|A46N&MFw}@mR+)xSZ=F?1G{MdJ<;b6x
zI7LshQF`hZ<Yz5i+<9%Z2o%^03edp0c#(YR_qlMXA>lQ!XL$c^MRMs2WVGwiPK3D?
z{3#|TC{sM)GvdOc0p^IS_ZoGuie~RYMt{x)%@die2ADurkwWhU#?6k6-8yLs&o#t>
z%ocy0AkWnd!BL1H{EB?b;5w#_vk#or@+nR}szHWW_2qkh9i>litrBTdL0AAz{6vn-
zaL*Cg^})aKnbDa;Omk<<O_qt2f0+|WhJhMqKi-y#u`NAi@Lj-QV-T3kIrjwtx|>f1
zMgkt=P^?Zq%6LZDdgi5p5E#C>jg1GLKyW>nhctW$O1-o4bW4vz+i9J*^FP)Q))?b^
z%Rr+*8laNQ;6gnf#2ezQyIaQGxv&DWc7l|>N8I5@y79D6XSDwT5)Zq@$Wb2iS)L0n
z|1rs@fh`<Y7HL%E35=2I;K_I$%HlPqz{sC`rWenPw+i?7Uccz?Yu-`B*v3opLFPYo
zu-q7Z7$-)?1!FPvjJclhJJCuM)_X1opoBU2bD7nhsTCaP`u>!5+2~u4)$Sk?$iq&N
zI0nH@F>-t0<O6?zZXa3>_<GcY%<u#Gnb}b+7I`4T*MM_SpTREY$8QTJ?CD~{nMWY9
z!o+KY9Ds-v02{A5ho0cOGuC6r!bE5jHZF~xX3twcWixAPMOq3YJywxK3t_Yh;c?+?
z)>zJmaYT{g9R|v+K;oWBjZf0u|H$o08jk(J6AUzlj|{x5(?)wiXGZ|m1_uKT8rRM0
z!w_3}pusos?2JXKjA@-H^Dx*_qbDvdFn>hCLcR0vPqg5oKoj7F4=}??KJB6)0gRvm
zBN`IcBBKzZ0V5(%+>;6k!Px0Lp_ugNF2muJHhx=$zQj+bNcClGBuWK?{5g|?nLl|^
zAiQ&%!<L7QQGn++I1maw1fBY)(SfHkgzu{F>8q?}Bvw1_;Y@jJRTDI*BNW%v)sRos
z+ft%#{~C)X$nbwG8sp2KS3?-s+NmT)S<E+o<|ghUmemI51#pKY-Tk!_4Y9-dnDLy?
z0i}qi;n~8ohbBAxNMcito{!A|aB8!25IyUNMZlGT4k1NRpxq9Z(f)NeWGOgnQNyK7
zfNHR$f-8^`UY|HdEU-F!Su3l`3>3H3sY!u2w0Tpho@s?Yklc|P1e3^RTWT}E4qoyu
zd?_hNThifU#@fRsHAD4Sx{tOV##MuXI${69mD#q_neG;o%(8wmVzmoVJ^NFKFJyV7
zW?l0G!&4dlTw1)bsUOE4UmwwAq$u`qO%nRyt=yq($Ws`+re+S>L|cirZY%D}O+4BV
zXV0z<EikZ1Gk!P|Ii=qRvG~3>q;G=(i>>OV-Uo~PMQr+l)7g;=++wI1yyTpoJWaC?
zhb=&|G10o5A_rctRjP;5n=*lvj;>5E#474I&Ky~euG$;NJ+-vSO<dc8%*set)Z+<D
zJhT8~D8|tQ>*!h0q?$ZztQFc{@qMEf0B<5(Egx=L?2v*hfAev;70Y3+a-XNw;Stqg
zzR{=Ea`6Ft(lG$iZsRl+{cu^6*E>4I5e3#@0Y7<AFv9BDW%%sea656`w7WcMbLL7+
ze&z<Uzm?4g{2dAgaRClrSU!ccskQA|_EnQ%u8Sv*rZ4nOaJ4yPYT8)r0Q9$DV`5J&
zH`P58xR;hB(pbzz89lM1Bj8ML`eV3T1KP3uV@^<;^a%tvw+H=$UJuuCG$+M_n-~?L
z3`~XMPvUpI`Lavco)v7-WleAIKXTS3F$<KBV#n?%dNQL)B$a8{sjqYpe{2b;Un~B?
zVLm`%YvQ&?-!#Ybc!vHR*wv{=A}AkIq%2QVJ)y~MkL)=vFIF4S1$^K|lIyn?d3T<F
zPNYAEmL+GwGQEPf0QLl9(dbg9nJG*7cy>0NVq!_w1K^3`laLX0kd~pBK0sk~AV}iY
zur0)AG%5FfyhIuP&cCM1w9;?#h_x3!TL7~-*~>luvxXP%NpqTz=I)*$xGVMJtSG_5
zcfvTMg=Zdv&3GO8eolR$^V0TdRY1*;+_AA_2WSFPTA>t&QA16@#5qz1J<-95pi)XI
z{wVquyoo3Tme*)l8m|uF=k1}a1JXs0|KG=2y#fsZZ<SrCo^L%ju!cZ}o!<Qu1YWOa
za%izUmvOk@G1oAxaAKY`2kfx?lXS&bR4RQbJdbvrFI=A=*fH{tqyLPB|G%UC|8<Kj
z|Jl)I`L8<K!y4AMTdYVwH@f|{|875#A~A91Ie1rd`!T}QqVmjxIvObT1Z!>A;_9O4
z!{4~xgI_nMA~E?b^i3MORD!xjN!ZZGhbgAN-vUGvVnM#6xx**aM6IU2Sq$Hln7%03
z53iMtq%|E>GdkW<_mP#EOpge}l;q_IM;4APW_-E2-{3)goWh4{#y~1s$)=Ge>ssi8
zSiRoQ^3gzUB1~$ADfE<ONeNopximiNM!i{yuWcE{2@z@;Eb%`ti(C)2UF*jh8$BA_
zKmrC{2eoEKOLLh+>3yN&j519%O2Q(G4z1d&!n{gF<7~>ZF4Nl0J3Ch^Nm|?2AJ7iE
z@UGW31nz+WAgFJ8_9G2RP$tP<X4wf+boz(roB1}_ag1BbJd_*LWVR9u%7^`;@`#1v
z7Q)*nKkkj^UE1r3SWjmHs0z;7oADneC?rQ)L6d3r8O90Jm~8N}P$qjZ;ukh$9qo|n
zB8lu+@Bo|+*5q=0<c@~&4@|t}7&(Jtz?zu)QR?Ol(Tsnr@88<S@$o9@ocZ=RWk}f~
zHm3<g8idO2--B(T<AtahbgR&e)!AA-vEqGHQItVLI(SVZs8H?M2`Dw~tQO&l&MJ=I
zYgK=_H5p0EqpIEe{KP9_!xJ19ltj3KbJ0v03bRI8%WhT^YoC#9h@a7z)e~!)S)GB5
zgcjMGMe_JQ`-uvllI}@lv#%c-yqv&Wut^+&OR~sv0KsRkaj46xG(mYGz<VmY>ZVpN
z!I_c5ZcR<Zrpy&Hibbp9aF_-d(E>`Oq*`W@*0Go_`Q^GX#jc0n<`R4~QJ<%Q+imv!
zSBg-oI{m9EIPcKEHm_Fxc5AB|@hIl4LV$es;O3w1<)G^YoLpYR9r+E(fvi7cSiVim
z@^!z*EJ^bzxr=Lb|Gu+@KG4PVAF}G{q<K;|02W{CTa_8~vC!)aGJP*og(YFk(L^w!
zQ$0tIH~7%%k{~?8;rYS_iLDtTHQeA$T6lx#0hqo|#<nJfhuDEj?kZnG8C;K%F_aQ1
z&ax8cjdP>-X-ug*{!^^awDT*4q5rk^nLa9*-7ZDAg@E&jRFh9(m(3E<%#nLR_l6BK
z5vbrab@1=$^fPFx`Ox`u+zv?<TU|=dU2Vqfj)f#aKEGN~<iD88V9JcDW95IiO3W|&
zU;y52YtIBEm(Nm+m?%*hDQ=)xVlBo8P;!KOG;XtYvqx{O7;n8C@4U^g1a7J^;j{qo
zf}wa<_z%gN<wzkUk43j(Lr@E=qu$xJFsr4;lZ@L)<W%*RH5G%ZcAgb2VU3tBt<8Zj
zbnYk^XmxLt*#$6%d-D(a)NZm)jYU~Z!cDYj>eN(N(P29cg<d3Q(XbvsfTNfJ7OLwI
zHlHRvhHETQcy?JY)HEF*g@E+rEq+k2M<fQ9tPa`!Z#ArbPl(&GSZaWCsiK2iM_$4#
z!vr}Jb9E|j8v|FqC2JE3GaX@NtBtBI8AuwZ=Q87gXNBkv*I(|8-rN+Z-!}l#(#!6#
zhnoSnWvLw~tkGPwBJ5eHDEu*qcQO;+rBSu+p6u3_ob6678Qrzt-p_>MA5{1dIxdCj
z)JxGZO^ov26B&?fEUalyfP&cseH!B`trUhaveNDit1?rNIK&i5%9j}c5RCXqm0T(T
z;2o6v*oWV0NT*j{!?qG=9%3BGbX~vA*ybPlA&=_87;;4EBBvS)8|%gVzvh^KJqwnE
zk}B!&j*pPPS;=PE#u)l8%2H}$_EBNoANLyx&IH~_>u(r#WyoE~_QUh0G>o?E38+kD
z+F|T7O_5+O3QZuyjkbk{ei1gh&l2h-XXp;!6v8CwVH9y3lLLfx>;>FV>L(vKJG+c(
zk@Ay&&{#4JtJfcC656MpzyU2QZU6N=jW*eQoJt}#jCkWL!@d@j$Gu?Z6nUeH$&pH)
zo<t@8MMaY3#6EZ{5e?D3^t5Yt6J_KwYI?n5tvW9lYz~3}xZ+qA2Sg=X;@&^<rUVK4
zCH(%fZ}T~niC034O&VGN?fz?e{KO&ms}#%Jre8~^96(8?Eh5#_^Yd1&P4yE24>mZE
zBjx!Mt(kH3iD>zDR*fWjoepiyepNgwi~zuklpDGOg<dIa2C87iMDiED5@~^7e{ZY`
z>@A=G!n3Nr#dIa)B=Af|N5$%s9l}1zbfmuAZ!G<0iTl9aZ~L*vxj}z?pICwXW@G*#
z20BK|HmCII&K;4kD3hgvoDQZwVM}Dl6^Snj#|ashek}Ojng75`!f@x}wrcCb#wsW3
z)>bk?JSR<$ksW|uS%skGq#Ky0a0FnEa&GukfmxSzZ7sp3)l3qaeK%yA;BAN1!5kRo
z{#p10p?45<O^}BKZ_{D=b3g%O9D~M}qZk=EG3Z(}voh5@(wn!yl-s9S2#TAMN<ViN
z1ma7UU*$<|pex^WNn*ik`ylqCz09B7VrC<(!=Hgf-_D8@2vHaEt`SwZ!~w5;zD}?}
zLo02xrAoR4wrAvr$<E1=h}1prbBInZdU*Nb<^`C#1unqXfYjJWwigPAav=+@oT49i
z7;qsc1$g*xvpgH3Or7qTJ1S>1F?R+0kaA#QP-Z0YNp%17o;h)Eba9@2BM|(b#F`Hh
zzEv;BGmmaqd*{^|zb#&PPPgNs9Jro+)PywAfWdP>9=C4<a!y6SJZt&MTD4W1hZ{sR
zz{g&Kc=3cWe4a5M;Z;wp6&mNXcxyv{h{4kyF#NpSDHmI{)Slbt-1=4S?XO~rh7g<R
z@Qt+(L4R4MJ3du?<6C~CUQUo0JA7;Q-M~}GypC@p{Ys9a?Ht1)EukAVHO&b30`MzC
zv*@eAZSX6OO+Z!kXdV^>8-Y*B^AJ;2>h!cKizKkz+059ZDYJp^t6$PHzCT#NXY+-R
z!FB&lZ#Uj6CcWZQ)(76I34#l<y>+JTh!)#VY<VXM7S!z1OOGiih1OS0l4nys?jToA
zk^9T1BPI=R_vf`}-(u&b3plPxdLWTI-^>C5Bwz#5tq3vG&If%7AOcJt{wjc}nwI7o
zPmv?FL>a<`)5nlf2TNPH6Dh#>Hd-5G**9j#Yl0SEoHm~e&_A6nJ!3FAM0&v2xi)&H
zHs78=P33-1MFv2!LRF$o6v8xUF$9ebQ=T9pMTwH#Wo=riIF?b+_su}`aqueqigf+X
z^J4`NiMrJOeLH7@kLMoLsaPTM5b8%H`Mk3H@6NM3M5k2$nj(g{iN|t1Is+ywY=y)3
zgCip+7>=Q=aZ{R*2LIKDv|req#H1blX;H3)Z{7+a<><@k*F@cSeeR5gfrvW^&L$q0
zfuo%a@tK0I%U$X0HCg(|%HjF#D0Dw?8m&U^Zx_PiaM75~u>YLcOZsG0WhO?P<wZce
z#=sNAad|wJ-$)($i{J$*ImiB@K3z;Mz@etw62h&^w3_2ik-4uVfrCWX*zP%dA@9ZA
z+CLQbvJn?yvo+{9CT&vJ+gZ6^{*a73cS5^?cg11gue0$o=1%KTn6d)c6`m!GOi{Ma
z>G;^A?CwEODmx#Lat-uj?>QVf2H<b|pDZ2|+^wUktY@BZkFkA={=>tTf7wjU4av6v
zeXDHm%^B(h{&u&={rfg>V`$*`jmfz@V)`YG;-w(4TEsl|d(cD?R$H4}kW(KwYPevd
z2EPgZRTDWRuoL~<%UiJq2-?48JqXRs6YmWhdY)Mudem|f<HL&s6jZRktlPlC-{0xt
zM4GC1kb{*)J^Iyln}bu+zNf6mr(YHSD)}&Vzh)aum=QFGzJ1>b`vJrnUlXBbinPjG
zl!%4R+IO%LEQpwEm+>z#f!!#Xu-_gvk}S@LyP*=_QX{jW4OHxiL_eo^$OzP}KB@G6
zEOtrh$w_t9M?qz6<&JhDzxHw~$tE04jH>DfoGAVsknV9iu{(YUh$Qi?goC~<of^oF
z$FMN}Yo2-ff$go7I8g}&2G5L;!`val1f**)r?}KOM)$%jRY*q1jj1wB%9U!=@_{~k
zY(F{U0DtZnr0A<hV(mRkPR|C@-nTX^+STpGKjuY86xGF_zl)^yWDJAaL&b-h948}C
zADrIc?pMj7AdFl;O!6gn*X-Dz;NbZm7=;xw>F12%vhib?b_Yn3Sdoc~X2%t@cq$=m
z+{A_G5Ydal!>n{q%9N94oYFpd^H{Z6&r+15nV*1BJn6faEg1sv{ZEXAU$d^t$Q85v
z-^kfL1C|iBp2r(CE{gELGS_v&%&RQ9I|7q#fw%g3g!+&7#cVkgxa~8i6JzQCbo7S&
znwO^=#cwrRPT;QeihfG@(k9JN1>RV>i>^#5VayN$w4CCI^1_DZTVW^wxHW;WPEy^k
z_$utPR1c5~lk}PXsejnq2Bs)GT{?%kXs_+3*@72-Slo?pwW3R+2=hwDpAT5mWCQz4
zknY+aEZ(z#*tUgWOo2IIh`8n%nl$_$`&`r9J%&GJbCl>y!MSeVtPU<WWXYItxbt}W
z0U)EpTZj~=;N0CozWvVyd1L9;kV=ZZeVt!`zrN|xyLs9Eb5{Fbb^sGI{r?kJu>L1I
zfc3v(2Xt#(#%zwD{`AT+jOEG=TTHdb{YATrT@nXGm$~Z5L>V?gv?HxaZ6={2Ic}bN
zf&HTTjNvi8DJpudNkkLT3(c5JcYL4W*qy2+DUK?78~y24%Pl_IUavKk@+Ez#9nSbV
zKd_1^q(w8G-J$y0KRB6^G7z#aC?Y|>Y%Kbw?|dVt20E0W5>gk#u&?KqWPO}|Hc;EI
zo!v=s0o0iT8c8FhPGp{Bbg*|#`N~4!n;o;nnN|`h9-B&2`u$jhKl-$2tbDQvHMmDX
zOK=&njUNls2ctI;of0Or$7Mus$8+-SwN{-r;L{N+Q99{r5-l{RYC4<j&~=)2-cH<a
zA@d-bL1rEVjATky)G>0=XxMdMPsba$g7@ww`761y{5fxxE>HV))dAgzc`N~<UxZe&
z4Lf~;tG*IhV!I(NJ3ef^nE2DOU7d2&L3R!H(@CgH^QpgM)k{>ZV?Ps-Rgo3XakxW~
zI<D&7+9#jX)kT=;Lhy}-_M=2M`>dY&JY7{}93M_y?o#RBCu5_}+1c?ni8*O5K&z8Y
zir)Hsb*Xk*l~>So5ZH4$?7_9tBFAhjvq_1nfRVm&4FFEOY_UAk7PPG#zx8}nay^D+
zWY$ud;gknfH>%CFWg+lsp>63-BuYmL`q~6!)r<y}QQvSRvzp7Bz*ei<?R5`-nYi^<
zgpA<DW!#SIRXsgnPS|cQd1^bzs777PVfrGJD(+}_G;8Fb==yAuCPu+7&4F(7R+4j%
z;*#Y4VBcol>f&_n%|41?4<=PHy>PaO&t7T_5oo;$Yv|pW(9lJFm<Qqt5?h`!=^@?>
zCnTc|WjPhCojOu;s5ju;)v2qoxbyn?+=16&V!u0`7N7{7zO=dQ;{XK)?U=(=Yl0CQ
zKhMD4w=a==47t_{7;4qux6B_>1LSOi0B#)brI8k^yvpJM43Z?3N$`h4ab^JD0@;GY
zCQ#&1xG$l{S<cABflBG8EM5E9M~PL=_=4E&QTq;DJb7x;POZ54=irlV#6Nn1=?)75
z1wD-!m2BZQV>x0=g_y7%2qTf#=xPj}#r#0}QR%I&p;DXduPi6CSdlobd?Jq<8KAuw
zmx^&Y#q46eAp5jkH*heF&u74i0^=(%7Np@~R%$};GVs9aP$7YWJ7w=$A>)J=3hA^*
zr^Uq&!0#i@LsD#Zp<U9V7ZTo{XY>fS(1>(**=Nti3&eppPu!(TTX86My0Rd^_O9+O
zH8~`7)9It21fULVQznMrw+pLkRmQZZLOkF1yXIQGXxC^hgd5p38peY@<~d{aGOHeE
zOmyk*+u@|GeW>;7OtYyyLQ?qHH)G)7c&JIZIRHu?E~1^FWH3Dr2msqe8lPCmT3FAC
z5J6r+N2le7#w=hE@GbRZ6yU%#;K7LG;CzcSICj<kRAq~IFB1m4>!uqfsF|AWl2sKw
zf>2xy>P^%rZpEdtoS%B+nU=~!mso|#GBU`V_ymQ-SUfzS85(yGmbKx{Ge_e9@dZ64
z1DeB_T}@GY<srnhpq@3D9i=B6U583ky=?k|Ld=2-5R|5qGmGDh3y%tLAh5Y>LV)7W
zSQilp4O1>_g-?P~U#-xE1cummFLPqs{$AisTrUkdPuIIK(6b-YUZ;tCwa@%zv@CJH
zj?+R~(nvo`8w6l_K)CaQxX#5|4QtU2=iS8#*p=xP+GRvI1wGF!6ggB9vRY3O0hAIV
zGG?FVBR5|;lCbg^TK*3Psz}86z<c@x)8W-JR8-FvGP1CmikH<#J|B7KG}OSR#D0Al
zzp~Mc)9dS{g|F^m)V+<|F-kwkDKh`0p69te?_P=DR$TNXDWRcePOH6oP-L5yJwQ6C
z=#&%fkJA@8vokGNI0;ROeK<S)x)K9*@8s+`S*U)+9UMlrc#X4Maf1|rqo7Zk1-?Uu
zQ5G(R&5|{W&wUZkl4QPFO->1#KrxnPuz>bq_ciy-;>5FQlhQ~(fPY^r<F$&N5IQtk
zL91jmd(X+vQX!3cf0=_w&t{b6pRlljLH=)si<<*Rpm|9BbUi)%`VB4q%2B+T11K!n
z-bH_fe5J|Wt|<x!{KSZC5#KP_;?2!}YKLzl2lQr_0JJRk#Zilu;Wv&X3l;xz6@n3m
zyH!`^Exb|ZH6(w4O}<RTF3=O852-uj+Ac*A2>0nu03LGJ*6D*46*9I?)Gyy|0eOaZ
zuhUC)zk(3Kjp$CM?eu5>xqs^=x}H$KL+4Qi%!GC@VW%Y;2v7}fcL}oiv97LrQ2(HM
z*V->~j-!!rQCg1V>)|JG+%#A}O(b7O%vh^6thWqhyloLs^ONG#5OPKtXn6S<*uehY
zMd1+Dd46z2TG}4nLuueQc$_DPIM66##uPp|v9pl$i19q4-oSdx?<30sHB<xsd0J;y
zLa70l7@fK+e^w91tfu&kIg*RfD=mq$lH$ecB-rG6n7OB9yRzCmst#tAVfUnCHIBt=
zp5_#Cor@|f|0oJlhI0&vpail=5r0~DS1`<3ckMb|Z;Wgxbqj;BC#S?J)AbdmoiLaw
zcID6^e>jjqo%KQIY^C)m(~V+ICFRg)UCWLIp29HqD^9_pnk_9rBUVIjqiM=c0s9@L
z5&Zk^WED!SKJgT#ioBO1WKtag@jJwo@0Nc*C`t`zm`#e4Ps@@uqz-1Dz&lOMnh>pi
zfXIE)BFNihN=@VW)|_kFgMWdvABFL>g!P9K*qkegHJhAX0?PQKp*nc5aw@D6a8G7*
zR<KQtZPo9Y8(j@4vu>BNF1Qt!FUkpZ<!kwu5Cf9lFk_%%WXATTIZy-aI43slF-%CN
zo6RtuFN8ZLF&5~pj8p>HVbu9vz&%+4U@wl*0LHkue-0IGyq7I(rvHc3#e>$ocffFn
z%!-YiNPW2Nu1E||ntKj(GVf!?P`j(4#Mg4*HQF2?Nz5sQm~P|wpGH16M2>yw6zQ%I
ztI2!;n-1uOQT!Dzq7fNuvYpNrPYHe9MS7EEP>0J#38jo#X1_Hb!?+(C9YYkkfZ*$6
z6A34fI2gngKx!Dh)>($KyMqY%90BC-qk&jQPFL&3vMW2$DrwWD?Mu8$Bazzad#FWo
zWi6T9ba|LH^mFA<%0y}4LcliLB&j<xZEn#VXtfdZw0CYhJS?6LelS=Q&pwQq3;zn8
zL{R$C45XBA9m}J9QPk&&!kQ;82?`+2_;%EKUpaFsRNd$KHk_P;rt77NTT2yNO+CuM
zopBs4cYF)}yXHO@q#1VS20<m9zer&SxYyCV1KI~Z^d1GRamK>Q25k1gS*9DdukjIS
z6d9D+qgQ$ERV%~%=zuciG!61?(cslG+og%Jb6MyrlX`~L!@q!(nJ$%xUYl3gk;Cxm
z&L&lc@5!6`&)FhX#_d~%lYuE4)*a0yhd5UoQ$viRW;@i37DBT*VqkmWVLrasbHmFV
z>9J$Ar+ab&C$-;0Yg1_g%n>VNKoy8o;>IjYN!e6OWkf$#M+OHN)2a+kQ_@VzE~HOu
zl{XD>1f>*-c-s%;2759^+H|!y`7`CN|8C4}Dm%r3>CswJt7tQ3FZXLvtGQ1Z8}%%6
zV^GQ&5`4x;`bh4eS1|HV2m#%8zyXLn1SP-bstF%l0|=v%l$e0^l@VNX|A{D24fPt>
z?U=2CmnWvqKF`|Rvf1>Y$NVTvWU-7g2~CfGwy0=+CM-sj#vZH!xcc0(_j1t5#I~E{
zg<P}8p<M3rh{GAO75LMWZZD?5c<w51*=LT$ZLs*&QQ7aIH#)5c(fu7H7%HXU;pf<H
z7qBfBDA9VtP!k}29%+;<qHgl_r6PF(Pk#YisKwYKq46=jCEW%uxpZ;Vf<Psq8&k|I
z`E9+AKv$7;r`4#~(y4%tYf8&MO*G9Dk|QU9rE4n%q$^JvV7YGOG1qw%-0+uQpk?^t
zvW@5}0D12-To4~UQ?)kFTZsP<q1C_u*$vg9Z63`CGbK0_gD^Z+e4^baGvHf7>?&;q
zFf7A{1YQX=o{&!DDz|h{esPXNa5T{Gz!u<_y;_umnVMSR`*T0ldAU0m1gGqe5z!!U
zyRAP2=bp0UEGVB`a7EdfWV{0J5g#nRTKq8_=f3bUgwPj8cZRs+;*F6KJNf$Va7zS|
z;#UvxQem2&6O%ClF&zPqkY7Ix*E~G#ja98}CsxKlcPCrn(JgywJy0$2pb5b>%Bcf|
z$&&rG-4rRft;oS<Qd-$`BQ?TUR(jP3M)JEghM!Ga)Ou_VR57EgORXnBDBdlKwLdWd
zfj238D`jjfEqb0d%XF1dOS-gtPb8n#0W^Z2**6w={hvRHTqw0Kaxe87#7NJrC*3mR
zs6DIYSAZ~6>1gOsIOp%KWy%~X+@vmYh%%#hfB_7nyq7s%>&=>BO~anrLI*bx&>8L-
zT7C3=gtic1qsC&RrSzAWsfN2M49%WvPzK^dhkw51Q-xJ<W2D3zlbdb}cp+^|fPlN)
zcn2%R<n$i0gh!_fMlDmvg=E-oqfo~Mgq8ND2hLBDiNP9wLx;eDE=@J{hk+Q4FuYoE
z^&RHgg&R-nrq-A_itJhSTR{0Y#_(hfT4WVA;OocZf#QXDcO;F^wtp?*-gWUnf2CbI
zP2TYx&M%>^%57@NY7_<z*58sGbI_QnTqC2R-?Y3JW)V6f(0=ZB3?a1R>t~TVhyrET
z)8;_W9Zv3E1q9K7e&!#dKGf(lGTo9!qnGdL<0~m<AH-@On7C<Cbo<+7Q__CihwKlU
zD1f|hC>aVT6y~#1CyEIm4n*V2Zr%*hl0jOQaPXqZCm@SI%<z^YuH2R~*H=fYv=*q5
zuO`htnY)H~e9F(xO<^j<JHe(SAK<I+)GHOW?$D|m=YjRjL?q2Aw453ahv5tpf`hNO
z|LkOT+&~of6Op;iCmH4BfadOHb3++1g?;k}sr{wd+*lI-0qh$$C7r*%y6xj&8ZKwg
z(Nb-h`ryfTp~awyotv5&mwlKL{s7f+6=N8jIN`;!^}Z7}u<`NwR?G?!_S*gg#&@>F
zqrWS!WR$(lFPkYR&|vIZufrQwgj-)^_I^3$)&~OjcC~*|eS6e}YUbVekFolH#^wLJ
z8OOxV^#2qktp8cLXZ^1#_syD@Hisf9KewfOz43sV`rB$%fG?u5WEf9GnNLqx$kbZ`
zfhlI0$l*#98!`UwLGH;uqdcWIUE(UH0U~p_<x1Sn7hJpT533}S;tBispRXRS@ucwR
zy*dcr<_5nSw+X#lT3Uw{na{&)_@qAej=uUnLP+As<L(ZPoodaqscgSN(t6nvn2MmG
zsBD>$%8uJx)t@vzpVOkoY<a>OeOQe_5IInU37M&p%caWq=Zx=&s>qZIGePQ!=eEE1
ze;@daAC)e)OAO{=SPx#%dqs(eL%bna;0cFnx=yn8e8yQOpAYbN_9Zf)w8YdTpnGSh
zTXnz^N~yi(Z(NKUIbe+2Xcx39a9qfgYCBkVKSi0`Y*N~Jdc4+?YjrDjFaF{~BD4TE
zqqQrzJkPf3B$<gOCvX$D@7~X)dN)_Yg|6ei@4?t^-UG6F0dl-rufoUvX-q<<+x1PS
z+t!X?hF5jz{MhW2Oewwd*Vy)YT|Ay;`;As5Zt{vMp`I<<KHdHWO-@V-0{8m4I~>i-
z2cdQp#iY~#zz8U4-A*mJ>P^aw4hBL0y9eopFd3%3)2tH!gn*NMP+r?n<h!jZ?ktXi
zBYL-Nd#A2w!?)_`NHt=l0Ris6x!lqnlpJv~e37pc8a!V;rxg6S3-`?KH#KGBM#Hpl
zHSv5#NiwNei&$N28IYDDqeL(2N1JipIeilM6szp8rh56YyG-`pUln>er=ef|PjxDc
zD1V~LCXQbtQ{rBeC9(<HeMnS(1leubjLm)O&LG5`<%dw)`9wAXmmG||SC3_pJeOp&
zU=D2S1VJrFUU;)wmL`aA|LSy>*hyuM{dVgU)Q+RnpG5)=uw^EhJ~3c;WdWpyWNu*S
z%j2q->=Duh1w||(Ryj6)B7vG7#`+6$^!#4;m4u^5zEiT)SNAwk?GtIkLKmQ{bE(S&
z8vBZ&1!{;z5j%MQ6(}B&x#ztUT4a^*il5^SG_nnNT|7R0RKrA&VGNv+K@9BpbXh3M
zto(c6yXDeLlB=Tp5r@DIc*YA_-;<BirMualiy=Y)DoZ*Yn0>r5lVS{ZVfxbrt-^<-
z39yN5Yj4*JoeIpFTCV7dTt9Y)7oqeKY6QmS76)f-@R^Zx>D+wlPp^YlY0`g&x|Y(q
zmdMJ-&l~L&fSzd8=j!sjO**|0b%*2IEZ(8=yH;nfQWO!9=NW&@Dt9iC$Da2n+E&Hr
z-WTc*Df$LBiatsS;Dc9oQap5v!OzgD8_~C4t8K*?1zBoGgULUnBP$1Wis(M|AfLmP
ztA#J}0;@ZbHAedRBG@zB<9PdF%AWZ6r6t7}&jgMhFK*g$rk&vs${aCLfKLjTk;SF_
zZStP)Crc>fjBdtuc6ma$-tsX%zF&N^8XN8s48RRw$cKnmwQ>IHl?$VyVOybBrr3z2
zt`Q`6Y<V^D*r=a%i;&gFp0oDkSZ;u@?#KAhG#BaH;DVO#FPJ5)4#5acsQ)BpM-uf}
zxj&^H?fO9=khtWnaQm{^F~IdlpjY`p!M61bG_yrE2Tr-cCbLB2)p?V|TeZe_o>y4G
z+Cl|Cdzg^d7}h3NK<hHeQ(1JvAjw_0NLhhx<{7vb>Eem&l+#Q@tY#JfOXh-SBds5G
zWImw7t~icNu|7UQ2QrM%mu$Rd>$Vbhhp~*1_gQSvZob^06a_}0c*-4d`vT8JE7es~
zGNl_b5(C5};L{PoC^I!4Gc(T-CAggV5n=hPMP5ya7hwwelzF;ER&(f{%hCbB@kAdQ
zPO7}#rmqQa)E`b3GWl^7d{XbQ2>7q!ZJJcWu!4WA261^A0_t{E;MpC54*PX7Yyd31
zt6R|IhFSSufIZ6=XmPu#P9#he;#eHBhV<)ST!pylT>LR#nb3IifQN;6#+r7J5;>}d
z@j?zo6i#4cdg-v%N|)N{(k&n+dBC2ih2=<=;ZM~gPLip$P2&Vi+t<8wXhB!IUzr&;
zciNE%%-Lpm@KI6)Q1$3q(FB(I+bG*oj2Ny;zS&ksTdJG^(Ns_z$s|X9J8>UZJEXi7
zA_=3U_AxkGn1L3k#dNg&LTLmkFD$|eK2BxO8il1&@Yw4`G@|4SyqJwDfjY!05)+ew
z@TYEjr(C{^xBW-(K!9NRv$f-Zz_B#=yD8MYLRe#dFpR8u$)uWe(sae#eW)YPBN{`+
z_MwTe*d<&HdtXFz&^i-8gZc2?({uMZCGvR8_z`>liKIZ5Zq)cT296B<ACw}$rig?%
z7@FZuegf_)u0e{s1XM^3(vUxRlYbjLH(s87uqgyif73DKfZk9cJZBcU+yf7k<-P<w
z*LOsP)9GKrg2^!J9^^)fyNGZ+D3of_ov2Yz9T8vnDX4-@DJdOh6<=vaUIF$I<M|Ot
zwF02v#7<&fh<^if`We*MzsxD1LD+g?TskjqX))LM;XZ0Dsy(|wLBk<Q4g0a`+@JJc
zwL2q~*q|s#y$WPb<^rA6FZCgG2pYCh5o{Tj1O?ptRl46x35GA^K4deg!e$9E?}Qmp
zc88?3LnW-8pG?0OnYUI1U=8!3Ucgs>rJP`9lF>J=Wd{$({@UB3G=`%U-(02(MTRuU
zDHZqQn6^tGo2it5mQHm3Qk$+6ISU|u`G|N!!UGMRe#jX%z5N7E0%aYLp`uG=52>4l
zH<`tt0xkE(1dzbcX3G$@LaXo(J`>ynP|sP5KEOG_>uhW$$qq115I}aeoO2%eF+&g4
z=OCibaGFsqMf;S=g1sJhG^``la6^Gj39+jS0n^j(|9nE?)SZ!~De{Z8a@=hqz}a8J
zPu+c!21dnF_I%XEz5yjZ46OT07ePe&K<P{9KQuv=se<?0J#|RJT`RW6pxP!hSFAAH
z)&xDZaYo&MB~-@GBTZYHCfB%6c#DBKogS{k0fT!ob=Zh_4LwLUfRl?^C4It#Ka;h4
zHe-i+WdocoLHsEtiSKtv{LS`Dqc<n*o^cA(XWu0eL|_p=T?WRqzDSFLB04`St27C4
zuUsup7F19O`WQ(_-YH1`@aSob1WFXw1y!F;XJ~Mb+tTp+z6wG_u<t^v@xr4Y4UfR5
zq-Clqqe0Ila-i<R9g}lRZNP{pmOrQ*i;rId-_h-lj=;|siN<ygz`mykqXAA})@KP#
z43`7QC6xh-wO{ioWPmt50;ot~G6`pN-_856nBuFIOZODzMj}8Tkd?oKyr-Uv5ylf5
zP-jm)&YN!+k|?}8nrhHGp;9qa4DB->pV3Zrou2^Y^|zUAz6&sXe5$NR1Gn7q3(hyP
z>{T;iCKvph1E!Nla6UP0OS^E={$z71cG#y%+f&h}{ua7NSY(US=5e?zH9=Re%I_8Z
zr?H5Oc5cc#y1chiDPYk3Y+@U(s`go;6Rf%@IO>BjC<DP2mU0Equ31hp1!V!;UWYJ?
zKV_etu7b>xynTna|Cj8R*GH^l0tHw4pkYaOQklx#2W?_6=DZA?K4^1Ua!Pv&{X_l_
znXP-(YAk`??-J${lm9jnR{1PhnOpR1Dt~kyN;_4nY==6h><ms!!HyLJnu=YTd;%N^
zmDl>)_8y5m)L%wp5)dV`jKMq*H<?6@-Q;O~)z|JnbTZ@BAJ33(jkf4Bg7r#$W2+jy
zHn#1T{6|<c=zWD=YU4wkX3Ki_+bUqE_6dKq_1-KJqn$0PkOC;Q?Ou(NBo8%qG6m%m
zl{k5-ZWA4>#)X$qz<?E|)E&xT`HSS=gh;G<t}7fKE#9ylglW~x_%jlIuc1QC3`T>h
zi%qp9h6O1N?hyR#6bky4cwB|U9WPP>59XHR$U$=Q*b^)Z0O5SO7uB$=9zL}u7~cOe
z?y6ov6TzkG;&P-n((D4&(Y9vslb-)N9cJXCB$%zv1;3eS<2gy%E8q|Mfhm+{-Q969
z&?pAnKE>QQ^}`$^j9MzT4UNXC(SJI*Cv&spYodfOyWu26nG6!i28dh-GtaZf1ua|~
z$_}sH4h(YaW{@#O3)=a%UjpE{@99BV1LX_ytNCo88jSH(!~;BsG7}I1QhRZ9(SZ?r
z^tLKoYcUrz^brNuIb*<x60~Cklf-%F(IE>p!YJG{Qr2C3q|;g1Y7c4<^uj=FHq5pm
zpjQ1(%M0z}x0Yeix9tvo$ahM{I<pfaq~sIl@u|wIr-~SF-xU89-B`mw6C9<s(a6P$
zth$9o7{$HB88@XLaIrYDRcx1EWH@%D9)Fvj$@iKwBnU8E^muG%cHb=9ofx(*jHsz0
z3Fhc=3tC*oJb;|pL}ewGwnyaNmwe}pq{fSTZp4KfswYG2SV)oo(Xg)U!BSn~z>q&1
zOXJ3HP~oIO#=9{rD5dTQ*d9>UN4<G+D(R(q-2$ca?v&WoeTb^L*(`ekW8|Dz@1Y&b
zzxQO-30XMw8csA9)G@C}Kj9Vzw0Pg{z$yALA%Z%^i4r&<E^sk7IjD;6(YQms6;&Em
z@6aL^76bn~Kw;-;77DXLot5Ob@jaKwL9v$|pPu-_uxJz%gvANnEun3gc4A2++s>`=
z0PpBXYuMCrCyk|a+^mcz?uaU#L}>yPC$`uEGv%-;n$JrncqdFAe$X2~Lx>jMgEQ*v
zwmmZ-541l@Xn1_-h5-_B0wJ=G)j)t+njUa2{^Kt{oWxLeAU@E|LA}fKvL}dRNW05t
zeE(2?kOR5v=<I6qC=aN!T`Ey|4wEKkezrpmvmP9tXm9qX5HWb%+lYTsUqvuY=#e6W
z%x;{K36a?DAy{_5K-cb$SQ)vk?(P_y1OIeMc}TLctUgaweIo4kwA!Q&<ee9Cb3Mdp
zWSQZWr4QD~M;}DMuCSjNU|^q)V?cH!68VTQ90rzMUlcVa9(?GpeufPiGb0SwY{3Zd
z;q~jm`x8ol7UATs6h8{dda#o>DO!gt0HqUvJ0NWx3@w7_4(Y2gvq~Cc#`1S><@HG(
z_%YsvfDi@Xdp=MP1|sVWB8gh#n#_e)oc3`Kdz|T`G4BmFJB9B4q*r%u@5SD{0SVsu
zENIbP)ZM|LmTXa<JaMzz<=#><_^y_&9IA}cF8Yz4z=N1BeG3>wqw-DZE}2lsUn648
zNY>yj){Ak}p*C_Z2dC3~;CJsVw2x`T`2c)A51H7U?a7w(E-*m7B%g$K+}?6O^h3$m
zMH8foyD^eSHGdz4V{TAEC{?{t3YmQy;_rM=(c14K7XbLg%v;2Cr*blv)tA^*--u68
z6e8r?c#|xNo5m$|i+m2AR1Jso(R$3|M53<DQ~y~0w-OeUV2)b~r%6h=@>aF}_q^!?
z3{oK=>D_J(m4dAnJvXIqj|gvW=qN5#s&*5`P)9J=rYuG(2n5`8lS9bUacc6S8xMCe
zWox|lX5;u@BO-U$6d`-8q3i=s?ZGS$PKe&ZuGP_TrWjfe{IDV051QzbckzhYT6Y;I
zF@mia?3vxxW3qS2cA89<B7)tS9(M8XvK#kWDY&?4!Q>0wLg_ZXQ*<xryU7!AS%X(%
zi^Mmym2+tu{nQ(zDOuF0+6rHl%ld2vJN&K6voz*GtU`d=D>~~vN$}g=m>D>K{UdYP
zCE=Sb%Q*RM{}Jc2YwZWE+e8n(4&oAnV;o;e`(14VP3+w<^G}y;o6!$_d(#6`Y=erX
zunc>xw4s~L8mjs|IkM>MJu3YvAa=aITcBd=z8;-}nZUbF$GbsQ8Ie*t0>t}8>CH}a
zE&LL5Z%=*ODbV%d*~>G56nPXtw*;SuNB4nS;I`>|PosgvPXg}gLP%iRt0iKWN;sxy
z{cv*kLTc|z-HCp{4ZZ6Y0M4zCjN`axP(18E_85<`CbfV${OzMhNIRHDbt$m{=}2=M
z&ugiXSkAdBH@Muth#$=hT|`UV*EayrOt!3Yphu>{?~ihEI7A}=>qz%*WiQ66FV?T;
zjLjxiBf9N5U7$!HC#+QO_xKFvjctOTz_5MCZ!X!M*uaeNpA}F?EOEQ(3e@sLsD@@>
z`+*Dzrk^rig6y;(Hzx<Tcc;IAKwO<&|M?vBzmyVY7AE@tElRTfC#8h#zoL{3YyLCV
zvLbos*7j*KD-(mE2Y_fd!()#sUshXPP0JYLkCdZ`7H~_DC=hbEe8GSId5qnJMNpN<
zNM}!d2*gDM!2;hdm1T?9g_y?3e>45?Z0^lF`W~i3m->|`=~eN3SbiQx64kDy?fI%1
z0$<I9encWBB{$AVy!;+6__TBXMwS9PtdI(mIHo`F@UAyYy}q{C+FzvWtt^3Tn?Q+T
z_?tGxL`mBI<5ut1DtAjej*T-dk$x<g!Jx$V{iFF%+tFS7Y~|R<9vuE~9z9z>mX?o>
zNHv-|u7I);BlRG$`Ear7;k(8HyzbPUK9NB<88yBj^Q`X~rfR@=*xnF(*~1Wv37r!e
zAw8=;%%oBlW$ex^tz+U+syYsX6s063CCg^n;eH>mj}b3l17ot^gW6oFy$oogEU!{L
zY?ZB1ewv|4sY_8|W@RA`sM#u#l81`f$pZta;jXe~C~%hy=G%68<7(-!8K>O3yJ}<x
z=d2qW-QqBwJO-r^M|ybD9DsG}@twka{V`{~X-{yArk&d(qbJm@^Eyr6H@<S6fz#nb
za{c|&at{7r&$UC!eivb4Y%Y5sY~|$-HwERnL|>>~ak;Ba#*ebsC0sKDu)n&#3twnI
z+u*lW&!w!cp5#&LH|4e(m%qd2^4F-aFk+Fq)$ia<Ft+w}bDLZNetaDuhU2uJoGHcL
z>(3L>2-8f(M9$rxQ{k!!CG|B-nGh+!85rcO4X#slQX^+ZqqZ@JUZ_IMAAQwDJ~syn
zUb`wx8zP8TMqmhXZgjRx=fM8QL1+jh50-Cow%_zDc&p_5xzW@`SxFV633h{Y%ck0W
zvyQ>G>kSW43u~c%rb*e`+gE9>5dcX4B6{4->4Q1l6UIVnI<)Pz>W=MW_|@NkQ?oD{
z2%QJ?hy?J>W|1bX8W}fWRAo{%$XxDeDCS}kVEs<*VyeGTm*&(Qm~29@CwJ99;typG
z`Hr&4j`MYQq_KpC)J+Sp0c2pMgfs!t+qI7w>nqp8eT}(zwY|mzk_#yJ4TPYX2B4OA
z(_v+3Pp1(QjxX#Iz&><7SAtDoJ`3OtV*zyoi3~f!<vN8sPc+pZ9I*Pavcrh!GuHA3
z3FRf;HcNw1KMv5w^#k!3!ZZgjDv87?gc28a=F00|yV5>SmUP2<<|`_{@S;e>#PnD}
z6if|4>M;~TceuPtwta!rAHXp`4~#v((04|J?RF25JTX1A)R$4X0g~gCu@cdP!6BYm
zcacf@8^^(h+UCD2H0B?839~O4QpIrPOb7n&X4S6VinV-*Jm4c;o<Wj~-6yr1fC<|z
z%kO%t%W*81+S@gIN}6MEmqXcpW=TymEuAc*N~qMl6!b_Ca~kf>xA0KtC1}-XV?Jqz
z>hFl~@Sh)xe*;BEut5<)Gy08#{LOBe@hIY`lc9CvM3OGM10GF|da+>Y22E?+H$tp3
z(6c!H5Qy?t-NJWXLmBz$=R=W4vrab-EG{R<%H3HFm)jv)D1m|?X3fAYTtNNc$;-yA
zOjiRM2N=Gv-g<AjqdbR=du-)!Oq|`xMfOF-&u6T$KfgoEs(lvO58L+9VPt#RI}Q;8
zm>OPfm}S!$O!?IY*X2Lo>5Zv`d(D3>RgEzJqlmjxR`D@fB!!QAW*D{*w*ya@aVgY}
zR4+eeAXg9>QoC{|%hLIpja7?6z9^x}pjP>;V56R8P-~+a?b?CbY4>_TmohRFLondf
zsEKGdb?0vVSpc91w-Pi3&z9ez;qOM+11wYA!$+8^)&04w)}Q=D>(ks`ZtVmMLx2hR
zDlLkO9O(i7;pdzhI69>v@Do~J#g5L(Lt+GTO-W6Zt<}qq)pUbreDg!oBh!>IvyWa`
z=;2!LI>Hj!dJPT7VZ5|Q;8-e-?CC*C5*#>+bg8VK8+)K<2)r;c`K5V#Zt=El2|0i=
zZ=TOuVXGXG+KZJluxP|O3S<gQkK3Ps4t*vw@`z{ZeK>meV?S|yS}A^BF%tysSLXyx
z?}jBWB5jQCvAoC!jK#*D1FcI{g7N2L(%~5#hCUbCJz95D8HptsOB5Uqcj(4#@?`!T
zd^;cArg@)L<ww6>bM3@+6Gj#WL`L|c7L1#j3v|RBCleYQek4^|v1=hcBK2mb28YBt
zA&ozkB@avz5FXJw<K||cY~Dw5h@UmcKb9xWiQ_GCkLR*ah&-hS3mc+x<<*p;8;t@?
zZr{70He6GNHPovbHce2Ks|YhQ&D*~#UaI^Q8x-#kfYE3ClVn@Qr&ZiRuaDBsk4om%
zi08sF@$NB*!O0^ElnzraeJ+}<0p^{MirlSrUKq;;86#a@hIij3%r(rLfbTX=!l=XP
z`g5Or(@%e;oYcQyA?QX@2p4iL3=#ZXy`7h_006(FjIfMwv-GUyr8IlN5e5J!V*~iJ
z{iW2lYIass+3`&j*HXp<%)+^&<8YT-ffQ*Hc9z0mAv;-dN6Y}8IUY!L2l+JQz-GJ3
zs;CY%g`-r=)`7F#=kJ_~)7(&nh97@|UFHoln%RMi4M|~u6cLZy3E~o9CnOB2BNLuh
zVgDg0fAAr+2(Q`?&;2cMrdn6_MYOi05ISk}c|ay0R%w5sZr;goz-Uf!1WJMFdc!wW
zp@Av|<f+cqsYdn)Rar9;Ew%;BdT97UR(|w<7(1sXO`vVrmTlW+mu=g&(dFu5*H^Y}
z+qP}nwr$*w9dXWm*e~ZdtcVpe=gb^Q3VQ+~K*P~!Ho-j7+r;qc((qeQj-tW%omOEZ
z0kcR0qx?~djar}=n1(@K2l6d&-HaX3qOcv@a8QSCm_jpyj#vzrt*OkMGr%Eb1X+Db
zNYEmy?i~|EZxiwXDtTxQ5NpR6e6^W?p~?2Wn3nIX6}G8DG?GIKcuPdT1;n*Nf+%GI
z??c4x?!MKR3(|PH`oa+f!S5IF_{J*k#$+FvBLJNUgEu?{?i(XacgCw5<-A`eQqy6l
zskK|BmDR_eP%?$wPU_{=UE|2Uk=`9uQxr>|?_<<UtVibMPUzPB;V44u8&ZkT1dS8(
z(jPG1V3VXSkt`lB4Q&XlGO1IPJ5im7dpU%dY{)<#W_rpbPkEf&hsU++i}deV+wv;d
z08fqTd9(I)mMxg&P?%{T$o{rF-E?gVXkq}{x(PEtqcc%R-|@r)VfAY}1S0+`@5;IK
z7pR-w7=b?vKNvFMazDy&|E1r|SGOC+6!>`;(BA_K^J5tU4I~5ATAA2=MVyGN>@(8o
zg`*1YqMDr(m}Dllhif?I0fuN_Y)eE;lg4;0y9DE6@h&9=(Xr475ezbN9N~DeO<mPW
z55obdg2aFcpQBKeVE#qOVOyVamAj;1X?;gRtDEME<~yH;8w-b_5HE(`7-*FY^3W8K
z4V9lMhcvaGi7e>&a_My-%YWWxM&Y&Ro#>PdH?Ca$Z3<shU`kQogfV(^@Qt1u+|(v=
z)esh=1SdT5cZcnRfyS>j6sN94I#)C#Nzwgy30osUc)dj85jA-coQKf9h>jqNgNhcG
zh7=oEOnjCI7)L%0Q?4T09ZhJ{pJj|x8x~hj1;dd9n&j!rRqZA;`zv}806J7)Wo9*X
zqum~H_^Wmk^|4MKDjBZWpfTHmVK;r=%`1isv#j6sq3tlKUWWg7T23k!+~V=t;Zlh_
z<pKS@EZ;Jn2|@A!m4x=>BTt|`w*vl5cnH42K#hbcuA*Yv`8p~zcdRYdN~JPSe_ptS
zaP~uofWJTv$=Y-|8v}YeekhxqqkawFv?GHM81?oe>HUF|&G|jsAz=P}e-+X@uyj4K
zblTV(=8`%nu{Y~p0Ye)=)R^q~b$X9T#Zcz22~|GM`zg-nFD}XF2F))CYLo=~Eo!9p
z`WsSWwA(b=VfZ?5>#nxJ^?)=^jpU7CC_EQn`r6|!nxD9$lZ2G8y)R@G<PR$jGpyXF
z)~f1j7`j8!x_CCPbhBENuIZ2mI}NsiyxMqgECk|%*7mk?jMUO27~EI<nnO46E*Oj-
zK}@j8?1482BprLz)4=`#T9`(o=28sjzi6JLZRH9^+W8x-f|pcZ&1L#V_6IgZu1&u#
zd`*kp+Y>M+!Zq^wCtMz8b;O=ih)QZJL^1TOtlq1=@PcQml11vJEj*gpQGAYxe5NdJ
zT#wc(I~Vl%kaCSS^QAF%VAr**ubgWv+KU3_32(_DK6-*Hz=1W6hKS>1LSR)ea9=)E
z8uw?c0#9rE8>hY#h}OSzA!9>J#?N5ztE>n{afFM9)U^ww@VMa41KWKt0F>`_CHDQ~
z_W&L><6<zN6y8T+UvK|Q^K<+g5_*`l`5j@`8AWu`gW9;#pScVM>EoS{aVMVRJ!9Rl
zX5sW<calSA*{xzA;O&;3xAI+PR5($pxz~PKDo)AD&qCe6b|t2y=I!d9GwN$I@Gm0s
zYDo{E)a^yC(|7lJp+e5FSHE9xwU=kG*a^VZK|3hJ&II%DbTLxXWs>6VJUed~s<RON
zMTu+6w7*JHG7X7zMOe}je+hT8Z%2}sv@ZFuq`o7VUSZNA4ld*FA|Qd^k^6l>>%D!0
z@a&ICC3MySd|YgU)4)u_kzp`*=4)(tIN-`hW)>MKy<)>{?EDv^2y6VOpV#XF&`alz
zJ|S`3vN@0qseyv68c@{cNNTvCcziJnWY>IUBhS^G@t72N<|9ZXyPvDEg836H@B?`%
zN2B{+8t^~b?mw0QR<8f0@N@h(EQjO&1j{+nl5;+2Mee%L*p)0Ip}Q0FFB|WxYjLGu
zJ5b_X?{aU}WfhZ|R4fcGynM~P_(uO3VFmIBlNw8=Z7I}cE0(HV`+9%6fH;P{XA<gu
zxALLvNQ+@_AY{qE$$!?U7xB@V!mwVVN&EVPS`JwelI9VX8=D{N+_*l~dGFZ$PKo8`
zf^1F~kEdR_%u=I?_9B%~Q6jJ<S_Mo~7szG~jf@9NJbP|+40t$f;d;+kPf#@cX9hU9
zDCyBFm~nIrZE7mhS%ehn1RV6-jkX$LAk9~6I-Jw;SoVQ*S$4@iGahx1jpuuhHMC=E
z2dcpeKaDHg){0NDi)j!tq?|^0Ko*Iqm{~=Q5YF2}Xv+80%j>k*j^+&_hvhHZHn|!t
zBLIMRrnoQW)Y41jJo`&5RErR;)QW!p`QiN}h~qE*teSx)?0uB#xLh$1(3dkV6bk*i
zRn2r+U%i-nfgS+{?7Y~=Gz1AT19r?m|E|}G88du9&iDW#A4Isv>4)a;FWn+t{=lL*
z!2xTB_7qQ{ZHLq=b4Um&g`e>Ra3hox8X07QxH#je`iVSKg!DtHza7%6=RhH!U&y6r
zLm@j!$X#bDYWWIzzbmGgr3mhWu6<$5>eN`zGA?BXVv!Nujt>x!AK77IUU+_goZnbC
zG3MRdYJN<~bm}8+S>VZ7;deZ-FJ;1Bq9Ri}uZI_qfk<@4Z$`txOSUjp#90b*3e7G#
zOVA_ixQ%1}k(8_oO;N+C;Eq<xL)Pd_gaNH)RnQbs_#nV@;7zop8dofY_oK8_p?0Y6
zFTR1g_UmQ7gt=v#yrDaeBm@p)!5benZx6e9KtsP{(2Jp>hXP~3-&Du|3szcA^BPa5
zXU2<osG9>?Kmf@K^jw5v702K;1f?=kajpGDV0iry&4kmkqJ}3~#5(nsY!(>X&c$VG
zH_2FN#oQmW-+LozZiV82cSq$wUP{m=Mk4F!j~|hBP<umFL=o_uTQpKfhfD~Q(j8A8
z9z+};@XHwn#wSz7&<2gEW^A$uO&{OQ&2MWwx)?`=ShL(i4cs$<FOoMOnBt_40#Eh1
zJ<ynD9HPjXq|?W*fA1Mw!ZRN#m0k9_kcq`#EM=JkEx?4}l`NI@gy2c(j}Z{cK@Z06
z55}&)@pWU<zczI6_RV3JtR?Mr^5;DLl6m<KbC(O-gOtI}`+Dro{H1NL`U`b_r7W*R
zo&{d<Jvu?;u$#u1GLj2fhp>R^O1rKSL}!>S1gJedGKBfT{L`krD7G~-q0lmu`+*_7
zh_NlCgt!r9^4x@IjiQ&y$o9qiVs0wo$<U0hg)&7mR#`E${a>d6UZj|Vbo}f`AZ93-
z3w42g4varOG%(NVky-!d<_2u<yVK=kdS4^q+`SLb`~6NjcFC6qEBMgSEA=kefouru
z)8?Qx&~Vt2UrD&Gi!mRL!L1^?dMQ#6YF+Ghrc;TBfkr5qkW{Bp0M=!EENd%=%nPc2
z8}k~BBS2D;+A?oUg`kTG&SOLVuK8exX3bwM<5i6oq144m{PzAqLtJ{lT2Q0>)IScb
zNF9Ho-tR6faeAR*OiOr+il&Z!H{M}m<Z-%z9J1EqVozYH-Yk%PfX1%?FAp<L?T+s;
z{~6aDA{4&jX9axH_<V8l<?Z>80Y&8Q;AVyAFk4gF|6`?RKkwsd55H@z(AEY@v|C;X
z(4ItH$Bc9MCyRW%ErpHKE1eoHRs%aAel!{X60Zn*`NbaG%xdtU`&`X3RqCljaL?AR
zz&2eTmU}N`z@u(habq%VDIxiFZkR$W-T`MF@ibu%5OcD*(cb~kBThYc^P*kk<@n(g
zadV}rQUh;A^*@v^BGHq?rCdvA0sjrm#Tuw`6?i^@7*Hur0gm0$#M&3k)Y?sG4<6|(
zS&h1{;9HvoQeIVgN`G2S=GyD$lrX!=<f^dlN)FtB<VR@b3dMzbPh|v4zB`5Q4=vTX
zS4`@7@B|ys?N-0k<E?ozDsJ6ZSqi!0=}da>)q?KQsyd7{Zs8b!7{$!H1m44mMU}%b
z$HmSD4yqDe%9^4;8EzrMLmR5H*l5lt=9%jl^6gDAo8ugunq!WMK%<}HBMH@Dx5{ts
zv*arA?f@TaIP~D8;c@>LXmPNH!DlUy@4!U*#I;v$4A?6#-*deiInI@bZ7{Ci0Lwy8
zj!!xA7Ff3__m-gdGRK%|*#8TGPxxA|(sA9nX)2XT8e8K|$f3h#3*^SWG1ihR;S!!A
z+ugJ~yU2CpBAG>4wj0kZa2a0qkjeAV^fK1!_=5f}U5`H&9T+?ZPiMxK$A)2SdJKU^
zS0!$q-$zukSITr)ZzJu1a&>U{p^L9U9pziq#c%z0-Fyr~FL{D|eDRKcQ)V$2q-&rQ
zBh2@}MzoQeei`O)n`~A%4XjtDK*ZsoPLnL$z%082{k_<{gkf#x*oSF}E!Fdz&*0bU
zsyil!jB{&oj#qls_o6^YcYDWoc~11rG`5Bc%L_v^UpJSlo72U4=v7RQm%hB+`RtOV
zJgAlM&M<uWJYh(sG%^^_3Y((H$}|9`wHW4>(sv?)HfWni?z~kZSvId{LN_jbf$Fqf
zt$l{&Atl?DU*B6lKPO3fsoBJ;PPa5+9;leHq-^~zr7hr^&E>;ZKnoQZjw1>fhPxN;
zY*{4VE=Ceio}Qq6xB3kUOX8>f_+b5v`1*zjp3yV%-{ZvpLRNnLe}^H*e?wL{{!fsV
zDQ!LHjaGEP%D<IzS#%H*kzj1rnaIJPjjc7gP0a-U)igNrJ`^`<Wf^7l#g*>knpc5m
z5F+5%cpHo7qJ%V48?T(d*KLH8H&laQLFWoDH%>gzbDsAffu}q9*EvTRU0Dj|*2`X8
z9uG>Tes2SVbR?3BWLP2(S7fCGB@YHhsHrLYRMMyrEXNg6iqqpm_4JFU88KEZz;X^C
z&XZ{U*vFX#Z$>DakYitH0L6x|-Bhv7N$983l9$tz%1sN;mWAJQNbJU2;Q~&i&hP-q
z#9vKVQ~8=vo8UiL(<I{qhAH$u8O5A(R+(V+wu&8N+N#oR!nQ#eC`(QnhsPx%+jg^`
z?+}2_ECqoXpY&KPO3UvD)9(|3+Pw}R{T;722bP{Co$gLGos)~EN+k%MFPaqk@nl>5
zq@Aw!XHV~ddNDPFO(U%&TRrrk${tC+Qk$V9a-gYS@(T#Z5@%_l6xm_x;srV4oco4J
zX~2^sKUau1kIVM_DD!Jb(_2^B^-I?8lriX$dt}gIYi|rx4OOBYp5yL{!0|e3<Lw)z
zC;fCvw8AcQONRpv`4qc5>a^e?qFb==A(!A_ye#{T0x<H#&<G-Nr3K<4iqR@_&gkMH
zJaI@P#5WB1sWJ#}G!FZ6qplsDy0q5rEg~Hxv`Z!x>eeE8dTNI<SGv$cN-@ulpKzJ8
z-{vq3Y_d-`jU8*WzK;0>t3W@NwrRVm54A5vkOvaH!*#bv=s2_WPHz6Bf!YL0bfHJ1
zbB=+Evir3Gn9ZRoO(S}@Z1%oI5^MT-onjN(=2bR|YSNM3UO@fNr>5X=Rne02(2xza
zsx@FSo~7qZDVAu)<MS4>&?{<~Sj57fyVcr=i2d<o=Md~3px-)ZrRQq02ROjzWZ0Y#
zk#j0Lr53Ixf^7YGiDe;bCZ44a>L4iYrpsyBt6cGSNlBMfHd#Tv-s%v45B@TmW<&dT
z>={pmY+vKBKyadB<P-?>En>elcry$F?`pmz?-pz#AcOn~>d5d56$+J9V6w)04Kze?
zJweJ8PiN^9!!#FEN$#8u06&)Eb`{!<zwfJ)0d`s7?24@DC29WKb=d<XJsG6{M3eUm
zmNd80dmB0R2FZ}qRZ$?bR@j3=w`$<aY%Ls;342vno!;8jDa|LLf|gz|L{6<!JeZ0-
zxrhezR7l`h<(4;8K&WB9<U#|;$QYOF8f2|^StV9#s-{49uMTo1Uy(`-Td8{#o=bn`
z4SVHalKDYzyEh?P-1^0Ze&YGbp1iC#Pi-60q6i5EsiIg7fP>Vz#{z~Eez!WR>MKTy
z7?JN$Kj-8NftjkUa%#9H*j&dNPn~bbf{;9(&}K5jDXK4AxO2nVj2q@R_joVThA4`8
z8*ZJ&*wC-*!s6-0>^q#Z?~y|(Ueb;|6l?9dx|C8U12LP%YT`pN1hg3cgF0*N+$V31
ziaL+y3HEYvKCZB`A3M0!`%T72tUbd(n(prnKi_U}zn+kV<GX6t;Ix#gD1)b}!>45E
zAQ?*A#O@D0;-v{+I!o2he{R<mnp^Dp-GU1Yju~!K|0?V?F_DxxKdX6oVdZ7A89si3
ztdPiN<NsI%^g1j3+-}N6B1j$htX;sfqGz5Uq_#^9BjW`Su-Os`0#Nxv<Q^ZT&4Mwd
zd-iiP51wkpW{_WN*){{Etqg^dBpz&WJ=;h~B7#j_*Tsq*bw!DcM(6l!=mGJLt(WuX
zPyQl}vaH><7fR0Hr-8ym`vc@Wy_xMq^yHk$P>cPtiG#O<!^)#%32y3B;vz903hoq0
zjJIX)&9+{^ky4qVr;bpAj+|Q@^c@7Gq&i`vyB92C-x#ZiPMLNSIm5!!Usliyl<jJe
zTrcR^)?fs4<HGUre#(;%%cfPAa>~zXbAJROq#T!2tMFUd1${s7xicsKQ;5agQWfMK
z|0%ZHbfyy<xI{c}`RiYEAkYujM;Ssu!_F!ca$;E?p=l#cq$}31T|A}?YXe4N<B9%2
z_{eJDk)c)EFiEBc^t*sNw|*%_+njKGwC92l7Deaua7@V!^{stkTkz<Dm3ddCrVP}B
zwdiSRb8S<;NqIK3<PgVsjmSt!ZVNuhEbWYxG=ye>Z6H)aY<~lR;b@nDg{GClnK*{#
zqfPATAy(qK3r@_3L*^@@H)&B%VICO%^vLi9;va7;)9gAHr14-xaJ#|Wx0=6JYz&OS
zm|pV9)v`H6LA6)wU`)P+zdzNJrglv0KtuqvE=Y?RR&k|-HsrCuU$pqgvmw+PJ!oXF
ze=Zuy3gK?qUG*2=tm!+R*Sq6r6SEEmCm%0M&sT%axyx6~Hh&`|bm3BUsdB7dXJ9Bd
z7stsJti!`aPH5etQzUCKO=wIROd{vj1Akg-+ibuwt4v9|(=Ku-%4e5Z8yl33ti{rt
zhU`OOxu5gE^s}_45i}LSQ%UeRL^={z_-CRo%(;f;5M`MIz)JfUPO57n8kB~OI&k}D
z+Gh@`moqbagL*!$>U8be6MYMX)Q*3cTzj4qWDE@S(${*|&mu!L!3fXMV{@k?4p`NL
zO~G2ZnPr5ToIMT}7KkS{de|d~d5H?3eTEYX_U@++EImNlVt@NE8Sxg-M38cGz90F<
zSqsx~XthD8FhB&A+m1xfdx4zQPc=YPId3$&b1$&RwBpam^jMIq64;jAo@yX`F{Z3z
z4PSsS?p8+yfzNSQ!6aRBu#x(MR9yfg8=q0yW>j7T?aoqf22@m;gt}I1`^}c(VS3rn
zHq1A+)Fck4pfBn!iD-mkhv%C2Tx?tq)F4!=jS|5D1e_FA+FLCnixh%&*)y<JsYDqK
z;P&>`4<jn$+UJzt-NY)S)6FM^nr;$ep@$&A#^ce!#ecHJ%PUCsb7h(pJhOf6Ms4;h
zcnvds1oIbT+)DKGq9B4<=r(urS|Y8sfZNhoGOq0ES+=GsV5ulmB^HyN8TT&PZ*LK7
z<K0I;zlmPz2d)Q16w0&`2UDGC;aJKIz%~<ON@bi(MC4H3P!tikd8jFu?V+zKq4;SU
za9WSNnkpvI!4spFW;)u}%`T`fx<>?op<J_-&FMU-KG<U4n=-_jG<Z)_Dh#V}rWmY(
zL(<%ombijsp4Q*@5_Ss0RSOzVjz5Zaq#wC&kFhf<t?rLu%qGl=66d{xMs?Lq%9%_%
z!sK1CT7|f0yO2+m>9Q|=4}pa&Vgi=fAtI}3sl<pN*~5Sp0!BLdy6Ha4&uXSn1x@XF
zv3+|Uwz?H>bCPGtjAMti4X&fB$IV|c<m(Kxf6zW`J-R7Qpo^bTCqG&YzLiuX9QVQe
zvLpZ&I$Ifk(&8D$lL!`rDWygOL>35H5p<a_o>>-~y56YdLQ#r32&74vcI+RGi0FyL
zFh4N}@QWgOPg<s|?-pAT62Ea!-T<k6Zo)q**QJ8WX5n%bOXLaNV({#5&D$%-7iZmE
z7K3PkqgIP%q~iL*e^+#rz&9Co0%eaEt~y#qH}=L0|HQswQx-C5WO@EnOyM664_A~a
zF3%%0t{;;h@;05@{lV<P>Iu8z^EP-j59l_GNmxL-!7hQuN828}p{X(ZXzUauVT|kW
zTWoHEpPBw;w*{EpRB)7lB-IcFM4>avpg$Fj1H{O775h)w16#3}>G2yRtv6Iy3s>D0
zZ&$w{fkgw;A79=M4Q@|-fEqlm{(EZvAKV2q2gm>7E;#=icft98!d+Bp|Bn$v@G7D#
zF%YTKxk9-q>`FCW`f`xKg3w$ST2z>{np&Bn4EuMF(X+~9%tjQhkTfb~la6;Sy`Nyg
z$K%<89Dt19Y;Z*2{l?hsD50YwMnl$H`q5x0+RGWx)UUQOw3K46{JHPxTtr|@1}}*t
zcIfGL)btW@;nPP^%TQvJYJptY%23m3zEl~JH*DYIm2d&?A8B4IPH*HWdcaAsf~c`w
zm9oV!`dfEuK2_YPa{2Xs!@wXe$K83?sl~YggpfV_5%niRY#gr1m#NDb-5mK^MBRu4
zGbx`R-F6|=xOCmT9iL9CPLSa*u{Bd@Hk^)-;oHGh9x6FDVdvBP26z%jyaG9E!pzp>
zG~%Aa&I-o1dx^@D!>VDQ*Lefy%XP(``??!!@;omhXpLS(4aQB4j{{y}5v#dJHDlX_
z*xXDf(mdTmn*Ob~xey#fJ%)Q1)^xQ!g0yiu<#Vo|n_VwfLEiVVJTG#AkvXPZ!=0&g
zQimqaJTH56@Kykrk<&pJ`oQK6&-N|P9CG83`>8x!;S!<Q?jX@njHmSWlknf^ZN6L3
z-euJ7nE0QV7gU^&x+iTJ?Sp2`clu%>o1ShrJxtSri}q@oAb*v?Udm;GagNhuWt+;q
zPesH+n%{eZ@uw5ub)A@NZVvd&syxI1P)I*Vv!w?%Uh|dcXhp=wKi7k51l&MAAI}o^
zy5OM`Dmg7YP%6}2D8DiUkrGsPRxF^4t3RAI*tpkQjrMFLXP8%~7-e@#TCz;9@-9SK
zbhm#P$>?*<x0*!+{&)%Su|qg83A`?NSX{BM!T@lhR@dE@_y`Bj1BMksshBh#{;^UO
z@T820!B%nV%0|`yh&*ZbvKQ`FfP8bXaRK+^seGE7PbXINZlWKGqY2pw#y5%RG(MGA
zzYCF)5qgkLRuS^|SSek#<m-UpOr$jbyXo=1e0Ra5#_(vlYt_HfdF?NTJ;L(evW1vB
zC|w*fJG)cE7fIB#<d3kbT#StboJNCvOS#%=*+vJ~LHPOFaV(IW{8AD>U~N}Dl4X5&
z;%kD?q-Fy1dlsF~27bUiMYxQomO%Z?Zw>cV|C+UNJtUO|8P_x&7omir1n6zqLiVqO
zT8j}}LD=61KHc(8tr;|Uqx-D@TdR-+G-7U<1J9Tt!}94voylw`d@I@%L5G5k(zWp+
zbt*xOEO#l{05xIa=VuMrN^VIDKP=4t^(|Mb=%PapU=17L_Ndvy%t>(MTP^7I9kd8G
zXvV{1BXVc_pdS3I#pg7qFm>i14XwngH37GL%9@}q1hK~B|2F*54K@o5QE?ot%Xkk|
zoz0}MZz8oFntz311Vc!XrqNG%dU|3DSY`X7+geN(AekV8F=ONs6*1};`@sMi!kp1n
zgT|qYsRHR8m|29Dq5FL9JmA?qMTk%;x(b;cgB%lKv#Ag-RxM*m%6A{cKVm<f0173I
z34o@%l^IL1aauQbAVDh314i9eF?&(JgsS<g)-ZsFv|o~J3h^yue|^H9K=&8ME|fb9
z+O{_rT!=&63kjPv*^U=G8w{2BWn4=T1fq2!tqEhsC)M440`jUyg33L!S3^V%&w4u!
zfz$xU!g@!$ztzwI36v}7az+PF6q8>5YgT*G9OC9RE*EbNCkZrviEz!YIGk|1>*E`I
z&A0pD9Y^NAwhAcX-J@GS08n7#x5-GJ=<7w;;Z20x_OyGaw*h@B#hN7u=8WA(6eBMF
zrWzgTPg_5!okQ!R;Z}QtvQ}nCJmOySwVfcMB1Ar`-LGJUwASH{QLB_oW+=Wk$}@tT
zkXr^S(5y5apvfg<{%bj2aAg~wGd9I6NOtP?J&_C1Jf6UFf~Yco!1-<S7ME276lJLS
zSe1u-6%o2hw3HBmXfh<M6b8#bt6sbZH|>n2Rno#@4CUYrSJ^eulhR^Q#^buzey=M@
zahJUg5#iJt+)_dke%3i-6$7&nge|d$>>C<25<)q5{xwA3)lh;O<Gs~qh#2CS*RU%v
z{D|g`CzCJIE>y@UEKRydUqEKp*?QJk=vZ5<%yH;~747+#7My?GmF-J(rCeP8Fb;4V
z!P)b9lyMNm{!+pg@FvLF;*A(Em~#FIM@V}zLcg!Ck03uL=;$bb?Y8~BMO8zF1fvvO
z@Y*8>rjAfm*l_uI0Zpt>tank%Jp2UE6wjWnz{a1uA+?0ncUTWIdt{UBkyIEat!?AQ
zXu(1^H`@D^Adoc0fWl_c9lxEvE5TNW+!z#AfN}6E*1}Q~8G*aPY7Wq)`ILV~>{bFG
z#!3TU=6E;fw_`~mmAMvXGz%`_HH(bEYYGsbMq|a68|X!99GS_Hvr1$J?bta+{J0))
zXv;%o)>ocICyKlVYdz&`g8-e&ct6H@%%a^@R_U|nJ@T5m#L*qS^lh1YnSWBA_EXGX
zs}x!GUO5&2aQC|%qy%nwwA;q`6>B|Qdw*FSefYcMErFlim11DRmPtl_mM07yn#f&g
z&CX`Xla9tlT5p;?-OUL?6%F(fbBFKet!0II%;E|L<;rq=G$q;`F0av|jTXli_VL2M
zPcOIIy^}w*jcl+_mRDNnYA20zL0|mq?iD&Ujhu)>g|`0Da%7;9{~CN4B_~mN@bTm+
zE^)ukkG$4MZ8S)`f`;I9up2d;Yw|f^RKy7$hE@jdbB7!R^<@}p4m_fZXZA|o*{B4<
zfM*hUZV{Rw_5k6$Y8@yxZ3y|=cypHce2n^aA678|N%<`XRj2<&3~*Xu^@04$SNFY5
zD0csjD5xoV8B(eEd?W4Z$FV}+P-Z4-#i^310sy<5a9pc1aAguD%yytPB+JJ{@F2Ib
zEIfv}7<NooU{lRAV(ruTuN4mrB6}DZJ+~|*^Y3Xnu;)Hk{la2ZjEGyR8!SKkFz`P!
zj(vaxm%bwoj>C>7aZ173nrS0x?e|nDS1R0RcKAXRq;86(NAVVR?ra3Uy|5cR@vJW^
zNep=TKNc-ciH^psubaeuby;|GpeJ2Uts1+zU6O6BU`<Q_)&y)#-bqqwv>(&`9TIsD
zp{UdtW5_aZexZN%;Dtn{kWDGw#%MU~l7?2n#Gz;9r<<=2HA*hN_u8gk=9+K=U+!dx
z1fm?YC(>hp^%d->EOkGQq>CX?Q>}q?!`&reo+#wGT>lfMFWCnt*`sS767JuTFLl;*
ztlX0tZPm7&vWW()ep|siB6F8zwXm1tiPL^4S1XY#A_mASf(>g2;M&OH<Z?z;HD6JJ
zBj;ZEjRQyEZM*#^e8NXf(IB|Q9G(IgXY~4SD6&`Rt%}0cs*rGJdIysHfM+0(@lk%@
z&&6ly=cFs(i3^D!6gCp^V@^X=$jca|VrhYo)CUwzC#Zd9cJiOV*GYDfQT*N1B2yV#
zlOlVF=JX7Ibb(I5mo%m|6>0p@T_zhN|0CN?OaHjcCejodpQK8ap<jWJ|1K45ZozoO
z>QzVqf8VywO1y>q8Isd$pdR!h4xM5G?xv^H>fUH@p!W6G#*X;|w|Ld<%1y8)gkCO>
z_3&+LV62do;`p5zIbd8VQXVNYP;hYXWQXWc5JG~~Y|65Cx!jv`xgMnF?U^e~6G=Bw
zjP{f;o(fNbC?hgyE;vF(JA8jo^DO6ITPNktiFX`JTqOteHL{XyJT)Zf3S?g1gjq*u
z?)IPuLRGqOg6T$RFgs618XK3Lb<fv`>iXd`04=<`!HwCW{hb>KByIqF<`m9S_@v<-
z?Zkd~$jz9Y4blqFl=^Qym5>Y`xjHM_J3#q3PdIz5Tn$Tnapq)S?fJ~^XYPVW&ss(Z
zFMWcKDS~h7<%C7t;aiiNR^<Sc?F2fD!{w!_q2#UBK|dReIB{<Bidn_LElmLbJZ~Lz
z{<`Wg>0G(#k&mpv%YuBUQ2tbZ7tKg9?(C(rH@d=EBfyQd=W_VUEFkRCPQp)mcpO8;
z$1aQ+j+svzSQ-SOchVsKzP5(eON*Jd^Z=<%6&w=BVzN-5q0IH88P}af(F>V<!CgyO
zrGn?1NF&HP35d%wEfcxu;Lv@o1F@d9WpA5nf8#Md2*bw6cNS-9Jz2q>EJXzLgP(XF
z?JuJ$_ihB38WSqcT3O;sq?;lm%4Mu<%N0kqu{JR^{y;TIovO`muII`TU?lKkeU2MS
z3Ql?ixlD7Ld1y*HoF%N~sTjz}eVp-L$Txpt1QSF9RO0E#d*I;3AqDt*;`}M;Wf*kH
zWJuOb_!_(0tE|C7@xv~$(0+EbSV*On#Yvo{%yqb>t{M(S(O*l(e3_D07g)s@CNYnK
zne1SxjPN6lh59Ury!tP0UQ{xDxPH)UH$2@pIdT@qvz$RD_P3RKf&Z}8Mcc;%aD6~y
zbS#TB(F#QF<Q|aPW+5E2*!9uRoQ>#NI39phf28IX`w5{^iaL*~v(8$O5iO~}mK9DF
z`aLKn4<ElRs~8Vp{L=VD<lfO$gY!7lKTwX|{7&_4fh6KEA^Nr#2*bCEvx6Pfgd0{q
z2q)M+0IUXZnvR2vgGzJJdI6^GPiyUUW9tpk&Jt|TDP_<^3ug6^qX3?77zwE`zgC;J
z%mJ<E&&;y}_rRzy4w~&n<j!O=@elk46U)BIgA9x}^&Q4}(bUMSje*^5nmVq&%Zphh
zP2&yb?*7DS?H~^tAE5eh<8tqxhj)z<qd>lgyIPIDBQBr_zf5#};d7Do(j52N&2zrb
zEU7~6>c3wi<o(RLkN5BAnEzN0R6JK3|D`GaqZR*S>|o>gUt<U7f3qGq|4*!kC2bx1
z&0%!!l^QI8AlOQZOj!G1vs^h`A~BqTx>(*(?_5`E#tc0tIVW;PxF67$l7E+&%(jHT
zb!wnh5kPfh@hm6zSvR`o+wrN)C<i{rJ444L6!r|;`oEqujK8&PMssQy8SbhshK62x
z%wKokuZ4XEC5NRb$lJDcMX$at-*alAIyDrD!*%;{S0*A#+idLq@$PfHe|{Tb>~c-*
z;eWx%kjcdd>I&$J*5rRKMRxYKXeBFBqkPF%W`94!zWrUhlx|wj)8q{fDtz1jO*U^_
zDn}M`XW~Sy{A4;;?Ur%O<3&L=0i&z$kbcC(vh(btd4}ROibX%)&l_pwm*Y#blnp1(
zpRCC6u-Tn(?q-+&)l6d6K=#6tJ<G{(U#fdU!`!=bQdseB+k|z#c5%@Yv;m!NS{8TI
z4P(>mY#;FCT__};7HU$#_r;eO$;1dqr`^*~6JhUoQnX(|UrTmbNvIFV5iBgn9<3;?
zX*Sb9Sc>1gmg=F$R8v@wP8?_E9To#`Gu5s6XTnR?Ys`>)vu3B9*mBil-2KbkY&N|I
z=@5+3pv>)%zJH<u{xN?6q|V66fhag#j4#=y-|`v^R@CZHY(c$H>{FWTZ1!<KCENeP
zgsG&(VXCQ?J63-#xm6K#KGl2`T#rrl7J-V3S1h26u&}JelV9Vm4Wv(}Ye-riH_SOj
z{$L*GQ9gNJ60DkWRZE%S6w%?D#KfA~a>*8n-H=BOmNftV^95;}50at{<}hQK4T<p6
zhYKs0iMC9@Jk!YMy5*^0$8$6$*G75eTDk%8XFZ`@t8#;2YF(FGNa!S+SM`D|ch7Yg
zrdGT^e@oC6P=pMd9eC8Xl%h1<*lq821=ImY4`O}j^GcF3oj}<Kk0i?RM7#N2{hLFy
zE6uDn2XL~5k*ULBPjL*&iPm3E*i<X~Vl~H3xTD(@Q?os_w)8!a%7NvZ=KTAn9ece@
zM6j9eNJ2djJnZ93nVM!laX74zJ#3eLRr%u=_FqM!nnBmCH<44J>2Q+6DYY(5>KbB0
zjib@xGN@(XY8Apw4PqYPisAxrdtczu`tu6}BF!yoS7YX=Yu_0CsnYwJ5;H{zC=|b}
zd0nZG6elWs8Q)1ntUDxA#+NC@Zd@G<s1+Yamb!8v<>%M0$FlAZ)vk(<JOOLkwE4k=
zj|<!q?OJ2tI>Ls<s?xCTo_SmyJ(NOR3zx5HvN*KZrcM2me_%39iMF0Udn<|aD=MW$
zc@DpSjkp73S@;$FV3(InVHx|PfWt<Ixm+s+Pegu+U}=49`9f^T77Fs#hbBWHF__mQ
zwU>rX!}g{*A|n~%{1$%2#;*|egzhEo?N@{L9e&jCsZ6FMGmD*9Ihh@igt21EzCDsW
z%n1EvMTG;G&F>igf`Z*Uu||cO;hpx9j$z4qHfkxFhE)IL(xUzHl}U=u@+h$z-tI8<
zkPdo0beQz3Gy9WZ6@c`9W(Sj!I_#k<i!7ke1U%55;)~Zd9)ny+%;>Wrh%uYr6J!(O
zF;-cGCiZm8mcV!A#vN7ePS1=Z!;YdyhAn4oKvt?}K%~RJ$fqh`S%sRBcyU$USp^|E
z^gE#<4`z-rp?Fhukw~1zRpt5ZjpV&68(;y2=yig{ilcsImzo+)YBi4f2x>*oFCoY=
z*O?6+Hl`*T@XcfdolJ)VP%c0O(LW4>Pbh}L=1(bOq?SwlgP*ARgs)1k4$~AlO6Atq
zd?VqJUt1x1Vj>09R}uq7&VcBj%|fI6a$H~a=S_7gwJdSgJMpuce*#NX)-I?zWJxFq
z6t~3WAp<U)Y(G5w)KuCR{eH9V%nM3&+{^5+VXNP?{9SIrRdbF_`j$6tZd-j95)MtI
z+0Z~NX%;Z*>lUoW6+7!1#=Mcqy9iUP$ka5k1#*sqrih-Q?MPK;W!?tZ2_~xb*@EBL
zGW17`@IOR8d->tl^0rA%(1m{LEpR$2Lwjqo7U0{yh&Fg12%v@3zC(OIh$>oNS?*Oy
zh+N6!PB3r29?mw;M}m#QHvL0o;hZy@2hWo->vGH^=>_-xTYZ$J8mRgKetQ5WJq}tO
zW|Z+056LJ(comZ<BI)9L6J<meNUn<XqL~Fv*8%mGIQF7fOKaHa_iD#MbuiH(olj-O
zQntr=yr^Spt4pOw^Td5W)3M_N)1L8O=^Gd;5W5NUW83vfUU?0Z5TS;wbYh)*p)uDj
zPeedhqw%P3!Mky#NV0G<s>%y=`k_rG*05snO2PE1ys)Zt>+iY(jRb7NYe=#!R~?t5
zS=V-nZni82$Olti{1xU|NX9YHMV6&T@F2KD@YZyin|PAO6+J#UwF4O1CDAx<$h7he
z0sJDqmUpxGQ|aZn54k^2ro-f}rzGv3&!5<(Xc8JT0D9OQ)9oMBFa|&BC6$$t5(sO?
z3bw}pfa0uw_iUJaKCZSt9*H-L4Run+$k9eBdw{eo+a5+=IQy}X_prdEqiI96=V3>E
z-%esE9XQ7WS?cpI+a?Y@H3Y@_^_H&|P9YVU_`IwG#@k<BJYM|JyJ-FtQYEL5(<YyI
z?<abrs_`rwo&!V+;FyfP!BW>9@t(Z(d9(O+GgGAY4n%3j#G?(N>2I-xdtkdE&1b(C
zet|{PTgHdkL-Go~m2tvmGlL;wZhCtw`tB-sroP)`I<z``W}lDAL4WEC%{IA#_1mkk
zi71RI$h>MaiJW6U%fOn+UkOtPqGHJI8}orj(Xj0ZNh+Z{>d%@`b@w$<ERaz+FU4Rv
zVVLLr9evcli9CjO<}I$*7j`y4`3rn4=x<ImW#_EpLRxf8<-gBYB^+GjdOQ%8fi5Vi
zhL-@Jcy;|7E-MHat(3E|cga+b#-R?+H$}6hlZl?jfte?@TI^9QmB4hC%6TinqhRey
z(yHheJ@+3EsXg$RG}ppxopLV7QeP2Q6R*P$@IXKfO0>1Tk`M=aS#Cr-#EaLZ=hwf&
zIT1ifXVk}MB@Bp_+-8CqI9YvJMmYz-t4C*mxh9`5kJ6m31R9YBnx1I-!B(Tn)#1$B
z6Ubk(xv8FDose1ZPg(SDCp@XvSmhG@b1$RnCBJF|9r$^4<B6GQREwLj=UJg6?{Doi
zs;T(P&op32A!hTtQB)QPjktz2VX(9VU}x5ZFvEF5BAF<0*-kjb;vSBSgHBp!HYuL-
zNtHD2YJAV%+Estm1;evs#jP>-Os>dbW18e~dP?3~Y3b1J;a-bIL14Unp8Ps}oSynF
zW91;`t9!$$Mbc-gF8X}jfN%mE_7go<E9jP2cl^VHgh-s`qvjPyhn~S~4sRkU_yq~$
z9E7*HqBTWJ-y15%b`4T}kp%bGOwRE&+jn;q-9m@-JSoh!L~Aav$+XhZ;Diei%`>6p
zL>W5q|G-__%?({`Y1;E@0oTYsti^3nqQA!QGk^^T>48+>Ppt^%UXLE@wXIcGyrE5Y
z?$VTL27XuArsQ0&m@O1otYs>U+aOI$4g0PxERrQ05Hwp+;V}ZyLs3@j*fHxR^}b-g
ze3%wHDpzX1F!bD^)dMI-glZ5s66<(oy5W2dUVAqF{f1@a;v+OSIaz`(a8Yqys^~L$
zvobySsv;ukIkbal<#|HIBpANuRT69jxQE}PJYz2H7qu+`$LCb7DuNX3bEpo4$os6V
zF6LQ=xDHsb&*ZE8Fjpd`7TA|J2oIKYgzz@Oao=3JEVVjJ6kMPdfMnZxPQh+0qjw5!
z;FAsPn7dc351Ob8YKs`ZFFfa^2a!J=+_X$)lM_xV_yh&8meOBbx5OXLz8x1l(mEY~
zNrh1Ei@L&?1x1*IK=qezRfd(aX<I|}<{k-8xZLIjZ1}oQnFx>0GXFU|&6Qv5lx!jO
zw$J(<^!D3)ddjEN0v*dB3r~tCDaFp;t);?*`6XDLW=;#17{Gf4T-X4rT|9NWbG1lJ
zw>7YhL{!;?2Y;c-vuPdP4opBEUu|TGdU!%S!UJEkZrca=LGVF<E@bT}ANF>SJz0bL
zQD4W<q_=qLMo>2s57HRNt|xj6>3&&t4Kr0x8{pm>!*(ry$(*tX`pEm8DiyOu6J*Pu
zg*x(1!J5?B$(v)3O|QtCg4AN+i2c<$f$M*69^uBKprn3ezTBjH=*cW~fJy)`DBbxB
zk;FcS{$h`UpUI?O2K>#X9eMCR)5Vts)Hg_-sj=dG6uJsVUC#&2K9yfzkwsuq`}%+w
zu@Q2PSE9^cNNEpEFlQsiu#(daJ9i-I#v<|KgQl8AF^VS#f?WLe1s~?e*!~eQltauz
zGzwDL;SGDI_?L@05Wxp_3L6=-nDILu?GK-p_&SWKN@kgHQUR7a=D!xleBCtS$*w<N
z2&yJf$K^dje3d6%slrO-IB}=3-*SE$?ABOis_v+CGzs42+K!u$2ylQtn?i3(;A-U|
z6oG!iSLhsntu0SS?M8Dydx+4*&OV1y|8+93%Nla3<LXWXZ>B8OYzEo9Ry8p#_`_2K
znIMT<P5zH-rwqi$yhEPFNgaXeQy0W^1<&z_Ab}ntp_Qvk*L^t%3F-OPrgVNfOW?nl
zBy)`dpG<Wy(Vv^sbB)ax8C(b4_`+w!;oe%m_yYN*SUIw{E+0b}*3kl4h8o||lipBS
zC!H?Jso+PvPwEDnV;8)YK$|>x7YJ|C$-ZyRY<0bDBR$%mWWlPIC3jp4UaNE|FvZ#8
ztXXsa8gIPs3?0hiYT$tD_a-tcV8gxlS?jwBiHVZ1ORE}?p@Z&j^|+0nTV|Bgt@@i5
zV+xmfm|rYbrp)SK$bK(Za<)I=oN@DphFE<o&NSY{D4fDqnX|~B>ipkswRtQALOtE6
zsf|cp(~t4%>3yH@cBcn8j;N3EzoqK`<j`5z*_r<*htB!mIdrc7Qx5$~XUp!NRPA0-
zsnsZkvFd*#4Y5;c6vFKl%V;b^F&ORsCspY$wvK`ir7^<0h4hDRR-KP?bgN0m#I@0a
z{Z`kG9L%R@+`4ZjFJq*{E&oF%G<J?B=b#kGR{Rf{&?dfyL4NwKEMjO3a|iu(Xy_>n
zTQtF+JP2uQ=$OpbUV-r&n$hn>y5FM=jQ1b$U#jI~qhhG`-x2h+x{=W^oXUNeSGb5s
zdHitynhcOo&QUVf^2$n2hOC=z!TfcFxI^Ys)%+pdbLF5#7k~-Pvu~nqnw&?uC%m_N
zn0fL#WhQNwoJFotLMQVgQg0h#s@Vj9|EUT#)uZ1gUwVGL8p_$*O62}q=Rext{g>r(
zWWr4*mz>&CYkg#U>A6fdon8^W*+F5G_A%u|^;op@F!NaS46@tq4p=-~b{CYD)ZctE
z`WnI>dzB4c%PvY5iyt9ae@V&!QL3Y&!`iaro32e~X~Ux;<ri$qf!T%|Y?9e@;fu*%
z%s?1*3?t)cRD)u<oW~B&xldKbzEQ(?<vJ94J@Srn-1H%DJr^mBe{EcE!W(H$4)$lA
z+Zk4y`%WY>0&?w^D<4y?ok-J$<eU7pHW&IIf9C9FqJCJQ^^py=i*vBbk3;cGNyM@R
z#^H1YxSYCuH4(r0aPwEEM6<OXl=~fsaA0&BEjbJmitSsVQ*GDmE(+VZ&<p9bs+Bb@
z5zRL!p3FHm3k0N`>ed4oA^BW8Y=VpVLe<oNkvLh@VPs$NgZ);N|0SBm=H2cAz4uvT
z0C=;PjR*^AFhq2yoxPCfSgO_Zi;IH%o4{USjW%6G<dIj3OLH}=vzpBzlc`5;6qy_&
zS>v=%7^)jLW4e-+6CD1F%0`&7GZ>R1%$N%n5eutg`2z>wpBI=6%s~e)f7-+(*vSi)
z1l)q`Ybo=N4+3$NgU9#yJq;^ZTp5{n5Oeh$#1u_1&fM?(v%SY1evxUuSbf24+o4iE
zk1H6JCwK0xbaifJc@)_y`f<gnj^?-uR)c+mpDS}W2_f>{VRBI2;hMm@k$3H?$ES+5
zHn!A-@Z_ylvjXvpnyjpF&fGwcP(FoPU@HU>g8BWf5yfVoa9nb%^w}^_&qAt0FXOD^
zeFU(D=xgz;C$+RR*4`I0Z8&Bgh44T`ZEXu8NI&Y;g4E!}FsJhek7LI;e47m^Zpjm1
z6K&n4qo%>OYth8+oa-_<FxI@j=m}zy+>@#M`Oe(ss|NV_su1YUR==Vi^hieM?b@JN
zq2Fcn0!hm&l)QO2om)b`p1A_oFVQ3PXB}6Q*KNbru*5X_3fcJ1<#v`fg#wA`g$uzr
zg^j6cv3-<(+3O!1&;x~NFHh*G-rB~BU{(WK76o?X3WG#g66pLI2swTi`69Snm!L+;
z<6O+>CE3=W?n6H`zJ7q%Y5lx^ImjOZS5^JNc$^NbP>et6PVdR8)HLpXMHdl{HjpP@
zL`s=SQJkq>Mk*-5%cl=0_p62bNno(O7biA=aBs_`b2lw)qnVJ_+Zi5+!FoIL0^kcg
zYGyN4SJ>~M7~|(S=6jLE!8I38obPZ0#p#dSRYiMhOM{+VxhQKyBq^x<CbHLf)Mg;4
z1^yKknL-@;M8+{y`q;+;?p%aOqmMR8C+v^{)QPnLwVS6p?q`D;jHx(GQoAfa9j6lp
zssOqxqi~XbMds-se^dbs5hDlYa7~4-d7OK3p(wYvq?LzfXS^i@1}eCw$^-fDS=k7I
zVk<Rmi!2CZPSR-(Vf&j3NM3p!kg<U{Z;-J-JOkXW)#2U$Dp}dtPw<%ng|REvlO%qW
z-)x8#_}x}xt3Ujm<;i^v6N<#8vgC@!`;|g!cIwJs4HJ5y7~_gHZ7!k+TTU*{gizfg
z0*VeYd7T)z41IQS{226v4sL~X{$0L>m{4h!d8k|OVfk+ZOaL-6@mR@qq$MOew$S&j
zGS*o0S)!vN_Gk^(ui%hJ2RC!h9h!CgF3IkDZhU{&Ml?R4n;Tni7m*@Fuvns6+^SJp
zl%RZ~!Xy&IzqP=;Y*LRDGTDFQ#%zLseYAB~3H=07bs2=C0#*!sI|wJ(eg(?RY;H4a
zlLcQ)fOHCsNTF~C40=3H0jGiJgiBUq5-%@v++Ev-nSdaVW%h?((UIg^5nZ5y-J7C!
zcya-7E4^c59}S)ZhW`vkmL0*Ldz0vl38!iumATFF<Qe9eDky)gh!fCS8b4*prQ!%P
zvG=ADL5U<UWy(*S$)iG2acHe)y8}G2iSrz4`aYC;7D}YI06j+Cg^^0k2_oU?J*DcM
z3hrwR0U1|FLd~}ix%JoRZG=1j_F~TE0LJ6XWy{6)IoGXm9_TGt2N)ibhOCYZoi-SX
zjkZB~rv5Ol1_YnRSIYhLt4Q;{s9;RdK=2kZ_OLxkvGAsE!;OeJcNqJ304W_<C@%n!
z!4E|Q4kEEFPTWt)XNiD}%;eTsDL7D9{u2?p0xuC5j7P0X><`~wb|xCaVN7lHd=G8a
zpHx9nQPXqto-!A~fq$usUIap3s17C7(pn_c&{*dW?;0&o>*w}<;o6|NtZ2zCRwg>s
zUoy2&Vr-$sxuwq+W|N$f_vhSg{(k1@8Rl5Ju?l^%z)^p2pD(vf$O_wF*j&}DGD~aV
zlfdou0vc@Iv=@2km+hkpSdy3ZoNY<ouyR!-krkYB`Wg8KqUOYU)rEgoc?-<AvSfVj
z=2PRFapfUPIsW+*9V9>Ljxb6w92JwsX&M+L47A7b1a8CRB|uH5#77<XDq+<;L;|zD
z^Mb?Q8-evpxtKkS3W&&LMy*KV=rlmMP5>z!B&hs^zd?9T)%r@KFAS<$lR?;}xGwIv
zF)!lyC!5a8VV`ltHExhi!anXrfNUyjwUBG_q@x(kO9zYjDTdopZbQMNa#=Mycru>=
z@&rA*bn>@c=3LtDn6iph-g}%fY9;#N`M-M4IPFY1JA#O#Jb-2EOA-M~T)9aJ06)ZT
zI%4*(MV&qyZyG3@A+o}BAvLl9r8)SlNMH8&a$j_jg=&g|dTo0I<fplM&GZD8x}ca*
z49_xWz5Ix%pd_{`tnBIhpDtTM6w4uFHCuZ_G5gukB`2##gvDQ_)xl1Nn93qs84HkV
zRa?_6rd32*il~tF>Q2wO+LoIpn^`p;T|Q+&)nI?dS~1#R6{IDEF;QAf$3t|7-%J9l
z{cV0E!)275XQ1^CA;hX}<>Oa8HGyNRg()u-9rB>x9AWt@TZT&#wz1A&4hptbiy@OG
zl_EW!Ah7dwK41oC9TTV(i-{4k>0w1xi4i+Mt21T73(qj=PhxpcIR_uobIv}z)1445
zxfxCgb?OJGS4+)(xU$()k6I9)igOg}(d%6d>dP8Ws(myWKJMb8%C?FMn_b<;I+%{Y
z!EPmxpT6R_|5lr2_b-&}ihAu-TMMeohT}FL6fxRKU<s-pLmJ=u&Z=~p-Uae<Di4>L
z7L*mUwAur(PsmbGg^)(yD@G-SrF^uV_`KPwDZM-vVfqKCn^t6jq-Zuy;sx&>c26Q{
zV97g(dd$Z;djG@;bgc!;7Z7Y(ov8<e1S+=QZq5>(umzm$Hdh>%V@Hbf&Tsh{CSm&w
zTa#32R`F03y&&8ZXYS}s1x=AJ<Op#1P4!yq9{W9^k-O=gl(ICey5T1tO6`OUPqnsr
z1+J05`28kos&Koo&I{|?o=t=1Oa!uT<3wUHE0rvIygJA?O)j+kGX{igLpl3G?m#tF
zYrnf4k_^?wX3ntXz*~8T4%LhTZtJy)z~kl2ZQYR50VyoyzBLH-k(TdOO!dQv2EHdP
z$DL_XJwN1oR5RAZv}^<`(8x|&$6e0y|9JZfs5q9bU0enW?gV!j+}#2McL)xHyF+jZ
z5Zob1a1ZVTNJ7xy65K*afZ!eo@MegdoO{px*FEol?=05P)z!PIcJKXl)&8nl7`N+u
z<%5%kUM15PoXO^*VP&cNH?3m|cDm+OIaBA*)5;uPlMzk>9nEPX9m;MwWO^%7!bIz@
zrDQAuLEc*cHP&JAI!+!`WBvh@bANlc7zGWR<X4?X(F2DhBEb7>-a@;xAN||SGDX|J
zg3^3SmQsDS5wSBqVPCLTerzJ!br_1iy5J}@ZEgRuHCzmo>~$kqfGe6fX?>nEmcz-6
zrpxacW$dCjqT+I3foE`LsvpW3@bQyhu;(c4+vFrlH_uoDL6(;KBWItSwXZu0JHm$q
zwK!%pPIgZ=WgfilVfXRJq~pi;=W1Cisk(o_<&dP&zSIVN1>5S9HsMxZ!qGlPXBPd$
z7DbAqd$2|XdS%B*$tO1n#F<zhZk|ov3ZQEgJ1E9X@1Y))HtyXtfn%+HK%B~@FIA&`
zdvKQ5kqj-^6V>DuLIj+fuXwK5JY~V&_oV?Uk1oFh|BMoOc881wZz<e65{=C-^FWp<
z!9{M9b1xYOr!b-9ZO;&?%<#uydyT*biP4Hu!&bk~?Fn*+9!_F|mhuL6G9!%@xFH|U
z36JZqx3@MZSf9H(BT<JPAs$HMZ8dgVnXZ{mjZX)u3VQBj5@s^Ifem^YDGe8g;PK9V
z>3nw6PAth9_5(5=PH~OEM$i^70q1lfrrL+>_3*H?BW*b2IP5F4fym1(9wVJ%3*US9
zh*yg=!anyADEAJ#$}q#>>{-i<jMSha&g$5Ax3MWR7km=a9o(|l_3IUg)uYGfg7GS_
z*uL7V<G&Z9GRFBBqgR6nyX8`=y=Wr%*@~W2S~Q|3KFM^^v>c{B_2DS`0V2Zs&4hU)
zjO3Yd?b$im1Z(rb8<AZHGfP?Sx$rN#dFo0<!Zc*fqoarS#0ExfPV4oqS5zu8B9C34
zXx|fW4BnjR8j<h1rci<<Ly33PLDI#%)(DoD-m#Z>`3#+~NIfz&Sto!km*|Z~-=nLA
z+R&~0?cmS0eFVQ9O*G9c^!2}y(mS$ww|>gQ_3Pzm{Qv%7JpX_9V7%U(!+Jli-?{by
z%T%sGce$xEGMiYU9Adihnbs(r69z(qMqRor_`!H);(of5>WllXj=P2Q&5s3?kuP7{
z*Xz797~wz13y8v!D1f`ocwTX>iM3>K?IAsFM0IS|7<W_mvaMJ3-SqTl(N7n~t*sNl
zae7PDoZ@kp0Nm#Ds0~pQECOw;k$03~nD0(C7xj6YD@?+bMQ>}luxo;G*kmyBC}|`j
zti0QvuJrV@OP`R&7Ppc!;QJ`#=iHpwpD0d~FmW$@ZPJ0kF8UOsJeRQiL@yMdp_9bm
zSV6dTyjs;}dHsM(Zs)PG^64izk*VvkxDsVf%5NuK3bdFtP0!66lQc^nv?MtvZk6yJ
zsx0l9PqBC@B~mk)w%WA!0N-^Pu~Qz@FwiluJmj47*{Bp_V7MlmUvgeiurpSCfTS8;
z(&B*kT6qIDaii?0o0$J3p;Bw%kX0Sf+rK+lk%7xcMW|RtsLI<LC-nTSwuC%e8sU36
z&(N%7U5RXlgO5T~tMeR&OvG^Ed7(#c4HHH1$<lPitD&D3=WVPCOqi%zMN#8af#IdQ
zL%^%;1IF^pQUQ{-v$5%Ea=C`Z_Z>|}diMqamSS9Fdp=#&&$v75D?s-fhxgcnX&PSp
z=#&%XmnW$<E;OQ~Cf1pI`zG3wxY;&=-|xPU92F_ROTexvG9rt~($)Dipb9_0$pPpq
zgt~CXr|<?NRaU<DlUcgtD#vclS7U$81rw5RaWYkzvZ(hyui>fX-mG^{+!k>;6wWu!
z-~U`_9yWKM23ZM~{k^;KM;})T333DLR6m=*LYii(85Xa6>u_0CdOe;|Q!eO8f350`
zctPnc7|&TH1=;b?Z*}lr>+whyZ&FSx*-ay;BA#A1%1}CCKRi}t>tT%FS#EZB^_(-8
zR!WZxS+V9ss%JKFmBF4j6d)?grG98q!AN2RllcX>+!H`V#{iT~Y(?Xp_J3AT^JGEc
z+di`CGtv8Tr#|0^hUE;Y->2;3sk5<C)JeFyp#aEHBJJ%kLyhH^j)+n|vnfX#pL<Jw
zbIzIV4Y{ESagsy1U3GrLFZMj=w78FC^lQ(oPw>Z2ul*VYMQlC$aHVB9WQ28{hH;HN
ztOUjSOI45A)aVQ4gOZ1FN=969>?)jkC2Sr&P(Szt^B(vd))CLiJAd;LH1Lyr+*Fvc
zA@8Y*cKfFPYdATpXFXnOV(T#$O||t5=2EYBo^)hR%dan56xFqJkEY$&fnQwfuwdMw
zL`FbCkhce(y*o^oP6|aF)S2#9nj9-z-pyC4GPhrsVF-jVWC}j6z~2XbG(lLE=fft_
zn;&e8dhb#X<)V<7)i>?TOMh(jE`GCp-HDIrxWn&i+Gt$sA|T|GOu$(F+eHim6hX5$
zExgW`J2;HkdwFtw*x~jyLV@wsJeHAqI3QCwV;C}#Hj6;29^SG><q-|vw@^*j;#J${
zF4ut3>5CADz^EZP++5D$tk}Wn2R&bPj~9=LCLOGl$CtB-VH(|3;E2a1%O9A3RdO(&
zA)E-9%6~<+@vMxbCIR!ELG_JNm@s#-QI&<DJt%y<>TE^u5g*eh!nKUaj(w5G_yM=O
zZ}r7Ur2T2<(?6k;L5=wl%R10mR^&MlFTO6fM<Csar;NUWQsg8J#<-{N)0NUB*aBAu
ze_R}K{}q3Te$wW!bEEW?K5-ob{1nCppR#eH1^m`aMDT}8q~Bv{E)+{E7GY@%BGX#(
zgepm<SMVq`t4GDSouG;**Tb1;JcoXVdV+HL+7EUd&5~z8tD0^TR>2A-k5B?u%_3)P
zq@aatEVhr#wCtJU@+%T!c`aX;y}Fm=;79J({d7q+ab89}N(P)?pZZ~N6FBrEvBtMx
zOyATbsd%kzwW2rzmZ$ZP3MfODWsW@&`IfFT)rG}`Dw&Lf%hTlf&rc21yNoo4bEi)S
z%sKbalb@*|2ItbgIa)MRp%aJJEM|4Kx7Op1PbGSW6<?Ntv`tylIZ@e9V*JS+4KtiP
z2CK=r%f8LS(G#;bi5@D({@#Z?f9`OiD}HR*IjUu<@h{;iLa2aT0ejM2XnNzP6V8aQ
zgeRR;csT`Et+2sQL5+20ybpuIY(@LnB)A|dRnoYQ@qm9Ch3#=d`sbDe345vCt^knd
zZUtGP6iBwHly!FJ87&QF*zs$`q0}ODJC1^f4aVxA_s&-5P-;x2&16B)o>(fqEITj{
zXWTFOL+d!|vln(?kUGZ*I>SCF!F0`Bb?BREwmhDyr2`nyfT)#QhUc`!1&VZ-G7$NU
z%JXWq!XCNlC5sUT!zu*&Lbt}nR=@v3)U2^<$6|F-;E5RuyUz1gCL8n1>5Uxd<6C#3
z${DoKAeo8&R~+#ZZ%}Yb-QDBG87SMyskB3|=)H+v`TH7S#1Z*$q-GYRkpTxdLJ4|F
zq3z@DaZfjd4kwoxLJhnbHAgwTuDzcxIM=Tv{fcFeAcwTPIMp_0Mj}wi?5416j1J!7
z?0sBiQ1LK=OnSFv#Mo|Vj3r5GP&!_6$E-;#Lyb}+OFA*Nt>L!FYrl#}FVh4r>68!D
zvWyBIO<t_I)UuMZ_7zd`2p0FI&N;;pGY&Ltq&cgsQ=zJjzvRnG`N9-bX%N=%Z0*(C
zT4BrxZhg>#<vc)e4ev^Oy_U!0fjhic8AXe=XLDi+MM3JB<|O%~Iq*gvSdsc!#lQ>Q
z_c~5A;P`r`noftI#;Q@gvPc$VGj7q7S8GdlyED2C!`jPtr1L!Ep4zqI;$BhSs6^ot
z5wyg!1s<FY5Ei}SSg4srIDr#R&OMW`?R$(NS+i&4mF)<5iDJ*LSkYzYa?25NsjET<
zj^nK1d|hr&Xbs=_L&5b^9Pmdi^p!pPkhlH*P;fzG<Et(#HOre%<rRJu-DPP^m1A-z
z+R`*_>f2ItVSA_mU|dXBdqK*h{3!PBk!StUa~kLFoXHF=E2_wuv#_0LnhCNlf{$T?
z-Yc^cSi0=4L{;H9d3D7k=r^)#5MGgcQU`Y~iZBb;V`!S$_ny*<al+`CPULGw=Q3gJ
zpk9n<(TgWbxC73&ko&1P@({_z;Ds@S#lmxW*(Ted)`}nKpw_W#Y{?tR71h$ZaD|Zh
zSlH}qkk;#?-2$yo_$!%_-9hU;g>Le&NU3@;kuM%=VhKF0Qp_YNPak&1A6&B18dob7
z3k^wel}6#puuQ{c5%LK3RT@_l3u5MScSMHUZd;^+)<RBtBW+7{J<-=cs*2W4@n&#>
zW4ypReY1<-MM-{XrX{Q=h(2~0QIoqT=i(tFrrl$lBzdW_^^VFNv?q9j<f_90<&ynx
z(DG;1x0)(0DO|8%aHT+DFdw>|*9+fXX|fO-?1dh;k4pkQiLtH~U5(Hq=+xfXa<Q|d
zvw0|Vlq32Wm}!h@1+OU<acq!G!+SY<mDB{9>7-u8s&|CI2Ce6r+6zuE#k-7ftL%T=
z37HRh3~dhTd(l7|C!}q_v|96)yZFPT#gy-<12^S!SR|#)_$#f(<X0$<ix>tP1m5Y2
zeWjz<%!wUVQEu3dm^4y){px;E$!ccg4e3B+tH-w%;VaRZ*xMeP#87&*uHxJSzl?9L
zxITi&&*H4hzL?79S@r5>A-cZ_D}JntP-My}wl;Pp)w{ewb0~=|TYQ3DeS9F#>)tVI
zzo2}9Y1_p$ySlUMwp|sy;n-(0Bg)&81yrM7xZn#(HW)I2!T(~bj?Dul7PbVwX@8TW
zUr}_kNIb1O(zjto>)5zqyyn?7*G9^0^mQGUO;>I<zpdz=1eB#BTKIxax~T3Tw6VTb
z$2aqq)OO3ja=n?Updqq~2jtCV>jY1Rq%LED%`%Ee2}R;TW)*&`CEa<u2$Np0oNI~)
zNI?7A`;CZmnvx4aEK>$JFEQT6DHi!pPdE2pT^5@#zDSC0$&5W8K9Rvr(c;*((P-W+
zU53kh*Fx-GTizr=OW~dCn8&E#7VX;@`OG5`kNIW%)h(2PtlNx6^yy~-{!Qzy_e;(g
zZ>wmQ3y<(=23~TrdVipGs0q3cH*YPDy>q3@QmHcUrZhs1>!haBdceMsxUfN>$7$j!
zA)+5a^4K~9-UphxhK&+~NgPZ3g8mc=3$wuq);lPTKP6QOp4&ol4pD}9H#}d~mHH66
zVjy8$Oa;nJBX(YcyJ%nZY?ItIPJ`_pb!Xw0_`(Sk&D%=1Ha-8dNX?0bn+V1Lq9<86
zZ@5EBTo|l^KEk{D*`>PJ&-gEpdD`yik$Fr5fZhn8z(-x#?QPa749#8xg`Gz8`a3xI
zD!#gL{!#@53qp%uSg(fV-vlA}vK4|H0Csjs`AQ`+v+MYpHp-MecpXbYJRdb4OV;XK
z@>KEaxGhY75#;kplTub5C(YuzK+#eQx0$`stM0qE{?rjlI6=KSRcV^w#=r<;YEX(L
z$YfYeX)}6CaN_A4a0e8;0%c;TW&GxgMOkZ?pc^-goUj5hE7$AZY(Gbrmtt&^*1L>|
zF(cKe{gYxu<xw*>Z3uns(~A!b%9sk?6-#%I`j|7~yQ(?uedcbSzL17x(?+~!9Ere(
z8`xH8rsUT<57Xu5LgJ8`^O`%5<d8x|a!Re}oX>nw&-&=Gi?kOd&q|(g)JuD!(m8#^
zB?BRADlw#@MNSTQIO9u{%%-g`jXMozb3ziu%BX5cr6R5SLujXlO?_)ok;=LLLoema
zJy^tgx4u1U#*r$jADx^esLoZ8rF)J7z>L2|^WW_ik7Iw<yKAy2c6M2wMD;wVAot_d
zYK$1C{sERn^_9{(l~5RW{p3b*p3ks)V5HpyJBfL7b*4NwbvfF%PqTW^z$5O}qt4xM
zStz)WYUo>LBou?PAgorrZAqn_&Toad<sFYPIw`JFy>$SO&b<<{Y*P>#NpVmU2JZu`
z9e_C4^v)*+ryXBW1x#@eI}8o4p>A(rABYw3{5!4v`GOWsUN)YeYpwkM{(=_%|LO%T
zMOq6E>pb_sw05WfZdN}5hi04I`dhrIS#vEGjw~KD%Xm{;U2@7teG$gn7RhbXo=hAT
zKsTE)dN`-$2>(Zn10?uS-?kNV(L-awuk3keMw|YL!dZPu8Iezu2GYKaF~7}}Ymb!Z
zCqMCvIL9vWby@FXNA8slJ(j&Bz%0QoNyq(CI551O_NDaUE9wM-$tNmn*c5PYN3lOI
zC!Dh~D{`U1AGTVV3AOvQ2Qq1rBoCk2>JD{F`8TiMYD}e$BdE+v54D^qlBFNMLZI33
zua5fUNA^51;&H<}*BRC`c$dX}?<ES)*m8X`tZyL#kIo-`yP`+ikQ$@kp75m#olPaA
z%6q%RImpcTHYrH_(@3PJE?P0AW?_vwHxA8a%sXE!X=XPb0qb05;}@QTWYX91Y?y9{
zLLd+b-B>C;6nP{xbjob$$W1s{O&;@9g^Wn0=PCvhIdl^xKruXKDijr^T-8?7w*MWA
zh5$naPNIB;Oi7J@m_>;qu)fJs`5uPy&SQtGMn4ftZ*<*+kKr2UnLEK>Efmor*wEyt
zTleiSEOfZH0-MZe5^9o)_>u_GBJ4hM7%dtawv&vX3a{w0R(*<^b&wp4Om%@}ibpXp
z896$eWyY#~e)Pe_`NnDO$N|gpxMJgj`FymgSK1S-rzG{lh7P&!hj9eE=iav;#h0j*
z`YmiLCUl7D?P+R>8PKjQAss)C7HkVr)XivhqnS)fBrK8gFHQ6p=vhDntU+VG78}sh
z_MpqBMaVba?ZhpwTCHWoHkg6a(tA$NaF3cV@k(OL&sr|@%~6CX`I>%8*<Sy26Wi)W
z0Vk?ycDX9bjqK)^x^v`l)#m+6>nvVM1u|YmUP&JQRNF6NNIRXCT#4xH%N4XtC=;YE
zgVDM;SbGm%C+Obie2ew5`Ql6WQQU<~t4{XCL<AApT2N8%D^!qw?xNUNEBUhFk1LPY
zRnVmgouA*H*A`$))%CS8hzpB+s?J4Mw7yi<$mwb_mRBdq$HRP0y}KnktWOJzH9jU@
z&6R9-m6pzf+TPIrdH&u)Ai&CSQ-g}XnTLF=2bMpcY7}tIaPn;>@5agb2E*$4Qx(al
zu}_`kp1V9CJwljR?z@*($V?Q*di8R$>9Tfw7P>zkPWZ;raqIG<m0N28{k*q?h40HC
z$rtJzSgQMvP#p`!qV=+G-3hxHn`%@VfRpvD3096LmWKo=L{h>eymT)m7kb`FqgpNU
z=LoJ(9cN8bu)kR*aVa>oFFMObtiXIRy`IpKV|Wr_ZI(w9Uf@HohqZ2oQM_c$+c>|?
zFjbAT_YOxTAj~1h;O(npiCCX+=xyckrxy_sg$LOfXg8$ywT}6-{0vw`F$ep{MKuQo
zHVM{TT8{Tgo%fYQ)lI~Lja#%u2jT!%norg)3`|z&_GjbneOMq5&A9Kx(HSR@)Qu?Z
z)-VK5JV{RC^#Fdb&M(sW1AJ&mqY9Dg1nIDljIRw<PFpw*Tc$mk^3B^(Wr^GHiGT0O
zem*qM&d$mCvnTu6y9o&aHN2fbKot{95Ks|hZfzpr=tcerasvquI|n&0KZgMTsOIQq
z;szpT153Gp9NfqulY465Y>=y?yNemf6<mpmi=&x3$n6nOMM{Por~&eF1DBI=1Pil6
z9;HwNh=>4ylHh%Cc~|mZSzu)$Q-|z7Z*2Jo)PdYC^DpYKL%Q|5ydU~-K+Yec*#Cch
zIKCV6Pv+r(ywTuK`uub5;`n8YKitLfum0lr390}8_Tl_xi{JG5<-;HT;)J~K;h*sr
z=Pz6Qp%3RTAO6(mpTjffFI)Vk&o3YT(1+`v!!y?}Tl}F9*DoLb)aReWGuJO${HD(@
zAO6(mpTjfvFI)Vk&o3YT(1-h<!!!3UTl}F9_b(s*)aReWGxslB{HD(@AO6sX=bytf
z&o5j2p%2e5AO6(mpTjfHFI)Vk&o3YT)aReWGw&~3{HD(@AO6sX_n*Tv?=M^Yq0ilG
zx_=)}dH*>)^Zv5MZ~FZ5;Sc-p{d0Kc`wKkZy+P@B`|$m9c;@?Mi$Cmh_w?<b^!exT
z%>Ng7zPrWxcYXN(IXv_K1)lF#*Z-u?KZj@jzrgd|w8-!JKrr?_90PL!FufqZ;}@>v
zz=zi6uH=sZ5O}G5kNVXBcfmGz^F8w}v{VD!MRec|<iykfckv5&^Ie1sf(A9f-5?3x
zd>6SJ64U@Z-$i)7i`?})YJj`TT@7$|m4P?kMfkpp+__Q>!2i7#19C75-NCGdg9E}?
zeq5dqNc<LEf@MtHOza#jf1cL&OA1V%+)T{DN66XPzSsR*4G=H>s6vgM6Tp5~1gOT&
z4q(3n98irPaA#Sd8ZY4PlK8DK<iM}O|4oTIQt|gnK-&CUCGG<AzgOZ<M)+^e<1V=U
zTW#EhpMS5!-#+uZ5bkfaaTjF$y%K-h=XZh1-)iG7l=xdE?gsn6SK@E`{BFSfTW#D8
zX@9T8-}d?4u<*Cqxa+w8UWvc$^Sf^3M;j6*t{}*S3s6>4T<)O~6SyC9u?D%^O~Ocl
zT+Ljpo!lH<$l33DzweVi5OMG<jkSxbo1~SA3ppnTP{HI!nw^&usBLZTX65<_z{3WK
zPauDPPW`d>{Rns;@Kf^Nw?Cx85|GsQy+2ZaT|4;rU5($Re=qsx`oGKltnFX7znA;h
zV~~=Nygy|ALgKgczH9e?ILrU-ad7M4nKNkzGe>i42TSl!^4(wR?xt>#c{<2w%KqEX
zaCi6z0`4aAewGA6@bGI#+uA|g!PWZLzLd3v1qeKs2cEop1c12O-rB+4)!?^^e;f0D
zAxrL|in^LElZLfD$dyIH(a!wezy*nm)czj0IJnu!Il(h1+;^SiPq#vH?sD&3^HT=0
z<>2K5aD#LIn;)bGuq61~JwJbJ0Dew3a$XJ&avpH^2ig8i^MD6pUhwPoAwSN$h!2v2
zNb!T?jyp+k%fF<+CAq<&$M3bUvw_w6y-G;)V0G_K<W6BQZtm0u7vut03aJ3H{duC0
z{h#tb(|mWP;enI`K=OW-0jqdd4wCny-Jd48s}p>`B?maP;=H@>@;_gfKkEb={(pgL
zuzCNC+PkO~_#aXG+o<q=jan`?poKNi!tO8e`&(D~3%<(o;u4yAKj5q8Xm8^1Z}^44
z@Bae7Y~);bA>ViOLfrE62XP4)vp+EYckv4W1LOyW&0Sy%anUcl{=hE;kq{^T1m0cC
zU~t^YfsgV1NQ3w90Q9pwq|6<fe_R7UQ4Y};QpZmqeg`fj=MJ*q^Z9)X$^QwvpV~t9
zA!*3<^W)gBEB2>$kmEngK{WcAhSbdk4%9gy?c4?IKViuUw&B12{XYUP57(c;d&dR-
zGk76~|Ce1ZCqK~H-O&x?Vr^;V1|}ch_v}CxZeVJ_4m5SQvjc&X|0BeIi(!62Tv0_<
zS3=?k#O1&w#oFv&F@8r){);Xe-1g7$9|GII{`(!+KOOZ~l00|QG7t#}<iP)b1Mhc8
ze+M0;EX1jhEd;PXq#+Oo1L7ylA-Rx#@u%$f?)v+Gu-wmH_Ftg-JLDkg??Ao->K_37
z1E`Sx75w{I3Ia@s)^`8}ry-X-1m@g#Td=<WvG)XP^k;ZM9H;i5;q{we|95@k@54Dn
z;omU}3H|<v3hywYWMU8ctKd-rydwCB1-wSa!VZ2{8V@^UP~<iM%GjA$f>-hYKyg<y
z$f6)P6THG_;v@@#VEX$mqy@+^NJ#+jJ08UyEbYK+i2$Iw8^~UZoF9BZ+{5w?YLGAs
z08}*b`hCyZ)fF5F{gwj>Rl!S*^gwZ-1W*bn4U_{a0+oQuKsBHyPzz`RGzFRg&4K2Q
zc6KH%KoAh*>~3NQv;bNGt%0^cJD~mdU<c>`bObs9oghn^kPGj7>h6LBI)N`tM{}SH
z&=u%vXX0uFbagT@0|DKD?m%}3bC8RxnWGB`=mGQudI7x|?yM(cZ3p56hieezs{Iy6
z-DUi+JXi*N$wMsX29g4SBRmk;3cm+-l0XHJgQc4lI1=aQ77=lEa{-yy1H7`bwY~Lm
zw417m+Z{CF!p0`))7>!famK{BY^X7#DN73i2lLa@`-&+uQHEo8$df4_PFB`gX^6!{
zim=N}>|)ViCn0S|sjipGxkXbR$yh24w_p42Yc+c`avpz*JHI-7pzglk`q}rh;L5eU
z41*nghC=U%^0-}W+ye7W4r6o*a`hZi^}G55)3v#k;)&q-*m(!K_1%vzvrW%!W233Q
z%~aIPka3XGhbi#bZf$=WFnLF{C@fquq&%12%J08)sWD@{?AWnOl)ZKNEv6!1G4;ZI
zpvvLn13i7y!QR4_k5jo9g;v9OGvHhH7^*0k^wauYOj66(`+qINIlT2mkX9wzryG4Z
zx7lTUoT@RL-*8eIy*ZR#R4eZM+I9vQr;PLvRrwj4<q^d>ujr9WQK_>A8+Q&MFI5$r
zf!78eS3XR2Eg2D4{6*m>)r!)u8q^!g9dazWFH4~YGXaHos*`0sQ&={%jmgiX;Z?bc
ziVgG5RH^76+punk4bUsYa1`Zo;q-IWk!9-gxVt>|t}+ca%`}b3kv=|wZOBk%(;X7_
zfWO*hsyDLs-Z(_M#iX<IvwOT_)edNXov=qW`G7y>axSM{x#sh3K+SDbNK#0bWG)+@
zJi*7))yi<z4uy2shZ;UR3W)g)-`?yn8<+?pE|+!~E=*)qPdgFcGo-PyCJEvCDy^$~
z`oWg}&2hA<+f(lcekR0-ITPpsCp3JMDuvo>I45vzn|kIV2dT@o7@J72Tm&*qj@?&p
zm{Tw&aN<ip<PF{zJPh=D%0SHzLbaL6kSKO$R|)RCSz9lz{@U$pEBD}2&dH^QKUEZp
z8i92OYU8x1(R0*=u|{}5Lz|6Va(@Gh3&8s<@nAB_lUQThKxI^T>c|q~3T<gU+~sip
zb^)i)5^nohN=gg_ZK5{~GaIQZVRAP5%38vs4fupkp#Vx_fyn>?M!UJX%{daX@JE{Q
zP}u1rH)3+0v=zQSd@qD4mO;7~;XyVoK22m~UqCCws{yDk7xFr}Z&<MxYq11{GT@X}
zPd-yP!CfJD>kOn+Y6!Qod)9q!?{shw5k(hiakh`3f<7=6ewi08a;?{4hQfzUa6bXC
z7lIfxJ`CtJdK?2vko7iVWJGn}%sH3w9z{_bkKC~2F<8@eB6*3?lr;grBecJ^($VGf
za7@0D1Irhq>`4{tLC&Yo`&(<CTYErl;B9Zl0e1dL9R;jDcYpXvxjEA;4~0{?7tGUL
zwjAMZjaL_kxv!LPnU|^a-bbSL(x=>mxA`PKyxUw}la)Q19QXXN_&hdXGd5~1k0L?C
z5>Ax7rtNLMo4x<TsHQ3dG{)i%m9!Mi^ykH~J*<T&&%HRUi<<?GJhIs16No_3bv9K;
zqi+z|uysAm_(k5OE0c{qND2|9q&t&jd5s+>W$hg{H+KrZt1n7+Kzob(F<qC(*i={D
z&_E#kvpBPw4+e~TO@XByaaV=YXzKijK^K-$o-MawcbfTVT8DLq7@mZ<Rnb{4KXls<
zuP=GLisKxq!g9jmMq{;Dp)m;ZY({1_(kG7CH76^l8_QA<u|)+_u1|FcoWJaxc5gkW
zZg3?Qc)y*hrCiOlRAt>iwZVHBvy-5nomTDJ%HAg5K~>*W6KN?;-4Ydj#I0uI;UF%q
z#2?wf>#ry|tJB<?fWo^YzcctzfKxE)w%|fxU^%ga|GuOB`vYsckBRP_mOvr59e#uT
zP0*@*Kao5XG`x6+(pwgT7+mP+UQ}m9@dx4GI(1Jsqw3oX=%$~8hwB4HJF`yK=7!4r
zLKV^q<bL#xIq7i&Bd6RjwCMh~so(U_&S9RKxb|hDVT#3R^#Y)kMCDwohh*_^3JJ^L
zQ`eiQHa@@WP6dCAxm{q74cTWtrq-zoUz_rI{aSzq(>3tGXqW$(#x{>-hbl!MzadnC
z7JL_TV72TC9KIQjN9~6bT)FXnSN8byO4L2Upt#&z(MABLG*Op`RI+j4h@=-K>X^~>
zvGj8auhG(67WS|WC0@CH+R3aYoT*|L9o82jvHo#!9kB3jNY7$W@LscDhHC0mgeh*~
zMf#8}1=)+P+cyxJ2oH^6r?^rNx+WU$2<f%zrhnqH3v*VYwi?I1RnKvbYPJY1cYPQY
zbs@x~owlN)+3IH*a#>-}XM=ID^J<`wdr^(H#oBd)D5pos5m9+PIjnQ#iRg~#r1LgL
zsOe|is1PbOST7F~jq?Fl*a!FTi|XpR#Xn{@<!C`+U`$8YJ5j2Tw=aYd5ub&ovO|mz
zIhX)Ey!E6^f3oBZ<sZjd*XEa1WEe(4fHA@ryJ&@}#nday^mH7>+#w@A;VoBk#FiOl
z@nA}#Rp=SfyT~jVy&Tlrz+@w4VQ-$V6FN2biJoY$X`Vlr4N^a2UJb#X39VUu9J*QZ
zyuGBlny%!V?^EFTLB)*!<Ek|YLg@T@J=_SRlG+g56&IQm!yw}l6`2`|cMbPYnH7YC
z4m1|SJ96XpYAIo;URa3%SxG24XQVZ;-vbym6+FEjB3Une*;B9K)Dk`ku3ZV3@wvd6
znSS38g(N50>0qmB?QN3hGaW8ocI<r?(+b<IT&;ikWq5yGOVd?w!ZvDXd!ly<l)Ow!
z!9w{IL{|5W$E6+Fg~K8M?mn(pH`V-wBXsl>3`V5ufP_ZomT0065igmE@;A;LfaoMP
zwb*>L>cD2v5|D_1+?RU7INrZC?lWr5!;hZTDxmFr8a1F{)cX^7&#R>QT{>k-5?2D3
z5Y@CBr`2!H61T10(KNNPp_6NP)+>txSx33E;uu}`5$_vb9|p}+(!`-UjgaGe2q4cZ
z^{T<0#iOcqIg`EV2!7J!@MyoQ)RHXNu%K5T<K>I+nF!jQCrFws>fNvQX@y_0dJVlT
z^P(n$t&4nx7Q8z!DwV*(zyxGa>!Ti?fjeIR%8&1Izs^Vc-SE4T+qWz0)uB9B>5e26
z+CV{*dy9%A>ve#36L_sP&qKT1TI`qN2r}YA5g0>n00bfY<3Uhu;SApdJPvz#%o`Vp
z?TnfER$%%2nXwg_3sJeKZPId8USpLNcnuJ`<$r#~``p8UNuZ>vY<6IOb<V=TKwUC{
zr#bOqDROD-nr?NNiEHcFoCOM<(z&A0DhLF1^#aGMsz)+W>)l)8f`qIu=bkY<skhld
zzO|wVgJYdlsqeSTM})7oMb_gE?DJ!W$ay%zX8Q?bo^_{r;1*;;`>6*POm=H$B8!m#
z4jGE!&?Aw>!T==W7+>OEe8cS;&Ph9Skm_7bc60kWE|_h!`4wenH$yujYBA^r!xg4e
z%U4V#kKE7&i_^(u<7qs9f;vmY3j92#4T4ri){6Uh*-+}oBsW*6$GSbf7Vx?FYUpVw
z_?jqe!hw}Un_f!EqU?(RB#rAUii6jjTO>^Rv8iqhfHe$?tXbU0m#!6KjOMkl+#hlB
zmE?(XTIJFi_cNv4X151wbPGZiedZ*O#dgV?T}v_~;q!C7Wpz&1ZLNCWNOM}Se%p&B
zsyclXlilui;a>;f>{39)n>7l6{`9p!^^wDEAEOY8?ks|f+1IYXcW#0xU(H>kCV7$G
zC&uOaX$9M*EYXC9#N1yMTZ6sKp9Uyf_uPEGS<6_iCBk7kWi$AOEgCEnPu6L>v3xb~
zK!rnX8Lyu5tX}h5C50|`bNb?yGJ{GK`t$91zX;3rbGpjU2R+1zUNo789(yAF^@!(m
zJ+2oMXuaD>Rv4E)(`n-4a=H~}Q;%Zl8Xg>09(kZX&&npC8+`ld9w2RgFR%brhWN%D
zN{W0zdFn%Ua4xw&+5LsKCP6btE$!D~;0N4@-w8DBEzj44p^nzYmwJ8+2sp4RYkL{?
z`C)~;C!TidLFFb+D}VGr(+n0<d(vEz5975ge-y5kgTZUmFP*}DMxWy>NtVYFCfdq8
z49y}~I~WT@6w_v2@0%!R?|t1{+)56$aR<pL9-=rt&anoTzZ+y>9$G3^+M6wmd0{G=
z)(MbhxmVcrkh%fap;T6MXq8a%t(GMyiVcP00xc!%{U=@vtcc7wgH)6#WZk2S4<DkF
zzs}O)aekBXpU88*)@h=Xc{FRxaS@}5E7+vz8f2VyksdH8x<%HB)RZ#4;CY~FXO_b{
zlN^!i%P#(W5X;CZsaMX|$X^$IKcU{`=-BmPbDDOl6Mn6IGqLKib7T@s?NU?XQ<u)<
z;TNNhmDOc)E9IT2M^u3qw;#hlJVyu|PNfQSf8<>oz;DmNhm2lc8d^9z3me(TM=Icv
z`(-mBw2D6I)EJqZm%XCy-qgkQLlDYbfO={9w!#)~{K@gthptbjFG_CDn3&4x*B@p#
zKXWOyDaS-1PFZ3evO*}iyhiJ1lW<%pXsrKI)<`U;dW%v{(CP_UW&Oc)ey+Fv>+<@4
zVyk~WA^n}Oa)SvgWO{-he0Kvc7vE39%Jqw|f-`?7tarP=2rIbce;};vT)be8`a3JV
zll>DbmAvDnGQbBwSui_&2vqpNP*s4cV3w*5)VO1++CUwkE>I85Siy@fV8-cc3p8;9
zvsY6SGu!X9(-cf#O<lm$^Nyh2rM?qXNYWPM_A48l{(is=Xy$0==m7q2Z*Kx-!C?9e
zq2oVDFv!cy&cq(fg&`BC)*c}6>?zO!yiNqP1X_ZrCWM??0j<29tUwN6vTSolm+e5V
zuD@|+2Wtlqm^eFv|NqbA+4=jNmbt0jcODJ$09Wd2?e#B=+Re%Z1ZLKrj(^Fmfj&SV
zkc;D=DfZoh`R^3_x3!A@o?`RzvT^-RvAsOquxHw?k@7Mq_|R(!;_0#OJ(VLDBX1ac
zxY?_rzW6werB$|xc`h}okjnF&bREk=B8rRyft}q`isVo%a*BHsDEj2t$&W|r`_8L8
zdzJRyIlfr&`|_gsTR6?I)k(_rZbw%)l}sF^m(cR;wW_np)33zlwRwvRX>$WY9)t8A
zi~&H#Z^DBq48}ALa8B#6&EqlZ7E?YoWxzLIfMQ?yOu6Ek?Y`W&jKV(l`_y?f_%fyr
zE=7oulEZr576qRr1F!PgSzn5E<{KPU%)?2Gb$kYs+Pct|nhWac(w0^8o`#OPmfQ>L
z#kkwkkX!$$+ub!daT5Le0ahV92fd+GnOMB<Ry6G7=AXS}q2aa)=kO|FG}qQE)t=pR
z+K&)UcwBHMy&uPa?=jnmWzV2y#f(?esKNP>YSR8o@K-CU5twz-J7ur+dOy%q1GAg#
zE{_P|*h6L&E6EKhUq+_9RWQXkL|~7aeK<sWhUpq{9ZKgMnEsH2+K|>aLh>zwDVcNn
ztn3h7?7hqg?Z|?+7N*dLw6*cG63moMSk;&d5j}4`Op$9tys~HIm}xvP-ys1_`Pn1W
z6%=TwLz4+4xv)nuCnIa$GE&CsC<-aR#kNKA`~YuC${y>La6lu3Bq||$fxV9WBwb8_
z+AB1IKso|hWGzHcA)1ylV$_Q<$9Aeswd0%aH`<%^@kcU(@TNiFw}~x2ST5*Q54?=b
zdGMuANVNE{RXeAh-D6KDjCgc-VK;c8D@Xb9P0$sV=jzQ8ipY9zG?TycRMc0X|A&N+
zhq5hVv;6)O7Y6H@1ouB3BX?pCVJj(m1-z+`d`IVysY5A1X-I#DkD+*!-ViX6mb64S
zn)4ELls8Z}u&<QCL*w?;bTFh0sNAT0EncVSqU0ie6yp}@=0t>svShIK3W4{z@k+y?
zekQ2`RDY!il#vvmNtK!^!FSVb*4Msw+^&`cfv<E)dH^>UStDhhm{re5iY>#=NRtpb
zQM`^;a3bDvihwh^fkY(t$q8H1SA<WZl3!sw&tPh5u^oD5h4#c5lEt>9)+m}LM?&$f
zn2X7X@KlXReQkRjL^C{Fq`WRg=1X!fT?XqEgSd!tql4OZph#Z?wt6t;%bLL(a5bpr
z)-=4aD-OdTBHBrbNfNZdI+If+1EEe9KKODttY^c=KEszaO*`X)fIB!q><#iJhb}ZP
zzI2!=E*Zob2X?1P6J_QRXarvl){Ve?d!u2WPr3<y(7UX9(B?S&fy#3vd#On0HNfzi
zzJ8bl;)Z6TO|NEYwQc)t<<-kgLOs1QW@Q*XcG-vBpnk-RmU}Iz%A^{}at7`vtn=uC
z($B?iBsbq{cvfrd?CC+p)_2`MzQAP-LRkY)2YsOhtkfz6p3Aim#dc!AUk~Q=^H_hZ
zrGICE!s3gtb+(*zU+EI`8q^>kTs1K8=u*J_wYZP09HH;jGsRXeuGi-oW`ze^z|ZKp
zsz7iMP8hE>Ne5Ca5Ui;1p?+hzPl}NxN~QP2aO~lduAdBXdt1!sK-X1DzHp4FSw4iA
z=Yp_`;y^!6?5C@tjsZcFt0&t2;?Yw$@AS(S;!+E=)&0)AN^<&)=5++U6fgI&x_MfX
z_veSF`Nfr%N9wo5gk-1RQX^1`%+p9XsJsC3;1N9SA&mK&lAGvIlboH*rvQWKLtiqF
zrYQdiXECS~Cyzhb#K7V`F@KAXD1RxheEraqE3QSk*M0|2ifXI!I|%TB`rf_Vy#s<M
zyvGLht3thxwWB{oa2OJ2Gr=yr8i~DleSt!_A7aUc+6w(Zyg5j{yhcRMF<rRMk90Ti
z8JrqvLUsyFow$r@op<%MY>%oKl@S;I@B?vrxDlCpWBNh|Pq7<Leejn-kr1qxO`o?%
zWBT5w@?tp2qK^(M8CSCK6!*zqLq{u7xAY}_HW~ONI4&S8$7#OJ@!pCcrL}UUhK{Qx
z!FcN@g?myMg!E?dN}u0Rv_)d|R#}X)<u)wp>4I#nD(#?7a{YLpMfB2m?MKEs?r1&a
zuXJniBIw&=OOvC%9v{43qgPO_rklgphY4~o&5;*>9gKH`nw;Yh;)<G5?4h1!-M{`E
zMpfX-*z2CatkHt^%KEEeC)h3@n3s}oboj92Op#D!)P(kI7}_Z5sy|PcDR!Qy;Nix{
zzf^`n+v!s%cyaW0$#vY(L-v_pId5Q*vHx}=!7Y7Pf!qT0ZgrW!uqORFrQjF7YSNKj
zQHqUvrG}V8;5$~{oWeOe8=KQkNxxdn@E`(39X42P@9pqvvE>X8+fg}&M77@RwjI)p
zmNgy#X=qw{rIWWjPOfLqawzs%^15f$IaePEDXSzg%7S;7X{oM(8UluxPtfQA6v@z-
z!%)%2j->_$DsF%O?2EFx2(PXK*ezSA4g<|;rZ8`uk3mU!DG|k)tLsu~G5upmQt4Ku
z#cdUXh--EAs<J!re7P%Q!V}r2z0r+titD|7M{1`fyn08xa4ob5t0$c>xMwH6Ff)zH
zRmV@!=+tFGElp2NEZyHY5hh7(>Ct9<c}zH8kgK$zX{9LMjf0n*LYN*xZ1|wH{$AWr
zX;-m{dM5e}HyYo^Ttg-eEh5%&wvfxYF<ir#0*_aHE^1-@{r&u_ak-<S-hwPg>4oBk
z2`U{)P3!%RtNlHMyE`s))!;|Jzs6!be-lT@$CNRs`T3Kz7;8VPEHJiAmQfz&<c)oM
zs=eUWIkSonU6n4n>E>9A)a|f;NtaSW{}=#KcU(nH4gINj#_Oz=a^bW&z-He}_4V#`
z%`$&U;Uhf|`k0d7Ba)?I#S8|t#LFo_3QeGg=QKk$YeLctJa4ynOZ@&|xG?Ial9GRd
z;{fCAgV9{{9y-S*LX8<>7UY)XBiuj-F4V5rzLT#(hMGG2w=N2jDr{tv8EoJ1WoO$R
z<@4ehFLLvbLe%C-{fqqW-z@jFM<pOt*N6}Kw&*GObdY`M@)ONwiy%{3cr3ZMxXphy
zCl~pWlABqW3O)jq!7Z%jbx174;;w^Hjs8lBcz>T@xRs<H8nM2W`Ng1DtVK%lmapG%
zdzcP&&S2Ss4>6(yi4rR+VW&%G`w=g{J7=|)fm6hnibJP1izxK-Q%7_g^|JCoubd~=
zZ1_d0Pb96MDUwVJ7qt+!c}H|-^$m-1A8{=#zk|cGs)+93B9ZV1Y*%)w*#dG^>2OK2
zpAlkg8aM8~#1Ro+25c8rab<=)VsE_28vPtX`rcKWdZElPs$<iFfknve1<se63ye0r
z)k2+#*Ofr|7d(apO4|}4rw-8Q*ZBOWIh{A70|JF=j{V)xHxkZ?CT7jEUX_3}oQ{0*
z$7m`1V$cnjsM#)5^Q?OCux>nNnDn@?QLR&|DoFB*Alms@0Io(sr<75m0n+7X9m!l`
z0VW&DH7pN310!ACM-+XVRHGhWoknvi$=i>Z+{lrwxJ+toIVjx*o<$5TzZ95O+(27$
zHb&5Lb@rt2uagna?&l@^(v)!m-zKqy*PvC{f_bRn%{mIh_%^p!e_k!rF^Q?P_+|d$
zC;KtiP5y-J&{?(H=qeN<xt73e&=w<;ZEqb%;;J(Sq6NDry}0_?ROA~$yG1lwriaxt
z#K(brR3()%fQmBU3_7JJwa#NJgLnhyx{{t{!))!MTKT%+ODq+M8Qw>NG;d0@Ns$dF
z&~S)|ouvqK2=1j3!NXWr``>1!UD<zLPShZ=QOSYt$Q_>d!(tLTY8|3}TWo_H82iwA
zuhnIHitcp6gbTgd4mDh|J|rQNBZ?c(EzBKX+|jFM^3acPZ=Qkw)Y&1DteHw!8J{@n
zgUU-Jne~Jkojts@FL4_<mIN{py_-o@b6J8g{i4Qb7^=hQEu=;78J^aQ7ZX@<9Oa{V
zi@`p*UZkqJ?vCy^OYxxX;47gof$^3o+9W(FwQbOBz>V6qN(mN7(zb$Q%pH+W>iPJo
zJY_pM8BfvPUvALZ9+n<fQ<G*lfIOd}ntBBfv9F*z|KcEYa|czolv%56cw~600yUjc
zdx60Y<6#iIPNtH_IX+%$a!TsVV7dAbVXAq8u0b)JK<@O%UMJqq=%b^~9`B`Fx_i+?
z^q(jy#@G_M>S^cL1B%1_UlfXTPTij>6G42d^6dowf+M-=E8bz8RB?EyoC%G9?CX$C
zboGTtmhLc@dJ8<%5)&<?g27nxBhe9Y4~^Had);5d7IPe$pKMRf_NT8N_?1rwo_&yd
z5>o^q)6n)Ch#4Ps**0KSp?#hZY-#TB2KCkQ=k17K)_S8kFD<^*QQGUS`ef_=kyJ<V
zD{11js;OhBKn|gYDMhgo6>=vt{2XVajR@=f0#s_G3WCgWs!+~NRh5fy0EI9$_1ZE5
zobeZOP5m`*-?FXbq`%vJfs1yUcq#KpxsTV0RnS1gb<oa%sjzkgv}oFsg^@L4i7!Eh
zO_rRFiMmO1)%8T(pWoka%w`;vD$7m_g~UNxCAWugQbv0fY5QoDSw{Vn!UN8PlX3lv
z4<Qfj&#PpY0#>+!->)duvN%ECo_|HRu;*`bx<6Klujy3X=0gzOgL6dsRJzly5-O#C
zpxv9B5NbwFhOmQco}1*p4awA?Y0<D(oJ9eHj?jtDn8F*=v;E*atic-X0)x@K^M~8Y
z8J}w3tzpT?Y=5ZJ+>%T1e_A;c<0gbWImaJdO!0J3oD)v5aD9Q6Da%6Y8HI8}7B0Hv
zC$;#PY=7hs1mzAo1T>4Kdb>x!b)$4uc%|_j1Dt|fhfkTVHB1tMrLS)ID(=6}Rb?v9
z)1B=dy50?*^l=bt%igYb!7=I<YCqP?5Zjb`kORIWfl0AKPEme90pUdat0o^A$FO!a
z-vW-wbe5~u9IE~cA^%-7-m|qZq|93l#MUMSP0N=L>+2a5Zm*sw0rY08Wu02fFD>}1
z^rN#b$@@}ac*ZvYVg42~C@P^@4M9Yw8677oLZB0+8RJ}M`wkRO&(}2eLLNN63CJQ?
zB>=cQ@=l&2Nq7CvLw&K0=|k5N!uKXgUEj<!VSMIt$e?=`V-au$AUWTfYjSjuPk^ri
z0rDQ%kLt2PF{{EyC|8sPp!g!<T?7~-jwrd?o2c*|Nx7;J@Qk{Sk?b%Y27JQ@z_LGl
z8T_rN*9sxFEhy(f9{nuJ;k}qrgLp((;~jU|Zg#cG`IeN)tJQIy<tv?*+6VUaNsf3{
zOws!j2k&S69_9+3YPm~V+DpgsC_m54q#4lqY#F2=&?Gm$yy4_#u;l8prFCCgESQ=`
z4IkC8<Qzd?#wejTP~k;@i13GYFVdIKYl^Ewzg)B|8VUAKZ?w5|3lsUMI@OhRlvaP5
zZ0c-&{eY|Rb4S#2eD2jEkNOMNSy>Ek)m{U_ft#;B@t}ULv9W&tw_NWv1VlX%$W2Rl
znAzp>Wn)I>;H(^aL*nW^S<Rch8-(=XOFp>UxLovMhdr9Z@j!5eR?H23@g7Q7uHT%?
zW3I_NA%)!|qe0xTgixhQ9tjyfT+HdkwhR`FP^~(CHi3}!=r#Q&^vZ?LK_B8{pAvl8
zrp(l5Q$4xTi|^G|jth}=var@Rnloch4Kv|<8v4vx8V;_xB@r{C6t`6Uuds#juei^q
z)3h46<in21YUhT;3}!2;%PC{YG~IoV747l+9Nn!Z11mPV+P9xRFiS6Gj-kN4fVrJ7
z^#B>9N>86!tB1d6zRk`YseX0Nh1xTm9Tj{y0*<I9^HAnfjpiu$w>*VTC3XG8it5<6
zCOUzpWWk<dMqfK<iLN)dO;$IF`_a~^`%z-vkmq)=AxW5ApjA2+o{WaT#J=5+ZXp+0
zu&|_5By3!zUUmu}MMi&8vUiy9%A>(Z{M0h-<1?78yop;k1r-e&p3Lx3B&h5A7|1oG
z;ncl7=q;)H04FxaT!xWy8ULC`ZjB?Va}!hZcDv9e?2JOyd8FN?Ety8ysx>*1VJ3ba
z?}@-4_V!Ro-(f`ctbN9#&IZ@P6e#|24E^jeLNbmn;Gz7`dsD>R=Wg&Lvw7$-atXA>
z(i@fBrhW4~3TEePFmcUmFkG1hc_lSNBT~55%(<Bsea@|CTZ47Ci*zn-H@bY#q+x#D
z1VRBp2?^piBb%L_9+pN%8js1f<%Noq=978iMD#!C^LgYu@mH9GP@|&?+>l%O8Fwlg
z!x+-*$)+xPl0%hb)Kja)-_V2zuFZB#JYvTP*@;}uy%?r~wtX4LH}XUdtBoVedVl;7
zsUeX@5d_j=-o(9pl2vbQ!0+cpcld4V;imJ-?akS`8rSEL6yX7MCmG*ejq}~flH|4Q
z#4}mjm-d2|qpD)WUx-HVu=th;skXG7)i$fiN4G2Z;-cnuas?Rl${4uu@l#XNX)GS9
z(y&eTVeO8uxp;@3r>u_d>05~`P?iZAzDKJvMQj{t%s`HQ3OErYb8V~c=xFAxqjJ(|
zdqARrZ0S=QqNkUvYvLtV?*ZtH7v0nj>795{2z`nCq?7KnUwKUa{j1uLYbSk7Ve=AH
zTh97aXP5PSnbp=e2!3`i&-tvLwZ<1D^_zKff9<)X^fO`Yht<_BA5!2Vi@~oY9(RCu
zU$j!qkO-$BO00_JcCoKl?=1RC(+f?Ms8MkJh^tJ?FdtrkeazzHV2dD^2P5`JTnjTJ
zm@m?z*Y7nRcSL_e7a3`jCEiDDAz0pDZ$JCyym~}lEdp;x@E&f|&oRH26SnFN1J=c9
z4e8eg<F~g<124vKRx>+`UoBoz?Zah7zRbIXT7=!_KJm!jbGW=GRJ3L=c;eA`>hl$e
zy0v`iLn?jrTY`88&a<%{ss?Rw{upj~^;su*lk(*Bwd7J0IoIJ=wEldR^!#59J2epx
z@K5I(#Hgj7N8XE-n|p2q&1^bmRkq1WkDy75;<<b#tCanYVTS*#`zUW;N@pi!2mj1=
zS~Fx(cdkQJ8Dr)CT4=&<|IBG>HZrF*b8%8Y4*4FM;=HpgmZ$JUC-x514YEnQ_1fIp
z`dfAHlz_P&*cJn!J|$^f>x$QrCOP!A@3l0?-YCB~eLpcjK*ucC&R@(HW;2C(ncy#l
zYpMob18AMq(*`+|zV?J^TgX2k>*SUyK>z&Gif7}dUC-WC&i>^}L5sXyS`z+gD)T)Q
zE+2P)1frNuYzi2WLAx0<v8bRWwPkIcK>S^-DlFcODY+1qc8T%Br%1x#%i<2q3EF1#
z@EfLMdb%S0gr(5@?u;{82Ci^2=-2c%6nXfWNHgd(F02D-*R|y(d7T~ckF2<Okd(Ru
zxR0N$3h6h8ed9rcEtzu=6luFW4#%f}&W(Ta1z!yM*%L$kkCDaspGCZ2kCbMkDjrb>
zSuGE0T3HC8N$RVo(;5$#Yv^DNWxk?~H;x#;BIY7rNOznfI6grz$YC@>+cc2VUbT&{
z67qP0?S`fwBmBx{+0u#ozU`hwFOYd?-^%jhRmR>(5U0sfr<#`~*UiwatmQ>U(B9q+
z^d6_@8D0e_!1#$4MYxz;ZG}o2lv1t=#v;b!T>NEI$Ln>9!uv<F9%nQb{SE2d2@zz%
zM=(Y&XWrIS<VqSBJkffs1daD-Hsmaitl?3hnF~wf;bmSRMs-^gXL~+~A@B7={ENKL
zP|u+7_)@cUC%bBSKO#D|h0QO}cot^Gwx=G#y()u}uL!X5UU>i6%BLL><r@n@FFaIt
zdiX_nnJ5`5?<yT{f#wjm<-_Ypbt93za5HH0S7u+k3oyRzA)F0$$iFLnhZ+0U=hm#f
z93P4cmt3ybZf<W1%KO9Kz4`0&qCtOIPia)K&xG_MLC8nQBv*lcCdT<rgjb<xmWe)`
zLzv`HaExa8erJ7^FkiNI=`f5og(oLgC@}rkjOKAY9gaqg*3km6^h2^|r5f-b*Yl2<
zevCtZonj>t-6pEDblagZS<CUQ#slSEL5vj%Nx0++%2JJ{E;PP4yP<=n;>t#=VpW+n
z6MM?Dr$zg37+=%6s8dhc)X<~mA>49RCzI>7Fw^rZk@50V4tTGb?tVRUu#T!<`o!jh
z*WZ{fh;M;SU?~YQaSS3&#@E1G7<_@2o9d9b0AiTmY0-!j5)xz*GSsH$$YJGL5U3zR
z8Ga=pn1XibJiu^hEuAs#BIjpilFC5;00^iUWk@(LY^q=~4@_lHU#F^^f9<=q<!gH*
zm%{!4CoQWCgJbOKL&{p+laHyFgGWt1*2j@`b$h83;13BZKQD@&p#4%WE<mc8HZ?y#
z=2R(flw+Mlul(`-r}I?2D7|SAKTpPSjr0QQX6ohTdk@fb5M^0FLK}U)g--h?0RwoY
z<rhX@5Atnk{!eRf0T$=dqzxm%-GaOO0K*I}!GaUq-QC>@0RlmTCAbE6hu{zh!6CT2
zJHh|SIq&X!PIA6)cfWrJF0PrLs_N?M>VAfK?yfro_|%HVJq-Rrp;ABV`qtgc5T2E}
z-8iQrf!aBUwd}Y`I2A?yjXh2%%Rb2!P(2XI4Y}?`11tN0xFUV0g9K^PR`HuRZ{0;u
z0{G3p7r&Eid&T~3WYVT;;+>Vu(UE<<hyK!dkmvq&5mgs0C8f1+cTRxLVyRrafSl-!
zI}^4J1x~$4jDP-X#g9>Dyb%ebI`0|fa-)aHorExbV87cmN@2-tAw|@dQwM8EduXQE
zsC4#{Id&dKbai~SWQN_<*<OM(81o25a3_zB=B2@!zN_oIz)OZwi4Z5S?3z>qH07}9
z5EJ3m4olr0mtydH9Y5`^I)2tpXcf^x;OjY9PJHjM5cDSN3|6ES?MI$uXs@{C{l$~X
zbEROiR}`FF@<|n3ZySHaf$2ZT+iZ+n4(rIPr_(LRmW;%0m=n2DAmk;NFrPn-vo~I7
zJURiBgNVM{<wbl}&<7=1d~~09>Urqu;~0I}9^~?bTpkLnz}PzHn79BikdFZ}OOVVt
zm!zY6_3xjm2)3^cn!8QT$7F}nvlqZm%JU7CU>)(Cp#U<h`*$0NO}(`CtFs)^3PBa8
zM%gwvHKevEh)V=D!d^m}3c0Zkl@B=GNXu((ljOIbqmt<*oqZV6pqHAbW|2})cL}8f
zg-Tmtwq>&42A^BAXA0WPhi<)G&_XixU+*roB&;dW-U9l+?5=x%iXw4d;-+X#%38qQ
zcwK;@lZL_KN*k&V8<v9_o;CJ-u#rRhv+j+Abx2ojoR7l?e@YlO&av(=p>jqZ4ECJ?
zi?)Lys)Rx0N{{A5$!y~u92(`#(ELydxNqiCR(M&YcmtouDc^9G$-VM2*6E1ut$XQt
zP5Gp!`bFSg(2hd`7OMAv?d91D98c)TpwY8jigmEr)-Z5<2XFXI`|asNw9bmysqnOa
zxMx^Qfuy+13o(^k)BT<2)ra01=Mtj`bBUK&iHv5PvCm-M-<d>{XyXuufBzopirw;h
zO{QuC{3uZy7gP~+eh3$vMX9iFAM$`QU)^llateFYwn{E^Xo;0oHyIL@WI3Ttw0g_p
z@+ITb^H138P4+9dWr-3MuUrzp@boV|PQto(&F)k1zWT9=H{IvjzHUqM?BWt9o4;N{
zayT-f;8kWn{{&yI<!XBU5ACPi1kjtCLv;q`Xerqjiak0e(4<LO;e03VJvfcX4xuz@
zf>}a%%arm?d1|jG$Gg}a(mvU=@$E8KoYx3^C(URw;9P)_8}W6I`vyC=!g7J_Yn5|C
z*n*kFaj*quIOhHW%eu_za4o=rErRnQVw-e0n5#leh|%|LFntyP`%R~dCit@1V}^ub
zqsl~Rt-Hxq7<T@PJ_Byn-Nx6QFb5ZJXGM!}@&UF3Se;!zXz06mY^IpdmoPE?YP2wX
zRIkXqPGmNySujofgC_zOPm$K@q`R4nBh_(THphV70qK4Gpb9v)9uwi15lItA>MCc8
zGd^;l_d75VT5O8sKKVMJu-hpnpojY8{!I)fVM1C(M1pH4Z)O0p1$pkP=X{+D)&haF
zU*(Ad#N*7%zs48v)(Al<cGksz&F?j%Rg-w$YS!HqCnn9DHfVxVH9@5P0-mC&Lv&i#
zrVfLs%7HTOSgCMD$GIn}GO_-tGg396N3|1w$U>*R<cPUCNb=TP_j?d*)ha(ur0UdT
z{Iu5=wVLIEV{yOUx{jds%DE-3siR=t%b_w2#nq1|&@~!GqhB^pIo${lvn>3Y;E=N~
zcIihC_d9GR>}6k*`+i@VaB&&WbxS@W61b@Y7gikdp5!(>Ykufp*}wEb(ak~N<40g4
zy*6-BO~xgqz!FN2w1htc&6re9I=n*{TETN#9n-<<_g?CoAs~4^t5!<C{<?+<-f5KH
zlyx=RS<BFQv;5W!TSdXi+6ftrUBNP}=G*qugqw#MDX}UNEKA-wF9YE|i@Qq*cFp|x
zvr_}L04SY*z$W|zc>i~h^#6y`Mt_16AScpTIf1+sypVJ5U?A^5ffIQD4o-l){5LoO
z2zm97XnGDV$UFZdaDvSL6`t@HXu|(LT*99xS|Gsu{~J8vpKuAk;Sv4~-~WGsBK&dc
z<`3A!zt7+N3!h+T^`~zx|9eP<KaNBG6{+wSV9Wmislda{`&XobmzS=}_vWkUpf->6
zVnZO-M@^lQvYM&lski4!uLw=C;Y3rnd0)S#iG3EI_&WAAqe#lO7iN!Fm)9q^`ufRX
z!OJx3`H4E-NSAg8y92?t<+g2)ryu^e2u8=Hm*v}jOORi<Fh>F@N1n8ZJ1P^g1bnZ)
ze)#^X%w-c@o}p5wA>xIyFDEfm)G|_%JaJGsO@=vQQ>DByX#}ULp66~UpisvZNA<%q
z){NuB-Mgb;I23R{y(x{v8>ze@{m-tmZ)Yh9Yo0tgePk`2O+6P5JWepIvN=wXs<NFJ
zeIWfQCs@QB^3QVt1-R*WcH1A1My4L0rs)y8d`!}o3x0e<(!p+^vy)xQsHS$anCsu|
zZ0Vu2Ck*qDjXpqHB;F!B!dfNV#j9hV<L{%N_V^ZNBm4o}{;+rrbAj-j2%Sxvq;_L;
ze8_BklehX>qx9bJs(8u;(HOldSyQZ4q7ladhpb1pE5S4DglY@xF8t;-_>^r`tX1j<
zHVUG!F-}$N2|WlWGW?<ExiJTph%Idr=6rZQ1f4)w6{4wdK(j<IM5m6~5}x>)_!PS8
zqo%|Gr8*85629?sN*c>G?wlY3MLCLTtg0TV9vTQ(K~auQpB{v%68^47bq#7&oP;JV
z0+$N1zn_Hf_MirfoghJX()v2SMM9u@@7WPSzAeCJxj<S@f1TFN83r$f(68CQEY0f`
z;+(%%WaLe3=Y5#|y*%og;K{aY8mS;cg<ev@m(%K&W<PJ4-beBC`R&?w=0X~|O*uTp
zhi?Plb}hDFZs$&b6#4lM;T#Y!6h<;0&!cX*Cb_IF1UB0T42Bi)JrS$T&&=5}2)8+V
zH>vS4lEss4la-SZYSh1R4mI=bj}b>MI|k&wY7{46y;rYQ++ZHWddQsB$#Ob-N$}~l
zzu(Zu#562&e)iE%EK!Xys6%M}d=b%6gC5x)8>!IRK?Fw)D$u*V^1Xe^DiM~LpSKY0
zOqYY#p1DxPB8kM)^h-%aW``1e3l0@{*(v!lSF(RVj_i}E=QeL9S~qL=!rNUym*g!m
zm#hdq+I$gCe{tkIlwUQ-ybv)|c`jx%_3qq~QNTF&>LYG%a{_QE%OAD5^3*WO^t<~i
zj*Qs}o)nXBJ`9o>Nc&PE(7smYIx;q6yotH`{(Pqj=Ur5HzZ0=nOjvdA2CrQzavoF>
zCpCzKmx@yO$9RUtfRtz*l<FLd-L0hHa`bRy5wREEcsmu=Mi!oLEvgrLfJ(xCa-<?#
zjmpstHp(YxkdEGWiZrP0^QU0*hPy;5*di!XQzmM+CXwuf8mP2t6(P9sE-^7na@&<|
zkClEfnZ|R25qvo^Etuw%<V1zhQ`*VadrW1nv;YS3)K21QT*gb{omU<*4V1E<=`h&O
z@GcP-%J!^}ZOa7U6#}899b8px#a^8Dn_0*dBioc%ZsWU6)eq-#Wp`Io){2JDy=)}+
z>-Is1pGsGry9tYAM5Ao6fH|(E4pYhDdg1I2<J~?q#}wR#uJmHJ<Q!%264v|kIm#FA
zr4t<?oYHd?{j6N4`uFdK&LkBk8Y(Yz*npg2o|b*pa4*Bn9{?D9qJ^3MAyi)s&Zs}o
z4Zht*GtdrP5;0wgMw9BY_L&erwctDsRNQSx)o)|&*-k_Qv|l&_uo|hKt$+RcrYPDf
zkB?O)1HC$El7ah>{knk!%BEv4W$~{52we|ml!u5k7zT&}FVdfhkg5ONT-A22n%bQk
zvk|&tP;Bu|q0bj33l`1e5z30^dM&k<x~*&4Qm6I71mum2Vv<-kwDDB|<Bic?4dE~?
z9q!kV56I3T`ud+*6uQmc*YFhANP11eDf~d^>u7QuoOW0`N0wQ_r|}jqLR+%J(z>Gw
zmK!W)hYAg}2Qy=YOHwne<SI3nSZ$j)a!hpDd>-ZXe9B|?mftxD>pNVoya}|hsEOUw
z$3Hj2-~OJAip0B6y;~Xi8u+8^a4(cNx%o5nNN0mnOxv)-(=#W&G2%c;ZsW6v!T58j
zTkyapF%WoRT7IsL%qrF1oI&XI;s@m3Fs;Zlk##Y3KhF;KVX@CJqhXsoskZgy02N~1
zx)H-I0Dd$l`6<l4Nm<xwmjVhF{x=B~2ev1t9p8rtXsoV%A2U<?Z~3%JuVlRNONQqB
zKitGA?~sDC**z(E!Lq68AFya+pgAbA0gGgdY3`&8IjcWvu0OZVVb`hfqy}lSuw9GV
zfVUmkn}%XesPzR1Ps|Omy=A57V;u<Hyhp{vpzu|?=dis7h??PLR9@bMao#YozI)zH
zqr9A!xr}JJ6YMmmJ~)^(;buza`_-xTmE6(<t_2~e=A|XrVgR%~Zd?%g0X5SIT1#)h
zi)V;iK8%UDsXJDyxJ|rUwfJ(Us1K$@Qj4ZmI+B|<u)Ho2T%WHd3Ey96e}(U-Xoad@
zw8~k5nl`Ll`n)%=yv7_pA~tUPws^`OSuVBaX(TS*hz=u6j&WMr)W-3POaBWH5%DE3
z?XvxKYvQ<HmTIH5<6-?QqegD2sz=NlCr7r+rgAy;d&;GkS*1xDoXj?93I?GzM?)Rr
z&1ep%&a1@H$jS-111hlGN<_E?xUz2<2}kz@{J=hSWRIL8K-{S~{R~v&XQE@L{_|AL
z1_g**W8>K4x+xAF^v+kzFuij`Ngwv!+%Cu@_kVwLlqO?8KhOB0=kkZM6{{uYMI8`T
z-!@uXz1vxJ`s@ADSF2DOt~*|j9`eUwu_V;9s=jy=$NVt_)r+Oq@|IHqFS`VVLH=Mz
z<(Ysp?QT0q=rnAPFmQh&?et-`%@-1aqZFCq39jn#Kx|VYuA!iM*d&pmHmHl|AHvYv
z<||i&TXweUx3e8dejs-+lD3foQFBl=-o9nunn*B;JVWKGN_0U``QG*8WGM)!^@-d1
zHCc%<^*Rl5;)hTg#R_ig-I^VersA8?{Dj3ii@DcY5=9ZIvqd79bast&!Gi3cH2e;F
zpbknm?jN!BJqPL(!&u#&#e!NjJ(Ay0p1_>-@(!x|_H2FXRd_gk?NoSijf_H`YQ=Aj
zr2=88k$I3Ly2(Nr-Ch<X{CY9NWP6Fmp^%uS7`9q(B$uutfY!8}RlO5EaYA3K`$F#<
zvpP%w(EuZ6Mce=`QW3|QrU-e2y)aX-;wV4oUSqv#0Y+9_gtkZ5vA%|)mRLw-`?3>v
zVuhgEtd?uDDnK%zK3#N=c3x0%c7PjRtLRFIxM@{X`V?Q1WSNoUax+t}N3C2lvA>VL
z#B^HCIYk_m4O@C(THqsgc#v|*klL_R?|su~G21t0ICbbx44fVWR>Wrs%8S}H&L?&}
zSeIvL*13ZzAx}k7L}K=zrxB3@n|h|<3On!a3+Car%&BE<wZP}(JRPi!{x9pduig$6
z?&WaQqN@a*)rzOiDHmch@pFE~hE9+D5RbWl&;Klf*<)1|OKi<VvrG|XX81v>qrs^|
zxmZu_6AU(m8a*?1QZ~&aQwkN~GpP57B5rXvjf7#uH2KZWk(-G^bgA4$BGtHXC)?fQ
z3oq;_8E^xOsbr;u{B6SC7msPbpYk7tdk8fkF&SWjqBCS<v+uaASPKZltyc=^Lw#m$
zSe<nFg7TiYeeKhjYD7a89oNxdWQG`O`}A%XzT=~cZsSnKM}Y{r@;Dei2{k^7;Lo@`
zxmNMh1@2_kEwJ8WeGm4GR~K`0#e;jk>CzU@t;+aN0263sQ*HFbYptO^47HYul2_TI
zldf7c;a%JZAWT=YtctxMylj_<m?EmSk$h5BJP+4(DN7{vZOwO7@)<O;U!-AO#eIF+
z88XKW$adaTTt4i2uHdExna#Y?9j@63HjVv&-7<n<C&7FJNEsJqFcq!OWg9Y+k6WnR
z#Y@JkV9M!MC<6~fx?Wo~CKp%S-la+HkJ!Twz)*Zs?%xH9K=&<ti%mb9`ih(^B*kgD
zA*Q(Fe<zu`SubrU#iCmJ-DkNkh;?FBl$a29{HrniC~&9$2}Yq744j=qg(22v%l}Xp
zYE1#_>}9PSCCNJSMP`I?OV*}Zw)ST2xf<b7OMQH>x!~}kQBk5byqOj&g1@-KIab7U
z&l?7{S6(oTX*RiQxCPiQqS980J4n6{{6KyKyHO~-deh<shC|KJdQO~jCn3T&y9O?+
zIdL(bL}KAAl>8L3n91uY(s(=XI$(D6ZQLs@Yop#0MtdXQu&?s`c%HU)+ubTihV{7n
zf;=o^J>7z6|NR=1k&WD?du6KRLZF_FFKo$vzqc{QxeH`vtT-h-kUrJNxhc`F(Dl=t
zb)<<!geS`$Q+y|Oj%rr;5Rs31Eh9s=9W$HUXtagQ7U)@TtmoL9WM;9oH|fPR=JN^Z
zRi%jD2c1FXmM-%nu%YJ*Q&m6vrY@==n(@;}oD05$>alhf)R&^>gJjZCKt_3%Zl(|K
zh-KgKQVZjZ4j4NrtI8@r9d@2O9(iHabD_v;M<Uz2gGt)+And18Sfpm-LSWm3vqe+9
zdUk=`FhX&;f5WfHFZ(__G$&Y9RyQ<{2yw6EfE&M_%%E<WT~I)LgB-V=v@{><c)<9J
z;Iz*4IHT>SDlo_(hyKZAoc!4)DgckYiMqX-2QHSuX)=(LFob%Jolba!RhgjDzfH<&
zc__Zrh?lWHZ75mYDj+-63wMZI@JLhU1+z=P(_}zY<Nl*%!^iU)nK~0?`$ipI=aJWO
zt_a_ThRo5=p<P$aHY`};2k<wLVq;%V4YfprF1QlI`uNpjlN4p`G|+&!@n3{)%X8nS
z_QVr3<fpz%dt(70{o3pso}8}|qO0pZD-lAq#RtMe;H1Xm*NU+m`xuBfs;6!ij>ww-
zLI>xq=D7rGpGzMJ@bD4&OWUZPSF2ua<lsoi`7looT(Xx)empZ?{Drs~NtT9J0DPfH
zSi&`V2ES8>)N329SE=8EH+zCFA3IPjPQ%$zl6B?$3mD@Fmh;9MCK+O|_^C8FW-(-3
zyfH>|Tb@|0YZ%l^0rs16Xjb=idG`^iy^=RbQ8uBf^kG_v8s{*&7`=xu87oRE3%ybH
zY9&`pXce)%;P>*<WmV}2CB8wzJh50rUKBJ&D4Jr_tBZ-Tw_ihKV|kdwV^&}2kF8&o
zGp`_jddIHCLARDZ6yWMSSJkG8A<cHb{l%K>>_tr_BckqP^F~^s<(I>c)CMLPI~W$L
zMpP#bP9s-(*iC-b#V*iU-K6lHhLRQ+O%JS*klQv3oAcwoH3>A*jEq=VL4-mp6o{pW
z4yVLX-p~~It+u}Y7d(p-0oAtxSq56Yyk&sKxN{T`p2jSbH)+dT*{iLiJ!~`G&`Opn
zO|57@V+jd)3#A8r@bc>p@mI!%3XS%xZFILTu91`WN|18&)RqzNv`tiTgAjnNaP%q_
zX~t^o0#m&=H?%{hhk{9Scf8ZK59G?lgYIf=#v6PKIa-VlDaGHD_V+q*9P2CFubgeR
z@f>kT65Z&5q-2_7jfg7wBp*vzTj6V(pqq6CPp*899>ZmlchMNTICvWoE2cU>k*QD@
zo}v%=PL6&t%OMb|un<gyH|=wEDGtrlByi}mb35&0m0j2qbC8I@PM8?qeA}uks$Hxd
zL~Lmtw`O^3zTCrrDS0P=e7oDZew%CYdXaUrEQ?rIaI}Gg{1o}e(i>A|2G~S9QnaLD
zftG2gW|4}r{Oq!^X=sHYI{9~{iIT-*sjco)CYM$s0rN?CN2}h?c-gLPi9S`$c`Js?
zogggb_eFOmc}v@-j*`8?MMR&_KgB}u2wV6O;g&%?@krAbj^Ldc_HunL2qU0HZ(K`g
z#^=fW+JmPEC=kBg-oRm@Io<j$c*#!R#VWayzLEQ3Vq^X8N5l6n=}t#D1{m5bB}M$$
zo%uLQePIGzkDfFXOFgJq>J)PD^+{(X=JI<#$PKc@u)15am`CEk_0IExZNCsd*#43?
zP!Gih^1}U1VASgs<&oOc)-s}+BNZZerS{M?oprLb*6S=x{XAeFqL=dUXE{-rdG51I
zc-z-I{<6cAW0t^aPx<IVWG=csNv{;=x3xd+toL>dUA)+{6sJQS@UkD?yUW&hse~B3
z&6<e}l-Yv(m#`_D5^4qH92rL8F2L`r%f-~}2pe|WRtP#44N%uGR<T?zhOlDO$s3>f
zE3CGsB$X{>^~u?g+06AGd|Fl119aHB_F|RONWrF9wDwWSvZwL6TE+!vJ2q;10yti@
ziG2NF-+DbNTiDMoOpvj9kCdU52y!lzHZ#KyQZ2_~o!w^W?NYa8n8t?@J)CK!$*(1@
zNt{2o+-A@2{-Uh^LPo|{*Uj3*#m!AcMaGSUOk!k^PlcIq5?^cgVwa1-hojqzay?X5
z_?>G;;)jx0S>5*{@$6Nj!*=;bMoA3GhL|)FZzID85aB-?9tPsOI=1_446QaR*(5Qd
z(TwpwVAyNd-wC80u**??eD&Idd-uTnJAU$<?pqPBa=lQEc=zkgi$;;#efoC)&&Pag
z%Xr_K2n3*pC$?kU^#t8jNtP&WBiQ6wT>7brh4|jugxQ<)Klva05EgORqELj8Hj{kV
z?A>dUcHo+sG5M}Z%hOPy(!tFx9apYC=xo}U&-5+6IEpA0&tvR8s<gGM;^0lt(s(oc
zD+`-TyOY=M{;S}%+vAQ-7q0Vr280h)qUSZ|(;F6eCSHat+YAEA>e9tnVdb<_j&18Z
zc*^gl`KRN#V^!498DahGfiaV1L+a(mbq_P-WHwH;+vi5*UVKB<al5yM)F693m>tQ^
zSxbk{eV;hCkXU4Li7a;xZ0mFxlDc?^2~DG_5HckrvoP9=pcO*V(agTr&BTz#zY=WD
z(T#<xuBkEA+Cc-Rj+7QSqe*Qz&1NWzvV6V4Zc`gsdZSqbBc5yZewd!!A<|gx5P_f|
z{(N8d#|ZRMIC#D&&-g5^FUj8Xqa-)(OgVaD58bnax3f_7fe&>^{ao5=dMiX|$M4>0
zWLB-K6{dKf^{=>vydcgj589{P7VSSIGdg^=PvI%vtvq<5^J-URpBcvGk#DH%13DgP
z{M#pnNj<{~4res~RHL`7Jdtp!ai29~?DTB14+1TLapPWJO<P=ctCsjUi{iPeKcaDI
z%4Lj{DFu7R7Rki+=XmAn3TZ>NM>c1wpxMGGX<6HGr-;OT7LO6DjVwy=)Z8~fcgqd&
zB}Pg}$*!lDkf5)$BdS_|e=_2jfhGpN681SxFr|LDNR?>TCvsQnFk}RN+_%2{$`2)|
zL>h!gnKbUrgr{$tD_!+UUqrp2O+gH2YGGO1iDVR?8CyM4i6`GpqeNixN4_U<qGdRU
z(Kbs8N{oT$@yq5VnSTV?Qdd-D9NH2ECXH#?l7w)UDm=MUURPKf1*^ZCsJ6p5RLpD`
znf*lC`7pI(avl9n$k(PUs59Q_)2a+2FfTRe8P>;CF9gX?S7VCb3PgeoV)gRtP4dgi
z7zO&flo$)x_K<7lzt@+oj!2U3*qP@PQ#Fv_uBMjOuDA;MOE4EG*w_;4MP^-F@<&b@
zo3rY2G*6F73Wb1N@HV<?uDB$oYeGw*#LR@(N55D-X815BB9O`q&pTw^U#{Zuz=_}!
zm1`jzh)s;W-aMwj2i_co#qtEymL8V^o|U~=n6)&bLSyg5B6~UVP2H3}@AY68^dZp+
zltQDXdsDH#s=k)S<g=ZM=rZwr@f2R<)&??XUPa1e6blZ~)|tG#oyO+8f~4EIt)!k?
zO{^E_PwO5(BKHP|46@Ok(@(&gf?R1H_t8rme&b64gt`TaQmzPZ3iBk9)6a8?d-cp~
z^bIInqX8)wBFDyzO55W7VP0Vo&8htY+pmT3D{Q>$cwFEVT9GW4HUO+cu1lZ%>2vAF
z<ia$B4W+t$&zKSHk5?blX9ruR+z*hKPF2Mf4aJ>hOkL|5=XE>mEjXbJp@1zqs=ho+
zXaP<ehcd$v7P_7=ktcl*RnkTX4W;2J2%|Po^84P$`%Qk(mqivikzaq<RP=h#Ehv7@
z_k_|9T$cH4**NZ5*K~e_`K>Rh10Ej76YL~1NnX+wXt7{lo9OXm>Z133rO?3b9(BbA
zN&&^^@$qXcPQ=vbvNO3y3wt!Icf{5nxOPy-fxKEa*jF?M(Ma<LopgS-SlsL1CM@=+
zL{PA&BF-!mc{E^fYa8W^D~c;M@HX&lWJ0w_i|t3nJ~F!Kt0~BP`_*Q#73k_i?-VQR
zxV6<Xd|}~J##BpFO)^=_w5|P!FeC`q8=93-9+#LeL#uT<(3Ll{F^Sv6lx(2L-LV^;
zm}<7Wt8CRwWuO~N#}WnTUC~dF2vyHdmhdR}KFF%MFkv=cOXD*=VEZb$Sj%dJN%>SP
zo^uMJ2G)hfIre2?qUqFoE%_^F$bpRkQx1IXv-1{ft*3~j>35p@JO;uWU0l>EUTzHc
znaPHpi!w~g>@};9@=9>|4y;Vp6Yb4jrc1UVQhPiB#BY4UnplTqmh3KKCy!JIuXi24
z(Hk0d<f7SIoSa)sx)@IGwN;tqxz11Wws1e)1XqiDguDSE<HCMiDi`h^;U-g;*baq)
z)}B_}Yd-UlGoyWI`_?Z){VDdl#0-v%CW@{ZbII<tgXZyGT%)iqE^!W`N=1G{m7cOX
zFIDM=smYwksc-}D65Xr5FQEQ`(J$&jIJ$3d0(MY_o}T(7vt86KGVg^imT#W+T4&Nm
zS}W`vy*W@9onZav27Np3o-NYU?W+y8Ju$wa)8g<6yApJjGI+%oU{yeVM>8kswar|%
z!tza^pG&h|J(XSqB@N#^GXDb!KAI9yKHc1n$SYr6(fF^TjsV`rmj{%aaSPYGtTgvd
ze9rW47Ow2p!{|_=+zi7-FSF83)(&ZBx!Il@PJTpwl)YV%!e~0Qgl9*36QlcLReI!;
zyIzqhxx$kRTz;fFLyqgg*U@dFLWI3W!OGZec(?D4UIbNLjz^VyoR`~AjBKU3+nH;C
zrtlGd?&7P$M>x<yujO%vNX+Ut^@nML)n`}Z6=5h7vlg#{d^+^!Dg<3CbL$J*xTnYp
zly_aNvn5Ml`9!uqp|IGYk#4ul%9~zND_o|{Wf~4B>RR?KFCheTb$1E2zQE#Ee_Efz
z^jj!l-f=y{<UxaM!u)TBJ;aDQq#@sNAuo$_z4nS|T{ZE1izbmRTBA{pdP_<c6xYAf
zXyF<1KJJF6cJaFD1iv<;p^c?Z;u?Y|V^~aHYkr4!eR$>l0Jzh7s%+kLC)5+qW?Xss
z{<&iLJj3F2R9-qExED|QwhTBYLulb4WmFZg*(+7B;znI%{w@>!qwR(_1><<S;Y7NL
z2!9fvai(zz_qtchAk(|&?`~DJ!4X4=-+F^|z)cOYK_2Ji@#!=zlVSy1LJ0oXQD1wy
z!Jb+L0F2PRK!rf(myPK5H(OyDVJlTD+Zg0+btB+Q#}ojcG7;;na{lV|V_ohgdRBYu
zN|W_sCv8bm<S1xkmBGS%P4@xD&j_y&L)~eWZVTX$+j1xQUG@m$NUzEFI_{44djNDo
zcu=ZPb(9Bl4V~n%3^i&G!d2cKA#v}T_#)F)%`i8uxfESl*2#d+9BM$}Do7@vFz2Yi
z&q6{n{RkbcLD?%7(N3ZwwiD;lBRPGgQ1QjF@d!G8C%b2|$h&&FJ8hW;{29rBl{y;}
z-{vNe9DxQUhioN(;@~*dt;(^0uky0T3)j{Pd&C783r>V}o$=z{-mrt2{$(Nk?{4;6
z+xFY|cL>rs-Jw;d<9W4h^}7DY4<=>bq5ND{M#~+o#FcXxo(s=q+%t(eF1c;x%Fufr
zoZd>!2y<}&62Qr)h*V=`uQ2-cDoM-o(+mWHZ4BZq``yTt<CNe6jGvHM_Kn$uRz<eZ
z@sCV})<uP@Ns`mY#vjmx=UL=O)C-L}k!i6I7~Qnxtja{vE9z>mK2=8}Q{uUsW28v2
z&$Jlnc^5SCsT1gZw3df<ZI#Qw<x9CgiEKeDRE&%!Eonw13vOBKd?*Zt7qA)qQOt2c
zL>MNjaEAeS(qUWYt%k-(m%%ut6BaM^kfIUc>U{g=`tG46WSG_f4w!a!z^;Vo^-)-?
z0xrMg#iBTxBeZMaGhKDXT+GStyS)wbgZMtu*_ungWAfGbiKIT6kDrQ5d*?d!MF~!$
zc@u})?nvIab?4ITMsFo<Uo2K9>yDxrvP4|PJg#_#yvCw->2tIqNnO}+U0t2N13V`9
zVOa182S1?p-reZ>kT=Q)RBev)ho7%T=abK``|D7-KEgYx7xvnHyg6DYjeU(nzIea+
zY6A(l%Wu>--|F+ZZnY!wkq2;MqS2mh0WQ8}OUL9B=DP`R@MZAD)XfTuzSL`3B(Jqo
zTw6U1>KYj8suJ>jGdskkP9TFiT^%<4H7lb0xkesMB$qNx{#T|YoSd79r{ux}v-~JU
zN>mowmi_>a?0FuiwS@bK1jMx`n61|9soy~qKZ`H^cQ6$Hr*fA6DoF_8_W2V<0f3Z0
z{WppN^p_G3e?w7#K#+<L{~Z(sq%8kGpeQu|RoV~;gw!njOTC9bt360TDm}<Sst_vu
zt-^yAq`JdT<i!6=9f$v{;P9^khLEBS7JseJ@Mkf@f0Z%(vtpsspIC<fcD2GkXbAoa
zQ25#KKdx5D4dw;^6`-K$;i#g~+}@?xO!+>LS|_-aO&XEX6$V-v)ai;^&yiyPfxmu}
zZD6mB%xyredUFY-k06R;ithE2O*Lh#$XWHQ^eoLbU;o__fAG-3aO=~OCD3JRSaAE!
zf4L%DG>S|DKoI40itvLG&Se_!XoN2o*Vp8^V5n$2=<TB{qBrsE;|f}dnAMUdOcWZl
ziPW9J`n^yDdL|-2oyZt-k0rc`^yG9rp$^E-$6~s4mf6|4_Xc5n9HsCxe?VtWQN&tN
zfIp|3nM`L;?LpDRX()h}nLar)UXQ>fFq45HrI|6TUD#(Y^6qI{=SlzIsX;&#Gm@&t
z#l7^4UTOnVyP<rxVY*UnJA+dQ4<j!v$jwCiwgC3yI#+|K-KN9cKHL7mqRZA%;^2k~
z(i$37(#%U=5jpC$@P=^t9#>;7EX5&;dQ6>&)E<yAe^uIyXeq@OCO@Qt0+TT}N2aD2
z3&k|{et4)jZdJHv%!~*NT}}k8IBM1V6)bWrUt^L}4vvfz5f*Cf@WmdoVA0kvVv#61
zWu!0R7QRAE&Xeh}DY22cI8vEtdgQm^O&K>Sm(Rb-ve6&6nG$uABmlOqlfj?wCuZbL
zVxo0GNB2L@kk08Z+BvrqWpU^gOEZC9%13!zMrako-foK}OzxB|@qUpHdOXZ&IORwl
z60gMp*?t0OqEK}1W2?~c52-P214Y*i_9NNs&Sxn*U&42(d(=weYjqi;F01PK>lBnQ
ziVySy`Y};AJ9N#VBs96z(MFv`-|E)rE6QYta(9K|+4A5dkxH0luUjP)2-AviDJldD
zdaxRZzb4JQ?o6K1nPyN^7O{4<ujqfJwjhDl*)v*cZc&$8;Ct4&(7bU;Y&_a!)mj3W
zH=QrWCcu|&Ql6HUO(hEtT*_%6_)>YHwUa#BGUWfGykTpn?tD2zzzH)JPd`z!Xk^s<
zmCx8+wvj?FDB*=5Z@%u_k_P#YBX|slmum7OW#&MkV6>PQE3kYY+AwHJu;C`w)G3~O
zrt1P5FJ}{Fzikhnmg^pQJv)js=tE=OVhlZ?mM{89#bt32k)zyDuyG7)`a=EtEdMtH
zjD<XOv`Y{<^oHjx5OK5{y02z6;y|=)aU-TZ22v)0L9beZLeHWn^x(28Pd#7FCQ)<K
zy-sBth#SJGbZB4XV|YEcpe}W;NRk3;Gw&^Ml;m8F(JQUhj|TOAN0%<_xuxjQ(I@a2
zPsGcL#E3*GH2)isN0TWmCFnib^liO73@femu<eMu9r6|ejg_6))go8qJBkH7CR6Kt
z>o!Eoz(G3KBUWi=Gbn7cEYJ6W$fG1LDPV?gHqWWs1@mb(QJ(jmE+gpTRzI?#hOv`}
zt&{nRl9D&hxWf6ODA+SfJ|iqO#S^?i49PeFn#THn)Uzq8g2xpZgd21f&!<#aH6G)f
zg}=0Ka?XSkGYNoW7F{c1yk16G$lb$B?9&$M+I3{R$7J)aYzQ!$EFZdF|Fo4^s!&1-
zRlaD;b;=?K)WAgcYrNem7N|rj9nf!O_YOE<djyGWg)>?6@fmr3)hj-oYYM`lbG~<E
zvdqq`2ki6%Xr8@U2kA~GujfFgR*59X&_(q)_Bio9m~$`1M8X-sv^Ok~->+_AlE6_&
zcjbrQFl&DkE0b&Vr=C|+Sv`UlTX~&RW=PTIB>00_B=;&emfHr@=id>46WbCgLo}EM
z{RD@M51X&rRady{#2t0pPkDh`o62fl0BuxNhdfh;UINROf9#mVWrj3vLS;Zz&Wg|$
z2FjXc#yD*9JlDkcy(He#bCrvunG%N!%CRUTqMJQLYa*1L&H_){=A1oi8iWxkK+(B9
zP7BUuGsxH0nP>hO@+l-M-G6eJfK2$F&qtiyOn+44*+|rOhtkFUP`tdh-pNpHh#NFp
zk~enF+1YhOV^KW!o+4CJQ)Od$ZEgDz(iFUwkZfo#LSsLRd=g)X&dBASEuVmkam_dd
zA_33$EV+Z1TBXyh0H;KXiFo@am`xH5yQ&A0qpf=diPA2rnwOufxib9NGTt=6pz^TY
z<KFiK{Fr%&?(9<+c7zQZE4q3q@CJ%P$2ZZARbq-aw5fVQfXT@~ISnYC(Z`E+LpSdn
z+SjT(kXUI=f?k3U%WY;|MFO=;v<EwhuWNvXsWDMw6A6<*v3^zMgJm?$#*@za0!7SE
zu3~wW0h%^zoS?%rF2AG<a8oG27qGQNxf=J{MOCJ~77rMAI2AOk!deu-x^<IcQ~^hU
z$7Er>;hl>b^Px|Dqo@61<EvdfV;s`mw7L56{^ASLxg$k{*$sRD>7{S?-OI9G1a4~~
z7mf(94Ya17cPDc7LzIlMpIo3d-i67pNS_>D(X1KC`Uu%J*?iErJkC+DZ%@B_=8I;p
zwkXUAWy1T|`F8v(x<H4T^0bv8lo?;cSVR*ZqO0#J@~TX(WDzc+@_V0?7YCajhR@Of
zPzHWKXs5mhWS=58q7HA>A6#v=zzw%0(hYmg6cYso)N-sqwM9Kp*6iY!psgT$H>=;j
zq>EG^kzK-S6I4m4nA#0O)(o7rraA^_WYN|183V1F_E7bnD<yPUTdh}J6&$mj;U1+E
z=P5I;SYI4*GDE2&TypzHxiNluR@iVoVFFX!k+*brvW|ddq;=shcdqk&054_BO;RHQ
zC9qg$Qp}SH7~cf<O=<I3OZv@?MgP%42CqamYkB25W0lIt%2SH1)0wJYYc#XPr6v>u
zi04})Dqj`{t|fY24wy$G?v{muPKCKQ9jurcq(c$eFZJ4%6*Ja|xSENU^?_UMsd1PX
zgS?%>#Eu7elk#za3EvV1TBoXkR3XcRH*tHRJlj~;fx^tMm~||Ogn}!gw&_V4dwuua
z8dTe}lJ&3jV#OT&iG~D8fnr&j%0d;UYDnJ1J+ZUuZH14sBaXMiUg`8iY(e(btQBzv
z3>t{}Y-aiIH40p<gNSIvvtKb&)o}9i{b+uCzZSh?VK@N=JE~PnSHz*6YD5vzLz;z;
z0La)SkCu9^cfG0uUz+|rd6sn}$^6HdO*C(GD2YzB{C@A<$#)MukECaOItl@>+b$o*
zSar(3ZNTedFkFG$p;laZ(@xkOclCZCH;UIITmQK6)Icumqu;(UWy4bn_Cu)8L9C_0
zc^qWy`~pZB(uT$8cKzZic3HB=2ey5rO`I)D3+6CZCJ3UHPqqTUBx;%Yvq8bOz+9w#
zkbabMygLl96yhU{Hs0PaH7^DdbxiH)9f`2(PGbmXAM~n!{8m!qV(dznV4Zwr=zb|Q
z6r>A8kjM@#X~tn+<QYddxcPwn*<m`^m$Q_iMRj&kMdR{-4Z{!7p^ATq8;*jMWj4C6
zG=ir4))@u;Wp!a5(uZg?visc~iQ?^rs`~B%!+zE6l^RiaLDDysbwnZhxhxyZQ!*3?
zA2{_Aik{7|T-|4?^@~U>hYV9EcEGjLRb;DfgM6R~87e-N$Eo5T$jg6heyg0GXrKaj
zLVzDEXIHD_0N-Kg{)H#(?c%iYL8$JBvl(+>(7BMe^cQyQ5-1IfN%uP0RrPu9K->Yd
zoK_|)8=Io*d!*v3wt~%*+2_C{mHINdY4~PQvBjpskrGYWcFvA0UW3q%SKU|#=jMe-
zh=F~j<9Ht~&C}t8d3WltTt3CAdBzAov*^TFasF}iE}ee5d@d<mvTP&$byY@z5P_AW
zbG=P9+E;EGImxMmTr@(R?}sTw#PazC2RO$4@wCiEg3D*uOD&UQcYcfg20Te@x9xzA
z<-WNfqP(GP@6?9?DN&gg&FvMUIA%Wy`z?KFuwMKp1H><8HyQ9TxpQjraAC!3reafG
z2>4)VTKJuSHM4G?7fd@=2g)t|+A!!LOjd@nCL4_Jp_Kzw=@aoc^PX=p;JpZvDe2%U
zZzvI{R<2V)dKn~6^`+!_gKpR3I%y*c=O-J-7Za=ik@}7A=P3D{L6f=Y44!IC4e-|>
z#>4gNQDUl>&Zf(@Z)D8^ft=r-;{agFXw}-)>?#@LoX=f6UB^_pb2m9umyv_o@B5;c
zQ&?t@zQ`kZJNQlAxSo(qEsU$o!hV@^E*m!l5pcg(FzWN8MPb@-lMgEHdu$`+u%!F&
zwjlSWW~3*;<J$G>!$@!+cFCBNxA9@#TY3PI%`2?**OUb9qGgFt%4L`DZ?#ub(0M)-
zKL|MbU~a9L+o|Le=D6m)cAGu`K~u)+$eoq>j44OgYaGb-iIYb^hnz>-8qDxZt{}C$
zJ0;4Wvrh`@qIi5*yIq<HbI9Dt&Od=~>D7JpZ2V*<Yt|vh?0g)B*!$5P=CkW2d_~cX
zq1r@b!u43iG^ciEM-DUP3C0)0ikTGJ#mGzHx_#TwvV{prZr+ulz2&2z{sn#iZge0T
ztBCAaDaNp^zvKDiYDwmq5-6?z=*QOZLqcFFTQZ(0UcT9B(c}g0sZUqd4R*uC)8a7C
z6Eo?J4PrW%Kyn)a%gbBGn~NsmG0#AKs<BB6E<*yjH$H|;xJf4qCzq-1xdV*?ga;!C
zYg-gl(DE@K#Cij86I!ujW!*EwqK*+(qDC^5LJWMT{fJ?o*XQI}-x?9K6dPqVRE*n{
zhq*$gLopRaDhav3yyqA}H-GxjP1DYue$!Elv_nEY^5I3cs&2|s-1qBmmjN9+`b(^y
z{J5Mc<@HM9fRC#!2o9())e9!0#-k}w??r7mpjhpjY76R%s|)z+ocha6JCA^5!qT-L
zg(K7YedE%bF}lzXK&<VrJ9cMm(RT;ADKI|DS5ZN~BfMdjA}N`07&or5x~c+sqPdSE
z$=GJB9Zfi*6p9*H9Ki*^e!p)kqelm2!ezz>7`PL)^@*v|=@Rz4t0gyotekeWfvJXf
zLL#RL{M5DRb6!m|FlR~8Hy(G0I*uSy8f2i+T^2TIL+3SIFC17iY#|VZc;~<u=^sYg
z4TKJn-ybX+Vo>M|MAkYvO|zT2ck!C+qp3o~g$k9@qRqq#t?)=FsW`YnQt-amO^8I2
zGUq<IO4_&)fzx_5uVh{W9htt(ovbMXMR;}Iu<Uo*;c&KZ^9g6DQh3zwBFe6}^=;~u
zvh5k6zwl^cWb!<A^2KQw(qi(SuD=0ZMeCU(@s*=ddne%q?p0@T@N3}a=N#Dg6dbaS
zP_c}`1&<D4LhW)77N!FCqmL8}%#i)QQN75Qj8L$b_A|<(it4$Cnun<1Y{GmBNgXG$
zeCF2>lU>gcF7=Gkn2FWK8N;$V_2R%Nl#LmFQ=K8nCQ$;CI7VuH5)z-4h3e>x5e30k
z_iP-5e$M=^a9RbK-dvhqg#*9$3zgLZ?X|n&7V8P;t=kU;0X^TI8`&D1Rb9_XJm#pl
zWT(0;FY7N&O)u$sAzs8SOJs;AIHBYZ>9<WNm!1>o${bX@e*?3a>D!ETUIZ`JwP7OR
zbAgT;VXWhH+9{gS)nprpGy0&!6A~e_>%ajsxL_A}f9AMHe_Xm8P4~7=T}lYA*8Sn)
z8oIAz5i<oN_23@0O}#AXrKvRwpLW^2itTk1GowZR)N^YSKeXcywhnlBsqylSbQUc7
zIQ8e+3E~E|C}nFeO)h6e#0zf4Ss(ORW8QeaxaHy3p!qUbiVXr!PJ_7dK^yQsR7ZJI
zb0L!aYc@Qm(&979eCY}n*DHovU*4l|!$T`U<?HQGb|3kK5)PL#I!KoLTgXaW-CVw(
z*kM1zzoEfXjwuMR&?1|WVvCH4)W!CLfbo!LS_R?`p_mZMOq*?F-@?v(S0x|@_S3w(
zRVQK8R3sDIG84VNcPN4z0dA%|v0srjdw-I6rSz?2;M#O%`jN1u{n!*W1_eILe9Ir$
zFz!i&edy0KKO`|BxtFhllDCh_qfUBSwd6u<w?e_tD{&l*YqyeSwq*TvIm#tc>%~n-
zlUeSbs<EMR%3FW@1XJx=efGWu7F)%~mTb9cTHa?C9pPIYPW)HV`}w8RNy^khEtdV|
zP0XfDy#9s+M_UAG9A~%>1r+EArHOntaauWF)eb;|@=P_;rK_)5#f+$_P`lS1?HoQj
zIEcBL@qy*)vdgMJdC6dWst~@~;msv02*3dN`x9{<AR}L}F`m~#n|#2?^Kv+Tk;&lh
zT&Y`X5F!cfyj$@2F<m~k5rz3vhnvBT8^)4h$a^<6gPi`i<vnaF)p(F1zv0>8@OJ~V
zBkCq>(Lc`U(!AbZ(;ghXSw-Itb+*SefbLtpqpU<!FqC4QvW82^LMvB}X&cg#US+XC
zP#^CLuG#VFw37AWu<M8Qj==K4V-5ABzND*z`{-_8-2UlMRcZnwIpmxg9krdr5VZo8
zj7D<sfJ?Pl6pMjrE)y#Z8|#~vRKIo_6b=aA^}P=}d_zTYHM|?hh5N(BRCuOJZ=OL;
zT>F@Yw$0|+n!t9%s7k`h@%5^)oR?pB3E&k08hpqrb}TE^=aE?=WeMxq06tj~^!5_;
zkBDJYR_D;*2Ih7SF`DrKWKVuB9FH=|Tq3gfnQ&^R8b*sjDQf$pI_I9-hHnSzC1`<c
z=#O`<sD)VU3e@PN?o5NhUb~i5bU2;#l10Y+ga_*_c#EWkZ^#0?>tSQf?BA(&N}0ru
z?!O1kGiV&pghX)(JDzR43$me)UR%&#n=%Z^28Dm(p?O9Bkw)YlVVD7%-Hz~_|2A-B
z7oAktcUxlYaRn~&IjdO)hkzmzwqCXXes6Tt7R}g%)7V1CFr46~nMGQoB@yF(T9fAX
z(yrb&(XXS5KD((S?Z)fDV);uW3qP2d7)utz{VEDnHyN1HJ&f{5@bR}M_{GwPaH#pk
zVC8sT1}u42&&=z+Wo~;G-3CK%U^J?@<9HSBMrvo4GmvYbyFw7X1w@}GCcG%=uBcpm
zm(36#;eKz!fNO8MrtvW~726>Z2P!NkIP#6KBlvlXj^kaWBkfcto*!nNDC6|m_logs
z4~%8RAQF~s@1m1*n%eXjbB61eoV{Au5<(Pa@ID;q5u$n?CVC!^Mf>qxwO6g53%>^h
zas=$%3YbSs<Z)>a6+cW$zGsVshBI|f{M1xfv-^mtxQB<LCX*Y)jL87B7TH5XPcDS5
zZlR1htM~bk?q3qJexkM5VO8l8HS?nQ+fARY3n*zMbtuVz*&C+pa*_41dj>XfcZx2O
zkQhFF*cOV3bD6%V;`(mi=NjB=8_oVwVf#=Klh(XVg3Wl3Q><UC1*dA(;PM(RShSkH
zots*RVvyOnsD!2!`R4q63iFr64+@Vh1!|VqI?2Sy)TxgBCrS)&P1ZEThTJnHZK0q_
z@Vt)=$ah@0=U7n47Wx5?RIu(ZFo-t+o5U}S*l?Cr;KT^t0cbWHgsX3EZc=A2Z{+RJ
z+*r%J(C)VbbVD-@M+q6y{EWpLLbx+B+|SCl?8Rp|y{Au*LCA1E=%#I-QOdS(S@Cg8
zlS$%}2RJ_BGBhA2#ThYma$X*F4N!d6yC@sb?~-PWQ!}=|Y})h7j5GR5^tr@Wla~-E
zQxgA>{DAh2+u*7*hGz<c_yhZo%0!!HZ`uu}>Z*!+O06&_AR1kJBi9hI{@{_ik<>@z
zjb>XdlIYhW2|*6YK{HU{bRi^}KVnVO^C$`(2gok4q<*~8cdwnyTkB97{XTX(@6`A~
z#jT~_C|<Zp_Z9jFQN7*W4?dn^+#ZoJQws1FTrlScp0HP^Yck&X_yx%vHvIygP4%V+
zn!!H|PWQy=e!nI0Cui?pZ%X_Jo$tRndNk$b{)3>0g9H3;f*t{3Pslg!kQ&Ss#%2~)
z_JZ`sE$#FaR;GgV8r<>#c}FobORJaO&Som!3aTdFHYU8L^uj{O0>Vb74#sAzo<@$W
z=6^5)xllm(k_4&5l;tF;ehPT<dD=PJL0E+;Jnd}lUHCi&>HkpSgFOG)%uY}7hls0<
zAibu%5{0XSgRPAfguIxImyLs!gNud2+!;dZ<l*3KL&3oYqKBAtHZ|u{7MJ{&LC7mX
zdP`SVM?Q9T4-XGE4=y$bXA5=?US3{y04F;qCo4pP)y2!+)yR|8-h~>{-ye=xY5u30
zy$jnPKCwY6PP1ESvU9Kj*#D!WpSN0m(vDg=*i-!M*vQzy%~g<!>R(nI|I+*4%s}3N
z*x`Z<5Auvp$=Siw&BV-EkX}kjjzY@P!Nv7Yvk<l=HUK9Z2R-}02KHa{2MOjsyA7Fv
zfB7u{k>QhvP;Z)hi9^a^3vmKCfvf;dRsfGGCl?=(myZ*mEx`VZ5M-htT4H|`(Ecy9
z{vz}jEeB^+$jk{@I6Ih|Q@BIurG5sCgN>7m4e)1Yf2jRSN`U=mDE~6l|K{M09OdQz
z@58sV`<YNb<@m%MOx)}s%w5vrg7j`~R;GMhMnGO5k1;Q+xtTdHD+dSU4}|R!z{<(R
zYYgDx0dsP2^Zs||!PMkG{cv=1w*4dJOikD!Mb3YA=>nMw4u~VBCVb`&&UQwwkfe8X
zgb>*o{mdhFNJh{L2|(U-wStsC7y2WiMQvUGd}3?$Gqw0^jqEK1={;FZ&CHG5Y+dPv
z)a?I|HvKbpwpK!aKKVnB{ol6!A+mooK^6=o$n5{Q9EFf6{+AyAdxrkK2SJMH3(|Z1
z++ltztpAte$N#aa82%57iV<>)^JhjwV*WFy8N?x}&j|!@0(dyNfV_}p007WKej#Fz
z<?>%h{40GK{wcv3g@pc9_21Lk%p5|Z#{u9){+U{TJ}5xk++5rg<`jRnfkB|3l<+?v
z6!w3%K{jq~NQwWywE@5&ASZ+Z^sjONFc;@fj_kj+0RRwYx?kJ4KmZ6o>EGnQypT@*
z-o^po0B}LL`hJn);P|y)UQX_x6!(9Z;{kH~+6ScRCtv;F<-j~YIiCO4#sdKUBys**
z8yExz{HDtV{B0ZnE)eIh{Xzo6^V>K;;NM~e=HiA_EckoB0Pr8gr+@Q>0{{m9>N6Ph
z`#8W{Al_f)Ai6*KYX5Ez2;%-#4r1>g{Nwp;J~)6N@Nf2b0KC7=2Z;B#ID@%<Qb+va
z3lGOn{>s1k#|Z!df5}Nm{_+0qACTj>*h6$7oRYuT;{yJclMu3k-~9t}f_|M3P6$it
zud(6;gE)R0FBtF-{sDjM1ES0I>v*{!;rlJuz#PBnf`Qx+4vxQ%4Wi5WtAAWvJiuSu
zz+jGl@DCD%U+r=6{3OQx+k9|A*8Xqv0l7f^)(4OW`0HAL=t4jxzu4pD{U>|>;2$r9
zFZ4Iv-|PXocz(}kFxT(?adZ6SIQ`q$AiBThGh`Ux-^a`KyMNrA;9tiE(dGTM4YFJP
z7E>_z_uK$;137=44~Q<$uQBBYa`65t2eJ1L{&9nT*X88+HP;|q)1cq&L4x&5tiTY#
zU*`kT^xN730l>dsE5O|U;NS1_2GRY=jr+Gbf}{}7uQ>^Ztij*?<NYo6ARzZ|dp3xN
z6GFcF_dX!@e)kW=0sJ*C5M8ccu3M1N0yuup7x3@?fjEDgONj1odo1L-3jB4Bzz_$2
z9WM`LZ~xUlNa{l9*#AB@2thmVFZLkUTHtSM70d&<p#P!^hHOp0+Jk_Te#=uH02k*k
zae-WV{?_K|Yy_cnbw(BtpkP<A@;3YV!GwZc*}=h;0x}8;WeRp_dvga0h^G|FkZL^Q
z6gmQ&9Fme^q7vc~ATA(?NAv}+B;-dNEGo&v3kCwkC4~NK2|Z*88q3Ai$l3Lek3*0T
QH;}6{GA*ryq9pSF2cC8;vj6}9

literal 0
HcmV?d00001

diff --git a/support/dist-docs-branch-23.06/ovn-nbctl.8.txt b/support/dist-docs-branch-23.06/ovn-nbctl.8.txt
new file mode 100644
index 00000000..e8fece03
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-nbctl.8.txt
@@ -0,0 +1,1716 @@
+ovn-nbctl(8)                      OVN Manual                      ovn-nbctl(8)
+
+NAME
+       ovn-nbctl - Open Virtual Network northbound db management utility
+
+SYNOPSIS
+       ovn-nbctl [options] command [arg...]
+
+DESCRIPTION
+       The ovn-nbctl program configures the OVN_Northbound database by provid‐
+       ing a high-level interface to its configuration database. See ovn-nb(5)
+       for comprehensive documentation of the database schema.
+
+       ovn-nbctl  connects  to  an  ovsdb-server  process  that  maintains  an
+       OVN_Northbound  configuration  database.  Using  this  connection,   it
+       queries  and possibly applies changes to the database, depending on the
+       supplied commands.
+
+       ovn-nbctl can perform any number of commands in a  single  run,  imple‐
+       mented as a single atomic transaction against the database.
+
+       The  ovn-nbctl command line begins with global options (see OPTIONS be‐
+       low for details). The global options are followed by one or  more  com‐
+       mands.  Each  command  should begin with -- by itself as a command-line
+       argument, to separate it from the following commands.  (The  --  before
+       the first command is optional.) The command itself starts with command-
+       specific  options,  if  any, followed by the command name and any argu‐
+       ments.
+
+DAEMON MODE
+       When it is invoked in the most ordinary way, ovn-nbctl connects  to  an
+       OVSDB  server  that  hosts the northbound database, retrieves a partial
+       copy of the database that is complete enough to do its  work,  sends  a
+       transaction  request  to  the  server,  and  receives and processes the
+       server’s reply. In common interactive use, this is  fine,  but  if  the
+       database is large, the step in which ovn-nbctl retrieves a partial copy
+       of  the  database  can  take a long time, which yields poor performance
+       overall.
+
+       To improve performance in such  a  case,  ovn-nbctl  offers  a  "daemon
+       mode,"  in  which  the user first starts ovn-nbctl running in the back‐
+       ground and afterward uses the daemon to execute operations.  Over  sev‐
+       eral  ovn-nbctl  command  invocations, this performs better overall be‐
+       cause it retrieves a copy of the database only once at  the  beginning,
+       not once per program run.
+
+       Use the --detach option to start an ovn-nbctl daemon. With this option,
+       ovn-nbctl  prints  the  name  of a control socket to stdout. The client
+       should save this name in environment variable OVN_NB_DAEMON. Under  the
+       Bourne shell this might be done like this:
+
+             export OVN_NB_DAEMON=$(ovn-nbctl --pidfile --detach)
+
+
+       When  OVN_NB_DAEMON  is  set, ovn-nbctl automatically and transparently
+       uses the daemon to execute its commands.
+
+       When the daemon is no longer needed, kill it and unset the  environment
+       variable, e.g.:
+
+             kill $(cat $OVN_RUNDIR/ovn-nbctl.pid)
+             unset OVN_NB_DAEMON
+
+
+       When using daemon mode, an alternative to the OVN_NB_DAEMON environment
+       variable  is  to  specify a path for the Unix socket. When starting the
+       ovn-nbctl daemon, specify the -u option with a full path to  the  loca‐
+       tion of the socket file. Here is an exmple:
+
+             ovn-nbctl --detach -u /tmp/mysock.ctl
+
+
+       Then  to connect to the running daemon, use the -u option with the full
+       path to the socket created when the daemon was started:
+
+             ovn-nbctl -u /tmp/mysock.ctl show
+
+
+     Daemon Commands
+
+       Daemon mode is internally implemented using the same mechanism used  by
+       ovn-appctl.  One  may  also  use ovn-appctl directly with the following
+       commands:
+
+              run [options] command [arg...] [-- [options] command [arg...]
+              ...]
+                     Instructs the daemon process to run one or more ovn-nbctl
+                     commands described above and reply with  the  results  of
+                     running  these  commands.  Accepts the --no-wait, --wait,
+                     --timeout, --dry-run,  --oneline,  and  the  options  de‐
+                     scribed under Table Formatting Options in addition to the
+                     the command-specific options.
+
+              exit   Causes ovn-nbctl to gracefully terminate.
+
+OPTIONS
+       The  options  listed below affect the behavior of ovn-nbctl as a whole.
+       Some individual commands also accept their own options, which are given
+       just before the command name. If the first command on the command  line
+       has  options,  then those options must be separated from the global op‐
+       tions by --.
+
+       ovn-nbctl also accepts options from the  OVN_NBCTL_OPTIONS  environment
+       variable,  in  the same format as on the command line. Options from the
+       command line override those in the environment.
+
+              --no-wait | --wait=none
+              --wait=sb
+              --wait=hv
+                   These options control whether and how ovn-nbctl  waits  for
+                   the OVN system to become up-to-date with changes made in an
+                   ovn-nbctl invocation.
+
+                   By default, or if --no-wait or --wait=none, ovn-nbctl exits
+                   immediately after confirming that changes have been commit‐
+                   ted to the northbound database, without waiting.
+
+                   With  --wait=sb,  before  ovn-nbctl  exits,  it  waits  for
+                   ovn-northd to bring the southbound database up-to-date with
+                   the northbound database updates.
+
+                   With --wait=hv, before  ovn-nbctl  exits,  it  additionally
+                   waits for all OVN chassis (hypervisors and gateways) to be‐
+                   come up-to-date with the northbound database updates. (This
+                   can  become  an  indefinite wait if any chassis is malfunc‐
+                   tioning.)
+
+                   Ordinarily, --wait=sb or --wait=hv only waits  for  changes
+                   by  the  current  ovn-nbctl invocation to take effect. This
+                   means that, if none of the commands supplied  to  ovn-nbctl
+                   change the database, then the command does not wait at all.
+                   Use the sync command to override this behavior.
+
+              --db database
+                   The  OVSDB database remote to contact. If the OVN_NB_DB en‐
+                   vironment variable is set, its value is  used  as  the  de‐
+                   fault.  Otherwise,  the default is unix:/ovnnb_db.sock, but
+                   this default is unlikely to be useful outside of single-ma‐
+                   chine OVN test environments.
+
+              --leader-only
+              --no-leader-only
+                   By default, or with --leader-only, when the database server
+                   is a clustered database, ovn-nbctl will avoid servers other
+                   than the cluster leader. This ensures that  any  data  that
+                   ovn-nbctl   reads   and   reports   is   up-to-date.   With
+                   --no-leader-only, ovn-nbctl will  use  any  server  in  the
+                   cluster, which means that for read-only transactions it can
+                   report  and act on stale data (transactions that modify the
+                   database are always serialized even with --no-leader-only).
+                   Refer to Understanding Cluster Consistency in ovsdb(7)  for
+                   more information.
+
+              --shuffle-remotes
+              --no-shuffle-remotes
+                   By  default, or with --shuffle-remotes, when there are mul‐
+                   tiple remotes specified  in  the  OVSDB  connection  string
+                   specified  by  --db  or the OVN_NB_DB environment variable,
+                   the order of the remotes will be shuffled before the client
+                   tries to connect. The remotes will be shuffled only once to
+                   a new order before the first connection attempt.  The  fol‐
+                   lowing retries, if any, will follow the same new order. The
+                   default  behavior  is  to  make sure clients of a clustered
+                   database can distribute evenly to all members of the  clus‐
+                   ter.  With  --no-shuffle-remotes,  ovn-nbctl  will  use the
+                   original order specified in the connection string  to  con‐
+                   nect.  This  allows  user  to  specify the preferred order,
+                   which is particularly useful for testing.
+
+              --no-syslog
+                   By default, ovn-nbctl logs its arguments and the details of
+                   any changes that it makes to the system  log.  This  option
+                   disables this logging.
+
+                   This option is equivalent to --verbose=nbctl:syslog:warn.
+
+              --oneline
+                   Modifies the output format so that the output for each com‐
+                   mand  is printed on a single line. New-line characters that
+                   would otherwise separate lines are  printed  as  \fB\\n\fR,
+                   and  any  instances of \fB\\\fR that would otherwise appear
+                   in the output are doubled. Prints a  blank  line  for  each
+                   command that has no output. This option does not affect the
+                   formatting  of  output  from the list or find commands; see
+                   Table Formatting Options below.
+
+              --dry-run
+                   Prevents ovn-nbctl from actually modifying the database.
+
+              -t secs
+              --timeout=secs
+                   By default, or with a secs of 0,  ovn-nbctl  waits  forever
+                   for  a  response from the database. This option limits run‐
+                   time to approximately secs seconds. If the timeout expires,
+                   ovn-nbctl will exit with a SIGALRM signal. (A timeout would
+                   normally happen only if the database cannot  be  contacted,
+                   or if the system is overloaded.)
+
+              --print-wait-time
+                   When  --wait is specified, the option --print-wait-time can
+                   be used to print the time spent on  waiting,  depending  on
+                   the  value  specified  in   --wait  option. If --wait=sb is
+                   specified, it prints "ovn-northd delay before  processing",
+                   which  is  the time between the Northbound DB update by the
+                   command and the moment when  ovn-northd  starts  processing
+                   the  update, and "ovn-northd completion", which is the time
+                   between the  Northbound  DB  update  and  the  moment  when
+                   ovn-northd  completes  the  Southbound DB updating success‐
+                   fully. If --wait=hv is specified, in addition to the  above
+                   information, it also prints "ovn-controller(s) completion",
+                   which  is the time between the Northbound DB update and the
+                   moment when the slowest hypervisor finishes processing  the
+                   update.
+
+   Daemon Options
+       --pidfile[=pidfile]
+              Causes a file (by default, program.pid) to be created indicating
+              the  PID  of the running process. If the pidfile argument is not
+              specified, or if it does not begin with /, then it is created in
+              .
+
+              If --pidfile is not specified, no pidfile is created.
+
+       --overwrite-pidfile
+              By default, when --pidfile is specified and the  specified  pid‐
+              file already exists and is locked by a running process, the dae‐
+              mon refuses to start. Specify --overwrite-pidfile to cause it to
+              instead overwrite the pidfile.
+
+              When --pidfile is not specified, this option has no effect.
+
+       --detach
+              Runs  this  program  as a background process. The process forks,
+              and in the child it starts a new session,  closes  the  standard
+              file descriptors (which has the side effect of disabling logging
+              to  the  console), and changes its current directory to the root
+              (unless --no-chdir is specified). After the child completes  its
+              initialization, the parent exits.
+
+       --monitor
+              Creates  an  additional  process  to monitor this program. If it
+              dies due to a signal that indicates a programming  error  (SIGA�‐
+              BRT, SIGALRM, SIGBUS, SIGFPE, SIGILL, SIGPIPE, SIGSEGV, SIGXCPU,
+              or SIGXFSZ) then the monitor process starts a new copy of it. If
+              the daemon dies or exits for another reason, the monitor process
+              exits.
+
+              This  option  is  normally used with --detach, but it also func‐
+              tions without it.
+
+       --no-chdir
+              By default, when --detach is specified, the daemon  changes  its
+              current  working  directory  to  the root directory after it de‐
+              taches. Otherwise, invoking the daemon from a carelessly  chosen
+              directory  would  prevent  the administrator from unmounting the
+              file system that holds that directory.
+
+              Specifying --no-chdir suppresses this behavior,  preventing  the
+              daemon  from changing its current working directory. This may be
+              useful for collecting core files, since it is common behavior to
+              write core dumps into the current working directory and the root
+              directory is not a good directory to use.
+
+              This option has no effect when --detach is not specified.
+
+       --no-self-confinement
+              By default this daemon will try to self-confine itself  to  work
+              with  files  under  well-known  directories  determined at build
+              time. It is better to stick with this default behavior  and  not
+              to  use  this  flag  unless some other Access Control is used to
+              confine daemon. Note that in contrast to  other  access  control
+              implementations  that  are  typically enforced from kernel-space
+              (e.g. DAC or MAC), self-confinement is imposed  from  the  user-
+              space daemon itself and hence should not be considered as a full
+              confinement  strategy,  but instead should be viewed as an addi‐
+              tional layer of security.
+
+       --user=user:group
+              Causes this program to run as  a  different  user  specified  in
+              user:group,  thus  dropping  most  of the root privileges. Short
+              forms user and :group are also allowed,  with  current  user  or
+              group  assumed,  respectively.  Only daemons started by the root
+              user accepts this argument.
+
+              On   Linux,   daemons   will   be   granted   CAP_IPC_LOCK   and
+              CAP_NET_BIND_SERVICES  before  dropping root privileges. Daemons
+              that interact with a datapath, such  as  ovs-vswitchd,  will  be
+              granted  three  additional  capabilities,  namely CAP_NET_ADMIN,
+              CAP_NET_BROADCAST and CAP_NET_RAW. The  capability  change  will
+              apply even if the new user is root.
+
+              On Windows, this option is not currently supported. For security
+              reasons,  specifying  this  option will cause the daemon process
+              not to start.
+
+   Logging options
+       -v[spec]
+       --verbose=[spec]
+            Sets logging levels. Without any spec,  sets  the  log  level  for
+            every  module and destination to dbg. Otherwise, spec is a list of
+            words separated by spaces or commas or colons, up to one from each
+            category below:
+
+            •      A valid module name, as displayed by the vlog/list  command
+                   on ovs-appctl(8), limits the log level change to the speci‐
+                   fied module.
+
+            •      syslog,  console, or file, to limit the log level change to
+                   only to the system log, to the console, or to a  file,  re‐
+                   spectively.  (If  --detach  is specified, the daemon closes
+                   its standard file descriptors, so logging  to  the  console
+                   will have no effect.)
+
+                   On  Windows  platform,  syslog is accepted as a word and is
+                   only useful along with the --syslog-target option (the word
+                   has no effect otherwise).
+
+            •      off, emer, err, warn, info, or  dbg,  to  control  the  log
+                   level.  Messages  of  the  given severity or higher will be
+                   logged, and messages of lower  severity  will  be  filtered
+                   out.  off filters out all messages. See ovs-appctl(8) for a
+                   definition of each log level.
+
+            Case is not significant within spec.
+
+            Regardless of the log levels set for file, logging to a file  will
+            not take place unless --log-file is also specified (see below).
+
+            For compatibility with older versions of OVS, any is accepted as a
+            word but has no effect.
+
+       -v
+       --verbose
+            Sets  the  maximum  logging  verbosity level, equivalent to --ver�‐
+            bose=dbg.
+
+       -vPATTERN:destination:pattern
+       --verbose=PATTERN:destination:pattern
+            Sets the log pattern for destination to pattern. Refer to  ovs-ap�‐
+            pctl(8) for a description of the valid syntax for pattern.
+
+       -vFACILITY:facility
+       --verbose=FACILITY:facility
+            Sets  the RFC5424 facility of the log message. facility can be one
+            of kern, user, mail, daemon, auth, syslog, lpr, news, uucp, clock,
+            ftp, ntp, audit, alert, clock2, local0,  local1,  local2,  local3,
+            local4, local5, local6 or local7. If this option is not specified,
+            daemon  is used as the default for the local system syslog and lo�‐
+            cal0 is used while sending a message to the  target  provided  via
+            the --syslog-target option.
+
+       --log-file[=file]
+            Enables  logging  to a file. If file is specified, then it is used
+            as the exact name for the log file. The default log file name used
+            if file is omitted is /usr/local/var/log/ovn/program.log.
+
+       --syslog-target=host:port
+            Send syslog messages to UDP port on host, in addition to the  sys‐
+            tem  syslog.  The host must be a numerical IP address, not a host‐
+            name.
+
+       --syslog-method=method
+            Specify method as how syslog messages should  be  sent  to  syslog
+            daemon. The following forms are supported:
+
+            •      libc,  to use the libc syslog() function. Downside of using
+                   this options is that libc adds fixed prefix to  every  mes‐
+                   sage  before  it is actually sent to the syslog daemon over
+                   /dev/log UNIX domain socket.
+
+            •      unix:file, to use a UNIX domain socket directly. It is pos‐
+                   sible to specify arbitrary message format with this option.
+                   However, rsyslogd 8.9 and older  versions  use  hard  coded
+                   parser  function anyway that limits UNIX domain socket use.
+                   If you want to use  arbitrary  message  format  with  older
+                   rsyslogd  versions, then use UDP socket to localhost IP ad‐
+                   dress instead.
+
+            •      udp:ip:port, to use a UDP socket. With this  method  it  is
+                   possible  to  use  arbitrary message format also with older
+                   rsyslogd. When sending syslog messages over UDP socket  ex‐
+                   tra precaution needs to be taken into account, for example,
+                   syslog daemon needs to be configured to listen on the spec‐
+                   ified  UDP  port, accidental iptables rules could be inter‐
+                   fering with local syslog traffic and there are  some  secu‐
+                   rity  considerations  that apply to UDP sockets, but do not
+                   apply to UNIX domain sockets.
+
+            •      null, to discard all messages logged to syslog.
+
+            The default is taken from the OVS_SYSLOG_METHOD environment  vari‐
+            able; if it is unset, the default is libc.
+
+   Table Formatting Options
+       These  options control the format of output from the list and find com‐
+       mands.
+
+              -f format
+              --format=format
+                   Sets the type of table formatting. The following  types  of
+                   format are available:
+
+                   table  2-D text tables with aligned columns.
+
+                   list (default)
+                          A  list  with one column per line and rows separated
+                          by a blank line.
+
+                   html   HTML tables.
+
+                   csv    Comma-separated values as defined in RFC 4180.
+
+                   json   JSON format as defined in RFC 4627. The output is  a
+                          sequence  of JSON objects, each of which corresponds
+                          to one table. Each JSON  object  has  the  following
+                          members with the noted values:
+
+                          caption
+                                 The  table’s  caption. This member is omitted
+                                 if the table has no caption.
+
+                          headings
+                                 An array with one element per  table  column.
+                                 Each  array  element  is  a string giving the
+                                 corresponding column’s heading.
+
+                          data   An array with one element per table row. Each
+                                 element is also an array with one element per
+                                 table column. The elements  of  this  second-
+                                 level array are the cells that constitute the
+                                 table.  Cells  that  represent  OVSDB data or
+                                 data types are expressed in  the  format  de‐
+                                 scribed  in  the  OVSDB  specification; other
+                                 cells are simply expressed as text strings.
+
+              -d format
+              --data=format
+                   Sets the formatting for cells within output  tables  unless
+                   the table format is set to json, in which case json format‐
+                   ting  is  always  used when formatting cells. The following
+                   types of format are available:
+
+                   string (default)
+                          The simple format described in the  Database  Values
+                          section of ovs-vsctl(8).
+
+                   bare   The  simple format with punctuation stripped off: []
+                          and {} are omitted  around  sets,  maps,  and  empty
+                          columns,  items within sets and maps are space-sepa‐
+                          rated, and strings are never quoted. This format may
+                          be easier for scripts to parse.
+
+                   json   The RFC 4627 JSON format as described above.
+
+              --no-headings
+                   This option suppresses the heading row that  otherwise  ap‐
+                   pears in the first row of table output.
+
+              --pretty
+                   By  default, JSON in output is printed as compactly as pos‐
+                   sible. This option causes JSON in output to be printed in a
+                   more readable fashion. Members of objects and  elements  of
+                   arrays are printed one per line, with indentation.
+
+                   This option does not affect JSON in tables, which is always
+                   printed compactly.
+
+              --bare
+                   Equivalent to --format=list --data=bare --no-headings.
+
+   PKI Options
+       PKI  configuration  is  required  to  use SSL for the connection to the
+       database.
+
+              -p privkey.pem
+              --private-key=privkey.pem
+                   Specifies a PEM file containing the  private  key  used  as
+                   identity for outgoing SSL connections.
+
+              -c cert.pem
+              --certificate=cert.pem
+                   Specifies  a  PEM file containing a certificate that certi‐
+                   fies the private key specified on -p or --private-key to be
+                   trustworthy. The certificate must be signed by the certifi‐
+                   cate authority (CA) that the peer in SSL  connections  will
+                   use to verify it.
+
+              -C cacert.pem
+              --ca-cert=cacert.pem
+                   Specifies a PEM file containing the CA certificate for ver‐
+                   ifying certificates presented to this program by SSL peers.
+                   (This  may  be  the  same certificate that SSL peers use to
+                   verify the certificate specified on -c or --certificate, or
+                   it may be a different one, depending on the PKI  design  in
+                   use.)
+
+              -C none
+              --ca-cert=none
+                   Disables  verification  of  certificates  presented  by SSL
+                   peers. This introduces a security risk,  because  it  means
+                   that  certificates  cannot be verified to be those of known
+                   trusted hosts.
+
+              --bootstrap-ca-cert=cacert.pem
+                     When cacert.pem exists, this option has the  same  effect
+                     as  -C  or --ca-cert. If it does not exist, then the exe‐
+                     cutable will attempt to obtain the  CA  certificate  from
+                     the  SSL  peer on its first SSL connection and save it to
+                     the named PEM file. If it is successful, it will  immedi‐
+                     ately drop the connection and reconnect, and from then on
+                     all  SSL  connections must be authenticated by a certifi‐
+                     cate signed by the CA certificate thus obtained.
+
+                     This option exposes the SSL connection to  a  man-in-the-
+                     middle  attack  obtaining the initial CA certificate, but
+                     it may be useful for bootstrapping.
+
+                     This option is only useful if the SSL peer sends  its  CA
+                     certificate as part of the SSL certificate chain. The SSL
+                     protocol  does not require the server to send the CA cer‐
+                     tificate.
+
+                     This option is mutually exclusive with -C and --ca-cert.
+
+   Other Options
+       -h
+       --help
+            Prints a brief help message to the console.
+
+       -V
+       --version
+            Prints version information to the console.
+
+COMMANDS
+       The following sections describe the commands that ovn-nbctl supports.
+
+   General Commands
+       init   Initializes the database, if it is empty. If  the  database  has
+              already been initialized, this command has no effect.
+
+       show [switch | router]
+              Prints  a  brief overview of the database contents. If switch is
+              provided, only records related to that logical switch are shown.
+              If router is provided, only  records  related  to  that  logical
+              router are shown.
+
+   Logical Switch Commands
+       ls-add Creates  a  new,  unnamed logical switch, which initially has no
+              ports. The switch does not have a name, other commands must  re‐
+              fer to this switch by its UUID.
+
+       [--may-exist | --add-duplicate] ls-add switch
+              Creates  a  new logical switch named switch, which initially has
+              no ports.
+
+              The OVN northbound database  schema  does  not  require  logical
+              switch  names  to be unique, but the whole point to the names is
+              to provide an easy way for humans to refer to the switches, mak‐
+              ing duplicate names unhelpful. Thus, without any  options,  this
+              command  regards  it  as an error if switch is a duplicate name.
+              With --may-exist, adding a duplicate name succeeds but does  not
+              create  a  new logical switch. With --add-duplicate, the command
+              really creates a new logical switch with a duplicate name. It is
+              an error to specify both options. If there are multiple  logical
+              switches  with  a duplicate name, configure the logical switches
+              using the UUID instead of the switch name.
+
+       [--if-exists] ls-del switch
+              Deletes switch. It is an error if switch does not exist,  unless
+              --if-exists is specified.
+
+       ls-list
+              Lists all existing switches on standard output, one per line.
+
+   ACL Commands
+       These  commands  operates on ACL objects for a given entity. The entity
+       can be either a logical switch or a port group. The entity can be spec‐
+       ified as uuid or name. The --type option can be  used  to  specify  the
+       type of the entity, in case both a logical switch and a port groups ex‐
+       ist with the same name specified for entity. type must be either switch
+       or port-group.
+
+              [--type={switch | port-group}] [--log] [--meter=meter] [--sever�‐
+              ity=severity] [--name=name] [--label=label] [--may-exist] [--ap�‐
+              ply-after-lb] [--tier] acl-add entity direction priority match
+              verdict
+                     Adds  the  specified ACL to entity. direction must be ei‐
+                     ther from-lport or to-lport. priority must be  between  0
+                     and  32767,  inclusive.  A full description of the fields
+                     are in ovn-nb(5). If --may-exist is specified,  adding  a
+                     duplicated  ACL  succeeds  but the ACL is not really cre‐
+                     ated. Without --may-exist, adding a  duplicated  ACL  re‐
+                     sults in error.
+
+                     The  --log option enables packet logging for the ACL. The
+                     options --severity and  --name  specify  a  severity  and
+                     name, respectively, for log entries (and also enable log‐
+                     ging).  The  severity  must be one of alert, warning, no�‐
+                     tice, info, or debug. If a severity is not specified, the
+                     default is info. The  --meter=meter  option  is  used  to
+                     rate-limit packet logging. The meter argument names a me‐
+                     ter configured by meter-add.
+
+                     The  --apply-after-lb  option sets apply-after-lb=true in
+                     the options column of the ACL table. As the  option  name
+                     suggests,  the  ACL  will  be  applied  after the logical
+                     switch load balancer stage.
+
+                     The --tier option sets the ACL’s tier  to  the  specified
+                     value. For more information about ACL tiers, see the doc‐
+                     umentation for the ovn-nb(5) database.
+
+              [--type={switch | port-group}] [--tier] acl-del entity [direc‐
+              tion [priority match]]
+                     Deletes ACLs from entity. If only entity is supplied, all
+                     the  ACLs  from  the  entity are deleted. If direction is
+                     also specified, then all the flows in that direction will
+                     be deleted from the entity. If all the fields are  given,
+                     then  a  single  flow that matches all the fields will be
+                     deleted.
+
+                     If the --tier option is provided, then only ACLs  of  the
+                     given tier value will be deleted, in addition to whatever
+                     other criteria have been provided.
+
+              [--type={switch | port-group}] acl-list entity
+                     Lists the ACLs on entity.
+
+   Logical Switch QoS Rule Commands
+       [--may-exist] qos-add switch direction priority match [dscp=dscp]
+       [rate=rate [burst=burst]]
+              Adds QoS marking and metering rules to switch. direction must be
+              either  from-lport  or  to-lport. priority must be between 0 and
+              32767, inclusive.
+
+              If dscp=dscp is specified, then matching packets will have  DSCP
+              marking  applied.  dscp  must be between 0 and 63, inclusive. If
+              rate=rate is specified then matching packets will have  metering
+              applied   at   rate   kbps.  If  metering  is  configured,  then
+              burst=burst specifies the burst rate  limit  in  kilobits.  dscp
+              and/or rate are required arguments.
+
+              If  --may-exist  is specified, adding a duplicated QoS rule suc‐
+              ceeds but the QoS rule is not really created. Without  --may-ex�‐
+              ist, adding a duplicated QoS rule results in error.
+
+       qos-del switch [direction [priority match]]
+              Deletes  QoS  rules from switch. If only switch is supplied, all
+              the QoS rules from the logical switch are deleted. If  direction
+              is  also specified, then all the flows in that direction will be
+              deleted from the logical switch. If all the fields are supplied,
+              then a single  flow  that  matches  the  given  fields  will  be
+              deleted.
+
+              If  switch  and uuid are supplied, then the QoS rule with speci‐
+              fied uuid is deleted.
+
+       qos-list switch
+              Lists the QoS rules on switch.
+
+   Meter Commands
+       meter-add name action rate unit [burst]
+              Adds the specified meter. name must be a unique name to identify
+              this meter. The action argument  specifies  what  should  happen
+              when this meter is exceeded. The only supported action is drop.
+
+              The  unit specifies the unit for the rate argument; valid values
+              are kbps and pktps for kilobits per second and packets per  sec‐
+              ond, respectively. The burst option configures the maximum burst
+              allowed for the band in kilobits or packets depending on whether
+              the  unit  chosen was kbps or pktps, respectively. If a burst is
+              not supplied, the switch is free to select some reasonable value
+              depending on its configuration.
+
+              ovn-nbctl only supports adding a meter with a single  band,  but
+              the other commands support meters with multiple bands.
+
+              Names  that  start  with "__" (two underscores) are reserved for
+              internal use by OVN, so ovn-nbctl does not allow adding them.
+
+       meter-del [name]
+              Deletes meters. By default, all meters are deleted. If  name  is
+              supplied, only the meter with that name will be deleted.
+
+       meter-list
+              Lists all meters.
+
+   Logical Switch Port Commands
+       [--may-exist] lsp-add switch port
+              Creates on lswitch a new logical switch port named port.
+
+              It  is an error if a logical port named port already exists, un‐
+              less --may-exist is specified. Regardless of --may-exist, it  is
+              an  error  if  the existing port is in some logical switch other
+              than switch or if it has a parent port.
+
+       [--may-exist] lsp-add switch port parent tag_request
+              Creates on switch a logical switch port named  port  that  is  a
+              child  of  parent  that  is identified with VLAN ID tag_request,
+              which must be between 0 and 4095, inclusive. If  tag_request  is
+              0,  ovn-northd  generates  a  tag that is unique in the scope of
+              parent. This is useful in cases such  as  virtualized  container
+              environments  where  Open vSwitch does not have a direct connec‐
+              tion to the container’s port and it must be shared with the vir‐
+              tual machine’s port.
+
+              It is an error if a logical port named port already exists,  un‐
+              less  --may-exist is specified. Regardless of --may-exist, it is
+              an error if the existing port is not in switch or if it does not
+              have the specified parent and tag_request.
+
+       [--if-exists] lsp-del port
+              Deletes port. It is an error if  port  does  not  exist,  unless
+              --if-exists is specified.
+
+       lsp-list switch
+              Lists  all  the  logical  switch ports within switch on standard
+              output, one per line.
+
+       lsp-get-parent port
+              If set, get the parent port of port. If not set, print nothing.
+
+       lsp-get-tag port
+              If set, get the tag for port traffic. If not set, print nothing.
+
+       lsp-set-addresses port [address]...
+              Sets the addresses associated with port to address. Each address
+              should be one of the following:
+
+              an Ethernet address, optionally followed by a space and one or
+              more IP addresses
+                     OVN delivers packets for the  Ethernet  address  to  this
+                     port.
+
+              unknown
+                     OVN  delivers  unicast Ethernet packets whose destination
+                     MAC address is not in any logical port’s addresses column
+                     to ports with address unknown.
+
+              dynamic
+                     Use this keyword to make ovn-northd generate  a  globally
+                     unique MAC address and choose an unused IPv4 address with
+                     the  logical  port’s  subnet and store them in the port’s
+                     dynamic_addresses column.
+
+              router Accepted only when the type of the logical switch port is
+                     router. This indicates that the Ethernet, IPv4, and  IPv6
+                     addresses for this logical switch port should be obtained
+                     from  the  connected logical router port, as specified by
+                     router-port in lsp-set-options.
+
+              Multiple addresses may be set. If no address argument is  given,
+              port will have no addresses associated with it.
+
+       lsp-get-addresses port
+              Lists all the addresses associated with port on standard output,
+              one per line.
+
+       lsp-set-port-security port [addrs]...
+              Sets  the port security addresses associated with port to addrs.
+              Multiple sets of addresses may be set by  using  multiple  addrs
+              arguments.  If  no  addrs  argument is given, port will not have
+              port security enabled.
+
+              Port security limits the addresses from which a logical port may
+              send packets and to  which  it  may  receive  packets.  See  the
+              ovn-nb(5) documentation for the port_security column in the Log�‐
+              ical_Switch_Port table for details.
+
+       lsp-get-port-security port
+              Lists  all  the  port security addresses associated with port on
+              standard output, one per line.
+
+       lsp-get-up port
+              Prints the state of port, either up or down.
+
+       lsp-set-enabled port state
+              Set the administrative state of port,  either  enabled  or  dis�‐
+              abled.  When  a  port is disabled, no traffic is allowed into or
+              out of the port.
+
+       lsp-get-enabled port
+              Prints the administrative state of port, either enabled or  dis�‐
+              abled.
+
+       lsp-set-type port type
+              Set  the  type for the logical port. The type must be one of the
+              following:
+
+              (empty string)
+                     A VM (or VIF) interface.
+
+              router A connection to a logical router.
+
+              localnet
+                     A connection to a locally accessible  network  from  each
+                     ovn-controller instance. A logical switch can only have a
+                     single  localnet port attached. This is used to model di‐
+                     rect connectivity to an existing network.
+
+              localport
+                     A connection to a local VIF. Traffic that  arrives  on  a
+                     localport  is  never  forwarded  over a tunnel to another
+                     chassis. These ports are present  on  every  chassis  and
+                     have  the  same  address  in all of them. This is used to
+                     model connectivity to local services that  run  on  every
+                     hypervisor.
+
+              l2gateway
+                     A connection to a physical network.
+
+              vtep   A port to a logical switch on a VTEP gateway.
+
+       lsp-get-type port
+              Get the type for the logical port.
+
+       lsp-set-options port [key=value]...
+              Set type-specific key-value options for the logical port.
+
+       lsp-get-options port
+              Get the type-specific options for the logical port.
+
+       lsp-set-dhcpv4-options port dhcp_options
+              Set the DHCPv4 options for the logical port. The dhcp_options is
+              a  UUID  referring  to a set of DHCP options in the DHCP_Options
+              table.
+
+       lsp-get-dhcpv4-options port
+              Get the configured DHCPv4 options for the logical port.
+
+       lsp-set-dhcpv6-options port dhcp_options
+              Set the DHCPv6 options for the logical port. The dhcp_options is
+              a UUID referring to a set of DHCP options  in  the  DHCP_Options
+              table.
+
+       lsp-get-dhcpv6-options port
+              Get the configured DHCPv6 options for the logical port.
+
+       lsp-get-ls port
+              Get the logical switch which the port belongs to.
+
+       lsp-attach-mirror port m
+              Attaches the mirror m to the logical port port.
+
+       lsp-detach-mirror port m
+              Detaches the mirror m from the logical port port.
+
+   Forwarding Group Commands
+       [--liveness]fwd-group-add group switch vip vmac ports
+              Creates  a new forwarding group named group as the name with the
+              provided vip and vmac. vip should be a virtual  IP  address  and
+              vmac  should  be  a virtual MAC address to access the forwarding
+              group. ports are the logical switch port names that are  put  in
+              the forwarding group. Example for ports is lsp1 lsp2 ... Traffic
+              destined to virtual IP of the forwarding group will be load bal‐
+              anced to all the child ports.
+
+              When --liveness is specified then child ports are expected to be
+              bound to external devices like routers. BFD should be configured
+              between hypervisors and the external devices. The child port se‐
+              lection  will  become  dependent on BFD status with its external
+              device.
+
+       [--if-exists] fwd-group-del group
+               Deletes group. It is an error if group does not  exist,  unless
+              --if-exists is specified.
+
+       fwd-group-list [switch]
+              Lists  all  existing  forwarding  groups, If switch is specified
+              then only the forwarding groups configured for  switch  will  be
+              listed.
+
+   Logical Router Commands
+       lr-add Creates  a  new,  unnamed logical router, which initially has no
+              ports. The router does not have a name, other commands must  re‐
+              fer to this router by its UUID.
+
+       [--may-exist | --add-duplicate] lr-add router
+              Creates  a  new logical router named router, which initially has
+              no ports.
+
+              The OVN northbound database  schema  does  not  require  logical
+              router  names  to be unique, but the whole point to the names is
+              to provide an easy way for humans to refer to the routers,  mak‐
+              ing  duplicate  names unhelpful. Thus, without any options, this
+              command regards it as an error if router is  a  duplicate  name.
+              With  --may-exist, adding a duplicate name succeeds but does not
+              create a new logical router. With --add-duplicate,  the  command
+              really creates a new logical router with a duplicate name. It is
+              an  error to specify both options. If there are multiple logical
+              routers with a duplicate name, configure the logical routers us‐
+              ing the UUID instead of the router name.
+
+       [--if-exists] lr-del router
+              Deletes router. It is an error if router does not exist,  unless
+              --if-exists is specified.
+
+       lr-list
+              Lists all existing routers on standard output, one per line.
+
+   Logical Router Port Commands
+       [--may-exist] lrp-add router port mac network... [peer=peer]
+              Creates on router a new logical router port named port with Eth‐
+              ernet  address  mac  and one or more IP address/netmask for each
+              network.
+
+              The optional argument peer identifies a logical router port that
+              connects to this one. The following example adds a  router  port
+              with an IPv4 and IPv6 address with peer lr1:
+
+              lrp-add lr0 lrp0 00:11:22:33:44:55 192.168.0.1/24 2001:db8::1/64
+              peer=lr1
+
+              It  is  an error if a logical router port named port already ex‐
+              ists, unless --may-exist is specified. Regardless  of  --may-ex�‐
+              ist, it is an error if the existing router port is in some logi‐
+              cal router other than router.
+
+       [--if-exists] lrp-del port
+              Deletes  port.  It  is  an  error if port does not exist, unless
+              --if-exists is specified.
+
+       lrp-list router
+              Lists all the logical router ports  within  router  on  standard
+              output, one per line.
+
+       lrp-set-enabled port state
+              Set  the  administrative  state  of port, either enabled or dis�‐
+              abled. When a port is disabled, no traffic is  allowed  into  or
+              out of the port.
+
+       lrp-get-enabled port
+              Prints  the administrative state of port, either enabled or dis�‐
+              abled.
+
+       lrp-set-gateway-chassis port chassis [priority]
+              Set gateway chassis for port. chassis is the name of  the  chas‐
+              sis. This creates a gateway chassis entry in Gateway_Chassis ta‐
+              ble.  It  won’t check if chassis really exists in OVN_Southbound
+              database. Priority will be set to 0 if priority is not  provided
+              by user. priority must be between 0 and 32767, inclusive.
+
+       lrp-del-gateway-chassis port chassis
+              Deletes  gateway  chassis  from  port. It is an error if gateway
+              chassis with chassis for port does not exist.
+
+       lrp-get-gateway-chassis port
+              Lists all the gateway chassis with priority within port on stan‐
+              dard output, one per line, ordered based on priority.
+
+   Logical Router Static Route Commands
+       [--may-exist] [--policy=POLICY] [--ecmp] [--ecmp-symmetric-reply]
+       [--bfd[=UUID]] lr-route-add router prefix nexthop [port]
+              Adds the specified route to router. prefix describes an IPv4  or
+              IPv6  prefix  for  this route, such as 192.168.100.0/24. nexthop
+              specifies the gateway to use for this route, which should be the
+              IP address of one of router logical router ports or the  IP  ad‐
+              dress  of  a  logical  port.  If port is specified, packets that
+              match this route will be sent out that port. When port is  omit‐
+              ted, OVN infers the output port based on nexthop. Nexthop can be
+              set to discard for dropping packets which match the given route.
+
+              --policy  describes  the  policy used to make routing decisions.
+              This should be one of "dst-ip" or "src-ip".  If  not  specified,
+              the default is "dst-ip".
+
+              The  --ecmp option allows for multiple routes with the same pre‐
+              fix POLICY but different nexthop and port to be added.
+
+              The --ecmp-symmetric-reply option makes it so that traffic  that
+              arrives  over an ECMP route will have its reply traffic sent out
+              over that same  route.  Setting  --ecmp-symmetric-reply  implies
+              --ecmp so it is not necessary to set both.
+
+              --bfd  option is used to link a BFD session to the OVN route. If
+              the BFD session UUID is provided, it will be used  for  the  OVN
+              route otherwise the next-hop will be used to perform a lookup in
+              the  OVN BFD table. If the lookup fails and port is specified, a
+              new entry in the BFD table will be created using the nexthop  as
+              dst_ip and port as logical_port.
+
+              It is an error if a route with prefix and POLICY already exists,
+              unless  --may-exist, --ecmp, or --ecmp-symmetric-reply is speci‐
+              fied. If --may-exist is specified but not --ecmp or  --ecmp-sym�‐
+              metric-reply,  the  existed  route  will be updated with the new
+              nexthop and port. If --ecmp or --ecmp-symmetric-reply is  speci‐
+              fied,  a  new  route  will  be  added, regardless of the existed
+              route., which is useful when adding  ECMP  routes,  i.e.  routes
+              with same POLICY and prefix but different nexthop and port.
+
+       [--if-exists] [--policy=POLICY] lr-route-del router [prefix [nexthop
+       [port]]]
+              Deletes  routes from router. If only router is supplied, all the
+              routes from the logical router are deleted. If  POLICY,  prefix,
+              nexthop and/or port are also specified, then all the routes that
+              match the conditions will be deleted from the logical router.
+
+              It  is  an  error  if  there  is no matching route entry, unless
+              --if-exists is specified.
+
+       lr-route-list router
+              Lists the routes on router.
+
+   Logical Router Policy Commands
+       [--may-exist]lr-policy-add router priority match action [nexthop[,nex‐
+       thop,...]] [options key=value]]
+              Add Policy to router which provides  a  way  to  configure  per‐
+              mit/deny  and  reroute policies on the router. Permit/deny poli‐
+              cies are similar to OVN ACLs, but exist on  the  logical-router.
+              Reroute  policies  are needed for service-insertion and service-
+              chaining. nexthop is an optional parameter. It needs to be  pro‐
+              vided  only  when  action  is  reroute. Multiple nexthops can be
+              specified for ECMP routing. A policy is uniquely  identified  by
+              priority  and  match. Multiple policies can have the same prior‐
+              ity. options sets the router policy options as  key-value  pair.
+              The supported option is : pkt_mark.
+
+              If  --may-exist is specified, adding a duplicated routing policy
+              with the same priority and match string is not  really  created.
+              Without  --may-exist, adding a duplicated routing policy results
+              in error.
+
+              The following example shows a policy to  lr1,  which  will  drop
+              packets from192.168.100.0/24.
+
+              lr-policy-add lr1 100 ip4.src == 192.168.100.0/24 drop.
+
+                 lr-policy-add  lr1  100  ip4.src  ==  192.168.100.0/24  allow
+              pkt_mark=100 .
+
+       [--if-exists] lr-policy-del router [{priority | uuid} [match]]
+              Deletes polices from router. If only router is supplied, all the
+              polices from the logical router are deleted. If priority  and/or
+              match  are  also  specified, then all the polices that match the
+              conditions will be deleted from the logical router.
+
+              If router and uuid are supplied, then the policy with  specified
+              uuid  is  deleted. It is an error if uuid does not exist, unless
+              --if-exists is specified.
+
+       lr-policy-list router
+              Lists the polices on router.
+
+   NAT Commands
+       [--may-exist] [--stateless] [--gateway-port=GATEWAY_PORT] lr-nat-add
+       router type external_ip logical_ip [logical_port external_mac]
+              Adds the specified NAT to router. The type must be one of  snat,
+              dnat,  or dnat_and_snat. The external_ip is an IPv4 address. The
+              logical_ip is an IPv4 network (e.g 192.168.1.0/24)  or  an  IPv4
+              address.  The  logical_port  and  external_mac are only accepted
+              when router is a  distributed  router  (rather  than  a  gateway
+              router)  and type is dnat_and_snat. The logical_port is the name
+              of an existing logical switch port where the logical_ip resides.
+              The external_mac is an Ethernet address.
+
+              When --stateless is specified then it implies that  we  will  be
+              not  use connection tracker, i.e internal ip and external ip are
+              1:1 mapped. This implies that --stateless is applicable only  to
+              dnat_and_snat  type  NAT  rules. An external ip with --stateless
+              NAT cannot be shared with any other NAT rule.
+
+              --gateway-port option allows specifying the distributed  gateway
+              port  of  router  where  the NAT rule needs to be applied. GATE‐
+              WAY_PORT should reference a Logical_Router_Port row  that  is  a
+              distributed  gateway  port  of  router. When router has multiple
+              distributed gateway ports and the  gateway  port  for  this  NAT
+              can’t  be  inferred  from the external_ip, it is an error to not
+              specify the GATEWAY_PORT.
+
+              When type is dnat, the externally visible IP address external_ip
+              is DNATted to the IP address logical_ip in the logical space.
+
+              When type is snat, IP packets with their source IP address  that
+              either matches the IP address in logical_ip or is in the network
+              provided  by  logical_ip is SNATed into the IP address in exter‐
+              nal_ip.
+
+              When type is dnat_and_snat, the externally  visible  IP  address
+              external_ip is DNATted to the IP address logical_ip in the logi‐
+              cal  space.  In  addition, IP packets with the source IP address
+              that matches logical_ip is SNATed into the IP address in  exter‐
+              nal_ip.
+
+              When  the  logical_port  and external_mac are specified, the NAT
+              rule will be programmed on the chassis  where  the  logical_port
+              resides.  This  includes  ARP replies for the external_ip, which
+              return the value of external_mac. All packets  transmitted  with
+              source  IP  address  equal to external_ip will be sent using the
+              external_mac.
+
+              It is an error if a NAT already exists with the same  values  of
+              router,  type, external_ip, logical_ip and GATEWAY_PORT (in case
+              of multiple distributed gateway ports),  unless  --may-exist  is
+              specified.  When --may-exist, logical_port, and external_mac are
+              all specified, the existing values of  logical_port  and  exter‐
+              nal_mac are overwritten.
+
+       [--if-exists] lr-nat-del router [type [ip] [gateway_port]]
+              Deletes  NATs  from  router. If only router is supplied, all the
+              NATs from the logical router are deleted. If type is also speci‐
+              fied, then all the NATs that match the type will be deleted from
+              the logical router. If ip is also specified  without  specifying
+              gateway_port,  then all the NATs that match the type and ip will
+              be deleted from the logical router. If gateway_port is specified
+              without specifying ip, then all the NATs that match the type and
+              gateway_port will be deleted from the logical router. If all the
+              fields are given, then a single NAT rule that  matches  all  the
+              fields will be deleted. When type is snat, the ip should be log‐
+              ical_ip.  When  type  is dnat or dnat_and_snat, the ip should be
+              external_ip.
+
+              It is an error if both ip and  gateway_port  are  specified  and
+              there is no matching NAT entry, unless --if-exists is specified.
+
+       lr-nat-list router
+              Lists the NATs on router.
+
+   Load Balancer Commands
+       [--may-exist | --add-duplicate | --reject | --event] lb-add lb vip ips
+       [protocol]
+              Creates  a  new load balancer named lb with the provided vip and
+              ips or adds the vip to an existing lb. vip should be  a  virtual
+              IP address (or an IP address and a port number with : as a sepa‐
+              rator).   Examples   for   vip  are  192.168.1.4,  fd0f::1,  and
+              192.168.1.5:8080. ips should be comma separated IP endpoints (or
+              comma separated IP addresses and port numbers with : as a  sepa‐
+              rator). ips must be the same address family as vip. Examples for
+              ips are 10.0.0.1,10.0.0.2or [fdef::1]:8800,[fdef::2]:8800.
+
+              The  optional argument protocol must be either tcp, udp or sctp.
+              This argument is useful when a port number is provided  as  part
+              of  the vip. If the protocol is unspecified and a port number is
+              provided as part of the vip, OVN assumes the protocol to be tcp.
+
+              It is an error if the vip already exists in  the  load  balancer
+              named lb, unless --may-exist is specified. With --add-duplicate,
+              the  command really creates a new load balancer with a duplicate
+              name.
+
+              If the load balancer is created with --reject option and it  has
+              no  active  backends,  a  TCP reset segment (for tcp) or an ICMP
+              port unreachable packet (for all other kind of traffic) will  be
+              sent  whenever an incoming packet is received for this load-bal‐
+              ancer. Please note using --reject option will  disable  empty_lb
+              SB controller event for this load balancer.
+
+              If  the  load balancer is created with --event option and it has
+              no active backends, whenever the lb receives traffic, the  event
+              is  reported  in the Controller_Event table in the SB db. Please
+              note --event option can’t be specified with --reject one.
+
+              The following example adds a load balancer.
+
+              lb-add                     lb0                      30.0.0.10:80
+              192.168.10.10:80,192.168.10.20:80,192.168.10.30:80 udp
+
+       [--if-exists] lb-del lb [vip]
+              Deletes  lb or the vip from lb. If vip is supplied, only the vip
+              will be deleted from the lb. If only the lb is supplied, the  lb
+              will be deleted. It is an error if vip does not already exist in
+              lb, unless --if-exists is specified.
+
+       lb-list [lb]
+              Lists  the LBs. If lb is also specified, then only the specified
+              lb will be listed.
+
+       [--may-exist] ls-lb-add switch lb
+              Adds the specified lb to switch. It is an error if a  load  bal‐
+              ancer  named lb already exists in the switch, unless --may-exist
+              is specified.
+
+       [--if-exists] ls-lb-del switch [lb]
+              Removes lb from switch. If only switch is supplied, all the  LBs
+              from  the  logical  switch are removed. If lb is also specified,
+              then only the lb will be removed from the logical switch. It  is
+              an  error if lb does not exist in the switch, unless --if-exists
+              is specified.
+
+       ls-lb-list switch
+              Lists the LBs for the given switch.
+
+       [--may-exist] lr-lb-add router lb
+              Adds the specified lb to router. It is an error if a  load  bal‐
+              ancer  named lb already exists in the router, unless --may-exist
+              is specified.
+
+       [--if-exists] lr-lb-del router [lb]
+              Removes lb from router. If only router is supplied, all the  LBs
+              from  the  logical  router are removed. If lb is also specified,
+              then only the lb will be removed from the logical router. It  is
+              an  error if lb does not exist in the router, unless --if-exists
+              is specified.
+
+       lr-lb-list router
+              Lists the LBs for the given router.
+
+   DHCP Options commands
+       dhcp-options-create cidr [key=value]
+              Creates a new DHCP Options entry in the DHCP_Options table  with
+              the specified cidr and optional external-ids.
+
+       dhcp-options-list
+              Lists the DHCP Options entries.
+
+       dhcp-options-del dhcp-option
+              Deletes the DHCP Options entry referred by dhcp-option UUID.
+
+       dhcp-options-set-options dhcp-option [key=value]...
+              Set the DHCP Options for the dhcp-option UUID.
+
+       dhcp-options-get-options dhcp-option
+              Lists the DHCP Options for the dhcp-option UUID.
+
+   Port Group commands
+       pg-add group [port]...
+              Creates  a  new  port  group in the Port_Group table named group
+              with optional ports added to the group.
+
+       pg-set-ports group port...
+              Sets ports on the port group named group.  It  is  an  error  if
+              group does not exist.
+
+       pg-del group
+              Deletes  port  group group. It is an error if group does not ex‐
+              ist.
+
+   HA Chassis Group commands
+       ha-chassis-group-add group
+              Creates a new HA chassis group  in  the  HA_Chassis_Group  table
+              named group.
+
+       ha-chassis-group-del group
+              Deletes the HA chassis group group. It is an error if group does
+              not exist.
+
+       ha-chassis-group-list
+              Lists  the  HA  chassis group group along with the HA chassis if
+              any associated with it.
+
+       ha-chassis-group-add-chassis group chassis priority
+              Adds a new HA chassis chassis to the HA Chassis group group with
+              the specified priority. If the chassis already exists, then  the
+              priority is updated. The chassis should be the name of the chas‐
+              sis in the OVN_Southbound.
+
+       ha-chassis-group-remove-chassis group chassis
+              Removes  the HA chassis chassis from the HA chassis group group.
+              It is an error if chassis does not exist.
+
+   Control Plane Protection Policy commands
+       These commands manage meters configured in Copp table linking  them  to
+       logical  datapaths  through  copp  column  in  Logical_Switch  or Logi�‐
+       cal_Router tables. Protocol packets for which  CoPP  is  enforced  when
+       sending packets to ovn-controller (if configured):
+
+              •      ARP
+
+              •      ND_NS
+
+              •      ND_NA
+
+              •      ND_RA
+
+              •      ND
+
+              •      DNS
+
+              •      IGMP
+
+              •      packets that require ARP resolution before forwarding
+
+              •      packets that require ND_NS before forwarding
+
+              •      packets that need to be replied to with ICMP Errors
+
+              •      packets that need to be replied to with TCP RST
+
+              •      packets that need to be replied to with DHCP_OPTS
+
+              •      packets that trigger a reject action
+
+              •      packets that trigger a SCTP abort action
+
+              •      controller_events
+
+              •      BFD
+
+              copp-add name proto meter
+                     Adds  the  control  proto to meter mapping to the control
+                     plane protection policy name. If no policy exists yet, it
+                     creates one. If a mapping already existed for proto, this
+                     will overwrite it.
+
+              copp-del name [proto]
+                     Removes the control proto mapping for  the  name  control
+                     plane  protection  policy. If proto is not specified, the
+                     whole control plane protection policy is destroyed.
+
+              copp-list name
+                     Display the current control plane protection  policy  for
+                     name.
+
+              ls-copp-add name switch
+                     Adds the control plane protection policy name to the log‐
+                     ical switch switch.
+
+              lr-copp-add name router
+                     Adds the control plane protection policy name to the log‐
+                     ical router router.
+
+   Mirror commands
+       mirror-add m type [index] filter dest
+              Creates  a  new  mirror in the Mirror table with the name m with
+              the below mandatory arguments.
+
+              type specifies the mirror type - gre , erspan or local.
+
+              index specifies the tunnel index value (which is an integer)  if
+              the type is gre or erspan.
+
+              filter specifies the mirror source selection. Can be from-lport,
+              to-lport or both.
+
+              dest  specifies the mirror destination IP (v4 or v6) if the type
+              is gre or erspan. For a type of local, this field defines a  lo‐
+              cal  interface  on  the OVS integration bridge to be used as the
+              mirror destination. The interface must possess external-ids:mir‐
+              ror-id that matches this string.
+
+       mirror-del m
+              Deletes the mirror m.
+
+       mirror-list
+              Lists the mirrors.
+
+   Synchronization Commands
+       sync   Ordinarily, --wait=sb or --wait=hv only waits for changes by the
+              current ovn-nbctl invocation to take effect. This means that, if
+              none of the commands supplied to ovn-nbctl change the  database,
+              then  the  command  does not wait at all. With the sync command,
+              however, ovn-nbctl waits even for earlier changes to  the  data‐
+              base  to propagate down to the southbound database or all of the
+              OVN chassis, according to the argument to --wait.
+
+   Remote Connectivity Commands
+       These commands manipulate the connections column in the NB_Global table
+       and rows in the Connection table. When ovsdb-server  is  configured  to
+       use  the  connections column for OVSDB connections, this allows the ad‐
+       ministrator to use ovn-nbctl to configure database connections.
+
+              get-connection
+                     Prints the configured connection(s).
+
+              del-connection
+                     Deletes the configured connection(s).
+
+              [--inactivity-probe=msecs] set-connection target...
+                     Sets the configured manager target or targets. Use  --in�‐
+                     activity-probe=msecs to override the default idle connec‐
+                     tion  inactivity  probe time. Use 0 to disable inactivity
+                     probes.
+
+   SSL Configuration Commands
+       get-ssl
+              Prints the SSL configuration.
+
+       del-ssl
+              Deletes the current SSL configuration.
+
+       [--bootstrap] set-ssl private-key certificate ca-cert [ssl-protocol-
+       list [ssl-cipher-list]]
+              Sets the SSL configuration.
+
+   Database Commands
+       These commands query and modify the contents of ovsdb tables. They  are
+       a slight abstraction of the ovsdb interface and as such they operate at
+       a lower level than other ovn-nbctl commands.
+
+       Identifying Tables, Records, and Columns
+
+       Each of these commands has a table parameter to identify a table within
+       the database. Many of them also take a record parameter that identifies
+       a  particular  record  within  a table. The record parameter may be the
+       UUID for a record, which may be abbreviated to its first  4  (or  more)
+       hex  digits,  as  long  as that is unique. Many tables offer additional
+       ways to identify records. Some commands  also  take  column  parameters
+       that identify a particular field within the records in a table.
+
+       For  a list of tables and their columns, see ovn-nb(5) or see the table
+       listing from the --help option.
+
+       Record names must be specified in full and with correct capitalization,
+       except that UUIDs may be abbreviated to their first  4  (or  more)  hex
+       digits, as long as that is unique within the table. Names of tables and
+       columns  are  not  case-sensitive, and - and _ are treated interchange‐
+       ably. Unique abbreviations of table and column  names  are  acceptable,
+       e.g. d or dhcp is sufficient to identify the DHCP_Options table.
+
+       Database Values
+
+       Each column in the database accepts a fixed type of data. The currently
+       defined basic types, and their representations, are:
+
+              integer
+                     A  decimal integer in the range -2**63 to 2**63-1, inclu‐
+                     sive.
+
+              real   A floating-point number.
+
+              Boolean
+                     True or false, written true or false, respectively.
+
+              string An arbitrary Unicode string, except that null  bytes  are
+                     not  allowed.  Quotes  are optional for most strings that
+                     begin with an English letter or  underscore  and  consist
+                     only  of letters, underscores, hyphens, and periods. How‐
+                     ever, true and false and strings that match the syntax of
+                     UUIDs (see below) must be enclosed in  double  quotes  to
+                     distinguish  them  from  other  basic  types. When double
+                     quotes are used, the syntax is that of strings  in  JSON,
+                     e.g.  backslashes  may  be used to escape special charac‐
+                     ters. The empty string must be represented as a  pair  of
+                     double quotes ("").
+
+              UUID   Either  a  universally  unique identifier in the style of
+                     RFC 4122, e.g.  f81d4fae-7dec-11d0-a765-00a0c91e6bf6,  or
+                     an  @name  defined  by a get or create command within the
+                     same ovs-vsctl invocation.
+
+       Multiple values in a single column may be separated by spaces or a sin‐
+       gle comma. When multiple values are present,  duplicates  are  not  al‐
+       lowed,  and  order  is not important. Conversely, some database columns
+       can have an empty set of values, represented as [], and square brackets
+       may optionally enclose other non-empty sets or single values as well.
+
+       A few database columns are ``maps’’ of key-value pairs, where  the  key
+       and the value are each some fixed database type. These are specified in
+       the  form key=value, where key and value follow the syntax for the col‐
+       umn’s key type and value type, respectively. When  multiple  pairs  are
+       present  (separated  by  spaces or a comma), duplicate keys are not al‐
+       lowed, and again the order is not important. Duplicate values  are  al‐
+       lowed.  An  empty map is represented as {}. Curly braces may optionally
+       enclose non-empty maps as well (but use quotes  to  prevent  the  shell
+       from  expanding other-config={0=x,1=y} into other-config=0=x other-con�‐
+       fig=1=y, which may not have the desired effect).
+
+       Database Command Syntax
+
+              [--if-exists] [--columns=column[,column]...] list table
+              [record]...
+                     Lists the data in each specified record.  If  no  records
+                     are specified, lists all the records in table.
+
+                     If --columns is specified, only the requested columns are
+                     listed,  in  the  specified order. Otherwise, all columns
+                     are listed, in alphabetical order by column name.
+
+                     Without --if-exists, it is  an  error  if  any  specified
+                     record  does not exist. With --if-exists, the command ig‐
+                     nores any record that does not exist,  without  producing
+                     any output.
+
+              [--columns=column[,column]...] find table [col‐
+              umn[:key]=value]...
+                     Lists  the  data  in  each  record  in table whose column
+                     equals value or, if key is specified, whose  column  con‐
+                     tains a key with the specified value. The following oper‐
+                     ators  may  be used where = is written in the syntax sum‐
+                     mary:
+
+                     = != < > <= >=
+                            Selects records in which column[:key] equals, does
+                            not equal, is less than, is greater than, is  less
+                            than  or  equal to, or is greater than or equal to
+                            value, respectively.
+
+                            Consider column[:key] and value as  sets  of  ele‐
+                            ments. Identical sets are considered equal. Other‐
+                            wise,  if  the sets have different numbers of ele‐
+                            ments, then the set with more elements is  consid‐
+                            ered  to  be larger. Otherwise, consider a element
+                            from each set pairwise, in increasing order within
+                            each set. The first pair that  differs  determines
+                            the  result. (For a column that contains key-value
+                            pairs, first all the keys are compared, and values
+                            are considered only if the two sets contain  iden‐
+                            tical keys.)
+
+                     {=} {!=}
+                            Test for set equality or inequality, respectively.
+
+                     {<=}   Selects  records in which column[:key] is a subset
+                            of value. For example, flood-vlans{<=}1,2  selects
+                            records  in  which  the  flood-vlans column is the
+                            empty set or contains 1 or 2 or both.
+
+                     {<}    Selects records in which column[:key] is a  proper
+                            subset  of  value.  For example, flood-vlans{<}1,2
+                            selects records in which the flood-vlans column is
+                            the empty set or contains 1 or 2 but not both.
+
+                     {>=} {>}
+                            Same as {<=} and {<},  respectively,  except  that
+                            the   relationship   is   reversed.  For  example,
+                            flood-vlans{>=}1,2 selects records  in  which  the
+                            flood-vlans column contains both 1 and 2.
+
+                     The  following  operators  are  available  only  in  Open
+                     vSwitch 2.16 and later:
+
+                     {in}   Selects records in which  every  element  in  col‐
+                            umn[:key]  is  also in value. (This is the same as
+                            {<=}.)
+
+                     {not-in}
+                            Selects records in which  every  element  in  col‐
+                            umn[:key] is not in value.
+
+                     For  arithmetic  operators  (= != < > <= >=), when key is
+                     specified but a particular record’s column does not  con‐
+                     tain  key, the record is always omitted from the results.
+                     Thus,  the   condition   other-config:mtu!=1500   matches
+                     records  that have a mtu key whose value is not 1500, but
+                     not those that lack an mtu key.
+
+                     For the set operators, when key is specified but  a  par‐
+                     ticular record’s column does not contain key, the compar‐
+                     ison  is  done  against an empty set. Thus, the condition
+                     other-config:mtu{!=}1500 matches records that have a  mtu
+                     key  whose  value  is not 1500 and those that lack an mtu
+                     key.
+
+                     Don’t forget to escape < or > from interpretation by  the
+                     shell.
+
+                     If --columns is specified, only the requested columns are
+                     listed, in the specified order. Otherwise all columns are
+                     listed, in alphabetical order by column name.
+
+                     The  UUIDs  shown  for rows created in the same ovs-vsctl
+                     invocation will be wrong.
+
+              [--if-exists] [--id=@name] get table record [column[:key]]...
+                     Prints the value of each specified column  in  the  given
+                     record in table. For map columns, a key may optionally be
+                     specified, in which case the value associated with key in
+                     the column is printed, instead of the entire map.
+
+                     Without  --if-exists,  it  is an error if record does not
+                     exist or key is specified,  if  key  does  not  exist  in
+                     record. With --if-exists, a missing record yields no out‐
+                     put and a missing key prints a blank line.
+
+                     If  @name  is  specified, then the UUID for record may be
+                     referred to by that name later in the same ovs-vsctl  in‐
+                     vocation in contexts where a UUID is expected.
+
+                     Both --id and the column arguments are optional, but usu‐
+                     ally  at  least  one or the other should be specified. If
+                     both are omitted, then get has no effect except to verify
+                     that record exists in table.
+
+                     --id and --if-exists cannot be used together.
+
+              [--if-exists] set table record column[:key]=value...
+                     Sets the value of each  specified  column  in  the  given
+                     record  in table to value. For map columns, a key may op‐
+                     tionally be specified, in which case the value associated
+                     with key in that column is changed (or added, if none ex‐
+                     ists), instead of the entire map.
+
+                     Without --if-exists, it is an error if  record  does  not
+                     exist.  With  --if-exists,  this  command does nothing if
+                     record does not exist.
+
+              [--if-exists] add table record column [key=]value...
+                     Adds the specified value or key-value pair to  column  in
+                     record  in  table.  If  column  is a map, then key is re‐
+                     quired, otherwise it is prohibited. If key already exists
+                     in a map column, then the current value is  not  replaced
+                     (use the set command to replace an existing value).
+
+                     Without  --if-exists,  it  is an error if record does not
+                     exist. With --if-exists, this  command  does  nothing  if
+                     record does not exist.
+
+              [--if-exists] remove table record column value...
+
+                     [--if-exists] remove table record column key...
+
+                     [--if-exists]  remove  table  record  column key=value...
+                     Removes the specified values or key-value pairs from col‐
+                     umn in record in table. The first form applies to columns
+                     that are not maps: each specified value is  removed  from
+                     the  column.  The  second  and  third  forms apply to map
+                     columns: if only a key is specified, then  any  key-value
+                     pair  with  the  given  key is removed, regardless of its
+                     value; if a value is given then a pair is removed only if
+                     both key and value match.
+
+                     It is not an error if the column  does  not  contain  the
+                     specified key or value or pair.
+
+                     Without  --if-exists,  it  is an error if record does not
+                     exist. With --if-exists, this  command  does  nothing  if
+                     record does not exist.
+
+              [--if-exists] clear table record column...
+                     Sets  each  column in record in table to the empty set or
+                     empty map, as appropriate. This command applies  only  to
+                     columns that are allowed to be empty.
+
+                     Without  --if-exists,  it  is an error if record does not
+                     exist. With --if-exists, this  command  does  nothing  if
+                     record does not exist.
+
+              [--id=(@name|uuid)] create table column[:key]=value...
+                     Creates a new record in table and sets the initial values
+                     of  each  column. Columns not explicitly set will receive
+                     their default values. Outputs the UUID of the new row.
+
+                     If @name is specified, then the UUID for the new row  may
+                     be  referred  to by that name elsewhere in the same \*(PN
+                     invocation in contexts where a  UUID  is  expected.  Such
+                     references may precede or follow the create command.
+
+                     If a valid uuid is specified, then it is used as the UUID
+                     of the new row.
+
+                     Caution (ovs-vsctl as example)
+                            Records  in the Open vSwitch database are signifi‐
+                            cant only when they can be reached directly or in‐
+                            directly from the Open_vSwitch table.  Except  for
+                            records  in  the QoS or Queue tables, records that
+                            are not reachable from the Open_vSwitch table  are
+                            automatically  deleted  from  the  database.  This
+                            deletion happens immediately, without waiting  for
+                            additional  ovs-vsctl  commands  or other database
+                            activity. Thus, a create command must generally be
+                            accompanied by additional commands within the same
+                            ovs-vsctl invocation to add a chain of  references
+                            to  the  newly  created  record from the top-level
+                            Open_vSwitch record. The  EXAMPLES  section  gives
+                            some examples that show how to do this.
+
+              [--if-exists] destroy table record...
+                     Deletes each specified record from table. Unless --if-ex�‐
+                     ists is specified, each records must exist.
+
+              --all destroy table
+                     Deletes all records from the table.
+
+                     Caution (ovs-vsctl as example)
+                            The  destroy command is only useful for records in
+                            the QoS or Queue tables. Records in  other  tables
+                            are  automatically  deleted from the database when
+                            they become unreachable from the Open_vSwitch  ta‐
+                            ble.  This  means that deleting the last reference
+                            to a record is sufficient for deleting the  record
+                            itself.  For  records  in these tables, destroy is
+                            silently ignored. See the EXAMPLES  section  below
+                            for more information.
+
+              wait-until table record [column[:key]=value]...
+                     Waits  until  table  contains a record named record whose
+                     column equals value or, if key is specified, whose column
+                     contains a key with the  specified  value.  This  command
+                     supports  the  same operators and semantics described for
+                     the find command above.
+
+                     If no column[:key]=value arguments are given,  this  com‐
+                     mand  waits  only  until  record exists. If more than one
+                     such argument is given, the command waits  until  all  of
+                     them are satisfied.
+
+                     Caution (ovs-vsctl as example)
+                            Usually  wait-until should be placed at the begin‐
+                            ning of a set of ovs-vsctl commands. For  example,
+                            wait-until  bridge  br0  --  get  bridge br0 data�‐
+                            path_id waits until a bridge named br0 is created,
+                            then prints its datapath_id  column,  whereas  get
+                            bridge  br0  datapath_id  -- wait-until bridge br0
+                            will abort if no  bridge  named  br0  exists  when
+                            ovs-vsctl initially connects to the database.
+
+                     Consider  specifying --timeout=0 along with --wait-until,
+                     to prevent ovs-vsctl from terminating after waiting  only
+                     at most 5 seconds.
+
+              comment [arg]...
+                     This  command has no effect on behavior, but any database
+                     log record created by the command will include  the  com‐
+                     mand and its arguments.
+
+ENVIRONMENT
+       OVN_NB_DAEMON
+              If set, this should name the Unix domain socket for an ovn-nbctl
+              server process. See Daemon Mode, above, for more information.
+
+       OVN_NBCTL_OPTIONS
+              If  set,  a set of options for ovn-nbctl to apply automatically,
+              in the same form as on the command line.
+
+       OVN_NB_DB
+              If set, the default database to contact when the --db option  is
+              not used.
+
+EXIT STATUS
+       0      Successful program execution.
+
+       1      Usage, syntax, or network error.
+
+SEE ALSO
+       ovn-nb(5), ovn-appctl(8).
+
+OVN 23.06.3                        ovn-nbctl                      ovn-nbctl(8)
diff --git a/support/dist-docs-branch-23.06/ovn-northd.8 b/support/dist-docs-branch-23.06/ovn-northd.8
new file mode 100644
index 00000000..569d5b17
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-northd.8
@@ -0,0 +1,2808 @@
+'\" p
+.\" -*- nroff -*-
+.TH "ovn-northd" 8 "ovn-northd" "OVN 23\[char46]06\[char46]3" "OVN Manual"
+.fp 5 L CR              \\" Make fixed-width font available as \\fL.
+.de TQ
+.  br
+.  ns
+.  TP "\\$1"
+..
+.de ST
+.  PP
+.  RS -0.15in
+.  I "\\$1"
+.  RE
+..
+.de SU
+.  PP
+.  I "\\$1"
+..
+.PP
+.SH "NAME"
+.PP
+.PP
+ovn-northd and ovn-northd-ddlog \- Open Virtual Network central control daemon
+.SH "SYNOPSIS"
+.PP
+\fBovn\-northd\fR [\fIoptions\fR]
+.SH "DESCRIPTION"
+.PP
+.PP
+\fBovn\-northd\fR is a centralized daemon responsible for translating the high-level OVN configuration into logical configuration consumable by daemons such as \fBovn\-controller\fR\[char46] It translates the logical network configuration in terms of conventional network concepts, taken from the OVN Northbound Database (see \fBovn\-nb\fR(5)), into logical datapath flows in the OVN Southbound Database (see \fBovn\-sb\fR(5)) below it\[char46]
+.PP
+.PP
+\fBovn\-northd\fR is implemented in C\[char46] \fBovn\-northd\-ddlog\fR is a compatible implementation written in DDlog, a language for incremental database processing\[char46] This documentation applies to both implementations, with differences indicated where relevant\[char46]
+.SH "OPTIONS"
+.TP
+\fB\-\-ovnnb\-db=\fIdatabase\fB\fR
+The OVSDB database containing the OVN Northbound Database\[char46] If the \fBOVN_NB_DB\fR environment variable is set, its value is used as the default\[char46] Otherwise, the default is \fBunix:/ovnnb_db\[char46]sock\fR\[char46]
+.TP
+\fB\-\-ovnsb\-db=\fIdatabase\fB\fR
+The OVSDB database containing the OVN Southbound Database\[char46] If the \fBOVN_SB_DB\fR environment variable is set, its value is used as the default\[char46] Otherwise, the default is \fBunix:/ovnsb_db\[char46]sock\fR\[char46]
+.TP
+\fB\-\-ddlog\-record=\fIfile\fB\fR
+This option is for \fBovn\-north\-ddlog\fR only\[char46] It causes the daemon to record the initial database state and later changes to \fIfile\fR in the text-based DDlog command format\[char46] The \fBovn_northd_cli\fR program can later replay these changes for debugging purposes\[char46] This option has a performance impact\[char46] See \fBdebugging\-ddlog\[char46]rst\fR in the OVN documentation for more details\[char46]
+.TP
+\fB\-\-dry\-run\fR
+Causes \fBovn\-northd\fR to start paused\[char46] In the paused state, \fBovn\-northd\fR does not apply any changes to the databases, although it continues to monitor them\[char46] For more information, see the \fBpause\fR command, under \fBRuntime Management
+Commands\fR below\[char46]
+.IP
+For \fBovn\-northd\-ddlog\fR, one could use this option with \fB\-\-ddlog\-record\fR to generate a replay log without restarting a process or disturbing a running system\[char46]
+.TP
+\fBn\-threads N\fR
+In certain situations, it may be desirable to enable parallelization on a system to decrease latency (at the potential cost of increasing CPU usage)\[char46]
+.IP
+This option will cause ovn-northd to use N threads when building logical flows, when N is within [2\-256]\[char46] If N is 1, parallelization is disabled (default behavior)\[char46] If N is less than 1, then N is set to 1, parallelization is disabled and a warning is logged\[char46] If N is more than 256, then N is set to 256, parallelization is enabled (with 256 threads) and a warning is logged\[char46]
+.IP
+ovn-northd-ddlog does not support this option\[char46]
+.PP
+.PP
+\fIdatabase\fR in the above options must be an OVSDB active or passive connection method, as described in \fBovsdb\fR(7)\[char46]
+.SS "Daemon Options"
+.TP
+\fB\-\-pidfile\fR[\fB=\fR\fIpidfile\fR]
+Causes a file (by default, \fB\fIprogram\fB\[char46]pid\fR) to be created indicating the PID of the running process\[char46] If the \fIpidfile\fR argument is not specified, or if it does not begin with \fB/\fR, then it is created in \fB\fR\[char46]
+.IP
+If \fB\-\-pidfile\fR is not specified, no pidfile is created\[char46]
+.TP
+\fB\-\-overwrite\-pidfile\fR
+By default, when \fB\-\-pidfile\fR is specified and the specified pidfile already exists and is locked by a running process, the daemon refuses to start\[char46] Specify \fB\-\-overwrite\-pidfile\fR to cause it to instead overwrite the pidfile\[char46]
+.IP
+When \fB\-\-pidfile\fR is not specified, this option has no effect\[char46]
+.TP
+\fB\-\-detach\fR
+Runs this program as a background process\[char46] The process forks, and in the child it starts a new session, closes the standard file descriptors (which has the side effect of disabling logging to the console), and changes its current directory to the root (unless \fB\-\-no\-chdir\fR is specified)\[char46] After the child completes its initialization, the parent exits\[char46]
+.TP
+\fB\-\-monitor\fR
+Creates an additional process to monitor this program\[char46] If it dies due to a signal that indicates a programming error (\fBSIGABRT\fR, \fBSIGALRM\fR, \fBSIGBUS\fR, \fBSIGFPE\fR, \fBSIGILL\fR, \fBSIGPIPE\fR, \fBSIGSEGV\fR, \fBSIGXCPU\fR, or \fBSIGXFSZ\fR) then the monitor process starts a new copy of it\[char46] If the daemon dies or exits for another reason, the monitor process exits\[char46]
+.IP
+This option is normally used with \fB\-\-detach\fR, but it also functions without it\[char46]
+.TP
+\fB\-\-no\-chdir\fR
+By default, when \fB\-\-detach\fR is specified, the daemon changes its current working directory to the root directory after it detaches\[char46] Otherwise, invoking the daemon from a carelessly chosen directory would prevent the administrator from unmounting the file system that holds that directory\[char46]
+.IP
+Specifying \fB\-\-no\-chdir\fR suppresses this behavior, preventing the daemon from changing its current working directory\[char46] This may be useful for collecting core files, since it is common behavior to write core dumps into the current working directory and the root directory is not a good directory to use\[char46]
+.IP
+This option has no effect when \fB\-\-detach\fR is not specified\[char46]
+.TP
+\fB\-\-no\-self\-confinement\fR
+By default this daemon will try to self-confine itself to work with files under well-known directories determined at build time\[char46] It is better to stick with this default behavior and not to use this flag unless some other Access Control is used to confine daemon\[char46] Note that in contrast to other access control implementations that are typically enforced from kernel-space (e\[char46]g\[char46] DAC or MAC), self-confinement is imposed from the user-space daemon itself and hence should not be considered as a full confinement strategy, but instead should be viewed as an additional layer of security\[char46]
+.TP
+\fB\-\-user=\fR\fIuser\fR\fB:\fR\fIgroup\fR
+Causes this program to run as a different user specified in \fIuser\fR\fB:\fR\fIgroup\fR, thus dropping most of the root privileges\[char46] Short forms \fIuser\fR and \fB:\fR\fIgroup\fR are also allowed, with current user or group assumed, respectively\[char46] Only daemons started by the root user accepts this argument\[char46]
+.IP
+On Linux, daemons will be granted \fBCAP_IPC_LOCK\fR and \fBCAP_NET_BIND_SERVICES\fR before dropping root privileges\[char46] Daemons that interact with a datapath, such as \fBovs\-vswitchd\fR, will be granted three additional capabilities, namely \fBCAP_NET_ADMIN\fR, \fBCAP_NET_BROADCAST\fR and \fBCAP_NET_RAW\fR\[char46] The capability change will apply even if the new user is root\[char46]
+.IP
+On Windows, this option is not currently supported\[char46] For security reasons, specifying this option will cause the daemon process not to start\[char46]
+.SS "Logging Options"
+.TP
+\fB\-v\fR[\fIspec\fR]
+.TQ .5in
+\fB\-\-verbose=\fR[\fIspec\fR]
+Sets logging levels\[char46] Without any \fIspec\fR, sets the log level for every module and destination to \fBdbg\fR\[char46] Otherwise, \fIspec\fR is a list of words separated by spaces or commas or colons, up to one from each category below:
+.RS
+.IP \(bu
+A valid module name, as displayed by the \fBvlog/list\fR command on \fBovs\-appctl\fR(8), limits the log level change to the specified module\[char46]
+.IP \(bu
+\fBsyslog\fR, \fBconsole\fR, or \fBfile\fR, to limit the log level change to only to the system log, to the console, or to a file, respectively\[char46] (If \fB\-\-detach\fR is specified, the daemon closes its standard file descriptors, so logging to the console will have no effect\[char46])
+.IP
+On Windows platform, \fBsyslog\fR is accepted as a word and is only useful along with the \fB\-\-syslog\-target\fR option (the word has no effect otherwise)\[char46]
+.IP \(bu
+\fBoff\fR, \fBemer\fR, \fBerr\fR, \fBwarn\fR, \fBinfo\fR, or \fBdbg\fR, to control the log level\[char46] Messages of the given severity or higher will be logged, and messages of lower severity will be filtered out\[char46] \fBoff\fR filters out all messages\[char46] See \fBovs\-appctl\fR(8) for a definition of each log level\[char46]
+.RE
+.IP
+Case is not significant within \fIspec\fR\[char46]
+.IP
+Regardless of the log levels set for \fBfile\fR, logging to a file will not take place unless \fB\-\-log\-file\fR is also specified (see below)\[char46]
+.IP
+For compatibility with older versions of OVS, \fBany\fR is accepted as a word but has no effect\[char46]
+.TP
+\fB\-v\fR
+.TQ .5in
+\fB\-\-verbose\fR
+Sets the maximum logging verbosity level, equivalent to \fB\-\-verbose=dbg\fR\[char46]
+.TP
+\fB\-vPATTERN:\fR\fIdestination\fR\fB:\fR\fIpattern\fR
+.TQ .5in
+\fB\-\-verbose=PATTERN:\fR\fIdestination\fR\fB:\fR\fIpattern\fR
+Sets the log pattern for \fIdestination\fR to \fIpattern\fR\[char46] Refer to \fBovs\-appctl\fR(8) for a description of the valid syntax for \fIpattern\fR\[char46]
+.TP
+\fB\-vFACILITY:\fR\fIfacility\fR
+.TQ .5in
+\fB\-\-verbose=FACILITY:\fR\fIfacility\fR
+Sets the RFC5424 facility of the log message\[char46] \fIfacility\fR can be one of \fBkern\fR, \fBuser\fR, \fBmail\fR, \fBdaemon\fR, \fBauth\fR, \fBsyslog\fR, \fBlpr\fR, \fBnews\fR, \fBuucp\fR, \fBclock\fR, \fBftp\fR, \fBntp\fR, \fBaudit\fR, \fBalert\fR, \fBclock2\fR, \fBlocal0\fR, \fBlocal1\fR, \fBlocal2\fR, \fBlocal3\fR, \fBlocal4\fR, \fBlocal5\fR, \fBlocal6\fR or \fBlocal7\fR\[char46] If this option is not specified, \fBdaemon\fR is used as the default for the local system syslog and \fBlocal0\fR is used while sending a message to the target provided via the \fB\-\-syslog\-target\fR option\[char46]
+.TP
+\fB\-\-log\-file\fR[\fB=\fR\fIfile\fR]
+Enables logging to a file\[char46] If \fIfile\fR is specified, then it is used as the exact name for the log file\[char46] The default log file name used if \fIfile\fR is omitted is \fB/usr/local/var/log/ovn/\fIprogram\fB\[char46]log\fR\[char46]
+.TP
+\fB\-\-syslog\-target=\fR\fIhost\fR\fB:\fR\fIport\fR
+Send syslog messages to UDP \fIport\fR on \fIhost\fR, in addition to the system syslog\[char46] The \fIhost\fR must be a numerical IP address, not a hostname\[char46]
+.TP
+\fB\-\-syslog\-method=\fR\fImethod\fR
+Specify \fImethod\fR as how syslog messages should be sent to syslog daemon\[char46] The following forms are supported:
+.RS
+.IP \(bu
+\fBlibc\fR, to use the libc \fBsyslog()\fR function\[char46] Downside of using this options is that libc adds fixed prefix to every message before it is actually sent to the syslog daemon over \fB/dev/log\fR UNIX domain socket\[char46]
+.IP \(bu
+\fBunix:\fIfile\fB\fR, to use a UNIX domain socket directly\[char46] It is possible to specify arbitrary message format with this option\[char46] However, \fBrsyslogd 8\[char46]9\fR and older versions use hard coded parser function anyway that limits UNIX domain socket use\[char46] If you want to use arbitrary message format with older \fBrsyslogd\fR versions, then use UDP socket to localhost IP address instead\[char46]
+.IP \(bu
+\fBudp:\fIip\fB:\fIport\fB\fR, to use a UDP socket\[char46] With this method it is possible to use arbitrary message format also with older \fBrsyslogd\fR\[char46] When sending syslog messages over UDP socket extra precaution needs to be taken into account, for example, syslog daemon needs to be configured to listen on the specified UDP port, accidental iptables rules could be interfering with local syslog traffic and there are some security considerations that apply to UDP sockets, but do not apply to UNIX domain sockets\[char46]
+.IP \(bu
+\fBnull\fR, to discard all messages logged to syslog\[char46]
+.RE
+.IP
+The default is taken from the \fBOVS_SYSLOG_METHOD\fR environment variable; if it is unset, the default is \fBlibc\fR\[char46]
+.SS "PKI Options"
+.PP
+.PP
+PKI configuration is required in order to use SSL for the connections to the Northbound and Southbound databases\[char46]
+.RS
+.TP
+\fB\-p\fR \fIprivkey\[char46]pem\fR
+.TQ .5in
+\fB\-\-private\-key=\fR\fIprivkey\[char46]pem\fR
+Specifies a PEM file containing the private key used as identity for outgoing SSL connections\[char46]
+.TP
+\fB\-c\fR \fIcert\[char46]pem\fR
+.TQ .5in
+\fB\-\-certificate=\fR\fIcert\[char46]pem\fR
+Specifies a PEM file containing a certificate that certifies the private key specified on \fB\-p\fR or \fB\-\-private\-key\fR to be trustworthy\[char46] The certificate must be signed by the certificate authority (CA) that the peer in SSL connections will use to verify it\[char46]
+.TP
+\fB\-C\fR \fIcacert\[char46]pem\fR
+.TQ .5in
+\fB\-\-ca\-cert=\fR\fIcacert\[char46]pem\fR
+Specifies a PEM file containing the CA certificate for verifying certificates presented to this program by SSL peers\[char46] (This may be the same certificate that SSL peers use to verify the certificate specified on \fB\-c\fR or \fB\-\-certificate\fR, or it may be a different one, depending on the PKI design in use\[char46])
+.TP
+\fB\-C none\fR
+.TQ .5in
+\fB\-\-ca\-cert=none\fR
+Disables verification of certificates presented by SSL peers\[char46] This introduces a security risk, because it means that certificates cannot be verified to be those of known trusted hosts\[char46]
+.RE
+.SS "Other Options"
+.TP
+\fB\-\-unixctl=\fIsocket\fB\fR
+Sets the name of the control socket on which \fB\fIprogram\fB\fR listens for runtime management commands (see \fIRUNTIME MANAGEMENT COMMANDS,\fR below)\[char46] If \fIsocket\fR does not begin with \fB/\fR, it is interpreted as relative to \fB\fR\[char46] If \fB\-\-unixctl\fR is not used at all, the default socket is \fB/\fIprogram\fB\[char46]\fR\fIpid\fR\fB\[char46]ctl\fR, where \fIpid\fR is \fB\fIprogram\fB\fR\(cqs process ID\[char46]
+.IP
+On Windows a local named pipe is used to listen for runtime management commands\[char46] A file is created in the absolute path as pointed by \fIsocket\fR or if \fB\-\-unixctl\fR is not used at all, a file is created as \fB\fIprogram\fB\fR in the configured \fIOVS_RUNDIR\fR directory\[char46] The file exists just to mimic the behavior of a Unix domain socket\[char46]
+.IP
+Specifying \fBnone\fR for \fIsocket\fR disables the control socket feature\[char46]
+.ST ""
+.TP
+\fB\-h\fR
+.TQ .5in
+\fB\-\-help\fR
+Prints a brief help message to the console\[char46]
+.TP
+\fB\-V\fR
+.TQ .5in
+\fB\-\-version\fR
+Prints version information to the console\[char46]
+.SH "RUNTIME MANAGEMENT COMMANDS"
+.PP
+.PP
+\fBovs\-appctl\fR can send commands to a running \fBovn\-northd\fR process\[char46] The currently supported commands are described below\[char46]
+.RS
+.TP
+\fBexit\fR
+Causes \fBovn\-northd\fR to gracefully terminate\[char46]
+.TP
+\fBpause\fR
+Pauses \fBovn\-northd\fR\[char46] When it is paused, \fBovn\-northd\fR receives changes from the Northbound and Southbound database changes as usual, but it does not send any updates\[char46] A paused \fBovn\-northd\fR also drops database locks, which allows any other non-paused instance of \fBovn\-northd\fR to take over\[char46]
+.TP
+\fBresume\fR
+Resumes the ovn-northd operation to process Northbound and Southbound database contents and generate logical flows\[char46] This will also instruct ovn-northd to aspire for the lock on SB DB\[char46]
+.TP
+\fBis\-paused\fR
+Returns \(dqtrue\(dq if ovn-northd is currently paused, \(dqfalse\(dq otherwise\[char46]
+.TP
+\fBstatus\fR
+Prints this server\(cqs status\[char46] Status will be \(dqactive\(dq if ovn-northd has acquired OVSDB lock on SB DB, \(dqstandby\(dq if it has not or \(dqpaused\(dq if this instance is paused\[char46]
+.TP
+\fBsb\-cluster\-state\-reset\fR
+Reset southbound database cluster status when databases are destroyed and rebuilt\[char46]
+.IP
+If all databases in a clustered southbound database are removed from disk, then the stored index of all databases will be reset to zero\[char46] This will cause ovn-northd to be unable to read or write to the southbound database, because it will always detect the data as stale\[char46] In such a case, run this command so that ovn-northd will reset its local index so that it can interact with the southbound database again\[char46]
+.TP
+\fBnb\-cluster\-state\-reset\fR
+Reset northbound database cluster status when databases are destroyed and rebuilt\[char46]
+.IP
+This performs the same task as \fBsb\-cluster\-state\-reset\fR except for the northbound database client\[char46]
+.TP
+\fBset\-n\-threads N\fR
+Set the number of threads used for building logical flows\[char46] When N is within [2\-256], parallelization is enabled\[char46] When N is 1 parallelization is disabled\[char46] When N is less than 1 or more than 256, an error is returned\[char46] If ovn-northd fails to start parallelization (e\[char46]g\[char46] fails to setup semaphores, parallelization is disabled and an error is returned\[char46]
+.TP
+\fBget\-n\-threads\fR
+Return the number of threads used for building logical flows\[char46]
+.TP
+\fBinc\-engine/show\-stats\fR
+Display \fBovn\-northd\fR engine counters\[char46] For each engine node the following counters have been added:
+.RS
+.IP \(bu
+\fBrecompute\fR
+.IP \(bu
+\fBcompute\fR
+.IP \(bu
+\fBabort\fR
+.RE
+.TP
+\fBinc\-engine/show\-stats \fIengine_node_name\fB \fIcounter_name\fB\fR
+Display the \fBovn\-northd\fR engine counter(s) for the specified \fIengine_node_name\fR\[char46] \fIcounter_name\fR is optional and can be one of \fBrecompute\fR, \fBcompute\fR or \fBabort\fR\[char46]
+.TP
+\fBinc\-engine/clear\-stats\fR
+Reset \fBovn\-northd\fR engine counters\[char46]
+.RE
+.PP
+.PP
+Only \fBovn\-northd\-ddlog\fR supports the following commands:
+.RS
+.TP
+\fBenable\-cpu\-profiling\fR
+.TQ .5in
+\fBdisable\-cpu\-profiling\fR
+Enables or disables profiling of CPU time used by the DDlog engine\[char46] When CPU profiling is enabled, the \fBprofile\fR command (see below) will include DDlog CPU usage statistics in its output\[char46] Enabling CPU profiling will slow \fBovn\-northd\-ddlog\fR\[char46] Disabling CPU profiling does not clear any previously recorded statistics\[char46]
+.TP
+\fBprofile\fR
+Outputs a profile of the current and peak sizes of arrangements inside DDlog\[char46] This profiling data can be useful for optimizing DDlog code\[char46] If CPU profiling was previously enabled (even if it was later disabled), the output also includes a CPU time profile\[char46] See \fBProfiling\fR inside the tutorial in the DDlog repository for an introduction to profiling DDlog\[char46]
+.RE
+.SH "ACTIVE-STANDBY FOR HIGH AVAILABILITY"
+.PP
+.PP
+You may run \fBovn\-northd\fR more than once in an OVN deployment\[char46] When connected to a standalone or clustered DB setup, OVN will automatically ensure that only one of them is active at a time\[char46] If multiple instances of \fBovn\-northd\fR are running and the active \fBovn\-northd\fR fails, one of the hot standby instances of \fBovn\-northd\fR will automatically take over\[char46]
+.SS "Active\-Standby with multiple OVN DB servers"
+.PP
+.PP
+You may run multiple OVN DB servers in an OVN deployment with:
+.RS
+.IP \(bu
+OVN DB servers deployed in active/passive mode with one active and multiple passive ovsdb-servers\[char46]
+.IP \(bu
+\fBovn\-northd\fR also deployed on all these nodes, using unix ctl sockets to connect to the local OVN DB servers\[char46]
+.RE
+.PP
+.PP
+In such deployments, the ovn-northds on the passive nodes will process the DB changes and compute logical flows to be thrown out later, because write transactions are not allowed by the passive ovsdb-servers\[char46] It results in unnecessary CPU usage\[char46]
+.PP
+.PP
+With the help of runtime management command \fBpause\fR, you can pause \fBovn\-northd\fR on these nodes\[char46] When a passive node becomes master, you can use the runtime management command \fBresume\fR to resume the \fBovn\-northd\fR to process the DB changes\[char46]
+.SH "LOGICAL FLOW TABLE STRUCTURE"
+.PP
+.PP
+One of the main purposes of \fBovn\-northd\fR is to populate the \fBLogical_Flow\fR table in the \fBOVN_Southbound\fR database\[char46] This section describes how \fBovn\-northd\fR does this for switch and router logical datapaths\[char46]
+.SS "Logical Switch Datapaths"
+.ST "Ingress Table 0: Admission Control and Ingress Port Security check"
+.PP
+.PP
+Ingress table 0 contains these logical flows:
+.RS
+.IP \(bu
+Priority 100 flows to drop packets with VLAN tags or multicast Ethernet source addresses\[char46]
+.IP \(bu
+For each disabled logical port, a priority 100 flow is added which matches on all packets and applies the action \fBREGBIT_PORT_SEC_DROP\(dq = 1; next;\(dq\fR so that the packets are dropped in the next stage\[char46]
+.IP \(bu
+For each (enabled) vtep logical port, a priority 70 flow is added which matches on all packets and applies the action \fBnext(pipeline=ingress, table=S_SWITCH_IN_L2_LKUP) = 1;\fR to skip most stages of ingress pipeline and go directly to ingress L2 lookup table to determine the output port\[char46] Packets from VTEP (RAMP) switch should not be subjected to any ACL checks\[char46] Egress pipeline will do the ACL checks\[char46]
+.IP \(bu
+For each enabled logical port configured with qdisc queue id in the \fBoptions:qdisc_queue_id\fR column of \fBLogical_Switch_Port\fR, a priority 70 flow is added which matches on all packets and applies the action \fBset_queue(id);
+REGBIT_PORT_SEC_DROP\(dq = check_in_port_sec(); next;\(dq\fR\[char46]
+.IP \(bu
+A priority 1 flow is added which matches on all packets for all the logical ports and applies the action \fBREGBIT_PORT_SEC_DROP\(dq = check_in_port_sec(); next;\fR to evaluate the port security\[char46] The action \fBcheck_in_port_sec\fR applies the port security rules defined in the \fBport_security\fR column of \fBLogical_Switch_Port\fR table\[char46]
+.RE
+.ST "Ingress Table 1: Ingress Port Security - Apply"
+.PP
+.PP
+This table drops the packets if the port security check failed in the previous stage i\[char46]e the register bit \fBREGBIT_PORT_SEC_DROP\fR is set to 1\[char46]
+.PP
+.PP
+Ingress table 1 contains these logical flows:
+.RS
+.IP \(bu
+A priority\-50 fallback flow that drops the packet if the register bit \fBREGBIT_PORT_SEC_DROP\fR is set to 1\[char46]
+.IP \(bu
+One priority\-0 fallback flow that matches all packets and advances to the next table\[char46]
+.RE
+.ST "Ingress Table 2: Lookup MAC address learning table"
+.PP
+.PP
+This table looks up the MAC learning table of the logical switch datapath to check if the \fBport\-mac\fR pair is present or not\[char46] MAC is learnt for logical switch VIF ports whose port security is disabled and \(cqunknown\(cq address setn as well as for localnet ports with option localnet_learn_fdb\[char46] A localnet port entry does not overwrite a VIF port entry\[char46]
+.RS
+.IP \(bu
+For each such VIF logical port \fIp\fR whose port security is disabled and \(cqunknown\(cq address set following flow is added\[char46]
+.RS
+.IP \(bu
+Priority 100 flow with the match \fBinport == \fIp\fB\fR and action \fBreg0[11] = lookup_fdb(inport, eth\[char46]src); next;\fR
+.RE
+.IP \(bu
+For each such localnet logical port \fIp\fR following flow is added\[char46]
+.RS
+.IP \(bu
+Priority 100 flow with the match \fBinport == \fIp\fB\fR and action \fBflags\[char46]localnet = 1;\fR \fBreg0[11] = lookup_fdb(inport, eth\[char46]src); next;\fR
+.RE
+.IP \(bu
+One priority\-0 fallback flow that matches all packets and advances to the next table\[char46]
+.RE
+.ST "Ingress Table 3: Learn MAC of \(cqunknown\(cq ports\[char46]"
+.PP
+.PP
+This table learns the MAC addresses seen on the VIF logical ports whose port security is disabled and \(cqunknown\(cq address set as well as on localnet ports with localnet_learn_fdb option set if the \fBlookup_fdb\fR action returned false in the previous table\[char46] For localnet ports (with flags\[char46]localnet = 1), lookup_fdb returns true if (port, mac) is found or if a mac is found for a port of type vif\[char46]
+.RS
+.IP \(bu
+For each such VIF logical port \fIp\fR whose port security is disabled and \(cqunknown\(cq address set and localnet port following flow is added\[char46]
+.RS
+.IP \(bu
+Priority 100 flow with the match \fBinport == \fIp\fB && reg0[11] == 0\fR and action \fBput_fdb(inport, eth\[char46]src); next;\fR which stores the \fBport\-mac\fR in the mac learning table of the logical switch datapath and advances the packet to the next table\[char46]
+.RE
+.IP \(bu
+One priority\-0 fallback flow that matches all packets and advances to the next table\[char46]
+.RE
+.ST "Ingress Table 4: \fBfrom\-lport\fI Pre-ACLs"
+.PP
+.PP
+This table prepares flows for possible stateful ACL processing in ingress table \fBACLs\fR\[char46] It contains a priority\-0 flow that simply moves traffic to the next table\[char46] If stateful ACLs are used in the logical datapath, a priority\-100 flow is added that sets a hint (with \fBreg0[0] = 1; next;\fR) for table \fBPre\-stateful\fR to send IP packets to the connection tracker before eventually advancing to ingress table \fBACLs\fR\[char46] If special ports such as route ports or localnet ports can\(cqt use ct(), a priority\-110 flow is added to skip over stateful ACLs\[char46] Multicast, IPv6 Neighbor Discovery and MLD traffic also skips stateful ACLs\[char46] For \(dqallow-stateless\(dq ACLs, a flow is added to bypass setting the hint for connection tracker processing when there are stateful ACLs or LB rules; \fBREGBIT_ACL_STATELESS\fR is set for traffic matching stateless ACL flows\[char46]
+.PP
+.PP
+This table also has a priority\-110 flow with the match \fBeth\[char46]dst == \fIE\fB\fR for all logical switch datapaths to move traffic to the next table\[char46] Where \fIE\fR is the service monitor mac defined in the \fBoptions:svc_monitor_mac\fR column of \fBNB_Global\fR table\[char46]
+.ST "Ingress Table 5: Pre-LB"
+.PP
+.PP
+This table prepares flows for possible stateful load balancing processing in ingress table \fBLB\fR and \fBStateful\fR\[char46] It contains a priority\-0 flow that simply moves traffic to the next table\[char46] Moreover it contains two priority\-110 flows to move multicast, IPv6 Neighbor Discovery and MLD traffic to the next table\[char46] It also contains two priority\-110 flows to move stateless traffic, i\[char46]e traffic for which \fBREGBIT_ACL_STATELESS\fR is set, to the next table\[char46] If load balancing rules with virtual IP addresses (and ports) are configured in \fBOVN_Northbound\fR database for a logical switch datapath, a priority\-100 flow is added with the match \fBip\fR to match on IP packets and sets the action \fBreg0[2] = 1; next;\fR to act as a hint for table \fBPre\-stateful\fR to send IP packets to the connection tracker for packet de-fragmentation (and to possibly do DNAT for already established load balanced traffic) before eventually advancing to ingress table \fBStateful\fR\[char46] If controller_event has been enabled and load balancing rules with empty backends have been added in \fBOVN_Northbound\fR, a 130 flow is added to trigger ovn-controller events whenever the chassis receives a packet for that particular VIP\[char46] If \fBevent\-elb\fR meter has been previously created, it will be associated to the empty_lb logical flow
+.PP
+.PP
+Prior to \fBOVN 20\[char46]09\fR we were setting the \fBreg0[0] = 1\fR only if the IP destination matches the load balancer VIP\[char46] However this had few issues cases where a logical switch doesn\(cqt have any ACLs with \fBallow\-related\fR action\[char46] To understand the issue lets a take a TCP load balancer - \fB10\[char46]0\[char46]0\[char46]10:80=10\[char46]0\[char46]0\[char46]3:80\fR\[char46] If a logical port - p1 with IP - 10\[char46]0\[char46]0\[char46]5 opens a TCP connection with the VIP - 10\[char46]0\[char46]0\[char46]10, then the packet in the ingress pipeline of \(cqp1\(cq is sent to the p1\(cqs conntrack zone id and the packet is load balanced to the backend - 10\[char46]0\[char46]0\[char46]3\[char46] For the reply packet from the backend lport, it is not sent to the conntrack of backend lport\(cqs zone id\[char46] This is fine as long as the packet is valid\[char46] Suppose the backend lport sends an invalid TCP packet (like incorrect sequence number), the packet gets delivered to the lport \(cqp1\(cq without unDNATing the packet to the VIP - 10\[char46]0\[char46]0\[char46]10\[char46] And this causes the connection to be reset by the lport p1\(cqs VIF\[char46]
+.PP
+.PP
+We can\(cqt fix this issue by adding a logical flow to drop ct\[char46]inv packets in the egress pipeline since it will drop all other connections not destined to the load balancers\[char46] To fix this issue, we send all the packets to the conntrack in the ingress pipeline if a load balancer is configured\[char46] We can now add a lflow to drop ct\[char46]inv packets\[char46]
+.PP
+.PP
+This table also has priority\-120 flows that punt all IGMP/MLD packets to \fBovn\-controller\fR if the switch is an interconnect switch with multicast snooping enabled\[char46]
+.PP
+.PP
+This table also has a priority\-110 flow with the match \fBeth\[char46]dst == \fIE\fB\fR for all logical switch datapaths to move traffic to the next table\[char46] Where \fIE\fR is the service monitor mac defined in the \fBoptions:svc_monitor_mac\fR column of \fBNB_Global\fR table\[char46]
+.PP
+.PP
+This table also has a priority\-110 flow with the match \fBinport == \fII\fB\fR for all logical switch datapaths to move traffic to the next table\[char46] Where \fII\fR is the peer of a logical router port\[char46] This flow is added to skip the connection tracking of packets which enter from logical router datapath to logical switch datapath\[char46]
+.ST "Ingress Table 6: Pre-stateful"
+.PP
+.PP
+This table prepares flows for all possible stateful processing in next tables\[char46] It contains a priority\-0 flow that simply moves traffic to the next table\[char46]
+.RS
+.IP \(bu
+Priority\-120 flows that send the packets to connection tracker using \fBct_lb_mark;\fR as the action so that the already established traffic destined to the load balancer VIP gets DNATted\[char46] These flows match each VIPs IP and port\[char46] For IPv4 traffic the flows also load the original destination IP and transport port in registers \fBreg1\fR and \fBreg2\fR\[char46] For IPv6 traffic the flows also load the original destination IP and transport port in registers \fBxxreg1\fR and \fBreg2\fR\[char46]
+.IP \(bu
+A priority\-110 flow sends the packets that don\(cqt match the above flows to connection tracker based on a hint provided by the previous tables (with a match for \fBreg0[2] == 1\fR) by using the \fBct_lb_mark;\fR action\[char46]
+.IP \(bu
+A priority\-100 flow sends the packets to connection tracker based on a hint provided by the previous tables (with a match for \fBreg0[0] == 1\fR) by using the \fBct_next;\fR action\[char46]
+.RE
+.ST "Ingress Table 7: \fBfrom\-lport\fI ACL hints"
+.PP
+.PP
+This table consists of logical flows that set hints (\fBreg0\fR bits) to be used in the next stage, in the ACL processing table, if stateful ACLs or load balancers are configured\[char46] Multiple hints can be set for the same packet\[char46] The possible hints are:
+.RS
+.IP \(bu
+\fBreg0[7]\fR: the packet might match an \fBallow\-related\fR ACL and might have to commit the connection to conntrack\[char46]
+.IP \(bu
+\fBreg0[8]\fR: the packet might match an \fBallow\-related\fR ACL but there will be no need to commit the connection to conntrack because it already exists\[char46]
+.IP \(bu
+\fBreg0[9]\fR: the packet might match a \fBdrop/reject\fR\[char46]
+.IP \(bu
+\fBreg0[10]\fR: the packet might match a \fBdrop/reject\fR ACL but the connection was previously allowed so it might have to be committed again with \fBct_label=1/1\fR\[char46]
+.RE
+.PP
+.PP
+The table contains the following flows:
+.RS
+.IP \(bu
+A priority\-65535 flow to advance to the next table if the logical switch has \fBno\fR ACLs configured, otherwise a priority\-0 flow to advance to the next table\[char46]
+.RE
+.RS
+.IP \(bu
+A priority\-7 flow that matches on packets that initiate a new session\[char46] This flow sets \fBreg0[7]\fR and \fBreg0[9]\fR and then advances to the next table\[char46]
+.IP \(bu
+A priority\-6 flow that matches on packets that are in the request direction of an already existing session that has been marked as blocked\[char46] This flow sets \fBreg0[7]\fR and \fBreg0[9]\fR and then advances to the next table\[char46]
+.IP \(bu
+A priority\-5 flow that matches untracked packets\[char46] This flow sets \fBreg0[8]\fR and \fBreg0[9]\fR and then advances to the next table\[char46]
+.IP \(bu
+A priority\-4 flow that matches on packets that are in the request direction of an already existing session that has not been marked as blocked\[char46] This flow sets \fBreg0[8]\fR and \fBreg0[10]\fR and then advances to the next table\[char46]
+.IP \(bu
+A priority\-3 flow that matches on packets that are in not part of established sessions\[char46] This flow sets \fBreg0[9]\fR and then advances to the next table\[char46]
+.IP \(bu
+A priority\-2 flow that matches on packets that are part of an established session that has been marked as blocked\[char46] This flow sets \fBreg0[9]\fR and then advances to the next table\[char46]
+.IP \(bu
+A priority\-1 flow that matches on packets that are part of an established session that has not been marked as blocked\[char46] This flow sets \fBreg0[10]\fR and then advances to the next table\[char46]
+.RE
+.ST "Ingress table 8: \fBfrom\-lport\fI ACL evaluation before LB"
+.PP
+.PP
+Logical flows in this table closely reproduce those in the \fBACL\fR table in the \fBOVN_Northbound\fR database for the \fBfrom\-lport\fR direction without the option \fBapply\-after\-lb\fR set or set to \fBfalse\fR\[char46] The \fBpriority\fR values from the \fBACL\fR table have a limited range and have 1000 added to them to leave room for OVN default flows at both higher and lower priorities\[char46]
+.RS
+.IP \(bu
+This table is responsible for evaluating ACLs, and setting a register bit to indicate whether the ACL decided to allow, drop, or reject the traffic\[char46] The allow bit is \fBreg8[16]\fR\[char46] The drop bit is \fBreg8[17]\fR\[char46] All flows in this table will advance the packet to the next table, where the bits from before are evaluated to determine what to do with the packet\[char46] Any flows in this table that intend for the packet to pass will set \fBreg8[16]\fR to 1, even if an ACL with an allow-type action was not matched\[char46] This lets the next table know to allow the traffic to pass\[char46] These bits will be referred to as the \(dqallow\(dq, \(dqdrop\(dq, and \(dqreject\(dq bits in the upcoming paragraphs\[char46]
+.IP \(bu
+If the \fBtier\fR column has been configured on the ACL, then OVN will also match the current tier counter against the configured ACL tier\[char46] OVN keeps count of the current tier in \fBreg8[30\[char46]\[char46]31]\fR\[char46]
+.IP \(bu
+\fBallow\fR ACLs translate into logical flows that set the allow bit to 1 and advance the packet to the next table\[char46] If there are any stateful ACLs on this datapath, then \fBallow\fR ACLs set the allow bit to one and in addition perform \fBct_commit;\fR (which acts as a hint for future tables to commit the connection to conntrack)\[char46] In case the \fBACL\fR has a label then \fBreg3\fR is loaded with the label value and \fBreg0[13]\fR bit is set to 1 (which acts as a hint for the next tables to commit the label to conntrack)\[char46]
+.IP \(bu
+\fBallow\-related\fR ACLs translate into logical flows that set the allow bit and additionally have \fBct_commit(ct_label=0/1);
+next;\fR actions for new connections and \fBreg0[1] = 1;
+next;\fR for existing connections\[char46] In case the \fBACL\fR has a label then \fBreg3\fR is loaded with the label value and \fBreg0[13]\fR bit is set to 1 (which acts as a hint for the next tables to commit the label to conntrack)\[char46]
+.IP \(bu
+\fBallow\-stateless\fR ACLs translate into logical flows that set the allow bit and advance to the next table\[char46]
+.IP \(bu
+\fBreject\fR ACLs translate into logical flows with that set the reject bit and advance to the next table\[char46]
+.IP \(bu
+\fBpass\fR ACLs translate into logical flows that do not set the allow, drop, or reject bit and advance to the next table\[char46]
+.IP \(bu
+Other ACLs set the drop bit and advance to the next table for new or untracked connections\[char46] For known connections, they set the drop bit, as well as running the \fBct_commit(ct_label=1/1);\fR action\[char46] Setting \fBct_label\fR marks a connection as one that was previously allowed, but should no longer be allowed due to a policy change\[char46]
+.RE
+.PP
+.PP
+This table contains a priority\-65535 flow to set the allow bit and advance to the next table if the logical switch has \fBno\fR ACLs configured, otherwise a priority\-0 flow to advance to the next table is added\[char46] This flow does not set the allow bit, so that the next table can decide whether to allow or drop the packet based on the value of the \fBoptions:default_acl_drop\fR column of the \fBNB_Global\fR table\[char46]
+.PP
+.PP
+A priority\-65532 flow is added that sets the allow bit for IPv6 Neighbor solicitation, Neighbor discover, Router solicitation, Router advertisement and MLD packets regardless of other ACLs defined\[char46]
+.PP
+.PP
+If the logical datapath has a stateful ACL or a load balancer with VIP configured, the following flows will also be added:
+.RS
+.IP \(bu
+If \fBoptions:default_acl_drop\fR column of \fBNB_Global\fR is \fBfalse\fR or not set, a priority\-1 flow that sets the hint to commit IP traffic that is not part of established sessions to the connection tracker (with action \fBreg0[1] = 1; next;\fR)\[char46] This is needed for the default allow policy because, while the initiator\(cqs direction may not have any stateful rules, the server\(cqs may and then its return traffic would not be known and marked as invalid\[char46]
+.IP \(bu
+A priority\-1 flow that sets the allow bit and sets the hint to commit IP traffic to the connection tracker (with action \fBreg0[1] = 1;
+next;\fR)\[char46] This is needed for the default allow policy because, while the initiator\(cqs direction may not have any stateful rules, the server\(cqs may and then its return traffic would not be known and marked as invalid\[char46]
+.IP \(bu
+A priority\-65532 flow that sets the allow bit for any traffic in the reply direction for a connection that has been committed to the connection tracker (i\[char46]e\[char46], established flows), as long as the committed flow does not have \fBct_mark\[char46]blocked\fR set\[char46] We only handle traffic in the reply direction here because we want all packets going in the request direction to still go through the flows that implement the currently defined policy based on ACLs\[char46] If a connection is no longer allowed by policy, \fBct_mark\[char46]blocked\fR will get set and packets in the reply direction will no longer be allowed, either\[char46] This flow also clears the register bits \fBreg0[9]\fR and \fBreg0[10]\fR and sets register bit \fBreg0[17]\fR\[char46] If ACL logging and logging of related packets is enabled, then a companion priority\-65533 flow will be installed that accomplishes the same thing but also logs the traffic\[char46]
+.IP \(bu
+A priority\-65532 flow that sets the allow bit for any traffic that is considered related to a committed flow in the connection tracker (e\[char46]g\[char46], an ICMP Port Unreachable from a non-listening UDP port), as long as the committed flow does not have \fBct_mark\[char46]blocked\fR set\[char46] This flow also applies NAT to the related traffic so that ICMP headers and the inner packet have correct addresses\[char46] If ACL logging and logging of related packets is enabled, then a companion priority\-65533 flow will be installed that accomplishes the same thing but also logs the traffic\[char46]
+.IP \(bu
+A priority\-65532 flow that sets the drop bit for all traffic marked by the connection tracker as invalid\[char46]
+.IP \(bu
+A priority\-65532 flow that sets the drop bit for all traffic in the reply direction with \fBct_mark\[char46]blocked\fR set meaning that the connection should no longer be allowed due to a policy change\[char46] Packets in the request direction are skipped here to let a newly created ACL re-allow this connection\[char46]
+.RE
+.PP
+.PP
+If the logical datapath has any ACL or a load balancer with VIP configured, the following flow will also be added:
+.RS
+.IP \(bu
+A priority 34000 logical flow is added for each logical switch datapath with the match \fBeth\[char46]dst = \fIE\fB\fR to allow the service monitor reply packet destined to \fBovn\-controller\fR that sets the allow bit, where \fIE\fR is the service monitor mac defined in the \fBoptions:svc_monitor_mac\fR column of \fBNB_Global\fR table\[char46]
+.RE
+.ST "Ingress Table 9: \fBfrom\-lport\fI ACL action"
+.PP
+.PP
+Logical flows in this table decide how to proceed based on the values of the allow, drop, and reject bits that may have been set in the previous table\[char46]
+.RS
+.IP \(bu
+If no ACLs are configured, then a priority 0 flow is installed that matches everything and advances to the next table\[char46]
+.IP \(bu
+A priority 1000 flow is installed that will advance the packet to the next table if the allow bit is set\[char46]
+.IP \(bu
+A priority 1000 flow is installed that will run the \fBdrop;\fR action if the drop bit is set\[char46]
+.IP \(bu
+A priority 1000 flow is installed that will run the \fBtcp_reset
+{ output <\-> inport; next(pipeline=egress,table=5);}\fR action for TCP connections,\fBicmp4/icmp6\fR action for UDP connections, and \fBsctp_abort {output <\-%gt; inport;
+next(pipeline=egress,table=5);}\fR action for SCTP associations\[char46]
+.IP \(bu
+If any ACLs have tiers configured on them, then three priority 500 flows are installed\[char46] If the current tier counter is 0, 1, or 2, then the current tier counter is incremented by one and the packet is sent back to the previous table for re-evaluation\[char46]
+.RE
+.ST "Ingress Table 10: \fBfrom\-lport\fI QoS Marking"
+.PP
+.PP
+Logical flows in this table closely reproduce those in the \fBQoS\fR table with the \fBaction\fR column set in the \fBOVN_Northbound\fR database for the \fBfrom\-lport\fR direction\[char46]
+.RS
+.IP \(bu
+For every qos_rules entry in a logical switch with DSCP marking enabled, a flow will be added at the priority mentioned in the QoS table\[char46]
+.IP \(bu
+One priority\-0 fallback flow that matches all packets and advances to the next table\[char46]
+.RE
+.ST "Ingress Table 11: \fBfrom\-lport\fI QoS Meter"
+.PP
+.PP
+Logical flows in this table closely reproduce those in the \fBQoS\fR table with the \fBbandwidth\fR column set in the \fBOVN_Northbound\fR database for the \fBfrom\-lport\fR direction\[char46]
+.RS
+.IP \(bu
+For every qos_rules entry in a logical switch with metering enabled, a flow will be added at the priority mentioned in the QoS table\[char46]
+.IP \(bu
+One priority\-0 fallback flow that matches all packets and advances to the next table\[char46]
+.RE
+.ST "Ingress Table 12: Load balancing affinity check"
+.PP
+.PP
+Load balancing affinity check table contains the following logical flows:
+.RS
+.IP \(bu
+For all the configured load balancing rules for a switch in \fBOVN_Northbound\fR database where a positive affinity timeout is specified in \fBoptions\fR column, that includes a L4 port \fIPORT\fR of protocol \fIP\fR and IP address \fIVIP\fR, a priority\-100 flow is added\[char46] For IPv4 \fIVIPs\fR, the flow matches \fBct\[char46]new && ip && ip4\[char46]dst == \fIVIP\fB
+&& \fIP\fB\[char46]dst == \fIPORT\fB\fR\[char46] For IPv6 \fIVIPs\fR, the flow matches \fBct\[char46]new && ip &&
+ip6\[char46]dst == \fIVIP\fB&& \fIP\fB &&
+\fIP\fB\[char46]dst == \fI PORT\fB\fR\[char46] The flow\(cqs action is \fBreg9[6] = chk_lb_aff(); next;\fR\[char46]
+.IP \(bu
+A priority 0 flow is added which matches on all packets and applies the action \fBnext;\fR\[char46]
+.RE
+.ST "Ingress Table 13: LB"
+.RS
+.IP \(bu
+For all the configured load balancing rules for a switch in \fBOVN_Northbound\fR database where a positive affinity timeout is specified in \fBoptions\fR column, that includes a L4 port \fIPORT\fR of protocol \fIP\fR and IP address \fIVIP\fR, a priority\-150 flow is added\[char46] For IPv4 \fIVIPs\fR, the flow matches \fBreg9[6] == 1 && ct\[char46]new && ip &&
+ip4\[char46]dst == \fIVIP\fB && \fIP\fB\[char46]dst == \fIPORT
+\fB\fR\[char46] For IPv6 \fIVIPs\fR, the flow matches \fBreg9[6] == 1 && ct\[char46]new && ip &&
+ip6\[char46]dst == \fI VIP \fB&& \fIP\fB &&
+\fIP\fB\[char46]dst == \fI PORT\fB\fR\[char46] The flow\(cqs action is \fBct_lb_mark(\fIargs\fB)\fR, where \fIargs\fR contains comma separated IP addresses (and optional port numbers) to load balance to\[char46] The address family of the IP addresses of \fIargs\fR is the same as the address family of \fIVIP\fR\[char46]
+.IP \(bu
+For all the configured load balancing rules for a switch in \fBOVN_Northbound\fR database that includes a L4 port \fIPORT\fR of protocol \fIP\fR and IP address \fIVIP\fR, a priority\-120 flow is added\[char46] For IPv4 \fIVIPs
+\fR, the flow matches \fBct\[char46]new && ip &&
+ip4\[char46]dst == \fIVIP\fB &&
+\fIP\fB\[char46]dst == \fIPORT\fB\fR\[char46] For IPv6 \fIVIPs\fR, the flow matches \fBct\[char46]new && ip && ip6\[char46]dst == \fI
+VIP \fB&& \fIP\fB && \fIP\fB\[char46]dst == \fI
+PORT\fB\fR\[char46] The flow\(cqs action is \fBct_lb_mark(\fIargs\fB)
+\fR, where \fIargs\fR contains comma separated IP addresses (and optional port numbers) to load balance to\[char46] The address family of the IP addresses of \fIargs\fR is the same as the address family of \fIVIP\fR\[char46] If health check is enabled, then \fIargs\fR will only contain those endpoints whose service monitor status entry in \fBOVN_Southbound\fR db is either \fBonline\fR or empty\[char46] For IPv4 traffic the flow also loads the original destination IP and transport port in registers \fBreg1\fR and \fBreg2\fR\[char46] For IPv6 traffic the flow also loads the original destination IP and transport port in registers \fBxxreg1\fR and \fBreg2\fR\[char46] The above flow is created even if the load balancer is attached to a logical router connected to the current logical switch and the \fBinstall_ls_lb_from_router\fR variable in \fBoptions\fR is set to true\[char46]
+.IP \(bu
+For all the configured load balancing rules for a switch in \fBOVN_Northbound\fR database that includes just an IP address \fIVIP\fR to match on, OVN adds a priority\-110 flow\[char46] For IPv4 \fIVIPs\fR, the flow matches \fBct\[char46]new && ip &&
+ip4\[char46]dst == \fIVIP\fB\fR\[char46] For IPv6 \fIVIPs\fR, the flow matches \fBct\[char46]new && ip && ip6\[char46]dst == \fI
+VIP\fB\fR\[char46] The action on this flow is \fB
+ct_lb_mark(\fIargs\fB)\fR, where \fIargs\fR contains comma separated IP addresses of the same address family as \fIVIP\fR\[char46] For IPv4 traffic the flow also loads the original destination IP and transport port in registers \fBreg1\fR and \fBreg2\fR\[char46] For IPv6 traffic the flow also loads the original destination IP and transport port in registers \fBxxreg1\fR and \fBreg2\fR\[char46] The above flow is created even if the load balancer is attached to a logical router connected to the current logical switch and the \fBinstall_ls_lb_from_router\fR variable in \fBoptions\fR is set to true\[char46]
+.IP \(bu
+If the load balancer is created with \fB\-\-reject\fR option and it has no active backends, a TCP reset segment (for tcp) or an ICMP port unreachable packet (for all other kind of traffic) will be sent whenever an incoming packet is received for this load-balancer\[char46] Please note using \fB\-\-reject\fR option will disable empty_lb SB controller event for this load balancer\[char46]
+.RE
+.ST "Ingress Table 14: Load balancing affinity learn"
+.PP
+.PP
+Load balancing affinity learn table contains the following logical flows:
+.RS
+.IP \(bu
+For all the configured load balancing rules for a switch in \fBOVN_Northbound\fR database where a positive affinity timeout \fIT\fR is specified in \fBoptions\fR column, that includes a L4 port \fIPORT\fR of protocol \fIP\fR and IP address \fIVIP\fR, a priority\-100 flow is added\[char46] For IPv4 \fIVIPs\fR, the flow matches \fBreg9[6] == 0 && ct\[char46]new && ip
+&& ip4\[char46]dst == \fIVIP\fB && \fIP\fB\[char46]dst ==
+\fIPORT\fB\fR\[char46] For IPv6 \fIVIPs\fR, the flow matches \fBct\[char46]new && ip && ip6\[char46]dst == \fIVIP\fB
+&& \fIP\fB && \fIP\fB\[char46]dst == \fIPORT\fB
+\fR\[char46] The flow\(cqs action is \fBcommit_lb_aff(vip =
+\fIVIP\fB:\fIPORT\fB, backend = \fIbackend ip\fB:
+\fIbackend port\fB, proto = \fIP\fB, timeout = \fIT\fB);
+\fR\[char46]
+.IP \(bu
+A priority 0 flow is added which matches on all packets and applies the action \fBnext;\fR\[char46]
+.RE
+.ST "Ingress Table 15: Pre-Hairpin"
+.RS
+.IP \(bu
+If the logical switch has load balancer(s) configured, then a priority\-100 flow is added with the match \fBip && ct\[char46]trk\fR to check if the packet needs to be hairpinned (if after load balancing the destination IP matches the source IP) or not by executing the actions \fBreg0[6] = chk_lb_hairpin();\fR and \fBreg0[12] = chk_lb_hairpin_reply();\fR and advances the packet to the next table\[char46]
+.IP \(bu
+A priority\-0 flow that simply moves traffic to the next table\[char46]
+.RE
+.ST "Ingress Table 16: Nat-Hairpin"
+.RS
+.IP \(bu
+If the logical switch has load balancer(s) configured, then a priority\-100 flow is added with the match \fBip && ct\[char46]new && ct\[char46]trk &&
+reg0[6] == 1\fR which hairpins the traffic by NATting source IP to the load balancer VIP by executing the action \fBct_snat_to_vip\fR and advances the packet to the next table\[char46]
+.IP \(bu
+If the logical switch has load balancer(s) configured, then a priority\-100 flow is added with the match \fBip && ct\[char46]est && ct\[char46]trk &&
+reg0[6] == 1\fR which hairpins the traffic by NATting source IP to the load balancer VIP by executing the action \fBct_snat\fR and advances the packet to the next table\[char46]
+.IP \(bu
+If the logical switch has load balancer(s) configured, then a priority\-90 flow is added with the match \fBip && reg0[12] == 1\fR which matches on the replies of hairpinned traffic (i\[char46]e\[char46], destination IP is VIP, source IP is the backend IP and source L4 port is backend port for L4 load balancers) and executes \fBct_snat\fR and advances the packet to the next table\[char46]
+.IP \(bu
+A priority\-0 flow that simply moves traffic to the next table\[char46]
+.RE
+.ST "Ingress Table 17: Hairpin"
+.RS
+.IP \(bu
+If logical switch has attached logical switch port of \fIvtep\fR type, then for each distributed gateway router port \fIRP\fR attached to this logical switch and has chassis redirect port \fIcr-RP\fR, a priority\-2000 flow is added with the match .IP
+.nf
+\fB
+.br
+\fB\fR\fBreg0[14] == 1 && is_chassis_resident(\fIcr-RP\fB)\fB\fR
+.br
+\fB          \fR
+.fi
+and action \fBnext;\fR\[char46]
+.IP
+\fBreg0[14]\fR register bit is set in the ingress L2 port security check table for traffic received from HW VTEP (ramp) ports\[char46]
+.IP \(bu
+If logical switch has attached logical switch port of \fIvtep\fR type, then a priority\-1000 flow that matches on \fBreg0[14]\fR register bit for the traffic received from HW VTEP (ramp) ports\[char46] This traffic is passed to ingress table ls_in_l2_lkup\[char46]
+.IP \(bu
+A priority\-1 flow that hairpins traffic matched by non-default flows in the Pre-Hairpin table\[char46] Hairpinning is done at L2, Ethernet addresses are swapped and the packets are looped back on the input port\[char46]
+.IP \(bu
+A priority\-0 flow that simply moves traffic to the next table\[char46]
+.RE
+.ST "Ingress table 18: \fBfrom\-lport\fI ACL evaluation after LB"
+.PP
+.PP
+Logical flows in this table closely reproduce those in the \fBACL eval\fR table in the \fBOVN_Northbound\fR database for the \fBfrom\-lport\fR direction with the option \fBapply\-after\-lb\fR set to \fBtrue\fR\[char46] The \fBpriority\fR values from the \fBACL\fR table have a limited range and have 1000 added to them to leave room for OVN default flows at both higher and lower priorities\[char46] The flows in this table indicate the ACL verdict by setting \fBreg8[16]\fR for \fBallow\-type\fR ACLs, \fBreg8[17]\fR for \fBdrop\fR ACLs, and \fBreg8[17]\fR for \fBreject\fR ACLs, and then advancing the packet to the next table\[char46] These will be reffered to as the allow bit, drop bit, and reject bit throughout the documentation for this table and the next one\[char46]
+.PP
+.PP
+Like with ACLs that are evaluated before load balancers, if the ACL is configured with a tier value, then the current tier counter, supplied in reg8[30\[char46]\[char46]31] is matched against the ACL\(cqs configured tier in addition to the ACL\(cqs match\[char46]
+.RS
+.IP \(bu
+\fBallow\fR apply-after-lb ACLs translate into logical flows that set the allow bit\[char46] If there are any stateful ACLs (including both before-lb and after-lb ACLs) on this datapath, then \fBallow\fR ACLs also run \fBct_commit; next;\fR (which acts as a hint for an upcoming table to commit the connection to conntrack)\[char46] In case the \fBACL\fR has a label then \fBreg3\fR is loaded with the label value and \fBreg0[13]\fR bit is set to 1 (which acts as a hint for the next tables to commit the label to conntrack)\[char46]
+.IP \(bu
+\fBallow\-related\fR apply-after-lb ACLs translate into logical flows that set the allow bit and run the \fBct_commit(ct_label=0/1);
+next;\fR actions for new connections and \fBreg0[1] = 1;
+next;\fR for existing connections\[char46] In case the \fBACL\fR has a label then \fBreg3\fR is loaded with the label value and \fBreg0[13]\fR bit is set to 1 (which acts as a hint for the next tables to commit the label to conntrack)\[char46]
+.IP \(bu
+\fBallow\-stateless\fR apply-after-lb ACLs translate into logical flows that set the allow bit and advance to the next table\[char46]
+.IP \(bu
+\fBreject\fR apply-after-lb ACLs translate into logical flows that set the reject bit and advance to the next table\[char46]
+.IP \(bu
+\fBpass\fR apply-after-lb ACLs translate into logical flows that do not set the allow, drop, or reject bit and advance to the next table\[char46]
+.IP \(bu
+Other apply-after-lb ACLs set the drop bit for new or untracked connections and \fBct_commit(ct_label=1/1);\fR for known connections\[char46] Setting \fBct_label\fR marks a connection as one that was previously allowed, but should no longer be allowed due to a policy change\[char46]
+.RE
+.RS
+.IP \(bu
+One priority\-65532 flow matching packets with \fBreg0[17]\fR set (either replies to existing sessions or traffic related to existing sessions) and allows these by setting the allow bit and advancing to the next table\[char46]
+.RE
+.RS
+.IP \(bu
+One priority\-0 fallback flow that matches all packets and advances to the next table\[char46]
+.RE
+.ST "Ingress Table 19: \fBfrom\-lport\fI ACL action after LB"
+.PP
+.PP
+Logical flows in this table decide how to proceed based on the values of the allow, drop, and reject bits that may have been set in the previous table\[char46]
+.RS
+.IP \(bu
+If no ACLs are configured, then a priority 0 flow is installed that matches everything and advances to the next table\[char46]
+.IP \(bu
+A priority 1000 flow is installed that will advance the packet to the next table if the allow bit is set\[char46]
+.IP \(bu
+A priority 1000 flow is installed that will run the \fBdrop;\fR action if the drop bit is set\[char46]
+.IP \(bu
+A priority 1000 flow is installed that will run the \fBtcp_reset
+{ output <\-> inport; next(pipeline=egress,table=5);}\fR action for TCP connections,\fBicmp4/icmp6\fR action for UDP connections, and \fBsctp_abort {output <\-%gt; inport;
+next(pipeline=egress,table=5);}\fR action for SCTP associations\[char46]
+.IP \(bu
+If any ACLs have tiers configured on them, then three priority 500 flows are installed\[char46] If the current tier counter is 0, 1, or 2, then the current tier counter is incremented by one and the packet is sent back to the previous table for re-evaluation\[char46]
+.RE
+.ST "Ingress Table 20: Stateful"
+.RS
+.IP \(bu
+A priority 100 flow is added which commits the packet to the conntrack and sets the most significant 32-bits of \fBct_label\fR with the \fBreg3\fR value based on the hint provided by previous tables (with a match for \fBreg0[1] == 1 && reg0[13] == 1\fR)\[char46] This is used by the \fBACLs\fR with label to commit the label value to conntrack\[char46]
+.IP \(bu
+For \fBACLs\fR without label, a second priority\-100 flow commits packets to connection tracker using \fBct_commit; next;\fR action based on a hint provided by the previous tables (with a match for \fBreg0[1] == 1 && reg0[13] == 0\fR)\[char46]
+.IP \(bu
+A priority\-0 flow that simply moves traffic to the next table\[char46]
+.RE
+.ST "Ingress Table 21: ARP/ND responder"
+.PP
+.PP
+This table implements ARP/ND responder in a logical switch for known IPs\[char46] The advantage of the ARP responder flow is to limit ARP broadcasts by locally responding to ARP requests without the need to send to other hypervisors\[char46] One common case is when the inport is a logical port associated with a VIF and the broadcast is responded to on the local hypervisor rather than broadcast across the whole network and responded to by the destination VM\[char46] This behavior is proxy ARP\[char46]
+.PP
+.PP
+ARP requests arrive from VMs from a logical switch inport of type default\[char46] For this case, the logical switch proxy ARP rules can be for other VMs or logical router ports\[char46] Logical switch proxy ARP rules may be programmed both for mac binding of IP addresses on other logical switch VIF ports (which are of the default logical switch port type, representing connectivity to VMs or containers), and for mac binding of IP addresses on logical switch router type ports, representing their logical router port peers\[char46] In order to support proxy ARP for logical router ports, an IP address must be configured on the logical switch router type port, with the same value as the peer logical router port\[char46] The configured MAC addresses must match as well\[char46] When a VM sends an ARP request for a distributed logical router port and if the peer router type port of the attached logical switch does not have an IP address configured, the ARP request will be broadcast on the logical switch\[char46] One of the copies of the ARP request will go through the logical switch router type port to the logical router datapath, where the logical router ARP responder will generate a reply\[char46] The MAC binding of a distributed logical router, once learned by an associated VM, is used for all that VM\(cqs communication needing routing\[char46] Hence, the action of a VM re-arping for the mac binding of the logical router port should be rare\[char46]
+.PP
+.PP
+Logical switch ARP responder proxy ARP rules can also be hit when receiving ARP requests externally on a L2 gateway port\[char46] In this case, the hypervisor acting as an L2 gateway, responds to the ARP request on behalf of a destination VM\[char46]
+.PP
+.PP
+Note that ARP requests received from \fBlocalnet\fR logical inports can either go directly to VMs, in which case the VM responds or can hit an ARP responder for a logical router port if the packet is used to resolve a logical router port next hop address\[char46] In either case, logical switch ARP responder rules will not be hit\[char46] It contains these logical flows:
+.RS
+.IP \(bu
+If the logical switch has no router ports with options:arp_proxy configured add a priority\-100 flows to skip the ARP responder if inport is of type \fBlocalnet\fR advances directly to the next table\[char46] ARP requests sent to \fBlocalnet\fR ports can be received by multiple hypervisors\[char46] Now, because the same mac binding rules are downloaded to all hypervisors, each of the multiple hypervisors will respond\[char46] This will confuse L2 learning on the source of the ARP requests\[char46] ARP requests received on an inport of type \fBrouter\fR are not expected to hit any logical switch ARP responder flows\[char46] However, no skip flows are installed for these packets, as there would be some additional flow cost for this and the value appears limited\[char46]
+.IP \(bu
+If inport \fBV\fR is of type \fBvirtual\fR adds a priority\-100 logical flows for each \fIP\fR configured in the \fBoptions:virtual-parents\fR column with the match
+.IP
+.nf
+\fB
+.br
+\fB\fR\fBinport == \fIP\fB && && ((arp\[char46]op == 1 && arp\[char46]spa == \fIVIP\fB && arp\[char46]tpa == \fIVIP\fB) || (arp\[char46]op == 2 && arp\[char46]spa == \fIVIP\fB))\fB\fR
+.br
+\fB\fR\fBinport == \fIP\fB && && ((nd_ns && ip6\[char46]dst == \fI{VIP, NS_MULTICAST_ADDR}\fB && nd\[char46]target == \fIVIP\fB) || (nd_na && nd\[char46]target == \fIVIP\fB))\fB\fR
+.br
+\fB        \fR
+.fi
+.IP
+and applies the action
+.IP
+.nf
+\fB
+.br
+\fB\fR\fBbind_vport(\fIV\fB, inport);\fB\fR
+.br
+\fB        \fR
+.fi
+.IP
+and advances the packet to the next table\[char46]
+.IP
+Where \fIVIP\fR is the virtual ip configured in the column \fBoptions:virtual-ip\fR and NS_MULTICAST_ADDR is solicited-node multicast address corresponding to the VIP\[char46]
+.IP \(bu
+Priority\-50 flows that match ARP requests to each known IP address \fIA\fR of every logical switch port, and respond with ARP replies directly with corresponding Ethernet address \fIE\fR:
+.IP
+.nf
+\fB
+.br
+\fBeth\[char46]dst = eth\[char46]src;
+.br
+\fBeth\[char46]src = \fR\fIE\fB\fR;
+.br
+\fBarp\[char46]op = 2; /* ARP reply\[char46] */
+.br
+\fBarp\[char46]tha = arp\[char46]sha;
+.br
+\fBarp\[char46]sha = \fR\fIE\fB\fR;
+.br
+\fBarp\[char46]tpa = arp\[char46]spa;
+.br
+\fBarp\[char46]spa = \fR\fIA\fB\fR;
+.br
+\fBoutport = inport;
+.br
+\fBflags\[char46]loopback = 1;
+.br
+\fBoutput;
+.br
+\fB        \fR
+.fi
+.IP
+These flows are omitted for logical ports (other than router ports or \fBlocalport\fR ports) that are down (unless \fB
+ignore_lsp_down\fR is configured as true in \fBoptions\fR column of \fBNB_Global\fR table of the \fBNorthbound\fR database), for logical ports of type \fBvirtual\fR, for logical ports with \(cqunknown\(cq address set and for logical ports of a logical switch configured with \fBother_config:vlan\-passthru=true\fR\[char46]
+.IP
+The above ARP responder flows are added for the list of IPv4 addresses if defined in \fBoptions:arp_proxy\fR column of \fBLogical_Switch_Port\fR table for logical switch ports of type \fBrouter\fR\[char46]
+.IP \(bu
+Priority\-50 flows that match IPv6 ND neighbor solicitations to each known IP address \fIA\fR (and \fIA\fR\(cqs solicited node address) of every logical switch port except of type router, and respond with neighbor advertisements directly with corresponding Ethernet address \fIE\fR:
+.IP
+.nf
+\fB
+.br
+\fBnd_na {
+.br
+\fB    eth\[char46]src = \fR\fIE\fB\fR;
+.br
+\fB    ip6\[char46]src = \fR\fIA\fB\fR;
+.br
+\fB    nd\[char46]target = \fR\fIA\fB\fR;
+.br
+\fB    nd\[char46]tll = \fR\fIE\fB\fR;
+.br
+\fB    outport = inport;
+.br
+\fB    flags\[char46]loopback = 1;
+.br
+\fB    output;
+.br
+\fB};
+.br
+\fB        \fR
+.fi
+.IP
+Priority\-50 flows that match IPv6 ND neighbor solicitations to each known IP address \fIA\fR (and \fIA\fR\(cqs solicited node address) of logical switch port of type router, and respond with neighbor advertisements directly with corresponding Ethernet address \fIE\fR:
+.IP
+.nf
+\fB
+.br
+\fBnd_na_router {
+.br
+\fB    eth\[char46]src = \fR\fIE\fB\fR;
+.br
+\fB    ip6\[char46]src = \fR\fIA\fB\fR;
+.br
+\fB    nd\[char46]target = \fR\fIA\fB\fR;
+.br
+\fB    nd\[char46]tll = \fR\fIE\fB\fR;
+.br
+\fB    outport = inport;
+.br
+\fB    flags\[char46]loopback = 1;
+.br
+\fB    output;
+.br
+\fB};
+.br
+\fB        \fR
+.fi
+.IP
+These flows are omitted for logical ports (other than router ports or \fBlocalport\fR ports) that are down (unless \fB
+ignore_lsp_down\fR is configured as true in \fBoptions\fR column of \fBNB_Global\fR table of the \fBNorthbound\fR database), for logical ports of type \fBvirtual\fR and for logical ports with \(cqunknown\(cq address set\[char46]
+.IP
+The above NDP responder flows are added for the list of IPv6 addresses if defined in \fBoptions:arp_proxy\fR column of \fBLogical_Switch_Port\fR table for logical switch ports of type \fBrouter\fR\[char46]
+.IP \(bu
+Priority\-100 flows with match criteria like the ARP and ND flows above, except that they only match packets from the \fBinport\fR that owns the IP addresses in question, with action \fBnext;\fR\[char46] These flows prevent OVN from replying to, for example, an ARP request emitted by a VM for its own IP address\[char46] A VM only makes this kind of request to attempt to detect a duplicate IP address assignment, so sending a reply will prevent the VM from accepting the IP address that it owns\[char46]
+.IP
+In place of \fBnext;\fR, it would be reasonable to use \fBdrop;\fR for the flows\(cq actions\[char46] If everything is working as it is configured, then this would produce equivalent results, since no host should reply to the request\[char46] But ARPing for one\(cqs own IP address is intended to detect situations where the network is not working as configured, so dropping the request would frustrate that intent\[char46]
+.IP \(bu
+For each \fISVC_MON_SRC_IP\fR defined in the value of the \fBip_port_mappings:ENDPOINT_IP\fR column of \fBLoad_Balancer\fR table, priority\-110 logical flow is added with the match \fBarp\[char46]tpa == \fISVC_MON_SRC_IP\fB
+&& && arp\[char46]op == 1\fR and applies the action
+.IP
+.nf
+\fB
+.br
+\fBeth\[char46]dst = eth\[char46]src;
+.br
+\fBeth\[char46]src = \fR\fIE\fB\fR;
+.br
+\fBarp\[char46]op = 2; /* ARP reply\[char46] */
+.br
+\fBarp\[char46]tha = arp\[char46]sha;
+.br
+\fBarp\[char46]sha = \fR\fIE\fB\fR;
+.br
+\fBarp\[char46]tpa = arp\[char46]spa;
+.br
+\fBarp\[char46]spa = \fR\fIA\fB\fR;
+.br
+\fBoutport = inport;
+.br
+\fBflags\[char46]loopback = 1;
+.br
+\fBoutput;
+.br
+\fB        \fR
+.fi
+.IP
+where \fIE\fR is the service monitor source mac defined in the \fBoptions:svc_monitor_mac\fR column in the \fBNB_Global\fR table\[char46] This mac is used as the source mac in the service monitor packets for the load balancer endpoint IP health checks\[char46]
+.IP
+\fISVC_MON_SRC_IP\fR is used as the source ip in the service monitor IPv4 packets for the load balancer endpoint IP health checks\[char46]
+.IP
+These flows are required if an ARP request is sent for the IP \fISVC_MON_SRC_IP\fR\[char46]
+.IP
+For IPv6 the similar flow is added with the following action
+.IP
+.nf
+\fB
+.br
+\fBnd_na {
+.br
+\fB    eth\[char46]dst = eth\[char46]src;
+.br
+\fB    eth\[char46]src = \fR\fIE\fB\fR;
+.br
+\fB    ip6\[char46]src = \fR\fIA\fB\fR;
+.br
+\fB    nd\[char46]target = \fR\fIA\fB\fR;
+.br
+\fB    nd\[char46]tll = \fR\fIE\fB\fR;
+.br
+\fB    outport = inport;
+.br
+\fB    flags\[char46]loopback = 1;
+.br
+\fB    output;
+.br
+\fB};
+.br
+\fB        \fR
+.fi
+.IP \(bu
+For each \fIVIP\fR configured in the table \fBForwarding_Group\fR a priority\-50 logical flow is added with the match \fBarp\[char46]tpa == \fIvip\fB && && arp\[char46]op == 1
+\fR and applies the action
+.IP
+.nf
+\fB
+.br
+\fBeth\[char46]dst = eth\[char46]src;
+.br
+\fBeth\[char46]src = \fR\fIE\fB\fR;
+.br
+\fBarp\[char46]op = 2; /* ARP reply\[char46] */
+.br
+\fBarp\[char46]tha = arp\[char46]sha;
+.br
+\fBarp\[char46]sha = \fR\fIE\fB\fR;
+.br
+\fBarp\[char46]tpa = arp\[char46]spa;
+.br
+\fBarp\[char46]spa = \fR\fIA\fB\fR;
+.br
+\fBoutport = inport;
+.br
+\fBflags\[char46]loopback = 1;
+.br
+\fBoutput;
+.br
+\fB        \fR
+.fi
+.IP
+where \fIE\fR is the forwarding group\(cqs mac defined in the \fBvmac\fR\[char46]
+.IP
+\fIA\fR is used as either the destination ip for load balancing traffic to child ports or as nexthop to hosts behind the child ports\[char46]
+.IP
+These flows are required to respond to an ARP request if an ARP request is sent for the IP \fIvip\fR\[char46]
+.IP \(bu
+One priority\-0 fallback flow that matches all packets and advances to the next table\[char46]
+.RE
+.ST "Ingress Table 22: DHCP option processing"
+.PP
+.PP
+This table adds the DHCPv4 options to a DHCPv4 packet from the logical ports configured with IPv4 address(es) and DHCPv4 options, and similarly for DHCPv6 options\[char46] This table also adds flows for the logical ports of type \fBexternal\fR\[char46]
+.RS
+.IP \(bu
+A priority\-100 logical flow is added for these logical ports which matches the IPv4 packet with \fBudp\[char46]src\fR = 68 and \fBudp\[char46]dst\fR = 67 and applies the action \fBput_dhcp_opts\fR and advances the packet to the next table\[char46]
+.IP
+.nf
+\fB
+.br
+\fBreg0[3] = put_dhcp_opts(offer_ip = \fR\fIip\fB\fR, \fR\fIoptions\fB\fR\[char46]\[char46]\[char46]);
+.br
+\fBnext;
+.br
+\fB        \fR
+.fi
+.IP
+For DHCPDISCOVER and DHCPREQUEST, this transforms the packet into a DHCP reply, adds the DHCP offer IP \fIip\fR and options to the packet, and stores 1 into reg0[3]\[char46] For other kinds of packets, it just stores 0 into reg0[3]\[char46] Either way, it continues to the next table\[char46]
+.IP \(bu
+A priority\-100 logical flow is added for these logical ports which matches the IPv6 packet with \fBudp\[char46]src\fR = 546 and \fBudp\[char46]dst\fR = 547 and applies the action \fBput_dhcpv6_opts\fR and advances the packet to the next table\[char46]
+.IP
+.nf
+\fB
+.br
+\fBreg0[3] = put_dhcpv6_opts(ia_addr = \fR\fIip\fB\fR, \fR\fIoptions\fB\fR\[char46]\[char46]\[char46]);
+.br
+\fBnext;
+.br
+\fB        \fR
+.fi
+.IP
+For DHCPv6 Solicit/Request/Confirm packets, this transforms the packet into a DHCPv6 Advertise/Reply, adds the DHCPv6 offer IP \fIip\fR and options to the packet, and stores 1 into reg0[3]\[char46] For other kinds of packets, it just stores 0 into reg0[3]\[char46] Either way, it continues to the next table\[char46]
+.IP \(bu
+A priority\-0 flow that matches all packets to advances to table 16\[char46]
+.RE
+.ST "Ingress Table 23: DHCP responses"
+.PP
+.PP
+This table implements DHCP responder for the DHCP replies generated by the previous table\[char46]
+.RS
+.IP \(bu
+A priority 100 logical flow is added for the logical ports configured with DHCPv4 options which matches IPv4 packets with \fBudp\[char46]src == 68
+&& udp\[char46]dst == 67 && reg0[3] == 1\fR and responds back to the \fBinport\fR after applying these actions\[char46] If \fBreg0[3]\fR is set to 1, it means that the action \fBput_dhcp_opts\fR was successful\[char46]
+.IP
+.nf
+\fB
+.br
+\fBeth\[char46]dst = eth\[char46]src;
+.br
+\fBeth\[char46]src = \fR\fIE\fB\fR;
+.br
+\fBip4\[char46]src = \fR\fIS\fB\fR;
+.br
+\fBudp\[char46]src = 67;
+.br
+\fBudp\[char46]dst = 68;
+.br
+\fBoutport = \fR\fIP\fB\fR;
+.br
+\fBflags\[char46]loopback = 1;
+.br
+\fBoutput;
+.br
+\fB        \fR
+.fi
+.IP
+where \fIE\fR is the server MAC address and \fIS\fR is the server IPv4 address defined in the DHCPv4 options\[char46] Note that \fBip4\[char46]dst\fR field is handled by \fBput_dhcp_opts\fR\[char46]
+.IP
+(This terminates ingress packet processing; the packet does not go to the next ingress table\[char46])
+.IP \(bu
+A priority 100 logical flow is added for the logical ports configured with DHCPv6 options which matches IPv6 packets with \fBudp\[char46]src == 546
+&& udp\[char46]dst == 547 && reg0[3] == 1\fR and responds back to the \fBinport\fR after applying these actions\[char46] If \fBreg0[3]\fR is set to 1, it means that the action \fBput_dhcpv6_opts\fR was successful\[char46]
+.IP
+.nf
+\fB
+.br
+\fBeth\[char46]dst = eth\[char46]src;
+.br
+\fBeth\[char46]src = \fR\fIE\fB\fR;
+.br
+\fBip6\[char46]dst = \fR\fIA\fB\fR;
+.br
+\fBip6\[char46]src = \fR\fIS\fB\fR;
+.br
+\fBudp\[char46]src = 547;
+.br
+\fBudp\[char46]dst = 546;
+.br
+\fBoutport = \fR\fIP\fB\fR;
+.br
+\fBflags\[char46]loopback = 1;
+.br
+\fBoutput;
+.br
+\fB        \fR
+.fi
+.IP
+where \fIE\fR is the server MAC address and \fIS\fR is the server IPv6 LLA address generated from the \fBserver_id\fR defined in the DHCPv6 options and \fIA\fR is the IPv6 address defined in the logical port\(cqs addresses column\[char46]
+.IP
+(This terminates packet processing; the packet does not go on the next ingress table\[char46])
+.IP \(bu
+A priority\-0 flow that matches all packets to advances to table 17\[char46]
+.RE
+.ST "Ingress Table 24 DNS Lookup"
+.PP
+.PP
+This table looks up and resolves the DNS names to the corresponding configured IP address(es)\[char46]
+.RS
+.IP \(bu
+A priority\-100 logical flow for each logical switch datapath if it is configured with DNS records, which matches the IPv4 and IPv6 packets with \fBudp\[char46]dst\fR = 53 and applies the action \fBdns_lookup\fR and advances the packet to the next table\[char46]
+.IP
+.nf
+\fB
+.br
+\fBreg0[4] = dns_lookup(); next;
+.br
+\fB        \fR
+.fi
+.IP
+For valid DNS packets, this transforms the packet into a DNS reply if the DNS name can be resolved, and stores 1 into reg0[4]\[char46] For failed DNS resolution or other kinds of packets, it just stores 0 into reg0[4]\[char46] Either way, it continues to the next table\[char46]
+.RE
+.ST "Ingress Table 25 DNS Responses"
+.PP
+.PP
+This table implements DNS responder for the DNS replies generated by the previous table\[char46]
+.RS
+.IP \(bu
+A priority\-100 logical flow for each logical switch datapath if it is configured with DNS records, which matches the IPv4 and IPv6 packets with \fBudp\[char46]dst = 53 && reg0[4] == 1\fR and responds back to the \fBinport\fR after applying these actions\[char46] If \fBreg0[4]\fR is set to 1, it means that the action \fBdns_lookup\fR was successful\[char46]
+.IP
+.nf
+\fB
+.br
+\fBeth\[char46]dst <\-> eth\[char46]src;
+.br
+\fBip4\[char46]src <\-> ip4\[char46]dst;
+.br
+\fBudp\[char46]dst = udp\[char46]src;
+.br
+\fBudp\[char46]src = 53;
+.br
+\fBoutport = \fR\fIP\fB\fR;
+.br
+\fBflags\[char46]loopback = 1;
+.br
+\fBoutput;
+.br
+\fB        \fR
+.fi
+.IP
+(This terminates ingress packet processing; the packet does not go to the next ingress table\[char46])
+.RE
+.ST "Ingress table 26 External ports"
+.PP
+.PP
+Traffic from the \fBexternal\fR logical ports enter the ingress datapath pipeline via the \fBlocalnet\fR port\[char46] This table adds the below logical flows to handle the traffic from these ports\[char46]
+.RS
+.IP \(bu
+A priority\-100 flow is added for each \fBexternal\fR logical port which doesn\(cqt reside on a chassis to drop the ARP/IPv6 NS request to the router IP(s) (of the logical switch) which matches on the \fBinport\fR of the \fBexternal\fR logical port and the valid \fBeth\[char46]src\fR address(es) of the \fBexternal\fR logical port\[char46]
+.IP
+This flow guarantees that the ARP/NS request to the router IP address from the external ports is responded by only the chassis which has claimed these external ports\[char46] All the other chassis, drops these packets\[char46]
+.IP
+A priority\-100 flow is added for each \fBexternal\fR logical port which doesn\(cqt reside on a chassis to drop any packet destined to the router mac - with the match \fBinport == \fIexternal\fB &&
+eth\[char46]src == \fIE\fB && eth\[char46]dst == \fIR\fB
+&& !is_chassis_resident(\(dq\fIexternal\fB\(dq)\fR where \fIE\fR is the external port mac and \fIR\fR is the router port mac\[char46]
+.IP \(bu
+A priority\-0 flow that matches all packets to advances to table 20\[char46]
+.RE
+.ST "Ingress Table 27 Destination Lookup"
+.PP
+.PP
+This table implements switching behavior\[char46] It contains these logical flows:
+.RS
+.IP \(bu
+A priority\-110 flow with the match \fBeth\[char46]src == \fIE\fB\fR for all logical switch datapaths and applies the action \fBhandle_svc_check(inport)\fR\[char46] Where \fIE\fR is the service monitor mac defined in the \fBoptions:svc_monitor_mac\fR column of \fBNB_Global\fR table\[char46]
+.IP \(bu
+A priority\-100 flow that punts all IGMP/MLD packets to \fBovn\-controller\fR if multicast snooping is enabled on the logical switch\[char46]
+.IP \(bu
+Priority\-90 flows that forward registered IP multicast traffic to their corresponding multicast group, which \fBovn\-northd\fR creates based on learnt \fBIGMP_Group\fR entries\[char46] The flows also forward packets to the \fBMC_MROUTER_FLOOD\fR multicast group, which \fBovn\-nortdh\fR populates with all the logical ports that are connected to logical routers with \fBoptions\fR:mcast_relay=\(cqtrue\(cq\[char46]
+.IP \(bu
+A priority\-85 flow that forwards all IP multicast traffic destined to 224\[char46]0\[char46]0\[char46]X to the \fBMC_FLOOD_L2\fR multicast group, which \fBovn\-northd\fR populates with all non-router logical ports\[char46]
+.IP \(bu
+A priority\-85 flow that forwards all IP multicast traffic destined to reserved multicast IPv6 addresses (RFC 4291, 2\[char46]7\[char46]1, e\[char46]g\[char46], Solicited-Node multicast) to the \fBMC_FLOOD\fR multicast group, which \fBovn\-northd\fR populates with all enabled logical ports\[char46]
+.IP \(bu
+A priority\-80 flow that forwards all unregistered IP multicast traffic to the \fBMC_STATIC\fR multicast group, which \fBovn\-northd\fR populates with all the logical ports that have \fBoptions\fR \fB:mcast_flood=\(cqtrue\(cq\fR\[char46] The flow also forwards unregistered IP multicast traffic to the \fBMC_MROUTER_FLOOD\fR multicast group, which \fBovn\-northd\fR populates with all the logical ports connected to logical routers that have \fBoptions\fR \fB:mcast_relay=\(cqtrue\(cq\fR\[char46]
+.IP \(bu
+A priority\-80 flow that drops all unregistered IP multicast traffic if \fBother_config\fR \fB:mcast_snoop=\(cqtrue\(cq\fR and \fBother_config\fR \fB:mcast_flood_unregistered=\(cqfalse\(cq\fR and the switch is not connected to a logical router that has \fBoptions\fR \fB:mcast_relay=\(cqtrue\(cq\fR and the switch doesn\(cqt have any logical port with \fBoptions\fR \fB:mcast_flood=\(cqtrue\(cq\fR\[char46]
+.IP \(bu
+Priority\-80 flows for each IP address/VIP/NAT address owned by a router port connected to the switch\[char46] These flows match ARP requests and ND packets for the specific IP addresses\[char46] Matched packets are forwarded only to the router that owns the IP address and to the \fBMC_FLOOD_L2\fR multicast group which contains all non-router logical ports\[char46]
+.IP \(bu
+Priority\-75 flows for each port connected to a logical router matching self originated ARP request/RARP request/ND packets\[char46] These packets are flooded to the \fBMC_FLOOD_L2\fR which contains all non-router logical ports\[char46]
+.IP \(bu
+A priority\-72 flow that outputs all ARP requests and ND packets with an Ethernet broadcast or multicast \fBeth\[char46]dst\fR to the \fBMC_FLOOD_L2\fR multicast group if \fBother_config:broadcast\-arps\-to\-all\-routers=true\fR\[char46]
+.IP \(bu
+A priority\-70 flow that outputs all packets with an Ethernet broadcast or multicast \fBeth\[char46]dst\fR to the \fBMC_FLOOD\fR multicast group\[char46]
+.IP \(bu
+One priority\-50 flow that matches each known Ethernet address against \fBeth\[char46]dst\fR\[char46] Action of this flow outputs the packet to the single associated output port if it is enabled\[char46] \fBdrop;\fR action is applied if LSP is disabled\[char46]
+.IP
+For the Ethernet address on a logical switch port of type \fBrouter\fR, when that logical switch port\(cqs \fBaddresses\fR column is set to \fBrouter\fR and the connected logical router port has a gateway chassis:
+.RS
+.IP \(bu
+The flow for the connected logical router port\(cqs Ethernet address is only programmed on the gateway chassis\[char46]
+.IP \(bu
+If the logical router has rules specified in \fBnat\fR with \fBexternal_mac\fR, then those addresses are also used to populate the switch\(cqs destination lookup on the chassis where \fBlogical_port\fR is resident\[char46]
+.RE
+.IP
+For the Ethernet address on a logical switch port of type \fBrouter\fR, when that logical switch port\(cqs \fBaddresses\fR column is set to \fBrouter\fR and the connected logical router port specifies a \fBreside\-on\-redirect\-chassis\fR and the logical router to which the connected logical router port belongs to has a distributed gateway LRP:
+.RS
+.IP \(bu
+The flow for the connected logical router port\(cqs Ethernet address is only programmed on the gateway chassis\[char46]
+.RE
+.IP
+For each forwarding group configured on the logical switch datapath, a priority\-50 flow that matches on \fBeth\[char46]dst == \fIVIP\fB
+\fR with an action of \fBfwd_group(childports=\fIargs
+\fB)\fR, where \fIargs\fR contains comma separated logical switch child ports to load balance to\[char46] If \fBliveness\fR is enabled, then action also includes \fB liveness=true\fR\[char46]
+.IP \(bu
+One priority\-0 fallback flow that matches all packets with the action \fBoutport = get_fdb(eth\[char46]dst); next;\fR\[char46] The action \fBget_fdb\fR gets the port for the \fBeth\[char46]dst\fR in the MAC learning table of the logical switch datapath\[char46] If there is no entry for \fBeth\[char46]dst\fR in the MAC learning table, then it stores \fBnone\fR in the \fBoutport\fR\[char46]
+.RE
+.ST "Ingress Table 28 Destination unknown"
+.PP
+.PP
+This table handles the packets whose destination was not found or and looked up in the MAC learning table of the logical switch datapath\[char46] It contains the following flows\[char46]
+.RS
+.IP \(bu
+Priority 50 flow with the match \fBoutport == \fIP\fB\fR is added for each disabled Logical Switch Port \fBP\fR\[char46] This flow has action \fBdrop;\fR\[char46]
+.IP \(bu
+If the logical switch has logical ports with \(cqunknown\(cq addresses set, then the below logical flow is added
+.RS
+.IP \(bu
+Priority 50 flow with the match \fBoutport == \(dqnone\(dq\fR then outputs them to the \fBMC_UNKNOWN\fR multicast group, which \fBovn\-northd\fR populates with all enabled logical ports that accept unknown destination packets\[char46] As a small optimization, if no logical ports accept unknown destination packets, \fBovn\-northd\fR omits this multicast group and logical flow\[char46]
+.RE
+.IP
+If the logical switch has no logical ports with \(cqunknown\(cq address set, then the below logical flow is added
+.RS
+.IP \(bu
+Priority 50 flow with the match \fBoutport == none\fR and drops the packets\[char46]
+.RE
+.IP \(bu
+One priority\-0 fallback flow that outputs the packet to the egress stage with the outport learnt from \fBget_fdb\fR action\[char46]
+.RE
+.ST "Egress Table 0: \fBto\-lport\fI Pre-ACLs"
+.PP
+.PP
+This is similar to ingress table \fBPre\-ACLs\fR except for \fBto\-lport\fR traffic\[char46]
+.PP
+.PP
+This table also has a priority\-110 flow with the match \fBeth\[char46]src == \fIE\fB\fR for all logical switch datapaths to move traffic to the next table\[char46] Where \fIE\fR is the service monitor mac defined in the \fBoptions:svc_monitor_mac\fR column of \fBNB_Global\fR table\[char46]
+.PP
+.PP
+This table also has a priority\-110 flow with the match \fBoutport == \fII\fB\fR for all logical switch datapaths to move traffic to the next table\[char46] Where \fII\fR is the peer of a logical router port\[char46] This flow is added to skip the connection tracking of packets which will be entering logical router datapath from logical switch datapath for routing\[char46]
+.ST "Egress Table 1: Pre-LB"
+.PP
+.PP
+This table is similar to ingress table \fBPre\-LB\fR\[char46] It contains a priority\-0 flow that simply moves traffic to the next table\[char46] Moreover it contains two priority\-110 flows to move multicast, IPv6 Neighbor Discovery and MLD traffic to the next table\[char46] If any load balancing rules exist for the datapath, a priority\-100 flow is added with a match of \fBip\fR and action of \fBreg0[2] = 1; next;\fR to act as a hint for table \fBPre\-stateful\fR to send IP packets to the connection tracker for packet de-fragmentation and possibly DNAT the destination VIP to one of the selected backend for already committed load balanced traffic\[char46]
+.PP
+.PP
+This table also has a priority\-110 flow with the match \fBeth\[char46]src == \fIE\fB\fR for all logical switch datapaths to move traffic to the next table\[char46] Where \fIE\fR is the service monitor mac defined in the \fBoptions:svc_monitor_mac\fR column of \fBNB_Global\fR table\[char46]
+.PP
+.PP
+This table also has a priority\-110 flow with the match \fBoutport == \fII\fB\fR for all logical switch datapaths to move traffic to the next table, and, if there are no stateful_acl, clear the ct_state\[char46] Where \fII\fR is the peer of a logical router port\[char46] This flow is added to skip the connection tracking of packets which will be entering logical router datapath from logical switch datapath for routing\[char46]
+.ST "Egress Table 2: Pre-stateful"
+.PP
+.PP
+This is similar to ingress table \fBPre\-stateful\fR\[char46] This table adds the below 3 logical flows\[char46]
+.RS
+.IP \(bu
+A Priority\-120 flow that send the packets to connection tracker using \fBct_lb_mark;\fR as the action so that the already established traffic gets unDNATted from the backend IP to the load balancer VIP based on a hint provided by the previous tables with a match for \fBreg0[2] == 1\fR\[char46] If the packet was not DNATted earlier, then \fBct_lb_mark\fR functions like \fBct_next\fR\[char46]
+.IP \(bu
+A priority\-100 flow sends the packets to connection tracker based on a hint provided by the previous tables (with a match for \fBreg0[0] == 1\fR) by using the \fBct_next;\fR action\[char46]
+.IP \(bu
+A priority\-0 flow that matches all packets to advance to the next table\[char46]
+.RE
+.ST "Egress Table 3: \fBfrom\-lport\fI ACL hints"
+.PP
+.PP
+This is similar to ingress table \fBACL hints\fR\[char46]
+.ST "Egress Table 4: \fBto\-lport\fI ACL evaluation"
+.PP
+.PP
+This is similar to ingress table \fBACL eval\fR except for \fBto\-lport\fR ACLs\[char46] As a reminder, these flows use the following register bits to indicate their verdicts\[char46] \fBAllow\-type\fR ACLs set \fBreg8[16]\fR, \fBdrop\fR ACLs set \fBreg8[17]\fR, and \fBreject\fR ACLs set \fBreg8[18]\fR\[char46]
+.PP
+.PP
+Also like with ingress ACLs, egress ACLs can have a configured \fBtier\fR\[char46] If a tier is configured, then the current tier counter is evaluated against the ACL\(cqs configured tier in addition to the ACL\(cqs match\[char46] The current tier counter is stored in \fBreg8[30\[char46]\[char46]31]\fR\[char46]
+.PP
+.PP
+Similar to ingress table, a priority\-65532 flow is added to allow IPv6 Neighbor solicitation, Neighbor discover, Router solicitation, Router advertisement and MLD packets regardless of other ACLs defined\[char46]
+.PP
+.PP
+In addition, the following flows are added\[char46]
+.RS
+.IP \(bu
+A priority 34000 logical flow is added for each logical port which has DHCPv4 options defined to allow the DHCPv4 reply packet and which has DHCPv6 options defined to allow the DHCPv6 reply packet from the \fBIngress Table 18: DHCP responses\fR\[char46] This is indicated by setting the allow bit\[char46]
+.IP \(bu
+A priority 34000 logical flow is added for each logical switch datapath configured with DNS records with the match \fBudp\[char46]dst = 53\fR to allow the DNS reply packet from the \fBIngress Table 20: DNS responses\fR\[char46] This is indicated by setting the allow bit\[char46]
+.IP \(bu
+A priority 34000 logical flow is added for each logical switch datapath with the match \fBeth\[char46]src = \fIE\fB\fR to allow the service monitor request packet generated by \fBovn\-controller\fR with the action \fBnext\fR, where \fIE\fR is the service monitor mac defined in the \fBoptions:svc_monitor_mac\fR column of \fBNB_Global\fR table\[char46] This is indicated by setting the allow bit\[char46]
+.RE
+.ST "Egress Table 5: \fBto\-lport\fI ACL action"
+.PP
+.PP
+This is similar to ingress table \fBACL action\fR\[char46]
+.ST "Egress Table 6: \fBto\-lport\fI QoS Marking"
+.PP
+.PP
+This is similar to ingress table \fBQoS marking\fR except they apply to \fBto\-lport\fR QoS rules\[char46]
+.ST "Egress Table 7: \fBto\-lport\fI QoS Meter"
+.PP
+.PP
+This is similar to ingress table \fBQoS meter\fR except they apply to \fBto\-lport\fR QoS rules\[char46]
+.ST "Egress Table 8: Stateful"
+.PP
+.PP
+This is similar to ingress table \fBStateful\fR except that there are no rules added for load balancing new connections\[char46]
+.ST "Egress Table 9: Egress Port Security - check"
+.PP
+.PP
+This is similar to the port security logic in table \fBIngress Port Security check\fR except that action \fBcheck_out_port_sec\fR is used to check the port security rules\[char46] This table adds the below logical flows\[char46]
+.RS
+.IP \(bu
+A priority 100 flow which matches on the multicast traffic and applies the action \fBREGBIT_PORT_SEC_DROP\(dq = 0; next;\(dq\fR to skip the out port security checks\[char46]
+.IP \(bu
+A priority 0 logical flow is added which matches on all the packets and applies the action \fBREGBIT_PORT_SEC_DROP\(dq = check_out_port_sec(); next;\(dq\fR\[char46] The action \fBcheck_out_port_sec\fR applies the port security rules based on the addresses defined in the \fBport_security\fR column of \fBLogical_Switch_Port\fR table before delivering the packet to the \fBoutport\fR\[char46]
+.RE
+.ST "Egress Table 10: Egress Port Security - Apply"
+.PP
+.PP
+This is similar to the ingress port security logic in ingress table \fBA Ingress Port Security \- Apply\fR\[char46] This table drops the packets if the port security check failed in the previous stage i\[char46]e the register bit \fBREGBIT_PORT_SEC_DROP\fR is set to 1\[char46]
+.PP
+.PP
+The following flows are added\[char46]
+.RS
+.IP \(bu
+For each port configured with egress qos in the \fBoptions:qdisc_queue_id\fR column of \fBLogical_Switch_Port\fR, running a localnet port on the same logical switch, a priority 110 flow is added which matches on the localnet \fBoutport\fR and on the port \fBinport\fR and applies the action \fBset_queue(id); output;\(dq\fR\[char46]
+.IP \(bu
+For each localnet port configured with egress qos in the \fBoptions:qdisc_queue_id\fR column of \fBLogical_Switch_Port\fR, a priority 100 flow is added which matches on the localnet \fBoutport\fR and applies the action \fBset_queue(id); output;\(dq\fR\[char46]
+.IP
+Please remember to mark the corresponding physical interface with \fBovn\-egress\-iface\fR set to true in \fBexternal_ids\fR\[char46]
+.IP \(bu
+A priority\-50 flow that drops the packet if the register bit \fBREGBIT_PORT_SEC_DROP\fR is set to 1\[char46]
+.IP \(bu
+A priority\-0 flow that outputs the packet to the \fBoutport\fR\[char46]
+.RE
+.SS "Logical Router Datapaths"
+.PP
+.PP
+Logical router datapaths will only exist for \fBLogical_Router\fR rows in the \fBOVN_Northbound\fR database that do not have \fBenabled\fR set to \fBfalse\fR
+.ST "Ingress Table 0: L2 Admission Control"
+.PP
+.PP
+This table drops packets that the router shouldn\(cqt see at all based on their Ethernet headers\[char46] It contains the following flows:
+.RS
+.IP \(bu
+Priority\-100 flows to drop packets with VLAN tags or multicast Ethernet source addresses\[char46]
+.IP \(bu
+For each enabled router port \fIP\fR with Ethernet address \fIE\fR, a priority\-50 flow that matches \fBinport ==
+\fIP\fB && (eth\[char46]mcast || eth\[char46]dst ==
+\fIE\fB\fR), stores the router port ethernet address and advances to next table, with action \fBxreg0[0\[char46]\[char46]47]=E; next;\fR\[char46]
+.IP
+For the gateway port on a distributed logical router (where one of the logical router ports specifies a gateway chassis), the above flow matching \fBeth\[char46]dst == \fIE\fB\fR is only programmed on the gateway port instance on the gateway chassis\[char46] If LRP\(cqs logical switch has attached LSP of \fBvtep\fR type, the \fBis_chassis_resident()\fR part is not added to lflow to allow traffic originated from logical switch to reach LR services (LBs, NAT)\[char46]
+.IP
+For a distributed logical router or for gateway router where the port is configured with \fBoptions:gateway_mtu\fR the action of the above flow is modified adding \fBcheck_pkt_larger\fR in order to mark the packet setting \fBREGBIT_PKT_LARGER\fR if the size is greater than the MTU\[char46] If the port is also configured with \fBoptions:gateway_mtu_bypass\fR then another flow is added, with priority\-55, to bypass the \fBcheck_pkt_larger\fR flow\[char46] This is useful for traffic that normally doesn\(cqt need to be fragmented and for which check_pkt_larger, which might not be offloadable, is not really needed\[char46] One such example is TCP traffic\[char46]
+.IP \(bu
+For each \fBdnat_and_snat\fR NAT rule on a distributed router that specifies an external Ethernet address \fIE\fR, a priority\-50 flow that matches \fBinport == \fIGW\fB
+&& eth\[char46]dst == \fIE\fB\fR, where \fIGW\fR is the logical router distributed gateway port corresponding to the NAT rule (specified or inferred), with action \fBxreg0[0\[char46]\[char46]47]=E; next;\fR\[char46]
+.IP
+This flow is only programmed on the gateway port instance on the chassis where the \fBlogical_port\fR specified in the NAT rule resides\[char46]
+.IP \(bu
+A priority\-0 logical flow that matches all packets not already handled (match \fB1\fR) and drops them (action \fBdrop;\fR)\[char46]
+.RE
+.PP
+.PP
+Other packets are implicitly dropped\[char46]
+.ST "Ingress Table 1: Neighbor lookup"
+.PP
+.PP
+For ARP and IPv6 Neighbor Discovery packets, this table looks into the \fBMAC_Binding\fR records to determine if OVN needs to learn the mac bindings\[char46] Following flows are added:
+.RS
+.IP \(bu
+For each router port \fIP\fR that owns IP address \fIA\fR, which belongs to subnet \fIS\fR with prefix length \fIL\fR, if the option \fBalways_learn_from_arp_request\fR is \fBtrue\fR for this router, a priority\-100 flow is added which matches \fBinport == \fIP\fB && arp\[char46]spa ==
+\fIS\fB/\fIL\fB && arp\[char46]op == 1\fR (ARP request) with the following actions:
+.IP
+.nf
+\fB
+.br
+\fBreg9[2] = lookup_arp(inport, arp\[char46]spa, arp\[char46]sha);
+.br
+\fBnext;
+.br
+\fB        \fR
+.fi
+.IP
+If the option \fBalways_learn_from_arp_request\fR is \fBfalse\fR, the following two flows are added\[char46]
+.IP
+A priority\-110 flow is added which matches \fBinport ==
+\fIP\fB && arp\[char46]spa == \fIS\fB/\fIL\fB
+&& arp\[char46]tpa == \fIA\fB && arp\[char46]op == 1\fR (ARP request) with the following actions:
+.IP
+.nf
+\fB
+.br
+\fBreg9[2] = lookup_arp(inport, arp\[char46]spa, arp\[char46]sha);
+.br
+\fBreg9[3] = 1;
+.br
+\fBnext;
+.br
+\fB        \fR
+.fi
+.IP
+A priority\-100 flow is added which matches \fBinport ==
+\fIP\fB && arp\[char46]spa == \fIS\fB/\fIL\fB
+&& arp\[char46]op == 1\fR (ARP request) with the following actions:
+.IP
+.nf
+\fB
+.br
+\fBreg9[2] = lookup_arp(inport, arp\[char46]spa, arp\[char46]sha);
+.br
+\fBreg9[3] = lookup_arp_ip(inport, arp\[char46]spa);
+.br
+\fBnext;
+.br
+\fB        \fR
+.fi
+.IP
+If the logical router port \fIP\fR is a distributed gateway router port, additional match \fBis_chassis_resident(cr\-\fIP\fB)\fR is added for all these flows\[char46]
+.IP \(bu
+A priority\-100 flow which matches on ARP reply packets and applies the actions if the option \fBalways_learn_from_arp_request\fR is \fBtrue\fR:
+.IP
+.nf
+\fB
+.br
+\fBreg9[2] = lookup_arp(inport, arp\[char46]spa, arp\[char46]sha);
+.br
+\fBnext;
+.br
+\fB        \fR
+.fi
+.IP
+If the option \fBalways_learn_from_arp_request\fR is \fBfalse\fR, the above actions will be:
+.IP
+.nf
+\fB
+.br
+\fBreg9[2] = lookup_arp(inport, arp\[char46]spa, arp\[char46]sha);
+.br
+\fBreg9[3] = 1;
+.br
+\fBnext;
+.br
+\fB        \fR
+.fi
+.IP \(bu
+A priority\-100 flow which matches on IPv6 Neighbor Discovery advertisement packet and applies the actions if the option \fBalways_learn_from_arp_request\fR is \fBtrue\fR:
+.IP
+.nf
+\fB
+.br
+\fBreg9[2] = lookup_nd(inport, nd\[char46]target, nd\[char46]tll);
+.br
+\fBnext;
+.br
+\fB        \fR
+.fi
+.IP
+If the option \fBalways_learn_from_arp_request\fR is \fBfalse\fR, the above actions will be:
+.IP
+.nf
+\fB
+.br
+\fBreg9[2] = lookup_nd(inport, nd\[char46]target, nd\[char46]tll);
+.br
+\fBreg9[3] = 1;
+.br
+\fBnext;
+.br
+\fB        \fR
+.fi
+.IP \(bu
+A priority\-100 flow which matches on IPv6 Neighbor Discovery solicitation packet and applies the actions if the option \fBalways_learn_from_arp_request\fR is \fBtrue\fR:
+.IP
+.nf
+\fB
+.br
+\fBreg9[2] = lookup_nd(inport, ip6\[char46]src, nd\[char46]sll);
+.br
+\fBnext;
+.br
+\fB        \fR
+.fi
+.IP
+If the option \fBalways_learn_from_arp_request\fR is \fBfalse\fR, the above actions will be:
+.IP
+.nf
+\fB
+.br
+\fBreg9[2] = lookup_nd(inport, ip6\[char46]src, nd\[char46]sll);
+.br
+\fBreg9[3] = lookup_nd_ip(inport, ip6\[char46]src);
+.br
+\fBnext;
+.br
+\fB        \fR
+.fi
+.IP \(bu
+A priority\-0 fallback flow that matches all packets and applies the action \fBreg9[2] = 1; next;\fR advancing the packet to the next table\[char46]
+.RE
+.ST "Ingress Table 2: Neighbor learning"
+.PP
+.PP
+This table adds flows to learn the mac bindings from the ARP and IPv6 Neighbor Solicitation/Advertisement packets if it is needed according to the lookup results from the previous stage\[char46]
+.PP
+.PP
+reg9[2] will be \fB1\fR if the \fBlookup_arp/lookup_nd\fR in the previous table was successful or skipped, meaning no need to learn mac binding from the packet\[char46]
+.PP
+.PP
+reg9[3] will be \fB1\fR if the \fBlookup_arp_ip/lookup_nd_ip\fR in the previous table was successful or skipped, meaning it is ok to learn mac binding from the packet (if reg9[2] is 0)\[char46]
+.RS
+.IP \(bu
+A priority\-100 flow with the match \fBreg9[2] == 1 || reg9[3] ==
+0\fR and advances the packet to the next table as there is no need to learn the neighbor\[char46]
+.IP \(bu
+A priority\-95 flow with the match \fBnd_ns &&
+(ip6\[char46]src == 0 || nd\[char46]sll == 0)\fR and applies the action \fBnext;\fR
+.IP \(bu
+A priority\-90 flow with the match \fBarp\fR and applies the action \fBput_arp(inport, arp\[char46]spa, arp\[char46]sha); next;\fR
+.IP \(bu
+A priority\-95 flow with the match \fBnd_na  &&
+nd\[char46]tll == 0\fR and applies the action \fBput_nd(inport, nd\[char46]target, eth\[char46]src); next;\fR
+.IP \(bu
+A priority\-90 flow with the match \fBnd_na\fR and applies the action \fBput_nd(inport, nd\[char46]target, nd\[char46]tll); next;\fR
+.IP \(bu
+A priority\-90 flow with the match \fBnd_ns\fR and applies the action \fBput_nd(inport, ip6\[char46]src, nd\[char46]sll); next;\fR
+.IP \(bu
+A priority\-0 logical flow that matches all packets not already handled (match \fB1\fR) and drops them (action \fBdrop;\fR)\[char46]
+.RE
+.ST "Ingress Table 3: IP Input"
+.PP
+.PP
+This table is the core of the logical router datapath functionality\[char46] It contains the following flows to implement very basic IP host functionality\[char46]
+.RS
+.IP \(bu
+For each \fBdnat_and_snat\fR NAT rule on a distributed logical routers or gateway routers with gateway port configured with \fBoptions:gateway_mtu\fR to a valid integer value \fIM\fR, a priority\-160 flow with the match \fBinport == \fILRP\fB && REGBIT_PKT_LARGER
+&& REGBIT_EGRESS_LOOPBACK == 0\fR, where \fILRP\fR is the logical router port and applies the following action for ipv4 and ipv6 respectively:
+.IP
+.nf
+\fB
+.br
+\fBicmp4_error {
+.br
+\fB    icmp4\[char46]type = 3; /* Destination Unreachable\[char46] */
+.br
+\fB    icmp4\[char46]code = 4;  /* Frag Needed and DF was Set\[char46] */
+.br
+\fB    icmp4\[char46]frag_mtu = \fR\fIM\fB\fR;
+.br
+\fB    eth\[char46]dst = eth\[char46]src;
+.br
+\fB    eth\[char46]src = \fR\fIE\fB\fR;
+.br
+\fB    ip4\[char46]dst = ip4\[char46]src;
+.br
+\fB    ip4\[char46]src = \fR\fII\fB\fR;
+.br
+\fB    ip\[char46]ttl = 255;
+.br
+\fB    REGBIT_EGRESS_LOOPBACK = 1;
+.br
+\fB    REGBIT_PKT_LARGER 0;
+.br
+\fB    outport = \fR\fILRP\fB\fR;
+.br
+\fB    flags\[char46]loopback = 1;
+.br
+\fB    output;
+.br
+\fB};
+.br
+\fB
+.br
+\fBicmp6_error {
+.br
+\fB    icmp6\[char46]type = 2;
+.br
+\fB    icmp6\[char46]code = 0;
+.br
+\fB    icmp6\[char46]frag_mtu = \fR\fIM\fB\fR;
+.br
+\fB    eth\[char46]dst = eth\[char46]src;
+.br
+\fB    eth\[char46]src = \fR\fIE\fB\fR;
+.br
+\fB    ip6\[char46]dst = ip6\[char46]src;
+.br
+\fB    ip6\[char46]src = \fR\fII\fB\fR;
+.br
+\fB    ip\[char46]ttl = 255;
+.br
+\fB    REGBIT_EGRESS_LOOPBACK = 1;
+.br
+\fB    REGBIT_PKT_LARGER 0;
+.br
+\fB    outport = \fR\fILRP\fB\fR;
+.br
+\fB    flags\[char46]loopback = 1;
+.br
+\fB    output;
+.br
+\fB};
+.br
+\fB    \fR
+.fi
+.IP
+where \fIE\fR and \fII\fR are the NAT rule external mac and IP respectively\[char46]
+.IP \(bu
+For distributed logical routers or gateway routers with gateway port configured with \fBoptions:gateway_mtu\fR to a valid integer value, a priority\-150 flow with the match \fBinport ==
+\fILRP\fB && REGBIT_PKT_LARGER &&
+REGBIT_EGRESS_LOOPBACK == 0\fR, where \fILRP\fR is the logical router port and applies the following action for ipv4 and ipv6 respectively:
+.IP
+.nf
+\fB
+.br
+\fBicmp4_error {
+.br
+\fB    icmp4\[char46]type = 3; /* Destination Unreachable\[char46] */
+.br
+\fB    icmp4\[char46]code = 4;  /* Frag Needed and DF was Set\[char46] */
+.br
+\fB    icmp4\[char46]frag_mtu = \fR\fIM\fB\fR;
+.br
+\fB    eth\[char46]dst = \fR\fIE\fB\fR;
+.br
+\fB    ip4\[char46]dst = ip4\[char46]src;
+.br
+\fB    ip4\[char46]src = \fR\fII\fB\fR;
+.br
+\fB    ip\[char46]ttl = 255;
+.br
+\fB    REGBIT_EGRESS_LOOPBACK = 1;
+.br
+\fB    REGBIT_PKT_LARGER 0;
+.br
+\fB    next(pipeline=ingress, table=0);
+.br
+\fB};
+.br
+\fB
+.br
+\fBicmp6_error {
+.br
+\fB    icmp6\[char46]type = 2;
+.br
+\fB    icmp6\[char46]code = 0;
+.br
+\fB    icmp6\[char46]frag_mtu = \fR\fIM\fB\fR;
+.br
+\fB    eth\[char46]dst = \fR\fIE\fB\fR;
+.br
+\fB    ip6\[char46]dst = ip6\[char46]src;
+.br
+\fB    ip6\[char46]src = \fR\fII\fB\fR;
+.br
+\fB    ip\[char46]ttl = 255;
+.br
+\fB    REGBIT_EGRESS_LOOPBACK = 1;
+.br
+\fB    REGBIT_PKT_LARGER 0;
+.br
+\fB    next(pipeline=ingress, table=0);
+.br
+\fB};
+.br
+\fB    \fR
+.fi
+.IP \(bu
+For each NAT entry of a distributed logical router (with distributed gateway router port(s)) of type \fBsnat\fR, a priority\-120 flow with the match \fBinport == \fIP\fB
+&& ip4\[char46]src == \fIA\fB\fR advances the packet to the next pipeline, where \fIP\fR is the distributed logical router port corresponding to the NAT entry (specified or inferred) and \fIA\fR is the \fBexternal_ip\fR set in the NAT entry\[char46] If \fIA\fR is an IPv6 address, then \fBip6\[char46]src\fR is used for the match\[char46]
+.IP
+The above flow is required to handle the routing of the East/west NAT traffic\[char46]
+.IP \(bu
+For each BFD port the two following priority\-110 flows are added to manage BFD traffic:
+.RS
+.IP \(bu
+if \fBip4\[char46]src\fR or \fBip6\[char46]src\fR is any IP address owned by the router port and \fBudp\[char46]dst == 3784
+\fR, the packet is advanced to the next pipeline stage\[char46]
+.IP \(bu
+if \fBip4\[char46]dst\fR or \fBip6\[char46]dst\fR is any IP address owned by the router port and \fBudp\[char46]dst == 3784
+\fR, the \fBhandle_bfd_msg\fR action is executed\[char46]
+.RE
+.IP \(bu
+L3 admission control: Priority\-120 flows allows IGMP and MLD packets if the router has logical ports that have \fBoptions\fR \fB:mcast_flood=\(cqtrue\(cq\fR\[char46]
+.IP \(bu
+L3 admission control: A priority\-100 flow drops packets that match any of the following:
+.RS
+.IP \(bu
+\fBip4\[char46]src[28\[char46]\[char46]31] == 0xe\fR (multicast source)
+.IP \(bu
+\fBip4\[char46]src == 255\[char46]255\[char46]255\[char46]255\fR (broadcast source)
+.IP \(bu
+\fBip4\[char46]src == 127\[char46]0\[char46]0\[char46]0/8 || ip4\[char46]dst == 127\[char46]0\[char46]0\[char46]0/8\fR (localhost source or destination)
+.IP \(bu
+\fBip4\[char46]src == 0\[char46]0\[char46]0\[char46]0/8 || ip4\[char46]dst == 0\[char46]0\[char46]0\[char46]0/8\fR (zero network source or destination)
+.IP \(bu
+\fBip4\[char46]src\fR or \fBip6\[char46]src\fR is any IP address owned by the router, unless the packet was recirculated due to egress loopback as indicated by \fBREGBIT_EGRESS_LOOPBACK\fR\[char46]
+.IP \(bu
+\fBip4\[char46]src\fR is the broadcast address of any IP network known to the router\[char46]
+.RE
+.IP \(bu
+A priority\-100 flow parses DHCPv6 replies from IPv6 prefix delegation routers (\fBudp\[char46]src == 547 &&
+udp\[char46]dst == 546\fR)\[char46] The \fBhandle_dhcpv6_reply\fR is used to send IPv6 prefix delegation messages to the delegation router\[char46]
+.IP \(bu
+ICMP echo reply\[char46] These flows reply to ICMP echo requests received for the router\(cqs IP address\[char46] Let \fIA\fR be an IP address owned by a router port\[char46] Then, for each \fIA\fR that is an IPv4 address, a priority\-90 flow matches on \fBip4\[char46]dst == \fIA\fB\fR and \fBicmp4\[char46]type == 8 && icmp4\[char46]code == 0\fR (ICMP echo request)\[char46] For each \fIA\fR that is an IPv6 address, a priority\-90 flow matches on \fBip6\[char46]dst == \fIA\fB\fR and \fBicmp6\[char46]type == 128 && icmp6\[char46]code == 0\fR (ICMPv6 echo request)\[char46] The port of the router that receives the echo request does not matter\[char46] Also, the \fBip\[char46]ttl\fR of the echo request packet is not checked, so it complies with RFC 1812, section 4\[char46]2\[char46]2\[char46]9\[char46] Flows for ICMPv4 echo requests use the following actions:
+.IP
+.nf
+\fB
+.br
+\fBip4\[char46]dst <\-> ip4\[char46]src;
+.br
+\fBip\[char46]ttl = 255;
+.br
+\fBicmp4\[char46]type = 0;
+.br
+\fBflags\[char46]loopback = 1;
+.br
+\fBnext;
+.br
+\fB        \fR
+.fi
+.IP
+Flows for ICMPv6 echo requests use the following actions:
+.IP
+.nf
+\fB
+.br
+\fBip6\[char46]dst <\-> ip6\[char46]src;
+.br
+\fBip\[char46]ttl = 255;
+.br
+\fBicmp6\[char46]type = 129;
+.br
+\fBflags\[char46]loopback = 1;
+.br
+\fBnext;
+.br
+\fB        \fR
+.fi
+.IP \(bu
+Reply to ARP requests\[char46]
+.IP
+These flows reply to ARP requests for the router\(cqs own IP address\[char46] The ARP requests are handled only if the requestor\(cqs IP belongs to the same subnets of the logical router port\[char46] For each router port \fIP\fR that owns IP address \fIA\fR, which belongs to subnet \fIS\fR with prefix length \fIL\fR, and Ethernet address \fIE\fR, a priority\-90 flow matches \fBinport == \fIP\fB &&
+arp\[char46]spa == \fIS\fB/\fIL\fB && arp\[char46]op == 1
+&& arp\[char46]tpa == \fIA\fB\fR (ARP request) with the following actions:
+.IP
+.nf
+\fB
+.br
+\fBeth\[char46]dst = eth\[char46]src;
+.br
+\fBeth\[char46]src = xreg0[0\[char46]\[char46]47];
+.br
+\fBarp\[char46]op = 2; /* ARP reply\[char46] */
+.br
+\fBarp\[char46]tha = arp\[char46]sha;
+.br
+\fBarp\[char46]sha = xreg0[0\[char46]\[char46]47];
+.br
+\fBarp\[char46]tpa = arp\[char46]spa;
+.br
+\fBarp\[char46]spa = \fR\fIA\fB\fR;
+.br
+\fBoutport = inport;
+.br
+\fBflags\[char46]loopback = 1;
+.br
+\fBoutput;
+.br
+\fB        \fR
+.fi
+.IP
+For the gateway port on a distributed logical router (where one of the logical router ports specifies a gateway chassis), the above flows are only programmed on the gateway port instance on the gateway chassis\[char46] This behavior avoids generation of multiple ARP responses from different chassis, and allows upstream MAC learning to point to the gateway chassis\[char46]
+.IP
+For the logical router port with the option \fBreside\-on\-redirect\-chassis\fR set (which is centralized), the above flows are only programmed on the gateway port instance on the gateway chassis (if the logical router has a distributed gateway port)\[char46] This behavior avoids generation of multiple ARP responses from different chassis, and allows upstream MAC learning to point to the gateway chassis\[char46]
+.IP \(bu
+Reply to IPv6 Neighbor Solicitations\[char46] These flows reply to Neighbor Solicitation requests for the router\(cqs own IPv6 address and populate the logical router\(cqs mac binding table\[char46]
+.IP
+For each router port \fIP\fR that owns IPv6 address \fIA\fR, solicited node address \fIS\fR, and Ethernet address \fIE\fR, a priority\-90 flow matches \fBinport == \fIP\fB &&
+nd_ns && ip6\[char46]dst == {\fIA\fB, \fIE\fB} &&
+nd\[char46]target == \fIA\fB\fR with the following actions:
+.IP
+.nf
+\fB
+.br
+\fBnd_na_router {
+.br
+\fB    eth\[char46]src = xreg0[0\[char46]\[char46]47];
+.br
+\fB    ip6\[char46]src = \fR\fIA\fB\fR;
+.br
+\fB    nd\[char46]target = \fR\fIA\fB\fR;
+.br
+\fB    nd\[char46]tll = xreg0[0\[char46]\[char46]47];
+.br
+\fB    outport = inport;
+.br
+\fB    flags\[char46]loopback = 1;
+.br
+\fB    output;
+.br
+\fB};
+.br
+\fB        \fR
+.fi
+.IP
+For the gateway port on a distributed logical router (where one of the logical router ports specifies a gateway chassis), the above flows replying to IPv6 Neighbor Solicitations are only programmed on the gateway port instance on the gateway chassis\[char46] This behavior avoids generation of multiple replies from different chassis, and allows upstream MAC learning to point to the gateway chassis\[char46]
+.IP \(bu
+These flows reply to ARP requests or IPv6 neighbor solicitation for the virtual IP addresses configured in the router for NAT (both DNAT and SNAT) or load balancing\[char46]
+.IP
+IPv4: For a configured NAT (both DNAT and SNAT) IP address or a load balancer IPv4 VIP \fIA\fR, for each router port \fIP\fR with Ethernet address \fIE\fR, a priority\-90 flow matches \fBarp\[char46]op == 1 && arp\[char46]tpa == \fIA\fB\fR (ARP request) with the following actions:
+.IP
+.nf
+\fB
+.br
+\fBeth\[char46]dst = eth\[char46]src;
+.br
+\fBeth\[char46]src = xreg0[0\[char46]\[char46]47];
+.br
+\fBarp\[char46]op = 2; /* ARP reply\[char46] */
+.br
+\fBarp\[char46]tha = arp\[char46]sha;
+.br
+\fBarp\[char46]sha = xreg0[0\[char46]\[char46]47];
+.br
+\fBarp\[char46]tpa <\-> arp\[char46]spa;
+.br
+\fBoutport = inport;
+.br
+\fBflags\[char46]loopback = 1;
+.br
+\fBoutput;
+.br
+\fB        \fR
+.fi
+.IP
+IPv4: For a configured load balancer IPv4 VIP, a similar flow is added with the additional match \fBinport == \fIP\fB\fR if the VIP is reachable from any logical router port of the logical router\[char46]
+.IP
+If the router port \fIP\fR is a distributed gateway router port, then the \fBis_chassis_resident(\fIP\fB)\fR is also added in the match condition for the load balancer IPv4 VIP \fIA\fR\[char46]
+.IP
+IPv6: For a configured NAT (both DNAT and SNAT) IP address or a load balancer IPv6 VIP \fIA\fR (if the VIP is reachable from any logical router port of the logical router), solicited node address \fIS\fR, for each router port \fIP\fR with Ethernet address \fIE\fR, a priority\-90 flow matches \fBinport == \fIP\fB && nd_ns &&
+ip6\[char46]dst == {\fIA\fB, \fIS\fB} &&
+nd\[char46]target == \fIA\fB\fR with the following actions:
+.IP
+.nf
+\fB
+.br
+\fBeth\[char46]dst = eth\[char46]src;
+.br
+\fBnd_na {
+.br
+\fB    eth\[char46]src = xreg0[0\[char46]\[char46]47];
+.br
+\fB    nd\[char46]tll = xreg0[0\[char46]\[char46]47];
+.br
+\fB    ip6\[char46]src = \fR\fIA\fB\fR;
+.br
+\fB    nd\[char46]target = \fR\fIA\fB\fR;
+.br
+\fB    outport = inport;
+.br
+\fB    flags\[char46]loopback = 1;
+.br
+\fB    output;
+.br
+\fB}
+.br
+\fB        \fR
+.fi
+.IP
+If the router port \fIP\fR is a distributed gateway router port, then the \fBis_chassis_resident(\fIP\fB)\fR is also added in the match condition for the load balancer IPv6 VIP \fIA\fR\[char46]
+.IP
+For the gateway port on a distributed logical router with NAT (where one of the logical router ports specifies a gateway chassis):
+.RS
+.IP \(bu
+If the corresponding NAT rule cannot be handled in a distributed manner, then a priority\-92 flow is programmed on the gateway port instance on the gateway chassis\[char46] A priority\-91 drop flow is programmed on the other chassis when ARP requests/NS packets are received on the gateway port\[char46] This behavior avoids generation of multiple ARP responses from different chassis, and allows upstream MAC learning to point to the gateway chassis\[char46]
+.IP \(bu
+If the corresponding NAT rule can be handled in a distributed manner, then this flow is only programmed on the gateway port instance where the \fBlogical_port\fR specified in the NAT rule resides\[char46]
+.IP
+Some of the actions are different for this case, using the \fBexternal_mac\fR specified in the NAT rule rather than the gateway port\(cqs Ethernet address \fIE\fR:
+.IP
+.nf
+\fB
+.br
+\fBeth\[char46]src = \fR\fIexternal_mac\fB\fR;
+.br
+\fBarp\[char46]sha = \fR\fIexternal_mac\fB\fR;
+.br
+\fB            \fR
+.fi
+.IP
+or in the case of IPv6 neighbor solicition:
+.IP
+.nf
+\fB
+.br
+\fBeth\[char46]src = \fR\fIexternal_mac\fB\fR;
+.br
+\fBnd\[char46]tll = \fR\fIexternal_mac\fB\fR;
+.br
+\fB            \fR
+.fi
+.IP
+This behavior avoids generation of multiple ARP responses from different chassis, and allows upstream MAC learning to point to the correct chassis\[char46]
+.RE
+.IP \(bu
+Priority\-85 flows which drops the ARP and IPv6 Neighbor Discovery packets\[char46]
+.IP \(bu
+A priority\-84 flow explicitly allows IPv6 multicast traffic that is supposed to reach the router pipeline (i\[char46]e\[char46], router solicitation and router advertisement packets)\[char46]
+.IP \(bu
+A priority\-83 flow explicitly drops IPv6 multicast traffic that is destined to reserved multicast groups\[char46]
+.IP \(bu
+A priority\-82 flow allows IP multicast traffic if \fBoptions\fR:mcast_relay=\(cqtrue\(cq, otherwise drops it\[char46]
+.IP \(bu
+UDP port unreachable\[char46] Priority\-80 flows generate ICMP port unreachable messages in reply to UDP datagrams directed to the router\(cqs IP address, except in the special case of gateways, which accept traffic directed to a router IP for load balancing and NAT purposes\[char46]
+.IP
+These flows should not match IP fragments with nonzero offset\[char46]
+.IP \(bu
+TCP reset\[char46] Priority\-80 flows generate TCP reset messages in reply to TCP datagrams directed to the router\(cqs IP address, except in the special case of gateways, which accept traffic directed to a router IP for load balancing and NAT purposes\[char46]
+.IP
+These flows should not match IP fragments with nonzero offset\[char46]
+.IP \(bu
+Protocol or address unreachable\[char46] Priority\-70 flows generate ICMP protocol or address unreachable messages for IPv4 and IPv6 respectively in reply to packets directed to the router\(cqs IP address on IP protocols other than UDP, TCP, and ICMP, except in the special case of gateways, which accept traffic directed to a router IP for load balancing purposes\[char46]
+.IP
+These flows should not match IP fragments with nonzero offset\[char46]
+.IP \(bu
+Drop other IP traffic to this router\[char46] These flows drop any other traffic destined to an IP address of this router that is not already handled by one of the flows above, which amounts to ICMP (other than echo requests) and fragments with nonzero offsets\[char46] For each IP address \fIA\fR owned by the router, a priority\-60 flow matches \fBip4\[char46]dst == \fIA\fB\fR or \fBip6\[char46]dst == \fIA\fB\fR and drops the traffic\[char46] An exception is made and the above flow is not added if the router port\(cqs own IP address is used to SNAT packets passing through that router or if it is used as a load balancer VIP\[char46]
+.RE
+.PP
+.PP
+The flows above handle all of the traffic that might be directed to the router itself\[char46] The following flows (with lower priorities) handle the remaining traffic, potentially for forwarding:
+.RS
+.IP \(bu
+Drop Ethernet local broadcast\[char46] A priority\-50 flow with match \fBeth\[char46]bcast\fR drops traffic destined to the local Ethernet broadcast address\[char46] By definition this traffic should not be forwarded\[char46]
+.IP \(bu
+Avoid ICMP time exceeded for multicast\[char46] A priority\-32 flow with match \fBip\[char46]ttl == {0, 1} && !ip\[char46]later_frag &&
+(ip4\[char46]mcast || ip6\[char46]mcast)\fR and actions \fBdrop;\fR drops multicast packets whose TTL has expired without sending ICMP time exceeded\[char46]
+.IP \(bu
+ICMP time exceeded\[char46] For each router port \fIP\fR, whose IP address is \fIA\fR, a priority\-31 flow with match \fBinport
+== \fIP\fB && ip\[char46]ttl == {0, 1} &&
+!ip\[char46]later_frag\fR matches packets whose TTL has expired, with the following actions to send an ICMP time exceeded reply for IPv4 and IPv6 respectively:
+.IP
+.nf
+\fB
+.br
+\fBicmp4 {
+.br
+\fB    icmp4\[char46]type = 11; /* Time exceeded\[char46] */
+.br
+\fB    icmp4\[char46]code = 0;  /* TTL exceeded in transit\[char46] */
+.br
+\fB    ip4\[char46]dst = ip4\[char46]src;
+.br
+\fB    ip4\[char46]src = \fR\fIA\fB\fR;
+.br
+\fB    ip\[char46]ttl = 254;
+.br
+\fB    next;
+.br
+\fB};
+.br
+\fB
+.br
+\fBicmp6 {
+.br
+\fB    icmp6\[char46]type = 3; /* Time exceeded\[char46] */
+.br
+\fB    icmp6\[char46]code = 0;  /* TTL exceeded in transit\[char46] */
+.br
+\fB    ip6\[char46]dst = ip6\[char46]src;
+.br
+\fB    ip6\[char46]src = \fR\fIA\fB\fR;
+.br
+\fB    ip\[char46]ttl = 254;
+.br
+\fB    next;
+.br
+\fB};
+.br
+\fB        \fR
+.fi
+.IP \(bu
+TTL discard\[char46] A priority\-30 flow with match \fBip\[char46]ttl == {0,
+1}\fR and actions \fBdrop;\fR drops other packets whose TTL has expired, that should not receive a ICMP error reply (i\[char46]e\[char46] fragments with nonzero offset)\[char46]
+.IP \(bu
+Next table\[char46] A priority\-0 flows match all packets that aren\(cqt already handled and uses actions \fBnext;\fR to feed them to the next table\[char46]
+.RE
+.ST "Ingress Table 4: UNSNAT"
+.PP
+.PP
+This is for already established connections\(cq reverse traffic\[char46] i\[char46]e\[char46], SNAT has already been done in egress pipeline and now the packet has entered the ingress pipeline as part of a reply\[char46] It is unSNATted here\[char46]
+.PP
+.PP
+Ingress Table 4: UNSNAT on Gateway and Distributed Routers
+.RS
+.IP \(bu
+If the Router (Gateway or Distributed) is configured with load balancers, then below lflows are added:
+.IP
+For each IPv4 address \fIA\fR defined as load balancer VIP with the protocol \fIP\fR (and the protocol port \fIT\fR if defined) is also present as an \fBexternal_ip\fR in the NAT table, a priority\-120 logical flow is added with the match \fBip4 && ip4\[char46]dst == \fIA\fB &&
+\fIP\fB\fR with the action \fBnext;\fR to advance the packet to the next table\[char46] If the load balancer has protocol port \fBB\fR defined, then the match also has \fB\fIP\fB\[char46]dst == \fIB\fB\fR\[char46]
+.IP
+The above flows are also added for IPv6 load balancers\[char46]
+.RE
+.PP
+.PP
+Ingress Table 4: UNSNAT on Gateway Routers
+.RS
+.IP \(bu
+If the Gateway router has been configured to force SNAT any previously DNATted packets to \fIB\fR, a priority\-110 flow matches \fBip && ip4\[char46]dst == \fIB\fB\fR or \fBip && ip6\[char46]dst == \fIB\fB\fR with an action \fBct_snat; \fR\[char46]
+.IP
+If the Gateway router is configured with \fBlb_force_snat_ip=router_ip\fR then for every logical router port \fIP\fR attached to the Gateway router with the router ip \fIB\fR, a priority\-110 flow is added with the match \fBinport == \fIP\fB &&
+ip4\[char46]dst == \fIB\fB\fR or \fBinport == \fIP\fB
+&& ip6\[char46]dst == \fIB\fB\fR with an action \fBct_snat; \fR\[char46]
+.IP
+If the Gateway router has been configured to force SNAT any previously load-balanced packets to \fIB\fR, a priority\-100 flow matches \fBip && ip4\[char46]dst == \fIB\fB\fR or \fBip && ip6\[char46]dst == \fIB\fB\fR with an action \fBct_snat; \fR\[char46]
+.IP
+For each NAT configuration in the OVN Northbound database, that asks to change the source IP address of a packet from \fIA\fR to \fIB\fR, a priority\-90 flow matches \fBip && ip4\[char46]dst == \fIB\fB\fR or \fBip && ip6\[char46]dst == \fIB\fB\fR with an action \fBct_snat; \fR\[char46] If the NAT rule is of type dnat_and_snat and has \fBstateless=true\fR in the options, then the action would be \fBnext;\fR\[char46]
+.IP
+A priority\-0 logical flow with match \fB1\fR has actions \fBnext;\fR\[char46]
+.RE
+.PP
+.PP
+Ingress Table 4: UNSNAT on Distributed Routers
+.RS
+.IP \(bu
+For each configuration in the OVN Northbound database, that asks to change the source IP address of a packet from \fIA\fR to \fIB\fR, two priority\-100 flows are added\[char46]
+.IP
+If the NAT rule cannot be handled in a distributed manner, then the below priority\-100 flows are only programmed on the gateway chassis\[char46]
+.RS
+.IP \(bu
+The first flow matches \fBip &&
+ip4\[char46]dst == \fIB\fB && inport == \fIGW\fB
+\fR or \fBip && ip6\[char46]dst == \fIB\fB &&
+inport == \fIGW\fB\fR where \fIGW\fR is the distributed gateway port corresponding to the NAT rule (specified or inferred), with an action \fBct_snat;\fR to unSNAT in the common zone\[char46] If the NAT rule is of type dnat_and_snat and has \fBstateless=true\fR in the options, then the action would be \fBnext;\fR\[char46]
+.IP
+If the NAT entry is of type \fBsnat\fR, then there is an additional match \fBis_chassis_resident(\fIcr-GW\fB)
+\fR where \fIcr-GW\fR is the chassis resident port of \fIGW\fR\[char46]
+.RE
+.IP
+A priority\-0 logical flow with match \fB1\fR has actions \fBnext;\fR\[char46]
+.RE
+.ST "Ingress Table 5: DEFRAG"
+.PP
+.PP
+This is to send packets to connection tracker for tracking and defragmentation\[char46] It contains a priority\-0 flow that simply moves traffic to the next table\[char46]
+.PP
+.PP
+For all load balancing rules that are configured in \fBOVN_Northbound\fR database for a Gateway router, a priority\-100 flow is added for each configured virtual IP address \fIVIP\fR\[char46] For IPv4 \fIVIPs\fR the flow matches \fBip && ip4\[char46]dst == \fIVIP\fB\fR\[char46] For IPv6 \fIVIPs\fR, the flow matches \fBip && ip6\[char46]dst ==
+\fIVIP\fB\fR\[char46] The flow applies the action \fB ct_dnat;\fR to send IP packets to the connection tracker for packet de-fragmentation and to dnat the destination IP for the committed connection before sending it to the next table\[char46]
+.PP
+.PP
+If ECMP routes with symmetric reply are configured in the \fBOVN_Northbound\fR database for a gateway router, a priority\-100 flow is added for each router port on which symmetric replies are configured\[char46] The matching logic for these ports essentially reverses the configured logic of the ECMP route\[char46] So for instance, a route with a destination routing policy will instead match if the source IP address matches the static route\(cqs prefix\[char46] The flow uses the actions \fBchk_ecmp_nh_mac(); ct_next\fR or \fBchk_ecmp_nh(); ct_next\fR to send IP packets to table \fB76\fR or to table \fB77\fR in order to check if source info are already stored by OVN and then to the connection tracker for packet de-fragmentation and tracking before sending it to the next table\[char46]
+.PP
+.PP
+If load balancing rules are configured in \fBOVN_Northbound\fR database for a Gateway router, a priority 50 flow that matches \fBicmp || icmp6\fR with an action of \fBct_dnat;\fR, this allows potentially related ICMP traffic to pass through CT\[char46]
+.ST "Ingress Table 6: Load balancing affinity check"
+.PP
+.PP
+Load balancing affinity check table contains the following logical flows:
+.RS
+.IP \(bu
+For all the configured load balancing rules for a logical router where a positive affinity timeout is specified in \fBoptions\fR column, that includes a L4 port \fIPORT\fR of protocol \fIP\fR and IPv4 or IPv6 address \fIVIP\fR, a priority\-100 flow that matches on \fBct\[char46]new && ip &&
+ip\[char46]dst == \fIVIP\fB && \fIP\fB && P\[char46]dst
+== \fR \fB\fIPORT\fB\fR (\fBxxreg0 == \fIVIP
+\fB\fR in the IPv6 case) with an action of \fBreg0 = ip\[char46]dst;
+reg9[16\[char46]\[char46]31] = P\[char46]dst; reg9[6] = chk_lb_aff(); next;\fR (\fBxxreg0 == \fIip6\[char46]dst\fB \fR in the IPv6 case)
+.IP \(bu
+A priority 0 flow is added which matches on all packets and applies the action \fBnext;\fR\[char46]
+.RE
+.ST "Ingress Table 7: DNAT"
+.PP
+.PP
+Packets enter the pipeline with destination IP address that needs to be DNATted from a virtual IP address to a real IP address\[char46] Packets in the reverse direction needs to be unDNATed\[char46]
+.PP
+.PP
+Ingress Table 7: Load balancing DNAT rules
+.PP
+.PP
+Following load balancing DNAT flows are added for Gateway router or Router with gateway port\[char46] These flows are programmed only on the gateway chassis\[char46] These flows do not get programmed for load balancers with IPv6 \fIVIPs\fR\[char46]
+.RS
+.IP \(bu
+For all the configured load balancing rules for a logical router where a positive affinity timeout is specified in \fBoptions\fR column, that includes a L4 port \fIPORT\fR of protocol \fIP\fR and IPv4 or IPv6 address \fIVIP\fR, a priority\-150 flow that matches on \fBreg9[6] == 1 && ct\[char46]new &&
+ip && ip\[char46]dst == \fIVIP\fB && \fIP\fB &&
+P\[char46]dst == \fR \fB\fIPORT\fB\fR with an action of \fBct_lb_mark(\fIargs\fB) \fR, where \fIargs\fR contains comma separated IP addresses (and optional port numbers) to load balance to\[char46] The address family of the IP addresses of \fIargs\fR is the same as the address family of \fIVIP\fR\[char46]
+.IP \(bu
+If controller_event has been enabled for all the configured load balancing rules for a Gateway router or Router with gateway port in \fBOVN_Northbound\fR database that does not have configured backends, a priority\-130 flow is added to trigger ovn-controller events whenever the chassis receives a packet for that particular VIP\[char46] If \fBevent\-elb\fR meter has been previously created, it will be associated to the empty_lb logical flow
+.IP \(bu
+For all the configured load balancing rules for a Gateway router or Router with gateway port in \fBOVN_Northbound\fR database that includes a L4 port \fIPORT\fR of protocol \fIP\fR and IPv4 or IPv6 address \fIVIP\fR, a priority\-120 flow that matches on \fBct\[char46]new && !ct\[char46]rel && ip && ip\[char46]dst ==
+\fIVIP\fB && \fIP\fB && P\[char46]dst ==
+\fR \fB\fIPORT\fB\fR with an action of \fBct_lb_mark(\fIargs\fB)\fR, where \fIargs\fR contains comma separated IPv4 or IPv6 addresses (and optional port numbers) to load balance to\[char46] If the router is configured to force SNAT any load-balanced packets, the above action will be replaced by \fBflags\[char46]force_snat_for_lb = 1; ct_lb_mark(\fIargs\fB;
+force_snat);\fR\[char46] If the load balancing rule is configured with \fBskip_snat\fR set to true, the above action will be replaced by \fBflags\[char46]skip_snat_for_lb = 1; ct_lb_mark(\fIargs\fB;
+skip_snat);\fR\[char46] If health check is enabled, then \fIargs\fR will only contain those endpoints whose service monitor status entry in \fBOVN_Southbound\fR db is either \fBonline\fR or empty\[char46]
+.IP \(bu
+For all the configured load balancing rules for a router in \fBOVN_Northbound\fR database that includes just an IP address \fIVIP\fR to match on, a priority\-110 flow that matches on \fBct\[char46]new && !ct\[char46]rel && ip4 && ip\[char46]dst ==
+\fIVIP\fB\fR with an action of \fBct_lb_mark(\fIargs\fB)\fR, where \fIargs\fR contains comma separated IPv4 or IPv6 addresses\[char46] If the router is configured to force SNAT any load-balanced packets, the above action will be replaced by \fBflags\[char46]force_snat_for_lb = 1;
+ct_lb_mark(\fIargs\fB; force_snat);\fR\[char46] If the load balancing rule is configured with \fBskip_snat\fR set to true, the above action will be replaced by \fBflags\[char46]skip_snat_for_lb = 1; ct_lb_mark(\fIargs\fB;
+skip_snat);\fR\[char46]
+.IP
+The previous table \fBlr_in_defrag\fR sets the register \fBreg0\fR (or \fBxxreg0\fR for IPv6) and does \fBct_dnat\fR\[char46] Hence for established traffic, this table just advances the packet to the next stage\[char46]
+.IP \(bu
+If the load balancer is created with \fB\-\-reject\fR option and it has no active backends, a TCP reset segment (for tcp) or an ICMP port unreachable packet (for all other kind of traffic) will be sent whenever an incoming packet is received for this load-balancer\[char46] Please note using \fB\-\-reject\fR option will disable empty_lb SB controller event for this load balancer\[char46]
+.IP \(bu
+For the related traffic, a priority 50 flow that matches \fBct\[char46]rel && !ct\[char46]est && !ct\[char46]new \fR with an action of \fBct_commit_nat;\fR, if the router has load balancer assigned to it\[char46] Along with two priority 70 flows that match \fBskip_snat\fR and \fBforce_snat\fR flags, setting the \fBflags\[char46]force_snat_for_lb = 1\fR or \fBflags\[char46]skip_snat_for_lb = 1\fR accordingly\[char46]
+.IP \(bu
+For the established traffic, a priority 50 flow that matches \fBct\[char46]est && !ct\[char46]rel && !ct\[char46]new &&
+ct_mark\[char46]natted\fR with an action of \fBnext;\fR, if the router has load balancer assigned to it\[char46] Along with two priority 70 flows that match \fBskip_snat\fR and \fBforce_snat\fR flags, setting the \fBflags\[char46]force_snat_for_lb = 1\fR or \fBflags\[char46]skip_snat_for_lb = 1\fR accordingly\[char46]
+.RE
+.PP
+.PP
+Ingress Table 7: DNAT on Gateway Routers
+.RS
+.IP \(bu
+For each configuration in the OVN Northbound database, that asks to change the destination IP address of a packet from \fIA\fR to \fIB\fR, a priority\-100 flow matches \fBip &&
+ip4\[char46]dst == \fIA\fB\fR or \fBip &&
+ip6\[char46]dst == \fIA\fB\fR with an action \fBflags\[char46]loopback = 1; ct_dnat(\fIB\fB);\fR\[char46] If the Gateway router is configured to force SNAT any DNATed packet, the above action will be replaced by \fBflags\[char46]force_snat_for_dnat = 1; flags\[char46]loopback = 1;
+ct_dnat(\fIB\fB);\fR\[char46] If the NAT rule is of type dnat_and_snat and has \fBstateless=true\fR in the options, then the action would be \fBip4/6\[char46]dst=
+(\fIB\fB)\fR\[char46]
+.IP
+If the NAT rule has \fBallowed_ext_ips\fR configured, then there is an additional match \fBip4\[char46]src == \fIallowed_ext_ips
+\fB\fR\[char46] Similarly, for IPV6, match would be \fBip6\[char46]src ==
+\fIallowed_ext_ips\fB\fR\[char46]
+.IP
+If the NAT rule has \fBexempted_ext_ips\fR set, then there is an additional flow configured at priority 101\[char46] The flow matches if source ip is an \fBexempted_ext_ip\fR and the action is \fBnext; \fR\[char46] This flow is used to bypass the ct_dnat action for a packet originating from \fBexempted_ext_ips\fR\[char46]
+.IP \(bu
+A priority\-0 logical flow with match \fB1\fR has actions \fBnext;\fR\[char46]
+.RE
+.PP
+.PP
+Ingress Table 7: DNAT on Distributed Routers
+.PP
+.PP
+On distributed routers, the DNAT table only handles packets with destination IP address that needs to be DNATted from a virtual IP address to a real IP address\[char46] The unDNAT processing in the reverse direction is handled in a separate table in the egress pipeline\[char46]
+.RS
+.IP \(bu
+For each configuration in the OVN Northbound database, that asks to change the destination IP address of a packet from \fIA\fR to \fIB\fR, a priority\-100 flow matches \fBip &&
+ip4\[char46]dst == \fIB\fB && inport == \fIGW\fB\fR, where \fIGW\fR is the logical router gateway port corresponding to the NAT rule (specified or inferred), with an action \fBct_dnat(\fIB\fB);\fR\[char46] The match will include \fBip6\[char46]dst == \fIB\fB\fR in the IPv6 case\[char46] If the NAT rule is of type dnat_and_snat and has \fBstateless=true\fR in the options, then the action would be \fBip4/6\[char46]dst=(\fIB\fB)\fR\[char46]
+.IP
+If the NAT rule cannot be handled in a distributed manner, then the priority\-100 flow above is only programmed on the gateway chassis\[char46]
+.IP
+If the NAT rule has \fBallowed_ext_ips\fR configured, then there is an additional match \fBip4\[char46]src == \fIallowed_ext_ips
+\fB\fR\[char46] Similarly, for IPV6, match would be \fBip6\[char46]src ==
+\fIallowed_ext_ips\fB\fR\[char46]
+.IP
+If the NAT rule has \fBexempted_ext_ips\fR set, then there is an additional flow configured at priority 101\[char46] The flow matches if source ip is an \fBexempted_ext_ip\fR and the action is \fBnext; \fR\[char46] This flow is used to bypass the ct_dnat action for a packet originating from \fBexempted_ext_ips\fR\[char46]
+.IP
+A priority\-0 logical flow with match \fB1\fR has actions \fBnext;\fR\[char46]
+.RE
+.ST "Ingress Table 8: Load balancing affinity learn"
+.PP
+.PP
+Load balancing affinity learn table contains the following logical flows:
+.RS
+.IP \(bu
+For all the configured load balancing rules for a logical router where a positive affinity timeout \fIT\fR is specified in \fBoptions
+\fR column, that includes a L4 port \fIPORT\fR of protocol \fIP\fR and IPv4 or IPv6 address \fIVIP\fR, a priority\-100 flow that matches on \fBreg9[6] == 0 && ct\[char46]new &&
+ip && reg0 == \fIVIP\fB && \fIP\fB &&
+reg9[16\[char46]\[char46]31] == \fR \fB\fIPORT\fB\fR (\fBxxreg0 ==
+\fIVIP\fB \fR in the IPv6 case) with an action of \fBcommit_lb_aff(vip = \fIVIP\fB:\fIPORT\fB, backend =
+\fIbackend ip\fB: \fIbackend port\fB, proto = \fIP\fB,
+timeout = \fIT\fB);\fR\[char46]
+.IP \(bu
+A priority 0 flow is added which matches on all packets and applies the action \fBnext;\fR\[char46]
+.RE
+.ST "Ingress Table 9: ECMP symmetric reply processing"
+.RS
+.IP \(bu
+If ECMP routes with symmetric reply are configured in the \fBOVN_Northbound\fR database for a gateway router, a priority\-100 flow is added for each router port on which symmetric replies are configured\[char46] The matching logic for these ports essentially reverses the configured logic of the ECMP route\[char46] So for instance, a route with a destination routing policy will instead match if the source IP address matches the static route\(cqs prefix\[char46] The flow uses the action \fBct_commit { ct_label\[char46]ecmp_reply_eth = eth\[char46]src;\(dq
+\(dq ct_mark\[char46]ecmp_reply_port = \fIK\fB;}; commit_ecmp_nh(); next;
+\fR to commit the connection and storing \fBeth\[char46]src\fR and the ECMP reply port binding tunnel key \fIK\fR in the \fBct_label\fR and the traffic pattern to table \fB76\fR or \fB77\fR\[char46]
+.RE
+.ST "Ingress Table 10: IPv6 ND RA option processing"
+.RS
+.IP \(bu
+A priority\-50 logical flow is added for each logical router port configured with IPv6 ND RA options which matches IPv6 ND Router Solicitation packet and applies the action \fBput_nd_ra_opts\fR and advances the packet to the next table\[char46]
+.IP
+.nf
+\fB
+.br
+\fBreg0[5] = put_nd_ra_opts(\fR\fIoptions\fB\fR);next;
+.br
+\fB        \fR
+.fi
+.IP
+For a valid IPv6 ND RS packet, this transforms the packet into an IPv6 ND RA reply and sets the RA options to the packet and stores 1 into reg0[5]\[char46] For other kinds of packets, it just stores 0 into reg0[5]\[char46] Either way, it continues to the next table\[char46]
+.IP \(bu
+A priority\-0 logical flow with match \fB1\fR has actions \fBnext;\fR\[char46]
+.RE
+.ST "Ingress Table 11: IPv6 ND RA responder"
+.PP
+.PP
+This table implements IPv6 ND RA responder for the IPv6 ND RA replies generated by the previous table\[char46]
+.RS
+.IP \(bu
+A priority\-50 logical flow is added for each logical router port configured with IPv6 ND RA options which matches IPv6 ND RA packets and \fBreg0[5] == 1\fR and responds back to the \fBinport\fR after applying these actions\[char46] If \fBreg0[5]\fR is set to 1, it means that the action \fBput_nd_ra_opts\fR was successful\[char46]
+.IP
+.nf
+\fB
+.br
+\fBeth\[char46]dst = eth\[char46]src;
+.br
+\fBeth\[char46]src = \fR\fIE\fB\fR;
+.br
+\fBip6\[char46]dst = ip6\[char46]src;
+.br
+\fBip6\[char46]src = \fR\fII\fB\fR;
+.br
+\fBoutport = \fR\fIP\fB\fR;
+.br
+\fBflags\[char46]loopback = 1;
+.br
+\fBoutput;
+.br
+\fB        \fR
+.fi
+.IP
+where \fIE\fR is the MAC address and \fII\fR is the IPv6 link local address of the logical router port\[char46]
+.IP
+(This terminates packet processing in ingress pipeline; the packet does not go to the next ingress table\[char46])
+.IP \(bu
+A priority\-0 logical flow with match \fB1\fR has actions \fBnext;\fR\[char46]
+.RE
+.ST "Ingress Table 12: IP Routing Pre"
+.PP
+.PP
+If a packet arrived at this table from Logical Router Port \fIP\fR which has \fBoptions:route_table\fR value set, a logical flow with match \fBinport == \(dq\fIP\fB\(dq\fR with priority 100 and action setting unique-generated per-datapath 32-bit value (non-zero) in OVS register 7\[char46] This register\(cqs value is checked in next table\[char46] If packet didn\(cqt match any configured inport (\fI<main>\fR route table), register 7 value is set to 0\[char46]
+.PP
+.PP
+This table contains the following logical flows:
+.RS
+.IP \(bu
+Priority\-100 flow with match \fBinport == \(dqLRP_NAME\(dq\fR value and action, which set route table identifier in reg7\[char46]
+.IP
+A priority\-0 logical flow with match \fB1\fR has actions \fBreg7 = 0; next;\fR\[char46]
+.RE
+.ST "Ingress Table 13: IP Routing"
+.PP
+.PP
+A packet that arrives at this table is an IP packet that should be routed to the address in \fBip4\[char46]dst\fR or \fBip6\[char46]dst\fR\[char46] This table implements IP routing, setting \fBreg0\fR (or \fBxxreg0\fR for IPv6) to the next-hop IP address (leaving \fBip4\[char46]dst\fR or \fBip6\[char46]dst\fR, the packet\(cqs final destination, unchanged) and advances to the next table for ARP resolution\[char46] It also sets \fBreg1\fR (or \fBxxreg1\fR) to the IP address owned by the selected router port (ingress table \fBARP Request\fR will generate an ARP request, if needed, with \fBreg0\fR as the target protocol address and \fBreg1\fR as the source protocol address)\[char46]
+.PP
+.PP
+For ECMP routes, i\[char46]e\[char46] multiple static routes with same policy and prefix but different nexthops, the above actions are deferred to next table\[char46] This table, instead, is responsible for determine the ECMP group id and select a member id within the group based on 5-tuple hashing\[char46] It stores group id in \fBreg8[0\[char46]\[char46]15]\fR and member id in \fBreg8[16\[char46]\[char46]31]\fR\[char46] This step is skipped with a priority\-10300 rule if the traffic going out the ECMP route is reply traffic, and the ECMP route was configured to use symmetric replies\[char46] Instead, the stored values in conntrack is used to choose the destination\[char46] The \fBct_label\[char46]ecmp_reply_eth\fR tells the destination MAC address to which the packet should be sent\[char46] The \fBct_mark\[char46]ecmp_reply_port\fR tells the logical router port on which the packet should be sent\[char46] These values saved to the conntrack fields when the initial ingress traffic is received over the ECMP route and committed to conntrack\[char46] If \fBREGBIT_KNOWN_ECMP_NH\fR is set, the priority\-10300 flows in this stage set the \fBoutport\fR, while the \fBeth\[char46]dst\fR is set by flows at the ARP/ND Resolution stage\[char46]
+.PP
+.PP
+This table contains the following logical flows:
+.RS
+.IP \(bu
+Priority\-10550 flow that drops IPv6 Router Solicitation/Advertisement packets that were not processed in previous tables\[char46]
+.IP \(bu
+Priority\-10550 flows that drop IGMP and MLD packets with source MAC address owned by the router\[char46] These are used to prevent looping statically forwarded IGMP and MLD packets for which TTL is not decremented (it is always 1)\[char46]
+.IP \(bu
+Priority\-10500 flows that match IP multicast traffic destined to groups registered on any of the attached switches and sets \fBoutport\fR to the associated multicast group that will eventually flood the traffic to all interested attached logical switches\[char46] The flows also decrement TTL\[char46]
+.IP \(bu
+Priority\-10460 flows that match IGMP and MLD control packets, set \fBoutport\fR to the \fBMC_STATIC\fR multicast group, which \fBovn\-northd\fR populates with the logical ports that have \fBoptions\fR \fB:mcast_flood=\(cqtrue\(cq\fR\[char46] If no router ports are configured to flood multicast traffic the packets are dropped\[char46]
+.IP \(bu
+Priority\-10450 flow that matches unregistered IP multicast traffic decrements TTL and sets \fBoutport\fR to the \fBMC_STATIC\fR multicast group, which \fBovn\-northd\fR populates with the logical ports that have \fBoptions\fR \fB:mcast_flood=\(cqtrue\(cq\fR\[char46] If no router ports are configured to flood multicast traffic the packets are dropped\[char46]
+.IP \(bu
+IPv4 routing table\[char46] For each route to IPv4 network \fIN\fR with netmask \fIM\fR, on router port \fIP\fR with IP address \fIA\fR and Ethernet address \fIE\fR, a logical flow with match \fBip4\[char46]dst ==
+\fIN\fB/\fIM\fB\fR, whose priority is the number of 1-bits in \fIM\fR, has the following actions:
+.IP
+.nf
+\fB
+.br
+\fBip\[char46]ttl\-\-;
+.br
+\fBreg8[0\[char46]\[char46]15] = 0;
+.br
+\fBreg0 = \fR\fIG\fB\fR;
+.br
+\fBreg1 = \fR\fIA\fB\fR;
+.br
+\fBeth\[char46]src = \fR\fIE\fB\fR;
+.br
+\fBoutport = \fR\fIP\fB\fR;
+.br
+\fBflags\[char46]loopback = 1;
+.br
+\fBnext;
+.br
+\fB        \fR
+.fi
+.IP
+(Ingress table 1 already verified that \fBip\[char46]ttl\-\-;\fR will not yield a TTL exceeded error\[char46])
+.IP
+If the route has a gateway, \fIG\fR is the gateway IP address\[char46] Instead, if the route is from a configured static route, \fIG\fR is the next hop IP address\[char46] Else it is \fBip4\[char46]dst\fR\[char46]
+.IP \(bu
+IPv6 routing table\[char46] For each route to IPv6 network \fIN\fR with netmask \fIM\fR, on router port \fIP\fR with IP address \fIA\fR and Ethernet address \fIE\fR, a logical flow with match in CIDR notation \fBip6\[char46]dst == \fIN\fB/\fIM\fB\fR, whose priority is the integer value of \fIM\fR, has the following actions:
+.IP
+.nf
+\fB
+.br
+\fBip\[char46]ttl\-\-;
+.br
+\fBreg8[0\[char46]\[char46]15] = 0;
+.br
+\fBxxreg0 = \fR\fIG\fB\fR;
+.br
+\fBxxreg1 = \fR\fIA\fB\fR;
+.br
+\fBeth\[char46]src = \fR\fIE\fB\fR;
+.br
+\fBoutport = inport;
+.br
+\fBflags\[char46]loopback = 1;
+.br
+\fBnext;
+.br
+\fB        \fR
+.fi
+.IP
+(Ingress table 1 already verified that \fBip\[char46]ttl\-\-;\fR will not yield a TTL exceeded error\[char46])
+.IP
+If the route has a gateway, \fIG\fR is the gateway IP address\[char46] Instead, if the route is from a configured static route, \fIG\fR is the next hop IP address\[char46] Else it is \fBip6\[char46]dst\fR\[char46]
+.IP
+If the address \fIA\fR is in the link-local scope, the route will be limited to sending on the ingress port\[char46]
+.IP
+For each static route the \fBreg7 == id &&\fR is prefixed in logical flow match portion\[char46] For routes with \fBroute_table\fR value set a unique non-zero id is used\[char46] For routes within \fB<main>\fR route table (no route table set), this id value is 0\[char46]
+.IP
+For each \fIconnected\fR route (route to the LRP\(cqs subnet CIDR) the logical flow match portion has no \fBreg7 == id &&\fR prefix to have route to LRP\(cqs subnets in all routing tables\[char46]
+.IP \(bu
+For ECMP routes, they are grouped by policy and prefix\[char46] An unique id (non-zero) is assigned to each group, and each member is also assigned an unique id (non-zero) within each group\[char46]
+.IP
+For each IPv4/IPv6 ECMP group with group id \fIGID\fR and member ids \fIMID1\fR, \fIMID2\fR, \[char46]\[char46]\[char46], a logical flow with match in CIDR notation \fBip4\[char46]dst == \fIN\fB/\fIM\fB\fR, or \fBip6\[char46]dst == \fIN\fB/\fIM\fB\fR, whose priority is the integer value of \fIM\fR, has the following actions:
+.IP
+.nf
+\fB
+.br
+\fBip\[char46]ttl\-\-;
+.br
+\fBflags\[char46]loopback = 1;
+.br
+\fBreg8[0\[char46]\[char46]15] = \fR\fIGID\fB\fR;
+.br
+\fBselect(reg8[16\[char46]\[char46]31], \fR\fIMID1\fB\fR, \fR\fIMID2\fB\fR, \[char46]\[char46]\[char46]);
+.br
+\fB        \fR
+.fi
+.IP \(bu
+A priority\-0 logical flow that matches all packets not already handled (match \fB1\fR) and drops them (action \fBdrop;\fR)\[char46]
+.RE
+.ST "Ingress Table 14: IP_ROUTING_ECMP"
+.PP
+.PP
+This table implements the second part of IP routing for ECMP routes following the previous table\[char46] If a packet matched a ECMP group in the previous table, this table matches the group id and member id stored from the previous table, setting \fBreg0\fR (or \fBxxreg0\fR for IPv6) to the next-hop IP address (leaving \fBip4\[char46]dst\fR or \fBip6\[char46]dst\fR, the packet\(cqs final destination, unchanged) and advances to the next table for ARP resolution\[char46] It also sets \fBreg1\fR (or \fBxxreg1\fR) to the IP address owned by the selected router port (ingress table \fBARP Request\fR will generate an ARP request, if needed, with \fBreg0\fR as the target protocol address and \fBreg1\fR as the source protocol address)\[char46]
+.PP
+.PP
+This processing is skipped for reply traffic being sent out of an ECMP route if the route was configured to use symmetric replies\[char46]
+.PP
+.PP
+This table contains the following logical flows:
+.RS
+.IP \(bu
+A priority\-150 flow that matches \fBreg8[0\[char46]\[char46]15] == 0\fR with action \fBnext;\fR directly bypasses packets of non-ECMP routes\[char46]
+.IP \(bu
+For each member with ID \fIMID\fR in each ECMP group with ID \fIGID\fR, a priority\-100 flow with match \fBreg8[0\[char46]\[char46]15] == \fIGID\fB && reg8[16\[char46]\[char46]31] == \fIMID\fB\fR has following actions:
+.IP
+.nf
+\fB
+.br
+\fB[xx]reg0 = \fR\fIG\fB\fR;
+.br
+\fB[xx]reg1 = \fR\fIA\fB\fR;
+.br
+\fBeth\[char46]src = \fR\fIE\fB\fR;
+.br
+\fBoutport = \fR\fIP\fB\fR;
+.br
+\fB        \fR
+.fi
+.IP \(bu
+A priority\-0 logical flow that matches all packets not already handled (match \fB1\fR) and drops them (action \fBdrop;\fR)\[char46]
+.RE
+.ST "Ingress Table 15: Router policies"
+.PP
+.PP
+This table adds flows for the logical router policies configured on the logical router\[char46] Please see the \fBOVN_Northbound\fR database \fBLogical_Router_Policy\fR table documentation in \fBovn\-nb\fR for supported actions\[char46]
+.RS
+.IP \(bu
+For each router policy configured on the logical router, a logical flow is added with specified priority, match and actions\[char46]
+.IP \(bu
+If the policy action is \fBreroute\fR with 2 or more nexthops defined, then the logical flow is added with the following actions:
+.IP
+.nf
+\fB
+.br
+\fBreg8[0\[char46]\[char46]15] = \fR\fIGID\fB\fR;
+.br
+\fBreg8[16\[char46]\[char46]31] = select(1,\[char46]\[char46]n);
+.br
+\fB        \fR
+.fi
+.IP
+where \fIGID\fR is the ECMP group id generated by \fBovn\-northd\fR for this policy and \fIn\fR is the number of nexthops\[char46] \fBselect\fR action selects one of the nexthop member id, stores it in the register \fBreg8[16\[char46]\[char46]31]\fR and advances the packet to the next stage\[char46]
+.IP \(bu
+If the policy action is \fBreroute\fR with just one nexhop, then the logical flow is added with the following actions:
+.IP
+.nf
+\fB
+.br
+\fB[xx]reg0 = \fR\fIH\fB\fR;
+.br
+\fBeth\[char46]src = \fR\fIE\fB\fR;
+.br
+\fBoutport = \fR\fIP\fB\fR;
+.br
+\fBreg8[0\[char46]\[char46]15] = 0;
+.br
+\fBflags\[char46]loopback = 1;
+.br
+\fBnext;
+.br
+\fB        \fR
+.fi
+.IP
+where \fIH\fR is the \fBnexthop \fR defined in the router policy, \fIE\fR is the ethernet address of the logical router port from which the \fBnexthop\fR is reachable and \fIP\fR is the logical router port from which the \fBnexthop\fR is reachable\[char46]
+.IP \(bu
+If a router policy has the option \fBpkt_mark=\fIm\fB\fR set and if the action is \fBnot\fR drop, then the action also includes \fBpkt\[char46]mark = \fIm\fB\fR to mark the packet with the marker \fIm\fR\[char46]
+.RE
+.ST "Ingress Table 16: ECMP handling for router policies"
+.PP
+.PP
+This table handles the ECMP for the router policies configured with multiple nexthops\[char46]
+.RS
+.IP \(bu
+A priority\-150 flow is added to advance the packet to the next stage if the ECMP group id register \fBreg8[0\[char46]\[char46]15]\fR is 0\[char46]
+.IP \(bu
+For each ECMP reroute router policy with multiple nexthops, a priority\-100 flow is added for each nexthop \fIH\fR with the match \fBreg8[0\[char46]\[char46]15] == \fIGID\fB &&
+reg8[16\[char46]\[char46]31] == \fIM\fB\fR where \fIGID\fR is the router policy group id generated by \fBovn\-northd\fR and \fIM\fR is the member id of the nexthop \fIH\fR generated by \fBovn\-northd\fR\[char46] The following actions are added to the flow:
+.IP
+.nf
+\fB
+.br
+\fB[xx]reg0 = \fR\fIH\fB\fR;
+.br
+\fBeth\[char46]src = \fR\fIE\fB\fR;
+.br
+\fBoutport = \fR\fIP\fB\fR
+.br
+\fB\(dqflags\[char46]loopback = 1; \(dq
+.br
+\fB\(dqnext;\(dq
+.br
+\fB        \fR
+.fi
+.IP
+where \fIH\fR is the \fBnexthop \fR defined in the router policy, \fIE\fR is the ethernet address of the logical router port from which the \fBnexthop\fR is reachable and \fIP\fR is the logical router port from which the \fBnexthop\fR is reachable\[char46]
+.IP \(bu
+A priority\-0 logical flow that matches all packets not already handled (match \fB1\fR) and drops them (action \fBdrop;\fR)\[char46]
+.RE
+.ST "Ingress Table 17: ARP/ND Resolution"
+.PP
+.PP
+Any packet that reaches this table is an IP packet whose next-hop IPv4 address is in \fBreg0\fR or IPv6 address is in \fBxxreg0\fR\[char46] (\fBip4\[char46]dst\fR or \fBip6\[char46]dst\fR contains the final destination\[char46]) This table resolves the IP address in \fBreg0\fR (or \fBxxreg0\fR) into an output port in \fBoutport\fR and an Ethernet address in \fBeth\[char46]dst\fR, using the following flows:
+.RS
+.IP \(bu
+A priority\-500 flow that matches IP multicast traffic that was allowed in the routing pipeline\[char46] For this kind of traffic the \fBoutport\fR was already set so the flow just advances to the next table\[char46]
+.IP \(bu
+Priority\-200 flows that match ECMP reply traffic for the routes configured to use symmetric replies, with actions \fBpush(xxreg1); xxreg1 = ct_label; eth\[char46]dst = xxreg1[32\[char46]\[char46]79]; pop(xxreg1); next;\fR\[char46] \fBxxreg1\fR is used here to avoid masked access to ct_label, to make the flow HW-offloading friendly\[char46]
+.IP \(bu
+Static MAC bindings\[char46] MAC bindings can be known statically based on data in the \fBOVN_Northbound\fR database\[char46] For router ports connected to logical switches, MAC bindings can be known statically from the \fBaddresses\fR column in the \fBLogical_Switch_Port\fR table\[char46] (Note: the flow is not installed for IPs of logical switch ports of type \fBvirtual\fR, and dynamic MAC binding is used for those IPs instead, so that virtual parent failover does not depend on \fB
+ovn\-northd\fR, to achieve better failover performance\[char46]) For router ports connected to other logical routers, MAC bindings can be known statically from the \fBmac\fR and \fBnetworks\fR column in the \fBLogical_Router_Port\fR table\[char46] (Note: the flow is NOT installed for the IP addresses that belong to a neighbor logical router port if the current router has the \fBoptions:dynamic_neigh_routers\fR set to \fBtrue\fR)
+.IP
+For each IPv4 address \fIA\fR whose host is known to have Ethernet address \fIE\fR on router port \fIP\fR, a priority\-100 flow with match \fBoutport === \fIP\fB
+&& reg0 == \fIA\fB\fR has actions \fBeth\[char46]dst = \fIE\fB; next;\fR\[char46]
+.IP
+For each IPv6 address \fIA\fR whose host is known to have Ethernet address \fIE\fR on router port \fIP\fR, a priority\-100 flow with match \fBoutport === \fIP\fB
+&& xxreg0 == \fIA\fB\fR has actions \fBeth\[char46]dst = \fIE\fB; next;\fR\[char46]
+.IP
+For each logical router port with an IPv4 address \fIA\fR and a mac address of \fIE\fR that is reachable via a different logical router port \fIP\fR, a priority\-100 flow with match \fBoutport === \fIP\fB && reg0 ==
+\fIA\fB\fR has actions \fBeth\[char46]dst = \fIE\fB;
+next;\fR\[char46]
+.IP
+For each logical router port with an IPv6 address \fIA\fR and a mac address of \fIE\fR that is reachable via a different logical router port \fIP\fR, a priority\-100 flow with match \fBoutport === \fIP\fB && xxreg0 ==
+\fIA\fB\fR has actions \fBeth\[char46]dst = \fIE\fB;
+next;\fR\[char46]
+.IP \(bu
+Static MAC bindings from NAT entries\[char46] MAC bindings can also be known for the entries in the \fBNAT\fR table\[char46] Below flows are programmed for distributed logical routers i\[char46]e with a distributed router port\[char46]
+.IP
+For each row in the \fBNAT\fR table with IPv4 address \fIA\fR in the \fBexternal_ip\fR column of \fBNAT\fR table, below two flows are programmed:
+.IP
+A priority\-100 flow with the match \fBoutport == \fIP\fB
+&& reg0 == \fIA\fB\fR has actions \fBeth\[char46]dst =
+\fIE\fB; next;\fR, where \fBP\fR is the distributed logical router port, \fIE\fR is the Ethernet address if set in the \fBexternal_mac\fR column of \fBNAT\fR table for of type \fBdnat_and_snat\fR, otherwise the Ethernet address of the distributed logical router port\[char46] Note that if the \fBexternal_ip\fR is not within a subnet on the owning logical router, then OVN will only create ARP resolution flows if the \fBoptions:add_route\fR is set to \fBtrue\fR\[char46] Otherwise, no ARP resolution flows will be added\[char46]
+.IP
+Corresponding to the above flow, a priority\-150 flow with the match \fBinport == \fIP\fB && outport == \fIP\fB
+&& ip4\[char46]dst == \fIA\fB\fR has actions \fBdrop;\fR to exclude packets that have gone through DNAT/unSNAT stage but failed to convert the destination, to avoid loop\[char46]
+.IP
+For IPv6 NAT entries, same flows are added, but using the register \fBxxreg0\fR and field \fBip6\fR for the match\[char46]
+.IP \(bu
+If the router datapath runs a port with \fBredirect\-type\fR set to \fBbridged\fR, for each distributed NAT rule with IP \fIA\fR in the \fBlogical_ip\fR column and logical port \fIP\fR in the \fBlogical_port\fR column of \fBNAT\fR table, a priority\-90 flow with the match \fBoutport == \fIQ\fB && ip\[char46]src ===
+\fIA\fB && is_chassis_resident(\fIP\fB)\fR, where \fBQ\fR is the distributed logical router port and action \fBget_arp(outport, reg0); next;\fR for IPv4 and \fBget_nd(outport, xxreg0); next;\fR for IPv6\[char46]
+.IP \(bu
+Traffic with IP destination an address owned by the router should be dropped\[char46] Such traffic is normally dropped in ingress table \fBIP Input\fR except for IPs that are also shared with SNAT rules\[char46] However, if there was no unSNAT operation that happened successfully until this point in the pipeline and the destination IP of the packet is still a router owned IP, the packets can be safely dropped\[char46]
+.IP
+A priority\-2 logical flow with match \fBip4\[char46]dst = {\[char46]\[char46]}\fR matches on traffic destined to router owned IPv4 addresses which are also SNAT IPs\[char46] This flow has action \fBdrop;\fR\[char46]
+.IP
+A priority\-2 logical flow with match \fBip6\[char46]dst = {\[char46]\[char46]}\fR matches on traffic destined to router owned IPv6 addresses which are also SNAT IPs\[char46] This flow has action \fBdrop;\fR\[char46]
+.IP
+A priority\-0 logical that flow matches all packets not already handled (match \fB1\fR) and drops them (action \fBdrop;\fR)\[char46]
+.IP \(bu
+Dynamic MAC bindings\[char46] These flows resolve MAC-to-IP bindings that have become known dynamically through ARP or neighbor discovery\[char46] (The ingress table \fBARP Request\fR will issue an ARP or neighbor solicitation request for cases where the binding is not yet known\[char46])
+.IP
+A priority\-0 logical flow with match \fBip4\fR has actions \fBget_arp(outport, reg0); next;\fR\[char46]
+.IP
+A priority\-0 logical flow with match \fBip6\fR has actions \fBget_nd(outport, xxreg0); next;\fR\[char46]
+.IP \(bu
+For a distributed gateway LRP with \fBredirect\-type\fR set to \fBbridged\fR, a priority\-50 flow will match \fBoutport == \(dqROUTER_PORT\(dq and !is_chassis_resident
+(\(dqcr\-ROUTER_PORT\(dq)\fR has actions \fBeth\[char46]dst = \fIE\fB;
+next;\fR, where \fIE\fR is the ethernet address of the logical router port\[char46]
+.RE
+.ST "Ingress Table 18: Check packet length"
+.PP
+.PP
+For distributed logical routers or gateway routers with gateway port configured with \fBoptions:gateway_mtu\fR to a valid integer value, this table adds a priority\-50 logical flow with the match \fBoutport == \fIGW_PORT\fB\fR where \fIGW_PORT\fR is the gateway router port and applies the action \fBcheck_pkt_larger\fR and advances the packet to the next table\[char46]
+.PP
+.nf
+\fB
+.br
+\fBREGBIT_PKT_LARGER = check_pkt_larger(\fR\fIL\fB\fR); next;
+.br
+\fB    \fR
+.fi
+.PP
+.PP
+where \fIL\fR is the packet length to check for\[char46] If the packet is larger than \fIL\fR, it stores 1 in the register bit \fBREGBIT_PKT_LARGER\fR\[char46] The value of \fIL\fR is taken from \fBoptions:gateway_mtu\fR column of \fBLogical_Router_Port\fR row\[char46]
+.PP
+.PP
+If the port is also configured with \fBoptions:gateway_mtu_bypass\fR then another flow is added, with priority\-55, to bypass the \fBcheck_pkt_larger\fR flow\[char46]
+.PP
+.PP
+This table adds one priority\-0 fallback flow that matches all packets and advances to the next table\[char46]
+.ST "Ingress Table 19: Handle larger packets"
+.PP
+.PP
+For distributed logical routers or gateway routers with gateway port configured with \fBoptions:gateway_mtu\fR to a valid integer value, this table adds the following priority\-150 logical flow for each logical router port with the match \fBinport == \fILRP\fB
+&& outport == \fIGW_PORT\fB && REGBIT_PKT_LARGER
+&& !REGBIT_EGRESS_LOOPBACK\fR, where \fILRP\fR is the logical router port and \fIGW_PORT\fR is the gateway port and applies the following action for ipv4 and ipv6 respectively:
+.PP
+.nf
+\fB
+.br
+\fBicmp4 {
+.br
+\fB    icmp4\[char46]type = 3; /* Destination Unreachable\[char46] */
+.br
+\fB    icmp4\[char46]code = 4;  /* Frag Needed and DF was Set\[char46] */
+.br
+\fB    icmp4\[char46]frag_mtu = \fR\fIM\fB\fR;
+.br
+\fB    eth\[char46]dst = \fR\fIE\fB\fR;
+.br
+\fB    ip4\[char46]dst = ip4\[char46]src;
+.br
+\fB    ip4\[char46]src = \fR\fII\fB\fR;
+.br
+\fB    ip\[char46]ttl = 255;
+.br
+\fB    REGBIT_EGRESS_LOOPBACK = 1;
+.br
+\fB    REGBIT_PKT_LARGER = 0;
+.br
+\fB    next(pipeline=ingress, table=0);
+.br
+\fB};
+.br
+\fB
+.br
+\fBicmp6 {
+.br
+\fB    icmp6\[char46]type = 2;
+.br
+\fB    icmp6\[char46]code = 0;
+.br
+\fB    icmp6\[char46]frag_mtu = \fR\fIM\fB\fR;
+.br
+\fB    eth\[char46]dst = \fR\fIE\fB\fR;
+.br
+\fB    ip6\[char46]dst = ip6\[char46]src;
+.br
+\fB    ip6\[char46]src = \fR\fII\fB\fR;
+.br
+\fB    ip\[char46]ttl = 255;
+.br
+\fB    REGBIT_EGRESS_LOOPBACK = 1;
+.br
+\fB    REGBIT_PKT_LARGER = 0;
+.br
+\fB    next(pipeline=ingress, table=0);
+.br
+\fB};
+.br
+\fB    \fR
+.fi
+.RS
+.IP \(bu
+Where \fIM\fR is the (fragment MTU - 58) whose value is taken from \fBoptions:gateway_mtu\fR column of \fBLogical_Router_Port\fR row\[char46]
+.IP \(bu
+\fIE\fR is the Ethernet address of the logical router port\[char46]
+.IP \(bu
+\fII\fR is the IPv4/IPv6 address of the logical router port\[char46]
+.RE
+.PP
+.PP
+This table adds one priority\-0 fallback flow that matches all packets and advances to the next table\[char46]
+.ST "Ingress Table 20: Gateway Redirect"
+.PP
+.PP
+For distributed logical routers where one or more of the logical router ports specifies a gateway chassis, this table redirects certain packets to the distributed gateway port instances on the gateway chassises\[char46] This table has the following flows:
+.RS
+.IP \(bu
+For each NAT rule in the OVN Northbound database that can be handled in a distributed manner, a priority\-100 logical flow with match \fBip4\[char46]src == \fIB\fB &&
+outport == \fIGW\fB\fR && is_chassis_resident(\fIP\fR), where \fIGW\fR is the distributed gateway port specified in the NAT rule and \fIP\fR is the NAT logical port\[char46] IP traffic matching the above rule will be managed locally setting \fBreg1\fR to \fIC\fR and \fBeth\[char46]src\fR to \fID\fR, where \fIC\fR is NAT external ip and \fID\fR is NAT external mac\[char46]
+.IP \(bu
+For each \fBdnat_and_snat\fR NAT rule with \fBstateless=true\fR and \fBallowed_ext_ips\fR configured, a priority\-75 flow is programmed with match \fBip4\[char46]dst == \fIB\fB\fR and action \fBoutport = \fICR\fB; next;\fR where \fIB\fR is the NAT rule external IP and \fICR\fR is the \fBchassisredirect\fR port representing the instance of the logical router distributed gateway port on the gateway chassis\[char46] Moreover a priority\-70 flow is programmed with same match and action \fBdrop;\fR\[char46] For each \fBdnat_and_snat\fR NAT rule with \fBstateless=true\fR and \fBexempted_ext_ips\fR configured, a priority\-75 flow is programmed with match \fBip4\[char46]dst == \fIB\fB\fR and action \fBdrop;\fR where \fIB\fR is the NAT rule external IP\[char46] A similar flow is added for IPv6 traffic\[char46]
+.IP \(bu
+For each NAT rule in the OVN Northbound database that can be handled in a distributed manner, a priority\-80 logical flow with drop action if the NAT logical port is a virtual port not claimed by any chassis yet\[char46]
+.IP \(bu
+A priority\-50 logical flow with match \fBoutport == \fIGW\fB\fR has actions \fBoutport = \fICR\fB; next;\fR, where \fIGW\fR is the logical router distributed gateway port and \fICR\fR is the \fBchassisredirect\fR port representing the instance of the logical router distributed gateway port on the gateway chassis\[char46]
+.IP \(bu
+A priority\-0 logical flow with match \fB1\fR has actions \fBnext;\fR\[char46]
+.RE
+.ST "Ingress Table 21: ARP Request"
+.PP
+.PP
+In the common case where the Ethernet destination has been resolved, this table outputs the packet\[char46] Otherwise, it composes and sends an ARP or IPv6 Neighbor Solicitation request\[char46] It holds the following flows:
+.RS
+.IP \(bu
+Unknown MAC address\[char46] A priority\-100 flow for IPv4 packets with match \fBeth\[char46]dst == 00:00:00:00:00:00\fR has the following actions:
+.IP
+.nf
+\fB
+.br
+\fBarp {
+.br
+\fB    eth\[char46]dst = ff:ff:ff:ff:ff:ff;
+.br
+\fB    arp\[char46]spa = reg1;
+.br
+\fB    arp\[char46]tpa = reg0;
+.br
+\fB    arp\[char46]op = 1;  /* ARP request\[char46] */
+.br
+\fB    output;
+.br
+\fB};
+.br
+\fB        \fR
+.fi
+.IP
+Unknown MAC address\[char46] For each IPv6 static route associated with the router with the nexthop IP: \fIG\fR, a priority\-200 flow for IPv6 packets with match \fBeth\[char46]dst == 00:00:00:00:00:00 &&
+xxreg0 == \fIG\fB\fR with the following actions is added:
+.IP
+.nf
+\fB
+.br
+\fBnd_ns {
+.br
+\fB    eth\[char46]dst = \fR\fIE\fB\fR;
+.br
+\fB    ip6\[char46]dst = \fR\fII\fB\fR
+.br
+\fB    nd\[char46]target = \fR\fIG\fB\fR;
+.br
+\fB    output;
+.br
+\fB};
+.br
+\fB        \fR
+.fi
+.IP
+Where \fIE\fR is the multicast mac derived from the Gateway IP, \fII\fR is the solicited-node multicast address corresponding to the target address \fIG\fR\[char46]
+.IP
+Unknown MAC address\[char46] A priority\-100 flow for IPv6 packets with match \fBeth\[char46]dst == 00:00:00:00:00:00\fR has the following actions:
+.IP
+.nf
+\fB
+.br
+\fBnd_ns {
+.br
+\fB    nd\[char46]target = xxreg0;
+.br
+\fB    output;
+.br
+\fB};
+.br
+\fB        \fR
+.fi
+.IP
+(Ingress table \fBIP Routing\fR initialized \fBreg1\fR with the IP address owned by \fBoutport\fR and \fB(xx)reg0\fR with the next-hop IP address)
+.IP
+The IP packet that triggers the ARP/IPv6 NS request is dropped\[char46]
+.IP \(bu
+Known MAC address\[char46] A priority\-0 flow with match \fB1\fR has actions \fBoutput;\fR\[char46]
+.RE
+.ST "Egress Table 0: Check DNAT local"
+.PP
+.PP
+This table checks if the packet needs to be DNATed in the router ingress table \fBlr_in_dnat\fR after it is SNATed and looped back to the ingress pipeline\[char46] This check is done only for routers configured with distributed gateway ports and NAT entries\[char46] This check is done so that SNAT and DNAT is done in different zones instead of a common zone\[char46]
+.RS
+.IP \(bu
+A priority\-0 logical flow with match \fB1\fR has actions \fBREGBIT_DST_NAT_IP_LOCAL = 0; next;\fR\[char46]
+.RE
+.ST "Egress Table 1: UNDNAT"
+.PP
+.PP
+This is for already established connections\(cq reverse traffic\[char46] i\[char46]e\[char46], DNAT has already been done in ingress pipeline and now the packet has entered the egress pipeline as part of a reply\[char46] This traffic is unDNATed here\[char46]
+.RS
+.IP \(bu
+A priority\-0 logical flow with match \fB1\fR has actions \fBnext;\fR\[char46]
+.RE
+.ST "Egress Table 1: UNDNAT on Gateway Routers"
+.RS
+.IP \(bu
+For IPv6 Neighbor Discovery or Router Solicitation/Advertisement traffic, a priority\-100 flow with action \fBnext;\fR\[char46]
+.IP \(bu
+For all IP packets, a priority\-50 flow with an action \fBflags\[char46]loopback = 1; ct_dnat;\fR\[char46]
+.RE
+.ST "Egress Table 1: UNDNAT on Distributed Routers"
+.RS
+.IP \(bu
+For all the configured load balancing rules for a router with gateway port in \fBOVN_Northbound\fR database that includes an IPv4 address \fBVIP\fR, for every backend IPv4 address \fIB\fR defined for the \fBVIP\fR a priority\-120 flow is programmed on gateway chassis that matches \fBip && ip4\[char46]src == \fIB\fB &&
+outport == \fIGW\fB\fR, where \fIGW\fR is the logical router gateway port with an action \fBct_dnat;\fR\[char46] If the backend IPv4 address \fIB\fR is also configured with L4 port \fIPORT\fR of protocol \fIP\fR, then the match also includes \fBP\[char46]src\fR == \fIPORT\fR\[char46] These flows are not added for load balancers with IPv6 \fIVIPs\fR\[char46]
+.IP
+If the router is configured to force SNAT any load-balanced packets, above action will be replaced by \fBflags\[char46]force_snat_for_lb = 1; ct_dnat;\fR\[char46]
+.IP \(bu
+For each configuration in the OVN Northbound database that asks to change the destination IP address of a packet from an IP address of \fIA\fR to \fIB\fR, a priority\-100 flow matches \fBip && ip4\[char46]src == \fIB\fB
+&& outport == \fIGW\fB\fR, where \fIGW\fR is the logical router gateway port, with an action \fBct_dnat;\fR\[char46] If the NAT rule is of type dnat_and_snat and has \fBstateless=true\fR in the options, then the action would be \fBnext;\fR\[char46]
+.IP
+If the NAT rule cannot be handled in a distributed manner, then the priority\-100 flow above is only programmed on the gateway chassis with the action \fBct_dnat\fR\[char46]
+.IP
+If the NAT rule can be handled in a distributed manner, then there is an additional action \fBeth\[char46]src = \fIEA\fB;\fR, where \fIEA\fR is the ethernet address associated with the IP address \fIA\fR in the NAT rule\[char46] This allows upstream MAC learning to point to the correct chassis\[char46]
+.RE
+.ST "Egress Table 2: Post UNDNAT"
+.PP
+.PP
+.RS
+.IP \(bu
+A priority\-50 logical flow is added that commits any untracked flows from the previous table \fBlr_out_undnat\fR for Gateway routers\[char46] This flow matches on \fBct\[char46]new && ip\fR with action \fBct_commit { } ; next; \fR\[char46]
+.IP \(bu
+A priority\-0 logical flow with match \fB1\fR has actions \fBnext;\fR\[char46]
+.RE
+.ST "Egress Table 3: SNAT"
+.PP
+.PP
+Packets that are configured to be SNATed get their source IP address changed based on the configuration in the OVN Northbound database\[char46]
+.RS
+.IP \(bu
+A priority\-120 flow to advance the IPv6 Neighbor solicitation packet to next table to skip SNAT\[char46] In the case where ovn-controller injects an IPv6 Neighbor Solicitation packet (for \fBnd_ns\fR action) we don\(cqt want the packet to go through conntrack\[char46]
+.RE
+.PP
+.PP
+Egress Table 3: SNAT on Gateway Routers
+.RS
+.IP \(bu
+If the Gateway router in the OVN Northbound database has been configured to force SNAT a packet (that has been previously DNATted) to \fIB\fR, a priority\-100 flow matches \fBflags\[char46]force_snat_for_dnat == 1 && ip\fR with an action \fBct_snat(\fIB\fB);\fR\[char46]
+.IP \(bu
+If a load balancer configured to skip snat has been applied to the Gateway router pipeline, a priority\-120 flow matches \fBflags\[char46]skip_snat_for_lb == 1 && ip\fR with an action \fBnext;\fR\[char46]
+.IP \(bu
+If the Gateway router in the OVN Northbound database has been configured to force SNAT a packet (that has been previously load-balanced) using router IP (i\[char46]e \fBoptions\fR:lb_force_snat_ip=router_ip), then for each logical router port \fIP\fR attached to the Gateway router, a priority\-110 flow matches \fBflags\[char46]force_snat_for_lb == 1 && outport == \fIP\fB
+\fR with an action \fBct_snat(\fIR\fB);\fR where \fIR\fR is the IP configured on the router port\[char46] If \fBR\fR is an IPv4 address then the match will also include \fBip4\fR and if it is an IPv6 address, then the match will also include \fBip6\fR\[char46]
+.IP
+If the logical router port \fIP\fR is configured with multiple IPv4 and multiple IPv6 addresses, only the first IPv4 and first IPv6 address is considered\[char46]
+.IP \(bu
+If the Gateway router in the OVN Northbound database has been configured to force SNAT a packet (that has been previously load-balanced) to \fIB\fR, a priority\-100 flow matches \fBflags\[char46]force_snat_for_lb == 1 && ip\fR with an action \fBct_snat(\fIB\fB);\fR\[char46]
+.IP \(bu
+For each configuration in the OVN Northbound database, that asks to change the source IP address of a packet from an IP address of \fIA\fR or to change the source IP address of a packet that belongs to network \fIA\fR to \fIB\fR, a flow matches \fBip && ip4\[char46]src == \fIA\fB &&
+(!ct\[char46]trk || !ct\[char46]rpl)\fR with an action \fBct_snat(\fIB\fB);\fR\[char46] The priority of the flow is calculated based on the mask of \fIA\fR, with matches having larger masks getting higher priorities\[char46] If the NAT rule is of type dnat_and_snat and has \fBstateless=true\fR in the options, then the action would be \fBip4/6\[char46]src=
+(\fIB\fB)\fR\[char46]
+.IP \(bu
+If the NAT rule has \fBallowed_ext_ips\fR configured, then there is an additional match \fBip4\[char46]dst == \fIallowed_ext_ips
+\fB\fR\[char46] Similarly, for IPV6, match would be \fBip6\[char46]dst ==
+\fIallowed_ext_ips\fB\fR\[char46]
+.IP \(bu
+If the NAT rule has \fBexempted_ext_ips\fR set, then there is an additional flow configured at the priority + 1 of corresponding NAT rule\[char46] The flow matches if destination ip is an \fBexempted_ext_ip\fR and the action is \fBnext;
+\fR\[char46] This flow is used to bypass the ct_snat action for a packet which is destinted to \fBexempted_ext_ips\fR\[char46]
+.IP \(bu
+A priority\-0 logical flow with match \fB1\fR has actions \fBnext;\fR\[char46]
+.RE
+.PP
+.PP
+Egress Table 3: SNAT on Distributed Routers
+.RS
+.IP \(bu
+For each configuration in the OVN Northbound database, that asks to change the source IP address of a packet from an IP address of \fIA\fR or to change the source IP address of a packet that belongs to network \fIA\fR to \fIB\fR, two flows are added\[char46] The priority \fIP\fR of these flows are calculated based on the mask of \fIA\fR, with matches having larger masks getting higher priorities\[char46]
+.IP
+If the NAT rule cannot be handled in a distributed manner, then the below flows are only programmed on the gateway chassis increasing flow priority by 128 in order to be run first\[char46]
+.RS
+.IP \(bu
+The first flow is added with the calculated priority \fIP\fR and match \fBip && ip4\[char46]src == \fIA\fB &&
+outport == \fIGW\fB\fR, where \fIGW\fR is the logical router gateway port, with an action \fBct_snat(\fIB\fB);\fR to SNATed in the common zone\[char46] If the NAT rule is of type dnat_and_snat and has \fBstateless=true\fR in the options, then the action would be \fBip4/6\[char46]src=(\fIB\fB)\fR\[char46]
+.RE
+.IP
+If the NAT rule can be handled in a distributed manner, then there is an additional action (for both the flows) \fBeth\[char46]src = \fIEA\fB;\fR, where \fIEA\fR is the ethernet address associated with the IP address \fIA\fR in the NAT rule\[char46] This allows upstream MAC learning to point to the correct chassis\[char46]
+.IP
+If the NAT rule has \fBallowed_ext_ips\fR configured, then there is an additional match \fBip4\[char46]dst == \fIallowed_ext_ips
+\fB\fR\[char46] Similarly, for IPV6, match would be \fBip6\[char46]dst ==
+\fIallowed_ext_ips\fB\fR\[char46]
+.IP
+If the NAT rule has \fBexempted_ext_ips\fR set, then there is an additional flow configured at the priority \fB\fIP\fB + 2 \fR of corresponding NAT rule\[char46] The flow matches if destination ip is an \fBexempted_ext_ip\fR and the action is \fBnext;
+\fR\[char46] This flow is used to bypass the ct_snat action for a flow which is destinted to \fBexempted_ext_ips\fR\[char46]
+.IP \(bu
+A priority\-0 logical flow with match \fB1\fR has actions \fBnext;\fR\[char46]
+.RE
+.ST "Egress Table 4: Post SNAT"
+.PP
+.PP
+Packets reaching this table are processed according to the flows below:
+.RS
+.IP \(bu
+A priority\-0 logical flow that matches all packets not already handled (match \fB1\fR) and action \fBnext;\fR\[char46]
+.RE
+.ST "Egress Table 5: Egress Loopback"
+.PP
+.PP
+For distributed logical routers where one of the logical router ports specifies a gateway chassis\[char46]
+.PP
+.PP
+While UNDNAT and SNAT processing have already occurred by this point, this traffic needs to be forced through egress loopback on this distributed gateway port instance, in order for UNSNAT and DNAT processing to be applied, and also for IP routing and ARP resolution after all of the NAT processing, so that the packet can be forwarded to the destination\[char46]
+.PP
+.PP
+This table has the following flows:
+.RS
+.IP \(bu
+For each NAT rule in the OVN Northbound database on a distributed router, a priority\-100 logical flow with match \fBip4\[char46]dst == \fIE\fB &&
+outport == \fIGW\fB &&
+is_chassis_resident(\fIP\fB)\fR, where \fIE\fR is the external IP address specified in the NAT rule, \fIGW\fR is the distributed gateway port corresponding to the NAT rule (specified or inferred)\[char46] For dnat_and_snat NAT rule, \fIP\fR is the logical port specified in the NAT rule\[char46] If \fBlogical_port\fR column of \fBNAT\fR table is NOT set, then \fIP\fR is the \fBchassisredirect port\fR of \fIGW\fR with the following actions:
+.IP
+.nf
+\fB
+.br
+\fBclone {
+.br
+\fB    ct_clear;
+.br
+\fB    inport = outport;
+.br
+\fB    outport = \(dq\(dq;
+.br
+\fB    flags = 0;
+.br
+\fB    flags\[char46]loopback = 1;
+.br
+\fB    reg0 = 0;
+.br
+\fB    reg1 = 0;
+.br
+\fB    \[char46]\[char46]\[char46]
+.br
+\fB    reg9 = 0;
+.br
+\fB    REGBIT_EGRESS_LOOPBACK = 1;
+.br
+\fB    next(pipeline=ingress, table=0);
+.br
+\fB};
+.br
+\fB        \fR
+.fi
+.IP
+\fBflags\[char46]loopback\fR is set since in_port is unchanged and the packet may return back to that port after NAT processing\[char46] \fBREGBIT_EGRESS_LOOPBACK\fR is set to indicate that egress loopback has occurred, in order to skip the source IP address check against the router address\[char46]
+.IP \(bu
+A priority\-0 logical flow with match \fB1\fR has actions \fBnext;\fR\[char46]
+.RE
+.ST "Egress Table 6: Delivery"
+.PP
+.PP
+Packets that reach this table are ready for delivery\[char46] It contains:
+.RS
+.IP \(bu
+Priority\-110 logical flows that match IP multicast packets on each enabled logical router port and modify the Ethernet source address of the packets to the Ethernet address of the port and then execute action \fBoutput;\fR\[char46]
+.IP \(bu
+Priority\-100 logical flows that match packets on each enabled logical router port, with action \fBoutput;\fR\[char46]
+.IP \(bu
+A priority\-0 logical flow that matches all packets not already handled (match \fB1\fR) and drops them (action \fBdrop;\fR)\[char46]
+.RE
+.SH "DROP SAMPLING"
+.PP
+.PP
+As described in the previous section, there are several places where ovn-northd might decided to drop a packet by explicitly creating a \fBLogical_Flow\fR with the \fBdrop;\fR action\[char46]
+.PP
+.PP
+When debug drop-sampling has been cofigured in the OVN Northbound database, the ovn-northd will replace all the \fBdrop;\fR actions with a \fBsample(priority=65535, collector_set=\fIid\fB,
+obs_domain=\fIobs_id\fB, obs_point=@cookie)\fR action, where:
+.RS
+.IP \(bu
+\fIid\fR is the value the \fBdebug_drop_collector_set\fR option configured in the OVN Northbound\[char46]
+.IP \(bu
+\fIobs_id\fR has it\(cqs 8 most significant bits equal to the value of the \fBdebug_drop_domain_id\fR option in the OVN Northbound and it\(cqs 24 least significant bits equal to the datapath\(cqs tunnel key\[char46]
+.RE
diff --git a/support/dist-docs-branch-23.06/ovn-northd.8.html b/support/dist-docs-branch-23.06/ovn-northd.8.html
new file mode 100644
index 00000000..87b3c5d0
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-northd.8.html
@@ -0,0 +1,3725 @@
+<html><head><meta charset="UTF-8"></head><body><pre>
+<u>o</u><u>v</u><u>n</u><u>-</u><u>n</u><u>o</u><u>r</u><u>t</u><u>h</u><u>d</u>(8)                     OVN Manual                     <u>o</u><u>v</u><u>n</u><u>-</u><u>n</u><u>o</u><u>r</u><u>t</u><u>h</u><u>d</u>(8)
+
+<b>N</b><b>A</b><b>M</b><b>E</b>
+       ovn-northd  and ovn-northd-ddlog - Open Virtual Network central control
+       daemon
+
+<b>S</b><b>Y</b><b>N</b><b>O</b><b>P</b><b>S</b><b>I</b><b>S</b>
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> [<u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u>]
+
+<b>D</b><b>E</b><b>S</b><b>C</b><b>R</b><b>I</b><b>P</b><b>T</b><b>I</b><b>O</b><b>N</b>
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> is a centralized  daemon  responsible  for  translating  the
+       high-level  OVN  configuration into logical configuration consumable by
+       daemons such as <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>. It translates the logical network  con‐
+       figuration  in  terms  of conventional network concepts, taken from the
+       OVN Northbound Database (see <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b>(5)), into logical datapath flows in
+       the OVN Southbound Database (see <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b>(5)) below it.
+
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> is implemented in C. <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b><b>-</b><b>d</b><b>d</b><b>l</b><b>o</b><b>g</b> is a compatible imple‐
+       mentation written in DDlog, a language for  incremental  database  pro‐
+       cessing.  This documentation applies to both implementations, with dif‐
+       ferences indicated where relevant.
+
+<b>O</b><b>P</b><b>T</b><b>I</b><b>O</b><b>N</b><b>S</b>
+       <b>-</b><b>-</b><b>o</b><b>v</b><b>n</b><b>n</b><b>b</b><b>-</b><b>d</b><b>b</b><b>=</b><u>d</u><u>a</u><u>t</u><u>a</u><u>b</u><u>a</u><u>s</u><u>e</u>
+              The OVSDB database containing the OVN  Northbound  Database.  If
+              the  <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>B</b><b>_</b><b>D</b><b>B</b> environment variable is set, its value is used as
+              the default. Otherwise, the default is <b>u</b><b>n</b><b>i</b><b>x</b><b>:</b><b>/</b><b>o</b><b>v</b><b>n</b><b>n</b><b>b</b><b>_</b><b>d</b><b>b</b><b>.</b><b>s</b><b>o</b><b>c</b><b>k</b>.
+
+       <b>-</b><b>-</b><b>o</b><b>v</b><b>n</b><b>s</b><b>b</b><b>-</b><b>d</b><b>b</b><b>=</b><u>d</u><u>a</u><u>t</u><u>a</u><u>b</u><u>a</u><u>s</u><u>e</u>
+              The OVSDB database containing the OVN  Southbound  Database.  If
+              the  <b>O</b><b>V</b><b>N</b><b>_</b><b>S</b><b>B</b><b>_</b><b>D</b><b>B</b> environment variable is set, its value is used as
+              the default. Otherwise, the default is <b>u</b><b>n</b><b>i</b><b>x</b><b>:</b><b>/</b><b>o</b><b>v</b><b>n</b><b>s</b><b>b</b><b>_</b><b>d</b><b>b</b><b>.</b><b>s</b><b>o</b><b>c</b><b>k</b>.
+
+       <b>-</b><b>-</b><b>d</b><b>d</b><b>l</b><b>o</b><b>g</b><b>-</b><b>r</b><b>e</b><b>c</b><b>o</b><b>r</b><b>d</b><b>=</b><u>f</u><u>i</u><u>l</u><u>e</u>
+              This option is for <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>-</b><b>d</b><b>d</b><b>l</b><b>o</b><b>g</b> only. It causes the daemon to
+              record the initial database state and later changes to  <u>f</u><u>i</u><u>l</u><u>e</u>  in
+              the  text-based DDlog command format. The <b>o</b><b>v</b><b>n</b><b>_</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b><b>_</b><b>c</b><b>l</b><b>i</b> program
+              can later replay these changes for debugging purposes. This  op‐
+              tion  has  a  performance impact. See <b>d</b><b>e</b><b>b</b><b>u</b><b>g</b><b>g</b><b>i</b><b>n</b><b>g</b><b>-</b><b>d</b><b>d</b><b>l</b><b>o</b><b>g</b><b>.</b><b>r</b><b>s</b><b>t</b> in the
+              OVN documentation for more details.
+
+       <b>-</b><b>-</b><b>d</b><b>r</b><b>y</b><b>-</b><b>r</b><b>u</b><b>n</b>
+              Causes  <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>  to  start  paused.  In  the  paused   state,
+              <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> does not apply any changes to the databases, although
+              it  continues  to  monitor  them.  For more information, see the
+              <b>p</b><b>a</b><b>u</b><b>s</b><b>e</b> command, under <b>R</b><b>u</b><b>n</b><b>t</b><b>i</b><b>m</b><b>e</b> <b>M</b><b>a</b><b>n</b><b>a</b><b>g</b><b>e</b><b>m</b><b>e</b><b>n</b><b>t</b> <b>C</b><b>o</b><b>m</b><b>m</b><b>a</b><b>n</b><b>d</b><b>s</b> below.
+
+              For  <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b><b>-</b><b>d</b><b>d</b><b>l</b><b>o</b><b>g</b>,  one   could   use   this   option   with
+              <b>-</b><b>-</b><b>d</b><b>d</b><b>l</b><b>o</b><b>g</b><b>-</b><b>r</b><b>e</b><b>c</b><b>o</b><b>r</b><b>d</b>  to  generate  a  replay log without restarting a
+              process or disturbing a running system.
+
+       <b>n</b><b>-</b><b>t</b><b>h</b><b>r</b><b>e</b><b>a</b><b>d</b><b>s</b> <b>N</b>
+              In certain situations, it may  be  desirable  to  enable  paral‐
+              lelization  on  a  system  to decrease latency (at the potential
+              cost of increasing CPU usage).
+
+              This option will cause ovn-northd to use N threads when building
+              logical flows, when N is within [2-256]. If N is 1, paralleliza‐
+              tion is disabled (default behavior). If N is less than 1, then N
+              is set to 1,  parallelization  is  disabled  and  a  warning  is
+              logged.  If  N  is  more  than 256, then N is set to 256, paral‐
+              lelization is enabled  (with  256  threads)  and  a  warning  is
+              logged.
+
+              ovn-northd-ddlog does not support this option.
+
+       <u>d</u><u>a</u><u>t</u><u>a</u><u>b</u><u>a</u><u>s</u><u>e</u>  in  the above options must be an OVSDB active or passive con‐
+       nection method, as described in <b>o</b><b>v</b><b>s</b><b>d</b><b>b</b>(7).
+
+   <b>D</b><b>a</b><b>e</b><b>m</b><b>o</b><b>n</b> <b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+       <b>-</b><b>-</b><b>p</b><b>i</b><b>d</b><b>f</b><b>i</b><b>l</b><b>e</b>[<b>=</b><u>p</u><u>i</u><u>d</u><u>f</u><u>i</u><u>l</u><u>e</u>]
+              Causes a file (by default, <u>p</u><u>r</u><u>o</u><u>g</u><u>r</u><u>a</u><u>m</u><b>.</b><b>p</b><b>i</b><b>d</b>) to be created indicating
+              the PID of the running process. If the <u>p</u><u>i</u><u>d</u><u>f</u><u>i</u><u>l</u><u>e</u> argument  is  not
+              specified, or if it does not begin with <b>/</b>, then it is created in
+              .
+
+              If <b>-</b><b>-</b><b>p</b><b>i</b><b>d</b><b>f</b><b>i</b><b>l</b><b>e</b> is not specified, no pidfile is created.
+
+       <b>-</b><b>-</b><b>o</b><b>v</b><b>e</b><b>r</b><b>w</b><b>r</b><b>i</b><b>t</b><b>e</b><b>-</b><b>p</b><b>i</b><b>d</b><b>f</b><b>i</b><b>l</b><b>e</b>
+              By  default,  when <b>-</b><b>-</b><b>p</b><b>i</b><b>d</b><b>f</b><b>i</b><b>l</b><b>e</b> is specified and the specified pid‐
+              file already exists and is locked by a running process, the dae‐
+              mon refuses to start. Specify <b>-</b><b>-</b><b>o</b><b>v</b><b>e</b><b>r</b><b>w</b><b>r</b><b>i</b><b>t</b><b>e</b><b>-</b><b>p</b><b>i</b><b>d</b><b>f</b><b>i</b><b>l</b><b>e</b> to cause it to
+              instead overwrite the pidfile.
+
+              When <b>-</b><b>-</b><b>p</b><b>i</b><b>d</b><b>f</b><b>i</b><b>l</b><b>e</b> is not specified, this option has no effect.
+
+       <b>-</b><b>-</b><b>d</b><b>e</b><b>t</b><b>a</b><b>c</b><b>h</b>
+              Runs this program as a background process.  The  process  forks,
+              and  in  the  child it starts a new session, closes the standard
+              file descriptors (which has the side effect of disabling logging
+              to the console), and changes its current directory to  the  root
+              (unless  <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>c</b><b>h</b><b>d</b><b>i</b><b>r</b> is specified). After the child completes its
+              initialization, the parent exits.
+
+       <b>-</b><b>-</b><b>m</b><b>o</b><b>n</b><b>i</b><b>t</b><b>o</b><b>r</b>
+              Creates an additional process to monitor  this  program.  If  it
+              dies  due  to a signal that indicates a programming error (<b>S</b><b>I</b><b>G</b><b>A</b>‐‐
+              <b>B</b><b>R</b><b>T</b>, <b>S</b><b>I</b><b>G</b><b>A</b><b>L</b><b>R</b><b>M</b>, <b>S</b><b>I</b><b>G</b><b>B</b><b>U</b><b>S</b>, <b>S</b><b>I</b><b>G</b><b>F</b><b>P</b><b>E</b>, <b>S</b><b>I</b><b>G</b><b>I</b><b>L</b><b>L</b>, <b>S</b><b>I</b><b>G</b><b>P</b><b>I</b><b>P</b><b>E</b>, <b>S</b><b>I</b><b>G</b><b>S</b><b>E</b><b>G</b><b>V</b>, <b>S</b><b>I</b><b>G</b><b>X</b><b>C</b><b>P</b><b>U</b>,
+              or <b>S</b><b>I</b><b>G</b><b>X</b><b>F</b><b>S</b><b>Z</b>) then the monitor process starts a new copy of it. If
+              the daemon dies or exits for another reason, the monitor process
+              exits.
+
+              This option is normally used with <b>-</b><b>-</b><b>d</b><b>e</b><b>t</b><b>a</b><b>c</b><b>h</b>, but  it  also  func‐
+              tions without it.
+
+       <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>c</b><b>h</b><b>d</b><b>i</b><b>r</b>
+              By  default,  when <b>-</b><b>-</b><b>d</b><b>e</b><b>t</b><b>a</b><b>c</b><b>h</b> is specified, the daemon changes its
+              current working directory to the root  directory  after  it  de‐
+              taches.  Otherwise, invoking the daemon from a carelessly chosen
+              directory would prevent the administrator  from  unmounting  the
+              file system that holds that directory.
+
+              Specifying  <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>c</b><b>h</b><b>d</b><b>i</b><b>r</b>  suppresses this behavior, preventing the
+              daemon from changing its current working directory. This may  be
+              useful for collecting core files, since it is common behavior to
+              write core dumps into the current working directory and the root
+              directory is not a good directory to use.
+
+              This option has no effect when <b>-</b><b>-</b><b>d</b><b>e</b><b>t</b><b>a</b><b>c</b><b>h</b> is not specified.
+
+       <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>s</b><b>e</b><b>l</b><b>f</b><b>-</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>n</b><b>e</b><b>m</b><b>e</b><b>n</b><b>t</b>
+              By  default  this daemon will try to self-confine itself to work
+              with files under  well-known  directories  determined  at  build
+              time.  It  is better to stick with this default behavior and not
+              to use this flag unless some other Access  Control  is  used  to
+              confine  daemon.  Note  that in contrast to other access control
+              implementations that are typically  enforced  from  kernel-space
+              (e.g.  DAC  or  MAC), self-confinement is imposed from the user-
+              space daemon itself and hence should not be considered as a full
+              confinement strategy, but instead should be viewed as  an  addi‐
+              tional layer of security.
+
+       <b>-</b><b>-</b><b>u</b><b>s</b><b>e</b><b>r</b><b>=</b><u>u</u><u>s</u><u>e</u><u>r</u><b>:</b><u>g</u><u>r</u><u>o</u><u>u</u><u>p</u>
+              Causes  this  program  to  run  as a different user specified in
+              <u>u</u><u>s</u><u>e</u><u>r</u><b>:</b><u>g</u><u>r</u><u>o</u><u>u</u><u>p</u>, thus dropping most of  the  root  privileges.  Short
+              forms  <u>u</u><u>s</u><u>e</u><u>r</u>  and  <b>:</b><u>g</u><u>r</u><u>o</u><u>u</u><u>p</u>  are also allowed, with current user or
+              group assumed, respectively. Only daemons started  by  the  root
+              user accepts this argument.
+
+              On   Linux,   daemons   will   be   granted   <b>C</b><b>A</b><b>P</b><b>_</b><b>I</b><b>P</b><b>C</b><b>_</b><b>L</b><b>O</b><b>C</b><b>K</b>   and
+              <b>C</b><b>A</b><b>P</b><b>_</b><b>N</b><b>E</b><b>T</b><b>_</b><b>B</b><b>I</b><b>N</b><b>D</b><b>_</b><b>S</b><b>E</b><b>R</b><b>V</b><b>I</b><b>C</b><b>E</b><b>S</b> before dropping root  privileges.  Daemons
+              that  interact  with  a  datapath, such as <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>d</b>, will be
+              granted three  additional  capabilities,  namely  <b>C</b><b>A</b><b>P</b><b>_</b><b>N</b><b>E</b><b>T</b><b>_</b><b>A</b><b>D</b><b>M</b><b>I</b><b>N</b>,
+              <b>C</b><b>A</b><b>P</b><b>_</b><b>N</b><b>E</b><b>T</b><b>_</b><b>B</b><b>R</b><b>O</b><b>A</b><b>D</b><b>C</b><b>A</b><b>S</b><b>T</b>  and  <b>C</b><b>A</b><b>P</b><b>_</b><b>N</b><b>E</b><b>T</b><b>_</b><b>R</b><b>A</b><b>W</b>.  The capability change will
+              apply even if the new user is root.
+
+              On Windows, this option is not currently supported. For security
+              reasons, specifying this option will cause  the  daemon  process
+              not to start.
+
+   <b>L</b><b>o</b><b>g</b><b>g</b><b>i</b><b>n</b><b>g</b> <b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+       <b>-</b><b>v</b>[<u>s</u><u>p</u><u>e</u><u>c</u>]
+       <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>b</b><b>o</b><b>s</b><b>e</b><b>=</b>[<u>s</u><u>p</u><u>e</u><u>c</u>]
+            Sets  logging  levels.  Without  any  <u>s</u><u>p</u><u>e</u><u>c</u>, sets the log level for
+            every module and destination to <b>d</b><b>b</b><b>g</b>. Otherwise, <u>s</u><u>p</u><u>e</u><u>c</u> is a list  of
+            words separated by spaces or commas or colons, up to one from each
+            category below:
+
+            •      A  valid module name, as displayed by the <b>v</b><b>l</b><b>o</b><b>g</b><b>/</b><b>l</b><b>i</b><b>s</b><b>t</b> command
+                   on <b>o</b><b>v</b><b>s</b><b>-</b><b>a</b><b>p</b><b>p</b><b>c</b><b>t</b><b>l</b>(8), limits the log level change to the speci‐
+                   fied module.
+
+            •      <b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b>, <b>c</b><b>o</b><b>n</b><b>s</b><b>o</b><b>l</b><b>e</b>, or <b>f</b><b>i</b><b>l</b><b>e</b>, to limit the log level change  to
+                   only  to  the system log, to the console, or to a file, re‐
+                   spectively. (If <b>-</b><b>-</b><b>d</b><b>e</b><b>t</b><b>a</b><b>c</b><b>h</b> is specified,  the  daemon  closes
+                   its  standard  file  descriptors, so logging to the console
+                   will have no effect.)
+
+                   On Windows platform, <b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b> is accepted as a  word  and  is
+                   only useful along with the <b>-</b><b>-</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>-</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> option (the word
+                   has no effect otherwise).
+
+            •      <b>o</b><b>f</b><b>f</b>,  <b>e</b><b>m</b><b>e</b><b>r</b>,  <b>e</b><b>r</b><b>r</b>,  <b>w</b><b>a</b><b>r</b><b>n</b>,  <b>i</b><b>n</b><b>f</b><b>o</b>,  or <b>d</b><b>b</b><b>g</b>, to control the log
+                   level. Messages of the given severity  or  higher  will  be
+                   logged,  and  messages  of  lower severity will be filtered
+                   out. <b>o</b><b>f</b><b>f</b> filters out all messages. See <b>o</b><b>v</b><b>s</b><b>-</b><b>a</b><b>p</b><b>p</b><b>c</b><b>t</b><b>l</b>(8) for  a
+                   definition of each log level.
+
+            Case is not significant within <u>s</u><u>p</u><u>e</u><u>c</u>.
+
+            Regardless  of the log levels set for <b>f</b><b>i</b><b>l</b><b>e</b>, logging to a file will
+            not take place unless <b>-</b><b>-</b><b>l</b><b>o</b><b>g</b><b>-</b><b>f</b><b>i</b><b>l</b><b>e</b> is also specified (see below).
+
+            For compatibility with older versions of OVS, <b>a</b><b>n</b><b>y</b> is accepted as a
+            word but has no effect.
+
+       <b>-</b><b>v</b>
+       <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>b</b><b>o</b><b>s</b><b>e</b>
+            Sets the maximum logging verbosity  level,  equivalent  to  <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b>‐‐
+            <b>b</b><b>o</b><b>s</b><b>e</b><b>=</b><b>d</b><b>b</b><b>g</b>.
+
+       <b>-</b><b>v</b><b>P</b><b>A</b><b>T</b><b>T</b><b>E</b><b>R</b><b>N</b><b>:</b><u>d</u><u>e</u><u>s</u><u>t</u><u>i</u><u>n</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u><b>:</b><u>p</u><u>a</u><u>t</u><u>t</u><u>e</u><u>r</u><u>n</u>
+       <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>b</b><b>o</b><b>s</b><b>e</b><b>=</b><b>P</b><b>A</b><b>T</b><b>T</b><b>E</b><b>R</b><b>N</b><b>:</b><u>d</u><u>e</u><u>s</u><u>t</u><u>i</u><u>n</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u><b>:</b><u>p</u><u>a</u><u>t</u><u>t</u><u>e</u><u>r</u><u>n</u>
+            Sets  the log pattern for <u>d</u><u>e</u><u>s</u><u>t</u><u>i</u><u>n</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u> to <u>p</u><u>a</u><u>t</u><u>t</u><u>e</u><u>r</u><u>n</u>. Refer to <b>o</b><b>v</b><b>s</b><b>-</b><b>a</b><b>p</b>‐‐
+            <b>p</b><b>c</b><b>t</b><b>l</b>(8) for a description of the valid syntax for <u>p</u><u>a</u><u>t</u><u>t</u><u>e</u><u>r</u><u>n</u>.
+
+       <b>-</b><b>v</b><b>F</b><b>A</b><b>C</b><b>I</b><b>L</b><b>I</b><b>T</b><b>Y</b><b>:</b><u>f</u><u>a</u><u>c</u><u>i</u><u>l</u><u>i</u><u>t</u><u>y</u>
+       <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>b</b><b>o</b><b>s</b><b>e</b><b>=</b><b>F</b><b>A</b><b>C</b><b>I</b><b>L</b><b>I</b><b>T</b><b>Y</b><b>:</b><u>f</u><u>a</u><u>c</u><u>i</u><u>l</u><u>i</u><u>t</u><u>y</u>
+            Sets the RFC5424 facility of the log message. <u>f</u><u>a</u><u>c</u><u>i</u><u>l</u><u>i</u><u>t</u><u>y</u> can be  one
+            of <b>k</b><b>e</b><b>r</b><b>n</b>, <b>u</b><b>s</b><b>e</b><b>r</b>, <b>m</b><b>a</b><b>i</b><b>l</b>, <b>d</b><b>a</b><b>e</b><b>m</b><b>o</b><b>n</b>, <b>a</b><b>u</b><b>t</b><b>h</b>, <b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b>, <b>l</b><b>p</b><b>r</b>, <b>n</b><b>e</b><b>w</b><b>s</b>, <b>u</b><b>u</b><b>c</b><b>p</b>, <b>c</b><b>l</b><b>o</b><b>c</b><b>k</b>,
+            <b>f</b><b>t</b><b>p</b>,  <b>n</b><b>t</b><b>p</b>,  <b>a</b><b>u</b><b>d</b><b>i</b><b>t</b>,  <b>a</b><b>l</b><b>e</b><b>r</b><b>t</b>, <b>c</b><b>l</b><b>o</b><b>c</b><b>k</b><b>2</b>, <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>0</b>, <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>1</b>, <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>2</b>, <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>3</b>,
+            <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>4</b>, <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>5</b>, <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>6</b> or <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>7</b>. If this option is not specified,
+            <b>d</b><b>a</b><b>e</b><b>m</b><b>o</b><b>n</b> is used as the default for the local system syslog and  <b>l</b><b>o</b>‐‐
+            <b>c</b><b>a</b><b>l</b><b>0</b>  is  used  while sending a message to the target provided via
+            the <b>-</b><b>-</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>-</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> option.
+
+       <b>-</b><b>-</b><b>l</b><b>o</b><b>g</b><b>-</b><b>f</b><b>i</b><b>l</b><b>e</b>[<b>=</b><u>f</u><u>i</u><u>l</u><u>e</u>]
+            Enables logging to a file. If <u>f</u><u>i</u><u>l</u><u>e</u> is specified, then it  is  used
+            as the exact name for the log file. The default log file name used
+            if <u>f</u><u>i</u><u>l</u><u>e</u> is omitted is <b>/</b><b>u</b><b>s</b><b>r</b><b>/</b><b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>/</b><b>v</b><b>a</b><b>r</b><b>/</b><b>l</b><b>o</b><b>g</b><b>/</b><b>o</b><b>v</b><b>n</b><b>/</b><u>p</u><u>r</u><u>o</u><u>g</u><u>r</u><u>a</u><u>m</u><b>.</b><b>l</b><b>o</b><b>g</b>.
+
+       <b>-</b><b>-</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>-</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b><b>=</b><u>h</u><u>o</u><u>s</u><u>t</u><b>:</b><u>p</u><u>o</u><u>r</u><u>t</u>
+            Send  syslog messages to UDP <u>p</u><u>o</u><u>r</u><u>t</u> on <u>h</u><u>o</u><u>s</u><u>t</u>, in addition to the sys‐
+            tem syslog. The <u>h</u><u>o</u><u>s</u><u>t</u> must be a numerical IP address, not  a  host‐
+            name.
+
+       <b>-</b><b>-</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>-</b><b>m</b><b>e</b><b>t</b><b>h</b><b>o</b><b>d</b><b>=</b><u>m</u><u>e</u><u>t</u><u>h</u><u>o</u><u>d</u>
+            Specify  <u>m</u><u>e</u><u>t</u><u>h</u><u>o</u><u>d</u>  as  how  syslog messages should be sent to syslog
+            daemon. The following forms are supported:
+
+            •      <b>l</b><b>i</b><b>b</b><b>c</b>, to use the libc <b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>(</b><b>)</b> function. Downside of  using
+                   this  options  is that libc adds fixed prefix to every mes‐
+                   sage before it is actually sent to the syslog  daemon  over
+                   <b>/</b><b>d</b><b>e</b><b>v</b><b>/</b><b>l</b><b>o</b><b>g</b> UNIX domain socket.
+
+            •      <b>u</b><b>n</b><b>i</b><b>x</b><b>:</b><u>f</u><u>i</u><u>l</u><u>e</u>, to use a UNIX domain socket directly. It is pos‐
+                   sible to specify arbitrary message format with this option.
+                   However,  <b>r</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>d</b>  <b>8</b><b>.</b><b>9</b>  and  older versions use hard coded
+                   parser function anyway that limits UNIX domain socket  use.
+                   If  you  want  to  use  arbitrary message format with older
+                   <b>r</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>d</b> versions, then use UDP socket to localhost IP  ad‐
+                   dress instead.
+
+            •      <b>u</b><b>d</b><b>p</b><b>:</b><u>i</u><u>p</u><b>:</b><u>p</u><u>o</u><u>r</u><u>t</u>,  to  use  a UDP socket. With this method it is
+                   possible to use arbitrary message format  also  with  older
+                   <b>r</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>d</b>.  When sending syslog messages over UDP socket ex‐
+                   tra precaution needs to be taken into account, for example,
+                   syslog daemon needs to be configured to listen on the spec‐
+                   ified UDP port, accidental iptables rules could  be  inter‐
+                   fering  with  local syslog traffic and there are some secu‐
+                   rity considerations that apply to UDP sockets, but  do  not
+                   apply to UNIX domain sockets.
+
+            •      <b>n</b><b>u</b><b>l</b><b>l</b>, to discard all messages logged to syslog.
+
+            The  default is taken from the <b>O</b><b>V</b><b>S</b><b>_</b><b>S</b><b>Y</b><b>S</b><b>L</b><b>O</b><b>G</b><b>_</b><b>M</b><b>E</b><b>T</b><b>H</b><b>O</b><b>D</b> environment vari‐
+            able; if it is unset, the default is <b>l</b><b>i</b><b>b</b><b>c</b>.
+
+   <b>P</b><b>K</b><b>I</b> <b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+       PKI configuration is required in order to use SSL for  the  connections
+       to the Northbound and Southbound databases.
+
+              <b>-</b><b>p</b> <u>p</u><u>r</u><u>i</u><u>v</u><u>k</u><u>e</u><u>y</u><u>.</u><u>p</u><u>e</u><u>m</u>
+              <b>-</b><b>-</b><b>p</b><b>r</b><b>i</b><b>v</b><b>a</b><b>t</b><b>e</b><b>-</b><b>k</b><b>e</b><b>y</b><b>=</b><u>p</u><u>r</u><u>i</u><u>v</u><u>k</u><u>e</u><u>y</u><u>.</u><u>p</u><u>e</u><u>m</u>
+                   Specifies  a  PEM  file  containing the private key used as
+                   identity for outgoing SSL connections.
+
+              <b>-</b><b>c</b> <u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+              <b>-</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>i</b><b>f</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b><b>=</b><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+                   Specifies a PEM file containing a certificate  that  certi‐
+                   fies the private key specified on <b>-</b><b>p</b> or <b>-</b><b>-</b><b>p</b><b>r</b><b>i</b><b>v</b><b>a</b><b>t</b><b>e</b><b>-</b><b>k</b><b>e</b><b>y</b> to be
+                   trustworthy. The certificate must be signed by the certifi‐
+                   cate  authority  (CA) that the peer in SSL connections will
+                   use to verify it.
+
+              <b>-</b><b>C</b> <u>c</u><u>a</u><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+              <b>-</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>=</b><u>c</u><u>a</u><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+                   Specifies a PEM file containing the CA certificate for ver‐
+                   ifying certificates presented to this program by SSL peers.
+                   (This may be the same certificate that  SSL  peers  use  to
+                   verify the certificate specified on <b>-</b><b>c</b> or <b>-</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>i</b><b>f</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b>, or
+                   it  may  be a different one, depending on the PKI design in
+                   use.)
+
+              <b>-</b><b>C</b> <b>n</b><b>o</b><b>n</b><b>e</b>
+              <b>-</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>=</b><b>n</b><b>o</b><b>n</b><b>e</b>
+                   Disables verification  of  certificates  presented  by  SSL
+                   peers.  This  introduces  a security risk, because it means
+                   that certificates cannot be verified to be those  of  known
+                   trusted hosts.
+
+   <b>O</b><b>t</b><b>h</b><b>e</b><b>r</b> <b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+       <b>-</b><b>-</b><b>u</b><b>n</b><b>i</b><b>x</b><b>c</b><b>t</b><b>l</b><b>=</b><u>s</u><u>o</u><u>c</u><u>k</u><u>e</u><u>t</u>
+              Sets the name of the control socket on which <u>p</u><u>r</u><u>o</u><u>g</u><u>r</u><u>a</u><u>m</u> listens for
+              runtime  management  commands  (see <u>R</u><u>U</u><u>N</u><u>T</u><u>I</u><u>M</u><u>E</u> <u>M</u><u>A</u><u>N</u><u>A</u><u>G</u><u>E</u><u>M</u><u>E</u><u>N</u><u>T</u> <u>C</u><u>O</u><u>M</u><u>M</u><u>A</u><u>N</u><u>D</u><u>S</u><u>,</u>
+              below). If <u>s</u><u>o</u><u>c</u><u>k</u><u>e</u><u>t</u> does not begin with <b>/</b>, it  is  interpreted  as
+              relative  to  .  If  <b>-</b><b>-</b><b>u</b><b>n</b><b>i</b><b>x</b><b>c</b><b>t</b><b>l</b>  is  not used at all, the default
+              socket is <b>/</b><u>p</u><u>r</u><u>o</u><u>g</u><u>r</u><u>a</u><u>m</u><b>.</b><u>p</u><u>i</u><u>d</u><b>.</b><b>c</b><b>t</b><b>l</b>, where <u>p</u><u>i</u><u>d</u> is <u>p</u><u>r</u><u>o</u><u>g</u><u>r</u><u>a</u><u>m</u>’s process ID.
+
+              On Windows a local named pipe is used to listen for runtime man‐
+              agement commands. A file is created  in  the  absolute  path  as
+              pointed  by <u>s</u><u>o</u><u>c</u><u>k</u><u>e</u><u>t</u> or if <b>-</b><b>-</b><b>u</b><b>n</b><b>i</b><b>x</b><b>c</b><b>t</b><b>l</b> is not used at all, a file is
+              created as <u>p</u><u>r</u><u>o</u><u>g</u><u>r</u><u>a</u><u>m</u> in the configured <u>O</u><u>V</u><u>S</u><b>_</b><u>R</u><u>U</u><u>N</u><u>D</u><u>I</u><u>R</u>  directory.  The
+              file exists just to mimic the behavior of a Unix domain socket.
+
+              Specifying <b>n</b><b>o</b><b>n</b><b>e</b> for <u>s</u><u>o</u><u>c</u><u>k</u><u>e</u><u>t</u> disables the control socket feature.
+
+
+
+       <b>-</b><b>h</b>
+       <b>-</b><b>-</b><b>h</b><b>e</b><b>l</b><b>p</b>
+            Prints a brief help message to the console.
+
+       <b>-</b><b>V</b>
+       <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>s</b><b>i</b><b>o</b><b>n</b>
+            Prints version information to the console.
+
+<b>R</b><b>U</b><b>N</b><b>T</b><b>I</b><b>M</b><b>E</b> <b>M</b><b>A</b><b>N</b><b>A</b><b>G</b><b>E</b><b>M</b><b>E</b><b>N</b><b>T</b> <b>C</b><b>O</b><b>M</b><b>M</b><b>A</b><b>N</b><b>D</b><b>S</b>
+       <b>o</b><b>v</b><b>s</b><b>-</b><b>a</b><b>p</b><b>p</b><b>c</b><b>t</b><b>l</b>  can send commands to a running <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> process. The cur‐
+       rently supported commands are described below.
+
+              <b>e</b><b>x</b><b>i</b><b>t</b>   Causes <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> to gracefully terminate.
+
+              <b>p</b><b>a</b><b>u</b><b>s</b><b>e</b>  Pauses <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>. When it is paused, <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> receives
+                     changes  from  the  Northbound  and  Southbound  database
+                     changes  as  usual,  but  it does not send any updates. A
+                     paused <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> also drops database locks, which allows
+                     any other non-paused instance of <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> to take over.
+
+              <b>r</b><b>e</b><b>s</b><b>u</b><b>m</b><b>e</b> Resumes the ovn-northd operation  to  process  Northbound
+                     and  Southbound  database  contents  and generate logical
+                     flows. This will also instruct ovn-northd to  aspire  for
+                     the lock on SB DB.
+
+              <b>i</b><b>s</b><b>-</b><b>p</b><b>a</b><b>u</b><b>s</b><b>e</b><b>d</b>
+                     Returns "true" if ovn-northd is currently paused, "false"
+                     otherwise.
+
+              <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> Prints  this  server’s status. Status will be "active" if
+                     ovn-northd has acquired OVSDB lock on SB DB, "standby" if
+                     it has not or "paused" if this instance is paused.
+
+              <b>s</b><b>b</b><b>-</b><b>c</b><b>l</b><b>u</b><b>s</b><b>t</b><b>e</b><b>r</b><b>-</b><b>s</b><b>t</b><b>a</b><b>t</b><b>e</b><b>-</b><b>r</b><b>e</b><b>s</b><b>e</b><b>t</b>
+                     Reset southbound database cluster status  when  databases
+                     are destroyed and rebuilt.
+
+                     If  all  databases in a clustered southbound database are
+                     removed from disk, then the stored index of all databases
+                     will be reset to zero. This will cause ovn-northd  to  be
+                     unable  to  read or write to the southbound database, be‐
+                     cause it will always detect the data as stale. In such  a
+                     case,  run this command so that ovn-northd will reset its
+                     local index so that it can interact with  the  southbound
+                     database again.
+
+              <b>n</b><b>b</b><b>-</b><b>c</b><b>l</b><b>u</b><b>s</b><b>t</b><b>e</b><b>r</b><b>-</b><b>s</b><b>t</b><b>a</b><b>t</b><b>e</b><b>-</b><b>r</b><b>e</b><b>s</b><b>e</b><b>t</b>
+                     Reset  northbound  database cluster status when databases
+                     are destroyed and rebuilt.
+
+                     This performs the same task as <b>s</b><b>b</b><b>-</b><b>c</b><b>l</b><b>u</b><b>s</b><b>t</b><b>e</b><b>r</b><b>-</b><b>s</b><b>t</b><b>a</b><b>t</b><b>e</b><b>-</b><b>r</b><b>e</b><b>s</b><b>e</b><b>t</b> ex‐
+                     cept for the northbound database client.
+
+              <b>s</b><b>e</b><b>t</b><b>-</b><b>n</b><b>-</b><b>t</b><b>h</b><b>r</b><b>e</b><b>a</b><b>d</b><b>s</b> <b>N</b>
+                     Set the number  of  threads  used  for  building  logical
+                     flows.  When  N is within [2-256], parallelization is en‐
+                     abled. When N is 1 parallelization is disabled. When N is
+                     less than 1 or more than 256, an error  is  returned.  If
+                     ovn-northd  fails to start parallelization (e.g. fails to
+                     setup semaphores, parallelization is disabled and an  er‐
+                     ror is returned.
+
+              <b>g</b><b>e</b><b>t</b><b>-</b><b>n</b><b>-</b><b>t</b><b>h</b><b>r</b><b>e</b><b>a</b><b>d</b><b>s</b>
+                     Return  the  number  of threads used for building logical
+                     flows.
+
+              <b>i</b><b>n</b><b>c</b><b>-</b><b>e</b><b>n</b><b>g</b><b>i</b><b>n</b><b>e</b><b>/</b><b>s</b><b>h</b><b>o</b><b>w</b><b>-</b><b>s</b><b>t</b><b>a</b><b>t</b><b>s</b>
+                     Display <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> engine counters. For each engine  node
+                     the following counters have been added:
+
+                     •      <b>r</b><b>e</b><b>c</b><b>o</b><b>m</b><b>p</b><b>u</b><b>t</b><b>e</b>
+
+                     •      <b>c</b><b>o</b><b>m</b><b>p</b><b>u</b><b>t</b><b>e</b>
+
+                     •      <b>a</b><b>b</b><b>o</b><b>r</b><b>t</b>
+
+              <b>i</b><b>n</b><b>c</b><b>-</b><b>e</b><b>n</b><b>g</b><b>i</b><b>n</b><b>e</b><b>/</b><b>s</b><b>h</b><b>o</b><b>w</b><b>-</b><b>s</b><b>t</b><b>a</b><b>t</b><b>s</b> <u>e</u><u>n</u><u>g</u><u>i</u><u>n</u><u>e</u><b>_</b><u>n</u><u>o</u><u>d</u><u>e</u><b>_</b><u>n</u><u>a</u><u>m</u><u>e</u> <u>c</u><u>o</u><u>u</u><u>n</u><u>t</u><u>e</u><u>r</u><b>_</b><u>n</u><u>a</u><u>m</u><u>e</u>
+                     Display  the  <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> engine counter(s) for the speci‐
+                     fied <u>e</u><u>n</u><u>g</u><u>i</u><u>n</u><u>e</u><b>_</b><u>n</u><u>o</u><u>d</u><u>e</u><b>_</b><u>n</u><u>a</u><u>m</u><u>e</u>. <u>c</u><u>o</u><u>u</u><u>n</u><u>t</u><u>e</u><u>r</u><b>_</b><u>n</u><u>a</u><u>m</u><u>e</u> is optional  and  can
+                     be one of <b>r</b><b>e</b><b>c</b><b>o</b><b>m</b><b>p</b><b>u</b><b>t</b><b>e</b>, <b>c</b><b>o</b><b>m</b><b>p</b><b>u</b><b>t</b><b>e</b> or <b>a</b><b>b</b><b>o</b><b>r</b><b>t</b>.
+
+              <b>i</b><b>n</b><b>c</b><b>-</b><b>e</b><b>n</b><b>g</b><b>i</b><b>n</b><b>e</b><b>/</b><b>c</b><b>l</b><b>e</b><b>a</b><b>r</b><b>-</b><b>s</b><b>t</b><b>a</b><b>t</b><b>s</b>
+                     Reset <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> engine counters.
+
+       Only <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b><b>-</b><b>d</b><b>d</b><b>l</b><b>o</b><b>g</b> supports the following commands:
+
+              <b>e</b><b>n</b><b>a</b><b>b</b><b>l</b><b>e</b><b>-</b><b>c</b><b>p</b><b>u</b><b>-</b><b>p</b><b>r</b><b>o</b><b>f</b><b>i</b><b>l</b><b>i</b><b>n</b><b>g</b>
+              <b>d</b><b>i</b><b>s</b><b>a</b><b>b</b><b>l</b><b>e</b><b>-</b><b>c</b><b>p</b><b>u</b><b>-</b><b>p</b><b>r</b><b>o</b><b>f</b><b>i</b><b>l</b><b>i</b><b>n</b><b>g</b>
+                   Enables or disables profiling of CPU time used by the DDlog
+                   engine.  When CPU profiling is enabled, the <b>p</b><b>r</b><b>o</b><b>f</b><b>i</b><b>l</b><b>e</b> command
+                   (see below) will include DDlog CPU usage statistics in  its
+                   output.  Enabling CPU profiling will slow <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b><b>-</b><b>d</b><b>d</b><b>l</b><b>o</b><b>g</b>.
+                   Disabling CPU  profiling  does  not  clear  any  previously
+                   recorded statistics.
+
+              <b>p</b><b>r</b><b>o</b><b>f</b><b>i</b><b>l</b><b>e</b>
+                   Outputs a profile of the current and peak sizes of arrange‐
+                   ments  inside  DDlog. This profiling data can be useful for
+                   optimizing DDlog code. If CPU profiling was previously  en‐
+                   abled  (even if it was later disabled), the output also in‐
+                   cludes a CPU time profile. See <b>P</b><b>r</b><b>o</b><b>f</b><b>i</b><b>l</b><b>i</b><b>n</b><b>g</b> inside the  tutor‐
+                   ial  in the DDlog repository for an introduction to profil‐
+                   ing DDlog.
+
+<b>A</b><b>C</b><b>T</b><b>I</b><b>V</b><b>E</b><b>-</b><b>S</b><b>T</b><b>A</b><b>N</b><b>D</b><b>B</b><b>Y</b> <b>F</b><b>O</b><b>R</b> <b>H</b><b>I</b><b>G</b><b>H</b> <b>A</b><b>V</b><b>A</b><b>I</b><b>L</b><b>A</b><b>B</b><b>I</b><b>L</b><b>I</b><b>T</b><b>Y</b>
+       You may run <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> more than once in an OVN deployment.  When  con‐
+       nected  to  a  standalone or clustered DB setup, OVN will automatically
+       ensure that only one of them is active at a time. If multiple instances
+       of <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> are running and the active <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> fails, one  of  the
+       hot standby instances of <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> will automatically take over.
+
+   <b>A</b><b>c</b><b>t</b><b>i</b><b>v</b><b>e</b><b>-</b><b>S</b><b>t</b><b>a</b><b>n</b><b>d</b><b>b</b><b>y</b> <b>w</b><b>i</b><b>t</b><b>h</b> <b>m</b><b>u</b><b>l</b><b>t</b><b>i</b><b>p</b><b>l</b><b>e</b> <b>O</b><b>V</b><b>N</b> <b>D</b><b>B</b> <b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b><b>s</b>
+       You may run multiple OVN DB servers in an OVN deployment with:
+
+              •      OVN  DB  servers deployed in active/passive mode with one
+                     active and multiple passive ovsdb-servers.
+
+              •      <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> also deployed on all these nodes,  using  unix
+                     ctl sockets to connect to the local OVN DB servers.
+
+       In  such deployments, the ovn-northds on the passive nodes will process
+       the DB changes and compute logical flows to be thrown  out  later,  be‐
+       cause  write transactions are not allowed by the passive ovsdb-servers.
+       It results in unnecessary CPU usage.
+
+       With the help of  runtime  management  command  <b>p</b><b>a</b><b>u</b><b>s</b><b>e</b>,  you  can  pause
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>  on these nodes. When a passive node becomes master, you can
+       use the runtime management command <b>r</b><b>e</b><b>s</b><b>u</b><b>m</b><b>e</b> to resume the  <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>  to
+       process the DB changes.
+
+<b>L</b><b>O</b><b>G</b><b>I</b><b>C</b><b>A</b><b>L</b> <b>F</b><b>L</b><b>O</b><b>W</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b> <b>S</b><b>T</b><b>R</b><b>U</b><b>C</b><b>T</b><b>U</b><b>R</b><b>E</b>
+       One  of the main purposes of <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> is to populate the <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>F</b><b>l</b><b>o</b><b>w</b>
+       table in  the  <b>O</b><b>V</b><b>N</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b>  database.  This  section  describes  how
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> does this for switch and router logical datapaths.
+
+   <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b> <b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b> <b>D</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>s</b>
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>0</u><u>:</u> <u>A</u><u>d</u><u>m</u><u>i</u><u>s</u><u>s</u><u>i</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>n</u><u>t</u><u>r</u><u>o</u><u>l</u> <u>a</u><u>n</u><u>d</u> <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>P</u><u>o</u><u>r</u><u>t</u> <u>S</u><u>e</u><u>c</u><u>u</u><u>r</u><u>i</u><u>t</u><u>y</u> <u>c</u><u>h</u><u>e</u><u>c</u><u>k</u>
+
+       Ingress table 0 contains these logical flows:
+
+              •      Priority 100 flows to drop packets with VLAN tags or mul‐
+                     ticast Ethernet source addresses.
+
+              •      For  each  disabled  logical port, a priority 100 flow is
+                     added which matches on all packets and applies the action
+                     <b>R</b><b>E</b><b>G</b><b>B</b><b>I</b><b>T</b><b>_</b><b>P</b><b>O</b><b>R</b><b>T</b><b>_</b><b>S</b><b>E</b><b>C</b><b>_</b><b>D</b><b>R</b><b>O</b><b>P</b><b>"</b> <b>=</b> <b>1</b><b>;</b> <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b><b>"</b> so that the packets are
+                     dropped in the next stage.
+
+              •      For each (enabled) vtep logical port, a priority 70  flow
+                     is added which matches on all packets and applies the ac‐
+                     tion  <b>n</b><b>e</b><b>x</b><b>t</b><b>(</b><b>p</b><b>i</b><b>p</b><b>e</b><b>l</b><b>i</b><b>n</b><b>e</b><b>=</b><b>i</b><b>n</b><b>g</b><b>r</b><b>e</b><b>s</b><b>s</b><b>,</b> <b>t</b><b>a</b><b>b</b><b>l</b><b>e</b><b>=</b><b>S</b><b>_</b><b>S</b><b>W</b><b>I</b><b>T</b><b>C</b><b>H</b><b>_</b><b>I</b><b>N</b><b>_</b><b>L</b><b>2</b><b>_</b><b>L</b><b>K</b><b>U</b><b>P</b><b>)</b> <b>=</b>
+                     <b>1</b><b>;</b> to skip most stages of ingress  pipeline  and  go  di‐
+                     rectly to ingress L2 lookup table to determine the output
+                     port.  Packets from VTEP (RAMP) switch should not be sub‐
+                     jected to any ACL checks. Egress pipeline will do the ACL
+                     checks.
+
+              •      For each enabled logical port configured with qdisc queue
+                     id  in  the  <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>q</b><b>d</b><b>i</b><b>s</b><b>c</b><b>_</b><b>q</b><b>u</b><b>e</b><b>u</b><b>e</b><b>_</b><b>i</b><b>d</b>   column   of   <b>L</b><b>o</b><b>g</b><b>i</b>‐‐
+                     <b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b>,  a  priority  70  flow  is  added  which
+                     matches  on  all   packets   and   applies   the   action
+                     <b>s</b><b>e</b><b>t</b><b>_</b><b>q</b><b>u</b><b>e</b><b>u</b><b>e</b><b>(</b><b>i</b><b>d</b><b>)</b><b>;</b>           <b>R</b><b>E</b><b>G</b><b>B</b><b>I</b><b>T</b><b>_</b><b>P</b><b>O</b><b>R</b><b>T</b><b>_</b><b>S</b><b>E</b><b>C</b><b>_</b><b>D</b><b>R</b><b>O</b><b>P</b><b>"</b>          <b>=</b>
+                     <b>c</b><b>h</b><b>e</b><b>c</b><b>k</b><b>_</b><b>i</b><b>n</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b><b>_</b><b>s</b><b>e</b><b>c</b><b>(</b><b>)</b><b>;</b> <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b><b>"</b>.
+
+              •      A priority 1 flow is added which matches on  all  packets
+                     for  all  the  logical  ports and applies the action <b>R</b><b>E</b><b>G</b>‐‐
+                     <b>B</b><b>I</b><b>T</b><b>_</b><b>P</b><b>O</b><b>R</b><b>T</b><b>_</b><b>S</b><b>E</b><b>C</b><b>_</b><b>D</b><b>R</b><b>O</b><b>P</b><b>"</b> <b>=</b> <b>c</b><b>h</b><b>e</b><b>c</b><b>k</b><b>_</b><b>i</b><b>n</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b><b>_</b><b>s</b><b>e</b><b>c</b><b>(</b><b>)</b><b>;</b> <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b> to evalu‐
+                     ate the port security. The action  <b>c</b><b>h</b><b>e</b><b>c</b><b>k</b><b>_</b><b>i</b><b>n</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b><b>_</b><b>s</b><b>e</b><b>c</b>  ap‐
+                     plies  the  port security rules defined in the <b>p</b><b>o</b><b>r</b><b>t</b><b>_</b><b>s</b><b>e</b><b>c</b><b>u</b>‐‐
+                     <b>r</b><b>i</b><b>t</b><b>y</b> column of <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b> table.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>1</u><u>:</u> <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>P</u><u>o</u><u>r</u><u>t</u> <u>S</u><u>e</u><u>c</u><u>u</u><u>r</u><u>i</u><u>t</u><u>y</u> <u>-</u> <u>A</u><u>p</u><u>p</u><u>l</u><u>y</u>
+
+       This table drops the packets if the port security check failed  in  the
+       previous stage i.e the register bit <b>R</b><b>E</b><b>G</b><b>B</b><b>I</b><b>T</b><b>_</b><b>P</b><b>O</b><b>R</b><b>T</b><b>_</b><b>S</b><b>E</b><b>C</b><b>_</b><b>D</b><b>R</b><b>O</b><b>P</b> is set to 1.
+
+       Ingress table 1 contains these logical flows:
+
+              •      A  priority-50 fallback flow that drops the packet if the
+                     register bit <b>R</b><b>E</b><b>G</b><b>B</b><b>I</b><b>T</b><b>_</b><b>P</b><b>O</b><b>R</b><b>T</b><b>_</b><b>S</b><b>E</b><b>C</b><b>_</b><b>D</b><b>R</b><b>O</b><b>P</b> is set to 1.
+
+              •      One priority-0 fallback flow that matches all packets and
+                     advances to the next table.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>2</u><u>:</u> <u>L</u><u>o</u><u>o</u><u>k</u><u>u</u><u>p</u> <u>M</u><u>A</u><u>C</u> <u>a</u><u>d</u><u>d</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>l</u><u>e</u><u>a</u><u>r</u><u>n</u><u>i</u><u>n</u><u>g</u> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>
+
+       This table looks up the MAC learning table of the logical switch  data‐
+       path to check if the <b>p</b><b>o</b><b>r</b><b>t</b><b>-</b><b>m</b><b>a</b><b>c</b> pair is present or not. MAC is learnt for
+       logical  switch VIF ports whose port security is disabled and ’unknown’
+       address  setn  as  well  as  for  localnet  ports  with  option  local‐
+       net_learn_fdb.  A localnet port entry does not overwrite a VIF port en‐
+       try.
+
+              •      For each such VIF logical port <u>p</u> whose port  security  is
+                     disabled  and  ’unknown’  address  set  following flow is
+                     added.
+
+                     •      Priority 100 flow with the match <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b>  <u>p</u>  and
+                            action  <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>1</b><b>1</b><b>]</b>  <b>=</b>  <b>l</b><b>o</b><b>o</b><b>k</b><b>u</b><b>p</b><b>_</b><b>f</b><b>d</b><b>b</b><b>(</b><b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b><b>,</b>  <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b><b>)</b><b>;</b>
+                            <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>
+
+              •      For each such localnet logical port <u>p</u> following  flow  is
+                     added.
+
+                     •      Priority  100  flow with the match <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b> <u>p</u> and
+                            action   <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b>   <b>=</b>    <b>1</b><b>;</b>    <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>1</b><b>1</b><b>]</b>    <b>=</b>
+                            <b>l</b><b>o</b><b>o</b><b>k</b><b>u</b><b>p</b><b>_</b><b>f</b><b>d</b><b>b</b><b>(</b><b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b><b>,</b> <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b><b>)</b><b>;</b> <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>
+
+              •      One priority-0 fallback flow that matches all packets and
+                     advances to the next table.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>3</u><u>:</u> <u>L</u><u>e</u><u>a</u><u>r</u><u>n</u> <u>M</u><u>A</u><u>C</u> <u>o</u><u>f</u> <u>�</u>��<u>u</u><u>n</u><u>k</u><u>n</u><u>o</u><u>w</u><u>n</u><u>�</u>�� <u>p</u><u>o</u><u>r</u><u>t</u><u>s</u><u>.</u>
+
+       This table learns the MAC addresses seen on the VIF logical ports whose
+       port  security  is disabled and ’unknown’ address set as well as on lo‐
+       calnet ports with localnet_learn_fdb option set if the  <b>l</b><b>o</b><b>o</b><b>k</b><b>u</b><b>p</b><b>_</b><b>f</b><b>d</b><b>b</b>  ac‐
+       tion  returned  false  in  the previous table. For localnet ports (with
+       flags.localnet = 1), lookup_fdb returns true if (port, mac) is found or
+       if a mac is found for a port of type vif.
+
+              •      For each such VIF logical port <u>p</u> whose port  security  is
+                     disabled and ’unknown’ address set and localnet port fol‐
+                     lowing flow is added.
+
+                     •      Priority  100  flow  with the match <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b> <u>p</u> &amp;&amp;&amp;&amp;
+                            <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>1</b><b>1</b><b>]</b> <b>=</b><b>=</b> <b>0</b> and action <b>p</b><b>u</b><b>t</b><b>_</b><b>f</b><b>d</b><b>b</b><b>(</b><b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b><b>,</b> <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b><b>)</b><b>;</b>
+                            <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b> which stores the <b>p</b><b>o</b><b>r</b><b>t</b><b>-</b><b>m</b><b>a</b><b>c</b> in the mac  learn‐
+                            ing  table  of the logical switch datapath and ad‐
+                            vances the packet to the next table.
+
+              •      One priority-0 fallback flow that matches all packets and
+                     advances to the next table.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>4</u><u>:</u> <b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b> <u>P</u><u>r</u><u>e</u><u>-</u><u>A</u><u>C</u><u>L</u><u>s</u>
+
+       This table prepares flows  for  possible  stateful  ACL  processing  in
+       ingress  table  <b>A</b><b>C</b><b>L</b><b>s</b>.  It  contains a priority-0 flow that simply moves
+       traffic to the next table. If stateful ACLs are  used  in  the  logical
+       datapath, a priority-100 flow is added that sets a hint (with <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>0</b><b>]</b> <b>=</b>
+       <b>1</b><b>;</b>  <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>)  for table <b>P</b><b>r</b><b>e</b><b>-</b><b>s</b><b>t</b><b>a</b><b>t</b><b>e</b><b>f</b><b>u</b><b>l</b> to send IP packets to the connection
+       tracker before eventually advancing to ingress table <b>A</b><b>C</b><b>L</b><b>s</b>.  If  special
+       ports  such  as  route ports or localnet ports can’t use ct(), a prior‐
+       ity-110 flow is added to  skip  over  stateful  ACLs.  Multicast,  IPv6
+       Neighbor  Discovery  and MLD traffic also skips stateful ACLs. For "al‐
+       low-stateless" ACLs, a flow is added to bypass  setting  the  hint  for
+       connection tracker processing when there are stateful ACLs or LB rules;
+       <b>R</b><b>E</b><b>G</b><b>B</b><b>I</b><b>T</b><b>_</b><b>A</b><b>C</b><b>L</b><b>_</b><b>S</b><b>T</b><b>A</b><b>T</b><b>E</b><b>L</b><b>E</b><b>S</b><b>S</b> is set for traffic matching stateless ACL flows.
+
+       This table also has a priority-110 flow with the match <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <u>E</u> for
+       all logical switch datapaths to move traffic to the next table. Where <u>E</u>
+       is  the service monitor mac defined in the <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>s</b><b>v</b><b>c</b><b>_</b><b>m</b><b>o</b><b>n</b><b>i</b><b>t</b><b>o</b><b>r</b><b>_</b><b>m</b><b>a</b><b>c</b> col‐
+       umn of <b>N</b><b>B</b><b>_</b><b>G</b><b>l</b><b>o</b><b>b</b><b>a</b><b>l</b> table.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>5</u><u>:</u> <u>P</u><u>r</u><u>e</u><u>-</u><u>L</u><u>B</u>
+
+       This table prepares flows for possible stateful load balancing process‐
+       ing in ingress table <b>L</b><b>B</b> and <b>S</b><b>t</b><b>a</b><b>t</b><b>e</b><b>f</b><b>u</b><b>l</b>. It  contains  a  priority-0  flow
+       that  simply  moves traffic to the next table. Moreover it contains two
+       priority-110 flows to move multicast, IPv6 Neighbor Discovery  and  MLD
+       traffic  to  the next table. It also contains two priority-110 flows to
+       move stateless traffic, i.e traffic for which  <b>R</b><b>E</b><b>G</b><b>B</b><b>I</b><b>T</b><b>_</b><b>A</b><b>C</b><b>L</b><b>_</b><b>S</b><b>T</b><b>A</b><b>T</b><b>E</b><b>L</b><b>E</b><b>S</b><b>S</b>  is
+       set,  to  the  next  table. If load balancing rules with virtual IP ad‐
+       dresses (and ports) are configured in  <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b>  database  for  a
+       logical switch datapath, a priority-100 flow is added with the match <b>i</b><b>p</b>
+       to match on IP packets and sets the action <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>2</b><b>]</b> <b>=</b> <b>1</b><b>;</b> <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b> to act as
+       a  hint  for  table  <b>P</b><b>r</b><b>e</b><b>-</b><b>s</b><b>t</b><b>a</b><b>t</b><b>e</b><b>f</b><b>u</b><b>l</b>  to send IP packets to the connection
+       tracker for packet de-fragmentation (and to possibly do  DNAT  for  al‐
+       ready established load balanced traffic) before eventually advancing to
+       ingress  table  <b>S</b><b>t</b><b>a</b><b>t</b><b>e</b><b>f</b><b>u</b><b>l</b>. If controller_event has been enabled and load
+       balancing rules with empty backends have been added in  <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b>,
+       a 130 flow is added to trigger ovn-controller events whenever the chas‐
+       sis  receives  a packet for that particular VIP. If <b>e</b><b>v</b><b>e</b><b>n</b><b>t</b><b>-</b><b>e</b><b>l</b><b>b</b> meter has
+       been previously created, it will be associated to the empty_lb  logical
+       flow
+
+       Prior  to <b>O</b><b>V</b><b>N</b> <b>2</b><b>0</b><b>.</b><b>0</b><b>9</b> we were setting the <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>0</b><b>]</b> <b>=</b> <b>1</b> only if the IP des‐
+       tination matches the load balancer VIP. However  this  had  few  issues
+       cases  where  a logical switch doesn’t have any ACLs with <b>a</b><b>l</b><b>l</b><b>o</b><b>w</b><b>-</b><b>r</b><b>e</b><b>l</b><b>a</b><b>t</b><b>e</b><b>d</b>
+       action. To understand the issue lets a  take  a  TCP  load  balancer  -
+       <b>1</b><b>0</b><b>.</b><b>0</b><b>.</b><b>0</b><b>.</b><b>1</b><b>0</b><b>:</b><b>8</b><b>0</b><b>=</b><b>1</b><b>0</b><b>.</b><b>0</b><b>.</b><b>0</b><b>.</b><b>3</b><b>:</b><b>8</b><b>0</b>.  If  a  logical  port - p1 with IP - 10.0.0.5
+       opens a TCP connection with the VIP - 10.0.0.10, then the packet in the
+       ingress pipeline of ’p1’ is sent to the p1’s conntrack zone id and  the
+       packet is load balanced to the backend - 10.0.0.3. For the reply packet
+       from  the  backend  lport,  it  is not sent to the conntrack of backend
+       lport’s zone id. This is fine as long as the packet is  valid.  Suppose
+       the  backend lport sends an invalid TCP packet (like incorrect sequence
+       number), the packet gets delivered to the lport ’p1’ without  unDNATing
+       the packet to the VIP - 10.0.0.10. And this causes the connection to be
+       reset by the lport p1’s VIF.
+
+       We can’t fix this issue by adding a logical flow to drop ct.inv packets
+       in  the  egress  pipeline  since it will drop all other connections not
+       destined to the load balancers. To fix this  issue,  we  send  all  the
+       packets  to the conntrack in the ingress pipeline if a load balancer is
+       configured. We can now add a lflow to drop ct.inv packets.
+
+       This table also has priority-120 flows that punt all  IGMP/MLD  packets
+       to  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>  if the switch is an interconnect switch with multi‐
+       cast snooping enabled.
+
+       This table also has a priority-110 flow with the match <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <u>E</u> for
+       all logical switch datapaths to move traffic to the next table. Where <u>E</u>
+       is the service monitor mac defined in the <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>s</b><b>v</b><b>c</b><b>_</b><b>m</b><b>o</b><b>n</b><b>i</b><b>t</b><b>o</b><b>r</b><b>_</b><b>m</b><b>a</b><b>c</b>  col‐
+       umn of <b>N</b><b>B</b><b>_</b><b>G</b><b>l</b><b>o</b><b>b</b><b>a</b><b>l</b> table.
+
+       This  table also has a priority-110 flow with the match <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b> <u>I</u> for
+       all logical switch datapaths to move traffic to the next table. Where <u>I</u>
+       is the peer of a logical router port. This flow is added  to  skip  the
+       connection tracking of packets which enter from logical router datapath
+       to logical switch datapath.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>6</u><u>:</u> <u>P</u><u>r</u><u>e</u><u>-</u><u>s</u><u>t</u><u>a</u><u>t</u><u>e</u><u>f</u><u>u</u><u>l</u>
+
+       This  table prepares flows for all possible stateful processing in next
+       tables. It contains a priority-0 flow that simply moves traffic to  the
+       next table.
+
+              •      Priority-120  flows  that  send the packets to connection
+                     tracker using <b>c</b><b>t</b><b>_</b><b>l</b><b>b</b><b>_</b><b>m</b><b>a</b><b>r</b><b>k</b><b>;</b> as the action so that  the  al‐
+                     ready  established  traffic destined to the load balancer
+                     VIP gets DNATted. These flows  match  each  VIPs  IP  and
+                     port.  For  IPv4 traffic the flows also load the original
+                     destination IP and transport port in registers  <b>r</b><b>e</b><b>g</b><b>1</b>  and
+                     <b>r</b><b>e</b><b>g</b><b>2</b>.  For  IPv6 traffic the flows also load the original
+                     destination IP and transport port in registers <b>x</b><b>x</b><b>r</b><b>e</b><b>g</b><b>1</b> and
+                     <b>r</b><b>e</b><b>g</b><b>2</b>.
+
+              •      A priority-110 flow sends the packets  that  don’t  match
+                     the  above  flows  to  connection tracker based on a hint
+                     provided by the previous tables (with a match for <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>2</b><b>]</b>
+                     <b>=</b><b>=</b> <b>1</b>) by using the <b>c</b><b>t</b><b>_</b><b>l</b><b>b</b><b>_</b><b>m</b><b>a</b><b>r</b><b>k</b><b>;</b> action.
+
+              •      A priority-100  flow  sends  the  packets  to  connection
+                     tracker  based  on a hint provided by the previous tables
+                     (with a match for <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>0</b><b>]</b> <b>=</b><b>=</b> <b>1</b>) by using the <b>c</b><b>t</b><b>_</b><b>n</b><b>e</b><b>x</b><b>t</b><b>;</b> ac‐
+                     tion.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>7</u><u>:</u> <b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b> <u>A</u><u>C</u><u>L</u> <u>h</u><u>i</u><u>n</u><u>t</u><u>s</u>
+
+       This table consists of logical flows that set hints (<b>r</b><b>e</b><b>g</b><b>0</b> bits)  to  be
+       used  in  the next stage, in the ACL processing table, if stateful ACLs
+       or load balancers are configured. Multiple hints can  be  set  for  the
+       same packet. The possible hints are:
+
+              •      <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>7</b><b>]</b>:  the packet might match an <b>a</b><b>l</b><b>l</b><b>o</b><b>w</b><b>-</b><b>r</b><b>e</b><b>l</b><b>a</b><b>t</b><b>e</b><b>d</b> ACL and
+                     might have to commit the connection to conntrack.
+
+              •      <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>8</b><b>]</b>: the packet might match an <b>a</b><b>l</b><b>l</b><b>o</b><b>w</b><b>-</b><b>r</b><b>e</b><b>l</b><b>a</b><b>t</b><b>e</b><b>d</b> ACL  but
+                     there  will  be  no need to commit the connection to con‐
+                     ntrack because it already exists.
+
+              •      <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>9</b><b>]</b>: the packet might match a <b>d</b><b>r</b><b>o</b><b>p</b><b>/</b><b>r</b><b>e</b><b>j</b><b>e</b><b>c</b><b>t</b>.
+
+              •      <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>1</b><b>0</b><b>]</b>: the packet might match a  <b>d</b><b>r</b><b>o</b><b>p</b><b>/</b><b>r</b><b>e</b><b>j</b><b>e</b><b>c</b><b>t</b>  ACL  but
+                     the connection was previously allowed so it might have to
+                     be committed again with <b>c</b><b>t</b><b>_</b><b>l</b><b>a</b><b>b</b><b>e</b><b>l</b><b>=</b><b>1</b><b>/</b><b>1</b>.
+
+       The table contains the following flows:
+
+              •      A priority-65535 flow to advance to the next table if the
+                     logical switch has <b>n</b><b>o</b> ACLs configured, otherwise a prior‐
+                     ity-0 flow to advance to the next table.
+
+              •      A priority-7 flow that matches on packets that initiate a
+                     new  session. This flow sets <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>7</b><b>]</b> and <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>9</b><b>]</b> and then
+                     advances to the next table.
+
+              •      A priority-6 flow that matches on packets that are in the
+                     request direction of an already existing session that has
+                     been marked  as  blocked.  This  flow  sets  <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>7</b><b>]</b>  and
+                     <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>9</b><b>]</b> and then advances to the next table.
+
+              •      A  priority-5  flow  that matches untracked packets. This
+                     flow sets <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>8</b><b>]</b> and <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>9</b><b>]</b> and then  advances  to  the
+                     next table.
+
+              •      A priority-4 flow that matches on packets that are in the
+                     request direction of an already existing session that has
+                     not  been  marked  as blocked. This flow sets <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>8</b><b>]</b> and
+                     <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>1</b><b>0</b><b>]</b> and then advances to the next table.
+
+              •      A priority-3 flow that matches on packets that are in not
+                     part of established sessions. This flow sets <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>9</b><b>]</b>  and
+                     then advances to the next table.
+
+              •      A  priority-2  flow that matches on packets that are part
+                     of  an  established  session  that  has  been  marked  as
+                     blocked.  This flow sets <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>9</b><b>]</b> and then advances to the
+                     next table.
+
+              •      A priority-1 flow that matches on packets that  are  part
+                     of  an  established  session  that has not been marked as
+                     blocked. This flow sets <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>1</b><b>0</b><b>]</b> and then advances to the
+                     next table.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>8</u><u>:</u> <b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b> <u>A</u><u>C</u><u>L</u> <u>e</u><u>v</u><u>a</u><u>l</u><u>u</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u> <u>b</u><u>e</u><u>f</u><u>o</u><u>r</u><u>e</u> <u>L</u><u>B</u>
+
+       Logical flows in this table closely reproduce those in the <b>A</b><b>C</b><b>L</b> table in
+       the <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database for the <b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b>  direction  without  the
+       option <b>a</b><b>p</b><b>p</b><b>l</b><b>y</b><b>-</b><b>a</b><b>f</b><b>t</b><b>e</b><b>r</b><b>-</b><b>l</b><b>b</b> set or set to <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>. The <b>p</b><b>r</b><b>i</b><b>o</b><b>r</b><b>i</b><b>t</b><b>y</b> values from the
+       <b>A</b><b>C</b><b>L</b>  table  have  a  limited range and have 1000 added to them to leave
+       room for OVN default flows at both higher and lower priorities.
+
+              •      This table is responsible for evaluating ACLs,  and  set‐
+                     ting  a  register bit to indicate whether the ACL decided
+                     to allow, drop, or reject the traffic. The allow  bit  is
+                     <b>r</b><b>e</b><b>g</b><b>8</b><b>[</b><b>1</b><b>6</b><b>]</b>. The drop bit is <b>r</b><b>e</b><b>g</b><b>8</b><b>[</b><b>1</b><b>7</b><b>]</b>. All flows in this ta‐
+                     ble  will advance the packet to the next table, where the
+                     bits from before are evaluated to determine  what  to  do
+                     with  the packet. Any flows in this table that intend for
+                     the packet to pass will set <b>r</b><b>e</b><b>g</b><b>8</b><b>[</b><b>1</b><b>6</b><b>]</b> to 1, even if an ACL
+                     with an allow-type action was not matched. This lets  the
+                     next  table know to allow the traffic to pass. These bits
+                     will be referred to as the "allow", "drop", and  "reject"
+                     bits in the upcoming paragraphs.
+
+              •      If  the  <b>t</b><b>i</b><b>e</b><b>r</b> column has been configured on the ACL, then
+                     OVN will also match the current tier counter against  the
+                     configured  ACL tier. OVN keeps count of the current tier
+                     in <b>r</b><b>e</b><b>g</b><b>8</b><b>[</b><b>3</b><b>0</b><b>.</b><b>.</b><b>3</b><b>1</b><b>]</b>.
+
+              •      <b>a</b><b>l</b><b>l</b><b>o</b><b>w</b> ACLs translate into logical flows that set the  al‐
+                     low bit to 1 and advance the packet to the next table. If
+                     there  are any stateful ACLs on this datapath, then <b>a</b><b>l</b><b>l</b><b>o</b><b>w</b>
+                     ACLs set the allow bit to one  and  in  addition  perform
+                     <b>c</b><b>t</b><b>_</b><b>c</b><b>o</b><b>m</b><b>m</b><b>i</b><b>t</b><b>;</b>  (which  acts  as  a hint for future tables to
+                     commit the connection to conntrack). In case the <b>A</b><b>C</b><b>L</b>  has
+                     a  label  then  <b>r</b><b>e</b><b>g</b><b>3</b>  is  loaded with the label value and
+                     <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>1</b><b>3</b><b>]</b> bit is set to 1 (which acts as a  hint  for  the
+                     next tables to commit the label to conntrack).
+
+              •      <b>a</b><b>l</b><b>l</b><b>o</b><b>w</b><b>-</b><b>r</b><b>e</b><b>l</b><b>a</b><b>t</b><b>e</b><b>d</b>  ACLs translate into logical flows that set
+                     the allow  bit  and  additionally  have  <b>c</b><b>t</b><b>_</b><b>c</b><b>o</b><b>m</b><b>m</b><b>i</b><b>t</b><b>(</b><b>c</b><b>t</b><b>_</b><b>l</b><b>a</b>‐‐
+                     <b>b</b><b>e</b><b>l</b><b>=</b><b>0</b><b>/</b><b>1</b><b>)</b><b>;</b> <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b> actions for new connections and <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>1</b><b>]</b> <b>=</b>
+                     <b>1</b><b>;</b>  <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b> for existing connections. In case the <b>A</b><b>C</b><b>L</b> has a
+                     label then <b>r</b><b>e</b><b>g</b><b>3</b>  is  loaded  with  the  label  value  and
+                     <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>1</b><b>3</b><b>]</b>  bit  is  set to 1 (which acts as a hint for the
+                     next tables to commit the label to conntrack).
+
+              •      <b>a</b><b>l</b><b>l</b><b>o</b><b>w</b><b>-</b><b>s</b><b>t</b><b>a</b><b>t</b><b>e</b><b>l</b><b>e</b><b>s</b><b>s</b> ACLs translate into  logical  flows  that
+                     set the allow bit and advance to the next table.
+
+              •      <b>r</b><b>e</b><b>j</b><b>e</b><b>c</b><b>t</b>  ACLs  translate  into logical flows with that set
+                     the reject bit and advance to the next table.
+
+              •      <b>p</b><b>a</b><b>s</b><b>s</b> ACLs translate into logical flows that  do  not  set
+                     the  allow,  drop,  or reject bit and advance to the next
+                     table.
+
+              •      Other ACLs set the drop bit and advance to the next table
+                     for new or untracked connections. For known  connections,
+                     they  set  the  drop  bit, as well as running the <b>c</b><b>t</b><b>_</b><b>c</b><b>o</b><b>m</b>‐‐
+                     <b>m</b><b>i</b><b>t</b><b>(</b><b>c</b><b>t</b><b>_</b><b>l</b><b>a</b><b>b</b><b>e</b><b>l</b><b>=</b><b>1</b><b>/</b><b>1</b><b>)</b><b>;</b> action. Setting <b>c</b><b>t</b><b>_</b><b>l</b><b>a</b><b>b</b><b>e</b><b>l</b> marks a  con‐
+                     nection as one that was previously allowed, but should no
+                     longer be allowed due to a policy change.
+
+       This  table contains a priority-65535 flow to set the allow bit and ad‐
+       vance to the next table if the logical switch has <b>n</b><b>o</b>  ACLs  configured,
+       otherwise a priority-0 flow to advance to the next table is added. This
+       flow  does  not  set  the  allow bit, so that the next table can decide
+       whether to allow or drop the packet based  on  the  value  of  the  <b>o</b><b>p</b>‐‐
+       <b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>d</b><b>e</b><b>f</b><b>a</b><b>u</b><b>l</b><b>t</b><b>_</b><b>a</b><b>c</b><b>l</b><b>_</b><b>d</b><b>r</b><b>o</b><b>p</b> column of the <b>N</b><b>B</b><b>_</b><b>G</b><b>l</b><b>o</b><b>b</b><b>a</b><b>l</b> table.
+
+       A  priority-65532 flow is added that sets the allow bit for IPv6 Neigh‐
+       bor solicitation, Neighbor discover, Router solicitation, Router adver‐
+       tisement and MLD packets regardless of other ACLs defined.
+
+       If the logical datapath has a stateful ACL or a load balancer with  VIP
+       configured, the following flows will also be added:
+
+              •      If  <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>d</b><b>e</b><b>f</b><b>a</b><b>u</b><b>l</b><b>t</b><b>_</b><b>a</b><b>c</b><b>l</b><b>_</b><b>d</b><b>r</b><b>o</b><b>p</b> column of <b>N</b><b>B</b><b>_</b><b>G</b><b>l</b><b>o</b><b>b</b><b>a</b><b>l</b> is <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+                     or not set, a priority-1 flow that sets the hint to  com‐
+                     mit  IP  traffic that is not part of established sessions
+                     to the connection  tracker  (with  action  <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>1</b><b>]</b>  <b>=</b>  <b>1</b><b>;</b>
+                     <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>).  This  is needed for the default allow policy be‐
+                     cause, while the initiator’s direction may not  have  any
+                     stateful  rules,  the  server’s  may  and then its return
+                     traffic would not be known and marked as invalid.
+
+              •      A priority-1 flow that sets the allow bit  and  sets  the
+                     hint to commit IP traffic to the connection tracker (with
+                     action  <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>1</b><b>]</b>  <b>=</b>  <b>1</b><b>;</b> <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>). This is needed for the de‐
+                     fault allow policy because, while the initiator’s  direc‐
+                     tion  may  not  have any stateful rules, the server’s may
+                     and then its return traffic would not be known and marked
+                     as invalid.
+
+              •      A priority-65532 flow that sets the  allow  bit  for  any
+                     traffic  in the reply direction for a connection that has
+                     been committed to the connection  tracker  (i.e.,  estab‐
+                     lished  flows),  as  long  as the committed flow does not
+                     have <b>c</b><b>t</b><b>_</b><b>m</b><b>a</b><b>r</b><b>k</b><b>.</b><b>b</b><b>l</b><b>o</b><b>c</b><b>k</b><b>e</b><b>d</b> set. We only handle traffic  in  the
+                     reply direction here because we want all packets going in
+                     the  request direction to still go through the flows that
+                     implement the currently defined policy based on ACLs.  If
+                     a   connection   is   no   longer   allowed   by  policy,
+                     <b>c</b><b>t</b><b>_</b><b>m</b><b>a</b><b>r</b><b>k</b><b>.</b><b>b</b><b>l</b><b>o</b><b>c</b><b>k</b><b>e</b><b>d</b> will get set and packets in the reply di‐
+                     rection will no longer be allowed, either. This flow also
+                     clears the register bits <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>9</b><b>]</b> and  <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>1</b><b>0</b><b>]</b>  and  sets
+                     register  bit <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>1</b><b>7</b><b>]</b>. If ACL logging and logging of re‐
+                     lated packets is enabled, then a companion priority-65533
+                     flow will be installed that accomplishes the  same  thing
+                     but also logs the traffic.
+
+              •      A  priority-65532  flow  that  sets the allow bit for any
+                     traffic that is considered related to a committed flow in
+                     the connection tracker (e.g., an  ICMP  Port  Unreachable
+                     from  a non-listening UDP port), as long as the committed
+                     flow does not have <b>c</b><b>t</b><b>_</b><b>m</b><b>a</b><b>r</b><b>k</b><b>.</b><b>b</b><b>l</b><b>o</b><b>c</b><b>k</b><b>e</b><b>d</b> set.  This  flow  also
+                     applies  NAT  to the related traffic so that ICMP headers
+                     and the inner packet have correct addresses. If ACL  log‐
+                     ging  and  logging  of related packets is enabled, then a
+                     companion priority-65533 flow will be installed that  ac‐
+                     complishes the same thing but also logs the traffic.
+
+              •      A  priority-65532  flow  that  sets  the drop bit for all
+                     traffic marked by the connection tracker as invalid.
+
+              •      A priority-65532 flow that sets  the  drop  bit  for  all
+                     traffic  in  the reply direction with <b>c</b><b>t</b><b>_</b><b>m</b><b>a</b><b>r</b><b>k</b><b>.</b><b>b</b><b>l</b><b>o</b><b>c</b><b>k</b><b>e</b><b>d</b> set
+                     meaning that the connection should no longer  be  allowed
+                     due  to a policy change. Packets in the request direction
+                     are skipped here to let a newly created ACL re-allow this
+                     connection.
+
+       If the logical datapath has any ACL or a load balancer with VIP config‐
+       ured, the following flow will also be added:
+
+              •      A priority 34000 logical flow is added for  each  logical
+                     switch  datapath  with the match <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b> <u>E</u> to allow the
+                     service monitor reply packet destined  to  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>
+                     that  sets  the allow bit, where <u>E</u> is the service monitor
+                     mac defined  in  the  <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>s</b><b>v</b><b>c</b><b>_</b><b>m</b><b>o</b><b>n</b><b>i</b><b>t</b><b>o</b><b>r</b><b>_</b><b>m</b><b>a</b><b>c</b>  column  of
+                     <b>N</b><b>B</b><b>_</b><b>G</b><b>l</b><b>o</b><b>b</b><b>a</b><b>l</b> table.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>9</u><u>:</u> <b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b> <u>A</u><u>C</u><u>L</u> <u>a</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u>
+
+       Logical  flows  in this table decide how to proceed based on the values
+       of the allow, drop, and reject bits that may have been set in the  pre‐
+       vious table.
+
+              •      If  no ACLs are configured, then a priority 0 flow is in‐
+                     stalled that matches everything and advances to the  next
+                     table.
+
+              •      A  priority  1000 flow is installed that will advance the
+                     packet to the next table if the allow bit is set.
+
+              •      A priority 1000 flow is installed that will run the <b>d</b><b>r</b><b>o</b><b>p</b><b>;</b>
+                     action if the drop bit is set.
+
+              •      A priority 1000 flow  is  installed  that  will  run  the
+                     <b>t</b><b>c</b><b>p</b><b>_</b><b>r</b><b>e</b><b>s</b><b>e</b><b>t</b>  <b>{</b>  <b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b> <lt;<lt;<b>-</b>>gt;>gt; <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b><b>;</b> <b>n</b><b>e</b><b>x</b><b>t</b><b>(</b><b>p</b><b>i</b><b>p</b><b>e</b><b>l</b><b>i</b><b>n</b><b>e</b><b>=</b><b>e</b><b>g</b><b>r</b><b>e</b><b>s</b><b>s</b><b>,</b><b>t</b><b>a</b>‐‐
+                     <b>b</b><b>l</b><b>e</b><b>=</b><b>5</b><b>)</b><b>;</b><b>}</b> action for  TCP  connections,<b>i</b><b>c</b><b>m</b><b>p</b><b>4</b><b>/</b><b>i</b><b>c</b><b>m</b><b>p</b><b>6</b>  action
+                     for  UDP  connections,  and <b>s</b><b>c</b><b>t</b><b>p</b><b>_</b><b>a</b><b>b</b><b>o</b><b>r</b><b>t</b> <b>{</b><b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b> <lt;<lt;<b>-</b><b>%</b><b>g</b><b>t</b><b>;</b> <b>i</b><b>n</b>‐‐
+                     <b>p</b><b>o</b><b>r</b><b>t</b><b>;</b> <b>n</b><b>e</b><b>x</b><b>t</b><b>(</b><b>p</b><b>i</b><b>p</b><b>e</b><b>l</b><b>i</b><b>n</b><b>e</b><b>=</b><b>e</b><b>g</b><b>r</b><b>e</b><b>s</b><b>s</b><b>,</b><b>t</b><b>a</b><b>b</b><b>l</b><b>e</b><b>=</b><b>5</b><b>)</b><b>;</b><b>}</b> action for SCTP as‐
+                     sociations.
+
+              •      If any ACLs have tiers configured  on  them,  then  three
+                     priority  500  flows  are  installed. If the current tier
+                     counter is 0, 1, or 2, then the current tier  counter  is
+                     incremented  by  one  and  the packet is sent back to the
+                     previous table for re-evaluation.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>1</u><u>0</u><u>:</u> <b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b> <u>Q</u><u>o</u><u>S</u> <u>M</u><u>a</u><u>r</u><u>k</u><u>i</u><u>n</u><u>g</u>
+
+       Logical flows in this table closely reproduce those in  the  <b>Q</b><b>o</b><b>S</b>  table
+       with  the  <b>a</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>  column  set  in  the <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database for the
+       <b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b> direction.
+
+              •      For every qos_rules entry in a logical switch  with  DSCP
+                     marking  enabled,  a  flow  will be added at the priority
+                     mentioned in the QoS table.
+
+              •      One priority-0 fallback flow that matches all packets and
+                     advances to the next table.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>1</u><u>1</u><u>:</u> <b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b> <u>Q</u><u>o</u><u>S</u> <u>M</u><u>e</u><u>t</u><u>e</u><u>r</u>
+
+       Logical flows in this table closely reproduce those in  the  <b>Q</b><b>o</b><b>S</b>  table
+       with  the  <b>b</b><b>a</b><b>n</b><b>d</b><b>w</b><b>i</b><b>d</b><b>t</b><b>h</b>  column set in the <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database for the
+       <b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b> direction.
+
+              •      For every qos_rules entry in a logical switch with meter‐
+                     ing enabled, a flow will be added at  the  priority  men‐
+                     tioned in the QoS table.
+
+              •      One priority-0 fallback flow that matches all packets and
+                     advances to the next table.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>1</u><u>2</u><u>:</u> <u>L</u><u>o</u><u>a</u><u>d</u> <u>b</u><u>a</u><u>l</u><u>a</u><u>n</u><u>c</u><u>i</u><u>n</u><u>g</u> <u>a</u><u>f</u><u>f</u><u>i</u><u>n</u><u>i</u><u>t</u><u>y</u> <u>c</u><u>h</u><u>e</u><u>c</u><u>k</u>
+
+       Load  balancing  affinity  check  table  contains the following logical
+       flows:
+
+              •      For all the configured load balancing rules for a  switch
+                     in  <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b>  database  where  a  positive affinity
+                     timeout is specified in <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> column, that  includes  a
+                     L4  port  <u>P</u><u>O</u><u>R</u><u>T</u> of protocol <u>P</u> and IP address <u>V</u><u>I</u><u>P</u>, a prior‐
+                     ity-100 flow is added. For IPv4 <u>V</u><u>I</u><u>P</u><u>s</u>,  the  flow  matches
+                     <b>c</b><b>t</b><b>.</b><b>n</b><b>e</b><b>w</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <u>V</u><u>I</u><u>P</u> &amp;&amp;&amp;&amp; <u>P</u><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <u>P</u><u>O</u><u>R</u><u>T</u>. For IPv6
+                     <u>V</u><u>I</u><u>P</u><u>s</u>, the flow matches <b>c</b><b>t</b><b>.</b><b>n</b><b>e</b><b>w</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <u>V</u><u>I</u><u>P</u>&amp;&amp;&amp;&amp; <u>P</u>
+                     &amp;&amp;&amp;&amp;  <u>P</u><b>.</b><b>d</b><b>s</b><b>t</b>  <b>=</b><b>=</b>   <u>P</u><u>O</u><u>R</u><u>T</u>.  The  flow’s  action  is  <b>r</b><b>e</b><b>g</b><b>9</b><b>[</b><b>6</b><b>]</b> <b>=</b>
+                     <b>c</b><b>h</b><b>k</b><b>_</b><b>l</b><b>b</b><b>_</b><b>a</b><b>f</b><b>f</b><b>(</b><b>)</b><b>;</b> <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>.
+
+              •      A priority 0 flow is added which matches on  all  packets
+                     and applies the action <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>1</u><u>3</u><u>:</u> <u>L</u><u>B</u>
+
+              •      For  all the configured load balancing rules for a switch
+                     in <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b>  database  where  a  positive  affinity
+                     timeout  is  specified in <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> column, that includes a
+                     L4 port <u>P</u><u>O</u><u>R</u><u>T</u> of protocol <u>P</u> and IP address <u>V</u><u>I</u><u>P</u>,  a  prior‐
+                     ity-150  flow  is  added. For IPv4 <u>V</u><u>I</u><u>P</u><u>s</u>, the flow matches
+                     <b>r</b><b>e</b><b>g</b><b>9</b><b>[</b><b>6</b><b>]</b> <b>=</b><b>=</b> <b>1</b> &amp;&amp;&amp;&amp; <b>c</b><b>t</b><b>.</b><b>n</b><b>e</b><b>w</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <u>V</u><u>I</u><u>P</u>  &amp;&amp;&amp;&amp;  <u>P</u><b>.</b><b>d</b><b>s</b><b>t</b>
+                     <b>=</b><b>=</b> <u>P</u><u>O</u><u>R</u><u>T</u> . For IPv6 <u>V</u><u>I</u><u>P</u><u>s</u>, the flow matches <b>r</b><b>e</b><b>g</b><b>9</b><b>[</b><b>6</b><b>]</b> <b>=</b><b>=</b> <b>1</b> &amp;&amp;&amp;&amp;
+                     <b>c</b><b>t</b><b>.</b><b>n</b><b>e</b><b>w</b>  &amp;&amp;&amp;&amp;  <b>i</b><b>p</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b>  <u>V</u><u>I</u><u>P</u> &amp;&amp;&amp;&amp; <u>P</u> &amp;&amp;&amp;&amp; <u>P</u><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b>  <u>P</u><u>O</u><u>R</u><u>T</u>.
+                     The flow’s action is <b>c</b><b>t</b><b>_</b><b>l</b><b>b</b><b>_</b><b>m</b><b>a</b><b>r</b><b>k</b><b>(</b><u>a</u><u>r</u><u>g</u><u>s</u><b>)</b>,  where  <u>a</u><u>r</u><u>g</u><u>s</u>  con‐
+                     tains  comma  separated  IP  addresses (and optional port
+                     numbers) to load balance to. The address family of the IP
+                     addresses of <u>a</u><u>r</u><u>g</u><u>s</u> is the same as the  address  family  of
+                     <u>V</u><u>I</u><u>P</u>.
+
+              •      For  all the configured load balancing rules for a switch
+                     in <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database that includes a L4  port  <u>P</u><u>O</u><u>R</u><u>T</u>
+                     of  protocol <u>P</u> and IP address <u>V</u><u>I</u><u>P</u>, a priority-120 flow is
+                     added. For IPv4 <u>V</u><u>I</u><u>P</u><u>s</u> , the flow matches <b>c</b><b>t</b><b>.</b><b>n</b><b>e</b><b>w</b> &amp;&amp;&amp;&amp;  <b>i</b><b>p</b>  &amp;&amp;&amp;&amp;
+                     <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b>  <b>=</b><b>=</b> <u>V</u><u>I</u><u>P</u> &amp;&amp;&amp;&amp; <u>P</u><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <u>P</u><u>O</u><u>R</u><u>T</u>. For IPv6 <u>V</u><u>I</u><u>P</u><u>s</u>, the flow
+                     matches <b>c</b><b>t</b><b>.</b><b>n</b><b>e</b><b>w</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <u>V</u><u>I</u><u>P</u> &amp;&amp;&amp;&amp; <u>P</u> &amp;&amp;&amp;&amp;  <u>P</u><b>.</b><b>d</b><b>s</b><b>t</b>  <b>=</b><b>=</b>
+                     <u>P</u><u>O</u><u>R</u><u>T</u>.  The flow’s action is <b>c</b><b>t</b><b>_</b><b>l</b><b>b</b><b>_</b><b>m</b><b>a</b><b>r</b><b>k</b><b>(</b><u>a</u><u>r</u><u>g</u><u>s</u><b>)</b> , where <u>a</u><u>r</u><u>g</u><u>s</u>
+                     contains comma separated IP addresses (and optional  port
+                     numbers) to load balance to. The address family of the IP
+                     addresses  of  <u>a</u><u>r</u><u>g</u><u>s</u>  is the same as the address family of
+                     <u>V</u><u>I</u><u>P</u>. If health check is enabled, then <u>a</u><u>r</u><u>g</u><u>s</u> will only con‐
+                     tain those endpoints whose service monitor  status  entry
+                     in  <b>O</b><b>V</b><b>N</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> db is either <b>o</b><b>n</b><b>l</b><b>i</b><b>n</b><b>e</b> or empty. For IPv4
+                     traffic the flow also loads the original  destination  IP
+                     and  transport  port in registers <b>r</b><b>e</b><b>g</b><b>1</b> and <b>r</b><b>e</b><b>g</b><b>2</b>. For IPv6
+                     traffic the flow also loads the original  destination  IP
+                     and  transport  port  in  registers  <b>x</b><b>x</b><b>r</b><b>e</b><b>g</b><b>1</b> and <b>r</b><b>e</b><b>g</b><b>2</b>. The
+                     above flow is created even if the load  balancer  is  at‐
+                     tached to a logical router connected to the current logi‐
+                     cal  switch and the <b>i</b><b>n</b><b>s</b><b>t</b><b>a</b><b>l</b><b>l</b><b>_</b><b>l</b><b>s</b><b>_</b><b>l</b><b>b</b><b>_</b><b>f</b><b>r</b><b>o</b><b>m</b><b>_</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b> variable in
+                     <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> is set to true.
+
+              •      For all the configured load balancing rules for a  switch
+                     in  <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b>  database that includes just an IP ad‐
+                     dress <u>V</u><u>I</u><u>P</u> to match on, OVN adds a priority-110 flow.  For
+                     IPv4  <u>V</u><u>I</u><u>P</u><u>s</u>,  the  flow matches <b>c</b><b>t</b><b>.</b><b>n</b><b>e</b><b>w</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b>
+                     <u>V</u><u>I</u><u>P</u>. For IPv6 <u>V</u><u>I</u><u>P</u><u>s</u>, the flow  matches  <b>c</b><b>t</b><b>.</b><b>n</b><b>e</b><b>w</b>  &amp;&amp;&amp;&amp;  <b>i</b><b>p</b>  &amp;&amp;&amp;&amp;
+                     <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b>   <b>=</b><b>=</b>   <u>V</u><u>I</u><u>P</u>.   The   action   on   this   flow  is
+                     <b>c</b><b>t</b><b>_</b><b>l</b><b>b</b><b>_</b><b>m</b><b>a</b><b>r</b><b>k</b><b>(</b><u>a</u><u>r</u><u>g</u><u>s</u><b>)</b>, where <u>a</u><u>r</u><u>g</u><u>s</u> contains comma separated  IP
+                     addresses  of  the  same  address family as <u>V</u><u>I</u><u>P</u>. For IPv4
+                     traffic the flow also loads the original  destination  IP
+                     and  transport  port in registers <b>r</b><b>e</b><b>g</b><b>1</b> and <b>r</b><b>e</b><b>g</b><b>2</b>. For IPv6
+                     traffic the flow also loads the original  destination  IP
+                     and  transport  port  in  registers  <b>x</b><b>x</b><b>r</b><b>e</b><b>g</b><b>1</b> and <b>r</b><b>e</b><b>g</b><b>2</b>. The
+                     above flow is created even if the load  balancer  is  at‐
+                     tached to a logical router connected to the current logi‐
+                     cal  switch and the <b>i</b><b>n</b><b>s</b><b>t</b><b>a</b><b>l</b><b>l</b><b>_</b><b>l</b><b>s</b><b>_</b><b>l</b><b>b</b><b>_</b><b>f</b><b>r</b><b>o</b><b>m</b><b>_</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b> variable in
+                     <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> is set to true.
+
+              •      If the load balancer is created with <b>-</b><b>-</b><b>r</b><b>e</b><b>j</b><b>e</b><b>c</b><b>t</b> option  and
+                     it  has no active backends, a TCP reset segment (for tcp)
+                     or an ICMP port unreachable packet (for all other kind of
+                     traffic) will be sent whenever an incoming packet is  re‐
+                     ceived for this load-balancer. Please note using <b>-</b><b>-</b><b>r</b><b>e</b><b>j</b><b>e</b><b>c</b><b>t</b>
+                     option will disable empty_lb SB controller event for this
+                     load balancer.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>1</u><u>4</u><u>:</u> <u>L</u><u>o</u><u>a</u><u>d</u> <u>b</u><u>a</u><u>l</u><u>a</u><u>n</u><u>c</u><u>i</u><u>n</u><u>g</u> <u>a</u><u>f</u><u>f</u><u>i</u><u>n</u><u>i</u><u>t</u><u>y</u> <u>l</u><u>e</u><u>a</u><u>r</u><u>n</u>
+
+       Load  balancing  affinity  learn  table  contains the following logical
+       flows:
+
+              •      For all the configured load balancing rules for a  switch
+                     in  <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b>  database  where  a  positive affinity
+                     timeout <u>T</u> is specified in <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> column, that includes a
+                     L4 port <u>P</u><u>O</u><u>R</u><u>T</u> of protocol <u>P</u> and IP address <u>V</u><u>I</u><u>P</u>,  a  prior‐
+                     ity-100  flow  is  added. For IPv4 <u>V</u><u>I</u><u>P</u><u>s</u>, the flow matches
+                     <b>r</b><b>e</b><b>g</b><b>9</b><b>[</b><b>6</b><b>]</b> <b>=</b><b>=</b> <b>0</b> &amp;&amp;&amp;&amp; <b>c</b><b>t</b><b>.</b><b>n</b><b>e</b><b>w</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <u>V</u><u>I</u><u>P</u>  &amp;&amp;&amp;&amp;  <u>P</u><b>.</b><b>d</b><b>s</b><b>t</b>
+                     <b>=</b><b>=</b>  <u>P</u><u>O</u><u>R</u><u>T</u>. For IPv6 <u>V</u><u>I</u><u>P</u><u>s</u>, the flow matches <b>c</b><b>t</b><b>.</b><b>n</b><b>e</b><b>w</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b> &amp;&amp;&amp;&amp;
+                     <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <u>V</u><u>I</u><u>P</u> &amp;&amp;&amp;&amp; <u>P</u> &amp;&amp;&amp;&amp; <u>P</u><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <u>P</u><u>O</u><u>R</u><u>T</u> . The flow’s  action
+                     is  <b>c</b><b>o</b><b>m</b><b>m</b><b>i</b><b>t</b><b>_</b><b>l</b><b>b</b><b>_</b><b>a</b><b>f</b><b>f</b><b>(</b><b>v</b><b>i</b><b>p</b>  <b>=</b>  <u>V</u><u>I</u><u>P</u><b>:</b><u>P</u><u>O</u><u>R</u><u>T</u><b>,</b> <b>b</b><b>a</b><b>c</b><b>k</b><b>e</b><b>n</b><b>d</b> <b>=</b> <u>b</u><u>a</u><u>c</u><u>k</u><u>e</u><u>n</u><u>d</u> <u>i</u><u>p</u><b>:</b>
+                     <u>b</u><u>a</u><u>c</u><u>k</u><u>e</u><u>n</u><u>d</u> <u>p</u><u>o</u><u>r</u><u>t</u><b>,</b> <b>p</b><b>r</b><b>o</b><b>t</b><b>o</b> <b>=</b> <u>P</u><b>,</b> <b>t</b><b>i</b><b>m</b><b>e</b><b>o</b><b>u</b><b>t</b> <b>=</b> <u>T</u><b>)</b><b>;</b> .
+
+              •      A priority 0 flow is added which matches on  all  packets
+                     and applies the action <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>1</u><u>5</u><u>:</u> <u>P</u><u>r</u><u>e</u><u>-</u><u>H</u><u>a</u><u>i</u><u>r</u><u>p</u><u>i</u><u>n</u>
+
+              •      If  the  logical  switch has load balancer(s) configured,
+                     then a priority-100 flow is added with the  match  <b>i</b><b>p</b>  &amp;&amp;&amp;&amp;
+                     <b>c</b><b>t</b><b>.</b><b>t</b><b>r</b><b>k</b>  to check if the packet needs to be hairpinned (if
+                     after load  balancing  the  destination  IP  matches  the
+                     source  IP)  or  not  by  executing the actions <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>6</b><b>]</b> <b>=</b>
+                     <b>c</b><b>h</b><b>k</b><b>_</b><b>l</b><b>b</b><b>_</b><b>h</b><b>a</b><b>i</b><b>r</b><b>p</b><b>i</b><b>n</b><b>(</b><b>)</b><b>;</b> and <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>1</b><b>2</b><b>]</b> <b>=</b>  <b>c</b><b>h</b><b>k</b><b>_</b><b>l</b><b>b</b><b>_</b><b>h</b><b>a</b><b>i</b><b>r</b><b>p</b><b>i</b><b>n</b><b>_</b><b>r</b><b>e</b><b>p</b><b>l</b><b>y</b><b>(</b><b>)</b><b>;</b>
+                     and advances the packet to the next table.
+
+              •      A  priority-0  flow that simply moves traffic to the next
+                     table.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>1</u><u>6</u><u>:</u> <u>N</u><u>a</u><u>t</u><u>-</u><u>H</u><u>a</u><u>i</u><u>r</u><u>p</u><u>i</u><u>n</u>
+
+              •      If the logical switch has  load  balancer(s)  configured,
+                     then  a  priority-100  flow is added with the match <b>i</b><b>p</b> &amp;&amp;&amp;&amp;
+                     <b>c</b><b>t</b><b>.</b><b>n</b><b>e</b><b>w</b> &amp;&amp;&amp;&amp; <b>c</b><b>t</b><b>.</b><b>t</b><b>r</b><b>k</b> &amp;&amp;&amp;&amp; <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>6</b><b>]</b> <b>=</b><b>=</b> <b>1</b> which hairpins the traf‐
+                     fic by NATting source IP to the load balancer VIP by exe‐
+                     cuting the action <b>c</b><b>t</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>_</b><b>t</b><b>o</b><b>_</b><b>v</b><b>i</b><b>p</b> and advances the  packet
+                     to the next table.
+
+              •      If  the  logical  switch has load balancer(s) configured,
+                     then a priority-100 flow is added with the  match  <b>i</b><b>p</b>  &amp;&amp;&amp;&amp;
+                     <b>c</b><b>t</b><b>.</b><b>e</b><b>s</b><b>t</b> &amp;&amp;&amp;&amp; <b>c</b><b>t</b><b>.</b><b>t</b><b>r</b><b>k</b> &amp;&amp;&amp;&amp; <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>6</b><b>]</b> <b>=</b><b>=</b> <b>1</b> which hairpins the traf‐
+                     fic by NATting source IP to the load balancer VIP by exe‐
+                     cuting  the action <b>c</b><b>t</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b> and advances the packet to the
+                     next table.
+
+              •      If the logical switch has  load  balancer(s)  configured,
+                     then  a  priority-90  flow  is added with the match <b>i</b><b>p</b> &amp;&amp;&amp;&amp;
+                     <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>1</b><b>2</b><b>]</b> <b>=</b><b>=</b> <b>1</b> which matches on the replies of  hairpinned
+                     traffic  (i.e.,  destination  IP is VIP, source IP is the
+                     backend IP and source L4 port is backend port for L4 load
+                     balancers) and executes <b>c</b><b>t</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b> and advances  the  packet
+                     to the next table.
+
+              •      A  priority-0  flow that simply moves traffic to the next
+                     table.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>1</u><u>7</u><u>:</u> <u>H</u><u>a</u><u>i</u><u>r</u><u>p</u><u>i</u><u>n</u>
+
+              •      If logical switch has attached  logical  switch  port  of
+                     <u>v</u><u>t</u><u>e</u><u>p</u>  type, then for each distributed gateway router port
+                     <u>R</u><u>P</u> attached to this logical switch and has chassis  redi‐
+                     rect  port  <u>c</u><u>r</u><u>-</u><u>R</u><u>P</u>, a priority-2000 flow is added with the
+                     match .IP
+                     <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>1</b><b>4</b><b>]</b> <b>=</b><b>=</b> <b>1</b> &amp;&amp;&amp;&amp; <b>i</b><b>s</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>r</b><b>e</b><b>s</b><b>i</b><b>d</b><b>e</b><b>n</b><b>t</b><b>(</b><u>c</u><u>r</u><u>-</u><u>R</u><u>P</u><b>)</b>
+
+                     and action <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>.
+
+                     <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>1</b><b>4</b><b>]</b> register bit is set in the ingress L2 port secu‐
+                     rity check table for traffic received from HW VTEP (ramp)
+                     ports.
+
+              •      If logical switch has attached  logical  switch  port  of
+                     <u>v</u><u>t</u><u>e</u><u>p</u>  type,  then  a  priority-1000  flow that matches on
+                     <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>1</b><b>4</b><b>]</b> register bit for the traffic  received  from  HW
+                     VTEP  (ramp) ports. This traffic is passed to ingress ta‐
+                     ble ls_in_l2_lkup.
+
+              •      A priority-1 flow that hairpins traffic matched  by  non-
+                     default  flows  in  the Pre-Hairpin table. Hairpinning is
+                     done at L2, Ethernet addresses are swapped and the  pack‐
+                     ets are looped back on the input port.
+
+              •      A  priority-0  flow that simply moves traffic to the next
+                     table.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>1</u><u>8</u><u>:</u> <b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b> <u>A</u><u>C</u><u>L</u> <u>e</u><u>v</u><u>a</u><u>l</u><u>u</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u> <u>a</u><u>f</u><u>t</u><u>e</u><u>r</u> <u>L</u><u>B</u>
+
+       Logical flows in this table closely reproduce those in the <b>A</b><b>C</b><b>L</b> <b>e</b><b>v</b><b>a</b><b>l</b> ta‐
+       ble in the <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database for the  <b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b>  direction  with
+       the option <b>a</b><b>p</b><b>p</b><b>l</b><b>y</b><b>-</b><b>a</b><b>f</b><b>t</b><b>e</b><b>r</b><b>-</b><b>l</b><b>b</b> set to <b>t</b><b>r</b><b>u</b><b>e</b>. The <b>p</b><b>r</b><b>i</b><b>o</b><b>r</b><b>i</b><b>t</b><b>y</b> values from the <b>A</b><b>C</b><b>L</b>
+       table  have  a  limited range and have 1000 added to them to leave room
+       for OVN default flows at both higher and lower priorities. The flows in
+       this table indicate the ACL verdict by setting <b>r</b><b>e</b><b>g</b><b>8</b><b>[</b><b>1</b><b>6</b><b>]</b> for  <b>a</b><b>l</b><b>l</b><b>o</b><b>w</b><b>-</b><b>t</b><b>y</b><b>p</b><b>e</b>
+       ACLs,  <b>r</b><b>e</b><b>g</b><b>8</b><b>[</b><b>1</b><b>7</b><b>]</b>  for  <b>d</b><b>r</b><b>o</b><b>p</b> ACLs, and <b>r</b><b>e</b><b>g</b><b>8</b><b>[</b><b>1</b><b>7</b><b>]</b> for <b>r</b><b>e</b><b>j</b><b>e</b><b>c</b><b>t</b> ACLs, and then
+       advancing the packet to the next table. These will be  reffered  to  as
+       the  allow  bit,  drop bit, and reject bit throughout the documentation
+       for this table and the next one.
+
+       Like with ACLs that are evaluated before load balancers, if the ACL  is
+       configured  with  a tier value, then the current tier counter, supplied
+       in reg8[30..31] is matched against the ACL’s configured tier  in  addi‐
+       tion to the ACL’s match.
+
+              •      <b>a</b><b>l</b><b>l</b><b>o</b><b>w</b>  apply-after-lb  ACLs  translate into logical flows
+                     that set the allow bit. If there are  any  stateful  ACLs
+                     (including  both  before-lb  and  after-lb  ACLs) on this
+                     datapath, then  <b>a</b><b>l</b><b>l</b><b>o</b><b>w</b>  ACLs  also  run  <b>c</b><b>t</b><b>_</b><b>c</b><b>o</b><b>m</b><b>m</b><b>i</b><b>t</b><b>;</b>  <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>
+                     (which acts as a hint for an upcoming table to commit the
+                     connection  to  conntrack).  In  case the <b>A</b><b>C</b><b>L</b> has a label
+                     then <b>r</b><b>e</b><b>g</b><b>3</b> is loaded with the label value and <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>1</b><b>3</b><b>]</b> bit
+                     is set to 1 (which acts as a hint for the next tables  to
+                     commit the label to conntrack).
+
+              •      <b>a</b><b>l</b><b>l</b><b>o</b><b>w</b><b>-</b><b>r</b><b>e</b><b>l</b><b>a</b><b>t</b><b>e</b><b>d</b>  apply-after-lb ACLs translate into logical
+                     flows that set the allow bit and run the <b>c</b><b>t</b><b>_</b><b>c</b><b>o</b><b>m</b><b>m</b><b>i</b><b>t</b><b>(</b><b>c</b><b>t</b><b>_</b><b>l</b><b>a</b>‐‐
+                     <b>b</b><b>e</b><b>l</b><b>=</b><b>0</b><b>/</b><b>1</b><b>)</b><b>;</b> <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b> actions for new connections and <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>1</b><b>]</b> <b>=</b>
+                     <b>1</b><b>;</b> <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b> for existing connections. In case the <b>A</b><b>C</b><b>L</b> has  a
+                     label  then  <b>r</b><b>e</b><b>g</b><b>3</b>  is  loaded  with  the  label value and
+                     <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>1</b><b>3</b><b>]</b> bit is set to 1 (which acts as a  hint  for  the
+                     next tables to commit the label to conntrack).
+
+              •      <b>a</b><b>l</b><b>l</b><b>o</b><b>w</b><b>-</b><b>s</b><b>t</b><b>a</b><b>t</b><b>e</b><b>l</b><b>e</b><b>s</b><b>s</b>  apply-after-lb ACLs translate into logi‐
+                     cal flows that set the allow bit and advance to the  next
+                     table.
+
+              •      <b>r</b><b>e</b><b>j</b><b>e</b><b>c</b><b>t</b>  apply-after-lb  ACLs translate into logical flows
+                     that set the reject bit and advance to the next table.
+
+              •      <b>p</b><b>a</b><b>s</b><b>s</b> apply-after-lb ACLs  translate  into  logical  flows
+                     that  do  not  set the allow, drop, or reject bit and ad‐
+                     vance to the next table.
+
+              •      Other apply-after-lb ACLs set the drop bit for new or un‐
+                     tracked  connections  and  <b>c</b><b>t</b><b>_</b><b>c</b><b>o</b><b>m</b><b>m</b><b>i</b><b>t</b><b>(</b><b>c</b><b>t</b><b>_</b><b>l</b><b>a</b><b>b</b><b>e</b><b>l</b><b>=</b><b>1</b><b>/</b><b>1</b><b>)</b><b>;</b>   for
+                     known connections. Setting <b>c</b><b>t</b><b>_</b><b>l</b><b>a</b><b>b</b><b>e</b><b>l</b> marks a connection as
+                     one  that was previously allowed, but should no longer be
+                     allowed due to a policy change.
+
+              •      One priority-65532 flow matching  packets  with  <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>1</b><b>7</b><b>]</b>
+                     set  (either  replies to existing sessions or traffic re‐
+                     lated to existing sessions) and allows these  by  setting
+                     the allow bit and advancing to the next table.
+
+              •      One priority-0 fallback flow that matches all packets and
+                     advances to the next table.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>1</u><u>9</u><u>:</u> <b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b> <u>A</u><u>C</u><u>L</u> <u>a</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u> <u>a</u><u>f</u><u>t</u><u>e</u><u>r</u> <u>L</u><u>B</u>
+
+       Logical  flows  in this table decide how to proceed based on the values
+       of the allow, drop, and reject bits that may have been set in the  pre‐
+       vious table.
+
+              •      If  no ACLs are configured, then a priority 0 flow is in‐
+                     stalled that matches everything and advances to the  next
+                     table.
+
+              •      A  priority  1000 flow is installed that will advance the
+                     packet to the next table if the allow bit is set.
+
+              •      A priority 1000 flow is installed that will run the <b>d</b><b>r</b><b>o</b><b>p</b><b>;</b>
+                     action if the drop bit is set.
+
+              •      A priority 1000 flow  is  installed  that  will  run  the
+                     <b>t</b><b>c</b><b>p</b><b>_</b><b>r</b><b>e</b><b>s</b><b>e</b><b>t</b>  <b>{</b>  <b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b> <lt;<lt;<b>-</b>>gt;>gt; <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b><b>;</b> <b>n</b><b>e</b><b>x</b><b>t</b><b>(</b><b>p</b><b>i</b><b>p</b><b>e</b><b>l</b><b>i</b><b>n</b><b>e</b><b>=</b><b>e</b><b>g</b><b>r</b><b>e</b><b>s</b><b>s</b><b>,</b><b>t</b><b>a</b>‐‐
+                     <b>b</b><b>l</b><b>e</b><b>=</b><b>5</b><b>)</b><b>;</b><b>}</b> action for  TCP  connections,<b>i</b><b>c</b><b>m</b><b>p</b><b>4</b><b>/</b><b>i</b><b>c</b><b>m</b><b>p</b><b>6</b>  action
+                     for  UDP  connections,  and <b>s</b><b>c</b><b>t</b><b>p</b><b>_</b><b>a</b><b>b</b><b>o</b><b>r</b><b>t</b> <b>{</b><b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b> <lt;<lt;<b>-</b><b>%</b><b>g</b><b>t</b><b>;</b> <b>i</b><b>n</b>‐‐
+                     <b>p</b><b>o</b><b>r</b><b>t</b><b>;</b> <b>n</b><b>e</b><b>x</b><b>t</b><b>(</b><b>p</b><b>i</b><b>p</b><b>e</b><b>l</b><b>i</b><b>n</b><b>e</b><b>=</b><b>e</b><b>g</b><b>r</b><b>e</b><b>s</b><b>s</b><b>,</b><b>t</b><b>a</b><b>b</b><b>l</b><b>e</b><b>=</b><b>5</b><b>)</b><b>;</b><b>}</b> action for SCTP as‐
+                     sociations.
+
+              •      If any ACLs have tiers configured  on  them,  then  three
+                     priority  500  flows  are  installed. If the current tier
+                     counter is 0, 1, or 2, then the current tier  counter  is
+                     incremented  by  one  and  the packet is sent back to the
+                     previous table for re-evaluation.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>2</u><u>0</u><u>:</u> <u>S</u><u>t</u><u>a</u><u>t</u><u>e</u><u>f</u><u>u</u><u>l</u>
+
+              •      A priority 100 flow is added which commits the packet  to
+                     the  conntrack  and  sets the most significant 32-bits of
+                     <b>c</b><b>t</b><b>_</b><b>l</b><b>a</b><b>b</b><b>e</b><b>l</b> with the <b>r</b><b>e</b><b>g</b><b>3</b> value based on the  hint  provided
+                     by  previous  tables  (with  a  match for <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>1</b><b>]</b> <b>=</b><b>=</b> <b>1</b> &amp;&amp;&amp;&amp;
+                     <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>1</b><b>3</b><b>]</b> <b>=</b><b>=</b> <b>1</b>). This is used by the <b>A</b><b>C</b><b>L</b><b>s</b>  with  label  to
+                     commit the label value to conntrack.
+
+              •      For  <b>A</b><b>C</b><b>L</b><b>s</b>  without label, a second priority-100 flow com‐
+                     mits packets to connection tracker using <b>c</b><b>t</b><b>_</b><b>c</b><b>o</b><b>m</b><b>m</b><b>i</b><b>t</b><b>;</b> <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>
+                     action based on a hint provided by  the  previous  tables
+                     (with a match for <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>1</b><b>]</b> <b>=</b><b>=</b> <b>1</b> &amp;&amp;&amp;&amp; <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>1</b><b>3</b><b>]</b> <b>=</b><b>=</b> <b>0</b>).
+
+              •      A  priority-0  flow that simply moves traffic to the next
+                     table.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>2</u><u>1</u><u>:</u> <u>A</u><u>R</u><u>P</u><u>/</u><u>N</u><u>D</u> <u>r</u><u>e</u><u>s</u><u>p</u><u>o</u><u>n</u><u>d</u><u>e</u><u>r</u>
+
+       This table implements ARP/ND responder in a logical  switch  for  known
+       IPs. The advantage of the ARP responder flow is to limit ARP broadcasts
+       by locally responding to ARP requests without the need to send to other
+       hypervisors. One common case is when the inport is a logical port asso‐
+       ciated with a VIF and the broadcast is responded to on the local hyper‐
+       visor  rather  than broadcast across the whole network and responded to
+       by the destination VM. This behavior is proxy ARP.
+
+       ARP requests arrive from VMs from a logical switch inport of  type  de‐
+       fault.  For  this  case,  the logical switch proxy ARP rules can be for
+       other VMs or logical router ports. Logical switch proxy ARP  rules  may
+       be  programmed  both  for  mac binding of IP addresses on other logical
+       switch VIF ports (which are of the default logical  switch  port  type,
+       representing connectivity to VMs or containers), and for mac binding of
+       IP  addresses  on  logical switch router type ports, representing their
+       logical router port peers. In order to support proxy  ARP  for  logical
+       router  ports,  an  IP address must be configured on the logical switch
+       router type port, with the same value as the peer logical router  port.
+       The configured MAC addresses must match as well. When a VM sends an ARP
+       request  for  a  distributed logical router port and if the peer router
+       type port of the attached logical switch does not have  an  IP  address
+       configured,  the  ARP  request will be broadcast on the logical switch.
+       One of the copies of the ARP request will go through the logical switch
+       router type port to the logical  router  datapath,  where  the  logical
+       router  ARP  responder will generate a reply. The MAC binding of a dis‐
+       tributed logical router, once learned by an associated VM, is used  for
+       all  that VM’s communication needing routing. Hence, the action of a VM
+       re-arping for the mac binding of the  logical  router  port  should  be
+       rare.
+
+       Logical  switch  ARP responder proxy ARP rules can also be hit when re‐
+       ceiving ARP requests externally on a L2 gateway port. In this case, the
+       hypervisor acting as an L2 gateway, responds to the ARP request on  be‐
+       half of a destination VM.
+
+       Note  that  ARP requests received from <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b> logical inports can ei‐
+       ther go directly to VMs, in which case the VM responds or  can  hit  an
+       ARP  responder  for  a logical router port if the packet is used to re‐
+       solve a logical router port next hop address. In either  case,  logical
+       switch  ARP  responder rules will not be hit. It contains these logical
+       flows:
+
+              •      If the logical  switch  has  no  router  ports  with  op‐
+                     tions:arp_proxy  configured  add  a priority-100 flows to
+                     skip the ARP responder if inport is of type <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b>  ad‐
+                     vances  directly  to the next table. ARP requests sent to
+                     <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b> ports can be received by  multiple  hypervisors.
+                     Now, because the same mac binding rules are downloaded to
+                     all  hypervisors,  each  of the multiple hypervisors will
+                     respond. This will confuse L2 learning on the  source  of
+                     the  ARP  requests. ARP requests received on an inport of
+                     type <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b> are not expected to hit  any  logical  switch
+                     ARP responder flows. However, no skip flows are installed
+                     for these packets, as there would be some additional flow
+                     cost for this and the value appears limited.
+
+              •      If  inport <b>V</b> is of type <b>v</b><b>i</b><b>r</b><b>t</b><b>u</b><b>a</b><b>l</b> adds a priority-100 logi‐
+                     cal flows for each <u>P</u> configured in  the  <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>v</b><b>i</b><b>r</b><b>t</b><b>u</b><b>a</b><b>l</b><b>-</b>
+                     <b>p</b><b>a</b><b>r</b><b>e</b><b>n</b><b>t</b><b>s</b> column with the match
+
+                     <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b> <u>P</u> &amp;&amp;&amp;&amp; &amp;&amp;&amp;&amp; <b>(</b><b>(</b><b>a</b><b>r</b><b>p</b><b>.</b><b>o</b><b>p</b> <b>=</b><b>=</b> <b>1</b> &amp;&amp;&amp;&amp; <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>p</b><b>a</b> <b>=</b><b>=</b> <u>V</u><u>I</u><u>P</u> &amp;&amp;&amp;&amp; <b>a</b><b>r</b><b>p</b><b>.</b><b>t</b><b>p</b><b>a</b> <b>=</b><b>=</b> <u>V</u><u>I</u><u>P</u><b>)</b> <b>|</b><b>|</b> <b>(</b><b>a</b><b>r</b><b>p</b><b>.</b><b>o</b><b>p</b> <b>=</b><b>=</b> <b>2</b> &amp;&amp;&amp;&amp; <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>p</b><b>a</b> <b>=</b><b>=</b> <u>V</u><u>I</u><u>P</u><b>)</b><b>)</b>
+                     <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b> <u>P</u> &amp;&amp;&amp;&amp; &amp;&amp;&amp;&amp; <b>(</b><b>(</b><b>n</b><b>d</b><b>_</b><b>n</b><b>s</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <u>{</u><u>V</u><u>I</u><u>P</u><u>,</u> <u>N</u><u>S</u><b>_</b><u>M</u><u>U</u><u>L</u><u>T</u><u>I</u><u>C</u><u>A</u><u>S</u><u>T</u><b>_</b><u>A</u><u>D</u><u>D</u><u>R</u><u>}</u> &amp;&amp;&amp;&amp; <b>n</b><b>d</b><b>.</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> <b>=</b><b>=</b> <u>V</u><u>I</u><u>P</u><b>)</b> <b>|</b><b>|</b> <b>(</b><b>n</b><b>d</b><b>_</b><b>n</b><b>a</b> &amp;&amp;&amp;&amp; <b>n</b><b>d</b><b>.</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> <b>=</b><b>=</b> <u>V</u><u>I</u><u>P</u><b>)</b><b>)</b>
+
+
+                     and applies the action
+
+                     <b>b</b><b>i</b><b>n</b><b>d</b><b>_</b><b>v</b><b>p</b><b>o</b><b>r</b><b>t</b><b>(</b><u>V</u><b>,</b> <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b><b>)</b><b>;</b>
+
+
+                     and advances the packet to the next table.
+
+                     Where  <u>V</u><u>I</u><u>P</u> is the virtual ip configured in the column <b>o</b><b>p</b>‐‐
+                     <b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>v</b><b>i</b><b>r</b><b>t</b><b>u</b><b>a</b><b>l</b><b>-</b><b>i</b><b>p</b> and NS_MULTICAST_ADDR is  solicited-node
+                     multicast address corresponding to the VIP.
+
+              •      Priority-50  flows  that match ARP requests to each known
+                     IP address <u>A</u> of every logical switch  port,  and  respond
+                     with ARP replies directly with corresponding Ethernet ad‐
+                     dress <u>E</u>:
+
+                     <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b> <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b><b>;</b>
+                     <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <u>E</u>;
+                     <b>a</b><b>r</b><b>p</b><b>.</b><b>o</b><b>p</b> <b>=</b> <b>2</b><b>;</b> <b>/</b><b>*</b> <b>A</b><b>R</b><b>P</b> <b>r</b><b>e</b><b>p</b><b>l</b><b>y</b><b>.</b> <b>*</b><b>/</b>
+                     <b>a</b><b>r</b><b>p</b><b>.</b><b>t</b><b>h</b><b>a</b> <b>=</b> <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>h</b><b>a</b><b>;</b>
+                     <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>h</b><b>a</b> <b>=</b> <u>E</u>;
+                     <b>a</b><b>r</b><b>p</b><b>.</b><b>t</b><b>p</b><b>a</b> <b>=</b> <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>p</b><b>a</b><b>;</b>
+                     <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>p</b><b>a</b> <b>=</b> <u>A</u>;
+                     <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b> <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b><b>;</b>
+                     <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>l</b><b>o</b><b>o</b><b>p</b><b>b</b><b>a</b><b>c</b><b>k</b> <b>=</b> <b>1</b><b>;</b>
+                     <b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b><b>;</b>
+
+
+                     These  flows  are  omitted  for logical ports (other than
+                     router ports or <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b> ports) that  are  down  (unless
+                     <b>i</b><b>g</b><b>n</b><b>o</b><b>r</b><b>e</b><b>_</b><b>l</b><b>s</b><b>p</b><b>_</b><b>d</b><b>o</b><b>w</b><b>n</b>  is  configured as true in <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> column
+                     of <b>N</b><b>B</b><b>_</b><b>G</b><b>l</b><b>o</b><b>b</b><b>a</b><b>l</b> table of the <b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database), for logi‐
+                     cal ports of type <b>v</b><b>i</b><b>r</b><b>t</b><b>u</b><b>a</b><b>l</b>, for logical  ports  with  ’un‐
+                     known’  address  set  and  for logical ports of a logical
+                     switch configured with <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>:</b><b>v</b><b>l</b><b>a</b><b>n</b><b>-</b><b>p</b><b>a</b><b>s</b><b>s</b><b>t</b><b>h</b><b>r</b><b>u</b><b>=</b><b>t</b><b>r</b><b>u</b><b>e</b>.
+
+                     The above ARP responder flows are added for the  list  of
+                     IPv4  addresses if defined in <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>a</b><b>r</b><b>p</b><b>_</b><b>p</b><b>r</b><b>o</b><b>x</b><b>y</b> column of
+                     <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b> table for  logical  switch  ports  of
+                     type <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b>.
+
+              •      Priority-50  flows  that match IPv6 ND neighbor solicita‐
+                     tions to each known IP address <u>A</u> (and <u>A</u>’s solicited  node
+                     address)  of  every  logical  switch  port except of type
+                     router, and respond with neighbor advertisements directly
+                     with corresponding Ethernet address <u>E</u>:
+
+                     <b>n</b><b>d</b><b>_</b><b>n</b><b>a</b> <b>{</b>
+                         <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <u>E</u>;
+                         <b>i</b><b>p</b><b>6</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <u>A</u>;
+                         <b>n</b><b>d</b><b>.</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> <b>=</b> <u>A</u>;
+                         <b>n</b><b>d</b><b>.</b><b>t</b><b>l</b><b>l</b> <b>=</b> <u>E</u>;
+                         <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b> <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b><b>;</b>
+                         <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>l</b><b>o</b><b>o</b><b>p</b><b>b</b><b>a</b><b>c</b><b>k</b> <b>=</b> <b>1</b><b>;</b>
+                         <b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b><b>;</b>
+                     <b>}</b><b>;</b>
+
+
+                     Priority-50 flows that match IPv6 ND  neighbor  solicita‐
+                     tions  to each known IP address <u>A</u> (and <u>A</u>’s solicited node
+                     address) of logical switch port of type router,  and  re‐
+                     spond  with  neighbor advertisements directly with corre‐
+                     sponding Ethernet address <u>E</u>:
+
+                     <b>n</b><b>d</b><b>_</b><b>n</b><b>a</b><b>_</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b> <b>{</b>
+                         <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <u>E</u>;
+                         <b>i</b><b>p</b><b>6</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <u>A</u>;
+                         <b>n</b><b>d</b><b>.</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> <b>=</b> <u>A</u>;
+                         <b>n</b><b>d</b><b>.</b><b>t</b><b>l</b><b>l</b> <b>=</b> <u>E</u>;
+                         <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b> <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b><b>;</b>
+                         <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>l</b><b>o</b><b>o</b><b>p</b><b>b</b><b>a</b><b>c</b><b>k</b> <b>=</b> <b>1</b><b>;</b>
+                         <b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b><b>;</b>
+                     <b>}</b><b>;</b>
+
+
+                     These flows are omitted for  logical  ports  (other  than
+                     router  ports  or  <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b> ports) that are down (unless
+                     <b>i</b><b>g</b><b>n</b><b>o</b><b>r</b><b>e</b><b>_</b><b>l</b><b>s</b><b>p</b><b>_</b><b>d</b><b>o</b><b>w</b><b>n</b> is configured as true in  <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>  column
+                     of <b>N</b><b>B</b><b>_</b><b>G</b><b>l</b><b>o</b><b>b</b><b>a</b><b>l</b> table of the <b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database), for logi‐
+                     cal ports of type <b>v</b><b>i</b><b>r</b><b>t</b><b>u</b><b>a</b><b>l</b> and for logical ports with ’un‐
+                     known’ address set.
+
+                     The  above  NDP responder flows are added for the list of
+                     IPv6 addresses if defined in <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>a</b><b>r</b><b>p</b><b>_</b><b>p</b><b>r</b><b>o</b><b>x</b><b>y</b> column  of
+                     <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b>  table  for  logical  switch ports of
+                     type <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b>.
+
+              •      Priority-100 flows with match criteria like the  ARP  and
+                     ND  flows above, except that they only match packets from
+                     the <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> that owns the IP addresses in  question,  with
+                     action  <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>.  These flows prevent OVN from replying to,
+                     for example, an ARP request emitted by a VM for  its  own
+                     IP  address.  A VM only makes this kind of request to at‐
+                     tempt to detect a duplicate  IP  address  assignment,  so
+                     sending a reply will prevent the VM from accepting the IP
+                     address that it owns.
+
+                     In  place  of  <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>, it would be reasonable to use <b>d</b><b>r</b><b>o</b><b>p</b><b>;</b>
+                     for the flows’ actions. If everything is working as it is
+                     configured, then this would produce  equivalent  results,
+                     since no host should reply to the request. But ARPing for
+                     one’s  own  IP  address  is intended to detect situations
+                     where the network is not working as configured, so  drop‐
+                     ping the request would frustrate that intent.
+
+              •      For  each  <u>S</u><u>V</u><u>C</u><b>_</b><u>M</u><u>O</u><u>N</u><b>_</b><u>S</u><u>R</u><u>C</u><b>_</b><u>I</u><u>P</u>  defined  in  the  value of the
+                     <b>i</b><b>p</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b><b>_</b><b>m</b><b>a</b><b>p</b><b>p</b><b>i</b><b>n</b><b>g</b><b>s</b><b>:</b><b>E</b><b>N</b><b>D</b><b>P</b><b>O</b><b>I</b><b>N</b><b>T</b><b>_</b><b>I</b><b>P</b> column of <b>L</b><b>o</b><b>a</b><b>d</b><b>_</b><b>B</b><b>a</b><b>l</b><b>a</b><b>n</b><b>c</b><b>e</b><b>r</b>  ta‐
+                     ble,  priority-110  logical  flow is added with the match
+                     <b>a</b><b>r</b><b>p</b><b>.</b><b>t</b><b>p</b><b>a</b> <b>=</b><b>=</b> <u>S</u><u>V</u><u>C</u><b>_</b><u>M</u><u>O</u><u>N</u><b>_</b><u>S</u><u>R</u><u>C</u><b>_</b><u>I</u><u>P</u> &amp;&amp;&amp;&amp; &amp;&amp;&amp;&amp; <b>a</b><b>r</b><b>p</b><b>.</b><b>o</b><b>p</b> <b>=</b><b>=</b> <b>1</b>  and  applies
+                     the action
+
+                     <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b> <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b><b>;</b>
+                     <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <u>E</u>;
+                     <b>a</b><b>r</b><b>p</b><b>.</b><b>o</b><b>p</b> <b>=</b> <b>2</b><b>;</b> <b>/</b><b>*</b> <b>A</b><b>R</b><b>P</b> <b>r</b><b>e</b><b>p</b><b>l</b><b>y</b><b>.</b> <b>*</b><b>/</b>
+                     <b>a</b><b>r</b><b>p</b><b>.</b><b>t</b><b>h</b><b>a</b> <b>=</b> <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>h</b><b>a</b><b>;</b>
+                     <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>h</b><b>a</b> <b>=</b> <u>E</u>;
+                     <b>a</b><b>r</b><b>p</b><b>.</b><b>t</b><b>p</b><b>a</b> <b>=</b> <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>p</b><b>a</b><b>;</b>
+                     <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>p</b><b>a</b> <b>=</b> <u>A</u>;
+                     <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b> <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b><b>;</b>
+                     <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>l</b><b>o</b><b>o</b><b>p</b><b>b</b><b>a</b><b>c</b><b>k</b> <b>=</b> <b>1</b><b>;</b>
+                     <b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b><b>;</b>
+
+
+                     where  <u>E</u> is the service monitor source mac defined in the
+                     <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>s</b><b>v</b><b>c</b><b>_</b><b>m</b><b>o</b><b>n</b><b>i</b><b>t</b><b>o</b><b>r</b><b>_</b><b>m</b><b>a</b><b>c</b> column in  the  <b>N</b><b>B</b><b>_</b><b>G</b><b>l</b><b>o</b><b>b</b><b>a</b><b>l</b>  table.
+                     This mac is used as the source mac in the service monitor
+                     packets for the load balancer endpoint IP health checks.
+
+                     <u>S</u><u>V</u><u>C</u><b>_</b><u>M</u><u>O</u><u>N</u><b>_</b><u>S</u><u>R</u><u>C</u><b>_</b><u>I</u><u>P</u>  is  used  as the source ip in the service
+                     monitor IPv4 packets for the load  balancer  endpoint  IP
+                     health checks.
+
+                     These  flows  are  required if an ARP request is sent for
+                     the IP <u>S</u><u>V</u><u>C</u><b>_</b><u>M</u><u>O</u><u>N</u><b>_</b><u>S</u><u>R</u><u>C</u><b>_</b><u>I</u><u>P</u>.
+
+                     For IPv6 the similar flow is added with the following ac‐
+                     tion
+
+                     <b>n</b><b>d</b><b>_</b><b>n</b><b>a</b> <b>{</b>
+                         <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b> <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b><b>;</b>
+                         <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <u>E</u>;
+                         <b>i</b><b>p</b><b>6</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <u>A</u>;
+                         <b>n</b><b>d</b><b>.</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> <b>=</b> <u>A</u>;
+                         <b>n</b><b>d</b><b>.</b><b>t</b><b>l</b><b>l</b> <b>=</b> <u>E</u>;
+                         <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b> <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b><b>;</b>
+                         <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>l</b><b>o</b><b>o</b><b>p</b><b>b</b><b>a</b><b>c</b><b>k</b> <b>=</b> <b>1</b><b>;</b>
+                         <b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b><b>;</b>
+                     <b>}</b><b>;</b>
+
+
+              •      For each <u>V</u><u>I</u><u>P</u> configured in the table  <b>F</b><b>o</b><b>r</b><b>w</b><b>a</b><b>r</b><b>d</b><b>i</b><b>n</b><b>g</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b>  a
+                     priority-50  logical flow is added with the match <b>a</b><b>r</b><b>p</b><b>.</b><b>t</b><b>p</b><b>a</b>
+                     <b>=</b><b>=</b> <u>v</u><u>i</u><u>p</u> &amp;&amp;&amp;&amp; &amp;&amp;&amp;&amp; <b>a</b><b>r</b><b>p</b><b>.</b><b>o</b><b>p</b> <b>=</b><b>=</b> <b>1</b>
+                      and applies the action
+
+                     <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b> <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b><b>;</b>
+                     <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <u>E</u>;
+                     <b>a</b><b>r</b><b>p</b><b>.</b><b>o</b><b>p</b> <b>=</b> <b>2</b><b>;</b> <b>/</b><b>*</b> <b>A</b><b>R</b><b>P</b> <b>r</b><b>e</b><b>p</b><b>l</b><b>y</b><b>.</b> <b>*</b><b>/</b>
+                     <b>a</b><b>r</b><b>p</b><b>.</b><b>t</b><b>h</b><b>a</b> <b>=</b> <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>h</b><b>a</b><b>;</b>
+                     <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>h</b><b>a</b> <b>=</b> <u>E</u>;
+                     <b>a</b><b>r</b><b>p</b><b>.</b><b>t</b><b>p</b><b>a</b> <b>=</b> <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>p</b><b>a</b><b>;</b>
+                     <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>p</b><b>a</b> <b>=</b> <u>A</u>;
+                     <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b> <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b><b>;</b>
+                     <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>l</b><b>o</b><b>o</b><b>p</b><b>b</b><b>a</b><b>c</b><b>k</b> <b>=</b> <b>1</b><b>;</b>
+                     <b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b><b>;</b>
+
+
+                     where <u>E</u> is the forwarding  group’s  mac  defined  in  the
+                     <b>v</b><b>m</b><b>a</b><b>c</b>.
+
+                     <u>A</u> is used as either the destination ip for load balancing
+                     traffic  to child ports or as nexthop to hosts behind the
+                     child ports.
+
+                     These flows are required to respond to an ARP request  if
+                     an ARP request is sent for the IP <u>v</u><u>i</u><u>p</u>.
+
+              •      One priority-0 fallback flow that matches all packets and
+                     advances to the next table.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>2</u><u>2</u><u>:</u> <u>D</u><u>H</u><u>C</u><u>P</u> <u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u> <u>p</u><u>r</u><u>o</u><u>c</u><u>e</u><u>s</u><u>s</u><u>i</u><u>n</u><u>g</u>
+
+       This  table adds the DHCPv4 options to a DHCPv4 packet from the logical
+       ports configured with IPv4 address(es) and DHCPv4  options,  and  simi‐
+       larly  for  DHCPv6  options. This table also adds flows for the logical
+       ports of type <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b>.
+
+              •      A priority-100 logical flow is added  for  these  logical
+                     ports which matches the IPv4 packet with <b>u</b><b>d</b><b>p</b><b>.</b><b>s</b><b>r</b><b>c</b> = 68 and
+                     <b>u</b><b>d</b><b>p</b><b>.</b><b>d</b><b>s</b><b>t</b> = 67 and applies the action <b>p</b><b>u</b><b>t</b><b>_</b><b>d</b><b>h</b><b>c</b><b>p</b><b>_</b><b>o</b><b>p</b><b>t</b><b>s</b> and ad‐
+                     vances the packet to the next table.
+
+                     <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>3</b><b>]</b> <b>=</b> <b>p</b><b>u</b><b>t</b><b>_</b><b>d</b><b>h</b><b>c</b><b>p</b><b>_</b><b>o</b><b>p</b><b>t</b><b>s</b><b>(</b><b>o</b><b>f</b><b>f</b><b>e</b><b>r</b><b>_</b><b>i</b><b>p</b> <b>=</b> <u>i</u><u>p</u>, <u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u>...);
+                     <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>
+
+
+                     For  DHCPDISCOVER  and  DHCPREQUEST,  this transforms the
+                     packet into a DHCP reply, adds the DHCP offer IP  <u>i</u><u>p</u>  and
+                     options  to  the  packet,  and stores 1 into reg0[3]. For
+                     other kinds of packets, it just stores  0  into  reg0[3].
+                     Either way, it continues to the next table.
+
+              •      A  priority-100  logical  flow is added for these logical
+                     ports which matches the IPv6 packet with  <b>u</b><b>d</b><b>p</b><b>.</b><b>s</b><b>r</b><b>c</b>  =  546
+                     and  <b>u</b><b>d</b><b>p</b><b>.</b><b>d</b><b>s</b><b>t</b> = 547 and applies the action <b>p</b><b>u</b><b>t</b><b>_</b><b>d</b><b>h</b><b>c</b><b>p</b><b>v</b><b>6</b><b>_</b><b>o</b><b>p</b><b>t</b><b>s</b>
+                     and advances the packet to the next table.
+
+                     <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>3</b><b>]</b> <b>=</b> <b>p</b><b>u</b><b>t</b><b>_</b><b>d</b><b>h</b><b>c</b><b>p</b><b>v</b><b>6</b><b>_</b><b>o</b><b>p</b><b>t</b><b>s</b><b>(</b><b>i</b><b>a</b><b>_</b><b>a</b><b>d</b><b>d</b><b>r</b> <b>=</b> <u>i</u><u>p</u>, <u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u>...);
+                     <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>
+
+
+                     For DHCPv6 Solicit/Request/Confirm packets,  this  trans‐
+                     forms  the packet into a DHCPv6 Advertise/Reply, adds the
+                     DHCPv6 offer IP <u>i</u><u>p</u> and options to the packet, and  stores
+                     1  into  reg0[3].  For  other  kinds  of packets, it just
+                     stores 0 into reg0[3]. Either way, it  continues  to  the
+                     next table.
+
+              •      A priority-0 flow that matches all packets to advances to
+                     table 16.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>2</u><u>3</u><u>:</u> <u>D</u><u>H</u><u>C</u><u>P</u> <u>r</u><u>e</u><u>s</u><u>p</u><u>o</u><u>n</u><u>s</u><u>e</u><u>s</u>
+
+       This  table implements DHCP responder for the DHCP replies generated by
+       the previous table.
+
+              •      A priority 100 logical flow  is  added  for  the  logical
+                     ports  configured  with DHCPv4 options which matches IPv4
+                     packets with <b>u</b><b>d</b><b>p</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b><b>=</b> <b>6</b><b>8</b> &amp;&amp;&amp;&amp; <b>u</b><b>d</b><b>p</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <b>6</b><b>7</b> &amp;&amp;&amp;&amp; <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>3</b><b>]</b> <b>=</b><b>=</b>
+                     <b>1</b> and responds back to the <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b>  after  applying  these
+                     actions. If <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>3</b><b>]</b> is set to 1, it means that the action
+                     <b>p</b><b>u</b><b>t</b><b>_</b><b>d</b><b>h</b><b>c</b><b>p</b><b>_</b><b>o</b><b>p</b><b>t</b><b>s</b> was successful.
+
+                     <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b> <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b><b>;</b>
+                     <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <u>E</u>;
+                     <b>i</b><b>p</b><b>4</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <u>S</u>;
+                     <b>u</b><b>d</b><b>p</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <b>6</b><b>7</b><b>;</b>
+                     <b>u</b><b>d</b><b>p</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b> <b>6</b><b>8</b><b>;</b>
+                     <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b> <u>P</u>;
+                     <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>l</b><b>o</b><b>o</b><b>p</b><b>b</b><b>a</b><b>c</b><b>k</b> <b>=</b> <b>1</b><b>;</b>
+                     <b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b><b>;</b>
+
+
+                     where  <u>E</u>  is  the  server MAC address and <u>S</u> is the server
+                     IPv4 address defined in the  DHCPv4  options.  Note  that
+                     <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b> field is handled by <b>p</b><b>u</b><b>t</b><b>_</b><b>d</b><b>h</b><b>c</b><b>p</b><b>_</b><b>o</b><b>p</b><b>t</b><b>s</b>.
+
+                     (This  terminates  ingress  packet processing; the packet
+                     does not go to the next ingress table.)
+
+              •      A priority 100 logical flow  is  added  for  the  logical
+                     ports  configured  with DHCPv6 options which matches IPv6
+                     packets with <b>u</b><b>d</b><b>p</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b><b>=</b> <b>5</b><b>4</b><b>6</b> &amp;&amp;&amp;&amp; <b>u</b><b>d</b><b>p</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <b>5</b><b>4</b><b>7</b> &amp;&amp;&amp;&amp;  <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>3</b><b>]</b>
+                     <b>=</b><b>=</b> <b>1</b> and responds back to the <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> after applying these
+                     actions. If <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>3</b><b>]</b> is set to 1, it means that the action
+                     <b>p</b><b>u</b><b>t</b><b>_</b><b>d</b><b>h</b><b>c</b><b>p</b><b>v</b><b>6</b><b>_</b><b>o</b><b>p</b><b>t</b><b>s</b> was successful.
+
+                     <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b> <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b><b>;</b>
+                     <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <u>E</u>;
+                     <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b> <u>A</u>;
+                     <b>i</b><b>p</b><b>6</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <u>S</u>;
+                     <b>u</b><b>d</b><b>p</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <b>5</b><b>4</b><b>7</b><b>;</b>
+                     <b>u</b><b>d</b><b>p</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b> <b>5</b><b>4</b><b>6</b><b>;</b>
+                     <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b> <u>P</u>;
+                     <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>l</b><b>o</b><b>o</b><b>p</b><b>b</b><b>a</b><b>c</b><b>k</b> <b>=</b> <b>1</b><b>;</b>
+                     <b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b><b>;</b>
+
+
+                     where  <u>E</u>  is  the  server MAC address and <u>S</u> is the server
+                     IPv6 LLA address generated from the <b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b><b>_</b><b>i</b><b>d</b> defined  in
+                     the  DHCPv6  options and <u>A</u> is the IPv6 address defined in
+                     the logical port’s addresses column.
+
+                     (This terminates packet processing; the packet  does  not
+                     go on the next ingress table.)
+
+              •      A priority-0 flow that matches all packets to advances to
+                     table 17.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>2</u><u>4</u> <u>D</u><u>N</u><u>S</u> <u>L</u><u>o</u><u>o</u><u>k</u><u>u</u><u>p</u>
+
+       This  table  looks  up  and resolves the DNS names to the corresponding
+       configured IP address(es).
+
+              •      A priority-100 logical flow for each logical switch data‐
+                     path if it is configured with DNS records, which  matches
+                     the  IPv4  and IPv6 packets with <b>u</b><b>d</b><b>p</b><b>.</b><b>d</b><b>s</b><b>t</b> = 53 and applies
+                     the action <b>d</b><b>n</b><b>s</b><b>_</b><b>l</b><b>o</b><b>o</b><b>k</b><b>u</b><b>p</b> and advances the packet to the next
+                     table.
+
+                     <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>4</b><b>]</b> <b>=</b> <b>d</b><b>n</b><b>s</b><b>_</b><b>l</b><b>o</b><b>o</b><b>k</b><b>u</b><b>p</b><b>(</b><b>)</b><b>;</b> <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>
+
+
+                     For valid DNS packets, this transforms the packet into  a
+                     DNS  reply  if the DNS name can be resolved, and stores 1
+                     into reg0[4]. For failed DNS resolution or other kinds of
+                     packets, it just stores 0 into reg0[4].  Either  way,  it
+                     continues to the next table.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>2</u><u>5</u> <u>D</u><u>N</u><u>S</u> <u>R</u><u>e</u><u>s</u><u>p</u><u>o</u><u>n</u><u>s</u><u>e</u><u>s</u>
+
+       This  table  implements  DNS responder for the DNS replies generated by
+       the previous table.
+
+              •      A priority-100 logical flow for each logical switch data‐
+                     path if it is configured with DNS records, which  matches
+                     the IPv4 and IPv6 packets with <b>u</b><b>d</b><b>p</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b> <b>5</b><b>3</b> &amp;&amp;&amp;&amp; <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>4</b><b>]</b> <b>=</b><b>=</b>
+                     <b>1</b>  and  responds  back to the <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> after applying these
+                     actions. If <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>4</b><b>]</b> is set to 1, it means that the action
+                     <b>d</b><b>n</b><b>s</b><b>_</b><b>l</b><b>o</b><b>o</b><b>k</b><b>u</b><b>p</b> was successful.
+
+                     <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> <lt;<lt;<b>-</b>>gt;>gt; <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b><b>;</b>
+                     <b>i</b><b>p</b><b>4</b><b>.</b><b>s</b><b>r</b><b>c</b> <lt;<lt;<b>-</b>>gt;>gt; <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b><b>;</b>
+                     <b>u</b><b>d</b><b>p</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b> <b>u</b><b>d</b><b>p</b><b>.</b><b>s</b><b>r</b><b>c</b><b>;</b>
+                     <b>u</b><b>d</b><b>p</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <b>5</b><b>3</b><b>;</b>
+                     <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b> <u>P</u>;
+                     <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>l</b><b>o</b><b>o</b><b>p</b><b>b</b><b>a</b><b>c</b><b>k</b> <b>=</b> <b>1</b><b>;</b>
+                     <b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b><b>;</b>
+
+
+                     (This terminates ingress packet  processing;  the  packet
+                     does not go to the next ingress table.)
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>2</u><u>6</u> <u>E</u><u>x</u><u>t</u><u>e</u><u>r</u><u>n</u><u>a</u><u>l</u> <u>p</u><u>o</u><u>r</u><u>t</u><u>s</u>
+
+       Traffic  from  the  <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b>  logical  ports enter the ingress datapath
+       pipeline via the <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b> port. This table adds the below logical flows
+       to handle the traffic from these ports.
+
+              •      A priority-100 flow is added for  each  <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b>  logical
+                     port  which  doesn’t  reside  on  a  chassis  to drop the
+                     ARP/IPv6 NS request to the router IP(s) (of  the  logical
+                     switch) which matches on the <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> of the <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> logi‐
+                     cal  port and the valid <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b> address(es) of the <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b>‐‐
+                     <b>n</b><b>a</b><b>l</b> logical port.
+
+                     This flow guarantees  that  the  ARP/NS  request  to  the
+                     router IP address from the external ports is responded by
+                     only  the chassis which has claimed these external ports.
+                     All the other chassis, drops these packets.
+
+                     A priority-100 flow is added for  each  <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b>  logical
+                     port which doesn’t reside on a chassis to drop any packet
+                     destined to the router mac - with the match <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b> <u>e</u><u>x</u><u>�</u>��
+                     <u>t</u><u>e</u><u>r</u><u>n</u><u>a</u><u>l</u>  &amp;&amp;&amp;&amp;  <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b>  <b>=</b><b>=</b>  <u>E</u>  &amp;&amp;&amp;&amp;  <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <u>R</u> &amp;&amp;&amp;&amp; <b>!</b><b>i</b><b>s</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b>‐‐
+                     <b>s</b><b>i</b><b>s</b><b>_</b><b>r</b><b>e</b><b>s</b><b>i</b><b>d</b><b>e</b><b>n</b><b>t</b><b>(</b><b>"</b><u>e</u><u>x</u><u>t</u><u>e</u><u>r</u><u>n</u><u>a</u><u>l</u><b>"</b><b>)</b> where <u>E</u> is the external port mac
+                     and <u>R</u> is the router port mac.
+
+              •      A priority-0 flow that matches all packets to advances to
+                     table 20.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>2</u><u>7</u> <u>D</u><u>e</u><u>s</u><u>t</u><u>i</u><u>n</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u> <u>L</u><u>o</u><u>o</u><u>k</u><u>u</u><u>p</u>
+
+       This table implements switching behavior.  It  contains  these  logical
+       flows:
+
+              •      A  priority-110  flow with the match <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b><b>=</b> <u>E</u> for all
+                     logical switch datapaths  and  applies  the  action  <b>h</b><b>a</b><b>n</b>‐‐
+                     <b>d</b><b>l</b><b>e</b><b>_</b><b>s</b><b>v</b><b>c</b><b>_</b><b>c</b><b>h</b><b>e</b><b>c</b><b>k</b><b>(</b><b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b><b>)</b>. Where <u>E</u> is the service monitor mac
+                     defined   in   the   <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>s</b><b>v</b><b>c</b><b>_</b><b>m</b><b>o</b><b>n</b><b>i</b><b>t</b><b>o</b><b>r</b><b>_</b><b>m</b><b>a</b><b>c</b>   column  of
+                     <b>N</b><b>B</b><b>_</b><b>G</b><b>l</b><b>o</b><b>b</b><b>a</b><b>l</b> table.
+
+              •      A priority-100 flow that punts all  IGMP/MLD  packets  to
+                     <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>  if  multicast  snooping is enabled on the
+                     logical switch.
+
+              •      Priority-90 flows that forward  registered  IP  multicast
+                     traffic  to  their  corresponding  multicast group, which
+                     <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> creates based on  learnt  <b>I</b><b>G</b><b>M</b><b>P</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b>  entries.
+                     The  flows  also  forward packets to the <b>M</b><b>C</b><b>_</b><b>M</b><b>R</b><b>O</b><b>U</b><b>T</b><b>E</b><b>R</b><b>_</b><b>F</b><b>L</b><b>O</b><b>O</b><b>D</b>
+                     multicast group, which <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>d</b><b>h</b> populates with all  the
+                     logical  ports that are connected to logical routers with
+                     <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>:mcast_relay=’true’.
+
+              •      A priority-85 flow that forwards all IP multicast traffic
+                     destined to 224.0.0.X to the <b>M</b><b>C</b><b>_</b><b>F</b><b>L</b><b>O</b><b>O</b><b>D</b><b>_</b><b>L</b><b>2</b> multicast group,
+                     which <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> populates with  all  non-router  logical
+                     ports.
+
+              •      A priority-85 flow that forwards all IP multicast traffic
+                     destined  to reserved multicast IPv6 addresses (RFC 4291,
+                     2.7.1, e.g., Solicited-Node multicast)  to  the  <b>M</b><b>C</b><b>_</b><b>F</b><b>L</b><b>O</b><b>O</b><b>D</b>
+                     multicast  group, which <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> populates with all en‐
+                     abled logical ports.
+
+              •      A priority-80 flow that forwards all unregistered IP mul‐
+                     ticast traffic to the <b>M</b><b>C</b><b>_</b><b>S</b><b>T</b><b>A</b><b>T</b><b>I</b><b>C</b>  multicast  group,  which
+                     <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> populates with all the logical ports that have
+                     <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>  <b>:</b><b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>f</b><b>l</b><b>o</b><b>o</b><b>d</b><b>=</b>’’<b>t</b><b>r</b><b>u</b><b>e</b>’’.  The flow also forwards un‐
+                     registered IP multicast traffic to  the  <b>M</b><b>C</b><b>_</b><b>M</b><b>R</b><b>O</b><b>U</b><b>T</b><b>E</b><b>R</b><b>_</b><b>F</b><b>L</b><b>O</b><b>O</b><b>D</b>
+                     multicast  group, which <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> populates with all the
+                     logical ports connected to logical routers that have  <b>o</b><b>p</b>‐‐
+                     <b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b><b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>r</b><b>e</b><b>l</b><b>a</b><b>y</b><b>=</b>’’<b>t</b><b>r</b><b>u</b><b>e</b>’’.
+
+              •      A  priority-80 flow that drops all unregistered IP multi‐
+                     cast  traffic  if  <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b>  <b>:</b><b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>s</b><b>n</b><b>o</b><b>o</b><b>p</b><b>=</b>’’<b>t</b><b>r</b><b>u</b><b>e</b>’’  and
+                     <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b>  <b>:</b><b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>f</b><b>l</b><b>o</b><b>o</b><b>d</b><b>_</b><b>u</b><b>n</b><b>r</b><b>e</b><b>g</b><b>i</b><b>s</b><b>t</b><b>e</b><b>r</b><b>e</b><b>d</b><b>=</b>’’<b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>’’  and  the
+                     switch is not connected to a logical router that has  <b>o</b><b>p</b>‐‐
+                     <b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b><b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>r</b><b>e</b><b>l</b><b>a</b><b>y</b><b>=</b>’’<b>t</b><b>r</b><b>u</b><b>e</b>’’ and the switch doesn’t have any
+                     logical port with <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b><b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>f</b><b>l</b><b>o</b><b>o</b><b>d</b><b>=</b>’’<b>t</b><b>r</b><b>u</b><b>e</b>’’.
+
+              •      Priority-80  flows  for  each  IP address/VIP/NAT address
+                     owned by a router port connected  to  the  switch.  These
+                     flows  match ARP requests and ND packets for the specific
+                     IP addresses. Matched packets are forwarded only  to  the
+                     router  that  owns  the IP address and to the <b>M</b><b>C</b><b>_</b><b>F</b><b>L</b><b>O</b><b>O</b><b>D</b><b>_</b><b>L</b><b>2</b>
+                     multicast group which  contains  all  non-router  logical
+                     ports.
+
+              •      Priority-75  flows  for  each port connected to a logical
+                     router matching  self  originated  ARP  request/RARP  re‐
+                     quest/ND  packets.  These  packets  are  flooded  to  the
+                     <b>M</b><b>C</b><b>_</b><b>F</b><b>L</b><b>O</b><b>O</b><b>D</b><b>_</b><b>L</b><b>2</b> which contains all non-router logical ports.
+
+              •      A priority-72 flow that outputs all ARP requests  and  ND
+                     packets  with  an Ethernet broadcast or multicast <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b>
+                     to the <b>M</b><b>C</b><b>_</b><b>F</b><b>L</b><b>O</b><b>O</b><b>D</b><b>_</b><b>L</b><b>2</b> multicast group if <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>:</b><b>b</b><b>r</b><b>o</b><b>a</b><b>d</b>‐‐
+                     <b>c</b><b>a</b><b>s</b><b>t</b><b>-</b><b>a</b><b>r</b><b>p</b><b>s</b><b>-</b><b>t</b><b>o</b><b>-</b><b>a</b><b>l</b><b>l</b><b>-</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>s</b><b>=</b><b>t</b><b>r</b><b>u</b><b>e</b>.
+
+              •      A priority-70 flow that outputs all packets with an  Eth‐
+                     ernet broadcast or multicast <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> to the <b>M</b><b>C</b><b>_</b><b>F</b><b>L</b><b>O</b><b>O</b><b>D</b> mul‐
+                     ticast group.
+
+              •      One priority-50 flow that matches each known Ethernet ad‐
+                     dress  against  <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b>.  Action of this flow outputs the
+                     packet to the single associated output port if it is  en‐
+                     abled. <b>d</b><b>r</b><b>o</b><b>p</b><b>;</b> action is applied if LSP is disabled.
+
+                     For the Ethernet address on a logical switch port of type
+                     <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b>,  when that logical switch port’s <b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>e</b><b>s</b> column
+                     is set to <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b> and the connected  logical  router  port
+                     has a gateway chassis:
+
+                     •      The  flow  for the connected logical router port’s
+                            Ethernet address is only programmed on the gateway
+                            chassis.
+
+                     •      If the logical router has rules specified  in  <b>n</b><b>a</b><b>t</b>
+                            with  <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>m</b><b>a</b><b>c</b>,  then those addresses are also
+                            used to populate the switch’s  destination  lookup
+                            on the chassis where <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b> is resident.
+
+                     For the Ethernet address on a logical switch port of type
+                     <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b>,  when that logical switch port’s <b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>e</b><b>s</b> column
+                     is set to <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b> and the connected  logical  router  port
+                     specifies  a  <b>r</b><b>e</b><b>s</b><b>i</b><b>d</b><b>e</b><b>-</b><b>o</b><b>n</b><b>-</b><b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>  and the logical
+                     router to which the connected logical router port belongs
+                     to has a distributed gateway LRP:
+
+                     •      The flow for the connected logical  router  port’s
+                            Ethernet address is only programmed on the gateway
+                            chassis.
+
+                     For  each  forwarding  group  configured  on  the logical
+                     switch datapath,  a  priority-50  flow  that  matches  on
+                     <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <u>V</u><u>I</u><u>P</u>
+                      with  an  action  of  <b>f</b><b>w</b><b>d</b><b>_</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b><b>(</b><b>c</b><b>h</b><b>i</b><b>l</b><b>d</b><b>p</b><b>o</b><b>r</b><b>t</b><b>s</b><b>=</b><u>a</u><u>r</u><u>g</u><u>s</u> <b>)</b>, where
+                     <u>a</u><u>r</u><u>g</u><u>s</u> contains comma separated logical switch child  ports
+                     to  load  balance to. If <b>l</b><b>i</b><b>v</b><b>e</b><b>n</b><b>e</b><b>s</b><b>s</b> is enabled, then action
+                     also includes  <b>l</b><b>i</b><b>v</b><b>e</b><b>n</b><b>e</b><b>s</b><b>s</b><b>=</b><b>t</b><b>r</b><b>u</b><b>e</b>.
+
+              •      One priority-0 fallback flow  that  matches  all  packets
+                     with  the  action  <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b> <b>g</b><b>e</b><b>t</b><b>_</b><b>f</b><b>d</b><b>b</b><b>(</b><b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b><b>)</b><b>;</b> <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>. The
+                     action <b>g</b><b>e</b><b>t</b><b>_</b><b>f</b><b>d</b><b>b</b> gets the port for the <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> in  the  MAC
+                     learning  table  of the logical switch datapath. If there
+                     is no entry for <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> in the MAC learning  table,  then
+                     it stores <b>n</b><b>o</b><b>n</b><b>e</b> in the <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b>.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>2</u><u>8</u> <u>D</u><u>e</u><u>s</u><u>t</u><u>i</u><u>n</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u> <u>u</u><u>n</u><u>k</u><u>n</u><u>o</u><u>w</u><u>n</u>
+
+       This  table  handles the packets whose destination was not found or and
+       looked up in the MAC learning table of the logical switch datapath.  It
+       contains the following flows.
+
+              •      Priority 50 flow with the match <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b> <u>P</u> is added for
+                     each disabled Logical Switch Port <b>P</b>. This flow has action
+                     <b>d</b><b>r</b><b>o</b><b>p</b><b>;</b>.
+
+              •      If  the  logical  switch has logical ports with ’unknown’
+                     addresses set, then the below logical flow is added
+
+                     •      Priority 50 flow with the match <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b>  <b>"</b><b>n</b><b>o</b><b>n</b><b>e</b><b>"</b>
+                            then  outputs  them  to  the  <b>M</b><b>C</b><b>_</b><b>U</b><b>N</b><b>K</b><b>N</b><b>O</b><b>W</b><b>N</b> multicast
+                            group, which <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> populates with all enabled
+                            logical  ports  that  accept  unknown  destination
+                            packets.  As  a  small optimization, if no logical
+                            ports   accept   unknown   destination    packets,
+                            <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>  omits this multicast group and logical
+                            flow.
+
+                     If the logical switch has no logical ports with ’unknown’
+                     address set, then the below logical flow is added
+
+                     •      Priority 50 flow with the match  <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b>  <b>=</b><b>=</b>  <b>n</b><b>o</b><b>n</b><b>e</b>
+                            and drops the packets.
+
+              •      One  priority-0  fallback flow that outputs the packet to
+                     the egress stage with the outport learnt from <b>g</b><b>e</b><b>t</b><b>_</b><b>f</b><b>d</b><b>b</b> ac‐
+                     tion.
+
+     <u>E</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>0</u><u>:</u> <b>t</b><b>o</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b> <u>P</u><u>r</u><u>e</u><u>-</u><u>A</u><u>C</u><u>L</u><u>s</u>
+
+       This is similar to ingress table <b>P</b><b>r</b><b>e</b><b>-</b><b>A</b><b>C</b><b>L</b><b>s</b> except for <b>t</b><b>o</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b> traffic.
+
+       This table also has a priority-110 flow with the match <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b><b>=</b> <u>E</u> for
+       all logical switch datapaths to move traffic to the next table. Where <u>E</u>
+       is the service monitor mac defined in the <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>s</b><b>v</b><b>c</b><b>_</b><b>m</b><b>o</b><b>n</b><b>i</b><b>t</b><b>o</b><b>r</b><b>_</b><b>m</b><b>a</b><b>c</b>  col‐
+       umn of <b>N</b><b>B</b><b>_</b><b>G</b><b>l</b><b>o</b><b>b</b><b>a</b><b>l</b> table.
+
+       This table also has a priority-110 flow with the match <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b> <u>I</u> for
+       all logical switch datapaths to move traffic to the next table. Where <u>I</u>
+       is  the  peer  of a logical router port. This flow is added to skip the
+       connection tracking of packets which will be  entering  logical  router
+       datapath from logical switch datapath for routing.
+
+     <u>E</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>1</u><u>:</u> <u>P</u><u>r</u><u>e</u><u>-</u><u>L</u><u>B</u>
+
+       This table is similar to ingress table <b>P</b><b>r</b><b>e</b><b>-</b><b>L</b><b>B</b>. It contains a priority-0
+       flow  that simply moves traffic to the next table. Moreover it contains
+       two priority-110 flows to move multicast, IPv6 Neighbor  Discovery  and
+       MLD  traffic  to  the next table. If any load balancing rules exist for
+       the datapath, a priority-100 flow is added with a match of <b>i</b><b>p</b>  and  ac‐
+       tion  of  <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>2</b><b>]</b> <b>=</b> <b>1</b><b>;</b> <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b> to act as a hint for table <b>P</b><b>r</b><b>e</b><b>-</b><b>s</b><b>t</b><b>a</b><b>t</b><b>e</b><b>f</b><b>u</b><b>l</b> to
+       send IP packets to the connection tracker for  packet  de-fragmentation
+       and  possibly  DNAT  the destination VIP to one of the selected backend
+       for already committed load balanced traffic.
+
+       This table also has a priority-110 flow with the match <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b><b>=</b> <u>E</u> for
+       all logical switch datapaths to move traffic to the next table. Where <u>E</u>
+       is the service monitor mac defined in the <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>s</b><b>v</b><b>c</b><b>_</b><b>m</b><b>o</b><b>n</b><b>i</b><b>t</b><b>o</b><b>r</b><b>_</b><b>m</b><b>a</b><b>c</b>  col‐
+       umn of <b>N</b><b>B</b><b>_</b><b>G</b><b>l</b><b>o</b><b>b</b><b>a</b><b>l</b> table.
+
+       This table also has a priority-110 flow with the match <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b> <u>I</u> for
+       all logical switch datapaths to move traffic to the next table, and, if
+       there are no stateful_acl, clear the ct_state. Where <u>I</u> is the peer of a
+       logical router port. This flow is added to skip the connection tracking
+       of  packets which will be entering logical router datapath from logical
+       switch datapath for routing.
+
+     <u>E</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>2</u><u>:</u> <u>P</u><u>r</u><u>e</u><u>-</u><u>s</u><u>t</u><u>a</u><u>t</u><u>e</u><u>f</u><u>u</u><u>l</u>
+
+       This is similar to ingress table <b>P</b><b>r</b><b>e</b><b>-</b><b>s</b><b>t</b><b>a</b><b>t</b><b>e</b><b>f</b><b>u</b><b>l</b>. This table adds the  be‐
+       low 3 logical flows.
+
+              •      A  Priority-120  flow that send the packets to connection
+                     tracker using <b>c</b><b>t</b><b>_</b><b>l</b><b>b</b><b>_</b><b>m</b><b>a</b><b>r</b><b>k</b><b>;</b> as the action so that  the  al‐
+                     ready established traffic gets unDNATted from the backend
+                     IP  to  the load balancer VIP based on a hint provided by
+                     the previous tables with a match for <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>2</b><b>]</b> <b>=</b><b>=</b> <b>1</b>. If the
+                     packet was not DNATted earlier, then <b>c</b><b>t</b><b>_</b><b>l</b><b>b</b><b>_</b><b>m</b><b>a</b><b>r</b><b>k</b> functions
+                     like <b>c</b><b>t</b><b>_</b><b>n</b><b>e</b><b>x</b><b>t</b>.
+
+              •      A priority-100  flow  sends  the  packets  to  connection
+                     tracker  based  on a hint provided by the previous tables
+                     (with a match for <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>0</b><b>]</b> <b>=</b><b>=</b> <b>1</b>) by using the <b>c</b><b>t</b><b>_</b><b>n</b><b>e</b><b>x</b><b>t</b><b>;</b> ac‐
+                     tion.
+
+              •      A priority-0 flow that matches all packets to advance  to
+                     the next table.
+
+     <u>E</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>3</u><u>:</u> <b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b> <u>A</u><u>C</u><u>L</u> <u>h</u><u>i</u><u>n</u><u>t</u><u>s</u>
+
+       This is similar to ingress table <b>A</b><b>C</b><b>L</b> <b>h</b><b>i</b><b>n</b><b>t</b><b>s</b>.
+
+     <u>E</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>4</u><u>:</u> <b>t</b><b>o</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b> <u>A</u><u>C</u><u>L</u> <u>e</u><u>v</u><u>a</u><u>l</u><u>u</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u>
+
+       This  is similar to ingress table <b>A</b><b>C</b><b>L</b> <b>e</b><b>v</b><b>a</b><b>l</b> except for <b>t</b><b>o</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b> ACLs. As
+       a reminder, these flows use the following  register  bits  to  indicate
+       their  verdicts.  <b>A</b><b>l</b><b>l</b><b>o</b><b>w</b><b>-</b><b>t</b><b>y</b><b>p</b><b>e</b> ACLs set <b>r</b><b>e</b><b>g</b><b>8</b><b>[</b><b>1</b><b>6</b><b>]</b>, <b>d</b><b>r</b><b>o</b><b>p</b> ACLs set <b>r</b><b>e</b><b>g</b><b>8</b><b>[</b><b>1</b><b>7</b><b>]</b>,
+       and <b>r</b><b>e</b><b>j</b><b>e</b><b>c</b><b>t</b> ACLs set <b>r</b><b>e</b><b>g</b><b>8</b><b>[</b><b>1</b><b>8</b><b>]</b>.
+
+       Also like with ingress ACLs, egress ACLs can have a configured <b>t</b><b>i</b><b>e</b><b>r</b>. If
+       a tier is configured,  then  the  current  tier  counter  is  evaluated
+       against  the  ACL’s configured tier in addition to the ACL’s match. The
+       current tier counter is stored in <b>r</b><b>e</b><b>g</b><b>8</b><b>[</b><b>3</b><b>0</b><b>.</b><b>.</b><b>3</b><b>1</b><b>]</b>.
+
+       Similar to ingress table, a priority-65532 flow is added to allow  IPv6
+       Neighbor  solicitation,  Neighbor discover, Router solicitation, Router
+       advertisement and MLD packets regardless of other ACLs defined.
+
+       In addition, the following flows are added.
+
+              •      A priority 34000 logical flow is added for  each  logical
+                     port which has DHCPv4 options defined to allow the DHCPv4
+                     reply  packet and which has DHCPv6 options defined to al‐
+                     low the DHCPv6 reply packet from the  <b>I</b><b>n</b><b>g</b><b>r</b><b>e</b><b>s</b><b>s</b>  <b>T</b><b>a</b><b>b</b><b>l</b><b>e</b>  <b>1</b><b>8</b><b>:</b>
+                     <b>D</b><b>H</b><b>C</b><b>P</b>  <b>r</b><b>e</b><b>s</b><b>p</b><b>o</b><b>n</b><b>s</b><b>e</b><b>s</b>.  This  is indicated by setting the allow
+                     bit.
+
+              •      A priority 34000 logical flow is added for  each  logical
+                     switch  datapath  configured  with  DNS  records with the
+                     match <b>u</b><b>d</b><b>p</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b> <b>5</b><b>3</b> to allow the DNS reply packet from the
+                     <b>I</b><b>n</b><b>g</b><b>r</b><b>e</b><b>s</b><b>s</b> <b>T</b><b>a</b><b>b</b><b>l</b><b>e</b> <b>2</b><b>0</b><b>:</b> <b>D</b><b>N</b><b>S</b> <b>r</b><b>e</b><b>s</b><b>p</b><b>o</b><b>n</b><b>s</b><b>e</b><b>s</b>.  This  is  indicated  by
+                     setting the allow bit.
+
+              •      A  priority  34000 logical flow is added for each logical
+                     switch datapath with the match <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <u>E</u> to  allow  the
+                     service  monitor  request  packet  generated  by <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b>‐‐
+                     <b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> with the action <b>n</b><b>e</b><b>x</b><b>t</b>, where <u>E</u> is the service mon‐
+                     itor mac defined in the <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>s</b><b>v</b><b>c</b><b>_</b><b>m</b><b>o</b><b>n</b><b>i</b><b>t</b><b>o</b><b>r</b><b>_</b><b>m</b><b>a</b><b>c</b> column of
+                     <b>N</b><b>B</b><b>_</b><b>G</b><b>l</b><b>o</b><b>b</b><b>a</b><b>l</b> table. This is indicated by setting  the  allow
+                     bit.
+
+     <u>E</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>5</u><u>:</u> <b>t</b><b>o</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b> <u>A</u><u>C</u><u>L</u> <u>a</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u>
+
+       This is similar to ingress table <b>A</b><b>C</b><b>L</b> <b>a</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>.
+
+     <u>E</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>6</u><u>:</u> <b>t</b><b>o</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b> <u>Q</u><u>o</u><u>S</u> <u>M</u><u>a</u><u>r</u><u>k</u><u>i</u><u>n</u><u>g</u>
+
+       This  is  similar  to  ingress  table  <b>Q</b><b>o</b><b>S</b> <b>m</b><b>a</b><b>r</b><b>k</b><b>i</b><b>n</b><b>g</b> except they apply to
+       <b>t</b><b>o</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b> QoS rules.
+
+     <u>E</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>7</u><u>:</u> <b>t</b><b>o</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b> <u>Q</u><u>o</u><u>S</u> <u>M</u><u>e</u><u>t</u><u>e</u><u>r</u>
+
+       This is similar to  ingress  table  <b>Q</b><b>o</b><b>S</b>  <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b>  except  they  apply  to
+       <b>t</b><b>o</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b> QoS rules.
+
+     <u>E</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>8</u><u>:</u> <u>S</u><u>t</u><u>a</u><u>t</u><u>e</u><u>f</u><u>u</u><u>l</u>
+
+       This  is  similar  to  ingress  table <b>S</b><b>t</b><b>a</b><b>t</b><b>e</b><b>f</b><b>u</b><b>l</b> except that there are no
+       rules added for load balancing new connections.
+
+     <u>E</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>9</u><u>:</u> <u>E</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>P</u><u>o</u><u>r</u><u>t</u> <u>S</u><u>e</u><u>c</u><u>u</u><u>r</u><u>i</u><u>t</u><u>y</u> <u>-</u> <u>c</u><u>h</u><u>e</u><u>c</u><u>k</u>
+
+       This is similar to the port security logic in table <b>I</b><b>n</b><b>g</b><b>r</b><b>e</b><b>s</b><b>s</b> <b>P</b><b>o</b><b>r</b><b>t</b>  <b>S</b><b>e</b><b>c</b><b>u</b>‐‐
+       <b>r</b><b>i</b><b>t</b><b>y</b>  <b>c</b><b>h</b><b>e</b><b>c</b><b>k</b>  except that action <b>c</b><b>h</b><b>e</b><b>c</b><b>k</b><b>_</b><b>o</b><b>u</b><b>t</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b><b>_</b><b>s</b><b>e</b><b>c</b> is used to check the
+       port security rules. This table adds the below logical flows.
+
+              •      A priority 100 flow which matches on the multicast  traf‐
+                     fic  and  applies  the  action <b>R</b><b>E</b><b>G</b><b>B</b><b>I</b><b>T</b><b>_</b><b>P</b><b>O</b><b>R</b><b>T</b><b>_</b><b>S</b><b>E</b><b>C</b><b>_</b><b>D</b><b>R</b><b>O</b><b>P</b><b>"</b> <b>=</b> <b>0</b><b>;</b>
+                     <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b><b>"</b> to skip the out port security checks.
+
+              •      A priority 0 logical flow is added which matches  on  all
+                     the  packets and applies the action <b>R</b><b>E</b><b>G</b><b>B</b><b>I</b><b>T</b><b>_</b><b>P</b><b>O</b><b>R</b><b>T</b><b>_</b><b>S</b><b>E</b><b>C</b><b>_</b><b>D</b><b>R</b><b>O</b><b>P</b><b>"</b>
+                     <b>=</b>    <b>c</b><b>h</b><b>e</b><b>c</b><b>k</b><b>_</b><b>o</b><b>u</b><b>t</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b><b>_</b><b>s</b><b>e</b><b>c</b><b>(</b><b>)</b><b>;</b>     <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b><b>"</b>.     The     action
+                     <b>c</b><b>h</b><b>e</b><b>c</b><b>k</b><b>_</b><b>o</b><b>u</b><b>t</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b><b>_</b><b>s</b><b>e</b><b>c</b>  applies the port security rules based
+                     on the addresses defined in the <b>p</b><b>o</b><b>r</b><b>t</b><b>_</b><b>s</b><b>e</b><b>c</b><b>u</b><b>r</b><b>i</b><b>t</b><b>y</b>  column  of
+                     <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b> table before delivering the packet to
+                     the <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b>.
+
+     <u>E</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>1</u><u>0</u><u>:</u> <u>E</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>P</u><u>o</u><u>r</u><u>t</u> <u>S</u><u>e</u><u>c</u><u>u</u><u>r</u><u>i</u><u>t</u><u>y</u> <u>-</u> <u>A</u><u>p</u><u>p</u><u>l</u><u>y</u>
+
+       This  is  similar to the ingress port security logic in ingress table <b>A</b>
+       <b>I</b><b>n</b><b>g</b><b>r</b><b>e</b><b>s</b><b>s</b> <b>P</b><b>o</b><b>r</b><b>t</b> <b>S</b><b>e</b><b>c</b><b>u</b><b>r</b><b>i</b><b>t</b><b>y</b> <b>-</b> <b>A</b><b>p</b><b>p</b><b>l</b><b>y</b>. This table drops the packets if the port
+       security check failed in the previous stage i.e the register  bit  <b>R</b><b>E</b><b>G</b>‐‐
+       <b>B</b><b>I</b><b>T</b><b>_</b><b>P</b><b>O</b><b>R</b><b>T</b><b>_</b><b>S</b><b>E</b><b>C</b><b>_</b><b>D</b><b>R</b><b>O</b><b>P</b> is set to 1.
+
+       The following flows are added.
+
+              •      For  each  port  configured  with  egress  qos in the <b>o</b><b>p</b>‐‐
+                     <b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>q</b><b>d</b><b>i</b><b>s</b><b>c</b><b>_</b><b>q</b><b>u</b><b>e</b><b>u</b><b>e</b><b>_</b><b>i</b><b>d</b> column of <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b>,  run‐
+                     ning a localnet port on the same logical switch, a prior‐
+                     ity  110 flow is added which matches on the localnet <b>o</b><b>u</b><b>t</b>‐‐
+                     <b>p</b><b>o</b><b>r</b><b>t</b> and on  the  port  <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b>  and  applies  the  action
+                     <b>s</b><b>e</b><b>t</b><b>_</b><b>q</b><b>u</b><b>e</b><b>u</b><b>e</b><b>(</b><b>i</b><b>d</b><b>)</b><b>;</b> <b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b><b>;</b><b>"</b>.
+
+              •      For  each localnet port configured with egress qos in the
+                     <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>q</b><b>d</b><b>i</b><b>s</b><b>c</b><b>_</b><b>q</b><b>u</b><b>e</b><b>u</b><b>e</b><b>_</b><b>i</b><b>d</b> column of  <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b>,  a
+                     priority  100 flow is added which matches on the localnet
+                     <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> and applies the action <b>s</b><b>e</b><b>t</b><b>_</b><b>q</b><b>u</b><b>e</b><b>u</b><b>e</b><b>(</b><b>i</b><b>d</b><b>)</b><b>;</b> <b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b><b>;</b><b>"</b>.
+
+                     Please remember to mark the corresponding physical inter‐
+                     face with <b>o</b><b>v</b><b>n</b><b>-</b><b>e</b><b>g</b><b>r</b><b>e</b><b>s</b><b>s</b><b>-</b><b>i</b><b>f</b><b>a</b><b>c</b><b>e</b> set to true in <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>.
+
+              •      A priority-50 flow that drops the packet if the  register
+                     bit <b>R</b><b>E</b><b>G</b><b>B</b><b>I</b><b>T</b><b>_</b><b>P</b><b>O</b><b>R</b><b>T</b><b>_</b><b>S</b><b>E</b><b>C</b><b>_</b><b>D</b><b>R</b><b>O</b><b>P</b> is set to 1.
+
+              •      A priority-0 flow that outputs the packet to the <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b>.
+
+   <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b> <b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b> <b>D</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>s</b>
+       Logical router datapaths will only exist for <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b> rows in the
+       <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database that do not have <b>e</b><b>n</b><b>a</b><b>b</b><b>l</b><b>e</b><b>d</b> set to <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>0</u><u>:</u> <u>L</u><u>2</u> <u>A</u><u>d</u><u>m</u><u>i</u><u>s</u><u>s</u><u>i</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>n</u><u>t</u><u>r</u><u>o</u><u>l</u>
+
+       This  table drops packets that the router shouldn’t see at all based on
+       their Ethernet headers. It contains the following flows:
+
+              •      Priority-100 flows to drop packets with VLAN tags or mul‐
+                     ticast Ethernet source addresses.
+
+              •      For each enabled router port <u>P</u> with Ethernet address <u>E</u>, a
+                     priority-50 flow that matches <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b> <u>P</u>  &amp;&amp;&amp;&amp;  <b>(</b><b>e</b><b>t</b><b>h</b><b>.</b><b>m</b><b>c</b><b>a</b><b>s</b><b>t</b>
+                     <b>|</b><b>|</b> <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <u>E</u>), stores the router port ethernet address
+                     and  advances  to next table, with action <b>x</b><b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>0</b><b>.</b><b>.</b><b>4</b><b>7</b><b>]</b><b>=</b><b>E</b><b>;</b>
+                     <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>.
+
+                     For the gateway port  on  a  distributed  logical  router
+                     (where  one of the logical router ports specifies a gate‐
+                     way chassis), the above flow matching  <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b>  <b>=</b><b>=</b>  <u>E</u>  is
+                     only programmed on the gateway port instance on the gate‐
+                     way  chassis. If LRP’s logical switch has attached LSP of
+                     <b>v</b><b>t</b><b>e</b><b>p</b> type, the <b>i</b><b>s</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>r</b><b>e</b><b>s</b><b>i</b><b>d</b><b>e</b><b>n</b><b>t</b><b>(</b><b>)</b> part is not added to
+                     lflow to allow traffic originated from logical switch  to
+                     reach LR services (LBs, NAT).
+
+                     For  a  distributed  logical router or for gateway router
+                     where the port is configured with <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>_</b><b>m</b><b>t</b><b>u</b> the
+                     action   of   the   above   flow   is   modified   adding
+                     <b>c</b><b>h</b><b>e</b><b>c</b><b>k</b><b>_</b><b>p</b><b>k</b><b>t</b><b>_</b><b>l</b><b>a</b><b>r</b><b>g</b><b>e</b><b>r</b> in order to mark the packet setting <b>R</b><b>E</b><b>G</b>‐‐
+                     <b>B</b><b>I</b><b>T</b><b>_</b><b>P</b><b>K</b><b>T</b><b>_</b><b>L</b><b>A</b><b>R</b><b>G</b><b>E</b><b>R</b>  if  the  size is greater than the MTU. If
+                     the port is also configured with  <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>_</b><b>m</b><b>t</b><b>u</b><b>_</b><b>b</b><b>y</b>‐‐
+                     <b>p</b><b>a</b><b>s</b><b>s</b> then another flow is added, with priority-55, to by‐
+                     pass  the <b>c</b><b>h</b><b>e</b><b>c</b><b>k</b><b>_</b><b>p</b><b>k</b><b>t</b><b>_</b><b>l</b><b>a</b><b>r</b><b>g</b><b>e</b><b>r</b> flow. This is useful for traf‐
+                     fic that normally doesn’t need to be fragmented  and  for
+                     which  check_pkt_larger,  which might not be offloadable,
+                     is not really needed. One such example is TCP traffic.
+
+              •      For each <b>d</b><b>n</b><b>a</b><b>t</b><b>_</b><b>a</b><b>n</b><b>d</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b> NAT rule on a  distributed  router
+                     that  specifies  an external Ethernet address <u>E</u>, a prior‐
+                     ity-50 flow that matches <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b> <u>G</u><u>W</u> &amp;&amp;&amp;&amp;  <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b>  <b>=</b><b>=</b>  <u>E</u>,
+                     where  <u>G</u><u>W</u>  is the logical router distributed gateway port
+                     corresponding to the NAT rule  (specified  or  inferred),
+                     with action <b>x</b><b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>0</b><b>.</b><b>.</b><b>4</b><b>7</b><b>]</b><b>=</b><b>E</b><b>;</b> <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>.
+
+                     This flow is only programmed on the gateway port instance
+                     on  the  chassis  where the <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b> specified in the
+                     NAT rule resides.
+
+              •      A priority-0 logical flow that matches  all  packets  not
+                     already handled (match <b>1</b>) and drops them (action <b>d</b><b>r</b><b>o</b><b>p</b><b>;</b>).
+
+       Other packets are implicitly dropped.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>1</u><u>:</u> <u>N</u><u>e</u><u>i</u><u>g</u><u>h</u><u>b</u><u>o</u><u>r</u> <u>l</u><u>o</u><u>o</u><u>k</u><u>u</u><u>p</u>
+
+       For  ARP and IPv6 Neighbor Discovery packets, this table looks into the
+       <b>M</b><b>A</b><b>C</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> records to determine if OVN needs to learn  the  mac  bind‐
+       ings. Following flows are added:
+
+              •      For  each router port <u>P</u> that owns IP address <u>A</u>, which be‐
+                     longs to subnet <u>S</u> with prefix length <u>L</u>, if the option <b>a</b><b>l</b>‐‐
+                     <b>w</b><b>a</b><b>y</b><b>s</b><b>_</b><b>l</b><b>e</b><b>a</b><b>r</b><b>n</b><b>_</b><b>f</b><b>r</b><b>o</b><b>m</b><b>_</b><b>a</b><b>r</b><b>p</b><b>_</b><b>r</b><b>e</b><b>q</b><b>u</b><b>e</b><b>s</b><b>t</b> is <b>t</b><b>r</b><b>u</b><b>e</b> for  this  router,  a
+                     priority-100  flow  is added which matches <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b> <u>P</u> &amp;&amp;&amp;&amp;
+                     <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>p</b><b>a</b> <b>=</b><b>=</b> <u>S</u><b>/</b><u>L</u> &amp;&amp;&amp;&amp; <b>a</b><b>r</b><b>p</b><b>.</b><b>o</b><b>p</b> <b>=</b><b>=</b> <b>1</b> (ARP request) with the fol‐
+                     lowing actions:
+
+                     <b>r</b><b>e</b><b>g</b><b>9</b><b>[</b><b>2</b><b>]</b> <b>=</b> <b>l</b><b>o</b><b>o</b><b>k</b><b>u</b><b>p</b><b>_</b><b>a</b><b>r</b><b>p</b><b>(</b><b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b><b>,</b> <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>p</b><b>a</b><b>,</b> <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>h</b><b>a</b><b>)</b><b>;</b>
+                     <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>
+
+
+                     If the option <b>a</b><b>l</b><b>w</b><b>a</b><b>y</b><b>s</b><b>_</b><b>l</b><b>e</b><b>a</b><b>r</b><b>n</b><b>_</b><b>f</b><b>r</b><b>o</b><b>m</b><b>_</b><b>a</b><b>r</b><b>p</b><b>_</b><b>r</b><b>e</b><b>q</b><b>u</b><b>e</b><b>s</b><b>t</b> is <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>, the
+                     following two flows are added.
+
+                     A priority-110 flow is added which matches <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b> <u>P</u> &amp;&amp;&amp;&amp;
+                     <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>p</b><b>a</b> <b>=</b><b>=</b> <u>S</u><b>/</b><u>L</u> &amp;&amp;&amp;&amp; <b>a</b><b>r</b><b>p</b><b>.</b><b>t</b><b>p</b><b>a</b> <b>=</b><b>=</b> <u>A</u> &amp;&amp;&amp;&amp; <b>a</b><b>r</b><b>p</b><b>.</b><b>o</b><b>p</b> <b>=</b><b>=</b>  <b>1</b>  (ARP  re‐
+                     quest) with the following actions:
+
+                     <b>r</b><b>e</b><b>g</b><b>9</b><b>[</b><b>2</b><b>]</b> <b>=</b> <b>l</b><b>o</b><b>o</b><b>k</b><b>u</b><b>p</b><b>_</b><b>a</b><b>r</b><b>p</b><b>(</b><b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b><b>,</b> <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>p</b><b>a</b><b>,</b> <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>h</b><b>a</b><b>)</b><b>;</b>
+                     <b>r</b><b>e</b><b>g</b><b>9</b><b>[</b><b>3</b><b>]</b> <b>=</b> <b>1</b><b>;</b>
+                     <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>
+
+
+                     A priority-100 flow is added which matches <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b> <u>P</u> &amp;&amp;&amp;&amp;
+                     <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>p</b><b>a</b> <b>=</b><b>=</b> <u>S</u><b>/</b><u>L</u> &amp;&amp;&amp;&amp; <b>a</b><b>r</b><b>p</b><b>.</b><b>o</b><b>p</b> <b>=</b><b>=</b> <b>1</b> (ARP request) with the fol‐
+                     lowing actions:
+
+                     <b>r</b><b>e</b><b>g</b><b>9</b><b>[</b><b>2</b><b>]</b> <b>=</b> <b>l</b><b>o</b><b>o</b><b>k</b><b>u</b><b>p</b><b>_</b><b>a</b><b>r</b><b>p</b><b>(</b><b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b><b>,</b> <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>p</b><b>a</b><b>,</b> <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>h</b><b>a</b><b>)</b><b>;</b>
+                     <b>r</b><b>e</b><b>g</b><b>9</b><b>[</b><b>3</b><b>]</b> <b>=</b> <b>l</b><b>o</b><b>o</b><b>k</b><b>u</b><b>p</b><b>_</b><b>a</b><b>r</b><b>p</b><b>_</b><b>i</b><b>p</b><b>(</b><b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b><b>,</b> <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>p</b><b>a</b><b>)</b><b>;</b>
+                     <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>
+
+
+                     If  the  logical  router  port <u>P</u> is a distributed gateway
+                     router port, additional  match  <b>i</b><b>s</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>r</b><b>e</b><b>s</b><b>i</b><b>d</b><b>e</b><b>n</b><b>t</b><b>(</b><b>c</b><b>r</b><b>-</b><u>P</u><b>)</b>
+                     is added for all these flows.
+
+              •      A  priority-100  flow  which matches on ARP reply packets
+                     and   applies   the   actions   if   the    option    <b>a</b><b>l</b>‐‐
+                     <b>w</b><b>a</b><b>y</b><b>s</b><b>_</b><b>l</b><b>e</b><b>a</b><b>r</b><b>n</b><b>_</b><b>f</b><b>r</b><b>o</b><b>m</b><b>_</b><b>a</b><b>r</b><b>p</b><b>_</b><b>r</b><b>e</b><b>q</b><b>u</b><b>e</b><b>s</b><b>t</b> is <b>t</b><b>r</b><b>u</b><b>e</b>:
+
+                     <b>r</b><b>e</b><b>g</b><b>9</b><b>[</b><b>2</b><b>]</b> <b>=</b> <b>l</b><b>o</b><b>o</b><b>k</b><b>u</b><b>p</b><b>_</b><b>a</b><b>r</b><b>p</b><b>(</b><b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b><b>,</b> <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>p</b><b>a</b><b>,</b> <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>h</b><b>a</b><b>)</b><b>;</b>
+                     <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>
+
+
+                     If the option <b>a</b><b>l</b><b>w</b><b>a</b><b>y</b><b>s</b><b>_</b><b>l</b><b>e</b><b>a</b><b>r</b><b>n</b><b>_</b><b>f</b><b>r</b><b>o</b><b>m</b><b>_</b><b>a</b><b>r</b><b>p</b><b>_</b><b>r</b><b>e</b><b>q</b><b>u</b><b>e</b><b>s</b><b>t</b> is <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>, the
+                     above actions will be:
+
+                     <b>r</b><b>e</b><b>g</b><b>9</b><b>[</b><b>2</b><b>]</b> <b>=</b> <b>l</b><b>o</b><b>o</b><b>k</b><b>u</b><b>p</b><b>_</b><b>a</b><b>r</b><b>p</b><b>(</b><b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b><b>,</b> <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>p</b><b>a</b><b>,</b> <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>h</b><b>a</b><b>)</b><b>;</b>
+                     <b>r</b><b>e</b><b>g</b><b>9</b><b>[</b><b>3</b><b>]</b> <b>=</b> <b>1</b><b>;</b>
+                     <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>
+
+
+              •      A  priority-100  flow which matches on IPv6 Neighbor Dis‐
+                     covery advertisement packet and applies  the  actions  if
+                     the option <b>a</b><b>l</b><b>w</b><b>a</b><b>y</b><b>s</b><b>_</b><b>l</b><b>e</b><b>a</b><b>r</b><b>n</b><b>_</b><b>f</b><b>r</b><b>o</b><b>m</b><b>_</b><b>a</b><b>r</b><b>p</b><b>_</b><b>r</b><b>e</b><b>q</b><b>u</b><b>e</b><b>s</b><b>t</b> is <b>t</b><b>r</b><b>u</b><b>e</b>:
+
+                     <b>r</b><b>e</b><b>g</b><b>9</b><b>[</b><b>2</b><b>]</b> <b>=</b> <b>l</b><b>o</b><b>o</b><b>k</b><b>u</b><b>p</b><b>_</b><b>n</b><b>d</b><b>(</b><b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b><b>,</b> <b>n</b><b>d</b><b>.</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b><b>,</b> <b>n</b><b>d</b><b>.</b><b>t</b><b>l</b><b>l</b><b>)</b><b>;</b>
+                     <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>
+
+
+                     If the option <b>a</b><b>l</b><b>w</b><b>a</b><b>y</b><b>s</b><b>_</b><b>l</b><b>e</b><b>a</b><b>r</b><b>n</b><b>_</b><b>f</b><b>r</b><b>o</b><b>m</b><b>_</b><b>a</b><b>r</b><b>p</b><b>_</b><b>r</b><b>e</b><b>q</b><b>u</b><b>e</b><b>s</b><b>t</b> is <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>, the
+                     above actions will be:
+
+                     <b>r</b><b>e</b><b>g</b><b>9</b><b>[</b><b>2</b><b>]</b> <b>=</b> <b>l</b><b>o</b><b>o</b><b>k</b><b>u</b><b>p</b><b>_</b><b>n</b><b>d</b><b>(</b><b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b><b>,</b> <b>n</b><b>d</b><b>.</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b><b>,</b> <b>n</b><b>d</b><b>.</b><b>t</b><b>l</b><b>l</b><b>)</b><b>;</b>
+                     <b>r</b><b>e</b><b>g</b><b>9</b><b>[</b><b>3</b><b>]</b> <b>=</b> <b>1</b><b>;</b>
+                     <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>
+
+
+              •      A  priority-100  flow which matches on IPv6 Neighbor Dis‐
+                     covery solicitation packet and applies the actions if the
+                     option <b>a</b><b>l</b><b>w</b><b>a</b><b>y</b><b>s</b><b>_</b><b>l</b><b>e</b><b>a</b><b>r</b><b>n</b><b>_</b><b>f</b><b>r</b><b>o</b><b>m</b><b>_</b><b>a</b><b>r</b><b>p</b><b>_</b><b>r</b><b>e</b><b>q</b><b>u</b><b>e</b><b>s</b><b>t</b> is <b>t</b><b>r</b><b>u</b><b>e</b>:
+
+                     <b>r</b><b>e</b><b>g</b><b>9</b><b>[</b><b>2</b><b>]</b> <b>=</b> <b>l</b><b>o</b><b>o</b><b>k</b><b>u</b><b>p</b><b>_</b><b>n</b><b>d</b><b>(</b><b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b><b>,</b> <b>i</b><b>p</b><b>6</b><b>.</b><b>s</b><b>r</b><b>c</b><b>,</b> <b>n</b><b>d</b><b>.</b><b>s</b><b>l</b><b>l</b><b>)</b><b>;</b>
+                     <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>
+
+
+                     If the option <b>a</b><b>l</b><b>w</b><b>a</b><b>y</b><b>s</b><b>_</b><b>l</b><b>e</b><b>a</b><b>r</b><b>n</b><b>_</b><b>f</b><b>r</b><b>o</b><b>m</b><b>_</b><b>a</b><b>r</b><b>p</b><b>_</b><b>r</b><b>e</b><b>q</b><b>u</b><b>e</b><b>s</b><b>t</b> is <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>, the
+                     above actions will be:
+
+                     <b>r</b><b>e</b><b>g</b><b>9</b><b>[</b><b>2</b><b>]</b> <b>=</b> <b>l</b><b>o</b><b>o</b><b>k</b><b>u</b><b>p</b><b>_</b><b>n</b><b>d</b><b>(</b><b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b><b>,</b> <b>i</b><b>p</b><b>6</b><b>.</b><b>s</b><b>r</b><b>c</b><b>,</b> <b>n</b><b>d</b><b>.</b><b>s</b><b>l</b><b>l</b><b>)</b><b>;</b>
+                     <b>r</b><b>e</b><b>g</b><b>9</b><b>[</b><b>3</b><b>]</b> <b>=</b> <b>l</b><b>o</b><b>o</b><b>k</b><b>u</b><b>p</b><b>_</b><b>n</b><b>d</b><b>_</b><b>i</b><b>p</b><b>(</b><b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b><b>,</b> <b>i</b><b>p</b><b>6</b><b>.</b><b>s</b><b>r</b><b>c</b><b>)</b><b>;</b>
+                     <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>
+
+
+              •      A priority-0 fallback flow that matches all  packets  and
+                     applies  the  action  <b>r</b><b>e</b><b>g</b><b>9</b><b>[</b><b>2</b><b>]</b>  <b>=</b>  <b>1</b><b>;</b>  <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b> advancing the
+                     packet to the next table.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>2</u><u>:</u> <u>N</u><u>e</u><u>i</u><u>g</u><u>h</u><u>b</u><u>o</u><u>r</u> <u>l</u><u>e</u><u>a</u><u>r</u><u>n</u><u>i</u><u>n</u><u>g</u>
+
+       This table adds flows to learn the mac bindings from the ARP  and  IPv6
+       Neighbor  Solicitation/Advertisement  packets if it is needed according
+       to the lookup results from the previous stage.
+
+       reg9[2] will be <b>1</b> if the <b>l</b><b>o</b><b>o</b><b>k</b><b>u</b><b>p</b><b>_</b><b>a</b><b>r</b><b>p</b><b>/</b><b>l</b><b>o</b><b>o</b><b>k</b><b>u</b><b>p</b><b>_</b><b>n</b><b>d</b> in the previous table was
+       successful or skipped, meaning no need to learn mac  binding  from  the
+       packet.
+
+       reg9[3] will be <b>1</b> if the <b>l</b><b>o</b><b>o</b><b>k</b><b>u</b><b>p</b><b>_</b><b>a</b><b>r</b><b>p</b><b>_</b><b>i</b><b>p</b><b>/</b><b>l</b><b>o</b><b>o</b><b>k</b><b>u</b><b>p</b><b>_</b><b>n</b><b>d</b><b>_</b><b>i</b><b>p</b> in the previous ta‐
+       ble  was  successful  or skipped, meaning it is ok to learn mac binding
+       from the packet (if reg9[2] is 0).
+
+              •      A priority-100 flow  with  the  match  <b>r</b><b>e</b><b>g</b><b>9</b><b>[</b><b>2</b><b>]</b>  <b>=</b><b>=</b>  <b>1</b>  <b>|</b><b>|</b>
+                     <b>r</b><b>e</b><b>g</b><b>9</b><b>[</b><b>3</b><b>]</b> <b>=</b><b>=</b> <b>0</b> and advances the packet to the next table as
+                     there is no need to learn the neighbor.
+
+              •      A  priority-95 flow with the match <b>n</b><b>d</b><b>_</b><b>n</b><b>s</b> &amp;&amp;&amp;&amp; <b>(</b><b>i</b><b>p</b><b>6</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b><b>=</b> <b>0</b>
+                     <b>|</b><b>|</b> <b>n</b><b>d</b><b>.</b><b>s</b><b>l</b><b>l</b> <b>=</b><b>=</b> <b>0</b><b>)</b> and applies the action <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>
+
+              •      A priority-90 flow with the match <b>a</b><b>r</b><b>p</b> and applies the ac‐
+                     tion <b>p</b><b>u</b><b>t</b><b>_</b><b>a</b><b>r</b><b>p</b><b>(</b><b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b><b>,</b> <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>p</b><b>a</b><b>,</b> <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>h</b><b>a</b><b>)</b><b>;</b> <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>
+
+              •      A priority-95 flow with the match <b>n</b><b>d</b><b>_</b><b>n</b><b>a</b>  &amp;&amp;&amp;&amp; <b>n</b><b>d</b><b>.</b><b>t</b><b>l</b><b>l</b>  <b>=</b><b>=</b>  <b>0</b>
+                     and   applies   the   action   <b>p</b><b>u</b><b>t</b><b>_</b><b>n</b><b>d</b><b>(</b><b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b><b>,</b>  <b>n</b><b>d</b><b>.</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b><b>,</b>
+                     <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b><b>)</b><b>;</b> <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>
+
+              •      A priority-90 flow with the match <b>n</b><b>d</b><b>_</b><b>n</b><b>a</b> and  applies  the
+                     action <b>p</b><b>u</b><b>t</b><b>_</b><b>n</b><b>d</b><b>(</b><b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b><b>,</b> <b>n</b><b>d</b><b>.</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b><b>,</b> <b>n</b><b>d</b><b>.</b><b>t</b><b>l</b><b>l</b><b>)</b><b>;</b> <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>
+
+              •      A  priority-90  flow with the match <b>n</b><b>d</b><b>_</b><b>n</b><b>s</b> and applies the
+                     action <b>p</b><b>u</b><b>t</b><b>_</b><b>n</b><b>d</b><b>(</b><b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b><b>,</b> <b>i</b><b>p</b><b>6</b><b>.</b><b>s</b><b>r</b><b>c</b><b>,</b> <b>n</b><b>d</b><b>.</b><b>s</b><b>l</b><b>l</b><b>)</b><b>;</b> <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>
+
+              •      A priority-0 logical flow that matches  all  packets  not
+                     already handled (match <b>1</b>) and drops them (action <b>d</b><b>r</b><b>o</b><b>p</b><b>;</b>).
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>3</u><u>:</u> <u>I</u><u>P</u> <u>I</u><u>n</u><u>p</u><u>u</u><u>t</u>
+
+       This table is the core of the logical router datapath functionality. It
+       contains  the following flows to implement very basic IP host function‐
+       ality.
+
+              •      For each <b>d</b><b>n</b><b>a</b><b>t</b><b>_</b><b>a</b><b>n</b><b>d</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b> NAT rule on a distributed  logical
+                     routers  or  gateway routers with gateway port configured
+                     with <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>_</b><b>m</b><b>t</b><b>u</b> to a valid integer  value  <u>M</u>,  a
+                     priority-160  flow  with  the match <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b> <u>L</u><u>R</u><u>P</u> &amp;&amp;&amp;&amp; <b>R</b><b>E</b><b>G</b>‐‐
+                     <b>B</b><b>I</b><b>T</b><b>_</b><b>P</b><b>K</b><b>T</b><b>_</b><b>L</b><b>A</b><b>R</b><b>G</b><b>E</b><b>R</b> &amp;&amp;&amp;&amp; <b>R</b><b>E</b><b>G</b><b>B</b><b>I</b><b>T</b><b>_</b><b>E</b><b>G</b><b>R</b><b>E</b><b>S</b><b>S</b><b>_</b><b>L</b><b>O</b><b>O</b><b>P</b><b>B</b><b>A</b><b>C</b><b>K</b> <b>=</b><b>=</b> <b>0</b>, where  <u>L</u><u>R</u><u>P</u>
+                     is  the logical router port and applies the following ac‐
+                     tion for ipv4 and ipv6 respectively:
+
+                     <b>i</b><b>c</b><b>m</b><b>p</b><b>4</b><b>_</b><b>e</b><b>r</b><b>r</b><b>o</b><b>r</b> <b>{</b>
+                         <b>i</b><b>c</b><b>m</b><b>p</b><b>4</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b> <b>=</b> <b>3</b><b>;</b> <b>/</b><b>*</b> <b>D</b><b>e</b><b>s</b><b>t</b><b>i</b><b>n</b><b>a</b><b>t</b><b>i</b><b>o</b><b>n</b> <b>U</b><b>n</b><b>r</b><b>e</b><b>a</b><b>c</b><b>h</b><b>a</b><b>b</b><b>l</b><b>e</b><b>.</b> <b>*</b><b>/</b>
+                         <b>i</b><b>c</b><b>m</b><b>p</b><b>4</b><b>.</b><b>c</b><b>o</b><b>d</b><b>e</b> <b>=</b> <b>4</b><b>;</b>  <b>/</b><b>*</b> <b>F</b><b>r</b><b>a</b><b>g</b> <b>N</b><b>e</b><b>e</b><b>d</b><b>e</b><b>d</b> <b>a</b><b>n</b><b>d</b> <b>D</b><b>F</b> <b>w</b><b>a</b><b>s</b> <b>S</b><b>e</b><b>t</b><b>.</b> <b>*</b><b>/</b>
+                         <b>i</b><b>c</b><b>m</b><b>p</b><b>4</b><b>.</b><b>f</b><b>r</b><b>a</b><b>g</b><b>_</b><b>m</b><b>t</b><b>u</b> <b>=</b> <u>M</u>;
+                         <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b> <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b><b>;</b>
+                         <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <u>E</u>;
+                         <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b> <b>i</b><b>p</b><b>4</b><b>.</b><b>s</b><b>r</b><b>c</b><b>;</b>
+                         <b>i</b><b>p</b><b>4</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <u>I</u>;
+                         <b>i</b><b>p</b><b>.</b><b>t</b><b>t</b><b>l</b> <b>=</b> <b>2</b><b>5</b><b>5</b><b>;</b>
+                         <b>R</b><b>E</b><b>G</b><b>B</b><b>I</b><b>T</b><b>_</b><b>E</b><b>G</b><b>R</b><b>E</b><b>S</b><b>S</b><b>_</b><b>L</b><b>O</b><b>O</b><b>P</b><b>B</b><b>A</b><b>C</b><b>K</b> <b>=</b> <b>1</b><b>;</b>
+                         <b>R</b><b>E</b><b>G</b><b>B</b><b>I</b><b>T</b><b>_</b><b>P</b><b>K</b><b>T</b><b>_</b><b>L</b><b>A</b><b>R</b><b>G</b><b>E</b><b>R</b> <b>0</b><b>;</b>
+                         <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b> <u>L</u><u>R</u><u>P</u>;
+                         <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>l</b><b>o</b><b>o</b><b>p</b><b>b</b><b>a</b><b>c</b><b>k</b> <b>=</b> <b>1</b><b>;</b>
+                         <b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b><b>;</b>
+                     <b>}</b><b>;</b>
+                     <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b><b>_</b><b>e</b><b>r</b><b>r</b><b>o</b><b>r</b> <b>{</b>
+                         <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b> <b>=</b> <b>2</b><b>;</b>
+                         <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b><b>.</b><b>c</b><b>o</b><b>d</b><b>e</b> <b>=</b> <b>0</b><b>;</b>
+                         <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b><b>.</b><b>f</b><b>r</b><b>a</b><b>g</b><b>_</b><b>m</b><b>t</b><b>u</b> <b>=</b> <u>M</u>;
+                         <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b> <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b><b>;</b>
+                         <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <u>E</u>;
+                         <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b> <b>i</b><b>p</b><b>6</b><b>.</b><b>s</b><b>r</b><b>c</b><b>;</b>
+                         <b>i</b><b>p</b><b>6</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <u>I</u>;
+                         <b>i</b><b>p</b><b>.</b><b>t</b><b>t</b><b>l</b> <b>=</b> <b>2</b><b>5</b><b>5</b><b>;</b>
+                         <b>R</b><b>E</b><b>G</b><b>B</b><b>I</b><b>T</b><b>_</b><b>E</b><b>G</b><b>R</b><b>E</b><b>S</b><b>S</b><b>_</b><b>L</b><b>O</b><b>O</b><b>P</b><b>B</b><b>A</b><b>C</b><b>K</b> <b>=</b> <b>1</b><b>;</b>
+                         <b>R</b><b>E</b><b>G</b><b>B</b><b>I</b><b>T</b><b>_</b><b>P</b><b>K</b><b>T</b><b>_</b><b>L</b><b>A</b><b>R</b><b>G</b><b>E</b><b>R</b> <b>0</b><b>;</b>
+                         <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b> <u>L</u><u>R</u><u>P</u>;
+                         <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>l</b><b>o</b><b>o</b><b>p</b><b>b</b><b>a</b><b>c</b><b>k</b> <b>=</b> <b>1</b><b>;</b>
+                         <b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b><b>;</b>
+                     <b>}</b><b>;</b>
+
+
+                     where <u>E</u> and <u>I</u> are the NAT rule external mac  and  IP  re‐
+                     spectively.
+
+              •      For  distributed  logical routers or gateway routers with
+                     gateway port configured  with  <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>_</b><b>m</b><b>t</b><b>u</b>  to  a
+                     valid  integer  value, a priority-150 flow with the match
+                     <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b> <u>L</u><u>R</u><u>P</u> &amp;&amp;&amp;&amp; <b>R</b><b>E</b><b>G</b><b>B</b><b>I</b><b>T</b><b>_</b><b>P</b><b>K</b><b>T</b><b>_</b><b>L</b><b>A</b><b>R</b><b>G</b><b>E</b><b>R</b> &amp;&amp;&amp;&amp; <b>R</b><b>E</b><b>G</b><b>B</b><b>I</b><b>T</b><b>_</b><b>E</b><b>G</b><b>R</b><b>E</b><b>S</b><b>S</b><b>_</b><b>L</b><b>O</b><b>O</b><b>P</b>‐‐
+                     <b>B</b><b>A</b><b>C</b><b>K</b> <b>=</b><b>=</b> <b>0</b>, where <u>L</u><u>R</u><u>P</u> is the logical router port  and  ap‐
+                     plies  the  following  action  for  ipv4 and ipv6 respec‐
+                     tively:
+
+                     <b>i</b><b>c</b><b>m</b><b>p</b><b>4</b><b>_</b><b>e</b><b>r</b><b>r</b><b>o</b><b>r</b> <b>{</b>
+                         <b>i</b><b>c</b><b>m</b><b>p</b><b>4</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b> <b>=</b> <b>3</b><b>;</b> <b>/</b><b>*</b> <b>D</b><b>e</b><b>s</b><b>t</b><b>i</b><b>n</b><b>a</b><b>t</b><b>i</b><b>o</b><b>n</b> <b>U</b><b>n</b><b>r</b><b>e</b><b>a</b><b>c</b><b>h</b><b>a</b><b>b</b><b>l</b><b>e</b><b>.</b> <b>*</b><b>/</b>
+                         <b>i</b><b>c</b><b>m</b><b>p</b><b>4</b><b>.</b><b>c</b><b>o</b><b>d</b><b>e</b> <b>=</b> <b>4</b><b>;</b>  <b>/</b><b>*</b> <b>F</b><b>r</b><b>a</b><b>g</b> <b>N</b><b>e</b><b>e</b><b>d</b><b>e</b><b>d</b> <b>a</b><b>n</b><b>d</b> <b>D</b><b>F</b> <b>w</b><b>a</b><b>s</b> <b>S</b><b>e</b><b>t</b><b>.</b> <b>*</b><b>/</b>
+                         <b>i</b><b>c</b><b>m</b><b>p</b><b>4</b><b>.</b><b>f</b><b>r</b><b>a</b><b>g</b><b>_</b><b>m</b><b>t</b><b>u</b> <b>=</b> <u>M</u>;
+                         <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b> <u>E</u>;
+                         <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b> <b>i</b><b>p</b><b>4</b><b>.</b><b>s</b><b>r</b><b>c</b><b>;</b>
+                         <b>i</b><b>p</b><b>4</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <u>I</u>;
+                         <b>i</b><b>p</b><b>.</b><b>t</b><b>t</b><b>l</b> <b>=</b> <b>2</b><b>5</b><b>5</b><b>;</b>
+                         <b>R</b><b>E</b><b>G</b><b>B</b><b>I</b><b>T</b><b>_</b><b>E</b><b>G</b><b>R</b><b>E</b><b>S</b><b>S</b><b>_</b><b>L</b><b>O</b><b>O</b><b>P</b><b>B</b><b>A</b><b>C</b><b>K</b> <b>=</b> <b>1</b><b>;</b>
+                         <b>R</b><b>E</b><b>G</b><b>B</b><b>I</b><b>T</b><b>_</b><b>P</b><b>K</b><b>T</b><b>_</b><b>L</b><b>A</b><b>R</b><b>G</b><b>E</b><b>R</b> <b>0</b><b>;</b>
+                         <b>n</b><b>e</b><b>x</b><b>t</b><b>(</b><b>p</b><b>i</b><b>p</b><b>e</b><b>l</b><b>i</b><b>n</b><b>e</b><b>=</b><b>i</b><b>n</b><b>g</b><b>r</b><b>e</b><b>s</b><b>s</b><b>,</b> <b>t</b><b>a</b><b>b</b><b>l</b><b>e</b><b>=</b><b>0</b><b>)</b><b>;</b>
+                     <b>}</b><b>;</b>
+                     <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b><b>_</b><b>e</b><b>r</b><b>r</b><b>o</b><b>r</b> <b>{</b>
+                         <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b> <b>=</b> <b>2</b><b>;</b>
+                         <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b><b>.</b><b>c</b><b>o</b><b>d</b><b>e</b> <b>=</b> <b>0</b><b>;</b>
+                         <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b><b>.</b><b>f</b><b>r</b><b>a</b><b>g</b><b>_</b><b>m</b><b>t</b><b>u</b> <b>=</b> <u>M</u>;
+                         <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b> <u>E</u>;
+                         <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b> <b>i</b><b>p</b><b>6</b><b>.</b><b>s</b><b>r</b><b>c</b><b>;</b>
+                         <b>i</b><b>p</b><b>6</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <u>I</u>;
+                         <b>i</b><b>p</b><b>.</b><b>t</b><b>t</b><b>l</b> <b>=</b> <b>2</b><b>5</b><b>5</b><b>;</b>
+                         <b>R</b><b>E</b><b>G</b><b>B</b><b>I</b><b>T</b><b>_</b><b>E</b><b>G</b><b>R</b><b>E</b><b>S</b><b>S</b><b>_</b><b>L</b><b>O</b><b>O</b><b>P</b><b>B</b><b>A</b><b>C</b><b>K</b> <b>=</b> <b>1</b><b>;</b>
+                         <b>R</b><b>E</b><b>G</b><b>B</b><b>I</b><b>T</b><b>_</b><b>P</b><b>K</b><b>T</b><b>_</b><b>L</b><b>A</b><b>R</b><b>G</b><b>E</b><b>R</b> <b>0</b><b>;</b>
+                         <b>n</b><b>e</b><b>x</b><b>t</b><b>(</b><b>p</b><b>i</b><b>p</b><b>e</b><b>l</b><b>i</b><b>n</b><b>e</b><b>=</b><b>i</b><b>n</b><b>g</b><b>r</b><b>e</b><b>s</b><b>s</b><b>,</b> <b>t</b><b>a</b><b>b</b><b>l</b><b>e</b><b>=</b><b>0</b><b>)</b><b>;</b>
+                     <b>}</b><b>;</b>
+
+
+              •      For each NAT entry of a distributed logical router  (with
+                     distributed  gateway router port(s)) of type <b>s</b><b>n</b><b>a</b><b>t</b>, a pri‐
+                     ority-120 flow with the match <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b> <u>P</u> &amp;&amp;&amp;&amp; <b>i</b><b>p</b><b>4</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b><b>=</b> <u>A</u>
+                     advances the packet to the next pipeline, where <u>P</u> is  the
+                     distributed  logical router port corresponding to the NAT
+                     entry (specified or inferred) and <u>A</u>  is  the  <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>p</b>
+                     set  in  the  NAT  entry.  If  <u>A</u> is an IPv6 address, then
+                     <b>i</b><b>p</b><b>6</b><b>.</b><b>s</b><b>r</b><b>c</b> is used for the match.
+
+                     The above flow is required to handle the routing  of  the
+                     East/west NAT traffic.
+
+              •      For  each  BFD  port the two following priority-110 flows
+                     are added to manage BFD traffic:
+
+                     •      if <b>i</b><b>p</b><b>4</b><b>.</b><b>s</b><b>r</b><b>c</b> or <b>i</b><b>p</b><b>6</b><b>.</b><b>s</b><b>r</b><b>c</b> is any IP address  owned  by
+                            the  router  port and <b>u</b><b>d</b><b>p</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <b>3</b><b>7</b><b>8</b><b>4</b> , the packet
+                            is advanced to the next pipeline stage.
+
+                     •      if <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b> or <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b> is any IP address  owned  by
+                            the  router  port  and  <b>u</b><b>d</b><b>p</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <b>3</b><b>7</b><b>8</b><b>4</b> , the <b>h</b><b>a</b><b>n</b>‐‐
+                            <b>d</b><b>l</b><b>e</b><b>_</b><b>b</b><b>f</b><b>d</b><b>_</b><b>m</b><b>s</b><b>g</b> action is executed.
+
+              •      L3 admission control: Priority-120 flows allows IGMP  and
+                     MLD packets if the router has logical ports that have <b>o</b><b>p</b>‐‐
+                     <b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b><b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>f</b><b>l</b><b>o</b><b>o</b><b>d</b><b>=</b>’’<b>t</b><b>r</b><b>u</b><b>e</b>’’.
+
+              •      L3  admission  control: A priority-100 flow drops packets
+                     that match any of the following:
+
+                     •      <b>i</b><b>p</b><b>4</b><b>.</b><b>s</b><b>r</b><b>c</b><b>[</b><b>2</b><b>8</b><b>.</b><b>.</b><b>3</b><b>1</b><b>]</b> <b>=</b><b>=</b> <b>0</b><b>x</b><b>e</b> (multicast source)
+
+                     •      <b>i</b><b>p</b><b>4</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b><b>=</b> <b>2</b><b>5</b><b>5</b><b>.</b><b>2</b><b>5</b><b>5</b><b>.</b><b>2</b><b>5</b><b>5</b><b>.</b><b>2</b><b>5</b><b>5</b> (broadcast source)
+
+                     •      <b>i</b><b>p</b><b>4</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b><b>=</b> <b>1</b><b>2</b><b>7</b><b>.</b><b>0</b><b>.</b><b>0</b><b>.</b><b>0</b><b>/</b><b>8</b> <b>|</b><b>|</b> <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b>  <b>=</b><b>=</b>  <b>1</b><b>2</b><b>7</b><b>.</b><b>0</b><b>.</b><b>0</b><b>.</b><b>0</b><b>/</b><b>8</b>
+                            (localhost source or destination)
+
+                     •      <b>i</b><b>p</b><b>4</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b><b>=</b> <b>0</b><b>.</b><b>0</b><b>.</b><b>0</b><b>.</b><b>0</b><b>/</b><b>8</b> <b>|</b><b>|</b> <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <b>0</b><b>.</b><b>0</b><b>.</b><b>0</b><b>.</b><b>0</b><b>/</b><b>8</b> (zero
+                            network source or destination)
+
+                     •      <b>i</b><b>p</b><b>4</b><b>.</b><b>s</b><b>r</b><b>c</b>  or <b>i</b><b>p</b><b>6</b><b>.</b><b>s</b><b>r</b><b>c</b> is any IP address owned by the
+                            router, unless the packet was recirculated due  to
+                            egress    loopback    as    indicated    by   <b>R</b><b>E</b><b>G</b>‐‐
+                            <b>B</b><b>I</b><b>T</b><b>_</b><b>E</b><b>G</b><b>R</b><b>E</b><b>S</b><b>S</b><b>_</b><b>L</b><b>O</b><b>O</b><b>P</b><b>B</b><b>A</b><b>C</b><b>K</b>.
+
+                     •      <b>i</b><b>p</b><b>4</b><b>.</b><b>s</b><b>r</b><b>c</b> is the broadcast address of any IP network
+                            known to the router.
+
+              •      A priority-100 flow parses DHCPv6 replies from IPv6  pre‐
+                     fix  delegation  routers  (<b>u</b><b>d</b><b>p</b><b>.</b><b>s</b><b>r</b><b>c</b>  <b>=</b><b>=</b>  <b>5</b><b>4</b><b>7</b> &amp;&amp;&amp;&amp; <b>u</b><b>d</b><b>p</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b>
+                     <b>5</b><b>4</b><b>6</b>). The <b>h</b><b>a</b><b>n</b><b>d</b><b>l</b><b>e</b><b>_</b><b>d</b><b>h</b><b>c</b><b>p</b><b>v</b><b>6</b><b>_</b><b>r</b><b>e</b><b>p</b><b>l</b><b>y</b> is used to send IPv6 prefix
+                     delegation messages to the delegation router.
+
+              •      ICMP echo reply. These flows reply to ICMP echo  requests
+                     received  for the router’s IP address. Let <u>A</u> be an IP ad‐
+                     dress owned by a router port. Then, for each <u>A</u> that is an
+                     IPv4 address, a priority-90 flow matches on <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b>  <u>A</u>
+                     and  <b>i</b><b>c</b><b>m</b><b>p</b><b>4</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b>  <b>=</b><b>=</b>  <b>8</b>  &amp;&amp;&amp;&amp; <b>i</b><b>c</b><b>m</b><b>p</b><b>4</b><b>.</b><b>c</b><b>o</b><b>d</b><b>e</b> <b>=</b><b>=</b> <b>0</b> (ICMP echo re‐
+                     quest). For each <u>A</u> that is an IPv6 address, a priority-90
+                     flow matches on <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <u>A</u> and  <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b>  <b>=</b><b>=</b>  <b>1</b><b>2</b><b>8</b>  &amp;&amp;&amp;&amp;
+                     <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b><b>.</b><b>c</b><b>o</b><b>d</b><b>e</b>  <b>=</b><b>=</b>  <b>0</b>  (ICMPv6 echo request). The port of the
+                     router that receives the echo request  does  not  matter.
+                     Also,  the  <b>i</b><b>p</b><b>.</b><b>t</b><b>t</b><b>l</b>  of  the  echo  request  packet is not
+                     checked, so it complies with RFC 1812,  section  4.2.2.9.
+                     Flows for ICMPv4 echo requests use the following actions:
+
+                     <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b> <lt;<lt;<b>-</b>>gt;>gt; <b>i</b><b>p</b><b>4</b><b>.</b><b>s</b><b>r</b><b>c</b><b>;</b>
+                     <b>i</b><b>p</b><b>.</b><b>t</b><b>t</b><b>l</b> <b>=</b> <b>2</b><b>5</b><b>5</b><b>;</b>
+                     <b>i</b><b>c</b><b>m</b><b>p</b><b>4</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b> <b>=</b> <b>0</b><b>;</b>
+                     <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>l</b><b>o</b><b>o</b><b>p</b><b>b</b><b>a</b><b>c</b><b>k</b> <b>=</b> <b>1</b><b>;</b>
+                     <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>
+
+
+                     Flows for ICMPv6 echo requests use the following actions:
+
+                     <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b> <lt;<lt;<b>-</b>>gt;>gt; <b>i</b><b>p</b><b>6</b><b>.</b><b>s</b><b>r</b><b>c</b><b>;</b>
+                     <b>i</b><b>p</b><b>.</b><b>t</b><b>t</b><b>l</b> <b>=</b> <b>2</b><b>5</b><b>5</b><b>;</b>
+                     <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b> <b>=</b> <b>1</b><b>2</b><b>9</b><b>;</b>
+                     <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>l</b><b>o</b><b>o</b><b>p</b><b>b</b><b>a</b><b>c</b><b>k</b> <b>=</b> <b>1</b><b>;</b>
+                     <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>
+
+
+              •      Reply to ARP requests.
+
+                     These flows reply to ARP requests for the router’s own IP
+                     address.  The  ARP  requests  are handled only if the re‐
+                     questor’s IP belongs to the same subnets of  the  logical
+                     router  port. For each router port <u>P</u> that owns IP address
+                     <u>A</u>, which belongs to subnet <u>S</u> with prefix  length  <u>L</u>,  and
+                     Ethernet  address <u>E</u>, a priority-90 flow matches <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b>
+                     <u>P</u> &amp;&amp;&amp;&amp; <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>p</b><b>a</b> <b>=</b><b>=</b> <u>S</u><b>/</b><u>L</u> &amp;&amp;&amp;&amp; <b>a</b><b>r</b><b>p</b><b>.</b><b>o</b><b>p</b> <b>=</b><b>=</b> <b>1</b> &amp;&amp;&amp;&amp; <b>a</b><b>r</b><b>p</b><b>.</b><b>t</b><b>p</b><b>a</b> <b>=</b><b>=</b>  <u>A</u>  (ARP
+                     request) with the following actions:
+
+                     <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b> <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b><b>;</b>
+                     <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <b>x</b><b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>0</b><b>.</b><b>.</b><b>4</b><b>7</b><b>]</b><b>;</b>
+                     <b>a</b><b>r</b><b>p</b><b>.</b><b>o</b><b>p</b> <b>=</b> <b>2</b><b>;</b> <b>/</b><b>*</b> <b>A</b><b>R</b><b>P</b> <b>r</b><b>e</b><b>p</b><b>l</b><b>y</b><b>.</b> <b>*</b><b>/</b>
+                     <b>a</b><b>r</b><b>p</b><b>.</b><b>t</b><b>h</b><b>a</b> <b>=</b> <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>h</b><b>a</b><b>;</b>
+                     <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>h</b><b>a</b> <b>=</b> <b>x</b><b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>0</b><b>.</b><b>.</b><b>4</b><b>7</b><b>]</b><b>;</b>
+                     <b>a</b><b>r</b><b>p</b><b>.</b><b>t</b><b>p</b><b>a</b> <b>=</b> <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>p</b><b>a</b><b>;</b>
+                     <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>p</b><b>a</b> <b>=</b> <u>A</u>;
+                     <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b> <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b><b>;</b>
+                     <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>l</b><b>o</b><b>o</b><b>p</b><b>b</b><b>a</b><b>c</b><b>k</b> <b>=</b> <b>1</b><b>;</b>
+                     <b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b><b>;</b>
+
+
+                     For  the  gateway  port  on  a distributed logical router
+                     (where one of the logical router ports specifies a  gate‐
+                     way  chassis), the above flows are only programmed on the
+                     gateway port instance on the gateway chassis. This behav‐
+                     ior avoids generation of multiple ARP responses from dif‐
+                     ferent chassis, and allows upstream MAC learning to point
+                     to the gateway chassis.
+
+                     For  the  logical  router  port  with  the   option   <b>r</b><b>e</b>‐‐
+                     <b>s</b><b>i</b><b>d</b><b>e</b><b>-</b><b>o</b><b>n</b><b>-</b><b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>  set (which is centralized), the
+                     above flows are only programmed on the gateway  port  in‐
+                     stance  on the gateway chassis (if the logical router has
+                     a distributed gateway port). This behavior avoids genera‐
+                     tion of multiple ARP responses  from  different  chassis,
+                     and  allows upstream MAC learning to point to the gateway
+                     chassis.
+
+              •      Reply to IPv6 Neighbor Solicitations. These  flows  reply
+                     to  Neighbor  Solicitation  requests for the router’s own
+                     IPv6 address and populate the logical router’s mac  bind‐
+                     ing table.
+
+                     For  each  router  port  <u>P</u>  that owns IPv6 address <u>A</u>, so‐
+                     licited node address <u>S</u>, and Ethernet address <u>E</u>, a  prior‐
+                     ity-90  flow  matches  <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b> <u>P</u> &amp;&amp;&amp;&amp; <b>n</b><b>d</b><b>_</b><b>n</b><b>s</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b>
+                     <b>{</b><u>A</u><b>,</b> <u>E</u><b>}</b> &amp;&amp;&amp;&amp; <b>n</b><b>d</b><b>.</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> <b>=</b><b>=</b> <u>A</u> with the following actions:
+
+                     <b>n</b><b>d</b><b>_</b><b>n</b><b>a</b><b>_</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b> <b>{</b>
+                         <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <b>x</b><b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>0</b><b>.</b><b>.</b><b>4</b><b>7</b><b>]</b><b>;</b>
+                         <b>i</b><b>p</b><b>6</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <u>A</u>;
+                         <b>n</b><b>d</b><b>.</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> <b>=</b> <u>A</u>;
+                         <b>n</b><b>d</b><b>.</b><b>t</b><b>l</b><b>l</b> <b>=</b> <b>x</b><b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>0</b><b>.</b><b>.</b><b>4</b><b>7</b><b>]</b><b>;</b>
+                         <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b> <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b><b>;</b>
+                         <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>l</b><b>o</b><b>o</b><b>p</b><b>b</b><b>a</b><b>c</b><b>k</b> <b>=</b> <b>1</b><b>;</b>
+                         <b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b><b>;</b>
+                     <b>}</b><b>;</b>
+
+
+                     For the gateway port  on  a  distributed  logical  router
+                     (where  one of the logical router ports specifies a gate‐
+                     way chassis), the above flows replying to  IPv6  Neighbor
+                     Solicitations are only programmed on the gateway port in‐
+                     stance  on the gateway chassis. This behavior avoids gen‐
+                     eration of multiple replies from different  chassis,  and
+                     allows  upstream  MAC  learning  to  point to the gateway
+                     chassis.
+
+              •      These flows reply to ARP requests or IPv6 neighbor solic‐
+                     itation for the virtual IP addresses  configured  in  the
+                     router for NAT (both DNAT and SNAT) or load balancing.
+
+                     IPv4:  For  a  configured NAT (both DNAT and SNAT) IP ad‐
+                     dress or a load balancer IPv4 VIP <u>A</u>, for each router port
+                     <u>P</u> with Ethernet address <u>E</u>,  a  priority-90  flow  matches
+                     <b>a</b><b>r</b><b>p</b><b>.</b><b>o</b><b>p</b>  <b>=</b><b>=</b>  <b>1</b> &amp;&amp;&amp;&amp; <b>a</b><b>r</b><b>p</b><b>.</b><b>t</b><b>p</b><b>a</b> <b>=</b><b>=</b> <u>A</u> (ARP request) with the fol‐
+                     lowing actions:
+
+                     <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b> <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b><b>;</b>
+                     <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <b>x</b><b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>0</b><b>.</b><b>.</b><b>4</b><b>7</b><b>]</b><b>;</b>
+                     <b>a</b><b>r</b><b>p</b><b>.</b><b>o</b><b>p</b> <b>=</b> <b>2</b><b>;</b> <b>/</b><b>*</b> <b>A</b><b>R</b><b>P</b> <b>r</b><b>e</b><b>p</b><b>l</b><b>y</b><b>.</b> <b>*</b><b>/</b>
+                     <b>a</b><b>r</b><b>p</b><b>.</b><b>t</b><b>h</b><b>a</b> <b>=</b> <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>h</b><b>a</b><b>;</b>
+                     <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>h</b><b>a</b> <b>=</b> <b>x</b><b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>0</b><b>.</b><b>.</b><b>4</b><b>7</b><b>]</b><b>;</b>
+                     <b>a</b><b>r</b><b>p</b><b>.</b><b>t</b><b>p</b><b>a</b> <lt;<lt;<b>-</b>>gt;>gt; <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>p</b><b>a</b><b>;</b>
+                     <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b> <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b><b>;</b>
+                     <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>l</b><b>o</b><b>o</b><b>p</b><b>b</b><b>a</b><b>c</b><b>k</b> <b>=</b> <b>1</b><b>;</b>
+                     <b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b><b>;</b>
+
+
+                     IPv4: For a configured load balancer IPv4 VIP, a  similar
+                     flow  is  added  with the additional match <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b> <u>P</u> if
+                     the VIP is reachable from any logical router port of  the
+                     logical router.
+
+                     If  the  router  port  <u>P</u>  is a distributed gateway router
+                     port, then the <b>i</b><b>s</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>r</b><b>e</b><b>s</b><b>i</b><b>d</b><b>e</b><b>n</b><b>t</b><b>(</b><u>P</u><b>)</b> is  also  added  in
+                     the match condition for the load balancer IPv4 VIP <u>A</u>.
+
+                     IPv6:  For  a  configured NAT (both DNAT and SNAT) IP ad‐
+                     dress or a load balancer IPv6 VIP <u>A</u> (if the VIP is reach‐
+                     able from any logical router port of the logical router),
+                     solicited node address <u>S</u>, for each  router  port  <u>P</u>  with
+                     Ethernet  address <u>E</u>, a priority-90 flow matches <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b>
+                     <u>P</u> &amp;&amp;&amp;&amp; <b>n</b><b>d</b><b>_</b><b>n</b><b>s</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <b>{</b><u>A</u><b>,</b> <u>S</u><b>}</b> &amp;&amp;&amp;&amp; <b>n</b><b>d</b><b>.</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b>  <b>=</b><b>=</b>  <u>A</u>  with
+                     the following actions:
+
+                     <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b> <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b><b>;</b>
+                     <b>n</b><b>d</b><b>_</b><b>n</b><b>a</b> <b>{</b>
+                         <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <b>x</b><b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>0</b><b>.</b><b>.</b><b>4</b><b>7</b><b>]</b><b>;</b>
+                         <b>n</b><b>d</b><b>.</b><b>t</b><b>l</b><b>l</b> <b>=</b> <b>x</b><b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>0</b><b>.</b><b>.</b><b>4</b><b>7</b><b>]</b><b>;</b>
+                         <b>i</b><b>p</b><b>6</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <u>A</u>;
+                         <b>n</b><b>d</b><b>.</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> <b>=</b> <u>A</u>;
+                         <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b> <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b><b>;</b>
+                         <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>l</b><b>o</b><b>o</b><b>p</b><b>b</b><b>a</b><b>c</b><b>k</b> <b>=</b> <b>1</b><b>;</b>
+                         <b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b><b>;</b>
+                     <b>}</b>
+
+
+                     If  the  router  port  <u>P</u>  is a distributed gateway router
+                     port, then the <b>i</b><b>s</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>r</b><b>e</b><b>s</b><b>i</b><b>d</b><b>e</b><b>n</b><b>t</b><b>(</b><u>P</u><b>)</b> is  also  added  in
+                     the match condition for the load balancer IPv6 VIP <u>A</u>.
+
+                     For the gateway port on a distributed logical router with
+                     NAT  (where  one  of the logical router ports specifies a
+                     gateway chassis):
+
+                     •      If the corresponding NAT rule cannot be handled in
+                            a distributed manner, then a priority-92  flow  is
+                            programmed  on  the  gateway  port instance on the
+                            gateway chassis. A priority-91 drop flow  is  pro‐
+                            grammed  on the other chassis when ARP requests/NS
+                            packets are received on the gateway port. This be‐
+                            havior avoids generation of multiple ARP responses
+                            from different chassis, and  allows  upstream  MAC
+                            learning to point to the gateway chassis.
+
+                     •      If  the corresponding NAT rule can be handled in a
+                            distributed manner, then this flow  is  only  pro‐
+                            grammed  on  the  gateway  port instance where the
+                            <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b> specified in the NAT rule resides.
+
+                            Some of the actions are different for  this  case,
+                            using  the  <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>m</b><b>a</b><b>c</b> specified in the NAT rule
+                            rather than the gateway port’s Ethernet address <u>E</u>:
+
+                            <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <u>e</u><u>x</u><u>t</u><u>e</u><u>r</u><u>n</u><u>a</u><u>l</u><b>_</b><u>m</u><u>a</u><u>c</u>;
+                            <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>h</b><b>a</b> <b>=</b> <u>e</u><u>x</u><u>t</u><u>e</u><u>r</u><u>n</u><u>a</u><u>l</u><b>_</b><u>m</u><u>a</u><u>c</u>;
+
+
+                            or in the case of IPv6 neighbor solicition:
+
+                            <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <u>e</u><u>x</u><u>t</u><u>e</u><u>r</u><u>n</u><u>a</u><u>l</u><b>_</b><u>m</u><u>a</u><u>c</u>;
+                            <b>n</b><b>d</b><b>.</b><b>t</b><b>l</b><b>l</b> <b>=</b> <u>e</u><u>x</u><u>t</u><u>e</u><u>r</u><u>n</u><u>a</u><u>l</u><b>_</b><u>m</u><u>a</u><u>c</u>;
+
+
+                            This behavior avoids generation  of  multiple  ARP
+                            responses  from  different chassis, and allows up‐
+                            stream MAC learning to point to the correct  chas‐
+                            sis.
+
+              •      Priority-85  flows  which drops the ARP and IPv6 Neighbor
+                     Discovery packets.
+
+              •      A priority-84 flow explicitly allows IPv6 multicast traf‐
+                     fic that is supposed to reach the router pipeline  (i.e.,
+                     router solicitation and router advertisement packets).
+
+              •      A  priority-83 flow explicitly drops IPv6 multicast traf‐
+                     fic that is destined to reserved multicast groups.
+
+              •      A priority-82 flow allows IP  multicast  traffic  if  <b>o</b><b>p</b>‐‐
+                     <b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>:mcast_relay=’true’, otherwise drops it.
+
+              •      UDP  port  unreachable.  Priority-80  flows generate ICMP
+                     port unreachable messages in reply to UDP  datagrams  di‐
+                     rected  to the router’s IP address, except in the special
+                     case of gateways, which  accept  traffic  directed  to  a
+                     router IP for load balancing and NAT purposes.
+
+                     These  flows  should  not match IP fragments with nonzero
+                     offset.
+
+              •      TCP reset. Priority-80 flows generate TCP reset  messages
+                     in reply to TCP datagrams directed to the router’s IP ad‐
+                     dress,  except in the special case of gateways, which ac‐
+                     cept traffic directed to a router IP for  load  balancing
+                     and NAT purposes.
+
+                     These  flows  should  not match IP fragments with nonzero
+                     offset.
+
+              •      Protocol or address unreachable. Priority-70 flows gener‐
+                     ate ICMP protocol or  address  unreachable  messages  for
+                     IPv4  and  IPv6 respectively in reply to packets directed
+                     to the router’s IP address on  IP  protocols  other  than
+                     UDP,  TCP,  and ICMP, except in the special case of gate‐
+                     ways, which accept traffic directed to a  router  IP  for
+                     load balancing purposes.
+
+                     These  flows  should  not match IP fragments with nonzero
+                     offset.
+
+              •      Drop other IP traffic to this router.  These  flows  drop
+                     any  other  traffic  destined  to  an  IP address of this
+                     router that is not already handled by one  of  the  flows
+                     above,  which  amounts to ICMP (other than echo requests)
+                     and fragments with nonzero offsets. For each IP address <u>A</u>
+                     owned by the router, a priority-60 flow  matches  <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b>
+                     <b>=</b><b>=</b>  <u>A</u> or <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <u>A</u> and drops the traffic. An exception
+                     is made and the above flow is not  added  if  the  router
+                     port’s  own  IP  address  is used to SNAT packets passing
+                     through that router or if it is used as a  load  balancer
+                     VIP.
+
+       The flows above handle all of the traffic that might be directed to the
+       router  itself.  The following flows (with lower priorities) handle the
+       remaining traffic, potentially for forwarding:
+
+              •      Drop Ethernet local broadcast. A  priority-50  flow  with
+                     match  <b>e</b><b>t</b><b>h</b><b>.</b><b>b</b><b>c</b><b>a</b><b>s</b><b>t</b> drops traffic destined to the local Eth‐
+                     ernet  broadcast  address.  By  definition  this  traffic
+                     should not be forwarded.
+
+              •      Avoid  ICMP  time  exceeded  for multicast. A priority-32
+                     flow with match <b>i</b><b>p</b><b>.</b><b>t</b><b>t</b><b>l</b> <b>=</b><b>=</b> <b>{</b><b>0</b><b>,</b>  <b>1</b><b>}</b>  &amp;&amp;&amp;&amp;  <b>!</b><b>i</b><b>p</b><b>.</b><b>l</b><b>a</b><b>t</b><b>e</b><b>r</b><b>_</b><b>f</b><b>r</b><b>a</b><b>g</b>  &amp;&amp;&amp;&amp;
+                     <b>(</b><b>i</b><b>p</b><b>4</b><b>.</b><b>m</b><b>c</b><b>a</b><b>s</b><b>t</b>  <b>|</b><b>|</b>  <b>i</b><b>p</b><b>6</b><b>.</b><b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>)</b> and actions <b>d</b><b>r</b><b>o</b><b>p</b><b>;</b> drops multi‐
+                     cast packets whose TTL has expired without  sending  ICMP
+                     time exceeded.
+
+              •      ICMP  time exceeded. For each router port <u>P</u>, whose IP ad‐
+                     dress is <u>A</u>, a priority-31 flow with match <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b> <u>P</u>  &amp;&amp;&amp;&amp;
+                     <b>i</b><b>p</b><b>.</b><b>t</b><b>t</b><b>l</b>  <b>=</b><b>=</b> <b>{</b><b>0</b><b>,</b> <b>1</b><b>}</b> &amp;&amp;&amp;&amp; <b>!</b><b>i</b><b>p</b><b>.</b><b>l</b><b>a</b><b>t</b><b>e</b><b>r</b><b>_</b><b>f</b><b>r</b><b>a</b><b>g</b> matches packets whose
+                     TTL has expired, with the following actions  to  send  an
+                     ICMP time exceeded reply for IPv4 and IPv6 respectively:
+
+                     <b>i</b><b>c</b><b>m</b><b>p</b><b>4</b> <b>{</b>
+                         <b>i</b><b>c</b><b>m</b><b>p</b><b>4</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b> <b>=</b> <b>1</b><b>1</b><b>;</b> <b>/</b><b>*</b> <b>T</b><b>i</b><b>m</b><b>e</b> <b>e</b><b>x</b><b>c</b><b>e</b><b>e</b><b>d</b><b>e</b><b>d</b><b>.</b> <b>*</b><b>/</b>
+                         <b>i</b><b>c</b><b>m</b><b>p</b><b>4</b><b>.</b><b>c</b><b>o</b><b>d</b><b>e</b> <b>=</b> <b>0</b><b>;</b>  <b>/</b><b>*</b> <b>T</b><b>T</b><b>L</b> <b>e</b><b>x</b><b>c</b><b>e</b><b>e</b><b>d</b><b>e</b><b>d</b> <b>i</b><b>n</b> <b>t</b><b>r</b><b>a</b><b>n</b><b>s</b><b>i</b><b>t</b><b>.</b> <b>*</b><b>/</b>
+                         <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b> <b>i</b><b>p</b><b>4</b><b>.</b><b>s</b><b>r</b><b>c</b><b>;</b>
+                         <b>i</b><b>p</b><b>4</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <u>A</u>;
+                         <b>i</b><b>p</b><b>.</b><b>t</b><b>t</b><b>l</b> <b>=</b> <b>2</b><b>5</b><b>4</b><b>;</b>
+                         <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>
+                     <b>}</b><b>;</b>
+                     <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b> <b>{</b>
+                         <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b> <b>=</b> <b>3</b><b>;</b> <b>/</b><b>*</b> <b>T</b><b>i</b><b>m</b><b>e</b> <b>e</b><b>x</b><b>c</b><b>e</b><b>e</b><b>d</b><b>e</b><b>d</b><b>.</b> <b>*</b><b>/</b>
+                         <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b><b>.</b><b>c</b><b>o</b><b>d</b><b>e</b> <b>=</b> <b>0</b><b>;</b>  <b>/</b><b>*</b> <b>T</b><b>T</b><b>L</b> <b>e</b><b>x</b><b>c</b><b>e</b><b>e</b><b>d</b><b>e</b><b>d</b> <b>i</b><b>n</b> <b>t</b><b>r</b><b>a</b><b>n</b><b>s</b><b>i</b><b>t</b><b>.</b> <b>*</b><b>/</b>
+                         <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b> <b>i</b><b>p</b><b>6</b><b>.</b><b>s</b><b>r</b><b>c</b><b>;</b>
+                         <b>i</b><b>p</b><b>6</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <u>A</u>;
+                         <b>i</b><b>p</b><b>.</b><b>t</b><b>t</b><b>l</b> <b>=</b> <b>2</b><b>5</b><b>4</b><b>;</b>
+                         <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>
+                     <b>}</b><b>;</b>
+
+
+              •      TTL  discard. A priority-30 flow with match <b>i</b><b>p</b><b>.</b><b>t</b><b>t</b><b>l</b> <b>=</b><b>=</b> <b>{</b><b>0</b><b>,</b>
+                     <b>1</b><b>}</b> and actions <b>d</b><b>r</b><b>o</b><b>p</b><b>;</b> drops other packets  whose  TTL  has
+                     expired, that should not receive a ICMP error reply (i.e.
+                     fragments with nonzero offset).
+
+              •      Next  table.  A  priority-0  flows match all packets that
+                     aren’t already handled and uses  actions  <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>  to  feed
+                     them to the next table.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>4</u><u>:</u> <u>U</u><u>N</u><u>S</u><u>N</u><u>A</u><u>T</u>
+
+       This  is  for  already  established connections’ reverse traffic. i.e.,
+       SNAT has already been done in egress pipeline and now  the  packet  has
+       entered the ingress pipeline as part of a reply. It is unSNATted here.
+
+       Ingress Table 4: UNSNAT on Gateway and Distributed Routers
+
+              •      If the Router (Gateway or Distributed) is configured with
+                     load balancers, then below lflows are added:
+
+                     For each IPv4 address <u>A</u> defined as load balancer VIP with
+                     the  protocol  <u>P</u>  (and the protocol port <u>T</u> if defined) is
+                     also present as an <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>p</b> in the NAT table, a prior‐
+                     ity-120 logical flow is  added  with  the  match  <b>i</b><b>p</b><b>4</b>  &amp;&amp;&amp;&amp;
+                     <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b>  <b>=</b><b>=</b>  <u>A</u>  &amp;&amp;&amp;&amp; <u>P</u> with the action <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b> to advance the
+                     packet to the next table. If the load balancer has proto‐
+                     col port <b>B</b> defined, then the match also has <u>P</u><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <u>B</u>.
+
+                     The above flows are also added for IPv6 load balancers.
+
+       Ingress Table 4: UNSNAT on Gateway Routers
+
+              •      If the Gateway router has been configured to  force  SNAT
+                     any  previously DNATted packets to <u>B</u>, a priority-110 flow
+                     matches <b>i</b><b>p</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <u>B</u> or <b>i</b><b>p</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <u>B</u> with  an
+                     action <b>c</b><b>t</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>;</b> .
+
+                     If    the    Gateway    router    is    configured   with
+                     <b>l</b><b>b</b><b>_</b><b>f</b><b>o</b><b>r</b><b>c</b><b>e</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>_</b><b>i</b><b>p</b><b>=</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>i</b><b>p</b> then for every logical  router
+                     port  <u>P</u> attached to the Gateway router with the router ip
+                     <u>B</u>, a priority-110 flow is added with the match <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b>  <b>=</b><b>=</b>
+                     <u>P</u>  &amp;&amp;&amp;&amp; <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <u>B</u> or <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b> <u>P</u> &amp;&amp;&amp;&amp; <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <u>B</u> with an
+                     action <b>c</b><b>t</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>;</b> .
+
+                     If the Gateway router has been configured to  force  SNAT
+                     any previously load-balanced packets to <u>B</u>, a priority-100
+                     flow  matches  <b>i</b><b>p</b>  &amp;&amp;&amp;&amp;  <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <u>B</u> or <b>i</b><b>p</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <u>B</u>
+                     with an action <b>c</b><b>t</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>;</b> .
+
+                     For each NAT configuration in the  OVN  Northbound  data‐
+                     base,  that  asks  to  change  the source IP address of a
+                     packet from <u>A</u> to <u>B</u>, a  priority-90  flow  matches  <b>i</b><b>p</b>  &amp;&amp;&amp;&amp;
+                     <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b>  <b>=</b><b>=</b>  <u>B</u>  or  <b>i</b><b>p</b>  &amp;&amp;&amp;&amp;  <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b>  <b>=</b><b>=</b>  <u>B</u> with an action
+                     <b>c</b><b>t</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>;</b> . If the NAT rule is of type  dnat_and_snat  and
+                     has  <b>s</b><b>t</b><b>a</b><b>t</b><b>e</b><b>l</b><b>e</b><b>s</b><b>s</b><b>=</b><b>t</b><b>r</b><b>u</b><b>e</b> in the options, then the action would
+                     be <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>.
+
+                     A priority-0 logical flow with match <b>1</b> has actions <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>.
+
+       Ingress Table 4: UNSNAT on Distributed Routers
+
+              •      For each configuration in the  OVN  Northbound  database,
+                     that  asks  to  change  the source IP address of a packet
+                     from <u>A</u> to <u>B</u>, two priority-100 flows are added.
+
+                     If the NAT rule cannot be handled in a  distributed  man‐
+                     ner,  then  the  below  priority-100  flows are only pro‐
+                     grammed on the gateway chassis.
+
+                     •      The first flow matches <b>i</b><b>p</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <u>B</u>  &amp;&amp;&amp;&amp;  <b>i</b><b>n</b>‐‐
+                            <b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b> <u>G</u><u>W</u>
+                             or <b>i</b><b>p</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <u>B</u> &amp;&amp;&amp;&amp; <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b> <u>G</u><u>W</u> where <u>G</u><u>W</u> is
+                            the  distributed gateway port corresponding to the
+                            NAT rule (specified or inferred), with  an  action
+                            <b>c</b><b>t</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>;</b>  to unSNAT in the common zone. If the NAT
+                            rule is  of  type  dnat_and_snat  and  has  <b>s</b><b>t</b><b>a</b><b>t</b><b>e</b>‐‐
+                            <b>l</b><b>e</b><b>s</b><b>s</b><b>=</b><b>t</b><b>r</b><b>u</b><b>e</b> in the options, then the action would be
+                            <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>.
+
+                            If the NAT entry is of type <b>s</b><b>n</b><b>a</b><b>t</b>, then there is an
+                            additional match <b>i</b><b>s</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>r</b><b>e</b><b>s</b><b>i</b><b>d</b><b>e</b><b>n</b><b>t</b><b>(</b><u>c</u><u>r</u><u>-</u><u>G</u><u>W</u><b>)</b>
+                             where <u>c</u><u>r</u><u>-</u><u>G</u><u>W</u> is the chassis resident port of <u>G</u><u>W</u>.
+
+                     A priority-0 logical flow with match <b>1</b> has actions <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>5</u><u>:</u> <u>D</u><u>E</u><u>F</u><u>R</u><u>A</u><u>G</u>
+
+       This  is to send packets to connection tracker for tracking and defrag‐
+       mentation. It contains a priority-0 flow that simply moves  traffic  to
+       the next table.
+
+       For  all  load  balancing  rules  that are configured in <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b>
+       database for a Gateway router, a priority-100 flow is  added  for  each
+       configured virtual IP address <u>V</u><u>I</u><u>P</u>. For IPv4 <u>V</u><u>I</u><u>P</u><u>s</u> the flow matches <b>i</b><b>p</b> &amp;&amp;&amp;&amp;
+       <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b>  <b>=</b><b>=</b>  <u>V</u><u>I</u><u>P</u>. For IPv6 <u>V</u><u>I</u><u>P</u><u>s</u>, the flow matches <b>i</b><b>p</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <u>V</u><u>I</u><u>P</u>.
+       The flow applies the action  <b>c</b><b>t</b><b>_</b><b>d</b><b>n</b><b>a</b><b>t</b><b>;</b> to send IP packets to the connec‐
+       tion tracker for packet de-fragmentation and to dnat the destination IP
+       for the committed connection before sending it to the next table.
+
+       If ECMP routes with symmetric reply are configured  in  the  <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b>‐‐
+       <b>b</b><b>o</b><b>u</b><b>n</b><b>d</b>  database  for a gateway router, a priority-100 flow is added for
+       each router port on which symmetric replies are configured. The  match‐
+       ing  logic for these ports essentially reverses the configured logic of
+       the ECMP route. So for instance, a route  with  a  destination  routing
+       policy  will  instead match if the source IP address matches the static
+       route’s prefix. The flow uses the actions <b>c</b><b>h</b><b>k</b><b>_</b><b>e</b><b>c</b><b>m</b><b>p</b><b>_</b><b>n</b><b>h</b><b>_</b><b>m</b><b>a</b><b>c</b><b>(</b><b>)</b><b>;</b> <b>c</b><b>t</b><b>_</b><b>n</b><b>e</b><b>x</b><b>t</b> or
+       <b>c</b><b>h</b><b>k</b><b>_</b><b>e</b><b>c</b><b>m</b><b>p</b><b>_</b><b>n</b><b>h</b><b>(</b><b>)</b><b>;</b> <b>c</b><b>t</b><b>_</b><b>n</b><b>e</b><b>x</b><b>t</b> to send IP packets to table <b>7</b><b>6</b> or to table <b>7</b><b>7</b> in
+       order to check if source info are already stored by OVN and then to the
+       connection tracker for  packet  de-fragmentation  and  tracking  before
+       sending it to the next table.
+
+       If load balancing rules are configured in <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database for a
+       Gateway  router,  a priority 50 flow that matches <b>i</b><b>c</b><b>m</b><b>p</b> <b>|</b><b>|</b> <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b> with an
+       action of <b>c</b><b>t</b><b>_</b><b>d</b><b>n</b><b>a</b><b>t</b><b>;</b>, this allows potentially  related  ICMP  traffic  to
+       pass through CT.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>6</u><u>:</u> <u>L</u><u>o</u><u>a</u><u>d</u> <u>b</u><u>a</u><u>l</u><u>a</u><u>n</u><u>c</u><u>i</u><u>n</u><u>g</u> <u>a</u><u>f</u><u>f</u><u>i</u><u>n</u><u>i</u><u>t</u><u>y</u> <u>c</u><u>h</u><u>e</u><u>c</u><u>k</u>
+
+       Load  balancing  affinity  check  table  contains the following logical
+       flows:
+
+              •      For all the configured load balancing rules for a logical
+                     router where a positive affinity timeout is specified  in
+                     <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>  column, that includes a L4 port <u>P</u><u>O</u><u>R</u><u>T</u> of protocol
+                     <u>P</u> and IPv4 or IPv6 address <u>V</u><u>I</u><u>P</u>, a priority-100 flow  that
+                     matches on <b>c</b><b>t</b><b>.</b><b>n</b><b>e</b><b>w</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <u>V</u><u>I</u><u>P</u> &amp;&amp;&amp;&amp; <u>P</u> &amp;&amp;&amp;&amp; <b>P</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b>
+                     <u>P</u><u>O</u><u>R</u><u>T</u> (<b>x</b><b>x</b><b>r</b><b>e</b><b>g</b><b>0</b> <b>=</b><b>=</b> <u>V</u><u>I</u><u>P</u>
+                      in  the  IPv6  case)  with  an  action of <b>r</b><b>e</b><b>g</b><b>0</b> <b>=</b> <b>i</b><b>p</b><b>.</b><b>d</b><b>s</b><b>t</b><b>;</b>
+                     <b>r</b><b>e</b><b>g</b><b>9</b><b>[</b><b>1</b><b>6</b><b>.</b><b>.</b><b>3</b><b>1</b><b>]</b>  <b>=</b>  <b>P</b><b>.</b><b>d</b><b>s</b><b>t</b><b>;</b>  <b>r</b><b>e</b><b>g</b><b>9</b><b>[</b><b>6</b><b>]</b>  <b>=</b>  <b>c</b><b>h</b><b>k</b><b>_</b><b>l</b><b>b</b><b>_</b><b>a</b><b>f</b><b>f</b><b>(</b><b>)</b><b>;</b>  <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>
+                     (<b>x</b><b>x</b><b>r</b><b>e</b><b>g</b><b>0</b> <b>=</b><b>=</b> <u>i</u><u>p</u><u>6</u><u>.</u><u>d</u><u>s</u><u>t</u>  in the IPv6 case)
+
+              •      A  priority  0 flow is added which matches on all packets
+                     and applies the action <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>7</u><u>:</u> <u>D</u><u>N</u><u>A</u><u>T</u>
+
+       Packets enter the pipeline with destination IP address that needs to be
+       DNATted from a virtual IP address to a real IP address. Packets in  the
+       reverse direction needs to be unDNATed.
+
+       Ingress Table 7: Load balancing DNAT rules
+
+       Following  load  balancing  DNAT  flows are added for Gateway router or
+       Router with gateway port. These flows are programmed only on the  gate‐
+       way  chassis. These flows do not get programmed for load balancers with
+       IPv6 <u>V</u><u>I</u><u>P</u><u>s</u>.
+
+              •      For all the configured load balancing rules for a logical
+                     router where a positive affinity timeout is specified  in
+                     <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>  column, that includes a L4 port <u>P</u><u>O</u><u>R</u><u>T</u> of protocol
+                     <u>P</u> and IPv4 or IPv6 address <u>V</u><u>I</u><u>P</u>, a priority-150 flow  that
+                     matches  on <b>r</b><b>e</b><b>g</b><b>9</b><b>[</b><b>6</b><b>]</b> <b>=</b><b>=</b> <b>1</b> &amp;&amp;&amp;&amp; <b>c</b><b>t</b><b>.</b><b>n</b><b>e</b><b>w</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <u>V</u><u>I</u><u>P</u>
+                     &amp;&amp;&amp;&amp; <u>P</u> &amp;&amp;&amp;&amp; <b>P</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b>  <u>P</u><u>O</u><u>R</u><u>T</u> with an action of <b>c</b><b>t</b><b>_</b><b>l</b><b>b</b><b>_</b><b>m</b><b>a</b><b>r</b><b>k</b><b>(</b><u>a</u><u>r</u><u>g</u><u>s</u><b>)</b>
+                     , where <u>a</u><u>r</u><u>g</u><u>s</u> contains comma separated IP  addresses  (and
+                     optional  port  numbers)  to load balance to. The address
+                     family of the IP addresses of <u>a</u><u>r</u><u>g</u><u>s</u> is the same as the ad‐
+                     dress family of <u>V</u><u>I</u><u>P</u>.
+
+              •      If controller_event has been enabled for all the  config‐
+                     ured  load balancing rules for a Gateway router or Router
+                     with gateway port in <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b>  database  that  does
+                     not  have  configured  backends,  a  priority-130 flow is
+                     added to trigger ovn-controller events whenever the chas‐
+                     sis  receives  a  packet  for  that  particular  VIP.  If
+                     <b>e</b><b>v</b><b>e</b><b>n</b><b>t</b><b>-</b><b>e</b><b>l</b><b>b</b>  meter  has been previously created, it will be
+                     associated to the empty_lb logical flow
+
+              •      For all the configured load balancing rules for a Gateway
+                     router or Router  with  gateway  port  in  <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b>
+                     database  that  includes a L4 port <u>P</u><u>O</u><u>R</u><u>T</u> of protocol <u>P</u> and
+                     IPv4 or  IPv6  address  <u>V</u><u>I</u><u>P</u>,  a  priority-120  flow  that
+                     matches  on <b>c</b><b>t</b><b>.</b><b>n</b><b>e</b><b>w</b> &amp;&amp;&amp;&amp; <b>!</b><b>c</b><b>t</b><b>.</b><b>r</b><b>e</b><b>l</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <u>V</u><u>I</u><u>P</u> &amp;&amp;&amp;&amp; <u>P</u>
+                     &amp;&amp;&amp;&amp; <b>P</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b>
+                      <u>P</u><u>O</u><u>R</u><u>T</u> with an action of <b>c</b><b>t</b><b>_</b><b>l</b><b>b</b><b>_</b><b>m</b><b>a</b><b>r</b><b>k</b><b>(</b><u>a</u><u>r</u><u>g</u><u>s</u><b>)</b>, where <u>a</u><u>r</u><u>g</u><u>s</u> con‐
+                     tains comma separated IPv4 or  IPv6  addresses  (and  op‐
+                     tional port numbers) to load balance to. If the router is
+                     configured  to  force SNAT any load-balanced packets, the
+                     above action will be replaced by  <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>f</b><b>o</b><b>r</b><b>c</b><b>e</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>_</b><b>f</b><b>o</b><b>r</b><b>_</b><b>l</b><b>b</b>
+                     <b>=</b> <b>1</b><b>;</b> <b>c</b><b>t</b><b>_</b><b>l</b><b>b</b><b>_</b><b>m</b><b>a</b><b>r</b><b>k</b><b>(</b><u>a</u><u>r</u><u>g</u><u>s</u><b>;</b> <b>f</b><b>o</b><b>r</b><b>c</b><b>e</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>)</b><b>;</b>. If the load balancing
+                     rule  is configured with <b>s</b><b>k</b><b>i</b><b>p</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b> set to true, the above
+                     action will be replaced by  <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>s</b><b>k</b><b>i</b><b>p</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>_</b><b>f</b><b>o</b><b>r</b><b>_</b><b>l</b><b>b</b>  <b>=</b>  <b>1</b><b>;</b>
+                     <b>c</b><b>t</b><b>_</b><b>l</b><b>b</b><b>_</b><b>m</b><b>a</b><b>r</b><b>k</b><b>(</b><u>a</u><u>r</u><u>g</u><u>s</u><b>;</b> <b>s</b><b>k</b><b>i</b><b>p</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>)</b><b>;</b>. If health check is enabled,
+                     then <u>a</u><u>r</u><u>g</u><u>s</u> will only contain those endpoints whose service
+                     monitor  status  entry in <b>O</b><b>V</b><b>N</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> db is either <b>o</b><b>n</b>‐‐
+                     <b>l</b><b>i</b><b>n</b><b>e</b> or empty.
+
+              •      For all the configured load balancing rules for a  router
+                     in  <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b>  database that includes just an IP ad‐
+                     dress <u>V</u><u>I</u><u>P</u> to match on, a priority-110 flow  that  matches
+                     on  <b>c</b><b>t</b><b>.</b><b>n</b><b>e</b><b>w</b> &amp;&amp;&amp;&amp; <b>!</b><b>c</b><b>t</b><b>.</b><b>r</b><b>e</b><b>l</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b><b>4</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <u>V</u><u>I</u><u>P</u> with an ac‐
+                     tion of <b>c</b><b>t</b><b>_</b><b>l</b><b>b</b><b>_</b><b>m</b><b>a</b><b>r</b><b>k</b><b>(</b><u>a</u><u>r</u><u>g</u><u>s</u><b>)</b>, where <u>a</u><u>r</u><u>g</u><u>s</u> contains comma sepa‐
+                     rated IPv4 or IPv6 addresses. If the router is configured
+                     to force SNAT any load-balanced packets, the above action
+                     will  be  replaced  by   <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>f</b><b>o</b><b>r</b><b>c</b><b>e</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>_</b><b>f</b><b>o</b><b>r</b><b>_</b><b>l</b><b>b</b>   <b>=</b>   <b>1</b><b>;</b>
+                     <b>c</b><b>t</b><b>_</b><b>l</b><b>b</b><b>_</b><b>m</b><b>a</b><b>r</b><b>k</b><b>(</b><u>a</u><u>r</u><u>g</u><u>s</u><b>;</b> <b>f</b><b>o</b><b>r</b><b>c</b><b>e</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>)</b><b>;</b>. If the load balancing rule
+                     is  configured  with <b>s</b><b>k</b><b>i</b><b>p</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b> set to true, the above ac‐
+                     tion will be  replaced  by  <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>s</b><b>k</b><b>i</b><b>p</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>_</b><b>f</b><b>o</b><b>r</b><b>_</b><b>l</b><b>b</b>  <b>=</b>  <b>1</b><b>;</b>
+                     <b>c</b><b>t</b><b>_</b><b>l</b><b>b</b><b>_</b><b>m</b><b>a</b><b>r</b><b>k</b><b>(</b><u>a</u><u>r</u><u>g</u><u>s</u><b>;</b> <b>s</b><b>k</b><b>i</b><b>p</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>)</b><b>;</b>.
+
+                     The  previous  table  <b>l</b><b>r</b><b>_</b><b>i</b><b>n</b><b>_</b><b>d</b><b>e</b><b>f</b><b>r</b><b>a</b><b>g</b> sets the register <b>r</b><b>e</b><b>g</b><b>0</b>
+                     (or <b>x</b><b>x</b><b>r</b><b>e</b><b>g</b><b>0</b> for IPv6) and does <b>c</b><b>t</b><b>_</b><b>d</b><b>n</b><b>a</b><b>t</b>. Hence  for  estab‐
+                     lished  traffic,  this  table just advances the packet to
+                     the next stage.
+
+              •      If the load balancer is created with <b>-</b><b>-</b><b>r</b><b>e</b><b>j</b><b>e</b><b>c</b><b>t</b> option  and
+                     it  has no active backends, a TCP reset segment (for tcp)
+                     or an ICMP port unreachable packet (for all other kind of
+                     traffic) will be sent whenever an incoming packet is  re‐
+                     ceived for this load-balancer. Please note using <b>-</b><b>-</b><b>r</b><b>e</b><b>j</b><b>e</b><b>c</b><b>t</b>
+                     option will disable empty_lb SB controller event for this
+                     load balancer.
+
+              •      For  the related traffic, a priority 50 flow that matches
+                     <b>c</b><b>t</b><b>.</b><b>r</b><b>e</b><b>l</b> &amp;&amp;&amp;&amp; <b>!</b><b>c</b><b>t</b><b>.</b><b>e</b><b>s</b><b>t</b> &amp;&amp;&amp;&amp; <b>!</b><b>c</b><b>t</b><b>.</b><b>n</b><b>e</b><b>w</b>  with an action  of  <b>c</b><b>t</b><b>_</b><b>c</b><b>o</b><b>m</b>‐‐
+                     <b>m</b><b>i</b><b>t</b><b>_</b><b>n</b><b>a</b><b>t</b><b>;</b>, if the router has load balancer assigned to it.
+                     Along with two priority 70 flows that match <b>s</b><b>k</b><b>i</b><b>p</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b> and
+                     <b>f</b><b>o</b><b>r</b><b>c</b><b>e</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b> flags, setting the <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>f</b><b>o</b><b>r</b><b>c</b><b>e</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>_</b><b>f</b><b>o</b><b>r</b><b>_</b><b>l</b><b>b</b> <b>=</b> <b>1</b>
+                     or <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>s</b><b>k</b><b>i</b><b>p</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>_</b><b>f</b><b>o</b><b>r</b><b>_</b><b>l</b><b>b</b> <b>=</b> <b>1</b> accordingly.
+
+              •      For  the  established  traffic,  a  priority 50 flow that
+                     matches <b>c</b><b>t</b><b>.</b><b>e</b><b>s</b><b>t</b> &amp;&amp;&amp;&amp; <b>!</b><b>c</b><b>t</b><b>.</b><b>r</b><b>e</b><b>l</b> &amp;&amp;&amp;&amp;  <b>!</b><b>c</b><b>t</b><b>.</b><b>n</b><b>e</b><b>w</b>  &amp;&amp;&amp;&amp;  <b>c</b><b>t</b><b>_</b><b>m</b><b>a</b><b>r</b><b>k</b><b>.</b><b>n</b><b>a</b><b>t</b><b>t</b><b>e</b><b>d</b>
+                     with  an action of <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>, if the router has load balancer
+                     assigned to it. Along with two  priority  70  flows  that
+                     match   <b>s</b><b>k</b><b>i</b><b>p</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b>   and  <b>f</b><b>o</b><b>r</b><b>c</b><b>e</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b>  flags,  setting  the
+                     <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>f</b><b>o</b><b>r</b><b>c</b><b>e</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>_</b><b>f</b><b>o</b><b>r</b><b>_</b><b>l</b><b>b</b> <b>=</b> <b>1</b> or <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>s</b><b>k</b><b>i</b><b>p</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>_</b><b>f</b><b>o</b><b>r</b><b>_</b><b>l</b><b>b</b> <b>=</b> <b>1</b>
+                     accordingly.
+
+       Ingress Table 7: DNAT on Gateway Routers
+
+              •      For each configuration in the  OVN  Northbound  database,
+                     that  asks  to  change  the  destination  IP address of a
+                     packet from <u>A</u> to <u>B</u>, a priority-100  flow  matches  <b>i</b><b>p</b>  &amp;&amp;&amp;&amp;
+                     <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b>  <b>=</b><b>=</b>  <u>A</u>  or  <b>i</b><b>p</b>  &amp;&amp;&amp;&amp;  <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b>  <b>=</b><b>=</b>  <u>A</u> with an action
+                     <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>l</b><b>o</b><b>o</b><b>p</b><b>b</b><b>a</b><b>c</b><b>k</b> <b>=</b> <b>1</b><b>;</b> <b>c</b><b>t</b><b>_</b><b>d</b><b>n</b><b>a</b><b>t</b><b>(</b><u>B</u><b>)</b><b>;</b>. If the Gateway router is
+                     configured to force SNAT any DNATed packet, the above ac‐
+                     tion will be replaced by <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>f</b><b>o</b><b>r</b><b>c</b><b>e</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>_</b><b>f</b><b>o</b><b>r</b><b>_</b><b>d</b><b>n</b><b>a</b><b>t</b>  <b>=</b>  <b>1</b><b>;</b>
+                     <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>l</b><b>o</b><b>o</b><b>p</b><b>b</b><b>a</b><b>c</b><b>k</b>  <b>=</b>  <b>1</b><b>;</b>  <b>c</b><b>t</b><b>_</b><b>d</b><b>n</b><b>a</b><b>t</b><b>(</b><u>B</u><b>)</b><b>;</b>. If the NAT rule is of
+                     type dnat_and_snat and has <b>s</b><b>t</b><b>a</b><b>t</b><b>e</b><b>l</b><b>e</b><b>s</b><b>s</b><b>=</b><b>t</b><b>r</b><b>u</b><b>e</b> in the options,
+                     then the action would be <b>i</b><b>p</b><b>4</b><b>/</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b><b>=</b> <b>(</b><u>B</u><b>)</b>.
+
+                     If the NAT  rule  has  <b>a</b><b>l</b><b>l</b><b>o</b><b>w</b><b>e</b><b>d</b><b>_</b><b>e</b><b>x</b><b>t</b><b>_</b><b>i</b><b>p</b><b>s</b>  configured,  then
+                     there is an additional match <b>i</b><b>p</b><b>4</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b><b>=</b> <u>a</u><u>l</u><u>l</u><u>o</u><u>w</u><u>e</u><u>d</u><b>_</b><u>e</u><u>x</u><u>t</u><b>_</b><u>i</u><u>p</u><u>s</u> .
+                     Similarly,  for  IPV6,  match  would  be  <b>i</b><b>p</b><b>6</b><b>.</b><b>s</b><b>r</b><b>c</b>  <b>=</b><b>=</b> <u>a</u><u>l</u><u>�</u>��
+                     <u>l</u><u>o</u><u>w</u><u>e</u><u>d</u><b>_</b><u>e</u><u>x</u><u>t</u><b>_</b><u>i</u><u>p</u><u>s</u>.
+
+                     If the NAT rule has <b>e</b><b>x</b><b>e</b><b>m</b><b>p</b><b>t</b><b>e</b><b>d</b><b>_</b><b>e</b><b>x</b><b>t</b><b>_</b><b>i</b><b>p</b><b>s</b> set, then  there  is
+                     an  additional  flow configured at priority 101. The flow
+                     matches if source ip is an <b>e</b><b>x</b><b>e</b><b>m</b><b>p</b><b>t</b><b>e</b><b>d</b><b>_</b><b>e</b><b>x</b><b>t</b><b>_</b><b>i</b><b>p</b> and the action
+                     is <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b> . This flow is used to bypass the ct_dnat action
+                     for a packet originating from <b>e</b><b>x</b><b>e</b><b>m</b><b>p</b><b>t</b><b>e</b><b>d</b><b>_</b><b>e</b><b>x</b><b>t</b><b>_</b><b>i</b><b>p</b><b>s</b>.
+
+              •      A priority-0 logical flow with match <b>1</b> has actions <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>.
+
+       Ingress Table 7: DNAT on Distributed Routers
+
+       On distributed routers, the DNAT table only handles packets with desti‐
+       nation IP address that needs to be DNATted from a virtual IP address to
+       a real IP address. The unDNAT processing in the  reverse  direction  is
+       handled in a separate table in the egress pipeline.
+
+              •      For  each  configuration  in the OVN Northbound database,
+                     that asks to change  the  destination  IP  address  of  a
+                     packet  from  <u>A</u>  to  <u>B</u>, a priority-100 flow matches <b>i</b><b>p</b> &amp;&amp;&amp;&amp;
+                     <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <u>B</u> &amp;&amp;&amp;&amp; <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b> <u>G</u><u>W</u>, where  <u>G</u><u>W</u>  is  the  logical
+                     router gateway port corresponding to the NAT rule (speci‐
+                     fied  or inferred), with an action <b>c</b><b>t</b><b>_</b><b>d</b><b>n</b><b>a</b><b>t</b><b>(</b><u>B</u><b>)</b><b>;</b>. The match
+                     will include <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <u>B</u> in the IPv6 case.  If  the  NAT
+                     rule  is  of type dnat_and_snat and has <b>s</b><b>t</b><b>a</b><b>t</b><b>e</b><b>l</b><b>e</b><b>s</b><b>s</b><b>=</b><b>t</b><b>r</b><b>u</b><b>e</b> in
+                     the options, then the action would be <b>i</b><b>p</b><b>4</b><b>/</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b><b>=</b><b>(</b><u>B</u><b>)</b>.
+
+                     If the NAT rule cannot be handled in a  distributed  man‐
+                     ner,  then the priority-100 flow above is only programmed
+                     on the gateway chassis.
+
+                     If the NAT  rule  has  <b>a</b><b>l</b><b>l</b><b>o</b><b>w</b><b>e</b><b>d</b><b>_</b><b>e</b><b>x</b><b>t</b><b>_</b><b>i</b><b>p</b><b>s</b>  configured,  then
+                     there is an additional match <b>i</b><b>p</b><b>4</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b><b>=</b> <u>a</u><u>l</u><u>l</u><u>o</u><u>w</u><u>e</u><u>d</u><b>_</b><u>e</u><u>x</u><u>t</u><b>_</b><u>i</u><u>p</u><u>s</u> .
+                     Similarly,  for  IPV6,  match  would  be  <b>i</b><b>p</b><b>6</b><b>.</b><b>s</b><b>r</b><b>c</b>  <b>=</b><b>=</b> <u>a</u><u>l</u><u>�</u>��
+                     <u>l</u><u>o</u><u>w</u><u>e</u><u>d</u><b>_</b><u>e</u><u>x</u><u>t</u><b>_</b><u>i</u><u>p</u><u>s</u>.
+
+                     If the NAT rule has <b>e</b><b>x</b><b>e</b><b>m</b><b>p</b><b>t</b><b>e</b><b>d</b><b>_</b><b>e</b><b>x</b><b>t</b><b>_</b><b>i</b><b>p</b><b>s</b> set, then  there  is
+                     an  additional  flow configured at priority 101. The flow
+                     matches if source ip is an <b>e</b><b>x</b><b>e</b><b>m</b><b>p</b><b>t</b><b>e</b><b>d</b><b>_</b><b>e</b><b>x</b><b>t</b><b>_</b><b>i</b><b>p</b> and the action
+                     is <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b> . This flow is used to bypass the ct_dnat action
+                     for a packet originating from <b>e</b><b>x</b><b>e</b><b>m</b><b>p</b><b>t</b><b>e</b><b>d</b><b>_</b><b>e</b><b>x</b><b>t</b><b>_</b><b>i</b><b>p</b><b>s</b>.
+
+                     A priority-0 logical flow with match <b>1</b> has actions <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>8</u><u>:</u> <u>L</u><u>o</u><u>a</u><u>d</u> <u>b</u><u>a</u><u>l</u><u>a</u><u>n</u><u>c</u><u>i</u><u>n</u><u>g</u> <u>a</u><u>f</u><u>f</u><u>i</u><u>n</u><u>i</u><u>t</u><u>y</u> <u>l</u><u>e</u><u>a</u><u>r</u><u>n</u>
+
+       Load balancing affinity learn  table  contains  the  following  logical
+       flows:
+
+              •      For all the configured load balancing rules for a logical
+                     router  where  a positive affinity timeout <u>T</u> is specified
+                     in <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+                      column, that includes a L4 port <u>P</u><u>O</u><u>R</u><u>T</u> of protocol  <u>P</u>  and
+                     IPv4  or  IPv6  address  <u>V</u><u>I</u><u>P</u>,  a  priority-100  flow that
+                     matches on <b>r</b><b>e</b><b>g</b><b>9</b><b>[</b><b>6</b><b>]</b> <b>=</b><b>=</b> <b>0</b> &amp;&amp;&amp;&amp; <b>c</b><b>t</b><b>.</b><b>n</b><b>e</b><b>w</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b> &amp;&amp;&amp;&amp; <b>r</b><b>e</b><b>g</b><b>0</b> <b>=</b><b>=</b> <u>V</u><u>I</u><u>P</u> &amp;&amp;&amp;&amp;
+                     <u>P</u> &amp;&amp;&amp;&amp; <b>r</b><b>e</b><b>g</b><b>9</b><b>[</b><b>1</b><b>6</b><b>.</b><b>.</b><b>3</b><b>1</b><b>]</b> <b>=</b><b>=</b>  <u>P</u><u>O</u><u>R</u><u>T</u> (<b>x</b><b>x</b><b>r</b><b>e</b><b>g</b><b>0</b> <b>=</b><b>=</b> <u>V</u><u>I</u><u>P</u>   in  the  IPv6
+                     case)  with  an  action  of <b>c</b><b>o</b><b>m</b><b>m</b><b>i</b><b>t</b><b>_</b><b>l</b><b>b</b><b>_</b><b>a</b><b>f</b><b>f</b><b>(</b><b>v</b><b>i</b><b>p</b> <b>=</b> <u>V</u><u>I</u><u>P</u><b>:</b><u>P</u><u>O</u><u>R</u><u>T</u><b>,</b>
+                     <b>b</b><b>a</b><b>c</b><b>k</b><b>e</b><b>n</b><b>d</b> <b>=</b> <u>b</u><u>a</u><u>c</u><u>k</u><u>e</u><u>n</u><u>d</u> <u>i</u><u>p</u><b>:</b> <u>b</u><u>a</u><u>c</u><u>k</u><u>e</u><u>n</u><u>d</u> <u>p</u><u>o</u><u>r</u><u>t</u><b>,</b> <b>p</b><b>r</b><b>o</b><b>t</b><b>o</b> <b>=</b> <u>P</u><b>,</b> <b>t</b><b>i</b><b>m</b><b>e</b><b>o</b><b>u</b><b>t</b>  <b>=</b>
+                     <u>T</u><b>)</b><b>;</b>.
+
+              •      A  priority  0 flow is added which matches on all packets
+                     and applies the action <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>9</u><u>:</u> <u>E</u><u>C</u><u>M</u><u>P</u> <u>s</u><u>y</u><u>m</u><u>m</u><u>e</u><u>t</u><u>r</u><u>i</u><u>c</u> <u>r</u><u>e</u><u>p</u><u>l</u><u>y</u> <u>p</u><u>r</u><u>o</u><u>c</u><u>e</u><u>s</u><u>s</u><u>i</u><u>n</u><u>g</u>
+
+              •      If ECMP routes with symmetric reply are configured in the
+                     <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database for a gateway  router,  a  prior‐
+                     ity-100  flow is added for each router port on which sym‐
+                     metric replies are configured.  The  matching  logic  for
+                     these  ports essentially reverses the configured logic of
+                     the ECMP route. So for instance, a route with a  destina‐
+                     tion  routing  policy will instead match if the source IP
+                     address matches the static route’s prefix. The flow  uses
+                     the   action   <b>c</b><b>t</b><b>_</b><b>c</b><b>o</b><b>m</b><b>m</b><b>i</b><b>t</b>   <b>{</b>   <b>c</b><b>t</b><b>_</b><b>l</b><b>a</b><b>b</b><b>e</b><b>l</b><b>.</b><b>e</b><b>c</b><b>m</b><b>p</b><b>_</b><b>r</b><b>e</b><b>p</b><b>l</b><b>y</b><b>_</b><b>e</b><b>t</b><b>h</b>  <b>=</b>
+                     <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b><b>;</b><b>"</b>   <b>"</b>   <b>c</b><b>t</b><b>_</b><b>m</b><b>a</b><b>r</b><b>k</b><b>.</b><b>e</b><b>c</b><b>m</b><b>p</b><b>_</b><b>r</b><b>e</b><b>p</b><b>l</b><b>y</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>   <b>=</b>   <u>K</u><b>;</b><b>}</b><b>;</b>   <b>c</b><b>o</b><b>m</b>‐‐
+                     <b>m</b><b>i</b><b>t</b><b>_</b><b>e</b><b>c</b><b>m</b><b>p</b><b>_</b><b>n</b><b>h</b><b>(</b><b>)</b><b>;</b> <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>
+                      to  commit  the  connection  and storing <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b> and the
+                     ECMP reply port binding tunnel key <u>K</u> in the <b>c</b><b>t</b><b>_</b><b>l</b><b>a</b><b>b</b><b>e</b><b>l</b>  and
+                     the traffic pattern to table <b>7</b><b>6</b> or <b>7</b><b>7</b>.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>1</u><u>0</u><u>:</u> <u>I</u><u>P</u><u>v</u><u>6</u> <u>N</u><u>D</u> <u>R</u><u>A</u> <u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u> <u>p</u><u>r</u><u>o</u><u>c</u><u>e</u><u>s</u><u>s</u><u>i</u><u>n</u><u>g</u>
+
+              •      A  priority-50  logical  flow  is  added for each logical
+                     router port configured with  IPv6  ND  RA  options  which
+                     matches  IPv6  ND  Router Solicitation packet and applies
+                     the action <b>p</b><b>u</b><b>t</b><b>_</b><b>n</b><b>d</b><b>_</b><b>r</b><b>a</b><b>_</b><b>o</b><b>p</b><b>t</b><b>s</b> and advances the packet to  the
+                     next table.
+
+                     <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>5</b><b>]</b> <b>=</b> <b>p</b><b>u</b><b>t</b><b>_</b><b>n</b><b>d</b><b>_</b><b>r</b><b>a</b><b>_</b><b>o</b><b>p</b><b>t</b><b>s</b><b>(</b><u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u>);next;
+
+
+                     For a valid IPv6 ND RS packet, this transforms the packet
+                     into  an  IPv6 ND RA reply and sets the RA options to the
+                     packet and stores 1 into  reg0[5].  For  other  kinds  of
+                     packets,  it  just  stores 0 into reg0[5]. Either way, it
+                     continues to the next table.
+
+              •      A priority-0 logical flow with match <b>1</b> has actions <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>1</u><u>1</u><u>:</u> <u>I</u><u>P</u><u>v</u><u>6</u> <u>N</u><u>D</u> <u>R</u><u>A</u> <u>r</u><u>e</u><u>s</u><u>p</u><u>o</u><u>n</u><u>d</u><u>e</u><u>r</u>
+
+       This table implements IPv6 ND RA responder for the IPv6 ND  RA  replies
+       generated by the previous table.
+
+              •      A  priority-50  logical  flow  is  added for each logical
+                     router port configured with  IPv6  ND  RA  options  which
+                     matches  IPv6 ND RA packets and <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>5</b><b>]</b> <b>=</b><b>=</b> <b>1</b> and responds
+                     back to the  <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b>  after  applying  these  actions.  If
+                     <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>5</b><b>]</b>   is   set   to  1,  it  means  that  the  action
+                     <b>p</b><b>u</b><b>t</b><b>_</b><b>n</b><b>d</b><b>_</b><b>r</b><b>a</b><b>_</b><b>o</b><b>p</b><b>t</b><b>s</b> was successful.
+
+                     <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b> <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b><b>;</b>
+                     <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <u>E</u>;
+                     <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b> <b>i</b><b>p</b><b>6</b><b>.</b><b>s</b><b>r</b><b>c</b><b>;</b>
+                     <b>i</b><b>p</b><b>6</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <u>I</u>;
+                     <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b> <u>P</u>;
+                     <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>l</b><b>o</b><b>o</b><b>p</b><b>b</b><b>a</b><b>c</b><b>k</b> <b>=</b> <b>1</b><b>;</b>
+                     <b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b><b>;</b>
+
+
+                     where <u>E</u> is the MAC address and <u>I</u> is the IPv6  link  local
+                     address of the logical router port.
+
+                     (This  terminates  packet processing in ingress pipeline;
+                     the packet does not go to the next ingress table.)
+
+              •      A priority-0 logical flow with match <b>1</b> has actions <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>1</u><u>2</u><u>:</u> <u>I</u><u>P</u> <u>R</u><u>o</u><u>u</u><u>t</u><u>i</u><u>n</u><u>g</u> <u>P</u><u>r</u><u>e</u>
+
+       If a packet arrived at this table from Logical Router Port <u>P</u> which  has
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>_</b><b>t</b><b>a</b><b>b</b><b>l</b><b>e</b>  value set, a logical flow with match <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b> <b>"</b><u>P</u><b>"</b>
+       with priority 100  and  action  setting  unique-generated  per-datapath
+       32-bit  value  (non-zero)  in  OVS register 7. This register’s value is
+       checked in next table. If packet didn’t  match  any  configured  inport
+       (<u><</u>lt;<u>m</u><u>a</u><u>i</u><u>n</u><u>></u>gt; route table), register 7 value is set to 0.
+
+       This table contains the following logical flows:
+
+              •      Priority-100  flow  with match <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b> <b>"</b><b>L</b><b>R</b><b>P</b><b>_</b><b>N</b><b>A</b><b>M</b><b>E</b><b>"</b> value
+                     and action, which set route table identifier in reg7.
+
+                     A priority-0 logical flow with match <b>1</b> has actions <b>r</b><b>e</b><b>g</b><b>7</b> <b>=</b>
+                     <b>0</b><b>;</b> <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>1</u><u>3</u><u>:</u> <u>I</u><u>P</u> <u>R</u><u>o</u><u>u</u><u>t</u><u>i</u><u>n</u><u>g</u>
+
+       A packet that arrives at this table is an  IP  packet  that  should  be
+       routed  to  the address in <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b> or <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b>. This table implements IP
+       routing, setting <b>r</b><b>e</b><b>g</b><b>0</b> (or <b>x</b><b>x</b><b>r</b><b>e</b><b>g</b><b>0</b> for IPv6) to the next-hop  IP  address
+       (leaving <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b> or <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b>, the packet’s final destination, unchanged)
+       and  advances  to  the next table for ARP resolution. It also sets <b>r</b><b>e</b><b>g</b><b>1</b>
+       (or <b>x</b><b>x</b><b>r</b><b>e</b><b>g</b><b>1</b>) to the  IP  address  owned  by  the  selected  router  port
+       (ingress  table  <b>A</b><b>R</b><b>P</b>  <b>R</b><b>e</b><b>q</b><b>u</b><b>e</b><b>s</b><b>t</b>  will generate an ARP request, if needed,
+       with <b>r</b><b>e</b><b>g</b><b>0</b> as the target protocol address and <b>r</b><b>e</b><b>g</b><b>1</b> as the source  proto‐
+       col address).
+
+       For  ECMP routes, i.e. multiple static routes with same policy and pre‐
+       fix but different nexthops, the above actions are deferred to next  ta‐
+       ble.  This  table, instead, is responsible for determine the ECMP group
+       id and select a member id within the group based on 5-tuple hashing. It
+       stores group id in <b>r</b><b>e</b><b>g</b><b>8</b><b>[</b><b>0</b><b>.</b><b>.</b><b>1</b><b>5</b><b>]</b> and member id in <b>r</b><b>e</b><b>g</b><b>8</b><b>[</b><b>1</b><b>6</b><b>.</b><b>.</b><b>3</b><b>1</b><b>]</b>. This step
+       is skipped with a priority-10300 rule if the traffic going out the ECMP
+       route is reply traffic, and the ECMP route was configured to  use  sym‐
+       metric  replies.  Instead,  the  stored  values in conntrack is used to
+       choose the destination. The <b>c</b><b>t</b><b>_</b><b>l</b><b>a</b><b>b</b><b>e</b><b>l</b><b>.</b><b>e</b><b>c</b><b>m</b><b>p</b><b>_</b><b>r</b><b>e</b><b>p</b><b>l</b><b>y</b><b>_</b><b>e</b><b>t</b><b>h</b> tells the  destina‐
+       tion   MAC   address   to   which   the  packet  should  be  sent.  The
+       <b>c</b><b>t</b><b>_</b><b>m</b><b>a</b><b>r</b><b>k</b><b>.</b><b>e</b><b>c</b><b>m</b><b>p</b><b>_</b><b>r</b><b>e</b><b>p</b><b>l</b><b>y</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b> tells the logical  router  port  on  which  the
+       packet  should be sent. These values saved to the conntrack fields when
+       the initial ingress traffic is received over the ECMP route and commit‐
+       ted to conntrack. If <b>R</b><b>E</b><b>G</b><b>B</b><b>I</b><b>T</b><b>_</b><b>K</b><b>N</b><b>O</b><b>W</b><b>N</b><b>_</b><b>E</b><b>C</b><b>M</b><b>P</b><b>_</b><b>N</b><b>H</b> is  set,  the  priority-10300
+       flows  in this stage set the <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b>, while the <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> is set by flows
+       at the ARP/ND Resolution stage.
+
+       This table contains the following logical flows:
+
+              •      Priority-10550 flow  that  drops  IPv6  Router  Solicita‐
+                     tion/Advertisement  packets  that  were  not processed in
+                     previous tables.
+
+              •      Priority-10550 flows that drop IGMP and MLD packets  with
+                     source MAC address owned by the router. These are used to
+                     prevent looping statically forwarded IGMP and MLD packets
+                     for which TTL is not decremented (it is always 1).
+
+              •      Priority-10500 flows that match IP multicast traffic des‐
+                     tined  to  groups  registered  on  any  of  the  attached
+                     switches and sets <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b>  to  the  associated  multicast
+                     group  that  will eventually flood the traffic to all in‐
+                     terested attached logical switches. The flows also decre‐
+                     ment TTL.
+
+              •      Priority-10460 flows that  match  IGMP  and  MLD  control
+                     packets,  set  <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b>  to the <b>M</b><b>C</b><b>_</b><b>S</b><b>T</b><b>A</b><b>T</b><b>I</b><b>C</b> multicast group,
+                     which <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> populates with the  logical  ports  that
+                     have  <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b><b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>f</b><b>l</b><b>o</b><b>o</b><b>d</b><b>=</b>’’<b>t</b><b>r</b><b>u</b><b>e</b>’’. If no router ports are
+                     configured to flood multicast  traffic  the  packets  are
+                     dropped.
+
+              •      Priority-10450  flow  that matches unregistered IP multi‐
+                     cast traffic decrements  TTL  and  sets  <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b>  to  the
+                     <b>M</b><b>C</b><b>_</b><b>S</b><b>T</b><b>A</b><b>T</b><b>I</b><b>C</b>  multicast  group,  which  <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> populates
+                     with   the    logical    ports    that    have    <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+                     <b>:</b><b>m</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>f</b><b>l</b><b>o</b><b>o</b><b>d</b><b>=</b>’’<b>t</b><b>r</b><b>u</b><b>e</b>’’. If no router ports are configured to
+                     flood multicast traffic the packets are dropped.
+
+              •      IPv4 routing table. For each route to IPv4 network <u>N</u> with
+                     netmask  <u>M</u>, on router port <u>P</u> with IP address <u>A</u> and Ether‐
+                     net address <u>E</u>, a logical flow with match <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b>  <u>N</u><b>/</b><u>M</u>,
+                     whose priority is the number of 1-bits in <u>M</u>, has the fol‐
+                     lowing actions:
+
+                     <b>i</b><b>p</b><b>.</b><b>t</b><b>t</b><b>l</b><b>-</b><b>-</b><b>;</b>
+                     <b>r</b><b>e</b><b>g</b><b>8</b><b>[</b><b>0</b><b>.</b><b>.</b><b>1</b><b>5</b><b>]</b> <b>=</b> <b>0</b><b>;</b>
+                     <b>r</b><b>e</b><b>g</b><b>0</b> <b>=</b> <u>G</u>;
+                     <b>r</b><b>e</b><b>g</b><b>1</b> <b>=</b> <u>A</u>;
+                     <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <u>E</u>;
+                     <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b> <u>P</u>;
+                     <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>l</b><b>o</b><b>o</b><b>p</b><b>b</b><b>a</b><b>c</b><b>k</b> <b>=</b> <b>1</b><b>;</b>
+                     <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>
+
+
+                     (Ingress table 1 already verified that <b>i</b><b>p</b><b>.</b><b>t</b><b>t</b><b>l</b><b>-</b><b>-</b><b>;</b> will not
+                     yield a TTL exceeded error.)
+
+                     If  the route has a gateway, <u>G</u> is the gateway IP address.
+                     Instead, if the route is from a configured static  route,
+                     <u>G</u> is the next hop IP address. Else it is <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b>.
+
+              •      IPv6 routing table. For each route to IPv6 network <u>N</u> with
+                     netmask  <u>M</u>, on router port <u>P</u> with IP address <u>A</u> and Ether‐
+                     net address <u>E</u>, a logical flow with match in CIDR notation
+                     <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <u>N</u><b>/</b><u>M</u>, whose priority is the integer value of <u>M</u>,
+                     has the following actions:
+
+                     <b>i</b><b>p</b><b>.</b><b>t</b><b>t</b><b>l</b><b>-</b><b>-</b><b>;</b>
+                     <b>r</b><b>e</b><b>g</b><b>8</b><b>[</b><b>0</b><b>.</b><b>.</b><b>1</b><b>5</b><b>]</b> <b>=</b> <b>0</b><b>;</b>
+                     <b>x</b><b>x</b><b>r</b><b>e</b><b>g</b><b>0</b> <b>=</b> <u>G</u>;
+                     <b>x</b><b>x</b><b>r</b><b>e</b><b>g</b><b>1</b> <b>=</b> <u>A</u>;
+                     <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <u>E</u>;
+                     <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b> <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b><b>;</b>
+                     <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>l</b><b>o</b><b>o</b><b>p</b><b>b</b><b>a</b><b>c</b><b>k</b> <b>=</b> <b>1</b><b>;</b>
+                     <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>
+
+
+                     (Ingress table 1 already verified that <b>i</b><b>p</b><b>.</b><b>t</b><b>t</b><b>l</b><b>-</b><b>-</b><b>;</b> will not
+                     yield a TTL exceeded error.)
+
+                     If the route has a gateway, <u>G</u> is the gateway IP  address.
+                     Instead,  if the route is from a configured static route,
+                     <u>G</u> is the next hop IP address. Else it is <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b>.
+
+                     If the address <u>A</u> is in the link-local  scope,  the  route
+                     will be limited to sending on the ingress port.
+
+                     For  each  static  route the <b>r</b><b>e</b><b>g</b><b>7</b> <b>=</b><b>=</b> <b>i</b><b>d</b> &amp;&amp;&amp;&amp; is prefixed in
+                     logical flow match portion. For routes  with  <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>_</b><b>t</b><b>a</b><b>b</b><b>l</b><b>e</b>
+                     value set a unique non-zero id is used. For routes within
+                     <lt;<lt;<b>m</b><b>a</b><b>i</b><b>n</b>>gt;>gt; route table (no route table set), this id value is
+                     0.
+
+                     For each <u>c</u><u>o</u><u>n</u><u>n</u><u>e</u><u>c</u><u>t</u><u>e</u><u>d</u> route (route to the LRP’s subnet CIDR)
+                     the  logical flow match portion has no <b>r</b><b>e</b><b>g</b><b>7</b> <b>=</b><b>=</b> <b>i</b><b>d</b> &amp;&amp;&amp;&amp; pre‐
+                     fix to have route to LRP’s subnets in all routing tables.
+
+              •      For ECMP routes, they are grouped by policy  and  prefix.
+                     An  unique  id  (non-zero) is assigned to each group, and
+                     each member is also  assigned  an  unique  id  (non-zero)
+                     within each group.
+
+                     For  each IPv4/IPv6 ECMP group with group id <u>G</u><u>I</u><u>D</u> and mem‐
+                     ber ids <u>M</u><u>I</u><u>D</u><u>1</u>, <u>M</u><u>I</u><u>D</u><u>2</u>, ..., a logical  flow  with  match  in
+                     CIDR  notation  <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b>  <b>=</b><b>=</b> <u>N</u><b>/</b><u>M</u>, or <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <u>N</u><b>/</b><u>M</u>, whose
+                     priority is the integer value of <u>M</u>, has the following ac‐
+                     tions:
+
+                     <b>i</b><b>p</b><b>.</b><b>t</b><b>t</b><b>l</b><b>-</b><b>-</b><b>;</b>
+                     <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>l</b><b>o</b><b>o</b><b>p</b><b>b</b><b>a</b><b>c</b><b>k</b> <b>=</b> <b>1</b><b>;</b>
+                     <b>r</b><b>e</b><b>g</b><b>8</b><b>[</b><b>0</b><b>.</b><b>.</b><b>1</b><b>5</b><b>]</b> <b>=</b> <u>G</u><u>I</u><u>D</u>;
+                     <b>s</b><b>e</b><b>l</b><b>e</b><b>c</b><b>t</b><b>(</b><b>r</b><b>e</b><b>g</b><b>8</b><b>[</b><b>1</b><b>6</b><b>.</b><b>.</b><b>3</b><b>1</b><b>]</b><b>,</b> <u>M</u><u>I</u><u>D</u><u>1</u>, <u>M</u><u>I</u><u>D</u><u>2</u>, ...);
+
+
+              •      A priority-0 logical flow that matches  all  packets  not
+                     already handled (match <b>1</b>) and drops them (action <b>d</b><b>r</b><b>o</b><b>p</b><b>;</b>).
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>1</u><u>4</u><u>:</u> <u>I</u><u>P</u><b>_</b><u>R</u><u>O</u><u>U</u><u>T</u><u>I</u><u>N</u><u>G</u><b>_</b><u>E</u><u>C</u><u>M</u><u>P</u>
+
+       This  table  implements  the  second part of IP routing for ECMP routes
+       following the previous table. If a packet matched a ECMP group  in  the
+       previous  table,  this  table matches the group id and member id stored
+       from the previous table, setting <b>r</b><b>e</b><b>g</b><b>0</b> (or <b>x</b><b>x</b><b>r</b><b>e</b><b>g</b><b>0</b> for IPv6) to the next-
+       hop IP address (leaving <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b> or <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b>, the packet’s final destina‐
+       tion, unchanged) and advances to the next table for ARP resolution.  It
+       also  sets  <b>r</b><b>e</b><b>g</b><b>1</b>  (or  <b>x</b><b>x</b><b>r</b><b>e</b><b>g</b><b>1</b>)  to the IP address owned by the selected
+       router port (ingress table <b>A</b><b>R</b><b>P</b> <b>R</b><b>e</b><b>q</b><b>u</b><b>e</b><b>s</b><b>t</b> will generate an ARP request, if
+       needed, with <b>r</b><b>e</b><b>g</b><b>0</b> as the target protocol address and <b>r</b><b>e</b><b>g</b><b>1</b> as the source
+       protocol address).
+
+       This processing is skipped for reply traffic being sent out of an  ECMP
+       route if the route was configured to use symmetric replies.
+
+       This table contains the following logical flows:
+
+              •      A  priority-150  flow  that matches <b>r</b><b>e</b><b>g</b><b>8</b><b>[</b><b>0</b><b>.</b><b>.</b><b>1</b><b>5</b><b>]</b> <b>=</b><b>=</b> <b>0</b> with
+                     action  <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>  directly  bypasses  packets  of   non-ECMP
+                     routes.
+
+              •      For  each  member  with ID <u>M</u><u>I</u><u>D</u> in each ECMP group with ID
+                     <u>G</u><u>I</u><u>D</u>, a priority-100 flow with match <b>r</b><b>e</b><b>g</b><b>8</b><b>[</b><b>0</b><b>.</b><b>.</b><b>1</b><b>5</b><b>]</b> <b>=</b><b>=</b> <u>G</u><u>I</u><u>D</u> &amp;&amp;&amp;&amp;
+                     <b>r</b><b>e</b><b>g</b><b>8</b><b>[</b><b>1</b><b>6</b><b>.</b><b>.</b><b>3</b><b>1</b><b>]</b> <b>=</b><b>=</b> <u>M</u><u>I</u><u>D</u> has following actions:
+
+                     <b>[</b><b>x</b><b>x</b><b>]</b><b>r</b><b>e</b><b>g</b><b>0</b> <b>=</b> <u>G</u>;
+                     <b>[</b><b>x</b><b>x</b><b>]</b><b>r</b><b>e</b><b>g</b><b>1</b> <b>=</b> <u>A</u>;
+                     <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <u>E</u>;
+                     <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b> <u>P</u>;
+
+
+              •      A priority-0 logical flow that matches  all  packets  not
+                     already handled (match <b>1</b>) and drops them (action <b>d</b><b>r</b><b>o</b><b>p</b><b>;</b>).
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>1</u><u>5</u><u>:</u> <u>R</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u> <u>p</u><u>o</u><u>l</u><u>i</u><u>c</u><u>i</u><u>e</u><u>s</u>
+
+       This table adds flows for the logical router policies configured on the
+       logical   router.   Please   see   the  <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b>  database  <b>L</b><b>o</b><b>g</b><b>i</b>‐‐
+       <b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>P</b><b>o</b><b>l</b><b>i</b><b>c</b><b>y</b> table documentation in <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b> for supported actions.
+
+              •      For each router policy configured on the logical  router,
+                     a  logical  flow  is added with specified priority, match
+                     and actions.
+
+              •      If the policy action is <b>r</b><b>e</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b> with 2 or  more  nexthops
+                     defined,  then the logical flow is added with the follow‐
+                     ing actions:
+
+                     <b>r</b><b>e</b><b>g</b><b>8</b><b>[</b><b>0</b><b>.</b><b>.</b><b>1</b><b>5</b><b>]</b> <b>=</b> <u>G</u><u>I</u><u>D</u>;
+                     <b>r</b><b>e</b><b>g</b><b>8</b><b>[</b><b>1</b><b>6</b><b>.</b><b>.</b><b>3</b><b>1</b><b>]</b> <b>=</b> <b>s</b><b>e</b><b>l</b><b>e</b><b>c</b><b>t</b><b>(</b><b>1</b><b>,</b><b>.</b><b>.</b><b>n</b><b>)</b><b>;</b>
+
+
+                     where <u>G</u><u>I</u><u>D</u> is the ECMP group id  generated  by  <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>
+                     for  this  policy and <u>n</u> is the number of nexthops. <b>s</b><b>e</b><b>l</b><b>e</b><b>c</b><b>t</b>
+                     action selects one of the nexthop member id, stores it in
+                     the register <b>r</b><b>e</b><b>g</b><b>8</b><b>[</b><b>1</b><b>6</b><b>.</b><b>.</b><b>3</b><b>1</b><b>]</b> and advances the packet to  the
+                     next stage.
+
+              •      If  the  policy  action  is <b>r</b><b>e</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b> with just one nexhop,
+                     then the logical flow is added  with  the  following  ac‐
+                     tions:
+
+                     <b>[</b><b>x</b><b>x</b><b>]</b><b>r</b><b>e</b><b>g</b><b>0</b> <b>=</b> <u>H</u>;
+                     <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <u>E</u>;
+                     <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b> <u>P</u>;
+                     <b>r</b><b>e</b><b>g</b><b>8</b><b>[</b><b>0</b><b>.</b><b>.</b><b>1</b><b>5</b><b>]</b> <b>=</b> <b>0</b><b>;</b>
+                     <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>l</b><b>o</b><b>o</b><b>p</b><b>b</b><b>a</b><b>c</b><b>k</b> <b>=</b> <b>1</b><b>;</b>
+                     <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>
+
+
+                     where  <u>H</u>  is the <b>n</b><b>e</b><b>x</b><b>t</b><b>h</b><b>o</b><b>p</b>  defined in the router policy, <u>E</u>
+                     is the ethernet address of the logical router  port  from
+                     which  the  <b>n</b><b>e</b><b>x</b><b>t</b><b>h</b><b>o</b><b>p</b>  is  reachable  and  <u>P</u> is the logical
+                     router port from which the <b>n</b><b>e</b><b>x</b><b>t</b><b>h</b><b>o</b><b>p</b> is reachable.
+
+              •      If a router policy has the option <b>p</b><b>k</b><b>t</b><b>_</b><b>m</b><b>a</b><b>r</b><b>k</b><b>=</b><u>m</u> set  and  if
+                     the  action  is  <b>n</b><b>o</b><b>t</b>  drop, then the action also includes
+                     <b>p</b><b>k</b><b>t</b><b>.</b><b>m</b><b>a</b><b>r</b><b>k</b> <b>=</b> <u>m</u> to mark the packet with the marker <u>m</u>.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>1</u><u>6</u><u>:</u> <u>E</u><u>C</u><u>M</u><u>P</u> <u>h</u><u>a</u><u>n</u><u>d</u><u>l</u><u>i</u><u>n</u><u>g</u> <u>f</u><u>o</u><u>r</u> <u>r</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u> <u>p</u><u>o</u><u>l</u><u>i</u><u>c</u><u>i</u><u>e</u><u>s</u>
+
+       This table handles the ECMP for the  router  policies  configured  with
+       multiple nexthops.
+
+              •      A priority-150 flow is added to advance the packet to the
+                     next  stage  if the ECMP group id register <b>r</b><b>e</b><b>g</b><b>8</b><b>[</b><b>0</b><b>.</b><b>.</b><b>1</b><b>5</b><b>]</b> is
+                     0.
+
+              •      For each ECMP reroute router policy  with  multiple  nex‐
+                     thops,  a  priority-100  flow is added for each nexthop <u>H</u>
+                     with the match <b>r</b><b>e</b><b>g</b><b>8</b><b>[</b><b>0</b><b>.</b><b>.</b><b>1</b><b>5</b><b>]</b> <b>=</b><b>=</b> <u>G</u><u>I</u><u>D</u> &amp;&amp;&amp;&amp;  <b>r</b><b>e</b><b>g</b><b>8</b><b>[</b><b>1</b><b>6</b><b>.</b><b>.</b><b>3</b><b>1</b><b>]</b>  <b>=</b><b>=</b>  <u>M</u>
+                     where  <u>G</u><u>I</u><u>D</u>  is  the  router  policy group id generated by
+                     <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> and <u>M</u> is the member id of the nexthop <u>H</u> gener‐
+                     ated by <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>. The following actions  are  added  to
+                     the flow:
+
+                     <b>[</b><b>x</b><b>x</b><b>]</b><b>r</b><b>e</b><b>g</b><b>0</b> <b>=</b> <u>H</u>;
+                     <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <u>E</u>;
+                     <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b> <u>P</u>
+                     <b>"</b><b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>l</b><b>o</b><b>o</b><b>p</b><b>b</b><b>a</b><b>c</b><b>k</b> <b>=</b> <b>1</b><b>;</b> <b>"</b>
+                     <b>"</b><b>n</b><b>e</b><b>x</b><b>t</b><b>;</b><b>"</b>
+
+
+                     where  <u>H</u>  is the <b>n</b><b>e</b><b>x</b><b>t</b><b>h</b><b>o</b><b>p</b>  defined in the router policy, <u>E</u>
+                     is the ethernet address of the logical router  port  from
+                     which  the  <b>n</b><b>e</b><b>x</b><b>t</b><b>h</b><b>o</b><b>p</b>  is  reachable  and  <u>P</u> is the logical
+                     router port from which the <b>n</b><b>e</b><b>x</b><b>t</b><b>h</b><b>o</b><b>p</b> is reachable.
+
+              •      A priority-0 logical flow that matches  all  packets  not
+                     already handled (match <b>1</b>) and drops them (action <b>d</b><b>r</b><b>o</b><b>p</b><b>;</b>).
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>1</u><u>7</u><u>:</u> <u>A</u><u>R</u><u>P</u><u>/</u><u>N</u><u>D</u> <u>R</u><u>e</u><u>s</u><u>o</u><u>l</u><u>u</u><u>t</u><u>i</u><u>o</u><u>n</u>
+
+       Any  packet that reaches this table is an IP packet whose next-hop IPv4
+       address is in <b>r</b><b>e</b><b>g</b><b>0</b> or IPv6 address is in <b>x</b><b>x</b><b>r</b><b>e</b><b>g</b><b>0</b>.  (<b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b>  or  <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b>
+       contains  the final destination.) This table resolves the IP address in
+       <b>r</b><b>e</b><b>g</b><b>0</b> (or <b>x</b><b>x</b><b>r</b><b>e</b><b>g</b><b>0</b>) into an output port in <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> and an Ethernet address
+       in <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b>, using the following flows:
+
+              •      A priority-500 flow that  matches  IP  multicast  traffic
+                     that  was  allowed in the routing pipeline. For this kind
+                     of traffic the <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> was already set so the  flow  just
+                     advances to the next table.
+
+              •      Priority-200  flows that match ECMP reply traffic for the
+                     routes configured to use symmetric replies, with  actions
+                     <b>p</b><b>u</b><b>s</b><b>h</b><b>(</b><b>x</b><b>x</b><b>r</b><b>e</b><b>g</b><b>1</b><b>)</b><b>;</b>    <b>x</b><b>x</b><b>r</b><b>e</b><b>g</b><b>1</b>    <b>=</b>    <b>c</b><b>t</b><b>_</b><b>l</b><b>a</b><b>b</b><b>e</b><b>l</b><b>;</b>    <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b>    <b>=</b>
+                     <b>x</b><b>x</b><b>r</b><b>e</b><b>g</b><b>1</b><b>[</b><b>3</b><b>2</b><b>.</b><b>.</b><b>7</b><b>9</b><b>]</b><b>;</b> <b>p</b><b>o</b><b>p</b><b>(</b><b>x</b><b>x</b><b>r</b><b>e</b><b>g</b><b>1</b><b>)</b><b>;</b> <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>. <b>x</b><b>x</b><b>r</b><b>e</b><b>g</b><b>1</b> is  used  here
+                     to  avoid masked access to ct_label, to make the flow HW-
+                     offloading friendly.
+
+              •      Static MAC bindings. MAC bindings can be known statically
+                     based on data in the <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database. For  router
+                     ports  connected to logical switches, MAC bindings can be
+                     known statically from the <b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>e</b><b>s</b> column in  the  <b>L</b><b>o</b><b>g</b><b>i</b>‐‐
+                     <b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b>  table.  (Note: the flow is not installed
+                     for IPs of logical switch ports of type <b>v</b><b>i</b><b>r</b><b>t</b><b>u</b><b>a</b><b>l</b>, and  dy‐
+                     namic  MAC binding is used for those IPs instead, so that
+                     virtual parent failover does not depend on <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>, to
+                     achieve better failover performance.)  For  router  ports
+                     connected  to  other logical routers, MAC bindings can be
+                     known statically from the <b>m</b><b>a</b><b>c</b> and <b>n</b><b>e</b><b>t</b><b>w</b><b>o</b><b>r</b><b>k</b><b>s</b> column in  the
+                     <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b>  table.  (Note:  the  flow is NOT in‐
+                     stalled for the IP addresses that belong  to  a  neighbor
+                     logical  router  port  if  the current router has the <b>o</b><b>p</b>‐‐
+                     <b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>d</b><b>y</b><b>n</b><b>a</b><b>m</b><b>i</b><b>c</b><b>_</b><b>n</b><b>e</b><b>i</b><b>g</b><b>h</b><b>_</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>s</b> set to <b>t</b><b>r</b><b>u</b><b>e</b>)
+
+                     For each IPv4 address <u>A</u> whose host is known to have  Eth‐
+                     ernet  address  <u>E</u>  on  router port <u>P</u>, a priority-100 flow
+                     with match <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b><b>=</b> <u>P</u> &amp;&amp;&amp;&amp; <b>r</b><b>e</b><b>g</b><b>0</b> <b>=</b><b>=</b> <u>A</u> has actions <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b>
+                     <b>=</b> <u>E</u><b>;</b> <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>.
+
+                     For each IPv6 address <u>A</u> whose host is known to have  Eth‐
+                     ernet  address  <u>E</u>  on  router port <u>P</u>, a priority-100 flow
+                     with match <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b><b>=</b> <u>P</u>  &amp;&amp;&amp;&amp;  <b>x</b><b>x</b><b>r</b><b>e</b><b>g</b><b>0</b>  <b>=</b><b>=</b>  <u>A</u>  has  actions
+                     <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b> <u>E</u><b>;</b> <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>.
+
+                     For each logical router port with an IPv4 address <u>A</u> and a
+                     mac  address of <u>E</u> that is reachable via a different logi‐
+                     cal router port <u>P</u>, a priority-100 flow with match <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b>
+                     <b>=</b><b>=</b><b>=</b> <u>P</u> &amp;&amp;&amp;&amp; <b>r</b><b>e</b><b>g</b><b>0</b> <b>=</b><b>=</b> <u>A</u> has actions <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b> <u>E</u><b>;</b> <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>.
+
+                     For each logical router port with an IPv6 address <u>A</u> and a
+                     mac address of <u>E</u> that is reachable via a different  logi‐
+                     cal router port <u>P</u>, a priority-100 flow with match <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b>
+                     <b>=</b><b>=</b><b>=</b> <u>P</u> &amp;&amp;&amp;&amp; <b>x</b><b>x</b><b>r</b><b>e</b><b>g</b><b>0</b> <b>=</b><b>=</b> <u>A</u> has actions <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b> <u>E</u><b>;</b> <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>.
+
+              •      Static  MAC  bindings  from NAT entries. MAC bindings can
+                     also be known for the entries in  the  <b>N</b><b>A</b><b>T</b>  table.  Below
+                     flows  are programmed for distributed logical routers i.e
+                     with a distributed router port.
+
+                     For each row in the <b>N</b><b>A</b><b>T</b> table with IPv4 address <u>A</u> in  the
+                     <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>p</b> column of <b>N</b><b>A</b><b>T</b> table, below two flows are pro‐
+                     grammed:
+
+                     A  priority-100  flow with the match <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b> <u>P</u> &amp;&amp;&amp;&amp; <b>r</b><b>e</b><b>g</b><b>0</b>
+                     <b>=</b><b>=</b> <u>A</u> has actions <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b> <u>E</u><b>;</b> <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>, where <b>P</b> is the  dis‐
+                     tributed  logical  router port, <u>E</u> is the Ethernet address
+                     if set in the <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>m</b><b>a</b><b>c</b> column of  <b>N</b><b>A</b><b>T</b>  table  for  of
+                     type <b>d</b><b>n</b><b>a</b><b>t</b><b>_</b><b>a</b><b>n</b><b>d</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b>, otherwise the Ethernet address of the
+                     distributed  logical router port. Note that if the <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b>‐‐
+                     <b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>p</b> is not within  a  subnet  on  the  owning  logical
+                     router, then OVN will only create ARP resolution flows if
+                     the  <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>a</b><b>d</b><b>d</b><b>_</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b>  is set to <b>t</b><b>r</b><b>u</b><b>e</b>. Otherwise, no ARP
+                     resolution flows will be added.
+
+                     Corresponding to the above flow, a priority-150 flow with
+                     the match <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b> <u>P</u> &amp;&amp;&amp;&amp; <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b> <u>P</u> &amp;&amp;&amp;&amp; <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <u>A</u> has
+                     actions <b>d</b><b>r</b><b>o</b><b>p</b><b>;</b> to exclude packets that have  gone  through
+                     DNAT/unSNAT  stage but failed to convert the destination,
+                     to avoid loop.
+
+                     For IPv6 NAT entries, same flows are added, but using the
+                     register <b>x</b><b>x</b><b>r</b><b>e</b><b>g</b><b>0</b> and field <b>i</b><b>p</b><b>6</b> for the match.
+
+              •      If the router datapath runs a port with <b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b><b>-</b><b>t</b><b>y</b><b>p</b><b>e</b> set
+                     to <b>b</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b><b>d</b>, for each distributed NAT rule with  IP  <u>A</u>  in
+                     the  <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>i</b><b>p</b>  column  and  logical port <u>P</u> in the <b>l</b><b>o</b><b>g</b><b>i</b>‐‐
+                     <b>c</b><b>a</b><b>l</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b> column of <b>N</b><b>A</b><b>T</b> table, a priority-90 flow with the
+                     match <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b> <u>Q</u> &amp;&amp;&amp;&amp; <b>i</b><b>p</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b><b>=</b><b>=</b>  <u>A</u>  &amp;&amp;&amp;&amp;  <b>i</b><b>s</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>r</b><b>e</b><b>s</b><b>i</b>‐‐
+                     <b>d</b><b>e</b><b>n</b><b>t</b><b>(</b><u>P</u><b>)</b>,  where  <b>Q</b> is the distributed logical router port
+                     and action <b>g</b><b>e</b><b>t</b><b>_</b><b>a</b><b>r</b><b>p</b><b>(</b><b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b><b>,</b> <b>r</b><b>e</b><b>g</b><b>0</b><b>)</b><b>;</b>  <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>  for  IPv4  and
+                     <b>g</b><b>e</b><b>t</b><b>_</b><b>n</b><b>d</b><b>(</b><b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b><b>,</b> <b>x</b><b>x</b><b>r</b><b>e</b><b>g</b><b>0</b><b>)</b><b>;</b> <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b> for IPv6.
+
+              •      Traffic  with  IP  destination  an  address  owned by the
+                     router  should  be  dropped.  Such  traffic  is  normally
+                     dropped in ingress table <b>I</b><b>P</b> <b>I</b><b>n</b><b>p</b><b>u</b><b>t</b> except for IPs that are
+                     also shared with SNAT rules. However, if there was no un‐
+                     SNAT  operation  that  happened  successfully  until this
+                     point in the pipeline  and  the  destination  IP  of  the
+                     packet  is  still  a  router owned IP, the packets can be
+                     safely dropped.
+
+                     A priority-2 logical  flow  with  match  <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b>  <b>=</b>  <b>{</b><b>.</b><b>.</b><b>}</b>
+                     matches  on  traffic  destined  to  router owned IPv4 ad‐
+                     dresses which are also SNAT IPs.  This  flow  has  action
+                     <b>d</b><b>r</b><b>o</b><b>p</b><b>;</b>.
+
+                     A  priority-2  logical  flow  with  match  <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b> <b>{</b><b>.</b><b>.</b><b>}</b>
+                     matches on traffic destined  to  router  owned  IPv6  ad‐
+                     dresses  which  are  also  SNAT IPs. This flow has action
+                     <b>d</b><b>r</b><b>o</b><b>p</b><b>;</b>.
+
+                     A priority-0 logical that flow matches  all  packets  not
+                     already handled (match <b>1</b>) and drops them (action <b>d</b><b>r</b><b>o</b><b>p</b><b>;</b>).
+
+              •      Dynamic MAC bindings. These flows resolve MAC-to-IP bind‐
+                     ings  that  have  become known dynamically through ARP or
+                     neighbor discovery. (The ingress table <b>A</b><b>R</b><b>P</b>  <b>R</b><b>e</b><b>q</b><b>u</b><b>e</b><b>s</b><b>t</b>  will
+                     issue  an  ARP or neighbor solicitation request for cases
+                     where the binding is not yet known.)
+
+                     A priority-0 logical flow  with  match  <b>i</b><b>p</b><b>4</b>  has  actions
+                     <b>g</b><b>e</b><b>t</b><b>_</b><b>a</b><b>r</b><b>p</b><b>(</b><b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b><b>,</b> <b>r</b><b>e</b><b>g</b><b>0</b><b>)</b><b>;</b> <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>.
+
+                     A  priority-0  logical  flow  with  match <b>i</b><b>p</b><b>6</b> has actions
+                     <b>g</b><b>e</b><b>t</b><b>_</b><b>n</b><b>d</b><b>(</b><b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b><b>,</b> <b>x</b><b>x</b><b>r</b><b>e</b><b>g</b><b>0</b><b>)</b><b>;</b> <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>.
+
+              •      For a distributed gateway LRP with <b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b><b>-</b><b>t</b><b>y</b><b>p</b><b>e</b>  set  to
+                     <b>b</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b><b>d</b>,   a  priority-50  flow  will  match  <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b>  <b>=</b><b>=</b>
+                     <b>"</b><b>R</b><b>O</b><b>U</b><b>T</b><b>E</b><b>R</b><b>_</b><b>P</b><b>O</b><b>R</b><b>T</b><b>"</b> <b>a</b><b>n</b><b>d</b> <b>!</b><b>i</b><b>s</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>r</b><b>e</b><b>s</b><b>i</b><b>d</b><b>e</b><b>n</b><b>t</b> <b>(</b><b>"</b><b>c</b><b>r</b><b>-</b><b>R</b><b>O</b><b>U</b><b>T</b><b>E</b><b>R</b><b>_</b><b>P</b><b>O</b><b>R</b><b>T</b><b>"</b><b>)</b>
+                     has actions <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b> <u>E</u><b>;</b> <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>, where <u>E</u> is  the  ethernet
+                     address of the logical router port.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>1</u><u>8</u><u>:</u> <u>C</u><u>h</u><u>e</u><u>c</u><u>k</u> <u>p</u><u>a</u><u>c</u><u>k</u><u>e</u><u>t</u> <u>l</u><u>e</u><u>n</u><u>g</u><u>t</u><u>h</u>
+
+       For  distributed  logical  routers or gateway routers with gateway port
+       configured with <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>_</b><b>m</b><b>t</b><b>u</b> to a valid integer value, this  ta‐
+       ble  adds  a priority-50 logical flow with the match <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b> <u>G</u><u>W</u><b>_</b><u>P</u><u>O</u><u>R</u><u>T</u>
+       where <u>G</u><u>W</u><b>_</b><u>P</u><u>O</u><u>R</u><u>T</u> is  the  gateway  router  port  and  applies  the  action
+       <b>c</b><b>h</b><b>e</b><b>c</b><b>k</b><b>_</b><b>p</b><b>k</b><b>t</b><b>_</b><b>l</b><b>a</b><b>r</b><b>g</b><b>e</b><b>r</b> and advances the packet to the next table.
+
+       <b>R</b><b>E</b><b>G</b><b>B</b><b>I</b><b>T</b><b>_</b><b>P</b><b>K</b><b>T</b><b>_</b><b>L</b><b>A</b><b>R</b><b>G</b><b>E</b><b>R</b> <b>=</b> <b>c</b><b>h</b><b>e</b><b>c</b><b>k</b><b>_</b><b>p</b><b>k</b><b>t</b><b>_</b><b>l</b><b>a</b><b>r</b><b>g</b><b>e</b><b>r</b><b>(</b><u>L</u>); next;
+
+
+       where <u>L</u> is the packet length to check for. If the packet is larger than
+       <u>L</u>, it stores 1 in the register bit <b>R</b><b>E</b><b>G</b><b>B</b><b>I</b><b>T</b><b>_</b><b>P</b><b>K</b><b>T</b><b>_</b><b>L</b><b>A</b><b>R</b><b>G</b><b>E</b><b>R</b>. The value of <u>L</u> is
+       taken from <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>_</b><b>m</b><b>t</b><b>u</b> column of <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b> row.
+
+       If the port is also configured with <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>_</b><b>m</b><b>t</b><b>u</b><b>_</b><b>b</b><b>y</b><b>p</b><b>a</b><b>s</b><b>s</b> then an‐
+       other  flow  is added, with priority-55, to bypass the <b>c</b><b>h</b><b>e</b><b>c</b><b>k</b><b>_</b><b>p</b><b>k</b><b>t</b><b>_</b><b>l</b><b>a</b><b>r</b><b>g</b><b>e</b><b>r</b>
+       flow.
+
+       This table adds one priority-0 fallback flow that matches  all  packets
+       and advances to the next table.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>1</u><u>9</u><u>:</u> <u>H</u><u>a</u><u>n</u><u>d</u><u>l</u><u>e</u> <u>l</u><u>a</u><u>r</u><u>g</u><u>e</u><u>r</u> <u>p</u><u>a</u><u>c</u><u>k</u><u>e</u><u>t</u><u>s</u>
+
+       For  distributed  logical  routers or gateway routers with gateway port
+       configured with <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>_</b><b>m</b><b>t</b><b>u</b> to a valid integer value, this  ta‐
+       ble  adds  the  following  priority-150  logical  flow for each logical
+       router port with the match <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b> <u>L</u><u>R</u><u>P</u> &amp;&amp;&amp;&amp; <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b> <u>G</u><u>W</u><b>_</b><u>P</u><u>O</u><u>R</u><u>T</u> &amp;&amp;&amp;&amp;  <b>R</b><b>E</b><b>G</b>‐‐
+       <b>B</b><b>I</b><b>T</b><b>_</b><b>P</b><b>K</b><b>T</b><b>_</b><b>L</b><b>A</b><b>R</b><b>G</b><b>E</b><b>R</b>  &amp;&amp;&amp;&amp;  <b>!</b><b>R</b><b>E</b><b>G</b><b>B</b><b>I</b><b>T</b><b>_</b><b>E</b><b>G</b><b>R</b><b>E</b><b>S</b><b>S</b><b>_</b><b>L</b><b>O</b><b>O</b><b>P</b><b>B</b><b>A</b><b>C</b><b>K</b>,  where  <u>L</u><u>R</u><u>P</u> is the logical
+       router port and <u>G</u><u>W</u><b>_</b><u>P</u><u>O</u><u>R</u><u>T</u> is the gateway port and applies  the  following
+       action for ipv4 and ipv6 respectively:
+
+       <b>i</b><b>c</b><b>m</b><b>p</b><b>4</b> <b>{</b>
+           <b>i</b><b>c</b><b>m</b><b>p</b><b>4</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b> <b>=</b> <b>3</b><b>;</b> <b>/</b><b>*</b> <b>D</b><b>e</b><b>s</b><b>t</b><b>i</b><b>n</b><b>a</b><b>t</b><b>i</b><b>o</b><b>n</b> <b>U</b><b>n</b><b>r</b><b>e</b><b>a</b><b>c</b><b>h</b><b>a</b><b>b</b><b>l</b><b>e</b><b>.</b> <b>*</b><b>/</b>
+           <b>i</b><b>c</b><b>m</b><b>p</b><b>4</b><b>.</b><b>c</b><b>o</b><b>d</b><b>e</b> <b>=</b> <b>4</b><b>;</b>  <b>/</b><b>*</b> <b>F</b><b>r</b><b>a</b><b>g</b> <b>N</b><b>e</b><b>e</b><b>d</b><b>e</b><b>d</b> <b>a</b><b>n</b><b>d</b> <b>D</b><b>F</b> <b>w</b><b>a</b><b>s</b> <b>S</b><b>e</b><b>t</b><b>.</b> <b>*</b><b>/</b>
+           <b>i</b><b>c</b><b>m</b><b>p</b><b>4</b><b>.</b><b>f</b><b>r</b><b>a</b><b>g</b><b>_</b><b>m</b><b>t</b><b>u</b> <b>=</b> <u>M</u>;
+           <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b> <u>E</u>;
+           <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b> <b>i</b><b>p</b><b>4</b><b>.</b><b>s</b><b>r</b><b>c</b><b>;</b>
+           <b>i</b><b>p</b><b>4</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <u>I</u>;
+           <b>i</b><b>p</b><b>.</b><b>t</b><b>t</b><b>l</b> <b>=</b> <b>2</b><b>5</b><b>5</b><b>;</b>
+           <b>R</b><b>E</b><b>G</b><b>B</b><b>I</b><b>T</b><b>_</b><b>E</b><b>G</b><b>R</b><b>E</b><b>S</b><b>S</b><b>_</b><b>L</b><b>O</b><b>O</b><b>P</b><b>B</b><b>A</b><b>C</b><b>K</b> <b>=</b> <b>1</b><b>;</b>
+           <b>R</b><b>E</b><b>G</b><b>B</b><b>I</b><b>T</b><b>_</b><b>P</b><b>K</b><b>T</b><b>_</b><b>L</b><b>A</b><b>R</b><b>G</b><b>E</b><b>R</b> <b>=</b> <b>0</b><b>;</b>
+           <b>n</b><b>e</b><b>x</b><b>t</b><b>(</b><b>p</b><b>i</b><b>p</b><b>e</b><b>l</b><b>i</b><b>n</b><b>e</b><b>=</b><b>i</b><b>n</b><b>g</b><b>r</b><b>e</b><b>s</b><b>s</b><b>,</b> <b>t</b><b>a</b><b>b</b><b>l</b><b>e</b><b>=</b><b>0</b><b>)</b><b>;</b>
+       <b>}</b><b>;</b>
+       <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b> <b>{</b>
+           <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b> <b>=</b> <b>2</b><b>;</b>
+           <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b><b>.</b><b>c</b><b>o</b><b>d</b><b>e</b> <b>=</b> <b>0</b><b>;</b>
+           <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b><b>.</b><b>f</b><b>r</b><b>a</b><b>g</b><b>_</b><b>m</b><b>t</b><b>u</b> <b>=</b> <u>M</u>;
+           <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b> <u>E</u>;
+           <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b> <b>i</b><b>p</b><b>6</b><b>.</b><b>s</b><b>r</b><b>c</b><b>;</b>
+           <b>i</b><b>p</b><b>6</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <u>I</u>;
+           <b>i</b><b>p</b><b>.</b><b>t</b><b>t</b><b>l</b> <b>=</b> <b>2</b><b>5</b><b>5</b><b>;</b>
+           <b>R</b><b>E</b><b>G</b><b>B</b><b>I</b><b>T</b><b>_</b><b>E</b><b>G</b><b>R</b><b>E</b><b>S</b><b>S</b><b>_</b><b>L</b><b>O</b><b>O</b><b>P</b><b>B</b><b>A</b><b>C</b><b>K</b> <b>=</b> <b>1</b><b>;</b>
+           <b>R</b><b>E</b><b>G</b><b>B</b><b>I</b><b>T</b><b>_</b><b>P</b><b>K</b><b>T</b><b>_</b><b>L</b><b>A</b><b>R</b><b>G</b><b>E</b><b>R</b> <b>=</b> <b>0</b><b>;</b>
+           <b>n</b><b>e</b><b>x</b><b>t</b><b>(</b><b>p</b><b>i</b><b>p</b><b>e</b><b>l</b><b>i</b><b>n</b><b>e</b><b>=</b><b>i</b><b>n</b><b>g</b><b>r</b><b>e</b><b>s</b><b>s</b><b>,</b> <b>t</b><b>a</b><b>b</b><b>l</b><b>e</b><b>=</b><b>0</b><b>)</b><b>;</b>
+       <b>}</b><b>;</b>
+
+
+              •      Where  <u>M</u>  is the (fragment MTU - 58) whose value is taken
+                     from <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>_</b><b>m</b><b>t</b><b>u</b>  column  of  <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b>
+                     row.
+
+              •      <u>E</u> is the Ethernet address of the logical router port.
+
+              •      <u>I</u> is the IPv4/IPv6 address of the logical router port.
+
+       This  table  adds one priority-0 fallback flow that matches all packets
+       and advances to the next table.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>2</u><u>0</u><u>:</u> <u>G</u><u>a</u><u>t</u><u>e</u><u>w</u><u>a</u><u>y</u> <u>R</u><u>e</u><u>d</u><u>i</u><u>r</u><u>e</u><u>c</u><u>t</u>
+
+       For distributed logical routers where one or more of the logical router
+       ports specifies a gateway chassis, this table redirects certain packets
+       to the distributed gateway port instances  on  the  gateway  chassises.
+       This table has the following flows:
+
+              •      For each NAT rule in the OVN Northbound database that can
+                     be  handled in a distributed manner, a priority-100 logi‐
+                     cal flow with match <b>i</b><b>p</b><b>4</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b><b>=</b> <u>B</u>  &amp;&amp;&amp;&amp;  <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b>  <b>=</b><b>=</b>  <u>G</u><u>W</u>  &amp;&amp;
+                     is_chassis_resident(<u>P</u>), where <u>G</u><u>W</u> is the distributed gate‐
+                     way port specified in the NAT rule and <u>P</u> is the NAT logi‐
+                     cal port. IP traffic matching the above rule will be man‐
+                     aged  locally setting <b>r</b><b>e</b><b>g</b><b>1</b> to <u>C</u> and <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b> to <u>D</u>, where <u>C</u>
+                     is NAT external ip and <u>D</u> is NAT external mac.
+
+              •      For each <b>d</b><b>n</b><b>a</b><b>t</b><b>_</b><b>a</b><b>n</b><b>d</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b> NAT rule with  <b>s</b><b>t</b><b>a</b><b>t</b><b>e</b><b>l</b><b>e</b><b>s</b><b>s</b><b>=</b><b>t</b><b>r</b><b>u</b><b>e</b>  and
+                     <b>a</b><b>l</b><b>l</b><b>o</b><b>w</b><b>e</b><b>d</b><b>_</b><b>e</b><b>x</b><b>t</b><b>_</b><b>i</b><b>p</b><b>s</b>  configured,  a  priority-75 flow is pro‐
+                     grammed with match <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <u>B</u> and action <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b>  <u>C</u><u>R</u><b>;</b>
+                     <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>  where  <u>B</u> is the NAT rule external IP and <u>C</u><u>R</u> is the
+                     <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b> port representing  the  instance  of  the
+                     logical  router  distributed  gateway port on the gateway
+                     chassis. Moreover a priority-70 flow is  programmed  with
+                     same  match  and action <b>d</b><b>r</b><b>o</b><b>p</b><b>;</b>. For each <b>d</b><b>n</b><b>a</b><b>t</b><b>_</b><b>a</b><b>n</b><b>d</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b> NAT
+                     rule with <b>s</b><b>t</b><b>a</b><b>t</b><b>e</b><b>l</b><b>e</b><b>s</b><b>s</b><b>=</b><b>t</b><b>r</b><b>u</b><b>e</b> and <b>e</b><b>x</b><b>e</b><b>m</b><b>p</b><b>t</b><b>e</b><b>d</b><b>_</b><b>e</b><b>x</b><b>t</b><b>_</b><b>i</b><b>p</b><b>s</b> configured,
+                     a priority-75 flow is programmed with match <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b>  <u>B</u>
+                     and  action  <b>d</b><b>r</b><b>o</b><b>p</b><b>;</b> where <u>B</u> is the NAT rule external IP. A
+                     similar flow is added for IPv6 traffic.
+
+              •      For each NAT rule in the OVN Northbound database that can
+                     be handled in a distributed manner, a priority-80 logical
+                     flow with drop action if the NAT logical port is  a  vir‐
+                     tual port not claimed by any chassis yet.
+
+              •      A  priority-50  logical flow with match <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b> <u>G</u><u>W</u> has
+                     actions <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b> <u>C</u><u>R</u><b>;</b> <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>,  where  <u>G</u><u>W</u>  is  the  logical
+                     router  distributed  gateway  port  and  <u>C</u><u>R</u>  is the <b>c</b><b>h</b><b>a</b><b>s</b>‐‐
+                     <b>s</b><b>i</b><b>s</b><b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b> port representing the instance of the logical
+                     router distributed gateway port on the gateway chassis.
+
+              •      A priority-0 logical flow with match <b>1</b> has actions <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>.
+
+     <u>I</u><u>n</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>2</u><u>1</u><u>:</u> <u>A</u><u>R</u><u>P</u> <u>R</u><u>e</u><u>q</u><u>u</u><u>e</u><u>s</u><u>t</u>
+
+       In the common case where the Ethernet destination  has  been  resolved,
+       this  table outputs the packet. Otherwise, it composes and sends an ARP
+       or IPv6 Neighbor Solicitation request. It holds the following flows:
+
+              •      Unknown MAC address. A priority-100 flow for IPv4 packets
+                     with match <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b> has the following
+                     actions:
+
+                     <b>a</b><b>r</b><b>p</b> <b>{</b>
+                         <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b> <b>f</b><b>f</b><b>:</b><b>f</b><b>f</b><b>:</b><b>f</b><b>f</b><b>:</b><b>f</b><b>f</b><b>:</b><b>f</b><b>f</b><b>:</b><b>f</b><b>f</b><b>;</b>
+                         <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>p</b><b>a</b> <b>=</b> <b>r</b><b>e</b><b>g</b><b>1</b><b>;</b>
+                         <b>a</b><b>r</b><b>p</b><b>.</b><b>t</b><b>p</b><b>a</b> <b>=</b> <b>r</b><b>e</b><b>g</b><b>0</b><b>;</b>
+                         <b>a</b><b>r</b><b>p</b><b>.</b><b>o</b><b>p</b> <b>=</b> <b>1</b><b>;</b>  <b>/</b><b>*</b> <b>A</b><b>R</b><b>P</b> <b>r</b><b>e</b><b>q</b><b>u</b><b>e</b><b>s</b><b>t</b><b>.</b> <b>*</b><b>/</b>
+                         <b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b><b>;</b>
+                     <b>}</b><b>;</b>
+
+
+                     Unknown MAC address. For each IPv6 static  route  associ‐
+                     ated  with  the  router  with the nexthop IP: <u>G</u>, a prior‐
+                     ity-200 flow for  IPv6  packets  with  match  <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b>  <b>=</b><b>=</b>
+                     <b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b>  &amp;&amp;&amp;&amp;  <b>x</b><b>x</b><b>r</b><b>e</b><b>g</b><b>0</b> <b>=</b><b>=</b> <u>G</u> with the following ac‐
+                     tions is added:
+
+                     <b>n</b><b>d</b><b>_</b><b>n</b><b>s</b> <b>{</b>
+                         <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b> <u>E</u>;
+                         <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b> <u>I</u>
+                         <b>n</b><b>d</b><b>.</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> <b>=</b> <u>G</u>;
+                         <b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b><b>;</b>
+                     <b>}</b><b>;</b>
+
+
+                     Where <u>E</u> is the multicast mac derived from the Gateway IP,
+                     <u>I</u> is the solicited-node multicast  address  corresponding
+                     to the target address <u>G</u>.
+
+                     Unknown MAC address. A priority-100 flow for IPv6 packets
+                     with match <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b> has the following
+                     actions:
+
+                     <b>n</b><b>d</b><b>_</b><b>n</b><b>s</b> <b>{</b>
+                         <b>n</b><b>d</b><b>.</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> <b>=</b> <b>x</b><b>x</b><b>r</b><b>e</b><b>g</b><b>0</b><b>;</b>
+                         <b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b><b>;</b>
+                     <b>}</b><b>;</b>
+
+
+                     (Ingress  table  <b>I</b><b>P</b>  <b>R</b><b>o</b><b>u</b><b>t</b><b>i</b><b>n</b><b>g</b> initialized <b>r</b><b>e</b><b>g</b><b>1</b> with the IP
+                     address owned by <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> and <b>(</b><b>x</b><b>x</b><b>)</b><b>r</b><b>e</b><b>g</b><b>0</b> with  the  next-hop
+                     IP address)
+
+                     The  IP  packet  that triggers the ARP/IPv6 NS request is
+                     dropped.
+
+              •      Known MAC address. A priority-0 flow with match <b>1</b> has ac‐
+                     tions <b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b><b>;</b>.
+
+     <u>E</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>0</u><u>:</u> <u>C</u><u>h</u><u>e</u><u>c</u><u>k</u> <u>D</u><u>N</u><u>A</u><u>T</u> <u>l</u><u>o</u><u>c</u><u>a</u><u>l</u>
+
+       This table checks if the packet  needs  to  be  DNATed  in  the  router
+       ingress  table  <b>l</b><b>r</b><b>_</b><b>i</b><b>n</b><b>_</b><b>d</b><b>n</b><b>a</b><b>t</b>  after  it  is SNATed and looped back to the
+       ingress pipeline. This check is done only for routers  configured  with
+       distributed  gateway  ports and NAT entries. This check is done so that
+       SNAT and DNAT is done in different zones instead of a common zone.
+
+              •      A priority-0 logical flow with match <b>1</b> has  actions  <b>R</b><b>E</b><b>G</b>‐‐
+                     <b>B</b><b>I</b><b>T</b><b>_</b><b>D</b><b>S</b><b>T</b><b>_</b><b>N</b><b>A</b><b>T</b><b>_</b><b>I</b><b>P</b><b>_</b><b>L</b><b>O</b><b>C</b><b>A</b><b>L</b> <b>=</b> <b>0</b><b>;</b> <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>.
+
+     <u>E</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>1</u><u>:</u> <u>U</u><u>N</u><u>D</u><u>N</u><u>A</u><u>T</u>
+
+       This  is  for  already  established connections’ reverse traffic. i.e.,
+       DNAT has already been done in ingress pipeline and now the  packet  has
+       entered  the  egress  pipeline as part of a reply. This traffic is unD‐
+       NATed here.
+
+              •      A priority-0 logical flow with match <b>1</b> has actions <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>.
+
+     <u>E</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>1</u><u>:</u> <u>U</u><u>N</u><u>D</u><u>N</u><u>A</u><u>T</u> <u>o</u><u>n</u> <u>G</u><u>a</u><u>t</u><u>e</u><u>w</u><u>a</u><u>y</u> <u>R</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u><u>s</u>
+
+              •      For IPv6 Neighbor Discovery or Router Solicitation/Adver‐
+                     tisement traffic, a priority-100 flow with action <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>.
+
+              •      For all IP packets, a priority-50  flow  with  an  action
+                     <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>l</b><b>o</b><b>o</b><b>p</b><b>b</b><b>a</b><b>c</b><b>k</b> <b>=</b> <b>1</b><b>;</b> <b>c</b><b>t</b><b>_</b><b>d</b><b>n</b><b>a</b><b>t</b><b>;</b>.
+
+     <u>E</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>1</u><u>:</u> <u>U</u><u>N</u><u>D</u><u>N</u><u>A</u><u>T</u> <u>o</u><u>n</u> <u>D</u><u>i</u><u>s</u><u>t</u><u>r</u><u>i</u><u>b</u><u>u</u><u>t</u><u>e</u><u>d</u> <u>R</u><u>o</u><u>u</u><u>t</u><u>e</u><u>r</u><u>s</u>
+
+              •      For  all the configured load balancing rules for a router
+                     with gateway port in  <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b>  database  that  in‐
+                     cludes  an  IPv4  address <b>V</b><b>I</b><b>P</b>, for every backend IPv4 ad‐
+                     dress <u>B</u> defined for the <b>V</b><b>I</b><b>P</b> a priority-120 flow  is  pro‐
+                     grammed  on gateway chassis that matches <b>i</b><b>p</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b><b>4</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b><b>=</b>
+                     <u>B</u> &amp;&amp;&amp;&amp; <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b> <u>G</u><u>W</u>, where <u>G</u><u>W</u> is the logical router  gate‐
+                     way port with an action <b>c</b><b>t</b><b>_</b><b>d</b><b>n</b><b>a</b><b>t</b><b>;</b>. If the backend IPv4 ad‐
+                     dress  <u>B</u> is also configured with L4 port <u>P</u><u>O</u><u>R</u><u>T</u> of protocol
+                     <u>P</u>, then the match also  includes  <b>P</b><b>.</b><b>s</b><b>r</b><b>c</b>  ==  <u>P</u><u>O</u><u>R</u><u>T</u>.  These
+                     flows are not added for load balancers with IPv6 <u>V</u><u>I</u><u>P</u><u>s</u>.
+
+                     If  the  router is configured to force SNAT any load-bal‐
+                     anced  packets,  above  action  will   be   replaced   by
+                     <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>f</b><b>o</b><b>r</b><b>c</b><b>e</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>_</b><b>f</b><b>o</b><b>r</b><b>_</b><b>l</b><b>b</b> <b>=</b> <b>1</b><b>;</b> <b>c</b><b>t</b><b>_</b><b>d</b><b>n</b><b>a</b><b>t</b><b>;</b>.
+
+              •      For  each  configuration  in  the OVN Northbound database
+                     that asks to change  the  destination  IP  address  of  a
+                     packet  from an IP address of <u>A</u> to <u>B</u>, a priority-100 flow
+                     matches <b>i</b><b>p</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b><b>4</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b><b>=</b> <u>B</u> &amp;&amp;&amp;&amp; <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b> <u>G</u><u>W</u>, where <u>G</u><u>W</u>  is
+                     the logical router gateway port, with an action <b>c</b><b>t</b><b>_</b><b>d</b><b>n</b><b>a</b><b>t</b><b>;</b>.
+                     If  the  NAT rule is of type dnat_and_snat and has <b>s</b><b>t</b><b>a</b><b>t</b><b>e</b>‐‐
+                     <b>l</b><b>e</b><b>s</b><b>s</b><b>=</b><b>t</b><b>r</b><b>u</b><b>e</b> in the options, then the action would be <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>.
+
+                     If the NAT rule cannot be handled in a  distributed  man‐
+                     ner,  then the priority-100 flow above is only programmed
+                     on the gateway chassis with the action <b>c</b><b>t</b><b>_</b><b>d</b><b>n</b><b>a</b><b>t</b>.
+
+                     If the NAT rule can be handled in a  distributed  manner,
+                     then  there  is an additional action <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <u>E</u><u>A</u><b>;</b>, where
+                     <u>E</u><u>A</u> is the ethernet address associated with the IP address
+                     <u>A</u> in the NAT rule. This allows upstream MAC  learning  to
+                     point to the correct chassis.
+
+     <u>E</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>2</u><u>:</u> <u>P</u><u>o</u><u>s</u><u>t</u> <u>U</u><u>N</u><u>D</u><u>N</u><u>A</u><u>T</u>
+
+              •      A  priority-50 logical flow is added that commits any un‐
+                     tracked flows from the previous table  <b>l</b><b>r</b><b>_</b><b>o</b><b>u</b><b>t</b><b>_</b><b>u</b><b>n</b><b>d</b><b>n</b><b>a</b><b>t</b>  for
+                     Gateway  routers.  This flow matches on <b>c</b><b>t</b><b>.</b><b>n</b><b>e</b><b>w</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b> with
+                     action <b>c</b><b>t</b><b>_</b><b>c</b><b>o</b><b>m</b><b>m</b><b>i</b><b>t</b> <b>{</b> <b>}</b> <b>;</b> <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b> .
+
+              •      A priority-0 logical flow with match <b>1</b> has actions <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>.
+
+     <u>E</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>3</u><u>:</u> <u>S</u><u>N</u><u>A</u><u>T</u>
+
+       Packets that are configured to be SNATed get their  source  IP  address
+       changed based on the configuration in the OVN Northbound database.
+
+              •      A  priority-120 flow to advance the IPv6 Neighbor solici‐
+                     tation packet to next table to skip  SNAT.  In  the  case
+                     where  ovn-controller  injects an IPv6 Neighbor Solicita‐
+                     tion packet (for <b>n</b><b>d</b><b>_</b><b>n</b><b>s</b> action) we don’t want  the  packet
+                     to go through conntrack.
+
+       Egress Table 3: SNAT on Gateway Routers
+
+              •      If  the Gateway router in the OVN Northbound database has
+                     been configured to force SNAT a  packet  (that  has  been
+                     previously  DNATted)  to  <u>B</u>,  a priority-100 flow matches
+                     <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>f</b><b>o</b><b>r</b><b>c</b><b>e</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>_</b><b>f</b><b>o</b><b>r</b><b>_</b><b>d</b><b>n</b><b>a</b><b>t</b> <b>=</b><b>=</b>  <b>1</b>  &amp;&amp;&amp;&amp;  <b>i</b><b>p</b>  with  an  action
+                     <b>c</b><b>t</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>(</b><u>B</u><b>)</b><b>;</b>.
+
+              •      If  a  load balancer configured to skip snat has been ap‐
+                     plied to the Gateway router pipeline, a priority-120 flow
+                     matches <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>s</b><b>k</b><b>i</b><b>p</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>_</b><b>f</b><b>o</b><b>r</b><b>_</b><b>l</b><b>b</b> <b>=</b><b>=</b> <b>1</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b> with an  action
+                     <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>.
+
+              •      If  the Gateway router in the OVN Northbound database has
+                     been configured to force SNAT a  packet  (that  has  been
+                     previously   load-balanced)  using  router  IP  (i.e  <b>o</b><b>p</b>‐‐
+                     <b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>:lb_force_snat_ip=router_ip), then for each  logical
+                     router  port  <u>P</u>  attached to the Gateway router, a prior‐
+                     ity-110 flow matches <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>f</b><b>o</b><b>r</b><b>c</b><b>e</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>_</b><b>f</b><b>o</b><b>r</b><b>_</b><b>l</b><b>b</b> <b>=</b><b>=</b> <b>1</b> &amp;&amp;&amp;&amp; <b>o</b><b>u</b><b>t</b>‐‐
+                     <b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b> <u>P</u>
+                      with an action <b>c</b><b>t</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>(</b><u>R</u><b>)</b><b>;</b> where <u>R</u> is the IP  configured
+                     on  the  router  port.  If  <b>R</b> is an IPv4 address then the
+                     match will also include <b>i</b><b>p</b><b>4</b> and if it is an IPv6 address,
+                     then the match will also include <b>i</b><b>p</b><b>6</b>.
+
+                     If the logical router port <u>P</u> is configured with  multiple
+                     IPv4 and multiple IPv6 addresses, only the first IPv4 and
+                     first IPv6 address is considered.
+
+              •      If  the Gateway router in the OVN Northbound database has
+                     been configured to force SNAT a  packet  (that  has  been
+                     previously  load-balanced)  to  <u>B</u>,  a  priority-100  flow
+                     matches <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>f</b><b>o</b><b>r</b><b>c</b><b>e</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>_</b><b>f</b><b>o</b><b>r</b><b>_</b><b>l</b><b>b</b> <b>=</b><b>=</b> <b>1</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b> with an action
+                     <b>c</b><b>t</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>(</b><u>B</u><b>)</b><b>;</b>.
+
+              •      For each configuration in the  OVN  Northbound  database,
+                     that  asks  to  change  the source IP address of a packet
+                     from an IP address of <u>A</u> or to change the  source  IP  ad‐
+                     dress  of a packet that belongs to network <u>A</u> to <u>B</u>, a flow
+                     matches <b>i</b><b>p</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b><b>4</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b><b>=</b> <u>A</u> &amp;&amp;&amp;&amp; <b>(</b><b>!</b><b>c</b><b>t</b><b>.</b><b>t</b><b>r</b><b>k</b> <b>|</b><b>|</b>  <b>!</b><b>c</b><b>t</b><b>.</b><b>r</b><b>p</b><b>l</b><b>)</b>  with
+                     an action <b>c</b><b>t</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>(</b><u>B</u><b>)</b><b>;</b>. The priority of the flow is calcu‐
+                     lated  based on the mask of <u>A</u>, with matches having larger
+                     masks getting higher priorities. If the NAT  rule  is  of
+                     type dnat_and_snat and has <b>s</b><b>t</b><b>a</b><b>t</b><b>e</b><b>l</b><b>e</b><b>s</b><b>s</b><b>=</b><b>t</b><b>r</b><b>u</b><b>e</b> in the options,
+                     then the action would be <b>i</b><b>p</b><b>4</b><b>/</b><b>6</b><b>.</b><b>s</b><b>r</b><b>c</b><b>=</b> <b>(</b><u>B</u><b>)</b>.
+
+              •      If  the  NAT  rule  has  <b>a</b><b>l</b><b>l</b><b>o</b><b>w</b><b>e</b><b>d</b><b>_</b><b>e</b><b>x</b><b>t</b><b>_</b><b>i</b><b>p</b><b>s</b> configured, then
+                     there is an additional match <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <u>a</u><u>l</u><u>l</u><u>o</u><u>w</u><u>e</u><u>d</u><b>_</b><u>e</u><u>x</u><u>t</u><b>_</b><u>i</u><u>p</u><u>s</u> .
+                     Similarly, for  IPV6,  match  would  be  <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b>  <b>=</b><b>=</b>  <u>a</u><u>l</u><u>�</u>��
+                     <u>l</u><u>o</u><u>w</u><u>e</u><u>d</u><b>_</b><u>e</u><u>x</u><u>t</u><b>_</b><u>i</u><u>p</u><u>s</u>.
+
+              •      If  the  NAT rule has <b>e</b><b>x</b><b>e</b><b>m</b><b>p</b><b>t</b><b>e</b><b>d</b><b>_</b><b>e</b><b>x</b><b>t</b><b>_</b><b>i</b><b>p</b><b>s</b> set, then there is
+                     an additional flow configured at the priority + 1 of cor‐
+                     responding NAT rule. The flow matches if  destination  ip
+                     is an <b>e</b><b>x</b><b>e</b><b>m</b><b>p</b><b>t</b><b>e</b><b>d</b><b>_</b><b>e</b><b>x</b><b>t</b><b>_</b><b>i</b><b>p</b> and the action is <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b> . This flow
+                     is  used  to bypass the ct_snat action for a packet which
+                     is destinted to <b>e</b><b>x</b><b>e</b><b>m</b><b>p</b><b>t</b><b>e</b><b>d</b><b>_</b><b>e</b><b>x</b><b>t</b><b>_</b><b>i</b><b>p</b><b>s</b>.
+
+              •      A priority-0 logical flow with match <b>1</b> has actions <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>.
+
+       Egress Table 3: SNAT on Distributed Routers
+
+              •      For each configuration in the  OVN  Northbound  database,
+                     that  asks  to  change  the source IP address of a packet
+                     from an IP address of <u>A</u> or to change the  source  IP  ad‐
+                     dress  of  a  packet  that belongs to network <u>A</u> to <u>B</u>, two
+                     flows are added. The priority <u>P</u> of these flows are calcu‐
+                     lated based on the mask of <u>A</u>, with matches having  larger
+                     masks getting higher priorities.
+
+                     If  the  NAT rule cannot be handled in a distributed man‐
+                     ner, then the below flows  are  only  programmed  on  the
+                     gateway  chassis increasing flow priority by 128 in order
+                     to be run first.
+
+                     •      The first flow is added with the calculated prior‐
+                            ity <u>P</u> and match <b>i</b><b>p</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b><b>4</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b><b>=</b> <u>A</u> &amp;&amp;&amp;&amp;  <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b>  <b>=</b><b>=</b>
+                            <u>G</u><u>W</u>,  where  <u>G</u><u>W</u> is the logical router gateway port,
+                            with an action <b>c</b><b>t</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>(</b><u>B</u><b>)</b><b>;</b> to SNATed in the common
+                            zone. If the NAT rule is of type dnat_and_snat and
+                            has <b>s</b><b>t</b><b>a</b><b>t</b><b>e</b><b>l</b><b>e</b><b>s</b><b>s</b><b>=</b><b>t</b><b>r</b><b>u</b><b>e</b> in the options, then the action
+                            would be <b>i</b><b>p</b><b>4</b><b>/</b><b>6</b><b>.</b><b>s</b><b>r</b><b>c</b><b>=</b><b>(</b><u>B</u><b>)</b>.
+
+                     If the NAT rule can be handled in a  distributed  manner,
+                     then  there  is an additional action (for both the flows)
+                     <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b> <u>E</u><u>A</u><b>;</b>, where <u>E</u><u>A</u> is the ethernet  address  associ‐
+                     ated  with  the IP address <u>A</u> in the NAT rule. This allows
+                     upstream MAC learning to point to the correct chassis.
+
+                     If the NAT  rule  has  <b>a</b><b>l</b><b>l</b><b>o</b><b>w</b><b>e</b><b>d</b><b>_</b><b>e</b><b>x</b><b>t</b><b>_</b><b>i</b><b>p</b><b>s</b>  configured,  then
+                     there is an additional match <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <u>a</u><u>l</u><u>l</u><u>o</u><u>w</u><u>e</u><u>d</u><b>_</b><u>e</u><u>x</u><u>t</u><b>_</b><u>i</u><u>p</u><u>s</u> .
+                     Similarly,  for  IPV6,  match  would  be  <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b>  <b>=</b><b>=</b> <u>a</u><u>l</u><u>�</u>��
+                     <u>l</u><u>o</u><u>w</u><u>e</u><u>d</u><b>_</b><u>e</u><u>x</u><u>t</u><b>_</b><u>i</u><u>p</u><u>s</u>.
+
+                     If the NAT rule has <b>e</b><b>x</b><b>e</b><b>m</b><b>p</b><b>t</b><b>e</b><b>d</b><b>_</b><b>e</b><b>x</b><b>t</b><b>_</b><b>i</b><b>p</b><b>s</b> set, then  there  is
+                     an  additional  flow configured at the priority <u>P</u> <b>+</b> <b>2</b>  of
+                     corresponding NAT rule. The flow matches  if  destination
+                     ip  is  an <b>e</b><b>x</b><b>e</b><b>m</b><b>p</b><b>t</b><b>e</b><b>d</b><b>_</b><b>e</b><b>x</b><b>t</b><b>_</b><b>i</b><b>p</b> and the action is <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b> . This
+                     flow is used to bypass the  ct_snat  action  for  a  flow
+                     which is destinted to <b>e</b><b>x</b><b>e</b><b>m</b><b>p</b><b>t</b><b>e</b><b>d</b><b>_</b><b>e</b><b>x</b><b>t</b><b>_</b><b>i</b><b>p</b><b>s</b>.
+
+              •      A priority-0 logical flow with match <b>1</b> has actions <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>.
+
+     <u>E</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>4</u><u>:</u> <u>P</u><u>o</u><u>s</u><u>t</u> <u>S</u><u>N</u><u>A</u><u>T</u>
+
+       Packets reaching this table are processed according to the flows below:
+
+              •      A  priority-0  logical  flow that matches all packets not
+                     already handled (match <b>1</b>) and action <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>.
+
+     <u>E</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>5</u><u>:</u> <u>E</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>L</u><u>o</u><u>o</u><u>p</u><u>b</u><u>a</u><u>c</u><u>k</u>
+
+       For distributed logical routers where one of the logical  router  ports
+       specifies a gateway chassis.
+
+       While  UNDNAT  and SNAT processing have already occurred by this point,
+       this traffic needs to be forced through egress loopback  on  this  dis‐
+       tributed gateway port instance, in order for UNSNAT and DNAT processing
+       to  be applied, and also for IP routing and ARP resolution after all of
+       the NAT processing, so that the packet can be forwarded to the destina‐
+       tion.
+
+       This table has the following flows:
+
+              •      For each NAT rule in the OVN  Northbound  database  on  a
+                     distributed  router,  a  priority-100  logical  flow with
+                     match <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <u>E</u> &amp;&amp;&amp;&amp; <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b> <u>G</u><u>W</u>  &amp;&amp;&amp;&amp;  <b>i</b><b>s</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>r</b><b>e</b><b>s</b><b>i</b>‐‐
+                     <b>d</b><b>e</b><b>n</b><b>t</b><b>(</b><u>P</u><b>)</b>,  where <u>E</u> is the external IP address specified in
+                     the NAT rule, <u>G</u><u>W</u> is the distributed gateway  port  corre‐
+                     sponding  to  the  NAT  rule (specified or inferred). For
+                     dnat_and_snat NAT rule, <u>P</u> is the logical  port  specified
+                     in  the  NAT rule. If <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b> column of <b>N</b><b>A</b><b>T</b> table is
+                     NOT set, then <u>P</u> is the <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b> <b>p</b><b>o</b><b>r</b><b>t</b>  of  <u>G</u><u>W</u>  with
+                     the following actions:
+
+                     <b>c</b><b>l</b><b>o</b><b>n</b><b>e</b> <b>{</b>
+                         <b>c</b><b>t</b><b>_</b><b>c</b><b>l</b><b>e</b><b>a</b><b>r</b><b>;</b>
+                         <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b> <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b><b>;</b>
+                         <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b> <b>"</b><b>"</b><b>;</b>
+                         <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b> <b>=</b> <b>0</b><b>;</b>
+                         <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>l</b><b>o</b><b>o</b><b>p</b><b>b</b><b>a</b><b>c</b><b>k</b> <b>=</b> <b>1</b><b>;</b>
+                         <b>r</b><b>e</b><b>g</b><b>0</b> <b>=</b> <b>0</b><b>;</b>
+                         <b>r</b><b>e</b><b>g</b><b>1</b> <b>=</b> <b>0</b><b>;</b>
+                         <b>.</b><b>.</b><b>.</b>
+                         <b>r</b><b>e</b><b>g</b><b>9</b> <b>=</b> <b>0</b><b>;</b>
+                         <b>R</b><b>E</b><b>G</b><b>B</b><b>I</b><b>T</b><b>_</b><b>E</b><b>G</b><b>R</b><b>E</b><b>S</b><b>S</b><b>_</b><b>L</b><b>O</b><b>O</b><b>P</b><b>B</b><b>A</b><b>C</b><b>K</b> <b>=</b> <b>1</b><b>;</b>
+                         <b>n</b><b>e</b><b>x</b><b>t</b><b>(</b><b>p</b><b>i</b><b>p</b><b>e</b><b>l</b><b>i</b><b>n</b><b>e</b><b>=</b><b>i</b><b>n</b><b>g</b><b>r</b><b>e</b><b>s</b><b>s</b><b>,</b> <b>t</b><b>a</b><b>b</b><b>l</b><b>e</b><b>=</b><b>0</b><b>)</b><b>;</b>
+                     <b>}</b><b>;</b>
+
+
+                     <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>l</b><b>o</b><b>o</b><b>p</b><b>b</b><b>a</b><b>c</b><b>k</b>  is set since in_port is unchanged and the
+                     packet may return back to that port after NAT processing.
+                     <b>R</b><b>E</b><b>G</b><b>B</b><b>I</b><b>T</b><b>_</b><b>E</b><b>G</b><b>R</b><b>E</b><b>S</b><b>S</b><b>_</b><b>L</b><b>O</b><b>O</b><b>P</b><b>B</b><b>A</b><b>C</b><b>K</b> is set  to  indicate  that  egress
+                     loopback has occurred, in order to skip the source IP ad‐
+                     dress check against the router address.
+
+              •      A priority-0 logical flow with match <b>1</b> has actions <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>.
+
+     <u>E</u><u>g</u><u>r</u><u>e</u><u>s</u><u>s</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>6</u><u>:</u> <u>D</u><u>e</u><u>l</u><u>i</u><u>v</u><u>e</u><u>r</u><u>y</u>
+
+       Packets that reach this table are ready for delivery. It contains:
+
+              •      Priority-110  logical flows that match IP multicast pack‐
+                     ets on each enabled logical router port  and  modify  the
+                     Ethernet  source  address  of the packets to the Ethernet
+                     address of the port and then execute action <b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b><b>;</b>.
+
+              •      Priority-100 logical flows that match packets on each en‐
+                     abled logical router port, with action <b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b><b>;</b>.
+
+              •      A priority-0 logical flow that matches  all  packets  not
+                     already handled (match <b>1</b>) and drops them (action <b>d</b><b>r</b><b>o</b><b>p</b><b>;</b>).
+
+<b>D</b><b>R</b><b>O</b><b>P</b> <b>S</b><b>A</b><b>M</b><b>P</b><b>L</b><b>I</b><b>N</b><b>G</b>
+       As  described  in  the previous section, there are several places where
+       ovn-northd might decided to drop a packet by explicitly creating a <b>L</b><b>o</b><b>g</b>‐‐
+       <b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>F</b><b>l</b><b>o</b><b>w</b> with the <b>d</b><b>r</b><b>o</b><b>p</b><b>;</b> action.
+
+       When debug drop-sampling has been cofigured in the OVN Northbound data‐
+       base, the ovn-northd will replace all the <b>d</b><b>r</b><b>o</b><b>p</b><b>;</b>  actions  with  a  <b>s</b><b>a</b><b>m</b>‐‐
+       <b>p</b><b>l</b><b>e</b><b>(</b><b>p</b><b>r</b><b>i</b><b>o</b><b>r</b><b>i</b><b>t</b><b>y</b><b>=</b><b>6</b><b>5</b><b>5</b><b>3</b><b>5</b><b>,</b>         <b>c</b><b>o</b><b>l</b><b>l</b><b>e</b><b>c</b><b>t</b><b>o</b><b>r</b><b>_</b><b>s</b><b>e</b><b>t</b><b>=</b><u>i</u><u>d</u><b>,</b>        <b>o</b><b>b</b><b>s</b><b>_</b><b>d</b><b>o</b><b>m</b><b>a</b><b>i</b><b>n</b><b>=</b><u>o</u><u>b</u><u>s</u><b>_</b><u>i</u><u>d</u><b>,</b>
+       <b>o</b><b>b</b><b>s</b><b>_</b><b>p</b><b>o</b><b>i</b><b>n</b><b>t</b><b>=</b><b>@</b><b>c</b><b>o</b><b>o</b><b>k</b><b>i</b><b>e</b><b>)</b> action, where:
+
+              •      <u>i</u><u>d</u> is the value the <b>d</b><b>e</b><b>b</b><b>u</b><b>g</b><b>_</b><b>d</b><b>r</b><b>o</b><b>p</b><b>_</b><b>c</b><b>o</b><b>l</b><b>l</b><b>e</b><b>c</b><b>t</b><b>o</b><b>r</b><b>_</b><b>s</b><b>e</b><b>t</b> option  con‐
+                     figured in the OVN Northbound.
+
+              •      <u>o</u><u>b</u><u>s</u><b>_</b><u>i</u><u>d</u>  has  it’s  8  most  significant bits equal to the
+                     value of  the  <b>d</b><b>e</b><b>b</b><b>u</b><b>g</b><b>_</b><b>d</b><b>r</b><b>o</b><b>p</b><b>_</b><b>d</b><b>o</b><b>m</b><b>a</b><b>i</b><b>n</b><b>_</b><b>i</b><b>d</b>  option  in  the  OVN
+                     Northbound  and  it’s  24 least significant bits equal to
+                     the datapath’s tunnel key.
+
+OVN 23.06.3                       ovn-northd                     <u>o</u><u>v</u><u>n</u><u>-</u><u>n</u><u>o</u><u>r</u><u>t</u><u>h</u><u>d</u>(8)
+</pre></body></html>
diff --git a/support/dist-docs-branch-23.06/ovn-northd.8.pdf b/support/dist-docs-branch-23.06/ovn-northd.8.pdf
new file mode 100644
index 0000000000000000000000000000000000000000..f4d2c3236d224d49c8c29059fabf4fe5e670ec18
GIT binary patch
literal 196655
zcma%?LwK(}ySMAE+O}=mwr$%sR@+ru|Jt@~+qP}D>wBJk?EOvN$vaAN-8quUJvh(&
z5;8?maXKb?R%o)(tGEJaGBPQ9cLx(AS1Sj5ZbC;RS4##97eYEkIzl>A6(Mmk<$qcc
z2fKehSQ%T{TDf}3nz@_V^8K>_A)V9z&XZSA6jD<W`)8)GkgA9zA)Sk;n7WjR7@wo5
zxreirtJyyl7gtjUH&;G^f4T~8u8wZ5;#Rh1{|^7FouJtW83`SXt)Y2&8D!1uEnF=L
z+5f31GyJoPtC=$)gSf4ctC^^oiG!&bKR>jKtFxJr9kgfGvDUit<`|mas>ai1AXR;g
z{Z)Bp_}YUi7aIvz>On>Fk#i83C^0AqE)c53Biu~s8G(yEgJ#=WhU|{Af1Mm_$F1{C
z`zgD>5k1CKvB1gg@yUQ$Wt0JZ=toLMZz|5q$BnUk<xMI^Ex+i~-p##mFR3P}*3svc
zz03ZRLStuuF-nz8+bLOn9Gb`aZ<XoFj`I~PKL2MTCLT}VxB=36n^1y#MTjf=fPG%h
z`@!h#Icua5UPsXG5j6z?{l?q{>$KFTuTVWGcI1;70n@~m!7O62f>|UG8!zO!hjxO{
zCK`ZGzW3n=!?zRhp3p%?w!gPc4BQj_i{QEQZp@nQn2C$Y;gFvLtxRR~GRyuWX+pxI
zX+W-pmR9W=Oy~Lu+9xNB-c3isDXLsJXZ>Z@=4|MDwY|UjWY+~Yuja~IC%snc37{j>
zujBKwKE!lHH<VW$V&~`Z<K+9gbJOZ-nTFbb-%7()v@%Ua>6I^ZHN||o+u!o>oT#q`
zXVcfdv!G_<{F8aVNA8W{+wveZK6rF|EUL1#)q%guC*bww<RjoZf`SB8onEvINT-Rm
znTWxEk_E+n<>(r{2Q`Y>BF=5_uFHC|iKYVWa)nC=qw=|HiefB*5+!5JlD9k@*%P7J
ziy0qLe+O1Gc>?pB=K|8}Z^H%~)o>!3ng&Z>X?kT6FBr{zsN3#w4gnQMDmLR_)SE)*
zW|8U7!8+%1gL|uPV-p{W#`%XItO7W?W`I&z)}OWVNoEIBYO=U*Pi?NC(yr#(dk+?@
zPu@tA(#s{DjmL;ir}(vG&!$QINx8B|b+ODYidSlC)U`w~;R|7+fK%(v_GnQ00(^`_
ziG+<QERgYzuJxuW{~`<uFBE!0$|F*T8>N{&zH8T!M6;gj4Vjf<fl7*+CtTG}6BUPK
z6pjg5BnsX;InA+=vBVQLV0WckK_U&SH2MX03j}$<sf99|#QHtsn>ijWe58^ygZpqq
z{jE?@|KOF8JC|WhL3V$n-A46#??na}?LnW%OEq+%^QZ#rbpOkyx5tQkN+t@YNCWRX
zT3-Ld%batX1SlL9V4ax3M$e2oA!qix&Y+25gw33*?9f6a6ESQkBGR9r6Kv<#WJ771
zaU<O$945q3@Le~Thd-{<{^!A^(Y!=&St>Id;X~UQ9AlHZL%gt<Q8!Wt_KV!STYE)h
zC5^4yxUyMFa?Sw_C{4d!%p7yIdZ%k~d0km*%#O^UD4Fl((qxyNP+Zn_wUe(pgU4Xd
zxw{U!>KvQSlHl?ZKI%-**^0Ev-W~xP>+O&0t?6)KSS~}>XxF%s1=s*AX0hkZ>KmM{
z-iu~ZM}gTA#TONxm~u2{+kztJl>`!{&sLnhDoqC-UG__!&*?F^-LBYZEjq*cfzM)v
zU7TodYss3W91BNyNWb9upRk#37Y@`+n(Vk%joNTW6u43`v(EV<d<91+i(7oF{1|0N
z%><|js`|CgcTUvUU7UdL_mAh(%2mj^xONA?1s|rviOBdb0oR<!k{VbpAEF6`p_Soy
z$b?coQm{IT6r=d^B=+AInt=)c55uCGW`)8zsmW~bCYywJRgQ4lfU9AZ4jP^r`#YCL
zhK;WV13__5BOu%K2SS)45ccj6K7>S`*2+)R+lqr#f!>Ngo4{fU#~&^&ft~OUm&dc@
zr|h&&Q*w&9{%x&+0`q~jNWL2?cTmRoKB*0}#F7_cg&p4^gxo?GyC6ugdjsF-5%vm!
zlt)k#H-C}Ds)Z9Q4*Zd&5v4?a6!OLgAE~lbJv@V?qt3GC#?#!A@D8XSh&Dg;--~%e
zlQAw&Lza?-xhmK6Wc(sYxCb)AAc*BaZf$}W*qc<oX~9Ay3LL`K-m7r@Xn)Vg79d0^
zr6W5pxO5y#8jb8ZQ-#;qJ}zTBSuOEzC>ItK`HM=q4!5;8TdHXP`NMe>|1P2`ynjxo
zL|LST)1q6bRiVz2okAEmxM$nNl;E9nh1NK)#i=%(M7eFy$+ez%9wyiACt^YT1!yYF
z@lm(`Gc+1{?`Cwb1rs$p*^s^g{sBBR#mxGymSq1#iM+6t2%8Z9CqtAPC4zi6^_=Bh
zNY|u57=(B-r40ob`DAlzOmxtuRU3)O&SSboJT*F#(Nm|i$fm`sa4QUxkSKwE|F2yR
zK}y(8Z!JH!`q=_YDdyInzJ0k(JXC#<F3}o}`HAi?I9Q!Ps#4+bugxVmC5X0W+jmb#
z4m2F&!-PJ;e)d_0=^E~~8_bd|4(Phm5~HB;@xKZaSDFpt3p+c3+J0yO$sl_>uC_Aa
z=7fINjX$;Yzb9ErehDa|e(z=+tYb7{3zlEVmycMaR`hu;Az9W+-Z3Vl&&*ENkG(?n
z%zLsZ#<VBj1F4k>URII=>z&5uTdh}LZbO4Kt6bNYxobBElSRhf0I$4<H4>m=5IrzA
z45DIqD**l$EEGd2>J}gzSGdR{QCkAFSgQ`d8lDivUf!Z8-k%^7Lhqe9LgmGhF}Imo
zu6nsRLRa+NS~#5!!pqw^cNB-@Xk<Uelq81u-~cljX1iQvv1y1<3}e&zv_);cvc!0E
zrctsmg}os>$CIUf4ib9Qc;tzKncwbmz~=7`?K}|^3nL+v>d8+>(Ct<PR5Gd;MY@}b
zKLBCjq>s)}96lM5!$Gb)&w20}yl#W43#p(sP^bdgq-c1BWP;RU4Y2N%AsOHoWlRM!
z7hY0PD;rNN&FDv$HCuM-HO}>hC?~hs<Zi;3@ugCjtSffAUM84IHm2$ktno7<<Gwzb
z{&Lqmfg6`xLEoN<b)n3K)73&mXb~%X!pxecd9JnFC^E}P8+OQKwGw1iU#OrR4V3ar
z`;aV#-U7uD*;+4Hy=Ur`19{pj%08*YzO7*IsoIRK@mt!;T!@(1>H5pV91Y@`?&Oyw
zXY`gpDvXR*p5>=xj8UPWKHJkNS+I{BuFojl*?UKZVR_AVWvNQYRHAOnlvHAM70FCO
zbEOy6Zk$iwTdI_<ZjjVcV2kl_;bAY2w^2>=-2VC?2C+|3JhQBG@Icwe8izqQ%x{7K
zU#@i#V%e_ULI2=ZQTxD~+bMJlaBXh$qP~DgxKN;kvctnnow@LK$#03d$k>eWb^*1k
zd4xNZTqv@wbq-!<#%|Ktv-XQ;hh8)l>((xZFso8-s;m;`jlEXxwMMdV#|J&#;WA1M
zqxl`pEQGU`%s=I=!qkDcz9hpm96n^Qi|5bj2;YP7Bv-p_*Xqe=PQb60D1q^}v{YCY
ztv-8tzC0A7C4uq0Ajh$VK^#vrFY0nx0qi}8#bn@iKkQ>6*Up^|7|Lj#Ae_)+-XnbY
zgIgUg57Bn`$q_a}i8gHTaC{#Tk{BPhuDWVHR;SlSW<hGxy@QX`b!itOXfJ$~_~uiB
zeMK#W0S%0uYYp8FtpbI$#WwPH#~_bK5T%ghJkZCYUF9^qJ$wGw_WiWEDW_Ez3v$jc
zw&;vxn}*JX#mVWrZL>3sGl@-No=g_TmG*DAy6-F&%klBotlQE$m=B&96`aX&34B%z
zS;)it`8c<4Yr3e3et1gS4^Cii;y%x<IBz(~E>|wTT>jDFnwUd(Vm#xUxE_K`2<t}y
zuwJYi5Fy|~4tB_(h%<n(anitk9U7)FHDi4I&u8CY6<{0;Sl+l)zbpWH3jN)Z@R>Kq
z(_}s07({x$b?`!eac8tEz(dR~>c@(w{rqXj%N#ex3lSlg(kEs;z!CgOtaefUq`H@i
zjW>Pa6i<*DaYh=BeaI#<z2&{(EwK>)4EZg=+gCw5DyxKYN>!T@Z;Dshleg~8ldYqU
zAfvy~Q*g&@^^_`;mr$M|S!|NuQnpe7YvFVUiRJ<`W-5>pZu>`N^Zes(-YV>a^P#IE
z!{5d<7_C?PbK!OBmx{&N=I3D?NjUg%FUH}jv#$g@sWccc0?Kzco(sa)f~e%V`}L~o
zhxRGB_k127ShbIj$34f_J4bj?6quR4>HjkPKfQms|6khww`E~uWQP9V8q<GD0n>kF
z1=ZS{&YLU$TESkmp@gWTqlEbb;iSBHwQW1Hi3PP8FCtK4nNVQA80#n8`9Dt3`O*#q
z8E@*58BJiC!1;M~xnbjQ#xdBEZnP-y&a$1oHga;*iZUX=b`<Ao(WRYDdtR>Q{jlvO
zX;8I7ae&AoJo<}oR`XhZ>cgo110!^=ea(5B^WkoYnun><OpRlky|A{oGqxCPwRM0n
zc9>-frn>JwW_f?8i>0vhx09GcBVmK@CdTaA*CxVkbgR@d1)1O9XniIyCa(j8a?&S6
z1V-{)P48H_;OJtUyKsC08$Bd+%^KdH_+Cd37t2WcfGv#mTQh#OKp{^<o{>bZEn}KH
zOf5f~9&T){9{oLFfLBn)lbMG#Zi`p*o7*#o-r!ulvBde^+Z7#tBW^g;yX-vnHNQgC
z?&FkX#nf5L`&$sFJ*im|#rphSu;!7D5bi{tpqND2Td`$lYE<A@gS-HPF-@%9C>zn)
zk0q(@axu!NI#^>-%v6Kf7NDmh(%R$-z&*YBl5CSm_FhvHO>XdNw}Y)`*QB@Ln(8D%
zT@%;%#u;l;?)#o(g2I`4+evMZ-#pqJCT<0?9bG_j9a(X`N9|Utph2q_IxUnUnUs)v
z_&wE#i8`mEOW8k-5vi%0<?Re5LQH>3G8}LMgo(9&b$Q=P7vOo4ikw%`Npy1L;j4Pv
z2@<<Y{!|^b<ibl6>pQD^YGpCqXg_Xyq?dR8@|J$AmuPQ+h92D>qkMd#|EflFBYMOk
z*TCXvVZ23gek!N(I!2L!lv+=m7GV(Ww(TpPc;{Q$*0^A&WR41%LrhwDkjlfWw{OD{
zdQ2U9l8+a%r=38@vN5$u_S%Z$m3nCf&67WgX1|}VLPBSglb}kE*Cd%am8U)az-|}m
zr@>L}WP#rz)^V(Vgn+Ik-$PpL%Wg{j=R|BM+h)mzgl6NYr^uS}ayrbPxV0_DjjSo@
zG@Saugebpy^2?s+E73m58WazPljIseUdt_M?<ld2n=(`)es??7L%qN3#SWZGVj)>l
z;V;{Y$QV<8+g~1A0V9AezhHQ5Z-ixWN$+sRzprf?bs5J=0VF!aQ0?)_d|R|3rsgW9
zjQ&@i`^HTl6{?lgfH5P{;O=NK*|qfi7bcbA>*TwokMN_5A)a2Ys(7Lq_%<L}WTW3k
zd4be|?$B7SJPnOA<C%*ujc^Btd($onKGjr=8f=jWU##N;S>7c(&_FKH9re1)%CSGY
z{cRF#b6-DvxWdta-k;mYt^3YYK~o9=*6c<rs5*X_H~Tkxo=nDs7qXkzw|f{$K3c5i
zgBq}IhK8lW$t(v8+m@gRz@hT~@RQ>aQ7alw?j3N-K+j-t$~Re<^O5pcFOU-uz@!oQ
z`5J)X_;^x^zyfTrY<NCGFF7-ZC^f=xdK-W~hW432$Qi=uwrs^WkY?xQUq-ymJ3sel
zfD)hW>v$9p&_lW{G!~xKuH&km+Z5t>^?{!)I#K|7pQ*~0KXC*FHd%?;g|&VWEK>2>
zA6Pzn`F(`w8TxggS;@ee$MPfKX00dNtd=s+O_IsRpc12T=Zuz@*KD&HwpOoqYQWkq
z&sql#r30p7Dc%=_orvR@QlzHH<^jVv*=oz<$~L7<oll}&-2^|i>Cz}O@n9KfVLFn3
z*3yW`!qLRKz~Qd%m}(Wcy#~EqkA2HFnT+!p8%RsFxuN;0CN16cwU8NLGX0pwslhqC
zaf<UBz9s)!F2YV$^5(;Uq=nwG&uA8tOKNvbO;`R>5QY9-SA+MLF^<-hk}51Uv_5o>
zP&}_gRzpHi^6#7#QIMdcuF6;m<ei@~0mo_=#|#?jRFV0UQcE~yV7#0qB2KEd<f4ja
z7NP@aEAnapb`_Lp(|CCliOK@qniQLL9?CvhlyO}x5%!5t2(pBTj*!G>BBmyPIT8h~
zYlfp$HMhOoTZ*eJa}(<ngq(0npW1aLUW8t072(DbzEGA&ftvj#v(0dT1SrV*mD#*!
z+f+`S5f_r+8LbH4ZsdRyrDxDEC+Ut-e=8r-SIh3;i#j8p>5^ZM+?gR*1ZL1fJ|bqY
z^J80p;&J{8%L}*aW=`pz?aA`o!@kccPAnM|@whm`g;(Drpl1%*7ula$GwyvCR=`t=
zGAv6AeD2V2>dDL-8Av}ovr)Z+(qRhxVVj<7AOOtxvgas1W5o<Aft0rzC+An*lbuqr
zZ_WT#oe*<$XZAerIm?Y5YW^4~Y+(z|hzYoN4@10|tdg$%%I(V#8QLHGiX2jIp{J&i
zWm4Ws6D}IEk&+sgX`-UY>JuSM%b>PDLtVUD-_PzKXB(2oFef8ge_hf??}iuwJ-@tW
zew{UH-B786)-s+=)pblyK9i6~?N<6yBprJ#y%d~5S%(`<Dd{YQ%MOVs1;0R7k)F#C
zWh*21&X<N8@c`{Uz6=y1SdIlIhj-DY<yK~Pj=dN^G8(QY@<=gS;DBONTpt~VsW`~O
z!`+3YVr4t^Ix5lyLN%7o7tpwKVFD>seRdt9K+&N_s#+7uD*B+0B8BnE@lU`%H2!Mg
ze91K>SqKc_fRyJ~#<J_4gcE|BQJw*rxva3cNL<>(%Xa@YATZ#UdS7z_1H{ih=K(aE
zYCv&BstfN7ONkoM&Y;F@<y}BYUf|?HbOs~tv1Rf@h@PNP){Xk=-1Y{`1h1)u3Hyc&
zX^cDppk_$B<`?4H$!Kq`k6uNV@;nbG5<*h3M4B+MI2ETO94J(nqr-elu5@nls+<H;
zhDfmP;H;QE+6k;HlxN+1h(`YAh?u*7CYn*(i657h4^y~MUzbsXt99uz=fA?|tiB%l
zs%z3LX^_=|=AuT;Z6y>gj`+(*FlJTZK)K)NF<c@ZkuBfa*R?SBbO5JxCo~Wk1B4{C
zX3Tn4-_0wrXwRj9vPoWyyyQjs0IUwLTsn@cLoPw8*d2xf93sZyP?b~+PoBn^lLzi~
z0||_1eSGm@2?Pp4wR%Ab;mj@XxH~JaL;v<-xKyI$S=2)SaO=&DNtB@;u*6N-Gc&l6
zm`(COo41Y$b+-DDwoPgfwyise-%BkNu;RAoh5_%9W~zW<_)3}<R!!EbIexR1p1~{X
z;t}`5?IE7@xTeHRFK4j!-vq7B^zJR)X|B}i;Z|N+`h#a}zwt4#T6W&EKbRQe)CUDI
zq7<P<WL__MUkvB846xgFU8?uEUYY_5S;@OQD>TZD@%$a)nLMY0(XjT}t5@blKL?gj
zo(PI~cP|Cerx69_C`=u#0{j*Ub*Bqdw>aPw7j5;4mxBZw5_H)v!WPn~G~+rP+TQ+h
zR-fhx(86y{fK82C$yiC50c25uLMB02!*C`hHLsN+fc>sikTcpH$Ck_lkD8KGP$a=>
zB!Cgbo5%pB13%DH8!=OQHjoe3@dSm;$&07nVvoZCn!&r`7V!Cde(?QXI$8PHt8hr5
zR5M}#6ToXrZr`5e;h>(Yuh-@CeSR|iJdif_w14n5?OQ#hE34m<=$BiWO*b*I3@ltD
zwweV|p*=4H)EIw_Al;)0Qd?|dssiC58PTMK46K((zfQ4@UR|zmFT~@=#df1oUS1x?
z;>S~rYDqw#Eh#tLNu`N0D>wi{=iw{m<~@f~!siWkpM(!pO^8XZikd=aXb4MhYyF_>
zfJ{}@&LI6I?b{{o?)82o2O~203PJ}?>1t8CtKS7U7BuW``ijbnCYUzs>R5RP?nruA
zU0yfUAr<heCXQogtw|=jHfK`<(;O8a<x7eIE)&I_ZoL1n4U%RPxVZL0#r6gQScDOT
zaY;`Hv}`5E*z--0g;F+}_A(rIHUlfBPgW6T5k?k3G!k_JRUvV(t!873IPx|Wc%}<D
zxfMqN5tx{a@;`Ox4AvJTl>teYX%68~VwecPPyiuQeZ7qx7g~=%sH<X~22r}~;_Y(a
zZJg7Pb2Um*hEZ6a)Ic559!m5aQcOW`(u@#u*s@Z=ll0On(f`6#qTq&MY408W<hHX_
z-{g`yAI2GZKRdcKSuFOYaT#VfI=+d<*%}Sk!f6V}?fI6DV;Rp{A6E<@`MykAW@;pM
zyQEuN2esRKJi)hp4S(MZ)J%ICUDgB%AldFsW!N>^KGNgqYN0N*!kZg9sh83hxK3_0
zhZ_2Bb2JfJJGx;)N_bW(6}jb-hx^00-C$||E0D>x#Eqx<tZ5nbKKTCFbLS6+2cw03
zWE?*pq>9QJ@oUCN@5&I1ERQS_nn91UsQc{2?y18<Pd_E2;q66LDaRA0LIZB0?eHnT
zcHGn)oGvZ4evHK{Kr58OLCds#^i2Ie-teTYK8t%BMvz$R%lO3*BF@-Cv%0_A*-3t=
zix$j|FCv4-^iB*SHR%>5Gmdk1{}J>0{GFRJ;V%srSYXY(X7qZ7f(I9!q~|x}Q#j$_
zE|w&DN@T|5)*SmOKZWucApCY1NvH1+dAtD@_d>w*84`|b-eeTtsK+HoLjGjYKr#ZH
zSULFTCQlv4T&KG)UoD!(v*JDP2Y+}EdACabCn(@A_~uWT)_+*r|LEBNXd5dN=l|C>
zuK&n#m>K_@FlSm@F6poZse87zZ(7wlOeAnmqr%tG*1=5W<;L5?mV)gPRHBG<1eGc&
znU(vKJHYJ6q~l&ncp)11G=9VRI+Hk1{P6j574AnIBsUT0Z&~l@Wo003t$%010hLm~
z^y-m=hX%*n%J$dAi%GD+7G2E|p)|5M^33@5$Apc?KWWY&>7D*bxKXOJ=V49TLnff)
zI!rA{VAp?Y3D)R{!YOs!gHquuUF^s{;MnhFVV30qf49WxLPCgi7iy?hpqpg(beg^P
z{uRaDj1ftV<R@8b0lr>3-5FQTen9i<frlUNoAZyOxhEy0ubD<+0)a~n$LXS|JzZ^O
zaMh-<PFm6U>M`56kFx4_$qa&-5I(%AX37G&^mFV1V$}lA#`5(;OU*}rJ?}l}gv#?m
zmtO5-385W}TVe)F<TvT`f{Ok^=WXuev^oFM40rwPL0}A@tK5aP9$fbmD!9O)xdUaR
z1cVQ<A$z%uUF-uOSIgmcC~hjQ2#dBkTy0k3g^YFb>7%ksE7jC;-lk|b`SGHB>F0S^
z8|%4|RHiRyP2qYyM%PHbR^Z9-$hDL9fuwWW#=`QbkrBrD@TtVXra201j#$?o7m_f~
zy<~-$tWT@#Bi|)8;+t@$%zbEa{hW$d29#~G+k<aP6Zyj`)6<Uc^Z16qnl7S*5l)S>
zzoVR!fS2F-Bp!&$2(cqPd2b9Ojw&iKxnp#R{kb1^HJ@ODjoz!8APCZ7=zulmi%^a&
zvW#HtPUx?GQp+GPm)F4Gb7|h!{7g)_kU506p_9GPZb+<=1k9v2R#*@`<R1%%Dcth!
z<LiMK1;--3_0!V=+=qATND};ki4V`N3J$|=bR32U=WTXV{Z_wqlnAl~1jJr14N4Ej
zyj&~U{u3#sm&ck7Si4n&q#iK?`bu*yXA17<tI7`YO5clo+R(j4!C%A4JbOh-unSZY
zmYR(3BtvSJ{<^f$jmEi)ffwn4N%v^s%&EX|8JtD_5t~6~yBtRr^|V=BV687oDiN6Z
zP=YI-_PZ!~6GrpymxYF4BVw98h*Oes-a$URzkT@`I6xI4>Kx@?SU4vL$CPWY_mJ)=
zx`+uouP29F$i23MJzkgVkXd7l*qDK0A(at0%DN$GC0TO9y8uFxrnK_iW?W?n8#SbN
z&r*3JH{I?mszBkh!JMz=q}t6OGJw?ND6GRb&U^GdlZ64mcF)D+EQ`UEzeotCd3WH;
z#<1}PIp@Y3*-XeHTW{)RgG&}{Vd3P6`-~zs2)QgjC!43Mw~r$gI7SiDEB0u9G;m_@
zUBjOW2w$k#VA3aTCZxSwa`<lIs%k5gm$3CUte4oY<WZ{ve>(hB>MnU%h3TinZW8E>
zSnq4!p`G|IV!2^sJtP4;7FRpJ*j^!CK|%9c=X`}8hEIM2kiShZOzX}Q<zqrZiSp#k
zIvMgSPxKmhf?WGyf6n`^oF%H59G|uxOf=vi%gH&pM-X%4E+>DTk5y=coRGEiMN~5+
z$TQil7G^J1N1%p|<Llp=t!3)f2fkxj)V4#?G0X5Ri>w1%HEs5L!1G2CYG}^zLes%>
zam<Gkot!&iw`={%X3c5vg{QgLemhdJnpv55fx<b>6DU3XRYy~2q{PpbvPX1h425-#
z+Cga66H6=gH{S7piO4Vel?>T-5x%H4RqmN}79dn-vn)vxQv$h-Y=gt(!mTeiQlUpL
zVPrzNHtkH%ydR|eEB<GyC+(ed9p`YrI3hCSED}3bD0~D;f%MPp;3^rU>5H=<LZ>Ti
zefDn%%wkn?-U5a(-rElL$s)q>;3db7d0=5OsiT6z@UPYJDO3=KLvkGlTR~<4wt}Xa
zQ?hmTGvHC%91y3lkM2_oS@(&LgtvY|bM>#XL~0kdX}&%@)#&;A-0mJ)qCM4LCJmc_
zFLOjn__t1)TREQ30m(EVsoA=Q<>InsW0|IF?<9m}5w*#?u&$jI@VX)SB6M9u5L977
z+^<ip*`vW+e!b4|+!00Y3zZo_NQk0ilF+8sv5*(7^VeYXfiUo6O9<d@pNQP|ucR*{
zypOy@U;sL4;LZ2V#SH_cxS<BH?OFb{424lxJsMrEbbRiw2e%*1>Q<XVY7g?=NUk}v
z=D`xwir<vpY`<!x-Zxt^kAAJ`8bibuCd5Lf3L=VJ8X~H$wmoHBJ<3eAFLn<I6{i;H
zfk2|q5OR|Hf926mv+jXRvKws2h?tZ9x$XIWyQx*d2BZcO?u1v2Cm3z#9askWPG*A`
zkE9X<>5mcKIL7<`$&FDvTO%TP`ZK;AXkD^$_BVIi)SP8(=}!s}qGfPAoNPkWvf^Z=
z_itEqi+L^_I3b~H3jhVSA^E4Ep_6=EwQ2m^TXL=zH}I;&rTo}+{x~)2Xg-8?ayH1*
zpCb6A;je(jLMARf^l0kJ!cS6}U*BeDl{L`A^RCnqA0jMAaijJpwpl?6_(g{qD(Tr{
zA*b6o$ElJ^QMp=ee$UUE+#7#xyIXg=yFXWHL!b#Iset4mdWCcit;`c<!S6duhK$Gm
zxi%mk9@j)IEYAA=MqHT}-?>GN0zr6aQiUjsYYLUZwFova%3&ap<<t;AP8!9_wyfDq
z$#l+xZpah3>HJd!hj^!$a)ts_AEw=Ax7Rz|PESI(Y<sm@uHQhIDhX8*l>C1FPL2Fx
zA4yF)z0J%lrk#%wqkpRA$Lbxrm?kmV5_4F5SA5Tr@7Tm8!LSQ2Um0PZ$`F@^U~**+
zaq5Fx%St<Xco}oqUf$vB<fwA<SvV1}weRcn<j%93h50RfFM!WiyZK%_<47AwkK2RE
zF7esp>FC0mZs4u|-clB3(r7SnVd|;pK8U2=kk;pY#Ck%TtJ~v*nX?)c)iN2rAi%uT
z1U#&`dLh8b+T~dGOLp+XnYPz;{XTd;fQ6Eu8{H-77(KG@x?C(8GrLSZnna8^+xM$g
zk;hOB3FJxQx(HKR0I!z0x3+Gd>Nu!o$}RU}3^p*9>PsG(2z_sfwGt$y#!x@cR_Qfj
z#)C^*V^ceMq@>+@P}y)Xdfg{5LS~=zrMec86v6oPbWBn)y<^f3yDx)4)2`HRvzD4N
z^Rt1f?q=L=Vad<!>ZHI@x-PfsE4<{lbGQuU9fuxI;hO4EMr$Q>x{Jm!1z?1TT4dr!
zbWyW8N<p&13i3_YZD!<p$ETHnDdEgO-i#o*YcY11OZr=^B@mfvKRWDBfo#@EtK5%b
z+V|U!@DrVH0fUY$#jlH@_*^}<2d%_Rcq>$#DY+XRplwj6K+TEA3FTX+T!aH>brYpu
z6h<@I5ae)3jrO0yAy_)&AXC<PS#nkCbh^i4_tx)MVQp=<O>efV%Yk+w6W2qcOQ+m>
z4y}G3G<*J?EQk~L^A9a-2=3F>CNPS5?ObUaf>9kyr-hR)RNV4XTsrM0A``KiJS!7j
zg+iwU<CwgXm7=jxPrq<L(Kk;EPh>2jJgF+o^_oAB{g#G<G#PLF+qLbsO?^?w{H^=(
zDDtUQ0m3TDR<fW20beH}A$Aa<w%(GXk0K2UTr7P0trE}{7B0CvIQ*s(9&q<%;O=_U
z!qB5gqWVdjM?lWB5$*Z6oCzLoVnjLvi#)pRJXrX#N<g5C?alB4-Nnx>1a&3x94SOQ
zyey>zJGQH48bq(X-+~VXXMOpr#7f6trK5s8;*-hXXo@Sxb=EN9^U8#9Q9SRFE)!Xk
z8cnKip;HZ<oSIPgH3!9Bd6^RjOGOgo4hKQe>ebSxv?&;<{<gJxMJMp8zp((FU|B>-
zq(_9+2F;rtf~_wNJ|*>(E-jp_gdNy`Dr%$agpm8lW(u#;UksDJsY;*@wY&C+`DR4H
zL###txqeLJ_~ftZ2rhp{Nu}|4V`<QxUeU;ribOA(H<9r3S;q@RDRj`K0-lRWE!n=?
zuEEHePPyM2DQ*iW2)<0mEmuT89P8~)h)WY4RByTdbo(uekdGRBZ${CYEi1>Zn`$11
z)PV)9SMmm#$(e3w>?{^KuD0>TY!hPX3SI(ge7%Q6ocRX=w;SJ{bt*y<s1e9;4a*;J
zNt^8SS0O=x(K^u~in6Olh4)tXo}XhY52M!s%bNwseouj3JhJ?;q3uC;FWKme-LHq8
zt$#_yU{bt9ysI8v#p%>meXwUOZkt=>p3fNHnl>6*X>aVVG&?0lABMyV{Y0K9&@f$`
zP5Eho`;$frS52sV1S!zfG-e>biJ;?#HTZC)C|Tg_;%_|>GUtbIsNZJ^A3tK)AcrKg
zMzo`v{S1P#kn`!=p$6Xau{(4RMEs2h1!Ia?TNb!~nY6=%B8Ug@pDEzM&iFleyeo<S
zDiEt}^{4?mf4ea&4LG9MbK$f8N(Ytg7f_FLM=k*m8eN=2%eMK>d|Q*#+wRjD(EAvH
zY9&XIG&l)FCaLVA8S4VKqTfau^=F*e$(j&0N%{wrE1-ZQVSV|G{H@Qw>oE9@4k5(-
z=X?WmN3uo1!5`{L`^u>afY1yHqz#-cTQ45tBA6M{>Z3*gkE&+KB5d3rx{*p!ahY%<
zqf}c*7x<FoP#%8#Tq{Tx=9CTRl}CiW)lcl$aKWQDcp;g94XA&v^bG~(G6@Bb+R`U=
z4bZ&tMz5*DM|>$%K&VRUk45dmjOVYlZ3WV^)>X1g1hZlJfx0I!55<ujq&25~&5%s2
zCF_BFu}`GVu;R~8j{Q-B7As9beCUJ*i&yZ^x$k4?r+E&Sh5#T5$kr9PgwN<Q`Hz`^
z5U0F7p(YQ>U2E~0>1Hi6W!=H#&IK(NnVkQ%1&3b(O0Z%gjC2*dsW`WKK<4JoMn<gh
zi45|`oh)}H^;E(7`<nC8YOf3=S{%+<Bw5oO^2+Hd-E!cE!2zc)iCX_*4(|NPy9<qO
zHPL`5)+a($b5tLLAsE{~(bRw8!SB#I?MO$h*p3S`gwf;7m8GV<VbZg+XA!?>%b#h`
zF7A0kK7@@y-oDSwzw?*X8gIW8=w;*<udxOTBOkT5aq<WcH$r#rY~h<#j;KKGc?<+B
z(ATO|pqab?<Mn!b8R70!!0ak5^FPe_e~kEl%$bvs?f=Y~ndLvtnf1Rh=Vq;c0?#p|
ze*(`bKz}ml2<%PD2IQ!+U2-$&XaR@RIMwPeTxrcDAh^JV2d>&5w7(`Dr}F7D_SV<R
z>&SnAOG-bpZWd$WNK2xJ-c0;g0ZHjwxxTzc7dpoN%Qz2d!{fLbbQejd4$xh7n%QRn
zOe#*Qg=AWG3Z++0oi7lCAU8C*#0puXVPh}k=Es)H(Qq<-|DO_O1xaS@Bemkyx~4p?
z*|CFjQg4iuTk|7qjmEAbt*mpl`i_rBw06{M`KtR5q)uv2L>7-PqNFA~>oiijdwXUD
zXR}|&Vl~m_oiB^uHEA-;?xx$Yg|<?wiT6T@Ml_cvD7s!gFPXMRjVi<!9a<Cas5T3>
z5>BnDpywWM0o&IrGR_oIi?Iy`<M^#|4Ou5%R#h1`GE*KdBQazf@g?093e#_bD|&Eo
z1TTXfofIYv>Ju?cw6f6{RI}7>v!$64?teyJ5`VpMxZ=DitaSEZy&9_U1h#i$;=IA6
z{z-_qcJCf-9LP`RI~iZW^}VrUb$t%k603|nH6tC}Pu`lw^rdfP-H0(=PiTS3b#uE{
zcylJnOqF#gZVX`faS!&-ZOlrYK>0f_WHKdA*DADKjYiEm%}QyjyT8&EouTiJlO4;F
zb3iV&M7In9O@teJpe{D8809ZD<SobUj5)*?3gzovYf_CTn}Pr>U&(v2GmuWMR-#uA
zL`r*XJz|XASQR;B&zA_%MHOt)V!G^s0~^Y3XM61-VQQ#jo#6Q02+Af?{`+J46A-Z7
z)$w!xef)k<yJ`{MXU;@R`_G?oupBu8OoR{UvEcxcFQ5bsWN3)i8Y4{!%Q(Xcz0Q?t
zB#z-8tHC1`#IchwaLmhvR*!(Z3~ZCE0$mas#I*LtHd&e0<Kq$(XL+jck*D~T&N5<&
zCV2F$fN|tq8R+wdJHzW1*`OFcFdQ}ped$@H@4v-1X47Z73JSw`)+v+-0BD#lKSv%o
zs?gYo#L4@){nk3J*#xeQ*WuWn@l|CFjWNg;l>y$u2mx~x0PL;h?mepG+&pN5l#g>6
zZgRvC$b!hix~pL9bPq~EF~yo(s&}LS%1@Q$y(;=9pL=rm*Nv=?sbctO@WtX4X=KWj
z{NeYy{`QNmZshcl_-cO_wrncSxa>(GLjs%qp(o_veufu~Up-AbTGak+9r_h)g*<pP
zJBGHbnTp3lNW&*2E>*Qm%d!PSm6$nwoO8u1;G*rM)05=~x+e`Qx(qVa6hQ$r;TL{F
z)W=%qI%1(F4qV304{c|#_ZN}-8H_vYBuA(DYScuqu96qg(d@Atz3^-QE(k0B`D{_w
z(o@(^3Fzcu7YRe?E39MVY}T0*n;CvzVd1ZUHJ0uvJ8^M6Y%qJM&>@wFP1SQtj>q+o
z8=)R_YyNSy3%GSS@xA}`$M|)8hp%f7_&4llR+&-Ybiu<Y)v^<zQP2+N=QbmMM)Yjs
zR3hqPIuprkw2E<B04ArrfSJNLv8(Qs%!$VWHz-SS+!X}-P<Hr954gk5wHx&_%+L&w
z01YJ|HSs=Q<={x~=>a@K6ddI@JQNkSbF)R9{G<ZhlEc)d<JKtFB=I^&CEpS~ceNl2
ze0P>3Wg(RdRTa8{S%MZuog^i(93|Kez09oCJsLhR)iSe0aRar#MWoL=u`6{6rrH{p
z1SdD0X68W6R&eWw4@6!TE}<CJaA9R<`?`fL%E5hp|M9jT13RWNENGZ%9%4DT{#Hcy
z01mZDeS(4G_V#|^Z)8rhWT#0wvm&IU4<83fGey6M;{D1ZGpC@?`X;~x++FA4l+wgV
zmt*oXj`eefNxblP1{tfzK_lS4s{s5Ei4pH_=<$5pJvVDmV%BJEoox6Q`vN|y>3Wr5
zZ}2lyT%MZX^h)yss_Th*iwrDrmO7Nw3?W<nL!iin7^PP#GF3zoaGc8a`4<9zpt-~H
zJBVy$ZO-rZk$bd6`HZsfnM|QpZf#BSIbJgMn4)+NxUabY%ASs84MxvjG~m={sUP<3
zm1qdIhXp{!Elwk(+<$h1XTuTZ;>NTIX9NfBi|V%J+8pS#ZI%1><JtSx$!e2Rw0~$w
zJ??<&UPNG!rUkdv&7PJnqN&|<koq&7s2@+%kei?{-d5K_eg`j4s@}cS*!fqFKC^}#
zE&V}1%N)oA)=nU+G53uRDx#KVC?ByZK46{hMh$()w9MTWBq>SXBzD;!6aNZ+T<tJX
zxt7Zm84bI>T@+CfkYy#L5u*2k!pzhW_Ip6<>=Y<lt(g+*{xyrV#Uzz!8RZsjKMtAl
z^MO}JR~JB{ZF!<vsp5h2)`TnT9D+Xpv+qH;Sj0q@J%g#3sr|Rd>k@|0HTVWZS{QA+
za(MWdtKHYhOstk$Gc~j^3_}2)cSz&waq_Ve+{?=k>NR&e3m?CEpl3xbfv5fEX%6f|
z>Gi18gGHKNJ$!F}O}?FM7mOdvG&8-Owe>1cG*c*3VD58Qq^6%}xaldC*K)S-l>3kR
zxDovE{z<$zk%#(OIT$I^R|XK!q@`uBJAW(nGy6dKMD*zVRx}FqnKEeJX}P>eysdck
zv`>4Ot81XBVz-)ZGJ9J}`zexg5Vcxzak)}@R`ClfUiV!BxX@tLr+ShvU=h{S_#iUU
z=sQ1&s9H_!0?7QTCkFfaGW&v799O$6bt?v+k)wQOv$1(1zS_Y3fU<L<?N<oW-U$%!
z?(dPAc#y3#8rE!VW2zpz)WwUcswUvPkw2KZ=bDuF83#{Pq=p%tRxt9T@UIYWgeYBO
zF63Z~ks(qG``>62C6NIF6bC?7&P$*c%v&&dpRf})oYKbhWM>Ua9*SC!&Q2$%x<EJv
zU4r1}TpF(1i2;-wB~7k;PD@QP+40cZWq{DoVeL4o`W)KvmUU@1X>9nDvfhM7DzALg
z+86p6rbK2K&gyloSLJB$=n!8-50TcLAjYl8dtk4gYitsFa_?TCuz<yfOruyAjD6c_
zR?xk#`Qw;cia=tM8V)%Vym6B+j1j(}H$jYc-1I{g15)y}&?Uv=EI)<d&I52oBQ-|c
zee*=S<KH<|I)VhLhQAbYHrpLI5ykdzD7rarcc+k9y!?IK-0#g7a7=L2*B9vl_!}cN
zyEtgMWhxXIx$^UQt7iO~mb{C9Fli-fMW#W;#yI2r!5I;bFl@bnHvr~~OBcQ#4?=DE
zZzdrqc`3{@u(d+5f>;c}lHGho71zTi-AsXI+#(E(U@l!)`I~^Q5)Hnhi;oh}7+ObT
zQ?~%c$RtB_#A;igBSzHB*Xpss!Gqo=x?v=uNHsg~K*%fK^}`TxH6sAUS^`xLUwY1o
zP)+NizWC-tM>uYf)MbssQRJTRr*vPe-@TqxYici3nhK-d*Ezbok80|Rh>3Qy3Efil
z_PbIcRpk_3{B++r&NhP_9isyxvOf4NB4b)UpBUy}#Ws*J8T)Jjv?@$l&E$|F8r*Z?
zVQA0#+BEWDHdw#2bX;qRbDXz93^(~SfAr033@XI8DbE8}%|w7K1JL{2-wu$V93)L4
z?T|YX_c~HYD90zee71sb-zzzyqy4I}F1U>OxC&!q4``(I=QTj>tLd8EJ$N3hElRhS
zL1MCE<>DYb9`|F1!%ZD6melQtBi0Od_CY{_k$dQfvO!j9JyiWnG<h-5Gqr$K*MSi~
z)s|zFnPR!DmPAfS#EMuKt(7ecQJjjU$y0&ECw)p$+l{Z&gU8!DgBZ>l%YQ=kzp(r-
zR5Noj{{J|Nnd3j9n)APb>T0dYf8Q2uU($3mF(oH%oQ?Rn-&-mltB$za4mZY^mI&sN
z5t9RB!)dPATJXH1{+P^M+w)2$G+Y(w(xVOgZ;iH}=4^fp`O>E={N0*0_B&|YOj4j2
z_)2Xj7|!f&<8IGW(-<CqY=!c3a&s}}fJ&824JGQ-&h?x=ZLAD9M68<hL^QREK+`z>
zqhYWlw@D}S@$tSnm5nIM`=@cL2FYl^1gpNX6XiA}&7aex)~Y!|1^+!k?-1ay+iNUv
z>Xuu3_6h24#wpo`_cuvu1-?`8SL*?>qzHF}9$39rQIG2O4pIH)Uy~i1VvlKD1ZdwJ
zh#pSUQ^$aAK2sA+M=Ia*6<4@UyGP;er^;o%OV!Sri!K%4U0WhY`!RaaDV0VikrB8S
zv6VJR{H}2e^I{Q2f_v$KO3ATOZ?rp3#7>WJeg*Q^H-<wf;sYgO-99jkCL~AAicB@U
zN>&#9lv4>>88C#yJD-CX-?&e0wK8i8>xfFpQC@#_9(yz05|k5HCN2_B^v}WJ$*vx?
z%<ZP>OgEWf{RAwG6KpKVEetATitJq}>o0v)KfMOrzq@RHtxW`zU6UB?>Q#;sCz;RK
z&CWCEu34fVECTo@>82-DJ%xy=aO_KRqfN{dJPMX@y!TYT<t%SKxxD#g=X>K2=#<mz
z1~K<RsJO$Iwyp6ramyil_p08zskxqDu!*wxdOq*c996b}n4I7S>&Uo|tZlkV<MD^(
z3a%ug*#*j{8`k&F%jMnuIwy>TeG{}T4i^VVoA@&H{R)OEovI4GkvcY5$Wl6sbNX7C
z;Y@(ZOerto?(r8tmg~DjlBIng6&XQaX{O#9bZk{IPu*~u(i36}9f5m^kGVm_&}l|`
zy>zAcqDl^I+wH3Ls%^$ypA$DiL0`#Lb;0iqRY8|9=htu2JAMS&>C71G#~N#E2muZ|
z70PP6a^GU~c#<TYi7^336XJhT(+h@G{n870Kz3_I$srV3t6D<sS^yA2gAg(=XQy_s
z@lC~YB$lOG^UX%jnIRP(9aN7L=UZ}{JUbRbl1q2F_ON~CN}Hr*Q=pTN2O=oLZnt3?
z13n^`BG>QEh0XFZ_qR<vai!~zmX#~ilL{5}ZADw)Pg!!7$330-R=R>9`h$q%?42wq
zf-95}Rr$3o#FJa<m=|Gr0yY@OTW`NMnh#xW2%klD)UQ~ON;Mln0wus7h^fk#3~-l3
z%rhuZMM!EsG_r4QtUBA9ldJ4^E0z|;D^`XMzJnK|$YdTgK@Kwn>b(t~>KW6-J64!3
z9Dt(>Q->bw65@M`7NLTXUU0zUfl6Fg8X_yv1Xon(>(BNv3?P8}Lbw1E_<0aW5Icfz
zVz^rh-!l`QEE6JD-mYSbgFF^YMug2oz!z0;HAmkzO0AX%w<Vda*=|-8ga-7Ss+v3P
zbg*yWRhEF7(}!@89(<`FoB;`8Nw8dzZ#tsJ$E>ndEsEvb$FKQ<cAzR-wb4H_y{@Z^
z=p+YEW0{t~euydjDj!Fu*?uNRZar-diy7vnfuQ(a<cG%LL~?TIm#F|7?}5@LJ<a!h
z)<p;VaCK*iTebX%W%k}nK8(5>R|HtpVCbjGVdqN^tA!A*7sorS`MfQ7hdU|ljQas2
zP&b<u@b*{DhPk{Bcz-{dz;hR#{lG}i3<k|_1oY(m(4h(OePH=Vk<01{nSmWW9k-^f
zk59&{c-)B{s44D)tX2W6;Fqw6PCzJmBvE8|s`zT=%ieZjLZy6=(>Z@f=nx!XOM~&N
zusARVi;v&#b4nW9BA=UYXyBCf=LWjWeAOx#j~xF|whg!NgqCgeK6?q;7_?Z_ilMTl
zCBdMSq`1g9Nw%|Wf%vVUjf_d{x%nT`0)^oS0t}@N946|jqhM=jMx(2`el|r=-;hB=
z#a3Q)=hWRCEbBNGhT4l!t&fdLgeCuvriR+mmd|T51=_R8J<oNM2+3lom>`A^{>+mN
zYS8T3pbp&t(GR6LmRm+7!UGfdoB>-%^ITYO{?vcowiuWz+sZ@#-f%Uc*^LTY3<CDn
zs#{&r%cEx9s6}eLXnAhYQI?m4B4YA_>ULpe>r+A3sq0c{k-qTn78J&|hOb_?Po~b0
zLu%EOSevZq*`DXiACI5s>s7=yU>YPY%gof9td2e~n4LG!rpYM8taEp&@98v%NfpbW
zGgfTXR_oP43nxk0&vN#U%5!;L4bmf^)lK*k*<M*&XgaCyJLgGQ@6ZkjxrWB{g)d`T
zZn?t)=oCht^`((U<QR2Kd1l2_ku+HLrp*p1HZO?!2C8lHF}{YBzR__^hNqz045D==
z0mH5f{!~3qBcEJ6j&5-*JI}?8*1Pf;{h<~#g^-Cu=gR&Rg(V^mXB6Gwl7SL2$j`5!
zZ>i|1wtm)SpipwOn0RSR*)c2TsQmg_lSC`P3EgE=B0Hx%Djb?lS`loD&WXTuyXUAZ
z$Ui}ZN-6AZBXd)sMrj9xiOZ6hGz7+hq`)^XJ4z7Y$cI*KCX_P0k;i&G{i!Et7Gogw
zVbrEf7Sm6y`0D2eXl);T@3YSS9I?-|Kti&!j>zp^PupT(HYH_@{WU>wIZO!mxP|>C
z@p=MNG&Dq%up6DQ55*|cjynR@dCnm{;lS1mkKyoWG&`iZz>l$tXuUhZ6V5Vmj#MQ^
zg`w;_`xYDX!+LXNcokAAkQGBG?x3pl%?0ayXkr12Mm2<F;Bh<fl{mCGxN##SsMb)Z
z92X8n%g#5a^%V3c6D|QwI+qe!It<lJWj2@hg^03G>@Z|u(FilIQPw`|7MRN0m8SW{
zsqz}jCB$9dRDyIypH4C@1_s}mUREaQ-DV87d06_mTI4c8Yg@X~1fi0$=kFlQJbz5a
zrl_Q}nfdFbw_CJ2SvM_Te}tV@0oE0f;)5$IICSZ*ZJqk;n6fx16}DMTfae@{1p0Y2
z7KbKMJstbEy9p1jY1-;n`+!uV2Z8sEQ;e%Fj2T%(e`#}giW=(L`6Go(O3D2wUhz5E
zgl#GM`yn8pz6NA69lxD1tDl|$32GHDD=^>9JU2lmUDQv8&2@@2YKphL(kTg(+QBoX
z=Y>6qd&tOo7gUyzq*K>tunp8$3HrIcK`xVZ4=;U0mRs<uf&mgRKBa%!I$`-C?V*;R
zoqBJ=FRe2^$msk6pn^(*s)%Djp?|P?O5;zDdYb5xh=jG8f)L%t1J3TF<>uoTK=L@7
z+0SWFK#X7CMW-*#U;!(S#z>#yZVdNOTJ#q2Zb6tM9*EfN{ps=-@Ubf%-8b}A@gqAO
zRT!orwrzP>fMHyF3|v<%8Z$i;Ci;$toc|#)7QOWE;C`q0`No)03n~9kZv2-A|A!md
zm|6bsFqVbsKe&;F`M={vIhRdw<nBui+2aPoln5Y}J|IVGNGWyXYvxq-f@^6l9qNcs
z(jij8!@)@BZJU?UBY~UCcMwUbmc#9b{zRauC)Zy8?~YSYn6G&7r`fMw&0Fv*_uE1J
zvY&~mfG9SetXsMB>UZPY&BsvuDTkLQ2_hLznSzMvRUiFtC+5FsQG4A}7{oFpT}%cy
zUdv4tfE#<MxL&^5DQMyslnk?vY({C{aTE65-ADTFC+7kA^J~Qtf83#uY(YN1$H?z2
z4Zog(Q-!q@qx?DFdx4CiYsJn8%HrB}Rmo@5#if9%iHlUa%K|gC?fT)0F`QJ5C+=61
z4Mtev+*0%E@E8`-qSK4o+pd!IyETMhQBQ)&4hIc{Dk^lhM%vV>>xUZKPUrcLq=4za
z@GOIKYg}+9HxyKWumy!@X@EI$Nt5zLf6IXHK0J90%r_(2L`<n)>v?DDu`FJR;WOOj
z4Rp&Hprni&*KC|!>?f!B_?D9-=R__^qjeZtK}TKPuAO#mGOhAs#p1EEVfj*4ZHW^w
zTc<%T(wz37x^rxspmEh<=%=&wMB}c)QMKcG-0_vYqi9nv)=lf{?mQSfqt9}B`Z>P)
z;)(tSoXQS4PFnpvGihbf#`Mt08k>a^WnJOR*qkdjPJJAtI7r*8-#?kAZxmEiKrSpW
zP7D(i_Zz-!34sM{$>=OwBL#(C1c>#~{wYo=)oZ(ZgOjmRDsZ$4LPf(%gVk26#rkz}
zyvNzQI=KHqO=qw%O0AcclKBXvt(1}IVO>ngvX7h8Q96DJ+m#(8h^r?;*kEnYX9BR9
z9)38$`fHTRJXj|6|1ow>%YsE)w%xXE+qP}nwr$(CZQHhO=eC`jH|s>)dO0uk4Kr5E
z*~aL-E!TfV64SmQ%}aOOlCq5z+emVFs)z_HO;_38Yjj=B<591O9I*(;MwpH{HPin5
zQLLGu;Sj)?y}`u<n#TFy8C(ay$5Rh4#(V{tVuoipy<VQL&~FE?IX|wy59DqI^D!I*
zoaa{%h|VVWrv@5qLVVhE9GSQ{c{6gS{S?%~(-fJ~Z4i@a=5vw#D`eB13f70w3yEU=
zc-wS9hP+qcI_7$DICs^yuUJQ!@0Jw#M)ci+FK5a#sF3;4w_h!F*iraE%IeWULE-rF
z<PPF#4<Q^bnl@@LBqci&Mt6ZtTjut6QBar~s-s21b_8*piwdnX>aL&}YzLivtP@bd
zBj}ORG#-Qzu2Mip?;n2%t)uJquZ@p63V83PSEK$2tYFQwO{i1JZtG=l4XS(z-V|3@
z%nDF(B9yjcBcVW?k(EWX?4e{%IXOiFOq4wG)gU((Lc{BDjgSITcvz@I09Pvhi+48P
zs_S-YCa#xdeG9fdycYmU0s0EoX;L`(kYypN29SJ4IUEgBxb^_T12UohL4IH&EpnR4
z=wM2rp!<vF$ZLpHB@c!4sgxXsn#XoS<_=wOTjb_+wI)!qRa@=mkD}@pZdJ+P`YoV(
z;!KzG2qHLE&-VFaq!a>(ue^<naQ*mJT$M|9Y(sZRi%-0oywbFIaQyD*c#pN8*{Ry0
zd>idB<66vt<uD}}bWV$RmF~Wmk3JUuX6nvvuvV5O)i-7uS4M0ZI^KNcCHsj3Nd#m0
zZ!yU~9<Z~T<{tKUY%C5!Qv1s>$UcZ6NpG<wuKhWa#ne>gEVPiu^#lDfBa>d-?z<f}
zwg^VLqTHTEbVP``{hpZ-C0(7KoCwT>=>oT{7;ElZU<-9ZsMLV~GRF;cE!2#U$;&_u
zh3*beMq=D!#Mn|m11cYC0z-V??y+rm&IPVLdf*{_AsZPOF7HgmMzq7Y0Nk+@P#E%W
zgb>BDj#YS-P+a9|VtI@h^p*R76kSa`t=xII3Aw!p3_Qr@a%3)7<PKeZITl9Z7?e*9
z=mSd>D~Wq>-!$RT6_iy9SSIbB0U<HFWHGG7iDrcm%qlPwVURU63&?`~XF{jQhOg?+
z7}{=B>&sDZQ#P@F!twCZR4}LtD^y)&-!pOJpQ<(12<ehg>3)H2pq~#LI861*N7FBq
z0)-4IU!}%2{T*2FDFO;tt5&frs(xxyTko<oIq7+qf_8;j;3M|!hR!rNgsL$FC}HZT
zT*i=DHEECt@s$uY=sDrGj^e&z)lz%K`ofe+`u5TXnT)@Q7$?3W{2F&(<!Z5lWTEc$
zJKnNd#g(axkS%HnU132{F;s}C7ml?ntdpjNLMT}S499IlxBBqlMe($10zlC?xNzO}
zQW#r>mR8QC(T+i73cExFO4VcWK`!v`0pt136h&m6&T2+6A;RJYV8kGewy|L`gmuV%
zM;%5S#DKxM6p}2lK`2QE&|2rx+9u6J2YL4q7AFXwD+$lGe%cy>_?5@hI<v1m?W9{R
z11cda55-=v(Lru002FH2NWc`JRh^n=s&(5^QFMOVx6d4eR!%na2euQPWORdasX{fx
z+DEVWZAZ+PIK=|og}180muNmgoJJDw8%yW<CGZynhZjDLGX<_~bt0K6bRyYg1Eoue
zhJ0D*0g)1pTX;_4+KG9Q%EOT{c@ym`XN?Y{R7`gYv>kK@P9<wx_OM&Il9agwzC)Q-
zp$;0dF}ach<plm*9VR|q)H2LLg|4p5E5j@DG!37wjmte!G$&y+6ZSy2TABAbc_@-G
zEO9^bUP|p<@(ro{K#jI8%P=G8F&P`#xj!CGE)2%}GjgmY$c0}?5+zn<g<o!bbytE2
z-A5h{9NcE;Pfw8p`^N;Ydib;Y`S^D-{$)r7XTmQ6+h$<`!8H136ECv+1&zNcIPk(&
z%uDrB5grjLl@lJy_FhGr*maA1koXt>zE&6)c)tD*LlS^HcR5PQh+?FTrX-BDLdj@M
z{TR{14q0JwO5Eob2^bl>O^lwdE&<h!?z&H_GZSUPL3yKcw&k8HE_-NZ9BXJ^EWr=@
ztVb-mzG5f?xQCQt#Wmy~RX;q2%gVnd;$RCoWuec)jpbZh2MnUcQxvO`O>W8V?%EBj
zH|XeoRAULO`8wyLdRz1_;dU_6muwEY*p#u`W<&*h36xKgXhac;Wo8aE9)oacS4bmZ
z;JB-*>oP>eoR_IhYW_5mc@C{Zn<R`?;B*G)qebG4z6Q|bNOw?QHhP}@z$hDIl^n5U
z<t>3zhPDWm4RDZ)SX*s&O-?}3d+l8}2=QHT)ohL;h9wi4%4<^t3=k_sEKh$D7fGhe
z_6nddT`{5{QVleSTrL$L-`Jaj)ft}JN-blOcAy>Dxx)%&RSR0{KFt6J`&KR|YRo3>
zB+FS&SbS|h7)%<Y{(>)`nJThS;QnNkQ0^JBoX1Fz>&tB|!EooIvqx<9Ve!~|n_3r(
zyce%s_vPHvJc?p@+w!%TL4dilT1g5&eRd;h7j^3Ipw_DXnQC8Yg>>axo^-9vzA4|d
z=s>>c1U;nNw^1`)><X0Dy(tk7BZB0#pXK5IdAK+6b9I9fnqvt%Q%4^cSErwMwE>)G
zaqLwtN&UUpWWV-C^Bb=^YQOEaZ+qe#L|?*dtbHkwu@?2EU;#S^YnIQOazL7t2ig{U
zD`}BZtuPCuBk)sp#$0mqa`+lO2M~1lYv~f=CzB4?)_Ag1c)UbS#SCqZ-);27BZUNw
zv_-!-%AjzFB|xN<vS0vC(s;LJxuwnht=V#379<rUp}WTcQku24Vua&G?X>w<)T3~X
z-qBqF;;poul6|zQChAU_h_fe;z-h@7@o$tE4SVtg!4r73!ZFb<*P#EtzK(7WZzle?
zi|ga1)mXjRuZJ&KI#OL5AgYv0eqlE}QeulxnXkUxMwcBd+)AmuWyGRZWt=DU9Mf*P
z?rg>gV8Dh8!nr4Y#NIU$bKJ(--Dj+!rcob|sD<owoSh)WJs(EiIRWg~3Z+;2=rM-D
zFd-PbY_FO9>9{#pgaHg^8ZT4YY0$&hf%#(`WyFo{Zhcx6v#|fh>v})jlYQ~>um&+t
zYSe10AiOp@lqQjGG@)^9Q!(bVL8Ax!tbfn3#OejzRU*w|E&%+%#~=W&FQyT>Ela8c
z@WiIk4#|eKlDvHdS}F_G)Dr!y2?6~aU+!cTHmeQsB2Fn?vMioGDFf;fznym%oWklA
zaMWOs?|C#{k`1Sl>9Hm3rP~2T{T{}-c*2L^(M}Q8CAw8Fb?csLXK@G<7T*>$z(UZ<
zfX+&_pDt!-H!V<j3pPr58mGEBa%qoXGDqqWS`FRt%`5UpUUw0ztPXn{JR0`fr6N*T
zuqIY=yhhxbdWJB3mRL@_2A$Y8viT(2bmCvRVWe)%cEMYz^5K$s=3>db`jl6tbL5&f
zXMEXZO3ZF5RTnOjbUjF|-?%~=IAt0y`)-=eBur2*f+Hz1c2*U1iBt)7Q&-V}uAqXx
zXA4JVmUdFS_yiHOJ}y*`q=kI9Q7kXP##Bh~;yLaz%cN|h2^pJEDwmgu8o&rC^-~vK
zpfpj0o2axA-3Q-D3&F*yut+VoBJM8lRps&8nr6dhV5aBa;!k@!yBR*^Dw2{|oTw}P
zL^gedhTJTW`A%;4hB{LbJ8~Q*M|SjK3as5{3x&Q*T16X5{1iv$-TF@%S?Ssf4477^
zR11n8rU+Z8zrxG1Z`g@AbWWjin`b=aN-SS!KJhsXzK<z%?KBu;k!_}A)*q^Z?9l!y
zWc7>3i@DRUE4Pwdt?H$DtOK|{4Mbw~oD1L0Fp!dTLE^lBn_)PMj4JTNW4egn+CN1l
zu=}<Xc$ewI=r`Ukm}?JGa0jyC+j{p5FDXR|Z{;iX@mjxyb8+p$denV%&XNz0z*lIP
zVd+=&Q-sy5Qz2d~OrhZy+DFV_?8MJymb}NGdi{^~{Q+N6C(HheKmWs({|N)JF>?Md
zfBv`qfcgJqKe*A7{vZDA`yc*H2v9vV(ev2+6MW4<X+Ig?s<|1Qsw7B2VJHg-0~qzd
zxqedq&TseD!vG*Dn$2rQ4PFjn@GlN@Ro{PmNFSmohw)?nOM5qm(aHJwC+4aj=~LcQ
zJdb|v^nI;}=kwM#3LdSR`3aG{lAuz_#L*qC^{sid-w@G*zFg@vGl(5+y162g{idy7
z_vrX;@5~JpbD3q*`3X*)QdUF;?X&ruX^PJLgtl)sIcAK8?T+F5xt#sPb@4iim5<*@
z9S+*@bM)6FsZsc@2xPc^Qip5{p$e%oR&!?!_agerRWxne4fxkzJ5g5AZ)uEKP?WCb
z;XZc2o=;45Kheun50qF!J+<3**PrZ<t*ReUwWiz?Pi%5U#rkT}O01`=_H0NHxs1r0
zYxkAJIyyUQrDbXUurXYGvxX?U>$<wOlkQt{KKgIKljAMi1d41Y@BU{x|J>|@h7=~U
z$s8!(I|i?RYlqj{>$eQ!lt+$ubTvG^zK-v&AK5^Q%)|K&cX!hhjyY%S6NB7AM%|_4
zK9bxE-D@hRyoFht=jx74^&DqHa+B>xkzEUVcT~-Gb{EasN&Fg)PRU}QcM*FS$GdCM
zzQf;`M;*hQ!$i)#zhmQgL**S!XK|K6_C_RauF-M7NX%ERi6)ATdiug3j@mm@^f_lL
zl{0jGci%@k{f6kj7`tfSD9|{&6d)jbqqsq#*2I^~DzI*uAP`68hZn=;PE+7MAMcWw
z`4PENWR1WsU!@zB9!TB$X3msGXuY-wS!?m|9f}JY+|rU%BZ%ZjPXod3qVSswh#IE%
zgwmyQc}1E@MxOl0jhse{Dfd(w(RH>2@JHwCdj(Nj&0Jm?&|{P%&Ot+&GQ=WBMrqC>
z9(a}#QRF8@w){72Cog}`QFN5XN$8^v5vU;M$1OTXTnBCL!RY$xqHLAf*~gkB5l(Z;
zRmK;wz!GwmX0U87AT)x{K%x!w1)Yr%%9lD{M!8(7U9KfbGs39jW(aBpOQhTE^n=eP
zo6e(U7x#<QVQDc><Nzp19-Dzlnl{tBi*S;wlmM=0NaxBb+DmR}?gliMXAIL9RZ6#n
z4!Y{Byq4@FmtR-%P!odZr<++y1&4Yo%#{dgBP+D6>$7su6~K42KW2C}2ZNG>f1WSF
zXNPb%_uF<;5(i(VyM*~^SuguGS@W~hu!oJa{=k8Jo?<%_MdT@UawCF}u9e`U0)UMG
zl&A_rZPWl64EK)_HIxVXG`p=Fyt*x~+aBZVT3+karmc@5V$wmIgUC5OBQ8F<N_YfG
zqNh9f0{QLwkxip9f%#lTRfN6hI8Er4=KNLQt48c73;<&R{OSa!S1q~MW2v4;%FZDB
z1S!`nnx2km{BFx@^k>K`)j4NyHnBZb=!KOrJop%4L^}_gdB+&qys?qd%~+%g7OzJr
z*n))LWK;{B5*;fIUh@ZpoE7zqksx5(__%kbL(YPdUs!XNsIPYG9fL3CH9O8AUkr}q
z=EhK(Pq67G8fXWR9Kz{KpSH5B;F=~_gzvq{si}yPP4zU_#EzSDaQC1r^t5RM*D>{b
z`1S)p6W~&x^Nvs<fuCJNwgUJwhEVo8E9U*M+3ZMTWTM?aPl7REX%OdKA=y7t<8Uw;
z^Z3L)1{C840sD}&xbpK5=6mvGUR0YA4U<8cEoN2=iLZRKr1ec(`JugKYp!r12=`FY
zlfxUz^<@3)B6W08tawW`35<a*T=}-}s`CKQM;N($j3*mTbTwd(^a24y$U^l4{f;cr
z1O7OZn+L2<T7FQDGe{maC4v)(FG4Vx6Y!@`k0)dpgM#*f^b!P4Rp?kGcfb(NY_Lw;
z5hIGZV!zVm{<FB_q9T5cc_=^5fIFO2kj?8JH?&%`1en$nAq&2MDR}Cmec2AF1siR)
z(gk`0zXiA~pp8z;mw5>e@Y^y-TyOm)Gj5P^++|v<3)Z`@(n(mlE74Bc+3p%p!ea?)
zw4{X71-5Pi(#JPGGOV;zh*Xiagthmu<$zafCgUei*w(yLoi;I*<9>Z5THH{Xw!*$k
z9HK?0KwXH^xxz4~>%vEvMUu3VqoK_D2z(=67ak^cgpW3SDd5H?Cqh6i%MSNhYW1!S
z7RTSziwRBwoIMoREhe|23AZhf@b4gtHRC`&Hy}uK76m?3$FxNLX8<6b`92t>Oblbg
zq#HO{jSR^(o}pwE9dYtyK@Gh*#;9s{@crP}K@ZR`&llp0iQ!S)(9csD(c4Ru7SvBa
z5H>Z#mlq08`Q$ah9|_G9q$Z+oXxGGXhn8hiMzhU}CWx<+X(EW<8Q06?riv73@Vb|Z
zCJLWHZe7&O{0v(%=o1Unr@)U7Ya<XOWKWgOq?ecmNk*VqRvAUPHKhf!0RRBt{9&p_
z=Iq%zemy|tm`z~Q1Zlxc`=qya)}U7Vc2)O~K!IMfOz$@n{cN&8=-O)O{WEON5~Hk=
zO%R`Wt6tyAmSK8rs$CVycxMxwOu<;{e6-GEEUu+e|KyMQJelx($OVA~<ytVo{XJhz
z>ntpLh$(@H9r91^4JtwS$cn7|D^IMjKck}V4AX{?Ng@T1O<x9Cz<<n?2|i@ff*%}D
zr+w45lUmuCgJic|S^ZXDMD=UkteyChz2tHN02|bx?XDB*03uvD)L8)xR#@DMH)BIo
zTwb2OL@Rij3gf%ZWh4_U6gjc5g;H^MB=u)WG(di$KAZ}KRm7K^)3EQ+z}!2S5E5g)
zq1^~*1<uNSCVptzL&7+|i(Sz!wm>8JgCsq8asU-KSKYH;%$?TbsPGe<PT>(V9mBOT
z;gVt5!F2J}`U^SZ+eW8kJ{7^T_`mhQBE-Pv1N$`)bnJqz66N%2hbE4$)Ba!zMFWUT
z)M4KO;%IYZy{DnH&6ozX4VV+Dxn-C!`&3XA@EMy@OI@Ccl;xB%s?y}AwaAq9ZAEKn
zQ9`M`Y_)SWPulK2t9|EOE;c?lpUiu?yf)uv(8Ov7liy1RsQYTWb83U4^Fon?i0`bG
z4T=~7r4|NZD`~ISu|!wV(;+0+!~t3it#v~TZL12H*6&$HH9LD4WN17ZevFqQ-kjq>
zM>N@HNu~23`27??*qBYF+Eb{UR?~LY5&WfAie=!Y;~9*w1KEgIT)qnk;`i<{m57zC
z6z{(wmJFg6EcK!hCsF#M6bCr*NE5B58$d61!dSJdYI^mJQA-ZRM4!%xb@d&B8EU_&
ztG@;hcj}>;aX@=Do!X$Q6qoDAj@%;LB~<w~4aw@oh$1-y{_a@CNa4=|p(JUw!81<)
zGU$M5iUfxEP_dr?#BcPF5_c<S#JBBUaG)%?lR+ZOox(_kqHqzQNa@+D{q(XEqC;h{
zr30UU@&;E$!?mbZzq>_#EUU7&s~>FKU)SYiLr<jEN%laB>aa56ZkX2s?CE>QJM4cf
z!o@(=VmwZ|EttrpijK`#W2YHw`KiK?Z8-fXW)=9L{>1D9&xZwpq{Jg1o)`sJ;v|1u
z98opWo=LVO2y_Kg*H*kF^7{5v&KT=hw*-T%mqe6)7d&<L76$jkTe<tTEsexm!mIRG
zL3I%fXtER*cjj}sDO2z9kZa?17+St?i0TaP_5Vw(hnP2iv{BK7j;@Z676;&jtA>LC
zyXo5pQL1-K4_K6rPS5X?u~R?{$>7g!Opo;N&bQM+9->_>!qX7HU2%V*t&hGvH>HtR
z!eV0#7{-%%NfleXUBsQ&?m?Y`!J2)kd1A;6ifZ+*RrRXis4(3CtLY}5Re^y;OP{ST
z*S)JkvJ?Axz*6S8tjkkzhMXHnM}|x|OqkfLf@4M$K`97Mi~1s0ACd@kZ4Nd`d@*Eu
z#(19MPsl*dlu1mrQVDztXuewJdr@`cs~aT0T^0r=!!A30`8F1v6Pf>@PM~L(xvBV8
z(oJ7~4Wtg<i<xyo-e%gJ2jA{|%qh^)ZCwDLT?K5z_Z?@Sr~lnyS3gTH2gEzTGTzB$
z#FeIaepYaSoLm%tp>afRvSOse!{1R+Zq$Nf5{(O;cT3%r^Qh9rz|5V^v#Iv4I4*fm
zqej8Aq9IckB$yyc9zXEx$YXQ>dnQi-unbTxX#O)eN$)J3Bu^5GGpjD32m_@Ad3%@X
zy)AKa-XzH6U`Ha%c_A`1C!~*aMHJQ!G|W0uaSVH#hJQ{MP$!@qm*k}Jt>PUB50=Dh
zLmx*<*%Bz6)CV@Z!6oMY?{4jXfPhI9H#tVj3ILIA!(w-82q+gV3upHFy6|gi#;>j9
zpwOE1or}{w3-<@)$BqQ&jfr`ZjKoVdqmZR>!{9p+%miA>=qEIqSqb+x$Ua0$20g-G
zXTB?-@hZ6vL}g0FO}bf06<>i%Yj^yr0fEXI+(T((a;VE27SN{gopd70toHsA-O|Zi
zJlf75!WP3!yJk0v0QoT+`u(B9^Ya6_#3(Wdp(H^uy~R^t2<`21toQ`Qm3-(;k8buK
z^8W?I7!FPTZy@_0(E1OMF>^5dFOdDW*MQ~!<TWV$=QY?COX_{AugD&NWR0l;f(jt>
zN#Jd2XE%vmyKI23jf7)~v@;R~VgYoMcHXW2QhvsNGxaS5NJ=v&yKXQ6s)(;ir`I=I
zv!{vVls?D*Jah6+YzU9ur|bAh-Q-Wxe%*Z;CGB<X?Rh^v%fZvx*UyOOm<F9*PSLfe
zFS>Pf{O-p9xl3(KF-<&*y;>Dr(QDiF)2KgxVCPSF1IZliq>_GulYi2PjM3%S6}c-u
z`VRWe-8-#{XeMF4Bl)<Xx8IOg^{!xh{u=3$f*H9%|6NR);d-X2lsLC`qfFJ4$U*U{
zWM8z~clk7Xe-1Sc+3yaOFqRoAF3*F--FA!i*ZFPNGZnM`7o~?jY(ti2mU`A`-m6bu
z##$QcJvPUxD%@M)9otoZ^U6~?Sv>pWyf)JM%^00blK!5!>+b#9VwYy!8({Buy0b|x
zdnA*!XkV1C|NXwZ`f@WZDwdxn`uu&h?Y?feSgPleIO3_e1u9BkKb{)Zk@7QGy<Wf9
zo1LjV#_6sdnU(kQa-Va}RAX(ct~t@6LfL&XloR#S`ESZ9A2p82uJ*yvP}sG-!r0wq
zo?WNa*lnfUI$h>#@Cht4oR?)di<kWk;L=dtUZYj}+JKSQ6JO;v>c;Viw@~%Us_k}j
z7Czjk*I3pnF$I&<Q&}=)oJZ09)&I+6#}kV?u(#7kh@+czlOm~;GG%{O$KB!_a=7BG
z*R`ygbk$o+Wm9`;?Q4hX_O?LN7>>uSRfoyDt2+F_i5D9n&2qrd71Oz*N5IfE1?}D;
zKP%+KbE3JT{vq>n37A`Ra;u_7ogsh?7e3U6ddf`wYDS@wL$<^z+MI0{@x(F9*)9+H
z!~$}q<v)NqpDTI*E@^iVbG)fK4G#?$L2ik;Dm;H4<MjbeTdD;IE9Us4JOdX#Ov+4n
z-SfGHFNb*cIv#!^_7&_q{jRU6?T_=rrON@wJ|Asxn315W0iw-*QvfeCY-<L)0DTrm
zWLMPw2}(clk5PV>lH>RA+1Ac>WHh5PA9r#&<)N+?aowV6<z)czSI`<}2$zY-&Yr+j
zgf{Efu|{lbZ$v->2&Ed})f-Or><!HQsgVg8X|z|<-##x5wc9l)eNDfBpf_E8_jhdh
z8db-CUdLu;8<m?XWR&DFiRhG$<LK)*zt0gt1I|2W5jhP#o9nAr$<^LWX3F$|ZBM$v
zaD~Qzu5a1HpH{q?<6_l$YaePrY6so#tZZt`UKks_BKXz-FThotkXuJ!HcVQ*Sc=Q2
znqYvi58`{tG<>g}_fiI;owM9;3mD@g5P?|PfVYyF4(*oStq7eEcj?8^PfT-SW;R=g
z`?hT^zin@fvi4M{2I1{;n!AU}Hn2K+tFO{lX=``2*oT*vm|E!APfMBk<qKZi*nNhG
zp>uhZ5f!$KlQL(gf&8Bu=4Q@OW^ToFP8ghyF6Qb8ib~b8Jm-?^!!{Bl_=kJ*OylK+
z7BN2+^VE5CGH7yaaqo#PC{|%X1IPvygA^T8PHvUOQVVSgd@)x805U5Vf0|JC9>RT}
z?g8j;&~nx?p8mP1bi7D#j=5t?mGr}b<{Wg}nQ=%N)0jpPzdBIHfv>|2PDl>_RH#Z-
z%8Jwgcf3TLetK!LCugEulQlnDka_Yb>)(tGQw*}$Ifron)9F|86CBaWPFz_5RNjP}
zd2Xn9zfP}iU!V~9<Lgd71Qi4voCi4bYq|h%ffBs0(}~)&>G1zsW%?YY+}xM$?Z^U8
zn??;QE#-G}KH2gfX!I7}A~cGi@v`j}f)mmXCJFZjrC}e0WW(wS(Oh<$3iE4En(#ci
zIiI}%Ldr=S%VRO<j6%@WJL-ilDS`o35e~aXo0F5m^+d{}!c9n{I?E#$^2|o<WMUvz
z=iKULRL&lkXYsBYScAL>CSPw6JLAn0qAXooAMz|7`fwRi9jTP={Hv#I?pQk$*3}`n
zXRVEJ(aKm6(*eC!zj;XtC9J&$vSAgfN;KPtSN%3=BV?iuQYHF*kjLu6sb0MUFf;+J
z9a`WZd*d<Uz3T}c^*ygpL0@^pHr_|=ei|y_<|l5YOu;^_gaGwAz=;=^c%}654?s;v
zxiC%ujXTqDba&b3%aRq!#H7!8hqp2Z8J27OB_8mzeXl3;14f<vW>mc~xu<0H@xpBK
zy=^_~2))zK)?i&WBj6hB{Sqy?Yay62LF4reRG2nYqb%|gmSaV>OlL}GJUPIig+{K9
zfs5U2jfD<f6u|@qI|JJ#Y~l2n=Cx3N!J7(aK~q>yxY!hv)~$$vPevqMJ_Lj_b!9!(
zEOE)TUg(N}+>;ZWp)((wcw(SPY>Scf?xRSuzxkE;+NCwbVn<{i1VRP`-bQ8Ws%J|U
zAwrLIVPk+O!kJ!xAZ_%3<^&iieB?SI>)N3$8EO|rd?+{Qz}Z?F#MokH#U_;mlJ7Hd
zTgAL`bCpKx34;X!y-v>1A6oZ(%<;2%NzR3(Lo$*xJ(ekbm<Mzk!AVgJ5)%^?DKS<G
z_gOi$={8fh&uTN<<@Ihmp3jhTC>*2FJ|@Q^h(%7$RXo*2i<|v0g}|)DF|qJLW^7=l
zz1-yImRYLF2u_qoi+HnK{04#I)8T+D#|=P=m9D-jtW8kInYIg$&iHOPXd5Ufwu{y1
z2X34*@7s6ZcBIPfKT(ozCB!**2wQF4WoVpPvWG3}&W^d@^DRriG||YS7@;)p^p8tB
zZiK(gRpq7J;Zf1mG(#>k10^Se8tu>5j;d$C4pLf`ug!{B(Rx`NQ?aO5JT+^>Q?|7j
za1X~-D)%zFQ>rl9iJW_&XeX_;7R`ml?F4$=`M|Fh@Oogd9u&d4a=z*xPlorB@Gws-
zh0|JtyDz7KKH(>dVioDWenqfvY1xNkB^cfsey!W<*XPO4BwDvT24-A?GT@g32yv+K
zRZF=Q7r_d)FekLXfdl4lkzlv%rQ1G{@NQc1^N}P)O1EP()KJjNOk2~B>AUBw7yM>0
zTe?5yp(Jaf;Sxk=^sfA_Da7zRuQh;RzKL7Gd<P8P_l0^j#nr<|6)i>2_j(ot0ycZ*
zoRoEW87^uN$Krm{+C!O|kf^<gz*I3>O3`o3W8fkgvfi5ty`e!&(`M4|5k7su3`$%<
zkLQB}d>MKtdLblhe8Mm<%y1Rwe2OB`L5-5<PUd8%SR{J;^ul_UfeaFBhcYYTDo!|-
z36p-?jiU|kup}3jqGI^a_~?MfM6TyJ&YQxpb3q+l@~qv2!9&Uf*=Kg&M|jUY)iXpr
zg$M~k1E7vGr8Y*8fLb#g@eKeMwimMilYlpNzFQ4Os*^j5FBwjxkgH+jMe-1A!1hO(
zFRYN=j6g#M+C%gF2r#8RjD~?hyZ5bfL8NOU;equkb|omT&YU19cL-h1__ktGU2@Q9
zETUOVUSKk@1bIa)WY~BXW?VxoDz`fNGxXi3wP@s*??-7`@C|z^#UaZWu0yFjFQ!})
z3oIy<FNUQDnc!v_4D%d)rq<+D!!LNhX5;dmo-Hwsr7Jz8_>w#KJ$6~ka1$is4&|cd
zEf7$`-23rR-oF3!{9*4*h8-Q$cfok-2)V?hkDuYf>r>hEU33L41~x3BVxFN+rAi}y
zHdCUw&6eBLDQIk}I9Ex_P^yf3l5nPV=a6q<+Qw^>(5BAoXWMNju47cKy5^FDt&-QI
zt?|Ydn`V9@E1}CON8svv`~J*Q$!D55k5@5vfbyr)i2X&-=R*tr$|Dri|FhO}`XytD
z228sPQeXB-k&2b#)}Z?8FUJb=KT|U))D>cmRA0FjFT@3c2%l)Ai{lEyzD803$>hlJ
zy!1GT?aiN^4Uxa8O8nkGeV$?t^7A*<FhO3%Lq_^{_}B{PZPwX<+PiAf3WsNE>aRLo
z_-cxYq8|ktH!S{r=lJREZUNdb40rSd(k^Q{ZrEr366DR4?{M2_UQTR<B$|ijK2N(h
z@!7X?&v3vS<XR0KJ8IkF^2+xdxWEiD)lL3@MP$ROuL^`wOUVeKcU+dAs3vHF%(bgY
z#}JuIplRn;Yqtg0z0ZVrkQsZE{lW4X(q`l)`Ge+4ey|0Z9FYpz;NMt6luY@%#WQ1R
zaiQmRWlUGT1Ujz^x$m(s7R*5F;?g0NK7Wv`JX4rvg~)`?s+;+;XvEwmV|v(NS*>n-
zEZhQJT5yFVu;@-(2O9&0Ya&|Xr1+V08F!~Z^_RL_msq!>x#_dsXB5YnrS+Vu(o+6J
z*heTz1cc5ICjqWUCn?i+$FR(;LcgNTqbx>5Tuw9h))fmvvQ}=I9k6nrB%`i`*=MGs
zfa7A=GDAHZkq>_EB1IED1*mHULka#lZLBqWG>gZNsH+Z);a8F6cAQ`2R5iPFpp0XB
z5}hWD`Js9m<rT4%<}0P!lG!M?Z%ZMZ_aR-a?9F(OnuRy}bKh`3r>g1ooC&u9sV_Ko
z;5&NRgMxyH#s9${YyAh?nF%|3C=g~)TEa;+3oO<$o0Z$Mi1aLyN0WI(5r4_u_3c`q
zob9d*(s_Dt@x!6J6Zqwhf5xljpoi(<8zi|xn?I=jslYj-Bu!bSGwvl<v+b57|6DNc
zjg%mikN#Jq{|ZHsd{Derk-(frTmDWAVxKIo=1EvDG3_~(gwR%uZ>5VZFl8zA*;13C
z*RpIK^(UD1`9mqVccLJgC6g2EeRg$weC1lITMR4@Q(B4$7t&qVyIfc(gwq9N`IGc&
zD`e2;b~byP2B*T)LMuU9L!&)<=)~3@$?yaIYbE8uQ_-M&E)p*bFJv{}8aRR}t&^HE
z&klIz@)rVvAc(PBBNrR1kPV;urF<NX3=V?y3{+A5`<GD0x<kK;6L3^#BA6t#^YJk4
zN9vUs+<;J~H{A&hs!TnCOnmsq^!RBe+xym^16iHEE0WKTMN^RQaIxVoWr?tGB)_2!
ziXQko&{ZCD6$9i!?2-6Uh=lD0r946(Y!ef8K?(k8g$*yxH3OfNx{yqF^2XBXiYhUa
zTvxX#n`FJKj9r6C$F-JH;luHewh{cW0oHk=#o>4fN*1bUSIc>Mm&L$@r{dH>id0AW
z`^|DYk}G$L`hvV&(ln9tHQ$b+Z30QLJVmiRM+HNQbZjis)WI2T#aSU)Wf)D<fS*29
zvH(LTnE2vjDGD(06$n;{%~ye9q*L*ebZ1Y{!$yL9^CR;j42y1=RuOw>^Hbt1E|pXW
zBIF4@$bw9t=A#%|uq_lK+JVp2dE%_ZLCm)w;+B!b@i1FGpC<bXblxd}&%!y(QUWpK
z2L3n~!<((`$)u_nNn34vF45$&#@V1DAjk%nhs)J}CN4>Fem{JBfm=zYZjMVlvE;8N
zWr6g0fiPmq!VPW%bH!q(6%mh!jZD#WW>1Fn831od#E<Rsxwo1=pga@cJfq8s#v18;
zL`sCPSUwzbIrbfx=-C31xdo@AZ*0mthXO#Vz~MAcJgd-e%)q?<OmK)&g!XaT?W`($
z-b2N<-y*5Kxg0j_6G8s#&DHszx4^-I=%BQ>D_0FP{G0G+xAXGPQ1A#z4~g@SJw+qH
z_ZJ9HUQ@+#J4p{#Zi^m7u{k3l63UHNYImf#(TI5g`=V~KeRfvdVBx!JBDvw@so=11
zI^T-?Zgcv<wK2dxf7zdds1BenvS79n+T89QiMwA;R9oM*lFxIL%txCZS!?Uh6`^p8
z%(cpLc4OmL<kf38hU&)ECM!$g-u~F&esyhP^BorDx13OUTBq^nxtJ(U{SM{{nKNLK
zbYcf9<ZNw9I6fv7%){0cl#>Jc<X~}C%NBq^sQ2p}Bw3x|SUGjGSD?0TxH%}VyVaM`
z--G;L@Bk5hs{fkB{Ab4UKeHGXX3qazj<fu?DTC$zWXhP;lD6OZ&vG1rPccBGxqGvo
z=Jf!>dqN1?7?=>96ruuCYB)q#P9koc?~e6T`3t|jDxbt$EXkPO&2S*eY~uE^s=m+b
z<xVm$k!0Ne_RPvVkvtx~UmxMg^2o2IZL+-`ef@pq=JMzT9;v^>x1)hRQDjL3P1LEo
zSEBnZy}f^k=ssr-W4S7T+-@D+(tFqKyF>GMz21Mp4s?u}vZZZ4LC7rV@#NJZ@h7D!
zpDx+`oduEVn6rKU<a8UqU;an2?Xzj{PJW`)knm{lohY#e#|*s;%7?qtY{=({zQ4UG
z8~F$w;dZwV3cFgS3m*T8`!BQK98+DX@2b75B$<fZZt{K%awlXur?b_Rlh1>LW4c|H
ziF%!1_e!RkC*iV{Oxw#b*bn{qDjDVWbiVyBUutXu4|3@8jII`&thwH4OnJEcH)&$#
zT1=U$a@^`x53D%NsS#9?Bxxk_)9m)9CB!sTY3k==8H_oBs2J4Y%T`@(N%qoJ;<0k*
zT#3n4e#&NY*<H0sj{UHp>QZ%;_Nc8!8Z$jkl~e|3*G(H<vZJ!5Hd5-JB8fW4*a9tA
zTkYDhF6-n*>HGRd@IPj+uz>K<GQNcusf@g#$~_B@R8Jgphcx4A;={c5FE}lteGBKD
z7`*w|yZOe3PoI^HJ?OWwub)($E3(Nu>XO@}wyL$Yb?xh7r74Lr7nz#3O6DCWF}?=1
zs-5^%Ab8Z-eN^lC$(KkAWvr<e;a(WwGkF)(n+o38eH$U26Os3qZ)?EvGtQH7HSRV%
z2uwY_V9u02ilw`^tUrlr{XuFw+IkoUO7l)={U{^A(7v%x$vY3|i_kF&j%uJu%(6TQ
zpnV+zO=Uv80_ZSAA%2NWafCC@1Jv3JXo2#1Aq)#@b7V!#)E_?(Dd5&hwM$MCZUww4
zK_{RR*Q$?wx39uai%d|!jvSf+yBy@8{UGxgTq7<8lI|4K$x^1EPmiaV*^MQ`WD#@1
zB;C^8-WnY8)v213IB`ufpyh5z7-b-M5>w;TLz|^FhaN8-np?sTF--zc)eq@qJ@r}r
zN$Vzf%A6gnkOK}eP=RPEm<XQfdqI5Tk9~|<xQ6qC74L=2T#j(Q72D${`>*z+(a#J%
z#wA>Cb_+oT9#aA5?A?``rA2|74}uB?`tH8GeqSUU4#c-ix?sx)Lcp<jVhZH|zl)aY
zaw<_$^gU8*WN!f(r<M&i>ZnWTcr~nWV}jvY2^3MSf5I0piu@Sh*>{b5sj^J~xC5+h
zrUt7xKEQ-+-eb4t{=N-?1Du7-`4aF4{sPJxaAqpP>eZe$KE{vx>etpM!Et^o0Dq<d
zc$W9_Sk2MRHg~Q)mW~mn+$op_{D$U5G`Fos8M_pDjzyOq8uotm90nFsJYbraJ$3#m
zP3EluEE((&zctJOs(^^tONnc$A_OF3$N__=O0=Z3*on^QtwIchtzWU_T|;md^hAU1
zD4R4LY#fl;!wDy}g9az-oG+>}1UQ{c+Lq;&0b!ShkWhCu$a|8G8Sa#Dn1y169G^dF
zPG$f|!5kLYtedw5Xj>S3oFCa{p7!1f@j)tBA~Ow{XBdU&4}ueca~#2>DemNf#?3=j
z@e)t%%yAB57SJeS(ENlv*&xpogPSIMP&&1O%RzdiC@|sC(f{tN4`b9^?~NAT1uhBT
zL(L*xchCS*D;O+V4VR1*RHcXocuLZk75WK@;nt|wyb1InxB{}ZpY}@%6PgH^&z=Ky
znFRGg8;rCn$3%lWf1XH|$rm6W);a|}Z-GxTA8-cB<`JtYZ=hsG6J9encp7=E0Z2!V
zmcT!}?6~oq$%}FX!!|e0DWfWg;6m{n7y~$41F%QesX~qz{imKer!;$GgJcJrrxZpA
z*%Fb81=ArCIBl~ypfVnn1fV!-{DlD^gXhzAoTV8F@xug=DEtB8%+=Tf2%v|~t`7n*
zyZHbyt|Z2LfS@2tDJ3$^6$&_{c>!9Ynn)t(N3yO&Z$LAAwp_F7b{x_n)2Dxq>GXl~
zpV0|Y%x0dxRxvQkq!H@y#cE3i=Lc?MS)r3JMvIzCS9Nf7l^Db1Ixa%{dtKng1nJKN
zp1;BnEfX_Jlf>mlWu$L6CzmtAbcVuV?8_NWG-Rm$N?Zhg06|_E4y&ez#va#oy-6}p
zvdUE8kav8#Y{3{F8llev3;j@jG`l_#>SVYSOT1lZom-BU^$7rH8b)QdRy^os2g{Hj
z=fdBt=Wwt*CLB+aG8cPR3zp+J<S=-cdl4|jc$Poxoi?c9LE{mCQqF{-zLKD^@*RKu
zZ7w5A*?|6;l}7gao0ix7Q|a@<X^k#Wecf+&L#!9J^cg*aD^9eoa{O+zW%swv_nJO)
zglMT1YlVFp3?3yhPy^qlJ=P(~ZCie}?n<~gcJ_>3fmyj^%4f;+KC1+vAc0_CMcIYn
zPX2D%Oh2pUpwH|4WAZ8i@+9zT`O*vxWT$+e&Imhzy*POQh4~PBUD+{}Ihcf3gxIS4
z#=thac|}jMx(vJOl(>YUyHESBQMT~{EPs;&z@ZN$00~q5>D5!hojf+Z^BU`t0kuhT
z9X{)(c>~O0>R97sH-1^;>gDO1e*bvms&BhJdNDmAGY0deD+G2L5Zj@5)(F)skWgA8
z7h_r3C>Qy`3y!gQ%m6RQE05DEQj?GkmwVmn#_fI4NnFCi;t){r)@^oN{?D++OMcd8
z@vtM3wbf{iZ#dLOsr>!;1}z%+MaYrgLwFM=RW{u*j>DeXax$J;)~;A@vdlQuk%plH
zTwv(#dSCEqj5InjSlG>rLEf8VOIaf{=2#Z2$=amwzHRLy%QOU`baCzoMfldJ`#L{x
zag+k83<cD7e~W>x%$q~cad$i?1zAh&bO~g);=*JJ;U#)aJF8piXOnNpSs*03HFZN}
zjFSu+`2zvcjL53f1<!n-(z+W4DAd-`d|6h#yc1IRRP)QHWkrf$u;F)i%T?RC=w$cw
z5ZV;Spq@HBAzJFES&n;a@=_!9bRuY4=U-oTyCm7~j!Lg$7=G4sU+lKJosBDz$@3td
z6qe51wtX?LVEqrP4Z%n4<9rHN)?wn;Ow_~qf_pkv6gbw6Z0R!FtDl=$2h$Kxb7uY2
z$owP*2<Ra3MjCh?Axv=cu5myE@R4?~HoRIEl_6|GOz_C-oHsgN8>(wb?6C&z>YU-V
zf?L%a8JjQ~Iu}Uy3ZR-lZ{&6sJ{?kP%-0Zz=fijF?%mWR341bmGi}EDd;zRBxPQl?
zn4_p}BSo9;eI376O;O*JQ6Tvrqz|uO{<a7SubyOYnlC}QijOeWX3SpfaD)N#i}|9(
zaGI!0V$E5^IOrh=26pFDS_vXth?QqGmXn2VW?Sl@=Y&28E`!h~UUINyZ#K!sT|2DC
zA(|1Z*Sw8OE}1OxI3x&x8&TO{6Ot&as|hD?H50WE5;!?t@q#n2kNpvlO!KlmQpyBz
zyWrbs^U51`M2T0bqjm_i-5ok)SRR$<LPk4oG=P+$@A)k-7;@EXI*E<UD1cY<kdxg7
zNII5~rGeVgB#lmUONWbdxgo<a28D~IaTJ^GMp}|KM!)}H7}hxgUmA^}`nxHxW`T&G
zVZiQ$x?-z|T~Gw|JMcL*Bv0YH!V^SQ*cU>CK$IJzaOcf8B_Z`BNzQ6Zejn08^*Xw@
z*I|c$Lc($sVzn;KZpN%jC%mpE8-De043}^eKGBza*`?Yh_Gl_;EL{wt6G2Y3lUC>z
zw|&yS_VQLzR@Xl+yuJ%_oFQ^Bd*-NcwJ`Ka6vd@$w0M!x3SpYV{x_P9!x=sK8n_Zs
z5$r|bJUO_wLU<FOIv#U4E7+OR-@K$Aud2_T#18d=iXvGe2~SU#v_7F;Z&TuFYUz=>
zJ4QO!c79lr0o(f4z1l815i)A-v60?A`*7z4A5935Q0;1;mt-81k#!xMM_5?p_6#Dd
z0?E^UmG#pWdz`xZpU`iu#9CKCcsCF=G!9QnC+Xq!bV@C}nPynYh}q><F0`|y0i3k0
zIKS|SwHmV4a!}VFs{|DDl@{#q@gXT2EA!YkfN;mp0jRIhF-I6^1PI>J@R&nH-~SOP
zsN#mjV3=NpquISVi;Igi$6zVB)-4zn0vjkfIpfb@kNICvIY>;e!Mse<DsBYm``&`g
zAe?b&0-dmYS_8);qS=!%RY46e4rlIAqZRY{*i&PZK1_y13-F$nP@bJoYM{J{LxaQ#
zXtj5*HHLOd4<Egwpr%9#rvolT9G|qb1W3<~k{As3Cqi^>il+o?g}|5K*TPyXTxNp{
zWNy}hQM%$R`ESIr!pcMqeCNPbU6)|j6xj+Hv_sNg4$I|$?;#vKHh@^(YwQ7=!!5pq
zOf7WasL>{O^*HP+8FBUmC=O{q8%^i*+a6Ql)Ata=%A>u8IS#rT0!@+yrh7)U-nz&+
zd8}%LWJo8&YF+D=x>i(`*xV9VTcG*6OTsAo^cTwHg9W^lf3L&TPQ2&zPJe;i8P5u@
zlKw&OjTMhbYtR|!7&W0zpuDKcp<%xr<1v*kZU2O^M~$K(M_pS`GW?zI0dqRQ9~a0C
zfT0n$QDjuQIXj^iKg&RCB0Y*|_EU<}ykyXc&KL}(Cvz-6n?`tM&|>LN@H0{cx&@EF
zU_qhApJmjIS&*3psS|TZi{?{i_Ax$bNR4sO-*r#4l5ROpl8E6xeJag=0<DVysCf*(
zJzgRy%)q?e+Tjy1j9yd5&4!Sm=D?g$WIm171p+5omCxe~vC%%>maED4mp2utTre2(
zAZ;IJm~xUx(zH{jocv?6PDRIbDDU_7Ddk!C-rBdL{fGL00a#N$S^pbO|G#mDnT_Rt
zjWaC&ZJc5GzZqx#{kLvs4AJ*Y{eX6Z%87?vXN-=2!YN5fDh)N<4UZxfsvFwLFc<*V
zp!3LCFIE15zs&m<z+JL3C#g!rF)%alcDY>s?fMRql&0`~{HME<w|H`P^Uhr6m#y*F
z#xD7eZl3PGa(Z@Cogejm@Xt%8XCx`8JQQW}^mcPgzrOAdRP=yz6hxsEq`Z#Z{L*dF
zRk&sQXng;N<R+?!Sd<Rs6HGGbq-UBA-rSPA<zKthuL$|(9umyi8D<s#kLm1_@TzTf
zT0g%LI#6iF&#`=_$&EsH#L|)WWaz{z`5$9F<C)&{Z1uXOD%;Ogq6S3di^F)sQK+Jn
z1It}C<zC(1{x5JW+Sq?Vf*j<r%7%X$=Zjdgpb4eaHE|IrmqFDJFPXB!OEDd0%dSfK
zt)H?@72C&szfoqP%$a3io|ft|lN$2(Lb(>pj(!5E^HEgtwfpA=IPcSu&-%=ys%^4W
zw{02O{Xr!7EkYdJBy#kat8uqfXfZRLSz`75b-#-V)0jji^%=3W1)+;`yE6FfpVzj`
zy~B9h*1B!`3-#;W%j}YBe!2ab<Ixa;OlNs5+l4X4&RcK~jQkUlVOMr@%&~fhKwg_6
zL(;7&9G$MZw&;Pz-OQ=b3k2Fx>9;wAIQ68VpT{u0#<$6KNN%fFQ1v8=``j0NQqe&f
zlf_prP&G<X&yPmT^0ID8wn2uZp35Xz)-?=e@Nyb$FZSXRmkJ$#s^<VH{rMZ99VxNS
zZwK{2bR=A$ooeojxFD05YVuveG)Ll{Gt4}_@jgtzvDLOcvT(C4%bCmFn=u{y$DlJL
z!_xwHeNoIgDR}OHlm$N7ZQpMd7EoePbNOueMU=ZU@q>o!@mZ`#kec<(HDJm<Y4~ol
zW@&)L17VkAxF!`~WO>tp$*3HNvEWXf>`%nCiZxr_BPBBQ8frS3OH)k4LBKE+*BGx@
zWP-3+`#ZG}1oTr2xhZ<%T1Ox~K<F`Lm(*hC{9@{R*EzoMdW7p9j#>2qrA{+XH76od
z&yXgPf~=~B`pvcG_1?Xb851qnY%JbC$>G8%Q=RPfN)QObXtOEs;EeJ7Zs&?Jf8+-*
z)Fn(mPlp<7LKZ$goVOZVRuui0Y9ko55bB1c*{}{QvJDd3!?9+i)*9yrKvk+X%pr7f
zk*ErFxZnL*#t|{ear`cnmOpNq9W(Y+0XmE04r3JX-<SOkTi$gBOlN@Yw#jw<LEH_*
z>NvxN8;fR84`*zW@aB?jby%W{G&U09zIQ!=B!4G5(WT{%MegSbSfS@Nc@QdF5Tr|{
zWcoXwyPer`XxryL5Ye!b(5V4o3Zi&?|9U;oZ44or6%4dyhCu08G$>f2X#s?8j<|(&
z4%x6kOuMczcu>(xkBfx+kuDgFEgRP7ujn1zS2H<B8gj^?dtjzBSKyQ>VZA}!%K#=#
zdZh}3X&5!6KHK*#1R3_bqG28c3Ztj*IM1UcnRI|4#SsW`g+4LN0cf7oh0x`A#I+tM
zwA21@Uw6Y<bJy|CgQo?ny*yi?B=RD@1G2=APwJ2})+V2tR+WgP0Csn-bg)Q8lKfVY
zub@YNJ0qxerUTmj4OOCxct-uA>a7jiZ<qnCKScbjW5aaQV6+mU{Cc%xm@^^3@sZnS
zfBko+rCJM){rKD9$>}>m-wO8g$uCiq!dKoB`?~%1?Fo|!m%Fe4Ub^AxEqGuaHg8x3
zs!r?evtw%L$;S!wJK!ux5il!F;v02ArL?7mKoLvPMt@iKdUpcR7$U&^WmJQmkm7cq
zg_(K363sIwXoQJ<C5Q2YLcDx3)XpI!HMimw(M%MoqMYF9e8)T}Ck60P$Nv?OfKllp
zi*mxi&FBvmM;=n<gxJ{E#nLg1T31^_qKKymY%DFMRv}QqK@csbKsQKA_?<xuuH;ul
z3!=?0@FnrTzAw!92{^n=T7`jyI3Iai{lW{<!~6m~O)>xGnga-c`PCEkkF#O<Qz~`f
zSsoI-BcNnah^W-A%4`;@gv3?tC5Z@+qFRfESi3F<yM=`0MiZ3)dkk7^*}{L^D=sd9
zPnWJqfoh!x_by0rzGOz%u)LDV76%PMp<VB)=r+}|&$h|Ib!(|Z%M?lEXYz9548DkF
zO|`0(dve*F5unBCBw#qMb5EZsXgH1es!zxW4Pve@JlF&(;OK^JQ9|uX`sv-Q%nJDX
zhPaT%Y9STmaLaz{+h1K-?aSd;$$lC_@A^bmAuKqS!=n(UP+bqvn7-cpv~l;r4@`sq
zops0m*?YaR8mwLDeh9cMC<;ikw0jW}6hTXUMR#weIjaK-v@7gPBtrajnCEj7q~Kth
z{yK!8l?p)QH2Kt+B_bzrb|Vbv4Z%TIF<Dnlm=wY@C$cAILZk{-x4(Njk=@<7Uc2u{
zgzO3w0~vC_^Xs)8izS9+wmCrg(Ero))E9>-VkyoA9Oi5fV4^11WTa^BcloB=yR-F!
z<hcZy<&_bjZg(}Oa1LMJ&kkV5BB~D4M_=C7LP3weoQ;u3q~Q)K8AOX-R2C14S%HjV
zvi+e99%E>Ura*GMl$^Quuo{z;Y|E<ZzFK05uA$KGy8el#Ce}B|w<Nn(5Uf51POo2V
zQ0qbtr@2nl4O^!F{%3VN!@#lp%1`b8F?LQ}q5w;lF59+k+c;(0wr$(CZPzK=wr$%!
zQ`57$=i$EeQ~rQhD>8Rv>~9+=%&tMAsFYZ+Xlh|y`8KuuwG8mAmnBZ`X?a+}zl1`e
zPF{~5Xt(YNaRvox;7_Q{7fUb8n0l%pw8LMe$hbF4YMDw8dup5l#D-4JJ2|xCaPLkh
z7mz6Y@j;mg-JU&s81}9i3pak$4A@pfRMRz~y5$jl#vy`1BPh%-dG^QvX#LIGk~h&z
zm%~mvim70CTV@~>xkU7+z;qJ;BJNY2ow7!ZW^L1AmF|Ek!-mbpAdF);^?>vUNkR_J
zL@cL^!Fyg+r*`@=PWpZVp__G(y4icQHIZV>ZLCdL->L>f2=Rz1k0dY8##|>02<KJ7
zH>J7CfZvNSL|%L9heITZQ3^;_UZb2T-H3bUR9-J#2If1{$*QO*^?i#XR27^)OLZtL
zuDUT=3UeGtwil$S*bgzSFZ^opoHNjdu@<B`qI%T<Vy@Ex%pzO95Moc)F5MPJiclbg
zq$Sa_J?1c71J1%s#JCi+Dn-gn>-%uwKw3>*louG?RIe=`h&!zWk8+XT0QDk9J<MjZ
zU;&r=EMVSq<pma4XCZpS-=vWi=kIu)tiK#&txuaDWQadsQv`Bj!;AdmY(K?nc178r
z&@#Q!45f{VP$QPp_EMNPKT|)bksfQ>^l?og&<o2O_&~!T+PKzAJzCjR`!*mA9-DHq
zev&+GYB7r#kyS%r<IdIwfl3gCA&IgTv&n{t{o8_`L9GEW3}kKbO@Oy1<-eGl;}KJw
zo->;LF$x;h?SaWn3`$cJ<&a|?fnn9)Y?j_aXV`7n$haL#;<ON;E|!jGgi+`p!zZ<+
zK4y_4bkJR>ACYWiNi@#wq;rYmks$i^a}g_+qWQ1lj}iTnJ&fBtQ~CTYHTF5N--&?(
zE+|mzQ)t1#&99T1{VR|Ei9>_3Bn_J_0%eCD#eo$eWR|5DOm$5TArI_S19tE|F6MCx
z_aXlTArtM?0@_BdsN*w_NW4{M<p>P5R>05S03_JY9zB7>P6~==&cv47Zh*^w!})ol
z3s>gTm^+80W=zhrU<q362X46Otmc?hLUyLAmx)Xjfk#G*xQS;pTZ$$r2wVOd9Qb6f
zfOK$2+^BKxG(v1wA#*x06H7U=g|0Awvqf#G3d|bQQ*bB-IL{DFNN2dC=J2x+Z7)gz
zqpCqN68QaKs~QK6mrOtW8OSeNT1BEE4eM%vWzZDi`)SRVkR^V2nen6iXP269%r1gI
zwz<Nu;1r=TCsr-Yv7Mi`c_2>}6_VR0s=axD;Lb8Hh9b+40Q|ZetGTA<N@W%Y#Xz@z
z7tpnjUFR6c*m+$U@qBx433ul4{Bs-zO8-=8HAVh~lb@!&-zFFc_4PBVWi(@G@cekG
zWu-0tGvJG{XT}qA^H}&^+&5{;3_R=1$)^f5;KPEoKXUJC%w$C(0VHF1eAAQ6_MU(c
z!z6s^%dY6M<&T<nlJLUpgq2-ii(h>W7JdRm3jB8;931{sEFe4|^+GBEg0}<(Phri5
zjQuZW6rsiL`is!2MRYB=YN#@91mX`!?Nj3@_@pnI4*OcO7O4E%c<>~mBc@Xx#Nac-
z&m+CW6$<aRs>22NLYHKN(@wJsYcyK<58YuYrh|S%sHdAEQ~x_O(oL4Ei@c@BIqU&L
zGp?L=rP1Lv=)?F=G+in>izXhlHd^wxIXSg07_zL#L;M?VihR4Qrb3sSD7BV0*NK36
z|KZWH<lZvG<l-gzys|Wb>y#tC-r?0T7$k^|E5C3r&(g~a-exJy#W#}{+TEt00Spwu
zJ?WS)^PeI&=?l2i0MoC9bL_Ou&Pw6r89Iz$HJ~ML;83NKvJW)1Fn{W=kI=ND@F&(v
zQ3^+!OET}2>yrRUmm+pG4fDX-FtA7?m#9Q!cw0Ji25qmST?M_t%rfs*|5f%pHuAbv
zLD|!HWY6#qD?x<!_j8RhJ@B}_u=fTMCOMvh@Bt(a3(DB(6(g^cLW=AlWV&{>hXlaB
zRHj#ZpW?_n?>JMYz9plkkd9W+a7=`K^Bs|>G?Jbuh1jjrO5wA*6hMhnh~RYub;qv<
z%?+8yP6P?wXKJ<k*mFwS%66863Nm(r+)6r+=ZCP?@lD_K#JtXeS~hMccAlqJfYTYb
zDE0S8^}XX3@z(VBkBg_%+g+gsOfurG#Ij;k6oQma?#RH85jX5nSx@b3B;`BX@NG!Z
z5Ohh<&j+DDj9r3C>$MEzLZAT($voPOnMo1@Qnmr41H~k@ICINjRgBP8+~VpS2iQf1
z_9&46;ijrc#AU6X4jIx-KIsem8e-E(;UBlb?n<moJS?XYxAeIzB(5%?0(d%uU^q+b
zfu4XV0+$AAbvSZD8I(MOhbUdnucA?X0n?2zyXq9zL34S3*t<EC_v}G0&@RD~0XYis
zE*z?3{5=g$HTL;X^&p6!l2ix|JiN3J96ESu3Z+GikREG7o*p6a-A8;x3rI2&#US-W
z(&)({{*hF4ZnFEt4A>hY9W?H2PO2<Ehf-IUqmDFm7r`Ia5xexao(%a7&tHu~cU`st
zlxO1leUWY;hS;Z%^z1jdLbZZ&gigp{CkS~2gGfb}(+W0=uj&>x&Q1xx-b@a}SH11&
z(a-)s`u%_poDT2&r=tIF78o-pEBk-1{<Hok3yk%D#R9w5RB+mALG)d%>yy%{BqjtA
z@Xz0NCUZ!P<&LZ&QR^MUg&!_*j=mjZ9$yqqI#<%$&O7+GrsEGFeleq3dacBrnQ%o6
zN!PRe{jxdSP0naSGLpA%*T5Muem(w)Y|2MEm}e;5qnn+5s1tQ?6os$URo}+h0MD4{
zm`DbxVJ%yDa^rl@Oat_4q8u(wZa?}P(6D^!viMR(s{3;=YOVg;!z*c;Uh7FpBBdJF
z@<i;2zE6_720Akqlt&hJkh7}l^b&6$J=5y$KL9(K)Wc!rzO=|RxTmy&W$!E;>5|(Y
z;J;W3AZ@!i0^qNK^=!U3(+ed@t=Dj-?_?QzYBF0cZuzMwLCODFlU)`wqGouJZM+&V
zIz@HXPk1e)_=tU|NTk{{k*=!9*=D95U9z5UevJ^2BV{_`!Z57qisC~xj&Hh^(Udx5
zpO<SVUV1et&o8-XJgF$<{n*^6B{|Wd90z7I-}LuJ>c0>0O&O!5+|9%)4+1laf}@c~
zloI8;r^RXaIotPlXetKTl9eZCgtAjsj=nkO_yFl)cCHmr?zp4u7-0IRMO`s;*-zSq
zsL7{<>-)2T0d%O?<XTT&f8^3stq4iJsPs1WkE|is_}dGmxI*ZOivC0M5w2T}0p?WL
zBLub!Ur=69e{dFu%4{6^0IMd;Vydh9K$G^jk?xl4P-)Vlm)MSXQQ8f>t(DqRa+)yc
z=NK>K1sQZyOY9+Rcd77N);DanSy2htL{J{QLF|gQOtX0v?NbIQCHw-}=@PTwA5PZJ
zBqdQ9*hVr?$J7R#Ob<D2+s5V^BL4JMbNz<c?4p%;t=+Kg|4~`bgsldQ&R#mElrt|i
z!o2Rs71cWV_9qXn8t-tLu8=lfJ5-yUM|iVe69Z!8#_*UAg%y&8^ef<D7YIG&_%h)G
zAL$Qek3O?jaUsTE57rM<8dJ-IPgkGX`aT#DsJFGPBGOAT**V?p(n~-sHqhOCElbn@
zMnzrdJgIVMn@naz=hKEm;O`~CII4Gt%Z{&m?C{6vZzHYK(=JTFw{^2==V2z>Vj*)x
z(9RI?isl?+2SKCV0}BFipA@c#2P;lC$%aR#8msi)W<`iewPKb<EpBlV>(Ne~EF;rj
z$|fQJ58;qRL?TjplLwL?#Ss)i8f_3;a0IP2lb&UfX~UB43cSvNBJHz8bzx(k!X~gY
zCa`W^yc5Ylr|z`}2N>|{E`!O1*dq&@J&o=IDOSP~Ph+Z$UN-41l!Ex6zecXz=)YEU
zFzat!v@Ert>g(AjBKsSs5Hgtw%aFelq)_?wLtNiN{d++HRAqHs7{sOSw9r`vfVN3$
zi!<uOSg~jbm8!A=EV3_pUcb^5OfZNYF9zmteqF{P`1p81B_s(>2hLG%Vp2*<FsE`w
zd5s>h6}wA<YGcbEv&h<T{^944XP~yGVcZLn53L(zC7%YH7-gj?QTfJPC%%;CO=1Wq
zg}<I+7Py{hGE!dGWDavrLI>Cd2bpEsrBP1@6UIGLXcGN7%XM`d*3#bJy29Z|ckFct
z4?v@mW<=)A9LXK0p+uebY^{)RV)im25&+|Ljn(!2ewn@e<)bzvkQ>sJ**f|7cGI1s
zWI4e#SBioDqw-YPZ7Cy)nW!a>T7(%>5f&UUlX!8q|I02MK&*V#^autdTtr}?(DdH6
z6IkyALtlD;Aakg3(Pk+0B+%Y-CxR~6>|fE~r(yg&Z`>PN8(=o#JRN+z6eU0}o`RX)
zh7X15xqW4)fwtU8LOq*1g|-4RT>gTxl=pxFMHD1sOOBFkf8J-CRVX5u=62WFaJ)d0
zEK4beb6n`d_VdW9tZ2`SNe<Lk3PaN8o^fgs{&&CN8&gBpQHcD}MUXW|kXI8(<_jhS
z7FF4dBtk|^pLXU=MB`7^7hYxhA%vDN>om{9NSghwjzlSD1$hCqWI;9KV~*xpOG%xg
zn@SV5d>NY%Q@IL!WaNXLw9Y)}v@sNg*rbj|oWe;acdnlEpI~V#5(s4XZ+Y8;f+71#
z6;m6t<WWOq!!|JP=I9Q~BRz;o_0F@ZPQ0#Q>&P!tDu}nb?0m5HB1QBAx8rcxcX995
zSA+ohrhbVP@?W?KuhQrH!%VpF(gy`Nm$GU&)fp98k=_SnI{YOw$m2a6Wrlm292SXq
z4F`cKy2Aa~I$Avo;N}tz!|u1t{swkQL-RWT{D<{uT9d(Gy#zK}?X;i{%sk5udlxfw
z7Wp!T&m0U`%pa`cyb!ekx&>>jhcz_-Xn}gobvFq9cgVK|0tWa2GVmpks8Pw#N%u$$
z5NY#OIQ^9yxRg8^Y)pGpT3X0a%H-4QCJl!Z`NKmRai5|M@Gb8s)=(e{*ojjdH~~DR
z2M7WI2PT(g4Y+nM0F2(qMCG<%hOsdWko=j_Gk{@tR{u*)-WT(93^X(~=%{P0ML~Tx
z1WDrv=VxjQ*KgO=B!1s7WP5b91~W7$`T2qRr8&}-WBTtbb1j=mR*EY6Nv*1=X7PH@
z+>HD$#U4(dm)8vRba9Kswj6VAYs~C`4ww5c$E8STv&S6!a4T?c73-F9^fxV;D#DSh
zY%Z)7JdQuYMfl1Xr>P77KBk|#W0ObvO9j!a(2I2D?RHOA0TADpi(Wc6e=>k$arz((
zMl-|*c&{K<-sKbf9<x0PPzbUmNkM%dn;A!M%TA-D65Vu^l-t)MVvdtH!(vl0Iax;K
z&8*?UBaO^!3xK$WIj#1a58&Xc`M@R1ZhZ_lt2Pff7v2bdFlSFxl}$E7gxJc%r{(89
zRJ2kH%E$ZI7zL8Z3>pNf*E-bOoePeJrwODR*p&<B13s=uJsPYw8^L@*wfd5Ewg>g{
z!``CnnXMJu*-zi5RbaP&z-reZ)s(WPhE{ddS80Fzy?e74x-r{ev_YbD2Tx-^V-n+y
z5DmI^QcsVae}+B8-wzk-bZ)SJ5|~D~s@I8A7^CpTjpD=O5=KTz?%}89jy}75z!&uC
z95Ji2!3Oiqhf)pc$!MJeO?aOR6^1uJ2b7=DE=#EkLW2J^+N5$Tx$Y+s*TA7<&20rF
zC><i)8ZX$tv3a$`3%PsSrQypz0;yDMS)Bz1X5%DE&v>er-wN1J!O-e<=SFL34?ew+
z!sXNvikk(Qr37}p7>*HyA_Jp5kd47zi3nx$jLfeKihb^{GdL*D&GE?(<jQ(?f6rK`
zb1Q~KOLQSBaHAHw&%Zv822&_Qvv+or-)7y|bZQk9huHqZW1Kw=LOEQs^9@w|+u#88
zS~x1`cq(Xk$bp80*hreZehwmOKOG3kCf*R)NtxXD2*inMZHgiq+Fwa7c!UA4(0UG%
zMA6)htl<XQmkX_|Uw2VIG@8DZZMtSn3Cp{_Q6HOEs=-k3{6gFmbU0LHzJ<J3&1Jr(
zoDN9Un3MJ-;GCE8bePIJA{;!5g#1~Dpai+}gQ*#~6+KL-iBuFB!A|-QQgZ=el8+s4
z0coa=cilTN&7TkHyubYqVDPsBn$uj#q%Z5_vB;vl1fHB?pD))pJ`rUpp0Fa(ujiy+
zQTp37bwj@k&xpbb8$1}P6pjf6K1oALdgym5T~d%2{T!Y9BPX3lO7@ei9sCH(4A_2u
zy%>gNKy4ibZ(1$+*1GPC)t$wz)Q|%bv-4?h5Fa&|S--?B#wfFWnjbzoO0i&Q5Ua4#
zltI|#y{p0J!$HV__U&#>3McZ<ymp*mKqxBSLMqFBq#aA9ab#4`JSWE63FjiPyE2Xe
zE-aSOiCm^P$JQTNtc)6X5eC=?(org|1KebGbcz6P)K*6Ac^QNt<DemppUHF(c@C+4
zWxUc2B6JNOY}fma?NGo_1mY%Uq}%5&WdS0q&0q^nB|O<FoHP*AO>c(&=`-_v#vTF}
z^eu+W;p|m8;6~=NZA65~uUm-1nN15EG%I#ymhRVToxWU>Tv{|@hoLGq4SVFX$bQ$c
zt^h_*$cwHs1E0atHShKnKSocNP_8-FbIv61gVZ~5iJmrS9S6(onWvukp)}d#&9sX+
z0or~@&X$X`kz((7ME%V`7A%Bgwphe1s5D!rc5)S)cq@H!*h)murKi0^%3P};-k~cu
zfX4NDV%!oIO}20UMpI9et4BJea#NrTUG8Zf^_ZTwTe6W-9^d~tje*!U%+4IDXT}I#
zn|cES_{R2^tM$x6=Vm;Kym(_{H-c9?JBN;G51;gD$prb^DE8y(m|V^jzKBh7oy9Vc
zDL;Bx8g$Z{-eV31uu+s_N}Ge2=N!c)PwT1EA8{`4MOD4Ea{VDYQkm!JBIucaUxikQ
zeIn0Yh1b4P_53uu(&wM|QibM6ogYLBo<k+qfwBpla2%IQvLCqjMX&oqUrD}%Qi{)m
z!uOaxf}|f2PCkX_ILd$^wGRyr+F@Z@aB=__ds~Ro@WA-Mtz1bo7yA;U%05p5<l5L6
z=S7YJFZ3=lrVs8BDL+q{nWADa#B1niq%y*z?{EJl59;Q)>Z7+!zc}hC1EWRVdAmM1
z0)Kl)mvN$B_z$i2UmEPcY}zag|6i;9CpU}rf5*+z+O|DvLG5`}I-^R7VkJ&26t_u;
zA~W}=WsAtdYHx@N;UV6fm@)sId?snXx_(l4jOGsdITYVpC*=!Z)6{q7Ccuq9e)@!s
z@*9H|Xax9O^+r8wBy8t>+y8kk%lI~HnBnW?>g+44MKjCurM{1<>STUInkJbv)-YAO
zZ1R5e_I>7s2spJI@Tie=Kd|&jeMSE^<>sNezm)5(sR5x2ufEve5&k7Hku_F*YxpKr
zWj$VDduOUfh6|;eL49Al>6z)Vek(N%+>*bj1QA&7zKLovea=<gDeiBsgVsH<PaB@G
z`K(-T;U%wwl*r19QqZQOHrssDp(MNvetvX(h`ngExV!(eb@{Aq@9Z46oB5agd>uEK
zH}adtnJ~~T_LSLdDpGM3s48+E_b&pUnaCb-t;FMHHqO^T6G`HGzGd5V6PCYU?%#$8
zeQKb6@AakkZVt1;QRm4QzM3DaAqKc8$`WsbcFUyozd2gGMi*upybT>NPYczms|JlO
z{yGVrCduRL`pHb+4A!`~D!5!syp5?dd8t^GQFlR0w<Smw2Fc0^>eO`loNIc?N{Avs
z>ectGA78H-lbsva^<@tk$Too-_SP!4qA!=17pG1@^4@9zfO1L&nhp2r4f?-39F+Yf
z^4*}6#6j$Wx5*6sH9Py(kyi9zumwnHSwDl{i)hJh8!VGoEgG!94yoIw>qV$1=hk&o
znU+nr{Eh0%Ygv&4>*xS&tHiIYTf?MIj<=8P)w7${tTH|a4~Y84la~e)W|r3JT2|Rv
z5X2M^6^14^mGhcg{0-W4datdkjsk3p-^H}SFqVRo5Ht4;zL6&*<wT+72|CYL!pK;v
zAqqP2zy5eSE@vy(Cl>zsldf^sg`WVD%v2G|0SSuC_}_77hMgoMQuP}9Kn4vOyfvR{
z`q5w_uTjg3NKZS)c2XR>uHs+N-AY1Sja1|Gz3(qn_i~U1s)}wvf24c@r*&T1wqdZ<
zZD|@sRK(4?CL0(;QK~5d84kHIB<$##Oxw2twc?Idl9LB;Z#vo2$l6GI+QXTl(pN0b
zRgg^}CEQhFl7?oLgINqnA?uZgFE|v$CEXRu#)Y61M#lq<^>POfL=~!VvOlMfoh*pw
z@&M2%3z4r*V&#((y~sUT-<ZXvx%k3()XmTk*i+cExn+m7pF+FRZdV)ls7AJl$Ofm6
zy+cDrGklp&2c@Rof@FU31OdN~lB^lyd$te%b%;H>Nu+iH_TXcutq=sn#b9&y5-ER7
z`#wl~Fd6iGmDF80istN-qo2leXE=stJbg`w;bE45&he3e)p@6JVUnZ`F1?dguF3OQ
zl0Q7OOTq>36C#V<E6UlU_@kMWBsawjp}(Fnu55PG+#Lo^P`=8)L2ys=?r9LlxsOK4
zDok^T%0#jp6}bR*35*~wRrw7tO5)p}Z{`~zDn5&Kb3IUw>6+9mb6;zdRumUTI0-Ht
zN;NPBh3O2Frh0+8UowJ)Olz?3{xcwv57PSbX0Kcdd4j_u?!s7OEVrEC4;r)Cw%*-6
zI(&pc1028X5`+PgfX|=%rVHVTHxh`DEfvhZ>%hR*KCB(^y63aTp21|GUO55AURLRI
zR?@nk81{eW2DD~k$)U^x0HZ>x2S|3c3^Zxbr~@o$j+<`5+-Rc{#O$6gnNZ$0ErGUN
z;jgjVyoLk#sgDqpgXT}Vf(qDw5EAxNKd<TkQu7Nw2w-aBhNsMOY5kxK>WE~pY`!?5
ztDtCJiZ}xS&9CjEtbLpzSk`F@)zMh$h-NDULH8vFkNOQ|W1%X$pl<+`MCdcX58!@>
zY+D3Q*oAZZA=*2iJO+7C?%#y6?YbsO4h4~qBuNpGg|o=>8e)Z?BA|aP*5*QFt;n};
zYxY5jbzrbeATf)@=0J=Sw0%tnde%qyD`r}K_g8Yy&3}r3lsXUgRR<v??v37B8CrUQ
zav%%?Qr-rxWSKD-etFfJXn}2RsbT_q|Ep~;bG2Y+!GZ&fg{Qt(-fq++6*@0ZZb$_t
z3wYFC1-IolyaFPS2;nj<AjO6P0N1RC1mC(Gq}71x-hhQ5k2*|mBtb8gr!5-N+h_zt
zNO0XmvRL2CFozgJa^4?`SV|L7U$XQ|Vx$yhKisJlg@y})8TC|I8$>%s4IGn09hLVj
zT)|>`En0!lmP4U3H$*uaXpZ8XlCM8p{uogo<Tzg%7w|3VoU6+}ilag(6t=INWWtOs
zD5|SZLK|e5>@Jg28|3qd$-itD3PT1*Xa5BX-H?$fFbK^X4^z<A(8a@<UIB~xyXc>d
zF$kpCJPJA>0tM7KKN`A3r7R~uP*J95WpF?d^sqv3acl5)i$}2Xq$N&12Ap*Zo9^k+
zG$(SOQ_93Go=_R!%c#cr!CxEI!Jz3T#_O<u=xh-@%~7vwl9paqpmYs@OD~YI{tGUd
zt{8y~Ck?3-(wmmMfEyc6_O6!<^<$>11DTVfGOO^N)^&b6e>YFzrn+{XwgEgm*;&v_
z$Ds>G-Pe2+GNl=L_D905<sR2yHqY^VX9Syi?Q%;CGNR?hdb*Y)F9d`)NiG_^NOksu
zlU#kg09q<5VSJUK)S@?@5ATxxx?2#`5?D9p2DpaY(V9hxH5zPg1<>!wR(%Z$ed3XD
zG)JRX<imjqHQ5=m)(?zNsddIYqXEEI!$H+aMP(9V#kc|Ablfr+1Ny_=;pf0IP7!1q
zh<(e3HU2<f*)YKYyA%5S`{~()ML21)3B+odigQVL@XCyb#Dn5HN#UH2ms2SpUM$Qo
zK{vq)9u78$cVnJqkW2-F9gBge=82#EI~~6%X!6hsQNOqVB3)l-F_ZFP3qBzGekK_W
zA*9Y=_yT<$EP6F3X(U1vQntYV)5Z&)1N4{b5iOcY779HZ7_>@w^D^Be9=hRhRdj=i
zlya!rq;O)kp7+us2w}>lC3AB+T+Og|qkup%+2;;3S|7g&*UP^T4v@JCoaLGC@=xbL
zYBu;pr)U>Go~py<dP@gGi%}u8R@#!v#;Gd_zE*lJyY{J%n=TqqJQhk2p(VExg(~As
zMASK2k_IyjY_dP8>IPU(&n?;uU&0Csw*n!kys2Uznj>i!Oh%U-dXR?-^Lg1dnqvd<
zfq2tPQyAMbzW!^r)UMtc;c}hottxl0l-r&RR8-pp`=#3nI8~K4eYM=_G@>3X&=QUI
z9e>zfdH*EP@P@1UiL|s3Pe@@RzHUJuQRUs2`vVl{z^YQNP!+hH$%Y`c$>&mLYADFu
z-KXfrkSG>IX@u*@tDOJ8EZ>$i0YLLgs=_S^)V`bE2NNWk0=wUec1`qfqK_$(4sSXk
z#C9i%?TX}wP-o{SO$>R3v{Ix*ttDpcT;q8G=~5@o4QvK&h-r7~H@nz#HG7>2a#w2j
zigfnGZazQN>)e_E_GehEt}b4GIK0E^d?bB>_Z5{$my_9&TZBe;`09<UBOYXj1gVH&
zbV8t-7Y{pE6lv1Hbsm>9qbGW8;sDj6S-yHI>OpMqFaqH>5#x|2Ifv>fa;@O>vAaq;
z70vKJ^U`W}Ke)`?Ex{Vvj>-5=^h2alot!!(N%J32uK_yHTbT2IyOOxIT-sd|-J1?#
zoAUQt7dR(Bt$ob%i1wF@LCMR~c(B5-b59u3PO@ChF7hciQ$+N>iB_EKXg>ClNmyx%
zB9oRmPmH!kg38>WViL?(NFwc0tAf_?e$c>Hb<BuW7wR7aR@DcZ6cA3K;MEBA?yvS0
zu`1LS0uXf9laLBb7>Nk&%7g~wAx8v5m2$+Y=_T7_1WR&9EQ$zy7>ka#8D(%T031oX
zdnw8+!HEM`k3NCo>%LR$#zn@E09Y(N8O0d)6S^)Pfe_|3<b%XPwE3ngDdVkniBQEW
z1`oMR386;J?REvkQ>8hfVUcSh{#}6c5D`t!<E4OTjpQUjO1$Hm8in}GHbTm6A9SM8
ze@mA{5s~0WI>drnR0blC_kLWGhwSYmOqr9Y(kG@0=py&u50_k15B5ZC{b{QQ<{EYX
z^HL=b$((pbv-M2JnJ#yoTKkx+Pf&eGLxd67BftO!NB0WUOL0|`oLj}MkHRClPyZMp
zLDg@MKz@w0HH+pib&lJ`2zu^+OIz*dFNCkyq2y=}xqI^YeoFDx1O8YH7`}>TqQ3gl
z^i<JY(n08D?yAu{k6?Th$C^yNI|fv2qZf+NjvHWk90ffipXnN*T%dEHYV&z~gZj3-
zjGnfFEok0fXj_(C+9+rO76XLaA4N*=@cxa3drc;$%R+-^H^WRK9)H#IcCm0&Uxw%0
z;y#DA+?3q`LiFW~EKaezSF;i^&_4_N0@?J6`_g*r{Q#CIXt@t?5*C7AT_dg{ipy?c
z2Ig}6gyvOLFDJn9&CyKS1t#KwvawgzoC#sG7mqXgCkm>_dx=!OCv6dUPO#%_R26#U
zUVD#c({<jJj;ETGI;Kxomsf9Rm=h(xm3&1jNP1q4KD&-faDk0}5EQi?2hrf1e4@D9
zR{gI4d;c}qBxe8s1g81VBAjfRYA(`)k$(kw8y~ICH?3js>WHQ*_ccvN1N1rB=jUn1
zZTEJy>K=m8rvhX{pBNNPY2!nFMyFab{DqSNZU#vjRLAAWa0PMS@#WQZn;yW;Me?2C
zY)+tItB)tHB8k$#>U#kOnIYtQzS>hC*5eXxx#^+TnwR(Nv9CWfOx&1p&u;h1<YN%X
zn-??a=|pAPXkyiz@6cy{dxLSbC4T;+(YWofI}InHf4r?XlH7^hU1UKa6P0Vz;uMg6
ziyX64ic$#lR~)WsXd|}y(Z6vTr+a?xNt%>K#{YW&lUnL#nxq=wIeDgLP_pKl(DB)(
zVv6VCV7pB*c%+l3XL7?TA%g2<-fvZKvAIpuZ>P<uNyn&2H{-!!!M{}jj$*@iQ4PYp
z3<)qpdy_h*5t*2aZHd0q@12Qq+9r5vaLgjSX&;ajgfVUtrQEBJpXcxu7<?cGg+;QM
z*y~QiE$tyFrUSgUxyhw_uWnyPs)AP_DFVrzA?+Z1NX;Kf!ihK7MKJ1;mhKm|ck^?+
zFJGy{5r@dxIVo}a-%0NJ{nnNJO^?kBEQpl6W_o+4I;K$ilMAv~p@>OUKBW{buZnmD
zxSc>*chnQ$-<q8Nd9l`Vq^nl94H_Na_O)+#+-uQQ$pBqK4R7fTEWx(d;N=p$2+zf1
zUX7(cGtD&>6Ss)0OYr2QT3iu{4C8CqQDa1b6Dkho+N0nAsi^sljx0TIZ0LNpp0(a*
zmHIf;niDisn`A%C&1O^&r<`vC{4CC}0SpyAMxP)YqBkM#7pwciP2Rz8Chn^hn(*`;
zcbqbWTzh~9AjwqoL%Cu{j4@s%p$5d{<o0d2sdCiU<nsFN-fS=6d!fD4f6fs88};@(
zLSX!#|K9&Zy|MkTP;b|oGEQ4;|2O+-FWJ75B=n5{(vuo|G^Ns5>e5|@>Q>OP;@4no
zC=E+aA{II8HT{F~Z`21Cfj~S4iF78H?YMFcGZ3KT{^R))%+F9_N<+wRq<7U#46>8+
z<2*b|Z~blcBi6^s)mf-$W<^Y|d-}Y8{W-xWqDi}6o6^<Q4dw4^RTDlV<Opg*a)>I1
zLknkQ3;AXXwk`Y9TUF~YN09U(4>c5bXcf<l$ixg@Y+;nRUiBJ0OQso@Y|>J!#MGi&
z-8%oob&vJgdw>sWdU%|j_e$y&-xQT1wP#k&*c8t@`#04=^2xBA>)T|GUQ`vwsc&wr
zZKvm3_`gp%?5^_PPf(FH!P9x+ZX^q&=i`g-_1$Y0A;ab1PQ)ykzXtHF&mXDVDT5y^
z7aE-=CX4kt?LYNY2Zab3v6Tg8$F74D+qD&prfoIq?RXciR;E7}w5LVwLSzmJzeVPU
z_si-OzT=qOf-73%bB^Ux&>jtJLe3rDu)X`dmT67&P=4m+)<We8?Tsq$vZNYWM8AT?
zGi{bYR3YC@acQmEPTh*68cep&&Rgo(cuybIMgare)x+-0d@0pUgT2JJ<OtqQ<@Kdv
zzpAvJxbC>1E5wu6Y~9qeebM>LS(>)T)Pg;Gge<pJA-*S<1w4F?>VcRYH6@a5#mk??
zBI|Myn;tttBueU#S;8QIF*Xn|VU2;^#j3?7W~OrvPn6_9n3H#j`*{G}f_G5x$-p0{
zJPO%$>dMv(L!j=b|JNl{Ofc6}0B}=v8Eka7u?i}e@n#1|5FK$OZB=*~Qx7w#UI&p}
zsNDxzKq=ElOKxQoyJ@KOBFs|@DShqLjtAykVfUufB}8xkuEl86RbLHX<G651K=<e_
zGr6dMUro>+iWl_MlfMm=*4~Rfs-^!1*Nq4vLsPu<wmj=(=^nx+JG?Q>J}KMmc74@;
zGi>tYA~9QN&;@Gq8N&>5%NbFpI<*1dNU~KhcvXq}z@xg0Fw9jrYww_sE|O$znA7I4
zQOlr1ND5V@^Q35dnMYrdfLxB88#X9cjO>T~RX;iWpf5X~*F3-kAq6kr^(#;Sg5~Jj
z=5L|?Tt%esNF2&|Lk<{Xd-(jWR9IfBbGgy6`KLkpPRZ!Y>ZYT<j}N$9eWz<^6-ylQ
zb@(q@D$wF|>>>=n5l8tpsDip~T&uTQcryUHwlU-y5EP2ih%`?sU>*9U1LwysU2fbA
zF%N<%yR66NnIVDT8#)0%Klc8U^$_~jA?8rk_mE61HrZ_5B7NrdqA0{3Nh&BFIY2u5
zG*?Ks7p7m$T{~dXNs8DkG?!<eb7<;oc4xnz80d&gn8LU>3jp1A5)eG6jaVH%jhExy
z(VYJFayz?)DLh(;&Rl9>k3~z~zXTe9kCtraj#IRZ={sl$K}h`{JfXHbgqbJcejxuJ
zdtZ$H06hSxZy1Ow^&>_4BzB}@r2b+vQCm})EueM{0+1J;Luf_+VSF$)<EqqI0XDhF
z**|PUg-3Z&SJeU^Q|M#5;m(jJu9Ya0PEAf}zf4Y?VnuU!PyO}Wy5PrWre}}j$D<~|
z+}OhNSs?fQyBdVFg?%j&roL85cbM=gz+6BeIeBMIkb`D-yguYQZ<-$1R0SFnU&PF+
zJ9V~?6UOv}lBlWc3k5>qOShC7jg3qB2CQhMClqn?t%h}aD=XzpX|Q|gXi{TbwflR;
zx)t7l)ykmgP@q=Gy<!~o*iV2~iHWEskBu-9o5Pz4Au`$g%p$10LE?cu4DPbXYkB<z
zbLPa@KYLdThCsHa2~zZn>Q=C^bff7AMf0prEM(aRVe!J3w1x3Wj(&d-HsaHl0~@NE
z@?biLes3Eo(M-mF*}(z8F^|1NN4Ka+@6a#cA;t%s7XbVzgYrZK?2~3-Q`gU3pak_G
zuP%$<^0Y%?{!-9<HCFe0-diff%ZT;V)uU`K{LarQkPjqLDhJ*$#T|;&4H7a`;tN}5
z=VzrbT0H&tFnla$m=mq%!G&RtB!DG0YXb1^e?~`bfnZq0pOVQ^jwfB^mYbkA#tEUs
zl1pa@?RKZO0go<d@(%RYk8X8r>lI(6R+Xyf=d17Y@Zu6EFKRX6!B@}~M|Gv^3Nk8+
zr9_+qYo-(e?Ptm2@xd{`3r-r+?iDaa@Twm@mYI^E`4dQ@Ac7m!a_M}lT3K6KOf|xX
zQ!C(8ze8F`?yOAywO2H!Op7G{z4&o_+ApCc|L|0@35zmEjNoAnXtO6)w{<iU&kFd3
z3fn(CK(1QAya_~b0{W`IP+(qKWS;&#fa3!5<X4G+DEv2$7wp-qUKsw@al7Q6^`Zn#
zX=0+ezVICEJ`$p>QYQ4W|M9QP9)cV0{BlKo^1Rw*w}tP9Y>ELN@=KAe=nqIq07bxA
zrR#^w6&fmN^gJ^WU;OkRo21gH;`P67SDk(hZf3hZ2I%=mow$l*HkGY6UYcVHC9kIr
zB*`tFi9~?3ydi=DF^^26py=QwAM@}<`^tsfn;z9-GVJo9Sx3uC;p6@G83#>DeqieP
z4M|I=OksUULPOcDRVwAXsle9*$Dq7WV(@_sn8f6z#p}W_`Q?<6z#MIGkKS}&T4DbB
zXo#4q?6g-J^iu-CIf$rQ$*}{V*h6yMzuOg7VJ^@YrM=ayX)$fqd{=J03#7#6ycO2X
zFJD-X-hUdl9;<Qyk;t>0=d_QEe~^NVO%1Mzc%(~;p!vnMnWlhDgk82<wsWm3FH@#*
znW$c;1+234X`P?uI`#b)-}(5m?G0^a3Lqbd^0>x{npU}rJ+e*L6%irKY&U43`T?CC
zrh0~xx6zapZP||0`dY52K++npPN2$0EM}~)G_PFOSnn<6M>P}~UkP%oykc)>DGDvL
zJhMPLs0A*rZS9yZl}PT>Sac+nqWo(0Xp)E{J$5_VN|U9wN%8)=<zW@+Xtx^r2BncT
zApB@v99Q*;b4bX%<f#_C7CY_wtY6s-o6&R1_G*xsL^vrXu}WBf@|@0}i=Pp1RG^;B
z>2h<g%517}U?o@TbgmbzVB6kLVj$0yvgq7Z3$*jN$khDi6gdeSYl9{5ZyX0xqkc8s
znc-FHuxmB_J}EMR@y4Ad>s&t%*{*>mWvKEg+;acz>p)naZm*`*ogX|^Zrh=!m1U4Y
zc#5ha5zjF}g$Zv*Rfww*6DIo{I}R$sqb?bt^@8T+w*p|ad&Q4k7zz2OC12n8UmQRx
zr|dFrr}=&vGdxzbYp#KnhttI0g!&flptMa&Y7$O%&~P|^PNZOEJh#Ywd$_OT<b`l)
zNpEL~^$@zriaSyn@F*nApaWh+ZrOOp;^EziHi2(q4WsxQMZ_X!SSbT2m2DMraQg4H
zzuKoW9qVe3GZLx`?4&*h&z`r~{^F;NZWGAV57Ur|%<pBGSKL@HL|0Navn;E#Op~mN
zLkE){#}jdalzOr=S=22iP$sk7p4^nCPs0>}-Aceu;3X$ea8e_OzfKjPPn8(H>Lrn-
zMsIbQCkA;S6&dak7Y0?hw`5;Ew51>7hI(aQpJ5*=?uD2aG-isxE465iFDA;fC#0o)
zvU$9wT%TQm|KLy|i_qI(Q;VImjkBA4LY~f7DY@DyL6V3r@AEnVM`IME)}_5j0csMk
zH1{HL(g-|r&ZYt-+hzqv0dd%3l3KiVS^uF6^j%Sce#1fP)AQo<CVIbqsW@>6p5Rl`
z-JA)i1KN8Xm4mdg7JsuHTXa2%t71CmMhLr7?tgqVH_BidcUij0tq;-k@g0@R03vYG
z67M5>p+?_9s&F$*pKZF#-xUIepZ!O?=IiZaK;=`&ltL-D?s;R4BUN`#7CmHpcOBGA
zOs-%ZvHK@qwUi;3jxWi&LlXl#FJvXDtFT=7!mB(hv}gLP(rQ<{yOv9e@%U|Dc5%%_
zUX<+DnIHlbDJ!5G(lro-Qi7z#w=~GO>3kgv#b{-ume4D0z_#Uj{d3Z?4gYc(>)PF0
z)k5b03@|1?=_Qn;X0!4_v;XwkH3@BFmr{(XS>~_!ZSYJQ!I=>g7BAPJ#2f4xgr0G_
zClU)+V*TSt3Vk`NR(3>OPnZJ9XKw>m3@-!aBF_ry0e=r)Ax<g)8in?%?LYKp5Tm0Q
z703bi=Mx*die3_o?pnb2B%4W?XK}^m7YOZ=(mh$9EK>qwe+X6b+;eFU<+{QejD`}i
zjNoA!Gbwb;(Agw#A(<`wdIDSz%h&;nO_C}ko96o)3+f#xYc#%_<Wh@5W2Xu-ksMVn
zGR^@)=}%n@Ahup7YZeH2A^ItcI?6zu(i6OCYDt)v&0<UPV9T1iiV~5vu{V9PCI2^9
ze9=1Ovp80TKwYPTAjs6@NfU=|VULbN;L^3;FjRBsMT13rDa8UqX4Qf%r4t?;GmYhL
zv#H4MVAc=tqa_FDKcv-vNv8it(Pm=%Z)wH$pX4UC{}s9EH`XZWum!Pawyuv9E(Oa0
z5&;Czj!oq<23}UCE4Jp1>CjOD#Y`lN$Rq*FV<JVV_C;>}U%GAA8v-ld=4!HzFCx&K
zo}1sd%OHO|MKQ?$|JCl}wu%T|t#4c5$8WGvtG5`Rh7PU6GF7kVvq>br>Z{s`SaNZ6
zady)34V5__deyByvU=G7hic+r<njqsd76vUSqt{p*M*dcTX+%!s$>Rha#?{sq()9{
zV5h(i?U<LgObAR81)~+w_w(iKIDgYey2_i+i7pgd;S0LondAxH3regO4QG@+dSi5m
z?)^*7cQuA@nZsB~;>oEL7E`62_oLauhm}0u2$A7SxX#M)CIbHi0$q18QS!&2-}Eqr
z3p?@&daIzS%Cu03K2%K5;z8CjKNuJTq9Wp`>#KEdU2f{Sj~b3WH(uC)7Pwn#L(fj5
zW>V{0&V0NQ+uO|Dr_J3>Dd{$0)h5*?l;VnxaOFwCR8!>F0*yM-AH>6cNHm+K*k)1i
zfAR=Ea$UHAhI<MU6veD095r6j0Iu*7>mf%?URwtMSvXKJ_BajlLpT72BaNDR9LbSb
zyG-k!FBbl6uu7O7Nrs{^61eJ)e${=pc>T|d>ewFW$u7FM>?Yp=D>AL5mj^wZC=l|h
zcHw|XGKG;r3Wd8XL?-z|w3O&=q(cr$L9`}PY#M3TO}1V!rOPXJJH0HigpD|08h=?#
zoiHUUve#P!9J&pKG*>(4u7v$d(;1g;jEPvdqGZRi#*DGoa#U=D;YK}?oZ=H{?zxY*
zTRoaKQ?{)X(fM8LMl+Jg2vZQBGn_V3-&2h}z&i)?jG+yL0i*#EabD{Y4Yy1#D+v%}
z?`}u*Gy6!5%<4uI^pIkg1yk5vbdGc)^4UIi2^b!4Z_yB#S;w1N`b^j;lZFTugJ}BI
zAhSaLc$x=hHCRB=M17Ceu$4`$h??M7Xo$<sAYl+j6d@sxe9&N)zVP!69R^WABTrN~
z$&17U5x7>8ZK7a1QW28n_#oU9niP&wosdCHZ{wjy8x<ELNRI*?t`1MWtMq$bJlg$K
z&eO*9V(O(;FgO%9gZ=B{b-7`eN6m!<a5mDRp;!n_?2pTV4En{sxo>Er*n%LqKeC{_
zX+eLleUfPn-4e{fhk+VLD>6bu9koseD}cf#sdq&ykfICYh2JBT`iAhc<_$4Lf9fdO
zT+tK^6bPWS5%o$EE-Fcwy|W-%$dzw=Vil+d10nSVMtax91#Y=Hum;1(UQ`v#{^R}<
zyAENWr}k`3KL&;(XB2zRm|0Wp?4^r_4Q)e4*Dv$-_VTNidt1?BL?5`z;tQY;y<<Ou
zEvSP<L7?1Xwqh^>I+CmOW{X@C2w^+Bu7D~Mv_NdA1?-PA*(7XzmR|0O&N8ea@}*`4
zJgq!xRZN0F1(~rcEafQf;nE=?DMz>X@)P<93SKJY2zcD2L>Bxbq1T;jMr3O_DxbiS
z@R*(0NppZfQVpj8mMHlikDUZ}9d#M*tT>iz41$Bv?Xk3wKnAs>U2Ee12r?8Q-S#SC
ze#bB7MCXcA{b=xrTYN;)xKCVkAzBVKUiwu_^g`q-CkXqrIj0fGkK)eT$hL+k0^tE>
zp8jVBAb3Jj7%Ng)MjqEc9Ru;BieSc|b#}uwQ46KDh(0i)^o!<=pg|W1***7llY}^(
z4Ynfd(GfzBz}a|#0uI+gz{IJyhb)Wlk0``+WoE9u`O7LuIzVwx4eT7v1Z9ia%)R#u
z_aOTVEJ#WP=OJ$kuQ3F@@KYO>WF*DBIu`+(y^jyQmaa?(RK`ax^@FlgAWc}RCIuj?
zUfoig01?%Q&J7mQA}ks{8a~0-R~HWa0lA97#$yX244Q(qw2uYE2vwjZDq}2rgemts
zOipwC1eDEJk1fkfd5!FI+k&r(v%2r>CN<g!;;mh&TrSH$0VT;cgk6)c+XiVEE;tHo
z85=8HHNv<dmQMz0IcUpuw3XX{5Pwzt$&)ozIWp4()2L}y4f=AX1jpd=9kx+RU_dxd
z1%3gTYUtLDBgU^_>sYQCrbfF;rq<Y%27Ix6Je&w#*k+XY=X$q*8sS}y$~Q$3pgl=o
zyskQEhC*vNlh-Ff63B3Wy=o{K2gs)#iLtI(xy~Q+2<mcrN1Yx~o#xRwp#y1TL=^dG
z1z~MvAjLp&<XJa`e2|3*BmmlBpVP>Zbe_@ZcIZe&^7Vo>wUUYlPc2blN#0P^k#(Sv
z0hVh~r((rUoy`kr0Yrzf8;1sgzIJX5^I4IRS<dXTO=zcF)6-<nzh^BSS{SbPxnZoC
z|DfdKF3G1nx_z1SC6d8nO9*aDvTLRjCG|36R3M$p?~{*A+hp?C%c*A(H))3uNxYC^
zfXRtoeQg0(b%kL#W?BKI3ql$2MRoj~R;;+D=y(~Z?Tr;O<Q>OD3y$dRoWLU5eQs{P
z*X+lMBLAA{kDEOY8X%SdwuM%sA>a|r2~_Qk1y;tD!6Yp(JUj93QJPbeR$^nZbiyz9
za5~eC9p3jbMfBMp7p_zIfkOc=?}bsZuh&zC5BZz3avQW0u;)cH8$>J+mv-yeWBomT
zH{}^>YEa$qNWq-3j_le(F}}=BQMBDk5s<XkQ|$l+1~42BGUcbD&VC1bo;v~^`iF&8
z5R(y!DngBOh23_SgH~ip7hwZ*wDRr!Hw;fu;#i5NfuD=|HF5lWq+`pd`YCWy946};
zir9hV(QO@h-Bi{Q3m4|=Tqi#V>JpDoVzlhjBP*bb!cwPI%BY79UX|_)i&2uMywr?%
zUzb_H%J${!3U4xWStHuYCLZ^x`sy_75Ks!%HAtP!nr{G&?~}wfhzpP+>0Lv}VzjCP
zR#^SG=kKw8aqbhbOIt$0FcwyNrBEq0nKh#je51ru!nZn13y!QKyj%_)R!>Tw?VB1_
zgc-8$pAbQ5C*G)EGT^l@M-4c=SO3^n*U*7@5k=$koE<Syxz`jjpuo5yT#5jpqmLzn
zzyLj#uq#!-R+k1<0}%2dDCR6|bg}e@*ZSQB85hbXau@*R?WjwTkj5S8t#K648si`L
zIZ3?>%N&RdaE9xu3mV%9QQFdZ2v!Or;-Rzr@pNHp-|&*9J)qY9kvqp^N&U*z(>ijR
z2g`Bk8XQYq6Zqd(iTOD*DyVMMu&BV3{Ps@RzV*GL$h(aQ(DoQYCI}ZU!n2Wk{oi}m
zpW!?CYDPZ9PVav;H)jMqpB`8{3&pMhThGWAvD<homwNnPu;DOLn^x43ob~|Mdervi
zuIN{jJ_;!=_oeO(O{$nqG?lAdRJ$bk-~X5$f^X8=xplCfO}_(h`!2T8h1dOfS)npZ
zmkjhyI(hv<{7?@U!U@x&ePF$`auYZTnnD@M!A;v<Z+qirbIt=$NK7+3s+diogtOc}
z?V4BxM13F5zRwH1t^r7x)eG?RiDi9^Oa+>7RbUteJ^@YPkJTZe?Ta7nScdPb+^XpF
zYb>(5rlf&OUS%`h=Z80v>>p`>OGdkf0`T^?Dt$}7viHuf;~|Rg@az9fqbO65f1_k~
zCUVIKL7G4Pgplkv>~}YEH2ZWn9T=Kj>bCNtbfb|*NHC1nkSozhr7^y}nM;a76-<cK
zfe^s8<9{5F4i=OLXzZJFysH<z0a=FELM}IfoXGWdwf(||8-nO5qH?vJB1X3{^lE+#
zQQA*^E%VTze{C-nXp5=OVb`Uk-(JkC6xkofVAkUHYR33Yg3l#E7h1S3^1)<<U5YEB
z={@q4O=m_ADLytiB%I(aqNaS*WPufC6A?#^euKuA6S+Or5T#y)AbQA0^|cT*4ov1v
zfF457$M~1_TAM94Pw`stvC|}N*E$8{j6AqY+Wh~P4;pE&E_4<(uj@Fdnw#S&Ovid@
z@h=`ud4TOktSgSqo%r`rDMu3hTmu2EJ{+daIr!NrL5;ym-XEC#<1*)!Om?reqw_Zb
z$iIpE>&k9Eg@YEZ8n)8=M(dXYN&4?xvkVcmDw7O&yirs~E?uSl%xI>gm!5F=j2Z%?
zWs}TcdR*#6>>x<-eMG>XCwMr{=obw^+fmweDf-IJP+#QkP8(QXcptBTZI7qA>2!Tx
zGNg^}IZOTe=aEsEmkbtHhP!*-T48=|j4)Wo7wXZv3_@b)A3ai70c0Sklg}Qvy?8I>
z_x1x%oLOqVC=2pylrS%~bM)sdB}hXUt#kp)@(I(0Vz2yX2onzbWmQ#v{rLZYzhXmt
z|5MQX5ABDM<9}#BZ2w97Vf$awex#B%M-Y2%>(Y}zO2sjlgUWQcC|tGIlS!zVif~+Y
zsAwSR5CZ@}{iSS%Igc;ClD|g1dExc_OYl`>&+9w;^h@!71<iJm9L*gk^jY3}JEu12
z)z8Hus+wHJdjn@Ze{G#=vt@Vt$AOLz{YoeGH=<dDz63_&^ZtYt9@?d!K63S>H)Rvc
zP~`K=M3vgFE%1}J`{zK%)HOaKZ%Ctb^^W1*2(jV$eWLSuVH5N-R`rqNxrkuF3h4Re
z8~cT;PR>L0mVPY7fY`R@O^3*WbBU4(_S~u^vBC4v&dXJV`>^0=Z_|_`2HbZH*g&`0
z)Ca}FfRi1(l+P`-`^)o7_roHy<Yc(YmWn*iJHx(q7fR2uK-!7!)5qyTBV`wLIq|rf
znoXwLWVFS4qtWk+9v<igpVauQ><JMrl9|5&D4V?qpaGw3EB#=^3NEbic8zh@TU(%&
z0D`%$FQ~_WqmYixXMHIOf5op|6B2X5tECXQ-ePw_>}YCgKH^gdTBrGHDdo9)#lAi|
zx`Bg%%JX*v^iRYcYE{(ix0;d@Nd!LFdOdyd$OyY`ZLp!6hnh8}@A!I8wU>I4#@*cP
z0>u;F1ntf?Z=<i?o@fKY6H)kGA*W#HS1lD+4O*Bc&v><FKmgS`4)_0I>>Zm!3ADA_
z*tTukwr$(CZQHhO+vbXs6??@_Zq8eEPTi{gWmo@)?m3^H;~Dt(e$D3HV_sS1%<|;h
z@w8Nqajec4<ZB}@gRnn=y&i!DUe7VD(0Q+#WTEN{(3QI&QYhfyK_7*nlh;G);n10{
zl_5C|`w?mf@{RBJ99>+G2bR%Z(WucV4~7}<g{eQ=@q0_wUoQDCHPrCq7m2u8k^v%-
z_%VGx6gjrc`X$CHZoSBL0%l}2j+;L12#GJtVF==LRneeD1p9_pzxt43A7k8XC<Dmz
z@HkStp3C<>-H8$EuDDus%<yJFllKhBZ&L5Kn`?CYKEoCeggE6IZlZuFH@lYrg|t}i
z<l$1W9WQ;XeFi2mM+&Qv$ej(l38^9D)$R1`9wS_Zl7nHswOAlSGNfCb=F9fn`LzZ1
zJ-)M3#FzW7`CI6<s}#}()@NNxM9A!Vf>@9ni2P@kj(bj-Jf~DzVGbVHus?k1(1}j@
z;EbFCUsJ^Ol`C;mm`M3$LjbXE>e=ZL;;!$yTSr^6yMpo|N~;2-0Rv}I3uO70l>E6+
zTBgXUZX`qq&|O7k`A{4XXB=sfv8*@K0_kC3`Ykr~04a;gcEx&NjaqjeG@Ic~)>?nA
zySofh*bqJv;JybYKZ?}G)1H2fLU^%u3i9`L)@-J`!c@pxxApy|oRIDGE&-Xzwq*aB
z6>xbo0^M5k)Vf&TWlS+?dE<roqiO}2EtS>?c&(jFt@`IL7yD@TT3`#LvvXf$Mb|Fp
zg@x=k<E0d$!%{g%Wi{FJh|?u~v^h#^oKtD{`pJ5J+YF8J=|u{JVa^*!YZJKn`IG3;
zbDZVDbK(GnaMv@}vtPOFw~+R+lK_zn6UZ`Ed0F;&P;A)EQYX-v4&7pR+HK(y>W#VI
zk0l>5;+0eeVic^(qvgO3W3(ZavE@{6o9$HzCx8H#2ayyK9GY0>oZQ(<X+;l2abWUJ
znN*Wt-3+fGQGvGxtV5wJU^S7j{r|{n7vRfF8tgx=swBRdg?}cp4Iid1O^kSCoHO*;
zKMV&}VaO?w<K4q{Q@b7wVy)XJ^0W;YhxhIq(k{$+ggBDI3QKOKdnC0BhY>3C^+O$;
z*%XkN2%y3~-yu}zkZ+DP6Q{UOuu2C2x1s^=B}b(3!&u$|9)~Yj+JwFM>aB@x?a-w`
z?eUkFi1`KxRns0)@FtJ`(FYW*<V}XuN=NS<jT05DJjQafp=?$<;le#fl?iD=AYm4`
z@*BG@i8{n~;~?z2r7&FO-^tgK)yxCBi#(Igfi8wl{k7e8EXIWJUEK>0DzH|_Kph;f
zLYj(@!!P|!Qt4WYA?op~l%X1&6^4>Y9NYjteC5h_fUul?4PYxxE)(N;)lo?;qo9!Y
z%ZXx)3;IJc(68(#HsxD;At=t~)D+2NHrHml-hR9T6v8AedXh__sqcgqSh^jHHE(MU
zU}unQ(iL*#n{WR-mo|341xB?hJD-4&8!{%$nZR(w)(m-{*%bE($~(xU0EGx2Qr4#@
zfs#a#y1V65(}DslB#~WLBLPMnY@8-{yq?CHt}6Nu(>gRPzKLCY7ix4u_e)~@j7G$D
zltr-LGLCd~?&e<cMP%4u{^QFYu#)o1!KDP=t)DTv-7_Cw@hMHEB+-YCW>HB)srZ;8
z0aKwC5L(3Hslr1}q&%QaWGTJyIQQF2gc^tpuL~~+ILBJ9iXSC1A0$%rEjQYU@X9&Y
z#{~{%fi@H_Z+Kt@GsAv_T2(pZFKG`I2n0X0i!xZlNFr?WaZ4@E=BO7iFsi5aB^p@a
zUx)OU`gD~B`IV1~ioja0qO)6l{`D@iK%(H4y29B87@tEdNr`EsN<f}f1dS(8sxV}x
zFc+6N7I9)Ban2N!Vfp;8&VUlE#xhc6HNlwRilgg9v|ANGx)aMUATX31u7z<cYZ1~5
z)c}UpGk`p9myi->PDeGva*i&Qo`))Hik#<yjwt4~(J}^7DndSxH!_y+O+*(WQElpb
z>ny_q<XBZ-q)CyYqk1$VF(FxI`EBk%{5MG?E%t%X8xP<*hcS>-9qt9Y*}=Q8^my@h
z_Ti+&cL`iCs#*PY=e}YKORQw<T=^x+N;SBUi_WQ;dJyH;Q@~A*w=Ge9#YjIQF0{=<
zg;-r$rMx-PrMXKR_Omi_tGDP>!;4pphMdQ%kDg6SkU5X~lVe~nq+G8(7T-c*^S}17
z;O#I7@KCmpEwXk=Bl26@*LF#fK^AAd*~2z4L&`3C!``a`0r&G|YK`6Du;{YCJ7~0$
zBj3@LE#%<G)O|JSQ(@LEB9cpEz+#C@66SjCYOK^Il~wFrWR9VGRAQmrR>4y0yVBKW
z5DzXX>?Bl>VS1TY10V_obQs`^tq{%Qzxlb!B}2Jm))#7FDdl{m&x{<G@MGS@GBqi3
zi7&Yd4FW&0TKl-PqRI-!vK2?=FD0$TNfA^^B3Q0WgZR9u4zy)FZrg>3YpSfZ*hzR;
zp1Tf$#NEyhrQ{|LzQaUg;Y=$qpWbej+!xNf3`p$NUOVR!jk7)xrSF2~zY?H^ARH>O
zNUNHPFwk2C>lc5_gI7b(L2@<@8MYJ}w|r^h<pAJ^6LXjIv%}_M48kT53UnJkR|gt2
zEvv}}DfWGEs!uAUbFq=gEF~No6eCG+7WK1P?7`%gQv_y#ZJCf$!~r_@`^hX>U|h~6
zuKO5+DhDcK4(C<@@&l=}Vt~6a@5wPw$F_C@?ZOPoBVRlms^HQ_gKaF%r;JUd0#p2u
z?iy<pKpE`PR*pDz9jw4!ye{s`GLJm2l3|^(0>wn@dFeBUtC9504j7OdK2Wo9C=IVn
zb({){qqA0Ox#G#U)7@_5wK3{*FQGy-PEr2~e1zf^L7FSIn27SVyb4u(1TTJdSzHKk
z$;hCTr>KW*rhxdc1uZSwJJ_C3T_6rwiB}Z{QGu18#o4`dovheJgi=#)5`#IKa3NWs
z`+k?+9|eVqtHc&*`bsSyA!#9$TUK#M<yPw_6FgolWkQI(rf6TulF{?C1I80^Sl}?n
zm!vUZIB;jE*?1t~1Qnpbo+VULiXZt*)p#Mvm>xYKCf4}ap0Xl2ML4o0O6ab*PA;Jn
z3XPRLK#fU#oT*?Oz%K<Z{0NP;OKOEk*zfnoX2y>W$9(F@_%acS!#|t8j*zO5w;Ww3
z$sUVIMH^f9lsVfcye`<sWhoD_2K$2Sm;{2YX^NvtDa3m$?gY<8LpGeHt=N=+=2o6|
z5uUoRwy-pVUAeBgLF{*P;8@w1iFFa&r|fo}2q@p!N|H*b^X!zFjHw6=mU>qu3=D$5
zWDo`twVPR3n-dt?m=TN<8`U-6;T6Wf)HbRws&xO!;vA(<`7`ow*jl^#1YIMNzw7zy
z>RV2e9=m<1%spzyr5*tR$N5fp<N4%!xsqVW(h?C{8!J!7{#%F6&<<(erfDtVJI7n4
z#XUG;ckA2`vy_leXATypkfoMz(~$2TU_OR$JL^o3bI>}>9b;B)yhk@+5EO@K>1i_g
z620r#nLd<V)|G3;2E(^9bNOlpRXl5AJDPErQLkr#y7qzqZO{Yy)2$75iOBtau-V*2
z+x>FKi^REra&r;fx`o{{`E-Y|{K2d(4sn)Ew5LBWUm`6c=V2x6Pj!C_dXg;H)|5`G
zECr;lXg01rIzJG6#P-a`-5Rzs&kPF8>_)6=e9=S|xz1CQOBJ3)(7)k3tk)Optwz`0
zFMy~R{wd=t`|k3sq77W_C4V_sK<`Zjtv*NYMh-l}x3BPZfA3QA7{#;N`hLH+ulM0;
z`##T?dh$;=i<CHTg>&y;s;S8Tf?!0ICvEVjI(mYN6I*m*WhX2LY@P~*ac94fBa5Mc
zB{D~2vBMr`X@=(j@$UVf0AC2mJZ>nFQE;(P`l_Ii15PImcr&>RDyD{59fMPM#?EcM
zk<{LTbHbY#wC%0PqPztiKTFz_JyX%xQYQmj`}Z=m@w-1J$z+spjB3dgy~x|#D#$1c
zc1GTdm`)$}X#qzgr8S84fRM8?LdC#t-g0OPOK}tU$DRU4yv0HOn!5jJ{|{gmT?@*8
zE{FeD9K*`=f6iF;|16GS|L=-pG-U0!*${ef>-T4!5=tedN+vM)IAj${9B|k-%D}rd
zCc2wy#nMnDFGnD}E?D0v-{NtTh@K3&^F;%J0^z&SDl-pevf1N5un=Vs7yWlmFPy{{
z-macvvdSwyG<1u?qc?PJwQ9_`=Z$+CII=g=DWWi=iXmv}%mqDLdtZ@b2KYjU6(%9v
zXx5qwGSE$T^lF~&=bTqHAvohgmE7QCjc72$quHDHNfOAn&N6ppLq~EPy2CS8)5Fg!
zm28r9>i3Y+frMMU54(k$95Lt(NuIVW@SvLSKSZ_4pH)xODQAR)y4CghII*<Lkd*sn
z7$Q?SW!4IwiA2>kcZMPr)CyI9iNL*;b1c(PP3_dTlct6>3fGg60Tm|qsjAtjBF}})
zO!L)0o;b#IsnN8QYiIvP@6YYQz0lD!C@8yIN0U9>_c7vvPg34S@WJ`7`!#4@@Oi!B
z2(HRznpM}ztR;@PM1S{_SvAS!B9q>_<+8vI>(`noqg>R}3ffsi7d?v73<bpfYksu;
z85gNj6$8u9pW5ExWI9<#3q(g1bJN_`b$m`id@1C%Apq`Gdla@YcCJFnXu4!K*TCm|
z{6a3@UdimXMZywD9v{_|tr%g57*Knt$D@f*o4=SUDWe%3BUkavPzF&TjsleP3Kt6#
ztZNke5zg&Csc-@lCh$Y=SjWelC9_7HCMe8QK5Kx{GdTU8$>+-|0e?Ou((9#Zf=+J|
zRP#z<wai_+tRAepndk<MDFk#&`h<)>t@6Q}_wSz9_A>yOph_=>d>H@_wrM}!T?Hh!
zpnJe5t_Z(sE879TLY%N_++^c|Z|>G&43p{6j7WVSYMy=i!0sF^2#%-jJapn5bGnx~
zi0!<arLP<l1SCYlOM;-%Q9-8M7Uy`grSNHw9ydp}L?tCddXatR!7VeC__r8MOIB>U
zcQ6BxdpgAv1H@-Vjh34_*f+M%W|39I5MX}VXe4Mr4BbK1c3^6{m>VvZ1F!w%4Fo$a
zSyu>iY8Lcopa;W`dImi;)ygL?P-_--2jVxnE#1W{OqGi70I(v)8^ucE{2de7D#_r{
zENdKRQ6zJV?wPCuM;A0TyUkc)*9wvgR&a~oN(5Lrf^OYPYr301m>CK*E<U*E2cvem
z<b*{WMU2ilqKDOYcE-qHcxJWJzyShu-h4zdBLA?Z!FkwjM2ko@uS+&i-sg4u2qYOw
z;tJw|Z*azN1Gpv7J(Ot$!G@+92?fR8sPfYU6cgBvbfVcQJS9^CGS#wErkHc30lZV;
z$d^ur#5ShnVP4w^A8()_6|#vC!AA~<Pv<|}uOOM)$0Fk>os<IvCYA=<CNJYqd6$XL
zjWEr$=4HUQf^g8XkBWdf@G)T5AUCA5oKHS~X)6@<>ZmKT3#e)^jjQeGta%qmx+GLX
z>Xe$deVFH|3poEv2>UuGa_*uFu~P^KVdl%g4AN40Ld;TZXr+AI4pt{|aK-ULfwF1<
z<@j@7+`TAV)KN>m-xBG+5=$Bnjhw)IOI6-0pEOKxly@zgOdFdBuI{PiQ<GF?Nq;e$
zH}*$F^c>9z#AZ@Wf#%2n=s=E1puhO21t<16VNh=sf9Ix0YSC~0m|=qzJu#7y*>IKs
z6s`eCBw*%INzuOK*B7Wtkc?Yyv6^ho07K|1A6G||Zi2D4fvHt~3r+k~Mri~TUbXHn
zmug9d%g~YPD==G^U2O_#i#O~~2tC!lzPwx3faHlvRVuooYYX9=+~I-?4&HV(jb3&&
zU2I!HOz4PVQH1@Wm|$_ju-1BrAOkGOd_kZ~Y1v(T3M3|Q`2@^bF<qF0^kuLJ!#gO=
zv+{t(NHj7M704}OUNN#$#7xvv-x+0(oU33O2!~%tG&>ilYek-ltXzxD)IxmUZCVlK
za3nr$(li%H*r3A4POh~hPe%qKUfc;IdEz4@SPTeDw4yYD#vr(dL1<CY=gyVpm=0h<
z2e<=hkhY^TGNO7;$LhnAFf1GpK*$S&VmP>^s?`cdzaw!2lEu(a2;guNaqP$BKvHpk
zZ35C#EFXxOz3mLPxw+1ush`O}5+BrJ*G$$c6a7pL`qI%rh|nL^FEX`*uuG_;G8yo+
zFELFdcsrAt>A~W{v=x{8qh}7TNosd@8|xqVQ;(9gZM5=W+&FeEu#_iEYd4`rfc_o(
zEkG_IOMla|shd~a>j)gSz_}8eQa?j65s{GiZ+WSsyUSOOU><zp)!H3Lj6U<$puhHq
z@=Z~}De)8Q-8e(+6YV=#8rN}Kh%vHg9&z7RhwXrl*PUU#tbo0x?cgt&C!p5{iVWS)
ziGWNfM-({;n;D%Q_P)Lm9awwxzwC%;$;jftE8e!5)+_p*=e(ymk555U{)#K;N*VX3
zj!HxL68V8M_N}~L92EGGm<wv>i7;I}<)3U85>bk2Py#H$L}FrK%76?GS<r65Pj`06
zmujXWA$y;mj4vqvAAl6eyW{`(SpUC|@c*2qFmkXn{qJcC`+qhEu>V)h0jrwRcH10i
zJ0H{?R?~sA5hZ!HCW$Uf!0brl$tX>ZV4$5+Zk9DkD3Ye*7&BIFJNZmM9H;k$l_ur+
z)q%hrIz<!H&hwow32#F_bQ$ve&o5Tq`_0+G^x#7N(^vJYX}wxFISUn|7yEDF8F(~x
z@H5guqe-KJ187^o^?lr0pUBAuI#a1q$pFM?m%#O0l^1P$HRpE^@RhlOp*(R*D=~<I
zGsKupqhEn98`6CEjV~-(B9QQ33o&<3%krmJx@y-=NqPK;>QRv)zK8U`m$M7i6$FLt
z8<9~i1UxauP$x^;HurSq{VU>3`<8#hcYVj3*vy~W&OUs8?J;SoPqK|uQfmgIalX$N
ze#z}MdnTyXm%8!uCz3mOU&eRHLx@9T#D^KtgeOg7G%POsX9E8Q;*p~fg``>JyyW&H
zT)mnh0cn&c<w8ml0n-zAKtOxO(1dP21TS{fA)M4xJ=bS}rAXvM>;bzTqp%A+NRa6D
z({!6ha46-KF-bFq`!0%Nl;d_X&@Im;z%^ZLRMq+SuCxqNU2E*!IjO0d2MtvT0qUG6
zZQqOPx-|b9<&hLhZ&%T|Z$+)HH+upAlHCJ?2fBY-y|p*>G3j8LL;L1|C~^^CS>^Qb
zbyFp7SPNv$o53m35rs#)%dK=(xv$3P8Af=Hi-eLXUcw-o>wdqTy+U>^IKj{Q@FG&&
zP;;lctG9gF^+A$)T%bKPNhvS>6Igr(!+Q+_{;1wX{|dvssoI)i;7(;!@|tLR>H?+J
zNPp2G*AT(!_K3cwFjNR4(r{D7$F*_{BjF|WL>aT&OT_g^Z+;NW1-efeMqppRgbq8-
z>e3P>LBJF%CWufdJ(Lh8q2?Yj7Y)a0Y&!D-`gir0&Z+Pem%46)>!)*QKwKtyK_DvW
zq{7YU7~c`5F+kTVD`3z3df?e?Lja8NTWP7fpKqo!UZo_^fstH+W%QFa3v9tKizBv|
zHS(8<lvB$-9!-2CT-NYZfp}h*3~a{HFg)WjRVgp`kfD)MF`7E7Ks_(#0qc^Zw&kTP
zWxBtcs1ZiB$@da4QWERbBO)4l2Prax>HC5AttSeP!l#U#64hR@UF82%f9;$09B4dn
zEO4P*XW21psYKnK+#(WQvOmY26vhHKd;6ue0+U{nbw?r}Q-?8qJl_t25|!rk;Zb>E
zSXu|ngS-q{{t?sdfZg8rf(FVlv1J|lYz7J?cC9_Srn2|e&DG_FM3Dox_JRxdCak2x
z868)$c-2<l58Cxks<n#)4MY$OfpNR-tZDO}*LXoIkT()NL|r&i3!45*PW0m9*g_ZR
z_^4WL;_A+bsx;Df^Au0wV0)WTdmQ(<Mh>jXigT&Dum7qv10aX2CsULdES_*DI*M+T
zh=8nDkRSpcT?i5e21HtGdGi|@3i)7)ePKG`pIR$be`3I^IN^F|z`~khv!4nt>N51T
zm2&YTxzf^awpBhEFNigh&$edJu-oj91Qa=O<S1hRaCX^Oho>>l-#w><PC6=ClT$dk
zB8_dr>|afmn!yYKMhRS$lY<nJ@1-3ug4hmSUZ)Y}*%I^DIW4Q{<O~}qT4C$*StV|I
zs-sk7f43Z4Ea7(fvekPUuc=;ysA45d#!MIpXj(bjYAPB`XY_ri{Rin?gbpZFVNQ)r
zRwIls((EUCu}HZ=T(YQas39G~stYwuUD)oX)>t;9wlcO@_#AD=5@l~dPF0oEFElTG
z+rg1UVMip{^SxVB_5x!Q+;{?Q8l~1ty?#XnuBEB2-X%m#+<l`M{9>3S)IOFagBHmk
zD9@Fv>Wk@!8X?$H_ogXWkSu@@u9mvLw81)kIx2Iw&)&Su7ofEo+lpYcgdn+I*zEkW
z*)|Trhr^aH7D%ggT}vh{PMPJ^Zw%GRbktkkmNnvNHDI;r)hj$Ca6B|h3tMY4lswT|
z*lmN<kpZF?RBb}+X1W*HEE+mlm1TP|_i7{ph0VATTQB2(!^Q<5Y-19s&>HpkYPF7h
zblDB!u4@Y37QLW-asfo4l-fv_m)3|#Eg1SSHPBA}E<{%GX#q_pO06c%MEy~&)1Vq(
zwmV4FBmJDE*&Bz^3D+?-IBf-YVv`t<#a;Df#)q;b$HX)V-okrlP4<xGL@Khd1BxWw
z>7Qi4Bo^tzlS<XDYxm`Q+EfH0`E@mWnSiJ>KZBQ8`Z_+Vi-e-Z<P<O?OSqd!bpTkd
zQIAb4V-Qw+s7}>F@AKU<{IvV+d^$e=X9G|7pW8sm7~+&%@bcURw#-3BE0!CXW=Uas
zYWLyHeZ_87gWxT3z~qRq?rk%ym75Rt(|TLB$~$skz~1N=^V4W?$3n_NKG+^b#rI1x
zq&!Nex>MWS+VuJ+Cg2xyJy<`kfSK~VJB%!6Jec4dZx%h6goUY*Ly&I<H`7x*Q-;Vh
zloQvD5*WGRg%cfbkV_9alqnr1q_O2Nvztj`obRyMZsbb?53F5wOz*p)qFW@n7s%jL
zPo{&zLbd_1r2~bJ9e0?YnC@_V=tiL(13<D9w``kcdNOgEk~SKr!=xJ6tXzRoxx<Nf
zX^b{lePIoH4BrcxQuM-qYGn(^O!n|RAO8}lV!+fEeS@`qo{Sa-Lmmh>=Kuz?HFp&U
z#Nqw9ewiW#tZut`9=JP(Ru2ZxsXTt>I`fE3snR?0?JCy&VWQ6s3bj4I7oFt*xYt8P
z<2H;cFtx2|kM>Czj%f4dL0s58Wx&A@f4I<*mUnxQH6FN{H#39TdhqA_dXO-vZDmJ6
zj<K~%^d9}D?6`E-9i4-a0Q0{npNq!sUzKhA!Qm1!jJwOe!u(ExQy7(zd13U0-bnrq
zg-WAyU<p87J-yTmHtnvek7tRxz1HXRHlxo~=iBckgpVBEH*bC2+O*dq6ou6rfyxqi
z-Iu^rkvH3McsNs$gREo;P$$XK#TF5bojxCK7Cb?(=N_yh8$qAY*YN%O=QF8jgp4=a
zYzdfbT-zxkNAvV%kLPo`EN9EP-8%w`=IU(~%pRd-V)mryjg!qtqHe8|>g{WQ@>M~-
zjhX8sl(<O=;B)*3S4LOaFOOwWC)nOa*69N{a+UTJlIaA8Ib+W<Y%DrTV2(|<1b#1a
zjKGlgcO#JrcHtAlC@#wyI`i;0pgWd^a^Q3T8{x7-HI9$opTIN;8M=NP%FacPr9&f+
zpBC8{%DX2vRu<&wbS~MYcXVx{nXSUcYtAE4HG*8W(}n$eNsL0BbB>*RDUCl(IXJ?t
z^q*s%c-{$jCe*85nx<F!n?E1Mlb`)(_73KVwETZ7*73=Ha4&xbf#fdBCn1zuPrgc0
zw~xLK-4gFPK9esOSDjgQiO-K6l>8fSlTv})!GXRRMNoJ4-!JIfN|F<~cKhXPJ%+x3
zImQ4wCPwbQmsJF;j8J=>Ip1R|N09-DrDVSp8_IPUYYA`;I`RL6#Vnpo2(qu<_(x|%
zSng+!4({DO@O!vGF#P9a`oBCX6C2b2@u=+o$)j@oS3K&d=Csq67~0MQwHInIUE?ae
z3otJoEl(TI-HOcBL=3yq6liinL<ooh08+7Q+g$k!|H(5lyi(eDWhG_j6w^Y7?+4!;
zXZsiA|D;I#H@B;HVhgiZ%fBho#8>NPVL!b&bgxxsR<0h&`{=!w8GjLlAw{Hd%l2&1
zg<an#Xv_dtD5tt540YP2rV8Cu)j6B>*ZZRoC$!GK2$kvj0>@wyWXtw^Q8h(xRx!I5
zYbqt0$RE~`9^W6}cXzd2GwrYM2z@9R#g|cir^$Ciw*$+Xelcje+3dZqT_NqT@aJIl
zRKGdLp$tDc$T&*F8`ETPb&AnOqi@l+O%3`X#C?#1=9l`tINuVe=8*RW!?Ks4hMKDT
zhgsX?dPT(|yX0cJkB-^ge3?H4iWe~g2@z7_cF3nrSkHYiS-xvE(f23A{8^l`jD<mB
ztG2v9o^SHbGU(p7T11XnVaBVys&SPh!0DBaos?B&XE#5@5Swc3qf}c({6ZkH=PCkp
zn679qqYFedcl27>B!rBi=Fn5`R+DSi5R-jpY-AMOH4lq$jS|W;mGbYVDT9iTIIL-k
zvE5w4=H@3ozJ4y1WrSYtqP&a}#yK!BelNH|{03@<sZewSHmbp@BDuQweW0<*GadW_
zDXG>et50nc+J`=E7g1F?Hf;tP1Lz2z-P*gh|GKUhFqisUeRqG=4{n>!{bq^YZzg5@
z;Q>r=bBOp0tC|sy1vH>#JUAadI;mWbA@5=yY_3db4h%?6%i@|8=x`%>h0En<Z=>2P
zA35t=-iNIZNl6&tvj3I^H@eKr%aABor{nC`Yzay&QjXn{H}+}r<<Q!_?pVI|V_w@R
zN;EERyapQI7aHFM$1mu)pFit4z<7680pj=N6fg8=z!&j1WTV?vRsCnw`iHpRVJ^mN
zdaobrzuah6k0DIk_KpI)<-z2bB2nQ(*&^{f7P~z$QQL0ntIh1=<dE<*1%%jP_ZN~4
zZ7D1QcOAMfqlM9h0iJ9^*WON<_K!$VoFKp!cj&ZZc};945IkVEp~nERJoe(2Sp+l+
z#&N*`X^<-gr*IzIK+~Jhjsa9Xjpusjw(2ODcOEM$TrmL1n_1s8Y@3}*ix*foo^l|y
z>GIVpsu!%3ZPq2oYeoM7YS1`GuP3Brydu5UZmG0}%Kp<NzK38NTqv^|92xgf27s}2
z2TN-_Hp?~%DrGp0Nc)W(S;P1<0~PV4FXX90OP_tALGy~qeq6LI>VkZ;dTOheKC@EW
zehz4Ha8cL6<+WB$OwEN3oZA0!zimGGU>Zal`GM2|=Q7QlaTG!q1_T@=Cx{y@KYsWO
zW)duBGl{pF(+AbDHc^u;Q*7DE+6(;p^iZ8~{`l=Zg;wr$EA5%&l9CU2H3V5PAY1W;
zi(oKm?1kD0gIZ`+$XF4KstCx@o*zQe(O?v6j0&fD=<c#O=ZSc36&>pgUb3hqeq%5`
zvp?Q{pxY~|W=~aTa~8DU6$jC3S9C+#2WFFn{2H$l`iNZMvAYLG+Hza(y8mRdi%)zq
zJ6l1(8$-3Io*@$=8`Fl*u&>T(+(iwldDZ*DtoE;sH9ZZPEMq@_#u>kcPo82~)%OMw
z1Z=O|;d;9n<+YC1{V|(;-bKmPB>aMk2|L|tOXVdo(KnA25GmZ%t;GsQ2Zm~kUBfTz
z65H{$9c&6GK9k+NZ2WAevv;YIPUt@*`G>JjpVC=tOv#8D0ZgrJO!K$V#+OgQ3TdC#
zO$~#r5rdLds!WMiLwP|Q_!vS9b_iyZH*#~P!|JLTgrxD7&2}#>648=Q;hLrWL$+}<
z<Yb|6<-Ap7o;1!F(Q9uV{w$oN0uyTM^?q@cQP2m@E~GVm@w$txiZU?mghq?Awp!YZ
z!qre|zqgG)S*;B!0}<!&(THj`47WaMC0MpI4@%s4(7&7)kd(cN$B97A@?r-Jz5@VO
zTqPyuP*yZ4Ou&NLyZ7O6h$*xV5&{o!)L+A1?FpRX%dLpE<pN&M{8<GWu7L0;LRDbM
z0{|HI5CEo)UGw2DMiL7^s|J58`9v9by$jQV2UAqcHiLOMmIL2Tg7h~tMA{-@UD3rm
zmpvaqbDk^)@IS5h6}dN}#Z*zB{M?v+7~}HM@JJVh0G>X6#=b2435F`8+I=6^^o5&w
zvE&oP(5EUUBE1VaE(}inII&-sD<sA9{Zlu(*$CKm`DZ{avt9VrLv%m{`YHc~Yvl-!
z#`pQ>&JsZDUdCwfbG)2aQZS!U(z^^shfPycsM#KD6MQx5IFF>|t>nOG5eyEX)IcDY
z%+Z~J+EQ?kB}$pnx@C)cFnKT<NYmfQ`z;c$&VwL8Za_3`5OqrsQXmgzLlumCPxv<Q
zBp@u>oDmsE;5uwv&4HF#i(6?U-%0LqUR_X_(27_A;}1bZGia=0^*FhK)dKpeG1y@g
zU~8~B<0T?b)0N};f^(Qd4|yc-kH4;!DZ7XUgGIvq+d;2Ry9tTxl*+r=&eb|EYm}A+
zbL0EFXwpQbmoqFnqdH>bqdBBV(4$3mtH$YgK%N9CRUouJ+-W?*E)6SP1_K$4m);Wr
zVUQ6#Vj=g@A{6C3Po{V&f#8}2$n(J$0brOaw;^Uf-dHKTuzW*7AOczbkzkho`{0@h
z<>4$6tgM_^D8q%(40+Gq+E8H_rr<5$+RR8+rXt?sY)6hV_!|sB|6Z%Mkfi`tc__TS
zI+DdT;1I-zFqlbM>Ze?dn~r`Yt>!MPD<=2?U~J(uV2=PjA)3C^YsMf-!u*h{Nh>{K
zRyojV_SL9tv}&aM)or6y7jyOgoZmfy!a&Z};nzN5m?G49N2JXFfRQke5uR~Hv*M69
z?ti(?Iah#On3eXNN3n(Xf~#v_?Wr?k9*W=~B?HB#FD%rKBoA8HB!y+++~AdxNpZjc
z{Ux*_5@?!KXFy(&T8JIlM%6y!5R!?Dr<6z+;J9hi)*ltt2Vt(n?g8>w9B&Hn9M6!%
z>^h9UOJE!NTg+4Pl?0jnFJVE!BPBef@2AihFG$(LWW~IJf@`06ntoptsT|n{qs>RA
zoYsFr@@8zGf*965wfOsa@IL+nVMOO_%)Zxh!PO7KG8Nl-aPRyHNCtyLRo}aJVCN}F
zuYf#|g9%;0c9+ks)`7D}j>7GUZSR<r<0_=EQ!HrYBXEni4aOlk-80#BpdSC$wp93l
zA$-JL)OAa4;7`c1i3Eg=_519HU<sg?3O%5|!T5v7fpH~Gx3DzeM!}Slvz5jkof4G9
z1YOs|4`ZlB6?z`MIsednemwvX(0|N>|8LIwpQMtBg@gHjlS+>Ngy=Z_D~Rq`Q`dQm
z4bAu0N1-e<s{sKR1i*;LZ?fgW#$B0Bmeuzs6NXk14Lj0AQmQKdBkMcmE8hD~RG{T(
zt-1U6IRu{ua_o1w=>&hIrx*hny%_)2vms~f%Ku~{eAhPdr)@i<f0&fvW!0C_^F^>S
z?90lK1%ZqLF}CQ-6?yXG`oWADa7H4JoWbB>)R!x=Qd_m{*Q+{K$1iD3DA91BoMjGy
zoUx2L372%iHf>ja4ED<U2UG57l^6MRA-{h1dj)fh-Reg~2N@Qzb0_~lL8V?&Oy!P6
znnUk>_B-1kk7C#X_rvF<nS+>8&ISeqStMK!?Pc2){(x!>+mmnS1pC>`rsk5R38vY|
zTYn_nG0OoY8A)uH&%5O}`>(N_BbDUgB(kkv2Ti)AN_(X~dQcEp)6GIrUH{gdwg!L7
zFShUNlKu7tW_4D^T)bigvmAo&jOj22%Jh!xV!G>M!BCfO%_93H+I6w8-O4(dzE4In
z=1{{-5fCp$7x$nVKBS{qq0xLr&Ai>lVLi(QdCHXts0s@?{pPP#*6*w`T|{liXC|4_
zyMWJGxEP&F4@Ay!Fmt0y=&T$9M&FI6t4m0?5RERuJwp*^X#|ai`f?|GKbd2lWN`jK
zR#{1MMK(TA022MjG)Y~01x;63eHv~@kW@jxx+t5L?<>Pd2p4Hu3U_pZ${-2p?@Zl$
zk*Mdg4c^p+9_AHP3jHId!K2&pzdXzVZ~hd}2>WQj5KOe^X~M$+c7m)CxC_(pt|E2M
z1Zb7#G7g76p@u@9E|x7KaFNH$o^=N1gIJ__kTR1BwdPBH`t|4&=bgtL$N4Uej@z`e
zglhBsGgoZHoclqg^|$XR##tPvq8%eemmRD2!D0zB5eDA@9CI*Z(S9}n!3*U5L=%oM
z=XkVqEN!ZF_v8t>K9@j+fyftd0oOo~kz^rqDexxt@zs-s5k^N5M^3op(u^vxhSIpH
zunj%PFZi*ake~SR@8#w^Oaqmu!RA|~Q_d^Je>33gEO59`wq9T?b11=K&oaH9W%&^o
zy7gRux`M90k1<A^4Em4Xo~y|maMdr~etQS9y6j!-h3UPAy8e|raJmVU1_OckYoIQ2
z7>G2IlIQ0SAfJwcHXQ?W19@2t({k;i>Mb9XI1(}-kp-3g{<VXn0JAEoasrN>)2G=y
zIM};12wV*^;Q@9r4~1$-7Y7ygK1)h(1i<BdP!eTS1hRiST^nfn)EKa)q>?kBT*R2-
zloN4Zz8TnPNOjkJ3o8v|d`JSLILrVkfC0pu(aO^Juj@y_dfY8wGwlcxy2BF%3jrO{
z6o3i_EF2Zqbr^~<Vbo7B3D%s1@>gwH^sDbtuG?zv@x-tf>gXc!?T7%W1Z1_Tg94AG
zb!B_$3W=9VR4=Eo*wkI)Z>+hY6jTK|i}gPS&GP4kf;zWQFh)kFBa={sUGy{($WuWJ
z4-bCGM?q!tifQwxDPJX&{u#6&y_b~i_f-f@JR}i?hNZ@nhOU8^lY)Yl3K*m5mI|if
z0C2e=97<7M^|(l6uET+d@w-3aS%ZsC26`39SB8sl)&4aZ`$>)4|DnQdJe8+_yt`FK
z+F(u{@z)b}K;FCiCjmg6=k<FS2#VePN}o!3j+r_1tx#SP^Ait=YJtoZ5r$|XFjA3u
zTM<6REJRvHgFuA>U3s1oe9hw8CR_?c&fBuASqL;NLSjCrMS-vMI+4VjSc$ovg?V?g
zb1B%mjjp;l^d}5(bxoUE8{~|M&B4hfNG6bA1vw2oitPvy$aqBm=Oqs?eh;@Le|pgy
zn7~8q%Qrvs1w*`RN?w8)5FZt~0@(boi@p@i63a8Y-_y`BgJbDZDJSho3rG-L0>TdB
zPuTFM>4G>-Fy_7|6TBzW1FTsNsuY-w+t!ptt%}i@5mwTXaja?Us-`CDM4f`#YHGTw
zKywVfH8piP3j`iCRrZ!7=V-&fYa7*-J>%+JAH_cms$Tu-wAzJ*V42CxZ)VJMrOL#N
z`ZwhabO&mL2G7D5Uc1$Q5E1`K;WEPHs08#uM8Bae<&qI8QO=hq0jx7&o`0nj+Sl_J
zxx0Ruu4_mS>V_hDnoQzE?Lt02lnQr)X|gKW2emQ3Dy3EXSRaPcqq$nUMk8V9LH7CH
z8hAi^+n1A-E1we1<3r4Z7lIqxXiwtK7<*pYm=4tTxx-f{R4UoeQqU{3h{6G_WL^kZ
z59Lqy%xB}Q*mMHj71fa#r+R-aPH1!dp1MHDhz{%80+wpJp%eRBXQ!NFc{gGY9j5##
zRp~{BZK>-O7o3`GypqJ23+wbQE}>hX#F#HS(%6#bha^NPMU=+Y@5|VLP6qoJD2O-B
zT;kM|qOHDp7#q0pNCD>g;>^0Qc$8-ujKo%Th&H;=F5BE`>9o8@es={svLFAg+~h=@
z<{NBzO577`UzT=ww)Q_C6ZF#A&)no=7RHeAF)t+NXy2aTv26PwUNZ6Vkd)+X5B>Ao
ztf59{pHYehj-JqFHH)^wxZT}WUahPaCEF6%29R0*4~vaT>nN2H8HOzDeuP*R(g$})
z_pV|q9UZGcSAQ6aXiWAJQym?y_%@6=kWDL7x)z`Wt~dvoIqzO+=S23`j$GalVjvIO
z*mfpeS;zY%Wo~XCJ0`<XVJD+nfbG8<$kW_7%EtyxioKPsw8aP0o64^tXlw_lQ`HXG
zCQBzJP(<a2^aQ;}wy*_UyRNFQ#y#(Ymf)a6EC4nlJ19BfDUa-41^p<vObN4M?&#iW
z%Qo6p5x{Sgib^j0eKU1~P?WWOS=tRAOhth&J4^lPt9jd{7<?XeZaD>W;r~k6qd-cS
zsk6L{oLWM8vgFX=MHzxzq8$z}Jz`fjw9FwnEA0Iek10~(^>5bap7`?<7;t2q`9BAp
z|AlLq{(o={$A7{#9RC$uGphN&Ds7oh10&^4L^Cj87#e2PHq!2tCECX^Nz`+rK#c^E
z5YRP%G;7{d)!!yI<F3=N={h#W`vj#*iN8zC%f9cA=VSCFB{3nd^WQV<=7gR6AICB0
z)g#{%>_=Ox8%X(D$L8|%$UTi++|2ZhNe)ROh?=%@K_`xl@8B4Lr%F^JRYV>}t$ffI
zraLWP!&vtGy)w0+gqBF<m7Zaukg=U4zeVm2xD}V6p3(Bn8j6@w4>A?E-@k>}a~Ha5
z2VcY=QiBN1_Mh_qug4t%^<c|{(#ZET-y?NdrO2?uEbqtc65Tk7$)2JlkyAsP&3428
zH8+&7GV6nBp6Xtkxvf+Q3l96w9xNDWYA|crEGsQ#)8}CJ#j`2Ae_b=*mf06D<*md<
zauczqvVYHB>uA;hGW^k7HvUs3hO`AzBI)6nT@FQyH)@OMZp-Bj<OY9=fkSfOMiKFs
zu%KR_cZ`Hu{at#7P4nkhP$-LuA`Xgg`8B<t-WR6NRE8_nDWz&s_KrSi_fuM3cb*Oc
z<wUxEk{jTbL~2CPU%s9wKQeUm5KU}4I%)Ian^Zswq-)@9DQ%anGClVrv^L>)Fm|iI
z7cT=sqRQdL1vTvmpPFZPpOL-<zbQ|e$(HR?Va@HLo_Ye!?R41<g{S9fK{?EGm?=mx
zk*kLVG(MkbuBGqT`I62OhZ-CFz6lo;;7BdC7Z02_kRuBR3@NJOm2esUHi~BK;G`EW
zVe{<9o9b^gX$uqNy0fDq`{37}dy=q~V8Vi1$iNJ-3SinW_y_x<3$TFjn9AgNjBY-<
zu6s+>r7e*(8WWZ=fl(C<LG-5p@b2l>pXk*aJVF70ax&;M6AUQt8P&rC`(W0&9i0w<
zz0y@D!JqdkbXnsS+W>7ZgftJ6d~ATl@^21@7|FL=hmQe0JT&<L*muoa=p(iBzvG4`
z256vG(KESjgM}-v5&TYuKF1kUKuCt$CwJwTk(9;+P7~g2Z&sk)0o+bfzv&xpD8k)~
zlz@;W`?FN{{jdkdcNDO{s7L%rv;bC5<J1LxtH1yVO$N$qn(&kGo&cU}u$1^@Ktkee
zw!wvATk|ZRk6$Q2#GxY}mtcBz*?HUSY^;*HG#M~{*S)iR+Hr?I+NdZIFFr@vrGEho
zu7#ts7Zg^d85$8J4Q2+iL&lFr>l^N{Fc5dPEtdhD2+JwNN91I{s@+s*g;-UhWz2nq
zNO|UQVaaKh-d-5V-EEsWhqw~Ni5^GP_v`*0H8f-PLjvTW&^^Y@Kix<w5~COH<#h85
z+E3g5BBp|P(^nJsI1W%hy{ZkG=+2wbl`%yw9Lbd`9W10^z-Ox29F(#lSxxe7df8JB
z+A6aV6eR1rPB==j$;w>mFsupF27818cma!qQ5KE%gSQUGM+OCk*Qi!OP^yGEVG8PI
zfUSR%Q#tWeHOd4Tt7poHxUrF-;<s-4bRbBB>6WXrL*ixsaysuzwY2LAH}*DzdZDFp
zfVjzi3u}x}nTi`2QZtjO``WcfOB2Hfhe_%#d@vR%b2gYRrd|fIuujTY6oNsIfztw@
zKMLN5!z5{oo9(b^<EGow?eVT2|IEfKc>8al>fS1KgN6aN^!d2sx)dDL1)s?2=S!h<
z6u;EJfQ^_z<t1Y_P>$TcjhN%ip*JEwVHXUj{{3f`mU{~9VMZb%$BBobO-4tV@ia;T
zK*96RM9Y9m(ldi&&rG#5?-CxRv^Zmn34Dkgm1p8~S~wCVlAG29qwI@y1O~_b(L@?<
zC^6cj!m=Em+$R<aUQP^_;7S;HFG!5hZlPvBDdb=j$9*PuIOyw3104ETzG-?B=1&bq
zCF;l$BnG0lhdh7?es1t^sk!;|v)LXH6sUTz0*aJ}*rfuDb}Pi2=LcYen(u-c?wqXN
zAU;Wblaq1{?QhdHGN7s8tBJZ!cAg5hR9__(dQqvju}r3bw?nt9G~Z(6DyLiXG4pYw
zkf?2h-Nelw6l;@~2gX8Nh6P12X0d>!Bo$drTA=Gh90u%{sMjAsi~GGh%`4PI@_XYR
zv@+m&M%SG6rp=W)4ND$!7&O<9&jwuddXE9-F{o@6z@ERy1Xg$fOex1tFmu^7<kHJQ
z2dcB~&UpX^<U`2uQL@wu*u5Tx$6WbsJ&6U1Be`Vsez>l<jZnhk(!yymnZgh$X*Nf{
zuXQjjW@+UyMi0*MRu8J4dt7d^yLIy+H9?1vmy>8uYam*8l(Fv_CM^1T*S8rxoWLIU
z@m?NNxZ2OcD?6JO`$tU%(#{N&p{{<oK8_omfEp~&m*yO3*eEQi8+5Y_2Bd-oX-IJ+
z?}88`FS!K!Lh?@ZW%u%N8t!?HGr?^<5H&%>2U5cxSDIA4?JOvUB8FIH3j5_*l8W<Q
ze7e)_Nb#M>jacDcX3GmG<g?^XgXXNe3cYB76ffL!4cbR%<S(NTao4!3cqv&L4mm@U
zfrVy1F=oLwKb?ONlkAX9T=b8kTdE-|PMP+S88Q`8<GEKIn3}XoXGMXIzz=>xdDdzZ
z4cz4QGB3QQ<H2D^R2V26l<Zqoe*jdttBV|%9JP5&pv$&uDLg<<Et2ch<B_>q@E=KY
zV5y@a-hB!@uUx@-^<I9@H?>q^k2@V#`aY&8?89))oiN5#?v<GtA&wbF|1JxS4lOds
zXeV;CI7asE!KVeRD9d}4zp4l!N|%_Q1kNc<enJ?oOvazu7M9ll^F@<d4HZX50{1Y)
zhAC%h;-<-k?2wze=B_1gxLK+QPgL$7PUbK+)k<-PadRC3>ftD+T9(*#jpLlvPweS$
zF&Sw<q-@!o4L=T`@0IvtkI%@@#v!0QL-Mi1;|zw|Z8!?4x5S&mHCkOX*~>`kpyL;+
zWd#GL6q{@sq&+E8-iCau!5{Yx8EX}@8@R}|<aFV&Ph?xQR|<;H%Ltib!@BPJcs~fQ
zZgWY!BsVH3mlONS$P8QKILWFnO7e*$_+N;SPZb+pjjxisWU~Wx(aNH54>`XhvSmoc
z%!$lx-6Sv~c+vZNeBGR1s?Ucb$|jYhy>G{a%z|ejJx0v8OtSF0mMH$@0o(tv69bi1
zMZJ#MAaP5N93R5nxT?atFK9NFonT87TkddoUA9R)l*$P#C|_@5%^^*+)%Y7sIZ!~U
zbQteG*J;U-#aWO}!28mNWkNfbf<B`b^wAW|rM5re{ihvUZUEciB)&7%i*(|>td$nb
zPOqOK&n{F&3p7gYrclD}ItLfzD-nVO$v8VN0sv(HPdm(ja}tGoI}@9);4Ye1o_n_I
zSfOfSt1G{B7|MG!$#W}kq4UEqL!~{Om3j=;iaEDRC0Yd(xkRX_<BUMYE1KtCW`W?r
znBM@H9y$baRn0}#aK-Bl1V|3`rUYCwJ)F#h;if-o&-cyA)3J~SxBX9-m!s#yS9QC6
z{`@7qxe8;pSO>atL0E=-5o=~nJeT8u*AUo-E0NJ<cyNTM-vpotG0|41oqK9rrX4QR
zvR=}8ib64mHT372GP<XI7W_+0qS5oiObuYdfOkjLUW4JvMg~IBY34W8t5xuKhh;R?
zhlAtI>9KD&_1v|E+{3|v1zpkoiiO?l`<NvM?yMm9+3P|EfE8ES+v9cOSu=sqrv@HR
z(pbjeVO?x63`oyHzdw+nG-$a|aVDREjPS(?YQ7g;Bw;ex>M+WOk3#8yNL2Mt6mZzs
zB}CjsnVwcAoI>MY;JCVzy$rAt-zeKb{okthQ+_N#-zYv*4Pzm(!&|Oqu2XXL<g+aL
zgmNJq%vhdiW(HOYB-tkqbUL_H$zcp~Zz|l`<PxTa6<`JKT%dG4@bo=@aiY8?au6*;
zD1Im}`TPX@?5Y{*iSgrXGhLXIdi3#r6{rQjJTly>GDY1@^D=!veq@Ekf0-8#0IctE
z9w3T!O7edqH*GV<QjGsfHO0gxw)4kgaUuYnH#D+;dSFLXk;uv72$YYjAixro1w`l&
zL&z%=&I-rhIP*U`zV1h_Zs_mt^#gDpW>){_&hUTC1q1W{{VeDFPv(O2zhf@6q@B0K
zkoqpwXJ+@)K#jrTGbN|OZH&|{r{Qado<?_-1W7~;VF6(PvZ^2SlJkpxI(8nwB&g!r
zpVRIIO`RB)cOITzT-jftC5@zzKFz=DZsw7iIDc1$D*4E_<}Px7-Mrkxs^g2RQPgqz
zw084%LaARh*Yw2wH_b&KP1;Y8tU+$fvPu+;8qK=7qW7-bmq+{9uQpY(SvYIFCqb#c
z5HlV+E&2GH<{c$c9{L_neOYM4GwG5w^8I<3`@YS_-86U)zfpQfY=!5JKeOceHya@u
zE}!(&s<8hK&TrBPFl}J=slb0Vyp${U%we#0&mr4v?z?&S^6@}{e5=jAN-SrbceY~N
zjQ1mM9r3wi?4lNT+Isp3jVUz=jhOP|O=z;5sJpHP#glF(+FTjdcv{WU(MkHyWnQax
z!kGM%-VSY+_Sr>bEI!t4bvJ*!M*x<RMZh3-n6d@Y_jUJvS_;{^a?_*%MOiaHy`YlW
zMNjAVdm_R!D?$STlE{RMN)-|n#qO}|-hJ)d)L*UczI^GrCdt4rdEEHXir*GLe#0hh
zY>tyRySlMu*KIx3h&9oNcdJ4`NK$gnW}qnC*02bWFR*eeWt|umBvckWl|Hrcn|oN&
zaJHA(jdxjt$C85;?hl0#z2D&N^ncf0uF>bme${z}O*2I}SGBju0l+!KFK|ToLamj&
zJENJu;&_1PS>$xqYM?oD?EI~H#71#UEJZV$U9ikp1X&<*hGhnC6p7jk#o%#4GCE~R
zb<E?U`2`4id$md&w1$??zWCGX>+1CTJ%7H*A1Yi3j{%5``C~PoX%UbdzBbqiD59Hl
zK8o{&61cMNNaixcd$jmN*Q%_ytXPFG2$i0x9RP*Af!vcuV}9_iI;0ok(L6>1YV-vl
zNOcTWQ{d5T9|(ZkXaPsC8an~BK;@$}JfLQb6&I3GDE^9&kd-9(blhWr|0R=gB)F2j
z21bTck*?T_Jdn$RS@&&+g+xf8Lw@!?lVOTHtFeclfS*fR@md~~eO`AE@3(V7L7G6~
zliw=5?y^m2=Sx7Ukwl)pFtr9amIszAg=~(KjIG#LL1GwY<)~m`oE4zDzE;~@1{KS`
zC#nh%w3{~L=upuc(fs=d)5eiO784}TTW^lpR~Z<<%T@d$uw{os)QWSsD)ho(pWsMK
zkoNKfa~W@r5K`Vzz;-M~AK5`pC@VNis@>)<SOYk4WR^+xo#BqE@P`a_-I_K)AbR7X
zQs@w&10M48+8p6di$}V?1nQD0(ymQIYe>0o;oZWk`H*j`Cm=e-dq!wI!2XA_nPPV3
zD2s1pP8mIs?A-FY8Lb1ffL`g!F$*sy6nOHYp8zL;Dr93w4AuH&A66JTJ{_HYk1_{$
zc|*8UQgntEu9R{sEea%w0u}^9I{;kVnl};$OZ+qK{?!SfgW11Qq9X!}xDX}!<IrA*
z1_D$s>RK)leLtBr_tk=wg)+VlXMG|%zm6^v->2z1tbk}lnOi@iEvKiAb3In8`Bk?q
zD^+0Y3V<AH?0-k>XCY|8$NB@Xk40EU6-oyn4#L;qn?(02x9ZQS)dwr#1a%E{*4g02
z>B%)0E0Q$e=FI3VGT?4|a8|wj$jAR5W9QH;O2BN{W81cE+qP}nwr$(CZJYPlwtY|E
zejTrS@b%#Rff`j*<gU!M_UIqWpT&8NE~ZE%Do_>Rl~m+{K`E#Dy#~sH04}9;nn}jN
zRj+7tmNeJukB*y7=c93vCl(^gqlgUTh!RJ_M@*tZl2&yHQlW?mN{+b4<gVMUorFRw
zJ4l<3%B>|L$Rd%--hKci`nsXtkOc{iFm=nqlRA#cj&7qFdE41UC<~-(bNTVl_;EC<
zhi8H<OcW3DRxaRBSsytw<jOF-`8H}V=yNrv`MhPjQiy7sS`w|w!GGlP%4_}%cjYm+
zs^H3tinLxKUfZgK-RB(HZf8N(K&};O8J=<hhzUo?94G4JqLLNs?x=P5h-=^gN!uK=
z3R5~OK;g`}`mt=9Q@2eXlY)<o`^g_*rSfY*%=?|#%1tG-4+I9dP=QNpi|wz*kW|SQ
zT)gpHM53RFRKb#~$@B`;Cnflt+2u&Jg`gvG@KU`Y`J!;@$>y5;CrU4$!gL2KsNRv~
zxt4`s(iM9bAU;0$#yDQcRAGvlF9bq@EhP2A{ITHbB^RkYfl(NQ<|)xI6K>&PNMAX@
zd->@W%d6dX0Zz7_PFQ-Bv8vIdg8I?L^TQ|;CMks$h}!6)#rfJrJ$x~8Dr{PJAf&xj
zJpr+&V<QDxPyApDts@@}3^o+DD#dSMi?ZBz5$YNb7tmx<zV&F4X?=I-b%2*jSO8Xx
zRL4uVU3bDBr7i9QGM(aS0BF}0M}#=F0e@|Y04Eky%J4$%RSImdSS`;>ZKZe(GId+e
zWtFS<f=YlUDk${#*19!hxX8{QzqAB}F|>ysa~f5g`v|9QTPqIyIiIH|Qop7;aOX=G
zo<ImMXSCj10X>YAwV{-POn9%mMna=R=L0C$E%o3#a18+Ao}R2vtx-VxBSURX?vWZ=
zQ;pxQ;-6Xq9prT<LS@TJMlx`n(cz2jC*KM#O~cjmIxE*57FI=c5rMx-D0xhax8~3`
zU>0=62m6Ok=fSvy#sE05)kOAg?wAN2=!#>m&CQotJH1^!f`peUK2SLW5%sb12@+NH
zS*{|2oGjHLE2@I!VCfZET2qYL*RKG#PYyOfp5cRzAeH1|Wy^&HxOG+$cxr!zEI1%T
zhQqwx<@Nv&CN7HRCEk~2YhC1fxQv->LSEYq50box7(+jk`}m>XN*Cld8#P&apg1MG
zDrT7r@LU@EZn$x2(j=~thI4)}Y(F3W>aD&^Rm=*(>p90XqB$TN6Q~+O-fbOOqkxR(
zkQ2jzOYO|)ZOfhJknur8`>h8Moa=!{mgT;|DBz*k#punoAkEE+-j19#l!CUH@nGnG
zYs1nz{i*EiqgU@*kA&8gappfO)Z%#?0lk=jp6c}vC8Ue-0&nF^lXk-x7g1n%)Tyqt
z{G&3fcewA&e%`br_Zp<P6cB#mr4Z1Qr=<dSm5@*&Ey*Lv4EPUjb|pw<*L}mZ5(th>
z?Gy41M$!l==Q{%M0Z$b}oJ*Y{)g$gQCl$vMk(GutK>z;t<Ct3x6}StmqnjpR?#fPR
z#NTQhe>JX%Vgw%%Ua)gm#!64Yr`5}$#;;G7FKXM2Ca)U#{K{oyVMJg`*$prUKrPaL
zeNi3Ip#v74=&{inf0lr`T(Pw-__t<EJe%Z6leJIJ`6FMMkI|p6?0Tl;kaArHp0-gW
z+p){(v&^c?jd|ZpOS}*S`|Hz8Q1xVjal(4`4KjQy?};};;JRz59O75DLLBf%SJ#TM
z6lW9kp*-jB@9|3Vk&e3lR+_N9h}kg)OcW!Lot-*L<}272?Qc-5at`33hg3Y6%5wiz
zZ#(mpPP%a??RfVYK%XXYM508Y@$7Zs;%?6XpxSdijx09zYru}qMKq5Mi7d0YUf;^}
zHMF}bKG!_Ij*i^L362IO++3_^QMh!QDSNN1y9w41(zG;w@z&3$7cz@n_f5Hlt2(<i
z>zkLQ#vm4{V)8e2Lz8|94qix^owLLW!NLlx^E0-8$2CbdRfJU@vZIJ#fxc;FIzsgt
zPsRMs-*MYSaal*?epPpWeV||aX}wvR7n}6TH#54rr5@faLDA8PzVR{jn3JsS6xofs
zg1QSMC&qYgxz)@D$?X+G_Jm+HFIvc5zBxY~Kuum`OsJa#VoS=<T2YzlZyd$jhJvbw
zE>@F-Lu`I>{A#oIy3_j1rIG&nZ?otZ4;v#lF=IAgcqvSj@^TFH@*=Y`2Fyj0<2Bjp
zsj^N=^?chZG)E#9S0h`3xE}x!+QPUTpP?>E44PD!J#k6<a5YDEY+)qI9TrlETmZ`Z
zVi_Fkf|1^poIrYE(@Xt^eRyk!Em>B*y*hh7O{Mpi_q-N`DgXF*Q^wU2%pUMiBmuK=
zzczr9V<Mlakr>b?cJEgk5%mGr(?KNWIYIrItL)Cb0fZ(GFSwYo4K>i*b;ep&(tcHB
z>IBe>>^pqe)hf&Me6`HIP8QXTc8Nz~BfZp~@=9E0<o@t7k=}q%8O$$m7qeYxf!{pS
zjpVq63~tZtEck|p8!ZFAY|7CUx8yq3e<JX8{1W0($>Lbat=8rmBY_OP@K)Y(u}ZK6
zaCBrD%p=Mjq2l!MpbwlM4BZxN5?z|^Nhd<V8&NW1SIGS{c|q+qYyS3~zSfr!m@$Da
z0#goH!AI5b{$B(%3`-619%Dnz6Y+i&t+1h%1B^%x(yFuqfJqYOxM8ab_U9t{*Kw;5
zMV)sm&sX>NH+`iB+yCsc`LCGsU&3W3*8hv3bN(mQ#`!;@+HSO_leWfCcjnbyJc$`t
zZHloi3bg5HkHt$<B#1{1k4OKoh7t}E5+M};I#8Hq*FI8yj&E<#voMsD9g|ddn5;_x
zH+;SN=6KK9{*^MCl8EuYo<F%IB6COY*JJq6Hu9%&Ki(Q0#o5!Mq3`?4I1V2D68eEa
z%t`K<l{9)wWOZvE-9JoppI0PVWCCSRqlT`?Tc7=pY`cG0=cnoxBC^P%G~G3{lw+ow
zIP^gL!I{iAKW6QlWs(%7nc;5q`+SY+p}G`q96ckyR%$?K&VP@WVRAdyRl++epX8Zr
zA!Jd5iS3L-%dR5!b?l~{EUQr8Li*cEIoYStm(A!we`=}nipy!2RYy|YbXDDTUR_2e
z{@ZgdvGZ)QgL8>$sReYEV7vSWG$m#VmGfFs^{P~#H~**UeHpY|$dN}q=|m+^ckJ}8
z?e9R$GRMjGC!EabroZXpnyRmP%v!m$lc*})WRBzA=~ad1)lJ*1ZYxb&3Afshldzho
z{&lpU@MLrzO?DT3)h3STj!pY)Ou33=qL}#hq5fb$chxMI@EJ|9684w;_HHJga^msk
z5WDSai|TJ+1V;LRyG6`=8ah!im24*O^#cbETe)T4)}H#0Sau8bfC;kUm`#LXC`qJl
zM7D5$I1j;mUgo+ET4|Ko)ZLR=4rx>qOY(<-TiI-w2!$GT#447N2HJT|l`whzg!I)&
zzZJPvIddgJP^7chGuTW<#*{%ZA$BVwf@|{aTv`kh8Z)|Y7Y5GIJtRCexbo`zG9B=s
zr0I2UCnjIcQqD&%A%8UK>Gen-34GNFmsTq?8KI#wChM2IOA9!+r;xLRsd>4hAe`gu
z{FyKn3|<dMW+XPl^beFV1Z$Y1zf;BD>S+RFIgiGS$b|;~AVaI^x?ruFsefd2_EHyZ
z`x-CQ-WXC6i?gOHPHGy`5c#4mD|=`PnaY%niUi{3+rU-eR@`b#G{+^>4P!442ei}5
zD5&#Pfr8u#r#)j<L-Qyxs~8mI;wvG9wYU=9H<JQ3S2n-8@IETXP%sve{;I65A8Q?2
zrr>cdd~5XsaJXLaSll!0-y9o;Gn@hG(z)dI#p*k|ziuyQ)$7a^GNm4PKQ6434LDbn
z#<w_?Ob@%bZM?@4>&e}1oY(Y#k<{8jeeUnRsU=a;ZdINg%WL^^tZ^t%WNwgw+1Mmo
z>|ewGR=(NUqi)huo5xV{NK-x^%;%bI#TX+P=5GCzUKN9;op+Iw_H+cv;y)toI4*KC
z$TplQJmFoWJ8<r{ue`?;Trh9mkYA34TZ4!2>x*@t;d=jsR@Ubt$-U!SKsnVs+@0;W
zQULXh)Lboxk1^$d^~o{S^l#5O(;-fkW1?%<R5xS-9g+jK?5yNWpn#_)T}YZ~`+GKm
z3iiV|4e<EyTEJh*9}sA~4%;Yk04)ESrWq0PDDiSdi)m(IOQf@?9g*UOyl@5=6-0iu
zIl91jvdG^TA%QfTij1c#aImx@1Qyni;brqf^AydY3cwT1b0|4cQt#{()Dys~+cv;K
zWC__NL+a3M&vJ&tIk@+doX-DrN$IaQgz=u2XVkc!oDfA9Y}y&xx;ss%ena3eiupX6
z--S14tIymu&H;O{m<?qk@nlGGW+Y-UPwfIxP@2P3s?ij2CrkS}s%PPhjISxbrZg5z
z6p2MPiW))CwAi{K=L;8fmLo0dZtT^lw<90&kilfpE-;n?<(HwHTO=^@Z?`s+2=kmF
zZuVpdh5?AHV}VG1uL$+DgQy`?wwKuR*}na&@&cxw^r6!gW`on7$)E4A#oz0_Ci~ab
zz5%(938J6u{a#<~w%TT~xGG@X>dos7#|WFHhG%zuuJCd3A)`Tb%_b(3<G^|Eob|Ds
zdIu~6GVrt{I?U)WLx~+sg)7AH8q0N)-AB6ywlqkLpI!$B(m=`z#BbL?g}^=9X3cVq
zDvSxR_q>qgC|rO*g2Au&z!}S|uNGq-pA07m4x||bbg{Xp7NBHB&^&EU$aQL0Z87vj
zD(f+Z!~J16q+^i>ak3p(gQtCgDY#<jcCF*jSQuIc=rd&Ns}BcDHmYLS2P8|Pa3>`E
zr~sX%oW=Cp;bN+n%{3m-dnZdn@nNalRw`>=ADmcRb_Q1#<WmK+;$rHpPdoS~tNY@x
zrrQ{T_uB}@WR!BovL%@HWg_agxU#c+>*r~V-Vq4;uWnpYj!ksh%(_bj$}=sB5e?UE
z0BL<01Rhn^<>h7;zkRkA6Bx!@;Px@_80+`kmgL`xwET$YV<`vC^U!J2_<^N7^Nc0l
zh4I||S`a-uLIIQHHhPk?GAi>3$ODV`*55b@uHuP75`S88P@arZg?f6USP}{*bb47F
zq>#=@e#|!QcDgBaB><t57-;h9!2MiM3N3gH)HX8BPy+yS8%G2=heWI(%{VDpsFf2e
zzMP3k0@{m1?X7Op8aPc>H(gq~0SRv5M3N_j@L&u*3pIE+?al!X=oJpQFlHkVVFKZN
z9-&72e3vx`P(L?k3RJHB#946_82mfH@Ex&6*j!$$c3o{W;dg9C9E-tQO6=z8q&+$B
z!$Fq{iM6(x{=6U|x{_Ep8O@4)TrmObP4?VJsbhWt9YHVUz;lH@{Qi(;l$yJNiM45P
zu0ASZ`r}#B^-i_|c#6?78hj|K23D?P&o2WFox+rjmahM?qS}4<5UR>9<D#P~`iC%F
zidnM)0OnnxJPbTuEqwmeERAX9sJe`He9VmJx?t`P2|9dDZ=6;|5r`uLZfB-&*fb!v
z3E!);zl*gMe2D^IW_}av*Fvvk-h^Q@B8GD`tvI+jF<+_E{)P+}<y;NqTfm5)F9Y+7
z@yMV|IS&0~H2WK7CslR#EbYqLn`(Pb0GWA!9Jzoq&dMwBl>G8(fU`6qPz?eawO;Rc
z9tIiMSybUGp4(RjcpxyO){2}Oq}_L@GgbRlxB%wi_NK7Dat(ybOpzYZN(*?7ns$X;
z^SSS;rCz1G+aD)Rt1!oka}gs4WS=3EfI6HEto$Ns6~#kvv)~XAF@mN6@}(#vURuW5
zCql#t5FDzvSVMk8Oh%_V!)sdDR*?^Lmq=X%V@h&m$m{9M>Pxo>Di))1zeDT4(4Jy{
z*b#Exe%O=KQp1gnA&9OeSPK8Bw7T9x{!tESAjp>+!aMKi)4^{;J{HC0ks)XlOm!GQ
zx9>5U!I)d#fnIR@77bGgek=}1Z8K&S^v2#?cK~0sdiqI$Y^AH1SLM`iAKih&%D@CI
z%zu+zS8Wdn+sh{0!O6^)1EwrEtfeP>-gam>gGLgdrU>J}q-bDd*o?84-yKpMG(q?o
z(NV#m2pOw;oD>yPw>uCaE$icjN2U^T$81|k8@&X^@oBIA)QjKs$uziQPrW!vyl|oK
z|5sZ5p^NfE7v+a8`b%FVkyR_s2~|JXL<Ff4CL>mJjdY+Kf8af%r!?^EDy#$FL7BEC
z-83SZ3wZTcjNfUJ&j}@t36=YZa)K^Q_<7!%np<?tF#*GlD#Lc^EEHWY&S>3arJ1|9
zyMT+Sa%@Imfk%$_gul3*ueiK{owuso20O|*OJ@3#osyQek?d%;63t6R?;)~>YxxqN
z=375UI<C#fp_9hL1JL)@i4$tTsP*#SZ0RLQ8GIQLHz}atc|BR#Uo_ZF%bzgbEyjvF
zA?z<*^6?m~`}C1L$N@NcBYrZ|5-livZy;fb7DyX1BOiPEfch&?%~Jw<V8Ex$G7CmJ
z81vb?MhR)iDO*keNN@y)3u4Q4V5R`Sz4ssxXm4L=-f~AKg8b=+1^)Jw2O!8s*n0m>
z=iDAO7E#CO9_axx?h~LYcwc3Av=N7^3hc3SzzO#Pj5q#rQtJ9c<bq*7tc%n{sVm1t
z%JT(OYdBe@+DNtpx$p^KmU8t(h;PmM&`rywfjL=ru=>@;2tqJl^aX`@{2CmI6i}oV
zEj18)YVfq8JO0ly+w4M4SROT?lU{`8!ITIzLs3w?4nhFMG7{V*O&0tEb4dYBhC%^`
zj92^B=p-lF(54!GkRFLKBqAU8c}OMa{5D%?>7jx&k>Px>xELtcR6Dh{Q9Eif)xg<d
z)C+TlR6uI%uc|874?pDKaRg>7cq^yG4!Ng=Z<U*gyP@_eIv8N^$(=9>_XL9Ej}X%V
zUez#33SK<tVU^v*(B2gpME(>5d@)#FzXyf@3d_?G)N>fTJXB2!_GLa5ql83o#X^WB
zjX{7DGT&D+p#0iR{dOB|7IH=Euc7k|`u7`~n^zY5Kej*r6=VKS++qB`I%dxQL?sy+
z{zt6js@9g>wiuG{x;o2a6OO>}b8NcXKKM9WlioX;WdiyJ0tH;D;SAybZtl!`WBsE1
zJ6_w@G<h(wWXCozB#8qvd3#x<TrP+DfjvYhsPUK4|7;66#!k+UoA6TI<nL7b`S|Lj
z(r)XNd>_B`ap>wxq+diqNKuG$%Vr+P?2XY2H4V^PWCCNNQ-^UYALM^sjG58W`}>p4
zK+!-YYe4wIA4p;>L)6~N1<4D3S_bk>bW7%hA;vxPYUuu)@Oq`Me$^zcn_nX}ATY{*
ztCLxBuh7w)JX*GxG<H48e^5g^qD-eAi2n>k=WfM{5Xu@^!N3!Hl4I<p$!fp8=|hg4
z>(5%GN`zpDyWMr$X+(vSuxaani1ywp^iwX-P50A?P$<nL7n~oAgPq9gqI>GIv0iF>
z{ybgcPqngO(nyw&HYh~bHPvYlcW?@4H{CAQ*`hUMBV>TJpJ3JL?o^Yesd$BzSV&ex
zkBAn`SVV)y3dwlD%(Hkm5O-Ha!TCbnPWb^#+c)#=6<n3AN(+uC;W7!?%y?jxy&gB@
z@p@umH3wt+1o9W3%_AnFTVh<G+H7-pFpjN!o-ZF-339%RHSGJ<x2aw!f+>!S)NG`_
z#6FjV1u%y-GRTTr*-d>-cfI%i8U`hEpbQITK6+Fn4mnWlpbY!tD#i3Ra~$lehjT!~
zL&H50bcAb*?7a*(KQ?hbl3leH4?bzCTDl;>BuHh5insNFwg;$NAep%8P3)OKTnUNt
z#(La)*AJspmBVVbk|-iYd2sv@z5guJmEebv3NE@@up)$@84@Kx7r4&U9O7g<H5>^i
z&~1lK0<t4QV%e%+g<Dz#3W-(b8X_zm5;_=_o@d?%%Igy7*@5YMKtu%S=yn822LS?I
z50|KAGY#L*uiH*jU6VQk5YX~uIYAO;S7ZUDFEvb>!(taovd01O4VW)<6u?_F@Ts7O
zE0iF}FD4HO;>U?9u#fqAfh6BGA1IfZ!FRa+84@RJ4(Oe&@+Cty!2)RDe*g*)7XJP9
zB=C?ZcO!F7r1)L}Tt_<eam@Av9WE=SW<}l%WMGWBX&SxTEoQ;BlGVHR8ubqs5eCVG
z2g1Jt5exuMSUjMa>*U7lNPs>WZr6>_13)fl`;+$4Wf9AMeDX~K=o0ZK@3!R)0$sTs
zHbH6;H7Sy$-#Af7QONsU)M?CBnbx(7Np2{`NgFFjic$Tr8;oaMS(oXS<N|0ExsyaX
zD7)#(l$459G_ck*@5L&<NwmEzAn=6FOBA~OS(oF5Od~L~^;;CwYywEYnBmLXzn_|>
zQ-%jSkwHr5f%8`LkSDrpNbI5@X_4djPvf8ur8K?7w`UH_y#^1-_r<YAqKp32^~PEj
zhhcWX1}-P63K!<2ea_`Pr_7^fF!kC#mlqX(bCHUHHtf|4BXC-dR0-Dxqy2DwfyZgH
zSeK=gE_0)=j?Sb2lDKXnABK7@0tDH8jJP-B=~NK9>Uu%dcabXL;3WeL1)C9D!st##
z*vR%Of`V2WiT;E)z*-Q;{aD7uv-d|Ew<y^cLE#OsOc@l4QAf;Ujac@KCF^WH#{Ec6
z7OGe0ej7m8WUk~u|BU5sLFI49M*FB2keLDW9FFW;X&ITP9vfs{3JIGSy5PInpuju>
zmX3KZ`9%?f+_H(&0zg_SDM`Cnj+9U(s`H6=D{-Ml6uj}cQfSyROAIo()1X4`lP%z(
zMivzG?Ui1=Z8U@`p45RxrSe@dl~9<H1LA}hL>E`LCdKGz5drm8oqAfY!njmn3n`ik
z{a#!ZE?|<g2hbtY>rd@d5rE&Y0QwrSPVh9B5PmVpWWQc|m!ieY=@MlD(c!bBw{!Q4
z+aE5-Oz})J>q;r%mZiG%x)mW#FbPPmONyY%`0l<$w)B_A9+YkR-SJ1H61|BD5_Z6d
z@Xkp>MzKjuMBj)fVxwaeCIfR*ZyeDClDc|gs$fVE6%sfA_Y<HJ{Rt5Gu9;!RW4RP9
z>$Rr0q^RDiv1mbRa-71Q-UmoptUvolwlTZtC$pzjmWt~trh2bZLAh}J_0w{}d1DS5
zj4O9Nn3cJWDV?-FWw^S@zVT9N$}XqDjISE6L>8}1Eyme%&+$#XjlL3#ucqoYrn{yu
zSiRm~Q*JC(nU=b&<B6|$5OUT>vH3nT@_lZ)lLM^l6@U}%Y3~JFsUz)le=DM0EwJ>?
z-vuE&iN0nNn9J3GRK>6b<4Z$gSENos3R0We65{``YVzDbYf51H8w4>h@P~y3ej$U5
zaExK7&cdFTP8rVCkQWFWtc2r00L4wBI0aWJMF7V}MZsjbcGsYkoZBf6$!FIH*Z=+d
zctk5cE5}v1j0rrIQtq=a6V@8FzWXdFBUn&rAxMo0YdhRg7^=<lVd-uYt?PP6h9|Xx
ziiL@MWMqx=_{J{93V5{?A(uk+%#@`jmgKr=4&RD`Ol(@~`7pvWdTFrhx@EKKW4Ppl
z2!LDOrqTn*rnr*rB}3+pXeM*?$vJ4eGoSdJxruoZ38f?LVY8#@!p-5gxKS+2l1cJz
zID}dkCY+Q26Sdf4pcH4FW-xFAnZ4jzXSK1~t0LE%S>|!D_D$%$6WCN2C&M@8XJEjW
zOp&t;jzk(q>3Arz`!OrRcqLd=qDb;BbAU4igKI8@qBPWt8xi(yGw0%7n&V#k@8;Q*
zU^)j(&<W2hiR>j;GH|qIwthDsIODNQ*ZtD&M1gfJvx0&swe$kw_(<#JdcE5L*65Hk
z>QBd?Q3c0uy=BozVORB`Xfi^%3!KkY+Ts!wHLi(j%47-rpzkE5%8%m7Zv{jA08kWM
z?Sf%ThLUz5uF?5tv$_Mv^E7On7{FBh3!XOc)P2J*MgX#f^6~G+cT<>sVz>uv=2rke
z<uikZ6kf1?#^ra}K&eB-<={FZqP#<PBsp9jxHkA9drD3k*^J_)qP>t@OePT?reQV4
z2A{v%x$D`h!g{dI4eQ1eK`8M>hCu<Hb=1W{M(s&eHxmIV&f}J#A)URn&K%0h=>)WZ
zqy0C~5*VSzt0?cqPBSkHcmcl3E27o|On!F^Gb<Pd^sV8Ty&ewVO8%g1=d7oM#sUH;
zwUemq@c=9h2dn|5Fkn#OR0fK$$XQlLC`M0)eQYdRJ_`VWIfmBzB$hr4B;LXg%Jsu0
zkE_%Fh-VCVqQXEVB0ePEfbfVL9x<)zV)aXR^koj4=54g=ro7C_WRL_S<#CmF^Br41
zN^}M$Hc)WbR$R5-5LI$xZ+|=kDGlYDc2<d@$~UoksNG+W59L*z3wJrang*nSG}YC8
zoZ7r8`bMLe@rP)3Ff)PFrX!zk9FEWE(}7HQLVKwEdAUGA{-%B>nEVesvS75V#<;l4
zu|XU?qB#D+-v{Jx|Cu{}_Oo-{H9x?786HUO(!)u6mN-v^+h*L?OiaIVr4p_!d_2GG
zn6|sY2>Gu!J%Iu3VMTW(!{=F-x#%BvV&nA4Vmj-$g%4bl1e_m!(tyc))PW-U&0pX5
zYdYq^qso=w!(UDhjmuqf5csUJC%pG}FMU}lI!2b;{wS~K><UGYl4HiO?%q>ifUv{C
z*gYtLvLb?U$b0)8i}>@6ASEZ&WWmhIs+u{|)JoZbf3G}AG^4h@n6nVuh>$ObL0N$Y
z99WnXRrC$u8*YaT^{4%a0FUr8Hy<5Rp}yp_=CEhtUFxN7(Kc)_8|Zg`=f!lp5%^^~
zPHf(%f#B`(hHuKZYLPKnfr=l4fiUA%g?<Jz!V94o3!gAtm_H``67O)N3dWw7JB564
z_ADS|vz7g1K-8g$hiVa9zs>7UDbGDAjt5cwk32>Ls`;1Pyv)in^X*b)1#8@621wzW
zi~6X<+5*JAxp{;8szkE(9xN|xY*6=H%q~Vq(p=2ch%j<M1PpS3NDMc{uQ7JBREb%h
z9mq+f9`7jwSk*z&PfgL{9emqY6?pT>Oy6wX&i7rs&TKIgL0{7X9%Eou3JlZ`k89IE
z!L7XXItLUX8SZ1ez1lzdQ4TG~n*N^}x_SNn9v|1X0->|9@c2E!?s$KJOX}3SvJFJ(
z8)lcEoph&i8DJe5qH3buOu`t1$Hw4#jU@20RD)jj+LD-9AqHE66D=wIpa%KvKa#8s
zEP*2g7af72LbOFAyQLm?c33zc8_~apDF8ARmJdgVKuRg$J_LQxnAlhTX4^O4^}Eu;
zz^|*xK8_{eEnGz57jKmBEe?iBJU}fuI6Vy`P=)UXL4*Zu+GJd74}zxxC@as`i8u)%
zG)~0ga;}^2by<^t52_hYreCzyhKsx#{I#=kYYf+LTCYu%Kx4zd*Z{*Fvv{`41#5?9
z4$f-DHcmRT%yj&86rLbce!3>E6bdaHd;4y80)`4Q&>WJga8hqL((1`~rhAR@s_6l4
z%0{twRWqubIS`~RC@3890tsd%2v?uF4Qp+EkLRR^8ZX^FQ7-L~_`jKMJ$V>k^XA-B
zNrJ*dZ)Z%)!D#i1rFE)KX+OybfYC0p?QYDIBdP$8u2v`K@6YzcY3k_yBf9;cNcLaZ
zjphGoZWtN<lWS&V_#c7IrCR^Z`xHD97+3#m(;3(|O2xOxR-{ZM4cp{^FS3T#3FwY+
z3q%b-9ZlJLr1FjW%UJ#o_@N_Zq$4j)V!(KI$>;O!GT-Cu8^_82yX;TbPTtqd<>@|j
z+|TtHf3o&r>E|R?eL9`|&oS-A(9f$#&q#hMhZ8pE<9)bxXa3}Gj9eq#OCXVqKz;fV
zshz9px?Jn*_5Gt-<qi>oE^b-1*1+&eM3?ii6X|_Jw$6NpT5G0w2&rGe+UN7RC4IJD
zvuTd)<u_7?g3b6dmd_-)QHYkYGe0yCo?GdRCem^m>)mK&CU{&*d1klRHs_PZ1ivS_
zb8V))--@4eku<HDv$SV~PR3CmebPtS?R_@Gxp%|%*1UJ-kDW2%6Hoq+Fln5SE<x`Z
zkS`%Wy=rp3?{C{q%dT<k+Pqi`RaUDG<7+P7(Qf`K(@T}+X^!V^ikBPj9f?mx#$47v
zA$k?D>GAlx?Ue|sH-+GQBbpOagyIFsY)AZM)N~iiM^ilf>ErWfey)?pBI?Ajs6BZc
zU)y9S!Gnxux2HYK)6gEavv_)rgiZ(_F5b8!_TT5>Lx!T5g343*PV1sZx6OxJn$m#A
zAsX&)kLoX<)2@>)%^p|#lF@Cs9+JiSLSN!0J2ktg99&vG`)CX_k4)%SU(FkYQhF@{
zc74M91BRS5GGbSC(@oS^CnYzoCpJhBQ#6cGJzXAb9GLypKe4I57oWaPUsqNrUoMmD
zS@b$OKfPaPmZK}f+v*8mg_3;9a19X#Dz0FJ=OeXOWatj|K&^w_)ohs>`EdAc0O=X>
zU%aZj?N+%p6uGoB(c4LRBI#?mTYuRxs3=^#%HW??HAZv@lF=1$8DHe(vh!eBg@f&a
znevmRhv`<R^`<($x>wjD2X!}VaJsNuzVK+${k_#%xcR_h;t-aWoW`rEE-QbJ^z<92
z2fKd@Kv7OYs8etbuq#``rRZs|<~=nz-)glj_>e&Ku^E7OP$k7sCI};V@}@)`v+Pl8
zjD8(@I&++_Pe%dI;s9`R@uQl69md4q&9|1uKB<I+M0;OUGNh8*zA6e6%s&A6RR|6j
z9a@2Hvu&Y=kv2yyOEJndJFKR(%>f6+`6>;E3s+CKa=D@o^l`|}7<<ygBLdPyL!H{`
z5UXs%eWKQURy3I&F`@-V(gH7i#KQ0sTv0~eV=O5(M`o&aueW=RUt)>mA~rl~YT|96
z0$<IGc9<TOH2*?Q@*_(j>1hc70if9<VH^ppjD<=Z;UG#*-40WK9<S@U#@FqIe%T+O
zlku=?6(+I3@s0L!C7O|SB}oTmRbD!kol+4j;3I-!l8vKSi~FXaHNiO9Z@L}^s10Ie
zng(*^%+lns_B#FvmK++?z_}K7rq#YA6-4+k$<z`&_|K9lx8ALR@yHX|_{D6Fu37lK
z)9?*dhyhs*=i4dF_>OT!)J+*b{o85a1bvgk=XV`QViA%HXVGM72!cO8F7SzP`Xqt#
zVF<YcJDgCq926~gKal^bGz}S4*k~Y7%JuD{YD$?pY1{to9ND&NJgIH9)?gdjs;hH4
zY})e*KTCof-}+K#RMjfV+f`Oh`pu?=iqyNh*Q0%l#t6<vG}w@0*z8u%fTX|=<dX?V
zG@m+qM*EVhpkko;G2TVP0ZnYGTb-CGTg~K^Y!5dH0zFtUp#fh2#RV~)sSP@2wkE*`
zJN)R?Sycl(icF+X5u`x23DtAnI>dfn6~$M8&rP&8jy{_i8q&H+p2b9vW_{l4uH1`I
z!}Ki6MMj--UByMzp;m-kFlS$6iz1GEbZ{by0HUrt2%w5135H&O(+QwPB@igbh1z(I
zRdYz&s{U{_mqUCI4H$-w55&jdStBIesmQ_hjI+d3BF9@|A)Q#xLyAM;MnuFeGJE{e
z1b9V-3oPke>KL+*oTk@IyJ@!Dk(Ug4fg+3+K9_nnE83r)${wGX0XuDNXD<cGW4Xl|
zsiyJ)KrQ6XvM6&vMb+Adou%3uM-x@9+oGoI%Jc9)_zGvb4;O((As|Nq#1;94tM|hS
z+XTHiJtSdGW&fM7pfI&GRA8rXIlf^XwZl88&Wo^NmMmrvJa1H7&uW?-3*#$G83?`i
z(4Q6e!?PMHDrUKDoRj;8C^O_wr1wdG=-M~RXvuOJgr(8qxkJuY;K3dm`7mtnp>K1}
zwwi1e6?5{hs;tcl7gjx-ORh{UxoTj8F6x}>K70D&n_Ui_SBDd=QHv=CTCcqNC#&yN
zq=C?<PLoO#(M85Gb-4-tQbcB=z6rT{*abTM;lxCceqbhQw#kA1UQ964Lf6z|sXgOK
zU#gs*vMRt@Z2K_6Ic2|H$Ew1|vnYl+2(V9u=wty|u1>JPFw>e?VFz?~0Q;~TAhk%I
za8)|{c|H6l<>?8!x5&BiTPAEz2zkx1?X^!^Im@jqvf?u-5tGwuut2r<^M;0qo$lWR
zT0$8WAv@iMQipXxe$2atF<6v&E1m4cF$aMS@4$b?uJ)7j8pgxcg~7FHqJ07ygN>q_
z;rvsgC_F5X97LSO^biyx9~DyD;YKY8n?874p)^5y3J9nlJtoYTKC;l<EaB=;mQ8Rr
zjz10#EgUgraZT5aO~Ql{{BfB~KF7My{Mv>@?*DzTp#S*lpbR#<fq!Hqlp;)?=qnYb
zGcT9hR*g+72@Y5`A0u>R66G_mahN=nN1~n9-(H!fIxTc6SgHaZd&K7wr7ow6W%0mG
zTSHj5jB*AKtl9Cn_l}44v*+LA5oOEoB2QkEHbfE4RJ$%im*bd41Gmy(dz$nvA@>X*
zaqp@<<wLKa%Yf6GM9M0La$~J&E``&4#Qb$nhwU5hS>*rV2cS`NE?SO<Zvw~FSx0Ga
zkr|MN6$ea=Djq`Heguj;YW)U>NYeoN*S|VDXAvsOx!MS8p~aSf-bi-lrcNUbA8}SD
zS5qN)YNI_rGwaGYTn`Q&7m`}ms4O?9Frzg@euH{vr8q)}SiJ4TwCZwOan+6Q!d1rt
z?EVHPm{Pf+uFtuxx9(IA>qQungoA3dkci9ZNH{Yhj}c}VoC(ooqIg9jyGa$xc73Iq
zY|Ab+hvUeRs63wyPp6W1r$*|jL^d7}pK^>onEo~uIuM?;tysq`EMFFaGG6#+5k4LO
zK<>ga4Je+=|Ei~>>)Wmac)(tM+YT&?2nQu#F$R_he&L2oh4DzUp;v-t33C=9CBe_v
zlS2mvXuk$MRJSpk!YK~Q_{H44pIR;+#-c)9sN2S))&^bLbt=@TgQZ|Pnu)&Z7Au9v
zlx?3omS!y!59)>~N`bnxCJQjgfxW6FR0&qnY`7elo9JSp4YF&<@#-LgWUTBIh9q;0
zy8!GB5f?>VYbjno>l*F*&QFJG0||t(^ismT_;1}56>(LU?d6RLj?^hT=wvLqx&?gp
z8!2j{_1mcYP34nPBT7_8)&&3r82#B3VFH-$`iqSgXo!l-GF1Qqel?KhE;C3h?M-rC
z3@2iP{YI#7U<~2wg84;PpiIQKcu5_|K_bef`I1LM*`$F?s65r{KcY8a%Hx;=mC=P1
z32Jfv_nE*E6#A~|YqV`kJ_Cj-jQpp7PbsTB-!`*}+4K&?YBKJ6GJF#F8a6niwoiy2
z*fYIrIv%N)#-QzJ6Ap1|5kT&y+8L!K$LTcTj5sU#r6A2+IeKTyu5l8}GnEwRpl$&)
zUimqOd<Z*DKJh#Zs@Hz!IGJ+GWh#KKkysmUMPYx`4avpzL1s?xFQ0x7N57YwBWorg
zQ{a%1n6204a@sE?#XU6%njp}ucBv)<C_T)j^tm{jNB`U}<%K&0E=%Q0`ol1i(Cu@P
zIY8d%><^taIWg=QGJTAVDeUSCStj5Cu$6Xo<glgydvIj$oMUW=`30clq@u%s5>>&G
zqJzY3i$@evYTZb#R_d)yGJzbW(bOSv%$$NK2Q+>(a@D1ymB=M|GHN0R2gu9YR1fz&
zCWDSpQoL+@0e$tGtz-9IM&KN#2-hmwRdXCi);qY5k@-x4jPKy9<3Fsu%C7Bv<Sw^|
zZu62`74}f0F&TciX6m+TQDHWXqvfdyYX^nk)23Baw>YHQX)@62o6ililzHh7yz!Be
z6W*#U$PDi)E2&5lsLhhcxusvHmU|Q0Zo+1&E?+Bd{w0mNZ8%-(1PGTlD01|+vz{PM
z`&VhtBFw7pXShxG)<jF@ug`@<x#Q3I(b94m&*?2IRKM37Rz@N9<sOO^30ds8bILp@
zPNxMm@4?Wt(GooIrSJOp<F*FkIY(*lS{C~-z^B`QoJplU^lP@!c8CM-VuGriI(uYx
zpK3*p-=>W6E0n8(+vlYg1SS1-X#gH$bVOA{X)%eC*W2KtK*ZXNQ#U3o$kg&42Uf&&
z>s;cZK!FpIC0@h*y9I!LvrdwTkUK5>EJOh>81hy48PHgn`7hVLddTYEoTJHP@G}6#
z<I%O2T~_6k7+q&}p3FUIttEuygOZ-Fre-+n^ZRv@n(_*fNFt@)aV>>ls!u}cA>~ji
zRY*+)sb+k_WFT4yJR8RqB<n0RkViH*kB3tK8)miK8S<HP-AT#Io2SlY7{k=2V0Z;M
z-D)+h;ao9rKZdk%5-EXrQ&;VQv>dIyg9?)%uoQ2@(4YLg6o(ejMhso_&z@hxlwQx5
z6PUy@N;j1Xd%ea=`t3HnRBis&PG&nNaa>Z=R0WbfJPYfIbgzxSd-1JJU4U1jk1PF#
zmk%oqk7d8AlK=X<SS9{e9Z$T#Uw)s5yJlhE*k_DQL@7ySuArItp=cc8LMq4FU}-O(
zW@w^+!xf?c8ZC*qmKWWPoU@zxCjTbEk2=lE%M?h<pq2t&B%*U%CNTwKp31>iD|)XK
zy`8fA!@*k~jD8>Ezu);cU;4rRe=_ZV8!VXF8UFA2B_qRsDl8Zo{zndr8%^zh9YAP)
z`TB$9BETLP4`fM{kNdZFfi#;W*>Imm=wUobyqi-?B1yb2&iY&VOTQiAB@((k%YSMc
zCxHIVjA<3a&L4B`bbmvPWE5=tKKHV-MPusF^U+55M1SgMVL!ckH8Pd2W)D}zE%j>Z
z(Qb)@NJNvITlzFbUUr;*>=A&@Sj=Ro;mFrEh^o|7cU-n+di-7#-;go}m=-s433U!b
zpjvk6i=HHM=@-47vq+$#H9Gz+K)!~#pLMl%%1S-`1?XXeBz{Nrl_oC??G2-{>ldR)
zUuWr0DaTbv#F%(o@N;g5Y)J-n$XeLpq@9sc?4!CUyT0~}Ro2!=$!HhtUqsS~I23=(
z7yGb}Gm(YhA8V@TiflIvvs<=op3q87Bi$}e%S*?!Apg}PTPv!%-xp0TU*p*>Q&B&`
z<chy0pTuAJ2R(#5uPI|0AJ`J=(H?wX=^pcX_sM{tP{dXGE1J%k;<Ny$*FoSKrL(@&
ziSDrV1L7{ps;{I%3oHmq&7`Wytzr5!kU)($swnn;RjL1}7Q#$x<cEeb^kz(iQSM+H
zoSO82e`B3vBx&Q5%*H`w?{4~oqU#wSqt?wc-0Klvf*Q$4x)wrkW$U^_lNs~aCVEv$
zwr^2a{M<By=o!0vGWzn`WJl2PBHzwUJx}0rIt1=iY)=CrU~jjBX)I?1A9U(+&y0bS
zgKRumtIY2wfS~^TI;_iNasO7dv%)8Q{S#slU_$>)hkpX9N=P50aG0>V4R27Cg)yEh
za1Irb-@5+iPf^jO74iaS8ic$+%CqD5tqWy`AZh$xw+B~6Q&CsmXfq;$#}LozC)phn
z2ld#do@wl2yP^FM_vtCD@yemdoPcYZE=sD1J5+{<QG(Pk<|-cd!zmtHs$!<&SukBL
zU9Fft&3`SVV?|vwSEM(qJHy(^B?tE4`7G0q*R8C8Oa2kZ^vL<(X7_+=*9sxw1_%;2
z8KEp^Goc(iHj2u7ZeZgA+H~f}`yC=k@>=+1F<|VYImr0obN8Sa#x$h{GOIv#F^sST
zUSa;Y@f0*%xfl#k*kmMRyK~7u7&VdiWg=TZG95G1SU$Ez3%h!1A2SFBcC;e(*3UmH
z2%zf9qG0n3SDC(xwu^O>{y!UyaQ7u>Q@})2PnTU=a`k`{4rD*9dtBZ7lQCxjP{F$9
zi;|5dIhb~FbzD~z<|RWc54W*`qL!^d4y)b3*JF@sNuX}h)4pDNdKe-=??sn~QwzE(
zdpa55jlxH_M*9Qb%eK32%_D>atc!fj(Qa<!6NLA+zg^aLPnE`$gDgGlWE9pzs0k6X
zZsFW_q^31!3foBtk1i@NC~Cp;GL70ovXOx>1p2htOmc!!5*jlRPZ^X^BynF(5`r<Y
z;Ne};z|q&yq^_V$R?CDC3g9jfLMBMaH?+H-LmbW#NE{$Bi0bLlQ^%-YPi9c4c2qFA
zW@`lC)>#P!+tKI~VziqFZs}Nx%Pv83VUYs*d-EY5mmgMPss!I0YQ{BkEC!DaU@vee
z0w!T8sG&J%34_XgJn?dcVJvVu3!WP}Ody`984C#&rvJ$It@Xk-%5*m1Z5m`hYt5U|
z==dSQQEOi@e-ZmnAWMT=@6;Vn{E*~EY;k{^<)_js05!3K`FpD0&M&JlixZUw3Fbv#
zZ`0We<;RneJB7a*GI`v@m~bKA41|D#Ki$<WHqPr7mTcBY1zODu+c_~@g3G)f3VEW*
z452}*H?>lFHbjkwfD<qFzKKP3j0nYP)KzcBz5?pJEF-pDX6{)tRDYr%p>|;k8(ERK
z9d#P}Xx+{O)ILnlQwonkjn<=NxlAkQ3dL_jNfa^)&|)+Koh3jcmP1fU%CsiNn}AHf
zo|AT=$KM4GGa!9K5D1urnmyToek>hhPzuydi4vZg6M|~rSHw?8qx-PU?E*4M`qt$w
z7V5c6@-wHvY;ySa^Fv~+j?F*Bk&a+)=J~_ijXouI0jEh;q7<pwtg7>J1ABmwskmGU
zJL5CIB1kKTS4M61xh4JQ4WC2`h4U6H^G3uUk0~vgO7_xo=s!1>LwPy1;ed4n{K>;E
zUNoVvrl5a^5d6>x{Pu_bX@SeHz-~t4YtI(SDEa7){oI-GBK6|j1sDmUWfa-7h*`+}
zU_pLtqne6tvJRI{<0uW3!e1Na!8*u<*V~vwCnevlP)l|Bc7+66abjJ+TI@|z=}V0&
zGTvrAPK!gl6yV8nGdgP+DgcyshRk*)1jw(Dab!CG*etKjj>cql#(31{iPHAqxzgGu
zo~XLx*=FsX*;b7(v53GcxpCce-u&?}Q=&1^%4Z!LPLr7tFl19f7+`BhcICIb({A_F
z#Pq&q;KwX0TufLt^y)DS-W7d9pr;%~RDw~G8Af+g{aWmRazp03Rx??m|09MHaS7EK
zvzz+19IKRC=+aIdy<OMt!<J1Oq90e&av}b~kd2pv5cqava(<gvjSm`}6p+lBYz#!3
z7rr<QxaeVa4yf-vz)v%<X(P`sEYC~zm)dy%|Mf@VGQ;mx^83LLu9koF>1DrhPG1fx
zQ*h(NWfWYJABK5Aj}85Hf7^qWm&<VPO=1T<Av^u!;a=%{H{^Y(YQFfhdJ)7X&9$x_
z>s=J6BfkEj5EpV7l9fFEUYZ{CUG#AQJr+_d@T#{0yybD@rWT+S*dAAVZ?o1mYlrsV
z^G{{fTRvbNdW)%#bk4Vv3=t2~9Nb)zt-5M|jg`224v2D$KSCU}s_8@fFaZ6?<VW38
zVJqsGwmEyOvntNH?($Plelf57!yEH37WrpY9=4+weo4f@LPjdT{)Q*ELt=;Wdx?+#
zVx|~YkO65?++-1e<$`#uaOF@40Nz~y%MGKP!0mkahY(TC4Eoog{|4p%0^owU>HL4D
zo&RR<nHV|$-?YQ{pYS~+<Nt`hAJzOv-%lX+J*m%FqPs*EX99v{G){wa`=vDLZ6#**
zN@&wWgouog000+sRK2&YAD18Vmz_m|OV%n?sz`xL4iqdtxxTII!}k#eQ4;-cGpQXp
z$c}8EY(-zxb^QriZ=SrF)v6CCXTQu!?8nUrkBH)s0+Q%IGbzZ)kIP?n2B0evIAKa6
z4Mu(0AS1OD*KWPat+VtcEeK9IBg$DUEK&|LoY}YJeJ+G`<!8y-vc`cNhvu;J?tUK;
z{_;_}or*8<?<9kWP4d6g=`r|bfTeDuG%+DeA!dd)FsA*j^kHf%wV22n=b-)7*@R_8
zYI*~-#^0(Zyu~=;AzST8IMt~Qi(K?qJ-+Ygq#!^4`gIPFmKS&tuitVhLycyxV_o}n
zifuRP)-{8tfOLKO;upth`nC5`SiO?jr<VdJVu`JOUk|=&z;TiBxK0d;aC)FF!B<kU
zeKOlEvx9%Abp3LbkW6T$qF0~SKk~_$$B<_#1em9~Fv?V0CkM;jatmE5^K2FTs()#z
zU+y4Wr;u_;PJh$|yEe+<XN{6eUs4_mG`5HA5mUB8y95{rB{5W>T@`<5gRZyethH|B
z(Mhoq?V3HAy@&x|BKHGqu5{UA7y)*sQ_kST43iqA(a8uqAg}q_E)?7wpsw3p$m{>q
zpObE;oUH4%QmCy9>Zv3Ynp4ypZ4c-n(U?vIonTU_b!^zwmD9rvO~r`5X|QF9d^14O
zfdTyfaZgsJDdhO;53pC3Ee1Tyz>eTWjU>L?x?l5hE(icZcpD~Fl5NP=jM1E+kltE2
z*W<0Rt~zZH+Gn5am~YQ^PUcNg2RWMaD}QvU#|?2mxgHX{PV;zqFUzJeU2Zm~h!;)#
z7a~5AqY1GvLu`8~gp?`B&h>SHA`E3~8$g@FNV(3VJLqU3@vRS<O%<AGBQq}M!gbRt
z2sk+|(4aUG1j`BqzEHRg6KI<p3-fT|>5Q?#SE5qP8chfQ(l}nt0Hjk+gMPMPMD0y^
zj23N_iT<|5d(%I%be~Y2Wi##5DN)w4q)u$m-hr`q!{m=z_LVoYlo3u89dUh7^kH3I
zm}CMgY?eIfN(X?-%5Vhl-Dd#R6A%tYIz8YnSlAO7B-+prpZ-~_BXDW8YH`s-ia*mI
z_9=5)CGS4j^m8(LHG_V^cGu2Tb$wmGwM0y|68c^}r@v4DN^qhe_pPK@Ca&4+8#2K5
z_Rn8astvPIYrzznG%iR2)|1*Gbm*FGQv`%*(@lDoGq8PSb_%(y-LhLx%|S2<ib_82
z`RUzYthQd}jqDvh3zm;ZB9(CS=2=9n`588iE=)xNaGrz_SA;GZERg4UAt7;mtnTr7
z=7ey?5nM<OqxF<r6?44kI3uV)(>$)nqYmXXP28*pJ6|?3hELrmNJ$rN?Scq(r`CF^
z8<#M)%_=AGR5G;l6($-aPAFKRzUkP#J?DeGGk(BNh#r)2!wZAhc_HdX^;Ki%R6ipi
zz9>5w&Y1ZE=<hE*@@>X3fvlbwuDhFEn8CE8gnyEh-LPz^tAv6~N8pn7Mh1_)K3*s-
zuv^_~2`XSGCDQ)XfD#{jSrrv%1>U*#XUpa0*nk*>Nzq$uKyq5sIs_Wae*jZTcaP<_
zTThb<yq0${O{_2UzfpJ(3p?l+n|k6z;Q0Q=*${*EHS|7{5`l*jGn5vhOI9^&ps5Ff
zptbXg0axdtBFr(k#S&Y~4(~VI1z(;c_TE6nohw$=u4R%nAi-Wu@R&fjOxeE6Oqh)u
zm4#I<D@tSBLBzlhk#)vrwGI}lI?2V0(1jhl%ziRB34_T1z_TaUq7n4^y$hBWC(`_^
zlOmq>MeBi1rw8x^W)pcx_FeT8BZBS8+OPWs{6*<yAsLxb)iS*R=)RZ}<p6T`I8?GD
z!F9RMP(i&c&m5SF1U@}qc~&$;Wo|Y?!P|F6;w`G<fDYY?C0JzmXOy>y1?Y$g9}gcH
zd5axCDz;j1rI7g8ylMv?L(V`<bJ@l8<0I@BD+T~|9M?fp=~ip3f#OZ6z2|rZsqKVC
z3<tYtQ#>e>nwJR;t%4g{8sMBS)#{cL1SLk!K9Gw`fmJ!Stdo9ru(1<pA{(zB%iL$|
zAczMQHImcy;>SXf$eREc-6;J`t@2W;!24l?lTC5u>qPBn&E%gECl%4~;JJwpw;3}c
zT{%J=qjLMf6z@fJaHsvD3%1tmW?PQH6UoC0Lh$-9E*(s&W8vV}#9D)}$w)vhMVu^8
z4O80E>#@8SuhIu<Z_HEvl@wiY6vYul#S5G&OoZN^X-mf#pJe!ey(jy|Jq>T(1w4LM
z{C9CqG;(1%5({gA#uOLF3N6rMT*)txGaB=XU=Jt9)xp2-O*NM&VbKn|{4^Hez9Rt?
zOd?l9L%TDuJJEmy#6QK4Xf3*0J`Zk;L)y6B2Z^5tkA$Ir`)JzLnBlDr)HKmJV346k
z-En>WARcxh7f1cFI26kztqyMi3t%r0sRK@?Ru<HaHvu5mj()j~m3zZMQ2)Oedxz*u
z!*<;^PAab0wr$(CZQFKIv2A^^ZJQO_wsmT)J<i&V{Wn(o9pi02<JO#4SvNB#!~x5T
zARCl;<pn&ca$V)5RJa=qAI={;kP6Zc<!V)TFeNqPi9k&%!k!h1Wq_^gVlz<lU@nJl
z_^e@rC_4DzJU+s5YPL7As~r=X*%E9@tD6Ap@0v;7tYwRo7RwZ&>dkBD?gtmp3<Ky`
zMJu^pg4VCcAo^0mqI3z&rb#)%ioxa(uh3)#E2aXPbr$*<?A9YQ<@d&@ZY;vfHu_(U
z4}Lw>Yz(PcYa->rL4#{x5D(t2nd!?2r)0MGB?A_^Y*!Y@^}dT0?SpwYZ%Ur#i@78n
z!yqGyE0W&IKqVR?^+lPF0R~H8eK}hCsFbIO1{o0FbvJP0Z`i^?oYTlYKCF)*B)PYc
z=nozK$-|cWfDCdm#!G@*(?F%BiL90x`=xh{W!NiP)=&h>IxJI>BC{dxui+2@QR&$r
z+rK|DLYDZMzUMr#SJQF^kO;25B%L?Nfu4D&S~%`l0Y+y0yO*ectnCG$U(7<tJ&?~a
z59hKf<MQy8m#E>$`W6)!hWW4ESObc1Fu>IrXa<Jth46#eXK(sSeBbL<TRP`~fyc1>
zyYEAB<P~p*?2>8~^qQVEVks<@iJc8nB&N7rbL=+LK*dP~Vsegl&0Ehr(zVWsmEAjh
z|K1gm2`jYWo=3H~tlT5JZ8q!EJ;lRj3~h~H=6`??x|Q>+`-ZM}sEc(l2PNZN(}JiX
zb~b!Eym|6qDB_TPFM&gJPqyCZ>rbKQ`DfDeb#?gsJTIKDU=l|P&ChDO?QOiI+4uTr
z`n*1#Jy>T+mX-zhsDf;?%<yX}EDv%Siqyh=J|byk8Bt-t#u9tM7Z@Yam(M(Z6-NvG
zXwm`@jH$W<o<CBzT8J^<V@kxJv{LaIJHwVO(2Gtm7;HsGUDnUA#Am}YWbs3yStC+E
zB(#J0ja-{FO&u2Ve6r+8NS;sD%X(hGv%*gx&+!lSd!u#1-<-5XqpR5PqpTj?okgUw
zcih13@GD`vMfPA^zG1t^Guh~;S_ga4wp!z1+cfhWi_A|(;FTe(AIxVa8gwYB=cCVJ
zkdXo^++DrG`PL6~S0A(7E%Mk-rT=;nQ)z~YvK5^VnwVrxmg#%#<PmIl|NbV%#z}mA
zll7(lQ?kcX0_+&!vZe?;jKmq6s8B0r1pac}$ZS-v_3Fm=2J`uey+;9E_5W7S|6LRR
z*Zm6<JIDV7kTNp<zpOSR<NprU*7#RFvmyR-SM4q-WI#a(1jKo`NMMmBjnwOkP7hyu
zU_d9VNfiqzs`2FHdfEC({TRCg-;!=*n7vDEjGq#~)vbQHy<LTuZ2uPHG<<d3IkV~;
zGrG0wo2GKqKa1kYg%h)2m4<{|L}WL!hkQmPFCZvLHfh1~7+!XG2IT<mOn>*ok*rIf
zhScMmh;Hb}K6vhDal`Ww9VCdYhD#%a3n6OU>f?SXd?4f$w8j%rVKlW(U-R{q(Ib0f
z)7<~2Z8LHh+KS`{AK$No$mWhtxDh{%i23ZpFg>%PJ=<W?)TyeZ#nk@5l7&*tX-)f5
zI1Q~Iv&Fj(k0gM}b7a~Fft%sc)m?ZiB{B}`Wjl%&Pj(#cesp;Ky37Jz$A#l*^|U7_
zAE*kIKZtNdC&OhwI#rQTgimoKOX8afaGLROK$oc~Kkc8&$3P?d7D^`sx;2Gcbe{AL
zkbUF_x_#Rw{_wyp$ye&vghU)ztkeSGDM)5~E=@9z%bTSmn=MUJuceEXlas>-<swLB
zdgTBzDRBNdwdUE6cg_=|y+=3R76>P9pzZj@yboM7N6re5{`5F}xqmwUxMm`i9;$2u
zU}Zp#aH&-Wksv;XV~i^;`yvuZ80-$%A`&>Qi~J<iv^i~{_-mi|C{6)pe_#g?mcf-<
z9^ucLUi)GmeApFAli;bP7?)3Vt*&6qUw+aucCA+KOht3nF+Sa-b$vhDHn&Xk7c2sk
zEdpz0m%1%c{5Jlx0D<)TPYl5gooj_RqNspzZ$HD@iRWB_V&d$_%dgQ!cV0u$q8Vg4
zDcMSC*;rfEz+4SS{&H>^1;VM&cMGwJ<4A)nm)Z?x`_3g1gm$oJ%CqiTmke_01}P<w
z)3FC-rSoa6GF3B+X!M36P`y+5$&_oIK_aV~J!X4PUf4d@sSxpM(BG7mx0GNSf*haH
zzVp;s0S|9YeXe=XWHLMkaOSRkPTOWf755iUHp(e$*n_fSU->QJqcb*)Eh)K4ruAb=
z5)C2d)st|*?b^E;9EF9HeoAN8U?7HEckYt-I0hC$o-0RJyE;v}YP#zl6X8;?c^L6K
zNDf;NEMz%N?ULBol(hHy=o?7);$Ys@za6PS6kk;9@h~ZRMAocTrU4B^J3Kl-3%X8!
z-h0IDBHxzkjbAM>)KEzX)rA9jpg`$0&72dDQb=`SGrQ+Vuc;@}<Li2t5q5_<rlObt
zHU0-t2?(Kv2&a-1vbhD-p@5khTA(qSv@UQ$S>U?kRa!u?)Qhuvp9v)v^brL&n=ig-
z^SECZ`zNpu=CF@`G*+)bKScyK1yvMWa%~S0yJ)TM<yq}fFsi}tFqWtfXxKy?QFfMB
zSP_p?=6DLSZbs%5XLU(uZ2@lzRsI`DHeHGks~ZM#+wNq=4Wi#$q`j*ye%;domc^z5
zEsVoAFSv~Nu|!E#E0Z$XS*^oPni@3$W|s{<f{7@ekldu3CF%<}f%w1_i(^*MT{^Ei
z;BZdl8oIju8-Q-iYb2UEKsft06d1)X9nL>SoO>+x5cnDC*`mBmZ{df#e4d5us;T5;
z1vgIIs6#!sE{S?%_NkePACNhoy}45+ye8v=dlHPtfq*gw;{@Y>Gpl)xL~{9Yy0v)q
z4y)`<AMZEr(t0<Hi=<)5pXwmrdmd8ohu$uaPt^w$Cd!o?fU|v0^%K+N6NVRnwrJZ1
zFCLnb!|X&@d-10~Yk+@fdY1o!xOOi12vmYFzv;&yyX)E+z-)jQ{k)ybVgq4av+H2<
zQw^NDFJoECh}Zv0vGob{*CQOG2=M-cMkK_NJq58daN=&TZejKx9`FBplK<=RW@Kjn
zpG+1;#{WQ`G5xQ|vuZ6{<$vVa_e^cNd`p|r=tCi<<cy>0>OYhuVmhJPClH0y4g9pB
zQ>zv%9k5yE)9f$xec(EqC8kAC!;PNeq%l1s<IcY&|3b`%^k1*{!FLX=J4XBZTif7t
z+0YlWcB1-X&aaxx88^LblUD<;cH`b5NivDlQj?BN$;^$dvt9#a4Rr;|Xr55i#W%Tz
z%&JUTciz!adO7IUU=@}{QNxv6mLe?*rtS^NnZ!?<G@rg@os)l0_zJ_r<H^h6sFSNQ
z-R&Fb3zY%!b<dr@?)df~-R@>}x<tl-m<ds{rb?~l3hfx*Zz*5%8k(_33vy1+hwJ6N
z$It1`BzFEU7r)27!8^d#iHCm4Et`(S1e5z*zx8Kf{&Qrpr{3Z9Ji-T$29Um_^T-ym
z^J<8-SpOF?k1L)W@3*0spNqr&_4F@8v#m$^vhm9Ir5w@=FJ0Pm)n@(L8n#ZJB2l`<
zVyg|_g%tE?tGt{mzt)e*NBlZ=n2+z1&Vr)3_sB6zyWH<<VMEve@#ipm>`xuV8D(RP
z&1B|1JiAH*baaDyn3#aw60(`2%gnA;wgLDNKT+o#t`BAC7d9A#(&8OyhfGtZ8}_6&
zh?pC;m*RF3(u@_`)(Uzz@S+%0Pp3sy=LU<KbIo>wEC|1?_{PJU>zY9&y@0gz2I<-u
z=Ma=+=D5-ZfDwxmp0<~|7rVrZ!rASu-(n~5K$aAOPFMIEavww<Iv+~Rxe9jY3eaw2
zG4DpG3Gigchbt=xK+ZDZ2yf=9^3ox&INpZM(uV^WLNl(a+i6Rms!WKB`R;TIr@JCc
zc5CaWADmb}v%j=5ziRG#s<YFtET)p@!93r)^CF67($0;yqh&$G`na`R-GX9mrxoCn
zTSl1z3_E^j5gi1b!gw=fJ}c2JXW5Cl$&$iyVb8S@2TJ&!6*~hyRmSyl=E)!j1HOiB
zl#=YM?C&AvDPb9qqlT7zWTn<T0(ar`d_hM7bx<K!8SC=r%|rESz&%>XWV|f)b!m&(
zeFgOpVV{A@M^ns`?NR(UT{W{llC^i?C|i|u0ZZ8F!IO<1Z!!iMO5+GeVk2zVWs<K^
ze^fo_3MZt%u@%f;+2xw7Wt^zkR@?NA_WVTC8BwI`BK$F1v64ADX9sH-v845Qs0%AK
z|1fHHY^7Q{z;tP*uvs$TjUhnCsl4la4+u?x*M-q#8A?k?nb0ScQ#QX`sL&~;YGT;4
z+fDH9gEH3P7ba9fwYr~tIoblsRAfkHi3*y*!#BY(XyEW@k)zfy!_$<752C;Ld{Zss
zBZCiQdo*L*_GE#1ewP>mLJPqV<_aTnu=hVz3{TH;arP{Gs&Eb9U)UBfSpilqh@sV#
z2n9_Hb?%fHUQ!HN;n+LWW)tF~G?Wzu`VvtY;y>FbH&W)n!F?g7QUXKqO@eJ3L3{NW
zdaD$LdPcE5W4WzhCb!b)w@C2^!80oM+yEh`ah?jky%i8%&?i=YYxz_&qc`HaM(N%P
zyXi)E8(`fo8LVqp1tqsL<d$*{E~?!9u(WFvmFkVBD7EIdXhjsyJqazShs!eyEpwkR
z+C-4kSy<QS`PEAcN<Qn>mO(ELRsI;SUe=@^znrPQeb(^6CTKp@;GIWQOY<H4S2MiG
zAly6@O<0E9HIQc(w4%9gH;wv{s%gz~pf*{Jf1u2))9;1zhs%;H%6WeAQu23S^vzNY
zC4DXoh^5jf=+Y>>=Ch>oP%yNKve@dld9zi-kcp=gN<@1II!c#3yP4(J-}~TH0{){P
zgSz9;2AUZ-X=d`;Y|5*061@{<RE{$yMD5yv$n@8s3ceYm6P!-a>ha9&qZ89UvM1GL
z$B{rFN{aMUjXZyx%3I~35cW-K!&@u`eVz=_z!;euWQdpx(F0UNi$sg(-XiFnQ$}1Q
z*Wvs25=DfcMy#+J4&@p89(sNQLj|-KMFuMC-j?mpv_WB?mazwD2>1Lk&T+)I9uKRZ
zq1cFZ&3w~%DH!<^pu&uYYck_W^=$kPEI&j}Sb1ZQ^l1=n+Z`f8xf@bjeu$oYdu!;%
zdS@CWIviy`u2fZLrxuZAEf1qq;cY!AqoO(`x-lQZbQ4Im30VpNINCmuqE@<PY7gN_
z2Ank5Y4f=L1)^t<PCN8iVi<LWy&#Zbi$RC>=l6Lz_^*I2kH>ECUQBjq0~gBo1L#RM
zUFq{l3a@{Q=lVR1sfCLMxM`d)4DGB2&_t}Z5(z@I{*~5l^RT;!zbw`+4$^vb=6zNt
z`k7`uKV2J}DzoABdkR-=@}ws!>AH=V1u8zP(U8CK84kn`u*By@120cTVm)WMDhSU6
zGN(J9ScltYJ^Gta(;e@^VBZT^4zVF3Nz-(bttB>m^+6fiSc=iksTfwJ#i#4g(T!h4
z_?{%z$ugDG8v+Ua19gZmm01g;K+HyZw7H~H*`sSl1mauT*QTfd`ap<%ocGi-^6#AE
z?Sc|Oe!tgsF_QWaJX%fkMSA+S84ZMh-JgHp9P?G%E{97gPY`s}3=i(A=_m0!s{*K^
z`01VQH|&Q{Js;U_@?!F{g-$XcnbF`5mt2vj`hZQ~r*+{T*mhSmNeN;T{jCA3#%jDq
z$lgOl^V%-ZWM7@@EPbVOYp4*DNaa^6;?vBC=$F)2ADMbm==T+RQmB5nKbd-!JFpXf
zvTTX{P`O+`vEp3EY8lSPd9WX>YlJ{q_SI1zp?D<tgzCOkh#~f-av@j^Z^-O=m}!O9
zv}kYh^HDH(siy1jJDAfZ>v~Xfb0`18AIxc6<1RrtWdDoQ*zT+9%Gjcj%Dy{cM|D$}
z;{k?aOdwMqsS;hRqTgi!nNl1)<ztSfzaG_1q;LX?q`xA!-<HLJS&Q>kt}6-C+IDoJ
zI0%fZ#+tyJ6B4)Kx4_<1h`3jNmQ}!*Etm?1Af8LBUI5))C>U3UluITGLb_#r1<`6&
z1tV37@_O$xc>qBq+o%P!3BTah1jj2yUYLt!f&`5~z+_hJ&AHdbV%CohbWtZ`NqJ34
zdl@39EXGjo9B%V=DJ$8nSCa1he6gMbXIXWZ@2yPAHa0=`dnx;VgM}LJeJ~u8S>N`~
zmI0X5E<WU7?JXbvvN-?!MawBYGEk7O6OJ-M*4&KbP8bTq@Q7Y+F`*}C+L98qU%n8-
z<1O}njK(*AKt~qJwx0H_D^-ecCfwcQeg3ih_GIG=nEkj22)-UQ$yLIYloxvqXlq4v
z2^PkegOJ5`DT6NMvtJNVcp)n3ATrIC?ofa8vZn*?XTWd9Gtwpu8lfUe9W`>n8ifF|
zO1M;*02UfX<MeP4Ds|+3#_0(=Zq3wXhY)yaQ7Ki!8NcNdT*w@;M@ZidM5qC@U^TCr
z(X-HRe;>d(VDM$BHg^}hlg}y+J_@$*GHe@p3#20q{h?9Hgtm@TuC7wf9mTFd8Rg7V
zzB1H#b^Y00t*EqoOoX&Dvl<^>#+Qn%v?Dp{pF&xRwoOQ)#w=Zko~ZQjWgT3`G+?|@
z&0xW;)5JuGCi|u4Emj1Osy&8mN6l9-*^kT$xm#=67gUj{K7-8^#4T3DFp6G%<ZY9}
zfQHs@M`;NA6Ge!j-j-UQ2utlz%hoAt2pu3|F#>G{T~u33Ex99W+s;Fc_gmgEgcfAl
z9$`gn4W8cWd<|))?}bw%*r{C7PDhB9xl(5VM%e7DDkJO3#+vMy3Fgm`W<v^?#>h6r
z^@|`*w@!c_$B-p;L`;PaKgN&*CLY)XR)|lTSN~YAWMU0zL`Xk}N8f6<P8Ohy7?M|h
zM}Py^>_ay()@;c3K?yhH2GYoUJLgGUfW{>P7afDwh~I}q;B~vy{~%_*eHrb2z@pE$
ztr>7$v|4a$E0RT~26Aa&J*h2&rm@wq7eG%ixa8()?HyX0FI7qKJt#|ayIc3lWU?&)
ztM(_OOt&oBTe}(wvH0unBLUqG6+(*DJe&95SCr9=TO!IeKZM}m?(-5>9~gcYnl}2A
zLjP*g&@11ZEC}`+RWS)*08=3@P^E@%_Dw&mh?Ng$OVigMPg$S)XVyIj6rSps%|os~
zQ*vPSu+EvqD1}lm5}dUk#bL#DUYWaP#9={feVeW5=n6Y5_id=H>uCqEI4QRJrQh$P
zJD-#CKMnq7J2##DDj46ugAayp{rva=aXrcEv~UkVyX!tt{t5v<$n88gB~J!<R1nW+
zKl44m8mFH^glG8`%XbV9`9E>kx0zC*ccQ~p35rR4#={ZChU29sJ$b_QmaHYp$t72?
zciwx^2nS$i>`S?SLh^n<VjG6b|KA4azuTJsrni`w|8E1t^dIOgrvDYa)vUP@`)~LA
zPrdP&G|gDWmSwWTlmRp|0F2|&9ZP#T=~2HcffE@iGC?$IY+f(_(eYpQ4V9fNmXZud
zB#b)KhE6~SU0EeOe?AIwawY%s&XHYe;nU?{%xT%!cjIP3FP)ilvsHaIulM9~^zhS^
z4N-)71Uk6ZrJ3Z%oz0y*2iRZ9>=PxFI-~kb(&;WsgfFuaJ$`TMt6!YM*^-uj<AaP-
z6`R^}NN<quzG1)e)sV>;WGgh2&Rh9=#CFoAW!qJ6$R86O5bL?WsZ(O`%zz2qhI!~i
zxS*z;OVM=6o^tn8SBm)k-(Zw_I|niMG@`mBQcukJX}|f1F}1of`-L`Nv|R$3q-JOF
z27`~_|GwnCpz@GpEFt_*tl)09TzyySd`t7L$Y-4^*ZP5}rhIym)iG#&y0OhNXOh_i
zzMh%SwI4sPuwBaeHdS<Y46DP|1=82z_hY0?XC_VRD>|UR=5tL^%0iM3TY~=}m*rnP
z2fWLM!e7bi<KkTiGfyoGO4oJvflpSQb^P7PL4<Wf{~O9-ydK>O=k*4W0$46M=ZX=C
zEU3Cyu>3Kr7z+A5$HV-Ax$?no+PJPpy~LJp;cNTIl%=fz*K(ZhK+7-fxVO38-Bg>d
z$Ti#^uhx1vt*XE^%7eT>Ii1d?rewQewnaHe;i=mm+-p~p35{a+2Y$m%mwvLk`S-eT
zydiqIN)8XXXdvb4)HcPNwzW#4r=2R5#QCK~)$ZlkV)m*_f2bBbRm!9+%~S|L8bU1P
zd}zxa<C1`qHtMu*08FHp(%WQ!a2onn1-)I0n-?lRpY}!1|JqI|J=-M_gN%f9s>aI;
zJ1b*;^Jt?qtWyUZ8+#Gn9&C*^<!LI`eGvPXsmRUDM#oP6SHb&NlAC}W^y)<SR;y~`
zHT&QqVcvcIEVXk^c5IC>qv^csgaa;={TWTBkzliEl3A#pfDO(r({>DKz0lee=H2k`
z3S#2a4+1p<wKi@1^Jj&ZyxuXDqb6P{aWq<o-1o_?>;12~AyLUSdf?w;b!D*1hkHh3
z&*x&HI2~;mdXOO5;rSlSTvAl&4izapUSJh9Y9>r-Msc0KmYb>0IuZy#;~E$ta}-!z
zB<f(ff3joRC6s@2bFPy(U}a}z#xO`FqAXdxIOtM%U;jRYn%(p4rBA^PTN4y;?>{(<
zFirt?*AuFa+(oF&gVzJ6Sh;e88HcK;UW7I3&@6IVTd`gI8kd4;j&ulXq{;s@ReHkK
z&8CZgFOfptj8oW`QZ~ZphX7c3O!Q?Fx!P&y`8e&8K5D=IMxp^B58Ps1IWvs{M)BiX
z;kFC|Pr$pPL$+oWDrqL0n3-=RhxqFDs{CGk7m_tYT^;4~Lo(I5Jm4hsT5DqHV~sz?
zLzMwvD`j!h;K8K5e%zNAD@u+oj-q307Z&e3ef^q0Sl(A`LUB;%!lfD9<i~#@nM-6y
zHRBV{$4MU&ArpQIBhCrc@-Fg*(Ju_rS=8@Z5S0pzxHV<2QS?QDNQ5~9W@t4<9`LB{
z<gD3%4`){0>=*Qmp6Oa1#|J|KZ@)e|fqH*LLa#ZWu??1Ls_gt$xNwpqEe$c(BVFVZ
z=+^mT{q%8&CeRUtT#3Bg#T=Mwj)=z6M2d7Thr4+NF#Yldhl^=vQpJ^~yY@f9K|e3A
zz3#%<=5%)7PS#a-znRUo3Y`SF&DqxBl<DyRJ1}VZg@n!4OqSCEWB$WouC6qYF+29@
zD&6N273{TsasAtw{VJf|z+ZnV*t~K{D{W>LjIStpG(;mTD-xiOEbLQ(mw?$zfP6+<
zQmd|^&oX75iwfp{15KvNcQ-2A0+afMekH}lJUql9)7<3>xiwSDL#$*-C(9>vCRQQ_
zeuTl>q=3N|LfbVyI;SeEZiD|90ACF#<w~xkDj(b0vib1pb;W(!WLc<O*(Wpzt^4wC
z4c7tz_V%@KkLOq^y-Ol$4>PgwYGQ%r|F;?~T0keBS;}{43>N`R;J$yiXE5gHv851&
z=NHJ`-LwRsPPgAwg=+n~ue_ftUx%>W>8Td1x~i8QE3T-t-sXH*<=!=CZ3}_#H-zN9
z!keQ{X1Yi=EQ4>34>PjDc0I)#!^J3v&YgwMLRmEUr^W14-^NDSfZ8h{sSF>Tq-(3!
zQ`KKTmR1o~Z~j7ft<-wfuOhcyyE6``Ex>&&g9cN@hOck0!oubfGD7-e;Aw|c!JoYG
zzO#Hz@%ma2w}z{K01taHAQ&->i%RfFw@KJ@0QbHL&SOQBhA?)gk#KNCj&L3<Ox`bQ
za+mH&5+HsD14@DF4h)+Byk1ckTz}8_TAxc}c<ZHs|I3&Il?I1cIB;nK6lZL%b_b>w
zm(&5Iwq1Bc+O*}xoDt8g5<qu|f(KovGIA3j9QW->CcLC13A>vEHYv%XvbE{R(&WGy
z8isN^H_Nhv*?q}emNswcjq?L!W4K+oe*YH*Eg;|KR<X~I`uI15F=kxfHT#t$JA`3k
zhT`8vY5E->lT%mKT6Xo_V)v^Sy}#XTm4?o+CB^&Fr3`Rrdjv@U#&H(Un6jW4zvtvt
ztMT+WXtaEW!tiML@p6lRc@mV(LHMKfvJW@^MsRI;5_y_H2?}^U0TyWh@Q|@uyNJ4L
z<3cQLZOd|7-z~_X3NIZa=S=DPB`|8T7i6&EA#XZ?M7zV?Z)C6@_i>B_eyVf0H)I)>
zQvWvmp1jdad{f#E3S&){Q0!6ALzb&bE}=w;%k@b2#Ri<FIE;+VxW?bVjVTF3ckn#O
zhmR|5k*>j{XBY^tWoH7`hX$$ZuV%ocjc1F&Riyc*7a00M;pH1y@&T{|hmx6L`-K>y
zB0~!fls*S<r@yV#_=Rcu5Juhgb@KJaRAeBYgk!}t{P)L1if&aVN@-f|=c{|Qa6&tV
z#TY7|hPnx@|Em75l7eE6MkEX4#yKz<!;c&dNy3XAlI;^AiDlG$a<Z6_iTg9|Kq%q+
zrAGb2c<?_qLi%VnBALT)@46Ki<14LSf?PmBkpcDQ<vs8<g$3ZUk%<;tq4vn)sQ~vI
zT}zH{*vUU|JsVH2piIo$Gye`o@_bl%0REe|tMaOwEY&ADt3MPYMe+1<Vfn_3fjSF@
zW2{n~w~I6Wz+a%U&ltQOJemw05@Ld2q_QB1X4zLhx8xtnAzLm$jem?~sG6N=P4cU2
z=}IHcqlOc<QdK066SSOf{5gz#o$hBm28#9Mknzqi==jkgS<s2EuQCd#oj8$297%lP
z(E*Gw`vGzaeMhQWhJilnRkEIjr#)W`o_eRr0$gT$g7kr?nRgw5f5g@R&wZ)3@%4U_
z{1-5Z(E>{k6?A?AV|P6eB9%>l$TCNno19x-nIhTp0DANq|L&|m5W35L?SH5#|9^Ud
ziIwGlY;KH9|AC%h`d`r#%bK$Gn;b~pAL_Ts<&bQ|eiA52PaxZCu<`vP2eMf0tHA=-
zsaxw;sa%OR@^$Hpdggu;pQF`8!wAhAc;>;H27AG_kyL2<s@+~B{0YfSiTks!-u0Xk
z<4^r%pk}#=cPmE1-%R`*1BwsB{n75w`ct*=m*O!La>>aiJ)9Ej8*88V24EwWR3UUE
zG3oROiO1!ZorcXrEA-oE^Fd?f6U{Bg=_)KIm>D~`B<PZkjKuuA7OChg(#+gstoHob
ziLIv2$~AXic)ctbMhEEnM~P3y*`Y;|#Dp+SLa`!tV#%%5t+OPuhCz;;$-nG2tJ8Sf
zYceaT!#ivxyhYjAFABD6s25Z>Ty>ugE3Mg0H1#vUsU<}xf>8t2W|9DvfXqM|HPfAy
zFG9*JQp%MJw-M51F5_`sdApXcIn|@EF5ZkUjvu_fVE54AeeFi1gkMx`MB*{t60=FJ
zs&2AdI!Ohj8!cgxyK#o92^SfRgbl?wRK`n$GfJ|}ShhPU7TJqaU4|@^TS$qs(E*4>
z>%_^cDGCRuldLJHDsnIn|Cme+0X)NaC2jE&KxOS%?LkBPfGKfI-uzyYyZP;GSym;!
z*Mi&O^qQ?)W@V3_?ts5<XASz3!Jq>;f`f0XE4u(yzk(879E}yw)Xs>GwwvmXaLB(%
zoXICyby~@-^qY=nvvMxuW0z+fG=U6JQLD^YJLd^o=<KO+Q6vS5Q<ehy4MWjyFRMU|
zE2uG$yomY&rq%gm&-7~2vB(!?Zm1-QHK@079(d$*Q@f~taU5a!LNcxk)o_S*Xq3JT
z8%~mRldfwt1pijEZA!_}h#e>s>1zhS-}j_%b|VboZE`?WOhNZc$4TLIp^pj+wC(XW
z{2uK_2VS2l2!iFT8^(4Z1yoAi*0u;SnA1!n<P6Xg92+o)Ss4N5G2@3-uo6yk%?RjI
zrotU8lwz<f7eMx=4eDAUqH_J?^+rhu_A@k=o+H#2{mJe#VHzb9_k~3*I5<*k>6znu
zDUiTWY9jGYpNKf1ag|Q>P8mJmE!lD~j%n@G$BmS6SaInG^PO0Q4_FhW)|J5LQ#77d
zRRIzn<cTYGaBoG{6s?4bQBg7BtcPZBx?65fw{Pq@M5aS*f#44`5Ab$I!c<T66NbPc
z#=77)Rp>ZaF*6y_?rYN;Qp#ixCej<#vQ~r~vV=#aEZ#n_a1U$DMtp(ugDoVZqsP%u
zQ9<`K@Mf^qcz+QxQbl4QaTj-EE?t)2X97?nhxF*;U*6LWO#B$dvCh#fhtO|5mEfp5
zE+L&{Zfo(f!6%I7jL~YRPR3tf+l!Fs^80uvX=44Is@oat_u>RTbWu%nFYs5+Jf#Xi
zKVK(&G6cJgME{(E$1vM6K+L{U-|u5jzHakgf{qA|I#d+%X`iwaj-0(-hSEBjg<a*@
zXb47(k&Jv*HgQb#u3>Iw_48}SDXEgEHq~|O8$f)XwesJ{)Zvm#<UiNl_E~K0;@1K_
z9Io7VlwGuJ>7_>d4^W%s?$2Q}6CA?OGZfEFQ6!}Ya&(g)!Rn%P7W?D{Lm|bAvZkd5
z2gX6`hxqm_FO?A&dMVdV&Y<Uhp_NzNwmZOAa2^mS8Ei@7E0e02pEH}agZ28@f%-0`
zPZWJ0v@>3fIR>M4YS-qkHJRv1n=C*#jtF`4m=a|OqAPt^!U-ok<I?=HKAZ4>;7Gta
zf|@h){PjL_+R;!yEp%YeC&5t8-r6*Kp@Bo$zZL!5p%*|CIfkA>Jk!upd%16DSurMb
zzJAweQ{}@oA&>{I5x;wz1<)A6u=2+f1TvD5n87b}8-^j%iT57MHHGVF>=|-Q6n%_D
z#@b5l<B^_AOou|!s<ECFQxT)WV~8gV%r2jrALG?r6Frh?rr~k&lMQc^AYO4p5(*Sk
z=5&|Tc)=If{Q6y~0PGS(uBuNj=n(w4YG^K~>TqW>dfz0tHZ2@L$Lt4j8bpAeB$kkT
z(K9T9;I(+jnpz?2SF4Xtu_7sE99d`NFP_20L&de~?8vL?vPs>snH27mSx6lO<}Cn!
zqDS@lL)9@Fs)P5d{Zf&%ObEYw<#R9RK$il8^*SZ5k555(qDFe&2H~k#z*L?z_ilOk
za_*|U@~ABwRHA!-PX$_<O}4Y@Il2edgUq7(C5+#ovw>JA$2`FVJY4k}g?{EyWE}dB
zG>R0zz%?w2_BVJYYI4$)ZjI)2$LLo$D|NVBpN@V<t!iToTBuX)jaUN^xVB8^7OyWA
zlYt^8lBikSGk1PoU6ig+aPedV5kgB<9R%D44L=)i)S6e8cC&}fcXQGV4H7hYoYK*r
zoY}6-83}XUble88J+U+D`vY?k@%^DD@`SQM`16ru_(Bt`LJ`$vL@nSW!eRBE$dN}S
z6gZwlZBv|0C_YOdzw?AzUgdyd&QIQV;~^64jvn~#gu+}`C`La-_8Y%u3LD6++fV0-
zES>1(8OCpWxIT}4B8SH9YQE;lio7vaV8HRyZQrE0PIk`yy(45K;VbRIu;dsxnYR*`
z?^Sor4`ul7<m@vc79V_B86|t8@LJVj{YIZ0DVA7-%Q*;+aU$^81<!3rUdd({8ATg0
zvPF?cwVe@H=SQE4-QDU1lCt&lA_d#P^86w<M7qbiy6-oUJ1)P0;f9G7!ni5HHp;VA
z>dmxd9cND1rsKpLWjmr-_OXzQQ?PIs6oXe$#x<qW7@8Vbn#!t@3~S^TiJU8*biqky
zEx0Umvwm=x8g^-0@U?y*_wshPdThyndjucVSnlJ7mEw<*p)apr?2H@C>E!G@y&3&g
z2Y52R|0xMCxE3PgKj;!ZWE!mzd3^ze3+|34XnV$KFaN^mFa(WzWHt$VE-$*lay?K-
z%|w-Lvbj2fa&Z@JV8{{F*l@>69uwNqeIm4Y^CE9Bz6gAm)Q6EsF}Vd#IsR$_|1jVs
zmAX|=>rPSYS7ThCu>dZiWh`+BMASUjS!==!Bn|IHzGi2|>H0;@rcK{h3nsmEpBwPB
zcocm_{CwId)sVfnOyH6%KY^{xiR$WRkAZQ{b%skaLr;pJM9QD{vBu==_yBU^$(pTq
z;#{G%K0$AKjyQp%U7YY5CScUVOek`2p}T))HRb(V-RSLu4tZVNjgeF^3Lb*iigs~s
z`LLtf`RHXg<7n$wus5s$D1rontZp7pE#+4F;l}Nh8iB$4Em*VB%$A<NwMsjAc;r*_
zPf#W<i!sSY)i&+v=dx_lcrf)$d<BVB*Z9aHlm=n%s&Nv76W^d6I;zx;V)iPPb2tCC
zQM&?I*)yQswnEWI=V?nzW7S8ZrKzns<AK=(5Sr;mhy#7mvz|4uEKA~Q+5dn+_~Z3V
z;>4jAc1~&B_wfEgLV7e@n(ocXE;@Vlg5&YIv|BV8_LU1$IIBH2SxL5)7xNlu<T54Q
zM!+{}B>H|&hHOMiJ-Znbv^ZWTLv3QRuo(i2MJ4Fkg2xjZWO19T?mQwR8V;;If%Fgm
zhro3BUHkrrlJ$QO7&eywI|gO`4+sqN{|bSb*3ymJXhZe=2mH2LL@}n}BaxPl3A0HC
zqHJBdtV~Z9YdF}fsaZ?MlEg9lZmnF(ul=lgzmaMhm%+7Ypa{krkR+sqpX7SeapM0f
z%4YaH_|d(r!O+zA?b?4X8~SNnO|U;vXZEq~X?s5o$HAXcSHC8fa}vB~A${0VUEtA~
z{Q(Z{^Ujp2h(_5?r>{-)Qe(I6)!aX@_nY$r%b3@(yxQKgluH>K`}9chk%&TAIrR3)
z0tA`SINvaQJbrQC=Tsn=MbFL-l^7CS_rA&!wsTz4Fwx#xGbK&%y<z%8|F|2@(<rkw
zwNfwGOEp-mw_HBUc2}LVdYX&xCT|Ed=j)(s`chitcGBz5NMaNJ<5_7Iljd&{2hm2@
zSlj8xN0ugS+euVqVKvoschp{1f=I*h{MwjZbz4^a^M2l>lv0n}rgRi^p?Vv#_~gQ1
zCOPrRCT#_>8p4`Ya^Um?mS~bpMnb<n(?)9W_5Qlqh>@E6U3MO7=uXlUW!@EA+n~4+
z6;K#^?zLi%P+y8XJttiL8&qa)!5i6I!R)Qu@lBRTFlP1O+;E(*{7E7cM<$~B9F!Rj
zkNW`D@*xFF00IT-uVH^GBpH=mOXX-U0u$KhC{W%FxdkHKFw>=-dM@Mj@t(-Z0E&RY
z6>u`SdOj+Azhr}6ag~B7sW=X_3xak`g(-U!M*`}sG+k5V)<{tPlbz%E&utqy@NhS3
zrk*&Gut4)(S;1{&kT7X=bQ^jY#ZCV?QwtQ<K@KQw1_K&#J%ZzO89ORFb*QmS9qp#)
zf9m7OC1o{eVutDb0u_T!FC5tTjWb$bm~Y7yctc~AxG3a{Yena-1sc3pDMO$s)r?kI
zw>cmI+RjqOloKyKcR9H<fKF7K`-eZFiNb|I_vLt#979w0d59*ht}{oN(;^e30OQ!l
zd4e0fj^VnQ!jo?;F9T?bkdlZyv0-Pf1~-(PgaQ->Ouy?^lZ>n*Q<3g~XhNPCSP|TK
z57@?k^*xDV5f*8-_hHmBMoTFpG^bY@mLWoML^<WsvX${rbTwO2rUC=v>+1J(Qz0h^
zu+F1~AiM{(5t;#2cek%XF&*IP7!S{Fx<yMRT|;>jchf)8f&YVFl)ECWX~%9nl%u%V
zNMY><cqCtq(oAg#1BGyfPW*&|{pDyxC%9a|=y+ThoFFS{D_mzxCH<uUGv$RSLZSI`
ztRn=;!ol2O#Vy=c|4I-<@7qCI$M$+6wrbtXd|1ImfISENO4~+;-MKNSR9ZE=d_i|X
zbqg*KT4u`apJHmfo;aKrWpCkf%$@!!O_8ooNdo^Ga25ZaeJ-K9_*YFAyTP6+9se8I
zcW59KRGF(i+)HqoBJZXzW~z8h!)XIVOZDf~I^lQu9LP}hm{QDDTLl_+gH4vNIiwg0
zgOBvFd*D<pz;0dy)5T<Y81YM(6GR(jUV4j^Hrb)^^`v<O(-a~*+~7(8NecGbO(ieS
zH%F~S4iYA%3+IdiNbRs6O{p|nJ|bFLvI*ZVo+gwE4a1RU6f|&WmvBtpI}2dI{#nyb
z3+X`vn@SXa6yRsA#^we8UYLwQRL>*JM_(5b;Cw3KzIu}dKf!&8VZ#@2Nqr~-)T>!Z
zHe`v-U_ra4{^6v(O!^kD(p1bo^s_k`Sww3W|I@C?r*mMX@O!eQw!<l$r8yn41Z;|5
z2Xbi{#gT%5rZ<9vLG*AQvhEYb;S6|`F&SJ(Ddor<NM4X;i6OSN8uT_c@MO28GvR@;
z#lXR<Z_Icj<q9g8)bED5324Rj9P6{sTEPCM@tBf`66)XIB0wS!9ZyhuIKxCdB=!k*
z-8K7#4t8OMO&Vj59XB|3T+h>fCprf(BoGlSPjr?SwAJCPVr-3Ub9G9R2isA)G0nPj
z+{@dxv&PX^v5r5ECGA4zM4xX6zg>p0Scu2=G28zzTS$-*baq$0OTR*Ba5@mVi@a`J
z{EPL;z_H4rIrh_5Vj4q(X((ZiE%$(<AKy^l;r&Xy>?6-$9rIA_bV1c{z*Jq0-M35e
z-o>edJkibEHi!f6s#H+HtyO^4jpYr7rlpk6v9MkxM7xlDdDe15$>3>cEeeA`i2#Rk
zT%V#{<ZQ!M(sQQo&qF)vL695h&})Q?C4!=BWS#}f6veBT`)fwh;e@z#*o3Xr0*Pq;
z%H9H~Lnm?-<P!?0p-B(@V<#a@81HJFE`vz4OZg1GF+wxmy(Y91;tG>;o}(>(dpe*-
z$zL6kNFOYTpD4pnsf;PW*Hm-PobWm{Qpzn2Sr#O9vA~&5JvsD-KgSs$pz-Vx3iRxf
zbzG;L*l|`scx_mK;bZ-mB1ZuU;0HQ;?w?{C+zBM=vz+oJ3XGfSo8iedtFK89jGuGh
zK=}A8{9wa)J8?|Whv)e8GGsx9LjLSw3cQi9isfW?aw)xyDA@cxxpj{DNGR-y;V!uq
zZ<ziLt%F>h*l^J#zVN3|+<#)?K_{E@Y@84m0=`Zmpf@w;078jDBIMKZhhxEC_Cb&r
z;Yxs);!<G4u@$%L;$~Q&PsMA{XM@eR(V_)Rw_&3PW<8Tz&&=H9=?o*5s%b3efeX+M
z#e#D0a+_cQFqHr2x!J`BKJz$so);jC2RYEG>w(ywDrkno3fkk)2N5%`-1`O+{Fi;Q
zL_`wKOvm{mt{?>$ioQrZOPOaj>aYn)N9JC#Qv}m<c@>~}0$swb7(nIBgbAr%xoALV
zcWit=*-zb->Eo)@YCm$G=Ulo-NGGl>g5SazLzrC@$haT5JdN=Ln~H{)J!uz5Vj`L<
z*L4y961%sSq@09OIp;t2G#PqA-ROm%v>+Cb%A$H8cJNaDtLhf>4NE71931v4HMOHM
z>~D*sxRsr0fh^4?VWo^=xUkq9a)*Pih-@4HYn{8vC_cRG;K)GZ-e3VgoG)X89Rw1`
zmr+IsVRX@+kESxhiTi$kq%=U&D^QIR>Tws2lI^7?yDdcXPa4iN?{&ahPz??Kf#&lU
zaj`m2Ev&SOTI1AL6Ep1s`2<n9*?vXGCeCPdI2aU(E6pY=<f_k!k>+vJR;_5et*pVa
z8Z|#jkq<pOwv7xQ9uT%gcNL=EF;ZBXaF|%@X<v6E>;=V}GD~!y>xQIP{8i;vnc(_N
zHewL^A2k+F%o!&p_jF{hpnq7(93uI&qYNXiyo%w0vOmiWn`s@^_Z&mBZR<pVd>lrW
z;$6tGNZ3X6Dl;Y8h6F!QQ-Wp8TN}22oIRL$J<y1JY#mq^;oxsUr7Pu*ke;*QXl0oN
zSQCXmjO|dO+`Qe5%l2Rq2ZGJ&Y35XPvn)8@Ad;V<N@n)*M9b;1mdJ9JVSEbc@gd1w
zRb{;3xyS-+S5pm5pN)`T@=Bp49w#VYfUI9mVV_PyD6!(sM1MD?dRK5Hk6vV9esW`O
zNOgHj6}gtIOLdQIE(_T70;|MS8m=}Q9VU}TVLGo#iZiD2Q|lv=$g7JzLfJ^Kb(MsR
z$e>>dxM|M_6f?zv9CpM>ac{X_iL>$LeT@Q7o-I!eF}RIU`eDuHN4+*caCPwHJsi1y
z`%dB^++XrS=htm>a6Sg?YCb??onyoUuQ}iCo&}}j3B^Ja`Fwp}U9m!PV5t9s6Hhzf
zE<pU=w4}DP5Ih<?V>mXrv%0YDGFFIf^>j2Z@khpJ!o<%w^x|68HEPC{-wdi5&5R&{
zALZ?|>OQ;Ed+>3FFLya|6a59zYc+6(dp!Jm?@<(Q0j20CKL6DV_7;RCMLyqIRr7HC
zcf~17C6(fcE~`^g8n<$L(%LFcaNKKG8}Rcp!Gl41Uwt8WV6V70%BWLDIvTxSUMI{d
zeH+9zTnj6l{Q%rti>5%D>(0RQegRyuFVw%-KpRBGl+G+U+6pv9(KusNT$W$a39LNG
zInuh^7kUF(QQp~3PGJZrXu)Xr4q7*%=PJc>lp&d+>RU=Nl@&M4MM(lNTUH1A2MxmX
zLgTG*45ugS+YKD_j5*GS=hq4N-{;uH!lBL6BerK#{LqC?^^CTHE#*H8X9?ZcA++Fc
zZoR*5zdjbD`FJ<iyO0l(<_q$MT-4UTDnaLz6(u+84FbhS^q}t2_06tJ!fz*`MVx%@
zra#YX|4DS=+V%(j-~QvjyNdrl!}w>(h5q;b|J<bi2Z)IIe+3aOYfU<B{-4B0Hl&df
z%Yr-s>5@>KQMwWnO+~VG2})EB&_oFV1K5CKj17RzmHasW@pC6IJSFGMNQqJcR(|Kr
z!KU-<)%**^DA>_^+(&z-#?h(G(^piwe8NY4r+~hlI`-FJw^pyu(m8~dGV0EV{Gh@h
z=caBA)30T(4}?{)ZRK=ERVNSQPJPp@(u?pjpIUr=zoJcenOz|&(;dRDzC`GzZaveR
z#``ZU-?AODh9M&K=bTL*-w$YCZPzqaKpuX*bide8^{XtICifI&)u9*bI)i2I=SGgM
zLpQUJ1)2?1>C)=!C-l>v0TCmu^S)0Xm&OXfU9(Y~{`>XHnuQgewQ@ydmxo^C*-?Gv
z!z)hi16Wt5MY$0$@~i0Nl!4`IPKN!*5any3_NV9TA<D=UHb2=|kqb~;doT`ews%;S
zF*7g9dNor$8^TfM89RAc4Vqhu#_JvCH-=AmpLCZ@75YmQ`_<ZqK-BWn=N9M-7_Dhp
z1p!|!{2aEQ{KgO=mcD80bQE9FIsO@+EtPQ<jBQ$T??5PO;8N4oTji>>^k$@_fE1%Y
zJMX69tB$M$UMu4%yo`*%(V43MX@I*K|9uc+FcN<GIuH9ov%hZF)M5I#G*`^UcRP-C
z-A=#o!D{K(zD7!rIX=QP&|7<$!*d!k)`i`Ui+QV)WZPr=&<NX~95{o57^wTcKrjbW
z`5y3J6N7B07Y1MfMKx|G7C^}7z_>t@bU+30Q6Rz2bU?M!j_GH{Zj$LFWF+J>F_(%U
zxM9u}KA$oadR=16e*8-Z5m;$h{^^{PrcB<~Ge|FZs<``_q^Sy-glMVYAe)h4++Ec9
z5WFL{s?br<LZTYbkdqhO1$stm66f+r@J_O2pit>~-ou<rjiXs`h7IT{U_eviP!7FS
zI4%G#wAZw$!>#_cRqZ&4EbBz!^Y$o#Cd5J|f%4)PjMp%R=qzx#3MUR<lYpqw2P}*d
zTUvWW2x?xyxhxK;t~EjDy0Ef+-JeRkSld;-Uq~KS<p@`Q%&4skcDSm`E{89uV_kFy
z>5<f8!m;4*K5ZQe39u79YtKVkEHN!RyFD8u1|c+xQ7UDu0BgGcob&yUahuxrGk!5;
zS;BvE359YCNA>fo3lKrRF>ZuPeD78vpi_HvY<q8`-M{qcXYy*;iDsF*frqx}g=ND_
z3(iN(pt;kV>zoj(9$?RQ#PX{_l!iQ78mm&;<M2TWvJ4a;W_<-sI?V|&Bt2ndgr-*$
zI{{0%bi^azr83|%Fv)S{yT?aW0Dd|7{#@A@{pTd#Vo*ZDHU#@&wfEJA*<aNNm7jUR
zRKf~Jcli@L(h3KJrIK^^8c75S1PjSY@UuOb?#p#~Fu|LQq>$ICVVab6C@12{feEVT
z$`b*CJg2+^1d;Fz)TZ-FcaeH@PE~xh3Fv)yL{|r?ADBLRWFiz5M|F7Rc6B6`1bdwH
zvF^@Wg(*-poH^=qlLbYs-b+u&@k=#!G$o!<g#?P8iemWHe>*D`L-j(&uqa1Bo23S4
zGsxz=F!F7+d%*sLSYM(*g}Tg#g3Mp-7hX3VadGSJd;##hmhx&Ul7PyL;S$dyT09`z
z))=VnFH>x>4O$62FTL7jXGVX?E=y|9G8__uRaKf<`$S{VDk&_tv=-SEYQVX^%;8MA
zAUATLv^@%BRzeN(T-9AEsDEHfD74yNbX#Ji5xWdooit_21soQ5#O_5QRq<%q^iLZ=
z_Y*U<nd%0KxkIZIc^`&edv&P0)y&Tmg;^5T^+Ep|f**Vra%2C66#_=G>{K&=eteOk
z7yJD6z5(d%xsL!@19)SbY-4};WFac$2Pf_(2C^Z9BkCZIf}H$8Gcr>s*Eu~`%vz5*
z*`2Am=~(}}EiABAwSfe_AUrPbqV20@Xv`vT2Lz-2SRrJ_f5WhV=oiwZ4ECyM53Hr&
zu?LkrSvBO<BYILV26a3Y{oo)45qgHpS#be>^-=TpQGY`YzJ(FLnweJkk92mQna(u$
zXaVPvEhvCBj0@Ca1)QV{*C9t&{&&<nxVQvRK>2_H8Gw8e3m1wL28CfVJz!r_t35E{
zQa%t~CZY59G%Nlt_W8>wJwdDjJ2ZifKeZ^EUM4u3K<2;k!C%3MW&q#7+!+UqJo0V;
zLNeHI*1(Fs&{(tdkVpx-d8-7i;|@i9;YxlbPOCD*fvrN8DiJ}n!SOBjd6HZ{Aku8P
zE0f$9sx1X%8xNNx1qc;Y95fm(!f}1p0~Qu?>q47lJ*%6Y^fL>Wn$rY@P1d0P8bn26
zHF?>fD=mU^do;1M(zWu8d7OvrO{NcBx5Zk{m=(|QhCKjDH#E)N7L#+T^-ds0;o^Ge
zi?!~)!UTVw?t2Atvv0FFxvI7+_pRIu9YtzVNAs`w?1?X$R9LB_hT*2ZN0rqn&}vZI
zi?^C>{)|>$?AkQI<;8YHg^+~!mgIF9*O80hL5yf<2{mu^I%nTZd^B*PfM+saIm{8b
zlLSb_erzh;^V4jO9r6JW!6_|lrQs<j?AOxGyPF?Qpkwf_S^wG_PC9RU5t-EqH=<Nw
zCDCjrgV;u1RJn%1*Gmqwp|BmtP9C`<q8HvePSL;gS#OoN-W+XVk~RyuYFmXnXP$uk
zO;C6)Jvb{V6WwJ$3wRh>QlOlIEvuq-Z2v$0&WVPwFni0fJ+Qky*T^#=5M!L0*JYN6
zzv~PTQA3X9&MC6dC08RZ;BEc?URM6KM1W?lIg3-^5<x4-tO=wsG)pa+7@?{ld!;y`
z*(7H4{*_;V<LDr>ovP3h*>yAqduOMny$PQD-V#6qgylW}PA^RDe`^rQCZp<!zPgao
zuS1=QUM2yZZyIP4SDEE8w-ml!mJBwpay6Yoamz$`kOMPbLJF=cgmxvjL0Rs;1#~h{
z4pxo#R8%zOiFqD-2B7cGk5Yo$*AKz2q(7+<80$J;`5RfhPrKL7MN<#)SoId}vT+W~
zjiy7)m_be~=D~J=3l6fB6;thL_+->gOOZ(~YYs^AUYK3NC_1)U_n!RJxQq6VhW5|E
zu4%44sa6^WBsrGWOy(oo*szRV<YN@FFU;$VPjN>zW(j+i?*I%ulI$dmJhF-EA}OD$
z-*Vg=6s#)<G|quAVl5?_*})+iiAP{7ya@I5E|6&qwJHi=Moza^ub(Uy5EK%m!6`5(
z;ID;gq6B7^g-!+!(SK=mJak|uZ}tTJodN}{iq$}h#Vbm4*Jge@g`7PB+F5ZzQugyo
z#1DqKi<V-T3eXQHpuw5NpC1ZAjV1>_UrQ!C67zifbx2+?3MdnJ9<d8#+Q5K<q;JNa
zL^}c%c!HGlm*^nnJxWjrP1+lhmvOEys6zWbIg$kQB~%3YX*T>~QJ-vfXXAU%U>Ciq
zMgg#hDif<LvCYJDi;9uvoo9oqs*|xpChu^`q-Yj<GDSovxv_t{Q^Z_n>C;qe?WnIc
zE6xyqBOwbVYITxUrloz55|EWwJ|7NNBuxB&jJ@NQW?{Ew`-W}XwjCMHux;D6ZQHhO
z+qP{pBeHVWscQSQR^N|(6Kl=!%+dSw#Jo<b8r^({6}r;+GmmSp<%Lu(iXJ&E?kdyw
z)R8U7^Mu*?h3wrfsL5!Ps62uWnK-(du&Q*iCd?u)?#@u&RYDGwFlvIoz#rh+X6#JM
zGY=Elo-!9}_^2czUQ(xGWrFx?_VSdmO#?_<QuLHI-*;q98jL=PhHmzBk42OpfK4e(
zwZ|lc<zWcz?L70WTT$^WkHif_cigkb6OdmbXhqK!$t3GRyDdz=2x#rDdR@}7eS%pi
zq}fLJn|IACEC03$6=24F;}mh$e%UUKPTg_zh1Q*{MbuEx@gs?Of#dUK^ViKzDQ7@&
z)k`!E27_3?!3xOJ9azCEA1noW<fP9-=@Y-d*ZJhHFtDNN)Gr$~zkpwV!O(Fur2oS>
z|9`PkW-exq{~qW616IoVKf+2+{?9o7MB`~Pr);7B3}W7_tvf!aIGKv(QAjJE20iRg
zT8Q;u<9zz#tk#LrV_Zku9>7e@xly`8GC5rA*X_S?-u8$ikvzHhee9>&)r_ix|LZ3D
zau4~dXfvU1&5Q=OrFOR0o#bKQ^K!adB*It(T5z?iNz|=P`!5K2fCKe`HX5*4HHTT0
z>x%2Qd(*&}UbliPcrF>U+GKQr5INV>_~(zcLjxs!>aiKF%oFj%;&imc%Tin2xSWZX
zmhHnwfDcuA_$J3s8C{0Yxk@|by-nj`$F6uGbWd8EnsIl<1j32>SQip8l0oJda^8c8
z_&;TbOe3$!>w)kc2P8t|axW;&zPWl~7v5Fwb}~pu^;N2}&ey|dYaNI2^|;EK8r#Q7
zif$IUGJ`Bj#{6_{5`}Vxhi<jR#cTQjC-~p}NX;jT>Do2^c%OA-+$^+P!XEx&Y3B5#
znKzF$=eD8O0P8NtrcT;66RnlaP8#wB-Q;S@rKRhs%br)8gmK~$+d?4;J_SB_d-fxY
zGv!pW4!51P(QMo?wS*@}Mgd7Do=XibuF&J#m)?s{Q}1^U8KuWMTV^$ICg4~n-z}Nz
z{69gC)wY)d*NE1(ZIHsy7IIDIug6Vu;!PM6rkE3IdNOe&QKWJvNO=^v!h-!%$z6b3
zvnzpQadNY%<FPb_Fg1;b=%9%lC27kYjw3iKt$%8lrIx0U0nUGpM7Ca>O~*fuslT`|
z2RfV+qz`RM8c9(Y2O>`;3Lw1gW*C@i`X?=j%k>6CvZi1GKqtazVMDG{m!Z-|d4h*%
zwuHvosa@-Je~b~|_NBP<rjJ!3ASh(2mNZG^fwD?OF>|;OJwx6dHg;NZ8mY$qUDdoa
zyVvAObaam+lCI2Z?5TC2Zjz{Xhkv+`&b6-~`SE6QZc86$&`WY`y0|hR+(Dy?kVR#b
zloW-x5Ul;QZTsW$orZY>3d-Qb@5}Te24q1|@ifX?rhmwr<ltOi94|LV<*z|@PFs;Y
zMfD3KG$U?}v!oc`fx1XvgnlE5*>a>`&VLc#*z_P)<A~(SLH0p}>2io1%vqQsZ?;y*
zaF9TvZo-pd2^u<kpWc|l0_-9XCt_y+O&O_eLG*DEu83VK_}9pxW%SbT(&UgM1s~q<
zdyUt5kq-xrK`NIGlt|R*g4rvB$}JliY`m7Ep<NLkCCEERXhs~)t**wMbKyV<cJ*~r
za0Ny>R7<aDgW%21kmPsEYrCt81gCNu{DfHycB?KvO^<%<>KVJ}oe92U<m9CraOw(~
zB19lY43~xVRf5xg@UdBtcQW!pxM~MNIIuYR8_{G^;)G=spfpk{)QPK7>NbA0XKBD1
zt0CN*K`O7p05PUCk92y*j)*11{Kaa4?iPeNaWvg2JBEjMcUcYrFDznwNKhVwZtEI$
z&*~Jg0*zACBQmitFNL2M7%iC1ZIH|c^ceD}cKXO_J~g|}*Ns6|DY!tE!FARYS$9#S
zG_60g%{b0XHh5EI;I;q?IKwv+mF%`)HjRX`Pa&zn^+{~kF*OIyK%z1pEgA4@Y5Je0
zl%VuYeOVygeP*+yY~U&aY8=m&ZcbHpN~y&n6_Pl@zXB`z1%rNgT-W9cm`0Yg2~Q;<
zEZGj<J{V52U^wX?ZlfFOt?gm*w^qFFJrdT&C-UEDaQtGjTn86Q?ML+v30|~C%KV``
zguat3LURgpZ2KxETdpMjQ2y#&8$#m&O;U{!K}<8!jJNvMJ6ArQtr9Te?giwgi&23P
z0wM3!EtIYrc4pRShDi<(FmDN90dz`woFrRVbRbZ}Pa3cV3Sif2@@5;gV9b4YU01!^
zH~XMD8zV2wQj5xttpYPeH@19IO}xX&3%v9xWswx}Ozwz4IQ>iWu;5zdpxD)h)*nV4
zhqO`{R_nuK_?Jx9SZQrmsIbT?c!jq>e`6b96+rFzX0{Hl4HD|iSY%Kj$}HaEFXBum
zfF9fB3JCsTBd5_I{U4nk@_^%9Hvw_e5tMQ0W%Psw5*!G{1Szs#Jq|#?DODsmW6Ds4
zr$42)R~g|$+i7y1ct|>7SyJSwnY^8={ApaIooBg-;Z>N1s=O+QMY>z=K)Dsd2bd>t
z@JPC*#gdpNfYS0#e1Pj-OIB%*Sg<cF1*+<dwuC=v$sr)yKNLA|R!xAlLml?3(~{q?
z@?}4u3R`tsn>H^Y=~<yFQYg*9RVW>*KQenGL^Kf{-2H&C?WWoffGtaHIs;P7{c_SV
z;NX#nHq9*fC#_}<X-mZ2qZ@Vo-(77U{{%l*o1FNdc<B~@7^x=^&}6dYCSvKiIA(eI
zYOog{2=$<avL<=RhU6|po(Z9X<j>w26md#de!>x;Lmf<cQy#w1%vs!Ne?*9tcVkCW
zzcZv{@{tNn%Eaj>+ywVS0!RdDOmi+-)6r(5zl<#2w6^}(X826=+nfO4;(Vn^0h48z
zNUMTDBg(a|hSBSmIwmsqEbtj<<xfO1@PF5$(h>nwcm8T{G*Y@ibVBz2;9+Cm$nubt
zIP;|i8_PHD4e3Y};_Pc$yn4z#^pE40ssJ+<2_XA4@Jn;-2&8GL3*6yYVDd*_vt*K~
z4@~(45G5rf*kIMt+Qi-52y^SZTGMXXw$E4t7V~LZc!n|`Oq#^NpT8D)<q!Qz*2dE+
z^NCX-3PSn3{;C>e$$S)hzHi@I7*e(qs|YL{#64m~qPVFg83*Q9IQND{F9Y%*=3Kc5
zPxf1EqBjex;1;9!c}LHvIQ83X3kE_;E|>T?<EFT(Y@mZOJ}YT!Jdh}KdVtb~*MYy8
zt^yWF+vYoAE5F-emu$7501jB6J>-}z-B_7B`06LMS>_DE7y5f$+|V#!h9u9|VVLNQ
z+TG80Q#7bx1T<=yTb>duOPpVfiAXVd?yZ)F7(%gf(l#vwAc-XK=6%eoz8S~5L-tm4
zH>w<c5f;8hqF&{aK`O33crUkEtD61PW&Y}5gsD7hhi7dL>>cvHFZ7V(8dQPu&pTM#
z=@zQo2^Bj!{GBxb(#hhiZKOA1zTp(|G_+(dv5Jz{W6@O4{OmS3zU1ebNpRS99t5By
z#!<SbO!i9+;s>Z;*xvok+_R`J(+Sdg%M`j$#jcHHT6hs|H!qQrayt3n#CX0gYtKh?
z`wH<3EXJU%6TBPVUym=w6u$)?zc|$$=hXH^>SuG(YXL&6Zz|B}n5OR_(PISYF-9FY
z!5)lJ1;!eK-EyVa;-RzqOjx8;S=xG-d&R^CjgX|0oB7<O381emOBo%(f(>QqFz`|%
z%i15)+Jtr#G_Yf-@}(C}{>tIRPm(iR3vxgKMUBz;jKzaQ&&5P&ud%!%X%;`py3B~w
zOmR%xvc7}nSL@~@2S>*ToJtnCn__|oAa;Fw>@SE8D_lq?T&|{3>K4}U+CTxYuWF2#
zU#%>smFUG8eQV+>2heGz)K7;ccl@L-DVBH8*uvIs#fWR;*E2-Rbt}dG7lq(UM`AJg
z)nN@5Qc}PLo+0b9H)0QL>m{`@sx7P}k#pvLX>7c;FA<36Sr17eW6Bu>M5OZzso{Qa
zGjeqjapzo^863RVu56UM(C65xlO7xMX%cw^mALNcr*{N@olgKSH}N2D<M3#)RyBV~
zS5y4Sk`x2g5DSb)6WD7=&|d?#DhQXn^h5>1oD4|RL>lw6ouQQW=mjhcE$<7aba>Q4
zH5dvL132=DOO_H7$bgti(T1$&8qE+LIb_)0Fiz)&ji5BTrhWm`>5Guf?$TMaMi3X9
z*TL}8ao4aQl}R8^O1Fh*pLdr_S*K_pxOWyypOGvEQ>2-0AhLFda;GzMkb;TOQ68gy
zS^<Y}!FF0JbFkUPA?(MI=<;Uf@$@IpIN%KL^@4<de#5rL9Wcw6A<>70?YV80X3`23
z41evO4~Zb$v+DNa)&f0-bk$77AVC&)L~fovtX$6aw|YcUDqumN0Z13X3R{QIT;*PU
zqbYb%a}5ZN?Akg1{duFBdVk&pfBQoi^C*xX8hZKR<i$R)X3x5UheFZM(Zt$Lh2RWl
zz1>|}w)w5?c5kJufKkpdKnbuxXJu3#q0SzSzZ~(CNVVTTpvibyPB#1Vx+!ILfz&{#
zw>Jw6vxP-g0!1%n&(f&t+fskx{yS@^-BDov>|>iT7Z)}x`f-GpLl*UGJN|K)_A|EO
zio?Z@-s19-Z!{yOp|t06x@5RDjMLly{E~5sp5XcgL06{7CxmQ5R~=wB@;!GMXX}_<
z8UD^Dpp5h~&C8?vlikmw(`@<zO-eGQlfzwZg)fmA<O0>VuXxy}%9^zGAP0qY?BzJ=
z1US_Ap&}yz;fb`2_jxE!q$=dEpy4HLN~49oj77zl!BtR;)Kcg#;^vZ#AKr-${L?%i
z1MKJ)Z)5rnl$yo~M@sqe?H2gUY$HC%O!=VeDJiwl4*bJ{OeXp6KsG%0*Whsxmz*R;
zo4WMlGRIWC2apLY!yW8H7XjdPti01kid2K40XBy69L_4x=S+h!97u%j8Lr*`3p2~9
z-G__N5I9tCFWzodiYlJ&ILdf+R*UblE!%qUcy1zYN!s5guw4-hBPx#Wv+wa4VSeE4
zYS*uF#;Mnxmx-NqIvd;E**4S^_Vh;O433(Mb7cW?NoNR#Py3IryDdHbQ<<KhSw_?n
z2^}IOUbNS1$_M;-wmxn@TvE4fQL5_2D}`%%X8~5$#A*6ufvJ1t*o~oE%isJ24I$9s
zv6bAaI0eGfhp;?-g`~pwl+y9SPGgO`^=r#@)Yi>EDbg%z!s&a}_E?5n-z;RPdcph8
zp=ioGudZvGFn>#HTHA0yl^%=cv+Y*B_uWM=yPrPKIIcA8^20q*1dd;QI9%%oNn~V&
zsr>kIgaSk>{=Sy5Lc*?2l=5NGTeG?QP=v3XgyE2fz>4rZOVvxcOHbA2gTfRY<fa&Z
z#$?>(?4uteCB`jf@i>5<+=HEgsz=>hn1PlbKVWE3V*Lq`Wh1xou^aCCz(MOyiObIu
zeXn<^y?khDtiU4A=^YL@8hq9~v`asdqdT*cz0IK89~jkTs90TgJkW$~s){0Z;M*4t
zK-E0?N16m?zLx%2z7B=$2I>0b@asYeh0V_0-0@KoR?2aAL$!hKZYN%pSLP4v(M}8y
zhm^}tQ;DIQ`93GWg9d$**)Db7N;zeuF9mZ`9I>Y}8T-`C0+AN*{)M(v&uR?uQrJUa
zDhWGb9DGSO%PB)U)0d-6rWrs%XCinL1&y;~(``sc4Us~DehAqM$oFwi418qL6F&$e
zsi?mVT-aA*IiK}ek>wl<*sGcQf%f|WQQU_p_<tV+{&&p(ubmz%Bh!CB2(bPK%$oIo
zgjwHcNyTl6A@|PJ?dx`<>btBXuurf#iZ?PaAe*fsIbuP8#EMv8N)-z!vb=iKy~;iK
zZCCmxdAdgv_T!_69${5%#8uYyepY6F&`CnZApbG?(YdWnG<SO0LQ}~TJIy<x|NM7t
zXiOpMWJRrx<&R-Q?;^qirI7-;Nb|bR$jy-T1C2EB5%i!(0t{w@y3WWy(z@%wH$>0x
zrIV56KH0dD@)?twnOFmx4!`b@!{Nsi{X4v<Vp<}z*i*W&_xnTTS$G3?lFrx9P!CL6
zWCo?rO3IVK6HsD0oE?Qr5qYXzDLD1j*0$BP<=Eqk(wET_o_V=*Z^&yk3t0r^)FfMa
z%&3=m{CSo2zSCtZ#-ezvJ-k95(fi~1I(4Ww03}+<8|t*;C87Gw$OTFk!soXmGUS8S
z)9o9-(0EPblgmZdUu_RgEm1rA4e`sAR8)9i;CX28I_IIB5X&X>;<B|W?CpMQjNKiP
zeRPM*?r_X=bdmH{s>P2DPRXpqb=Xp+rf}@b(}Un<(!fLSMPW<i#1-de>SRkpFfwq0
zw>FfYI!i_Q_H7G$bU$M9M7}MiA)1Bk2#SjN>d;7zQL@-Mm+(`{YON!mi*r)zgxq(-
zx)W>eu=1{Gq#7`ES{OdnWrJqo7xD8cS%ZLijFn3tM&Rhx`JNR5W?qS8$-y+Y&$1oD
z@z({bpS5ik1f{=>WSg9Hq68X*RdNMZrEI#P?ro*jw(`6I|F%eF1;ItBFr@!Qp+nQf
zJ@B9x7m&9C?Q31s1&xqDFHjCmoGLMx?ehH7@`ltu`vt;jv(wU59*uu#>o1N=hfHiZ
zixMryORY4Qnv=&$G(D0DeUsIWJtJCpg(Y)Dg$i5RHL0nGlirwojNXZ$qA#EN)qeL$
zt+}F8vd_XiT9A<*1gy!@^h>>DJY}a(L&VoMGjZ_9q6ENZ#szAA+GF*Pd0FHH&L(Aj
z;r#5SQ(MsKpvyAZvBs_5<_{)Z)Ca~LxMl}dIvsX2_Fh;0hIFq-5DUB+_OlZvfSi-w
zs`&)xe>Q+UTXpvuuCa-8<z`k-j9(TZpjh6xD%wC$`U=1_2AE6D$GwwL2vuSc4)Xqe
z<)_|{qHRMM$o22Gf2<X%CdA*O|NPCRY#=+1nN89Z=0!Ur^j@CH_>$|jC!^XZxQ)*^
zsQ<Y3Nr9$|gO&<gK0IjC$UKdd{_;2pG<Hd3dSFYq0F0?1Hyz-WxIDHnrj&aqWORgd
zj!fHhw<)7`>#CpIy3zaFa-?0Mt4tetV121=PCT}Wz{Zb@IAYt^SMSwlCkrK=mMB1{
zIN!Hz`_^?uOom4!%My|!h93@~=7PNji_G|^rBoc2dw?PRWHgyR{thqK*Vkhw?g@x4
z{9c{)0A?Wz^@EkG)7|kxVGN1Ff;!fy0>>bY#TH$V1G>dz-0?itWXpRUmz(pBw4FQJ
z*d!RacXL^4e{?qgzE|k@_g8COm}fJOs(62$R&?3sI0B<LYDhj~zt-#V6@qOWS3-ew
zAZr~EBq^!LWwk8xJ?Sj(au>8K+KSKe-9JPcNLG;pB|^zRB^&C{HSU<l0SqH}YPi#K
z!xo|Iv_n?IrD+?Vuxucr55xZ47Sk)E@bG~BM(^*tC)30yB<ATLDT~2kEs~8ejFpUh
z63V`|6wuny1R-A8@&!#i*(fhna7bJ1c(V&25%@wFiZN+*H0p%%CHQwad@FI0(E=cY
zyd{dC0c3Gp{I+oRyitzzWpa8t`LtMnIrqW=atJ+C9-~c|aD=weu?OQ!c0%GHK^JU&
zqB=pebheMm_Lzatpg`XJl~xnJxB}lLSwcK#85?%lq?Ev4;e}uEuc%4XrQ5ZY{=~4U
zuvMKr5U>IhOo-XsD1xvMM7A{U6@EyDM=qBGv=`t*kV&m+{nn&<m}p4c?2pm5gZ?lr
z2g)Im)0~Ql5vlcZZ5bIjFDUR}0hKPiy2172ZA}f{HMk=BG7U$0t-DwvXz*fbo~4mM
zq&V){g^<62dTanVG4)BZRykknyUzMtf<JjImH4QJuLTXz6}m0udYZ+*^ocv!c@co@
z*2R2T<+G7O$=*W@s@yw}9>p30Akkz8XbBQRT?#WM2*K2y)^`OR1CfzI_AnOo-%$&5
z-E`(sxnbmUxv`l}w^ZZ?z6|IXA=YaPoHv!>^B(=|E3S35&|7>uLTD{W#8NO)r4^C7
zp&*QTp)KCHG}dW*j@mmoM#?&G7U2qT$au1^DF8xdH5t~@8$xS$Y^!cpC%{vb7J(~K
zq)g1v+*w5O;RPJj;7}RM16(Q@`Ur_CO~_CW&1G=NmA-#7rF1w>Po^s`PJJ>E$^H~X
zvBu@C1#sbRemq-9LN7QfKvohB;7j*jf+uMhd^!tFNE2dS8~FX<s@|?C(%b1B%pKG5
zGAH*z$Oy16WB;g~Ea;{YY^%8LvK+W1oMW{yBaCCYwf5DEMU<zsV95St)IePRosYr-
ztZN_(f5F7j;Pi!u?v1{!(sY?uwCvCkQ?(tce%5ZG6Kaq`6*vkKCYNZq?Ilh`#U!O)
zX$j!R?DT9BT%!(wcAQtly_L4>&F~uj{W~1tG6g1{L!rj=_pCeNQRaiU`e13%2B8t!
z#Y6NCB5*1>RZACo2sv6bY0Y4PqOPh@3MCk0{S+96+9gN>PzlbPkH6v@1)+^;?-dX-
zK8Z3B#Jg8{TA0m-XsEwEoX$B}r2s4FGxN1CqlC?mt{gWd{0)HUmo>agu5AQwa0wSe
zQ6Cn+%2rnqKUUh}mdsj57xdBB?jxh3>mUVhb-NV;R(#2W@D9G`{+@}NL8B-B3P?SO
z{RUp5#~!^^$`GREexhX?!LBg7TO@uytgM>6-?B-c;WtGpzH(`r6ar<6$7OOIE7X~k
zWE_cV2=Gv7CXLMvKRxP7A!2PSpPup%r`qYS5a}e8Da)}E!J0%&hmJn!g8t(}H-&Pg
zI27n_YakG*GmKzTVb4}UhhA%-`FST3nBzg-DVsJp+QJq}OR8#x<{8Ea)ak95tlYH`
zVDJ#{!659dW|+u76KK+-OA=NeC?>tZOiF@KNib0{4q!)2PTKv^SLhjCtOZp_)oeeY
zzg$_a3j-pft89#`5b+XVEtMul;lfx>BIG|E45Q_PA#yq`T!58@`J&6@0zoW<P8?hk
zjm;{PJmA4%#J!i!olUas%UBzOe^m$tbW*s*eFvOCh3!NzMT(`7B|R43(}f;=1{3{;
z_OxIKA)u~+tS07H%S#6+t|2V8m5OT`mjRzUW1;BKE9+hw4mbN>>Mp%$m*}hCdW{=^
zt^6ou!#e?jhK7FiWPWdOSSa*wn4<(c8gw-qk&T%XS~Yyvjj`Po*<g0$GCH^@*$>Q~
znV!-3Bo*0fmcM>G`S>`k;k(_1%qaWvZM8{8=a-FLjbInEpSiC1Y8?)`-NjvACI^8!
zPy8YOQMdJM%munZ0|WKFV%SYxvDr%=s-drB-WM$+tJkNCR%1%?!&|^u_`sxO4!^t>
z@(5>hXOa*-(syrw=cdiyLLLJi<MCzjV#-+=)YK1sOtZ`H!~``*s)Jxi6m&<;m8w!2
z1mv4>b4JUPSF<U_|5U`FkkG{cE?p)P4!qu5^=i3cqAQS=r4@HDq?_?XOp|ORppGk4
z_#h%Q(eN*>^yddg0%)nPoR#@<hl0KidE1Ezj^iDvdQgM>+{3AVI#&Y*ghd{o)DPtG
z=cm*!gf)`iXLEOmfkhOmvL-Zgs<K7_1h{sMlu>JMf>@#ww`iU!wnQodtvbD;lFToE
zoYoFemM0jmby-nlL;nbjBzcN4HruPfFO@`2D(^G7bQ!E;*)IfM2R1tFt;)NJ#$CSk
zUgBHs59(|!gVa0xN*)r_$#=b*qZ#ZFCqh9D;Thyoct?qUlu)1y`jm$WTghQY6%kvJ
z=?4R*FQ433c2UARv6Ao+3JEF?G$e-$LUM9aw=axLrAS3${@Ml$?IQyUo;-}Ig3M}}
zwX_@WsHmatRrd^1$!>L7+!EKkp5lQJ;yvXSjdl5`gFuuwao6DQF+d#lI&IGiT@$}$
z2BVaulJ7rhcM_~A4%wf2$w7kro4kP%nyHG=K$>_Z?WV9ji&cz0Hx^HzVcKp}?ZhU0
z!aQC)-L0gbT-UztKPE!QkX|@mOtZ*OLCQjmXYe;b=&{<DwT0Mtw4TPP7?0)tN2!Fw
zEgR;+Skn!o<mlPA{BkaWFPgc<Nc<$jxOQXafCJ=8;F&J4%0r%ix`Rw~#9r)`3e9H4
zz|a)0il1@_nq`>ITk;tQ`H_}}K7xOFO7tMjh(aXK^CjrxWj&4Dx}tOOFNTj_{CScb
zichp}#Q7J&qUT5Phg<Qxx+gm7Q6Mg%;4xUsQ0(HNhK*YJ+5_#3Z1WD5gxQ{5e^l;r
z6i7Klk`Mvh-Jr9UQkqp|8x~yoMJa7o5Ug}H^tNl8i&IzSs!j)%9Ux;xfr7iG?ap?9
zaUD;JrK?M32SF1#r_<5&y*F~|q3kyMNQPNLG_ZcSZ)!vK1byUfgtta+w<{Zw=l8e8
zo(kEiu8~bT4z+9b=|kx;q_Bq&GrI0cE$m~6Cy?3pHfE36?;os5!pmL#e(#y-FUNJ<
zejQ~#&x+f-hWk57VY`gzU$ji#mPeu_&Z-EP&dmamD88yrC_%Wj-^WpI0lc<d>oK7q
zU<T<tFORm26R3L%P8C$4F*ejO-AA*nDuwHo&Tmme>4DNeOE)h{*Fr$QE9!{(eW3rm
zTeaYp=1v184%St{K<z{**jB%QnJiInFq7l?J7soe6V40?aJw0(1)o-UwOkI9Md+>U
z+S2uQv9G}~S|B^?EA4dj0u7Up1Xh-uuLqB0;h{1t;DihqbU;8B&VxgJ?I5gm<~W=8
zn@)M1xSfcPFug}M_3Vy)+-wz_Qg?^gG_XhPuCC{6T5%pA-7^nB^&v<-Q8R`8q3#(3
zZ&tdHYT}{o(a#%G(}_nhPL!$3$4vRHCeNWBW$*36k>H>dC%HiECeaFH6LK-x!=23-
zd*+CtPjaCE$ivm~&(Y-5{Sb-9fD`I;1L48b*b?}3b|wB6VoWxut&yu8@=!n3O_?ZP
zz1V_gfX!Up_S|1l!q#rV_vG9G{X{%rogb0&=SREs89;oS)TruI(|1Ty{^f&{)AL!3
zrT8`OKLNGI_R2qxISKYc%O*g+%5)lIAdclf$8|hef6CsG@K`V6J0cYN%uv3>>e3KV
z2ZL05=SGx~B!W2@xBzMwF^yOEvj;?6%iZCprTvZb^9RGbRd?<`Wd8rF!C>Ly{BI2g
z>wnN-u>OxU7&lr|vHxGESD76cC%sgIf#2GkNI0UPKLNF)fR@y#-=N71(<R9!vFNqB
zDTSZxZ@Sl&jO*M`c!DS|qyEH<A>V(s0OS_>;z>(M2mGe<R&HsD)Xe&_6<%nV{FHef
zzb~yLid0uNIPRFe>o>D6(kLe|CxQv9b~KiKbgO@$lKR_;PrJv#qSb5W3SBq;)c|@%
z$M(8ureU>5H8fE@VbL_QnI%-in$C@q{j}pbI5SH<Xi+N0NG~tG){gB=yp;ac03v+Q
z7?IfQ{-|j!e#uweYwvFvPbj?{>$%!Qunfh0hV(hV^F%4(ss<1l38I+dzZPvt;+ql6
zOfxgW!2inj39q$UT-$Q2UNgR)nhBiXln_DkshE|Jc=cI&nQ@mg7V344%2V@Gk*c7R
zpEaVt=7;yCstjf9OJ;v?;Y!ruQeAt=rxU1P3XnET?UYe7+NSvxuKpODsdq)^@f!UH
z3V(IT{O{&!SOpVR^$he?gfNS)l@|1ShC^eq^j$@K#-`FnVk34|E!mD~FBSUKHa0A~
zi-Jp+4vTK{$vYnWNkhLxrTz<R)C>{7$k|LF3|5&3zKxg(r%e{`X~e#%Dyy#>%PL<7
zJw)TpBwNRSwG9RsP8eC$=sHVCW-ya5wrYEbZ^e_(91^9xip`Z%#}8p+D~RWAySKc?
z&c`m@DqstR`ae09_(uWx#4+$7SUFS6K)^@x^o9u<JP3K2-y?v~3~u4$eHgFhMx88x
zsiM}5%&5AwlIdI5g?0WJw`~%ygd@(p3g$dJt86vg7Y(S<Pqp;Nmz4)wc2WWU7<e?7
z?ix!O1C}w~lp+SzrqH`4YzI&hI&D;^FHkA1BYmMHgKvX_>(yt}4Vi~*c|!(*46c68
z;v9Nt_l!<`7FdqP%JrMHG?C&>mWhhXH@0kBk4|y@o^~XqsvWHcIMdX=xkdIbSSnsw
z&>jp$X!nH0>C=wk18_yc-&0dIEZRKk12v?Nw(1X467N=y(5lafZP;FrD(2b7+gPTN
zxch?P)xl^$^@N$`!Vjp(X&&w3PA%xsAh_!(-({HH!0}u$9lQ_(=pF$6V|?!k^=yx(
z)|WbTRp;$53#=HWuvlz$=VzG!Fh{K)c6Ehavwy|6C^trpN_nD8A^3&+L8A<4ZMq^v
zi4Ur91>xv4dv*tmQBu(#z-Yg=#SdT@l9J)jAY5Vgw2x(&)Zx_f3sl{CMgnlz1jvu;
z2Zz=cvpM<OCxi|ERW?X66LzlRwX!xOpc=&+Ff&06>|HMLO6T#R*(YpN`ACq<VunV$
zMUAUh9ZtlZ>4h3_QTPf$;8!3+lFvqD6m$b2?n*fXbzqzuxZMjwQJkAwQH|{k1Wt1n
z2c{H?dk31n>Wk;ks>|ta#EA<f=^|5E`|aqmlm`7f6MZVxpfciFKH}~;wWe3B&|_n#
z*{YEqC~~TRf2~3lJ`cPYb;V^vcg3=nZQpPyRmz7pyjDmu&WAOPn|0-}Za2}fN455v
zJ^a|@#X=ATFaAZG-KUL3;b@%+q6sEShQTx)%PfSlnvazntS+!c(Q4ujZeeB#>ngBc
zq8!gfSN0vgY<eU4H1bK4_LD;f6*Hu161Sr2<<$T~Hsy42Y$d{TNMAg4vxwD;mS#qG
z*s7d+E>8|2mFS|4k*jSYQ5Xu;zGd7Ydr%$;HxmfjL`b+*gPE_#7~WM<t`5>?GAG5V
z)fIYnTEpM-q4nxD4G|m?bI%|^8zkO4+BDZVe3I7Lg!5uJgaD%yxlwvr2QFnk_6u>O
z4js3eKGAx%K{QuGPtgA_;}8&}IDPgD8$2n6yui^rDVB7X`J@%g`tdUFzt4$^jIU=6
z%LD*BgidiQiE)J)ON53Z9w>cOJ6v#|g|D`UjA4e;cC19y((UhOh(~(HDvWumPiv)&
zeUtK2%eLtOw>a|4b}rTuRzirdjg<Fkde8DvhfwrmW0tiJsNjLyPX~E`h0=QOubdo(
zq$1&_okXc?k+-eJ#cs(374izHps6hnY)0uI3o@^KXTxY?Vp(_lRuL3@N>9vo?npmj
z{ULgo-%9vs>+LqL^7_KU(F!bQ?#ki%XQ9Ar#^??n+ML@#;ZJPMZ$AJ|NKa>$6}aVN
zQ$}N#hzT;MD?mEsngGl0ZGmOJXn-Tt60ml4f;GMe<d%b%_c_$4CrruF$NJu~5~!p{
zdSdCgi&u24;7In*Nc=_6Dulix)i#w&P9Sm*Sf|(W`hmuykTf=rfb>I*(A1gntr}3n
z(Mnj@A8w;irn6l6(aBU~ONCT>In4fZ<tW5D_DgFe0^ly^NhI9ZvNE0Y&da!cTOIdn
zC{a}%1O?l+okD@hQ4{C#HH>*5ZPqV?(YHp>9y6Q$_}Q-_wS~YE!yemz*x;)DhX(F(
zc)P7fb!5<Ozj>-y3Q-JTirMLczfKPzA=>WOasx)k`T+ZChq)t?+CVMxXDQg;quTBt
zVSL@z21FKoLz*j@YZur`XkT}5ql2(~?&Db-hX5prf)Vl5OMbxg#7ZQp^sa)1%i>nj
z?#ZvRvK^G+@R-gw$sV8}!V4!)-);-4<GqRg<?O9!PNMB?T56R&R@VH9Fgtn|C5Me%
z_qpcTMiA7VU96@GfYpqHFD2i>iqp%<9B>JuHae(?wR^31vR@%}RMBzsk&5jRPV^v;
zN5zK8Nd|I9OhQ|qP?Xf5d<8C$%Ry!<N@g6UFQ+22U^hOujTZ%EDVb$pRr)Iuec**=
zZa`^YXX%QZ1B9|VAQS~q4ia}RkdQ0qtJMWdg`hbpV-8i;f6my;2z6nU^7jchscqSh
zMdr&l^7&X{pbjLR(BU|G_Zxt@^cnLMXdz_U=<VK47|WG1F0JJtL};yL<*ocrL2+Hc
zVqzD60>#Mm@2QZ%&9+J;qG?UHpW?rSSY$wIMoIta3f~=esWjsqqP>4b3|G+aYo-QU
zcU6@-8rYZ$+TLX?4-pybgh0R@zm)B3keUK=z~rw{OB@+XbHZZMv)4mr@E%i`poU;j
zKKhm*ba#!kD1Q&FbELu3+uhS2=UhC$EZ(bf2aFCr58G)r!t4Itt<YWj4lt$vP0^2@
zg`Ic59uMH`$0RPZN&nWIB-H8Z0eiPz>n{p?pXD5W%P-+xnw{HnS@~{r=~2Duqmq&W
zC<1gbwiwJrkjonx#25m3%>q#JnV7ag;$kDfI^H@i#&E)y>>=>}?5-sduo>?*H-%tX
zM=7SgFD?<}k<TlTYvbP(+)<}vC~en|@4onQtL3*G)bjkfM#Hr3!#x@NXg2x;YPVfl
zBeJIV7|lP*&_glrt9Cd@gnj9~4!BQL;F`4tuWVfYS$ycVdwprOu%gR;AW3&ePR<1-
zn?faEpq$xC$tVnt7FoxMDcuROizAmN6UgPWd>;D68X-9%oe*H2x{7ipxD$XrZU+&u
z;p{rTv)zQr=fz0H2s9Ust#e>=z_J*HyzxYwI;#+e==A{j6Fkq-(I-yVRvc++X`>%p
zd_g4nrqiXW7M9b)=iE7sto17Gsasrvg#<GzXU^i&ZkpS{26OB2IA*@Srt$>F2nH#$
zWNW!T^m%lcy<N4Spg&%rbpd}62$AcRY#jj6As3hR&@b|Cl^+OGrJVi)36}S78Od>V
zM5BJb=BOF0rWkUuDo2ymKUY3&iX5HBzC_DlIyhL>mZzi$6gqNj>=eWad0{NYy6cSR
z#(`Me3~AdLSrI6NUzaEjl#>Q0R+5N$%GDDVeLF7;y1PHaH4_9q$p=R*DVGt1N0Wd{
zMLIA3oeK?>M5U|M0W5A*-uT9vkNe4qW2o(tS>{ceK1G|G@e1UloMN*TL&+^$`5HVU
zQMs`VKf2n}Q97!uqEvKhA?L^6gLanMDYAO~b%d<|IJkE!hah1WHgJp7VqMb+h+`TX
z1GrUBZw4=`0h+lkd7KN{XTGO4k;lp3eB4&jy6^&{cdu83s99BD7Y3*pbDaZA%j#w;
z?FaHd+DEg_2AW0Y&6z%nL-;HV<TTfl&|ix~z7?7olh&lZ#yPtDNI#~8R}v}uU79)&
zTlY1JM;HmQ<UgV@Q~jiTpZ6RKjwWNej{Ynf9@<<r+MVg$U=Gl#AG>3d4`D@{0;$;2
zW~u&ODIF5J=!GA712$XNS{u5*u~TOD@04&5nn>TCbTa*Q93(`_wkZHnP`ER&<oZwE
z3eLui_uX{*kiU<VScn6_rsxVHM!4>$1CMz+rr+|>26r{%YAR^?Kvo`R{d0<AZOQzb
za$(R1e)Zo%db*kd#Qb%jF_Q)-!mia>7m(Tx-jGpL^!#A8>3`uZ#Ytr%aj(M4R%5ne
zW9M44;3l004kh4=3fdBgg<&9XUo%kHX16=j8bb~478=+K`F^@SfZSvYteCP<dUTUe
z3NllybXtBvjx<t`gd&0je|{bv&zk1VxgU}7{$153mYdPmh(csU{ZT*6mgZw*FHdX)
zO`~rR9M}O*3PZL8REHrOljTFp5Vf6T{KiJJVAJy@$wVu+PTI}_mYMgZ{~+wF;w|nM
zs*3fa<<lCe*JcR>_16ZHg4Eh4MPHatY29BHH8udVNaj~r@!;*pMpMQ>f&7Q-pBk>=
z=rH<%Zfa5J^i<h!j=Q1Uz_9-B%p7`nWy$iO&rJdri1M07?wJF7Rl?wf_mhZO!>>Ml
zM0$t)JT)`Fuz&mFYo@gR|BxO3uaAc1|F2MF`wu=Ew*Qfj=0;N{ZhI7|=dRBDT;IVz
zhrMfpd}EW+|8Ts2G_^Sayz?3x<`&j0brqJ2nCmNnuuS_V@9=MW<qx?VM(UvvFi0w+
zwX2$1kLOEe`5b9!^zeJ$hf@bn<izRu6OvLN^3#~(@1I7_%%jSY$MdZ>E`IguxM!*8
z<LqM#N%XFw@}3Mj-%uI-oMH*$C{$Hi)!zy%cAK{Cx(7#gds0op#OApY6>IgZWmp)-
z4qm7_A|oTw-9sz1H09wTx+qm;1bc}bCQg)X?|+cGNUevbas0+fZNhZ>(>0jn7J)g4
zpGcM16`=3|U9&}Yy+k|FC(7uwmF$n%CduU26pxQ5*JUGnz$j!vc#Xr^j<2`hhSp#V
z=9w&ZBg4U<yRk=uyuDpl$wi8jP3c(#RWi|Im2cM-P-PumKVwTx6B*Iax3kqa%-U+l
z&)4K6Q;l_mxNR@?GLxanQw6p-i?tN027rv|Y49mm4z&k~#K6EN%(dA_kJ`ZYs<5e>
z6_XBKJrRzVTxshWEV{;InV6R_C~E6)J?UDm$5<Eouq_j8N?R0LH_l#1LIWnWka}Cn
zw7lqlm2LL`X`OsaRiz>i@PpIU^D0LyVALa!dlrOWD!0SHg@-pGI#=Jvjl882*VdWZ
zYV$(j#9u{Ww?tUE&q>4mn_hT#H&7$OVJ<fDw*J3O;czx9+R}?13?4jRmp8CXrtchi
zK{><&z1F%a`CykwPNB~HLzf2`G^KfAD50&p({rMoh>JAt(<{A%U!CwN>P^I8UcUNb
zZp>8-G5R*W#7j^UH-N<h%Br?%@ox{x^tSeIlmY(M@Oi)6UZSHoFQr5YEE#I&XRaex
zDm4?ft~@<tTu<t|YdwK0G;G_9<K|P8C3Ddf*q-A%XcYfzSH7xmdBw^;d@P(pn5Utx
z>^3w3k~+>iH6PKX1U_r9%XYS4(R5)dfv@5tht9IkN2rgLqP7(|j&c0rW;ZMD*SGag
zcFX`(TfBcqTlu=>)p%!G5xz;*t;K<3RKZ3%vrkG@W>EhVXJHwB>Rc0d0U)q<88IA4
zxGZk08gI1m-N5C(FFWN2ab%haVJ)C-=(xW%!ZeYhuw&RWwCJ!zm?`cymd8!pCZDRr
zounaDn@PeQz+^NTEa~j;yb+gRhbG6GIodY0;ZiQrHe+?!kFb@BsRDLWKnRK3@;RF^
zP42iB#c(Nl^Y_%I;-d$VK2zq@WitPX8Nr`B^#Kw|!eAD09;h%@lAj`WgUz}Z($NmU
zvC~WOw?pfbeLywT4$_5C#K2Y+P(j<~iH9*wlo`WH_!Y@Y1|trd!U<q(wBe{nMhL!t
zOX04h@b9g}vK+7QS|8!o9tf0@XxcVBD21-5yO%7wl9?PBC?y}2M`1x%9+3`OA(Yoz
ztX<K<?@9JHPw{bCLNIBnjs?QJjG&q|R(TQLNv;$)0_k4u-C3=qBn6&KZ(itLOHJSF
zCSz7f-Ch+Sc9&JDZH^MJxw+U9ZWFN(m|UqG8g5-K%7wT8RMdLemdCM$+MVpzYH*S4
zLm*1`G*ju@zG&w(U9N+X2lX(>@$rI0sneIG_OE*x5r`2eP4@yiMuw~O{~Rp=tVRu+
z3_7-hf`Jf+{7LHHYdcYCDOquB>svOA3K~TXwX%QGrV%hsnt~R3NbLV>QFoFr?cU7m
zA(nff+ST}F>^2Ci&t<P`s8qoWK*EJ?i;8T-ZBsqZL*-)ReMo!>n`o&I7DQr{llyTI
zdhVf5ftq;%Q{{VvT$&p=0B#9l3Ir1Ga5b=ct<Sfmrh{r2eg?4@Z1NyngKjUTu~yoX
zZs!|dHb6gWh~P$dd;7?z0qs1hv{em%Isk-5dj@hP0SHc~{+2O{YQz`5p}bs_{|ReQ
z+NZmd!9&-h!&gd0=RxR<CN4jGH5FE?EjSd0l5RRrBU`=)qC|MLoA4)d(yYd+XK5Rs
zXnMek?viTWVg1MG`6izwaU4-h@>EiZ*6S(mYWxvuL$LcRx!Xs4qbn$~;_Nd}M{}*t
znn;0`>Yr)N2UL<rRxtS~Gn}a~RYQUn5e`6tN*SZl(#hRN_K$Y(kqo$B8n&AwsE~UN
zu9x+YDR|##7gnR8^z0V*b}g|e<r?Oy%A@2tlkpjZIDYY*H?BLz4`z!U_`7l+Vu>*K
zgOq;4sLftARofjL^tJIsi0x4=sR3|@TXS?_Ia23#$2TBbEK^_503;QnL2AEuRG6*{
zq7ld3g2S0qN;}Aitm|!&@Bum%_6!I6BIdxFSB<T^Z&GxUkSOG}t?|v<WKnC1E9wCN
zdJ!YhU}tkW)J!SG_+CVY^O+WvJse7)zD$0~cs-qqGk5`~ka0Y2jZzn#jv6)oQiA5E
zeLO6sHK+Z{!Q|8f%xsOfaby{U`mGordZXO@xhwE)cpJ}nFR|l5Ocgc5^2Mm-HSg@Y
zau!c(RQn}B5P2xRzK0=Ds5U}^+2=GoURhq%y8L4gcbxFpu%Z_M5>C4CZgaiEZ+;-Z
zH%ixOr1cuyB+vQL%(fv(cl>Yfa|kcbYdH=~ma@LumDje}%SYX<A~rq{d`Tyqccbw?
zs6FW-LyKnoPALFbaI|&YO5Z@s`!CcLY4mlG?=-x^qMESk683QzmEdZ`&X+D@LXm9B
z--8O%Oe<WeI~$w`-ZNeFUPBn)&pWi&KfRrN(uU)~f26J;a8?l1Q!mO?`s}h)R%9;0
zMLe`QW{W~3F<P{Gw(P3#AU}MwF-;k&KFc(Mo;xZsD}!{cL~Czdr~#|(1Di5C_@9jL
zh`WDlCc(N)^|U*5WiBe;nxDn#_WPAPo@)k{O!mn#`myq<L+nxlYNYGE9Kpy1kgKNd
zdBHy2WQ?BWCj}WZnu|6&8=M*irbk$t=tG%vaauaX^bDbT)ee<ilF6$mxpd-8%?}(1
zeLIrk<n%le-GD8VLXfZvj$rTaT(C^X%Z=4i#?RMI1ahx~PH~fsh<nU)%YzoCzZEj}
zO%V<cjtlOFBxo42A^B((;A;`IxLY7td4(G;7pYsp9x`k5;ontZJYmT(n>C^3Tc_M@
z=@g8>-S!_#nn>ee(qnJ&>&lk;?NL3LTTm{c)?6KPl3w^(zz_GN`;<s4Smyumvd`!I
zfPv@A#&c$R|6+{?S@sbQTgv_YC2@?YrZ?L=3xT}Jdl&RC&@3(4Y~8BN3MN)^EKfj`
z;}t9}cS0|p(<$Fb@<E?oF1FDmm7}u4&{nqidOT5Aw<m6n?WN%RLiL(ESde3t;H`6+
z6&r|?|ETI@KecgbI_$LC@&nZoS8WnSWSsH}wR+aV8k7)I#&Qm@HeL@ZH&$*P*h4_B
zNRgF`wI&P>ko_r;-CFyCjxLuKdI+6TqwC&n2H9v1h*wB~F@s+va0|*4zJI_S#4m`-
z{o!Z#tG@o$yY-IQKA?0{whJrZg)u$oqj0u2FAH$&BrmZW6p*GY*>!noPeTgn>c-bR
zjK3M!e&p3mVS%?Qn1~7`LPS$<)#mn$X}R6R`&byBXRR=+)#e75DuCLTn};E7qJ=I~
zI}~b@)RYm(F9iawY~0!Du({K9FBHY0|2{X4WjSy-paz{mxe#m5#UFhtxG5NvjC@iB
zt-xA5nZG?AY`f3+INoQ1eT4BFI-mfh@`4>fjG{g33p0$@CVn6=W3%fcog3{{VNv9e
z%JyZ!b9!sKFs7Me;lNcbw6p6|JkZu-`}UlMh?U3WV|_UjW_$Z|xBF)vN_tqw<{7KQ
z{c>zy<xh(L5@l32-qz<hc%q4?<dD@&JAaNUx5)bVRax7UPSn?v1!Wz_702&uk5@)p
zD6>Pd?TCv9Ldb(>k8h?7d8OSW23HdBHS-4Nb;N(Z7VyM;QRZY0aSbK8+T1T4DegzX
zysQDpIv$*07?qj3{S-p<MhGRT@?7CntCQM?nyndKp3ZWNu;4G%<qKoTLh7?zDcI}L
z3srjY#}A6rg63J`f`a6H<NKEDYP9{~O+e3Z3H#a2uXSPKX=UmU$c+ISoreXkzKe#A
z*;yZ(RyLLf`f>`lsEl3RTdH=H9>nQBiCaS;7x<F=z7s=+29gVx<Wu#>ZBD{dkI9Q#
zDa83=_$6K_R$7Pg+b`_z4@mL%Ez$oQLH>8J_&-XT|E{dE{Rbrt+y6*O)1oQm^e=++
zKB-B65L-v$8kpWEOG0Rr;*lfQ%xldGIyMN<j*A9^tpZYMa-359B7clJ&){g&s7E9|
z2tAq7f4{Bi`RxSlNr+=XJ^cE%>)?W#*qOMakp7W;{&f=S-N(x{q%ie(e4!GFklIFZ
zNhYQ!yGThqH6t;<!;tznP(oi@He|dBQjAuOLeOi~_4~ilN10kjuHZ1M%%gUUfr2Co
ze$vSgsXKx39mYR~btW--)S!Aa`0=7H?O0~vHWEDVSA88Wx#4HbuNJZvgbvAJVehQ$
z2++K4nA9szLL-MI<>KqjhH|a<Jr_~iuF?y1-a-%b-vhn2cj8MsD<%u^zn1T~<buBM
ztsk}??I;+xu%yh%)xJ1tLHj73<hQ}`-)!{U{+Vk(2L}<)`~{Ir-s^cK^t%c+ZhY<H
zCYdwCvo9cC+R3vFY1b~Rqc4WU0s{r7^Ic(H2^n<b?{xKgdU}T&G(?0GGC%Zsx&F##
z;eIQBnxe2uv#{Lv-doQyn?0GTB^2r;6yjdh@{xVH=+sWg$2e-@4>>jfqU^7(-30e;
zMkTd6byaTE{c1fG+luSZY2j}bsp%#vwiB68t=6wyA4Il@3#ppu*+yY~+WId)zgdf>
zKla+pg`DQp$7r!HfvlmclCgPfqXY^381HA2>2^q=WD?`E;M80Zuw-81+^9SR2hWOY
z_+#hFq(+1?wGoOh3nF4zkOqM8PItjDZglz(E#%=qH0T|{+hZODG_xYijt}WNfFS_U
zEh$gVmmc8y0$1FaK_@i}hJFm9AA(}d`4;Gw)}gGDWRq1$gJqZ!3vVq<(a++;`t3PK
zy^6DnTjNx2=bjj_BY|fYjIoY&mJnPs!5XyoOfY_^bh)-wZYd|MEk7YTWFN*_L!Db}
zG>%G05o2grJXp6QmMcXUm#(3p$8-ssklSL;Y|$*W2CTEz@vh(A;9?%R8pAe8Ls*=_
z9YO3X(kV-j@P$R;KsHp0FPK%k)>)Py4XpW4o+tZCup$>1B<;o(`5J#HX@@R;`d2c-
z@v`u9nL>NWr#bJB#(W19{qw^Ep~;0gJYNGb(IOcCP{v0l5ZQL&$2#N*OwQ|C1YpNo
z7@>RP&aLjC$608<@S9f($-*Vbvf!A%eV*^W&Jw4GIvGtB*&Zt-6Sx?OKXICd*&b8x
zr2PK&;MPP5k{RS|J~!r;8&rVv6%}V`i?Z}))(FJX#pdtYKknaX$YNGpwGKd5TLB1A
zqDtItI_fmLtw3MXOnABU?K8m*DT9h?sRr4(yyu8Qsq2uy`8+*BGpfSrH1Q;v{xZ^U
zB#oq7Sc;w)0nv_6gwYQ$Jx7fF&4sKIAiO%HZw#T2N^2PBk3^Uhd2PVRoKoiy36fWG
zn(`LqK(ud<Bo#PoM1+XI)PxdL!OLl>fcU7t2VA%9o!E+7SxTK?M!NGXa(em}Uwn5g
zwb;(hd;Q~)?T^g}1g)y(4d6uvn!twDQ|Y^_1c5DMjZ_K>NvD$CU6T>Mt!%xFLPBYK
zE%yGKyxg|`@UOc~7$?lnJBf|ePA%D+z%G=U*-o2Wj~%6ZK>|sU&{ZRe40-Ec-u4fX
zFj-Sy0@jSXr3QWey})ruVLV~1G}&(;MuH?`EXC;D)mshU`s^!6F+um<0Fn`i#iL{Z
zJ@1h5cROw+*o@tboD)~o<3+5&jm@9OTy(;8Et<`q2TLq`SMgW!50P*~0Gx}AjwDYe
z8`oL?<tTDqWY`+0uKIvQ<s8Ap4Ddc}kvB)8ijUREt<8$Cq#$<uF*LeqU>99g@TUVP
zcj(RJvB#23b%MX#p>yWti7H`*1ENDL<Dq(o4h@w&99lfOb-r3fN6K9zqO3)BG{cA|
z47D$%0~ONs8oZGTApL;Ceg(a>1}><EI($H8N7Zrb%>0#y@dh2V0xUyg`c}ayGtyWw
zUZ$l(@T4>G7626GRAFHo3G}+tLduWhcFr#!!FVX^c);lTzZiSR=1RkEZ8x@U+g8um
zwr#s(+fK)}ZQHhHY<JjEXZKpW_S$dN`+Qhc^C#RjYm950=W#R;w-+SiAqVM1MmCM3
z|9oL8VL5Hr{v&E_7KrGt@#9x@Wb9Gui;{62!uPoV2(k5NhyUzukO2hSm%OcG&YGpV
zl3yNFnQVm2M4PeQk>HH!ueODh{Q<@<$3IGr?Z2AXas02~Xh12|`b8msR!fyKJ1~Cx
zGfnD8K;lEhxwcdZUJ92ou|yc<b(nP4sZ`lNN-LJT9-Td?olbAc`Ct;VuB2opu_34x
z<Um<LR!z=({D?aOf)svQH&>1k72{%6R)Z=TH_)j<9-4})saSXsU?^Egi&rJr>P+79
zs5Q|By6J2<zJW5f;jeg~bX`G(xhR4g6{t0vO_KJIJFpw_8gP%wuP#*W*wy!rz*=<H
zk^GP=C4g7eTs_KDGmBSWMtEGE%ubJPFd@|@n;*Q=xafI+p$AhpCa#%lA;990?)31l
zo2yrW$kE0uEG{p7NVTYZRG6@jI-Cjwt+*xaK5kUAoMXr?`rg;2#MaY>RDIuJD9HCT
z2_DfNPOa+0Iam7wJ0Sp&?txjY@^r5ufd4@iPXOk78^sruFKlflJBOf{rqF?V$Tde?
zF|0v8gSpI*a7srbt&cWLqftn&OM@4iUu^*iYpYM|U$gC9b8xKjCj&;bKy)Ch<M<xm
zl_kQHq1u{ovH{bWUf4B|K>-N~rKZdp7R}g(_Ut$J$0B+64l7P*!JL*Vn~*<E_iP!F
zo4hq5sIdQ!^>SVz-Zr*}%g^#V=Ct*I{!cH|ljy;}US4r2hK7ILkZNG;@~Iuz;T9);
zt$Ny&#!fVHy$*~V$-P;P6>dz4P@9o$kgpCPBnQO&fcRxL-^phVYc;cSPR-Lh($8Uz
zXW8tIrYR4p4}Ie&kERU+ddB^0vpXNkSV9vY<PD(J95s@*wggwv<L1E_6p=JayFL~i
zf<?z1h~V%22Hv^E8P`GplS*-@ib}I7izi;ycVhVW+g|ke{pT)M?9qaIXOo<}!ct^3
zpwX{xv7H6M*ntZX#4fnTJJF$OB~6~xsK`)BVXgT1qMW&qg#*%PHQ|{=7a`t1uzwIg
z#HQj}nBg)tO9V!|xz2D~njd+U(t-*E$4b#Q@1twmnjWd@!^3@tY#+N!c3U(>3Z)#u
z??)DTa!fvn04v*G&tKsigSI{pjhPlxCzZmK;G}h#-_>T2W})*zkZ4j4ZR1DO)uAp9
zV(D~9RK2V07_M~^NL{_mK`!fD<%LX8J(tQSu(_PSW)ziEV7KXX-jOWZda2k!qpitd
z+GP5)nIOJWsC}o34nUC)%Q!m0L9*($$qLlvRX9jeh1Bk_<<e2bk;O||yEGUB;r`u^
zj0uNCtUXsw>E;>J>y^hz>@?IjWse6-lvop**4H=8%53r?b?COR`^-(t`2-O|GlS#G
zNk0Glu82`}k7P}tImm!AZE}ny1ktYfHOeyQR;(d71+MaHDqW-mvqfR)psxP8Mgr}l
zE{vgqHA3q>;Q5?VRI#!AJ9hF5DtBpcln3hs&jJTz`aYs2*B*S#(wVfO+j-)Us9j>i
zr4=ssAXzHB%a{*AUmN?Jz{6jCo5o-uZy3Wh5PafhQIiF`B`eC5hET6Ia+bICuL9X!
zLY*$}MM9im|7rN52sri*h;Fz?px;6lxWnewWMXq;x|(uYRbwW51y!0@@vTp0DV4N{
z3&nuu!F3~iA;T#&PE4{>TU7#U{sar~N&g5{2TgS9!J<9X-KNfrs+Dr$D^&3E4+Mxc
zjeMuit|BJc%a4G;Y|Zt4hSp}+3p=CD9n#m6(DEMmj2O-4Q@K#i62w@5s*NoatKShv
zFZa(S{^z=3s@L#vu5D&yAg+Wbq2(G<8_<0nqwVT&+Jht0CGimBdZ6p{p(~?6K$6A+
zxxgPSPAEBQv~HpNwylc(!7fCyUt*%)lkKJZGD-$ko2$AFH}Yr$<*+-@fC0k&<^j-Q
zf0M6&R|4R|E1IdT_MA|st|DirH8<ba4yZ_z&N50joBCZx0X-NZY(<AN`_{AyZjA@`
zS%2zZQKKrLDVn4%TE#YU9QmpSwcUp^gv!t!r;Dz=zoWlh?e39b86QY&;wFC1M~%p)
zy2$}uHp@bfj{q3ypq1C(e#bdF9ct_Bur3qC2ud^~+g|w~4kr$bj+wD1{mVRr9Gkh>
zw%9&GtfK16@u^l5gmPry%Cxv1A5kc6;S5uf8xbo=6rq&XG2K@mMjUhMQGsAYq9XWt
zzr+`7{%2Bf+4@fq*pmuF)1UQ2MQzYZIynne?l`%1bkWK$YH$_^Pg`RMb5XN8Jo)cu
zNp)r+T4a&B;F+pvlfXKHU5#RgbmK?Trk$MtC76bMUkZ-NYY&ukcDvx2;~5^wBCt~+
z#;_gQf*fx1(o5XKugJF*O<YVRkZrQh7F{ESqy6eNSCsMUsfo?N`A>Fz-2UMPNXvWo
zE<Y3w6ur)6c4aFE%du9EB#vA($NXGz10tP~ZbQ%@CnSa2K{{l`v|&&9_I*8VDr8F<
zC??C>;A1tvyy6aWw>20lL;ZaYHteWas#7qV7t)wWIfv2atCz>dJLZl%Q9pfIgPx2{
ze1N?J6@t#rESY>k2b*HP!rt+pi{RgVLldZ05al{?hvmfRgYAZ<F{>PE4SY%I<v+ZB
zfOzNR0#}MZiUy1c(A)c){+gYfL#@q47Y^F8T61SiL5QjtmIAV0?F%r59b&N$p3~w@
zA5W$qrN4<2{^+!Q<P-F|B@)-l?eYyP*IB>rpO9pBBG+R-4d<5;Nttg?{Bh`75(}rg
z%=`Kswn+{@Pi7PSbq3wUUDinbX|8B<&QI(D1F@dNVCX45_D+nS!v&fju>6k7g5eKo
znhh%>J~I!!n9|+0y<N`)+NRzM7yevE(h>g&VEXf>dFMoe1h{aT{0i^=V2c^OZ|a(b
zg+N57i!6cZ5rmp8gFfNKe8;=n^&ONHiw2)hr~VH7xAfY^#7_Q)rT6~>H?ed7A39vl
z{{U{{`d@*YZgl?jG$&C1^)%0yv*1d&y0d4;`H=Q&EaPB5GZ0dHtq?-etPoA3Q>EwV
z*Y$b@N55Iszf4ldz3eHZ0*zQBen-w$UH)rodQap_{ny?*{%LThAkxJD_H$^ZeB@K-
zZX!RO8XnN9mk;QZx*vQPj`EL63QeJio^bI%<KS*S*%OAznXW+5#v6<}Ii;w;c3XbY
z#P|LDL&lC4S|Xie{*DlXhUY5%Z($xZPc)dDzz578rcNncvKM;4Puo7w)z?45<r6p1
zgA32}{C3PNxmke5VW-9-lTk*|j?^N2=iGB|vB~=S@cl{xP+mthWv86TE~xB0D_SG~
z5CNsM0y=+<As^;1?R9?=UOc|4gU-!Vw@q-r9$So&WtjtDquW09?4$yIy*9T`_x~wt
zpea+fv15E~xvOS2%#&kERhks3L#_?pZmN<3J{|WlR3T1Iy1XT0uv3L}yD8fVDKECk
z|42y=ClM%c3Rvkfss!<w2p+W(2n`OWRXyPO02#w9v9J3G);l4D0Tv;`MkXfXK0fr_
z50B!+<!BGuJLHWn0a6=%JOw>a34(JLr9!Rk;(KuRc#Ewkv`h$>X+Kis0mX&rpNLe>
zbgC}{CF)KATt{rB45@=&bp$2XN5K-f&8VApEG?-ytNO^oxhYGp7#Yun_U`+&ZmP_w
zqzp$K2M9Sc&@BPG2JI+mb@LxCwR^c&S2~6ixU)+P{HHOYpz$>aW4LYy_ipPc)fS3#
zbJ7lo0=0Y%_0Z_VWK2Z>*T|Ujva9iTkX=?+Sh3Y!PblIC&>w?>zfFycu>VnN;z}N~
zwSWyZ?R?}kZ@39%$xUh&!(MScWt8H5eQZcK_(c#a;sMocED-%8@z7fdru9Lr&UiYa
zh6#>?AiFu**Sl$7n9;x!pjf1w)l>)ntBigOoHfp*jA$Rs@XDCc?hM4eTt;+(1OGk9
zMrauEZUv=}QAOhr%*eRH!P~}VSYmLQwFT%14f>SwC75XFIGL#t%vGr+^1u<Rg@NM)
zZ9zGtCIQwjixq=?wGT2ZQ_Ydo#>CB@Tw5f~^$1V1#I~2e+b+49$LnL*<O4~=N!!~8
zz|?SX+aq%iFXRCl+lS@NM|cXrL|$2*3NJJm;waDFlwWKG)xZBXKtgPW{QaRAXog9;
z#o*EJ>crK`n0^V^k#~9=*wbAg&xyhvU55<`_pAM8i+O;e9ACOy0s+!aTBH&DKqsj8
zQozZon{XB~RTAMJa)ti+g6hG7g{@@U8{(`gn^ch+oc4^KH#{Kli{~T(5_(^9s5n@8
zQ-n_8xm5kx4xT1g##)9k*Kt{0iZ;cua3%bm(bvkP1Mc>A3s)9I)=0JyadLTb6*4t`
zSS^!AavMh=GZ?a=DB~uQ>V;E2r3cS)P*h%J-L9CH=AC}4)gZNC&a<=0-@8Bv3@^h;
z{NTyw*%h^mFVrkl4g!hU_A|o!Kxyys{5AaS-|xHgAgaIdAnL8+092BCXMFBJgg_*>
zL4Pilt$|$n4aJzoo~DBCDj}w7P-n9?+mH2?pswJXX#RSNh`owbU)eD+AOE?ni8IKb
zPJx<pfr6ImM{8nInM}1AlD`AVB;+qAS9Nq>n$}Sz2An7Q%t=@Y(MUYHfx21bhUPIW
z5M~HkXdtwh4<%`kjr<hi+d%~Ee2^sj?LSQtR{k9a1_k^8?f$rp6&K69C#^a7&)Q6%
zA05EAoA96as&P<!aBz9nnx-?h*b@@0+)oy<V|5CH{HAd*Zr|}nG43<qEV$D&O(RQO
zyJFKvLF2-6Kg6pgkn+`jR=kPEI=Cpp$?B)K!!;P6Hw=@nyS>5wtsvF^R&GJ`#?kWx
zV&eDEDA922=e?Qp&k`Z!$%L`ceRoVxzbh`M{Sw_9Z$|yA5d<1mg_<r5MEM41xpfH_
z8t2$BsyAiRedfD2mf{T4UC?QWK5uWB3Wo++oE%8>jMD-k(7?8ps{ZXqW;bAO9zGKt
zjx#L2QxGiu{&4u2go{H4-!9xs6*0(E{^y;)ZEs`EV2%S)&fDBo_8ebdS8%Kj1$m%)
z7h{37qs+uu2>+u%Jzcn<x=E8;5)@yw_%_woa4uM4o3qkP+(Z9_94+{-*hU=6D*7B^
z;;xhA1+N^wJ)vW+10F4}OYNPjRDR*GihyQLHh5_~)yf>3Ka?0Zp>yu2`<nPaTyNt!
z3YOwmo#9q01XmPCyuY`b1Db;a?s8Q0pkp1{-kBuj1)?te7pT-0ICx(_G=$p8mW(Qt
zXq0>>fNZvr6(N*PA{9{0s4FDJYRYL2B1TI5IG6SjDPat7GNN<iJ)g3#g-^{o`(^GL
z{8;wxqj|kMtQ3-5RR`*P>g%soSxDX<u}p#!s=6OS&Kb8XS7LYuTR~@>tdlNbQeka*
z#=U6T8pboKMXNuB^EmIqeu8ly*~0t#@cON!T}XbjfMz**fO(BFJ7U;3XB2CpelD*$
zN-RG=SlTeGSQ~3>cv`PqhN{V#GE=H>juSS|4UHy@#D*wJO~!k5p2S<uK#!b|jX;57
zsAx0)3Ee7$LD2WHAi)f$`$en1776jsP}s8|%YJq>L2d;;vC>TS9r|pt#Xj6YjbK;a
zpL!iZ9i_+(ZO2#iGJhfKG;2WREwnp!S#ZGetw`rpKts3D!lmS7BQQ)`n;<7zKkl<O
zZj7P~)^m+@0o*-M@4m0vlVy}Tv1AvcAFit?I3BVKrMDGDSt-z_0}=E3#`n<tylXh<
zt1n%ONGbBu0xT&Wz+~y&JDi;Aa^G!0v9Sf`nn|#}X6X}<i9@-hKp4d#uIM=17n+hc
z86|^z8ww0=BtEVrM>_JV_bNYE6K#l4I$Go?Q`tC-v@z9pe^;<4xvn~bgXy7bFrg(?
ztwTe-rD&zHn2j0#+pN%)6DQ*e6H-n;TNVVr3TCu2XuoAqzuymz&#^--K>-`52i_ix
zZP8%@=?|Org&u;zoF;vq)jN$#Xe!L8Lgt8LP)WETM*$k2F|9r36qW|*O^WdaBmM*&
zWq=Fe4$#f(_5Y1Te<4QcZaHH(H;_7MD$gWK0RL2=bo-*-NPlT?=B+8Tj6^8A`!Yb+
z0n(7W1C3**5OI2mLSF!K?)DUlBb%iIC$frX@GtKJ+`MBnTHr37Cup1IfX8yOI+Xv%
zD%kovWCEYAZh&nJ<=+w{YnYxH`t*yDVHIqmg}`iuWnc%`!qS#Ona(xjXN*D>#U)y6
z0~LniJ2tLkj39c}scg#!!2%ja+9bsffCxpG2-*D6h|D~Dd>u0~YBt2c00h%e*5(0)
ztvHh=+qooV1sOCljR`+eJxUYBxeA5!_%i7s2u7%c>-}xQdg%hrvFm3?1kHfp`aM`b
zK0uQ;daE0M0f~)jw#?%6hEKgiBQNvd`OI<0k2Ncj#B0Y|m(3VkCY(R8xq^996u_Zk
zJZ-k%N3<AYJE<Xzc-=|MC-m<-IbDdV587xOh5C#RoaQzltzVCnKC^$KLJs0K<J+i6
zIj`fE8e`$_4oqd}D(hO?{?%+C58{0|1wp8B3^I1R!4Zw(tjrrbEbSc9jpRr$WE>hF
z5Gnd49@v+c%z~(CV%VAU%$^6zUgEs)G%WJ#fNtFcLC2q;q?Y9;5fy&xgOoYO&YE}d
z@~1{+T&M->*A3}F`xEyqG8YG0x1j9q`CSYcR28k=5emu)AUH<+<QnFx#>t+)+*`Ph
z@v>;vct0FeK0+x<?PFhu5qM?@^kA(RK6piihA>;&e121EX%njYXuHUEQ{|-wlS**a
zOkJwSXAzHOAGo~Bx^lPIbgt?K@i?GMVITvJ^}LN<#Ra}M88bg-ebh=GCg(`QKIYD0
z2oGn#EuEWyakuKhmnTL1lyCZ;4U5D;&SO&i3n%yurf2o^@_*0w|2?(;*HMd&m*fBU
zEO7k?4hz@+io*ibmUrF$rzXDA+~+84V?Y22Cdp7kYVO{&YfF}+D$R<?m084KbS6u}
zOOCF6G)T#3`*z09hp?VhuyD|=Q=5W<;OH{!_XoZcqROEv3%-1taFbi{fA~o}8zz0#
zZxr@3Tf(>6YR~xl=2wNC%+B~m7Nr)Zy0+}h7M(u&zTp#qeXtRXXC610c4mn`7ddSC
zH>*qw_RU|zItQyJnOh*A&|)zNPj74g#GI_=eb>Gz6FCf}us~k?2Qe3Se0WcETz!Y_
zX5)$6Qv9S$i6wl;nu~nr&>0b_zuqo$jJAk*Sgm60zO{*uYt<?`xxyXP8=2ZT*<&g`
zDZ51REeP~e@0GaMeXZQOo5t+2)>%pWxIulk_h+{xu+$bQW`^uyT3xHF@mV3*-$R_T
zeL5s|+%3fNXI6F#d6%~i=*$h!`fG_5gTXFRTRi|)2K?nwVRgxTB?^!I66YVk-Sy9g
zepN`X?6Gq*)mIB=uc7Y#uKgF&&%c*()!ENrHMecQY|{bXzEjTgXLZdk*HzU-`+4=7
z&)Cv=n~#ls=#SQvfv9hF%W)q05;$ZA-1_g9SJGnGITh=CF;>+dgG+5TTUCO8h0%+c
zU=^j=a+1}yiXA=<{*64$b`L~14}BY{xuQuNEJZ6Kq{eWbNO1NSipe~!0eaK2!L0HE
z1!wc9xa87KAPB?^^DQUs>ixoAi<<KGZ68-WI7H>QU0pp_`Ekf*u%{f&eUTdKx>)=m
zXYU>J-E#sV=JzN9@mJ<8^D&B#a*!eu71uw)%DO7C!E;Dv==fqj4wUnxB@W)w-FN^B
zotS|Vu-$i*GOW+=5Td)*ELiw0^d9TxF)j24U(0|c%KB73=^JOqou*gN;h7H*q_{ZE
zYP?^UW?u!IJyrqlKj8!@W>^Pgn+dK))*3z57dXs<VgMi|5Dw0#UN~sbqC&(e0ut?1
z>mX8r-O5$gR~&!m3XwNZ4BltY@%!1MSWyLNm~-(z4}>gc`tR7@51?1(4$L9YsOb*0
z0zu*{1vCfAV33cGj8?zyl?Y_Vh0+tva*Ltwe@vDXLW2j$!UU<qW5MT8fP*m?Pj`1C
z7g|HeGaiD8CU-^l5Nw<Jo`2rk9fm=6M3rh^inxCBy-&Ca%BvWV=0!KJv&#Kizi~^9
z!ry7N!DfkrV~hzB%l#-i>`d?q+=o~u6*TZ&{{jp$5J?FJkL-!UilN^-VU7I(7Hcwq
zV2I^Un@tc9NHO!uUV}YyIA3Q_O-8OuYl#dMQ;eG2D^1*b$LPXr5T0x^E<wQPQtrbq
zId^EB+hS6#$s_A-vl$XDQq^nf(xho7DJ~8qaGc&7_@KL;MzMzQyg75uL*wHnCOBEu
zXr>Xu6vV|{7_V~q=<9nJ4Nux6m1W3AgvkC0l(cUSuwcDvMx!JCozW;`9{CzPh2x4<
z2CVi5&K+@p4F;z@#)2_;VO?w~rj(!e(%~|0ac@_FM6q-t(FI#D1rQZvkCvf9l7WS)
zmSYANhbvT*Qqt<(Z~x{GinYE($8RN!-p>@)k1dU0^~Z(-C9}s!wU(f?pVphqZ&HKS
zRZ*bI>4{VYt;1nEKQj~s>B{K;`lCTReRZm&xKbMUz+#oCj+7UuOI;XOI8w5d@@V@w
zmN0ffyf>Q(CWj|EML+J-SFW`*1D=!pZUyMGi5^CRFt580t@38b|N7Dn=XK_^pvdp#
zc`NSAL+J;(xwVT|Bj_GBNP-`sW5&{O9n#<22k1j^VD;;}u`uxXXt`HFo??QX%v{Bz
zC=?GvfR{K)5{;XrHYOulD*LUG)3i{lx&}r^pc7!1nLAIVd45Qmoe2_@^UV3O_ST*v
za8OPzRZP2WMAhOB^>gdg4lpn>b@^$l!PCQ;GU`ZRJVJ8aGVVc9!dzzm<muZ8i<g4l
zRWE_LnV3>{Asi7;Gcul<*4m4Sg77ux!zP9*r|?1xf6B=3>|r_Qr{6Z^VRlvkHv;Ju
zw`b=;Xwm1gB9Gj_nKbITUy|CCLv*z+XM>p7<+P8wbWyOkbzOJF(5;_hcI)g?a>O4#
ztnSp~SB>~Jh#5sq1!F5D*C=UhSsg;xp~|0+Y>dR$FtRY@7v(l3JH@U@gp!Ib4I%|7
zq*k0hu{<MdmI_J|1$9wa^?rl(?FnN#qbtJ3S=W4&mTXbV$5R`>DYKhyJYWd3nsRj)
zbwS&sN3-ge^U%&5<FcZv!qiE3+dPe)uS>9uOmS(D%pm|k%y^lc4+y_HCn36*Y$2&4
ztzH{RVV14It!BHd>nW&+m&~Qqy?fqN2;PEdB-kf<&obg+<G_F+PIA1Ugz9mm>Jb0L
zFZY)2Wj`?LY@Vcm%uC~9*`BPQ7<ut0#PuFi)7doIw_60cvDL4#RZmnS(%HYF*LT$x
zrgG;uvx%r8vdQ(2SAeR50#!jO>L-lX(#%~(rLGJMo4p`E&kfB8d3j}Su2(_mdcU@$
z@X}9(@~$&ZFVGOqE$aK7(CV7jO_Y~jFT34d%{NSBWI#5j%#51mV>&nI#EiW+*gLa2
zEhyXP%%((+vf~(0w+_lpf({#~j06s1f*0`v=F9rBwO%fkEAZ)l2rh#=UYODBcSk{R
zL?`zmd+j7-)<v7S+_+_#(b<+Br`*SG-^*S=Y5iBfHHYFVM&9P>V^Y>396ni_^=L>y
z-{}>SW41*Aq8GGo#cmOnVYl>7N@7U~?!#8_qnVx~jjSRx;zMTHN;6<~sbEVEnqxr)
zDdkc{b=yoSH%RWMQGD#b42Or}dGJxFJP3^MVX$`(59%udwcZ4~b3{bS%4=Vn0$A5n
z8&q0Tv6JL19c(R#c{KJ?VW^Wu>Qluec;HUUEE3S6%EWbu+QxHS<#&OqP<d>$R`pnL
z88AmfloV86E>9vK3iJ2W02k`Z;OmyEZKoGKghcdY%iT;252V{+<>^yQ!GWAY&$yHW
z+=&pNphKO6@$T$Z33d46c}G>gD&)ly9ZrQV!n!&!^Fu_qvv4y%LzY6CMCc{|J)yhj
zi(}R&>TN)vTN)O`5gqzUp%AXB<g1As`ATu4QN-E25#AgqCkBZ@c!+PquZt@aR_Ipb
z9X^RLW{~FC4fRm9L8Ni=WPlt0W7W3N`zG}i4K4Y`0j}kzkqZqa;*w-2*?__gbZ@=;
z3@xiEI=v>?A(YND21lp89(S2*0nU?GmfsbD6o3;>8+lr-cX`izHs}NPgzUW!b<v8=
zY|JqT#>2Jn@sWgGQPA$grk_xZv}622iT;8E{?d^b;@*;FxG@YBB_C1!juC$RM`gXb
zS|NaaN>qN!Iksh?01b}MLv@w`Tq#pNADA9TGq*B^J-x|%|0u{^VDukK{r^1{{`UaM
z$;SIXWPh&zQ0nLU-<A4x<Xv~T{%e42@Rj1xMFR^Y5!yNl;dbWQjV7!wo+6@1kI5?J
zh?P7xld`UPG`Pu6{_X(&p^8XWZ|!bp)ZCmzfVTSC@Bh^`D2OJbCGtDr%fri0ETy_w
zFh1iiN8>j`eM)~GQSQEK`E>E!F74;x)5FAPBxN+UOyu#?JI##)c6t9W*}a~0Qw;+I
zz`2W0W;>;A8}SO${|nf?RF`-nHrd26&r%q9?B&uWC^Nr&=$rHztjMmNm~(oHTh;${
zBmdB4<5-30FKDU>3(xuy^F2Xf8nH`B5Am0ece3Q~so@`MiHaF#^FIrp`=e`jV=hB6
zIl9BrOtXvb^6j?a-GbT*Da=5tUp*A5QA3}H3_$LfSeaz@%$L=}uZz9eE<Kc_^uLv>
zRR)xz>1x&6kn_%<nHo1u3gK?KcGV~2kj2*g`{aM5b(u3r%%#2Ft)<=zyQ)%7RRW$L
zKGq#ms`WjZSF>|dA(cB8VUKoSEv=hn+#4kF3^>1(?q-TnLWUrMSg)i8Nnv)A?$OV%
zwO0K-)pL|ZwEp^|1t+se*B&jELHk~!urNglxl+)IAUNGQBlxcvVD39t9tlMm`FBpB
zjFA>~wkC?Alpra!>fvi%+uV;TQNQ2mH{Ec}F4fjNf#H$|{{R4QhNqG%L>e2Kn)>k9
zCZA_5tlIF=VPiEjMJd*RZGs9_W>*KooPdRHV?jt3I)VmJB7ecJ$R8$-Alb4*Ru@I%
z1G1UC`4Thc?Xorin`*+MQ2z~vf>~BpXWp>7`5h?1xFblU@Zm0oaKDaS%Y<@qJ$=n#
zmm3kzu&5bn4Vf3342t>ugxaZtag`3@@0(TRQ`>%?@jpD%b4!kW((dpYf%Ba*wpv(+
zVr*sW;*t?z@C9(cwh3en6XxOT%*8}JYi*amy12q6|ElaWr<V+}wL_GHpiBX{S#DSZ
z`QB}#x%Z*VXcY$AnBF}!N#Fkj!V@uBXbg)fkm%N5w(Y8ek9;0F$Yty*hLNROjuM#i
z$+ZN`HI`099?n1(*l3zEv)qf!{prESCC^OA<$rhc^8?K(`YlV!uZ?<ds{{#s$wZi9
z%m$_aHoFs|cXx?<o>pT<)YX9E@Bou8?C$(#m0%8G8*MPyjYNWC6_pcj73DoMB+UFT
zj<CF=Fb%d;)hknVvhdSBU#*+3QV$ZO9Ea-^;~`k)tg9I#5~2z!RUqv)U#H?D1&8lz
z^Zw()aBittF@HB3P*@cRD4gWr52aX1FQ`<+3`(U3{&RAvJW$NTXqG-qsv_GiT_w5}
zdF5CdRU&UZbb82zR_8P%>NAgjfZwoA9s7O2(@f(cPQp*Nh4E0L+XOwRL+SPMYmNHf
zXm~x8c3n=EUA18=xul%I`lJCCAHs?qm#OW)tUX`Me%s4|g*pF=bUKbdff8`u84BS%
z{)8W3P!}Uo1;Z#1?%A&_eu|8)#aPO9RS$3gm6QJ=E0zc)QNaSo`taoG0YEQGJ{G}x
z4TV8cz?>cHL>8*>V5GqWd8)hhNk7ZJt>RtWb`6AL2K=N+?iToH+JZ18O-t{-<=d>!
zKJgx-MqrDge=AVMSP+cqu#PBg>I$s#8*nC3)E<msRT8POlCVB7q4b=2^ladrp4BF0
z2_vwsf9gYrt$-J1na!6H8L*f${e=kwGg&qT*O0PT?+~P+ejBNJV(KjWb<p>-xD<|s
zlj7Ask`e)M*r%l#l7z_Vv}0lVlL4R;NHCXEHfA4ZRvjT={X=LD3aPD2b`7NzasLnC
zd5auMh$<4A*!6UhmH&rjE^}2zCT;reJbiUD4GJZ(q)jV0e?(Fj6h4BsVyu!9UX0Wz
z^w3S)JOj|XD3DH;ADGKLffGbsGl8Nb;A?qN{bJKTA#^N+m&+s*zGGO1Hz3C^Z_wlO
z0n8>&_Hf&?cW7}wLM&u(8FoNIVb&R5NamFcrMhsy_mK)OvIv2Cr@;Clk(YCk2XR!>
zs8!s~!rT&fPpqEZ<Bk8y{Nc79@d634Q+@zpgro?BQ^dU=F6(Wl3{s<blOsowmgif9
zE`AI&3kRCDWD5sEc!a4e$ce`N!+i7=1-wHvYT%$ojjHRy!!a?BfgBIgx#US8;H%-&
z!u`{zaOevE!<<U{U{paqz9{~)8fa8B1b<G!?F(?A7q?$;724<wo8{|HJgEbb<#kDO
zU^wo|NppUTY}Ven+dPuP)O#F%u^!P;2Mg>-D1?OXA`pHKRu+1yo_|IcB%F$vtWMYo
z&0))%MIg8gn+3$&cxD$gb>Je@69*OrhSQfMVv?e-$7pSVl^zr^m#e!#Ifxf<t7&qT
zxk5(|`1ztYW$@L!&~QZ*2;UqF*(y=fxhCCylxuj&kRUi~NwJj@(NK8N`n_t=a8^<9
zmiC2jsFMKMnB&JNA@ZGuc<D$%IDziW)kIR3n)=?HUtZQyR>%yd3)&aart?`LMnqSn
zJe|4mLbpcNuO?zkGbLkfn`_x+wbBp8;{c_I)Aj^;TRa?l2#3NF)*^w06EOZ^BviDn
zBrB_5&e#ur=6p!uFAS{Xk0eO%6<Mry7y9arznY=Vo-I_4!&Ti0A-k3pL0<aDfz*Hl
zSP>QD9;anw3o7%kNOoGO&pEKt(4XkOY`W1<Y8%zQcnCo#kJ)kxK_~a2`Z?MMwZn+q
z9gEHyxFjnh+T=rV9&Op(C@>?e5Qi#~Q#N}7pjjWjZq4k7Yls*He{bK#vQ0zzk<4PD
zI_o0zn^&s2+yZjWe@EObx3nc_Ve3)l((Ua&UAfK*c@~i2`3Xn$n4HB}MirMQA8rH-
zdo&UV*j2@NKQc7JBIO^bZZ-5!=yk}2oXxW-MAGdEvaiAg=0&{NZrcyvYOf>*>&(V>
zwP~CqSuFiMTUh4{O@>7Vb+l|rgf?eJ?>H25Hp-mTT0sr0*Mxl$_inQ`o_BjcBQa-}
zjA_?j@&3WWO%L<4eiWL4fC|Ht%9Ub&=>+WpUBhDzF!tS9CxF+)VE<Au_iTozOz|7t
zqIkR&W#r);VEZuM#01EPtOI^?IFt+JM7Y1?Q#a<A^nq;<TrfBWg1s-P)0-Vm>#K(B
z_v%Xh_-=(Qb^>rEI~Ui0E@zN#8$#1;Pai+Sf8wn#0O;A0RXtwrm`%pg{JUUXpzY5m
zpVoP$sGnO6i(xgCHr$daF*;-T-Zrw1!!)>o?K~9{@4G@{25K;Ib@CdkO4>H=52X1O
z(2?T2a8u0vap7faJ>0~*`xU1}-PY9LOqJrDl8V;QogJK8g|xd^;w14EDa$L1Ytw^D
z5w;QD1&|EV<L6A|>{BY4jeVilDeOogy9@{(gYsp#b0h$9+$m%_xvL3LW)-DxQ|3!7
zue!@)Ff;ShCM@;vgS=Q%ZspgM5pnt+fUd|7XJA)`+&RdKL`iS}7t-5(wfjUwJG_Ft
z_!t@YZc%JA2_c=w-{eR@PX4d(h(-gU<>xZ|%W`ExaE`RDQB@4{=62IPh7O3>RO`L?
zTP@E6bHOQYC!mGt*=ham<-rI~8P}!O_FWsaE6zE<x3bsXJ*2lsq#8+G`v8CVsU!Ma
z-l7vb%gJEbB_vM^sGSZHluq{$m1wcQps_B{3+j}-{qH!}>@{Fs2qz_)NhOFbIa{V+
zA{)Ld^d0EW!?gu^S;J4x;ndwlm@M1tT2^4{L14(4Jy)5z<8XDy<zQ=RV-Y_W<K*0~
zJBk;c?l4-nrV4Te7maWmF<xdbt@+$00lK!!zKRJ~;<}(`h=29(@n6&w*!<+F1p{}H
z;{F?v2s-nsyXmB>ay&k9F$|N=ggv#dHibq4Ql*<%@9ZVhTj($AZg>ka@PNGM2ATc$
zOGP)fF`ND!2>3e9RRa)T8c2(rr?prPpBs7RQT7)i@4BHkQ*I1F8xP>*ib}<E@R!aE
z0k|MHvyPGK%@M$W|Bm|Y)=HoWwNHPsyrKvxdNL_QaI%O%<jrNrHo#Ae%#(^LI9D1z
zN@S)I#`p%B(ziV4A_te{ktR*r<WCT#&*oqu_QGI&+8G|IB9%|RG$S0o$Z)gQu|?0(
zLU{m)g@@}NW-gaTH%<4shN3r#Zk54|l==<B<i5k5N3^1`6%u^apbOavqtn_M>>?nZ
zd^0+$=jGMBykpj{qv;C%vj_R2O=m<<A81YVRe=4Cf_Tj#RZh-9^5f3h-mRYbpgfE;
zX48KIxRRnBj@KLCfOB#WtIA`M@B~b#vs5+ge1~$!VB@f-)AJjDZ26s|?3~m0L)So#
z8b}b#2oU*c9oP?5gJTfx6chzbs-x+DX!`6dtag5?c1v?-j*z`0pR;(pV@ygEA!qRj
zb{D+!W;myH4T*g|2}7O&YAeCMV018dUMr6zaQgT6?6NZ_o=fT?OzOk$Y7+mkgEfdo
z3XzT1Vs7}Ub0CawzLCWcqIhI@_|Tpcp<X^b4cSxQ52h8{z5vl|`xtwNMP;<D>A{N|
z5~iziRP>BkEP2*5y%+#5Xrys~+}=_A?7Yn39hjceun%NJd*J&o7+jsb%<!}X2bBq)
z?Va@Ro1ZD)itUo6*%+I}kMhE}$p*u0+b{E!Ir^AvOs_I*3Oq`o2i|u<p~Id4vI8?5
zd15Mp3e!_v<_UIw_TP8aGbMPQdRPYaM8`TUyThFt@AO7L(;9SKxULjP+F>ybHZyo0
zL)Ltf1MO=zo0T4rTv3{0W~oV9xF1M9gqAQ4Z8xdE24L_`ME+c7r$AdctqUl@XoDW4
zy?XaDcvTKLywuVY?18(dEk3_^u7a5*$#x9GKUyuSO%r;=*y;*eu|1skWsvY%b**u;
zw97+w*JsHJ4)xcx{=<<CK$sv%v8RyFh<ujoUx8O@p`?k|^Zk0`uRPZrT_*|4p!cWi
z`sx+L#x))#k0zdY1W6CU1~lo>H%|s`^$VZw#b(m_1A6dWwZ6!h`7@G~alH#Z<u_ge
zvcuZo(h@BTcqt`E@BVq^=Q2l&XSe~kGehQB)2{4)KuGqt>nUV8AaIUBFmG#v(XP5{
z<!;S^V&~I+>E)8&fr8&qBRNC{|Ka%ZKTrdn|3h-k{U4wP-2W@6!HKSZ%Fzg>U%uhu
z0Vs#MY2j^}jtvbFmR7R-U=st9SBA8`wcV`NAUUoy(VZHdqE}e{P{2&@7h~LYE@ah1
zViBEP1CY4=j{j_DxmPgh|Apf9YkFA1cJhB*#8!RF%=Bw`96z3Hg7vrR<@$Z{jU%UV
zTfR%C9>@OU8l-txD*FWVeNrQU?WM4uHAx-dPd{s~Fl4pibJ>3WIa*(e9cbpkR=K=e
z;7EX+o_KJ=(ib0H<$c5ImlsF1lrHN}sZb2?l<uR=_Ujy-w_Kw%Cb9AV-JMplZfrT}
z6bq>cPY}+~p=9`0H9D`YH!yI|D}R_uHS^h5y>omYG|_>}6UFOK_@YwBWwyP$R_!9&
z<u0g3xH;G~QAos9VmA?^`5K&h<)-=EYf!muku)Nw#J=48n=4vNhRRhCf4!O0RwcRH
z#XN%IX4Z41C{o+O^!0P3V6lM~TIIE*+6WmQlOpffSp%l2KyE%;x^;TGqGwm*xR1&B
z#m&!kP6da~cu{^;eU=3~@G*el8_$6YofZ2<%izEcpkP*}xXYw8l1inP;i#YbgZPWA
z3{c2Ll)2)ywra15jNHFOLE7I^tjvx}ZEa%-Aox^jkj&deA2aQuk64w6h*oJ%O&x1V
z43i)FDo}WCo)^H6_%VGrQ$AfiNdlkeEX8mERu%Fua&mmLeM|6?O5ug7-VTcZfX$FH
zP3wFkHjjWgY@zj0sSEG2f4`s-V+hsN=d?R?L(ax=3=-9TV+5?P8X=9vaR_88;uFim
zO<t^N_Yw*aGXIL+DD$jwiESi<YSA8m4tt;fRvxFiUTg}kD*p1PiSQQh^D4tm#fGEY
z*V0nBi8R#va4T`nQue5t?Q(GNaanHlI4;e?o>Pq@F&d1`>Isaa^6s*fMO*0#rChp*
z&MK^~7VvMOAY#v&C}*;UEKqXzNc+c?7?(JykvjqeVrf)dAR%^I|6sGDQ@N;g`z#ou
zWY}7*(AEd;Ya*^SPX1<<g1A)reZt-^q17YUck<`jj3I`ikr*iwl=ZD=D@)|a{UeO{
z;66q_Xo`gAn4+Rc^pEHS!9`LR^KdHK&fjx1mW=DJmp1yl+p1Q$$*x;cqV+R|Ah2X{
zh=S%kBPGSl4mOe+I$L4hgk@iyXm^@upIH@tH4xLrzm4X|xh;nDYky#xsnPGq5a%G8
zsk8Uj5v_lQd(5B&R%F)JPoFF0vj<`s2~Y5~LU0m*XC<$MKb~8gnw6TSmFIJT^Gyve
zuYp3q$)3^5fmN{k6O@46|GvO2GlvqNtN?NrNJ2Ki_%O9QUgipm{V+%y;hneZtJ%8w
zTgUpujSem)t2uOs89W0y;A8@4lo+=}6}+G)^yRP(!r+C6Hf9Xdia2_=ak(}MOm;36
zVhSNCD3)O*CuYW=@mGw_LK!xB6HCWmW@mtdr6w~6>754)o+UA;94^Qqq}F05LSb-|
zF`cOwDd9rN5P~swC4kQ=NQ^JyA6KBkx*T&1kZG)d4H*Kp@q=z0Dxp<OIKH-OQ614C
zA?^#&!X~)n#ANbdXqQ2OP_$epW4_*H?1mDZS-2K=!Vpr4&*V~nt@ulFVWu1_dSwc_
z0oS!`CKjzqW)^HV0!~P3DF8nNC(K+XgK`<ALVuW_pRqjmMDVxVwrbFN_dWdSKHy3M
zolK2Lk)S~`!5GTrhjTe+5bnYfdJbxXre=*w$`$&81RseHa)-1ynJP3-WXFW#4I(a)
z`?7u{LB+1{Ru^pq_X1MS#R0NJf)roUvQTTA5c3uamy=;soQ6lm$CM;qfBIua+01D>
zs7M7tk`K^WOxcO4<CcV7X;bL#>?ia}qZ;o|4o#DXCPF9Ljm(`H6sXbRq(^FAS)4vk
zlFTfPS93mRrGblhmLxiNuAnJ_8bQM|jZA%s58EC0YMQu~E_@SS8ZITz6u(MN-dZUy
zP}NOx+#LXjmH>LrVNYn5eL+lkbP^l(1~>8L4Hng|KqBUoJxaA@y`eDlx~M;y0;$CI
z?sZ_8NsD6II1P+KDvXqphf=z7w`#>JY|b@449lmEOE`?aya@t-4YilNFp5>pTw$&p
z=sW#yZ=>^<)rwUosk8`0-%ooO3kIzs`5kzkwN4tN*>bSr0uv}3d@j{mQ+(8Ok&bc^
zxGg#ACv1CY@*5q>bz|(y*y$_xW3mMbb$+j+fazJsyK2~KaP-nBThN-nvuyN%o!BSE
z4%j}Ly8iyw@v-cRV-^e~M>C2X7N!@`Ulh3DJ;!a#L%i~utkaXUFzu>22)qa9*Tcwh
z@n9S>_HZiagRMa>sV{}_G!Le#AmPgOcY)7W`c=H1Y_WmC^c$#M>%|@XmU@ow5O?4z
zJfo1nkafJ9+hu8M7AZ4so?}~hL@LhKH}_Uxy>Qj9YT|ioFtDQaf_7T!FNs4e&5Tju
zcwl%Nj7M~<JstW5!`z5gBNBdK@iyX{%ML<$g9LuoiEpVm@m==acz^Jg2@>W(_l*03
zUk8h@WCsW;jUzo;o6hm6-dCojvbJLo8i~Ze7C}V8K8{QGxX+%h^k_{QKWPZYtJ;?m
zIQh_~{=SpB)J9lfAp!1Q`=F9S9T{_Lx92r38*C^3`DuL(TAuY^gV5r4HV`HiWsx8E
z${b<Sw2AI^YY8-fsjQ?HYA50MhdMSV5*qjGxek;iDK3z~CUy{*xEPxpT2oJm4}(F1
z(7NRfq;LKg<6cOn^<<-+wo<h&Iwb?F0l7id)SVQz{lu;%l{Pk(fV#FTT5hAR4)%>G
z=S&fa;w15LTKid4NQ?J@4xU?jb3Pm9775lOQ+=e9ItaDv7sQbX-S(Hy7;9TZvI$Op
z;bOxLJ`q_^Wzs5*;d+@-c`;amr1>=MBC$&sSX6zF=l3=pd`EWT6iO$$S6n}5^qTQj
zbwc3~ZZ-1(zc~X*S_`h}TH(6Xq*XYbnP4I@cpc*q#YU^mumaMIE38n~n%7;i3>KJ&
zdcdK-s5P|2bB|k~e^V(Ad8ZOs{Frnj`+gr099EUrj5z&TsyV+7$<H1V&V(0<1|hn=
zPN8un_b`8=bQIcnb9AsY3w!7jBJWN_`Ly`+N&yJYv}#~^8|g&w=EQ5~fJ%dnsCQ!$
z7TtHrEvH2*lxw-Wj_p4JpS$I#HD#cGe{*x6PYr|%$-WZoh@a(p^<}!~_+)OXmLFEQ
zc){8lvD_JC6H^bE7gwgo<qh}@ZsZ{6lcPofnfIUe+j5~xX^$`E=jSe)@M<eSKAnZ8
zj_N4;3(Qk3R*46fI0V74S6d-=BAEBaaONYJ(061`T=BI^s4+z4GTGL6&NG<OF2U8E
z+N8C)xzS=o3Yk~w=tzEVZNc<Sj@*X+CPOFA2SD>IKUw09+_a;#LfuZ7#MFwtITKB3
zY+>Iik6mHACS;Ofd~&%NbhFe1kR6#zQ|uz6h~&no7#2zQ%fkWNuqta_UGN6ce9$e&
z-#|M9krKr~sOwa(RSZ_PP(EzA(;vpGVXx)m1~0qBZT;4Lfhy_lRR~X1^AaoB)P)c0
z+sm8)lw&`$9>k%JNv$3T{H1%YIvWTfgq9kv6Frn6NrZS@KA|r;ilE<5#+(J*?W|0(
zU=1sA<EB=Aeu?DKQ|}Hse`FES{Z|(ZyWqYbZ$0yc%FQk5Q_qt!qzUCfv8_STsD+e^
zJT17Fq+mdQVSS5{P-)R5C?c#{ye(ivcslO=V)1LKg%B$w>h30KwJr<mO`LG`xkCYl
zN`y@0PUcrc;unL0xda-B!4IP$C(<0$Z<{xN0fhW_{2V-pJ7gEgFnM!lP;ROe%1bU>
zNvK&6KfY`rX`P$L)i$|BYxf|OXb)3=57?oV#RaWwwYr7e=F9Bs_g1&LsnS|y{shrN
z97|Ej#gd2wC+cV}%tW2|)dd?t?9eXcS4IQ&Pge^EC*i|Omclp2%l2u?4s8@XJ(4-`
ztNNGRJ#0^<IjI$!as?BLBXl9$$3xjeYcW53U5rVo-A6)>ZGP#{n{8Mno-A-CsKMNc
zT?`2^tiJ<S)$>++f8?Yi03Nk-E&G!`{+nN!o7cd0!?CKd%7E807m5QknzG}A0U;P9
z?;>PHzwq~xh^_gc3lHHbg7i@xMS_DI+L3CVB(`=#^l%weq^lH5?N6o4wxuDWS8=Vg
zBM-*<f`Rmm!v0WfQQ9f50M-^*+)W>cq(_3XTIKVI-f5Tp^VjW46QAR?)8nZ?e)q4G
zO<B|cIK^plR>vQ2fQP8Jl~6QA*@|gN+)^GSDQ|&**hV9Cm}Ls=yL6$$Z^oc|LYbFP
z2(W>+IMy&MFJHfm4hWU|`t~!4F%8+S?C4?r2}%S+g=S&Dl>$0~9C(Vt(06N2d6ML!
zO+$z7Dm_6EAcyT!dR<ZHaWO$jM6YX+ySYgX$Mt31T*!we6v%Otq3u*9%@TBsP+iFb
zVU6)i>Vq$Z(B4sM-CXOxn-)>C>0juY)XVO4X5y@eIsTeKP3Y*^d!{xgdHp}p;`_aA
z>^?K>SToC2_1Avj1|US<_Je!Xt6f2~yM3JoeeYDM?15<Fm$$_EeyCg)0(griR@g!(
z>o2fztumsk6rclkKEn%|?G_hqS`K;9Rq8&L8MrGM{rnt?E)6ZdT&^D^mbD?}p|!1Q
zzi&ZH%vD$0vu(fl%sKlQjbMkV6$=ZpQ7eHV()@Mep)k9<BVC$uv2F0T%KJD9mzR1F
z9{H$s&u-=fP-!CuCgOrOpv>c1)1m*eM3_~3U=o*nrMDmaHg%HS5fBxc&jrt#nw84G
zo(z8Bu_;>>k+GM<l3N37&+w+nYYw0nEIer#Lck*n?^ekevgry@u>{6)QHxH+J^fIZ
z(u8iX`t&o*t4HYbrSo$}!@j@JiBG>!^_k8eIK=Fmm8EVG<cGZ`{_cg!eHxQ~FcR|7
z2W}2aG4cp8XJ5@+bg;K0hl$Tw+I_q5Z-0yLx`nwM1w|=7uIz<X;}e1`4eeR~3bBPJ
z_6Unus-xs2wje?y>O*qo@Bjh-<vq0(E_aa0zT{urp8JLk_qfY-nEki{=D2-xQqf7c
zn{c|}qrkonjP7b=dwPv;;a#c60GU<do=~cXwtVDScC6rF$4JBLag!GCj1wG;K-OUM
z{b)aVTz53^s}?}PcvsYvoJLmLdoQmvlv;HiXw<iwpliJ9j;$*~)&SPm&u6aOA%BX|
z+9c)-|AAr=ZO7*L;UU3)@~Q8Ur?hWyLJ%O9<25`8_=%RI=yJUxT0XN&1aX(M19Rtl
zHo|`O2z^@ijSs1$4bap3BgYz1B<lxIu{EwtZ%=8L%&K;Y)*sV4#4R?yRiE}`jTzFb
z=NsvaH2?|8e*}nN8Rp6MjLDYz|5S`ooWRbu!F<RwJ9um+_Atf)XJOJL4G!Fb`TH`G
zaBv0RLyk=J?hvx17@YlC)%kqS>U@ZWF>CmKo{SM0wTRoJ7h$UqY`HXkpUmogeWR2B
zCniiIAT_H$C<rTZ^Du_8MW~&ZspwT}Glr17(*OBR$bLIy7hc~{UI0R0-S+n8PW+x)
zI5bSO0~Fs(|Iyx%D*ASR>adaU=r;&T;5ikXT^gDR|DKk5Y|w4M8#iSi*T!fEOX&*+
z>jjT%FCdxX)LqXM*>wE0%~_Eo(8D_=p(Em>WnDy<6$JtD(&M}@gPA^->*#dIMr(eX
zxgI53vQoT}{~gcL$zjPUe}b`RAB-ixiYQ3-2U)lgq#TO#C3*IWHhR8&c28w6LXmZy
zh?cRSOl4a~3U<JJ*KMPJUQA^*M8Gi55BmEPdof>&<NtnX`S16W|JDt%bFuwTN`d=7
zuv@tQSL~J>ZJ^6G7gpc8s*xie9XcsU<esPRq8)HWm-;uKjgRr2Cr(saN0Rifl3H)~
zm#X%g;_Dx`phAHqcIA_1FBTr->`5YEJOO)ebG!@lkw(#xUsnRy>*&E6Df!eZ{Nljz
zL%iM`MGN;;Usf;wvg??))e*-cDb^Am$;T^c6`;adK!m7K?x3{|M+D~M2?edCxqACm
zso&S<%unhPFna4)L($HmWLS<p`Q#WeL%BuW?kt%&NK}7BXU72F5Ch8-`L@P8;)Uq}
z;g;>+;&fj8IT&-1z&MM_pN{TVJ#$}cB<a>Okp;jtO+o#<KK|?k#j^siD~{p}T1WfE
z0{7hFU;5c9IX1=JqD@@HTT-;AsSUR$Os@D1Dm^~5X1-pUlFhWksU>CUQ@JabWwW*|
zki-QwdPR2KK#b0H3f&fQb?;SLL<f0J4ePVsN3+H`Y+|N%;;m_U4MjvQof0zbljkSL
z$9@Dk4LsRN>y1+}M#pkFBaztfZ{{AQcEld|7yNLG)KSlT>TSE<gV8K<mlTf5y1bmz
zzB0TpryOsPL>714ytgH<I<hs3pJr?U-g!BMz207ce!$m1OWecrW_2<9&&V+gB@@OD
zsV-F$GuTlz_dI^w2sN$xi1f3`(Wik6N}*D4M|5&D(fAn<;&<h18kQe^T44M6rL5pA
z>6NcC(Ann%Ln>D}@&<KVt<Oo#i2CXR6bSg;%ZGzTwLcedh!r!Fcqjp#Hb9vKys-a=
zv3KgyEb7)R->_{XGi)Qnwr$%+hHcxnZQIVUZ9Af3f3525YVGWc{R7s`Z0lk?bIhmr
zrbrVojzm3ys9FcUPRF!hK4_ay@H3;s>~lhlv?C8Qb)^G&G9IdY32P=5@vu@i%_RU{
zc=-Hl-jf-C?RQ0f-9K;L#^)VAOglj_TfpF?DVscy!x$#<QxkB|qnf@T-@X`%+ZI{I
zpuj2o6|jGiS1lhug2#E6m19D|nZ=AU<B$;3Cq1MYG`ZYoUHJ&#(Lhb0)E%<+($Zu1
z5_Bp5T(8v9vWe@x0oX<T#1(DLdPW_!p>OCP^|Ac54XqTFbp|}hX!XhSgF+3oz9jI5
z)ZSi{)uX#f`>DfIRIx<FBvL-kcjh>F_nK<XwS<07G{RyiC^}bm56@yhBx_s~o*9}R
zq~r91mvPgOL$(`*X7eA}*<H($bQaxQwb{!1$1s0T%*)B$=O(LVdRHwU?ObdNVGSs4
z)lP#*k7{;SP<^-rJT>O%E7vO8f)e?8MB$i+FVk+-?FdcE>s{Ics`YukLm({)Jf+JO
zxJsPGV2b$M)~95sX)<u<bhPfsvV|WUTs}|06pic<@%=ly6d(L)E*D(C5K(9RqdceV
zktKw7t`#}N1h}&CRaN6SiW8diC~L-ZFV}KT_E0DJ2{bSXX@`s2xzIsnrSOV6O!4ZC
ztp{)e<m5UyoF&pB<6?eyYpAC)$-!A9FbFwI<4LR5(t;8R$BQQq%OW~y0y|8ZyI(hm
z`OQ-MigJ+Jd;nU-MnXaBcKPD^R<FHJEoL)BtXqII!Cfm9^fRH)8mSesp+d$gDx$fq
z(w+68vqGc`5dH(fqeCg06VEPKt*v&a>mMK_q$f}}KTcm@9O^l6a*$D=rD$9LP}8+9
z^=-ui6KAeYm*}6|IFBr@6g8RrS{A=Kx|CMDJ;Y=oRv`E{@@MkWQR?I(-rpzc<9&6V
zwh6VrwX=X8Otg!L;su^iCCOu}z?gisN~&cBJlEMME-8@^hjbV<K6I5cqz{*|ihXOx
zm2+~GVllgE=@d^Gw4<c@ocaYD8avLkfl&zs*7aFfyWy(jvuTz+?d&=)`vISfDuK_%
zlq+AqY5%Ior|fxtfwmV>KwZ&EsDi;GjBsNd1D;w>4lbOo5y4AOe|;~hLNa^a5JLSN
z<x}ZxOo)9-KqK#kHxo3%H|if`aGW<lNAbbQ(&}7?YYLg|c6Rp#A|>Y*SfmS?&*yR8
zfU_*xw(AA)Q@l=8>+Y%zr2e1Wm*eL@Di(TjXE+@@+$fqRdh|$4IiYi<_k6W9IM?EU
zQH#e|Rq1P`HCe3z2I%s9q@0A=EM1=D*;=F2*{tr_8{ZuMe{M!t(TduXtDvaECGk16
zR<_aMmo%<LklkV@1{v1ybcS(u77Thu*aCmoQU1_(Ut#$;J{ur7Gnr_H6BS@YoYRPY
z+a<7^b}&C<wz#h2n&dwKxP8LA$1<A9nM#fkNSNPd!7~y`ST(i9g=BO7&|G49_uiFI
zmltsd5lET($AU(`HBYOYNM{QQ?o)prX*Nz^KhWCl6K!r$shPjR<H_W}<^n!2(<@ir
z2jtVAZn*!o=u%NzM~85Yue0c|#`YVQ7Mc8O!;KR5JvYadxr*4?(HEKbqw9kw16j3=
zdd>{~GO(XbJ0swQ8p<xZ;UPWSqYrkCg#m`7q2<`>Xn1KwU?0%x-P#E-h*)<4Ib$H&
z*rUgcfjk=X)#c;Q7Xd|Ct7RC%oiF9I+U4HnU;qf55D+KuvPYw|%o~(V`k2$jTh~po
z38xXDH+Mis2cn;+)u@Jmg4^U!ac3s@cr;KK{?_{(1Dt*7^Ks%(!?uE<We19W<Jl!5
zMc?VOkADx`@*<4*1sM5YIc0xvHgUs?dpoeWTuT5b36GETD_1p!_L^du3!pvY)Gl<6
zjU#kseE67tUqqeRXtO*K_t*1=WGliq-&fnMc7$DN^ubAr@Oo6`TD^WgR44V#COdHA
zs}OYP?!b%OZru#J!sa+6>0vIP9_y0)fVjdj6UTL*;}v)^W9WSl?&=)B<GMh|@0Xtz
znzA4(Dn_sgE;=A>V)Szez3J8gL;+Ukg9JHScgHs|A4ac;l9y?xK8`}B2VfpaK^$Yv
z=Bs#|6DeR;vEF!%#{1P)vEcwb&d%WQgoclo4XIkJNs5@MDc_orV-wem3xANQ183tN
zUhH%5)vNlKsrEk~TYPosc>y1VD(dkeCfh^wy}xx}s~d_buz3yM++{5Pk-fW5e;<G(
zR740`Yr|*T%o5kESCa34HV32+31NI1AJeY*Q)b-Xru$`VX?x@DJT;%+lm7J_C6Id2
z3h8ugi8NmD_^V>f8}=`vnK}LdBNU$_)q?5CZcA^G%nB0$ude8-9vd335&UbUqJ=j)
zqWJXm4(@!&u5u5J2#q)yle`BRn=r%<diOWiN1<`9{V8eJ`prA`-qmQq>p{)Uv+ciH
zg8u(uV*CHV1B^`Utp7c+{SV*)_Wvz-;QyuVO^SnSug!7M2Vj*s<>ILiCDKrh5A(=T
zptZu#B3%Pp0#J)24ihWx74HZZ?gs%KlHx^{64Y^8upS<7w~s5_AOBTNV)*`eUb>3R
zom#y%UGxtBXjy{yYT?pMRi0Q{O<)UhukGY;q?1>oS32O(xSFni`h2}3AOu}DpKMd%
zs8p+-sW+Kx+_dXpjmhbp(*ee4jn(L2VWz7!0;aj1sc%X1@Qn6mtteAcL)=|Pe1Aw$
zJt?VgqiQ*NMe1UP%>Rn2Q5ZYbcOAoGuq^;fIT}-T(R?y%t(ukY*la%jnUjL1ug*;Z
zzCe18F<tUky}lnlt|xeN`ZQrE>*^K0@gC4csN4=%-}6{<m?~jxcuGKz6Y0NeEA|+6
z_~RUH5i>KE^b#GMBXrdJP!%nahVA=4ID?B^&S{fNafJP>SN%#mtb@*mv!~kuxCMdu
zs)v0rHIYCy>m4Rh%ZGA0DPCZ<Ngx_YaP8Hz)~l5*OKXr+bM03l)!oge2dGbQ$K5!T
zKh41zEZSaPnDL7M?N#O^<>Y-W^d~87n4%<~d;1?}LOyi0fAU%-1WiZ#<=O7O4+W9g
zy3Lt#8_SotvBeGOZr|babHOOErNYb1`7Zj8cG~%T4@~L;n6yOA5uLgGnd7Qpe7=J}
zhO#C*W{)HJ_dgcTtAk*|<x~l*uJ27N#aaO(a|V2swE-TFz_kv21Reev(>rK?<Gj+8
z=erg2MMbz>oR8a+xMz`QN0i$w9OrKvF#hd<=jyX_=OtL%hE-Bd?z8h#eB^#c8v%P6
zEzB-%pU5j)Dva#{@@o3Hv&QzeQ2YvQV$xd@OwxS0eHD0RsocCMIKD7(B*c8&a#S&L
z>HDj0r|CtZmk<M|i4m_eDK+E^ORm}L3gyp`2=9VzW{#v`q<q?Bd04eBUtCBLvQ(&)
zge-9hv68eT(CMba5jc1#qO^2%^K!5Qq69`hp-~^-Q0sKipdIEwY?R5$w(-BTX?g=E
zcP!ZLcf)=73#$ZFDOBKaQ`LvgmiqMm_-MdX<Niv!g(lY(sF|QgU`q{IG@P3&>s3IQ
ze4!2?q+87}p0uQnHwZXWBVLJq<?At}HNiki&|50iHiMPOs2I$HTEMN)5QzU~)d?9Z
zMNTl+%3J}Z!qjZrvfGQpYvCb?u+dTNzN_llo@1)&EF0Kb456TA300LW3FTnkMtejo
zLZPd?ZNvpyTrtFYyyebnkL>*X;A(hA1f-OU!UB%YKS|UnfKCfr;I~WxBJ{5qQ|FFX
zdZ}=H)a%wM^78>XXShK9E?z14JgK9FhmEjfzDu|Anw67r3x{d3W;?&>JX$;KxdkMQ
zg41d({g4`60jSg$RFYWE6U)+GuJl6tpK9{YGRRf0+LilbhwZ4rE*7~VG`5De*rHc9
z9MpV*77p#lrgBIv%jl9y1-4UUu=4=Yd((XOek|y!Iz<VQ%6K$4r{t$?ZYN~^l1d@u
zA92yG(Nn<#dwu4`D~Y9uD4r|7T5kRIZ^L=%tuDaxa8C~if7mxX4?G#A*OZtr^_C^;
z2Ch~+7fUA@ARa#$*<CZ!=I{24@%&kZjS8I-MGUU_@;}OKU%Tg$myl&B9?h@1D};%j
z-R0Zb?WqJMrt(EM<d6nEGo}Ap?jA)#DB<$cAxEzU14nSNle~XTZI}k14k3CRAq$A@
zkk2i{y<Dy;DU#Dsk8=rNs{yH@N^$WP`=f@9fvnb;@fG}Xj>F6t{5TH8Kb%fP;ZATh
zF6iP6X`O42Mas<;NFQ}(z<fpS<(M&L4Tl6flr4TEJ)5qCa)H8|S3VL?r$P@uR&T1_
z#n@3qeJE2Ipho)b7A`t(;<c*mnd`=PBT#3QZje-qJcif7np}Z1x@n@E_cW}*SbG6a
zTyUnKAwtp@K7=A(ebfjWEd^}*&ZQ&L_J&GV&>7kX9b$=xxBfB>ZkOQw8C)UWh8xy=
z4<^Ffq}`ON_W>+{Ib9%~C)<<(a!gwNIiX*1l1$5wF9P=-Gg<(ZLyT}ciXsfOviC~}
zaPtx}c?~krKi~~*mrk<Iu9nKLpnF9bB6;##Zx(nO8MS+SnHIZmPQAm&q=3O9;egYr
z=65#1H$4U8FM(#fa`^L2U{1zLlyh&DF%<SeadNjkl*ee&Px!vPDR%X%{3HTe7o*7b
zUrRE@+$xWGYnLH~qtZrbzV3O!F=+4}w_Q-^4b7Nwzcg|A^~oWE&S{Q?t7@mL;eTG0
z0qHJ6=VtuXSu~m^wtcP4FLuNN7t9SXjV`IsWNhT1wv`w>dde#&<;X(-HAl`k3XN;W
zr4kyaS9;@sj`GD9bm-%#wSVCdvV|Ry6)_ZoWuz04I1p#3hqwa<Q<_2=zY)$!X6G0-
z=&EQjKK|9)GhuuZRe7IAsIE&IeVke%q8+ecOK41|+mq65h^l8)m1{T{&8`R+t@oXi
z?6uS=)lU4_+bAX2fnmz9sJbU7u((?}DXApaaK~;ZW@;QuU3Y;M79<*_*?6_qHN&B_
zjjOM@b4%=^fXI-~&KN8g?1VciTZ{<FSSECRZUdR1Px>RIX1(mYm@fvau$@@*oqZH7
z)e;w@ids^0TNuwiN~yUxF=T0VfoFCI$PnLPydVE<Lx)VpCoD!hL@kv`cq9{AkLvpr
z%9G$uLO1L;Q|3n!TN{^~nT~NZ+kT#K&vsIoB*Px<YRkJ_PQS=F9qo_;UBU@YPKiPZ
zdpu=|lCHi!Ti7j+WL7^g4b+K@&+}vq?-bGIh}(}vC4&X<_%7sOpuyXCGuZ<LV=X}L
zzvFX*+mHv$(xnTcYj}rWqwfpNroP&lLH>5B9EPwCk@|NS<|63-{wwQ!-WwzxikzLV
z-H<IW5nGYzl6yAg5hL=rm+21CM&fkfOJLCN-83zO>XX9po&g1Z4aRtuan&yF3KG&L
zVjDBaSmQ{R6;o7ils|Tswa^ssTc%$Yz7|IfB~5RJ=s}I5m+W-3LE#{-Or|7mgf3ND
zJ|Yzufe)(Ie-3xV1cX`Jw}c2`3SH^YfO%TkW!0+PQOBsaf9_5ThcxHBvNPCX`b5#`
z_K3wp@zY!N@%{x&K%cazfEvKM=lLyp{Gr^j&W~Fu71T0o!0QF{?JUib%K}-Ihrj?f
zm-*6Ojve~mz1huMazxA!(g~E!vyuMLK#4WkiG$mIF|lN8-wSpK@o5Fx!2>NP8SK|h
z_ORQ~2#sC8tQsTFjj8<u^?hvi3h30#$ho)$k@Zww!r7t0d$a7QQhnS(z0S0!Z^xar
z?$DOC5#-*^+z3wJj@by-;m;K403W=yowAMUAdLll?sw6n660h(!@ZsM7ZojkJqe5e
zrn~9Lf><UwSM=1(dg-)gP^y7Js_gyA{d%MIy%J1D*|FQkGx_gM0A^tv?76b<m>5)s
zeT+g>td;}T^WD_!Q8HtY?wp_L#-nbU2cND7Z&>-m*c)WC3vIM8WX7PO^^y*r9vt1@
zrp&+$?!rT*mR#WNZ9gB>bC@T8x;1}1ja%s*T^t$wjd}Nis)@8#Zpy2!;Z)-YOv=l(
z8VyV0qt5w-*nk*lB-`Dje{LC*s~$RQoAa-QDMe^zx(BFPWY7MK1p?W4@_s)pX2e#i
zO|l@a&Yc;3Qq<6@c|mPb(FD1FE}F@gVSd!4lpk#*W<zX%BnJy^kxKOfQO~QRe1fQP
zniTLC3%2JEt;H3H8>2W&PC8#Cd@yJj8+nV~(8P)?!iz3&3EgF7ua+vWn|UI9S@^9t
z({KEUFbrXFcr*^yaq}~Nkzoj;#{=AVd?{{vI*dJ~D+Z?4RKGob^nB5n*$@QtN#tMp
zoI^#uTKllKhn*{QA|P0ck2-&{ntxV1QFr=Z3i`t_;=pX@t~dVDOTTmX<xLxBHdKXU
zx>KdI<|ke+R{v&#3z3)_MV5Nd$=V<Rz251O9}{>|sOIwG3-APBu_nc_v)I^Fvki+F
z$>7f4{F&9@+e7#0l!tt^RXkt@81<~#>|``z`C5hItwgj%oc?=7US}bBhVJN~Ik1Il
zUQ41X{m|ydGBwN6d2aoortwzc{wBl9s7g4<O>Ows?|eCJ^XM>a1_p_JYD1W!^AxG0
zBZGZc_OTMPKYY4fa-uafw|mHyK6$>|KBk%PdXc9=m+o>2w{Lq17W9zLglgG14@6p<
z2;Y6ZZeqRezbw&Mx6iaN7_G}CD?4TP(=n&_t!>dsouOjF(FS0RUGC@jh@W!EVqH_Y
zWGZLyI>xR6(Tspz_)~w$gVj6Qa;sVUjeh|Ny;LwKIyT%4-CfY#T>F5swln<S!RSA6
z=RX*7Mwb7^khA{}#0K{N6|rIJ|6s^>i~^L`<~n_`)QUi?DQHO<i$*Pv`AXDwXj_FE
zL6-sK;W9tD=;Oa~5jP!dt)xV>Vp*b+iaW!}>FLOd?(@!ZAab(Y$Nrc0ChnY(<HJ1?
zQxEA?&XV-q<DHpbMRG+!i7gtBnhxG-idw!~exXz{o2dEwm)k2FBJephu}~h#Pcn*`
z|4%ad@#xBKqs#b@hK@({SL-XpWtxuNU6FrMEb-!z)!4I4u#B0RtjOIzj5Hi{)VI<6
zn2>yRz#t8-qPC0Tmj*6~3x``0f<~tj2-01pBV^rV!f#=P&_#wiNMEl&31EO{^lbaY
z`usO+$8%99A|G#89@{J4vVW6}RsYA{^F2f^?QLzyA8FCwnb}bxAN?CEbDD=;cAb{P
z>z+r}<?w9N9_U(ucHZJ7p~It9#^xt~czvuK66_vCx_8w1+mQj1brPI;f9hrH`wd*`
z^fvhNZ%Yr?i~i+=)GjOT9@<Z1cG@JWmoDr0_dlli`-f^9R`E9Mv*y#D^z-^!1$1h%
zH4jU#xrecBX(73qagGnE;QBu%i{l$gx%PLvARqZVll~=3!8}a;w^6Ey@GS#ZE^aO#
zhjRvr319oG53pMM%{9F_>Umm1*{nEDvW$r->(E;<jZ@J1MMgZ}^~7w~ncd=B{oZ!d
zWe<@FS`Js#+H8+<DeG@37MJ_#>%Q=JMZX(Iy;7Z&?b=DlKU?(|xYa(!-7Pw!c>q}w
zIHpjo0{(G~;By*P2@~&KzB_i+T+d;k$pL|BMUpb~%opMH_G8TL@}rSPxgvJ|WKTm7
zc<};!nDdm(A7a*7LzRR~d1AFe!5%ZtQrli$>8Y#NwVen@l@c3ofCX+cOC&uV5@0c@
zl=K;W2a&%PmNKN5RuQ?~-;c`1G8(Rbs@kv3{-~wzMw?9?+D)W30bI$SGy6e1Skm8%
z|Ne=rvVPh#kfqrt65jD$!2l@731ob7K4c__Lb3S|u53_22~p#D@tFRe!HIABt5=fm
z^&vAY6&-wRW*)f9Et$?SqhnG-ts%Y31&R4ast8-Pres`U?v;?U7g7xF-?ai_7wg3s
z29V#B@1~ra($(aVwLwX?y6j&2lR)@bE!<p?SEKCvMeeCv3O32-_5)muCCA+g!3-nG
zIV_^;5>`{SbXMSD<IzrDt7XrqPy~s_=_QE9)5|pm##!4c<1tKG12OfBEf}(p^0Hoc
z$#Y?dN5&Y-GQXG|mGdD({>ZMd1Y(mYL^NVW3OVA+h!>aImF+7_^OwMLsW^*s_tln#
zz$}J&JX?1}w703T9a8V+iJ9{3+CxM*9VW%uI2^t+?W6k$C@pBZefv6H+m#9PL&-Sj
z_J!uo+bmQj{P;T%t9nPx6q#Fjm#Vjv*W1g)4E`E+8q~K~mls+$Kg;=XnnJs6uoAGf
z;Egh#)K`1*`AcqS36PidqUbe2n4Cuh`CL_um`s}GVtN!}3ZgNgN}_%+TuW#!l{FgU
zjSrgzylY1yDOn(d{B{HdiN#bvyI^Q)J`e(~TwB5|n*?$cB=+Eq0mfnXS|VW9-qtA0
zbWa`wmdJwir07xRSfvEuUKsBqHF`6k4Jjw))|IYdjgk71W<wT#dTay=?;NuMfiLPA
z`RdkKWfgFBmA98;#p~`M8Cf>i*})sr8m@ILI81t%jyuomkdT0mPf4$*w!oGS-5{LU
z&MRTe*K+AX%evS*F&&Kok>uCbaS41hZ!Y?B0i9)07m3HYtIG810HGx140=GyD|3Oq
z)IucWfO`oSK45oxy<V=AOhjO8)6q?9sbLJ$KoeRGekL52lE+lc51nR2sMhpwxF@Me
zj77kzDe|!V@dCGd)vu}NQ#vO!`+0~XKC&&R{!eub!4yBN?^p3(R9ydv@lQpeB|brh
zQF9?lp!7ug@Qg;ko>2P3=760xSzoSRZ)YDkOc1jLrR7mwQte(aoR!=x^e?yT3P|af
zP|{=b71dsqaVkkB=qzuoxI$7i_j*-TLO1sNQX;AJ_Q-blc@B_paxQbUaeXU-hn~vv
zVPe2R9EkcloE*T}DwvC}VPpIm(kiyh{zu4)0QBYC8A=_SqTlcDp!1?ALunSL4>klD
zG+2dLiFD%!Dj;H+UZl7qtG8Kw0iMyK-L$SDW64S{3QkJXdgI3orChCcvWH2_Rt2-{
zX6OJxM4)<dxNb7D1Fg4qfB9WG-8a?|f<)?xsB0tyeM(kK;@H=B_YHyVPPoJofpHNh
z25p`7QB%xGLVMGvTo;Gg>?<>6OTh5tt^wan!7$j<$;Pd_lvbQ^%z0`03D?}LH9~Hn
zjk`n0{)!+&Fx2|1!r=nFeIeC}yf}#$!IacZabZ~L@#qbi{#1CgW^IfWd!qP*`DBCa
zrkz{y&g;MCQMr7}ob1Z&5J%Nbx#uM~71adV;{D)$xyZ>NrU)bgRarugeW(x`2<$HQ
z_;T^V{<$HyhY;draNgi5xbBd>r~7_*RKHBqoa^EX-vnYxP;^Lf*KC`XJfcTG1-Q>a
z#<bI~AICKWv&3JSwd5&%6e9*@2_G6ZZhju?(TDp$Zb_AZ-4CX7`pn``2nPj)LfP;8
z%)hs0GMtPv+BGq_TgOG$liof$CU=VX7)Y<q+_3EUlK=jBS*;_lr~TZ$*%2>q+E9u9
z`nzKChQcJchZyf&;;^O-fQeqL-4vF)?K|=p6%@Rn$esL?w`v7GB+Ps)rTfi}#r0PF
zz6UE>4#UO>3XC)VTHj@DQlOH%2_{EiOHgd}tDe@6B}vS=_P8`->B&V~za{`g`ZR>Q
zq1Ob<2{BEyfk1Zq-~MrVsscNt5s!>qcI3VyF5~$q@>pa(P#A*R6QKsNngMOv6p^a4
z6Xyg3<&N<C$W2?JZ*Y|Nn}-E$)Lp;K`M5e3J0~KxY<^gy{1XzH2c{6Br6cT)z8U6)
z(Vys17Ut}t!~|cY^kDJA5j!6E^2$<JM&+1=la9Ak4CFibc^ix=DkCnd>z~_`tqtG3
zS?e^r8Ki&xHaTcFLwUZs+_}6riTF_X;OY9DOI+2=@ap|<9;VjW`b~NTb7_r5ml1UF
z9%SO%Z6^uAFB1H2d^1b;Y8XWWy`QhlsLV+57#7&j1sX!e{_bhDRXEe__MhaWAv}bW
zPTijqLN(-6j2G$JG8@v7XrXQTC5pRp(afa`arjU}p3pT0)*}_!(VTirGRw6b`#oc0
zZ6CiY4;`%9(j=jo5e>?miC2V<4By2Wby|rQcGoBX)j}tw`vMe@hfJAB1;R6m4j$Cx
zfhHbkQ)iQ4!eWTEQ^sZ<sOuw8nic+s6phU4-k9XjnMJeo1rx17+1NN8-B~kTI%7t-
z=Mb-YxVeckUl}X5DGhC<i2o4K<e^)|37vF0s`1v8JF>z-k7@)%l05znw-|IBvIoFo
zK+6u3$^&H^31h1B8HV2)#V_MeU_kS#rYF&XYnvP`oWg}2nCu51o5!%BoLY#$!M=sO
zr?^M^87*3yRDy);^Nj2bC-C!+57gyew4L)v+!3NqS&ACC?hID@FMITk)?(V8HVA|d
zmn<ZPYU~Uyyx`cfnY=0bGSy%w26`utfIYn>?7~?2Hw3s*!z<5jxvyfi=CF+zF6Rkb
zt1fNfB2mUG=|`u|(Kk?=8X{+kL^<+U@3*(f=KFbryD>E5x{SF)yQs1MsRTI%zZl0o
z?Y82^an_XYY#u+>?5f#YHL)oUUZ_$Cz|}L)bx%pcN%q~+lHm?$2y-yD-89jLR+=uA
zrN`ZjB4`DMWMa$E7<E$Ce(>ePP~8=2x}<GRVZ!G{FbZ87gPZb)5qs=%9~dZX8AXWQ
zG8+ck;7+tsJGg=%l+-3n-9mzpz$ASNCWx$Bd;z~t`3RQ6-b<Ad*I(^n!l0};uU}OX
zK{oo5V>|2*GPU{B0=OI>_FMha4LrmVm%+N5ds=R3OT7@8JXxCpl4zR8m~&xRV}MT)
z?2>H`iXBNDY+Z>LW2iUTooHSzVl+dxpZ#J8M26<3mUkz|Ybzp;of6qK2y_L)qNlV^
z{|MAg`M~ptWRe-SC<^R_ZD}&-m75{QNqDv>H7g5UL}n6xUFN%gYKL$G`3%Hb1<g@J
z#@`^DKv0UY|KgSNK?oeY`hx%5=b3AFB|0h#G>XLa#&JM~yHf}Ai~A0heiCJc{6I(u
zOtTdM=L$aq<DeFPbQNeiU<LKeej0?tk34-!JqFnjEoW0_7lK^rRUo!u1H+#-S`+K2
z(ha%;Jl%wvHFjp;6Mh!pS7)^hPBcZ2UHYXn0ogqBvHAuSiIC;`{rAMCf@9qeI!zks
zgUcCl`D!xr9_lORv&e}Bz);k+SzU)X*;6@MxBVHlPaf3*y3hfEzp_zA6GX@;^nCzM
z$VjSEd;-q*FCmXX)i~hyem(F6%Q=k_CA%$_jkvmg4=zJM5{{atv(0>U(v2%N<8L>i
zgPRU~B!Thui(Uv>Fi;Q#a=YW5ko5}uKT5sr-1?C7PWwdcf9I<AvEl<ep}0-Ahoz)W
zR$a;5Ogl3kib^kz*qO@CC<44P4C^wUC|38oPK+>*J?3tTCi?y^z94CsiE8u62#Vgg
z_3v8zjgz(DQc~C9LgqyDnj>+beca`O1w`LH{C4qn+yT_>ps%2kDG{6iY7_7zgJCkK
z3%UDOJhTh?0J;bo@NV#+gP5EzUKw;M0$8HEftDAK1qNtnH(c13g><q<v5a+}4Pg(X
zf+vD!K~j?NGzSBptlnFBAO>BT@(7iNyViu*l=s#-ZH$73EK7)PaDkdXR||d5ehV=J
zCO9DY;-?V@_=j<vIPL=bqB87jP1}-?aT#=fx-O5mkAzfoT|yQDf=?WD$rGOx1*}4C
zToE;t-I?AG!tFU_CVEz74&Dlsj8}GM(OM6xt8VY|oflTCD^x&`r6whiXM`}gW*~nj
z6h_mptCwyo4~lyY?=zgT7nxv%l2-=wp30?NW@hmFE83c=!J#)sY`xbgqfprIP8`nV
z?9TK6Jr9ii`yWE{e?{T{gl0C5|6geSA1F2K|4T}ZrtQWsn)gagYIh+jr8GO61F0VY
z?r$2c-01UC_d005wIY>B)d{$<r8Tp+#g&7S2i~X5w)l-D5^H%-F?~Xp<bgED&uQ1`
z8_#$}5r>ccZ=H>-10(0VPpF0-<nNWe=)d;%4$&2~=wvzFG`D?2Q(>NAaq$TX5)SsR
z@lDSqKiDVI+G#nW$mH5R1NV6AX*O%N4cgn=65FV4esT@;;Z_!@<i?$Ftqa-u2`Sy|
z_@B^B#jM=sVCnGwu)cC2yJVtTb^D6c25U9=f%6?FCIjC>c;QVe4DW#LKntyPPy24M
zlojreJ>ahL%-zP$64}o|T2Z~ivYQjfR#McbtG4_E@;Y%&r<?QjxEDj-PA*SBjH%q8
z^Lj@NojJ%!hkD3JH_Aa(+I;@yHvwuavZH`F+|wOZ!z4_yuY-Yzt?K{UUVNFpyU(jE
zvwT^uu4H+q_-9p0vOE!5<R9BEQA<a=@s+x6(E=aDv`C4)=bD2$-I$#woYCCYCX1kK
z`IHf__B<orlYI(nqokYN%B*t4^GmE`dDGn0vn!Sr!rnlP$T8*m^FguY_0C|rRma*I
zmdtD$JkBQDWpzv3ufX6?K!U@&9-k|RDbvyAGzZNc;d*<Ah3mkQO~Z!L0J9ZzthfbU
z5?!S7SMlX2L3tiNL^+}o>AK1m`ip;qejJ22uZ!Wn1j^G4UwHdDMO&-&+rgg};l5Jx
z{{BzxHU53*BLby?z2+<Nj<i#%UF+(B@*%z-?eX6`DD!3}FQR^Fg_g#(tBl=br3gn;
zEqFglsd^hnJIv5TQEP1rx?m~{(gWLr>jTI7GG5pm*%;PX7NWK??r?D^KOR{)nWca*
zBJ(kW_>jM;B>~&HjlmJ{>m}NR$HMdi!R_05>c{9)pTMlj1%>=!>(CAceov>z*XW4i
z47kz%{2Ok8IRz=>QWi&zQpoZo{)%*`@hg_;MY#D7kVYCghsp+xi-s86A~R!_2h`IB
zk%?t0PD7u6V$b#o2rn%GFfs^KJK*OENLE-ROtPfYq<;-drb8V23++H|>>YxYW!+1V
z{qoHfC)KEqf42);6bC;v=DRTCoNwu{kxx*y6>HLRF{>J~Zc_K-T2V&$wq`>&>P$s@
zi($qgGlVirY(RWxZQM3)eLGi7TF9gb5WZkp&N)ZF38bdtBlwrBaUKDZ8KSm$6lb^W
z4!Wh40X4~#UE=GKK~7#qtk>6J#hdByB94>Rl!Vr60~4!Ji?}u6dEBB9)KU(o2I1`S
zc+^c;b8Z6Gp1Zm{m5-Il-3+-(-6CR5ly-RpI0GaTkDm{I0wk>v`}@DT25>@mG7YRD
z2^|nYP|NF9K)k2iLxDJ_6|9jNC6A&#54#{($==to_omVz<GYN6H7c{tuh@=vj`J*6
z&f7ugd{pVIh%!#Uru?qdo|5Fud?hQvmjMN^yrvw!xk~Z_Q+JfTd{Pd9V*oyQQamky
z@Y;&es*U#_{|ewPT&sAvcl*wXgN{CBv15Yt<DwfGji#GIOV<ibSZh^hZ6yIUs`Lu1
zY<A2!?--6qP}!uQDK}T15-v`Q$i~S?efRqih#L<T**fO>)Sc?wV7QXQhfB8sq~Z>T
zGh!GWAPq)Sbsl2O&|Qhm3LMKGck7hU<alYLH~`Jz{t(_^QjoamOKF1xe`6eyL*fO{
z0il{m^|=QVm`rF}kYvX_@|J2OFIAdvLE@Y!nz-5koEojg2^JQ86XP&$ftG!VZ<Ghj
zi9Gv(5pF*@+ZsdNqv+iswOVQ~CQso2AyJIJ?+88Bt{fc^O0bK@r*DxZQsie)fmo5j
zLcMZtnEUASMJ2X=d7gsE9abIl%&+ac3<}7#%%PhM#A<~hh-ka1vp@85^k5kn;W_2X
zvbNMkES-}87EDwJ8l&dY8jqc9Rkr0|DfF8g=v8v}pFf^KbP;zD6b(zRY19i(aNVt)
zAweY1((o@Z%0K~aLz+5R>@_5v?qqZ7+WnoAh$?kfSWH=n8$Zmg+%Uh+A+eDb7-&`h
zUB~d+f;0%8B{+YWVx{u>WxKs>3<*_8aV4S&IIb`)zN|_vHecMxEPwM<vkqIvn^hop
zE@lbh7{lgp-;l^8gHNl*y9Uit+=;};t(h6npZEgOv0&76@*#xa>9@DIUO#WHvsWhI
zV|V69E#F5!FK++FH}OIm_&62bs7A$YVYeWb+|XTtnZB=WfEG-pZ&LB%OuweyOgnpU
zOROy=OW(*1dTu-9!z=j)v2B0{#yN8L4k`>F(%kuK0lLm<g)IZ^G}F%)plbq`<vKjN
zr-lS-+0uO;kQ{WlP;Dz?dKc#im@B%!H$6Y6viyUQH}w?shv3WE-6NQ1E!SFHo5sel
z;7EAG-?f;22qtqMw9uU?380`>p)m4*r8fbIq5@|lG2R$yF<F36+ZEa^Da|Dlm~FOK
zAf<9Q=DE?VEGiKf+<HXKx}Kj(3@*tsb`5HudCqK@3J(;>7y}GJz1vqaQz0CRGkbe5
zMyzNCq#O`3%`r+Ug+%kdH?(MvxOUXKGClWqm%H@KfZ5Rvkm?IlGJMbRcyT#XVTve5
z>~CeV9;%Lc#=zK}1;=Q|gPg7>7uqphc<QCf(vP-n8Qq^1ugZ2G3F<-1^2Zx9xr#lv
zpJ@XX9vMBqTFeAYVOQ^Ysw*<8Mw$n;7oL5zTfIiS=}HqYGvv|26$p+?8Hl9cki;Yp
zxJ?STVt9^n1^c(Q5o<yyZBf+;YAO$kAvDWuo=5gmw$8Q^;TOarp)!dNlTSeomUK%N
zceYp*Xdi$0jSgfE>ZCeSfX$d>iITAHnt76Y;DxjA+VMDRwbHx^KI2<A+#@8p^qGc%
zlR?43BHsa2E1KqW@kV5g`bB3WuyO0v5E!cS=HbQe`L*OM{O=3@GCWrwDUKbtYJS7z
zm#nk!WGO@hBQtw+uCU!$U+C>xuYx_;?fV7#$aJ$ia*XtZgq3ry-;RBE;-xk-xs2%I
z(Ulp6-%+qE1O{(Mi+f_O|M>)_a!>CxIJ=uU{L#F<2ezntPfQD4&^5gX2%M^d!MXh4
za4CHd69sbqD(d`kF!S{Ih~xg`jK=#j_fcSm%^KV0$-*IoovS=L1FszD(KMd4h^E!_
z9zE0olK;lmfEpn|RmKqg0;lx7?sT3!|3lz8(Ai>8E;}W4n)rS^rdg(VSr=SbnP^zp
zp={w89p*v1PD_UJHEFVqFE|*Dd*S8Q3;_RzW-D|m(YHVXshY0gH5OQ#h71dqLp^ka
z>4l6ySnE|pPP99@qh(IY(}8XJ!3pU_uSbpCUJvD@%=%1x&6S_aoT9jpc)Zb#LBu+1
zq}W5`s&@rU$3TV}O}Msro;YkL6*AK&?bC!|HqTSm`-KP|E->6N!S%`g*k3lys-v4L
z%P*+Q8Ky~S)YMLNbOaRQn|l)RNyX}D2g*$fT!%59HF#ri+`5JpPs*^;5IGRM_qytq
zmGtJr)hz%f7z}%$!J7g527_7lIe*EcPE+tOd&`!+TRD+$O}HOG!F_nPZ73sa4J=F!
zXQ|s>%5XQAnk`i(THx<irt&ODZ5<@JkBB-TILG}|aXyZQQqX`#ANU8xs=@>FX4kr*
zUD)O5VtJ7p+03$i^(O9k_AQLPj23rIzmGs31<_z|H4}9ezEmy2Ci#|!b>5;gzR4WQ
z)O%wY)YL__x64XN9T{9pPo@Cu0*`JD!fpzC_Ht<U@=X19cVAL7=Ie6#X)BE5ou15d
zM7kG*QaG6avay4u)n_^_FW%fjA!SFBBe%Z<Y!7&A|ELHY(^o1Bs51~dmHbf=i*X5N
zl^yh?uoOEdIc5@OH8nzJ6<2MsRLmWe_ev9eq}lwB(^X!CUXQ|%PMb!}y4!w3O^WIx
z1g_Bo6FKlO)RqMMv27JGzclT+#WoDTvE{7$tO;(1p$Rs5IxImmp$6T19|SSGDsREM
z%e-cuY}yjP$*<E-dWRqR8Dt;Bb|lt#=p>sf+`+-yzF9g&?RLbDoeRqLqM`0Pz|#KZ
z!P*{uO{P;E7KyV%)KCs_FA?^QlNpd^NwsuxLx!5|y~c3pyvEoH@k>tpRt%J}_r!Oy
zH_t08D<qfEpnDSpY1Ax^l=Cs<&E`)ev2DC8$?Og&`QwdSZcu!@<o9Y!zpNbarp|A3
z5}JKcTtb@Xs^aTrN`g@Kt}(?48Oc*ZQ%u!{ZJ;HHP_0Hh#5U^=bz-L(Y(@&jX@33N
zQ5H5m^KiFc_|d>Hdu&W)8V=@~a=oRUs3SdTyLDi2+mp;}M(WRUN?fa3@$AxA5WfZM
z2MToi-5Lx3I+4-eF2gSNZ4^aw+WAOF7a4#aO>yBv!%1sLhOkG3h)tMQf@sjk@jzlX
zzz2hIaf#(%4sqWM0Jz`&=5ieRnv<HU_hkI#A-rSs(v9nY{`Zc+$zwysrcRu#36^w|
z%moDgKrjlE;~H^Cd+&M`jDh|7@zo5p1AxmM0rz|&ayfBJxf23LOO(#_-Ip%P6zr>c
znE3UFh3?CB8{)6~M!8?sgW!smsM&Vj_4ZqaH`|L}iiF}<5BGOa%dvmTjM>bDQ=a3$
zoL?(61ZOi*<mw+<N430k#KA$}+K!)QOiYocIkEk<{7NGBA^z{lQtNJ=Xp&@2?_=_z
zPEe4=+Z&8Y^eQi#d6}v&n^hGqdF?XFOrwMSRr7x-t*i3)pBa)zAM$J@K9*UuyPk9q
zAXXI6UYu!xl7))2ZysCrQPB+#Jf>nw=oM#suw7{YprEyVyMSOr{B<`&Le|av_ZtSb
zIA{!SXZt(TmwUQN?ScLOA&LGU<_jz1f4^(x_#c=r9RDlkOOeL5<3=-*_lmCHm|(x9
zGbF$t^fZznbNRG2VbsRK9=|X;cu$^exnw`+;5GlLu4X!C{=2T@Mf%Lhle7R!lheP~
z;P$d*oAyezpPUTV=i>YE6YEz-gYHc0SK`0#GtaxrGpn!ymB-Z;Udq3<?c7Xs_W7Xl
z3h_&y>hoQ?m0w^9y{+-Z=IUaYbs9M&9f#HDBONR}UvDGx)3GK>hsNf^c4cO?jP;z^
zB&y=}O@uY}%rh|QbwAVT+vz&YonX@+CC$Iy{nf~%drwikM)7rmHSy!X+oTiBE5ULk
ziLAwEI0~xkZ?#p!Cek+LKwp<GMxB<UUM!uzHmlV8GRP#=@@uI&dqXJDh}kmiTn-W)
zhaLZ%eVnlMfzcRGSMl~n;!d?nt=+;e<D7Sx5V|f2(2utwj=j6I5UrQ%+6hk(Cyf=K
zHfe*bGVh1VUaw7QFVKCpy}hp@cWFb4Cu^MqJ$tP`UjAbRVF}@fsei*?PNIiw`94#*
zelWO2>x5-32%{)bH)kU^qn#SXpqdZSMpY_rwCkvC&?XI`@o;Q87janV<#9QuX>Hhy
z3$I+)zgWlVVp2gL1KRXLFs!=V!4N{2rZL|=l9?9mG2;iDP-`p&TGuv|IWJyyVPBR7
zg&=`3(ays4X|Zdl0LZBw;k%5CWn?Ze=9-oEcXM=JZ3CY;bzBAjVS2!AHD`y|$6MY%
zd9|EYyuSk~;JW2}?TszSfKP_%02N}>flQr@n2Ph<lMdfEdGO6ei5QbuUaD|{e|*o+
zyUV}_$F4VxvIXRnUs#^>(_x>kiu<fjv@vnHV>2N7h5g9Z9xZ+M{_XNVhh#PDLW(a4
zxW9Ovgvf)?z0v`wr?}6OINH(NKt|lw0~yImh`)77M_l5dg_*dZ0>hh8k}3O7t5<fm
ze}N-;utS^S03kFG$~dN*L>q2Nae%rNkN&*?4wlwS=SL(qNt`T|`h2_0{`*Q|{u~d_
zDN!G3QU;U%10&fb!Oe1=zCU&}$fK5eF=*D}S0?1`6)(qwv~&rvM-UP_S^z@1@!jqD
zGyr5rI7lejZEPVZrUQ>VJ%RKvGZ{*T&c*-8*hqt#l;u4P?d5CHZ$e8NE?H?Z5l{P^
zd}E;?ZcLJsatIK-sT$n=jcASrF%bh{Wa0QKp;tijfs5`&7nF}QuTOQ-#yV>cmyMk3
zt467gEuxuYgWRsK!Y&BeHNBV|QSAImels&nwj!$ZZl5*bR6s{;O~ZkV2C`CDv5`74
zdMSs|-4!r}%S#Zq%aL#~MCBSimzYW!nmxU`_AB|?yu_CH>k>+{TUpqT4UCjwN;WSj
zu1-;)oyL%g2LQpFe5++6qXrZkOJ!(bu4x67)DS&2PC$VZ(XUOm7|W1IW*vth=`~mf
z|LDjF(#tX&`PFxZmv8J^Mo<W*ZxQap`T%qKy^7+FNgdp|UV197|NO<wOoFL}p$^Uk
zaq3@nyt96x@%^SR4lneEujPM+*Z}y2@*(B)Pe~p5rs~t8k)|7@kQ8w2*_qdOipLEx
zPmCNxLQ$F09v~tNp}2S7SPV@c-+v^C;{)W9v3S!CV7Tl0QEuPN(hokvX<MGL*=lu~
zbXwemdhv;LQizS2m4h64Az|Y*@I2NZ4~iSi`;4%91>!u<IN_&TwjOtS7+oP{({HC8
z+I>ND*3_s42UljgZjpFRVk5b8x-uI$>=JgeGkek|zZNNESJg)!3=b+5<R{VT1heH8
zAYF^4LQ^wwoSv((=9aiYQGoE~ma3+UczU`$3}cmic}4|A8fv)mN4O61(rEO|cA?OH
z%?Zu+9l=$hcK0%~=N0oCBSm(MHUg63m+*+qV33gl1=SgW$YkL?eJvF?69{z7-2BUe
zcG>-2N0GjDn^EGDJc!N9y+h`qPdv7pI*@$k-U`m&i}7jLnX~~MWJ@Axr>Q|7!-ET)
zxN2L9JO_rJa`%A4G+s$IoZw@__P|#G=r*ZFCPJAA>Zy3chHe{goSOAdJ@awAIDc4W
zAu3Fd>W<BjsXW_dKW<sDQ;OX}`2<S3%-`Aw1uL^<lsPJ5h^}>yYi3g{!lVhK9-&3*
z9L1$D7;lPp_z^{dp4$R>#s{5QfD3&hsTtc}$>GEaSgAk@ogVkBylff4zx&f<F@}r!
zz+fdsuKjSiZ^U}}y&)rf3<l<8_|awO1t>}QeosTEp%P3%%b9RamT_^1wM{0`vTMFE
zO!CM7SbbT0Sf1Y*{MQ0umBiajoAR)D;b~ME>C@7C14AEIA25@I`CR#bv;T`97l3af
zQItQ6ZIjpANn2<FK_#OoPb_r-w2G|*LP0&Vjd=z>)rG`~<HzzJ*a7N=?uP$dJ6P(+
zAN2UDP2ej87Ou(y^o>twTC3E)9A9T}U;q<nuBMKi2>0Z;doE@f$d@$gYy<!NaRsA5
z!D4vg-R&HOG>>LH%^6Aw584neprB18Xfnv*`=liJfG{Z<U80#{<J{Q~@g}Vj$_*O)
zAtV=LzfLKuFY^Q<R9J;!j^K{j|6obQVb~PX%7WDzjkz)6l7d-4D-7?uS4A9#aL@LL
zBNr?+n@Hv=5g(~TvrC~JFRQ-;kF-HDk3Wd{^C9BWM7}~j0TqIJGK8>OIGV_ShL+`8
z@*q`m9HM0Rt?5F<A7YWe{vvj^zcJv2n&hiyUHlsP>wYp<KF3>T5)+3CT!*gIc%45L
z;cNnNvr3zZQKxGlYXDD^7T|lU-Y-ZcfEoiaOQA^(1k#w;N0%}-A>AX^X9f8QineSa
z??BBoQP>WIoHR3<5hM_u!gWf>z(-P=;Yse`On@o?8ZL4?mqe9h%3%w|!eW*b`j)_!
zmjL$Yc?8hv3D5!?Bc<ZMga<{H_bM@lGw@jy(a&(&c4he&ai9*OSXFgbH;!$LW<nCH
z+>TOWoGdqXn<hT?`Wptz3E+t#+yAS8Xav<B<qSz=gBkkIVBRi9ICS){RD?^ZBvRvT
z{+G65ssq*fnqD-u_EPGV>Ru6(Ca{o7g1>o=Ntl6C4())i8->XoSQTZaCwsdN4Iyb^
zk%(E#)jUrc>tak|KUP_0^4Pm?0DGG+BQ-5nlrE3o>;+a@%uDzA6PvPidk3ZT7RTtc
zd>9;pQL%5}^&Wf3h<rtfu59MP3_A3MoT)+T38&+lD)y*6Oo+|ON%X+}FiP_jIO9b|
z`=>8}Fe9kZ0TV~g21F#hU@wCuSF7SB%!N88i~{*{f>}^c3i@#a@R8DizVUuPq+3$P
zyHIDy<a2uG4NABfc^_r}2Mb`nCFmbG6A*mE6qFmVpU_|~HG3WrY|+n*^?~dVX(`ra
zYcK#H^5!=Qry5L&Dy^<Y;0~|LfEZwD59Ms>Tu^Q4R(Y38&|av7Sho$<QfIUDJe2pf
zf_<xECYdFHWM@B`!UO7p6-WniVQbIc#4hY++H{i&MVDm9kt0mXc9GD$FmpO(C2^x4
z2z44iVOo2N&$3v*Hnj04(gA(?W$rqlc6oNh)wo(0b$dT_!Ons1WPC(vu)>kS2eLos
zdOr{iz+sAn0=rAgNwoxy)_R$G&LW}^6J}1DgQBO(#I>4?Q-1$!9&$iR(rUuv>?%>U
zb)w&+|M(b+xp8H3S`SDTTA~T2Kz4MkS3*KeY^zZYWCt>{3JRSKb7^*$%SixY!aM*<
z-L_Cxnk(Cm;ZK->C8i@}YCXcZ*e!J=bI@6;i5eAD{8c5z(x~FoE~P@0m;Y0pZOJ+p
zCyc?n6qXh%CiN_S<#K+be`s5{DP_ixjY(|`%MgtWfx$PvE+agi`KSn(5d?;bP^7_7
zzFSo)<~GY<ufa&`y7Bbnr@a||D*n?eUqf{x$U?{~>Lpl(iaDFsp*JKh2#dYvvcAX?
z8L9r%nXaI&#8cox-%`#fn;gukKtZ_n>tuX#v7Vff-IH2)LTV*lVp!OkS|pG8A;m-1
zQXW$9yZO>5v-}Il^6Eur`p-7v(yq<EVGAE$bj-E6!E5Ymeb{MoN|%a7h~;`&`!f6t
z(#QM?xZpWu2X*&?23v>d^Dl$>^S}34UN&MeB;Ow@W_<%y#|1j%^@_PGDfdqWdYM!;
zFp?3vD=^x289v@1|MVAtUdA7Vt8COzwyT&=N8^}K#ft7)PKL^M{L)$UFbt0VE?+6M
zvM~JVD0Pn&73a;+s#|rdHyv~s2No1$r4D!33HVXWRJ~!j!$FtizqsiP5K*>!XE?J_
z%T6m`ld74U2Iv`(UHt}a*4rGMGx2q-M)skM)mq!M4!GO1;2(2+;gkiNQWk4ciOLg*
zrbU46IC%iKurQ5g(cUeM3tLbn6Sg}ITL@zQwa82fOiS{dh1DpQ)y}&F^o<#e;v+$Q
zI-ytUF+TgM(Qf{5=7L`3Mu4r>i|r5<EX7tU)Tfn*)F83KwuOJ?`XtHnZz|P!%6CTC
ztXjJ>)Hwdef=PYq6Rf@2>Cz)XuTLGLhQ?a53l{Z`+PS0$+W?xP00zl?y`UP1gPYY?
zj_9LB5kCuOqE*r8sr3jyFn-#{@o0V%Jn;IN`FvR`$@pKDtCMETL0v-LSA1Wh=(ggX
zQsC7V)KhHU;|ZM$UljW^AgA1_*nh8H$C7n{-kr53D8VDbc*O@@ch`09V`{`r+cu+o
z1&z}CiCgC}web-7AKQ(@UINzZ9?WOo^^%EiPwIDo2ikY0-3Mx$#61#aR*hD|R?tdt
zS_@6tsh{NE3#o_$`3H0a+o1r8B9~(Kk)VM^Npq#O^A`K0)M3U$V&(ucY5Ht_Kb3SB
zd{9dn#rz-$I%uyD8}Ou}ud{I4=8cq{&`JB9pK>Da&hdBd)%D5$olO6eH~+IEWo7<v
zMh3_Kz{ueEUokR@)Fx~;M9?>%RTrnN_{x>gDqcc~2%m%)GVOmyZH!VE`tijnvF+Q`
zOV=+g8>lo$^B8~G%W%ImMnYmi#s-?)E>}5Db3d#2kVZQ6Kg7IeT%ku+V&q_K{FT_q
zaT49CMlbPLqSXHDigyN45fbDTmLL}^CsDsf(|Km!_6EmaOIzGcAc{<-vf582J5g@K
zmgfDj>3l)_5+2NtyUwB&%#0Xb84Yv29AT4kpipzfFNCJ(0>>ol(?!_x`;ch$?0Dt?
z?H8h}?T0SKDp$KUaR=P7&1u=SC?_$;BS=I0^m`RCc01yEY9`Xt8t7b3wu3%T50B6D
z)92aM$L8bfNQ^51EnUr4dsN~)QtJ)Hxqs(thBs-c*WLno_^;=aYtzncw3^XS`{%){
zF%Xfy==G;zs(ZT2susGZ*JkqjhJ39RN&I>CyP_1fDJb)V_y32tw*afE>(+*8kq~KV
z1f*fJ=|;M{rMtU9kPhjR4go<@=?3XWknU~?=@PyTD39-XJl}sj*Y|sIZRT2Y%@}ix
zd(AoSHOF4t!lT_X?nB)5i|-*|1)tC6NV5XT(@#I{U5Sh$&M1vsaf|ZMXobokkgUAj
zWzCG-W3pn=9E>2f5|xiJk$Syvi39=5%^9;nN-^dl6h%+GO-km57s-H>@6?5wdvGih
zC$P&u2}cz*O1j2u`w))OMVmyIhz!X>Ga4Qqaz%&~?)tRZkkn*;YQ;)PpC_ICqksd-
z`+T&IV5FvgUxonaB*>21*U;<}4Ej=SozRGjpA0gPFcZ!3LclV}ONk^Wr->HrO^-Ry
z-{U+|Vc*$5djCjZcnmy;yYlNWE7`_6NmABR#YFr~_Rmruk#jc@jCF@r<%?NJm`2{h
zMDBhNi85FPy}fv8M894k#s-TVK+&B&5=^5p(@#sG*6-jjz*+qS#!y36rf3vP?)tOH
zrSm);F6>g2f8B?Pn)jO-?&p9O)zRlh;#cp5!1+GWqn&<Z6?ka;^+W<~8>ZWAs4v-J
z6=RP=@#!{#Fl1bog=}o!<%}l`IBLpu`eQ9=A6Rb9c__?d#}=7v+fOU)9Kze@A{-ce
zW3;L?dSPO3igV23q2{6qWLLsnzUwdSwgTmzFocABY7i4*51M{!$tfR3sMz+tt9>0&
zF(C`*5}pfth)^_T3#pWBUuJ})Wp>EjrBerH$2t7$!22*_JCGJzAVg3D`|!J5=M%Ey
zdS<338Yg6f`h~bcrJ0k8uf+Z+iDtQ|$eAAIIQ@z_*!^oYLC+NHYYuU|XyP*Yo8Ajx
zHtl@0_=bPDGaXEiaSl_IM*@>yH_U4A{gKjn5%V;+hJ{SmX=jgiNG&B5eyYSq%91i@
z*SVZ&99{c}ZafD@);9*)edkLn!=>U7-Ovf5{Y-82i*36m%48E=Hp*;MncX<6!KB5`
zqUQ}o;r&uxJy&!9B&|4Mt(swEgmAPuq9=yC<Jho<sNQ~w$R_DN%|t8tnAXCKL}bgb
zjdYBr9|y2!&NM^A$w*-i7E$>y!INU%vt?xQLC@K@dUn%2#)ExZVzHw(I^Oa6<14N7
z4#%$_`5b6uJLEA&@GEdrD`z|qHC1_O)wUiQe@lSb8!c_mTflB19-#6mu1%E8@fblr
z+qV5kVJ}Kr^T5FHA^;ea;9OcWX;yTAXX~uwr4tBFxidrBVvM#y8CGX{J^5@psa%?W
zbjYO^_wxgVDL861I^$Pg$9XgX?x)@{4NfkC+zn?dn=Kc?PNkjMXAg7c28h0Ad!;d(
zXiP)$+Uv=$JYn@4J|=Jt7jziV^I{tb@=#afvE0vn08dI0eBJ7E)G(s}7W=jGp+BK5
zBX9n*u^BF<Sv?lMXpQ38G7&l&`m6_bgEG;rJJfVbr-Qz)aX!e4g|G=qyPQZ{qjn-t
zSnu|DsAUP(x)V`k4e6fR77HoZgn)jEVE94)T5Vc|;)lj1gwf}p_rBW~P*oh%$f{`7
zhg^ET_IjEBOs$A-Gtz!O`KkDn-c>FQL(gt#8QWKlZ~gHtA}>@PnL*B&M1S=J?=Q>=
zy1)fwkL+&ob49$WR;X!$&HccSndpD938vSNa=4h)1^T7x5`8+NEtPb+t;^w(A%n$r
zFIHa*RDXN<5v@!#SZtkjXJmze+PxL1-1gIFqN^hhynW~TR(ofl5z*L+sQc^tA)p<l
z!8#q`tCf%N{1-|$3R)ozUeqS7gpffgJY=eE_IuutMq3wcYVPclGtJ_pTHYc9oDzJv
zUW2LNXCTPT5e3`s@1cuEBq*^mFS*+0t{AgDfn=iSPHF45g8Mi`7yEpMd$b!xc`ch{
z`+eriTGLT7fBOp|+1{NxL)fp2Not92`iWgLW2H*CmcJwLC^pey@j^#1v$T=DU8?P!
zrP9-Sj^>0~VF=g6BskZv9&h>~9LBZh12oSFyTg@tJ96Xlw4VPtUwZ_O(05-bVV2X)
z5~@jM!#4x5mdWyAZ(JqIaOP@N(Zak1DiZUBv>e9_zPTmF>{UVF0k2<rX4af-4W3sn
zV(78B_odK&xeUZ?GIz+6X7f8$AfI*<U^JzU+@gN8i*GQ*)}n1l<+?iLx&D#c-*-Ua
zp-_X$Q34Z0Wh87zT<Y|r7PhcJ|FKxn)JrV#$);n`THyMDOuShE<P5WuA8({2$Llft
zZu+?>>FCJej(62lCnkq05_ISIfsQBkb{4Cw+%3<<TVGG^*IhcC&-57k*FOF{$6GB|
z<)Cum%?PoHsz<}=EiPt6r6TFhArjiF>hHR6X8H~3@)D^l6GiJc9>o1S8|Z+nKi}E#
zGxCa)6QJN?Z2*wbF){#18t9wo@L4$%s@=T2ff-0o$ihai0SAz?ve&UUAfyA8vNf=@
zC%pMqlN>19z|P9SR?ol=)QF6&m7ctTy&6D9K!^~aVBl;IswZRxDh#|U&CLx5;0K+9
z>e~_CcrS8rpe&HIH@*$<FN$*$U3S~|KjHxYCC|_8fdBv1Lw~c!@L%P*d7s9w`k}ws
zbhuH}Uy$cs7ysyo{@#Q?>_z_*Qh!07dtLk@&%F(Q$ir}h*T175hI?K7BM-y94S&k>
z_wdYcuZv&gxwqj@dHx=r8Si!Ri#+!>{2>qH-@`NGy)OQdhw<KqKjry*cxJrU#V_*Q
z+wg}xOn(p0O!vC@M;@ko8~&8%@8Oy0UKhW}b8o|+^87tKGvDjt7kTb&_(LA%zlUe$
zdtLk^&+QMx|GHi<|2;f2-|ONRdG2laLq9Bk56>*W!Sn5JxBRLfmcNH*mU~_Nqo3P1
zoc@PAe-F>Bzri!hy$yfZi}ml}ne{h#zWv(#uliyAdw6EO*Tp~fV!gNF5B;$HJv_7h
z2G6%~DZlE6?eF24?OqrE=;!un<bTNX_wWp)`wgJk?v41vU_iRRhiD+(Zy*h%ySL-L
zNPiF1K)QQ{{9`pB-MuM)iUj<7xCZ`?7XpFz#=IBl??D>~yjRFCTKYFR1pY;I|CSyC
z@2&Y$OMj6d0_lGT?|)H5;9um3K>B-y{9-uzdu#sG(qE*Bz~Avi;J=6>kl`=F`*&0k
z$Z&7XdoBG%c>j(q0vYbD`BS97$QOaXBaFa*F-9QcU!1*v#~Fc)|AO~lWR1Yz(MI6E
zcq5SMFT(qG%n``+FL*QkMR@;?JOY{i1@FH|AA!H)kHCKsNZ?;&kig$jNFejS;Qbd#
zB=C1E68J9~3H*yZ68JkJ3H%q61hV`^c>j(|0{=xOfq#)r0)Iy*f&b!@z`sZ+fxlyv
zz<*In;9umFz~7Nd;J;WU@GsIz;O}@P@L$C8hD6;x=Lc;vf%dHkZ#S;&2m#_I`gVkB
za5u}1+}(B(D7m>6<lt_7V^DIlV9UYX`hcM1t|Y@<kz4;l4(@hMmxH@qM?uM5k=yk`
z4(@i21|@f`+|EUEaJTnAD7kCp7Uyzsx7d<{yR|1Mxod^(uE-q^1&Ky?*ADQOae>Zn
zcffAaALV`sedk4k@_&eZ=P%xz|0wrE@;i3~l>bBayM_1W{71PT;@{2dp!^>LxSPRl
z&VQ8qF^0Pv1eE_{6n9XNgVP`cIoJ-MT|GvYU$^h>t@6Vt{5tkJ=2k{Ot#e0xLEDS=
zI{Kh1g!FWGO8I32@E^kh<bXhs9&U^UkYj_pT`U1|EO58$!7nv#&VOwA{LgCKQmH?y
zapOGvS&bWU|ER_-Px!MMe?0PAFZ+-BxOIa6ti~UY{MLp1qdsmuyg#aO>wx`PjX$>e
zt^4vvecXB%e^%p<ZGO8p|4|>eOXr`}_+y*jE<AtK$L+fCM>X!A2>xM}KeqbaBeg&4
z<@S-+A6EHe!vp_(p1XUb^JjwHK63f9Dt|uJ0dF5!{8=x5KH1$-{y*&HkD-4@ng6Vp
zKcDb`e?H^gQNlkH?9b=CJ4*Fuz1&isKdbWR)7~9r_`_cQ-1>h$^WC|`e<s+C+w`Lb
zpN^fuO#l`^NmNcrNr+0p#KORihR@1e|28g5z`#z=*2LQ0%9aom=XK+3-Nu34)Bpu;
znb_Ld^Be2f5;D*OBy@fpgG>leHqo~?wo`+n2RWJypc|U$_5lkWA&`!aj*u0Uag+J;
z!vxA>0(qK03*V&lEUX|08<hV)_}sSxYU8Gzn-3iv8^{-C0r|(wphpBZ>Ca<kkkiNl
z@?&p447a4~=IEvr8zbXgNl@SSr9d^An3(^gmD@r5+T@J@cjLSj819GIplXbuCU2_W
zq&KB*hXXnX4ey6u?v8I%a#Id;9qu;$SqCKGZN0l|x8nU&38+U9YoMpUOK*mJvn}(x
zzn?As-^%=`_usa0t5#63o}i_kmA;9k5y(5gbH3#rbnS0K18;Bv{KxUWyZi%Wx0v}^
z6L15$`x9joOI}MmllyZ46GKA-Q1~DyUQi8=fem2eU}bM$Yhq+<58`Wd07Daip*e_$
zFaRt}EFJ7L{^{_Sd+i?60@5O4GRi+NEoWt+WBD&o-;Dcz0ctuzM!Fj=bn|zMq+jq1
zQWZ1EFh8LGr)a)`#?9xh6;S&iliXwX2bOQpd1KU{AiM+MZ7I+dRuE`@T)73)&)PRN
zZgKtNZn(!g==>*q?^?QnA!vj*;04`(zoz#f2Ic>h^rp<s@r@pSfb;&|y(xclm)%_d
zaqT}qeAD)w7Vk!SbIfqdPVaMXum3-SFf-$SLilb<`)?uqUw4D=QTo4zFar>v>tJqf
z@c)J8U;MdyG>fSUiYxq_p+!N|*+lQZ!ugh-{|}~U(4F+_6#c8N?+|d8^S{OLT^r1|
zj~#FSgV1z?yxY$&82%NFKk9(4-q`wPLi{mv-_6A!jNX*K#n2Dr-<;o+`&IhesTb7S
zPptil-Cr?yb9{&FTjbu%@^>rEKghkAdVfLgO-nZt-K2M@Wdzl@nFntB2le^;KTx~>
ziMiXy9Dx58bH6;|_<uQV{xVbEF66(?%r~p~KMVaWrlfQ%4E`IJfDaV<twsa#IcaX-
z!3J`rSQuF~07B+EMs|dZZ~$IAy_@K7P$nppTgO_&;AZl^JH6@T=Gsk7IKUl*c`c31
zK|$ki0C{@@3nfC(h7}w@(!|aVw8q>*^kyOjH3af9K!M}r0A2tefFB?L5CjMTgaIM|
zQGhr=0w4*H0!Ra70I~o%fIL6}pa@U`C<9ags(=>&9e|F7wSldjj-@^T<fDKV6FW12
zjy*sZpsQmG(6!akGcY$W1fAa;-L5pZhh_%$_t~K1y9;^%Ju7o7OVED{3mt$yzyNSN
zI)H(VgN`}Cz*)~+#{yt@yGofj8i1B6fFUUM9bg17vNZt3#@hmn0md%Y#s-!E6M!ke
z3}6m0H?Xq<Slq2<084<SiKPL+3Sb5LZw;`%iKD+2;`ZoH1kg}!bO->YCRX|YYjX!X
zfX&@9sjqAP%X$g01=s=X3@l9UM7A?<1a)g?;ta4e*ReAO*ja;y3$O>+8`~OyQYR~b
z1Hi#jAEYQfD_aAABftsZ3~&Ls8rWJ<+(JUg#N2>^5P0{9@}G70F5?HBKxJ-53BrQC
zfq((XQ!oJ8^;ZXhA0T01X=HCq$O>d*=H|Au2kFHE&N(^7#YIJa?0hE-I58zQh*C-V
zDCot5f*0kk$!jhGXy~$runbTr{$Nji*}C9#Qc(z>Hxv4bK88|AR!dgvI4;Za!4Ig&
zDKB3uNTKa_*?}ut8=I>?xlFy7CVLg3zgu6@u<O=%;@$`y{Di|_yI5r@+*jzeL2#uQ
z5yUpZoL+Wu{DxjU*4Gx1YqR%~Z92Y>pscka1BxAn)?O~QzMu7~BzwLgpi3QGZh8`_
zyOtR+gGsGkWt>F9E{lzgi^6f>^R7p!_fR_dY$`Tks;y*T{(Zv1UXrtoFA2LGF8US<
z_67l2l8Xw;1}4+c)zYiW#l|=1*J{axu;HLDMOBJ%RtTnz<CpT+$X8G~I!&jZLN&VE
zUVje)e*mG;`oKrs2gwijkpnyjiU;GOO4dbU`POPtTBXjF(Ap?;(i}&%OeOi4*|!UB
z@i(LZ`IiwTFWb_T`qi1tj?BH|C2>hcAMc_RwZ71OWD}?&-23bi>H#c^F1L-ZHE9?M
ze4t*dn=gk=^0*i^5oe%9tL`FHaf)-=I4|{6M-=fOjaGVHmT%z20V+~opD8`Q2;@P&
z2#Re5*F|68D<I8A84BEhii_us@Qp}^MFxf$6V4JDA}<9U`9dO#)=3H=<2)4Bg(yyl
z7pdcSMv?NxY$C1;5`~hKAkBVE?JXVh6bdSd)k|D5<e7I6KqZKJD!xz8b=+>^=<AxE
zQ)sy@6fV{p_gLsfM6v+HzOX6sJN%R5s+vlS1_!%K?{D-E-uUFVv{jBZS~y=2ggwAj
zBZDQKPIh))9C13XlV2(OlH0UFrirk7Ac{%~Jp@r>SYlmru{<Pinxnpmxi@wC0V-=g
z{gd(lBa`7|k%`R^!jQ7GbYfFVv2ObnRwP3VgP36*@(!A*AA0kvAay~01{a2B3~Bu@
zxy_mjP)o1aFWlcdl|h4}PTM3-nCMP8su&Zb=dr@g@zQ690Tzfh_Ef(u4#z}qKu{bO
zM?5%K6yxP02QZFl(%XO2!L4*~SA`9PwCO&4ELowHD>*19cj}9)#E<?RZnaK`4Oe)T
zhz=ON>zkB}&xef0H;6WClRYExV1*K~h8Au$Qj4IrZZ$owl}V(N;{vw2t8=zD!#)Mz
zcP?6JB~&8~^UO!pke*fA1PTw0G4i>V$_qKZZ>hthi9MUy<%&YJK{Cv_=v2`y!>6kX
zwj^{@0=OfNQ>NG(@1~O`1SbfwTk}ykPqInLMD%rbn@&!}qDcv2yb?<?j@2)Pl;37j
zuRoxeD58}%JN74&0T5X510#9q-w9*%d(ZOKppnGPQx7Y!@VL&ncwJ)`Qb%KUcq@R5
zh&7vZf>S2LCi}->&@1GS^SBUf`)yzH@E^;s%V>T7C^K)Y2Js?ZOPa0Ti)vo33g+R$
zDn(s*Nb~|R?KD^iw|6qPi?T>5`Le=$odB=JdVd8o>64{g9zgZ$QTV}#7&l>!!cHzB
z#2(SmTE1$oU~l%*hwiU?+|CZpGL3uPuJFy=qbS`3LoChR1YP1HPR^Gw=GsbINQ}K-
zEO)+_PfS4UqlQmLifcMEkM9upV*JH>!kFFlWCXV}AiD88R=;m4##M-MB&~OYk~>tP
z&@NdOfvsefC&8o=6D!HN(`y|D^{xuMvNg6B-StTpy<oD0yjb{4!Q<;-1Z>a!*tL@K
zyD+ncS7N;A^G0QcY0B1FF%A{PDoi(5vSq4}+}nf?MEeXCCu<~<>j`L<YnsbY`iS9n
z$ll`AnY_=Zwdm{Uf{#KPZ&y`an}1YcL8~rMiw_%@5+VG~-$3*e{>MfdQ@TyvZnAkM
zXh_Ru&|43$B{Hg%$BCH($}F>~Ww81bp>lHCeC#8lFqLh`UuGPVq(_jw@WdeIK?7TR
zTTS;k%4v%5f~kK*aQVUan7D+>B3&q+W?0RKDLH#Y^QvWO-0?~3h1J4Ms>_}^f-V>`
z5eE}E>j*}c9)9CRO~nC30(ISP#DV>kvfw<XD*UG3>FGJQ1B=L9ka6O{vC%Madb%ac
z9Sq7nu^9;j<Of=f$M|(*9a7*T@u)1AG1`lXdo%Q^W{tNa2}zXX)v9`-a02vji=Hk;
z^5jHvfC(BUExeRWC{i4Ii{p4s7LeA<iDlx;yedhx<yQ9%r7Bhfh&8*^49ohUQWxw{
zm}q(j4!MSOWwx_OX`M57f$<9&d%q+sQ?HSIO77Rg?*}>@Q@)5h=xR-3A6az-tDN4C
zb&c11?kl}XD>ouvL1C!$8-ZI}NPAq2MK#IqhWQTDtd?Tc&wF~_v5qBU8WMJ3`B|yW
z8zW9lSXIcv_99DUl*q~NSQ{4#Rr91Mcs|POWrQX#$<rSROnb}EAHH#8sljfR4$FF*
z;8j?_^2AgqDX<+eB6*AZ3s{GoT&01m+$wwtJd7>Lbl}XxsCn`a>6u+P;N>jEb;3}k
zqMZ;kUIu{~n+pd|iXdzteURT~rh9*-2H^YV_xllf2^xE8wjfo9g-{t5Fl8e|4{3ch
zFGqV6Z-QB$r|#zC9njg-j&CMwV`!WEk$o~k6X|`}d3%3@Ony!Pt6^MDpwlkAy@*h1
z7p>&TS*T3BR$?~`DrQ}xy*{C30`L_=OV$A1h29hEaXydqxHyv{89Kj9(II37FDDDH
z&+n!MS`i;6AbCt3`e71~`X!@`iiu}Z9m^Zm9V9ugdB-RjmdB3l5u<r@_yZP<7?W{?
z4Jk@WVhQ21)=1X^;@Vf+AWSz>A@h&z-Rh6gXM)Wmysate=-b@_#wM&5{ZPu<n`sJZ
z$jM>O(naK>hGJYbN1)!XvG`w|2UQteVGS0M20@p}jS7hy@z+x}D5*rtBpUC%#kCl*
z%@4IQaQK90{g~EZ%2pdQv?1EIu@{)NQX^a1wIpj(dvc+8;``9OsPz?MIwZ7@<vg={
zZ6lfN^uhIbHh3pN<p%DPLk5!GluCgJ;Z<&O8aEjcw&oA=JYJ2*B|CZ~&1NA4^-nA#
zY&EXX=Ic*j(YXRsBi!5|c4ju%j|3}aUL+DqNd-NC2+AuFhXT|$&&Y)y?YZ)pvlL&2
z4JI2HF>AkdLVFf#_E|n8d069pZe3vq(Kk7<S;eHUgsoFu-r&T_JCh$S6~$(|i{zH^
zE5{VKA`7Nty|&Jk;j8QEiq+k`yhZ8YpG77viFR*0=DCSZx~-4eaI7X<elLnNN*KkT
zWML^+pW<)QS$;<RIk!j7fg8<~tfd)6LDq9$Ii5Cf9)6jUxRwEKXxqAnEH2IIx<@<d
z+a=S2W=V&3f32d(w=g7hT|A6Sp)p)sw3hM#wS5%IGE8Cb8Wpp;wBX9C(wIvXjRQ9$
zJZS~<zIL3;gfemepa}zAU=Zs&<F_GGnG`)x^bvVdT@hCNZf9F>rTs;d9>76=l94m+
z8u8)Nhzz4At`8}Y$9xa}<tW{%0SLyPZg=TQtKQUGutP&>Iy!~rZf}uP>%MJ5Zz(Kg
z0uu-=_KsCoPs~~<nO<ciS|i0-+=C$#ItENn)FTJ~LqSYrj-CDFCKtPdr9ZbG=45N!
z41xy*PnreTI|vz7x$*b_tLW~|^RIOU{#*ktr!)--@N-@)9(*jU4(e6D31;i$l%}6b
z=&`kfqoGUViP18!tlQCMxk&d(Q{H4N<(E%9kBCxLpzuatR!)M6BwjRUZ<zQ@y|rV?
zSgE8RM-|$9h~fZFo^FaAvduT!v-QRpb5IE-6p8yO((7+Q60pz>G2&?_h57E;2XTJy
zI?Ptqo+BAEJ38w53GXOxtOxokV5Ji+;nWnRupO*n55i&#i!t|ywV=S$jO6ae!q|t}
zEb}Wn7tHLtBNt6#QJkqNd11#9vvCj;K?r7$b0f6S=+I4nZW&7x7p>KK@(jDst;AM%
zl$`LD4-=;pv&y_?j0{bW^aDz8nQZ+4lM*kKkke|T<Na_tqTtA+jpfVUx?Z_ugq2Is
zi^yvF6(*AbbeTu=wuEXQpo5-Az9D(|xm&Ii{oA+D?!090(>KE}WT3ix;9tDr7jSpv
z4WmGj;={jupT7R_5KT0lgfBHQ^_?7<DV?GvUGz9U1_UJCsFTz2#u2ojUz=jo>(eMS
ze%wX@S&|1>go+91mW^y?S+8EiSI5nBN7sK_pfoq7v|!jM#cJDNe`R_qiFGy+%iZYM
z=0fP{9mmshl5V_I8R$+#!uFin+hG04!|=Cm_KMQwgK+QPu5ty23q)QVp9!)cg}e?A
z)zkg1`@tJkB0aN82M2|Sulc*rGztq?cN;Ce1XRLBR>mcj8_su<XI6S%U#i1NIR(q{
z7{CrXQ-znEV$UX9>6^cqlO8voM2SVG($4sW?Nv5GKEwnA6Re8shNE%K47={&{&Gx1
zcfQ1pJx_)&z8~S=<4MSs`CjFLt%GYMtyUb;{`+hd`9M}up|2C@9_8h^Wfejy@<yAc
zZqS%?rKhn*Vq%F$Xrt9J93h`}AdQL>-bDyLIBUx~g*0u8w3<ImQ?o?CM#Rd4KyHTu
z^I#9}u9AA5lFO2YKgsnGS2B$UzK=J<2!5VJx`>gdj@0(j;e!0dE4CKK=4W5EFxA#2
z+s2zg?=i=uKhY6vgMD%!y3B^_#hC#6h%&-<*GM@VESc<Ku7hm0W!b^oFMLIPaY<!J
z6r>@(XDy%E5Y^*9U#2jqKR10uC0{u{crhX}_~A4mURBw8!e)+rsYGv<vxD(uVD>!5
z*4kfpC(|0sg(`;x^#Z#r{BS#%(NzZ>tJIJ*F*vl-TZ{HZ=-P##TUUdv_|;>>?(h79
zxT)wV&b&SaWmyUaeCBnOk7PQs#ui9KSkxO0E#3rCeVt_)%qkY%I?Rrn7!4N2HlIVK
zo|Y608kxL6V+e1B+F_pVGtqBY_0C^GuY7IubwO^QH=6?AJZFFj<$J67Lb^7^7!)Ns
zWI*l$x!hJ_L90wL<|;SmIJh!nX}rrG-sH7_eg*&*N>=fkMGy_vDDGFbgKAYR%JUYE
z7HPM{X=@2oWwuNg<5^7jh1SoXnHp=J@xfFDjq(TN71^Z|JmIrLPLhkbezVR@J$U^I
zKQTdPN-&dfIb@X>SkZVe`0^|KH?2!J--fEsm_$~Q%pv}ImKl|@g!@js)B;cU!Ss0v
zp4dRjStrA8(HaJ-*6-;vY@t%uj~g&2Rdd+Mi<ehYIIktmq7OvYsmo4jDkdf*7WQ|G
zp=MLre(`+$`h8rvqY5?N7?Q(>>22DBAdL0^{Zk(v*#P&Vj1Sc>2o&?29x-hut5_5e
z6jOfiOPXMvnNz94dCl;e35jBzui2z#v~IThbCMemRGM7G3wxYG)C}Qcmn^=>+E8rA
zr{xdi7VGSW2_-YX$jJ1(6dO}~qk64-#M^qMU?Wi=^XBoJYCM@^+9NBS9SsR9N7I)z
z`2C+C2g}kwXYV;OeCstoCrXsqPYmIX^7b?_zRcqa=Id_mLy;{kdocmfBEWkL8wPou
z*P2v}wtILL^6|-aZUDX?A6eB-QWHTc?q)(P)pWjEuKco(5a^kb<XAAL_D47uWu5|_
z5e7zd`**2PjB<6-%#R2%0V8Aqu6RK<nmdYPYVs<RDrAc^uI*Vv-$xct=A;q0UFeIq
zNAmL?aquf<Zhx<6zs}2}feX##ABstYntxcA&!@IBV&dN#_IYbcg3Fy?ro;oWAxE2#
zb_ZfPJSP>}7#U9eOWpY-w@#(9c(a~psB}Ud?eXiWxCQAZ;q=N=9WFnQj}C*@UnQ44
zZ5G$O+qECd&_03kqFX0bA}?A$k)4xjIT3P4NHSp_dRh}hIS^_z94UIOBGdfT>8ZJ(
zu)e;QD=!BAVF3K~P<ooOikuuh{R-qJPuSVG3_opq8+TQZ#X<2v(DQ^eC9gVdvTN7!
zcLl`_xlQBH{kjUQNN?SV-&du{M@H4Qg~9c`IV=lx^f{j9)2*Q#neK2Mf8Gpcp9J~6
zs^ubn*F+}5XaEx}=E(t#r|aMXhg%vE9j7K*G+JV{XfT)2K_EM~w|FwQulN8b2V%Xi
zpdmY>v<X-W8p9yI8R&<o&UaCH4gH<49})VrcJn+sNwX3OOsixnsH_~BoWhyhG?RX2
zIh5OH8!ZozvcbUR@vBUXWI(|d5{kkaR80sP$I97U0vd7U9>M`YBryBKY@jn0%t_0)
z070kbwDSbLPr#;rRBjv%X_fvUzd<~T(X8-Xa;U^A=p#WvA?mJoo0GkEqIe1Q&Uw~X
z->B9PJ1+)jF_06lwJnsBp%GyH`|W4B+=TFlY0VLVLJ7x{h|K#YhUUbBd=LQ~Zj95m
zwec=JRcpg5j&ZLizQz+VOB7L4ca33U#K4LpxEQ4SvZL!gf{zmO(fDxo%4S!$rCLbG
zL0p!sDvWEuaO%+{3*+!u{<BMSD>E}`X_2Jez|%0-bckAuHhg1))I5a)U)^4k<Oqg!
z#h`Y1Np-}-MTA$M6^Q{-sFf&T1Ydnn58mrA<W6LXsTp7*;IP4cW+Gj;)O9xxFbs0<
z(J7vmpNM5U+vF_ghS&EgD-(!?ljMs&?Pa!?5vnjo466Br90)_wLtJ)Tk|6rIIT^x&
z2fA86<xGvST<k>z96b~v(=&11Mt&1gMMAZ-uoUQmh3ivs_mNPdZV!8#{&uF~E10+z
z;d=9_w{u|<srqBBK83`I^It1aL(`V*@T4%Ct%MNT)~Yif?Px0H(qqmYB0j_zPCo54
zB3w3Hgxq`lQhjR3rlRx;=q%cFk+stTw-mZ4D>7N?*uf2>L*nnFA6*fwoBFne{!3nA
z%vLM$(;(EP7GXXjVUj*(oT<G?3qP@Hg0&|MU>-6liOa#x>+syoZc!&IF%Ujr!&qV*
zb_cxG{n|W0H_~UHjWCQ<!agl7?4GI=t@OsNzJ0yVdtoxxGWYqK8*9aP@T`5vaY7>4
zLCmM<;)LN-i&ybQ7(B6+Z~Tdm`zMYUFC!LHaM&JmMr#}gm`rwXOByA14b%<8S-bj@
z!G$QUyhGcy(+e&BXgX=a|CN_RejOtAwf2!Q7vE950=uwfKZ{aa+_2Ij2l$9dM0MCS
zcDe%8#Ed@s#%VsEPDzkNffoOE!Z_86rX0?f=TI_v=xh|m)aPO0u%{9udF`GUV5M)X
zl+%KRS0LO-Ek(O5Ln-PNMk^x1XZZ-8KJf1>8b<Th1vdu0x~WVp-Gjn~G@qn?9|{5M
z%4@FEk5&R<nh{s;ge|ofX+@))snGR8B!iLH8sjS8OA!fkp^nCYh026=$bM{p<0uVZ
z%Nxp*6V6f<g3XxJ)hK}>(QDTA<D(L(qys8!zXs#M$s=PaG-yckp$%7U394wU4Dkw|
zZNe9*MaQG$yfw_i`NM|!Ojr{^Y;e!<0_$OTJQXH#!E4j07GS=DGk<LG#2Htyi~FLf
zTRhfvoPOoie|!aQlam8Gixb><z&(i1I50OcF=loBh$r4atQFSDA18S)vtvhh;SzZ}
z`>Dg)rNthT!{^59^oY1!WQ^4Xcgg}ah1M0nm=#;N>Sux`d7oq&`*t$ODk_aN53j2a
zKfI3NHeQd`@_d^j_+6Ehj1?L6+J%~1xIo^yo>GmLe=yKT3w6*}(MOnjcbh>qNieRc
z%p*v$sYBDq2{tKwD94oeJ48$a3X<${WW;+y1REC%OS7Hl2bhJJ)Z69luFtpiL|*jv
zfvd7jBorg7Womd51OfsJ-Z_&gDgsM%Hy9Zo)e=5nG?@{s>>$uIZy0^X&Y)kH;ieQV
zpIr!M0rDVo;Oei)ni_lCKHHBw+v5+Iy)J!SV#@@bm{>-Ho@&jtcnm`jydV4~z(*uP
zCeCc+M77Zbr@#W36oUPge}^u&cW!;*sIxgTy4Q8M$tzlP7&`nD?Rs-lO00PlkD;b&
zihnvefss!C76m8tL4>McPv=&G-vl8X6p26nWEe&>-PN4*$&q)`un!mHK}3sT95nYk
z<QWb><KwW*izeO8na>qX#o?B!{tb`!DNodQ18Z3evFu~i@<LWtgv2Y0Q`2PLprsT<
zL3lk8$)DNL@=!N5UpHA_QD%xoKc44JTBh)KkM#5isbY$x@$f>)rGyDUH;oy+I2M|L
z@JTP7d|B=19rj^euX4%lBe8LQQE}=PTiF!P(@|p4z@_gU@*-RYz{1|z!;hA1nM*{b
zU)OOEsIni@8u6age%*a~FgLJ_jIm==La}J>!99QudsL$y0ssC>hW$HdC`sp;fFs6I
z{1>dGw$5DUYuXPU)JEWJ@;zX4)|nDR%}25w->b0zxD!gC5Ue-a24T9wr*~-w8MJ+B
zZ?ND3e`WU$yQ>9HPW*DB^KA?!SU;GI!Z*F8fNV|i?*SUero6@OyD}0yZEmEm)Sg(j
zQL&^S9Y&NFuO23RNIhx#2KHsX`f#I*O!LIO7DGLUWO+neTq5)&7ZP0@ED=0{&LDMJ
z+dG_bRU2&ObW6;IAdB7m;;jQ1oRr>(J9r0=4(XxvLZPlE9k0E)w3sN}9(cq49^DD?
z!d4T8sa0i1TdG%k1M|~e@!jUI&VwP3a~Rusg(~E!3yO6*=F6=C+vU)(mU3etf;*$i
z;7Ps6L<Msvu><DgbPHpmox;LBI{QyoPKfF-(4EMADGr}p!WC2})YGYkSAs2DZ2KK|
zjvv>E>P479FwKh6e)B-Hiq%rjVzhl>U2wGcE)TviB}2$8ze~5Hbh2XlY8Qeuv10Vi
zhMR3)I%_5MoPv1)w4y@&Fm;f$WVpm*F`q9(-Wl|VFSk|QgL3QZq_iLqViYxT(6KNH
zVq<dhBH+v*j!f7aC786-qg4sF#f%kW#K4|Kk_kZL$Um?XFtQ6_n+ckf@X${d+s=7A
zow3XtHCff3ShBc^E!(n@k<s7Y47#<%Q%I2{L*;XP^eM~OD{^xyjuonFR18qMrHvF<
z4$)Q*lF$SbNP|XNA|}D!w<jiME4iEvaz;9(5&^1gTOZSWoU|=0;IJCsi?W~zjk&Ia
zj~#VT=h1Kt+Cea|Yc5e&cqu77Gp`#1hRS(}rdE?<Zobt&L~hN-yttSng8-S9@tj<<
zACHOBIewq>sMavUWIzWlT&IB8auW7qj5OJp{@1Rs5!uqJ`M5e}ets7V3lpkz=f-6E
z9Llm6<w`W&vbpl#LeMn{#wI4TEgNg{5sNFTp20kL2nm6vnP_m0U-Cskb3*0PwpSmP
zd5+z@A+7$Y3t+2UFaan(Xdp+XM9F6>#Kkfk{<scR-8*;YWb;~Ry9z5D-i1k1a-seV
z`q*RnZ1W@Ms#FVN0`{pI{}o1BK<rW1t{p@ewIW%cWFd?N#Oki?7lwV~LalGIgyWFY
zsC;b;O=5tf>nbgBfzKk3GsL2n^^MPtQ;3vnn@}Iwyvi${&1Eqpw_{Y@l+bx277b3%
zYg?Q_y@s^nLpAqNZ2$tB(!wc{{wvH$UInX$Q^YwLEdjpN%kp7%4)`X?2;HM*T;|nz
zTI>}<xYhaHBNZCe8OL`o*RHc;juZB0+^9(()QivI^iKwr2G-YaLry=6E56oh7tDK=
zI)52!hWTA6DLvAlosSdG<CDMZl%p$Pd}*nX=2B!@_hTX-_=ml~r=HP`Z75raTyrgu
z>@;;8xB`%4A&47;dGD8FRGzzZerSRwiWg}XR8;<)!hrYu0N4We^gBFGgFyazC^}01
zF%X(1auQ&GxU1awzJzhJq3qQtmt`3@P{x4d91Is}gwUI>R%E+EWyAC=?qNCo4D*H2
zOhIsybwU_68+MswhfURUBjzRD?6?h-P_T;w4pEYBVQMJ^)dIlq+6r@w3S1Ak0Y&Hm
z8sbovrNzq(hKkf)=j7n^Dd~yI$W)JWvnaePQ!waW@J@rKU~BfI$Y$*q?V*!J-HDm+
z2KX-CpIjM*Pwsejc)v1t4N<`-L-pqO_40c7HmXm7xbjR$xaHXZ{EHQ)CWCK+DAZ-#
z`@{=mVO9v=1P=z}DBq~^PRbWAVje#$3-u@PgfFa)NGE)><xzMhK9sk~T6*mDy>yje
zr_dNHU9O9aB2=eF60P}6)gZD?L_O*Ws=)`C{y9?7aUnl0REo8P+BA+PM^-C_WvK;s
zhfv^P3W4et47kIR{d@!0)2G2if}+b>83m%-Z_#!&?G$29x^kylH6Ix4e|bZvGrvKu
z2bJDBSTc}F0MqEX^_1Wu$>sZN23d;?XK^``=jd%0o2wg}*<13Bj@5KyE~OpG#LbZ?
z+7*TjJs*kbo2u6}PIu5|%?v51GZOH&M8-lp9~RD*ug?>KFFwah^x?qi_p`Hn&K!4w
zawaXLOPif`fLkZmE-XR1TpVwcR<Zz*9q!*Zjo-PHE<AlQFxSxcwVOSO$eFZy9mY}K
zlAGJIc+emR!nc7Yas}uK7Z&M{TZ^%eu+>&Yuu#BqaTTJ{M`U9nFq`<&%{2ybPs`{j
zT`~58-1KqqxWp3}7L?AD4hu(NJ(ik`Vz7tgWh-p6tJJLD&XB60XJ^kT7X3R`$cg>%
ztgp1V0}iBQ$q`escZc!X;8r8B9r)fT$fb~qm1J{)0h(l*Mw%}(y!SaFKlK$7aMdt3
zV^NdB)SfM%s}qo{s8q%BORn<L9Ji}4vrYG(z2Pu*PM{yUo_C_+e%G_$8)YXsr+B!U
z@Ep&9s$^+>Ffjc)&?N|cwmDny8CmyWYov^td30hj_QI4gLY57;fQUB1f>v|N-a~g4
zT6wW|vM7E}PG#&GC!t+r4);F~Ea1$&O>pw7doWk-=rEIbZhnAnPM72U(QY)mD3hlO
z?rqE5x+0fmToZa;V}1R#Snx@EG*+<=H|RMgbYR9)vwSvOs_PxP>rC1v%rp&Ju92gs
z?d|h{t3^i1CRE94?13!qFTOlMBac08kHveh`fS)>m29~~e(%e&66=TM=2ta4<R1(#
zyVJwH%-rGOI@AvEaMM4wE?9V<YCWeV?z?%(-;Z#BpWo-c38?v>#Hsu@VSaakDxhFc
z8hX(8rPvri5k#!N2~+`P{u-!qd-_kH3g}&k|4pC@1Ka=8K$Ty^R6wCApkS2WMxfk9
zj{*MgfhfO=K>1hX$sY!t{FPvn--Mgo#C6L38gBASpy&TQ+=PXhiSb|ICN)=KUiD5}
zGJZm+#X%M2lk94Ra)reG?|U=7(|h^jA4Wt#MLjQxqJu(#eZ1<D+V+sly2t^4Qf!;k
zSxS6rs+=v@E^Q9(cy@NKey#e|^n)wUg8H#NkKGfG-O6Sn^K4{l3^RXW0SS>sI2IiV
znS!J1lP3=_O0}^MVB9cYfA462NT%k`;{(PpuI(>5;w`8(0UWfOFCWwHHgEQCo3#Ek
zRW>}-cQIqo^JW*V{oOMGUq3P$^;*}y8owqJ_-kC%b+o7_$QZSIc$dOrB4u>6q$JE6
zG6E9Twu{ZV4wyB5zR!doJi8qGe3iI;&CJ95xM)hx-4WK^shzEDS8P0`ip<1nzaeHg
z9Wq0Et!(MRkTfnF8}25`D)tV>0{#Z_3f4CI()Q^>wiEY@lCtj_*9Ma-HJMaOFhwuw
z4K0o@wnkrlv~Fo<dAKOKNVgzTCs_5E0L2Qms8zQ))H%SK?9F5RR=MVA=eRwhS>n2f
z1iBB3llPuEqENx|GzY1Oo}$(UDz;kcGJ%3i_`g0IMY#w(3Hsj3z6e&FYE8;b_y`3j
zkiS((mwVwkH6gjT^gt_>0OU7HP%sH^>tlu>6<v5>uyg3RP%r7~V@F@ENP#*j>%i((
zPH#c$hxkpT)7B~vafp1KJ5i)c(=b@K@!c@ph7Ic_>$hL3MQ+>CM_q<a3LSmnoJ`?9
zdfh|S*pLWxKet~vlxJY>qw6h8sJ2+GR)sebHF`VtQnQwMiqmK!8JnX)<2BdkS#6$U
z*WN9?<g;Yo>fqIizNJ39q_M8h#k^`v7qsvmj_#p7_O;#A54I|s^Ba#B(jDnI>;WIu
ztc`hRya!nx)xTYs+Cx2~xWoq6vc}yslJxZ!TOaD6&eNB4R%Hcub+I{x%+j;8l^3<w
zm2(BFC+^!*J`foA%y*WPm?&}n<r1ao@yj-h#I6Q|?5bvG!UZqiLvsKkjW>)bJt~GB
zAvDg@P;3h$V0C)bg1WvtJ4{OZIJ%uqRl?zjQH-Y)c7=S7v{KR}n0q#}YZ{oJ%;xtm
z2#xA55TxTN8eb-e+WGsN3?q5PRS<+q@q7%pj*(lh6GW!B0s>MfhcQh;JuRtGE*?g_
z`BK$M?{2q|iz+G6(qWV89PU#hung^x06_v?%t=FvFhRu4VthDo(CQ)62N`R~pHv~+
zQ=T47v}tJRcWNa9rfQ6bS;(7ehM8;o(sr-w8AkUrzzmqF=Y;wg6I4#iyJ>>KX2-OB
za>7-wG6WZ2(g&T4a#UbOG%?CvRj1>y`<{sEr;nyz9f-c$5W=?_ZKWJ&3sIirow9k4
zef?PO;A<lwExrRw9&2UN;xG&T-NYLThu*g6m!e!C@3v-=Lybz>dq|tEo+XbW`)Pk!
zqj^<UURA~GitBeplhYGC1d|0=yi=#|Lw!Bg&HCZ#vc94X9nWb=nZk0j5;$ikv!<fO
zVkFli4R}OlD1m=1_u7c5VE>S=&hdU_@)}~|Jc-+E&8Lr>w}+82>`h&y>QtxcIm{c6
z7Jt{(ClC76N)f&ddhf<P=P*7Q+LZyT&i8o!0iND38RWUFBMQKLopB^8t6&i%#O<$w
z-1)-uNTasn`t$QoQ%heTI+@Y=64|QAry`<waSBsnW>(6;Vbb_LETK1Gqucj<H$0Hn
z1KIZJ{X3fXk^(78abg}q!SkHUO@bWceHW^#`F3>NnHZ*pv_tP*B=`Yvw0;!Ijd>rq
zS^SFiBhJd>{JJ_)37=R=VMtU+K8>Zo`l1j4-Rf%7pjG{00oED{Clkr_EBliYxO5Xn
zb{H39@WX%#9wc{1zci)d789#pp-*-&JFy)#T>S#CAkz^MPu!7As!sQ<yMr`6%wklH
zC#(b!+CDvTp<>v2J<|e=zkHeMF3SCS;khDowImhI=ydu5cDE+lgevi_ljl&QAG0+u
zxqfTwWEv8c3j#Wv;$1((GtMF6lsH~=6ZpN2jbpwu<R*Pq=sJB{%x4y_P>S?lu=d5V
z2jC}9yw+Tpx=1(im~zCo*)mV{t`0uS2tJx(<>$kwHK+Yb^c2y<s@8F1)p%@d9{QB@
zIOw8{D~(Wz%oTFry^sL6;**l=tm#L&_DQe(Eqf8A#Eaiv_uyb5=bTA%UW`HtfE}9d
z`6Gp&w$_M^fuC2Qp>}ph<o6~EDQ(-u1Ka(hdxeud&*L+eoONqg0z)w}*(yh`=xmFx
z4%5LF&Sr+_9ajc6WR%2Q64CrN!4uECqD(BD(v5H<;-e`(i%A8?2>BR4R!%kzGL@<Z
z=gwZpU)z0UQ~1o5;1vdB@pFw0AHkV|#_-Yvf_Y)wryGsrgy8k>-Y#`k9%9q1zkTXS
zl?!wTDr=1_@>(R3JAW%s!z-B?OXoGrytcvwfz7V1J{%iWQf`k2+5s;~F-MC$QOuT@
zk)lG`Oi74JiC34vWP<1J$S5z4Ix-GP;lZTrUDnhP%5{zL?@}<ko@n<bik<Fc36{)5
zc|MldgEJ*ZN$l<0#o-P;Crg>)W*gtig&0tZMiujLz(Ekp3nD9LcvkFPDT4g!<+W3m
zKzvh^TDE@D(6cb-p5UB{f-x3TldAbw6Z^Dc2VUwGihc)g`}izI#Ko9SOrF4F%BPui
zlVl@(<KuKGFN;#u(sSCuwy$GALfv4#jE{z#`xqOUXRcU;Lhhwb)+0?%vO)&oTAFks
zbuzl7bqX&;#39#%%F76#6I(CksB_~CO7l{Ri|}i6VSh>FMnFuLYgRC<z&yOBz|L9C
zZM$Z!JGCGMPGkw&(^j7DH8%Ez&c2$>Rx&g;GfHzcTvLgPB*70bj@qz?^oTwyQd+^^
zd`1b|{kb4s*pwGDwHFEJA^%dPkI^ZlQ4z~DOx!0`Stk`cbJdqKPiy>p{dFq3vgny;
z7@#|O{kaS2KD}&x>{-1Q-lqSM{n)alLY&rHtyatTlgYd|n32<=;{aX67Y(LF+O@$_
z?ckU334`4=KDlPvb*#J36RDN96km=Z0+EY1=>5LHi54jpDi5s<Lfi5m6b~}Yl($%1
zO6b|X6jGv}_j`>~1h4%WFx)fg;`-Q8spRSjDD-CHP4&k%K1-^IM8*^2CkTM2R=Ane
z6T+iU%2nR;2tUCTb8D<RwRwtBje&fmqDnnxnG=aw<2&+ID?~!j)fB_*IF!yYwxCwe
z`s7J=ziQa)!yyWUM0v)`hlP?kMJtKRpW=k%;9wO|f~aZPUSLD6qsnf7hd4#6Cw?oX
zBRO(DM4mSJa&pZ>Sz47J@|E@{N8;EVZnX&$PUY^TjO!R%`K8g<?xTF{n<VcxAB?7K
z;lGJb-S~FZ|N1@PDo<VQT?u0K=yy@dguYm6Qhc9aDBTjKG3p0Igvvd3%i@tiwNEf8
z#O=g+k&zUhz;hgyVVwo$S~|Raxo*J<d1UJ#R?n9f`U=f8mX=Jq@BuW4j7&po1t3*P
zR>H$29gSjNuhCb2qu0&TkSze)cwQh8(^km)a2k=0!W|Y&rWtaiy;<JRIr2GhBvvm<
z$#q5iH45ApW#U&maw>`P1+*}2oH7QC_R9-7$FFm-%Xu}oA@K&n)#b~cmVzxq`g9F@
zDylVo$LQ*P%C7iy9^LygqeQba;MJPa;no4wH<V%Oc0rE`3*Uv&Nex$+I1m4!P&WJE
zXxhlUR!=Fpm`8BwEYSXnl8cke{dyRf&p(XstR?G<78Vxf74#1+o54YE5`}`JeL*Z7
zsW-yb<vI%>FI$v(F<Kn4tRM;%*qX4$`NY}b;|J4I%DIMCsz##n&u{S*64-0LJ$~WG
z#3b}gJd#vou|ysWkJg;v@v`hBmCwvxY(rxma&oAH5#lkvvMnN86)qWBoAYV9hA|f=
zjO=7Un_wFHJgk!rOkRlGOjsO3O#QM=fZt>kfXNhpV2@5w>&VKAd)C&2MPwP=CYxR<
z6M~*@#Yc!brcz0+?i@PmITvOPZ`>414?^XE3x>X5_a@vNOR08`y7RDvkk4?*I`1L-
z;R3f012v-LDl^{akkQw<h7QFjBAyC~$&U-=#D?hQOC{B9B$a~LrH3=fTSmU9%MBE?
z6?4$iW+d{e8ummI3{0sD5Ou_BR}<04k@*MrDHKpQW_?W0Dihm7YdEHP5uY=h>j{y>
zA}E#RO8MbM!p4|tT1eCIhjHt+R$<&&S{0PIm9(zlzKXtdxH4C5FncRmr3mekkk|OZ
zmk72U3yh~ApWx`?S%7+ryZo6ZGgl6K0M6EO2Bn9Y{Sp4hXd&}!$go-Pkt6xof`GH?
zFL`HsF(Z#0E_?QecvJj2%uzdut?+||lW|=E)q-(_WA<Mp5Z={l$?cO^b=$Xw0hMha
zU<+MVJr4?~sfdL$dlg}4`6UCrp}W5%%Tbk6_4+}wBS?Sr&HGFdhxO%Y5Tm+$vQjj_
z>W~H=S~nuno}BANas*M7_I6M63Sl7~4FGZ=h)9-CU%dI#_S<0VZ-U^=PkY2)gtnEt
zrp9ibJeeX@n$crEAXV@CHi!OZ9cEpzKaFp*GT4cGi#jp@4IVBEu^4@0#8X+zAh)_~
zYZ!(nZTO?MmsPqo(zpO||4?j%dr4)%yXZL?Jri^McShg!R@0yi5b4p!nXe4ny3z!`
zMYG2=t(!-t1zvJ?kPqpMxP;3Ax+R>-Y~^0FC6E=#U5hb@lgG2TbXUaq3ijeniOx|h
zT3(fk?DY0fD@s57xRaW@?7=Pc1)7oJAW60N!GKrvo45)-B8@ja{4Y_I7<MNU2R|#&
zx{g$MGfvYmX$=iVNE7ue*H-8nX2-Tx#rIn2GjRsws)W2FPL>EoS)MQJp?~x+9%md5
zw<|DWyOf>7hnWBkye3}+pZa-zZp0{S<_Ntkm5uN|sq6P9_RfZ34VOF(YtQZ;KXHGH
z!4fLmbQzJAlEYzV7wU8tXAd|d{v-w@d<|CjR&h@|Riy+2=$?MK(F>o0uY#zvN>y1z
z`|^sSH6F;J4R1-=LOL-l&?6z!8Ea2qxm@<NGAcYvUZb}cCg(mqYK)EHp()cPzJ_YA
z;LD3{qYl7fyHX2p!w0jRSCRj^Qf4Wbe~yj#A!>qUMe<=GFhw}O&I`aAg@Iy2!rK3k
z^-JI@E3Pb$m#lC>9^9@FadsinleI<O`RPh3C6;2X90{*>^~?3-KSD>DpMDMs#a#}=
zn3u!<nBg!2&C(QjFh<tU+~0>u`^iH1)0|$KTL@e-&%{7A!hjAlzczUx!=|@Z51eN<
zB<98r+HQgGp>I~!-kv8Tz#0uo!MFSrLGTKK5GRDCVVy_t1R*)M0d_qOX17o2$#Ca6
zx|)~SD77o1o0qJ(os&ZlXN9*GhE-IYo|Cey>=2g9tMLgAT0+go1QB@I69ODU?qS@d
zBU8)tWM-u=bhB}f=!u<0TEZ8oH{UhpZ~7V4s_=xjAmmeY$XyWDl8ayD#88%0P-@cK
zGSC(%QOrn><o7Tg%~P;yamu*8D?gyDf<AvXV<Xw|V2r8glLAG@XlKxnjLJ9|UJ;(l
z1sA54z&o+B8j`CRTy_7kEp2^i590i9k9wV_2RaRjuxN9P;A0_3&WD@zAz2z!;t7z}
zW2aJ-*v0~0;!*@kONhpH+uAu(bctcnrgsUczS@-9Jr#K@=En8ta$_O-{7T2eN!*2M
z9cC=-(Bd<HGDJ}hZ82<&S9e7i48Kv4U?HSN`q=cBfl=cfFeBdRJfSaQ#BIwjrD_+0
z_Hol2O?nXQW?UgAiX6<a3n=JMQZbfWcG)sR@%U+uHh=~%#jAi|xH&U^3&Kb+bC+G4
zm}HvQ!B0?&*4-Zw9VNl=Tz+>HH9C{o^--IdTTK75N4_&T+n!upvTA{LYFWCp4(=f>
zW41ZdDvv)sl{DW=SoP=$??dv@FVH0ChPu8CVEzJlgP50Uap3y!Z`x_OJs26sIl3TE
zeLn3EDDBG2zIw2yxR<dZI43hVpPPsLys<#p4)Ad&yosN6grOJrGm+xkRa(UFxpO`M
z)*7g1_}twAaTKxK>WLBCkxjv+N}-&EkESqPKSj7p&|&#8X~u46e+mg=mM=P+5MuJs
z5<Nm<iaUWgm(Uoe1>escmQtl>LH8g}F44qNpkLA`_+}FyWWre7+Wc@Z2lT`Anc6C!
z{Ei(k`@MHRJvUT-DK9eTe;yl8DoM1@>-g;zJ&kySWKhB=r(&7pC`?maO_q=9dLE6s
zwA4AnXSPrwen2vVt+}6-m`r@&D@JbhY6*+-Zs+Ytn_99Zf{?z_Yp9c0TZU?YmaKjX
zlpLFDS$B(4h+kh8gGn&>2gke~Wckf))qSq&vhSD!hPq5-v=pLG)KaF$)iq{@V-)a$
zaXJs8`j^FEjsz7ZXWSn>YwRu6>aSWFmVUa8NwU_NweiR{A~nu3eS1obpC2*u5icPf
z7d<m4I}NO}kEGAeK>NyU(87|#Q^ABY3PP{hH8=Z?L?6rrYAp|xiI8TCd{H-};86ur
zM>_9)++c{$Bs)7jJ2sw&%F?ecrk7wAXHn~1*o+^mX913#G&m*za9i`00<rCJ)$>B|
z1bA%~{A;;OuUH%|ci)oP#bkaVkU;3NuiSKL7%gB>3)hg33Ddj4hOSs8?UakP6|I1Z
zQ*hC7ReTYe1*<%mRd%@iJ~b=Yr~aJ-qIdu3=F~ie#dYxK*3nnck9HgrFuzl)1R^Ge
z`z^)CnKbWzdO|Bxg<K%^L5RBMjY2a`MYOW$vq@bw@zLi>ifmc-hkjk^a;4nj4NZCf
zr?s~Li@FQ;fDr_w5kXQ|X^>d9mzEIeZUpJ>ZV(V9RYXKmLP1Kp1r!jFQbH6-X_4;y
z{_FeRdv)=C_kQ1Vd3=19;mn+wGjrz5fA{SCesY~|>0P^~pAlb5GXGWyn*56Fllk}I
zwy<7mqkH7@`CGh!0)3#**FvLuyEGK`S%qTY384oziv8#cTtC+ohDj!y0W~k_*y9l)
zqM>Y|xe%oXiHSU&GR~R$MpkTz*&<hCd)zK<niZxBe!Og3<V`1=d~&CgTH$+Q$`AGw
zjl=7A^DT}M<frJ4^tB2d-qL#kg^-s^<1f_7@OQYSKbcP-QOG#ssWg`$R<sNXvPg_x
zP95jJSkScB9OTJLKlvgsmeaq}$24`h!*9g3KGI~=1a_Wz;PvBA$4-35g$o>^`oWCm
zx;+sP=we|KjlF=rAd8!aIQ?@77gHN<S03E9w8)<S3DZTTc1;G=`!l!6#k38%taQpa
z$qlOM*;xhWv^qj5Ex4z1glsz5Q=*@=IJ2=>=;A>sw4Pk9T-pd#H#BRkD!Z2lt!ZP>
zBY`JK8$pRKJ$+d9^2T>thZIge6#F;R;Z30hhvUleVfLr;ERJ{82Nd6t6EBdqMMQYQ
z@n)}tFc*@)kD`>$ADe-A+dr3wXs$?Vym)i{UBD~f%*tu%OhMgNN9s(l!p|(N8s2qj
zDJV@zbXQXHbqWds&9$LRx>Yp?t@VBz0|Ig|pF22|Nww=Z#}9zFoMbLS1b=A1TAbCk
z3sk?`ghQidx2trYP^U2%)fhg-!dL{p{lim5`zoF*NSmIEHVeHVA~5}yg_@?8z>`_9
zK*6>}!O&1MpoLgE_g-BgPp{p?;9SS8d&2#r-K4Uzy@PNQPurGS(W83?GHII019du*
zeVty{G_EBpyNu0n8bbG(o{<!Q7}Kjs8KZk?4e{x^2<cL8=xll~f3zU4;HkB#4V<f%
z)17j_xni?W!|>+LT-Kuf#C39;;YNz9uBA<dtD+Kgj*`m}Hol@{a#QCCbLK2M%cdVm
zv73gBFP&1VG#Pp2zA{!b*0*-R-Ady6oZW-l%|vf(Nb;qy50pYi3l2?v8XlfEQWyT>
z$-&pTCwm8U=cEv)-=V;>0^~a~FVsQg=tYHf`ti6#KWi`7Pdwdbngb&rZ%I83xAPO?
z$TEXLZN0pq%WFU1dF~rzdV;CB%d^9ur$4{rG)MGae5IuG$1`IUannwwoi`su?JIwr
zuIy;m%pHjyLNA?kUnY-Ix!U(iVHQMizTJP-WOZGBrnY(hK|{Yc)wk@`x{R@gpuY6&
zt9SG6Ivzckk&O&UZ6+AsU~~!&@XB2omVVRdbGi*(XCp^8&z{WHo3SC6eB7+)TnNSa
z<%-GUhCM5d@>r&aceJ1NUhYrWj7@#|W5dbik@(mrao8a9-26p14|mFmHvzlky)-gj
zK1So7dpB=>6_OOGH4b*mww(N+sQ0<}Eq(Rmks;rUh~y8+gDd70?9ZGxHz=0dpQ;9#
zw}^=?2b+7jiaUw;(qwxg8n{5BLOiUm3<huM-HzZjAq*k!*U4dxFs0);nr<CUEF9?j
zvIY|XjUJm(NyQ5nk(l82U&Cn}-yYYEK0Nx75SguH`AzwAM4BrFmBbUV^GzWWis^78
z$A;l=zRuxQEBw86LUiwIBakx3=xbZSy(>5BQ53zf&z@vs$7SEGaZJvwZTHiz#uH}5
zmFzerTDeGgI$d!7rc?j9hO7Z^yxSv2gxVV{?D4W-$TVxn^OCG*VF`2T)LJW($`#_n
zd2Z4ILseND4y$i{%7xh#MK{b-hU@T`>EgecT_58|47M<nQ>}zaQG1iLU!US<4|hH6
z;4$pvvkT)|(hFt@i+n%A-|g4yxOGo!H9=7fhT8uAT6~h6P#3<p@4kfJUr?Dog3@?4
z*0mh=>eNTlIIC7(8j7#fTv%xnS&KgS9+mg)cC)lS!A)gdW7Q!2PD$rY`Th&MIi6Eb
zYN!e>6+@DSNcRv9UzQkFX*ur^J&E8&eyn$0+tTSBZ5ev{^L@H$)oJzK`p<%_6SKq8
z)83t=_iuFqPVhX##stm#@smdT43a5O8JUJTe$i4vdlET<CT3;h?tz52`jZ~F>!wbb
zU%3y_O!wVjbxF4}o{YPu$lsU9>$~%zT*gehDvY>edph9j$vt&C!v~Wt)J)3M>G#l_
z5)U`Uf6BaNnPa8ZfEMoO&K-d!wed8)WSJaU_$wY;458>kj8jb3Or(e;{92vlHc>=i
z2Q%sj4$+ri;kjmxbjN+3k2w`MqX+d^?izpA7gKw;657UOomU%2l>6TAZJqhhBecY+
zDo^Qw_lo}Igs_^_@&pBwBdO>dw>$CZk!ah-BpKV&Z;t*c730N2sv|??cENWzBuY)M
zGH>Brr+;o*ymIy4GuGn@giMCpDzRu13b!{jbfY)!Vf5Go0vArQFr9a@Hp~*pbf_0q
zb=p;Kc9*Gx?a<)nOW<kt)Ey(RB|WFrcTYAKg+^goL~<uTXe<xy*oH8S+$pYVyWDJK
zc+c?5D^}OXIJ=+i<~=%x^Go8I*<Q?@BMCZ8?YS_;nA&}$rkgx{?`~w7d=0&D;BjCd
z+gkYUW@P-t#+r&ab60#6rChFvc79D`@DH0tyahplTE~$9kD<GjxD|}GUlo$~>F%36
zM;4lGx9}pqwJ^;)c)Nai<2g7xbzGpkBIZRuW;X_PVryzNBU}|HtBs81H9D8!dgFR*
z9p?`}jcSn*<>1Mn+x6he*NDd~h7XOO#_=cXJ)#nS5HSC7;NZ=`9nC;bwn=kvst~(_
zeE#L+IQ`eYje)O<f4n{FOA{>KB2$Vd{{H?#8xc=r5Bl3UA(vqZ-ofx>DW2){TDZ@3
zQs%D-du6gAicVmbsk=ur3H<S;wia2Y1lB^|8E$69bKP>JX!feOUv@ex^bMwx)rdsh
zye@@*)Oo;>pA%hs^cX)`#GxjB|1n-*hg-LJ<MTs%C!OagxMFh505n{NkNtCAC_$cY
zmuThlO1Xz$`XaR!)~>z|H}>)wog0jKyF?eH<>;nPl^H>0E7hSkoo&6#(3^HCRaD=T
zUKDp%MmoqEk8sSczd&1)wkkHJhqB<<|LHDSifhWqT@n7;0-Hz*)~Xs1Rp$QfTkj6>
z-i(FPQk6{U1ng|GTxD_d3W_o&QUZXuNf;&}Hh4reFVb(c<V9}ICZ~-sD2ce*d_GK<
zXx5%5jZL(=uC1@A9$C3M{GF!!TJj-<Ud#}#%A*_-1C8{t-O}8dM^6aNZ_Xh18-FTO
z-BoQsM<{-8Exb{$81E$(@>W%pxu-msl#niJb2DN`+$AMw4t79p7FgrG9i+ItTClfc
z!ZzIgcw}sIBCw41kxTn`!zS@KRIF9d2UY(R_lf$;v~a&*$>x(Hakf5Zo$c84xlsx6
z&8OvF><$-<vgA~DZZ(Nf)*PxGt&5$j$u}0)#=o1K#uOM)ETgNnlea)@lT{!~BY!`u
zB4_IpoMv_X<EPrw4-0(qJm0lR@f12&bTgD!hx?wc!<^fd?(7AN>cp^}y-<K@`SHKG
zPw?M0TKVTf0j8xoKLmivKm*-b5h&z;w7x(BZ7TlleF0GaxKe-sE)o3Kl>#tuap3pf
z7yLrN=zqIk08LH*()~j3-zFL`0NeThUn>k#OuLJ}wYvE4E)x89h2X#KVDVf33hd4m
z|1_ugw=cy%jVu0XNAZ8sgaY!b=gM!l0{$WVe{Mp7gbP9cxE0{-aY^^<?ghCGN?dlY
za1Lo0`_=G%MJW>bg|^$I?JsD*$N48X&=l+z2<XaJeXEa+C8=t;4G!=3SC%4@@31O&
z?n;@7+x44Rt#>P%SUFig*}QV4_aprc=%#32iI_RT`X{<OEw^LhQI8ms#H=-YryjEj
zy}>JA=p^;)qB|gy*b<036mj+;OPFhv3ei1kz9#7VLg^=YCbE%0RXM!2gi26|PEpG1
za?d@|iS6-1{qoN_))&g-*xBclZlQu(4mGnQG*6E*^6kHu#k1!qr^Pj0nAZ3N)%gC&
zt%_MbcFtOrOjT7Z6|o(EczXCe_}232>c;u&g@%b$!hy=|U%Nf^f0QF<9A=!UW|+rQ
zX&YtfE-}=@1^9vt-|n=ov5BxgV$<|`v0_ja&{ofqV%3-IZ!;dSekWo-di?bE`XGlQ
z(KJ76j8DqQ4JEd!ORJPqtsZ8C>jD?AcY|2(@7_ymRWhS3P0>^C=G>vQzlUx$Hscpc
z0(w%g4PV;4Pu7ZS##Z`ZM23%53b+YCagV>%jP<delmo{Ts+LxZX|g-)+^mUos!AYE
zs%!Uk?|;5`EQ53LCKJ0c*GMZn>%H5QOm`Fu-$U7qS*M9QxGjz#R=ZDGj;4>&8`%RE
zuWo`i@fExMruw+vKQx`mFXa)08W+>kqE~jVtu{hnC$Z~^mvodDo}p~B_J)#-@k_2;
zpkq|Kh=RUe-li}?mYG;Heo^J(zhFjKi!O0{i{fFTeVH=a(byJvv74Bj*qG9Rj5(bN
zU2EMH!}I>d(Pze#3DkOfKJv}HrR0b647h?Z;tHx8kcGZ)%PuMHJdM!EH?5r(&(kj+
z6Sr!2m}?mck-8tQR^>Zn5<E5}7A=|wCE!8zjHxX&o;{Xq!*|{9>S53zjXhyAS}=Q;
z{CWn(YpRmD-F1Qz>=CBH5m}{gx<KskGJ8_bYla}%i1cReSM|w?C$!ADy)8CYx5J9w
z8t5~8OIN>A@B2Zg!iHg$L1`exyKBF0x6P>Zl*jx&!3=J!y7}Ov(EH{6g5CawK{c;4
zH}<wk1Xai?@IGmSXuDwYuc((O4cbX7<h>Vjqb6%KTos*Tck5F`O*&(@kg?~s7;Y{f
z@Nlo?+fg}~x8Oh6!;Py?_#|E*T{mmX?NrQ#=RBxeZy*xZWa7_I>YI17yDo=cI}8T;
zXqjIQ+-ECdn)0f&io8P_KpeX!d<a?i=&OAz>lruYbyl+>PS_N<sp3t}p3D%Nv3z`a
zX&!~i7W3BYpNVZd<{?MZ3lFuYz7S@Y<+J(vYm+FmJ0&&TNjGfC^T)N%*lUUO;1(fn
z?aJOCs4BUBGO4_A{5);Kxbd6IiRkK5VlUUE_`c6!ZJTIv$e1Pz%Nt(b_7+OsAZsHX
zYS8XWCNcl&sr^pF!BY1zGO>_Uu&C;Y;;GMLSDH67NYTVN^XhkjO6L?gbZp#0sXBUa
zN1tcW`BQ<^siGtg)e+C|h-8}4O#$PZqsYg39xYiv^FQFw?mNCA<Z5x{n%s*tQR7lE
ze$_;59HRL!;vOCU^HlN`)Ba0M>x@|wmb%Hj%EmmD?xB1a)rsyUl%u?JEuyC--|%(a
zyXZbL+hj6R$hZA%cl@PYj%6LM<l99Tfg{Q{r)z4bUmpZ^eyGwUlSp>pB*8I?ZYi9n
z*S8VKAR4Q2koM)gK*;#%vRni+`Djud$%Dn(;;vx?Du10>+xz&a^PE_*XpqMO=>h%L
zW>~^q6LXVKk6%d=Fk4m$|Co^Dx$6~-x_mUgb$cPwaDI{wN1jSRw$S9GAG4iVOV8-q
zno*pJ3pwe{lyX(hVMhX%bFew^#^`HP!;y`_>T|xJlDw+cxox8y7pR&M{WsLj_!5gj
z(amhG>?;meubsO<tUTLnR`#sWg(onn{29j=!Icl5a^J_@`U!1Fo;B`_v?x{|#J&C8
z^x|@sxNVFcebzgf!Mzej&M*9x^zw>`%xXlqX7UlKJ_2+JKla#L^_`GzvAVJ{za^Q^
zH@Zdst%S?%YvEJKFKi4#KeF0q3+M-=Q;-Jb+(x-OLrR9nf^XZ*=1(4U7v>o`HQ0nr
zUy@wu;3*UkSSdM)vb%fYl>K3W;G4L4W2wQ9eixEKEBK47e$c>1qd~7H_eF#6m#+<y
zY#GttL~t^cybXwJeAVy9tm+<=0#mYkOed=qaZVAJ)@RYXffN<=$#(Dl%YxPGKh$m|
z5TZh~tu;}yDn+ypVpq!M+8d&_Qc2}+aME0%DZj;(kkL#Zp6|D5m;dRtK|9U9u0ate
z7wDQI_1gfPR>r*9yd*TQ-4;cSQ*nt?(Nj-Z&BA@vuXpp|Q@o<~DWk#lvU=wku7}o+
zs0UuOa{o$}*skD0ii*J(PU^baCL2WtQI3-PP)m_3HQIvj$7WzUIeoA^uHjER`8NJ*
zPRfv^y_VVy4ltcI4FS1;#uANAe|f=1!?_2pFIR)qG8eg1dwXT0pE~J;zPIDYmCaO|
zZ<BhGRqVDXmXKkDazA~VX?^O;TWs>}{8Hx=V&~Dt_PuywUniYOYQdbR`+SyfZg8FB
z&4kT=Srbgt-?#cWqkWi-;MA4zl+$?c<xh2;!50Ld?T;HQUTqU44Kx)I`_|Pwvc@<r
zCYr!s8dWA6McS-=yL~h5aEvhZ<I{Db?3lih{@2C9ES`3|X)z_u?k@F5*Zbt@+Sf^I
zqe}GTk-W5r6m~e=>LMP9!o!df6`I0}g+n}+5OE0=FG`bpjRyjxcP^>E{mdfv!tYRU
z_!hoy^Ou-*ycIse39me*zGR$~8Lp{`6#6yx#z)6j3r=Vg=qD*YJH57n`DH7-iypgF
zC!(L6t6?9)L>JnU!?jvAoaq<#DQ}>lCW_sYSna_bV%J+HipSnbJ{s@G`OQk{ToM`N
z?i1l8B>ItO2xYtu7~FlUT5p=1B(&TbA}QG|Tq2+o>H+#V{|Z8$naecTB8=x<t1|S&
z<h9#ap3braFNJMz>Uze;ZI8o9^elNl4io3gFRnC8=+|L1cV?z<)jpzxzpyD9m1q_4
zoQ4uBd6i#svk`yqK5i?ai{gz7t3O;!YIJj!+{N2lf0x-zeE>$ZrloA;j!+H>`#-!A
zvN1Zy=JTvJisrsmM>%;h2cB5@yPXx4bUtmGIzBxV-(dCH=|a!w=6Co-JEu3nFE55j
z74?KfW)UbjR&CrA^@~oZR!G1Nw+Kjn{d0Jdo{s3)H~-!Phw}jt7e$5Sywaw!BWI+~
zrAcV_Q&T}a!{_5Y#NHi0GnsvQBJlZLSg*A6h^(%OH8589o@#18Jjf_I+-+CNtR`yQ
zqDp0JPunPHE;9*F)(`j9;^s}$tth_GNK*C4mNT||ZZu<R>vXP?Y|xnCiiNw?EjyJr
zTA->AU9AmN$;$ZDw}US*lv`;lK;+0K22-Dm_Z-tdO_U@Vypd>JNRr55E7#bqD7a(h
z^-&`A0&&Asd-c|{uQ6U>(#`xT8<{-A=wVqV_d<Q`kc@Yl?pt?@I!1?4d+^jgTgmDk
zdaFh}m$b~+nZ-0XDPwkF&ds^IlLeEIFRdj?J#SSxDtX5CMXOr{2qBc77F@(qijSsB
zQdwg(i^elQZGdfi7oEF;6DKAKdYkx=D2oIkvu%wlV9vaRN?{PPgDl%zqP9=5FQ0Tx
zG_-#8JpRt7QWsJYF)_4$u@-Kzg1NU({Zv=b9+4#vEV&2Yj>Njapd@Kkv+||3jH%&d
z7MlA!zrp8=f%{gfBmvuK4m~TiP(BD)ut-m5LjTsuPch~L%5ke|2Hx`Pta@dPjSaxJ
z_(xJ62Fg4}phHb2kb@@!>xx?Q`)}q1GI)9q&6nP-iyK(n*Kcdb%^uTp;De2LUJjFu
zHcY>Au@+3-6Lg7WRpql}+U~$<B8#cPPXxzYWarPOw&xXLoN5+sDBf<b@^{M(7dBBY
zqESV00?OxojX<5c96u^0ogOo+sV=RnE;A_lNf?ktqFgA6m#)2vdR1gZ%DeBo_meU#
zo&0!&H&-Y7@oY{PHRJ)sV~!=iz>8o;etn4#ham;KriQBYufuQyL#y<Df~j#n87{rb
zqpmHZXya14CD++EXOiS!x-uJLp`9mbjw5ORS^@Q*_{s|@CWoJ0pI#Hd9+s2F(&Wq$
z&4v`5BaVJ6;K|LWAUQXu=m!1JrmWnCPfL(j_oS=6xIA`&My0cuN*=m^Q#mx>M1RGD
z=6Fe-pvQNK@I5JEsUV$$Uo)XXm{FQ}Ki%Msqxi5FF?3IbPg4)`=O_7Un2PU`IImn8
zsd3VUF_b^?CccaQ;XlP&6kBeX{Nh#-yD8tR+bku@Uu$jq24Ac3iVG-&;2B5d<Sj{k
zH>qD$f6ubzmAZyL0ihI5@!i*MO~}~0-aekNh^acvh-7s8dEXxLh+@6=ewIxSt7LJv
z+pusE%?@$b`$LIsN{Vx`{)?yWNoj+N^I0!Tqxn@dFD~HDnmJpHy&B*qYCTtKkeZRi
zoRJ`qK)mOcNd4hKJFB-s6b*tNw9k4`qFidkhyG>z?xc7}X7RiG+tn@dWkLm<a5=uI
z=rrPz$GQUE-0KeJRN^N%jfo`kaWg-zxa6OIApE2yk5D)h(r)j?TX7>_d_u0kaU&b1
z-C`3!KvR7@DcDrXR@Jt#iwilrx%=~_;{<8iO9lp!55nj4wO>85B{N8Sq@hUWQ*2Rn
zt*LI@(D-w3p69h^_g`c!+MFyyFHVdxIs~lId-c=@yM1SQqY~61WfITLYJ-2tk*b_v
zYsl>Zo|f?a8#eumG{U9Ey}s_@O1_4V>J`JtZVMVeDXeYNla4MNs)Fo68sj#<+@u(I
zm-T*N{-Qs-e8Z-RacPTq*X8)yoXkav+Q!@Efd-TBsNyKO7CyhiH8N>YV*+g~&?$x8
z<0nqM@PIh6d}QpriBp82x^{;DDrt)c>C;;q=N<1oqu$SeqqZb*HewHs(js5C<<~{5
z=q>jq^qW<X^%#xPd(IxL&#{zfZj2ESb*y)W%jpe>jd;#eQ}9P1zr+&gGT&@ox?|N8
ztJAC4o&WR54JWSAFF|*r-`LoBZ85U7VB3=i1hzwc`TR1_Y#8l$AD116zP-LV4{3HK
zz<NfTJSx{yX)E;UP|2pk2lJ0L4=GTt3!aG%u!yOkpJmh3Iur_g#{T#gA3vZ&Y1Ck!
z`uNOSY+*K$358XPx!HdGicQ9CHV4FWx3<HABT09jIr2<PqYB$u#C|}Mgj4eUuBGa)
zj|Q&AjHVgX6DmuS^lQNE_mi(sIEyXR?eI|Kw)id&m#m7T@H?V3<h>M(r4)E+GU&LD
zBqv9y!}+&Pfg9~d3MB_a@hU9oAB;&aw+7Vs9ei`N!Id<Zhi#A2gDKnJhJl%hqkPEs
z=DH`;!Ra@t4mT4<=Rsx?&zK>RQF^6tFMd!GQw<LNL`FDN{4k2)V7fd`<mt=TL~UCA
z@y|?+Iq(|&W5-?ImBglZo!qUovET`|(`YqqPRwV**Gc$dmR;zTKr_-w{9F!1N#agr
z2=#AzvyP<u+EY)q3cea<>1@S%X9$P3YJv&ZB44xMt<lFH+(lh^_`ES5u9n)q`j&D5
zW9fmVM|eaHgHONV<(GH(7E0`##(9lI>9Tzn3~~`3kLk@<OaxteY5Ckk!q0amJ2=-8
zZ+H>62)`nfwY>bbIpqyEJNVFDr!|h6l|?588)p=WILB$78>RBp)k`GBW4%?n)FMl+
z#0zSE9F=dgv|h7>&oH4LC$mOrN8n!ddJ0RSSmdsw5-$l6iBHraK=oCLhL;PlixCqa
zu?R;5#WyDA5*n0urK>;DqKgz-uAcmkuIJV0v(^|j3$Fz+-b^doIHJG0cX-b2cqmMw
zC4?&@$kR5suh3xpd6p8=<zexwuT<sqbo>pt(ho~7JP4I&+FOZ^WNwtxlqY+Qdm6`_
z>HLM$fonu9Cc>|JXO~S5x;D#N{XXDm>Ll*NkXL+ts;<HCPz-Hc^TZ^nAEdrf)IazR
zAMfggws@5(mU9+NO>a)yYWqsm=x%V&9K2r6K;7vv+rcxGn^L=!y1vI%L)RR^o+|po
z`CfTI(AF~=QI?u^ye){{aLrWrl<@V4=^C?fx7>q-4k@CS*;$RRF98i_c51euA2ZAF
zQt^@Ys#gjG1bK=a6R2Ii9O5q*pUVfeFt5b%DZ5;V(Z4~iMX|ay<+_tX7nd@xagpV2
zdlA7*86IuW;g8^~^$FvT9%5ypTM-GUiEGbdAzv1*F<6^EJj|Mh4XxeU7gLk=vKnl=
zTS#_&V18rrnn(EX<tHo!U*g)jn})S4c@uy}LNnjbKeK`@Y*gZA+)-lYxjk;~`L>p$
zC@mu`$m7_I5p;_Kl21;^Aw&~umgDc5p5%(B2oak;2(79s5m-CX`ySNV+}$SHux!Or
zHsiOU(icI{i>Io%_;K#Z-7@pcq$8&x9_pAWPAgA)hjyt-P5Y#&wCgW=bWUx3M_<qG
zKe|8ulVxd8Pbh$-CnDmfG&s&(mV_&dPze<l5w%E5SHux#B`LlVbvo17Q~%LkDzWpK
z?EY|K(1E|;_ZcyXr}+BIh3v5k&nfS-6Q`1B@kW;SPkTL9uYx2b+wKIDuP*ki&de^F
zZ`W{H$Kd-lNWI!(RUQ|wh+`uk$O$!qjHiu`1XrwgqSHgfTY5WYU$Q5WFxVBmT4Hpw
zg9faUg*$HDjCS@V^&>Yq<mGnZNxR8aCNd>%MSjgBb8sV+x`Pjwi+(Rt@_~h7^3l$#
z?N!;jPXZ1v9E4TVx%&9s?x%H~G;$<^qKxQE1BV{<8wS4<sj3Z0vKPNoR$3+eDvG!f
zb*0{;vP)b&?FG^5(us*!SmCv!xP8Gq{0UygQdyHFaj&0x*|7RMy2-Oj5ND<ydgFsb
zMEjc0#NDxG;h4E6iv(9cPKTD08NnQLZZtp*8|0(Oir@b{4VAVg_?bzEJm$`^;h*RG
z;pIL|p0933sm?q>66&}y@Nq<TW=o21f#^9yETv&mCdW?6SE^3+k3uLs0=SQ=-Woxf
z{_=!5-|*B|_ub```Wvi$?^#IS;V~6C+6Sd_ev5pU@B&iF(+AS9zDcpLvF#Stl{s_1
zSSFOMmhLXsWc!NM?(?txWin2g0gCSW#_wiS)HDZnEwqm77bY5GGJtm%s!kVe!VF>-
zwLrZA-Yf?)bxC1k9-9O(f(MH44xKB9q^FrZ)W;cDJ~67e!5B>jsP~PL9c#s`U+=S`
z^6y<G!;kFzGEw~g&BZO?&ZBSYE}fUhp3zTMFL;cgVD^ttmhP}iU#==@^NJ%b6*Z37
z@{}g3a~5>sD&>4(>CIX_9J#zpII7|UXT1`az)QS-!)}Y1&G@)xJ-uOWplDmdXnkF7
z;R<skTepG9Rl~MIW5;CNnb3xYck-j^uq<@S0yvxOw)@nb;ZJuI-@FIj3yd7JlEx?Y
z5uToUT)t2W+Ze2kE>JT1ma3k1JDohFNg^b=RCJfT<ek*>0lP}!SZ-Y&B*Xp}Vo!0-
zh+Z9wO26eH)V#hjqMQ*`BUirk$jyD|k;C}-%tGLgk59iw=2~Az`@&uxbPRi@^owlz
z%$uf;Gx5+aTs|D%*_leK!db1*fs-ecE&JYIfb(%4sd|_#I(<UEk0_2C9+*!L^sAzI
zz(Jm?_bkdd?z*$aE7+|!9)gRSsr%!aFP+jG#9e^LX<2-Q)N?dnjqF6Ic+9q0Gn=Cl
z40wxwN{qXCKd^QOyRIB&+Xm0?KfBCpmG&`irJmJOC5V8S(f9r(Y1Q}2?l>g09#5X6
zmQKCkX*-!Gi?Dk?erKDhg6i1gUOL(@Dw!mXhBjcX`DI7j3BPc|Gw$fw;f85nS~&$*
zchk#_Nw(%>G0T>I`Y!iQ8dkJSugeL=q5U4x5+5wMR>m;)nRbdb@m^$9DX!Dm-6Li<
zF^V+8;YxT=K1Xksi6fKs`Qu=<K(XKWkj^(qM>&HG;ZC^2Sj(+OPv<$}i$toVO)YOm
z-gqy{>APzV<aKx3Tts~AA;L46aNKK{M`_<0(E7AQ!qGR=PZ5=A(u}k9&Lj*s<79_T
zgyR~NqlmNMdF_k3Ql0`tB5}jI$(rEu<K@Dc!KLLJ6H{}A&#0Gu6z|e+c`skQx<Ln9
zL)+QxIa}OSUt`fLU8{@?Yb4zhZ+v)M(X`8llJl~HbL6hOLnFL=Ywyi>y^n5UvY5+R
z6~3ciGb4!SU~oaqitvD8_@!!?l?UB1-p|cr^tm>zcko6^xU>+ts<Ux+@@}2e!FBRp
zRff{ZM!E_Snw|$&s5wY9Wj^sqDpWj?itd~y(I98aaR?^hQCE>tv|2?XgF*~XNi{b0
zWD$)9*02r=%~7>1i)$U616}Tn!lO$pso(FDgyYsKy`0_H*T}_vz)&=_;t;V+-jPjg
zkV=M#@9ZkAQzpMXV1N>Cc*RYsUq>p<(0dK4AKO$X+^7t{5}Pi-B&-M{Zu}T>>6w9J
zvm!Wo_VUo6k0^XB@<;W`y^c8LnJeQNjA<L>`{IgeF)7xiSF1{#rEf2sZu9pQ?^#b!
zgTgXOp&yag>0Ixh8_i6J{iMHd_!Jx#5gcpXnHLrmWOCA>($l5TK2Ydf+&0kNI<N)z
z_=FRtB9$<L$F?MPq89_kL;2|Gx^7)bUW-rc7UA=IyQW~WI<)=nWIJX~ZtX3b#9q==
zu0v{(b+#zGbn1ubpoK**xTmJXSR+Le9x67Rq&iR{;ibGa1%i2x690Xs<<zR0Yf4r;
z6V6QUOz6v|j641+!E%)*D>h4;xesh#uJEkl;}_>xla-jVaiV<KXL|x|#JHT{68_~2
zdO`Bymxmnm*@HRgx#vr?m^z3EF7nq3ZaraDF?yIoY8W$W{QV?`)JXsE)|c$E+iF|_
z@!Ll0g9t70m56I7ns_@#fx19n!kW8ZMtZqgtdj0kBC9iBHBa;Az3e7W=+U?^@nVc=
zdDbh2rl2K@aM8e*-8r=Xwicr$L2>J8YHiodqfjFOHO9fOMul(O;`od+^`0{~?gZ8y
zkcTmEcE_g^@Obr(8+{?iyZ_dak1kZgd}?IwoJ;KC@z?szOVf#2TH`BQF>JQ>yo0Gb
z*Tl$ZaeVz<J`0D6tFq;mu~9e>=|@hhlgpideu^_Qc~vQ_G<b{1YWkc<$NH1Y6dOaf
zkA4!+;B>KnOJ#2*03qpe>LcFEq{w_(L@SbK(J-|{byuiO6cZ<BR#z@oUvd$9d8A^w
zZK>*zUqKBES(<L?I;;sy+$BDIb*JSE`>JSk3A-oZvAH)+z@9Hb?^Wca-vOk)sA*`F
ztOM#ubTJa2NZnRT%iyua^H%mb(oiY$qDQ0w2l^`RGm$MI^~47mX_wr=VhsKiP2fsM
zk<@Yro<$u>;##q$i~oX$yeI8;p7SKp9>X{JA7g_u21o0+j2E5lYnhq$wtB0eA3jI6
z-(}wn=-GZ7kwmw}oM+l+)v~@tU<I?E33~{yWlZjG`x-qAWhp(FG?<I$tJouE<S@`*
zV`^xtC=1Z`7?^hwniNDHWl~v-ahqw6nPuS)k8;QIte;-*XBBxioT^_+xXgaheBYns
zyp**pgJ6NtbTbc1E*$^+(@6#+g4#9Dngz4o+gh|VpPwukuUv6d=NFsh&R!SiJN+8J
zLt0{$eS5uqnW8E)1kI9NjpN4{z4bF!&m`<BNo0t=L`kCvo0vRD&*Wk^axIicqNOy~
zXhy1SneqK@K*Lpk*&_ko?b}(aVtvEm2`0w7;>BVrL)(=;hk+W7E!A4Si;;9TMehbi
zo=MGhpoZOGxmsV4TB`?xtr7Zs<w32^GyZcuAHQCU#CwIyP~t5f?!Gd6i-P!wCP<#}
z^;C^{quAu-eV^@p?-#}6b>L5o{*G`8{MJGflFOl_)~~Js-OQxEnm4TXuMIh~9J%pt
zcTdj`mZ1<#VR~&+lqv!g6IEtyahoQ<r=;Hxy~bzDm*ZEW>?D!C<=OKP!L@I*>Bsif
z7VJ$d%F2{aKH8JqHX|xnnvMMaD$3Y50(2r6!OfF<_JjC;kUf9@DE>b{KmQ9ZKu=le
zKd=IX0086v{Fqi$!UsSu0KOX!GPAU{brR!R1zPrkY%RpNbm7WiWfy5n8{3<HZkC#U
zDq7}#_U32{E(vjBQ3+EEXERHFA5#~8t6v}m?jQh+LX1^fL+J)9W`K{dkE4qtfISNG
zaddEU7xoe3`o$s)yvC3Pxj?^$c-V_^=_#v$Je-{!>}@?j5COD+5Wf(V4`k&AfM$3*
zyV-+;1Q1++NH+^BVGWrZ{|W?t6XUY+@Nf|p6!iA?7Vw4&IJ;R33Zc<xK`=xR0^tWn
z@Vomud6@d}JGrv~^Zio9R_{OAoZJO|=_CN)PYBxT2?_~-1^;6r%>4okQkSi>69_Z0
zshP8<hZrmCzfxR&oBa<lz#jlPP{2Ikm9UzdvxO%BgCWKxr=|pwvvGF!_(v=N-6a5q
z2ncZr{%hF(Fdwj(e^(puz`uHn0%L@g0W>KqUl{-|LL35y!1%!selSW40u_d#g&{%)
zqJmh107n5_(!by|{s*q#2K~n6?4|{HPTbnf*~$v!1;AZk7EDM00u=!NGubb;e@BT5
zVwUnZQ~#I7o4P0~|G%5>=!gj@%s62gXLC<S0MbKVMvTkT)7C;5YHBHDVFg9=TUlD6
z`Gtgl{{Y-HFh9x?iH0D}&}cB){D12Q3-kZf!^P9h;aA96m<s}sCzvVS0apkCiddKn
zTRFQqntA|1@8SXg3z=f#NDzn!E^$%dj~=!F7>f9>fWGeF@y`nfTTEyPJD56Ii*fnz
zTUc6|dOCP;iEBIk8g22<+Bw*Y|MTJ(pWuJV`pe4xA^{r)SY*Nf+>YYJp#P(v|2skd
zm4kp*C1PCOm<)5KeaUa&QU9^4xc{3?#RJ^x!9+B$=9rk~mJ!D61uz7Rf<R$tU>ktJ
zT);nI7_eRbhY|mVFZbU9oJU;z-`*-dZkAR6WDx`mC&q-<KR+M@91ewptU$kL07fJP
zgY%5}0Xh9kLqi}K<jg;42rvo>;8g!XgTufWP|n|J!0TTa?|;&u5Db9!?=%2t@)!Q}
zA2bvMEd+qC{y{?kFigOeu0Lo<7y^TJ{Ra&JMM3~nr9WwKBnBn$PZ|K5jV%uj`-N2h
z`#3Nd3PED&3<e{R0Os2nc^I&q-+2MRZ78-b7+wsh?(gHk0P;5mi~DyP;E%KR!eKA~
zlj@Ig7+wsN{qMYBAt)SyMZ?JZi+&hXtuwqREZe{UGZJXT^7|YB3I3P$Lt>yGe;)_%
z{<^O9Ck>6l0L%YQ!^r!Keke57ykOu2#Xws9&I^V>p?~oQ;;epfFbr#5FuZ5{0ic8d
zsAGT30qBP~s~=nlh3yZ37XwlHhkj7NHY^%uN&liB6pFPjU??yWE3UwRdx2|-f6RfA
z_ZR(O7*w`Db%7%gXXK$V*Bt*Chne*+`XPj{{Q*S_oskCv%)qh(BkwQzA+h5Wa1a#e
z-SmepU?A!-Sogo%0mwuDML#qc%MJ`L97`84fYSCC{m^IiLxBIrdqzJv6am57GnlYH
zs~?~=wm$$~46yp|wt)cvRRD|b4;n_^U-W}QvBm+s2qCPs0>e>IFjm|H@`V1PAM8vn
z0eG=(17pqrta&l={-PfOg6$6k7>&8l`G>s-Ajq+3fIP@w^g|-CeF^Yl@O}T3hk#(`
zFpRvv=y&Fv0WvWZjO`Bu`ivcbyuX|uNH830UBCb@wjE$31P#U7gBW>d^+Q6i{f6N^
zGY4=Q!O!~lFXspHjLu+y_e_pJ0rd!$9e{o?>|87aN5am;Gr)VsM<@uU()hzifIK(`
z`SW+b0rJkA=Ri>e#~@z+J`Rim4(hY^A}|=WzmEgtA+h%nh8J5GFbZe`hm~^x{Sa_$
z8XSp+Vx0>BFB*)s_kjq9oXsx~B(^Vw;3)8!{RZ%2P%eMB1B`~Cu+LRMKjfKO3Jz3|
zSZj*mJ#!wR;cx&<_>VaNc_{3-2lRvfg%>yp|KtS{6Y_8J&YYoe6#PssL8DOE@`QlW
zQ3%WDfPQCkJD?u|JJv9~*f~)M*p=Apf{_Qu-h*&J7i=29dnOJ5OlYAq>jwn`-xBz9
zO@S<qz>a%>7dwW8grJBsx&UeDOiqNOg|KTM3@-}H=R&}VjDdXrJ%)sUJb5N2;b;hU
zF2V3($D|Mh$YR)YU~=}E{egx7-;(%qUI-X@MrR20FXuTFa%N8hOMfP>0la7Y0YN~|
z?hh#BOic(>Vc2Jn5WtHa<3dm{kaV!@KmaujHVvp)&(uu-?^$^;<Qdxlc?j&af&=dk
zVaF8|hQ!WSLQv$HIs))7@bH4IGZ3cOaR59Xof!uMpRMHqdDwLwa7aT?*!u(EJ@ae@
zJgS|U7jO}F?Fh&_lZ%0;9vF5_2ox%SdDyl=&&~^!YiIH}z>8hq3jvy(IV%uA4Trr}
z2+V1VH7~%6{Y(cu34zbV1|ScKy+453;>?}~s#EOq7sz10u<HNZzd&J(9e)VmdFIR<
zaKssZ0B<4v?l%uNQvlu7jaXC^B&ccYXNh@Z03@j4?Cb#oRsf^{5|nqcas~mCK^nl9
zmt;VOqEcWf=ndp`*&8xaU};(4QR6yX8hisP3)Gb|Xek&>{C^&Cix}wZ>F#0b=JD(8
R2+T5~QN$b^vZ^<T{~rWz3HJa1

literal 0
HcmV?d00001

diff --git a/support/dist-docs-branch-23.06/ovn-northd.8.txt b/support/dist-docs-branch-23.06/ovn-northd.8.txt
new file mode 100644
index 00000000..51b3aa1b
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-northd.8.txt
@@ -0,0 +1,3723 @@
+ovn-northd(8)                     OVN Manual                     ovn-northd(8)
+
+NAME
+       ovn-northd  and ovn-northd-ddlog - Open Virtual Network central control
+       daemon
+
+SYNOPSIS
+       ovn-northd [options]
+
+DESCRIPTION
+       ovn-northd is a centralized  daemon  responsible  for  translating  the
+       high-level  OVN  configuration into logical configuration consumable by
+       daemons such as ovn-controller. It translates the logical network  con‐
+       figuration  in  terms  of conventional network concepts, taken from the
+       OVN Northbound Database (see ovn-nb(5)), into logical datapath flows in
+       the OVN Southbound Database (see ovn-sb(5)) below it.
+
+       ovn-northd is implemented in C. ovn-northd-ddlog is a compatible imple‐
+       mentation written in DDlog, a language for  incremental  database  pro‐
+       cessing.  This documentation applies to both implementations, with dif‐
+       ferences indicated where relevant.
+
+OPTIONS
+       --ovnnb-db=database
+              The OVSDB database containing the OVN  Northbound  Database.  If
+              the  OVN_NB_DB environment variable is set, its value is used as
+              the default. Otherwise, the default is unix:/ovnnb_db.sock.
+
+       --ovnsb-db=database
+              The OVSDB database containing the OVN  Southbound  Database.  If
+              the  OVN_SB_DB environment variable is set, its value is used as
+              the default. Otherwise, the default is unix:/ovnsb_db.sock.
+
+       --ddlog-record=file
+              This option is for ovn-north-ddlog only. It causes the daemon to
+              record the initial database state and later changes to  file  in
+              the  text-based DDlog command format. The ovn_northd_cli program
+              can later replay these changes for debugging purposes. This  op‐
+              tion  has  a  performance impact. See debugging-ddlog.rst in the
+              OVN documentation for more details.
+
+       --dry-run
+              Causes  ovn-northd  to  start  paused.  In  the  paused   state,
+              ovn-northd does not apply any changes to the databases, although
+              it  continues  to  monitor  them.  For more information, see the
+              pause command, under Runtime Management Commands below.
+
+              For  ovn-northd-ddlog,  one   could   use   this   option   with
+              --ddlog-record  to  generate  a  replay log without restarting a
+              process or disturbing a running system.
+
+       n-threads N
+              In certain situations, it may  be  desirable  to  enable  paral‐
+              lelization  on  a  system  to decrease latency (at the potential
+              cost of increasing CPU usage).
+
+              This option will cause ovn-northd to use N threads when building
+              logical flows, when N is within [2-256]. If N is 1, paralleliza‐
+              tion is disabled (default behavior). If N is less than 1, then N
+              is set to 1,  parallelization  is  disabled  and  a  warning  is
+              logged.  If  N  is  more  than 256, then N is set to 256, paral‐
+              lelization is enabled  (with  256  threads)  and  a  warning  is
+              logged.
+
+              ovn-northd-ddlog does not support this option.
+
+       database  in  the above options must be an OVSDB active or passive con‐
+       nection method, as described in ovsdb(7).
+
+   Daemon Options
+       --pidfile[=pidfile]
+              Causes a file (by default, program.pid) to be created indicating
+              the PID of the running process. If the pidfile argument  is  not
+              specified, or if it does not begin with /, then it is created in
+              .
+
+              If --pidfile is not specified, no pidfile is created.
+
+       --overwrite-pidfile
+              By  default,  when --pidfile is specified and the specified pid‐
+              file already exists and is locked by a running process, the dae‐
+              mon refuses to start. Specify --overwrite-pidfile to cause it to
+              instead overwrite the pidfile.
+
+              When --pidfile is not specified, this option has no effect.
+
+       --detach
+              Runs this program as a background process.  The  process  forks,
+              and  in  the  child it starts a new session, closes the standard
+              file descriptors (which has the side effect of disabling logging
+              to the console), and changes its current directory to  the  root
+              (unless  --no-chdir is specified). After the child completes its
+              initialization, the parent exits.
+
+       --monitor
+              Creates an additional process to monitor  this  program.  If  it
+              dies  due  to a signal that indicates a programming error (SIGA�‐
+              BRT, SIGALRM, SIGBUS, SIGFPE, SIGILL, SIGPIPE, SIGSEGV, SIGXCPU,
+              or SIGXFSZ) then the monitor process starts a new copy of it. If
+              the daemon dies or exits for another reason, the monitor process
+              exits.
+
+              This option is normally used with --detach, but  it  also  func‐
+              tions without it.
+
+       --no-chdir
+              By  default,  when --detach is specified, the daemon changes its
+              current working directory to the root  directory  after  it  de‐
+              taches.  Otherwise, invoking the daemon from a carelessly chosen
+              directory would prevent the administrator  from  unmounting  the
+              file system that holds that directory.
+
+              Specifying  --no-chdir  suppresses this behavior, preventing the
+              daemon from changing its current working directory. This may  be
+              useful for collecting core files, since it is common behavior to
+              write core dumps into the current working directory and the root
+              directory is not a good directory to use.
+
+              This option has no effect when --detach is not specified.
+
+       --no-self-confinement
+              By  default  this daemon will try to self-confine itself to work
+              with files under  well-known  directories  determined  at  build
+              time.  It  is better to stick with this default behavior and not
+              to use this flag unless some other Access  Control  is  used  to
+              confine  daemon.  Note  that in contrast to other access control
+              implementations that are typically  enforced  from  kernel-space
+              (e.g.  DAC  or  MAC), self-confinement is imposed from the user-
+              space daemon itself and hence should not be considered as a full
+              confinement strategy, but instead should be viewed as  an  addi‐
+              tional layer of security.
+
+       --user=user:group
+              Causes  this  program  to  run  as a different user specified in
+              user:group, thus dropping most of  the  root  privileges.  Short
+              forms  user  and  :group  are also allowed, with current user or
+              group assumed, respectively. Only daemons started  by  the  root
+              user accepts this argument.
+
+              On   Linux,   daemons   will   be   granted   CAP_IPC_LOCK   and
+              CAP_NET_BIND_SERVICES before dropping root  privileges.  Daemons
+              that  interact  with  a  datapath, such as ovs-vswitchd, will be
+              granted three  additional  capabilities,  namely  CAP_NET_ADMIN,
+              CAP_NET_BROADCAST  and  CAP_NET_RAW.  The capability change will
+              apply even if the new user is root.
+
+              On Windows, this option is not currently supported. For security
+              reasons, specifying this option will cause  the  daemon  process
+              not to start.
+
+   Logging Options
+       -v[spec]
+       --verbose=[spec]
+            Sets  logging  levels.  Without  any  spec, sets the log level for
+            every module and destination to dbg. Otherwise, spec is a list  of
+            words separated by spaces or commas or colons, up to one from each
+            category below:
+
+            •      A  valid module name, as displayed by the vlog/list command
+                   on ovs-appctl(8), limits the log level change to the speci‐
+                   fied module.
+
+            •      syslog, console, or file, to limit the log level change  to
+                   only  to  the system log, to the console, or to a file, re‐
+                   spectively. (If --detach is specified,  the  daemon  closes
+                   its  standard  file  descriptors, so logging to the console
+                   will have no effect.)
+
+                   On Windows platform, syslog is accepted as a  word  and  is
+                   only useful along with the --syslog-target option (the word
+                   has no effect otherwise).
+
+            •      off,  emer,  err,  warn,  info,  or dbg, to control the log
+                   level. Messages of the given severity  or  higher  will  be
+                   logged,  and  messages  of  lower severity will be filtered
+                   out. off filters out all messages. See ovs-appctl(8) for  a
+                   definition of each log level.
+
+            Case is not significant within spec.
+
+            Regardless  of the log levels set for file, logging to a file will
+            not take place unless --log-file is also specified (see below).
+
+            For compatibility with older versions of OVS, any is accepted as a
+            word but has no effect.
+
+       -v
+       --verbose
+            Sets the maximum logging verbosity  level,  equivalent  to  --ver�‐
+            bose=dbg.
+
+       -vPATTERN:destination:pattern
+       --verbose=PATTERN:destination:pattern
+            Sets  the log pattern for destination to pattern. Refer to ovs-ap�‐
+            pctl(8) for a description of the valid syntax for pattern.
+
+       -vFACILITY:facility
+       --verbose=FACILITY:facility
+            Sets the RFC5424 facility of the log message. facility can be  one
+            of kern, user, mail, daemon, auth, syslog, lpr, news, uucp, clock,
+            ftp,  ntp,  audit,  alert, clock2, local0, local1, local2, local3,
+            local4, local5, local6 or local7. If this option is not specified,
+            daemon is used as the default for the local system syslog and  lo�‐
+            cal0  is  used  while sending a message to the target provided via
+            the --syslog-target option.
+
+       --log-file[=file]
+            Enables logging to a file. If file is specified, then it  is  used
+            as the exact name for the log file. The default log file name used
+            if file is omitted is /usr/local/var/log/ovn/program.log.
+
+       --syslog-target=host:port
+            Send  syslog messages to UDP port on host, in addition to the sys‐
+            tem syslog. The host must be a numerical IP address, not  a  host‐
+            name.
+
+       --syslog-method=method
+            Specify  method  as  how  syslog messages should be sent to syslog
+            daemon. The following forms are supported:
+
+            •      libc, to use the libc syslog() function. Downside of  using
+                   this  options  is that libc adds fixed prefix to every mes‐
+                   sage before it is actually sent to the syslog  daemon  over
+                   /dev/log UNIX domain socket.
+
+            •      unix:file, to use a UNIX domain socket directly. It is pos‐
+                   sible to specify arbitrary message format with this option.
+                   However,  rsyslogd  8.9  and  older versions use hard coded
+                   parser function anyway that limits UNIX domain socket  use.
+                   If  you  want  to  use  arbitrary message format with older
+                   rsyslogd versions, then use UDP socket to localhost IP  ad‐
+                   dress instead.
+
+            •      udp:ip:port,  to  use  a UDP socket. With this method it is
+                   possible to use arbitrary message format  also  with  older
+                   rsyslogd.  When sending syslog messages over UDP socket ex‐
+                   tra precaution needs to be taken into account, for example,
+                   syslog daemon needs to be configured to listen on the spec‐
+                   ified UDP port, accidental iptables rules could  be  inter‐
+                   fering  with  local syslog traffic and there are some secu‐
+                   rity considerations that apply to UDP sockets, but  do  not
+                   apply to UNIX domain sockets.
+
+            •      null, to discard all messages logged to syslog.
+
+            The  default is taken from the OVS_SYSLOG_METHOD environment vari‐
+            able; if it is unset, the default is libc.
+
+   PKI Options
+       PKI configuration is required in order to use SSL for  the  connections
+       to the Northbound and Southbound databases.
+
+              -p privkey.pem
+              --private-key=privkey.pem
+                   Specifies  a  PEM  file  containing the private key used as
+                   identity for outgoing SSL connections.
+
+              -c cert.pem
+              --certificate=cert.pem
+                   Specifies a PEM file containing a certificate  that  certi‐
+                   fies the private key specified on -p or --private-key to be
+                   trustworthy. The certificate must be signed by the certifi‐
+                   cate  authority  (CA) that the peer in SSL connections will
+                   use to verify it.
+
+              -C cacert.pem
+              --ca-cert=cacert.pem
+                   Specifies a PEM file containing the CA certificate for ver‐
+                   ifying certificates presented to this program by SSL peers.
+                   (This may be the same certificate that  SSL  peers  use  to
+                   verify the certificate specified on -c or --certificate, or
+                   it  may  be a different one, depending on the PKI design in
+                   use.)
+
+              -C none
+              --ca-cert=none
+                   Disables verification  of  certificates  presented  by  SSL
+                   peers.  This  introduces  a security risk, because it means
+                   that certificates cannot be verified to be those  of  known
+                   trusted hosts.
+
+   Other Options
+       --unixctl=socket
+              Sets the name of the control socket on which program listens for
+              runtime  management  commands  (see RUNTIME MANAGEMENT COMMANDS,
+              below). If socket does not begin with /, it  is  interpreted  as
+              relative  to  .  If  --unixctl  is  not used at all, the default
+              socket is /program.pid.ctl, where pid is program’s process ID.
+
+              On Windows a local named pipe is used to listen for runtime man‐
+              agement commands. A file is created  in  the  absolute  path  as
+              pointed  by socket or if --unixctl is not used at all, a file is
+              created as program in the configured OVS_RUNDIR  directory.  The
+              file exists just to mimic the behavior of a Unix domain socket.
+
+              Specifying none for socket disables the control socket feature.
+
+
+
+       -h
+       --help
+            Prints a brief help message to the console.
+
+       -V
+       --version
+            Prints version information to the console.
+
+RUNTIME MANAGEMENT COMMANDS
+       ovs-appctl  can send commands to a running ovn-northd process. The cur‐
+       rently supported commands are described below.
+
+              exit   Causes ovn-northd to gracefully terminate.
+
+              pause  Pauses ovn-northd. When it is paused, ovn-northd receives
+                     changes  from  the  Northbound  and  Southbound  database
+                     changes  as  usual,  but  it does not send any updates. A
+                     paused ovn-northd also drops database locks, which allows
+                     any other non-paused instance of ovn-northd to take over.
+
+              resume Resumes the ovn-northd operation  to  process  Northbound
+                     and  Southbound  database  contents  and generate logical
+                     flows. This will also instruct ovn-northd to  aspire  for
+                     the lock on SB DB.
+
+              is-paused
+                     Returns "true" if ovn-northd is currently paused, "false"
+                     otherwise.
+
+              status Prints  this  server’s status. Status will be "active" if
+                     ovn-northd has acquired OVSDB lock on SB DB, "standby" if
+                     it has not or "paused" if this instance is paused.
+
+              sb-cluster-state-reset
+                     Reset southbound database cluster status  when  databases
+                     are destroyed and rebuilt.
+
+                     If  all  databases in a clustered southbound database are
+                     removed from disk, then the stored index of all databases
+                     will be reset to zero. This will cause ovn-northd  to  be
+                     unable  to  read or write to the southbound database, be‐
+                     cause it will always detect the data as stale. In such  a
+                     case,  run this command so that ovn-northd will reset its
+                     local index so that it can interact with  the  southbound
+                     database again.
+
+              nb-cluster-state-reset
+                     Reset  northbound  database cluster status when databases
+                     are destroyed and rebuilt.
+
+                     This performs the same task as sb-cluster-state-reset ex‐
+                     cept for the northbound database client.
+
+              set-n-threads N
+                     Set the number  of  threads  used  for  building  logical
+                     flows.  When  N is within [2-256], parallelization is en‐
+                     abled. When N is 1 parallelization is disabled. When N is
+                     less than 1 or more than 256, an error  is  returned.  If
+                     ovn-northd  fails to start parallelization (e.g. fails to
+                     setup semaphores, parallelization is disabled and an  er‐
+                     ror is returned.
+
+              get-n-threads
+                     Return  the  number  of threads used for building logical
+                     flows.
+
+              inc-engine/show-stats
+                     Display ovn-northd engine counters. For each engine  node
+                     the following counters have been added:
+
+                     •      recompute
+
+                     •      compute
+
+                     •      abort
+
+              inc-engine/show-stats engine_node_name counter_name
+                     Display  the  ovn-northd engine counter(s) for the speci‐
+                     fied engine_node_name. counter_name is optional  and  can
+                     be one of recompute, compute or abort.
+
+              inc-engine/clear-stats
+                     Reset ovn-northd engine counters.
+
+       Only ovn-northd-ddlog supports the following commands:
+
+              enable-cpu-profiling
+              disable-cpu-profiling
+                   Enables or disables profiling of CPU time used by the DDlog
+                   engine.  When CPU profiling is enabled, the profile command
+                   (see below) will include DDlog CPU usage statistics in  its
+                   output.  Enabling CPU profiling will slow ovn-northd-ddlog.
+                   Disabling CPU  profiling  does  not  clear  any  previously
+                   recorded statistics.
+
+              profile
+                   Outputs a profile of the current and peak sizes of arrange‐
+                   ments  inside  DDlog. This profiling data can be useful for
+                   optimizing DDlog code. If CPU profiling was previously  en‐
+                   abled  (even if it was later disabled), the output also in‐
+                   cludes a CPU time profile. See Profiling inside the  tutor‐
+                   ial  in the DDlog repository for an introduction to profil‐
+                   ing DDlog.
+
+ACTIVE-STANDBY FOR HIGH AVAILABILITY
+       You may run ovn-northd more than once in an OVN deployment.  When  con‐
+       nected  to  a  standalone or clustered DB setup, OVN will automatically
+       ensure that only one of them is active at a time. If multiple instances
+       of ovn-northd are running and the active ovn-northd fails, one  of  the
+       hot standby instances of ovn-northd will automatically take over.
+
+   Active-Standby with multiple OVN DB servers
+       You may run multiple OVN DB servers in an OVN deployment with:
+
+              •      OVN  DB  servers deployed in active/passive mode with one
+                     active and multiple passive ovsdb-servers.
+
+              •      ovn-northd also deployed on all these nodes,  using  unix
+                     ctl sockets to connect to the local OVN DB servers.
+
+       In  such deployments, the ovn-northds on the passive nodes will process
+       the DB changes and compute logical flows to be thrown  out  later,  be‐
+       cause  write transactions are not allowed by the passive ovsdb-servers.
+       It results in unnecessary CPU usage.
+
+       With the help of  runtime  management  command  pause,  you  can  pause
+       ovn-northd  on these nodes. When a passive node becomes master, you can
+       use the runtime management command resume to resume the  ovn-northd  to
+       process the DB changes.
+
+LOGICAL FLOW TABLE STRUCTURE
+       One  of the main purposes of ovn-northd is to populate the Logical_Flow
+       table in  the  OVN_Southbound  database.  This  section  describes  how
+       ovn-northd does this for switch and router logical datapaths.
+
+   Logical Switch Datapaths
+     Ingress Table 0: Admission Control and Ingress Port Security check
+
+       Ingress table 0 contains these logical flows:
+
+              •      Priority 100 flows to drop packets with VLAN tags or mul‐
+                     ticast Ethernet source addresses.
+
+              •      For  each  disabled  logical port, a priority 100 flow is
+                     added which matches on all packets and applies the action
+                     REGBIT_PORT_SEC_DROP" = 1; next;" so that the packets are
+                     dropped in the next stage.
+
+              •      For each (enabled) vtep logical port, a priority 70  flow
+                     is added which matches on all packets and applies the ac‐
+                     tion  next(pipeline=ingress, table=S_SWITCH_IN_L2_LKUP) =
+                     1; to skip most stages of ingress  pipeline  and  go  di‐
+                     rectly to ingress L2 lookup table to determine the output
+                     port.  Packets from VTEP (RAMP) switch should not be sub‐
+                     jected to any ACL checks. Egress pipeline will do the ACL
+                     checks.
+
+              •      For each enabled logical port configured with qdisc queue
+                     id  in  the  options:qdisc_queue_id   column   of   Logi�‐
+                     cal_Switch_Port,  a  priority  70  flow  is  added  which
+                     matches  on  all   packets   and   applies   the   action
+                     set_queue(id);           REGBIT_PORT_SEC_DROP"          =
+                     check_in_port_sec(); next;".
+
+              •      A priority 1 flow is added which matches on  all  packets
+                     for  all  the  logical  ports and applies the action REG�‐
+                     BIT_PORT_SEC_DROP" = check_in_port_sec(); next; to evalu‐
+                     ate the port security. The action  check_in_port_sec  ap‐
+                     plies  the  port security rules defined in the port_secu�‐
+                     rity column of Logical_Switch_Port table.
+
+     Ingress Table 1: Ingress Port Security - Apply
+
+       This table drops the packets if the port security check failed  in  the
+       previous stage i.e the register bit REGBIT_PORT_SEC_DROP is set to 1.
+
+       Ingress table 1 contains these logical flows:
+
+              •      A  priority-50 fallback flow that drops the packet if the
+                     register bit REGBIT_PORT_SEC_DROP is set to 1.
+
+              •      One priority-0 fallback flow that matches all packets and
+                     advances to the next table.
+
+     Ingress Table 2: Lookup MAC address learning table
+
+       This table looks up the MAC learning table of the logical switch  data‐
+       path to check if the port-mac pair is present or not. MAC is learnt for
+       logical  switch VIF ports whose port security is disabled and ’unknown’
+       address  setn  as  well  as  for  localnet  ports  with  option  local‐
+       net_learn_fdb.  A localnet port entry does not overwrite a VIF port en‐
+       try.
+
+              •      For each such VIF logical port p whose port  security  is
+                     disabled  and  ’unknown’  address  set  following flow is
+                     added.
+
+                     •      Priority 100 flow with the match inport ==  p  and
+                            action  reg0[11]  =  lookup_fdb(inport,  eth.src);
+                            next;
+
+              •      For each such localnet logical port p following  flow  is
+                     added.
+
+                     •      Priority  100  flow with the match inport == p and
+                            action   flags.localnet   =    1;    reg0[11]    =
+                            lookup_fdb(inport, eth.src); next;
+
+              •      One priority-0 fallback flow that matches all packets and
+                     advances to the next table.
+
+     Ingress Table 3: Learn MAC of ’unknown’ ports.
+
+       This table learns the MAC addresses seen on the VIF logical ports whose
+       port  security  is disabled and ’unknown’ address set as well as on lo‐
+       calnet ports with localnet_learn_fdb option set if the  lookup_fdb  ac‐
+       tion  returned  false  in  the previous table. For localnet ports (with
+       flags.localnet = 1), lookup_fdb returns true if (port, mac) is found or
+       if a mac is found for a port of type vif.
+
+              •      For each such VIF logical port p whose port  security  is
+                     disabled and ’unknown’ address set and localnet port fol‐
+                     lowing flow is added.
+
+                     •      Priority  100  flow  with the match inport == p &&
+                            reg0[11] == 0 and action put_fdb(inport, eth.src);
+                            next; which stores the port-mac in the mac  learn‐
+                            ing  table  of the logical switch datapath and ad‐
+                            vances the packet to the next table.
+
+              •      One priority-0 fallback flow that matches all packets and
+                     advances to the next table.
+
+     Ingress Table 4: from-lport Pre-ACLs
+
+       This table prepares flows  for  possible  stateful  ACL  processing  in
+       ingress  table  ACLs.  It  contains a priority-0 flow that simply moves
+       traffic to the next table. If stateful ACLs are  used  in  the  logical
+       datapath, a priority-100 flow is added that sets a hint (with reg0[0] =
+       1;  next;)  for table Pre-stateful to send IP packets to the connection
+       tracker before eventually advancing to ingress table ACLs.  If  special
+       ports  such  as  route ports or localnet ports can’t use ct(), a prior‐
+       ity-110 flow is added to  skip  over  stateful  ACLs.  Multicast,  IPv6
+       Neighbor  Discovery  and MLD traffic also skips stateful ACLs. For "al‐
+       low-stateless" ACLs, a flow is added to bypass  setting  the  hint  for
+       connection tracker processing when there are stateful ACLs or LB rules;
+       REGBIT_ACL_STATELESS is set for traffic matching stateless ACL flows.
+
+       This table also has a priority-110 flow with the match eth.dst == E for
+       all logical switch datapaths to move traffic to the next table. Where E
+       is  the service monitor mac defined in the options:svc_monitor_mac col‐
+       umn of NB_Global table.
+
+     Ingress Table 5: Pre-LB
+
+       This table prepares flows for possible stateful load balancing process‐
+       ing in ingress table LB and Stateful. It  contains  a  priority-0  flow
+       that  simply  moves traffic to the next table. Moreover it contains two
+       priority-110 flows to move multicast, IPv6 Neighbor Discovery  and  MLD
+       traffic  to  the next table. It also contains two priority-110 flows to
+       move stateless traffic, i.e traffic for which  REGBIT_ACL_STATELESS  is
+       set,  to  the  next  table. If load balancing rules with virtual IP ad‐
+       dresses (and ports) are configured in  OVN_Northbound  database  for  a
+       logical switch datapath, a priority-100 flow is added with the match ip
+       to match on IP packets and sets the action reg0[2] = 1; next; to act as
+       a  hint  for  table  Pre-stateful  to send IP packets to the connection
+       tracker for packet de-fragmentation (and to possibly do  DNAT  for  al‐
+       ready established load balanced traffic) before eventually advancing to
+       ingress  table  Stateful. If controller_event has been enabled and load
+       balancing rules with empty backends have been added in  OVN_Northbound,
+       a 130 flow is added to trigger ovn-controller events whenever the chas‐
+       sis  receives  a packet for that particular VIP. If event-elb meter has
+       been previously created, it will be associated to the empty_lb  logical
+       flow
+
+       Prior  to OVN 20.09 we were setting the reg0[0] = 1 only if the IP des‐
+       tination matches the load balancer VIP. However  this  had  few  issues
+       cases  where  a logical switch doesn’t have any ACLs with allow-related
+       action. To understand the issue lets a  take  a  TCP  load  balancer  -
+       10.0.0.10:80=10.0.0.3:80.  If  a  logical  port - p1 with IP - 10.0.0.5
+       opens a TCP connection with the VIP - 10.0.0.10, then the packet in the
+       ingress pipeline of ’p1’ is sent to the p1’s conntrack zone id and  the
+       packet is load balanced to the backend - 10.0.0.3. For the reply packet
+       from  the  backend  lport,  it  is not sent to the conntrack of backend
+       lport’s zone id. This is fine as long as the packet is  valid.  Suppose
+       the  backend lport sends an invalid TCP packet (like incorrect sequence
+       number), the packet gets delivered to the lport ’p1’ without  unDNATing
+       the packet to the VIP - 10.0.0.10. And this causes the connection to be
+       reset by the lport p1’s VIF.
+
+       We can’t fix this issue by adding a logical flow to drop ct.inv packets
+       in  the  egress  pipeline  since it will drop all other connections not
+       destined to the load balancers. To fix this  issue,  we  send  all  the
+       packets  to the conntrack in the ingress pipeline if a load balancer is
+       configured. We can now add a lflow to drop ct.inv packets.
+
+       This table also has priority-120 flows that punt all  IGMP/MLD  packets
+       to  ovn-controller  if the switch is an interconnect switch with multi‐
+       cast snooping enabled.
+
+       This table also has a priority-110 flow with the match eth.dst == E for
+       all logical switch datapaths to move traffic to the next table. Where E
+       is the service monitor mac defined in the options:svc_monitor_mac  col‐
+       umn of NB_Global table.
+
+       This  table also has a priority-110 flow with the match inport == I for
+       all logical switch datapaths to move traffic to the next table. Where I
+       is the peer of a logical router port. This flow is added  to  skip  the
+       connection tracking of packets which enter from logical router datapath
+       to logical switch datapath.
+
+     Ingress Table 6: Pre-stateful
+
+       This  table prepares flows for all possible stateful processing in next
+       tables. It contains a priority-0 flow that simply moves traffic to  the
+       next table.
+
+              •      Priority-120  flows  that  send the packets to connection
+                     tracker using ct_lb_mark; as the action so that  the  al‐
+                     ready  established  traffic destined to the load balancer
+                     VIP gets DNATted. These flows  match  each  VIPs  IP  and
+                     port.  For  IPv4 traffic the flows also load the original
+                     destination IP and transport port in registers  reg1  and
+                     reg2.  For  IPv6 traffic the flows also load the original
+                     destination IP and transport port in registers xxreg1 and
+                     reg2.
+
+              •      A priority-110 flow sends the packets  that  don’t  match
+                     the  above  flows  to  connection tracker based on a hint
+                     provided by the previous tables (with a match for reg0[2]
+                     == 1) by using the ct_lb_mark; action.
+
+              •      A priority-100  flow  sends  the  packets  to  connection
+                     tracker  based  on a hint provided by the previous tables
+                     (with a match for reg0[0] == 1) by using the ct_next; ac‐
+                     tion.
+
+     Ingress Table 7: from-lport ACL hints
+
+       This table consists of logical flows that set hints (reg0 bits)  to  be
+       used  in  the next stage, in the ACL processing table, if stateful ACLs
+       or load balancers are configured. Multiple hints can  be  set  for  the
+       same packet. The possible hints are:
+
+              •      reg0[7]:  the packet might match an allow-related ACL and
+                     might have to commit the connection to conntrack.
+
+              •      reg0[8]: the packet might match an allow-related ACL  but
+                     there  will  be  no need to commit the connection to con‐
+                     ntrack because it already exists.
+
+              •      reg0[9]: the packet might match a drop/reject.
+
+              •      reg0[10]: the packet might match a  drop/reject  ACL  but
+                     the connection was previously allowed so it might have to
+                     be committed again with ct_label=1/1.
+
+       The table contains the following flows:
+
+              •      A priority-65535 flow to advance to the next table if the
+                     logical switch has no ACLs configured, otherwise a prior‐
+                     ity-0 flow to advance to the next table.
+
+              •      A priority-7 flow that matches on packets that initiate a
+                     new  session. This flow sets reg0[7] and reg0[9] and then
+                     advances to the next table.
+
+              •      A priority-6 flow that matches on packets that are in the
+                     request direction of an already existing session that has
+                     been marked  as  blocked.  This  flow  sets  reg0[7]  and
+                     reg0[9] and then advances to the next table.
+
+              •      A  priority-5  flow  that matches untracked packets. This
+                     flow sets reg0[8] and reg0[9] and then  advances  to  the
+                     next table.
+
+              •      A priority-4 flow that matches on packets that are in the
+                     request direction of an already existing session that has
+                     not  been  marked  as blocked. This flow sets reg0[8] and
+                     reg0[10] and then advances to the next table.
+
+              •      A priority-3 flow that matches on packets that are in not
+                     part of established sessions. This flow sets reg0[9]  and
+                     then advances to the next table.
+
+              •      A  priority-2  flow that matches on packets that are part
+                     of  an  established  session  that  has  been  marked  as
+                     blocked.  This flow sets reg0[9] and then advances to the
+                     next table.
+
+              •      A priority-1 flow that matches on packets that  are  part
+                     of  an  established  session  that has not been marked as
+                     blocked. This flow sets reg0[10] and then advances to the
+                     next table.
+
+     Ingress table 8: from-lport ACL evaluation before LB
+
+       Logical flows in this table closely reproduce those in the ACL table in
+       the OVN_Northbound database for the from-lport  direction  without  the
+       option apply-after-lb set or set to false. The priority values from the
+       ACL  table  have  a  limited range and have 1000 added to them to leave
+       room for OVN default flows at both higher and lower priorities.
+
+              •      This table is responsible for evaluating ACLs,  and  set‐
+                     ting  a  register bit to indicate whether the ACL decided
+                     to allow, drop, or reject the traffic. The allow  bit  is
+                     reg8[16]. The drop bit is reg8[17]. All flows in this ta‐
+                     ble  will advance the packet to the next table, where the
+                     bits from before are evaluated to determine  what  to  do
+                     with  the packet. Any flows in this table that intend for
+                     the packet to pass will set reg8[16] to 1, even if an ACL
+                     with an allow-type action was not matched. This lets  the
+                     next  table know to allow the traffic to pass. These bits
+                     will be referred to as the "allow", "drop", and  "reject"
+                     bits in the upcoming paragraphs.
+
+              •      If  the  tier column has been configured on the ACL, then
+                     OVN will also match the current tier counter against  the
+                     configured  ACL tier. OVN keeps count of the current tier
+                     in reg8[30..31].
+
+              •      allow ACLs translate into logical flows that set the  al‐
+                     low bit to 1 and advance the packet to the next table. If
+                     there  are any stateful ACLs on this datapath, then allow
+                     ACLs set the allow bit to one  and  in  addition  perform
+                     ct_commit;  (which  acts  as  a hint for future tables to
+                     commit the connection to conntrack). In case the ACL  has
+                     a  label  then  reg3  is  loaded with the label value and
+                     reg0[13] bit is set to 1 (which acts as a  hint  for  the
+                     next tables to commit the label to conntrack).
+
+              •      allow-related  ACLs translate into logical flows that set
+                     the allow  bit  and  additionally  have  ct_commit(ct_la�‐
+                     bel=0/1); next; actions for new connections and reg0[1] =
+                     1;  next; for existing connections. In case the ACL has a
+                     label then reg3  is  loaded  with  the  label  value  and
+                     reg0[13]  bit  is  set to 1 (which acts as a hint for the
+                     next tables to commit the label to conntrack).
+
+              •      allow-stateless ACLs translate into  logical  flows  that
+                     set the allow bit and advance to the next table.
+
+              •      reject  ACLs  translate  into logical flows with that set
+                     the reject bit and advance to the next table.
+
+              •      pass ACLs translate into logical flows that  do  not  set
+                     the  allow,  drop,  or reject bit and advance to the next
+                     table.
+
+              •      Other ACLs set the drop bit and advance to the next table
+                     for new or untracked connections. For known  connections,
+                     they  set  the  drop  bit, as well as running the ct_com�‐
+                     mit(ct_label=1/1); action. Setting ct_label marks a  con‐
+                     nection as one that was previously allowed, but should no
+                     longer be allowed due to a policy change.
+
+       This  table contains a priority-65535 flow to set the allow bit and ad‐
+       vance to the next table if the logical switch has no  ACLs  configured,
+       otherwise a priority-0 flow to advance to the next table is added. This
+       flow  does  not  set  the  allow bit, so that the next table can decide
+       whether to allow or drop the packet based  on  the  value  of  the  op�‐
+       tions:default_acl_drop column of the NB_Global table.
+
+       A  priority-65532 flow is added that sets the allow bit for IPv6 Neigh‐
+       bor solicitation, Neighbor discover, Router solicitation, Router adver‐
+       tisement and MLD packets regardless of other ACLs defined.
+
+       If the logical datapath has a stateful ACL or a load balancer with  VIP
+       configured, the following flows will also be added:
+
+              •      If  options:default_acl_drop column of NB_Global is false
+                     or not set, a priority-1 flow that sets the hint to  com‐
+                     mit  IP  traffic that is not part of established sessions
+                     to the connection  tracker  (with  action  reg0[1]  =  1;
+                     next;).  This  is needed for the default allow policy be‐
+                     cause, while the initiator’s direction may not  have  any
+                     stateful  rules,  the  server’s  may  and then its return
+                     traffic would not be known and marked as invalid.
+
+              •      A priority-1 flow that sets the allow bit  and  sets  the
+                     hint to commit IP traffic to the connection tracker (with
+                     action  reg0[1]  =  1; next;). This is needed for the de‐
+                     fault allow policy because, while the initiator’s  direc‐
+                     tion  may  not  have any stateful rules, the server’s may
+                     and then its return traffic would not be known and marked
+                     as invalid.
+
+              •      A priority-65532 flow that sets the  allow  bit  for  any
+                     traffic  in the reply direction for a connection that has
+                     been committed to the connection  tracker  (i.e.,  estab‐
+                     lished  flows),  as  long  as the committed flow does not
+                     have ct_mark.blocked set. We only handle traffic  in  the
+                     reply direction here because we want all packets going in
+                     the  request direction to still go through the flows that
+                     implement the currently defined policy based on ACLs.  If
+                     a   connection   is   no   longer   allowed   by  policy,
+                     ct_mark.blocked will get set and packets in the reply di‐
+                     rection will no longer be allowed, either. This flow also
+                     clears the register bits reg0[9] and  reg0[10]  and  sets
+                     register  bit reg0[17]. If ACL logging and logging of re‐
+                     lated packets is enabled, then a companion priority-65533
+                     flow will be installed that accomplishes the  same  thing
+                     but also logs the traffic.
+
+              •      A  priority-65532  flow  that  sets the allow bit for any
+                     traffic that is considered related to a committed flow in
+                     the connection tracker (e.g., an  ICMP  Port  Unreachable
+                     from  a non-listening UDP port), as long as the committed
+                     flow does not have ct_mark.blocked set.  This  flow  also
+                     applies  NAT  to the related traffic so that ICMP headers
+                     and the inner packet have correct addresses. If ACL  log‐
+                     ging  and  logging  of related packets is enabled, then a
+                     companion priority-65533 flow will be installed that  ac‐
+                     complishes the same thing but also logs the traffic.
+
+              •      A  priority-65532  flow  that  sets  the drop bit for all
+                     traffic marked by the connection tracker as invalid.
+
+              •      A priority-65532 flow that sets  the  drop  bit  for  all
+                     traffic  in  the reply direction with ct_mark.blocked set
+                     meaning that the connection should no longer  be  allowed
+                     due  to a policy change. Packets in the request direction
+                     are skipped here to let a newly created ACL re-allow this
+                     connection.
+
+       If the logical datapath has any ACL or a load balancer with VIP config‐
+       ured, the following flow will also be added:
+
+              •      A priority 34000 logical flow is added for  each  logical
+                     switch  datapath  with the match eth.dst = E to allow the
+                     service monitor reply packet destined  to  ovn-controller
+                     that  sets  the allow bit, where E is the service monitor
+                     mac defined  in  the  options:svc_monitor_mac  column  of
+                     NB_Global table.
+
+     Ingress Table 9: from-lport ACL action
+
+       Logical  flows  in this table decide how to proceed based on the values
+       of the allow, drop, and reject bits that may have been set in the  pre‐
+       vious table.
+
+              •      If  no ACLs are configured, then a priority 0 flow is in‐
+                     stalled that matches everything and advances to the  next
+                     table.
+
+              •      A  priority  1000 flow is installed that will advance the
+                     packet to the next table if the allow bit is set.
+
+              •      A priority 1000 flow is installed that will run the drop;
+                     action if the drop bit is set.
+
+              •      A priority 1000 flow  is  installed  that  will  run  the
+                     tcp_reset  {  output <-> inport; next(pipeline=egress,ta�‐
+                     ble=5);} action for  TCP  connections,icmp4/icmp6  action
+                     for  UDP  connections,  and sctp_abort {output <-%gt; in�‐
+                     port; next(pipeline=egress,table=5);} action for SCTP as‐
+                     sociations.
+
+              •      If any ACLs have tiers configured  on  them,  then  three
+                     priority  500  flows  are  installed. If the current tier
+                     counter is 0, 1, or 2, then the current tier  counter  is
+                     incremented  by  one  and  the packet is sent back to the
+                     previous table for re-evaluation.
+
+     Ingress Table 10: from-lport QoS Marking
+
+       Logical flows in this table closely reproduce those in  the  QoS  table
+       with  the  action  column  set  in  the OVN_Northbound database for the
+       from-lport direction.
+
+              •      For every qos_rules entry in a logical switch  with  DSCP
+                     marking  enabled,  a  flow  will be added at the priority
+                     mentioned in the QoS table.
+
+              •      One priority-0 fallback flow that matches all packets and
+                     advances to the next table.
+
+     Ingress Table 11: from-lport QoS Meter
+
+       Logical flows in this table closely reproduce those in  the  QoS  table
+       with  the  bandwidth  column set in the OVN_Northbound database for the
+       from-lport direction.
+
+              •      For every qos_rules entry in a logical switch with meter‐
+                     ing enabled, a flow will be added at  the  priority  men‐
+                     tioned in the QoS table.
+
+              •      One priority-0 fallback flow that matches all packets and
+                     advances to the next table.
+
+     Ingress Table 12: Load balancing affinity check
+
+       Load  balancing  affinity  check  table  contains the following logical
+       flows:
+
+              •      For all the configured load balancing rules for a  switch
+                     in  OVN_Northbound  database  where  a  positive affinity
+                     timeout is specified in options column, that  includes  a
+                     L4  port  PORT of protocol P and IP address VIP, a prior‐
+                     ity-100 flow is added. For IPv4 VIPs,  the  flow  matches
+                     ct.new && ip && ip4.dst == VIP && P.dst == PORT. For IPv6
+                     VIPs, the flow matches ct.new && ip && ip6.dst == VIP&& P
+                     &&  P.dst  ==   PORT.  The  flow’s  action  is  reg9[6] =
+                     chk_lb_aff(); next;.
+
+              •      A priority 0 flow is added which matches on  all  packets
+                     and applies the action next;.
+
+     Ingress Table 13: LB
+
+              •      For  all the configured load balancing rules for a switch
+                     in OVN_Northbound  database  where  a  positive  affinity
+                     timeout  is  specified in options column, that includes a
+                     L4 port PORT of protocol P and IP address VIP,  a  prior‐
+                     ity-150  flow  is  added. For IPv4 VIPs, the flow matches
+                     reg9[6] == 1 && ct.new && ip && ip4.dst == VIP  &&  P.dst
+                     == PORT . For IPv6 VIPs, the flow matches reg9[6] == 1 &&
+                     ct.new  &&  ip && ip6.dst ==  VIP && P && P.dst ==  PORT.
+                     The flow’s action is ct_lb_mark(args),  where  args  con‐
+                     tains  comma  separated  IP  addresses (and optional port
+                     numbers) to load balance to. The address family of the IP
+                     addresses of args is the same as the  address  family  of
+                     VIP.
+
+              •      For  all the configured load balancing rules for a switch
+                     in OVN_Northbound database that includes a L4  port  PORT
+                     of  protocol P and IP address VIP, a priority-120 flow is
+                     added. For IPv4 VIPs , the flow matches ct.new &&  ip  &&
+                     ip4.dst  == VIP && P.dst == PORT. For IPv6 VIPs, the flow
+                     matches ct.new && ip && ip6.dst == VIP && P &&  P.dst  ==
+                     PORT.  The flow’s action is ct_lb_mark(args) , where args
+                     contains comma separated IP addresses (and optional  port
+                     numbers) to load balance to. The address family of the IP
+                     addresses  of  args  is the same as the address family of
+                     VIP. If health check is enabled, then args will only con‐
+                     tain those endpoints whose service monitor  status  entry
+                     in  OVN_Southbound db is either online or empty. For IPv4
+                     traffic the flow also loads the original  destination  IP
+                     and  transport  port in registers reg1 and reg2. For IPv6
+                     traffic the flow also loads the original  destination  IP
+                     and  transport  port  in  registers  xxreg1 and reg2. The
+                     above flow is created even if the load  balancer  is  at‐
+                     tached to a logical router connected to the current logi‐
+                     cal  switch and the install_ls_lb_from_router variable in
+                     options is set to true.
+
+              •      For all the configured load balancing rules for a  switch
+                     in  OVN_Northbound  database that includes just an IP ad‐
+                     dress VIP to match on, OVN adds a priority-110 flow.  For
+                     IPv4  VIPs,  the  flow matches ct.new && ip && ip4.dst ==
+                     VIP. For IPv6 VIPs, the flow  matches  ct.new  &&  ip  &&
+                     ip6.dst   ==   VIP.   The   action   on   this   flow  is
+                     ct_lb_mark(args), where args contains comma separated  IP
+                     addresses  of  the  same  address family as VIP. For IPv4
+                     traffic the flow also loads the original  destination  IP
+                     and  transport  port in registers reg1 and reg2. For IPv6
+                     traffic the flow also loads the original  destination  IP
+                     and  transport  port  in  registers  xxreg1 and reg2. The
+                     above flow is created even if the load  balancer  is  at‐
+                     tached to a logical router connected to the current logi‐
+                     cal  switch and the install_ls_lb_from_router variable in
+                     options is set to true.
+
+              •      If the load balancer is created with --reject option  and
+                     it  has no active backends, a TCP reset segment (for tcp)
+                     or an ICMP port unreachable packet (for all other kind of
+                     traffic) will be sent whenever an incoming packet is  re‐
+                     ceived for this load-balancer. Please note using --reject
+                     option will disable empty_lb SB controller event for this
+                     load balancer.
+
+     Ingress Table 14: Load balancing affinity learn
+
+       Load  balancing  affinity  learn  table  contains the following logical
+       flows:
+
+              •      For all the configured load balancing rules for a  switch
+                     in  OVN_Northbound  database  where  a  positive affinity
+                     timeout T is specified in options column, that includes a
+                     L4 port PORT of protocol P and IP address VIP,  a  prior‐
+                     ity-100  flow  is  added. For IPv4 VIPs, the flow matches
+                     reg9[6] == 0 && ct.new && ip && ip4.dst == VIP  &&  P.dst
+                     ==  PORT. For IPv6 VIPs, the flow matches ct.new && ip &&
+                     ip6.dst == VIP && P && P.dst == PORT . The flow’s  action
+                     is  commit_lb_aff(vip  =  VIP:PORT, backend = backend ip:
+                     backend port, proto = P, timeout = T); .
+
+              •      A priority 0 flow is added which matches on  all  packets
+                     and applies the action next;.
+
+     Ingress Table 15: Pre-Hairpin
+
+              •      If  the  logical  switch has load balancer(s) configured,
+                     then a priority-100 flow is added with the  match  ip  &&
+                     ct.trk  to check if the packet needs to be hairpinned (if
+                     after load  balancing  the  destination  IP  matches  the
+                     source  IP)  or  not  by  executing the actions reg0[6] =
+                     chk_lb_hairpin(); and reg0[12] =  chk_lb_hairpin_reply();
+                     and advances the packet to the next table.
+
+              •      A  priority-0  flow that simply moves traffic to the next
+                     table.
+
+     Ingress Table 16: Nat-Hairpin
+
+              •      If the logical switch has  load  balancer(s)  configured,
+                     then  a  priority-100  flow is added with the match ip &&
+                     ct.new && ct.trk && reg0[6] == 1 which hairpins the traf‐
+                     fic by NATting source IP to the load balancer VIP by exe‐
+                     cuting the action ct_snat_to_vip and advances the  packet
+                     to the next table.
+
+              •      If  the  logical  switch has load balancer(s) configured,
+                     then a priority-100 flow is added with the  match  ip  &&
+                     ct.est && ct.trk && reg0[6] == 1 which hairpins the traf‐
+                     fic by NATting source IP to the load balancer VIP by exe‐
+                     cuting  the action ct_snat and advances the packet to the
+                     next table.
+
+              •      If the logical switch has  load  balancer(s)  configured,
+                     then  a  priority-90  flow  is added with the match ip &&
+                     reg0[12] == 1 which matches on the replies of  hairpinned
+                     traffic  (i.e.,  destination  IP is VIP, source IP is the
+                     backend IP and source L4 port is backend port for L4 load
+                     balancers) and executes ct_snat and advances  the  packet
+                     to the next table.
+
+              •      A  priority-0  flow that simply moves traffic to the next
+                     table.
+
+     Ingress Table 17: Hairpin
+
+              •      If logical switch has attached  logical  switch  port  of
+                     vtep  type, then for each distributed gateway router port
+                     RP attached to this logical switch and has chassis  redi‐
+                     rect  port  cr-RP, a priority-2000 flow is added with the
+                     match .IP
+                     reg0[14] == 1 && is_chassis_resident(cr-RP)
+
+                     and action next;.
+
+                     reg0[14] register bit is set in the ingress L2 port secu‐
+                     rity check table for traffic received from HW VTEP (ramp)
+                     ports.
+
+              •      If logical switch has attached  logical  switch  port  of
+                     vtep  type,  then  a  priority-1000  flow that matches on
+                     reg0[14] register bit for the traffic  received  from  HW
+                     VTEP  (ramp) ports. This traffic is passed to ingress ta‐
+                     ble ls_in_l2_lkup.
+
+              •      A priority-1 flow that hairpins traffic matched  by  non-
+                     default  flows  in  the Pre-Hairpin table. Hairpinning is
+                     done at L2, Ethernet addresses are swapped and the  pack‐
+                     ets are looped back on the input port.
+
+              •      A  priority-0  flow that simply moves traffic to the next
+                     table.
+
+     Ingress table 18: from-lport ACL evaluation after LB
+
+       Logical flows in this table closely reproduce those in the ACL eval ta‐
+       ble in the OVN_Northbound database for the  from-lport  direction  with
+       the option apply-after-lb set to true. The priority values from the ACL
+       table  have  a  limited range and have 1000 added to them to leave room
+       for OVN default flows at both higher and lower priorities. The flows in
+       this table indicate the ACL verdict by setting reg8[16] for  allow-type
+       ACLs,  reg8[17]  for  drop ACLs, and reg8[17] for reject ACLs, and then
+       advancing the packet to the next table. These will be  reffered  to  as
+       the  allow  bit,  drop bit, and reject bit throughout the documentation
+       for this table and the next one.
+
+       Like with ACLs that are evaluated before load balancers, if the ACL  is
+       configured  with  a tier value, then the current tier counter, supplied
+       in reg8[30..31] is matched against the ACL’s configured tier  in  addi‐
+       tion to the ACL’s match.
+
+              •      allow  apply-after-lb  ACLs  translate into logical flows
+                     that set the allow bit. If there are  any  stateful  ACLs
+                     (including  both  before-lb  and  after-lb  ACLs) on this
+                     datapath, then  allow  ACLs  also  run  ct_commit;  next;
+                     (which acts as a hint for an upcoming table to commit the
+                     connection  to  conntrack).  In  case the ACL has a label
+                     then reg3 is loaded with the label value and reg0[13] bit
+                     is set to 1 (which acts as a hint for the next tables  to
+                     commit the label to conntrack).
+
+              •      allow-related  apply-after-lb ACLs translate into logical
+                     flows that set the allow bit and run the ct_commit(ct_la�‐
+                     bel=0/1); next; actions for new connections and reg0[1] =
+                     1; next; for existing connections. In case the ACL has  a
+                     label  then  reg3  is  loaded  with  the  label value and
+                     reg0[13] bit is set to 1 (which acts as a  hint  for  the
+                     next tables to commit the label to conntrack).
+
+              •      allow-stateless  apply-after-lb ACLs translate into logi‐
+                     cal flows that set the allow bit and advance to the  next
+                     table.
+
+              •      reject  apply-after-lb  ACLs translate into logical flows
+                     that set the reject bit and advance to the next table.
+
+              •      pass apply-after-lb ACLs  translate  into  logical  flows
+                     that  do  not  set the allow, drop, or reject bit and ad‐
+                     vance to the next table.
+
+              •      Other apply-after-lb ACLs set the drop bit for new or un‐
+                     tracked  connections  and  ct_commit(ct_label=1/1);   for
+                     known connections. Setting ct_label marks a connection as
+                     one  that was previously allowed, but should no longer be
+                     allowed due to a policy change.
+
+              •      One priority-65532 flow matching  packets  with  reg0[17]
+                     set  (either  replies to existing sessions or traffic re‐
+                     lated to existing sessions) and allows these  by  setting
+                     the allow bit and advancing to the next table.
+
+              •      One priority-0 fallback flow that matches all packets and
+                     advances to the next table.
+
+     Ingress Table 19: from-lport ACL action after LB
+
+       Logical  flows  in this table decide how to proceed based on the values
+       of the allow, drop, and reject bits that may have been set in the  pre‐
+       vious table.
+
+              •      If  no ACLs are configured, then a priority 0 flow is in‐
+                     stalled that matches everything and advances to the  next
+                     table.
+
+              •      A  priority  1000 flow is installed that will advance the
+                     packet to the next table if the allow bit is set.
+
+              •      A priority 1000 flow is installed that will run the drop;
+                     action if the drop bit is set.
+
+              •      A priority 1000 flow  is  installed  that  will  run  the
+                     tcp_reset  {  output <-> inport; next(pipeline=egress,ta�‐
+                     ble=5);} action for  TCP  connections,icmp4/icmp6  action
+                     for  UDP  connections,  and sctp_abort {output <-%gt; in�‐
+                     port; next(pipeline=egress,table=5);} action for SCTP as‐
+                     sociations.
+
+              •      If any ACLs have tiers configured  on  them,  then  three
+                     priority  500  flows  are  installed. If the current tier
+                     counter is 0, 1, or 2, then the current tier  counter  is
+                     incremented  by  one  and  the packet is sent back to the
+                     previous table for re-evaluation.
+
+     Ingress Table 20: Stateful
+
+              •      A priority 100 flow is added which commits the packet  to
+                     the  conntrack  and  sets the most significant 32-bits of
+                     ct_label with the reg3 value based on the  hint  provided
+                     by  previous  tables  (with  a  match for reg0[1] == 1 &&
+                     reg0[13] == 1). This is used by the ACLs  with  label  to
+                     commit the label value to conntrack.
+
+              •      For  ACLs  without label, a second priority-100 flow com‐
+                     mits packets to connection tracker using ct_commit; next;
+                     action based on a hint provided by  the  previous  tables
+                     (with a match for reg0[1] == 1 && reg0[13] == 0).
+
+              •      A  priority-0  flow that simply moves traffic to the next
+                     table.
+
+     Ingress Table 21: ARP/ND responder
+
+       This table implements ARP/ND responder in a logical  switch  for  known
+       IPs. The advantage of the ARP responder flow is to limit ARP broadcasts
+       by locally responding to ARP requests without the need to send to other
+       hypervisors. One common case is when the inport is a logical port asso‐
+       ciated with a VIF and the broadcast is responded to on the local hyper‐
+       visor  rather  than broadcast across the whole network and responded to
+       by the destination VM. This behavior is proxy ARP.
+
+       ARP requests arrive from VMs from a logical switch inport of  type  de‐
+       fault.  For  this  case,  the logical switch proxy ARP rules can be for
+       other VMs or logical router ports. Logical switch proxy ARP  rules  may
+       be  programmed  both  for  mac binding of IP addresses on other logical
+       switch VIF ports (which are of the default logical  switch  port  type,
+       representing connectivity to VMs or containers), and for mac binding of
+       IP  addresses  on  logical switch router type ports, representing their
+       logical router port peers. In order to support proxy  ARP  for  logical
+       router  ports,  an  IP address must be configured on the logical switch
+       router type port, with the same value as the peer logical router  port.
+       The configured MAC addresses must match as well. When a VM sends an ARP
+       request  for  a  distributed logical router port and if the peer router
+       type port of the attached logical switch does not have  an  IP  address
+       configured,  the  ARP  request will be broadcast on the logical switch.
+       One of the copies of the ARP request will go through the logical switch
+       router type port to the logical  router  datapath,  where  the  logical
+       router  ARP  responder will generate a reply. The MAC binding of a dis‐
+       tributed logical router, once learned by an associated VM, is used  for
+       all  that VM’s communication needing routing. Hence, the action of a VM
+       re-arping for the mac binding of the  logical  router  port  should  be
+       rare.
+
+       Logical  switch  ARP responder proxy ARP rules can also be hit when re‐
+       ceiving ARP requests externally on a L2 gateway port. In this case, the
+       hypervisor acting as an L2 gateway, responds to the ARP request on  be‐
+       half of a destination VM.
+
+       Note  that  ARP requests received from localnet logical inports can ei‐
+       ther go directly to VMs, in which case the VM responds or  can  hit  an
+       ARP  responder  for  a logical router port if the packet is used to re‐
+       solve a logical router port next hop address. In either  case,  logical
+       switch  ARP  responder rules will not be hit. It contains these logical
+       flows:
+
+              •      If the logical  switch  has  no  router  ports  with  op‐
+                     tions:arp_proxy  configured  add  a priority-100 flows to
+                     skip the ARP responder if inport is of type localnet  ad‐
+                     vances  directly  to the next table. ARP requests sent to
+                     localnet ports can be received by  multiple  hypervisors.
+                     Now, because the same mac binding rules are downloaded to
+                     all  hypervisors,  each  of the multiple hypervisors will
+                     respond. This will confuse L2 learning on the  source  of
+                     the  ARP  requests. ARP requests received on an inport of
+                     type router are not expected to hit  any  logical  switch
+                     ARP responder flows. However, no skip flows are installed
+                     for these packets, as there would be some additional flow
+                     cost for this and the value appears limited.
+
+              •      If  inport V is of type virtual adds a priority-100 logi‐
+                     cal flows for each P configured in  the  options:virtual-
+                     parents column with the match
+
+                     inport == P && && ((arp.op == 1 && arp.spa == VIP && arp.tpa == VIP) || (arp.op == 2 && arp.spa == VIP))
+                     inport == P && && ((nd_ns && ip6.dst == {VIP, NS_MULTICAST_ADDR} && nd.target == VIP) || (nd_na && nd.target == VIP))
+
+
+                     and applies the action
+
+                     bind_vport(V, inport);
+
+
+                     and advances the packet to the next table.
+
+                     Where  VIP is the virtual ip configured in the column op�‐
+                     tions:virtual-ip and NS_MULTICAST_ADDR is  solicited-node
+                     multicast address corresponding to the VIP.
+
+              •      Priority-50  flows  that match ARP requests to each known
+                     IP address A of every logical switch  port,  and  respond
+                     with ARP replies directly with corresponding Ethernet ad‐
+                     dress E:
+
+                     eth.dst = eth.src;
+                     eth.src = E;
+                     arp.op = 2; /* ARP reply. */
+                     arp.tha = arp.sha;
+                     arp.sha = E;
+                     arp.tpa = arp.spa;
+                     arp.spa = A;
+                     outport = inport;
+                     flags.loopback = 1;
+                     output;
+
+
+                     These  flows  are  omitted  for logical ports (other than
+                     router ports or localport ports) that  are  down  (unless
+                     ignore_lsp_down  is  configured as true in options column
+                     of NB_Global table of the Northbound database), for logi‐
+                     cal ports of type virtual, for logical  ports  with  ’un‐
+                     known’  address  set  and  for logical ports of a logical
+                     switch configured with other_config:vlan-passthru=true.
+
+                     The above ARP responder flows are added for the  list  of
+                     IPv4  addresses if defined in options:arp_proxy column of
+                     Logical_Switch_Port table for  logical  switch  ports  of
+                     type router.
+
+              •      Priority-50  flows  that match IPv6 ND neighbor solicita‐
+                     tions to each known IP address A (and A’s solicited  node
+                     address)  of  every  logical  switch  port except of type
+                     router, and respond with neighbor advertisements directly
+                     with corresponding Ethernet address E:
+
+                     nd_na {
+                         eth.src = E;
+                         ip6.src = A;
+                         nd.target = A;
+                         nd.tll = E;
+                         outport = inport;
+                         flags.loopback = 1;
+                         output;
+                     };
+
+
+                     Priority-50 flows that match IPv6 ND  neighbor  solicita‐
+                     tions  to each known IP address A (and A’s solicited node
+                     address) of logical switch port of type router,  and  re‐
+                     spond  with  neighbor advertisements directly with corre‐
+                     sponding Ethernet address E:
+
+                     nd_na_router {
+                         eth.src = E;
+                         ip6.src = A;
+                         nd.target = A;
+                         nd.tll = E;
+                         outport = inport;
+                         flags.loopback = 1;
+                         output;
+                     };
+
+
+                     These flows are omitted for  logical  ports  (other  than
+                     router  ports  or  localport ports) that are down (unless
+                     ignore_lsp_down is configured as true in  options  column
+                     of NB_Global table of the Northbound database), for logi‐
+                     cal ports of type virtual and for logical ports with ’un‐
+                     known’ address set.
+
+                     The  above  NDP responder flows are added for the list of
+                     IPv6 addresses if defined in options:arp_proxy column  of
+                     Logical_Switch_Port  table  for  logical  switch ports of
+                     type router.
+
+              •      Priority-100 flows with match criteria like the  ARP  and
+                     ND  flows above, except that they only match packets from
+                     the inport that owns the IP addresses in  question,  with
+                     action  next;.  These flows prevent OVN from replying to,
+                     for example, an ARP request emitted by a VM for  its  own
+                     IP  address.  A VM only makes this kind of request to at‐
+                     tempt to detect a duplicate  IP  address  assignment,  so
+                     sending a reply will prevent the VM from accepting the IP
+                     address that it owns.
+
+                     In  place  of  next;, it would be reasonable to use drop;
+                     for the flows’ actions. If everything is working as it is
+                     configured, then this would produce  equivalent  results,
+                     since no host should reply to the request. But ARPing for
+                     one’s  own  IP  address  is intended to detect situations
+                     where the network is not working as configured, so  drop‐
+                     ping the request would frustrate that intent.
+
+              •      For  each  SVC_MON_SRC_IP  defined  in  the  value of the
+                     ip_port_mappings:ENDPOINT_IP column of Load_Balancer  ta‐
+                     ble,  priority-110  logical  flow is added with the match
+                     arp.tpa == SVC_MON_SRC_IP && && arp.op == 1  and  applies
+                     the action
+
+                     eth.dst = eth.src;
+                     eth.src = E;
+                     arp.op = 2; /* ARP reply. */
+                     arp.tha = arp.sha;
+                     arp.sha = E;
+                     arp.tpa = arp.spa;
+                     arp.spa = A;
+                     outport = inport;
+                     flags.loopback = 1;
+                     output;
+
+
+                     where  E is the service monitor source mac defined in the
+                     options:svc_monitor_mac column in  the  NB_Global  table.
+                     This mac is used as the source mac in the service monitor
+                     packets for the load balancer endpoint IP health checks.
+
+                     SVC_MON_SRC_IP  is  used  as the source ip in the service
+                     monitor IPv4 packets for the load  balancer  endpoint  IP
+                     health checks.
+
+                     These  flows  are  required if an ARP request is sent for
+                     the IP SVC_MON_SRC_IP.
+
+                     For IPv6 the similar flow is added with the following ac‐
+                     tion
+
+                     nd_na {
+                         eth.dst = eth.src;
+                         eth.src = E;
+                         ip6.src = A;
+                         nd.target = A;
+                         nd.tll = E;
+                         outport = inport;
+                         flags.loopback = 1;
+                         output;
+                     };
+
+
+              •      For each VIP configured in the table  Forwarding_Group  a
+                     priority-50  logical flow is added with the match arp.tpa
+                     == vip && && arp.op == 1
+                      and applies the action
+
+                     eth.dst = eth.src;
+                     eth.src = E;
+                     arp.op = 2; /* ARP reply. */
+                     arp.tha = arp.sha;
+                     arp.sha = E;
+                     arp.tpa = arp.spa;
+                     arp.spa = A;
+                     outport = inport;
+                     flags.loopback = 1;
+                     output;
+
+
+                     where E is the forwarding  group’s  mac  defined  in  the
+                     vmac.
+
+                     A is used as either the destination ip for load balancing
+                     traffic  to child ports or as nexthop to hosts behind the
+                     child ports.
+
+                     These flows are required to respond to an ARP request  if
+                     an ARP request is sent for the IP vip.
+
+              •      One priority-0 fallback flow that matches all packets and
+                     advances to the next table.
+
+     Ingress Table 22: DHCP option processing
+
+       This  table adds the DHCPv4 options to a DHCPv4 packet from the logical
+       ports configured with IPv4 address(es) and DHCPv4  options,  and  simi‐
+       larly  for  DHCPv6  options. This table also adds flows for the logical
+       ports of type external.
+
+              •      A priority-100 logical flow is added  for  these  logical
+                     ports which matches the IPv4 packet with udp.src = 68 and
+                     udp.dst = 67 and applies the action put_dhcp_opts and ad‐
+                     vances the packet to the next table.
+
+                     reg0[3] = put_dhcp_opts(offer_ip = ip, options...);
+                     next;
+
+
+                     For  DHCPDISCOVER  and  DHCPREQUEST,  this transforms the
+                     packet into a DHCP reply, adds the DHCP offer IP  ip  and
+                     options  to  the  packet,  and stores 1 into reg0[3]. For
+                     other kinds of packets, it just stores  0  into  reg0[3].
+                     Either way, it continues to the next table.
+
+              •      A  priority-100  logical  flow is added for these logical
+                     ports which matches the IPv6 packet with  udp.src  =  546
+                     and  udp.dst = 547 and applies the action put_dhcpv6_opts
+                     and advances the packet to the next table.
+
+                     reg0[3] = put_dhcpv6_opts(ia_addr = ip, options...);
+                     next;
+
+
+                     For DHCPv6 Solicit/Request/Confirm packets,  this  trans‐
+                     forms  the packet into a DHCPv6 Advertise/Reply, adds the
+                     DHCPv6 offer IP ip and options to the packet, and  stores
+                     1  into  reg0[3].  For  other  kinds  of packets, it just
+                     stores 0 into reg0[3]. Either way, it  continues  to  the
+                     next table.
+
+              •      A priority-0 flow that matches all packets to advances to
+                     table 16.
+
+     Ingress Table 23: DHCP responses
+
+       This  table implements DHCP responder for the DHCP replies generated by
+       the previous table.
+
+              •      A priority 100 logical flow  is  added  for  the  logical
+                     ports  configured  with DHCPv4 options which matches IPv4
+                     packets with udp.src == 68 && udp.dst == 67 && reg0[3] ==
+                     1 and responds back to the inport  after  applying  these
+                     actions. If reg0[3] is set to 1, it means that the action
+                     put_dhcp_opts was successful.
+
+                     eth.dst = eth.src;
+                     eth.src = E;
+                     ip4.src = S;
+                     udp.src = 67;
+                     udp.dst = 68;
+                     outport = P;
+                     flags.loopback = 1;
+                     output;
+
+
+                     where  E  is  the  server MAC address and S is the server
+                     IPv4 address defined in the  DHCPv4  options.  Note  that
+                     ip4.dst field is handled by put_dhcp_opts.
+
+                     (This  terminates  ingress  packet processing; the packet
+                     does not go to the next ingress table.)
+
+              •      A priority 100 logical flow  is  added  for  the  logical
+                     ports  configured  with DHCPv6 options which matches IPv6
+                     packets with udp.src == 546 && udp.dst == 547 &&  reg0[3]
+                     == 1 and responds back to the inport after applying these
+                     actions. If reg0[3] is set to 1, it means that the action
+                     put_dhcpv6_opts was successful.
+
+                     eth.dst = eth.src;
+                     eth.src = E;
+                     ip6.dst = A;
+                     ip6.src = S;
+                     udp.src = 547;
+                     udp.dst = 546;
+                     outport = P;
+                     flags.loopback = 1;
+                     output;
+
+
+                     where  E  is  the  server MAC address and S is the server
+                     IPv6 LLA address generated from the server_id defined  in
+                     the  DHCPv6  options and A is the IPv6 address defined in
+                     the logical port’s addresses column.
+
+                     (This terminates packet processing; the packet  does  not
+                     go on the next ingress table.)
+
+              •      A priority-0 flow that matches all packets to advances to
+                     table 17.
+
+     Ingress Table 24 DNS Lookup
+
+       This  table  looks  up  and resolves the DNS names to the corresponding
+       configured IP address(es).
+
+              •      A priority-100 logical flow for each logical switch data‐
+                     path if it is configured with DNS records, which  matches
+                     the  IPv4  and IPv6 packets with udp.dst = 53 and applies
+                     the action dns_lookup and advances the packet to the next
+                     table.
+
+                     reg0[4] = dns_lookup(); next;
+
+
+                     For valid DNS packets, this transforms the packet into  a
+                     DNS  reply  if the DNS name can be resolved, and stores 1
+                     into reg0[4]. For failed DNS resolution or other kinds of
+                     packets, it just stores 0 into reg0[4].  Either  way,  it
+                     continues to the next table.
+
+     Ingress Table 25 DNS Responses
+
+       This  table  implements  DNS responder for the DNS replies generated by
+       the previous table.
+
+              •      A priority-100 logical flow for each logical switch data‐
+                     path if it is configured with DNS records, which  matches
+                     the IPv4 and IPv6 packets with udp.dst = 53 && reg0[4] ==
+                     1  and  responds  back to the inport after applying these
+                     actions. If reg0[4] is set to 1, it means that the action
+                     dns_lookup was successful.
+
+                     eth.dst <-> eth.src;
+                     ip4.src <-> ip4.dst;
+                     udp.dst = udp.src;
+                     udp.src = 53;
+                     outport = P;
+                     flags.loopback = 1;
+                     output;
+
+
+                     (This terminates ingress packet  processing;  the  packet
+                     does not go to the next ingress table.)
+
+     Ingress table 26 External ports
+
+       Traffic  from  the  external  logical  ports enter the ingress datapath
+       pipeline via the localnet port. This table adds the below logical flows
+       to handle the traffic from these ports.
+
+              •      A priority-100 flow is added for  each  external  logical
+                     port  which  doesn’t  reside  on  a  chassis  to drop the
+                     ARP/IPv6 NS request to the router IP(s) (of  the  logical
+                     switch) which matches on the inport of the external logi‐
+                     cal  port and the valid eth.src address(es) of the exter�‐
+                     nal logical port.
+
+                     This flow guarantees  that  the  ARP/NS  request  to  the
+                     router IP address from the external ports is responded by
+                     only  the chassis which has claimed these external ports.
+                     All the other chassis, drops these packets.
+
+                     A priority-100 flow is added for  each  external  logical
+                     port which doesn’t reside on a chassis to drop any packet
+                     destined to the router mac - with the match inport == ex‐
+                     ternal  &&  eth.src  ==  E  &&  eth.dst == R && !is_chas�‐
+                     sis_resident("external") where E is the external port mac
+                     and R is the router port mac.
+
+              •      A priority-0 flow that matches all packets to advances to
+                     table 20.
+
+     Ingress Table 27 Destination Lookup
+
+       This table implements switching behavior.  It  contains  these  logical
+       flows:
+
+              •      A  priority-110  flow with the match eth.src == E for all
+                     logical switch datapaths  and  applies  the  action  han�‐
+                     dle_svc_check(inport). Where E is the service monitor mac
+                     defined   in   the   options:svc_monitor_mac   column  of
+                     NB_Global table.
+
+              •      A priority-100 flow that punts all  IGMP/MLD  packets  to
+                     ovn-controller  if  multicast  snooping is enabled on the
+                     logical switch.
+
+              •      Priority-90 flows that forward  registered  IP  multicast
+                     traffic  to  their  corresponding  multicast group, which
+                     ovn-northd creates based on  learnt  IGMP_Group  entries.
+                     The  flows  also  forward packets to the MC_MROUTER_FLOOD
+                     multicast group, which ovn-nortdh populates with all  the
+                     logical  ports that are connected to logical routers with
+                     options:mcast_relay=’true’.
+
+              •      A priority-85 flow that forwards all IP multicast traffic
+                     destined to 224.0.0.X to the MC_FLOOD_L2 multicast group,
+                     which ovn-northd populates with  all  non-router  logical
+                     ports.
+
+              •      A priority-85 flow that forwards all IP multicast traffic
+                     destined  to reserved multicast IPv6 addresses (RFC 4291,
+                     2.7.1, e.g., Solicited-Node multicast)  to  the  MC_FLOOD
+                     multicast  group, which ovn-northd populates with all en‐
+                     abled logical ports.
+
+              •      A priority-80 flow that forwards all unregistered IP mul‐
+                     ticast traffic to the MC_STATIC  multicast  group,  which
+                     ovn-northd populates with all the logical ports that have
+                     options  :mcast_flood=�’true�’.  The flow also forwards un‐
+                     registered IP multicast traffic to  the  MC_MROUTER_FLOOD
+                     multicast  group, which ovn-northd populates with all the
+                     logical ports connected to logical routers that have  op�‐
+                     tions :mcast_relay=�’true�’.
+
+              •      A  priority-80 flow that drops all unregistered IP multi‐
+                     cast  traffic  if  other_config  :mcast_snoop=�’true�’  and
+                     other_config  :mcast_flood_unregistered=�’false�’  and  the
+                     switch is not connected to a logical router that has  op�‐
+                     tions :mcast_relay=�’true�’ and the switch doesn’t have any
+                     logical port with options :mcast_flood=�’true�’.
+
+              •      Priority-80  flows  for  each  IP address/VIP/NAT address
+                     owned by a router port connected  to  the  switch.  These
+                     flows  match ARP requests and ND packets for the specific
+                     IP addresses. Matched packets are forwarded only  to  the
+                     router  that  owns  the IP address and to the MC_FLOOD_L2
+                     multicast group which  contains  all  non-router  logical
+                     ports.
+
+              •      Priority-75  flows  for  each port connected to a logical
+                     router matching  self  originated  ARP  request/RARP  re‐
+                     quest/ND  packets.  These  packets  are  flooded  to  the
+                     MC_FLOOD_L2 which contains all non-router logical ports.
+
+              •      A priority-72 flow that outputs all ARP requests  and  ND
+                     packets  with  an Ethernet broadcast or multicast eth.dst
+                     to the MC_FLOOD_L2 multicast group if other_config:broad�‐
+                     cast-arps-to-all-routers=true.
+
+              •      A priority-70 flow that outputs all packets with an  Eth‐
+                     ernet broadcast or multicast eth.dst to the MC_FLOOD mul‐
+                     ticast group.
+
+              •      One priority-50 flow that matches each known Ethernet ad‐
+                     dress  against  eth.dst.  Action of this flow outputs the
+                     packet to the single associated output port if it is  en‐
+                     abled. drop; action is applied if LSP is disabled.
+
+                     For the Ethernet address on a logical switch port of type
+                     router,  when that logical switch port’s addresses column
+                     is set to router and the connected  logical  router  port
+                     has a gateway chassis:
+
+                     •      The  flow  for the connected logical router port’s
+                            Ethernet address is only programmed on the gateway
+                            chassis.
+
+                     •      If the logical router has rules specified  in  nat
+                            with  external_mac,  then those addresses are also
+                            used to populate the switch’s  destination  lookup
+                            on the chassis where logical_port is resident.
+
+                     For the Ethernet address on a logical switch port of type
+                     router,  when that logical switch port’s addresses column
+                     is set to router and the connected  logical  router  port
+                     specifies  a  reside-on-redirect-chassis  and the logical
+                     router to which the connected logical router port belongs
+                     to has a distributed gateway LRP:
+
+                     •      The flow for the connected logical  router  port’s
+                            Ethernet address is only programmed on the gateway
+                            chassis.
+
+                     For  each  forwarding  group  configured  on  the logical
+                     switch datapath,  a  priority-50  flow  that  matches  on
+                     eth.dst == VIP
+                      with  an  action  of  fwd_group(childports=args ), where
+                     args contains comma separated logical switch child  ports
+                     to  load  balance to. If liveness is enabled, then action
+                     also includes  liveness=true.
+
+              •      One priority-0 fallback flow  that  matches  all  packets
+                     with  the  action  outport = get_fdb(eth.dst); next;. The
+                     action get_fdb gets the port for the eth.dst in  the  MAC
+                     learning  table  of the logical switch datapath. If there
+                     is no entry for eth.dst in the MAC learning  table,  then
+                     it stores none in the outport.
+
+     Ingress Table 28 Destination unknown
+
+       This  table  handles the packets whose destination was not found or and
+       looked up in the MAC learning table of the logical switch datapath.  It
+       contains the following flows.
+
+              •      Priority 50 flow with the match outport == P is added for
+                     each disabled Logical Switch Port P. This flow has action
+                     drop;.
+
+              •      If  the  logical  switch has logical ports with ’unknown’
+                     addresses set, then the below logical flow is added
+
+                     •      Priority 50 flow with the match outport ==  "none"
+                            then  outputs  them  to  the  MC_UNKNOWN multicast
+                            group, which ovn-northd populates with all enabled
+                            logical  ports  that  accept  unknown  destination
+                            packets.  As  a  small optimization, if no logical
+                            ports   accept   unknown   destination    packets,
+                            ovn-northd  omits this multicast group and logical
+                            flow.
+
+                     If the logical switch has no logical ports with ’unknown’
+                     address set, then the below logical flow is added
+
+                     •      Priority 50 flow with the match  outport  ==  none
+                            and drops the packets.
+
+              •      One  priority-0  fallback flow that outputs the packet to
+                     the egress stage with the outport learnt from get_fdb ac‐
+                     tion.
+
+     Egress Table 0: to-lport Pre-ACLs
+
+       This is similar to ingress table Pre-ACLs except for to-lport traffic.
+
+       This table also has a priority-110 flow with the match eth.src == E for
+       all logical switch datapaths to move traffic to the next table. Where E
+       is the service monitor mac defined in the options:svc_monitor_mac  col‐
+       umn of NB_Global table.
+
+       This table also has a priority-110 flow with the match outport == I for
+       all logical switch datapaths to move traffic to the next table. Where I
+       is  the  peer  of a logical router port. This flow is added to skip the
+       connection tracking of packets which will be  entering  logical  router
+       datapath from logical switch datapath for routing.
+
+     Egress Table 1: Pre-LB
+
+       This table is similar to ingress table Pre-LB. It contains a priority-0
+       flow  that simply moves traffic to the next table. Moreover it contains
+       two priority-110 flows to move multicast, IPv6 Neighbor  Discovery  and
+       MLD  traffic  to  the next table. If any load balancing rules exist for
+       the datapath, a priority-100 flow is added with a match of ip  and  ac‐
+       tion  of  reg0[2] = 1; next; to act as a hint for table Pre-stateful to
+       send IP packets to the connection tracker for  packet  de-fragmentation
+       and  possibly  DNAT  the destination VIP to one of the selected backend
+       for already committed load balanced traffic.
+
+       This table also has a priority-110 flow with the match eth.src == E for
+       all logical switch datapaths to move traffic to the next table. Where E
+       is the service monitor mac defined in the options:svc_monitor_mac  col‐
+       umn of NB_Global table.
+
+       This table also has a priority-110 flow with the match outport == I for
+       all logical switch datapaths to move traffic to the next table, and, if
+       there are no stateful_acl, clear the ct_state. Where I is the peer of a
+       logical router port. This flow is added to skip the connection tracking
+       of  packets which will be entering logical router datapath from logical
+       switch datapath for routing.
+
+     Egress Table 2: Pre-stateful
+
+       This is similar to ingress table Pre-stateful. This table adds the  be‐
+       low 3 logical flows.
+
+              •      A  Priority-120  flow that send the packets to connection
+                     tracker using ct_lb_mark; as the action so that  the  al‐
+                     ready established traffic gets unDNATted from the backend
+                     IP  to  the load balancer VIP based on a hint provided by
+                     the previous tables with a match for reg0[2] == 1. If the
+                     packet was not DNATted earlier, then ct_lb_mark functions
+                     like ct_next.
+
+              •      A priority-100  flow  sends  the  packets  to  connection
+                     tracker  based  on a hint provided by the previous tables
+                     (with a match for reg0[0] == 1) by using the ct_next; ac‐
+                     tion.
+
+              •      A priority-0 flow that matches all packets to advance  to
+                     the next table.
+
+     Egress Table 3: from-lport ACL hints
+
+       This is similar to ingress table ACL hints.
+
+     Egress Table 4: to-lport ACL evaluation
+
+       This  is similar to ingress table ACL eval except for to-lport ACLs. As
+       a reminder, these flows use the following  register  bits  to  indicate
+       their  verdicts.  Allow-type ACLs set reg8[16], drop ACLs set reg8[17],
+       and reject ACLs set reg8[18].
+
+       Also like with ingress ACLs, egress ACLs can have a configured tier. If
+       a tier is configured,  then  the  current  tier  counter  is  evaluated
+       against  the  ACL’s configured tier in addition to the ACL’s match. The
+       current tier counter is stored in reg8[30..31].
+
+       Similar to ingress table, a priority-65532 flow is added to allow  IPv6
+       Neighbor  solicitation,  Neighbor discover, Router solicitation, Router
+       advertisement and MLD packets regardless of other ACLs defined.
+
+       In addition, the following flows are added.
+
+              •      A priority 34000 logical flow is added for  each  logical
+                     port which has DHCPv4 options defined to allow the DHCPv4
+                     reply  packet and which has DHCPv6 options defined to al‐
+                     low the DHCPv6 reply packet from the  Ingress  Table  18:
+                     DHCP  responses.  This  is indicated by setting the allow
+                     bit.
+
+              •      A priority 34000 logical flow is added for  each  logical
+                     switch  datapath  configured  with  DNS  records with the
+                     match udp.dst = 53 to allow the DNS reply packet from the
+                     Ingress Table 20: DNS responses.  This  is  indicated  by
+                     setting the allow bit.
+
+              •      A  priority  34000 logical flow is added for each logical
+                     switch datapath with the match eth.src = E to  allow  the
+                     service  monitor  request  packet  generated  by ovn-con�‐
+                     troller with the action next, where E is the service mon‐
+                     itor mac defined in the options:svc_monitor_mac column of
+                     NB_Global table. This is indicated by setting  the  allow
+                     bit.
+
+     Egress Table 5: to-lport ACL action
+
+       This is similar to ingress table ACL action.
+
+     Egress Table 6: to-lport QoS Marking
+
+       This  is  similar  to  ingress  table  QoS marking except they apply to
+       to-lport QoS rules.
+
+     Egress Table 7: to-lport QoS Meter
+
+       This is similar to  ingress  table  QoS  meter  except  they  apply  to
+       to-lport QoS rules.
+
+     Egress Table 8: Stateful
+
+       This  is  similar  to  ingress  table Stateful except that there are no
+       rules added for load balancing new connections.
+
+     Egress Table 9: Egress Port Security - check
+
+       This is similar to the port security logic in table Ingress Port  Secu�‐
+       rity  check  except that action check_out_port_sec is used to check the
+       port security rules. This table adds the below logical flows.
+
+              •      A priority 100 flow which matches on the multicast  traf‐
+                     fic  and  applies  the  action REGBIT_PORT_SEC_DROP" = 0;
+                     next;" to skip the out port security checks.
+
+              •      A priority 0 logical flow is added which matches  on  all
+                     the  packets and applies the action REGBIT_PORT_SEC_DROP"
+                     =    check_out_port_sec();     next;".     The     action
+                     check_out_port_sec  applies the port security rules based
+                     on the addresses defined in the port_security  column  of
+                     Logical_Switch_Port table before delivering the packet to
+                     the outport.
+
+     Egress Table 10: Egress Port Security - Apply
+
+       This  is  similar to the ingress port security logic in ingress table A
+       Ingress Port Security - Apply. This table drops the packets if the port
+       security check failed in the previous stage i.e the register  bit  REG�‐
+       BIT_PORT_SEC_DROP is set to 1.
+
+       The following flows are added.
+
+              •      For  each  port  configured  with  egress  qos in the op�‐
+                     tions:qdisc_queue_id column of Logical_Switch_Port,  run‐
+                     ning a localnet port on the same logical switch, a prior‐
+                     ity  110 flow is added which matches on the localnet out�‐
+                     port and on  the  port  inport  and  applies  the  action
+                     set_queue(id); output;".
+
+              •      For  each localnet port configured with egress qos in the
+                     options:qdisc_queue_id column of  Logical_Switch_Port,  a
+                     priority  100 flow is added which matches on the localnet
+                     outport and applies the action set_queue(id); output;".
+
+                     Please remember to mark the corresponding physical inter‐
+                     face with ovn-egress-iface set to true in external_ids.
+
+              •      A priority-50 flow that drops the packet if the  register
+                     bit REGBIT_PORT_SEC_DROP is set to 1.
+
+              •      A priority-0 flow that outputs the packet to the outport.
+
+   Logical Router Datapaths
+       Logical router datapaths will only exist for Logical_Router rows in the
+       OVN_Northbound database that do not have enabled set to false
+
+     Ingress Table 0: L2 Admission Control
+
+       This  table drops packets that the router shouldn’t see at all based on
+       their Ethernet headers. It contains the following flows:
+
+              •      Priority-100 flows to drop packets with VLAN tags or mul‐
+                     ticast Ethernet source addresses.
+
+              •      For each enabled router port P with Ethernet address E, a
+                     priority-50 flow that matches inport == P  &&  (eth.mcast
+                     || eth.dst == E), stores the router port ethernet address
+                     and  advances  to next table, with action xreg0[0..47]=E;
+                     next;.
+
+                     For the gateway port  on  a  distributed  logical  router
+                     (where  one of the logical router ports specifies a gate‐
+                     way chassis), the above flow matching  eth.dst  ==  E  is
+                     only programmed on the gateway port instance on the gate‐
+                     way  chassis. If LRP’s logical switch has attached LSP of
+                     vtep type, the is_chassis_resident() part is not added to
+                     lflow to allow traffic originated from logical switch  to
+                     reach LR services (LBs, NAT).
+
+                     For  a  distributed  logical router or for gateway router
+                     where the port is configured with options:gateway_mtu the
+                     action   of   the   above   flow   is   modified   adding
+                     check_pkt_larger in order to mark the packet setting REG�‐
+                     BIT_PKT_LARGER  if  the  size is greater than the MTU. If
+                     the port is also configured with  options:gateway_mtu_by�‐
+                     pass then another flow is added, with priority-55, to by‐
+                     pass  the check_pkt_larger flow. This is useful for traf‐
+                     fic that normally doesn’t need to be fragmented  and  for
+                     which  check_pkt_larger,  which might not be offloadable,
+                     is not really needed. One such example is TCP traffic.
+
+              •      For each dnat_and_snat NAT rule on a  distributed  router
+                     that  specifies  an external Ethernet address E, a prior‐
+                     ity-50 flow that matches inport == GW &&  eth.dst  ==  E,
+                     where  GW  is the logical router distributed gateway port
+                     corresponding to the NAT rule  (specified  or  inferred),
+                     with action xreg0[0..47]=E; next;.
+
+                     This flow is only programmed on the gateway port instance
+                     on  the  chassis  where the logical_port specified in the
+                     NAT rule resides.
+
+              •      A priority-0 logical flow that matches  all  packets  not
+                     already handled (match 1) and drops them (action drop;).
+
+       Other packets are implicitly dropped.
+
+     Ingress Table 1: Neighbor lookup
+
+       For  ARP and IPv6 Neighbor Discovery packets, this table looks into the
+       MAC_Binding records to determine if OVN needs to learn  the  mac  bind‐
+       ings. Following flows are added:
+
+              •      For  each router port P that owns IP address A, which be‐
+                     longs to subnet S with prefix length L, if the option al�‐
+                     ways_learn_from_arp_request is true for  this  router,  a
+                     priority-100  flow  is added which matches inport == P &&
+                     arp.spa == S/L && arp.op == 1 (ARP request) with the fol‐
+                     lowing actions:
+
+                     reg9[2] = lookup_arp(inport, arp.spa, arp.sha);
+                     next;
+
+
+                     If the option always_learn_from_arp_request is false, the
+                     following two flows are added.
+
+                     A priority-110 flow is added which matches inport == P &&
+                     arp.spa == S/L && arp.tpa == A && arp.op ==  1  (ARP  re‐
+                     quest) with the following actions:
+
+                     reg9[2] = lookup_arp(inport, arp.spa, arp.sha);
+                     reg9[3] = 1;
+                     next;
+
+
+                     A priority-100 flow is added which matches inport == P &&
+                     arp.spa == S/L && arp.op == 1 (ARP request) with the fol‐
+                     lowing actions:
+
+                     reg9[2] = lookup_arp(inport, arp.spa, arp.sha);
+                     reg9[3] = lookup_arp_ip(inport, arp.spa);
+                     next;
+
+
+                     If  the  logical  router  port P is a distributed gateway
+                     router port, additional  match  is_chassis_resident(cr-P)
+                     is added for all these flows.
+
+              •      A  priority-100  flow  which matches on ARP reply packets
+                     and   applies   the   actions   if   the    option    al�‐
+                     ways_learn_from_arp_request is true:
+
+                     reg9[2] = lookup_arp(inport, arp.spa, arp.sha);
+                     next;
+
+
+                     If the option always_learn_from_arp_request is false, the
+                     above actions will be:
+
+                     reg9[2] = lookup_arp(inport, arp.spa, arp.sha);
+                     reg9[3] = 1;
+                     next;
+
+
+              •      A  priority-100  flow which matches on IPv6 Neighbor Dis‐
+                     covery advertisement packet and applies  the  actions  if
+                     the option always_learn_from_arp_request is true:
+
+                     reg9[2] = lookup_nd(inport, nd.target, nd.tll);
+                     next;
+
+
+                     If the option always_learn_from_arp_request is false, the
+                     above actions will be:
+
+                     reg9[2] = lookup_nd(inport, nd.target, nd.tll);
+                     reg9[3] = 1;
+                     next;
+
+
+              •      A  priority-100  flow which matches on IPv6 Neighbor Dis‐
+                     covery solicitation packet and applies the actions if the
+                     option always_learn_from_arp_request is true:
+
+                     reg9[2] = lookup_nd(inport, ip6.src, nd.sll);
+                     next;
+
+
+                     If the option always_learn_from_arp_request is false, the
+                     above actions will be:
+
+                     reg9[2] = lookup_nd(inport, ip6.src, nd.sll);
+                     reg9[3] = lookup_nd_ip(inport, ip6.src);
+                     next;
+
+
+              •      A priority-0 fallback flow that matches all  packets  and
+                     applies  the  action  reg9[2]  =  1;  next; advancing the
+                     packet to the next table.
+
+     Ingress Table 2: Neighbor learning
+
+       This table adds flows to learn the mac bindings from the ARP  and  IPv6
+       Neighbor  Solicitation/Advertisement  packets if it is needed according
+       to the lookup results from the previous stage.
+
+       reg9[2] will be 1 if the lookup_arp/lookup_nd in the previous table was
+       successful or skipped, meaning no need to learn mac  binding  from  the
+       packet.
+
+       reg9[3] will be 1 if the lookup_arp_ip/lookup_nd_ip in the previous ta‐
+       ble  was  successful  or skipped, meaning it is ok to learn mac binding
+       from the packet (if reg9[2] is 0).
+
+              •      A priority-100 flow  with  the  match  reg9[2]  ==  1  ||
+                     reg9[3] == 0 and advances the packet to the next table as
+                     there is no need to learn the neighbor.
+
+              •      A  priority-95 flow with the match nd_ns && (ip6.src == 0
+                     || nd.sll == 0) and applies the action next;
+
+              •      A priority-90 flow with the match arp and applies the ac‐
+                     tion put_arp(inport, arp.spa, arp.sha); next;
+
+              •      A priority-95 flow with the match nd_na  && nd.tll  ==  0
+                     and   applies   the   action   put_nd(inport,  nd.target,
+                     eth.src); next;
+
+              •      A priority-90 flow with the match nd_na and  applies  the
+                     action put_nd(inport, nd.target, nd.tll); next;
+
+              •      A  priority-90  flow with the match nd_ns and applies the
+                     action put_nd(inport, ip6.src, nd.sll); next;
+
+              •      A priority-0 logical flow that matches  all  packets  not
+                     already handled (match 1) and drops them (action drop;).
+
+     Ingress Table 3: IP Input
+
+       This table is the core of the logical router datapath functionality. It
+       contains  the following flows to implement very basic IP host function‐
+       ality.
+
+              •      For each dnat_and_snat NAT rule on a distributed  logical
+                     routers  or  gateway routers with gateway port configured
+                     with options:gateway_mtu to a valid integer  value  M,  a
+                     priority-160  flow  with  the match inport == LRP && REG�‐
+                     BIT_PKT_LARGER && REGBIT_EGRESS_LOOPBACK == 0, where  LRP
+                     is  the logical router port and applies the following ac‐
+                     tion for ipv4 and ipv6 respectively:
+
+                     icmp4_error {
+                         icmp4.type = 3; /* Destination Unreachable. */
+                         icmp4.code = 4;  /* Frag Needed and DF was Set. */
+                         icmp4.frag_mtu = M;
+                         eth.dst = eth.src;
+                         eth.src = E;
+                         ip4.dst = ip4.src;
+                         ip4.src = I;
+                         ip.ttl = 255;
+                         REGBIT_EGRESS_LOOPBACK = 1;
+                         REGBIT_PKT_LARGER 0;
+                         outport = LRP;
+                         flags.loopback = 1;
+                         output;
+                     };
+                     icmp6_error {
+                         icmp6.type = 2;
+                         icmp6.code = 0;
+                         icmp6.frag_mtu = M;
+                         eth.dst = eth.src;
+                         eth.src = E;
+                         ip6.dst = ip6.src;
+                         ip6.src = I;
+                         ip.ttl = 255;
+                         REGBIT_EGRESS_LOOPBACK = 1;
+                         REGBIT_PKT_LARGER 0;
+                         outport = LRP;
+                         flags.loopback = 1;
+                         output;
+                     };
+
+
+                     where E and I are the NAT rule external mac  and  IP  re‐
+                     spectively.
+
+              •      For  distributed  logical routers or gateway routers with
+                     gateway port configured  with  options:gateway_mtu  to  a
+                     valid  integer  value, a priority-150 flow with the match
+                     inport == LRP && REGBIT_PKT_LARGER && REGBIT_EGRESS_LOOP�‐
+                     BACK == 0, where LRP is the logical router port  and  ap‐
+                     plies  the  following  action  for  ipv4 and ipv6 respec‐
+                     tively:
+
+                     icmp4_error {
+                         icmp4.type = 3; /* Destination Unreachable. */
+                         icmp4.code = 4;  /* Frag Needed and DF was Set. */
+                         icmp4.frag_mtu = M;
+                         eth.dst = E;
+                         ip4.dst = ip4.src;
+                         ip4.src = I;
+                         ip.ttl = 255;
+                         REGBIT_EGRESS_LOOPBACK = 1;
+                         REGBIT_PKT_LARGER 0;
+                         next(pipeline=ingress, table=0);
+                     };
+                     icmp6_error {
+                         icmp6.type = 2;
+                         icmp6.code = 0;
+                         icmp6.frag_mtu = M;
+                         eth.dst = E;
+                         ip6.dst = ip6.src;
+                         ip6.src = I;
+                         ip.ttl = 255;
+                         REGBIT_EGRESS_LOOPBACK = 1;
+                         REGBIT_PKT_LARGER 0;
+                         next(pipeline=ingress, table=0);
+                     };
+
+
+              •      For each NAT entry of a distributed logical router  (with
+                     distributed  gateway router port(s)) of type snat, a pri‐
+                     ority-120 flow with the match inport == P && ip4.src == A
+                     advances the packet to the next pipeline, where P is  the
+                     distributed  logical router port corresponding to the NAT
+                     entry (specified or inferred) and A  is  the  external_ip
+                     set  in  the  NAT  entry.  If  A is an IPv6 address, then
+                     ip6.src is used for the match.
+
+                     The above flow is required to handle the routing  of  the
+                     East/west NAT traffic.
+
+              •      For  each  BFD  port the two following priority-110 flows
+                     are added to manage BFD traffic:
+
+                     •      if ip4.src or ip6.src is any IP address  owned  by
+                            the  router  port and udp.dst == 3784 , the packet
+                            is advanced to the next pipeline stage.
+
+                     •      if ip4.dst or ip6.dst is any IP address  owned  by
+                            the  router  port  and  udp.dst == 3784 , the han�‐
+                            dle_bfd_msg action is executed.
+
+              •      L3 admission control: Priority-120 flows allows IGMP  and
+                     MLD packets if the router has logical ports that have op�‐
+                     tions :mcast_flood=�’true�’.
+
+              •      L3  admission  control: A priority-100 flow drops packets
+                     that match any of the following:
+
+                     •      ip4.src[28..31] == 0xe (multicast source)
+
+                     •      ip4.src == 255.255.255.255 (broadcast source)
+
+                     •      ip4.src == 127.0.0.0/8 || ip4.dst  ==  127.0.0.0/8
+                            (localhost source or destination)
+
+                     •      ip4.src == 0.0.0.0/8 || ip4.dst == 0.0.0.0/8 (zero
+                            network source or destination)
+
+                     •      ip4.src  or ip6.src is any IP address owned by the
+                            router, unless the packet was recirculated due  to
+                            egress    loopback    as    indicated    by   REG�‐
+                            BIT_EGRESS_LOOPBACK.
+
+                     •      ip4.src is the broadcast address of any IP network
+                            known to the router.
+
+              •      A priority-100 flow parses DHCPv6 replies from IPv6  pre‐
+                     fix  delegation  routers  (udp.src  ==  547 && udp.dst ==
+                     546). The handle_dhcpv6_reply is used to send IPv6 prefix
+                     delegation messages to the delegation router.
+
+              •      ICMP echo reply. These flows reply to ICMP echo  requests
+                     received  for the router’s IP address. Let A be an IP ad‐
+                     dress owned by a router port. Then, for each A that is an
+                     IPv4 address, a priority-90 flow matches on ip4.dst ==  A
+                     and  icmp4.type  ==  8  && icmp4.code == 0 (ICMP echo re‐
+                     quest). For each A that is an IPv6 address, a priority-90
+                     flow matches on ip6.dst == A and  icmp6.type  ==  128  &&
+                     icmp6.code  ==  0  (ICMPv6 echo request). The port of the
+                     router that receives the echo request  does  not  matter.
+                     Also,  the  ip.ttl  of  the  echo  request  packet is not
+                     checked, so it complies with RFC 1812,  section  4.2.2.9.
+                     Flows for ICMPv4 echo requests use the following actions:
+
+                     ip4.dst <-> ip4.src;
+                     ip.ttl = 255;
+                     icmp4.type = 0;
+                     flags.loopback = 1;
+                     next;
+
+
+                     Flows for ICMPv6 echo requests use the following actions:
+
+                     ip6.dst <-> ip6.src;
+                     ip.ttl = 255;
+                     icmp6.type = 129;
+                     flags.loopback = 1;
+                     next;
+
+
+              •      Reply to ARP requests.
+
+                     These flows reply to ARP requests for the router’s own IP
+                     address.  The  ARP  requests  are handled only if the re‐
+                     questor’s IP belongs to the same subnets of  the  logical
+                     router  port. For each router port P that owns IP address
+                     A, which belongs to subnet S with prefix  length  L,  and
+                     Ethernet  address E, a priority-90 flow matches inport ==
+                     P && arp.spa == S/L && arp.op == 1 && arp.tpa ==  A  (ARP
+                     request) with the following actions:
+
+                     eth.dst = eth.src;
+                     eth.src = xreg0[0..47];
+                     arp.op = 2; /* ARP reply. */
+                     arp.tha = arp.sha;
+                     arp.sha = xreg0[0..47];
+                     arp.tpa = arp.spa;
+                     arp.spa = A;
+                     outport = inport;
+                     flags.loopback = 1;
+                     output;
+
+
+                     For  the  gateway  port  on  a distributed logical router
+                     (where one of the logical router ports specifies a  gate‐
+                     way  chassis), the above flows are only programmed on the
+                     gateway port instance on the gateway chassis. This behav‐
+                     ior avoids generation of multiple ARP responses from dif‐
+                     ferent chassis, and allows upstream MAC learning to point
+                     to the gateway chassis.
+
+                     For  the  logical  router  port  with  the   option   re�‐
+                     side-on-redirect-chassis  set (which is centralized), the
+                     above flows are only programmed on the gateway  port  in‐
+                     stance  on the gateway chassis (if the logical router has
+                     a distributed gateway port). This behavior avoids genera‐
+                     tion of multiple ARP responses  from  different  chassis,
+                     and  allows upstream MAC learning to point to the gateway
+                     chassis.
+
+              •      Reply to IPv6 Neighbor Solicitations. These  flows  reply
+                     to  Neighbor  Solicitation  requests for the router’s own
+                     IPv6 address and populate the logical router’s mac  bind‐
+                     ing table.
+
+                     For  each  router  port  P  that owns IPv6 address A, so‐
+                     licited node address S, and Ethernet address E, a  prior‐
+                     ity-90  flow  matches  inport == P && nd_ns && ip6.dst ==
+                     {A, E} && nd.target == A with the following actions:
+
+                     nd_na_router {
+                         eth.src = xreg0[0..47];
+                         ip6.src = A;
+                         nd.target = A;
+                         nd.tll = xreg0[0..47];
+                         outport = inport;
+                         flags.loopback = 1;
+                         output;
+                     };
+
+
+                     For the gateway port  on  a  distributed  logical  router
+                     (where  one of the logical router ports specifies a gate‐
+                     way chassis), the above flows replying to  IPv6  Neighbor
+                     Solicitations are only programmed on the gateway port in‐
+                     stance  on the gateway chassis. This behavior avoids gen‐
+                     eration of multiple replies from different  chassis,  and
+                     allows  upstream  MAC  learning  to  point to the gateway
+                     chassis.
+
+              •      These flows reply to ARP requests or IPv6 neighbor solic‐
+                     itation for the virtual IP addresses  configured  in  the
+                     router for NAT (both DNAT and SNAT) or load balancing.
+
+                     IPv4:  For  a  configured NAT (both DNAT and SNAT) IP ad‐
+                     dress or a load balancer IPv4 VIP A, for each router port
+                     P with Ethernet address E,  a  priority-90  flow  matches
+                     arp.op  ==  1 && arp.tpa == A (ARP request) with the fol‐
+                     lowing actions:
+
+                     eth.dst = eth.src;
+                     eth.src = xreg0[0..47];
+                     arp.op = 2; /* ARP reply. */
+                     arp.tha = arp.sha;
+                     arp.sha = xreg0[0..47];
+                     arp.tpa <-> arp.spa;
+                     outport = inport;
+                     flags.loopback = 1;
+                     output;
+
+
+                     IPv4: For a configured load balancer IPv4 VIP, a  similar
+                     flow  is  added  with the additional match inport == P if
+                     the VIP is reachable from any logical router port of  the
+                     logical router.
+
+                     If  the  router  port  P  is a distributed gateway router
+                     port, then the is_chassis_resident(P) is  also  added  in
+                     the match condition for the load balancer IPv4 VIP A.
+
+                     IPv6:  For  a  configured NAT (both DNAT and SNAT) IP ad‐
+                     dress or a load balancer IPv6 VIP A (if the VIP is reach‐
+                     able from any logical router port of the logical router),
+                     solicited node address S, for each  router  port  P  with
+                     Ethernet  address E, a priority-90 flow matches inport ==
+                     P && nd_ns && ip6.dst == {A, S} && nd.target  ==  A  with
+                     the following actions:
+
+                     eth.dst = eth.src;
+                     nd_na {
+                         eth.src = xreg0[0..47];
+                         nd.tll = xreg0[0..47];
+                         ip6.src = A;
+                         nd.target = A;
+                         outport = inport;
+                         flags.loopback = 1;
+                         output;
+                     }
+
+
+                     If  the  router  port  P  is a distributed gateway router
+                     port, then the is_chassis_resident(P) is  also  added  in
+                     the match condition for the load balancer IPv6 VIP A.
+
+                     For the gateway port on a distributed logical router with
+                     NAT  (where  one  of the logical router ports specifies a
+                     gateway chassis):
+
+                     •      If the corresponding NAT rule cannot be handled in
+                            a distributed manner, then a priority-92  flow  is
+                            programmed  on  the  gateway  port instance on the
+                            gateway chassis. A priority-91 drop flow  is  pro‐
+                            grammed  on the other chassis when ARP requests/NS
+                            packets are received on the gateway port. This be‐
+                            havior avoids generation of multiple ARP responses
+                            from different chassis, and  allows  upstream  MAC
+                            learning to point to the gateway chassis.
+
+                     •      If  the corresponding NAT rule can be handled in a
+                            distributed manner, then this flow  is  only  pro‐
+                            grammed  on  the  gateway  port instance where the
+                            logical_port specified in the NAT rule resides.
+
+                            Some of the actions are different for  this  case,
+                            using  the  external_mac specified in the NAT rule
+                            rather than the gateway port’s Ethernet address E:
+
+                            eth.src = external_mac;
+                            arp.sha = external_mac;
+
+
+                            or in the case of IPv6 neighbor solicition:
+
+                            eth.src = external_mac;
+                            nd.tll = external_mac;
+
+
+                            This behavior avoids generation  of  multiple  ARP
+                            responses  from  different chassis, and allows up‐
+                            stream MAC learning to point to the correct  chas‐
+                            sis.
+
+              •      Priority-85  flows  which drops the ARP and IPv6 Neighbor
+                     Discovery packets.
+
+              •      A priority-84 flow explicitly allows IPv6 multicast traf‐
+                     fic that is supposed to reach the router pipeline  (i.e.,
+                     router solicitation and router advertisement packets).
+
+              •      A  priority-83 flow explicitly drops IPv6 multicast traf‐
+                     fic that is destined to reserved multicast groups.
+
+              •      A priority-82 flow allows IP  multicast  traffic  if  op�‐
+                     tions:mcast_relay=’true’, otherwise drops it.
+
+              •      UDP  port  unreachable.  Priority-80  flows generate ICMP
+                     port unreachable messages in reply to UDP  datagrams  di‐
+                     rected  to the router’s IP address, except in the special
+                     case of gateways, which  accept  traffic  directed  to  a
+                     router IP for load balancing and NAT purposes.
+
+                     These  flows  should  not match IP fragments with nonzero
+                     offset.
+
+              •      TCP reset. Priority-80 flows generate TCP reset  messages
+                     in reply to TCP datagrams directed to the router’s IP ad‐
+                     dress,  except in the special case of gateways, which ac‐
+                     cept traffic directed to a router IP for  load  balancing
+                     and NAT purposes.
+
+                     These  flows  should  not match IP fragments with nonzero
+                     offset.
+
+              •      Protocol or address unreachable. Priority-70 flows gener‐
+                     ate ICMP protocol or  address  unreachable  messages  for
+                     IPv4  and  IPv6 respectively in reply to packets directed
+                     to the router’s IP address on  IP  protocols  other  than
+                     UDP,  TCP,  and ICMP, except in the special case of gate‐
+                     ways, which accept traffic directed to a  router  IP  for
+                     load balancing purposes.
+
+                     These  flows  should  not match IP fragments with nonzero
+                     offset.
+
+              •      Drop other IP traffic to this router.  These  flows  drop
+                     any  other  traffic  destined  to  an  IP address of this
+                     router that is not already handled by one  of  the  flows
+                     above,  which  amounts to ICMP (other than echo requests)
+                     and fragments with nonzero offsets. For each IP address A
+                     owned by the router, a priority-60 flow  matches  ip4.dst
+                     ==  A or ip6.dst == A and drops the traffic. An exception
+                     is made and the above flow is not  added  if  the  router
+                     port’s  own  IP  address  is used to SNAT packets passing
+                     through that router or if it is used as a  load  balancer
+                     VIP.
+
+       The flows above handle all of the traffic that might be directed to the
+       router  itself.  The following flows (with lower priorities) handle the
+       remaining traffic, potentially for forwarding:
+
+              •      Drop Ethernet local broadcast. A  priority-50  flow  with
+                     match  eth.bcast drops traffic destined to the local Eth‐
+                     ernet  broadcast  address.  By  definition  this  traffic
+                     should not be forwarded.
+
+              •      Avoid  ICMP  time  exceeded  for multicast. A priority-32
+                     flow with match ip.ttl == {0,  1}  &&  !ip.later_frag  &&
+                     (ip4.mcast  ||  ip6.mcast) and actions drop; drops multi‐
+                     cast packets whose TTL has expired without  sending  ICMP
+                     time exceeded.
+
+              •      ICMP  time exceeded. For each router port P, whose IP ad‐
+                     dress is A, a priority-31 flow with match inport == P  &&
+                     ip.ttl  == {0, 1} && !ip.later_frag matches packets whose
+                     TTL has expired, with the following actions  to  send  an
+                     ICMP time exceeded reply for IPv4 and IPv6 respectively:
+
+                     icmp4 {
+                         icmp4.type = 11; /* Time exceeded. */
+                         icmp4.code = 0;  /* TTL exceeded in transit. */
+                         ip4.dst = ip4.src;
+                         ip4.src = A;
+                         ip.ttl = 254;
+                         next;
+                     };
+                     icmp6 {
+                         icmp6.type = 3; /* Time exceeded. */
+                         icmp6.code = 0;  /* TTL exceeded in transit. */
+                         ip6.dst = ip6.src;
+                         ip6.src = A;
+                         ip.ttl = 254;
+                         next;
+                     };
+
+
+              •      TTL  discard. A priority-30 flow with match ip.ttl == {0,
+                     1} and actions drop; drops other packets  whose  TTL  has
+                     expired, that should not receive a ICMP error reply (i.e.
+                     fragments with nonzero offset).
+
+              •      Next  table.  A  priority-0  flows match all packets that
+                     aren’t already handled and uses  actions  next;  to  feed
+                     them to the next table.
+
+     Ingress Table 4: UNSNAT
+
+       This  is  for  already  established connections’ reverse traffic. i.e.,
+       SNAT has already been done in egress pipeline and now  the  packet  has
+       entered the ingress pipeline as part of a reply. It is unSNATted here.
+
+       Ingress Table 4: UNSNAT on Gateway and Distributed Routers
+
+              •      If the Router (Gateway or Distributed) is configured with
+                     load balancers, then below lflows are added:
+
+                     For each IPv4 address A defined as load balancer VIP with
+                     the  protocol  P  (and the protocol port T if defined) is
+                     also present as an external_ip in the NAT table, a prior‐
+                     ity-120 logical flow is  added  with  the  match  ip4  &&
+                     ip4.dst  ==  A  && P with the action next; to advance the
+                     packet to the next table. If the load balancer has proto‐
+                     col port B defined, then the match also has P.dst == B.
+
+                     The above flows are also added for IPv6 load balancers.
+
+       Ingress Table 4: UNSNAT on Gateway Routers
+
+              •      If the Gateway router has been configured to  force  SNAT
+                     any  previously DNATted packets to B, a priority-110 flow
+                     matches ip && ip4.dst == B or ip && ip6.dst == B with  an
+                     action ct_snat; .
+
+                     If    the    Gateway    router    is    configured   with
+                     lb_force_snat_ip=router_ip then for every logical  router
+                     port  P attached to the Gateway router with the router ip
+                     B, a priority-110 flow is added with the match inport  ==
+                     P  && ip4.dst == B or inport == P && ip6.dst == B with an
+                     action ct_snat; .
+
+                     If the Gateway router has been configured to  force  SNAT
+                     any previously load-balanced packets to B, a priority-100
+                     flow  matches  ip  &&  ip4.dst == B or ip && ip6.dst == B
+                     with an action ct_snat; .
+
+                     For each NAT configuration in the  OVN  Northbound  data‐
+                     base,  that  asks  to  change  the source IP address of a
+                     packet from A to B, a  priority-90  flow  matches  ip  &&
+                     ip4.dst  ==  B  or  ip  &&  ip6.dst  ==  B with an action
+                     ct_snat; . If the NAT rule is of type  dnat_and_snat  and
+                     has  stateless=true in the options, then the action would
+                     be next;.
+
+                     A priority-0 logical flow with match 1 has actions next;.
+
+       Ingress Table 4: UNSNAT on Distributed Routers
+
+              •      For each configuration in the  OVN  Northbound  database,
+                     that  asks  to  change  the source IP address of a packet
+                     from A to B, two priority-100 flows are added.
+
+                     If the NAT rule cannot be handled in a  distributed  man‐
+                     ner,  then  the  below  priority-100  flows are only pro‐
+                     grammed on the gateway chassis.
+
+                     •      The first flow matches ip && ip4.dst == B  &&  in�‐
+                            port == GW
+                             or ip && ip6.dst == B && inport == GW where GW is
+                            the  distributed gateway port corresponding to the
+                            NAT rule (specified or inferred), with  an  action
+                            ct_snat;  to unSNAT in the common zone. If the NAT
+                            rule is  of  type  dnat_and_snat  and  has  state�‐
+                            less=true in the options, then the action would be
+                            next;.
+
+                            If the NAT entry is of type snat, then there is an
+                            additional match is_chassis_resident(cr-GW)
+                             where cr-GW is the chassis resident port of GW.
+
+                     A priority-0 logical flow with match 1 has actions next;.
+
+     Ingress Table 5: DEFRAG
+
+       This  is to send packets to connection tracker for tracking and defrag‐
+       mentation. It contains a priority-0 flow that simply moves  traffic  to
+       the next table.
+
+       For  all  load  balancing  rules  that are configured in OVN_Northbound
+       database for a Gateway router, a priority-100 flow is  added  for  each
+       configured virtual IP address VIP. For IPv4 VIPs the flow matches ip &&
+       ip4.dst  ==  VIP. For IPv6 VIPs, the flow matches ip && ip6.dst == VIP.
+       The flow applies the action  ct_dnat; to send IP packets to the connec‐
+       tion tracker for packet de-fragmentation and to dnat the destination IP
+       for the committed connection before sending it to the next table.
+
+       If ECMP routes with symmetric reply are configured  in  the  OVN_North�‐
+       bound  database  for a gateway router, a priority-100 flow is added for
+       each router port on which symmetric replies are configured. The  match‐
+       ing  logic for these ports essentially reverses the configured logic of
+       the ECMP route. So for instance, a route  with  a  destination  routing
+       policy  will  instead match if the source IP address matches the static
+       route’s prefix. The flow uses the actions chk_ecmp_nh_mac(); ct_next or
+       chk_ecmp_nh(); ct_next to send IP packets to table 76 or to table 77 in
+       order to check if source info are already stored by OVN and then to the
+       connection tracker for  packet  de-fragmentation  and  tracking  before
+       sending it to the next table.
+
+       If load balancing rules are configured in OVN_Northbound database for a
+       Gateway  router,  a priority 50 flow that matches icmp || icmp6 with an
+       action of ct_dnat;, this allows potentially  related  ICMP  traffic  to
+       pass through CT.
+
+     Ingress Table 6: Load balancing affinity check
+
+       Load  balancing  affinity  check  table  contains the following logical
+       flows:
+
+              •      For all the configured load balancing rules for a logical
+                     router where a positive affinity timeout is specified  in
+                     options  column, that includes a L4 port PORT of protocol
+                     P and IPv4 or IPv6 address VIP, a priority-100 flow  that
+                     matches on ct.new && ip && ip.dst == VIP && P && P.dst ==
+                     PORT (xxreg0 == VIP
+                      in  the  IPv6  case)  with  an  action of reg0 = ip.dst;
+                     reg9[16..31]  =  P.dst;  reg9[6]  =  chk_lb_aff();  next;
+                     (xxreg0 == ip6.dst  in the IPv6 case)
+
+              •      A  priority  0 flow is added which matches on all packets
+                     and applies the action next;.
+
+     Ingress Table 7: DNAT
+
+       Packets enter the pipeline with destination IP address that needs to be
+       DNATted from a virtual IP address to a real IP address. Packets in  the
+       reverse direction needs to be unDNATed.
+
+       Ingress Table 7: Load balancing DNAT rules
+
+       Following  load  balancing  DNAT  flows are added for Gateway router or
+       Router with gateway port. These flows are programmed only on the  gate‐
+       way  chassis. These flows do not get programmed for load balancers with
+       IPv6 VIPs.
+
+              •      For all the configured load balancing rules for a logical
+                     router where a positive affinity timeout is specified  in
+                     options  column, that includes a L4 port PORT of protocol
+                     P and IPv4 or IPv6 address VIP, a priority-150 flow  that
+                     matches  on reg9[6] == 1 && ct.new && ip && ip.dst == VIP
+                     && P && P.dst ==  PORT with an action of ct_lb_mark(args)
+                     , where args contains comma separated IP  addresses  (and
+                     optional  port  numbers)  to load balance to. The address
+                     family of the IP addresses of args is the same as the ad‐
+                     dress family of VIP.
+
+              •      If controller_event has been enabled for all the  config‐
+                     ured  load balancing rules for a Gateway router or Router
+                     with gateway port in OVN_Northbound  database  that  does
+                     not  have  configured  backends,  a  priority-130 flow is
+                     added to trigger ovn-controller events whenever the chas‐
+                     sis  receives  a  packet  for  that  particular  VIP.  If
+                     event-elb  meter  has been previously created, it will be
+                     associated to the empty_lb logical flow
+
+              •      For all the configured load balancing rules for a Gateway
+                     router or Router  with  gateway  port  in  OVN_Northbound
+                     database  that  includes a L4 port PORT of protocol P and
+                     IPv4 or  IPv6  address  VIP,  a  priority-120  flow  that
+                     matches  on ct.new && !ct.rel && ip && ip.dst == VIP && P
+                     && P.dst ==
+                      PORT with an action of ct_lb_mark(args), where args con‐
+                     tains comma separated IPv4 or  IPv6  addresses  (and  op‐
+                     tional port numbers) to load balance to. If the router is
+                     configured  to  force SNAT any load-balanced packets, the
+                     above action will be replaced by  flags.force_snat_for_lb
+                     = 1; ct_lb_mark(args; force_snat);. If the load balancing
+                     rule  is configured with skip_snat set to true, the above
+                     action will be replaced by  flags.skip_snat_for_lb  =  1;
+                     ct_lb_mark(args; skip_snat);. If health check is enabled,
+                     then args will only contain those endpoints whose service
+                     monitor  status  entry in OVN_Southbound db is either on�‐
+                     line or empty.
+
+              •      For all the configured load balancing rules for a  router
+                     in  OVN_Northbound  database that includes just an IP ad‐
+                     dress VIP to match on, a priority-110 flow  that  matches
+                     on  ct.new && !ct.rel && ip4 && ip.dst == VIP with an ac‐
+                     tion of ct_lb_mark(args), where args contains comma sepa‐
+                     rated IPv4 or IPv6 addresses. If the router is configured
+                     to force SNAT any load-balanced packets, the above action
+                     will  be  replaced  by   flags.force_snat_for_lb   =   1;
+                     ct_lb_mark(args; force_snat);. If the load balancing rule
+                     is  configured  with skip_snat set to true, the above ac‐
+                     tion will be  replaced  by  flags.skip_snat_for_lb  =  1;
+                     ct_lb_mark(args; skip_snat);.
+
+                     The  previous  table  lr_in_defrag sets the register reg0
+                     (or xxreg0 for IPv6) and does ct_dnat. Hence  for  estab‐
+                     lished  traffic,  this  table just advances the packet to
+                     the next stage.
+
+              •      If the load balancer is created with --reject option  and
+                     it  has no active backends, a TCP reset segment (for tcp)
+                     or an ICMP port unreachable packet (for all other kind of
+                     traffic) will be sent whenever an incoming packet is  re‐
+                     ceived for this load-balancer. Please note using --reject
+                     option will disable empty_lb SB controller event for this
+                     load balancer.
+
+              •      For  the related traffic, a priority 50 flow that matches
+                     ct.rel && !ct.est && !ct.new  with an action  of  ct_com�‐
+                     mit_nat;, if the router has load balancer assigned to it.
+                     Along with two priority 70 flows that match skip_snat and
+                     force_snat flags, setting the flags.force_snat_for_lb = 1
+                     or flags.skip_snat_for_lb = 1 accordingly.
+
+              •      For  the  established  traffic,  a  priority 50 flow that
+                     matches ct.est && !ct.rel &&  !ct.new  &&  ct_mark.natted
+                     with  an action of next;, if the router has load balancer
+                     assigned to it. Along with two  priority  70  flows  that
+                     match   skip_snat   and  force_snat  flags,  setting  the
+                     flags.force_snat_for_lb = 1 or flags.skip_snat_for_lb = 1
+                     accordingly.
+
+       Ingress Table 7: DNAT on Gateway Routers
+
+              •      For each configuration in the  OVN  Northbound  database,
+                     that  asks  to  change  the  destination  IP address of a
+                     packet from A to B, a priority-100  flow  matches  ip  &&
+                     ip4.dst  ==  A  or  ip  &&  ip6.dst  ==  A with an action
+                     flags.loopback = 1; ct_dnat(B);. If the Gateway router is
+                     configured to force SNAT any DNATed packet, the above ac‐
+                     tion will be replaced by flags.force_snat_for_dnat  =  1;
+                     flags.loopback  =  1;  ct_dnat(B);. If the NAT rule is of
+                     type dnat_and_snat and has stateless=true in the options,
+                     then the action would be ip4/6.dst= (B).
+
+                     If the NAT  rule  has  allowed_ext_ips  configured,  then
+                     there is an additional match ip4.src == allowed_ext_ips .
+                     Similarly,  for  IPV6,  match  would  be  ip6.src  == al‐
+                     lowed_ext_ips.
+
+                     If the NAT rule has exempted_ext_ips set, then  there  is
+                     an  additional  flow configured at priority 101. The flow
+                     matches if source ip is an exempted_ext_ip and the action
+                     is next; . This flow is used to bypass the ct_dnat action
+                     for a packet originating from exempted_ext_ips.
+
+              •      A priority-0 logical flow with match 1 has actions next;.
+
+       Ingress Table 7: DNAT on Distributed Routers
+
+       On distributed routers, the DNAT table only handles packets with desti‐
+       nation IP address that needs to be DNATted from a virtual IP address to
+       a real IP address. The unDNAT processing in the  reverse  direction  is
+       handled in a separate table in the egress pipeline.
+
+              •      For  each  configuration  in the OVN Northbound database,
+                     that asks to change  the  destination  IP  address  of  a
+                     packet  from  A  to  B, a priority-100 flow matches ip &&
+                     ip4.dst == B && inport == GW, where  GW  is  the  logical
+                     router gateway port corresponding to the NAT rule (speci‐
+                     fied  or inferred), with an action ct_dnat(B);. The match
+                     will include ip6.dst == B in the IPv6 case.  If  the  NAT
+                     rule  is  of type dnat_and_snat and has stateless=true in
+                     the options, then the action would be ip4/6.dst=(B).
+
+                     If the NAT rule cannot be handled in a  distributed  man‐
+                     ner,  then the priority-100 flow above is only programmed
+                     on the gateway chassis.
+
+                     If the NAT  rule  has  allowed_ext_ips  configured,  then
+                     there is an additional match ip4.src == allowed_ext_ips .
+                     Similarly,  for  IPV6,  match  would  be  ip6.src  == al‐
+                     lowed_ext_ips.
+
+                     If the NAT rule has exempted_ext_ips set, then  there  is
+                     an  additional  flow configured at priority 101. The flow
+                     matches if source ip is an exempted_ext_ip and the action
+                     is next; . This flow is used to bypass the ct_dnat action
+                     for a packet originating from exempted_ext_ips.
+
+                     A priority-0 logical flow with match 1 has actions next;.
+
+     Ingress Table 8: Load balancing affinity learn
+
+       Load balancing affinity learn  table  contains  the  following  logical
+       flows:
+
+              •      For all the configured load balancing rules for a logical
+                     router  where  a positive affinity timeout T is specified
+                     in options
+                      column, that includes a L4 port PORT of protocol  P  and
+                     IPv4  or  IPv6  address  VIP,  a  priority-100  flow that
+                     matches on reg9[6] == 0 && ct.new && ip && reg0 == VIP &&
+                     P && reg9[16..31] ==  PORT (xxreg0 == VIP   in  the  IPv6
+                     case)  with  an  action  of commit_lb_aff(vip = VIP:PORT,
+                     backend = backend ip: backend port, proto = P, timeout  =
+                     T);.
+
+              •      A  priority  0 flow is added which matches on all packets
+                     and applies the action next;.
+
+     Ingress Table 9: ECMP symmetric reply processing
+
+              •      If ECMP routes with symmetric reply are configured in the
+                     OVN_Northbound database for a gateway  router,  a  prior‐
+                     ity-100  flow is added for each router port on which sym‐
+                     metric replies are configured.  The  matching  logic  for
+                     these  ports essentially reverses the configured logic of
+                     the ECMP route. So for instance, a route with a  destina‐
+                     tion  routing  policy will instead match if the source IP
+                     address matches the static route’s prefix. The flow  uses
+                     the   action   ct_commit   {   ct_label.ecmp_reply_eth  =
+                     eth.src;"   "   ct_mark.ecmp_reply_port   =   K;};   com�‐
+                     mit_ecmp_nh(); next;
+                      to  commit  the  connection  and storing eth.src and the
+                     ECMP reply port binding tunnel key K in the ct_label  and
+                     the traffic pattern to table 76 or 77.
+
+     Ingress Table 10: IPv6 ND RA option processing
+
+              •      A  priority-50  logical  flow  is  added for each logical
+                     router port configured with  IPv6  ND  RA  options  which
+                     matches  IPv6  ND  Router Solicitation packet and applies
+                     the action put_nd_ra_opts and advances the packet to  the
+                     next table.
+
+                     reg0[5] = put_nd_ra_opts(options);next;
+
+
+                     For a valid IPv6 ND RS packet, this transforms the packet
+                     into  an  IPv6 ND RA reply and sets the RA options to the
+                     packet and stores 1 into  reg0[5].  For  other  kinds  of
+                     packets,  it  just  stores 0 into reg0[5]. Either way, it
+                     continues to the next table.
+
+              •      A priority-0 logical flow with match 1 has actions next;.
+
+     Ingress Table 11: IPv6 ND RA responder
+
+       This table implements IPv6 ND RA responder for the IPv6 ND  RA  replies
+       generated by the previous table.
+
+              •      A  priority-50  logical  flow  is  added for each logical
+                     router port configured with  IPv6  ND  RA  options  which
+                     matches  IPv6 ND RA packets and reg0[5] == 1 and responds
+                     back to the  inport  after  applying  these  actions.  If
+                     reg0[5]   is   set   to  1,  it  means  that  the  action
+                     put_nd_ra_opts was successful.
+
+                     eth.dst = eth.src;
+                     eth.src = E;
+                     ip6.dst = ip6.src;
+                     ip6.src = I;
+                     outport = P;
+                     flags.loopback = 1;
+                     output;
+
+
+                     where E is the MAC address and I is the IPv6  link  local
+                     address of the logical router port.
+
+                     (This  terminates  packet processing in ingress pipeline;
+                     the packet does not go to the next ingress table.)
+
+              •      A priority-0 logical flow with match 1 has actions next;.
+
+     Ingress Table 12: IP Routing Pre
+
+       If a packet arrived at this table from Logical Router Port P which  has
+       options:route_table  value set, a logical flow with match inport == "P"
+       with priority 100  and  action  setting  unique-generated  per-datapath
+       32-bit  value  (non-zero)  in  OVS register 7. This register’s value is
+       checked in next table. If packet didn’t  match  any  configured  inport
+       (<main> route table), register 7 value is set to 0.
+
+       This table contains the following logical flows:
+
+              •      Priority-100  flow  with match inport == "LRP_NAME" value
+                     and action, which set route table identifier in reg7.
+
+                     A priority-0 logical flow with match 1 has actions reg7 =
+                     0; next;.
+
+     Ingress Table 13: IP Routing
+
+       A packet that arrives at this table is an  IP  packet  that  should  be
+       routed  to  the address in ip4.dst or ip6.dst. This table implements IP
+       routing, setting reg0 (or xxreg0 for IPv6) to the next-hop  IP  address
+       (leaving ip4.dst or ip6.dst, the packet’s final destination, unchanged)
+       and  advances  to  the next table for ARP resolution. It also sets reg1
+       (or xxreg1) to the  IP  address  owned  by  the  selected  router  port
+       (ingress  table  ARP  Request  will generate an ARP request, if needed,
+       with reg0 as the target protocol address and reg1 as the source  proto‐
+       col address).
+
+       For  ECMP routes, i.e. multiple static routes with same policy and pre‐
+       fix but different nexthops, the above actions are deferred to next  ta‐
+       ble.  This  table, instead, is responsible for determine the ECMP group
+       id and select a member id within the group based on 5-tuple hashing. It
+       stores group id in reg8[0..15] and member id in reg8[16..31]. This step
+       is skipped with a priority-10300 rule if the traffic going out the ECMP
+       route is reply traffic, and the ECMP route was configured to  use  sym‐
+       metric  replies.  Instead,  the  stored  values in conntrack is used to
+       choose the destination. The ct_label.ecmp_reply_eth tells the  destina‐
+       tion   MAC   address   to   which   the  packet  should  be  sent.  The
+       ct_mark.ecmp_reply_port tells the logical  router  port  on  which  the
+       packet  should be sent. These values saved to the conntrack fields when
+       the initial ingress traffic is received over the ECMP route and commit‐
+       ted to conntrack. If REGBIT_KNOWN_ECMP_NH is  set,  the  priority-10300
+       flows  in this stage set the outport, while the eth.dst is set by flows
+       at the ARP/ND Resolution stage.
+
+       This table contains the following logical flows:
+
+              •      Priority-10550 flow  that  drops  IPv6  Router  Solicita‐
+                     tion/Advertisement  packets  that  were  not processed in
+                     previous tables.
+
+              •      Priority-10550 flows that drop IGMP and MLD packets  with
+                     source MAC address owned by the router. These are used to
+                     prevent looping statically forwarded IGMP and MLD packets
+                     for which TTL is not decremented (it is always 1).
+
+              •      Priority-10500 flows that match IP multicast traffic des‐
+                     tined  to  groups  registered  on  any  of  the  attached
+                     switches and sets outport  to  the  associated  multicast
+                     group  that  will eventually flood the traffic to all in‐
+                     terested attached logical switches. The flows also decre‐
+                     ment TTL.
+
+              •      Priority-10460 flows that  match  IGMP  and  MLD  control
+                     packets,  set  outport  to the MC_STATIC multicast group,
+                     which ovn-northd populates with the  logical  ports  that
+                     have  options :mcast_flood=�’true�’. If no router ports are
+                     configured to flood multicast  traffic  the  packets  are
+                     dropped.
+
+              •      Priority-10450  flow  that matches unregistered IP multi‐
+                     cast traffic decrements  TTL  and  sets  outport  to  the
+                     MC_STATIC  multicast  group,  which  ovn-northd populates
+                     with   the    logical    ports    that    have    options
+                     :mcast_flood=�’true�’. If no router ports are configured to
+                     flood multicast traffic the packets are dropped.
+
+              •      IPv4 routing table. For each route to IPv4 network N with
+                     netmask  M, on router port P with IP address A and Ether‐
+                     net address E, a logical flow with match ip4.dst ==  N/M,
+                     whose priority is the number of 1-bits in M, has the fol‐
+                     lowing actions:
+
+                     ip.ttl--;
+                     reg8[0..15] = 0;
+                     reg0 = G;
+                     reg1 = A;
+                     eth.src = E;
+                     outport = P;
+                     flags.loopback = 1;
+                     next;
+
+
+                     (Ingress table 1 already verified that ip.ttl--; will not
+                     yield a TTL exceeded error.)
+
+                     If  the route has a gateway, G is the gateway IP address.
+                     Instead, if the route is from a configured static  route,
+                     G is the next hop IP address. Else it is ip4.dst.
+
+              •      IPv6 routing table. For each route to IPv6 network N with
+                     netmask  M, on router port P with IP address A and Ether‐
+                     net address E, a logical flow with match in CIDR notation
+                     ip6.dst == N/M, whose priority is the integer value of M,
+                     has the following actions:
+
+                     ip.ttl--;
+                     reg8[0..15] = 0;
+                     xxreg0 = G;
+                     xxreg1 = A;
+                     eth.src = E;
+                     outport = inport;
+                     flags.loopback = 1;
+                     next;
+
+
+                     (Ingress table 1 already verified that ip.ttl--; will not
+                     yield a TTL exceeded error.)
+
+                     If the route has a gateway, G is the gateway IP  address.
+                     Instead,  if the route is from a configured static route,
+                     G is the next hop IP address. Else it is ip6.dst.
+
+                     If the address A is in the link-local  scope,  the  route
+                     will be limited to sending on the ingress port.
+
+                     For  each  static  route the reg7 == id && is prefixed in
+                     logical flow match portion. For routes  with  route_table
+                     value set a unique non-zero id is used. For routes within
+                     <main> route table (no route table set), this id value is
+                     0.
+
+                     For each connected route (route to the LRP’s subnet CIDR)
+                     the  logical flow match portion has no reg7 == id && pre‐
+                     fix to have route to LRP’s subnets in all routing tables.
+
+              •      For ECMP routes, they are grouped by policy  and  prefix.
+                     An  unique  id  (non-zero) is assigned to each group, and
+                     each member is also  assigned  an  unique  id  (non-zero)
+                     within each group.
+
+                     For  each IPv4/IPv6 ECMP group with group id GID and mem‐
+                     ber ids MID1, MID2, ..., a logical  flow  with  match  in
+                     CIDR  notation  ip4.dst  == N/M, or ip6.dst == N/M, whose
+                     priority is the integer value of M, has the following ac‐
+                     tions:
+
+                     ip.ttl--;
+                     flags.loopback = 1;
+                     reg8[0..15] = GID;
+                     select(reg8[16..31], MID1, MID2, ...);
+
+
+              •      A priority-0 logical flow that matches  all  packets  not
+                     already handled (match 1) and drops them (action drop;).
+
+     Ingress Table 14: IP_ROUTING_ECMP
+
+       This  table  implements  the  second part of IP routing for ECMP routes
+       following the previous table. If a packet matched a ECMP group  in  the
+       previous  table,  this  table matches the group id and member id stored
+       from the previous table, setting reg0 (or xxreg0 for IPv6) to the next-
+       hop IP address (leaving ip4.dst or ip6.dst, the packet’s final destina‐
+       tion, unchanged) and advances to the next table for ARP resolution.  It
+       also  sets  reg1  (or  xxreg1)  to the IP address owned by the selected
+       router port (ingress table ARP Request will generate an ARP request, if
+       needed, with reg0 as the target protocol address and reg1 as the source
+       protocol address).
+
+       This processing is skipped for reply traffic being sent out of an  ECMP
+       route if the route was configured to use symmetric replies.
+
+       This table contains the following logical flows:
+
+              •      A  priority-150  flow  that matches reg8[0..15] == 0 with
+                     action  next;  directly  bypasses  packets  of   non-ECMP
+                     routes.
+
+              •      For  each  member  with ID MID in each ECMP group with ID
+                     GID, a priority-100 flow with match reg8[0..15] == GID &&
+                     reg8[16..31] == MID has following actions:
+
+                     [xx]reg0 = G;
+                     [xx]reg1 = A;
+                     eth.src = E;
+                     outport = P;
+
+
+              •      A priority-0 logical flow that matches  all  packets  not
+                     already handled (match 1) and drops them (action drop;).
+
+     Ingress Table 15: Router policies
+
+       This table adds flows for the logical router policies configured on the
+       logical   router.   Please   see   the  OVN_Northbound  database  Logi�‐
+       cal_Router_Policy table documentation in ovn-nb for supported actions.
+
+              •      For each router policy configured on the logical  router,
+                     a  logical  flow  is added with specified priority, match
+                     and actions.
+
+              •      If the policy action is reroute with 2 or  more  nexthops
+                     defined,  then the logical flow is added with the follow‐
+                     ing actions:
+
+                     reg8[0..15] = GID;
+                     reg8[16..31] = select(1,..n);
+
+
+                     where GID is the ECMP group id  generated  by  ovn-northd
+                     for  this  policy and n is the number of nexthops. select
+                     action selects one of the nexthop member id, stores it in
+                     the register reg8[16..31] and advances the packet to  the
+                     next stage.
+
+              •      If  the  policy  action  is reroute with just one nexhop,
+                     then the logical flow is added  with  the  following  ac‐
+                     tions:
+
+                     [xx]reg0 = H;
+                     eth.src = E;
+                     outport = P;
+                     reg8[0..15] = 0;
+                     flags.loopback = 1;
+                     next;
+
+
+                     where  H  is the nexthop  defined in the router policy, E
+                     is the ethernet address of the logical router  port  from
+                     which  the  nexthop  is  reachable  and  P is the logical
+                     router port from which the nexthop is reachable.
+
+              •      If a router policy has the option pkt_mark=m set  and  if
+                     the  action  is  not  drop, then the action also includes
+                     pkt.mark = m to mark the packet with the marker m.
+
+     Ingress Table 16: ECMP handling for router policies
+
+       This table handles the ECMP for the  router  policies  configured  with
+       multiple nexthops.
+
+              •      A priority-150 flow is added to advance the packet to the
+                     next  stage  if the ECMP group id register reg8[0..15] is
+                     0.
+
+              •      For each ECMP reroute router policy  with  multiple  nex‐
+                     thops,  a  priority-100  flow is added for each nexthop H
+                     with the match reg8[0..15] == GID &&  reg8[16..31]  ==  M
+                     where  GID  is  the  router  policy group id generated by
+                     ovn-northd and M is the member id of the nexthop H gener‐
+                     ated by ovn-northd. The following actions  are  added  to
+                     the flow:
+
+                     [xx]reg0 = H;
+                     eth.src = E;
+                     outport = P
+                     "flags.loopback = 1; "
+                     "next;"
+
+
+                     where  H  is the nexthop  defined in the router policy, E
+                     is the ethernet address of the logical router  port  from
+                     which  the  nexthop  is  reachable  and  P is the logical
+                     router port from which the nexthop is reachable.
+
+              •      A priority-0 logical flow that matches  all  packets  not
+                     already handled (match 1) and drops them (action drop;).
+
+     Ingress Table 17: ARP/ND Resolution
+
+       Any  packet that reaches this table is an IP packet whose next-hop IPv4
+       address is in reg0 or IPv6 address is in xxreg0.  (ip4.dst  or  ip6.dst
+       contains  the final destination.) This table resolves the IP address in
+       reg0 (or xxreg0) into an output port in outport and an Ethernet address
+       in eth.dst, using the following flows:
+
+              •      A priority-500 flow that  matches  IP  multicast  traffic
+                     that  was  allowed in the routing pipeline. For this kind
+                     of traffic the outport was already set so the  flow  just
+                     advances to the next table.
+
+              •      Priority-200  flows that match ECMP reply traffic for the
+                     routes configured to use symmetric replies, with  actions
+                     push(xxreg1);    xxreg1    =    ct_label;    eth.dst    =
+                     xxreg1[32..79]; pop(xxreg1); next;. xxreg1 is  used  here
+                     to  avoid masked access to ct_label, to make the flow HW-
+                     offloading friendly.
+
+              •      Static MAC bindings. MAC bindings can be known statically
+                     based on data in the OVN_Northbound database. For  router
+                     ports  connected to logical switches, MAC bindings can be
+                     known statically from the addresses column in  the  Logi�‐
+                     cal_Switch_Port  table.  (Note: the flow is not installed
+                     for IPs of logical switch ports of type virtual, and  dy‐
+                     namic  MAC binding is used for those IPs instead, so that
+                     virtual parent failover does not depend on ovn-northd, to
+                     achieve better failover performance.)  For  router  ports
+                     connected  to  other logical routers, MAC bindings can be
+                     known statically from the mac and networks column in  the
+                     Logical_Router_Port  table.  (Note:  the  flow is NOT in‐
+                     stalled for the IP addresses that belong  to  a  neighbor
+                     logical  router  port  if  the current router has the op�‐
+                     tions:dynamic_neigh_routers set to true)
+
+                     For each IPv4 address A whose host is known to have  Eth‐
+                     ernet  address  E  on  router port P, a priority-100 flow
+                     with match outport === P && reg0 == A has actions eth.dst
+                     = E; next;.
+
+                     For each IPv6 address A whose host is known to have  Eth‐
+                     ernet  address  E  on  router port P, a priority-100 flow
+                     with match outport === P  &&  xxreg0  ==  A  has  actions
+                     eth.dst = E; next;.
+
+                     For each logical router port with an IPv4 address A and a
+                     mac  address of E that is reachable via a different logi‐
+                     cal router port P, a priority-100 flow with match outport
+                     === P && reg0 == A has actions eth.dst = E; next;.
+
+                     For each logical router port with an IPv6 address A and a
+                     mac address of E that is reachable via a different  logi‐
+                     cal router port P, a priority-100 flow with match outport
+                     === P && xxreg0 == A has actions eth.dst = E; next;.
+
+              •      Static  MAC  bindings  from NAT entries. MAC bindings can
+                     also be known for the entries in  the  NAT  table.  Below
+                     flows  are programmed for distributed logical routers i.e
+                     with a distributed router port.
+
+                     For each row in the NAT table with IPv4 address A in  the
+                     external_ip column of NAT table, below two flows are pro‐
+                     grammed:
+
+                     A  priority-100  flow with the match outport == P && reg0
+                     == A has actions eth.dst = E; next;, where P is the  dis‐
+                     tributed  logical  router port, E is the Ethernet address
+                     if set in the external_mac column of  NAT  table  for  of
+                     type dnat_and_snat, otherwise the Ethernet address of the
+                     distributed  logical router port. Note that if the exter�‐
+                     nal_ip is not within  a  subnet  on  the  owning  logical
+                     router, then OVN will only create ARP resolution flows if
+                     the  options:add_route  is set to true. Otherwise, no ARP
+                     resolution flows will be added.
+
+                     Corresponding to the above flow, a priority-150 flow with
+                     the match inport == P && outport == P && ip4.dst == A has
+                     actions drop; to exclude packets that have  gone  through
+                     DNAT/unSNAT  stage but failed to convert the destination,
+                     to avoid loop.
+
+                     For IPv6 NAT entries, same flows are added, but using the
+                     register xxreg0 and field ip6 for the match.
+
+              •      If the router datapath runs a port with redirect-type set
+                     to bridged, for each distributed NAT rule with  IP  A  in
+                     the  logical_ip  column  and  logical port P in the logi�‐
+                     cal_port column of NAT table, a priority-90 flow with the
+                     match outport == Q && ip.src ===  A  &&  is_chassis_resi�‐
+                     dent(P),  where  Q is the distributed logical router port
+                     and action get_arp(outport, reg0);  next;  for  IPv4  and
+                     get_nd(outport, xxreg0); next; for IPv6.
+
+              •      Traffic  with  IP  destination  an  address  owned by the
+                     router  should  be  dropped.  Such  traffic  is  normally
+                     dropped in ingress table IP Input except for IPs that are
+                     also shared with SNAT rules. However, if there was no un‐
+                     SNAT  operation  that  happened  successfully  until this
+                     point in the pipeline  and  the  destination  IP  of  the
+                     packet  is  still  a  router owned IP, the packets can be
+                     safely dropped.
+
+                     A priority-2 logical  flow  with  match  ip4.dst  =  {..}
+                     matches  on  traffic  destined  to  router owned IPv4 ad‐
+                     dresses which are also SNAT IPs.  This  flow  has  action
+                     drop;.
+
+                     A  priority-2  logical  flow  with  match  ip6.dst = {..}
+                     matches on traffic destined  to  router  owned  IPv6  ad‐
+                     dresses  which  are  also  SNAT IPs. This flow has action
+                     drop;.
+
+                     A priority-0 logical that flow matches  all  packets  not
+                     already handled (match 1) and drops them (action drop;).
+
+              •      Dynamic MAC bindings. These flows resolve MAC-to-IP bind‐
+                     ings  that  have  become known dynamically through ARP or
+                     neighbor discovery. (The ingress table ARP  Request  will
+                     issue  an  ARP or neighbor solicitation request for cases
+                     where the binding is not yet known.)
+
+                     A priority-0 logical flow  with  match  ip4  has  actions
+                     get_arp(outport, reg0); next;.
+
+                     A  priority-0  logical  flow  with  match ip6 has actions
+                     get_nd(outport, xxreg0); next;.
+
+              •      For a distributed gateway LRP with redirect-type  set  to
+                     bridged,   a  priority-50  flow  will  match  outport  ==
+                     "ROUTER_PORT" and !is_chassis_resident ("cr-ROUTER_PORT")
+                     has actions eth.dst = E; next;, where E is  the  ethernet
+                     address of the logical router port.
+
+     Ingress Table 18: Check packet length
+
+       For  distributed  logical  routers or gateway routers with gateway port
+       configured with options:gateway_mtu to a valid integer value, this  ta‐
+       ble  adds  a priority-50 logical flow with the match outport == GW_PORT
+       where GW_PORT is  the  gateway  router  port  and  applies  the  action
+       check_pkt_larger and advances the packet to the next table.
+
+       REGBIT_PKT_LARGER = check_pkt_larger(L); next;
+
+
+       where L is the packet length to check for. If the packet is larger than
+       L, it stores 1 in the register bit REGBIT_PKT_LARGER. The value of L is
+       taken from options:gateway_mtu column of Logical_Router_Port row.
+
+       If the port is also configured with options:gateway_mtu_bypass then an‐
+       other  flow  is added, with priority-55, to bypass the check_pkt_larger
+       flow.
+
+       This table adds one priority-0 fallback flow that matches  all  packets
+       and advances to the next table.
+
+     Ingress Table 19: Handle larger packets
+
+       For  distributed  logical  routers or gateway routers with gateway port
+       configured with options:gateway_mtu to a valid integer value, this  ta‐
+       ble  adds  the  following  priority-150  logical  flow for each logical
+       router port with the match inport == LRP && outport == GW_PORT &&  REG�‐
+       BIT_PKT_LARGER  &&  !REGBIT_EGRESS_LOOPBACK,  where  LRP is the logical
+       router port and GW_PORT is the gateway port and applies  the  following
+       action for ipv4 and ipv6 respectively:
+
+       icmp4 {
+           icmp4.type = 3; /* Destination Unreachable. */
+           icmp4.code = 4;  /* Frag Needed and DF was Set. */
+           icmp4.frag_mtu = M;
+           eth.dst = E;
+           ip4.dst = ip4.src;
+           ip4.src = I;
+           ip.ttl = 255;
+           REGBIT_EGRESS_LOOPBACK = 1;
+           REGBIT_PKT_LARGER = 0;
+           next(pipeline=ingress, table=0);
+       };
+       icmp6 {
+           icmp6.type = 2;
+           icmp6.code = 0;
+           icmp6.frag_mtu = M;
+           eth.dst = E;
+           ip6.dst = ip6.src;
+           ip6.src = I;
+           ip.ttl = 255;
+           REGBIT_EGRESS_LOOPBACK = 1;
+           REGBIT_PKT_LARGER = 0;
+           next(pipeline=ingress, table=0);
+       };
+
+
+              •      Where  M  is the (fragment MTU - 58) whose value is taken
+                     from options:gateway_mtu  column  of  Logical_Router_Port
+                     row.
+
+              •      E is the Ethernet address of the logical router port.
+
+              •      I is the IPv4/IPv6 address of the logical router port.
+
+       This  table  adds one priority-0 fallback flow that matches all packets
+       and advances to the next table.
+
+     Ingress Table 20: Gateway Redirect
+
+       For distributed logical routers where one or more of the logical router
+       ports specifies a gateway chassis, this table redirects certain packets
+       to the distributed gateway port instances  on  the  gateway  chassises.
+       This table has the following flows:
+
+              •      For each NAT rule in the OVN Northbound database that can
+                     be  handled in a distributed manner, a priority-100 logi‐
+                     cal flow with match ip4.src == B  &&  outport  ==  GW  &&
+                     is_chassis_resident(P), where GW is the distributed gate‐
+                     way port specified in the NAT rule and P is the NAT logi‐
+                     cal port. IP traffic matching the above rule will be man‐
+                     aged  locally setting reg1 to C and eth.src to D, where C
+                     is NAT external ip and D is NAT external mac.
+
+              •      For each dnat_and_snat NAT rule with  stateless=true  and
+                     allowed_ext_ips  configured,  a  priority-75 flow is pro‐
+                     grammed with match ip4.dst == B and action outport =  CR;
+                     next;  where  B is the NAT rule external IP and CR is the
+                     chassisredirect port representing  the  instance  of  the
+                     logical  router  distributed  gateway port on the gateway
+                     chassis. Moreover a priority-70 flow is  programmed  with
+                     same  match  and action drop;. For each dnat_and_snat NAT
+                     rule with stateless=true and exempted_ext_ips configured,
+                     a priority-75 flow is programmed with match ip4.dst ==  B
+                     and  action  drop; where B is the NAT rule external IP. A
+                     similar flow is added for IPv6 traffic.
+
+              •      For each NAT rule in the OVN Northbound database that can
+                     be handled in a distributed manner, a priority-80 logical
+                     flow with drop action if the NAT logical port is  a  vir‐
+                     tual port not claimed by any chassis yet.
+
+              •      A  priority-50  logical flow with match outport == GW has
+                     actions outport = CR; next;,  where  GW  is  the  logical
+                     router  distributed  gateway  port  and  CR  is the chas�‐
+                     sisredirect port representing the instance of the logical
+                     router distributed gateway port on the gateway chassis.
+
+              •      A priority-0 logical flow with match 1 has actions next;.
+
+     Ingress Table 21: ARP Request
+
+       In the common case where the Ethernet destination  has  been  resolved,
+       this  table outputs the packet. Otherwise, it composes and sends an ARP
+       or IPv6 Neighbor Solicitation request. It holds the following flows:
+
+              •      Unknown MAC address. A priority-100 flow for IPv4 packets
+                     with match eth.dst == 00:00:00:00:00:00 has the following
+                     actions:
+
+                     arp {
+                         eth.dst = ff:ff:ff:ff:ff:ff;
+                         arp.spa = reg1;
+                         arp.tpa = reg0;
+                         arp.op = 1;  /* ARP request. */
+                         output;
+                     };
+
+
+                     Unknown MAC address. For each IPv6 static  route  associ‐
+                     ated  with  the  router  with the nexthop IP: G, a prior‐
+                     ity-200 flow for  IPv6  packets  with  match  eth.dst  ==
+                     00:00:00:00:00:00  &&  xxreg0 == G with the following ac‐
+                     tions is added:
+
+                     nd_ns {
+                         eth.dst = E;
+                         ip6.dst = I
+                         nd.target = G;
+                         output;
+                     };
+
+
+                     Where E is the multicast mac derived from the Gateway IP,
+                     I is the solicited-node multicast  address  corresponding
+                     to the target address G.
+
+                     Unknown MAC address. A priority-100 flow for IPv6 packets
+                     with match eth.dst == 00:00:00:00:00:00 has the following
+                     actions:
+
+                     nd_ns {
+                         nd.target = xxreg0;
+                         output;
+                     };
+
+
+                     (Ingress  table  IP  Routing initialized reg1 with the IP
+                     address owned by outport and (xx)reg0 with  the  next-hop
+                     IP address)
+
+                     The  IP  packet  that triggers the ARP/IPv6 NS request is
+                     dropped.
+
+              •      Known MAC address. A priority-0 flow with match 1 has ac‐
+                     tions output;.
+
+     Egress Table 0: Check DNAT local
+
+       This table checks if the packet  needs  to  be  DNATed  in  the  router
+       ingress  table  lr_in_dnat  after  it  is SNATed and looped back to the
+       ingress pipeline. This check is done only for routers  configured  with
+       distributed  gateway  ports and NAT entries. This check is done so that
+       SNAT and DNAT is done in different zones instead of a common zone.
+
+              •      A priority-0 logical flow with match 1 has  actions  REG�‐
+                     BIT_DST_NAT_IP_LOCAL = 0; next;.
+
+     Egress Table 1: UNDNAT
+
+       This  is  for  already  established connections’ reverse traffic. i.e.,
+       DNAT has already been done in ingress pipeline and now the  packet  has
+       entered  the  egress  pipeline as part of a reply. This traffic is unD‐
+       NATed here.
+
+              •      A priority-0 logical flow with match 1 has actions next;.
+
+     Egress Table 1: UNDNAT on Gateway Routers
+
+              •      For IPv6 Neighbor Discovery or Router Solicitation/Adver‐
+                     tisement traffic, a priority-100 flow with action next;.
+
+              •      For all IP packets, a priority-50  flow  with  an  action
+                     flags.loopback = 1; ct_dnat;.
+
+     Egress Table 1: UNDNAT on Distributed Routers
+
+              •      For  all the configured load balancing rules for a router
+                     with gateway port in  OVN_Northbound  database  that  in‐
+                     cludes  an  IPv4  address VIP, for every backend IPv4 ad‐
+                     dress B defined for the VIP a priority-120 flow  is  pro‐
+                     grammed  on gateway chassis that matches ip && ip4.src ==
+                     B && outport == GW, where GW is the logical router  gate‐
+                     way port with an action ct_dnat;. If the backend IPv4 ad‐
+                     dress  B is also configured with L4 port PORT of protocol
+                     P, then the match also  includes  P.src  ==  PORT.  These
+                     flows are not added for load balancers with IPv6 VIPs.
+
+                     If  the  router is configured to force SNAT any load-bal‐
+                     anced  packets,  above  action  will   be   replaced   by
+                     flags.force_snat_for_lb = 1; ct_dnat;.
+
+              •      For  each  configuration  in  the OVN Northbound database
+                     that asks to change  the  destination  IP  address  of  a
+                     packet  from an IP address of A to B, a priority-100 flow
+                     matches ip && ip4.src == B && outport == GW, where GW  is
+                     the logical router gateway port, with an action ct_dnat;.
+                     If  the  NAT rule is of type dnat_and_snat and has state�‐
+                     less=true in the options, then the action would be next;.
+
+                     If the NAT rule cannot be handled in a  distributed  man‐
+                     ner,  then the priority-100 flow above is only programmed
+                     on the gateway chassis with the action ct_dnat.
+
+                     If the NAT rule can be handled in a  distributed  manner,
+                     then  there  is an additional action eth.src = EA;, where
+                     EA is the ethernet address associated with the IP address
+                     A in the NAT rule. This allows upstream MAC  learning  to
+                     point to the correct chassis.
+
+     Egress Table 2: Post UNDNAT
+
+              •      A  priority-50 logical flow is added that commits any un‐
+                     tracked flows from the previous table  lr_out_undnat  for
+                     Gateway  routers.  This flow matches on ct.new && ip with
+                     action ct_commit { } ; next; .
+
+              •      A priority-0 logical flow with match 1 has actions next;.
+
+     Egress Table 3: SNAT
+
+       Packets that are configured to be SNATed get their  source  IP  address
+       changed based on the configuration in the OVN Northbound database.
+
+              •      A  priority-120 flow to advance the IPv6 Neighbor solici‐
+                     tation packet to next table to skip  SNAT.  In  the  case
+                     where  ovn-controller  injects an IPv6 Neighbor Solicita‐
+                     tion packet (for nd_ns action) we don’t want  the  packet
+                     to go through conntrack.
+
+       Egress Table 3: SNAT on Gateway Routers
+
+              •      If  the Gateway router in the OVN Northbound database has
+                     been configured to force SNAT a  packet  (that  has  been
+                     previously  DNATted)  to  B,  a priority-100 flow matches
+                     flags.force_snat_for_dnat ==  1  &&  ip  with  an  action
+                     ct_snat(B);.
+
+              •      If  a  load balancer configured to skip snat has been ap‐
+                     plied to the Gateway router pipeline, a priority-120 flow
+                     matches flags.skip_snat_for_lb == 1 && ip with an  action
+                     next;.
+
+              •      If  the Gateway router in the OVN Northbound database has
+                     been configured to force SNAT a  packet  (that  has  been
+                     previously   load-balanced)  using  router  IP  (i.e  op�‐
+                     tions:lb_force_snat_ip=router_ip), then for each  logical
+                     router  port  P  attached to the Gateway router, a prior‐
+                     ity-110 flow matches flags.force_snat_for_lb == 1 && out�‐
+                     port == P
+                      with an action ct_snat(R); where R is the IP  configured
+                     on  the  router  port.  If  R is an IPv4 address then the
+                     match will also include ip4 and if it is an IPv6 address,
+                     then the match will also include ip6.
+
+                     If the logical router port P is configured with  multiple
+                     IPv4 and multiple IPv6 addresses, only the first IPv4 and
+                     first IPv6 address is considered.
+
+              •      If  the Gateway router in the OVN Northbound database has
+                     been configured to force SNAT a  packet  (that  has  been
+                     previously  load-balanced)  to  B,  a  priority-100  flow
+                     matches flags.force_snat_for_lb == 1 && ip with an action
+                     ct_snat(B);.
+
+              •      For each configuration in the  OVN  Northbound  database,
+                     that  asks  to  change  the source IP address of a packet
+                     from an IP address of A or to change the  source  IP  ad‐
+                     dress  of a packet that belongs to network A to B, a flow
+                     matches ip && ip4.src == A && (!ct.trk ||  !ct.rpl)  with
+                     an action ct_snat(B);. The priority of the flow is calcu‐
+                     lated  based on the mask of A, with matches having larger
+                     masks getting higher priorities. If the NAT  rule  is  of
+                     type dnat_and_snat and has stateless=true in the options,
+                     then the action would be ip4/6.src= (B).
+
+              •      If  the  NAT  rule  has  allowed_ext_ips configured, then
+                     there is an additional match ip4.dst == allowed_ext_ips .
+                     Similarly, for  IPV6,  match  would  be  ip6.dst  ==  al‐
+                     lowed_ext_ips.
+
+              •      If  the  NAT rule has exempted_ext_ips set, then there is
+                     an additional flow configured at the priority + 1 of cor‐
+                     responding NAT rule. The flow matches if  destination  ip
+                     is an exempted_ext_ip and the action is next; . This flow
+                     is  used  to bypass the ct_snat action for a packet which
+                     is destinted to exempted_ext_ips.
+
+              •      A priority-0 logical flow with match 1 has actions next;.
+
+       Egress Table 3: SNAT on Distributed Routers
+
+              •      For each configuration in the  OVN  Northbound  database,
+                     that  asks  to  change  the source IP address of a packet
+                     from an IP address of A or to change the  source  IP  ad‐
+                     dress  of  a  packet  that belongs to network A to B, two
+                     flows are added. The priority P of these flows are calcu‐
+                     lated based on the mask of A, with matches having  larger
+                     masks getting higher priorities.
+
+                     If  the  NAT rule cannot be handled in a distributed man‐
+                     ner, then the below flows  are  only  programmed  on  the
+                     gateway  chassis increasing flow priority by 128 in order
+                     to be run first.
+
+                     •      The first flow is added with the calculated prior‐
+                            ity P and match ip && ip4.src == A &&  outport  ==
+                            GW,  where  GW is the logical router gateway port,
+                            with an action ct_snat(B); to SNATed in the common
+                            zone. If the NAT rule is of type dnat_and_snat and
+                            has stateless=true in the options, then the action
+                            would be ip4/6.src=(B).
+
+                     If the NAT rule can be handled in a  distributed  manner,
+                     then  there  is an additional action (for both the flows)
+                     eth.src = EA;, where EA is the ethernet  address  associ‐
+                     ated  with  the IP address A in the NAT rule. This allows
+                     upstream MAC learning to point to the correct chassis.
+
+                     If the NAT  rule  has  allowed_ext_ips  configured,  then
+                     there is an additional match ip4.dst == allowed_ext_ips .
+                     Similarly,  for  IPV6,  match  would  be  ip6.dst  == al‐
+                     lowed_ext_ips.
+
+                     If the NAT rule has exempted_ext_ips set, then  there  is
+                     an  additional  flow configured at the priority P + 2  of
+                     corresponding NAT rule. The flow matches  if  destination
+                     ip  is  an exempted_ext_ip and the action is next; . This
+                     flow is used to bypass the  ct_snat  action  for  a  flow
+                     which is destinted to exempted_ext_ips.
+
+              •      A priority-0 logical flow with match 1 has actions next;.
+
+     Egress Table 4: Post SNAT
+
+       Packets reaching this table are processed according to the flows below:
+
+              •      A  priority-0  logical  flow that matches all packets not
+                     already handled (match 1) and action next;.
+
+     Egress Table 5: Egress Loopback
+
+       For distributed logical routers where one of the logical  router  ports
+       specifies a gateway chassis.
+
+       While  UNDNAT  and SNAT processing have already occurred by this point,
+       this traffic needs to be forced through egress loopback  on  this  dis‐
+       tributed gateway port instance, in order for UNSNAT and DNAT processing
+       to  be applied, and also for IP routing and ARP resolution after all of
+       the NAT processing, so that the packet can be forwarded to the destina‐
+       tion.
+
+       This table has the following flows:
+
+              •      For each NAT rule in the OVN  Northbound  database  on  a
+                     distributed  router,  a  priority-100  logical  flow with
+                     match ip4.dst == E && outport == GW  &&  is_chassis_resi�‐
+                     dent(P),  where E is the external IP address specified in
+                     the NAT rule, GW is the distributed gateway  port  corre‐
+                     sponding  to  the  NAT  rule (specified or inferred). For
+                     dnat_and_snat NAT rule, P is the logical  port  specified
+                     in  the  NAT rule. If logical_port column of NAT table is
+                     NOT set, then P is the chassisredirect port  of  GW  with
+                     the following actions:
+
+                     clone {
+                         ct_clear;
+                         inport = outport;
+                         outport = "";
+                         flags = 0;
+                         flags.loopback = 1;
+                         reg0 = 0;
+                         reg1 = 0;
+                         ...
+                         reg9 = 0;
+                         REGBIT_EGRESS_LOOPBACK = 1;
+                         next(pipeline=ingress, table=0);
+                     };
+
+
+                     flags.loopback  is set since in_port is unchanged and the
+                     packet may return back to that port after NAT processing.
+                     REGBIT_EGRESS_LOOPBACK is set  to  indicate  that  egress
+                     loopback has occurred, in order to skip the source IP ad‐
+                     dress check against the router address.
+
+              •      A priority-0 logical flow with match 1 has actions next;.
+
+     Egress Table 6: Delivery
+
+       Packets that reach this table are ready for delivery. It contains:
+
+              •      Priority-110  logical flows that match IP multicast pack‐
+                     ets on each enabled logical router port  and  modify  the
+                     Ethernet  source  address  of the packets to the Ethernet
+                     address of the port and then execute action output;.
+
+              •      Priority-100 logical flows that match packets on each en‐
+                     abled logical router port, with action output;.
+
+              •      A priority-0 logical flow that matches  all  packets  not
+                     already handled (match 1) and drops them (action drop;).
+
+DROP SAMPLING
+       As  described  in  the previous section, there are several places where
+       ovn-northd might decided to drop a packet by explicitly creating a Log�‐
+       ical_Flow with the drop; action.
+
+       When debug drop-sampling has been cofigured in the OVN Northbound data‐
+       base, the ovn-northd will replace all the drop;  actions  with  a  sam�‐
+       ple(priority=65535,         collector_set=id,        obs_domain=obs_id,
+       obs_point=@cookie) action, where:
+
+              •      id is the value the debug_drop_collector_set option  con‐
+                     figured in the OVN Northbound.
+
+              •      obs_id  has  it’s  8  most  significant bits equal to the
+                     value of  the  debug_drop_domain_id  option  in  the  OVN
+                     Northbound  and  it’s  24 least significant bits equal to
+                     the datapath’s tunnel key.
+
+OVN 23.06.3                       ovn-northd                     ovn-northd(8)
diff --git a/support/dist-docs-branch-23.06/ovn-sb.5 b/support/dist-docs-branch-23.06/ovn-sb.5
new file mode 100644
index 00000000..edae70f6
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-sb.5
@@ -0,0 +1,3514 @@
+'\" p
+.\" -*- nroff -*-
+.TH "ovn-sb" 5 " DB Schema 20.27.2" "Open vSwitch 23.06.3" "Open vSwitch Manual"
+.fp 5 L CR              \\" Make fixed-width font available as \\fL.
+.de TQ
+.  br
+.  ns
+.  TP "\\$1"
+..
+.de ST
+.  PP
+.  RS -0.15in
+.  I "\\$1"
+.  RE
+..
+.SH NAME
+ovn-sb \- OVN_Southbound database schema
+.PP
+.PP
+.PP
+.PP
+This database holds logical and physical configuration and state for the Open Virtual Network (OVN) system to support virtual network abstraction\[char46] For an introduction to OVN, please see \fBovn\-architecture\fR(7)\[char46]
+.PP
+.PP
+The OVN Southbound database sits at the center of the OVN architecture\[char46] It is the one component that speaks both southbound directly to all the hypervisors and gateways, via \fBovn\-controller\fR/\fBovn\-controller\-vtep\fR, and northbound to the Cloud Management System, via \fBovn\-northd\fR:
+.SS "Database Structure"
+.PP
+.PP
+The OVN Southbound database contains classes of data with different properties, as described in the sections below\[char46]
+.ST "Physical network"
+.PP
+.PP
+Physical network tables contain information about the chassis nodes in the system\[char46] This contains all the information necessary to wire the overlay, such as IP addresses, supported tunnel types, and security keys\[char46]
+.PP
+.PP
+The amount of physical network data is small (O(n) in the number of chassis) and it changes infrequently, so it can be replicated to every chassis\[char46]
+.PP
+.PP
+The \fBChassis\fR and \fBEncap\fR tables are the physical network tables\[char46]
+.ST "Logical Network"
+.PP
+.PP
+Logical network tables contain the topology of logical switches and routers, ACLs, firewall rules, and everything needed to describe how packets traverse a logical network, represented as logical datapath flows (see Logical Datapath Flows, below)\[char46]
+.PP
+.PP
+Logical network data may be large (O(n) in the number of logical ports, ACL rules, etc\[char46])\[char46] Thus, to improve scaling, each chassis should receive only data related to logical networks in which that chassis participates\[char46]
+.PP
+.PP
+The logical network data is ultimately controlled by the cloud management system (CMS) running northbound of OVN\[char46] That CMS determines the entire OVN logical configuration and therefore the logical network data at any given time is a deterministic function of the CMS\(cqs configuration, although that happens indirectly via the \fBOVN_Northbound\fR database and \fBovn\-northd\fR\[char46]
+.PP
+.PP
+Logical network data is likely to change more quickly than physical network data\[char46] This is especially true in a container environment where containers are created and destroyed (and therefore added to and deleted from logical switches) quickly\[char46]
+.PP
+.PP
+The \fBLogical_Flow\fR, \fBMulticast_Group\fR, \fBAddress_Group\fR, \fBDHCP_Options\fR, \fBDHCPv6_Options\fR, and \fBDNS\fR tables contain logical network data\[char46]
+.ST "Logical-physical bindings"
+.PP
+.PP
+These tables link logical and physical components\[char46] They show the current placement of logical components (such as VMs and VIFs) onto chassis, and map logical entities to the values that represent them in tunnel encapsulations\[char46]
+.PP
+.PP
+These tables change frequently, at least every time a VM powers up or down or migrates, and especially quickly in a container environment\[char46] The amount of data per VM (or VIF) is small\[char46]
+.PP
+.PP
+Each chassis is authoritative about the VMs and VIFs that it hosts at any given time and can efficiently flood that state to a central location, so the consistency needs are minimal\[char46]
+.PP
+.PP
+The \fBPort_Binding\fR and \fBDatapath_Binding\fR tables contain binding data\[char46]
+.ST "MAC bindings"
+.PP
+.PP
+The \fBMAC_Binding\fR table tracks the bindings from IP addresses to Ethernet addresses that are dynamically discovered using ARP (for IPv4) and neighbor discovery (for IPv6)\[char46] Usually, IP-to-MAC bindings for virtual machines are statically populated into the \fBPort_Binding\fR table, so \fBMAC_Binding\fR is primarily used to discover bindings on physical networks\[char46]
+.SS "Common Columns"
+.PP
+.PP
+Some tables contain a special column named \fBexternal_ids\fR\[char46] This column has the same form and purpose each place that it appears, so we describe it here to save space later\[char46]
+.RS
+.TP
+\fBexternal_ids\fR: map of string-string pairs
+Key-value pairs for use by the software that manages the OVN Southbound database rather than by \fBovn\-controller\fR/\fBovn\-controller\-vtep\fR\[char46] In particular, \fBovn\-northd\fR can use key-value pairs in this column to relate entities in the southbound database to higher-level entities (such as entities in the OVN Northbound database)\[char46] Individual key-value pairs in this column may be documented in some cases to aid in understanding and troubleshooting, but the reader should not mistake such documentation as comprehensive\[char46]
+.RE
+.SH "TABLE SUMMARY"
+.PP
+The following list summarizes the purpose of each of the tables in the
+\fBOVN_Southbound\fR database.  Each table is described in more detail on a later
+page.
+.IP "Table" 1in
+Purpose
+.TQ 1in
+\fBSB_Global\fR
+Southbound configuration
+.TQ 1in
+\fBChassis\fR
+Physical Network Hypervisor and Gateway Information
+.TQ 1in
+\fBChassis_Private\fR
+Chassis Private
+.TQ 1in
+\fBEncap\fR
+Encapsulation Types
+.TQ 1in
+\fBAddress_Set\fR
+Address Sets
+.TQ 1in
+\fBPort_Group\fR
+Port Groups
+.TQ 1in
+\fBLogical_Flow\fR
+Logical Network Flows
+.TQ 1in
+\fBLogical_DP_Group\fR
+Logical Datapath Groups
+.TQ 1in
+\fBMulticast_Group\fR
+Logical Port Multicast Groups
+.TQ 1in
+\fBMirror\fR
+Mirror Entry
+.TQ 1in
+\fBMeter\fR
+Meter entry
+.TQ 1in
+\fBMeter_Band\fR
+Band for meter entries
+.TQ 1in
+\fBDatapath_Binding\fR
+Physical-Logical Datapath Bindings
+.TQ 1in
+\fBPort_Binding\fR
+Physical-Logical Port Bindings
+.TQ 1in
+\fBMAC_Binding\fR
+IP to MAC bindings
+.TQ 1in
+\fBDHCP_Options\fR
+DHCP Options supported by native OVN DHCP
+.TQ 1in
+\fBDHCPv6_Options\fR
+DHCPv6 Options supported by native OVN DHCPv6
+.TQ 1in
+\fBConnection\fR
+OVSDB client connections\[char46]
+.TQ 1in
+\fBSSL\fR
+SSL configuration\[char46]
+.TQ 1in
+\fBDNS\fR
+Native DNS resolution
+.TQ 1in
+\fBRBAC_Role\fR
+RBAC_Role configuration\[char46]
+.TQ 1in
+\fBRBAC_Permission\fR
+RBAC_Permission configuration\[char46]
+.TQ 1in
+\fBGateway_Chassis\fR
+Gateway_Chassis configuration\[char46]
+.TQ 1in
+\fBHA_Chassis\fR
+HA_Chassis configuration\[char46]
+.TQ 1in
+\fBHA_Chassis_Group\fR
+HA_Chassis_Group configuration\[char46]
+.TQ 1in
+\fBController_Event\fR
+Controller Event table
+.TQ 1in
+\fBIP_Multicast\fR
+IP_Multicast configuration\[char46]
+.TQ 1in
+\fBIGMP_Group\fR
+IGMP_Group configuration\[char46]
+.TQ 1in
+\fBService_Monitor\fR
+Service_Monitor configuration\[char46]
+.TQ 1in
+\fBLoad_Balancer\fR
+Load_Balancer configuration\[char46]
+.TQ 1in
+\fBBFD\fR
+BFD configuration\[char46]
+.TQ 1in
+\fBFDB\fR
+Port to MAC bindings
+.TQ 1in
+\fBStatic_MAC_Binding\fR
+IP to MAC bindings
+.TQ 1in
+\fBChassis_Template_Var\fR
+Chassis_Template_Var configuration\[char46]
+.\" check if in troff mode (TTY)
+.if t \{
+.bp
+.SH "TABLE RELATIONSHIPS"
+.PP
+The following diagram shows the relationship among tables in the
+database.  Each node represents a table.  Tables that are part of the
+``root set'' are shown with double borders.  Each edge leads from the
+table that contains it and points to the table that its value
+represents.  Edges are labeled with their column names, followed by a
+constraint on the number of allowed values: \fB?\fR for zero or one,
+\fB*\fR for zero or more, \fB+\fR for one or more.  Thick lines
+represent strong references; thin lines represent weak references.
+.RS -1in
+.ps -3
+.PS
+linethick = 1;
+linethick = 0.500000;
+box at 0.186591,0.119525 wid 0.201873 height 0.095620 "SB_Global"
+box at 0.186591,0.119525 wid 0.146317 height 0.040064
+linethick = 1.000000;
+box at 0.928317,0.191240 wid 0.207840 height 0.095620 "Connection"
+linethick = 1.000000;
+box at 0.928317,0.047810 wid 0.143430 height 0.095620 "SSL"
+linethick = 0.500000;
+box at 2.919470,2.348045 wid 0.152063 height 0.095620 "Chassis"
+box at 2.919470,2.348045 wid 0.096507 height 0.040064
+linethick = 1.000000;
+box at 3.282252,1.694597 wid 0.143430 height 0.095620 "Encap"
+linethick = 0.500000;
+box at 2.486502,2.204615 wid 0.273588 height 0.095620 "Chassis_Private"
+box at 2.486502,2.204615 wid 0.218032 height 0.040064
+linethick = 0.500000;
+box at 0.186591,2.236361 wid 0.223770 height 0.095620 "Address_Set"
+box at 0.186591,2.236361 wid 0.168214 height 0.040064
+linethick = 0.500000;
+box at 0.186591,2.664164 wid 0.213825 height 0.095620 "Port_Group"
+box at 0.186591,2.664164 wid 0.158270 height 0.040064
+linethick = 0.500000;
+box at 0.186591,0.533885 wid 0.247675 height 0.095620 "Logical_Flow"
+box at 0.186591,0.533885 wid 0.192119 height 0.040064
+linethick = 0.500000;
+box at 1.642140,0.964175 wid 0.305449 height 0.095620 "Datapath_Binding"
+box at 1.642140,0.964175 wid 0.249893 height 0.040064
+linethick = 1.000000;
+box at 0.928317,0.610897 wid 0.327365 height 0.095620 "Logical_DP_Group"
+linethick = 0.500000;
+box at 0.186591,1.949501 wid 0.289518 height 0.095620 "Multicast_Group"
+box at 0.186591,1.949501 wid 0.233963 height 0.040064
+linethick = 0.500000;
+box at 0.928317,1.949501 wid 0.237730 height 0.095620 "Port_Binding"
+box at 0.928317,1.949501 wid 0.182175 height 0.040064
+linethick = 0.500000;
+box at 1.642140,1.683983 wid 0.143430 height 0.095620 "Mirror"
+box at 1.642140,1.683983 wid 0.087874 height 0.040064
+linethick = 0.500000;
+box at 0.186591,2.948347 wid 0.143430 height 0.095620 "Meter"
+box at 0.186591,2.948347 wid 0.087874 height 0.040064
+linethick = 1.000000;
+box at 0.928317,2.948347 wid 0.223770 height 0.095620 "Meter_Band"
+linethick = 1.000000;
+box at 2.074763,2.470247 wid 0.297493 height 0.095620 "Gateway_Chassis"
+linethick = 0.500000;
+box at 1.642140,2.071703 wid 0.333350 height 0.095620 "HA_Chassis_Group"
+box at 1.642140,2.071703 wid 0.277795 height 0.040064
+linethick = 0.500000;
+box at 0.928317,0.334670 wid 0.257639 height 0.095620 "MAC_Binding"
+box at 0.928317,0.334670 wid 0.202083 height 0.040064
+linethick = 0.500000;
+box at 0.186591,3.091777 wid 0.269591 height 0.095620 "DHCP_Options"
+box at 0.186591,3.091777 wid 0.214035 height 0.040064
+linethick = 0.500000;
+box at 0.186591,3.235207 wid 0.305449 height 0.095620 "DHCPv6_Options"
+box at 0.186591,3.235207 wid 0.249893 height 0.040064
+linethick = 0.500000;
+box at 0.928317,1.174003 wid 0.143430 height 0.095620 "DNS"
+box at 0.928317,1.174003 wid 0.087874 height 0.040064
+linethick = 0.500000;
+box at 0.186591,3.378637 wid 0.223770 height 0.095620 "RBAC_Role"
+box at 0.186591,3.378637 wid 0.168214 height 0.040064
+linethick = 0.500000;
+box at 0.928317,3.378637 wid 0.319390 height 0.095620 "RBAC_Permission"
+box at 0.928317,3.378637 wid 0.263834 height 0.040064
+linethick = 1.000000;
+box at 2.486502,2.348045 wid 0.223770 height 0.095620 "HA_Chassis"
+linethick = 0.500000;
+box at 2.486502,1.827413 wid 0.291507 height 0.095620 "Controller_Event"
+box at 2.486502,1.827413 wid 0.235952 height 0.040064
+linethick = 0.500000;
+box at 0.928317,1.030573 wid 0.229756 height 0.095620 "IP_Multicast"
+box at 0.928317,1.030573 wid 0.174200 height 0.040064
+linethick = 0.500000;
+box at 0.186591,1.806147 wid 0.243697 height 0.095620 "IGMP_Group"
+box at 0.186591,1.806147 wid 0.188142 height 0.040064
+linethick = 0.500000;
+box at 0.186591,3.522067 wid 0.289518 height 0.095620 "Service_Monitor"
+box at 0.186591,3.522067 wid 0.233963 height 0.040064
+linethick = 0.500000;
+box at 0.186591,0.826042 wid 0.263624 height 0.095620 "Load_Balancer"
+box at 0.186591,0.826042 wid 0.208069 height 0.040064
+linethick = 0.500000;
+box at 0.186591,3.665497 wid 0.143430 height 0.095620 "BFD"
+box at 0.186591,3.665497 wid 0.087874 height 0.040064
+linethick = 0.500000;
+box at 0.186591,3.808927 wid 0.143430 height 0.095620 "FDB"
+box at 0.186591,3.808927 wid 0.087874 height 0.040064
+linethick = 0.500000;
+box at 0.928317,0.754327 wid 0.357255 height 0.095620 "Static_MAC_Binding"
+box at 0.928317,0.754327 wid 0.301700 height 0.040064
+linethick = 0.500000;
+box at 0.186591,3.952357 wid 0.373186 height 0.095620 "Chassis_Template_Var"
+box at 0.186591,3.952357 wid 0.317630 height 0.040064
+linethick = 1.000000;
+spline -> from 0.288562,0.129196 to 0.288562,0.129196 to 0.428320,0.142808 to 0.681732,0.167486 to 0.823193,0.181261
+"connections*" at 0.561442,0.188916
+linethick = 1.000000;
+spline -> from 0.288466,0.108731 to 0.288466,0.108731 to 0.329468,0.104342 to 0.377508,0.099292 to 0.420996,0.094956 to 0.575977,0.079502 to 0.757903,0.062880 to 0.855417,0.054092
+"ssl?" at 0.561442,0.114545
+linethick = 1.000000;
+spline -> from 2.948921,2.298896 to 2.948921,2.298896 to 3.015281,2.177459 to 3.186632,1.864437 to 3.252992,1.743382
+"encaps+" at 3.103060,2.138446
+linethick = 0.500000;
+spline -> from 2.624195,2.243819 to 2.624195,2.243819 to 2.677742,2.260074 to 2.739895,2.279772 to 2.795546,2.299470 to 2.810846,2.305016 to 2.827292,2.311135 to 2.842783,2.317255
+"chassis?" at 2.737792,2.319167
+linethick = 1.000000;
+spline -> from 0.311377,0.513403 to 0.311377,0.513403 to 0.488312,0.487356 to 0.825564,0.451403 to 1.106935,0.501336 to 1.256409,0.527861 to 1.310185,0.522716 to 1.427664,0.618872 to 1.527262,0.700397 to 1.592704,0.841800 to 1.621926,0.915829
+"logical_datapath?" at 0.928317,0.520938
+linethick = 1.000000;
+spline -> from 0.311683,0.546679 to 0.311683,0.546679 to 0.435396,0.559626 to 0.627248,0.579687 to 0.763526,0.593953
+"logical_dp_group?" at 0.561442,0.605925
+linethick = 0.500000;
+spline -> from 1.092688,0.618853 to 1.092688,0.618853 to 1.194791,0.630021 to 1.326116,0.656125 to 1.427664,0.716481 to 1.510337,0.765648 to 1.576621,0.858725 to 1.611828,0.915734
+"datapaths*" at 1.291195,0.736083
+linethick = 1.000000;
+spline -> from 0.329124,1.900600 to 0.329124,1.900600 to 0.344328,1.893658 to 0.359302,1.886066 to 0.373186,1.877862 to 0.396995,1.863806 to 0.398257,1.853785 to 0.420996,1.838027 to 0.632565,1.691288 to 1.237017,1.437379 to 1.427664,1.264307 to 1.510299,1.189283 to 1.578935,1.076586 to 1.614104,1.012769
+"datapath" at 0.928317,1.668378
+linethick = 0.500000;
+spline -> from 0.332107,1.949501 to 0.332107,1.949501 to 0.470967,1.949501 to 0.679323,1.949501 to 0.808639,1.949501
+"ports*" at 0.561442,1.968433
+linethick = 0.500000;
+spline -> from 1.047555,1.932098 to 1.047555,1.932098 to 1.329194,1.894615 to 2.065201,1.824640 to 2.632227,2.018729 to 2.711209,2.045694 to 2.737792,2.051240 to 2.795546,2.111672 to 2.847946,2.166175 to 2.882943,2.247835 to 2.901302,2.299470
+"chassis?" at 2.074763,1.952560
+linethick = 0.500000;
+spline -> from 0.930784,1.998267 to 0.930784,1.998267 to 0.932888,2.133473 to 0.956888,2.518631 to 1.154745,2.741043 to 1.257269,2.856361 to 1.324146,2.843739 to 1.475474,2.873955 to 1.792072,2.936873 to 2.582505,3.033831 to 2.795546,2.863245 to 2.868600,2.804917 to 2.902067,2.513659 to 2.912776,2.396811
+"additional_chassis*" at 2.074763,2.975121
+linethick = 0.500000;
+spline -> from 0.929312,1.997884 to 0.929312,1.997884 to 0.927801,2.127927 to 0.943827,2.485546 to 1.154745,2.640259 to 1.301790,2.747928 to 2.644467,2.742190 to 2.795546,2.640259 to 2.877015,2.585182 to 2.903788,2.464319 to 2.912585,2.396428
+"requested_chassis?" at 2.074763,2.736071
+linethick = 0.500000;
+spline -> from 0.954823,1.997693 to 0.954823,1.997693 to 0.990069,2.064627 to 1.062051,2.185108 to 1.154745,2.257779 to 1.419842,2.465084 to 1.526286,2.477514 to 1.856615,2.541962 to 2.195244,2.607940 to 2.296792,2.593406 to 2.632227,2.512702 to 2.708341,2.494343 to 2.728039,2.486120 to 2.795546,2.446342 to 2.819260,2.432190 to 2.843356,2.413831 to 2.863819,2.396620
+"requested_additional_chassis*" at 2.074763,2.600673
+linethick = 0.500000;
+spline -> from 1.047613,1.914886 to 1.047613,1.914886 to 1.081902,1.905381 to 1.119653,1.895781 to 1.154745,1.888495 to 1.676142,1.780234 to 1.810048,1.762430 to 2.340778,1.717832 to 2.664929,1.690600 to 3.053912,1.691709 to 3.209963,1.693507
+"encap?" at 2.486502,1.737435
+linethick = 0.500000;
+spline -> from 0.954402,1.901251 to 0.954402,1.901251 to 0.988711,1.836153 to 1.059068,1.721963 to 1.154745,1.665375 to 1.275112,1.594215 to 1.962122,1.561800 to 2.072085,1.561800 to 2.072085,1.561800 to 2.072085,1.561800 to 2.922147,1.561800 to 3.027329,1.561800 to 3.139778,1.613033 to 3.209963,1.651855
+"additional_encap*" at 2.486502,1.580713
+linethick = 1.000000;
+spline -> from 0.941054,1.900715 to 0.941054,1.900715 to 0.962798,1.808212 to 1.023191,1.607678 to 1.154745,1.505346 to 1.252813,1.429079 to 1.331604,1.523705 to 1.427664,1.444933 to 1.565548,1.331853 to 1.616360,1.111104 to 1.632692,1.013094
+"datapath" at 1.291195,1.524948
+linethick = 0.500000;
+spline -> from 0.964901,1.900715 to 0.964901,1.900715 to 1.004029,1.848717 to 1.073507,1.768894 to 1.154745,1.731124 to 1.291214,1.667670 to 1.472261,1.669659 to 1.569908,1.676773
+"mirror_rules*" at 1.291195,1.750707
+linethick = 1.000000;
+spline -> from 1.007185,1.998267 to 1.007185,1.998267 to 1.049812,2.024658 to 1.104335,2.056977 to 1.154745,2.082412 to 1.427530,2.220105 to 1.760938,2.352634 to 1.941277,2.421290
+"gateway_chassis*" at 1.291195,2.228902
+linethick = 1.000000;
+spline -> from 1.047957,1.969772 to 1.047957,1.969772 to 1.164307,1.989852 to 1.343824,2.020833 to 1.474594,2.043399
+"ha_chassis_group?" at 1.291195,2.053535
+linethick = 1.000000;
+spline -> from 0.259188,2.948347 to 0.259188,2.948347 to 0.387720,2.948347 to 0.662341,2.948347 to 0.815925,2.948347
+"bands+" at 0.561442,2.967280
+linethick = 0.500000;
+spline -> from 2.224312,2.468335 to 2.224312,2.468335 to 2.371185,2.463554 to 2.602394,2.447298 to 2.795546,2.395855 to 2.811228,2.391647 to 2.827675,2.385910 to 2.843356,2.380173
+"chassis?" at 2.486502,2.483825
+linethick = 0.500000;
+spline -> from 1.809723,2.042061 to 1.809723,2.042061 to 2.011462,2.013183 to 2.359710,1.987749 to 2.632227,2.095034 to 2.739131,2.137107 to 2.832264,2.238847 to 2.880839,2.299661
+"ref_chassis*" at 2.486502,2.114541
+linethick = 1.000000;
+spline -> from 1.793831,2.120852 to 1.793831,2.120852 to 1.960019,2.175546 to 2.225077,2.262752 to 2.373671,2.311709
+"ha_chassis*" at 2.074763,2.300617
+linethick = 1.000000;
+spline -> from 1.057997,0.318587 to 1.057997,0.318587 to 1.167501,0.311855 to 1.323878,0.320289 to 1.427664,0.403057 to 1.591270,0.533579 to 1.628542,0.805044 to 1.637014,0.915676
+"datapath" at 1.291195,0.422660
+linethick = 1.000000;
+spline -> from 1.001180,1.161668 to 1.001180,1.161668 to 1.098425,1.143653 to 1.278937,1.106801 to 1.427664,1.057136 to 1.464612,1.044801 to 1.503969,1.028450 to 1.538602,1.012922
+"datapaths+" at 1.291195,1.150423
+linethick = 0.500000;
+spline -> from 0.299501,3.378637 to 0.299501,3.378637 to 0.423673,3.378637 to 0.626540,3.378637 to 0.767561,3.378637
+"permissions value*" at 0.561442,3.397570
+linethick = 0.500000;
+spline -> from 2.599143,2.348045 to 2.599143,2.348045 to 2.676021,2.348045 to 2.776231,2.348045 to 2.843356,2.348045
+"chassis?" at 2.737792,2.366977
+linethick = 0.500000;
+spline -> from 2.633184,1.817201 to 2.633184,1.817201 to 2.690173,1.820739 to 2.752135,1.835139 to 2.795546,1.874554 to 2.858656,1.931715 to 2.897286,2.189698 to 2.911055,2.298896
+"chassis?" at 2.737792,1.894137
+linethick = 0.500000;
+spline -> from 1.044017,1.019979 to 1.044017,1.019979 to 1.164346,1.008695 to 1.355394,0.990795 to 1.488536,0.978307
+"datapath" at 1.291195,1.028240
+linethick = 0.500000;
+spline -> from 0.309598,1.836707 to 0.309598,1.836707 to 0.332815,1.846862 to 0.355420,1.860249 to 0.373186,1.877862 to 0.413824,1.918137 to 0.395408,1.946249 to 0.420996,1.997311 to 0.613880,2.383042 to 0.494413,2.826145 to 0.925659,2.826145 to 0.925659,2.826145 to 0.925659,2.826145 to 2.489180,2.826145 to 2.637582,2.826145 to 2.694380,2.801857 to 2.795546,2.693233 to 2.874337,2.608705 to 2.902449,2.469865 to 2.912011,2.396620
+"chassis?" at 1.642140,2.845077
+linethick = 0.500000;
+spline -> from 0.203747,1.757668 to 0.203747,1.757668 to 0.231496,1.673694 to 0.300285,1.501636 to 0.420996,1.413053 to 0.791275,1.141282 to 1.026940,1.403797 to 1.427664,1.179320 to 1.501750,1.137802 to 1.566887,1.062682 to 1.604752,1.013094
+"datapath?" at 0.928317,1.301828
+linethick = 0.500000;
+spline -> from 0.309598,1.827394 to 0.309598,1.827394 to 0.413614,1.846001 to 0.567887,1.874190 to 0.701870,1.901117 to 0.736561,1.908078 to 0.774178,1.916034 to 0.808486,1.923492
+"ports*" at 0.561442,1.920623
+linethick = 1.000000;
+spline -> from 0.319218,0.838434 to 0.319218,0.838434 to 0.587929,0.864022 to 1.203301,0.922618 to 1.488842,0.949813
+"datapaths*" at 0.928317,0.932620
+linethick = 1.000000;
+spline -> from 0.319199,0.788081 to 0.319199,0.788081 to 0.443084,0.751898 to 0.630002,0.697280 to 0.763545,0.658267
+"datapath_group?" at 0.561442,0.775918
+linethick = 1.000000;
+spline -> from 1.108140,0.759395 to 1.108140,0.759395 to 1.205137,0.766911 to 1.325943,0.784122 to 1.427664,0.822734 to 1.484711,0.844382 to 1.541815,0.883797 to 1.582320,0.915523
+"datapath" at 1.291195,0.842317
+.ps +3
+.PE
+.RE\}
+.bp
+.SH "SB_Global TABLE"
+.PP
+.PP
+.PP
+Southbound configuration for an OVN system\[char46] This table must have exactly one row\[char46]
+.SS "Summary:
+.TQ .25in
+\fIStatus:\fR
+.RS .25in
+.TQ 2.75in
+\fBnb_cfg\fR
+integer
+.RE
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.TQ 2.75in
+\fBoptions\fR
+map of string-string pairs
+.RE
+.TQ .25in
+\fICommon options:\fR
+.RS .25in
+.TQ 2.75in
+\fBoptions\fR
+map of string-string pairs
+.TQ .25in
+\fIOptions for configuring BFD:\fR
+.RS .25in
+.TQ 2.50in
+\fBoptions : bfd-min-rx\fR
+optional string
+.TQ 2.50in
+\fBoptions : bfd-decay-min-rx\fR
+optional string
+.TQ 2.50in
+\fBoptions : bfd-min-tx\fR
+optional string
+.TQ 2.50in
+\fBoptions : bfd-mult\fR
+optional string
+.TQ 2.50in
+\fBoptions : debug_drop_domain_id\fR
+optional string
+.TQ 2.50in
+\fBoptions : debug_drop_collector_set\fR
+optional string
+.RE
+.TQ .25in
+\fIOptions for configuring Load Balancers:\fR
+.RS .25in
+.TQ 2.50in
+\fBoptions : lb_hairpin_use_ct_mark\fR
+optional string
+.RE
+.TQ .25in
+\fIOptions for configuring ovn-sbctl:\fR
+.RS .25in
+.TQ 2.50in
+\fBoptions : sbctl_probe_interval\fR
+optional string
+.RE
+.RE
+.TQ .25in
+\fIConnection Options:\fR
+.RS .25in
+.TQ 2.75in
+\fBconnections\fR
+set of \fBConnection\fRs
+.TQ 2.75in
+\fBssl\fR
+optional \fBSSL\fR
+.RE
+.TQ .25in
+\fISecurity Configurations:\fR
+.RS .25in
+.TQ 2.75in
+\fBipsec\fR
+boolean
+.RE
+.SS "Details:
+.ST "Status:"
+.PP
+This column allow a client to track the overall configuration state of the system\[char46]
+.IP "\fBnb_cfg\fR: integer"
+Sequence number for the configuration\[char46] When a CMS or \fBovn\-nbctl\fR updates the northbound database, it increments the \fBnb_cfg\fR column in the \fBNB_Global\fR table in the northbound database\[char46] In turn, when \fBovn\-northd\fR updates the southbound database to bring it up to date with these changes, it updates this column to the same value\[char46]
+.ST "Common Columns:"
+.PP
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+See \fBExternal IDs\fR at the beginning of this document\[char46]
+.IP "\fBoptions\fR: map of string-string pairs"
+.ST "Common options:"
+.PP
+.IP "\fBoptions\fR: map of string-string pairs"
+This column provides general key/value settings\[char46] The supported options are described individually below\[char46]
+.ST "Options for configuring BFD:"
+.PP
+.PP
+.PP
+These options apply when \fBovn\-controller\fR configures BFD on tunnels interfaces\[char46]
+.IP "\fBoptions : bfd-min-rx\fR: optional string"
+BFD option \fBmin\-rx\fR value to use when configuring BFD on tunnel interfaces\[char46]
+.IP "\fBoptions : bfd-decay-min-rx\fR: optional string"
+BFD option \fBdecay\-min\-rx\fR value to use when configuring BFD on tunnel interfaces\[char46]
+.IP "\fBoptions : bfd-min-tx\fR: optional string"
+BFD option \fBmin\-tx\fR value to use when configuring BFD on tunnel interfaces\[char46]
+.IP "\fBoptions : bfd-mult\fR: optional string"
+BFD option \fBmult\fR value to use when configuring BFD on tunnel interfaces\[char46]
+.IP "\fBoptions : debug_drop_domain_id\fR: optional string"
+If set to a 8-bit number and if \fBdebug_drop_collector_set\fR is also configured, \fBovn\-controller\fR will add a \fBsample\fR action to every flow that does not come from a logical flow that contains a \(cqdrop\(cq action\[char46] The 8 most significant bits of the observation_domain_id field will be those specified in the \fB debug_drop_domain_id\fR\[char46] The 24 least significant bits of the observation_domain_id field will be zero\[char46]
+.IP
+The observation_point_id will be set to the OpenFlow table number\[char46]
+.IP "\fBoptions : debug_drop_collector_set\fR: optional string"
+If set to a 32-bit number \fBovn\-controller\fR will add a \fBsample\fR action to every flow that does not come from a logical flow that contains a \(cqdrop\(cq action\[char46] The sample action will have the specified collector_set_id\[char46] The value must match that of the local OVS configuration as described in \fBovs\-actions\fR(7)\[char46]
+.ST "Options for configuring Load Balancers:"
+.PP
+.PP
+.PP
+These options apply when \fBovn\-controller\fR configures load balancer related flows\[char46]
+.IP "\fBoptions : lb_hairpin_use_ct_mark\fR: optional string"
+By default this option is turned on (even if not present in the database) unless its value is explicitly set to \fBfalse\fR\[char46] This value is automatically set to \fBfalse\fR by \fBovn\-northd\fR when action \fBct_lb_mark\fR cannot be used for new load balancer sessions and action \fBct_lb\fR will be used instead\[char46] \fBovn\-controller\fR then knows that it should check \fBct_label\[char46]natted\fR to detect load balanced traffic\[char46]
+.ST "Options for configuring ovn-sbctl:"
+.PP
+.PP
+.PP
+These options apply when \fBovn\-sbctl\fR connects to OVN Southbound database\[char46]
+.IP "\fBoptions : sbctl_probe_interval\fR: optional string"
+The inactivity probe interval of the connection to the OVN Southbound database from \fBovn\-sbctl\fR utility, in milliseconds\[char46] If the value is zero, it disables the connection keepalive feature\[char46]
+.IP
+If the value is nonzero, then it will be forced to a value of at least 1000 ms\[char46]
+.IP
+If the value is less than zero, then the default inactivity probe interval for \fBovn\-sbctl\fR would be left intact (120000 ms)\[char46]
+.ST "Connection Options:"
+.PP
+.IP "\fBconnections\fR: set of \fBConnection\fRs"
+Database clients to which the Open vSwitch database server should connect or on which it should listen, along with options for how these connections should be configured\[char46] See the \fBConnection\fR table for more information\[char46]
+.IP "\fBssl\fR: optional \fBSSL\fR"
+Global SSL configuration\[char46]
+.ST "Security Configurations:"
+.PP
+.IP "\fBipsec\fR: boolean"
+Tunnel encryption configuration\[char46] If this column is set to be true, all OVN tunnels will be encrypted with IPsec\[char46]
+.bp
+.SH "Chassis TABLE"
+.PP
+.PP
+.PP
+Each row in this table represents a hypervisor or gateway (a chassis) in the physical network\[char46] Each chassis, via \fBovn\-controller\fR/\fBovn\-controller\-vtep\fR, adds and updates its own row, and keeps a copy of the remaining rows to determine how to reach other hypervisors\[char46]
+.PP
+.PP
+When a chassis shuts down gracefully, it should remove its own row\[char46] (This is not critical because resources hosted on the chassis are equally unreachable regardless of whether the row is present\[char46]) If a chassis shuts down permanently without removing its row, some kind of manual or automatic cleanup is eventually needed; we can devise a process for that as necessary\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBname\fR
+string (must be unique within table)
+.TQ 3.00in
+\fBhostname\fR
+string
+.TQ 3.00in
+\fBnb_cfg\fR
+integer
+.TQ 3.00in
+\fBother_config : ovn-bridge-mappings\fR
+optional string
+.TQ 3.00in
+\fBother_config : datapath-type\fR
+optional string
+.TQ 3.00in
+\fBother_config : iface-types\fR
+optional string
+.TQ 3.00in
+\fBother_config : ovn-cms-options\fR
+optional string
+.TQ 3.00in
+\fBother_config : is-interconn\fR
+optional string
+.TQ 3.00in
+\fBother_config : is-remote\fR
+optional string
+.TQ 3.00in
+\fBtransport_zones\fR
+set of strings
+.TQ 3.00in
+\fBother_config : ovn-chassis-mac-mappings\fR
+optional string
+.TQ 3.00in
+\fBother_config : port-up-notif\fR
+optional string
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.RE
+.TQ .25in
+\fIEncapsulation Configuration:\fR
+.RS .25in
+.TQ 2.75in
+\fBencaps\fR
+set of 1 or more \fBEncap\fRs
+.RE
+.TQ .25in
+\fIGateway Configuration:\fR
+.RS .25in
+.TQ 2.75in
+\fBvtep_logical_switches\fR
+set of strings
+.RE
+.SS "Details:
+.IP "\fBname\fR: string (must be unique within table)"
+OVN does not prescribe a particular format for chassis names\[char46] ovn-controller populates this column using \fBexternal_ids:system-id\fR in the Open_vSwitch database\(cqs \fBOpen_vSwitch\fR table\[char46] ovn-controller-vtep populates this column with \fBname\fR in the hardware_vtep database\(cqs \fBPhysical_Switch\fR table\[char46]
+.IP "\fBhostname\fR: string"
+The hostname of the chassis, if applicable\[char46] ovn-controller will populate this column with the hostname of the host it is running on\[char46] ovn-controller-vtep will leave this column empty\[char46]
+.IP "\fBnb_cfg\fR: integer"
+Deprecated\[char46] This column is replaced by the \fBnb_cfg\fR column of the \fBChassis_Private\fR table\[char46]
+.IP "\fBother_config : ovn-bridge-mappings\fR: optional string"
+\fBovn\-controller\fR populates this key with the set of bridge mappings it has been configured to use\[char46] Other applications should treat this key as read-only\[char46] See \fBovn\-controller\fR(8) for more information\[char46]
+.IP "\fBother_config : datapath-type\fR: optional string"
+\fBovn\-controller\fR populates this key with the datapath type configured in the \fBdatapath_type\fR column of the Open_vSwitch database\(cqs \fBBridge\fR table\[char46] Other applications should treat this key as read-only\[char46] See \fBovn\-controller\fR(8) for more information\[char46]
+.IP "\fBother_config : iface-types\fR: optional string"
+\fBovn\-controller\fR populates this key with the interface types configured in the \fBiface_types\fR column of the Open_vSwitch database\(cqs \fBOpen_vSwitch\fR table\[char46] Other applications should treat this key as read-only\[char46] See \fBovn\-controller\fR(8) for more information\[char46]
+.IP "\fBother_config : ovn-cms-options\fR: optional string"
+\fBovn\-controller\fR populates this key with the set of options configured in the \fBexternal_ids:ovn-cms-options\fR column of the Open_vSwitch database\(cqs \fBOpen_vSwitch\fR table\[char46] See \fBovn\-controller\fR(8) for more information\[char46]
+.IP "\fBother_config : is-interconn\fR: optional string"
+\fBovn\-controller\fR populates this key with the setting configured in the \fBexternal_ids:ovn-is-interconn\fR column of the Open_vSwitch database\(cqs \fBOpen_vSwitch\fR table\[char46] If set to true, the chassis is used as an interconnection gateway\[char46] See \fBovn\-controller\fR(8) for more information\[char46]
+.IP "\fBother_config : is-remote\fR: optional string"
+\fBovn\-ic\fR set this key to true for remote interconnection gateway chassises learned from the interconnection southbound database\[char46] See \fBovn\-ic\fR(8) for more information\[char46]
+.IP "\fBtransport_zones\fR: set of strings"
+\fBovn\-controller\fR populates this key with the transport zones configured in the \fBexternal_ids:ovn-transport-zones\fR column of the Open_vSwitch database\(cqs \fBOpen_vSwitch\fR table\[char46] See \fBovn\-controller\fR(8) for more information\[char46]
+.IP "\fBother_config : ovn-chassis-mac-mappings\fR: optional string"
+\fBovn\-controller\fR populates this key with the set of options configured in the \fBexternal_ids:ovn-chassis-mac-mappings\fR column of the Open_vSwitch database\(cqs \fBOpen_vSwitch\fR table\[char46] See \fBovn\-controller\fR(8) for more information\[char46]
+.IP "\fBother_config : port-up-notif\fR: optional string"
+\fBovn\-controller\fR populates this key with \fBtrue\fR when it supports \fBPort_Binding\[char46]up\fR\[char46]
+.ST "Common Columns:"
+.PP
+The overall purpose of these columns is described under \fBCommon
+Columns\fR at the beginning of this document\[char46]
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+.ST "Encapsulation Configuration:"
+.PP
+.PP
+.PP
+OVN uses encapsulation to transmit logical dataplane packets between chassis\[char46]
+.IP "\fBencaps\fR: set of 1 or more \fBEncap\fRs"
+Points to supported encapsulation configurations to transmit logical dataplane packets to this chassis\[char46] Each entry is a \fBEncap\fR record that describes the configuration\[char46]
+.ST "Gateway Configuration:"
+.PP
+.PP
+.PP
+A \fIgateway\fR is a chassis that forwards traffic between the OVN-managed part of a logical network and a physical VLAN, extending a tunnel-based logical network into a physical network\[char46] Gateways are typically dedicated nodes that do not host VMs and will be controlled by \fBovn\-controller\-vtep\fR\[char46]
+.IP "\fBvtep_logical_switches\fR: set of strings"
+Stores all VTEP logical switch names connected by this gateway chassis\[char46] The \fBPort_Binding\fR table entry with \fBoptions\fR:\fBvtep\-physical\-switch\fR equal \fBChassis\fR \fBname\fR, and \fBoptions\fR:\fBvtep\-logical\-switch\fR value in \fBChassis\fR \fBvtep_logical_switches\fR, will be associated with this \fBChassis\fR\[char46]
+.bp
+.SH "Chassis_Private TABLE"
+.PP
+.PP
+.PP
+Each row in this table maintains per chassis private data that are accessed only by the owning chassis (write only) and ovn-northd, not by any other chassis\[char46] These data are stored in this separate table instead of the \fBChassis\fR table for performance considerations: the rows in this table can be conditionally monitored by chassises so that each chassis only get update notifications for its own row, to avoid unnecessary chassis private data update flooding in a large scale deployment\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBname\fR
+string (must be unique within table)
+.TQ 3.00in
+\fBchassis\fR
+optional weak reference to \fBChassis\fR
+.TQ 3.00in
+\fBnb_cfg\fR
+integer
+.TQ 3.00in
+\fBnb_cfg_timestamp\fR
+integer
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.RE
+.SS "Details:
+.IP "\fBname\fR: string (must be unique within table)"
+The name of the chassis that owns these chassis-private data\[char46]
+.IP "\fBchassis\fR: optional weak reference to \fBChassis\fR"
+The reference to \fBChassis\fR table for the chassis that owns these chassis-private data\[char46]
+.IP "\fBnb_cfg\fR: integer"
+Sequence number for the configuration\[char46] When \fBovn\-controller\fR updates the configuration of a chassis from the contents of the southbound database, it copies \fBnb_cfg\fR from the \fBSB_Global\fR table into this column\[char46]
+.IP "\fBnb_cfg_timestamp\fR: integer"
+The timestamp when \fBovn\-controller\fR finishes processing the change corresponding to \fBnb_cfg\fR\[char46]
+.ST "Common Columns:"
+.PP
+The overall purpose of these columns is described under \fBCommon
+Columns\fR at the beginning of this document\[char46]
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+.bp
+.SH "Encap TABLE"
+.PP
+.PP
+.PP
+The \fBencaps\fR column in the \fBChassis\fR table refers to rows in this table to identify how OVN may transmit logical dataplane packets to this chassis\[char46] Each chassis, via \fBovn\-controller\fR(8) or \fBovn\-controller\-vtep\fR(8), adds and updates its own rows and keeps a copy of the remaining rows to determine how to reach other chassis\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBtype\fR
+string, one of \fBgeneve\fR, \fBstt\fR, or \fBvxlan\fR
+.TQ 3.00in
+\fBoptions\fR
+map of string-string pairs
+.TQ 3.00in
+\fBoptions : csum\fR
+optional string, either \fBtrue\fR or \fBfalse\fR
+.TQ 3.00in
+\fBoptions : dst_port\fR
+optional string, containing an integer
+.TQ 3.00in
+\fBip\fR
+string
+.TQ 3.00in
+\fBchassis_name\fR
+string
+.SS "Details:
+.IP "\fBtype\fR: string, one of \fBgeneve\fR, \fBstt\fR, or \fBvxlan\fR"
+The encapsulation to use to transmit packets to this chassis\[char46] Hypervisors and gateways must use one of: \fBgeneve\fR, \fBvxlan\fR, or \fBstt\fR\[char46]
+.IP "\fBoptions\fR: map of string-string pairs"
+Options for configuring the encapsulation, which may be \fBtype\fR specific\[char46]
+.IP "\fBoptions : csum\fR: optional string, either \fBtrue\fR or \fBfalse\fR"
+\fBcsum\fR indicates whether this chassis can transmit and receive packets that include checksums with reasonable performance\[char46] It hints to senders transmitting data to this chassis that they should use checksums to protect OVN metadata\[char46] \fBovn\-controller\fR populates this key with the value defined in \fBexternal_ids:ovn-encap-csum\fR column of the Open_vSwitch database\(cqs \fBOpen_vSwitch\fR table\[char46] Other applications should treat this key as read-only\[char46] See \fBovn\-controller\fR(8) for more information\[char46]
+.IP
+In terms of performance, checksumming actually significantly increases throughput in most common cases when running on Linux based hosts without NICs supporting encapsulation hardware offload (around 60% for bulk traffic)\[char46] The reason is that generally all NICs are capable of offloading transmitted and received TCP/UDP checksums (viewed as ordinary data packets and not as tunnels)\[char46] The benefit comes on the receive side where the validated outer checksum can be used to additionally validate an inner checksum (such as TCP), which in turn allows aggregation of packets to be more efficiently handled by the rest of the stack\[char46]
+.IP
+Not all devices see such a benefit\[char46] The most notable exception is hardware VTEPs\[char46] These devices are designed to not buffer entire packets in their switching engines and are therefore unable to efficiently compute or validate full packet checksums\[char46] In addition certain versions of the Linux kernel are not able to fully take advantage of encapsulation NIC offloads in the presence of checksums\[char46] (This is actually a pretty narrow corner case though: earlier versions of Linux don\(cqt support encapsulation offloads at all and later versions support both offloads and checksums well\[char46])
+.IP
+\fBcsum\fR defaults to \fBfalse\fR for hardware VTEPs and \fBtrue\fR for all other cases\[char46]
+.IP
+This option applies to \fBgeneve\fR and \fBvxlan\fR encapsulations\[char46]
+.IP "\fBoptions : dst_port\fR: optional string, containing an integer"
+If set, overrides the UDP (for \fBgeneve\fR and \fBvxlan\fR) or TCP (for \fBstt\fR) destination port\[char46]
+.IP "\fBip\fR: string"
+The IPv4 address of the encapsulation tunnel endpoint\[char46]
+.IP "\fBchassis_name\fR: string"
+The name of the chassis that created this encap\[char46]
+.bp
+.SH "Address_Set TABLE"
+.PP
+.PP
+.PP
+This table contains address sets synced from the \fBAddress_Set\fR table in the \fBOVN_Northbound\fR database and address sets generated from the \fBPort_Group\fR table in the \fBOVN_Northbound\fR database\[char46]
+.PP
+.PP
+See the documentation for the \fBAddress_Set\fR table and \fBPort_Group\fR table in the \fBOVN_Northbound\fR database for details\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBname\fR
+string (must be unique within table)
+.TQ 3.00in
+\fBaddresses\fR
+set of strings
+.SS "Details:
+.IP "\fBname\fR: string (must be unique within table)"
+.IP "\fBaddresses\fR: set of strings"
+.bp
+.SH "Port_Group TABLE"
+.PP
+.PP
+.PP
+This table contains names for the logical switch ports in the \fBOVN_Northbound\fR database that belongs to the same group that is defined in \fBPort_Group\fR in the \fBOVN_Northbound\fR database\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBname\fR
+string (must be unique within table)
+.TQ 3.00in
+\fBports\fR
+set of strings
+.SS "Details:
+.IP "\fBname\fR: string (must be unique within table)"
+.IP "\fBports\fR: set of strings"
+.bp
+.SH "Logical_Flow TABLE"
+.PP
+.PP
+.PP
+Each row in this table represents one logical flow\[char46] \fBovn\-northd\fR populates this table with logical flows that implement the L2 and L3 topologies specified in the \fBOVN_Northbound\fR database\[char46] Each hypervisor, via \fBovn\-controller\fR, translates the logical flows into OpenFlow flows specific to its hypervisor and installs them into Open vSwitch\[char46]
+.PP
+.PP
+Logical flows are expressed in an OVN-specific format, described here\[char46] A logical datapath flow is much like an OpenFlow flow, except that the flows are written in terms of logical ports and logical datapaths instead of physical ports and physical datapaths\[char46] Translation between logical and physical flows helps to ensure isolation between logical datapaths\[char46] (The logical flow abstraction also allows the OVN centralized components to do less work, since they do not have to separately compute and push out physical flows to each chassis\[char46])
+.PP
+.PP
+The default action when no flow matches is to drop packets\[char46]
+.PP
+\fBArchitectural Logical Life Cycle of a Packet\fR
+.PP
+.PP
+This following description focuses on the life cycle of a packet through a logical datapath, ignoring physical details of the implementation\[char46] Please refer to \fBArchitectural Physical Life Cycle of a Packet\fR in \fBovn\-architecture\fR(7) for the physical information\[char46]
+.PP
+.PP
+The description here is written as if OVN itself executes these steps, but in fact OVN (that is, \fBovn\-controller\fR) programs Open vSwitch, via OpenFlow and OVSDB, to execute them on its behalf\[char46]
+.PP
+.PP
+At a high level, OVN passes each packet through the logical datapath\(cqs logical ingress pipeline, which may output the packet to one or more logical port or logical multicast groups\[char46] For each such logical output port, OVN passes the packet through the datapath\(cqs logical egress pipeline, which may either drop the packet or deliver it to the destination\[char46] Between the two pipelines, outputs to logical multicast groups are expanded into logical ports, so that the egress pipeline only processes a single logical output port at a time\[char46] Between the two pipelines is also where, when necessary, OVN encapsulates a packet in a tunnel (or tunnels) to transmit to remote hypervisors\[char46]
+.PP
+.PP
+In more detail, to start, OVN searches the \fBLogical_Flow\fR table for a row with correct \fBlogical_datapath\fR or a \fBlogical_dp_group\fR, a \fBpipeline\fR of \fBingress\fR, a \fBtable_id\fR of 0, and a \fBmatch\fR that is true for the packet\[char46] If none is found, OVN drops the packet\[char46] If OVN finds more than one, it chooses the match with the highest \fBpriority\fR\[char46] Then OVN executes each of the actions specified in the row\(cqs \fBactions\fR column, in the order specified\[char46] Some actions, such as those to modify packet headers, require no further details\[char46] The \fBnext\fR and \fBoutput\fR actions are special\[char46]
+.PP
+.PP
+The \fBnext\fR action causes the above process to be repeated recursively, except that OVN searches for \fBtable_id\fR of 1 instead of 0\[char46] Similarly, any \fBnext\fR action in a row found in that table would cause a further search for a \fBtable_id\fR of 2, and so on\[char46] When recursive processing completes, flow control returns to the action following \fBnext\fR\[char46]
+.PP
+.PP
+The \fBoutput\fR action also introduces recursion\[char46] Its effect depends on the current value of the \fBoutport\fR field\[char46] Suppose \fBoutport\fR designates a logical port\[char46] First, OVN compares \fBinport\fR to \fBoutport\fR; if they are equal, it treats the \fBoutput\fR as a no-op by default\[char46] In the common case, where they are different, the packet enters the egress pipeline\[char46] This transition to the egress pipeline discards register data, e\[char46]g\[char46] \fBreg0\fR \[char46]\[char46]\[char46] \fBreg9\fR and connection tracking state, to achieve uniform behavior regardless of whether the egress pipeline is on a different hypervisor (because registers aren\(cqt preserve across tunnel encapsulation)\[char46]
+.PP
+.PP
+To execute the egress pipeline, OVN again searches the \fBLogical_Flow\fR table for a row with correct \fBlogical_datapath\fR or a \fBlogical_dp_group\fR, a \fBtable_id\fR of 0, a \fBmatch\fR that is true for the packet, but now looking for a \fBpipeline\fR of \fBegress\fR\[char46] If no matching row is found, the output becomes a no-op\[char46] Otherwise, OVN executes the actions for the matching flow (which is chosen from multiple, if necessary, as already described)\[char46]
+.PP
+.PP
+In the \fBegress\fR pipeline, the \fBnext\fR action acts as already described, except that it, of course, searches for \fBegress\fR flows\[char46] The \fBoutput\fR action, however, now directly outputs the packet to the output port (which is now fixed, because \fBoutport\fR is read-only within the egress pipeline)\[char46]
+.PP
+.PP
+The description earlier assumed that \fBoutport\fR referred to a logical port\[char46] If it instead designates a logical multicast group, then the description above still applies, with the addition of fan-out from the logical multicast group to each logical port in the group\[char46] For each member of the group, OVN executes the logical pipeline as described, with the logical output port replaced by the group member\[char46]
+.PP
+\fBPipeline Stages\fR
+.PP
+.PP
+\fBovn\-northd\fR populates the \fBLogical_Flow\fR table with the logical flows described in detail in \fBovn\-northd\fR(8)\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBlogical_datapath\fR
+optional \fBDatapath_Binding\fR
+.TQ 3.00in
+\fBlogical_dp_group\fR
+optional \fBLogical_DP_Group\fR
+.TQ 3.00in
+\fBpipeline\fR
+string, either \fBegress\fR or \fBingress\fR
+.TQ 3.00in
+\fBtable_id\fR
+integer, in range 0 to 32
+.TQ 3.00in
+\fBpriority\fR
+integer, in range 0 to 65,535
+.TQ 3.00in
+\fBmatch\fR
+string
+.TQ 3.00in
+\fBactions\fR
+string
+.TQ 3.00in
+\fBtags\fR
+map of string-string pairs
+.TQ 3.00in
+\fBcontroller_meter\fR
+optional string
+.TQ 3.00in
+\fBexternal_ids : stage-name\fR
+optional string
+.TQ 3.00in
+\fBexternal_ids : stage-hint\fR
+optional string, containing an uuid
+.TQ 3.00in
+\fBexternal_ids : source\fR
+optional string
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.RE
+.SS "Details:
+.IP "\fBlogical_datapath\fR: optional \fBDatapath_Binding\fR"
+The logical datapath to which the logical flow belongs\[char46]
+.IP "\fBlogical_dp_group\fR: optional \fBLogical_DP_Group\fR"
+The group of logical datapaths to which the logical flow belongs\[char46] This means that the same logical flow belongs to all datapaths in a group\[char46]
+.IP "\fBpipeline\fR: string, either \fBegress\fR or \fBingress\fR"
+The primary flows used for deciding on a packet\(cqs destination are the \fBingress\fR flows\[char46] The \fBegress\fR flows implement ACLs\[char46] See \fBLogical Life Cycle of a Packet\fR, above, for details\[char46]
+.IP "\fBtable_id\fR: integer, in range 0 to 32"
+The stage in the logical pipeline, analogous to an OpenFlow table number\[char46]
+.IP "\fBpriority\fR: integer, in range 0 to 65,535"
+The flow\(cqs priority\[char46] Flows with numerically higher priority take precedence over those with lower\[char46] If two logical datapath flows with the same priority both match, then the one actually applied to the packet is undefined\[char46]
+.IP "\fBmatch\fR: string"
+A matching expression\[char46] OVN provides a superset of OpenFlow matching capabilities, using a syntax similar to Boolean expressions in a programming language\[char46]
+.IP
+The most important components of match expression are \fIcomparisons\fR between \fIsymbols\fR and \fIconstants\fR, e\[char46]g\[char46] \fBip4\[char46]dst == 192\[char46]168\[char46]0\[char46]1\fR, \fBip\[char46]proto == 6\fR, \fBarp\[char46]op == 1\fR, \fBeth\[char46]type ==
+0x800\fR\[char46] The logical AND operator \fB&&\fR and logical OR operator \fB||\fR can combine comparisons into a larger expression\[char46]
+.IP
+Matching expressions also support parentheses for grouping, the logical NOT prefix operator \fB!\fR, and literals \fB0\fR and \fB1\fR to express ``false\(cq\(cq or ``true,\(cq\(cq respectively\[char46] The latter is useful by itself as a catch-all expression that matches every packet\[char46]
+.IP
+Match expressions also support a kind of function syntax\[char46] The following functions are supported:
+.RS
+.TP
+\fBis_chassis_resident(\fIlport\fB)\fR
+Evaluates to true on a chassis on which logical port \fIlport\fR (a quoted string) resides, and to false elsewhere\[char46] This function was introduced in OVN 2\[char46]7\[char46]
+.RE
+.IP
+\fBSymbols\fR
+.IP
+\fBType\fR\[char46] Symbols have \fIinteger\fR or \fIstring\fR type\[char46] Integer symbols have a \fIwidth\fR in bits\[char46]
+.IP
+\fBKinds\fR\[char46] There are three kinds of symbols:
+.RS
+.IP \(bu
+\fIFields\fR\[char46] A field symbol represents a packet header or metadata field\[char46] For example, a field named \fBvlan\[char46]tci\fR might represent the VLAN TCI field in a packet\[char46]
+.IP
+A field symbol can have integer or string type\[char46] Integer fields can be nominal or ordinal (see \fBLevel of Measurement\fR, below)\[char46]
+.IP \(bu
+\fISubfields\fR\[char46] A subfield represents a subset of bits from a larger field\[char46] For example, a field \fBvlan\[char46]vid\fR might be defined as an alias for \fBvlan\[char46]tci[0\[char46]\[char46]11]\fR\[char46] Subfields are provided for syntactic convenience, because it is always possible to instead refer to a subset of bits from a field directly\[char46]
+.IP
+Only ordinal fields (see \fBLevel of Measurement\fR, below) may have subfields\[char46] Subfields are always ordinal\[char46]
+.IP \(bu
+\fIPredicates\fR\[char46] A predicate is shorthand for a Boolean expression\[char46] Predicates may be used much like 1-bit fields\[char46] For example, \fBip4\fR might expand to \fBeth\[char46]type ==
+0x800\fR\[char46] Predicates are provided for syntactic convenience, because it is always possible to instead specify the underlying expression directly\[char46]
+.IP
+A predicate whose expansion refers to any nominal field or predicate (see \fBLevel of Measurement\fR, below) is nominal; other predicates have Boolean level of measurement\[char46]
+.RE
+.IP
+\fBLevel of Measurement\fR\[char46] See http://en\[char46]wikipedia\[char46]org/wiki/Level_of_measurement for the statistical concept on which this classification is based\[char46] There are three levels:
+.RS
+.IP \(bu
+\fIOrdinal\fR\[char46] In statistics, ordinal values can be ordered on a scale\[char46] OVN considers a field (or subfield) to be ordinal if its bits can be examined individually\[char46] This is true for the OpenFlow fields that OpenFlow or Open vSwitch makes ``maskable\[char46]\(cq\(cq
+.IP
+Any use of a ordinal field may specify a single bit or a range of bits, e\[char46]g\[char46] \fBvlan\[char46]tci[13\[char46]\[char46]15]\fR refers to the PCP field within the VLAN TCI, and \fBeth\[char46]dst[40]\fR refers to the multicast bit in the Ethernet destination address\[char46]
+.IP
+OVN supports all the usual arithmetic relations (\fB==\fR, \fB!=\fR, \fB<\fR, \fB<=\fR, \fB>\fR, and \fB>=\fR) on ordinal fields and their subfields, because OVN can implement these in OpenFlow and Open vSwitch as collections of bitwise tests\[char46]
+.IP \(bu
+\fINominal\fR\[char46] In statistics, nominal values cannot be usefully compared except for equality\[char46] This is true of OpenFlow port numbers, Ethernet types, and IP protocols are examples: all of these are just identifiers assigned arbitrarily with no deeper meaning\[char46] In OpenFlow and Open vSwitch, bits in these fields generally aren\(cqt individually addressable\[char46]
+.IP
+OVN only supports arithmetic tests for equality on nominal fields, because OpenFlow and Open vSwitch provide no way for a flow to efficiently implement other comparisons on them\[char46] (A test for inequality can be sort of built out of two flows with different priorities, but OVN matching expressions always generate flows with a single priority\[char46])
+.IP
+String fields are always nominal\[char46]
+.IP \(bu
+\fIBoolean\fR\[char46] A nominal field that has only two values, 0 and 1, is somewhat exceptional, since it is easy to support both equality and inequality tests on such a field: either one can be implemented as a test for 0 or 1\[char46]
+.IP
+Only predicates (see above) have a Boolean level of measurement\[char46]
+.IP
+This isn\(cqt a standard level of measurement\[char46]
+.RE
+.IP
+\fBPrerequisites\fR\[char46] Any symbol can have prerequisites, which are additional condition implied by the use of the symbol\[char46] For example, For example, \fBicmp4\[char46]type\fR symbol might have prerequisite \fBicmp4\fR, which would cause an expression \fBicmp4\[char46]type ==
+0\fR to be interpreted as \fBicmp4\[char46]type == 0 &&
+icmp4\fR, which would in turn expand to \fBicmp4\[char46]type == 0
+&& eth\[char46]type == 0x800 && ip4\[char46]proto == 1\fR (assuming \fBicmp4\fR is a predicate defined as suggested under \fBTypes\fR above)\[char46]
+.IP
+\fBRelational operators\fR
+.IP
+All of the standard relational operators \fB==\fR, \fB!=\fR, \fB<\fR, \fB<=\fR, \fB>\fR, and \fB>=\fR are supported\[char46] Nominal fields support only \fB==\fR and \fB!=\fR, and only in a positive sense when outer \fB!\fR are taken into account, e\[char46]g\[char46] given string field \fBinport\fR, \fBinport ==
+\(dqeth0\(dq\fR and \fB!(inport != \(dqeth0\(dq)\fR are acceptable, but not \fBinport != \(dqeth0\(dq\fR\[char46]
+.IP
+The implementation of \fB==\fR (or \fB!=\fR when it is negated), is more efficient than that of the other relational operators\[char46]
+.IP
+\fBConstants\fR
+.IP
+Integer constants may be expressed in decimal, hexadecimal prefixed by \fB0x\fR, or as dotted-quad IPv4 addresses, IPv6 addresses in their standard forms, or Ethernet addresses as colon-separated hex digits\[char46] A constant in any of these forms may be followed by a slash and a second constant (the mask) in the same form, to form a masked constant\[char46] IPv4 and IPv6 masks may be given as integers, to express CIDR prefixes\[char46]
+.IP
+String constants have the same syntax as quoted strings in JSON (thus, they are Unicode strings)\[char46]
+.IP
+Some operators support sets of constants written inside curly braces \fB{\fR \[char46]\[char46]\[char46] \fB}\fR\[char46] Commas between elements of a set, and after the last elements, are optional\[char46] With \fB==\fR, ``\fB\fIfield\fB == { \fIconstant1\fB,
+\fIconstant2\fB,\fR \[char46]\[char46]\[char46] \fB}\fR\(cq\(cq is syntactic sugar for ``\fB\fIfield\fB == \fIconstant1\fB ||
+\fIfield\fB == \fIconstant2\fB || \fR\[char46]\[char46]\[char46]\fB\fR\[char46] Similarly, ``\fB\fIfield\fB != { \fIconstant1\fB,
+\fIconstant2\fB, \fR\[char46]\[char46]\[char46]\fB }\fR\(cq\(cq is equivalent to ``\fB\fIfield\fB != \fIconstant1\fB &&
+\fIfield\fB != \fIconstant2\fB &&
+\fR\[char46]\[char46]\[char46]\fB\fR\(cq\(cq\[char46]
+.IP
+You may refer to a set of IPv4, IPv6, or MAC addresses stored in the \fBAddress_Set\fR table by its \fBname\fR\[char46] An \fBAddress_Set\fR with a name of \fBset1\fR can be referred to as \fB$set1\fR\[char46]
+.IP
+You may refer to a group of logical switch ports stored in the \fBPort_Group\fR table by its \fBname\fR\[char46] An \fBPort_Group\fR with a name of \fBport_group1\fR can be referred to as \fB@port_group1\fR\[char46]
+.IP
+Additionally, you may refer to the set of addresses belonging to a group of logical switch ports stored in the \fBPort_Group\fR table by its \fBname\fR followed by a suffix \(cq_ip4\(cq/\(cq_ip6\(cq\[char46] The IPv4 address set of a \fBPort_Group\fR with a name of \fBport_group1\fR can be referred to as \fB$port_group1_ip4\fR, and the IPv6 address set of the same \fBPort_Group\fR can be referred to as \fB$port_group1_ip6\fR
+.IP
+\fBMiscellaneous\fR
+.IP
+Comparisons may name the symbol or the constant first, e\[char46]g\[char46] \fBtcp\[char46]src == 80\fR and \fB80 == tcp\[char46]src\fR are both acceptable\[char46]
+.IP
+Tests for a range may be expressed using a syntax like \fB1024 <=
+tcp\[char46]src <= 49151\fR, which is equivalent to \fB1024 <=
+tcp\[char46]src && tcp\[char46]src <= 49151\fR\[char46]
+.IP
+For a one-bit field or predicate, a mention of its name is equivalent to \fB\fIsymobl\fB == 1\fR, e\[char46]g\[char46] \fBvlan\[char46]present\fR is equivalent to \fBvlan\[char46]present == 1\fR\[char46] The same is true for one-bit subfields, e\[char46]g\[char46] \fBvlan\[char46]tci[12]\fR\[char46] There is no technical limitation to implementing the same for ordinal fields of all widths, but the implementation is expensive enough that the syntax parser requires writing an explicit comparison against zero to make mistakes less likely, e\[char46]g\[char46] in \fBtcp\[char46]src != 0\fR the comparison against 0 is required\[char46]
+.IP
+\fBOperator precedence\fR is as shown below, from highest to lowest\[char46] There are two exceptions where parentheses are required even though the table would suggest that they are not: \fB&&\fR and \fB||\fR require parentheses when used together, and \fB!\fR requires parentheses when applied to a relational expression\[char46] Thus, in \fB(eth\[char46]type == 0x800 || eth\[char46]type == 0x86dd)
+&& ip\[char46]proto == 6\fR or \fB!(arp\[char46]op == 1)\fR, the parentheses are mandatory\[char46]
+.RS
+.IP \(bu
+\fB()\fR
+.IP \(bu
+\fB==   !=   <   <=   >   >=\fR
+.IP \(bu
+\fB!\fR
+.IP \(bu
+\fB&&   ||\fR
+.RE
+.IP
+\fBComments\fR may be introduced by \fB//\fR, which extends to the next new-line\[char46] Comments within a line may be bracketed by \fB/*\fR and \fB*/\fR\[char46] Multiline comments are not supported\[char46]
+.IP
+\fBSymbols\fR
+.IP
+Most of the symbols below have integer type\[char46] Only \fBinport\fR and \fBoutport\fR have string type\[char46] \fBinport\fR names a logical port\[char46] Thus, its value is a \fBlogical_port\fR name from the \fBPort_Binding\fR table\[char46] \fBoutport\fR may name a logical port, as \fBinport\fR, or a logical multicast group defined in the \fBMulticast_Group\fR table\[char46] For both symbols, only names within the flow\(cqs logical datapath may be used\[char46]
+.IP
+The \fBreg\fR\fIX\fR symbols are 32-bit integers\[char46] The \fBxxreg\fR\fIX\fR symbols are 128-bit integers, which overlay four of the 32-bit registers: \fBxxreg0\fR overlays \fBreg0\fR through \fBreg3\fR, with \fBreg0\fR supplying the most-significant bits of \fBxxreg0\fR and \fBreg3\fR the least-significant\[char46] \fBxxreg1\fR similarly overlays \fBreg4\fR through \fBreg7\fR\[char46]
+.RS
+.IP \(bu
+\fBreg0\fR\[char46]\[char46]\[char46]\fBreg9\fR
+.IP \(bu
+\fBxxreg0\fR \fBxxreg1\fR
+.IP \(bu
+\fBinport\fR \fBoutport\fR
+.IP \(bu
+\fBflags\[char46]loopback\fR
+.IP \(bu
+\fBpkt\[char46]mark\fR
+.IP \(bu
+\fBeth\[char46]src\fR \fBeth\[char46]dst\fR \fBeth\[char46]type\fR
+.IP \(bu
+\fBvlan\[char46]tci\fR \fBvlan\[char46]vid\fR \fBvlan\[char46]pcp\fR \fBvlan\[char46]present\fR
+.IP \(bu
+\fBip\[char46]proto\fR \fBip\[char46]dscp\fR \fBip\[char46]ecn\fR \fBip\[char46]ttl\fR \fBip\[char46]frag\fR
+.IP \(bu
+\fBip4\[char46]src\fR \fBip4\[char46]dst\fR
+.IP \(bu
+\fBip6\[char46]src\fR \fBip6\[char46]dst\fR \fBip6\[char46]label\fR
+.IP \(bu
+\fBarp\[char46]op\fR \fBarp\[char46]spa\fR \fBarp\[char46]tpa\fR \fBarp\[char46]sha\fR \fBarp\[char46]tha\fR
+.IP \(bu
+\fBrarp\[char46]op\fR \fBrarp\[char46]spa\fR \fBrarp\[char46]tpa\fR \fBrarp\[char46]sha\fR \fBrarp\[char46]tha\fR
+.IP \(bu
+\fBtcp\[char46]src\fR \fBtcp\[char46]dst\fR \fBtcp\[char46]flags\fR
+.IP \(bu
+\fBudp\[char46]src\fR \fBudp\[char46]dst\fR
+.IP \(bu
+\fBsctp\[char46]src\fR \fBsctp\[char46]dst\fR
+.IP \(bu
+\fBicmp4\[char46]type\fR \fBicmp4\[char46]code\fR
+.IP \(bu
+\fBicmp6\[char46]type\fR \fBicmp6\[char46]code\fR
+.IP \(bu
+\fBnd\[char46]target\fR \fBnd\[char46]sll\fR \fBnd\[char46]tll\fR
+.IP \(bu
+\fBct_mark\fR \fBct_label\fR
+.IP \(bu
+\fBct_state\fR, which has several Boolean subfields\[char46] The \fBct_next\fR action initializes the following subfields:
+.RS
+.IP \(bu
+\fBct\[char46]trk\fR: Always set to true by \fBct_next\fR to indicate that connection tracking has taken place\[char46] All other \fBct\fR subfields have \fBct\[char46]trk\fR as a prerequisite\[char46]
+.IP \(bu
+\fBct\[char46]new\fR: True for a new flow
+.IP \(bu
+\fBct\[char46]est\fR: True for an established flow
+.IP \(bu
+\fBct\[char46]rel\fR: True for a related flow
+.IP \(bu
+\fBct\[char46]rpl\fR: True for a reply flow
+.IP \(bu
+\fBct\[char46]inv\fR: True for a connection entry in a bad state
+.RE
+.IP
+The \fBct_dnat\fR, \fBct_snat\fR, and \fBct_lb\fR actions initialize the following subfields:
+.RS
+.IP \(bu
+\fBct\[char46]dnat\fR: True for a packet whose destination IP address has been changed\[char46]
+.IP \(bu
+\fBct\[char46]snat\fR: True for a packet whose source IP address has been changed\[char46]
+.RE
+.RE
+.IP
+The following predicates are supported:
+.RS
+.IP \(bu
+\fBeth\[char46]bcast\fR expands to \fBeth\[char46]dst == ff:ff:ff:ff:ff:ff\fR
+.IP \(bu
+\fBeth\[char46]mcast\fR expands to \fBeth\[char46]dst[40]\fR
+.IP \(bu
+\fBvlan\[char46]present\fR expands to \fBvlan\[char46]tci[12]\fR
+.IP \(bu
+\fBip4\fR expands to \fBeth\[char46]type == 0x800\fR
+.IP \(bu
+\fBip4\[char46]src_mcast\fR expands to \fBip4\[char46]src[28\[char46]\[char46]31] == 0xe\fR
+.IP \(bu
+\fBip4\[char46]mcast\fR expands to \fBip4\[char46]dst[28\[char46]\[char46]31] == 0xe\fR
+.IP \(bu
+\fBip6\fR expands to \fBeth\[char46]type == 0x86dd\fR
+.IP \(bu
+\fBip\fR expands to \fBip4 || ip6\fR
+.IP \(bu
+\fBicmp4\fR expands to \fBip4 && ip\[char46]proto == 1\fR
+.IP \(bu
+\fBicmp6\fR expands to \fBip6 && ip\[char46]proto == 58\fR
+.IP \(bu
+\fBicmp\fR expands to \fBicmp4 || icmp6\fR
+.IP \(bu
+\fBip\[char46]is_frag\fR expands to \fBip\[char46]frag[0]\fR
+.IP \(bu
+\fBip\[char46]later_frag\fR expands to \fBip\[char46]frag[1]\fR
+.IP \(bu
+\fBip\[char46]first_frag\fR expands to \fBip\[char46]is_frag && !ip\[char46]later_frag\fR
+.IP \(bu
+\fBarp\fR expands to \fBeth\[char46]type == 0x806\fR
+.IP \(bu
+\fBrarp\fR expands to \fBeth\[char46]type == 0x8035\fR
+.IP \(bu
+\fBnd\fR expands to \fBicmp6\[char46]type == {135, 136} && icmp6\[char46]code == 0 && ip\[char46]ttl == 255\fR
+.IP \(bu
+\fBnd_ns\fR expands to \fBicmp6\[char46]type == 135 && icmp6\[char46]code == 0 && ip\[char46]ttl == 255\fR
+.IP \(bu
+\fBnd_na\fR expands to \fBicmp6\[char46]type == 136 && icmp6\[char46]code == 0 && ip\[char46]ttl == 255\fR
+.IP \(bu
+\fBnd_rs\fR expands to \fBicmp6\[char46]type == 133 &&
+icmp6\[char46]code == 0 && ip\[char46]ttl == 255\fR
+.IP \(bu
+\fBnd_ra\fR expands to \fBicmp6\[char46]type == 134 &&
+icmp6\[char46]code == 0 && ip\[char46]ttl == 255\fR
+.IP \(bu
+\fBtcp\fR expands to \fBip\[char46]proto == 6\fR
+.IP \(bu
+\fBudp\fR expands to \fBip\[char46]proto == 17\fR
+.IP \(bu
+\fBsctp\fR expands to \fBip\[char46]proto == 132\fR
+.RE
+.IP "\fBactions\fR: string"
+Logical datapath actions, to be executed when the logical flow represented by this row is the highest-priority match\[char46]
+.IP
+Actions share lexical syntax with the \fBmatch\fR column\[char46] An empty set of actions (or one that contains just white space or comments), or a set of actions that consists of just \fBdrop;\fR, causes the matched packets to be dropped\[char46] Otherwise, the column should contain a sequence of actions, each terminated by a semicolon\[char46]
+.IP
+The following actions are defined:
+.RS
+.TP
+\fBoutput;\fR
+In the ingress pipeline, this action executes the \fBegress\fR pipeline as a subroutine\[char46] If \fBoutport\fR names a logical port, the egress pipeline executes once; if it is a multicast group, the egress pipeline runs once for each logical port in the group\[char46]
+.IP
+In the egress pipeline, this action performs the actual output to the \fBoutport\fR logical port\[char46] (In the egress pipeline, \fBoutport\fR never names a multicast group\[char46])
+.IP
+By default, output to the input port is implicitly dropped, that is, \fBoutput\fR becomes a no-op if \fBoutport\fR == \fBinport\fR\[char46] Occasionally it may be useful to override this behavior, e\[char46]g\[char46] to send an ARP reply to an ARP request; to do so, use \fBflags\[char46]loopback = 1\fR to allow the packet to \(dqhair-pin\(dq back to the input port\[char46]
+.TP
+\fBnext;\fR
+.TQ .5in
+\fBnext(\fItable\fB);\fR
+.TQ .5in
+\fBnext(pipeline=\fIpipeline\fB, table=\fItable\fB);\fR
+Executes the given logical datapath \fItable\fR in \fIpipeline\fR as a subroutine\[char46] The default \fItable\fR is just after the current one\[char46] If \fIpipeline\fR is specified, it may be \fBingress\fR or \fBegress\fR; the default \fIpipeline\fR is the one currently executing\[char46] Actions in the both ingress and egress pipeline can use \fBnext\fR to jump across the other pipeline\[char46] Actions in the ingress pipeline should use \fBnext\fR to jump into the specific table of egress pipeline only if it is certain that the packets are local and not tunnelled and wants to skip certain stages in the packet processing\[char46]
+.TP
+\fB\fIfield\fB = \fIconstant\fB;\fR
+Sets data or metadata field \fIfield\fR to constant value \fIconstant\fR, e\[char46]g\[char46] \fBoutport = \(dqvif0\(dq;\fR to set the logical output port\[char46] To set only a subset of bits in a field, specify a subfield for \fIfield\fR or a masked \fIconstant\fR, e\[char46]g\[char46] one may use \fBvlan\[char46]pcp[2] = 1;\fR or \fBvlan\[char46]pcp = 4/4;\fR to set the most significant bit of the VLAN PCP\[char46]
+.IP
+Assigning to a field with prerequisites implicitly adds those prerequisites to \fBmatch\fR; thus, for example, a flow that sets \fBtcp\[char46]dst\fR applies only to TCP flows, regardless of whether its \fBmatch\fR mentions any TCP field\[char46]
+.IP
+Not all fields are modifiable (e\[char46]g\[char46] \fBeth\[char46]type\fR and \fBip\[char46]proto\fR are read-only), and not all modifiable fields may be partially modified (e\[char46]g\[char46] \fBip\[char46]ttl\fR must assigned as a whole)\[char46] The \fBoutport\fR field is modifiable in the \fBingress\fR pipeline but not in the \fBegress\fR pipeline\[char46]
+.TP
+\fB\fIovn_field\fB = \fIconstant\fB;\fR
+Sets OVN field \fIovn_field\fR to constant value \fIconstant\fR\[char46]
+.IP
+\fBOVN\fR supports setting the values of certain fields which are not yet supported in OpenFlow to set or modify them\[char46]
+.IP
+Below are the supported \fBOVN fields\fR:
+.RS
+.IP \(bu
+\fBicmp4\[char46]frag_mtu\fR \fBicmp6\[char46]frag_mtu\fR
+.IP
+This field sets the low-order 16 bits of the ICMP{4,6} header field that is labelled \(dqunused\(dq in the ICMP specification as defined in the RFC 1191 with the value specified in \fIconstant\fR\[char46]
+.IP
+Eg\[char46] icmp4\[char46]frag_mtu = 1500;
+.RE
+.TP
+\fB\fIfield1\fB = \fIfield2\fB;\fR
+Sets data or metadata field \fIfield1\fR to the value of data or metadata field \fIfield2\fR, e\[char46]g\[char46] \fBreg0 =
+ip4\[char46]src;\fR copies \fBip4\[char46]src\fR into \fBreg0\fR\[char46] To modify only a subset of a field\(cqs bits, specify a subfield for \fIfield1\fR or \fIfield2\fR or both, e\[char46]g\[char46] \fBvlan\[char46]pcp
+= reg0[0\[char46]\[char46]2];\fR copies the least-significant bits of \fBreg0\fR into the VLAN PCP\[char46]
+.IP
+\fIfield1\fR and \fIfield2\fR must be the same type, either both string or both integer fields\[char46] If they are both integer fields, they must have the same width\[char46]
+.IP
+If \fIfield1\fR or \fIfield2\fR has prerequisites, they are added implicitly to \fBmatch\fR\[char46] It is possible to write an assignment with contradictory prerequisites, such as \fBip4\[char46]src = ip6\[char46]src[0\[char46]\[char46]31];\fR, but the contradiction means that a logical flow with such an assignment will never be matched\[char46]
+.TP
+\fB\fIfield1\fB <\-> \fIfield2\fB;\fR
+Similar to \fB\fIfield1\fB = \fIfield2\fB;\fR except that the two values are exchanged instead of copied\[char46] Both \fIfield1\fR and \fIfield2\fR must modifiable\[char46]
+.TP
+\fBpush(\fIfield\fB);\fR
+Push the value of \fIfield\fR to the stack top\[char46]
+.TP
+\fBpop(\fIfield\fB);\fR
+Pop the stack top and store the value to \fIfield\fR, which must be modifiable\[char46]
+.TP
+\fBip\[char46]ttl\-\-;\fR
+Decrements the IPv4 or IPv6 TTL\[char46] If this would make the TTL zero or negative, then processing of the packet halts; no further actions are processed\[char46] (To properly handle such cases, a higher-priority flow should match on \fBip\[char46]ttl == {0, 1};\fR\[char46])
+.IP
+\fBPrerequisite:\fR \fBip\fR
+.TP
+\fBct_next;\fR
+Apply connection tracking to the flow, initializing \fBct_state\fR for matching in later tables\[char46] Automatically moves on to the next table, as if followed by \fBnext\fR\[char46]
+.IP
+As a side effect, IP fragments will be reassembled for matching\[char46] If a fragmented packet is output, then it will be sent with any overlapping fragments squashed\[char46] The connection tracking state is scoped by the logical port when the action is used in a flow for a logical switch, so overlapping addresses may be used\[char46] To allow traffic related to the matched flow, execute \fBct_commit
+\fR\[char46] Connection tracking state is scoped by the logical topology when the action is used in a flow for a router\[char46]
+.IP
+It is possible to have actions follow \fBct_next\fR, but they will not have access to any of its side-effects and is not generally useful\[char46]
+.TP
+\fBct_commit { };\fR
+.TQ .5in
+\fBct_commit { ct_mark=\fIvalue[/mask]\fB; };\fR
+.TQ .5in
+\fBct_commit { ct_label=\fIvalue[/mask]\fB; };\fR
+.TQ .5in
+\fBct_commit { ct_mark=\fIvalue[/mask]\fB; ct_label=\fIvalue[/mask]\fB; };\fR
+Commit the flow to the connection tracking entry associated with it by a previous call to \fBct_next\fR\[char46] When \fBct_mark=\fIvalue[/mask]\fB\fR and/or \fBct_label=\fIvalue[/mask]\fB\fR are supplied, \fBct_mark\fR and/or \fBct_label\fR will be set to the values indicated by \fIvalue[/mask]\fR on the connection tracking entry\[char46] \fBct_mark\fR is a 32-bit field\[char46] \fBct_label\fR is a 128-bit field\[char46] The \fIvalue[/mask]\fR should be specified in hex string if more than 64bits are to be used\[char46] Registers and other named fields can be used for \fIvalue\fR\[char46] \fBct_mark\fR and \fBct_label\fR may be sub-addressed in order to have specific bits set\[char46]
+.IP
+Note that if you want processing to continue in the next table, you must execute the \fBnext\fR action after \fBct_commit\fR\[char46] You may also leave out \fBnext\fR which will commit connection tracking state, and then drop the packet\[char46] This could be useful for setting \fBct_mark\fR on a connection tracking entry before dropping a packet, for example\[char46]
+.TP
+\fBct_dnat;\fR
+.TQ .5in
+\fBct_dnat(\fIIP\fB);\fR
+\fBct_dnat\fR sends the packet through the DNAT zone in connection tracking table to unDNAT any packet that was DNATed in the opposite direction\[char46] The packet is then automatically sent to to the next tables as if followed by \fBnext;\fR action\[char46] The next tables will see the changes in the packet caused by the connection tracker\[char46]
+.IP
+\fBct_dnat(\fIIP\fB)\fR sends the packet through the DNAT zone to change the destination IP address of the packet to the one provided inside the parentheses and commits the connection\[char46] The packet is then automatically sent to the next tables as if followed by \fBnext;\fR action\[char46] The next tables will see the changes in the packet caused by the connection tracker\[char46]
+.TP
+\fBct_snat;\fR
+.TQ .5in
+\fBct_snat(\fIIP\fB);\fR
+\fBct_snat\fR sends the packet through the SNAT zone to unSNAT any packet that was SNATed in the opposite direction\[char46] The packet is automatically sent to the next tables as if followed by the \fBnext;\fR action\[char46] The next tables will see the changes in the packet caused by the connection tracker\[char46]
+.IP
+\fBct_snat(\fIIP\fB)\fR sends the packet through the SNAT zone to change the source IP address of the packet to the one provided inside the parenthesis and commits the connection\[char46] The packet is then automatically sent to the next tables as if followed by \fBnext;\fR action\[char46] The next tables will see the changes in the packet caused by the connection tracker\[char46]
+.TP
+\fBct_dnat_in_czone;\fR
+.TQ .5in
+\fBct_dnat_in_czone(\fIIP\fB);\fR
+\fBct_dnat_in_czone\fR sends the packet through the common NAT zone (used for both DNAT and SNAT) in connection tracking table to unDNAT any packet that was DNATed in the opposite direction\[char46] The packet is then automatically sent to to the next tables as if followed by \fBnext;\fR action\[char46] The next tables will see the changes in the packet caused by the connection tracker\[char46]
+.IP
+\fBct_dnat_in_czone(\fIIP\fB)\fR sends the packet through the common NAT zone to change the destination IP address of the packet to the one provided inside the parentheses and commits the connection\[char46] The packet is then automatically sent to the next tables as if followed by \fBnext;\fR action\[char46] The next tables will see the changes in the packet caused by the connection tracker\[char46]
+.TP
+\fBct_snat_in_czone;\fR
+.TQ .5in
+\fBct_snat_in_czone(\fIIP\fB);\fR
+\fBct_snat_in_czone\fR sends the packet through the common NAT zone to unSNAT any packet that was SNATed in the opposite direction\[char46] The packet is automatically sent to the next tables as if followed by the \fBnext;\fR action\[char46] The next tables will see the changes in the packet caused by the connection tracker\[char46]
+.IP
+\fBct_snat_in_czone(\fIIP\fB)\fR sends the packet\e through the common NAT zone to change the source IP address of the packet to the one provided inside the parenthesis and commits the connection\[char46] The packet is then automatically sent to the next tables as if followed by \fBnext;\fR action\[char46] The next tables will see the changes in the packet caused by the connection tracker\[char46]
+.TP
+\fBct_clear;\fR
+Clears connection tracking state\[char46]
+.TP
+\fBct_commit_nat;\fR
+Applies NAT and commits the connection to the CT\[char46] Automatically moves on to the next table, as if followed by \fBnext\fR\[char46] This is very useful for connections that are in related state for already existing connections and allows the NAT to be applied to them as well\[char46]
+.TP
+\fBclone { \fIaction\fB; \fR\[char46]\[char46]\[char46]\fB };\fR
+Makes a copy of the packet being processed and executes each \fBaction\fR on the copy\[char46] Actions following the \fIclone\fR action, if any, apply to the original, unmodified packet\[char46] This can be used as a way to ``save and restore\(cq\(cq the packet around a set of actions that may modify it and should not persist\[char46]
+.TP
+\fBarp { \fIaction\fB; \fR\[char46]\[char46]\[char46]\fB };\fR
+Temporarily replaces the IPv4 packet being processed by an ARP packet and executes each nested \fIaction\fR on the ARP packet\[char46] Actions following the \fIarp\fR action, if any, apply to the original, unmodified packet\[char46]
+.IP
+The ARP packet that this action operates on is initialized based on the IPv4 packet being processed, as follows\[char46] These are default values that the nested actions will probably want to change:
+.RS
+.IP \(bu
+\fBeth\[char46]src\fR unchanged
+.IP \(bu
+\fBeth\[char46]dst\fR unchanged
+.IP \(bu
+\fBeth\[char46]type = 0x0806\fR
+.IP \(bu
+\fBarp\[char46]op = 1\fR (ARP request)
+.IP \(bu
+\fBarp\[char46]sha\fR copied from \fBeth\[char46]src\fR
+.IP \(bu
+\fBarp\[char46]spa\fR copied from \fBip4\[char46]src\fR
+.IP \(bu
+\fBarp\[char46]tha = 00:00:00:00:00:00\fR
+.IP \(bu
+\fBarp\[char46]tpa\fR copied from \fBip4\[char46]dst\fR
+.RE
+.IP
+The ARP packet has the same VLAN header, if any, as the IP packet it replaces\[char46]
+.IP
+\fBPrerequisite:\fR \fBip4\fR
+.TP
+\fBget_arp(\fIP\fB, \fIA\fB);\fR
+\fBParameters\fR: logical port string field \fIP\fR, 32-bit IP address field \fIA\fR\[char46]
+.IP
+Looks up \fIA\fR in \fIP\fR\(cqs mac binding table\[char46] If an entry is found, stores its Ethernet address in \fBeth\[char46]dst\fR, otherwise stores \fB00:00:00:00:00:00\fR in \fBeth\[char46]dst\fR\[char46]
+.IP
+\fBExample:\fR \fBget_arp(outport, ip4\[char46]dst);\fR
+.TP
+\fBput_arp(\fIP\fB, \fIA\fB, \fIE\fB);\fR
+\fBParameters\fR: logical port string field \fIP\fR, 32-bit IP address field \fIA\fR, 48-bit Ethernet address field \fIE\fR\[char46]
+.IP
+Adds or updates the entry for IP address \fIA\fR in logical port \fIP\fR\(cqs mac binding table, setting its Ethernet address to \fIE\fR\[char46]
+.IP
+\fBExample:\fR \fBput_arp(inport, arp\[char46]spa, arp\[char46]sha);\fR
+.TP
+\fB\fIR\fB = lookup_arp(\fIP\fB, \fIA\fB, \fIM\fB);\fR
+\fBParameters\fR: logical port string field \fIP\fR, 32-bit IP address field \fIA\fR, 48-bit MAC address field \fIM\fR\[char46]
+.IP
+\fBResult\fR: stored to a 1-bit subfield \fIR\fR\[char46]
+.IP
+Looks up \fIA\fR and \fIM\fR in \fIP\fR\(cqs mac binding table\[char46] If an entry is found, stores \fB1\fR in the 1-bit subfield \fIR\fR, else 0\[char46]
+.IP
+\fBExample:\fR \fB
+reg0[0] = lookup_arp(inport, arp\[char46]spa, arp\[char46]sha);
+\fR
+.TP
+\fB\fIR\fB = lookup_arp_ip(\fIP\fB, \fIA\fB);\fR
+\fBParameters\fR: logical port string field \fIP\fR, 32-bit IP address field \fIA\fR\[char46]
+.IP
+\fBResult\fR: stored to a 1-bit subfield \fIR\fR\[char46]
+.IP
+Looks up \fIA\fR in \fIP\fR\(cqs mac binding table\[char46] If an entry is found, stores \fB1\fR in the 1-bit subfield \fIR\fR, else 0\[char46]
+.IP
+\fBExample:\fR \fB
+reg0[0] = lookup_arp_ip(inport, arp\[char46]spa);
+\fR
+.TP
+\fB\fIP\fB = get_fdb(\fIA\fB);\fR
+\fBParameters\fR:48-bit MAC address field \fIA\fR\[char46]
+.IP
+Looks up \fIA\fR in fdb table\[char46] If an entry is found, stores the logical port key to the out parameter \fBP\fR\[char46]
+.IP
+\fBExample:\fR \fBoutport = get_fdb(eth\[char46]src);\fR
+.TP
+\fBput_fdb(\fIP\fB, \fIA\fB);\fR
+\fBParameters\fR: logical port string field \fIP\fR, 48-bit MAC address field \fIA\fR\[char46]
+.IP
+Adds or updates the entry for Ethernet address \fIA\fR in fdb table, setting its logical port key to \fIP\fR\[char46]
+.IP
+\fBExample:\fR \fBput_fdb(inport, arp\[char46]spa);\fR
+.TP
+\fB\fIR\fB = lookup_fdb(\fIP\fB, \fIA\fB);\fR
+\fBParameters\fR: 48-bit MAC address field \fIM\fR, logical port string field \fIP\fR\[char46]
+.IP
+\fBResult\fR: stored to a 1-bit subfield \fIR\fR\[char46]
+.IP
+Looks up \fIA\fR in fdb table\[char46] If an entry is found and the logical port key is \fIP\fR, \fBP\fR, stores \fB1\fR in the 1-bit subfield \fIR\fR, else 0\[char46] If \fBflags\[char46]localnet\fR is set then \fB1\fR is stored if an entry is found and the logical port key is \fIP\fR or if an entry is found and the entry port type is VIF\[char46]
+.IP
+\fBExample:\fR \fB
+reg0[0] = lookup_fdb(inport, eth\[char46]src);
+\fR
+.TP
+\fBnd_ns { \fIaction\fB; \fR\[char46]\[char46]\[char46]\fB };\fR
+Temporarily replaces the IPv6 packet being processed by an IPv6 Neighbor Solicitation packet and executes each nested \fIaction\fR on the IPv6 NS packet\[char46] Actions following the \fInd_ns\fR action, if any, apply to the original, unmodified packet\[char46]
+.IP
+The IPv6 NS packet that this action operates on is initialized based on the IPv6 packet being processed, as follows\[char46] These are default values that the nested actions will probably want to change:
+.RS
+.IP \(bu
+\fBeth\[char46]src\fR unchanged
+.IP \(bu
+\fBeth\[char46]dst\fR set to IPv6 multicast MAC address
+.IP \(bu
+\fBeth\[char46]type = 0x86dd\fR
+.IP \(bu
+\fBip6\[char46]src\fR copied from \fBip6\[char46]src\fR
+.IP \(bu
+\fBip6\[char46]dst\fR set to IPv6 Solicited-Node multicast address
+.IP \(bu
+\fBicmp6\[char46]type = 135\fR (Neighbor Solicitation)
+.IP \(bu
+\fBnd\[char46]target\fR copied from \fBip6\[char46]dst\fR
+.RE
+.IP
+The IPv6 NS packet has the same VLAN header, if any, as the IP packet it replaces\[char46]
+.IP
+\fBPrerequisite:\fR \fBip6\fR
+.TP
+\fBnd_na { \fIaction\fB; \fR\[char46]\[char46]\[char46]\fB };\fR
+Temporarily replaces the IPv6 neighbor solicitation packet being processed by an IPv6 neighbor advertisement (NA) packet and executes each nested \fIaction\fR on the NA packet\[char46] Actions following the \fBnd_na\fR action, if any, apply to the original, unmodified packet\[char46]
+.IP
+The NA packet that this action operates on is initialized based on the IPv6 packet being processed, as follows\[char46] These are default values that the nested actions will probably want to change:
+.RS
+.IP \(bu
+\fBeth\[char46]dst\fR exchanged with \fBeth\[char46]src\fR
+.IP \(bu
+\fBeth\[char46]type = 0x86dd\fR
+.IP \(bu
+\fBip6\[char46]dst\fR copied from \fBip6\[char46]src\fR
+.IP \(bu
+\fBip6\[char46]src\fR copied from \fBnd\[char46]target\fR
+.IP \(bu
+\fBicmp6\[char46]type = 136\fR (Neighbor Advertisement)
+.IP \(bu
+\fBnd\[char46]target\fR unchanged
+.IP \(bu
+\fBnd\[char46]sll = 00:00:00:00:00:00\fR
+.IP \(bu
+\fBnd\[char46]tll\fR copied from \fBeth\[char46]dst\fR
+.RE
+.IP
+The ND packet has the same VLAN header, if any, as the IPv6 packet it replaces\[char46]
+.IP
+\fBPrerequisite:\fR \fBnd_ns\fR
+.TP
+\fBnd_na_router { \fIaction\fB; \fR\[char46]\[char46]\[char46]\fB };\fR
+Temporarily replaces the IPv6 neighbor solicitation packet being processed by an IPv6 neighbor advertisement (NA) packet, sets ND_NSO_ROUTER in the RSO flags and executes each nested \fIaction\fR on the NA packet\[char46] Actions following the \fBnd_na_router\fR action, if any, apply to the original, unmodified packet\[char46]
+.IP
+The NA packet that this action operates on is initialized based on the IPv6 packet being processed, as follows\[char46] These are default values that the nested actions will probably want to change:
+.RS
+.IP \(bu
+\fBeth\[char46]dst\fR exchanged with \fBeth\[char46]src\fR
+.IP \(bu
+\fBeth\[char46]type = 0x86dd\fR
+.IP \(bu
+\fBip6\[char46]dst\fR copied from \fBip6\[char46]src\fR
+.IP \(bu
+\fBip6\[char46]src\fR copied from \fBnd\[char46]target\fR
+.IP \(bu
+\fBicmp6\[char46]type = 136\fR (Neighbor Advertisement)
+.IP \(bu
+\fBnd\[char46]target\fR unchanged
+.IP \(bu
+\fBnd\[char46]sll = 00:00:00:00:00:00\fR
+.IP \(bu
+\fBnd\[char46]tll\fR copied from \fBeth\[char46]dst\fR
+.RE
+.IP
+The ND packet has the same VLAN header, if any, as the IPv6 packet it replaces\[char46]
+.IP
+\fBPrerequisite:\fR \fBnd_ns\fR
+.TP
+\fBget_nd(\fIP\fB, \fIA\fB);\fR
+\fBParameters\fR: logical port string field \fIP\fR, 128-bit IPv6 address field \fIA\fR\[char46]
+.IP
+Looks up \fIA\fR in \fIP\fR\(cqs mac binding table\[char46] If an entry is found, stores its Ethernet address in \fBeth\[char46]dst\fR, otherwise stores \fB00:00:00:00:00:00\fR in \fBeth\[char46]dst\fR\[char46]
+.IP
+\fBExample:\fR \fBget_nd(outport, ip6\[char46]dst);\fR
+.TP
+\fBput_nd(\fIP\fB, \fIA\fB, \fIE\fB);\fR
+\fBParameters\fR: logical port string field \fIP\fR, 128-bit IPv6 address field \fIA\fR, 48-bit Ethernet address field \fIE\fR\[char46]
+.IP
+Adds or updates the entry for IPv6 address \fIA\fR in logical port \fIP\fR\(cqs mac binding table, setting its Ethernet address to \fIE\fR\[char46]
+.IP
+\fBExample:\fR \fBput_nd(inport, nd\[char46]target, nd\[char46]tll);\fR
+.TP
+\fB\fIR\fB = lookup_nd(\fIP\fB, \fIA\fB, \fIM\fB);\fR
+\fBParameters\fR: logical port string field \fIP\fR, 128-bit IP address field \fIA\fR, 48-bit MAC address field \fIM\fR\[char46]
+.IP
+\fBResult\fR: stored to a 1-bit subfield \fIR\fR\[char46]
+.IP
+Looks up \fIA\fR and \fIM\fR in \fIP\fR\(cqs mac binding table\[char46] If an entry is found, stores \fB1\fR in the 1-bit subfield \fIR\fR, else 0\[char46]
+.IP
+\fBExample:\fR \fB
+reg0[0] = lookup_nd(inport, ip6\[char46]src, eth\[char46]src);
+\fR
+.TP
+\fB\fIR\fB = lookup_nd_ip(\fIP\fB, \fIA\fB);\fR
+\fBParameters\fR: logical port string field \fIP\fR, 128-bit IP address field \fIA\fR\[char46]
+.IP
+\fBResult\fR: stored to a 1-bit subfield \fIR\fR\[char46]
+.IP
+Looks up \fIA\fR in \fIP\fR\(cqs mac binding table\[char46] If an entry is found, stores \fB1\fR in the 1-bit subfield \fIR\fR, else 0\[char46]
+.IP
+\fBExample:\fR \fB
+reg0[0] = lookup_nd_ip(inport, ip6\[char46]src);
+\fR
+.TP
+\fB\fIR\fB = put_dhcp_opts(\fID1\fB = \fIV1\fB, \fID2\fB = \fIV2\fB, \[char46]\[char46]\[char46], \fIDn\fB = \fIVn\fB);\fR
+\fBParameters\fR: one or more DHCP option/value pairs, which must include an \fBofferip\fR option (with code 0)\[char46]
+.IP
+\fBResult\fR: stored to a 1-bit subfield \fIR\fR\[char46]
+.IP
+Valid only in the ingress pipeline\[char46]
+.IP
+When this action is applied to a DHCP request packet (DHCPDISCOVER or DHCPREQUEST), it changes the packet into a DHCP reply (DHCPOFFER or DHCPACK, respectively), replaces the options by those specified as parameters, and stores 1 in \fIR\fR\[char46]
+.IP
+When this action is applied to a non-DHCP packet or a DHCP packet that is not DHCPDISCOVER or DHCPREQUEST, it leaves the packet unchanged and stores 0 in \fIR\fR\[char46]
+.IP
+The contents of the \fBDHCP_Option\fR table control the DHCP option names and values that this action supports\[char46]
+.IP
+\fBExample:\fR \fB
+reg0[0] = put_dhcp_opts(offerip = 10\[char46]0\[char46]0\[char46]2, router = 10\[char46]0\[char46]0\[char46]1,
+netmask = 255\[char46]255\[char46]255\[char46]0, dns_server = {8\[char46]8\[char46]8\[char46]8, 7\[char46]7\[char46]7\[char46]7});
+\fR
+.TP
+\fB\fIR\fB = put_dhcpv6_opts(\fID1\fB = \fIV1\fB, \fID2\fB = \fIV2\fB, \[char46]\[char46]\[char46], \fIDn\fB = \fIVn\fB);\fR
+\fBParameters\fR: one or more DHCPv6 option/value pairs\[char46]
+.IP
+\fBResult\fR: stored to a 1-bit subfield \fIR\fR\[char46]
+.IP
+Valid only in the ingress pipeline\[char46]
+.IP
+When this action is applied to a DHCPv6 request packet, it changes the packet into a DHCPv6 reply, replaces the options by those specified as parameters, and stores 1 in \fIR\fR\[char46]
+.IP
+When this action is applied to a non-DHCPv6 packet or an invalid DHCPv6 request packet , it leaves the packet unchanged and stores 0 in \fIR\fR\[char46]
+.IP
+The contents of the \fBDHCPv6_Options\fR table control the DHCPv6 option names and values that this action supports\[char46]
+.IP
+\fBExample:\fR \fB
+reg0[3] = put_dhcpv6_opts(ia_addr = aef0::4, server_id = 00:00:00:00:10:02,
+dns_server={ae70::1,ae70::2});
+\fR
+.TP
+\fBset_queue(\fIqueue_number\fB);\fR
+\fBParameters\fR: Queue number \fIqueue_number\fR, in the range 0 to 61440\[char46]
+.IP
+This is a logical equivalent of the OpenFlow \fBset_queue\fR action\[char46] It affects packets that egress a hypervisor through a physical interface\[char46] For nonzero \fIqueue_number\fR, it configures packet queuing to match the settings configured for the \fBPort_Binding\fR with \fBoptions:qdisc_queue_id\fR matching \fIqueue_number\fR\[char46] When \fIqueue_number\fR is zero, it resets queuing to the default strategy\[char46]
+.IP
+\fBExample:\fR \fBset_queue(10);\fR
+.TP
+\fBct_lb;\fR
+.TQ .5in
+\fBct_lb(backends=\fIip\fB[:\fIport\fB][,\[char46]\[char46]\[char46]][; hash_fields=\fIfield1\fB,\fIfield2\fB,\[char46]\[char46]\[char46]][; ct_flag]);\fR
+With arguments, \fBct_lb\fR commits the packet to the connection tracking table and DNATs the packet\(cqs destination IP address (and port) to the IP address or addresses (and optional ports) specified in the \fBbackends\fR\[char46] If multiple comma-separated IP addresses are specified, each is given equal weight for picking the DNAT address\[char46] By default, \fBdp_hash\fR is used as the OpenFlow group selection method, but if \fBhash_fields\fR is specified, \fBhash\fR is used as the selection method, and the fields listed are used as the hash fields\[char46] The \fBct_flag\fR field represents one of supported flag: \fBskip_snat\fR or \fBforce_snat\fR, this flag will be stored in \fBct_label\fR register\[char46]
+.IP
+Without arguments, \fBct_lb\fR sends the packet to the connection tracking table to NAT the packets\[char46] If the packet is part of an established connection that was previously committed to the connection tracker via \fBct_lb(\fR\[char46]\[char46]\[char46]\fB)\fR, it will automatically get DNATed to the same IP address as the first packet in that connection\[char46]
+.IP
+Processing automatically moves on to the next table, as if \fBnext;\fR were specified, and later tables act on the packet as modified by the connection tracker\[char46] Connection tracking state is scoped by the logical port when the action is used in a flow for a logical switch, so overlapping addresses may be used\[char46] Connection tracking state is scoped by the logical topology when the action is used in a flow for a router\[char46]
+.TP
+\fBct_lb_mark;\fR
+.TQ .5in
+\fBct_lb_mark(backends=\fIip\fB[:\fIport\fB][,\[char46]\[char46]\[char46]][; hash_fields=\fIfield1\fB,\fIfield2\fB,\[char46]\[char46]\[char46]][; ct_flag]);\fR
+Same as \fBct_lb\fR, except that it internally uses ct_mark to store the NAT flag, while \fBct_lb\fR uses ct_label for the same purpose\[char46]
+.TP
+\fB\fIR\fB = dns_lookup();\fR
+\fBParameters\fR: No parameters\[char46]
+.IP
+\fBResult\fR: stored to a 1-bit subfield \fIR\fR\[char46]
+.IP
+Valid only in the ingress pipeline\[char46]
+.IP
+When this action is applied to a valid DNS request (a UDP packet typically directed to port 53), it attempts to resolve the query using the contents of the \fBDNS\fR table\[char46] If it is successful, it changes the packet into a DNS reply and stores 1 in \fIR\fR\[char46] If the action is applied to a non-DNS packet, an invalid DNS request packet, or a valid DNS request for which the \fBDNS\fR table does not supply an answer, it leaves the packet unchanged and stores 0 in \fIR\fR\[char46]
+.IP
+Regardless of success, the action does not make any of the changes to the flow that are necessary to direct the packet back to the requester\[char46] The logical pipeline can implement this behavior with matches and actions in later tables\[char46]
+.IP
+\fBExample:\fR \fB
+reg0[3] = dns_lookup();
+\fR
+.IP
+\fBPrerequisite:\fR \fBudp\fR
+.TP
+\fB\fIR\fB = put_nd_ra_opts(\fID1\fB = \fIV1\fB, \fID2\fB = \fIV2\fB, \[char46]\[char46]\[char46], \fIDn\fB = \fIVn\fB);\fR
+\fBParameters\fR: The following IPv6 ND Router Advertisement option/value pairs as defined in RFC 4861\[char46]
+.RS
+.IP \(bu
+\fBaddr_mode\fR
+.IP
+Mandatory parameter which specifies the address mode flag to be set in the RA flag options field\[char46] The value of this option is a string and the following values can be defined - \(dqslaac\(dq, \(dqdhcpv6_stateful\(dq and \(dqdhcpv6_stateless\(dq\[char46]
+.IP \(bu
+\fBslla\fR
+.IP
+Mandatory parameter which specifies the link-layer address of the interface from which the Router Advertisement is sent\[char46]
+.IP \(bu
+\fBmtu\fR
+.IP
+Optional parameter which specifies the MTU\[char46]
+.IP \(bu
+\fBprefix\fR
+.IP
+Optional parameter which should be specified if the addr_mode is \(dqslaac\(dq or \(dqdhcpv6_stateless\(dq\[char46] The value should be an IPv6 prefix which will be used for stateless IPv6 address configuration\[char46] This option can be defined multiple times\[char46]
+.RE
+.IP
+\fBResult\fR: stored to a 1-bit subfield \fIR\fR\[char46]
+.IP
+Valid only in the ingress pipeline\[char46]
+.IP
+When this action is applied to an IPv6 Router solicitation request packet, it changes the packet into an IPv6 Router Advertisement reply and adds the options specified in the parameters, and stores 1 in \fIR\fR\[char46]
+.IP
+When this action is applied to a non-IPv6 Router solicitation packet or an invalid IPv6 request packet , it leaves the packet unchanged and stores 0 in \fIR\fR\[char46]
+.IP
+\fBExample:\fR \fB
+reg0[3] = put_nd_ra_opts(addr_mode = \(dqslaac\(dq,
+slla = 00:00:00:00:10:02, prefix = aef0::/64, mtu = 1450);
+\fR
+.TP
+\fBset_meter(\fIrate\fB);\fR
+.TQ .5in
+\fBset_meter(\fIrate\fB, \fIburst\fB);\fR
+\fBParameters\fR: rate limit int field \fIrate\fR in kbps, burst rate limits int field \fIburst\fR in kbps\[char46]
+.IP
+This action sets the rate limit for a flow\[char46]
+.IP
+\fBExample:\fR \fBset_meter(100, 1000);\fR
+.TP
+\fB\fIR\fB = check_pkt_larger(\fIL\fB)\fR
+\fBParameters\fR: packet length \fIL\fR to check for in bytes\[char46]
+.IP
+\fBResult\fR: stored to a 1-bit subfield \fIR\fR\[char46]
+.IP
+This is a logical equivalent of the OpenFlow \fBcheck_pkt_larger\fR action\[char46] If the packet is larger than the length specified in \fIL\fR, it stores 1 in the subfield \fIR\fR\[char46]
+.IP
+\fBExample: \fR\fBreg0[6] = check_pkt_larger(1000);\fR
+.RE
+.RS
+.TP
+\fBlog(\fIkey\fB=\fIvalue\fB, \fR\[char46]\[char46]\[char46]\fB);\fR
+Causes \fBovn\-controller\fR to log the packet on the chassis that processes it\[char46] Packet logging currently uses the same logging mechanism as other Open vSwitch and OVN messages, which means that whether and where log messages appear depends on the local logging configuration that can be configured with \fBovs\-appctl\fR, etc\[char46]
+.IP
+The \fBlog\fR action takes zero or more of the following key-value pair arguments that control what is logged:
+.RS
+.TP
+\fBname=\fR\fIstring\fR
+An optional name for the ACL\[char46] The \fIstring\fR is currently limited to 64 bytes\[char46]
+.TP
+\fBseverity=\fR\fIlevel\fR
+Indicates the severity of the event\[char46] The \fIlevel\fR is one of following (from more to less serious): \fBalert\fR, \fBwarning\fR, \fBnotice\fR, \fBinfo\fR, or \fBdebug\fR\[char46] If a severity is not provided, the default is \fBinfo\fR\[char46]
+.TP
+\fBverdict=\fR\fIvalue\fR
+The verdict for packets matching the flow\[char46] The value must be one of \fBallow\fR, \fBdeny\fR, or \fBreject\fR\[char46]
+.TP
+\fBmeter=\fR\fIstring\fR
+An optional rate-limiting meter to be applied to the logs\[char46] The \fIstring\fR should reference a \fBname\fR entry from the \fBMeter\fR table\[char46] The only meter \fBaction\fR that is appropriate is \fBdrop\fR\[char46]
+.RE
+.TP
+\fBfwd_group(liveness=\fIbool\fB, childports=\fIport\fB, \[char46]\[char46]\[char46]);\fR
+\fBParameters\fR: optional \fBliveness\fR, either \fBtrue\fR or \fBfalse\fR, defaulting to false; \fBchildports\fR, a comma-delimited list of strings denoting logical ports to load balance across\[char46]
+.IP
+Load balance traffic to one or more child ports in a logical switch\[char46] \fBovn\-controller\fR translates the \fBfwd_group\fR into an OpenFlow group with one bucket for each child port\[char46] If \fBliveness=true\fR is specified, it also integrates the bucket selection with BFD status on the tunnel interface corresponding to child port\[char46]
+.IP
+\fBExample:\fR \fBfwd_group(liveness=true, childports=\(dqp1\(dq,
+\(dqp2\(dq);\fR
+.RE
+.RS
+.TP
+\fBicmp4 { \fIaction\fB; \fR\[char46]\[char46]\[char46]\fB };\fR
+.TQ .5in
+\fBicmp4_error { \fIaction\fB; \fR\[char46]\[char46]\[char46]\fB };\fR
+Temporarily replaces the IPv4 packet being processed by an ICMPv4 packet and executes each nested \fIaction\fR on the ICMPv4 packet\[char46] Actions following these actions, if any, apply to the original, unmodified packet\[char46]
+.IP
+The ICMPv4 packet that these actions operates on is initialized based on the IPv4 packet being processed, as follows\[char46] These are default values that the nested actions will probably want to change\[char46] Ethernet and IPv4 fields not listed here are not changed:
+.RS
+.IP \(bu
+\fBip\[char46]proto = 1\fR (ICMPv4)
+.IP \(bu
+\fBip\[char46]frag = 0\fR (not a fragment)
+.IP \(bu
+\fBip\[char46]ttl = 255\fR
+.IP \(bu
+\fBicmp4\[char46]type = 3\fR (destination unreachable)
+.IP \(bu
+\fBicmp4\[char46]code = 1\fR (host unreachable)
+.RE
+.IP
+\fBicmp4_error\fR action is expected to be used to generate an ICMPv4 packet in response to an error in original IP packet\[char46] When this action generates the ICMPv4 packet, it also copies the original IP datagram following the ICMPv4 header as per RFC 1122: 3\[char46]2\[char46]2\[char46]
+.IP
+\fBPrerequisite:\fR \fBip4\fR
+.TP
+\fBicmp6 { \fIaction\fB; \fR\[char46]\[char46]\[char46]\fB };\fR
+.TQ .5in
+\fBicmp6_error { \fIaction\fB; \fR\[char46]\[char46]\[char46]\fB };\fR
+Temporarily replaces the IPv6 packet being processed by an ICMPv6 packet and executes each nested \fIaction\fR on the ICMPv6 packet\[char46] Actions following the \fIicmp6\fR action, if any, apply to the original, unmodified packet\[char46]
+.IP
+The ICMPv6 packet that this action operates on is initialized based on the IPv6 packet being processed, as follows\[char46] These are default values that the nested actions will probably want to change\[char46] Ethernet and IPv6 fields not listed here are not changed:
+.RS
+.IP \(bu
+\fBip\[char46]proto = 58\fR (ICMPv6)
+.IP \(bu
+\fBip\[char46]ttl = 255\fR
+.IP \(bu
+\fBicmp6\[char46]type = 1\fR (destination unreachable)
+.IP \(bu
+\fBicmp6\[char46]code = 1\fR (administratively prohibited)
+.RE
+.IP
+\fBicmp6_error\fR action is expected to be used to generate an ICMPv6 packet in response to an error in original IPv6 packet\[char46]
+.IP
+\fBPrerequisite:\fR \fBip6\fR
+.TP
+\fBtcp_reset;\fR
+This action transforms the current TCP packet according to the following pseudocode:
+.IP
+.nf
+\fB
+.br
+\fBif (tcp\[char46]ack) {
+.br
+\fB        tcp\[char46]seq = tcp\[char46]ack;
+.br
+\fB} else {
+.br
+\fB        tcp\[char46]ack = tcp\[char46]seq + length(tcp\[char46]payload);
+.br
+\fB        tcp\[char46]seq = 0;
+.br
+\fB}
+.br
+\fBtcp\[char46]flags = RST;
+.br
+\fB\fR
+.fi
+.IP
+Then, the action drops all TCP options and payload data, and updates the TCP checksum\[char46] IP ttl is set to 255\[char46]
+.IP
+\fBPrerequisite:\fR \fBtcp\fR
+.TP
+\fBreject { \fIaction\fB; \fR\[char46]\[char46]\[char46]\fB };\fR
+If the original packet is IPv4 or IPv6 TCP packet, it replaces it with IPv4 or IPv6 TCP RST packet and executes the inner actions\[char46] Otherwise it replaces it with an ICMPv4 or ICMPv6 packet and executes the inner actions\[char46]
+.IP
+The inner actions should not attempt to swap eth source with eth destination and IP source with IP destination as this action implicitly does that\[char46]
+.TP
+\fBtrigger_event;\fR
+This action is used to allow ovs-vswitchd to report CMS related events writing them in \fBController_Event\fR table\[char46] It is possible to associate a meter to a each event in order to not overload pinctrl thread under heavy load; each meter is identified though a defined naming convention\[char46] Supported events:
+.RS
+.IP \(bu
+\fIempty_lb_backends\fR\[char46] This event is raised if a received packet is destined for a load balancer VIP that has no configured backend destinations\[char46] For this event, the event info includes the load balancer VIP, the load balancer UUID, and the transport protocol\[char46] Associated meter: \fBevent\-elb\fR
+.RE
+.TP
+\fBigmp;\fR
+This action sends the packet to \fBovn\-controller\fR for multicast snooping\[char46]
+.IP
+\fBPrerequisite:\fR \fBigmp\fR
+.TP
+\fBbind_vport(\fIV\fB, \fIP\fB);\fR
+\fBParameters\fR: logical port string field \fIV\fR of type \fBvirtual\fR, logical port string field \fIP\fR\[char46]
+.IP
+Binds the virtual logical port \fIV\fR and sets the \fBchassis\fR column and \fBvirtual_parent\fR of the table \fBPort_Binding\fR\[char46] \fBvirtual_parent\fR is set to \fIP\fR\[char46]
+.TP
+\fBhandle_svc_check(\fIP\fB);\fR
+\fBParameters\fR: logical port string field \fIP\fR\[char46]
+.IP
+Handles the service monitor reply received from the VIF of the logical port \fIP\fR\[char46] \fBovn\-controller\fR periodically sends out the service monitor packets for the services configured in the \fBService_Monitor\fR table and this action updates the status of those services\[char46]
+.IP
+\fBExample:\fR \fBhandle_svc_check(inport);\fR
+.TP
+\fBhandle_dhcpv6_reply;\fR
+Handle DHCPv6 prefix delegation advertisements/replies from a IPv6 delegation server\[char46] \fBovn\-controller\fR will add an entry \fBipv6_ra_pd_list\fR in the \fBoptions\fR table for each prefix received from the delegation server
+.TP
+\fB\fIR\fB = select(\fIN1\fB[=\fIW1\fB], \fIN2\fB[=\fIW2\fB], \[char46]\[char46]\[char46]);\fR
+\fBParameters\fR: Integer \fIN1\fR, \fIN2\fR\[char46]\[char46]\[char46], with optional weight \fIW1\fR, \fIW2\fR, \[char46]\[char46]\[char46]
+.IP
+\fBResult\fR: stored to a logical field or subfield \fIR\fR\[char46]
+.IP
+Select from a list of integers \fIN1\fR, \fIN2\fR\[char46]\[char46]\[char46], each within the range 0 ~ 65535, and store the selected one in the field \fIR\fR\[char46] There must be 2 or more integers listed, each with an optional weight, which is an integer within the range 1 ~ 65535\[char46] If weight is not specified, it defaults to 100\[char46] The selection method is based on the 5-tuple hash of packet header\[char46]
+.IP
+Processing automatically moves on to the next table, as if \fBnext;\fR were specified\[char46] The \fBselect\fR action must be put as the last action of the logical flow when there are multiple actions (actions put after \fBselect\fR will not take effect)\[char46]
+.IP
+\fBExample:\fR \fBreg8[16\[char46]\[char46]31] = select(1=20, 2=30, 3=50);\fR
+.TP
+\fBhandle_dhcpv6_reply;\fR
+This action is used to parse DHCPv6 replies from IPv6 Delegation Router and managed IPv6 Prefix delegation state machine
+.TP
+\fB\fIR\fB = chk_lb_hairpin();\fR
+This action checks if the packet under consideration was destined to a load balancer VIP and it is hairpinned, i\[char46]e\[char46], after load balancing the destination IP matches the source IP\[char46] If it is so, then the 1-bit destination register \fIR\fR is set to 1\[char46]
+.TP
+\fB\fIR\fB = chk_lb_hairpin_reply();\fR
+This action checks if the packet under consideration is from one of the backend IP of a load balancer VIP and the destination IP is the load balancer VIP\[char46] If it is so, then the 1-bit destination register \fIR\fR is set to 1\[char46]
+.TP
+\fB\fIR\fB = ct_snat_to_vip;\fR
+This action sends the packet through the SNAT zone to change the source IP address of the packet to the load balancer VIP if the original destination IP was load balancer VIP and commits the connection\[char46] This action applies successfully only for the hairpinned traffic i\[char46]e if the action \fBchk_lb_hairpin\fR returned success\[char46] This action doesn\(cqt take any arguments and it determines the SNAT IP internally\[char46] The packet is not automatically sent to the next table\[char46] The caller has to execute the \fBnext;\fR action explicitly after this action to advance the packet to the next stage\[char46]
+.TP
+\fB\fIR\fB = check_in_port_sec();\fR
+This action checks if the packet under consideration passes the inport port security checks\[char46] If the packet fails the port security checks, then \fB1\fR is stored in the destination register \fIR\fR\[char46] Else 0 is stored\[char46] The port security values to check are retrieved from the the \fBinport\fR logical port\[char46]
+.IP
+This action should be used in the ingress logical switch pipeline\[char46]
+.IP
+\fBExample:\fR \fBreg8[0\[char46]\[char46]7] = check_in_port_sec();\fR
+.TP
+\fB\fIR\fB = check_out_port_sec();\fR
+This action checks if the packet under consideration passes the outport port security checks\[char46] If the packet fails the port security checks, then \fB1\fR is stored in the destination register \fIR\fR\[char46] Else 0 is stored\[char46] The port security values to check are retrieved from the the \fBoutport\fR logical port\[char46]
+.IP
+This action should be used in the egress logical switch pipeline\[char46]
+.IP
+\fBExample:\fR \fBreg8[0\[char46]\[char46]7] = check_out_port_sec();\fR
+.TP
+\fBcommit_ecmp_nh(\fIipv6\fB);\fR
+\fBParameters\fR: IPv4/IPv6 traffic\[char46]
+.IP
+This action translates to an openflow \(dqlearn\(dq action that inserts two new flows in tables 76 and 77\[char46]
+.RS
+.IP \(bu
+Match on the the 5-tuple and the expected next-hop mac address in table 76: \fBnw_src=ip0\fR, \fBnw_dst=ip1\fR, \fBip_proto\fR,\fBtp_src=l4_port0\fR, \fBtp_dst=l4_port1\fR,\fBdl_src=ethaddr\fR and set \fBreg9[5]\fR\[char46]
+.IP \(bu
+Match on the 5-tuple in table 77: \fBnw_src=ip1\fR, \fBnw_dst=ip0\fR, \fBip_proto\fR, \fBtp_src=l4_port1\fR, \fBtp_dst=l4_port0\fR and set \fBreg9[5]\fR to 1
+.RE
+.IP
+This action is applied if the packet arrives via ECMP route or if it is routed via an ECMP route
+.TP
+\fB\fIR\fB = check_ecmp_nh_mac();\fR
+This action checks if the packet under consideration matches any flow in table 76\[char46] If it is so, then the 1-bit destination register \fIR\fR is set to 1\[char46]
+.TP
+\fB\fIR\fB = check_ecmp_nh();\fR
+This action checks if the packet under consideration matches the any flow in table 77\[char46] If it is so, then the 1-bit destination register \fIR\fR is set to 1\[char46]
+.TP
+\fB
+commit_lb_aff(\fIvip\fB, \fIbackend\fB,
+\fIproto\fB, \fItimeout\fB);
+\fR
+\fBParameters\fR: load-balancer virtual ip:port \fIvip\fR, load-balancer backend ip:port \fIbackend\fR, load-balancer protocol \fIproto\fR, affinity timeout \fItimeout\fR\[char46]
+.IP
+This action translates to an openflow \(dqlearn\(dq action that inserts a new flow in table 78\[char46]
+.RS
+.IP \(bu
+Match on the 4-tuple in table 78: \fBnw_src=ip client\fR, \fBnw_dst=vip ip\fR, \fBip_proto\fR, \fBtp_dst=vip port\fR and set \fBreg9[6]\fR to 1, \fBreg4\fR and \fBreg8\fR to backend ip and port respectively\[char46] For IPv6 register \fBxxreg1\fR is used to store the backend ip\[char46]
+.RE
+.IP
+This action is applied for new connections received by a specific load-balacer with affinity timeout configured\[char46]
+.TP
+\fB\fIR\fB = chk_lb_aff();\fR
+This action checks if the packet under consideration matches any flow in table 78\[char46] If it is so, then the 1-bit destination register \fIR\fR is set to 1\[char46]
+.TP
+\fBsample(probability=\fIpackets\fB, \[char46]\[char46]\[char46])\fR
+This action causes the matched traffic to be sampled using IPFIX protocol\[char46] More information about how per-flow IPFIX sampling works in OVS can be found in \fBovs\-actions\fR(7) and \fBovs\-vswitchd\[char46]conf\[char46]db\fR(5)\[char46]
+.IP
+In order to reliably identify each sampled packet when it is received by the IPFIX collector, this action sets the content of the \fBObservationDomainID\fR and \fBObservationPointID\fR IPFIX fields (see argument description below)\[char46]
+.IP
+The following key-value arguments are supported:
+.RS
+.TP
+\fBprobability=\fR\fIpackets\fR
+The number of sampled packets out of 65535\[char46] It must be greater or equal to 1\[char46]
+.TP
+\fBcollector_set=\fR\fIid\fR
+The unsigned 32-bit integer identifier of the sample collector to send sampled packets to\[char46] It must match the value configured in the \fBFlow_Sample_Collector_Set\fR Table in OVS\[char46] Defaults to 0\[char46]
+.TP
+\fBobs_domain=\fR\fIid\fR
+An unsigned 8-bit integer that identifies the sampling application\[char46] It will be placed in the 8 most significant bits of the \fBObservationDomainID\fR field of IPFIX samples\[char46] The 24 less significant bits will be automatically filled in with the datapath key\[char46] Defaults to 0\[char46]
+.TP
+\fBobs_point=\fR\fIid\fR
+An unsigned 32-bit integer to be used as \fBObsservationPointID\fR or the string \fB@cookie\fR to indicate that the first 32 bits of the \fBLogical_Flow\fR\(cqs UUID shall be used instead\[char46]
+.RE
+.RE
+.IP "\fBtags\fR: map of string-string pairs"
+Key-value pairs that provide additional information to help ovn-controller processing the logical flow\[char46] Below are the tags used by ovn-controller\[char46]
+.RS
+.TP
+in_out_port
+In the logical flow\(cqs \(dqmatch\(dq column, if a logical port P is compared with \(dqinport\(dq and the logical flow is on a logical switch ingress pipeline, or if P is compared with \(dqoutport\(dq and the logical flow is on a logical switch egress pipeline, and the expression is combined with other expressions (if any) using the operator &&, then the port P should be added as the value in this tag\[char46] If there are multiple logical ports meeting this criteria, one of them can be added\[char46] ovn-controller uses this information to skip parsing flows that are not needed on the chassis\[char46] Failing to add the tag will affect efficiency, while adding wrong value will affect correctness\[char46]
+.RE
+.IP "\fBcontroller_meter\fR: optional string"
+The name of the meter in table \fBMeter\fR to be used for all packets that the logical flow might send to \fBovn\-controller\fR\[char46]
+.IP "\fBexternal_ids : stage-name\fR: optional string"
+Human-readable name for this flow\(cqs stage in the pipeline\[char46]
+.IP "\fBexternal_ids : stage-hint\fR: optional string, containing an uuid"
+UUID of a \fBOVN_Northbound\fR record that caused this logical flow to be created\[char46] Currently used only for attribute of logical flows to northbound \fBACL\fR records\[char46]
+.IP "\fBexternal_ids : source\fR: optional string"
+Source file and line number of the code that added this flow to the pipeline\[char46]
+.ST "Common Columns:"
+.PP
+The overall purpose of these columns is described under \fBCommon
+Columns\fR at the beginning of this document\[char46]
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+.bp
+.SH "Logical_DP_Group TABLE"
+.PP
+.PP
+.PP
+Each row in this table represents a group of logical datapaths referenced by the \fBlogical_dp_group\fR column in the \fBLogical_Flow\fR table\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBdatapaths\fR
+set of weak reference to \fBDatapath_Binding\fRs
+.SS "Details:
+.IP "\fBdatapaths\fR: set of weak reference to \fBDatapath_Binding\fRs"
+List of \fBDatapath_Binding\fR entries\[char46]
+.bp
+.SH "Multicast_Group TABLE"
+.PP
+.PP
+.PP
+The rows in this table define multicast groups of logical ports\[char46] Multicast groups allow a single packet transmitted over a tunnel to a hypervisor to be delivered to multiple VMs on that hypervisor, which uses bandwidth more efficiently\[char46]
+.PP
+.PP
+Each row in this table defines a logical multicast group numbered \fBtunnel_key\fR within \fBdatapath\fR, whose logical ports are listed in the \fBports\fR column\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBdatapath\fR
+\fBDatapath_Binding\fR
+.TQ 3.00in
+\fBtunnel_key\fR
+integer, in range 32,768 to 65,535
+.TQ 3.00in
+\fBname\fR
+string
+.TQ 3.00in
+\fBports\fR
+set of weak reference to \fBPort_Binding\fRs
+.SS "Details:
+.IP "\fBdatapath\fR: \fBDatapath_Binding\fR"
+The logical datapath in which the multicast group resides\[char46]
+.IP "\fBtunnel_key\fR: integer, in range 32,768 to 65,535"
+The value used to designate this logical egress port in tunnel encapsulations\[char46] An index forces the key to be unique within the \fBdatapath\fR\[char46] The unusual range ensures that multicast group IDs do not overlap with logical port IDs\[char46]
+.IP "\fBname\fR: string"
+The logical multicast group\(cqs name\[char46] An index forces the name to be unique within the \fBdatapath\fR\[char46] Logical flows in the ingress pipeline may output to the group just as for individual logical ports, by assigning the group\(cqs name to \fBoutport\fR and executing an \fBoutput\fR action\[char46]
+.IP
+Multicast group names and logical port names share a single namespace and thus should not overlap (but the database schema cannot enforce this)\[char46] To try to avoid conflicts, \fBovn\-northd\fR uses names that begin with \fB_MC_\fR\[char46]
+.IP "\fBports\fR: set of weak reference to \fBPort_Binding\fRs"
+The logical ports included in the multicast group\[char46] All of these ports must be in the \fBdatapath\fR logical datapath (but the database schema cannot enforce this)\[char46]
+.bp
+.SH "Mirror TABLE"
+.PP
+.PP
+.PP
+Each row in this table represents a mirror that can be used for port mirroring\[char46] These mirrors are referenced by the \fBmirror_rules\fR column in the \fBPort_Binding\fR table\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBname\fR
+string (must be unique within table)
+.TQ 3.00in
+\fBfilter\fR
+string, one of \fBboth\fR, \fBfrom\-lport\fR, or \fBto\-lport\fR
+.TQ 3.00in
+\fBsink\fR
+string
+.TQ 3.00in
+\fBtype\fR
+string, one of \fBerspan\fR, \fBgre\fR, or \fBlocal\fR
+.TQ 3.00in
+\fBindex\fR
+integer
+.TQ 3.00in
+\fBexternal_ids\fR
+map of string-string pairs
+.SS "Details:
+.IP "\fBname\fR: string (must be unique within table)"
+Represents the name of the mirror\[char46]
+.IP "\fBfilter\fR: string, one of \fBboth\fR, \fBfrom\-lport\fR, or \fBto\-lport\fR"
+The value of this field represents selection criteria of the mirror\[char46] \fBto\-lport\fR mirrors the packets coming into logical port\[char46] \fBfrom\-lport\fR mirrors the packets going out of logical port\[char46] \fBboth\fR mirrors for both directions\[char46]
+.IP "\fBsink\fR: string"
+The value of this field represents the destination/sink of the mirror\[char46] If the \fItype\fR is \fBgre\fR or \fBerspan\fR, the value indicates the tunnel remote IP (either IPv4 or IPv6)\[char46] For a \fItype\fR of \fBlocal\fR, this field defines a local interface on the OVS integration bridge to be used as the mirror destination\[char46] The interface must possess external-ids:mirror-id that matches this string\[char46]
+.IP "\fBtype\fR: string, one of \fBerspan\fR, \fBgre\fR, or \fBlocal\fR"
+The value of this field specifies the mirror type - \fBgre\fR, \fBerspan\fR or \fBlocal\fR\[char46]
+.IP "\fBindex\fR: integer"
+The value of this field represents the tunnel ID\[char46] If the configured tunnel type is \fBgre\fR, this field represents the \fBGRE\fR key value and if the configured tunnel type is \fBerspan\fR it represents the \fBerspan_idx\fR value\[char46] It is ignored if the type is \fBlocal\fR\[char46]
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+See \fBExternal IDs\fR at the beginning of this document\[char46]
+.bp
+.SH "Meter TABLE"
+.PP
+.PP
+.PP
+Each row in this table represents a meter that can be used for QoS or rate-limiting\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBname\fR
+string (must be unique within table)
+.TQ 3.00in
+\fBunit\fR
+string, either \fBkbps\fR or \fBpktps\fR
+.TQ 3.00in
+\fBbands\fR
+set of 1 or more \fBMeter_Band\fRs
+.SS "Details:
+.IP "\fBname\fR: string (must be unique within table)"
+A name for this meter\[char46]
+.IP
+Names that begin with \(dq__\(dq (two underscores) are reserved for OVN internal use and should not be added manually\[char46]
+.IP "\fBunit\fR: string, either \fBkbps\fR or \fBpktps\fR"
+The unit for \fBrate\fR and \fBburst_rate\fR parameters in the \fBbands\fR entry\[char46] \fBkbps\fR specifies kilobits per second, and \fBpktps\fR specifies packets per second\[char46]
+.IP "\fBbands\fR: set of 1 or more \fBMeter_Band\fRs"
+The bands associated with this meter\[char46] Each band specifies a rate above which the band is to take the action \fBaction\fR\[char46] If multiple bands\(cq rates are exceeded, then the band with the highest rate among the exceeded bands is selected\[char46]
+.bp
+.SH "Meter_Band TABLE"
+.PP
+.PP
+.PP
+Each row in this table represents a meter band which specifies the rate above which the configured action should be applied\[char46] These bands are referenced by the \fBbands\fR column in the \fBMeter\fR table\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBaction\fR
+string, must be \fBdrop\fR
+.TQ 3.00in
+\fBrate\fR
+integer, in range 1 to 4,294,967,295
+.TQ 3.00in
+\fBburst_size\fR
+integer, in range 0 to 4,294,967,295
+.SS "Details:
+.IP "\fBaction\fR: string, must be \fBdrop\fR"
+The action to execute when this band matches\[char46] The only supported action is \fBdrop\fR\[char46]
+.IP "\fBrate\fR: integer, in range 1 to 4,294,967,295"
+The rate limit for this band, in kilobits per second or bits per second, depending on whether the parent \fBMeter\fR entry\(cqs \fBunit\fR column specified \fBkbps\fR or \fBpktps\fR\[char46]
+.IP "\fBburst_size\fR: integer, in range 0 to 4,294,967,295"
+The maximum burst allowed for the band in kilobits or packets, depending on whether \fBkbps\fR or \fBpktps\fR was selected in the parent \fBMeter\fR entry\(cqs \fBunit\fR column\[char46] If the size is zero, the switch is free to select some reasonable value depending on its configuration\[char46]
+.bp
+.SH "Datapath_Binding TABLE"
+.PP
+.PP
+.PP
+Each row in this table represents a logical datapath, which implements a logical pipeline among the ports in the \fBPort_Binding\fR table associated with it\[char46] In practice, the pipeline in a given logical datapath implements either a logical switch or a logical router\[char46]
+.PP
+.PP
+The main purpose of a row in this table is provide a physical binding for a logical datapath\[char46] A logical datapath does not have a physical location, so its physical binding information is limited: just \fBtunnel_key\fR\[char46] The rest of the data in this table does not affect packet forwarding\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBtunnel_key\fR
+integer, in range 1 to 16,777,215 (must be unique within table)
+.TQ 3.00in
+\fBload_balancers\fR
+set of uuids
+.TQ .25in
+\fIOVN_Northbound Relationship:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids : logical-switch\fR
+optional string, containing an uuid
+.TQ 2.75in
+\fBexternal_ids : logical-router\fR
+optional string, containing an uuid
+.TQ 2.75in
+\fBexternal_ids : interconn-ts\fR
+optional string
+.TQ .25in
+\fINaming:\fR
+.RS .25in
+.TQ 2.50in
+\fBexternal_ids : name\fR
+optional string
+.TQ 2.50in
+\fBexternal_ids : name2\fR
+optional string
+.RE
+.RE
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.RE
+.SS "Details:
+.IP "\fBtunnel_key\fR: integer, in range 1 to 16,777,215 (must be unique within table)"
+The tunnel key value to which the logical datapath is bound\[char46] The \fBTunnel Encapsulation\fR section in \fBovn\-architecture\fR(7) describes how tunnel keys are constructed for each supported encapsulation\[char46]
+.IP "\fBload_balancers\fR: set of uuids"
+Not used anymore; kept for backwards compatibility of the schema\[char46]
+.ST "OVN_Northbound Relationship:"
+.PP
+.PP
+.PP
+Each row in \fBDatapath_Binding\fR is associated with some logical datapath\[char46] \fBovn\-northd\fR uses these keys to track the association of a logical datapath with concepts in the \fBOVN_Northbound\fR database\[char46]
+.IP "\fBexternal_ids : logical-switch\fR: optional string, containing an uuid"
+For a logical datapath that represents a logical switch, \fBovn\-northd\fR stores in this key the UUID of the corresponding \fBLogical_Switch\fR row in the \fBOVN_Northbound\fR database\[char46]
+.IP "\fBexternal_ids : logical-router\fR: optional string, containing an uuid"
+For a logical datapath that represents a logical router, \fBovn\-northd\fR stores in this key the UUID of the corresponding \fBLogical_Router\fR row in the \fBOVN_Northbound\fR database\[char46]
+.IP "\fBexternal_ids : interconn-ts\fR: optional string"
+For a logical datapath that represents a logical switch that represents a transit switch for interconnection, \fBovn\-northd\fR stores in this key the value of the same \fBinterconn\-ts\fR key of the \fBexternal_ids\fR column of the corresponding \fBLogical_Switch\fR row in the \fBOVN_Northbound\fR database\[char46]
+.ST "Naming:"
+.PP
+.PP
+.PP
+\fBovn\-northd\fR copies these from the name fields in the \fBOVN_Northbound\fR database, either from \fBname\fR and \fBexternal_ids:neutron:router_name\fR in the \fBLogical_Router\fR table or from \fBname\fR and \fBexternal_ids:neutron:network_name\fR in the \fBLogical_Switch\fR table\[char46]
+.IP "\fBexternal_ids : name\fR: optional string"
+A name for the logical datapath\[char46]
+.IP "\fBexternal_ids : name2\fR: optional string"
+Another name for the logical datapath\[char46]
+.ST "Common Columns:"
+.PP
+The overall purpose of these columns is described under \fBCommon
+Columns\fR at the beginning of this document\[char46]
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+.bp
+.SH "Port_Binding TABLE"
+.PP
+.PP
+.PP
+Each row in this table binds a logical port to a realization\[char46] For most logical ports, this means binding to some physical location, for example by binding a logical port to a VIF that belongs to a VM running on a particular hypervisor\[char46] Other logical ports, such as logical patch ports, can be realized without a specific physical location, but their bindings are still expressed through rows in this table\[char46]
+.PP
+.PP
+For every \fBLogical_Switch_Port\fR record in \fBOVN_Northbound\fR database, \fBovn\-northd\fR creates a record in this table\[char46] \fBovn\-northd\fR populates and maintains every column except the \fBchassis\fR and \fBvirtual_parent\fR columns, which it leaves empty in new records\[char46]
+.PP
+.PP
+\fBovn\-controller\fR/\fBovn\-controller\-vtep\fR populates the \fBchassis\fR column for the records that identify the logical ports that are located on its hypervisor/gateway, which \fBovn\-controller\fR/\fBovn\-controller\-vtep\fR in turn finds out by monitoring the local hypervisor\(cqs Open_vSwitch database, which identifies logical ports via the conventions described in \fBIntegrationGuide\[char46]rst\fR\[char46] (The exceptions are for \fBPort_Binding\fR records with \fBtype\fR of \fBl3gateway\fR, whose locations are identified by \fBovn\-northd\fR via the \fBoptions:l3gateway\-chassis\fR column in this table\[char46] \fBovn\-controller\fR is still responsible to populate the \fBchassis\fR column\[char46])
+.PP
+.PP
+\fBovn\-controller\fR also populates the \fBvirtual_parent\fR column of records whose \fBtype\fR is \fBvirtual\fR\[char46]
+.PP
+.PP
+When a chassis shuts down gracefully, it should clean up the \fBchassis\fR column that it previously had populated\[char46] (This is not critical because resources hosted on the chassis are equally unreachable regardless of whether their rows are present\[char46]) To handle the case where a VM is shut down abruptly on one chassis, then brought up again on a different one, \fBovn\-controller\fR/\fBovn\-controller\-vtep\fR must overwrite the \fBchassis\fR column with new information\[char46]
+.SS "Summary:
+.TQ .25in
+\fICore Features:\fR
+.RS .25in
+.TQ 2.75in
+\fBdatapath\fR
+\fBDatapath_Binding\fR
+.TQ 2.75in
+\fBlogical_port\fR
+string (must be unique within table)
+.TQ 2.75in
+\fBencap\fR
+optional weak reference to \fBEncap\fR
+.TQ 2.75in
+\fBadditional_encap\fR
+set of weak reference to \fBEncap\fRs
+.TQ 2.75in
+\fBchassis\fR
+optional weak reference to \fBChassis\fR
+.TQ 2.75in
+\fBadditional_chassis\fR
+set of weak reference to \fBChassis\fR
+.TQ 2.75in
+\fBgateway_chassis\fR
+set of \fBGateway_Chassis\fRes
+.TQ 2.75in
+\fBha_chassis_group\fR
+optional \fBHA_Chassis_Group\fR
+.TQ 2.75in
+\fBup\fR
+optional boolean
+.TQ 2.75in
+\fBtunnel_key\fR
+integer, in range 1 to 32,767
+.TQ 2.75in
+\fBmac\fR
+set of strings
+.TQ 2.75in
+\fBport_security\fR
+set of strings
+.TQ 2.75in
+\fBtype\fR
+string
+.TQ 2.75in
+\fBrequested_chassis\fR
+optional weak reference to \fBChassis\fR
+.TQ 2.75in
+\fBrequested_additional_chassis\fR
+set of weak reference to \fBChassis\fR
+.RE
+.TQ 3.00in
+\fBmirror_rules\fR
+set of weak reference to \fBMirror\fRs
+.TQ .25in
+\fIPatch Options:\fR
+.RS .25in
+.TQ 2.75in
+\fBoptions : peer\fR
+optional string
+.TQ 2.75in
+\fBnat_addresses\fR
+set of strings
+.RE
+.TQ .25in
+\fIL3 Gateway Options:\fR
+.RS .25in
+.TQ 2.75in
+\fBoptions : peer\fR
+optional string
+.TQ 2.75in
+\fBoptions : l3gateway-chassis\fR
+optional string
+.TQ 2.75in
+\fBnat_addresses\fR
+set of strings
+.RE
+.TQ .25in
+\fILocalnet Options:\fR
+.RS .25in
+.TQ 2.75in
+\fBoptions : network_name\fR
+optional string
+.TQ 2.75in
+\fBtag\fR
+optional integer, in range 1 to 4,095
+.RE
+.TQ .25in
+\fIL2 Gateway Options:\fR
+.RS .25in
+.TQ 2.75in
+\fBoptions : network_name\fR
+optional string
+.TQ 2.75in
+\fBoptions : l2gateway-chassis\fR
+optional string
+.TQ 2.75in
+\fBtag\fR
+optional integer, in range 1 to 4,095
+.RE
+.TQ .25in
+\fIVTEP Options:\fR
+.RS .25in
+.TQ 2.75in
+\fBoptions : vtep-physical-switch\fR
+optional string
+.TQ 2.75in
+\fBoptions : vtep-logical-switch\fR
+optional string
+.RE
+.TQ .25in
+\fIVMI (or VIF) Options:\fR
+.RS .25in
+.TQ 2.75in
+\fBoptions : requested-chassis\fR
+optional string
+.TQ 2.75in
+\fBoptions : activation-strategy\fR
+optional string
+.TQ 2.75in
+\fBoptions : additional-chassis-activated\fR
+optional string
+.TQ 2.75in
+\fBoptions : iface-id-ver\fR
+optional string
+.TQ 2.75in
+\fBoptions : qos_min_rate\fR
+optional string
+.TQ 2.75in
+\fBoptions : qos_max_rate\fR
+optional string
+.TQ 2.75in
+\fBoptions : qos_burst\fR
+optional string
+.TQ 2.75in
+\fBoptions : qos_physical_network\fR
+optional string
+.TQ 2.75in
+\fBoptions : qdisc_queue_id\fR
+optional string, containing an integer, in range 1 to 61,440
+.RE
+.TQ .25in
+\fIDistributed Gateway Port Options:\fR
+.RS .25in
+.TQ 2.75in
+\fBoptions : chassis-redirect-port\fR
+optional string
+.RE
+.TQ .25in
+\fIChassis Redirect Options:\fR
+.RS .25in
+.TQ 2.75in
+\fBoptions : distributed-port\fR
+optional string
+.TQ 2.75in
+\fBoptions : redirect-type\fR
+optional string
+.TQ 2.75in
+\fBoptions : always-redirect\fR
+optional string
+.RE
+.TQ .25in
+\fINested Containers:\fR
+.RS .25in
+.TQ 2.75in
+\fBparent_port\fR
+optional string
+.TQ 2.75in
+\fBtag\fR
+optional integer, in range 1 to 4,095
+.RE
+.TQ .25in
+\fIVirtual ports:\fR
+.RS .25in
+.TQ 2.75in
+\fBvirtual_parent\fR
+optional string
+.RE
+.TQ .25in
+\fINaming:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids : name\fR
+optional string
+.RE
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.RE
+.SS "Details:
+.ST "Core Features:"
+.PP
+.IP "\fBdatapath\fR: \fBDatapath_Binding\fR"
+The logical datapath to which the logical port belongs\[char46]
+.IP "\fBlogical_port\fR: string (must be unique within table)"
+A logical port\[char46] For a logical switch port, this is taken from \fBname\fR in the OVN_Northbound database\(cqs \fBLogical_Switch_Port\fR table\[char46] For a logical router port, this is taken from \fBname\fR in the OVN_Northbound database\(cqs \fBLogical_Router_port\fR table\[char46] (This means that logical switch ports and router port names must not share names in an OVN deployment\[char46]) OVN does not prescribe a particular format for the logical port ID\[char46]
+.IP "\fBencap\fR: optional weak reference to \fBEncap\fR"
+Points to preferred encapsulation configuration to transmit logical dataplane packets to this chassis\[char46] The entry is reference to a \fBEncap\fR record\[char46]
+.IP "\fBadditional_encap\fR: set of weak reference to \fBEncap\fRs"
+Points to preferred encapsulation configuration to transmit logical dataplane packets to this additional chassis\[char46] The entry is reference to a \fBEncap\fR record\[char46] See also \fBadditional_chassis\fR\[char46]
+.IP "\fBchassis\fR: optional weak reference to \fBChassis\fR"
+The meaning of this column depends on the value of the \fBtype\fR column\[char46] This is the meaning for each \fBtype\fR
+.RS
+.TP
+(empty string)
+The physical location of the logical port\[char46] To successfully identify a chassis, this column must be a \fBChassis\fR record\[char46] This is populated by \fBovn\-controller\fR\[char46]
+.TP
+vtep
+The physical location of the hardware_vtep gateway\[char46] To successfully identify a chassis, this column must be a \fBChassis\fR record\[char46] This is populated by \fBovn\-controller\-vtep\fR\[char46]
+.TP
+localnet
+Always empty\[char46] A localnet port is realized on every chassis that has connectivity to the corresponding physical network\[char46]
+.TP
+localport
+Always empty\[char46] A localport port is present on every chassis\[char46]
+.TP
+l3gateway
+The physical location of the L3 gateway\[char46] To successfully identify a chassis, this column must be a \fBChassis\fR record\[char46] This is populated by \fBovn\-controller\fR based on the value of the \fBoptions:l3gateway\-chassis\fR column in this table\[char46]
+.TP
+l2gateway
+The physical location of this L2 gateway\[char46] To successfully identify a chassis, this column must be a \fBChassis\fR record\[char46] This is populated by \fBovn\-controller\fR based on the value of the \fBoptions:l2gateway\-chassis\fR column in this table\[char46]
+.RE
+.IP "\fBadditional_chassis\fR: set of weak reference to \fBChassis\fR"
+The meaning of this column is the same as for the \fBchassis\fR\[char46] The column is used to track an additional physical location of the logical port\[char46] Used with regular (empty \fBtype\fR) port bindings\[char46]
+.IP "\fBgateway_chassis\fR: set of \fBGateway_Chassis\fRes"
+A list of \fBGateway_Chassis\fR\[char46]
+.IP
+This should only be populated for ports with \fBtype\fR set to \fBchassisredirect\fR\[char46] This column defines the list of chassis used as gateways where traffic will be redirected through\[char46]
+.IP "\fBha_chassis_group\fR: optional \fBHA_Chassis_Group\fR"
+This should only be populated for ports with \fBtype\fR set to \fBchassisredirect\fR\[char46] This column defines the HA chassis group with a list of HA chassis used as gateways where traffic will be redirected through\[char46]
+.IP "\fBup\fR: optional boolean"
+This is set to \fBtrue\fR whenever all OVS flows required by this Port_Binding have been installed\[char46] This is populated by \fBovn\-controller\fR\[char46]
+.IP "\fBtunnel_key\fR: integer, in range 1 to 32,767"
+A number that represents the logical port in the key (e\[char46]g\[char46] STT key or Geneve TLV) field carried within tunnel protocol packets\[char46]
+.IP
+The tunnel ID must be unique within the scope of a logical datapath\[char46]
+.IP "\fBmac\fR: set of strings"
+This column is a misnomer as it may contain MAC addresses and IP addresses\[char46] It is copied from the \fBaddresses\fR column in the \fBLogical_Switch_Port\fR table in the Northbound database\[char46] It follows the same format as that column\[char46]
+.IP "\fBport_security\fR: set of strings"
+This column controls the addresses from which the host attached to the logical port (``the host\(cq\(cq) is allowed to send packets and to which it is allowed to receive packets\[char46] If this column is empty, all addresses are permitted\[char46]
+.IP
+It is copied from the \fBport_security\fR column in the \fBLogical_Switch_Port\fR table in the Northbound database\[char46] It follows the same format as that column\[char46]
+.IP "\fBtype\fR: string"
+A type for this logical port\[char46] Logical ports can be used to model other types of connectivity into an OVN logical switch\[char46] The following types are defined:
+.RS
+.TP
+(empty string)
+VM (or VIF) interface\[char46]
+.TP
+\fBpatch\fR
+One of a pair of logical ports that act as if connected by a patch cable\[char46] Useful for connecting two logical datapaths, e\[char46]g\[char46] to connect a logical router to a logical switch or to another logical router\[char46]
+.TP
+\fBl3gateway\fR
+One of a pair of logical ports that act as if connected by a patch cable across multiple chassis\[char46] Useful for connecting a logical switch with a Gateway router (which is only resident on a particular chassis)\[char46]
+.TP
+\fBlocalnet\fR
+A connection to a locally accessible network from \fBovn\-controller\fR instances that have a corresponding bridge mapping\[char46] A logical switch can have multiple \fBlocalnet\fR ports attached\[char46] This type is used to model direct connectivity to existing networks\[char46] In this case, each chassis should have a mapping for one of the physical networks only\[char46] Note: nothing said above implies that a chassis cannot be plugged to multiple physical networks as long as they belong to different switches\[char46]
+.TP
+\fBlocalport\fR
+A connection to a local VIF\[char46] Traffic that arrives on a \fBlocalport\fR is never forwarded over a tunnel to another chassis\[char46] These ports are present on every chassis and have the same address in all of them\[char46] This is used to model connectivity to local services that run on every hypervisor\[char46]
+.TP
+\fBl2gateway\fR
+An L2 connection to a physical network\[char46] The chassis this \fBPort_Binding\fR is bound to will serve as an L2 gateway to the network named by \fBoptions\fR:\fBnetwork_name\fR\[char46]
+.TP
+\fBvtep\fR
+A port to a logical switch on a VTEP gateway chassis\[char46] In order to get this port correctly recognized by the OVN controller, the \fBoptions\fR:\fBvtep\-physical\-switch\fR and \fBoptions\fR:\fBvtep\-logical\-switch\fR must also be defined\[char46]
+.TP
+\fBchassisredirect\fR
+A logical port that represents a particular instance, bound to a specific chassis, of an otherwise distributed parent port (e\[char46]g\[char46] of type \fBpatch\fR)\[char46] A \fBchassisredirect\fR port should never be used as an \fBinport\fR\[char46] When an ingress pipeline sets the \fBoutport\fR, it may set the value to a logical port of type \fBchassisredirect\fR\[char46] This will cause the packet to be directed to a specific chassis to carry out the egress pipeline\[char46] At the beginning of the egress pipeline, the \fBoutport\fR will be reset to the value of the distributed port\[char46]
+.TP
+\fBvirtual\fR
+Represents a logical port with an \fBvirtual ip\fR\[char46] This \fBvirtual ip\fR can be configured on a logical port (which is referred as virtual parent)\[char46]
+.RE
+.IP "\fBrequested_chassis\fR: optional weak reference to \fBChassis\fR"
+This column exists so that the ovn-controller can effectively monitor all \fBPort_Binding\fR records destined for it, and is a supplement to the \fBoptions:requested-chassis\fR option\[char46] The option is still required so that the ovn-controller can check the CMS intent when the chassis pointed to does not currently exist, which for example occurs when the ovn-controller is stopped without passing the \-restart argument\[char46] This column must be a \fBChassis\fR record\[char46] This is populated by \fBovn\-northd\fR when the \fBoptions:requested-chassis\fR is defined and contains a string matching the name or hostname of an existing chassis\[char46] See also \fBrequested_additional_chassis\fR\[char46]
+.IP "\fBrequested_additional_chassis\fR: set of weak reference to \fBChassis\fR"
+This column exists so that the ovn-controller can effectively monitor all \fBPort_Binding\fR records destined for it, and is a supplement to the \fBoptions:requested-chassis\fR option when multiple chassis are listed\[char46] This column must be a list of \fBChassis\fR records\[char46] This is populated by \fBovn\-northd\fR when the \fBoptions:requested-chassis\fR is defined as a list of chassis names or hostnames\[char46] See also \fBrequested_chassis\fR\[char46]
+.IP "\fBmirror_rules\fR: set of weak reference to \fBMirror\fRs"
+Mirror rules that apply to the port binding\[char46] Please see the \fBMirror\fR table\[char46]
+.ST "Patch Options:"
+.PP
+.PP
+.PP
+These options apply to logical ports with \fBtype\fR of \fBpatch\fR\[char46]
+.IP "\fBoptions : peer\fR: optional string"
+The \fBlogical_port\fR in the \fBPort_Binding\fR record for the other side of the patch\[char46] The named \fBlogical_port\fR must specify this \fBlogical_port\fR in its own \fBpeer\fR option\[char46] That is, the two patch logical ports must have reversed \fBlogical_port\fR and \fBpeer\fR values\[char46]
+.IP "\fBnat_addresses\fR: set of strings"
+MAC address followed by a list of SNAT and DNAT external IP addresses, followed by \fBis_chassis_resident(\(dq\fIlport\fB\(dq)\fR, where \fIlport\fR is the name of a logical port on the same chassis where the corresponding NAT rules are applied\[char46] This is used to send gratuitous ARPs for SNAT and DNAT external IP addresses via \fBlocalnet\fR, from the chassis where \fIlport\fR resides\[char46] Example: \fB80:fa:5b:06:72:b7 158\[char46]36\[char46]44\[char46]22
+158\[char46]36\[char46]44\[char46]24 is_chassis_resident(\(dqfoo1\(dq)\fR\[char46] This would result in generation of gratuitous ARPs for IP addresses 158\[char46]36\[char46]44\[char46]22 and 158\[char46]36\[char46]44\[char46]24 with a MAC address of 80:fa:5b:06:72:b7 from the chassis where the logical port \(dqfoo1\(dq resides\[char46]
+.ST "L3 Gateway Options:"
+.PP
+.PP
+.PP
+These options apply to logical ports with \fBtype\fR of \fBl3gateway\fR\[char46]
+.IP "\fBoptions : peer\fR: optional string"
+The \fBlogical_port\fR in the \fBPort_Binding\fR record for the other side of the \(cql3gateway\(cq port\[char46] The named \fBlogical_port\fR must specify this \fBlogical_port\fR in its own \fBpeer\fR option\[char46] That is, the two \(cql3gateway\(cq logical ports must have reversed \fBlogical_port\fR and \fBpeer\fR values\[char46]
+.IP "\fBoptions : l3gateway-chassis\fR: optional string"
+The \fBchassis\fR in which the port resides\[char46]
+.IP "\fBnat_addresses\fR: set of strings"
+MAC address of the \fBl3gateway\fR port followed by a list of SNAT and DNAT external IP addresses\[char46] This is used to send gratuitous ARPs for SNAT and DNAT external IP addresses via \fBlocalnet\fR\[char46] Example: \fB80:fa:5b:06:72:b7 158\[char46]36\[char46]44\[char46]22 158\[char46]36\[char46]44\[char46]24\fR\[char46] This would result in generation of gratuitous ARPs for IP addresses 158\[char46]36\[char46]44\[char46]22 and 158\[char46]36\[char46]44\[char46]24 with a MAC address of 80:fa:5b:06:72:b7\[char46] This is used in OVS version 2\[char46]8 and later versions\[char46]
+.ST "Localnet Options:"
+.PP
+.PP
+.PP
+These options apply to logical ports with \fBtype\fR of \fBlocalnet\fR\[char46]
+.IP "\fBoptions : network_name\fR: optional string"
+Required\[char46] \fBovn\-controller\fR uses the configuration entry \fBovn\-bridge\-mappings\fR to determine how to connect to this network\[char46] \fBovn\-bridge\-mappings\fR is a list of network names mapped to a local OVS bridge that provides access to that network\[char46] An example of configuring \fBovn\-bridge\-mappings\fR would be: .IP
+.nf
+\fB$ ovs\-vsctl set open \[char46] external\-ids:ovn\-bridge\-mappings=physnet1:br\-eth0,physnet2:br\-eth1\fR
+.fi
+.IP
+When a logical switch has a \fBlocalnet\fR port attached, every chassis that may have a local vif attached to that logical switch must have a bridge mapping configured to reach that \fBlocalnet\fR\[char46] Traffic that arrives on a \fBlocalnet\fR port is never forwarded over a tunnel to another chassis\[char46] If there are multiple \fBlocalnet\fR ports in a logical switch, each chassis should only have a single bridge mapping for one of the physical networks\[char46] Note: In case of multiple \fBlocalnet\fR ports, to provide interconnectivity between all VIFs located on different chassis with different fabric connectivity, the fabric should implement some form of routing between the segments\[char46]
+.IP "\fBtag\fR: optional integer, in range 1 to 4,095"
+If set, indicates that the port represents a connection to a specific VLAN on a locally accessible network\[char46] The VLAN ID is used to match incoming traffic and is also added to outgoing traffic\[char46]
+.ST "L2 Gateway Options:"
+.PP
+.PP
+.PP
+These options apply to logical ports with \fBtype\fR of \fBl2gateway\fR\[char46]
+.IP "\fBoptions : network_name\fR: optional string"
+Required\[char46] \fBovn\-controller\fR uses the configuration entry \fBovn\-bridge\-mappings\fR to determine how to connect to this network\[char46] \fBovn\-bridge\-mappings\fR is a list of network names mapped to a local OVS bridge that provides access to that network\[char46] An example of configuring \fBovn\-bridge\-mappings\fR would be: .IP
+.nf
+\fB$ ovs\-vsctl set open \[char46] external\-ids:ovn\-bridge\-mappings=physnet1:br\-eth0,physnet2:br\-eth1\fR
+.fi
+.IP
+When a logical switch has a \fBl2gateway\fR port attached, the chassis that the \fBl2gateway\fR port is bound to must have a bridge mapping configured to reach the network identified by \fBnetwork_name\fR\[char46]
+.IP "\fBoptions : l2gateway-chassis\fR: optional string"
+Required\[char46] The \fBchassis\fR in which the port resides\[char46]
+.IP "\fBtag\fR: optional integer, in range 1 to 4,095"
+If set, indicates that the gateway is connected to a specific VLAN on the physical network\[char46] The VLAN ID is used to match incoming traffic and is also added to outgoing traffic\[char46]
+.ST "VTEP Options:"
+.PP
+.PP
+.PP
+These options apply to logical ports with \fBtype\fR of \fBvtep\fR\[char46]
+.IP "\fBoptions : vtep-physical-switch\fR: optional string"
+Required\[char46] The name of the VTEP gateway\[char46]
+.IP "\fBoptions : vtep-logical-switch\fR: optional string"
+Required\[char46] A logical switch name connected by the VTEP gateway\[char46] Must be set when \fBtype\fR is \fBvtep\fR\[char46]
+.ST "VMI (or VIF) Options:"
+.PP
+.PP
+.PP
+These options apply to logical ports with \fBtype\fR having (empty string)
+.IP "\fBoptions : requested-chassis\fR: optional string"
+If set, identifies a specific chassis (by name or hostname) that is allowed to bind this port\[char46] Using this option will prevent thrashing between two chassis trying to bind the same port during a live migration\[char46] It can also prevent similar thrashing due to a mis-configuration, if a port is accidentally created on more than one chassis\[char46]
+.IP
+If set to a comma separated list, the first entry identifies the main chassis and the rest are one or more additional chassis that are allowed to bind the same port\[char46]
+.IP
+When multiple chassis are set for the port, and the logical switch is connected to an external network through a \fBlocalnet\fR port, tunneling is enforced for the port to guarantee delivery of packets directed to the port to all its locations\[char46] This has MTU implications because the network used for tunneling must have MTU larger than \fBlocalnet\fR for stable connectivity\[char46]
+.IP "\fBoptions : activation-strategy\fR: optional string"
+If used with multiple chassis set in \fBrequested-chassis\fR, specifies an activation strategy for all additional chassis\[char46] By default, no activation strategy is used, meaning additional port locations are immediately available for use\[char46] When set to \(dqrarp\(dq, the port is blocked for ingress and egress communication until a RARP packet is sent from a new location\[char46] The \(dqrarp\(dq strategy is useful in live migration scenarios for virtual machines\[char46]
+.IP "\fBoptions : additional-chassis-activated\fR: optional string"
+When \fBactivation-strategy\fR is set, this option indicates that the port was activated using the strategy specified\[char46]
+.IP "\fBoptions : iface-id-ver\fR: optional string"
+If set, this port will be bound by \fBovn\-controller\fR only if this same key and value is configured in the \fBexternal_ids\fR column in the Open_vSwitch database\(cqs \fBInterface\fR table\[char46]
+.IP "\fBoptions : qos_min_rate\fR: optional string"
+If set, indicates the minimum guaranteed rate available for data sent from this interface, in bit/s\[char46]
+.IP "\fBoptions : qos_max_rate\fR: optional string"
+If set, indicates the maximum rate for data sent from this interface, in bit/s\[char46] The traffic will be shaped according to this limit\[char46]
+.IP "\fBoptions : qos_burst\fR: optional string"
+If set, indicates the maximum burst size for data sent from this interface, in bits\[char46]
+.IP "\fBoptions : qos_physical_network\fR: optional string"
+If set, indicates the name of the egress network name where traffic shaping will be applied\[char46]
+.IP "\fBoptions : qdisc_queue_id\fR: optional string, containing an integer, in range 1 to 61,440"
+Indicates the queue number on the physical device\[char46] This is same as the \fBqueue_id\fR used in OpenFlow in \fBstruct
+ofp_action_enqueue\fR\[char46]
+.ST "Distributed Gateway Port Options:"
+.PP
+.PP
+.PP
+These options apply to the distributed parent ports of logical ports with \fBtype\fR of \fBchasssisredirect\fR\[char46]
+.IP "\fBoptions : chassis-redirect-port\fR: optional string"
+The name of the chassis redirect port derived from this port if this port is a distributed parent of a chassis redirect port\[char46]
+.ST "Chassis Redirect Options:"
+.PP
+.PP
+.PP
+These options apply to logical ports with \fBtype\fR of \fBchassisredirect\fR\[char46]
+.IP "\fBoptions : distributed-port\fR: optional string"
+The name of the distributed port for which this \fBchassisredirect\fR port represents a particular instance\[char46]
+.IP "\fBoptions : redirect-type\fR: optional string"
+The value is copied from the column \fBoptions\fR in the OVN_Northbound database\(cqs \fBLogical_Router_Port\fR table for the distributed parent of this port\[char46]
+.IP "\fBoptions : always-redirect\fR: optional string"
+A boolean option that is set to true if the distributed parent of this chassis redirect port does not need distributed processing\[char46]
+.ST "Nested Containers:"
+.PP
+.PP
+.PP
+These columns support containers nested within a VM\[char46] Specifically, they are used when \fBtype\fR is empty and \fBlogical_port\fR identifies the interface of a container spawned inside a VM\[char46] They are empty for containers or VMs that run directly on a hypervisor\[char46]
+.IP "\fBparent_port\fR: optional string"
+This is taken from \fBparent_name\fR in the OVN_Northbound database\(cqs \fBLogical_Switch_Port\fR table\[char46]
+.IP "\fBtag\fR: optional integer, in range 1 to 4,095"
+Identifies the VLAN tag in the network traffic associated with that container\(cqs network interface\[char46]
+.IP
+This column is used for a different purpose when \fBtype\fR is \fBlocalnet\fR (see \fBLocalnet Options\fR, above) or \fBl2gateway\fR (see \fBL2 Gateway Options\fR, above)\[char46]
+.ST "Virtual ports:"
+.PP
+.IP "\fBvirtual_parent\fR: optional string"
+This column is set by \fBovn\-controller\fR with one of the value from the \fBoptions:virtual-parents\fR in the OVN_Northbound database\(cqs \fBLogical_Switch_Port\fR table when the OVN action \fBbind_vport\fR is executed\[char46] \fBovn\-controller\fR also sets the \fBchassis\fR column when it executes this action with its chassis id\[char46]
+.IP
+\fBovn\-controller\fR sets this column only if the \fBtype\fR is \(dqvirtual\(dq\[char46]
+.ST "Naming:"
+.PP
+.IP "\fBexternal_ids : name\fR: optional string"
+For a logical switch port, \fBovn\-northd\fR copies this from \fBexternal_ids:neutron:port_name\fR in the \fBLogical_Switch_Port\fR table in the OVN_Northbound database, if it is a nonempty string\[char46]
+.IP
+For a logical switch port, \fBovn\-northd\fR does not currently set this key\[char46]
+.ST "Common Columns:"
+.PP
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+See \fBExternal IDs\fR at the beginning of this document\[char46]
+.IP
+The \fBovn\-northd\fR program populates this column with all entries into the \fBexternal_ids\fR column of the \fBLogical_Switch_Port\fR and \fBLogical_Router_Port\fR tables of the \fBOVN_Northbound\fR database\[char46]
+.bp
+.SH "MAC_Binding TABLE"
+.PP
+.PP
+.PP
+Each row in this table specifies a binding from an IP address to an Ethernet address that has been discovered through ARP (for IPv4) or neighbor discovery (for IPv6)\[char46] This table is primarily used to discover bindings on physical networks, because IP-to-MAC bindings for virtual machines are usually populated statically into the \fBPort_Binding\fR table\[char46]
+.PP
+.PP
+This table expresses a functional relationship: \fBMAC_Binding\fR(\fBlogical_port\fR, \fBip\fR) = \fBmac\fR\[char46]
+.PP
+.PP
+In outline, the lifetime of a logical router\(cqs MAC binding looks like this:
+.RS
+.IP 1. .4in
+On hypervisor 1, a logical router determines that a packet should be forwarded to IP address \fIA\fR on one of its router ports\[char46] It uses its logical flow table to determine that \fIA\fR lacks a static IP-to-MAC binding and the \fBget_arp\fR action to determine that it lacks a dynamic IP-to-MAC binding\[char46]
+.IP 2. .4in
+Using an OVN logical \fBarp\fR action, the logical router generates and sends a broadcast ARP request to the router port\[char46] It drops the IP packet\[char46]
+.IP 3. .4in
+The logical switch attached to the router port delivers the ARP request to all of its ports\[char46] (It might make sense to deliver it only to ports that have no static IP-to-MAC bindings, but this could also be surprising behavior\[char46])
+.IP 4. .4in
+A host or VM on hypervisor 2 (which might be the same as hypervisor 1) attached to the logical switch owns the IP address in question\[char46] It composes an ARP reply and unicasts it to the logical router port\(cqs Ethernet address\[char46]
+.IP 5. .4in
+The logical switch delivers the ARP reply to the logical router port\[char46]
+.IP 6. .4in
+The logical router flow table executes a \fBput_arp\fR action\[char46] To record the IP-to-MAC binding, \fBovn\-controller\fR adds a row to the \fBMAC_Binding\fR table\[char46]
+.IP 7. .4in
+On hypervisor 1, \fBovn\-controller\fR receives the updated \fBMAC_Binding\fR table from the OVN southbound database\[char46] The next packet destined to \fIA\fR through the logical router is sent directly to the bound Ethernet address\[char46]
+.RE
+.SS "Summary:
+.TQ 3.00in
+\fBlogical_port\fR
+string
+.TQ 3.00in
+\fBip\fR
+string
+.TQ 3.00in
+\fBmac\fR
+string
+.TQ 3.00in
+\fBtimestamp\fR
+integer
+.TQ 3.00in
+\fBdatapath\fR
+\fBDatapath_Binding\fR
+.SS "Details:
+.IP "\fBlogical_port\fR: string"
+The logical port on which the binding was discovered\[char46]
+.IP "\fBip\fR: string"
+The bound IP address\[char46]
+.IP "\fBmac\fR: string"
+The Ethernet address to which the IP is bound\[char46]
+.IP "\fBtimestamp\fR: integer"
+The timestamp in msec when the MAC binding was added or updated\[char46] Records that existed before this column will have 0\[char46]
+.IP "\fBdatapath\fR: \fBDatapath_Binding\fR"
+The logical datapath to which the logical port belongs\[char46]
+.bp
+.SH "DHCP_Options TABLE"
+.PP
+.PP
+.PP
+Each row in this table stores the DHCP Options supported by native OVN DHCP\[char46] \fBovn\-northd\fR populates this table with the supported DHCP options\[char46] \fBovn\-controller\fR looks up this table to get the DHCP codes of the DHCP options defined in the \(dqput_dhcp_opts\(dq action\[char46] Please refer to the RFC 2132 \fB\(dqhttps://tools\[char46]ietf\[char46]org/html/rfc2132\(dq\fR for the possible list of DHCP options that can be defined here\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBname\fR
+string
+.TQ 3.00in
+\fBcode\fR
+integer, in range 0 to 254
+.TQ 3.00in
+\fBtype\fR
+string, one of \fBbool\fR, \fBdomains\fR, \fBhost_id\fR, \fBipv4\fR, \fBstatic_routes\fR, \fBstr\fR, \fBuint16\fR, \fBuint32\fR, or \fBuint8\fR
+.SS "Details:
+.IP "\fBname\fR: string"
+Name of the DHCP option\[char46]
+.IP
+Example\[char46] name=\(dqrouter\(dq
+.IP "\fBcode\fR: integer, in range 0 to 254"
+DHCP option code for the DHCP option as defined in the RFC 2132\[char46]
+.IP
+Example\[char46] code=3
+.IP "\fBtype\fR: string, one of \fBbool\fR, \fBdomains\fR, \fBhost_id\fR, \fBipv4\fR, \fBstatic_routes\fR, \fBstr\fR, \fBuint16\fR, \fBuint32\fR, or \fBuint8\fR"
+Data type of the DHCP option code\[char46]
+.RS
+.TP
+\fBvalue: bool\fR
+This indicates that the value of the DHCP option is a bool\[char46]
+.IP
+Example\[char46] \(dqname=ip_forward_enable\(dq, \(dqcode=19\(dq, \(dqtype=bool\(dq\[char46]
+.IP
+put_dhcp_opts(\[char46]\[char46]\[char46], ip_forward_enable = 1,\[char46]\[char46]\[char46])
+.TP
+\fBvalue: uint8\fR
+This indicates that the value of the DHCP option is an unsigned int8 (8 bits)
+.IP
+Example\[char46] \(dqname=default_ttl\(dq, \(dqcode=23\(dq, \(dqtype=uint8\(dq\[char46]
+.IP
+put_dhcp_opts(\[char46]\[char46]\[char46], default_ttl = 50,\[char46]\[char46]\[char46])
+.TP
+\fBvalue: uint16\fR
+This indicates that the value of the DHCP option is an unsigned int16 (16 bits)\[char46]
+.IP
+Example\[char46] \(dqname=mtu\(dq, \(dqcode=26\(dq, \(dqtype=uint16\(dq\[char46]
+.IP
+put_dhcp_opts(\[char46]\[char46]\[char46], mtu = 1450,\[char46]\[char46]\[char46])
+.TP
+\fBvalue: uint32\fR
+This indicates that the value of the DHCP option is an unsigned int32 (32 bits)\[char46]
+.IP
+Example\[char46] \(dqname=lease_time\(dq, \(dqcode=51\(dq, \(dqtype=uint32\(dq\[char46]
+.IP
+put_dhcp_opts(\[char46]\[char46]\[char46], lease_time = 86400,\[char46]\[char46]\[char46])
+.TP
+\fBvalue: ipv4\fR
+This indicates that the value of the DHCP option is an IPv4 address or addresses\[char46]
+.IP
+Example\[char46] \(dqname=router\(dq, \(dqcode=3\(dq, \(dqtype=ipv4\(dq\[char46]
+.IP
+put_dhcp_opts(\[char46]\[char46]\[char46], router = 10\[char46]0\[char46]0\[char46]1,\[char46]\[char46]\[char46])
+.IP
+Example\[char46] \(dqname=dns_server\(dq, \(dqcode=6\(dq, \(dqtype=ipv4\(dq\[char46]
+.IP
+put_dhcp_opts(\[char46]\[char46]\[char46], dns_server = {8\[char46]8\[char46]8\[char46]8 7\[char46]7\[char46]7\[char46]7},\[char46]\[char46]\[char46])
+.TP
+\fBvalue: static_routes\fR
+This indicates that the value of the DHCP option contains a pair of IPv4 route and next hop addresses\[char46]
+.IP
+Example\[char46] \(dqname=classless_static_route\(dq, \(dqcode=121\(dq, \(dqtype=static_routes\(dq\[char46]
+.IP
+put_dhcp_opts(\[char46]\[char46]\[char46], classless_static_route = {30\[char46]0\[char46]0\[char46]0/24,10\[char46]0\[char46]0\[char46]4,0\[char46]0\[char46]0\[char46]0/0,10\[char46]0\[char46]0\[char46]1}\[char46]\[char46]\[char46])
+.TP
+\fBvalue: str\fR
+This indicates that the value of the DHCP option is a string\[char46]
+.IP
+Example\[char46] \(dqname=host_name\(dq, \(dqcode=12\(dq, \(dqtype=str\(dq\[char46]
+.TP
+\fBvalue: host_id\fR
+This indicates that the value of the DHCP option is a host_id\[char46] It can either be a host_name or an IP address\[char46]
+.IP
+Example\[char46] \(dqname=tftp_server\(dq, \(dqcode=66\(dq, \(dqtype=host_id\(dq\[char46]
+.TP
+\fBvalue: domains\fR
+This indicates that the value of the DHCP option is a domain name or a comma separated list of domain names\[char46]
+.IP
+Example\[char46] \(dqname=domain_search_list\(dq, \(dqcode=119\(dq, \(dqtype=domains\(dq\[char46]
+.RE
+.bp
+.SH "DHCPv6_Options TABLE"
+.PP
+.PP
+.PP
+Each row in this table stores the DHCPv6 Options supported by native OVN DHCPv6\[char46] \fBovn\-northd\fR populates this table with the supported DHCPv6 options\[char46] \fBovn\-controller\fR looks up this table to get the DHCPv6 codes of the DHCPv6 options defined in the \fBput_dhcpv6_opts\fR action\[char46] Please refer to RFC 3315 and RFC 3646 for the list of DHCPv6 options that can be defined here\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBname\fR
+string
+.TQ 3.00in
+\fBcode\fR
+integer, in range 0 to 254
+.TQ 3.00in
+\fBtype\fR
+string, one of \fBipv6\fR, \fBmac\fR, or \fBstr\fR
+.SS "Details:
+.IP "\fBname\fR: string"
+Name of the DHCPv6 option\[char46]
+.IP
+Example\[char46] name=\(dqia_addr\(dq
+.IP "\fBcode\fR: integer, in range 0 to 254"
+DHCPv6 option code for the DHCPv6 option as defined in the appropriate RFC\[char46]
+.IP
+Example\[char46] code=3
+.IP "\fBtype\fR: string, one of \fBipv6\fR, \fBmac\fR, or \fBstr\fR"
+Data type of the DHCPv6 option code\[char46]
+.RS
+.TP
+\fBvalue: ipv6\fR
+This indicates that the value of the DHCPv6 option is an IPv6 address(es)\[char46]
+.IP
+Example\[char46] \(dqname=ia_addr\(dq, \(dqcode=5\(dq, \(dqtype=ipv6\(dq\[char46]
+.IP
+put_dhcpv6_opts(\[char46]\[char46]\[char46], ia_addr = ae70::4,\[char46]\[char46]\[char46])
+.TP
+\fBvalue: str\fR
+This indicates that the value of the DHCPv6 option is a string\[char46]
+.IP
+Example\[char46] \(dqname=domain_search\(dq, \(dqcode=24\(dq, \(dqtype=str\(dq\[char46]
+.IP
+put_dhcpv6_opts(\[char46]\[char46]\[char46], domain_search = ovn\[char46]domain,\[char46]\[char46]\[char46])
+.TP
+\fBvalue: mac\fR
+This indicates that the value of the DHCPv6 option is a MAC address\[char46]
+.IP
+Example\[char46] \(dqname=server_id\(dq, \(dqcode=2\(dq, \(dqtype=mac\(dq\[char46]
+.IP
+put_dhcpv6_opts(\[char46]\[char46]\[char46], server_id = 01:02:03:04L05:06,\[char46]\[char46]\[char46])
+.RE
+.bp
+.SH "Connection TABLE"
+.PP
+.PP
+.PP
+Configuration for a database connection to an Open vSwitch database (OVSDB) client\[char46]
+.PP
+.PP
+This table primarily configures the Open vSwitch database server (\fBovsdb\-server\fR)\[char46]
+.PP
+.PP
+The Open vSwitch database server can initiate and maintain active connections to remote clients\[char46] It can also listen for database connections\[char46]
+.SS "Summary:
+.TQ .25in
+\fICore Features:\fR
+.RS .25in
+.TQ 2.75in
+\fBtarget\fR
+string (must be unique within table)
+.TQ 2.75in
+\fBread_only\fR
+boolean
+.TQ 2.75in
+\fBrole\fR
+string
+.RE
+.TQ .25in
+\fIClient Failure Detection and Handling:\fR
+.RS .25in
+.TQ 2.75in
+\fBmax_backoff\fR
+optional integer, at least 1,000
+.TQ 2.75in
+\fBinactivity_probe\fR
+optional integer
+.RE
+.TQ .25in
+\fIStatus:\fR
+.RS .25in
+.TQ 2.75in
+\fBis_connected\fR
+boolean
+.TQ 2.75in
+\fBstatus : last_error\fR
+optional string
+.TQ 2.75in
+\fBstatus : state\fR
+optional string, one of \fBACTIVE\fR, \fBBACKOFF\fR, \fBCONNECTING\fR, \fBIDLE\fR, or \fBVOID\fR
+.TQ 2.75in
+\fBstatus : sec_since_connect\fR
+optional string, containing an integer, at least 0
+.TQ 2.75in
+\fBstatus : sec_since_disconnect\fR
+optional string, containing an integer, at least 0
+.TQ 2.75in
+\fBstatus : locks_held\fR
+optional string
+.TQ 2.75in
+\fBstatus : locks_waiting\fR
+optional string
+.TQ 2.75in
+\fBstatus : locks_lost\fR
+optional string
+.TQ 2.75in
+\fBstatus : n_connections\fR
+optional string, containing an integer, at least 2
+.TQ 2.75in
+\fBstatus : bound_port\fR
+optional string, containing an integer
+.RE
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.TQ 2.75in
+\fBother_config\fR
+map of string-string pairs
+.RE
+.SS "Details:
+.ST "Core Features:"
+.PP
+.IP "\fBtarget\fR: string (must be unique within table)"
+Connection methods for clients\[char46]
+.IP
+The following connection methods are currently supported:
+.RS
+.TP
+\fBssl:\fIhost\fB\fR[\fB:\fIport\fB\fR]
+The specified SSL \fIport\fR on the given \fIhost\fR, which can either be a DNS name (if built with unbound library) or an IP address\[char46] A valid SSL configuration must be provided when this form is used, this configuration can be specified via command-line options or the \fBSSL\fR table\[char46]
+.IP
+If \fIport\fR is not specified, it defaults to 6640\[char46]
+.IP
+SSL support is an optional feature that is not always built as part of Open vSwitch\[char46]
+.TP
+\fBtcp:\fIhost\fB\fR[\fB:\fIport\fB\fR]
+The specified TCP \fIport\fR on the given \fIhost\fR, which can either be a DNS name (if built with unbound library) or an IP address (IPv4 or IPv6)\[char46] If \fIhost\fR is an IPv6 address, wrap it in square brackets, e\[char46]g\[char46] \fBtcp:[::1]:6640\fR\[char46]
+.IP
+If \fIport\fR is not specified, it defaults to 6640\[char46]
+.TP
+\fBpssl:\fR[\fIport\fR][\fB:\fIhost\fB\fR]
+Listens for SSL connections on the specified TCP \fIport\fR\[char46] Specify 0 for \fIport\fR to have the kernel automatically choose an available port\[char46] If \fIhost\fR, which can either be a DNS name (if built with unbound library) or an IP address, is specified, then connections are restricted to the resolved or specified local IP address (either IPv4 or IPv6 address)\[char46] If \fIhost\fR is an IPv6 address, wrap in square brackets, e\[char46]g\[char46] \fBpssl:6640:[::1]\fR\[char46] If \fIhost\fR is not specified then it listens only on IPv4 (but not IPv6) addresses\[char46] A valid SSL configuration must be provided when this form is used, this can be specified either via command-line options or the \fBSSL\fR table\[char46]
+.IP
+If \fIport\fR is not specified, it defaults to 6640\[char46]
+.IP
+SSL support is an optional feature that is not always built as part of Open vSwitch\[char46]
+.TP
+\fBptcp:\fR[\fIport\fR][\fB:\fIhost\fB\fR]
+Listens for connections on the specified TCP \fIport\fR\[char46] Specify 0 for \fIport\fR to have the kernel automatically choose an available port\[char46] If \fIhost\fR, which can either be a DNS name (if built with unbound library) or an IP address, is specified, then connections are restricted to the resolved or specified local IP address (either IPv4 or IPv6 address)\[char46] If \fIhost\fR is an IPv6 address, wrap it in square brackets, e\[char46]g\[char46] \fBptcp:6640:[::1]\fR\[char46] If \fIhost\fR is not specified then it listens only on IPv4 addresses\[char46]
+.IP
+If \fIport\fR is not specified, it defaults to 6640\[char46]
+.RE
+.IP
+When multiple clients are configured, the \fBtarget\fR values must be unique\[char46] Duplicate \fBtarget\fR values yield unspecified results\[char46]
+.IP "\fBread_only\fR: boolean"
+\fBtrue\fR to restrict these connections to read-only transactions, \fBfalse\fR to allow them to modify the database\[char46]
+.IP "\fBrole\fR: string"
+String containing role name for this connection entry\[char46]
+.ST "Client Failure Detection and Handling:"
+.PP
+.IP "\fBmax_backoff\fR: optional integer, at least 1,000"
+Maximum number of milliseconds to wait between connection attempts\[char46] Default is implementation-specific\[char46]
+.IP "\fBinactivity_probe\fR: optional integer"
+Maximum number of milliseconds of idle time on connection to the client before sending an inactivity probe message\[char46] If Open vSwitch does not communicate with the client for the specified number of seconds, it will send a probe\[char46] If a response is not received for the same additional amount of time, Open vSwitch assumes the connection has been broken and attempts to reconnect\[char46] Default is implementation-specific\[char46] A value of 0 disables inactivity probes\[char46]
+.ST "Status:"
+.PP
+.PP
+.PP
+Key-value pair of \fBis_connected\fR is always updated\[char46] Other key-value pairs in the status columns may be updated depends on the \fBtarget\fR type\[char46]
+.PP
+.PP
+When \fBtarget\fR specifies a connection method that listens for inbound connections (e\[char46]g\[char46] \fBptcp:\fR or \fBpunix:\fR), both \fBn_connections\fR and \fBis_connected\fR may also be updated while the remaining key-value pairs are omitted\[char46]
+.PP
+.PP
+On the other hand, when \fBtarget\fR specifies an outbound connection, all key-value pairs may be updated, except the above-mentioned two key-value pairs associated with inbound connection targets\[char46] They are omitted\[char46]
+.IP "\fBis_connected\fR: boolean"
+\fBtrue\fR if currently connected to this client, \fBfalse\fR otherwise\[char46]
+.IP "\fBstatus : last_error\fR: optional string"
+A human-readable description of the last error on the connection to the manager; i\[char46]e\[char46] \fBstrerror(errno)\fR\[char46] This key will exist only if an error has occurred\[char46]
+.IP "\fBstatus : state\fR: optional string, one of \fBACTIVE\fR, \fBBACKOFF\fR, \fBCONNECTING\fR, \fBIDLE\fR, or \fBVOID\fR"
+The state of the connection to the manager:
+.RS
+.TP
+\fBVOID\fR
+Connection is disabled\[char46]
+.TP
+\fBBACKOFF\fR
+Attempting to reconnect at an increasing period\[char46]
+.TP
+\fBCONNECTING\fR
+Attempting to connect\[char46]
+.TP
+\fBACTIVE\fR
+Connected, remote host responsive\[char46]
+.TP
+\fBIDLE\fR
+Connection is idle\[char46] Waiting for response to keep-alive\[char46]
+.RE
+.IP
+These values may change in the future\[char46] They are provided only for human consumption\[char46]
+.IP "\fBstatus : sec_since_connect\fR: optional string, containing an integer, at least 0"
+The amount of time since this client last successfully connected to the database (in seconds)\[char46] Value is empty if client has never successfully been connected\[char46]
+.IP "\fBstatus : sec_since_disconnect\fR: optional string, containing an integer, at least 0"
+The amount of time since this client last disconnected from the database (in seconds)\[char46] Value is empty if client has never disconnected\[char46]
+.IP "\fBstatus : locks_held\fR: optional string"
+Space-separated list of the names of OVSDB locks that the connection holds\[char46] Omitted if the connection does not hold any locks\[char46]
+.IP "\fBstatus : locks_waiting\fR: optional string"
+Space-separated list of the names of OVSDB locks that the connection is currently waiting to acquire\[char46] Omitted if the connection is not waiting for any locks\[char46]
+.IP "\fBstatus : locks_lost\fR: optional string"
+Space-separated list of the names of OVSDB locks that the connection has had stolen by another OVSDB client\[char46] Omitted if no locks have been stolen from this connection\[char46]
+.IP "\fBstatus : n_connections\fR: optional string, containing an integer, at least 2"
+When \fBtarget\fR specifies a connection method that listens for inbound connections (e\[char46]g\[char46] \fBptcp:\fR or \fBpssl:\fR) and more than one connection is actually active, the value is the number of active connections\[char46] Otherwise, this key-value pair is omitted\[char46]
+.IP "\fBstatus : bound_port\fR: optional string, containing an integer"
+When \fBtarget\fR is \fBptcp:\fR or \fBpssl:\fR, this is the TCP port on which the OVSDB server is listening\[char46] (This is particularly useful when \fBtarget\fR specifies a port of 0, allowing the kernel to choose any available port\[char46])
+.ST "Common Columns:"
+.PP
+The overall purpose of these columns is described under \fBCommon
+Columns\fR at the beginning of this document\[char46]
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+.IP "\fBother_config\fR: map of string-string pairs"
+.bp
+.SH "SSL TABLE"
+.PP
+SSL configuration for ovn-sb database access\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBprivate_key\fR
+string
+.TQ 3.00in
+\fBcertificate\fR
+string
+.TQ 3.00in
+\fBca_cert\fR
+string
+.TQ 3.00in
+\fBbootstrap_ca_cert\fR
+boolean
+.TQ 3.00in
+\fBssl_protocols\fR
+string
+.TQ 3.00in
+\fBssl_ciphers\fR
+string
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.RE
+.SS "Details:
+.IP "\fBprivate_key\fR: string"
+Name of a PEM file containing the private key used as the switch\(cqs identity for SSL connections to the controller\[char46]
+.IP "\fBcertificate\fR: string"
+Name of a PEM file containing a certificate, signed by the certificate authority (CA) used by the controller and manager, that certifies the switch\(cqs private key, identifying a trustworthy switch\[char46]
+.IP "\fBca_cert\fR: string"
+Name of a PEM file containing the CA certificate used to verify that the switch is connected to a trustworthy controller\[char46]
+.IP "\fBbootstrap_ca_cert\fR: boolean"
+If set to \fBtrue\fR, then Open vSwitch will attempt to obtain the CA certificate from the controller on its first SSL connection and save it to the named PEM file\[char46] If it is successful, it will immediately drop the connection and reconnect, and from then on all SSL connections must be authenticated by a certificate signed by the CA certificate thus obtained\[char46] \fBThis option exposes the
+SSL connection to a man\-in\-the\-middle attack obtaining the initial
+CA certificate\[char46]\fR It may still be useful for bootstrapping\[char46]
+.IP "\fBssl_protocols\fR: string"
+List of SSL protocols to be enabled for SSL connections\[char46] The default when this option is omitted is \fBTLSv1,TLSv1\[char46]1,TLSv1\[char46]2\fR\[char46]
+.IP "\fBssl_ciphers\fR: string"
+List of ciphers (in OpenSSL cipher string format) to be supported for SSL connections\[char46] The default when this option is omitted is \fBHIGH:!aNULL:!MD5\fR\[char46]
+.ST "Common Columns:"
+.PP
+The overall purpose of these columns is described under \fBCommon
+Columns\fR at the beginning of this document\[char46]
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+.bp
+.SH "DNS TABLE"
+.PP
+.PP
+.PP
+Each row in this table stores the DNS records\[char46] The OVN action \fBdns_lookup\fR uses this table for DNS resolution\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBrecords\fR
+map of string-string pairs
+.TQ 3.00in
+\fBdatapaths\fR
+set of 1 or more \fBDatapath_Binding\fRs
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.RE
+.SS "Details:
+.IP "\fBrecords\fR: map of string-string pairs"
+Key-value pair of DNS records with \fBDNS query name\fR as the key and a string of IP address(es) separated by comma or space as the value\[char46] ovn-northd stores the DNS query name in all lowercase in order to facilitate case-insensitive lookups\[char46]
+.IP
+\fBExample: \fR \(dqvm1\[char46]ovn\[char46]org\(dq = \(dq10\[char46]0\[char46]0\[char46]4 aef0::4\(dq
+.IP "\fBdatapaths\fR: set of 1 or more \fBDatapath_Binding\fRs"
+The DNS records defined in the column \fBrecords\fR will be applied only to the DNS queries originating from the datapaths defined in this column\[char46]
+.ST "Common Columns:"
+.PP
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+See \fBExternal IDs\fR at the beginning of this document\[char46]
+.bp
+.SH "RBAC_Role TABLE"
+.PP
+Role table for role-based access controls\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBname\fR
+string
+.TQ 3.00in
+\fBpermissions\fR
+map of string-weak reference to \fBRBAC_Permission\fR pairs
+.SS "Details:
+.IP "\fBname\fR: string"
+The role name, corresponding to the \fBrole\fR column in the \fBConnection\fR table\[char46]
+.IP "\fBpermissions\fR: map of string-weak reference to \fBRBAC_Permission\fR pairs"
+A mapping of table names to rows in the \fBRBAC_Permission\fR table\[char46]
+.bp
+.SH "RBAC_Permission TABLE"
+.PP
+Permissions table for role-based access controls\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBtable\fR
+string
+.TQ 3.00in
+\fBauthorization\fR
+set of strings
+.TQ 3.00in
+\fBinsert_delete\fR
+boolean
+.TQ 3.00in
+\fBupdate\fR
+set of strings
+.SS "Details:
+.IP "\fBtable\fR: string"
+Name of table to which this row applies\[char46]
+.IP "\fBauthorization\fR: set of strings"
+Set of strings identifying columns and column:key pairs to be compared with client ID\[char46] At least one match is required in order to be authorized\[char46] A zero-length string is treated as a special value indicating all clients should be considered authorized\[char46]
+.IP "\fBinsert_delete\fR: boolean"
+When \(dqtrue\(dq, row insertions and authorized row deletions are permitted\[char46]
+.IP "\fBupdate\fR: set of strings"
+Set of strings identifying columns and column:key pairs that authorized clients are allowed to modify\[char46]
+.bp
+.SH "Gateway_Chassis TABLE"
+.PP
+.PP
+.PP
+Association of \fBPort_Binding\fR rows of \fBtype\fR \fBchassisredirect\fR to a \fBChassis\fR\[char46] The traffic going out through a specific \fBchassisredirect\fR port will be redirected to a chassis, or a set of them in high availability configurations\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBname\fR
+string (must be unique within table)
+.TQ 3.00in
+\fBchassis\fR
+optional weak reference to \fBChassis\fR
+.TQ 3.00in
+\fBpriority\fR
+integer, in range 0 to 32,767
+.TQ 3.00in
+\fBoptions\fR
+map of string-string pairs
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.RE
+.SS "Details:
+.IP "\fBname\fR: string (must be unique within table)"
+Name of the \fBGateway_Chassis\fR\[char46]
+.IP
+A suggested, but not required naming convention is \fB${port_name}_${chassis_name}\fR\[char46]
+.IP "\fBchassis\fR: optional weak reference to \fBChassis\fR"
+The \fBChassis\fR to which we send the traffic\[char46]
+.IP "\fBpriority\fR: integer, in range 0 to 32,767"
+This is the priority the specific \fBChassis\fR among all Gateway_Chassis belonging to the same \fBPort_Binding\fR\[char46]
+.IP "\fBoptions\fR: map of string-string pairs"
+Reserved for future use\[char46]
+.ST "Common Columns:"
+.PP
+The overall purpose of these columns is described under \fBCommon
+Columns\fR at the beginning of this document\[char46]
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+.bp
+.SH "HA_Chassis TABLE"
+.PP
+.SS "Summary:
+.TQ 3.00in
+\fBchassis\fR
+optional weak reference to \fBChassis\fR
+.TQ 3.00in
+\fBpriority\fR
+integer, in range 0 to 32,767
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.RE
+.SS "Details:
+.IP "\fBchassis\fR: optional weak reference to \fBChassis\fR"
+The \fBChassis\fR which provides the HA functionality\[char46]
+.IP "\fBpriority\fR: integer, in range 0 to 32,767"
+Priority of the HA chassis\[char46] Chassis with highest priority will be the master in the HA chassis group\[char46]
+.ST "Common Columns:"
+.PP
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+See \fBExternal IDs\fR at the beginning of this document\[char46]
+.bp
+.SH "HA_Chassis_Group TABLE"
+.PP
+.PP
+.PP
+Table representing a group of chassis which can provide High availability services\[char46] Each chassis in the group is represented by the table \fBHA_Chassis\fR\[char46] The HA chassis with highest priority will be the master of this group\[char46] If the master chassis failover is detected, the HA chassis with the next higher priority takes over the responsibility of providing the HA\[char46] If \fBha_chassis_group\fR column of the table \fBPort_Binding\fR references this table, then this HA chassis group provides the gateway functionality and redirects the gateway traffic to the master of this group\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBname\fR
+string (must be unique within table)
+.TQ 3.00in
+\fBha_chassis\fR
+set of \fBHA_Chassis\fRes
+.TQ 3.00in
+\fBref_chassis\fR
+set of weak reference to \fBChassis\fR
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.RE
+.SS "Details:
+.IP "\fBname\fR: string (must be unique within table)"
+Name of the \fBHA_Chassis_Group\fR\[char46] Name should be unique\[char46]
+.IP "\fBha_chassis\fR: set of \fBHA_Chassis\fRes"
+A list of \fBHA_Chassis\fR which belongs to this group\[char46]
+.IP "\fBref_chassis\fR: set of weak reference to \fBChassis\fR"
+The set of \fBChassis\fR that reference this HA chassis group\[char46] To determine the correct \fBChassis\fR, find the \fBchassisredirect\fR type \fBPort_Binding\fR that references this \fBHA_Chassis_Group\fR\[char46] This \fBPort_Binding\fR is derived from some particular logical router\[char46] Starting from that LR, find the set of all logical switches and routers connected to it, directly or indirectly, across router ports that link one LRP to another or to a LSP\[char46] For each LSP in these logical switches, find the corresponding \fBPort_Binding\fR and add its bound \fBChassis\fR (if any) to \fBref_chassis\fR\[char46]
+.ST "Common Columns:"
+.PP
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+See \fBExternal IDs\fR at the beginning of this document\[char46]
+.bp
+.SH "Controller_Event TABLE"
+.PP
+.PP
+.PP
+Database table used by \fBovn\-controller\fR to report CMS related events\[char46] Please note there is no guarantee a given event is written exactly once in the db\[char46] It is CMS responsibility to squash duplicated lines or to filter out duplicated events
+.SS "Summary:
+.TQ 3.00in
+\fBevent_type\fR
+string, must be \fBempty_lb_backends\fR
+.TQ 3.00in
+\fBevent_info\fR
+map of string-string pairs
+.TQ 3.00in
+\fBchassis\fR
+optional weak reference to \fBChassis\fR
+.TQ 3.00in
+\fBseq_num\fR
+integer
+.SS "Details:
+.IP "\fBevent_type\fR: string, must be \fBempty_lb_backends\fR"
+Event type occurred
+.IP "\fBevent_info\fR: map of string-string pairs"
+Key-value pairs used to specify event info to the CMS\[char46] Possible values are:
+.RS
+.IP \(bu
+\fBvip\fR: VIP reported for the \fBempty_lb_backends\fR event
+.IP \(bu
+\fBprotocol\fR: Transport protocol reported for the \fBempty_lb_backends\fR event
+.IP \(bu
+\fBload_balancer\fR: UUID of the load balancer reported for the \fBempty_lb_backends\fR event
+.RE
+.IP "\fBchassis\fR: optional weak reference to \fBChassis\fR"
+This column is a \fBChassis\fR record to identify the chassis that has managed a given event\[char46]
+.IP "\fBseq_num\fR: integer"
+Event sequence number\[char46] Global counter for controller generated events\[char46] It can be used by the CMS to detect possible duplication of the same event\[char46]
+.bp
+.SH "IP_Multicast TABLE"
+.PP
+.PP
+.PP
+IP Multicast configuration options\[char46] For now only applicable to IGMP\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBdatapath\fR
+weak reference to \fBDatapath_Binding\fR (must be unique within table)
+.TQ 3.00in
+\fBenabled\fR
+optional boolean
+.TQ 3.00in
+\fBquerier\fR
+optional boolean
+.TQ 3.00in
+\fBtable_size\fR
+optional integer
+.TQ 3.00in
+\fBidle_timeout\fR
+optional integer
+.TQ 3.00in
+\fBquery_interval\fR
+optional integer
+.TQ 3.00in
+\fBseq_no\fR
+integer
+.TQ .25in
+\fIQuerier configuration options:\fR
+.RS .25in
+.TQ 2.75in
+\fBeth_src\fR
+string
+.TQ 2.75in
+\fBip4_src\fR
+string
+.TQ 2.75in
+\fBip6_src\fR
+string
+.TQ 2.75in
+\fBquery_max_resp\fR
+optional integer
+.RE
+.SS "Details:
+.IP "\fBdatapath\fR: weak reference to \fBDatapath_Binding\fR (must be unique within table)"
+\fBDatapath_Binding\fR entry for which these configuration options are defined\[char46]
+.IP "\fBenabled\fR: optional boolean"
+Enables/disables multicast snooping\[char46] Default: disabled\[char46]
+.IP "\fBquerier\fR: optional boolean"
+Enables/disables multicast querying\[char46] If \fBenabled\fR then multicast querying is enabled by default\[char46]
+.IP "\fBtable_size\fR: optional integer"
+Limits the number of multicast groups that can be learned\[char46] Default: 2048 groups per datapath\[char46]
+.IP "\fBidle_timeout\fR: optional integer"
+Configures the idle timeout (in seconds) for IP multicast groups if multicast snooping is enabled\[char46] Default: 300 seconds\[char46]
+.IP "\fBquery_interval\fR: optional integer"
+Configures the interval (in seconds) for sending multicast queries if snooping and querier are enabled\[char46] Default: \fBidle_timeout\fR/2 seconds\[char46]
+.IP "\fBseq_no\fR: integer"
+\fBovn\-controller\fR reads this value and flushes all learned multicast groups when it detects that \fBseq_no\fR was changed\[char46]
+.ST "Querier configuration options:"
+.PP
+The \fBovn\-controller\fR process that runs on OVN hypervisor nodes uses the following columns to determine field values in IGMP/MLD queries that it originates:
+.IP "\fBeth_src\fR: string"
+Source Ethernet address\[char46]
+.IP "\fBip4_src\fR: string"
+Source IPv4 address\[char46]
+.IP "\fBip6_src\fR: string"
+Source IPv6 address\[char46]
+.IP "\fBquery_max_resp\fR: optional integer"
+Value (in seconds) to be used as \(dqmax-response\(dq field in multicast queries\[char46] Default: 1 second\[char46]
+.bp
+.SH "IGMP_Group TABLE"
+.PP
+.PP
+.PP
+Contains learned IGMP groups indexed by address/datapath/chassis\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBaddress\fR
+string
+.TQ 3.00in
+\fBdatapath\fR
+optional weak reference to \fBDatapath_Binding\fR
+.TQ 3.00in
+\fBchassis\fR
+optional weak reference to \fBChassis\fR
+.TQ 3.00in
+\fBports\fR
+set of weak reference to \fBPort_Binding\fRs
+.SS "Details:
+.IP "\fBaddress\fR: string"
+Destination IPv4 address for the IGMP group\[char46]
+.IP "\fBdatapath\fR: optional weak reference to \fBDatapath_Binding\fR"
+Datapath to which this IGMP group belongs\[char46]
+.IP "\fBchassis\fR: optional weak reference to \fBChassis\fR"
+Chassis to which this IGMP group belongs\[char46]
+.IP "\fBports\fR: set of weak reference to \fBPort_Binding\fRs"
+The destination port bindings for this IGMP group\[char46]
+.bp
+.SH "Service_Monitor TABLE"
+.PP
+.PP
+.PP
+Each row in this table configures monitoring a service for its liveness\[char46] The service can be an IPv4 TCP or UDP service\[char46] \fBovn\-controller\fR periodically sends out service monitor packets and updates the status of the service\[char46] Service monitoring for IPv6 services is not supported\[char46]
+.PP
+.PP
+\fBovn\-northd\fR uses this feature to implement the load balancer health check feature offered to the CMS through the northbound database\[char46]
+.SS "Summary:
+.TQ .25in
+\fIConfiguration:\fR
+.RS .25in
+.TQ 2.75in
+\fBip\fR
+string
+.TQ 2.75in
+\fBprotocol\fR
+optional string, either \fBtcp\fR or \fBudp\fR
+.TQ 2.75in
+\fBport\fR
+integer, in range 0 to 65,535
+.TQ 2.75in
+\fBlogical_port\fR
+string
+.TQ 2.75in
+\fBsrc_mac\fR
+string
+.TQ 2.75in
+\fBsrc_ip\fR
+string
+.TQ 2.75in
+\fBoptions : interval\fR
+optional string, containing an integer
+.TQ 2.75in
+\fBoptions : timeout\fR
+optional string, containing an integer
+.TQ 2.75in
+\fBoptions : success_count\fR
+optional string, containing an integer
+.TQ 2.75in
+\fBoptions : failure_count\fR
+optional string, containing an integer
+.RE
+.TQ .25in
+\fIStatus Reporting:\fR
+.RS .25in
+.TQ 2.75in
+\fBstatus\fR
+optional string, one of \fBerror\fR, \fBoffline\fR, or \fBonline\fR
+.RE
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.RE
+.SS "Details:
+.ST "Configuration:"
+.PP
+.PP
+.PP
+\fBovn\-northd\fR sets these columns and values to configure the service monitor\[char46]
+.IP "\fBip\fR: string"
+IP of the service to be monitored\[char46] Only IPv4 is supported\[char46]
+.IP "\fBprotocol\fR: optional string, either \fBtcp\fR or \fBudp\fR"
+The protocol of the service\[char46]
+.IP "\fBport\fR: integer, in range 0 to 65,535"
+The TCP or UDP port of the service\[char46]
+.IP "\fBlogical_port\fR: string"
+The VIF of the logical port on which the service is running\[char46] The \fBovn\-controller\fR that binds this \fBlogical_port\fR monitors the service by sending periodic monitor packets\[char46]
+.IP "\fBsrc_mac\fR: string"
+Source Ethernet address to use in the service monitor packet\[char46]
+.IP "\fBsrc_ip\fR: string"
+Source IPv4 address to use in the service monitor packet\[char46]
+.IP "\fBoptions : interval\fR: optional string, containing an integer"
+The interval, in seconds, between service monitor checks\[char46]
+.IP "\fBoptions : timeout\fR: optional string, containing an integer"
+The time, in seconds, after which the service monitor check times out\[char46]
+.IP "\fBoptions : success_count\fR: optional string, containing an integer"
+The number of successful checks after which the service is considered \fBonline\fR\[char46]
+.IP "\fBoptions : failure_count\fR: optional string, containing an integer"
+The number of failure checks after which the service is considered \fBoffline\fR\[char46]
+.ST "Status Reporting:"
+.PP
+.PP
+.PP
+The \fBovn\-controller\fR on the chassis that hosts the \fBlogical_port\fR updates this column to report the service\(cqs status\[char46]
+.IP "\fBstatus\fR: optional string, one of \fBerror\fR, \fBoffline\fR, or \fBonline\fR"
+For TCP service, \fBovn\-controller\fR sends a SYN to the service and expects an ACK response to consider the service to be \fBonline\fR\[char46]
+.IP
+For UDP service, \fBovn\-controller\fR sends a UDP packet to the service and doesn\(cqt expect any reply\[char46] If it receives an ICMP reply, then it considers the service to be \fBoffline\fR\[char46]
+.ST "Common Columns:"
+.PP
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+See \fBExternal IDs\fR at the beginning of this document\[char46]
+.bp
+.SH "Load_Balancer TABLE"
+.PP
+.PP
+.PP
+Each row represents a load balancer\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBname\fR
+string
+.TQ 3.00in
+\fBvips\fR
+map of string-string pairs
+.TQ 3.00in
+\fBprotocol\fR
+optional string, one of \fBsctp\fR, \fBtcp\fR, or \fBudp\fR
+.TQ 3.00in
+\fBdatapaths\fR
+set of \fBDatapath_Binding\fRs
+.TQ 3.00in
+\fBdatapath_group\fR
+optional \fBLogical_DP_Group\fR
+.TQ .25in
+\fILoad_Balancer options:\fR
+.RS .25in
+.TQ 2.75in
+\fBoptions : hairpin_snat_ip\fR
+optional string
+.TQ 2.75in
+\fBoptions : hairpin_orig_tuple\fR
+optional string, either \fBtrue\fR or \fBfalse\fR
+.RE
+.TQ .25in
+\fICommon Columns:\fR
+.RS .25in
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.RE
+.SS "Details:
+.IP "\fBname\fR: string"
+A name for the load balancer\[char46] This name has no special meaning or purpose other than to provide convenience for human interaction with the ovn-nb database\[char46]
+.IP "\fBvips\fR: map of string-string pairs"
+A map of virtual IP addresses (and an optional port number with \fB:\fR as a separator) associated with this load balancer and their corresponding endpoint IP addresses (and optional port numbers with \fB:\fR as separators) separated by commas\[char46]
+.IP "\fBprotocol\fR: optional string, one of \fBsctp\fR, \fBtcp\fR, or \fBudp\fR"
+Valid protocols are \fBtcp\fR, \fBudp\fR, or \fBsctp\fR\[char46] This column is useful when a port number is provided as part of the \fBvips\fR column\[char46] If this column is empty and a port number is provided as part of \fBvips\fR column, OVN assumes the protocol to be \fBtcp\fR\[char46]
+.IP "\fBdatapaths\fR: set of \fBDatapath_Binding\fRs"
+Datapaths to which this load balancer applies to\[char46]
+.IP "\fBdatapath_group\fR: optional \fBLogical_DP_Group\fR"
+The group of datapaths to which this load balancer applies to\[char46] This means that the same load balancer applies to all datapaths in a group\[char46]
+.ST "Load_Balancer options:"
+.PP
+.IP "\fBoptions : hairpin_snat_ip\fR: optional string"
+IP to be used as source IP for packets that have been hair-pinned after load balancing\[char46] This value is automatically populated by \fBovn\-northd\fR\[char46]
+.IP "\fBoptions : hairpin_orig_tuple\fR: optional string, either \fBtrue\fR or \fBfalse\fR"
+This value is automatically set to \fBtrue\fR by \fBovn\-northd\fR when original destination IP and transport port of the load balanced packets are stored in registers \fBreg1, reg2, xxreg1\fR\[char46]
+.ST "Common Columns:"
+.PP
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+See \fBExternal IDs\fR at the beginning of this document\[char46]
+.bp
+.SH "BFD TABLE"
+.PP
+.PP
+.PP
+Contains BFD parameter for ovn-controller bfd configuration\[char46]
+.SS "Summary:
+.TQ .25in
+\fIConfiguration:\fR
+.RS .25in
+.TQ 2.75in
+\fBsrc_port\fR
+integer, in range 49,152 to 65,535
+.TQ 2.75in
+\fBdisc\fR
+integer
+.TQ 2.75in
+\fBlogical_port\fR
+string
+.TQ 2.75in
+\fBdst_ip\fR
+string
+.TQ 2.75in
+\fBmin_tx\fR
+integer
+.TQ 2.75in
+\fBmin_rx\fR
+integer
+.TQ 2.75in
+\fBdetect_mult\fR
+integer
+.TQ 2.75in
+\fBoptions\fR
+map of string-string pairs
+.TQ 2.75in
+\fBexternal_ids\fR
+map of string-string pairs
+.RE
+.TQ .25in
+\fIStatus Reporting:\fR
+.RS .25in
+.TQ 2.75in
+\fBstatus\fR
+string, one of \fBadmin_down\fR, \fBdown\fR, \fBinit\fR, or \fBup\fR
+.RE
+.SS "Details:
+.ST "Configuration:"
+.PP
+.IP "\fBsrc_port\fR: integer, in range 49,152 to 65,535"
+udp source port used in bfd control packets\[char46] The source port MUST be in the range 49152 through 65535 (RFC5881 section 4)\[char46]
+.IP "\fBdisc\fR: integer"
+A unique, nonzero discriminator value generated by the transmitting system, used to demultiplex multiple BFD sessions between the same pair of systems\[char46]
+.IP "\fBlogical_port\fR: string"
+OVN logical port when BFD engine is running\[char46]
+.IP "\fBdst_ip\fR: string"
+BFD peer IP address\[char46]
+.IP "\fBmin_tx\fR: integer"
+This is the minimum interval, in milliseconds, that the local system would like to use when transmitting BFD Control packets, less any jitter applied\[char46] The value zero is reserved\[char46]
+.IP "\fBmin_rx\fR: integer"
+This is the minimum interval, in milliseconds, between received BFD Control packets that this system is capable of supporting, less any jitter applied by the sender\[char46] If this value is zero, the transmitting system does not want the remote system to send any periodic BFD Control packets\[char46]
+.IP "\fBdetect_mult\fR: integer"
+Detection time multiplier\[char46] The negotiated transmit interval, multiplied by this value, provides the Detection Time for the receiving system in Asynchronous mode\[char46]
+.IP "\fBoptions\fR: map of string-string pairs"
+Reserved for future use\[char46]
+.IP "\fBexternal_ids\fR: map of string-string pairs"
+See \fBExternal IDs\fR at the beginning of this document\[char46]
+.ST "Status Reporting:"
+.PP
+.IP "\fBstatus\fR: string, one of \fBadmin_down\fR, \fBdown\fR, \fBinit\fR, or \fBup\fR"
+BFD port logical states\[char46] Possible values are:
+.RS
+.IP \(bu
+\fBadmin_down\fR
+.IP \(bu
+\fBdown\fR
+.IP \(bu
+\fBinit\fR
+.IP \(bu
+\fBup\fR
+.RE
+.bp
+.SH "FDB TABLE"
+.PP
+.PP
+.PP
+This table is primarily used to learn the MACs observed on a VIF (or a localnet port with \(cqlocalnet_learn_fdb\(cq enabled) which belongs to a \fBLogical_Switch_Port\fR record in \fBOVN_Northbound\fR whose port security is disabled and \(cqunknown\(cq address set\[char46] If port security is disabled on a \fBLogical_Switch_Port\fR record, OVN should allow traffic with any source mac from the VIF\[char46] This table will be used to deliver a packet to the VIF, If a packet\(cqs \fBeth\[char46]dst\fR is learnt\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBmac\fR
+string
+.TQ 3.00in
+\fBdp_key\fR
+integer, in range 1 to 16,777,215
+.TQ 3.00in
+\fBport_key\fR
+integer, in range 1 to 16,777,215
+.SS "Details:
+.IP "\fBmac\fR: string"
+The learnt mac address\[char46]
+.IP "\fBdp_key\fR: integer, in range 1 to 16,777,215"
+The key of the datapath on which this FDB was learnt\[char46]
+.IP "\fBport_key\fR: integer, in range 1 to 16,777,215"
+The key of the port binding on which this FDB was learnt\[char46]
+.bp
+.SH "Static_MAC_Binding TABLE"
+.PP
+.PP
+.PP
+Each record represents a Static_MAC_Binding entry for a logical router\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBlogical_port\fR
+string
+.TQ 3.00in
+\fBip\fR
+string
+.TQ 3.00in
+\fBmac\fR
+string
+.TQ 3.00in
+\fBoverride_dynamic_mac\fR
+boolean
+.TQ 3.00in
+\fBdatapath\fR
+\fBDatapath_Binding\fR
+.SS "Details:
+.IP "\fBlogical_port\fR: string"
+The logical router port for the binding\[char46]
+.IP "\fBip\fR: string"
+The bound IP address\[char46]
+.IP "\fBmac\fR: string"
+The Ethernet address to which the IP is bound\[char46]
+.IP "\fBoverride_dynamic_mac\fR: boolean"
+Override dynamically learnt MACs\[char46]
+.IP "\fBdatapath\fR: \fBDatapath_Binding\fR"
+The logical datapath to which the logical router port belongs\[char46]
+.bp
+.SH "Chassis_Template_Var TABLE"
+.PP
+.PP
+.PP
+Each record represents the set of template variable instantiations for a given chassis and is populated by \fBovn\-northd\fR from the contents of the \fBOVN_Northbound\[char46]Chassis_Template_Var\fR table\[char46]
+.SS "Summary:
+.TQ 3.00in
+\fBchassis\fR
+string (must be unique within table)
+.TQ 3.00in
+\fBvariables\fR
+map of string-string pairs
+.SS "Details:
+.IP "\fBchassis\fR: string (must be unique within table)"
+The chassis this set of variable values applies to\[char46]
+.IP "\fBvariables\fR: map of string-string pairs"
+The set of variable values for a given chassis\[char46]
diff --git a/support/dist-docs-branch-23.06/ovn-sb.5.html b/support/dist-docs-branch-23.06/ovn-sb.5.html
new file mode 100644
index 00000000..2cd471b8
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-sb.5.html
@@ -0,0 +1,3974 @@
+<html><head><meta charset="UTF-8"></head><body><pre>
+<u>o</u><u>v</u><u>n</u><u>-</u><u>s</u><u>b</u>(5)                     Open vSwitch Manual                    <u>o</u><u>v</u><u>n</u><u>-</u><u>s</u><u>b</u>(5)
+
+<b>N</b><b>A</b><b>M</b><b>E</b>
+       ovn-sb - OVN_Southbound database schema
+
+       This  database  holds  logical and physical configuration and state for
+       the Open Virtual Network (OVN) system to support  virtual  network  ab‐
+       straction. For an introduction to OVN, please see <b>o</b><b>v</b><b>n</b><b>-</b><b>a</b><b>r</b><b>c</b><b>h</b><b>i</b><b>t</b><b>e</b><b>c</b><b>t</b><b>u</b><b>r</b><b>e</b>(7).
+
+       The OVN Southbound database sits at the center of the OVN architecture.
+       It is the one component that speaks both southbound directly to all the
+       hypervisors  and  gateways, via <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>/<b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b><b>-</b><b>v</b><b>t</b><b>e</b><b>p</b>, and
+       northbound to the Cloud Management System, via <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>:
+
+   <b>D</b><b>a</b><b>t</b><b>a</b><b>b</b><b>a</b><b>s</b><b>e</b> <b>S</b><b>t</b><b>r</b><b>u</b><b>c</b><b>t</b><b>u</b><b>r</b><b>e</b>
+       The OVN Southbound database contains classes  of  data  with  different
+       properties, as described in the sections below.
+
+     <u>P</u><u>h</u><u>y</u><u>s</u><u>i</u><u>c</u><u>a</u><u>l</u> <u>n</u><u>e</u><u>t</u><u>w</u><u>o</u><u>r</u><u>k</u>
+
+       Physical  network tables contain information about the chassis nodes in
+       the system. This contains all the information  necessary  to  wire  the
+       overlay,  such  as  IP  addresses, supported tunnel types, and security
+       keys.
+
+       The amount of physical network data is small (O(n)  in  the  number  of
+       chassis)  and it changes infrequently, so it can be replicated to every
+       chassis.
+
+       The <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> and <b>E</b><b>n</b><b>c</b><b>a</b><b>p</b> tables are the physical network tables.
+
+     <u>L</u><u>o</u><u>g</u><u>i</u><u>c</u><u>a</u><u>l</u> <u>N</u><u>e</u><u>t</u><u>w</u><u>o</u><u>r</u><u>k</u>
+
+       Logical network tables contain the topology  of  logical  switches  and
+       routers,  ACLs,  firewall  rules, and everything needed to describe how
+       packets traverse a logical network,  represented  as  logical  datapath
+       flows (see Logical Datapath Flows, below).
+
+       Logical network data may be large (O(n) in the number of logical ports,
+       ACL rules, etc.). Thus, to improve scaling, each chassis should receive
+       only  data  related  to logical networks in which that chassis partici‐
+       pates.
+
+       The logical network data is ultimately controlled by the cloud  manage‐
+       ment  system  (CMS)  running northbound of OVN. That CMS determines the
+       entire OVN logical configuration and therefore the logical network data
+       at any given time is a deterministic function of the  CMS’s  configura‐
+       tion,  although that happens indirectly via the <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database
+       and <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>.
+
+       Logical network data is likely to change  more  quickly  than  physical
+       network  data. This is especially true in a container environment where
+       containers are created  and  destroyed  (and  therefore  added  to  and
+       deleted from logical switches) quickly.
+
+       The   <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>F</b><b>l</b><b>o</b><b>w</b>,   <b>M</b><b>u</b><b>l</b><b>t</b><b>i</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b>,   <b>A</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b>,   <b>D</b><b>H</b><b>C</b><b>P</b><b>_</b><b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>,
+       <b>D</b><b>H</b><b>C</b><b>P</b><b>v</b><b>6</b><b>_</b><b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>, and <b>D</b><b>N</b><b>S</b> tables contain logical network data.
+
+     <u>L</u><u>o</u><u>g</u><u>i</u><u>c</u><u>a</u><u>l</u><u>-</u><u>p</u><u>h</u><u>y</u><u>s</u><u>i</u><u>c</u><u>a</u><u>l</u> <u>b</u><u>i</u><u>n</u><u>d</u><u>i</u><u>n</u><u>g</u><u>s</u>
+
+       These tables link logical and physical components. They show  the  cur‐
+       rent  placement of logical components (such as VMs and VIFs) onto chas‐
+       sis, and map logical entities to the values that represent them in tun‐
+       nel encapsulations.
+
+       These tables change frequently, at least every time a VM powers  up  or
+       down  or  migrates,  and especially quickly in a container environment.
+       The amount of data per VM (or VIF) is small.
+
+       Each chassis is authoritative about the VMs and VIFs that it  hosts  at
+       any  given time and can efficiently flood that state to a central loca‐
+       tion, so the consistency needs are minimal.
+
+       The <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> and <b>D</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> tables contain binding data.
+
+     <u>M</u><u>A</u><u>C</u> <u>b</u><u>i</u><u>n</u><u>d</u><u>i</u><u>n</u><u>g</u><u>s</u>
+
+       The <b>M</b><b>A</b><b>C</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> table tracks the bindings from IP addresses to Ethernet
+       addresses that are dynamically discovered  using  ARP  (for  IPv4)  and
+       neighbor  discovery (for IPv6). Usually, IP-to-MAC bindings for virtual
+       machines are statically  populated  into  the  <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>  table,  so
+       <b>M</b><b>A</b><b>C</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>  is  primarily  used  to discover bindings on physical net‐
+       works.
+
+   <b>C</b><b>o</b><b>m</b><b>m</b><b>o</b><b>n</b> <b>C</b><b>o</b><b>l</b><b>u</b><b>m</b><b>n</b><b>s</b>
+       Some tables contain a special column named  <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>.  This  column
+       has  the  same  form  and purpose each place that it appears, so we de‐
+       scribe it here to save space later.
+
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+                     Key-value pairs for use by the software that manages  the
+                     OVN   Southbound   database   rather   than  by  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b>‐‐
+                     <b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>/<b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b><b>-</b><b>v</b><b>t</b><b>e</b><b>p</b>.  In  particular,  <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>
+                     can use key-value pairs in this column to relate entities
+                     in the southbound database to higher-level entities (such
+                     as  entities  in the OVN Northbound database). Individual
+                     key-value pairs in this column may be documented in  some
+                     cases  to  aid  in understanding and troubleshooting, but
+                     the reader should not mistake such documentation as  com‐
+                     prehensive.
+
+<b>T</b><b>A</b><b>B</b><b>L</b><b>E</b> <b>S</b><b>U</b><b>M</b><b>M</b><b>A</b><b>R</b><b>Y</b>
+       The  following list summarizes the purpose of each of the tables in the
+       <b>O</b><b>V</b><b>N</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database.  Each table is described in more detail  on  a
+       later page.
+
+       Table     Purpose
+       <b>S</b><b>B</b><b>_</b><b>G</b><b>l</b><b>o</b><b>b</b><b>a</b><b>l</b> Southbound configuration
+       <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>   Physical Network Hypervisor and Gateway Information
+       <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>P</b><b>r</b><b>i</b><b>v</b><b>a</b><b>t</b><b>e</b>
+                 Chassis Private
+       <b>E</b><b>n</b><b>c</b><b>a</b><b>p</b>     Encapsulation Types
+       <b>A</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>_</b><b>S</b><b>e</b><b>t</b>
+                 Address Sets
+       <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b>
+                 Port Groups
+       <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>F</b><b>l</b><b>o</b><b>w</b>
+                 Logical Network Flows
+       <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>D</b><b>P</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b>
+                 Logical Datapath Groups
+       <b>M</b><b>u</b><b>l</b><b>t</b><b>i</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b>
+                 Logical Port Multicast Groups
+       <b>M</b><b>i</b><b>r</b><b>r</b><b>o</b><b>r</b>    Mirror Entry
+       <b>M</b><b>e</b><b>t</b><b>e</b><b>r</b>     Meter entry
+       <b>M</b><b>e</b><b>t</b><b>e</b><b>r</b><b>_</b><b>B</b><b>a</b><b>n</b><b>d</b>
+                 Band for meter entries
+       <b>D</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>
+                 Physical-Logical Datapath Bindings
+       <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>
+                 Physical-Logical Port Bindings
+       <b>M</b><b>A</b><b>C</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>
+                 IP to MAC bindings
+       <b>D</b><b>H</b><b>C</b><b>P</b><b>_</b><b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+                 DHCP Options supported by native OVN DHCP
+       <b>D</b><b>H</b><b>C</b><b>P</b><b>v</b><b>6</b><b>_</b><b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+                 DHCPv6 Options supported by native OVN DHCPv6
+       <b>C</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>
+                 OVSDB client connections.
+       <b>S</b><b>S</b><b>L</b>       SSL configuration.
+       <b>D</b><b>N</b><b>S</b>       Native DNS resolution
+       <b>R</b><b>B</b><b>A</b><b>C</b><b>_</b><b>R</b><b>o</b><b>l</b><b>e</b> RBAC_Role configuration.
+       <b>R</b><b>B</b><b>A</b><b>C</b><b>_</b><b>P</b><b>e</b><b>r</b><b>m</b><b>i</b><b>s</b><b>s</b><b>i</b><b>o</b><b>n</b>
+                 RBAC_Permission configuration.
+       <b>G</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>_</b><b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>
+                 Gateway_Chassis configuration.
+       <b>H</b><b>A</b><b>_</b><b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>
+                 HA_Chassis configuration.
+       <b>H</b><b>A</b><b>_</b><b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b>
+                 HA_Chassis_Group configuration.
+       <b>C</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b><b>_</b><b>E</b><b>v</b><b>e</b><b>n</b><b>t</b>
+                 Controller Event table
+       <b>I</b><b>P</b><b>_</b><b>M</b><b>u</b><b>l</b><b>t</b><b>i</b><b>c</b><b>a</b><b>s</b><b>t</b>
+                 IP_Multicast configuration.
+       <b>I</b><b>G</b><b>M</b><b>P</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b>
+                 IGMP_Group configuration.
+       <b>S</b><b>e</b><b>r</b><b>v</b><b>i</b><b>c</b><b>e</b><b>_</b><b>M</b><b>o</b><b>n</b><b>i</b><b>t</b><b>o</b><b>r</b>
+                 Service_Monitor configuration.
+       <b>L</b><b>o</b><b>a</b><b>d</b><b>_</b><b>B</b><b>a</b><b>l</b><b>a</b><b>n</b><b>c</b><b>e</b><b>r</b>
+                 Load_Balancer configuration.
+       <b>B</b><b>F</b><b>D</b>       BFD configuration.
+       <b>F</b><b>D</b><b>B</b>       Port to MAC bindings
+       <b>S</b><b>t</b><b>a</b><b>t</b><b>i</b><b>c</b><b>_</b><b>M</b><b>A</b><b>C</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>
+                 IP to MAC bindings
+       <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>T</b><b>e</b><b>m</b><b>p</b><b>l</b><b>a</b><b>t</b><b>e</b><b>_</b><b>V</b><b>a</b><b>r</b>
+                 Chassis_Template_Var configuration.
+
+<b>S</b><b>B</b><b>_</b><b>G</b><b>l</b><b>o</b><b>b</b><b>a</b><b>l</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Southbound  configuration  for  an OVN system. This table must have ex‐
+       actly one row.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <u>S</u><u>t</u><u>a</u><u>t</u><u>u</u><u>s</u><u>:</u>
+         <b>n</b><b>b</b><b>_</b><b>c</b><b>f</b><b>g</b>                      integer
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>                     map of string-string pairs
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>                     map of string-string pairs
+         <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u> <u>f</u><u>o</u><u>r</u> <u>c</u><u>o</u><u>n</u><u>f</u><u>i</u><u>g</u><u>u</u><u>r</u><u>i</u><u>n</u><u>g</u> <u>B</u><u>F</u><u>D</u><u>:</u>
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>b</b><b>f</b><b>d</b><b>-</b><b>m</b><b>i</b><b>n</b><b>-</b><b>r</b><b>x</b>     optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>b</b><b>f</b><b>d</b><b>-</b><b>d</b><b>e</b><b>c</b><b>a</b><b>y</b><b>-</b><b>m</b><b>i</b><b>n</b><b>-</b><b>r</b><b>x</b>
+                                     optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>b</b><b>f</b><b>d</b><b>-</b><b>m</b><b>i</b><b>n</b><b>-</b><b>t</b><b>x</b>     optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>b</b><b>f</b><b>d</b><b>-</b><b>m</b><b>u</b><b>l</b><b>t</b>       optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>d</b><b>e</b><b>b</b><b>u</b><b>g</b><b>_</b><b>d</b><b>r</b><b>o</b><b>p</b><b>_</b><b>d</b><b>o</b><b>m</b><b>a</b><b>i</b><b>n</b><b>_</b><b>i</b><b>d</b>
+                                     optional string
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>d</b><b>e</b><b>b</b><b>u</b><b>g</b><b>_</b><b>d</b><b>r</b><b>o</b><b>p</b><b>_</b><b>c</b><b>o</b><b>l</b><b>l</b><b>e</b><b>c</b><b>t</b><b>o</b><b>r</b><b>_</b><b>s</b><b>e</b><b>t</b>
+                                     optional string
+         <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u> <u>f</u><u>o</u><u>r</u> <u>c</u><u>o</u><u>n</u><u>f</u><u>i</u><u>g</u><u>u</u><u>r</u><u>i</u><u>n</u><u>g</u> <u>L</u><u>o</u><u>a</u><u>d</u> <u>B</u><u>a</u><u>l</u><u>a</u><u>n</u><u>c</u><u>e</u><u>r</u><u>s</u><u>:</u>
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>l</b><b>b</b><b>_</b><b>h</b><b>a</b><b>i</b><b>r</b><b>p</b><b>i</b><b>n</b><b>_</b><b>u</b><b>s</b><b>e</b><b>_</b><b>c</b><b>t</b><b>_</b><b>m</b><b>a</b><b>r</b><b>k</b>
+                                     optional string
+         <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u> <u>f</u><u>o</u><u>r</u> <u>c</u><u>o</u><u>n</u><u>f</u><u>i</u><u>g</u><u>u</u><u>r</u><u>i</u><u>n</u><u>g</u> <u>o</u><u>v</u><u>n</u><u>-</u><u>s</u><u>b</u><u>c</u><u>t</u><u>l</u><u>:</u>
+            <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>s</b><b>b</b><b>c</b><b>t</b><b>l</b><b>_</b><b>p</b><b>r</b><b>o</b><b>b</b><b>e</b><b>_</b><b>i</b><b>n</b><b>t</b><b>e</b><b>r</b><b>v</b><b>a</b><b>l</b>
+                                     optional string
+       <u>C</u><u>o</u><u>n</u><u>n</u><u>e</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+         <b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>                 set of <b>C</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>s
+         <b>s</b><b>s</b><b>l</b>                         optional <b>S</b><b>S</b><b>L</b>
+       <u>S</u><u>e</u><u>c</u><u>u</u><u>r</u><u>i</u><u>t</u><u>y</u> <u>C</u><u>o</u><u>n</u><u>f</u><u>i</u><u>g</u><u>u</u><u>r</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+         <b>i</b><b>p</b><b>s</b><b>e</b><b>c</b>                       boolean
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+     <u>S</u><u>t</u><u>a</u><u>t</u><u>u</u><u>s</u><u>:</u>
+
+       This column allow a client to track the overall configuration state  of
+       the system.
+
+       <b>n</b><b>b</b><b>_</b><b>c</b><b>f</b><b>g</b>: integer
+              Sequence  number  for the configuration. When a CMS or <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>b</b><b>c</b><b>t</b><b>l</b>
+              updates the northbound database, it increments the <b>n</b><b>b</b><b>_</b><b>c</b><b>f</b><b>g</b> column
+              in the <b>N</b><b>B</b><b>_</b><b>G</b><b>l</b><b>o</b><b>b</b><b>a</b><b>l</b> table in the northbound database. In turn, when
+              <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> updates the southbound database to  bring  it  up  to
+              date  with  these  changes,  it  updates this column to the same
+              value.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+              See <b>E</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> <b>I</b><b>D</b><b>s</b> at the beginning of this document.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>: map of string-string pairs
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>: map of string-string pairs
+              This column provides general key/value settings.  The  supported
+              options are described individually below.
+
+     <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u> <u>f</u><u>o</u><u>r</u> <u>c</u><u>o</u><u>n</u><u>f</u><u>i</u><u>g</u><u>u</u><u>r</u><u>i</u><u>n</u><u>g</u> <u>B</u><u>F</u><u>D</u><u>:</u>
+
+       These  options  apply when <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> configures BFD on tunnels in‐
+       terfaces.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>b</b><b>f</b><b>d</b><b>-</b><b>m</b><b>i</b><b>n</b><b>-</b><b>r</b><b>x</b>: optional string
+              BFD option <b>m</b><b>i</b><b>n</b><b>-</b><b>r</b><b>x</b> value to use when configuring  BFD  on  tunnel
+              interfaces.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>b</b><b>f</b><b>d</b><b>-</b><b>d</b><b>e</b><b>c</b><b>a</b><b>y</b><b>-</b><b>m</b><b>i</b><b>n</b><b>-</b><b>r</b><b>x</b>: optional string
+              BFD  option  <b>d</b><b>e</b><b>c</b><b>a</b><b>y</b><b>-</b><b>m</b><b>i</b><b>n</b><b>-</b><b>r</b><b>x</b>  value  to use when configuring BFD on
+              tunnel interfaces.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>b</b><b>f</b><b>d</b><b>-</b><b>m</b><b>i</b><b>n</b><b>-</b><b>t</b><b>x</b>: optional string
+              BFD option <b>m</b><b>i</b><b>n</b><b>-</b><b>t</b><b>x</b> value to use when configuring  BFD  on  tunnel
+              interfaces.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>b</b><b>f</b><b>d</b><b>-</b><b>m</b><b>u</b><b>l</b><b>t</b>: optional string
+              BFD  option <b>m</b><b>u</b><b>l</b><b>t</b> value to use when configuring BFD on tunnel in‐
+              terfaces.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>d</b><b>e</b><b>b</b><b>u</b><b>g</b><b>_</b><b>d</b><b>r</b><b>o</b><b>p</b><b>_</b><b>d</b><b>o</b><b>m</b><b>a</b><b>i</b><b>n</b><b>_</b><b>i</b><b>d</b>: optional string
+              If set to a 8-bit number and if <b>d</b><b>e</b><b>b</b><b>u</b><b>g</b><b>_</b><b>d</b><b>r</b><b>o</b><b>p</b><b>_</b><b>c</b><b>o</b><b>l</b><b>l</b><b>e</b><b>c</b><b>t</b><b>o</b><b>r</b><b>_</b><b>s</b><b>e</b><b>t</b> is also
+              configured, <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> will add a  <b>s</b><b>a</b><b>m</b><b>p</b><b>l</b><b>e</b>  action  to  every
+              flow  that  does  not  come  from a logical flow that contains a
+              ’drop’ action. The 8  most  significant  bits  of  the  observa‐
+              tion_domain_id  field  will  be  those  specified  in  the   <b>d</b><b>e</b>‐‐
+              <b>b</b><b>u</b><b>g</b><b>_</b><b>d</b><b>r</b><b>o</b><b>p</b><b>_</b><b>d</b><b>o</b><b>m</b><b>a</b><b>i</b><b>n</b><b>_</b><b>i</b><b>d</b>. The 24 least significant bits of the  obser‐
+              vation_domain_id field will be zero.
+
+              The  observation_point_id will be set to the OpenFlow table num‐
+              ber.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>d</b><b>e</b><b>b</b><b>u</b><b>g</b><b>_</b><b>d</b><b>r</b><b>o</b><b>p</b><b>_</b><b>c</b><b>o</b><b>l</b><b>l</b><b>e</b><b>c</b><b>t</b><b>o</b><b>r</b><b>_</b><b>s</b><b>e</b><b>t</b>: optional string
+              If set to a 32-bit number <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> will add a  <b>s</b><b>a</b><b>m</b><b>p</b><b>l</b><b>e</b>  ac‐
+              tion  to  every flow that does not come from a logical flow that
+              contains a ’drop’ action. The sample action will have the speci‐
+              fied collector_set_id. The value must match that  of  the  local
+              OVS configuration as described in <b>o</b><b>v</b><b>s</b><b>-</b><b>a</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>(7).
+
+     <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u> <u>f</u><u>o</u><u>r</u> <u>c</u><u>o</u><u>n</u><u>f</u><u>i</u><u>g</u><u>u</u><u>r</u><u>i</u><u>n</u><u>g</u> <u>L</u><u>o</u><u>a</u><u>d</u> <u>B</u><u>a</u><u>l</u><u>a</u><u>n</u><u>c</u><u>e</u><u>r</u><u>s</u><u>:</u>
+
+       These  options  apply  when <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> configures load balancer re‐
+       lated flows.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>l</b><b>b</b><b>_</b><b>h</b><b>a</b><b>i</b><b>r</b><b>p</b><b>i</b><b>n</b><b>_</b><b>u</b><b>s</b><b>e</b><b>_</b><b>c</b><b>t</b><b>_</b><b>m</b><b>a</b><b>r</b><b>k</b>: optional string
+              By default this option is turned on (even if not present in  the
+              database)  unless  its  value  is  explicitly set to <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>. This
+              value is automatically set to <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b> by  <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>  when  action
+              <b>c</b><b>t</b><b>_</b><b>l</b><b>b</b><b>_</b><b>m</b><b>a</b><b>r</b><b>k</b> cannot be used for new load balancer sessions and ac‐
+              tion  <b>c</b><b>t</b><b>_</b><b>l</b><b>b</b> will be used instead. <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> then knows that
+              it should check <b>c</b><b>t</b><b>_</b><b>l</b><b>a</b><b>b</b><b>e</b><b>l</b><b>.</b><b>n</b><b>a</b><b>t</b><b>t</b><b>e</b><b>d</b> to detect load balanced traffic.
+
+     <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u> <u>f</u><u>o</u><u>r</u> <u>c</u><u>o</u><u>n</u><u>f</u><u>i</u><u>g</u><u>u</u><u>r</u><u>i</u><u>n</u><u>g</u> <u>o</u><u>v</u><u>n</u><u>-</u><u>s</u><u>b</u><u>c</u><u>t</u><u>l</u><u>:</u>
+
+       These options apply when <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b><b>c</b><b>t</b><b>l</b> connects to OVN Southbound database.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>s</b><b>b</b><b>c</b><b>t</b><b>l</b><b>_</b><b>p</b><b>r</b><b>o</b><b>b</b><b>e</b><b>_</b><b>i</b><b>n</b><b>t</b><b>e</b><b>r</b><b>v</b><b>a</b><b>l</b>: optional string
+              The inactivity probe interval  of  the  connection  to  the  OVN
+              Southbound  database from <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b><b>c</b><b>t</b><b>l</b> utility, in milliseconds. If
+              the value is zero, it disables the connection keepalive feature.
+
+              If the value is nonzero, then it will be forced to a value of at
+              least 1000 ms.
+
+              If the value is less than  zero,  then  the  default  inactivity
+              probe interval for <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b><b>c</b><b>t</b><b>l</b> would be left intact (120000 ms).
+
+     <u>C</u><u>o</u><u>n</u><u>n</u><u>e</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       <b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>: set of <b>C</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>s
+              Database  clients  to  which  the  Open  vSwitch database server
+              should connect or on which it should listen, along with  options
+              for  how these connections should be configured. See the <b>C</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b>‐‐
+              <b>t</b><b>i</b><b>o</b><b>n</b> table for more information.
+
+       <b>s</b><b>s</b><b>l</b>: optional <b>S</b><b>S</b><b>L</b>
+              Global SSL configuration.
+
+     <u>S</u><u>e</u><u>c</u><u>u</u><u>r</u><u>i</u><u>t</u><u>y</u> <u>C</u><u>o</u><u>n</u><u>f</u><u>i</u><u>g</u><u>u</u><u>r</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       <b>i</b><b>p</b><b>s</b><b>e</b><b>c</b>: boolean
+              Tunnel encryption configuration. If this column  is  set  to  be
+              true, all OVN tunnels will be encrypted with IPsec.
+
+<b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Each  row  in this table represents a hypervisor or gateway (a chassis)
+       in the physical  network.  Each  chassis,  via  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>/<b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b>‐‐
+       <b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b><b>-</b><b>v</b><b>t</b><b>e</b><b>p</b>, adds and updates its own row, and keeps a copy of the re‐
+       maining rows to determine how to reach other hypervisors.
+
+       When  a  chassis  shuts  down gracefully, it should remove its own row.
+       (This is not critical because  resources  hosted  on  the  chassis  are
+       equally  unreachable  regardless  of  whether the row is present.) If a
+       chassis shuts down permanently without removing its row, some  kind  of
+       manual  or  automatic  cleanup  is  eventually  needed; we can devise a
+       process for that as necessary.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>                          string (must be unique within table)
+       <b>h</b><b>o</b><b>s</b><b>t</b><b>n</b><b>a</b><b>m</b><b>e</b>                      string
+       <b>n</b><b>b</b><b>_</b><b>c</b><b>f</b><b>g</b>                        integer
+       <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>o</b><b>v</b><b>n</b><b>-</b><b>b</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b><b>-</b><b>m</b><b>a</b><b>p</b><b>p</b><b>i</b><b>n</b><b>g</b><b>s</b>
+                                     optional string
+       <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>-</b><b>t</b><b>y</b><b>p</b><b>e</b>  optional string
+       <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>i</b><b>f</b><b>a</b><b>c</b><b>e</b><b>-</b><b>t</b><b>y</b><b>p</b><b>e</b><b>s</b>    optional string
+       <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>m</b><b>s</b><b>-</b><b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+                                     optional string
+       <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>i</b><b>s</b><b>-</b><b>i</b><b>n</b><b>t</b><b>e</b><b>r</b><b>c</b><b>o</b><b>n</b><b>n</b>   optional string
+       <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>i</b><b>s</b><b>-</b><b>r</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b>      optional string
+       <b>t</b><b>r</b><b>a</b><b>n</b><b>s</b><b>p</b><b>o</b><b>r</b><b>t</b><b>_</b><b>z</b><b>o</b><b>n</b><b>e</b><b>s</b>               set of strings
+       <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>-</b><b>m</b><b>a</b><b>c</b><b>-</b><b>m</b><b>a</b><b>p</b><b>p</b><b>i</b><b>n</b><b>g</b><b>s</b>
+                                     optional string
+       <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>p</b><b>o</b><b>r</b><b>t</b><b>-</b><b>u</b><b>p</b><b>-</b><b>n</b><b>o</b><b>t</b><b>i</b><b>f</b>  optional string
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+       <u>E</u><u>n</u><u>c</u><u>a</u><u>p</u><u>s</u><u>u</u><u>l</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>n</u><u>f</u><u>i</u><u>g</u><u>u</u><u>r</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u><u>:</u>
+         <b>e</b><b>n</b><b>c</b><b>a</b><b>p</b><b>s</b>                      set of 1 or more <b>E</b><b>n</b><b>c</b><b>a</b><b>p</b>s
+       <u>G</u><u>a</u><u>t</u><u>e</u><u>w</u><u>a</u><u>y</u> <u>C</u><u>o</u><u>n</u><u>f</u><u>i</u><u>g</u><u>u</u><u>r</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u><u>:</u>
+         <b>v</b><b>t</b><b>e</b><b>p</b><b>_</b><b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>e</b><b>s</b>       set of strings
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>: string (must be unique within table)
+              OVN does not prescribe a particular format  for  chassis  names.
+              ovn-controller  populates this column using <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>s</b><b>y</b><b>s</b><b>t</b><b>e</b><b>m</b><b>-</b>
+              <b>i</b><b>d</b> in the Open_vSwitch database’s <b>O</b><b>p</b><b>e</b><b>n</b><b>_</b><b>v</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b>  table.  ovn-con‐
+              troller-vtep  populates  this  column  with  <b>n</b><b>a</b><b>m</b><b>e</b>  in  the hard‐
+              ware_vtep database’s <b>P</b><b>h</b><b>y</b><b>s</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b> table.
+
+       <b>h</b><b>o</b><b>s</b><b>t</b><b>n</b><b>a</b><b>m</b><b>e</b>: string
+              The hostname of the chassis, if applicable. ovn-controller  will
+              populate this column with the hostname of the host it is running
+              on. ovn-controller-vtep will leave this column empty.
+
+       <b>n</b><b>b</b><b>_</b><b>c</b><b>f</b><b>g</b>: integer
+              Deprecated.  This column is replaced by the <b>n</b><b>b</b><b>_</b><b>c</b><b>f</b><b>g</b> column of the
+              <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>P</b><b>r</b><b>i</b><b>v</b><b>a</b><b>t</b><b>e</b> table.
+
+       <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>o</b><b>v</b><b>n</b><b>-</b><b>b</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b><b>-</b><b>m</b><b>a</b><b>p</b><b>p</b><b>i</b><b>n</b><b>g</b><b>s</b>: optional string
+              <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> populates this key with the set  of  bridge  map‐
+              pings  it  has been configured to use. Other applications should
+              treat this key as read-only. See <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>(8) for more  in‐
+              formation.
+
+       <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>-</b><b>t</b><b>y</b><b>p</b><b>e</b>: optional string
+              <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> populates this key with the datapath type config‐
+              ured  in the <b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>t</b><b>y</b><b>p</b><b>e</b> column of the Open_vSwitch database’s
+              <b>B</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b> table. Other applications should treat this key as  read-
+              only. See <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>(8) for more information.
+
+       <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>i</b><b>f</b><b>a</b><b>c</b><b>e</b><b>-</b><b>t</b><b>y</b><b>p</b><b>e</b><b>s</b>: optional string
+              <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>  populates this key with the interface types con‐
+              figured in the <b>i</b><b>f</b><b>a</b><b>c</b><b>e</b><b>_</b><b>t</b><b>y</b><b>p</b><b>e</b><b>s</b> column of the Open_vSwitch database’s
+              <b>O</b><b>p</b><b>e</b><b>n</b><b>_</b><b>v</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b> table. Other applications should treat this key  as
+              read-only. See <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>(8) for more information.
+
+       <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>m</b><b>s</b><b>-</b><b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>: optional string
+              <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>  populates  this key with the set of options con‐
+              figured  in  the  <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>m</b><b>s</b><b>-</b><b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>  column  of   the
+              Open_vSwitch   database’s   <b>O</b><b>p</b><b>e</b><b>n</b><b>_</b><b>v</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b>   table.  See  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b>‐‐
+              <b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>(8) for more information.
+
+       <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>i</b><b>s</b><b>-</b><b>i</b><b>n</b><b>t</b><b>e</b><b>r</b><b>c</b><b>o</b><b>n</b><b>n</b>: optional string
+              <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> populates this key with the setting configured in
+              the <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>s</b><b>-</b><b>i</b><b>n</b><b>t</b><b>e</b><b>r</b><b>c</b><b>o</b><b>n</b><b>n</b>  column  of  the  Open_vSwitch
+              database’s  <b>O</b><b>p</b><b>e</b><b>n</b><b>_</b><b>v</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b>  table.  If set to true, the chassis is
+              used as an interconnection gateway.  See  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>(8)  for
+              more information.
+
+       <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>i</b><b>s</b><b>-</b><b>r</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b>: optional string
+              <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b>  set  this key to true for remote interconnection gateway
+              chassises learned from the interconnection southbound  database.
+              See <b>o</b><b>v</b><b>n</b><b>-</b><b>i</b><b>c</b>(8) for more information.
+
+       <b>t</b><b>r</b><b>a</b><b>n</b><b>s</b><b>p</b><b>o</b><b>r</b><b>t</b><b>_</b><b>z</b><b>o</b><b>n</b><b>e</b><b>s</b>: set of strings
+              <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>  populates this key with the transport zones con‐
+              figured in the <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>t</b><b>r</b><b>a</b><b>n</b><b>s</b><b>p</b><b>o</b><b>r</b><b>t</b><b>-</b><b>z</b><b>o</b><b>n</b><b>e</b><b>s</b>  column  of  the
+              Open_vSwitch   database’s   <b>O</b><b>p</b><b>e</b><b>n</b><b>_</b><b>v</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b>   table.  See  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b>‐‐
+              <b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>(8) for more information.
+
+       <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>-</b><b>m</b><b>a</b><b>c</b><b>-</b><b>m</b><b>a</b><b>p</b><b>p</b><b>i</b><b>n</b><b>g</b><b>s</b>: optional string
+              <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> populates this key with the set of  options  con‐
+              figured  in  the <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>-</b><b>m</b><b>a</b><b>c</b><b>-</b><b>m</b><b>a</b><b>p</b><b>p</b><b>i</b><b>n</b><b>g</b><b>s</b> column of
+              the Open_vSwitch database’s  <b>O</b><b>p</b><b>e</b><b>n</b><b>_</b><b>v</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b>  table.  See  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b>‐‐
+              <b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>(8) for more information.
+
+       <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b> <b>:</b> <b>p</b><b>o</b><b>r</b><b>t</b><b>-</b><b>u</b><b>p</b><b>-</b><b>n</b><b>o</b><b>t</b><b>i</b><b>f</b>: optional string
+              <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>  populates  this  key  with <b>t</b><b>r</b><b>u</b><b>e</b> when it supports
+              <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b><b>.</b><b>u</b><b>p</b>.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       The overall purpose of these columns is described under <b>C</b><b>o</b><b>m</b><b>m</b><b>o</b><b>n</b>  <b>C</b><b>o</b><b>l</b><b>u</b><b>m</b><b>n</b><b>s</b>
+       at the beginning of this document.
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+
+     <u>E</u><u>n</u><u>c</u><u>a</u><u>p</u><u>s</u><u>u</u><u>l</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>n</u><u>f</u><u>i</u><u>g</u><u>u</u><u>r</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u><u>:</u>
+
+       OVN  uses  encapsulation  to transmit logical dataplane packets between
+       chassis.
+
+       <b>e</b><b>n</b><b>c</b><b>a</b><b>p</b><b>s</b>: set of 1 or more <b>E</b><b>n</b><b>c</b><b>a</b><b>p</b>s
+              Points to supported  encapsulation  configurations  to  transmit
+              logical dataplane packets to this chassis. Each entry is a <b>E</b><b>n</b><b>c</b><b>a</b><b>p</b>
+              record that describes the configuration.
+
+     <u>G</u><u>a</u><u>t</u><u>e</u><u>w</u><u>a</u><u>y</u> <u>C</u><u>o</u><u>n</u><u>f</u><u>i</u><u>g</u><u>u</u><u>r</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u><u>:</u>
+
+       A  <u>g</u><u>a</u><u>t</u><u>e</u><u>w</u><u>a</u><u>y</u>  is  a chassis that forwards traffic between the OVN-managed
+       part of a logical network and a physical VLAN, extending a tunnel-based
+       logical network into a physical network. Gateways are  typically  dedi‐
+       cated  nodes  that  do  not host VMs and will be controlled by <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b>‐‐
+       <b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b><b>-</b><b>v</b><b>t</b><b>e</b><b>p</b>.
+
+       <b>v</b><b>t</b><b>e</b><b>p</b><b>_</b><b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>e</b><b>s</b>: set of strings
+              Stores all VTEP logical switch names connected by  this  gateway
+              chassis.  The  <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> table entry with <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>:<b>v</b><b>t</b><b>e</b><b>p</b><b>-</b><b>p</b><b>h</b><b>y</b><b>s</b><b>i</b>‐‐
+              <b>c</b><b>a</b><b>l</b><b>-</b><b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b> equal <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> <b>n</b><b>a</b><b>m</b><b>e</b>,  and  <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>:<b>v</b><b>t</b><b>e</b><b>p</b><b>-</b><b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>-</b><b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b>
+              value  in <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> <b>v</b><b>t</b><b>e</b><b>p</b><b>_</b><b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>e</b><b>s</b>, will be associated with
+              this <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>.
+
+<b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>P</b><b>r</b><b>i</b><b>v</b><b>a</b><b>t</b><b>e</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Each row in this table maintains per chassis private data that are  ac‐
+       cessed  only  by the owning chassis (write only) and ovn-northd, not by
+       any other chassis. These data are stored in this separate table instead
+       of the <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> table for performance considerations: the rows  in  this
+       table  can be conditionally monitored by chassises so that each chassis
+       only get update notifications for its own  row,  to  avoid  unnecessary
+       chassis private data update flooding in a large scale deployment.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>                          string (must be unique within table)
+       <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>                       optional weak reference to <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>
+       <b>n</b><b>b</b><b>_</b><b>c</b><b>f</b><b>g</b>                        integer
+       <b>n</b><b>b</b><b>_</b><b>c</b><b>f</b><b>g</b><b>_</b><b>t</b><b>i</b><b>m</b><b>e</b><b>s</b><b>t</b><b>a</b><b>m</b><b>p</b>              integer
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>: string (must be unique within table)
+              The name of the chassis that owns these chassis-private data.
+
+       <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>: optional weak reference to <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>
+              The  reference  to <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> table for the chassis that owns these
+              chassis-private data.
+
+       <b>n</b><b>b</b><b>_</b><b>c</b><b>f</b><b>g</b>: integer
+              Sequence number for the configuration. When  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>  up‐
+              dates  the  configuration  of a chassis from the contents of the
+              southbound database, it copies <b>n</b><b>b</b><b>_</b><b>c</b><b>f</b><b>g</b> from the  <b>S</b><b>B</b><b>_</b><b>G</b><b>l</b><b>o</b><b>b</b><b>a</b><b>l</b>  table
+              into this column.
+
+       <b>n</b><b>b</b><b>_</b><b>c</b><b>f</b><b>g</b><b>_</b><b>t</b><b>i</b><b>m</b><b>e</b><b>s</b><b>t</b><b>a</b><b>m</b><b>p</b>: integer
+              The timestamp when <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> finishes processing the change
+              corresponding to <b>n</b><b>b</b><b>_</b><b>c</b><b>f</b><b>g</b>.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       The  overall purpose of these columns is described under <b>C</b><b>o</b><b>m</b><b>m</b><b>o</b><b>n</b> <b>C</b><b>o</b><b>l</b><b>u</b><b>m</b><b>n</b><b>s</b>
+       at the beginning of this document.
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+<b>E</b><b>n</b><b>c</b><b>a</b><b>p</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       The <b>e</b><b>n</b><b>c</b><b>a</b><b>p</b><b>s</b> column in the <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> table refers to rows in this table  to
+       identify  how  OVN may transmit logical dataplane packets to this chas‐
+       sis. Each chassis,  via  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>(8)  or  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b><b>-</b><b>v</b><b>t</b><b>e</b><b>p</b>(8),
+       adds and updates its own rows and keeps a copy of the remaining rows to
+       determine how to reach other chassis.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>t</b><b>y</b><b>p</b><b>e</b>                          string, one of <b>g</b><b>e</b><b>n</b><b>e</b><b>v</b><b>e</b>, <b>s</b><b>t</b><b>t</b>, or <b>v</b><b>x</b><b>l</b><b>a</b><b>n</b>
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>                       map of string-string pairs
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>c</b><b>s</b><b>u</b><b>m</b>                optional string, either <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>d</b><b>s</b><b>t</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>            optional string, containing an integer
+       <b>i</b><b>p</b>                            string
+       <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b>                  string
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>t</b><b>y</b><b>p</b><b>e</b>: string, one of <b>g</b><b>e</b><b>n</b><b>e</b><b>v</b><b>e</b>, <b>s</b><b>t</b><b>t</b>, or <b>v</b><b>x</b><b>l</b><b>a</b><b>n</b>
+              The  encapsulation  to  use to transmit packets to this chassis.
+              Hypervisors and gateways must use one of: <b>g</b><b>e</b><b>n</b><b>e</b><b>v</b><b>e</b>, <b>v</b><b>x</b><b>l</b><b>a</b><b>n</b>, or <b>s</b><b>t</b><b>t</b>.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>: map of string-string pairs
+              Options for configuring the encapsulation,  which  may  be  <b>t</b><b>y</b><b>p</b><b>e</b>
+              specific.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>c</b><b>s</b><b>u</b><b>m</b>: optional string, either <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+              <b>c</b><b>s</b><b>u</b><b>m</b>  indicates  whether  this  chassis can transmit and receive
+              packets that include checksums with reasonable  performance.  It
+              hints  to  senders  transmitting  data to this chassis that they
+              should use checksums to  protect  OVN  metadata.  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>
+              populates  this  key with the value defined in <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b>
+              <b>e</b><b>n</b><b>c</b><b>a</b><b>p</b><b>-</b><b>c</b><b>s</b><b>u</b><b>m</b> column of the  Open_vSwitch  database’s  <b>O</b><b>p</b><b>e</b><b>n</b><b>_</b><b>v</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b>
+              table.  Other  applications  should treat this key as read-only.
+              See <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>(8) for more information.
+
+              In terms of performance, checksumming actually significantly in‐
+              creases throughput in most common cases when  running  on  Linux
+              based  hosts  without NICs supporting encapsulation hardware of‐
+              fload (around 60% for bulk traffic). The reason is  that  gener‐
+              ally all NICs are capable of offloading transmitted and received
+              TCP/UDP  checksums  (viewed  as ordinary data packets and not as
+              tunnels). The benefit comes on the receive side where the  vali‐
+              dated outer checksum can be used to additionally validate an in‐
+              ner  checksum (such as TCP), which in turn allows aggregation of
+              packets to be more efficiently handled by the rest of the stack.
+
+              Not all devices see such a benefit. The most  notable  exception
+              is  hardware VTEPs. These devices are designed to not buffer en‐
+              tire packets in their switching engines and are therefore unable
+              to efficiently compute or validate full packet checksums. In ad‐
+              dition certain versions of the Linux  kernel  are  not  able  to
+              fully  take advantage of encapsulation NIC offloads in the pres‐
+              ence of checksums. (This is actually a pretty narrow corner case
+              though: earlier versions of Linux  don’t  support  encapsulation
+              offloads  at  all  and  later versions support both offloads and
+              checksums well.)
+
+              <b>c</b><b>s</b><b>u</b><b>m</b> defaults to <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b> for hardware VTEPs and <b>t</b><b>r</b><b>u</b><b>e</b> for all other
+              cases.
+
+              This option applies to <b>g</b><b>e</b><b>n</b><b>e</b><b>v</b><b>e</b> and <b>v</b><b>x</b><b>l</b><b>a</b><b>n</b> encapsulations.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>d</b><b>s</b><b>t</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>: optional string, containing an integer
+              If set, overrides the UDP (for <b>g</b><b>e</b><b>n</b><b>e</b><b>v</b><b>e</b> and  <b>v</b><b>x</b><b>l</b><b>a</b><b>n</b>)  or  TCP  (for
+              <b>s</b><b>t</b><b>t</b>) destination port.
+
+       <b>i</b><b>p</b>: string
+              The IPv4 address of the encapsulation tunnel endpoint.
+
+       <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b>: string
+              The name of the chassis that created this encap.
+
+<b>A</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>_</b><b>S</b><b>e</b><b>t</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       This  table  contains address sets synced from the <b>A</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>_</b><b>S</b><b>e</b><b>t</b> table in
+       the  <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b>  database  and  address  sets  generated  from  the
+       <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b> table in the <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database.
+
+       See the documentation for the <b>A</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>_</b><b>S</b><b>e</b><b>t</b> table and <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b> table in
+       the <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database for details.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>                          string (must be unique within table)
+       <b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>e</b><b>s</b>                     set of strings
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>: string (must be unique within table)
+
+       <b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>e</b><b>s</b>: set of strings
+<b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       This  table  contains  names  for  the  logical  switch  ports  in  the
+       <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database that belongs to the same group that is  defined
+       in <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b> in the <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>                          string (must be unique within table)
+       <b>p</b><b>o</b><b>r</b><b>t</b><b>s</b>                         set of strings
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>: string (must be unique within table)
+
+       <b>p</b><b>o</b><b>r</b><b>t</b><b>s</b>: set of strings
+<b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>F</b><b>l</b><b>o</b><b>w</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Each  row  in  this table represents one logical flow. <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> popu‐
+       lates this table with logical  flows  that  implement  the  L2  and  L3
+       topologies  specified  in the <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database. Each hypervisor,
+       via <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>, translates the logical flows  into  OpenFlow  flows
+       specific to its hypervisor and installs them into Open vSwitch.
+
+       Logical  flows are expressed in an OVN-specific format, described here.
+       A logical datapath flow is much like an OpenFlow flow, except that  the
+       flows  are  written in terms of logical ports and logical datapaths in‐
+       stead of physical ports and  physical  datapaths.  Translation  between
+       logical  and  physical  flows helps to ensure isolation between logical
+       datapaths. (The logical flow abstraction also allows the  OVN  central‐
+       ized  components  to do less work, since they do not have to separately
+       compute and push out physical flows to each chassis.)
+
+       The default action when no flow matches is to drop packets.
+
+       <b>A</b><b>r</b><b>c</b><b>h</b><b>i</b><b>t</b><b>e</b><b>c</b><b>t</b><b>u</b><b>r</b><b>a</b><b>l</b> <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b> <b>L</b><b>i</b><b>f</b><b>e</b> <b>C</b><b>y</b><b>c</b><b>l</b><b>e</b> <b>o</b><b>f</b> <b>a</b> <b>P</b><b>a</b><b>c</b><b>k</b><b>e</b><b>t</b>
+
+       This following description focuses  on  the  life  cycle  of  a  packet
+       through  a logical datapath, ignoring physical details of the implemen‐
+       tation. Please refer to <b>A</b><b>r</b><b>c</b><b>h</b><b>i</b><b>t</b><b>e</b><b>c</b><b>t</b><b>u</b><b>r</b><b>a</b><b>l</b> <b>P</b><b>h</b><b>y</b><b>s</b><b>i</b><b>c</b><b>a</b><b>l</b> <b>L</b><b>i</b><b>f</b><b>e</b> <b>C</b><b>y</b><b>c</b><b>l</b><b>e</b> <b>o</b><b>f</b>  <b>a</b>  <b>P</b><b>a</b><b>c</b><b>k</b><b>e</b><b>t</b>
+       in <b>o</b><b>v</b><b>n</b><b>-</b><b>a</b><b>r</b><b>c</b><b>h</b><b>i</b><b>t</b><b>e</b><b>c</b><b>t</b><b>u</b><b>r</b><b>e</b>(7) for the physical information.
+
+       The  description here is written as if OVN itself executes these steps,
+       but in fact OVN (that is, <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>) programs  Open  vSwitch,  via
+       OpenFlow and OVSDB, to execute them on its behalf.
+
+       At  a high level, OVN passes each packet through the logical datapath’s
+       logical ingress pipeline, which may output the packet to  one  or  more
+       logical  port or logical multicast groups. For each such logical output
+       port, OVN passes the  packet  through  the  datapath’s  logical  egress
+       pipeline,  which may either drop the packet or deliver it to the desti‐
+       nation. Between the two pipelines, outputs to logical multicast  groups
+       are  expanded  into  logical  ports,  so  that the egress pipeline only
+       processes a single logical output port  at  a  time.  Between  the  two
+       pipelines is also where, when necessary, OVN encapsulates a packet in a
+       tunnel (or tunnels) to transmit to remote hypervisors.
+
+       In more detail, to start, OVN searches the <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>F</b><b>l</b><b>o</b><b>w</b> table for a row
+       with  correct  <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b>  or  a  <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>d</b><b>p</b><b>_</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b>, a <b>p</b><b>i</b><b>p</b><b>e</b><b>l</b><b>i</b><b>n</b><b>e</b> of
+       <b>i</b><b>n</b><b>g</b><b>r</b><b>e</b><b>s</b><b>s</b>, a <b>t</b><b>a</b><b>b</b><b>l</b><b>e</b><b>_</b><b>i</b><b>d</b> of 0, and a <b>m</b><b>a</b><b>t</b><b>c</b><b>h</b> that is true for the  packet.  If
+       none  is  found,  OVN  drops the packet. If OVN finds more than one, it
+       chooses the match with the highest <b>p</b><b>r</b><b>i</b><b>o</b><b>r</b><b>i</b><b>t</b><b>y</b>. Then OVN executes each  of
+       the  actions specified in the row’s <b>a</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> column, in the order speci‐
+       fied. Some actions, such as those to modify packet headers, require  no
+       further details. The <b>n</b><b>e</b><b>x</b><b>t</b> and <b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b> actions are special.
+
+       The  <b>n</b><b>e</b><b>x</b><b>t</b>  action  causes the above process to be repeated recursively,
+       except that OVN searches for <b>t</b><b>a</b><b>b</b><b>l</b><b>e</b><b>_</b><b>i</b><b>d</b> of 1 instead of 0. Similarly, any
+       <b>n</b><b>e</b><b>x</b><b>t</b> action in a row found in that table would cause a  further  search
+       for  a  <b>t</b><b>a</b><b>b</b><b>l</b><b>e</b><b>_</b><b>i</b><b>d</b>  of 2, and so on. When recursive processing completes,
+       flow control returns to the action following <b>n</b><b>e</b><b>x</b><b>t</b>.
+
+       The <b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b> action also introduces recursion. Its effect depends on  the
+       current  value of the <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> field. Suppose <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> designates a logi‐
+       cal port. First, OVN compares <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> to <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b>; if they are equal,  it
+       treats the <b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b> as a no-op by default. In the common case, where they
+       are  different,  the packet enters the egress pipeline. This transition
+       to the egress pipeline discards register data, e.g. <b>r</b><b>e</b><b>g</b><b>0</b> ...  <b>r</b><b>e</b><b>g</b><b>9</b>  and
+       connection  tracking  state,  to achieve uniform behavior regardless of
+       whether the egress pipeline is on a different hypervisor (because  reg‐
+       isters aren’t preserve across tunnel encapsulation).
+
+       To execute the egress pipeline, OVN again searches the <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>F</b><b>l</b><b>o</b><b>w</b> ta‐
+       ble  for  a  row with correct <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b> or a <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>d</b><b>p</b><b>_</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b>, a
+       <b>t</b><b>a</b><b>b</b><b>l</b><b>e</b><b>_</b><b>i</b><b>d</b> of 0, a <b>m</b><b>a</b><b>t</b><b>c</b><b>h</b> that is true for the packet, but now looking for
+       a <b>p</b><b>i</b><b>p</b><b>e</b><b>l</b><b>i</b><b>n</b><b>e</b> of <b>e</b><b>g</b><b>r</b><b>e</b><b>s</b><b>s</b>. If no matching row is found, the output becomes a
+       no-op. Otherwise, OVN executes the actions for the matching flow (which
+       is chosen from multiple, if necessary, as already described).
+
+       In the <b>e</b><b>g</b><b>r</b><b>e</b><b>s</b><b>s</b> pipeline, the <b>n</b><b>e</b><b>x</b><b>t</b> action acts as already described,  ex‐
+       cept  that it, of course, searches for <b>e</b><b>g</b><b>r</b><b>e</b><b>s</b><b>s</b> flows. The <b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b> action,
+       however, now directly outputs the packet to the output port  (which  is
+       now fixed, because <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> is read-only within the egress pipeline).
+
+       The  description  earlier  assumed  that  <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> referred to a logical
+       port. If it instead designates a logical multicast group, then the  de‐
+       scription  above  still  applies, with the addition of fan-out from the
+       logical multicast group to each logical port in  the  group.  For  each
+       member  of  the  group, OVN executes the logical pipeline as described,
+       with the logical output port replaced by the group member.
+
+       <b>P</b><b>i</b><b>p</b><b>e</b><b>l</b><b>i</b><b>n</b><b>e</b> <b>S</b><b>t</b><b>a</b><b>g</b><b>e</b><b>s</b>
+
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> populates the <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>F</b><b>l</b><b>o</b><b>w</b> table with the logical flows  de‐
+       scribed in detail in <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>(8).
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b>              optional <b>D</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>
+       <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>d</b><b>p</b><b>_</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b>              optional <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>D</b><b>P</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b>
+       <b>p</b><b>i</b><b>p</b><b>e</b><b>l</b><b>i</b><b>n</b><b>e</b>                      string, either <b>e</b><b>g</b><b>r</b><b>e</b><b>s</b><b>s</b> or <b>i</b><b>n</b><b>g</b><b>r</b><b>e</b><b>s</b><b>s</b>
+       <b>t</b><b>a</b><b>b</b><b>l</b><b>e</b><b>_</b><b>i</b><b>d</b>                      integer, in range 0 to 32
+       <b>p</b><b>r</b><b>i</b><b>o</b><b>r</b><b>i</b><b>t</b><b>y</b>                      integer, in range 0 to 65,535
+       <b>m</b><b>a</b><b>t</b><b>c</b><b>h</b>                         string
+       <b>a</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>                       string
+       <b>t</b><b>a</b><b>g</b><b>s</b>                          map of string-string pairs
+       <b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b><b>_</b><b>m</b><b>e</b><b>t</b><b>e</b><b>r</b>              optional string
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b> <b>:</b> <b>s</b><b>t</b><b>a</b><b>g</b><b>e</b><b>-</b><b>n</b><b>a</b><b>m</b><b>e</b>     optional string
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b> <b>:</b> <b>s</b><b>t</b><b>a</b><b>g</b><b>e</b><b>-</b><b>h</b><b>i</b><b>n</b><b>t</b>     optional string, containing an uuid
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b> <b>:</b> <b>s</b><b>o</b><b>u</b><b>r</b><b>c</b><b>e</b>         optional string
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b>: optional <b>D</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>
+              The logical datapath to which the logical flow belongs.
+
+       <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>d</b><b>p</b><b>_</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b>: optional <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>D</b><b>P</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b>
+              The  group  of  logical  datapaths to which the logical flow be‐
+              longs. This means that the same  logical  flow  belongs  to  all
+              datapaths in a group.
+
+       <b>p</b><b>i</b><b>p</b><b>e</b><b>l</b><b>i</b><b>n</b><b>e</b>: string, either <b>e</b><b>g</b><b>r</b><b>e</b><b>s</b><b>s</b> or <b>i</b><b>n</b><b>g</b><b>r</b><b>e</b><b>s</b><b>s</b>
+              The  primary  flows  used for deciding on a packet’s destination
+              are the <b>i</b><b>n</b><b>g</b><b>r</b><b>e</b><b>s</b><b>s</b> flows. The <b>e</b><b>g</b><b>r</b><b>e</b><b>s</b><b>s</b> flows implement ACLs. See <b>L</b><b>o</b><b>g</b>‐‐
+              <b>i</b><b>c</b><b>a</b><b>l</b> <b>L</b><b>i</b><b>f</b><b>e</b> <b>C</b><b>y</b><b>c</b><b>l</b><b>e</b> <b>o</b><b>f</b> <b>a</b> <b>P</b><b>a</b><b>c</b><b>k</b><b>e</b><b>t</b>, above, for details.
+
+       <b>t</b><b>a</b><b>b</b><b>l</b><b>e</b><b>_</b><b>i</b><b>d</b>: integer, in range 0 to 32
+              The stage in the logical pipeline, analogous to an OpenFlow  ta‐
+              ble number.
+
+       <b>p</b><b>r</b><b>i</b><b>o</b><b>r</b><b>i</b><b>t</b><b>y</b>: integer, in range 0 to 65,535
+              The flow’s priority. Flows with numerically higher priority take
+              precedence  over those with lower. If two logical datapath flows
+              with the same priority both match, then the one actually applied
+              to the packet is undefined.
+
+       <b>m</b><b>a</b><b>t</b><b>c</b><b>h</b>: string
+              A matching expression.  OVN  provides  a  superset  of  OpenFlow
+              matching capabilities, using a syntax similar to Boolean expres‐
+              sions in a programming language.
+
+              The  most  important  components of match expression are <u>c</u><u>o</u><u>m</u><u>p</u><u>a</u><u>r</u><u>�</u>��
+              <u>i</u><u>s</u><u>o</u><u>n</u><u>s</u>  between  <u>s</u><u>y</u><u>m</u><u>b</u><u>o</u><u>l</u><u>s</u>   and   <u>c</u><u>o</u><u>n</u><u>s</u><u>t</u><u>a</u><u>n</u><u>t</u><u>s</u>,   e.g.   <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b>   <b>=</b><b>=</b>
+              <b>1</b><b>9</b><b>2</b><b>.</b><b>1</b><b>6</b><b>8</b><b>.</b><b>0</b><b>.</b><b>1</b>,  <b>i</b><b>p</b><b>.</b><b>p</b><b>r</b><b>o</b><b>t</b><b>o</b> <b>=</b><b>=</b> <b>6</b>, <b>a</b><b>r</b><b>p</b><b>.</b><b>o</b><b>p</b> <b>=</b><b>=</b> <b>1</b>, <b>e</b><b>t</b><b>h</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b> <b>=</b><b>=</b> <b>0</b><b>x</b><b>8</b><b>0</b><b>0</b>. The
+              logical AND operator &amp;&amp;&amp;&amp; and logical OR operator <b>|</b><b>|</b>  can  combine
+              comparisons into a larger expression.
+
+              Matching  expressions also support parentheses for grouping, the
+              logical NOT prefix operator <b>!</b>, and literals <b>0</b> and <b>1</b>  to  express
+              ``false’’ or ``true,’’ respectively. The latter is useful by it‐
+              self as a catch-all expression that matches every packet.
+
+              Match  expressions  also  support a kind of function syntax. The
+              following functions are supported:
+
+              <b>i</b><b>s</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>r</b><b>e</b><b>s</b><b>i</b><b>d</b><b>e</b><b>n</b><b>t</b><b>(</b><u>l</u><u>p</u><u>o</u><u>r</u><u>t</u><b>)</b>
+                     Evaluates to true on a  chassis  on  which  logical  port
+                     <u>l</u><u>p</u><u>o</u><u>r</u><u>t</u>  (a quoted string) resides, and to false elsewhere.
+                     This function was introduced in OVN 2.7.
+
+              <b>S</b><b>y</b><b>m</b><b>b</b><b>o</b><b>l</b><b>s</b>
+
+              <b>T</b><b>y</b><b>p</b><b>e</b>. Symbols have <u>i</u><u>n</u><u>t</u><u>e</u><u>g</u><u>e</u><u>r</u> or <u>s</u><u>t</u><u>r</u><u>i</u><u>n</u><u>g</u> type. Integer symbols  have
+              a <u>w</u><u>i</u><u>d</u><u>t</u><u>h</u> in bits.
+
+              <b>K</b><b>i</b><b>n</b><b>d</b><b>s</b>. There are three kinds of symbols:
+
+              •      <u>F</u><u>i</u><u>e</u><u>l</u><u>d</u><u>s</u>.  A  field  symbol  represents  a packet header or
+                     metadata field. For example, a field named <b>v</b><b>l</b><b>a</b><b>n</b><b>.</b><b>t</b><b>c</b><b>i</b> might
+                     represent the VLAN TCI field in a packet.
+
+                     A field symbol can have integer or string  type.  Integer
+                     fields  can  be nominal or ordinal (see <b>L</b><b>e</b><b>v</b><b>e</b><b>l</b> <b>o</b><b>f</b> <b>M</b><b>e</b><b>a</b><b>s</b><b>u</b><b>r</b><b>e</b>‐‐
+                     <b>m</b><b>e</b><b>n</b><b>t</b>, below).
+
+              •      <u>S</u><u>u</u><u>b</u><u>f</u><u>i</u><u>e</u><u>l</u><u>d</u><u>s</u>. A subfield represents a subset of bits from  a
+                     larger  field. For example, a field <b>v</b><b>l</b><b>a</b><b>n</b><b>.</b><b>v</b><b>i</b><b>d</b> might be de‐
+                     fined as an alias for <b>v</b><b>l</b><b>a</b><b>n</b><b>.</b><b>t</b><b>c</b><b>i</b><b>[</b><b>0</b><b>.</b><b>.</b><b>1</b><b>1</b><b>]</b>. Subfields are pro‐
+                     vided for syntactic convenience,  because  it  is  always
+                     possible  to  instead  refer  to  a subset of bits from a
+                     field directly.
+
+                     Only ordinal fields (see <b>L</b><b>e</b><b>v</b><b>e</b><b>l</b> <b>o</b><b>f</b> <b>M</b><b>e</b><b>a</b><b>s</b><b>u</b><b>r</b><b>e</b><b>m</b><b>e</b><b>n</b><b>t</b>, below) may
+                     have subfields. Subfields are always ordinal.
+
+              •      <u>P</u><u>r</u><u>e</u><u>d</u><u>i</u><u>c</u><u>a</u><u>t</u><u>e</u><u>s</u>. A predicate is shorthand for  a  Boolean  ex‐
+                     pression.  Predicates may be used much like 1-bit fields.
+                     For example, <b>i</b><b>p</b><b>4</b> might expand to <b>e</b><b>t</b><b>h</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b> <b>=</b><b>=</b> <b>0</b><b>x</b><b>8</b><b>0</b><b>0</b>. Pred‐
+                     icates are provided for syntactic convenience, because it
+                     is always possible to instead specify the underlying  ex‐
+                     pression directly.
+
+                     A  predicate  whose expansion refers to any nominal field
+                     or predicate (see <b>L</b><b>e</b><b>v</b><b>e</b><b>l</b> <b>o</b><b>f</b> <b>M</b><b>e</b><b>a</b><b>s</b><b>u</b><b>r</b><b>e</b><b>m</b><b>e</b><b>n</b><b>t</b>, below)  is  nomi‐
+                     nal; other predicates have Boolean level of measurement.
+
+              <b>L</b><b>e</b><b>v</b><b>e</b><b>l</b>              <b>o</b><b>f</b>              <b>M</b><b>e</b><b>a</b><b>s</b><b>u</b><b>r</b><b>e</b><b>m</b><b>e</b><b>n</b><b>t</b>.              See
+              http://en.wikipedia.org/wiki/Level_of_measurement for  the  sta‐
+              tistical  concept  on  which this classification is based. There
+              are three levels:
+
+              •      <u>O</u><u>r</u><u>d</u><u>i</u><u>n</u><u>a</u><u>l</u>. In statistics, ordinal values can be ordered  on
+                     a  scale. OVN considers a field (or subfield) to be ordi‐
+                     nal if its bits can be  examined  individually.  This  is
+                     true  for  the  OpenFlow  fields  that  OpenFlow  or Open
+                     vSwitch makes ``maskable.’’
+
+                     Any use of a ordinal field may specify a single bit or  a
+                     range  of  bits,  e.g. <b>v</b><b>l</b><b>a</b><b>n</b><b>.</b><b>t</b><b>c</b><b>i</b><b>[</b><b>1</b><b>3</b><b>.</b><b>.</b><b>1</b><b>5</b><b>]</b> refers to the PCP
+                     field within the VLAN TCI, and <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b><b>[</b><b>4</b><b>0</b><b>]</b> refers to  the
+                     multicast bit in the Ethernet destination address.
+
+                     OVN  supports all the usual arithmetic relations (<b>=</b><b>=</b>, <b>!</b><b>=</b>,
+                     <lt;<lt;, <lt;<lt;<b>=</b>, >gt;>gt;, and >gt;>gt;<b>=</b>) on ordinal fields and their  subfields,
+                     because  OVN  can  implement  these  in OpenFlow and Open
+                     vSwitch as collections of bitwise tests.
+
+              •      <u>N</u><u>o</u><u>m</u><u>i</u><u>n</u><u>a</u><u>l</u>. In statistics, nominal values cannot be usefully
+                     compared except for equality. This is  true  of  OpenFlow
+                     port  numbers, Ethernet types, and IP protocols are exam‐
+                     ples: all of these are just  identifiers  assigned  arbi‐
+                     trarily  with  no  deeper  meaning.  In OpenFlow and Open
+                     vSwitch, bits in these fields generally aren’t  individu‐
+                     ally addressable.
+
+                     OVN  only supports arithmetic tests for equality on nomi‐
+                     nal fields, because OpenFlow and Open vSwitch provide  no
+                     way for a flow to efficiently implement other comparisons
+                     on  them. (A test for inequality can be sort of built out
+                     of two flows with different priorities, but OVN  matching
+                     expressions  always  generate  flows with a single prior‐
+                     ity.)
+
+                     String fields are always nominal.
+
+              •      <u>B</u><u>o</u><u>o</u><u>l</u><u>e</u><u>a</u><u>n</u>. A nominal field that has only two values, 0  and
+                     1,  is  somewhat exceptional, since it is easy to support
+                     both equality and inequality tests on such a  field:  ei‐
+                     ther one can be implemented as a test for 0 or 1.
+
+                     Only  predicates (see above) have a Boolean level of mea‐
+                     surement.
+
+                     This isn’t a standard level of measurement.
+
+              <b>P</b><b>r</b><b>e</b><b>r</b><b>e</b><b>q</b><b>u</b><b>i</b><b>s</b><b>i</b><b>t</b><b>e</b><b>s</b>. Any symbol can have prerequisites, which are  ad‐
+              ditional  condition  implied by the use of the symbol. For exam‐
+              ple, For example,  <b>i</b><b>c</b><b>m</b><b>p</b><b>4</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b>  symbol  might  have  prerequisite
+              <b>i</b><b>c</b><b>m</b><b>p</b><b>4</b>, which would cause an expression <b>i</b><b>c</b><b>m</b><b>p</b><b>4</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b> <b>=</b><b>=</b> <b>0</b> to be in‐
+              terpreted  as  <b>i</b><b>c</b><b>m</b><b>p</b><b>4</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b> <b>=</b><b>=</b> <b>0</b> &amp;&amp;&amp;&amp; <b>i</b><b>c</b><b>m</b><b>p</b><b>4</b>, which would in turn ex‐
+              pand to <b>i</b><b>c</b><b>m</b><b>p</b><b>4</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b> <b>=</b><b>=</b> <b>0</b> &amp;&amp;&amp;&amp; <b>e</b><b>t</b><b>h</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b> <b>=</b><b>=</b> <b>0</b><b>x</b><b>8</b><b>0</b><b>0</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b><b>4</b><b>.</b><b>p</b><b>r</b><b>o</b><b>t</b><b>o</b>  <b>=</b><b>=</b>  <b>1</b>
+              (assuming  <b>i</b><b>c</b><b>m</b><b>p</b><b>4</b> is a predicate defined as suggested under <b>T</b><b>y</b><b>p</b><b>e</b><b>s</b>
+              above).
+
+              <b>R</b><b>e</b><b>l</b><b>a</b><b>t</b><b>i</b><b>o</b><b>n</b><b>a</b><b>l</b> <b>o</b><b>p</b><b>e</b><b>r</b><b>a</b><b>t</b><b>o</b><b>r</b><b>s</b>
+
+              All of the standard relational operators <b>=</b><b>=</b>, <b>!</b><b>=</b>, <lt;<lt;, <lt;<lt;<b>=</b>,  >gt;>gt;,  and
+              >gt;>gt;<b>=</b>  are  supported.  Nominal  fields support only <b>=</b><b>=</b> and <b>!</b><b>=</b>, and
+              only in a positive sense when outer <b>!</b> are  taken  into  account,
+              e.g. given string field <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b>, <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b> <b>"</b><b>e</b><b>t</b><b>h</b><b>0</b><b>"</b> and <b>!</b><b>(</b><b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>!</b><b>=</b>
+              <b>"</b><b>e</b><b>t</b><b>h</b><b>0</b><b>"</b><b>)</b> are acceptable, but not <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>!</b><b>=</b> <b>"</b><b>e</b><b>t</b><b>h</b><b>0</b><b>"</b>.
+
+              The implementation of <b>=</b><b>=</b> (or <b>!</b><b>=</b> when it is negated), is more ef‐
+              ficient than that of the other relational operators.
+
+              <b>C</b><b>o</b><b>n</b><b>s</b><b>t</b><b>a</b><b>n</b><b>t</b><b>s</b>
+
+              Integer  constants may be expressed in decimal, hexadecimal pre‐
+              fixed by <b>0</b><b>x</b>, or as dotted-quad IPv4 addresses, IPv6 addresses in
+              their standard forms, or Ethernet addresses  as  colon-separated
+              hex  digits. A constant in any of these forms may be followed by
+              a slash and a second constant (the mask) in the  same  form,  to
+              form  a masked constant. IPv4 and IPv6 masks may be given as in‐
+              tegers, to express CIDR prefixes.
+
+              String constants have the same syntax as quoted strings in  JSON
+              (thus, they are Unicode strings).
+
+              Some  operators  support  sets of constants written inside curly
+              braces <b>{</b> ... <b>}</b>. Commas between elements of a set, and after  the
+              last  elements,  are  optional. With <b>=</b><b>=</b>, ``<u>f</u><u>i</u><u>e</u><u>l</u><u>d</u> <b>=</b><b>=</b> <b>{</b> <u>c</u><u>o</u><u>n</u><u>s</u><u>t</u><u>a</u><u>n</u><u>t</u><u>1</u><b>,</b>
+              <u>c</u><u>o</u><u>n</u><u>s</u><u>t</u><u>a</u><u>n</u><u>t</u><u>2</u><b>,</b> ... <b>}</b>’’ is syntactic sugar for ``<u>f</u><u>i</u><u>e</u><u>l</u><u>d</u>  <b>=</b><b>=</b>  <u>c</u><u>o</u><u>n</u><u>s</u><u>t</u><u>a</u><u>n</u><u>t</u><u>1</u>
+              <b>|</b><b>|</b> <u>f</u><u>i</u><u>e</u><u>l</u><u>d</u> <b>=</b><b>=</b> <u>c</u><u>o</u><u>n</u><u>s</u><u>t</u><u>a</u><u>n</u><u>t</u><u>2</u> <b>|</b><b>|</b> .... Similarly, ``<u>f</u><u>i</u><u>e</u><u>l</u><u>d</u> <b>!</b><b>=</b> <b>{</b> <u>c</u><u>o</u><u>n</u><u>s</u><u>t</u><u>a</u><u>n</u><u>t</u><u>1</u><b>,</b>
+              <u>c</u><u>o</u><u>n</u><u>s</u><u>t</u><u>a</u><u>n</u><u>t</u><u>2</u><b>,</b>  ...  <b>}</b>’’  is  equivalent  to ``<u>f</u><u>i</u><u>e</u><u>l</u><u>d</u> <b>!</b><b>=</b> <u>c</u><u>o</u><u>n</u><u>s</u><u>t</u><u>a</u><u>n</u><u>t</u><u>1</u> &amp;&amp;&amp;&amp;
+              <u>f</u><u>i</u><u>e</u><u>l</u><u>d</u> <b>!</b><b>=</b> <u>c</u><u>o</u><u>n</u><u>s</u><u>t</u><u>a</u><u>n</u><u>t</u><u>2</u> &amp;&amp;&amp;&amp; ...’’.
+
+              You may refer to a set of IPv4, IPv6, or MAC addresses stored in
+              the <b>A</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>_</b><b>S</b><b>e</b><b>t</b> table by its <b>n</b><b>a</b><b>m</b><b>e</b>. An <b>A</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>_</b><b>S</b><b>e</b><b>t</b> with a name of
+              <b>s</b><b>e</b><b>t</b><b>1</b> can be referred to as <b>$</b><b>s</b><b>e</b><b>t</b><b>1</b>.
+
+              You may refer to a group of logical switch ports stored  in  the
+              <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b>  table  by  its  <b>n</b><b>a</b><b>m</b><b>e</b>.  An  <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b> with a name of
+              <b>p</b><b>o</b><b>r</b><b>t</b><b>_</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b><b>1</b> can be referred to as <b>@</b><b>p</b><b>o</b><b>r</b><b>t</b><b>_</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b><b>1</b>.
+
+              Additionally, you may refer to the set of addresses belonging to
+              a group of logical switch ports stored in the  <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b>  table
+              by its <b>n</b><b>a</b><b>m</b><b>e</b> followed by a suffix ’_ip4’/’_ip6’. The IPv4 address
+              set  of  a <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b> with a name of <b>p</b><b>o</b><b>r</b><b>t</b><b>_</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b><b>1</b> can be referred
+              to as <b>$</b><b>p</b><b>o</b><b>r</b><b>t</b><b>_</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b><b>1</b><b>_</b><b>i</b><b>p</b><b>4</b>, and the IPv6 address  set  of  the  same
+              <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b> can be referred to as <b>$</b><b>p</b><b>o</b><b>r</b><b>t</b><b>_</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b><b>1</b><b>_</b><b>i</b><b>p</b><b>6</b>
+
+              <b>M</b><b>i</b><b>s</b><b>c</b><b>e</b><b>l</b><b>l</b><b>a</b><b>n</b><b>e</b><b>o</b><b>u</b><b>s</b>
+
+              Comparisons  may  name  the  symbol  or the constant first, e.g.
+              <b>t</b><b>c</b><b>p</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b><b>=</b> <b>8</b><b>0</b> and <b>8</b><b>0</b> <b>=</b><b>=</b> <b>t</b><b>c</b><b>p</b><b>.</b><b>s</b><b>r</b><b>c</b> are both acceptable.
+
+              Tests for a range may be expressed using a syntax like  <b>1</b><b>0</b><b>2</b><b>4</b>  <lt;<lt;<b>=</b>
+              <b>t</b><b>c</b><b>p</b><b>.</b><b>s</b><b>r</b><b>c</b>  <lt;<lt;<b>=</b>  <b>4</b><b>9</b><b>1</b><b>5</b><b>1</b>,  which  is  equivalent to <b>1</b><b>0</b><b>2</b><b>4</b> <lt;<lt;<b>=</b> <b>t</b><b>c</b><b>p</b><b>.</b><b>s</b><b>r</b><b>c</b> &amp;&amp;&amp;&amp;
+              <b>t</b><b>c</b><b>p</b><b>.</b><b>s</b><b>r</b><b>c</b> <lt;<lt;<b>=</b> <b>4</b><b>9</b><b>1</b><b>5</b><b>1</b>.
+
+              For a one-bit field or predicate,  a  mention  of  its  name  is
+              equivalent  to  <u>s</u><u>y</u><u>m</u><u>o</u><u>b</u><u>l</u>  <b>=</b><b>=</b> <b>1</b>, e.g. <b>v</b><b>l</b><b>a</b><b>n</b><b>.</b><b>p</b><b>r</b><b>e</b><b>s</b><b>e</b><b>n</b><b>t</b> is equivalent to
+              <b>v</b><b>l</b><b>a</b><b>n</b><b>.</b><b>p</b><b>r</b><b>e</b><b>s</b><b>e</b><b>n</b><b>t</b> <b>=</b><b>=</b> <b>1</b>. The same is true for one-bit subfields,  e.g.
+              <b>v</b><b>l</b><b>a</b><b>n</b><b>.</b><b>t</b><b>c</b><b>i</b><b>[</b><b>1</b><b>2</b><b>]</b>.  There  is no technical limitation to implementing
+              the same for ordinal fields of all widths, but  the  implementa‐
+              tion is expensive enough that the syntax parser requires writing
+              an  explicit  comparison  against  zero  to  make  mistakes less
+              likely, e.g. in <b>t</b><b>c</b><b>p</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>!</b><b>=</b> <b>0</b> the comparison  against  0  is  re‐
+              quired.
+
+              <b>O</b><b>p</b><b>e</b><b>r</b><b>a</b><b>t</b><b>o</b><b>r</b>  <b>p</b><b>r</b><b>e</b><b>c</b><b>e</b><b>d</b><b>e</b><b>n</b><b>c</b><b>e</b>  is as shown below, from highest to lowest.
+              There are two exceptions where  parentheses  are  required  even
+              though  the table would suggest that they are not: &amp;&amp;&amp;&amp; and <b>|</b><b>|</b> re‐
+              quire parentheses when used together, and <b>!</b> requires parentheses
+              when applied to a relational expression. Thus, in  <b>(</b><b>e</b><b>t</b><b>h</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b>  <b>=</b><b>=</b>
+              <b>0</b><b>x</b><b>8</b><b>0</b><b>0</b> <b>|</b><b>|</b> <b>e</b><b>t</b><b>h</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b> <b>=</b><b>=</b> <b>0</b><b>x</b><b>8</b><b>6</b><b>d</b><b>d</b><b>)</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b><b>.</b><b>p</b><b>r</b><b>o</b><b>t</b><b>o</b> <b>=</b><b>=</b> <b>6</b> or <b>!</b><b>(</b><b>a</b><b>r</b><b>p</b><b>.</b><b>o</b><b>p</b> <b>=</b><b>=</b> <b>1</b><b>)</b>,
+              the parentheses are mandatory.
+
+              •      <b>(</b><b>)</b>
+
+              •      <b>=</b><b>=</b>   <b>!</b><b>=</b>   <lt;<lt;   <lt;<lt;<b>=</b>   >gt;>gt;   >gt;>gt;<b>=</b>
+
+              •      <b>!</b>
+
+              •      &amp;&amp;&amp;&amp;   <b>|</b><b>|</b>
+
+              <b>C</b><b>o</b><b>m</b><b>m</b><b>e</b><b>n</b><b>t</b><b>s</b> may be introduced by <b>/</b><b>/</b>, which extends to the next new-
+              line. Comments within a line may be bracketed by <b>/</b><b>*</b> and <b>*</b><b>/</b>. Mul‐
+              tiline comments are not supported.
+
+              <b>S</b><b>y</b><b>m</b><b>b</b><b>o</b><b>l</b><b>s</b>
+
+              Most  of  the  symbols  below have integer type. Only <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> and
+              <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> have string type. <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> names a logical port. Thus, its
+              value is a <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b> name from the <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>  table.  <b>o</b><b>u</b><b>t</b>‐‐
+              <b>p</b><b>o</b><b>r</b><b>t</b>  may name a logical port, as <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b>, or a logical multicast
+              group defined in the <b>M</b><b>u</b><b>l</b><b>t</b><b>i</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b> table.  For  both  symbols,
+              only names within the flow’s logical datapath may be used.
+
+              The  <b>r</b><b>e</b><b>g</b><u>X</u>  symbols  are  32-bit integers. The <b>x</b><b>x</b><b>r</b><b>e</b><b>g</b><u>X</u> symbols are
+              128-bit integers, which overlay four of  the  32-bit  registers:
+              <b>x</b><b>x</b><b>r</b><b>e</b><b>g</b><b>0</b> overlays <b>r</b><b>e</b><b>g</b><b>0</b> through <b>r</b><b>e</b><b>g</b><b>3</b>, with <b>r</b><b>e</b><b>g</b><b>0</b> supplying the most-
+              significant  bits  of  <b>x</b><b>x</b><b>r</b><b>e</b><b>g</b><b>0</b>  and  <b>r</b><b>e</b><b>g</b><b>3</b>  the least-significant.
+              <b>x</b><b>x</b><b>r</b><b>e</b><b>g</b><b>1</b> similarly overlays <b>r</b><b>e</b><b>g</b><b>4</b> through <b>r</b><b>e</b><b>g</b><b>7</b>.
+
+              •      <b>r</b><b>e</b><b>g</b><b>0</b>...<b>r</b><b>e</b><b>g</b><b>9</b>
+
+              •      <b>x</b><b>x</b><b>r</b><b>e</b><b>g</b><b>0</b> <b>x</b><b>x</b><b>r</b><b>e</b><b>g</b><b>1</b>
+
+              •      <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b>
+
+              •      <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>l</b><b>o</b><b>o</b><b>p</b><b>b</b><b>a</b><b>c</b><b>k</b>
+
+              •      <b>p</b><b>k</b><b>t</b><b>.</b><b>m</b><b>a</b><b>r</b><b>k</b>
+
+              •      <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>e</b><b>t</b><b>h</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b>
+
+              •      <b>v</b><b>l</b><b>a</b><b>n</b><b>.</b><b>t</b><b>c</b><b>i</b> <b>v</b><b>l</b><b>a</b><b>n</b><b>.</b><b>v</b><b>i</b><b>d</b> <b>v</b><b>l</b><b>a</b><b>n</b><b>.</b><b>p</b><b>c</b><b>p</b> <b>v</b><b>l</b><b>a</b><b>n</b><b>.</b><b>p</b><b>r</b><b>e</b><b>s</b><b>e</b><b>n</b><b>t</b>
+
+              •      <b>i</b><b>p</b><b>.</b><b>p</b><b>r</b><b>o</b><b>t</b><b>o</b> <b>i</b><b>p</b><b>.</b><b>d</b><b>s</b><b>c</b><b>p</b> <b>i</b><b>p</b><b>.</b><b>e</b><b>c</b><b>n</b> <b>i</b><b>p</b><b>.</b><b>t</b><b>t</b><b>l</b> <b>i</b><b>p</b><b>.</b><b>f</b><b>r</b><b>a</b><b>g</b>
+
+              •      <b>i</b><b>p</b><b>4</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b>
+
+              •      <b>i</b><b>p</b><b>6</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>i</b><b>p</b><b>6</b><b>.</b><b>l</b><b>a</b><b>b</b><b>e</b><b>l</b>
+
+              •      <b>a</b><b>r</b><b>p</b><b>.</b><b>o</b><b>p</b> <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>p</b><b>a</b> <b>a</b><b>r</b><b>p</b><b>.</b><b>t</b><b>p</b><b>a</b> <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>h</b><b>a</b> <b>a</b><b>r</b><b>p</b><b>.</b><b>t</b><b>h</b><b>a</b>
+
+              •      <b>r</b><b>a</b><b>r</b><b>p</b><b>.</b><b>o</b><b>p</b> <b>r</b><b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>p</b><b>a</b> <b>r</b><b>a</b><b>r</b><b>p</b><b>.</b><b>t</b><b>p</b><b>a</b> <b>r</b><b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>h</b><b>a</b> <b>r</b><b>a</b><b>r</b><b>p</b><b>.</b><b>t</b><b>h</b><b>a</b>
+
+              •      <b>t</b><b>c</b><b>p</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>t</b><b>c</b><b>p</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>t</b><b>c</b><b>p</b><b>.</b><b>f</b><b>l</b><b>a</b><b>g</b><b>s</b>
+
+              •      <b>u</b><b>d</b><b>p</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>u</b><b>d</b><b>p</b><b>.</b><b>d</b><b>s</b><b>t</b>
+
+              •      <b>s</b><b>c</b><b>t</b><b>p</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>s</b><b>c</b><b>t</b><b>p</b><b>.</b><b>d</b><b>s</b><b>t</b>
+
+              •      <b>i</b><b>c</b><b>m</b><b>p</b><b>4</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b> <b>i</b><b>c</b><b>m</b><b>p</b><b>4</b><b>.</b><b>c</b><b>o</b><b>d</b><b>e</b>
+
+              •      <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b> <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b><b>.</b><b>c</b><b>o</b><b>d</b><b>e</b>
+
+              •      <b>n</b><b>d</b><b>.</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> <b>n</b><b>d</b><b>.</b><b>s</b><b>l</b><b>l</b> <b>n</b><b>d</b><b>.</b><b>t</b><b>l</b><b>l</b>
+
+              •      <b>c</b><b>t</b><b>_</b><b>m</b><b>a</b><b>r</b><b>k</b> <b>c</b><b>t</b><b>_</b><b>l</b><b>a</b><b>b</b><b>e</b><b>l</b>
+
+              •      <b>c</b><b>t</b><b>_</b><b>s</b><b>t</b><b>a</b><b>t</b><b>e</b>,  which  has  several  Boolean  subfields.   The
+                     <b>c</b><b>t</b><b>_</b><b>n</b><b>e</b><b>x</b><b>t</b> action initializes the following subfields:
+
+                     •      <b>c</b><b>t</b><b>.</b><b>t</b><b>r</b><b>k</b>:  Always set to true by <b>c</b><b>t</b><b>_</b><b>n</b><b>e</b><b>x</b><b>t</b> to indicate
+                            that connection  tracking  has  taken  place.  All
+                            other <b>c</b><b>t</b> subfields have <b>c</b><b>t</b><b>.</b><b>t</b><b>r</b><b>k</b> as a prerequisite.
+
+                     •      <b>c</b><b>t</b><b>.</b><b>n</b><b>e</b><b>w</b>: True for a new flow
+
+                     •      <b>c</b><b>t</b><b>.</b><b>e</b><b>s</b><b>t</b>: True for an established flow
+
+                     •      <b>c</b><b>t</b><b>.</b><b>r</b><b>e</b><b>l</b>: True for a related flow
+
+                     •      <b>c</b><b>t</b><b>.</b><b>r</b><b>p</b><b>l</b>: True for a reply flow
+
+                     •      <b>c</b><b>t</b><b>.</b><b>i</b><b>n</b><b>v</b>: True for a connection entry in a bad state
+
+                     The  <b>c</b><b>t</b><b>_</b><b>d</b><b>n</b><b>a</b><b>t</b>,  <b>c</b><b>t</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b>,  and <b>c</b><b>t</b><b>_</b><b>l</b><b>b</b> actions initialize the
+                     following subfields:
+
+                     •      <b>c</b><b>t</b><b>.</b><b>d</b><b>n</b><b>a</b><b>t</b>: True for a packet  whose  destination  IP
+                            address has been changed.
+
+                     •      <b>c</b><b>t</b><b>.</b><b>s</b><b>n</b><b>a</b><b>t</b>: True for a packet whose source IP address
+                            has been changed.
+
+              The following predicates are supported:
+
+              •      <b>e</b><b>t</b><b>h</b><b>.</b><b>b</b><b>c</b><b>a</b><b>s</b><b>t</b> expands to <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <b>f</b><b>f</b><b>:</b><b>f</b><b>f</b><b>:</b><b>f</b><b>f</b><b>:</b><b>f</b><b>f</b><b>:</b><b>f</b><b>f</b><b>:</b><b>f</b><b>f</b>
+
+              •      <b>e</b><b>t</b><b>h</b><b>.</b><b>m</b><b>c</b><b>a</b><b>s</b><b>t</b> expands to <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b><b>[</b><b>4</b><b>0</b><b>]</b>
+
+              •      <b>v</b><b>l</b><b>a</b><b>n</b><b>.</b><b>p</b><b>r</b><b>e</b><b>s</b><b>e</b><b>n</b><b>t</b> expands to <b>v</b><b>l</b><b>a</b><b>n</b><b>.</b><b>t</b><b>c</b><b>i</b><b>[</b><b>1</b><b>2</b><b>]</b>
+
+              •      <b>i</b><b>p</b><b>4</b> expands to <b>e</b><b>t</b><b>h</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b> <b>=</b><b>=</b> <b>0</b><b>x</b><b>8</b><b>0</b><b>0</b>
+
+              •      <b>i</b><b>p</b><b>4</b><b>.</b><b>s</b><b>r</b><b>c</b><b>_</b><b>m</b><b>c</b><b>a</b><b>s</b><b>t</b> expands to <b>i</b><b>p</b><b>4</b><b>.</b><b>s</b><b>r</b><b>c</b><b>[</b><b>2</b><b>8</b><b>.</b><b>.</b><b>3</b><b>1</b><b>]</b> <b>=</b><b>=</b> <b>0</b><b>x</b><b>e</b>
+
+              •      <b>i</b><b>p</b><b>4</b><b>.</b><b>m</b><b>c</b><b>a</b><b>s</b><b>t</b> expands to <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b><b>[</b><b>2</b><b>8</b><b>.</b><b>.</b><b>3</b><b>1</b><b>]</b> <b>=</b><b>=</b> <b>0</b><b>x</b><b>e</b>
+
+              •      <b>i</b><b>p</b><b>6</b> expands to <b>e</b><b>t</b><b>h</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b> <b>=</b><b>=</b> <b>0</b><b>x</b><b>8</b><b>6</b><b>d</b><b>d</b>
+
+              •      <b>i</b><b>p</b> expands to <b>i</b><b>p</b><b>4</b> <b>|</b><b>|</b> <b>i</b><b>p</b><b>6</b>
+
+              •      <b>i</b><b>c</b><b>m</b><b>p</b><b>4</b> expands to <b>i</b><b>p</b><b>4</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b><b>.</b><b>p</b><b>r</b><b>o</b><b>t</b><b>o</b> <b>=</b><b>=</b> <b>1</b>
+
+              •      <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b> expands to <b>i</b><b>p</b><b>6</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b><b>.</b><b>p</b><b>r</b><b>o</b><b>t</b><b>o</b> <b>=</b><b>=</b> <b>5</b><b>8</b>
+
+              •      <b>i</b><b>c</b><b>m</b><b>p</b> expands to <b>i</b><b>c</b><b>m</b><b>p</b><b>4</b> <b>|</b><b>|</b> <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b>
+
+              •      <b>i</b><b>p</b><b>.</b><b>i</b><b>s</b><b>_</b><b>f</b><b>r</b><b>a</b><b>g</b> expands to <b>i</b><b>p</b><b>.</b><b>f</b><b>r</b><b>a</b><b>g</b><b>[</b><b>0</b><b>]</b>
+
+              •      <b>i</b><b>p</b><b>.</b><b>l</b><b>a</b><b>t</b><b>e</b><b>r</b><b>_</b><b>f</b><b>r</b><b>a</b><b>g</b> expands to <b>i</b><b>p</b><b>.</b><b>f</b><b>r</b><b>a</b><b>g</b><b>[</b><b>1</b><b>]</b>
+
+              •      <b>i</b><b>p</b><b>.</b><b>f</b><b>i</b><b>r</b><b>s</b><b>t</b><b>_</b><b>f</b><b>r</b><b>a</b><b>g</b> expands to <b>i</b><b>p</b><b>.</b><b>i</b><b>s</b><b>_</b><b>f</b><b>r</b><b>a</b><b>g</b> &amp;&amp;&amp;&amp; <b>!</b><b>i</b><b>p</b><b>.</b><b>l</b><b>a</b><b>t</b><b>e</b><b>r</b><b>_</b><b>f</b><b>r</b><b>a</b><b>g</b>
+
+              •      <b>a</b><b>r</b><b>p</b> expands to <b>e</b><b>t</b><b>h</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b> <b>=</b><b>=</b> <b>0</b><b>x</b><b>8</b><b>0</b><b>6</b>
+
+              •      <b>r</b><b>a</b><b>r</b><b>p</b> expands to <b>e</b><b>t</b><b>h</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b> <b>=</b><b>=</b> <b>0</b><b>x</b><b>8</b><b>0</b><b>3</b><b>5</b>
+
+              •      <b>n</b><b>d</b> expands to <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b> <b>=</b><b>=</b> <b>{</b><b>1</b><b>3</b><b>5</b><b>,</b> <b>1</b><b>3</b><b>6</b><b>}</b> &amp;&amp;&amp;&amp; <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b><b>.</b><b>c</b><b>o</b><b>d</b><b>e</b> <b>=</b><b>=</b> <b>0</b>
+                     &amp;&amp;&amp;&amp; <b>i</b><b>p</b><b>.</b><b>t</b><b>t</b><b>l</b> <b>=</b><b>=</b> <b>2</b><b>5</b><b>5</b>
+
+              •      <b>n</b><b>d</b><b>_</b><b>n</b><b>s</b>  expands to <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b> <b>=</b><b>=</b> <b>1</b><b>3</b><b>5</b> &amp;&amp;&amp;&amp; <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b><b>.</b><b>c</b><b>o</b><b>d</b><b>e</b> <b>=</b><b>=</b> <b>0</b> &amp;&amp;&amp;&amp;
+                     <b>i</b><b>p</b><b>.</b><b>t</b><b>t</b><b>l</b> <b>=</b><b>=</b> <b>2</b><b>5</b><b>5</b>
+
+              •      <b>n</b><b>d</b><b>_</b><b>n</b><b>a</b> expands to <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b> <b>=</b><b>=</b> <b>1</b><b>3</b><b>6</b> &amp;&amp;&amp;&amp; <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b><b>.</b><b>c</b><b>o</b><b>d</b><b>e</b> <b>=</b><b>=</b> <b>0</b>  &amp;&amp;&amp;&amp;
+                     <b>i</b><b>p</b><b>.</b><b>t</b><b>t</b><b>l</b> <b>=</b><b>=</b> <b>2</b><b>5</b><b>5</b>
+
+              •      <b>n</b><b>d</b><b>_</b><b>r</b><b>s</b>  expands to <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b> <b>=</b><b>=</b> <b>1</b><b>3</b><b>3</b> &amp;&amp;&amp;&amp; <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b><b>.</b><b>c</b><b>o</b><b>d</b><b>e</b> <b>=</b><b>=</b> <b>0</b> &amp;&amp;&amp;&amp;
+                     <b>i</b><b>p</b><b>.</b><b>t</b><b>t</b><b>l</b> <b>=</b><b>=</b> <b>2</b><b>5</b><b>5</b>
+
+              •      <b>n</b><b>d</b><b>_</b><b>r</b><b>a</b> expands to <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b> <b>=</b><b>=</b> <b>1</b><b>3</b><b>4</b> &amp;&amp;&amp;&amp; <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b><b>.</b><b>c</b><b>o</b><b>d</b><b>e</b> <b>=</b><b>=</b> <b>0</b>  &amp;&amp;&amp;&amp;
+                     <b>i</b><b>p</b><b>.</b><b>t</b><b>t</b><b>l</b> <b>=</b><b>=</b> <b>2</b><b>5</b><b>5</b>
+
+              •      <b>t</b><b>c</b><b>p</b> expands to <b>i</b><b>p</b><b>.</b><b>p</b><b>r</b><b>o</b><b>t</b><b>o</b> <b>=</b><b>=</b> <b>6</b>
+
+              •      <b>u</b><b>d</b><b>p</b> expands to <b>i</b><b>p</b><b>.</b><b>p</b><b>r</b><b>o</b><b>t</b><b>o</b> <b>=</b><b>=</b> <b>1</b><b>7</b>
+
+              •      <b>s</b><b>c</b><b>t</b><b>p</b> expands to <b>i</b><b>p</b><b>.</b><b>p</b><b>r</b><b>o</b><b>t</b><b>o</b> <b>=</b><b>=</b> <b>1</b><b>3</b><b>2</b>
+
+       <b>a</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>: string
+              Logical  datapath  actions, to be executed when the logical flow
+              represented by this row is the highest-priority match.
+
+              Actions share lexical syntax with the <b>m</b><b>a</b><b>t</b><b>c</b><b>h</b> column. An empty set
+              of actions (or one that contains just white space or  comments),
+              or  a  set  of  actions  that consists of just <b>d</b><b>r</b><b>o</b><b>p</b><b>;</b>, causes the
+              matched packets to be dropped. Otherwise, the column should con‐
+              tain a sequence of actions, each terminated by a semicolon.
+
+              The following actions are defined:
+
+              <b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b><b>;</b>
+                     In the ingress pipeline, this action executes the  <b>e</b><b>g</b><b>r</b><b>e</b><b>s</b><b>s</b>
+                     pipeline  as  a  subroutine.  If  <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> names a logical
+                     port, the egress pipeline executes once; if it is a  mul‐
+                     ticast group, the egress pipeline runs once for each log‐
+                     ical port in the group.
+
+                     In  the  egress pipeline, this action performs the actual
+                     output to  the  <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b>  logical  port.  (In  the  egress
+                     pipeline, <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> never names a multicast group.)
+
+                     By  default,  output  to  the  input  port  is implicitly
+                     dropped, that is, <b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b> becomes a no-op  if  <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b>  ==
+                     <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b>.  Occasionally  it  may be useful to override this
+                     behavior, e.g. to send an ARP reply to an ARP request; to
+                     do so, use <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>l</b><b>o</b><b>o</b><b>p</b><b>b</b><b>a</b><b>c</b><b>k</b> <b>=</b> <b>1</b>  to  allow  the  packet  to
+                     "hair-pin" back to the input port.
+
+              <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>
+              <b>n</b><b>e</b><b>x</b><b>t</b><b>(</b><u>t</u><u>a</u><u>b</u><u>l</u><u>e</u><b>)</b><b>;</b>
+              <b>n</b><b>e</b><b>x</b><b>t</b><b>(</b><b>p</b><b>i</b><b>p</b><b>e</b><b>l</b><b>i</b><b>n</b><b>e</b><b>=</b><u>p</u><u>i</u><u>p</u><u>e</u><u>l</u><u>i</u><u>n</u><u>e</u><b>,</b> <b>t</b><b>a</b><b>b</b><b>l</b><b>e</b><b>=</b><u>t</u><u>a</u><u>b</u><u>l</u><u>e</u><b>)</b><b>;</b>
+                   Executes  the given logical datapath <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> in <u>p</u><u>i</u><u>p</u><u>e</u><u>l</u><u>i</u><u>n</u><u>e</u> as a
+                   subroutine. The default <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> is  just  after  the  current
+                   one. If <u>p</u><u>i</u><u>p</u><u>e</u><u>l</u><u>i</u><u>n</u><u>e</u> is specified, it may be <b>i</b><b>n</b><b>g</b><b>r</b><b>e</b><b>s</b><b>s</b> or <b>e</b><b>g</b><b>r</b><b>e</b><b>s</b><b>s</b>;
+                   the  default  <u>p</u><u>i</u><u>p</u><u>e</u><u>l</u><u>i</u><u>n</u><u>e</u>  is the one currently executing. Ac‐
+                   tions in the both ingress and egress pipeline can use  <b>n</b><b>e</b><b>x</b><b>t</b>
+                   to  jump  across the other pipeline. Actions in the ingress
+                   pipeline should use <b>n</b><b>e</b><b>x</b><b>t</b> to jump into the specific table of
+                   egress pipeline only if it is certain that the packets  are
+                   local and not tunnelled and wants to skip certain stages in
+                   the packet processing.
+
+              <u>f</u><u>i</u><u>e</u><u>l</u><u>d</u> <b>=</b> <u>c</u><u>o</u><u>n</u><u>s</u><u>t</u><u>a</u><u>n</u><u>t</u><b>;</b>
+                   Sets  data  or  metadata field <u>f</u><u>i</u><u>e</u><u>l</u><u>d</u> to constant value <u>c</u><u>o</u><u>n</u><u>�</u>��
+                   <u>s</u><u>t</u><u>a</u><u>n</u><u>t</u>, e.g. <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b> <b>"</b><b>v</b><b>i</b><b>f</b><b>0</b><b>"</b><b>;</b> to  set  the  logical  output
+                   port.  To  set  only a subset of bits in a field, specify a
+                   subfield for <u>f</u><u>i</u><u>e</u><u>l</u><u>d</u> or a masked <u>c</u><u>o</u><u>n</u><u>s</u><u>t</u><u>a</u><u>n</u><u>t</u>, e.g. one  may  use
+                   <b>v</b><b>l</b><b>a</b><b>n</b><b>.</b><b>p</b><b>c</b><b>p</b><b>[</b><b>2</b><b>]</b> <b>=</b> <b>1</b><b>;</b> or <b>v</b><b>l</b><b>a</b><b>n</b><b>.</b><b>p</b><b>c</b><b>p</b> <b>=</b> <b>4</b><b>/</b><b>4</b><b>;</b> to set the most signif‐
+                   icant bit of the VLAN PCP.
+
+                   Assigning  to  a  field  with prerequisites implicitly adds
+                   those prerequisites to <b>m</b><b>a</b><b>t</b><b>c</b><b>h</b>; thus,  for  example,  a  flow
+                   that  sets <b>t</b><b>c</b><b>p</b><b>.</b><b>d</b><b>s</b><b>t</b> applies only to TCP flows, regardless of
+                   whether its <b>m</b><b>a</b><b>t</b><b>c</b><b>h</b> mentions any TCP field.
+
+                   Not all fields are modifiable (e.g. <b>e</b><b>t</b><b>h</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b>  and  <b>i</b><b>p</b><b>.</b><b>p</b><b>r</b><b>o</b><b>t</b><b>o</b>
+                   are  read-only),  and not all modifiable fields may be par‐
+                   tially modified (e.g. <b>i</b><b>p</b><b>.</b><b>t</b><b>t</b><b>l</b> must assigned as a whole). The
+                   <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> field is modifiable in the <b>i</b><b>n</b><b>g</b><b>r</b><b>e</b><b>s</b><b>s</b> pipeline but not
+                   in the <b>e</b><b>g</b><b>r</b><b>e</b><b>s</b><b>s</b> pipeline.
+
+              <u>o</u><u>v</u><u>n</u><b>_</b><u>f</u><u>i</u><u>e</u><u>l</u><u>d</u> <b>=</b> <u>c</u><u>o</u><u>n</u><u>s</u><u>t</u><u>a</u><u>n</u><u>t</u><b>;</b>
+                   Sets OVN field <u>o</u><u>v</u><u>n</u><b>_</b><u>f</u><u>i</u><u>e</u><u>l</u><u>d</u> to constant value <u>c</u><u>o</u><u>n</u><u>s</u><u>t</u><u>a</u><u>n</u><u>t</u>.
+
+                   <b>O</b><b>V</b><b>N</b> supports setting the values of certain fields which are
+                   not yet supported in OpenFlow to set or modify them.
+
+                   Below are the supported <b>O</b><b>V</b><b>N</b> <b>f</b><b>i</b><b>e</b><b>l</b><b>d</b><b>s</b>:
+
+                   •      <b>i</b><b>c</b><b>m</b><b>p</b><b>4</b><b>.</b><b>f</b><b>r</b><b>a</b><b>g</b><b>_</b><b>m</b><b>t</b><b>u</b> <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b><b>.</b><b>f</b><b>r</b><b>a</b><b>g</b><b>_</b><b>m</b><b>t</b><b>u</b>
+
+                          This  field  sets  the  low-order  16  bits  of  the
+                          ICMP{4,6}  header field that is labelled "unused" in
+                          the ICMP specification as defined in  the  RFC  1191
+                          with the value specified in <u>c</u><u>o</u><u>n</u><u>s</u><u>t</u><u>a</u><u>n</u><u>t</u>.
+
+                          Eg. icmp4.frag_mtu = 1500;
+
+              <u>f</u><u>i</u><u>e</u><u>l</u><u>d</u><u>1</u> <b>=</b> <u>f</u><u>i</u><u>e</u><u>l</u><u>d</u><u>2</u><b>;</b>
+                   Sets  data or metadata field <u>f</u><u>i</u><u>e</u><u>l</u><u>d</u><u>1</u> to the value of data or
+                   metadata field <u>f</u><u>i</u><u>e</u><u>l</u><u>d</u><u>2</u>, e.g. <b>r</b><b>e</b><b>g</b><b>0</b> <b>=</b> <b>i</b><b>p</b><b>4</b><b>.</b><b>s</b><b>r</b><b>c</b><b>;</b> copies  <b>i</b><b>p</b><b>4</b><b>.</b><b>s</b><b>r</b><b>c</b>
+                   into <b>r</b><b>e</b><b>g</b><b>0</b>. To modify only a subset of a field’s bits, spec‐
+                   ify  a subfield for <u>f</u><u>i</u><u>e</u><u>l</u><u>d</u><u>1</u> or <u>f</u><u>i</u><u>e</u><u>l</u><u>d</u><u>2</u> or both, e.g. <b>v</b><b>l</b><b>a</b><b>n</b><b>.</b><b>p</b><b>c</b><b>p</b>
+                   <b>=</b> <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>0</b><b>.</b><b>.</b><b>2</b><b>]</b><b>;</b> copies the  least-significant  bits  of  <b>r</b><b>e</b><b>g</b><b>0</b>
+                   into the VLAN PCP.
+
+                   <u>f</u><u>i</u><u>e</u><u>l</u><u>d</u><u>1</u> and <u>f</u><u>i</u><u>e</u><u>l</u><u>d</u><u>2</u> must be the same type, either both string
+                   or  both  integer  fields. If they are both integer fields,
+                   they must have the same width.
+
+                   If <u>f</u><u>i</u><u>e</u><u>l</u><u>d</u><u>1</u> or <u>f</u><u>i</u><u>e</u><u>l</u><u>d</u><u>2</u> has prerequisites, they are  added  im‐
+                   plicitly  to  <b>m</b><b>a</b><b>t</b><b>c</b><b>h</b>.  It is possible to write an assignment
+                   with  contradictory  prerequisites,  such  as   <b>i</b><b>p</b><b>4</b><b>.</b><b>s</b><b>r</b><b>c</b>   <b>=</b>
+                   <b>i</b><b>p</b><b>6</b><b>.</b><b>s</b><b>r</b><b>c</b><b>[</b><b>0</b><b>.</b><b>.</b><b>3</b><b>1</b><b>]</b><b>;</b>, but the contradiction means that a logical
+                   flow with such an assignment will never be matched.
+
+              <u>f</u><u>i</u><u>e</u><u>l</u><u>d</u><u>1</u> <lt;<lt;<b>-</b>>gt;>gt; <u>f</u><u>i</u><u>e</u><u>l</u><u>d</u><u>2</u><b>;</b>
+                   Similar  to <u>f</u><u>i</u><u>e</u><u>l</u><u>d</u><u>1</u> <b>=</b> <u>f</u><u>i</u><u>e</u><u>l</u><u>d</u><u>2</u><b>;</b> except that the two values are
+                   exchanged instead of copied. Both <u>f</u><u>i</u><u>e</u><u>l</u><u>d</u><u>1</u>  and  <u>f</u><u>i</u><u>e</u><u>l</u><u>d</u><u>2</u>  must
+                   modifiable.
+
+              <b>p</b><b>u</b><b>s</b><b>h</b><b>(</b><u>f</u><u>i</u><u>e</u><u>l</u><u>d</u><b>)</b><b>;</b>
+                   Push the value of <u>f</u><u>i</u><u>e</u><u>l</u><u>d</u> to the stack top.
+
+              <b>p</b><b>o</b><b>p</b><b>(</b><u>f</u><u>i</u><u>e</u><u>l</u><u>d</u><b>)</b><b>;</b>
+                   Pop  the stack top and store the value to <u>f</u><u>i</u><u>e</u><u>l</u><u>d</u>, which must
+                   be modifiable.
+
+              <b>i</b><b>p</b><b>.</b><b>t</b><b>t</b><b>l</b><b>-</b><b>-</b><b>;</b>
+                   Decrements the IPv4 or IPv6 TTL. If this would make the TTL
+                   zero or negative, then processing of the packet  halts;  no
+                   further  actions  are  processed.  (To properly handle such
+                   cases, a higher-priority flow should match on <b>i</b><b>p</b><b>.</b><b>t</b><b>t</b><b>l</b> <b>=</b><b>=</b> <b>{</b><b>0</b><b>,</b>
+                   <b>1</b><b>}</b><b>;</b>.)
+
+                   <b>P</b><b>r</b><b>e</b><b>r</b><b>e</b><b>q</b><b>u</b><b>i</b><b>s</b><b>i</b><b>t</b><b>e</b><b>:</b> <b>i</b><b>p</b>
+
+              <b>c</b><b>t</b><b>_</b><b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>
+                   Apply  connection  tracking  to  the   flow,   initializing
+                   <b>c</b><b>t</b><b>_</b><b>s</b><b>t</b><b>a</b><b>t</b><b>e</b>  for matching in later tables. Automatically moves
+                   on to the next table, as if followed by <b>n</b><b>e</b><b>x</b><b>t</b>.
+
+                   As a side effect, IP  fragments  will  be  reassembled  for
+                   matching. If a fragmented packet is output, then it will be
+                   sent  with  any overlapping fragments squashed. The connec‐
+                   tion tracking state is scoped by the logical port when  the
+                   action  is used in a flow for a logical switch, so overlap‐
+                   ping addresses may be used. To allow traffic related to the
+                   matched flow, execute <b>c</b><b>t</b><b>_</b><b>c</b><b>o</b><b>m</b><b>m</b><b>i</b><b>t</b> . Connection tracking state
+                   is scoped by the logical topology when the action  is  used
+                   in a flow for a router.
+
+                   It  is  possible  to  have actions follow <b>c</b><b>t</b><b>_</b><b>n</b><b>e</b><b>x</b><b>t</b>, but they
+                   will not have access to any of its side-effects and is  not
+                   generally useful.
+
+              <b>c</b><b>t</b><b>_</b><b>c</b><b>o</b><b>m</b><b>m</b><b>i</b><b>t</b> <b>{</b> <b>}</b><b>;</b>
+              <b>c</b><b>t</b><b>_</b><b>c</b><b>o</b><b>m</b><b>m</b><b>i</b><b>t</b> <b>{</b> <b>c</b><b>t</b><b>_</b><b>m</b><b>a</b><b>r</b><b>k</b><b>=</b><u>v</u><u>a</u><u>l</u><u>u</u><u>e</u><u>[</u><u>/</u><u>m</u><u>a</u><u>s</u><u>k</u><u>]</u><b>;</b> <b>}</b><b>;</b>
+              <b>c</b><b>t</b><b>_</b><b>c</b><b>o</b><b>m</b><b>m</b><b>i</b><b>t</b> <b>{</b> <b>c</b><b>t</b><b>_</b><b>l</b><b>a</b><b>b</b><b>e</b><b>l</b><b>=</b><u>v</u><u>a</u><u>l</u><u>u</u><u>e</u><u>[</u><u>/</u><u>m</u><u>a</u><u>s</u><u>k</u><u>]</u><b>;</b> <b>}</b><b>;</b>
+              <b>c</b><b>t</b><b>_</b><b>c</b><b>o</b><b>m</b><b>m</b><b>i</b><b>t</b> <b>{</b> <b>c</b><b>t</b><b>_</b><b>m</b><b>a</b><b>r</b><b>k</b><b>=</b><u>v</u><u>a</u><u>l</u><u>u</u><u>e</u><u>[</u><u>/</u><u>m</u><u>a</u><u>s</u><u>k</u><u>]</u><b>;</b> <b>c</b><b>t</b><b>_</b><b>l</b><b>a</b><b>b</b><b>e</b><b>l</b><b>=</b><u>v</u><u>a</u><u>l</u><u>u</u><u>e</u><u>[</u><u>/</u><u>m</u><u>a</u><u>s</u><u>k</u><u>]</u><b>;</b> <b>}</b><b>;</b>
+                   Commit the flow to the connection tracking entry associated
+                   with   it   by   a   previous   call   to   <b>c</b><b>t</b><b>_</b><b>n</b><b>e</b><b>x</b><b>t</b>.   When
+                   <b>c</b><b>t</b><b>_</b><b>m</b><b>a</b><b>r</b><b>k</b><b>=</b><u>v</u><u>a</u><u>l</u><u>u</u><u>e</u><u>[</u><u>/</u><u>m</u><u>a</u><u>s</u><u>k</u><u>]</u> and/or <b>c</b><b>t</b><b>_</b><b>l</b><b>a</b><b>b</b><b>e</b><b>l</b><b>=</b><u>v</u><u>a</u><u>l</u><u>u</u><u>e</u><u>[</u><u>/</u><u>m</u><u>a</u><u>s</u><u>k</u><u>]</u> are  sup‐
+                   plied,  <b>c</b><b>t</b><b>_</b><b>m</b><b>a</b><b>r</b><b>k</b>  and/or  <b>c</b><b>t</b><b>_</b><b>l</b><b>a</b><b>b</b><b>e</b><b>l</b> will be set to the values
+                   indicated by <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u><u>[</u><u>/</u><u>m</u><u>a</u><u>s</u><u>k</u><u>]</u> on the connection tracking entry.
+                   <b>c</b><b>t</b><b>_</b><b>m</b><b>a</b><b>r</b><b>k</b> is a 32-bit field. <b>c</b><b>t</b><b>_</b><b>l</b><b>a</b><b>b</b><b>e</b><b>l</b> is a 128-bit field. The
+                   <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u><u>[</u><u>/</u><u>m</u><u>a</u><u>s</u><u>k</u><u>]</u> should be specified in hex string if more than
+                   64bits are to be used. Registers and other named fields can
+                   be used for <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>. <b>c</b><b>t</b><b>_</b><b>m</b><b>a</b><b>r</b><b>k</b>  and  <b>c</b><b>t</b><b>_</b><b>l</b><b>a</b><b>b</b><b>e</b><b>l</b>  may  be  sub-ad‐
+                   dressed in order to have specific bits set.
+
+                   Note  that  if  you want processing to continue in the next
+                   table, you must execute the <b>n</b><b>e</b><b>x</b><b>t</b>  action  after  <b>c</b><b>t</b><b>_</b><b>c</b><b>o</b><b>m</b><b>m</b><b>i</b><b>t</b>.
+                   You  may  also  leave out <b>n</b><b>e</b><b>x</b><b>t</b> which will commit connection
+                   tracking state, and then drop the  packet.  This  could  be
+                   useful  for  setting <b>c</b><b>t</b><b>_</b><b>m</b><b>a</b><b>r</b><b>k</b> on a connection tracking entry
+                   before dropping a packet, for example.
+
+              <b>c</b><b>t</b><b>_</b><b>d</b><b>n</b><b>a</b><b>t</b><b>;</b>
+              <b>c</b><b>t</b><b>_</b><b>d</b><b>n</b><b>a</b><b>t</b><b>(</b><u>I</u><u>P</u><b>)</b><b>;</b>
+                   <b>c</b><b>t</b><b>_</b><b>d</b><b>n</b><b>a</b><b>t</b> sends the packet through the DNAT zone  in  connec‐
+                   tion tracking table to unDNAT any packet that was DNATed in
+                   the  opposite  direction.  The packet is then automatically
+                   sent to to the next tables as if followed by <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>  action.
+                   The  next  tables will see the changes in the packet caused
+                   by the connection tracker.
+
+                   <b>c</b><b>t</b><b>_</b><b>d</b><b>n</b><b>a</b><b>t</b><b>(</b><u>I</u><u>P</u><b>)</b> sends the  packet  through  the  DNAT  zone  to
+                   change  the destination IP address of the packet to the one
+                   provided inside the parentheses and commits the connection.
+                   The packet is then automatically sent to the next tables as
+                   if followed by <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b> action. The next tables will  see  the
+                   changes in the packet caused by the connection tracker.
+
+              <b>c</b><b>t</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>;</b>
+              <b>c</b><b>t</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>(</b><u>I</u><u>P</u><b>)</b><b>;</b>
+                   <b>c</b><b>t</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b>  sends  the  packet through the SNAT zone to unSNAT
+                   any packet that was SNATed in the opposite  direction.  The
+                   packet  is automatically sent to the next tables as if fol‐
+                   lowed by the <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b> action. The next  tables  will  see  the
+                   changes in the packet caused by the connection tracker.
+
+                   <b>c</b><b>t</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>(</b><u>I</u><u>P</u><b>)</b>  sends  the  packet  through  the  SNAT zone to
+                   change the source IP address of the packet to the one  pro‐
+                   vided  inside  the  parenthesis and commits the connection.
+                   The packet is then automatically sent to the next tables as
+                   if followed by <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b> action. The next tables will  see  the
+                   changes in the packet caused by the connection tracker.
+
+              <b>c</b><b>t</b><b>_</b><b>d</b><b>n</b><b>a</b><b>t</b><b>_</b><b>i</b><b>n</b><b>_</b><b>c</b><b>z</b><b>o</b><b>n</b><b>e</b><b>;</b>
+              <b>c</b><b>t</b><b>_</b><b>d</b><b>n</b><b>a</b><b>t</b><b>_</b><b>i</b><b>n</b><b>_</b><b>c</b><b>z</b><b>o</b><b>n</b><b>e</b><b>(</b><u>I</u><u>P</u><b>)</b><b>;</b>
+                   <b>c</b><b>t</b><b>_</b><b>d</b><b>n</b><b>a</b><b>t</b><b>_</b><b>i</b><b>n</b><b>_</b><b>c</b><b>z</b><b>o</b><b>n</b><b>e</b>  sends  the  packet through the common NAT
+                   zone (used for both DNAT and SNAT) in  connection  tracking
+                   table  to unDNAT any packet that was DNATed in the opposite
+                   direction. The packet is then automatically sent to to  the
+                   next tables as if followed by <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b> action. The next tables
+                   will see the changes in the packet caused by the connection
+                   tracker.
+
+                   <b>c</b><b>t</b><b>_</b><b>d</b><b>n</b><b>a</b><b>t</b><b>_</b><b>i</b><b>n</b><b>_</b><b>c</b><b>z</b><b>o</b><b>n</b><b>e</b><b>(</b><u>I</u><u>P</u><b>)</b>  sends  the  packet through the common
+                   NAT zone to change the destination IP address of the packet
+                   to the one provided inside the parentheses and commits  the
+                   connection.  The  packet  is then automatically sent to the
+                   next tables as if followed by <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b> action. The next tables
+                   will see the changes in the packet caused by the connection
+                   tracker.
+
+              <b>c</b><b>t</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>_</b><b>i</b><b>n</b><b>_</b><b>c</b><b>z</b><b>o</b><b>n</b><b>e</b><b>;</b>
+              <b>c</b><b>t</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>_</b><b>i</b><b>n</b><b>_</b><b>c</b><b>z</b><b>o</b><b>n</b><b>e</b><b>(</b><u>I</u><u>P</u><b>)</b><b>;</b>
+                   <b>c</b><b>t</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>_</b><b>i</b><b>n</b><b>_</b><b>c</b><b>z</b><b>o</b><b>n</b><b>e</b> sends the packet through  the  common  NAT
+                   zone  to  unSNAT any packet that was SNATed in the opposite
+                   direction. The packet is automatically sent to the next ta‐
+                   bles as if followed by the <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b> action.  The  next  tables
+                   will see the changes in the packet caused by the connection
+                   tracker.
+
+                   <b>c</b><b>t</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>_</b><b>i</b><b>n</b><b>_</b><b>c</b><b>z</b><b>o</b><b>n</b><b>e</b><b>(</b><u>I</u><u>P</u><b>)</b>  sends  the packet\ through the common
+                   NAT zone to change the source IP address of the  packet  to
+                   the  one  provided  inside  the parenthesis and commits the
+                   connection. The packet is then automatically  sent  to  the
+                   next tables as if followed by <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b> action. The next tables
+                   will see the changes in the packet caused by the connection
+                   tracker.
+
+              <b>c</b><b>t</b><b>_</b><b>c</b><b>l</b><b>e</b><b>a</b><b>r</b><b>;</b>
+                   Clears connection tracking state.
+
+              <b>c</b><b>t</b><b>_</b><b>c</b><b>o</b><b>m</b><b>m</b><b>i</b><b>t</b><b>_</b><b>n</b><b>a</b><b>t</b><b>;</b>
+                   Applies NAT and commits the connection to the CT. Automati‐
+                   cally  moves  on to the next table, as if followed by <b>n</b><b>e</b><b>x</b><b>t</b>.
+                   This is very useful for connections  that  are  in  related
+                   state  for  already existing connections and allows the NAT
+                   to be applied to them as well.
+
+              <b>c</b><b>l</b><b>o</b><b>n</b><b>e</b> <b>{</b> <u>a</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u><b>;</b> ... <b>}</b><b>;</b>
+                   Makes a copy of the packet  being  processed  and  executes
+                   each  <b>a</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>  on  the copy. Actions following the <u>c</u><u>l</u><u>o</u><u>n</u><u>e</u> ac‐
+                   tion, if any, apply to  the  original,  unmodified  packet.
+                   This  can  be  used  as  a  way to ``save and restore’’ the
+                   packet around a set of  actions  that  may  modify  it  and
+                   should not persist.
+
+              <b>a</b><b>r</b><b>p</b> <b>{</b> <u>a</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u><b>;</b> ... <b>}</b><b>;</b>
+                   Temporarily  replaces the IPv4 packet being processed by an
+                   ARP packet and executes  each  nested  <u>a</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u>  on  the  ARP
+                   packet.  Actions following the <u>a</u><u>r</u><u>p</u> action, if any, apply to
+                   the original, unmodified packet.
+
+                   The ARP packet that this action operates on is  initialized
+                   based on the IPv4 packet being processed, as follows. These
+                   are  default  values  that the nested actions will probably
+                   want to change:
+
+                   •      <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b> unchanged
+
+                   •      <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> unchanged
+
+                   •      <b>e</b><b>t</b><b>h</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b> <b>=</b> <b>0</b><b>x</b><b>0</b><b>8</b><b>0</b><b>6</b>
+
+                   •      <b>a</b><b>r</b><b>p</b><b>.</b><b>o</b><b>p</b> <b>=</b> <b>1</b> (ARP request)
+
+                   •      <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>h</b><b>a</b> copied from <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b>
+
+                   •      <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>p</b><b>a</b> copied from <b>i</b><b>p</b><b>4</b><b>.</b><b>s</b><b>r</b><b>c</b>
+
+                   •      <b>a</b><b>r</b><b>p</b><b>.</b><b>t</b><b>h</b><b>a</b> <b>=</b> <b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b>
+
+                   •      <b>a</b><b>r</b><b>p</b><b>.</b><b>t</b><b>p</b><b>a</b> copied from <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b>
+
+                   The ARP packet has the same VLAN header, if any, as the  IP
+                   packet it replaces.
+
+                   <b>P</b><b>r</b><b>e</b><b>r</b><b>e</b><b>q</b><b>u</b><b>i</b><b>s</b><b>i</b><b>t</b><b>e</b><b>:</b> <b>i</b><b>p</b><b>4</b>
+
+              <b>g</b><b>e</b><b>t</b><b>_</b><b>a</b><b>r</b><b>p</b><b>(</b><u>P</u><b>,</b> <u>A</u><b>)</b><b>;</b>
+                   <b>P</b><b>a</b><b>r</b><b>a</b><b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b>:  logical port string field <u>P</u>, 32-bit IP address
+                   field <u>A</u>.
+
+                   Looks up <u>A</u> in <u>P</u>’s mac binding table. If an entry is  found,
+                   stores  its  Ethernet  address in <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b>, otherwise stores
+                   <b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b> in <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b>.
+
+                   <b>E</b><b>x</b><b>a</b><b>m</b><b>p</b><b>l</b><b>e</b><b>:</b> <b>g</b><b>e</b><b>t</b><b>_</b><b>a</b><b>r</b><b>p</b><b>(</b><b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b><b>,</b> <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b><b>)</b><b>;</b>
+
+              <b>p</b><b>u</b><b>t</b><b>_</b><b>a</b><b>r</b><b>p</b><b>(</b><u>P</u><b>,</b> <u>A</u><b>,</b> <u>E</u><b>)</b><b>;</b>
+                   <b>P</b><b>a</b><b>r</b><b>a</b><b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b>: logical port string field <u>P</u>, 32-bit IP  address
+                   field <u>A</u>, 48-bit Ethernet address field <u>E</u>.
+
+                   Adds  or updates the entry for IP address <u>A</u> in logical port
+                   <u>P</u>’s mac binding table, setting its Ethernet address to <u>E</u>.
+
+                   <b>E</b><b>x</b><b>a</b><b>m</b><b>p</b><b>l</b><b>e</b><b>:</b> <b>p</b><b>u</b><b>t</b><b>_</b><b>a</b><b>r</b><b>p</b><b>(</b><b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b><b>,</b> <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>p</b><b>a</b><b>,</b> <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>h</b><b>a</b><b>)</b><b>;</b>
+
+              <u>R</u> <b>=</b> <b>l</b><b>o</b><b>o</b><b>k</b><b>u</b><b>p</b><b>_</b><b>a</b><b>r</b><b>p</b><b>(</b><u>P</u><b>,</b> <u>A</u><b>,</b> <u>M</u><b>)</b><b>;</b>
+                   <b>P</b><b>a</b><b>r</b><b>a</b><b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b>: logical port string field <u>P</u>, 32-bit IP  address
+                   field <u>A</u>, 48-bit MAC address field <u>M</u>.
+
+                   <b>R</b><b>e</b><b>s</b><b>u</b><b>l</b><b>t</b>: stored to a 1-bit subfield <u>R</u>.
+
+                   Looks  up  <u>A</u> and <u>M</u> in <u>P</u>’s mac binding table. If an entry is
+                   found, stores <b>1</b> in the 1-bit subfield <u>R</u>, else 0.
+
+                   <b>E</b><b>x</b><b>a</b><b>m</b><b>p</b><b>l</b><b>e</b><b>:</b> <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>0</b><b>]</b> <b>=</b> <b>l</b><b>o</b><b>o</b><b>k</b><b>u</b><b>p</b><b>_</b><b>a</b><b>r</b><b>p</b><b>(</b><b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b><b>,</b> <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>p</b><b>a</b><b>,</b> <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>h</b><b>a</b><b>)</b><b>;</b>
+
+              <u>R</u> <b>=</b> <b>l</b><b>o</b><b>o</b><b>k</b><b>u</b><b>p</b><b>_</b><b>a</b><b>r</b><b>p</b><b>_</b><b>i</b><b>p</b><b>(</b><u>P</u><b>,</b> <u>A</u><b>)</b><b>;</b>
+                   <b>P</b><b>a</b><b>r</b><b>a</b><b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b>: logical port string field <u>P</u>, 32-bit IP  address
+                   field <u>A</u>.
+
+                   <b>R</b><b>e</b><b>s</b><b>u</b><b>l</b><b>t</b>: stored to a 1-bit subfield <u>R</u>.
+
+                   Looks  up <u>A</u> in <u>P</u>’s mac binding table. If an entry is found,
+                   stores <b>1</b> in the 1-bit subfield <u>R</u>, else 0.
+
+                   <b>E</b><b>x</b><b>a</b><b>m</b><b>p</b><b>l</b><b>e</b><b>:</b> <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>0</b><b>]</b> <b>=</b> <b>l</b><b>o</b><b>o</b><b>k</b><b>u</b><b>p</b><b>_</b><b>a</b><b>r</b><b>p</b><b>_</b><b>i</b><b>p</b><b>(</b><b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b><b>,</b> <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>p</b><b>a</b><b>)</b><b>;</b>
+
+              <u>P</u> <b>=</b> <b>g</b><b>e</b><b>t</b><b>_</b><b>f</b><b>d</b><b>b</b><b>(</b><u>A</u><b>)</b><b>;</b>
+                   <b>P</b><b>a</b><b>r</b><b>a</b><b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b>:48-bit MAC address field <u>A</u>.
+
+                   Looks up <u>A</u> in fdb table. If an entry is found,  stores  the
+                   logical port key to the out parameter <b>P</b>.
+
+                   <b>E</b><b>x</b><b>a</b><b>m</b><b>p</b><b>l</b><b>e</b><b>:</b> <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b> <b>g</b><b>e</b><b>t</b><b>_</b><b>f</b><b>d</b><b>b</b><b>(</b><b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b><b>)</b><b>;</b>
+
+              <b>p</b><b>u</b><b>t</b><b>_</b><b>f</b><b>d</b><b>b</b><b>(</b><u>P</u><b>,</b> <u>A</u><b>)</b><b>;</b>
+                   <b>P</b><b>a</b><b>r</b><b>a</b><b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b>: logical port string field <u>P</u>, 48-bit MAC address
+                   field <u>A</u>.
+
+                   Adds or updates the entry for Ethernet address <u>A</u> in fdb ta‐
+                   ble, setting its logical port key to <u>P</u>.
+
+                   <b>E</b><b>x</b><b>a</b><b>m</b><b>p</b><b>l</b><b>e</b><b>:</b> <b>p</b><b>u</b><b>t</b><b>_</b><b>f</b><b>d</b><b>b</b><b>(</b><b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b><b>,</b> <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>p</b><b>a</b><b>)</b><b>;</b>
+
+              <u>R</u> <b>=</b> <b>l</b><b>o</b><b>o</b><b>k</b><b>u</b><b>p</b><b>_</b><b>f</b><b>d</b><b>b</b><b>(</b><u>P</u><b>,</b> <u>A</u><b>)</b><b>;</b>
+                   <b>P</b><b>a</b><b>r</b><b>a</b><b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b>: 48-bit MAC address field <u>M</u>, logical port string
+                   field <u>P</u>.
+
+                   <b>R</b><b>e</b><b>s</b><b>u</b><b>l</b><b>t</b>: stored to a 1-bit subfield <u>R</u>.
+
+                   Looks up <u>A</u> in fdb table. If an entry is found and the logi‐
+                   cal  port  key  is  <u>P</u>, <b>P</b>, stores <b>1</b> in the 1-bit subfield <u>R</u>,
+                   else 0. If <b>f</b><b>l</b><b>a</b><b>g</b><b>s</b><b>.</b><b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b> is set then <b>1</b> is stored if an en‐
+                   try is found and the logical port key is <u>P</u> or if  an  entry
+                   is found and the entry port type is VIF.
+
+                   <b>E</b><b>x</b><b>a</b><b>m</b><b>p</b><b>l</b><b>e</b><b>:</b> <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>0</b><b>]</b> <b>=</b> <b>l</b><b>o</b><b>o</b><b>k</b><b>u</b><b>p</b><b>_</b><b>f</b><b>d</b><b>b</b><b>(</b><b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b><b>,</b> <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b><b>)</b><b>;</b>
+
+              <b>n</b><b>d</b><b>_</b><b>n</b><b>s</b> <b>{</b> <u>a</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u><b>;</b> ... <b>}</b><b>;</b>
+                   Temporarily  replaces the IPv6 packet being processed by an
+                   IPv6 Neighbor Solicitation packet and executes each  nested
+                   <u>a</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u>  on  the IPv6 NS packet. Actions following the <u>n</u><u>d</u><b>_</b><u>n</u><u>s</u>
+                   action, if any, apply to the original, unmodified packet.
+
+                   The IPv6 NS packet that this action operates on is initial‐
+                   ized based on the IPv6 packet being processed, as  follows.
+                   These are default values that the nested actions will prob‐
+                   ably want to change:
+
+                   •      <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b> unchanged
+
+                   •      <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> set to IPv6 multicast MAC address
+
+                   •      <b>e</b><b>t</b><b>h</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b> <b>=</b> <b>0</b><b>x</b><b>8</b><b>6</b><b>d</b><b>d</b>
+
+                   •      <b>i</b><b>p</b><b>6</b><b>.</b><b>s</b><b>r</b><b>c</b> copied from <b>i</b><b>p</b><b>6</b><b>.</b><b>s</b><b>r</b><b>c</b>
+
+                   •      <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b> set to IPv6 Solicited-Node multicast address
+
+                   •      <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b> <b>=</b> <b>1</b><b>3</b><b>5</b> (Neighbor Solicitation)
+
+                   •      <b>n</b><b>d</b><b>.</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> copied from <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b>
+
+                   The IPv6 NS packet has the same VLAN header, if any, as the
+                   IP packet it replaces.
+
+                   <b>P</b><b>r</b><b>e</b><b>r</b><b>e</b><b>q</b><b>u</b><b>i</b><b>s</b><b>i</b><b>t</b><b>e</b><b>:</b> <b>i</b><b>p</b><b>6</b>
+
+              <b>n</b><b>d</b><b>_</b><b>n</b><b>a</b> <b>{</b> <u>a</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u><b>;</b> ... <b>}</b><b>;</b>
+                   Temporarily  replaces the IPv6 neighbor solicitation packet
+                   being processed by  an  IPv6  neighbor  advertisement  (NA)
+                   packet  and  executes  each nested <u>a</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u> on the NA packet.
+                   Actions following the <b>n</b><b>d</b><b>_</b><b>n</b><b>a</b> action, if any,  apply  to  the
+                   original, unmodified packet.
+
+                   The  NA  packet that this action operates on is initialized
+                   based on the IPv6 packet being processed, as follows. These
+                   are default values that the nested  actions  will  probably
+                   want to change:
+
+                   •      <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> exchanged with <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b>
+
+                   •      <b>e</b><b>t</b><b>h</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b> <b>=</b> <b>0</b><b>x</b><b>8</b><b>6</b><b>d</b><b>d</b>
+
+                   •      <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b> copied from <b>i</b><b>p</b><b>6</b><b>.</b><b>s</b><b>r</b><b>c</b>
+
+                   •      <b>i</b><b>p</b><b>6</b><b>.</b><b>s</b><b>r</b><b>c</b> copied from <b>n</b><b>d</b><b>.</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b>
+
+                   •      <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b> <b>=</b> <b>1</b><b>3</b><b>6</b> (Neighbor Advertisement)
+
+                   •      <b>n</b><b>d</b><b>.</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> unchanged
+
+                   •      <b>n</b><b>d</b><b>.</b><b>s</b><b>l</b><b>l</b> <b>=</b> <b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b>
+
+                   •      <b>n</b><b>d</b><b>.</b><b>t</b><b>l</b><b>l</b> copied from <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b>
+
+                   The ND packet has the same VLAN header, if any, as the IPv6
+                   packet it replaces.
+
+                   <b>P</b><b>r</b><b>e</b><b>r</b><b>e</b><b>q</b><b>u</b><b>i</b><b>s</b><b>i</b><b>t</b><b>e</b><b>:</b> <b>n</b><b>d</b><b>_</b><b>n</b><b>s</b>
+
+              <b>n</b><b>d</b><b>_</b><b>n</b><b>a</b><b>_</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b> <b>{</b> <u>a</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u><b>;</b> ... <b>}</b><b>;</b>
+                   Temporarily  replaces the IPv6 neighbor solicitation packet
+                   being processed by  an  IPv6  neighbor  advertisement  (NA)
+                   packet,  sets  ND_NSO_ROUTER  in the RSO flags and executes
+                   each nested <u>a</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u> on the NA packet. Actions following  the
+                   <b>n</b><b>d</b><b>_</b><b>n</b><b>a</b><b>_</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b> action, if any, apply to the original, unmodi‐
+                   fied packet.
+
+                   The  NA  packet that this action operates on is initialized
+                   based on the IPv6 packet being processed, as follows. These
+                   are default values that the nested  actions  will  probably
+                   want to change:
+
+                   •      <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> exchanged with <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b>
+
+                   •      <b>e</b><b>t</b><b>h</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b> <b>=</b> <b>0</b><b>x</b><b>8</b><b>6</b><b>d</b><b>d</b>
+
+                   •      <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b> copied from <b>i</b><b>p</b><b>6</b><b>.</b><b>s</b><b>r</b><b>c</b>
+
+                   •      <b>i</b><b>p</b><b>6</b><b>.</b><b>s</b><b>r</b><b>c</b> copied from <b>n</b><b>d</b><b>.</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b>
+
+                   •      <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b> <b>=</b> <b>1</b><b>3</b><b>6</b> (Neighbor Advertisement)
+
+                   •      <b>n</b><b>d</b><b>.</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> unchanged
+
+                   •      <b>n</b><b>d</b><b>.</b><b>s</b><b>l</b><b>l</b> <b>=</b> <b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b>
+
+                   •      <b>n</b><b>d</b><b>.</b><b>t</b><b>l</b><b>l</b> copied from <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b>
+
+                   The ND packet has the same VLAN header, if any, as the IPv6
+                   packet it replaces.
+
+                   <b>P</b><b>r</b><b>e</b><b>r</b><b>e</b><b>q</b><b>u</b><b>i</b><b>s</b><b>i</b><b>t</b><b>e</b><b>:</b> <b>n</b><b>d</b><b>_</b><b>n</b><b>s</b>
+
+              <b>g</b><b>e</b><b>t</b><b>_</b><b>n</b><b>d</b><b>(</b><u>P</u><b>,</b> <u>A</u><b>)</b><b>;</b>
+                   <b>P</b><b>a</b><b>r</b><b>a</b><b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b>:  logical  port string field <u>P</u>, 128-bit IPv6 ad‐
+                   dress field <u>A</u>.
+
+                   Looks up <u>A</u> in <u>P</u>’s mac binding table. If an entry is  found,
+                   stores  its  Ethernet  address in <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b>, otherwise stores
+                   <b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b> in <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b>.
+
+                   <b>E</b><b>x</b><b>a</b><b>m</b><b>p</b><b>l</b><b>e</b><b>:</b> <b>g</b><b>e</b><b>t</b><b>_</b><b>n</b><b>d</b><b>(</b><b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b><b>,</b> <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b><b>)</b><b>;</b>
+
+              <b>p</b><b>u</b><b>t</b><b>_</b><b>n</b><b>d</b><b>(</b><u>P</u><b>,</b> <u>A</u><b>,</b> <u>E</u><b>)</b><b>;</b>
+                   <b>P</b><b>a</b><b>r</b><b>a</b><b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b>: logical port string field <u>P</u>, 128-bit  IPv6  ad‐
+                   dress field <u>A</u>, 48-bit Ethernet address field <u>E</u>.
+
+                   Adds  or  updates  the  entry for IPv6 address <u>A</u> in logical
+                   port <u>P</u>’s mac binding table, setting its Ethernet address to
+                   <u>E</u>.
+
+                   <b>E</b><b>x</b><b>a</b><b>m</b><b>p</b><b>l</b><b>e</b><b>:</b> <b>p</b><b>u</b><b>t</b><b>_</b><b>n</b><b>d</b><b>(</b><b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b><b>,</b> <b>n</b><b>d</b><b>.</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b><b>,</b> <b>n</b><b>d</b><b>.</b><b>t</b><b>l</b><b>l</b><b>)</b><b>;</b>
+
+              <u>R</u> <b>=</b> <b>l</b><b>o</b><b>o</b><b>k</b><b>u</b><b>p</b><b>_</b><b>n</b><b>d</b><b>(</b><u>P</u><b>,</b> <u>A</u><b>,</b> <u>M</u><b>)</b><b>;</b>
+                   <b>P</b><b>a</b><b>r</b><b>a</b><b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b>: logical port string field <u>P</u>, 128-bit IP address
+                   field <u>A</u>, 48-bit MAC address field <u>M</u>.
+
+                   <b>R</b><b>e</b><b>s</b><b>u</b><b>l</b><b>t</b>: stored to a 1-bit subfield <u>R</u>.
+
+                   Looks up <u>A</u> and <u>M</u> in <u>P</u>’s mac binding table. If an  entry  is
+                   found, stores <b>1</b> in the 1-bit subfield <u>R</u>, else 0.
+
+                   <b>E</b><b>x</b><b>a</b><b>m</b><b>p</b><b>l</b><b>e</b><b>:</b> <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>0</b><b>]</b> <b>=</b> <b>l</b><b>o</b><b>o</b><b>k</b><b>u</b><b>p</b><b>_</b><b>n</b><b>d</b><b>(</b><b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b><b>,</b> <b>i</b><b>p</b><b>6</b><b>.</b><b>s</b><b>r</b><b>c</b><b>,</b> <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b><b>)</b><b>;</b>
+
+              <u>R</u> <b>=</b> <b>l</b><b>o</b><b>o</b><b>k</b><b>u</b><b>p</b><b>_</b><b>n</b><b>d</b><b>_</b><b>i</b><b>p</b><b>(</b><u>P</u><b>,</b> <u>A</u><b>)</b><b>;</b>
+                   <b>P</b><b>a</b><b>r</b><b>a</b><b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b>: logical port string field <u>P</u>, 128-bit IP address
+                   field <u>A</u>.
+
+                   <b>R</b><b>e</b><b>s</b><b>u</b><b>l</b><b>t</b>: stored to a 1-bit subfield <u>R</u>.
+
+                   Looks  up <u>A</u> in <u>P</u>’s mac binding table. If an entry is found,
+                   stores <b>1</b> in the 1-bit subfield <u>R</u>, else 0.
+
+                   <b>E</b><b>x</b><b>a</b><b>m</b><b>p</b><b>l</b><b>e</b><b>:</b> <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>0</b><b>]</b> <b>=</b> <b>l</b><b>o</b><b>o</b><b>k</b><b>u</b><b>p</b><b>_</b><b>n</b><b>d</b><b>_</b><b>i</b><b>p</b><b>(</b><b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b><b>,</b> <b>i</b><b>p</b><b>6</b><b>.</b><b>s</b><b>r</b><b>c</b><b>)</b><b>;</b>
+
+              <u>R</u> <b>=</b> <b>p</b><b>u</b><b>t</b><b>_</b><b>d</b><b>h</b><b>c</b><b>p</b><b>_</b><b>o</b><b>p</b><b>t</b><b>s</b><b>(</b><u>D</u><u>1</u> <b>=</b> <u>V</u><u>1</u><b>,</b> <u>D</u><u>2</u> <b>=</b> <u>V</u><u>2</u><b>,</b> <b>.</b><b>.</b><b>.</b><b>,</b> <u>D</u><u>n</u> <b>=</b> <u>V</u><u>n</u><b>)</b><b>;</b>
+                   <b>P</b><b>a</b><b>r</b><b>a</b><b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b>: one or more DHCP option/value pairs, which must
+                   include an <b>o</b><b>f</b><b>f</b><b>e</b><b>r</b><b>i</b><b>p</b> option (with code 0).
+
+                   <b>R</b><b>e</b><b>s</b><b>u</b><b>l</b><b>t</b>: stored to a 1-bit subfield <u>R</u>.
+
+                   Valid only in the ingress pipeline.
+
+                   When this action  is  applied  to  a  DHCP  request  packet
+                   (DHCPDISCOVER or DHCPREQUEST), it changes the packet into a
+                   DHCP  reply  (DHCPOFFER or DHCPACK, respectively), replaces
+                   the options by those specified as parameters, and stores  1
+                   in <u>R</u>.
+
+                   When  this action is applied to a non-DHCP packet or a DHCP
+                   packet that is not DHCPDISCOVER or DHCPREQUEST,  it  leaves
+                   the packet unchanged and stores 0 in <u>R</u>.
+
+                   The  contents of the <b>D</b><b>H</b><b>C</b><b>P</b><b>_</b><b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b> table control the DHCP op‐
+                   tion names and values that this action supports.
+
+                   <b>E</b><b>x</b><b>a</b><b>m</b><b>p</b><b>l</b><b>e</b><b>:</b> <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>0</b><b>]</b> <b>=</b> <b>p</b><b>u</b><b>t</b><b>_</b><b>d</b><b>h</b><b>c</b><b>p</b><b>_</b><b>o</b><b>p</b><b>t</b><b>s</b><b>(</b><b>o</b><b>f</b><b>f</b><b>e</b><b>r</b><b>i</b><b>p</b> <b>=</b> <b>1</b><b>0</b><b>.</b><b>0</b><b>.</b><b>0</b><b>.</b><b>2</b><b>,</b> <b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b>
+                   <b>=</b> <b>1</b><b>0</b><b>.</b><b>0</b><b>.</b><b>0</b><b>.</b><b>1</b><b>,</b> <b>n</b><b>e</b><b>t</b><b>m</b><b>a</b><b>s</b><b>k</b> <b>=</b> <b>2</b><b>5</b><b>5</b><b>.</b><b>2</b><b>5</b><b>5</b><b>.</b><b>2</b><b>5</b><b>5</b><b>.</b><b>0</b><b>,</b> <b>d</b><b>n</b><b>s</b><b>_</b><b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b> <b>=</b> <b>{</b><b>8</b><b>.</b><b>8</b><b>.</b><b>8</b><b>.</b><b>8</b><b>,</b>
+                   <b>7</b><b>.</b><b>7</b><b>.</b><b>7</b><b>.</b><b>7</b><b>}</b><b>)</b><b>;</b>
+
+              <u>R</u> <b>=</b> <b>p</b><b>u</b><b>t</b><b>_</b><b>d</b><b>h</b><b>c</b><b>p</b><b>v</b><b>6</b><b>_</b><b>o</b><b>p</b><b>t</b><b>s</b><b>(</b><u>D</u><u>1</u> <b>=</b> <u>V</u><u>1</u><b>,</b> <u>D</u><u>2</u> <b>=</b> <u>V</u><u>2</u><b>,</b> <b>.</b><b>.</b><b>.</b><b>,</b> <u>D</u><u>n</u> <b>=</b> <u>V</u><u>n</u><b>)</b><b>;</b>
+                   <b>P</b><b>a</b><b>r</b><b>a</b><b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b>: one or more DHCPv6 option/value pairs.
+
+                   <b>R</b><b>e</b><b>s</b><b>u</b><b>l</b><b>t</b>: stored to a 1-bit subfield <u>R</u>.
+
+                   Valid only in the ingress pipeline.
+
+                   When this action is applied to a DHCPv6 request packet,  it
+                   changes  the  packet  into a DHCPv6 reply, replaces the op‐
+                   tions by those specified as parameters, and stores 1 in <u>R</u>.
+
+                   When this action is applied to a non-DHCPv6  packet  or  an
+                   invalid  DHCPv6  request  packet , it leaves the packet un‐
+                   changed and stores 0 in <u>R</u>.
+
+                   The contents of the <b>D</b><b>H</b><b>C</b><b>P</b><b>v</b><b>6</b><b>_</b><b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> table control the DHCPv6
+                   option names and values that this action supports.
+
+                   <b>E</b><b>x</b><b>a</b><b>m</b><b>p</b><b>l</b><b>e</b><b>:</b>  <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>3</b><b>]</b>  <b>=</b>  <b>p</b><b>u</b><b>t</b><b>_</b><b>d</b><b>h</b><b>c</b><b>p</b><b>v</b><b>6</b><b>_</b><b>o</b><b>p</b><b>t</b><b>s</b><b>(</b><b>i</b><b>a</b><b>_</b><b>a</b><b>d</b><b>d</b><b>r</b>  <b>=</b>   <b>a</b><b>e</b><b>f</b><b>0</b><b>:</b><b>:</b><b>4</b><b>,</b>
+                   <b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b><b>_</b><b>i</b><b>d</b>                <b>=</b>               <b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>1</b><b>0</b><b>:</b><b>0</b><b>2</b><b>,</b>
+                   <b>d</b><b>n</b><b>s</b><b>_</b><b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b><b>=</b><b>{</b><b>a</b><b>e</b><b>7</b><b>0</b><b>:</b><b>:</b><b>1</b><b>,</b><b>a</b><b>e</b><b>7</b><b>0</b><b>:</b><b>:</b><b>2</b><b>}</b><b>)</b><b>;</b>
+
+              <b>s</b><b>e</b><b>t</b><b>_</b><b>q</b><b>u</b><b>e</b><b>u</b><b>e</b><b>(</b><u>q</u><u>u</u><u>e</u><u>u</u><u>e</u><b>_</b><u>n</u><u>u</u><u>m</u><u>b</u><u>e</u><u>r</u><b>)</b><b>;</b>
+                   <b>P</b><b>a</b><b>r</b><b>a</b><b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b>: Queue number <u>q</u><u>u</u><u>e</u><u>u</u><u>e</u><b>_</b><u>n</u><u>u</u><u>m</u><u>b</u><u>e</u><u>r</u>, in the  range  0  to
+                   61440.
+
+                   This  is a logical equivalent of the OpenFlow <b>s</b><b>e</b><b>t</b><b>_</b><b>q</b><b>u</b><b>e</b><b>u</b><b>e</b> ac‐
+                   tion. It affects packets that egress a hypervisor through a
+                   physical interface. For nonzero <u>q</u><u>u</u><u>e</u><u>u</u><u>e</u><b>_</b><u>n</u><u>u</u><u>m</u><u>b</u><u>e</u><u>r</u>, it configures
+                   packet queuing to match the  settings  configured  for  the
+                   <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>     with    <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>q</b><b>d</b><b>i</b><b>s</b><b>c</b><b>_</b><b>q</b><b>u</b><b>e</b><b>u</b><b>e</b><b>_</b><b>i</b><b>d</b>    matching
+                   <u>q</u><u>u</u><u>e</u><u>u</u><u>e</u><b>_</b><u>n</u><u>u</u><u>m</u><u>b</u><u>e</u><u>r</u>. When <u>q</u><u>u</u><u>e</u><u>u</u><u>e</u><b>_</b><u>n</u><u>u</u><u>m</u><u>b</u><u>e</u><u>r</u> is zero, it resets  queuing
+                   to the default strategy.
+
+                   <b>E</b><b>x</b><b>a</b><b>m</b><b>p</b><b>l</b><b>e</b><b>:</b> <b>s</b><b>e</b><b>t</b><b>_</b><b>q</b><b>u</b><b>e</b><b>u</b><b>e</b><b>(</b><b>1</b><b>0</b><b>)</b><b>;</b>
+
+              <b>c</b><b>t</b><b>_</b><b>l</b><b>b</b><b>;</b>
+              <b>c</b><b>t</b><b>_</b><b>l</b><b>b</b><b>(</b><b>b</b><b>a</b><b>c</b><b>k</b><b>e</b><b>n</b><b>d</b><b>s</b><b>=</b><u>i</u><u>p</u><b>[</b><b>:</b><u>p</u><u>o</u><u>r</u><u>t</u><b>]</b><b>[</b><b>,</b><b>.</b><b>.</b><b>.</b><b>]</b><b>[</b><b>;</b>
+              <b>h</b><b>a</b><b>s</b><b>h</b><b>_</b><b>f</b><b>i</b><b>e</b><b>l</b><b>d</b><b>s</b><b>=</b><u>f</u><u>i</u><u>e</u><u>l</u><u>d</u><u>1</u><b>,</b><u>f</u><u>i</u><u>e</u><u>l</u><u>d</u><u>2</u><b>,</b><b>.</b><b>.</b><b>.</b><b>]</b><b>[</b><b>;</b> <b>c</b><b>t</b><b>_</b><b>f</b><b>l</b><b>a</b><b>g</b><b>]</b><b>)</b><b>;</b>
+                   With  arguments, <b>c</b><b>t</b><b>_</b><b>l</b><b>b</b> commits the packet to the connection
+                   tracking table and DNATs the packet’s  destination  IP  ad‐
+                   dress  (and  port)  to the IP address or addresses (and op‐
+                   tional ports) specified in the <b>b</b><b>a</b><b>c</b><b>k</b><b>e</b><b>n</b><b>d</b><b>s</b>. If multiple comma-
+                   separated IP addresses are specified, each is  given  equal
+                   weight for picking the DNAT address. By default, <b>d</b><b>p</b><b>_</b><b>h</b><b>a</b><b>s</b><b>h</b> is
+                   used  as  the  OpenFlow  group  selection  method,  but  if
+                   <b>h</b><b>a</b><b>s</b><b>h</b><b>_</b><b>f</b><b>i</b><b>e</b><b>l</b><b>d</b><b>s</b> is specified, <b>h</b><b>a</b><b>s</b><b>h</b> is  used  as  the  selection
+                   method,  and the fields listed are used as the hash fields.
+                   The  <b>c</b><b>t</b><b>_</b><b>f</b><b>l</b><b>a</b><b>g</b>  field  represents  one  of  supported   flag:
+                   <b>s</b><b>k</b><b>i</b><b>p</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b> or <b>f</b><b>o</b><b>r</b><b>c</b><b>e</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b>, this flag will be stored in <b>c</b><b>t</b><b>_</b><b>l</b><b>a</b>‐‐
+                   <b>b</b><b>e</b><b>l</b> register.
+
+                   Without arguments, <b>c</b><b>t</b><b>_</b><b>l</b><b>b</b> sends the packet to the connection
+                   tracking table to NAT the packets. If the packet is part of
+                   an  established connection that was previously committed to
+                   the connection tracker via <b>c</b><b>t</b><b>_</b><b>l</b><b>b</b><b>(</b>...<b>)</b>,  it  will  automati‐
+                   cally get DNATed to the same IP address as the first packet
+                   in that connection.
+
+                   Processing  automatically moves on to the next table, as if
+                   <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b> were specified, and later tables act on the packet as
+                   modified by the  connection  tracker.  Connection  tracking
+                   state is scoped by the logical port when the action is used
+                   in  a  flow  for a logical switch, so overlapping addresses
+                   may be used. Connection tracking state  is  scoped  by  the
+                   logical  topology  when  the action is used in a flow for a
+                   router.
+
+              <b>c</b><b>t</b><b>_</b><b>l</b><b>b</b><b>_</b><b>m</b><b>a</b><b>r</b><b>k</b><b>;</b>
+              <b>c</b><b>t</b><b>_</b><b>l</b><b>b</b><b>_</b><b>m</b><b>a</b><b>r</b><b>k</b><b>(</b><b>b</b><b>a</b><b>c</b><b>k</b><b>e</b><b>n</b><b>d</b><b>s</b><b>=</b><u>i</u><u>p</u><b>[</b><b>:</b><u>p</u><u>o</u><u>r</u><u>t</u><b>]</b><b>[</b><b>,</b><b>.</b><b>.</b><b>.</b><b>]</b><b>[</b><b>;</b>
+              <b>h</b><b>a</b><b>s</b><b>h</b><b>_</b><b>f</b><b>i</b><b>e</b><b>l</b><b>d</b><b>s</b><b>=</b><u>f</u><u>i</u><u>e</u><u>l</u><u>d</u><u>1</u><b>,</b><u>f</u><u>i</u><u>e</u><u>l</u><u>d</u><u>2</u><b>,</b><b>.</b><b>.</b><b>.</b><b>]</b><b>[</b><b>;</b> <b>c</b><b>t</b><b>_</b><b>f</b><b>l</b><b>a</b><b>g</b><b>]</b><b>)</b><b>;</b>
+                   Same as <b>c</b><b>t</b><b>_</b><b>l</b><b>b</b>, except that it internally  uses  ct_mark  to
+                   store  the NAT flag, while <b>c</b><b>t</b><b>_</b><b>l</b><b>b</b> uses ct_label for the same
+                   purpose.
+
+              <u>R</u> <b>=</b> <b>d</b><b>n</b><b>s</b><b>_</b><b>l</b><b>o</b><b>o</b><b>k</b><b>u</b><b>p</b><b>(</b><b>)</b><b>;</b>
+                   <b>P</b><b>a</b><b>r</b><b>a</b><b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b>: No parameters.
+
+                   <b>R</b><b>e</b><b>s</b><b>u</b><b>l</b><b>t</b>: stored to a 1-bit subfield <u>R</u>.
+
+                   Valid only in the ingress pipeline.
+
+                   When this action is applied to a valid DNS request  (a  UDP
+                   packet  typically  directed to port 53), it attempts to re‐
+                   solve the query using the contents of the <b>D</b><b>N</b><b>S</b> table. If  it
+                   is  successful,  it changes the packet into a DNS reply and
+                   stores 1 in <u>R</u>. If  the  action  is  applied  to  a  non-DNS
+                   packet,  an  invalid DNS request packet, or a valid DNS re‐
+                   quest for which the <b>D</b><b>N</b><b>S</b> table does not supply an answer, it
+                   leaves the packet unchanged and stores 0 in <u>R</u>.
+
+                   Regardless of success, the action does not make any of  the
+                   changes to the flow that are necessary to direct the packet
+                   back  to  the requester. The logical pipeline can implement
+                   this behavior with matches and actions in later tables.
+
+                   <b>E</b><b>x</b><b>a</b><b>m</b><b>p</b><b>l</b><b>e</b><b>:</b> <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>3</b><b>]</b> <b>=</b> <b>d</b><b>n</b><b>s</b><b>_</b><b>l</b><b>o</b><b>o</b><b>k</b><b>u</b><b>p</b><b>(</b><b>)</b><b>;</b>
+
+                   <b>P</b><b>r</b><b>e</b><b>r</b><b>e</b><b>q</b><b>u</b><b>i</b><b>s</b><b>i</b><b>t</b><b>e</b><b>:</b> <b>u</b><b>d</b><b>p</b>
+
+              <u>R</u> <b>=</b> <b>p</b><b>u</b><b>t</b><b>_</b><b>n</b><b>d</b><b>_</b><b>r</b><b>a</b><b>_</b><b>o</b><b>p</b><b>t</b><b>s</b><b>(</b><u>D</u><u>1</u> <b>=</b> <u>V</u><u>1</u><b>,</b> <u>D</u><u>2</u> <b>=</b> <u>V</u><u>2</u><b>,</b> <b>.</b><b>.</b><b>.</b><b>,</b> <u>D</u><u>n</u> <b>=</b> <u>V</u><u>n</u><b>)</b><b>;</b>
+                   <b>P</b><b>a</b><b>r</b><b>a</b><b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b>: The following IPv6 ND Router Advertisement  op‐
+                   tion/value pairs as defined in RFC 4861.
+
+                   •      <b>a</b><b>d</b><b>d</b><b>r</b><b>_</b><b>m</b><b>o</b><b>d</b><b>e</b>
+
+                          Mandatory parameter which specifies the address mode
+                          flag  to  be  set  in the RA flag options field. The
+                          value of this option is a string and  the  following
+                          values  can  be defined - "slaac", "dhcpv6_stateful"
+                          and "dhcpv6_stateless".
+
+                   •      <b>s</b><b>l</b><b>l</b><b>a</b>
+
+                          Mandatory parameter which specifies  the  link-layer
+                          address  of  the interface from which the Router Ad‐
+                          vertisement is sent.
+
+                   •      <b>m</b><b>t</b><b>u</b>
+
+                          Optional parameter which specifies the MTU.
+
+                   •      <b>p</b><b>r</b><b>e</b><b>f</b><b>i</b><b>x</b>
+
+                          Optional parameter which should be specified if  the
+                          addr_mode  is  "slaac"  or  "dhcpv6_stateless".  The
+                          value should be an IPv6 prefix which  will  be  used
+                          for  stateless  IPv6 address configuration. This op‐
+                          tion can be defined multiple times.
+
+                   <b>R</b><b>e</b><b>s</b><b>u</b><b>l</b><b>t</b>: stored to a 1-bit subfield <u>R</u>.
+
+                   Valid only in the ingress pipeline.
+
+                   When this action is applied to an IPv6 Router  solicitation
+                   request  packet,  it changes the packet into an IPv6 Router
+                   Advertisement reply and adds the options specified  in  the
+                   parameters, and stores 1 in <u>R</u>.
+
+                   When  this action is applied to a non-IPv6 Router solicita‐
+                   tion packet or an invalid IPv6 request packet ,  it  leaves
+                   the packet unchanged and stores 0 in <u>R</u>.
+
+                   <b>E</b><b>x</b><b>a</b><b>m</b><b>p</b><b>l</b><b>e</b><b>:</b> <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>3</b><b>]</b> <b>=</b> <b>p</b><b>u</b><b>t</b><b>_</b><b>n</b><b>d</b><b>_</b><b>r</b><b>a</b><b>_</b><b>o</b><b>p</b><b>t</b><b>s</b><b>(</b><b>a</b><b>d</b><b>d</b><b>r</b><b>_</b><b>m</b><b>o</b><b>d</b><b>e</b> <b>=</b> <b>"</b><b>s</b><b>l</b><b>a</b><b>a</b><b>c</b><b>"</b><b>,</b> <b>s</b><b>l</b><b>l</b><b>a</b>
+                   <b>=</b> <b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>1</b><b>0</b><b>:</b><b>0</b><b>2</b><b>,</b> <b>p</b><b>r</b><b>e</b><b>f</b><b>i</b><b>x</b> <b>=</b> <b>a</b><b>e</b><b>f</b><b>0</b><b>:</b><b>:</b><b>/</b><b>6</b><b>4</b><b>,</b> <b>m</b><b>t</b><b>u</b> <b>=</b> <b>1</b><b>4</b><b>5</b><b>0</b><b>)</b><b>;</b>
+
+              <b>s</b><b>e</b><b>t</b><b>_</b><b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>(</b><u>r</u><u>a</u><u>t</u><u>e</u><b>)</b><b>;</b>
+              <b>s</b><b>e</b><b>t</b><b>_</b><b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>(</b><u>r</u><u>a</u><u>t</u><u>e</u><b>,</b> <u>b</u><u>u</u><u>r</u><u>s</u><u>t</u><b>)</b><b>;</b>
+                   <b>P</b><b>a</b><b>r</b><b>a</b><b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b>:  rate  limit int field <u>r</u><u>a</u><u>t</u><u>e</u> in kbps, burst rate
+                   limits int field <u>b</u><u>u</u><u>r</u><u>s</u><u>t</u> in kbps.
+
+                   This action sets the rate limit for a flow.
+
+                   <b>E</b><b>x</b><b>a</b><b>m</b><b>p</b><b>l</b><b>e</b><b>:</b> <b>s</b><b>e</b><b>t</b><b>_</b><b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>(</b><b>1</b><b>0</b><b>0</b><b>,</b> <b>1</b><b>0</b><b>0</b><b>0</b><b>)</b><b>;</b>
+
+              <u>R</u> <b>=</b> <b>c</b><b>h</b><b>e</b><b>c</b><b>k</b><b>_</b><b>p</b><b>k</b><b>t</b><b>_</b><b>l</b><b>a</b><b>r</b><b>g</b><b>e</b><b>r</b><b>(</b><u>L</u><b>)</b>
+                   <b>P</b><b>a</b><b>r</b><b>a</b><b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b>: packet length <u>L</u> to check for in bytes.
+
+                   <b>R</b><b>e</b><b>s</b><b>u</b><b>l</b><b>t</b>: stored to a 1-bit subfield <u>R</u>.
+
+                   This   is   a   logical   equivalent   of   the    OpenFlow
+                   <b>c</b><b>h</b><b>e</b><b>c</b><b>k</b><b>_</b><b>p</b><b>k</b><b>t</b><b>_</b><b>l</b><b>a</b><b>r</b><b>g</b><b>e</b><b>r</b>  action.  If the packet is larger than the
+                   length specified in <u>L</u>, it stores 1 in the subfield <u>R</u>.
+
+                   <b>E</b><b>x</b><b>a</b><b>m</b><b>p</b><b>l</b><b>e</b><b>:</b> <b>r</b><b>e</b><b>g</b><b>0</b><b>[</b><b>6</b><b>]</b> <b>=</b> <b>c</b><b>h</b><b>e</b><b>c</b><b>k</b><b>_</b><b>p</b><b>k</b><b>t</b><b>_</b><b>l</b><b>a</b><b>r</b><b>g</b><b>e</b><b>r</b><b>(</b><b>1</b><b>0</b><b>0</b><b>0</b><b>)</b><b>;</b>
+
+              <b>l</b><b>o</b><b>g</b><b>(</b><u>k</u><u>e</u><u>y</u><b>=</b><u>v</u><u>a</u><u>l</u><u>u</u><u>e</u><b>,</b> ...<b>)</b><b>;</b>
+                     Causes <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> to log the packet  on  the  chassis
+                     that processes it. Packet logging currently uses the same
+                     logging mechanism as other Open vSwitch and OVN messages,
+                     which  means  that  whether and where log messages appear
+                     depends on the local logging configuration  that  can  be
+                     configured with <b>o</b><b>v</b><b>s</b><b>-</b><b>a</b><b>p</b><b>p</b><b>c</b><b>t</b><b>l</b>, etc.
+
+                     The  <b>l</b><b>o</b><b>g</b>  action takes zero or more of the following key-
+                     value pair arguments that control what is logged:
+
+                     <b>n</b><b>a</b><b>m</b><b>e</b><b>=</b><u>s</u><u>t</u><u>r</u><u>i</u><u>n</u><u>g</u>
+                            An optional name for the ACL. The <u>s</u><u>t</u><u>r</u><u>i</u><u>n</u><u>g</u>  is  cur‐
+                            rently limited to 64 bytes.
+
+                     <b>s</b><b>e</b><b>v</b><b>e</b><b>r</b><b>i</b><b>t</b><b>y</b><b>=</b><u>l</u><u>e</u><u>v</u><u>e</u><u>l</u>
+                            Indicates  the severity of the event. The <u>l</u><u>e</u><u>v</u><u>e</u><u>l</u> is
+                            one of following  (from  more  to  less  serious):
+                            <b>a</b><b>l</b><b>e</b><b>r</b><b>t</b>,  <b>w</b><b>a</b><b>r</b><b>n</b><b>i</b><b>n</b><b>g</b>,  <b>n</b><b>o</b><b>t</b><b>i</b><b>c</b><b>e</b>,  <b>i</b><b>n</b><b>f</b><b>o</b>,  or  <b>d</b><b>e</b><b>b</b><b>u</b><b>g</b>.  If a
+                            severity is not provided, the default is <b>i</b><b>n</b><b>f</b><b>o</b>.
+
+                     <b>v</b><b>e</b><b>r</b><b>d</b><b>i</b><b>c</b><b>t</b><b>=</b><u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>
+                            The verdict for packets  matching  the  flow.  The
+                            value must be one of <b>a</b><b>l</b><b>l</b><b>o</b><b>w</b>, <b>d</b><b>e</b><b>n</b><b>y</b>, or <b>r</b><b>e</b><b>j</b><b>e</b><b>c</b><b>t</b>.
+
+                     <b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>=</b><u>s</u><u>t</u><u>r</u><u>i</u><u>n</u><u>g</u>
+                            An  optional  rate-limiting meter to be applied to
+                            the logs. The <u>s</u><u>t</u><u>r</u><u>i</u><u>n</u><u>g</u> should reference a <b>n</b><b>a</b><b>m</b><b>e</b> entry
+                            from the <b>M</b><b>e</b><b>t</b><b>e</b><b>r</b> table. The only meter  <b>a</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>  that
+                            is appropriate is <b>d</b><b>r</b><b>o</b><b>p</b>.
+
+              <b>f</b><b>w</b><b>d</b><b>_</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b><b>(</b><b>l</b><b>i</b><b>v</b><b>e</b><b>n</b><b>e</b><b>s</b><b>s</b><b>=</b><u>b</u><u>o</u><u>o</u><u>l</u><b>,</b> <b>c</b><b>h</b><b>i</b><b>l</b><b>d</b><b>p</b><b>o</b><b>r</b><b>t</b><b>s</b><b>=</b><u>p</u><u>o</u><u>r</u><u>t</u><b>,</b> <b>.</b><b>.</b><b>.</b><b>)</b><b>;</b>
+                     <b>P</b><b>a</b><b>r</b><b>a</b><b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b>:  optional <b>l</b><b>i</b><b>v</b><b>e</b><b>n</b><b>e</b><b>s</b><b>s</b>, either <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>, de‐
+                     faulting to false; <b>c</b><b>h</b><b>i</b><b>l</b><b>d</b><b>p</b><b>o</b><b>r</b><b>t</b><b>s</b>, a comma-delimited list  of
+                     strings denoting logical ports to load balance across.
+
+                     Load balance traffic to one or more child ports in a log‐
+                     ical switch. <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> translates the <b>f</b><b>w</b><b>d</b><b>_</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b> into
+                     an OpenFlow group with one bucket for each child port. If
+                     <b>l</b><b>i</b><b>v</b><b>e</b><b>n</b><b>e</b><b>s</b><b>s</b><b>=</b><b>t</b><b>r</b><b>u</b><b>e</b> is specified, it also integrates the bucket
+                     selection  with BFD status on the tunnel interface corre‐
+                     sponding to child port.
+
+                     <b>E</b><b>x</b><b>a</b><b>m</b><b>p</b><b>l</b><b>e</b><b>:</b> <b>f</b><b>w</b><b>d</b><b>_</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b><b>(</b><b>l</b><b>i</b><b>v</b><b>e</b><b>n</b><b>e</b><b>s</b><b>s</b><b>=</b><b>t</b><b>r</b><b>u</b><b>e</b><b>,</b> <b>c</b><b>h</b><b>i</b><b>l</b><b>d</b><b>p</b><b>o</b><b>r</b><b>t</b><b>s</b><b>=</b><b>"</b><b>p</b><b>1</b><b>"</b><b>,</b> <b>"</b><b>p</b><b>2</b><b>"</b><b>)</b><b>;</b>
+
+              <b>i</b><b>c</b><b>m</b><b>p</b><b>4</b> <b>{</b> <u>a</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u><b>;</b> ... <b>}</b><b>;</b>
+              <b>i</b><b>c</b><b>m</b><b>p</b><b>4</b><b>_</b><b>e</b><b>r</b><b>r</b><b>o</b><b>r</b> <b>{</b> <u>a</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u><b>;</b> ... <b>}</b><b>;</b>
+                   Temporarily replaces the IPv4 packet being processed by  an
+                   ICMPv4 packet and executes each nested <u>a</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u> on the ICMPv4
+                   packet.  Actions  following these actions, if any, apply to
+                   the original, unmodified packet.
+
+                   The ICMPv4 packet that these actions operates  on  is  ini‐
+                   tialized  based on the IPv4 packet being processed, as fol‐
+                   lows. These are default values that the nested actions will
+                   probably want to  change.  Ethernet  and  IPv4  fields  not
+                   listed here are not changed:
+
+                   •      <b>i</b><b>p</b><b>.</b><b>p</b><b>r</b><b>o</b><b>t</b><b>o</b> <b>=</b> <b>1</b> (ICMPv4)
+
+                   •      <b>i</b><b>p</b><b>.</b><b>f</b><b>r</b><b>a</b><b>g</b> <b>=</b> <b>0</b> (not a fragment)
+
+                   •      <b>i</b><b>p</b><b>.</b><b>t</b><b>t</b><b>l</b> <b>=</b> <b>2</b><b>5</b><b>5</b>
+
+                   •      <b>i</b><b>c</b><b>m</b><b>p</b><b>4</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b> <b>=</b> <b>3</b> (destination unreachable)
+
+                   •      <b>i</b><b>c</b><b>m</b><b>p</b><b>4</b><b>.</b><b>c</b><b>o</b><b>d</b><b>e</b> <b>=</b> <b>1</b> (host unreachable)
+
+                   <b>i</b><b>c</b><b>m</b><b>p</b><b>4</b><b>_</b><b>e</b><b>r</b><b>r</b><b>o</b><b>r</b>  action  is  expected to be used to generate an
+                   ICMPv4 packet in  response  to  an  error  in  original  IP
+                   packet.  When  this  action generates the ICMPv4 packet, it
+                   also copies the original IP datagram following  the  ICMPv4
+                   header as per RFC 1122: 3.2.2.
+
+                   <b>P</b><b>r</b><b>e</b><b>r</b><b>e</b><b>q</b><b>u</b><b>i</b><b>s</b><b>i</b><b>t</b><b>e</b><b>:</b> <b>i</b><b>p</b><b>4</b>
+
+              <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b> <b>{</b> <u>a</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u><b>;</b> ... <b>}</b><b>;</b>
+              <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b><b>_</b><b>e</b><b>r</b><b>r</b><b>o</b><b>r</b> <b>{</b> <u>a</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u><b>;</b> ... <b>}</b><b>;</b>
+                   Temporarily  replaces the IPv6 packet being processed by an
+                   ICMPv6 packet and executes each nested <u>a</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u> on the ICMPv6
+                   packet. Actions following the <u>i</u><u>c</u><u>m</u><u>p</u><u>6</u> action, if  any,  apply
+                   to the original, unmodified packet.
+
+                   The  ICMPv6 packet that this action operates on is initial‐
+                   ized based on the IPv6 packet being processed, as  follows.
+                   These are default values that the nested actions will prob‐
+                   ably  want  to  change. Ethernet and IPv6 fields not listed
+                   here are not changed:
+
+                   •      <b>i</b><b>p</b><b>.</b><b>p</b><b>r</b><b>o</b><b>t</b><b>o</b> <b>=</b> <b>5</b><b>8</b> (ICMPv6)
+
+                   •      <b>i</b><b>p</b><b>.</b><b>t</b><b>t</b><b>l</b> <b>=</b> <b>2</b><b>5</b><b>5</b>
+
+                   •      <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b> <b>=</b> <b>1</b> (destination unreachable)
+
+                   •      <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b><b>.</b><b>c</b><b>o</b><b>d</b><b>e</b> <b>=</b> <b>1</b> (administratively prohibited)
+
+                   <b>i</b><b>c</b><b>m</b><b>p</b><b>6</b><b>_</b><b>e</b><b>r</b><b>r</b><b>o</b><b>r</b> action is expected to be used  to  generate  an
+                   ICMPv6  packet  in  response  to  an error in original IPv6
+                   packet.
+
+                   <b>P</b><b>r</b><b>e</b><b>r</b><b>e</b><b>q</b><b>u</b><b>i</b><b>s</b><b>i</b><b>t</b><b>e</b><b>:</b> <b>i</b><b>p</b><b>6</b>
+
+              <b>t</b><b>c</b><b>p</b><b>_</b><b>r</b><b>e</b><b>s</b><b>e</b><b>t</b><b>;</b>
+                   This action transforms the current TCP packet according  to
+                   the following pseudocode:
+
+                   <b>i</b><b>f</b> <b>(</b><b>t</b><b>c</b><b>p</b><b>.</b><b>a</b><b>c</b><b>k</b><b>)</b> <b>{</b>
+                           <b>t</b><b>c</b><b>p</b><b>.</b><b>s</b><b>e</b><b>q</b> <b>=</b> <b>t</b><b>c</b><b>p</b><b>.</b><b>a</b><b>c</b><b>k</b><b>;</b>
+                   <b>}</b> <b>e</b><b>l</b><b>s</b><b>e</b> <b>{</b>
+                           <b>t</b><b>c</b><b>p</b><b>.</b><b>a</b><b>c</b><b>k</b> <b>=</b> <b>t</b><b>c</b><b>p</b><b>.</b><b>s</b><b>e</b><b>q</b> <b>+</b> <b>l</b><b>e</b><b>n</b><b>g</b><b>t</b><b>h</b><b>(</b><b>t</b><b>c</b><b>p</b><b>.</b><b>p</b><b>a</b><b>y</b><b>l</b><b>o</b><b>a</b><b>d</b><b>)</b><b>;</b>
+                           <b>t</b><b>c</b><b>p</b><b>.</b><b>s</b><b>e</b><b>q</b> <b>=</b> <b>0</b><b>;</b>
+                   <b>}</b>
+                   <b>t</b><b>c</b><b>p</b><b>.</b><b>f</b><b>l</b><b>a</b><b>g</b><b>s</b> <b>=</b> <b>R</b><b>S</b><b>T</b><b>;</b>
+
+                   Then,  the  action  drops all TCP options and payload data,
+                   and updates the TCP checksum. IP ttl is set to 255.
+
+                   <b>P</b><b>r</b><b>e</b><b>r</b><b>e</b><b>q</b><b>u</b><b>i</b><b>s</b><b>i</b><b>t</b><b>e</b><b>:</b> <b>t</b><b>c</b><b>p</b>
+
+              <b>r</b><b>e</b><b>j</b><b>e</b><b>c</b><b>t</b> <b>{</b> <u>a</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u><b>;</b> ... <b>}</b><b>;</b>
+                   If the original packet is IPv4 or IPv6 TCP packet,  it  re‐
+                   places it with IPv4 or IPv6 TCP RST packet and executes the
+                   inner  actions.  Otherwise it replaces it with an ICMPv4 or
+                   ICMPv6 packet and executes the inner actions.
+
+                   The inner actions should not attempt  to  swap  eth  source
+                   with  eth  destination and IP source with IP destination as
+                   this action implicitly does that.
+
+              <b>t</b><b>r</b><b>i</b><b>g</b><b>g</b><b>e</b><b>r</b><b>_</b><b>e</b><b>v</b><b>e</b><b>n</b><b>t</b><b>;</b>
+                   This action is used to allow ovs-vswitchd to report CMS re‐
+                   lated events writing them in <b>C</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b><b>_</b><b>E</b><b>v</b><b>e</b><b>n</b><b>t</b> table. It  is
+                   possible  to  associate a meter to a each event in order to
+                   not overload pinctrl thread under heavy load; each meter is
+                   identified though a defined  naming  convention.  Supported
+                   events:
+
+                   •      <u>e</u><u>m</u><u>p</u><u>t</u><u>y</u><b>_</b><u>l</u><u>b</u><b>_</b><u>b</u><u>a</u><u>c</u><u>k</u><u>e</u><u>n</u><u>d</u><u>s</u>.  This  event  is  raised if a re‐
+                          ceived packet is destined for a  load  balancer  VIP
+                          that  has  no  configured  backend destinations. For
+                          this event, the event info includes  the  load  bal‐
+                          ancer VIP, the load balancer UUID, and the transport
+                          protocol. Associated meter: <b>e</b><b>v</b><b>e</b><b>n</b><b>t</b><b>-</b><b>e</b><b>l</b><b>b</b>
+
+              <b>i</b><b>g</b><b>m</b><b>p</b><b>;</b>
+                   This  action  sends the packet to <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> for multi‐
+                   cast snooping.
+
+                   <b>P</b><b>r</b><b>e</b><b>r</b><b>e</b><b>q</b><b>u</b><b>i</b><b>s</b><b>i</b><b>t</b><b>e</b><b>:</b> <b>i</b><b>g</b><b>m</b><b>p</b>
+
+              <b>b</b><b>i</b><b>n</b><b>d</b><b>_</b><b>v</b><b>p</b><b>o</b><b>r</b><b>t</b><b>(</b><u>V</u><b>,</b> <u>P</u><b>)</b><b>;</b>
+                   <b>P</b><b>a</b><b>r</b><b>a</b><b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b>: logical port string field <u>V</u>  of  type  <b>v</b><b>i</b><b>r</b><b>t</b><b>u</b><b>a</b><b>l</b>,
+                   logical port string field <u>P</u>.
+
+                   Binds  the virtual logical port <u>V</u> and sets the <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> col‐
+                   umn and <b>v</b><b>i</b><b>r</b><b>t</b><b>u</b><b>a</b><b>l</b><b>_</b><b>p</b><b>a</b><b>r</b><b>e</b><b>n</b><b>t</b>  of  the  table  <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>.  <b>v</b><b>i</b><b>r</b>‐‐
+                   <b>t</b><b>u</b><b>a</b><b>l</b><b>_</b><b>p</b><b>a</b><b>r</b><b>e</b><b>n</b><b>t</b> is set to <u>P</u>.
+
+              <b>h</b><b>a</b><b>n</b><b>d</b><b>l</b><b>e</b><b>_</b><b>s</b><b>v</b><b>c</b><b>_</b><b>c</b><b>h</b><b>e</b><b>c</b><b>k</b><b>(</b><u>P</u><b>)</b><b>;</b>
+                   <b>P</b><b>a</b><b>r</b><b>a</b><b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b>: logical port string field <u>P</u>.
+
+                   Handles  the service monitor reply received from the VIF of
+                   the logical port <u>P</u>. <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> periodically  sends  out
+                   the  service monitor packets for the services configured in
+                   the <b>S</b><b>e</b><b>r</b><b>v</b><b>i</b><b>c</b><b>e</b><b>_</b><b>M</b><b>o</b><b>n</b><b>i</b><b>t</b><b>o</b><b>r</b> table and this action updates the  sta‐
+                   tus of those services.
+
+                   <b>E</b><b>x</b><b>a</b><b>m</b><b>p</b><b>l</b><b>e</b><b>:</b> <b>h</b><b>a</b><b>n</b><b>d</b><b>l</b><b>e</b><b>_</b><b>s</b><b>v</b><b>c</b><b>_</b><b>c</b><b>h</b><b>e</b><b>c</b><b>k</b><b>(</b><b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b><b>)</b><b>;</b>
+
+              <b>h</b><b>a</b><b>n</b><b>d</b><b>l</b><b>e</b><b>_</b><b>d</b><b>h</b><b>c</b><b>p</b><b>v</b><b>6</b><b>_</b><b>r</b><b>e</b><b>p</b><b>l</b><b>y</b><b>;</b>
+                   Handle DHCPv6 prefix delegation advertisements/replies from
+                   a  IPv6 delegation server. <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> will add an entry
+                   <b>i</b><b>p</b><b>v</b><b>6</b><b>_</b><b>r</b><b>a</b><b>_</b><b>p</b><b>d</b><b>_</b><b>l</b><b>i</b><b>s</b><b>t</b> in the <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> table for  each  prefix  re‐
+                   ceived from the delegation server
+
+              <u>R</u> <b>=</b> <b>s</b><b>e</b><b>l</b><b>e</b><b>c</b><b>t</b><b>(</b><u>N</u><u>1</u><b>[</b><b>=</b><u>W</u><u>1</u><b>]</b><b>,</b> <u>N</u><u>2</u><b>[</b><b>=</b><u>W</u><u>2</u><b>]</b><b>,</b> <b>.</b><b>.</b><b>.</b><b>)</b><b>;</b>
+                   <b>P</b><b>a</b><b>r</b><b>a</b><b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b>: Integer <u>N</u><u>1</u>, <u>N</u><u>2</u>..., with optional weight <u>W</u><u>1</u>, <u>W</u><u>2</u>,
+                   ...
+
+                   <b>R</b><b>e</b><b>s</b><b>u</b><b>l</b><b>t</b>: stored to a logical field or subfield <u>R</u>.
+
+                   Select  from  a list of integers <u>N</u><u>1</u>, <u>N</u><u>2</u>..., each within the
+                   range 0 ~ 65535, and store the selected one in the field <u>R</u>.
+                   There must be 2 or more integers listed, each with  an  op‐
+                   tional  weight,  which  is  an integer within the range 1 ~
+                   65535. If weight is not specified, it defaults to 100.  The
+                   selection  method  is  based  on the 5-tuple hash of packet
+                   header.
+
+                   Processing automatically moves on to the next table, as  if
+                   <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>  were specified. The <b>s</b><b>e</b><b>l</b><b>e</b><b>c</b><b>t</b> action must be put as the
+                   last action of the logical flow when there are multiple ac‐
+                   tions (actions put after <b>s</b><b>e</b><b>l</b><b>e</b><b>c</b><b>t</b> will not take effect).
+
+                   <b>E</b><b>x</b><b>a</b><b>m</b><b>p</b><b>l</b><b>e</b><b>:</b> <b>r</b><b>e</b><b>g</b><b>8</b><b>[</b><b>1</b><b>6</b><b>.</b><b>.</b><b>3</b><b>1</b><b>]</b> <b>=</b> <b>s</b><b>e</b><b>l</b><b>e</b><b>c</b><b>t</b><b>(</b><b>1</b><b>=</b><b>2</b><b>0</b><b>,</b> <b>2</b><b>=</b><b>3</b><b>0</b><b>,</b> <b>3</b><b>=</b><b>5</b><b>0</b><b>)</b><b>;</b>
+
+              <b>h</b><b>a</b><b>n</b><b>d</b><b>l</b><b>e</b><b>_</b><b>d</b><b>h</b><b>c</b><b>p</b><b>v</b><b>6</b><b>_</b><b>r</b><b>e</b><b>p</b><b>l</b><b>y</b><b>;</b>
+                   This action is used to parse DHCPv6 replies from IPv6 Dele‐
+                   gation Router and managed IPv6 Prefix delegation state  ma‐
+                   chine
+
+              <u>R</u> <b>=</b> <b>c</b><b>h</b><b>k</b><b>_</b><b>l</b><b>b</b><b>_</b><b>h</b><b>a</b><b>i</b><b>r</b><b>p</b><b>i</b><b>n</b><b>(</b><b>)</b><b>;</b>
+                   This  action  checks  if the packet under consideration was
+                   destined to a load balancer VIP and it is hairpinned, i.e.,
+                   after load balancing the destination IP matches the  source
+                   IP.  If  it is so, then the 1-bit destination register <u>R</u> is
+                   set to 1.
+
+              <u>R</u> <b>=</b> <b>c</b><b>h</b><b>k</b><b>_</b><b>l</b><b>b</b><b>_</b><b>h</b><b>a</b><b>i</b><b>r</b><b>p</b><b>i</b><b>n</b><b>_</b><b>r</b><b>e</b><b>p</b><b>l</b><b>y</b><b>(</b><b>)</b><b>;</b>
+                   This action checks if the  packet  under  consideration  is
+                   from  one  of the backend IP of a load balancer VIP and the
+                   destination IP is the load balancer VIP. If it is so,  then
+                   the 1-bit destination register <u>R</u> is set to 1.
+
+              <u>R</u> <b>=</b> <b>c</b><b>t</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>_</b><b>t</b><b>o</b><b>_</b><b>v</b><b>i</b><b>p</b><b>;</b>
+                   This  action  sends  the  packet  through  the SNAT zone to
+                   change the source IP address of the packet to the load bal‐
+                   ancer VIP if the original destination IP was load  balancer
+                   VIP  and  commits  the connection. This action applies suc‐
+                   cessfully only for the hairpinned traffic i.e if the action
+                   <b>c</b><b>h</b><b>k</b><b>_</b><b>l</b><b>b</b><b>_</b><b>h</b><b>a</b><b>i</b><b>r</b><b>p</b><b>i</b><b>n</b> returned success. This action  doesn’t  take
+                   any arguments and it determines the SNAT IP internally. The
+                   packet  is  not  automatically  sent to the next table. The
+                   caller has to execute the  <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>  action  explicitly  after
+                   this action to advance the packet to the next stage.
+
+              <u>R</u> <b>=</b> <b>c</b><b>h</b><b>e</b><b>c</b><b>k</b><b>_</b><b>i</b><b>n</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b><b>_</b><b>s</b><b>e</b><b>c</b><b>(</b><b>)</b><b>;</b>
+                   This action checks if the packet under consideration passes
+                   the  inport  port  security checks. If the packet fails the
+                   port security checks, then <b>1</b> is stored in  the  destination
+                   register  <u>R</u>.  Else 0 is stored. The port security values to
+                   check are retrieved from the the <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> logical port.
+
+                   This action should be used in the  ingress  logical  switch
+                   pipeline.
+
+                   <b>E</b><b>x</b><b>a</b><b>m</b><b>p</b><b>l</b><b>e</b><b>:</b> <b>r</b><b>e</b><b>g</b><b>8</b><b>[</b><b>0</b><b>.</b><b>.</b><b>7</b><b>]</b> <b>=</b> <b>c</b><b>h</b><b>e</b><b>c</b><b>k</b><b>_</b><b>i</b><b>n</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b><b>_</b><b>s</b><b>e</b><b>c</b><b>(</b><b>)</b><b>;</b>
+
+              <u>R</u> <b>=</b> <b>c</b><b>h</b><b>e</b><b>c</b><b>k</b><b>_</b><b>o</b><b>u</b><b>t</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b><b>_</b><b>s</b><b>e</b><b>c</b><b>(</b><b>)</b><b>;</b>
+                   This action checks if the packet under consideration passes
+                   the  outport  port security checks. If the packet fails the
+                   port security checks, then <b>1</b> is stored in  the  destination
+                   register  <u>R</u>.  Else 0 is stored. The port security values to
+                   check are retrieved from the the <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> logical port.
+
+                   This action should be used in  the  egress  logical  switch
+                   pipeline.
+
+                   <b>E</b><b>x</b><b>a</b><b>m</b><b>p</b><b>l</b><b>e</b><b>:</b> <b>r</b><b>e</b><b>g</b><b>8</b><b>[</b><b>0</b><b>.</b><b>.</b><b>7</b><b>]</b> <b>=</b> <b>c</b><b>h</b><b>e</b><b>c</b><b>k</b><b>_</b><b>o</b><b>u</b><b>t</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b><b>_</b><b>s</b><b>e</b><b>c</b><b>(</b><b>)</b><b>;</b>
+
+              <b>c</b><b>o</b><b>m</b><b>m</b><b>i</b><b>t</b><b>_</b><b>e</b><b>c</b><b>m</b><b>p</b><b>_</b><b>n</b><b>h</b><b>(</b><u>i</u><u>p</u><u>v</u><u>6</u><b>)</b><b>;</b>
+                   <b>P</b><b>a</b><b>r</b><b>a</b><b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b>: IPv4/IPv6 traffic.
+
+                   This  action  translates to an openflow "learn" action that
+                   inserts two new flows in tables 76 and 77.
+
+                   •      Match on the the 5-tuple and the  expected  next-hop
+                          mac  address  in  table  76: <b>n</b><b>w</b><b>_</b><b>s</b><b>r</b><b>c</b><b>=</b><b>i</b><b>p</b><b>0</b>, <b>n</b><b>w</b><b>_</b><b>d</b><b>s</b><b>t</b><b>=</b><b>i</b><b>p</b><b>1</b>,
+                          <b>i</b><b>p</b><b>_</b><b>p</b><b>r</b><b>o</b><b>t</b><b>o</b>,<b>t</b><b>p</b><b>_</b><b>s</b><b>r</b><b>c</b><b>=</b><b>l</b><b>4</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b><b>0</b>,
+                          <b>t</b><b>p</b><b>_</b><b>d</b><b>s</b><b>t</b><b>=</b><b>l</b><b>4</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b><b>1</b>,<b>d</b><b>l</b><b>_</b><b>s</b><b>r</b><b>c</b><b>=</b><b>e</b><b>t</b><b>h</b><b>a</b><b>d</b><b>d</b><b>r</b> and set <b>r</b><b>e</b><b>g</b><b>9</b><b>[</b><b>5</b><b>]</b>.
+
+                   •      Match  on  the  5-tuple  in  table  77:  <b>n</b><b>w</b><b>_</b><b>s</b><b>r</b><b>c</b><b>=</b><b>i</b><b>p</b><b>1</b>,
+                          <b>n</b><b>w</b><b>_</b><b>d</b><b>s</b><b>t</b><b>=</b><b>i</b><b>p</b><b>0</b>,        <b>i</b><b>p</b><b>_</b><b>p</b><b>r</b><b>o</b><b>t</b><b>o</b>,        <b>t</b><b>p</b><b>_</b><b>s</b><b>r</b><b>c</b><b>=</b><b>l</b><b>4</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b><b>1</b>,
+                          <b>t</b><b>p</b><b>_</b><b>d</b><b>s</b><b>t</b><b>=</b><b>l</b><b>4</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b><b>0</b> and set <b>r</b><b>e</b><b>g</b><b>9</b><b>[</b><b>5</b><b>]</b> to 1
+
+                   This action is applied if the packet arrives via ECMP route
+                   or if it is routed via an ECMP route
+
+              <u>R</u> <b>=</b> <b>c</b><b>h</b><b>e</b><b>c</b><b>k</b><b>_</b><b>e</b><b>c</b><b>m</b><b>p</b><b>_</b><b>n</b><b>h</b><b>_</b><b>m</b><b>a</b><b>c</b><b>(</b><b>)</b><b>;</b>
+                   This  action  checks  if  the  packet  under  consideration
+                   matches  any  flow in table 76. If it is so, then the 1-bit
+                   destination register <u>R</u> is set to 1.
+
+              <u>R</u> <b>=</b> <b>c</b><b>h</b><b>e</b><b>c</b><b>k</b><b>_</b><b>e</b><b>c</b><b>m</b><b>p</b><b>_</b><b>n</b><b>h</b><b>(</b><b>)</b><b>;</b>
+                   This  action  checks  if  the  packet  under  consideration
+                   matches  the  any  flow  in table 77. If it is so, then the
+                   1-bit destination register <u>R</u> is set to 1.
+
+                   commit_lb_aff(<u>v</u><u>i</u><u>p</u><b>,</b> <u>b</u><u>a</u><u>c</u><u>k</u><u>e</u><u>n</u><u>d</u><b>,</b>  <u>p</u><u>r</u><u>o</u><u>t</u><u>o</u><b>,</b>  <u>t</u><u>i</u><u>m</u><u>e</u><u>o</u><u>u</u><u>t</u><b>)</b><b>;</b>  <b>P</b><b>a</b><b>r</b><b>a</b><b>m</b><b>e</b><b>t</b><b>e</b><b>r</b><b>s</b>:
+                   load-balancer  virtual  ip:port  <u>v</u><u>i</u><u>p</u>, load-balancer backend
+                   ip:port <u>b</u><u>a</u><u>c</u><u>k</u><u>e</u><u>n</u><u>d</u>,  load-balancer  protocol  <u>p</u><u>r</u><u>o</u><u>t</u><u>o</u>,  affinity
+                   timeout <u>t</u><u>i</u><u>m</u><u>e</u><u>o</u><u>u</u><u>t</u>.
+
+                   This  action  translates to an openflow "learn" action that
+                   inserts a new flow in table 78.
+
+                   •      Match on the 4-tuple in table 78: <b>n</b><b>w</b><b>_</b><b>s</b><b>r</b><b>c</b><b>=</b><b>i</b><b>p</b>  <b>c</b><b>l</b><b>i</b><b>e</b><b>n</b><b>t</b>,
+                          <b>n</b><b>w</b><b>_</b><b>d</b><b>s</b><b>t</b><b>=</b><b>v</b><b>i</b><b>p</b>  <b>i</b><b>p</b>,  <b>i</b><b>p</b><b>_</b><b>p</b><b>r</b><b>o</b><b>t</b><b>o</b>,  <b>t</b><b>p</b><b>_</b><b>d</b><b>s</b><b>t</b><b>=</b><b>v</b><b>i</b><b>p</b>  <b>p</b><b>o</b><b>r</b><b>t</b> and set
+                          <b>r</b><b>e</b><b>g</b><b>9</b><b>[</b><b>6</b><b>]</b> to 1, <b>r</b><b>e</b><b>g</b><b>4</b> and <b>r</b><b>e</b><b>g</b><b>8</b> to backend ip  and  port
+                          respectively.  For  IPv6  register <b>x</b><b>x</b><b>r</b><b>e</b><b>g</b><b>1</b> is used to
+                          store the backend ip.
+
+                   This action is applied for new connections  received  by  a
+                   specific load-balacer with affinity timeout configured.
+
+              <u>R</u> <b>=</b> <b>c</b><b>h</b><b>k</b><b>_</b><b>l</b><b>b</b><b>_</b><b>a</b><b>f</b><b>f</b><b>(</b><b>)</b><b>;</b>
+                   This  action  checks  if  the  packet  under  consideration
+                   matches any flow in table 78. If it is so, then  the  1-bit
+                   destination register <u>R</u> is set to 1.
+
+              <b>s</b><b>a</b><b>m</b><b>p</b><b>l</b><b>e</b><b>(</b><b>p</b><b>r</b><b>o</b><b>b</b><b>a</b><b>b</b><b>i</b><b>l</b><b>i</b><b>t</b><b>y</b><b>=</b><u>p</u><u>a</u><u>c</u><u>k</u><u>e</u><u>t</u><u>s</u><b>,</b> <b>.</b><b>.</b><b>.</b><b>)</b>
+                   This  action causes the matched traffic to be sampled using
+                   IPFIX protocol. More information about how  per-flow  IPFIX
+                   sampling  works  in  OVS can be found in <b>o</b><b>v</b><b>s</b><b>-</b><b>a</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>(7) and
+                   <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>d</b><b>.</b><b>c</b><b>o</b><b>n</b><b>f</b><b>.</b><b>d</b><b>b</b>(5).
+
+                   In order to reliably identify each sampled packet  when  it
+                   is  received  by  the IPFIX collector, this action sets the
+                   content of the <b>O</b><b>b</b><b>s</b><b>e</b><b>r</b><b>v</b><b>a</b><b>t</b><b>i</b><b>o</b><b>n</b><b>D</b><b>o</b><b>m</b><b>a</b><b>i</b><b>n</b><b>I</b><b>D</b>  and  <b>O</b><b>b</b><b>s</b><b>e</b><b>r</b><b>v</b><b>a</b><b>t</b><b>i</b><b>o</b><b>n</b><b>P</b><b>o</b><b>i</b><b>n</b><b>t</b><b>I</b><b>D</b>
+                   IPFIX fields (see argument description below).
+
+                   The following key-value arguments are supported:
+
+                   <b>p</b><b>r</b><b>o</b><b>b</b><b>a</b><b>b</b><b>i</b><b>l</b><b>i</b><b>t</b><b>y</b><b>=</b><u>p</u><u>a</u><u>c</u><u>k</u><u>e</u><u>t</u><u>s</u>
+                          The  number of sampled packets out of 65535. It must
+                          be greater or equal to 1.
+
+                   <b>c</b><b>o</b><b>l</b><b>l</b><b>e</b><b>c</b><b>t</b><b>o</b><b>r</b><b>_</b><b>s</b><b>e</b><b>t</b><b>=</b><u>i</u><u>d</u>
+                          The unsigned 32-bit integer identifier of the sample
+                          collector to send sampled packets to. It must  match
+                          the  value  configured  in  the  <b>F</b><b>l</b><b>o</b><b>w</b><b>_</b><b>S</b><b>a</b><b>m</b><b>p</b><b>l</b><b>e</b><b>_</b><b>C</b><b>o</b><b>l</b><b>l</b><b>e</b><b>c</b>‐‐
+                          <b>t</b><b>o</b><b>r</b><b>_</b><b>S</b><b>e</b><b>t</b> Table in OVS. Defaults to 0.
+
+                   <b>o</b><b>b</b><b>s</b><b>_</b><b>d</b><b>o</b><b>m</b><b>a</b><b>i</b><b>n</b><b>=</b><u>i</u><u>d</u>
+                          An unsigned 8-bit integer that identifies  the  sam‐
+                          pling  application.  It will be placed in the 8 most
+                          significant bits of the <b>O</b><b>b</b><b>s</b><b>e</b><b>r</b><b>v</b><b>a</b><b>t</b><b>i</b><b>o</b><b>n</b><b>D</b><b>o</b><b>m</b><b>a</b><b>i</b><b>n</b><b>I</b><b>D</b> field of
+                          IPFIX samples. The 24 less significant bits will  be
+                          automatically  filled  in with the datapath key. De‐
+                          faults to 0.
+
+                   <b>o</b><b>b</b><b>s</b><b>_</b><b>p</b><b>o</b><b>i</b><b>n</b><b>t</b><b>=</b><u>i</u><u>d</u>
+                          An unsigned 32-bit integer to be used  as  <b>O</b><b>b</b><b>s</b><b>s</b><b>e</b><b>r</b><b>v</b><b>a</b>‐‐
+                          <b>t</b><b>i</b><b>o</b><b>n</b><b>P</b><b>o</b><b>i</b><b>n</b><b>t</b><b>I</b><b>D</b>  or  the string <b>@</b><b>c</b><b>o</b><b>o</b><b>k</b><b>i</b><b>e</b> to indicate that
+                          the first 32 bits of the <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>F</b><b>l</b><b>o</b><b>w</b>’s  UUID  shall
+                          be used instead.
+
+       <b>t</b><b>a</b><b>g</b><b>s</b>: map of string-string pairs
+              Key-value pairs that provide additional information to help ovn-
+              controller  processing the logical flow. Below are the tags used
+              by ovn-controller.
+
+              in_out_port
+                     In the logical flow’s "match" column, if a logical port P
+                     is compared with "inport" and the logical flow  is  on  a
+                     logical switch ingress pipeline, or if P is compared with
+                     "outport"  and  the  logical  flow is on a logical switch
+                     egress pipeline, and  the  expression  is  combined  with
+                     other  expressions  (if  any) using the operator &amp;&amp;, then
+                     the port P should be added as the value in this  tag.  If
+                     there  are  multiple logical ports meeting this criteria,
+                     one of them can be added. ovn-controller uses this infor‐
+                     mation to skip parsing flows that are not needed  on  the
+                     chassis.  Failing  to add the tag will affect efficiency,
+                     while adding wrong value will affect correctness.
+
+       <b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b><b>_</b><b>m</b><b>e</b><b>t</b><b>e</b><b>r</b>: optional string
+              The name of the meter in table <b>M</b><b>e</b><b>t</b><b>e</b><b>r</b> to be used for all  packets
+              that the logical flow might send to <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>.
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b> <b>:</b> <b>s</b><b>t</b><b>a</b><b>g</b><b>e</b><b>-</b><b>n</b><b>a</b><b>m</b><b>e</b>: optional string
+              Human-readable name for this flow’s stage in the pipeline.
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b> <b>:</b> <b>s</b><b>t</b><b>a</b><b>g</b><b>e</b><b>-</b><b>h</b><b>i</b><b>n</b><b>t</b>: optional string, containing an uuid
+              UUID of a <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> record that caused this logical flow to
+              be  created.  Currently used only for attribute of logical flows
+              to northbound <b>A</b><b>C</b><b>L</b> records.
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b> <b>:</b> <b>s</b><b>o</b><b>u</b><b>r</b><b>c</b><b>e</b>: optional string
+              Source file and line number of the code that added this flow  to
+              the pipeline.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       The  overall purpose of these columns is described under <b>C</b><b>o</b><b>m</b><b>m</b><b>o</b><b>n</b> <b>C</b><b>o</b><b>l</b><b>u</b><b>m</b><b>n</b><b>s</b>
+       at the beginning of this document.
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+<b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>D</b><b>P</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Each row in this table represents a group of logical  datapaths  refer‐
+       enced by the <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>d</b><b>p</b><b>_</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b> column in the <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>F</b><b>l</b><b>o</b><b>w</b> table.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>s</b>                     set  of  weak reference to <b>D</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b>‐‐
+                                     <b>i</b><b>n</b><b>g</b>s
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>s</b>: set of weak reference to <b>D</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>s
+              List of <b>D</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> entries.
+
+<b>M</b><b>u</b><b>l</b><b>t</b><b>i</b><b>c</b><b>a</b><b>s</b><b>t</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       The rows in this table define multicast groups of logical ports. Multi‐
+       cast groups allow a single packet transmitted over a tunnel to a hyper‐
+       visor to be delivered to multiple VMs on that  hypervisor,  which  uses
+       bandwidth more efficiently.
+
+       Each  row in this table defines a logical multicast group numbered <b>t</b><b>u</b><b>n</b>‐‐
+       <b>n</b><b>e</b><b>l</b><b>_</b><b>k</b><b>e</b><b>y</b> within <b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b>, whose logical ports are listed  in  the  <b>p</b><b>o</b><b>r</b><b>t</b><b>s</b>
+       column.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b>                      <b>D</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>
+       <b>t</b><b>u</b><b>n</b><b>n</b><b>e</b><b>l</b><b>_</b><b>k</b><b>e</b><b>y</b>                    integer, in range 32,768 to 65,535
+       <b>n</b><b>a</b><b>m</b><b>e</b>                          string
+       <b>p</b><b>o</b><b>r</b><b>t</b><b>s</b>                         set of weak reference to <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>s
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b>: <b>D</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>
+              The logical datapath in which the multicast group resides.
+
+       <b>t</b><b>u</b><b>n</b><b>n</b><b>e</b><b>l</b><b>_</b><b>k</b><b>e</b><b>y</b>: integer, in range 32,768 to 65,535
+              The  value  used to designate this logical egress port in tunnel
+              encapsulations. An index forces the key to be unique within  the
+              <b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b>.  The unusual range ensures that multicast group IDs do
+              not overlap with logical port IDs.
+
+       <b>n</b><b>a</b><b>m</b><b>e</b>: string
+              The logical multicast group’s name. An index forces the name  to
+              be  unique  within  the  <b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b>.  Logical flows in the ingress
+              pipeline may output to the group just as for individual  logical
+              ports, by assigning the group’s name to <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> and executing an
+              <b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b> action.
+
+              Multicast  group  names  and  logical  port names share a single
+              namespace and thus should not overlap (but the  database  schema
+              cannot enforce this). To try to avoid conflicts, <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> uses
+              names that begin with <b>_</b><b>M</b><b>C</b><b>_</b>.
+
+       <b>p</b><b>o</b><b>r</b><b>t</b><b>s</b>: set of weak reference to <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>s
+              The  logical ports included in the multicast group. All of these
+              ports must be in the <b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b> logical datapath (but the database
+              schema cannot enforce this).
+
+<b>M</b><b>i</b><b>r</b><b>r</b><b>o</b><b>r</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Each row in this table represents a mirror that can be  used  for  port
+       mirroring.  These  mirrors are referenced by the <b>m</b><b>i</b><b>r</b><b>r</b><b>o</b><b>r</b><b>_</b><b>r</b><b>u</b><b>l</b><b>e</b><b>s</b> column in
+       the <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> table.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>                          string (must be unique within table)
+       <b>f</b><b>i</b><b>l</b><b>t</b><b>e</b><b>r</b>                        string,  one  of  <b>b</b><b>o</b><b>t</b><b>h</b>,  <b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b>,   or
+                                     <b>t</b><b>o</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b>
+       <b>s</b><b>i</b><b>n</b><b>k</b>                          string
+       <b>t</b><b>y</b><b>p</b><b>e</b>                          string, one of <b>e</b><b>r</b><b>s</b><b>p</b><b>a</b><b>n</b>, <b>g</b><b>r</b><b>e</b>, or <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b>
+       <b>i</b><b>n</b><b>d</b><b>e</b><b>x</b>                         integer
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                  map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>: string (must be unique within table)
+              Represents the name of the mirror.
+
+       <b>f</b><b>i</b><b>l</b><b>t</b><b>e</b><b>r</b>: string, one of <b>b</b><b>o</b><b>t</b><b>h</b>, <b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b>, or <b>t</b><b>o</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b>
+              The  value  of  this  field represents selection criteria of the
+              mirror. <b>t</b><b>o</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b> mirrors the packets coming into  logical  port.
+              <b>f</b><b>r</b><b>o</b><b>m</b><b>-</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b>  mirrors  the packets going out of logical port. <b>b</b><b>o</b><b>t</b><b>h</b>
+              mirrors for both directions.
+
+       <b>s</b><b>i</b><b>n</b><b>k</b>: string
+              The value of this field represents the destination/sink  of  the
+              mirror.  If  the  <u>t</u><u>y</u><u>p</u><u>e</u> is <b>g</b><b>r</b><b>e</b> or <b>e</b><b>r</b><b>s</b><b>p</b><b>a</b><b>n</b>, the value indicates the
+              tunnel remote IP (either IPv4 or IPv6). For  a  <u>t</u><u>y</u><u>p</u><u>e</u>  of  <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b>,
+              this  field  defines  a  local  interface on the OVS integration
+              bridge to be used as the mirror destination. The interface  must
+              possess external-ids:mirror-id that matches this string.
+
+       <b>t</b><b>y</b><b>p</b><b>e</b>: string, one of <b>e</b><b>r</b><b>s</b><b>p</b><b>a</b><b>n</b>, <b>g</b><b>r</b><b>e</b>, or <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b>
+              The  value of this field specifies the mirror type - <b>g</b><b>r</b><b>e</b>, <b>e</b><b>r</b><b>s</b><b>p</b><b>a</b><b>n</b>
+              or <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b>.
+
+       <b>i</b><b>n</b><b>d</b><b>e</b><b>x</b>: integer
+              The value of this field represents the tunnel ID. If the config‐
+              ured tunnel type is <b>g</b><b>r</b><b>e</b>, this field represents the <b>G</b><b>R</b><b>E</b> key value
+              and if the configured tunnel type is <b>e</b><b>r</b><b>s</b><b>p</b><b>a</b><b>n</b>  it  represents  the
+              <b>e</b><b>r</b><b>s</b><b>p</b><b>a</b><b>n</b><b>_</b><b>i</b><b>d</b><b>x</b> value. It is ignored if the type is <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b>.
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+              See <b>E</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> <b>I</b><b>D</b><b>s</b> at the beginning of this document.
+
+<b>M</b><b>e</b><b>t</b><b>e</b><b>r</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Each  row  in this table represents a meter that can be used for QoS or
+       rate-limiting.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>                          string (must be unique within table)
+       <b>u</b><b>n</b><b>i</b><b>t</b>                          string, either <b>k</b><b>b</b><b>p</b><b>s</b> or <b>p</b><b>k</b><b>t</b><b>p</b><b>s</b>
+       <b>b</b><b>a</b><b>n</b><b>d</b><b>s</b>                         set of 1 or more <b>M</b><b>e</b><b>t</b><b>e</b><b>r</b><b>_</b><b>B</b><b>a</b><b>n</b><b>d</b>s
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>: string (must be unique within table)
+              A name for this meter.
+
+              Names that begin with "__" (two underscores)  are  reserved  for
+              OVN internal use and should not be added manually.
+
+       <b>u</b><b>n</b><b>i</b><b>t</b>: string, either <b>k</b><b>b</b><b>p</b><b>s</b> or <b>p</b><b>k</b><b>t</b><b>p</b><b>s</b>
+              The  unit for <b>r</b><b>a</b><b>t</b><b>e</b> and <b>b</b><b>u</b><b>r</b><b>s</b><b>t</b><b>_</b><b>r</b><b>a</b><b>t</b><b>e</b> parameters in the <b>b</b><b>a</b><b>n</b><b>d</b><b>s</b> entry.
+              <b>k</b><b>b</b><b>p</b><b>s</b> specifies kilobits per second, and <b>p</b><b>k</b><b>t</b><b>p</b><b>s</b> specifies  packets
+              per second.
+
+       <b>b</b><b>a</b><b>n</b><b>d</b><b>s</b>: set of 1 or more <b>M</b><b>e</b><b>t</b><b>e</b><b>r</b><b>_</b><b>B</b><b>a</b><b>n</b><b>d</b>s
+              The bands associated with this meter. Each band specifies a rate
+              above  which  the band is to take the action <b>a</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>. If multiple
+              bands’ rates are exceeded, then the band with the  highest  rate
+              among the exceeded bands is selected.
+
+<b>M</b><b>e</b><b>t</b><b>e</b><b>r</b><b>_</b><b>B</b><b>a</b><b>n</b><b>d</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Each row in this table represents a meter band which specifies the rate
+       above  which  the  configured action should be applied. These bands are
+       referenced by the <b>b</b><b>a</b><b>n</b><b>d</b><b>s</b> column in the <b>M</b><b>e</b><b>t</b><b>e</b><b>r</b> table.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>a</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>                        string, must be <b>d</b><b>r</b><b>o</b><b>p</b>
+       <b>r</b><b>a</b><b>t</b><b>e</b>                          integer, in range 1 to 4,294,967,295
+       <b>b</b><b>u</b><b>r</b><b>s</b><b>t</b><b>_</b><b>s</b><b>i</b><b>z</b><b>e</b>                    integer, in range 0 to 4,294,967,295
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>a</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>: string, must be <b>d</b><b>r</b><b>o</b><b>p</b>
+              The action to execute when this band matches. The only supported
+              action is <b>d</b><b>r</b><b>o</b><b>p</b>.
+
+       <b>r</b><b>a</b><b>t</b><b>e</b>: integer, in range 1 to 4,294,967,295
+              The rate limit for this band, in kilobits per second or bits per
+              second, depending on whether the parent <b>M</b><b>e</b><b>t</b><b>e</b><b>r</b> entry’s <b>u</b><b>n</b><b>i</b><b>t</b>  col‐
+              umn specified <b>k</b><b>b</b><b>p</b><b>s</b> or <b>p</b><b>k</b><b>t</b><b>p</b><b>s</b>.
+
+       <b>b</b><b>u</b><b>r</b><b>s</b><b>t</b><b>_</b><b>s</b><b>i</b><b>z</b><b>e</b>: integer, in range 0 to 4,294,967,295
+              The  maximum  burst allowed for the band in kilobits or packets,
+              depending on whether <b>k</b><b>b</b><b>p</b><b>s</b> or <b>p</b><b>k</b><b>t</b><b>p</b><b>s</b> was selected  in  the  parent
+              <b>M</b><b>e</b><b>t</b><b>e</b><b>r</b>  entry’s  <b>u</b><b>n</b><b>i</b><b>t</b>  column. If the size is zero, the switch is
+              free to select some reasonable value depending on its configura‐
+              tion.
+<b>D</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Each row in this table represents a logical datapath, which  implements
+       a logical pipeline among the ports in the <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> table associated
+       with  it.  In practice, the pipeline in a given logical datapath imple‐
+       ments either a logical switch or a logical router.
+
+       The main purpose of a row in this table is provide a  physical  binding
+       for a logical datapath. A logical datapath does not have a physical lo‐
+       cation,  so  its  physical  binding  information  is limited: just <b>t</b><b>u</b><b>n</b>‐‐
+       <b>n</b><b>e</b><b>l</b><b>_</b><b>k</b><b>e</b><b>y</b>. The rest of the data in this table does not affect packet for‐
+       warding.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>t</b><b>u</b><b>n</b><b>n</b><b>e</b><b>l</b><b>_</b><b>k</b><b>e</b><b>y</b>                    integer, in range 1 to  16,777,215  (must
+                                     be unique within table)
+       <b>l</b><b>o</b><b>a</b><b>d</b><b>_</b><b>b</b><b>a</b><b>l</b><b>a</b><b>n</b><b>c</b><b>e</b><b>r</b><b>s</b>                set of uuids
+       <u>O</u><u>V</u><u>N</u><b>_</b><u>N</u><u>o</u><u>r</u><u>t</u><u>h</u><u>b</u><u>o</u><u>u</u><u>n</u><u>d</u> <u>R</u><u>e</u><u>l</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>h</u><u>i</u><u>p</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b> <b>:</b> <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>-</b><b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b>
+                                     optional string, containing an uuid
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b> <b>:</b> <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>-</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b>
+                                     optional string, containing an uuid
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b> <b>:</b> <b>i</b><b>n</b><b>t</b><b>e</b><b>r</b><b>c</b><b>o</b><b>n</b><b>n</b><b>-</b><b>t</b><b>s</b>
+                                     optional string
+         <u>N</u><u>a</u><u>m</u><u>i</u><u>n</u><u>g</u><u>:</u>
+            <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b> <b>:</b> <b>n</b><b>a</b><b>m</b><b>e</b>      optional string
+            <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b> <b>:</b> <b>n</b><b>a</b><b>m</b><b>e</b><b>2</b>     optional string
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>t</b><b>u</b><b>n</b><b>n</b><b>e</b><b>l</b><b>_</b><b>k</b><b>e</b><b>y</b>: integer, in range 1 to 16,777,215 (must be unique within
+       table)
+              The tunnel key value to which the logical datapath is bound. The
+              <b>T</b><b>u</b><b>n</b><b>n</b><b>e</b><b>l</b>  <b>E</b><b>n</b><b>c</b><b>a</b><b>p</b><b>s</b><b>u</b><b>l</b><b>a</b><b>t</b><b>i</b><b>o</b><b>n</b>  section  in <b>o</b><b>v</b><b>n</b><b>-</b><b>a</b><b>r</b><b>c</b><b>h</b><b>i</b><b>t</b><b>e</b><b>c</b><b>t</b><b>u</b><b>r</b><b>e</b>(7) describes
+              how tunnel keys are constructed for  each  supported  encapsula‐
+              tion.
+
+       <b>l</b><b>o</b><b>a</b><b>d</b><b>_</b><b>b</b><b>a</b><b>l</b><b>a</b><b>n</b><b>c</b><b>e</b><b>r</b><b>s</b>: set of uuids
+              Not  used  anymore;  kept  for  backwards  compatibility  of the
+              schema.
+
+     <u>O</u><u>V</u><u>N</u><b>_</b><u>N</u><u>o</u><u>r</u><u>t</u><u>h</u><u>b</u><u>o</u><u>u</u><u>n</u><u>d</u> <u>R</u><u>e</u><u>l</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>h</u><u>i</u><u>p</u><u>:</u>
+
+       Each row in <b>D</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> is associated with some logical  datapath.
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>  uses these keys to track the association of a logical data‐
+       path with concepts in the <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database.
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b> <b>:</b> <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>-</b><b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b>: optional string, containing an uuid
+              For  a  logical  datapath  that  represents  a  logical  switch,
+              <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> stores in this key the UUID of the corresponding <b>L</b><b>o</b><b>g</b>‐‐
+              <b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b> row in the <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database.
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b> <b>:</b> <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>-</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b>: optional string, containing an uuid
+              For  a  logical  datapath  that  represents  a  logical  router,
+              <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> stores in this key the UUID of the corresponding <b>L</b><b>o</b><b>g</b>‐‐
+              <b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b> row in the <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database.
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b> <b>:</b> <b>i</b><b>n</b><b>t</b><b>e</b><b>r</b><b>c</b><b>o</b><b>n</b><b>n</b><b>-</b><b>t</b><b>s</b>: optional string
+              For a logical datapath that represents  a  logical  switch  that
+              represents  a  transit  switch  for  interconnection, <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>
+              stores in this key the value of the same <b>i</b><b>n</b><b>t</b><b>e</b><b>r</b><b>c</b><b>o</b><b>n</b><b>n</b><b>-</b><b>t</b><b>s</b> key of the
+              <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b> column of the corresponding <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b>  row  in
+              the <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database.
+
+     <u>N</u><u>a</u><u>m</u><u>i</u><u>n</u><u>g</u><u>:</u>
+
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>  copies  these  from  the  name fields in the <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b>
+       database, either from <b>n</b><b>a</b><b>m</b><b>e</b> and <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>n</b><b>e</b><b>u</b><b>t</b><b>r</b><b>o</b><b>n</b><b>:</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b> in  the
+       <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b> table or from <b>n</b><b>a</b><b>m</b><b>e</b> and <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>n</b><b>e</b><b>u</b><b>t</b><b>r</b><b>o</b><b>n</b><b>:</b><b>n</b><b>e</b><b>t</b><b>w</b><b>o</b><b>r</b><b>k</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b>
+       in the <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b> table.
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b> <b>:</b> <b>n</b><b>a</b><b>m</b><b>e</b>: optional string
+              A name for the logical datapath.
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b> <b>:</b> <b>n</b><b>a</b><b>m</b><b>e</b><b>2</b>: optional string
+              Another name for the logical datapath.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       The  overall purpose of these columns is described under <b>C</b><b>o</b><b>m</b><b>m</b><b>o</b><b>n</b> <b>C</b><b>o</b><b>l</b><b>u</b><b>m</b><b>n</b><b>s</b>
+       at the beginning of this document.
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+<b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Each row in this table binds a logical port to a realization. For  most
+       logical  ports, this means binding to some physical location, for exam‐
+       ple by binding a logical port to a VIF that belongs to a VM running  on
+       a  particular  hypervisor.  Other  logical ports, such as logical patch
+       ports, can be realized without a specific physical location, but  their
+       bindings are still expressed through rows in this table.
+
+       For   every  <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b>  record  in  <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b>  database,
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> creates a record in this  table.  <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>  populates  and
+       maintains  every  column except the <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> and <b>v</b><b>i</b><b>r</b><b>t</b><b>u</b><b>a</b><b>l</b><b>_</b><b>p</b><b>a</b><b>r</b><b>e</b><b>n</b><b>t</b> columns,
+       which it leaves empty in new records.
+
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>/<b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b><b>-</b><b>v</b><b>t</b><b>e</b><b>p</b> populates the <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> column for the
+       records that identify the logical ports that are located on its  hyper‐
+       visor/gateway,  which  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>/<b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b><b>-</b><b>v</b><b>t</b><b>e</b><b>p</b> in turn finds
+       out by monitoring the local hypervisor’s Open_vSwitch  database,  which
+       identifies  logical  ports  via  the  conventions described in <b>I</b><b>n</b><b>t</b><b>e</b><b>g</b><b>r</b><b>a</b>‐‐
+       <b>t</b><b>i</b><b>o</b><b>n</b><b>G</b><b>u</b><b>i</b><b>d</b><b>e</b><b>.</b><b>r</b><b>s</b><b>t</b>. (The exceptions are for <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> records  with  <b>t</b><b>y</b><b>p</b><b>e</b>
+       of  <b>l</b><b>3</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b>, whose locations are identified by <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> via the <b>o</b><b>p</b>‐‐
+       <b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>l</b><b>3</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> column in this table. <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>  is  still
+       responsible to populate the <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> column.)
+
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>  also  populates  the  <b>v</b><b>i</b><b>r</b><b>t</b><b>u</b><b>a</b><b>l</b><b>_</b><b>p</b><b>a</b><b>r</b><b>e</b><b>n</b><b>t</b>  column of records
+       whose <b>t</b><b>y</b><b>p</b><b>e</b> is <b>v</b><b>i</b><b>r</b><b>t</b><b>u</b><b>a</b><b>l</b>.
+
+       When a chassis shuts down gracefully, it should clean  up  the  <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>
+       column  that it previously had populated. (This is not critical because
+       resources hosted on the chassis are equally unreachable  regardless  of
+       whether  their rows are present.) To handle the case where a VM is shut
+       down abruptly on one chassis, then brought up again on a different one,
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>/<b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b><b>-</b><b>v</b><b>t</b><b>e</b><b>p</b> must overwrite  the  <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>  column
+       with new information.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <u>C</u><u>o</u><u>r</u><u>e</u> <u>F</u><u>e</u><u>a</u><u>t</u><u>u</u><u>r</u><u>e</u><u>s</u><u>:</u>
+         <b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b>                    <b>D</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>
+         <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>                string (must be unique within table)
+         <b>e</b><b>n</b><b>c</b><b>a</b><b>p</b>                       optional weak reference to <b>E</b><b>n</b><b>c</b><b>a</b><b>p</b>
+         <b>a</b><b>d</b><b>d</b><b>i</b><b>t</b><b>i</b><b>o</b><b>n</b><b>a</b><b>l</b><b>_</b><b>e</b><b>n</b><b>c</b><b>a</b><b>p</b>            set of weak reference to <b>E</b><b>n</b><b>c</b><b>a</b><b>p</b>s
+         <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>                     optional weak reference to <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>
+         <b>a</b><b>d</b><b>d</b><b>i</b><b>t</b><b>i</b><b>o</b><b>n</b><b>a</b><b>l</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>          set of weak reference to <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>
+         <b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>             set of <b>G</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>_</b><b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>es
+         <b>h</b><b>a</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b>            optional <b>H</b><b>A</b><b>_</b><b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b>
+         <b>u</b><b>p</b>                          optional boolean
+         <b>t</b><b>u</b><b>n</b><b>n</b><b>e</b><b>l</b><b>_</b><b>k</b><b>e</b><b>y</b>                  integer, in range 1 to 32,767
+         <b>m</b><b>a</b><b>c</b>                         set of strings
+         <b>p</b><b>o</b><b>r</b><b>t</b><b>_</b><b>s</b><b>e</b><b>c</b><b>u</b><b>r</b><b>i</b><b>t</b><b>y</b>               set of strings
+         <b>t</b><b>y</b><b>p</b><b>e</b>                        string
+         <b>r</b><b>e</b><b>q</b><b>u</b><b>e</b><b>s</b><b>t</b><b>e</b><b>d</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>           optional weak reference to <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>
+         <b>r</b><b>e</b><b>q</b><b>u</b><b>e</b><b>s</b><b>t</b><b>e</b><b>d</b><b>_</b><b>a</b><b>d</b><b>d</b><b>i</b><b>t</b><b>i</b><b>o</b><b>n</b><b>a</b><b>l</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>
+                                     set of weak reference to <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>
+       <b>m</b><b>i</b><b>r</b><b>r</b><b>o</b><b>r</b><b>_</b><b>r</b><b>u</b><b>l</b><b>e</b><b>s</b>                  set of weak reference to <b>M</b><b>i</b><b>r</b><b>r</b><b>o</b><b>r</b>s
+       <u>P</u><u>a</u><u>t</u><u>c</u><u>h</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>p</b><b>e</b><b>e</b><b>r</b>              optional string
+         <b>n</b><b>a</b><b>t</b><b>_</b><b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>e</b><b>s</b>               set of strings
+       <u>L</u><u>3</u> <u>G</u><u>a</u><u>t</u><u>e</u><u>w</u><u>a</u><u>y</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>p</b><b>e</b><b>e</b><b>r</b>              optional string
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>l</b><b>3</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>
+                                     optional string
+         <b>n</b><b>a</b><b>t</b><b>_</b><b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>e</b><b>s</b>               set of strings
+       <u>L</u><u>o</u><u>c</u><u>a</u><u>l</u><u>n</u><u>e</u><u>t</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>n</b><b>e</b><b>t</b><b>w</b><b>o</b><b>r</b><b>k</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b>      optional string
+         <b>t</b><b>a</b><b>g</b>                         optional integer, in range 1 to 4,095
+       <u>L</u><u>2</u> <u>G</u><u>a</u><u>t</u><u>e</u><u>w</u><u>a</u><u>y</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>n</b><b>e</b><b>t</b><b>w</b><b>o</b><b>r</b><b>k</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b>      optional string
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>l</b><b>2</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>
+                                     optional string
+         <b>t</b><b>a</b><b>g</b>                         optional integer, in range 1 to 4,095
+       <u>V</u><u>T</u><u>E</u><u>P</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>v</b><b>t</b><b>e</b><b>p</b><b>-</b><b>p</b><b>h</b><b>y</b><b>s</b><b>i</b><b>c</b><b>a</b><b>l</b><b>-</b><b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b>
+                                     optional string
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>v</b><b>t</b><b>e</b><b>p</b><b>-</b><b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>-</b><b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b>
+                                     optional string
+       <u>V</u><u>M</u><u>I</u> <u>(</u><u>o</u><u>r</u> <u>V</u><u>I</u><u>F</u><u>)</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>r</b><b>e</b><b>q</b><b>u</b><b>e</b><b>s</b><b>t</b><b>e</b><b>d</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>
+                                     optional string
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>a</b><b>c</b><b>t</b><b>i</b><b>v</b><b>a</b><b>t</b><b>i</b><b>o</b><b>n</b><b>-</b><b>s</b><b>t</b><b>r</b><b>a</b><b>t</b><b>e</b><b>g</b><b>y</b>
+                                     optional string
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>a</b><b>d</b><b>d</b><b>i</b><b>t</b><b>i</b><b>o</b><b>n</b><b>a</b><b>l</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>-</b><b>a</b><b>c</b><b>t</b><b>i</b><b>v</b><b>a</b><b>t</b><b>e</b><b>d</b>
+                                     optional string
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>i</b><b>f</b><b>a</b><b>c</b><b>e</b><b>-</b><b>i</b><b>d</b><b>-</b><b>v</b><b>e</b><b>r</b>      optional string
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>q</b><b>o</b><b>s</b><b>_</b><b>m</b><b>i</b><b>n</b><b>_</b><b>r</b><b>a</b><b>t</b><b>e</b>      optional string
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>q</b><b>o</b><b>s</b><b>_</b><b>m</b><b>a</b><b>x</b><b>_</b><b>r</b><b>a</b><b>t</b><b>e</b>      optional string
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>q</b><b>o</b><b>s</b><b>_</b><b>b</b><b>u</b><b>r</b><b>s</b><b>t</b>         optional string
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>q</b><b>o</b><b>s</b><b>_</b><b>p</b><b>h</b><b>y</b><b>s</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>n</b><b>e</b><b>t</b><b>w</b><b>o</b><b>r</b><b>k</b>
+                                     optional string
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>q</b><b>d</b><b>i</b><b>s</b><b>c</b><b>_</b><b>q</b><b>u</b><b>e</b><b>u</b><b>e</b><b>_</b><b>i</b><b>d</b>    optional  string,  containing an integer,
+                                     in range 1 to 61,440
+       <u>D</u><u>i</u><u>s</u><u>t</u><u>r</u><u>i</u><u>b</u><u>u</u><u>t</u><u>e</u><u>d</u> <u>G</u><u>a</u><u>t</u><u>e</u><u>w</u><u>a</u><u>y</u> <u>P</u><u>o</u><u>r</u><u>t</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>-</b><b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b><b>-</b><b>p</b><b>o</b><b>r</b><b>t</b>
+                                     optional string
+       <u>C</u><u>h</u><u>a</u><u>s</u><u>s</u><u>i</u><u>s</u> <u>R</u><u>e</u><u>d</u><u>i</u><u>r</u><u>e</u><u>c</u><u>t</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>d</b><b>i</b><b>s</b><b>t</b><b>r</b><b>i</b><b>b</b><b>u</b><b>t</b><b>e</b><b>d</b><b>-</b><b>p</b><b>o</b><b>r</b><b>t</b>  optional string
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b><b>-</b><b>t</b><b>y</b><b>p</b><b>e</b>     optional string
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>a</b><b>l</b><b>w</b><b>a</b><b>y</b><b>s</b><b>-</b><b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b>   optional string
+       <u>N</u><u>e</u><u>s</u><u>t</u><u>e</u><u>d</u> <u>C</u><u>o</u><u>n</u><u>t</u><u>a</u><u>i</u><u>n</u><u>e</u><u>r</u><u>s</u><u>:</u>
+         <b>p</b><b>a</b><b>r</b><b>e</b><b>n</b><b>t</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>                 optional string
+         <b>t</b><b>a</b><b>g</b>                         optional integer, in range 1 to 4,095
+       <u>V</u><u>i</u><u>r</u><u>t</u><u>u</u><u>a</u><u>l</u> <u>p</u><u>o</u><u>r</u><u>t</u><u>s</u><u>:</u>
+         <b>v</b><b>i</b><b>r</b><b>t</b><b>u</b><b>a</b><b>l</b><b>_</b><b>p</b><b>a</b><b>r</b><b>e</b><b>n</b><b>t</b>              optional string
+       <u>N</u><u>a</u><u>m</u><u>i</u><u>n</u><u>g</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b> <b>:</b> <b>n</b><b>a</b><b>m</b><b>e</b>         optional string
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+     <u>C</u><u>o</u><u>r</u><u>e</u> <u>F</u><u>e</u><u>a</u><u>t</u><u>u</u><u>r</u><u>e</u><u>s</u><u>:</u>
+
+       <b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b>: <b>D</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>
+              The logical datapath to which the logical port belongs.
+
+       <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>: string (must be unique within table)
+              A logical port. For a logical switch port, this  is  taken  from
+              <b>n</b><b>a</b><b>m</b><b>e</b> in the OVN_Northbound database’s <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b> table.
+              For  a  logical  router  port,  this  is  taken from <b>n</b><b>a</b><b>m</b><b>e</b> in the
+              OVN_Northbound database’s <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b> table. (This means
+              that logical switch ports and router port names must  not  share
+              names in an OVN deployment.) OVN does not prescribe a particular
+              format for the logical port ID.
+
+       <b>e</b><b>n</b><b>c</b><b>a</b><b>p</b>: optional weak reference to <b>E</b><b>n</b><b>c</b><b>a</b><b>p</b>
+              Points to preferred encapsulation configuration to transmit log‐
+              ical  dataplane  packets to this chassis. The entry is reference
+              to a <b>E</b><b>n</b><b>c</b><b>a</b><b>p</b> record.
+
+       <b>a</b><b>d</b><b>d</b><b>i</b><b>t</b><b>i</b><b>o</b><b>n</b><b>a</b><b>l</b><b>_</b><b>e</b><b>n</b><b>c</b><b>a</b><b>p</b>: set of weak reference to <b>E</b><b>n</b><b>c</b><b>a</b><b>p</b>s
+              Points to preferred encapsulation configuration to transmit log‐
+              ical dataplane packets to this additional chassis. The entry  is
+              reference to a <b>E</b><b>n</b><b>c</b><b>a</b><b>p</b> record. See also <b>a</b><b>d</b><b>d</b><b>i</b><b>t</b><b>i</b><b>o</b><b>n</b><b>a</b><b>l</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>.
+
+       <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>: optional weak reference to <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>
+              The meaning of this column depends on the value of the <b>t</b><b>y</b><b>p</b><b>e</b> col‐
+              umn. This is the meaning for each <b>t</b><b>y</b><b>p</b><b>e</b>
+
+              (empty string)
+                     The  physical  location  of the logical port. To success‐
+                     fully identify a chassis, this column must be  a  <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>
+                     record. This is populated by <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>.
+
+              vtep   The  physical  location  of the hardware_vtep gateway. To
+                     successfully identify a chassis, this column  must  be  a
+                     <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> record. This is populated by <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b><b>-</b><b>v</b><b>t</b><b>e</b><b>p</b>.
+
+              localnet
+                     Always  empty. A localnet port is realized on every chas‐
+                     sis that has connectivity to the  corresponding  physical
+                     network.
+
+              localport
+                     Always  empty. A localport port is present on every chas‐
+                     sis.
+
+              l3gateway
+                     The physical location of the L3 gateway. To  successfully
+                     identify a chassis, this column must be a <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> record.
+                     This is populated by <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> based on the value of
+                     the <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>l</b><b>3</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> column in this table.
+
+              l2gateway
+                     The physical location of this L2 gateway. To successfully
+                     identify a chassis, this column must be a <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> record.
+                     This is populated by <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> based on the value of
+                     the <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>l</b><b>2</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> column in this table.
+
+       <b>a</b><b>d</b><b>d</b><b>i</b><b>t</b><b>i</b><b>o</b><b>n</b><b>a</b><b>l</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>: set of weak reference to <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>
+              The  meaning  of this column is the same as for the <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>. The
+              column is used to track an additional physical location  of  the
+              logical port. Used with regular (empty <b>t</b><b>y</b><b>p</b><b>e</b>) port bindings.
+
+       <b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>: set of <b>G</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>_</b><b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>es
+              A list of <b>G</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>_</b><b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>.
+
+              This  should  only be populated for ports with <b>t</b><b>y</b><b>p</b><b>e</b> set to <b>c</b><b>h</b><b>a</b><b>s</b>‐‐
+              <b>s</b><b>i</b><b>s</b><b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b>. This column defines the list  of  chassis  used  as
+              gateways where traffic will be redirected through.
+
+       <b>h</b><b>a</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b>: optional <b>H</b><b>A</b><b>_</b><b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b>
+              This  should  only be populated for ports with <b>t</b><b>y</b><b>p</b><b>e</b> set to <b>c</b><b>h</b><b>a</b><b>s</b>‐‐
+              <b>s</b><b>i</b><b>s</b><b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b>. This column defines the HA  chassis  group  with  a
+              list  of HA chassis used as gateways where traffic will be redi‐
+              rected through.
+
+       <b>u</b><b>p</b>: optional boolean
+              This is set to <b>t</b><b>r</b><b>u</b><b>e</b> whenever all  OVS  flows  required  by  this
+              Port_Binding  have been installed. This is populated by <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b>‐‐
+              <b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>.
+
+       <b>t</b><b>u</b><b>n</b><b>n</b><b>e</b><b>l</b><b>_</b><b>k</b><b>e</b><b>y</b>: integer, in range 1 to 32,767
+              A number that represents the logical port in the key  (e.g.  STT
+              key or Geneve TLV) field carried within tunnel protocol packets.
+
+              The tunnel ID must be unique within the scope of a logical data‐
+              path.
+
+       <b>m</b><b>a</b><b>c</b>: set of strings
+              This column is a misnomer as it may contain MAC addresses and IP
+              addresses.  It  is copied from the <b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>e</b><b>s</b> column in the <b>L</b><b>o</b><b>g</b><b>i</b>‐‐
+              <b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b> table in the Northbound database. It follows the
+              same format as that column.
+
+       <b>p</b><b>o</b><b>r</b><b>t</b><b>_</b><b>s</b><b>e</b><b>c</b><b>u</b><b>r</b><b>i</b><b>t</b><b>y</b>: set of strings
+              This column controls the addresses from which the host  attached
+              to  the  logical  port (``the host’’) is allowed to send packets
+              and to which it is allowed to receive packets. If this column is
+              empty, all addresses are permitted.
+
+              It  is  copied  from  the  <b>p</b><b>o</b><b>r</b><b>t</b><b>_</b><b>s</b><b>e</b><b>c</b><b>u</b><b>r</b><b>i</b><b>t</b><b>y</b>  column  in  the  <b>L</b><b>o</b><b>g</b><b>i</b>‐‐
+              <b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b> table in the Northbound database. It follows the
+              same format as that column.
+
+       <b>t</b><b>y</b><b>p</b><b>e</b>: string
+              A type for this logical port. Logical ports can be used to model
+              other types of connectivity into an OVN logical switch. The fol‐
+              lowing types are defined:
+
+              (empty string)
+                     VM (or VIF) interface.
+
+              <b>p</b><b>a</b><b>t</b><b>c</b><b>h</b>  One  of  a pair of logical ports that act as if connected
+                     by a patch cable. Useful for connecting two logical data‐
+                     paths, e.g. to connect a  logical  router  to  a  logical
+                     switch or to another logical router.
+
+              <b>l</b><b>3</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b>
+                     One  of  a pair of logical ports that act as if connected
+                     by a patch cable across multiple chassis. Useful for con‐
+                     necting a logical switch with a Gateway router (which  is
+                     only resident on a particular chassis).
+
+              <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b>
+                     A   connection  to  a  locally  accessible  network  from
+                     <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> instances that have a corresponding bridge
+                     mapping. A logical  switch  can  have  multiple  <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b>
+                     ports attached. This type is used to model direct connec‐
+                     tivity  to  existing networks. In this case, each chassis
+                     should have a mapping for one of  the  physical  networks
+                     only.  Note:  nothing  said  above implies that a chassis
+                     cannot be plugged to multiple physical networks  as  long
+                     as they belong to different switches.
+
+              <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b>
+                     A  connection  to  a local VIF. Traffic that arrives on a
+                     <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>p</b><b>o</b><b>r</b><b>t</b> is never forwarded over  a  tunnel  to  another
+                     chassis.  These  ports  are  present on every chassis and
+                     have the same address in all of them.  This  is  used  to
+                     model  connectivity  to  local services that run on every
+                     hypervisor.
+
+              <b>l</b><b>2</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b>
+                     An L2 connection to a physical network. The chassis  this
+                     <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>  is  bound to will serve as an L2 gateway to
+                     the network named by <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>:<b>n</b><b>e</b><b>t</b><b>w</b><b>o</b><b>r</b><b>k</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b>.
+
+              <b>v</b><b>t</b><b>e</b><b>p</b>   A port to a logical switch on a VTEP gateway chassis.  In
+                     order  to  get  this port correctly recognized by the OVN
+                     controller,  the  <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>:<b>v</b><b>t</b><b>e</b><b>p</b><b>-</b><b>p</b><b>h</b><b>y</b><b>s</b><b>i</b><b>c</b><b>a</b><b>l</b><b>-</b><b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b>  and   <b>o</b><b>p</b>‐‐
+                     <b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>:<b>v</b><b>t</b><b>e</b><b>p</b><b>-</b><b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>-</b><b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b> must also be defined.
+
+              <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b>
+                     A  logical  port  that  represents a particular instance,
+                     bound to a specific chassis, of an otherwise  distributed
+                     parent  port (e.g. of type <b>p</b><b>a</b><b>t</b><b>c</b><b>h</b>). A <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b> port
+                     should never be  used  as  an  <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b>.  When  an  ingress
+                     pipeline sets the <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b>, it may set the value to a log‐
+                     ical  port  of  type <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b>. This will cause the
+                     packet to be directed to a specific chassis to carry  out
+                     the  egress  pipeline.  At  the  beginning  of the egress
+                     pipeline, the <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b> will be reset to the value  of  the
+                     distributed port.
+
+              <b>v</b><b>i</b><b>r</b><b>t</b><b>u</b><b>a</b><b>l</b>
+                     Represents  a  logical port with an <b>v</b><b>i</b><b>r</b><b>t</b><b>u</b><b>a</b><b>l</b> <b>i</b><b>p</b>. This <b>v</b><b>i</b><b>r</b>‐‐
+                     <b>t</b><b>u</b><b>a</b><b>l</b> <b>i</b><b>p</b> can be configured on a logical port (which is re‐
+                     ferred as virtual parent).
+
+       <b>r</b><b>e</b><b>q</b><b>u</b><b>e</b><b>s</b><b>t</b><b>e</b><b>d</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>: optional weak reference to <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>
+              This column exists so that the  ovn-controller  can  effectively
+              monitor  all <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> records destined for it, and is a sup‐
+              plement to the <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>r</b><b>e</b><b>q</b><b>u</b><b>e</b><b>s</b><b>t</b><b>e</b><b>d</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> option. The  option  is
+              still  required so that the ovn-controller can check the CMS in‐
+              tent when the chassis pointed to does not currently exist, which
+              for example occurs when the ovn-controller  is  stopped  without
+              passing  the  -restart  argument.  This column must be a <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>
+              record. This is populated by  <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>  when  the  <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>r</b><b>e</b>‐‐
+              <b>q</b><b>u</b><b>e</b><b>s</b><b>t</b><b>e</b><b>d</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>  is  defined  and contains a string matching the
+              name or hostname of an existing chassis. See also  <b>r</b><b>e</b><b>q</b><b>u</b><b>e</b><b>s</b><b>t</b><b>e</b><b>d</b><b>_</b><b>a</b><b>d</b>‐‐
+              <b>d</b><b>i</b><b>t</b><b>i</b><b>o</b><b>n</b><b>a</b><b>l</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>.
+
+       <b>r</b><b>e</b><b>q</b><b>u</b><b>e</b><b>s</b><b>t</b><b>e</b><b>d</b><b>_</b><b>a</b><b>d</b><b>d</b><b>i</b><b>t</b><b>i</b><b>o</b><b>n</b><b>a</b><b>l</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>: set of weak reference to <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>
+              This  column  exists  so that the ovn-controller can effectively
+              monitor all <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> records destined for it, and is a  sup‐
+              plement  to  the  <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>r</b><b>e</b><b>q</b><b>u</b><b>e</b><b>s</b><b>t</b><b>e</b><b>d</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> option when multiple
+              chassis are listed. This  column  must  be  a  list  of  <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>
+              records.  This  is  populated by <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> when the <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>r</b><b>e</b>‐‐
+              <b>q</b><b>u</b><b>e</b><b>s</b><b>t</b><b>e</b><b>d</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> is defined as a list of chassis names  or  host‐
+              names. See also <b>r</b><b>e</b><b>q</b><b>u</b><b>e</b><b>s</b><b>t</b><b>e</b><b>d</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>.
+
+       <b>m</b><b>i</b><b>r</b><b>r</b><b>o</b><b>r</b><b>_</b><b>r</b><b>u</b><b>l</b><b>e</b><b>s</b>: set of weak reference to <b>M</b><b>i</b><b>r</b><b>r</b><b>o</b><b>r</b>s
+              Mirror rules that apply to the port binding. Please see the <b>M</b><b>i</b><b>r</b>‐‐
+              <b>r</b><b>o</b><b>r</b> table.
+
+     <u>P</u><u>a</u><u>t</u><u>c</u><u>h</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       These options apply to logical ports with <b>t</b><b>y</b><b>p</b><b>e</b> of <b>p</b><b>a</b><b>t</b><b>c</b><b>h</b>.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>p</b><b>e</b><b>e</b><b>r</b>: optional string
+              The  <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>  in the <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> record for the other side
+              of the patch. The named <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>  must  specify  this  <b>l</b><b>o</b><b>g</b><b>i</b>‐‐
+              <b>c</b><b>a</b><b>l</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>  in its own <b>p</b><b>e</b><b>e</b><b>r</b> option. That is, the two patch logical
+              ports must have reversed <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b> and <b>p</b><b>e</b><b>e</b><b>r</b> values.
+
+       <b>n</b><b>a</b><b>t</b><b>_</b><b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>e</b><b>s</b>: set of strings
+              MAC address followed by a list of SNAT and DNAT external IP  ad‐
+              dresses,  followed  by <b>i</b><b>s</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>r</b><b>e</b><b>s</b><b>i</b><b>d</b><b>e</b><b>n</b><b>t</b><b>(</b><b>"</b><u>l</u><u>p</u><u>o</u><u>r</u><u>t</u><b>"</b><b>)</b>, where <u>l</u><u>p</u><u>o</u><u>r</u><u>t</u>
+              is the name of a logical port on the same chassis where the cor‐
+              responding NAT rules are applied. This is used  to  send  gratu‐
+              itous ARPs for SNAT and DNAT external IP addresses via <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b>,
+              from the chassis where <u>l</u><u>p</u><u>o</u><u>r</u><u>t</u> resides. Example: <b>8</b><b>0</b><b>:</b><b>f</b><b>a</b><b>:</b><b>5</b><b>b</b><b>:</b><b>0</b><b>6</b><b>:</b><b>7</b><b>2</b><b>:</b><b>b</b><b>7</b>
+              <b>1</b><b>5</b><b>8</b><b>.</b><b>3</b><b>6</b><b>.</b><b>4</b><b>4</b><b>.</b><b>2</b><b>2</b>   <b>1</b><b>5</b><b>8</b><b>.</b><b>3</b><b>6</b><b>.</b><b>4</b><b>4</b><b>.</b><b>2</b><b>4</b>   <b>i</b><b>s</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>r</b><b>e</b><b>s</b><b>i</b><b>d</b><b>e</b><b>n</b><b>t</b><b>(</b><b>"</b><b>f</b><b>o</b><b>o</b><b>1</b><b>"</b><b>)</b>.  This
+              would result in generation of gratuitous ARPs for  IP  addresses
+              158.36.44.22   and   158.36.44.24   with   a   MAC   address  of
+              80:fa:5b:06:72:b7 from the chassis where the logical port "foo1"
+              resides.
+
+     <u>L</u><u>3</u> <u>G</u><u>a</u><u>t</u><u>e</u><u>w</u><u>a</u><u>y</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       These options apply to logical ports with <b>t</b><b>y</b><b>p</b><b>e</b> of <b>l</b><b>3</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b>.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>p</b><b>e</b><b>e</b><b>r</b>: optional string
+              The <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b> in the <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> record for the  other  side
+              of  the  ’l3gateway’  port.  The named <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b> must specify
+              this <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b> in its own  <b>p</b><b>e</b><b>e</b><b>r</b>  option.  That  is,  the  two
+              ’l3gateway’  logical  ports  must have reversed <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b> and
+              <b>p</b><b>e</b><b>e</b><b>r</b> values.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>l</b><b>3</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>: optional string
+              The <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> in which the port resides.
+
+       <b>n</b><b>a</b><b>t</b><b>_</b><b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b><b>e</b><b>s</b>: set of strings
+              MAC address of the <b>l</b><b>3</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b> port followed by a list of SNAT and
+              DNAT external IP addresses. This is used to send gratuitous ARPs
+              for SNAT and DNAT external IP addresses via  <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b>.  Example:
+              <b>8</b><b>0</b><b>:</b><b>f</b><b>a</b><b>:</b><b>5</b><b>b</b><b>:</b><b>0</b><b>6</b><b>:</b><b>7</b><b>2</b><b>:</b><b>b</b><b>7</b>  <b>1</b><b>5</b><b>8</b><b>.</b><b>3</b><b>6</b><b>.</b><b>4</b><b>4</b><b>.</b><b>2</b><b>2</b>  <b>1</b><b>5</b><b>8</b><b>.</b><b>3</b><b>6</b><b>.</b><b>4</b><b>4</b><b>.</b><b>2</b><b>4</b>. This would result
+              in generation of gratuitous ARPs for IP  addresses  158.36.44.22
+              and  158.36.44.24  with a MAC address of 80:fa:5b:06:72:b7. This
+              is used in OVS version 2.8 and later versions.
+
+     <u>L</u><u>o</u><u>c</u><u>a</u><u>l</u><u>n</u><u>e</u><u>t</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       These options apply to logical ports with <b>t</b><b>y</b><b>p</b><b>e</b> of <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b>.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>n</b><b>e</b><b>t</b><b>w</b><b>o</b><b>r</b><b>k</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b>: optional string
+              Required.   <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>   uses   the   configuration    entry
+              <b>o</b><b>v</b><b>n</b><b>-</b><b>b</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b><b>-</b><b>m</b><b>a</b><b>p</b><b>p</b><b>i</b><b>n</b><b>g</b><b>s</b> to determine how to connect to this network.
+              <b>o</b><b>v</b><b>n</b><b>-</b><b>b</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b><b>-</b><b>m</b><b>a</b><b>p</b><b>p</b><b>i</b><b>n</b><b>g</b><b>s</b> is a list of network names mapped to a local
+              OVS  bridge  that provides access to that network. An example of
+              configuring <b>o</b><b>v</b><b>n</b><b>-</b><b>b</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b><b>-</b><b>m</b><b>a</b><b>p</b><b>p</b><b>i</b><b>n</b><b>g</b><b>s</b> would be: .IP
+              <b>$</b> <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>c</b><b>t</b><b>l</b> <b>s</b><b>e</b><b>t</b> <b>o</b><b>p</b><b>e</b><b>n</b> <b>.</b> <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>-</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>b</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b><b>-</b><b>m</b><b>a</b><b>p</b><b>p</b><b>i</b><b>n</b><b>g</b><b>s</b><b>=</b><b>p</b><b>h</b><b>y</b><b>s</b><b>n</b><b>e</b><b>t</b><b>1</b><b>:</b><b>b</b><b>r</b><b>-</b><b>e</b><b>t</b><b>h</b><b>0</b><b>,</b><b>p</b><b>h</b><b>y</b><b>s</b><b>n</b><b>e</b><b>t</b><b>2</b><b>:</b><b>b</b><b>r</b><b>-</b><b>e</b><b>t</b><b>h</b><b>1</b>
+
+              When a logical switch has a <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b> port attached, every  chas‐
+              sis  that  may  have a local vif attached to that logical switch
+              must have a bridge mapping configured to  reach  that  <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b>.
+              Traffic  that arrives on a <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b> port is never forwarded over
+              a tunnel to another chassis.  If  there  are  multiple  <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b>
+              ports  in a logical switch, each chassis should only have a sin‐
+              gle bridge mapping for one of the physical  networks.  Note:  In
+              case  of  multiple  <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b> ports, to provide interconnectivity
+              between all VIFs located on  different  chassis  with  different
+              fabric  connectivity,  the  fabric should implement some form of
+              routing between the segments.
+
+       <b>t</b><b>a</b><b>g</b>: optional integer, in range 1 to 4,095
+              If set, indicates that the port represents  a  connection  to  a
+              specific  VLAN  on  a locally accessible network. The VLAN ID is
+              used to match incoming traffic and is  also  added  to  outgoing
+              traffic.
+
+     <u>L</u><u>2</u> <u>G</u><u>a</u><u>t</u><u>e</u><u>w</u><u>a</u><u>y</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       These options apply to logical ports with <b>t</b><b>y</b><b>p</b><b>e</b> of <b>l</b><b>2</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b>.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>n</b><b>e</b><b>t</b><b>w</b><b>o</b><b>r</b><b>k</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b>: optional string
+              Required.    <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>   uses   the   configuration   entry
+              <b>o</b><b>v</b><b>n</b><b>-</b><b>b</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b><b>-</b><b>m</b><b>a</b><b>p</b><b>p</b><b>i</b><b>n</b><b>g</b><b>s</b> to determine how to connect to this network.
+              <b>o</b><b>v</b><b>n</b><b>-</b><b>b</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b><b>-</b><b>m</b><b>a</b><b>p</b><b>p</b><b>i</b><b>n</b><b>g</b><b>s</b> is a list of network names mapped to a local
+              OVS bridge that provides access to that network. An  example  of
+              configuring <b>o</b><b>v</b><b>n</b><b>-</b><b>b</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b><b>-</b><b>m</b><b>a</b><b>p</b><b>p</b><b>i</b><b>n</b><b>g</b><b>s</b> would be: .IP
+              <b>$</b> <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>c</b><b>t</b><b>l</b> <b>s</b><b>e</b><b>t</b> <b>o</b><b>p</b><b>e</b><b>n</b> <b>.</b> <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>-</b><b>i</b><b>d</b><b>s</b><b>:</b><b>o</b><b>v</b><b>n</b><b>-</b><b>b</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b><b>-</b><b>m</b><b>a</b><b>p</b><b>p</b><b>i</b><b>n</b><b>g</b><b>s</b><b>=</b><b>p</b><b>h</b><b>y</b><b>s</b><b>n</b><b>e</b><b>t</b><b>1</b><b>:</b><b>b</b><b>r</b><b>-</b><b>e</b><b>t</b><b>h</b><b>0</b><b>,</b><b>p</b><b>h</b><b>y</b><b>s</b><b>n</b><b>e</b><b>t</b><b>2</b><b>:</b><b>b</b><b>r</b><b>-</b><b>e</b><b>t</b><b>h</b><b>1</b>
+
+              When a logical switch has a <b>l</b><b>2</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b> port attached, the chassis
+              that  the  <b>l</b><b>2</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b> port is bound to must have a bridge mapping
+              configured to reach the network identified by <b>n</b><b>e</b><b>t</b><b>w</b><b>o</b><b>r</b><b>k</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b>.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>l</b><b>2</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>: optional string
+              Required. The <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> in which the port resides.
+
+       <b>t</b><b>a</b><b>g</b>: optional integer, in range 1 to 4,095
+              If set, indicates that the gateway is connected  to  a  specific
+              VLAN  on  the physical network. The VLAN ID is used to match in‐
+              coming traffic and is also added to outgoing traffic.
+
+     <u>V</u><u>T</u><u>E</u><u>P</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       These options apply to logical ports with <b>t</b><b>y</b><b>p</b><b>e</b> of <b>v</b><b>t</b><b>e</b><b>p</b>.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>v</b><b>t</b><b>e</b><b>p</b><b>-</b><b>p</b><b>h</b><b>y</b><b>s</b><b>i</b><b>c</b><b>a</b><b>l</b><b>-</b><b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b>: optional string
+              Required. The name of the VTEP gateway.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>v</b><b>t</b><b>e</b><b>p</b><b>-</b><b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>-</b><b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b>: optional string
+              Required. A logical switch name connected by the  VTEP  gateway.
+              Must be set when <b>t</b><b>y</b><b>p</b><b>e</b> is <b>v</b><b>t</b><b>e</b><b>p</b>.
+
+     <u>V</u><u>M</u><u>I</u> <u>(</u><u>o</u><u>r</u> <u>V</u><u>I</u><u>F</u><u>)</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       These options apply to logical ports with <b>t</b><b>y</b><b>p</b><b>e</b> having (empty string)
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>r</b><b>e</b><b>q</b><b>u</b><b>e</b><b>s</b><b>t</b><b>e</b><b>d</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>: optional string
+              If set, identifies a specific chassis (by name or hostname) that
+              is  allowed  to  bind  this port. Using this option will prevent
+              thrashing between two chassis trying to bind the same port  dur‐
+              ing  a live migration. It can also prevent similar thrashing due
+              to a mis-configuration, if a port  is  accidentally  created  on
+              more than one chassis.
+
+              If set to a comma separated list, the first entry identifies the
+              main  chassis  and  the  rest are one or more additional chassis
+              that are allowed to bind the same port.
+
+              When multiple chassis are set for  the  port,  and  the  logical
+              switch  is  connected  to an external network through a <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b>
+              port, tunneling is enforced for the port to  guarantee  delivery
+              of  packets  directed to the port to all its locations. This has
+              MTU implications because the network  used  for  tunneling  must
+              have MTU larger than <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b> for stable connectivity.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>a</b><b>c</b><b>t</b><b>i</b><b>v</b><b>a</b><b>t</b><b>i</b><b>o</b><b>n</b><b>-</b><b>s</b><b>t</b><b>r</b><b>a</b><b>t</b><b>e</b><b>g</b><b>y</b>: optional string
+              If  used  with multiple chassis set in <b>r</b><b>e</b><b>q</b><b>u</b><b>e</b><b>s</b><b>t</b><b>e</b><b>d</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>, speci‐
+              fies an activation strategy for all additional chassis.  By  de‐
+              fault,  no  activation strategy is used, meaning additional port
+              locations are immediately available for use. When set to "rarp",
+              the port is blocked for ingress and egress communication until a
+              RARP packet is sent from a new location. The "rarp" strategy  is
+              useful in live migration scenarios for virtual machines.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>a</b><b>d</b><b>d</b><b>i</b><b>t</b><b>i</b><b>o</b><b>n</b><b>a</b><b>l</b><b>-</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>-</b><b>a</b><b>c</b><b>t</b><b>i</b><b>v</b><b>a</b><b>t</b><b>e</b><b>d</b>: optional string
+              When  <b>a</b><b>c</b><b>t</b><b>i</b><b>v</b><b>a</b><b>t</b><b>i</b><b>o</b><b>n</b><b>-</b><b>s</b><b>t</b><b>r</b><b>a</b><b>t</b><b>e</b><b>g</b><b>y</b> is set, this option indicates that the
+              port was activated using the strategy specified.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>i</b><b>f</b><b>a</b><b>c</b><b>e</b><b>-</b><b>i</b><b>d</b><b>-</b><b>v</b><b>e</b><b>r</b>: optional string
+              If set, this port will be bound by <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> only  if  this
+              same  key  and value is configured in the <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b> column in
+              the Open_vSwitch database’s <b>I</b><b>n</b><b>t</b><b>e</b><b>r</b><b>f</b><b>a</b><b>c</b><b>e</b> table.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>q</b><b>o</b><b>s</b><b>_</b><b>m</b><b>i</b><b>n</b><b>_</b><b>r</b><b>a</b><b>t</b><b>e</b>: optional string
+              If set, indicates the minimum guaranteed rate available for data
+              sent from this interface, in bit/s.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>q</b><b>o</b><b>s</b><b>_</b><b>m</b><b>a</b><b>x</b><b>_</b><b>r</b><b>a</b><b>t</b><b>e</b>: optional string
+              If set, indicates the maximum rate for data sent from  this  in‐
+              terface,  in bit/s. The traffic will be shaped according to this
+              limit.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>q</b><b>o</b><b>s</b><b>_</b><b>b</b><b>u</b><b>r</b><b>s</b><b>t</b>: optional string
+              If set, indicates the maximum burst size for data sent from this
+              interface, in bits.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>q</b><b>o</b><b>s</b><b>_</b><b>p</b><b>h</b><b>y</b><b>s</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>n</b><b>e</b><b>t</b><b>w</b><b>o</b><b>r</b><b>k</b>: optional string
+              If set, indicates the name of  the  egress  network  name  where
+              traffic shaping will be applied.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>q</b><b>d</b><b>i</b><b>s</b><b>c</b><b>_</b><b>q</b><b>u</b><b>e</b><b>u</b><b>e</b><b>_</b><b>i</b><b>d</b>: optional string, containing an integer, in
+       range 1 to 61,440
+              Indicates  the queue number on the physical device. This is same
+              as the <b>q</b><b>u</b><b>e</b><b>u</b><b>e</b><b>_</b><b>i</b><b>d</b> used in OpenFlow in <b>s</b><b>t</b><b>r</b><b>u</b><b>c</b><b>t</b> <b>o</b><b>f</b><b>p</b><b>_</b><b>a</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b><b>_</b><b>e</b><b>n</b><b>q</b><b>u</b><b>e</b><b>u</b><b>e</b>.
+
+     <u>D</u><u>i</u><u>s</u><u>t</u><u>r</u><u>i</u><u>b</u><u>u</u><u>t</u><u>e</u><u>d</u> <u>G</u><u>a</u><u>t</u><u>e</u><u>w</u><u>a</u><u>y</u> <u>P</u><u>o</u><u>r</u><u>t</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       These options apply to the distributed parent ports  of  logical  ports
+       with <b>t</b><b>y</b><b>p</b><b>e</b> of <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>s</b><b>i</b><b>s</b><b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b>.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>-</b><b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b><b>-</b><b>p</b><b>o</b><b>r</b><b>t</b>: optional string
+              The  name of the chassis redirect port derived from this port if
+              this port is a distributed parent of a chassis redirect port.
+
+     <u>C</u><u>h</u><u>a</u><u>s</u><u>s</u><u>i</u><u>s</u> <u>R</u><u>e</u><u>d</u><u>i</u><u>r</u><u>e</u><u>c</u><u>t</u> <u>O</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       These options apply to logical ports with <b>t</b><b>y</b><b>p</b><b>e</b> of <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b>.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>d</b><b>i</b><b>s</b><b>t</b><b>r</b><b>i</b><b>b</b><b>u</b><b>t</b><b>e</b><b>d</b><b>-</b><b>p</b><b>o</b><b>r</b><b>t</b>: optional string
+              The name of the distributed port for which this  <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b>
+              port represents a particular instance.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b><b>-</b><b>t</b><b>y</b><b>p</b><b>e</b>: optional string
+              The  value  is  copied from the column <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> in the OVN_North‐
+              bound database’s <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b> table for  the  distributed
+              parent of this port.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>a</b><b>l</b><b>w</b><b>a</b><b>y</b><b>s</b><b>-</b><b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b>: optional string
+              A  boolean  option that is set to true if the distributed parent
+              of this chassis redirect port does not need distributed process‐
+              ing.
+
+     <u>N</u><u>e</u><u>s</u><u>t</u><u>e</u><u>d</u> <u>C</u><u>o</u><u>n</u><u>t</u><u>a</u><u>i</u><u>n</u><u>e</u><u>r</u><u>s</u><u>:</u>
+
+       These columns support containers nested within a VM. Specifically, they
+       are used when <b>t</b><b>y</b><b>p</b><b>e</b> is empty and <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b> identifies  the  interface
+       of  a  container  spawned inside a VM. They are empty for containers or
+       VMs that run directly on a hypervisor.
+
+       <b>p</b><b>a</b><b>r</b><b>e</b><b>n</b><b>t</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>: optional string
+              This is taken from <b>p</b><b>a</b><b>r</b><b>e</b><b>n</b><b>t</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b> in the OVN_Northbound  database’s
+              <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b> table.
+
+       <b>t</b><b>a</b><b>g</b>: optional integer, in range 1 to 4,095
+              Identifies  the  VLAN tag in the network traffic associated with
+              that container’s network interface.
+
+              This column is used for a different purpose when <b>t</b><b>y</b><b>p</b><b>e</b> is  <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b>‐‐
+              <b>n</b><b>e</b><b>t</b>  (see  <b>L</b><b>o</b><b>c</b><b>a</b><b>l</b><b>n</b><b>e</b><b>t</b> <b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>, above) or <b>l</b><b>2</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b> (see <b>L</b><b>2</b> <b>G</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b>
+              <b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>, above).
+
+     <u>V</u><u>i</u><u>r</u><u>t</u><u>u</u><u>a</u><u>l</u> <u>p</u><u>o</u><u>r</u><u>t</u><u>s</u><u>:</u>
+
+       <b>v</b><b>i</b><b>r</b><b>t</b><b>u</b><b>a</b><b>l</b><b>_</b><b>p</b><b>a</b><b>r</b><b>e</b><b>n</b><b>t</b>: optional string
+              This column is set by <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> with one of the value  from
+              the  <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b><b>:</b><b>v</b><b>i</b><b>r</b><b>t</b><b>u</b><b>a</b><b>l</b><b>-</b><b>p</b><b>a</b><b>r</b><b>e</b><b>n</b><b>t</b><b>s</b>  in  the  OVN_Northbound database’s
+              <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b> table when the OVN action <b>b</b><b>i</b><b>n</b><b>d</b><b>_</b><b>v</b><b>p</b><b>o</b><b>r</b><b>t</b> is exe‐
+              cuted. <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> also sets the <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> column when it  exe‐
+              cutes this action with its chassis id.
+
+              <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> sets this column only if the <b>t</b><b>y</b><b>p</b><b>e</b> is "virtual".
+
+     <u>N</u><u>a</u><u>m</u><u>i</u><u>n</u><u>g</u><u>:</u>
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b> <b>:</b> <b>n</b><b>a</b><b>m</b><b>e</b>: optional string
+              For  a  logical  switch port, <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> copies this from <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b>‐‐
+              <b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b><b>:</b><b>n</b><b>e</b><b>u</b><b>t</b><b>r</b><b>o</b><b>n</b><b>:</b><b>p</b><b>o</b><b>r</b><b>t</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b> in the  <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b>  table  in
+              the OVN_Northbound database, if it is a nonempty string.
+
+              For  a  logical  switch  port, <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> does not currently set
+              this key.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+              See <b>E</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> <b>I</b><b>D</b><b>s</b> at the beginning of this document.
+
+              The <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> program populates this column  with  all  entries
+              into the <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b> column of the <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b> and <b>L</b><b>o</b><b>g</b>‐‐
+              <b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b> tables of the <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database.
+
+<b>M</b><b>A</b><b>C</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Each  row  in  this  table specifies a binding from an IP address to an
+       Ethernet address that has been discovered through  ARP  (for  IPv4)  or
+       neighbor discovery (for IPv6). This table is primarily used to discover
+       bindings  on  physical networks, because IP-to-MAC bindings for virtual
+       machines are usually populated statically into the <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> table.
+
+       This  table  expresses  a  functional  relationship:  <b>M</b><b>A</b><b>C</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>(<b>l</b><b>o</b><b>g</b><b>i</b>‐‐
+       <b>c</b><b>a</b><b>l</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>, <b>i</b><b>p</b>) = <b>m</b><b>a</b><b>c</b>.
+
+       In  outline,  the lifetime of a logical router’s MAC binding looks like
+       this:
+
+              1.  On hypervisor 1, a logical router determines that  a  packet
+                  should  be  forwarded  to  IP address <u>A</u> on one of its router
+                  ports. It uses its logical flow table to  determine  that  <u>A</u>
+                  lacks  a  static IP-to-MAC binding and the <b>g</b><b>e</b><b>t</b><b>_</b><b>a</b><b>r</b><b>p</b> action to
+                  determine that it lacks a dynamic IP-to-MAC binding.
+
+              2.  Using an OVN logical <b>a</b><b>r</b><b>p</b> action, the logical  router  gener‐
+                  ates  and  sends a broadcast ARP request to the router port.
+                  It drops the IP packet.
+
+              3.  The logical switch attached to the router port delivers  the
+                  ARP request to all of its ports. (It might make sense to de‐
+                  liver  it  only to ports that have no static IP-to-MAC bind‐
+                  ings, but this could also be surprising behavior.)
+
+              4.  A host or VM on hypervisor 2 (which might be the same as hy‐
+                  pervisor 1) attached to the logical switch owns the  IP  ad‐
+                  dress  in question. It composes an ARP reply and unicasts it
+                  to the logical router port’s Ethernet address.
+
+              5.  The logical switch delivers the ARP  reply  to  the  logical
+                  router port.
+
+              6.  The  logical router flow table executes a <b>p</b><b>u</b><b>t</b><b>_</b><b>a</b><b>r</b><b>p</b> action. To
+                  record the IP-to-MAC binding, <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> adds a  row  to
+                  the <b>M</b><b>A</b><b>C</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> table.
+
+              7.  On   hypervisor   1,  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>  receives  the  updated
+                  <b>M</b><b>A</b><b>C</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> table from the OVN southbound database. The next
+                  packet destined to <u>A</u> through the logical router is sent  di‐
+                  rectly to the bound Ethernet address.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>                  string
+       <b>i</b><b>p</b>                            string
+       <b>m</b><b>a</b><b>c</b>                           string
+       <b>t</b><b>i</b><b>m</b><b>e</b><b>s</b><b>t</b><b>a</b><b>m</b><b>p</b>                     integer
+       <b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b>                      <b>D</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>: string
+              The logical port on which the binding was discovered.
+
+       <b>i</b><b>p</b>: string
+              The bound IP address.
+
+       <b>m</b><b>a</b><b>c</b>: string
+              The Ethernet address to which the IP is bound.
+
+       <b>t</b><b>i</b><b>m</b><b>e</b><b>s</b><b>t</b><b>a</b><b>m</b><b>p</b>: integer
+              The timestamp in msec when the MAC binding was added or updated.
+              Records that existed before this column will have 0.
+
+       <b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b>: <b>D</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>
+              The logical datapath to which the logical port belongs.
+
+<b>D</b><b>H</b><b>C</b><b>P</b><b>_</b><b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Each  row in this table stores the DHCP Options supported by native OVN
+       DHCP. <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> populates this table with the supported DHCP  options.
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>  looks  up  this table to get the DHCP codes of the DHCP
+       options defined in the "put_dhcp_opts" action. Please refer to the  RFC
+       2132  <b>"</b><b>h</b><b>t</b><b>t</b><b>p</b><b>s</b><b>:</b><b>/</b><b>/</b><b>t</b><b>o</b><b>o</b><b>l</b><b>s</b><b>.</b><b>i</b><b>e</b><b>t</b><b>f</b><b>.</b><b>o</b><b>r</b><b>g</b><b>/</b><b>h</b><b>t</b><b>m</b><b>l</b><b>/</b><b>r</b><b>f</b><b>c</b><b>2</b><b>1</b><b>3</b><b>2</b><b>"</b>  for  the  possible list of
+       DHCP options that can be defined here.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>                          string
+       <b>c</b><b>o</b><b>d</b><b>e</b>                          integer, in range 0 to 254
+       <b>t</b><b>y</b><b>p</b><b>e</b>                          string, one of  <b>b</b><b>o</b><b>o</b><b>l</b>,  <b>d</b><b>o</b><b>m</b><b>a</b><b>i</b><b>n</b><b>s</b>,  <b>h</b><b>o</b><b>s</b><b>t</b><b>_</b><b>i</b><b>d</b>,
+                                     <b>i</b><b>p</b><b>v</b><b>4</b>, <b>s</b><b>t</b><b>a</b><b>t</b><b>i</b><b>c</b><b>_</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>s</b>, <b>s</b><b>t</b><b>r</b>, <b>u</b><b>i</b><b>n</b><b>t</b><b>1</b><b>6</b>, <b>u</b><b>i</b><b>n</b><b>t</b><b>3</b><b>2</b>,
+                                     or <b>u</b><b>i</b><b>n</b><b>t</b><b>8</b>
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>: string
+              Name of the DHCP option.
+
+              Example. name="router"
+
+       <b>c</b><b>o</b><b>d</b><b>e</b>: integer, in range 0 to 254
+              DHCP option code for the DHCP option as defined in the RFC 2132.
+
+              Example. code=3
+
+       <b>t</b><b>y</b><b>p</b><b>e</b>: string, one of <b>b</b><b>o</b><b>o</b><b>l</b>, <b>d</b><b>o</b><b>m</b><b>a</b><b>i</b><b>n</b><b>s</b>, <b>h</b><b>o</b><b>s</b><b>t</b><b>_</b><b>i</b><b>d</b>, <b>i</b><b>p</b><b>v</b><b>4</b>, <b>s</b><b>t</b><b>a</b><b>t</b><b>i</b><b>c</b><b>_</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>s</b>, <b>s</b><b>t</b><b>r</b>,
+       <b>u</b><b>i</b><b>n</b><b>t</b><b>1</b><b>6</b>, <b>u</b><b>i</b><b>n</b><b>t</b><b>3</b><b>2</b>, or <b>u</b><b>i</b><b>n</b><b>t</b><b>8</b>
+              Data type of the DHCP option code.
+
+              <b>v</b><b>a</b><b>l</b><b>u</b><b>e</b><b>:</b> <b>b</b><b>o</b><b>o</b><b>l</b>
+                     This  indicates  that  the  value of the DHCP option is a
+                     bool.
+
+                     Example.       "name=ip_forward_enable",       "code=19",
+                     "type=bool".
+
+                     put_dhcp_opts(..., ip_forward_enable = 1,...)
+
+              <b>v</b><b>a</b><b>l</b><b>u</b><b>e</b><b>:</b> <b>u</b><b>i</b><b>n</b><b>t</b><b>8</b>
+                     This  indicates  that  the value of the DHCP option is an
+                     unsigned int8 (8 bits)
+
+                     Example. "name=default_ttl", "code=23", "type=uint8".
+
+                     put_dhcp_opts(..., default_ttl = 50,...)
+
+              <b>v</b><b>a</b><b>l</b><b>u</b><b>e</b><b>:</b> <b>u</b><b>i</b><b>n</b><b>t</b><b>1</b><b>6</b>
+                     This indicates that the value of the DHCP  option  is  an
+                     unsigned int16 (16 bits).
+
+                     Example. "name=mtu", "code=26", "type=uint16".
+
+                     put_dhcp_opts(..., mtu = 1450,...)
+
+              <b>v</b><b>a</b><b>l</b><b>u</b><b>e</b><b>:</b> <b>u</b><b>i</b><b>n</b><b>t</b><b>3</b><b>2</b>
+                     This  indicates  that  the value of the DHCP option is an
+                     unsigned int32 (32 bits).
+
+                     Example. "name=lease_time", "code=51", "type=uint32".
+
+                     put_dhcp_opts(..., lease_time = 86400,...)
+
+              <b>v</b><b>a</b><b>l</b><b>u</b><b>e</b><b>:</b> <b>i</b><b>p</b><b>v</b><b>4</b>
+                     This indicates that the value of the DHCP  option  is  an
+                     IPv4 address or addresses.
+
+                     Example. "name=router", "code=3", "type=ipv4".
+
+                     put_dhcp_opts(..., router = 10.0.0.1,...)
+
+                     Example. "name=dns_server", "code=6", "type=ipv4".
+
+                     put_dhcp_opts(..., dns_server = {8.8.8.8 7.7.7.7},...)
+
+              <b>v</b><b>a</b><b>l</b><b>u</b><b>e</b><b>:</b> <b>s</b><b>t</b><b>a</b><b>t</b><b>i</b><b>c</b><b>_</b><b>r</b><b>o</b><b>u</b><b>t</b><b>e</b><b>s</b>
+                     This indicates that the value of the DHCP option contains
+                     a pair of IPv4 route and next hop addresses.
+
+                     Example.    "name=classless_static_route",    "code=121",
+                     "type=static_routes".
+
+                     put_dhcp_opts(...,        classless_static_route        =
+                     {30.0.0.0/24,10.0.0.4,0.0.0.0/0,10.0.0.1}...)
+
+              <b>v</b><b>a</b><b>l</b><b>u</b><b>e</b><b>:</b> <b>s</b><b>t</b><b>r</b>
+                     This  indicates  that  the  value of the DHCP option is a
+                     string.
+
+                     Example. "name=host_name", "code=12", "type=str".
+
+              <b>v</b><b>a</b><b>l</b><b>u</b><b>e</b><b>:</b> <b>h</b><b>o</b><b>s</b><b>t</b><b>_</b><b>i</b><b>d</b>
+                     This indicates that the value of the  DHCP  option  is  a
+                     host_id. It can either be a host_name or an IP address.
+
+                     Example. "name=tftp_server", "code=66", "type=host_id".
+
+              <b>v</b><b>a</b><b>l</b><b>u</b><b>e</b><b>:</b> <b>d</b><b>o</b><b>m</b><b>a</b><b>i</b><b>n</b><b>s</b>
+                     This indicates that the value of the DHCP option is a do‐
+                     main name or a comma separated list of domain names.
+
+                     Example. "name=domain_search_list", "code=119", "type=do‐
+                     mains".
+<b>D</b><b>H</b><b>C</b><b>P</b><b>v</b><b>6</b><b>_</b><b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Each  row  in  this table stores the DHCPv6 Options supported by native
+       OVN DHCPv6. <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> populates this table with the  supported  DHCPv6
+       options.  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> looks up this table to get the DHCPv6 codes of
+       the DHCPv6 options defined in the <b>p</b><b>u</b><b>t</b><b>_</b><b>d</b><b>h</b><b>c</b><b>p</b><b>v</b><b>6</b><b>_</b><b>o</b><b>p</b><b>t</b><b>s</b> action. Please  refer
+       to RFC 3315 and RFC 3646 for the list of DHCPv6 options that can be de‐
+       fined here.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>                          string
+       <b>c</b><b>o</b><b>d</b><b>e</b>                          integer, in range 0 to 254
+       <b>t</b><b>y</b><b>p</b><b>e</b>                          string, one of <b>i</b><b>p</b><b>v</b><b>6</b>, <b>m</b><b>a</b><b>c</b>, or <b>s</b><b>t</b><b>r</b>
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>: string
+              Name of the DHCPv6 option.
+
+              Example. name="ia_addr"
+
+       <b>c</b><b>o</b><b>d</b><b>e</b>: integer, in range 0 to 254
+              DHCPv6  option  code for the DHCPv6 option as defined in the ap‐
+              propriate RFC.
+
+              Example. code=3
+
+       <b>t</b><b>y</b><b>p</b><b>e</b>: string, one of <b>i</b><b>p</b><b>v</b><b>6</b>, <b>m</b><b>a</b><b>c</b>, or <b>s</b><b>t</b><b>r</b>
+              Data type of the DHCPv6 option code.
+
+              <b>v</b><b>a</b><b>l</b><b>u</b><b>e</b><b>:</b> <b>i</b><b>p</b><b>v</b><b>6</b>
+                     This indicates that the value of the DHCPv6 option is  an
+                     IPv6 address(es).
+
+                     Example. "name=ia_addr", "code=5", "type=ipv6".
+
+                     put_dhcpv6_opts(..., ia_addr = ae70::4,...)
+
+              <b>v</b><b>a</b><b>l</b><b>u</b><b>e</b><b>:</b> <b>s</b><b>t</b><b>r</b>
+                     This  indicates  that the value of the DHCPv6 option is a
+                     string.
+
+                     Example. "name=domain_search", "code=24", "type=str".
+
+                     put_dhcpv6_opts(..., domain_search = ovn.domain,...)
+
+              <b>v</b><b>a</b><b>l</b><b>u</b><b>e</b><b>:</b> <b>m</b><b>a</b><b>c</b>
+                     This indicates that the value of the DHCPv6 option  is  a
+                     MAC address.
+
+                     Example. "name=server_id", "code=2", "type=mac".
+
+                     put_dhcpv6_opts(..., server_id = 01:02:03:04L05:06,...)
+<b>C</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Configuration  for  a  database  connection to an Open vSwitch database
+       (OVSDB) client.
+
+       This table  primarily  configures  the  Open  vSwitch  database  server
+       (<b>o</b><b>v</b><b>s</b><b>d</b><b>b</b><b>-</b><b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b>).
+
+       The  Open vSwitch database server can initiate and maintain active con‐
+       nections to remote clients. It can also  listen  for  database  connec‐
+       tions.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <u>C</u><u>o</u><u>r</u><u>e</u> <u>F</u><u>e</u><u>a</u><u>t</u><u>u</u><u>r</u><u>e</u><u>s</u><u>:</u>
+         <b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b>                      string (must be unique within table)
+         <b>r</b><b>e</b><b>a</b><b>d</b><b>_</b><b>o</b><b>n</b><b>l</b><b>y</b>                   boolean
+         <b>r</b><b>o</b><b>l</b><b>e</b>                        string
+       <u>C</u><u>l</u><u>i</u><u>e</u><u>n</u><u>t</u> <u>F</u><u>a</u><u>i</u><u>l</u><u>u</u><u>r</u><u>e</u> <u>D</u><u>e</u><u>t</u><u>e</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u> <u>a</u><u>n</u><u>d</u> <u>H</u><u>a</u><u>n</u><u>d</u><u>l</u><u>i</u><u>n</u><u>g</u><u>:</u>
+         <b>m</b><b>a</b><b>x</b><b>_</b><b>b</b><b>a</b><b>c</b><b>k</b><b>o</b><b>f</b><b>f</b>                 optional integer, at least 1,000
+         <b>i</b><b>n</b><b>a</b><b>c</b><b>t</b><b>i</b><b>v</b><b>i</b><b>t</b><b>y</b><b>_</b><b>p</b><b>r</b><b>o</b><b>b</b><b>e</b>            optional integer
+       <u>S</u><u>t</u><u>a</u><u>t</u><u>u</u><u>s</u><u>:</u>
+         <b>i</b><b>s</b><b>_</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>e</b><b>d</b>                boolean
+         <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>l</b><b>a</b><b>s</b><b>t</b><b>_</b><b>e</b><b>r</b><b>r</b><b>o</b><b>r</b>         optional string
+         <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>s</b><b>t</b><b>a</b><b>t</b><b>e</b>              optional  string, one of <b>A</b><b>C</b><b>T</b><b>I</b><b>V</b><b>E</b>, <b>B</b><b>A</b><b>C</b><b>K</b><b>O</b><b>F</b><b>F</b>,
+                                     <b>C</b><b>O</b><b>N</b><b>N</b><b>E</b><b>C</b><b>T</b><b>I</b><b>N</b><b>G</b>, <b>I</b><b>D</b><b>L</b><b>E</b>, or <b>V</b><b>O</b><b>I</b><b>D</b>
+         <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>s</b><b>e</b><b>c</b><b>_</b><b>s</b><b>i</b><b>n</b><b>c</b><b>e</b><b>_</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b>  optional string, containing  an  integer,
+                                     at least 0
+         <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>s</b><b>e</b><b>c</b><b>_</b><b>s</b><b>i</b><b>n</b><b>c</b><b>e</b><b>_</b><b>d</b><b>i</b><b>s</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b>
+                                     optional  string,  containing an integer,
+                                     at least 0
+         <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>l</b><b>o</b><b>c</b><b>k</b><b>s</b><b>_</b><b>h</b><b>e</b><b>l</b><b>d</b>         optional string
+         <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>l</b><b>o</b><b>c</b><b>k</b><b>s</b><b>_</b><b>w</b><b>a</b><b>i</b><b>t</b><b>i</b><b>n</b><b>g</b>      optional string
+         <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>l</b><b>o</b><b>c</b><b>k</b><b>s</b><b>_</b><b>l</b><b>o</b><b>s</b><b>t</b>         optional string
+         <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>n</b><b>_</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>      optional string, containing  an  integer,
+                                     at least 2
+         <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>b</b><b>o</b><b>u</b><b>n</b><b>d</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>         optional string, containing an integer
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+         <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b>                map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+     <u>C</u><u>o</u><u>r</u><u>e</u> <u>F</u><u>e</u><u>a</u><u>t</u><u>u</u><u>r</u><u>e</u><u>s</u><u>:</u>
+
+       <b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b>: string (must be unique within table)
+              Connection methods for clients.
+
+              The following connection methods are currently supported:
+
+              <b>s</b><b>s</b><b>l</b><b>:</b><u>h</u><u>o</u><u>s</u><u>t</u>[<b>:</b><u>p</u><u>o</u><u>r</u><u>t</u>]
+                     The  specified  SSL <u>p</u><u>o</u><u>r</u><u>t</u> on the given <u>h</u><u>o</u><u>s</u><u>t</u>, which can ei‐
+                     ther be a DNS name (if built with unbound library) or  an
+                     IP  address.  A  valid SSL configuration must be provided
+                     when this form is used, this configuration can be  speci‐
+                     fied via command-line options or the <b>S</b><b>S</b><b>L</b> table.
+
+                     If <u>p</u><u>o</u><u>r</u><u>t</u> is not specified, it defaults to 6640.
+
+                     SSL  support  is  an  optional feature that is not always
+                     built as part of Open vSwitch.
+
+              <b>t</b><b>c</b><b>p</b><b>:</b><u>h</u><u>o</u><u>s</u><u>t</u>[<b>:</b><u>p</u><u>o</u><u>r</u><u>t</u>]
+                     The specified TCP <u>p</u><u>o</u><u>r</u><u>t</u> on the given <u>h</u><u>o</u><u>s</u><u>t</u>, which  can  ei‐
+                     ther  be a DNS name (if built with unbound library) or an
+                     IP address (IPv4 or IPv6). If <u>h</u><u>o</u><u>s</u><u>t</u> is  an  IPv6  address,
+                     wrap it in square brackets, e.g. <b>t</b><b>c</b><b>p</b><b>:</b><b>[</b><b>:</b><b>:</b><b>1</b><b>]</b><b>:</b><b>6</b><b>6</b><b>4</b><b>0</b>.
+
+                     If <u>p</u><u>o</u><u>r</u><u>t</u> is not specified, it defaults to 6640.
+
+              <b>p</b><b>s</b><b>s</b><b>l</b><b>:</b>[<u>p</u><u>o</u><u>r</u><u>t</u>][<b>:</b><u>h</u><u>o</u><u>s</u><u>t</u>]
+                     Listens  for  SSL  connections on the specified TCP <u>p</u><u>o</u><u>r</u><u>t</u>.
+                     Specify 0 for  <u>p</u><u>o</u><u>r</u><u>t</u>  to  have  the  kernel  automatically
+                     choose  an available port. If <u>h</u><u>o</u><u>s</u><u>t</u>, which can either be a
+                     DNS name (if built with unbound library)  or  an  IP  ad‐
+                     dress,  is  specified, then connections are restricted to
+                     the resolved or specified local IP address  (either  IPv4
+                     or  IPv6  address).  If  <u>h</u><u>o</u><u>s</u><u>t</u> is an IPv6 address, wrap in
+                     square brackets, e.g. <b>p</b><b>s</b><b>s</b><b>l</b><b>:</b><b>6</b><b>6</b><b>4</b><b>0</b><b>:</b><b>[</b><b>:</b><b>:</b><b>1</b><b>]</b>.  If  <u>h</u><u>o</u><u>s</u><u>t</u>  is  not
+                     specified then it listens only on IPv4 (but not IPv6) ad‐
+                     dresses.  A valid SSL configuration must be provided when
+                     this form is used, this can be specified either via  com‐
+                     mand-line options or the <b>S</b><b>S</b><b>L</b> table.
+
+                     If <u>p</u><u>o</u><u>r</u><u>t</u> is not specified, it defaults to 6640.
+
+                     SSL  support  is  an  optional feature that is not always
+                     built as part of Open vSwitch.
+
+              <b>p</b><b>t</b><b>c</b><b>p</b><b>:</b>[<u>p</u><u>o</u><u>r</u><u>t</u>][<b>:</b><u>h</u><u>o</u><u>s</u><u>t</u>]
+                     Listens for connections on the specified TCP <u>p</u><u>o</u><u>r</u><u>t</u>.  Spec‐
+                     ify 0 for <u>p</u><u>o</u><u>r</u><u>t</u> to have the kernel automatically choose an
+                     available  port.  If <u>h</u><u>o</u><u>s</u><u>t</u>, which can either be a DNS name
+                     (if built with unbound library)  or  an  IP  address,  is
+                     specified,  then  connections  are  restricted to the re‐
+                     solved or specified local IP address (either IPv4 or IPv6
+                     address). If <u>h</u><u>o</u><u>s</u><u>t</u> is an IPv6 address, wrap it  in  square
+                     brackets,  e.g. <b>p</b><b>t</b><b>c</b><b>p</b><b>:</b><b>6</b><b>6</b><b>4</b><b>0</b><b>:</b><b>[</b><b>:</b><b>:</b><b>1</b><b>]</b>. If <u>h</u><u>o</u><u>s</u><u>t</u> is not specified
+                     then it listens only on IPv4 addresses.
+
+                     If <u>p</u><u>o</u><u>r</u><u>t</u> is not specified, it defaults to 6640.
+
+              When multiple clients are configured, the <b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> values must  be
+              unique. Duplicate <b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> values yield unspecified results.
+
+       <b>r</b><b>e</b><b>a</b><b>d</b><b>_</b><b>o</b><b>n</b><b>l</b><b>y</b>: boolean
+              <b>t</b><b>r</b><b>u</b><b>e</b>  to  restrict  these connections to read-only transactions,
+              <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b> to allow them to modify the database.
+
+       <b>r</b><b>o</b><b>l</b><b>e</b>: string
+              String containing role name for this connection entry.
+
+     <u>C</u><u>l</u><u>i</u><u>e</u><u>n</u><u>t</u> <u>F</u><u>a</u><u>i</u><u>l</u><u>u</u><u>r</u><u>e</u> <u>D</u><u>e</u><u>t</u><u>e</u><u>c</u><u>t</u><u>i</u><u>o</u><u>n</u> <u>a</u><u>n</u><u>d</u> <u>H</u><u>a</u><u>n</u><u>d</u><u>l</u><u>i</u><u>n</u><u>g</u><u>:</u>
+
+       <b>m</b><b>a</b><b>x</b><b>_</b><b>b</b><b>a</b><b>c</b><b>k</b><b>o</b><b>f</b><b>f</b>: optional integer, at least 1,000
+              Maximum number of milliseconds to wait  between  connection  at‐
+              tempts. Default is implementation-specific.
+
+       <b>i</b><b>n</b><b>a</b><b>c</b><b>t</b><b>i</b><b>v</b><b>i</b><b>t</b><b>y</b><b>_</b><b>p</b><b>r</b><b>o</b><b>b</b><b>e</b>: optional integer
+              Maximum number of milliseconds of idle time on connection to the
+              client  before  sending  an  inactivity  probe  message. If Open
+              vSwitch does not communicate with the client for  the  specified
+              number  of  seconds,  it will send a probe. If a response is not
+              received for the same additional amount of  time,  Open  vSwitch
+              assumes  the  connection  has been broken and attempts to recon‐
+              nect. Default is implementation-specific. A value of 0  disables
+              inactivity probes.
+
+     <u>S</u><u>t</u><u>a</u><u>t</u><u>u</u><u>s</u><u>:</u>
+
+       Key-value pair of <b>i</b><b>s</b><b>_</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>e</b><b>d</b> is always updated. Other key-value pairs
+       in the status columns may be updated depends on the <b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> type.
+
+       When <b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> specifies a connection method that listens for inbound con‐
+       nections  (e.g.  <b>p</b><b>t</b><b>c</b><b>p</b><b>:</b>  or <b>p</b><b>u</b><b>n</b><b>i</b><b>x</b><b>:</b>), both <b>n</b><b>_</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> and <b>i</b><b>s</b><b>_</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>e</b><b>d</b>
+       may also be updated while the remaining key-value pairs are omitted.
+
+       On the other hand, when <b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> specifies an  outbound  connection,  all
+       key-value  pairs  may  be  updated, except the above-mentioned two key-
+       value pairs associated with inbound connection targets. They are  omit‐
+       ted.
+
+       <b>i</b><b>s</b><b>_</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>e</b><b>d</b>: boolean
+              <b>t</b><b>r</b><b>u</b><b>e</b> if currently connected to this client, <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b> otherwise.
+
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>l</b><b>a</b><b>s</b><b>t</b><b>_</b><b>e</b><b>r</b><b>r</b><b>o</b><b>r</b>: optional string
+              A human-readable description of the last error on the connection
+              to  the  manager; i.e. <b>s</b><b>t</b><b>r</b><b>e</b><b>r</b><b>r</b><b>o</b><b>r</b><b>(</b><b>e</b><b>r</b><b>r</b><b>n</b><b>o</b><b>)</b>. This key will exist only
+              if an error has occurred.
+
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>s</b><b>t</b><b>a</b><b>t</b><b>e</b>: optional string, one of <b>A</b><b>C</b><b>T</b><b>I</b><b>V</b><b>E</b>, <b>B</b><b>A</b><b>C</b><b>K</b><b>O</b><b>F</b><b>F</b>, <b>C</b><b>O</b><b>N</b><b>N</b><b>E</b><b>C</b><b>T</b><b>I</b><b>N</b><b>G</b>,
+       <b>I</b><b>D</b><b>L</b><b>E</b>, or <b>V</b><b>O</b><b>I</b><b>D</b>
+              The state of the connection to the manager:
+
+              <b>V</b><b>O</b><b>I</b><b>D</b>   Connection is disabled.
+
+              <b>B</b><b>A</b><b>C</b><b>K</b><b>O</b><b>F</b><b>F</b>
+                     Attempting to reconnect at an increasing period.
+
+              <b>C</b><b>O</b><b>N</b><b>N</b><b>E</b><b>C</b><b>T</b><b>I</b><b>N</b><b>G</b>
+                     Attempting to connect.
+
+              <b>A</b><b>C</b><b>T</b><b>I</b><b>V</b><b>E</b> Connected, remote host responsive.
+
+              <b>I</b><b>D</b><b>L</b><b>E</b>   Connection is idle. Waiting for response to keep-alive.
+
+              These values may change in the future. They  are  provided  only
+              for human consumption.
+
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>s</b><b>e</b><b>c</b><b>_</b><b>s</b><b>i</b><b>n</b><b>c</b><b>e</b><b>_</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b>: optional string, containing an integer, at
+       least 0
+              The amount of time since this client last successfully connected
+              to the database (in seconds). Value is empty if client has never
+              successfully been connected.
+
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>s</b><b>e</b><b>c</b><b>_</b><b>s</b><b>i</b><b>n</b><b>c</b><b>e</b><b>_</b><b>d</b><b>i</b><b>s</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b>: optional string, containing an integer,
+       at least 0
+              The  amount of time since this client last disconnected from the
+              database (in seconds). Value is empty if client has  never  dis‐
+              connected.
+
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>l</b><b>o</b><b>c</b><b>k</b><b>s</b><b>_</b><b>h</b><b>e</b><b>l</b><b>d</b>: optional string
+              Space-separated  list  of the names of OVSDB locks that the con‐
+              nection holds. Omitted if  the  connection  does  not  hold  any
+              locks.
+
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>l</b><b>o</b><b>c</b><b>k</b><b>s</b><b>_</b><b>w</b><b>a</b><b>i</b><b>t</b><b>i</b><b>n</b><b>g</b>: optional string
+              Space-separated  list  of the names of OVSDB locks that the con‐
+              nection is currently waiting to acquire. Omitted if the  connec‐
+              tion is not waiting for any locks.
+
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>l</b><b>o</b><b>c</b><b>k</b><b>s</b><b>_</b><b>l</b><b>o</b><b>s</b><b>t</b>: optional string
+              Space-separated  list  of the names of OVSDB locks that the con‐
+              nection has had stolen by another OVSDB client.  Omitted  if  no
+              locks have been stolen from this connection.
+
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>n</b><b>_</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>: optional string, containing an integer, at
+       least 2
+              When  <b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b>  specifies a connection method that listens for in‐
+              bound connections (e.g. <b>p</b><b>t</b><b>c</b><b>p</b><b>:</b> or <b>p</b><b>s</b><b>s</b><b>l</b><b>:</b>) and more than  one  con‐
+              nection  is  actually  active, the value is the number of active
+              connections. Otherwise, this key-value pair is omitted.
+
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b> <b>:</b> <b>b</b><b>o</b><b>u</b><b>n</b><b>d</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>: optional string, containing an integer
+              When <b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> is <b>p</b><b>t</b><b>c</b><b>p</b><b>:</b> or <b>p</b><b>s</b><b>s</b><b>l</b><b>:</b>, this is the TCP port on which the
+              OVSDB server is listening. (This  is  particularly  useful  when
+              <b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b>  specifies a port of 0, allowing the kernel to choose any
+              available port.)
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       The overall purpose of these columns is described under <b>C</b><b>o</b><b>m</b><b>m</b><b>o</b><b>n</b>  <b>C</b><b>o</b><b>l</b><b>u</b><b>m</b><b>n</b><b>s</b>
+       at the beginning of this document.
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+
+       <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>_</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b>: map of string-string pairs
+<b>S</b><b>S</b><b>L</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       SSL configuration for ovn-sb database access.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>p</b><b>r</b><b>i</b><b>v</b><b>a</b><b>t</b><b>e</b><b>_</b><b>k</b><b>e</b><b>y</b>                   string
+       <b>c</b><b>e</b><b>r</b><b>t</b><b>i</b><b>f</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b>                   string
+       <b>c</b><b>a</b><b>_</b><b>c</b><b>e</b><b>r</b><b>t</b>                       string
+       <b>b</b><b>o</b><b>o</b><b>t</b><b>s</b><b>t</b><b>r</b><b>a</b><b>p</b><b>_</b><b>c</b><b>a</b><b>_</b><b>c</b><b>e</b><b>r</b><b>t</b>             boolean
+       <b>s</b><b>s</b><b>l</b><b>_</b><b>p</b><b>r</b><b>o</b><b>t</b><b>o</b><b>c</b><b>o</b><b>l</b><b>s</b>                 string
+       <b>s</b><b>s</b><b>l</b><b>_</b><b>c</b><b>i</b><b>p</b><b>h</b><b>e</b><b>r</b><b>s</b>                   string
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>p</b><b>r</b><b>i</b><b>v</b><b>a</b><b>t</b><b>e</b><b>_</b><b>k</b><b>e</b><b>y</b>: string
+              Name  of  a  PEM  file  containing  the  private key used as the
+              switch’s identity for SSL connections to the controller.
+
+       <b>c</b><b>e</b><b>r</b><b>t</b><b>i</b><b>f</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b>: string
+              Name of a PEM file containing a certificate, signed by the  cer‐
+              tificate authority (CA) used by the controller and manager, that
+              certifies  the  switch’s  private key, identifying a trustworthy
+              switch.
+
+       <b>c</b><b>a</b><b>_</b><b>c</b><b>e</b><b>r</b><b>t</b>: string
+              Name of a PEM file containing the CA certificate used to  verify
+              that the switch is connected to a trustworthy controller.
+
+       <b>b</b><b>o</b><b>o</b><b>t</b><b>s</b><b>t</b><b>r</b><b>a</b><b>p</b><b>_</b><b>c</b><b>a</b><b>_</b><b>c</b><b>e</b><b>r</b><b>t</b>: boolean
+              If  set to <b>t</b><b>r</b><b>u</b><b>e</b>, then Open vSwitch will attempt to obtain the CA
+              certificate from the controller on its first SSL connection  and
+              save  it to the named PEM file. If it is successful, it will im‐
+              mediately drop the connection and reconnect, and  from  then  on
+              all  SSL  connections  must  be  authenticated  by a certificate
+              signed by the CA certificate thus obtained. <b>T</b><b>h</b><b>i</b><b>s</b> <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b>  <b>e</b><b>x</b><b>p</b><b>o</b><b>s</b><b>e</b><b>s</b>
+              <b>t</b><b>h</b><b>e</b>  <b>S</b><b>S</b><b>L</b>  <b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b> <b>t</b><b>o</b> <b>a</b> <b>m</b><b>a</b><b>n</b><b>-</b><b>i</b><b>n</b><b>-</b><b>t</b><b>h</b><b>e</b><b>-</b><b>m</b><b>i</b><b>d</b><b>d</b><b>l</b><b>e</b> <b>a</b><b>t</b><b>t</b><b>a</b><b>c</b><b>k</b> <b>o</b><b>b</b><b>t</b><b>a</b><b>i</b><b>n</b><b>i</b><b>n</b><b>g</b> <b>t</b><b>h</b><b>e</b>
+              <b>i</b><b>n</b><b>i</b><b>t</b><b>i</b><b>a</b><b>l</b> <b>C</b><b>A</b> <b>c</b><b>e</b><b>r</b><b>t</b><b>i</b><b>f</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b><b>.</b> It may still be  useful  for  bootstrap‐
+              ping.
+
+       <b>s</b><b>s</b><b>l</b><b>_</b><b>p</b><b>r</b><b>o</b><b>t</b><b>o</b><b>c</b><b>o</b><b>l</b><b>s</b>: string
+              List of SSL protocols to be enabled for SSL connections. The de‐
+              fault when this option is omitted is <b>T</b><b>L</b><b>S</b><b>v</b><b>1</b><b>,</b><b>T</b><b>L</b><b>S</b><b>v</b><b>1</b><b>.</b><b>1</b><b>,</b><b>T</b><b>L</b><b>S</b><b>v</b><b>1</b><b>.</b><b>2</b>.
+
+       <b>s</b><b>s</b><b>l</b><b>_</b><b>c</b><b>i</b><b>p</b><b>h</b><b>e</b><b>r</b><b>s</b>: string
+              List  of  ciphers  (in  OpenSSL cipher string format) to be sup‐
+              ported for SSL connections. The  default  when  this  option  is
+              omitted is <b>H</b><b>I</b><b>G</b><b>H</b><b>:</b><b>!</b><b>a</b><b>N</b><b>U</b><b>L</b><b>L</b><b>:</b><b>!</b><b>M</b><b>D</b><b>5</b>.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       The  overall purpose of these columns is described under <b>C</b><b>o</b><b>m</b><b>m</b><b>o</b><b>n</b> <b>C</b><b>o</b><b>l</b><b>u</b><b>m</b><b>n</b><b>s</b>
+       at the beginning of this document.
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+<b>D</b><b>N</b><b>S</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Each row  in  this  table  stores  the  DNS  records.  The  OVN  action
+       <b>d</b><b>n</b><b>s</b><b>_</b><b>l</b><b>o</b><b>o</b><b>k</b><b>u</b><b>p</b> uses this table for DNS resolution.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>r</b><b>e</b><b>c</b><b>o</b><b>r</b><b>d</b><b>s</b>                       map of string-string pairs
+       <b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>s</b>                     set of 1 or more <b>D</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>s
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>r</b><b>e</b><b>c</b><b>o</b><b>r</b><b>d</b><b>s</b>: map of string-string pairs
+              Key-value pair of DNS records with <b>D</b><b>N</b><b>S</b> <b>q</b><b>u</b><b>e</b><b>r</b><b>y</b> <b>n</b><b>a</b><b>m</b><b>e</b> as the key and
+              a  string  of  IP address(es) separated by comma or space as the
+              value. ovn-northd stores the DNS query name in all lowercase  in
+              order to facilitate case-insensitive lookups.
+
+              <b>E</b><b>x</b><b>a</b><b>m</b><b>p</b><b>l</b><b>e</b><b>:</b>  "vm1.ovn.org" = "10.0.0.4 aef0::4"
+
+       <b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>s</b>: set of 1 or more <b>D</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>s
+              The  DNS  records  defined in the column <b>r</b><b>e</b><b>c</b><b>o</b><b>r</b><b>d</b><b>s</b> will be applied
+              only to the DNS queries originating from the  datapaths  defined
+              in this column.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+              See <b>E</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> <b>I</b><b>D</b><b>s</b> at the beginning of this document.
+
+<b>R</b><b>B</b><b>A</b><b>C</b><b>_</b><b>R</b><b>o</b><b>l</b><b>e</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Role table for role-based access controls.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>                          string
+       <b>p</b><b>e</b><b>r</b><b>m</b><b>i</b><b>s</b><b>s</b><b>i</b><b>o</b><b>n</b><b>s</b>                   map of string-weak reference to <b>R</b><b>B</b><b>A</b><b>C</b><b>_</b><b>P</b><b>e</b><b>r</b>‐‐
+                                     <b>m</b><b>i</b><b>s</b><b>s</b><b>i</b><b>o</b><b>n</b> pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>: string
+              The  role  name, corresponding to the <b>r</b><b>o</b><b>l</b><b>e</b> column in the <b>C</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b>‐‐
+              <b>t</b><b>i</b><b>o</b><b>n</b> table.
+
+       <b>p</b><b>e</b><b>r</b><b>m</b><b>i</b><b>s</b><b>s</b><b>i</b><b>o</b><b>n</b><b>s</b>: map of string-weak reference to <b>R</b><b>B</b><b>A</b><b>C</b><b>_</b><b>P</b><b>e</b><b>r</b><b>m</b><b>i</b><b>s</b><b>s</b><b>i</b><b>o</b><b>n</b> pairs
+              A mapping of table names to rows in the <b>R</b><b>B</b><b>A</b><b>C</b><b>_</b><b>P</b><b>e</b><b>r</b><b>m</b><b>i</b><b>s</b><b>s</b><b>i</b><b>o</b><b>n</b> table.
+
+<b>R</b><b>B</b><b>A</b><b>C</b><b>_</b><b>P</b><b>e</b><b>r</b><b>m</b><b>i</b><b>s</b><b>s</b><b>i</b><b>o</b><b>n</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Permissions table for role-based access controls.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>t</b><b>a</b><b>b</b><b>l</b><b>e</b>                         string
+       <b>a</b><b>u</b><b>t</b><b>h</b><b>o</b><b>r</b><b>i</b><b>z</b><b>a</b><b>t</b><b>i</b><b>o</b><b>n</b>                 set of strings
+       <b>i</b><b>n</b><b>s</b><b>e</b><b>r</b><b>t</b><b>_</b><b>d</b><b>e</b><b>l</b><b>e</b><b>t</b><b>e</b>                 boolean
+       <b>u</b><b>p</b><b>d</b><b>a</b><b>t</b><b>e</b>                        set of strings
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>t</b><b>a</b><b>b</b><b>l</b><b>e</b>: string
+              Name of table to which this row applies.
+
+       <b>a</b><b>u</b><b>t</b><b>h</b><b>o</b><b>r</b><b>i</b><b>z</b><b>a</b><b>t</b><b>i</b><b>o</b><b>n</b>: set of strings
+              Set of strings identifying columns and column:key  pairs  to  be
+              compared with client ID. At least one match is required in order
+              to  be  authorized. A zero-length string is treated as a special
+              value indicating all clients should be considered authorized.
+
+       <b>i</b><b>n</b><b>s</b><b>e</b><b>r</b><b>t</b><b>_</b><b>d</b><b>e</b><b>l</b><b>e</b><b>t</b><b>e</b>: boolean
+              When "true", row insertions and  authorized  row  deletions  are
+              permitted.
+
+       <b>u</b><b>p</b><b>d</b><b>a</b><b>t</b><b>e</b>: set of strings
+              Set of strings identifying columns and column:key pairs that au‐
+              thorized clients are allowed to modify.
+
+<b>G</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>_</b><b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Association  of <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> rows of <b>t</b><b>y</b><b>p</b><b>e</b> <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b> to a <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>.
+       The traffic going out through a specific <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b> port  will  be
+       redirected to a chassis, or a set of them in high availability configu‐
+       rations.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>                          string (must be unique within table)
+       <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>                       optional weak reference to <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>
+       <b>p</b><b>r</b><b>i</b><b>o</b><b>r</b><b>i</b><b>t</b><b>y</b>                      integer, in range 0 to 32,767
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>                       map of string-string pairs
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>: string (must be unique within table)
+              Name of the <b>G</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b><b>_</b><b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>.
+
+              A   suggested,   but   not   required   naming   convention   is
+              <b>$</b><b>{</b><b>p</b><b>o</b><b>r</b><b>t</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b><b>}</b><b>_</b><b>$</b><b>{</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>n</b><b>a</b><b>m</b><b>e</b><b>}</b>.
+
+       <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>: optional weak reference to <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>
+              The <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> to which we send the traffic.
+
+       <b>p</b><b>r</b><b>i</b><b>o</b><b>r</b><b>i</b><b>t</b><b>y</b>: integer, in range 0 to 32,767
+              This is the  priority  the  specific  <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>  among  all  Gate‐
+              way_Chassis belonging to the same <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>: map of string-string pairs
+              Reserved for future use.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       The  overall purpose of these columns is described under <b>C</b><b>o</b><b>m</b><b>m</b><b>o</b><b>n</b> <b>C</b><b>o</b><b>l</b><b>u</b><b>m</b><b>n</b><b>s</b>
+       at the beginning of this document.
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+<b>H</b><b>A</b><b>_</b><b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>                       optional weak reference to <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>
+       <b>p</b><b>r</b><b>i</b><b>o</b><b>r</b><b>i</b><b>t</b><b>y</b>                      integer, in range 0 to 32,767
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>: optional weak reference to <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>
+              The <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> which provides the HA functionality.
+
+       <b>p</b><b>r</b><b>i</b><b>o</b><b>r</b><b>i</b><b>t</b><b>y</b>: integer, in range 0 to 32,767
+              Priority of the HA chassis. Chassis with highest  priority  will
+              be the master in the HA chassis group.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+              See <b>E</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> <b>I</b><b>D</b><b>s</b> at the beginning of this document.
+
+<b>H</b><b>A</b><b>_</b><b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Table representing a group of chassis which can provide High availabil‐
+       ity  services.  Each  chassis  in the group is represented by the table
+       <b>H</b><b>A</b><b>_</b><b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>. The HA chassis with highest priority will be the master  of
+       this  group. If the master chassis failover is detected, the HA chassis
+       with the next higher priority takes over the responsibility of  provid‐
+       ing the HA. If <b>h</b><b>a</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b> column of the table <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> refer‐
+       ences this table, then this HA chassis group provides the gateway func‐
+       tionality  and  redirects  the  gateway  traffic  to the master of this
+       group.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>                          string (must be unique within table)
+       <b>h</b><b>a</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>                    set of <b>H</b><b>A</b><b>_</b><b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>es
+       <b>r</b><b>e</b><b>f</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>                   set of weak reference to <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>: string (must be unique within table)
+              Name of the <b>H</b><b>A</b><b>_</b><b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b>. Name should be unique.
+
+       <b>h</b><b>a</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>: set of <b>H</b><b>A</b><b>_</b><b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>es
+              A list of <b>H</b><b>A</b><b>_</b><b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> which belongs to this group.
+
+       <b>r</b><b>e</b><b>f</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>: set of weak reference to <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>
+              The set of <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> that reference this HA chassis group. To  de‐
+              termine  the  correct  <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>,  find  the  <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>r</b><b>e</b><b>d</b><b>i</b><b>r</b><b>e</b><b>c</b><b>t</b> type
+              <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>  that  references   this   <b>H</b><b>A</b><b>_</b><b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b>.   This
+              <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>  is  derived  from  some particular logical router.
+              Starting from that LR, find the set of all logical switches  and
+              routers  connected  to it, directly or indirectly, across router
+              ports that link one LRP to another or to a LSP. For each LSP  in
+              these  logical switches, find the corresponding <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> and
+              add its bound <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> (if any) to <b>r</b><b>e</b><b>f</b><b>_</b><b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+              See <b>E</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> <b>I</b><b>D</b><b>s</b> at the beginning of this document.
+
+<b>C</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b><b>_</b><b>E</b><b>v</b><b>e</b><b>n</b><b>t</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Database table used by <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> to  report  CMS  related  events.
+       Please note there is no guarantee a given event is written exactly once
+       in  the  db.  It is CMS responsibility to squash duplicated lines or to
+       filter out duplicated events
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>e</b><b>v</b><b>e</b><b>n</b><b>t</b><b>_</b><b>t</b><b>y</b><b>p</b><b>e</b>                    string, must be <b>e</b><b>m</b><b>p</b><b>t</b><b>y</b><b>_</b><b>l</b><b>b</b><b>_</b><b>b</b><b>a</b><b>c</b><b>k</b><b>e</b><b>n</b><b>d</b><b>s</b>
+       <b>e</b><b>v</b><b>e</b><b>n</b><b>t</b><b>_</b><b>i</b><b>n</b><b>f</b><b>o</b>                    map of string-string pairs
+       <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>                       optional weak reference to <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>
+       <b>s</b><b>e</b><b>q</b><b>_</b><b>n</b><b>u</b><b>m</b>                       integer
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>e</b><b>v</b><b>e</b><b>n</b><b>t</b><b>_</b><b>t</b><b>y</b><b>p</b><b>e</b>: string, must be <b>e</b><b>m</b><b>p</b><b>t</b><b>y</b><b>_</b><b>l</b><b>b</b><b>_</b><b>b</b><b>a</b><b>c</b><b>k</b><b>e</b><b>n</b><b>d</b><b>s</b>
+              Event type occurred
+
+       <b>e</b><b>v</b><b>e</b><b>n</b><b>t</b><b>_</b><b>i</b><b>n</b><b>f</b><b>o</b>: map of string-string pairs
+              Key-value pairs used to specify event info to the CMS.  Possible
+              values are:
+
+              •      <b>v</b><b>i</b><b>p</b>: VIP reported for the <b>e</b><b>m</b><b>p</b><b>t</b><b>y</b><b>_</b><b>l</b><b>b</b><b>_</b><b>b</b><b>a</b><b>c</b><b>k</b><b>e</b><b>n</b><b>d</b><b>s</b> event
+
+              •      <b>p</b><b>r</b><b>o</b><b>t</b><b>o</b><b>c</b><b>o</b><b>l</b>:    Transport    protocol   reported   for   the
+                     <b>e</b><b>m</b><b>p</b><b>t</b><b>y</b><b>_</b><b>l</b><b>b</b><b>_</b><b>b</b><b>a</b><b>c</b><b>k</b><b>e</b><b>n</b><b>d</b><b>s</b> event
+
+              •      <b>l</b><b>o</b><b>a</b><b>d</b><b>_</b><b>b</b><b>a</b><b>l</b><b>a</b><b>n</b><b>c</b><b>e</b><b>r</b>: UUID of the load balancer reported for the
+                     <b>e</b><b>m</b><b>p</b><b>t</b><b>y</b><b>_</b><b>l</b><b>b</b><b>_</b><b>b</b><b>a</b><b>c</b><b>k</b><b>e</b><b>n</b><b>d</b><b>s</b> event
+
+       <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>: optional weak reference to <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>
+              This column is a <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> record to identify the chassis that has
+              managed a given event.
+
+       <b>s</b><b>e</b><b>q</b><b>_</b><b>n</b><b>u</b><b>m</b>: integer
+              Event sequence number. Global counter for  controller  generated
+              events. It can be used by the CMS to detect possible duplication
+              of the same event.
+<b>I</b><b>P</b><b>_</b><b>M</b><b>u</b><b>l</b><b>t</b><b>i</b><b>c</b><b>a</b><b>s</b><b>t</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       IP Multicast configuration options. For now only applicable to IGMP.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b>                      weak  reference to <b>D</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> (must
+                                     be unique within table)
+       <b>e</b><b>n</b><b>a</b><b>b</b><b>l</b><b>e</b><b>d</b>                       optional boolean
+       <b>q</b><b>u</b><b>e</b><b>r</b><b>i</b><b>e</b><b>r</b>                       optional boolean
+       <b>t</b><b>a</b><b>b</b><b>l</b><b>e</b><b>_</b><b>s</b><b>i</b><b>z</b><b>e</b>                    optional integer
+       <b>i</b><b>d</b><b>l</b><b>e</b><b>_</b><b>t</b><b>i</b><b>m</b><b>e</b><b>o</b><b>u</b><b>t</b>                  optional integer
+       <b>q</b><b>u</b><b>e</b><b>r</b><b>y</b><b>_</b><b>i</b><b>n</b><b>t</b><b>e</b><b>r</b><b>v</b><b>a</b><b>l</b>                optional integer
+       <b>s</b><b>e</b><b>q</b><b>_</b><b>n</b><b>o</b>                        integer
+       <u>Q</u><u>u</u><u>e</u><u>r</u><u>i</u><u>e</u><u>r</u> <u>c</u><u>o</u><u>n</u><u>f</u><u>i</u><u>g</u><u>u</u><u>r</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u> <u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>t</b><b>h</b><b>_</b><b>s</b><b>r</b><b>c</b>                     string
+         <b>i</b><b>p</b><b>4</b><b>_</b><b>s</b><b>r</b><b>c</b>                     string
+         <b>i</b><b>p</b><b>6</b><b>_</b><b>s</b><b>r</b><b>c</b>                     string
+         <b>q</b><b>u</b><b>e</b><b>r</b><b>y</b><b>_</b><b>m</b><b>a</b><b>x</b><b>_</b><b>r</b><b>e</b><b>s</b><b>p</b>              optional integer
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b>: weak reference to <b>D</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> (must be unique within ta‐
+       ble)
+              <b>D</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> entry for which these configuration options are
+              defined.
+
+       <b>e</b><b>n</b><b>a</b><b>b</b><b>l</b><b>e</b><b>d</b>: optional boolean
+              Enables/disables multicast snooping. Default: disabled.
+
+       <b>q</b><b>u</b><b>e</b><b>r</b><b>i</b><b>e</b><b>r</b>: optional boolean
+              Enables/disables multicast querying. If <b>e</b><b>n</b><b>a</b><b>b</b><b>l</b><b>e</b><b>d</b>  then  multicast
+              querying is enabled by default.
+
+       <b>t</b><b>a</b><b>b</b><b>l</b><b>e</b><b>_</b><b>s</b><b>i</b><b>z</b><b>e</b>: optional integer
+              Limits  the  number of multicast groups that can be learned. De‐
+              fault: 2048 groups per datapath.
+
+       <b>i</b><b>d</b><b>l</b><b>e</b><b>_</b><b>t</b><b>i</b><b>m</b><b>e</b><b>o</b><b>u</b><b>t</b>: optional integer
+              Configures the idle timeout (in seconds) for IP multicast groups
+              if multicast snooping is enabled. Default: 300 seconds.
+
+       <b>q</b><b>u</b><b>e</b><b>r</b><b>y</b><b>_</b><b>i</b><b>n</b><b>t</b><b>e</b><b>r</b><b>v</b><b>a</b><b>l</b>: optional integer
+              Configures the  interval  (in  seconds)  for  sending  multicast
+              queries if snooping and querier are enabled. Default: <b>i</b><b>d</b><b>l</b><b>e</b><b>_</b><b>t</b><b>i</b><b>m</b><b>e</b>‐‐
+              <b>o</b><b>u</b><b>t</b>/2 seconds.
+
+       <b>s</b><b>e</b><b>q</b><b>_</b><b>n</b><b>o</b>: integer
+              <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>  reads  this value and flushes all learned multi‐
+              cast groups when it detects that <b>s</b><b>e</b><b>q</b><b>_</b><b>n</b><b>o</b> was changed.
+
+     <u>Q</u><u>u</u><u>e</u><u>r</u><u>i</u><u>e</u><u>r</u> <u>c</u><u>o</u><u>n</u><u>f</u><u>i</u><u>g</u><u>u</u><u>r</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u> <u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       The <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> process that runs on OVN hypervisor nodes  uses  the
+       following columns to determine field values in IGMP/MLD queries that it
+       originates:
+
+       <b>e</b><b>t</b><b>h</b><b>_</b><b>s</b><b>r</b><b>c</b>: string
+              Source Ethernet address.
+
+       <b>i</b><b>p</b><b>4</b><b>_</b><b>s</b><b>r</b><b>c</b>: string
+              Source IPv4 address.
+
+       <b>i</b><b>p</b><b>6</b><b>_</b><b>s</b><b>r</b><b>c</b>: string
+              Source IPv6 address.
+
+       <b>q</b><b>u</b><b>e</b><b>r</b><b>y</b><b>_</b><b>m</b><b>a</b><b>x</b><b>_</b><b>r</b><b>e</b><b>s</b><b>p</b>: optional integer
+              Value  (in seconds) to be used as "max-response" field in multi‐
+              cast queries. Default: 1 second.
+
+<b>I</b><b>G</b><b>M</b><b>P</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Contains learned IGMP groups indexed by address/datapath/chassis.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b>                       string
+       <b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b>                      optional weak reference to <b>D</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b>‐‐
+                                     <b>i</b><b>n</b><b>g</b>
+       <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>                       optional weak reference to <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>
+       <b>p</b><b>o</b><b>r</b><b>t</b><b>s</b>                         set of weak reference to <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>s
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>a</b><b>d</b><b>d</b><b>r</b><b>e</b><b>s</b><b>s</b>: string
+              Destination IPv4 address for the IGMP group.
+
+       <b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b>: optional weak reference to <b>D</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>
+              Datapath to which this IGMP group belongs.
+
+       <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>: optional weak reference to <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>
+              Chassis to which this IGMP group belongs.
+
+       <b>p</b><b>o</b><b>r</b><b>t</b><b>s</b>: set of weak reference to <b>P</b><b>o</b><b>r</b><b>t</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>s
+              The destination port bindings for this IGMP group.
+
+<b>S</b><b>e</b><b>r</b><b>v</b><b>i</b><b>c</b><b>e</b><b>_</b><b>M</b><b>o</b><b>n</b><b>i</b><b>t</b><b>o</b><b>r</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Each row in this table configures monitoring a service  for  its  live‐
+       ness. The service can be an IPv4 TCP or UDP service. <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> pe‐
+       riodically  sends out service monitor packets and updates the status of
+       the service. Service monitoring for IPv6 services is not supported.
+
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> uses this feature to  implement  the  load  balancer  health
+       check feature offered to the CMS through the northbound database.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <u>C</u><u>o</u><u>n</u><u>f</u><u>i</u><u>g</u><u>u</u><u>r</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u><u>:</u>
+         <b>i</b><b>p</b>                          string
+         <b>p</b><b>r</b><b>o</b><b>t</b><b>o</b><b>c</b><b>o</b><b>l</b>                    optional string, either <b>t</b><b>c</b><b>p</b> or <b>u</b><b>d</b><b>p</b>
+         <b>p</b><b>o</b><b>r</b><b>t</b>                        integer, in range 0 to 65,535
+         <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>                string
+         <b>s</b><b>r</b><b>c</b><b>_</b><b>m</b><b>a</b><b>c</b>                     string
+         <b>s</b><b>r</b><b>c</b><b>_</b><b>i</b><b>p</b>                      string
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>i</b><b>n</b><b>t</b><b>e</b><b>r</b><b>v</b><b>a</b><b>l</b>          optional string, containing an integer
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>t</b><b>i</b><b>m</b><b>e</b><b>o</b><b>u</b><b>t</b>           optional string, containing an integer
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>s</b><b>u</b><b>c</b><b>c</b><b>e</b><b>s</b><b>s</b><b>_</b><b>c</b><b>o</b><b>u</b><b>n</b><b>t</b>     optional string, containing an integer
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>f</b><b>a</b><b>i</b><b>l</b><b>u</b><b>r</b><b>e</b><b>_</b><b>c</b><b>o</b><b>u</b><b>n</b><b>t</b>     optional string, containing an integer
+       <u>S</u><u>t</u><u>a</u><u>t</u><u>u</u><u>s</u> <u>R</u><u>e</u><u>p</u><u>o</u><u>r</u><u>t</u><u>i</u><u>n</u><u>g</u><u>:</u>
+         <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b>                      optional  string,  one of <b>e</b><b>r</b><b>r</b><b>o</b><b>r</b>, <b>o</b><b>f</b><b>f</b><b>l</b><b>i</b><b>n</b><b>e</b>,
+                                     or <b>o</b><b>n</b><b>l</b><b>i</b><b>n</b><b>e</b>
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+     <u>C</u><u>o</u><u>n</u><u>f</u><u>i</u><u>g</u><u>u</u><u>r</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u><u>:</u>
+
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> sets these columns and values to configure the service moni‐
+       tor.
+
+       <b>i</b><b>p</b>: string
+              IP of the service to be monitored. Only IPv4 is supported.
+
+       <b>p</b><b>r</b><b>o</b><b>t</b><b>o</b><b>c</b><b>o</b><b>l</b>: optional string, either <b>t</b><b>c</b><b>p</b> or <b>u</b><b>d</b><b>p</b>
+              The protocol of the service.
+
+       <b>p</b><b>o</b><b>r</b><b>t</b>: integer, in range 0 to 65,535
+              The TCP or UDP port of the service.
+
+       <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>: string
+              The VIF of the logical port on which the service is running. The
+              <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> that binds this <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b> monitors the service
+              by sending periodic monitor packets.
+
+       <b>s</b><b>r</b><b>c</b><b>_</b><b>m</b><b>a</b><b>c</b>: string
+              Source Ethernet address to use in the service monitor packet.
+
+       <b>s</b><b>r</b><b>c</b><b>_</b><b>i</b><b>p</b>: string
+              Source IPv4 address to use in the service monitor packet.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>i</b><b>n</b><b>t</b><b>e</b><b>r</b><b>v</b><b>a</b><b>l</b>: optional string, containing an integer
+              The interval, in seconds, between service monitor checks.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>t</b><b>i</b><b>m</b><b>e</b><b>o</b><b>u</b><b>t</b>: optional string, containing an integer
+              The time, in seconds, after  which  the  service  monitor  check
+              times out.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>s</b><b>u</b><b>c</b><b>c</b><b>e</b><b>s</b><b>s</b><b>_</b><b>c</b><b>o</b><b>u</b><b>n</b><b>t</b>: optional string, containing an integer
+              The  number of successful checks after which the service is con‐
+              sidered <b>o</b><b>n</b><b>l</b><b>i</b><b>n</b><b>e</b>.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>f</b><b>a</b><b>i</b><b>l</b><b>u</b><b>r</b><b>e</b><b>_</b><b>c</b><b>o</b><b>u</b><b>n</b><b>t</b>: optional string, containing an integer
+              The number of failure checks after which the service is  consid‐
+              ered <b>o</b><b>f</b><b>f</b><b>l</b><b>i</b><b>n</b><b>e</b>.
+
+     <u>S</u><u>t</u><u>a</u><u>t</u><u>u</u><u>s</u> <u>R</u><u>e</u><u>p</u><u>o</u><u>r</u><u>t</u><u>i</u><u>n</u><u>g</u><u>:</u>
+
+       The  <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b>  on the chassis that hosts the <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b> updates
+       this column to report the service’s status.
+
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b>: optional string, one of <b>e</b><b>r</b><b>r</b><b>o</b><b>r</b>, <b>o</b><b>f</b><b>f</b><b>l</b><b>i</b><b>n</b><b>e</b>, or <b>o</b><b>n</b><b>l</b><b>i</b><b>n</b><b>e</b>
+              For TCP service, <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> sends a SYN to the  service  and
+              expects an ACK response to consider the service to be <b>o</b><b>n</b><b>l</b><b>i</b><b>n</b><b>e</b>.
+
+              For  UDP  service, <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> sends a UDP packet to the ser‐
+              vice and doesn’t expect any reply. If it receives an ICMP reply,
+              then it considers the service to be <b>o</b><b>f</b><b>f</b><b>l</b><b>i</b><b>n</b><b>e</b>.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+              See <b>E</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> <b>I</b><b>D</b><b>s</b> at the beginning of this document.
+
+<b>L</b><b>o</b><b>a</b><b>d</b><b>_</b><b>B</b><b>a</b><b>l</b><b>a</b><b>n</b><b>c</b><b>e</b><b>r</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Each row represents a load balancer.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>                          string
+       <b>v</b><b>i</b><b>p</b><b>s</b>                          map of string-string pairs
+       <b>p</b><b>r</b><b>o</b><b>t</b><b>o</b><b>c</b><b>o</b><b>l</b>                      optional string, one of <b>s</b><b>c</b><b>t</b><b>p</b>, <b>t</b><b>c</b><b>p</b>, or <b>u</b><b>d</b><b>p</b>
+       <b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>s</b>                     set of <b>D</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>s
+       <b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b>                optional <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>D</b><b>P</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b>
+       <u>L</u><u>o</u><u>a</u><u>d</u><b>_</b><u>B</u><u>a</u><u>l</u><u>a</u><u>n</u><u>c</u><u>e</u><u>r</u> <u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>h</b><b>a</b><b>i</b><b>r</b><b>p</b><b>i</b><b>n</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>_</b><b>i</b><b>p</b>   optional string
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>h</b><b>a</b><b>i</b><b>r</b><b>p</b><b>i</b><b>n</b><b>_</b><b>o</b><b>r</b><b>i</b><b>g</b><b>_</b><b>t</b><b>u</b><b>p</b><b>l</b><b>e</b>
+                                     optional string, either <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+       <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>n</b><b>a</b><b>m</b><b>e</b>: string
+              A name for the load balancer. This name has no  special  meaning
+              or  purpose other than to provide convenience for human interac‐
+              tion with the ovn-nb database.
+
+       <b>v</b><b>i</b><b>p</b><b>s</b>: map of string-string pairs
+              A map of virtual IP addresses (and an optional port number  with
+              <b>:</b>  as  a separator) associated with this load balancer and their
+              corresponding endpoint IP addresses (and optional  port  numbers
+              with <b>:</b> as separators) separated by commas.
+
+       <b>p</b><b>r</b><b>o</b><b>t</b><b>o</b><b>c</b><b>o</b><b>l</b>: optional string, one of <b>s</b><b>c</b><b>t</b><b>p</b>, <b>t</b><b>c</b><b>p</b>, or <b>u</b><b>d</b><b>p</b>
+              Valid  protocols  are  <b>t</b><b>c</b><b>p</b>,  <b>u</b><b>d</b><b>p</b>, or <b>s</b><b>c</b><b>t</b><b>p</b>. This column is useful
+              when a port number is provided as part of the  <b>v</b><b>i</b><b>p</b><b>s</b>  column.  If
+              this  column  is  empty and a port number is provided as part of
+              <b>v</b><b>i</b><b>p</b><b>s</b> column, OVN assumes the protocol to be <b>t</b><b>c</b><b>p</b>.
+
+       <b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>s</b>: set of <b>D</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>s
+              Datapaths to which this load balancer applies to.
+
+       <b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>g</b><b>r</b><b>o</b><b>u</b><b>p</b>: optional <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>D</b><b>P</b><b>_</b><b>G</b><b>r</b><b>o</b><b>u</b><b>p</b>
+              The group of datapaths to which this load balancer  applies  to.
+              This  means that the same load balancer applies to all datapaths
+              in a group.
+
+     <u>L</u><u>o</u><u>a</u><u>d</u><b>_</b><u>B</u><u>a</u><u>l</u><u>a</u><u>n</u><u>c</u><u>e</u><u>r</u> <u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u><u>:</u>
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>h</b><b>a</b><b>i</b><b>r</b><b>p</b><b>i</b><b>n</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>_</b><b>i</b><b>p</b>: optional string
+              IP to be used as source IP for  packets  that  have  been  hair-
+              pinned  after  load balancing. This value is automatically popu‐
+              lated by <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> <b>:</b> <b>h</b><b>a</b><b>i</b><b>r</b><b>p</b><b>i</b><b>n</b><b>_</b><b>o</b><b>r</b><b>i</b><b>g</b><b>_</b><b>t</b><b>u</b><b>p</b><b>l</b><b>e</b>: optional string, either <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>
+              This value is automatically set to <b>t</b><b>r</b><b>u</b><b>e</b> by <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> when orig‐
+              inal destination IP and transport  port  of  the  load  balanced
+              packets are stored in registers <b>r</b><b>e</b><b>g</b><b>1</b><b>,</b> <b>r</b><b>e</b><b>g</b><b>2</b><b>,</b> <b>x</b><b>x</b><b>r</b><b>e</b><b>g</b><b>1</b>.
+
+     <u>C</u><u>o</u><u>m</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u><u>:</u>
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+              See <b>E</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> <b>I</b><b>D</b><b>s</b> at the beginning of this document.
+
+<b>B</b><b>F</b><b>D</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Contains BFD parameter for ovn-controller bfd configuration.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <u>C</u><u>o</u><u>n</u><u>f</u><u>i</u><u>g</u><u>u</u><u>r</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u><u>:</u>
+         <b>s</b><b>r</b><b>c</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>                    integer, in range 49,152 to 65,535
+         <b>d</b><b>i</b><b>s</b><b>c</b>                        integer
+         <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>                string
+         <b>d</b><b>s</b><b>t</b><b>_</b><b>i</b><b>p</b>                      string
+         <b>m</b><b>i</b><b>n</b><b>_</b><b>t</b><b>x</b>                      integer
+         <b>m</b><b>i</b><b>n</b><b>_</b><b>r</b><b>x</b>                      integer
+         <b>d</b><b>e</b><b>t</b><b>e</b><b>c</b><b>t</b><b>_</b><b>m</b><b>u</b><b>l</b><b>t</b>                 integer
+         <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>                     map of string-string pairs
+         <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>                map of string-string pairs
+       <u>S</u><u>t</u><u>a</u><u>t</u><u>u</u><u>s</u> <u>R</u><u>e</u><u>p</u><u>o</u><u>r</u><u>t</u><u>i</u><u>n</u><u>g</u><u>:</u>
+         <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b>                      string, one of <b>a</b><b>d</b><b>m</b><b>i</b><b>n</b><b>_</b><b>d</b><b>o</b><b>w</b><b>n</b>, <b>d</b><b>o</b><b>w</b><b>n</b>, <b>i</b><b>n</b><b>i</b><b>t</b>, or
+                                     <b>u</b><b>p</b>
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+     <u>C</u><u>o</u><u>n</u><u>f</u><u>i</u><u>g</u><u>u</u><u>r</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u><u>:</u>
+
+       <b>s</b><b>r</b><b>c</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>: integer, in range 49,152 to 65,535
+              udp  source  port  used  in bfd control packets. The source port
+              MUST be in the range 49152 through 65535 (RFC5881 section 4).
+
+       <b>d</b><b>i</b><b>s</b><b>c</b>: integer
+              A unique, nonzero discriminator value generated by the transmit‐
+              ting system, used to demultiplex multiple BFD  sessions  between
+              the same pair of systems.
+
+       <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>: string
+              OVN logical port when BFD engine is running.
+
+       <b>d</b><b>s</b><b>t</b><b>_</b><b>i</b><b>p</b>: string
+              BFD peer IP address.
+
+       <b>m</b><b>i</b><b>n</b><b>_</b><b>t</b><b>x</b>: integer
+              This  is  the  minimum interval, in milliseconds, that the local
+              system would like to use when transmitting BFD Control  packets,
+              less any jitter applied. The value zero is reserved.
+
+       <b>m</b><b>i</b><b>n</b><b>_</b><b>r</b><b>x</b>: integer
+              This  is the minimum interval, in milliseconds, between received
+              BFD Control packets that this system is capable  of  supporting,
+              less  any  jitter  applied by the sender. If this value is zero,
+              the transmitting system does not want the remote system to  send
+              any periodic BFD Control packets.
+
+       <b>d</b><b>e</b><b>t</b><b>e</b><b>c</b><b>t</b><b>_</b><b>m</b><b>u</b><b>l</b><b>t</b>: integer
+              Detection  time  multiplier.  The  negotiated transmit interval,
+              multiplied by this value, provides the Detection  Time  for  the
+              receiving system in Asynchronous mode.
+
+       <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>: map of string-string pairs
+              Reserved for future use.
+
+       <b>e</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b><b>_</b><b>i</b><b>d</b><b>s</b>: map of string-string pairs
+              See <b>E</b><b>x</b><b>t</b><b>e</b><b>r</b><b>n</b><b>a</b><b>l</b> <b>I</b><b>D</b><b>s</b> at the beginning of this document.
+
+     <u>S</u><u>t</u><u>a</u><u>t</u><u>u</u><u>s</u> <u>R</u><u>e</u><u>p</u><u>o</u><u>r</u><u>t</u><u>i</u><u>n</u><u>g</u><u>:</u>
+
+       <b>s</b><b>t</b><b>a</b><b>t</b><b>u</b><b>s</b>: string, one of <b>a</b><b>d</b><b>m</b><b>i</b><b>n</b><b>_</b><b>d</b><b>o</b><b>w</b><b>n</b>, <b>d</b><b>o</b><b>w</b><b>n</b>, <b>i</b><b>n</b><b>i</b><b>t</b>, or <b>u</b><b>p</b>
+              BFD port logical states. Possible values are:
+
+              •      <b>a</b><b>d</b><b>m</b><b>i</b><b>n</b><b>_</b><b>d</b><b>o</b><b>w</b><b>n</b>
+
+              •      <b>d</b><b>o</b><b>w</b><b>n</b>
+
+              •      <b>i</b><b>n</b><b>i</b><b>t</b>
+
+              •      <b>u</b><b>p</b>
+<b>F</b><b>D</b><b>B</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       This  table is primarily used to learn the MACs observed on a VIF (or a
+       localnet port with ’localnet_learn_fdb’ enabled)  which  belongs  to  a
+       <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b>  record  in  <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b>  whose port security is
+       disabled and ’unknown’ address set. If port security is disabled  on  a
+       <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>_</b><b>P</b><b>o</b><b>r</b><b>t</b>  record,  OVN  should allow traffic with any source
+       mac from the VIF. This table will be used to deliver a  packet  to  the
+       VIF, If a packet’s <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> is learnt.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>m</b><b>a</b><b>c</b>                           string
+       <b>d</b><b>p</b><b>_</b><b>k</b><b>e</b><b>y</b>                        integer, in range 1 to 16,777,215
+       <b>p</b><b>o</b><b>r</b><b>t</b><b>_</b><b>k</b><b>e</b><b>y</b>                      integer, in range 1 to 16,777,215
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>m</b><b>a</b><b>c</b>: string
+              The learnt mac address.
+
+       <b>d</b><b>p</b><b>_</b><b>k</b><b>e</b><b>y</b>: integer, in range 1 to 16,777,215
+              The key of the datapath on which this FDB was learnt.
+
+       <b>p</b><b>o</b><b>r</b><b>t</b><b>_</b><b>k</b><b>e</b><b>y</b>: integer, in range 1 to 16,777,215
+              The key of the port binding on which this FDB was learnt.
+
+<b>S</b><b>t</b><b>a</b><b>t</b><b>i</b><b>c</b><b>_</b><b>M</b><b>A</b><b>C</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Each record represents a Static_MAC_Binding entry for a logical router.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>                  string
+       <b>i</b><b>p</b>                            string
+       <b>m</b><b>a</b><b>c</b>                           string
+       <b>o</b><b>v</b><b>e</b><b>r</b><b>r</b><b>i</b><b>d</b><b>e</b><b>_</b><b>d</b><b>y</b><b>n</b><b>a</b><b>m</b><b>i</b><b>c</b><b>_</b><b>m</b><b>a</b><b>c</b>          boolean
+       <b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b>                      <b>D</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>l</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b>: string
+              The logical router port for the binding.
+
+       <b>i</b><b>p</b>: string
+              The bound IP address.
+
+       <b>m</b><b>a</b><b>c</b>: string
+              The Ethernet address to which the IP is bound.
+
+       <b>o</b><b>v</b><b>e</b><b>r</b><b>r</b><b>i</b><b>d</b><b>e</b><b>_</b><b>d</b><b>y</b><b>n</b><b>a</b><b>m</b><b>i</b><b>c</b><b>_</b><b>m</b><b>a</b><b>c</b>: boolean
+              Override dynamically learnt MACs.
+
+       <b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b>: <b>D</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b>
+              The logical datapath to which the logical router port belongs.
+
+<b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>T</b><b>e</b><b>m</b><b>p</b><b>l</b><b>a</b><b>t</b><b>e</b><b>_</b><b>V</b><b>a</b><b>r</b> <b>T</b><b>A</b><b>B</b><b>L</b><b>E</b>
+       Each  record represents the set of template variable instantiations for
+       a given chassis and is populated by <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> from the contents of the
+       <b>O</b><b>V</b><b>N</b><b>_</b><b>N</b><b>o</b><b>r</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b><b>.</b><b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>_</b><b>T</b><b>e</b><b>m</b><b>p</b><b>l</b><b>a</b><b>t</b><b>e</b><b>_</b><b>V</b><b>a</b><b>r</b> table.
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b><b>:</b>
+       <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>                       string (must be unique within table)
+       <b>v</b><b>a</b><b>r</b><b>i</b><b>a</b><b>b</b><b>l</b><b>e</b><b>s</b>                     map of string-string pairs
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>s</b><b>:</b>
+       <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b>: string (must be unique within table)
+              The chassis this set of variable values applies to.
+
+       <b>v</b><b>a</b><b>r</b><b>i</b><b>a</b><b>b</b><b>l</b><b>e</b><b>s</b>: map of string-string pairs
+              The set of variable values for a given chassis.
+
+Open vSwitch 23.06.3           DB Schema 20.27.2                     <u>o</u><u>v</u><u>n</u><u>-</u><u>s</u><u>b</u>(5)
+</pre></body></html>
diff --git a/support/dist-docs-branch-23.06/ovn-sb.5.pdf b/support/dist-docs-branch-23.06/ovn-sb.5.pdf
new file mode 100644
index 0000000000000000000000000000000000000000..b4186f30b71ab38b623b05c236132ea09bb87570
GIT binary patch
literal 209409
zcma&MQ;;UG+AZ9+ZQGi*ZM&!4Z`+!-ZQHhO+qR}{8~^N6-+#`<zWJ__JV^yrtCF>z
zEOJFrae8J3HW>2J%h&=Ka&jqKS36@vXA3)9ZX$a_XLCj~Cn9=9dLnug6(Mmk<$tA!
zoz1@v3nL3_3ukv(fGfb7@81MO^bY?sPF_J#NKHlT-$-F0RS`)ddM8mabtw@sK6?|>
zKaLj8fPWDuXA?UYXFh>{RRtGkdlzSM3v0lCn*XbnV15xX5!o48!tnAk$^vZ7oXv^Y
z|3#D;|IOkIa3o?Bw>ESJhysl5OaT1+Fiy^n07DxXx2$6Ab;qp{bng?5J-IYANO5B;
zB0CmxN@*!HV-_!D6&j?)L!u!dQo5`R-#CHcpEM`W!2z)t71!iLp})^pomoz{gS&XU
z#xV*%rvj1N;Wt~kUOa~P8WKNBmsz>B@+(c}6`XHp8uExW*YZm;Q~Umdg=6g-*=^H*
z&(8&z0$kEDL$q)VhnJ6ss#mw^`QFb~r@E%Qsniv;l01Cycr-#$Uq+(s)Mrk*%PhEL
zP#F(B(it&%^#~?<*0^);J;rFYAD0^a_M26EpDDAIbId=0CzlYS42x5To80h+*C-rU
z3`z7keXU*$>oLvp*&olk?^x8ur)>Ri#Q6WL(7BzL-hD?tF1&5Obw#i+PJ&$P<@$D8
zhxmAI!aa?wAA0*_{uwxns9rm&^wt0RYeK)PPYP2GmsM)y*-YQ*@YPbzo~`oh1rV<x
zkD&5V9pw(z%7X9sNniM<w{29uhBo8<<7@8NdwuD?xMtRKf9qHEqFu0TmQ%O1*Q}Y=
zWr|HK8P`dHK-Hc%PH6pR6XHzthda7)bZ#*x0?H14XS1WOU2Wh&<+NwL)BDI-$XAbr
z=ZVs0b@Mizq_PD^@6|gy;~3ZM8z7kNl^^jAs)ie|-8yX=r!bxoVU8nVzrVDuAuO&0
zbrecZlkO<3fyENrcoIR=*#6FEr$JY&tJ1ob(oOX)^flmiK(lBJOqPFQrey>hvs=Zh
zMH^2zug)Gg1sf=Nf+SS(ODNzE=@kNBtXf&kY_?ft;Uy2{4IlwV>7~FWgD06K9U6oD
z(Q-$-Hu%Kr6kipN-qNyb<?{Kpk%H8{w!oxo?hJ-6g-W2adyJ6#q~)wtp5w06+OUgT
z`SYP7p+#*O5RN%i&W(@`U7Y?`uPGL=+LTS#;;B6WY9NeqT9*G_Le!Ur$-K+UduS}f
z!YF?kX#6LFX5!?Q*_8XffoaAk&az23cFS>zu%fm?v{TX!&qFBVjI~{$yH0EGZs}!F
zgI&e5+64f%gJtI&Qd5&gjp^fiIjr}N>;~Hwj;*-T;gq4k9wDx(N)@TOddimli!2hw
zMg7-ch#yBUCQn7+q;cqs7kxs|kk;e-`k{Cx7ZNDgYuZR}Md->ox9G_`YS70)4{NZ`
zdTXE!x8)#U5uDv)jTByW_4m5?ZQ*4xK|#<7V4F)U`A_y~S>S0tsQ5-f(~UYX4CMpp
zi+mGWuJ>l1&xdl}hNEEZX+%pGI<8<moH->-u*c!71inWAC0k5c#xgF91<4{-iQWhc
zYEz&YDObY|ju5nYG<>9I{c@e0B(&e}y6l_a#^DC!ehl_|gC1Fq1M^UIv3g8$A@-UC
zha{{h1GTVd1dJFM+ck?GLBU^OHpoH-GTTH{?05}Xyb||G@Gbt~%6|m$Jh2hY!1iNw
zmI{z`Q(I9C5d?9;^;scI4Z|W<^S#g#3yNHSEpMp5DS=d<lVYqV@LgTfmZ!?=Vdu%j
zogiY$_pCPsSRO9LVKnR@y3pHW`Qf00#g|frv|Pr{3{Ld}0UhE(4&Q-8@(iLIeAtgX
z3vsKv^oSt8s8;0tp_ygMBu_kLHT9RxrZXMt*;JYnTHvsScU(Cu58bXVfY0XREf7iK
z`%>JU6y0e)*!0_|jcKSW1llvgzE<U`^34R)Sry^WJyzRm*VpdlM``^HbH5jij{0G8
zm-t%*gJLY{&O+@PWC~0Zgem@!UH<3fDxm0gjspaUQXdCsDHub4cU7z>7q_on0@TlT
znX0`;DVcyezU0lYXP&8~nHS!?<p!IEXkUfxb4{`xy?##Z{`&XJ4<1Z<FAyBWc3IPb
zL^Z73;AlLis5r(#gJkj=E51VLS*ACrg?o`DGfHFPfG!n<oj+KC7;cxYn6^)r_mHoT
z-N`#G88yC`z=2be6_091b(DGPQv-rZS)r0r4XBnRXMvmZ$bJ61q@3-oZJCLz=VdFv
zJC-Rdx<VZEU~U!$pOc>4*Ke+60r6v=r2!`tg6Ceig}ddiE02a?rcmn)GZ4V`X`40}
zL2tq)Os=KvrdW!JOU`=lEhz(bP87vn!~mdIyt8|<SHFAMj%C0OCntc%z1?1ySs%>V
z>p+}=uflW_m8~ymAXKI7DQHAiC>1aS=R{OYo35a~BjK1Jv()iEnd*Kw4gvKBrP%o?
zNu+e7?zJ7M(Kmq?C#boCYlHjF53PYqGz0LP;m=?}@!s#3u%Gw)5#E`^U-OC)71|@G
z^T{9{f(GoH!3G7QQjw?42%&}mb=t71nnTX1zXcTy%yE`UzACY%S5$(Lo9u~~7KAjU
zFk6ZN_8PSz5>WySq&N7iWjIAVc08J9^ED$-xY!gMO_9VoCxVRJhORgp=z7SWPz0Jb
z{3ObkAwmp7Dj0><K(3|H<rZB2ZV@E2$FVqZOvo0)#vL>&q>kCc;w1A)btqYYG#*i1
zvdH;M59Gr=e!@Apddpi3hZ`bX!C`GAH!C_Jw2)5UYEhdD1h2G+4Y0bHmWenWQZ6!C
zH-T7+3cZuDT$Bsy;ZB-93dk<Ncr^$kp2sp^LWMcs?zuA5iZhYU7aoAMkLNi}8#oDw
z2#8Nkk+BNvm*>yo0B4jGc2#}M<7=9YFJwAWQbo7J>#ygVW_9MPFE$g<BkysT;xbe_
z#8u&McNj$+D-8rX5Tc(;x%pqJ#hSLS9(7E=cq-BUhEWb;)qK>^+B8IcfPO0^MP)Qa
z^8>`KHTw4CkhGp%Kh&PM;$<Xy3{ZNkH#ZJQicH2ssTgwGzLc7g6k7#gQN_vfpcX&z
z`iqQeH}%o*-?yGkRCvWX#*K#4E=AP@Wj7W^e6uGFgMLNrMx_-MD=fiKP#LR7x_{Dk
zbW=&6N@JNrCOp7|b(1C2=YO%{$73$WV5R4{%MOO4;rh9`s7Qi_i-~9tExi#;wv>}c
z;FbM~mPD>b(G#O3lUKe8SoarIx5vMGh~}}g9P<FLu=EZ--=zwRQu!4pAAVP3<EpTP
z2qX*Xm~76XN<~Y4mYJTH^pLe2$z7-)t{L6ILsyH(d0^o(d?uVvK_J5dYOcSf05&ML
z^Q8a7-Y$mq44cVI#v=2RHr<NlWiUB>OIjU}x5(r%VkxZfomP6?*_*5D_0^S{c$at$
zJD^dGWErbYkXVk7mRr#?Zg>LmK#fE}I>nFvGm)}$_UU+i%$@LPaczC<;XabPxGB3X
zs4)C3+$f;-anX(aVFwL%@o_EDp})|HjqR_uA#$1=dIaxKgx~bi|E^qDsE+x542`6K
zg26&nH?$<z?*o!9E>Zc1i9~CDU4fVg`z)MoV6Fl;g@!RnGL5Qxo-#6?F5Ns((bwYi
zvCHR6YMN}7&?o;{R2!!-WGSs@@@0jS8mwcUIn@ZIHxO=MEr1sBFuOfdBQOcwfR?u7
zEIS*m{GLUSt89mTj?&!mGDLbICqrLo;Jm~#hcJ33G5up2dYaikLJLG$R@S&6X^={6
zN2ImZBtzANIg-+K3JEB1xC=i>PcT=&hu8k42*yzqRapm-*l?^m0T`hSg$L;s!L!sN
z8$KH9I=`g%X5u4-trX@>67#(PyXV0ixGp3fX~s*`)hI|Zur1hED?4!#Y24kDE~Jy=
z(I05M^h`+K=X4)Tlc@09hh|;s6)uj%W}Q^*JYi-_&VDu)4suw%NkK7)bc-|<yhHi2
zd#wpg?I<aZTdtJhCi*@RTztfciafEibRw2ih>=#n_)zR96!mp|K_%UoQ<CG?f&9c*
z-vel1{cfZ(I!QZ<si;9@WX^7eX`y^c4<2&*1S1N4Mx`YT{WJHnt|X1{P9Zskh68Z9
zHme2UMY<wWFdciuo>V4DzBauffm}{IctIY$>c%7cX+e5}AiJ=}rtg;)@uhG%0Ex)=
zwPZ|oYIalFjF1guDgREFHQ39JEP@T#Tpr=$?CO&{F`6N3TV9M2_o#e7mMfE(lP=ll
zYWbomEVO(X$4<k6OlpF!5mJ{bAgzaBT_#e}_bx%A<Rbn+Xxcnv39r1iB(+*q_C~7O
zU%Iqcxmk(XI>x1k6m1neBZSRjt-XIcNtZeI4)oBo3*Z6$#iVk&UKh-Z$1Od+sm};R
z_o(|gIBZ;0D{ZB;V;lx_%eNk0TtV*Jl}G>;Tlf}aOY^-9e{Armr4-{r{o*!p)%_GY
z-u+8*ORrF`>cg~pVz38iWYNM{kBC?5_=&jp2gK?qPl(L;I_LM-GEJY~3?-qSk=(#N
z>ovkD4W<1Aa(;j`vbl*snN?JSy7h-qqp2Pa*pEc#y<1mZ*jv#pR5(U5eu1a^L`pKg
zM6H_Z7~S{+z6`9QrA(H?>7ii$Eeb2r$=Q!)Oh-PZvlmaakR^IGg?wU*ID#Xi9%tqU
zVVF_wt#$S(>*Va`@z0Q-@GUCiZ=sA4EL-E3?b(^)&s^jzznYaUpjc%BLq*qgw%70T
z!`#=CUb+BrV}Py6|A?f2wf_jK|H!HTl&q}3e!=`tjQPJ+7xVv4c4@9V{_Q~aUe(y6
zH?a&N?&Gs-xtx+c5UWqpNnR*YtqZD8+jni3RO%t_b^Kw5_XCqsT6mJ3K&)WF*)DBe
zg#V79lZ_+)&e)Y>sh`_CT!oJR5u2W+5Ne$qSCypaNQ`Cd;neiWERz9yLwkz}Oc@^<
zdp^F`&jULYw%#<{^BZ#HVP3F!qlw|~3A(Z&<f-8%m-nMz6`LF!dbMoRmwU{5Pz_7$
z8*JGP(^59*<rG~u4JFXhZq$T|j#mO%4LIIV2vC+>VkVw`TXKME!Dnmcqh_5<Ad{J=
zi@YGC5AC25QV}lpUAwn|_K7FQQ@i|iOuk`aF<gMgta|K)T95Tjx|Ekh?&WEe21e{^
zU65A|_k9zAN#PKkG<;#MlkxNW8(?Itk+%NG)P|;`hs92?UyJ~jp9aQeet`H|Hq;t9
zfiWDDT(;q$3WD=UPm40NKtFLoGAqq6D6fm_i8M7LlT0u}#Nj^0zIPI%Mpc0{=`<5@
z4@$%8yk|Z+DTmzc=+N{Rd<<YvBv(W`r(^_LL~)@RY>TMK{mP)(B3a9zF3w;*A`3R+
zQZI%#+sDH2^%);$R8~rjCTUNegx0wV@>W_T0wT#5$qq>;vCg5YE|%0Iw~RQUrJ5A&
zsalb}fP}ia@WfoaU}t|{i-*s%Oi+@2US4Hnp48XiyaQrMd!qH*2_SU{vrH~gE0NrL
zspG;F9!wv}4MCgHMMej(`(6C1^#)hw5rGeVno8L;c5eBSu^jhBAGiVF{z9P8eRiN?
zM1y0)7!Zen3b`s@+|ybM<>y_^HPkscvnvoHV)c(7W-gK}R;C;pVVk4j*JA=3zaDs!
z7wNsC&EbGQf~)L%sh1P>M)hU(m$%2-5U;S6+)gr@ZE>z`D2QNpnSxnFmVyHP8<@lg
zx{6?*_mmq9Yra@j=DJC|${7b!AOircug#?UC0@dAvWl>2jlJuxz!4XDJXBc0s<fgT
zXlPV^`8)xaR(U=T&gRfB_ClPau7rLkE{wKU<`eYD;1MW{++uxdy7{!p9sA}78%6}=
z(sUD8!Z&9L=Z7F0zN=RB*Q0`mt*BO93seBOIlI7%9Usb3P(<lofn-QzOkXalr)YDm
zC_qPebxlGiP2jY1rr3yK4--C;ka3T1aT27OC#K#J&S*{!H7-a-xPkB|2p`%0oPBc%
z`gNprpk6sD6F!eoY)Fgj2U_p0pvrF=oCjLDHlhlH)FKtItZGUK$48~7`|SYm+k$+w
zL{U0l;y9NUuiAq{BW_b0)k!k#qed?K+M!e=GOXH+eR<s+@V7-4DJlY=sepo@LG>Yb
z@BhO~UueiDh$*D!TS{W@L<!fW7rQ^Frjo_E_R>LZKxfBoj!?4Xx^dm@-6j#)E5N_g
zmDU1!PG|J_Hz<OtzvsqX*XQ@G?8>$yrMMZM8AWiXArclO@&ndE&;+-XCh}M5{+?-F
z#2v8&)n|k+M`r-dLd(*YN(!vkWqiv=uJ75$f-S4UMa*dE)_(s?p+sgzv(3D*Goq#{
zya%x>C^z0S3Vr~IwOI#U9U1LVQs@zdI7zA{m55aD9Xq`c>n@0r*+@dVuX*AcgC{Mh
zYNpC+gSGJv9e(K`uWI3M=8Xf_FX|b+W$CrTOLn?$W(cpJ-PVq{V%Ltnw+%642wFw#
z<ddiBsJ9t3@O`9B&XjqGw!LtUMD<Gotvh^g{^PDS336GJd9z$11kiKJn$WM5bwo!<
zOWaVwcq?H6pY}Pfa?PokcOhMnE}!#B4?WSZ`aO_zXVd4)slM{p@d#Oij$qR1vc;+t
zJS?f093qkBFZacYn`-mEx*Su7zx>;EpUMb_hR}m*4I>M1LqSi(#9WLLM+?QSfGz7*
z$AgE4-;8c93-cZ3L0Dl#Nb|H?QV&nGra4a!Xy@TwED@Gp&~Wbs26^n~pF;(ZJZ`Ns
zQ-<Gp3Vjpq?(O^<BO=cf=eA#FL}_)@!-L=&O-&Wb#Mc`&Rmu*!vcHhq2A}GhF>a0*
z@Y4*2$j!FShKqiALS`ilI=&+G5?o-ZQ>d#8Sc^i)>-)x*mnl-v5w7$ulB=xxBL!0Q
zg!0|F1v3-47prGD(F~<)^7!ZvzNcg-G^vxu97g1tdn5NA6wHr!d*hCW3oKL`Gm|u(
zQT>UIX#mvcT0qRhn$^R3?BU?09|0#to^><p77wLa6k<Al0vJ+?Ml%UuH|uWx;IVsN
zA*wI%LF$l^k_2M9bL3s~&mLc#{AOBqD|rl7Bn6`t&Izn!Qro9b1sR3MB*s<TD3rK&
zf@JBdiRoD8KM4w+uLCMdVFjvx*$H;J>Bg*nSTujxfvV-}<C$DYvfH3uqn9j1d(j}p
z4c$g{cK8#??f|w;mJ%qg6|QgvQPWZMCuVrC*v9ydNt0E);@!bZ`}f>ETSP&qi0+?m
zrX3fbV8PTuCVqMY4aWU+ds_vflr$-v$w?dBfszq}vqhzj^rt~gXUL0GI({uwgU`+-
zOMP4I>P0Uv7)A>h`6j(sBP@ea#IGO3?+MM>qrc*FV2pd{DiMP476ngcCTF3%8CFjM
z$Ej<0h?i|WO$pCO?;rSVYA@6U>rB<GAArhNZkjS$*$z9XTsww?dU>#&P1wqvY}ePx
zaW9)!#2UZDkLc+PM1g4JyC*a6-qlXDxqh+AX@EOqKmG!pVu0{r<LSij0HwwinTg=F
zC$SL(A(}k1eW_z=x&u!x%ibthmX|u4fVc}`NGw6y$mtkLI3=ug{t|n%*BC?z)qyU3
z`ELl{A5aQZUhn^6B>#tM{D+dTFf+0IUrNIDUx{EArvFVQI9p}gc7qA6=SAgpp*`$E
zKkGL`oqBf2NW^lcOT<>35JiF_%Bjp{{vTNoX(7q7iC}VHfs@EtF1s|PnDn1_R$Ami
zna7aVeT)|g^@E{;xkl@d>zpXaOTwjaPIeI7;yQZd@)!RvSc<;L@+5~MKSRtgRl|q#
z{La$XGIrH7gd>^)Su5*ZWOw3s@;(7}_oFjj93=}693G_ShnIqBb+_}1Y#q-90876R
z##4hr$a#V@(+M8|O@EmxXA<e`n-~FMN#mm-t{;+@MA42-!0z*AABtY-!$o;tpO)^I
z&UH%-{dq)ADv;2an3=$Ae}>YCi|n&lO6g(;&4!1kR$;2!aGaYJ^?kQ%B%6bk20-y)
zurTX;5A?+J<j}`)7%?tW_nLAXJyomQ#zE)r8Kwe~>W4V3+*=qv_21P+Fne%8yca<w
z`UuPQtkt80!92K)IpH3<U>NO0hYaV23puweU9bcQiiEpa2$Y0@fGm(`jT(yxie{lH
z3p`k%d&fpsn;iaJ+pQ;RY#b~sM$^MSKPLnYWUMTg(aqp2G0vruT;JZZ*R}+tg#H8Y
zzIhywM5%z2bs9$ekY?l%7(bFiIKlh9=jDRj+b>AF6jHqZ0?hvb!hZn6#?JZw<AsIw
zzwyHMzrjnj_ogG>xXTq!Pr)wOgelKWsuKa4)1qVywiT~Q7UsIp3lN_O9tRK%(0E+$
zj%RhUn(p=<=Ney%FtD1dsk+{?%T;%zuTFcjKG)};&+d+H`$~O=Z`b|x4jkVaTMhl5
z9=CA4+FFM1v(X4by&tc9As@BDijpP|Z%+sJpZ(#BAG<`&-kzBHRueuwef{4%-Cm#2
z0$+=<-Z;9e)E64L8yiPm9$$9{_qz-az1^B$N88T`+upPnni3qN2!wjxUG5zoo$o$Q
zFFuVTr6;toJ0Z=?ms4UE<i_7S5j%U`PrqNHW*AjkR*RM=H97a5Fdsa<v_p|bJ-<EP
zj{fXc`FtLCGU`1xT@No$uKIpY_IAB5=K8ul9qj7=JRE%W*ILm7o)#dl-Lj<zYkoZ5
z-mhGr9=>e<{E!?rKhW#>bhUo~T)Z3KjtreTJ-n<0)(*FWCu3tPDKEb2wrz53uWtx;
zce-?JY;USx7LQA}pB-GBMiEwVJ$HC*R~hw=RacsWC+*l>8~(hkVtrj3ezbLadi=Iw
zvz>0<Fl4))!+6cUa(_7Zvp7HV(!{V>@zzn=npwJhY}o11>h7k!{WF#NGa8w(GBfP+
zMu_<GqEI<{wRrOy(Dp257v_R5g57%8IsI*a1!8oyxW6&9c&%fTN_e9#PGqOC`f_u1
zRhfHDSksCayJk#%ah&kn*8L6W+_2$TjjhZjytZp6yH2QFmiK0Fc(m}v2F8rG(cRwV
zv$4ItB(pL8vs(G*g@d!K^rO)I@?~@xlAgYFa{Bt~-k`n&X|+9h($1PImbY;Gxb(`_
zvzl+sngg-2@?-mBvvYa-*!ANzmM9?g_ipk0zzxGWx5UYY^L@F5<G4iTL22*i^13o%
zE`fEu>wU*_=S!=A4WT_EZX9Y`75CrBrd-k~r#Khuukm09<h7x{KggSLxRR|SQ2nvA
z?Vp3hDr%&YU$Fwa0#)BuANIWsy)S<@eR(s+8OA%gpPk-5X0y+pzxUTwe^mwMn!bk)
zrf+oMO`BNNhmYOVf4E#Pc84~Tq3YG^b^CZaJ>{Mz|Lyp7l3HN#$H}afQ~!1Xf#CN`
z-Ix1EU3cdO|F?c8ka5pnAHvqmpWlz##_x7|`k$569EZz{v6${p^F>zzn?HRZyLwB<
zt9(IfQ}eZQS#L?J)GcafR)p3+h?|iby(A+JU@p|%HnM+~OIYeraEf0m8F#%pJAb4W
zl3^_vsvKxnCTpux|6to`2e;I8J9p3R7*9s=7f4Ler&To;3o)5n?63_}%RCTQ!R}~B
zz1U;7wA5bTT(@Y%Sv?$hu}SSO(3FH=-)Z}<D7|9I!eC^M%?x2?4_DqCWA5V!)4SM!
z(0HOk>^!+hpLEly_R6~wt)I9MFn*k09pBv@JNOuuRc}n48e1#f=9s?2j_&k5ei+9x
z1dyqhC&@<iF&}#DOnB&<b+Rn-U9d?WWOi0gcMb+h<`l*0Msa%YUT`n5?uNmuO#w`j
zH}2_nK5y+=sohnWD88=}v?oz7eAX_4jd+nZ_QoblufDOW@kh-TL!0Gd7r~<O@QkbT
zbYkV*qdV!pFTb$Dmn;{^dDc)#wis(_qqhlnyEgczVJl4$?RA&UiLkmm6{;ssr;F@j
z$QxATO@<p+mh-r5V(Y6#=DB|Ce{LU-H$y*OZZIYro-n%_#O69UQXmisYbuLem^WhS
zofUIxr^`xmhfl>Dw?l26(o39wuj(`QcK#e4TQ+(=jBYd8OdaMQEaKqCPF3-?wjdMm
zNbgG$E!#FVNb|cs{&Kf7`szx2XwkW3z;11EaMaKIdbE9be4b9___Jynbp@{cP~w5Y
z{U;}Py!eFfLL`_TJvvRujyQ*LkWX`-B6fTFksW_`RRC|BA+41nN751+#2R3{ItMV@
z&OV!1x=g~AmCT-cx%s2;d_QUy1TIq8Slc~^0D*F>nI$Gck-c&(CqKe^HnAD~a*4Pi
z?&0fdj9fu+g=xC5WW89J{7c1$fQ4N{`BQi~tE<8Ek6nv)K$-pDC0hal6Ms0GhQ$eR
zT^z}+wOvs`UNQ$N)2-h#d5ybyAF>l^${g_kaXb9;(~qk~*WMfqw$3MWRdM8(1b(sg
z`NN#}R19#gjTzOkW5nTGFFCs&wn|UN9ljxJZGcmI-bcVmZlm7XWCs?iDJp0D&4(+g
zn9=)a6<G&)$rT0pgF~(NWef(!(e5tZh2w_(v2k^@@|1M#Ty{SgD%h14n(7o;WEw5*
z(ZtvHBIcr1EY@tG{3Tem6Z#+zFM;%=0c*b_?Fjt{toU`~k!yz_3&OYqy3l|~j_=QK
z<l)}G&x~4Ah^(V_hu<R;)}r}>gcMi(D3#Q<=gUUIz)j0X=~>0Fa@#LK?H%0;CofOA
zJ@5O|`aAPhdQjE*eln@`d}z1%?6T0pw5u@HubHaRXHgTu%RMnRdaI%LUH}nrvo+*g
zW!6C^`Tj>?_}+Q;mg&F%lDWA0Dqr{JxI9-5q|N!QhZTN$d{f-XC_biVyQX^Wpg4;X
z<I14HSbYR_c)7TsdXw5f^4?cVV9?^GpZ)3Bm(DBJ%&K`P?F|zd^>VhT67L{EK3{^;
zKGoYF+|5_R4|`AJsb1%3;aF#)l5J;>`Rn*y(-D<Yt{dONE8Hpku@MlNUQ@=@nBP#4
z9dgZaCbBWLgXtKGP{U)3kJQe^G6|f=v>A{+o9P3u$AhqlkQ^T}4{a|-qb=}~2!DCI
zvDyZ|+ogn2>C>f;sWZB@x6+L^Ps{)1oOVfMu4V<g(&0;r#e_ju-_tAV4AZlmOad@>
zOe-kp>KU9!C+55;GacB`mr`{@fQaZWH*aF2C7fc%5mx9IAy_KWSJv~>Qd}%R;s_4x
zni%AoGM>y}CgJH{EI)4dk1aorKR!A$ON0B_v{F}A7ag;zCyOEcOD#5?!*Sx^=4Y0O
zphd1;qq#k@s;;M-wJ1BMx0hYpS<c=LqZWu?AgCPeGZU#bev?XlV>~Rh<@J4V#6)m6
zG5)+hvC7Q&uvb4>DDl-ou>IghZ(IB#`ZB!uzPn(|WrPemKu{f3KEyElmP_pVMGJBK
zrUkO9ha#(pCA7>Yo2a3HYuw8*DC|J(wIB?gj1V4;rc11e6no{jXHBSkUv<fMkQnV}
z?qp1d7q68Azj^%>2_r&NGI@2?nT=g$_q_{?sM-}eIXyTa5d)eNkuw0#1S^<Nx^Idz
zwiP951YN1KX<m?w;{-a<x}haAL{O!0YuPU?ki+$SRpit`FIr{<USd2LtK*8f4M)pV
z)lAk^p+V5Ymp~`5Cffob(dQ6A!INcI17s~qIk%EF?bX<8+CTV4gJmd<%vZ(>#R}2S
zL_yX@3%Q6xS`f8hk=r@jE4kRaJqC|dg4@==3}?vy?E`JJF=;K=b4C@lXVD<xCt2cU
zpFrW{?{ti|%(6XzErOY<NZn7`RaGRzX<aW9=Dz_+Uunw$cezSnuItmrgqaCvP0w4R
z7m$~q)u^kvpbeC^sr8)V^19Al&5g%^2}bw#GCSM(gf&}V)H7<<Eti6g7@f<ZBB@ZE
z_99Ogdw$<?Uo5ZRf8{dV+<dA&j@_%&w83l>=^YX`+^mr25mAj2yMe&Qh3pt<nNM3l
z7E_)aw5^Qap*$i68=sf|`kQIDS1FCR35WX2u6nqwWq~c<rM(eDhn`GvkoXFEudALF
zJSgRW>FX3|hu>;l3)auq$`3B|ucq6}I<|^houPR&US>Upr}3#?PbX_iJ@9r7E`=)O
z6gW53wq{^h<RIdF|0<)V{wiw?ogt(U=oA#GPDb<Kc8>jfJ~k#wY;Z79rZcSQ#~mSt
zrssaYiD==~uq%wc*!~jnhGAy23RO0iHN=+WT@fs&9UX(8sl5YBw=SjC7Qa=$xdQ5}
zHcd>UAeRwKI=Achh<$_%r(QZUuOt_#sQ-5fa~mFFv|Xuw5VxtMgi4uMl;KMzQaaQI
zJQ_H+25Ma0>2y<TyCh%>s(mnLvx`}OEtdp@-ivE$G2~9l66%>aHDhEMXEVA{3Mq9(
z<PO18eyQk}hAoA|Jl>o;9>3B-mN0Bug({tGjO}l!`fo%3)U@Tr1vva&kmy1tHdNcL
z`BqVV0j@?^w_y>y++VJYvF>1kEvVT0&sve=#)-#q<@E6qvgYbjrn50P%qs80rY~yc
zz<mCu;ugeU<N5XO;te&2Gs64+FMD8OsI_sP)36*s=hH92Oo!H%aXZf;LkR2Nj{fm5
z=xH#j41I5+;4o?v*sQ~yjPZ5de1E#uQ-_EW_&B!f-ZZoF7Nj|5HO+nVgHJ25YhK$I
zi|Tfcl^qneRW{w$-rNX><V@{_O{F+$_JG2K*j1I&M)&)+18xLwWyrF&$ZC04lr0AT
z5Rk46&|ZdzuCS?)j5;h%!?}k5qY?9n=^EhXANZ|yPc*N=3;uWn;bSaCNCxcv&;TC*
z-wIi<ODPm`3THx7vL(Ietu&4>l(|HJs0Gxt&T2<#HzwIu&P{i_tfLr2@Y1!_OxkgK
zj=pA*kP_*0n1jy4)4Y*IHUQT(?c(;UdR}&UVja8b|EbfK+zsv+*ABV<xQt}_vnm>8
zW-|O#80q$MjLA6)X*3v5fl-xvR*$vJ*1bU$Ew1HQE!{F}^f#(L5#dftCz1~i-*L;R
zkQLDVOVuw;2@X}V+7-54(Mtl`b7hcWJ27~Sx@WDkKe6uT-C#aOLiSt+*KQH;abBJl
z)k`%$ULXobK^Q}K4mnCZ1$qc^d05yKR?9M*2)o45<6eR6v~4l=fl+>U>9){zl2Va|
z1;q|zy`TmH9A6qK3xgegsvjJi)1N1aY;L-WJ1vLY8qS=m&gVAPMhngn^wxDQ`0AHB
zF&5Lz=4-I>4>q&uBch_*8By;?q;3rk6j^E6>~yY7#e6DT-gyz&Uxuxjg!}=HhQYMt
zmrE#Oq3e$nIb4}^emh~+YoxQAGgAHHDk#iz;AtyHMW(%f6gYknC;Z+=UCZG1DOm@`
z^xFf)NwVDgO)v}Mu*bFso^y)_iH6;&SMPN~)wl>Xl`$kmRt%w$0~&z4LfI|*z!Flu
z&eFhp_&R8dZ7W^^8b>oloyj<MEmJHxjI(GUGz{-KY?duM5r!)GrL<qN^mon<zr}vS
zrz{4h3z1$gW@?D8q@X=NTxY71z%H$gd;@o`&^<>AE+-$jsKrlSRx7!mmK%i?zWp!6
z)G9$VQ9=?f2;|bmVbYAg1%J)}rE73@J6VaI6W3m1@C{F}mrfGsfrzsu^&oJ%PRD~~
zde*Mfh`bT%0*v5-&!a<ReMC7uSat~pO5$cOG7MaZwf3XA#rj~T&@TZb-#pnYU-7Mk
zPZmBiZna3{wwB)*k=*@vL6?6`tOOYLw!a1!g(bo5fwRNAe@;%LGhwjPrn8<8&w-!q
zch<D5in*WF&anSoME)xzu@q2tX(`R8=78w+{Xu6ii%bJ!H(R2`IDRN32sw#mvzWlo
zY%n)eKP(ix2r|elibFPPc)ym&r&*R@l@})dsW>EkVd?=TYG}9wgM!Iwnht4mF=4-F
z5UgN6S~lGc`#`6aWo_8hY@)o2+o8VoZmI;%too%RYB;+nCs&WhV|gVwGdE!8U6z+D
z;>84Us4v3`jFYOQ`*mt}iY1KDn;mjNP!_XOKX&r4r5!LR&Ix-xN1gY?X*Cz9rJqtx
zlM#77;m=j*bFb?-@GYdz<-LYWSq5YoB2&^RlBW5ERFZ>#4?*<6qjA=@3i-b?ua}df
zZc9G4#R*l&6nT8v_hV4??;PC@&0LVDGRZA)b*yp0yW5(=>+bn2Svw2vY|=<5pwaze
zAePuKnq%_UGh_FcPfmdKuFrzlWuy7DPNELi+xw|;O!4s(ZqVN!Wrm@+Z#Lto;y6S%
z;_iVkWO098ugR3fJZ)X~qoH|%lh+X`Ks?O!E42Q}_hJ5vQaLS&v<EviO<V!AmV)d|
z*;mL}aqf2s)|C%c!I~fwk$9NEr-eF!VfZeJ#*rk8+edMWI<Z%FE{oXS&*^iSKqsyU
zY<16Cx?J#!c^lnJ*m!-0En=~QB8pG`H_=Fh|2tow{|L|=HVL>aLA?amDb`*jx8Q9S
z*(xwyrb9qCTKLoS(-XWRz)23`=kt5<^KYPApP^wF0Sk~%bzp%&KUXfZ<t%Hpl<1ZF
zaUGyEC1Hq_XsxWN0Bn*q!tC&f%x~y0U0fs$JHw}?fkG4d)*6!rS}<1@{S^Cf?$lDb
zeUBemCz%+sD3wD~(%U&8ud6R-42?d<%ip}(K1y=iPL*B+5fThVdVpe@-%(R}!i8i(
z*s=*j8fU;6kC5yNFnV-oAsBGnwGuV07GQSJRMwnH_hLM(=UKNX(M9F3?<!#Q@h@47
zEyP_c{^Va7MB&E=*^lKqth$IDLilQ3GS7+E3PhSg`Z=zr9Ljk~%bA&&`dIh1`Em7k
z@%eq)iCF*Wj&6L~teQc+9K9eqDUuvtxb7rs8<#{-Am!0x&EPNts-T#FN?r(Q=_4pR
zN_`sC*mqC<m2dt_4$hx6T}nNn@gcyPG65D3D~3#TunH1ssJ{Rh4(5+A9VxP9=;lsA
zoTlG7MTx&LJ4e-!bQvEhZZRq-?#HY!v{hk3!wJ74Yauuu#HpsDh`2hpX640Hl+y%K
z&dee|b95hFncq<wyD~R+f^UC1GeYFAJ@QM2DheWHD4|ep&@lNTiufwZR7$_RNGNO~
zhkI2qc5?rApy6QSKH4*92vIOxi_Fu~E0J`bd?hC^Dv-~uPo_ZW^djb6o2k+!`@hV*
zPy-wfmQ(sT##Go)*a=5@4{qY%?6J-4(<zHV2{MGiV44$Q@IM0VhKCkY=w@I%(Wo&)
zo#=K#K`V%IhtJs2Z2Pw<Q$sA$zz|%lG}}<+t3*Oqp%fJ^VZtd?Swl^(smJDj57WyX
z$C`c;6AY0-wsv;VLSSx7=H|BMFm;K=oU$UdOQ2THNOO6R$F4YUiPwO3s+E658-m3;
z8+0JGQQq2WASg~U)lcmUrja6dL5R=*8sTl>^u~lp*we?uz@%6R!_!{JDGFKTvVz8K
z!}+@m;A2mDyZKKjg4*ZO%e48uF|9di5pg7cu_h0#7)VKQw_uPZK<4S$ds!y9fSB>I
z&|pD;iqhn&g1R%11t7Z?IG{%@p$R*SL8LR=uR6<iYcU%I!BXkgAQC}kiJrLxdE?O3
zEE#<5lSJqCM|Vq;97L3#O*tq$MCTqbu2B?F^{Zz*_jd{KQVtCif^scSKnM)b7cs6(
znuKuXARj=JVoHm~VDrx76p0~dmx*VY)6X}wobZPQtkC{~=A(uX#`ZEyV9KK+$dXv5
z&Zh=UD`gKk%vT@*SD<AutemE%NC)U+10F;(l*-2z*fT?W%!Q*A`)cPR6AEo7QUw_Y
zr}PY@OU&9>SZ)4s(33u|9ynopDRaYg7J#z)K^N|Nz1qy2TZqn1C4$Q%)DEM>=hs2o
zFat=k>7-U;?c@n!+!&;>aHJM&Zce054?5Y_M1R=zFoxtO5xRu?NsG%!9ps8)K@(1#
zoMsg{bvpJMJEDL{QQWc1uR_@iv<40kp&BP)=B+SMx*%pQ18CkCx;{HZ0>nq$joO8x
zGhs_*B*9L|oLOuh(AlN|wcjlD{YtQFeR4?ka}tMha(*@joFvrGX?qokN&&yELjw9C
z9KuAXI30y>OyIYmRaOMwP!odQi7Zb{+2<IX)P{c(D0Z}0(V$ozY}27-GO)4<vqZuo
zG{%t>1^8JI!H3<5YatS#fL(z9sb2yJg0;{2v+t<>P=MQ==S4xEc`W*ld?SzKhi;>*
z$-98$>m*T0O%*Yt#_Yvt<xCh^dN41HQG6*whS5211+JwN=yebox3^m4t!os3J>QC%
z-k#_nx8SVS6Y_NH4|*3H$swsh>%@vmohOlGt!rojRD~yzKE^>`gg01E+=vSiai|JT
zG$EmZOZe1$Oq}`hmt^CJgKeHgqASV#(fJJHTMztI6!9?oJGC67LQoB?28;H>4o%oz
z<EKR4u7#N3evLKyX^&V|1ZY1>1^cD$A7L2Ml#jgt6+ab72>lok=jbU`{pJ#WmUTY|
z*1lzqhO2Twf@bdV(B42rNyKM2X5+FR*Gb{(c6aODWB`V_3FX5(xZOp92<g5;$J!RE
z9Wp#B0l<B9)qDB_@W`5MZ@%zb{HPl6dYHBwX0X~FrA1`Rj&=I5C*qhEl@XG+cs*66
zqmhL$k7bkswfwzA17OnK*~?S4j2G8r!$faiC<bf(95Kk6XJ>8+3R<InUmJ4F6<(^K
zsm29jJ_4W8s~vs#F&Ib++Y~}VLDl3exj%zkg%y14=fXXFu2O*jRG2R|v1iRerK;SA
zIiINBzW`d(nbDvnu?~3XhQyRjPqSqM9>;}5s9=ychh}bl^h1t=b;rDl1HfZ9;4|Tc
z7)`(4Nbr@SHvd8>s#}qA9+j1abg#sFO|*GQ4-9vG#?#nd^@MGP+N_9V4ct$#ut=*K
zY|qn#O6Z@ux`{D?>H6u>fD^gC2<#kDS_VY%C^`enx-ZpqZOfW{({UM9z?fv%C>1eO
z$}1L_w%SoIJV#RPVjI8I-^NFA#PVCN>H5`bZE<SH)r4hLp1lo%7py^PE70$VwQoH%
z61ALRJM<(VcnCfwHMyCd4;cZ~p{HU@auZLPrDl=t@0Dj<l}>LzQKI4zL!|-6?#&ww
zK7(SZwH$=0b4odUzQ?%Qk%7&Hai!1Oy;neFcA&};iz15W`cm)G(D|Upr9jp(!k0>U
z^KxZN7rr^=(rK<PfhsFemeC?$c1`*igLJ`PlnrI;{h<}(rz)k@>*!;cw!rW^s9J!T
zB1f5S@ryZQP}5cL;$@ByRPa0(gH$4nDaZIqIS*K2AhBb*CH1ov{euq%qZYL!UTCpn
zfL(0wi0pL$K$*NXQDQ+AxmaMAhC&EtaM@@61aovYwz0Tn<&||RVm%-U20Y|x<y?w^
zn700+<l-SFDWK`#cR@9$9vae+2C>`}XhbL|56knQCgQ#EAexqFON#|fHU#A@074sj
zt=BFm2Ox6E9iTs)wU3&VU_0YJ#%(E}_XO{QQ9*9?-@sQwK1?*lyaRCfJPQ`cPQZtr
z8Ey!&KV(pRCs_j4zTcwu<~3g`>NIXmR1D1u`Z1t#{PN!XR+s!Qc;V*&u-ecw*ENuU
zFwqc)p1og`WaCrWB%6`PP_dd8KgZRgSsV`KNMUPcrIN6DXERvvGq{`>K?>OU)?1ju
z6^Y(OK$0*p^if_%iAI}}t#@hGS25^^{;fMPjz1j}=Bd<!q`l5F5Lw+%tRoC?X!%>n
z_AODFg(=%`aSecbO(UghSLJ(y3gak{y+P@HRykEeRy^VtP8Ay`X;Vy?rr5p|^OCWz
zSV5^`JYr?e;!myEDwHMHJsBdVwse2LtfK}3JsBnCMi7|KERe;VPD`P<g(0tzgV6MC
zZ597ivhZwc)d9m{NL&ai5DPZ0(Z&8;oKE~6hpM{L#agb>eEi}cH7O+0(Y$+9{p7m%
zJnF>-0e-W~1!9zE6!h#K?-k)t$#goU@1*r+QB<v;>ZDLI2$^|!Ke6y)=-q$&GYKB?
zCzP0J#Uz`FgBMCJAzvxy<bZab@Sb1^lXs#B;qfBJNC1IF<TWaeyA-0XYH~?Ffn1kV
z6*FvMV;MT7+n=Cjdkm5PLwGWR;tBUWv7g5O0OBmFg(4U8TXAM4{H+LmH`SkwFGvQ1
zB1^&^rUTHIK&sW*_?xes%GCC3z8oO`$Zvd^MTMD4nyN5H?$Qt?AyYbgbz)}f#@Y#B
zbK^_`yz$DO+)bg`iN75ajNLtd5SU7<1Ybku^;I)yJiSrxlpM1*p*p#WmmhVur}%vP
z>F<}``1F?H=S~}Wmj$~z;N(0q?Y+=nF*P1k)i)vsH!Gjb6vk>ZZE#^{Su&%x%_5dz
zMySbuJw8Aw&CXV&rRCJBE;L;#Nn8(o;sJyi#bwzqo61-#oPh?uJ(M*Gk|mw)4J9YM
zY4u(`%DB7W0Br`L4<pwyEvhlUzyY?o&3hmq0A!p~r!oi!nsMWCbxiT~Y>+jvCz5w-
z^egF*mv=M`>g?Vaq&iwSz79H86=8GXIqX<deuIIYk*CM_<Y^NMuRA+0GbsXT@}c0Z
z(V-$i^5&Q#tw!NwASG4UaWp}nF4^IPDIi%#;CD%HBOLSGd(}3UG~q(3Cle!}q7|QJ
z6WG#_ue1Zgd-ynNbZ2-Gi)ALV7NZwWx09^;NT5f_Ni&wiD+f?!0wEUJeBv=u&#0P7
zro4g>&JakJguB25dT(ek>2YKt@ePm;4|K={)q_>)CTNHht+1t}2TN%=C=}OK`ALEt
zMXy7FWqtp<7b)wHrA&%agLJACiAjf$b!=m^YLn0sX<$r~GQ8G2Ki-Q-^l7D|Le2Ek
z9@+@De3G1Cpp|Y~9a>^)7zLZdfDbZ##A3uxI6SM91=Z-B47h`x$9XVur^t$I+Q?#T
zULd{7VX>o9u2H;HHd!?c9trTMU<9|)zfzL$2K|kQG$v&#Gnu4_v<#t;cW#x1GsKC-
zA7~)L$<@CNYZ*c0&Zf!X<*KT1_f96%6y#kB{#seT%4Ctvw>?lng}kucd)!9E<76b2
z9j7BlRms$93$b<|LmKEQS!68ElET}2e18l(z$y=*H)M`Fqf^F?BKoCG+-DPy*11vr
zy)aqC5mpLb-vTX`51yTH5ndoLn==DqA~EA-Nih%bDB6HYMU-_=l+Vk{5|qk_AE<oS
zz;|?%qxP}asGkHzWUEE%A(nb_DUCXWC$my`d-4+vHE@ypqx|$;Qp+N1QIbC{3i(dX
z#hbwG&Dk8WJ=X1b;^Redg__(*m#;q(ldRMG!g`vnghL}?anqc|?2G~)rr20w?ge}D
ztTlNJLO{gNloUd{e*Vaeo2wSF_SiqEnq&=^8@um$bP#C4Ns2<~rtzu=E|c2OfG8E_
z2FkCm2!Ls<fl=D-uc7G_QUjGqkDv)n80g-)D1@P|I1bCDQe4-`x;H^jlpbsTo61P*
z&O1;IXj9q+lc%nfN4Fawrf6Fpv-0y3an`+z0HVH3x%*;(fPAB~8q@I3biRK$MWzlV
zzQ6eAyrSuzvdyw%fmJC}u~5cEo{p2SKzXQ|GIJ`7TbbrxyRACIc)tUWM~#S%Bk`}^
z6uq9S<qs1%-GquOhpZ0@dgq?kf|C6KgI_*+k)OeOm(^O%L2u@_^`{jZko^R)O5>xp
zY*exwszYkV6nMa$q%u&d!Xal@HV}FF+sU+`_^y{o7%ztwMC^5#yt5=b?Y}bQp@N-<
zSb<O+Jr*XWx{loo!CdB~x&bJ*2%?Kl46RGuDd0~Oh}L$3H_u1_go*)d^Mx>H{bchP
zXzx_H)2wo=k#j5DHa0zlIVcuw1<gB)-%=5kjpYg3sFKz9W|}#dp9tC3t~kK+HG3yE
zWecggLzOOv`e;X}Y+{;c*siiHbB&3=Q@p}dF4tg7@9tm1>is<T4Idt|-s5Zo%2&;t
z;-8JV+Sj6>4bd6@a_sq3)40}f%_=o)eDFsEJ_Ip>Ls}!~U7fpEzn{c-`n;AC;QLf8
za-ff3`egHq&7mJkG6+xjKLoIZ?cL0+fV2g90743)W)F9w5uxfNmn!qL>k3|A9>q=2
z?pZ}9-ePrkvvgO=PpZnsPXe*LuV4h24O{UMFXD4G$`xGZ9mu9gPV|#b#fJs5_>`l0
zm{w<TI!4hOVVt4sDA3CZTl!iGOPU}?ta$}chrFMZ&_Vvj0``@5J%#I*Vk2QlStlP}
z-c(S6W3I{;vZR+$6{(JU%T)R9K3FD|pTP7}+BHod$RzkKtSlzs_0I}xXeJ2t_b;R?
zg$IJIl;af5!{()n3uDq<P7B#nEqe8mbr(Y^^QMxpO&ic4b5={C`^R0JTw<UYbz8rB
zgKtrC`7cXM^$wg+FC%?5Kz|@6E#Ftw72R}K?uKP<Zi!31-kwq`H8kv6TQkv>1!Y6m
z6r#DVQY{eUzb=M-L37YSum9Wc^B*J6fBZgN%uN5!@bljWG1mW;L9AJGJYka^sr!P~
zzNkVr4d|sEz$-sNy{S^KIxZw%E{KwVl}I!##`+%mIq_+Xvqxiz&6vI*MBXre>eJo5
zqG4hX0QY9mJLqhhcXfFYRaRQ|1*78JnRTXYi9Ms|>v$A-WV(V!GFCj+OxGl9rrnau
z_ybH%bYi^t$OlW7GB1njfjy>CEAX~$fvMyAkfKSzZjDP%Xu4rG{mm=!!iA}v<%Yn%
ztv;m)@-Zy(JDBIuKRkn6`E-dzdM|C2;6tboM<!!6sL%6qQ(3gtTG5tx+qq~>T4$@q
zSEj*_+??wL-a0L(^vm(%`|9)N=!SHes0MX|VEo(?)1)~}F)iG;)uq3J6V*HsJq+4e
zpj8O59`9;4wv0CkU4dEq`T#|ZPLfmlqCuFagduKbbK%#y;^iC$wKcn@!w{k833Y#n
zSsZg3T~z|;1ek=_itrhgO-i8msQI!5Vw=W7Kz<yPO#uE`N+2J3YuREFdT1s@Gciu~
z$wq;Zn(j`NqFR|}w;$BXz9|oM#LX|)swPcUFL`U5$w-WyYZQE=9V_?5V(Pv(3Yl}&
z-|e==ccU<>{^I=!E_lg_c~2Tv)RRgrLIAZPqe>2aDl-Qq`KF6|Su@F$$+i^CPj~gR
zUnknj8g-w&41_$+yQiw@8znWot{)fM4<UKDXx1cr(ZPDW@>TayHJZtEXe!2Y&}~F+
zdNxBMu5Q#v$~I3RmKR0u?!}eyD`AjM2gaukqLr-|P>!3!J$A}*S`u0lM!**Q)Ay-e
zY*PtAp=#<?GJ4*-!zV2EF4W+=W^}@>bcQ5J=<x7M_Hyv&h3)s&Plya;{T`6zySbCV
zr5%SCb=o2lANK*SX7;5msfAD;cO2T4CaYX&7gA1q^sukm&m#r7&<z@>Mux2y`=0C>
z0X`p0Tr>QeA@%EWVP;-Dwo<}^QAbdnzAf~@-M7OlVCf*$76k#?Yb>7e`xD0Gg5<n*
zifq#c=O}qV-SmL;-wpW>J_Y?v%=kpwbUO-${^^nuLOQod2fy(Ru*&0Ri79#%bfcR&
zb>Z4DPRJ1%(=ko72GTk2W}PJ-USl-q<R`{?L-1PV{thTULlRHkeZ{kg2@3yGMwUSt
z#-viW?sveArq?mpPjhmPO-ze~QNyl)!SE4Ujwy_BVuKq22NC&X`1RtIRJ(+$sRNu!
zxLAUMx96B5l})eDZK2EHW)r=IohE)Uw8z6Yk)PSd0ah{1Omw5ez7Q8*VrU(@0h+TW
z42y-Lk6aD@qwRDmE4gIR2fGYb)NCxk^lmi@tn+w02m%;pZpNSJOX7{q`rCr<d>}Oj
z;ee+o`Fr-hD~3p0bzSWQ*+7FvM^xRp3XOn87h6ylu`<gNpJnRUpilZ6W*9v}O!F2^
zxH3uB;Ds8=vsL6CubmY-P55($ZjemcJJYP5vv4WI`e9oAWHiQGfg4-VK$<%VXJd;h
zvx6GH{}jKg685g*4m*m)yOJ?3RJSoYD>4LrT;`N@K8`~?ksn}a8JAQ0!Os;g@&7S)
zPHmcO+qO=l(pIHy+qU_oZQHhO+qP9{+qNt1Jag~oS^HefoAnRkB4YH`TfD6ePHX6#
zf<|u;RyLqFt~CA<p1>4y@>ze8b|b?{X)GL*CYWWT#olAeoj&YsX4DoMSr1xi&W+iM
znug*N_lc&iY5nqIv$a;ngg${z`O3M_Er)kk`=sYNWaU(Yus2ooDrNknBHhulbuiPn
zlX`=08*8hq=4{{Fn^G-cl0E(PUtAr7w0mC-HZ;MR*I5vI6fjl*BKM7J7b0j#tN>1;
zYw~abP2~He@Mt3F#axY3A`gp}bg}zCG0VKLDwB7i&%y?+m0)=CMZZ(k!Fw*vKR5!L
zcN_-{<nrl9xtR*+*gh<e!(dQOTBwXz7o&R(lrGq)nNh((0+j+vO0*~U)pJf24tOr&
zg{$}aBPZ*_LEW*VB&HG1oazH!K<Q#FF-<0*ww-0#4aOGz$wy&2WEKmsW6|&V^7Dtd
zGuJEE@^;t7n19^&CVdyWl26Bhbu2=L?f))!fPp?h-_()VEFY;U$Xrg0)UqcVT2Tk1
z$cScK&Go+}B2$)jWlY8lu@%UMbn_?!1js)ZwRr(T^2n=B^~@LC>+$U)>F+s-M%!4k
zzOq<32(T{cdW}aPAVAW&*wR4CT(m?m_sbm8`{VKT)Uqce&30=VD#2t1c=aD*XZcne
zW|<2ivL9fA9c~&c2ta2ZYot^GeK0~MbBn43xK^)5x1<KaDYL0)RYTGCojnLFE<c(|
z>!0<Us}Tm9WUVb-TFp>yJSO3R%L;;b6Hc_|e3>;Yy*e}B{<D4p6oa(?nu-5A>;7jZ
zGO{yr{s)3({x<~6{9i$^J%G)`&2}{Jyt@9ZisTSdfk3dYGZ(hwWE67lN}mR0WmM=G
zOyy#=VpG?9xS6t7{6!$B9g+2&iltQiZmR=Fxx?%mh)3$bl*GN?i(fgow%(3@50`Mv
zKT@52ji4Sq9e_*4tgDl-Jfkmzrmlu0%m~hip?GU}cHOV~jZd5?eQlv2f&@Y_>wBC!
zO?IuX^RPS=cJ9)GdOZL|1wGh0&yG7j?_USe9emZ2FlMZIf}7Ac)Bd4rqj^)W`?hAT
zvJyOJEG)BhvM!5R*a<O1e&!V)y|Aq^L5USX<21fjQ61JJwDp_&r-Jg8Ydg<hWrJcz
z=&6B`W2f5-br*a@C(3j_D?SX9C8QP`%8J`rM<PNd;TcvV)A6hPJ%p~C0PDdrzRNZN
z8a-<o|FGFYXpoB$-eO|=^s9lly%aOijm&HuQM{K*B7lxhFaKqGctiowbw{O&WMrjk
z*)~-{1Zu$Df()zkQ{A*4c|Ri^rTx&r80pcBNmsbmZ)Lp4yHC0;OtdSkc9#U2{1F#t
zKL$&RF?WIMA*fbu8+Dmk_zbt+zDarNXj$Y`{V5$?{Ds0!YR9Gn@JbqE7I!&DCNlFQ
zf~N{7qs1gUw_?Sb8E#U?9$HPM90V;FB8!wHLw3;Yzwr=6j^R%c;r7`Q{VxAJX)2Y~
z<svTI+1`1Rezq9VO(89IVyf&lkowysCHv!MQL)BgYCE9=p{icJ)FwC)FYb^<YX{H}
zScBF{0|hM__(GY%7(_T`6s(9vZjv(un7shJZ44RjZ)w)!A|R|rc*^8(KE#+t$BGQ6
zKL%oiw>X+HOb5ai7Ya0ga&yQ0tTt^DbOM-ByUvm<!UE@nh1Px6%4o-}mg6gJ10Dnu
zwk!DdrY7He#}p`=OaPb*YZ$v4&p`ln(AdO3gozl`i-`tD$7S!YfyL_^{(UDA#rjWp
zn-pwozIQBi$=1)25{~6rsVskdRJ~^wDoM*nLYKG~4y<}?md*{pw~|B{=$9WtbqVuS
zGf;ezjibnRR?qfN${P=wgwWJILp*{mBzCr~zga2|?AnY3GG<NT&Y7unNEfGpP>UEJ
zP}~9&a?4P}=y*s<q<-i-G@Y?v%Hw^`J%1F-GO>}^t{!GC>SkP+b#%+D)A(2PS$jG`
z8;rnl<5C~<COl;%w$fN4(I<u5Hze9hF4l}mg(i{Hc*emqxjZ2hb?+xZ0Ax#Xxx%SD
z47vjc&?B-(;93ygB5CSSQE!YXGQRjmItJAJ#D~ViYQ_=qgW-(?pV;`|sL}Vde7`7P
zMDOAF7Tigc`4*zcOBw8;1RICNO@B!F8n2>iOn3};*V?qS$*DOA^)mOsWJAl#yd3#c
zYaxyFTzNUnYU)uKM>RpI0Tf++jnfVCHmjU-9Fe5PTLy=lI{tWAqC^yNq*<bc<Nfn0
zVIUWOZeeDn!bJ^KuFREjvMb6+3MJ`9J;kh(WLok#vjv&MRJv}|%(fY209Kg0IIYiw
zNqt*fe_5>s79e_7jmr$JUYlm!)OM`e+K6*Ye!XPUqxYDq#Y1yc)s4mJemaO=hr2g>
z=Z8HW?QJgYxWP75$s46T*UCBFbI~qR3F9#4X#IAduIhNZL)y?c114D-Opx>BNtGY@
z@hK^JbMuU+#-%miBL5z6sx2F+Ao#Yy;ODGhvH|9g%z^QeiIe7IJ~?zAc?8(rK3gyn
zI0XClZ||5~ZxizRbdF@yyU!lTKuAJ~Kaaa?UXr6GHB2fn-;~s!QwXK=;ZP3vwVW!4
zsQl%}=ViU73r&R@G#8RAcjWKQCk4{0b_c6TS=d}JeBzEny^DV_ow(%!Q#*s&LOWXZ
z1WPQl>6FC@@w)1uQe8x(oy<`S#FvpL)WsoA+8_bfG4I2jB%<E9A9r;OCMeSPCl0rn
z)cR^~PEy3=w0E-~(#d5?Z90@R$9&Xbe!|($N5R%r&cd8c$^{NuORStE=54G0CqJyJ
z@?~fa3v-F{P18KSO@*ob_I$3nn{J#~#{&OeS}A|cmsg8#X~#?v*_#32%g}?^9||V+
zLST)(XE)&k$jTIkJZWwoMv}%PC47e8v^VR8;s|XXh1yb?l#I4PqCnbv@Z$2M8lC_3
z8hjy(+0L(}S>20lN&f{iJQqZkgmttZLT=9}G_RR*@;E^`79Ps@u|es*iuOzB&$&bm
zH+|jgiSqJaG^o>thDy+^rK?M3YpYiE^)hK{_!B6x^HMF<1u7dY)~XN*h4~NZ_B8Dl
zg+I^^C&j!a+`)T3GrzT-0|y=U?~l`I>m(%M79Q~)sg+k!{p$VqfTmh8zG-jr3ZgAl
zBzorYZhZVM-;ZyPTKU>OY<$FQIN7ui;bh{~b;+l8+{9`1-cc2Sv|P+`dC1uO8RK^k
zl#`{4w7t=Vwk2#5atRsQEkqri!(c;dxNSlrrQ8xLc*u}%3(WHbZlJb%S9s0>`yF$B
z&gU+9>N^fKScgBybiAJ6SA1xPEVa*7TS0H1eLp|su{wb@f{NW#PFpDwCZVL-Wp`fs
zrHiYlt&rW94T|0M^LjNpZ@{EcV}wpTgvYg_hDsXGs}7~N>pkYrV6>S>FOynO2p~#g
zEdW#9^%9;Zfm<BJ-8eV~BgkO^QU#wAiK_kkQAsd$>=7*c4)_+T>TDXq+~I3~2{hN|
z{CkV1OZQ&|#h>q|y?4pOW)$Jxw{Bk!Aj~i&5?~KFU01^UF~JbEMa2Rzae%vw6b=en
zxDPLmyeqi2b^4a}^&U2Pr2HRV)RyZ7W(ntF<|kLnUtV8TSQLqym99IxuxxJ?k>%HR
zg!jgvePbMUi9F7C9Vlgq9^x<C??(&bxlVjoSNZ(-%qV(I6BL7Q$BMD|uf;fA)lJ_I
znA@~{=}C*qO;?1KIJFh0E-po~W{pLJ1L{K_M&^ao(Cd>!Gw@$RIy~0dQ4f59&asAh
zhR?DIUJcgxU%&@9SZvU_wwsZV%aeOUGfliySsgk^-`hEu>E-Y`dsUaE6H{4(;efBa
zY8DFHZt=biO)YRWX^!rPcJFeJvBq(5qobUvLe;gUY*U!z?V3;^f(Lnt^#0(v&cInL
z&J;@)Q@l3AKM^O*94h2Fv+wgGoWM(;_WghriIde?q%K1*zi|6rW!NCejBM@nW;t}7
z@ZG$)f!xxYz%2?f*gJmco)seg;ZeKPN*O5g7x8U=P@8JdUR8DqJDyFwizIH=2jpY5
z>-+0_fd_U%#Bjx-Y^)M*V>!&C?40oA;=lzS`7#BsF7=g_Q*raIckO{eRw)r|RMX8u
zIw@Z1?miOVo>x07UYfzac!TD&^3SvMU^-h>b$d}>AEYP8pGUO)01>D~7=GyppU@nX
zyTmju=!c{P_fHRdJ!EbTF5@YIi0#+AzLFSeYldKC@cwjnypex@BKXa&YyVqr{>Or0
zVrBn73x=8fUzsarj{hcewG7yH-0Vd9C!@Dlt3WOS<xe2-Qu&r4$9>9DMxOaRc<yfg
zt94DHSV&22+w80=+wF?ZS0Xa;a9EO#>p7a2sC_NZ&aF?!hlufzWCZ`GZA*9f=;mM%
zye$v;r)(=xeKHD4o^~=St<TcCzPrbs-k}hDUQ#G^6J}$JKJ^EL(4Njr=>z~mo>~Q?
zDZUNI=lN!Zx3fZ{cta`AgibA*8V2(oP>BF@Z);}BGt-nTc^&uXx&P}!csb4L-bwK`
z3J#BJS;pR-_MwhfnX)XxYl@S{tYeT^u~5KWh$!Qrf%@H3$604N;g~3HAX;USzxVz8
z`XFzzPX=sgKODvi90g!X>!Ib3WfP<hRr+`6UTB0ynahbvdtSH&k;@3{wE3n+!YVXg
zhAJgY*{Z#V-j*%2*>p8?X30nVSEDWo&Fq25VpxvFZB?xW^ydzM^Xwt|Bg%X}tAd=<
z3_32v&z&MxB{+-<4x#RB2=c-?8bvc11@~`AJ~4L9yt%@PCyb%?a<LvxqZU1Clt&`f
z`<$vt17XWKLexJgfrCJ{YjLsaGO3pn7%x#00Y8;7uaq72KaA+sQ`Rylr6tIx{S5B)
z-!;}3y*hW%Y*{fDX7kF(kF!Bdx_pjE*uO{D)pZ^>ee7JH*#=P6<qX@^tjIiWc1!3Z
zBl<-u>{0w<sZTeTe;w%7jrq0(hPxJn{APjK|CB~xEu8kGH?8Q28vUh@yMSoxB<b!h
zI5J6)W>_G16KKUp=YA!E(<D5cGChT!B8ZtZ@D8a0u{VU`$sNLMrVW3iLmb^Es;d5!
z^VGbgPfwyJLEy%pP6V{uG4}{`XE!$SSh}s&LU>7L9<b0949$1&G#3QVxOc&kV>~qk
z9b|3=lttUH7Ttns^vh+cBYrfKk^*!ucS=~>EBwdE#_}<g9(LOk!9k-#V3=q?V5>#c
z!uBO=I!ImhaB|O@bi`kK9wYrHv&2K}!&U`zB016oXry!9PVKCT3}|s9N8j8fJZqtX
zIxkek$Q&h=loH=@DW{_lp6zT~BReQ&$zE*?D2w2u9||={u-#C*%#bXbu0eCaZu_y=
zx@xENGlnwCCoJGL(?=_FMw5tXoTYeGfwSdAZKU(uvxz9CieO+?)GGW9OxEB*;Mpb0
z;8Aq`gVZ&BmbHJHJ9J03Ny^m7$y^<0F#z9o+`xtg^Nvovw&1sU))#>kMTY!D3u@*c
z&TCf`cgobU0R-#~(v7_fmLQ?m(@jo|-&dmW{VBpBTI*F#rD4v~&9kCVNc~P)O9V*K
zVGz*iXSgKo!VIWm?=$GZN!a;DS7dVK!Re$05Y9$41<2#Z-K)43t)br4`H22Wt*y95
zew5EXO|%5H#ao!K&SCRx;&a1@BpwvwFQ&*KjL?GHoBA8-Ntg>7cL1dF7(m7{{ur==
z!jb|=XeLmHWq(aqD<xxe8{A0UnI!NS^Q+=KA5H!#gWg3L)jv%#-b#xvAJ^z|x*PBu
zTXL6%R<RkN3h;F<t8Hf&2+m!%o&s$84e!nDY*cFxh)LqZgS%V|U@*63cCXpN?<bwz
zJzhs&)SAn4w;hFU!e!jlCy^Ue?r^l1eQrm{mLSfJH2XlMT%8tG%Q+FPe{3NqoSR}f
zsWz|PD=UDp<*j_YahmH5)gLd*!!|zBsdH(2IzvFLMcsDkKAK{w+H{UYd=SW|>nb~;
zilC!~K<_-{_65I;ZUk2XTS$r&)PV$c2@ia<mbPmxJ}!S)o(>bvWa3yy#xHYmq0|k5
z8;=o!X*E%<-H;yJE}pCMOJ<?{wyoRdPIcL{zFKeS%slU`o3}nU2L%KjHni2NIxM^i
zH1t2trpMB%bQD{*4?VT#+gt!wonNH_(}MW*uDcsIgQ{}ZWoZwFOqJp>K0a(V|4`aM
zPFMJwrL4@%%HT~C0>L$8%(FuHc$mL)HVF@Zd;RE7<o(k6&OQk{*dN2bN|DzLs{Zm^
z+#>YoxVaMG62Fabh%3M-A6v8AN$)LZ+cx?dQQnBySH6&<?~)`xw%}`CqqmiuE5sc#
z3hF!S>f@eC0*V+pp#|_YKK0d>2GgT?r@!8>A?1v4G=?QnBKG2JrbeMdf%sSanSr$)
zU_0v%nA?a&V#kt>&on7gI5(#$W`<XC4G+xTBxKkx#9KF6w<Z!N0Ol}c2nLO7r57ek
z@Nvsrjxb$!hEFG5GI;@NcEVAu^053PU=3pN*NE1Zp?0ViL~C7kK4W)12jZT~0d`ps
zoT5Gn%aQ5`Q^(>L%6mK#oBxgh(?|h70m$dkm@%0~WmtS{Z&RJ|-oc#|$m8;S7nGv!
zNZT2o$V@jnr8}#+Z)mRoDLNAlWw^^?r@6Z8+HA54D&}WPkF#_7w(1zF*y5-*1hY9Z
z#Ua|4$#o+pS!q~p<nQGaN||`0XTybDCrc1t%vHRZiU;Qqi-lY)W!H%nxqIe-c~{i8
zx6kH)zyuk6n$QgKU+3*N$lJ%agPu%SKDt0Tgmd$33UNHh?fCC;D8~vmY{DY)AQwa+
z>Ktta5d55_J)d7_IXh8d`so6uyEj(ZO9q%Qs~Z+Zp4Wk!K;(FeYS5T)gO~@VAPFR|
zd9zMfq07Ep)s-v)I}bk*z@}Z73G-cRc?C}%gO4n>#NvE4l~|J_KC{Oh48oqJf5(cf
zcE#ro`b&trC}0)5f?zt3vwIAUIp@)F&0KNz@~Isk{P}W<G|On<g)ca{=sR%Lzo6+?
zLd?jd_Fb3r9wsL)^)@U!|0u-^56Q*t$eSG$j7;5QEyxu&{bG?vuK-6M893GBRmc_z
zJ*1*b-k3B66Tey*;pH$<H(PN*B$`gfwAgB53sMMssyCM0PE4AyJQ*$8XAfcGyn?OQ
z=yHRdx-R16e5_>2n}p-MzzTW5gvJ{R4!#reV`rtrEdh3af@9&v$O;$E?-+|MHGiM6
zW%quoclvd{C0Ahw*L=dvW^bNS1kHr0AkzqK$X8-~J=~EQmokf5RbH_jf4iF;vAysC
zdiBLJc6gG3{UD*wX*y#6fMW2c;v6Qmx8cW;=%c<~1zeJ<!cttf-=u7A6q{+Agokk}
zmq-UlPqGhT!RgOE$+ucLF|_<hNt1$}zstZQ5XhCu1<lH#0YCo)oCZQJ(OCs_HEsaM
zkf5=K+Tz{C(>VliVmv~Wg&r@iqSRsnJ((`X?i1hWIa6xbpDk$N`4xu(%brHSKWCZY
z!KT1zZc-W+2Pcdd7wtmP6xcy*-kOUpm$x6ww5$X!A5E~0?K>Qg?>f`MC}7Z0yBt3L
za{&5-I57nj6#cwtoNE&;r_>Vm@bqPT308o;z;D)8ic$uPu!w1tAn!^_DcFWLUtp{$
zBU4Z(YZ5NQ@<qY*xS+nKA_Bw~8H|2|<|bFhD4nrskK^*|k~xd3T{NWUotQGZ<{?U%
z!$gxecd$XuW6vlrV-j`B<b1772gFxc$ckn=sGo;>=4{Pv!&^Ir6XQsr`@q{@(W`b^
z2niE<>ql}$OreEPoEY=$bM+Pz2APP81ksrc11Sy-O8s$~`o32?%SI5)7yJ(x&jd?7
zhG>iG$@Tq#-Q5HKbAL18zoqW~NZ9|aqhSC4brdX&|B|{aO#hA4Z2@dLZi*rQQ%pRi
z)lcgbH~@Q6*tT{lb)9->Y?P{dl>7^X5ZVekA6Oy!8Rwq*d-PG;fv_T~gf>mO6>91+
zo3HHS@s2u@QLy3r(Dx(@5N&I!XEywa-huxH(W5hi{$63i_wm=QfL}v*_DUKo0t|X&
z&XGClqU-IxuO5o0jG;t|$=$FcQ*^noX954~wd>vvW=iRU(g1nXA~N*@@W?5}KRaKy
zS-22~GR}y0)3EkW^PPpB>l^JmX_f1`CciT#KxmKkT=!!p-<ssvNNDR6CUrQSsX1Sp
z-wA1X+h$(-#N}xfj!XDS+dw0C?yOexD9csRuB)+j;|+h(Zx%UwgJQ@uc`vzZd*%X>
zB*KBn=zx!b+SqEzRTi)vJ-az7dVo6Aflk87)7VI@BeKj6)ogVlBKG8|!$MZgm&@`;
zi0b^Mrmf3m1&#K?b`ss^FL##k9oPdR5rH9-@>Y?LA5@4DGWpO{$~JAaYJTgPf=|qE
zwlV)Ut4K5|>aRC2$3&*7bbg_~W{?g^EFcneld3TF32Q|*Gfnx715D=y_LP{%8A@YG
zXNRYQBI&D_+ocNw=Nzoi^t{_@fHWNwo4-K?CRB{4conY5jH5(oj4pZb>R6Bi%D<^^
z8c_!BFF}grMIDGnX$FEB9HW=Qu+TLsPynU<weiQZ31A&Mt1;`zjv=H4c-&d7vfHTf
z*zTrD78HL~Q1U~-q2%zCMb_yiCW>XmMNkE_RmqP8_S7$2j(|*rFHpN>5I|6FC}r~D
zu{iKnL?f{jC;AS|S&>8O2=+M)mIK(hI97`a^Usw<kmkxjMj6u*k|c;oZw44Cu^5>R
zI8rS*#Io;B$AgAC3|)or6b!vI@KeJi!UWeK_MPwRtdzw&v0bKX-HnJQ?3!9bvXf0G
zMM0=!J(vt1M4PREm#RepA+T)kkD|4J5Ze>j2_dOPsC%mf$1Ng%D3Zm{?pf`bj&aU;
zRc`?llw)3s4l@QC97_XdrM-HE+34HiD}}8Ft8%&hGetu3cy{0)ABkyCtG&c{#fA!8
zsW7Eb<SE^XCg^<N$1BJZ*!twR;KBa%_!P`D>wbo0&Scv12*`CyAJ28ycSep}61q5^
z^hjHGstKcIJJG320clV#BY!R-wwh!SLE<N=`D&beAa8wM8=A{^jnL|-n+Lv3uwo&e
z5j7-*>J`xymHyAm(jCl(S9f$d>fhwqanyYXEj4c2*Qz~LYJ#T-tW+S&q2rL|-XuB#
zR4dGfoY~9UzH|PCwd0kpTI}1$KNpqexaLN_ju9q(n*eU81pAUer5O2!M{D`NC>xI1
zz4i0<)xof|0TOS;awrIu#7U!CaL^FKb=)_sz?8=Ep3SHJoO?pN8_wA<puked_RwCm
zLTc|1FlWidb@>+=)1mvyax$5gV|aF~zn!pO@7htMfhQqhTBctIGpOLXo+Y$Ja%c-k
zNX5tF1*+tdUuTeKDttbSq4DD=T6t*L0PucoT0;+qXgc;=Fef2RQoracFua)A^7&6c
zp%drDB?70Cz09bv=-iofUbw|E=<4rU_ah?DNu5|Y4-27N<UO_((ti?9Da8dc<>eT;
znphIztRQ7l^L=2Q&lcpY%mrK2kv>CM+!J;c6>drz(0e_iTMRFjZM(`ZYP<P1B%q>M
zg}P&DmZ(`0e>TDD(Cit4V1KI>>%0yJ07LMkQ#E~mw*swh7r3@9uf6AH%H#t{J$(_p
z+kjcw71I-){k5C4EMZ(m$0<hK-*ydzW+!iz=7b3E7eu5m0Ug5Wsba^m=edmz-e{`W
z$u}RC{AuSaVD*w#(BuW-DDd=r{MxI<EOuH;&b00k+tg{Q*&LKa|2814CdX=~+UTaN
z%OCOop~|#CPVVP<#=;lphu2j~AD3Vlb}jA#nzg7LRxN;8lm)1IzOy)-^;~+NR-qJU
zJzH+0s<JO9i5?GGzr_t{x^-6-3%m&=oLMiDdyf6%+gfk_Qz`rv&<a>@PRjnp9*DrT
z_dzw=TC*Z#F~=y16Syd=A$rng=DWq6ZfqTJj&*<emX9ou9SJeuvjr#4heQ?`CBc1X
zh#G>WJ%C~(0Dt*jI#s}TcG0b4rV0!>*(c!S4}=AYvmxZ$=>vS=APdZ$h~Uj&PKFC^
z`NFN)ihS)SycYMW7pP5}qw6I2a4wrP;I0G&<{W?LkJd%R(Xig&6v|$LLEw}wp&1iZ
z1>gV5Xk5E#+WNu=EO1=<Hdt##Q3KqZyn^Iyf3y%^_=4puvFGAc=aM$<hq<lUZ}6V!
zeAWExWXXP`bnMa;Tr04*J5b9@l9A(2Gak~JnW1ymb5kxfuky?KS9niDzVLIb2DLbL
zxG(lC*rJilqQERpUz9GAYX*(D0iR-bUn5bit9kNZNfam5<3`WEO?Ewnm0Hcr{1cBP
zZPL#KXhIBYMp@<oRm=>3;Gc>{oUu1HE7<GC_~l=^j7W+j41ZHaMh)zOFHT@4^x0Zg
znNZ&;&S92UnrZa|e~^KhORQgCY5?D#L-P2$1Yt}O`Suy9Ai&Pt=_{)+HtA}I=E>)5
zOV)7BHTwo@5};$nk1#I|mm`8---PDTzPU1=p7tk65&V2i*Pu80Hk}_eJ7zxkH@3^}
zzItfX?gB6smFgkV^Od1LE@!Q_+|J+9R`Hu@bHTN+>|J6wQD~i={QJs}vV!JT@=lby
zH=TwXse<w>sAFe$av6eMSZt;}!zGggCRW~O5&OCpn|Sq}BldNWk~Mn@S&7M5zxiDh
zzJMr!&b{Bh+XTRIASxSUa&n)1A_8Vou@4`Sr3wT;y6VZd@1T0FhuC>U8veo|h)rts
zJub;H>Z8HzGG{j`3$wFQS<4u#Ab^alX$=lYq~8N;es4^v%zYIY1Sd~$Y~A7i=!WVq
zG#yws0tpZs*}2lelJ*8%^_yt?@o9q2V31|Z4!tZtsQOs2Z>JfW8~Q>7KCQ<<ywx^X
zJa>th&x`(y3Km@H!|EA_P&w2e_KB=qUZTus8KWjN2(T}H#N?ooX$EG4$F7H3{%ecL
zbZ%2ogMXQmn^&sk#eDtOqmxN;5ZEGa#aH62n7^t@wB9`@t<>}S`c(%nwmhGf3EnKw
zkg1tq?Ots#x~`8Z<nO8rfOngSpO}2Z%aChzw?c?tuE?)fG;dEP3-&w#!W+n&1iYLo
zrg(qj<M@jI?$oY*gwEw(a_)a++W*Qq7RLW`E?NFvc*^o$6`tm(Z`vNRA^N<i-zn0q
zXeTVO+R3^q=C2iAj|kwii3&{0RIecSB>raqiT9QIX$UK(7;i}G>4*BAzBHAQ!E7d$
zCn<piJze%gR|$}~G0QWX`j&dHD<n#rTp!%hL~m-tS9YrJ&guxml;o5w3a6<8<l~=A
z_UVJYI8uq^incds&jxzV*G|oE#&!5{l_*}x0g~q#V#n_pU~B_lP33&ID>k&v079Z0
zdN9`^VVA<|XgK##)h~`#bU8$auyH0|M!V1xgbt(8``ITA9gX3Jm~mr5B+nbmVy!mo
zJKrnGc+sLLqsgOzPa}9o{=lhB{`Qc0fpQ7QJO~z;C4jrb<FJ<p{xp7h0$Q*cM?v)H
zO%jcVu_3Pr5|)khW0nRw2j+316I%QUPI(~isKCx9wHiM<PnoPn(j09Yv<hQ@+pE>M
z9BZ*XQo=SOQXH*4(&C+r0H?`%yviPo6X={+YibV3wwS93TjW@wf=$(m$m*teqvvo0
zk>?DtKJ4M1LfX^U-WM4Mi%A*H4fv#Tril?ell{y)Lux+;VCXCxOV|OGXDLdPecSXa
zbg7d$*4XA6DqgZ(0rS`bf1(J_>d-cLC#t>zVv3MDnTEacnwVLzCC3&~2|$e9Z@VnV
zhFs7!MO2oP2;^oKm{UKVnktGUTUgMVD?OTxnx9pNRpdbTex>>0*2%~^q)vJ%lpwTf
z)1fAyaL@;nWe^`+<Y+(@D9jDyGK<kjM*XqY$r3k4OQn3?>8x0Tr}OOv%PR-b$P`vM
z8!5E6fu@P2`%bhWv|AN><z|(Hnq1^f^_wHA=V~Jt*kfz}2z130EX8QlLhK>9>y8t9
z7M+iyn=nT*DZk+jJSD1PjPr$-p4aIbtIXmg4(~CzJwx7VZIgD@SZ{UWPK7Ow58euP
zLePn&hkixU%b!7VtZxZ_v}gYGSg&R^^phf%L~DHtVEQW+{DnY+P_eva!)D-)!M$2#
zdtR4Bj7l_|5TX@~5$k95qf!VALk)ios53Q%s}!TTF>K2<X22dr<)f9kdTsUiw1;SJ
zGsYl>a4LaFbM(Z+u7_iEcRpZ;GcqA4(Jx7CyFv_W!Sy{u5#7`|{<g{ju0NRuuL!V>
z?)F08{(&m6w3Piv!q6$Pj?&ufq?MX_*|l-QCura?yN6n*AY?3M=Z2bP|6vaT_XD-u
zk1IV;)cCknyKS~P?~M^j#nFsqIK_Nk-I9E=l(!;Gf}F*@EdO%znH1X|yK9^i3<elA
zXiTqJ8JXPUX8mhfM$j*IUWhZ|?^e}*KC&8nwnPI(z_0YY=&@%E^wMQdRr{V1;jJ&F
zsyDJCa>_`9Fxf_y{c8)cdk50?xkbvEFaVA>Z^Iveq5KFhj50O?Y6GX&AAOJ<eUI-<
zQKWg5XsrPb_L<Z@tHxO-_vv2t50D|S7Mv!2*S{9`1)%G5U>L`Hzkm|$tz}lzY)9Ts
zwAW&6G_ZvBQNJ|<D#+5FdNmDd5i;hU7Qc4j<fOjW+QFT-Xvx2_4B6n4OgpttKy!ce
zYnhqw&aPb*VDQmhhoYOdZm|mNsdI23uAzS~(l4YM888~u4QC?9G>ASsD35lDseix0
z2Ngc`tX%lC0nT~RNtIJlte0_Q^tLurE;_>PqdTKL9P^X`SMnA!-av|HAa^@?87OO&
zC^yqOdOP3E%hYXMap*<AJ)n4#zMhYu`Vbj^@l}}ir4sH9MqW{lC!z%6UVcC?D+#wK
zzV*gfA|~@R7UOlf+Ka=}CyjUSM(g&a$(*kd%e$->dNp)gH4S5C+<bKRvR9j9FW*eH
zn!(E*QHJr5)+K+n<9}2mFf$zJi?T_6t_yO&vLDf8`~p5Ab>Pw5cnRb)lDh*xneC5-
zWF1GzGnWhcO1XNTmTU8!z$A3~hCXXlvzbq(Hd*1R9w+}>)B<V3E#?QyCkz=H{Q<ET
zp>;`6NVZAcMw;B>Q`Eo_ZKrdE@x^DO%Q6x&P~$vXzgF#?PV47xAj@H3KQ*vqfUd2w
z*p_L(CZluP-6^LJ!8lQW1B1%qK*C~oG~DOqWE3CCNjEZA$l>lLSsN8oNwO~?CdC=s
z$TCO*;|TNo<@n6a_X7&nri=COvGkuFZbnv4mjCcuEdOSjS^q1hc^R;2yEXPdJ=~Ad
z`f~aEiPK%Xjk=%?^#Jb6@m`4l!319BXwD-V`ot%MiLxvH6BWHNycvm09Re6ICK~g#
ztJ+#FmkX8Y*(oQVlli!Bo!_-QtzGYL6KQ!&UsW9ScI@g_nk|&Iy>E;KkXhF$p5tcF
zW|EkV)B6(^x9VAbMkv*jTLfbZh}3MyDT~z~+@6oqaTy-m4nq>WPeV&jh2b`Mwb@$a
zojMIK;`4Kk{4v`E^OHOsd*6q`tf*ekFWp!VndmuMBR<`!7puNyiWA6BYcGGdrinBg
z;fbyB8eI?<8*xr;l#j$)0Va5KNaQnmy<gwg7kXKJfK9{mjZ??fX<ZGk31;QhmqM95
zD)YAQrOJM{A%^D`j5E~ph{Bpt;i1Y<II}FV2%OOj-#;Ervmd>hH`tw$nHpVW&6hFE
zM{X_pIct%%X2O%5u78MEABNUE&Xz6E@Wxc#wNnbQ{+Se;ZTBl%G3I3;F9){i;2XhV
zFUp9B*$h$BA%5=xxcB00&K`^Sl>y7wwVIRl5QN^jB_l4mlSZ{NH20Y)Z}Iq--AGsI
z7<ua9ai?!vNI@)`8ye+ST~{{n{bzl(>pm&c(q>ySwuf6z%DLJgv8^v77QU1lre|ut
z7tJoToubu6{l}Em&(YJpBQC$R+qNn7PlJfr?>l~6Ajyx=U0&&5f;i}CB#_zfnydpE
z;d@Oz0M8RufGaWsHV;(~7CWhb+Q*dx5QjpzP83ggSbhPcdTWZ-x(0I`(5p3zqd1{y
zL{>AtB<$R0UlXK_P1^51`NU<Rc?GT$)@4?%W2JjY3Xl^9mtcyxl_Tz90q&CtoXTkN
zAUq^C0byVgj<fAb3TIj*66^y82~?K^0RZ6N$XylQr-$wwN85*1n&Ii`OSpJ(2P`4|
z%<t*GXZ8_RD}!6ET{2=|tMwCdEQ2Hdc>sHdn?I<pZ^_CFow~Ms00s%Klq4Fdhm)bY
zO-^XuFF@PYtSsnk7VLW<s&YFpj3{$l%V>dR);Fi$Z-I#GRLZvMWqK0J<tOReMeZos
zbt|>U!~Kq)Whw=Kht6_}-l&+xrO<)7n8`IoTRFf2onF}H!rPOL?u$?tq2thA;2#ry
zZ?4wuyXa;1Q&VL&tGiQ?!yt{fWZ<#uZ4v4;Tvc2>hy!W46^pxyafCjQ(<Yt3;fcgs
zu<E*x)5fFU;pD&`+ghln#E9OJOE3{fMU`0JuYIy59z!j+;I(;EXmp1G)#wV)GL!)g
zGtg`z;YRc@H!74S+r$ZA-;u8>4or9xymV@VeMDT_KFe)6hE7;U{0BEzXiNSmbwb`U
z+1ETr4=oW0rI2yF+|geGViyN+lqvT~Oo!$9y}Ip`ci%vs+1-BVssQ>@VqY(9R!zF0
zqw2L+Le)pkC>lK8CYpRlPQ|6mA#1>%XVax#@doRXiPT8ur*|Ee)u!vPfP9x?F9Qvd
z+ce%Ynk9KeQ&&m%Q8*U6Tekv+{8$rzWT7Y3jP}6da7rkxx54~RhP0uf|2nB_Jy7!b
zSX~w3z)!KzYeLwGQR(J`6uP1Y`9AI*lvHdbWtGsc`mmn(z&~<2YWZR^74j9E5ke|t
z>O`b<Pz(X<91!IuqhJv{AC$m&$WD|)1i+fWvyBuvSjKq><+7r@sUWT42h2C1DEkT?
zY;h=V6OQ<aiai?<-Qr;7;z0XAR$<+g!IL|1)^Sqg85J0^lwPntRRQ)AjlPmv|M0{|
zV2Bfx+ayq+>`{jiekat0w|B@%xgW08lNqVy9@2vu4#IfnxrUuMa{R8>1d#zfdV<<Y
zVS$?BsU5Sd@O;L87kXD5eVq>BI<azV1ns;^M3K542M?0@MjV9chbfpNe#Qt*7))o$
zb2QM)i8%lGj2*sx2ZR#*zjC_qz=xleiKW2aWn97V+!n3x*J6l!1=55oI3()jRo983
z=aIJ9tt9cSB3>4=-gulARTk0Q4jJk{)a@~_L}-7=7q^n?Ztr!w6VJeg6Nl@!l>|&{
zG47U%3wkCkRt%B|7`Mx>bag_)Nx(94S1MkZzU~hjN~4prm#BZk0X^GOlJH&V#LHqC
zA0%keK;#~xQ@f&zA^V{V5YeyNDD!LD6{@yLC4bDD@>W4aB`sJKEkY7|^!0RkH?*{D
zXjYPjwW9RL$+$RX+|$ka<N2Mq*C&=?AGqZ+Kf3Y$*)0sej4*~*!o(O#UwtCJtkMZ0
zN@NH92Es=g7&|)KaA@O?6;Y}O{#9&_;OHv={DlXJe1Fyts-i-u2hvwqfr~@g^Y{Ek
zmD$%IxDC0-l%K-Ws^Jvjc8B2cFd>+imT%ekqnjFEt*$mO`PFGbKBpA>>wJkyf;Fq~
zNOl8QAi`PqyKGw8H7acrX$#NGFHx>Xs{m?zep17atZ-|hdD{Je2d#}d&Bho(R(ldw
zJ~8;Bc=j%@6If<&IW94F-&R8?0PbKehRKKxEB}-Z+R^z$V)qz&70r@8iPhVs<Ch=}
z$ZTlZEvtnxh;%<v;8e!3shA^&@^H*QCldS5=S`5Roo&vCR5>s(LJlO?@3DU_6A~<{
zjSNj5a+DJ=VVLtucp6Zd9y=%%{aR{@2ii|(t-Lg|Y-9t%DZGgZy4{;6ho<o_OF3+n
zeu)LPb+U^S(=L72EP-BNjOYLu%~UC90ZWNUDl(@EpOGjd6{T46WUivYSx7-RPb7po
z#;ZWO1y20ts8p>8n{?=!1NU4~PEAP^_YbE7m9%tKt1&ma^|^c`=D>pA?S2zzA|Zvf
zK<03TE0CErYecn1rICuw#<_OQ*(dua`E%t7Fvqk=(~3sb07|eB0}EKoEFd`Jl0iSD
z-oESyO$;4Qg;0|hB_+|hLVCuI?eJPE0F^$gTtrv{sJe(M4r3Y+h!<q>?{e@XYQ&3`
zC`4cw0~rEiK7!Cox0$<BluJN>3>sHL!;LQGNV#ARPaM#P#1o|~sQnGEW6nu@Dx2O!
z=-Fy0+o-;ZQZOiW4UL{#$DW_^9I02+Z<eJDXCoycxjJsfX+|~KT8jRQOf8s8Mcvj9
z9OK6AH4%9s@U7-_T4~f%-5QDKrb?`mdHicSXH7|DWMnGpk6KX32}Nl!@A+OK@tw~l
zT}11U2r?y9C1iw4u(n|kLsonjE>d|&26Kpj7u%G69$I11I*e<=$lexKyKmvK-Rk5*
zT|r@GaP>QjmQ-2gW&pJ_g}>$QL<h-{G7ZVKIevUezu`B)ffxaeeZ=;+EKz@I6W>dW
zAw4O#0Ha7KwIcFE&e7B21=tCB>8WS2$fs=}gb$2<!N!7CQ&@64xc^qTR@+^p!0J2P
zIo@YhrK21-+z>G+oLh|=O>_2?7(2sLI6}zuBhN1~#s$gRaf{Z5GNtd#i0&%tc}l#;
z9@v5m%*Dx9CN?TMlg)0XQ)#=>1{^t+OW5c3h*1h8h@Zw*>eXpI?qP#Y{q*sgg_4b|
z4kE}vZVMNt^;KqTqkMFPtJ;vemHm90Rh&K9stRP6>z&$EWbKytx+{35<j8q~d=WXx
zvBNFzYEle3c4&E$qotaSA%6BObb^Nj!_YKSDWae>ZsndASRTKcs8XA86Hg*}M;RE=
z$9zF!c`=f;B?$pZhxy9|)0eyT&yelgbX-Bo;wJSo$0$7h)@(<Mz)@napd>J!pF&_l
zt*yWJudmh@z>#gn-%iSLSxpV2PAH~(!!qfsgq}_I=z=p{w3eIp(;FxbDDKY`6Zgjz
z`IlT08M;ca=WSY%FM}}9p0OPmZ-<7@_gl9k9Xc%(f3cR`%QiLi$OWfoUVWV2lz_!=
z`DouW-~L`#HW!)8Cg#iKTasQuBcAH1&rfl*Di-&`ad6Y|Vnz4z*r%yv2{mg<5b!?S
z4Eac?qC6Q=1xF1uFHOAG^Rx=Ab#yeCoZokaF=rJxoJcOIuff{Qz1+8sH@7i98T*Uy
z5=)w`_e@GtTu7cxjKT2k<|BbH2SLdtsj+L+_|OY|;BfBxO!5UbAaD{JN^8f8Q;I*}
zbM}%eKDatPA$)#f{BBt$`PTyRzl*{D_*%>iEdRGau>Ly$!unqYKx$Gp<+d0QLvJ5Y
zoz8p0BjhEgaG_KxEDKDEb_7BiBhq9=k;j0CH{G(8+1D3{G;5lvYev6+-b{IX!Qz<i
zuFPI#9Y=$>Pv;G``xrh+IJ3oKt%?eVIXiz{2{pUC%ff=d2P7jN!&By|%_H!D9kQSa
zg&`9cE)j-k*<CHnr{K9ks#N->jK_OQ2|ixM;}qJe*}v)k!kH1ui`0jD==3jpa#|tb
ze*KMM<82oNpW_g^IcTuSE&C+*ZZcw@V`(C+U2$g*U3+J<#>y$VXc>azl8?&h;?u<j
zCqjL#DE~`PPL4mPu2&rYMa8~s(mf6NDUk2hJZ*VyILixE62Ri1wuE>%?oO~&I#8EJ
z#7Jpf#S~_0_8jdp(o#sJ-}5xD%&`GDqZS3dc?h7=yyJ%H@l=Z*C01W{$}u(;$iRp9
zr|Xl|&L}2sjoOTAv~<mCq+Q_D=Fg{6@eG$XT8gp)b-+K3M0`Tcnsd%Ig}RY3sB8x)
z2xNI1Bso}@6Y}4ee43y{jg9=1xn*s`e_sd@N^JDeuulw>+J{rv4IVAS{<y?{mAN6~
zYYrR2L`#j4AL_NljsXZ+8C4TYOcqbWxymJ_fLl*qxakbe@43@|Z;<xVLgtz9uUsH@
zJeK2sLmna9oe4e8j<G(Gp5BV$DRGM5xN;>rTol9r=v}uh2TCDsPkm%DoOOED2^wu5
zcxrWHZ4mQ1Gf^FEPw?zD;ND%7P5$6+#dp`>tYMl*T{W=!gW8!9YG5}du$0Rk9(8un
z<LXW~*Hl$t_`fXK%cN+XiCzXNi`J)20rLJ@jo&rUBt`Z!$+4fd@8I-Lt$J48dflU`
z*)%>|PC(|?3qRrT;3_!$g&RypYdy&~*CWT=C6rknf;2d0@*V_JJ-R|&8J{^~wC^SZ
zK5j>K%+8KvSOIXyW!JsFLCbXPQ~&!D`46<p&dBhe6`S?n%qr`D#jNJ2OxkWTAa-9;
zKU3fj-<3c*RVCyL%#+#BJSt%X&`hTO;<Z+kn)5poca!8j7={AD<U&L=b2AGS#tT4(
zSn@v1RD%!cadJ-of;mi7tB=N=%|BS`@PwKc>vjqyf*=f2kP4?BwaG>Qi*FssAsVcZ
zAR^N3vbC{@)8z7$UwRQQ;kRbOM6~om=<B-Ga#@FA?>A-%YNjY4!ZBD5&Qp^cMK`^#
zrSu|cA#ggyG1O>I(-pteZ+tbIflbB`DpBYS`dl1mMB+|V55Ak_0dFKSu7CA7Y11`2
zdkvCR#ei(Ph)<wPAyp0~{IYm|d41sac^nL$W*&AoV6=5Xme9Cx*gZE#n#B~<T+vlr
z&blO-VzI_b>+Atx(nP;d494s3Y`!5UteDlK7~xkqG;>c0O@YI@`{SKJFn%<=eTd68
z!7i(3r}u#-BBEq0NuE1}yiGR7G><hS%e7`~qI{ds@idAegqU{^$f;pCVwDQ;vASw-
zp>WOms%oO8N}t(>^CII&uq^ht;Lk-W`rP`FkU0Fo87d)Anj-VwTP;xw8P21ehED)y
zX?p=<8}j!|-y0)R_faLi-n9ZfvUZ$iJ^l6s3iY+F?P@K5sduf?#rY_xi!#as4kcng
zkO>Sm&y!<&Qg*}1cH1<=W#PswJ!@hk;xX_`GLVt}!t>&L<CaHq7d}mDUm<5t1DBG0
z)*(?yx1e7#jX5Q0@3^}lMmA$}cOM~ALUQ+|kYF&L<uPI4)uf0!$ZEL5>~(X8+sY!X
zUf`)h-b=rUx8I6vAFghX-b~&ZnL+sc2A%k_a{l)V{2vsBjgk33FEHD`NffsKibToL
z+_c@4X#JmG7qm+OQwC^&?mZq-v(5lmrkvb}`G>vVV9hFx?m`KciH!$up)+Mu{4*Oa
zMhU6e1A_j;4N@-aX)P-|s(p|S!-47F>3-~CSsd=&Z(pGmyAUUN(}eDBZcfrgH*D;F
z?_P5FTi3RaX&Uhl1oDe}H})v5@>N|wLnN5$Vv<Velww;pc7xBZ?)h=wk1q?p+;K_;
z{3aGie}ur?PP6WuDER6E<HXk&?A44F6SE8&u<stvwd1mU?p7;#RpH<~JD6wgS_ZwZ
ze>y08P`((AUU{g%;W}i&$>f7JNtB29oa3HKEqgz=oLSPvJ(T8@ghaGSres`uoxJ*Y
zCZdl|g4%BRK3R4_$znNVkhhp>V{s#Rl*NB420Of3WRU+nPEN}X5~Z4&W_;Xf*Cleq
zi6jJHx4-Xp^_{VLAg4gHOW#})VpfHTLG<uEJH}sgfay>NiQ$vJ?qD^U3fXW_UQ-r!
z^rYw{Z@0HabqrkpbN51v4*yNt!%(SYGR9zZK~g0}J3`#{-zAlzVY#yF!M|R9NjxzV
zOegypVyf@$ZQA;>rZJ<1!6_5&Py1_QpfiyTOt1YxmD>>biTYQuxYH3Op+#Fueq%NY
zZ7gHisx&hb1~PP40RC?_PPQ29tIzvm46Z9-H%ko2naJ|J5Kacy(dCm?G&v18reDc%
zFONCZ(O^+Ei@9-)ewAUht2^}Vj=p%L01Mjg+^LzRj%!F4mp?XblrrgE5?yEQUhcMw
zEk=EYqHC-%S1CCjB#9#OW^rWtX@xXbwqoq+cxY2OoUw*JXCL)-8v|S(=swya4%y^K
zYn`~<;E>6Bt_CjdWMj!}Onq6zj<}5=r>Asyvs}#A7+A=2SZ0`HReyHc5Q9+RaKI!K
zhy|aiH&irHlc-gomaiGqWQ%6(83@yX#p3tb0$e`VgTNpLROo<V{n7Cep`*!JZf^Q+
zXp1$Z>xBS?7bXPi(Y^_$`|J~2f}@tp5cujKp(dO#ejmrK4BWdeUj^8!18VSDy}tc>
zJy%FZb~!baH?e4q7hP<&$R<3h396`ysmXlR#@X;_@Q?^<zlt+mUM-3SpV5Pe2)E9M
zO1~`;sf|V^EKCpI`I6BPsiO`WVK?J;mOO?zo8*|jU&;o65{9oTf1;dkzAe50w$&vV
z_aXY|=?O0^zhggI6Gjz*qkk#G#Y!BK$d?va7CS6-)QuwflA$Ji0k3sBLGXj1L!hxs
zV<?pGRtneuW=`!0`ytZ{RaDc;ye<!7ly`sSp*i_uW-KzyIMB9DVCMOYd5abs+^tFk
z+|^>S;bvn`FxD)Bcuh7l!a_ge)D=Ce;*~D8H*MM>-#URKYyz|i67mlqn~EEbTmu@~
z*@V%~DQ~FjD=}>${7(g0%kRd4(A|#Adkqnf)J`5>%#q%W@{&r^vpaPo<SNumZsUC7
zI6~Y9nx?(%KUAa%N&^tX^Xjr+@)dW#f5SP`@!%hOUiq}2!;8mLI#5|RTn9pUU}viX
zEfL8*)L-`11{K({D>+2ZaN&`A9)@d0<=d~grq~CwFqB#KER7Yi%pl`z8`ZnL)&}PF
z4x)I4ul+uNzC7o#j}ql^YjUR;ONgdxcDiOhI&ZiLSe|wgAm@oug8XB#2Dxp~jf_ih
zCR98zmNOt0%QE!HY@ICPndQR@`-EsQFUld&yF0P{E4<(=pNrK<pT}c|*l=S81Y?zD
znj<)zckzuOhq7(S8(*zoS3$1kYte0VPs66yFhL<!xY+c868QpBBK(W0xD<LP@Rt(>
zf?8;n5AVdZyO22;dJF#&H`eFu14JNrg(i3()oPSTuq{?oIH??vVFmMH?C?x&5s;5l
zP>8bWQ2IzZ6!+?N(ZFL-<Dc5iYzRqgITT78{U$@>&)?3+u7xuZ)5$#4^)RqEU5kf!
zc{Iv)xJz;IR?YDPNhIW|7Ef^6-d6p1mgxGHTjPZ0ES8n)M;gm9gZvw5%KB8-MSH7a
zLiYl}H^%aR86|CM_LakNvbOC~Zh)Q3LWaC|U;8Y_!6F+WifYUqOb-5*=$VhS_p580
zYdavelhJl8W4nB0W`kILDafmmlv0#Nog-eb%hW5-q0b@{jZRes+$d%pl_&P!PSkU~
z<o^ohwc574A?LpAp6o${pdb-5yF|?riU0#C2|cd=710RFRZ3;;7$_7@xPArFBa7gy
zU^vXi*ZWp2Rmk9CpNz?~o*jKB4CTKTJH+L#@mFIJ8VLNVf;mqCThfl5P~yNJ6P0jv
zXv4+`ka$G#tnutA31VP%z(MA6$m50|n<Q*n=tk#(gvm&6L;K?4^4Ma$e-t6s(d%_Z
zJqD}?RvT2->G-ZzrJ^HktmqoC(eIn<4)V_}uHtvEn`QicTGSx9U1TT}mN|5NC)me`
zq=wMq5`X!|e3q}A$01AeC)Pp`DMrSM+We37^+3h2Ig1KVB@bVZ|1o!744PWS$CAzB
z^nt-b3&9{Y0v+({KOF~zR&Wjrw#I}Jz0o&?5n|fBGlxTD$$tw61!us8i+6Hytcb5K
z)o2HqTV5S0@LF*v(@^RAjec}99Ke!5sV%*gJBVC5Y`B(9SQ%dyTpr87EYM&7Amp=u
zGDHs$$9e>Rz5#^orV6v=x#^ns|H_&a0}pOa8@LK8*L}S|t;iV`NUqlKP$|<wlnd?|
z9;Fr4m1vCUT&I?5%9@jR3>h~2ccJXVEk(E9Z5+`ybt*ZMKKfnUxtvr-3tp~iFov<H
zB1U^H0|KfWwCmn{PLkSHwpO3Sic%F|OHeBI(V3?QF|o{W6v!fzB*I|=wu;1%hdV4d
zVsA!g{vTuS)FlYCWZkA&Y1_7K+qP}nwr$%+rES}`ja%JgobNuIm;Mub?1-3auFC=9
zbfmkJe0jHSW}rA1EA#uDgu&*^`D9u`nwIWyBGbo~$82Gu$N`z`%+xSe=y;W|5Jm3Q
z!s(^7BUFBlHYoTIQs-Qi9+Lph<)|NKCYO*(TQd<@VOus88O3n~%atje&>{aq?w4)R
z%J52YOg`2JMSgG;foXNTVx~k27iZ8MV@}qX{T=x%Vx@T)YI0~@ZD#HL!p-$42zeDK
zv%<la`OL&t_2=1Az@&3sK~W3aL!<BcJdW0F$c;<^NPui>wq*zU?V1T_>AT#26%|6c
z8>+1O9ER@Cj{v=Hn3?C@&n(Ogs26QQHG8FLVX)@CdL^RQ9l0S2?X9=|;lf+#y@Q{s
zz{x8%k&>YeK#Ax#BouMLe;O}Rf?J=XW;-!d=4r{kPRdpKPfL0ucyh|He2A?n7tfFO
z1h(Zx1Wv{-ykA;)h@_eO2BDC?h$JIxZwYEqCm3Z4rv!2$n&?o|PqsPhbrCl2@?~gB
z6+hI9b8YP(asF~&a2AL&#ShNUDXC7O2*VDuOKdz3Jw4u3PK#!-J=&124KYi!X<Z>U
za+oHW<Hr`6;tsq|l$MJ=Y7+BpBs*@TdCs2;yUdV+g8VgK*#N!QOo^4!Dh*6u$35UT
z+3*&u?RtGd7X<(_@=HuYZjB^3fo!CJ+PRe{X)U&pxk2`?cNDBAUR-Y~Qmui0QkFm<
zj5FvzvoFn9Y5t>_pMQx#B8t2}>DRm|P=>_1kqE%Az*0DI%_)_05#3oO^GkvNN~pdf
zAeax)w&i|hm27hOIIsjseJEXqq6Os?k)b%wSoXfzaiR$!YMg1`2D<u0C{qq8P32J{
zB3)8u^@IlFk~IHE<GAwvF)Iar{|-^CP`aJ8E5pvge8IC~`cP&y8}@pmcIjEG{;v)n
z6t4?-jjTt4u*XGK2v$?N$cm=C$`PS^B>&x<%|AI1BZNGaiaLni+3{@|W~^<OzS~91
z&0L8c@>b8#Sa1TEi%9qvEA2scaX<|PrB}cn3ah+vhfCbaXov}Y0G0sRREsH-F5tWs
zs~F``tcajVb)~|*5Cag<vl>l#qe-1Dr>U(>IFsG9zEY0$oEqGVs|2_fAjK)P^y4rY
z@%GmQHEmjw)iOV>r@Wg6Vshs&T$U0awJ`P>`)Mk7Eeesrqcu9&>MCj<otoej=CB27
zll4X{EPkDWbtAOm;^|}#LJpJpOyQRbddOL!Z)aIYFsNcF?Y~etyJ-AsSZ9T&SEM2y
z&r7Yu%A+iS{tlPVr#I+n)N1!lLz+XYB7JK2Gbsq8Zzm?_t?9&a#ix>0e4ubq@4eIe
zN={}CERnQrleCuVWC&W!KMLQSw!1DVIh~Q@WTjO*X^Fo?3;8Pu|ItyOAgr_=%`^~g
z{<2eSk&x4~VptSrSu~b->F=i0QF_*ZII--b^%pAuaS73v>s1%nCzhN~)q??$!J-WD
z+A-*MY<frijTFrwLK7?|T{~8oPe0R(TP;g|y%C@WiDlwB?+K$ZN`z5rqqL9oieY!D
zlC2zl<}--L2~Q<vhf~f8&Jk|kD|v*E3?H(QSLdtGf+bm*po^x2nbLB0u|Zu4^>_j5
z;=(4EWWw-C|J)SAJYM5ECRFI%#5!_dp6n<Qxk&@RV9as_dq*SxczYMKX)986XM?Y`
z48gvdp2D5eHk@pG)(p-tM&B>Vx}wHuW)@m%+_$;cd__sE^$e|gxHD@Wl~g>d+r$I!
zmtChC2-xUdwi>xoH^gYX7e|&g?D}j<90~P)Qi615!Q0ojGD~sqpKFEwJwVGsKx|NC
z2;+8mAjs{ZUvlq^F=#U2mNk*DM5B$HRxU8O*$di1UEp~gu)<Ygb2oPKRBY##bvZX7
ze!bEqjvfmK-a9#%sLqnx^LBWu4~t;^F>t8wXA*=cLFZs^2PzKfu45Ak8!)Wahx<&R
z=ni_;7fH_rZpqXl>>8C1OnyaE6AB$J8KiV!J!jC?=lY5d8k0_2>?4gg^`J}7WdTia
zM$hQ2+9(ne6AEr?qT;;pE_>}ybh`K$u|P6b$f7YGXAcH8n+=$5ZnyW1ts%-RSdyMV
zR-6QmkT|pi>9*5~;$3f&P<{+vNtJjZlhsFFtBMgWPl;(a0f90MPzN`xDeKq2HRqZ9
zES_pp$ZvAw^kY{e?G2j1DwWeCqZ3h~LvdiHRu#TgH{5__;U*$WrJ&9YR$?sJ2Hmk*
z1tv+coBX>x2uY{1r1DfkddT|O9Tud;CQ-iOzJ>Q3-tn5O^5l?6B9b6&c3-8u6bxmZ
zqZ&lJN$gMBm3|MH&)%wkrReA|s+qP`o^dEtwpTJZ`NREZsj#dlm-vg)*Nc?Q0fXe+
zbm(8XEgVyS%jJViss&qUd=H@+_ZovND>vGs8Fi(RjB9;Vcxn}u^wi+3>R5vEbsOD1
zg&*)(g7C?uUgNJ!*dVC;mb%yy1cSK*&Rv3*lmu7jyLLbj;g?sOg>znbk%$?$fkRgR
zwIPHnvM$p^h+C`quCMi_E^s?tr$OTs5<hbahp2Z~eZXl6YjC!0lGJ1kjW3ZX#-y9H
z_50<zmOv7jj<N#y_Fxs!DqkPt>YU_=$`^83S5{<+lu)(I#LU_b7lU-(RL$44SxBqZ
z=;GvE60hsn1Drmkj?eg(govuNSb6AJ7IbJqaM<OM44FN?V2rm&90}j5L4vH+s{A_d
zd{z)=-Jp&wfjqO$JQq{Ip7cNzxT!mzqMz>9XYt%l4Kqu&H7a8XyUhXyYzuJGAcEpS
zrp!L$KOb*~;KGNsJ>cn_hLT#qvuLQ!>^ir9>a4;vDmc`Oee?dkpCVel<M4wu%W+m~
zE&s#`UJvzTBDejx$+u&a=dU@h^js-zQ(8POaRNsSuNrkE#HO4LU7B+Qoa2YK%_~cD
zLM=JhB-{T{>FjWJ-_?bWO_tF;bU|Qe3b>AC7r38%Ka;tC*39<0y)f6a))lfj3qaSg
zrjBiW(L<4?iN@rBj$U&vZ?4Z+%|vgD#+>uE4AkQx2b}=9-T1v&HsMYg?eLK<%QAze
z$W`q4CZf2h{eE6w?bjtkVX?guI|WTE4A0Qr<Xwkbl#)YtEb?3p@PRbc#aY;-+~?fs
zz*x-*x<;OkXSC3iEn`uvCXKbsEz9b}@YaO9-VOE1ZR{VQ5L514l_O>O2JaQc_`a9n
zgO&V8h_V4$oU7b>PD{n6)7O$#=-SvVyWqMs%iyU_x-FzQ6$rc+-<3)~aqEhbbkoNb
zoY*PB2gtxMXuu4f<F|cGzXFve<VN>&+I3py9&tIF$|<?fL7lyFS*~t^ZI(!CwegAj
zLYo=PsaG7jIsC0$(AXT}`v=-c%A3?7DXgW)PI}!wK9Dz!O<4m2gJ`qK$m7J(&)4VD
zqEue1q8W@GZ$BZ{^puEsLGkvCBELl7Y72lmD$0L#)!*;dfMoA1ijH5T3fPh)K>U8u
zzJd6&D+3Z(;5v9K+XFqvlUN?)-Przw^8JE=_(&A|*YfLsw_5*m;9zEB{eOll*8c`~
zS^rPqZjZ+LKSB!SA0efzD|(fmWvb%9LJy}qA^>F9faQ?@)G<U`fzc$98Kntyf<&5^
z=r>i<lljk=ll13LG_&FT&Fhv^)UG_TA##M@hgk<##N6|E8xr+z<Wrnum~O3{>cLVc
zx5o<w65NU!*#${7V_+k@=;gM=+z$21{|E<aAt-1b&}FOH$OM`&X@`r<@}M4FQAZ*?
zBM-Tw6G3WT$@)Fwv+3r-V%ZMZXBOj4Kh%lgw!C-Lj5<Va)tMSJu{m3#_1$S!>%K*c
zl1UVOr3>Rn%te$eM8zQyO0z+`DsZb3VTd|!HY<dTqS%2qFJ3Tzw2Nx5#gtjhw;Wvv
zh3!z;A&bI?1U9P%xq7>fcr5F-8c06s-%da5$dXA71e;&;Qzsz44tWknZiU@N?9+*n
zt-9<wPHD$;x{jG21SscUBnX&8)Ju?S=o<uhp*t%NU6$>Kz?%1k*45Iyn}p#%YUlu4
z7T08o9Gg#drX_m?(%fcHu6GC}0_8uRu8>AZH!RYNo;Q>BisoNDj90zYvp2FMk8&{0
zppx2tne*+sIHq)@g#w9iYVxhRDoi&FT;?uh@GChd&HA;D$A_~zb^If_3nc1SQ!(c$
z)RV;4x)~cMGx0_bcCQ1&w@jJWycCc?>-UMOEZ=0HTtP1d6^acqch&0U*l|KKoIbe6
zX3_SiHdUmX;G;k$?FSoX7i~vBx=s)9`$-=IUJeZhMOPXeyviXxC(>7AR5r^W?w|N;
z5V4B)T2LMD8!cH?oM^0Kh|y=zL(F82+#I&)^565-7Xd0wQGah2uN^-=4u|#lY4f3H
zvbQoYT37HM+|a%3^&{Acu_--NrI7O{&yEM8xc3I>-SFXzw9}Paoe0>WoGzxoZ74BA
zl3EHCa5rdGNZb`{aO*Y3&^h>J>|s!&UM0%&34=%(LbE|9Ed>nA8v_5CLddFM2~#^O
z4X0Vc^Z>WWGgeV07}9S9*VSzFV%+?yH7pu~YkdZqae^xD-6P|O`<xy*sYLc+{^|hW
zZwA@js*~O6L26Xsl^dz>aTDHClW&?X9p~)j*I4c7UA>hHeX4)vlU;`x_M#->tJ&jH
z+VIcr)A*mN47z^(RvAE>JXo<%CqMvKVInZC<XbT6+~a6&j`z#G=ggSAntZBsZMML8
zF0U-sV&u+#^7yS~XE<sf?dlOTKhFKMWb+Kx33zSC$a;keUD;oHSe+u`r-Hx0`8z%>
z@!LnLY5+abIiA$?^jk_J_w??n9?!42lmgF$t>F*-EUaS<W;e&)b=uU16$wZ{3{krl
zcv<q}gi*cl{P65|x`jrN@@2+UQG*u&qQC?|Gr&XkBdw+e39L^Uad6{KF;62mO$EGf
z;mvZ-))$njWAASE6+X9O`oA}b&e5?-q5$`e06r2Uo0@5^CF7AIzSRzXgfU`xXod(?
zzwm$@3^U*6mSLI-37d3eu-<F*DH!%EZh{1f&Dd)qkBp3}3sT2o+Wm}j@AGn05keZ(
z<q(o@DKmH}pwO3s0wzbZgo-H;qF*utX!HcO7!OWLHj`V50C1`LrW`mROl~ajFy}&D
zlAnz$4@{A7wQD1+?Jz14i_}ILqgRDS;PO|WzTQ1Xhic%WgxTUQ6a+2JiC@l<FjwJd
z#5v(0+Xs$-Lwbl0Mw%+1|BJwjF!o0^K<KtyTJ|1JhwD<8ZxJ2rEo;etXFL}5fLo%o
z)((n_*;P@+>TajhYx4hPe44K%A_Qa)4Bw68RIevXN+o%mV0ua2o_x{&r#0=u+kIp4
zYiFdbt7g{EV~)IvT)50RK^Lj$13Pd@omGkBqH@K0eVkZCElDVfiDaqVwv@#&IzPEJ
zY^HK2lE4X_AWcvnvc7dKS|x7)sqEj2yDqjbOHe~K40D#H^k!0F|IjgD1M84rP0~y-
zQehSIdWbx#-!J1;_u&5ItuI`XDd6KRkBzG{1ZWQ07nU#$O9JzbHx!eo=TqT5HV&oC
ziNXtojK^pJPZ*P^oGvRZA7J}Io_QR~ubNOnC9SOv@jxUM5u5zRRUGt6c>jR4sj}jC
zH8zYBeR<}mlI_z-vfFuoC#`t*nw9F^mw}Y=or`loEp>=Aqp2XlV>RLP#Go-(Ob6d|
zom)kmU=zon2+!g4@_+&61|pX(Pn)Rr&%7HEuI(7qtD9?Ady^f`>w_NSTPisJ-H-#1
zwW;{mtR^}R^kRpkBn4(oOsDnMq&=5<P+{4jy2YDvNNhCQSzD{m9aF=Ked3myh(R2+
z${Cdk!9KQR{YD3~i~WlH{5eh=CN>R{Oy8398L?kifkX_ID|XQ_n2g4S)+n9JctlY)
z;cXC%-c?D%0BhTYJA&|M0^UcRm_FD(A^hL=)ecQPUnCWrZ8;Q<o;I}N@EbsP@Qz-+
zn3EIbp@0J7XoJ+AuW1Ap-bfhoy{r1dvihwa#1?;*ig}BLN@PdTKb$>}%zwMEU_*uF
z5){7MdJ|JT-+7FqC<24sVY_Kt7NQoAo77(`r4&M6WK8Q<V?ITPE84KH^?OXeFO}wN
zqput%xQ@|<)L4F9H3lDz^YTR(y)>o(N)YO@YTvv99NpCop`QfrRa-}ti-RB6Fsy!X
z`=+tROws%xh~A1d3=#k21WK{`p0X6VoZEp7HR#TDP6j<mLr2jg#pZ<hRUlS<1Xp)<
zlqt3GD#sCbvg#`T;=mqQ;pbi~7@E*r7b3*t3~`PRQ2{Ca_=`|_Y~aLVIV8upj`-n2
z>?|n*Mzb7tE@dVV%wZUWudpABP4R0##22kK$JxMD0t$Gr_qAP_*LLu}_E1pLIZG@7
zk}ucBlfT0nJ;?sL$RJ@2#@Tl@w-_7-soVV*vt_Q$n)~1*Lf@~|-}lYnrC>mhT-ZY+
z^kIKd2oYKxSxIY+@7J500fuIuw!ox-hjuuodzEyqHSmJJsgp}(52o;y*~!7ZL>}|>
zu1~9x-k3^F{N5JKmE##Oa9M~7UdC4q;Ct>$ix*%f;#t_%*>UwDW8Ld}9E7!4kT@`K
zZR_B118Y=YDf@B;0TqQ2h3EJ9B|%%B?emA3Y6IA?TRDPOpN{g%k}5PMvx-q^8A9{o
zy#+?TWNU|6B#iTce%w*|)cin)JOch=^zCiCnLcmhh_I->lcj-7cof$sfdPb8aB;0R
zL$7v=R1xk=d6Z+Eak_=k>7iL?4x|*aTHzaQ6bTa62pn5)#P>i-#+Q+U3RHYeGYlb{
zJl5Sa(lbv4Qnq~4`OKX|HB7G`KoQ4wm-`8&x>t#&W*RL|RQu&i6b!k!c_~!Jl^Kg5
zAW`Sfmu2PfYpo@=yAMfkDgzI06FudfHFs*^nc6|(0D~P{-H}WLwwe6dmM?|kDnY%H
z=o{qj4A9y+$uGnELDBh;x(`o1o7U}DLk2P&E1r-ZRk;RwvzijoZ67GOKL=f!<=JTG
ziWmLUuP$>l2iw@S?&N;fsS_A!sTYfOvKE+U7<7;SAy6W8aw*1a(E8I%#cxd&s^O`P
zynCJ<S`(J&7{rTPcb@H&j=;?{St13q{&O)eZmW25RVU<pY2>d0o7s=s&bl|<(2I|C
zCC+X=68}kb4WQ6&DQaPHo!cy0d71(GP$7lI?S{{pE`p?Rjh0&N)&ku2sd)u0m$~N9
zJ|C@I{iwZ<l-XjZn+|P3uN|9G1+N~|1BE*oWRnpgj#9<KZ?8KZfoA_mt7LcupMXNb
zd#c<}A@;&Bl$Zoi4Mw+b1g{X*6*?gy89{&;2cWhj5VjPwuV&sC&d)d6;jG8(fB(S$
zlTlz~XZio{&;OlKVEaF16k0U@Ic7%?e0J;jb*bwu-GVXx*vcMJjyF_hujvkNJWNiQ
z7)e|qqC(1pkY~<%r2KM}ox)z#Qgca+(^iD{Yj=KT^KJ*ZDGazL&*443I(nrFyP4h2
zw12QL`q8w_M^!aJW4g3(dwuu_z}4E$K1p#?3M-3a=-A92{Cpo=ph*WhphzuNCZjvF
za7J}S?T6y>eD^lmp-G#5P^6JaHBxtS<__B(Tul>pZn5CNoSMum4E&K=@_((1yKdJO
z+g;f%*qO`!<U+!(OF3!b`=8r0lON?XP<B=TngzxAY810tP@SwT%uIv$z%+GNC@w_m
zIpmgLgvX5TCmK@faRfb_>}HlPlknvRuEI1v$DxTzCc`b(tK%N(3>07S^$005Vj4AD
z+)bv~Rbw7zi1j(%%SnY6tw9Oj4gJmLjqN`bD*b@%87Hn>SEz{IVz2v1VzGEbk`MD6
z@UQzboZmsEzKX62DTsPyP=3TkSgda2!0qu`?Z~q=6(f57Va0V}mMeBT?imhsC32Jw
zexfAHCf}wl3-_5+Hk}h!^tuW<WHwh=Z5EGf%<t%PuSH=Sv)<C~Mvz}^ck&4}U4y{i
zo4+xy#;iP6mfLTQF3_pcV7At*o`V#JiL(QAaBd^He)dWbv4ap+1gVQzV(u_W89Ab#
z|4N`jOR>VrV_lyguKzjUGfFhJqUSp+)b33G#<fnX*IhKk^6u%N_9)w;SOfs8`g-zk
zg%V*B%McyvU0&NRW{Z8u;J_40XS7Dm&DFF`Tb?i~Fx=cf`YO3uYqu@}h%>|hixr~n
zwz^%;=Ry5g6yo)I{OCA8AFo<MBNz^4BhTj&t3)I*wlpM5%;8<RCY0^f_t^!=+-Hpi
z^EipnVb2Oi(O%lZJ`oxbjz<@;Bb|_d^t!R_B}o{-S^Lj`N&$5%i&V;al=Tz>Vus)o
zH<4vv@|WQ(x!PuyU$)t(*`3w+{w?&g)U(%ZD7LS4M}m`Kasu@?AAHQB_|_K-h!b?o
zwx4t9K1UNItgmG5{Z^%^K14E`xk@j^h5ZB#<7&0fhOOt|WC*KI_Vq=IugMBlWfXSy
zZqh%A*BFlE_=Cs4dpS4_4%h75>dra1zUKf&=_JQrknxh3YXjA=Z_fmvkq<>!dFHxn
zcYj%0n$#4G*5QOxFjXinM7g;C0Z=ShJLyO&lE|4xdDU&F#&m@|HXIUUt5P1mbSBVV
zoe8JY6lrOVVZYw|Hd-Tt%1f`<pM6a&T!#e4^ljb_b(XzGPvmgN-wHzBSopL_Ap{K@
zY2o&%o8dpnJ>pQ`r4`s$(M4aKNSJ71I-3LFXqoC>oo3V(o$A8|XaW@|6A9i(XGkrc
zptI>LrT$r}u@VLtj#Gq+l^LD_6`i}$$G)=P&<&9fWARUoX1)q1<kckbb0#1@2vI1K
zy*2Rswx2+*K;_7fU$;fjlA)Ylv*FW(%~mE7n_nS}aJjcC@C%bFS4?>J*0`BX4T+vO
zSMP_&*#<O=((y*rm-g^4rk*IFJ5`WZCi3iXC-ok2SJvc^M&Tur!yS(~1Ulc!yRD?Z
zr<TT#4_I=1OmK88SZw=81U-f!VZ3lvAiA<cq(4J!msuW)AGr6uN4!D7FuV9@3N-pH
zKC@lUX!XA88^|~$M0l%u!-R)5NWva8WN)ZAP-4`aYt}sQUb!>a1jx<KlnCU{r7vIY
zrR-pRtnSlyDWJw#cZvZ;*3{XzcF!*r!v5R~PL%F?2iP&1JZxXf0vHHVB=svlE&N?%
z4lFqe>$TQ2O`tDmG?VK1!a)1}PBBoK3!p0?zQ~9P9ZQ^Y#)(R!G^|FHJwp?EXwJNj
zq{bGkg`1<Q4gb~qF>`|D%n9h|__(4GpV=k0`OL$Xs9M4GR<xC<1drznwWKdi(onYh
zNmrph>)Cphm?Wy1X^nV6hRMkpaH1-m`Fo1}A5@owaKMolq!FKB1uAJ<rwKoaaz^63
zQTqq<1lTUq^_^U2`hb&1?i>WtiUA>Tn=Xz7e@ksc2ZRsw94J*o)+=H#&0O|KamjrP
zVm8X@{^Rx=2l<+rN<y{yd{l*GKJuB{ttZ9Vh>6*hx-!~7myBs!bfp}VV_Yead&N0g
zp8_Ie;eEdVEm<-={MX8hX-t-7Qwp4%wRFyB<AIQ;VVCOnJQMwhs=wg}LW*=fXP*3z
z|E^RS5PVP+L>|AG&-QNmiJvAEqdSbZd|4p6Z^QX0rcc&qwu{pE{Fw7WcBB!&$RLUA
zz1v`|LJ~?Hhn3ak(N1-RGN1-bQ($=qqk*S!ZwL}pRd3uPY9(*xp{$QQ*#%|W@dNu9
zg5j6m{u3TNv0bxyyf&P!*1N4-?d7JL=BjrQ_Sp8X$+>*rrlz+3Tt4MNj0~(a<xMXq
zWj`-vHEdOc%!EM()uXNe6&U~O82Lba#IYFOY}c>wCpqyuMQAZsA)1a$!Hm55jS&j(
z2W4WUM+&Pn;`C7|ngwb7;;3z?1di^^J}5eV5j*|@WE5E5ndIuDpfTwuNHW~k*P#^_
znkI*L5kU9{6Q>tpj)%-IZYU3SC?!-<sKp;Zg<)Y<vxSW;7q|nPY9zoAI2qU~*QP-O
z0j1RNd5cMy@Yk-xmG%M#5d0IXi=FwGyA9w=IrR+Xi=f-XQ7%`N`?RznoSTspPJ@xw
zM5IP$w`#R)ND^~v)3;O!^{i(*U&tt;oK-;V^IXFoGq%BzQ{U~j^D)y7ltX(Octb9q
zKg)b6LaPcPVMo2k?lPEj^ZO<*x~47Uz#9~0`f$nxa4sSAxp)(M7W;}J+|mJ~p%vF=
zTlZ5ZT#wsYZ4(qUL;QYslN0OGO}?Gl@O0NCIAxg33zktYJh4`BdmOOB(nET}H!E=_
zsRq+iOuKO$EE*(Ug1lY}768L{Ag3tsR2U>jGDqYQLR;Vz`U~eNmVI`1Sy}VA;IdrV
z&XgD8*A+inqTT@L`(<19KnGluLs?A|BZv}g2FvpLJs(r`aHu<PyC#_;U%cMvE>Zyo
zQ~M-BXu}+~NSjs>X`qC(Ojr+J8we4zMqixOte7R6iO0x|MT`20L^KE$bXWqM$ug<;
zXeNLehSn(452x|*U&a5HM9fbt-nb<hMmR|Uj*&;8l7(%<4g*DW$7~!M05tQ*)K9b$
zkaXCwS~^q;pK6xyE2E^s<?&=y*xpQ}b!g8vc&Dz({FuBDD%)nZm*M%n+AXRn!251k
z`MK8V%_%XyNJE1{gGZuA2uNbVyb4BEc~CR>++QVBeDBmAvPJn4Ai=w5jOg&qyHq$Q
z4lpC6G#81w>3&oeN;iixhA^n`UY2f)g_eTT{m{9zkbl9z_0%*7j{{_HE7G*G^k`S2
zb;e&4OCiY+YK&+DqN)CoXQ%~-{cOJ^SNTI?!4MK+@)r}bXxCaEsJwn@%E7vU7o@nu
zApf&)*N)P+%%psV=v|twWMNyOf;szy1D!3e)Brw72&;luY4DBNI;-oJfWpPriKFdO
zOi6neH-6f_{JORj1bc~Fa!EedatAQ&+I?XfC_X{X<)a&eS%crRG|mU*giGBrGul}y
zhgRP)ZP~jB@LofCfZ|_==nJAjbm!m;*p};!M`YxI0E5}nGgYPfsISDUba5l5+VbUt
z&s+A}2zgjBaaTvqqp(`bS~V<X=3W}GInqKA)+U^!AOFgB1??Gb?`}}7KA)lE8dmiB
z6=o+|1y?cVMXy|34i!pn=@JhmUbv*hcNB%C0-*wrye#ko<JkDA=J=U(ppKRIHj7RZ
zS%qNPS#Gc<kcH$1JN94|N%Gs4gy;g_fO3cG%NjHN_+y6bX+$t193kGgKvN{DMAOxr
zT%GI}i+HM~g6#EJe+fh$GV&a$gG6NmH05@@c=tU4k~Rw(p3EK;CBHYo*gwi-i9Rri
zr*&F7gqVeAY+Z~d7z$U&_{??Ht_NkM<6=TSvr^J*;jkS)CSFM4HHIaReju+Tq?y_C
zli*GgSNn}d3xtsR@LVpf0kiKKK$UU3kr;lc6eAzVcrsolkBX^MM(9eD3zLQ$ej<DW
z8CoskkT7utlOW7Bhya|$np=~hn$u20(zF@;+>a?xKpi7XrIuz@Za4eIG|UJB`X<w3
zmBGMfc}K8g1fIh<XuJ3NwdVRQ4S$I_>(y1WFgz;+Kg~oXx<`+;F?eCTH8jj-aP-wv
z`E{HX#CfJ~9#_z2&8M^UC23@5O`f~`WiVf3phCXKV$Ram)_yH3WS`_i1Wewu#_s8>
zX0+Omx|{b)U2V!=xQW%pt5NO@YqT_^N=Icn>(&DE1!di7HxX#Z(JcvxfZ(>RSUI6l
zRPh?}nl*k3Q`?@@ni&Mo9Y6G8qDq3IDL<ckbQVO{x3+WsyLBGc-y^O$T@;5*w<%O1
z0`{kt?KBg`|4}g#pGF+#>27m@l{CwfJ)x8J56U(`Xl}eYIAATa37{`<OQj3or^iw=
zREN(h{2lU2aA%@I6kr(a;mO3b5o^Ii2vfM7S6oq@U7%^I<(<g0Oq@V3ij*Flw;&#r
zp`DF`)l%^<z>y$1y^`OX53+1P53%pd$MBHR*Y6UU6km@5nBtP)uxPgedD2n%lJzRy
zC4sbJKg}%!`0D3!&$XHW-<@CYcm1rG+Ny~?vP*}M+Ax6j)>-IQmk?L;Pi)xfqm)`W
zd|v$e<G4ck2rcw)gg`BwOqUXKgG36*YLn?y(Jq%U@zBG2@@;>xujB_iRdyre^WzTA
z>6Y_4GEA*%O(-o(_|sn$Yfb)>6XA1NCmbDmG8KDBZA<}=IUV5TD<!P9*UMthFEXk^
z$Ja}`96{Gr;be4Sld5{L+K7B}(6)kQ+BU8VS|?KxZ<JWZyx23Xq6`M7V8{IUrmz?c
zW_cj2nO4&C;2$f-jSXitL&UF85`yg};kOIgMIZif>|<P_SdioyK<T>U^iBw6R3VfE
zPS7jG8*d|WfbUVd9n%XS>(1f8qa-WnOIJJ}w6@WuOg=NGG<Ie>yj;$YD<+>2;*y;b
zt8tD+fF%h|k;N&|0Czy0$R!oV2n#<jQOV#XQ9@9^H8%sMhXiOrS!q;lKC+RQS2)D&
zE|y|Et>}%6EYzh(^7Okk>Vr*<LVXg-I_L;Y&Ui&6gFh3Jj;XZr(kA`_sK4JLPo9t&
z8e;J1=>mHS6latqCmEUtRaH%X`?G!kn}m-K|23ok@9h1*F(3{GhW{|)Z2uhtV*9_v
zfHW`T{>|vWzJ9}<<knE^Htlr0k=hEY7E#DD3nOaC!#W9f#JNMFgeD1{VoAOiYQOV2
z>ueO;9I`;bFYn?vGc$*5e>2wIh)bf2-$sAB)^baXU0!aY&vy|&XAPx%{XAGl+i20u
z^1O2ngC;kb9ubH*$U2gb{tffaZcUSZgM@dw5+UT!kapU%vx%-dyL&})y|mk_94Qmr
zCXM+OiboGW)E%-*&(Yp3Ra)LTC>SUmJ~Yd8TRlB?p~IQp3N2xlL3B7$BN*PQYqP$E
z@}h{3=?tIVv``Wu#7+t4ZfkFk*`aY&y?oYLt}Ge?P?-(Mo2!|_u4JQDcZN@ba+Hmm
ztCOY*Ff1A?x0{|4mAOx0%au3aZ?gqDD_&LL@G?{bcB70U9bC7^MQR{M`4P$M;9Z@0
zXMoRYs4osKiyS;u-wnmw+&xu9&j+{LuB%L(DtL5E6HJU@&(Pm9tIwsFnYA^n#hc5Y
zmS-=cg?&|i9E+l0pMQ7ys@jazSBvo~T{W)LjQuQA)QEV>vrkG;t_}<vL5pNh9wUY#
zIdOW@y_FY~i!JW^Z+UV2O3i=v<$NQ({|=L7n~ng=TC0heDmoxjlUXrp57Tm{4EZQu
z3w(!d*KP(uD?XTj*TQc2>Di^8Wp#D9qQh#cncLPLqEW|NVI7ziTd~D0?ul1CIpSzY
zEL2Zr!&DhH^bZi?Wl71$YSHGlYRy4OQNZoCNzve2X#VM|wF@;x2Ies5ZK|Tr+z8qZ
zP#p-wNa;}VWB1yAVd>CYr8$QUg4{ZT*N}+Heiw>niJy-)D~Xh*SKhT~I=v&_plIR>
zcoGt;94_Q)9^|Mvk4#*C!!F6^a32ga)F`^wPNtxlWJGT^Hm&kq175Otl#|I+QgDPb
zqsjCIa<{Lprp|M=Un9ctlcS{_tGh7B`LP80y9e0lJ|h5CvL#AayKPCgWeIz;?HN)y
zu>K}_iKVP@8+u`?l$Vr+L1m#)Ov&-5_&Rj`FYPb3om$|T;6%gG2+gS=U}b<~4PlZ}
z**-}MU||I$`6m}#K84Ci4J{yC*0rsY-KFcCJ_I?30)V(Oh)iBM9Y(G$+4d6Keh4=N
z^RN&<%&WMU8xy>^u8mC(&GJsEd$yV?198NjjXim|6Z^6X(3v9-*Jw&B&e`AI90w7l
z5swGo`928(IAxk2miFSgem$=ogp&<ICskDBz>)Xrl@(?UX(W}0QY(h8Kcq43Or&{j
zLNI>~CIA_Qya!R#>dyy!gj<)1IshFU))~vH?JWmiGdMPYi=TVLKw#mUs?nxfH?osl
zcz{{bM0APaQod<UeqZ63N)g@PPaH1HszD?ZIfrEN?BygDqhlQ8k~psawIWHEVwhMY
zTv0s|AxZpQg0`}P5dT$V|6uk<IJt#gUg)Itr;K9&cmuWEd;Gg2p-7YVq5RDe@N2gJ
z>n>R@-2|uc*}7@B-(xHH<Iie!N#Kb?K2x~q%s+pj11ehieA9laH<QSM3D}4{<{qpJ
zHwn;pf^w<!XBUhkONHqvx%=g00eyGl$s(27ksXyPX9TwkV^)5Wu>&VClRdti(deee
z1!k-k?)b`Y(}p$Yb<N9$SDfs-^kTLC7}2j*AlfAUm=jP(eH10yak%g)gW`~Lv+@^K
zy-|VUysBpXH5*{#5U!rKmoX?gwX}o(uLG96;T4FNCGftNuI?C&r&$^{2)xs<SO;Kq
zUIkH&9*GSLlK)X-vc#@1rC^HZTj&|X5I-^n;x#*I9euE;4+s)4$*fIuJX@aMOG_M(
z7jd}8*6{q`QH_KE0oW=EyF_-Klw4H+d6zQ}h+P5%mx;C&`|(She+ArG(k(2Gqixb{
zv(oSTwVIw~6^{Iyi_Mq#?f7E$N1u0eI#|%uo&vo7^{q|QS!#>c3gT&pIN(hb!kSYM
zs~uPTL{XZN;hwa;ZC`(W@TU*(ew1*&oqo`;0bKTpsU8jX;Vb>XBcgquz}u_RiGpcI
zR9Nr=g)SrVG{f{SCZEK6um_}%C0f~&40hQR6IT-=ZsTU4Q=k^?D@%6%4*PDvs?)fT
zx_v>CNMME>9$pdDSuAY5)}A`2B>oAQw(wt2xYu(2ByjTgu+~iY=J=cV>H1t;#C2nZ
z=moOyz%II6{mb1CCZJb;cZZAb73v(X>G1HRTz!Qx=43T^v=CnUx%}Hv==)^UDUa+&
zAXW`&<UXDWiQ`1CUQpt8ax$qqyry6!fH`46{yn833qJ$NhBX6xMW^@ZLHbO{MMC%I
zNM_WU6vts}^_n<z_WWph-m{Fxw}}02^h{9Id8U8wIN%p-Ly~uu0qC9}D(;7GU<cG{
z%N;ir95W@%0<Q@%q_lvi+1Gy9Jthb3J+u^k%e@8Ugc4%DB@BH)1%=0^b(TyE+cA!&
z1X>9qW9Z$J7cyqY)WXB*8K+aKrvox#wZHK2paxC&(Vf-4la=EFn0Bb`9J92qtbco)
z-0<*dNH8@i!u~-&PJ7*<J~@z&pPRi4z8Y$fin}KolM^a~6A~ZRbT?Oc3br-{P2`c*
zq-4)}upM`HD~2(WUWCkc(r_U+621b({ll>_3_MqI%-?tjGQy)^h+_$a>Y5%2hLS9@
zI$aMPA~8UE%oOh_X0}s8BX!}Bm32O@B(s#Mnt2WOIRmUVg5b&N`e5d96o}p4-r=pa
z4DW~tq>2K9o6J<dd(ZA5N`A9iYImf23`hptYyJE_rFUHRND3!vo=7Q0`z~eo!f#C8
zOo1HTR8acvpRBePsw$r=<26vn)cF$jM9cgqu^LU#tF&X@AuWAJg?QnR)^M+aCzmNH
zcX<o0^*%PQoHe<~YJMJunr?7gKuNKH*r=yJY%)S$uvZ*yn*7huLpoWADbXw0mWA*L
z4Klty-NZ`_8b=jGZHH?h91onZ-txS+E>PGyjA?krq;l=smb*BvXYN_H%hdS`*D`i^
z<5!S>1?n@O+BlHaBD=nSH-^p8-hNaX@p|8r?yCjIKwNXy#DSivQXmd6EAONIB*e7>
z2tZCLo8s*2s5SQ^kYuxL`EKGFxqQav6h73|x)*dd|CKkK!K+2?gI%$6dR!pf7v(%s
zzHgf+adWjufVGIM4W&xLqq3*n`$7?{qr2LfLs%<uVj?=HX2*#VR*0c~H&qD2c5=Sx
zR#Djkrxj>9DA{$ohCH8!eQQoe>F1gfA~T5lOOrhh%GTj`m~#BS%fgLoCG!DEk;Idv
z%K7*#4Wt+lEI#+y$^d3>V^KEq!EVggqoJ$#l+vVj`{CF1TDU$elfB8kL?T{UkMxi%
zLa6jjFO);4ppn*bEOHlc9+AMN_~xDvhH&Ev`{z;8@zRD*h%<N?VBd?0C?zNR`cNjz
zw|H`un?#LQlZ(mT9vE_??dR&ZwL(K!5afcOH#4U`=<uPD)k-`E%cS>JKBxKLmFxW=
z)t^#?n3Ph0u@FvsfH3GWe;4jpSGL~3CKZqv!&`j4%d~B)e3pVkRX7N9MW~J)zLaj_
zPY?XQ|LlJH*paau0+NDn8O}fq8j5}POtUGHS&lK5+%oEsL`7lHksO^+caRslYJ-X0
z`D8n5F7#{SV#v+N2`6~|O-{T-LZz573KWN`jGG!=Gwci_cfVjaZmFwbgUp_Z%|0(3
z%zt=9oz1;RA17h;S5nGt=iuwKFkon2E%6q4QR%82-G2LXk-^=pXk9nXb_mB)=zgr}
zn<WajrmiWEH#D9+bka8_==MjMe7vkdl$~5>GRFY&M5{DP&Wu|Owl5KyqY;6w=SLDC
zVjdIWqSNsHi}wUs@q^&JGoX0!skn7HH(1gCz2sJ#j<rl<W^|*@I)aVHN-X;AUtE@_
zEIjA_IGSoZQdW25`f=XhsuN6($BMOb!C5y(rG!6^x1U`lXD<E`cM&?bN$|Bri2PRp
z4>>-QVU-Okp}r1?lpy2rP#U)0q_Df@lx;fyG!K3LXJCZG^*|uW6gw<q8G!%an-So2
z&UG!PygNQdu26x)dF4;JJ#A{qBEW<JJ+1Q@-(mC^VZ~7X)Xp^Rf%A#>nv5b~sp*X3
zyXBX%1<1OfqhIU-_aK*qLyQCAM}}oa8Z1Xy9?p24Bsst$EzNg0Kmb-9J_f(o4z<vT
zSVjnWkuHpP=Z7(ntP6$`A#e8y36yQNhWC^n>b#=$F&NWJXRz;EC{c^0Rv=VDf`dAZ
za`?*_+)7TWy0}^{3jvb8=Yy(+IsnV|qFIZ|ZquXQmRW9_X=5}x8qe^}ufeowz62uM
z8%^ttzrT^*r4IiA<ui@MWWpJw)|Z$%*!k+@q<gUC&5o;8bUtk^Cg|#<{#akN>FezR
zSi}cSlrzwZe@nek*7^>pqKQuP&mVtNubI`*Fg}cVMWFEN>G~%Z{G1<7&Y9JGI+FYN
ztXj4Zo%fqO@4U5;_s({ax^D`47C^iuGeZMksuB#5_g${%R(^i-f@^ZZ(EuKTiXzNU
zf~T@d>NtXbaT5!FkJ`grB;X3`NRQP^0u|Ke`huVhDXI(jw8+;0wYG3?Il*)TXy3hK
zisUgK)ZWH7GPyfF0z2G{GBJud|Ltr-DAi;}p<^#s6^sP41h_b&F#QjFji*Y2)^q8Z
z^h&lACr-9dVq@?=6_*6?9+)m*hy>}ENrR^X-K8r-g*)+^qA*c#0fO2`FYeur3)><4
zh#F&uor}vESXC)kyaAzW4Ra~o?V06Q_SQ)1$-ZLTuEDO&c&A3qrEZ%(n`s&1*#*y+
zWSW$_0w^8$_N5Hq9gLHHUwn$a?_3OjPKf0RAcb0x_cLx<<HtxedP<cd#&m!JzP-c4
z_9ahFqXZ9>N@`(QJG1MlCQ19)yi5_nOP@9fiIfRlNVUz=!8cj8#;qBNB|m{t7>IS9
z=*L~FW*=Z?4E4TSR9T~X9O}Gs>via^G!CwD$}F=t(@E9d;unXtJ-0kUWq9a-W}N6d
z2EH@`Kq!Snv6s*B$=s!&naZIH6jFEw;)!)WfgJSca1Nyo2%c0mn)?GQrhj|gCbv1R
zgvvDlgbgU_?oxBSrX}JrKd!1hFy>YK5U8((rX!DcjBf1V3lYDfd%xOy;yovz%G|z#
znh~iSUL-RK-xojW->KBeOAL?qL}sp0RmuJ&SddV(Mo5EwjKvyaED^D^V*1QM_6tl)
z?3mdMx>FlH3$d=86SPGwGsJ=QCKe{n1*GM37s#hyi#MBlOBjIlLu#c6!0sczLqSFM
z`MRX@8TTp<`-5MZh@@|Mj)%8{K<~(>-!@}U8E4pM#EjF#331)-MVYN@o3TF>L;HVr
zl%Zx)y<fZ@TpMcJPyi2RohJ4b`U8wBf-#W3_8+e7?oNN(Akysrdrj~k6#_FoGvohT
z6a2Ref$jh1LeP*(+H6PYy;Q?bV`*Utg!G4-Yje?6sc2`_xQwq{PlhJsKx{%DCn-oE
zYiZNI{>=shjK>#=X{qFp7XpZ>)5GiR*Gq_ld|1x&C>>3Sd#Tb>EB1?;BH}50-CP!(
z-YBhV;~Tcr|7>1}f{3Ju3<9u;qpI`OwfhAY)YlEfka7oLYF(eGV%?U7>G`H;s4~J1
z_DlxB{xk@0JxzISLi_0!<zw|IDMi9HK+Ur7<=cNh?1(=H^nqWNNVZ%cVU*OzV4J)F
zDM@&Gz<{HNo(mQE?)!bh6r3V-uTlFlpp>581wj0{psaau+b!7jUCio;`ccP=^C0P}
z*u(GlMI;`fWEXFaE^-&>!bVB4zPw64!Pw}TVwHh_4VQ!2X|r3VAC5qb=fnzTkM=fP
z_GE{9AwnMAqv5$b!-29F?j;2b&u@6uI8j+4&>->{Q%I@%?fKq}beclyDgnYGuaBeG
zn9jGf5bu60rLM##s-g!X!;6H1EZ%tyWMvL_Kn`*_gNKPzJ=dXH&|4WA?ZsoFOVjjd
znVQcHW7p?x*zn_f?1`hm6BS9Bwg#7#z;~Z|dmV9QnjB_7>9r%<hbuZpKk-)gp)@H#
z7OGfQYu0bjEWBA_c7cAoxBi4NfDc)MjE$ok)zO(T6pH)7p`I?<S=b5dOe*)i@L4z~
z(Qjzf{j0$+wM5K+3Z6c?vVR&RLA4Plz`T~cE-&p;A7N(ym5*(m39{l0@Ba-S95UUH
zFwJY1;BC>j%%^(H%}rEKRu+VA5?<l@2YV{;k~WgzRm1S{hZv2ReZw8x;GJmcieJnX
zKOKE+R-a96nZCX<)^fbH{6(_?qZA)xCL&2KIWSqRn;C?aG}4^koFvwxOfi24t%5v3
zGjjgL{sLDXkYVu=vj7`a3>DsBgzp%#96)u}f-D%j5!npHuX6~Q@lUp`0u}yQMNJ%K
z_|}@ej~IQ4>K)(3ygsk2=!C^_*{euOKm#p#49w7hL<1GwA4p{c*fBI8=unWg?C8`#
z?|soduu59I`18|55QRJuV<BzmFB}=AoH6#uBoW60VV=|8u>$_910BWXWvh83>7-Mg
zWXg&F2?7qv!tqezb3R&mn90X_l=-yyyhi3|n&JdHL|wb!T~CX8n=Apq$wLU~B@D%E
z8^MAzq)aPIV4{8+z#E++U7EPmY~1;nh)CyaOw`rohgLnM1*NNxS-wa@zR29zTEDI(
zPAiD?aX9o)W`dETeYT-(aybT_FeH%i;X-zs1WOQk!<gr@4woga#DuX%j|)R-H4xTY
zUsjk5mQphr)9z3Jo}cQu%GFb6rfT9#O`3iS0XYG~oGB6SU*QDQBNFiHWIjKCdIQ+9
zL3MlClENrMV9e9>-}fP+^acXE-Rvo5iMvOi{b#;Av@eww6R{u(bZr88PGht9F9Q%Z
z6}!_jN7YK^;w6|PKKpzs<!X3jqD`8=4?)O$t=ZPlazLnWPp*UjgtDo#M)QDN*|929
z_s^<vuJ&LVamS&&+-QuIQKOl=u^E4^$U_Xx;A!FF^FIe!?xQ<4=%UOz4dofhE}l(Z
zObSpCsbCZDEJ^ziaD9z-)s_@}mys(jVjoKQhWeVs$}w1V8g|dr?*aye8291pD0_<w
z6V1zH3qLG;6T60&8jHw&T9^%Ho<vm0o>!?zbIUPde<l?&plee5dHD?3>%H6mWN3$N
zp^O$H)7YExRFDE);Ck1YZatTi?5=RQi=5gGTOValMGYK!#8^{l;h@jS1v~E?QQx3^
z*TUnp_P=Egxyw6g7&BJE7>4g-Z7_`93ltloJpVq1ptsljWfB4DRBhNIJg8c8Yp=dE
zE$htoB4++8?u~ry6XoR5r*rwlW$#F0RF%vbES-Og3#P9DRuZFGOL^EKq;GqqCp=py
zmn)@UkbzqMd#`Q$A(q5?66UHgP@d*CC%1iEAy#KzO?>=?iK*e9<WdjK{n)GsM<Mm>
zZaMrj<8B@ZY6UBiiwdhSWL%xEkD=~lDtv}*$o^)x$<}GNTmD+8sS9O}eJgr*7SU=q
zFOlvJQ;St@v?9-P7awxxw+gW&=fAt~6FR;JiO$U)G}pR)x~poJJ{N8UP?J)@YDdN;
z`DmJ5M?ZD46)}`#@n|V3(dJVql(t_Ya|_*~?Jz(xJb#yZEw}Fdi4Jw)@VQtF%V5`J
zO7L?4@6>V^D$}K`dozKv&8cQ_)0Ys%1<u|}akWTf9D9IQ>{sf-T2_dKgqA8+RD5PD
z5vQACa4x*Sn+BolVp4(INPQbssqCwW9k<t!T)_r?UOdOfE}a&Zq={WQYEF*16^Rl_
z#+aPaKtc5>dxX!q1T&pY8!ISn@l<mlK0a>)-n?|?qay^WR&dk&nV6Pg(RcFQ6<1V%
z3#L=~_4oxw-bWo_y%eF0$^!4DGA5Wj>{oEEQgWcAlj_4!W;>#MS!b3fBY;h8>$F6q
zT+$@6(#E5Iz@|nWUBVkda1PAbrQ%;WHRbgh#FEiKC*6ulH9K$}cqUIQSXC?xl#gcO
zyuLfqTK4ro%MKP6({kKckzey?jXeFli<TX=>d%HpMo>+#u!W9FM{AMtYyAW=xKB$X
zU~L#N9Ni6G_T&Z>ONqEsw6FhLUH`}R@G#A2fRp01ye!4S2f#G#D^Py>q<vN}Z0xp7
zbrLBX@8ENNXPVVU_p~1miVnf!Jt9#@M4*6gN*)fQb8Cc-&92S%#l(HO<Au^TP%Nd}
z5y<y(PfXIInwO3lE#MZ{jpx)344__976eNCX=V&vLY1otydTW_Aw-WLzU0+JA=lCR
zQKZB!s4zC!L`$1J<(^|@-$GAeCO-BJyj@?|MmMr!aOs$5@JiU^^jxUqDJFBJ;OQ%W
zP-qXhDeqr({fK|u7Ko~{)rt^w_bFB19y<Ex5Z1x`K5+T)CfYwe%6h~f7_v!`nnwO(
z@3RpUE|Zk>CL~a8p&h=dR4ys5rYFIF1<-RdUg(f0W82@7?)NDM)e%b)T%W<>+qEC_
z*>pKhee9=`@QRCrLVnjkb>+c-e6Y<GE{ez-^Y{#~_y(+d2z=2Qu|54f<9JKMzR2N0
z7e~?u;MMY`1mlK!#`x^ieuMx10?(Cb5&rj&>_2WFMkW@v|NO|<|6A_E{(qAD^k~S$
zZL-4me5%!_3Dd4n^F3wchk;xZh(tEW*zMrYNj_;t&`=Pz$j&`2S$*bl5tC@8*2L5+
zMC#}_pt3xkOlR%K|M)|chM(n~*fnM$ICFi{7o8|AeMz{Uy*swfRi%z!h4BG>>v!a?
zr;$UULusSYxG|NrXVL8jAgH4m%oNRqpiDZS96@^&;eFqUE%oB)uQth5U>P2Gn0MrH
ztj4<Wh}B6ZTplw&F~DV-3{kgx^~@?a3j7`Mz_EKSbTW<}urheu02a_79^nP|-V%Yn
z$pZJ=bR)OX4UD_SiWsoKrTR`cm=(07X@US}j?7GvO9dBCHUvt)3QAF02C9jI8ZM7c
zdUcY-E|~LG5)V)$Pyu^sA{3+Z6>`W_6_jj_An8OP6dNa<u@i|rwM+dwg&GhC40lEA
zA9WYievEIMlUXM~6V)j>1ktCw86E4cHse@SW7{^I?U61|=lG)G8#N(Wtbs^Hpr9QP
z)JYvB8Sxa+V5H|)G3evXpjp8BMjBCK*|He5MzUr_go?+tV6d;iX_8%rSaA@oC{1C2
zBUhn(Hi|dz`F-^Cs_X_mK_1)9Fuow__S%1%ju*lz0YH`3%`tdsSpG?OsKep5$v$er
z61EX3c*7|eslA?@SM;il%{V|NV252rtfk-zhNs%daF<i<3?BZEB!nZO2b{l9qG(ng
z8;y_0-68Lbj-xzD5sfC9!?{Q-kbPLGH1W63+cPKZ$nMe=cm-hTZ7_fgD#!v&GvH-~
z)<fnYb57JY*VBCBxk7uI9Tj-}^#gpj_|OLhJRs;Z=IrZZ{P@CPxpEF@yys8a)^`#7
z{}{WcF2SNDZPaPowry3~wr$(CZQHhO+qUhj^r`;N=)T!E`#-F)X2hKD6Y=^5$D>zc
z^?Z)#fAiWPh?;5RS!$UNS<Hd-8_z*DdIx{_HdqI(55boQ(>K$kASI=aPWv!gNb5kh
zS6lVhwLFReCpgIkv6`ob?l#-m826A?nsdb`o(EqpDlOM81rU!l-9N;Ss^V7Uk42Vk
zQ$@-54yFb<VYKxsHF@X<f$J(wSgW*;_+PTF9}Q}lhj!XNpmoGpqSLUUdV@ijod~MN
zxNI*ol?g_tv2ilFFjwpy0WvIOnIjH@pCrdSr~#P2X%~^F8j8hinWYL;Ei1oFb@&>^
zTQVpy&^I=8VV{2<`XrnYwt)u=Nd|2h*ecyADj__#ltFi+CjG>f<)?ScO`#Q3f;t{w
zHm<dXhw+mu5S|opHO5%dDQo&5-_C56Z-rjY;vytTgPtnz%F7h;ax>^){=I>!G8w(J
zKNQJ=JIJZA0=HY(vmGZiq!1#zz~Ac+4jqy1XS22mF@(<FYB0(^i==nETZ~9}8Ik^p
zr+D5{ZLFMh{8Ms&>Vz@<j12S+Gb3^|b;u@lNGoZCn%1zHKYD~J9B2!IL|!Z}+w5E8
z;-%f)FRVzNQ1~r+EN%m`$wv1>YmE`$3fmeU1!+}qTXj@}ZCz<#zu#3otplar{SNZV
z6j7-pL^y_bpfGjMo7Loh6fZ36M5tfQ6k2fw8l&RhGGWUOEfovjI$e@YI)*@8teLE$
zs+{o=?Ajp7woU*-RH1P{jTCY$x;JMt^7Sz7_E4~O9x_eyWnP$;=ZNYj{0YMWrs_!r
zDL@*=T=w9)$*Dhe5Z#(hGSa$xg26MDu%6;C2Ne?OlJ&>=1_hPM5ir&;BoT<)Yz7aO
z6awlBVqh(8)BjP2_Qk}s6eQ6k8v=wZ(Xb8p^5o?UD#L3oH*d9jx;XJ8fNe1<I)pI%
zjA6Ls^)MKuKq*;H#*;q_OXyA;6w>0oT{3plzu_gnsXbK?D*|&gIH$qgYhpaJQF`}k
zZs6)+UC15<gl$HWO;WC^kVYhOfx2G(hMBT9+D3}4xTCzyLaOxOP>9x1X8A*%g-Dj5
zr*P9GD%AGsMOf2gyIcc%!(=~yJf=N$4_+6%E!nE3<S?(h2jZ6D2Bn3{>ScKwLTn7o
zO`Nr)^;B=Y6Qt?1v~yarVa5@ePC4ymncka&wbOv3^zj7L!zst{PQLI^wF*E|`W1`q
zdJT^+*%umSL{Uj)PZ@#mD{djmWiDVtT?;%kyil=cCann|abZ!QKsg3PH9jt<*MyIS
z>brKPCtWEAWX(;sLh$hUO8^+bV=EBsVu8*Ej7AQ${ETvPl|o4zInMP()#L*RVMnn1
zL}luD0R9{@*5rD=(tl#Awt8NcQO(8HCzGBrTCoc;2v2%?v?bxFkkw;74gyZyT*68i
z1g68DjCi_3PP(ML|7;eG+FLb9u1ZzMn`<&RRb$_P{qb&!JPfrKzXcSRL2G^|-Wmlb
zQ}p;T2}_%EEeC>oC*GYekhe74=*^wc9W!YQ7xi)J_~QLcoyx7SsUlBRA;s-e$86oo
zc{2&pwzuD?*9?w5H!P!u`5TnjvQIKNSJHd>?1OG1h<54yg3}XL#|fPn><J*+{hq?u
z79g&?hwjsZ^Ap$i2N)|vwDvy^<^Ols{!f~Mk%Q&`mIZPAr#a^Mugr0arq;hS1*-3!
zp1@yHr20(z(6>%Hgfhr@q6QtWgftffd&=9$2offu7OSFjCB2-y#ozV2=^WylQCfM7
zdRhk#r`o;uS<G*=k!Uf-?}cBst|*SquD>^dQ+CAPa!paXx;oY7D=JP8CtHDd+B>@C
zY3|D5<>E`{mTnE_cWG*U`pDH)>WRuGk*I1{Q6s*ryYof#d#a~5fh8H9lS_#s8fZE^
z+BCcLjc-%uFY~t+ob*nqD4rTL=-Yi>=cT5|-|}~HFR5rbl4KmZ)Gt=QMe>qJ9ezOn
zZo@Q5J5YiiXi^Hhzc6aHv^0qvRaGe091Q~$OL=X}rpozbha4hHc{AB;mTxYG=J89*
zv5Rckt-DIITGub<;f1<-hbuF4b*L6N*d<9JtE!zXmpYy$q!pDtM`X61yIi9$&G+g)
z1T2ZDW~mfIpgT&tVBsh=5=c?s-~#doC@HC(imnbvqV&PxC`A-6$L3Y-2-IZ-7Ty00
zSbFGUdTdx-k<qCqdYwwA^kkLdb@}Sq8PwQDy1tB^m&U{zd3kLodUzqjW^9uv*j4V_
zY0*OnUj**kpRdwd!<lV2XJx9IfFh?X?Dt;5GrxO`Lg7Jw|6SZ;r$+w7>oOu)TEAVR
z3U{Ay>@JnTZ%QVo5`SG#v)dC6bM@DBAM*XVS&v<E`ml`g`H)&<VQ~eOGQf8^zI)jj
zZ}s8ZUY@C2hzg&>RU0jCcfiSM-g%X5i8QvL6CPb$zJ6tR|0!>ukL}bYhy>5BKW2>b
zNTJn)x;>Fo^CPB34AQV@A%U$!pJQ`zQ-6dypo|>(mm--XqCAq2W$1`0BP88{y3nqS
zw&9bWBW2M4yjwYYi#kDX+7^@7c$0paVPnY*mkFgm(XCSMGi(&R;c^!0x_PaEvv2a7
z&9MK>5}Az7h_v%kBud|B>!;5V2q2fh$&x3;3{nyvTx2@^4MCfoqsAj1rmmW0$1fh)
z$Dn2}q^CE2Zkcfa5|2l}?bP@&W}Je~8h_IqiQI*DGVgOKKx!hIiJAP?SzF#R*O7aX
zm&@u;q(lbDQo^O>9X|>VNqoP$B=H?Z#8WkiPSZF^o>iGdq>3HO0tSG)t3QXjw4$hk
zO66>U90)RkhDiAhm_PMkuiTzP;@Fn*@n@NMm~zN2{BX5|Uj&?aus45GT22z*+W|X!
zMERTWQ_$HlV^6Tj(Jb>85g9o$MG!5I;AmA~h4Bs-0fk!SxDZ=3J32YybO4}rP#7mF
z4vXEq7WL{(y-o&g$q#1UpvC*9L~_J9S97H-;^I3P)i5=r#8+Th#<5j0P()VMC_M%9
zj_e{^rU;bFpbN;+*7QXog>TNwt*B={rCgvdG!R;OufkjqS@3#yg312f95H^&fYk37
zV<c~Qh+(R<r!hb}=vWBoa2gmPnNl4~fm4PGL`Q9Oq!(c=(C#=YVj)#iu51jH?#Fo>
zT5b#XU2YT52dA2j%o+`5D!^j<apdYFT8!E_Ku%~Df|QZgN|Xn=a^tcif3PFW1Y7i@
z>Jd(U58x(Fo-76Y@WIm%t|bY>(PaUzM9T{JmMI;O1k;@ShvKtk$sE%_gH#}+3f`vq
z2J(J9<`eG^?%Stpm(AK^7Pzu>@~1`e@cx=@{aCD$&zh!E=V9ilvUZrz9=|ITUQYbT
z#^v9Nomx2vpz%nVy8Q9vX<<8HG1+(;nB3r$5)&4K3<0pza7FZpWLV=1H-@C)uW~-&
zF4xMF-yCPSMGp7A-5s7*1%xJHlF=BC>~sQ#MbX4{Ga!C_fVN${t$hS_0`_f_Qu9Ig
z?CAyb+WN7ZaqLvgfX$pl-D}i&Q-*r8w;h`=8U}3zgh)?rYin{;708eLc6+dp-;`Nw
zC>j+h7k0u4MQ4+A3%USs7?xJh7W|y&Y?BDk09VBUdZ~T!Jlmoy+r)#iZRZN6E7iJ!
zx<W1Bx75OZKG5}kquZc^1@h!3L%=UNQa^qP;R8yXvr0Ev%}T@4YvQU=y|hHm({kb~
z0ziZyPWsu92A)giZfJ?AKrIAmrIDEMK_$@qK@TV+kJ-pUg0n+kt-FnRn6*Q4!`*@@
zf!@Tw6N4Hk1G4L6-%PM<lhDR6=uPVh=?zz6xWW$8ja0__Ms983ii(T<E5{C=7h`vQ
zo~S+VA2W%_f2#iq9z+2p-x)*{E9R`J6>aPPd#^*mBu3o4ht01j5iP;~W0;`Ju2r|D
z%=Xa$yPB``*D#ck5ulZ++f=QnP3@Mt%IT(%ww<{$-c#o4v|Q87-x+B6{+?0^!Lf&*
zMkxi9k0Q$Pp&)eqhV=PE$AuBHQ65Mr07Hh_sc;Wrg7j5*Ia(ntl+zO`K}(MnSS!we
zJ_gv@sHGe{9iA+415!xO=Q~uGNHMdKrU{icDn$)%RH`{5GkG{MIb8V>wq;M}2A=mT
z*R7{SGn~SGy}7a4jeM~VA)&rag!l|=ju@3`<rPJ-6t_IF81!ZLDng!4>8vwOt(VYg
zO<G6~iZ-IQDzZF@gsZc+!`?e&G4fP}Zd3vs>euB>qS5~?>J^8VSi>e>z=X{QN03as
z!epUoH!pb+2#2>t*h4?4u+1cq&U5G2vrFKdsew+4YUf&LRY<E&?fB?zN@@y499Pk>
z<dg*{h2Tvh*IUb?ym@sgu7FoMCp%mm+210Yoj-wj*2avX-eNQNmDa?XGYudv?I)Qw
zQrgduahZe1`oream$Iw$9%KC9mP3p@T>Kg&1qAz90LfJNLxb74Na&Cqs7Q}PE|`@X
z?!^j{)HiLdTl^gwg%)|EBv4C=4IO-BX<RBA&(5R=n6PzMl&Qy~r=*D#3a8>mu}!=@
z*&pxFxrkrlJShdYB`WsV4pr{k7p5iY=P|X&p$WEQ;ihbg_?^$D=E_-07hDEz0g9ZG
z$c>pOzDi4)!{h4NGppVQNse-j2oAGGWsJ7&p9KSyezm?|s(g+H^w|AIDwEM8egi&5
znRMeB;fj=33aL7?ljS2yd4Ef!7@0r$OkV~|tk@B@DCPJH=P$G3!Zd}L9fHtsC@-fx
zdzlrwrjjYF{j8{r2_wRA6RC=P2U+4J#0i5z(xUeK;eAS>z~w3;D(<G98?*32A6<y&
zLN{CUDv=`vDmPgQXNYzF1}dxFo5ZICbL4s6r{`b@&`gH=bsPQfa+B_q@e6NXeS^gf
zL)oV6#n-R$d*9tzv4}p?H)Hz*spkPBsIaO3T798#lq7IqDgo`91&a>D5BRE|dQqO!
zj>6;2a-X*sc)Onj-P7M_HVQm<I=5x?e-cd9LI2emR-+=gU4iGk=?IU-^?Uj`qq*v$
zz^ZaH`0na;Nf#7@*5mVL4e@MWHSxxRKeQ_NF)(v*cTHaWjLVHhC<MuHE4HA}J`{Yu
z9(Moij9#qqaoA~to!~OSt$(12!xwKl*m&rmZHjw%?YZebMHls;s>$GPLK>}9!h5fn
zi=VeoBXq^7PYZ7JGjOxC`B`5101kE%q8HMHB6l{ARZKOuG!vbBIn}e0o8aUL@vXaT
zlICPFI(SkP)0i`@%MltDuZCV*taR~+E>_pvHZFT2xJm^#n-2-ozY$Z9Wll&izLDEW
z$sdsW&olm|yQb!62zKb_f%jU|g7BrncR3H`B>8iYX6Xs#+3HCHVwetX5)RwRO5vWz
zIxRgHt(DX>jXdC+L|UEq_sBJaF?*CvRxO>d5f2N+<X}3CK8iFbi;{>8b%#l%_N5)f
z&cw98`a=>TPV0CGbYl7z*rpWU?@s#G;-r*H6yh0+UQhI_{UMEsgUNc(n#)vCQ!whk
z1dZhF;Z-{0gHrtJIYS4sR7lF;-&VY`l&j8^8m7!4kZHA{FQWw^<BgPN^1?A_ECb7<
zm%&&`e2W(zYvDN61qn02#>e{wSs|M^<@SG@R4$Zs3)f~&pb#B+u+nr!V@yF`;C=<X
zz{*@2Ia81y9k>wE7U4=T>u>i5VDFqoa4t57A3X}NOh_aGhzz&>#<k!d#=F^Wqw0gk
zm@)8W<Vm!pzfMd2@?T)``&?%3Z0JuFkry|1+O?`dIbV(K;O1Cj-WkMTqPM`1v8fR)
z8pH2k`P7`U1eW9y%iSh^y`CmWKf7;BFacpUk}ECrMC&W{T!C#HvO#vTI0H#STeL-c
zyq)!C0jM%Rs@JUvlWjLk6x8kYOLQ~TtuKUdUM3VE>A!ZF03D4qs7vo8R>EZWV1S3U
zL%LT!*~ZPLcdEetMgUZy!@(fWT*Aqx)4i$?%P=E}l=pj-3iaG(R`7Yl%rN6c{NyE5
zez*h*(CQQyo0`-Ll{<P@cr0j87e2Vy3P@#7J(hxFzz%2)`aw;Zg6VPD(8GQ%5pM@-
z?CWjgq+qC!Ilr?9(WCdEPPOm1>Pa#i5UpbdnxEI!ycHF;wcvVJNu=}mpDEYfSl<qa
zNJTJFT-PuPgs~Xwf8Vfe&e1<})VF5;>ITb7&3>64kH*O;KowO9#78f@tXMm))@tyJ
z%H7)Lk`?*=yy*q9RIB@DhU86%QAYFdPR@W{b=j`jTm{WgIAOqoCpyI+%uZcAz9U}3
zD9jOzDm7}hxhpx7LA?Q|z6PPIHDRkc_3Sne9os&ag5M~3ZfYNgTN_B0v)ATF7@wHu
zU(QrOuFb>K{Vmv7{`|8s8;$(IxY4O}qsQzcrWK%cavS<&g8%ah$f3Y9a$=Utr)7q#
z$g61f-Yq?jWHn~hDXZM^r2|BzTd`bHAZYAs2u>qVmO`^&Z?Z46aac!R<Q9Icg9|7f
zPYV<$nE(Wa)}2`C=j8I>_Vo_`@Q11TKO4~hCHKs1O#ipDfa5>OJ?DQ#?rSu+9Jf~g
zXXsUSn;<h$w3B_^7`*H@xSQgb49C*NdIp?uAdw|fKA?Pa;sk#Czo}Q(n`dzGjoU0m
z;1VGAv%Fq)Ew7+o<Aw1};l9szD?e0*Zff{-?O(|kdR081rXDT%U8z-7W_-ua1|1!W
z@D8caspODaw{?NHKc4S)G=ZO!46##01GrN!D)V%qTAk0=VT;^3VG@<KkHrv0EGAP+
zD)+qNdwNZG@GeqqPejm1+Iwgd*tdS%tVfnpKdLQbmSXHVT4Wq})XzqJOB5y%ozoq?
zz2Q+L(a5dg%pP+G9M*f_mt<WYIH{fyb1$|$T7Z8bbThGc_4x9z>cxd(rvho)^Z)FE
z+BJY;x3PBhp;=&vc;F~^8O?OgyvR-Ud48U9OBXhBY;ES&z&N!%txt%AHE8<i8@WN8
zk)II3d%*l@td}>tfqN=4l(?$hb6BOAX3AdSvvy0*9I5;#<vV-Xc*O@B#gR{f8nWK~
z%SJMuMAE68lhJ27IW?T^5A@dA_&0tyqOV&`KW%rsYi-?LGV+4u!|Q!5;SM-%eLrnn
zH3>xVlfsCOf=}EAsytWLK09&2J-XNI?vPhsp0WRG`l2_kVQZU%xptl+2I`>+xNX;L
z^nMV?;e~mSHPHKa4rc1c-AW^Vp<X~YH^tKonyTl0Yro;ztgmK@Cp@d<hG`haJFC4v
zQ{woHj@HZZCWkV{xtG%KPN7cl7UZJrCb1W_87KE&jGjflMsY|CEpyQTSs7Wp7Tl@6
zFtFU<-qY*20?3~yFhMOf&a*86UuM6Ix31XY<TkY$Wf{eZd8*comRf<U0;+h9c;Ys`
z4JaOzgqO_V*oGS#Il0|C2)32aecsByb%9$i)w=QDI<%ySA&8)mX;{wX1NByhdbS&&
zZn3#BoM`r+a8Cq|6xen4V&bp+p_H;(dL##1RJU=#&IWT#yBk}tTgu1Nx!%AOXdFK2
z79{n!5BNsdV*I*<F2aaWSBD3m0Z|}iaJ$%pn|)g8#xtM_$oPT1j2SVr7=4?q{+not
zhV&VVU-h78^KJ13#8areNbK&x(ce&2Yh#7U$o3k}2C7$u?p=bAPH9F;;-DEXjB#Zm
z%U<meD^-xV%~5MJTDr-~XEd`RkOU%V?JmS7lsM{X%Pg?#IF;T5SYS*uzF2DVhkLy#
zVc7@*l?`IofpI|e{*lAgy;?)%Pqyct%y`O@1KIK-KnB8<4ukVJQg8)}xmdUfW~vE}
zb5V4VGyn7u6KmU0SUzu9X(|ysZ_K3RzLWk;s7>ci>?*YEOXd!*d5z0stamadyn?vd
zdno`kv2A`aT&|!-J1}r8d9dNA)O`Z%OsDCKXr(u1gnm%}9zWbhY29tIY;NXGEJ{Zm
z^}H**)7tb~`||W8uYZ*yk!0ck3Aundm<Q71w;P03=`hA17hdc-Y`>)j^JWZKb)erU
zt>eN=UadbgX@_#lJ;~acSNbS4T?~%5@^GOO;kDb!0Y8Jo88$Com4TFJv#>MH-;>Ae
zMDIg?WU}t~Q7u#P^uus#b%AsW>qN?~+gSe*IGwnmdB_VT(qQK|L@06f8kRC)^+)YN
z(#U>FVt#Br|3n&eQ9I<$tZWDu)+|cWFmi(8*lkKhkR8r(rrS_hasDN4pclGf<lG{c
z<=EAb70;cdM0o!}V9;9%6&*`15n?q5LY|fs16EEs%Rq_xJZ@CPg%}xf`mRYWYpU{M
zKl`>C9=<vNWhDQW1)7K@&zcK>4w-fbS%x)cKdk_Gr6RKz6l>-Ab?@&B#`>CA(SDkc
z1YgBB5@p+!o41*AMfS;Rivy5;bT<6Zy^r1~VeRzs;b$C!1MRjvesZW@I6pp$>Y~o$
z5owY>sLn~s@^I_?vi_LrABpx?eO@NDOu=H~&O?OPVe|?nRdp|!LqNC!pnzL>;kFg!
z(gZ}|0h^YRysogGS%BpgJg4c+PBMi|seP%T#a*<2CWzI5#La>E5gKLeoy8KtduT69
ztB-ElNb34XTsDUW;4NZs_kLexqN0t}!gwpjiEo(SIQxr^U7l4mw`Mbf(_So@#JjN7
zxq;!>C2WHQ4{))V;Q($_Ktd79c-UJtL*Y{6d|3z<tRz>U6(52V_o3GIO83;1z}9Iy
z<jLDz^^}6CK`*_skqrOf&S%BXJs|pUGmYs*s>SQlVV7r1Z73{{EGBvf@iD>d_2;b5
z^Q?3Z);*V+w}2g~butsXsmk_hC(6Q04N8mZ>tQq>jvAj?)Wg(r>h~-&1>XCBPMg;~
zn&hBzpYQct_cy9HtkQ-)D~&44ugd#CQX8Z&S$vM5u5`>(EJHkby-1pz6t6r>Y40Sm
zTZ)yXGUf*`Wp};?D<j`HCdh_x67{1{a~8Xtv%{|QsK1=f1-DJeC!njFY*(#lEQR7L
z3>rf7b)8Gg&EGdxaN?*|PgHDhXsqz0RZfaeQvbE7Htz<NxV2*If{1Otp|kOo+D%F@
zrL*D)C)V65)6>U^O-ryY?XPWd&@306v2#@qx*S0yL)_yA;_PPXFjdziF;mN?ryEO4
zBu+MAnTdpA=a$O1D7aYKd~HI9*b2V%mvG$4h}vIB4_S<Qu$;-;{wu+>xc<fm2^x60
zEIqKMY~Xyx))sMwyj7HDK@_<LmX@%5V{K_{Dp9uOoMA%;Xy18#i(dO!(=g~ClRjWh
z5nF5r&4j2yS_#nK<uGW#UZ*t*-;Ed%!!dk|+G)IHWB)?Wa<v&V70L{0{1YlK(d<x$
zQt#(b7;{wSqsfM}n`^L~3Y<|D+9{-elVd0VqHEgy;-{Pd{I^u@G7SvK{^agbs^)(v
zX0#?9WwdS%$vQ$t$XcP5(%G^37IUWDBeK0j<e$!_-aN&Z*t))BtXZD`9L<_#IUH0i
zniNJ1N`~A@h92D%YEqkpE6!$-qt;p)8fSO<$^->9Q6WcOg|eI@N;{m0z_DiTXw*<2
z^%*i5=C@ytQ9fJTrgb``R(YPwuun3?p*)4%p2rYSvkdQ&z<~wU87<*iHF_=!fnuqW
zm#{16iyU*esG78L!g&zR<yz{Evy^ZzkEJ`Vtlg4K<ABbcA^PLp>yHS}fV*HT*pvgO
z9|R3iMdeD^fpEtCt!6K5T#)(mbMb~<ADKl)7dhQ5&|0wq_kCBJJIWp;ozn1cv>iFZ
z{;XW4$3^8ECkH6t-NQn3K459btu@y~LfbTOCstMrKFFg{^1l=qie5VJwm97s<7DR=
zun%)-Nhkf>&9HQ`r=-*&xQI4phazb!&NV>w(YrUCi$wZ}p0XnX2e7}kX+<;80YXDM
zyeWQ7yzLb%B_6KG4Cb-{3Fae4>z+6>>*2#hnWbMoI;dO=_*E;GjS>HEH$2%6e|D$g
z@ypi6yOah>hN*U+mPUSZV)R2Kgr@r``nXtfXM;(?1zfr9T2NFfJ0o`6dBWYYRk@m-
za}tgtE7*`DSw%rzB#M|G-NqbRH4v#=;=@L0c=&Qu)YFdS+uGRcil7s5>bCkl5+s+y
z$!S)ar+J+j;o#YUqa=+z<E(b-bo(UV4e(Rw=Q!o<Nmu}FB|=%5_)CRj#xpF*qw#?}
ztQp><y>}+;R2cd*?`V5@Zl)}*pYhbIixVx>xRdfC#Tx3H`YO7g5tJaXzblKo*;T0;
zo{Ergm|A!njz5*Fs^?+%{A*y=w%nXUW>y>8^6R7kg-U47%HNHB_jK6Uh9YsiEW9)c
z_2iB+g{D`C823w4s}wi9msTo~TN-3^WSt65t>SptmKjv&fW+eHNX{pP$?XZnRfD{%
zH75Jj%EXbdT;-X8OJjd9@yj{pQ|d*(x3GKf%c5+m$-$l-C0>rA#-&Q~^6Z6U1trdj
zsHlH`?4}+1HtA9-eosZZo?7s5S5n-U585VBIb|Tj-Kd^IX`K~jzp}I;>$qBx49-<b
zn8nd@;o|4V>>?$dsYQuiF?p#M{+rg)1_l$-lr=E=RID#kdMl0G@}?Pc;eKj)-;GKV
zxoj0D!x{G@C}O%{bn&67G2M=En$#qJ`h?QvO}NGMLTpr3M)03td2XLz&TA&V-c&3T
zgNgvYJlV(~iO9>B=y!A33=G10s^63eMAWX|6{x0X8qQJ6%z`2*pM|1mMaxU(%Q4QP
z`Pj79S7!P>^60~I$D()NP=zrx>PbNzdT~3B8GV<=eVPRsw3wH|CvNnuAl}5YXjZxz
zg}wCPh@1KgJQZM|VP-800Q`}-)1GshGf*p@ypra_n349M)?m^7B@0;zT$gn@Bt#;=
zjPS=RR0*6-bUgC!MNz+VU2_x3K@`|i8Hr<ELG40nOLBuf(P>AVwWRakh%~fRWJgP7
zQ%Fx=68G$WbfAw`ROY=Z!R11l=(+{$QVX2YfhxQ8xGI~TI*b(u4+{GV1o>nZgaqxs
z^ix%RM`wMS&8KGn(Qf^}HtPTBX=WC-{|(`A{->Vi{IB$Mi>8#*_9$ZSliIY*da`S@
z#~cay#;gG4mO^n)0wv~fAW0%=y{^7QjW*|dCVoyXIo>Bi3I}P*xF(FJr{~A#$Cd7P
zprf?B?Qd}2$&pIzZJloi(XA4SZ*tuE*2>Cat!9eaUbouoz~${^pKyGkxI?UJoSMdG
zv-&r1bU#-RCUfRc<jMz?Rq9TS&-08I@}6os^l!3#j1%Gf<vUf^#PAHzw~H35E9U|d
zGivII?Z8slStmXIe4I!VJ)7%7gIRLF6<7DG9@hzv!z<?BF%C^83w&)elPwmNjWwH~
z4;_UcCjrOovq+N_Tf*R9RQjLZ4`_8VlFU@~q7`^GjSau+%)-72v^r5b=FpZ|iS^H$
zKX+=LTl&0?+n=oMv<>5!1%%S-RHi~MIW8(qxAMR81vM^9`bNp|8Y@F)U9Nt=`?)@U
zC*C_r(%U(ZL>=gaFep|>HKul}=g&~Y4eL#n=Uk^ZO9g$RCc_Fl>arhdckU*kdVInn
zUp&=Za4qk&<t=3E3qfcH?6QE<DK4x@+ze2U^fg0+Hb^J&r*rdNUT<Qzbh-#|;K;>a
zmFuclE3@EyLzC_*!F(?+;ZSF=Qf`inc0S8t&?6Qu3my%^y}-sA&!HF8OR$0Tn#FsU
zXSIVOefD_Ke00#VW&j1Alm7WY0zziqfv}OAQXn@j<-LL~*Cvad)nv$ZO_)FS=<#M8
z^EU>m2>T|oF4JkHAIrZMnaIlgvybih7&(h2ECJp{RCr8pVvxE>2BNyWYgw?_BVtQ?
zG=FzsEJPf!gBsV}W*0P!#}F8~1VDUw0>eSq7mti@>>I(dy{oh0PR!a(-FUBV;m77o
z^%bG0EvBUgj%nyY2T-;p-+1?ouyogn(5X)O2ro$v7c0ubn>Zm7GLB@C+L^E%#?pBs
z{!|{eZ27nh?#P_d?bq%UY_<CF@BJRfqSj!m=YSvSGiwBUhnZ6*DFRA~W-COc!YdI^
z=Y~nwFi5Ar<rzvEF4qy(z6_RT@c1cp7Inf>4rI=!r#Ep|WO?Pep>cegx`GXo%yP<2
zlZZ#lBSHs2C@7MFP6R)(fH&g;Rn#wZNZj8em=TA=2iUi%J)dvjqBCT|D_?oQ$8$TO
z?vn#04$vmmHbxRU$wF8sHe6ZT0E-$hPG$OHF=RIFTY}V&H(;nkwWbh)Zr!xrT=oiH
zd9o9=6@VNk_xLv>*>RdK_LE7InkN2mlb2gxOz>34sRIQD#i63n%qcC*<FT0ijWMwN
zOX>?es74iPJ8TzgWy6|(X{A1mn?ywe{$||$4cYb%j1}r3Yx?!h2OYGRux#oak|CWT
zx{r6v8Itc*t2?Pi03;laP9Rop)LRIENIX+t$5n%@xQf7KNL0}5=A`4|1KZG$kRu*J
zxq?I|CjpG@VM`|-L?sba@~5zlNq;`f;w9|rI@^@v@IB26(3Z{|a5Q5j`-csXP$0Y$
zp13lWUkHbMF)AOCq)|6EgM5DJUg7cT0Qh(W{D}Mj83@B&aIiCbR-XlMUgR2wGW1rQ
z5yyusEM=Hpbw`)N9@v8$6>3MMfWQWCtg`k+!v-(>9dumDUVv#Gq$4v=9!j1SB+m{z
zpv}%SM8|&G0%dcxkW)vaM+KMpnjsNUJ|2QS&4hWIZ6PT5O=Kkzj&&Gq!GoHJMOk5X
zc11zl&FWT}5Yz?+%YP1<lJRjJbqZCFDiff}|F)?gt`^w6T_T0>=^da^rc8R05&qc=
z>z75j?yTT++6oM`mlfTCj*@W5)y&>kSP0!7FP1zX1{bv#g^cP&Dl4GwI?WIMYu1Vg
zcTM<bB-7pLiO5<}ja^VB*`SuOE^^SG`I@Fz9`!xH1OOxwTuknHRY??bjgdOMc36O~
zUjpfms0X_4Ca>2c1Y4*lE}~0^yyDNJ;DpWd2x<N?3)MJreEZkKy*q1FAd!T->G?a+
zUl**!9JqUDKtNuNKyX5PggOxDEiXTn5o&gohOB|S2}s_iyX(wbh_Kd;%a6jkdl>ey
ztahzm2nOyxWVp@S8P~1~LWU)vAp!Zagv4~!wDk=^H-`A8XRBFRYr{nEHmH>TUI5d4
zE?{lo<A<yPUh66&rF0p`+lHKF4oG+AicuaF<WFRxHiTeF-~gskRjkh{LNY5c5pb*w
zZSjmw_G9Qk+TtOyypQ?i4Kz;>7tEEwss6R4V{|;pvZTFo1yFkoh?p`qU)4;}Tr92@
z7Wd&HegAc!$}q${wgOEc`-8irIy|(gF5p1pzAd}$dxQ4ESv7Zkgs4QFmH=g~&uHju
z$Zs@+x#m=L>=9En)GJ`Dg8Ek6{_o+=lOm$fLCasWJQ63-P<44!r?|y*ubw`2#8E(^
zT?;R0Fab9-;uD74Sx@N>8oe+Y?`HNVZ5uW*@j`-?VvHgSBa6RkeRMK@Hvd+*Gv|hz
zrkZC<%^^_K<7HmL9Cd)(hTGwPTfGt)XBo{EEBn$E>K73cTrz|<E<-QueXuwVQKoH6
zMzK6{Hba|&Zv-2=8SRLORW&}iqw~i%H|$7`q#m?3rooO>1~-Bkw5sXIm~nF|)8+yw
z$C!Q*2b-Ssg3nbIdZ&+sK+88ay`M`92YBx{xXo;mA<VP26XsygCn%(nDUxLG`!9rh
zpqzF@{?LFIHvygtHx|5Ih@Qw$=kRn@s4E6Yy!VR$vK1c8C|m*FF;9|_d)vGhnU{(I
zREC3q8VY|@JRQ8GXJfL>KNU9=!9aoV+lyZss_hBI^?JbWj2Ly*{=%-YO^4ZNfUZ(R
z$pa36lzN|k<$pswRc%3aENZL=d&x!?*kgZR?}CXWH@V;Eb#2_w<r<{VQ`(`sdwb(q
zWHpk+4Izy)$}9MERq1+IGQ0wUgmY2*cBy?+EIF1UjmbV`7Ed?4E|F9Kyqjx48w=a5
zXfl#bjt#CBzA%MTM?7iZ*4@FC-{N9)hPn1>6qVjAv~C7)UD2aI7_u97U99PE=`BTw
z>fJtwhySW^1!^fRd4hPNFD}5u99zQJ<n-b~Hf@aAbWyvq79Z4Z+Ct?+r$yWC@jN)=
z`b%=$-xEpTo@bl#*P_CDKK<-0NKYWgOYJ0^V=)Q$L<ex6XPBVyEKV`OqzB~kqdWKH
zJ;Ai~=Y;dApd*d48cXD2aMUk9gNSkf^isx+gC@UVIub?(crji??YO>*P(tMVZK0`t
z61snaDH4k(At;e$fN29Rsu<{}BXqTQ^5muHl>SpNaorOh3tO_1$`$*fdZaJYi%)ya
z*Lv|_*#!D;v2b$#ohksUiynH`N0UtEV5w~QSG;?XMx|8KgmJ>Vpn;C~#@X>s{!KU$
zfw}gdMHN}$nyRkk#1Y@6Ah0N0`GyTOo##%dj^y<bR=WB*+VXK=`$~L<z*k8<0yG)<
z{DURPo8sK(I5?RG#@`uMm7!tXQIhHp@a-G4S8B8&bJfsgNgg3v5y$GP&(W<{WLe7Z
zrhs<eEI&qslI9(gotGxx;mBT+;?mX#BvnK@(vj^ymcLnmk-r51EV^`zS~L=LAS8aT
z-)-kYkejvq^L0UrCHLY=5b@&_4rU)umzVzpARoY8qvU^<y8kNxnb;ZrPXKcMrvT*q
zuLR(YhLqF4y!k%?xUX7iMCcCeOb%Z5LYUL;f-6JsNG2rJTq25unIL)SRQJ80a}UW|
zEH801QE)WPLH3~T-L=;ib>bz=ATs=e(s!1HC;(sdMx4nbGE(;r){`Df=DO_6>*-o_
z6Ls-V;|eF3ibDsKW+kBeV95Ojis)y@alXa)BQA}MZ^<V9`MlhS(VJaWAOE671w*D>
zcs?5MdO5zq_{Iy<`jd?n(m@xRVBH_KhOc(v9Z?&2!>hg}pfiOLVo{p@8X|g<YJBBX
z9|z5HK;`w|#v8V1h{Qc>7JPwJ7UvM2OZ*stQJ5LE^^ROWjiY073fjd;nl4|^jUmQZ
zEjngb+Q&r=8B*~qV{$$+!@3!A_hyiYMuwdl$KlaujM>a~1oVWI<bhH*2->+PlC|oX
zXey9QYwjSfuMp#t$85K&X)lP`!jNaH_4U$PW0<f3hA2k*eP=C|7U1%S)9%NL{+E<6
z-ZgHffi2}X42S#A8<B(-q6Fr^Xq`-^$C637HOI)n*UmaPIFm_#fjK4#MTnb3J>)`O
z9i6Yx6oYzj*ECaTi3$1&7`1Bdfi<h?U~PZT=NCX~`8)sATVinBYN;V8{@PLyV-gzh
zMZktD7iB4xBA(A_fC#;nQOxloR+nS|+yhs77$jYO6+;FCSv|vTM%|M;0hX-g?-gK*
z>I4<+9AbZJ)-9LqDNpc))_uZ`qWtYhn{Gplt<|8*6luS<r1|?Rji1&m6=Men*M;j>
z615ldKBiG{kPposQ~7hOB0xM!y62yJ9jsd<aC`Dn{-eu+vnxwje$kaIG59KvdQpdF
zDTTya)h+O6xprNaxdSCD1}DPv>ouUjHMXQf%&hGI;(?w4!v^T2Vl!gm2J3*;KHgab
zBSnK!^Bal4mf6P1DhkiEe4lM?U3nUhk)~C!cqtgdlc|+f&J`kh9e{qFM+^{@tnFlc
zq~?l&d3B{ddL(@d8wN4As++;UJTSK_grc-JiuFSKtXsSVDuK5J-!2Yda1j8Uc|w6S
z{@oq4c7;F<ENx`q{(ox}HDKwV3y-+KaH@B_&|I|B%q+W(##E5dOq-1|4OHnDQD?zc
zH`^u`ggZ4MlM^u&p>mA=5=J?E9>bj5ZMUa;q~!(5bc2CXl-r)9pGRLV@U|TIg+j@+
zcwaAsyX(mWD{q$}Vo~2**^#4wlj-CZ(`6qcITm*QwXE+Jhp<-_ZI{=$hDpL)7iAME
z?YTir38<m+3Kfq5>t%1*Z`z6g-pa7<Vk32mSVVCWrEc#Etru<AgOlf>2>qT8O1Tu+
zHet}CL4%BRCGd_SfPI3=iyG(Qu6Z!G$YN4=aur9*c!;PRk6ewV&$^;u5KdnbR?N~(
zQ0^86S!L-Vf^@_vrTo(HAFL<vjc}?}?-9%p-8p8%@K!VN&Y{-Ln^ZP5a4~F|c`0$%
zztTO6Gm(dqwNYxS?Y1a)HQ_G}Nb#6kv$g+F5uV`|5BY2_@u>N>)=^V2kfYF1tC1j}
z>Yg32xljahWI!yFKpzu@p^fo|Ak?sh??!zDc~F!OVI#cW_^9{YxC!Rd?(?>1VptN{
zyCn~WQg6lor#u^rP9<GewBhcNR@Cpzz+C_XXQZ%kR*viwkP~55d#cDDG7aWs?nGYQ
zFp$VTUjhzC8=I@!yPt*~*i>8!C#iADt<VS%DEL``i8l6L2;f~*NaZ*=<Dl7E0LOHC
zN)OdjHvLZvVP!UW9|CQr80KXh5tOK*DhCUcb_IE>6tK#7q@OL>E6nxbCHwLRZP0_U
zkbtOTifR;*9A#xp$K}}0RCcqDCjhm<LN?~jyDwmi(NYA}STD(x@x-ml6D7!PJrFs3
zAcr~{dE+rXf^vllYeGJ|q>1g+cBBhAOk=Qaw{}x(B;|#F{M2|$>@T#l`gH$Y{%~a^
zj<qN~4sBXEf399Y<X1o4@dF-L>H%V+s=Q1_GU`?Mw+gC-p~zDosGh@uUPIzQMXL#U
z+ozH{RWw+mts2zzpU8T$X8yQG)|*f*&a;*AeR0Zk;T2oJw>Y_PBs>p3-+Uj!fm8#+
zk>jeuCKG|7BluWu-R6Tqw*3>B6d-Iasg73+x2-~ORH5USmB7d6CV4iO<D!1BaPG-I
z#l5I*>t)$?tO%w4Kl!d{ux4+I5xXhvX5|cC_;gM5I1Kb0gJQ~;m}Me0P>Q;nXeG9p
z!24CHIFxAqGDSX-hy9&ZG{pOv$I31H!)(CrRZ<-4Nfjweqb0kV2lwUYihw?NljAPE
zQy6sJ9(G4mS6VNiT;s~PFmem4p<2TeZEbh7DqXnwqEBT4%Kfj98k5QJX@Ou;CCk7c
z0zR<R<isB^Rs|n7^$V31dqSs`v`H-$ardjfq^l|hh`g#C0)vF=N?~R-u`*2p-b8a;
zGfil7RGrVsTP|#seeDCRE{0xm9tqZb&P9(&Y{0DkH=_*VlCdRkQ_#<zy)f*6jp%R$
z1l>&1{GKluQ>wk$u|NKKet_wH34;H5g8#1=W8~oczj6GG4F5^S7#aR6Gq$3!XSX$u
z=)0!ZU{?ZQ755o6^+E{Ws|!^up1rJkH^K|j+}ye$Uo5ET>MfG@;rX5Sr)%njUMZEX
z9a@tk9M++O`Duood9RkY2mu)-Gw<}xk{Nno=lUsnT~6W2szrd0#tgd2vLn;Sjc_LD
z<Yu}@IKEiiF*Y?zL!Ns&?blyMKW8wyB7G?G#1ri}>T;C(<5uv!jr4Sohm?D?0Kxp7
z1G*O2fk*7Fjf;Is0>^+X%cMZ(-u^v(waV+6Zo*B%6piOC8p)m3R`*k~ESvncVb5*A
zFcwn`8f}9V{giQJP=mZ!1MMh0n8fncBc<h3B3uOr=}zszqV3zgtG5F#)U<t&8_J^T
zI>>AN7SCXD>)ZHmrQ6T-NLuaL-dliHID!(UWHZ5XhBQ|iB%H*RRED*4&6FiV8+hDE
zx{H*Y2cPw32rj+tB393ztD6CmSGnJ9<{6k+-@cd5Wt9-$l?~5ev~-i3+dDFyCaJ-7
zqg4}OLrgdL$S&s;V{@%!*2+t!nLDy;O2c{_6ET^?XfX|Sd5QW&5dT>FYl`A39aT9l
z8PZZ=$~dzXBgTm2N4#Z`inVe&`M~gy*3BJhcUt@H0%wQ$D^SJ@<D4==w8@lnEdtvR
z*DVDsfK>Gnp&t)ms3m##^cmTN9m*NRdHj_LnNmhir>I1ni*C9+dCh_?!?d~s<nSBa
zqUyXXx!fK!MoGxj?2nlvQzzIiXKf_^4ETC1PdotysF65{^9hQA!C<7ypDLKJ(SVg7
zo{xxQo++|~m2m)2RfYrD_yW5I#uZIDn=x$$0mhQ)HKt@dCwB}KJ%VtS9*Ig`0gBY?
z6M1L)WN}epHuy%#A?1MR*g*prrwjCN@{THdRen_`9e8471T1OLJjF?zCx6tGT3GzY
zh0$!x&;*O@{P7I)9JZ|XOo=yy*+cOPLYw8ob;G|v$ixvT_^RnL_3=iCEvVnop)|Lq
zOJNR`Uc@6Gj;JUnyAakB?Qu0(FH5RfpnN^=Q`~R`gMPX{F7xTh!-LP6t=n~hYkG+@
zY)fV3*~sEz6i57fA!-M6=cxMgGqo)2WU}$KcMd13NCJT=m`tP5n5jB_Q)~E7P~T1%
z|GN3k)XeJ3W(@N5kBQgsaLUq}7Fe7khp85<e_wPOzK7%ZIVi9~|3Evw?-Xyv5nGOf
zFwQkL1Uu!@HDros7AdukM)RJxd-yz?hEL{DJG9Uwu>NHX8?&(%T74zZ=ni*=_eRMX
zS5H@80FEx2MyKS}FqjQslWET%S1Ia{>2ga9+4_T~6E&Ns8gTAlCZ&e3Cn-L>&7yTn
zwV*pLK*p4-%GIM#gaD`ra>vD4@)c^uqXcvJ3^)I5JuYb!RjOi`?UD28Ta)!nlacJm
z{RMxJI+kkd6|?})z}q!JgAV4$0TmfN0xmT<Z5x()VKg+lny)9gE+8K+0pJP3uq_?X
zE!twN(W;0Filr_VxklvXDfSVrZ&XLF*trviR#4K9CuU~=&?!a^eH|tm4z*nCf~i{-
z{VpBDpP);ZgaX5=so`R{pHR6a?wTbMDL=+9Ntme*$a9Q|6r<xo&U4yUC!$b9OB*-}
z=yT@`ruW#uF(~42KuvE&%jVTKn`cOI%xC>KasYsbq8V#hZO6u(8g%SLTlX~()q*jW
zspt!A1Q0pkkju6wWp^A3<%LQUv4CziNUa_6_Z(gq%TkSH)<VBHF{LGK*wfks0cN#m
zu&U71n&}XMjfqB`+v)ZKM3LJK1LoDqPOKRow)s@oRaCk-Y=5*-Sysha5|H4pRPg2|
zV4_gt;V~}rvr%dk--x0Y&-2UrnmaM(9nqi$h5#}ZU8L$r8z}E~+Nc?I3q(I*j&@QK
z?A&@ILzX`><ONxaJtQnOnsw-BBbslHiO&e3r6RG%{GFTrz_8=N5ee3SGn=i{9I>*p
zFmA#j@dFmV%7TxqwMmPwAWAcC`8}b30}{~-TfC$tOC5qWK{t?ISpQYJVuDM_x5(^5
z)Ev5ndAqqeMP518E*7{?(rVK<Jy`^@i<~E=H}(5$4zM%ud`aH)Xpd#OHT}<4dUE+$
z8?iXbbYJxzsL#&VY8qx+KX^kFOtXRhuR*^Zv4zv>7b0H;Wx3ON0YBYR)cf<4K=ZE<
z#m5=^Nb<9^q<szihXoxd9twDf92JgRo_dO69pv^a#P)xHC{NNQc5NuS`#0(evlYSL
zA?V$bq$^DmTfmZDhH!@46qy29mMu!y^J5X0mvQo2njWq_cVVRjEy}7xuLC<KdICQz
zEkNO_!ljFwR#+LU34A>zPfE?0*XMRPmuMIa;oAu#&PF#{{Z2tuYPhq=O`wbr(Sn#~
zRqVy{T;8-#b1O|sNN<@##5<$%eqjwnivw#uI;9t7(>%;8x-<aHwN%&wQ{CXZ1<iOu
ze*RFhE1@R>P1B;9vrs_0ot7=`tgwLgr&|+jk{^*|#5?$surS3sM(x-wSf4KhPPccc
zSv}>h%}$*z9YlEMFKH|8W<I=>2~}3mPWU`Z_-&}=$TkFAy?ncuisVdl<O8DzE70_2
zByx#Xefd5{;E|{N0ywzI=YFAiurI4EK!03T($~*Uw=*~iH14(oRGe^)<CnIChCx#9
zG!X-V{y|M9yr<^I{rRM-#B6J_UY-*9jq)#2J~&1M-!JOlXrSW$ZE#a&t;er`D&ai$
z_EI_jd|K#?@2^f4gA#I^dyvM`?Lho&sA>Z;7KPMwaJK^jj~9nAy=6~|G*!+({Od=8
zR)L~q*wAr>5hY^#IP<5$d|Z@RT-V32wv>ARVeDz@4WAxIq9SAD29+p<?)uG7ueaC#
z!Y-(%-8*ht=I<~oUO)pL9$Hq^=`LU3km?;TdE%tzpJEYARYBSL5^@npbNXM@4gNqR
zqajK8*{wQXFeXSWYqzk!+GIL1I}mIHcS$)U$LV2>R}DRd06un6hRdeJfk(Gf6{6vq
z>m1JdPE&J+(_Wj4-heS*YBR|LNYkg#NKgay5WZi4I<>biWCF{^s7mfAO7ZMO`O}%c
zJ=x!|zCX}p^V`G!QDFW5b<_Vm2Qo1;{NHmRBg23CKSqZC3IMKTX#K0OQ2qB_s84B?
z31v=si=(*R*8n?35<7Jb^sYttlafd1M3_iS#(ZwBe$I0VIlCoNORTY*?Gdm^%x1s;
zn2pni>qmyaTlj%*VG6)E(KBo6iQLrbNBOGHq@Gr&FnD<t&BUyDuF@2WGZ%;OSKUlc
z;GI?Z^^@IahjG4X1IkqoW+c%~c{yF(#F(jB(HJ|WL81S<Cb_gY-R69>jr~a#tMJI~
zgmT*96}<$<^Ye|Y(huVOxR{lj7W&L&gqqrR-C(C$F;~2s6X2tpPptY7?H2Xjgi>9!
zhMwwPMVYpu%|jo*D^`qcx#|F>w$0&|%T-7zutYAX4#z)SmP0d7vu$Gd;ek@P1@D{T
zx%QCmkX1f-udC_{BtxNYT0(+xzS^lbtxRnXjN!#hz+rZxOlOQpk#A-_W4e1uP=98R
zCOEPzBC(*)v@t0%R}P5neW#~Oz*lxiEu@Kq>Wh>F@f%v<h^bnaJM;_Oee;F<9da>R
zms^XgY#L6{&fK{z;_xw_P5|o4bYKW$Rphjbo`|9emt2S3Rxfl(CCOM&fTm%6sgBLQ
z5*;f;BChX?j@J{Wh+cJ)WGE2i{GqFuKgx!@Cozc4yXL=I&4nmY&<JRaQ6cq=Oaciw
z_xi;Pd{Vv|XZf3CepS_M$t-A8(<A$!X%TK(|F9HxUifN;TL8~|ruW1iZ;;$d35Lez
zC9(n*W@5su&PHj?j7TIyY4EyH7ldMJn>QHKkDy$~CPU>GSUhOMVrQjc!pQD%>2M0t
zV$oAidIB@WTg89&pi5j*b;d1thwy$`$$+yKN11@^8sTIjlc#>|v06_PH&E-6U{mJ0
zuuIpJ&;b2cfRslcecRv~Bt>^868V}@F0Vuf>u{33Q`<YdQs@KGH}PLamSVj#*OB!#
zCpFzsDqV|zt&GBVecKGQ69)fG{w~=3R#*fzZGlaa8bC|OKRK}TkmR@9GCE&fvMQ)a
zYHPXrN$cu#7cw+38)*{ZF-kl7*GH)mvn9#68>L_TW0Q+Cb;uAmBu-%V)pDB+rPngu
zOk1U^M-aQOIzZ`T3*!6n;1PLK*cSs8*3f=Sm_t?Pmd4OO^?=W9)fbrt8ZwEwRib20
zw8RyhU#M+6kJ&<yG^Y^~#UhPr@oYjWJeFEn*y9j5$N~FgmQqTThvs?y{HoMCJXF@?
z$GMQct3A5v9H`{rtl8RYjX^h_H*e{F)&j@!lTAMS1)@DSSO}9y5qo{ay~1VuWI@F3
zi4UF}Y#+~AaFAv!=SpCybclqKz+Oc;8Q2bf9pFgd_grN022fU^=l+@y&fA<pL!qFN
zDj&LVuZRR^>ma7x&qscD7_oURqj@d8t2>Nfb>L;F-e1>~AB_}b(($@|h{^tjwUp8{
zGPX3X6Zj8)<8>R-&EvyQC<JawDUd#j6J!JXk#ix|jnh{rYzFr!7*vvQ&14pmjaL|d
z)-6)y(klGCPj)C70BZ9GL{Z+fco;zRNE4>{>IPlNLQyr-J&v+a#IDc_8f9|mOQ}kG
z9kiNZn^Z9%{p;XZKEx*iePhpk%MpmUH;`_drS#KgvSix?b@g(tz}WiIj;ufBDy(mq
z0Q)M29IcuB_bmf`_M6_fO)mfU7T26>%ETwArB)y9Fe1w1jsS)ImmbL=bkuHM2x2M2
zk#KGpA{_0facsHoX^@bZ(<ny_`Mfd*Cg(gvDLJx9{q~oP)k4{0h*9AP16<t{TA0b7
z|BtbE>JlVilXc6sZQHhO+qP}nR+nuXUAAr8*6BTG&E6ODUCb}Yl~)-N`92Y`e+6;r
zu*o{;O7rmK59ldLIC3yMRs4Us?hAn1zW)&C@s{g_5$5<q1?Xwuhst={12l$J3D3&p
z0NLs}-!h;O&PgGdZp#*zn+{V-fz9U?S3~O*?ReG~U(YCOAr1CaJW<jC#we<03hUqk
zkWNLK-~<GZRX2XCxjRvWb>F)T^$tKR0FE+|$YJlmjHoe31IA}rOBzMBXWCW^8Dnk7
z>}^ZdDXyKr&|#KVtvaJ%9nkR$Fax$eQ@(u%yf`+Fv8K+o>{8C5Jb}nQbqF9|h!l9%
zho3TLTjp^ATR5bo8|TOl;}vC=artsZ;0j_$9Nu_@c&g@k2<j2v99kgj#YenE;)C0v
zX;j*w+z2)v=@<}NqG$Q$u9yGu&p|T7c>Pw}ar+R&6gj5zG)$Nua{MmD2}!Ty>%N{$
z1cK944f7GP=1=MR1ilHwtgMU6UImnujk+hyuP7K5Q#!<cLGo!SZuVbhzBUsOZ?hIh
zZp)IewnE*_HiJZqiHrJi6=_;Y;1%)Smge%pm>WG^KYs%^cQ)k}B6lWc+56E|-s)bu
z99(5Hh{!B^8h`h2W=JI?MS)e4e4=8hNa>f6d0|R#t8gx-gqbOWKT7+G+7aZx2C&s0
z-h)l>WYHk_+?djP=c7Gz&XMm517R<}^<+?Uotnw9_|1nK8O`utsqheyXXPaLb@cM%
zcNipa$H__Rcp`P`%<B3w{g5P_DaKb12Uigj4d<`A$3Mb%==0WX2N&SY8O=;`!^2N>
z;K!p2&AJWpX2FXtt&xsB_K1js3$lAILmp5wHkn|9?cYD(7ySpwl5#9PIm1lt?URl1
zn|rFtDVB=Wz1N+w;27PFjCiu&SNaZ|e>Jw*g@mJHcntR{VsT%^MJjA{4E=4aVe8IN
z3syC|6`hKlxT?XnY<P`QX3o%_$vc`ZYaynX4eMe^n2&vU$=0#zwJxMp!Rh>%j9-Ot
zBAi)hn{MMkXIk-z7Vf}DKL+BpJunDv?P?Tq#3JcpV9M7Zx6jKwTDykpT=&97b>yq1
znGu+*tvQ+w8Qh;LVZldN|HgfsVceZoNC@O{V$V;@DtXQRW%XdLAM4j<q{&ho^<fZy
zS>!mJ(__r1r%c>qKG*pU@PlKUUlBJ$176-wn*=eb7!tWYd97OC-9Oz$>!?@#53=XK
zp%W%X&i}i#&dBgTsS`%V{}p!fZ|TwL@ZZwosruAr5T#QL=GO5-@T=PT-|-!bPr(f%
z!J`BbG?01#3Qfmj_?6$Bn+`(&DZRSGl&fV>=ks$u-;bw&{0Mo>`+I5sT^w`1^;y2@
zj4$f>T{iIt7gp_q@@2D^=`IlbYBy%q$i$Fj5}5G|j>n75_Y3`ch?q$W1QSaLVztdo
zb=od$pQq`rsVO-NjEXWEnF@SS6Ib@f+J6gSa(e8AgZnhGmI-Huy*Lh^KecD<;1BWL
zT*stvTx~JT8EF@m{&W9;6P<iTGIk9x0}F&CQ-n!G{u4LDlf^L^nrPaJs)sxj)N^>C
z-fQi7*J4U6MYPlcD@9IY$h6W22bL&Kyt|3da{>pW`9z;ZbXU>4vQkRu22x*Hr-!e)
z*_{M6AFjw+a@pQ@j__e0erewMWNUbQe*fp6^-Ir;d79{q*TZP{V!PvRclxwP_^Lk5
zGRC#1&&=1C@ONb2B!v%&uAD{z%;$se3$I=RQF*rT?u}?UJX!m=Pqb8PZQxP$v~It5
zr?qVx+ygnDM@zGum+hv3bU;{T<G|NfP?}X%qox!)Xbq`kl&_KF#a;%82nQ<>;FBf|
z`5sicJx?p(x&W1(!@#*EpQ3nW_Osi#t*xOtS8|9OZ6C0{Q-t2`>G(o)+cpBv7E)dP
zV8ejlLM4L6v&pxBLU-eUVSthWfy#Ikg}3BTpt4AoyJ(K`3oFWR+93dG!W-dh4vk@R
zDmMh&yS}(s9O!n5B7#BkZ^C~eOXZEK%M;PYP_LFzze<RLbP!|d4iSVOK+G5^N9uq<
z1H6LLijHTr(F`dba2@?I1L{>o>7UsaVG%wkbE(6n*F{B+=YygEFWp;_tYOWO=~iF~
z+prue(ES>0G5nzjHO?<IA%QjZzl>3o@LMTnkud>nK-6rm%h8p$5<SAz6~_VUOJ0;P
zW`EXUay$KK2RPQ*O8Fj{d8=pbrCJ=c(~<g_2BC(FftuYOB9eYJkmfn0Z1kvOj*lgc
z_-~gHIfAbaiuSzeK)RF{muz?EBfl@Ec4sk;dre}N^#hpwX5wWj=_I(pjX=qwcpF~p
zzTl6NSjzl*cx|#+H8yp<pY6yu3IoA0DBcdBd8uKA>i7gVU}x8YR0{b|w#A(&jY}nD
zG$)H9vVOlo*VVQ=k!kC*4ZCRyX`a`I3Y;c|z27JMB{84FB`H(&p_3HepYt!@+l>EB
zA5av@$x(lu*>1Hjt_{qa9wr$eZFbMibjG%HjbxK*6fgxxo!Ve!Cy)&tPTp^&Wbyj(
zWQR{`A)_67hVAA(^0#CAuMsB8R=7$CO{b;E*(7p_Vkv(M8qb`>R?p3|0%$d+0Aty}
zdL51dguPpyWO^}jRY)Ea3~QN&=`Gc!?4eny>yajy#S17gb=e!|?(S{@<qIj@i;ywa
z>&y#jQ9(6<YZAfu^1CEbbSkg&TOi9*;BUFk^U74>F_qE@+IRvd6>x9+pdGti>5Vn9
z-1P<V*Gw6mVTVins{9$Y7#pfX(Av98TpC0=c?5tOH@1R+lFfik8e8h*9=>$qO%U&w
z*!V>t;&0W{Z+@vh3;px;jUOU~G*<_y007E(P)p66_ARH5RRc8IW+zimKw+zt`2a0B
zQljnw^A;JSZs&|1Eqn})+^*yt5bD@oJdRU|Ct_S^Rt?IN79}9oh|-}tLPd9mi=F<f
z>q|25tL*Dw5Il#9Z;17)cRx@t4h1ulg5L6VHi8{2v+uSWejH9(&J37D#u5t~epIsZ
zSO7U>QOFTPMyOB9D`3k63MTHslPO9GAZAZJD&b3%DzQg}sI3$2lWX5r&hFIkNKZEi
zDhRr-0sto!zy9O2WEKPR7fZmiA{2GWnI98>@s<9{ALi#cSjUmgxRLntKrg-ThzQVn
zUC8%TEQNwHiNj?h(hru>2}zj{Q4F|a0`T&}rCafY126n}FmSzWnNd!#d0>&hg{K#H
zWls&FAoOp`TvYNLtAkfkQ;*mwrYn`|tqT?9TyqP=+>Q~}P+h-0Bebx7dNvFZE>k+G
zao(8>2n%t6q~>k3tR9j9)nY%@iZnA;$#}ZPEHz=KE8S#QQhLb}e1UX<Ayd=sj3_Ka
zyQh^P!;FJLuHjs2nNxg{I`6o<Gaeza*p8gdha4kzC-}$Pnj5Kyjwnx|I~TNYWdbB7
z#b*DY@D;w@f*>pasbpuGC@*=qXL<C9FY(4^VesHQ{>Dc$fB)hM1Nfy6Uf7N=c`o#^
zdNcR>C7C3cIATh74m0aS@VG+q5ABARP&bdv9>*8r9S93tBmDq*1aMYq<f=W+TYm$x
z^qK3kXB{Mi02})afZ_O4g}era&9gw8@UwukzzM-g9H(9|ArL_d?^lB`-A_0FAC67Q
zT?lO@a;ognxl_%8Zp_Hpsqs0#@8<H>`WFlmL=f^OiB9T|ArPw^Wj>g4?4f6mrT&iY
zKp^LPOKlfyP|>}~dofK3O!E=ThrcTr(pmtQhEpth^#QYf#Cmw&mK;1TtF7St5s_L!
zU-5&Zt&UdC0!96jVEU;f65fBaRIm^<#$Z)jnB&wLk$n$DFb}&>xkCdPUYzD`3a~c1
z(VZz^7}%d)ULQFgW}1H$z;Fl6`5stZh5|Qp?LJ&Ri7j<n7S?(u`*gk8PonBJ+|rX(
zB>O3ZM?{$i0G@_tj;EK0*RmO74+RGe4EgCV?+c>%b!aI{@N0WX!@Iew8#d2MuW{H+
zUp5fLWw5nGjtS1lWRDco94?xxa%GlV1ET$=U-84BFya!yh5_!(m&;z2_tOTK=+2BA
z=G|#Y>{GRb8cf)>^5ZCW(U7ZxU@XG2i6;YM2OzQ-UVwo&WPN$idKRnt*FuDuMB;FD
zoZA5L9i&K8fPj~5`J{BDj>9Kz-ucCAu%(Um9F$9XwL4Td@Ab`ZC+lr6u82Ra$zfhV
z6=WBuas-~_RY2tzWad*f9WTAuMn=8Fz?U+lAN6|(%P;FQbi6Hi3U9pZ;4XMZ;zYhF
zrZh?{pP|Dk3Jr6(!mR5geW9o~>||I=lgkA=o~CK9Qzz)X@u4M4>lBh><WUq)6dqH>
z^`||7P?H($-Ek&h09X&yCV@3kVo}aVjeD;^TElqPSaVQOy||y^p=&SzQD;~QEaFuL
zh{BVARa)`&yTA*snmoKp&<=|&>r^1okz=x>BD~Ab{J8|Ldy$8K<|dg|P_SIq3}p63
z8pLC!Lfy}*P<yoz#hruX;1*pvqq%rV<!?!Q2G1ZMsM+F#vvSR_)0?I#+orK9EOP7%
zv<R!F5ge8(l6gCNbdEL8`pN1Y+(mFg_ymRogUCt;;jkb%`I#^Pt``A1(z*Br<?t`A
zgSMtRZrJ5{Dcu%3`|nVrmK)OK$hrPq(#_H5n1mp-Vcu<DE;*+=@WhuK50H{ErUk<1
zAj0cGK4temIve5@HWhai({P0_6|QP3t$?!zB`s^-0CFm>IsAKxTS*AaR<|^Sz~W-o
zb|Ss4=E3f8Ah@v{l*mPqY}!wo?$*uBJk;u7U%Htm4-sa&O1aktixu6}*JKWW-%M@q
zx#}V_!|H2dZCUr0@fj6e;&(YhJNB9HBu$OAT;L3p-<6uZLidyKhU<tq;0e{W<9^3+
zUB$E`v2yOXnjT*)n-^e#3gl>}KE&g<w*;03E4_}eZUrd3{vL6F=0}NNDRFxA=^B8Q
zEpqr2oruQ#i>E3=S(W9`z2LUkD!jT*&6iD4cEc0T@D#qv_J&&(9Wv^@+nRO;1EGKd
zHqO;_V8Am2=>Xvrf=y%UXW1Fi3*RP0vJtj-r{%U3oQgJ)H!#G;^JP1ZQ3vR#V}OY$
z8}Y{|fgVuh=o<h;cle+-PWKll6njeT<=j19{j`vwG$@faQQwOR??M)6lZ2$ngkH%b
zh4PzJy!$PO+m)nEB7S0_0?C_$+Yy}zjz2Kq4?xTArH<ESpeIz`L6Y-sbq=cbW6#oa
z++`NPOyF?C&ExXEu-9-e4SONH?Vd^>Ox>o8X@F-<OCow4VFW{egU!}nyu9mf#FGL!
zEvwN6TbcL^sTN$&7shF~Q_YW(%ywpLyv1wl)Sz)c30bJ*2_cbGe|DOm!PEp(;^lp-
zpS8K4*)qqoBO^z~RBCW6W2o!?Wm(d9TnP3Kcj9@aMa;p~Fb7jFR|dW%pA{s}emAPU
zw09<_&&+^-5JbteQr|j$Uvyl-x1{126ff@N+J&Umn*Ifaruc40f@m;faY+)!*s_Uj
z1;w=^x0v;WAo#(lqh8dYWj=&=0z_jn!CFSH86DGi$r?Sn!cpvn0bKYa0Q-0&z{Dg}
zy!Zta5?^{}O(2b97fk>ruH}kiHWy~~i(A2li6rh9xIqqjgkytn2ovLVExo>qfTxJf
z>uN{4*E+r?kn_p;UJTwY56;5S3+or<bj2Pp7pbs18r<&H^;k{s@PG@`KH4X;#DLbK
zPmFz|TH#>I4_Az@38Op(PT0(d{CX)yuuYa>8wnZlyp9l<B!fQVUl6`~y#7)<_HYLo
z$R^AYhd8_PVf`|A@g`gP)n@klmwgB5UDyB9&i$83`!A@4h57&4ImZ7<wJ<XNudtS5
zO=;yV38dcFy7D{IC2W@tJg<Yhfu<=j5990mgS<>(VT91)(w1^kO(pgd9`&z$_9m$k
z^gUCb?Er>S)zn$~z9|%ah@u>ZuM5ACPf%j^XnN>ce$wrD4|zX5dNmI#Tzb8H@Hc}V
z-3;j*kRXs+>6On=WxVvu-v9&-bVbU4)w0N!Ci^H=Cs_DBeDPP;0iAiC6Wa+)v&5HO
zq0ajr=+Y0?sc0TK;e4rr?lI@UqqFXs*tcWgsyHff;duYr19YIftobcc8bl`34f0*a
zr9M6cwbe}ZcD9ncbhQ%P(veWxG&K{d3B$=`CDaf^ds98s72uzp@|DxwgKk@Ucy)pf
zPYz?1R~%~S;BB?&d1wDjPCoMwu+4BEss%A$e3*dlglZ{m=^d}Cd#mpD&d(#6eAf+s
z*k{iNL!W95w@pTfCEf{>(<YtRlCOzT1KkRl)l5<$C+XP=1Sd4qdv|lP#$TJ}fAAgp
zy*5)_y1C^ZMp9hB>Db9pl%!{~o0Mg3FAHZC@ghh5DWHj|=HnSKCkibHdL@!CU1dBN
zQoaAK%B4l9wZAxdFnTwG3QrAq%nOKsh84gfoB<5UU&d?PnF^5>h=-|m$OYyhtcYGc
zNHiFrJeAR4UI0Xhfm+{3UY4x6vCdJWC6H|)3BCnFP%7u?6K`j=;5Ex?CbisXlw&2~
zw>m1sLZQ|W5XQvlNOIa8^KB#B^;$MaMsTXt+Rg!(Y2wL!zi^t+$)EMb9hRF&2s2y*
zmyd1&JH6nV9!DdHA7R6oxlm9yO<u6%YB&Sy&yTmVGLez+<qNp8WvZ>~zdh7pQTNo`
z!K;KWlWr-2<2a3`sBh)UUm^g)!BtWXE<yM<GYWUb#7X;}k9GcVq~tkCNv&l^Hjb7x
z1)bN_Q4f?ZF>tza*}!>tk&Gq67<zBUM8pj*Y*HhpLi!s{<l_p9U<J3TfxD<6j%QGO
z8u)0*<qKkiZ^R|I8dY>^ob0b|EaJU#$s;YH31G)Ol&$HgTqY}ASuOQgEy3OJAw~~V
zPvN?3o5K&Y4>SuGQ&mYdTkS3$!C^`Rg&W#A!{<ll`f;4VM%&?l@_v1VT#*3B>8wOi
z{z(<>ic6}QJ5rNolmr?x#%ho_A3;u^My}yiX}jpV%vKIdL;raAKt3jgfrTRY3E_Kb
zvk_+uFwnFPFgj3-RfP^z0F0Qfun0Ov+xGUEBc$7YyRjDh&tO8Z^q;`eu7<T;aLH48
z_ARH(3rrlQ!qr7!umuM$@leWo7>^CVBv{KI=2F=esLglMnJ9n@8EgdvFszYvqK3$$
zM*hhI8wsq=ct+oUZ#Exx9*U5e!Eg+!ixu9bCrwrnt8KCk|JY}ss8`TX=LLo_UkKtB
zz|a@IONGS|5k9PF?W2fB{ZNp_GVunw(I5}N53$_SQJBo1QH;H$xdM-hWd_&9=R}jB
z)q3>^RvJ4qP9Y)&+8*I9$^)kK_LG;E7Z@rUbS*Of1DM#F1H6y40|1+pl2BVH!c;DU
zwBOYcygy_j@wVZJIB$@lD91Dw4bb_V!-jthYQ=icYF;+sR27F?|7a1wQHuPIh$;+_
zTZ${X67Pcs+xki7iWZ;2K*mscq=3;(W=zmHDi8uFWzoFp(Hn4hWp2!M(`~G$zBxZ<
zWH&OG5Nsa6Q(y_>mwP1Psc@!{sNqO{h}bAUp|_pIA=wRX1yt@tnIFf{P8w7njau(i
zR@qK|tRewn0clItdT8K1G{w3WHD%&iuw>?U2^z-Lf~U}8zVFU%#N%9?Zq5M-j-i_U
zCP_&Fe^kx_%f&92XrzIHKtjPf#ZyA4ECT|rZLO}(51=Q*Nx^=G1aoKVEWCPHiYHkI
zu5QsE`ZH({&-=$-l0=McP2IB-JczA0XmL{^wYmt!Mtb#Jj<(|@sh`tKV@k6t*ko`7
zNKnKhON4z5$Qcw2SvPjN$Z~gYI_9y@N7Z70vLZbT5O}WwyEQTWh*r`}88&KwJ73KF
zz7I}>!nzTy7$?a}50jt4RCQKHGyJ7eqSne)Rj8=j!R!(Uz>LF-E&r-RI@mBTlOAko
z=kt5M=bVSP#~k}%-3Qa7g6-ag$4tr+KfXZ!U*Fhzp}Li=%zf|(PbYhW5!-65#~!fj
zLm$@~nB86O{0e8TN)mmr-y4EQL(#cy=4lD$*w$Fbkml)kS&=+nUZQi)agzJE<9GwA
z7+yg0G?uOjNB}VDgVz=ryvC0vEa_4Li7!P#-zC^N@TXTGw=Ppb^UUwP`$1T}Ytf&X
ze1?+PSC(kQRFdcAUYP|;`~W-SEeAe<VX8Co*Mgqt1k2gtiUkhuGcb~r;NrN#e{|WH
z)N1|8nWkhuhd(%3#y8F&oh<%H^2ln~9*5jGR@{LEX6E}g5?2#&JzPj0VxY~GD({29
zVijYr1j99gm-?#&@<$O|h5;Rm&Ly9OH4NrZ^|99?1<`#VGTDZSs2*#F(tQ>31J(NQ
z@_e6_)*gKZy1r#gvV6mE4->4*AdUYFyIFQ5+3fO_s?4Z=|Em{|sGPSUS3sM+dPiq?
z85^@%EnC$intAwKa$b=UgsSe1tA&hP#<J<r#a8S9*9fKD^4+4sD>UwQTX@;Gi{JA3
z-<3z+UA}7nB7lT+%T12ua%di(YmGj2SzyD~uT$6C3E?~o25f4iBwO#P%Z&jBm$iWV
z)^JX=(zI_72Cp3F6F}dmTO6JyXUi1$EWq$A_DU?Bv#ZX@2b}!#S6c=a_voTDHbKX_
z<*|B?fY8hR69sA)>}kviOQ=s?n;pz%y#=$+r~5`e+w9+4Z!d%_*DL>;b6vi!&LCQ@
z=q9x?qfQP(5<|`5HuEVf29IG?tIpz=D%!l(?HQ>+BnUC=#>p<$`d!m9v}apLt=aOe
za9wl-lgjzVR|OnV_R88$(Aq_wf#T~H@_4jU%e=(WAEmrZc|&6?(~zdSP<uHCOg}d2
zB6qU(em=c;QWd-=OD{M6mG%Xxi>2=91cv9m&zW-y-pyQBEUiN3yrGjtOSUTbDfW-)
zZI6ztiCgZf<MOkxSf^&KZkHmEMT@rw7+JlOLww%S^`t+V$zq3mIzi5Z&>y-`X;R8S
zZh+-xz^?*R_ThQ4->81(SIxgCcXe}z=M$9~rG^{ad#zG!S5HqZw|NK_#&>}3yk_ok
z^V#|$+Y`ZD%=g3mCkUVB*gnMj${iw&FC@=7P5I;I8gVaC5CX_|Bs@@tF(KlEt4aQv
z^gporzo2kpuSfqu_x)eOgN60~T`w^HPsD?f@qfj5^k{7+ZL%Tx=GO_ln^w?55(?a<
zrQkc&Jf!uEb5;6cmg%5?O2$ws5mqRYX@7#xlpW!>VWR^Tv&6YKr9K3gg%Ql1{mb%Q
zoc)LhO-cUxpZq>}peKEA%e%{br)B(35WgGwwhgLYKHMa)Qu1ls-aJXi6z3ERB|P8L
zS>U5x;u|7sq%TrTFauJrY<3lBKK~2z$1k^fbCnP;%VbPgVvHMmw?OTK-ll_mypv$*
z%r%9ImS~`tgTim=mlg2FstP&LS?M}kW0*Z?nd`pe#Vn<tj7O#(RZ}3bARD8QT1wN0
zHj8jfUdigy{wgbn6nG|`n$6Z?$c|fFWHODdOHv-w%yzVx-e+#`Lt4%}rc`76D$nX?
zZNIxXUsg`9#|z6bd+YGyr7w^`3x679<c?Tg@V2zEe%2Vh5l%MUuk3bcGl&VJJ=}Xu
zU|y)m#gg0D6vc?yotNdFMuvpaFv3R(CUtVD0as)NcBenTK+ck3ep|F@VLN4U)$M?*
z3h&s;eJ9zV@e~_ohz)dHf-l61J<UYnulRQ%0-+6vKJsILTkFYmyv}KeFXt&@EPw>S
zXQoz^T?#KJ7vfa55&{h6!GND*%DLH!Lp@kq(@3SfW&przoa&req~;r$#d4ot=0_h^
zq~#;QU(>*(-w9!0Rda+JSarJpI{;(AV}gBuT-c9X1UWDVc1bwyYAbUe+Uz_-n+mb0
zTYw$fmy;zHVPMAY%^Bb>bv%e$tY#|YMnn+kKmJACCT|mu5Hx)e6MeT!RPHxO0(By2
zv3VIXbj$Q`i}!ibI@2|_kc|9MOa!a8!2_=tV2UII)+e8WkGz_Fc6db6X^QI!5w?}n
zJXo`^;O-!G@Dp6K0@k>k#m+9jLGzSpvVa-CJXb}U-~q6RV16<@qA^VgO|0bnR}Sy4
z)b?3PV@2f8rJjboOv+S_!`X($hthk#E&<U_s;(V$2)=NmvSQHkS*n(qv>)~F#~HJ|
z5Dl|KLaZrgAh`%@bP>kB<$)!AwppGn1fYzTl-}8*JOt!lHe^Vl!VA{rI}+6uES<^=
zZ~StRF$P2?9!NI|td>|Yq;vVk>K$Q^O0zI3v|*Nff=jBOWS$QAwB;aZ5Ni~e4T{*a
zkdp@RP&^iilGt|05E)bMUkie_yJJU@OmVT-xY!*0Bff5VKZ4ouWI)A`l6I*MHz7p;
zO7$M|quT1Gw7z7$R75;Q{+Vht6%W?4_a$sbS@DFGQ_uBNm`2u|6kmFt6=|27vXr>W
z@drn~2gb6@S$lo7Q@xi(=y+_=n5e%y)<j!kOYD8Aw#)^u!L9!!Hy*jl-P9h;g<ML7
z4{$4hICuZh2u0}vg)_Bt3zAa7vIP~q=&riPdQ@OeXKM<thFoP}(rpSCDr9URV~oRG
zSED4UK$Pw4XXW}O)r1q4*?fjF0eG|LamQr<;)Qt7%)ACzXB&NT5r}bCC4W*OIW5l(
ziZw!2ShSgR?=W#;f^vUxkIIBn%P;>goc5D%L;Cl^l5@{YQ%FT>x-jS`uIYS6v_70t
zZn${=Y%Y`4RxC<cG7VQ_s=-WaTWyuLiRA5t$CNbjKB3?3tN9#MsurwyiU1L|L%Scq
z6<`||&5si_A&f<&KLCN?FLs6s-19Y4rozp>w%6?^Cv!?Ci38kTZbY8vAOQH^$ohy-
z=vgc%i8h@hHXO!i)>y2478Hpd!1jCe^%fAQb3};gl~CNhF5Nqhb^?$cP0;dC3h6(M
zYuuCKw?tdZ*#;#%Apce*f#AZs!)eM1N)yB=k!avwPKg2L{_2=&XlDx{7_Kr_00$%i
zQHMs=Z~1Y#M?I`cpVb2l%@W4xS%X3DRXXvzfZ_8IpH{A9Ki&k-VlU*)=>|}2DL}$K
z&7MX}I95aS`ba{Kn5j96$RvLOi#w)3yqCLsA1o+DYSb_ZyzH#7@qp|+f&e!g^VOIt
zyyHspziB*n&DCPznd89HOc`U>Xwd<PN_p~)d5ySHpXK=22MR<q_j}CS2v)$P$%sv&
zcqBm-=NPofJkAG~YBI>N2gLF2L;m)_W(kg(I&o7#5TRcc-GINNljU?kw8Tom=VH~{
z!mP>F5PEpmtf`E2L%QjDFHy3diG@JR^%#LHlg-B9U3%XsskfZ|OdG+SVJzvgOf&*j
z&Qv=aLHtFOoLs+z#6yll>@nDYjNJkg<m_QSBN;eheS6UpT!d4ltW&@p#W$B+z6#K9
ze$+M<1F=bv<wV}2&7sn7_46hg;dWO~A_!u_Sx;_tYBC_xp8YI~1JZWFi=&@MPuQP>
zHFK<|&H?xfebRb0lfe6@lRPjo>~gT20InTK+$d7tGKB=7iy>cfH{6Q4O*$1uy94`J
z7jQcUb=og_oXmH%r7Yix!B+@N&>v`F&^Wsc6O_q6Ls^PRDT@B98j?^bZa7jphGyoe
zh0uRISV}Q%G*Bg*8j3GdkLi#T+5yOcMj*=I;7_#Qzd3lO8h<E$Mq~_xWv|aYAdr24
zRN(y5j#x#s(+v<)Kz6k93s;_3U@9<KaOd47glxI}3tWd#*wy1KL!`3RlXswt)WER%
z4Oi;y(al`zh#Kg=MB+dB_!uiTXzI(QaS_)(iT0@<@r^l;u*CsYI_jyE@&YqqeycTN
z;LI`ty05i<RRSX{M#&dQ4<ez{b>jp_M^ekuH7ejX(AqI@5DlFRqAJmYzWzmc4hi#~
zDL(x$)r;fpdvkf0wC6{1RQXX$-sO+%K@KF5<aU^gqKa&!8mzaT0)QP+pg@NgcRC`i
z{S0WCxnVbn<sVEskwRxQLW%2V-9qtGFClATiO*jOHdYllz#d@NjxO{ZT=(7{#Q1fu
zM`@_wMY9Azy51L5L)MOPJsBBNoH*;M-&^E}3{l2)HP&vMi#&lsSez)^7yyAFW`5v3
zT{gQnJ+QN7?1H+n7ifR*NAW!QWL;oUt~qB#*RVF(*=@P6fpJ8O{jytWdXT@w_7s*k
zl{aA@jYA61oZj9dnF*k`uYAu(a%*)<UHGol@P!|K?XVzV{XYgA3r5AamI0Idn<4^v
z4&l08kF~)k{$>OCG0=_B&Fv~PGCp@b*^>)hRzY#kaFPgKoD}H_v(p>i<%k~!ROI%}
zkk#ErX+ei;lUYG%Ah-2K&Sk~ae8b@vQ~ljatLB*(20;O>L~1oLm!QHeLjuJ6SqHCE
zkL&jylt846*Cxi5QbPowm|15TpM3G4QPZ~E%<8;Yep76+g%1KtCBd)(&$+NEEF~LG
zvx(|dSkiQ}t-~f9^YUGN*1ru-|0(=K?PlEKr++|JDU*GoraOJ5&$=ViqFw~UMHmDr
z%RIs7#ug%bo%~36LdCka@l<LdLV3JJjg<qrjkQK+l}Dj~v0!sFX04T-OCt~zHV<(R
z2EG={{{;$S;2QWsQ);ut*?xr!^v4=N(>5BBeYiY$XlYD@Q_FWzCIMW$I&a!W>a8GA
zYh=8T$3t+S<L;`EQw8ll9Adx&!zaHzK0T_Z?h&IrHMR!jOz96R0SYs>wqBAIL4q)?
zAI{JX<C?p1S(l=oIbthppYx~QiqfoM%5Cr43H4aG5l6go_5PN{q-LBC*CjZXCN*&9
z_M2!4g=56BYa@TloWC{Doewv9Wd`@5z&g+vjEUW{D1-2{5`QUOp?UgW#PLUS@)sM)
zyxcctZD)+PtWV&WN}fEB_f;7(A*#)!eQ5af%$IYUCvMf&RpmoP>|gEd<Uwf7v8^NV
z%ttjhueHrU!$m;(!Ir6SWE<%7>cQG1l!n`r4Qqa^mw0#q2r`+WV+cixPN*kca(Pw)
z(ZlCqclbfyV8{*u6FU;4(YTyIE&N0(J)d_gotU_QFf^$a?y<N!M<wp-DB=V-xyY}t
zrS?)Dcrzw=i^0ASj1C4!R&=UH01rXf%pejt#~dGOlsrDuxF4CYclANRl7e%Nn*rtN
zb`>C6-`ba}YZVoPi4w0lVD9GypO~9KT(`X-&DTr_t7vK!%O3l?c9PK9nt6^&*aBzI
zr91>2eyJI!T^ANx^=s+`1!*U{xN9}vH>L)W?B_9|Z_sGUl*{$p9{C2TMtM6R+O(y=
zU^|2K39!u?qPpKf5fljME78arB8=`^<lw?R7w&q(COq828%TZhYaLBLBp&m;*jdZx
z<Kf>L<z)EqS@zBr$-@v{BP<vV>bIlWn0qm+T`I1z;`Rl<o;gtlO}W!GlOmv9a@x_^
zW^*jsEZ!DHy<*pE87vBU1M)#$gTam9FbevNcWiIm-+6h4!fi>)IY9t9p(h37=4f%w
z%2>2&G%<$}BLnLC3AdBMJZK;r1YbU|@l0@5^l%=PJde*GH~4qA{EyK_E&stc{Wn*~
z%*643M_(A3{sULX^uOZjhBajWPYqPhZC!?Te+c&o48vOjRd|MCWlG~jOtUJd0wpR0
zjJu&RAVkJ-mg9R$)mQ%a32=U~Fl7bD@DN>KW?tUSYMuVA_<^#R&-W?c<KYPT=kzEn
zvwY;|Sp3oDwpo?>^~1Efz45n^ds{;`MkHtCP{LIlc3nr`nlCu9M*0GQL^1-k+we$L
z+jouM^YW(4+P}<mt&K*eoE~I7mwm@uzPpcLx3zI)QWI&Oz-`i}Y42ydL*+fNd;CIK
z?OZgT_Yh_isqLEIWx~to3jB^9Vw^2vD%yXYH>N|@!^UmP!&G|n21smy1foZb^(a0>
z_sjTobsaHCIqk!T=jeGk`|@)xH-+To7!6(G=i2b2x{Ge}5X9dz96@{iDxg!5gxKp^
zam9)wVpBBVJwXX|W?zU#egW_u2l%}Kw!+JTGzLT(Ik5l+6Em0Aq;7&s*;F}Md3&6O
z-=r<oMUOdO5zX%>(^FX@Ip{bO@mM(tUbYSopS3AcxnqYR&&#;RKLOV%*F&~##zDlG
z-vF*zrM@44eR8^HB2U6sXv|`an6Ku*YdQ8+nA({X8t86I%IV^IwWr!Nol>$fOXF_>
z+hkv#K`%KfrS-yiukD4NQG=s-Hjoq#>>e9Cs~GXF8U{`OW9ed7R_zw?7OJPO?e%$<
zaZsrdg{)0<wXu@o!)tJLB-b9?4O_52Z{9?xIb~Eoys=Fe2`Pfc^Gw4)uk%#f%3~>Q
zZfb|JXlbKwI_|ixvg$M_`qJxRKX>}GpWlI?S?HC-N-`S0{jZZK#^DzzB!!Z=uHQ(^
zzf0++_3xjNt`*KDF=Y8Hmx=hYM*37A!3nlzJbHs#XZ%EbS_!a0$h}nnO6*M32(kVi
z9V5j#lDluf-;{-AKH-6nWqGqhwvn*E=E8S0C`FJ_4pVw=cQgkqP(Cl(Zzqdu3wLAi
zh-WNJG{)V}ZcZbAf%!j|;xj-88f-hOsjI;IJ8Bwz0+yeBS^9A+4*raM)huCHbb(d5
zByRD=wCtl@3fz&D@Z`WTp$2Sg>aH;@O$%Fu1BI<xUerDfZ7E}5dW-o1t=XzWC~eb#
zVJN4qeJqFwS>0vOq!B<GS{`(IQiTQFXNX1a33FRsKpxI(s8YrwDaZITp?zpt)-zy9
z8;1gWh%X9EoiTd3upLUn6gk`?P@<QPg;2&=^0=WZWOO|Zk&cf<Gz63iFTQNl#HInH
z{;evsPqa+f>^`F(7#=O9;3q7(#LlKBl$ES(yS&)087#UVQ2N7M4VS5<pt{Ia+DM|a
zQbN^K`BgR|SBl6I;tf~;@XaL`)=HGx730fsoCoP$gi1xvN?P-<s0`FLu%t;YNqAem
z=#iZJuW9g_R9Q@v0}a9$tzFZViPX@J40mkn+slcrN($dMn(c)FU2Jn;OCkJJv-XY*
z>%kILt;R)Z4)(IA_y|?*!b+Wqj4j_p^+{whs*(lHAh0La&+HYI-e$;cCI5C!KAJqS
z+S~do#49R?M<SSBQU155JQ7T?2@T^{SP|Jbt$aL+_->mTpjW3p=gyL;bhGQ1HBDF-
zNFw|JEw<i62=Px<h_xWfw?C-jQ)tkb;#^(%AM!W18lpT^_<7@Jhr^2QZv%G50iL-4
zuZ}1+1let0_CtD-rkmTW8;fiszYDH2&&ICKyj`Bj$5Lt;`1-#eBJLL6o>W+|Md+8(
zo(5m98<J4T7=Qh`-?qa(i5<_-d%hsvI!H?&ovrFya%sOTh0xBXCD6iYO#Vicp;U*h
z(a8)IFxSAp16P>zsDoe1XY;Daf-z(fKbP8{{JhccpAQ1}$ec>ly>o89YCOGc-w?qe
zMn-sE*25Pfq#|K)7G^_h6~z6S6qskFT>wm57PQxr?#e>Xbr!4D%OWpp#V~Eq%f&bO
z@%86YYPZa7Gl7n+iiEJdDcRRWNYZ;ec0zq^4p>zBdt^LdvYnC$A~bDw$epsHHTi&`
z`^~Nx<Gip8%19}iU&_;R-=RGNGL(W;rm%G{fJP}FMkpHo(2@tKuvi*r4jR;7GR}|~
zgM_?0Tf)V&VOn$!mxU9pQw5$;Dk%<Pl$0urCZqZnkmau6Ja0brq|#LPQgMXMRjPOS
z`&FmVChx%$3w)r{u0B50fI7`vONj5-?jLv>xBhG7Zi^qbw4~$(f<M%c4#(QECHNui
zTnR;t%T#jIz^Xcze?7|&C_89^kX_*rTSSWFew(eFE{zTT{o6gQ)nN2l#mp2R!M<BH
zI`zKdM~FRXtexsvF^3dAQc=fRo1R)4u-tRS7xNg3Nw45ygF}xN>wce{qNNUY*sq^8
z1%Ltb#NynDk8NCfjz<R26`=VOYr!Q~c4|gsCKx(95|$0N_0zv%f9w5-o!tOF#+pl{
zZoji{oq8_Ujgy0Ml11Ssr?><K)DnEux;TzVp#h#q9s@RC{i(~^lJy4X3nS?3%D=2#
zqlSYwsuFQ86nN-ZGK@xA2g}+lyPN*D8&Y|j-OWN2gi``U@hofv)_#oJfv<$vbV_e&
zDq<)LxCl+H4Tp=@s2JoiJ%t2qUWkax+MLwK>{~*6spE=D1pXXxqI8K2$JA8A5Qx0r
z%-Cw_L*R8O?Tzcr%lm=?k)2tK0%Z>m2KdIm?54KubT)+W_`n8pmc##a+hFo`oC=<i
zV(9>QOeG=^`g&S7&i&M8EY>d1DDKoP#X%;z??}C;f6eAUv`c>jf9vr-WyXJrhyQ}h
z7+6{VyK9n>=|8|_O#dsmY+CF8ml^-sCTR^&IR~fqj0w`=+)UCl8*#(5Cczh4K#k1Z
z5wC%)0i>lkkCLh$l)vy7dGY%JG$xu4R7zAt8$b*?%RZkkSD8OTLsAkEe%Jb<zcnS;
z%=>Z}zw7?~s9ue$M>k3PSS#lAv`gL(82Os<8Ic^5#1b{G<%2#Cy&v4xLv*Jr5;9>9
zU`H=&D(JSpzMT!rp7hFDqGXrRB>kU=)`JK7Cg|-Z=j*wE$|rX`Bx<P_?E)QdhbK+9
zfpqtDnQ?bt+If~Ec((ZaiaD1l@9Y`$jhx7d66sO1m%a*?@?t_W-tn5^4<n6TpPxdW
zA{}p$uBLiQHzyvP>tY3}Vv(wnpeWMAu3m|6MW3<If<%(^TEmk3kEz>{5FlSR{nF2z
zug1+y`m5)@IBlGznZ75xMlwsP;TfB9jg}9Q1(^}@IiEq0)Vh5Z-3KT}nIp=2DrRhm
z<ZY`BIkp+5Ec5F@8Jo=BA{o6lgk}dBr=`lDiFqZal8T7YhD%>O`Zg|@ybJX$b<cY_
zV0i<8jObjpUL{*~H3L6gc9PXJPn3C>gn{;TvS{Y56WjW#N7Rm4cTd&wu<o8tvTe58
zF*bWiRbm%DySUgv^?p2PON<8!h2;sXaYPbY(%l?phJ;}nfaF}ro!RI<7;Q8|5#pbi
zGhGal!(NRO95}`&F8Xb?+%ahiKWkGR!823_!R5{{{NWpjE`s(W8W=KCoIXJ00A4y=
z4>~S*Uq>n-^@t`{zpwj?XV7s%ErTHy!I26OFvm|OZ>xvOVIt!2(wmFI9mNOJ%@xs1
z<LztJvaIwX-oAFjDL`(xistveqopfFUWDUAGDKdH${Y2TF7^Th$XKE}lF8|xyWtEA
z9nCN>I%pYNJ%bfVXa<IPZVrcf3PBh**Zi-FHXgBL^0yhXJGOE^&?VPt&Sb%!%?dGk
zRt}H~iEtsYklXmKTAGJeVq4W!@B$vImpSdw`hP`-^^2Q(Sg-(D%9s?k(%()rn~lo!
zkYWRG@Y(o5&iZOq$H1lMbQsF&Fwsp@gm>3}J%HeaPu8xD9xA?1FXjDQ+<!u6L(+jB
zZ~$MmP(WAT6KudV&n!E}Sv^=Nfo5YV5g{~T>Uy_4%i)p-JbD86ZX!m^H(A#d`6{=q
zy5VDP>sK}z!$@Sir<bf3d^yU;!$c*F(PP3J&uu1iIHyZy57C1c&&v^g!WLJJ%SJH^
z!csYc%?7{}1cZv|+Uum$p;tT&f(AkxG{O3#^P*HP5($ySt2$R2!qICXBxZY60o2<}
zxhb{bJZ`P=Fpk^n5+Y6}CDh$l?vDw>y(BEjK#_deDf>tYDd9uYrPrL(^*7!iBIMyG
zKXZ+(_(}pH*0)usTzUK1i!;G@?IHt1uVUT7p~x_^cA7U1cYBIBoXB7afk#`yMn;fC
z4Gekk>G^;i9SDx_T>jMw8kePA3pdcTR(i0TqGI}?u?uj|75w-ghnc5fMiWDceKAEB
zs+gZ><FY7Q)>z?92qpUJrs6&Yis8E9%azm4aozdK(@ofL456A^Szm)kmsKFcE2da{
z%J!_b?&|pp)4cI3o(ZUFK5?`0-KMY6CeNWxRD@Z6l+^GWD9Xxjp$M2~;RtKG6{a3+
zG9}r?XJ*>i1qWMAc!g#Md1TS)<98)9=DYl;Nz2_1uOug!ns!yPULtUrw;}Rwf!Ws!
zYh$;cJ$M`YHs-Pv?ppv|IvEg9_kpcD@l^kND1@u0yNxW_rQ4mCS}#%t=QvZHPoH1@
zEj)Ju^dlD?bq$h@;Rn&dit4wOHV$4=$$p8<9YDk9Fbn^9fj?<{4-i3J-}mFQFp!s`
zuMfOZH~GdKLEbP!4(DHcCwSID;VwAw-h~1nJLB&!sFj!vwSU3g6rMzrZ{V@2(AJ6u
zFlUF*r}Lzu)FFvynkh^x8|;i3qVsx~N$?2tkc^Nj4<Ru<=o}6{!BdA6(<L~U1|18c
zAB{VA!~|4;u)*PUI3$|V(k5?iDp&0LL%r6`L~HgE$4zJc+Qfwju{bYJwHp2t59|3c
zL+3*XydN1}XTy$)o((MumT5)+If6>w3t*Nb(c?6i91p9%R}2L9EvqO;;SeUAf(DE^
zjQsxI3NX-6P8reJ;*kbQYl6VNXNfzrm8LJnDAS|rW&GQI0p`H65!pT`II=H~pMkQF
z5sRc(kJG2s!kz^M*!lb7m9gM(!LVPR3;+`T3;u8aFZN_pJb4;qiAyCqNdYxn5x*L}
zj;GgvG*pU7*@uk1S;a{O-%FMWAvb0eIT$5+|04dt5B-?&x^3jY6^zaJ$}Jo6SZ?WW
z;ne(6znH?05PUN9CJx!&lASlCSH78M<LYqYf0GT+%(v(76eT_iEA-lRcNl*MOd&eS
zU5;wOh}=IwL$LwbEaP9DVMhasJF+?K@(A~pAPg_4IS4ySW7s=?bkGH7{=R4vG3*V=
z3~n*qg@tCHih~*D%3nTtLI|RNj2|a+2-;`9r~!*TQWuUea9BQA741#?Cy~U7+Q@lm
z!BnL3g#`=N&RLXKCzPuFH3A^`a4m_@y$`VnL-gmk>S`EO6l>zc{0P<WWRlZewnc4k
z<rgZyMcvOh;^nFeuARLWsx_`z{G+xL*8th6#5j!sqr^CcUXIGN$nHug=xHnchViU+
zT*ivzh_5?7y#&K{>S#(=o1#-=>v`a$3d=kqh<YskRDV@)t`nCrh3P2MI@5C@1$GxM
zb}R(iq5(()L#cVzZD>?a2sm$hiHg-TtDQ@Et?#prEBLU#e}*PlHB5g73psPpu&Q=k
z)#2sX+M|_ll5*2oA!yyo!FoJeyK|bmy!Gj|P;KbuBI#B(EHst%Y&*Ad3RJeF0JJz*
zhZDY2z(!mb7ZPDm=pYh1MvyuX5L2|r8{wmZ8gQ1DVm&z%{4m}v$yvViY3HOd=9t^-
zg^%b;XUz2%*(i7g8BXVTVno+yjmAihtc2<hLXKWYWmK$M%frsV7XY%f9lZO!%^Y7I
zjO}l&t?4jV4$ewi<RV{uyfCjI8Z%=C3*;6REX<l&Ews&QYD9c@JrT@_24>^9Aw3k2
zlliu7Y`(Qcb@Cnn;N71hEE~B(++c+3p)ynI6^Zn|M=oKI4<`h+O8x{#Dg_u{J6?$%
zkY&SJ>hkoNQ}fCs%zqzRwr`1}+#0(h+HQb@J@bbNwKd&-z5BbMJ9QwxD0Rn(EEBiA
zkM|}eBAA}H@a4PB23FeJ1a@0~!PrtP-o@@bD@_AkD&1ResfohnYI%l^z(C9~SnMIb
zx`$XTO%VZaxsiZ5u{wEpC&}W=PtQY?sYU=HgPTUBLo=uG!5Fd!cj>di^f}4hbVBCa
zyCA#l^dSR3imI-D(gkWYjN|Z2IIQ7w8dfhWv0ls@q<)%10J$CcV#OSc4X`|3HGw9N
z`nj~b=-wcr_>n{!IHy~nDX5(D?Kn%56@go9yje@4z~a=-<2^7#{Zu;+l|Yoa)Qh@^
zBU`e9A1)XJ5X&<I?U#f<d~BgaCvuQRGns@32$oZ#DSEk&7^f*58tK5g!h=lf(QHHU
z5q}^f?4A=%eFI-)>WtD~J4NC2Sj)SEVcp&;Zp`XUm=>_)ad%$Hi$dlhM?4^6NPku_
zw7tYT1b}A)a$?rMZZ1Gho{q`j3d#W0wBiJo&9WnUkwrH>v>}NK(%DZ40PQ6Kq3#+x
zf?e&O^9Bs8pZ2ccR`f9C6jl8W8j*s+CjoUy8E8Wy;j2OLnBw{u`obs~#D1+ey)FRg
zS3juv9p+RnVKl;~8bQ`Af&Nk+RX1})cBw45WQ6gdd&EE!WBefOfo?Z~zNYK;_)wI!
z{Xw=U37htN)Kb~aJOs2-#%I_5zM6(l3l$i!#;?z2+ME(>Eg^f*ryJu3;}^7UOo6BR
z+YgQi=}6hC#TSnOKHGqmkO3f++=y^1_-!nTmWliH6BHXmzMylM7nV((-ATz#Ix~ly
z!FM5QB!J^^Z}}qnxtq(F<v8zbr+E8X(s4bwQ5AzBzRv-|&Y$77jR&1Fb4fgL+!=&_
zv*)>Y^~i5{7+edEMRAW1^=ls9{+l~=FBcx=?15|shXr2OM`Ry>`@*>|FelJ*Cs7Cz
z0i0*K+o$)h@8ahRy!}LD@IP3R{{}yq8JYfHqZreF06&@kSK#NgmbCrm1nSPGI?T<<
zf+$NSc(`!sSYexNAc|}@*#>2xpt5mxi^xS%%60Ya%KI$uBN-*P8W1=I5J?;>k8|F?
zwd+5A;vmW*Px!C)Exd$h4@a-aR({c2{L5(Htvs4%%99sI$KVzG8hSZv;S@<Q<1C_+
z*OCi6Ids3!LVG%aob(SUax|;tl1*o`&*Jp_C_k2w%7*+UmT{2?7M|WoK2m?nl%H;M
zt)3jS%rm6jV={o*@$E1FbPC;0nCaU+{SltV2px5LU4y4GWo3NeJR4PR-phP9IGcbj
z!WqRRU!n{LO%@yYgj&}4^8o~_4wbsB&=%Vhs^lJ<!eNZrBww3!aq(f}?B}MsvTYd{
z9c1d+Se3mvJLw<eGU-GkF>~PB(NU{B)N8$j_54|><QqT#P<gZ6W3gS?`>v`#%Q!Eu
zvUd$*=kAnb2r&cr-Z2IJD(K1UX?4M=>NN^YoOBR0wpEqJy_`iqmT!EL@i(VaS+WfR
zoxXifBOsWv3CO}KuW!p<l{tWR8fzI?t4h#yvs1C>{%X`8a~(w)*>?i;h0atX9E#-2
zG;-%c8OFSVGsQRyT`%<2RUr^b=ZG&&5*VHJ*zD2ti$=cT6;^KqoYIVsKX<1Jq<J%S
zxdqOQu3cg&fPm!R2B;H%^QKcdH7)M50UnkX@)_tNS4>VnDJz?WHnu5?Bw>~0zWt$s
z$45Wz7{x5Rl(-%tt)}Z)B?x_s#Pk6OzastzH)|zy+US|ur=TVJY$F;@0^?2YYI)cG
z?BWIBHwe7uHIqWFQXr&c^pRa#MU@vo*Cez9!xq9LiVE#2^d&?gZ{=bTVi>fZM>+}n
zv4kNOD%r}VtZ6e`ExT)Rb8zA#p{%Qb(shF$1wE=8>4~FpB2+d$G(f`E*84zdKs^Am
zPvT(=QWmFvcdZehK<8b8p?YN}UsZOK?k22xPbD8|zMQ!na4x`JPNYNP<hLWDx|Yl>
z;&6ufUU(1^-#+N^31_|gZuLNy>gE&cmjV`ISL3bj_EPK$SZ1F<iLW}mz745nAS0ls
z9j^85=-IUd;24RJM&)f6gWeP&Nz%wsNV}!)gqLw$?$)V{*B}1OVB%w>(~4P9u4go#
zzt9KYaC8^pt-yCx*v{ix&%)ap$=u0(D&k3AGJQH40_X-6FrKQf32`rZbAk|Z!YKS2
zBqmI4ng|G(QIuqWe#~H@Jm~}IN?hW0UZ8!@TAM++Tqh?f=T3<{l<eN7R%>riskuPO
zVYO<#QZ}-}qDF+>mFyFjRPdKxzKkmj#7tBc+Ul!zvDom|`U!|nB(6;nv4~VV+)CL@
z!60W~4dPkSY}X}W{Ko8TMqht4To12q>o&g4VrNh{UKtl$o!151g!Q!SH3w>UDqx!-
zc;u;w-}A{Q`D>Ec-H+Yc6zde+p}qlpU@06k>mWuRn7wSbeKneyivz$Os|n_B!fyp2
zl}ttpL8t?$JW>ckd5}m2@<$B@rEmsB?m1*EFvw!GGww2cV8}Gw!T+VDfsr_Ykbtdm
z;NkfFU;<oRVBlxUL3r?RME@US=M*Jaw`A+IZQHhO8<n<g+qP}nth8-gm9}xK&%LMn
zj?w?adEC!yjfmK5ese~Y4iD-hcYgqrD-Vaj=!5J)fbiUt)?VLzL+B->vjlWD(*8W4
z(&!-YAd{b~^DkUL_)HfPd4eID;n>j7K_yncJOZI*+qNhB(#osr>W=qh8D@#V-+|kb
zJze7`_N0tOA#UZu!2G8)Oo2@RVB;T-I2=O48P3OQ%qPA;ayw6RtnNJT=U3)X7y&C(
z9)3x^-XGs&!lvg2u>#xbD?ZSK0R@PNwBVY13nn-u?(KirkM*5etrehwcUD&{$S$4x
zplN!9+J1`^am?@rl47g6PSXosszOe6{!s;29<b*|6>sK<Yj6dDUP|0B@=bQcs?vH~
z?h6Ftz*_JiLpRNt3NuZ4WL+xuH-}8eik7clAP~A$5ZWQnEPatMZRNput%i6qc+i{W
zV!%5G9>*{HookN{8M!!R_|m0R=CJvyDPqWYNoX;hZtSGD84slI3Hmq~8@P3)!YYu%
zlA5+C1c0rp-NM~WOTD*erOezJ*<71{UgeQP(`{bHj&QTtga-wtRIo==p}We>l%>Ne
zFl6n;NRG|`hm06nx7p;v?;npj6%>7m0Z2_z-juUUermDM322r4ff?T=-ZEcu00PTx
zgh2q9f{D>8DZ4*g6EvPZT;WIue*hDXKY?m&`H)?n5ko*3V|2#OqGcCo8W?B_B?V~c
zR*nJ5fb>wM9yFTdEvC_43l@iO2?Dj?Hf~7DH>-eyWs0`-M*zF@&T#7No1uFN6k!ae
zBy9W=nbS1S+okW2iKh6`mSc+NT_*z^0gxkMhB*!=$3qjKXg1knQ6{4}57Kcg<3^Gn
zf7)VankM=1X>?XP8D%k@Vh*BwIwkp#2EPp<)fBB}gjeLJdDF&n`^XGNIZ}pss`28S
z@^7B^G!YFC&rgEpXZFvdgLHWqF&&V5(^4(j1yax3Mb}HY)st`WRWnx0`epiV^*n60
z|4u2qMkx*977r4Ell25hu1~Ce^dZdLX9eS5I9(Cv{VjmguzA$e+<NVtNX=8;ta~=U
z3N_RR3PTq7<MZBSBajnea?hxX#@tTvilTB8-IQ-Mv%RcXz|XMpfW=wuOwIJ2L9l@~
z)jz>-!JxpT&2@y~d49M<gH}!qxQCo7U51YKBQMt1QwukB2*30@M@-7eqsy<*9nDqK
zUdC7MEDw$w@pG;I19zisz;<Pe?=hB?Q6RbAh%cH4bS}H84#Ru4ndAhJw)F0lC%%ob
zWnpTZ%s-}gr`&X%=97y`-pt>f<TcZ>9v|{ssEux9)F>JoiS5*k*wP1ZaNuzUhGzic
zg+T4*gf}53EChW~W)T7<Z26%POCBj6orY}w31q}cXrR)K_jdx0!#Y)fTDoOyhG~%+
z#ySkI=2gKCRo~1TUnYp_BrR*`kT{rU|ENLF-(wOCAM7S7D?(__yQ65vq|I0)n(Rq$
z)ux}BlwDU*fMj=JzceVXcB?!1g<Y8iD4a^-$cN5+#zT~|!yC12iUK$wZ0>yAt`3b%
zJM%@BDwRp`l{!?xEUlR?W_*XknNPdN3_UhD(UdKAd}Zrd_)!~_UA{5B<N~_a5p6eu
zH<k~sl5V2JDTuvi3rg*cKz}_Nbp5K6zf&i3Pt$6?2b?^dGIylHC@nVXxBoj~*87y>
zGHicIc-$Jp*As>A3!0c5hK%<IiM1mqpkb~n7h=ST!c|}j?|RT$4ht6IbOziLb_OpC
z5FoRJBO7ob2$O(69Z*RE=_JQU9H6Fpt_lLHWD~Ul4@v>FxgkT8W;rzq^IK%28dL$3
ze*Osa9K+)k_7Zz9jE^flwuEQaT|msvygDRy-Rc-l-MSNg^xijeX)&EVF5&$$erb}j
z!tXBKUBQoKo6lR2%ZLtVvHZg*u)l~1>#ct8ld+$==J74~1dD|A1EtCDYH8qiA*gYb
zz}$t7)K!Wjw7N`T1bbYM!INF;G&7PiUI5yUkG8&ptIH+m2wYR_#nv}iyn~QRpnM~W
zd-BUTRYzA;L>b*FF$oBtK3!k(dU2ro6xl|y$r(%WSdQNoSp12t9$sl1OBr}LJJt?e
z9|*j>sI3<Q3n5Z(oddUF2j$Gd*rU@ZN|qRA1A|9}lq_*PWH})l{##@=u82WO^{l)`
zf{~{2cv@rJCO4c8r*i>Fq4uu2`Qc{TweH`35VEx@z=98J?~Jb-^9LQkxpNEq31hnC
zhW^EK{s)<Sz)G5qJ~tOK*7pKNROZvmjb8wd5d({POS^pcHgd1QZYIQoF%PB(W^dmD
zZ*AO}3uf0a0_%O|an5_}M-OZWH0W~Ki14v=s<ix@4CQ{;W8o~(z_&AB<g9Lr#P0*v
z2L#?udZ^EDu5`ahyGcI5zN^H$iRTUe^9_H=KH>3yPy7Fx;r}H-aI*dn=fM0AzCh;x
z$QRh6ab^2A-R|qA4C82&PE|yE=GF>BKj4~7XUWDjskTQDu#ADi(z+p4f>u)F!p$Df
zWVhjT2F6T+Q*tvu#7_ckJmbURy5khi&qQ%dL&Wd7X(LDU^7(R=xz^9*xoD%|hJH5H
zdDX<_d3u&pr@fn#`Ts2#?%K)${hK*`pZ5#o1=Rotov9x;?V>4P<C(hiae8+6)ftbh
zqGJLXQ_Nz5F3zm~gTUvvzTI<W!Dh$Q07qM!=zHi#lo78A_OsDC&IIlD;}TQ<U3znz
zPl4hHl2eA0mk;LTf9)5JX6`(tI-A_~t=a+qu<bXQtDR8osR;|SL;q?2oE#!(PcSg*
zy6>$nb$uW~`98>TT$x}<Q)JP_@a!ZQSb9CT9$3&&gz#E@nB&b2E21{w@MPlZO!lA<
zO=u!T=V~<&q{H1`I4-@`(13N>tgqyGtTY=GYtV@(uVTgSyf-CGM9@0vHyZvMMT)}g
z@T*B!kG<{k^9ugd&+MZXccXGU^m4RSx!TrtLvEB*Zv14vt|WH&HLFEDIAO}Aw}D<m
zsdi(qkBxRaJGf$MY)~dNBz!a^*6Wn(p1!D=0lgMznN|cvOc4)!627Lj|1Z8tL4^Kw
z*r7)Z>%mhi_`LRNzT5o!=-fe(0L3E{)W&UfQ1aO{VUOGzzq?BS02^vn*2{dQy}a$&
z-GviH5$Yx>4sZnv;qiA`3an~2a^{EvC`z7huC9BQX+rwS^ap{sLCUnJF4IhKx)s{%
z(zpNn%}WnmkIS!?>FK~S!FFAZ{5Wjs+IbFILfA1<dBc1hHezNldm?%nfm!SoSF2^j
zWUiK)$>ryOWvgYFr)gki(nz0RbgI)>Ai9Tch^4+*?B#k-eF5t-D%Gynb0S1cAMBV8
z^-^C)3moJH#(q@*agki&B!^puGu7q~BC(b(jsrwoDU~2Wj=mmMHtNFs5^@c|wL9)^
zIhM>qhSP+q1p}ocO1I;vETpE8x_({QQXs@9KtY2m*e|aE8JuIQ72l?FRd(6Nv4Jr=
zA3a|X?dJI^SM`<Yw<^v=CY4UVwE?qE`g#iD?_)2$KhwK(9LtI%fvvV+7>r@dOtFy+
z((OgmQ8+mv;w?Hamp*gU!&0{l3lxVW?Yx&1npVr|Iz6ie+7&ic9nz(e_9W&DY+#9X
zvvfZKN8-bsC7VjWa*g{FDnD)EXh294W0{u*hpI3uQ(s~!C$IW{k=GcE(MvS&U%uF|
zmp?&YG}y6n)~8v8wvsxTbi&-NnQ6*Kju!q%R%Hb9M+~?x(8^?I4%&uPg5sDRLl$53
zAzDW?Iq*s^a=@;?^|^-m5(sr)sc_B>;wt|xj8ndPxRrzfusrqEuY`4RiAj82`E}M!
zSISYfO8#6F`($FpPr=XZBIb*e+1qQQ?@N<PO@y4BfrgJbW?e1gIYg1Hm2R{4XWm`D
z#e%3WJK{*buJ4VFB^3B7kXZE0-XcYK{`62x)RsGj?sH{SwoSh$XIM2CQ#$|?&kjDP
z5Ur?VpCmR=n5~$Y$`7D(lmxeqzByo(o;JlI8=57EBUfqtDFllqzSsiC$oh~2C*#yn
zbBB4^6}7r`f@O4x?Z6G4(5u9@ne@@mW6jd7KrAm6$XSa^P^jy?ZZ)%3&LCd+g_F$_
z3fPv;D?u?m+jrF+WegJ{k|o(<A_t0s2|Un184eDzCkzl#tYg%yq$Fx)w_(RNzzcW4
zL6W|QsOijCON}l}rco!VI7#)1*cs%!v^4RZ;-koIoagPw834f`w*yR7gv@xT(|GDl
zYxBnub7G1+<)~DHtEKooUa_M9|G?{Kh!LAe4KFlRL{HVW02r@L3mHiwZu*S#>Tcsa
z(}gqn18MadP0uS-PN5DDBDA2!IaM<<t^rEVqn});ADSNPhuInpiK!u;{A^1Zn;X#V
z-oyT$lY^6rg0Y2J^fbAs{n%ftC<lSN{E3zNLzx&7&x6Ziq3rdR<MjY7hs<C^lriyF
z?g$sJNQerCa9ATpPN@i;5F8m^#7Ug$=FYMuUOI-hlJOQK$zUu2DTskAYpD$B0$Us|
z6&YGy70MK*#}U`##dE5^t8BJJCz1~pN9;78?5RqcTnn6dKc;l=^*TMC2q(`(cY|s8
z+wmvr1$)UUKmzfmB-<i$z>MzpV-VHqzD2b=%kY}Q&dg~4ILL({PWPI};2aP${n2x$
z-9<IcG<c`m_7fVK5Pg<V6I!nUZAdNMuXpv~?y~^Jfx7OcL12~0Rb-q?BcYP6l%3Hd
z7-FLB9C8dX(igWfu-6xTb+y`6)_r&)!MJ!=0+DZaOK5h6@N`|*T^dOux216|%}$`{
zc%$Ix8p&o!8$|-ig~MxMtL+)3s%0bbw6P?%FO0^Uo=L~bA_>)Z?fh71ejr>Q-U976
zZ;CD`u9BJ}=gb40ztKZ#EHgZs#cJ(XaGFZ}n7tT+itMWh+N&fKPiKq<hZL-k9CoGi
z`Xdeu-ns3NuT~e*nHj&LA5NKXAf$w&aS7)tk1!?k25UWL&au@xpT<$1Q%9OAx38p?
zC^AR$mSJ@~#U9Rn6-z_n97o)WY1L21pt4EE7jK~+q8h&g0nwgmy%T_d#!R~!e+XWy
zFy_iY4a%9CFs}mX#+RJQe0at&HY?6b<__e=arz5z!$&_6fM`g_?>bDuD)L7BO)dHL
zKnFp(Z+I?Da~SV*1@03A<$EBGM%KVho~}_Bluqb?d=v=9IwkkjXkgYFR?PEiBj2WA
zfT^e6ZfD~U#s{n}nTOtQ)Km>88Wqy%K<W(MhBR#)4CZv+@4$=bn|!j-ytn@~fQOa9
zd!_3_I(}N$>nX>N(X5H`l=TcS-LR0X|DLV3>}p`9izbQgE-U8zoFu&}*jRpRTs(}X
zEe0x7{wH>xk~i~e?$HYANtxlrx@<{*szktrwKTmGL<!3Tdu9fqdwWrOdgwNs7jc0u
zcxnls1Oyj18jHC>BMUi`H=^o88SC=qoL8b{QSp-j)1G!bky+MCjy3gA7p^n`mkq0g
zqPzyuqlGd-n4%S*rN<Ic#mXcK*5G4IQ>;Z+4#bY(n?ZtnLndF0kp-)sPp!qW5_484
z^)C)2Y7R#b6n1*aVN<4Ysa1<Qk>zRi4usq1QiF(AYegF(qbL%)ZI&4N@wTPJP|)X*
zfCXOJdU3lBFeZ<RPn9!SanJ?jocU-yqbSX#x5^D_p3afYW-*pKHhV_DLD?i{e6iEY
zOP`xs?#F0=c_6S4wqCjwLtyOb7ITeMv|0gCI2M&4=DQR+GYij{Q250Cb~;QNKPoZ0
zrnoy*Ui6tcmwm@gd_fUKN$`hj$~IN^PwDgKw0`J`!R2UKShDmjLT8ngbsk5hwJ$!h
zp`!zpsu8jXH()kZO(Dm49cbix%z-i2q)X5BI<#?Vx2kmH$0#!FJle?t^gWG{-^%^z
zV6Am3t_Wetg7KT!g{6HzxRa77XygnpV<36NZs!eu1M50JT(*&yI~6Z9ALs}9VST^$
zZ3PDa^p6Qn?gg+sOtEL~2!t~O@gmdgzyP{GN~pRYVGQhT8X8wwog{<Lu_4L&-gH+5
z4fbx*r}Gywhi_Bi;(HR|FC}J|cR?s8Z;(Xut`<swuUcc9M#qgCBQFRXGv|25)(?XK
z)&c;>=;-UJO7FHfMx`=u9^H9y(=$wZc!Dz1K6@GLOm!ec5^c1mw>$IAJv^OyV4_aV
za0(8XOhU5fm?57fVB5nle#}4~4-`h0@RmPaX^Viu@0Fgsarlt7KZz5;HGV)W2}EGS
zzXvtF>chI{K9|X%<WDrCy#<d21tWOw!}QSCY6pxZalw~FK$$q-SWfS)xC60tm{v;g
zA<uYX9wc`}u|TgLd4tlk0l?&~7~MY60lgQC>eH@l!*airs&2lA$1h|acV+Os-rMLf
z-M$7Is#z09lHN8G&&CT}=PaK2oj+Rfvt;Y4-)|&&GJ#)Edtj_rjEpk!$yb4B-@~7r
z4oPv1o#-)Y<Qi(goLCebwAeH8nsJ-mv~VvmO<{Q6At~~S-5$syeL-eQr{wCg)?W=X
zW+D|!p=Gux|3<)dzvt?x%(;*vKdw-rw1WVRIZ&Q>Hu3A^e!=?v0Oio}3ID^7$iI!M
z%#4ixBReqvgHe_FKQgN3#PiAzG9ZMy{X}Bt5Z2D(I}H5l4-7`AVULWLTx2VkTqJ4!
z^u8Q2F%ZU+yMNevd&&u52Emi7HWB8y9M9NuhHglPrJ<D!GLdfll>u-WJ0%Mt=C254
zEqwMTaZR3o$O|;7aV&-XGIfp(mk&s@I#R36Kx!66b*6nqzb@Fee23(AOVwtMaW<Vr
z@i56=L+_%2r!UFs_ZFjsUlQb_jfeGzSvlu;G$OHl%AO3Bgb7-<x~5N@YF>V64R`PA
zCZR`DoCpK&X-CX*;9WJv!Cu!1JG>Npdw8FV{a<7DvrCu!DNs(;hrv6kqcH{HwD<R)
zt9p|58sT6`88Y2PO(xl!w0b&t)x$n<v{1-6$AV~aB^gG18jrhE@COJ_)_*vHe>3k)
zoQ(g?qOtq~^3L)fA@4aVleSp`DBBOHO~Ih-4?w1kRmaUrDU~(@wH4KnxogclIDHNG
zFFnluhwZAUqPhfcxt#RZw-OW#LfdwpXf6WdWbQEOKWQ>?g=A4Y;kZ=vfl*mgu=ip5
zJVO#Al4PXg7X;RMg`en&1ad(Lnvx<%f4>jDcVg&lAHBJNGoqErQ0GVp-v}XY29D^6
z^xRq<>`Rpp)<KH!Zk@d-!VIN*(@pKDz~479&D>>VM|UhNota`W2RYA%1PwC?I!GEM
za4*H(w{0f|RH}~Kmdogbz-ro|Hoszz5=sR`Q$z64R@LWcKOZ7c@ZvCEIs~XrnshK>
zR$AneiDTqRF<gTLxGHfc!mU7~$Lle9O5jI8jT0-z-&-%o^{=U=xw<Z_?Xn8UL#??^
zD}4x-%`>W}^<Do)DTRC0=h#4Xk-f|suWcml_0FpVrHZ2?_gnU8*_2KRbxxTPHo>@0
ztQ%LESNUA+TG3Df*EAV{^7*cRN^@q2o)+?}*#z4r8x!$lLzcEfN6rNH0&@^YW6B~1
zFZ>Og=-OUw`IAfUb7TFCg170>L)@;7>|+PMdeWb{OAne@z>7SzDvFuY37v*~VX4S=
z(YW4CHj8qGZtZ7_OB{4UzLMt3V6yzP$`xkZjn@=@)HmEvJo$a(S+8=T@fGujgsy1i
zMi!m9L?E*0;iA#4@l-lrfU;(Xq!42a9Z~zMwwYH(6Gwrn-->cH#}OZk$xrDPY2Pv&
zf}KPXgk;}Q&^D^326i8X<J$3v!Z?(e@bg6HxZmyb3y>OAS?qsb+JD`}|9Ze+<@}%b
z3zmNXC|Uj^fU@S-|Mj=8s_#wDtw0b01d@EBjn>v|-!EN{RCY(Vl@dTP8_Faw(HBke
zljJr2q}%!vP+F2{bu96Wq1pOy`n)&yCWbp8?eE@Z;Hx8gX#40mywGCu-4lDX>Dbt>
zvg!Fe_(Vc)hNbWiNm5B*jT(Dt&%ayrd?C^W_+&~}G-0?}zff!1Y~a%QJoLboDWg&U
zo;Zval}fns5am~X@{s*@X+*U>)fh15vX0scEt5YjoP<AGQR$&{SZpx~9Bi=Wcm|KT
zPkl9+G03q9(PC=|oHS}ofVAx@YV%n~?Xc+j_|0zBE>IS^@)cpd%4L`!qx^o=6^Fm_
zv;FP#jDWLazu#@BO*+$b)t^{8f-X8BQu?^ZW_{bh*;ZUG;YOjkkfCESzVofE;Rpj3
zKMICtEBPfb@s8L_HC|!cnVPV9jHaCWO`5uQ{3aC`WWm+$%XWpqgxEk65v<oyB>Dsa
zpC|KeQj;;0tg_@<Y$da7n;nN;K>+4`k|)*eH(GdcnY%=2_N_C1z=By@CXa?r8g&a%
zDs8OXiM1G`CK#Ax%~DxMrIlDq7K*bHDVh*k&Yx%fpwjFT1kDYjrr{1fxT#$%6LEBK
zbr#~*Z{9u-@&+>VV-HO@!jle{E1V3~9}M#neWTk>q)dj)Tb#U;O)d{2ZPuYCc^>FO
z0dVMJrPav1?0aZPmNZpDErQ0rGw;-J19$X`J#{UtMd9(ZyIxhDuP!Owf>voFdlR8C
z+M1t>$K*N&9&86-sK<d}EIY#=DB%ua&8Yz`!Vq({`Fx8O4|y+D4UiU^2dG`_l{R0p
z^1HnWVOB%q%@b9olB0X0!+Xb11DK2$k9>)beu8`jp_xSl8Dd{SWs;kj%$@CWEo&xQ
z#tkBVmPapoIh|A2osp9Xc0WI?v*m0f9u{^#WFXxvNKRB7hNPHAGq}4-^KbsNc;YyK
zx7$%-l*p749}!vI<oB<JVO(sugmC|8Z%2dOvTt{m=?AS-O8Aj&S;Vzl7Fncs-`Ah7
zuEGsrMXzuOkg;dGNfZj79H70m2xP9VlSsae5gVkb6m*p|4BYl2c7M`(H7m&~(*Y!K
znTJ05C6%~T35O&y%oXiITYrO8xv1bK8L(Y*lUP^8PJL{fF0dReU55F^sD!*&;5NXl
z+?qEbtPg;>8b|0*SQIjz=#ePa$A<AVzg6Ved@mVjS$46ngKZ2+S}1d?G&O11xtx;s
zo+}x})+iM{{V&$=-#S}0{<nn`)w%|U2c@!5kifc__(Q#@P<%YG@%-Fyz<YZ00!EvL
zcAL~JlNnxhM)v-zG`5t7Lf~AUTG0k!&Ls1}%J9nO@D<$ymQx3eJbq|ZSs)*PTWqa;
zAY9qRR?*AITd+0C%F54ZoI5S(;o^6{GG^Yv@PRDBuV>Oz9n6s=iEuZ0gb1|6*<%g8
zu|dK!l{eE$sn4N2f7(!KuERzq?npQifozNkclmi`1deG|m>|l?z}fKAsmp23ZZawP
zTnXQYJ=K;o>~g#<bKD*~w1iC+DCRs*e=0y*zEG4i{1pjH5u<#pDkJL<u;nl5?aQFU
zd^5ILA47Ka-CA?FtC*%o%kBtTbtR;h+w$oo4;`(mTJ5w+@(<}7KI2|!*H?=xyP$P|
zIbsvOM;Mlwefo_?#G||q&83_izjY<pyT2->RF353We_lKE1B{Yr8$`<HYJw@Gm)wd
zelsK%8(V^D^8Hy*$9m5KROPw5i`HNR>#RAkVTlYJDbT+}O8M@NBv)($G0DCqrGo6_
z4e$E?0SFbAbi6~-*Bu_8JE9jtidb8{8zsd1y_DbH$4MvVV!LldF?9fviHzFmLFTfX
z^A0yXOpC|O|BN89m<WzgA<<GxMRFF%5|76B$LgzMjhKi&_zQNO*NZuf8C`Rzd5l7T
z>hT~8Q;G@B0e{>&mlket5d$3mu%vx~xwH5TE4?ZFB*YsKR{Byj00It&Q|O^=b;xbU
z?JPiJg4@GH@HYzpSeixHcmkY{Qpf<KygVpK4$m>2X`6IE)OAoY@CE(Eg5Nft!Xf6u
zd%>6wWKx35N0)FM_j&IYF(=JvF3gUK!IC#r0V2H&eikDWwgj~DUAQ=$=C(%6)?G%Y
z2AXCR)+tOZr9C%-2LKSr_l$p}%|j3`R$>;EP17>4TFM1a-fA>Q<l|$A`<%f1`Wi|n
zr$RGcm&C&*S$zk2e!m&hS4HkIM>f?nNnMp*B+i^S=al>bh_QTfY(=j8!~XfXA8PS&
zz1|t6c@x5f0X&>??=K|=YFRX+WciAs*PJv+3Qj!5QGg1V12-klIl54<8@u0KdS~Ku
z4o1>NtC>3cDjY>Oih;ThZRwI{t8X7}l`3a^izR*`QXz~WBx@o`O5;^C`(cHJ6O+FD
zu_BYcKt2UD^XR{Tli!)ejmL9*JR%d7`cX>#lGcp$xp2Xw=JO2#rTfn%==|*ojT$ON
zjz|x0DhYq2ftOCjfN%`!LT}Azk$n3G2)PW9z#1h0iBNogV!iLxp-4!`^eK@MG(=4<
zuRrQ_zQDhIK`;66HUFW}|C>u<<YZ>}pYik`xFpv9h)Y`j)o**qhS2jt?Oq(fs!k#r
zF;&xFI*g`corTfEF)WmTDXt@ZFXia^0RNWqZ4`z=Ii7e`td%d2AdD1&Gt<q^Y*$WC
zL4X2!GWsR=pyAK<cMp$c9?=W+^!%}7D??T4pUW#3Yh9Wfvn#Sl!_Wf;kxB2+$<eoa
zc?O^hlzr`S1T~sfW^I~t?uYZMmisOvq{wGlSW?Jffyp{%@2KG`9G|T}12kn!L_DsO
zKwW!xCsr%P@MpqGmq|4mEKkvjYh>H4H_nw$#Xho>-Q-f~q)`g~cL=oZ#;G;8Vbzr<
z^@<h04jP3fJD?;G_VMZbIx>G6K0WmDT4^Yn8W8Y8*mA2t0xP7P5QrCeWXy2j4reA&
zzcZ&Z`UOMU&8tPRp$|ns5;?8=@Y<g78nIZ%x7CWIZm4uF3M&)?9dD7ct?&}TN+biW
zSvFQZW3Ko2Ypb!^2&maWXz}&4ya2qYjm~w|J0+erfarvfLZe;!*Me?x`#SLeOf$kE
zi=^HZ9OF`8i2Kf!TXxSqK@!6OL;Hq979G20p_5T}IO?Z0Tf2ny!^p2z8xJ=a#JIUt
zAO0{=uORFa9u^R(fGyQD_9ZC7K!YiWGm2m%TBQA5G09VrOGjg|H0U2ivKqERh?sNS
z$+%Xim3?zDQmALF_lzaT#Gk%5)ert>C0C{^x_@?4O#O8Fx1dRZq6a?{F$f}FepjOh
z#&P$#)AzJ{8TmDyc@R+v<6P=b3oE9Pg^_<ZY0)4v8KZJT8+-8}Gb3M+1Rlr&vjW#e
zs3jc=A}^4Onl~SOALnOg**5fLHxQrBa#t}%MuLbGsa~M{AyZ!1FZ|J1$NR57o5`gX
z;Thq=13KF=&#x<yJ!<#OGfq@@;Ev^$eZ@z$Uw+Jgz^S8*KPa{0s#-^x<X!y<EeZe1
zUAv?js`6|5gN2@DStOe)Ws#PFXegwoI>)+8L1gm8CEokLJFoL|p67L6dXV4YnB>y)
zr*>`hvW4MQl!DV`^qX{c#FtgCmVWZ(s~&dpCZwebdlkPY2hbk*X)brp10C}fpBgd#
zM$uO@gd=!nGY2_JI5ci^0}1TpKDqL$v}xM8Y#5saEKmWrHyID5z)GZhJIq9Dbu*k+
z-d0y_0U)?|Vvm)(EL{|H+NBleokEEP_&Zehw=_?oKfi)1BNiCcWgw)n`pbF>p{AN^
z*)o+IP>&jcmyjffK9a70QAtUvC!WwaY-mun*U#8W9ZGlD!FY%5L_20nNh~fV4q!~t
z515tmBa6YVE>l8QV93JjgVZ!tk~Zd=-wG;v5T?5-?3LRMpH@wDE0aJ3R2sZDIJ{Sc
z=gIR29c!-2s*#Mmw2gEbK}rNSCqYL=tICsl@S6dxr6BFXmvV;(gB8rG^Q*fQu@eJM
zsq$q<Gz$J<X3lT9X>vFXX$w^LRmuPhB^n@k37v3=*u;$T;P-T3X}DMH;#L_iEgFgT
zlBo=mn2tBA(6LYV1}E+_Vk%Z~ZSoc%x;~#*Fd^$<v2d1_Yodqh0iC#SoIm@j%Ll{S
z_+7hqGm4P%?B>i(em2VKVuOoE1{Za$W&jpYyNd_PtCoOXEZJ2W|CE3}E?2`@Fmfks
zkRC`<VEC@PYqGD&kB(rxu!3q#edC;$X)#S`2*=DTrvB2pSAb@pC?vL7f#s78J@!d(
z^7?{(1O~J=jbR)rYvHVJasdmV;rbF<jCb_H@OAank8cWal-U1xnFWfo$#sznm(^E^
z`bS4&wX-(CNtnV~3?73UjlosBJ<<>`)Nk`cCbutS&Jnh~8F&=B@^U<j4dLy*;6SzU
zlOF>k%o0bSW!x9WQAYvC!v9IGY`uw30vMQDQ)WmA(wwNyf-T5CHpmf0PHw+(x8I{$
zd^~r7Skdi?4HfsS$vU2Go5IH%<0^z48^sm@^sD_UY7!+2zeAYml?I{l8EcowF7^QA
zI<I#!qtsUSH-$v)X^)@y+=p7^LZkc6C3U&Z%S<EdJXoo|b+r5<=)%m}9~PWe8Z>~X
z!&FdTx(zr4p*_K}9svD0IFTTR*km<z4SpRxT;H!h?csy~{N?+zD-gxL2(l``{7-qI
z<sHY6<iaBv?ciLLD-<8%6iS%Lh+?OWXocztX+71Lh#ZolXo6%<ZJjG5+C#m#XUF|v
zG41jnNu3r!!5D<HSP;M_S%oa~9rp4f;BM$>e)6J>bP%dOk~!__a_7>0eaLSGka|bF
zHd`p^<R6#I$YS;goB6*rcg`56_EOI$+(YU#cc<D%3=avG787Pwd(5a|9F6U}7Pnhv
z)lgh(U6(uQ7JcAY+K^iE2@#<A?)($#TMT-AiGFgDG5{d+gzeDmLl9rLNjm{MCXtOb
z2w-$2!B&|AI_lZ#Qk!=7PVJZ~<4^u~yZu)a{jdLOMh*t{|8BRe{{RNC{zqUyjoPN|
z78`=kZXLnB5@a~Wj`O5e^lO1=5<$ZpdKW{x=7v(uq~_7aIR9f2cd>|tx>lKm;$@Kk
z@zm|qRK}o($X^2Z((XO=Dm4FN`Y^Q9Z~l=|%URKy$VxRii(OC2OJU1Kj66~)REbbw
z-Zt=?lIGi=KtIiB=0V0^v|$rOr?~C;Y&vbrtL)d%Atfp%nL~8ssjNNn5If;}vw99|
znMR-oR|cZlt@D$1R-+KUv0Ho$E0_2PMY~DTrXL6^5oR1^h*S3H3JDS;2s*_<1Zx)@
zA4L(EN-$@CFf?L!*XtA0XV2>~1x>nGaz}X@QayZ6%%r_FqeI{!$?T|BUC=3)F(V|`
zp&`do^gau*^ML9y7G{SH3f7XZf~JcYafBxLpvpqNlB;>uoM07h=LPs<$8Vuq%wk1F
z<+hfJE-&xo3~6fA^icrj{*11Z^SM^X*XI?&66SBY*7Iglg-gf`HeeAkc0sSX5yG?c
z(IBC@`pRpuIdW1LbS*!8T%4(wqTgarg%t*<q$hp(<F^J~t5pQ{TxlF<t21+((X&t6
z{OR-j2f^#5UiMn+S1SSN&J+3HaHW7y+s{FoItfD@Ma)3r8Jp1IZdh=QW2s^nE+rfc
z^t_hyUM9xdXK9)&cNfJl-s2B7d|1#>#|Df2@NV<S81$^3tJ8uNeUv)xu=zNcF~@bp
zRv4q{3JD-<ioEx5PJtk008pXdT(1z<p2ja~A^I6+4G`CWaUmhP+dI8LLnrH^2k9F8
z{s2v+O1sa4K+_rw@HLwif@yOsunWZC+`lwo<*zfdOZr*F@&+)(vX3-wH^o)l;swdE
zxlJIjBAl1;GjY#751aNmWYg<lFdzIKC$`~$TIG5(?F<~1f|Fdy#e1HU99C4~X`YK@
zeGJ@#SxGPb@bZTFr8v=^f%KrWk@ttX%W-<5Yi>LX4W60e#-&!FkozG~zZWbL_ek}P
zT+r+(XNIiXcn<*be~~%PojiXc!L`VGoG>Q^IS(z5%?P&SIw&YG5r1<xjM?*vcfkp?
zfp304%rGNB4?NsF89}0)^-x{#8*t&Bm+r3IVqEV3)%T*cCH>D7J}-mA1b6?gV%G3I
ziSh_^a>v)ZCXueceLeMhY4nDuz>P@;x9q^D<0N<C<Lein%B6OxRll2`d}V6+5%i!u
zVrhENqp%Y(_&#(ewCS{8F%VO_=&cT5?NSVhEr$IRGzuohDi<3l8+&ymBp7~(G)xPu
zQAX5L`IBo!($=Hra4=6fJibH_Sw`sz<e)on;;x&{b5u!3+lk2D_#q6>^{wyY7>OJw
z6jO)yiApZL5gnVA@sw6l@nK7g597|?WXc#&6H?2asV_B7)BSoHUt*6v9@O=0{MX^T
z3m;SQGOhBEr>)VfYyr+bD`r86XMND;OPd0e;bYTuow`)UMyay=k`j1oL*uyV_F^>I
zgp=ByVygA=XBu%yJeLBXWvNn;)L!3nSRcEU`XD`j+bCi8S5CAco)}81jyp@x3;J1Q
zwF)(2IVNyTKv8rAO04@qp$=Ns?Cl41>eLg!KNP-y3lWTr?Ehck`v)O{^*<6KhSjC*
z{uaL83-wzxs9%gklu|0TtOvqTAfiUwY@+$g3%bjmqVRUvyYcurgcYmT8?}nf6wmbl
zoY|-ByV1Qwc?w4tyRUgEv2oYgb#Sa@=AV;N&M6$ZsZva*S7j1<ByF)iB8o!_C?FJ+
zxZ3>f<9hiZM}`9)G{Er^&v3Qfwq<oYzL90Ch>*cOB>^P82o#)Lugqw9I*(pORJ3v?
z67DRKZ(@7<C+RQifIc!+gtX0bC1%kB%$$55VR9Psm#iiB@`eSX-2(pi03JL`hFYJB
zPnBPeDQaHH?G5tYa(DFV__f>oNxN#5f?GvXLxKZqU|u;w1U5A>_CikvC-zdmFeEO9
z(D0qo7Skd04l3EHWC>^pSfUT-mxXr<__k4@S}HA6%PM<?DXCh_%*%MW@f;bJS*a%d
zC=mGk%{Qo%ug@t%M!1moaPc2x4>;;M)z3Ii5xOJ1@#LBIDU4vudo*;u+OaiT#4T1%
zTPli1GYAwhW+@ruJB4{syqba8GfT&obMub?cCgb3{nbXDsx(zi@@-zqm+PPmsc{8L
zMp@F$%0Ny0t4ZZGbYM(E?$04*iHMYsWku;9Au#1bWopMWfa1Uv$N|9o<*^#F3TPIe
z?{d(Log;DSEj0d=?U#35Y<72U<~yEwN=#=Y#3$Ovnnk_TND~V2C$`(daPgptl0=&t
zbxzEtZya<7N>kn923O%T8ww&IilGx{ZJ8iw;y7uyK!fz#OZc#L=BT+rwddC<)*Cp~
zM+`!I4@1zIemISz1__Yl^=!dHcLTUKIc&LprP2NP;sw%&)BjXae3BP&-03o1e5w3-
zsg!>x^y*zGlCMG#5<>5~=|mO%Gm=ZE3j!>_mdNLW2NT5!Z~TRDDO)R86!TS4q)JXg
z05H0LxyjygA2S}p*8~W0<gU<}<?jzOn@nlnbS^_&)JcV>$j&0W{mhJ;-_3nv02hqa
zO9pi!+$0ZpI0*)#5aF(x3i*k?UWSD&{rtcwB#ZvNK!B#Pf$a-e=MTb@`lFd-FUIlk
z#zbOB1}ja5td8!H@p9H`o91oDlD2&++A|q&hpqo12l#W12$6$pGpF0HvJIS@&(LYx
z7jPvKym1B&&feF-V7il?3~qWL<l{FQqXh%CG0I*GL4Zj!u>EUL6n`qNq(6-6X4aHp
z>!D)IRUx{YH@5CeW1BcHJfic)ZTbyl?*dYx%`7g!_Q)ER{pAb!=8$zS*R&~Jq628B
z>h%&R1t8!DHbp)umz>0)UkE!{fq#i~9qU)>pSErssb;4FW}gWRJOY7aG*O#q#k@oU
zte$zh5FalPwt9}%rf-m8`<>$T9_f||f}zTr+>vY0dLb}+T>+p=nFMz@2)r}~4q;B_
zqv#Nm-`WXoG^Opgj4jaF^u>~NI!$J)H3<YBEc9|f<x)Xfs8oxO=50tUt$P(tN`0n?
z3+SE*BVq)4+d()2IOC^Y2osPp{Oe6u;&XLvBf>Fy`VNmeEl(r4YbiK0wpu1;5xP@C
zo}ITgjQZ8gcZIcdPp)aME+%NJ;At`8a#4agD_TW{TU5%tLgCxadtHOjM5bD{QBUl^
znZ0l_tH{@${+#_0eK&P;urj4gqFikGe(i}g{w44aV`p7*+5CGi$o2A4HUCgO|E(c1
zGO_$m-Z0xgh=^?ek%+kccWvNiJ7({y@?PyybO<RxAi!3Yang)6`E+YUE4$>VuyXxy
zj06>t$?DCV`nuaCygvYZp?9VYy{q?r@X$WL_pV>z?;;Fjl&rjKH(feI=dRaYf@jKe
z-(ynGF5T*>N|)Z({UiqZ6?W*h2m-+b38ZE^bVZ*w?H{PHKCTc<Wu^esi)o@twdod*
zr$O>#H|T8pmsAp@(d?q9FQRv>yE^H|2VHej&IC%+LM^mSP`A9BD7M|g-zLk9n;D{I
ziHbm*#%)(ALY$IYRziEcYFjiKq&RT$bCD&c>uF~?E2baS+qylpm9mQ4g-=Su9Hx>;
zJsuzXU-x<!zu|2Cb*P1ExYCEFDj)fPec)O;q7IgLrqF3dD)i-&>F0eKiY=lmk`<RX
zkZZV-4M{uBL3Yq!Et@WK#K3#_&&1Sif|#1C?4o!!3uMVpK|6QR><tvJ-8!>rHqgC#
zsHtKa8^KgJYQ#R?0i>ZW;!w>vLZG=(iQIQR{JG$NNoz<uPPND9nETZQK}Qox%5<TJ
ztz_9;hKm?Tc5drKmR1*JyJ{>hc_g%W1_40jOGM4fqi*0gcGEig>=!>rqM(+$X}Ray
zo3(+E<AJ)VfrdtO3<(5J0E)O8^`qY9V`01K%X%RfF``9->tWyh7Qq@?4h!hO4m<XI
zy;Q*0^7(Z?^vV`d@4^nCS@;BA4~ja2W~I<LCD8SCS6_!6bB@gcqVPx#kbp1|Ap_9j
z9Zp0j5XBgd5igV-2=U$EmVcy=oI-U23uW7KzJ-c?3$|gGMo@*s6N86UHQ+KDoRwg>
zqlVFg$*ZNIp(aAs9;OzpK~-J2(w(KrUS6ryJS~<h^EZf}5RhU!mz!F>jmeb{JgqFk
zZTHy#0XZ3-VPCFnq;{sMwY&;?Y01BF#2l&%Wta)Aao1>?ak-~l;A7#My>tuJ1Tefu
z<TqZHD}t)_QUv4aLRST^TFQ=&j~38@VPbKDZ#`O|)wJqcJQ)yjrAQfy?u$Mt2O^XC
z#ji|(?mb{+ZhE0&b69s6t7vW*qYXT;{`>Xm#QQU`Q`!x)jwCuXnuVIX2i{Nq2{<vA
zt&r~g-AJVNMIwygH*cEB%UgSkLEO6mndOs-s%<N1gYC`oa?KtRo=(uxbWzCEK8-`u
z07}J)x-N>;h~)GNl1ezEDewn{G1Leb1GQ~S33Hnm2~Wb{_I&@wIz>o2;Z-c$s)LXD
zjKrYPWE>49rv9<DnRJ_EPA=@=G5o7@YbTeSt46BTFjJhjz(mEO8ok(2!$oI>lS3YM
zuE$fq=N<6!`Zceg!)0-Z{mqN_Up8~(Jx%G>t;64rM8u;cs*%rh^FM3}5L4PFUDWYF
zI-Uo$+DDlj;S~6{7d;(ABJIxr@$CX0IxPq_FwBh;=PaxUf3Dunrf+{?9gUBHPW%)>
zfVq4<+3U6hy8p-kZkZUK)Sels4Fpzjj~x!EXjGKBO};jCfkzGul+BdVb9<vD@vo3B
zA)bwTy3tgfkV56QSY}+oQg1C&zd!>i?R&83;~)psKgb0=xJ@?=!aW&h#kHh~>SOm2
z#(c~j5hX>%@bS2WW#9}Y<A9Jug~TdZqhtf<S?Ce+Qj--dt~E(fmRche32>uPftRtq
zvq_aAEFmQ<#IJQey#qd>vaBUJp&`}sGj9eU5EN0<%2H*R`XqtaKn$4UR*JbOu~AU~
zrN2DA|24PKU<{v#deto-_@tP9oSXq|a%2k0CV-r=#CKV9)sEN*!(&ot*!<qV<F>>V
zQmXKs1XI+9_TaUPyN28+$!ugY;ZUQ(Wn<JM2Gp4mV}C1X5B==Ciu6-o6o|o9`sKU}
zH`r+>cd{kEY@g?gfx}5>nPvTJ365!4FpB^(o9m>slkGT*tw+*nD~k>Q?@vL+9pxbb
z{3g&~(>2Rt&MlSfd+tRe=GrD{kzAG}mGQtIEb~u9s$?TzBvV!WU11IU$Gm>2P$QO<
zgq=-IP#xhfNBmr&<puv8(){LjI#<z;y~zTy-E$_Vrzx3d+33`s+B&&Dsx|nH5e~d;
zNLi4wMZ5%q30gZ0d!R^M_+&mJ#I|B912Wyj+t}B{mtwD+xv)TVbN#NpAt+##Ts8w)
zom@w}ynRe}w5X+3PA3xJSk)2JEJ>}gdMTsdV4vF<{DKe6ra&O7XHX+D3}l4N+U8+t
z%1Cf^U5T8a$udwqXk62FXaqY@WR+{*7bNEzhX56heY%HIR`{Q<LsTdSc4vd3`cgnw
zVG>wcWT@#cl7rfQIjrx&1<~__rg>TiIq|6i^$&*;XO2tT%9#E?-B2{`HYEf~Sft*s
zU()Dkqz2pj<ND6=u%1qfV7aEX70eqpD>Lxo*|q4Ww@`tSQo14PavJ_v!9`@v>PcJF
zjQNdu?vEX9xIltZ8|=9{a3DC}_mlEB0RD6=WMpg$kj8Cf&G>uYKD>J#a|-DbB(GON
zO%o~DEwcWmlR10A1_y!c3&C~m`0TgtT=hu2JTpvyi9Jv*3qR3Nj4T1O#RJ;2jFXVL
zpV!$8w>Qi>d%;Nel5)4{VHL6mrEK(jBJAPkBlV`wdvu(mNVb*YtlTa>iKG=M#c9ph
z13VMxpt3%B>7BGjodTHg#g?9zFgoQje(;^%P+-{p^Gl3=FrEH0@^i=Demufxfj;eC
zbQ&W=05Y1Bxk!hSx+F^DcxXqe9fqcWOQ5RC&AtH@EH$Ei2-MVFlw^V3DHmch4G|eL
zq#imm1qO2#rFrAbYa|72qybdbo6OUElqQaj*XV;~+-FAH%^S}Fy`I<LC_Z-?`hthI
zI)^9>zg_(Q&>lP;?6swPZ2$ffE6MYxGo-it1BrL3k2GAIq!V)?LjRnf%Go-zo&w`@
zJOE?}wp?_b!}`c|X8*~L#vg$wAL#qAY;%s9(LN8OcyoWss`h{>?tPd(=(mjLYZ=WS
z?IwDmHhZUX=?fy}Q=y;vu4&{FPR3nKZ=W|uXuvKpq7M0-9ToKQ4?5$aOg5|1Vu`?!
zP{l(F2g_bd_f?bSaS3L?{JY1`?5oCw(G>-T$|~uXO_GMHjz2_U-^p%Uq;oKxNG<GJ
z^=S#EukLbzC?`#sbv2S_Zrh__o+}jbAF5|~X4XJh(w-|Mrro6!yrWJ=@z+tw8DJT4
z(qGl}`1k%TRNFgY6$U=9Y-Y@m<hSwGcn#=&4m9;>T#}0-BXgBJ31va~<Q5uC`WE3B
z^kb9TlGJpgv|Cx0W2p19WiSsiq1joex#lKZM(QB^C1|`wY2GEeRmrlbm9!dFW)uwB
zD3t0|ui<Rmm^a{p3Y{D4v}L+_59EkrKX<^O1xiz?)JRTnyrz%WwC~nos^OXN&FKTw
zk_FAjh)F9XH>**8eY1Xm`nTIr|9h_d*R=RApAsu8(|<olvi$?+!}cF>J~@e#wmE<C
zz!%?04IvV;UVS<pva3={RMI=T3aY<LrW67QwdLMlpFkH_)>U<348Pw_vl{XOh=9*$
z&@OTnI1<eUKK0gwwg*#)B9tpKwReu`3UVbV4C9@~7Ex5>3-@uV^j3z>rBDiKl&Tb9
zBV?HHwa@Qsx2l|EOvW0U1*k~N(UEw??ioX~6tT(8L_>*ojhCQjUg)os^7gz;Rw|te
z<BYS{8x5&H<jVyPzLez@i{rzmj0k3VBDgFtTmk-Eb_k>@_F`r~W%YKyZn{-=!i~6K
zg{^b(^gAv*7vXiburoI^vv}5)J?CTpk}WFh8(V|ZI7wG*r5#>ih;!n7{L<g!TKnWy
zCser9hF5H9Pqm+8Op>tB6dPShU%>&62F5sNjqoe4BSD;6kphG~#Oqx(?SB!$M9c3*
zbh$(Lvl~Tf%EYAl(qv<LGoToXy%9hno|$so8ZZBKQEJWp-Z@}@xO~=rV$v8a3BjOt
zbz~-kVKPReOGbLnkmto){~P%lMsY}uqC^1Gr#JB9z4!y_vgID9Ll%{1+D0ll_c@BF
z?fDbXlVZ60AMV4y)nFFp|L;2dgBZ;IABn-kn(L06VrV|A>W^9dRET2qYoBP`t>ntC
zml3KN;2x2n0klX)Ncj!nC*DDR!#^BlUGuOANTkCvG82*=LO?!kPP4pi8M7p}l#ok#
z-#6Y~Xz|PIr_7c7q+fb(sXV_qvZ~7H?wiVf51&UxT`)f&kunlDARHNbov5-mMfn{f
z@T9$Gmqqj;qfau|WwWcFSC#!PdA?dhFL+Ch9D*N+*S?(Xj?;a05Zk#juD~mkJbGyN
zqnU%>@?Jx?=_RvkYMf*{FWAgwj9g9pZn<%ua9_xqHMgWuh$R1FQGuTog<uYx@+j7G
z*W=_){ws*RC(-qE>hRD{m?+kc4b#AW`j=F^EIzQ)oBedYevI)Tj{(DvXEWuX^CMKi
zy_<xFTlw(42p8n+FU6Tl)x`KP9v0jxV|kfW%`WHejgiD2@|C*G$Fp^9NH~J}VI?NW
zwou($3%jarC$<idw@k4O`!%+fOXYPhs7g3M+|W{%Azi7cCfO`Ei;J_I7ORT2GErmO
zh=6We&Ysc~^O;4!(hHEt<T(FfT~<rn_C$LJl#}lkE|T9;>3BZO)*eh>QdC?D-;eLZ
z>u+J!YrK*Raj_S>iM)Ez)9wFVO{(swoKjW#^GI9K)u=+RN;=+Lw-QYa8W+sgJbB(a
z)+MW!)Z(c$#CMFQ7?x9Q7g<^<TY~fiM}<laQ1Zq6-33TSQ7UZImHNbzCL7jiHht?*
zn!oFpVMcmzc0rm3;?q#ui3Z5Zoq?|Bge!sdK^do<=A2}oa<Qq=o7vDe2x(tZZbKB1
zsF_$w%Z8ooUx_rl_0d>mve;+YRa<3SG7ni@LK)TLBOJM~ClEBf8lr52bzV-458&x^
z(o<<FA78=|{WuyxZ{GKAy|mEky2g$YMf`CbgX6*?9U5B;Uz+EVbslQ!8y{R@lgLgM
z2R%p_^%A}s9270*$!G#W=9q6bG2U}eU3X4;aIp<7-kq<D45&H${&xLRur$y%bboQ6
zp01^*s?)(!nn!VWNO6v@Wh$Y&GWK8;i>(!@Z9Yn3#!vG*Wny6{5}`NTkWB>bV$2bs
zA|=Mu-yxa@#s`f9fRSXY*id^9nJ&~9i}4+oF0|Kv{Ka({?yJ;?I?Xr>)g;Ofn<)gs
zol64GA7boP;NEi4MmoflfDKaUMw-qI>zNlq`){t0xX>^0dzTd!QKw64biTs^S`Skz
zE&+t+3~W$#(QQLpS^;8a1({6y{c%SqzG#$U3NA~{S@)Qc-8$%c0l<@#bw#Mexzl|`
zpme}9hcp&p+wwpw{lm@cjUdZy$Isfn-9h3H&nex2mQuvU?1BDlF%@2J_P+!^bQ*xL
zZVD|@lKZkL@r9(CQ0?HEEFZ5y^qT_`2M*87Tw9jfHQ5T1LXiFx9M(wsz8|<4XxgDt
zk@CVLU^7GBh&M-aoK#gAj@%V?J!4VjFChHkCqchOcpzrE`LX`+^)HTkIzztnG*lNW
zUvOokR@7H*d0HrykyLB?u#P9^kPiPcT%)QX!INTO<{R1*qRA-(<KG~g&wMxli-43E
z{){cOb#q>ouIYf$JEInUpb~SXf4&4Da~3P1RLlfo`fBOM)gfqwiy_;YamMi{qC1s^
zu?I}FQbe_uH5qDT*V$S%%l#LdYJbVgq>0H~2u=mf@h$vat(smID`nDA548b{Ax(j0
zu4m#@Ei@*ZU=bD{^M<%RWl=rSSdW-PqI14DH1?qc852rllC(OU(kyJMk^$1l22u0-
zcXEyPvSx1g^<KUnd(FI>;zFFRdMJqJTEWuKS&TPigJC<MeZa5ec*g3wFGZWclcsVr
z<mTdpz^EsS>W3f)GZ?0y_R~Ru3UO$*%`K@~**9P!gZjn7xlwS&M|2l()zzfc(?CM{
z2I|q!y19vu%Q>@XStc;kIN~zt*%zZJdqO33p8vzxJGBcIu1U7bW-i;dZQHhU*|u%l
zwr$(CZM(DTJbmh-_eK4R8Q*+k#4wF$t-(BBDv-z+p85m8J8yxUgcjmTYXpCRJTn-N
zChGEJmo-$=lE2i@td`!v>xl8@LWZGK0kH{HlM_^Z)t`e}a^MESC-|VRgnoAViB1i&
zv4u$gx9Ok#8jb<Q!gFxL@N^ERJ&#+FzRea&p?NT7@MXKk)6%UG9q#+?iWiD<lUWGF
zRc1l`jT!S~@laVQ=moI`>(fDX)h6o(#jms-%J12e^F|zRof&QjfUf>QecYrgD=Y48
z9HGr0HkMG|Qk)_rM8k-#+qZ^9RenJ&n)wnArt8YJlKtU@1Q74!p<~kuj?-s~>zT1b
z74mtAV*1f=<Q`Qjc$IZ97(m8rzXOV9+d73fG>%%LwX+g|f;l8}tdv+L$-%Nkt}~vN
zrayz-h(J-vdHRHZWnFRA+olZl=7TU?RLg}951BTF_Z^}^6!lI{qZx##aM|%(@<d~m
zJbOu5CmUFx%!<zbspz7y6kXCsR6@U<s(yD5dYRXz9fq0c0feioa9M@5hZd7AbrM!p
z*YGdemmlWCJhNH2y?1YlM>3mKQ+pF2V>yo)k2&(dj$0Y4xgQ3OIPH{hEYfyRT8+X0
zc4`&4&&tDaGp<WaG_$`^7VycR(hJLITmeje^(}KuN&piz=T^&jq@qenosOmDXlfaQ
zrQ|G34O&ivlpd*D$=c6qL8%r+G}a`B3j@4GS2AM_?M%xIKaL0m+f1BC%$($EMh}O|
z=sKBjyn@-^*OWfs$>z-(0Xs3waDflfdXl(BG&E2BPg>g1C^*9$?m6E8E~GQQ!Ud2u
z5!m}ez!FU*$k_3SP?NrxKyQYS^zWu1&W#MN{_->NxZ8V+*ZfVJ#*e!xZZ_?4PK}2F
z?bzoQhJbT<+II`9?f8f({9-e1unj?a-$$#C(pe>a>EcE<hw@rE7YyQ+tPpc#cfQx(
zYvK%1ibXVq?j0TSZZ1zoREU}SlI4M~!t(oMkX+<kuJXk4q@Dv5Cc)U3ouy`k6P286
z(hnm9D9t**jTgpG5TAwUgvp<ir@y)eIcpVNO=2_d2<5TW)mH7)Q~r^j)2t0Dzz+n4
z<^e;U{T~l6;ZVneX<4%49A*~c9Je<shJ0y}XoLB$#)p85yUDTjCL!erF!Hy{r-xIr
zQTi^>H@NQGxlac*iQ117TIFWuFsSGohS?fss8qvN7a#w~9vSy*7mktut?=l+@2|Vo
z+$zh+)z;Z;rW*D2<6_S?#F`4p@&r%Liv`QhhNR5lQj8aRdZCN)!E$=q`q);FORZ<5
z!c#ofo~+f1aDTYPBu^9Xq72bV6V)2xe92%(7hJLX>LO^k^|OL)(|2G$rYna^H=_^v
zt){=mI|lODK3{E{imnsRE>R?{w2z{rON0DUUR+@Pk&@Bb{N4$gy1z)A+aGM!@1EZt
zaqyzFKlDU)l%i2~=hl%Oy9UBXD$fNsd6cESzzb*KQ+gh@&9Iw+O8!Fx8Uy)j-nfZ}
zx$>vl)w_c_1D^sYh3jt!mYK039AHm>@ib#?@`Lc;`TU<Z-)X!ANw@;Pq2zMnvy+|!
zof!0Ah_#Y5Dkb@hMZf)6WWK+<j~WUokKlX;!wbwrX!HI)%!IJblQX~Pg0gYW>9|kf
zahd*hEV<h*;h2S&?ry_Eay}S9Aktk4yz{@5ilkc~2Nqr;LRvL0hYRb#jiw<k{7!JB
z6U8G<`nrXMJ>tWbY7A_Z5N)^({@{=NR0U0IjE!;M%qssHfz_jp$vf-ozy;$3t^J!a
zJ3T!T>Pgv*qPJ>CuX>|2ARJL6oD<diHw6dm`va|N2D$zJhV1{&&j0=BVrTrHl+E@Z
zIv{NSs}9Jt`n1F5f1N@p?5J3b3P2$K7~4c=J1t0LG0(plx-!#)N?8#r5>RmYgz`GM
z0{-wPT}3J3aK6A;JNR#ZzuW@%#QQP+*^~R6Vomg;Cfg;Q>LR%&+KgLm43AZ8w0gKS
z3&%5cMd}Pg91lkhm|{h$?aH0`36bHaEjCCa1tK<$3|D)5rt$fBcHF2=Q5JroLV|=X
z2%Ews-HArqmL4Cirj^ekVSqKELPhugq=R=)tR4ebxmv;uhNC%zNg=sz$Yq|;G~{Di
z@p%>LGbazj8*#a`PD~Y%(T!)(s}SWY6XVk=@0huqA2DChFiI(7DbJ*&OECf^KVz~H
z#%lI5OuaP7?E3qZ1esBy?IEQj^PBO_u+J>$YUI@dJ@Y_;MiCaQYY+@WNS)6B?Pi%p
znSx2UktCc2YHr-@TK2)6j7)t!)tS-#4ie7@(S`Zm??G3C6L*8v{oGo)vo*>&yR=a&
zBOERBi&!6D;oR<o(nU-dxJZr5{c{)dPtPGzv(wF@@d313NkNQuq<eL4%caBSF>f{@
zfup98*r|dDxN`0DIzbV1LsIi70BC&sU=N~zuK1H{r9th`S@pP#mpLjZke`;rBv1D;
z9U(|Lm<uo-E$UOsczp`}>oWm_Ne?6Cyut59b@@(8cM^65nbH5(==ob1OE1=?C%Xap
zG0DBN!bTQgTpe)5S2&PA#QJ*{dYk*nfV{GnEM}0fwvl6LOLq2g7|D-;vYr0Xr06ip
z*krz}%da<_(yDWKoERO&KDBMlb-y?d+tt4+gaWa&e9;s1R2jsf_I02VKOqJ*zdp})
zphPw;>Tg2CPJLQ7BqH~A(Nt2`3#~)buge7D3i-2(yy%hZ@(dIV-4x}6c?Jk8vdJ>c
z_te2}V91IJGjj`wGrb(0!)b2SeQVw2WPtlrq2=vX1z~P<h<w0!`23w<BAOWgJ0y{B
z+KFr}p3nlf&2xBjIZM#O5MWXXHIKYU1cG)(yvU3-1Ahlm@}B(xPwcm<h7?e`TgTrM
zGN8|2foS~@iTYV?cy`4dxu&3o7)@1Jd9?s_?6}Y*AlvKx&e`a*t-iHlW%~d>k5nkr
z#Rrayf?hTNj7aV^cuX==&3slm>7Bxk*~#e=YW&od&gsV|bF0C`2{sF<iB8pKTRh{+
zhYDOXM0k=byv3oa&bhdm%bAcLW8iNBr-th;=Id@5oHSkPbC%0i@1XiiSB_$p#>VOh
zk%7ffl>k=ZIGPv+=;g9%3sGSf>8bo;6*f_-0&ahsHJ|Rku4%n9ks^3OHe`B&f<g>W
zKGUihP1xy96AXiRsvKE$n5R@Hl<mux4eBdSFy`o7vQ1Q0#qfC?PtgMYPbSY5F64NT
z^BpNK=?FV+nL5!K<27RjAxQcUm0kGJ9Xght-2djzhuU^df%?%SZd;!bFq0xS{ITai
z)b`SxwhE7`2}q+Hi{2_;w{vi#rZD_~93gzLo>8>)|3E;ZNZeF7FvZZrV?-Cm5T<Rc
zLxabfV@tBG5m(Ec;qw35V}kB1AAkLMs<D~Wsi$Xnh{nv75+%|{_b%V6(EMfmH(AbG
zM+B;w@ML`CjfL+SljF;{SXT^C_#p`j`;nY=kUJt6*wbHWUE}GdLNc{{0ioN*A%%`T
z{a$Bc$Sw!I?_(-(5m^?w!2pt9+CckCV`Z(!%5e(Zk<{qV<=y3gL<kH1GRnc^g576r
zATodkurIao*Zr_1AQ`1-dsq<s-Yig94+^f%E(q|Qc9|xNO+MCdNt6oxa$1sQlyQ!H
z#0IL6?1}>~nXx`!LBACVV6nkKj=G@0O1xV!*+vgYpZ_nP?DSb6zOGI}@J@}C&~PC0
zJuVx)B{{BBv@}pOjESUrq^C8Njv0R`vjS_A{^aLN3K*DbqFHBi#h8wUbsw4=wo8&L
zn$ySRVz)3_`Ub8wVHZ|$?F2!QKaKBaex@kArZ-7)&mziIiI(bhOeTKOx5|8`Z2ls%
zf?vBlw5R-=GEi?>y^hWF3(6dkksYi}p#wL^SL2q-3tn8Hkc)!tgK6(+jY__OvWcDy
zQ(#W~UE3w3;+htNHA=dn;Ldd>^;wY4$t|E<2?!R~P>sjXf@3zB#T75MV3FH~_g`Gb
zD}ib!Rn^Eqz`j4^%B~5p;J@#S3`ui|g?Q0`+k4u-3JCcM3@h2KF&zXHcw2QMLxvJa
z=O8WDHl^@ZzQcP#hy)K@4e$E52KpwR6&}1no+N_@5Hh|RAmeDTCY?2-{38soU^a(A
z_h;25AOKqPLW%&Vs{L76b}sDHr%r9IJk}z)c#T*VnhRy8uKeN&E-!=^Yku*b{5$Ib
zOx!4*g|vQPsV>~Ra_+{36)SyGQFXlN-9X%N4VRB@FPpKjp)|&+m#T;%J=y6o46Z2w
zAJ}lTTkUXj6`gC?NkFOS5&QDxxeio&LV#_qU~ZSP9iPs)3-~4b$aN6~aiTlJmJcLa
z=h1}N*#+3VB-#LRIr<~_Y>nf&caL;<%R!X?;UoV4_nFu^{s*jP`wx94w*OV1>H5D6
zz-@^C48VPv<&@A;+HQ}T-I))Z$J3ma*F8~6jpz|X3?<^}MW&MPV5dr7v74}d_~Pax
zhuKAx@D!UYtbhj#-XBlrC4BL5jDHU3KACoPf{Y#S&jZd&hknLfkCrbC!y8rKhh2M#
z+3Pym>FF2}>=MK!R68T{+I6aaAS3&_qM+i7|Cm;-pb2ze)!3hP>NV_N2ThDcF{Urj
zM~q$E5WXP@<Dnj%dMg|{rHm*OyJ(h?ZT0k0eR@gxC_W3Qu%AB}XZ2f_dtb}pPGkw!
z(kV&=6H6g(`Wv?1#ui;}HteKv&^H-t=O&PbFOlh3LpSUmkjw4oi(j+c-FghvQ#q={
zSB$IZv9g%kh{NA1PmA*HvRTWGOVY`4^dttB8)lH6+cnN?N7+vp=B)b*<)G=fI+j%s
zQLKt=r?QC^i1(=IsJYA<WHu1FE8)0oOi87XGMmJA2J-IQ%sn4<;7_cDF<25~EGP#}
z**te^I9iAim@~?nM|PR7+M#Tr_}pfG=PP>Gldg`I18?I-Nl*@RfNxOgf<32pm4CVb
z@=i7||E;L_i}tJjz04&F;v&`9uc>?s3QsPzU!pJm{nkSFvJwmy&3t5a(+7jsU=K73
z`A>#nSGn=L4K$NMDuG(o(l#J7CW;p;Vz;+1tq-~j6s0gOXajzmgcC``g+4rpUpjzI
z$j%uh{04F&!Yuo)5hgxzn)-&R8Z{3h{1;p9e&0WAD>RuJ1pdp`@Ho=t3z=R*5OlHu
zQeSwgyypV|{mDfI?VI@~Fcpc>AybPkgbdd>DHIqUVVZm-QlgAVXNcLcwSaDv<<Ep0
zGp#`udzM5Z*hV#tvdRzi6j+%PLL)s8D<<5(e!<CrdVJvc#vuTpU(*HP;y)WX?L&{Y
z9V9}Gv7HtW{0nS=u9gF&T7i9<te*phpVVf-CfhS61d@<sFKq#V&)%LZH0lDqwD4RL
zUb%*JmO75@t8k-S)pR*)co;wckz5)HxMe4^;j1g@&R{ma_KZfFe{7GT!E9ej8c5gh
z2$mjL@>*UoBW`I1d6UAGNI$UjOxnSg$+P1`BQ+cooyc(deN=H<I^T)ciz>_($)7Rd
zhw~$p3}CmT;rnn>I!IN{+`R%T>HOIJnn!opyLp5FG5AwX(M5WXv|d7FI=O>d^~u~)
z(oXa}qU<pQZA>)1%9%L;j|bII8`KAWmC%8YRoWxCrXvMOrhUPxbt3c*G(WMn@oY|?
z@mUNYcXk=CYSTm^4J@&ziw;VdH4WqgZM>_mUeFhEDN=oKUxt}=_qsubU5C(@q=_It
zlxqNjy%dTKA+Lh@nZibgn0z-oyVxtB-I!P8CjJlKu3wI>$6w@~@9Dad`+U5z=Z+y*
z73bq?Bc(;*Oc;Lmd3RPL29RhR06+k>E~+Il1OPS>ttEHBcX!$e{4CLA$CYs@(*9|m
zk-hN6p-#c&w6Rb>jGArpL{|&&wu>>DMGGUj*AoJ_bd5^T9d82QJ=C9Q0q0JOsG6@e
zaghOS$~{t6{mXlN@F4)GMAc)w@Crywck>6UpazK<;s|@c>EMhYT$Swah);fj4p2|J
zG#?g7Rs=wrdXoceD{epowzVF<o5;o)uxL_Ig)f78JX^l<9{C9ER82K!GI69ojwPYY
z(5K)AsDblhG*9#kvR+a;>b)&m*&?g*^Wee0AtVnpnN*zw@9?!r+wIvLG9!$K_MV%<
zLv?}}*2sz&(2-7k3a!>~C=HMZv~$N}HeohF{H5Lha8xOhyN)c5b>M%O3#=w@@DgrF
z1^w!!f4DRPSqQumL7<_|0AC)tkp#9M@hbTtbL9I}=G&A>xjBLeq$8y0NJ-4yfV+-Y
zO{5LPelf(p_&T>0<sqCJ<yl+c-Y#`PBK3?u=r}3lBXhWsjLc07zYcmQ8#FFxu4A3O
zO8&Q27n?R(pywuQ=yXa>97o_k<H~|zCD@Rjb=2|zh{J?|Z8a;|Mp#6><z2zO&@7ed
zYY3xh4AM{5<lbm1FjTE>uFdtmHBb}#i(VFA4wPUzH&hVO#jTjp*R?+KF3<=8ZVyoZ
z5($Z@b>a1BDx5DC!0--210gVb_dR0n7?&3{8eaYlE}&{9%M9TP>KG#1`mSA;(0x|N
z_rhx(UoKHv?#S)nKW98@)lr8z<=9R~D`oj=ld;1Pmf#IG4B`INa%(6@)<F1hiwF-*
zguAeg*vkrOw|WjmWU_Cpy#zO5W06vPE*c|K%g;5>yDKm=;8~)*U1)Z!95_7(lsu8#
zjzExhH={&?Rq`Qm;gS-&T0$E=y=Ncf__G__*c#!K=_y16P_gbR6+)>hAXb`#6}pTk
ze*a;SJ@sF1%zLVZw|SmfNG?Hy5?+p%&<@&)%Gi!yAQTsQ?AgVFp%Eq4yYa|{Y*?+p
zeQ|ge;Xg|(9jT4=qm7aF=jM@<dmO9@bJ2ul)7(ZkOKbrZY@h~Z#~{8rL*ergg!9`0
zBwHbe5wc86g{y?rncCidI*vMm*ENwVO-&mEEp{D9CT7fD0=%+VT=KFa_1F`frm561
z_%C1HjaSB-0XF3By_(aiNkFDUUsDm&cJoUw`3Q=v!n(1U0^$!&;u4Q(f%9%l5q{^%
z^V};F5(hh8pPNoxyvez_-XtT3i<<%-6Dpf2{EnO;e#eIK(?dWDj2kLMF;|-<wti>h
zxWpZoKPcX2iX8%HT1xh7YCB(hnA4#hUm&2{b;K(;?v1M`ISx76mAcm|@J}CCJ}%qk
zU)<fKYov}(A9mv=J)q|t>9F8p)%IyoTbwE65mys6HZFdm;^HQ9E*D`qE4ux`J|5;@
z{esu<R+Wsb#$&fU5kc6qSzL9G5nR=)ewT2Jr4_43(_GX(Q^1ltXDcLW6~f<htXxV+
z{U*Wsx|$iQ)_xbv(%NSS5hd(qedujZQ6WV|^LF&2gUmb>ai?5EYbi;x9NjFuU5vS(
zH9ItIm+-HR-Hdt6ymst1rdQRIw*+y&V71n@nZW2E3jQ)c)=^k{@;DaMkOHh7Unb?;
z+2k>EKCg8mv}3h6b72iQ4vy`iN*oT8Dr!feEm=-^JU_C1g)!f_@Lcj@_*z0I#ZUP}
z2f%WtF(r&qr*`@A0FotBttY^$zzQWFy2n~tVzck}LU*5p@%^`hS7vu~cd=suW_YLo
z3`m38Vs(N@d_q+na_#cu8zo!W>i~b<tke3AoTouBd+Gnesal*}3_rbw(qrm^`Ku%?
zcFnZs#XGt4uxt{5dlWPK>5j+(o@8YBGmR?#nZ>{gxnyvY#l+ol%|tNEIO%oVbv!n+
z+fHEyPJXu_U`)bRa*LK#$fJ4{>7?>RfW=e;rVuQ1T;%5qH^b3D>X0%*m~dEo2l3D0
zg};A%>-&Hownze8NvIv7e7T+(t_T~gvZ{>n6kN7bN?CByb<GJku<4|8)y2BVfmjyz
zS0Cm30DAj{9lPU$2H-G|9yS~wfLKyS{<@3k3gus;0D3(@$fZvbGzS$*xE%gz=y>D$
z`T)LruCe$JG4}r!OBq>N|0l+>|A%5J`~Rv~daXI>ur-3R{Yd43CLI9`yzOQ|#wANh
zvFSi9sv%E-#=dxjKLCK>M=<#B;w$o-=J**5X8I(4Wg=-3dBEIZyF1EpsypS08q5%R
z7W?k$+7+=jxcphE{+*KE>mv5@JiVNvx_wpC^FdJxZ*x=oB*ZYuF_{>&ja?gXWAFGV
zXBFUVLN2U9tZv`f3$=0WCWhzztYn@$Gf2FgJ0gMjZ>H2HrzW6P;KOB5_qn0?*gig(
zkZqE%dGG#NiRT*b>a&7J1(t@hHEPtYiaz!`R@7YTY1H0|cbAkKN@SpgP|337RCnPI
zZpj8vtAc-G!J5^x;S+UOW5dx&pn2IQc((u|$&<T(b_;`AZco;h5d#fEvAr-kp}<TV
ztQ~LXEf_1#MLf&4P<JKfit8Y9!)=#uw3S-(m2ATz`K#5%TK(o^i1VVrfrb@h!%fb0
zM@w>N`OY1)TUDu<YOA_tbEfasS8!L=O<Qw`I+b4cJvTyRT~O%sv(Miz=r@Bd*eK`1
z2-7heIH&lMb2~TmVF^_3ewL9Ii#RJfU-RRi;Fe%B1Hn-%#IpfmDO}GqZpze)J_7NP
zvCX~d*DGrPvF`Urym-B~H0&ET`+tk2v;h`mLe2Gf7SB!FJ+=DBjB0o7;i5xE$r-hp
z5;j%pddtAyOVon&I2GY4TwiPr8}3;5ZJw&L@~XELouVOEwuN1MER+qV>#E7Xw2wG&
zN9~+)9B1Z_T<m<a<KuSOQoA#cJc6e_)ifJwO2J6*hb)QvLgEw#Z~+u6SNU8rNqE_>
zTsU+q=X$M_fy#(8GpvBRHw_YtdrZ7GLqaU$r5Ep0v!;jW&51uHIU@!6SYj^REK1vK
z6)F2WWy+;jaLeo~hsAbrm$O*`zj$|>eEX;n5y2$14fKCdp>im7Xxx>{=7tP1L{Q;!
zLODzsa3^&79W~(+orHJ5<U%pQ3r;#)+)V?qEtB!Ja!?IMCPl~tx~<5lmDTV{JX|d(
zwT1O=u1U3xwiwBAXxAizg$a)&+K1XX*!w59t-SuE#5eNDNh&>TIM)poA-9A)FWZnA
zKm`MX^H@(H0HmXot+-zKoW-E}z>IMT9Wn}#gh`Rx&h)@;z(cGtTLD~|gwte#m6tWn
z=@Lv2C?~P<I&;aYKnFVg!J(X_huUf2b~+0II5+kZ#%ynFB}D9_Lj!~h8h2uK20mDF
zz0OHEwJCdrPr#|{8RZjtambbiS*u)Z=l4D()nFIz%l36TbtFzAnd+Ogn6(88OC~`r
z{08u}pB@w}x+xpOE}pDh_}henZ7=JPYQ;}bL&T%f8MuX1K_mh>NTHIt)mRHIh!yL|
zd_{H8PuU)R&Srx7Rf((8U4E3eb`Lb)<ddfqTob*IWAQv&O**K<GGVEMWZKT86sOq_
z+(5{8$*F&s&&BfDJSipIesohd#VtYbnw=9`FB9qRiK7{enLR?~M{<c0og~ja;5+p2
zUgp5Bqf)O_e!;)m-s7b{XGjhT6u)Hbf$&q8r#S$igqG;l4^bMuum&}d<q!gqR#Si)
z^^faZ)@il#Lx2V+Hl@Lq|2)ny<8HA$SkOLMV{4`<n&7|;hjkQ>dYV4p?>`EXP;r1y
zfHEZiZKI=1;B1Q?2nI>d7$AZksytKHOSiXSAaLvH#Fw-Ime5L|`26q@3Xj$a^yENr
z`KMVq<nTYXPpg_wh!Dopd7ulPY$DJ8{Zn&(`bRs#N8>75IKtf&lDO+0lGr5^Ovt$w
zL>QS<<7;w8*cAOjWGs<b8cK>M?CGH^4oy~I7mVmhGdzj9A+I{gwE#s@$$F?oJryqF
zJ7I`GZgL$k<0_82T00F)BU_KLnw^OT{f38EJhICUl!2Q<%}ui$^F@5n<iN3REETue
z&-V#E9-g(lCha`Pjy1=^P*#`!GiE^?Eun+QZ9x9z;RE}X?DUOQ1ntV*WmvV@EG`Ab
zK*5xDvtdc)>B!7@{IGqS-V#91$Qk72x|J!(ZGi4bkZO^~2H+fYe4ZKXEhYqZCajME
zfP-Cf5M!-<ZpxfOK&_8FbaVsp$<AW-8(GM~q=uY#pX^b&hzl!z#DEn^#Ln%7Bv>dS
z2L_!hp{c{0Jv5lO_!*b>ZdP22*xRt}(PXmcaE7Yo!#^?ue-V^6K{cWcUwers36|SF
z4@K5XCt(gTeOZRj#V1#OL^cX;aaM0tvZ~6WIcOluk!XHNWY}XhTN7oiv|~P-gO2I%
z%X%R)SFcvklLI(V02Kh;wzyy9R_wLw$0#A}+aL^s1mHc|x>nrLizwjOq;XI9^459!
z0ocCmO`c7Lt5_yqEhFsoegLnv0^E{n6;mF7eEw`}+@ccxsLCDST)ozVA;|*&jR-P|
z?5M?`A|~GwCN)e}q^7Na@AiVwqe+DaM?qfMhSdaK${`G~b8FofN7Eu^2fMU*R8@PK
z)J~xbmYprHPa>suq(bZm_V)+*c$F_f&m#rWf^!lBO>{rTFet<|z(tkB4}7v}2uS^O
z#r@9m`C>dGzQr+ff+Ugra&XIz(3YRp8w`ooZp8-J4?Z+f$|g;w=S;jb3nnK|e`iqp
zS|BZubr-?@X7D;fX~xl+&}Lz=&V>7eRw+EFS8#rDtNFvgm?g?+Ny+Ph2k17VZYsSD
z6LtLYB@*j+J$e@f*<4oDO^ZJh8SQH@4mq9c87rQnix32hQ8?q0JQSQ%K>B2wh3#NA
z*1ol!gFxM(!b%N*qoVeh;A4NN+9r<<8EqI21|-#p3z$V1<w#*nB!un`8;Dw~PoH6m
zP_R7PD+!jPs#h(p<`<4+xpr|c+=v&7AenJ;EXE?dWr*rKWva>v+2^rAN)!6zS-WAE
zK*H2BO46zDBOMc>SRK$t^tJiF+rxJ^VKvvC854!0b)<TpI>fnaPtzYeLah-jWNXXd
zmR>BV?9)yRlI}<@fk}mZ{NKBA0bVDwc$c}L=shz$XcW!wL?}`tjF&HBlC&gP;SsBb
zMAFgj8Qs~<k<{AucfI3e+^!x<sSSxbG$YvE)Wa)!ZcLO4bFq()I<R*)1E^$7EuNUY
z2au_c;e>1gFFlC(EA5lO7UvHIG2b``s&dYaLBnG!%u8FUEMygrD=}tI_=6aqHK&BB
zIDDl~8Ewpcb%8LfQM?(oP+2nOA%C_R!=5o5Qlb&%lw8dX!4{~_q!4ws3)DJYD-Mg!
z1C^1*>I%S69W+uudh99tKp&kOiI-W<mefP9!Ot9qgm4T>u==u0lofb9`m<|<afc0t
zu8+26@N5D@JFLyy^h2Q5;3B$%#8NhODnT?-nLDbvWlmt~>1B<MFh*uOne*K0L3TFz
z+u?Qygq3m_!v#+6w8=sk76=j9lw6~QpK1=I`AXAy$C0R?>C<0%Qbq5==YT76y{vSM
zGjV5XE>k#zi_%={VM95imb=eChA7+r6gj2nOwquDi3iliNDWx!tW(F{yP)k?{d3-9
zoki;5$^ti+SGQ-RzbV$%XZf^oc{&~l>`WTWotexoQ|puVffNo`D6CbOj)mx_eUg`H
z8SQ)~Vk3^`%9QANVWhkV;dH4pV|%4kOCI-Ck!f@<zDU*)I9OZ{iBBm-*`7F_0xQHx
zpu69~CTvCJsX%vJW-QjTh$tNeXVAx3T`}`1)wocS7%@w7OI&rajW@G<S+zE9DFtel
zhroiCt7M|Qwv=XfE?{rVwr7!RpGjt#F^^dDI0HM+nua<<gX>UiA^kc-rz&pdYR!;V
zb6tr&qJ|15u=Ui@;l3n<)Q#a`nyoB0XHd`i`A3)b*dE0{1=0RGw>2oTV1U_1r+M!a
zbd2X$Pv?{Tj#dcW?F6Nrr)`L_b$^&Kf{Oyhf|*+s`rSN*GF*^Q9ru4K$qd)Qv`d2P
z>W1Ck;Je-~RoM3UR`1{*w8#xjC9XQY;&>N8819b8m(*m43{tCU`#gHe518jw2qm$A
z3u{z8+-96>lKgt4Yv7nuZd~83vFDa8CJqJ?I-VsTe+ha}mO6REcR~P#`*|>?hGcW9
zYIVl4A+lmV0QWfs2%02&20z#p$Y&bFloONm-WKKmCVNcjaOzg62o#dCRnE7w$3}eA
zgtD&G-h9=}^94F3Ue?oggF$V;)9l^V@dd6EOKwND2mVa-s~$-}&}MC>KSs$4l~o-O
zVaRw7oicGA4%EwLtwBcE=qOt&Ku|S-C>va4vvMW8vDzyIf_p%Fo{dQSdf9&X!yNVa
zplN9|5y`gPDs6q;Hz!rNJJ4;ca3dVfYjF8SfK`0=tkB;u1^7CXTS9Z=o#NyS4(m<v
zq{8$3%7*y9i1j8AB-4LmgC~dYdiw?iO{lYF{gUPDNeC)n{961eK(pzM2n@mkU%+CB
z4P>V7WK-9Lst9jDXoIX9sTKS1L2BGJ76ivJ$zQXYcgv3#59ITj)(y0eK{<TViH$of
z3?K{Bj)O2+Z)H>S9nSp)V21&H_<!GG|NX-HuU-HX6Wjmv0@(jU8JqooRmT2zQn0}u
zMf5&ZV~zsA1=@IdvM$Nw$32n)0&OW44|?PWAFyj3-*$5~Wnq$v`29EQ##i#O)5uly
zmkjU=LA@nEd;R93La9_%<rZAoFhKG#_V?GpRkdKV5#DUbC*tcjh3o10czvMDxt;s-
z!rB^Fdnc=%4pCW2*)fLJ)l9_I)#sf~9b`u-je&%t%f6kHYGc^W8rS<-HQ07F4f-|7
zE?kOW?)Y2d-jTqESFHB6gQXTp!$9?ORq}ISyYq9pO}h{;<7LijTB<Zf0Z1?L$Fg^k
z+$>xtS0V;O3|du#iN4m-QgYF<X&a_c*TAWL2j=g(HGC)PHQZoW4U5H<($aRD3<PAS
zGPcyr7w>LWrokGFl2BS-Q`I+Cx30^##a(7!u6HY+71kP>4xcnn+)ExwjTG-G5K7E%
z`Spi=cgD>WMokgK?N+T0K5CT<FaDAbZ_V>~K7DaQ+pP}Dw$GN+wcUJfpj`j4N<JTU
z)BUpHIsDh`Wbbhe8S<*Ihp@f^<)sn(wdC){fI=n#2l6|M{N~k@Uk7e=r$Li%|5-NJ
zs%<E(n<#F32$a7RWuarCB{3YXUK<ltL?tKA2HxJc1FfM-GzHc7JG9qPHYf!KcW5ys
zb#|yrCND?n<?d@}wTo=NI(y>ahCY3z<i%<adV_v~Bt^#Qzc|poI!#x$%GR-Ztyoyk
z)gWds9i~X2$)~P`4?U?FKqHoKKw>Hg8oIuXCQJ`g3R}Yf&5wMAG1q1zx^(rr3BHE@
zQvz7WV?0!%W4)mjwPWSX^p}}GOV%Dlb|`>nkv_tN(aNf(74x%fl7fgD9gw)}==VSd
zsT(48&))8~jTznx#zLDE9PM)ToC|vn6I<P_P7bj?55x?Sj&>DO_8N)k-E4E)CS`i%
z<1atI&1K@$A9b)6bi5aj4p`z2={_!!%<)5S;4Swj?~vjsS#CgDmeRO&h5<m@Io(U%
zN0ksYNN%jxt}_QYrSvEU=>GB0dT{Nwq`)Yqe2BIV?qiH#P<Sf0-EOv?%p54ikfb0m
z&ix2>PIKTR0HUWfbZN#A_1<*#>OZ_6_us2<<6>MX{HQ_F>{#3UifJHcdwe{YtW?$w
zizPwfLHSPB5?0PxVEmyK%Ih3FWXmkZHU~xTi%jO>{f|Jbw*&juI+!mW?d^a^)xd$n
zJeKT$k>YLxtuU(;U3&|#0IMC)+~P{ATdkw@fgP!=5O?Ew5M6k7R{aKFz}gKMy6U;n
zuW&ZW(OJx)Q3mHP6uMx-^H7JU<_YdafO#f&M(Nm1HiG+gWu_pM;&m8d1K|kK9{_}(
zsE8Q3v}NBl1czKn6VL`}WOuKF5>w$5@J~g*l|iE=JQ}3~7faLgE8)Ew4QI3r1r26!
z7Y5MIw@GOFX!7J50+yNg-i?|hJu8EEe?^qkOAvTU3pf%W>H~#U7*%ppPmDq!3whC<
zA7<Gw<{hOuU?YLotaY_f^qJS7#yhrMPLY=Y^PAdQA1D{GZ+)7~Gyw3!0x^_BH)>5O
z;|tSLQ^_|K_BG?1@;!@n@@;*cOqOa*{)B=(q*WC^HdFd^t*G4FFLfKttJ%sQ!W9tc
zENDoQd~0|;OS1!J>`@zUnbr-AEJ}l-lg5YELd|jAK8^t;HXqIoqxnp8GWgEPZ-Q)L
z?<?r}?k}+%QHt+FvJ(@VYJh$9w9O)6!9bS*iarnL%T7x5kCg)=-XW((h-e;B|DBp&
ztP6K!GJsxMPw)qOWFDLGY;65TSKrAI<fjywWPDdAi2&47bKwh{?`cE<kx{^h;jIh{
zkW>Z)^?m>xqP}=+DnZdLAz<h*MB@7M<_J*0z-crG(7D-z0iRjV1#@=1$re~GcN>!j
zv7J^`X&jUm+$_({B*-0enGliQOj>usU8Umn)RV}ftc2<XUik*Z3+&?5Y93<`Rv@k%
z-^&SMT1kT%wQmf?Hsa9ya6qa-N?%%D;L3$|j}0vL*7$ZJw<ousKo+jw0D+lu%gfsN
zt*VEuL>+j;pAdvcp}k8n8JT$^sI8Z@EFwc!W8hiXMtMh6C;o#L<E7g9#KM0pZzN*1
zs7Sb*r36<+={D~?bW|c?br-eH^qPWL$elpdBfUeYuHp|@3l-S&=@=(V!tgz9&>7%k
z%x;yR(HbL$;RgK?VaIDYzLa&V+KOoh^}Jhjh;2-^pNoxKvA+Z;Dla4%`iH<minWTB
zBxp7zOmgJJE;+xxg3J)GB7_E0KR-N_t6YAVnVzk&tUgy-{3H_V&>0!uey9RkmqRC6
zW%Cx}!;<O3kuc)(1h5;9W=ug%2iN-^em>Z0ohA*=6fYW=yr$41`&^hEyX520iEwFp
zns+l)Sz%G&8FBWnkh1n`D;oiEuAo;7<og2Ly5FCRF$jcAM|>a^MOAdKb>-(r5`BmS
zhu@xYM?K=>kGtaFcx#(1Isz09iN%2RkWunpvu9kCaEq<7ATt-%D&q_HO0sU%5CY|$
z1HZPI4Ud|^^71Gn|8}@g36#a7a?(-RzP!nD0(O<Rfm9A$ixOPuO~XHIagKlXaKC@m
zkFs_`?qt^WYiJbtYp#B+=P4v8;!f7vhT54KREl~;SVg$=X#|IE^Qg<WpygoXrt-Gw
z=(&c2Y}AHB@`5dz{ZBY#?+o2JIh(3}TD|ugwfNuS5@wtINT?DWie*)63>o;c#RDi)
z%P-xkTmWZFt(tZoXwoJp%$gEU778RgGG`}m!T^lEkSa2Z3KCN?Dr{UDmbB^4Nh_vc
zR2&#4xY>SoSOb^lC@cOJ=2^USbxAs5w`6h9`^iaQpcyrSn-WJ4d6DtD?xp((ri*f9
zMiu)6U<UsPbNTm9mZy+a$zf(g9IlH3Bs4^+QT566oPCF|_L=KxOb}(nGg8sEr<Cef
zWJ$V%vZDs!O1Lu<t$5$(#}yVuKtV|g952uMicMk3+=x0!?~&s?XooHaPYx#S&s@hX
zVRy`z7qklMrjPj5mB;Z}l<sfU&IaFF`*?)j%!ErgYNB=EMNt8uu6Q^~t!9o6@VSSy
z(Dl5&Nf!7BviQo&<dO^*j@v2HU{nb_9>i0URGEDIn?d$<w*@)$0=$2<=<QZtVL@&0
z@vY>;X6@DuhAujUR<TheRP}F%Rw?t!P0``X7*GRvy*#|6R50j2d@4tcafA=V{UR^_
zety|=gv@yOneWt5qA-m87~8&a?$y}7kmKSPBF|V4l1cB3xMSouDF!U<l&PHG_^1nD
zl+Z|O&#A!AZLm){vUvj017FnY#@=?$ZBJR29j3&`L8Z(8)WdbGiFb1r`E5j6&Ue#I
z57(t^T0u`-4uCWY>SboVY)dc!^8whwPp26`Jpn4Is0@o;<>UBsJQTSiE!ERGvs^V{
zqnm`cpt-m`eAaUdgR_M}5}a|oP?zwG#m&WvQkV(=Dn)C`cz7cG^0R3$?8kxjk?0dq
zH1t*_=FQOXSnhUocGBck1O|AXypcy+i!E`V>cb2<A*P4_bule`Wg1w6`N)Xm=$lbB
zDx`cHBIi2j5X8*tVOOga6wivX^@g<YxoFA)019BXm7RAy`^nOE4Do3Iz?T?#`ICsd
zdJO$J<SqUkdPMGswh|?-Bp(=#HT-P^t6JoLzvq+Lz}l<Ajv=8auKB^NwKAutR`1D7
z*nlx=+P+eWMji#N{j0)&AGbEYb57mEe5vpe%I@9(u*m{XmW?gnRHY)1mdv-F{rxSe
zz0&f-ZI1Ap!U1+xj8(TNG^Q+)167Ifmn)@iG)$cDVNE+y!Yx_@U06udAs(i42DUK0
zrtpU*)sFXrKxgZx+r~<1F>6bfpN$cVAi|P1N7+4*;jcyspylpXmXg9(#}m^mrg7Yu
zu~S>1U2po?=kyS0-q+u0Qh}IPl0<$z6yPSzzKuM40+cJ$V+JC>IfM&y0H~@1A5`Cz
zsZ!SEx+wWs`ie7KM)ih-__4cg8hFz_+$W92T72$pW2(Huj;L1-Iosm`jgJ$#1}720
zwo6|)`NEczTP-%o$8`UBs?C@5Nu)Pd*ELRZCCdElC|88xHoym-Y(UkDk0>RoM3D01
zr}9JP^^+uC{AE~vp&dBO%C=4y&xDR8=}IP%_);5-VhZGHaTL?v3HWB4{1k0Dq~j4C
zGn%qLFC~Qg$_#4b9jxC$2HrE?)gI_qfL7m(Yk?u*<8JekNs$1`%y%!b+YrlpDv>EC
zYW#JmZeBC3AQ3P`j;ZWOyQJ9%A2v*)m)ifRMU(nsRBYJbfy<=m=J_9C+LO<1Q?ENl
zaIYcr634B%mx{KKMf1VeO`4DMWj!z|tf|^N{@QBRbD-g$3kzu?-^Hf1Q`No=to=Q7
z4TsjI--u38dbSo=5YuqdmkFqie-KIon%fw)AsN=X-<yaec(};NGN_Z|hOJQ2-6ngO
zdkBz(Zb{9wt0)!`x68;-{-!x_Vs^OpE{-U0<{pNpLWOlcjiu^VhV5I7nZjU309dxI
z&wluTEeBveiTK7NC`GWoI`Xbh^o~IL8ViJ>@y*D7e33l7aDThbP3L4|?;zj56DP!(
z|9^PR{a=)liJ9qtCiL0=153&AzhWtuHFRRPT2Q=q^#njbt7u%%<3CvEz`-S;(OeQY
zkY4*~p{hf;3Qa{b#51<1eDCz`eXrVyMJ$*bcb3kDpn&U{3da6h0jS8=827K4gZJs$
z+zGY*adAqO|4#u}YcblRp-c03xuN6ZLq-%n#Z~Quq@QuTf!%a+TV-xXkM1{GrmkjB
zLHUS5m0C?rpz+N1e16q7;{G~nG~Au?AS+a2AO&8nKNSDnZn|f;G9)FE`&hv=HQ1y7
zdo$FdjP=U-zYKu?PHWOoT`8NZJ#*wn;qKHy-aTO^V})rn1<JJ;6D-wn+zeoC-h|l5
zP@Rj9D;W5Kw2$}wpZa`D)=D-S+b|cJLtW&?s8uSi-?PVhqdJLEWQQM_ADSbeDIx+!
zsOdV6IT7+3hZCmNaVhyG_cH3loWkZqOc<h81VwNpbP3|2kH<Kd%XYxfs?I8K|0IAV
z*mrotFV<{zve#V8m8NGJ;}tFD$|9_bHzb#@6%~A{SKF0nzD95L#+xmat(!ztm6Ffi
z-kmC((d<vj<GT;Bw}GOt@T+0M<Ozg-J9F8!4%oZLCv7#h8-;3Bod#-(q*rB@Z!S!y
zLu$GLe@P|TTdY)@I<{WuO`92Sn?en?Kb9fk2MI?lY6g!P8p4!lMHKLfDQ0Ed^dw$V
z6By$`;Exf>iPb(&Uu06Z>|P839zBOO8?%x>c?bcNTCOn}wlDZ!VCuG~_J|jPPUB@Z
z?Y1hFn1L+Y#S}c*d_RxwRcj15r+BxCQn;lIsx*d9-BK8`BuW|3yWM82GRTE~Ehe%v
z0vs@-!zRxli@5S$g+jOfiktSa_^${ux)u8HE@f-pFJ`#33?!<L9VjZG8F@430?g-k
zqPox7w6?@_RZC1Hu5DmGP{((G__gQ)<KFsc<8>$kW5?ab#HJC3=^6iEDCv(|tJSVt
zEW+9OO@5neJ_MAeqoV;+QL&W4k*ir18l{bJC(XMJ1+o%PIOZJpggmk@!|ge1r3ZBw
z1ZK>&4|0isL`8Xt6~Cm3fud<p`eur0WW<E$H5hMp;Hi6>MfHoi{~<93A^Nx9{KCLu
z=`LgjJz^e2^AGJ-xVXFj=HjFWf?)0<)b*RFwzjq9xw-2D#N{R<7rq6y?$~efUR4a<
zU8O=d2%8v!ojoaWcma~1TgoD{zmsa;v_*M0t{2pAQJoc{gx-ff91o+F4l(H;Tx-7?
zxN3FXip%TD`h`#INYsWn?FD>u8Maw=9MSu+Td3xS6+ZLKlW@JmlYNOCt=f6bz4^3Q
zQ=A0YE)TIU@d31>$RWR#d#(Tn^<%o3oqH(#2CM9Qx5vcx9Ma(Kz2+@9K-xJYI}tPY
zMQ)tX`OAbY<F8djvEyr%bj}rG;YkF?O2WuhDwQQm^6TCq?WQfxQ6MI{Na9RI9hzUo
zYT;}&24wcsY@7PHSdbK2<HP5=0fFcZ#@b~KKRuD>KZbQ-M*UX5<_f;FT!QVN--rQ?
zE2nQe)uRRxO$Q5!xQ8jqUJadDgt%Nn$pz}#Tx$jzwO}6dLA0`sYhA*9W8h4HL!@Ux
z$O}{?<(0~ADQBN{Z(jI3Juc#8fMl-`8h!-LiBu*{$9^eYq-07;n#V)eP1@o{L<rby
zg0=+fxwgbwrK<ldENoT-oqq4Mkp64iT;c~Lm9vns!GcH{2Vztv9wt*J2e9|E6}rG2
zNGyFdNbC$B`}{`V0&j8y)m!W37i1e_Y+@xj(6ms`G|f^YyLF;@IYA9<X})ux&?25y
z#F8yQ98j9GWWD|U?{fYHA7nE!s0>|=D0!Q*`@Oe(eGWo=66p(n@Zux?nV$WQ{CwJh
zYMeVc*^$DkB|lrwqOaISUww!ePnC~-j3yrru|Jyj@meZfV1i%{8IUA9t~p2<Sp@d0
ztQH1B$;AiAhg+Q5H=FHD21p=u5UE^oXt2m3y3d%7${o{-4}p-Mj*&JqaA&yF?kr8I
z7SK9s?&LJE@I}q}2f>wT=Cpvw%81+HWn(i}s5Dw}f|8VZO{>^sW^hDXL^=R6V6uBq
zPQcR&{Ki?_+R5U5S71}kQTUj;WcllZ<P%`Q;8yoXV>kQD=i<W~Ae~UC@Z%=DiWkJ9
z6)y%A7q8~@!azWc_nZic!in@xbUhh>pEA5(+l_C#6)3^26f(g6_-siU%Ap2yBT!kc
zQ<wsx4}_nl(k4zxyHB1k5ktqiIp(f~l0J~!Hob*eJGjtI>sh>MLLs-^ixFRj>COXF
zUcD3@i@)GZi@4rtM=6|SisSxiu_p_L*xwjCHN&Nt&W2t28k_kg<fCQ`5(1_J!Crrl
zdo`%*qFlk6li@Nt0k+^4YvhS-1y`z5?2E{NB9%GGSVa$0ZU!y=qh!Ub%xDAl;;jz;
zw1J&vOQv4O7YBWn^|TU>*bs<(NZKn8)To}F<;{jn5EEy4QS_?|ABJuQ0P>r=NAg1k
zb&I$;=QMNB0Mbn)8a)9+q)7tv&X&bP^T1#G!QdKiC5T!GB6n86{CXfm18|56@AdQQ
zzbCA~6Qgj%CAJKte~ZC8|4=%CSeh#VVnjfKv(DXHyM9~wn3uu^y_H!vXHD@v6@)Z5
zA?;8^k)^X<41FdckGlon9=n8I%P&S<!(73@?>1*6O|#8hX}tD*TnP7^?{9Ai2U-|4
zZ5%YUTgaJ*`M8*ekSdfO#`J@;|AoJtUblmcMiU!XNBUp|9-TS?xHHZAlyPL!Bs2h5
z?<Vo;2VL%4hr*TiCUso_H^z9-sZY*8fjTk3{U~{WC}Oz9k+8p-yddM53${lkzx%3a
zArLqPoFN5a+R1H8lZ6$W(TH9hH;`E%w%P-n-mOjLYw&2@U3oz~E27MI{uY+-NN1*!
zNzw$d^o5@`%wk2r#Y(n6@;>2_r4MVviW?ug#Nxt~%a}dUK@avQffkJ7?btiPAxF`E
z%S;|s;xKnGcI8WI)gsfeAR23g(6MFLEq(b3%WdZBIF6u=Z6mQ}O7}}x+s58bMXO0X
z>juq0chmRoD%-0Q`g$sR3k%BBT_M~OjL|Mq5)<6-ax1sHG<71()#DsNR4L(UeoUKo
zH}%bGb-z}THIw@eAWSFU%k+Wr$ruyuEt6B4v?-}i29p7u9XvDi8gBA&3S|-aH{nYd
z@T@?T8sQJIpqfDa2iGhy3<J`j<ql+GolPw1F}qWb0&xgyrD;TTQfWjSQNX=q97%LR
zp`7nxXoH%>@_NpF(51r4Y4^FSMrw1pv1Hf7OlJX7$_weRfxg0|RF!2W51x-qAzCS@
zPlt-n)Xoo8s#!=NNGI!DR$psNO=tbOx8uG^NX@wJmMl7${v^J)n#wAOCb_Ti-@o#5
zjW<?(pTZt@bf#qaE3zy!tp!VJ*LvU$vV_T<F1N=(0yzVb>IJZQa7LHaX09sp5qOed
z`fU=jem*#|&2mjj;j;{B>Z^R#CsSeOolfLGr9;7T``i9Ej^fPG-~Y0~be~-MVv4CH
z;b=CW?&2@R+r|#x;0iaLtV)E6a#gLel8f`^<=)QfwjF@3iwUTX(>@TDBwb@h;D-8A
zB*%O>goX^Cl(WS%*3AGd+(rCed!=f%h$-AW3O{<ZR@Qpf8{KGcOg33lR5)#TmJRC3
zf`+f~{NRZ47T-(u$}aEx@+*fU^3yZ5X97o1w`!@b?^&}h*|X_hs4HVzI#;$4HlW2H
z`A8udeXxRiDcz8o_=W3k+kq$d+-ST95_Xc~`DZ~t%{kKm+g=0P%IJV95#UseRJWwX
zuv`%Pg6$6*_h;9yclbN(>7f5Ni2rxI{{L`Gmj79v<@gV{CCC2?x2)FqFH!@=>z~WY
zx_k*j$`4=Q!<tUQLaD{osPc<ZwwyeI$&fmpQDWNd1?!9IeU#azEBqmejDj!9OdJS2
znz!^5AU9kN<9?a%lZlJg%c1wJOaG(xAEXg;boy*qyrXFriMK29tnb}QkH<jB5ic0`
zY`?DpKl$9t0I?(W7lF9G59@M!fJ$vzmFMGL=b$G=Ip~A}iQ#!Lt_lxrM~v>Pjkq`W
zL9u)0APj7w=j0L%cZUzvx`oVk;UNomNh&qoK4jMLa~(R6F+OcHYW<X|-y0L60gCW>
zrdlm~qkt0YAp+UeJf${b`@&${>!OkV{=wtD_L&bgD}<DrO$u9SCShpivEpK2FqHcx
z-8(N-7QV>*vY=~~DtbwsYJ>%wd7u(1VfRKn@t@IQ8x592#aRkBa?sz(v7vhAIL0b>
zgx-15KtQ|@KYeig=YECiH&Mkzi%#Q8B{Wb+u{Q-loGfb-M^IclR5>}6jNeeuV!=q3
zw;i1sow0yAd|NI2o6?ui99~rTP@j|jU_CyR1it(>a!3mPG)o^W=<WGO`;<#DiL(zy
z4n&6Vr0-$Fn|ED`wCu`de`T__NgW%ShrfryW!fn_ASB*%lP%wPdEbkgfg~l}a>fRm
z%hf#7W|8#Q03##^t1_1ps_a(%O)ESc#eGB>ISOn$2v?Nr$Z2AvPp)j}kAKp7e@t|4
zrKuzJgiLme#}+gkX~IN~#qOZMczLbMAi?FDT2d$Bpi{Ica3b31WBgX`BIhtvJqsmj
zV{abd>V2L1!W`gz9NgRJ0j->E_d#BY+)afhaOC?$%GUDo{9WZ71mQJzUKtR<X2ExT
zzS5c+_ntD?Dxg%a7jRurM4!UTCjd0eJhlFs8g9&kOMv!=2vO<2hv_)w963l(O@g77
z!5BwKKox_7R;eqeb6QweZF=P&R)Z_{nvOGwOmB~YnPLsqWv;5wrsVWrdF;rSgjj{x
z>uZp$>xBG@p#b;O4)a=MQPJT^af}dUIC1w+n3heFS7+=ZiXSgjlc8uR6c~bRg4I@3
z-;KhCJmc{`PYZ-u1ErJeLPV%55f$GI@E}ki#d{#`G(4qvZg8=3C`aeg-`q<G73Npx
z9cE+9|HIfhHVGDH%erjawr$(C?W!)@wr$&8wr$(C*;RFW=Ej_JB4$3!f7r2hu6I3|
zneXxLkhhAPfD(oxjKY|GP+YcHFy^)!Y92mQYtcA;>f}44=wi+s_ik|F6ye4#xG!cY
zlvM~t*w(c4H%`6(OCtl*%60)YE6Zp+WaFWadfM8oC0%T))$^$2*az-1$T@s12B8Nm
z2RaXG<<bdfod-Xlc2#QP(IIQKm}vvhm!cIIjrjzHK9(qHJe1KS4SQYq54>n<Rk9jN
z^F!uEKYcJ5;`k6KuZRZ$OSYqosU9c0mT+@=%~N3@K`BjSr{hnnFzXsA7-3Xr<(tM+
zR*_yko3#=d2`(nr)heg8;NT+J^b(%kgOWH`gP9c-dvOiV%x#Uvz&Xc{FD(kZN-j3N
zt6f8VZ`A?Z_NwU_qYsfEjq$EPrOx7QXi6Q~LY=$Wg&R9prDf1m1C3g?A5#e<IX8Dh
zt!n`Ta^8ZLD%$ZhR*HSth2Cw&J21_lZ-*1kOzZE$>qW~zuvAoVUBL32(jBum3^CI@
zHd$qsJ9ea@*luri3UP1?lcQrzZcT^a5V?Fj636Q7W$&6rWYp;iIK0MwnTxb)-3n5D
zN>`klPtoSs`P_U7LE-?bBr(((FmWqXWFba1kF?d{vCP0LmM7d2{Az58rTmHXyPb6R
z&Q3llFzH3jb2-5$lo{|W{l2tV5~_1if%e^Zoqk~4Kk;ng{LSs*IwAU4mQPoWrI18K
zR~aj#cB{S(yWNZ0C=y44)vagP9t?PgT3A!{UPAKjF&uAxiJK1Ga6_QSrAH@bnCfTK
z#CcZOEW)?jGK%kL1%v}vq|vdQ&L(FVA*zX#CEz?#M%6p8l|A8LJW4~#WTy`L`J9R-
zU41GUOX$K-uJ>btmF88C$TokW$TK*+R#8{JV%DbNF{n7CGs~rMsl`%Lw#9uIsF>@H
zkL&vT{yZHOOxenHSwVe_?)rDI0Xn^qRMrhE`MCtBV~kMTb4a!^4@ngKZEC%<-!K&j
z3yj;<HrX%|GR57r;#M1dGM61QB@8c1pLed0Xk)jsv%Bp1R#Ipm7e|9LPVMg~pSNn?
zSnJj$_&Lz0z{)kzmz_|_mF#|JB=r-V1;BjJT*?M+HP>8i6%u4Ra#gzOwDh(l!jsq}
zkLMY9`R7{R$rBAGxqqXQ6T9;p2B}K;6g4HELI+dd%53=|x~vzxxW;KBs)XUxt&B!J
zm1$w>&o;!CB83lORxO+uqn1z&s|+|MCulrP4>71lYt$=Sylcx7lyyzdfa;Z6L4_#|
zh5ziH#C#l}8@KLPKj(@yu#*!6(f5yObX2ai!2m*>CdKkQ0axmY$QLAoG|7*Lu_t%&
zA8X#DM)UAshQuygtOrWV6%D<wXSHlXni|iCZGwM#KP_vl=7E(dFr;pgQfT4Z#?OPw
z%GyG7j^udcEwa1;lW}Lj8!6{DSij#d@fC=!>tfOF4SSy2nz|H$nzOi5l<zL<F9)s7
z6s!f14Xbau!*pn3idAMU&lG}ZvXm{Y8NaQJD!Bo{j?{<Oz19|!Spf;aRy-wnObsxc
z4>E4TJWXk-qGDXxsb*OX0u~%0NBX)irazU>k}^Jpj+diAzeq2_Ilx=2!ixq42yGJT
zqWsPBT#b6xpQ9`-rFuh>YqMcrMdk6n4*<!-lW4Q6k>x*c(Gtx_(;_Hspi+eBY;i@Z
zPW(AvKT`MrpFr5KtfdsDh<4P;m4{NL-Eyy^y`7pbt@?9DL`Us6P<{nJegaP$LJv6I
zC)#rU<-HpRgv|r(yZe@frjH?-(e!4x>g?+lL~r+pgar)XVe-qszLII84!+LMGwQnA
z4SZl5GE#9|{$*|GWOWsW*Gt({^g=3Y-y;o!ALbAqAXB)IGE7&zuBmnBX{?kRgVj$e
zrGLQ+fx(MsY1xR-SUalOgAsf)hSH5nUv;)Hh9js=%-7BNZ-(|w=azHZ>4ysIyG}@S
zKjr&1RD|lrC^{IbouWvCmv^~<#2$Bp)Vx7(oL-VX&O7;1TH_<98O-X<8lU_GBQ&X%
zHBvj38#7OloJJk_rqz-NnGdinm&A{f>D2WCl>~uCV{Zk+@ts!hA?_P525=EG=P)GY
zZ5^~3I=nCZtgfDu4_;xcpcsUXo*Jl+RNM+Zn42ZN7Ju`u1Y=LH_C3HK9M??zkE9X}
zS;OZx-cGj1Ws~MU=cOTDl#k;Wy0Thpin?T<rtqFKss7hwAJKlnh`xnC>s?B6w-?Pg
zmF180^xa9wU&oojBG#14tff?)C-()N&~vg;)~a+v{y~7gdnYZfpDCcu$4`=ZBn8`@
zciu1_2kx55V5Ba<8`Qkd!j_%Ea;+GCrA7N=$9;;HTC@NFm7?nCr>Hh9Zi-MVC7ssV
zDy-O6l@bWpjAbe4_61~<H~Eg*$(_@K(Z<TFW4fx0%eB&Ydqs4Wossc==gJU;7%wnW
z$(m*A79jkjML#hTgfYvcm8M9KF_yCMvLzTcvDxH&>561J&Gj+k#Zpc#>$j<P%0k3C
zO(gh$h=5>tox{HEN)jptV!<dlG3OCeCm6c48@1w%qZa-ING7DAr%)GTS#6)%cnbIx
zT_U}hq5fN+&*l$&o2R46{@glBvEq#A^{BbwEH-|+^xqMFKcG>m<ADD`T>r}k&BXD4
z`lUJlgAJPVzp_E+sBOk(Ng()~Qfql=(uBbI6!pioOKO^$H!@Su%b74@Y+ebm1M-Y}
zt9&yqv%t2DB9kWI$LlP+aGt8T_z4n{QLyyhXRYdmyY8UJ!Tc27C#{~DUVx5JPj{oU
zFJLUxn8PEIP$p&<HNANI^h*2$5$vTIj3lN9iFe$4qdL2dJROiZl#!kcXhFs~P=HAF
zdVZ7Zdu!!imMV<o3?Z61IzxkpeQws7=H1ToXK<OMIC$z{lG@YY#eEqnwj>hrMRA(p
zfYM;W9E0VRk`Cd<*+(zD3QzRvj0}xvzh8LOs_xQBTwPXDZ4942-4<;L8DNs%r*~6-
zz&(F93b)t7H4AB}!k2Fi_=VJX%t#5*6yEFn%%PO=&LfP{kQCtp@paN~;?;YF))WcT
z=4Trs74@|M&ZukZR&GD=<XL(<YP}D);$;#JsB1RUvEynHr7RE6;SCQM9aTnPraG}o
z^C|)>TJm6K_ADX5x%fb%a<qkM1OPP0#|uF^-}!KZ7={vIhhbO6ESfn1#d5}pd&82A
z=a)&{PHdSpHd;Av^7{qur0<E0Nmoi`7xqwd^zLRe^>M<LP5IVlHDa`Hw{-9cvr7pC
zE?A!6Y?e^Li3uT*Lyk$%%64Bu-Vl>IMRGd1q+A5r0g+M05*_&Kyx-EIS#uj*!b8u=
zVMv__C;one1jNhH3LDpX_i<H69Xk<Pg@$Vz3jD;cTTur~;r3C$ZW`~Sy^K5+n=*|9
z2!WxjiR?JX7wfr?w=vry%}TN4#9wxi^I&zNt509)qkp6!_BV}u<rZO<ITd2VvQX;~
ze=o3wULO22prU>7!=KQUVQ>(v$|Lh`go9gC_2^)lEbzljR_Cm19ij*OS=h<YEXg7>
zofPEdVFWsCnA|p!_6$P@Jh)`LLeP!-4t)jAs=4keT*lHr6y2S*zIiZ@7G=)_X?5J&
z(CjeBnNlk7bmQXI!+5M{O3i->zQ2vS*q~dHTp|36_5wQx-^##fDJ{4iM&2Z4gRs46
zBOnShWOs3>%U2j@-tdy8W~W&bmdOTAbp^ew^RH=8TvL^>yqR^fP^G(vp+6bOVqUrP
z;QmYK<a2nNO51A?(hh96!D&BsUn3Fof?pTKx0H?lbX&A%9{lX&G@(NCV3c~yE`R3X
zIvvGa1`6m`(0O6|x4XAso32AwgWP#E37R-DA06{2!5%|AqHq8}gZ*Z##~8t@Nr9OG
zgEk0=9ybj1&$G01)@>A*@EmDMdLU&fj?$YB+;)#-x8MFN@Q<O3_<tA^|FW5Jvi;8r
z&cyKVE;A;E|H@^Sqxm;ibPV+`+4#>~(ICD0b}IOXhrK2DtF>tT;$&zNLPSQ$IRFaH
zpLlPnZ^klp764Bk*NTb42(ee)8Q#~e6?LSLWRZu_KRbBni0%5`x(d&<jJ+-54@TV@
z<Eod}2d(fG-t|4&XK56Yn35p`mxn|ac&V3u#>mx^!hg%J42C^hAud!~6XJY7<2PFu
z6^1@2Q8h7!88!Lo0yhbIbQ9gm8dE1NQ-gU}|6woNKQvzc^?GEhm=_hK!_pe9*p-^G
z>N`(i8{sQMnH%OolU6MfJq@aPFGAM|xuZvKjA*pFcYKPj+Ff<w)u?x(h;dH?U911+
z`yY$=ZnyB=K_t_$Vmg8QLe(m$juo~C4!mXMpM4gSKt|gc**gtd&Z{U#tflS^rN80s
z5}1c%B5U!Lu&=7(A4X0Tl5SM3%YGBFC?>{Joz_{zlvWQXyp*n;Em!p|3Hn_(ucq2*
zUw6+vXX8C*W2H3Kja3~rEsWzrc%)=X@YE?_{T#9Q-ccHbGJkD-VKEyg-o50j_&Z6P
zd$pDhZ$Sc;_Z4(ipI>13Ti;A24NtLVmKfqwcq*P5ChPIzFP3X8?Yf~Ryl-*vWi4E2
zwl3~Or*az$I$V^q@rI0C5g`pvhOQeU8Gsrl4%u1Y5Ot8CF@rQ^!ZZ&mp$A~pH{1(L
zM@{-vQwn%IF3T+(1Q1_E6IQ8V71L(9M^wSGpCz3_a4n!X{z+9mnt*Olv_iE35tIrU
zn8JFVXd{HjoVYY9WMdk<Dz<S*MB)Z@m81e2NPq+C5K9%DIq;%!7A`*X>Kn9Z4G5SH
zc9fefRz9l4l>%`Ql#8GhP~t{-sEG?(Bj-Mc;0$GS{kFfPEp*a|M%xoygpOHN$Q7vu
zWJWk4nRUtZP9{m01>t&fNHSGnw{k9R^;ubQeo4EB$8Gm;@v@6v(3EPzz%>k;NAbK=
zdMm9!3jcM+*#XCKsVoP17LJjf&23Fq`|+{b^1HH@65;|mvaSy&D!VYfEjhH%n-lwX
z>V8iTufIl1>#XY#d@{qygpG1d=@b*93a1CLvs%u40oJ!CYLbUt)LvB?OJ@Ex>$-yr
zale{=PBEvDL1Ii@ZFjR;AcB=o9djg}0_d#Lj{}&3Rp-Ne*%?4w&#~xpVcZXML%mCE
zUF2W!Uc@UjA%f}TTH8O;$SBW>S9+UkTD;_2D3wO<E}Qg54^klIzm+Mk^QqucMe0pw
zlXoKh;HmmhGSQAztobUg8D<k=c(3s;b_V%%`Z)1jDcm<I;is`cMY@(%NGH5V+1595
zrw78ISYA4J=#3@FO)jk-subZi26MGYR*>1;DJxg0sQH+G#Y<cZJ(Q;5Y*di1EdFHn
z3|katp!B5628|NlsMO8vRsp4m*bEjGGPCiDi>}}4F!AEStRC$9j}?xvnk3BdylUB2
zR;bLcyABk{C|Uq99lw*piJp_!lEI!tdYVJdQrC)*1#4}z(SOd0c21Ex-EnZprU*p)
zR9tRb)_S=WKv?17g5+SJkKa_##csgM23rE158xnWJC$N#DDWcOt+8_@cfQD?`veLl
zfU>B7WT}80ff-}{{<(6N8S5+=V^#G17$h>8sNtNM!fhoII0HgN9j6gM8Hk_v=9q?$
zH_UZt-%fK`FZ|^~#jmS*n|x=PWz<UBp?3kl$N@mdc45LUsO`&}rctb&5$6s1M|U%u
z>luW#ymD<r_oaYR0yB%yz#EMr)6z)WtJF<v9?d6Ct~$!wk;mV@+{{rlyg{d(B)X|v
z$;D%)z<Be5&D00G>s&Sp{7c&7QblJdrC;2l2~VqEsrrv+CjtzF85*xCJCay7=SvN@
z@-;F$NT$uvQ<Ac-=VJo(m|U}o1BxS*J^Tkc!uZ45f-Ed$pi{ECT30NbOo^UB?c|-r
z<!xBv(u++gHtNKD<Zb>vP7$FSyovi0n3I}=_V5{X1h1o(XNBl%%(B^>hcp>Gnuonu
z$6P*3i#rJ<OO}Ca6_%*O8P+;&hZA%|m6e0?fD0NZyy_y?J(5vzJBSJ*77@zC5nx0A
z^G;eK5vEZZRIRLqKb3Q@{I8Nm)d4p7!=cM4m^aTY^}aT-`BIhgD<}xCDYTE2bf(@E
zBbIcOV74u+eE=zCVZkIvD}OW<bE%-w4b_?)>&nb>D}b2tg&nq0<suLx+sI=O5=kh|
z)f5uA_51Mt9G-VKVgWjZc#z%S$IO#mO0)2RwO+iz%5)5ot~{=owo!l#SeBa{I<*+b
z^Q12dB_%{h6oG-^@A8a8l4-MU*-T~)I?QFma!kaWGmDtx89q&F1_WU$py2B=6*aK>
zH07i(0SS-3gwnc6?V!6or#mmzp8YD(MQJ1h&F71n&F8l+gmCv+q^U;EkNx4CjvzHW
zSW|+-9^Qh-$-lzwH=DSD#qy}8=qOKc2<enXuUJyZBCGDV!yaKL#BUC$OuT>g*Gj*4
zTPnObazLl|6<Uz<4mH^Q<gJ0T8`D~1$f@^Qy3N}Y&VdENWBj=L>tnFD%&Z{$$34E4
zmC?Y)4JRJR1i>^uqElxSF&*T)_4Bi-)%la+OD)U>WMO*IW=-Nh<}f!MH~vnc)tCM&
zA^c$f=U8;gjj|{@&OBE~vpf;a{Iqtm&(%U07HB?@nHLVt(2EBNqPH9#utyx@2-xW|
z{-&4M1XuFzexvM*F*kyMuTst+bwi5=$_}NS<@|RewKSWY(f(FF>#D7$1f@!R2A3MF
z0LCR*c0`oI`Vht}M1?~%>IJC7(DulVK1Wq@QewC!bUcjEB%3Wq)0d9`@@DqMsNeR9
zfvDj#;-{mJ_Zm&|Ru4Ft>v=lRFiFa*tv9|VYx;bxooAB)`d)6XxOdF-lh^=L>Z7+g
z^sI99%rX7tIdGuga_j-YqZMbb(lTu6`a$X^Kg4~t>8p4_>ZbZCVK?H8Il7tAzjSil
z^gPDL#~fmweTRd4D(pu-eB{Pm&IoGUP=u!X-pa9Lk{<vv#q|YZKUq(<-DLpNK3v+f
z0-_3p-_JgzTZQ>uQ5Lk0<{6Z0aks!pS$~Ue+i45KWSXT$-=_Q8NaBe}9s$Z~G4)p2
zb>$BVq5N)qnU%#cbTunS*hx{o>v9Y=8zGwf?j~c%(2crI>8gq2Ex3sBy-}$UiPLQl
zIXA7LX-yP(h(+3FF&RIWhQupdSJ31eOOGcIHWA3Quq~wzJ_<r2Fk@jNJJr0axj0h2
zE$y<_s`@<-jFcK(ArD79Hxc%T2vEl$DpyABjO9i>cx{3T%SN7C31JqIu)y?EhlvXv
z{T6IZuvsiqCt>Q)5w(K(E80~nU}sr(Z%n#3y9U(QIVRFa84qj9Rx7mFv2N_l<=vdd
z=*IxGAB&U_yg<}pYLLVIInaB^-H8Tbgf}%5CXR_ri3ce|YT)wu0RQcszr}=N?cb#5
z|5ud%JpZtA{11o4#PIK~8YYJS%2ji$u^Ia}ZPVvf9l<w3r@FmZ;-aySk0q^;c7a4T
zy5|ZlbmgRWc_NW&eg{PKC%<>W?+V5x?OL`&G8YP1uZ|NZmy_9v;{iWdQ4XW$qPOZg
zIH7YKAK9*#^f_-il}A_R#G+Y4c4qgZt-dWsC5z+lfk#>rZ8IY2+B|Bv4{|L;C7dDN
zpg}`E+gWdCZ{dBje*IdxqEeL(cp{l7>NCRWy8IH;Bj*xj+G9^~f7NUX>uPs<)U271
zU-X<#YVHgnW71Gt;g=UlIh17c6le9KLczEWl|9|Kj=P2HG0)HUde-sf){v%F;xLT~
zLeweuE}zf4(aYt*Xs+8D<7q8y2pC&BI--b@iF;%|5F(UZ2zn@LDD^2{E@Xf9l7>1P
zn7WWn^lG-kpYU2X2T2*{Bnzd?>bbjFG2|gJESqDx+1~?atnKdt3u8mD9ut2r!j%l=
z%tC)-Z|lY{Q~BWjIH1MGeIKXrLQInc_Y;gn3USHAl^{kaw55EGJ|MHTzmtPjXFW6U
zD=Do2*+0<ik|xZT@QMWodMZTG4o8Ne<(`)ZEUar7anaF;YKqQNcJUx2gWdqU*8$v7
zNy{=G1|*S2(22E=78?4_DU`XZ0!XHQ=_TsQc@oHq-87v)v`(zV&s?npI+;pr*F!E8
zF`>A`dm=z-UiK<O(96{nS@tkbKAWY`8+K<WT7;-2cS$;{SSg)p>+bbie7<y=4;>F&
zFZYlF%6W5YdOID<u#X%a55KpMHx?H+u(dLm<Bh1E&B0I@ET48h#;lW_4qroU%Zf+a
zvz}dUR@axEYHE&12qUF|72=7RvLz5!QIN8CMA#QW%Zh89ZjI_a)=v`{-@0zvs(7~v
zP^YmUaauMl4}JjcmnZ3D63N|;*g15s$5?VUd`?6t7X=`n*3yBbsmY!wr@3wWpv^Mm
z8B%07opEJ@FCA7>wo-I2-XSI)Qh5N39kL+Ml06dghm409S7ufTaT9A+URGXsJdvm>
zEs5_6_=*EzYJk?P&WdIEa126cF1xhE95mr@A>bX;0^>W>k4ycI7DoaAdLM^7@TSL)
z>t&hmy5JnS(<+zjag^!O5=sejAt+9|RtN}frq!JgDVhf#Ew3FBJL7onV!JPExz2BE
zW0zt^Ss8^N%2Cx{eRf|ET(RV<>ZKl$E4age_N)z(3iAOSdg{1sXH(2hF6+2OfZ8I&
zO^#|TYr&}<3C(R01hsWimK>+Pi=JRy5TQmwtxU6j?ul#hD5Mm`Nm~S3)Q~Zk2fHTy
zpju%018C5OW~#1&?f{K3f)(dds9*_XI)x5CK;T7(M-AfyIKAn(|0LAv24P9k(u)xD
zD^l!>RvTCPY)^?tM81eO><J_<cNV#_7%b*q-&B%UFMjE;M1of-SVb8mpFd|Ic!0N(
zMM_Ei3*V*Gi4$F*9NXCiKO@|L6>lCud$eqX#~fcUAP#Kaq>O&daJXH8Z9AsE@0?a{
z^&V<;-b$)J>6KZX6S0j0475dLg}Iq?c)ZfKwL-OoLtkiiM;$ojDZ5;Q-X&7_;3-<h
zR{8;f->50=%xdEuOU8Q@uH-421x`^*hyIL{BrP~E0G8(=KZy7WrW3cE3ul8?U7YDD
zWK3$Dj`pxqs#->%HphQ!2x03ACBPasiPEW1*C=&_gx0#&Li4vhzmWEE>5SktG=%ci
zB%|w`g?<oITVyS+dzD0$5uS1jYiBIkF9GCN|1$EVB9wkM8p3tQha)FUOFV%dD&hf9
zvAt_Tu`A+*g`v&bOB8$rV0d=&h;vt9{s8iIbi%VcrFWyJKX+#Il1+N(9l>QYh41B)
zhgVBM%7Zei8W8s^w99NXm}k`P_o*qyw%MtZO6Z@MX%sp=i`;YA_-_Wpt+5x3Q$lad
z`7fg0R{DNEc7H1vBroXh0Pw@#=b^ju*u}o)zKb6WfUM!<OcDJ;`xwFL(s&}FSsEyt
zqlE)kNtV%q6zHz;+;_9Af~$LRV3x9IZqooa9NH324X{=258z#k-!0+5+)or4fr(2D
zxZHC2NpID#yZ<7S6mkIdC~XU2q?lSX^k_+W`_J_4FDk45;V1Mj7?_cj{eNP1m>B*Y
z24-UXuVCPk<W0FP287VtN0g#&%a)DwHBR*nY$&A)trVe~{K#lyiOT7KwN3?9pV!!&
zE7t&};z9|@qxaL-sZ&Y2esUCVCt3M<4!$jpR=DOW23`^1u=YbtRl4k;-$Nh|*5)#W
z@eC3J2oEC;ozpx&v1H|w5(p-i;gMa=TPw=yWX|@fw!e{)#Eg?eDesFQ9=J!lor@+p
zz0Xapk62<P<7Jq3q1aB{n$b|bPp&iTqR%W%qm8t<O1{h$jY(Jd`#u5@x(HeV4!w4s
zs3i?n9>nN|BdMDcrBJ1ubfb*UR<vf&7?5=-(~=b*YyF-a+vydUjku#Fq29?yuU9)L
zsOQmj>y}HTAvF7TYYZXzf%Dcb{X?L+dcvZvGkbLld*{Hi+<%XTFI1>6#<JVR$=bf*
z7262aYfZZ4Kiwf9Ma@qZO-aygbycD+*=j<^$_CW7jbsH+XN%H_gP+x256p+XmibRF
z>q4gw#5ip4#J{)xIYcg3Eps;9dEvM*#6j4p%5400dG|JsE;h6Rzj+6nzJF(oU}n?G
z${srT^ZVBF7Z5oX$S=Va3hX_pK-$$!Pq~z6<6dB(ZGd!VN2o3u@N8IavG>iWQHbZ}
z8)(w7>FiLFNsWUELviL<H<mI-vqQnIK+AR3F1zJNnRzZLJ+n+v5@X67KF=vheKW2b
zSZ)D=j?#X_Bwl=bXs@}Ql{dgO)taV;Z6}Nbz7tNUcnW+G)$}I*-;%#^XCekT@|WcM
zqwaVH?~NIMSl7P$H3S%trW8>{0VB4GggMYthB`9jHH0uimC(pABE7x1M%y1z>vo$8
zqQ(CGTmI)4`VT?H#>DWi$|xqrf5&N<82>ArW?FsS?vM@TA9~6Iv%Q{Erx{~xkR+p!
zmMO`S=xLY|NX*EnxurP4r0hNHTk5AFtr)Ft(P#rG1mDJ?o#%ARiT-#t+#oXiy=iyc
zN@VWw>@j>pamkmI+8Hsf)J!!ydS?gBjK~+OT^0ot22?2Do%JDdn&TTZu&)Ec2`>al
zZRmV#vh2Ai!_y1fr4yK@IIDzcNJI*yH@eG9ekX2Tw!-Omb|~M8U}y9iXjW%hwIteE
z(8Q{hB^oY~F-l9wbxR${aeSMllp&t@0!;=KWIt%8<1S5>m-?=*@5UQEyJ-@tN6dkP
zh<^;e`z>AVZk%7N-&!QRS81{)Q@Z#7l4qU2tZI4^2Hdm((}8^^eYr5xt6n1`G@#d+
zmxr;i7F)FOc~}hxLfoc%RJB-)r;e2hyJ*S2VL<|L1XuiX2TfGvJf)|%XuDOToVev7
z6Bt(nUHvZDj)n6gwWKf(qTDO|&$+P|%FcAO>Kp|@fY{NZaYaN&)1L(37SWC@tp0{w
z{Ie9%_S_9(5Xc62s;7>|6-nu3jfZZWy{r&aV}soZB@RtFLo<{o1ATuU@F~dz_T}_Y
zy#}2NEBadlOd=6+drg$y6$@RvAZw_n>Z}?aO&S^q#>Zm;IVN#BN+kky9$WHO(*UI}
zFSxD7Eg3t^H7uT^bP(Kl$8DbCsA7=MffG;lyS`+++iTK{-&Immlo&o*R;t!2=j6JW
zPp!LpL^J&YRPxh7gYf5QiLY<AAUDwXyr?O|JyRDWcWZ}pG%7(zDMjMj_nK!?hrC?M
zVuUSm!qTU9-C7kFE@sjZu3?_-TIae}bNE`I7o`&qr-S7_Ia($1SGiuAJ7<h3J5E^+
zp}K&e>GS36qaYLN{+dKL$IA*m3POCOIdv-E)%)ZW<HZ~RN6I)aOrF!$@95EF<zuX8
z9q1BLG@ak6DKjS8+w@J>4LNyNx3;6|R1V!z9Zc&NIRU!~FJ!}WR1(~3*Ww^@!NI`x
zmzZ!$f)y~9-3u`jsm~QncmM${W1Qz)!__;L>QDgO{hw39=+{BM!TI8o6I`=`9ih2j
zSz0O5F$sVUzNr=9DW%KnZ_{!sHm$cB&U{=;uxD_UvyFIkI+1*sT_@F{kdSWyyF+T>
zb<fxkzozCX8wT+(pM0io<SM#jgH$xtL^Vz4{A7viCtxEpBu@WGOS#<esZjm-jNnxT
zK%tA$3;MBygaIr|PQNUljj%#tdcbKePkC9wJ+Vcx=y6-5TlEZu6E*m@KiP_!CQUiE
zOl?B1bX;9Bn<_3N7;<2!hunC5H5*zAt-bV;Uwt*Uf#rPLpGs9w7esb8gC&}#AAH*C
z;~w<)`Dy8RWf(zTx)C{*IQO42GXfgCJ9s%shw2mqmW12ot0n`Fcv~eAtmVg7C!|%Q
zn#8xNsWh3l?iZm4vuV*9+MSXgYd{7Pp`3bd8gIb<)y!!A1MH&p`GbDp?cTb$>JGwN
z&->xnC;aY8?sPM74Gli%%TS+wE3I>BWxPp&+EZ2)MuY2oV+s~%PA6Oz;u-+rtclhp
zkk3}YJYW_)8{S6dDE7y;pK^(F>u6w~$<IOI)f}vr2B=QkSc8~!OMGV;v_l%rvjicC
zUCTYkzal;Ypp>L}e`mA^fB%tO&@y`RKg`a5olF1rIJ5rm@cj34DHG#=buL}j{M+L^
z_K%2%Deb;wj;Qv%Qg-b|WYWm%Y7O56o$9}l1BgKYu>K1d_%G@Yap$>!VCa#JE9)wW
zO6yIWX+1f7+q@rQ-V@<*{L`ma?DykeN1MSJza$?UHWFGN$6?&2)symkW9<!lGS-Bn
zMY2Vd65s6(P~jKf`S+04(i8|2H3nkeJr9n5TSZ9oe`Pn75mNzoPMFAi5fD6%M!21V
zx+y<6)H!X<9K=VKub*VW!n4O&c5fv1R{Y6l+H$VOG`FX*i~Y)1QbX>X!l+&(>7!-F
z>^n}J5((e5>y9FteXf*?%AP8VkoW0te?7T=?mSO>*Y|WA{Kh=InW}pYQ_4`zDkO=l
zR;@{`TrgSQR!0{(9>FYT-L&m|<dZWMO5%v$InA1E-D_4&z33_xqjM)9d%PU~6W6-q
zouvj6YnpjA>0CC!;w8jb9vGTZ!$(-Oa6Fg{noB2`-QM!pd>`T9ilKO)U6ph)Y1RFQ
zd}|3l1pxs+j};s5DFPs6@JxcrE6PpTsuo2@=}_C4u`l>Ti9luU?p8z0N1x1M2kKAu
ziDgcuR?zIKN!dbID8GmxMfN%1#TX!f0}5+C2n__Z3`EXv;N<-Ti&hpW54uLw(3Yi6
zpyKs%)nuJzG1wH<5Jng}fe2U&nvdU2mCYej%>ES?@O5C-*)Fm7c5vJf-;3?rOQh0&
z6PPS{W-1zxw+0VL?6zul-A3-&_F8k*o(r-g!#`mB%c~y2o^zleQy9gj1A5htQ5MEu
ziTAfJJ(J0%B&#o&rf&f~I)zn}O31=^zFg-(gxW*;Fa$PXhUbQeHD>M#SLz#uHDt2J
zJgmAY9<D5h02~hHx@aP0s{XhjMdF2eoc*qECs{NG%n!gx=ZFR$s-8sw!#(<9NsPZt
z^q`vV+dunFCIeVRbnk&(I!Py!*jTS!j;$o<{Db*DA@J~yLC;huxc3^^tlUeJYW2KK
z0u7B+w`L<JdbL9RLLp=tFWsCQ2qZZ`4DleakHDV=Y;H9HjQ{K9V#=nmQv4bX00Sg1
z=e@@-_?qJ8NyaIue5zH8ulRY<2%aNK02EA%{yEO-%iE+Y3oBkf26v20q<Fb-T&5dO
zuurfntRA_q12j6Hz)_CrZb&H2KqYz{*-O-e$t_#bCzv-*$BqBn7-r=~C=V>6q<(+c
zym*Y2l1(-iq@O|@Y5p{x9UYegG^R7;efiW)cwFG37AcRlHERAC5cZ%Jughn#cMDzD
zoBo>%wdeKz>(fCrH5PhC3=d1s=l*_h>Z~unM>>OJ*T>zBvG?PyOfdt>5`%2KA}i~*
zj;?O^dF&<l7`H0jYzkHME)?gJE5G6HYo#QQ|0ROpY-pqKe9&!hVPRjO4ox+)&N*rq
zIlYY+3>c@cFrvv8imDVDZJh)!2>_U$^nrb$4-ph%4~a4_ppn@yNA0Io&1Cq(x_Ry5
zip1}aMCPV8J}L|Mb;R!DL3O!Y`$w4FG<x^<i62?$pJqlKv@q}PHT2`#s9t2z^TM_3
z{2_gmb;Gn?h3x!apCzGHeNqTr606JOQjN-9d#_@xnu|%-s#<FFA$9%*g*xe&hbS0&
zevIgfby3|*d)d`kE)5!QqVfSh64cOKAUx-kkKW8)GUovqI#~Cos&%R+3X~gY*UMkE
z*KZ=T8thCr&fT;tDH#YG<3Mq1oC<@lnrZ+;wpmZ%K<cAqs*uLR1vL8{(UHrBaR4iq
z#BuJbDLL{#b8&<DwZG!V4HR&Gi5G-6)T<AO5#rJDB`F0}^{xftYPxJliIcYaz<d;L
zT&jLl=_O@lT^5v66h@2wX(|W#C|H}<vNJpTY|25Ac@q^7K3mAma`32Y9TQKq1gf$*
z;)mNM6PAIk;q|%_=1Ok3+}zM~&l>m>^;jau$d0HVspH#5*uJrEE!06cNhyAkRNyA@
zdt+}#u7@Vl5~pz{ih;Qh8NR)MJ+WjG32d^HvcD`kTgQjUs+-OQRQVd)Xa__CAl^yJ
zfxkhkf`;|xS03?IltdPQS9+y?A>INj$hkw+{H*2jnF;-s%7GYZ-&brgDyNF4k68<R
zoftfgSAm}ds*Qg;hyJVqQJ|jdFL392kUuOV<Z-$+cQ{r$nZm$RTYak3o6Jxd26ZbZ
zR3r_O61P^&5;(<yc2?eKj#I;%tvkSn4~4EH*$GW#*4-Io9R0x!WpJ9dxmW`VA1}HV
zU}yqZu(_apU$T)!r+tF8M7A*GR(HWn))cmHXCns?_#@RTah1Y^MFH4+zq-q;qUlrt
z*MmeT0KdqwJViQikSNbCwd-DtA4YZTV}I(B;MOdc9M(__?Pa(gqvVU0!W!hp&^gO=
zN2pC7i=6|#Oi=hgdtQiMhy0W7!o7@=pS5lvjaH?*BONgUm;cgBL7K$e_+*ApQZoTr
zb$q-MfAIJQJ1I%kv+lFhW!iZn&>;wr6)*X+klj_O_oI1I=eh-2N?u&Tp~osIuwYae
z+Woi<2tj$(^~+8w)If4;_uEQe#RcL(W4I8A$9~PuuBSOoZ5Ma~LR`9!^aL`ESM2^u
z8X@~3^L;0@Iw!ZK7^V5mUNfLkoaOxMr=|(JtZ5(E{3?p_i?`)%VQO*?;Yk^50c76Y
zcE{MZb2*vub!fBr<UIJ4ugoU<E?#h7dR^?7r#ujgi5=juP3|6lRw2$rLImsxbiwI1
z*N}4+m`&i+q26VJ=f>+z$IlQ#q@DC3ZvA%^<u{>AUtk6BB>)^VbJm3hfmgREjg3>n
zWpuf)?p3~hol0nL;~JW1$n0bBa-8-TM-W??%Tdrp1MX#mZsxjvfdAKMG=hlAh&K#W
zFq9YVE93=ubSqtWh^<7Ad|(Z&JEV+L-#}NEacWpDYpowt$hDF749TwfFmv^;F4yXs
z?DKr24Cto;m?b`qIYs?^kf3EGO%)&?!b*MX7~YmO<sLQ(SG754u+7+b%$JXqojP_T
z9$d>nz5N4{q|>T?k#B<wWMi|UzSN#1WH!VRjaL)TTMR;2d5DUP`4l{mAn@%2ZM&xJ
zvm7D{f+CzW<EWbh{hrvc+vE7|{;7WIU7YrRkX!%4PMDY(IsZp)G5rVbgz3NHPD=h^
z{a{1-+h@Bsy|e;B2%%@5hqJl<JkszRQ}x9#+ffjS<scM2BQ4<>{{8HFBm{(Vnqwxl
zisuCZ<iqjf$?}f*o|2gFn~}fucz_%}Y8JZGS9&VWR<cK*UaiflTi5$lIuL&4GsHI{
zfrLO3BhjV(?qc-#qqiQidXnN)6Kf#y*=}F8$~7pi=acmJFLIXXCuOwKr8uHSKH9%U
zwoeX{d^n~dlbTq{x#^}oT6gYl6P?!qe@H6zP}<HG8vXy4b9h|SW0lY<emd31g_#T+
zn}Yq}7FNFLZsq465xH`WvDw6Sv>Hk{Lbc?7Ele<348Ojej5gCmD9gPv2q}hle&77i
zw<j_lOh7zFWDmpJY-x)*oa^oG?KbV*zXz1P@2W92n^GCM1O0Hdrz>$tG<)gS^D+}g
zQcf+VVStBs*_`H?wHQ)Dwzy+Z?Vr(BTE?}EbIkf7bSvf_i#)nmR*ipSfmLb@)Mbod
zkpO;HN@&fg)>2X*#{4EiD2exeQYrr(9%`AG(KSe|Bi?wsB#5CP(F<8&L+K%jmnJCj
zn+1wj@rc{e?KRfs@**y*2T>PpGtFl+A%<kMRIg&M_KI+XDeptFup#NTF9Mls9=EU6
zXFD0h_oZfQ`%K?fG$acaZxYAbZp@f&Z>bSw*-rH+h2$9#9-JH-CNlOoU76!`djMED
zjXoO#oR1?rgTO0i4JGkHArqXs&$be;C#QtIh~`DpMp219?cCTQl{3VVUw#LcB=+ja
z*T48Is+Lq&7U36GS`|S2jL(Ti;Jw`^F<wML;GM;)sNjo|GcQ3mH^eiHd{!!nG;-#8
zAXfxnW%NA73oO=cx05uRG(_O+z}n>_P>bcbVqe6wo&zAGs-GfnmA^QE&ghPDEANh6
z5Hbjh0UO887fT}!?#p5sG4`T+c=hY%7tQjUv&_`Blb1ea$N5gCP5zE@3Lx+fi6ZMk
zH?t{d{xDGa(Fy@V{}qAj*TrcCYB~sBV@6muSlj)Jq|;eW7Trt`p_u*LH_Q*9bSb%L
zbm$?Nx?*O?3eppeN-iJ>{J;R&0B{2VQ)j&3*F{L2fAc)W-ZXWVAce1b4RHY@c2}w_
zDYWoO_;1E8!qqK;k6O9_#g;;VjSakuj+Ag$YmIyuV_ym6-J1`J?3sauhTlh^XzcwE
z3QTp!5SdASg2RB*bBSe-4o+CQ@D@0vD~|}DNS?XE+9Kaf*`O?BW0$XP#YiO}Kr^o*
z4h+!96K&IEsacRR)vkYEYTj|EZUsK9lwX%)Q8=HPPhd!38Bio{jDbO*Fvi82q0r0L
zkPUTLk2c}7C2b=XgLYSji4{l@z9i!3LcEvFc{O0eU;*f@#uA(u+RS*=a!S?s!+QQW
zcw__+fWh3EUoaIBI#15W7GP7wEuT>1vg9o;#f|0<7m)2nke$()05Y4rHqnF&VQEKG
z$YoUm$!T&RgBnCAch}O5?Y+9zLF*!L!PkWnnWk3cEdcvRs*MtdbA$*r?av+i5Q2?-
z*WQ(vf96<u(tlgcep+AC!I@vfk;qntocYZ)BkhdGDU5FtrKy$)+AM_uzIQ#7<1`mG
zR3OJlHRsvi3c7wMOp?k4NeN1d>Jy@}$SUj1PrAnQ`lR^XkdoGY8Ur3J>tYP~V1c58
znVze|VnH2AW(o^CW0C+QvE-b5WltJ`zrb1qWE;bkmwc$;bFn$$amREezy-ptdl<b!
zCKN+DnX#NM75=y~JCY);_pQ0;N+?bX70)<()~>R4XG=m9Ywli9_u>A|nN-3uDo8;d
zQI-#&M0x2HQ>mGgw=)9+fjPj{#(yoeI2{E~j-ds92_aLxBpB*LT4N-h0K4|PAgdvQ
zTeEOC=rD;mNqL6T=DY~YISa1XrvVlK5oTd4Oz~qgZw^ZCtJo3JlhrH?&Un6Tad9}A
zLjq~@R8Rpl!I4#Pz1^-T!+4WBLjC?7Kyq2ys{Vju`W24`<g%5W=1^R<fK*4CgX-K5
zQ*yqy)cq=j%KvVdu}6T!B!48jTaF$hPT=j%R$uJR`*(*!!p3tR0mC33<KL&pAjPvg
zwE#JZYpeh*d3&%d`T$FxE}W`*^?LooSco{q$Cmy4Ow{&T?LSMM56yr`lmmb(qbp@$
zvbq~?ieNYz*;T6$^;A2EBoAdk?0Wdw0|YfuyoL$;MKU-3A?ZCn*+ZhLZ<lWv)J6XY
z)Dad8a;-9)4K{$niKOF}h)gIbvO4|%!6Kw5jSCVhG~S4cHxgY)y`+(t*0)D$GPk!$
zhhK^7s%x3JvEad^<1QRmQ6K2?8cM@+vi-h@h=E#~9WAKF_TZ^@5KVRn@}Ob_lb<&|
zLj{8yVkQ<;CxZH&cbiYrfg@Fz3!+@bu((68p}@c(HD(p&0%8P?tER|IOv~|O1UQfd
zTQcphKV`q2;{Xwst0Lrt4v!SFYT`}YsdYgY^P9z)?n+(cTzV8rx9L!%DA8;dhXB=y
z7EU}brnB-sug~uoT*AOKsZo?b8$ZCm1XmrqJ>}i`Ny0D{f(D(RYA2BBB!iH(?Cbi4
zZaOd)t0US0fD)oft`^w}gt%G;xBqOD8bL9zPYs#=<lGF4W4?t~L^aG(W*6|}2zF((
zv_etEQ^_f+25~!Z3VKQH#<Jmivpa0rIKW$zDyeX;l_7yVf4?YzZ~d57j)RsF6%ivn
zmcXKpu__ZTrxTQ;?AI@H<kX_uKkFZ=`HmoxKZ=Qu7@rv0F~@5u9oN!?wSz~npKl+$
zfARmL@HEYmu(c<mtp2Vqlfu&bQv@2gMMJjgtX+42R+GWQvRa<Iks^Mf$rNrWzVh|s
zS4b#9`4AqgkCAoTDmb7z4(^Ze@p%pvL$ECrAIQdH6mwFXIJL%6<?YfbpmUhF&GpL=
z&3Yvq)I8+&SZ6@Hqr;NbcZ((v<FykUhWx$U%fg|A0)1YJqAjq{d4?se^>~Ql@tQ29
zzmK40^tDi@dZg^iwN(cO9YgOnR+y;{17TUQ)NXQ&Ry8&R!BN;kqB|!p1_ShuugICv
zZXx(-QcSf%TWCAj#hTl=CyYUygpH?ac{uW=;C*cnC|37y#SV;Pa~3MevnzvbaAGkc
zi%fwq&Nej(rGzeAM{6N)?(hm&HEbcgdZA^)Iz6B-_KsY%4!qUNraKue_<|E7+J^Af
zv$*_*;LN9fbEe8w9XtXSc1t-8SaPFpZy0_2kkcr499S3R%ob|JH=Udhb_z$chrshQ
ziDy5>Aprm?T6W=;cA+d>-hbX2ncRWN#R<c56w{W~@Ro;!he~rbAXu<|8`>w!V}|pB
zc@I$sC$-1GEcu89>obOq|ITfnrNkax_!T6MBvLxd1z@@9nPqKL2+>aCSBL~HDDM#-
z0lM7IXOR#_W<A`eY`}!w{#*E+!)v|EOPRs!jgqPdpa{6$a=N>X=vnv-5m?mwa11(L
zCGu%Kfj!+<sSkU|c9$idyNjr~#S$?>ICbII<9=!gp^sgYshyt!tJ}nMA15P**<N(J
z(N<Hlwo>2Sy(C+FISMs{Xh%2IV1O=@U-TL>lQ+WNHG>=28!GTh4UxXCKa8Q5hy86)
zjywa)5<X;i56UuB9pF;Tom|T%nL0Q{2{>x-3UWQ(MqK+u@6u^K_}Tf%ElC-A!ah#2
zXsQMoP|-8b0PyTcFe&2@2$tsWBSxs^KJE1?d|l0p7xsv-P5rux>;o+Rk_-Am^Z;3M
ze6F(%RbHDmzNcwc7jE<B=nuK0CmG_|q4v8_)J0nZG+<Yp(<1u0;b&4}f0WxkRRKl(
zRqc@V?c-MBV*6YUBohIY@57H6QII-spTsP|GccMYF~`7FMV3wx$%4!K{q3~65m`=I
zanyR>&&w>$`{2XZ3+&(AdA4?Wem@J_EBID7J6_L+iJv=R_`d1Qw0vkcUFFxMb$nfZ
zKPSr{*Pnh<OQIK8-%Fdn^n1OWSSOHsw=lHnSpP=JNK^{I3H*5u@<K$88I_CCbuhRy
zP*Jrm$|#|oCx=#wqmvYf#}LAu9^V4{T8yLA2U;QWmpkhI&fT(wC-8%KuoeP#PX;3l
zr=UNe`u?>N<u{o319((9K=|+L#y^*ce_Y0x894qIb7%Sws1ehDg&Iw3XvS@dA^EP>
zowb$(Du!*FJl<vTx&oQw$|FH1h20woDAphv<1uAnUH=LDb5?T^6jsb>V-R2fBY~Es
zs;}zf@~nQKEav^^cb*69<M{T~W%Rjz#Mc=0gBhpxUWF;&=Y1RoJ`FqbBN8zqxdTR`
zDeGhA=lcUa0??@v7KkO%K*X`<$ue~FfH?nmLPx7H7Sv;M2;_4J!Q|l7=T*e4lVfud
zE1tQeNYEPI<8#2Ld|2UR>(OfUjyWkFm*@y)SL)ho4|1}g(eYrM7NGIV9+89)R<H@8
z$j9BYYF$u>3J2!xuH3N`+gPv7h1QAg{8F)kiEg=#>I7>uRuFOsqNcxQgzxM0rJ$~W
zPyIMV_dVSYFTD5dMOog-kLEYi%9JJ6JC2Dx?Y_(ExYa7^GwwOo!o*fSA?6=o0hgT#
znf=8ao2ZdKPn4PC<<YoXy0lyVZyr{4e6F%tE2oi2<=5EZ-X0w7ERq?mU+>=^+X+FO
zrZy&}E{!_+{xPbHl8v@1;JeGU6{`DZ#L+f+4@;3fX~YY6CIr(F<Qg>P5@Pndy<c}X
zL-2GwN%`oPN=gr>Jogp1qXB8C8-iJ-E)b-imy<jtmPA1NlI_|irhl>9!;_x;{YiWJ
zwmVB6Ag@E(R-~q_Sr3WD<WW7fn-U_`7l8*`wOz?Qp!1eQo0sh#&?bAms?#M7T30B%
zMnb9R(!U|siB}tDGr?~9)yJ7EF7Np<TQ}4M*ztnb3D~l-wASFajuIIxI3DUQnyu<b
zsESOzprI!ZD~*uL+A2lSFY|6_2UTYN5DjwPCj?g4nvyE3LLhVq%4w*qV!~y@<bXYp
z3pqCAa1g8l)TcyQMNvNW&D76~MYN@K*Mv1(2U!NefHAnL`=sUM8vA{NBvqL{+X-gE
z9fgS^n~;V8Ge@R``;rkxOMJ5>N?AUTaMQTU2}~FbE-R*0FoB=zK^Rmr_st(XWk*=e
z;0}?XQ~m?_))Fu3VUmY{CFvdT#cLebn=%Pna*gDmul3GS!k2}Vh}x`17BF@8p9VHl
zQWKu_XDp|4qy3B3{*fOfjQJ||FYu(H2=M}RP%xEBcQI2K(cpYG8>OC*#DyS{RWV>x
z$6Az*z>z5hVZ2QHqtIgs5F4$BW#tWcVT6!67+ndhWjX@<qo-{OZ13nUohip3G{6TU
z^1!nSd*Of^H2s#rI=9N|!H^vXBcDx^j_nGLY0a1&Jv7M?sP4TpROQuoc~zWD{qo4S
zAB&spU}V|;D^a5l1)?@tjx`kRm632EsMu}>1(?Ab{A&bl>MO8k<ymsQ&?q@SRc<ae
z0-IL4d`5JEoQH@0rE#5a23V__^kvavighpAT{wbB;R$hvcUj&z7p0hdr^YhbKAS)e
z1y?vHQ(_}6MieEQJ@)UO>9l@r_dPezHo;|zm=Qw|I3F#%7ncYLiZOc<k9VCy1EMmR
zemrEPQ=F%k^gYCAhE{M-^Wj3J9<Kuido*$W%G{6z0Lpr~(ts3Xn>Mf-nMhg#7l1r#
zeHkk;u@HXyCY=qp7oI$faKFRHQI{;NmPsOAj2&!#7qv4K5IVKVlJ=yTu$G4#lx9};
zy_gbiUPSR+PIJYOP1#>vr7Q2k)m1!VvSmd4FxEt8sf{#TJq5fwS)+9(T-y`C4&s@n
zHIqTIM&G!{NLKi}j6PE!W+X^no9O+4HJKdQsxWD_T?thilh&lp2@>rN#OuJrRh>g5
z?fzT+w`cwEWSMZQhg*Y<=$_8K%6>hbn(Y7l6@Gf1Ow}Ch|8Qr4BPpJB>dhqe**2%~
zl7V#w_*QAza4US2`O)@a;sM^txWxSC*mOv8<vuD%bJc{d@5~z-3`L=G?jMjL)V1sd
zJmX_{Gy;<J_Gv|`J>?B+&{%WUE-gYA*i%Csukg-Mu#o<I3@@ww^eCQ9viL3xj=+Rj
zHBg}NFkrHocJ4k=@mq#3TR*|BYuFi<sI%H)zH|g7V(~f{6k+#wj3V=u>uS?!lzrgW
z(@%Uobb<mK)si_f9nh4Wp*Pz;Qg|xHNj<S<--by2Sp*EAf52XxDa2e>$k)ThDR>zq
zckZe<B-4H=e9O~2A_F%G0Wb}AT3Rn63<wDnr%jZ1m0z>4MtUY(v56PIc>yM7acl=A
z=AJFovLPf;Oc-Wcu&6Nk(Uz^`9B?PmZki@^MXNfJ8m5B#fuD|~F0yaHX9fn_xnd48
znr*nBAi*+rP8h{u{wNxQy|eY)O5@Th-DYXPd2gPekzHs!LT^l~y974f78!o~!{N4h
z(Uf74kz%sDhbjA5-xkAKA~-`uyEyjEDVpJtU6IW}x=fEvB~+mEdh%zbnz#%QIc~SG
z$IwT2c}6ieJb~Ev?=&LXw%DteYq)KrQnZj^mCMytN2O!ihCo2T1<l-gbaSiSlpo3u
zO7}6hH8ao5hq3yl8E$GBliS*I7dva5^3L&BvnL%8hT&+sMJgQK*anL_?>XekKfk~=
z1W8olHjQdVy1n~Aw4?bmr>e$NjPRY2Gi<`@WeBy>;dOE2E&<`LY380sQ$%=c_7NUm
z-$4caEeA_qF`~;5Y4SxE0H7UcDA?Nr-NuHt(VUV+gE(<e@)g|UAMze*s+k4|aTt&9
zDE0}b7;+(+dv|Efdk1%a0Jw1o{yq1f>7QcYpM)|4!~c;D{{aqT{;%M$W{tl`;lG6P
zsycyu0T-GOLe~ea1CuP5)c<4b9lJB_wyo{hww)`sZQD-8wr$(CZL6Y+ZL?zAskhc@
z&)(~8ZQmc(xAO;_bB-~4KSm!5Bj?GBcY<gpjr(+977~9G|HlQ~9QWmv@pxG9XEm9D
zY29Y?__`l8ej5epJ{b!v8XXs9udiayD<pnN!aiED=~U=dyF4GLlwhcDW^#!t{w^GQ
znXk&=TE6mmV!#UYg)U=_^j&M*n96Y?Ua>m+RbIk_Zz#Z6JsjVN3ufWU;mpr7aKiPj
z`Jik|;TU0Q(%$JcbakW$Sj6|5ok%;fT5L2Y2sCcwdybaJR+wTYZiq`3wAFeA#(J3#
z3bWcwb@uEOt@b=HT2=5lIjTO&eiNt`5EnN*4DuK{ZlS)h-v}G8p`LHEQe>k5cH55N
zZl54;F-)q>+>0os!UWOr-hjOdlIS;zFupo5)j_LS&!^FN3hJAv%(j6;xO2ej9v*R<
z6i*;K-cKccdrIf}%=Iw5y!{fwA}d^bsR1U=uIa%pH2yjlaaG<KyW}@bQXp3MCa?|G
zqha}JXP~Es;@0^7PElrHJfrm%P)j2b@!4f}+@DBB9H}x+UF+l+u%ObT0<l=Lb0^LV
z7(Pvjjjo~$5XV&8!6@Yv=!hE*{`k!Pz301^Li=-uJv=U%tj!&xMtm6~vl{albeZ;|
z2M=7N7#aD8^LUf)r-JCCgF#deB-Nl{#v02^Cl)rzZI7`PB9TY5F9>9fv0{Tz1^E#u
zO-EElp}=mB#0!@OIZR^;wL|Bj1=PTzd_sT`ig&pY(Om&UQZa+x>2Xf{5M|4WuI$y9
zPyEJCNYEmpRD1b@(k;A^us3N75dSLUp<r!!^Vl!`SZ+p9_WQ91VU+bycm`9zi?(YG
zS}L!aFjyH)u(IfY#VjseS3+VgaB1Z|o+cXDOe3{r?!_1*-Jjy$Zv@W-`CJJSIB_hP
zVt2DFqjP)1*eL6A&{%aZI75cujq2A`;)VC?ogUEB<>+7h+rfJ?rMCQ_U=gXfstrlo
zKzOs=K&XgGR@(x}zPiY9Myprn)}tl8`T5cnt%sw&LQ!4@kbxsB40v<Q{f?*43wNyA
zNqtELI}j2^cyTz#T5jAWG$J)uJN@+8>SNtpj=5Ed-HuNHFv#I6lpaih2${n`#AOKf
z7-)8=cjRu$fop>+WUvR|0kSBFAaH2U99G>PJZC8t33W*YJc0yX5?^vihx)o_h=8Ex
z{vhHvN>n{29M~zeVz&9{*Z9IGLqTXri$$guXt{UU*yz8%7@~rz6W$@y5=HkZ@~IMQ
z%A;2Y{utNT*PJOPFmP12NdRw5<;V$s3juvCUTja%o*l}l@3ppGu5`rN60*hI{M_Fp
z7c66e$Ac0XNv!OUOOHxO`K8!2cda~906Bxz5oFa0^&!PVuWc2GTq&{|pa%&`E}S2}
zJ@b^AYR;GRci^WL7qX3ZT3$Vb+=Z>t%&t?)dPk+D82-5+0#|v6urer?yo<6N3<};e
zlZuhCIJu(t;yey%0AF%cSkbb|N!#@75-Pm7djAfb@XU*PLSfP;aR-*7ni+?jntMPD
zsdb01L)o882bx4}$dB;e3ZS&&)_Jp1T9~WY8PaFchaw;lK8#mT-~3~#Yi+~kF%GQX
zUZOPdBOS)6O?DesR*;gatq1}B)ij2sUJfpX<}kipkb?>&zWRi!rZrx}FEyVC;Xg6g
z%|Ky5ri{)oFBHm2Z{^Hr^SR^7jfq2*uf0EcpvztuODjKXS|0@`T2$P2JA!$t4qse#
zhiXUfxvh2)5xON(312w@3R%PbRSPFVc6z&0*pqN5h+fqWb-3QuASfii$#qT=4p4_+
z#cBE-hT5gEwX#8N(Yt?BMxW~>O8p{54@r)sLM-d6OG|J6E&FF=yWIV@?li0;yE?9)
zjL81ZgOfkwDIT)uHgb_x)m3&B3y_!Cj3DfdE6bKS&k>vHXJPIgYBE3;!wX?Bzrxm%
z8cwVq6Ygm~2_(jY6cU^t<}5G{>ci)wSEzbc0{wK=y}O$yU`+U}Pd}UA>yIxxuizt6
z2>m^Tt1P=L%i8aM&t^GRVwwBpcB+*NC-{;d!Q3O7P&mDFe^<bl)reDS<+@3Eq&Oac
zf+>yu^aK+Ok7=1)3mn?ECCI`LL;}pY?dK8zt>4WOYlH(PD!bi>zP4{PJ^d5obGUO{
znvQ(~`$#ag4OR~ZcA3>e@PnfbgzP0@9wO_==4lgghb&%gVCXtx{ud*PVDvdLtE}g3
zth11AQ5U}Aj=WH^-4&H{#*Cp3(2Z%}!#jGHtb32a80e`1bzte*1F0qq$kj#m@+HIT
z8zOZaT<!mTR{y)|{i{AQaWMa9f`{cFh*Oq-;Z@2E;+8fprcOi*;x>jZrlO|C_9mwM
z{4mZgPNs&oFdjL%>f=s_>`1*AG+jPL2*W@`9hKDK9+yKVnNlM)x|b=i0ODwDloY86
zoG%f6Zuo%cG-<%$f>7Jsw#V1ID~Emn3dE96*iDbVqKAGDZN?XRSba~}h0Q*0HSLd{
z54`MPn_dTbI3t8cq=aSIdQUwwe?z1e87ZWaNWthDO^=P6ys7!_*|Sr8ROBud0E+Ms
zQq$L<_w8Ufxz7f*?UWWuA`!t<1)E3jU*oDT@JH#+_ym?7$syc!(!f=00UnC`6joj`
zD=VN6im3xgAR=bH*ZtuRp~+O534ErPu-?B@?>qC$1q}_}cf=MVWF&I>K-~z&)_Bkv
zC5!MuOi+pp#r>nVogtk!Mk<Fa@7h*08~B6_e$b_5BL)BQzEXMaNv`@fKNcjoLd|m#
z13wVX|Fs3~&I&+s6CY3X&}Z`)FmGl?Rg9&1OZ+129<R3Ovu>;K2F+DSDw-^7lf3Tw
zd;mSsWeEwVr*h?^Qyc)uD96gYg@bS!t}9Jr;f<FxqPuo;rP~~`qHR1H)9!$(&6>zc
z@Bp$)=KnQiDH~)AzU%}$jRS2h^L5$Hur|?jMSmw-`T(;&S$oNGGCx18w_UjtVj8f%
z8Y|+CMhhb~xKQY@GmUh0*R=$`<B!8CFFA3l8M8m4v_;7)eP96c+*f%aKIC1}wX%JF
zsa;~r*z>Zqs^9t--qTi(C%<>8Qb|Kd{UQhpdaW?ws7g0o?rk(#gQ|<AumiQxn1JY3
z<Kt=$n6o%I5f~tWvm1J+Dx^9>wdbdpip|MK$2*=w-gmaxjYG(hhb~RNOis`e(7H<L
z9n<w+at;8sa@L0+DE`44zQ-PN=e1t>45YnsE)2#wBt9Uyy75EY%2qyboES?M>-(yx
z3UrLC5NrP7A=(w#sbH$$&n@m)QNQ060q=5W<H-XjTT*T~CcrS4r!}?qQVm!Ea!ko@
z!J=<-LU$lw@qR>D986)f8#_McqnA8RFj$%_WhC&W%6GfvtBjM-h=onjDnSig%~)&_
zd$gBv=C0Sud7X;GyeNRorHa{=qliOYymgMFL7$lgZfGglQ!AAZ05Y=8;9BmY@m$(#
zM3M<!sC1tox|fy^WM!tAz?j9oDL;K})WVdAqHE$@zvY+u)TUg$SQH)6Q279Pt5MHJ
zI+jLci2`F1&ARq0^2G;Spg&a#LI9*hdvRG>H&?+;V4wcj=VhF>+k$5RTEMFN+QOT8
z%K0+ZK87dE+Y07>`*6m*!?ZJ_byTn3to#BV=BZsA-^e%C%!vn7p={O>v52+EBjoYt
zs)R|GKME6Jmj90;oP5QbO<OgRAaM=I;yUBAG|Hngx_lWr?{;v<;RDd%zZ=e2_&V&e
zH{Rt-xuoDVswZP}u0WP#aB`QPaW4Y$*8fbZcOZqXe>RWpaz=Aek3|@5LAsyovP03p
zFPtH}Tr?Eks}SG@-0mOy*zS{BiiZuAw)65=j>EsL4&^k<V#xJXr(Q>1IQw8A2TScm
z5MY#g`VGF${RRl3(E5hiF9n3`OtWnr;fAWj7Zc1u$D`02@xqYeKCtV2#^w714dS06
z{=*gczuYL(|4&(D`3G*4<-g)ad(|fGHW`t6E@(Vb0;Bd-P@JQab)ztBZMTyO6w$cV
zt(D>`hEI3hsm@JtxmpBaf!S;HX0B(Z78w48+Izp>6v04wA?Sl_^oo6HC>5Gwh|<&0
z1VyVIfUE;<!zrb)q(cO?&_kX!Nj`vy63Q7*sL>M=`M?V!FN<OIYL*<h2ZY}#(WwB+
zMVCk+FNHln3K+a?b-Cq?r;_<&U7+nRMAk8M9=SN`-)6{j-A5?#WIl}j*HdnW!>K|!
z)fY-dg+V$5k>k5tmYZ&f0aK|3Amvopf^~JH8>&X)s^_5Y`!8y}i<CN)K~i}7bOPJ-
z1WobH`ef>&<j_%+523n#*#d(nWp;|70>z_S=M*WJp=}uGt(N<>znaUs<FLUKu*&hL
z-dn5gk5@}&&Or#af2Z;vgGgS6H`uCVoj5Of@b<3CscGx1jP!vDGbI<HHcY%!><}U1
z;JbXIvUwHb+QMYi^HYg<#y~PlROM;}D8`v`BY6$8LPDF#`s*o%s!@w^ws{V+%?%M7
zXHhWVdb2YsnDOqMvNO0p^ATXD?Ie?;;`K;a>|T}TdM1rXH}W$o!w<n1?7Xh4yBCpa
z9Dr7Avu<2lKY&37a4gw9HNaOg@Fi0AuS)$WtTZpxk`>Q%r+`r8EL1TT>-DaMqn=i@
z2xCZAD!$mj(rbx3AZ3&?B$a67#?60AQQ5Fv8M}+Do#9M10B?8WD_`CMHi7xf+{enk
z4)8zWq-rn;c~LCheMcU!hD)}5sW&T*)!iL1@TTC0JGlWrfxGAd!ePNCxFkxi_x%ki
z_2(fb`Ix9>umL6!4Q7;JX8YBmV>2@u@j*;<-yZlK+CI%f&&D;CRGd+UF<5b83$0ML
ztEye=7Cvux@Vv(CAO8OT!Fbp?{xfmH`VSNj>wib_sLR-Iu_N_eXuvrwfS`*g7g4^M
zt#Y-TlD2|B?tuYo6!qFXX-03+=KRPnB%tBKrI3WhZ<)mQV|lpCMkWmWTmA(WyKO*V
z5C@F=!_+eLO+hupkUZ;);PiJT?J2K=9Z^BYg#gfKa!7839KQshg8aB54|!$giYtN|
zVlP*+^>=?i*h!%<X=^1RQ-h(668T_8x#PY%*X!KOG^GqXITZ&Fjcyh@9wGQ?TnR1j
zobj^EIOwq3e#A?~X2zI}%*i|L>lKL-d4MS8AlPwes31@s@q@`orp;sjzCTg10YH^|
zvg2G2BHDA%Qh3sPR(y<TT6bYY$;m^<F0%IYykAWp``%qpa|t<R$v`6?f<A99^25s8
zTEoBSA^K`uSX9^438t2|VNBGyc36#9WfY>!AkmPo2e^4#;4BO1d6W+@LSP5vCx=|h
zFKex4KkwtQ^Vw=ZwqJNXNO8$Nh+$n7bcZ8P`@zn%sJ~o`lv-cuPg!jegI9fF%ozTt
zOb6~uR-n~r(X%d>wf#{Ni^^o>3@w5sQW;Z7e<__!JN>ZkV5E*T{&^qs8E(}wYsc%j
zI^byDfWI}P$@`%u8J1{PO1Mli1a_EnaP!hSe==c^gq&D6!OJt++!aE`Tzu*6nyZBS
zOT=96Xy3kM_2un~MS(HZF1OQvP=NCEeXihCO-Jr0!*?#^fTmYoqDNgKGQZF{#To;z
zL7%RCGI+6Ba5Qu8Q;8iL35WNxG46iPx=<u<D}rAqz~Kz&$#ffOAs%Pqf!rVa0l3nd
zjdenS+Mn_L&VV<~vhadtTY<?;+cmV|R_aAh_2L=$FxK^>w{EpU?b3`E>ry{me3>z(
zMf2U0J-@LE(TmJQJMS+N$Yg6O&C55e>dKdDJaFA5q8EGAh9UJVRoC>cjCH4tX1?t~
z9~DA&M-p{4$WQL0G`Y}#Jga!)lK8R9^EV54mGH4TKktGk7SeDUh6A?EJp<6A;DD8&
zPa~uE!v$t~EONxS)ee2vyV<F60=a6n;iY-Cvz~F-cniH=Q`>C%jdm=3b{f$Ij^fOV
zj1lerj~%xBArpZFS95)fj5t{F+m^D^V`nywS@~Ahww7KVm8wqrJ_+wZ*F~6u_OK%>
zv|Co1yWyf*#wh?jggG(X#AT?dXn2<vfV>;}tq=47A21qnQ0{@s)WbV08nUY4pmXg~
z98latwr?@vK{8L)1bi=t{24lH?)#xr^nY)Fe;@3BJps5_nEsdJWBmtXjrG4W)@n62
z?KZ{#rI1~U5U7WCuG5S^WnY1TM?D_j%2B~ZY0KD%DIfoeLViU2oX<Tnl~Quc(l-EY
z>uKg;F`vo779f(wDtfN|lW77Q)fOENZv7|folq*Qt~k`Zw#ek}nY{sW{;Q~aSg~J;
zh&-wZoSq<k{^k~H&5|Spfm~BG`){9aWgEY<bH48;SaL3(2?wnPBQ^^D9kN_b{{Cj*
zWIZFCA5p+jTsv?$YOGDc^JtvIakqn$D=~tt3;SXHhq;12={kdnlR{eyRe{<=mqg)p
z#U}J;ytQ*o{<WQ(qgp9?R9coWcg|t;1>#NmPcZ>myngcdJ9bN9E^C&qswxtxLvA`J
z)vXuoJNn|4=H651BGwaMo1bX(<hWSHLqb}+dgX6`>GtwSDvv~F^JRU=IT7ihZ~M_I
zcYenSUy`AH<u4aT%CjWe+CpW~H&yph8XI=YPLo?o6}aq@Jo6bTq&WkR8o|3M?8T6e
zoF@prtQB#jUmqX}1cyNgZDcs}dm)j;0N6$`k5G4rWmBJ@zhMTG`TgYQ+JF)i=a(vW
zQpK9Lg#_7+6o86=Tz&v_@nw_vDVhzy!N^M|w+BGLK>XhPA;bQT&Q-<dqf~ySL5COB
z%rkA@%x@Gd^Z{#3Luj=?oH8gX4VF(VDKbQCn@~>A)7zq+b{5m3ZMmfqbbMneWCes8
zqn3Pl<X$hnLz9br_t;LXS?41QJ^<A~;L-BYFb59=4|>em7+T*qjyHAqbhU_I3AwYx
zvp7$PpUzs!Xt-Kh-$9$psckN0^ZHuA5h>jewR7v=OiR%`*Xc39zy3S`$ArZ7?U9f`
z{R7;;lfCd8+My`JIU#KLY$PNoZ*PGB?i;~WJ0)P920?>!+Pc{U#$Ikcji9T&R!Wd_
zF^(PcEJ;SL1%vbEk{cy_m{5m%rX9i$90AG?`E>vrfuFR{q0qIn4@L}wkk+1ite4<T
zBq!}Fc8}b{K8hC9v5V?iE=?odd2Vn3Np#N{9$Vxf;90M$(yYgv`*Va7@D^z>*yvss
zx9IzXGwPK?kqMjNQ;wFt+yd)Uo7>?_16p{KyO`f^xf{}4fKKZ5$eoQ;UW#3Y3rKz)
z2u5U(z3;;zH8&EDN4IO!Q3;gREqF>&feT8*WJ~xg1b$m15*#UmnBE@8g_~RfR|&cm
ziX)r`!{k>A@5z-u>!B=v|2U3DujA1P7P#5*Im>SR;LWZVM&_S(*S0{mI8ac|V}0_}
zdg82LPzWPN)YIMFc{=!2N4V`710l+lcX(QJpnmc5JtTq5A))pXi1%7~%{UICg?CpI
z<%val5K0Nf4DGDjJcJTXDEUm)xm?;MEQyoc|J)(Sz?Zv9jY2(SK`@6ZjZ7I%?}HF+
zGT4%g+|?O9??tTodmbST@Y)6hx86dipVuR6fzq^Btr$Gfr8mxP)eeLg9A>Kox46vy
z+r_!%kQ2!c6-R>H*zFhgJ&t=%>-vyRTRqV@`-;B5{@NCA9ogMc#oQkc&t(2P3HAJ^
zSO~cVx+YL60LxwuY78Ss(5)$ZD*Cz86~u!E+Xk#*e8WdE>K`4I%=>vJ=;0Frx73d^
zJ88wG2{<1&76_EZZ>ir5@;K!LE@lV@AAI405#dp8J?I5D2<sY8wJk23tVe|v5LDqm
zl4g2Mk499bGV6%b0lOLZHs<gV3flyb#U1b`tkH{P!l&a(J%?STvt2g=l}ruP_8cm>
zG4KVFIQDC@`*k>xDVaTa&4t0oLnQClsfIq{P`?VV|G*Msf!hgr2rty})7bn;6dC$y
zv&Anti~@%)OBlMVR~!#*)4+59MBqY)7pfbyWK_Cou`3b%WB-ETMeXOmuI>LP!TkOD
zx83pY%lhBK4hz?R@NCw9Fh1D+E90Y7ZTw%an!m!%u{ur!mfeQWBt(f=R9mB+JTfJ-
zZDT8$L{jqc4bPI<s@+0SC?Yc}>~4=|ycd`_7vsl8zU4KeCRaRy{jTsINoUS@{8h7G
zmCjzcYl1y4T_gyB0fJN!&fzHv$*;KV13eMa*r6~i2caS`?S2h~i<=e|2o?8Tlp4gQ
zd60L_BG(b_9DxeBdTTBO@2U{KIM%3nX0v5dEUy`8n<lo&af#4zriMSB;|sXS^fH`d
z7RQ>Y>h2plK{VdkZRP7`uNj(3>g3?>$c#862@{$hva82eUxyU8*kAgOimv!Jk3E%p
zWo^9&MprFYPc&pXrx?e|m`oFE_O&Q>3m0Vc&PbN$QoI>AlQktr?-<<V^r%wc;ZAI+
zRn*HoJ&*n(M`FbkTck94t&33SS~y~Y;PFMo7sIk4Q5I-Y$}XOC>%1lW=0)L&Xf(0@
z*(fEP(4Pf7&TAPoKJp@5B;Aw`J+ym8y7mu6c?2_<2$9Z3{;W_4Oe9P%W=bzL@wl;r
z1cG@s1-io9s%4s;+o0@`mFL0NbqT=FFP3X7dglP9i}zT)r<zM9tSb{%I*F&kFwrp&
z!q*SeiCubU_nb*B!QMnv6!Z58#*`x+x{{(myn^X*XR|q@>?%<sD&s&h1+zkH3ugFL
z^M)-9%kZ73QH>5SWF#+24-Pm>1IV4k&iW40jS^AsxKG(>NxY($b@|j>N*>+t302i`
z!=pcivY7Q`rHrK~DJuD5S6>gE`TbUv<;CeBq5A~=xYWT@HOzV(j4?6xtJWTKwrY7x
zlsb&RgyNqUhEVPCnyMzQ!sK_Zx<%hu?{!r93b%7#A=?{*i!@}NTM!k9Zi1)BS$Cne
zHbP@Qdyi-^d;7^Z-^|M5ha*L<t}d&FR-z}ke}5enR`(hpuIG@+$s7g~Osbbr(#E+-
zbtH;q+Bxg7=8EgZiE7JI<4`r`<6-gB4<bk&f#n`~CVBn7$1}4mdjJE=!m1a53l%QB
zikRKV(`bAE_ZI->0oh#ozsKy~hv#3%jDzDpGpB6-AfK}RSMq7C=D5?}=Bf9A<`_yn
z(s&94ZZEriSe`46^bSy}O6nv^G9nCGVDc3#z|BVkMBjE;;$jeqCHwQ*uO8D+oC!d=
z;(zU|Hf_|B>6?fAK<7kQ4b!VTgYmxP#OCcr^%#8gHPt7YP$20Lm$po6MQ}X%b038>
z-FW0aX6P@Dgs~ibEid5Zmif^RejMp5?GbiJCNw#!<$_Ai;ruu%zx>WQt~?dOgOLr2
zs1YyrbE9b2v^Tw!-z6pn#e>ed{)>z<dYB&omUqZIFM+`uILW2mpi0;sx6{|*+nTDU
z;nM!I&AEekmYIO<17CaQ0c%t?;`G<#i~X@bo&TaHOZ0Mfh&4tCPP7ac$ayay<3!Zk
z4}Uuqrqyb-N`Bc_$v#0eTOHTxdVWG!Fn$vxs5yykqjfrmj1%CA!iQ!Zx`UBTmqY*|
z*MgsAvcYh1H?+n-E?mG0W)<`!<-U$G`WxD{%9m2TYUng}2_pBcNc>AZvqq8FA<g^5
zC?{fS%aC|zeJ@J8xSQgO;GF!GGpchOT84={bBI$^htQZ41M*ImvWymR&8ZKO4mDs2
za2h2KAcezgcz^zd)K|1yL<c7A$|u@jp?!5}tdw>tj~$VE>9s68R-4R}U@u7=l6ri+
z;RoA}t-<8wF5tJA&5VgOLbRBd&_szlYmrPa=vZ(U3=Q{7SZ5BqNaSzF+m@jsM7&3P
zz5*B>vBUu_WI4|*n_`xFvH~~!$=LCCrNQp96++tsZ`pkM4nzt5!Th9xGm@yR2Tmmd
zTb>FA>k*iyfDk?*ah&!cWjVHdVL-_1-LTLSWdK2U*)_~4S3xInD};C`pcNy~RY+pJ
zAB#o8B0dsvUVVpKz@CFhwSr5KfKK%#&pcsFaF^gu71fJct(?MZCAf(vW{oMBd1JK8
zV<WZ)WNL5-q^<u)Qw7_t<<UNuJoXc<{c^9B8vHx+h-TdlmSrT;eleI9ONA_b>-%1`
zl6dWg4_yQmM{5Dgj!n!VD?}sgP5tF^M_G`?E6}%+HcT0rGh#9;uTNKg#}tbKw{Xqv
z%TpCYmUfozgctmo9wr^qeDS<j0p4QHw>#q(7Tl5#p{AuNCSuonmvFBd{wg^M!PsdC
z?*cE*_<MmY9c3V<ir&utLbb2j`14t3prmkUy=iHgXSn*2gNtwVnGdR(cLkrK?X&Bh
zXMGI7Rcl!)kCn{a^^_2FV0J^Xw_3NDhv>IY#9T{%UUhX`MncA=AOx%=p(J;JRX9k3
z;lBP)0Z>+q47q|L337o#BFOa0#7;aDUI(L~Ed@|m2y{|{q}!^>sxtBVn5OQN@GHOr
zWTC8IU`wzAk^Nun;u--499pQl#Bz{56gGW4mv-Zt@`r4U#l7~E;zPGHYawSQJI91U
z0JN0HPV9$k7UcFPV=@-jt++sdlEw*wAO+aT!1;W?v!X;iqdD}H5wY^?5Rt3_+PHJQ
zYr~Fhwr?i^5}{>Gzv&!ZIFLM*zezTQv0F~;s+3xPM8anX052?*e!bWTrI&Iv?jt+;
zI>plBUaRA|#xd@f!PbngdzH;O{L<oagK};PbzvoX7~;vxFE2DBz=*+5{DYh7Op$h|
z6wb5fASA5J;W=1iJIGFQwDaVrSP?#>I}Qd@B$@rMtM(?sVBTdVChaZ@i;IK>vH|Re
z8TJdQI?t?d%8E8>D;}x3EOqyvpe>o#7UgqU(FjHY`@6qZ9cN_@$)>s*{g8#h_+B)(
zVF6IOL*Y#)ysncmd3Oa0xP{3fqB!?02xVDfeY+B0i`QEbU|B_e^>3BPQVnENO_7^e
z<!9%zeF(Z}jJkg#*cw4bF6rN6QP{Vs7WO(>d<GpY1cSa?4q+kcniZuZv?8auR|;E$
z#{GMk6^Te*`nvA2_hrdONnhXnWL0n|@}z843hM%cdXjB_)I68kD6QK>rP3ld{NNCC
zr)k%LnbO}O>BEtrFgFZ0d2g6W??c^K>}@kjdilNw@on95fe}Z+pf_i_)Y6)e@WyB-
zKAoxuPH<yU#IeDrtgf35Duy+j|3SoKp4K4TA}O)<eez6YcQ`Vpc*`)7?T|%o7@*xM
zx5~w1vD#wh297yV^c{kO^!zay@0YXWjbu6=kjd07HraLd#1C!&lrMTy&#z6{6%-&<
zXi6b0=#RZ9=73Wr8=bP#yYJfW?oM4YK580KL&f2he-Fk(uGkx9@&{GH_~a62{0V1a
zuCUweM?GRI7q;b$`pNvKBPzOJ0{3O00*5oc)6ZZ6H!jLQF^Fq_esOZ!+P)f8mEeK(
zk8VHk1e;<(ZN0HP94Uo|QjyAwsQBo^YXvH^)$s1(2^mt4hQx;L(YQYH$iP@ViCuGh
z88>!ff&LBhe%c4hi9l|$)?9^~zgG3IRat5s+2<&CZQjtRx^A4t*mwIjDBxT5eq`_;
z`!gcZ8k{kW2`0@vRW*N+ehQ<hCuO1yU3N=ZtlM9llEJe}Ywka|D{yo5W9%QQ_Ww%$
zoE-mYj@kY}@@M<6B>!I;lYesy(Y8NmI#L3&kfo$j%vL=MGTMX|V-{mouv%m{tsZeA
z@0Tv@K4`v1^_A^oQM-i#j4+-xmwHd~ysv|2$40=`-|OGtk~3qUn@_Nreij{*%FbOm
zwat~M?O#rN*AddXH@}kyaf)p@&M{|dtvmL8g2wcB0<mDcBIIb=nX7kEa=g!HzX*M>
zkH+Z;kjKT_u8K{jXFkn43Czqhbjm(C9(ZTm9cS1g;N|O+pcBmLB&w6FgzJ+QgXuqH
zulAv+#+LZWLh+6UR>#xgVaD)S4DkBem~NX^QXhi}H}LIF9B5)(gdgJRH{geBF{@c{
zAwK%Ay!@SQobvzi&3Ox@juDb|+c0a5a2<+*t0WCZ*eI$-)o$U86K+Lh2?{(43?1a$
z$SzP<^O)ZNtaX@e5D>sSdxx6_9A<7%0f){!3ln<1!#}X9NeM)vgIDJ`*tmM<nF4yU
zM2J)?9kcUGc{Ifg283r!xTqrJ&s-l$sAOu2B-UaIs-*DTg3(oRqC}jY+2;2cIXKKI
zcDr#+h>_7EtfuWHP%9FDLmBH}I*GD$84`!1!=Cf*yGjT(e<3YAafs?@P#dmD<%r?E
z2p%p={NFUHQ7(9>w%~qcrH53_qg>B%0|WNkF>QyiYv$Pn<_%HD5_u>mC4P+}-U8dy
zQ6&pyWQj^zCH2#C|52EGtJh{?qIkC^=FTZ<HXmo%n9+t&8z(Ug$Rh(QVuRLK3`K`N
zu18h!NJ@DQQpl7R3k)<CP)P!%oA4N*602JIPCN}j>%JVn4Ol64k;@-^=_=*I*c`zJ
zC=2dWYC%9JckSV{7wMpaGbQ}4DgDxM8!OjoLeRV5{HH+wGPjn*nVozqFP@QU^0`+m
zFEZDJTLprFl7E4&=r0<-!bDeBBmz+_@uLt7&N)@Tx*}S1Ca=T;)G>2N^fL6Srbs2D
zkB*C2_uhH%V5mKzi~5w=ixz4ALwi#(#b)ON?T@;AI0qK~x#3<_lBh}h66mPyE^s%x
z6r&CI{%j|rA0Q|NBIiFVu+xpNUp#vYG70*FE+n%p)YI&~V=-JFRy&k1!qk+;t~6~$
zCZ>oius*!jdjXI*O1n>XNrh~i%@V(Tl+u8*{;pn~!mE^6Q9#M{S|ngCNIXkz<-{og
zK1z$A(b}w)$iBAige%^L4#K|^iHP>S5&lty>)JKhLcASgs6Eg!F1YID74&1ZgEo=!
zx7<|#C!_J0V3EIENk4bJlApSZV7@-Nw!Z&G@T$bc55iqGP_&?}Gj`t$YJ?EukJ?o0
zF0|bKTSLRMh0Su~D%?>*Rb@VMEEixe@V`5C?b~p%d^0BoX}@C@bg?{rvFW}4FkW+4
zS(Og-GfbN$Vz!RUh$1(9`_BzSu_ju(pqLxMdKdxowR2Wu&5qQqY8-^KL{*Nz-Fnnt
zD9UK*h}AAf<9RlW>TUM+5laoxAD<fZ5E}<KK1HG6JYGD@t?&Tb<R)h&UxefG@N7X$
zXRS2|yIpN)6Bvwxf~!kat@1H#lNQK!!SLB9a%H?ES0xy#XOv;s7JgmSm9ebP0quqg
z-{O;#pnH#%3MPZ6pCgrh)Ove%hlZ9zzK4<{C^(OB4*77_Lni-mP5mhD!*sRt;gf&A
zD$qx8SvA-W16ndJC;cAKReS8M%13vAw}BvhbO}((qy<fr(@=c}@(BKw>}|`mPZ;(~
zl<Oi2#R@V>2RLg`HMSEnlLu*IQWe9z&9Lakz0NyO5`LLUar)?3sZg<`LAj;9)eVJB
z0|%zcWrT){(u5`zt`NGdxoUe(=)x9~QjDY=XaL7l1K=g37p7<N2<P^6JW^%9TG1<^
z(hF(89{#)Iy~5Q$I&Uyo7OY4y98bmLw+dv`$bH55;gHia&F2@aixe*UKV1C(<90Ez
zviv72ko_O*F82S*?)r;^{ta0BcVO)Y878BMbP>I$bykaHq6-7l^DiB+7_m(&(}{U<
zyLb3ag);#+$!!ZMshrEdY1{@$Lzyfr<_Ny=P-PJnKi{1@bCFu|wiGJ9F_sA@>A15M
z%&b;@xVYYaSBJh?DdQK7wI|+mS@h*<o(;KtL;eLqiQRG-9Slc#voxL3b}LJh6%3s>
zM(L~7D{&15v9fL`RxqP|GmBn$h?m`PJl5_mY(?!oI@U*jIR)2s(s~xL!}B#$;lZ98
z+q+cVmuQ!vtvHS?rDaa`cSM`TmABE=Od__gnko;=<Y8Ly!$Sk=4mAbx^z>x?^Z!_B
zhNH4rag-~%TV+nvUoanv<w&PoFG<AB&#IgsFdEdQnn{*zWW;7h1$*%$WHUZn;u7NB
zT4Jfg!pZ>RBW~QFx17?UR7+0p(=QNJq$@+McU>&F>9aZ4R0zB{=iKZkuF}lo%O|?z
za93+1Fnva&r-_|_JY8vq+R9N|F+UYjB2&jgbgL%eX_q5`lI9J3^*4L?qD|2zp9*a$
zL1wLsf_iLZ`Y+{Aw^VkAhV62yrAt!oe5sI@#sO&+ij9OOO)%+g>kT2Q-bEB7O;s_s
zVB3G^NIHCG&~$Ttk$e!8wH&s4eztoIZWOU#P70qoLEG+X4}Aq+;)ESSU1Hp+mzdt=
z{snmm?Uxg$Y~;kd`n>kUdDx}oynM&7p4ZwtlcGO#GWoH8m_}opeInDqUKpp&l}YSF
z0a8L&gqri7`3i;1g#`6Z9FVlxOA1>r8$sZMaYA~=Ha2dIlrL&)Jx;820-b{Vs_AaJ
z*Q@UPj{LXXAjJB-Cw^Buoxeg*<wggMN`2!|E#q0<+7(#-j5~JOoiE+c_Wc0S^4ys>
z5o?qQO!P7djUypHU+<{iTh%2qN#rX+myP-YgxzV{h|-Hg!X9J_CcaXOg+RVk153hp
zz?<O>p5ygf$r1-$1<ZLFhTNI)KO4xd>wW2-dfz8g&O8ZNY$A;6mYpFKjh^b(lo@0z
zt~PVl<QI8)v*wt^agD<%6Nn2LcC;||QNuv6WUR?&*P92;eH8|G=spRS!@d8qUF2kr
z#0vv0x5k&O#bb&+z*`=j-zGKjU<3Dq9}t3H8S8Hs!2^Sk4F@$3NbyEfhP_yy$(x61
zrGL`6W2bjgYmiLa<SE#2F%4;-S#T;(<2ogySECUEVOHyP6<TUFK;^J-yXlt}fo50|
z_s2pQG^?80<o2*$YoqoQsW3q7Q8PL!uM!gr4Y-F`-YH;UEK#H{h%CkvZM3pWhy}Gc
zSe9(ZS}y3;)$>+6D}F<St+pj+8)x-FAfDEfa9PYY{{+&<{QxFrXdIKd<@OT`!|&P0
z>Y6bB!hymvt1SuH7HY-6j1S0zmHXM77abbb2c9!o@y)-8M)O;CXi?WxdMQ-R^td4C
zqrw|)qmQnqTx`=YFmFu{=i_pQvdj#?6Uizovu66hYL^V6dXy+Hs)hrDdcdPczj2b`
z$YPd)wQ;#8wZf<I4gM3BoT!FXN}FnK1RA6&c5!5>Hem`ZUe&8`kFd;54~sWYtD5;<
zA#;dKlvfI81B-o5AK6M5$P~j!OI4S}0@%ax%m(hr6tjUzWe}o=kK?u!NK~TmZGqN}
zbQPC=^~%N0l!_?gsiksJLt~*D%&K~LuaAgz+`kVwd;m)u<HK0ttoY&BupR%0=$Y5m
z3%yJ_Nqr_CjZj8F_f5H-rs?g2y#<S@*BZ+OGSnCG%o7i1kV~59_B_qst=~=ZHrDm;
z4w-->jG6&!4RY4a5oOg-=v>Jh`PP+JUv#OZYCH>@%KQn6RgDwdW^0K;*#%nt(IiYG
z(PwMcde&cY6W@iOM4UE1E>|q=_GI|T6RSei17~$*L7q^>Rl+$eGXsr!fmjQ=V26vL
zPVLq{0ignSaagW12wxgpm|+B0JnnD%1AH5ei4x;~&NAFfjAwftAim!UroU!>wo8-C
zx-!h@hWW0b*F9xsLuh>{s+X*0|Cj?mze@zYxx?!P{bP=Fi9jjTBhvMF*q0HaeIrGq
zjXUg0xPCsPg~Ym6k$<81FqCuEAJadB_8K){VYKpw-KAwWoE9uPR1j>V31hPwPCh%2
z!El@$fBQms;^(UOe{0phE6~3ce0C=0|21aW|G}7L|L=@hH96<(zY6{X&2t3en51NY
zQ}v-NAlEEwWGhKtoV`iTIvAA9?%P+xXH$N&W!k|YY}?m<_g>u#EM3uIda(ynXEHSP
z$zuMThPD0|1|ab$qsGE8)*ci!B28USl-K~t0bzcnsrf|d5nhN<0cAFscr=Ex?Q)6g
z7{J<>YU?W4QBj-{K8y}h)N8uCdEf_@@6OG3#`+kE$!ckrdds^>abyI)O6{wRo9wcI
zU95@0Zu)0Ubz2I*4DC=9Ci%c2a1Re}mc!EhdHLvRddQT2P#YT}FPHC%2uCWtLmz34
z5RgwV{-Zb^6ouA>vYK<IxkXh<yI;JTcbN%`QS&H5Nib=oYnej!CB=Dgu&kF*Ee2WX
z!pN}vVkYi{6rlSdrZ$!8Gy*MgCg+HE(nUGaNWCnddU0n|8%07jCTLfhDlMfOb@fhG
z17ohRSv&D#hT3l9yrUVNL>)Cjbpy(m4BKCFNH@hZsV>e_wkKC=b7?>S47o`!)1-2v
zU%&b$;i7cLwQEk%Orl~5UdlYkGWeZwpphM)lRzGvMf=zc=0?V6Cz#;js;TFbT&GZG
zEUn(TkW};PHBRLKMk$@`7l)R)r|}klLi!N!W6u_a-|0fy$Lk-DBxHYs;7ajLyQuc{
zg1b`#U^vZb7j-zd<agz^ST}Y@FzBkAtEI9o%4F3{e_#!cSv=J%GfgwD6l=b<LR0~7
z5oD3#+-EFx39-%N0bVVE%66T>k6uh~vv8wu-qR=cbtsq**C2@>o$^tE(is<WX?61L
zFM?P7TNFl_m+`$Xsb1e3(p*dM5l|m04f5{_f!pl46UHI?QqL5VUq^$E!rpT)nw;VH
z0WOm!5*9}ud#=TZ$874>&%sP;hmN=GZXRp8V8;ZZ&m$%Tj(6uc`>&z55e?<28FVXN
z)d7Wl0gP~=aM?(0v(?MJ5j702pJ3izSWy3PVE!ivnuGa2AOrh9I9?q8mE+a>x3~L$
zAcGE7|As@SuKwo=Cw&5m(3a#?v@#Z2Ytoux$zb&Mr^pA@*XYdUz5IMTAQX5K<AvGT
z?05>>j~HM&Je+^d!aF0|l<%9#^h8(5KS=7?n?>iaOr6vFetHnRY*)s?bf7)lYTLv;
z6Z2@-_YR5>=*oYz^<tyhxG@uBl4yTBUmfq)yII;cr;vH2qyp8{m5-edcV{WjpJNg<
znR%jktv)H+x@YG}h`t}#gP6n|;W)p>96i8Zzws<w+(Q1&WPF?R4w6o51023-GJvn!
z#-7HUJ*1M%Vz?z%*yEcIP)am2VSCxPHiSJKUA?J0`C0FGy#>~dIi+l;w9j<3;R@tu
zO0_dyc}7*vSuEQxtn$N+aJutMX~c$<YAJDoAzEeEOyBg4ctQ%<#z<<A_09T+88d~1
zt!m1pl%P{)VW|nEy11D9LB)tt#iFdZTsQxfyxU%L4+MY9rm`Ca^DLDXzKOE~7MTet
z^rxS<Gi0TstH^@vwjo#0Mo#NY_j$yR-L0i;OMx;NZ&BHfC8Iun`U*dIg?mH~T|r)6
z(pY0CSwfeH9C(DKY6a%#1zR)-$4_)Sg*Gm!$s)(1pqQMX+vX_7W_%G4U7;rOBTHPg
z0P8?~Od+Mg9sKX|I<Ol~S8ayW_*Q?D^`Ah-L5V;WIq&y5f^f-bF;oiWtTeyfU@#<I
z<7;-PME$UUKs?AA-WsmVJ8c&sz{T-rB_3A9Gim(y4syZ5nWdsqL`PL<<C&>a${lfR
z#sLw*WGUEOV?^`_WV~ay&dn6t({w^|i!U*`Q@=3~2WmBL(s6JMRWR*tgjDdFTDAz6
zgiY@NbigJ7oNHj6@{w_~u&{+{aly%x_a1Of_32(plfX~t)`!yR13Bwx3+dQG$fe_^
zsd#iru}b1DIJd&^>4}(F^@V&ju22gw4~R$(#L&^KvWG$#ZQ-R9tYi_9{7*q+P)K7C
z<=zAhY2#IVVw^2<iuJxZ2<{>WZUpH%t=<EfVufi|{!G6By!yCG%41v!n|)Oj(N<}v
zD~B5$5yxrpnJ3Pq<Jx8*WO!!kpQd2r`h)oiC~+M~x-kb<&JAr$H1aQ+x$TG<FDU`P
zqmTwSjgjQT4zNcBoqAqVsDE>Hl0jLo&{@r|T<I~IagY)S8hEyx!4}I36TlUT-uVhw
zA)PmEarC@qM2fkj^hYFT-uc>1Pa;7v{)7(%{Z8**&7E`?LL*h_7()|$NkvBm_OHaY
zlQD@!U`*?Z^-0ONZusM*IZmh9bts!UJXXf4)UzcpbAvLpk&szNcg!tG;u}s^;koKw
z{lEZ0!6t0|;+{g;s;DG-0u;_Izu3dD0O(B}8NLbYDb<{|(Um?pKSl7^a;?~%<8Amv
z=BDnHKD^KPy?7c}?{9PlTna4NKF^+Cb7Jf;*jDGLdx|&*s+1O=5#61e_9!llF#J|P
zPL;YQ*A4l;&?%3IvII<RThB!iROZDG*~X6BH>NZySU;{rO5KxE)d`9K3Dd4i8X=<!
zYDr4mx^PC5-YGZ~YCEUo35`I~YF=|)Sv+;?mGsGc<1tKRd_FUeMDx4isyf(pX?I6;
zu$l=WW``9J<Um4*GUqNG5!7}DTU9qMousiM?|PT`rmMIEcsAu|6r$zueX)$q^M4TE
zz1C+uRvEQ(5b5-rXt4$bBNQ#0hasiZR4CUKherb{HU^nrCh08`O^;^{g&z`<sbg3{
zgPp0gb#DUeT~>h_Py+S!NLv&kXLizO%)L>NGfv><7RVAB!;}uEQStZwP_fl_bvAVp
zzD88?I6dMab5#edIW8fwGf`;L7xy3x8Xuy%2>3gNI9<#m**;T$5ull%?t_Jb4ns*J
zK)N~EYp+7@K-X5DBvmCn<SpXzHB#}{jdXnXhglkH<3YAD@p$(2m8sl_Bzp8M<f9tK
z!z>Trbp0qZg(&-Bd`8hkG~fnX+-anh(JM%kbGYXAIqa4AYb}%C9$xjl0~Pk%z3Nek
zgJ_Ht5iOm6$SWrF$Rl3+PyX`Vn$EdbZB$0l$x}prxvFk>69&8HRSRCTdTRCMb=y3w
zC?MTokNs!Bi0YP1W{iO{%VVZ!u3$OolmvaZ`U~GUhr8AzCp!F@H`XOk01NH%gX)!v
zy$(UyHe^^(;%=Wr?{Vu0$Mfb<6{lAn#gQXuUJ>t7+toxz)FBy^;Ie}rf$iP&Sidvu
z#?L+TM>`3TX7&c-JsTnX`O+W?IW}WFe7c4{*f@ZzUh<1f8Msrp?7k2pM@sL#rvri&
zBoyTEumx*omei?3M+5d0@Aj(f$tcUu)E{l~iC#l43}zWswMpLl)w1PM5UPGvh~-%!
zLm~+$uP9iX_r%k!D}?7_OV+LMh%UeD$XGU3^I*Jl@EZP-%PDp?eu~=Lz~NToh1~Fr
z5%5~F7@YAgUc7y`6i?N@(ZL2KK79sdKte<@9QETU%KKPIuugNO7`*qio1qeMiv7Cv
zW<UF9f3oA`fBfGH{_n#4@0OR7>pvx&;~(sFj{nL|FIAh2%i%=Zen8&=FB!RmwRy2q
z&Q0X5ms&7Eb}d3K+|rYUQ338s_8I=yCd*X_5kBrHR#FVfSN<8klh=E2WLad#*~hx9
zh=R>i8PP8d*4`=zKB}T6F?6-Z*IF0IUvjJfB{J+J;ew*bgJ*uK??4iya;6h)=m^Rc
zC7Z?XWFD_i^>CX=G4?#=LdJ1sRiD@cM8{`hA^)ow*L~Haj7h4P*MN`e`X@!(xygl{
zR2@v0s2C+l6_pKtFgB9ACvegX*p&M%!bcIVttXGE64sJq&B6mQPI&?`ICIh(#oW+^
zldG5rlqs~r#R0nt9UVI*0hiWZK9O3sie9es66P8Y$<8>rRdO__671Mb`ZrD9O?zmf
zk~EdK=3;3U5sp7AD;+~BQ(QC7wIYGOdyDPY9Tg%Hs+6|vDwY(BN_Qz{*kw4SDQ|lM
zzMgTZbEq6aC>ZZ(GWG~1XOX}#8y5Dl%hpTT*L`(U>xB#$HefP^1oxo`E*peu){qjG
zTXyZo8FR8m6CxKK9B$jiD0;pAp<x*CxTr`43w4S4*)Ty5F$@N&px*fYo0(PtCeh!L
zL?Mcaqtz!BEMIl4y@6hRt`lg^bf8j)bU-n_z3kgUGJ?0`c$-O3vcDp+AVE~PVPg<e
zq^TgikLNbBz11TO$Cp51dU+Hjt0Dmv1D|tuzwFUbHflk>ev(ZD%C@$wknRdqy8{_%
zsOO^sDMZXQViPRbZD;N9-<NK86ceM5CWSjfHbcr=l>%ZVObaCoCQh8<oGS+ncDqBV
zVNhqAGq<0;lgtBTX%vTe0w(dS<q`26JcG}Hx0EyA1zGYAiC(_GQ&+AhLY5(IQlLTW
zT8|rhA8mQD#P_>qgX;AA!VnPVl_eZ<==`{FkGaUwtU6zCjq&^T7QbJ_!GoX#v?PCS
zh%Uav;|d(n4&@c?Evap?){0fTd9SX0fBx1sxH`@`41BW()r>S_qTTy>;VK~I-_pb!
zHXd})v+mBTl|kd)&|c1#7stS;xBa9~Q?@UjtTp#Kk<+k`wn|;`<T4BpWB}j`x_Hj#
z+m(T@yXqq3Iqh+kY_F_v;{n;ME%9;obXmvX1JVb+2M|=!ss$rI;EQjEOzi}xl2Zo3
z!BK}X73S1hndBn({)~~CIh151IHa8P9WRo2fzB$VTq836!@>R^!;O>kKYkm>Klp7N
z|CQgitU392$`E7wf~EntYC;qW#m5tKR8NI(nZ>h(8rOXSJh5RIPKuF?+};20F6);d
zuzcms>nd7heMyYK=nu}9EzoZvyorcl|1Wc88$74A&ql*{jRk))@Xk$J8{JkJ_T4X(
zgW&DOvdv-1)1(CFCK~oMZhQBi!N{7JDznj~2sCbIBh*)B@&AenW$zZ5_`0S#M0WMb
zzs%!Up_u&BLN1`*G<-x0Q-S$BiPyXLdB<g)O!`(&sX#I+W<9G5v03D|$-%wsxxi-z
zm$$e!O3wZ=z)8`Dxz_}F5sY$nm^&txIhJ+V)+mBM)A{tZ9qzul>-HxzBb<)ix%J5%
z#Ha#&!@V-T&lBM(nDbh}zYelI6LS5`&#%EmZBjhVRs?K(-=yhAVdtIS6$_DegRm-h
zg#a=K0*-bwAx%=}j|Vl3l7Hv&X!Ag&GMZB!(wNDO;^K;yXU1=l?2!|*7q03o>uy*j
z<R?*XQnwc&>cr(~4O)IpwO-Qzc#0U><tovm=#V(bimGW<s{8K<+#+dc3i=umTasBr
zKuJlh`jh**VsQ2^yWkl1N`Pzj<uj0e@DnbZ`rMg+bvnj8KE-){p0e%g^Jj#7RZ^6?
zY7w8loE_<=YXyBdUc(MU=Z!7zj;Sg4(tHLCDGtjh+i@EC9oA#4fch`aN00t{&2!aW
z&9qRd*>XD*=1@A9F_c7soj;GSH+2WJZ~(U<U_AcdSP`@1+ST0UE&3Uw`BTrIAzMkL
z2KKm%oNmEmRZaJeRAL_)bfktN5STzZ$55Dk$5?9S;iJ#0NB6B1+en$M5}hIPXmSH9
zE9Isq+)MapqIB)eS`@sIJ!db7ozDf5TewbN!PGEnNrb9?)O~p-Z=K-wnTRe)0%n%Z
zY;zn5L74Ju7y4}^liAjnt>-fCE9vdiCU}gJi9Ej>>Z@f)CGnJ*@fGcTf5cr~s*D`$
z<caX<!X-n;Q7BXa6l=iQ6l{g_=ZRRqgxrhO#C=DXE;87_4uOFNFvYT@0oZ~?2}Q%S
z15C@6b*i9b;d=ohVp7^-Reoi+8TWIVJm!^`8Q|P}F(XBQDppk0lNiVIm=eddWZBMn
zM$RW9zlI4}VHfV-hm`?`%_uMoD54C3#J)?JiV-2smg(L>J&l;Lx(bwpP$RMBZ0tiO
za!rEs$wnB>OxSQ_&uSK(tO%_px0a{FhMX9lM)bpCB8glTczPzbFFDI}6^QrW6eJ61
z04Gx1`*9RgX(B`sP>m`(DNpKWMIza;sG`J^*wOZfZ}7zZhP4>Hz=yuX)C#d`D@Dm7
zOEjXQ)H8#>E5Fn4Edppyk@~T@w@Gr$639-eQz)vXimadtl)dPYw8~P0g!N&rly#>|
z`+KmMuJsV6*cD>4_4KoudLRxi{si7W|L7M>pn=z$E;Rs~VykT!L~O|7xIegZkyJ2C
zdZOk+e)|K)H4spHoMt;0$%>P@S#OjDzB}fWlB=1`E0d_<q6{3~s*8uq&5ET}jCf*&
z7d<^dWEVR`;KevADj0lf1X%0v&V-9##7Q=cavpfCkyH_OGvvh*_MA(}IX#ou+pJ7f
zD9_;~G=<LPvUTx@Ae-{yira#%nUfO=pn*&kaI2Vf4FkTQ+;1SoRC18-o$qcPhOoql
zcews6{>_(_^+pq2^>@zUyQn=vpd&yObhq>W<LxcLs%qM{VU-360YRj@-Rw=LbazP#
zn?|~k6hXRGq(P99Zb3l0L6mNg6p-%xHyic#e&zZ8hyVLu4vx)Qv)05lGv~Ty&TFnU
z>oI#@@X<Rbn-~LPfCiwVMRae)5>2Ewv*uyyGXxZ^YSM?6?k$Hqp5oRSw=xlo{cjSZ
zeW=!wMfYVVKIPiZ<!E#usq3v{RvOJtoLx0P)Ov}D3wJQ2ZuMq{&HD?_cQyUwx>r2J
z#k1lMBHUEw@aE;KYZD$}pU@rOn1yj=efl8d`BvoO-tdbKA3~S$nzyFT*iXz?Z`}90
z@2I={&Z-M>cv>G@84>j5$vf7}icXvm6`pNxJVg|I;n{=PsoPon+`{E&v67~`nob@!
zJ;%G6)XiOY;EZ^s;xQ;E;(QaEwHv1}nPh5a9A3d4@;i}(-ctFCCOirEUgxH(m!vow
z{Juq&n?O)J+WXOPl=_6m=+-MChpxFhuN*!dGPHTv<3&!ppm<v^-yj>{^y0IN=O{84
zmkh|`^`c9tzah9B<T+8vD;0E1;f3NF87hDaD#M`3P`#TX(mJp6OfXw%qT}TOcV?jr
zQ+(C5EW0~`;bF#cF)S5d`qru+wvYZ^{{1&iB+@!T0ZkTms3^0>dlm&B9Eo>M6OT-I
zKn}1Veb^M@?bk`KzHSIANrC|PYRFCdpV&K-4h7WA+t0>)v912<yfw9gFZtsO6U)6i
z|H^@{DYvBFfCrR@OV&ju-^;&Bwa)h{u?}=9A|^9-14``#uVFU@-|Ed{j!D(TC?QZ*
z>0f6K$3^6h2HDKoEr+xAu)06wZ~Q`LF!&-{)a2Emvz*U??*2)wCE_|)@?AxfHg8uU
zKF?K;XREIe%BBuT-npS2Zm7WSWv$69ZoPPO2hAUCF<Bx^%Z<A52?AuLICSPm+-g)A
zilT0P^nh4JpZ%07&*B`yvi1UgOAYE5fz4BogRhO~)QP-mCnX~tV0_&)S6~nQCuK^K
zr1q%YSMcQGN7%JYKg_4N9rY&CKi(tRDPyy9BW5Xb@D$^t5>rQf9)g02M<nvV&#~~i
z{HR;`=<#h&&zqyZa<?v-GW=Sq1u-$P{5F4cT(VTl@n0>~&Z$Y+jj>_Ye9o`6;8bBo
zyouqqXrwOtx;#=wHMUDcwt@!pKIyc6ryurQ?DFa24|v4LhA*w5?qiYJ>C$ZXPxcR&
zEj`Hi3>#ZMO|#QK;v3HA%Z+|2>6?^8@#bScPMYKJ(#K^)ot4!`yBOqms1-26wJSE4
zT6R|1<!{*{-6acv2_KrH&mSps+J{7JOb9h0`Jsu^*!L!KB~f((LC!<%WfIzZK^q)D
zWnu4VD_A0{MEf_q;l#b~<xsG>N`sj>aL`+7zS5WlxOd&F$_NmSupkk5%3nq%T&TIW
zc|>2NNzM167V;gJO+Tk)9jCK+TDUsK8P$CYZHKHpjprF?rZ1!3E1_28<16OJY!hW$
zz>~>nW3TV8@=>o(o~<5H{jk^mB2Zk|a<2hz5zW+`q2_xB$RZJt^F@g%G*8UX3`ZUj
zW-E9gC`}bdj#>jFw0dRct!3p49fkmlOiNyE2js5F>}Et8I^Y;jN<3x2%aKJ^bj(<a
z`s|!|3FIKtRyRH$-rU_l*fw7Y*~(ZSTk;q2X?2x^i1$&9)7~tzX;N%fS=jN?%)i3k
zd2DP7=5<$(8FUQE+m$k#*VrsO%0$=ktm*4-Sq-ytgzsmW%%eiEHyUp#0(8Ha?QrNv
zfYo$;z+&h^vcp?=XJmvp6Jxw2-)DJ1$&>$NYUl1d*@YjR!5*rfEU)|2@+V~8IJ!&a
z-F<!wO^d-ih7L|KC?%iTLug6T>n;kTq9Uy}M=ych8yNf>sRbn4iSJ*?kr4Uhy|3zm
zd=UqhE_pyNGg0ZTmON1~rIRR}fofa{dOyz=eYA<KQrOCqLpVOODCD<l?vqU^>~n>v
z_fkR8Uj|>_dcrUQ=MKKt$TOqU3a%X_b>?{Q>D4ZKj2THquJaVvW&8G_(jv?Q-yV%d
zrOB{Hq&WeTMrDFY(WjbiwNE`MtWE5}29>%=#NwKJGU<qwLWinz!jJOwbzyE=8-I$U
zx^H`by^bF8<?g%h&1i>tGs$@$o-P=Ptzy4lno?noHezr!S@Jm3U9qK0&=v*L)R}MA
zeLOwQ4b~UcNJbM!MdHi(UgRqyXCL6S?H*Vh?mPWx9tNYkOYH{JOlITVr8tjU49beN
zTDoMf5FXN<WIe)H?C(!{pM|6`XhPFo;{CwF2nk*tjT}fgJFly;9k`;BmaHknwVEh%
zn;TJ2a|!LhyX3P)MtevX?kv}%*4#sR8mt@NdpU^4HgCIIiPVQSte{2TNl~!~%0cE_
zPJC6QZU%nO)MteFd2FaA(aUg+yAAe6gv_&Q6JxBq-cyyh`mWwFohHv@WuEeo4jp}e
z6XQW;0>TN}%h!{<jeNT|uCOy@>-$X};c}JI!P<9~lrlOh)(Ziyi1JeS<n7JfZr=#e
z>pmhGC+(mqcDqq!@PX4g;jl)Jk|bgmPz~mGp2=C9zVbQFuRn@H2a!K|b_UP%5y2np
zSjeQdx^hM8xy;8xHTd+~$30+93?R{SK4tT8I7w~n`*am~n~pGaU%MA+pGXHb;XDOZ
zx1(d`uLi|qAMSbG!BU2gUu-DBf$w(d&wYAJ?pg4%$2Z|c2@f*zL8jMTWm$>2xv+N>
z?)ZxJTQ66%*JD>DFefc1)!N}J@{5XVbj6IA6Fyk@{Hd!lS|kVGii@D9x8ZFMUAfP}
zhxxBKA4w5~-#!7xQ&CH-cuk?C%HPQDymhM!50T)}=wyReGQ(z*noV#ZMaf$iI7EWd
z^{KfWZc9_;^pa}W5q}G($X*WHyT>MKw-tlf^>)^sN6I!kIM>>HzKnsaNU#N44BW(T
za$!`2&S7L~q6CnnfSDSq04w)7NwDI(z6!ZKq7iy=0*;=c;vZT^2|~nE+9e}_eb%Jn
zkKRH2*ar5t*lzB7+kTE*FWv{b8u#r)Cxr^&_OYG!#?8t6Np1q26r;09>7P-1vpPSw
z9+j3c<i_?O5JHP&b^r>K<*T4DqH@^BBlors*rv8uD#>ERVsaJI;Gm^OSij}0s_m5@
z2+6ZcNWe+?h>j523&#fkp;P_Pd4|J6xJNBLYQu>(vKLP^rB!dPT`S<FWX4+?v=a!k
zuD^HZ1zQL~pzVh@tLYd_Cd0Pzc_}6|Y>4KDGW?h$g9&UxUUBfv_1?5>0fI`-GhHz8
z4Di;Suf6JOeF^R##qck*_Z990fyrf}IynwXHBm~0sED}yiSf-R3gZ(_TkzDL-JB@-
ztOAdvqtbAyG*H1MGp-;MXW<0s9qxPFLF;(yC0l4+KBI{yP1ijqe;f1<i8c=?@SgjI
zj_+wt(!}RKX5a6ecMfDX&z^k3?Z>Id*6hkI$%xx#&4x7YvX*1vk4p5`Yxbnyw)FLv
zPSE0DS@c?;^KDTIf{-32@3gA!Lq(MYl+F(uAT)Q+$398guI?YbWU14C?Ad>a)M0s)
zFdBlFbK|r%=nOEr@eWn*_I5Y*Se!am#x&T3`kpJ?$Fa|>E4PN0%x7vBNlf|U%wCO$
zSyXzcJ@w2z1D5mq=nzfL6rGt(cf2!2w61ML;kt)o%fjJ9>>6;C6Qrao-gIABH{spa
zkChbc!`^gCw`iKs1J~*1d-l?Bn?=_?jxSBF?>!VZnvD8;0stM>p~gT?)_;7pI4)WL
z=J>DHzZ1fF<r*O0b=^C<%g*Jk?b+O|QTN;jBbU7$L;9@%MM(<r!)Fh>Ib{*}^)f9v
z+Saz>SF40*vD>wj<aov1UJzz(+|7t`i5HuS2}CkNN%G#mC8D^<>S6}mt>p_<aZ4p_
zWUY^;QX~7uT;S!&H)m32(p`o-@LGA8<el9;xmwlET)L{!Jip*<d6XGy>Cjr6r%Su0
z-sL~6O(vPQotSgQQC>PuD;mDEsX<b`7c|zVzpg@%Mir14^aXYNbfGH8T7&8sKvedL
zg%W17a#wKS*lX^rc57|~QDRR;nA6xt|B;<mdRL{Dg4A1y6dIFd+V^owz=>K1AJ_L*
z0zm80OIrBXf+>jgpS_<rE?F?;{I3>FyHsVYMmaF5j~=b#Ap5IDqzD(48;#ylFKM$R
zpM?-}jT8$DgSOYR_fFA|Qk}%zhh;1Mn)DR*bsOTt*w?yl9}vR%K(^#LT(jp!>2cY0
z7ajkUc_vxDNELH1Kqq0mR)gdko@11NCGwoKj#ILXS*zN)EeQj51sh3-l2eUh`1Tu*
z;u5j7nyfla3?he&S5lb5cO=o6k9|_9(Z|=MO}ny!C1_lVYw@ah2sYWqlk+Rbmh10V
zi#F4IXq)(<^L#1XzU5Utr$Pkl##7ij&dr9Q*shI*Fm{>^<r|btz7NOT4rWgxj$JUZ
zZ@ahW0Lg)NA{22|0=bWI;OoM)6RaE(aK%cjq<u$_?}`pmK4FJ<KbdltFYL_>5_pXY
zYWc*Hslk@+u|Y#E3G}M_NEaa*R-W_)EAPp^x^mV7$=(!gm2$)nqsjCL;a|dg3IGG@
z2ca@VH1+j2L6o3(Xv~dj99lstWmSUdCF{%>%LQ!$VQIAQZO7HN4}Dl$-edF2j-|!U
z0Q$N7%!6cGo2-anR&U+8HL?4g>u#iYPmQfsT*-UpS8uA96fzE@{ghHDmP6Kv#rnMx
z1o}QU5gH6LWV^>CND&KJt&{eGl~~h_$;%kO6yL!hvTO0xF9v?E=^jnJ3+%ubL;Py!
zo3}e>r_MR&EbMzL$7!(&eeUj8b=A0ZFA_$9a{BEVf7P#2lCMc@wm%2c9l)o0wBp^_
zP!7i|T22ogH?v<8nUbOPs1oW*AHkJZR8W2(EB=8MK@tWz63yG*ggP&wEi?KtC+01X
z?2L}-pwCDa2mEY2ECW#^H=7c_XuTR*YE{0HcNv#RcI8OrO)pjATeR%o0{u<=g&-rC
zmvSnm<OkCFUJ|0slxGi!jG354_;PRuO|i?oXN9@|^E`}T+YyFRqOC)MMvOazcxyuw
z-?xXA9G~b1fVoJg<wNkh^D6WuC{Txzw{~({J~$w6NUp`d?Wk-1!PK%~lV3$sFEa_F
zzvm;bn4^q7P=X)H`s0AZ2YbY^HQ0-S{gAO@Q78#nK$rNSz$T5^eaH$NLpZ4^#HJb|
zP`m|Oka{#Fqq#752rA%ROIY9-Wt4r-^>};x-jmR+B37c1^^v{|9+1F2LS%TNt%#PQ
zM3Z-zj>~Gr4+h~a*)e>Z2L=7jL{lG;=zk=pj(7CENm~koot1=~WkC2<AR{cj|LK=w
zerh&`!IyCg(u`X*oE3@|^r-Tpw0Dud=|*B$^7NL6<4<}VR6n71f)JI-sFS;(#lB~<
zt($jZR!Fy%9o?MRyC}cMTRY<(Q@=YR@CDvpRG<579OMH$idw`~a3YN+e=qBdfb2tX
zV_L;k5sUxclch&Uji2qao$i;>Y26)n7#nFaN}}?M;O9l%XyRL^qz2o!ACHC{$GS?~
zQ~H)M&4)Y=v*tNBF+SQ+)tS6CIh(ZmIS%FYrv8-L!gJJ;Q76Ft#~&DAF(nocu!&mM
zG3qgXkd8;^icXp0!VyR`!x043HXXm}^zi#US?{|__P1JtYAfi#0c81yIdWdIip2R}
zts*7-cAT=uM!-gbeLnWB(a$kf0^d#wM1<!r<A;u5V0^sx5fL00PG#Zi-8_+BZZ#<h
z@W=Eu*^6POWegk`2x{8?)Jh-`U{p9~|JX)Pdn~9M<DsTIhETo8b35!eIC*=H$M})Y
zbcA^T$ehlNSuf}_v>noej!gV<e2%JLZ-mQFifv@SATB&JN&RS{>afai+n+iZzaQ<W
z$t*7tweoepEKWi%c1#Be0}EIOwx9faSFl%tu*bqTYvM?|S!aQT-DkLx?|IZG9uM<T
zD>MqaRmab%#6B{^9=$`^ha%+0dIT&_`nG1=MB>#j#@D7LC?ylsCxhHl);5x($QZf!
zDxtTyQP%=(vBI)8EpzZG8A@Lt_iNU&HGMrg)3N&{9m%Tvg5$$_kD`h=wH&)lz2UuN
z66eY+`=W8Cdc(iIhi^|R)GH#^tUK6UE=-f=L+1-QI-%I%<L-{L`Bq;m6Pn)EYaT;H
zr+zD~SMSvwV4r5cLqyvWObI&2Ye~zrks&lJGQ{<e172wfIk5DJOuE72k|c#S%uiM}
zwe!sN_Z(0^bnHrhVen6>vnFeM(Jkci9>c1LT~I(9$VduTrh*<*WuX>i&p-Lu@zw(Z
zi~fZvHF0Oyu6TXT{*QDblOAL->B*<N`Xok<SQG`HZqc1GNBZ|XOEk?80wHk4(ka1U
zzI(D=*#>^dop=L0v1`&c*~jtxFv&JP5`S@2eXp3yFy+L#3)QLbJvj%`Jtk}H@8c6j
zd~cPVIePC#WYGkDdq$F%h5dC9<!vy+er3W0QL1m~dt%10!604!Ln9XtzbLeUw!~l%
zr=ZhR4gL7reP^0AB-ht>9ZFXnW^1wLtN~;&)azBr)1)@M7&kX`1Ex_o{llz`Od`yS
z6v=Saa2ny17Hw}*)v>T|4IRQw61QcJ>R$3}{91@%XZmNmC(cV2VmSY+g_wkYb_Jjz
zW`XPmSDxOMW`f0X$JQqBSyYVLi&Ehf!r9crFiOhyi1;*-X_%Xz!>uM<nN!6`#Jz@+
zxVOHNuTSy1l$_y?MZB?&ed^WKZoAg2Vh%H0&90S#!R-IyS<d#c%coY47%}O`f$<pu
zOnAd1TiMB)!#x?<_Em(bh<-G8ks_IVR@%0#PSzc7z6p76&Lu-OTPQ{DUVnO+)pGz}
z)A5A5ob9`VVQ{Qjz{lMr5!BbW!IClry*=r$WGrDQh|UJRQKxT0Rw`3IcHq!9DL2+X
zGAw?rF+P6#>|F#vlL`EsV)J2=2e-~~XN|0Um()$eYD{qnJ<|s#cBbNGboryDoUy77
z@4pf*hCG)w&0G`UCKv)l*Rp`K>S$-5WG82GG16;`Yxk)j>^Y!d5(N?sw%^qNa**Dm
z4oLm@D2l$N6-W2AUYl^%F$w9Mc%!pvGFp*_H)m|+@bL420+&SmUX-Ei7Cf<bG@pg}
zcjRMh?=5$Xc-h6Q4PF(PGLMxz3`<20zFyratTcZmgdWzT)N9=A>1X?NOHeYo*!{cC
zn6}!wN_F-C2k;H)TLpUq%l7CyC#`b#o9-$2rR0)wd`}hdmDkM|^pQw%tfrS5=1Uq9
z7DeBjg*nwi?44NMkS!P4xl!&>vCNW#z4HE>O-5~SYkFpK3sLMoBVdJ_yytPvbVH9!
z%OXX6gcdD+_P)I6)O%BdFODrfcwyA$pI=2al^s1}#P8y+O$Vet{VEff7GVR%K1!O?
zZ6<a7EC4v^bc|RwemNeZWaLXPEU4#k?*Y5z+x0oe4Cy`gt}>>KybUJZ{1K0(oyii9
zF5Wr{&g~x(ocPTq1W0E>%(w2Rs0T3DFbA?oPp0kf-g+A!$I3lQoVUGK?iUmD28m#{
zxefzo_$`uPM9OH+F8z&}8sjLsO%eXCjOY4`NeT51H4164qTx-g(llT)wzttcFA|L>
z(6^3Yz8|%qT=Ee8GEK6x{C3R!^<44r0F<9v8v^9P#)beHLjzN=pp`R;=J^B~;>JtD
z&I!^+1}IwDLv~LkVS>c6HMF!RIUkx7A(sv9tQ>6h4ecPA$lF@!D;e5r0_257NdU@*
z&i0UWqE?W|z>C<BT~`4@kT4{@9mzQ<QbdMaf(Q#8`L0o%bL9ao`yX+Df64Q!#s2r3
z2l@rd|0&Nor}?veet%8oe^nk4XL~UvXir~!ljdg!f-Y$>(C<$D*@K|#Ycb|?oBID~
zG0^{PG3Ik4`#H4!S6d7UaOU6W`3F(Z9f|+!LFQlF^%~^)-4=hy^Scj!_7}_f6MjAI
z!}1#||HuQ~vGLFLVYxmH!1B8-{*dQ)AO32e>%%kaC3uEzeDr7guwEaYS%0_1KkWnE
zBIaN6TpylUFTpeP-S<D`VY@y&vt5E`=qs83lIQyH%ytQ$p|9QiOP=e)Gy5fYhQ8MD
zr#$S}hiCRn@C^0Q{Fgk}hiCRn@C@}W`%@l{>%%k0C3uFeTmMU*>%%k0C3uFK(f=jS
z_2HTG5<Ek#&VS0od3|{1yadlsYtg^txjsB|UV>*RMgLPCAk*~$8pw1BqJd1myYUz4
zV7fj`1DP%XHIV6dPyQC^`d|$N{%(+e#(5yq@6P-s5`+a_*Gv)k4-xxAq<;wHZ;`GK
z+(6*(2KiH@-@W-uB+xa&`ycZ4he-eM$loGeBfKx;h(PGqPXDC@u8}1IFQbXTzjz|>
z8i^wCGNuUpiz))Ikt+h3FM~JqV-o-BxND?~kgZPs=J&wA2qR>z<ofi|Wt0&J-E;ik
zt#pmr`!d!D{EIdMuaP$bFC&h?znCMC^%}MJW!w??7kLC;BYOm1MjwHH@kb!rHNyKc
z1_}I&LIT;Y5#E=PNZ?;A67m(W>r(=k@krobL=wn;jqtvVN&^4llE7;ulfcW^B=9df
z3FNp&cwa^+fqyYdAjdVr`!Y@m{EJiquaQ*(FQb*fzj!5(^BUoO8M6fbMJ*u?_t&Nb
zK$lTV&|lONbdA&!bQ!e-{Y5Q7OxFi*&}GyT^cS@RT_d#wT}CZIe^E;i@cQ5lx{O+a
zfd7+Pg07KTf-a+$pueak2y}hg8*~}91pP%VLDxtvL6=cW&|lONbdA&!bQ!e-{Y5Q7
z*GMfvmr+a5U(^zGjnoo!8MOrcMJ++sNG(B^QA^NY)DpyUjoSM%Y6<#_T7s^TT7oX4
zmY~0=CFmNdCFnA03Hpm#g07KTf-a+$pueak=o+ad=rU>v`iokEu8~@TE~A#9zo;eX
z8mT4dGHMC>i&}!Nky?T-qn4n*s3qtcsU_$#Y6<#_T7s^TT7oX4mY~0=CFmNdCFnA0
z3Hpm#g07KTf-a+$pueak=o+ad=rU>v`iokgTcR(Vq#!<x5I0E@sGp=A2|&u!z>Y){
z`Ft9zhz$IBI3J=Fk)ghNki$g?ItNrlhR(Ybk)d-P$l)RZbWB%7hK{3<!#VR%M23zR
zki$h3s9sb=hUy~7;UWt3nNviD;v90gC<xl0ipbD5gop&?#OKGKvO(D&Bn+io=f{hz
zfKYM)2}5V}=f{iOE|x_g;h%y7e@cE~b%$L4Df@+e84~^}{e>kJ68<Uwh0PEW{#k<y
z>lh^bvkn(_p!4w0a(`Ci!ps0^#h>-KAk^pKi+C5*5fc7cj|-9n3ID9e1s#Bdf42X{
z#1|6&S&xe;-g)?Eem^_mVg>=Z{<9k{#>(^X&v-xUaiNMK*MHXILg}1`f5!V+j|)sI
zB5RXCmg*cJ-mvVTKiyt`!|NxyguwP-b1UOtFuPa?fw<*DUZsZIAz@~^=(Rr_Xa7Mc
zKoJOp^y@i@0E(Q*&~+VvB0DmaPyUhOJp9w~@4rg{rGHmTalWqor*q+N&r)Q7k^qSj
z*xb&LkMHL?CDhmSSN0%Q<O^!|kHAp=_v`+DRYfR0yIP7r1pe<D1xjwNR0foLTrI_w
zy9zpUzfu{{iS^Y|oFnT>DWKERtEISd&7qUJE0qDAb6qXPm1_>2v0SMP=!D`*DWK#1
z)lys;?a<NkN@ZO5;9N1um3#fdhvjOeKn;OcOmgLp2SN>LS1aY}itfV4;cBHo4MkT>
za`oz8UD*MlhLEcXc6D`ku||ExQm$V8t7|+Ulqg?Ku&e7l;MJ8L5K08ECfL>09`NdV
z4|sLOcd^EGwYpqg^<AtHU8$6dHJqy@fll?VnB>Ze|6+~eYNcFV^<CKbuU5*{CwUh(
z@++2d<!ArG#(cF>uCDq(S66)(Hq@&L2DNcsEy>kY--V6vYNcFV^<CK5u2{;|d;jXH
z@4|+3HNmc~`YvoRS1jeq)&El`34-km&)<&&$jYnA2usr|n_3v!F$!9l8$jO+6*jcf
zw>7o4x3VR<ut{9JhkBj@^4_7Tt)0D)3D}l|83d39|2&5{+W;P!8rYlIX+l^c6A3e9
zeTx-JU|6AM0uJbU*ZEcG9mq9S$PV4VVxAvC>>SAFasQj&?|dM6oaY1mLEb{=WM+b}
zcn}F2WW+u{{yJxaRGuBOAMp8)8ES7kKRb`b39<J;V?s(lk9Cor6=E{^Gmmp8hVxh#
z_4@T6A}R7uc_HyxAUU0<J3s!eBP0x|*U#3tI6rTR^LXc}p~qioAaX&|UEG6~_p2?S
zc|vxWI5(v*LwA}uFZuGnUwK0A{>L~!Q~n?BLs}H_lCX%SzLkNgr7^_10kwAklpOTz
z&tFMCH@E@+u>)M({)u4dJIlXP0?wiKJMhTVQoz#A^mka;)X2yX^4c=wJ!MUZ-HHid
zWC}1chghVT0T!l~4tCoA6!8b%f1_7KNKjQs>L+>?tt`Nnf5G>>rixdGFB1t1)SAUa
za^77~*!+a<@2-Vd(f+@}_Z$-EKL~iBwm3-lLb~ENSbu`|9FFIm356#Fd{EFsKmv^i
zxd++*`qw=ukbb2<PXh(~&j;W)#D4?$7bKzJMLy3L3SP*=_vi6<O(EBRNqi2-^Yil-
z`3cV75A84c&hP&M?zv3A&d>8^f!gHG|DVVH1yE+l<NrVZ{(pio8_U083^lp_XBeN~
z{=bAVGbg~t!OGsy*3{U<9%A#o2$>ri*+VS2Yyf*xa|1(&?G^~ob1*kIgk1bT!u}81
z{TucwavDnFGCyH20kKM&>i<vNLoJ>E1?(YZ|EabA-3ibRJ?|#yAGE{HJ0AkoUtM~B
zJpcQ3{G}Ox<^zd&4n*kh4^aOJ&Wl_jIY2;r{;2)bx=>yG3+T|&AonkFgT{htYDj5N
zU4HQ&66+7i{si)$fIL6Hfcg2^AMpGK#^-t%^81zQJg0N1E>iuh86@-zynkFdzY6(-
zNb+ycolor*|1;?RnEC(T>CQjY<zMbw=Y#h@<2n>CvS16t|1bj(gzPk-$p~37XFS(&
zoDefJJ1dhmK-3&;Y)8U^3=pu>Ki_NuauKp~1lU^K@Eq(H!Sh1S@13Va23){Xz|z<p
zvPT8P!fbD7p$ge{f&&>KV`^sy8Csz5JJ+O;j3AQ=$UYS`00Dp?KnNfV5CMn+!~o&|
z34jzp8XyCZ1;_#90g#piC<9agssMEW7y!1gHng<^TN(f$QxV8RXJ-Zg+XM6fdSF|C
zo-J74@chZUID<Zs&{H!*``?!#=NC8h0s2<vR+f<e78YQD0l>h@+#HgLAplxAfT4{8
z*c@Q!tZxps02o0>DpN;8$Z!QPg6y;bFa{Xg8bWsBumzX^OrBbs7+L~M0Z#yC0CRx3
zp`9JT;$lPtSOP3fEe!!y04vCUYk>9nt{qTWpl277Kx$-aWdN`?cd!H4K=g;9oxLeU
zFsNEF&@%_v0_*^Gh8Ct5^4b|XLJG4pbq3g(gY8TJcGi$u1MC6zCbou<qmvcD0pMV1
z0BI$CD_cW=BftsZ40sA~0k|02TG2w0AZluE2$`8dpJv5>#@vewKlLFb&Ux)15U@8C
zHiXOz3?be5=X5{_AZ=)AY;OV?95|Wy`0VT<?O}oJ9G~F)R9R`^a5XeyWn40gavT{g
zKm)<N^hxQH+$|oGDSsGdAG}*gLeIi)fDsSsd9X<M>q&g@1o(sO(7SV0E#!C!w>h?N
z6RvQsr4uidui~0~{!zVr?6I8pao?NbsH2;kXKjmTZC>FewE_>3Rr_=}Vu0IsRa56@
zJ3mIpq>0$gFxlfgF&0jX>{+^ev4#~}qr%Lo2S3NM8+~s2baU`A!m#oaP*}Oq-n3o@
zIl?&Zr>*Wti?5lm>f-X&o$-57`D&~!0C0Eyqj~c;twPVq78oc1-zcWPW+F-$1WSqg
z=;XL{3z+&?%@Qn!ot=80xo4k!ic`XNu$P)u{k~zLFq-Pr>e%kov=Tawg}e4qZh9ep
z>eEADt;o0gi#XVBOtbQfkd51?#mM>8*v}evP}t4wNBYW~w??TazW~}cv<~z3ismHf
zU#(H*YwesaahlENC5S0((L7pWY!A^8>&ifrN6GZ=6I{Y5_2-i2R1nK->Qh*<Xiwl0
zwMdJSZ^^RgQ(S^AO>lX`CGjIUN`X6TuJ6GUxYD>0q1<=7irJa&eMhgDOJhgma^GrY
z;`K?l`^JiNrJG0!2V_0U<Wwf#p<{g$E0~*Mo`tx?N*6gIKCF<h6ql9NhyMz}Q0}Rs
zV0)0uOT8@9KKnp1PWhKKVu5lMFVU1<W|1u2`TWv2kwssT?d+}x&Drkk&PyrkvtFuh
zU#y%vCB3^P^yBRe#(7oWHrpq496U-PySveD(uP?qjHr%&8ywRyD=#jVa&vE6W>uPu
zy?@r+$F4Z>!Sd7Rn$M>%tb^9);=Wjw6~w8-aI>Jwm?b(oRF2#K*be+Y$x*_Q&QZoa
zk#L7M)p$NV<_<Hn5nK04(o?g6NcAQ4H%9JUu3anUUnnAqGu3&d7;x5baJ%kwAwAdn
z_=VrVhj4sMmfXtTFJ=d_*`3%FD#OAO;k#Q5_}t{`?`8R7=4oK8n196LY6jkyfBH6S
zRnRaDrV)8$;0;`=8g{lMN_Tf(mVFzSC_MUiAmh6N0Ld~!yrF(ef|#h~NG?<Ai7^TM
z9sdlJFdITDHYPEZtTix6*y;RY6S@{}nxz-nbj;Cyc>JmyK(hCU$vJ%Bz~pNcYcK&w
z+Fm}f{TUY?(^s1Ef|7SWcldI$nP2yRHqQ^_qG*mOkxh|A?vHGEGGb|u_hin4)9?&a
zwa#|`Mv(57{WS6I-l>`!Y_+pTy3EOoNS1dHARGOSDYPMa-bl~Q->VBwiqdXg7I7A)
z`jD2ZFi&9EjBQ``QL&WQ`zEhjdm<)c(wY4#V&Zn$<c7mUfXa!U?8A!GlqxZb<LQ^G
zNoiYxY5NYjL!rG?<<|Hb&PHmm^tyM5H$Ncae5!CJN_;Wt0wgBT9dUYCM-Y9~Ef;-v
zxnY=|)o(-N*s|*AX8C?t>l?_vYGM8@N6cLPt=>3lUBnKA+8y6$Vx}C^1-!`=s^}O-
z5Vkfv5X?~|EovT6b58;*__A-m20FYJsU|C)XbvXsSS(wCe*uKuoz5p*C*yLplU(xq
z{!U>s?mIe)l2p+e^OST0>4(SaI!Yr^YvLX%K$gS67fv{i>teXIm;)A`(Z@byiiEMG
zBCg?fuCvyVFAd0jLBGAP<0qlZ?aU?c6|nR&`uQjuvyr?A(klVeEE^hB%7vyV0+s|C
z-hg{6Ubr)9L%2r`f>k$eJ*yc<J0=#-?bg>>SJ9q*TrDkco0M$8${~a6+km&ySvgP9
zZ!ihgeZV^lR!tDNJ><558L!(tj~l&)gKbBm#gJ3U92y%Oi9Op9Y}m`C6Vlue7z?j)
zuf_{sPXS!`HfK!jk&dcgH25WbVrYhF1tDTc&YEH<ZbgFYaPtxU!8qnndww*$6D$VW
z7LvwE9ePlkFiq2bptLn(v1rzwZnL84TIP@tS?hd_?sACXxYOqstLC_@m5<CtvcG)Y
zR{=jJO{CV}C2N*a@o0|K-Gs9gpwCCeiA=)S;zXHfaJidyci9DRH70VxdQr{O`M_q@
zKZ7w&ERf}>j=L8B3G?=LU}5wCr`gxtv~UkRQ#b4fg;`!jA21qM&_CVm1*<M6nDK^y
zshd<A%dLBwT_wWx?%geh{UpJ;I<wCkn==tr*ZM)s9vyZ_9B%sKOqxJMqL)}C8<~-n
z;M1ggAk(S06VE`MOsMND8p(~%pOHv^$CLl6J=fGwFmI0N$P&~!#km_(8)`=`bmFC;
zUvl=+A^A;1cz{Ej4DFz{{?rZLu|8v3I$1foyZyo{>8vE_#c#9BNE*M{Xkk`&2r*P`
zArgo8W-v?jyG(A-?#ak(NKl`=fBS=j#6M~Kh$UF^<jZ8nO?{)oYAq4<T}t@K@5II2
zF!bVmM$U9t6uJV|>tx$zJ;c069KiionX;<)Ri-<m#b*a4W<%R7#xzj!H(W7JUZ8)T
zM!~^p{EF8eEPc0~-;`700GtMV3iMa6F+PjstxkNn@4qI@(k_1w3**j@(uS?havL(*
z(^>|aTzVQB(SuByj}+PJ?hn%NfO7dE#|KIhlPSI5w7V3UpXf8l%;z=xzWTtWVBuye
zn8vQpu8~?0%%$d>Pypi#=JaGiaZx+QjhV{MY43{{>f||8Ggz@So{X)LkJwB5V1+RR
z!f+0e9yarKM~bXDYoXn0@i1tg7n+jekEyiu7Z6_<qi6j1sCB50eMxTmjmL!cbKwv5
z2Srj~Z|SMcnoolh4bpu~9^z|1wm#WqFZ888j>uto9QlgCk06a!g;(#x`g0~T)QI40
z?;h~%iFYz*gQRq8=PHdP!(f6w2VCx1X4#U_1O4XDhT9goUyubcW#RY3bSf;WH;wV!
z$%{2&>^estjc-u&KS2GyoYb|wTkm5#E_Rzj5MK6OaTw+MGR>GJPK$)M_$@in#h*6f
zg5#%04%Lzf94hj{ynrjT8K0kY^to8UJN3MMyFnY_zoB&hA!Y;f3RQ+H>kCuW4|Bcr
zpDWHxKa5+i2ATlIADOm)RA@yE3&F<BvORunVIi&<U)yQf7L?zUKrFZ9mN0FJhIB%W
zcM?#xTi(VMl{^+JaqBps3{(>_YB+0y^zPk0VMQ|FBLiVughpJBf_Z~0;edB}b7qIo
zi_pxXcRlehgOGPbT$+9C=IpD>_%*|$g5YuRj_Yue98553=`3YsJQWnA@?M8iuktQg
zR_{qyBr|6#d+UWuQX)-86TAyhflJ#q9H1DJ*BUHI!8D+0TWhCuQf>Rb%21tW6!thS
zwXJ`pK8|2^&^wX7+fX${QA}Ayap;v;Xxps4kkMn&86xZZuKjfsH@<OsHV&FE!4(8+
z$`7k6_lYZm$?8;HnZZDAjOk$}*UEJ?T$=<Lnf@oGmD01(@sE`$eUT5BWg3RiM$Ng(
zh6gFuewczvRScrCZ>N-CTHK`5eS(ilNH)EdJx_zXp?Y5qiR&$5@NTF-x&U8r$FsqZ
z4wz;;T#>YvC2V5_;wM1+9Zaw0)i=YL>&~SFz&kb}ypLp)PW5x02|{KVU7G?MFq!Fl
zGiI~tHtu$J-yEAV@jJ*Dd1sbkxQ&Ykr|~uPowSTIM`&#X8iu53O3|hzQN^jUsOFBx
za})bjiT8wfSkI2{4p;|UvNSv<&>{aUCqx@6{yH8nHX%USWNeeCu*@_5&eQn%Myk1t
zg|s(%)bbq1H+ETfn!iT5iD5kkWcY#X9B6LRDq*F8@$e*HfF9&Ys3fRh48G4363MKp
zO8)Ukn8g6c0FQi1#%+ug#6-u!sD7UW^-*RoNU;QI*oTfi+T>d@vH~TDW!n*Tb{+@&
zF3uw<`frkv^!kL7uSAgF2|Q5|joz_t-ajs}MR`!mm+G(%M%|!LNwphdj{U|`P0YMo
z6ny&a>oY6AO#)lkmW79Pqa+jig!4&=vYT)G-`*xpo2IF0P~Gdl$Ka1=I_ynYz@azE
zH<=mr7HI>o6u9Y8=2%DcZCG4j(RY7+is@6W5E4GdjNV<m2l3rc)f7%k9fCbxePIva
z|2|HQoETq}z;wfDQbTOTHRh<fmAMw14|mJ6TT#+cBi0<3Z>0crx5d*3gO03NS=FSQ
zb&=5Hp;)C?6Z}Jvm=GG07*<$E{cI~xMoBqGjPp>dkWVKmY%_ZPo_+xZm&Ug*SdJCB
z6(xD9%9>Uyrk*#0Dk{)aGNdFmZ1Ga;+R8b^vP0rJ7NTInP`5*5cZE9NH%!*&Bx&TM
z;?uFx!s$In@^RZ~$=3UbVOLq#$6MrTLYY`<@*pv+Ne-t0A01HY<|tym*RhLKa_Saq
z_T2DTCn|PWrm4|uT%QA%YoRzW(1vNgcSxUsz}0%1?E^p6hdA}u!Qu(;O1eeTCQRmp
zUdKFslh3ror~g6z{$@+!2n#Yv(ve@6+RX%a`Lqc=k+s2XD^S<WKs}u*U61fPN{S{}
z*LJ1JL14r!@ozZ8EWuywxe|?gNtiqbb)Ru^<=nTk4Y#ScY1P_fwY3A>=?TwrB1<OC
zag8$ju3v5Yvg3=X@5i8q+3k>=Nc(Sr>wF`|B=u7gEGAzO?ACAT>EoQaP3Up3(@aRA
zzlz%uL;TDYhCPhPxZlW(WB88hy~+mAhPKe3lkOw3)vZzIoxn7a2U!I!MX>s1rK-Dt
zqY8@?17ng2-U)^w<yZ2lA3Lm3Oa;&Unq4enKUl#o+CFUx(NnBo!gB|V-}5VD-bW7c
zoGlxgB8jQ>fB#AdA*N7VV<GAt8Gmuv&Vvt*_3v?r$}uK%Ph^ED_LFa5s}l|;_Pj4N
zxYG~=Xx*3Oyf<)n;0KsT*fzGZ841vcLR<}_^oeJ5^PBIzNA*-}xaQfe-6;afc#+-*
z!I7uswdGh|XVk!+v6U~{3}}tA&Ud0PAp0N#$nqkOsXcE_38{S}T%jCzQN;9}%L5fb
z_aSa)!|n7v81yRA<NHkOfzg?4rgLK+9K-cTuMpWcG8w7rx(OVzR;gghYkug!Ic_%v
zR)#KpwRcEoBPUmRmEI{SLM!d;U6tEwzFOsy?6hO)Q~~*N?*p|NzX@YB7oFxwMEeQa
zC;1FU^-dcjPbaZtbP(bW-i=Mh!r=$9HVr2Mrvw|M-8CP3_P=2~Ax`~_ryDiaNF2EC
zz6?@)+d14ET+vf`(pLCbUE@`3LS)yo(4+X=e7fS}wr?S{#-$Woq7-51GLxbAmV=K<
zZJoL^N{85aAEOtyv9U0(2Ys&}*CJpK;|<IBQg7s4UQ+8xl~`o-IdZCq>7}w3b+!U3
z-GJBuLb85qKG(F%ZSobz0Uyz$E)MI5uq)FIR(@xv>->{r1YaJXJgEi|vvQWP^zZU?
z2))LMSl?_x%{UY_N+#N&HN_%7wx1bN*cB8~^k0}Z$#|W(b5i;uO=d@LI+9xJKDQeA
z)4g$@<d@V~BRW-?s|1*5WsMrcTire<Q+AA0Y-&kbAuer395oF@sKF1X9z17rQ<Fu1
zch?~Nu4B&nCr$7cvXrD`^WLMz;}$qJ>v{z5XDkN9=HJ3x;)Y@0waew!Cicu(mo{q+
z^!1FHED9KlbH|IW*K9bBb-fqw9@euE+l?ye3sKeC>66BaqV1}YGRTR5_jK!pcZ1VE
z`tYeJlO!Kho}AnmZYA1TESvQ7=+#ZI&9}wI@NF3`y}O#t2Qz#O#b@`Tre6#kc%q3=
zu~EpW1XSL$e9t=QA)_#2CCaBg^I8(Kr$@LzhqQJN32k?$$Y*!2T>bD!Xv8fijbaO!
zDgrK9qrUO^8Ex+iGfp^aLsGKm1Hy*ys4;}HyF<tgHVWFAb4YZl5=$M)aq{jv`qCma
zmDdv;#io2wXi1>1Vy{eKN_y>|!u66dAc-mB9xDp+{lLK6!V*%Y4&RNjxO<P<KvUZ%
zgSwuR%cm2nz{mDh+HyH~sGOnktCjBaC1eFceK_X+EUTr5dMo4gA)&@7*b+_?!j*HX
zsGE@}-A_7l=OcSs6%3^_1y$4{lQh-j$>_2=>4hjevrLpslBIEG9h=s^By5Ek#|g9M
zifAv=6+Va)b1L8?CFM)Z1sflZjvO97A9ZhLwX3hhRvV`(e2~4RC|OJliVyG|EcWHi
zUdK*X4@XU8)Azh<QkWrAoQ#})8@;xV$EZ`-*h*4DTYv6A!R1yW@x8k7)}uz`E=;r5
zx4`F0F)Hc@BRm$C@a@7`SxB_B`!dJrFy*Kp+rO)78$RdLB}h4y2((TpwV)bFWy<Df
zZ+-SGkKNtRSh)kaPkhF|uMJOe8R>O^tUyeKX(I-IZo}R~c4ZxUy&Ux0-J!_ARiEl4
zKTLim=3QU*4)lvDwJ}-dz~d$y3CQT&t3fUnUjOj{eII08?>yc{qcRsRH2KxU=10Io
zXLL9nxetDPLP>o)4vF8NI6q5dwth3<sRjO^%5zh~tlv_-9QS!6(<_6%9i}lXH+fl2
zdllqr10G5VL9HQY$?XqO!QJGmPkC}MVy0d)c*92kp7aOssreIg>SDgsBgw{A;YvAd
z|C$%?rkt1G_i{h6b<ys7)BP<l4bf2$jDkAc-fPo$DQ+LaKWu*Xa4p*T4ofYaLrIj1
zE0ZIf|GsbUbk}}am%p<{KgHjyj>@<M{i%qA7T)ymhM0B+bB9MctgGgmDSIr!$c#Mx
z@fjWk-OL97Lm!>{Pf%a<Gk>Jl*UFWCi!M*=U4nIj*hcy8E2{^`q`cB&#YZBtWa-(8
zt85;9I%&5{VryBlD-`i=CU~7anPsiT#9X)a2nu|`**rS`IsbHj>XtmB&uw#ccs6G=
z5B(Qdi6J`Gd!*}?G6#2M$cU>9#$9+GM&3O8qHYcYdKcA3pDJ0F`h$j!TYC9*uApfp
zLxSX+tgZnADg)X(#SiC^s}Q7zvq-ajvUFh-s!^-N3cTc$jX0NSBb*ag5D5sDmhKTm
z+CTN5?l#zr84L)meOs58=OwUgJTnnHcs%}6>N6NKX|%Jci0RF)2^#IVd@~P6mDg@(
za2KK+4*|}q?E9k$PWI@+xVop?QOIY^VE(2#j;XorR1BqN|0tWveWybO!}7PK{a-a4
z;I##X+G`f)rxFooMjPk+z9dmOJY@&y6(CX<dT!In35$hm3TGC_ayI4~YnzcXn%qET
zWzk|*J0NR_=D)E9i@zcvC}xFq^N488$g9F(mFm#9VupQ@4s)Iu9hG<0fv)6{76k_U
zo4FxuWXV89rCWk->>q=OLu=ZRQ%{BJ%Q;y0*d5Jz*+ywhEO}Q;yi8eEy&8I89<aea
zl@M)$S$)yu0o!<BuorXIVE;DqC|I+h{d@NJ7cn%L2h=_UL!pyi@_wH7=-a8wosf?+
zqZIxydebzKHeJmv;ye*b-fcp=HGn&+yLo~?A0b8t?oZ54C|ocuOYXL{D}7rvrn}0@
z!qNDKQj{{SH9Qrz?Frg=^?q_+&(Pq|n*6wy>X6v3m_{bSR$b@{3`1s!$qs6GyJCt0
zEHbe5zS|+WRWi6wMZa>W{n<Fm?qb&mzLe-6tff)K?g)-YO)Ug+*b#1L2lt{|c=AGA
zg9v-`XSZ*4N+&uCJn$H(wOy_=*MHYCAmoR-fzacPK25apM5vOfa-<di20ot_;dsX?
z`s-%6{oKd%0Xibi_ce?jvzFNCY9^gcjzv=)>SlBjI8o_Q9N;}4Mr^!0$?k5x!p`nC
zroTg>YK?ZUuA<>|Ge~O)11=~7#gl3_zA?pB<nCZ)(qpdvpjD>H{7(|*Bkxf2%&KDR
zT`N0LwVOMO8t+F`#;=r72Dce3e(3pDIKazF(Wg$a*VjlwOZF-Ts}3;<pRG9Y=FP{{
z+!Dpy+z1lIyt!TQ0jv(;1z{5H+xfJ0s*y_Mk3Wa1#Xk8c=Xqj(Bb`L|i_-ASOLX3~
z!)=C|cJc2W0`rR+`ASFhQKUThV1-S=EVHU|hLQfH!Xv{{y&KWp$pQtpz4Y1dlo~V5
zk?tK%*-zhJ#lvlF-llv5OKLTniiqOykf4mn0=&CR^l*~BkEQ1UrpKJh5T1?YeAwi3
z)Xrxijb*Ye2mui%82OEl_wVI2NRiH-S~u0|G`-(-@M`J*7*0Onn^CWfc_>goS+feG
zb~AJc4G{ft(lkt3rC%`_(6<m|C0NnrShuTN#`#e(kudzn>qX3k4#dIzX3<tMBlsq@
zZk^22%v`B415@VM;@oOHZBuvnZjr*M%A&Cv0xY_2+75Oc{3UtTUJ_=BnLg7y8)WLb
z8c%fJQ4I<>QI$6iDLhWnd`^cKl=1*X#`XXN1f&U4y+>`8=|4(0Bcv$(4p)@8&t{l~
z4OA3yGYA*pji=;$Y1q0X)04(6+?a0SUK}G75y)?<ZLVaYZX=cZq3~m7W_A`+ufRf<
zjEYaDeyJ%<08&<fsbyX^w@MzPEHDsz9Is#9{lx)VS9^+mYM*VD;<$fw`pC#Uo5(=~
zPvN6P5Fqo(m=!}=@VuIH`Qy#$`b93B>{ADP<tTKxn!^&z6H}wU#LUME8+Uo_y13w4
z5fO;6TDGI*w0b#l5OREOFg(4DiRc^*!(XJxG!4@lIc2lNE>X{1=U5p&!!Tpi|IA;p
zJLO@|N?Y(3W;?jWg{s~5=FQ5=uWXHoo_vOi^bTCPvh>}OU*5N^Vhmu6_V=4CeW=PN
z+$tlGL`23uIHKn*est{mR9t4GlVT*&FvUBdydTTzXqJ-EZ6cXoGAz*x@YN+i5-*+=
zY)a}B&-4R~_f|5g;|y1Y2pyH13Uk1P&2MJ`m&Dymd@=QNmjEZTRM6KxEc=7C<4{fK
zq*J2?38N>~3}V{eBZL*6G$vvG<PJ4WV&OAHvqZ#XNGOU=pPaQg3-~1U&~Q*H#HM}W
zR3mS)R6V1(f9F`utfF7HC$p%Cx#W9F@GEmvNim70_M)80Qgqc%v*q8K7&1kz^i>vF
z>kPGRVkcf7;F=O|obqwa3*F>Ije9n|BZQMA?~EQ)%mkx8yQL+_UG+GdsAeN+yQh-A
z+QF~IaJqbmTOW^G;%<Ngk$YHhgNR=KBSh==PqIVD>bi6J=?X1Wi2<!Y7@Wh<D^f>?
zt4+enC(8;N3Z=eiz#n}gL7TXf?k+~rfx<IE6+}&6$&1rU#@^*ylKHCj-R!+af=60j
zO?u+VV2Pc%V&jmb4Kl$VGF{L42D>WXaW&G?MIxqxfB|<(E4T7__0kH7v)4P-rvfkM
zz?4d&GkZOS;pWmnXWZOT9CFR<eYzUiyh$VX{3KUCMAgL@8wKJ7kxlEH)O-tidXE;d
zZu<{SY6h@$xA4T7RC1Ivu>&#+8@1Fz@7bB=_&Eos?JR%8jQ1~|Ne|Z$9(U{f6ks>p
z@`*xYI$va}^#{UD^zH@*K5B0g)d&7#iIG5^mMN#4xW11%V^*JD5OJK^^}=*=dw}?8
z)UYuyh{?t~S&%gH9M~T7pJd7?;49-iq7VVLYT9tDG!}-`@fqysbT?XOo0!q6o^*bC
zR$jPHbePGAKm#wX;j}ERgE!dM7;C?mvsQfeeZuz<iKxs&X-njOD?O&H&-aVB)$5CV
z7RAlj#ZTBIgxKkFUyJj#jGulb;?kWq!jQ)GaDTyEr0rSIhfY4P;Z$40TURGV))=sz
zM8+6ENE*B@D`ikR*oHSsk(g&IVrrI2lg#}UBlMocE1ucb7J<*Yyu+Dr1=jLUxr($2
zjAa>i@{N3Sbk_1rYq)0c--O|CSn%<k6_`}P`Q#pqA*b@*1K;#OnTUOG?4^k&!caaV
zG-5$s)?((wXrukj--17E;bogI9MjqTb-4P4A*=gQh=?cg#iUMOkG-T2NW)y`?D!bw
z;nhs;Y<u;<PvTaEob776$Ti0pv`~ND^6Rmj4=>+)8=YCCbV`;q;J<0o2rJU@JnS)&
zhv4?N*K6R_4tLMSDxAW1EIe!8$2NwRK4)AojWBF=wxC_9eJz@s?2gJDEtZZgFWD=n
z+Yq@y&K*ja^IFk|+iM1}k4FzVaeSJLvdDxJ3Kr#b>g$zm%QlU#<Q|d>*O~W6P|pTX
zvSxh~mRjQ7CJ4dSde8}=qxqaIZ1BO3nrQL9E?Za-m080Oofmu5a5S6>c~?4^(5Cj*
z3UC0tm7rTcU~AZXR@blU)*aQbOlcf<ruZevSa_#1#J`(dtR5yIbqkZOO1Mi(QuftM
z)=XAeXw9(sBy1!2hSU;ibLar-0q2U3--^HsEy|Z7lCLpmyBPLea1jNLkHd72azD4m
zkCIJSe=6D89*f>E*rGHKGOj7NTTM?S_jJPY`Y}1g>Yj-Eh0>@XRexPEd$9RsY_z;p
z#QK3=XF=`g6J+xCPuzWL{!%>$)VNY|J8seiK%TscWlrjWTPTu#5<TNz(`#?U^ih|Y
zd;Yi|!N>cM?_sDHO7Dm+xJ~SA+<{vJbwLw;;`ObLY?4^Lw(?Rqg@7Ms*gKzY5c-jZ
zo`1CB=fd-^tv1g+GX8Yw`A?1z|G}B;!V?1GW5@^sa*%LB-dSYh;P~4U0&?+BPY7u6
zA5RD%<mP|ygy6iQCxqm`d?6J6@P>E<Q2S3F5$Em@`eqmI0atU1xNuSe{7>JAe>+87
z<_+<e7sM4EAkKYA0RL}}5KxZ@sQ1J_E>~CcjyU(mx|)v!^exUmeI(8=T-is0gO!v0
zPag@Fr)o-rm8YRz)#d#flp$1lSf!;ST$;HWxy;=#AavyCom<j~c%(=a^hn`8u(v2W
zw{AbD3B=+U<U%ji;NI)&9T@2?<qVowSk+zoelqTwc+|4y^$^i)jkRj>sCx2<QCC+M
ziwWKvI84vQ$Ky~arspR9d}izD6}@*XtCvgAcVEoY3M2bC=BBt{uQq9>;Vj#MswAz<
zD%14=d?tOm`9|HGi5WBXsUOov6ZJ2G%BZLe(}cxD)4CoPnjf?ezf~_jBZ#SH<YDCk
zfp<S{qvK861W0U5Bbgqh&It7?8HeR_kCO9%cpp&AeL7psA3i;sZ((B4wR=7pC481E
zF&a6pSeCIWJ{nU)ukU2kN+hs2k&}Al13qd%7yckd6ujxb8@v&?6S@_!r+xIL^68of
zk4}-U{;2C3!h=2{jd$Et&Jyci$vcYP<hS1SEU@kOD}Iz869l#^gc;IUvFIc`LUcvo
z_U~%oDR2VHne)xRV63ew++!kMaqq;{^gjS=7KlVYEW4{245vF<K&eJD@5|U!rr%LO
zIAm*1U3P2qh5NG~&8m8?1u8?2SA@)o%kGbc<<=SL<qa|1Zb1z8i-^XK^Y3b2DjY13
z7;-TO;e@#dSBFyS;up{k;SW)n)0N@H`4ZM^G2uk{!hx;y%+0yjVDxnff`fpC{9NCn
zv2a4i^(ka^We^js<Gwc&*l5ftFYxrLPaWS5tJA@Z^Cyawa*3p-;*u$;DLXBlmY8@6
zPsJ^xDtmgobCPeC9<HR9uI172BV;KnCrd|8Drt9&vVHFMGR^W9`=o1e(g_iFFfRwM
z<KY@}Xg5s~u>By?YzEEt3~1LPolF0{-2pYW)JS!op-a<l;&73X)C$K6ca2G|vv+IB
zS!c6+Q|iFU7!Y4=<@h6B#4cstjdO2GE5D+sLf^{D_mDRAPA%GrOBSbNb7oiw;k!4u
zV&fuQOZTa<#K8Jrc^9=!9g}0}pWS35W9t2C^5qRq)H=eHu(3&#E3QW5?Kb{SINEwG
zVpQ5^qI%M|f`-GNp@s{ib}MDN>1GTq+)LtpF`5XXPj8^1U(Nsg;3gr3Ik_xReo@IS
z+X5;}T;dm4OXFWxp1CQ)HslENzwJ!HqX6S<2(2G<`OWyaI<6DlK~Bgg(U_<IhK%Gr
z@s1UysEz`8ik$JS%^Qj1t+oxU5ZUCgV#vp;+1l?+8TT6^hr<hR=Io2l20O=xN1S|C
z4D+IUP@ox-I|9$x;@genZ+37u<r6udLGo*Y5`w4s(W&iQ9jS5;%I>Vf36f{RtD0FX
z+=z$8wLbMVDnEGLa_bJRfni4~>r?*p2(B9(hU9L6!cAhn5x6-EwNBHkX6Qenvf;*P
zQ>6r`cj{MfCFt<?2ZfOUy?5LX7H{t=y;jc~7Y?n!ij~3qKH}yQ2?#)#ax^s76bm}x
z;6OTj!CM%zu_F;RZYV_gx{38Q#qygGI<uC-m>$yurjbUWT#noPI>kxeHx2##4ct9R
zbNTEirKb|^II=LZ(X%+=lE5^k<M6H6JQozyRFPNC`!Q&%_K83JG<GsDMz>n0RS;D|
zOlpEZ*F=}a14il-SdiDjC&Y+B$KTmxU~lU!iv7U`d#hi3+QVe_gGk}s-iQ~Aj6MiI
z#;|b|dSBMb5wzDJSw?u`e{hT2%jd7f2SlePhU!uvuan9=eIO3E$&;n!Ga-scP;w)^
zwf)sxZ6{orqJB``4Q!a=sFJs;H*FNP=}z&wyqLpr5iCeqh-YURI#M_A3h(?st-S?Q
z)Xn!lPM0(Sf`CYe#4gM3g0zHyAl)I|U4k?S(hY(%(jZE=BHi7BfD+OY0)p^=^E{u=
z=c~KVH~#1RI3CYB&b@Qz&YgSj%ntX(=}KC)hKlQhQ;%Y<_p{{9<`KMW#dmX>4og8~
z4fuk*(&b5`3)Y)~o@Dbt8v3yaJoLU_QK27n0F%i|nQz_CM^T_3CFzl>dP47d>ACb>
z%0Qzt+3x<AX_Q@qB`eXfRsLHi1pbOlpN@r@mYZ)ppfVC}PS&!?wW~u1-6Z<5$~BP~
z!F`hX@yLQti}^WQCV@KnDNA{^mP=A_KW;L8L7tB90J-8%3c)r{$CCN!y=Pd3UYLh>
zh~+Xoq!T;jdj?q^%`yBuGJPfP`$CjL3gu4fCw<w<=yql`zNT;9-5(a(qAVF=Rzq1Z
zZ0Eds^75=`))Y4*6ubH<ZxT`sRDOF)7Rq#5etd9d!<b<hw7&EzI5czJ-8=ji?FN@v
zt~KiAL!*IT3C_B&#}qh7y_7U(2Rpk=3=IaOMS7oYEHvTK<7ZDxX!^PK@GNJ$GSkP%
zS)mEsat=$I`cUMFRh0!^zI6<`U&OuWnwU9bMq-@nX*qXHE{dO3dVh9U=IA0*d)D6b
zHF2LDu0zDf>|Ms<J2<IRo;SQcVikLmdMbKpL_!EV0$#5?(zR9XQs2kLHN5Y#9??Gt
zYI>^5_VC6;r-9|B@x@V~>@O5ibJmprmq3+~d1^4OpKirypgk#Ceelx~?zrSK=F%KC
zf)rn-<Tn}#mbj1FY7{Ur3H*cKK)9`&>TNN#Bi7sNGP<cTPHB^*a_2Y2BwExN7UdEm
zHkk@OSX5h<zvJ5#HKR}r#p7&MP0=r*yK5vk>b$M?AWoJUc38#`QGyZ6KXni?h5yX;
zq47@*ze|r`x%E^!_8$Ye?b>pjiI}l91=~+V#>lJ<^PMXq3kFiJ)*lx0zEW^VjV-4P
zpB~fAgteNrw2I4r)V}IYUcea)b)J<b&mby?8s{14l{7r~hyjl|)l+4u^_Jx6NYa$u
znJBSN8BbZBd&OtTu;8Ed_Hape2&|V>+NX)e9J^)u+^Vbkqng;8ll_IwS?8k&u}jBC
z&&)kJUVOpoX8CCsv*{Jr)i2#I=lH-WAX<c^e;EJXrZqNy(y^PT`*f&gh(o5Fo$yGT
z%*<qmvob-^`VZ(dk)CC^w!zL)QGMvome5f&C+i<BYek|L8Bvkirw@`qnssrKcSzr1
z$Jb_09^NH9xf<EGyP~gf*q8f7;7FHF>M8|gPGp|mWi9=#ck5evG$&sb6O|ZY<*{}M
z{nlL*;=vX%okweVjC+#~f_p>nTYq`N(@|P69Ic-{zK<J(yTDwvDuF713GELp>g9@j
z1#yc?Bs$lBxYB9e67J#X=It7&RG=hC-#cA$Y<++)7*Sy_2nNrn^G)<6yc|!cav4K~
zNvQcfCu;J$YcM&K@at{+(CIHsp{qcvSA?(ZP74@{rCeSG=j;m|<eMZip3jivncx1t
zj<c$0xp$LNly`(-`W`(UTg2+zAk%^Px)uL9jPXkxT~=qDPkUlShSL`Nr_02GA@*84
zq7nAUG%}_Ol5%3wltV7(rN<2HsHEz~@9wb+D^e5nyq&2v@jk_A;bc)9Nh={>Qoj4{
z^7ZG8q20=#UIvC)ht#=ZK7ETuBKm!_g;({?WIQzF=ZOS{rDQ23dxGw7nlz0)a|=&A
z<ixzcYp%|*C6y0(Y(KUwoSLUn0~2tsMC>Pfm(t+)>v0Vy@Q6_i30bNnuce@oQL4Qp
z*zp<*zmSwnnWMk+6kAbRm?lG|Vq|^H5U)ipMKgOUh~Wv_JNJ*UWqrjjQ49|f7R7Cy
zD39+PVbzVE1>KjEk3sP(gT&;yCE~=JGesnI>0mxy%+ycD?|FSx{W^B>)aZqNBSGPJ
z_H>bu-lO`SWs1vB`vhL?47m!*WhfH#Dg}M<$$2-2tY5Owpr9l=iYLuFeiU<nX-T@S
zX}@;Ql6c3S|F9k()0yJKShKMkh;1!UuIgQjzpr)Siz1ENtLnZZ<iDa!!uaIE#qRRz
z+&iwm<b;1_Nafcn1f#q`y_weMMNf3uQ4BBOsUDXnR%P=z!;CQsSN-CAiL1B&Qc=(P
z%B@!Eo_ZKcY608M`U68W{9<Y;{%^E0w!8j%%>qvx(zvP$3dRi7v)LzZomwY!;ozJ4
z$g2-O@d<=Ehz3yX4fhF<W@fTSV}V==_jZU{CqC;6xQ2Ced}lA~*><x-PfGs5?S;dY
zKPh0q+#g%;BEgvtg(_)gs+)(tn)1A9sblfI9!0vG%oBkfWA3%vhZ`R=Gb#2~LqCmh
z5aQphJ_)C#pI2fXG)vMhnLh~cuhgU(wP%Fhlp9QIViFRYP`@<U4I;3p4N~JKmQBQ^
zCXWqplHs>y^sZT1F&mD%wJ9)y-uSs*!@OC!r{*rU8lm4=KoaV!!uECzAwtvS&f`2-
z&YgAKblXyg>e|hEjcN%=NO44x82;<AqeOU;N*Z(TK#im1qyY0Kns`-i<eR3c_*@n)
z+NL}PvQdmarom8Ou{}rP=&7#IK622R9!a_dGpXrw=8)X@F}X{|)2=#8_W+ebG`u-1
zjsxR~FI0093XLC6kJtw;!f`2Md<QhXNp#8z1d!TGym5glzn(;Aq<{8E;O@mcFvG6Z
zfJu)hD(i>3<%y`z!=L?l`$QAgzfAb#niS<|a2I{8=}_N6(UtAM|5P;vD=M*XW^q>)
zou{2d&vbnI{?})UO7|6}Pb=wxcha6QQN26t$vDN*e`7E%uJS#2S5daNJ<#bqem}8M
zl2t61(M11SBv*g$&^X&6`NfGcBg2!pN=U_o_zqra&SRN&G7gr_gFZ9qyB%>MCbDDJ
zc&h}LW+Y-5mE%8de34|QLIaiO3b-2ef=$Uy(ZTBU55ue!zcqmz35V`?7w!z?##6XB
zMP+Vf|Fr9Ch*LiImmPfGKNDadS4`)x*LcGBuvy6C&`BmtsQIN~qWz;HVhvP#{rvKu
z&GTWCsJ^LjIo?-G9kfqq!)9WV#n!%OR<02m_|%l=SOupa3{PJ%vE^lzWD{)2V=D&0
z<><z9Y~|J?(J)TeJ<U_2rz%cxk7>dj%YzbB(h@Lp<&G<u__O>mO<2?Aoh)<h1!K-)
z$UJ^!t-9L;yjBzDUTvIDj=%pL62F@rmNwgwEfV}@yDYG*)A-v*Z|;@lx8YvHv*Erh
z2ctGa<n`Y*ijOO!gN0~jyB1w2lq>E(e3X)(N)Y+ef;S=A?HjLdu5zG|;EwYEy7wlB
z9S5PAOuxH;P_D8r&LjVANbiF)ODdAZcvJV6JjS>S^8->2i~6{!>rLCNbEnT<1bV~$
zdZ@UXd$91Ht8tT=v-FdpG|Zjz!N~;)7F+y&e7$=|B%>evEE@eDCAQX`qv0pG(mu3~
zvY4k9C8RmNgki0ByJiwUP}$vF^2vtOtrH8>?tRXMMmWA8kJ1%TkJ>U!P80>h-^Tgj
zk?GKnwq;Ya@o#^Kk|F(pLge@wv@D^Kk}Ktt8l1BK$>yLdG5IvQJ*oA>9hyG87?GQ4
z)dXeCBzr$N9$xG$;&eoRA9+y!!p?VQ$`e-)jX#W;vs<b;=w}R}^ldvHs8~Ag)h+#Y
z=}b!sJG?-Ox_iP~ZFd&W-DWhav5!KlHn3PW3WF^S7%y6~-t21O^gJv?<&B*rc?Qk)
z1c@d1H@Q9waZn8BW#;1I;9%>=roj>?j~nzw2fat>!Qi3JymMdN{e(ax1N|#!DZCCd
z1j6f^uh3~GL(wAM6i%Y6s;M3(loP0#Y#Wy{F7hrnw~?`a_k+Rb*V(4N&Pw*L&1oB;
zKU|J*-z+kv*tt}<Fl!i>8<=CAJUqosmuPklPZHi&WBsyD$vbbfXI0$t%BFAhl082>
zJt|x?Qtxq!WoY6q%jU#tn&3W8I{R*E!_1fyt{!%GhrVo-%(*7?UO};n;;S;dZLgpl
zx<&($qoMQN%NIR2ZQQJyodoJpDkeU@-2I3p-LCNRS9WWFY^M^9`w12U`itY#5LZUl
z2Kc*J?oxTEgKlFT_eH`jUuSFS0=49<?!kweeH&<L_Q|yUpEh67pffzo!fq2?e5U1L
z`(k=hZxOBW!|H>US2u{8UVJH+=MMlsaj>g^xqqFX5FEkvDjPg5Czx_~#DkQSbaFAN
zL=KwPvD0xpMn8C^A^Wv0%BaWlxr~WlP4Apbydlneix@~X5o8+oOaIeaHWy;JoEM8U
z?INYuj!ftwjn5&EaU`AOowp=!45zO~9bj^Teb`>R275n~2{~|y#(#aj53!&r^Tft{
zKV9u^N>p+GHS?jyCN9rVl-vF>aXslvaa^{kcq#Z#bJv#(*jN}lP8R686lh=ZDVPTC
zd%+ndV1qX>0+$Y6P<$qPCyIJX{dDoP*(1B|N^+H#-f*(?n+26e=Eq;IB^J7~i!4dv
zE)l^29S%7b(~Y68>EHuFlsHKua%u5fNrMW`YEfwA(NGD~EYJy#-@W9ir|NG)1I-_$
zC&9H|+GvdLafX?oE369p)09QIe#t|TXyKAs%gMbH&Onnw<i07z`la&*TaFb(@N*a8
zv;_rgb&ir&M?l$JRpAGZ?8jrNpKdKSHQM7UBuJzB!s<>9AN9vMsEj?bq2`&RkSSe$
zoIc$~<JwF0=3_TnvBfr4)jMp(+ai@SqKr%`AMU5q<m(l=zqI$-S*GMBGW0%m#oAJB
ze2}F3UH>^=f(hxvuir*hcq~Y`Y$-CNbn)x?zx;}Sq2w?Wx7Wj}Z75baYPS8ly1FB{
z<S3+|q@=5>x&)(<T$pk9VV!CbY;M<ii|XbTIH=~u!E04fbc;c`;RM;|Z=C7x5mU=*
z*jPyhgSz-JFm9NT=B`vq`15E@@8M>AatI}$Ehm7<;_->$HS}NYC$F9lwXt6|Lz;1=
z1T>e+TA=0m6PwmptDaCy;e?`6Slv8%yrHnyS;Mq?N5f#&v%9bFq%#iFZZ&&fyri$p
zn5NN9(_2%lvppJBmbm@tzVF3eSIm|0Q2}9<`cI$YWzxr?nUvP$f~8+(CRy&%&ckrt
zf<&c~ixVSUI$dRxZU-l6Pa2cyOO00se|xuJwf^&&oXyr5Etfj%17rMg#OIAJKWxGU
znCfs0C_4aZ=?ncahZgoc8N2Uka<*=toDsQkEPp+zy(3*yFy|=NI(0KOn4|x04&!k2
z>X$TifrCjxJJHL+ZXII_@5@B1mxRn3LaMiO3!`*dDR-HdY+bX(@-@F5Hb^%Z;HsG_
zMyvFZy?7ExPBhg$E1{UzITAXqMN}wW__MOqdM<{RglvJ@g)Y`VohD2xa8W`PK0(d!
zn36@I=R2{}7us~5(X{I5dEx}7SkYv0OYeijy56qI)~wv^$P}KXJHG~$9c1!Jardz~
zYzlU1N!7`ogo5>MW!<c2wI`dwLbHxnG_7G1Y$GRKq;jYbajDj%MOzuoikjv}v-54H
zu=kIAwgYSQ<nMljzJ!V^kGtToHr8FBiD7>6i@nNOFj4z^i<kDhwdOC>jE~n-Xz$KT
z%e;HRYr~~8H&t^pg6Mm9JZ@B-Rx?iwO+|TL#XMEsIn6vi$<q1($5(n1Q_lF;-z_h1
zB?M7?bTHXn(?I2<oRL@HYLs{~l?><pV2frPYd`f<Lu_ycr8~U+rgi;s+^lzetwJ7D
zkSYCcS5={7#g}=fy#(XVU)8hb3PiZ`xY>LZxAAKxeO7n;w=2SP$?s+=J?k;cjFw0+
zXBG;mf8>)C{9IDiP`(pa%%JF@PP<H8@SJ`zyy*2ExoXnh#u<rJa#t54HdMnKP4&y!
zh6myf22;;Byc~!z;+brI#Gc?hACe*FI&{+O(=pKRn@X)jKP!5n^h~b9pnCI{%RJ|;
z%Z4sgbh{SCQVvskTvLvOuVI$dKcj=-``A)at;+fz28-3^Ec45Yxka}8+qmhuEyG;^
zUA<Wyklxv#wXV!%aJcyRwxoK)74_E(9kFx`?J7aa2Yc_J*edcxZjP%nf)<>Y_&Nkh
zvADxCAp-?`orI_%2O@pN0i#E>E=(B&8FE9j_V}&Mez=O5BT2zFDQ#hvf@#$&`d`Bf
zK3(D%uSX{xXD&a_oqQp1n@f&m8HdI!XrP%!TTw-)9!?s28-1@$ma>mqW9obVPR*LM
zn6IZdxz2E5Dr4UClmyEckSTci9>+`Cta#E_O0ULd^fbpO()B2ZWqQ8({fhQgwi@=u
z<&XU)@t%Drvu*C|ep>rwb@?7c{lm=YO}y|&@-b`g4opfgGO&U)bURF>zTwq~ZCT$_
zS?gkvek!xyR1|8fF=m)B4Q);HK6=yf#xgLuwvytOy6*Vv>L$HLB30{(h0tC%KCJ-5
zNbW)$sB>l%ORm+Oto<gJ=Bl!m48JwoEtCD&W|GC0R~9eKJYX_d&t7li5Pj_qVaBn#
z$)K{;I0O~irCFIifv7>y!5F^ngzYUCAA_H@DaYDBtVt-V<td40e(v<<#mgX;yUFuZ
zF*ZKkJ3HkUIec7M0rS~vcFO8%Y_?}n*+di6UN$5BqBujc>Bm1P-z(*9=RRtAvAZH6
zC1Q0KgiR!Kr$E@*+73Hw^`cWW^Fu?*4L53ak_t6rW&X9XS&Ibxv&G!Z>Ux^<-7d!Z
zivj$pB}@96fT$JlzG{hzzzgiQ-qt2fPakR*!BeV^;U9F^b-lWog;N!C?@ZL|LAAbQ
zJVHK0zVGdx@OzA^$9%qHSk~ej(@nb53VtcH?M1E!pK_HqUF)DzNRdQ)yfp2-p>p-m
z&f;*k5miy4V!^rO1<flf^KQd9kAN><d)I0M0&06uD)!sA9y~2O*wLM#Bw5^bYuovd
zvtP#O|H*y7uf258$1t-H^MW+pn|7#qC_AnA+cs#2TP`9mRk6Z1+m7}4n>^O1(ZLJs
z)vn9e$EVC`6ot8sLAfg9xhAC;`XLP1taxrH8z|qhB_A0xDd2WTM6Iu`>uG_X+D|;^
z!cTcPz5!-rBYmmDMKi@BuOp}2$SJ=@#K0)k)GM7{Q#`9@U+!MxKPFU~tJ4LX6P}fO
z*1TC4Gf`dj2}P&#=^lcgMdCgltMPCV^Ooyaw&ToOLx+%L!|s2+vNmvdqW@E=EI+bp
zSI$^wY+>TD>B$G4rMh_5;}mLcnA;~hcUPQ-_idlIN6N#Tz8vwt812P9{HECEo!4CG
z@?=Q}B|nKPh?zE<(p6S)tR!!Kq14Jqd$ZO-!BSgV-cDQFu6T@rV_jbEF!F<BEj}cp
z*>%if-6%}6gp$W8hF**=8+VOj&$PQRzl&MT3{t123FXh9=!jv=`07u^@~&chpVTiC
z2TR1n{VwdsLR-PyP=Kys?G^r#B+BQ=r<ZLJBMH6gtz2WaLl)1r@~EMc+Ykq|y}*X}
z8rk!NADvRR!W$#0-(?dMVY;vK)Y14KYOu(gkOvCgjg1Qg=ag4|)X+|JP)<5v+6m_#
zQJ}_o;A>{@X0Cs)4*Et<2eqe9#YR1&hsJg(l)O_*rO)|>Ko9}+!TX%19u@q}9&0D<
z#)oXOk5=<L3JVHl$vx8rbLkX4YAsUC%)=#9E78Q2u`1vtywSBVQif)5)xBEADrxK2
zza$H^661^$@YnY5lPfsC>L^<ZE->XJTE|$$%coBrV2e{rNyW2UZSI=-D3O;lqop*W
z{RIcEqjBH5#LU|*3pZ4{@STnF*E@{7mG0yu<>b2jv|l&mB<78wb=Fq5xJS7La<=e`
znudY}X9lIinw~JoH4-K~SpjZR65N-+_z?0Jl7~!!eZBCAgv_9-r8BS*AH5cN?&GnM
z8n!TQE!Td9`Fp2ld@BMYr8SGLtPd<}IbBYQFSk%V!`7&A%Q4=flui}Uu6+F#!(n{*
z0F{z!ubn>wbK$uevyZSsw>WxH?3DCuyc|urc79D+<M4am_O75_)VPaNCGB8m+J=SY
z#f~4!nHg~p4yo}jXLh~OWwi6=GYZ989%Se*fpt=1gmT=@{Fvxt)Tz!>xbK{0HC}8s
zyN<&T-!v|+rWB53Ktp15i-=~ka<}Tef+T#G-iN#9%&gSU{~~P6<H3!3&o(~{BDG;|
zzVVgCG30e78HawfP9~4Kvv!0t27~&WQoNqyT#0zMp7fVWi7Q^WXcQIjBSaa9`p^A8
zg|y!(VD!-AdwrJw^O5M12CBTh6lrg`e09=SwI=ES16{47&&K$ot;4nt_-5F7on0}c
z3WONvAo&b-OlRG45@ehSot89253)ET?Td`u+l_x16g5b!$7a6qj(ine0^3=?(m$ff
zU|GKz)c1hqM=>a0^gGX6BciAuiqsoU&9q*tKS&jw^`t%cj0#Ndu~>@2#eUX2C#s%S
ztE+iE&u|kjO1f9Im|qONN6#$oT}|sRy%ZA?r-dSU+PpOxtpi3f>W#V<v4`%GU&V(V
zB_nT41ZzlU?r-CZWC-Fb2DKhU|5$d>kHy$`BMrG1<T8S9;0r$g=JYl4qw>@JZS~SX
zzfdFIpYZhkNCSF1SJajoACJ_1&FX-byn8L$E?L1_xPz2|bA#j_cC~^#s@)blze?6_
zo4rmIQx(^W^dbzaC8Mq@OVrn%#w2Igfsr<l{G8PXRpWY2GDa)ruSXR~9oKw&I~wkQ
zB2l&Wn(<SEV6{ss-%eIJKNi`bega#v=-T6=6THsb-B*D(c2y@msP^YA9&wPgb|&AH
zrb%Qcw5n&L4Bc9;t$4rJN<`=Ece&9vZ_xTphVkjU(Oj+NS~>E<^}QV~80uN4XUyal
z5s!XLU`%aZ(2$BX3vIe#4o{is(MLI!PZG3d4(=YGo1Hp-EoR75I*2;nnLXuUinn4a
zh~c*Ii`S<uTzJUv^Xr{Cm0fc?3Y>WUQray3+v6+l<_X|H5o?dq-8)R56fGSzCJgF!
zN_t8rKQZOpjw5=vPjQ5Y=Y)N{BSraiOZn8U(K9$=nd}Enk%s2Fp6u2E#(Xc4@QJPB
z0AxaPpOhmQ>+S+eSO=A|&o|hfXvvmvujr`meS8tr2eas5gH-Bh{Uo;+losL2^PcW&
z>(7R{z7tV&Ngu3`NwHI5mwBdVHg)U1K{@cciW82@ElM=?6%wvyJXU|WbWu9d?N0gh
zVmSocl~Ja%&Gv`T<`dp%5vuze&Dga$ZWvoB*p3S~Xm*<Wr15AtmSUp)0*F0SDCt1-
zZV9*^%31Gn?ieVpr!LMM^Rsr-_YEi)jN_3<Gh)TtOh7^>^~?h1X2!~6X}*Xv7+Z?I
ze9SHM*2>4cHisjVQa8a~4&5|YD~(hn*6XTw=jV9gS$B-40m@06U7Og4;w9f0>m!|2
zxEDd<I7;5mGp&7sgo9fP9n$p|*-s+we1z6B(qyMTG5dw>bE)5Ep~{0!s_63r))TZ{
zo|O~UmKwg_a^Y1^EGUl8UBRf#wrTDsP@h!0MfUMWlh4vGbUm-RnJ0Azoc(DEJJC(N
z!Y#&cG8$b{#0BOmK{OsRhy5<kMBgQ)Pdgh4MWc1KdbEbL7mYT2sfR==S~&{%ecs`I
zbTP4Yi9dxtBXfT^Yq<6}@b=dPJH|bRE}8o&JGIOgwTaz7sX<ewOtx8Pi|rZ2p$T{N
zu8zfzWRHH<HJ5qJczD}bUP<i|;?1>;I-Jhd^ex6E2u%gGVQ-VS$DuC?33xZ3^hLEU
z?VKmX?Bc8_<WNLuuHUuh)HTfE98K-peZ?IpT`8v&m(0;4N0!W8@iZ%x;?b3;bm0qm
z_AKLDYT+I&KTK6pd=I|LU?v!LzrDi9#|sNVeoAy*Ip+WJlIXvy&-3?FqU&O+T-ShG
z0zk!ZD4g$~-V*Ws@s<b*ydL_mw?w?ai=qGKEfN1ey(QB6S8)~y1pGgiSoyC4EB}5}
zq``Cjq{!&Hm<mux<$tW1VhWT=`Rf&s#qZ@$u8W`80ToaF$6_Z=e?Qpy|5Lui^Uta!
z*LB(cs9N$H@Z|r!Y6%o5dG`B@98U{ZRn5j9B+_F6#Pk$sxL`phrr;5IdJL6~PXBjp
zM{A2s_j<?PO`a#0ZF0;y?~$8?gBCC(aES$bgT*#qe@c8cATso0;8*R#-L%v@pR<~(
zo0DC=o81;YM0Xa<Nf>2_?@?@>6(vSud{2+^1bt(7YP(VOlKtLVC&_@J#E1>svd8Gi
zGh1m$2#SfshnI1el!j$^X6DT(&$`8DpBgho9GlM!#Z%p{-SP67Dw{2>s$6Ygm+kdb
zr5rNc@0!p$n-KNmb5jU}GqbyFx?V`9#bzdD#KopkX2z3nl005WP9jMVIF8x7I+4H9
z*}ke35-0B0FyA#usu6sqFf{kcZRObWHq-6=%9k^P2lZUQQyyJ1#(0K=x_sLhIr-12
z?`&oxr%z@H2LvDvZ6BrN3rIWqJ2Y0fjHyY)n<XSkD@f;GeCu#u;b#bcDZWi_!0JxQ
z7pC7~Z%qC!?d1dDSNVut!fHB%jA=nxT95D1Ly2#MMRhPRL_Q7DdSuH|OYA_p+@WHO
z2MWKX(5zreyhmyhM&9w1A#sU>?1d~wgjRH2@GV&;(pYst<L@{pI4m8|cwv=xipte(
zKj%lE*!9SIS?7E1$k5UVo4XFWOt{2@zI45gJX`iW*D|)<o{|5;(6w;q^TEex%2uMJ
zkjp5Gm4#Qt!pm&H18RHYp^n|K_m6ah*!79I*hs2zu`o`8Z#>WJ^-HzQ+76a7p~6Aq
zt&K>%^#qjSb77|#B;#p8=pq%{E-n)~=)jmGO<PDd=2#ljG+*oz=%u9o_1FVnq87#6
z1<f*E!DbvSgP7^2HH_*ZwN693gjQQ9pV2Hxt&6VzWz8>K)DRcJn?Dw-e8FMUgOcsa
z7qnaI*3_{&E%RGWYUCcuLA=R>Hts<3+Q;f)G2Q7fM-xra!tj&WJZ<OxB<c9=>e#i+
z+GHw!{99#MrEy=Ghb7*>-E;c6Ea5Qt?siJ6h)>DwSaO3JJ+p_C`KqBKy0)3B4gF;k
zj}+Mo=VPX^TN{|YG{Af}pAabA_6mzxu^RHvQ6oC=AIs)=Jz8qnK#$g1V8#1WJe7Fj
zym@`$HPM;Xu9V61g3S*OJ*-M!IZa(#)$Wn?A5>dM>6Fga2{S4fyyR51bcw9TE*9Ap
zd0yB0afkCn*^xr;`(3YoE{~CHF&r>|S5(_GYVS`qbmg2UW2J9_(@4PmVLjVoVI6LK
z5yKmYX7X%R)TB+mX&vW}U?lF&OK1<h(XyHn7KP7oj^o}pRF{W+U9c@F-Pp*u*h%Ai
z!6U&8Sr31wM+6oRVAtf4{u0uTdGN5ss43*D4_5g;))fcb8gC<-Z8J~&X4s3Q+oLnL
zWIa{2zxB?^<W}ZoCdZRK9ep-3>@k_xNQi!r@Fp>7z5_e2Q%&yDU_s(`Se>f=;6S-K
zzeor{%!8!|<~KyCJ4#KMD<t1Y>+O@Cbv@58)PFzc{XKW%XU$^wlE|6W*Co<8xjxak
z#CkikxyT?RwUwdZPnKf4kM{)q>dp=WVv5>>d<JDu1>7w&FW`qJlv{!{RA5Mw?2<>j
zk1e~5j14|G8`HXJ!n25JC<*UjVtDR|FO#$jeE<%8JtZdQ@&|K1o8enF@E0z6$-A$1
z+rsu6686tRvy@n|-$3-S4THw-hm(9S3+6CCP^RG9?T@`NU~{3P8^x84QB7PFPm&aj
z;VEy*i3hbIyjhZ4{<P4TqyC&cGtK$x*9V^x18u7kOr~_g^^dFjQK6wfr-OIopK-=p
zU-qt5lcUn#tDG5R;KUwGdYeO(VprUUI{)G40Q0D>aqVvZ3}(+gZ7BsA*7O<Y80%&y
zr=>(H&CFBVaqR)JTcl{Lge@Q58?#LZ*fu8_`|Q4VU?$MlgX3Ma9Jf8+6QvGjL}8Mx
zzv<*FwIx}UgbtHh8Z31@2^4pfn`NPUX#WXg5!F%>A5Z(ei1Aisq?Nx=tl^l_8vdzh
zwj-aC1oJ1yWY5+R^(&^})WF)q)pRC$u3Gf~hF9%t{_?3!f$Hgjzm9NIc_>aa{3-GV
zEq|o7V^?^)=H5^|4b*v|$o9q3?j`Px=K)RbFTU2nObc5Z=vtb6ZznPKYJ{Pt-n0Am
z{ux$u{g1nob8`l>k#)BjTQWR94N+4^q{3~p1@7G92;?{UNqv|#SvFHJj%{O3^NDDQ
zbgoMD9xF_T<&j$1bTf9(j%TM^e*Q1F$HmZ|V{Ohd5qcpbyUHo51*{xRhiQ}ISY0(~
z*$-^>s5ibw2QyRuLaS2394qUc+Ip+BRKmsG_`<`*x6rwCOy`NZ(j>(_ZHY4C3M{St
zvoMRLXP1nubgp`qw#Vo&$Cv5UF&|CvQ7St%XQ$!~Gm=vDV>2FfN_R_*IX#yRtm19A
zHO!yT(I^havyW;wIz*`~c*Mwq;cxJm>p}OdAKS=Dy}i*}d&a>Ab2k19R=c`Qf_c}c
z6&WJ-rg6;})hHD$6Z$8pH*Yj@@lR1Z-l{J*P<=jB-XS$ck#u*#;pV4MxrW0fv?}rz
zJCc>3dI8SUB=o_1t{kv$0iz{3WjasZZI*DM>AeQiSD2emuVG8v-5LrzPk36(4bR|t
z5HTYXJ-z3c=ufI-h4&;!VR~BQ<u6q_LqU(Lw?`Y75o!{m3wUWgKQ_hIQ<FP9!lgtA
z_c~Et&pfBG%V|?XaTT)}_E>p;^p#?cTvcN?W-(TScA+jvuz5ZUAKZ&h^)0m4g61rl
z!f2zvDK&=>I1==X?B=9ipoL15jhLe6VDTBO%<kP^3hRt~?A3L;eLQG$exh9H@wwL*
zPXxQJl#YhhUl;T826_H8jaE^q<*qh5ikVkkZ<r76!y~G($uWMGayjNWrXs?X=clE+
zA7vdsp``C`sBS*J!j775<98HkTJ`6d=5nGdf!yf&sBw&P(GrD;{gV7*HNC*l*4^Jw
zA|=1)39qgjmhwd=SJQZPgJ274Q2@D?t@#1B1;2HrWjRZgVv+1*AvytjdBN?+)i56y
zsn@Q13y;Pj#MT76;M*ur>|+7%kG=!ADxxT#_kxmU;)TTJ(ID%&t!mhnVgcF({UZL!
zcuGX;G@sO+8gn+|A8b4zfSjZXnO-_|`}GA)b}wuyH;MB(&I`GpxLHzspi{i1GTvm0
zY2>xcw}tD%E__N@F=%!ohRR5C%HyRM)H&SoeS6o}+*OPgXXhEpXCHW2%23CX_Qi&G
zN?`=L4$evSC`FA5!hseuoC5bp@ZEOX_?d=9pKUEJSg9s9u7oq(qmi1>-1i&!(eqLA
zL85_H&rS`RlC7)Ge!)h-6x&n*Q*H|887ILvF+~=QzWbtr&j^9HAj((_cu*AF-uZNc
zV#{w8#Xpw|Ebn<Agj$$zLeAmypR6e@(NLegtD}uJsm0^qX$&ITYcK!OTERJb<*;?x
z0y0U(@$~m3TTfqC3{^9k<!KwZ*CxcFkvPn$ts7{7zHC}BxKw<#X#xNBUMi!I`b{8R
zC08Mcu|kPGU%y07N3Fnl(;sV_=mDcf#iPe$8_V(`e0@!oSpoVtBE=jgQ?14+)Jwjn
zreMBgMjhZ@J5NY>3iCPTM6XpW?O#d8lUMz<A=ORO%@82G_~vkBeSg|x!8I8}P<O}|
zb^S)#sNJ*Lg>5VeBDNn;ca$Ypf%JVI$8W-LIz47xW`3%M)8a(M@(LghI~E7vNfvHP
zCXBqY+Se4v?J6F%9i@_b2?<)$-87tpJ#RkKoTR9;#*;47wnCd?@<|)Tn4qXxovkI>
zzQOBaE%7U6dG~(8)9%!#@W8C3q~wAr>i{JS#|CsCM=4S77!How*&PF)IC?z?Xz9tf
zM!wR#cU(B5G&e&i%6GzAytXXw(_9HK`}F6cH!$&tR;f)+=xQEM3X|v%Ivn1=$8Q{q
zzxXLiy24QQAlf2A^=7JSJd*+|x9gSbHs0j3?~?N*hgG2^W?e*YZ?#$6b?g{nx@3+R
z$7d3=QQkVdhZV6H?uW6_X>?=0W3VX;^dfHxT#v`yTyruJQqyES`hq`q+_ALq8(h!I
z70=y<FRHYfDN<(g!i1psK5RF&(d|akOJc50Bc_&YpafpOhtElo2~qS(I)3B0_DJUi
z!I#w<diL9n^*^taqn(_1J|2TL4>q@}ACMYVGEBY2iRE+_CZLn4DNVyOK6<=sd^2|j
z<?!><*|3(o<O7@+V+=9n7&NHru1{pX^zpHgGok1_rd+dNUNb9BR0-25>_`ONEEdMh
zr!K^cC4DXtugc}n5KcC<<#@+b8MahkF#p8gwiozCo4gxL)iPvC;UyFHTx=LlvU}Xp
zJpJ_SY^TQe^>k1kl64#NqmzwjlM&qKmo6RCyA>=J+!&ElqRsU<d(9o^Vio4ACfRJt
zLtmGFv~XE=*nfkvcrAIc&p>P{c}q<?V)S+Xkz537e|mlH+c)e=lQVurj5LFis-vzD
zzaI@n4!aq4o{m(U7Ym|fC!&EFdPCxd_%^w>2yWZG7APEWv!-cvD?khSWDK@>RISbR
z)avD<EDid3vk%5Kltgrd+U#r3!t#c+ab@^yFjGQfDu2<ed9E?65EYKyzsk4S($}H1
z#PofZT6aujRsYqsb&tRpcYZ;3?fKkDc%kDBXp=V!VaR?S)W#K0%-S_m#gLO`0aZq&
z<_`9*p1<}j-lhrJE?(i{rOdkeK`}hM^0ki{p>JunetvCzy3Is3N_sQE{LQzhR`)Mj
z^D!{CV|#hjo*NQ#JQaKQpM4#&BGJKf_^x}8{EQx#4|OmzL}NgH$Y$f$7CU_NCzrCS
zi-&pwGaDr)s>xgVoaT+3>L*!0M$^SjQn8p&$-9~+tZR*jS_Op+{8y;RZgUj~{3`IT
z<e(FVHEYHCvuvmhlcMiVb7L#wD`c0kEtQ1On5X({5|Fq5+Lj~qevZ1}nA`5j47Zdl
zis2)()-Hc+ba_mCdf)WBrp)W{P{+4&+k%EhJSWx43WV^gpLOR;VQ+czjEKB2xy0m0
z%gokmMK3nm;)p&|<~)MOeE#0KfL(~Ht#3fDIQ&>{IGZ$q>}y1Rn;NHs#pUc!;}K`o
z!89?8jU~4qt`>2f_vBFniRC@9yoZqEQmR<&FU#UDaq^iNVBS`1pGQrb8H+Dsuo>3r
zjYZSwprPSj_l0~3=sycN;#RiO`txy%=5u>HH>?w`vD->HO%CKiUmCVcRQU9iy{8)M
zeYEP=s|{&Z1K<oeuyE7`>!yvWC<WL<``1voD|L2L<g7dmoMnc-^Vnaa)E$M{x8Jwz
zS*f3!d9eg(f4)%1jZ*o^WWwmpONB&b3w|_OX+eEeU3Km8gqeB^!{)DI@obEW?(`-U
z0x^f(_ZG$p?mI@-U6P^|ez_@H#4{a8lfM16@0aD#{{1UCcZxe6RnuA+g5qHds-Ija
zc8MXkHt+c?RV;<PuQ*ooIP}~XIa>&?+K?itbXrP#*jm~+u@FpKDs!97GB(B3{}=te
zy$?C*u2RkRH)2iD`&_Z&qK$2q)+Zg;mk-jEhR=S4I!@(J$Rs?yG962uK3k^Y<DGMR
zv)wnbf)TkKi@7&6tDfNm3Jrge(C>eXO}M1wBbCwVFI4A+;~>$tk?uXwmddM*GOW>@
zc$zy!^qkhW`?lSmaFKd)F;9_-9r#}UeD#>_=b-Nc0=Mw?b6R0B!|!$<>}zx*$~w)n
zzVET?&pvISjdR-L{`}dcW@z<9J*<y2rh3_N;GAISNx^<oX~%hj+UOa3A`?_U9<2vM
zR`qH+=#F6?Z=}*p)ZNLe6`b193+$oHl^f-bU4^1;%qZMU%Zb{e^lg=A?@B*YV746#
ziRHEFa%~NFLgY&MyCH|kR>ylgY}~|0Y95p)fhd+xI#mOW^vNIohf5mm-`d^O%~lCA
zFqs2);@%xh(xWpq)SkH~vNq&T>6M~vhPq>Yho3X!cPqFQ7p>}&YM>sJqo??u?~0C|
zI&{;@(2)z{Q(H;w*P8^%9dFmStLm+sfA9;jzAV_JD`I_Cb^A;ERB+BW7b!=4GBa0u
zu1J`qG3X0)#@a4vb16*xuA+RZMnv%l8v#d8q7lzIT_NQV*Vaah_u6O_kszwJa)C<P
z+v0Jxo8hXvowKUUUz1i(zZIxvL_OyD<+<^l5vu_IaK9wRujt|0uqYp;4hGT1&Z@rM
z&R|k#o72Ioq{2~Cd|2AJg`-ZyF<qYg^TYB!wy7&CPm-B~>RYYmcRV7xmp<%s)lyP=
z82aM|+DO9*g`c!j(Wv!#M~&*N*`t3glp+26%xB#GC{WMB<*Q1Y<-)M{?I#4EZUi*M
zwht@tZ$PM@=ZfWFzE)iSag*}wQ&M8pn7PG#Lst7U^YhZPv$dyuyS)OX(~;e@8QMlY
zpF^kcHp)XD(KC|yR3=}(N$w6}V0Ven;!1d3s4n~JwzbWxv_tC3Aig)v2~_q(gn|ho
zp*%tv9lCu?e7zS2^)VUU?1|P<q}doH48@^eh4<xDGrp-7l<S@Rj1C`=f5leVo3%H5
z!p>nCQ|srTP56REQ&Q@Uw@bf_=#uBiE_v@Z`@_hZNqt=vnh&yXK2Br{=U76jR~q8a
zk8r>0B^(W0rRnS^)zau5CAGHSp|e*GFO}kN$W%KIu@GSV;62|<?Ii*yfVvoue3Bd2
zepr3JY#Tw`0@i!HcXRx9)XY-!&-#c3mirr6`SsuQV~ryN57X!E8s@+6TPrJFF6~q2
zh>%6-OAg-a2+XYRd=hK26<^!!XK{~nLxm=UZ|U{ghhB#CWZ3AZyeSp3H~O^}pFd4v
zZc1Ey<Q1al6>PsjhCd$&r+KTsX?I5PTtwINgPNs=t}8{ke;wNQ5VKn$tji&-(9by`
zTuHqWnO-isX1<4s21<s0D^5x;CsC*3u<!ETiT)DGHTjK6YbxrE%46l!s`yF)Td5Dy
za}ACZE}}2agGC+vz)zH3I=&rOehATXm|6-`=XrFrUYGIB^5>-vaqq#05f}KQGTby%
z_@ID&*@VA$Y}TCw>M&yx#+e@58bQ=#&$}CJCkEe_<bW(ZaM8Y4Iwy<Z98;af{ASQa
zRO^_|E8^0AzOKsQ;E(S`{pH^((cRIBV7CENN3jG+6sYT#lfIKSe6eihoD8S&)udI_
zBYZW!i*9eEX>U^UsDOt!;zvQ}u5PF_MChI<QAy96=ElVRn%kqLhmw>=fwQd-xcIqn
zGmSDoB*aoamLL?4cH{WoY<h%NQ1exoto)M#*8Rq}xrJW_mJ&{eJy0qK%JY+`EL~~5
z!p6+f@RFYO(x0qjD`vIwJARpXXD*ifv<4n!6$$1bWrut>#~gXGYmqok@T+@nFOytg
z!8ZNFrRCgS?vwG_k#v_X3)OguEX|iuwS+M@J3!-3<Dar0;&}D<4+%JpS3^#6^R@OC
zxAa-XI7c3bzDymqe|Mv8S!Hi^>0MFUTJ5W5^NL!vogSWylQu^Id+q_VAC(#Ds_oBa
zQ3;zrcz=4@I5V%x(V?179U_K_k1LG%V1Hh=dD!<nE-Uj@LZ)`s{3i{=>9Mr=Sn==n
zmy{Q`MfKBPB`dSq;~Loamp|_A`)<0ygR1d)khmVFe2w+8tQEf%d;g3DUVbN}TGV>y
zz54_0yB~6Fk9MO#<Id31_O_;_g)wsetv(Zuu|{aT-y4)FhY&~}fj69vw6KCURC4@y
zjB|<Z)`UKL^Xq!$5x4y>-g((3+MVEiYO&^<)lZ2S!0lk;k1(U!6;Pp5QBhpyqg&L&
z9<a($Il{Ta7;$Li($eF30V_O*Br=rHm_P@7E*BU@lP+)1TlVhBw#n|h)<KXVb{?Oe
zw|le=<bf7@#op*#KEi}MLt=bt*yL6RuFt`gv6x-C#zNBAd=a-TDAu!5rQ%X1GF>kE
zUwv-h7v<|0QVbg}gK2YZ-r_)GrVK_0rD`+V?C#il@v`N%I2Y@ff$^A0^EJ>P28}Ks
zxQh7_-Bez5e_S>0;DSRV^6EA`N(zlE6AzNCr&`NQCKHsJo@~hJg<gIv%yr2K|C~ex
zF)zgoz1y;AjA0F)E-b1zIo~=rPWxCV6ZR!R3UqGv?psB?gX59awqH#N-t&XwS=;(}
z^b>r7N@XT&KkBd5=he=PC^OX~D}ML*Ol{o0P0>GmGC@wU9ZV<Ew{p|oyxmsutq<Ab
zcQ4f-aemfX??WSMFwu4VPYwi!65CC#-Ua%Ewnx(HkX-no7u{Mh@k_;-=eU{P0(K~`
zEBZJuIlBP0PzI%Uonp-B>DA{E%EwWeQcd2Myz!Nybg`ro=SF?d4;|g-cs;>l4x_it
zw1Owl)N|DiYeg(~mqb)OLOUa$l74JPWA|M&NVRTyE;*l0bL+Wb-cnJm>e7SdI-A|0
z$8r-KV9BPcN>#9?<`(9{bTrfu?dwie)0Euc85T41qSF(X8J)xz2N-xb4TahCr~5zY
z*1B7jPWQjq+N#2q1=l#<SG{K(!R~R%kW~haz211lA;{PG#3&$&LJy^L3X7}veB0Sz
zK6*7lypp?EDV@@Tmy_Z~?rV4+OI4ctIyyLldq80$X|dI@pllcCc%!4Zd+CNF>)~ma
zM&*l$_hyg$EY72Pn}>HL({*d@<-N7i*iM-U1|sy!lF#36Mi6(2R)@#1jNk5vfaQ${
z?B%AQrb*}G)}<IrJPx6uS+@AqytW%zrj`NLHLd*IL1}P-8_hwPi>KE2-qUutX{*zL
zbvGAG$bwzCv;R8a{UVO{oMWW5&?wyoQNd~My8}7%C`y(TCu<o|?>Duk1GfTC{i;-{
zFp<Be`x}Y(_b=-H4buBx1?#mG9{syoJqQ5a`_K12LZVNB>iNJ|UG&Cg7FPDctb0xG
zS?R4zg;_QE6?hdKADCHMJ@j%mQ}t3*Gx4%95in&H6~Pk{H8OQDHsg9~<j7_ISDAbl
zdNUUjVTK1PkE9u{J3JM9YUgMNU<K1ZwX?N%5qv7l`WJ~H@cFu#hn4=XF0MAhtXc|6
z^sWvLwl-F-^k8lQZV(rU?;gFmGl16M;oxjT58{Th0xX?P%>`8?rT@hc_?IxNrK_u>
zAP<j+hX=O@AGd?E1rJC-K!ArA%mW5<0X?`}JndbLo^si{FaqQKC5V;Qf5_}zxc`!g
z8vsDyvC`rJar5&0d!XyDAFmOi02l)L>w%4o9o$@n85sV>#qqb%|6l|B2f&99m>%#+
zP|4ZB)Xl`qS(sHu=@Gq*rGty>-)!kYyxhECZV)Tazb5v-j0Y(5pT!1N;9qhJ0eu7&
z0Q4erPe}l=Km^PShH&wMxp?7fU_L>JfFKy8BgBKy30NqA>cL+?4*v_)Z=HUla&T4y
zR!+pi*}>eL-W`BkxK<d58_dVe`}bgfk^QTe5YM$Lf1B$6aq>ov3JU-8^zH1f4eGj|
zprnI|n;lR~K~_?j)y>VyRFKce3}kA~C%|QHW-h=50s(*V0zX`EGXY~WUIBhSK3>@W
zbsbDi{v(H@o3rg-CTD8G17L1k59tCd1qcwt)I`wS!P(Bp6)<{7M*ywH=r1@6z#>>h
zgn<8awF1yMME){paa-5FKiFDbo0g!hk-dd5>r*aMGjk(1TUS;Qb^E`1oBpjkTPu;j
zKm0|<^IyFFL9>4~0UHKTGS7duqX-`T|D&J(cZ~ka2LUBagjqeVJq%J=li$AL{`an8
z`)@WCJMgvtwM7G_cx}^cl7iQJffs;l2lGJyXcrw`URK}_&<)rw|4Wa5nJ?Qv894iY
zV8fp}o0$VxJb)qLU7Ob5KlD(3egNRsoc^yi5Ddh7jq85>LvR0g8z7dzHDuiHZ6Fvg
z1cKPcFCcIY0Q7r5;4=u0z>k-g56TMw_x#=u0J#UmLTD3!K(B!@|Ln&P6v{(rg9Dob
zVGIxq0!NY$28CaPx&Fxyz(Ypl2j%7EM;P~7=4-Iw-)Vtfa9)J@0{R18<KF+?4+P}}
z3H$@?HSX8%{djqyz#xCN0sOA(+x*cF;Kv6+826eMNzVXs??3TFk`D&JULnjE7?%%8
ze^6fjYrMHXWCq5##&7(y4aNrp5W9YFyXGf=sCy_c^cu$V_kO$p#vEclU`y~K$pQl*
z+aF+6*C>yF@B?U}07TWFZD2SAC_nUj8z3J9aa=&p0@u*bzxU$>gW*u5F@Oz(&<611
zN0J!|0t7_l$Ik~tSaV)5jF%5_%>jPM@`1pJ`{SDS8iDi=nfU;%BFqDj5Bd-C@m&LI
zA<_yU>W`0C;2N&$_kP#>{y{!|B!2+V3Lwz(@&Q{0!G-{Suz!#b@Kt|~3(x|}LTrQb
z1K?nY^1=Q=KG-!>@$d5hwmCl(X$%2~0J6Ox`xhuk;2OmHPksW(I)DKF9a%m&vV1@+
zKwJ+9U}}i+L10iY!aM-|2_WkaFc$<n<ppT3QU3mr830N{w9{*T{~#Y9qFn(V0(1>m
z^(Q|df*`bkU|{4u4Fw>25#|8|BVHt5$IlPDhQIrLjB9@XARqJ^TKD&UyZ|jfg6@G0
z1CamO4`=}WgZ|)%G3uID0C5b!4iNXzHNSt54=|2D$K?fR;fVVK3b;gsF#vvGWch&2
zg=iZ9Eut?593mg04zBqj(t@CTU<iU<u4!S2{s0PxLJ-ys;Kv6+=m+ro3li{;^#EwE
zfr<ZU19SyPSfguxh%pr4$Ipi_1}`uV;Qb~7KL`x5AHWZSlt%#J7ts&#!XPky#Pxu|
zLH}US5JX=B$Oi|2ZxLjHgOGFz2fQ|d4gmT15%(p)PXLDK4**&u`-21i1z}u(ACQIo
zDGLw*Kwtzt^TGlDg1F}JfAXhbC}N%n@I#shFF=bFf8heKf3RmHKMwGNAm%>204<Ww
z5#R;DIuYgu1Hh{h=5`(NkbFBpixkfV04*TzH#jfC-U9dm+1a1t@&dGo<MIlC;fOW_
ztOxuWI`enC2lxTy=l*QFroF~y{k<Qr0N}I{*AfO6K=e%@z_TOm1%MXG#s#hu%0I^d
z<P$)W8483R1ikPAw21QnvI8U^0i<=jz}xCS<^jm}7n0$ha|7}}g#88t6yRWlKnw7L
zBIpI+2SLmyuW6C|5RkYd*)EI^I0zt&0c0CUaT=h7A?N@EXb*}wH-H~f?hQO;MvP_G
zw1_z?Z~}uM=^n-hM#|Bl{BXoraZQV8FCgGV2}1B2z<PkMF^+%NJqQZe0iumxpGFbq
zc74P_><2_-#JmLHhjjJ>lng_%QxHE891&yz_#yfYfFB=Ho&(S#=@bM9%om9t1W5-_
zU;`uWL4X!%&B1^M5p4qotU02cLZQg#RWJxxVgy;hKyHDkdl=w%5p@8-+X4kn|6C)0
z7SV?RP8^PSHU-ufcsGwg3xxuS4niA1ixj&7%RtQe0e(;bZT3%DpfKP7htLLu1w@|>
z0s{dZc|D*=YXr0)?LmMR$rl5z^B?vv&=ElvD4+zyH3Dc6^C1wBHX-M0d@!VbPykmK
z(e44-Yp~-#_7QM8M~dAr;CPNm3k7m-M7;pCNO}QOkLY)S^?)PUE?_Q5Imq?31>(4T
zKpKl^2Y}l}vLPr8xPd{O8yq;mA+`ws7di-S06(NNA{3xSTq8aKq<ae>m;;F1i2Q(?
zF~o79aNxcSp&vkt6aye2z)K+Xg8@MDh_pcVhj`us0klZ|9s+C-Wch$g6ofGVFNqXa
z0a_%#aebykS`Q%gL6jNDm67}qK#O!&0O3cDDKH4~J_4#CgAw-!gr6TN&Ol)QaDIaT
zmncZ{1rj@iHh>l}-vvS7K=y;s4+h~wiamh4LcAlprbXIYz|9TPSqR_<M_ePQ02nDw
z1GGqS<~q$mTuT@P!iTs<Pyq-CaSVVKX|M7F=UT*m06(PI4cwq0o>u|G1ulpXbj1&W
zBE?$Zwgf3oLj{1_Tx42gen8+tTuXo-(is9O060%Xet<b6&JBn>NHG8g0ZtnTv@pPH
zB905tBF%#zaGi+b0{jFJ_XjX6;&~bb&?4Ps05d~cBjB8ecy|M2Dqy5s6re?l3;aL`
zK-4q94=IlTA_`)z3<5HKBp)WgkDRjtrx~O;4V(gy{Vo)S7>~ff^&jtVx^i_k0&vBh
z@q~ovc~q^u%&xx>pyyF>aB!suR)}7Oo=4W++<_jTpjQEYr%{q#S4cwOfi&QJ00WTX
z;}wVUN`U#qLDxG>KtdcW^#CUFzxU9`1B!FIxEeXT{`EBk7`V9u0dEtSr5;P;{eS7R
B3a<bF

literal 0
HcmV?d00001

diff --git a/support/dist-docs-branch-23.06/ovn-sb.5.txt b/support/dist-docs-branch-23.06/ovn-sb.5.txt
new file mode 100644
index 00000000..4e4b174e
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-sb.5.txt
@@ -0,0 +1,3972 @@
+ovn-sb(5)                     Open vSwitch Manual                    ovn-sb(5)
+
+NAME
+       ovn-sb - OVN_Southbound database schema
+
+       This  database  holds  logical and physical configuration and state for
+       the Open Virtual Network (OVN) system to support  virtual  network  ab‐
+       straction. For an introduction to OVN, please see ovn-architecture(7).
+
+       The OVN Southbound database sits at the center of the OVN architecture.
+       It is the one component that speaks both southbound directly to all the
+       hypervisors  and  gateways, via ovn-controller/ovn-controller-vtep, and
+       northbound to the Cloud Management System, via ovn-northd:
+
+   Database Structure
+       The OVN Southbound database contains classes  of  data  with  different
+       properties, as described in the sections below.
+
+     Physical network
+
+       Physical  network tables contain information about the chassis nodes in
+       the system. This contains all the information  necessary  to  wire  the
+       overlay,  such  as  IP  addresses, supported tunnel types, and security
+       keys.
+
+       The amount of physical network data is small (O(n)  in  the  number  of
+       chassis)  and it changes infrequently, so it can be replicated to every
+       chassis.
+
+       The Chassis and Encap tables are the physical network tables.
+
+     Logical Network
+
+       Logical network tables contain the topology  of  logical  switches  and
+       routers,  ACLs,  firewall  rules, and everything needed to describe how
+       packets traverse a logical network,  represented  as  logical  datapath
+       flows (see Logical Datapath Flows, below).
+
+       Logical network data may be large (O(n) in the number of logical ports,
+       ACL rules, etc.). Thus, to improve scaling, each chassis should receive
+       only  data  related  to logical networks in which that chassis partici‐
+       pates.
+
+       The logical network data is ultimately controlled by the cloud  manage‐
+       ment  system  (CMS)  running northbound of OVN. That CMS determines the
+       entire OVN logical configuration and therefore the logical network data
+       at any given time is a deterministic function of the  CMS’s  configura‐
+       tion,  although that happens indirectly via the OVN_Northbound database
+       and ovn-northd.
+
+       Logical network data is likely to change  more  quickly  than  physical
+       network  data. This is especially true in a container environment where
+       containers are created  and  destroyed  (and  therefore  added  to  and
+       deleted from logical switches) quickly.
+
+       The   Logical_Flow,   Multicast_Group,   Address_Group,   DHCP_Options,
+       DHCPv6_Options, and DNS tables contain logical network data.
+
+     Logical-physical bindings
+
+       These tables link logical and physical components. They show  the  cur‐
+       rent  placement of logical components (such as VMs and VIFs) onto chas‐
+       sis, and map logical entities to the values that represent them in tun‐
+       nel encapsulations.
+
+       These tables change frequently, at least every time a VM powers  up  or
+       down  or  migrates,  and especially quickly in a container environment.
+       The amount of data per VM (or VIF) is small.
+
+       Each chassis is authoritative about the VMs and VIFs that it  hosts  at
+       any  given time and can efficiently flood that state to a central loca‐
+       tion, so the consistency needs are minimal.
+
+       The Port_Binding and Datapath_Binding tables contain binding data.
+
+     MAC bindings
+
+       The MAC_Binding table tracks the bindings from IP addresses to Ethernet
+       addresses that are dynamically discovered  using  ARP  (for  IPv4)  and
+       neighbor  discovery (for IPv6). Usually, IP-to-MAC bindings for virtual
+       machines are statically  populated  into  the  Port_Binding  table,  so
+       MAC_Binding  is  primarily  used  to discover bindings on physical net‐
+       works.
+
+   Common Columns
+       Some tables contain a special column named  external_ids.  This  column
+       has  the  same  form  and purpose each place that it appears, so we de‐
+       scribe it here to save space later.
+
+              external_ids: map of string-string pairs
+                     Key-value pairs for use by the software that manages  the
+                     OVN   Southbound   database   rather   than  by  ovn-con�‐
+                     troller/ovn-controller-vtep.  In  particular,  ovn-northd
+                     can use key-value pairs in this column to relate entities
+                     in the southbound database to higher-level entities (such
+                     as  entities  in the OVN Northbound database). Individual
+                     key-value pairs in this column may be documented in  some
+                     cases  to  aid  in understanding and troubleshooting, but
+                     the reader should not mistake such documentation as  com‐
+                     prehensive.
+
+TABLE SUMMARY
+       The  following list summarizes the purpose of each of the tables in the
+       OVN_Southbound database.  Each table is described in more detail  on  a
+       later page.
+
+       Table     Purpose
+       SB_Global Southbound configuration
+       Chassis   Physical Network Hypervisor and Gateway Information
+       Chassis_Private
+                 Chassis Private
+       Encap     Encapsulation Types
+       Address_Set
+                 Address Sets
+       Port_Group
+                 Port Groups
+       Logical_Flow
+                 Logical Network Flows
+       Logical_DP_Group
+                 Logical Datapath Groups
+       Multicast_Group
+                 Logical Port Multicast Groups
+       Mirror    Mirror Entry
+       Meter     Meter entry
+       Meter_Band
+                 Band for meter entries
+       Datapath_Binding
+                 Physical-Logical Datapath Bindings
+       Port_Binding
+                 Physical-Logical Port Bindings
+       MAC_Binding
+                 IP to MAC bindings
+       DHCP_Options
+                 DHCP Options supported by native OVN DHCP
+       DHCPv6_Options
+                 DHCPv6 Options supported by native OVN DHCPv6
+       Connection
+                 OVSDB client connections.
+       SSL       SSL configuration.
+       DNS       Native DNS resolution
+       RBAC_Role RBAC_Role configuration.
+       RBAC_Permission
+                 RBAC_Permission configuration.
+       Gateway_Chassis
+                 Gateway_Chassis configuration.
+       HA_Chassis
+                 HA_Chassis configuration.
+       HA_Chassis_Group
+                 HA_Chassis_Group configuration.
+       Controller_Event
+                 Controller Event table
+       IP_Multicast
+                 IP_Multicast configuration.
+       IGMP_Group
+                 IGMP_Group configuration.
+       Service_Monitor
+                 Service_Monitor configuration.
+       Load_Balancer
+                 Load_Balancer configuration.
+       BFD       BFD configuration.
+       FDB       Port to MAC bindings
+       Static_MAC_Binding
+                 IP to MAC bindings
+       Chassis_Template_Var
+                 Chassis_Template_Var configuration.
+
+SB_Global TABLE
+       Southbound  configuration  for  an OVN system. This table must have ex‐
+       actly one row.
+
+   Summary:
+       Status:
+         nb_cfg                      integer
+       Common Columns:
+         external_ids                map of string-string pairs
+         options                     map of string-string pairs
+       Common options:
+         options                     map of string-string pairs
+         Options for configuring BFD:
+            options : bfd-min-rx     optional string
+            options : bfd-decay-min-rx
+                                     optional string
+            options : bfd-min-tx     optional string
+            options : bfd-mult       optional string
+            options : debug_drop_domain_id
+                                     optional string
+            options : debug_drop_collector_set
+                                     optional string
+         Options for configuring Load Balancers:
+            options : lb_hairpin_use_ct_mark
+                                     optional string
+         Options for configuring ovn-sbctl:
+            options : sbctl_probe_interval
+                                     optional string
+       Connection Options:
+         connections                 set of Connections
+         ssl                         optional SSL
+       Security Configurations:
+         ipsec                       boolean
+
+   Details:
+     Status:
+
+       This column allow a client to track the overall configuration state  of
+       the system.
+
+       nb_cfg: integer
+              Sequence  number  for the configuration. When a CMS or ovn-nbctl
+              updates the northbound database, it increments the nb_cfg column
+              in the NB_Global table in the northbound database. In turn, when
+              ovn-northd updates the southbound database to  bring  it  up  to
+              date  with  these  changes,  it  updates this column to the same
+              value.
+
+     Common Columns:
+
+       external_ids: map of string-string pairs
+              See External IDs at the beginning of this document.
+
+       options: map of string-string pairs
+
+     Common options:
+
+       options: map of string-string pairs
+              This column provides general key/value settings.  The  supported
+              options are described individually below.
+
+     Options for configuring BFD:
+
+       These  options  apply when ovn-controller configures BFD on tunnels in‐
+       terfaces.
+
+       options : bfd-min-rx: optional string
+              BFD option min-rx value to use when configuring  BFD  on  tunnel
+              interfaces.
+
+       options : bfd-decay-min-rx: optional string
+              BFD  option  decay-min-rx  value  to use when configuring BFD on
+              tunnel interfaces.
+
+       options : bfd-min-tx: optional string
+              BFD option min-tx value to use when configuring  BFD  on  tunnel
+              interfaces.
+
+       options : bfd-mult: optional string
+              BFD  option mult value to use when configuring BFD on tunnel in‐
+              terfaces.
+
+       options : debug_drop_domain_id: optional string
+              If set to a 8-bit number and if debug_drop_collector_set is also
+              configured, ovn-controller will add a  sample  action  to  every
+              flow  that  does  not  come  from a logical flow that contains a
+              ’drop’ action. The 8  most  significant  bits  of  the  observa‐
+              tion_domain_id  field  will  be  those  specified  in  the   de�‐
+              bug_drop_domain_id. The 24 least significant bits of the  obser‐
+              vation_domain_id field will be zero.
+
+              The  observation_point_id will be set to the OpenFlow table num‐
+              ber.
+
+       options : debug_drop_collector_set: optional string
+              If set to a 32-bit number ovn-controller will add a  sample  ac‐
+              tion  to  every flow that does not come from a logical flow that
+              contains a ’drop’ action. The sample action will have the speci‐
+              fied collector_set_id. The value must match that  of  the  local
+              OVS configuration as described in ovs-actions(7).
+
+     Options for configuring Load Balancers:
+
+       These  options  apply  when ovn-controller configures load balancer re‐
+       lated flows.
+
+       options : lb_hairpin_use_ct_mark: optional string
+              By default this option is turned on (even if not present in  the
+              database)  unless  its  value  is  explicitly set to false. This
+              value is automatically set to false by  ovn-northd  when  action
+              ct_lb_mark cannot be used for new load balancer sessions and ac‐
+              tion  ct_lb will be used instead. ovn-controller then knows that
+              it should check ct_label.natted to detect load balanced traffic.
+
+     Options for configuring ovn-sbctl:
+
+       These options apply when ovn-sbctl connects to OVN Southbound database.
+
+       options : sbctl_probe_interval: optional string
+              The inactivity probe interval  of  the  connection  to  the  OVN
+              Southbound  database from ovn-sbctl utility, in milliseconds. If
+              the value is zero, it disables the connection keepalive feature.
+
+              If the value is nonzero, then it will be forced to a value of at
+              least 1000 ms.
+
+              If the value is less than  zero,  then  the  default  inactivity
+              probe interval for ovn-sbctl would be left intact (120000 ms).
+
+     Connection Options:
+
+       connections: set of Connections
+              Database  clients  to  which  the  Open  vSwitch database server
+              should connect or on which it should listen, along with  options
+              for  how these connections should be configured. See the Connec�‐
+              tion table for more information.
+
+       ssl: optional SSL
+              Global SSL configuration.
+
+     Security Configurations:
+
+       ipsec: boolean
+              Tunnel encryption configuration. If this column  is  set  to  be
+              true, all OVN tunnels will be encrypted with IPsec.
+
+Chassis TABLE
+       Each  row  in this table represents a hypervisor or gateway (a chassis)
+       in the physical  network.  Each  chassis,  via  ovn-controller/ovn-con�‐
+       troller-vtep, adds and updates its own row, and keeps a copy of the re‐
+       maining rows to determine how to reach other hypervisors.
+
+       When  a  chassis  shuts  down gracefully, it should remove its own row.
+       (This is not critical because  resources  hosted  on  the  chassis  are
+       equally  unreachable  regardless  of  whether the row is present.) If a
+       chassis shuts down permanently without removing its row, some  kind  of
+       manual  or  automatic  cleanup  is  eventually  needed; we can devise a
+       process for that as necessary.
+
+   Summary:
+       name                          string (must be unique within table)
+       hostname                      string
+       nb_cfg                        integer
+       other_config : ovn-bridge-mappings
+                                     optional string
+       other_config : datapath-type  optional string
+       other_config : iface-types    optional string
+       other_config : ovn-cms-options
+                                     optional string
+       other_config : is-interconn   optional string
+       other_config : is-remote      optional string
+       transport_zones               set of strings
+       other_config : ovn-chassis-mac-mappings
+                                     optional string
+       other_config : port-up-notif  optional string
+       Common Columns:
+         external_ids                map of string-string pairs
+       Encapsulation Configuration:
+         encaps                      set of 1 or more Encaps
+       Gateway Configuration:
+         vtep_logical_switches       set of strings
+
+   Details:
+       name: string (must be unique within table)
+              OVN does not prescribe a particular format  for  chassis  names.
+              ovn-controller  populates this column using external_ids:system-
+              id in the Open_vSwitch database’s Open_vSwitch  table.  ovn-con‐
+              troller-vtep  populates  this  column  with  name  in  the hard‐
+              ware_vtep database’s Physical_Switch table.
+
+       hostname: string
+              The hostname of the chassis, if applicable. ovn-controller  will
+              populate this column with the hostname of the host it is running
+              on. ovn-controller-vtep will leave this column empty.
+
+       nb_cfg: integer
+              Deprecated.  This column is replaced by the nb_cfg column of the
+              Chassis_Private table.
+
+       other_config : ovn-bridge-mappings: optional string
+              ovn-controller populates this key with the set  of  bridge  map‐
+              pings  it  has been configured to use. Other applications should
+              treat this key as read-only. See ovn-controller(8) for more  in‐
+              formation.
+
+       other_config : datapath-type: optional string
+              ovn-controller populates this key with the datapath type config‐
+              ured  in the datapath_type column of the Open_vSwitch database’s
+              Bridge table. Other applications should treat this key as  read-
+              only. See ovn-controller(8) for more information.
+
+       other_config : iface-types: optional string
+              ovn-controller  populates this key with the interface types con‐
+              figured in the iface_types column of the Open_vSwitch database’s
+              Open_vSwitch table. Other applications should treat this key  as
+              read-only. See ovn-controller(8) for more information.
+
+       other_config : ovn-cms-options: optional string
+              ovn-controller  populates  this key with the set of options con‐
+              figured  in  the  external_ids:ovn-cms-options  column  of   the
+              Open_vSwitch   database’s   Open_vSwitch   table.  See  ovn-con�‐
+              troller(8) for more information.
+
+       other_config : is-interconn: optional string
+              ovn-controller populates this key with the setting configured in
+              the external_ids:ovn-is-interconn  column  of  the  Open_vSwitch
+              database’s  Open_vSwitch  table.  If set to true, the chassis is
+              used as an interconnection gateway.  See  ovn-controller(8)  for
+              more information.
+
+       other_config : is-remote: optional string
+              ovn-ic  set  this key to true for remote interconnection gateway
+              chassises learned from the interconnection southbound  database.
+              See ovn-ic(8) for more information.
+
+       transport_zones: set of strings
+              ovn-controller  populates this key with the transport zones con‐
+              figured in the external_ids:ovn-transport-zones  column  of  the
+              Open_vSwitch   database’s   Open_vSwitch   table.  See  ovn-con�‐
+              troller(8) for more information.
+
+       other_config : ovn-chassis-mac-mappings: optional string
+              ovn-controller populates this key with the set of  options  con‐
+              figured  in  the external_ids:ovn-chassis-mac-mappings column of
+              the Open_vSwitch database’s  Open_vSwitch  table.  See  ovn-con�‐
+              troller(8) for more information.
+
+       other_config : port-up-notif: optional string
+              ovn-controller  populates  this  key  with true when it supports
+              Port_Binding.up.
+
+     Common Columns:
+
+       The overall purpose of these columns is described under Common  Columns
+       at the beginning of this document.
+
+       external_ids: map of string-string pairs
+
+     Encapsulation Configuration:
+
+       OVN  uses  encapsulation  to transmit logical dataplane packets between
+       chassis.
+
+       encaps: set of 1 or more Encaps
+              Points to supported  encapsulation  configurations  to  transmit
+              logical dataplane packets to this chassis. Each entry is a Encap
+              record that describes the configuration.
+
+     Gateway Configuration:
+
+       A  gateway  is  a chassis that forwards traffic between the OVN-managed
+       part of a logical network and a physical VLAN, extending a tunnel-based
+       logical network into a physical network. Gateways are  typically  dedi‐
+       cated  nodes  that  do  not host VMs and will be controlled by ovn-con�‐
+       troller-vtep.
+
+       vtep_logical_switches: set of strings
+              Stores all VTEP logical switch names connected by  this  gateway
+              chassis.  The  Port_Binding table entry with options:vtep-physi�‐
+              cal-switch equal Chassis name,  and  options:vtep-logical-switch
+              value  in Chassis vtep_logical_switches, will be associated with
+              this Chassis.
+
+Chassis_Private TABLE
+       Each row in this table maintains per chassis private data that are  ac‐
+       cessed  only  by the owning chassis (write only) and ovn-northd, not by
+       any other chassis. These data are stored in this separate table instead
+       of the Chassis table for performance considerations: the rows  in  this
+       table  can be conditionally monitored by chassises so that each chassis
+       only get update notifications for its own  row,  to  avoid  unnecessary
+       chassis private data update flooding in a large scale deployment.
+
+   Summary:
+       name                          string (must be unique within table)
+       chassis                       optional weak reference to Chassis
+       nb_cfg                        integer
+       nb_cfg_timestamp              integer
+       Common Columns:
+         external_ids                map of string-string pairs
+
+   Details:
+       name: string (must be unique within table)
+              The name of the chassis that owns these chassis-private data.
+
+       chassis: optional weak reference to Chassis
+              The  reference  to Chassis table for the chassis that owns these
+              chassis-private data.
+
+       nb_cfg: integer
+              Sequence number for the configuration. When  ovn-controller  up‐
+              dates  the  configuration  of a chassis from the contents of the
+              southbound database, it copies nb_cfg from the  SB_Global  table
+              into this column.
+
+       nb_cfg_timestamp: integer
+              The timestamp when ovn-controller finishes processing the change
+              corresponding to nb_cfg.
+
+     Common Columns:
+
+       The  overall purpose of these columns is described under Common Columns
+       at the beginning of this document.
+
+       external_ids: map of string-string pairs
+Encap TABLE
+       The encaps column in the Chassis table refers to rows in this table  to
+       identify  how  OVN may transmit logical dataplane packets to this chas‐
+       sis. Each chassis,  via  ovn-controller(8)  or  ovn-controller-vtep(8),
+       adds and updates its own rows and keeps a copy of the remaining rows to
+       determine how to reach other chassis.
+
+   Summary:
+       type                          string, one of geneve, stt, or vxlan
+       options                       map of string-string pairs
+       options : csum                optional string, either true or false
+       options : dst_port            optional string, containing an integer
+       ip                            string
+       chassis_name                  string
+
+   Details:
+       type: string, one of geneve, stt, or vxlan
+              The  encapsulation  to  use to transmit packets to this chassis.
+              Hypervisors and gateways must use one of: geneve, vxlan, or stt.
+
+       options: map of string-string pairs
+              Options for configuring the encapsulation,  which  may  be  type
+              specific.
+
+       options : csum: optional string, either true or false
+              csum  indicates  whether  this  chassis can transmit and receive
+              packets that include checksums with reasonable  performance.  It
+              hints  to  senders  transmitting  data to this chassis that they
+              should use checksums to  protect  OVN  metadata.  ovn-controller
+              populates  this  key with the value defined in external_ids:ovn-
+              encap-csum column of the  Open_vSwitch  database’s  Open_vSwitch
+              table.  Other  applications  should treat this key as read-only.
+              See ovn-controller(8) for more information.
+
+              In terms of performance, checksumming actually significantly in‐
+              creases throughput in most common cases when  running  on  Linux
+              based  hosts  without NICs supporting encapsulation hardware of‐
+              fload (around 60% for bulk traffic). The reason is  that  gener‐
+              ally all NICs are capable of offloading transmitted and received
+              TCP/UDP  checksums  (viewed  as ordinary data packets and not as
+              tunnels). The benefit comes on the receive side where the  vali‐
+              dated outer checksum can be used to additionally validate an in‐
+              ner  checksum (such as TCP), which in turn allows aggregation of
+              packets to be more efficiently handled by the rest of the stack.
+
+              Not all devices see such a benefit. The most  notable  exception
+              is  hardware VTEPs. These devices are designed to not buffer en‐
+              tire packets in their switching engines and are therefore unable
+              to efficiently compute or validate full packet checksums. In ad‐
+              dition certain versions of the Linux  kernel  are  not  able  to
+              fully  take advantage of encapsulation NIC offloads in the pres‐
+              ence of checksums. (This is actually a pretty narrow corner case
+              though: earlier versions of Linux  don’t  support  encapsulation
+              offloads  at  all  and  later versions support both offloads and
+              checksums well.)
+
+              csum defaults to false for hardware VTEPs and true for all other
+              cases.
+
+              This option applies to geneve and vxlan encapsulations.
+
+       options : dst_port: optional string, containing an integer
+              If set, overrides the UDP (for geneve and  vxlan)  or  TCP  (for
+              stt) destination port.
+
+       ip: string
+              The IPv4 address of the encapsulation tunnel endpoint.
+
+       chassis_name: string
+              The name of the chassis that created this encap.
+
+Address_Set TABLE
+       This  table  contains address sets synced from the Address_Set table in
+       the  OVN_Northbound  database  and  address  sets  generated  from  the
+       Port_Group table in the OVN_Northbound database.
+
+       See the documentation for the Address_Set table and Port_Group table in
+       the OVN_Northbound database for details.
+
+   Summary:
+       name                          string (must be unique within table)
+       addresses                     set of strings
+
+   Details:
+       name: string (must be unique within table)
+
+       addresses: set of strings
+Port_Group TABLE
+       This  table  contains  names  for  the  logical  switch  ports  in  the
+       OVN_Northbound database that belongs to the same group that is  defined
+       in Port_Group in the OVN_Northbound database.
+
+   Summary:
+       name                          string (must be unique within table)
+       ports                         set of strings
+
+   Details:
+       name: string (must be unique within table)
+
+       ports: set of strings
+Logical_Flow TABLE
+       Each  row  in  this table represents one logical flow. ovn-northd popu‐
+       lates this table with logical  flows  that  implement  the  L2  and  L3
+       topologies  specified  in the OVN_Northbound database. Each hypervisor,
+       via ovn-controller, translates the logical flows  into  OpenFlow  flows
+       specific to its hypervisor and installs them into Open vSwitch.
+
+       Logical  flows are expressed in an OVN-specific format, described here.
+       A logical datapath flow is much like an OpenFlow flow, except that  the
+       flows  are  written in terms of logical ports and logical datapaths in‐
+       stead of physical ports and  physical  datapaths.  Translation  between
+       logical  and  physical  flows helps to ensure isolation between logical
+       datapaths. (The logical flow abstraction also allows the  OVN  central‐
+       ized  components  to do less work, since they do not have to separately
+       compute and push out physical flows to each chassis.)
+
+       The default action when no flow matches is to drop packets.
+
+       Architectural Logical Life Cycle of a Packet
+
+       This following description focuses  on  the  life  cycle  of  a  packet
+       through  a logical datapath, ignoring physical details of the implemen‐
+       tation. Please refer to Architectural Physical Life Cycle of  a  Packet
+       in ovn-architecture(7) for the physical information.
+
+       The  description here is written as if OVN itself executes these steps,
+       but in fact OVN (that is, ovn-controller) programs  Open  vSwitch,  via
+       OpenFlow and OVSDB, to execute them on its behalf.
+
+       At  a high level, OVN passes each packet through the logical datapath’s
+       logical ingress pipeline, which may output the packet to  one  or  more
+       logical  port or logical multicast groups. For each such logical output
+       port, OVN passes the  packet  through  the  datapath’s  logical  egress
+       pipeline,  which may either drop the packet or deliver it to the desti‐
+       nation. Between the two pipelines, outputs to logical multicast  groups
+       are  expanded  into  logical  ports,  so  that the egress pipeline only
+       processes a single logical output port  at  a  time.  Between  the  two
+       pipelines is also where, when necessary, OVN encapsulates a packet in a
+       tunnel (or tunnels) to transmit to remote hypervisors.
+
+       In more detail, to start, OVN searches the Logical_Flow table for a row
+       with  correct  logical_datapath  or  a  logical_dp_group, a pipeline of
+       ingress, a table_id of 0, and a match that is true for the  packet.  If
+       none  is  found,  OVN  drops the packet. If OVN finds more than one, it
+       chooses the match with the highest priority. Then OVN executes each  of
+       the  actions specified in the row’s actions column, in the order speci‐
+       fied. Some actions, such as those to modify packet headers, require  no
+       further details. The next and output actions are special.
+
+       The  next  action  causes the above process to be repeated recursively,
+       except that OVN searches for table_id of 1 instead of 0. Similarly, any
+       next action in a row found in that table would cause a  further  search
+       for  a  table_id  of 2, and so on. When recursive processing completes,
+       flow control returns to the action following next.
+
+       The output action also introduces recursion. Its effect depends on  the
+       current  value of the outport field. Suppose outport designates a logi‐
+       cal port. First, OVN compares inport to outport; if they are equal,  it
+       treats the output as a no-op by default. In the common case, where they
+       are  different,  the packet enters the egress pipeline. This transition
+       to the egress pipeline discards register data, e.g. reg0 ...  reg9  and
+       connection  tracking  state,  to achieve uniform behavior regardless of
+       whether the egress pipeline is on a different hypervisor (because  reg‐
+       isters aren’t preserve across tunnel encapsulation).
+
+       To execute the egress pipeline, OVN again searches the Logical_Flow ta‐
+       ble  for  a  row with correct logical_datapath or a logical_dp_group, a
+       table_id of 0, a match that is true for the packet, but now looking for
+       a pipeline of egress. If no matching row is found, the output becomes a
+       no-op. Otherwise, OVN executes the actions for the matching flow (which
+       is chosen from multiple, if necessary, as already described).
+
+       In the egress pipeline, the next action acts as already described,  ex‐
+       cept  that it, of course, searches for egress flows. The output action,
+       however, now directly outputs the packet to the output port  (which  is
+       now fixed, because outport is read-only within the egress pipeline).
+
+       The  description  earlier  assumed  that  outport referred to a logical
+       port. If it instead designates a logical multicast group, then the  de‐
+       scription  above  still  applies, with the addition of fan-out from the
+       logical multicast group to each logical port in  the  group.  For  each
+       member  of  the  group, OVN executes the logical pipeline as described,
+       with the logical output port replaced by the group member.
+
+       Pipeline Stages
+
+       ovn-northd populates the Logical_Flow table with the logical flows  de‐
+       scribed in detail in ovn-northd(8).
+
+   Summary:
+       logical_datapath              optional Datapath_Binding
+       logical_dp_group              optional Logical_DP_Group
+       pipeline                      string, either egress or ingress
+       table_id                      integer, in range 0 to 32
+       priority                      integer, in range 0 to 65,535
+       match                         string
+       actions                       string
+       tags                          map of string-string pairs
+       controller_meter              optional string
+       external_ids : stage-name     optional string
+       external_ids : stage-hint     optional string, containing an uuid
+       external_ids : source         optional string
+       Common Columns:
+         external_ids                map of string-string pairs
+
+   Details:
+       logical_datapath: optional Datapath_Binding
+              The logical datapath to which the logical flow belongs.
+
+       logical_dp_group: optional Logical_DP_Group
+              The  group  of  logical  datapaths to which the logical flow be‐
+              longs. This means that the same  logical  flow  belongs  to  all
+              datapaths in a group.
+
+       pipeline: string, either egress or ingress
+              The  primary  flows  used for deciding on a packet’s destination
+              are the ingress flows. The egress flows implement ACLs. See Log�‐
+              ical Life Cycle of a Packet, above, for details.
+
+       table_id: integer, in range 0 to 32
+              The stage in the logical pipeline, analogous to an OpenFlow  ta‐
+              ble number.
+
+       priority: integer, in range 0 to 65,535
+              The flow’s priority. Flows with numerically higher priority take
+              precedence  over those with lower. If two logical datapath flows
+              with the same priority both match, then the one actually applied
+              to the packet is undefined.
+
+       match: string
+              A matching expression.  OVN  provides  a  superset  of  OpenFlow
+              matching capabilities, using a syntax similar to Boolean expres‐
+              sions in a programming language.
+
+              The  most  important  components of match expression are compar‐
+              isons  between  symbols   and   constants,   e.g.   ip4.dst   ==
+              192.168.0.1,  ip.proto == 6, arp.op == 1, eth.type == 0x800. The
+              logical AND operator && and logical OR operator ||  can  combine
+              comparisons into a larger expression.
+
+              Matching  expressions also support parentheses for grouping, the
+              logical NOT prefix operator !, and literals 0 and 1  to  express
+              ``false’’ or ``true,’’ respectively. The latter is useful by it‐
+              self as a catch-all expression that matches every packet.
+
+              Match  expressions  also  support a kind of function syntax. The
+              following functions are supported:
+
+              is_chassis_resident(lport)
+                     Evaluates to true on a  chassis  on  which  logical  port
+                     lport  (a quoted string) resides, and to false elsewhere.
+                     This function was introduced in OVN 2.7.
+
+              Symbols
+
+              Type. Symbols have integer or string type. Integer symbols  have
+              a width in bits.
+
+              Kinds. There are three kinds of symbols:
+
+              •      Fields.  A  field  symbol  represents  a packet header or
+                     metadata field. For example, a field named vlan.tci might
+                     represent the VLAN TCI field in a packet.
+
+                     A field symbol can have integer or string  type.  Integer
+                     fields  can  be nominal or ordinal (see Level of Measure�‐
+                     ment, below).
+
+              •      Subfields. A subfield represents a subset of bits from  a
+                     larger  field. For example, a field vlan.vid might be de‐
+                     fined as an alias for vlan.tci[0..11]. Subfields are pro‐
+                     vided for syntactic convenience,  because  it  is  always
+                     possible  to  instead  refer  to  a subset of bits from a
+                     field directly.
+
+                     Only ordinal fields (see Level of Measurement, below) may
+                     have subfields. Subfields are always ordinal.
+
+              •      Predicates. A predicate is shorthand for  a  Boolean  ex‐
+                     pression.  Predicates may be used much like 1-bit fields.
+                     For example, ip4 might expand to eth.type == 0x800. Pred‐
+                     icates are provided for syntactic convenience, because it
+                     is always possible to instead specify the underlying  ex‐
+                     pression directly.
+
+                     A  predicate  whose expansion refers to any nominal field
+                     or predicate (see Level of Measurement, below)  is  nomi‐
+                     nal; other predicates have Boolean level of measurement.
+
+              Level              of              Measurement.              See
+              http://en.wikipedia.org/wiki/Level_of_measurement for  the  sta‐
+              tistical  concept  on  which this classification is based. There
+              are three levels:
+
+              •      Ordinal. In statistics, ordinal values can be ordered  on
+                     a  scale. OVN considers a field (or subfield) to be ordi‐
+                     nal if its bits can be  examined  individually.  This  is
+                     true  for  the  OpenFlow  fields  that  OpenFlow  or Open
+                     vSwitch makes ``maskable.’’
+
+                     Any use of a ordinal field may specify a single bit or  a
+                     range  of  bits,  e.g. vlan.tci[13..15] refers to the PCP
+                     field within the VLAN TCI, and eth.dst[40] refers to  the
+                     multicast bit in the Ethernet destination address.
+
+                     OVN  supports all the usual arithmetic relations (==, !=,
+                     <, <=, >, and >=) on ordinal fields and their  subfields,
+                     because  OVN  can  implement  these  in OpenFlow and Open
+                     vSwitch as collections of bitwise tests.
+
+              •      Nominal. In statistics, nominal values cannot be usefully
+                     compared except for equality. This is  true  of  OpenFlow
+                     port  numbers, Ethernet types, and IP protocols are exam‐
+                     ples: all of these are just  identifiers  assigned  arbi‐
+                     trarily  with  no  deeper  meaning.  In OpenFlow and Open
+                     vSwitch, bits in these fields generally aren’t  individu‐
+                     ally addressable.
+
+                     OVN  only supports arithmetic tests for equality on nomi‐
+                     nal fields, because OpenFlow and Open vSwitch provide  no
+                     way for a flow to efficiently implement other comparisons
+                     on  them. (A test for inequality can be sort of built out
+                     of two flows with different priorities, but OVN  matching
+                     expressions  always  generate  flows with a single prior‐
+                     ity.)
+
+                     String fields are always nominal.
+
+              •      Boolean. A nominal field that has only two values, 0  and
+                     1,  is  somewhat exceptional, since it is easy to support
+                     both equality and inequality tests on such a  field:  ei‐
+                     ther one can be implemented as a test for 0 or 1.
+
+                     Only  predicates (see above) have a Boolean level of mea‐
+                     surement.
+
+                     This isn’t a standard level of measurement.
+
+              Prerequisites. Any symbol can have prerequisites, which are  ad‐
+              ditional  condition  implied by the use of the symbol. For exam‐
+              ple, For example,  icmp4.type  symbol  might  have  prerequisite
+              icmp4, which would cause an expression icmp4.type == 0 to be in‐
+              terpreted  as  icmp4.type == 0 && icmp4, which would in turn ex‐
+              pand to icmp4.type == 0 && eth.type == 0x800 && ip4.proto  ==  1
+              (assuming  icmp4 is a predicate defined as suggested under Types
+              above).
+
+              Relational operators
+
+              All of the standard relational operators ==, !=, <, <=,  >,  and
+              >=  are  supported.  Nominal  fields support only == and !=, and
+              only in a positive sense when outer ! are  taken  into  account,
+              e.g. given string field inport, inport == "eth0" and !(inport !=
+              "eth0") are acceptable, but not inport != "eth0".
+
+              The implementation of == (or != when it is negated), is more ef‐
+              ficient than that of the other relational operators.
+
+              Constants
+
+              Integer  constants may be expressed in decimal, hexadecimal pre‐
+              fixed by 0x, or as dotted-quad IPv4 addresses, IPv6 addresses in
+              their standard forms, or Ethernet addresses  as  colon-separated
+              hex  digits. A constant in any of these forms may be followed by
+              a slash and a second constant (the mask) in the  same  form,  to
+              form  a masked constant. IPv4 and IPv6 masks may be given as in‐
+              tegers, to express CIDR prefixes.
+
+              String constants have the same syntax as quoted strings in  JSON
+              (thus, they are Unicode strings).
+
+              Some  operators  support  sets of constants written inside curly
+              braces { ... }. Commas between elements of a set, and after  the
+              last  elements,  are  optional. With ==, ``field == { constant1,
+              constant2, ... }’’ is syntactic sugar for ``field  ==  constant1
+              || field == constant2 || .... Similarly, ``field != { constant1,
+              constant2,  ...  }’’  is  equivalent  to ``field != constant1 &&
+              field != constant2 && ...’’.
+
+              You may refer to a set of IPv4, IPv6, or MAC addresses stored in
+              the Address_Set table by its name. An Address_Set with a name of
+              set1 can be referred to as $set1.
+
+              You may refer to a group of logical switch ports stored  in  the
+              Port_Group  table  by  its  name.  An  Port_Group with a name of
+              port_group1 can be referred to as @port_group1.
+
+              Additionally, you may refer to the set of addresses belonging to
+              a group of logical switch ports stored in the  Port_Group  table
+              by its name followed by a suffix ’_ip4’/’_ip6’. The IPv4 address
+              set  of  a Port_Group with a name of port_group1 can be referred
+              to as $port_group1_ip4, and the IPv6 address  set  of  the  same
+              Port_Group can be referred to as $port_group1_ip6
+
+              Miscellaneous
+
+              Comparisons  may  name  the  symbol  or the constant first, e.g.
+              tcp.src == 80 and 80 == tcp.src are both acceptable.
+
+              Tests for a range may be expressed using a syntax like  1024  <=
+              tcp.src  <=  49151,  which  is  equivalent to 1024 <= tcp.src &&
+              tcp.src <= 49151.
+
+              For a one-bit field or predicate,  a  mention  of  its  name  is
+              equivalent  to  symobl  == 1, e.g. vlan.present is equivalent to
+              vlan.present == 1. The same is true for one-bit subfields,  e.g.
+              vlan.tci[12].  There  is no technical limitation to implementing
+              the same for ordinal fields of all widths, but  the  implementa‐
+              tion is expensive enough that the syntax parser requires writing
+              an  explicit  comparison  against  zero  to  make  mistakes less
+              likely, e.g. in tcp.src != 0 the comparison  against  0  is  re‐
+              quired.
+
+              Operator  precedence  is as shown below, from highest to lowest.
+              There are two exceptions where  parentheses  are  required  even
+              though  the table would suggest that they are not: && and || re‐
+              quire parentheses when used together, and ! requires parentheses
+              when applied to a relational expression. Thus, in  (eth.type  ==
+              0x800 || eth.type == 0x86dd) && ip.proto == 6 or !(arp.op == 1),
+              the parentheses are mandatory.
+
+              •      ()
+
+              •      ==   !=   <   <=   >   >=
+
+              •      !
+
+              •      &&   ||
+
+              Comments may be introduced by //, which extends to the next new-
+              line. Comments within a line may be bracketed by /* and */. Mul‐
+              tiline comments are not supported.
+
+              Symbols
+
+              Most  of  the  symbols  below have integer type. Only inport and
+              outport have string type. inport names a logical port. Thus, its
+              value is a logical_port name from the Port_Binding  table.  out�‐
+              port  may name a logical port, as inport, or a logical multicast
+              group defined in the Multicast_Group table.  For  both  symbols,
+              only names within the flow’s logical datapath may be used.
+
+              The  regX  symbols  are  32-bit integers. The xxregX symbols are
+              128-bit integers, which overlay four of  the  32-bit  registers:
+              xxreg0 overlays reg0 through reg3, with reg0 supplying the most-
+              significant  bits  of  xxreg0  and  reg3  the least-significant.
+              xxreg1 similarly overlays reg4 through reg7.
+
+              •      reg0...reg9
+
+              •      xxreg0 xxreg1
+
+              •      inport outport
+
+              •      flags.loopback
+
+              •      pkt.mark
+
+              •      eth.src eth.dst eth.type
+
+              •      vlan.tci vlan.vid vlan.pcp vlan.present
+
+              •      ip.proto ip.dscp ip.ecn ip.ttl ip.frag
+
+              •      ip4.src ip4.dst
+
+              •      ip6.src ip6.dst ip6.label
+
+              •      arp.op arp.spa arp.tpa arp.sha arp.tha
+
+              •      rarp.op rarp.spa rarp.tpa rarp.sha rarp.tha
+
+              •      tcp.src tcp.dst tcp.flags
+
+              •      udp.src udp.dst
+
+              •      sctp.src sctp.dst
+
+              •      icmp4.type icmp4.code
+
+              •      icmp6.type icmp6.code
+
+              •      nd.target nd.sll nd.tll
+
+              •      ct_mark ct_label
+
+              •      ct_state,  which  has  several  Boolean  subfields.   The
+                     ct_next action initializes the following subfields:
+
+                     •      ct.trk:  Always set to true by ct_next to indicate
+                            that connection  tracking  has  taken  place.  All
+                            other ct subfields have ct.trk as a prerequisite.
+
+                     •      ct.new: True for a new flow
+
+                     •      ct.est: True for an established flow
+
+                     •      ct.rel: True for a related flow
+
+                     •      ct.rpl: True for a reply flow
+
+                     •      ct.inv: True for a connection entry in a bad state
+
+                     The  ct_dnat,  ct_snat,  and ct_lb actions initialize the
+                     following subfields:
+
+                     •      ct.dnat: True for a packet  whose  destination  IP
+                            address has been changed.
+
+                     •      ct.snat: True for a packet whose source IP address
+                            has been changed.
+
+              The following predicates are supported:
+
+              •      eth.bcast expands to eth.dst == ff:ff:ff:ff:ff:ff
+
+              •      eth.mcast expands to eth.dst[40]
+
+              •      vlan.present expands to vlan.tci[12]
+
+              •      ip4 expands to eth.type == 0x800
+
+              •      ip4.src_mcast expands to ip4.src[28..31] == 0xe
+
+              •      ip4.mcast expands to ip4.dst[28..31] == 0xe
+
+              •      ip6 expands to eth.type == 0x86dd
+
+              •      ip expands to ip4 || ip6
+
+              •      icmp4 expands to ip4 && ip.proto == 1
+
+              •      icmp6 expands to ip6 && ip.proto == 58
+
+              •      icmp expands to icmp4 || icmp6
+
+              •      ip.is_frag expands to ip.frag[0]
+
+              •      ip.later_frag expands to ip.frag[1]
+
+              •      ip.first_frag expands to ip.is_frag && !ip.later_frag
+
+              •      arp expands to eth.type == 0x806
+
+              •      rarp expands to eth.type == 0x8035
+
+              •      nd expands to icmp6.type == {135, 136} && icmp6.code == 0
+                     && ip.ttl == 255
+
+              •      nd_ns  expands to icmp6.type == 135 && icmp6.code == 0 &&
+                     ip.ttl == 255
+
+              •      nd_na expands to icmp6.type == 136 && icmp6.code == 0  &&
+                     ip.ttl == 255
+
+              •      nd_rs  expands to icmp6.type == 133 && icmp6.code == 0 &&
+                     ip.ttl == 255
+
+              •      nd_ra expands to icmp6.type == 134 && icmp6.code == 0  &&
+                     ip.ttl == 255
+
+              •      tcp expands to ip.proto == 6
+
+              •      udp expands to ip.proto == 17
+
+              •      sctp expands to ip.proto == 132
+
+       actions: string
+              Logical  datapath  actions, to be executed when the logical flow
+              represented by this row is the highest-priority match.
+
+              Actions share lexical syntax with the match column. An empty set
+              of actions (or one that contains just white space or  comments),
+              or  a  set  of  actions  that consists of just drop;, causes the
+              matched packets to be dropped. Otherwise, the column should con‐
+              tain a sequence of actions, each terminated by a semicolon.
+
+              The following actions are defined:
+
+              output;
+                     In the ingress pipeline, this action executes the  egress
+                     pipeline  as  a  subroutine.  If  outport names a logical
+                     port, the egress pipeline executes once; if it is a  mul‐
+                     ticast group, the egress pipeline runs once for each log‐
+                     ical port in the group.
+
+                     In  the  egress pipeline, this action performs the actual
+                     output to  the  outport  logical  port.  (In  the  egress
+                     pipeline, outport never names a multicast group.)
+
+                     By  default,  output  to  the  input  port  is implicitly
+                     dropped, that is, output becomes a no-op  if  outport  ==
+                     inport.  Occasionally  it  may be useful to override this
+                     behavior, e.g. to send an ARP reply to an ARP request; to
+                     do so, use flags.loopback = 1  to  allow  the  packet  to
+                     "hair-pin" back to the input port.
+
+              next;
+              next(table);
+              next(pipeline=pipeline, table=table);
+                   Executes  the given logical datapath table in pipeline as a
+                   subroutine. The default table is  just  after  the  current
+                   one. If pipeline is specified, it may be ingress or egress;
+                   the  default  pipeline  is the one currently executing. Ac‐
+                   tions in the both ingress and egress pipeline can use  next
+                   to  jump  across the other pipeline. Actions in the ingress
+                   pipeline should use next to jump into the specific table of
+                   egress pipeline only if it is certain that the packets  are
+                   local and not tunnelled and wants to skip certain stages in
+                   the packet processing.
+
+              field = constant;
+                   Sets  data  or  metadata field field to constant value con‐
+                   stant, e.g. outport = "vif0"; to  set  the  logical  output
+                   port.  To  set  only a subset of bits in a field, specify a
+                   subfield for field or a masked constant, e.g. one  may  use
+                   vlan.pcp[2] = 1; or vlan.pcp = 4/4; to set the most signif‐
+                   icant bit of the VLAN PCP.
+
+                   Assigning  to  a  field  with prerequisites implicitly adds
+                   those prerequisites to match; thus,  for  example,  a  flow
+                   that  sets tcp.dst applies only to TCP flows, regardless of
+                   whether its match mentions any TCP field.
+
+                   Not all fields are modifiable (e.g. eth.type  and  ip.proto
+                   are  read-only),  and not all modifiable fields may be par‐
+                   tially modified (e.g. ip.ttl must assigned as a whole). The
+                   outport field is modifiable in the ingress pipeline but not
+                   in the egress pipeline.
+
+              ovn_field = constant;
+                   Sets OVN field ovn_field to constant value constant.
+
+                   OVN supports setting the values of certain fields which are
+                   not yet supported in OpenFlow to set or modify them.
+
+                   Below are the supported OVN fields:
+
+                   •      icmp4.frag_mtu icmp6.frag_mtu
+
+                          This  field  sets  the  low-order  16  bits  of  the
+                          ICMP{4,6}  header field that is labelled "unused" in
+                          the ICMP specification as defined in  the  RFC  1191
+                          with the value specified in constant.
+
+                          Eg. icmp4.frag_mtu = 1500;
+
+              field1 = field2;
+                   Sets  data or metadata field field1 to the value of data or
+                   metadata field field2, e.g. reg0 = ip4.src; copies  ip4.src
+                   into reg0. To modify only a subset of a field’s bits, spec‐
+                   ify  a subfield for field1 or field2 or both, e.g. vlan.pcp
+                   = reg0[0..2]; copies the  least-significant  bits  of  reg0
+                   into the VLAN PCP.
+
+                   field1 and field2 must be the same type, either both string
+                   or  both  integer  fields. If they are both integer fields,
+                   they must have the same width.
+
+                   If field1 or field2 has prerequisites, they are  added  im‐
+                   plicitly  to  match.  It is possible to write an assignment
+                   with  contradictory  prerequisites,  such  as   ip4.src   =
+                   ip6.src[0..31];, but the contradiction means that a logical
+                   flow with such an assignment will never be matched.
+
+              field1 <-> field2;
+                   Similar  to field1 = field2; except that the two values are
+                   exchanged instead of copied. Both field1  and  field2  must
+                   modifiable.
+
+              push(field);
+                   Push the value of field to the stack top.
+
+              pop(field);
+                   Pop  the stack top and store the value to field, which must
+                   be modifiable.
+
+              ip.ttl--;
+                   Decrements the IPv4 or IPv6 TTL. If this would make the TTL
+                   zero or negative, then processing of the packet  halts;  no
+                   further  actions  are  processed.  (To properly handle such
+                   cases, a higher-priority flow should match on ip.ttl == {0,
+                   1};.)
+
+                   Prerequisite: ip
+
+              ct_next;
+                   Apply  connection  tracking  to  the   flow,   initializing
+                   ct_state  for matching in later tables. Automatically moves
+                   on to the next table, as if followed by next.
+
+                   As a side effect, IP  fragments  will  be  reassembled  for
+                   matching. If a fragmented packet is output, then it will be
+                   sent  with  any overlapping fragments squashed. The connec‐
+                   tion tracking state is scoped by the logical port when  the
+                   action  is used in a flow for a logical switch, so overlap‐
+                   ping addresses may be used. To allow traffic related to the
+                   matched flow, execute ct_commit . Connection tracking state
+                   is scoped by the logical topology when the action  is  used
+                   in a flow for a router.
+
+                   It  is  possible  to  have actions follow ct_next, but they
+                   will not have access to any of its side-effects and is  not
+                   generally useful.
+
+              ct_commit { };
+              ct_commit { ct_mark=value[/mask]; };
+              ct_commit { ct_label=value[/mask]; };
+              ct_commit { ct_mark=value[/mask]; ct_label=value[/mask]; };
+                   Commit the flow to the connection tracking entry associated
+                   with   it   by   a   previous   call   to   ct_next.   When
+                   ct_mark=value[/mask] and/or ct_label=value[/mask] are  sup‐
+                   plied,  ct_mark  and/or  ct_label will be set to the values
+                   indicated by value[/mask] on the connection tracking entry.
+                   ct_mark is a 32-bit field. ct_label is a 128-bit field. The
+                   value[/mask] should be specified in hex string if more than
+                   64bits are to be used. Registers and other named fields can
+                   be used for value. ct_mark  and  ct_label  may  be  sub-ad‐
+                   dressed in order to have specific bits set.
+
+                   Note  that  if  you want processing to continue in the next
+                   table, you must execute the next  action  after  ct_commit.
+                   You  may  also  leave out next which will commit connection
+                   tracking state, and then drop the  packet.  This  could  be
+                   useful  for  setting ct_mark on a connection tracking entry
+                   before dropping a packet, for example.
+
+              ct_dnat;
+              ct_dnat(IP);
+                   ct_dnat sends the packet through the DNAT zone  in  connec‐
+                   tion tracking table to unDNAT any packet that was DNATed in
+                   the  opposite  direction.  The packet is then automatically
+                   sent to to the next tables as if followed by next;  action.
+                   The  next  tables will see the changes in the packet caused
+                   by the connection tracker.
+
+                   ct_dnat(IP) sends the  packet  through  the  DNAT  zone  to
+                   change  the destination IP address of the packet to the one
+                   provided inside the parentheses and commits the connection.
+                   The packet is then automatically sent to the next tables as
+                   if followed by next; action. The next tables will  see  the
+                   changes in the packet caused by the connection tracker.
+
+              ct_snat;
+              ct_snat(IP);
+                   ct_snat  sends  the  packet through the SNAT zone to unSNAT
+                   any packet that was SNATed in the opposite  direction.  The
+                   packet  is automatically sent to the next tables as if fol‐
+                   lowed by the next; action. The next  tables  will  see  the
+                   changes in the packet caused by the connection tracker.
+
+                   ct_snat(IP)  sends  the  packet  through  the  SNAT zone to
+                   change the source IP address of the packet to the one  pro‐
+                   vided  inside  the  parenthesis and commits the connection.
+                   The packet is then automatically sent to the next tables as
+                   if followed by next; action. The next tables will  see  the
+                   changes in the packet caused by the connection tracker.
+
+              ct_dnat_in_czone;
+              ct_dnat_in_czone(IP);
+                   ct_dnat_in_czone  sends  the  packet through the common NAT
+                   zone (used for both DNAT and SNAT) in  connection  tracking
+                   table  to unDNAT any packet that was DNATed in the opposite
+                   direction. The packet is then automatically sent to to  the
+                   next tables as if followed by next; action. The next tables
+                   will see the changes in the packet caused by the connection
+                   tracker.
+
+                   ct_dnat_in_czone(IP)  sends  the  packet through the common
+                   NAT zone to change the destination IP address of the packet
+                   to the one provided inside the parentheses and commits  the
+                   connection.  The  packet  is then automatically sent to the
+                   next tables as if followed by next; action. The next tables
+                   will see the changes in the packet caused by the connection
+                   tracker.
+
+              ct_snat_in_czone;
+              ct_snat_in_czone(IP);
+                   ct_snat_in_czone sends the packet through  the  common  NAT
+                   zone  to  unSNAT any packet that was SNATed in the opposite
+                   direction. The packet is automatically sent to the next ta‐
+                   bles as if followed by the next; action.  The  next  tables
+                   will see the changes in the packet caused by the connection
+                   tracker.
+
+                   ct_snat_in_czone(IP)  sends  the packet\ through the common
+                   NAT zone to change the source IP address of the  packet  to
+                   the  one  provided  inside  the parenthesis and commits the
+                   connection. The packet is then automatically  sent  to  the
+                   next tables as if followed by next; action. The next tables
+                   will see the changes in the packet caused by the connection
+                   tracker.
+
+              ct_clear;
+                   Clears connection tracking state.
+
+              ct_commit_nat;
+                   Applies NAT and commits the connection to the CT. Automati‐
+                   cally  moves  on to the next table, as if followed by next.
+                   This is very useful for connections  that  are  in  related
+                   state  for  already existing connections and allows the NAT
+                   to be applied to them as well.
+
+              clone { action; ... };
+                   Makes a copy of the packet  being  processed  and  executes
+                   each  action  on  the copy. Actions following the clone ac‐
+                   tion, if any, apply to  the  original,  unmodified  packet.
+                   This  can  be  used  as  a  way to ``save and restore’’ the
+                   packet around a set of  actions  that  may  modify  it  and
+                   should not persist.
+
+              arp { action; ... };
+                   Temporarily  replaces the IPv4 packet being processed by an
+                   ARP packet and executes  each  nested  action  on  the  ARP
+                   packet.  Actions following the arp action, if any, apply to
+                   the original, unmodified packet.
+
+                   The ARP packet that this action operates on is  initialized
+                   based on the IPv4 packet being processed, as follows. These
+                   are  default  values  that the nested actions will probably
+                   want to change:
+
+                   •      eth.src unchanged
+
+                   •      eth.dst unchanged
+
+                   •      eth.type = 0x0806
+
+                   •      arp.op = 1 (ARP request)
+
+                   •      arp.sha copied from eth.src
+
+                   •      arp.spa copied from ip4.src
+
+                   •      arp.tha = 00:00:00:00:00:00
+
+                   •      arp.tpa copied from ip4.dst
+
+                   The ARP packet has the same VLAN header, if any, as the  IP
+                   packet it replaces.
+
+                   Prerequisite: ip4
+
+              get_arp(P, A);
+                   Parameters:  logical port string field P, 32-bit IP address
+                   field A.
+
+                   Looks up A in P’s mac binding table. If an entry is  found,
+                   stores  its  Ethernet  address in eth.dst, otherwise stores
+                   00:00:00:00:00:00 in eth.dst.
+
+                   Example: get_arp(outport, ip4.dst);
+
+              put_arp(P, A, E);
+                   Parameters: logical port string field P, 32-bit IP  address
+                   field A, 48-bit Ethernet address field E.
+
+                   Adds  or updates the entry for IP address A in logical port
+                   P’s mac binding table, setting its Ethernet address to E.
+
+                   Example: put_arp(inport, arp.spa, arp.sha);
+
+              R = lookup_arp(P, A, M);
+                   Parameters: logical port string field P, 32-bit IP  address
+                   field A, 48-bit MAC address field M.
+
+                   Result: stored to a 1-bit subfield R.
+
+                   Looks  up  A and M in P’s mac binding table. If an entry is
+                   found, stores 1 in the 1-bit subfield R, else 0.
+
+                   Example: reg0[0] = lookup_arp(inport, arp.spa, arp.sha);
+
+              R = lookup_arp_ip(P, A);
+                   Parameters: logical port string field P, 32-bit IP  address
+                   field A.
+
+                   Result: stored to a 1-bit subfield R.
+
+                   Looks  up A in P’s mac binding table. If an entry is found,
+                   stores 1 in the 1-bit subfield R, else 0.
+
+                   Example: reg0[0] = lookup_arp_ip(inport, arp.spa);
+
+              P = get_fdb(A);
+                   Parameters:48-bit MAC address field A.
+
+                   Looks up A in fdb table. If an entry is found,  stores  the
+                   logical port key to the out parameter P.
+
+                   Example: outport = get_fdb(eth.src);
+
+              put_fdb(P, A);
+                   Parameters: logical port string field P, 48-bit MAC address
+                   field A.
+
+                   Adds or updates the entry for Ethernet address A in fdb ta‐
+                   ble, setting its logical port key to P.
+
+                   Example: put_fdb(inport, arp.spa);
+
+              R = lookup_fdb(P, A);
+                   Parameters: 48-bit MAC address field M, logical port string
+                   field P.
+
+                   Result: stored to a 1-bit subfield R.
+
+                   Looks up A in fdb table. If an entry is found and the logi‐
+                   cal  port  key  is  P, P, stores 1 in the 1-bit subfield R,
+                   else 0. If flags.localnet is set then 1 is stored if an en‐
+                   try is found and the logical port key is P or if  an  entry
+                   is found and the entry port type is VIF.
+
+                   Example: reg0[0] = lookup_fdb(inport, eth.src);
+
+              nd_ns { action; ... };
+                   Temporarily  replaces the IPv6 packet being processed by an
+                   IPv6 Neighbor Solicitation packet and executes each  nested
+                   action  on  the IPv6 NS packet. Actions following the nd_ns
+                   action, if any, apply to the original, unmodified packet.
+
+                   The IPv6 NS packet that this action operates on is initial‐
+                   ized based on the IPv6 packet being processed, as  follows.
+                   These are default values that the nested actions will prob‐
+                   ably want to change:
+
+                   •      eth.src unchanged
+
+                   •      eth.dst set to IPv6 multicast MAC address
+
+                   •      eth.type = 0x86dd
+
+                   •      ip6.src copied from ip6.src
+
+                   •      ip6.dst set to IPv6 Solicited-Node multicast address
+
+                   •      icmp6.type = 135 (Neighbor Solicitation)
+
+                   •      nd.target copied from ip6.dst
+
+                   The IPv6 NS packet has the same VLAN header, if any, as the
+                   IP packet it replaces.
+
+                   Prerequisite: ip6
+
+              nd_na { action; ... };
+                   Temporarily  replaces the IPv6 neighbor solicitation packet
+                   being processed by  an  IPv6  neighbor  advertisement  (NA)
+                   packet  and  executes  each nested action on the NA packet.
+                   Actions following the nd_na action, if any,  apply  to  the
+                   original, unmodified packet.
+
+                   The  NA  packet that this action operates on is initialized
+                   based on the IPv6 packet being processed, as follows. These
+                   are default values that the nested  actions  will  probably
+                   want to change:
+
+                   •      eth.dst exchanged with eth.src
+
+                   •      eth.type = 0x86dd
+
+                   •      ip6.dst copied from ip6.src
+
+                   •      ip6.src copied from nd.target
+
+                   •      icmp6.type = 136 (Neighbor Advertisement)
+
+                   •      nd.target unchanged
+
+                   •      nd.sll = 00:00:00:00:00:00
+
+                   •      nd.tll copied from eth.dst
+
+                   The ND packet has the same VLAN header, if any, as the IPv6
+                   packet it replaces.
+
+                   Prerequisite: nd_ns
+
+              nd_na_router { action; ... };
+                   Temporarily  replaces the IPv6 neighbor solicitation packet
+                   being processed by  an  IPv6  neighbor  advertisement  (NA)
+                   packet,  sets  ND_NSO_ROUTER  in the RSO flags and executes
+                   each nested action on the NA packet. Actions following  the
+                   nd_na_router action, if any, apply to the original, unmodi‐
+                   fied packet.
+
+                   The  NA  packet that this action operates on is initialized
+                   based on the IPv6 packet being processed, as follows. These
+                   are default values that the nested  actions  will  probably
+                   want to change:
+
+                   •      eth.dst exchanged with eth.src
+
+                   •      eth.type = 0x86dd
+
+                   •      ip6.dst copied from ip6.src
+
+                   •      ip6.src copied from nd.target
+
+                   •      icmp6.type = 136 (Neighbor Advertisement)
+
+                   •      nd.target unchanged
+
+                   •      nd.sll = 00:00:00:00:00:00
+
+                   •      nd.tll copied from eth.dst
+
+                   The ND packet has the same VLAN header, if any, as the IPv6
+                   packet it replaces.
+
+                   Prerequisite: nd_ns
+
+              get_nd(P, A);
+                   Parameters:  logical  port string field P, 128-bit IPv6 ad‐
+                   dress field A.
+
+                   Looks up A in P’s mac binding table. If an entry is  found,
+                   stores  its  Ethernet  address in eth.dst, otherwise stores
+                   00:00:00:00:00:00 in eth.dst.
+
+                   Example: get_nd(outport, ip6.dst);
+
+              put_nd(P, A, E);
+                   Parameters: logical port string field P, 128-bit  IPv6  ad‐
+                   dress field A, 48-bit Ethernet address field E.
+
+                   Adds  or  updates  the  entry for IPv6 address A in logical
+                   port P’s mac binding table, setting its Ethernet address to
+                   E.
+
+                   Example: put_nd(inport, nd.target, nd.tll);
+
+              R = lookup_nd(P, A, M);
+                   Parameters: logical port string field P, 128-bit IP address
+                   field A, 48-bit MAC address field M.
+
+                   Result: stored to a 1-bit subfield R.
+
+                   Looks up A and M in P’s mac binding table. If an  entry  is
+                   found, stores 1 in the 1-bit subfield R, else 0.
+
+                   Example: reg0[0] = lookup_nd(inport, ip6.src, eth.src);
+
+              R = lookup_nd_ip(P, A);
+                   Parameters: logical port string field P, 128-bit IP address
+                   field A.
+
+                   Result: stored to a 1-bit subfield R.
+
+                   Looks  up A in P’s mac binding table. If an entry is found,
+                   stores 1 in the 1-bit subfield R, else 0.
+
+                   Example: reg0[0] = lookup_nd_ip(inport, ip6.src);
+
+              R = put_dhcp_opts(D1 = V1, D2 = V2, ..., Dn = Vn);
+                   Parameters: one or more DHCP option/value pairs, which must
+                   include an offerip option (with code 0).
+
+                   Result: stored to a 1-bit subfield R.
+
+                   Valid only in the ingress pipeline.
+
+                   When this action  is  applied  to  a  DHCP  request  packet
+                   (DHCPDISCOVER or DHCPREQUEST), it changes the packet into a
+                   DHCP  reply  (DHCPOFFER or DHCPACK, respectively), replaces
+                   the options by those specified as parameters, and stores  1
+                   in R.
+
+                   When  this action is applied to a non-DHCP packet or a DHCP
+                   packet that is not DHCPDISCOVER or DHCPREQUEST,  it  leaves
+                   the packet unchanged and stores 0 in R.
+
+                   The  contents of the DHCP_Option table control the DHCP op‐
+                   tion names and values that this action supports.
+
+                   Example: reg0[0] = put_dhcp_opts(offerip = 10.0.0.2, router
+                   = 10.0.0.1, netmask = 255.255.255.0, dns_server = {8.8.8.8,
+                   7.7.7.7});
+
+              R = put_dhcpv6_opts(D1 = V1, D2 = V2, ..., Dn = Vn);
+                   Parameters: one or more DHCPv6 option/value pairs.
+
+                   Result: stored to a 1-bit subfield R.
+
+                   Valid only in the ingress pipeline.
+
+                   When this action is applied to a DHCPv6 request packet,  it
+                   changes  the  packet  into a DHCPv6 reply, replaces the op‐
+                   tions by those specified as parameters, and stores 1 in R.
+
+                   When this action is applied to a non-DHCPv6  packet  or  an
+                   invalid  DHCPv6  request  packet , it leaves the packet un‐
+                   changed and stores 0 in R.
+
+                   The contents of the DHCPv6_Options table control the DHCPv6
+                   option names and values that this action supports.
+
+                   Example:  reg0[3]  =  put_dhcpv6_opts(ia_addr  =   aef0::4,
+                   server_id                =               00:00:00:00:10:02,
+                   dns_server={ae70::1,ae70::2});
+
+              set_queue(queue_number);
+                   Parameters: Queue number queue_number, in the  range  0  to
+                   61440.
+
+                   This  is a logical equivalent of the OpenFlow set_queue ac‐
+                   tion. It affects packets that egress a hypervisor through a
+                   physical interface. For nonzero queue_number, it configures
+                   packet queuing to match the  settings  configured  for  the
+                   Port_Binding     with    options:qdisc_queue_id    matching
+                   queue_number. When queue_number is zero, it resets  queuing
+                   to the default strategy.
+
+                   Example: set_queue(10);
+
+              ct_lb;
+              ct_lb(backends=ip[:port][,...][;
+              hash_fields=field1,field2,...][; ct_flag]);
+                   With  arguments, ct_lb commits the packet to the connection
+                   tracking table and DNATs the packet’s  destination  IP  ad‐
+                   dress  (and  port)  to the IP address or addresses (and op‐
+                   tional ports) specified in the backends. If multiple comma-
+                   separated IP addresses are specified, each is  given  equal
+                   weight for picking the DNAT address. By default, dp_hash is
+                   used  as  the  OpenFlow  group  selection  method,  but  if
+                   hash_fields is specified, hash is  used  as  the  selection
+                   method,  and the fields listed are used as the hash fields.
+                   The  ct_flag  field  represents  one  of  supported   flag:
+                   skip_snat or force_snat, this flag will be stored in ct_la�‐
+                   bel register.
+
+                   Without arguments, ct_lb sends the packet to the connection
+                   tracking table to NAT the packets. If the packet is part of
+                   an  established connection that was previously committed to
+                   the connection tracker via ct_lb(...),  it  will  automati‐
+                   cally get DNATed to the same IP address as the first packet
+                   in that connection.
+
+                   Processing  automatically moves on to the next table, as if
+                   next; were specified, and later tables act on the packet as
+                   modified by the  connection  tracker.  Connection  tracking
+                   state is scoped by the logical port when the action is used
+                   in  a  flow  for a logical switch, so overlapping addresses
+                   may be used. Connection tracking state  is  scoped  by  the
+                   logical  topology  when  the action is used in a flow for a
+                   router.
+
+              ct_lb_mark;
+              ct_lb_mark(backends=ip[:port][,...][;
+              hash_fields=field1,field2,...][; ct_flag]);
+                   Same as ct_lb, except that it internally  uses  ct_mark  to
+                   store  the NAT flag, while ct_lb uses ct_label for the same
+                   purpose.
+
+              R = dns_lookup();
+                   Parameters: No parameters.
+
+                   Result: stored to a 1-bit subfield R.
+
+                   Valid only in the ingress pipeline.
+
+                   When this action is applied to a valid DNS request  (a  UDP
+                   packet  typically  directed to port 53), it attempts to re‐
+                   solve the query using the contents of the DNS table. If  it
+                   is  successful,  it changes the packet into a DNS reply and
+                   stores 1 in R. If  the  action  is  applied  to  a  non-DNS
+                   packet,  an  invalid DNS request packet, or a valid DNS re‐
+                   quest for which the DNS table does not supply an answer, it
+                   leaves the packet unchanged and stores 0 in R.
+
+                   Regardless of success, the action does not make any of  the
+                   changes to the flow that are necessary to direct the packet
+                   back  to  the requester. The logical pipeline can implement
+                   this behavior with matches and actions in later tables.
+
+                   Example: reg0[3] = dns_lookup();
+
+                   Prerequisite: udp
+
+              R = put_nd_ra_opts(D1 = V1, D2 = V2, ..., Dn = Vn);
+                   Parameters: The following IPv6 ND Router Advertisement  op‐
+                   tion/value pairs as defined in RFC 4861.
+
+                   •      addr_mode
+
+                          Mandatory parameter which specifies the address mode
+                          flag  to  be  set  in the RA flag options field. The
+                          value of this option is a string and  the  following
+                          values  can  be defined - "slaac", "dhcpv6_stateful"
+                          and "dhcpv6_stateless".
+
+                   •      slla
+
+                          Mandatory parameter which specifies  the  link-layer
+                          address  of  the interface from which the Router Ad‐
+                          vertisement is sent.
+
+                   •      mtu
+
+                          Optional parameter which specifies the MTU.
+
+                   •      prefix
+
+                          Optional parameter which should be specified if  the
+                          addr_mode  is  "slaac"  or  "dhcpv6_stateless".  The
+                          value should be an IPv6 prefix which  will  be  used
+                          for  stateless  IPv6 address configuration. This op‐
+                          tion can be defined multiple times.
+
+                   Result: stored to a 1-bit subfield R.
+
+                   Valid only in the ingress pipeline.
+
+                   When this action is applied to an IPv6 Router  solicitation
+                   request  packet,  it changes the packet into an IPv6 Router
+                   Advertisement reply and adds the options specified  in  the
+                   parameters, and stores 1 in R.
+
+                   When  this action is applied to a non-IPv6 Router solicita‐
+                   tion packet or an invalid IPv6 request packet ,  it  leaves
+                   the packet unchanged and stores 0 in R.
+
+                   Example: reg0[3] = put_nd_ra_opts(addr_mode = "slaac", slla
+                   = 00:00:00:00:10:02, prefix = aef0::/64, mtu = 1450);
+
+              set_meter(rate);
+              set_meter(rate, burst);
+                   Parameters:  rate  limit int field rate in kbps, burst rate
+                   limits int field burst in kbps.
+
+                   This action sets the rate limit for a flow.
+
+                   Example: set_meter(100, 1000);
+
+              R = check_pkt_larger(L)
+                   Parameters: packet length L to check for in bytes.
+
+                   Result: stored to a 1-bit subfield R.
+
+                   This   is   a   logical   equivalent   of   the    OpenFlow
+                   check_pkt_larger  action.  If the packet is larger than the
+                   length specified in L, it stores 1 in the subfield R.
+
+                   Example: reg0[6] = check_pkt_larger(1000);
+
+              log(key=value, ...);
+                     Causes ovn-controller to log the packet  on  the  chassis
+                     that processes it. Packet logging currently uses the same
+                     logging mechanism as other Open vSwitch and OVN messages,
+                     which  means  that  whether and where log messages appear
+                     depends on the local logging configuration  that  can  be
+                     configured with ovs-appctl, etc.
+
+                     The  log  action takes zero or more of the following key-
+                     value pair arguments that control what is logged:
+
+                     name=string
+                            An optional name for the ACL. The string  is  cur‐
+                            rently limited to 64 bytes.
+
+                     severity=level
+                            Indicates  the severity of the event. The level is
+                            one of following  (from  more  to  less  serious):
+                            alert,  warning,  notice,  info,  or  debug.  If a
+                            severity is not provided, the default is info.
+
+                     verdict=value
+                            The verdict for packets  matching  the  flow.  The
+                            value must be one of allow, deny, or reject.
+
+                     meter=string
+                            An  optional  rate-limiting meter to be applied to
+                            the logs. The string should reference a name entry
+                            from the Meter table. The only meter  action  that
+                            is appropriate is drop.
+
+              fwd_group(liveness=bool, childports=port, ...);
+                     Parameters:  optional liveness, either true or false, de‐
+                     faulting to false; childports, a comma-delimited list  of
+                     strings denoting logical ports to load balance across.
+
+                     Load balance traffic to one or more child ports in a log‐
+                     ical switch. ovn-controller translates the fwd_group into
+                     an OpenFlow group with one bucket for each child port. If
+                     liveness=true is specified, it also integrates the bucket
+                     selection  with BFD status on the tunnel interface corre‐
+                     sponding to child port.
+
+                     Example: fwd_group(liveness=true, childports="p1", "p2");
+
+              icmp4 { action; ... };
+              icmp4_error { action; ... };
+                   Temporarily replaces the IPv4 packet being processed by  an
+                   ICMPv4 packet and executes each nested action on the ICMPv4
+                   packet.  Actions  following these actions, if any, apply to
+                   the original, unmodified packet.
+
+                   The ICMPv4 packet that these actions operates  on  is  ini‐
+                   tialized  based on the IPv4 packet being processed, as fol‐
+                   lows. These are default values that the nested actions will
+                   probably want to  change.  Ethernet  and  IPv4  fields  not
+                   listed here are not changed:
+
+                   •      ip.proto = 1 (ICMPv4)
+
+                   •      ip.frag = 0 (not a fragment)
+
+                   •      ip.ttl = 255
+
+                   •      icmp4.type = 3 (destination unreachable)
+
+                   •      icmp4.code = 1 (host unreachable)
+
+                   icmp4_error  action  is  expected to be used to generate an
+                   ICMPv4 packet in  response  to  an  error  in  original  IP
+                   packet.  When  this  action generates the ICMPv4 packet, it
+                   also copies the original IP datagram following  the  ICMPv4
+                   header as per RFC 1122: 3.2.2.
+
+                   Prerequisite: ip4
+
+              icmp6 { action; ... };
+              icmp6_error { action; ... };
+                   Temporarily  replaces the IPv6 packet being processed by an
+                   ICMPv6 packet and executes each nested action on the ICMPv6
+                   packet. Actions following the icmp6 action, if  any,  apply
+                   to the original, unmodified packet.
+
+                   The  ICMPv6 packet that this action operates on is initial‐
+                   ized based on the IPv6 packet being processed, as  follows.
+                   These are default values that the nested actions will prob‐
+                   ably  want  to  change. Ethernet and IPv6 fields not listed
+                   here are not changed:
+
+                   •      ip.proto = 58 (ICMPv6)
+
+                   •      ip.ttl = 255
+
+                   •      icmp6.type = 1 (destination unreachable)
+
+                   •      icmp6.code = 1 (administratively prohibited)
+
+                   icmp6_error action is expected to be used  to  generate  an
+                   ICMPv6  packet  in  response  to  an error in original IPv6
+                   packet.
+
+                   Prerequisite: ip6
+
+              tcp_reset;
+                   This action transforms the current TCP packet according  to
+                   the following pseudocode:
+
+                   if (tcp.ack) {
+                           tcp.seq = tcp.ack;
+                   } else {
+                           tcp.ack = tcp.seq + length(tcp.payload);
+                           tcp.seq = 0;
+                   }
+                   tcp.flags = RST;
+
+                   Then,  the  action  drops all TCP options and payload data,
+                   and updates the TCP checksum. IP ttl is set to 255.
+
+                   Prerequisite: tcp
+
+              reject { action; ... };
+                   If the original packet is IPv4 or IPv6 TCP packet,  it  re‐
+                   places it with IPv4 or IPv6 TCP RST packet and executes the
+                   inner  actions.  Otherwise it replaces it with an ICMPv4 or
+                   ICMPv6 packet and executes the inner actions.
+
+                   The inner actions should not attempt  to  swap  eth  source
+                   with  eth  destination and IP source with IP destination as
+                   this action implicitly does that.
+
+              trigger_event;
+                   This action is used to allow ovs-vswitchd to report CMS re‐
+                   lated events writing them in Controller_Event table. It  is
+                   possible  to  associate a meter to a each event in order to
+                   not overload pinctrl thread under heavy load; each meter is
+                   identified though a defined  naming  convention.  Supported
+                   events:
+
+                   •      empty_lb_backends.  This  event  is  raised if a re‐
+                          ceived packet is destined for a  load  balancer  VIP
+                          that  has  no  configured  backend destinations. For
+                          this event, the event info includes  the  load  bal‐
+                          ancer VIP, the load balancer UUID, and the transport
+                          protocol. Associated meter: event-elb
+
+              igmp;
+                   This  action  sends the packet to ovn-controller for multi‐
+                   cast snooping.
+
+                   Prerequisite: igmp
+
+              bind_vport(V, P);
+                   Parameters: logical port string field V  of  type  virtual,
+                   logical port string field P.
+
+                   Binds  the virtual logical port V and sets the chassis col‐
+                   umn and virtual_parent  of  the  table  Port_Binding.  vir�‐
+                   tual_parent is set to P.
+
+              handle_svc_check(P);
+                   Parameters: logical port string field P.
+
+                   Handles  the service monitor reply received from the VIF of
+                   the logical port P. ovn-controller periodically  sends  out
+                   the  service monitor packets for the services configured in
+                   the Service_Monitor table and this action updates the  sta‐
+                   tus of those services.
+
+                   Example: handle_svc_check(inport);
+
+              handle_dhcpv6_reply;
+                   Handle DHCPv6 prefix delegation advertisements/replies from
+                   a  IPv6 delegation server. ovn-controller will add an entry
+                   ipv6_ra_pd_list in the options table for  each  prefix  re‐
+                   ceived from the delegation server
+
+              R = select(N1[=W1], N2[=W2], ...);
+                   Parameters: Integer N1, N2..., with optional weight W1, W2,
+                   ...
+
+                   Result: stored to a logical field or subfield R.
+
+                   Select  from  a list of integers N1, N2..., each within the
+                   range 0 ~ 65535, and store the selected one in the field R.
+                   There must be 2 or more integers listed, each with  an  op‐
+                   tional  weight,  which  is  an integer within the range 1 ~
+                   65535. If weight is not specified, it defaults to 100.  The
+                   selection  method  is  based  on the 5-tuple hash of packet
+                   header.
+
+                   Processing automatically moves on to the next table, as  if
+                   next;  were specified. The select action must be put as the
+                   last action of the logical flow when there are multiple ac‐
+                   tions (actions put after select will not take effect).
+
+                   Example: reg8[16..31] = select(1=20, 2=30, 3=50);
+
+              handle_dhcpv6_reply;
+                   This action is used to parse DHCPv6 replies from IPv6 Dele‐
+                   gation Router and managed IPv6 Prefix delegation state  ma‐
+                   chine
+
+              R = chk_lb_hairpin();
+                   This  action  checks  if the packet under consideration was
+                   destined to a load balancer VIP and it is hairpinned, i.e.,
+                   after load balancing the destination IP matches the  source
+                   IP.  If  it is so, then the 1-bit destination register R is
+                   set to 1.
+
+              R = chk_lb_hairpin_reply();
+                   This action checks if the  packet  under  consideration  is
+                   from  one  of the backend IP of a load balancer VIP and the
+                   destination IP is the load balancer VIP. If it is so,  then
+                   the 1-bit destination register R is set to 1.
+
+              R = ct_snat_to_vip;
+                   This  action  sends  the  packet  through  the SNAT zone to
+                   change the source IP address of the packet to the load bal‐
+                   ancer VIP if the original destination IP was load  balancer
+                   VIP  and  commits  the connection. This action applies suc‐
+                   cessfully only for the hairpinned traffic i.e if the action
+                   chk_lb_hairpin returned success. This action  doesn’t  take
+                   any arguments and it determines the SNAT IP internally. The
+                   packet  is  not  automatically  sent to the next table. The
+                   caller has to execute the  next;  action  explicitly  after
+                   this action to advance the packet to the next stage.
+
+              R = check_in_port_sec();
+                   This action checks if the packet under consideration passes
+                   the  inport  port  security checks. If the packet fails the
+                   port security checks, then 1 is stored in  the  destination
+                   register  R.  Else 0 is stored. The port security values to
+                   check are retrieved from the the inport logical port.
+
+                   This action should be used in the  ingress  logical  switch
+                   pipeline.
+
+                   Example: reg8[0..7] = check_in_port_sec();
+
+              R = check_out_port_sec();
+                   This action checks if the packet under consideration passes
+                   the  outport  port security checks. If the packet fails the
+                   port security checks, then 1 is stored in  the  destination
+                   register  R.  Else 0 is stored. The port security values to
+                   check are retrieved from the the outport logical port.
+
+                   This action should be used in  the  egress  logical  switch
+                   pipeline.
+
+                   Example: reg8[0..7] = check_out_port_sec();
+
+              commit_ecmp_nh(ipv6);
+                   Parameters: IPv4/IPv6 traffic.
+
+                   This  action  translates to an openflow "learn" action that
+                   inserts two new flows in tables 76 and 77.
+
+                   •      Match on the the 5-tuple and the  expected  next-hop
+                          mac  address  in  table  76: nw_src=ip0, nw_dst=ip1,
+                          ip_proto,tp_src=l4_port0,
+                          tp_dst=l4_port1,dl_src=ethaddr and set reg9[5].
+
+                   •      Match  on  the  5-tuple  in  table  77:  nw_src=ip1,
+                          nw_dst=ip0,        ip_proto,        tp_src=l4_port1,
+                          tp_dst=l4_port0 and set reg9[5] to 1
+
+                   This action is applied if the packet arrives via ECMP route
+                   or if it is routed via an ECMP route
+
+              R = check_ecmp_nh_mac();
+                   This  action  checks  if  the  packet  under  consideration
+                   matches  any  flow in table 76. If it is so, then the 1-bit
+                   destination register R is set to 1.
+
+              R = check_ecmp_nh();
+                   This  action  checks  if  the  packet  under  consideration
+                   matches  the  any  flow  in table 77. If it is so, then the
+                   1-bit destination register R is set to 1.
+
+                   commit_lb_aff(vip, backend,  proto,  timeout);  Parameters:
+                   load-balancer  virtual  ip:port  vip, load-balancer backend
+                   ip:port backend,  load-balancer  protocol  proto,  affinity
+                   timeout timeout.
+
+                   This  action  translates to an openflow "learn" action that
+                   inserts a new flow in table 78.
+
+                   •      Match on the 4-tuple in table 78: nw_src=ip  client,
+                          nw_dst=vip  ip,  ip_proto,  tp_dst=vip  port and set
+                          reg9[6] to 1, reg4 and reg8 to backend ip  and  port
+                          respectively.  For  IPv6  register xxreg1 is used to
+                          store the backend ip.
+
+                   This action is applied for new connections  received  by  a
+                   specific load-balacer with affinity timeout configured.
+
+              R = chk_lb_aff();
+                   This  action  checks  if  the  packet  under  consideration
+                   matches any flow in table 78. If it is so, then  the  1-bit
+                   destination register R is set to 1.
+
+              sample(probability=packets, ...)
+                   This  action causes the matched traffic to be sampled using
+                   IPFIX protocol. More information about how  per-flow  IPFIX
+                   sampling  works  in  OVS can be found in ovs-actions(7) and
+                   ovs-vswitchd.conf.db(5).
+
+                   In order to reliably identify each sampled packet  when  it
+                   is  received  by  the IPFIX collector, this action sets the
+                   content of the ObservationDomainID  and  ObservationPointID
+                   IPFIX fields (see argument description below).
+
+                   The following key-value arguments are supported:
+
+                   probability=packets
+                          The  number of sampled packets out of 65535. It must
+                          be greater or equal to 1.
+
+                   collector_set=id
+                          The unsigned 32-bit integer identifier of the sample
+                          collector to send sampled packets to. It must  match
+                          the  value  configured  in  the  Flow_Sample_Collec�‐
+                          tor_Set Table in OVS. Defaults to 0.
+
+                   obs_domain=id
+                          An unsigned 8-bit integer that identifies  the  sam‐
+                          pling  application.  It will be placed in the 8 most
+                          significant bits of the ObservationDomainID field of
+                          IPFIX samples. The 24 less significant bits will  be
+                          automatically  filled  in with the datapath key. De‐
+                          faults to 0.
+
+                   obs_point=id
+                          An unsigned 32-bit integer to be used  as  Obsserva�‐
+                          tionPointID  or  the string @cookie to indicate that
+                          the first 32 bits of the Logical_Flow’s  UUID  shall
+                          be used instead.
+
+       tags: map of string-string pairs
+              Key-value pairs that provide additional information to help ovn-
+              controller  processing the logical flow. Below are the tags used
+              by ovn-controller.
+
+              in_out_port
+                     In the logical flow’s "match" column, if a logical port P
+                     is compared with "inport" and the logical flow  is  on  a
+                     logical switch ingress pipeline, or if P is compared with
+                     "outport"  and  the  logical  flow is on a logical switch
+                     egress pipeline, and  the  expression  is  combined  with
+                     other  expressions  (if  any) using the operator &&, then
+                     the port P should be added as the value in this  tag.  If
+                     there  are  multiple logical ports meeting this criteria,
+                     one of them can be added. ovn-controller uses this infor‐
+                     mation to skip parsing flows that are not needed  on  the
+                     chassis.  Failing  to add the tag will affect efficiency,
+                     while adding wrong value will affect correctness.
+
+       controller_meter: optional string
+              The name of the meter in table Meter to be used for all  packets
+              that the logical flow might send to ovn-controller.
+
+       external_ids : stage-name: optional string
+              Human-readable name for this flow’s stage in the pipeline.
+
+       external_ids : stage-hint: optional string, containing an uuid
+              UUID of a OVN_Northbound record that caused this logical flow to
+              be  created.  Currently used only for attribute of logical flows
+              to northbound ACL records.
+
+       external_ids : source: optional string
+              Source file and line number of the code that added this flow  to
+              the pipeline.
+
+     Common Columns:
+
+       The  overall purpose of these columns is described under Common Columns
+       at the beginning of this document.
+
+       external_ids: map of string-string pairs
+Logical_DP_Group TABLE
+       Each row in this table represents a group of logical  datapaths  refer‐
+       enced by the logical_dp_group column in the Logical_Flow table.
+
+   Summary:
+       datapaths                     set  of  weak reference to Datapath_Bind�‐
+                                     ings
+
+   Details:
+       datapaths: set of weak reference to Datapath_Bindings
+              List of Datapath_Binding entries.
+
+Multicast_Group TABLE
+       The rows in this table define multicast groups of logical ports. Multi‐
+       cast groups allow a single packet transmitted over a tunnel to a hyper‐
+       visor to be delivered to multiple VMs on that  hypervisor,  which  uses
+       bandwidth more efficiently.
+
+       Each  row in this table defines a logical multicast group numbered tun�‐
+       nel_key within datapath, whose logical ports are listed  in  the  ports
+       column.
+
+   Summary:
+       datapath                      Datapath_Binding
+       tunnel_key                    integer, in range 32,768 to 65,535
+       name                          string
+       ports                         set of weak reference to Port_Bindings
+
+   Details:
+       datapath: Datapath_Binding
+              The logical datapath in which the multicast group resides.
+
+       tunnel_key: integer, in range 32,768 to 65,535
+              The  value  used to designate this logical egress port in tunnel
+              encapsulations. An index forces the key to be unique within  the
+              datapath.  The unusual range ensures that multicast group IDs do
+              not overlap with logical port IDs.
+
+       name: string
+              The logical multicast group’s name. An index forces the name  to
+              be  unique  within  the  datapath.  Logical flows in the ingress
+              pipeline may output to the group just as for individual  logical
+              ports, by assigning the group’s name to outport and executing an
+              output action.
+
+              Multicast  group  names  and  logical  port names share a single
+              namespace and thus should not overlap (but the  database  schema
+              cannot enforce this). To try to avoid conflicts, ovn-northd uses
+              names that begin with _MC_.
+
+       ports: set of weak reference to Port_Bindings
+              The  logical ports included in the multicast group. All of these
+              ports must be in the datapath logical datapath (but the database
+              schema cannot enforce this).
+
+Mirror TABLE
+       Each row in this table represents a mirror that can be  used  for  port
+       mirroring.  These  mirrors are referenced by the mirror_rules column in
+       the Port_Binding table.
+
+   Summary:
+       name                          string (must be unique within table)
+       filter                        string,  one  of  both,  from-lport,   or
+                                     to-lport
+       sink                          string
+       type                          string, one of erspan, gre, or local
+       index                         integer
+       external_ids                  map of string-string pairs
+
+   Details:
+       name: string (must be unique within table)
+              Represents the name of the mirror.
+
+       filter: string, one of both, from-lport, or to-lport
+              The  value  of  this  field represents selection criteria of the
+              mirror. to-lport mirrors the packets coming into  logical  port.
+              from-lport  mirrors  the packets going out of logical port. both
+              mirrors for both directions.
+
+       sink: string
+              The value of this field represents the destination/sink  of  the
+              mirror.  If  the  type is gre or erspan, the value indicates the
+              tunnel remote IP (either IPv4 or IPv6). For  a  type  of  local,
+              this  field  defines  a  local  interface on the OVS integration
+              bridge to be used as the mirror destination. The interface  must
+              possess external-ids:mirror-id that matches this string.
+
+       type: string, one of erspan, gre, or local
+              The  value of this field specifies the mirror type - gre, erspan
+              or local.
+
+       index: integer
+              The value of this field represents the tunnel ID. If the config‐
+              ured tunnel type is gre, this field represents the GRE key value
+              and if the configured tunnel type is erspan  it  represents  the
+              erspan_idx value. It is ignored if the type is local.
+
+       external_ids: map of string-string pairs
+              See External IDs at the beginning of this document.
+
+Meter TABLE
+       Each  row  in this table represents a meter that can be used for QoS or
+       rate-limiting.
+
+   Summary:
+       name                          string (must be unique within table)
+       unit                          string, either kbps or pktps
+       bands                         set of 1 or more Meter_Bands
+
+   Details:
+       name: string (must be unique within table)
+              A name for this meter.
+
+              Names that begin with "__" (two underscores)  are  reserved  for
+              OVN internal use and should not be added manually.
+
+       unit: string, either kbps or pktps
+              The  unit for rate and burst_rate parameters in the bands entry.
+              kbps specifies kilobits per second, and pktps specifies  packets
+              per second.
+
+       bands: set of 1 or more Meter_Bands
+              The bands associated with this meter. Each band specifies a rate
+              above  which  the band is to take the action action. If multiple
+              bands’ rates are exceeded, then the band with the  highest  rate
+              among the exceeded bands is selected.
+
+Meter_Band TABLE
+       Each row in this table represents a meter band which specifies the rate
+       above  which  the  configured action should be applied. These bands are
+       referenced by the bands column in the Meter table.
+
+   Summary:
+       action                        string, must be drop
+       rate                          integer, in range 1 to 4,294,967,295
+       burst_size                    integer, in range 0 to 4,294,967,295
+
+   Details:
+       action: string, must be drop
+              The action to execute when this band matches. The only supported
+              action is drop.
+
+       rate: integer, in range 1 to 4,294,967,295
+              The rate limit for this band, in kilobits per second or bits per
+              second, depending on whether the parent Meter entry’s unit  col‐
+              umn specified kbps or pktps.
+
+       burst_size: integer, in range 0 to 4,294,967,295
+              The  maximum  burst allowed for the band in kilobits or packets,
+              depending on whether kbps or pktps was selected  in  the  parent
+              Meter  entry’s  unit  column. If the size is zero, the switch is
+              free to select some reasonable value depending on its configura‐
+              tion.
+Datapath_Binding TABLE
+       Each row in this table represents a logical datapath, which  implements
+       a logical pipeline among the ports in the Port_Binding table associated
+       with  it.  In practice, the pipeline in a given logical datapath imple‐
+       ments either a logical switch or a logical router.
+
+       The main purpose of a row in this table is provide a  physical  binding
+       for a logical datapath. A logical datapath does not have a physical lo‐
+       cation,  so  its  physical  binding  information  is limited: just tun�‐
+       nel_key. The rest of the data in this table does not affect packet for‐
+       warding.
+
+   Summary:
+       tunnel_key                    integer, in range 1 to  16,777,215  (must
+                                     be unique within table)
+       load_balancers                set of uuids
+       OVN_Northbound Relationship:
+         external_ids : logical-switch
+                                     optional string, containing an uuid
+         external_ids : logical-router
+                                     optional string, containing an uuid
+         external_ids : interconn-ts
+                                     optional string
+         Naming:
+            external_ids : name      optional string
+            external_ids : name2     optional string
+       Common Columns:
+         external_ids                map of string-string pairs
+
+   Details:
+       tunnel_key: integer, in range 1 to 16,777,215 (must be unique within
+       table)
+              The tunnel key value to which the logical datapath is bound. The
+              Tunnel  Encapsulation  section  in ovn-architecture(7) describes
+              how tunnel keys are constructed for  each  supported  encapsula‐
+              tion.
+
+       load_balancers: set of uuids
+              Not  used  anymore;  kept  for  backwards  compatibility  of the
+              schema.
+
+     OVN_Northbound Relationship:
+
+       Each row in Datapath_Binding is associated with some logical  datapath.
+       ovn-northd  uses these keys to track the association of a logical data‐
+       path with concepts in the OVN_Northbound database.
+
+       external_ids : logical-switch: optional string, containing an uuid
+              For  a  logical  datapath  that  represents  a  logical  switch,
+              ovn-northd stores in this key the UUID of the corresponding Log�‐
+              ical_Switch row in the OVN_Northbound database.
+
+       external_ids : logical-router: optional string, containing an uuid
+              For  a  logical  datapath  that  represents  a  logical  router,
+              ovn-northd stores in this key the UUID of the corresponding Log�‐
+              ical_Router row in the OVN_Northbound database.
+
+       external_ids : interconn-ts: optional string
+              For a logical datapath that represents  a  logical  switch  that
+              represents  a  transit  switch  for  interconnection, ovn-northd
+              stores in this key the value of the same interconn-ts key of the
+              external_ids column of the corresponding Logical_Switch  row  in
+              the OVN_Northbound database.
+
+     Naming:
+
+       ovn-northd  copies  these  from  the  name fields in the OVN_Northbound
+       database, either from name and external_ids:neutron:router_name in  the
+       Logical_Router table or from name and external_ids:neutron:network_name
+       in the Logical_Switch table.
+
+       external_ids : name: optional string
+              A name for the logical datapath.
+
+       external_ids : name2: optional string
+              Another name for the logical datapath.
+
+     Common Columns:
+
+       The  overall purpose of these columns is described under Common Columns
+       at the beginning of this document.
+
+       external_ids: map of string-string pairs
+Port_Binding TABLE
+       Each row in this table binds a logical port to a realization. For  most
+       logical  ports, this means binding to some physical location, for exam‐
+       ple by binding a logical port to a VIF that belongs to a VM running  on
+       a  particular  hypervisor.  Other  logical ports, such as logical patch
+       ports, can be realized without a specific physical location, but  their
+       bindings are still expressed through rows in this table.
+
+       For   every  Logical_Switch_Port  record  in  OVN_Northbound  database,
+       ovn-northd creates a record in this  table.  ovn-northd  populates  and
+       maintains  every  column except the chassis and virtual_parent columns,
+       which it leaves empty in new records.
+
+       ovn-controller/ovn-controller-vtep populates the chassis column for the
+       records that identify the logical ports that are located on its  hyper‐
+       visor/gateway,  which  ovn-controller/ovn-controller-vtep in turn finds
+       out by monitoring the local hypervisor’s Open_vSwitch  database,  which
+       identifies  logical  ports  via  the  conventions described in Integra�‐
+       tionGuide.rst. (The exceptions are for Port_Binding records  with  type
+       of  l3gateway, whose locations are identified by ovn-northd via the op�‐
+       tions:l3gateway-chassis column in this table. ovn-controller  is  still
+       responsible to populate the chassis column.)
+
+       ovn-controller  also  populates  the  virtual_parent  column of records
+       whose type is virtual.
+
+       When a chassis shuts down gracefully, it should clean  up  the  chassis
+       column  that it previously had populated. (This is not critical because
+       resources hosted on the chassis are equally unreachable  regardless  of
+       whether  their rows are present.) To handle the case where a VM is shut
+       down abruptly on one chassis, then brought up again on a different one,
+       ovn-controller/ovn-controller-vtep must overwrite  the  chassis  column
+       with new information.
+
+   Summary:
+       Core Features:
+         datapath                    Datapath_Binding
+         logical_port                string (must be unique within table)
+         encap                       optional weak reference to Encap
+         additional_encap            set of weak reference to Encaps
+         chassis                     optional weak reference to Chassis
+         additional_chassis          set of weak reference to Chassis
+         gateway_chassis             set of Gateway_Chassises
+         ha_chassis_group            optional HA_Chassis_Group
+         up                          optional boolean
+         tunnel_key                  integer, in range 1 to 32,767
+         mac                         set of strings
+         port_security               set of strings
+         type                        string
+         requested_chassis           optional weak reference to Chassis
+         requested_additional_chassis
+                                     set of weak reference to Chassis
+       mirror_rules                  set of weak reference to Mirrors
+       Patch Options:
+         options : peer              optional string
+         nat_addresses               set of strings
+       L3 Gateway Options:
+         options : peer              optional string
+         options : l3gateway-chassis
+                                     optional string
+         nat_addresses               set of strings
+       Localnet Options:
+         options : network_name      optional string
+         tag                         optional integer, in range 1 to 4,095
+       L2 Gateway Options:
+         options : network_name      optional string
+         options : l2gateway-chassis
+                                     optional string
+         tag                         optional integer, in range 1 to 4,095
+       VTEP Options:
+         options : vtep-physical-switch
+                                     optional string
+         options : vtep-logical-switch
+                                     optional string
+       VMI (or VIF) Options:
+         options : requested-chassis
+                                     optional string
+         options : activation-strategy
+                                     optional string
+         options : additional-chassis-activated
+                                     optional string
+         options : iface-id-ver      optional string
+         options : qos_min_rate      optional string
+         options : qos_max_rate      optional string
+         options : qos_burst         optional string
+         options : qos_physical_network
+                                     optional string
+         options : qdisc_queue_id    optional  string,  containing an integer,
+                                     in range 1 to 61,440
+       Distributed Gateway Port Options:
+         options : chassis-redirect-port
+                                     optional string
+       Chassis Redirect Options:
+         options : distributed-port  optional string
+         options : redirect-type     optional string
+         options : always-redirect   optional string
+       Nested Containers:
+         parent_port                 optional string
+         tag                         optional integer, in range 1 to 4,095
+       Virtual ports:
+         virtual_parent              optional string
+       Naming:
+         external_ids : name         optional string
+       Common Columns:
+         external_ids                map of string-string pairs
+
+   Details:
+     Core Features:
+
+       datapath: Datapath_Binding
+              The logical datapath to which the logical port belongs.
+
+       logical_port: string (must be unique within table)
+              A logical port. For a logical switch port, this  is  taken  from
+              name in the OVN_Northbound database’s Logical_Switch_Port table.
+              For  a  logical  router  port,  this  is  taken from name in the
+              OVN_Northbound database’s Logical_Router_port table. (This means
+              that logical switch ports and router port names must  not  share
+              names in an OVN deployment.) OVN does not prescribe a particular
+              format for the logical port ID.
+
+       encap: optional weak reference to Encap
+              Points to preferred encapsulation configuration to transmit log‐
+              ical  dataplane  packets to this chassis. The entry is reference
+              to a Encap record.
+
+       additional_encap: set of weak reference to Encaps
+              Points to preferred encapsulation configuration to transmit log‐
+              ical dataplane packets to this additional chassis. The entry  is
+              reference to a Encap record. See also additional_chassis.
+
+       chassis: optional weak reference to Chassis
+              The meaning of this column depends on the value of the type col‐
+              umn. This is the meaning for each type
+
+              (empty string)
+                     The  physical  location  of the logical port. To success‐
+                     fully identify a chassis, this column must be  a  Chassis
+                     record. This is populated by ovn-controller.
+
+              vtep   The  physical  location  of the hardware_vtep gateway. To
+                     successfully identify a chassis, this column  must  be  a
+                     Chassis record. This is populated by ovn-controller-vtep.
+
+              localnet
+                     Always  empty. A localnet port is realized on every chas‐
+                     sis that has connectivity to the  corresponding  physical
+                     network.
+
+              localport
+                     Always  empty. A localport port is present on every chas‐
+                     sis.
+
+              l3gateway
+                     The physical location of the L3 gateway. To  successfully
+                     identify a chassis, this column must be a Chassis record.
+                     This is populated by ovn-controller based on the value of
+                     the options:l3gateway-chassis column in this table.
+
+              l2gateway
+                     The physical location of this L2 gateway. To successfully
+                     identify a chassis, this column must be a Chassis record.
+                     This is populated by ovn-controller based on the value of
+                     the options:l2gateway-chassis column in this table.
+
+       additional_chassis: set of weak reference to Chassis
+              The  meaning  of this column is the same as for the chassis. The
+              column is used to track an additional physical location  of  the
+              logical port. Used with regular (empty type) port bindings.
+
+       gateway_chassis: set of Gateway_Chassises
+              A list of Gateway_Chassis.
+
+              This  should  only be populated for ports with type set to chas�‐
+              sisredirect. This column defines the list  of  chassis  used  as
+              gateways where traffic will be redirected through.
+
+       ha_chassis_group: optional HA_Chassis_Group
+              This  should  only be populated for ports with type set to chas�‐
+              sisredirect. This column defines the HA  chassis  group  with  a
+              list  of HA chassis used as gateways where traffic will be redi‐
+              rected through.
+
+       up: optional boolean
+              This is set to true whenever all  OVS  flows  required  by  this
+              Port_Binding  have been installed. This is populated by ovn-con�‐
+              troller.
+
+       tunnel_key: integer, in range 1 to 32,767
+              A number that represents the logical port in the key  (e.g.  STT
+              key or Geneve TLV) field carried within tunnel protocol packets.
+
+              The tunnel ID must be unique within the scope of a logical data‐
+              path.
+
+       mac: set of strings
+              This column is a misnomer as it may contain MAC addresses and IP
+              addresses.  It  is copied from the addresses column in the Logi�‐
+              cal_Switch_Port table in the Northbound database. It follows the
+              same format as that column.
+
+       port_security: set of strings
+              This column controls the addresses from which the host  attached
+              to  the  logical  port (``the host’’) is allowed to send packets
+              and to which it is allowed to receive packets. If this column is
+              empty, all addresses are permitted.
+
+              It  is  copied  from  the  port_security  column  in  the  Logi�‐
+              cal_Switch_Port table in the Northbound database. It follows the
+              same format as that column.
+
+       type: string
+              A type for this logical port. Logical ports can be used to model
+              other types of connectivity into an OVN logical switch. The fol‐
+              lowing types are defined:
+
+              (empty string)
+                     VM (or VIF) interface.
+
+              patch  One  of  a pair of logical ports that act as if connected
+                     by a patch cable. Useful for connecting two logical data‐
+                     paths, e.g. to connect a  logical  router  to  a  logical
+                     switch or to another logical router.
+
+              l3gateway
+                     One  of  a pair of logical ports that act as if connected
+                     by a patch cable across multiple chassis. Useful for con‐
+                     necting a logical switch with a Gateway router (which  is
+                     only resident on a particular chassis).
+
+              localnet
+                     A   connection  to  a  locally  accessible  network  from
+                     ovn-controller instances that have a corresponding bridge
+                     mapping. A logical  switch  can  have  multiple  localnet
+                     ports attached. This type is used to model direct connec‐
+                     tivity  to  existing networks. In this case, each chassis
+                     should have a mapping for one of  the  physical  networks
+                     only.  Note:  nothing  said  above implies that a chassis
+                     cannot be plugged to multiple physical networks  as  long
+                     as they belong to different switches.
+
+              localport
+                     A  connection  to  a local VIF. Traffic that arrives on a
+                     localport is never forwarded over  a  tunnel  to  another
+                     chassis.  These  ports  are  present on every chassis and
+                     have the same address in all of them.  This  is  used  to
+                     model  connectivity  to  local services that run on every
+                     hypervisor.
+
+              l2gateway
+                     An L2 connection to a physical network. The chassis  this
+                     Port_Binding  is  bound to will serve as an L2 gateway to
+                     the network named by options:network_name.
+
+              vtep   A port to a logical switch on a VTEP gateway chassis.  In
+                     order  to  get  this port correctly recognized by the OVN
+                     controller,  the  options:vtep-physical-switch  and   op�‐
+                     tions:vtep-logical-switch must also be defined.
+
+              chassisredirect
+                     A  logical  port  that  represents a particular instance,
+                     bound to a specific chassis, of an otherwise  distributed
+                     parent  port (e.g. of type patch). A chassisredirect port
+                     should never be  used  as  an  inport.  When  an  ingress
+                     pipeline sets the outport, it may set the value to a log‐
+                     ical  port  of  type chassisredirect. This will cause the
+                     packet to be directed to a specific chassis to carry  out
+                     the  egress  pipeline.  At  the  beginning  of the egress
+                     pipeline, the outport will be reset to the value  of  the
+                     distributed port.
+
+              virtual
+                     Represents  a  logical port with an virtual ip. This vir�‐
+                     tual ip can be configured on a logical port (which is re‐
+                     ferred as virtual parent).
+
+       requested_chassis: optional weak reference to Chassis
+              This column exists so that the  ovn-controller  can  effectively
+              monitor  all Port_Binding records destined for it, and is a sup‐
+              plement to the options:requested-chassis option. The  option  is
+              still  required so that the ovn-controller can check the CMS in‐
+              tent when the chassis pointed to does not currently exist, which
+              for example occurs when the ovn-controller  is  stopped  without
+              passing  the  -restart  argument.  This column must be a Chassis
+              record. This is populated by  ovn-northd  when  the  options:re�‐
+              quested-chassis  is  defined  and contains a string matching the
+              name or hostname of an existing chassis. See also  requested_ad�‐
+              ditional_chassis.
+
+       requested_additional_chassis: set of weak reference to Chassis
+              This  column  exists  so that the ovn-controller can effectively
+              monitor all Port_Binding records destined for it, and is a  sup‐
+              plement  to  the  options:requested-chassis option when multiple
+              chassis are listed. This  column  must  be  a  list  of  Chassis
+              records.  This  is  populated by ovn-northd when the options:re�‐
+              quested-chassis is defined as a list of chassis names  or  host‐
+              names. See also requested_chassis.
+
+       mirror_rules: set of weak reference to Mirrors
+              Mirror rules that apply to the port binding. Please see the Mir�‐
+              ror table.
+
+     Patch Options:
+
+       These options apply to logical ports with type of patch.
+
+       options : peer: optional string
+              The  logical_port  in the Port_Binding record for the other side
+              of the patch. The named logical_port  must  specify  this  logi�‐
+              cal_port  in its own peer option. That is, the two patch logical
+              ports must have reversed logical_port and peer values.
+
+       nat_addresses: set of strings
+              MAC address followed by a list of SNAT and DNAT external IP  ad‐
+              dresses,  followed  by is_chassis_resident("lport"), where lport
+              is the name of a logical port on the same chassis where the cor‐
+              responding NAT rules are applied. This is used  to  send  gratu‐
+              itous ARPs for SNAT and DNAT external IP addresses via localnet,
+              from the chassis where lport resides. Example: 80:fa:5b:06:72:b7
+              158.36.44.22   158.36.44.24   is_chassis_resident("foo1").  This
+              would result in generation of gratuitous ARPs for  IP  addresses
+              158.36.44.22   and   158.36.44.24   with   a   MAC   address  of
+              80:fa:5b:06:72:b7 from the chassis where the logical port "foo1"
+              resides.
+
+     L3 Gateway Options:
+
+       These options apply to logical ports with type of l3gateway.
+
+       options : peer: optional string
+              The logical_port in the Port_Binding record for the  other  side
+              of  the  ’l3gateway’  port.  The named logical_port must specify
+              this logical_port in its own  peer  option.  That  is,  the  two
+              ’l3gateway’  logical  ports  must have reversed logical_port and
+              peer values.
+
+       options : l3gateway-chassis: optional string
+              The chassis in which the port resides.
+
+       nat_addresses: set of strings
+              MAC address of the l3gateway port followed by a list of SNAT and
+              DNAT external IP addresses. This is used to send gratuitous ARPs
+              for SNAT and DNAT external IP addresses via  localnet.  Example:
+              80:fa:5b:06:72:b7  158.36.44.22  158.36.44.24. This would result
+              in generation of gratuitous ARPs for IP  addresses  158.36.44.22
+              and  158.36.44.24  with a MAC address of 80:fa:5b:06:72:b7. This
+              is used in OVS version 2.8 and later versions.
+
+     Localnet Options:
+
+       These options apply to logical ports with type of localnet.
+
+       options : network_name: optional string
+              Required.   ovn-controller   uses   the   configuration    entry
+              ovn-bridge-mappings to determine how to connect to this network.
+              ovn-bridge-mappings is a list of network names mapped to a local
+              OVS  bridge  that provides access to that network. An example of
+              configuring ovn-bridge-mappings would be: .IP
+              $ ovs-vsctl set open . external-ids:ovn-bridge-mappings=physnet1:br-eth0,physnet2:br-eth1
+
+              When a logical switch has a localnet port attached, every  chas‐
+              sis  that  may  have a local vif attached to that logical switch
+              must have a bridge mapping configured to  reach  that  localnet.
+              Traffic  that arrives on a localnet port is never forwarded over
+              a tunnel to another chassis.  If  there  are  multiple  localnet
+              ports  in a logical switch, each chassis should only have a sin‐
+              gle bridge mapping for one of the physical  networks.  Note:  In
+              case  of  multiple  localnet ports, to provide interconnectivity
+              between all VIFs located on  different  chassis  with  different
+              fabric  connectivity,  the  fabric should implement some form of
+              routing between the segments.
+
+       tag: optional integer, in range 1 to 4,095
+              If set, indicates that the port represents  a  connection  to  a
+              specific  VLAN  on  a locally accessible network. The VLAN ID is
+              used to match incoming traffic and is  also  added  to  outgoing
+              traffic.
+
+     L2 Gateway Options:
+
+       These options apply to logical ports with type of l2gateway.
+
+       options : network_name: optional string
+              Required.    ovn-controller   uses   the   configuration   entry
+              ovn-bridge-mappings to determine how to connect to this network.
+              ovn-bridge-mappings is a list of network names mapped to a local
+              OVS bridge that provides access to that network. An  example  of
+              configuring ovn-bridge-mappings would be: .IP
+              $ ovs-vsctl set open . external-ids:ovn-bridge-mappings=physnet1:br-eth0,physnet2:br-eth1
+
+              When a logical switch has a l2gateway port attached, the chassis
+              that  the  l2gateway port is bound to must have a bridge mapping
+              configured to reach the network identified by network_name.
+
+       options : l2gateway-chassis: optional string
+              Required. The chassis in which the port resides.
+
+       tag: optional integer, in range 1 to 4,095
+              If set, indicates that the gateway is connected  to  a  specific
+              VLAN  on  the physical network. The VLAN ID is used to match in‐
+              coming traffic and is also added to outgoing traffic.
+
+     VTEP Options:
+
+       These options apply to logical ports with type of vtep.
+
+       options : vtep-physical-switch: optional string
+              Required. The name of the VTEP gateway.
+
+       options : vtep-logical-switch: optional string
+              Required. A logical switch name connected by the  VTEP  gateway.
+              Must be set when type is vtep.
+
+     VMI (or VIF) Options:
+
+       These options apply to logical ports with type having (empty string)
+
+       options : requested-chassis: optional string
+              If set, identifies a specific chassis (by name or hostname) that
+              is  allowed  to  bind  this port. Using this option will prevent
+              thrashing between two chassis trying to bind the same port  dur‐
+              ing  a live migration. It can also prevent similar thrashing due
+              to a mis-configuration, if a port  is  accidentally  created  on
+              more than one chassis.
+
+              If set to a comma separated list, the first entry identifies the
+              main  chassis  and  the  rest are one or more additional chassis
+              that are allowed to bind the same port.
+
+              When multiple chassis are set for  the  port,  and  the  logical
+              switch  is  connected  to an external network through a localnet
+              port, tunneling is enforced for the port to  guarantee  delivery
+              of  packets  directed to the port to all its locations. This has
+              MTU implications because the network  used  for  tunneling  must
+              have MTU larger than localnet for stable connectivity.
+
+       options : activation-strategy: optional string
+              If  used  with multiple chassis set in requested-chassis, speci‐
+              fies an activation strategy for all additional chassis.  By  de‐
+              fault,  no  activation strategy is used, meaning additional port
+              locations are immediately available for use. When set to "rarp",
+              the port is blocked for ingress and egress communication until a
+              RARP packet is sent from a new location. The "rarp" strategy  is
+              useful in live migration scenarios for virtual machines.
+
+       options : additional-chassis-activated: optional string
+              When  activation-strategy is set, this option indicates that the
+              port was activated using the strategy specified.
+
+       options : iface-id-ver: optional string
+              If set, this port will be bound by ovn-controller only  if  this
+              same  key  and value is configured in the external_ids column in
+              the Open_vSwitch database’s Interface table.
+
+       options : qos_min_rate: optional string
+              If set, indicates the minimum guaranteed rate available for data
+              sent from this interface, in bit/s.
+
+       options : qos_max_rate: optional string
+              If set, indicates the maximum rate for data sent from  this  in‐
+              terface,  in bit/s. The traffic will be shaped according to this
+              limit.
+
+       options : qos_burst: optional string
+              If set, indicates the maximum burst size for data sent from this
+              interface, in bits.
+
+       options : qos_physical_network: optional string
+              If set, indicates the name of  the  egress  network  name  where
+              traffic shaping will be applied.
+
+       options : qdisc_queue_id: optional string, containing an integer, in
+       range 1 to 61,440
+              Indicates  the queue number on the physical device. This is same
+              as the queue_id used in OpenFlow in struct ofp_action_enqueue.
+
+     Distributed Gateway Port Options:
+
+       These options apply to the distributed parent ports  of  logical  ports
+       with type of chasssisredirect.
+
+       options : chassis-redirect-port: optional string
+              The  name of the chassis redirect port derived from this port if
+              this port is a distributed parent of a chassis redirect port.
+
+     Chassis Redirect Options:
+
+       These options apply to logical ports with type of chassisredirect.
+
+       options : distributed-port: optional string
+              The name of the distributed port for which this  chassisredirect
+              port represents a particular instance.
+
+       options : redirect-type: optional string
+              The  value  is  copied from the column options in the OVN_North‐
+              bound database’s Logical_Router_Port table for  the  distributed
+              parent of this port.
+
+       options : always-redirect: optional string
+              A  boolean  option that is set to true if the distributed parent
+              of this chassis redirect port does not need distributed process‐
+              ing.
+
+     Nested Containers:
+
+       These columns support containers nested within a VM. Specifically, they
+       are used when type is empty and logical_port identifies  the  interface
+       of  a  container  spawned inside a VM. They are empty for containers or
+       VMs that run directly on a hypervisor.
+
+       parent_port: optional string
+              This is taken from parent_name in the OVN_Northbound  database’s
+              Logical_Switch_Port table.
+
+       tag: optional integer, in range 1 to 4,095
+              Identifies  the  VLAN tag in the network traffic associated with
+              that container’s network interface.
+
+              This column is used for a different purpose when type is  local�‐
+              net  (see  Localnet Options, above) or l2gateway (see L2 Gateway
+              Options, above).
+
+     Virtual ports:
+
+       virtual_parent: optional string
+              This column is set by ovn-controller with one of the value  from
+              the  options:virtual-parents  in  the  OVN_Northbound database’s
+              Logical_Switch_Port table when the OVN action bind_vport is exe‐
+              cuted. ovn-controller also sets the chassis column when it  exe‐
+              cutes this action with its chassis id.
+
+              ovn-controller sets this column only if the type is "virtual".
+
+     Naming:
+
+       external_ids : name: optional string
+              For  a  logical  switch port, ovn-northd copies this from exter�‐
+              nal_ids:neutron:port_name in the  Logical_Switch_Port  table  in
+              the OVN_Northbound database, if it is a nonempty string.
+
+              For  a  logical  switch  port, ovn-northd does not currently set
+              this key.
+
+     Common Columns:
+
+       external_ids: map of string-string pairs
+              See External IDs at the beginning of this document.
+
+              The ovn-northd program populates this column  with  all  entries
+              into the external_ids column of the Logical_Switch_Port and Log�‐
+              ical_Router_Port tables of the OVN_Northbound database.
+
+MAC_Binding TABLE
+       Each  row  in  this  table specifies a binding from an IP address to an
+       Ethernet address that has been discovered through  ARP  (for  IPv4)  or
+       neighbor discovery (for IPv6). This table is primarily used to discover
+       bindings  on  physical networks, because IP-to-MAC bindings for virtual
+       machines are usually populated statically into the Port_Binding table.
+
+       This  table  expresses  a  functional  relationship:  MAC_Binding(logi�‐
+       cal_port, ip) = mac.
+
+       In  outline,  the lifetime of a logical router’s MAC binding looks like
+       this:
+
+              1.  On hypervisor 1, a logical router determines that  a  packet
+                  should  be  forwarded  to  IP address A on one of its router
+                  ports. It uses its logical flow table to  determine  that  A
+                  lacks  a  static IP-to-MAC binding and the get_arp action to
+                  determine that it lacks a dynamic IP-to-MAC binding.
+
+              2.  Using an OVN logical arp action, the logical  router  gener‐
+                  ates  and  sends a broadcast ARP request to the router port.
+                  It drops the IP packet.
+
+              3.  The logical switch attached to the router port delivers  the
+                  ARP request to all of its ports. (It might make sense to de‐
+                  liver  it  only to ports that have no static IP-to-MAC bind‐
+                  ings, but this could also be surprising behavior.)
+
+              4.  A host or VM on hypervisor 2 (which might be the same as hy‐
+                  pervisor 1) attached to the logical switch owns the  IP  ad‐
+                  dress  in question. It composes an ARP reply and unicasts it
+                  to the logical router port’s Ethernet address.
+
+              5.  The logical switch delivers the ARP  reply  to  the  logical
+                  router port.
+
+              6.  The  logical router flow table executes a put_arp action. To
+                  record the IP-to-MAC binding, ovn-controller adds a  row  to
+                  the MAC_Binding table.
+
+              7.  On   hypervisor   1,  ovn-controller  receives  the  updated
+                  MAC_Binding table from the OVN southbound database. The next
+                  packet destined to A through the logical router is sent  di‐
+                  rectly to the bound Ethernet address.
+
+   Summary:
+       logical_port                  string
+       ip                            string
+       mac                           string
+       timestamp                     integer
+       datapath                      Datapath_Binding
+
+   Details:
+       logical_port: string
+              The logical port on which the binding was discovered.
+
+       ip: string
+              The bound IP address.
+
+       mac: string
+              The Ethernet address to which the IP is bound.
+
+       timestamp: integer
+              The timestamp in msec when the MAC binding was added or updated.
+              Records that existed before this column will have 0.
+
+       datapath: Datapath_Binding
+              The logical datapath to which the logical port belongs.
+
+DHCP_Options TABLE
+       Each  row in this table stores the DHCP Options supported by native OVN
+       DHCP. ovn-northd populates this table with the supported DHCP  options.
+       ovn-controller  looks  up  this table to get the DHCP codes of the DHCP
+       options defined in the "put_dhcp_opts" action. Please refer to the  RFC
+       2132  "https://tools.ietf.org/html/rfc2132"  for  the  possible list of
+       DHCP options that can be defined here.
+
+   Summary:
+       name                          string
+       code                          integer, in range 0 to 254
+       type                          string, one of  bool,  domains,  host_id,
+                                     ipv4, static_routes, str, uint16, uint32,
+                                     or uint8
+
+   Details:
+       name: string
+              Name of the DHCP option.
+
+              Example. name="router"
+
+       code: integer, in range 0 to 254
+              DHCP option code for the DHCP option as defined in the RFC 2132.
+
+              Example. code=3
+
+       type: string, one of bool, domains, host_id, ipv4, static_routes, str,
+       uint16, uint32, or uint8
+              Data type of the DHCP option code.
+
+              value: bool
+                     This  indicates  that  the  value of the DHCP option is a
+                     bool.
+
+                     Example.       "name=ip_forward_enable",       "code=19",
+                     "type=bool".
+
+                     put_dhcp_opts(..., ip_forward_enable = 1,...)
+
+              value: uint8
+                     This  indicates  that  the value of the DHCP option is an
+                     unsigned int8 (8 bits)
+
+                     Example. "name=default_ttl", "code=23", "type=uint8".
+
+                     put_dhcp_opts(..., default_ttl = 50,...)
+
+              value: uint16
+                     This indicates that the value of the DHCP  option  is  an
+                     unsigned int16 (16 bits).
+
+                     Example. "name=mtu", "code=26", "type=uint16".
+
+                     put_dhcp_opts(..., mtu = 1450,...)
+
+              value: uint32
+                     This  indicates  that  the value of the DHCP option is an
+                     unsigned int32 (32 bits).
+
+                     Example. "name=lease_time", "code=51", "type=uint32".
+
+                     put_dhcp_opts(..., lease_time = 86400,...)
+
+              value: ipv4
+                     This indicates that the value of the DHCP  option  is  an
+                     IPv4 address or addresses.
+
+                     Example. "name=router", "code=3", "type=ipv4".
+
+                     put_dhcp_opts(..., router = 10.0.0.1,...)
+
+                     Example. "name=dns_server", "code=6", "type=ipv4".
+
+                     put_dhcp_opts(..., dns_server = {8.8.8.8 7.7.7.7},...)
+
+              value: static_routes
+                     This indicates that the value of the DHCP option contains
+                     a pair of IPv4 route and next hop addresses.
+
+                     Example.    "name=classless_static_route",    "code=121",
+                     "type=static_routes".
+
+                     put_dhcp_opts(...,        classless_static_route        =
+                     {30.0.0.0/24,10.0.0.4,0.0.0.0/0,10.0.0.1}...)
+
+              value: str
+                     This  indicates  that  the  value of the DHCP option is a
+                     string.
+
+                     Example. "name=host_name", "code=12", "type=str".
+
+              value: host_id
+                     This indicates that the value of the  DHCP  option  is  a
+                     host_id. It can either be a host_name or an IP address.
+
+                     Example. "name=tftp_server", "code=66", "type=host_id".
+
+              value: domains
+                     This indicates that the value of the DHCP option is a do‐
+                     main name or a comma separated list of domain names.
+
+                     Example. "name=domain_search_list", "code=119", "type=do‐
+                     mains".
+DHCPv6_Options TABLE
+       Each  row  in  this table stores the DHCPv6 Options supported by native
+       OVN DHCPv6. ovn-northd populates this table with the  supported  DHCPv6
+       options.  ovn-controller looks up this table to get the DHCPv6 codes of
+       the DHCPv6 options defined in the put_dhcpv6_opts action. Please  refer
+       to RFC 3315 and RFC 3646 for the list of DHCPv6 options that can be de‐
+       fined here.
+
+   Summary:
+       name                          string
+       code                          integer, in range 0 to 254
+       type                          string, one of ipv6, mac, or str
+
+   Details:
+       name: string
+              Name of the DHCPv6 option.
+
+              Example. name="ia_addr"
+
+       code: integer, in range 0 to 254
+              DHCPv6  option  code for the DHCPv6 option as defined in the ap‐
+              propriate RFC.
+
+              Example. code=3
+
+       type: string, one of ipv6, mac, or str
+              Data type of the DHCPv6 option code.
+
+              value: ipv6
+                     This indicates that the value of the DHCPv6 option is  an
+                     IPv6 address(es).
+
+                     Example. "name=ia_addr", "code=5", "type=ipv6".
+
+                     put_dhcpv6_opts(..., ia_addr = ae70::4,...)
+
+              value: str
+                     This  indicates  that the value of the DHCPv6 option is a
+                     string.
+
+                     Example. "name=domain_search", "code=24", "type=str".
+
+                     put_dhcpv6_opts(..., domain_search = ovn.domain,...)
+
+              value: mac
+                     This indicates that the value of the DHCPv6 option  is  a
+                     MAC address.
+
+                     Example. "name=server_id", "code=2", "type=mac".
+
+                     put_dhcpv6_opts(..., server_id = 01:02:03:04L05:06,...)
+Connection TABLE
+       Configuration  for  a  database  connection to an Open vSwitch database
+       (OVSDB) client.
+
+       This table  primarily  configures  the  Open  vSwitch  database  server
+       (ovsdb-server).
+
+       The  Open vSwitch database server can initiate and maintain active con‐
+       nections to remote clients. It can also  listen  for  database  connec‐
+       tions.
+
+   Summary:
+       Core Features:
+         target                      string (must be unique within table)
+         read_only                   boolean
+         role                        string
+       Client Failure Detection and Handling:
+         max_backoff                 optional integer, at least 1,000
+         inactivity_probe            optional integer
+       Status:
+         is_connected                boolean
+         status : last_error         optional string
+         status : state              optional  string, one of ACTIVE, BACKOFF,
+                                     CONNECTING, IDLE, or VOID
+         status : sec_since_connect  optional string, containing  an  integer,
+                                     at least 0
+         status : sec_since_disconnect
+                                     optional  string,  containing an integer,
+                                     at least 0
+         status : locks_held         optional string
+         status : locks_waiting      optional string
+         status : locks_lost         optional string
+         status : n_connections      optional string, containing  an  integer,
+                                     at least 2
+         status : bound_port         optional string, containing an integer
+       Common Columns:
+         external_ids                map of string-string pairs
+         other_config                map of string-string pairs
+
+   Details:
+     Core Features:
+
+       target: string (must be unique within table)
+              Connection methods for clients.
+
+              The following connection methods are currently supported:
+
+              ssl:host[:port]
+                     The  specified  SSL port on the given host, which can ei‐
+                     ther be a DNS name (if built with unbound library) or  an
+                     IP  address.  A  valid SSL configuration must be provided
+                     when this form is used, this configuration can be  speci‐
+                     fied via command-line options or the SSL table.
+
+                     If port is not specified, it defaults to 6640.
+
+                     SSL  support  is  an  optional feature that is not always
+                     built as part of Open vSwitch.
+
+              tcp:host[:port]
+                     The specified TCP port on the given host, which  can  ei‐
+                     ther  be a DNS name (if built with unbound library) or an
+                     IP address (IPv4 or IPv6). If host is  an  IPv6  address,
+                     wrap it in square brackets, e.g. tcp:[::1]:6640.
+
+                     If port is not specified, it defaults to 6640.
+
+              pssl:[port][:host]
+                     Listens  for  SSL  connections on the specified TCP port.
+                     Specify 0 for  port  to  have  the  kernel  automatically
+                     choose  an available port. If host, which can either be a
+                     DNS name (if built with unbound library)  or  an  IP  ad‐
+                     dress,  is  specified, then connections are restricted to
+                     the resolved or specified local IP address  (either  IPv4
+                     or  IPv6  address).  If  host is an IPv6 address, wrap in
+                     square brackets, e.g. pssl:6640:[::1].  If  host  is  not
+                     specified then it listens only on IPv4 (but not IPv6) ad‐
+                     dresses.  A valid SSL configuration must be provided when
+                     this form is used, this can be specified either via  com‐
+                     mand-line options or the SSL table.
+
+                     If port is not specified, it defaults to 6640.
+
+                     SSL  support  is  an  optional feature that is not always
+                     built as part of Open vSwitch.
+
+              ptcp:[port][:host]
+                     Listens for connections on the specified TCP port.  Spec‐
+                     ify 0 for port to have the kernel automatically choose an
+                     available  port.  If host, which can either be a DNS name
+                     (if built with unbound library)  or  an  IP  address,  is
+                     specified,  then  connections  are  restricted to the re‐
+                     solved or specified local IP address (either IPv4 or IPv6
+                     address). If host is an IPv6 address, wrap it  in  square
+                     brackets,  e.g. ptcp:6640:[::1]. If host is not specified
+                     then it listens only on IPv4 addresses.
+
+                     If port is not specified, it defaults to 6640.
+
+              When multiple clients are configured, the target values must  be
+              unique. Duplicate target values yield unspecified results.
+
+       read_only: boolean
+              true  to  restrict  these connections to read-only transactions,
+              false to allow them to modify the database.
+
+       role: string
+              String containing role name for this connection entry.
+
+     Client Failure Detection and Handling:
+
+       max_backoff: optional integer, at least 1,000
+              Maximum number of milliseconds to wait  between  connection  at‐
+              tempts. Default is implementation-specific.
+
+       inactivity_probe: optional integer
+              Maximum number of milliseconds of idle time on connection to the
+              client  before  sending  an  inactivity  probe  message. If Open
+              vSwitch does not communicate with the client for  the  specified
+              number  of  seconds,  it will send a probe. If a response is not
+              received for the same additional amount of  time,  Open  vSwitch
+              assumes  the  connection  has been broken and attempts to recon‐
+              nect. Default is implementation-specific. A value of 0  disables
+              inactivity probes.
+
+     Status:
+
+       Key-value pair of is_connected is always updated. Other key-value pairs
+       in the status columns may be updated depends on the target type.
+
+       When target specifies a connection method that listens for inbound con‐
+       nections  (e.g.  ptcp:  or punix:), both n_connections and is_connected
+       may also be updated while the remaining key-value pairs are omitted.
+
+       On the other hand, when target specifies an  outbound  connection,  all
+       key-value  pairs  may  be  updated, except the above-mentioned two key-
+       value pairs associated with inbound connection targets. They are  omit‐
+       ted.
+
+       is_connected: boolean
+              true if currently connected to this client, false otherwise.
+
+       status : last_error: optional string
+              A human-readable description of the last error on the connection
+              to  the  manager; i.e. strerror(errno). This key will exist only
+              if an error has occurred.
+
+       status : state: optional string, one of ACTIVE, BACKOFF, CONNECTING,
+       IDLE, or VOID
+              The state of the connection to the manager:
+
+              VOID   Connection is disabled.
+
+              BACKOFF
+                     Attempting to reconnect at an increasing period.
+
+              CONNECTING
+                     Attempting to connect.
+
+              ACTIVE Connected, remote host responsive.
+
+              IDLE   Connection is idle. Waiting for response to keep-alive.
+
+              These values may change in the future. They  are  provided  only
+              for human consumption.
+
+       status : sec_since_connect: optional string, containing an integer, at
+       least 0
+              The amount of time since this client last successfully connected
+              to the database (in seconds). Value is empty if client has never
+              successfully been connected.
+
+       status : sec_since_disconnect: optional string, containing an integer,
+       at least 0
+              The  amount of time since this client last disconnected from the
+              database (in seconds). Value is empty if client has  never  dis‐
+              connected.
+
+       status : locks_held: optional string
+              Space-separated  list  of the names of OVSDB locks that the con‐
+              nection holds. Omitted if  the  connection  does  not  hold  any
+              locks.
+
+       status : locks_waiting: optional string
+              Space-separated  list  of the names of OVSDB locks that the con‐
+              nection is currently waiting to acquire. Omitted if the  connec‐
+              tion is not waiting for any locks.
+
+       status : locks_lost: optional string
+              Space-separated  list  of the names of OVSDB locks that the con‐
+              nection has had stolen by another OVSDB client.  Omitted  if  no
+              locks have been stolen from this connection.
+
+       status : n_connections: optional string, containing an integer, at
+       least 2
+              When  target  specifies a connection method that listens for in‐
+              bound connections (e.g. ptcp: or pssl:) and more than  one  con‐
+              nection  is  actually  active, the value is the number of active
+              connections. Otherwise, this key-value pair is omitted.
+
+       status : bound_port: optional string, containing an integer
+              When target is ptcp: or pssl:, this is the TCP port on which the
+              OVSDB server is listening. (This  is  particularly  useful  when
+              target  specifies a port of 0, allowing the kernel to choose any
+              available port.)
+
+     Common Columns:
+
+       The overall purpose of these columns is described under Common  Columns
+       at the beginning of this document.
+
+       external_ids: map of string-string pairs
+
+       other_config: map of string-string pairs
+SSL TABLE
+       SSL configuration for ovn-sb database access.
+
+   Summary:
+       private_key                   string
+       certificate                   string
+       ca_cert                       string
+       bootstrap_ca_cert             boolean
+       ssl_protocols                 string
+       ssl_ciphers                   string
+       Common Columns:
+         external_ids                map of string-string pairs
+
+   Details:
+       private_key: string
+              Name  of  a  PEM  file  containing  the  private key used as the
+              switch’s identity for SSL connections to the controller.
+
+       certificate: string
+              Name of a PEM file containing a certificate, signed by the  cer‐
+              tificate authority (CA) used by the controller and manager, that
+              certifies  the  switch’s  private key, identifying a trustworthy
+              switch.
+
+       ca_cert: string
+              Name of a PEM file containing the CA certificate used to  verify
+              that the switch is connected to a trustworthy controller.
+
+       bootstrap_ca_cert: boolean
+              If  set to true, then Open vSwitch will attempt to obtain the CA
+              certificate from the controller on its first SSL connection  and
+              save  it to the named PEM file. If it is successful, it will im‐
+              mediately drop the connection and reconnect, and  from  then  on
+              all  SSL  connections  must  be  authenticated  by a certificate
+              signed by the CA certificate thus obtained. This option  exposes
+              the  SSL  connection to a man-in-the-middle attack obtaining the
+              initial CA certificate. It may still be  useful  for  bootstrap‐
+              ping.
+
+       ssl_protocols: string
+              List of SSL protocols to be enabled for SSL connections. The de‐
+              fault when this option is omitted is TLSv1,TLSv1.1,TLSv1.2.
+
+       ssl_ciphers: string
+              List  of  ciphers  (in  OpenSSL cipher string format) to be sup‐
+              ported for SSL connections. The  default  when  this  option  is
+              omitted is HIGH:!aNULL:!MD5.
+
+     Common Columns:
+
+       The  overall purpose of these columns is described under Common Columns
+       at the beginning of this document.
+
+       external_ids: map of string-string pairs
+DNS TABLE
+       Each row  in  this  table  stores  the  DNS  records.  The  OVN  action
+       dns_lookup uses this table for DNS resolution.
+
+   Summary:
+       records                       map of string-string pairs
+       datapaths                     set of 1 or more Datapath_Bindings
+       Common Columns:
+         external_ids                map of string-string pairs
+
+   Details:
+       records: map of string-string pairs
+              Key-value pair of DNS records with DNS query name as the key and
+              a  string  of  IP address(es) separated by comma or space as the
+              value. ovn-northd stores the DNS query name in all lowercase  in
+              order to facilitate case-insensitive lookups.
+
+              Example:  "vm1.ovn.org" = "10.0.0.4 aef0::4"
+
+       datapaths: set of 1 or more Datapath_Bindings
+              The  DNS  records  defined in the column records will be applied
+              only to the DNS queries originating from the  datapaths  defined
+              in this column.
+
+     Common Columns:
+
+       external_ids: map of string-string pairs
+              See External IDs at the beginning of this document.
+
+RBAC_Role TABLE
+       Role table for role-based access controls.
+
+   Summary:
+       name                          string
+       permissions                   map of string-weak reference to RBAC_Per�‐
+                                     mission pairs
+
+   Details:
+       name: string
+              The  role  name, corresponding to the role column in the Connec�‐
+              tion table.
+
+       permissions: map of string-weak reference to RBAC_Permission pairs
+              A mapping of table names to rows in the RBAC_Permission table.
+
+RBAC_Permission TABLE
+       Permissions table for role-based access controls.
+
+   Summary:
+       table                         string
+       authorization                 set of strings
+       insert_delete                 boolean
+       update                        set of strings
+
+   Details:
+       table: string
+              Name of table to which this row applies.
+
+       authorization: set of strings
+              Set of strings identifying columns and column:key  pairs  to  be
+              compared with client ID. At least one match is required in order
+              to  be  authorized. A zero-length string is treated as a special
+              value indicating all clients should be considered authorized.
+
+       insert_delete: boolean
+              When "true", row insertions and  authorized  row  deletions  are
+              permitted.
+
+       update: set of strings
+              Set of strings identifying columns and column:key pairs that au‐
+              thorized clients are allowed to modify.
+
+Gateway_Chassis TABLE
+       Association  of Port_Binding rows of type chassisredirect to a Chassis.
+       The traffic going out through a specific chassisredirect port  will  be
+       redirected to a chassis, or a set of them in high availability configu‐
+       rations.
+
+   Summary:
+       name                          string (must be unique within table)
+       chassis                       optional weak reference to Chassis
+       priority                      integer, in range 0 to 32,767
+       options                       map of string-string pairs
+       Common Columns:
+         external_ids                map of string-string pairs
+
+   Details:
+       name: string (must be unique within table)
+              Name of the Gateway_Chassis.
+
+              A   suggested,   but   not   required   naming   convention   is
+              ${port_name}_${chassis_name}.
+
+       chassis: optional weak reference to Chassis
+              The Chassis to which we send the traffic.
+
+       priority: integer, in range 0 to 32,767
+              This is the  priority  the  specific  Chassis  among  all  Gate‐
+              way_Chassis belonging to the same Port_Binding.
+
+       options: map of string-string pairs
+              Reserved for future use.
+
+     Common Columns:
+
+       The  overall purpose of these columns is described under Common Columns
+       at the beginning of this document.
+
+       external_ids: map of string-string pairs
+HA_Chassis TABLE
+   Summary:
+       chassis                       optional weak reference to Chassis
+       priority                      integer, in range 0 to 32,767
+       Common Columns:
+         external_ids                map of string-string pairs
+
+   Details:
+       chassis: optional weak reference to Chassis
+              The Chassis which provides the HA functionality.
+
+       priority: integer, in range 0 to 32,767
+              Priority of the HA chassis. Chassis with highest  priority  will
+              be the master in the HA chassis group.
+
+     Common Columns:
+
+       external_ids: map of string-string pairs
+              See External IDs at the beginning of this document.
+
+HA_Chassis_Group TABLE
+       Table representing a group of chassis which can provide High availabil‐
+       ity  services.  Each  chassis  in the group is represented by the table
+       HA_Chassis. The HA chassis with highest priority will be the master  of
+       this  group. If the master chassis failover is detected, the HA chassis
+       with the next higher priority takes over the responsibility of  provid‐
+       ing the HA. If ha_chassis_group column of the table Port_Binding refer‐
+       ences this table, then this HA chassis group provides the gateway func‐
+       tionality  and  redirects  the  gateway  traffic  to the master of this
+       group.
+
+   Summary:
+       name                          string (must be unique within table)
+       ha_chassis                    set of HA_Chassises
+       ref_chassis                   set of weak reference to Chassis
+       Common Columns:
+         external_ids                map of string-string pairs
+
+   Details:
+       name: string (must be unique within table)
+              Name of the HA_Chassis_Group. Name should be unique.
+
+       ha_chassis: set of HA_Chassises
+              A list of HA_Chassis which belongs to this group.
+
+       ref_chassis: set of weak reference to Chassis
+              The set of Chassis that reference this HA chassis group. To  de‐
+              termine  the  correct  Chassis,  find  the  chassisredirect type
+              Port_Binding  that  references   this   HA_Chassis_Group.   This
+              Port_Binding  is  derived  from  some particular logical router.
+              Starting from that LR, find the set of all logical switches  and
+              routers  connected  to it, directly or indirectly, across router
+              ports that link one LRP to another or to a LSP. For each LSP  in
+              these  logical switches, find the corresponding Port_Binding and
+              add its bound Chassis (if any) to ref_chassis.
+
+     Common Columns:
+
+       external_ids: map of string-string pairs
+              See External IDs at the beginning of this document.
+
+Controller_Event TABLE
+       Database table used by ovn-controller to  report  CMS  related  events.
+       Please note there is no guarantee a given event is written exactly once
+       in  the  db.  It is CMS responsibility to squash duplicated lines or to
+       filter out duplicated events
+
+   Summary:
+       event_type                    string, must be empty_lb_backends
+       event_info                    map of string-string pairs
+       chassis                       optional weak reference to Chassis
+       seq_num                       integer
+
+   Details:
+       event_type: string, must be empty_lb_backends
+              Event type occurred
+
+       event_info: map of string-string pairs
+              Key-value pairs used to specify event info to the CMS.  Possible
+              values are:
+
+              •      vip: VIP reported for the empty_lb_backends event
+
+              •      protocol:    Transport    protocol   reported   for   the
+                     empty_lb_backends event
+
+              •      load_balancer: UUID of the load balancer reported for the
+                     empty_lb_backends event
+
+       chassis: optional weak reference to Chassis
+              This column is a Chassis record to identify the chassis that has
+              managed a given event.
+
+       seq_num: integer
+              Event sequence number. Global counter for  controller  generated
+              events. It can be used by the CMS to detect possible duplication
+              of the same event.
+IP_Multicast TABLE
+       IP Multicast configuration options. For now only applicable to IGMP.
+
+   Summary:
+       datapath                      weak  reference to Datapath_Binding (must
+                                     be unique within table)
+       enabled                       optional boolean
+       querier                       optional boolean
+       table_size                    optional integer
+       idle_timeout                  optional integer
+       query_interval                optional integer
+       seq_no                        integer
+       Querier configuration options:
+         eth_src                     string
+         ip4_src                     string
+         ip6_src                     string
+         query_max_resp              optional integer
+
+   Details:
+       datapath: weak reference to Datapath_Binding (must be unique within ta‐
+       ble)
+              Datapath_Binding entry for which these configuration options are
+              defined.
+
+       enabled: optional boolean
+              Enables/disables multicast snooping. Default: disabled.
+
+       querier: optional boolean
+              Enables/disables multicast querying. If enabled  then  multicast
+              querying is enabled by default.
+
+       table_size: optional integer
+              Limits  the  number of multicast groups that can be learned. De‐
+              fault: 2048 groups per datapath.
+
+       idle_timeout: optional integer
+              Configures the idle timeout (in seconds) for IP multicast groups
+              if multicast snooping is enabled. Default: 300 seconds.
+
+       query_interval: optional integer
+              Configures the  interval  (in  seconds)  for  sending  multicast
+              queries if snooping and querier are enabled. Default: idle_time�‐
+              out/2 seconds.
+
+       seq_no: integer
+              ovn-controller  reads  this value and flushes all learned multi‐
+              cast groups when it detects that seq_no was changed.
+
+     Querier configuration options:
+
+       The ovn-controller process that runs on OVN hypervisor nodes  uses  the
+       following columns to determine field values in IGMP/MLD queries that it
+       originates:
+
+       eth_src: string
+              Source Ethernet address.
+
+       ip4_src: string
+              Source IPv4 address.
+
+       ip6_src: string
+              Source IPv6 address.
+
+       query_max_resp: optional integer
+              Value  (in seconds) to be used as "max-response" field in multi‐
+              cast queries. Default: 1 second.
+
+IGMP_Group TABLE
+       Contains learned IGMP groups indexed by address/datapath/chassis.
+
+   Summary:
+       address                       string
+       datapath                      optional weak reference to Datapath_Bind�‐
+                                     ing
+       chassis                       optional weak reference to Chassis
+       ports                         set of weak reference to Port_Bindings
+
+   Details:
+       address: string
+              Destination IPv4 address for the IGMP group.
+
+       datapath: optional weak reference to Datapath_Binding
+              Datapath to which this IGMP group belongs.
+
+       chassis: optional weak reference to Chassis
+              Chassis to which this IGMP group belongs.
+
+       ports: set of weak reference to Port_Bindings
+              The destination port bindings for this IGMP group.
+
+Service_Monitor TABLE
+       Each row in this table configures monitoring a service  for  its  live‐
+       ness. The service can be an IPv4 TCP or UDP service. ovn-controller pe‐
+       riodically  sends out service monitor packets and updates the status of
+       the service. Service monitoring for IPv6 services is not supported.
+
+       ovn-northd uses this feature to  implement  the  load  balancer  health
+       check feature offered to the CMS through the northbound database.
+
+   Summary:
+       Configuration:
+         ip                          string
+         protocol                    optional string, either tcp or udp
+         port                        integer, in range 0 to 65,535
+         logical_port                string
+         src_mac                     string
+         src_ip                      string
+         options : interval          optional string, containing an integer
+         options : timeout           optional string, containing an integer
+         options : success_count     optional string, containing an integer
+         options : failure_count     optional string, containing an integer
+       Status Reporting:
+         status                      optional  string,  one of error, offline,
+                                     or online
+       Common Columns:
+         external_ids                map of string-string pairs
+
+   Details:
+     Configuration:
+
+       ovn-northd sets these columns and values to configure the service moni‐
+       tor.
+
+       ip: string
+              IP of the service to be monitored. Only IPv4 is supported.
+
+       protocol: optional string, either tcp or udp
+              The protocol of the service.
+
+       port: integer, in range 0 to 65,535
+              The TCP or UDP port of the service.
+
+       logical_port: string
+              The VIF of the logical port on which the service is running. The
+              ovn-controller that binds this logical_port monitors the service
+              by sending periodic monitor packets.
+
+       src_mac: string
+              Source Ethernet address to use in the service monitor packet.
+
+       src_ip: string
+              Source IPv4 address to use in the service monitor packet.
+
+       options : interval: optional string, containing an integer
+              The interval, in seconds, between service monitor checks.
+
+       options : timeout: optional string, containing an integer
+              The time, in seconds, after  which  the  service  monitor  check
+              times out.
+
+       options : success_count: optional string, containing an integer
+              The  number of successful checks after which the service is con‐
+              sidered online.
+
+       options : failure_count: optional string, containing an integer
+              The number of failure checks after which the service is  consid‐
+              ered offline.
+
+     Status Reporting:
+
+       The  ovn-controller  on the chassis that hosts the logical_port updates
+       this column to report the service’s status.
+
+       status: optional string, one of error, offline, or online
+              For TCP service, ovn-controller sends a SYN to the  service  and
+              expects an ACK response to consider the service to be online.
+
+              For  UDP  service, ovn-controller sends a UDP packet to the ser‐
+              vice and doesn’t expect any reply. If it receives an ICMP reply,
+              then it considers the service to be offline.
+
+     Common Columns:
+
+       external_ids: map of string-string pairs
+              See External IDs at the beginning of this document.
+
+Load_Balancer TABLE
+       Each row represents a load balancer.
+
+   Summary:
+       name                          string
+       vips                          map of string-string pairs
+       protocol                      optional string, one of sctp, tcp, or udp
+       datapaths                     set of Datapath_Bindings
+       datapath_group                optional Logical_DP_Group
+       Load_Balancer options:
+         options : hairpin_snat_ip   optional string
+         options : hairpin_orig_tuple
+                                     optional string, either true or false
+       Common Columns:
+         external_ids                map of string-string pairs
+
+   Details:
+       name: string
+              A name for the load balancer. This name has no  special  meaning
+              or  purpose other than to provide convenience for human interac‐
+              tion with the ovn-nb database.
+
+       vips: map of string-string pairs
+              A map of virtual IP addresses (and an optional port number  with
+              :  as  a separator) associated with this load balancer and their
+              corresponding endpoint IP addresses (and optional  port  numbers
+              with : as separators) separated by commas.
+
+       protocol: optional string, one of sctp, tcp, or udp
+              Valid  protocols  are  tcp,  udp, or sctp. This column is useful
+              when a port number is provided as part of the  vips  column.  If
+              this  column  is  empty and a port number is provided as part of
+              vips column, OVN assumes the protocol to be tcp.
+
+       datapaths: set of Datapath_Bindings
+              Datapaths to which this load balancer applies to.
+
+       datapath_group: optional Logical_DP_Group
+              The group of datapaths to which this load balancer  applies  to.
+              This  means that the same load balancer applies to all datapaths
+              in a group.
+
+     Load_Balancer options:
+
+       options : hairpin_snat_ip: optional string
+              IP to be used as source IP for  packets  that  have  been  hair-
+              pinned  after  load balancing. This value is automatically popu‐
+              lated by ovn-northd.
+
+       options : hairpin_orig_tuple: optional string, either true or false
+              This value is automatically set to true by ovn-northd when orig‐
+              inal destination IP and transport  port  of  the  load  balanced
+              packets are stored in registers reg1, reg2, xxreg1.
+
+     Common Columns:
+
+       external_ids: map of string-string pairs
+              See External IDs at the beginning of this document.
+
+BFD TABLE
+       Contains BFD parameter for ovn-controller bfd configuration.
+
+   Summary:
+       Configuration:
+         src_port                    integer, in range 49,152 to 65,535
+         disc                        integer
+         logical_port                string
+         dst_ip                      string
+         min_tx                      integer
+         min_rx                      integer
+         detect_mult                 integer
+         options                     map of string-string pairs
+         external_ids                map of string-string pairs
+       Status Reporting:
+         status                      string, one of admin_down, down, init, or
+                                     up
+
+   Details:
+     Configuration:
+
+       src_port: integer, in range 49,152 to 65,535
+              udp  source  port  used  in bfd control packets. The source port
+              MUST be in the range 49152 through 65535 (RFC5881 section 4).
+
+       disc: integer
+              A unique, nonzero discriminator value generated by the transmit‐
+              ting system, used to demultiplex multiple BFD  sessions  between
+              the same pair of systems.
+
+       logical_port: string
+              OVN logical port when BFD engine is running.
+
+       dst_ip: string
+              BFD peer IP address.
+
+       min_tx: integer
+              This  is  the  minimum interval, in milliseconds, that the local
+              system would like to use when transmitting BFD Control  packets,
+              less any jitter applied. The value zero is reserved.
+
+       min_rx: integer
+              This  is the minimum interval, in milliseconds, between received
+              BFD Control packets that this system is capable  of  supporting,
+              less  any  jitter  applied by the sender. If this value is zero,
+              the transmitting system does not want the remote system to  send
+              any periodic BFD Control packets.
+
+       detect_mult: integer
+              Detection  time  multiplier.  The  negotiated transmit interval,
+              multiplied by this value, provides the Detection  Time  for  the
+              receiving system in Asynchronous mode.
+
+       options: map of string-string pairs
+              Reserved for future use.
+
+       external_ids: map of string-string pairs
+              See External IDs at the beginning of this document.
+
+     Status Reporting:
+
+       status: string, one of admin_down, down, init, or up
+              BFD port logical states. Possible values are:
+
+              •      admin_down
+
+              •      down
+
+              •      init
+
+              •      up
+FDB TABLE
+       This  table is primarily used to learn the MACs observed on a VIF (or a
+       localnet port with ’localnet_learn_fdb’ enabled)  which  belongs  to  a
+       Logical_Switch_Port  record  in  OVN_Northbound  whose port security is
+       disabled and ’unknown’ address set. If port security is disabled  on  a
+       Logical_Switch_Port  record,  OVN  should allow traffic with any source
+       mac from the VIF. This table will be used to deliver a  packet  to  the
+       VIF, If a packet’s eth.dst is learnt.
+
+   Summary:
+       mac                           string
+       dp_key                        integer, in range 1 to 16,777,215
+       port_key                      integer, in range 1 to 16,777,215
+
+   Details:
+       mac: string
+              The learnt mac address.
+
+       dp_key: integer, in range 1 to 16,777,215
+              The key of the datapath on which this FDB was learnt.
+
+       port_key: integer, in range 1 to 16,777,215
+              The key of the port binding on which this FDB was learnt.
+
+Static_MAC_Binding TABLE
+       Each record represents a Static_MAC_Binding entry for a logical router.
+
+   Summary:
+       logical_port                  string
+       ip                            string
+       mac                           string
+       override_dynamic_mac          boolean
+       datapath                      Datapath_Binding
+
+   Details:
+       logical_port: string
+              The logical router port for the binding.
+
+       ip: string
+              The bound IP address.
+
+       mac: string
+              The Ethernet address to which the IP is bound.
+
+       override_dynamic_mac: boolean
+              Override dynamically learnt MACs.
+
+       datapath: Datapath_Binding
+              The logical datapath to which the logical router port belongs.
+
+Chassis_Template_Var TABLE
+       Each  record represents the set of template variable instantiations for
+       a given chassis and is populated by ovn-northd from the contents of the
+       OVN_Northbound.Chassis_Template_Var table.
+
+   Summary:
+       chassis                       string (must be unique within table)
+       variables                     map of string-string pairs
+
+   Details:
+       chassis: string (must be unique within table)
+              The chassis this set of variable values applies to.
+
+       variables: map of string-string pairs
+              The set of variable values for a given chassis.
+
+Open vSwitch 23.06.3           DB Schema 20.27.2                     ovn-sb(5)
diff --git a/support/dist-docs-branch-23.06/ovn-sbctl.8 b/support/dist-docs-branch-23.06/ovn-sbctl.8
new file mode 100644
index 00000000..64bd47f5
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-sbctl.8
@@ -0,0 +1,658 @@
+'\" p
+.\" -*- nroff -*-
+.TH "ovn-sbctl" 8 "ovn-sbctl" "OVN 23\[char46]06\[char46]3" "OVN Manual"
+.fp 5 L CR              \\" Make fixed-width font available as \\fL.
+.de TQ
+.  br
+.  ns
+.  TP "\\$1"
+..
+.de ST
+.  PP
+.  RS -0.15in
+.  I "\\$1"
+.  RE
+..
+.de SU
+.  PP
+.  I "\\$1"
+..
+.PP
+.SH "NAME"
+.PP
+.PP
+ovn-sbctl \- Open Virtual Network southbound db management utility
+.SH "SYNOPSIS"
+.PP
+\fBovn\-sbctl\fR [\fIoptions\fR] \fIcommand\fR [\fIarg\fR\[char46]\[char46]\[char46]]
+.SH "DESCRIPTION"
+.PP
+.PP
+The \fBovn\-sbctl\fR program configures the \fBOVN_Southbound\fR database by providing a high-level interface to its configuration database\[char46] See \fBovn\-sb\fR(5) for comprehensive documentation of the database schema\[char46]
+.PP
+.PP
+\fBovn\-sbctl\fR connects to an \fBovsdb\-server\fR process that maintains an OVN_Southbound configuration database\[char46] Using this connection, it queries and possibly applies changes to the database, depending on the supplied commands\[char46]
+.PP
+.PP
+\fBovn\-sbctl\fR can perform any number of commands in a single run, implemented as a single atomic transaction against the database\[char46]
+.PP
+.PP
+The \fBovn\-sbctl\fR command line begins with global options (see \fBOPTIONS\fR below for details)\[char46] The global options are followed by one or more commands\[char46] Each command should begin with \fB\-\-\fR by itself as a command-line argument, to separate it from the following commands\[char46] (The \fB\-\-\fR before the first command is optional\[char46]) The command itself starts with command-specific options, if any, followed by the command name and any arguments\[char46]
+.SH "DAEMON MODE"
+.PP
+.PP
+When it is invoked in the most ordinary way, \fBovn\-sbctl\fR connects to an OVSDB server that hosts the southbound database, retrieves a partial copy of the database that is complete enough to do its work, sends a transaction request to the server, and receives and processes the server\(cqs reply\[char46] In common interactive use, this is fine, but if the database is large, the step in which \fBovn\-sbctl\fR retrieves a partial copy of the database can take a long time, which yields poor performance overall\[char46]
+.PP
+.PP
+To improve performance in such a case, \fBovn\-sbctl\fR offers a \(dqdaemon mode,\(dq in which the user first starts \fBovn\-sbctl\fR running in the background and afterward uses the daemon to execute operations\[char46] Over several \fBovn\-sbctl\fR command invocations, this performs better overall because it retrieves a copy of the database only once at the beginning, not once per program run\[char46]
+.PP
+.PP
+Use the \fB\-\-detach\fR option to start an \fBovn\-sbctl\fR daemon\[char46] With this option, \fBovn\-sbctl\fR prints the name of a control socket to stdout\[char46] The client should save this name in environment variable \fBOVN_SB_DAEMON\fR\[char46] Under the Bourne shell this might be done like this:
+.PP
+.nf
+\fL
+.br
+\fL      export OVN_SB_DAEMON=$(ovn\-sbctl \-\-pidfile \-\-detach)
+.br
+\fL    \fR
+.fi
+.PP
+.PP
+When \fBOVN_SB_DAEMON\fR is set, \fBovn\-sbctl\fR automatically and transparently uses the daemon to execute its commands\[char46]
+.PP
+.PP
+When the daemon is no longer needed, kill it and unset the environment variable, e\[char46]g\[char46]:
+.PP
+.nf
+\fL
+.br
+\fL      kill $(cat $OVN_RUNDIR/ovn\-sbctl\[char46]pid)
+.br
+\fL      unset OVN_SB_DAEMON
+.br
+\fL    \fR
+.fi
+.PP
+.PP
+When using daemon mode, an alternative to the \fBOVN_SB_DAEMON\fR environment variable is to specify a path for the Unix socket\[char46] When starting the ovn-sbctl daemon, specify the \fB\-u\fR option with a full path to the location of the socket file\[char46] Here is an exmple:
+.PP
+.nf
+\fL
+.br
+\fL      ovn\-sbctl \-\-detach \-u /tmp/mysock\[char46]ctl
+.br
+\fL    \fR
+.fi
+.PP
+.PP
+Then to connect to the running daemon, use the \fB\-u\fR option with the full path to the socket created when the daemon was started:
+.PP
+.nf
+\fL
+.br
+\fL      ovn\-sbctl \-u /tmp/mysock\[char46]ctl show
+.br
+\fL    \fR
+.fi
+.ST "Daemon Commands"
+.PP
+.PP
+Daemon mode is internally implemented using the same mechanism used by \fBovn\-appctl\fR\[char46] One may also use \fBovn\-appctl\fR directly with the following commands:
+.RS
+.TP
+\fBrun\fR [\fIoptions\fR] \fIcommand\fR [\fIarg\fR\[char46]\[char46]\[char46]] [\fB\-\-\fR [\fIoptions\fR] \fIcommand\fR [\fIarg\fR\[char46]\[char46]\[char46]] \[char46]\[char46]\[char46]]
+Instructs the daemon process to run one or more \fBovn\-sbctl\fR commands described above and reply with the results of running these commands\[char46] Accepts the \fB\-\-no\-wait\fR, \fB\-\-wait\fR, \fB\-\-timeout\fR, \fB\-\-dry\-run\fR, \fB\-\-oneline\fR, and the options described under \fBTable Formatting Options\fR in addition to the the command-specific options\[char46]
+.TP
+\fBexit\fR
+Causes \fBovn\-sbctl\fR to gracefully terminate\[char46]
+.RE
+.SH "OPTIONS"
+.PP
+.PP
+The options listed below affect the behavior of \fBovn\-sbctl\fR as a whole\[char46] Some individual commands also accept their own options, which are given just before the command name\[char46] If the first command on the command line has options, then those options must be separated from the global options by \fB\-\-\fR\[char46]
+.PP
+.PP
+\fBovn\-sbctl\fR also accepts options from the \fBOVN_SBCTL_OPTIONS\fR environment variable, in the same format as on the command line\[char46] Options from the command line override those in the environment\[char46]
+.RS
+.TP
+\fB\-\-db\fR \fIdatabase\fR
+The OVSDB database remote to contact\[char46] If the \fBOVN_SB_DB\fR environment variable is set, its value is used as the default\[char46] Otherwise, the default is \fBunix:/ovnsb_db\[char46]sock\fR, but this default is unlikely to be useful outside of single-machine OVN test environments\[char46]
+.TP
+\fB\-\-leader\-only\fR
+.TQ .5in
+\fB\-\-no\-leader\-only\fR
+By default, or with \fB\-\-leader\-only\fR, when the database server is a clustered database, \fBovn\-sbctl\fR will avoid servers other than the cluster leader\[char46] This ensures that any data that \fBovn\-sbctl\fR reads and reports is up-to-date\[char46] With \fB\-\-no\-leader\-only\fR, \fBovn\-sbctl\fR will use any server in the cluster, which means that for read-only transactions it can report and act on stale data (transactions that modify the database are always serialized even with \fB\-\-no\-leader\-only\fR)\[char46] Refer to \fBUnderstanding Cluster Consistency\fR in \fBovsdb\fR(7) for more information\[char46]
+.TP
+\fB\-\-shuffle\-remotes\fR
+.TQ .5in
+\fB\-\-no\-shuffle\-remotes\fR
+By default, or with \fB\-\-shuffle\-remotes\fR, when there are multiple remotes specified in the OVSDB connection string specified by \fB\-\-db\fR or the \fBOVN_SB_DB\fR environment variable, the order of the remotes will be shuffled before the client tries to connect\[char46] The remotes will be shuffled only once to a new order before the first connection attempt\[char46] The following retries, if any, will follow the same new order\[char46] The default behavior is to make sure clients of a clustered database can distribute evenly to all members of the cluster\[char46] With \fB\-\-no\-shuffle\-remotes\fR, \fBovn\-sbctl\fR will use the original order specified in the connection string to connect\[char46] This allows user to specify the preferred order, which is particularly useful for testing\[char46]
+.TP
+\fB\-\-no\-syslog\fR
+By default, \fBovn\-sbctl\fR logs its arguments and the details of any changes that it makes to the system log\[char46] This option disables this logging\[char46]
+.IP
+This option is equivalent to \fB\-\-verbose=sbctl:syslog:warn\fR\[char46]
+.TP
+\fB\-\-oneline\fR
+Modifies the output format so that the output for each command is printed on a single line\[char46] New-line characters that would otherwise separate lines are printed as \efB\e\en\efR, and any instances of \efB\e\e\efR that would otherwise appear in the output are doubled\[char46] Prints a blank line for each command that has no output\[char46] This option does not affect the formatting of output from the \fBlist\fR or \fBfind\fR commands; see \fBTable Formatting Options\fR below\[char46]
+.TP
+\fB\-\-dry\-run\fR
+Prevents \fBovn\-sbctl\fR from actually modifying the database\[char46]
+.TP
+\fB\-t \fIsecs\fB\fR
+.TQ .5in
+\fB\-\-timeout=\fIsecs\fB\fR
+By default, or with a \fIsecs\fR of \fB0\fR, \fBovn\-sbctl\fR waits forever for a response from the database\[char46] This option limits runtime to approximately \fIsecs\fR seconds\[char46] If the timeout expires, \fBovn\-sbctl\fR will exit with a \fBSIGALRM\fR signal\[char46] (A timeout would normally happen only if the database cannot be contacted, or if the system is overloaded\[char46])
+.RE
+.SS "Daemon Options"
+.TP
+\fB\-\-pidfile\fR[\fB=\fR\fIpidfile\fR]
+Causes a file (by default, \fB\fIprogram\fB\[char46]pid\fR) to be created indicating the PID of the running process\[char46] If the \fIpidfile\fR argument is not specified, or if it does not begin with \fB/\fR, then it is created in \fB\fR\[char46]
+.IP
+If \fB\-\-pidfile\fR is not specified, no pidfile is created\[char46]
+.TP
+\fB\-\-overwrite\-pidfile\fR
+By default, when \fB\-\-pidfile\fR is specified and the specified pidfile already exists and is locked by a running process, the daemon refuses to start\[char46] Specify \fB\-\-overwrite\-pidfile\fR to cause it to instead overwrite the pidfile\[char46]
+.IP
+When \fB\-\-pidfile\fR is not specified, this option has no effect\[char46]
+.TP
+\fB\-\-detach\fR
+Runs this program as a background process\[char46] The process forks, and in the child it starts a new session, closes the standard file descriptors (which has the side effect of disabling logging to the console), and changes its current directory to the root (unless \fB\-\-no\-chdir\fR is specified)\[char46] After the child completes its initialization, the parent exits\[char46]
+.TP
+\fB\-\-monitor\fR
+Creates an additional process to monitor this program\[char46] If it dies due to a signal that indicates a programming error (\fBSIGABRT\fR, \fBSIGALRM\fR, \fBSIGBUS\fR, \fBSIGFPE\fR, \fBSIGILL\fR, \fBSIGPIPE\fR, \fBSIGSEGV\fR, \fBSIGXCPU\fR, or \fBSIGXFSZ\fR) then the monitor process starts a new copy of it\[char46] If the daemon dies or exits for another reason, the monitor process exits\[char46]
+.IP
+This option is normally used with \fB\-\-detach\fR, but it also functions without it\[char46]
+.TP
+\fB\-\-no\-chdir\fR
+By default, when \fB\-\-detach\fR is specified, the daemon changes its current working directory to the root directory after it detaches\[char46] Otherwise, invoking the daemon from a carelessly chosen directory would prevent the administrator from unmounting the file system that holds that directory\[char46]
+.IP
+Specifying \fB\-\-no\-chdir\fR suppresses this behavior, preventing the daemon from changing its current working directory\[char46] This may be useful for collecting core files, since it is common behavior to write core dumps into the current working directory and the root directory is not a good directory to use\[char46]
+.IP
+This option has no effect when \fB\-\-detach\fR is not specified\[char46]
+.TP
+\fB\-\-no\-self\-confinement\fR
+By default this daemon will try to self-confine itself to work with files under well-known directories determined at build time\[char46] It is better to stick with this default behavior and not to use this flag unless some other Access Control is used to confine daemon\[char46] Note that in contrast to other access control implementations that are typically enforced from kernel-space (e\[char46]g\[char46] DAC or MAC), self-confinement is imposed from the user-space daemon itself and hence should not be considered as a full confinement strategy, but instead should be viewed as an additional layer of security\[char46]
+.TP
+\fB\-\-user=\fR\fIuser\fR\fB:\fR\fIgroup\fR
+Causes this program to run as a different user specified in \fIuser\fR\fB:\fR\fIgroup\fR, thus dropping most of the root privileges\[char46] Short forms \fIuser\fR and \fB:\fR\fIgroup\fR are also allowed, with current user or group assumed, respectively\[char46] Only daemons started by the root user accepts this argument\[char46]
+.IP
+On Linux, daemons will be granted \fBCAP_IPC_LOCK\fR and \fBCAP_NET_BIND_SERVICES\fR before dropping root privileges\[char46] Daemons that interact with a datapath, such as \fBovs\-vswitchd\fR, will be granted three additional capabilities, namely \fBCAP_NET_ADMIN\fR, \fBCAP_NET_BROADCAST\fR and \fBCAP_NET_RAW\fR\[char46] The capability change will apply even if the new user is root\[char46]
+.IP
+On Windows, this option is not currently supported\[char46] For security reasons, specifying this option will cause the daemon process not to start\[char46]
+.SS "Logging options"
+.TP
+\fB\-v\fR[\fIspec\fR]
+.TQ .5in
+\fB\-\-verbose=\fR[\fIspec\fR]
+Sets logging levels\[char46] Without any \fIspec\fR, sets the log level for every module and destination to \fBdbg\fR\[char46] Otherwise, \fIspec\fR is a list of words separated by spaces or commas or colons, up to one from each category below:
+.RS
+.IP \(bu
+A valid module name, as displayed by the \fBvlog/list\fR command on \fBovs\-appctl\fR(8), limits the log level change to the specified module\[char46]
+.IP \(bu
+\fBsyslog\fR, \fBconsole\fR, or \fBfile\fR, to limit the log level change to only to the system log, to the console, or to a file, respectively\[char46] (If \fB\-\-detach\fR is specified, the daemon closes its standard file descriptors, so logging to the console will have no effect\[char46])
+.IP
+On Windows platform, \fBsyslog\fR is accepted as a word and is only useful along with the \fB\-\-syslog\-target\fR option (the word has no effect otherwise)\[char46]
+.IP \(bu
+\fBoff\fR, \fBemer\fR, \fBerr\fR, \fBwarn\fR, \fBinfo\fR, or \fBdbg\fR, to control the log level\[char46] Messages of the given severity or higher will be logged, and messages of lower severity will be filtered out\[char46] \fBoff\fR filters out all messages\[char46] See \fBovs\-appctl\fR(8) for a definition of each log level\[char46]
+.RE
+.IP
+Case is not significant within \fIspec\fR\[char46]
+.IP
+Regardless of the log levels set for \fBfile\fR, logging to a file will not take place unless \fB\-\-log\-file\fR is also specified (see below)\[char46]
+.IP
+For compatibility with older versions of OVS, \fBany\fR is accepted as a word but has no effect\[char46]
+.TP
+\fB\-v\fR
+.TQ .5in
+\fB\-\-verbose\fR
+Sets the maximum logging verbosity level, equivalent to \fB\-\-verbose=dbg\fR\[char46]
+.TP
+\fB\-vPATTERN:\fR\fIdestination\fR\fB:\fR\fIpattern\fR
+.TQ .5in
+\fB\-\-verbose=PATTERN:\fR\fIdestination\fR\fB:\fR\fIpattern\fR
+Sets the log pattern for \fIdestination\fR to \fIpattern\fR\[char46] Refer to \fBovs\-appctl\fR(8) for a description of the valid syntax for \fIpattern\fR\[char46]
+.TP
+\fB\-vFACILITY:\fR\fIfacility\fR
+.TQ .5in
+\fB\-\-verbose=FACILITY:\fR\fIfacility\fR
+Sets the RFC5424 facility of the log message\[char46] \fIfacility\fR can be one of \fBkern\fR, \fBuser\fR, \fBmail\fR, \fBdaemon\fR, \fBauth\fR, \fBsyslog\fR, \fBlpr\fR, \fBnews\fR, \fBuucp\fR, \fBclock\fR, \fBftp\fR, \fBntp\fR, \fBaudit\fR, \fBalert\fR, \fBclock2\fR, \fBlocal0\fR, \fBlocal1\fR, \fBlocal2\fR, \fBlocal3\fR, \fBlocal4\fR, \fBlocal5\fR, \fBlocal6\fR or \fBlocal7\fR\[char46] If this option is not specified, \fBdaemon\fR is used as the default for the local system syslog and \fBlocal0\fR is used while sending a message to the target provided via the \fB\-\-syslog\-target\fR option\[char46]
+.TP
+\fB\-\-log\-file\fR[\fB=\fR\fIfile\fR]
+Enables logging to a file\[char46] If \fIfile\fR is specified, then it is used as the exact name for the log file\[char46] The default log file name used if \fIfile\fR is omitted is \fB/usr/local/var/log/ovn/\fIprogram\fB\[char46]log\fR\[char46]
+.TP
+\fB\-\-syslog\-target=\fR\fIhost\fR\fB:\fR\fIport\fR
+Send syslog messages to UDP \fIport\fR on \fIhost\fR, in addition to the system syslog\[char46] The \fIhost\fR must be a numerical IP address, not a hostname\[char46]
+.TP
+\fB\-\-syslog\-method=\fR\fImethod\fR
+Specify \fImethod\fR as how syslog messages should be sent to syslog daemon\[char46] The following forms are supported:
+.RS
+.IP \(bu
+\fBlibc\fR, to use the libc \fBsyslog()\fR function\[char46] Downside of using this options is that libc adds fixed prefix to every message before it is actually sent to the syslog daemon over \fB/dev/log\fR UNIX domain socket\[char46]
+.IP \(bu
+\fBunix:\fIfile\fB\fR, to use a UNIX domain socket directly\[char46] It is possible to specify arbitrary message format with this option\[char46] However, \fBrsyslogd 8\[char46]9\fR and older versions use hard coded parser function anyway that limits UNIX domain socket use\[char46] If you want to use arbitrary message format with older \fBrsyslogd\fR versions, then use UDP socket to localhost IP address instead\[char46]
+.IP \(bu
+\fBudp:\fIip\fB:\fIport\fB\fR, to use a UDP socket\[char46] With this method it is possible to use arbitrary message format also with older \fBrsyslogd\fR\[char46] When sending syslog messages over UDP socket extra precaution needs to be taken into account, for example, syslog daemon needs to be configured to listen on the specified UDP port, accidental iptables rules could be interfering with local syslog traffic and there are some security considerations that apply to UDP sockets, but do not apply to UNIX domain sockets\[char46]
+.IP \(bu
+\fBnull\fR, to discard all messages logged to syslog\[char46]
+.RE
+.IP
+The default is taken from the \fBOVS_SYSLOG_METHOD\fR environment variable; if it is unset, the default is \fBlibc\fR\[char46]
+.SS "Table Formatting Options"
+These options control the format of output from the \fBlist\fR and \fBfind\fR commands\[char46]
+.RS
+.TP
+\fB\-f\fR \fIformat\fR
+.TQ .5in
+\fB\-\-format=\fR\fIformat\fR
+Sets the type of table formatting\[char46] The following types of \fIformat\fR are available:
+.RS
+.TP
+\fBtable\fR
+2-D text tables with aligned columns\[char46]
+.TP
+\fBlist\fR (default)
+A list with one column per line and rows separated by a blank line\[char46]
+.TP
+\fBhtml\fR
+HTML tables\[char46]
+.TP
+\fBcsv\fR
+Comma-separated values as defined in RFC 4180\[char46]
+.TP
+\fBjson\fR
+JSON format as defined in RFC 4627\[char46] The output is a sequence of JSON objects, each of which corresponds to one table\[char46] Each JSON object has the following members with the noted values:
+.RS
+.TP
+\fBcaption\fR
+The table\(cqs caption\[char46] This member is omitted if the table has no caption\[char46]
+.TP
+\fBheadings\fR
+An array with one element per table column\[char46] Each array element is a string giving the corresponding column\(cqs heading\[char46]
+.TP
+\fBdata\fR
+An array with one element per table row\[char46] Each element is also an array with one element per table column\[char46] The elements of this second-level array are the cells that constitute the table\[char46] Cells that represent OVSDB data or data types are expressed in the format described in the OVSDB specification; other cells are simply expressed as text strings\[char46]
+.RE
+.RE
+.TP
+\fB\-d\fR \fIformat\fR
+.TQ .5in
+\fB\-\-data=\fR\fIformat\fR
+Sets the formatting for cells within output tables unless the table format is set to \fBjson\fR, in which case \fBjson\fR formatting is always used when formatting cells\[char46] The following types of \fIformat\fR are available:
+.RS
+.TP
+\fBstring\fR (default)
+The simple format described in the \fBDatabase Values\fR section of \fBovs\-vsctl\fR(8)\[char46]
+.TP
+\fBbare\fR
+The simple format with punctuation stripped off: \fB[]\fR and \fB{}\fR are omitted around sets, maps, and empty columns, items within sets and maps are space-separated, and strings are never quoted\[char46] This format may be easier for scripts to parse\[char46]
+.TP
+\fBjson\fR
+The RFC 4627 JSON format as described above\[char46]
+.RE
+.TP
+\fB\-\-no\-headings\fR
+This option suppresses the heading row that otherwise appears in the first row of table output\[char46]
+.TP
+\fB\-\-pretty\fR
+By default, JSON in output is printed as compactly as possible\[char46] This option causes JSON in output to be printed in a more readable fashion\[char46] Members of objects and elements of arrays are printed one per line, with indentation\[char46]
+.IP
+This option does not affect JSON in tables, which is always printed compactly\[char46]
+.TP
+\fB\-\-bare\fR
+Equivalent to \fB\-\-format=list \-\-data=bare \-\-no\-headings\fR\[char46]
+.RE
+.SS "PKI Options"
+.PP
+.PP
+PKI configuration is required to use SSL for the connection to the database\[char46]
+.RS
+.TP
+\fB\-p\fR \fIprivkey\[char46]pem\fR
+.TQ .5in
+\fB\-\-private\-key=\fR\fIprivkey\[char46]pem\fR
+Specifies a PEM file containing the private key used as identity for outgoing SSL connections\[char46]
+.TP
+\fB\-c\fR \fIcert\[char46]pem\fR
+.TQ .5in
+\fB\-\-certificate=\fR\fIcert\[char46]pem\fR
+Specifies a PEM file containing a certificate that certifies the private key specified on \fB\-p\fR or \fB\-\-private\-key\fR to be trustworthy\[char46] The certificate must be signed by the certificate authority (CA) that the peer in SSL connections will use to verify it\[char46]
+.TP
+\fB\-C\fR \fIcacert\[char46]pem\fR
+.TQ .5in
+\fB\-\-ca\-cert=\fR\fIcacert\[char46]pem\fR
+Specifies a PEM file containing the CA certificate for verifying certificates presented to this program by SSL peers\[char46] (This may be the same certificate that SSL peers use to verify the certificate specified on \fB\-c\fR or \fB\-\-certificate\fR, or it may be a different one, depending on the PKI design in use\[char46])
+.TP
+\fB\-C none\fR
+.TQ .5in
+\fB\-\-ca\-cert=none\fR
+Disables verification of certificates presented by SSL peers\[char46] This introduces a security risk, because it means that certificates cannot be verified to be those of known trusted hosts\[char46]
+.RE
+.RS
+.TP
+\fB\-\-bootstrap\-ca\-cert=\fR\fIcacert\[char46]pem\fR
+When \fIcacert\[char46]pem\fR exists, this option has the same effect as \fB\-C\fR or \fB\-\-ca\-cert\fR\[char46] If it does not exist, then the executable will attempt to obtain the CA certificate from the SSL peer on its first SSL connection and save it to the named PEM file\[char46] If it is successful, it will immediately drop the connection and reconnect, and from then on all SSL connections must be authenticated by a certificate signed by the CA certificate thus obtained\[char46]
+.IP
+This option exposes the SSL connection to a man-in-the-middle attack obtaining the initial CA certificate, but it may be useful for bootstrapping\[char46]
+.IP
+This option is only useful if the SSL peer sends its CA certificate as part of the SSL certificate chain\[char46] The SSL protocol does not require the server to send the CA certificate\[char46]
+.IP
+This option is mutually exclusive with \fB\-C\fR and \fB\-\-ca\-cert\fR\[char46]
+.RE
+.SS "Other Options"
+.TP
+\fB\-h\fR
+.TQ .5in
+\fB\-\-help\fR
+Prints a brief help message to the console\[char46]
+.TP
+\fB\-V\fR
+.TQ .5in
+\fB\-\-version\fR
+Prints version information to the console\[char46]
+.SH "COMMANDS"
+.PP
+.PP
+The following sections describe the commands that \fBovn\-sbctl\fR supports\[char46]
+.SS "OVN_Southbound Commands"
+.PP
+.PP
+These commands work with an \fBOVN_Southbound\fR database as a whole\[char46]
+.RS
+.TP
+\fBinit\fR
+Initializes the database, if it is empty\[char46] If the database has already been initialized, this command has no effect\[char46]
+.TP
+\fBshow\fR
+Prints a brief overview of the database contents\[char46]
+.RE
+.SS "Chassis Commands"
+.PP
+.PP
+These commands manipulate \fBOVN_Southbound\fR chassis\[char46]
+.RS
+.TP
+[\fB\-\-may\-exist\fR] \fBchassis\-add \fIchassis\fB \fIencap-type\fB \fIencap-ip\fB\fR
+Creates a new chassis named \fIchassis\fR\[char46] \fIencap-type\fR is a comma-separated list of tunnel types\[char46] The chassis will have one encap entry for each specified tunnel type with \fIencap-ip\fR as the destination IP for each\[char46]
+.IP
+Without \fB\-\-may\-exist\fR, attempting to create a chassis that exists is an error\[char46] With \fB\-\-may\-exist\fR, this command does nothing if \fIchassis\fR already exists\[char46]
+.TP
+[\fB\-\-if\-exists\fR] \fIchassis-del \fIchassis\fI\fR
+Deletes \fIchassis\fR and its \fIencaps\fR and \fIgateway_ports\fR\[char46]
+.IP
+Without \fB\-\-if\-exists\fR, attempting to delete a chassis that does not exist is an error\[char46] With \fB\-\-if\-exists\fR attempting to delete a chassis that does not exist has no effect\[char46]
+.RE
+.SS "Port Binding Commands"
+.PP
+.PP
+These commands manipulate \fBOVN_Southbound\fR port bindings\[char46]
+.RS
+.TP
+[\fB\-\-may\-exist\fR] \fBlsp\-bind \fIlogical-port\fB \fIchassis\fB\fR
+Binds the logical port named \fIlogical-port\fR to \fIchassis\fR\[char46]
+.IP
+Without \fB\-\-may\-exist\fR, attempting to bind a logical port that has already been bound is an error\[char46] With \fB\-\-may\-exist\fR, this command does nothing if \fIlogical-port\fR has already been bound to a chassis\[char46]
+.TP
+[\fB\-\-if\-exists\fR] \fBlsp\-unbind \fIlogical-port\fB\fR
+Removes the binding of \fIlogical-port\fR\[char46]
+.IP
+Without \fB\-\-if\-exists\fR, attempting to unbind a logical port that is not bound is an error\[char46] With \fB\-\-if\-exists\fR, attempting to unbind logical port that is not bound has no effect\[char46]
+.RE
+.SS "Logical Flow Commands"
+.TP
+[\fB\-\-uuid\fR] [\fB\-\-ovs\fR[\fB=\fIremote\fB]\fR] [\fB\-\-stats\fR] [\fB\-\-vflows\fR] \fBlflow\-list\fR [\fIlogical-datapath\fR] [\fIlflow\fR\[char46]\[char46]\[char46]]
+List logical flows\[char46] If \fIlogical-datapath\fR is specified, only list flows for that logical datapath\[char46] The \fIlogical-datapath\fR may be given as a UUID or as a datapath name (reporting an error if multiple datapaths have the same name)\[char46]
+.IP
+If at least one \fIlflow\fR is given, only matching logical flows, if any, are listed\[char46] Each \fIlflow\fR may be specified as a UUID or the first few characters of a UUID, optionally prefixed by \fB0x\fR\[char46] (Because \fBovn\-controller\fR sets OpenFlow flow cookies to the first 32 bits of the corresponding logical flow\(cqs UUID, this makes it easy to look up the logical flow that generated a particular OpenFlow flow\[char46])
+.IP
+If \fB\-\-uuid\fR is specified, the output includes the first 32 bits of each logical flow\(cqs UUID\[char46] This makes it easier to find the OpenFlow flows that correspond to a given logical flow\[char46]
+.IP
+If \fB\-\-ovs\fR is included, \fBovn\-sbctl\fR attempts to obtain and display the OpenFlow flows that correspond to each OVN logical flow\[char46] To do so, \fBovn\-sbctl\fR connects to \fIremote\fR (by default, \fBunix:/br\-int\[char46]mgmt\fR) over OpenFlow and retrieves the flows\[char46] If \fIremote\fR is specified, it must be an active OpenFlow connection method described in \fBovsdb\fR(7)\[char46] Please see the discussion of the similar \fB\-\-ovs\fR option in \fBovn\-trace\fR(8) for more information about the OpenFlow flow output\[char46]
+.IP
+By default, OpenFlow flow output includes only match and actions\[char46] Add \fB\-\-stats\fR to include all OpenFlow information, such as packet and byte counters, duration, and timeouts\[char46]
+.IP
+If \fB\-\-vflows\fR is included, other southbound database records directly used for generating OpenFlow flows are also listed\[char46] This includes: \fIport-bindings\fR, \fImac-bindings\fR, \fImulticast-groups\fR, \fIchassis\fR\[char46] The \fB\-\-ovs\fR and \fB\-\-stats\fR can also be used in conjunction with \fB\-\-vflows\fR\[char46]
+.TP
+[\fB\-\-uuid\fR] \fBdump\-flows\fR [\fIlogical-datapath\fR]
+Alias for \fBlflow\-list\fR\[char46]
+.TP
+\fBcount\-flows\fR [\fIlogical-datapath\fR]
+prints numbers of logical flows per table and per datapath\[char46]
+.SS "Remote Connectivity Commands"
+.PP
+.PP
+These commands manipulate the \fBconnections\fR column in the \fBSB_Global\fR table and rows in the \fBConnection\fR table\[char46] When \fBovsdb\-server\fR is configured to use the \fBconnections\fR column for OVSDB connections, this allows the administrator to use \efBovn\e-sbctl\efR to configure database connections\[char46]
+.RS
+.TP
+\fBget\-connection\fR
+Prints the configured connection(s)\[char46]
+.TP
+\fBdel\-connection\fR
+Deletes the configured connection(s)\[char46]
+.TP
+[\fB\-\-inactivity\-probe=\fR\fImsecs\fR] \fBset\-connection\fR \fItarget\fR\[char46]\[char46]\[char46]
+Sets the configured manager target or targets\[char46] Use \fB\-\-inactivity\-probe=\fR\fImsecs\fR to override the default idle connection inactivity probe time\[char46] Use 0 to disable inactivity probes\[char46]
+.RE
+.SS "SSL Configuration Commands"
+.PP
+.PP
+When \fBovsdb\-server\fR is configured to connect using SSL, the following parameters are required:
+.RS
+.TP
+\fIprivate-key\fR
+Specifies a PEM file containing the private key used for SSL connections\[char46]
+.TP
+\fIcertificate\fR
+Specifies a PEM file containing a certificate, signed by the certificate authority (CA) used by the connection peers, that certifies the private key, identifying a trustworthy peer\[char46]
+.TP
+\fIca-cert\fR
+Specifies a PEM file containing the CA certificate used to verify that the connection peers are trustworthy\[char46]
+.RE
+.PP
+.PP
+These SSL settings apply to all SSL connections made by the southbound database server\[char46]
+.RS
+.TP
+\fBget\-ssl\fR
+Prints the SSL configuration\[char46]
+.TP
+\fBdel\-ssl\fR
+Deletes the current SSL configuration\[char46]
+.TP
+[\fB\-\-bootstrap\fR] \fBset\-ssl\fR \fIprivate-key\fR \fIcertificate\fR \fIca-cert\fR [\fIssl-protocol-list\fR [\fIssl-cipher-list\fR]]
+Sets the SSL configuration\[char46]
+.RE
+.SS "Database Commands"
+.PP
+.PP
+These commands query and modify the contents of \fBovsdb\fR tables\[char46] They are a slight abstraction of the \fBovsdb\fR interface and as such they operate at a lower level than other \fBovn\-sbctl\fR commands\[char46]
+.PP
+\fIIdentifying Tables, Records, and Columns\fR
+.PP
+.PP
+Each of these commands has a \fItable\fR parameter to identify a table within the database\[char46] Many of them also take a \fIrecord\fR parameter that identifies a particular record within a table\[char46] The \fIrecord\fR parameter may be the UUID for a record, which may be abbreviated to its first 4 (or more) hex digits, as long as that is unique\[char46] Many tables offer additional ways to identify records\[char46] Some commands also take \fIcolumn\fR parameters that identify a particular field within the records in a table\[char46]
+.PP
+.PP
+For a list of tables and their columns, see \fBovn\-sb\fR(5) or see the table listing from the \fB\-\-help\fR option\[char46]
+.PP
+.PP
+Record names must be specified in full and with correct capitalization, except that UUIDs may be abbreviated to their first 4 (or more) hex digits, as long as that is unique within the table\[char46] Names of tables and columns are not case-sensitive, and \fB\-\fR and \fB_\fR are treated interchangeably\[char46] Unique abbreviations of table and column names are acceptable, e\[char46]g\[char46] \fBd\fR or \fBdhcp\fR is sufficient to identify the \fBDHCP_Options\fR table\[char46]
+.PP
+.PP
+.PP
+\fIDatabase Values\fR
+.PP
+.PP
+Each column in the database accepts a fixed type of data\[char46] The currently defined basic types, and their representations, are:
+.RS
+.TP
+integer
+A decimal integer in the range \-2**63 to 2**63\-1, inclusive\[char46]
+.TP
+real
+A floating-point number\[char46]
+.TP
+Boolean
+True or false, written \fBtrue\fR or \fBfalse\fR, respectively\[char46]
+.TP
+string
+An arbitrary Unicode string, except that null bytes are not allowed\[char46] Quotes are optional for most strings that begin with an English letter or underscore and consist only of letters, underscores, hyphens, and periods\[char46] However, \fBtrue\fR and \fBfalse\fR and strings that match the syntax of UUIDs (see below) must be enclosed in double quotes to distinguish them from other basic types\[char46] When double quotes are used, the syntax is that of strings in JSON, e\[char46]g\[char46] backslashes may be used to escape special characters\[char46] The empty string must be represented as a pair of double quotes (\fB\(dq\(dq\fR)\[char46]
+.TP
+UUID
+Either a universally unique identifier in the style of RFC 4122, e\[char46]g\[char46] \fBf81d4fae\-7dec\-11d0\-a765\-00a0c91e6bf6\fR, or an \fB@\fR\fIname\fR defined by a \fBget\fR or \fBcreate\fR command within the same \fBovs\-vsctl\fR invocation\[char46]
+.RE
+.PP
+.PP
+Multiple values in a single column may be separated by spaces or a single comma\[char46] When multiple values are present, duplicates are not allowed, and order is not important\[char46] Conversely, some database columns can have an empty set of values, represented as \fB[]\fR, and square brackets may optionally enclose other non-empty sets or single values as well\[char46]
+.PP
+.PP
+A few database columns are ``maps\(cq\(cq of key-value pairs, where the key and the value are each some fixed database type\[char46] These are specified in the form \fIkey\fR\fB=\fR\fIvalue\fR, where \fIkey\fR and \fIvalue\fR follow the syntax for the column\(cqs key type and value type, respectively\[char46] When multiple pairs are present (separated by spaces or a comma), duplicate keys are not allowed, and again the order is not important\[char46] Duplicate values are allowed\[char46] An empty map is represented as \fB{}\fR\[char46] Curly braces may optionally enclose non-empty maps as well (but use quotes to prevent the shell from expanding \fBother\-config={0=x,1=y}\fR into \fBother\-config=0=x
+other\-config=1=y\fR, which may not have the desired effect)\[char46]
+.PP
+\fIDatabase Command Syntax\fR
+.RS
+.TP
+[\fB\-\-if\-exists\fR] [\fB\-\-columns=\fR\fIcolumn\fR[\fB,\fR\fIcolumn\fR]\[char46]\[char46]\[char46]] \fBlist\fR \fItable\fR [\fIrecord\fR]\[char46]\[char46]\[char46]
+Lists the data in each specified \fIrecord\fR\[char46] If no records are specified, lists all the records in \fItable\fR\[char46]
+.IP
+If \fB\-\-columns\fR is specified, only the requested columns are listed, in the specified order\[char46] Otherwise, all columns are listed, in alphabetical order by column name\[char46]
+.IP
+Without \fB\-\-if\-exists\fR, it is an error if any specified \fIrecord\fR does not exist\[char46] With \fB\-\-if\-exists\fR, the command ignores any \fIrecord\fR that does not exist, without producing any output\[char46]
+.TP
+[\fB\-\-columns=\fR\fIcolumn\fR[\fB,\fR\fIcolumn\fR]\[char46]\[char46]\[char46]] \fBfind\fR \fItable\fR [\fIcolumn\fR[\fB:\fR\fIkey\fR]\fB=\fR\fIvalue\fR]\[char46]\[char46]\[char46]
+Lists the data in each record in \fItable\fR whose \fIcolumn\fR equals \fIvalue\fR or, if \fIkey\fR is specified, whose \fIcolumn\fR contains a \fIkey\fR with the specified \fIvalue\fR\[char46] The following operators may be used where \fB=\fR is written in the syntax summary:
+.RS
+.TP
+\fB= != < > <= >=\fR
+Selects records in which \fIcolumn\fR[\fB:\fR\fIkey\fR] equals, does not equal, is less than, is greater than, is less than or equal to, or is greater than or equal to \fIvalue\fR, respectively\[char46]
+.IP
+Consider \fIcolumn\fR[\fB:\fR\fIkey\fR] and \fIvalue\fR as sets of elements\[char46] Identical sets are considered equal\[char46] Otherwise, if the sets have different numbers of elements, then the set with more elements is considered to be larger\[char46] Otherwise, consider a element from each set pairwise, in increasing order within each set\[char46] The first pair that differs determines the result\[char46] (For a column that contains key-value pairs, first all the keys are compared, and values are considered only if the two sets contain identical keys\[char46])
+.TP
+\fB{=} {!=}\fR
+Test for set equality or inequality, respectively\[char46]
+.TP
+\fB{<=}\fR
+Selects records in which \fIcolumn\fR[\fB:\fR\fIkey\fR] is a subset of \fIvalue\fR\[char46] For example, \fBflood\-vlans{<=}1,2\fR selects records in which the \fBflood\-vlans\fR column is the empty set or contains 1 or 2 or both\[char46]
+.TP
+\fB{<}\fR
+Selects records in which \fIcolumn\fR[\fB:\fR\fIkey\fR] is a proper subset of \fIvalue\fR\[char46] For example, \fBflood\-vlans{<}1,2\fR selects records in which the \fBflood\-vlans\fR column is the empty set or contains 1 or 2 but not both\[char46]
+.TP
+\fB{>=} {>}\fR
+Same as \fB{<=}\fR and \fB{<}\fR, respectively, except that the relationship is reversed\[char46] For example, \fBflood\-vlans{>=}1,2\fR selects records in which the \fBflood\-vlans\fR column contains both 1 and 2\[char46]
+.RE
+.IP
+The following operators are available only in Open vSwitch 2\[char46]16 and later:
+.RS
+.TP
+\fB{in}\fR
+Selects records in which every element in \fIcolumn\fR[\fB:\fR\fIkey\fR] is also in \fIvalue\fR\[char46] (This is the same as \fB{<=}\fR\[char46])
+.TP
+\fB{not\-in}\fR
+Selects records in which every element in \fIcolumn\fR[\fB:\fR\fIkey\fR] is not in \fIvalue\fR\[char46]
+.RE
+.IP
+For arithmetic operators (\fB= != < > <= >=\fR), when \fIkey\fR is specified but a particular record\(cqs \fIcolumn\fR does not contain \fIkey\fR, the record is always omitted from the results\[char46] Thus, the condition \fBother\-config:mtu!=1500\fR matches records that have a \fBmtu\fR key whose value is not 1500, but not those that lack an \fBmtu\fR key\[char46]
+.IP
+For the set operators, when \fIkey\fR is specified but a particular record\(cqs \fIcolumn\fR does not contain \fIkey\fR, the comparison is done against an empty set\[char46] Thus, the condition \fBother\-config:mtu{!=}1500\fR matches records that have a \fBmtu\fR key whose value is not 1500 and those that lack an \fBmtu\fR key\[char46]
+.IP
+Don\(cqt forget to escape \fB<\fR or \fB>\fR from interpretation by the shell\[char46]
+.IP
+If \fB\-\-columns\fR is specified, only the requested columns are listed, in the specified order\[char46] Otherwise all columns are listed, in alphabetical order by column name\[char46]
+.IP
+The UUIDs shown for rows created in the same \fBovs\-vsctl\fR invocation will be wrong\[char46]
+.TP
+[\fB\-\-if\-exists\fR] [\fB\-\-id=@\fR\fIname\fR] \fBget\fR \fItable record\fR [\fIcolumn\fR[\fB:\fR\fIkey\fR]]\[char46]\[char46]\[char46]
+Prints the value of each specified \fIcolumn\fR in the given \fIrecord\fR in \fItable\fR\[char46] For map columns, a \fIkey\fR may optionally be specified, in which case the value associated with \fIkey\fR in the column is printed, instead of the entire map\[char46]
+.IP
+Without \fB\-\-if\-exists\fR, it is an error if \fIrecord\fR does not exist or \fIkey\fR is specified, if \fIkey\fR does not exist in \fIrecord\fR\[char46] With \fB\-\-if\-exists\fR, a missing \fIrecord\fR yields no output and a missing \fIkey\fR prints a blank line\[char46]
+.IP
+If \fB@\fR\fIname\fR is specified, then the UUID for \fIrecord\fR may be referred to by that name later in the same \fBovs\-vsctl\fR invocation in contexts where a UUID is expected\[char46]
+.IP
+Both \fB\-\-id\fR and the \fIcolumn\fR arguments are optional, but usually at least one or the other should be specified\[char46] If both are omitted, then \fBget\fR has no effect except to verify that \fIrecord\fR exists in \fItable\fR\[char46]
+.IP
+\fB\-\-id\fR and \fB\-\-if\-exists\fR cannot be used together\[char46]
+.TP
+[\fB\-\-if\-exists\fR] \fBset\fR \fItable record column\fR[\fB:\fR\fIkey\fR]\fB=\fR\fIvalue\fR\[char46]\[char46]\[char46]
+Sets the value of each specified \fIcolumn\fR in the given \fIrecord\fR in \fItable\fR to \fIvalue\fR\[char46] For map columns, a \fIkey\fR may optionally be specified, in which case the value associated with \fIkey\fR in that column is changed (or added, if none exists), instead of the entire map\[char46]
+.IP
+Without \fB\-\-if\-exists\fR, it is an error if \fIrecord\fR does not exist\[char46] With \fB\-\-if\-exists\fR, this command does nothing if \fIrecord\fR does not exist\[char46]
+.TP
+[\fB\-\-if\-exists\fR] \fBadd\fR \fItable record column\fR [\fIkey\fR\fB=\fR]\fIvalue\fR\[char46]\[char46]\[char46]
+Adds the specified value or key-value pair to \fIcolumn\fR in \fIrecord\fR in \fItable\fR\[char46] If \fIcolumn\fR is a map, then \fIkey\fR is required, otherwise it is prohibited\[char46] If \fIkey\fR already exists in a map column, then the current \fIvalue\fR is not replaced (use the \fBset\fR command to replace an existing value)\[char46]
+.IP
+Without \fB\-\-if\-exists\fR, it is an error if \fIrecord\fR does not exist\[char46] With \fB\-\-if\-exists\fR, this command does nothing if \fIrecord\fR does not exist\[char46]
+.TP
+[\fB\-\-if\-exists\fR] \fBremove\fR \fItable record column value\fR\[char46]\[char46]\[char46]
+.IP
+[\fB\-\-if\-exists\fR] \fBremove\fR \fItable record column key\fR\[char46]\[char46]\[char46]
+.IP
+[\fB\-\-if\-exists\fR] \fBremove\fR \fItable record column key\fR\fB=\fR\fIvalue\fR\[char46]\[char46]\[char46]
+Removes the specified values or key-value pairs from \fIcolumn\fR in \fIrecord\fR in \fItable\fR\[char46] The first form applies to columns that are not maps: each specified \fIvalue\fR is removed from the column\[char46] The second and third forms apply to map columns: if only a \fIkey\fR is specified, then any key-value pair with the given \fIkey\fR is removed, regardless of its value; if a \fIvalue\fR is given then a pair is removed only if both key and value match\[char46]
+.IP
+It is not an error if the column does not contain the specified key or value or pair\[char46]
+.IP
+Without \fB\-\-if\-exists\fR, it is an error if \fIrecord\fR does not exist\[char46] With \fB\-\-if\-exists\fR, this command does nothing if \fIrecord\fR does not exist\[char46]
+.TP
+[\fB\-\-if\-exists\fR] \fBclear\fR \fItable record column\fR\[char46]\[char46]\[char46]
+Sets each \fIcolumn\fR in \fIrecord\fR in \fItable\fR to the empty set or empty map, as appropriate\[char46] This command applies only to columns that are allowed to be empty\[char46]
+.IP
+Without \fB\-\-if\-exists\fR, it is an error if \fIrecord\fR does not exist\[char46] With \fB\-\-if\-exists\fR, this command does nothing if \fIrecord\fR does not exist\[char46]
+.TP
+[\fB\-\-id=(@\fR\fIname\fR|\fIuuid\fR)] \fBcreate\fR \fItable column\fR[\fB:\fR\fIkey\fR]\fB=\fR\fIvalue\fR\[char46]\[char46]\[char46]
+Creates a new record in \fItable\fR and sets the initial values of each \fIcolumn\fR\[char46] Columns not explicitly set will receive their default values\[char46] Outputs the UUID of the new row\[char46]
+.IP
+If \fB@\fR\fIname\fR is specified, then the UUID for the new row may be referred to by that name elsewhere in the same \fB\e*(PN\fR invocation in contexts where a UUID is expected\[char46] Such references may precede or follow the \fBcreate\fR command\[char46]
+.IP
+If a valid \fIuuid\fR is specified, then it is used as the UUID of the new row\[char46]
+.RS
+.TP
+Caution (ovs-vsctl as example)
+Records in the Open vSwitch database are significant only when they can be reached directly or indirectly from the \fBOpen_vSwitch\fR table\[char46] Except for records in the \fBQoS\fR or \fBQueue\fR tables, records that are not reachable from the \fBOpen_vSwitch\fR table are automatically deleted from the database\[char46] This deletion happens immediately, without waiting for additional \fBovs\-vsctl\fR commands or other database activity\[char46] Thus, a \fBcreate\fR command must generally be accompanied by additional commands \fIwithin the same\fR \fBovs\-vsctl\fR \fIinvocation\fR to add a chain of references to the newly created record from the top-level \fBOpen_vSwitch\fR record\[char46] The \fBEXAMPLES\fR section gives some examples that show how to do this\[char46]
+.RE
+.TP
+[\fB\-\-if\-exists\fR] \fBdestroy\fR \fItable record\fR\[char46]\[char46]\[char46]
+Deletes each specified \fIrecord\fR from \fItable\fR\[char46] Unless \fB\-\-if\-exists\fR is specified, each \fIrecord\fRs must exist\[char46]
+.TP
+\fB\-\-all destroy\fR \fItable\fR
+Deletes all records from the \fItable\fR\[char46]
+.RS
+.TP
+Caution (ovs-vsctl as example)
+The \fBdestroy\fR command is only useful for records in the \fBQoS\fR or \fBQueue\fR tables\[char46] Records in other tables are automatically deleted from the database when they become unreachable from the \fBOpen_vSwitch\fR table\[char46] This means that deleting the last reference to a record is sufficient for deleting the record itself\[char46] For records in these tables, \fBdestroy\fR is silently ignored\[char46] See the \fBEXAMPLES\fR section below for more information\[char46]
+.RE
+.TP
+\fBwait\-until\fR \fItable record\fR [\fIcolumn\fR[\fB:\fR\fIkey\fR]\fB=\fR\fIvalue\fR]\[char46]\[char46]\[char46]
+Waits until \fItable\fR contains a record named \fIrecord\fR whose \fIcolumn\fR equals \fIvalue\fR or, if \fIkey\fR is specified, whose \fIcolumn\fR contains a \fIkey\fR with the specified \fIvalue\fR\[char46] This command supports the same operators and semantics described for the \fBfind\fR command above\[char46]
+.IP
+If no \fIcolumn\fR[\fB:\fR\fIkey\fR]\fB=\fR\fIvalue\fR arguments are given, this command waits only until \fIrecord\fR exists\[char46] If more than one such argument is given, the command waits until all of them are satisfied\[char46]
+.RS
+.TP
+Caution (ovs-vsctl as example)
+Usually \fBwait\-until\fR should be placed at the beginning of a set of \fBovs\-vsctl\fR commands\[char46] For example, \fBwait\-until bridge br0
+\-\- get bridge br0 datapath_id\fR waits until a bridge named \fBbr0\fR is created, then prints its \fBdatapath_id\fR column, whereas \fBget bridge br0 datapath_id \-\- wait\-until bridge br0\fR will abort if no bridge named \fBbr0\fR exists when \fBovs\-vsctl\fR initially connects to the database\[char46]
+.RE
+.IP
+Consider specifying \fB\-\-timeout=0\fR along with \fB\-\-wait\-until\fR, to prevent \fBovs\-vsctl\fR from terminating after waiting only at most 5 seconds\[char46]
+.TP
+\fBcomment\fR [\fIarg\fR]\[char46]\[char46]\[char46]
+This command has no effect on behavior, but any database log record created by the command will include the command and its arguments\[char46]
+.RE
+.SH "ENVIRONMENT"
+.TP
+\fBOVN_SB_DAEMON\fR
+If set, this should name the Unix domain socket for an \fBovn\-sbctl\fR server process\[char46] See \fBDaemon Mode\fR, above, for more information\[char46]
+.TP
+\fBOVN_SBCTL_OPTIONS\fR
+If set, a set of options for \fBovn\-sbctl\fR to apply automatically, in the same form as on the command line\[char46]
+.TP
+\fBOVN_SB_DB\fR
+If set, the default database to contact when the \fB\-\-db\fR option is not used\[char46]
+.SH "EXIT STATUS"
+.TP
+0
+Successful program execution\[char46]
+.TP
+1
+Usage, syntax, or network error\[char46]
+.SH "SEE ALSO"
+\fBovn\-sb\fR(5), \fBovn\-appctl\fR(8)\[char46]
diff --git a/support/dist-docs-branch-23.06/ovn-sbctl.8.html b/support/dist-docs-branch-23.06/ovn-sbctl.8.html
new file mode 100644
index 00000000..0de872ac
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-sbctl.8.html
@@ -0,0 +1,979 @@
+<html><head><meta charset="UTF-8"></head><body><pre>
+<u>o</u><u>v</u><u>n</u><u>-</u><u>s</u><u>b</u><u>c</u><u>t</u><u>l</u>(8)                      OVN Manual                      <u>o</u><u>v</u><u>n</u><u>-</u><u>s</u><u>b</u><u>c</u><u>t</u><u>l</u>(8)
+
+<b>N</b><b>A</b><b>M</b><b>E</b>
+       ovn-sbctl - Open Virtual Network southbound db management utility
+
+<b>S</b><b>Y</b><b>N</b><b>O</b><b>P</b><b>S</b><b>I</b><b>S</b>
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b><b>c</b><b>t</b><b>l</b> [<u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u>] <u>c</u><u>o</u><u>m</u><u>m</u><u>a</u><u>n</u><u>d</u> [<u>a</u><u>r</u><u>g</u>...]
+
+<b>D</b><b>E</b><b>S</b><b>C</b><b>R</b><b>I</b><b>P</b><b>T</b><b>I</b><b>O</b><b>N</b>
+       The <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b><b>c</b><b>t</b><b>l</b> program configures the <b>O</b><b>V</b><b>N</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database by provid‐
+       ing a high-level interface to its configuration database. See <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b>(5)
+       for comprehensive documentation of the database schema.
+
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b><b>c</b><b>t</b><b>l</b>  connects  to  an  <b>o</b><b>v</b><b>s</b><b>d</b><b>b</b><b>-</b><b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b>  process  that  maintains  an
+       OVN_Southbound  configuration  database.  Using  this  connection,   it
+       queries  and possibly applies changes to the database, depending on the
+       supplied commands.
+
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b><b>c</b><b>t</b><b>l</b> can perform any number of commands in a  single  run,  imple‐
+       mented as a single atomic transaction against the database.
+
+       The  <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b><b>c</b><b>t</b><b>l</b> command line begins with global options (see <b>O</b><b>P</b><b>T</b><b>I</b><b>O</b><b>N</b><b>S</b> be‐
+       low for details). The global options are followed by one or  more  com‐
+       mands.  Each  command  should begin with <b>-</b><b>-</b> by itself as a command-line
+       argument, to separate it from the following commands.  (The  <b>-</b><b>-</b>  before
+       the first command is optional.) The command itself starts with command-
+       specific  options,  if  any, followed by the command name and any argu‐
+       ments.
+
+<b>D</b><b>A</b><b>E</b><b>M</b><b>O</b><b>N</b> <b>M</b><b>O</b><b>D</b><b>E</b>
+       When it is invoked in the most ordinary way, <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b><b>c</b><b>t</b><b>l</b> connects  to  an
+       OVSDB  server  that  hosts the southbound database, retrieves a partial
+       copy of the database that is complete enough to do its  work,  sends  a
+       transaction  request  to  the  server,  and  receives and processes the
+       server’s reply. In common interactive use, this is  fine,  but  if  the
+       database is large, the step in which <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b><b>c</b><b>t</b><b>l</b> retrieves a partial copy
+       of  the  database  can  take a long time, which yields poor performance
+       overall.
+
+       To improve performance in such  a  case,  <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b><b>c</b><b>t</b><b>l</b>  offers  a  "daemon
+       mode,"  in  which  the user first starts <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b><b>c</b><b>t</b><b>l</b> running in the back‐
+       ground and afterward uses the daemon to execute operations.  Over  sev‐
+       eral  <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b><b>c</b><b>t</b><b>l</b>  command  invocations, this performs better overall be‐
+       cause it retrieves a copy of the database only once at  the  beginning,
+       not once per program run.
+
+       Use the <b>-</b><b>-</b><b>d</b><b>e</b><b>t</b><b>a</b><b>c</b><b>h</b> option to start an <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b><b>c</b><b>t</b><b>l</b> daemon. With this option,
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b><b>c</b><b>t</b><b>l</b>  prints  the  name  of a control socket to stdout. The client
+       should save this name in environment variable <b>O</b><b>V</b><b>N</b><b>_</b><b>S</b><b>B</b><b>_</b><b>D</b><b>A</b><b>E</b><b>M</b><b>O</b><b>N</b>. Under  the
+       Bourne shell this might be done like this:
+
+             export OVN_SB_DAEMON=$(ovn-sbctl --pidfile --detach)
+
+
+       When  <b>O</b><b>V</b><b>N</b><b>_</b><b>S</b><b>B</b><b>_</b><b>D</b><b>A</b><b>E</b><b>M</b><b>O</b><b>N</b>  is  set, <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b><b>c</b><b>t</b><b>l</b> automatically and transparently
+       uses the daemon to execute its commands.
+
+       When the daemon is no longer needed, kill it and unset the  environment
+       variable, e.g.:
+
+             kill $(cat $OVN_RUNDIR/ovn-sbctl.pid)
+             unset OVN_SB_DAEMON
+
+
+       When using daemon mode, an alternative to the <b>O</b><b>V</b><b>N</b><b>_</b><b>S</b><b>B</b><b>_</b><b>D</b><b>A</b><b>E</b><b>M</b><b>O</b><b>N</b> environment
+       variable  is  to  specify a path for the Unix socket. When starting the
+       ovn-sbctl daemon, specify the <b>-</b><b>u</b> option with a full path to  the  loca‐
+       tion of the socket file. Here is an exmple:
+
+             ovn-sbctl --detach -u /tmp/mysock.ctl
+
+
+       Then  to connect to the running daemon, use the <b>-</b><b>u</b> option with the full
+       path to the socket created when the daemon was started:
+
+             ovn-sbctl -u /tmp/mysock.ctl show
+
+
+     <u>D</u><u>a</u><u>e</u><u>m</u><u>o</u><u>n</u> <u>C</u><u>o</u><u>m</u><u>m</u><u>a</u><u>n</u><u>d</u><u>s</u>
+
+       Daemon mode is internally implemented using the same mechanism used  by
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>a</b><b>p</b><b>p</b><b>c</b><b>t</b><b>l</b>.  One  may  also  use <b>o</b><b>v</b><b>n</b><b>-</b><b>a</b><b>p</b><b>p</b><b>c</b><b>t</b><b>l</b> directly with the following
+       commands:
+
+              <b>r</b><b>u</b><b>n</b> [<u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u>] <u>c</u><u>o</u><u>m</u><u>m</u><u>a</u><u>n</u><u>d</u> [<u>a</u><u>r</u><u>g</u>...] [<b>-</b><b>-</b> [<u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u>] <u>c</u><u>o</u><u>m</u><u>m</u><u>a</u><u>n</u><u>d</u> [<u>a</u><u>r</u><u>g</u>...]
+              ...]
+                     Instructs the daemon process to run one or more <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b><b>c</b><b>t</b><b>l</b>
+                     commands described above and reply with  the  results  of
+                     running  these  commands.  Accepts the <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>w</b><b>a</b><b>i</b><b>t</b>, <b>-</b><b>-</b><b>w</b><b>a</b><b>i</b><b>t</b>,
+                     <b>-</b><b>-</b><b>t</b><b>i</b><b>m</b><b>e</b><b>o</b><b>u</b><b>t</b>, <b>-</b><b>-</b><b>d</b><b>r</b><b>y</b><b>-</b><b>r</b><b>u</b><b>n</b>,  <b>-</b><b>-</b><b>o</b><b>n</b><b>e</b><b>l</b><b>i</b><b>n</b><b>e</b>,  and  the  options  de‐
+                     scribed under <b>T</b><b>a</b><b>b</b><b>l</b><b>e</b> <b>F</b><b>o</b><b>r</b><b>m</b><b>a</b><b>t</b><b>t</b><b>i</b><b>n</b><b>g</b> <b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> in addition to the
+                     the command-specific options.
+
+              <b>e</b><b>x</b><b>i</b><b>t</b>   Causes <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b><b>c</b><b>t</b><b>l</b> to gracefully terminate.
+
+<b>O</b><b>P</b><b>T</b><b>I</b><b>O</b><b>N</b><b>S</b>
+       The  options  listed below affect the behavior of <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b><b>c</b><b>t</b><b>l</b> as a whole.
+       Some individual commands also accept their own options, which are given
+       just before the command name. If the first command on the command  line
+       has  options,  then those options must be separated from the global op‐
+       tions by <b>-</b><b>-</b>.
+
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b><b>c</b><b>t</b><b>l</b> also accepts options from the  <b>O</b><b>V</b><b>N</b><b>_</b><b>S</b><b>B</b><b>C</b><b>T</b><b>L</b><b>_</b><b>O</b><b>P</b><b>T</b><b>I</b><b>O</b><b>N</b><b>S</b>  environment
+       variable,  in  the same format as on the command line. Options from the
+       command line override those in the environment.
+
+              <b>-</b><b>-</b><b>d</b><b>b</b> <u>d</u><u>a</u><u>t</u><u>a</u><u>b</u><u>a</u><u>s</u><u>e</u>
+                     The OVSDB database remote to contact.  If  the  <b>O</b><b>V</b><b>N</b><b>_</b><b>S</b><b>B</b><b>_</b><b>D</b><b>B</b>
+                     environment variable is set, its value is used as the de‐
+                     fault. Otherwise, the default is <b>u</b><b>n</b><b>i</b><b>x</b><b>:</b><b>/</b><b>o</b><b>v</b><b>n</b><b>s</b><b>b</b><b>_</b><b>d</b><b>b</b><b>.</b><b>s</b><b>o</b><b>c</b><b>k</b>, but
+                     this  default is unlikely to be useful outside of single-
+                     machine OVN test environments.
+
+              <b>-</b><b>-</b><b>l</b><b>e</b><b>a</b><b>d</b><b>e</b><b>r</b><b>-</b><b>o</b><b>n</b><b>l</b><b>y</b>
+              <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>l</b><b>e</b><b>a</b><b>d</b><b>e</b><b>r</b><b>-</b><b>o</b><b>n</b><b>l</b><b>y</b>
+                   By default, or with <b>-</b><b>-</b><b>l</b><b>e</b><b>a</b><b>d</b><b>e</b><b>r</b><b>-</b><b>o</b><b>n</b><b>l</b><b>y</b>, when the database server
+                   is a clustered database, <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b><b>c</b><b>t</b><b>l</b> will avoid servers other
+                   than the cluster leader. This ensures that  any  data  that
+                   <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b><b>c</b><b>t</b><b>l</b>   reads   and   reports   is   up-to-date.   With
+                   <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>l</b><b>e</b><b>a</b><b>d</b><b>e</b><b>r</b><b>-</b><b>o</b><b>n</b><b>l</b><b>y</b>, <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b><b>c</b><b>t</b><b>l</b> will  use  any  server  in  the
+                   cluster, which means that for read-only transactions it can
+                   report  and act on stale data (transactions that modify the
+                   database are always serialized even with <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>l</b><b>e</b><b>a</b><b>d</b><b>e</b><b>r</b><b>-</b><b>o</b><b>n</b><b>l</b><b>y</b>).
+                   Refer to <b>U</b><b>n</b><b>d</b><b>e</b><b>r</b><b>s</b><b>t</b><b>a</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> <b>C</b><b>l</b><b>u</b><b>s</b><b>t</b><b>e</b><b>r</b> <b>C</b><b>o</b><b>n</b><b>s</b><b>i</b><b>s</b><b>t</b><b>e</b><b>n</b><b>c</b><b>y</b> in <b>o</b><b>v</b><b>s</b><b>d</b><b>b</b>(7)  for
+                   more information.
+
+              <b>-</b><b>-</b><b>s</b><b>h</b><b>u</b><b>f</b><b>f</b><b>l</b><b>e</b><b>-</b><b>r</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b><b>s</b>
+              <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>s</b><b>h</b><b>u</b><b>f</b><b>f</b><b>l</b><b>e</b><b>-</b><b>r</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b><b>s</b>
+                   By  default, or with <b>-</b><b>-</b><b>s</b><b>h</b><b>u</b><b>f</b><b>f</b><b>l</b><b>e</b><b>-</b><b>r</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b><b>s</b>, when there are mul‐
+                   tiple remotes specified  in  the  OVSDB  connection  string
+                   specified  by  <b>-</b><b>-</b><b>d</b><b>b</b>  or the <b>O</b><b>V</b><b>N</b><b>_</b><b>S</b><b>B</b><b>_</b><b>D</b><b>B</b> environment variable,
+                   the order of the remotes will be shuffled before the client
+                   tries to connect. The remotes will be shuffled only once to
+                   a new order before the first connection attempt.  The  fol‐
+                   lowing retries, if any, will follow the same new order. The
+                   default  behavior  is  to  make sure clients of a clustered
+                   database can distribute evenly to all members of the  clus‐
+                   ter.  With  <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>s</b><b>h</b><b>u</b><b>f</b><b>f</b><b>l</b><b>e</b><b>-</b><b>r</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b><b>s</b>,  <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b><b>c</b><b>t</b><b>l</b>  will  use the
+                   original order specified in the connection string  to  con‐
+                   nect.  This  allows  user  to  specify the preferred order,
+                   which is particularly useful for testing.
+
+              <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b>
+                   By default, <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b><b>c</b><b>t</b><b>l</b> logs its arguments and the details of
+                   any changes that it makes to the system  log.  This  option
+                   disables this logging.
+
+                   This option is equivalent to <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>b</b><b>o</b><b>s</b><b>e</b><b>=</b><b>s</b><b>b</b><b>c</b><b>t</b><b>l</b><b>:</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>:</b><b>w</b><b>a</b><b>r</b><b>n</b>.
+
+              <b>-</b><b>-</b><b>o</b><b>n</b><b>e</b><b>l</b><b>i</b><b>n</b><b>e</b>
+                   Modifies the output format so that the output for each com‐
+                   mand  is printed on a single line. New-line characters that
+                   would otherwise separate lines are  printed  as  \fB\\n\fR,
+                   and  any  instances of \fB\\\fR that would otherwise appear
+                   in the output are doubled. Prints a  blank  line  for  each
+                   command that has no output. This option does not affect the
+                   formatting  of  output  from the <b>l</b><b>i</b><b>s</b><b>t</b> or <b>f</b><b>i</b><b>n</b><b>d</b> commands; see
+                   <b>T</b><b>a</b><b>b</b><b>l</b><b>e</b> <b>F</b><b>o</b><b>r</b><b>m</b><b>a</b><b>t</b><b>t</b><b>i</b><b>n</b><b>g</b> <b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> below.
+
+              <b>-</b><b>-</b><b>d</b><b>r</b><b>y</b><b>-</b><b>r</b><b>u</b><b>n</b>
+                   Prevents <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b><b>c</b><b>t</b><b>l</b> from actually modifying the database.
+
+              <b>-</b><b>t</b> <u>s</u><u>e</u><u>c</u><u>s</u>
+              <b>-</b><b>-</b><b>t</b><b>i</b><b>m</b><b>e</b><b>o</b><b>u</b><b>t</b><b>=</b><u>s</u><u>e</u><u>c</u><u>s</u>
+                   By default, or with a <u>s</u><u>e</u><u>c</u><u>s</u> of <b>0</b>,  <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b><b>c</b><b>t</b><b>l</b>  waits  forever
+                   for  a  response from the database. This option limits run‐
+                   time to approximately <u>s</u><u>e</u><u>c</u><u>s</u> seconds. If the timeout expires,
+                   <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b><b>c</b><b>t</b><b>l</b> will exit with a <b>S</b><b>I</b><b>G</b><b>A</b><b>L</b><b>R</b><b>M</b> signal. (A timeout would
+                   normally happen only if the database cannot  be  contacted,
+                   or if the system is overloaded.)
+
+   <b>D</b><b>a</b><b>e</b><b>m</b><b>o</b><b>n</b> <b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+       <b>-</b><b>-</b><b>p</b><b>i</b><b>d</b><b>f</b><b>i</b><b>l</b><b>e</b>[<b>=</b><u>p</u><u>i</u><u>d</u><u>f</u><u>i</u><u>l</u><u>e</u>]
+              Causes a file (by default, <u>p</u><u>r</u><u>o</u><u>g</u><u>r</u><u>a</u><u>m</u><b>.</b><b>p</b><b>i</b><b>d</b>) to be created indicating
+              the  PID  of the running process. If the <u>p</u><u>i</u><u>d</u><u>f</u><u>i</u><u>l</u><u>e</u> argument is not
+              specified, or if it does not begin with <b>/</b>, then it is created in
+              .
+
+              If <b>-</b><b>-</b><b>p</b><b>i</b><b>d</b><b>f</b><b>i</b><b>l</b><b>e</b> is not specified, no pidfile is created.
+
+       <b>-</b><b>-</b><b>o</b><b>v</b><b>e</b><b>r</b><b>w</b><b>r</b><b>i</b><b>t</b><b>e</b><b>-</b><b>p</b><b>i</b><b>d</b><b>f</b><b>i</b><b>l</b><b>e</b>
+              By default, when <b>-</b><b>-</b><b>p</b><b>i</b><b>d</b><b>f</b><b>i</b><b>l</b><b>e</b> is specified and the  specified  pid‐
+              file already exists and is locked by a running process, the dae‐
+              mon refuses to start. Specify <b>-</b><b>-</b><b>o</b><b>v</b><b>e</b><b>r</b><b>w</b><b>r</b><b>i</b><b>t</b><b>e</b><b>-</b><b>p</b><b>i</b><b>d</b><b>f</b><b>i</b><b>l</b><b>e</b> to cause it to
+              instead overwrite the pidfile.
+
+              When <b>-</b><b>-</b><b>p</b><b>i</b><b>d</b><b>f</b><b>i</b><b>l</b><b>e</b> is not specified, this option has no effect.
+
+       <b>-</b><b>-</b><b>d</b><b>e</b><b>t</b><b>a</b><b>c</b><b>h</b>
+              Runs  this  program  as a background process. The process forks,
+              and in the child it starts a new session,  closes  the  standard
+              file descriptors (which has the side effect of disabling logging
+              to  the  console), and changes its current directory to the root
+              (unless <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>c</b><b>h</b><b>d</b><b>i</b><b>r</b> is specified). After the child completes  its
+              initialization, the parent exits.
+
+       <b>-</b><b>-</b><b>m</b><b>o</b><b>n</b><b>i</b><b>t</b><b>o</b><b>r</b>
+              Creates  an  additional  process  to monitor this program. If it
+              dies due to a signal that indicates a programming  error  (<b>S</b><b>I</b><b>G</b><b>A</b>‐‐
+              <b>B</b><b>R</b><b>T</b>, <b>S</b><b>I</b><b>G</b><b>A</b><b>L</b><b>R</b><b>M</b>, <b>S</b><b>I</b><b>G</b><b>B</b><b>U</b><b>S</b>, <b>S</b><b>I</b><b>G</b><b>F</b><b>P</b><b>E</b>, <b>S</b><b>I</b><b>G</b><b>I</b><b>L</b><b>L</b>, <b>S</b><b>I</b><b>G</b><b>P</b><b>I</b><b>P</b><b>E</b>, <b>S</b><b>I</b><b>G</b><b>S</b><b>E</b><b>G</b><b>V</b>, <b>S</b><b>I</b><b>G</b><b>X</b><b>C</b><b>P</b><b>U</b>,
+              or <b>S</b><b>I</b><b>G</b><b>X</b><b>F</b><b>S</b><b>Z</b>) then the monitor process starts a new copy of it. If
+              the daemon dies or exits for another reason, the monitor process
+              exits.
+
+              This  option  is  normally used with <b>-</b><b>-</b><b>d</b><b>e</b><b>t</b><b>a</b><b>c</b><b>h</b>, but it also func‐
+              tions without it.
+
+       <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>c</b><b>h</b><b>d</b><b>i</b><b>r</b>
+              By default, when <b>-</b><b>-</b><b>d</b><b>e</b><b>t</b><b>a</b><b>c</b><b>h</b> is specified, the daemon  changes  its
+              current  working  directory  to  the root directory after it de‐
+              taches. Otherwise, invoking the daemon from a carelessly  chosen
+              directory  would  prevent  the administrator from unmounting the
+              file system that holds that directory.
+
+              Specifying <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>c</b><b>h</b><b>d</b><b>i</b><b>r</b> suppresses this behavior,  preventing  the
+              daemon  from changing its current working directory. This may be
+              useful for collecting core files, since it is common behavior to
+              write core dumps into the current working directory and the root
+              directory is not a good directory to use.
+
+              This option has no effect when <b>-</b><b>-</b><b>d</b><b>e</b><b>t</b><b>a</b><b>c</b><b>h</b> is not specified.
+
+       <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>s</b><b>e</b><b>l</b><b>f</b><b>-</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>n</b><b>e</b><b>m</b><b>e</b><b>n</b><b>t</b>
+              By default this daemon will try to self-confine itself  to  work
+              with  files  under  well-known  directories  determined at build
+              time. It is better to stick with this default behavior  and  not
+              to  use  this  flag  unless some other Access Control is used to
+              confine daemon. Note that in contrast to  other  access  control
+              implementations  that  are  typically enforced from kernel-space
+              (e.g. DAC or MAC), self-confinement is imposed  from  the  user-
+              space daemon itself and hence should not be considered as a full
+              confinement  strategy,  but instead should be viewed as an addi‐
+              tional layer of security.
+
+       <b>-</b><b>-</b><b>u</b><b>s</b><b>e</b><b>r</b><b>=</b><u>u</u><u>s</u><u>e</u><u>r</u><b>:</b><u>g</u><u>r</u><u>o</u><u>u</u><u>p</u>
+              Causes this program to run as  a  different  user  specified  in
+              <u>u</u><u>s</u><u>e</u><u>r</u><b>:</b><u>g</u><u>r</u><u>o</u><u>u</u><u>p</u>,  thus  dropping  most  of the root privileges. Short
+              forms <u>u</u><u>s</u><u>e</u><u>r</u> and <b>:</b><u>g</u><u>r</u><u>o</u><u>u</u><u>p</u> are also allowed,  with  current  user  or
+              group  assumed,  respectively.  Only daemons started by the root
+              user accepts this argument.
+
+              On   Linux,   daemons   will   be   granted   <b>C</b><b>A</b><b>P</b><b>_</b><b>I</b><b>P</b><b>C</b><b>_</b><b>L</b><b>O</b><b>C</b><b>K</b>   and
+              <b>C</b><b>A</b><b>P</b><b>_</b><b>N</b><b>E</b><b>T</b><b>_</b><b>B</b><b>I</b><b>N</b><b>D</b><b>_</b><b>S</b><b>E</b><b>R</b><b>V</b><b>I</b><b>C</b><b>E</b><b>S</b>  before  dropping root privileges. Daemons
+              that interact with a datapath, such  as  <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>d</b>,  will  be
+              granted  three  additional  capabilities,  namely <b>C</b><b>A</b><b>P</b><b>_</b><b>N</b><b>E</b><b>T</b><b>_</b><b>A</b><b>D</b><b>M</b><b>I</b><b>N</b>,
+              <b>C</b><b>A</b><b>P</b><b>_</b><b>N</b><b>E</b><b>T</b><b>_</b><b>B</b><b>R</b><b>O</b><b>A</b><b>D</b><b>C</b><b>A</b><b>S</b><b>T</b> and <b>C</b><b>A</b><b>P</b><b>_</b><b>N</b><b>E</b><b>T</b><b>_</b><b>R</b><b>A</b><b>W</b>. The  capability  change  will
+              apply even if the new user is root.
+
+              On Windows, this option is not currently supported. For security
+              reasons,  specifying  this  option will cause the daemon process
+              not to start.
+
+   <b>L</b><b>o</b><b>g</b><b>g</b><b>i</b><b>n</b><b>g</b> <b>o</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+       <b>-</b><b>v</b>[<u>s</u><u>p</u><u>e</u><u>c</u>]
+       <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>b</b><b>o</b><b>s</b><b>e</b><b>=</b>[<u>s</u><u>p</u><u>e</u><u>c</u>]
+            Sets logging levels. Without any <u>s</u><u>p</u><u>e</u><u>c</u>,  sets  the  log  level  for
+            every  module and destination to <b>d</b><b>b</b><b>g</b>. Otherwise, <u>s</u><u>p</u><u>e</u><u>c</u> is a list of
+            words separated by spaces or commas or colons, up to one from each
+            category below:
+
+            •      A valid module name, as displayed by the <b>v</b><b>l</b><b>o</b><b>g</b><b>/</b><b>l</b><b>i</b><b>s</b><b>t</b>  command
+                   on <b>o</b><b>v</b><b>s</b><b>-</b><b>a</b><b>p</b><b>p</b><b>c</b><b>t</b><b>l</b>(8), limits the log level change to the speci‐
+                   fied module.
+
+            •      <b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b>,  <b>c</b><b>o</b><b>n</b><b>s</b><b>o</b><b>l</b><b>e</b>, or <b>f</b><b>i</b><b>l</b><b>e</b>, to limit the log level change to
+                   only to the system log, to the console, or to a  file,  re‐
+                   spectively.  (If  <b>-</b><b>-</b><b>d</b><b>e</b><b>t</b><b>a</b><b>c</b><b>h</b>  is specified, the daemon closes
+                   its standard file descriptors, so logging  to  the  console
+                   will have no effect.)
+
+                   On  Windows  platform,  <b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b> is accepted as a word and is
+                   only useful along with the <b>-</b><b>-</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>-</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> option (the word
+                   has no effect otherwise).
+
+            •      <b>o</b><b>f</b><b>f</b>, <b>e</b><b>m</b><b>e</b><b>r</b>, <b>e</b><b>r</b><b>r</b>, <b>w</b><b>a</b><b>r</b><b>n</b>, <b>i</b><b>n</b><b>f</b><b>o</b>, or  <b>d</b><b>b</b><b>g</b>,  to  control  the  log
+                   level.  Messages  of  the  given severity or higher will be
+                   logged, and messages of lower  severity  will  be  filtered
+                   out.  <b>o</b><b>f</b><b>f</b> filters out all messages. See <b>o</b><b>v</b><b>s</b><b>-</b><b>a</b><b>p</b><b>p</b><b>c</b><b>t</b><b>l</b>(8) for a
+                   definition of each log level.
+
+            Case is not significant within <u>s</u><u>p</u><u>e</u><u>c</u>.
+
+            Regardless of the log levels set for <b>f</b><b>i</b><b>l</b><b>e</b>, logging to a file  will
+            not take place unless <b>-</b><b>-</b><b>l</b><b>o</b><b>g</b><b>-</b><b>f</b><b>i</b><b>l</b><b>e</b> is also specified (see below).
+
+            For compatibility with older versions of OVS, <b>a</b><b>n</b><b>y</b> is accepted as a
+            word but has no effect.
+
+       <b>-</b><b>v</b>
+       <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>b</b><b>o</b><b>s</b><b>e</b>
+            Sets  the  maximum  logging  verbosity level, equivalent to <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b>‐‐
+            <b>b</b><b>o</b><b>s</b><b>e</b><b>=</b><b>d</b><b>b</b><b>g</b>.
+
+       <b>-</b><b>v</b><b>P</b><b>A</b><b>T</b><b>T</b><b>E</b><b>R</b><b>N</b><b>:</b><u>d</u><u>e</u><u>s</u><u>t</u><u>i</u><u>n</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u><b>:</b><u>p</u><u>a</u><u>t</u><u>t</u><u>e</u><u>r</u><u>n</u>
+       <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>b</b><b>o</b><b>s</b><b>e</b><b>=</b><b>P</b><b>A</b><b>T</b><b>T</b><b>E</b><b>R</b><b>N</b><b>:</b><u>d</u><u>e</u><u>s</u><u>t</u><u>i</u><u>n</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u><b>:</b><u>p</u><u>a</u><u>t</u><u>t</u><u>e</u><u>r</u><u>n</u>
+            Sets the log pattern for <u>d</u><u>e</u><u>s</u><u>t</u><u>i</u><u>n</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u> to <u>p</u><u>a</u><u>t</u><u>t</u><u>e</u><u>r</u><u>n</u>. Refer to  <b>o</b><b>v</b><b>s</b><b>-</b><b>a</b><b>p</b>‐‐
+            <b>p</b><b>c</b><b>t</b><b>l</b>(8) for a description of the valid syntax for <u>p</u><u>a</u><u>t</u><u>t</u><u>e</u><u>r</u><u>n</u>.
+
+       <b>-</b><b>v</b><b>F</b><b>A</b><b>C</b><b>I</b><b>L</b><b>I</b><b>T</b><b>Y</b><b>:</b><u>f</u><u>a</u><u>c</u><u>i</u><u>l</u><u>i</u><u>t</u><u>y</u>
+       <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>b</b><b>o</b><b>s</b><b>e</b><b>=</b><b>F</b><b>A</b><b>C</b><b>I</b><b>L</b><b>I</b><b>T</b><b>Y</b><b>:</b><u>f</u><u>a</u><u>c</u><u>i</u><u>l</u><u>i</u><u>t</u><u>y</u>
+            Sets  the RFC5424 facility of the log message. <u>f</u><u>a</u><u>c</u><u>i</u><u>l</u><u>i</u><u>t</u><u>y</u> can be one
+            of <b>k</b><b>e</b><b>r</b><b>n</b>, <b>u</b><b>s</b><b>e</b><b>r</b>, <b>m</b><b>a</b><b>i</b><b>l</b>, <b>d</b><b>a</b><b>e</b><b>m</b><b>o</b><b>n</b>, <b>a</b><b>u</b><b>t</b><b>h</b>, <b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b>, <b>l</b><b>p</b><b>r</b>, <b>n</b><b>e</b><b>w</b><b>s</b>, <b>u</b><b>u</b><b>c</b><b>p</b>, <b>c</b><b>l</b><b>o</b><b>c</b><b>k</b>,
+            <b>f</b><b>t</b><b>p</b>, <b>n</b><b>t</b><b>p</b>, <b>a</b><b>u</b><b>d</b><b>i</b><b>t</b>, <b>a</b><b>l</b><b>e</b><b>r</b><b>t</b>, <b>c</b><b>l</b><b>o</b><b>c</b><b>k</b><b>2</b>, <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>0</b>,  <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>1</b>,  <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>2</b>,  <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>3</b>,
+            <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>4</b>, <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>5</b>, <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>6</b> or <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>7</b>. If this option is not specified,
+            <b>d</b><b>a</b><b>e</b><b>m</b><b>o</b><b>n</b>  is used as the default for the local system syslog and <b>l</b><b>o</b>‐‐
+            <b>c</b><b>a</b><b>l</b><b>0</b> is used while sending a message to the  target  provided  via
+            the <b>-</b><b>-</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>-</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> option.
+
+       <b>-</b><b>-</b><b>l</b><b>o</b><b>g</b><b>-</b><b>f</b><b>i</b><b>l</b><b>e</b>[<b>=</b><u>f</u><u>i</u><u>l</u><u>e</u>]
+            Enables  logging  to a file. If <u>f</u><u>i</u><u>l</u><u>e</u> is specified, then it is used
+            as the exact name for the log file. The default log file name used
+            if <u>f</u><u>i</u><u>l</u><u>e</u> is omitted is <b>/</b><b>u</b><b>s</b><b>r</b><b>/</b><b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>/</b><b>v</b><b>a</b><b>r</b><b>/</b><b>l</b><b>o</b><b>g</b><b>/</b><b>o</b><b>v</b><b>n</b><b>/</b><u>p</u><u>r</u><u>o</u><u>g</u><u>r</u><u>a</u><u>m</u><b>.</b><b>l</b><b>o</b><b>g</b>.
+
+       <b>-</b><b>-</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>-</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b><b>=</b><u>h</u><u>o</u><u>s</u><u>t</u><b>:</b><u>p</u><u>o</u><u>r</u><u>t</u>
+            Send syslog messages to UDP <u>p</u><u>o</u><u>r</u><u>t</u> on <u>h</u><u>o</u><u>s</u><u>t</u>, in addition to the  sys‐
+            tem  syslog.  The <u>h</u><u>o</u><u>s</u><u>t</u> must be a numerical IP address, not a host‐
+            name.
+
+       <b>-</b><b>-</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>-</b><b>m</b><b>e</b><b>t</b><b>h</b><b>o</b><b>d</b><b>=</b><u>m</u><u>e</u><u>t</u><u>h</u><u>o</u><u>d</u>
+            Specify <u>m</u><u>e</u><u>t</u><u>h</u><u>o</u><u>d</u> as how syslog messages should  be  sent  to  syslog
+            daemon. The following forms are supported:
+
+            •      <b>l</b><b>i</b><b>b</b><b>c</b>,  to use the libc <b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>(</b><b>)</b> function. Downside of using
+                   this options is that libc adds fixed prefix to  every  mes‐
+                   sage  before  it is actually sent to the syslog daemon over
+                   <b>/</b><b>d</b><b>e</b><b>v</b><b>/</b><b>l</b><b>o</b><b>g</b> UNIX domain socket.
+
+            •      <b>u</b><b>n</b><b>i</b><b>x</b><b>:</b><u>f</u><u>i</u><u>l</u><u>e</u>, to use a UNIX domain socket directly. It is pos‐
+                   sible to specify arbitrary message format with this option.
+                   However, <b>r</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>d</b> <b>8</b><b>.</b><b>9</b> and older  versions  use  hard  coded
+                   parser  function anyway that limits UNIX domain socket use.
+                   If you want to use  arbitrary  message  format  with  older
+                   <b>r</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>d</b>  versions, then use UDP socket to localhost IP ad‐
+                   dress instead.
+
+            •      <b>u</b><b>d</b><b>p</b><b>:</b><u>i</u><u>p</u><b>:</b><u>p</u><u>o</u><u>r</u><u>t</u>, to use a UDP socket. With this  method  it  is
+                   possible  to  use  arbitrary message format also with older
+                   <b>r</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>d</b>. When sending syslog messages over UDP socket  ex‐
+                   tra precaution needs to be taken into account, for example,
+                   syslog daemon needs to be configured to listen on the spec‐
+                   ified  UDP  port, accidental iptables rules could be inter‐
+                   fering with local syslog traffic and there are  some  secu‐
+                   rity  considerations  that apply to UDP sockets, but do not
+                   apply to UNIX domain sockets.
+
+            •      <b>n</b><b>u</b><b>l</b><b>l</b>, to discard all messages logged to syslog.
+
+            The default is taken from the <b>O</b><b>V</b><b>S</b><b>_</b><b>S</b><b>Y</b><b>S</b><b>L</b><b>O</b><b>G</b><b>_</b><b>M</b><b>E</b><b>T</b><b>H</b><b>O</b><b>D</b> environment  vari‐
+            able; if it is unset, the default is <b>l</b><b>i</b><b>b</b><b>c</b>.
+
+   <b>T</b><b>a</b><b>b</b><b>l</b><b>e</b> <b>F</b><b>o</b><b>r</b><b>m</b><b>a</b><b>t</b><b>t</b><b>i</b><b>n</b><b>g</b> <b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+       These  options control the format of output from the <b>l</b><b>i</b><b>s</b><b>t</b> and <b>f</b><b>i</b><b>n</b><b>d</b> com‐
+       mands.
+
+              <b>-</b><b>f</b> <u>f</u><u>o</u><u>r</u><u>m</u><u>a</u><u>t</u>
+              <b>-</b><b>-</b><b>f</b><b>o</b><b>r</b><b>m</b><b>a</b><b>t</b><b>=</b><u>f</u><u>o</u><u>r</u><u>m</u><u>a</u><u>t</u>
+                   Sets the type of table formatting. The following  types  of
+                   <u>f</u><u>o</u><u>r</u><u>m</u><u>a</u><u>t</u> are available:
+
+                   <b>t</b><b>a</b><b>b</b><b>l</b><b>e</b>  2-D text tables with aligned columns.
+
+                   <b>l</b><b>i</b><b>s</b><b>t</b> (default)
+                          A  list  with one column per line and rows separated
+                          by a blank line.
+
+                   <b>h</b><b>t</b><b>m</b><b>l</b>   HTML tables.
+
+                   <b>c</b><b>s</b><b>v</b>    Comma-separated values as defined in RFC 4180.
+
+                   <b>j</b><b>s</b><b>o</b><b>n</b>   JSON format as defined in RFC 4627. The output is  a
+                          sequence  of JSON objects, each of which corresponds
+                          to one table. Each JSON  object  has  the  following
+                          members with the noted values:
+
+                          <b>c</b><b>a</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b>
+                                 The  table’s  caption. This member is omitted
+                                 if the table has no caption.
+
+                          <b>h</b><b>e</b><b>a</b><b>d</b><b>i</b><b>n</b><b>g</b><b>s</b>
+                                 An array with one element per  table  column.
+                                 Each  array  element  is  a string giving the
+                                 corresponding column’s heading.
+
+                          <b>d</b><b>a</b><b>t</b><b>a</b>   An array with one element per table row. Each
+                                 element is also an array with one element per
+                                 table column. The elements  of  this  second-
+                                 level array are the cells that constitute the
+                                 table.  Cells  that  represent  OVSDB data or
+                                 data types are expressed in  the  format  de‐
+                                 scribed  in  the  OVSDB  specification; other
+                                 cells are simply expressed as text strings.
+
+              <b>-</b><b>d</b> <u>f</u><u>o</u><u>r</u><u>m</u><u>a</u><u>t</u>
+              <b>-</b><b>-</b><b>d</b><b>a</b><b>t</b><b>a</b><b>=</b><u>f</u><u>o</u><u>r</u><u>m</u><u>a</u><u>t</u>
+                   Sets the formatting for cells within output  tables  unless
+                   the table format is set to <b>j</b><b>s</b><b>o</b><b>n</b>, in which case <b>j</b><b>s</b><b>o</b><b>n</b> format‐
+                   ting  is  always  used when formatting cells. The following
+                   types of <u>f</u><u>o</u><u>r</u><u>m</u><u>a</u><u>t</u> are available:
+
+                   <b>s</b><b>t</b><b>r</b><b>i</b><b>n</b><b>g</b> (default)
+                          The simple format described in the  <b>D</b><b>a</b><b>t</b><b>a</b><b>b</b><b>a</b><b>s</b><b>e</b>  <b>V</b><b>a</b><b>l</b><b>u</b><b>e</b><b>s</b>
+                          section of <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>c</b><b>t</b><b>l</b>(8).
+
+                   <b>b</b><b>a</b><b>r</b><b>e</b>   The  simple format with punctuation stripped off: <b>[</b><b>]</b>
+                          and <b>{</b><b>}</b> are omitted  around  sets,  maps,  and  empty
+                          columns,  items within sets and maps are space-sepa‐
+                          rated, and strings are never quoted. This format may
+                          be easier for scripts to parse.
+
+                   <b>j</b><b>s</b><b>o</b><b>n</b>   The RFC 4627 JSON format as described above.
+
+              <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>h</b><b>e</b><b>a</b><b>d</b><b>i</b><b>n</b><b>g</b><b>s</b>
+                   This option suppresses the heading row that  otherwise  ap‐
+                   pears in the first row of table output.
+
+              <b>-</b><b>-</b><b>p</b><b>r</b><b>e</b><b>t</b><b>t</b><b>y</b>
+                   By  default, JSON in output is printed as compactly as pos‐
+                   sible. This option causes JSON in output to be printed in a
+                   more readable fashion. Members of objects and  elements  of
+                   arrays are printed one per line, with indentation.
+
+                   This option does not affect JSON in tables, which is always
+                   printed compactly.
+
+              <b>-</b><b>-</b><b>b</b><b>a</b><b>r</b><b>e</b>
+                   Equivalent to <b>-</b><b>-</b><b>f</b><b>o</b><b>r</b><b>m</b><b>a</b><b>t</b><b>=</b><b>l</b><b>i</b><b>s</b><b>t</b> <b>-</b><b>-</b><b>d</b><b>a</b><b>t</b><b>a</b><b>=</b><b>b</b><b>a</b><b>r</b><b>e</b> <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>h</b><b>e</b><b>a</b><b>d</b><b>i</b><b>n</b><b>g</b><b>s</b>.
+
+   <b>P</b><b>K</b><b>I</b> <b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+       PKI  configuration  is  required  to  use SSL for the connection to the
+       database.
+
+              <b>-</b><b>p</b> <u>p</u><u>r</u><u>i</u><u>v</u><u>k</u><u>e</u><u>y</u><u>.</u><u>p</u><u>e</u><u>m</u>
+              <b>-</b><b>-</b><b>p</b><b>r</b><b>i</b><b>v</b><b>a</b><b>t</b><b>e</b><b>-</b><b>k</b><b>e</b><b>y</b><b>=</b><u>p</u><u>r</u><u>i</u><u>v</u><u>k</u><u>e</u><u>y</u><u>.</u><u>p</u><u>e</u><u>m</u>
+                   Specifies a PEM file containing the  private  key  used  as
+                   identity for outgoing SSL connections.
+
+              <b>-</b><b>c</b> <u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+              <b>-</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>i</b><b>f</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b><b>=</b><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+                   Specifies  a  PEM file containing a certificate that certi‐
+                   fies the private key specified on <b>-</b><b>p</b> or <b>-</b><b>-</b><b>p</b><b>r</b><b>i</b><b>v</b><b>a</b><b>t</b><b>e</b><b>-</b><b>k</b><b>e</b><b>y</b> to be
+                   trustworthy. The certificate must be signed by the certifi‐
+                   cate authority (CA) that the peer in SSL  connections  will
+                   use to verify it.
+
+              <b>-</b><b>C</b> <u>c</u><u>a</u><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+              <b>-</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>=</b><u>c</u><u>a</u><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+                   Specifies a PEM file containing the CA certificate for ver‐
+                   ifying certificates presented to this program by SSL peers.
+                   (This  may  be  the  same certificate that SSL peers use to
+                   verify the certificate specified on <b>-</b><b>c</b> or <b>-</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>i</b><b>f</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b>, or
+                   it may be a different one, depending on the PKI  design  in
+                   use.)
+
+              <b>-</b><b>C</b> <b>n</b><b>o</b><b>n</b><b>e</b>
+              <b>-</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>=</b><b>n</b><b>o</b><b>n</b><b>e</b>
+                   Disables  verification  of  certificates  presented  by SSL
+                   peers. This introduces a security risk,  because  it  means
+                   that  certificates  cannot be verified to be those of known
+                   trusted hosts.
+
+              <b>-</b><b>-</b><b>b</b><b>o</b><b>o</b><b>t</b><b>s</b><b>t</b><b>r</b><b>a</b><b>p</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>=</b><u>c</u><u>a</u><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+                     When <u>c</u><u>a</u><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u> exists, this option has the  same  effect
+                     as  <b>-</b><b>C</b>  or <b>-</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b>. If it does not exist, then the exe‐
+                     cutable will attempt to obtain the  CA  certificate  from
+                     the  SSL  peer on its first SSL connection and save it to
+                     the named PEM file. If it is successful, it will  immedi‐
+                     ately drop the connection and reconnect, and from then on
+                     all  SSL  connections must be authenticated by a certifi‐
+                     cate signed by the CA certificate thus obtained.
+
+                     This option exposes the SSL connection to  a  man-in-the-
+                     middle  attack  obtaining the initial CA certificate, but
+                     it may be useful for bootstrapping.
+
+                     This option is only useful if the SSL peer sends  its  CA
+                     certificate as part of the SSL certificate chain. The SSL
+                     protocol  does not require the server to send the CA cer‐
+                     tificate.
+
+                     This option is mutually exclusive with <b>-</b><b>C</b> and <b>-</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b>.
+
+   <b>O</b><b>t</b><b>h</b><b>e</b><b>r</b> <b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+       <b>-</b><b>h</b>
+       <b>-</b><b>-</b><b>h</b><b>e</b><b>l</b><b>p</b>
+            Prints a brief help message to the console.
+
+       <b>-</b><b>V</b>
+       <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>s</b><b>i</b><b>o</b><b>n</b>
+            Prints version information to the console.
+
+<b>C</b><b>O</b><b>M</b><b>M</b><b>A</b><b>N</b><b>D</b><b>S</b>
+       The following sections describe the commands that <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b><b>c</b><b>t</b><b>l</b> supports.
+
+   <b>O</b><b>V</b><b>N</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> <b>C</b><b>o</b><b>m</b><b>m</b><b>a</b><b>n</b><b>d</b><b>s</b>
+       These commands work with an <b>O</b><b>V</b><b>N</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> database as a whole.
+
+              <b>i</b><b>n</b><b>i</b><b>t</b>   Initializes the database, if it is empty. If the database
+                     has already been initialized, this command has no effect.
+
+              <b>s</b><b>h</b><b>o</b><b>w</b>   Prints a brief overview of the database contents.
+
+   <b>C</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b> <b>C</b><b>o</b><b>m</b><b>m</b><b>a</b><b>n</b><b>d</b><b>s</b>
+       These commands manipulate <b>O</b><b>V</b><b>N</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> chassis.
+
+              [<b>-</b><b>-</b><b>m</b><b>a</b><b>y</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b>] <b>c</b><b>h</b><b>a</b><b>s</b><b>s</b><b>i</b><b>s</b><b>-</b><b>a</b><b>d</b><b>d</b> <u>c</u><u>h</u><u>a</u><u>s</u><u>s</u><u>i</u><u>s</u> <u>e</u><u>n</u><u>c</u><u>a</u><u>p</u><u>-</u><u>t</u><u>y</u><u>p</u><u>e</u> <u>e</u><u>n</u><u>c</u><u>a</u><u>p</u><u>-</u><u>i</u><u>p</u>
+                     Creates a new chassis  named  <u>c</u><u>h</u><u>a</u><u>s</u><u>s</u><u>i</u><u>s</u>.  <u>e</u><u>n</u><u>c</u><u>a</u><u>p</u><u>-</u><u>t</u><u>y</u><u>p</u><u>e</u>  is  a
+                     comma-separated  list  of  tunnel types. The chassis will
+                     have one encap entry for each specified tunnel type  with
+                     <u>e</u><u>n</u><u>c</u><u>a</u><u>p</u><u>-</u><u>i</u><u>p</u> as the destination IP for each.
+
+                     Without  <b>-</b><b>-</b><b>m</b><b>a</b><b>y</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b>, attempting to create a chassis that
+                     exists is an error. With <b>-</b><b>-</b><b>m</b><b>a</b><b>y</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b>, this  command  does
+                     nothing if <u>c</u><u>h</u><u>a</u><u>s</u><u>s</u><u>i</u><u>s</u> already exists.
+
+              [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] <u>c</u><u>h</u><u>a</u><u>s</u><u>s</u><u>i</u><u>s</u><u>-</u><u>d</u><u>e</u><u>l</u> <u>c</u><u>h</u><u>a</u><u>s</u><u>s</u><u>i</u><u>s</u>
+                     Deletes <u>c</u><u>h</u><u>a</u><u>s</u><u>s</u><u>i</u><u>s</u> and its <u>e</u><u>n</u><u>c</u><u>a</u><u>p</u><u>s</u> and <u>g</u><u>a</u><u>t</u><u>e</u><u>w</u><u>a</u><u>y</u><b>_</b><u>p</u><u>o</u><u>r</u><u>t</u><u>s</u>.
+
+                     Without  <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>, attempting to delete a chassis that
+                     does not exist is an error. With  <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>  attempting
+                     to delete a chassis that does not exist has no effect.
+
+   <b>P</b><b>o</b><b>r</b><b>t</b> <b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> <b>C</b><b>o</b><b>m</b><b>m</b><b>a</b><b>n</b><b>d</b><b>s</b>
+       These commands manipulate <b>O</b><b>V</b><b>N</b><b>_</b><b>S</b><b>o</b><b>u</b><b>t</b><b>h</b><b>b</b><b>o</b><b>u</b><b>n</b><b>d</b> port bindings.
+
+              [<b>-</b><b>-</b><b>m</b><b>a</b><b>y</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b>] <b>l</b><b>s</b><b>p</b><b>-</b><b>b</b><b>i</b><b>n</b><b>d</b> <u>l</u><u>o</u><u>g</u><u>i</u><u>c</u><u>a</u><u>l</u><u>-</u><u>p</u><u>o</u><u>r</u><u>t</u> <u>c</u><u>h</u><u>a</u><u>s</u><u>s</u><u>i</u><u>s</u>
+                     Binds the logical port named <u>l</u><u>o</u><u>g</u><u>i</u><u>c</u><u>a</u><u>l</u><u>-</u><u>p</u><u>o</u><u>r</u><u>t</u> to <u>c</u><u>h</u><u>a</u><u>s</u><u>s</u><u>i</u><u>s</u>.
+
+                     Without  <b>-</b><b>-</b><b>m</b><b>a</b><b>y</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b>,  attempting  to bind a logical port
+                     that has already been bound is an error.  With  <b>-</b><b>-</b><b>m</b><b>a</b><b>y</b><b>-</b><b>e</b><b>x</b>‐‐
+                     <b>i</b><b>s</b><b>t</b>,  this  command  does nothing if <u>l</u><u>o</u><u>g</u><u>i</u><u>c</u><u>a</u><u>l</u><u>-</u><u>p</u><u>o</u><u>r</u><u>t</u> has al‐
+                     ready been bound to a chassis.
+
+              [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] <b>l</b><b>s</b><b>p</b><b>-</b><b>u</b><b>n</b><b>b</b><b>i</b><b>n</b><b>d</b> <u>l</u><u>o</u><u>g</u><u>i</u><u>c</u><u>a</u><u>l</u><u>-</u><u>p</u><u>o</u><u>r</u><u>t</u>
+                     Removes the binding of <u>l</u><u>o</u><u>g</u><u>i</u><u>c</u><u>a</u><u>l</u><u>-</u><u>p</u><u>o</u><u>r</u><u>t</u>.
+
+                     Without <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>, attempting to unbind a logical  port
+                     that is not bound is an error. With <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>, attempt‐
+                     ing  to  unbind logical port that is not bound has no ef‐
+                     fect.
+
+   <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b> <b>F</b><b>l</b><b>o</b><b>w</b> <b>C</b><b>o</b><b>m</b><b>m</b><b>a</b><b>n</b><b>d</b><b>s</b>
+       [<b>-</b><b>-</b><b>u</b><b>u</b><b>i</b><b>d</b>] [<b>-</b><b>-</b><b>o</b><b>v</b><b>s</b>[<b>=</b><u>r</u><u>e</u><u>m</u><u>o</u><u>t</u><u>e</u><b>]</b>] [<b>-</b><b>-</b><b>s</b><b>t</b><b>a</b><b>t</b><b>s</b>] [<b>-</b><b>-</b><b>v</b><b>f</b><b>l</b><b>o</b><b>w</b><b>s</b>] <b>l</b><b>f</b><b>l</b><b>o</b><b>w</b><b>-</b><b>l</b><b>i</b><b>s</b><b>t</b> [<u>l</u><u>o</u><u>g</u><u>i</u><u>c</u><u>a</u><u>l</u><u>-</u>
+       <u>d</u><u>a</u><u>t</u><u>a</u><u>p</u><u>a</u><u>t</u><u>h</u>] [<u>l</u><u>f</u><u>l</u><u>o</u><u>w</u>...]
+              List logical flows. If <u>l</u><u>o</u><u>g</u><u>i</u><u>c</u><u>a</u><u>l</u><u>-</u><u>d</u><u>a</u><u>t</u><u>a</u><u>p</u><u>a</u><u>t</u><u>h</u> is specified, only  list
+              flows  for  that  logical  datapath. The <u>l</u><u>o</u><u>g</u><u>i</u><u>c</u><u>a</u><u>l</u><u>-</u><u>d</u><u>a</u><u>t</u><u>a</u><u>p</u><u>a</u><u>t</u><u>h</u> may be
+              given as a UUID or as a datapath name  (reporting  an  error  if
+              multiple datapaths have the same name).
+
+              If  at least one <u>l</u><u>f</u><u>l</u><u>o</u><u>w</u> is given, only matching logical flows, if
+              any, are listed. Each <u>l</u><u>f</u><u>l</u><u>o</u><u>w</u> may be specified as a  UUID  or  the
+              first  few characters of a UUID, optionally prefixed by <b>0</b><b>x</b>. (Be‐
+              cause <b>o</b><b>v</b><b>n</b><b>-</b><b>c</b><b>o</b><b>n</b><b>t</b><b>r</b><b>o</b><b>l</b><b>l</b><b>e</b><b>r</b> sets OpenFlow flow cookies to the first  32
+              bits  of  the  corresponding  logical flow’s UUID, this makes it
+              easy to look up the logical flow  that  generated  a  particular
+              OpenFlow flow.)
+
+              If <b>-</b><b>-</b><b>u</b><b>u</b><b>i</b><b>d</b> is specified, the output includes the first 32 bits of
+              each logical flow’s UUID. This makes it easier to find the Open‐
+              Flow flows that correspond to a given logical flow.
+
+              If  <b>-</b><b>-</b><b>o</b><b>v</b><b>s</b>  is included, <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b><b>c</b><b>t</b><b>l</b> attempts to obtain and display
+              the OpenFlow flows that correspond to each OVN logical flow.  To
+              do    so,    <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b><b>c</b><b>t</b><b>l</b>   connects   to   <u>r</u><u>e</u><u>m</u><u>o</u><u>t</u><u>e</u>   (by   default,
+              <b>u</b><b>n</b><b>i</b><b>x</b><b>:</b><b>/</b><b>b</b><b>r</b><b>-</b><b>i</b><b>n</b><b>t</b><b>.</b><b>m</b><b>g</b><b>m</b><b>t</b>) over OpenFlow and retrieves the flows. If <u>r</u><u>e</u><u>�</u>��
+              <u>m</u><u>o</u><u>t</u><u>e</u> is specified, it must  be  an  active  OpenFlow  connection
+              method  described  in <b>o</b><b>v</b><b>s</b><b>d</b><b>b</b>(7). Please see the discussion of the
+              similar <b>-</b><b>-</b><b>o</b><b>v</b><b>s</b> option in <b>o</b><b>v</b><b>n</b><b>-</b><b>t</b><b>r</b><b>a</b><b>c</b><b>e</b>(8) for more information  about
+              the OpenFlow flow output.
+
+              By  default,  OpenFlow  flow  output includes only match and ac‐
+              tions. Add <b>-</b><b>-</b><b>s</b><b>t</b><b>a</b><b>t</b><b>s</b> to include all OpenFlow information, such  as
+              packet and byte counters, duration, and timeouts.
+
+              If  <b>-</b><b>-</b><b>v</b><b>f</b><b>l</b><b>o</b><b>w</b><b>s</b>  is included, other southbound database records di‐
+              rectly used for generating OpenFlow flows are also listed.  This
+              includes:  <u>p</u><u>o</u><u>r</u><u>t</u><u>-</u><u>b</u><u>i</u><u>n</u><u>d</u><u>i</u><u>n</u><u>g</u><u>s</u>,  <u>m</u><u>a</u><u>c</u><u>-</u><u>b</u><u>i</u><u>n</u><u>d</u><u>i</u><u>n</u><u>g</u><u>s</u>, <u>m</u><u>u</u><u>l</u><u>t</u><u>i</u><u>c</u><u>a</u><u>s</u><u>t</u><u>-</u><u>g</u><u>r</u><u>o</u><u>u</u><u>p</u><u>s</u>, <u>c</u><u>h</u><u>a</u><u>s</u><u>�</u>��
+              <u>s</u><u>i</u><u>s</u>. The <b>-</b><b>-</b><b>o</b><b>v</b><b>s</b> and <b>-</b><b>-</b><b>s</b><b>t</b><b>a</b><b>t</b><b>s</b> can also be used in conjunction  with
+              <b>-</b><b>-</b><b>v</b><b>f</b><b>l</b><b>o</b><b>w</b><b>s</b>.
+
+       [<b>-</b><b>-</b><b>u</b><b>u</b><b>i</b><b>d</b>] <b>d</b><b>u</b><b>m</b><b>p</b><b>-</b><b>f</b><b>l</b><b>o</b><b>w</b><b>s</b> [<u>l</u><u>o</u><u>g</u><u>i</u><u>c</u><u>a</u><u>l</u><u>-</u><u>d</u><u>a</u><u>t</u><u>a</u><u>p</u><u>a</u><u>t</u><u>h</u>]
+              Alias for <b>l</b><b>f</b><b>l</b><b>o</b><b>w</b><b>-</b><b>l</b><b>i</b><b>s</b><b>t</b>.
+
+       <b>c</b><b>o</b><b>u</b><b>n</b><b>t</b><b>-</b><b>f</b><b>l</b><b>o</b><b>w</b><b>s</b> [<u>l</u><u>o</u><u>g</u><u>i</u><u>c</u><u>a</u><u>l</u><u>-</u><u>d</u><u>a</u><u>t</u><u>a</u><u>p</u><u>a</u><u>t</u><u>h</u>]
+              prints numbers of logical flows per table and per datapath.
+
+   <b>R</b><b>e</b><b>m</b><b>o</b><b>t</b><b>e</b> <b>C</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>v</b><b>i</b><b>t</b><b>y</b> <b>C</b><b>o</b><b>m</b><b>m</b><b>a</b><b>n</b><b>d</b><b>s</b>
+       These commands manipulate the <b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> column in the <b>S</b><b>B</b><b>_</b><b>G</b><b>l</b><b>o</b><b>b</b><b>a</b><b>l</b> table
+       and  rows  in  the <b>C</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b> table. When <b>o</b><b>v</b><b>s</b><b>d</b><b>b</b><b>-</b><b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b> is configured to
+       use the <b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> column for OVSDB connections, this allows  the  ad‐
+       ministrator to use \fBovn\-sbctl\fR to configure database connections.
+
+              <b>g</b><b>e</b><b>t</b><b>-</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>
+                     Prints the configured connection(s).
+
+              <b>d</b><b>e</b><b>l</b><b>-</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b>
+                     Deletes the configured connection(s).
+
+              [<b>-</b><b>-</b><b>i</b><b>n</b><b>a</b><b>c</b><b>t</b><b>i</b><b>v</b><b>i</b><b>t</b><b>y</b><b>-</b><b>p</b><b>r</b><b>o</b><b>b</b><b>e</b><b>=</b><u>m</u><u>s</u><u>e</u><u>c</u><u>s</u>] <b>s</b><b>e</b><b>t</b><b>-</b><b>c</b><b>o</b><b>n</b><b>n</b><b>e</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b> <u>t</u><u>a</u><u>r</u><u>g</u><u>e</u><u>t</u>...
+                     Sets  the configured manager target or targets. Use <b>-</b><b>-</b><b>i</b><b>n</b>‐‐
+                     <b>a</b><b>c</b><b>t</b><b>i</b><b>v</b><b>i</b><b>t</b><b>y</b><b>-</b><b>p</b><b>r</b><b>o</b><b>b</b><b>e</b><b>=</b><u>m</u><u>s</u><u>e</u><u>c</u><u>s</u> to override the default idle connec‐
+                     tion inactivity probe time. Use 0 to  disable  inactivity
+                     probes.
+
+   <b>S</b><b>S</b><b>L</b> <b>C</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>u</b><b>r</b><b>a</b><b>t</b><b>i</b><b>o</b><b>n</b> <b>C</b><b>o</b><b>m</b><b>m</b><b>a</b><b>n</b><b>d</b><b>s</b>
+       When <b>o</b><b>v</b><b>s</b><b>d</b><b>b</b><b>-</b><b>s</b><b>e</b><b>r</b><b>v</b><b>e</b><b>r</b> is configured to connect using SSL, the following pa‐
+       rameters are required:
+
+              <u>p</u><u>r</u><u>i</u><u>v</u><u>a</u><u>t</u><u>e</u><u>-</u><u>k</u><u>e</u><u>y</u>
+                     Specifies  a PEM file containing the private key used for
+                     SSL connections.
+
+              <u>c</u><u>e</u><u>r</u><u>t</u><u>i</u><u>f</u><u>i</u><u>c</u><u>a</u><u>t</u><u>e</u>
+                     Specifies a PEM file containing a certificate, signed  by
+                     the  certificate  authority  (CA)  used by the connection
+                     peers, that certifies  the  private  key,  identifying  a
+                     trustworthy peer.
+
+              <u>c</u><u>a</u><u>-</u><u>c</u><u>e</u><u>r</u><u>t</u>
+                     Specifies  a  PEM file containing the CA certificate used
+                     to verify that the connection peers are trustworthy.
+
+       These SSL settings apply to all SSL connections made by the  southbound
+       database server.
+
+              <b>g</b><b>e</b><b>t</b><b>-</b><b>s</b><b>s</b><b>l</b>
+                     Prints the SSL configuration.
+
+              <b>d</b><b>e</b><b>l</b><b>-</b><b>s</b><b>s</b><b>l</b>
+                     Deletes the current SSL configuration.
+
+              [<b>-</b><b>-</b><b>b</b><b>o</b><b>o</b><b>t</b><b>s</b><b>t</b><b>r</b><b>a</b><b>p</b>] <b>s</b><b>e</b><b>t</b><b>-</b><b>s</b><b>s</b><b>l</b> <u>p</u><u>r</u><u>i</u><u>v</u><u>a</u><u>t</u><u>e</u><u>-</u><u>k</u><u>e</u><u>y</u> <u>c</u><u>e</u><u>r</u><u>t</u><u>i</u><u>f</u><u>i</u><u>c</u><u>a</u><u>t</u><u>e</u> <u>c</u><u>a</u><u>-</u><u>c</u><u>e</u><u>r</u><u>t</u> [<u>s</u><u>s</u><u>l</u><u>-</u><u>p</u><u>r</u><u>o</u><u>�</u>��
+              <u>t</u><u>o</u><u>c</u><u>o</u><u>l</u><u>-</u><u>l</u><u>i</u><u>s</u><u>t</u> [<u>s</u><u>s</u><u>l</u><u>-</u><u>c</u><u>i</u><u>p</u><u>h</u><u>e</u><u>r</u><u>-</u><u>l</u><u>i</u><u>s</u><u>t</u>]]
+                     Sets the SSL configuration.
+
+   <b>D</b><b>a</b><b>t</b><b>a</b><b>b</b><b>a</b><b>s</b><b>e</b> <b>C</b><b>o</b><b>m</b><b>m</b><b>a</b><b>n</b><b>d</b><b>s</b>
+       These  commands query and modify the contents of <b>o</b><b>v</b><b>s</b><b>d</b><b>b</b> tables. They are
+       a slight abstraction of the <b>o</b><b>v</b><b>s</b><b>d</b><b>b</b> interface and as such they operate at
+       a lower level than other <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b><b>c</b><b>t</b><b>l</b> commands.
+
+       <u>I</u><u>d</u><u>e</u><u>n</u><u>t</u><u>i</u><u>f</u><u>y</u><u>i</u><u>n</u><u>g</u> <u>T</u><u>a</u><u>b</u><u>l</u><u>e</u><u>s</u><u>,</u> <u>R</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u><u>s</u><u>,</u> <u>a</u><u>n</u><u>d</u> <u>C</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u><u>s</u>
+
+       Each of these commands has a <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> parameter to identify a table within
+       the database. Many of them also take a <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> parameter that identifies
+       a particular record within a table. The <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>  parameter  may  be  the
+       UUID  for  a  record, which may be abbreviated to its first 4 (or more)
+       hex digits, as long as that is unique.  Many  tables  offer  additional
+       ways  to  identify  records.  Some commands also take <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> parameters
+       that identify a particular field within the records in a table.
+
+       For a list of tables and their columns, see <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b>(5) or see the  table
+       listing from the <b>-</b><b>-</b><b>h</b><b>e</b><b>l</b><b>p</b> option.
+
+       Record names must be specified in full and with correct capitalization,
+       except  that  UUIDs  may  be abbreviated to their first 4 (or more) hex
+       digits, as long as that is unique within the table. Names of tables and
+       columns are not case-sensitive, and <b>-</b> and <b>_</b>  are  treated  interchange‐
+       ably.  Unique  abbreviations  of table and column names are acceptable,
+       e.g. <b>d</b> or <b>d</b><b>h</b><b>c</b><b>p</b> is sufficient to identify the <b>D</b><b>H</b><b>C</b><b>P</b><b>_</b><b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> table.
+
+       <u>D</u><u>a</u><u>t</u><u>a</u><u>b</u><u>a</u><u>s</u><u>e</u> <u>V</u><u>a</u><u>l</u><u>u</u><u>e</u><u>s</u>
+
+       Each column in the database accepts a fixed type of data. The currently
+       defined basic types, and their representations, are:
+
+              integer
+                     A decimal integer in the range -2**63 to 2**63-1,  inclu‐
+                     sive.
+
+              real   A floating-point number.
+
+              Boolean
+                     True or false, written <b>t</b><b>r</b><b>u</b><b>e</b> or <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b>, respectively.
+
+              string An  arbitrary  Unicode string, except that null bytes are
+                     not allowed. Quotes are optional for  most  strings  that
+                     begin  with  an  English letter or underscore and consist
+                     only of letters, underscores, hyphens, and periods.  How‐
+                     ever, <b>t</b><b>r</b><b>u</b><b>e</b> and <b>f</b><b>a</b><b>l</b><b>s</b><b>e</b> and strings that match the syntax of
+                     UUIDs  (see  below)  must be enclosed in double quotes to
+                     distinguish them from  other  basic  types.  When  double
+                     quotes  are  used, the syntax is that of strings in JSON,
+                     e.g. backslashes may be used to  escape  special  charac‐
+                     ters.  The  empty string must be represented as a pair of
+                     double quotes (<b>"</b><b>"</b>).
+
+              UUID   Either a universally unique identifier in  the  style  of
+                     RFC  4122,  e.g. <b>f</b><b>8</b><b>1</b><b>d</b><b>4</b><b>f</b><b>a</b><b>e</b><b>-</b><b>7</b><b>d</b><b>e</b><b>c</b><b>-</b><b>1</b><b>1</b><b>d</b><b>0</b><b>-</b><b>a</b><b>7</b><b>6</b><b>5</b><b>-</b><b>0</b><b>0</b><b>a</b><b>0</b><b>c</b><b>9</b><b>1</b><b>e</b><b>6</b><b>b</b><b>f</b><b>6</b>, or
+                     an <b>@</b><u>n</u><u>a</u><u>m</u><u>e</u> defined by a <b>g</b><b>e</b><b>t</b> or <b>c</b><b>r</b><b>e</b><b>a</b><b>t</b><b>e</b>  command  within  the
+                     same <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>c</b><b>t</b><b>l</b> invocation.
+
+       Multiple values in a single column may be separated by spaces or a sin‐
+       gle  comma.  When  multiple  values are present, duplicates are not al‐
+       lowed, and order is not important. Conversely,  some  database  columns
+       can have an empty set of values, represented as <b>[</b><b>]</b>, and square brackets
+       may optionally enclose other non-empty sets or single values as well.
+
+       A  few  database columns are ``maps’’ of key-value pairs, where the key
+       and the value are each some fixed database type. These are specified in
+       the form <u>k</u><u>e</u><u>y</u><b>=</b><u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>, where <u>k</u><u>e</u><u>y</u> and <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u> follow the syntax for the  col‐
+       umn’s  key  type  and value type, respectively. When multiple pairs are
+       present (separated by spaces or a comma), duplicate keys  are  not  al‐
+       lowed,  and  again the order is not important. Duplicate values are al‐
+       lowed. An empty map is represented as <b>{</b><b>}</b>. Curly braces  may  optionally
+       enclose  non-empty  maps  as  well (but use quotes to prevent the shell
+       from expanding <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>-</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>=</b><b>{</b><b>0</b><b>=</b><b>x</b><b>,</b><b>1</b><b>=</b><b>y</b><b>}</b> into <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>-</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>=</b><b>0</b><b>=</b><b>x</b>  <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>-</b><b>c</b><b>o</b><b>n</b>‐‐
+       <b>f</b><b>i</b><b>g</b><b>=</b><b>1</b><b>=</b><b>y</b>, which may not have the desired effect).
+
+       <u>D</u><u>a</u><u>t</u><u>a</u><u>b</u><u>a</u><u>s</u><u>e</u> <u>C</u><u>o</u><u>m</u><u>m</u><u>a</u><u>n</u><u>d</u> <u>S</u><u>y</u><u>n</u><u>t</u><u>a</u><u>x</u>
+
+              [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] [<b>-</b><b>-</b><b>c</b><b>o</b><b>l</b><b>u</b><b>m</b><b>n</b><b>s</b><b>=</b><u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>,</b><u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>]...] <b>l</b><b>i</b><b>s</b><b>t</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>
+              [<u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>]...
+                     Lists  the  data  in each specified <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>. If no records
+                     are specified, lists all the records in <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>.
+
+                     If <b>-</b><b>-</b><b>c</b><b>o</b><b>l</b><b>u</b><b>m</b><b>n</b><b>s</b> is specified, only the requested columns are
+                     listed, in the specified order.  Otherwise,  all  columns
+                     are listed, in alphabetical order by column name.
+
+                     Without  <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>,  it  is  an  error if any specified
+                     <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> does not exist. With <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>, the command  ig‐
+                     nores  any  <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> that does not exist, without producing
+                     any output.
+
+              [<b>-</b><b>-</b><b>c</b><b>o</b><b>l</b><b>u</b><b>m</b><b>n</b><b>s</b><b>=</b><u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>,</b><u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>]...] <b>f</b><b>i</b><b>n</b><b>d</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> [<u>c</u><u>o</u><u>l</u><u>�</u>��
+              <u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>]<b>=</b><u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>]...
+                     Lists the data in  each  record  in  <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>  whose  <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>
+                     equals  <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>  or, if <u>k</u><u>e</u><u>y</u> is specified, whose <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> con‐
+                     tains a <u>k</u><u>e</u><u>y</u> with the specified <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>. The following oper‐
+                     ators may be used where <b>=</b> is written in the  syntax  sum‐
+                     mary:
+
+                     <b>=</b> <b>!</b><b>=</b> <lt;<lt; >gt;>gt; <lt;<lt;<b>=</b> >gt;>gt;<b>=</b>
+                            Selects records in which <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>] equals, does
+                            not  equal, is less than, is greater than, is less
+                            than or equal to, or is greater than or  equal  to
+                            <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>, respectively.
+
+                            Consider  <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>]  and  <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u> as sets of ele‐
+                            ments. Identical sets are considered equal. Other‐
+                            wise, if the sets have different numbers  of  ele‐
+                            ments,  then the set with more elements is consid‐
+                            ered to be larger. Otherwise, consider  a  element
+                            from each set pairwise, in increasing order within
+                            each  set.  The first pair that differs determines
+                            the result. (For a column that contains  key-value
+                            pairs, first all the keys are compared, and values
+                            are  considered only if the two sets contain iden‐
+                            tical keys.)
+
+                     <b>{</b><b>=</b><b>}</b> <b>{</b><b>!</b><b>=</b><b>}</b>
+                            Test for set equality or inequality, respectively.
+
+                     <b>{</b><lt;<lt;<b>=</b><b>}</b>   Selects records in which <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>] is a  subset
+                            of  <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>. For example, <b>f</b><b>l</b><b>o</b><b>o</b><b>d</b><b>-</b><b>v</b><b>l</b><b>a</b><b>n</b><b>s</b><b>{</b><lt;<lt;<b>=</b><b>}</b><b>1</b><b>,</b><b>2</b> selects
+                            records in which the  <b>f</b><b>l</b><b>o</b><b>o</b><b>d</b><b>-</b><b>v</b><b>l</b><b>a</b><b>n</b><b>s</b>  column  is  the
+                            empty set or contains 1 or 2 or both.
+
+                     <b>{</b><lt;<lt;<b>}</b>    Selects  records in which <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>] is a proper
+                            subset of <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>.  For  example,  <b>f</b><b>l</b><b>o</b><b>o</b><b>d</b><b>-</b><b>v</b><b>l</b><b>a</b><b>n</b><b>s</b><b>{</b><lt;<lt;<b>}</b><b>1</b><b>,</b><b>2</b>
+                            selects records in which the <b>f</b><b>l</b><b>o</b><b>o</b><b>d</b><b>-</b><b>v</b><b>l</b><b>a</b><b>n</b><b>s</b> column is
+                            the empty set or contains 1 or 2 but not both.
+
+                     <b>{</b>>gt;>gt;<b>=</b><b>}</b> <b>{</b>>gt;>gt;<b>}</b>
+                            Same  as  <b>{</b><lt;<lt;<b>=</b><b>}</b>  and <b>{</b><lt;<lt;<b>}</b>, respectively, except that
+                            the  relationship  is   reversed.   For   example,
+                            <b>f</b><b>l</b><b>o</b><b>o</b><b>d</b><b>-</b><b>v</b><b>l</b><b>a</b><b>n</b><b>s</b><b>{</b>>gt;>gt;<b>=</b><b>}</b><b>1</b><b>,</b><b>2</b>  selects  records  in which the
+                            <b>f</b><b>l</b><b>o</b><b>o</b><b>d</b><b>-</b><b>v</b><b>l</b><b>a</b><b>n</b><b>s</b> column contains both 1 and 2.
+
+                     The  following  operators  are  available  only  in  Open
+                     vSwitch 2.16 and later:
+
+                     <b>{</b><b>i</b><b>n</b><b>}</b>   Selects  records  in  which  every element in <u>c</u><u>o</u><u>l</u><u>�</u>��
+                            <u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>] is also in <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>. (This is the  same  as
+                            <b>{</b><lt;<lt;<b>=</b><b>}</b>.)
+
+                     <b>{</b><b>n</b><b>o</b><b>t</b><b>-</b><b>i</b><b>n</b><b>}</b>
+                            Selects  records  in  which  every element in <u>c</u><u>o</u><u>l</u><u>�</u>��
+                            <u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>] is not in <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>.
+
+                     For arithmetic operators (<b>=</b> <b>!</b><b>=</b> <lt;<lt; >gt;>gt; <lt;<lt;<b>=</b> >gt;>gt;<b>=</b>),  when  <u>k</u><u>e</u><u>y</u>  is
+                     specified  but a particular record’s <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> does not con‐
+                     tain <u>k</u><u>e</u><u>y</u>, the record is always omitted from the  results.
+                     Thus,   the   condition   <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>-</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>:</b><b>m</b><b>t</b><b>u</b><b>!</b><b>=</b><b>1</b><b>5</b><b>0</b><b>0</b>  matches
+                     records that have a <b>m</b><b>t</b><b>u</b> key whose value is not 1500,  but
+                     not those that lack an <b>m</b><b>t</b><b>u</b> key.
+
+                     For  the  set operators, when <u>k</u><u>e</u><u>y</u> is specified but a par‐
+                     ticular record’s <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> does not contain <u>k</u><u>e</u><u>y</u>, the compar‐
+                     ison is done against an empty set.  Thus,  the  condition
+                     <b>o</b><b>t</b><b>h</b><b>e</b><b>r</b><b>-</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>g</b><b>:</b><b>m</b><b>t</b><b>u</b><b>{</b><b>!</b><b>=</b><b>}</b><b>1</b><b>5</b><b>0</b><b>0</b>  matches records that have a <b>m</b><b>t</b><b>u</b>
+                     key whose value is not 1500 and those that  lack  an  <b>m</b><b>t</b><b>u</b>
+                     key.
+
+                     Don’t  forget to escape <lt;<lt; or >gt;>gt; from interpretation by the
+                     shell.
+
+                     If <b>-</b><b>-</b><b>c</b><b>o</b><b>l</b><b>u</b><b>m</b><b>n</b><b>s</b> is specified, only the requested columns are
+                     listed, in the specified order. Otherwise all columns are
+                     listed, in alphabetical order by column name.
+
+                     The UUIDs shown for rows created in  the  same  <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>c</b><b>t</b><b>l</b>
+                     invocation will be wrong.
+
+              [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] [<b>-</b><b>-</b><b>i</b><b>d</b><b>=</b><b>@</b><u>n</u><u>a</u><u>m</u><u>e</u>] <b>g</b><b>e</b><b>t</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> [<u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>]]...
+                     Prints  the  value  of each specified <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> in the given
+                     <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> in <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>. For map columns, a <u>k</u><u>e</u><u>y</u> may optionally be
+                     specified, in which case the value associated with <u>k</u><u>e</u><u>y</u> in
+                     the column is printed, instead of the entire map.
+
+                     Without <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>, it is an error if  <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>  does  not
+                     exist  or  <u>k</u><u>e</u><u>y</u>  is  specified,  if  <u>k</u><u>e</u><u>y</u> does not exist in
+                     <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>. With <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>, a missing <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> yields no out‐
+                     put and a missing <u>k</u><u>e</u><u>y</u> prints a blank line.
+
+                     If <b>@</b><u>n</u><u>a</u><u>m</u><u>e</u> is specified, then the UUID for  <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>  may  be
+                     referred  to by that name later in the same <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>c</b><b>t</b><b>l</b> in‐
+                     vocation in contexts where a UUID is expected.
+
+                     Both <b>-</b><b>-</b><b>i</b><b>d</b> and the <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> arguments are optional, but usu‐
+                     ally at least one or the other should  be  specified.  If
+                     both are omitted, then <b>g</b><b>e</b><b>t</b> has no effect except to verify
+                     that <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> exists in <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>.
+
+                     <b>-</b><b>-</b><b>i</b><b>d</b> and <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b> cannot be used together.
+
+              [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] <b>s</b><b>e</b><b>t</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>]<b>=</b><u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>...
+                     Sets  the  value  of  each  specified <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> in the given
+                     <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> in <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> to <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>. For map columns, a <u>k</u><u>e</u><u>y</u> may  op‐
+                     tionally be specified, in which case the value associated
+                     with <u>k</u><u>e</u><u>y</u> in that column is changed (or added, if none ex‐
+                     ists), instead of the entire map.
+
+                     Without  <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>,  it  is an error if <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> does not
+                     exist. With <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>, this  command  does  nothing  if
+                     <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> does not exist.
+
+              [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] <b>a</b><b>d</b><b>d</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> [<u>k</u><u>e</u><u>y</u><b>=</b>]<u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>...
+                     Adds  the  specified value or key-value pair to <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> in
+                     <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> in <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>. If <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> is a  map,  then  <u>k</u><u>e</u><u>y</u>  is  re‐
+                     quired, otherwise it is prohibited. If <u>k</u><u>e</u><u>y</u> already exists
+                     in  a  map column, then the current <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u> is not replaced
+                     (use the <b>s</b><b>e</b><b>t</b> command to replace an existing value).
+
+                     Without <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>, it is an error if  <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>  does  not
+                     exist.  With  <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>,  this  command does nothing if
+                     <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> does not exist.
+
+              [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] <b>r</b><b>e</b><b>m</b><b>o</b><b>v</b><b>e</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>...
+
+                     [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] <b>r</b><b>e</b><b>m</b><b>o</b><b>v</b><b>e</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> <u>k</u><u>e</u><u>y</u>...
+
+                     [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] <b>r</b><b>e</b><b>m</b><b>o</b><b>v</b><b>e</b>  <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>  <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>  <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>  <u>k</u><u>e</u><u>y</u><b>=</b><u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>...
+                     Removes the specified values or key-value pairs from <u>c</u><u>o</u><u>l</u><u>�</u>��
+                     <u>u</u><u>m</u><u>n</u> in <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> in <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>. The first form applies to columns
+                     that  are  not maps: each specified <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u> is removed from
+                     the column. The second  and  third  forms  apply  to  map
+                     columns:  if  only a <u>k</u><u>e</u><u>y</u> is specified, then any key-value
+                     pair with the given <u>k</u><u>e</u><u>y</u> is  removed,  regardless  of  its
+                     value; if a <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u> is given then a pair is removed only if
+                     both key and value match.
+
+                     It  is  not  an  error if the column does not contain the
+                     specified key or value or pair.
+
+                     Without <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>, it is an error if  <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>  does  not
+                     exist.  With  <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>,  this  command does nothing if
+                     <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> does not exist.
+
+              [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] <b>c</b><b>l</b><b>e</b><b>a</b><b>r</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>...
+                     Sets each <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> in <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> in <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> to the empty  set  or
+                     empty  map,  as appropriate. This command applies only to
+                     columns that are allowed to be empty.
+
+                     Without <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>, it is an error if  <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>  does  not
+                     exist.  With  <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>,  this  command does nothing if
+                     <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> does not exist.
+
+              [<b>-</b><b>-</b><b>i</b><b>d</b><b>=</b><b>(</b><b>@</b><u>n</u><u>a</u><u>m</u><u>e</u>|<u>u</u><u>u</u><u>i</u><u>d</u>)] <b>c</b><b>r</b><b>e</b><b>a</b><b>t</b><b>e</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>]<b>=</b><u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>...
+                     Creates a new record in <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> and sets the initial values
+                     of each <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>. Columns not explicitly set  will  receive
+                     their default values. Outputs the UUID of the new row.
+
+                     If  <b>@</b><u>n</u><u>a</u><u>m</u><u>e</u> is specified, then the UUID for the new row may
+                     be referred to by that name elsewhere in the  same  <b>\</b><b>*</b><b>(</b><b>P</b><b>N</b>
+                     invocation  in  contexts  where  a UUID is expected. Such
+                     references may precede or follow the <b>c</b><b>r</b><b>e</b><b>a</b><b>t</b><b>e</b> command.
+
+                     If a valid <u>u</u><u>u</u><u>i</u><u>d</u> is specified, then it is used as the UUID
+                     of the new row.
+
+                     Caution (ovs-vsctl as example)
+                            Records in the Open vSwitch database are  signifi‐
+                            cant only when they can be reached directly or in‐
+                            directly  from  the <b>O</b><b>p</b><b>e</b><b>n</b><b>_</b><b>v</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b> table. Except for
+                            records in the <b>Q</b><b>o</b><b>S</b> or <b>Q</b><b>u</b><b>e</b><b>u</b><b>e</b> tables,  records  that
+                            are  not reachable from the <b>O</b><b>p</b><b>e</b><b>n</b><b>_</b><b>v</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b> table are
+                            automatically  deleted  from  the  database.  This
+                            deletion  happens immediately, without waiting for
+                            additional <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>c</b><b>t</b><b>l</b> commands  or  other  database
+                            activity. Thus, a <b>c</b><b>r</b><b>e</b><b>a</b><b>t</b><b>e</b> command must generally be
+                            accompanied by additional commands <u>w</u><u>i</u><u>t</u><u>h</u><u>i</u><u>n</u> <u>t</u><u>h</u><u>e</u> <u>s</u><u>a</u><u>m</u><u>e</u>
+                            <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>c</b><b>t</b><b>l</b>  <u>i</u><u>n</u><u>v</u><u>o</u><u>c</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u> to add a chain of references
+                            to the newly created  record  from  the  top-level
+                            <b>O</b><b>p</b><b>e</b><b>n</b><b>_</b><b>v</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b>  record.  The  <b>E</b><b>X</b><b>A</b><b>M</b><b>P</b><b>L</b><b>E</b><b>S</b> section gives
+                            some examples that show how to do this.
+
+              [<b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b><b>i</b><b>s</b><b>t</b><b>s</b>] <b>d</b><b>e</b><b>s</b><b>t</b><b>r</b><b>o</b><b>y</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>...
+                     Deletes each specified <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> from <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>. Unless <b>-</b><b>-</b><b>i</b><b>f</b><b>-</b><b>e</b><b>x</b>‐‐
+                     <b>i</b><b>s</b><b>t</b><b>s</b> is specified, each <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>s must exist.
+
+              <b>-</b><b>-</b><b>a</b><b>l</b><b>l</b> <b>d</b><b>e</b><b>s</b><b>t</b><b>r</b><b>o</b><b>y</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>
+                     Deletes all records from the <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u>.
+
+                     Caution (ovs-vsctl as example)
+                            The <b>d</b><b>e</b><b>s</b><b>t</b><b>r</b><b>o</b><b>y</b> command is only useful for records  in
+                            the  <b>Q</b><b>o</b><b>S</b>  or <b>Q</b><b>u</b><b>e</b><b>u</b><b>e</b> tables. Records in other tables
+                            are automatically deleted from the  database  when
+                            they  become unreachable from the <b>O</b><b>p</b><b>e</b><b>n</b><b>_</b><b>v</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b> ta‐
+                            ble. This means that deleting the  last  reference
+                            to  a record is sufficient for deleting the record
+                            itself. For records in these  tables,  <b>d</b><b>e</b><b>s</b><b>t</b><b>r</b><b>o</b><b>y</b>  is
+                            silently  ignored.  See the <b>E</b><b>X</b><b>A</b><b>M</b><b>P</b><b>L</b><b>E</b><b>S</b> section below
+                            for more information.
+
+              <b>w</b><b>a</b><b>i</b><b>t</b><b>-</b><b>u</b><b>n</b><b>t</b><b>i</b><b>l</b> <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> [<u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>]<b>=</b><u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>]...
+                     Waits until <u>t</u><u>a</u><u>b</u><u>l</u><u>e</u> contains a record  named  <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u>  whose
+                     <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u> equals <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u> or, if <u>k</u><u>e</u><u>y</u> is specified, whose <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>
+                     contains  a  <u>k</u><u>e</u><u>y</u>  with  the specified <u>v</u><u>a</u><u>l</u><u>u</u><u>e</u>. This command
+                     supports the same operators and semantics  described  for
+                     the <b>f</b><b>i</b><b>n</b><b>d</b> command above.
+
+                     If  no  <u>c</u><u>o</u><u>l</u><u>u</u><u>m</u><u>n</u>[<b>:</b><u>k</u><u>e</u><u>y</u>]<b>=</b><u>v</u><u>a</u><u>l</u><u>u</u><u>e</u> arguments are given, this com‐
+                     mand waits only until <u>r</u><u>e</u><u>c</u><u>o</u><u>r</u><u>d</u> exists.  If  more  than  one
+                     such  argument  is  given, the command waits until all of
+                     them are satisfied.
+
+                     Caution (ovs-vsctl as example)
+                            Usually <b>w</b><b>a</b><b>i</b><b>t</b><b>-</b><b>u</b><b>n</b><b>t</b><b>i</b><b>l</b> should be placed at the  begin‐
+                            ning  of a set of <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>c</b><b>t</b><b>l</b> commands. For example,
+                            <b>w</b><b>a</b><b>i</b><b>t</b><b>-</b><b>u</b><b>n</b><b>t</b><b>i</b><b>l</b> <b>b</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b> <b>b</b><b>r</b><b>0</b>  <b>-</b><b>-</b>  <b>g</b><b>e</b><b>t</b>  <b>b</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b>  <b>b</b><b>r</b><b>0</b>  <b>d</b><b>a</b><b>t</b><b>a</b>‐‐
+                            <b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>i</b><b>d</b> waits until a bridge named <b>b</b><b>r</b><b>0</b> is created,
+                            then  prints  its  <b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>i</b><b>d</b> column, whereas <b>g</b><b>e</b><b>t</b>
+                            <b>b</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b> <b>b</b><b>r</b><b>0</b> <b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>i</b><b>d</b> <b>-</b><b>-</b>  <b>w</b><b>a</b><b>i</b><b>t</b><b>-</b><b>u</b><b>n</b><b>t</b><b>i</b><b>l</b>  <b>b</b><b>r</b><b>i</b><b>d</b><b>g</b><b>e</b>  <b>b</b><b>r</b><b>0</b>
+                            will  abort  if  no  bridge  named <b>b</b><b>r</b><b>0</b> exists when
+                            <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>c</b><b>t</b><b>l</b> initially connects to the database.
+
+                     Consider specifying <b>-</b><b>-</b><b>t</b><b>i</b><b>m</b><b>e</b><b>o</b><b>u</b><b>t</b><b>=</b><b>0</b> along with  <b>-</b><b>-</b><b>w</b><b>a</b><b>i</b><b>t</b><b>-</b><b>u</b><b>n</b><b>t</b><b>i</b><b>l</b>,
+                     to  prevent <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>c</b><b>t</b><b>l</b> from terminating after waiting only
+                     at most 5 seconds.
+
+              <b>c</b><b>o</b><b>m</b><b>m</b><b>e</b><b>n</b><b>t</b> [<u>a</u><u>r</u><u>g</u>]...
+                     This command has no effect on behavior, but any  database
+                     log  record  created by the command will include the com‐
+                     mand and its arguments.
+
+<b>E</b><b>N</b><b>V</b><b>I</b><b>R</b><b>O</b><b>N</b><b>M</b><b>E</b><b>N</b><b>T</b>
+       <b>O</b><b>V</b><b>N</b><b>_</b><b>S</b><b>B</b><b>_</b><b>D</b><b>A</b><b>E</b><b>M</b><b>O</b><b>N</b>
+              If set, this should name the Unix domain socket for an <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b><b>c</b><b>t</b><b>l</b>
+              server process. See <b>D</b><b>a</b><b>e</b><b>m</b><b>o</b><b>n</b> <b>M</b><b>o</b><b>d</b><b>e</b>, above, for more information.
+
+       <b>O</b><b>V</b><b>N</b><b>_</b><b>S</b><b>B</b><b>C</b><b>T</b><b>L</b><b>_</b><b>O</b><b>P</b><b>T</b><b>I</b><b>O</b><b>N</b><b>S</b>
+              If set, a set of options for <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b><b>c</b><b>t</b><b>l</b> to  apply  automatically,
+              in the same form as on the command line.
+
+       <b>O</b><b>V</b><b>N</b><b>_</b><b>S</b><b>B</b><b>_</b><b>D</b><b>B</b>
+              If  set, the default database to contact when the <b>-</b><b>-</b><b>d</b><b>b</b> option is
+              not used.
+
+<b>E</b><b>X</b><b>I</b><b>T</b> <b>S</b><b>T</b><b>A</b><b>T</b><b>U</b><b>S</b>
+       0      Successful program execution.
+
+       1      Usage, syntax, or network error.
+
+<b>S</b><b>E</b><b>E</b> <b>A</b><b>L</b><b>S</b><b>O</b>
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b>(5), <b>o</b><b>v</b><b>n</b><b>-</b><b>a</b><b>p</b><b>p</b><b>c</b><b>t</b><b>l</b>(8).
+
+OVN 23.06.3                        ovn-sbctl                      <u>o</u><u>v</u><u>n</u><u>-</u><u>s</u><u>b</u><u>c</u><u>t</u><u>l</u>(8)
+</pre></body></html>
diff --git a/support/dist-docs-branch-23.06/ovn-sbctl.8.pdf b/support/dist-docs-branch-23.06/ovn-sbctl.8.pdf
new file mode 100644
index 0000000000000000000000000000000000000000..9d0805f6cb6908995cd1362ec82443a8d5a7f699
GIT binary patch
literal 74265
zcma&sLzFJSk|^r3ZQC~gvTbXZZF84vmu=g&ZQHhOz0-Z~yOW;uC^92+MNacu5#)-Z
z;`Gc6Y%t`bSFr^!<m6IzZuZ88E|&IoJVXwLE*6aD&P4Qz^hER~DnjC7%KwQX_O|~y
zur#u?v2^j2HFYz!;rmYkB6`RFdrw|LQAkZi>_0b!g;Yf(iRhh0#nh!l#P}Rc%-o$U
zT}=Ozadt7WcXi<t_|H<o)y2WpMcmTH^uM<MtCwKdiI|A&jjUh*07h9;J98HcB98xL
zlo|h1#l_T#h*8|e(8W~L)Y#s{l%F5Q*~Q7!&=$rct62NmZc`lN`?eGd4P2W33flZl
z@6TU0IsfT`=Fa*=qkS}R`e<@HGG+2|F0Zhzh+W6oY{rC!q!ManqH-yO+br(aEoa7W
zNZ9s2#NYLQXF1J@b#lHPDV`M4zpZ-=XYFSg&T2B>*Be){_1fA6SP`L9q*8{NJJ++o
zr^D8#f9s%bXg$!-J)?N-FwBK~=eMUn+4X#1I_hA@qRf@3rszqeJTfS*PWI_MFpqA{
zt|D$Qv?da{m|ufGE;eOeoV9MHyEhi=O#X$Sd=Bk~j|CeVkcb)TlY-qGiwU<H3`tEC
zrs;{6`|UkI{<6g175%#s7U*@!r!YhQ?TH&T9AOCd!LhMxb+{BZjlHs}w0dz%2?d}@
zA*<RVVyzWl5Sl^Jz%^1?Y`j)kyM15OtS`g1v>9hMFr-=)UgTVVSm`}~uG@3|`gNdt
z9fnAH))=?{+#WA8uGZF+5?xB1`CYwPEQJKU-a~aM4K=bQy`<<k&u8ldA3_gqWpB3B
zW_0j!<plE5fc47dia!;Wo=!t_>dWTFfX6!hZOirkv{h_rqyo*eB%q_$w!=og7e%wn
z&2q*a2a}WAM9yH;*Z+O{SZ3s`tzkeU!glD=Do6bjnPtwx7^C#@=rIb2f$2PqE7i(J
zwb<mCY}u;wRQaoYqrF_e)62u{;TrF#RfNz~*$Uckd=qo<@M^8lW(j0DvdBfale_q7
zA0)P(>TX)Pww*(qmM$5HxLi<?T4hpc)!v~=3*Rw|MeIx#K{^A8Z!-j5EkOi?o4a~B
z5eBtXFg2+DTG73l5SWVypgN6sj^5!@M&^=nCla@<=y4WI7L_^)JiXG+1~6f(9Q}3D
zhde^?r1&D(1&1cP>#@9lm~K&{RdZh!6>A8LT)JmEijR2-GK$>)r)<+SHoCDs<xU1>
zMmf!g-?fW$c|zMv{T|MzHwK10fn5HJf*eUz?~TgERruJ~tnLi7#aUIQ(8U?u_B2cI
z*SxjO`%0BpA4r*1+HEk6R4p%iB;A?V$UXi*7T!>3q5XnNVS>O*8@RvX28lI7HHzzj
zOk4}6xL;*L7fU>n?bI{PBZgQyF)38po@XM^Pt9@xnakrROO5Z-xO78$o)^<*(?!p<
zb*Is(Q*RORw6Z~;Ci?JAbaq`h-{@>g7|W%6)0WW%W$#%)OL-0lt$t-HX10e{+S2zz
z;2ibsMg~z2qn^?NWnBc)N~g$Z(e5f=0uaSktipWu*+bw_W$ysDW_zP5v*ilhSP^Q6
z<X}C#f#2V}UgO$7*fL?)rui~mlF`^he_4}djmH3XL^Msw{TKI4g*LU3EYJCdGSA63
zPP;l5G}#&3FGO9U3n@swuq#vXiebH@B0tp%Vw*lf6ikL>Ph`1v&1rk9AABuhd<Q&R
z`4GlFaN>_@7Ge8B$k|68K)6x`Q_!JwMH`L0OVw_;=*|fhuobHy5vs)xmV;YtDa2ni
z-r>!82xkHBh_gqUMo$fR7~{Z(KRaB~2LIL}g_F`jFun6X6dkqz0#n~*YwJ%;>83lS
zeeJE%Vefn%7)&k(OBKIF!ukhnvUGEC?+61et4me5H5m{kS8)>`m#w{v>$G3&CIPKV
zc)>hjYv?8_q<4lIT#tlpO9`8z9WhI7$=ghyj~;>Y-DAs<;o$Zde(#EyG&Jb8YY9SN
zBaR{2n3yTV<0V$KHl@GBw=a47xfFPgAOsaBP{wp}s7D^+nG{p5>zqW*qxYL9RB}1l
z(hAm`%Ft1rp^<wMQ$Du%DfFUJ4b*@Hi1N)JyRLjWwUKV4a~EAEiq9hlJRCbiEjX1B
zifN|es<e_S-LYk)cz5&<kws%BP*21%l6@|qV<)14xK69B<>|##g)#nqB=Ksf6#{q`
zB#uz}N!!Ik9T%jBf<C?9AJIQ@D=`^!+rr2OGk%iDzCm$6&}RZH)Z*nk%tBM-z!Xd`
z_|#Zya?bd#W_M|W#3+suFQ7>^rcFYJ#>lUd%?e|%`u8X_jDf#PfSWTgLdtAjuL4r0
zoQ_hw`QTptQUcFO<b#}VzY&tz#c6z2pt4j~WZQH~at7Jb>&gu?crGLj8(*%UBTpr#
zUqG={m+<tyHP)ofrK#1tbyk$lfRuRtr6+Op%3_|tI#qfl-G|4EEDY?my=Apeo7^vL
zxgD?EW_%gtpfjiyvGIdgY6zL0PP;Y82h*HRPTJPl&+SU8X6^a;*jd;r?}A2G=kIiI
zkgIAFt5(>#O`-?1Sx}uimK_BRa1|mv;ngXbGE|=f_a-`s&ZufaGbd}NZmRbmC|0u*
zh#%HON9?7m1ox!@H2)_4rLroMx;gOVK7#AmH=&X)AA9<AK&#HEERT;NYvu}jgY`P1
z{u#vGQ#1NSOJ_MmR^x;gP?&G~NBnh5QAsK*P=2=I_@tD?J*~9)?Dv7@C1Vg_5Bg(;
zL7X8wB*aIEUjlRz&q<OA&s0+eP0~dPR78zQ08~^14%<Cs2SvS@2!mU}!wH{A77M_$
z&RPSJ|3Uxtt>}O2Om8X-*HefPu;g}F+(;ghgpk>)oxfa8vDqH1$f%Vc4~SAEGP+-V
z1`1L12y-JNMy|!}(c~dgLAif-5v7lhXB2QGi7_cOpqL09b7h$TIY^aQv`Ly1p@u+r
zElWR0rtIU-RA+ox@qPEx?Qz;Ip=D)ut~TV6HNv^zu7K}b^>6eoUK!i51<f?A_R=a;
zu%lpthLU8v9v>{lYCiV5j>w%^hYe4t0BvoSCy9qUv?C%vL^>pf=3t}b;wl=r1!9Zh
zvurh9DDi{t+Sy^<K;~Mxt}||HTd4n#+(#Bv`LPuE8)aFpkRi^CrP{qUn@&ZxZ3yvN
zK~DQVU7(s&nrW6l(|eDd=WGNi#Y`~mQJHAV6DNfIopFz6r3qLF*ov{9Q&~RZr(G1@
zNq&5tR9|JkPPxgaHv5rW?zF)~voe3wwTDdbW15SX>gW6B&)GxB$i<hI1BJQZ$7y+;
zSU$M<(+{G6VD-w)kuwlIL?_<^!SO)fBNf;3d++CA)iGA$d21!B!R4siBy5(rzF|UN
z%7Mts#_p>Cf5(P7Pa4AVn_w~o^60dBu7CLNEnigxJEtxF$bvm9cKhEGX4k8O0y=4V
zWJ7SNn4bke`8@JVr99FzNeq(DOQp6PGfPFs-Xq+OkvYiG#d~PYS)H@H9rBKu^A#*t
z4mI{GafG~go*<0p!_gk=QS%Mt@lEoZZeqU4I_3{sSIotTIHyZeL8-Ymwl>!7_K$Wb
zMf>X%MJLy%D~8I06t-e(@wyQS_jS=A$jG7fu0UDp`C5=Itg#_WP6jQ`Od3CR1nk8!
zL|EKuedgD*ZDVLy&ZU)@ND~)95)UVA<&J;5|1yV2@OwuAB6dsv?Sv%;QIC(LSo~+c
zg}`}9!r7giL#Ln|Bx15kvk)6<e^`aB)%W#L5QGZpX}WfcnrACNJ8$g3JZD~E;iFDQ
zw!rWAa1<MvsPdQK^>#mG7+uN9TGc@HEsY0D^_Trc$c-YJ_s-P@4u(~6++_w_rd9hz
zJVD(>TV2h_kAIctg>=$|gs9-;Q8v5!`;Oo7zbt*2j~8}3t>sZ$&;^5TcJBq9_tVx}
zLB>h)m$$ZRjMrst=2Y2}&y6~bj|4a1StIqLooBF?JEV|Y+rQ9lcexV%(|O9nWlBsU
zzX;$Z0;Z5A6TK6#qJv*mThG%FAN*lNx31XB)pIR2LhN5h7U0=ygna}&cG)y}9ey|?
za~`6(D~SrYb{CPGc0Z2RC*XygD%xx|@R3k{%hL2q2U*><ebp7K0k;?O*uW!(Vs2Rc
z^0+v=^RqS$S**jUU*4RZPCg5S19-_#A9)DUM4u^8&mYsrks7tRo-~d~;|`;64WOvQ
z!QR?au_&<DYJiNGtEV|%n{Eph#Tq5E%ZEG-6segoL@PIRN+uLPd2JMoAXj_wi=eQg
zT(PXL3y5Co?3rIar_qqb!M-CDpH-&*d%-Pvg{YM%Sa+i#-~>aQ-R)aFmDn8Y48DaI
zs%Gaz+i(`q+?s!A_7@k0@t%g{YC;q2Hyx50xA;ps7M>w^$L$KERLwx03VSDUGrn{$
zgU3Uar(JjQXO6EXP&5!<w%sct6A9b5f;{-0*g|XAh69mjcb|P7=?eV$>)%S<A5H36
z-!jcO>~mu=d8QaXMf2mQo&qV-q;Xe{qdCu+*NxLT`UAOV6TtPw*xZXQnw6pW?(O9f
zjSmQ;+0T5CSOvJrJ2`m$On4cq%%NUZzWxRMBh#Tkb6slWzG<Fy!p7^t9XR8lX|~cA
z^UB1F04iP)oaQ$pyxcyCo&EkRs>dCHVuL#>@#51E&*xZmf>O_mdWnKFh4H#F00DU=
zZOyy~z=wL&GwXeq*x&G2$$~$oU#_46$C(j^`HLhHj`gW?oDCOj`{m)}O5pAB?>)V;
zm#Lk}|K-ttR{uq+|AN$iMOIceZkYd@W9IxH-eTtZ-+*gdd(-J~1lf00V=A*eiE9Mz
zCUZi>EnAh_v^Gm`#4k=)hlo1~DF_HYt{~Z7^KZltbLnX)?0EC4r;Kj63JBBUqVLDk
zIl<2q2!p2J@7mwm77bwUwvTt|vtE|Z+U1mPeckEv>fwuvNq1^KO`Do2iNNB7Vx=LB
z%}T9Dm+m)CjDBx!#6dvh-H4Gdd*$i2Q*-UvdFriGr@yQx4#Yqg$w3;W)D*^O<@z^W
zXRlf7Q;Q@jfkeG0<(xwA-^m{O3z2*cUUnG>O{x}yFGdV()+dU1I1j9P&om1a&p7do
zq*|C}TdNk^m55|~+RJXM%Yup=t@dp-tIE4Dc3v0L@4lDV2-jit`f6=H4A*trdmx3>
z*+XY2!)WMwOTQnYcHSYG`ptEfV1T@FV=%9L+C!HBLhm!}zqm<2L*<-f)UGv_2B5Lv
z0>@S*O^U$8hM`Cw=tQ4MZ3uA5`5~v`4O{3h@gsu2)4ASZgRbvmHtO_Sw%uY`QPG~l
zj3}Bk6>~JL*0_!F+~Mu|eRx19qH;n!B?AIoiJEg>y(z-Cqh<og(}*&4Kgl0dfJy`7
zYUZ1?GvILL43L_^Co>m_>0ODrGti->G{*o;bv5!ge{NS<)FKZNNj9tp@s$gJfiO6o
z>d(B#PSq@jkqb$`JNI<Sb|HQ2ef_ri|40O>LO@fRXx)({2Z{!LU3P4?hAsCj&S_`D
z?KDqIyS}Lm`eUpRp=MxsZtDwo!Tm8K@Wr_|$D)WrN*Fr8=SUxNwlK3^uHJBh)}~5{
z-qbd4h9XnQ9?ebKwI>(>R)9Q}Maf?s@~TqnG$d%Q;8o@FXv|kxNlE58ZVYeitx>l!
z_hAK21Ve?T2Bck_9BU?hO8qg;F>jCjo;HCtdh6r8KAw8@U-tJe-94<Lj&-$@=^X0W
zsyJb4CIJEW(9P10r%--^)M}k&q(nn59$eyX9l9gxlTllln5&Z=N(&8m@u^dvUv%g*
zB`OjTu_6uYQ);r=foF0oTdim=8#_)4+V3QCgwl#~yYJIdkND2ckz6}!&0)W8S-TB@
z6!|1MW_gnD;Y<BB94ItYVz5@PS|#t6k`jGc{7YYVvMpad5lib%!4GdkQ?EO_c9BZW
zB%I0G$O%57=w5CD(OZa+Jvk8va?u6+Nw{HD%mG<(M0LK|!0=*a!3NXVqLU|F5c86<
z>(~1B@pAo%dg$vVp8m3GgtS+2B}qZ2R;;2=64ErCFv=%I0PAgLc?JYP`4HW-`I17$
zME*BaPf1gbFr>_fv5JHy6c^f9igL7K!<LzIZ<KN0Rk}QTz;SL1;^<!WXLPhgIjh^A
z$Y;V!?}CQl2-`+eWWe)ez90y_vYlBP#6XIlsF{uVz<(_qLG=J=l_juJl!td^CY5uo
zPM5EtK<z6339^YnhWlyopRfpng(*+Q6vV;Z?%-7b)TCYvg*pv>2cJ)ePyp6J)-sYu
zmT&j`-><a;^4H*pfiAAq05quxkc09mlX$<xv|zpg?;qK>xE{L>0#+Skpv$Ei3)sNf
z65AH9$gm2nfyNuTLdGzuz(C~JEp}w^f#c^W14)*$KXIc>dIGQ{Bna6%L7>7am9lqo
z=Z>MBpjxa4s6D8<P!cw+yRXQRZJ(E$h_?p4T0W2aHtHveqeOC_6${`%Xgp`gITJ1A
zQbVl1eN>?F2+^E!g7Ych9?uYOH)8y8`KzS)*==|^n`R`SQ6&MptPvi3!l=Xnjho>D
z;<4+R<YSsnz1xE1QG33e)|*b%bOlw*Tz~)V9S2;+PAd#Gi+&)SBP=^}tJ`ZAdp~Gm
zei~`HSb?w{sd6ltsY4)BUr>ODXTOWxVWCy>_P!c)o7qW~rQ0@YsM@N_bu+4ar+TCU
zC5oc;?t)E))#~T|%b=SaHqG0Ljw3OKgua00ZSJkl!Z<9{@5;L_z>zOf2YFV=nU1)~
z>s{J5G&HT)&>ghy_@&O<_lNmv=S#`%xM!SWU?I{T_c1?3f!qBvU0yWlangQm=T<gp
zpzph`3ksoyH_}+zq2nj$gU{fxTIILUDd@g9AQGP_REU_g=_Hw_b<^cX^uXaZB|;M9
zk_C14b0t+SuT`1vUGYH4LYsO9f`)z^I)+Ff9BnrD7k?kSA%*8!db)M^B0k~pg$F^l
z{r!g?hMNj?J`zMDz-FpLCF?R`JE%(;JPFf8zj!<e?q|emZ@-XnX2qvpB|T%X+ixX+
z1QJrIV%A+G8iM+%93I<=Xy)U@)(F&!zM2P4h@}1X*KzIgROtX^K^0}$T&YxB&W<}t
z4C5_ckVdYxNE=45UmYDL#wtMa^?17Yfyfxi`6Tu?9Rwt-L5q-l!}{#CGQ#t@Pz#}2
zF@a|lz#jD6{Xw;QVj+10P(Z~4dy?i3I>bydn@&%=uaY99a=lhV9>loy?K#_~_Q)!k
z$-IlM=mf=~)yBZn*8xwpfKFA0>z?q_f2~Z@_>zjI3O0Xc!GvXevQ3*1I9X?l@-2<m
zL0>#L`d4#~mWjb8y55p`oB5uB#`q~TsE6ubC>eNRGKEC^d`M89ScQcRVv8;RQNc<X
z-5l~)@b60)Tb(0mrD8$urHa$ZK~j!Y@2MTyWlv^vI7!*SOS9Am8+L$I9iaHwA3IhA
zNpvt7WbwxmxKmBcmKmJ7pGwjBfnu}O!{4ZsTnO41nkjSdoa-PwK2=CuZ8;~Eg9RyQ
z;Os@r6v}^lR($gOx@Ed!3lJ+6c=Y74LnBnB>}7ySn)?p4*h3MXTaHpdqkjCikJzuG
zz?$u-2(J4?Idt2}k%Hs7&lBm<kcJ`9i9nn?w!ndj_HDbZNZ1-;el@FG1(zh+ticcM
zVNU4DU@3L5`po_U@?~UU0=F%Rr_+mlUB)?*wX26s8UATpAQ>!sQU7~@X^V38o36We
z<?P<MN-@stg@O7q`sNGyD>24L6Zm$o>*l`hU9G!m6$CvkSfdo$`M#9*aQ%nd#1%t)
zFm=X#px*JJj)vqiQ9)xE&3-sPl@9Y7M(L2!7|X|t8FA5%$b{C!TCq2T`MAc(3YBUl
z5$@00(Wj#Ij2Ml_iutyraRH3C9t6g$EKfpSh*x#;j9`(O4Ag^n)|1`bUmvFSj3L4e
zUKr)r^cPekO$tC#c+kY@zkM*zTwh_h+{+9S^Tf;KDj={CNI5?{b5gIjWs+ja`SkYU
z`|c7KD=%bcxnV^dsWk-^(n0p#3q$GMObv2u(AA0=H`pWl8I13RP}Xawojk>0i2TB6
zsnSHe5?eNM&S&XXV(`jjHRN<CxutTlcVu}+RVo#c^+BODb!9@YKONab9zJNF-5WPm
z=O^mHTXCm=@vO+$lF6kf%-2Wo94SjmS46Jn7YOZ@=wv#7Nux2YP()n?{|VDxuO36v
z8+hmQ@r7DAO3y;USmj9e1-hKXm`_9TVCAQdrKf4Te^vq|D>9+$T9700wF1@Iksr5b
z^+ETVUB~$@M~0ge^mf5)+u{P0kxs0XwColwA(uXXnuw$QKV=Zu7vQ8A-w|RwNO8&|
zgl^62{5V<9mRR4NX>?X!U8RQV*xd4+x$~~o68F_1t}|o9bo$dlth`D=;x{U;l_L+P
zRa^5qBUw-j(qJi7%)i2reHxdBZ;bArPrs{h;ztEnZ{z+EJKRF9<&vU+3aEjzneG}3
z(q;5}>+mPBN6)$N%VYhGiw$Kjuwbe{W15Vip-+#+4$Gi+PnXIET=3^Ug{+U#)auDp
z1o`LL*3C@@=cpAxpYRtP$}_%{%Y+tn=M4397Hp?hil{Y-e@)Hr=4DHcBvNgvB--SK
zVpF~qvDF3m-c+3IKg{tqdrhc&EsRhLp8QkN_=0sz`M4B7JEel|QuOyEOWpU4?4irz
z!*hA9b!|+~zlv;NDc96V#pRH)*f`DTIbBxdCJU;t>-2d_MXVtX7N)#F>X*eN<b@_l
zh#v7<O&l~Y+DqwIhec<FDgG+0SU+Ef=JRtfWHx*Y6*vFBTuS=!p{ngYtA(BWC;qKB
zpu&7tfHfyl41274u~19$HJUV`@Bz4PIA1box-`HB>f%XoKh)yuE)^Sx!{f~ElM-eh
zHUcZ}_uY68k7z<2w4bl?Q8g1^!F%ZpvP-qd*kGpsI;50EmxSOHEH1K;`NoB(sd4jK
zQt&7np6?@1whpbgSNr7+ZYSugA&A6)M^h@_xw9D27`r}Ete&0<IC1e)tvzkYR!_Bi
zEiit4&0KwbQ;7b3ya{D0&z8)-z;uyA9x>Nmc5;y;CW##)YwA7At1&5NE7?Y93Sdo+
z!6Cx`_>7*L@}+3O?98U|iM9TgqSWMsByyf!cXvsenXwF>Y8yN3|CTdrv(Q3+Rxoq$
zMS-_P+4f$F-Zo4Ck1jA@TV;~Wxhu;Zp-gA?IkfA7Lx{q1x{YCtS;O{oJj2rEgxgCG
zvv~DoFR1KD%#nFXH!b-&<gjxfeRup2ff9N@CG4E669A=^Z_C|!q$mUZraZm%yuA{u
z4XWtfbxnm{1cR4s*dX8LD@qNPoa*Y87wGUNUVIdN(n0Xxz;6L80PxuP8e5&#Op5#-
zh!5~!=J(KTadA-1OsmiSj)^&6Z~XwS#(&%*&%u9N+CC_M-WkE>0RR4n|Na|x{|!Jk
zZkGQafGo`a1Ar_n{~G{SYfmR^jv)6uQlFSHH3u^X{i+@ljSCbfnNXu#w>4aXVgN~r
z5`{ttDowF+#Wvig-Q-~Z0ZM2{XnU#CHJV%8Ui^Mu<@=<4)SUr*&G$Zj4;XI_*TTy0
zvV7C-HlAJ%!)R1L4zJ!C`PA*uEy-jJ2M!DMt$c=%3NWnxf)Up-xcUmnfoRq<V8}OK
z5Ipvblp6HPGy@@b*55id2Z!b3iV^GNV$1|30_fIpb*B%<;DZ#a@6XN^1nO3`oTnr=
zinRwoh4TFlf9EC3^D!K1G^)PH9KQXlzy7TN_|UK4%lSA|gzj91!K*zsQ^e<ymiKxt
z$p;AtWn={6H9wxWmwJT23EBYCi`EbsjG3jhBkw)95;=1+9MxNmbhrJn&*|5uO13j<
zji%o<CSoh*v054(&WGHwy1*%7b_G?p%Mrw6ZMZQ%mlIu`NqOp6w*bE9<({O`A4U}^
zp$m$__`)I=q@zl3?YPqqEWFp5M^@U2=>+eZ(V(&M7}vj}CX@1Ny~gVgsm})0dI@9C
z{imGn`{lS%42hZP?0?`0r=Lr1GoZRU9ixaXzDy;!dH{H)dtQb5r8XXf+r0c`A2GH^
zbU&g8@<9rFhBJe;+nPK9h#n?Mwpt?_4ZLF|wAf<vVq;aolEjeH>u+{Ql|%Zs6*1!?
z2IHa2%LLCsOZ`xPx=q&i=Oz@E`7b9w0I*eTj)i+C+|c{tJ$_N0;7zzyiE{JpSI40)
zOYtLPRtPl_sK(2sBH$d`JQc}^?T69S-v&o`M>Mg|o`O-K^$`myYO8sWMNSzb@sH&f
zrNBHk`2A90W|6Oqy?<XWwlB4^JpXuS#psY(Mb>O^Xk9lzp059Sw}k$n$S36a&)2ys
z{yJyjFJuiPE(PwJuB~JkIwC6PNq^j*BjwLBtsM5~t94SJ1UW=aWsD@NWG8p`n-8bi
zyP;BGDD|+P+kFF_$to(?R~Qh|uQjSCIrSUjyd6bdB@-yzKL~2~I(joR<n=;tek~!0
z$pepYbW?HEF2>(`8Gj5HelQ!>WB0!Jm<v?n9Gs3Kuhx?Bi%=x}Nxf9dz-!5{dVAJ0
z_pCd51&MQ@!$qt|Z4MyR!xJ~dcSjX%CHnkXTXxoF@sK+MOUnaLG2ztx<0)7L0~_a9
zZnDEnd(q-*^)t90;`yBjcueIT#X5y~ihCqwry$T8<aLBkFsrO0XlA`sqIP<|LZ#4^
z{L$h4;F;o6@yR)~#uA6%6Fs<`HF<+#frLHFC^Tm2-E0#aZ%wWfg5Uv1GcRq7nFOHN
zgWbGIp3j?D7jYdSbjytrlIL^l>hPwIfK>3Ms(>_~Y5=zUHx*Fg$XMrPm~#XrqFY=Q
zx@8igyfKa!X_;kDGCt#}8ZGz-)4}`m7ZkwZERGN}g)^bNl@6U@Oc*2`#RIkDj_leZ
z<hFLeUv6<jMd$fg4L^VAGd^2KsZU@KSbneRJ$wjhV&J!nvW*t36=2xa*HEI!W!^K#
zFmB}_>9}GF(S=l8AO1vzBt5L4204r<=0B!=LWq>EqVR?Q1;VBn@`qe`PpIGDZ0k9=
zqNq`|ZBZ=EzmA?0j6qSkli%7qwOaz6^K=~=nkrMDOY>JEM-D6=|AS{=(ONBDs1Ppz
zF$j}i177uCRazceU*~BAQC-A!n}D*x?j5^Yd=iRDkFscSfEG8z?(Y4UIfCE^r|3JT
z$-uWM%@aoPy6Ibz&{;UprOlqrM3?)iQfpwuUdcQea|8;^*^N3X@QhSAH`i^9T<J@2
z;%*DJgGUuftk#d=<^<``B2bLAOZW$<)*d7jN<?dDR`M;)A0P(=G!m-9c^jlbbY>oi
z$!TPsQab?HpPiiY0Ml0GkeCe;8AIgHh~NO@8%=$g2uaygf~K*JKpF!jH%}dWuXQ&?
zaD`5q-FQq(L$xGXbTQ-yVr3;Za%65y84)Gdb>rxD#mVcGi%?aL331EPUBU(`+2mmP
zmE%F>ck*4+X$%)p<qX124B}oO^|T--bJF@`hd0ET`tttDM++FEBXWu~ocE+#!M><!
z;#Xt}#sO9C@xbJ;;>jG_j|S6@h-#mI7y@XhByP85kCVqgimBb|omLe+6Bic-S_=B5
zMPp+q!|cpt0oHD*#ODfw$bX7JI_*abF{!2vklsiW>Z_<|wm2)p>OgBPr4rM~#baC>
z134oLNq%LK)iu+eLqU;50#nb>94|HY*bGFQ*rhiPEmLh_aRFSDwG?XzH{dTuD46Y!
zkM5I#tHI4LeQ_rNxSk@E9-O=zP@KmUC$$TA{xodAD8NNi&QuCBvA5<{Kn8HViZC$m
zH`lF?q#!lyNZGr-zsHptnBNi0cly2p@T0H0Jz2DZKi^Kkx4qv#rRn~&R&@_5dx|Sx
zKqg;b2iLI~DWT&@^57z<3=(f3J=h~BMVqkjVkngAgU^rdx4(`uJPpmnW^peut_zU|
z^%sy8l%yM>+?GxQMdRRLm(^Sztk{yf)UB6)hNfR1m^>|u-pwrukn)^AOm;R@Rct+Z
ztSY7D1lVRWG!#1~^7rSCHy#DAG;1amR&jaYb-c)cJ&1*zV0Fna;Z&!$15GxbyVhEn
ztWASsEKCv6%K(=p7#`yJ9&a{Qhax(x2|e`>`gM*1&7%SCu_>k_(Q~Sxai*@6>nCeR
zO92Zd2|2oPMn}5$Xx6ouFt|3xjA=+Zi$i}y*FO9~0}Ys+P<qO-GuF^82FPpGh7(Cz
z=2oKVb+4%PVE~}Sp88y_#GuL;km|_cXbCE6_y*%;UxvO!)iQf5_Dq`cY8pF2mUF;V
zRAt6{Mdg-e{1dbiPlkBb2~t)M(4tNB^${XPN4$S1r^^E5g7e#hL#gq@1SnypgF{*(
zVh%KqnR45PgBV&z@Lv($&|Rlss4VAjo3PD5%Drq}P{K?$V2b3tnuLp;C@%|C2qi#C
z^sZbN!0OUD4F@|&f$|%n;DtHEM@#k~BKwgAxuTl81o8dc0shz7MqWrtvBxnK@X&%o
zP)UTeA;f_YpJ(D0|7p28*5z-&1{zv1Khv;Xt=Jr-7%K(BG|UIN;VJqYg3|U;j>bac
z-rc#!5_*Ia@XoLRrGgrdguRo1c;GwD=xr7RGGolSe_ll;vIEsm*Hes5nd${eqUB7c
zfB;kZYOs4+h5|dqhQ@Dlza$b<+KZr6aQT}p4QlOk#lVR0#T79`9AS)p1Gg6u&x@=S
ziXxMza@+CjYY|-PQyc40!%h-=!4-Y<lg>o-YM1r-G;98z`+=OP%b?Soh*$mMoH%MS
zKb3G2E4;Oi;G}B8dmIltSKUl_J%VKq+sn1D_B-J>2a&Z4UUSJqH>>%b2^JYT)YhRC
z*Cx5ZNxi}L^1&|x-*so89iD@-q4_73Hq>Yk;z%((1TJyIYqpS3QlDH21&J5o`);8;
zhtA}Kcl8^J&l049G=P`7N!ZXkn8CsMgIv~Mm6P@d2q#;^CqbLdkOZ?_vAi+y%*|fZ
zEnEN2w9vpobwP8L7aL`7rOGM=nRD0sV>X=YXcgk9&O3(YeHCt<HV~4*1C`n4DY<02
zHf1Ly#^e2C7R;A?_HB<3-$u<bDuLmI4(RCncm)1HG(k26ZBHHS0mCE|i~>@}kO1u|
zioXb+XraDTb02fUJ4?A)G2OKw%U_B$4kmHlghpAip4BhAZ$oTa)i`wAQ|Sqxe`%%%
zjbo9Poe$Bt&H-Q{xh+9^>qJoTMakzKY|3TXcjX6RXT$NwXV+sk;&jP-OpDZc?=|H}
zo}1d%BbeehcpSy$-}$yKa>AeF0Cj#~fFiurWGqqDFWz7<)taT~t0JKjio&hYAk7EU
zhk)><q*}9G=Xhjfa9}43X2+^=_f1G$vYi`WUcmvAaqfxw_gCa%u8b>E_DyC%Yv-Ms
zwL<zqf&URCI@HD;UYgQle0#jI{WLlt;Mp_vzX&TQjSbVHZ66?$9Z`qw!n=4c>+wm8
ziYL<BFfJ^S5-X<A^k8qMhW=JsbX?G4Z;Vu(3McvrnhsQ9HhZsuGS@&DD4mR%RPqeu
zoH{W>tXAjl<pt4hesJj9Xin9uwMSp_r$X1<s=8ORP+Am`nNIL`6BGqKEL$o=@~R)Y
zE2ei^e&t<%(X4;nUYeqE9Yr2IBfV_E#<Lp|fzj)TEA9Wi5}tI9Cx?=QpH7x2=fMWz
zF9#7EO2cx8xr0Z|(**i68gK|qQo?&<7~R7TR&yH5$?TyNm1R1x<zxS}HvK8!3R=Yq
z81a6|M|Rs?>ynbi=3=rGv;~*wXjDgi4#<o9&_qM%o&oN-oL>cGFne1aqQADo)@TQC
zE(`c{y^k+M9`da?6bV3e3K2495eeuSyh?b)UVXqkcutJ|sv_&d)m3BoF8yW=_~^b|
zd);%sy(9X+h57vtSp7Gc{!eF(h3)^r>VHl$viz?`8K<?Uoi@jidoHO@Fqp)mnXta>
zmI;~~^oob9xls<Qle&%rCF6uKz}kQ$wNAS~)ShC_a}54SN^fw5B_Xy*$t$=kysjF&
zPTdZbM!mgBeDfLPzL~f_d_tq<qCBtq$oXYtXC2g<Jtj6@g7v1+D;$xCC-{>YN}64w
z)~?H${X!7mbw)Ym6cc|LwQ${EEZ*4dXuMsoyOw}~LCdwx9w}&|&2z<!UF{EjUKQt3
z9>M&bPDm3sB>Q_9X)oYQByjr7fw}Oq4C8}@R*t?~7_TZ~Gq4!<5SR6!Stjk91FcqL
z_0Ut*YEWttk9k>gGbW;?c2q-D$x-`hL_Ew|qKEOGgp1BFBjDHm<#B)fy*#`->Q%%q
zS0MXMSNl3d#wMfu{9PUQxPN^$sgO#z<J0cx%@;15QLJ?4+tKCW&HC>8(i&hfA~NAa
z|5?MO2H}L`ATF;(geR9shlIh9*+LZAvTifsCALv=K3+oaD3_rmz#@G!QGs-dzM%T)
zr{<E>r4)01`<Room&lR(x>xd(bF|mYzkBrko#e8~?K2l0yM%?uBtJ;T?NXv0aAUa|
zu=L*TfT5X4O}uf(ln<DBnk_{XhZuXQme~7Bl0f-4s^}f8ax*$W`r^=E(n2NKqnYHp
zzT_!(@@HC4tN(ALo%Dr|o@(sOI(XDPSrjC(zl8hG$>}7bJlv2f<iS#Wd?1U`#l+jW
zwkM-#<w2a)U%hM{9g&LE?s-bWc_x^qY@%zk6EZRJbl0r_izrKo@MH1A=l5X8-A}P0
z1Hr<3OEO}3m#n$;<yfVWuRm!wuOY6Nr0Kh-&lPc&DfS%8q|`1`q7O{i(arn3_t_h~
zg+f*fzbloKQb@vYCOZw7G!x${8D?I8w>k(Spagkg5fL}@bx_T8m(b~{dE@C+Kd>A^
z$oCG?N?-()qX~PV-s9LuLiDv5al(DsST?u45RsI>`Jn7Lu<Y8z;Lo{sTWpnH_rmQu
z*V*X7D9CRq@|07+!&jS%X!khJx?09~$Hc~3<d_*#W78Hu!w29?4T&B_MFJF6-@J3|
zJ3%neV6K6nGd$;|*gryDe0QWHA?F=&;Nf0(I4jX_XgJZ%39y##bKDNcjC;cOb>5>P
zJS8P=J~s?4Vj5BWw??jNYvhs0%6FbuyaRpHZ_%&y7SRQGJfN9b;-0>(vOs=HM1B{j
z;uXDBp76_)f+`#}M-@2-;-U{W1dx`|iEbECV;r-G2>fjtuca6iI06Ce&8LnwlG5M7
z#Wlo0QDvK7WnznVd6HP5E#-`JXmDsuqwM4`K$(a2)NRPStfQ4Fp!am}%FQsoBO$Xy
z9ob*87D@M*Uq{WcCfjr^=>G2AM3DuTlRTJG%bW}y^-(1~p%ug16WoS^mYMG~+pJ~k
z>CjBKFo1dfBt2$)UcM+xl)5X6Coq10rM&*QK=1hz9YhokO11UpBCP~SD7`WRXix(>
zp0Q`SofFNh8z3YO?juTI%IVB!9*y4$Ffbd=v<5l7IMdB4srcDj)1OhrSIsf;_rI6Z
zLMOpuI~BmY+vsYn&?L9}koBTwub-&5vEv4NREMHjV5=b~TPfCD*<5hR!$2kBN8X-l
z3{L@n=CeRhi6R>|Ro@GnzyNI;u3Vx8{Hge08`vEtS3)`d*24HJ1JDjT{w`sb5GGJ_
zG~bV;Y@ii01olVF@J1>eVD?!9(AAUrEI0^4L;Y*WB?RM$amnj&y!r!OR{V2_ld;q~
z1)>Az2M8b+z33agEW)f1U@W*GkAyMa)90?S_*Ca$6lCe_tEQC5Oyg6r(TkTg<w@w!
z4=2P~cZS`sCDGAngvAy~7TNSh7o*sVF>h|FfS_4r9ih^1GD$8u6{^VPvNH)mf7cvv
zT?}(TPazQoDEQ$GF?rj=y75GTXiyqoNlEBIb?jyRWhA>D_cCDsB)OWg;PThf9!won
zI{(=&^$7>v*f{5xg3ez1>oFFtZ{PYIxlK}3@}gvwRNQ?UjD&#qpc_r|t}es&7nsCG
zqOX@W8lUhKRg7@n`H2V8ic6h*7@e`ckk$><5eiF`S9~k%F~T1jpDdL>fPwcedQRU(
zl0{2dspcEeFew<%+*m%avFu?UB$M!UU<!DrxM*hKFfk<R53BOJ)}~|H65_}78E7u-
z3Z6-z_2)QjCyc0a!{Fj|7s{|QVkQv~#dVR|mK_;!L0z~>^91bt@N_ej$Vnf4o4Vj5
zO$(EN`$ja_sIpW^EM}7cc!pNN!Th``6NxY;`t!tNZMZReyqL2T)kEmB1F&>yq|!Os
z7leChpY4h=lp>2;bKopQGjc1}TvBNAVHB?JqHdWxW=og-Z$N%S8?yjJd98o9S-T4i
z-xK<*AwgEndy6J!^`VI-ez%?NC0)o%l1`|j#r@tBL0_?~>u>Yn9Ff1|!}}#zGW#0}
zKdAl*dq+qRff-ya){1&FvR6>k9+Z~^8~mXvtG8G=LS*Zfbb&kAG%IKYD`6fdTCb!?
z{h9{LV26F?1(qMECzS2%Up!dqcWj(2pAb4L>fq{;v<R#t%5%v$W>dPV8{H}>-{as#
z!GEC5k@)o!drN}{q%95=L4u=e5FoFq*b51tPT<V;BZ~igp-R(QE(6HNc2&~=Xluk1
zPjl+veu9lm9^-rk<x4ugl^+G*bN(@d*T9WXRw2Vv-Agd}Clnt{!C45yWjokj%^pz?
z+*f7Q`9~#8=9hQvWLPVCw};MPbLf=n!>!t~-gA+X8Hi$-NmHq$G6Mo=SsqZ5nA}Zk
z6^*wOYI=T|r_EWZ$<J-RfBJNcst;wlOSfVI3<0<{?$zk8=pz0P=2!a1g+}&CVT57@
z==U39A>X~y(V#h!C^!$P)Q~Uqd|qoI#$&dN)6^M|+{oO8-N@6ACCTd)!;UrBNm>L%
znh8<5%$;L@aiz@SJkrzW(Qz~5fL%<ya$z!P8>;6)V>XDJ7Wr3uy}bsEN}CAd2xSlY
z5(wF&Cw1kWVfPW}M(*Bb^)=8cz*UBC`j<Gb-EZ|kyVFYO_ye<rj3*`H3x_fOWIjV=
z{9(61eeNp9@JHZfl?@yks)r|dTNag_-5XTkRB1hH<SGc~-|q5rAwk_TF1VsP{9{OG
z^|>9qFYdQz>)kpx7^Zo4PH+w-T*r+M)`3T#ud|yw^>Z=hlO;TEETeAsL}r}*mwt7#
z*)Wk;#XJPgMe8_^Du|(9R}>HNhnm`NH>Gd`XoTEsp9yx|!BFY-^AV<N0ILabxQ?;1
zQD5z#SRQiHy^jy+h9yoa;HR2lmVxkzVLD?zsEVz)zrJ~iD8SX&sC3Dh*55XcrtJHB
z*iIsT$O)xihIiwX=L0<*1OLf?ftt7iq+_Oj{!3`hVhl&(Vk9G=!fD1i7?7!Lb+39G
z*MDMm(NlW3R}j3OACADJ;!0G1Mdp-eN>n2w-iB9HxYyBg6Pz(4$8Ok$&_3H>p(aS!
z0V*wqdoNIZ+@PeojJHjxBz(sJYM|DxxCS7I5aLvOeP8wE4C}9ZAOJ{?vW6MCiNfZ%
z-6rXf@SRNAv}GH>Q5T~7T<Z1oW_?>H06)H}oP6gc?22aD8=9rhg5Pyk3>i(5o<GW$
z#x6;3@n-OR(NyOJcz3H)!29=%+Hi@?qOjw#hdX@VkiZ1R(U~%jlPHAaG@y%-lotZ4
zfNq_-_y>pCiRJ>uu^shs$=jxkmP8_zkJRms0LCHeqtO0lNv3zJZr^V9xh={H$=tNW
zQV&ejXAa$8xazBWS3){|d|7eVICc%?>eNykpWt=-Z1R$lq-b?*?dFVf4L`-sa_D2J
zBCKlQt~wj5zh516c$~fP{Op@Nt}kz1`#Ar3W|jMOc<!<~>E)iRzxO<TFzsD${9KN_
z>>l2?o~7MonD8^WJ~eV}>Y~~3V^nWA4RoEg3~2Oy@ESDq)PJ{Y>h`1lWR;nIQ=oHg
z{y~*_r%jC*Vk=`@4XxdFYcqV>rHgot8SXl9#1-v(SrU)Z%q~NY5)mWO^EoT-cso7J
z{KeAdKRxc>(d$fCxGj(Wcgi{oM9i^s^0DxGtwtc&a^^iW)QOc;X-lqc#Hz{%uN;FJ
z==MVxlE4Ms`Mex3B;>T09f}C2qR@&6=^*YqdEI1(_)5+;si(wPcRTJnzx3#mbwFY%
z?GRJ-6;|PBxnI$TDKZ_r&%`{{rPmIW-pL}sMRzg=r*(%vXv9vzFIYa3xNEHE$%OZ~
z)A9HZS?t$Q_LJmM(@^08OZk`=2+CS$|BBaNlAp#~=hR(o9{!eos4Eb~cif0laE|if
z?yLqGeu|YjjxaL~ce_#0<#h;pNH|9$#mnHn9YcTOLKAIBs*H6pV4Q2DinnF1KZ?`@
zdCDq3iNcLGmEjR2l1sp9?kpYN?6l*`(MGWYHSM3$BgKKuX0tiT)~p*vu+x`?>q;7;
z+jDv$tRT^1A8C64g)22YBqKEWIhW|M&1p;!Rj1Ll1?^=F0#Ap8@f{I8>bm^`DIVO~
z8h;ME01w51X<35T?%Cwy{$S183-hddWwcI|Lg7$P{rx?PG<(Ifut*ZNq)71Z<Fo{2
z3n-8YtH?%b>@3Sb-;~?-I#pJ7weJSU*PQPxOVj;IW(w-e9@p1crLzv6f6Tk1#U8IZ
zqubJ;!0C;;Hs#`=63jrKtWEVGVrJ8h8{Z4sLukTbwDaCn|K)Xuh0M^;Wb7MUJ$RVB
zSpEcb#HeUthrKATywLrksL0-OsZjY)d}+3W50uR<hb#|7{>XAOD`c*s{E@H8$W`Gc
z5G8{ZQ@zTqO?V!ny*cHtzrZiBdN;`L|Fr1;oATsfW&VE_<^CT{K31mxO_Q%!OV4?e
z1H*T<wom5_AC|c9*5zZ4;+!Iz>}Eu|gLg(gjDk3lT8xIwbbZ$M+2H=~miN7oe^Rzd
zX=3_XiQwMB-j?%hNDopj%fX?*cjFp^k5lto!=DH0d4UM}ch6?cgEF;xj}QKSMD@!M
zukiTbL^8N>tIoTP%fw~#G_Vm<HmC-+VB|`tefG(p1}v+ur}Ix)g+9~_Fn$%0|Kre$
zx;uW)^HNl&&_XSgMXIPJECaufdwkDK&QIMLH$042!ve|Pdv_9L!!qEgbL7dmPd2D=
zmVd`-pPxT1wVRcn)mR+1?}a#aMpC{w#fLstV=lv{SQW%FBgc7<*;EzJ*Dg6kd436g
zwmJUubn@)7OQ+?*G`Hg=!vR_1Z)HF(7H}%(=?LHd5MV9v$kMZk2eBCd?Ys@>zPSeB
zIZv5x2B}BNar$ha*xCgz3KP0Eo1qEI;&HAztJl!6Ww&AJ?qwOY9!s{~3GN3+y_E)-
zlXQgu<MXylzuwK}ZK4VDhdE=I{vIulzu5rCe#j}cEmv2qy*_^mrHYtcpnejZVSWuz
z#;(PEGD(sQmXl`h_LeRBQ?~H}QI*&S$^B(m7QrtwFY|LG;e&vFx$E~t^E2igVbR8+
zbao}InpZhy)qgXv{^UhkDMLH?=atHFZgMYtBy2VnIZeEHtEg|TYezv*!AGX+v};)A
zN&Qt2EuFZ~sR|-yEpYEh&h6Mr33`+_c6V{X<H=C&g#9<3RR(u8A&De_X6l9Q4Ck=N
zP*AiY9HxdYETYeg&3KT1>%kC3*;S)KQ8B=Nrrp>lKxQLaW-$+z)bdz?r_Q$@)N~Zg
zj>^<~4wA+c?=YW;xB9=CN!J{;I18=Axs?7Xx0C^t5EX*p>h$P`(k5GMq47?iB^{m|
z)6zu9tyYd2uwvs(>C7mh^>ohI*c8qj8_4{MV{y!s68nQFaRAFJxL8)#9Z>2@dH=HQ
z3&Fb}Bjf@o)2S*2gTW8xY0U%p<d5aqE<f`@XhG5iE@qgG*JV?BlL}hfK(?N$PzH@J
z&56PjqHO9&__wGJs<<}TB1AKRx_3o*+|<*gt^`p-AxY529m5H=5j-dBo4&Ap&?jzu
z&ttqlFmF*_d#({B<N>3LOCb+~Agpxu(hDoaXaDF3Q5fuC&~4=K<IcR&tGv0&<#v+)
zGb^D)!*!7MQP^eZ7y6K_xAV+Yi42y&$pzSFYku(aj!Scx5SRCOubvOGWq(3!2n=}B
zM26DJdqb@9f1~p3rf9v+!INhh%lqfJRyd^x=Lb+oM#75-wjah0j-vKtv)Usl4Yo{S
zgNu+tnPJYwt1L`+h;Vz1jSL$4Kx;0E7y9dQpSjIT(X54Zh|db*rr9c{Z@=M3RQnf{
ze%S|nD(IiW&;Tv(8c}(MACjlkaoa6gm=otJM6g4VUUOzQG(YLHuZq0cEyN$yt1wMW
zSLm>>3>q1@6w3lSfDzloo2p)4UDVZZoson-9#SD%R!TDx9Sc~&(QD$|>&TJXj|gT^
zb|E4vL;8jx4dxKedaxwA0H0iO*UjeWds4_lRm?e<<UU}y32gJ@c7C_IKRk~JGSqyG
zgvx+ieaG*_v1AyQbatT}XukuIdJb|`zSxl~FsI_H_YQ7HQZq$NQYl0cikyXQr@s>z
z3jMc_Fx1d2ATn94{VuNs^Ig9}l2mm45ZIp{*Gcc7&$FMP5`y4VZ2l&59}PA2j06VZ
zh+_A~%8`e5`^H3Ulg`wo?E_brPZi<&#%ed9x9_TgNGETPa{~NNNL!FXoaWe;iY}gy
zJnIpAxtj=r>bX?w=r61>IkDt?wHRa=a3~^}Ktg5JkK?|S{1_aEAqb20Ub{Qw2$Ttq
z`gNRZom;1vhW1sbRon2~yn$;wi>fl;<2HgWEExQJ`j_J57^{%!kt2*b2#>Spz}_tz
zOgG=satd4Z=a25+Y>i(=jrprfZOT_itJv%y>1!lRXn@0yot5*ZfvRtS8dO#KF$<Af
zF@kh|sVe*s;~*I}DOmWJOHW|{<FGa}+eDX-!KA2!QS_$GSci2hRL@4W{Xr``kP)lZ
zLAGyGIPiCjpV!am``?+}tnbIzRz{858GYGH=Er(w7LkyuMC>H}OxsnpRSun|yb8(E
zIXF?{5%Bbc_O8k}XMs4YYIN(}C!@F!QMEw2d?A2yGz1V^1P;(O$2E3^pVLY_VBw#K
zs<rfpITt-PSJu@21Wl{vdmXt5@Y0%riAqQ*iK(;TGmi@W;1t|orB9L$Kqby>QCH9k
zPEThtc=-cXPqLHHP4M|%w>0XQUp35T%SHgtc7>Sa=y(g+KUBN!CPV8LrhMe;Qmk`(
z0F5vEbtel_P!O{6^SQ|hBq`qY$jbgvY6>fQ8ocSwdO7J{wEv@UWMK;CWp+J__j1jP
zDf{1H(P<tS%HF;kWhS892geT3>RCE9py@jC2C|g*Ob5lb26&T(!()o7HWXD_$~vrw
z2{>jycd_LT9ox*Ru!4JBN4}#bGu|U%Y-P3fGZs<n@ezV3V~v;2%M7sCPPNKeT~;HV
zqhI~BEqq?kvn9#i-P;Ixm7=ViQn46w<e)Dl5`vx_IXM4T-CR0wnWEDa@{SchD;q=5
z_0sF#)imZ=ZZ>A-dQvp%8$JcS+C$MMcG5bX&UL!FmlsSVF=xy))DehEf3<pki55Tq
z_ks$D`1xR7%QfDiv-MatUh?dQe0n4Z{zk|TYk2-iJtYe+`h@t({cQ2{;Hz7|$k|_g
zY;+fwh)Mky(3)_eZE*JkMD*2wDMySd(zBy4trH`kJT4_5LI|s-c{B_GiO+%lrQC$i
z^`y5+6%;s1PF#3I9<#{0UpW{1ti8+BpF`J28CcEq?yM;1@5#07Cp%ERrZ4Pm&Z8c1
z{EIbj?tC>8SxJ(rO<P-ww};249xvb+A@Fp*Md4u3W=hmtk#f1>SzN_65}wyGhh_9n
z@dSdkQ#9W)Jm%z|rloMYjKZ1MpU3Zc&)8_9#hP!*Gu=*vj0I*}QF;^VkuD|cO3?+0
zLh($YG2rDxX$|g-I$(UF_6qT&+U4Oi2YG_rvhv)v@)@JOm;gKDd}B7r(T>6wcU|?b
z;E|fP<o7rMS+6Jbt4`uGSxV$eEYdz+f?CK!+2j9@v2$t?CE&7b*|u%lwr$(CZPzXH
zmTlX%ZQJJD?wIL$_+I)aWJE^BI_K=Qa~6=H0kCvQUc*dX*%(0>o!2JK2{%wDm^3d+
z@MNdA4DXFw4r0BG|Jt-%$Sg1stSRmJi7jl9DWm^=UQc&>>XAh#5`#M}0DL2n&_*Ng
zXgsQ8<pqcKQvvo<Py<T&VGHgIgoXEELD7%B&zNJoPvr6bYk2nKMwGWDjXpmJC_Y61
zoW#F^DOzz%S0MWQbA>l7zvI5GAJm)FJWiKNRNrN}*te#qGNNDd;cegJ<n>R5GL?z<
z1F&U%?7YU9Ude`0Wxf@KRxl&N66@)`fXWJwf>=gZ09LgUXQLFLY!$EX5Y;)OSj){V
zV#m5Wj>oC3@)e;uQLT^$N~d_iEsc1VNo=Bx5-QS|E`WwQ+%@5gY-}rw+R;;n#LPkH
zY}e|+1C+w3`2}WLYgJO5^v*a&3U9TTU8zN$OJ~W1Scn~?TYB|aLA1)w?6h-wn|t~w
zDQa(W#^2Bop^}bIR&)i*de(!4PN7r3Ye#B(Qt7g+wTg8}(i-K<ch%K)6T+rLV!)nr
zZr_}J|5cyNFr+tZ#i<;Iye&)8*b8tw?fbY+T{EVgT%leOV0~R3kfr#1g)-~Yn00%o
zdI*z`&r$2|V}eMBwaMiJ{kvO#@~0l8|3L5mM(Y1M12J*1u>C*uW@i3R^k(_rpm(+A
zW*m0=e+gE1w%Yv>n<l%!Z-%Rv06T9D^`NKyJKz<fu^WXwZR@<ogk$(`>QC|I2gUZ8
zk?dne0NRVPsL`sY*%b#qgnXt$qxhfxdNn>yogWQGAC&dK$E5F`of~@<wml#Bx<T|U
z;VJJ(#E|5Y7=LWrA1*$hUzjlhT`^&UXkZP8-FhD?VmFSrA$Nb?=o-O1gp&Hq%^;(R
zutpKr`Kr3)^*$_RcMhylhghJ98%I{{`MU^fMVFy%uQzCKg7e4z#p~|J+6>Vc%+zgy
z7>WfY*aWLq%W7yVHmRxIKI09H>EW$UybJhU4X$6WYb#Oo>@ik%ckxISMc1=QIG1cG
zxf;@_?4xtGk_w2n73pvc2urs#e??u4$dgI%S1?QYqK)OVy~>~13WXs{^ZypVXh@yt
zDykRpO#yS*ATo`G%;HBIoY?5xEW182UC<YZ*AAdFIQS15Wo8mziFBG#K7W%u9}U<?
z)c1p#Qm(f5!mSF=<4P{7d#*zJ(o9J#3cO9dYoICTwhiL^bU08HN{%!R_58ejeu+$l
z>wv!$m%U8t6eT;pe(3+|`J~NLoUD5U3H%jk`m<y@@4A<7ak+!BeaBGZhsLFo?(5k7
zC#Qq3*kVurE?}(Te1@b}-dD4~upp^;K@gy6Ppcau4S7qFl_(9H6nh?O?OseA#LdIB
zJtP`7Wcov@#(yp$f?+ojJ{>E-p*DZa(j>2MF;V6^4Uib2!39K6f3POmCO*^&l6pAf
ziX>48wP83M<bEgMR9Ci7p0rkA&_hO(p<v{*>cR@o792G;!QJ0mZXlifX!X^8x6L;+
zQ$hO53f#{ZXABN@a9!~G(pZmk<PZVG_+af=X*sPB#XIIKC7i7tAZ)4tb3ln5ti^Y+
zNr|#N;b~}tp!$V5&#`1XMgUfq53hsqtd0N|!Y^cT#h}QSLI4XS0kFVoImE|WwY3S0
zj0K0~IA0IkQEGo_Cx0<yN&7B>j2La`rYIQ13B!W3$w}>1chP;dD!w$iS0@wlwDZPC
z_A?NSCzeqKzx(ejND2xG#WCihlb7)WG&u7nQiK_>#>$dXUn0`nZqCe`v@*47z#>{S
z+gbY=<DSJxc5=y9a^5^e9@5^$)qu0$1XkICP#6Qu5kRt`BowBDDOA-^nBE1%row|(
zDmNr&8GO->FW5ILOA5K>M1`_kR1T`U7d1vT2eum*`2`dou&10TseKF(+A<!ECFs&T
z`@CQC#?SE~jM*pFjP|lX_#l=N6eUC#Fb7LW!yt2D9S=_QR|H}xS9HFkYfvMIp)nza
z7(~I=J8;yDF;y5(RUobAiSu5f<Xf@?;_*BViGLB32Yt^|s3}vcOo=0d!oHqN*%X-y
zpI{R~GjyKOw|tIAK0E@+QwDi1TB3O=(3*4mRsId1@b4UTWkif4R+|tJy|KaDQhw<(
zVUQ9EFDZ*4Lf*Zih2Q6=^n+Tdi(yz}U`!iXZKZvyueB7hNn;8^9a;lW9oSXU>#e>e
zte9m$bILXB9xdPc=8w_&Z1U_*F{6EW4@2Jg8Xo}E&8<xs5G=vp4!@bCQ$iWa7q}j1
zWLuN=7(h0@{Mqos{Ft^aY>TiZ{04S;-xH;c@k!h$iIIQTk@t+@lt*3wWXIHR$)3(^
z8>7Es8YtkJ#({|$ud!3n_5zZEe%|+)KHTRtE(K)@UyPuKn6y3ND=(5Z?tiwXE3s9|
zDU9TDggV=KlKes}WtjOO(jVn9DQOjSpw74vsPdv)Sv$hl7}M7=-Y1AM$%Oq_IDV}u
z@95rvxR`5>8m{qxgS1(J0M*fUoh%%4r(uE0gT$+0%l8GU80qKgzXQ7<nCu`VgPg4W
zTARHynDC6bUwh4I7i?>(DOZ>!GBe3y!+kW6hfB;^W{h(*Lg++%qj9=$9m6&DY?5T6
zJUg%4F+<znm0rm2>?to{`ZDV8c}nD&NZYKvmwEFP9g@T&9}Dd|3tfrhY*fAk129Bp
zG&qH?|BB6ouh?x-E?X;rjxMFv5#CfqZ9)ySb7N=VphxTw@k>!epN3-3cvWeWOq1Wf
z%QMVc<yrVhlx-_miT_ws2oUn;G*JwC-mcO-m}uk7%pK^jPI5-)(*IkKB)}4-Mw5G*
ztjc<ju%w`o1UZx%ySF!`$y$`B!J0@J)+_|R^-S>oT4JfGV8Q^%;Ag}F(c!2YI1{EU
zU4x=H#>C}V5x}A`i*LiOv{q9vI%C+tbQL7PZzHY?g0!j^B&%oR^)Q|sfm0yNbvuu0
zUT0nhPd_T|Pw#hw8Z9MlnfM8jA5EYyl7O&FtO2}Rn|<(LMsV6$h_ztkjF(P>J^jS}
zVSmmXo%3P10sMPUO!L~|boC8f)>Y4+5NcXJUJ02;@HxPelwKWdQ{P-s&%8Y;rsfqB
zxOhQ^)Hxag`Ur<E9MTOHV=lmA0tS-J=k&}3&f8R<!nX_3_Aw7HFQZFnQT_6nCUj1>
z8c1W9E*X>7j_wI$>5O6tBN)E9^2xWlrp9!ecn22G!VndU>!DrNi5-!W%N{USlw6>+
zxM27)AsX7v34+Q4{ajYa%lw@QW(^D0H`qDR#}^PVwC*5}v<7vjfZ3jW;?`g7Bm+*p
z{VMfns=k_Yp*7D#2(56PbZZI3);w7A%QInR2lR1G0EwrbnhzIulIJsQcqT#6%g0yp
zsh}&wJVe>WeNJ{bt5}wJx1fUnx`rs*V@*^RPL!V-ORwVOPm?!`P7*7qu$?knNFp14
zSpe8*h6LYe;J6~-4jxzZbj$^@pWZhmY{*w4u<#vHB=K*n-<&jYfn>s$;lh!B3~(TW
zl@L1h36(z}A?Ykh5S}=@1#HTKW&T?$uN!~VjfW?Ti>w>2t{SoF6|VG~KGW)2j?b-S
znWjv^o<xL{;j{M!l+@7Ela4OOD@DzCn*+pfz~!W1W_^S=W`2Mx5_nxNl!ipHw#@}W
zgvC&syW{h=1Yc-kF;qqC&<TWctt(l0bPQMyYoP247nKM14M~6I!gJ+=uarxY<ek^o
zgewXe1_d#GF7sl$O*6{KV@Q1s><oWq1nvcTOSl(pH*f+G(@7`x)Ye7K@T4_mW_#5&
znsHjr{W4*uctfe@zP1T!k&RU9xTp<Q?uvSg*2C7^xu9hN8$g%`rk+)>(RV4UdG!i_
z*B3i>du3O{8z7%$nd0v47RoX03!0+qygN9Vw_kzCg07U`86~)g#bCQpaZh82p{qN&
zUkcS=WQ!7xsVDeQ*}c%0Ee>O!EwY)f1TPNmA^eL#h)-)M^Jsxj>m_bY!7qeSx3(s`
z*-`oU!LoC>7PwQEX=A$^F)zAXlO&1T%qq_YBhe5kO#NZcFH_@T7&kj&cm<2^ZH_@6
z{_|%);y9}hbk2Q{MK#OYo$UuR%-G)ex6Rr9_d&===f$Y=1N`d?JUx*!@IL|czrgap
z0hE>V{{!fM8ve}xE5m<SYujm20<C9O`DuGh+cCaFyBFQNzRyOrC7>?GkPe2mc<ovw
zn#PlabL0``j>2!0x75EV)rK6f<X<2iqJHW0mwT7<nm<Aw^Zq{m-Mzl&Zv1)}A6@1<
zHQgW0`oYGHak$hhI{NSK$XmaSYreh_$q5M@5R<mP$MUzy3qJ=)u5>wqB~l-9<8i3E
zTvnE-_FgG}uk17+Pf7h<hF?f1VQfLdlpFdEIQ=^V;p!VpG%*%fzTb%Y-yVNiJ=0@0
z<x<?rVP6gk7W=OVF)dh95fDgJz>Fve{&erg&Mv~`lIhAnee##K&=)A)MC3GimPlYb
zr=s<?596cj{>f2<RDErED@atyw6A}zxIi_fd{3N-dF^kToMJS?p)bU@Ps2}zw>2ez
zQ%g=3t90Ua<1C<FHe2DNuj&$9xp_zsl1aCPU0jA#?gE(PN*vS{z>hk*lUUo;ZY=Il
zXZ8?ljwy)m_~{kTa%k9+{^A7gDbilb=A_vQGdU@rI*Hy1Hl)fXZA&evfruo4;^?D3
zXjGQ1j&XO5#+(192RD5}KJsd^=lwfD2~^EH*pUtn629@vOk<PKtE+a;s3eSHoh>Fq
zvB0LF)gPkYzCTy0|9X8NtmeDxmNRqMsiKOq?u%W~(c4QBqff+|P-cnd>`D;3cZWr=
z-Tke){v&njdkTId{6bdxutO&5$&vUdG}ks;Vb-~>;<~Aztg|mMmOPp*)cjha*L#c1
zQTKk`{qwzQwYjscvgst5i~SrPlwSvaV}Zl%jy%V8tazaMOx_TzMWAU3i+?$kXA{c$
z<>)G=C7>yyyH3-{);TVa1f%Te?oPFh;Xwe23x8y~g9oY=jCB!8>I52pq?!0jiH)j2
zefsB!`cEqakyE$jt4B<pWWf@=puh9nR-rm_;t&Acfc7~`T{<H6c8>8l?uGsmllIMc
zY;yY4ztsV$MM9-U043nDu2O|nt~VLPMN9*cQ!z73L>DT_DZy*}g#8VxJF43DP1~N_
zil?cd4k#-Q!CtqEQ#v`X+v;okN5rK{KnLoIEO!<8-w!_?2V{cUv%u|Vlw=ob>7=`0
zhSG$ffoe+!3E)7koN2g|SSQS%8TL&g>*I_}BLoq&AJX^EIj)NfQ$+z{^pq1~>=fm%
z9@47DZ$ZDAEJZe9JhJYH_(EZ!Opb62P`Gs`&Ip^`zrsV<;`_{uD?O>lM4K|3-(s2g
zkJAdRmJ?<1xRV@z=Rt@9NnddqdQ;LZi=BJ~K-K>xJH|ZioDEygzHx;--_@9rubH$b
z8%qSXl<rBS#k#qQQy16Bu-(fbz(`hdy1xtgaso_dXeUVSh&Qqe+o|qLVz*3KISeGB
zASlY!inddWmx>~p!EW7M;dAF1LW8iR>ew>`fL_o*1^WAdr_h_MG5L-(jK*b_xtU91
zNO3nA<CDqa?%cI+^8r^x%%Zs$Y>tS2fhMd-BctAG3I%vufxD#E`#8lh2~l+F0V@O%
zSZ*dtrlq$RYj<28Y+Ip|Pbzc*YQ9o|Rp&<nqP^{wcLZtUDgwll!-;rxr3C&>WTi9b
znH^JJy^dIrNn8RWcf26SEyF(nFo0!aLd9%h8z7LDfrNi8$9R%A4dlnAh%P%SP!S5y
zsC;meW7|MYKC-Zx=>{G_P&^n&Y9zef*qf5HEx3(MHzkEi76QZK5R|Moy;4(#c7T1M
zU}n_KC*U8V#jdy~;+aWoON`gpC{ceO7ezYdU)w3erJ#EOg&tGfMkR~@OiIaj@n`qP
zA*AHBSystp(-g>|Wwr9zFJ&-Xw<+ZT7Q9@Z^#0i}6uF7?0UOU(zudf0h2RRAW-9HF
zb(t;z)`i3&@O3^sy)ON3qiOB#(bp=VG-x|?o4++0mt$WHfsS?@(`!WGFK~geO5{xn
zH@bv8dbfbj+yq#mxFtOOVWA8$z1lZ<@>5qZGQRm)t9e^#R2GL$t*k;S)&`Kl_w?tp
zilcc_z&H#W`9}~MO7f99C;+uDfgIsLfxtkgfAH3H%$o?))>}1KVizqUq$P0apa_o-
zDMLZCKW>sAN}P0aUq~A5#v8kI3WQ1{ad~c#VtSLd4darqtFL#*?xW0{1!%)Ssgz0w
zPVrz`+(J61(KQ)WC-}qE5oI_uJXY2*u(sQyrErCp7;!1F*?{?d6h1I;0RWO}05&dQ
zD1^Q|f7jsayWo5rR8IHZjp6Tt?qHS!&|q%)Vy%iIB>hY{Gvn#w>cJ0To;mM&s1^z#
zmE%94Y?7-P`1<=c!WRGuWQ8$WLYM)Ln(~po8Om^eW4;|c?&`j)u>~Rw!n*|%_(CH%
zG5|%GAxAk+o$m!^7)>T;A{g)TPfjRJBB?CHd#p}{c(}@zAXznhzg@SE`WJRnM~DAi
zpo2dbC+x94Sw`G#g1S;J4Pk|HxvxKWaNon5SKAm(5v-wa0<gj83<0n#t6+?G3mg#^
z$0XMXbN+=;PQcehAehfNxe~?Z7tcj5v~2>CN6<$}s}J29%AB{|bChm8f#V5qbT@Id
z=m*llEaf5b82of5fn9Jl{aEC)o3&#}+3>%RiIW&V5R-7j5X+SK8Xt@p?QpX#dRb0?
zI?Hf|2@MzgnmfFAxJ~P#`6ana0EfDr&y0(^w@)UM@PO5Fp8n;=+^IOi4X59#Hd*lC
ztb*P7?PdbpX14nVvA!3J!XrkJ<F?gSzMbSf$0uG_RH;WL3kENVmg@6?|IHgHS2i10
zG6ngYIFa(so8Ri7M3NLj_UtdY0My3%JfNn4u{}l*EQ%Yr4uQ;JL?>P*d`3n!)N%sY
zH+<}v$waxHCR_?LbA~}R=l7EQK@FYY5%9%cTc~~#?Tx8|el-_Qq)y)2>H5#U5t$cQ
zQZ;HL4%A$M_r<|Uqc+YlKq)ytAfoo{a%n|W(cOA~DEA4}uR~F|G@7sKt=QR=A`hR1
zSr#Pf1IlydMPho-tvt(46GDM=Neo*xpp|^_p<uw@0Nba*uNg7!)Hm@KS-9#MDH<Wc
zh0xyXS50m|y4wH}B9T|1m%b0Sm!W~^6w(OPltnwn!6|e=<U>?9aqr-ayJ<Ikl+T7g
zRN~3<@(_$9Ozw)zy5vzVgoe-NbYos*aUu27{(Rt^UBO-iOZlds*?~A<pY8YeF%_C!
zdo&Ya$Yku3H6<6uQahtBjIP75guDhb70pn<!PuLMIo`<+_Z4k$S))hE!#UwC$mxPT
zuj(YWZvi~ZhzV3%dB3C$oxk67?PTakrz|>2j?=FjHHn9+&HS}%kmDa@7w$^BNWG>}
z8|Zkho=A5m^L4QKR0^I{S9(mRSeYL}Jsp4Ubii2GRWpxPTY<f)dCpHenbF;Dwzqme
zc4n6gy2|=)lWzne7=7XUZLAF8-qkMp*lRCLe7|OHA8U!ly%}|{*+XC`(TB_Ka0?y7
zze_F8tsAP05?VRTCjg>>vGE!-D68yAv=y#lZ@7{W#R)qBB7PdY0XnRlkKLTCQ+Pr^
z${MV|b>xW!z#}mZRDGr#{T#1|&)yTr(?$jIh1XqeSXaqZ;(m|5*srM%?%$SAVtB#=
z4uC8z4E@?#1RSoED2tHSJp=)LNEIl)QA`AKA=;ca00ub79vSv+zGmuiU<h_66d~wM
zDXv;}l@MdY+*>u$HhG@w-tZ^NpVwUF(rI?;Y3naL<D_HN$6~C^vqTWW000Xl7N0>X
zOFC8RU)=)jZsSHd@r8m_35Dzh1)?ZVHlw`ky$aF}UGfP%+41QO9eP`%Z;bvO`1=dY
zB2RPjpY;7-RQ-R~zyH&(#qyteHOv1>uWr`b{Iki1<oowu@}jH)Q3#-`#0uYM+|HCb
zvb*KVH(k<J5yfmMoyb(rOzn5iXX5M74VVN#DXpG5>mk@S5(I0zRQ|8s8S_0QG2hQW
z5OG)MYw!K=8D1(id86J<OslLU<!hd(?eRxHM6c|m{zf8ZBzHteSiYI4#7C>#HAM8F
zD;6q}1dy*{Q`c*@S@l#uXx;6V4hQv+G2UnXhJY5v5+&5+)$?rCbLu3pzq3RWXMqv=
zj;ZbWexrUTt^AOwcC+~xzQ}j*IGoienpVh)Aju;lkVY)0_v=`!Wn}9ZD3u%wU(L<^
z=vk9NM<aY51;>b0s*zJ_D%zgxdLv?AE!vb)dfo21l~6o3?M<xyxRPFU6LDyu>quR4
z7cqNJO@8)GG$(y89P#xS=$AYk$Lk%O1)5L_992^sn%#sSL8U1gK%d$mPUgk;^O7C6
z(r)^g%g=Kh8~fvU_=Rns=Bw4`=*y3Wr=j6uprAb#=EC}}WScy0|I+Z`tx4~v{rw0<
zqs$$ZEH*O0A2xUIP!~o%a`{}ywQz@3XqjAc2+2jB4#S79+cVAeXH}MX(>IoFiG=ud
zI0C*|32EN(6a4%tVPFT2O6ro>-zeqMUV}x6J{lvQ0VgU`JuPUzVXr-c%p4J!Ecl%r
zAOkD=g12eH6b^4cJtm6-bZgHnVC=*z6U6KrAs0^6iwb%KzOob<6F|TevK5=D*>J_x
zsTKSy(EQRh4Hb2~Z#L^+*~GdblCy^FTr#z{#=#;%?2HI+LH+C-$;HdGv!i%#u?^nK
zF~C|vi6j#cTR^fgRudQ+mFEtP5Qsx2K?+AkNDq6yDIktMOn<1$ytH8QI21du8dOU0
zR%!X&BIBQDGr%L^ZxN5?xDqDqK2Ie(IBz;DnmU$yTES>bBZGo80qw_*3X_@wwkz@j
zO7);(Nt!=~*J7El#tyx+BV*SWax)Q3F0;;;)$k_7s3V|9DV#zpY1_{*@6w3m30}ep
zT|HDkpM$TLC*@^a9i6+bSl~F6Ozv(m%9$D>TXYwaZoqm$>BUJP?9npHU7p7MBo;{N
z%54C6J0V^O8(w$m>+Hapaivd|Ja?Q1Rf)RFW0AH%WotK1^DU75#fau$=T1dlg1(Iy
zH#~g}#UjpAkra<(<#M}7CUMISE*C`_fY-NPWzyD=B6%&xlw?7%)~W8wKwxQ%92NCA
z*5||@!5n~+mIxwO6a+Y_aq=J}?!ZVu#xa%PZyZ%M%z0(h4N2QAU=x3AcTlX`0l|3F
zLh2yp|43`D*{vw63qn3-*gq2X=qfz4ge*`<QWqOZ7)*BAYqNk&aQH2tbqXn?pJKo$
zTX!@4D{KS?!spYbH^S1yw}!u3zMsuiBauSWJ;|;af57A*m{ooq`uAKHVOJMo19o?_
zx+QKiD|uEYq((HijHy4h3ZQ(;6Lo$h&mgp^NXae*9S8*5PTGE$RVe3DcS^{pICT4z
ziy*A?)OntFng}ofs}YUNBY?l+^BQEv-5*O_6flk$C5OzxpgS`A%c`CPdz2K?8j8%I
zY7!^tS<^TGkjZAi-=(E3lO1koNdaPoc>TD|vw2srn~7CR1)2hmhiJB=fq^MT#5Pcu
zj$a!=mm`giJ!H1=;TGe3ll=L?%6O!?S4-_H;c`OdH<fa1*R1PL(|1UI>!{q27?$NV
zeSt`-=uOBFo^)F#9sqVj5nwU^$TLnv0a0`zhB9c8#IT}P0p`M53`WovqNYi%>sU#x
zi3AL6v?TOjmBAX%v<~1v-+F3D@`~H?P4GvHWq-Ry^F1XjaKuM8GsgtSAd>hIVE5=`
zk4UT;6l`TD3a*dDsGWk-@tc@skikZce>C`CTo-9qMVkRD&DJ1*xmpx=o?T)g+|3WM
zI%#_ALW-lLqXn`6B0)PUu2Wy9i3HqWh-z<MAJ0S>L6~E=S!IVg%nf^7B_?S9V%Aw#
zPFlzOxI6>@8TRn&a6*LjGC4}9=0T!{H2c8ltToYtSKyu9fsjgn|8aSN3Xf#<Jk>1D
z2XIvbgb!ga>)8F2LT?@|*qmX9Lb?DSZAXl{<6sxyD5<9xYlR8L!FPYSHERLRJpX*5
zAn(w%2q#v?_RH#q&s^;BKeYYW{yC4|U`Y`d1G+NWjM$bjWM@1Xp|&36ky@c=Onk-k
zumt0dsi4H25Q1PlDj#1!HwDxIi{#_?jag&z>cyckH@x8GGaQ-G&29@Ub@mbT7B@EQ
z_C2IbU4rA>hZZEhT<@JhhdiU%8r}2T4dAnvT)tiD+oLeZ9*G2RlaD!S9+ebmp({3W
z``T@z#%*afhc|xRx+S4fc(6*a8L5O9bq|nt=hnERxV&-+g7b1}PN7Z3`sPVqsaSh8
zU7>_^D=N>c#|})vuI4D^y(!?Vo%9R$x)|~zWMM-qzt#Ua#W(GqF`LFZGPg=U7-^ib
z0u%qh!R54Jc*GnMUDN1hB9m_gSV2nW?1>bdp`r}PQhd0r<{<~)uOniG`pSOuwK6@V
z3s^FR{~^d}-OA8rW<_R-B)2iaFLOi)qJQ-zR;`5daUU2Kkjv)m=Rjw+sQbf_GXhiD
za=|KewIj4hGZblu#@FNj{f9&PKnAWVXlmXS2L)F;X`QDkyAR*gu4Nq+6#+0JxC2w(
z$=mxCNr~$TuVPc1*DEA`XMgpuy!y<+hGPN?k#ot1zO(cT1|mci$KLg!z;R{xrCYl;
z)a|(Jp&i@S<ee3}JGJ=gX!VLk_s1x*pGr+-JsUaqWjaXkTMG2`qWNocuWZdsYD}i&
zN-JZQ04T@Bh|#-V!t)xEAKMnGqp*T5iv-NrW$5+0z3R-&&9Ir7Te)I;*a$Ga8FTt=
zZmug$JP~we@&*-N8y-+eg4YKG2+&LC3j!+^{u*)I0e^JdybGS`=J&vtg3HgMOYPqi
zf@kt4<tqziOgUv55zC4XzR|F&uEK8bSa7&`7p*1Rg(dDg@GPa6?e;mUNEi43V+T6U
zbx>!r&1#9Cp~pSCWI%!M-R}Ozq`(3fbs8zpmFU&;u7k#b?Q+_Dt~xcPR*T8cNP687
zE8x5cI!O7(JF2JA(I2>fR*kzMZSpVgu{=1#(=MNcV>+Y?Ry_ZC#+8T%FWa4zKlG5!
zF~iXw59W*@e(4YA4_<xlf^s9V_x}p@nGYPjXVnS`8`y}x-O2#g%Zj0!z(HpOcg-W^
zlbwh1Z58Zfx<iB|?zUwn8oMZO!T*#9840-~ziJ4PL)UlxN}MdA?m1fb(J}YLxQcSU
z^<M|ZthW~Y)!R}>(sq?4Kf(SZsI9{u@vMEj9K9K8B^p-Pk9P>oR{Wym`ks?HTj?5>
z$>8n|a|iX4-3bl=;~Wj*<@<TkoTD>DS1GheSXtA?Z9(oLyXzKT)|&6T)6uF%35>;T
zby&yG2+@AOR|l<vB8lPQ0%wjm;()>KwT`6ggwg@X{o{c8%HyKn?O<HgAuKTl&PxJD
zh_yxv3_AuUR~76;rPuMkXfJ1p^5}Xuzb1(#p7Dv))ze&k)ZY#>=xN20_@Pxue3xH$
z00J7<zMBT_>ZqRjm>dw)l1NM^4{I54j)!Ig0Vqbiw8}jjUD}ePUmVkQU{TVKBfK*!
zUHmvHhoZF05-_-U=^rc*1l3)035R<6Q|9V;_t`bV=$4hbP#P%P94!MQfZ;idIT;=Y
zcL$CUm(H63rFgLOsB`1czeReMU{J>Fsvf+cpKCE7SQz<4y=kVyLjR)OhluYoSWZfK
zC_ejL;%&BnC{+@GZTLdtLngKV3~_Oa0`$knq2l;^Yw{$IYeKhsp0ajaSnUEG<Wwc}
z?;7=aZTCxGc^V<sTv^McjiVi>PLp`OkQ4yY%GX67w+USq)5xf<!<XbnL))$!i8gTs
ztMs{al5-kc`p-|R?gkBT_Czsr3-!Oaz4^(wW=-c~)iUr+JtaQ1h*6Dcm#}XG-<6{b
zOmv?mL`8u^x^tiq{jo$rN5gPFw?Nw+cj$s1N)X@-?G9Vz6U*n8tNeuwe$R0frg(+i
zZgssIiJHJG^S;uzyj-y^trDEMe0nK>lkCpEgD;`c8-rArY-KI5Ub&qw-^IN2PYesP
z<=StA`#Tm2-B&9@IgCmeGw~_plbo2`-idfMK{Sx_H3yX{jrgzu{{+Y~(B7EpteMPr
z{+l-mubY{Lw%_o*I$-|0Cpds`z&FwHj;^^sN+0Kr^2Yk3+_YDCUwIxqFd!6&K{pHw
zch~#bPA;T-(;Ic`8MK9s2Kt9-R4eHj6QBm*$_hFHf!)+?QCs|L{6~KHeyJi!|EQmi
z?l<($7rbBQ(fxl+M*ltW{I?&?#P&a#be8}0qgnn}e)RJHOhy97!zxn22z$J$H5)^6
zRFb4GBbcM`#_B?na}m~&$&ywh8!A5rFUn8xo3Y%KmONQJw#WU*h#*+8H_meGZ-F7n
zi3q=ozccLUgzfEb4*f^9BEQVL3AMF!bdF2QUkB0Zn0#$odSz)C;~e7$={mM_K__lb
z&-DL->8LDGQ9NOY>e118Jy&LrezEes9;#=M9%79YCRPyANSP&&?H!#EJ7Djdke-o+
znyCvUa!ct7eBaNY@8wnQ#o5<uG<X9dk$#7_8bwnH(L+2%iZXPCDtu>?uW!yG89G^x
zZ-o?3+67B)qU&S&kgUwD16nEbM6j9_csk&ZB{?FLpxn_0jGpe#!S=X?hG=3N=q#|%
z=kd1dso3+;sZW&+<jX=!zOM9KN=P0{>W|wUHj>l^7ohExAF8T@g+1BTprq>5jw3p`
zM=X(e_6+gzSlMW1i!(E_?c~gWCl$?w90i=jX)%|vs8+_c`u@M!G+Ag>sw?v2+y5H=
zr#_EuO0JA7Ws<hI$dc@L)lBKpitHtp-H&>%y^xYx0cBb(wE*vn)#54C%{AsU?5W<`
z>N-u|biTFzWz&?E+)TEY*xza&+{N8opAE^&He}Kj@x;y80YfUZ$W9`&8A@qd30rQr
zrDBB6m>MI4CUx52?y|WSXvld=MEe^JAn|C>qbvUXc19<u6B61I!%R`(hPz!C6JWC2
zO-p>7ep)QSvvEE78EC+0n-xSD13nrZRMzIK!iE7cVV)<}c3>*&*-jb$k@Uc6>@6V0
zJehkT$js0PUL7yC*#RN{)yVb`S!gg_zRQ6Xvz8}gAzSC$1JP$wCRfLy!VkuBO32xy
z8VK@uH$+RNi~u9EI1>d&iQb{Vg48PBVJrth*d<VARTC#1;9uNz*rT4$r4g}8K!&Su
z2MkgKe~6HVh@EPhz?z{Vs7<S7dZcK?Kv#mSacI8|>GFDB)1i;ucpYs}INStG4)93{
zZg4M(VCkMfk5Zv*e~qhQJy4yXx}!QB*pFuJesbH3_B;3#=*Dti!HbE$RaL*H(m$<j
zELlR^v)@vuh|I50qj-O`eeH!xnc;8e;n6W?ER-`->vFN^R##nK9|b~S_AE&=R~`5Q
z*DyLmAfOJEA5){@m~ql3ybNp(ebFkIA&IQHqgWD)yGN>sPG(JEbaFL;Yp~tbkSX~E
zoRTNTx`Fl#EY|h~Y$&37;E1!h@!~>!U(7KXKr*8rKslxh0IV@N_{L$FX3)dicFYJS
z^Ze`P+wq(~CfjPO5T3FsFvgU+sV{M#=x0Bh21In28TL~%H@aM72)38vjCwy2Aj1*T
zI^j+BZSf`IG=MLr0wn%G>_caqQ&VlWvBE(XLg!N$o+nhB0Co$<MkO&nM8|y=LX#Xn
zjoPDPoKpm6B}xrom_#eEfxN}o0ZZFo^?+z#2yq;R?2BqZ5aWg8clX(!_f6@H%WVhB
zAzkyRV0rM{G(-j;J&u3xTy7czLcyOeF2g$XysSK(TM_mH*9hgBhWjk1o`o_=7dM(I
zoQX*a;TwJ+fku`>!x>mUhGBcae;)+uJDPjha)~h?Z~^7lOJ2>0Ppq)MkYydXA(Cc~
z?I>Gn6od40aB}$Z<w}i=gMNQXVuok;7(y;XNe5!B;qWLiBIhA}&j3W=sLny)ge`#Y
z3P=K`N0JfE7;LQ=FQ>h~{<&fvMGx`7Sp$#nUaP89da@(VV1#L~NPIkUZlI?;!S(H%
zAQ8->&f+b<qvZT{s-v!R$r7w-n_yMs&vwkg+vHqO<qb537qG2UtFnz~Qqy@lEY_I$
z&dXkE;WHPP07w{no{(Ii1?9onoz|5-=+7JtjWJ?!SkKpTIP(<p)iXaL544Vyv($E2
zF3rRf<;>U~6i~vC0tE1J0hkxTLzLgnr!KevE5%yXmhMhVzLBTXHTL@uE&^E7;m;r;
z*Xns58=A|lrk&)qmsUG80jbB(nKqaNkZ8IuqBTPWqb;mTuQt2T;vC0b+Y%_#gCuRp
z&{BRotY!g9FbI+hdW`|3j3dUDn@UWybu|s*k4G|Epil&o%4z$FK8IjTLKEQ)WV=i3
zdCqDkv|cnI1~t0f0R0dXLIoTKkaL6;jaYy183bXkN**wtzSNNKM66BNAxS>03Wzu%
zUp7<9SPg7MwOJ{`daaM(G=U5af{x{2;xLQa$cgNy2j4h|H_KrG>5-rl-XcvSkprhJ
zj0nF#HigPi92wz`0AoFX9o&Nl*OGbj8p>-tfClC&Ytp$!?cnF$5Ou3e);9r;&twEb
z417Wr7D!)6h*cA|1G|{06aivbbCe>Z&BAHE1VNDlwuLO$aq(E!>Jtmp`kOM>w15Q&
zOYICaE(du??f34)l#R1*4Cc#2G`d5j?6F&nwgA|^?<ObF<F*~!@#*XQ)T)@NPj5S2
z*Q-NNi#X^v=(rMEwLpP;f_*F}IY;se$m-W$yt@-z!%p(a@vi$!imCboOB1%husyN+
z_5zP2%7?FK`LOZWLkevrWl+HDcm|x7`yufP;K?|l*hJ@3Tx=tS+z^f}K?r8}15G*N
zm1=Fl@9No|)?6@Yc3r>yXf?l<TW2MvIQS{6>6qmf(={D&Xq;Oj(uz4upc(lYS|H#}
zQ^~>^Xa+s|MYyy}IKWZfXt4J=?m**Vj^wf=VX{+Ba4PsR_MMmm+!Qge9kt@8C>_))
zt$!Jp#6g>D1D$Y84WK|HPpsiA3axO7)$;0aX_Es2+_qeZKjt9^<sOcB8U-_OOH;c~
zuR-)EqId){co)pl6j6lp$3~De(0=_;7tdvLDjWrkGPiST96JYX-IsWy0amuis0&fr
zF0cTbwe7lXyEv!g9~V-pcz~E@zW<<RL9`|Pb-V1@5Gs>wG%DllE|EmLAVL(aw8C*o
zD77|ZshD||GpH?4H($1$<V16-=EvG9MzmnoK={PWw?(0Jq`6c*iWv%Ck2vk{2Tlh)
z3rJ@mjox<C?H7xe;8di|<{o0>p`e&#Y~|uC+OWxLp})-iV=l|96z3_$Txm8VHQIt)
z0T8SpG-*OiHJJl*@rACbwsyGd@n=V+&Y2dNIIjMLWv>E<K!%VTNv(JY%f~)+0zM#U
z%Ef7m60CVM_^K-N2WcwPvPT_*hU8>7=y6F<1{F^GiMJw~psa0u^|><;Qg2^GxpoM9
zX_YcMXGD1AyKYc98&I(8FNy|`h$MlRD5aP@pqW(-Nz~CrNl!9OK?+(~ro|FrCm7VZ
zsl-J<S2JRP5O&$IT-B<SP7szvIBtDyssMeuSLBV0$x5^g?8wAroX0S%fT0=WF3Z8_
zX<X+w?(R7AIm~s@F8gtdcY*dnx#EQ35mX%cGzrk<pE`)tTX8@b#Pb7%t67k{Vj2Fj
zUfh_xocd|^@h04s2+_(9tK0B?h|3T#V?m}%^-!?OIgYxBbqg=g6^{LCD?t(&+K3$l
z4FLCa5``lvT}a_O-tL^x8?!(sSt$7s%e;n+&`fct7`f?7_I(G-gzc=wS6mnXf+-k=
zUiWd}rE9?(zah$cnxL2*`S7JQ1?}hqIoFa9VjwU~=yD^Jp{E)7%`q}8yiv?az)#H)
ze9LxCR^hK^Te`|zX7S>?E{v>OO<ZAAOLbi~>tc`V9{_Y^b-bPDpBjgV{sINZp2d6(
z%zZ_{2AvCU*a(l&A;6*pxj#gy%^)aEk<JF}G3r;rqV<wmo`WR=&98%~P`J*4Vuu_`
z`%&L0B#5}Ro;3%k#xRUZ=q<rCCJgFWzEZGYC6VfTN@EvOmFef$y}Jp-v*`$T7Ahr_
z_Zo_+c%|<emfJ+H_9}e`$()LhZvP7DD2|=;;42+MOL|#MM?WukVETH}Kx-H!gX>&L
zba!M_q>&6XPtQ4b{On}ARDH=5LL|)+!-}_%=^Dh#50NTbw?YD|)|<Eb{&wRzXPcL}
z=24*pn6MZRMI4Het01lj`hS(<s2mmY%<j>2EBmqKoer6aWS4ee*#|x*pbTr0HQ_|K
zX>kQhq{{-Jk__E=(TuZ*lNng(d8F_wznx3X*m76x@5ka8yeb36eyhpsqtemW>K#c?
z&~8nyj?&_^*sZ)lKm{Uk&c|)}rL#YOPcQNhl;W3Oo&U@xPQW8i*lPDye46>-8Dw?-
zxib%ejQsYGrBjd$kG!4(VSq~IS-%G|)XN68visDmP^v?(!ssLB1xGE+0w<|abjBkR
z%t?hK>k<pmiKww61PZlwqX!JG%T&dhekmgC6{zwEt+tiqUnHHPN3s=93D<|xkMF{Q
z-S7$*Zsv)IS6y`{_YF<I-uvBt&iIKVM}!BbjUOSI@b%(x^_>9E84JJ8g(Da5#OJ=}
zmOAfrEGzDD^myecQ0z6Vs(}}i=76q|mG*c7?RNn7zs>?reb0~PR(vMJM{AGjBE<3^
z3T}QyD9cS2T6DUIDfR%*c<6m_6)P&*`pO<(1^mV<qQ^=HncVnUZ>kXoJkJQvKyKE;
zzPPm4hm|{~Wz^fR6<0qhti(kLRkQ(oJOT_G)DE4K&c96??S7sM4UT==kC8lkzP*PA
z6J7L}G`&vq)iwP9&*Lg0?QQG3-e*`WWT4VmsF+#>dd9_0$0JM&D~ubJ7MbjXs>Pnu
zHb<je-Bjg7=2dvqa%QJMxE+}DaUyuux+_uQ<y$A3*_IXPwQ~C&GsWp=;*I6%GdnE9
z+?#P_s3uda5-L{rClifh8vfFPMi*ez`|g|sz~#4vMyk+4`UH&9Vw#|6g>1eB(@`jT
zG0p*hBn3if_5PgP1rxog$%Ak;?X?J5kh@WW?G_uye)k)3cx)M7s*OW|MROyr>UHUc
z^5)0LCI#s7e*GZoZf&2c<fU!RSkZD-KKusm*wpA@$NGe@7upN!eP_fNDhg+60KVa-
zPxQ;0h{FdVKPxn=&oW-@sQS*5Q^;LH`RVVuAMF3?xNPmzE5(uuIPxdh{Pni#;-_MO
z{spcPXE@{(`s&>Ld2mtX#d%t*@LGez=rrLtEzJTw^#Z~35B7MTNGsTbpKtx~aFlVT
zIq*Py=~D!_Ky86&(`G#(qjmm)(@k+WL2eyb8Sc|O?(nvVQl^vWqEdN&Dc0oL{}!m}
z8k}HC#U7=T$7dxWbl3ml=?PTw*u8was#3x!qkZf^EA0kz^}kP8CF;{M<3={LqjH<O
zL0z~zhaIjzy&AnCA1$t8eJEL9g%e(EMA4wb!dDYX%I00#Do_tDSoK?^;&$#(ia){*
z-E8b&79F!~DWLr<VNHwmdPNGLFN9fuF4Cgm7Y&uv|G7X!X37)}LEoZp-a4i5$ih9x
zMsnbd;4ipwgg)U5J0X0CzUjZb{VN$b*wfzehWYbJzcsa&|DVf)|0lGwFtGhkxf;uV
z3hk`_E1`W_YtwE^4C$X$<B~g|ImK`Vy>3Iygys#IAj-BQn|vhr0?aCG*_KN<N>W^p
za0K7*x4?g^!tNzB8&h`$y2`MxMWkU})%9Yj+{%wYQbsb!Kg>UEvoT~V+n1y8qt)ci
zyq(m)gF|~y7k#p^)-S<h|KMYaM<mij1WJ&u#az*uz4Hy72I#ds-8lui?a;^-Z8`eJ
zYTf?sLY=?N5RlAx9NEe)-xAAQQ;P1ze14O{pPShJ&W@^)1GT)Jd|uuEC-<wn%pSUX
zW4}cM2)cL>`ELVpBkVU4-9tKb!(K*@!)6L~gMON=C0?nEhhE>K=0Mo#>}d39eYb+E
z$*!8O{z_4WWG|hhyZ-C2_`<ebtEl%c6uyb06^wHweV-^)n*JQkjAQZS*;h0sGL>4C
z_^E#HkJrco370>wxBET2F$)ip2Fv<<5S6p5U`Cu^Hs$pJ{-kXC7575wWQne8+vInL
zR?YMw9DpR6wBf2ATh^v6?|o?$=$lX5q0<2^9H1nU_w(|-L!7;reuu+J{n&S?_g8mB
zITl_kH-Z;1+u7~cVR8ZeG5{Y#w$&s*KurgyCabCVMF~0SkC7aKQC7nxftqM6|9STU
z%)oT|vmO$(6<WLHWC6Xld#nFH=~eU3(=?8MK=l6h{&Rh!X6k5U@Uw1xJ1wjfN>2Jz
z9~S(8C$<Mn!7*L(c8v~Q6QN8X^Wqd1(sN2|XqW+(bLQMsPX`QB)bUJv+Wd)MDr5jr
zl42ENTOQF2k5(Z+yQ_Njgqsbfx+7KjhmXOKabmr=p-KpY(N;&3o-C3`tw<>&G>o+I
z#G8O!fOyTmvP%&);b*2bkY^k1Wl!{YEA?Be77)`@a{=wRQs-hwf)fMC-W3z)I1E}~
zks6p1qbIP+;!R}@h=LyWPJi>tFvS+im>g-wGz=e&i~64wcI^>QDcrxhhoLMp%;3nq
zf!1q++esg8-l{Fcg(q#G)BYnM;|DQPf8}g60NEs8RC~$(O?)l##uqf;0)dgf!ZlJ2
zlq_u)aDCFY3idDu7!HkMpr(w46F_u+ht)<9VBY=QlRaT5FV|$YNEDRi57=^LkbAD1
zHj<h&t7rNR)Kr%)N1voc-s;Qj2^Vc7SYW-a?xROQ0}tMt8K(&-UJVsBuF3bjyMzkK
zezU{)bn~6Knkjwwn-z52xJxZpcI<Tvn`c>=vWDt0qOf*5N2!{~HW$$qH)GyO6>J|d
zz>Fsge}=yAP2$lyYJf=JkNSNffeipUcKAXxvXpFO>PM7@mCqF?_P~9BTEG25gi?pv
zaqNRfk?jB46;lrYkhK@3Cb-1exF=9oa#CKPwg-P;kVhVQMH`}7!mvJ{?3ju5uKN9J
zz?K<Oa-^p2xXZ~H(;+nME9AQUnE6;sr$a@--0v%}uh3D7k40yh;oZ-H5kklIMY0Of
z0V<}zth=c_?M>A0<@mMr2*zQ?er@tcWb(F?h7GyJnhTa#VNrU1?QmFrDHW(vDC4zr
zFPuPbsIB2i!UCS4e&&1+!b0AdAwc7Vm;K#H=Vel_9SUq|OtZk%&|<uQN1<GDT_+a3
zVDeI*RvJH4QItrWkrv7wp`2}h4VLWRq=s>H=55gyP*ZkP7`VHBU|dJ^KST}zhYS)?
z!HQauG4Ok@U%O#D_K7krA^6M7_q)wf8Qv+Y=#HVzWsd9%o2B%^+jo?KQ!#q~w$Xvy
zl>o$jHwCoYYxk9_GE_6QZw(UzW>?LnKC1z?tb1}8L*L3hhJSs&;><Ao7vslu`RUT*
z0z5aC!53&jGW+C9^dTp(&iF5U5oZFsKhy#b;2sGMLHA>VnP>L#L_w3Sn}SB?VZaPP
ztfv!zg-@#oU7l-k;m&2r1*Zux9CA%AplvO#*cx9*OL86RWLzHeP;{a!<NRMBHc)My
zHt_&5tX5%I@VQFF3i?9ifS$~Hl8$Rva?=Ff;w#1`edBU3-w6BCI;CNlfoNOFD7z?$
zGx7H0GvOQa0QX%B6t!w^azR)pEk6n7zR=7kpuLGDVhfdHl*0E?bxs<m{mT3Ta84F{
z)$?r98h?pcnixL1NnLxD+{EClf?9#&s!H6jMH$+zE%1e;o_e0<(iUoU#(Bv;gxD$M
z4~uqC@Go<@1JUDAWN5r;=v)B6&TQyE2hWTH=y@&KFDCS}kadUS*#cqe;nS2PcOsLV
zSHyFKfC}~vYccT+4kp1sza8r~ShQm0V+GxI-~mlhJ(jUlv{h8*WD*_wPDQ9~$zXKV
zY{SbXI3_l-J6Cy~9iNC?Fm->26&fAnv2obCG9M5_^T>#%hAa3q%|TM)S1_3bHGrxK
zXa9<<bzj#=sK!fjPah=D&sr>m7^A<dlp93}ks_?+y-9&0rp%yc)o|9K3iM~oi#g|x
zg05~_u$+zSz`NJiaB(*nQ2|fMCscw1ibJXj=<-UIq70sT+(}RiA;W>78bMw34KnIz
zHh8e*flyS+_anc(X{i0;-zW1$lHoj_SS~FSX3{|7Z$L;$^YX;O{vCPaG`Uwqf0s3W
z$&hBX$TLV?1Eci-vf_6q2Be!7X|MixZVAz2-{TC{Xf@f}#nE6-Y;VR3-<n&kFdTyY
zoqqJ;IRT?;Z8qRK4tp>I|7hflyS_xe2Z|)gMXwRa2n-1W8;5_XzfkW@qn_hiBd^z(
z$o8^7Dp|dd6m%1X{%PArxej=xf0hsp>TrTpXOBA%0!CK40DBS7pH$S8LI;$Z=H8az
z&X&UAARJ^YK(3V!WE*UjpOrlA_Qnw^c^DFts6=AHd>(rv0Ed}MCm#E@SistQ?;)N>
zi&sz+k>C8<svJbzsK%r#s2=oT2@jdUxfiX3BAq9x)&y(XJ86c61Hd;3-L==V{oJIV
zvCJevhLT~T$0Q_9M<m<?qOv=;l##9<PgVs4H3Vkhp$Zqjt$Wf=60Q#tb~;5{o8j=8
zAm<&{4cQ;;2jxY9e)Yc9vQY8mC&pkc@Y{AFjhhmQ$!AvXmNFiTK;9mN;IsstlYUHm
zxP2DdfXp&_$5R<=f)#k)4+A8R9bBZU&E4J1OehwQ$(q9i)rkCp$Pp}c3z_)<c;O5!
zF!Bwy!X7jcJI$TMJ4C(vb96P_1>~r*z_gdHL7@gzBDVnHmF9%%oPu|XC_w8lWxPm3
zfJntdwl?P!Mq-2%9o&|b{N7lYv?L^$YVzP2x94%mTrLU-!L02_VdB8nw<_mfSu^i@
zRZ&jZX=mo;mwt>`;d*BvyQN?zgbOSw(>GC+@gbvO<N(gLF@qV#>G0+?hKuxv4>_(R
zL*nl&E)W;Z>U$B9cN7<fv+b?%dU3XDDreCco;ln;z7TdpX?k!Tu?v2IrXc|m*xVSr
zie(=<x#{_D98D81G^9v!SpwzH!je81QmkS4#maRpFpBw4@)OdgQKmS%0Ftlpgq`Nq
z1Z4sf+UCpSrKI^KAF9QM<!Yt?{jtjHrSj}~fyVOO#q~zR>NkIT2fMl7rBfs07sLjE
zoTb54>uPwd^jG5AVDNsFWfBaZBRgry)|I%Gg<YnSaxwo_DlXcMA?^099o5(JmM^^F
zxE%f;%U5a}1>IJ|KeWRZ_l$O1gygwgIbP!R>($Yf3)$W2!5nup3=b9g=nM1=cJFfd
zO@^yKi}Jfapf+0UHyD=smxGBdj2iNyO}Ar8_-D1*v~}6s#@u7Fc;s<X1NN#_lbzw6
zH+$Tua9U%*eTX*<v<HA$JFNRnV@N&ygFQgtx+x~RY|pXx6jqls$=~treDLtg&%*DB
zUmLi$MhbZCbQjylj9x)HPopDk2Nz%QhgQR&C<?7mVyE?DC)*~Y9Nu@_VIes5a)WAj
zNE7IC3LBW<O{5CM38DMp7OW)p0G`L^$4(9ViAj9HFAqoIFt-OD5Iipz{gN#cut~p#
z)pu36jy|U+s+qI*1p4?|@a0?_WB#82iqiPj_4V@m6Ou6^8FG$enOXNoD0Znd?#7?W
zyuH&P-W;axz&!a*-Y2NdKaP?5fSxNW^D_#%k--VZ!q+gFZksCX?lm+7QDHF(R#fw}
z;jwZk3nUzbn`qpVI?hTs@%%?r0-OGRPe7I#=5{b~Hng&3t;4(!S|(rwGu|X%vpaSO
zjWkWk^yK2_MQ0smnwA@b^jKs*r)Eg)cYjm6EC%U%9S1cbQ0|ga^pw24Rba!2V{ix7
zFo0O|Gzh((>&3R!6)^jDTMXyI{||3(0aaI%v<nBf;I6?X$iXeR1$TFMch>;Hg9Qs3
zoM0iiO9<}n?ykY_fykTpo0)IT{P(}JSexBa)m>fvbaz$neR}f^1IG6xCY?8UhWWqD
zU5u7Q??%taiGVvNtRPD_gm1WJLvZtcEiE~FKnX%^Urun^4#soE!2J?lz#Lj`b<BQ$
z4SteYVIL4}vZS3aIH%Ax8aJ(RmuJV6EMiK9HiUW%89{yf_UP(Zx}YnnPjO?RZ+nWk
zHENY-U)VGeBqpO329gnp4VzIl;!aRJVq3{dDxFh1V|CnT*$tA|$^N-`&ef3vVWf`0
zoz(nmszevmbI5*ZqaAkEs0I_w(#@|EjnG{Hy`%?U^k!Yoz#2uLj5D!!V42djucopJ
zup{SG){O&~fIa?d&pR`Uvdj5Ps@Y`0;F->hcfc1(g9qX4<(SlhK#1BIv~!Plu})@c
z28oO<_HcgigmhOMn|!GJq;Z#fmo(uShYF^!QXcvvIDtfGQ0mQc!gp-_G<r*74x{r&
z*i4qVhc~-lr+JqLeV%oS>%07ellbKPJw0J&VPyYx^a9I29=*WwZymj`udy3B+lhYP
zEW_~d61@m!vr{7UnbioI?J#*nqnP&|B!o(~@+UHR@`8BGEs`~*+emH`Ydrap8H+p+
z6dKTu5V3*vR|$u&m|ok63SoyFy|~%5_dt%W4`aiWe4s7&p{ZW$EeeBZa;j|jzGvi*
zSfY%%K_Y@8jY8EuexW}xH&}WP7SQ5>jZQ2<)?lZk*|#I?QoqOc{j4G(3E!8385x<W
zls?B4kJ{d;CUL%RB!%M&W6@YlGG1{bRh0K`8TVwcVPVt#%c{{aG^G4Rn2cJqT2Pu$
zR~)Pu2Jr-<_NP9R@aaRwmpOekcL#$TW-BjX*-V;fDNx1la^?xv%|2DDI%Uts_wH<d
zt|7gv`*f_cc5|q68~-VJ;y{BG)uUwxJ!)UmYMU)>h$b@8%a&WC4VpOjnJ_E$2Cvo~
zx2B8`D)y^qRaaoOv|<`1Jyo=DBW!CIAn#)?!K(#W-E^w53(x&kAt`O8F~Sk6+KgPB
zCj$z&tU-?=EB4}w=X9J859&!?!HA6OQq({59o$pSmW!J)xs;+e-XZF`DJ;-iH=G{x
z;xLIZ#+EU*xrxM^Fw%&b%YYB^%?lNg?5wEPjcKCE@3f5m%8ndx*GW%5aBehON)g%0
z@qF*t^Rnb6`30t~gVAM=DQU#rX&ql!)SW1FGUcX0uW`lV1gfGgBkvT=q&FyCw0qt+
z7{@nSg9jJ0pM&N%$|jA2P1jN+>|a4a4SCF88ZPpOTM<C3dMIpY$t2?}SXENDN%u}H
zwJgOZx>YFLqE-zRr`+Z8UD~Bdc88(Y1_JuCXA2KgJ!E7JsPdx2mg+yhutDu3(v=x_
zzuQ3KB-k_lLE}|%i{y-DMRl+J<j2_sT-4W|%2ne%-^<kQL)iV7-mV7+BPXzi54FZ)
z_ZFiwLRkuPIvTIfw%}jsCUpgIt7aE|Gu~t{>iZ^|zG$7xLHc=c3%nB|TM-*XJ|HaZ
zh)=rK)--EX$_hjSFRlHu$YotabITPgX;{>d-*?<;^yB$usx+Ri@EKN)@mOs{Hm62S
zj+P8L#=DYWb{<}aqxQ0<bn*boWXJ%=f%t|3G9$Z=`9hW&@V?|B%Ft1@5Z2Cd`@;Q~
z5b*(2p*huL21KG10<o`bygd`r({sNZOO!$-NESS|pKk}pehJo;Ld-;P8pc2uN>1mq
zk#aY-h=o)MW+g(!vdtTG#kjfk+%hFu^0W{<uk(W)?<Omxo#e<T(Imhm54S2gPL}Kl
zv-ArI7truc?fmD$3rYz5R`ggTU2iYfx0g~l?h}pu<H)%N#$IRpGpL&}<`(KE@EOXT
zh*}B`Y~H(_c70or-3XJzNLJmm$z1GgqeZZKzr_VE=ACjFeuA6<U4u8`k^Nj4JIpbG
zly|>Ee)#!%%cv)-NL@H16b&rWH|dn%can6`4T!t2c&14%IS%x?zR-pd&Sed|$wm+;
zIfTKmiPJe-A)1oD(hcU<`A(c5#Atb_AmAJj<1rv`;~n;?lP+ahxZoTB*v43NBrMw^
zIUG4+W6r_(KD$^goec;`xC120de8&#RoQC%g8ls1EnYffUgc9>*U?-Mt7o{E3Rc8s
zaU5ox-KC&0g;=kKDTlQO>56J)-w9!*oL}&gFznht0Dr`tkdFyQnkf3-9o^p`0I`zR
zSGIUS=!FbX6R+F=W0zQ4qZ%`rI7Bf#Jt|o_WOB@la}yZSW9HLn_w4m4kE4~SC6@X<
zuy5knCYI0Ip>tW>Usq^hsR%g7ZL3P!$YIn;eJZ*>;Bqz-xYE6gDuFQMizIUId1jKN
z$uK6-{4!Q>P10TumYDf8Wc8tIEhAr$?m@BY0vB)e9CK9-O5om19xa^Q15_iAa*SI;
z@Z4%-Tqm@xtWx3&@QpZS#xL_RlLnP=1CpqNG3)KvF<M(YbUAXqegt+2Dzb`_HB!RN
z3Td^2Lq5!L%HtdePyynZX-F_8>~oE7p=|*$T)}WSBnpwHQ*h^)AR;K>q3xzD1e_B)
z!rqk7rXoJx?`8wwAWpQO2SutHJ9Jx9HcFROXQ;(|Mm*E2#_?6W>UoYi{NCn*PqoFa
zPM1ruWlSlGtHvV5$w}ipmxikm+EE@oL`Gex$;^-U#oKZ*|H^@PZb|R+gRJCa*1A54
zPLRVmPzoxslIk7V#}>9eZ!Pb$U##Nmixqq!s~~rxstF2KYfkVQW5701f7ZUbJ3*a%
zFQO)ifStcCY+X((7G5!)s<mO&lEsM+-x7-4%?e2mnLxH?&zJ96am^?i{(QzWzXnvD
z)`d;K!_S0GdckZC=FQ`UhRfPm`ODv4_I()yU02Jvt%86hFLt!g=TLrWl~{!rVv|C@
z$^c^4oo)=NwDZ<*q@~(N%uP_5lp+aYlQ_UsR`<gm_BST>Cg+k88G^PD0XgQDXKNT`
ziBKF$iEci$?+h|VI=)^5AQ*$QF>WLxRFf1SpjbUy3~(r{J>l!5<s`RhT2Wrg@I@Np
znMCmsNWTi2vvCQ(dY$e*okQ?tx~tdTw+ru;-+oa1T*Als2qinV?D_EAcC*;veRpSp
zaFc@f1Nh|!JK+^eUC7bAL2$yOiN!C%@t`b33M$BDo8E2Qw{D+Aews0UC6@zQ6Vtp&
z>`$i8p8SfUpQJF6YuQ6))t5ciBx+KG$<+$M5U|E!<&6$m`|jR?zJ1VYaus6k{aXEe
zF6b@4{B!`l1MT}1t*u`Afeu1^bQ2u4H43Dp`OVn&!S2r-5w)Hj*klo-%im!FFUBB9
zhCnS>{E$t)5vYC=!By@Hlm7~T8~}xtS>z(#jqXk=MEkC>HotI2pnW8%kwSJYg!Em1
z$n-1!3*UEY@eyTSk$E~&5tEW8q0cfY4e0238=ys1*QoPWcgGr7-zLV6paD8R*t)xN
zgT^dVIXDv+HB{GqjfnavmM)manHMBLGSqg+otMV<1qn75^cDK~AwP`y+b)w2q~co0
z_C4v}Ws%afh?ZvSdKbEu669O&f?f2^34;(zO{~hP>Jbn*sVO@x(*o4-T5nJ}#dvB7
zyOsj?jzKMIcztQ52w%s*z%t_!af!>c@T{4NQmQ2zg6ZcbPtX}jdcrmcftnOiy|BIg
z4&Accl$@lpheIgvDG?(>`E&WvM0KG-GsLaxyJ;zIg&F#=z0Bj5wdm#K8QE~VX{!am
zq_Us{r6M6MMBQ3o$tpv-9)lTm4x!9<0lvlZ%?tldrfI`U6#R43@`&z<9y&Jco$Cvp
zFCpR-H@2^pOk-+4U$(6>0Y652o3~TT?nNi<llOIdTHU;sO3FoaiO&Dp>JD~tscELw
zZI%CJN64|2msvQhS%Y|&06#G|3AaHf1*QW<j)^Vb#qe_L8@ztz)TQzgcw|$<xf;2J
zjL0+LMdwLg->w~okfeuUiYm9@kqRqkT5ZcLw4zU2F|HW^iiD_xwZU#B+Aq?k$}u*q
z5w&TX-FvzkjeCq6<&9M@HU~HBJ2x$_aJ$}r#bg@|k_2J&dUr;V%=lWx_#u^4{ATjz
z?n^8zno$fw|Ho4^gb5RK5WM{l{MLc=Y0w%+!nBqCWBk%NoGd+6&5NB`%t89>ru1lS
zZx2e<!4Xl23#^pVVT<$0M9rgmGvOgBvHTI#irIInP^SVv1Wn0I<eS(T=)Q9-X)Y)%
zYU*L@Q1s_Rh&~Avuq_#>9ms=WeAbU79MGuOv@Iu`d+b8*g`W0KIAC=O%_a+4yLAKY
zW~&(9^Lefz-en7FZ{Z@=0f%A=ydqPty?n90gaWJF?j;#a52;vuR9P3k0l$-CToH%t
z$6DzHo9oP(Ey^qB#ls5>$$2k}dTmQ*7bm`C`28fP$>;rA<p(z+DeYUD1}zgc@w%$R
zLFavT3NAQk#xfQ=(qNt_K9!fEGS##B1<z|Q403e|?VR&q;soi+cL8M%yL?sNvs0dX
zi><75rvs}}^X?ed?Jd>C)|?Jn`EymnIsIA{+X>F=sZj0hi5-d^_h|bY8&PZ(K3+^9
zG%$4;>2m{KWBm~Wk&Rn4(7Yb+-Ah_$FP&pmZq{*H)l}QM(Ui<b#t{}LC7=y0WoGp}
z(dwo&S@N^|L(!K`QjLOn!WA~NUt`vjz<BwSevT#8bJ8A~MLx^X39x8)w#rr-6_L;t
zTz>B$X^!U;NAEcE;;O8+e^RRHs=Et*=^3Tlb+=z{ELt#3)umF?B!VrI#ZcVkyugFu
zGfcEE7n`&5xedUV&B9!_-pcl@Z6qWkac*`m9_YGUmLe!2-pj7>K};FHRj(~N*xA`M
z(!Latd0|Pjy2DpRm0H4)PrP1pKtvgx;fym-bc!P|oc$4cObzc$&0mqe4!r<$i1wu|
zvt%EofyILlwFmnvCz5ypNav<tkE`nW-l>LifhvM{syI)pnGFW&N=P&?t~eUAjVn-j
zuIkOe^AL3CH*Md}T>6X5$e`6)RYLcNPg*JNmgih<>|dgnaZIHzEQ|Y7=N^pEdgR+k
zDnJkxjE`XtVbJs(ZKCk(b4RAgnCsH?9*TV0_BUT-)98|rn6FWfOF_Ajod=#RED2$f
z7651QVSdUPoo}ZA+Y8=E6DCgEs@ll!d~u`o`v*o8kT>!uSIMW0&?F%cu{M!Kj)5Ww
zr_XP~zzqXoXL-J~o@V7sHt%QaIG4fS8w;~fy0_Ul3&|#}=Dyh{nJAFZF-i*8oslN(
z@CHTx;(JRP!Qu@a8v_0Hkd13@H{&DLk?-5Ss2;-hXQ)Xe!tcwM+4S)|boT&*2m6C<
z&<5WZCRH#OTX`SABwxh@{-cZe>u?n&77qH~F6KWTuEO$f9j>wtJX{5Muy)g>!jg3X
zJ`4n(Kkuv2urJ30h7{$qs@u+;+lHpFpKIbp1GD$O<6pl7o~{B#$oKBOrHw~zES!uG
z5_|LF)c{B{iU^0^_tFQAy#cIR?i=^c^U~}Gg}pAs-U^5kbqte5FUg};doN?{6;fo<
z5aQ2ssSxM$mRB#Pz$c8DpI0#ZqxX)h$<ofGWX-OO9`YF9K@w+*b=9b~<z(B@bf4VQ
ze8<a9H(5hbIVH_yj4_5EmGP-1d~ve#Zg)N{lnl#~^oH#|R7m8xmuMFRJjrKh16s&+
z;^C~Zc@Y-Fc$X`wg_kjyS|Pi!Z$*eDZ>$b_4nTa+nL8&#nFxl%nTC0DB`AnC72kw#
zdpnqJlCpu?Ta$%TRd8xT2{WylWt>R&du!bHs*vW`PZi|5)HkR{&u8v;6&EVT+EgR1
zL6QZT+%&u#7pD%@UP>Z_qYKZCmaNQWLnPHH?kV|H<SB6tuR-zw4w^h)ccSIesG5oz
z6oc5RNx{H`!)pcW1G@3I1|uKK7l-PbR36G*X7AM@N&`M82Of!Z3fZb)a)fe}i=qva
zie0mVR)&Ms<BSt?P_c4AYm`<df_@?lG=U%@*7U|_HZR6eLN6pcdby)qko3$aR}%74
zcQlLN=9B2h&^onfCxyea&m{|hs!j=0h>(}C1PZNIcym-TF3||lb*XQjb#=D&U0>Lj
z76M#Ubocd{5H_$na3n3jvqYLDM`)^cAbKN`@mdvnEFn`Lt~c6c4hKs+QzTT8XR%n_
zrVBy$rL84)EsBj2M}~^`D$x{q#w)CXg`UOc^|@6qP-Ph>vKEB<+gw>U3qx6+M1Dz8
z#~nZD8bY67y-d+YA-ZXhaD6|GMX#!`7(0L(LQyl7R-X*hP1t*mtj<Ve%7|A+rC~5E
zYYz=5GnG`hTXWYRMrsLWfP;yOTECX_qMj|mPhkQ50`_hv;qId2bi1tEsZ8Dq>e)NK
zxnSb_7uRoHs8HOibjiIz@~c9bE9f)Bzdpl9LOV*=W$Aw(Co-T2k|QD^X=~jc^zrly
z%wl2jP7BdX0BiPqQP%CpU{sNI!|(wlH-U~eh#UtFQ)DKBSB8SM`m%&QY0wlc6Va8(
z##2~0LeQ_XCxq1vG?DyQ<w?S4->O0I!e?R%xRW^pzvWw;DnNe_X9%d3_dk(-&io!^
z<g*ibvPD=bJ=z4)hS6bI5XvyBpk3nxPW?U!OYVnPfD5}!YOw6Y?C{rizB@zSOnGd|
zyqHUq8SH4tBi{%!KoV}vo`XsX339#Cc}`46n0W>ZC&HR&>kyz;EI2Gy%df&+alWL5
z+K{PzV0L8SJ>+}Nk<Wj+RHC&dAb3*sIz^I{d*&G;-`6%1ex{FH@zZeAW;t+~L+Swg
zo@li>#CV*n?2?QRc<PlrmfdyM9~dO1QqxlTT3wD#9Ju){x)N#Z)S!@=+;9oLg?Qbb
z^5c`|zA?wOtLB@ntIQ$I;lif(J4ZWMB`hWq+aQZ!<KsloY7D^9GR62jf^aFG^HJdv
zcij=5sN-|rM0RjmeA1$3l5rA9HZD7!cxR?LeJk@?grMmV9u4Z(V+(V$P}@yx-x#tM
z-sysd9gFCR>`&JF9B^p@ewPqJ6M3grDS}NLjDDKL)o~yoD`n2vD^XdBN_iwLi;Kkv
z>XljwCo-sIEj}WdSpf(#K2gAv-8cLuTkATBPNx?|&>@M5B(?F|k<lb9(BkUn{68&?
zo>Ud$R%We<7Z@m;U`us`fs^2=My_M9nQNq&r<&3Pb3*7^3D@Y{&=Vj?E(mdfKmP*R
z4Sns84-FdxdUL>Rm5r)~8FJKf?WOG;6<kP7;pnJXt)pX{DPky?)R-nahipW-v#+Nj
zHNts1eD2nB9JM+>;yQdNm;|yU9Snttnw&LQ*<mHF(COjLJ0U*OA>Zox>MM3vrz@pu
zv)V#yzVn4YScuCs+U={$#(u~`!H+bIl~oqq$R_+mqA_{kt*C;0Ew2SH6`h9gz6gdY
z4-I}GX8*tsD~us`Pul8N_D*g~)pA~1{6&>ZG{w^B5Onz`b*O^UA=>IeE4x0-;d~|w
z$r&S4_2Tf&6}Roc2+_8&&?X)NM+W+jdczh0bRZEyrU2U1R?}7Qc5_eOcb`Zu!kE(6
zQp<E)X}}|?(E@#`>9Vv-kqDMAdvi4|u+9<@1uB!TC3LeTRre`FI#(gEUkkn$RVXYE
zRa+P)xVWifP;@40k)**@_}X%Dn!Qj&ez*e}?hknB`a;}2EWFIL2lvyKY-pN)vo1r~
z8|^yY!tp8cWTEoyCF16S*W6^bstg%7-2>C|Xd<Xlbpo5;!Z!|qZ<tV+5w*A?L_hHI
zVWMz5-zk=$a)T6deQ@%a;@4tZvl^N24etzKk#<|*%-=wQ)y|k7WQVf{H*I%d5x*Rb
zrg#U-z76UAAVIN~jVEY9V`ZOjLqTk^?4C14QT;j3W@=v!bot{n*gIa`TJ*KAAUI2N
zNV##B#)1M+BDme{s9SPc(XOrL=7!9KXtE6UDl?8B6-({r5%3KWRtla8FgjAx+NJ=%
zt!VN_?9C;4W`fT{Sj14?g)f&kP9%|3@D4+c)Itpjh_)577+?SBg%#VmUVR(Lx_1iZ
zGqRSFVI;Ny_G%*~B236}2flO!6PJn3SZorR%+}9oUTz&*EZkx!2%=-(z~MkRf)n3<
z&bG<4BQy_TXLRA?U4@5%!4Oe?X7KH5OdBPH%|{<#KN?r0G1Q>9b{swDpS1v(dbxjU
zeVU^g5#3oi>FdR~3}#k0_-(x<;>h<)7lRpS{l#mJCZ?4mRpU?cgni)OKzgz=Ck*8b
z^IqJ&QGD$zd?6LmCGR{+1!uxuyjz{VwT*1Ll@%;j@3-p~b)7+g8n80-rqI(JHc?BQ
z4IQI1q1BA~BVr_{i8vwZ7G|SY|K4WP8_huViD#5kBVbAx8MyM^ibm-S4U+j-)`-_1
zqX_YR-+97pAboR8@zUpfQO+C7Vo%v`q~x4qed;HmG}KXBTf2X9g9ASd-hF7!T&;?9
ztEysED<6?5ybINJ6~ZqMqm_@hVW(BAaGrVNy@F~=Y4AG3)+b_}zo{5R_?@RzRfMk%
zryw^^B++wDXwPP>VEwg9-%|t}o~<Z1w6UAx+bO%UrbLcSzi%11p2q?iJJL09OzKCI
zI=QZfY+`dB&RKQPB+n4(_godH3XD~hYYBwbEWW1~t>Z+NCxfXU?o^SW_+sB8lzrc$
zksIYQ`f_3p7D=p0$UTXxLt-{u%!)C;{hWDBB(*BeIg+<8a%5_&`pm2cQe0OF)o6o3
z)nx*yLr8|0wKl0l$kk}c+|BG2SqLs@59lS%h?Do~6{(bwv6uUnuSk?m-x1Cz?0p%I
zEp9>$l(TA8v5l37`C*1N0gZ?1nHag>;Oo)hQe%v_l156Fh}0}uc<xvQ1?hS$dWO?W
zU3o)+rq%YW$z^Few<iayG~l};G_Z64o)0=SR`Ks+m(D4_t^)!-BRfqpVCs~3e?M`C
zOzc-hfwURm)zs!{#5pprcsI8NEeTI4Aj9ur?>AMbbf*}<*j2c&456!m*=!N>l?j`Y
z$+@>kp+n#eyNfH`eBn2e>c0FIB$Q(F19xTe`BF_CH4rX-_x+SQS*xO8Gt}@<GAE|t
z>e`uc$gcK8H$1ZMvZc2g)ySup>Pc<~R7=%3u^VupDv^XcTUHC6iC=TPKPO*98gp~H
zzCytadw#t}d3wBJ>bZ6F-R|nXcU`8}B>_{0Vrc=7HMG|1nUkg}B#abo=t$P0j2;cC
z-1~c&JV9F9sc;l%7m&t9660&Z<EDxzrw}nFzIR<(K?A)>UHV%w5E!5;s<s$uoH1r8
zj$i0TzSo^p%w&L|b;QAA0%kwUQ+OdY4czK1+#iKc=hZ@!KJ#S}taZa$3$|kGyKkj)
z-vZU$Ede2Cd6NfoWUi8-!WR3Hp%?E6_nSUIc^qH6=+iBKX&@kaWvEx-{C3hs!anCU
zCEV7-SvCY*>^^4zo5Ugpm-F^_GZbInCSUXswN*~t3gIqnxDo`24Yq|-zQRS;t4K*6
zv=$9m6{@DxEQqgqq9g<>d89mOr}tlEth|dhvb~<IdZ(a@c8EK98Ng(yvo)iRGb7!9
zZnowPJ^kof!^ulwv!J7u)`f*QC6n9R;nY`}ln!>~#>yKXS<bu1S<Y)XHR>tp>7L1Z
zjxF5GN^}H9B_e0TiweDL75o9S4bguY7mSVx=c0l<AB_P%BuE~iG2})_jK0sYVyoog
zWr%I#>eb1f$@fd0WF=>(fAoHS9d5(K$i(!^`}yS&ad80@-E55jvU(;)04XCwGd%$t
zS3-@)7cyBH7zx=p7`0#l@-~iojz)y^Kq`A9Ye&Mzhja44WFrR~Cwl`U2Vfzx_BI9z
zMvfW)Ss@WZfTEGBBalzT21v~C_+wFdSRNi&fFLjq<aZ$aodgv2@zEc{uNOuC3*tP!
ze)>PeVR&=}pVEHH!}!?#N5THz%ft9XnSWCc<KxLgf0O6G*IkUib@5ksG5*i~V*CZE
z|M&V~`mKvU<oVr)Kl_X6@m!|=PJc1|*2Q1)JbftO&;DZi@8Oy0w=VvW=XW3e)DQE2
z56{g11kX<=Y5l1m=Kmg^nSblzFa13Ie*JIq{P*z8@=x&m^h*4n^055(@XYd0@ci`l
z#oy%l@8Ox{pWvD0cOU*5@4tsTaIFC@UxZKVmjfX{!pzWtPy_Z6Uh+Ry6?xdF$sBn5
zk@z%q$-_R)7{J?O!{lL~#s~2BgM|5M8xZ!X6Xao8evoJp0`cSYxSlaSu4O+3dF;$T
z<{co7o}-?njma;8ey)^KMvi)hz#Kx>A4UIBz@z$qmLSi-1k3Qm0gz{4fMs|>3P7F%
z_DLlGc{bQ5J^aD^nDLwW-{E*#ZT>Tk$2$Kbj;9&>KjZkD68@cbJk5IlQ5{e7(tpPB
zAGiEzZ2w1fJdM8pjN?D<^Cw9CtV2N0!RXN{14s(UOA7E)10ij1W@P_lsR<c57}%TH
zI@;J1GCU20AC}=GInb0dvv+V5G}W^wWMTwJ>irBeurUEt%nTh(9W-EB=^q!F$G^Xa
z{)+v`0mfl}QU2roCpD1bG4vz$SLmOY4$OZl@h`f+LVvH}2j#Ea|9Sssb^bx~vxR@8
z{Fd?0v_ES6U)uRZ^?#8MtPyBn3tJo57@Ap|5VHR0Fa;-l$46`aaZY6TYo2(@{fU4l
zYyTG?;1LhMBPwRr{MHU;zvDt?#>PfKgCA(&YrsBswUwE*lY`b@<vz_&|9~tRc}ZDy
zYDF_EBL`Xm8%x7~0N0O0G@k_dcfrL7d`plCXlAiI4VYgleoT2veS+REn#VgM8#^ou
zF!kTL9!mgHvi)_@!*T#W2*t+8NXW{{_H_RhW(78xjg9^3Vq$+BijT2JDh}Y{@kj-X
z!~UiM##w;t$DgGz&;!MKBK%qWWA#9BpBnNcFc1|_VgnhOfrUO6@Ob~#(8u^M`d?x8
zC)Kb%^1(i)(f{B83i!kYOnEHvvDRM-0jiVZ5i>vj|LYO?SlW*g|256e?)YEO3{>vl
z(E4O^0R9zP|5y$FKckhI9$;(+Ft+@sxcy@a{XHQnsfmk8s{Vwnyp5Hf^*`YDv7Pe&
z*`)Z0MPO&pKQ8+}{vJEz*Y(&LK&<}6_7m;DjoL>DJYGM`1uFkHMt@@V5rsdx?lI@7
zP9PwjsDL@_Kf}QI6J&mIKXN?b7s&IN_6ygK^*omG3wl4G`k3+rQeaE|yg#P@g4!=h
zALEbV#}V^0?{{l|N%xrli|?`aU*X5Hf!t5}0!s1|YD`bs{i%VUn)v?-u&m5~1MHIx
z_%8wbnEQV@y)tnC?3`>IjqJ@#OdVl4SbxMUjf@?ECLser-^tR_2pIfdVf}}_@*CDt
z67o{2Vn1Om2DDAh4E`sspG?w!1J=w8zt{R7u>QN^f5iR{=6^=<N7~PB{53uP%6SCC
zuQ2fbMD+w_VE6w3^keJ~il;CTDnQCV0rMDs1kRtJdJO-S`Uk|Gpa_Kc<D3b+e(^l=
zKg#!b{{h0^_5PIpcl@_RKV|qEfSxS(e+i&JdhY*v#`|-9ejGG^0`qaX{maaI0)n)j
zmC--51_glofEu*GoiSPlcHlb5@VLscXaPhl^-O^Kcd!6{2ZP70Kwu(pUr*0g)aVho
zKcbH{Jmx)e!UBGPj^EnE61am13s7)0vQj4G0A}zzn>^W$k5&{cKuXW`&zPBm1JJJd
zBjwTd1a2@=0{8&}03m=dKnx%SkOs&A<N*o*C4e$O51<b)02l%cZ7ePI>;XmqBReNO
zOMo%J6krCh09XR7e%LPnYk&>F7GV3hmH9ZneuSRJ9l#bi{%i~Z_5cTfgQcE>DZs&2
z&%g-a2yg;8SsNPJI~ds58v&dFE&x}68`YEkM9eIWn1D?HYFhp;%jhZoQ}aLy;JAL&
zoTHJD5zt^W0&3w;LroAMX=H8UXiCV$%*@8a<KSp-q-O=|`XN=tOciaisyL`b0iB=d
z%nD7k?k!lTDPd%^5PfKdHbk5l14ERUFgbcMc9I+=e^4%V4nN+rZ(HaTBl~YilZE)S
z!*NQJg-Y%Cw9h>14_s=RT<UP^XKxnjc^58^KNfIS4lY=fHV$wSi(86>2oXEW`FmP8
zjw$aSZu<v_x(-UZE^^@mP_-YtIBC0R3R2$_FN}PsMmuyH+=zp}UDcYhfiRnhQzcEV
z*SBhq%TOX3praebAhVR7#c9+th*^DJ9c9cBl*bX-V0RWO9=?EdxFzIG`uZ!mWn@^W
z%t=HfTml7WiRfDy+cQL4P4r5B0^F+e{k+b%56#?^q4rla-g<4urC&8rW7i~N724$6
zM~Rh%u0^hj7i(T}5|UH0vRkj*QU#~--j0k%XLTxgkAe53tBXlxeaL_I@*QlJe?fsF
zbY-%-XmKWnTxJ~RIZ<VzeNF=vTTigMcz^bLxr+StF+6h!mV}cWQ*n_-!TmfDIps0X
zo@5lcQRsoV#25v_m@v-%jbx=1jU<y0icpugP}{Z4GQ9j6*bK1)T>4;BhYLxU(yOlk
zB5o0!2FupNW?~uyxZEC&{abzvtKT%sURKtbTUl^_<D9IUzV<(d+vR;@V(`YK0cUS)
zs00J%RIgSsV&C*d+=tkN=#oB*jTU&8NlF}Cdo+7%)HVxnhzOE*Tok<AjUqQQc*}w9
zdXE10VaZ(RP;{MuhM`H_*Md#zp{PR=rg=s0yxTp@QwTBynPrQxscR9_VH|P}MAIa)
z%-P~^$AWIY)NcvIXmw^9=g=84VuA#2rM$SD@M(Xso&u{eqOM>b^Sz&DKuR}!S6Ebu
z=`#<3bB0Ekho(`?P19}Am!)UQ>HOh10%NSYnSLb6nlT;JWwH{2Qm}{o&5L^;wzLfv
z-nbOV%=jKrPScC04XkQG7F~tWlJ)N(gGGtJjTsv;+x(SFo~M6XKCTgiWuTAVUPi=l
z&MuEpc^#W#khQM@>9b5iQg4#K9H@R40C_KAfRGUQRo;?!7+a$3yti8yuFB`RKfJ0G
zUK>h@ZROc|DujY2&#|q&{loTj?5k=>4wPpAg?1?OExA&aS!REHzhjPqB?d_{dd{Sl
z?;4Xw7qX;omNYM+D=A;Qlen$Hif#23hG{^$VpyheL&8bxBfh7LI!fo!NZG1aCx?NE
zY9DD$37a=|b+45?-}Cvt+mGAqz<K+IzS2|{jE!X@z}&0>#!>@m>U{(Fv2<dKwxPIg
z8#t1|EDDAVL)JtPbGx2A(R0JT*q)mg@dggg$O>F~7s1v!4<BD$B<Cfo%Folgg8Gf~
zpyW{6<KUu?_cOj@?04%qJ8Sr0s76{vp~b$^NxHl6vU~QpohQ6pu3eA3KmL};6T#u#
zvV~<NfZ;mzW^CDT70?~oC@Xx_@lnp+SzAOz%9?31>}IaZr#8v`{rR@4a=KP(+j1aM
z2&wg;FX!0EcE*a!W+k~YdK@~nYn66^Wj>u^_Jl*qWfyw6C-lSB`=nDfd_>m5rAkh9
zVc14+4?sjbO>hCd_{_VHePcQ6B}KXXnTp+{!TQad>BkXZ;dL(C7sGKR4E=Mt@6UVC
z(V2?EoO>)r<2cSe@jY%mXCwSd*@6>##YYQIcHET1z+F<K8(xd|clGr5(~w7B2$vSY
z+uN!m)ftW+OkFUS&=wajEyB@Z98k{zKck}&@Il5{Fu^8~$)<Zbmc-F31H+Gm$bt|A
zyaW8)oYtC(k><j9&Hb$gG^hBQn^XU3MM7NtV0Yv=%h<`erB)<kk*SB6UK)-3K`L@r
zg+%-8pnZm~RQUUl2o5Ft19&vS>qs_J0bc^@5VQs>AJ&0JQWkBbSYy(4oT}Ln(mWN2
zVoBAFGS(eR828o?2HR%11folcR-bsWhLYn14S;t)jw#%Y7+Ez01W~MXfg{Hf2nlzq
zH~aJ16kGR}eABgB)_1IG$XrzrF8q=&m|&Rt*}b{nQu4n@jW{CR`UrS93~LfN+Ad3E
z?LbqWULYgdb#j<V)QIoUb6DL`*c$x4_U)a-%||zO7pf20gNbig)KsGmqVrXTz^0Dj
z7Wj9OmD?>@<T!A%xHh3Xoejt|0<o(E$+1j={6XPeQ(Z#Tt7utd-zzD;8#Jj<>-jKq
z@;SBM+$g~%{S#+bh1cfFgdH_j^L4S&t}Djuz)1@5^U+*QaNaW><?FZAZ}e3<dT#|{
z8r+=4RKL|8G@$~dQ>lA+I~uVWkh$J~Q}sPFaZeD-G42G7B(#h`t^yZ&;b{?=`B0D4
z*D^4L>m$CI@`1;>QyYRP@tHGy+6Pl2a_UZO6|@YtuDMYn1GG^-;#|PnL~&(YVUjY7
zn#3-%{N?VUC{cUoueB1#cL=&H?BIuO^#g<DEEL<CeK%iAPEA@@*@tChOfV4<F{SO@
zlc9!>QmVaQ4BP6x0?8^C*a=w7E3brE{2cxg-&Z%GEVV==$czXJE72WtdAkOxUI204
zOaQ#ICJUpH!}e|8+(cn=nf5zz5>9{IJF(pbm$ab$va<qe_S++`(cx3g`a*9u<d_+}
z^{U&fl?JZqWPoQZ#_=8$+;xyP{Mp0i{EMs!McW)Ir7L$QIXgt`kQ8ar(-8gbV4By$
z(rm3C!l!jwwP3A}J`miq*>q0%7l;geh0}XE??ZZSXbsv%_Z^c9-#e262Sg4&`0K~&
zCht)`n`H@F__Sf0%W@5{`pVk_lpZH7W}%(7-QhZdW(0tI{dipW8-s}eY5LrU*#H%3
z<ZA$y{_~JP;t!ygqBj_l%cQ|y@IUNajaKBb`M47^iFP}{J6iMwYE}7XMKGZG<>A1~
zA07$3sR!q<nyD)BksA~M*J`)-;-;5?KSY+A0wWrEnH%HBE9LFK51gh)k4?D{gkpU?
zATc(ZMnWx@FIL(-)r97VYhUpCrTftCQWasaEi~FK+uV|P6PC4V`K&;znGa(}EPZky
zV9TC@2`fkQ@!tfAuv!LVq}N~JpVOnmXlL&;!-vjzo!EA0;K61oqMTCiht2LgPeKnB
zt(O%Ni01b}$O^MVUe$V!QrjCjb(_oeTy-|`)>_S|o31I&1UGK{yz(ma6C+*jNIkK?
ziB<wQ?GotbHth%Jy2BM76;!Y(i>wy7=L9id)U&x6cDkC<9>%toS9}=X*)&D@?wk5}
z7$^w4Y3$zblzv}r5Vs&v2#Js+WM%Yc7+BWOLC>gP;2yngQ}CbMf#Ji0J*KJyN3cNk
zMWLF?c)^yYd54?!Rhz-P9^1{=YA!^Hg5XQ4(&^;XjRWM{FdE^9U=9#OR31V~WK;l0
z(sq3nXN!;bmLu2-qF<F?PZJC0ri;d|;s*A5tYZaYeR7AV6=()^%yV?O$(%5Tc{XC-
zmwFT&p8a%f(_sc=d4cEx70fGLnD8Kml9Vp#*gA#82o!esCkE4A({~(&Z4-T7*zk6q
z&vzRQD`)$@nl#hK#OI%&V{;Xq)8b(;2(c|<m2-;NbFKgq))zT^&r9zHSwixN)oZ76
z-xOX|HjQf(qTr(JR`0LRP8H4P9o|mi6UfrdCS}nlCJ>3_U?!j?!Ax4#Rf-oEb3OCS
z_ThMb;EIrH#;9Nrfr1lsgoz~iAs*dp1{{Klkv%~i6dG9`2EH^kd_RF}V)yP{cPtUN
zb{j_JR)P10L`byh=qR^JQKLeH)&AG&p*=DQlR>qUJ233I9TquglhqBVu9tncoT#e0
zJ~!xz$WBzOSn-(hT$tF9V12=155gu+A_84RFW6?Zh0D_BCNEMx;FC|ElkBnGa$F$u
z<dvp;vSlb?r`LDVF0y*b*Pss1ROvHwGeap*Eh9;X)40}z5k-1gsfL_4m)+<W{Rs!h
z2{R%cH3Jr(d$DPge$W~3?R3}ju1h#4ZmGv~)h5y)0Vfh>|MLB-@b3L$bgzmHi^Zdw
zvr6R89SRKndR)}CFIvBubcmRt?~_2k@g4^&LvB^=2OgvjZ3y+Y%<IGMZZBYsBxS-S
z`#{2Gu<^Z@m&W|Xdn=Esaq<`ro$VJF<&)`%sgyD3Y$u*_Zo?)1p9Sze6l$)*4}#=`
zH81IMS++fUj`cCZr06j8jYY4t*nCoW<J}z<Bm_p^7X~`r_r#ryB^w$!!!7otH4j~R
zT?W2MgjG{BH)_Qt*U?KpEgG#jIr;3|wW3i)N!&X<+6ni(0K#(|F=U3V6`yK5n4m$=
z$Es+Q=?gvF{dceezlm!$cN9}z9=CQ)RgtckeoVA%a+)^d=)`4;<5<L~!>?Hr(8Aiq
z2Xyi(+VXWD{ZB!9r!a4+?~T3<Ih9csO{w)HR5(rd&}b3E+SdjU6c9Bn8RAjw->l$n
z98pbEGf_|!nVQ(C5xL-NII>3vn0W3PzObzQSeBg#(62DJ-!XqljmX?>?R#a%ck6Q$
zFkITuN^|V0ea@;q+bkImJ>XZ#OhZn`c%r)}CLJP8V99I8mCG%;8KVl?rPU`64~~Do
zT>LpOyg4jqeZ20>LhO1PLO2P6@%EG#`1^<i%gwO8s%?A9($X;uR`QShiSy5@SfI?K
zjpJsr6!grd)r>fjv+i+EmyvfKpX~kgz<xdB`=1YE|D_lGPj|k5IMTpJn6!-atb`ow
z41}y4?7tjo=D!?i4)(t}(vQ*Kjx><-UpUeX%xpm4`A=^dxB~+$=udB1@X22m0lWr?
z0=;GlfaFilSr#Do<UK1s`Ohi<Re%~m9q2~`pY8ztU<V6;o+Hqw*4Hzz_~8ue+XJ29
zCztst^uuL-3|bgD{!Rvle`FW{3~VfItbzZntn`3>InW`0+#>ktmK(VmSn62;z4OOi
zS~F)O;8rcb82B&>U;;1!y1$POvnjyT&DPY&8tA^8KRNK0Mh*^tc=6U|)<!^A-Uj&p
ze|P7fHr5RFEr0m+M$W(@9n4(+hllTIYHtMe^j&QJsjm-kH?p_+o5TO~aP|*}|BolZ
z|GvY|#=^+)r^D}Rrl_zva}gQ6XO%M+V=aY;VwGB?q_N9|=+x<E97Hcjs0WRNVjRPz
zNB$fJiBJ!zofO(1Y=(0z)7+x6D$jx2eDnB&M;_v))*-6t;H*vYVZ*M*;tG`5#lQf!
z=B1O?W&1~ws4Q2mg(<M*VaD}a_>+9y$=TXDQUW$NG`7HIM5ud$gERY8(gQU6O_IxD
z_}DzJz3#7Eh?8kxU)jx>qpBTu{XS1aUE-&mp7frw_87#XFK6l<E9hv|m>!R{tQGiZ
zCe?}MK1Ym5;*4z&jT7!R_-Mp%ti3$!2h&q<vo;LEprFNjKZ$t1Dfi%mm`7>;aGgkk
zyY`x`lVJ9X+HsJ*#O=fzs}M1eSBieGVgsBZJi48O_h9C6s{o!p9e!N_a=}@M0G)F4
z^W<qOhlze}>$9|kL#7AxW(YV1%*N!4nU%=|Ni9yR=`gf&;>r|t=|-XbOl8^8g2pj%
zb4Zrh8JYep1lfv$fHAxsB$fnDN&HM!+0*=wV<P4}PT?~`jRID=7_v69a0Rqu#OBoJ
zFDoP5BW9#&bDd>N6<!sPjnSD?tqaqBB$toPr;2+MBX5vTzJqO!!}4BTSXiN`z@z}n
z9Dbdj`*rchPPsvag*XbbY|jEr%J(=jQW>ssZ*hb}sCb-wncw3`1<I!%#kdW~?TVbA
zm>l6=MZLDco?qQq##p@wAXFaWAIye7W7#0fHR{`8P)Ubz+c;5;Djzp!cH%v_Z>=ch
z)wtbLh$<%F9t`BVykl>+i%QeExUEmy<&F?=(TgcN50nF(l~GT7UnCr-tzw2RvMew+
zncX6yUJG4iRjho}udT6I*$Ih8tstMFNK13I7?~3@i=~rF1D@J<wMj*trzqMf&P6Ig
zmNa6L6P(e~j_v=c><aBND1LL!(&SFoeVpHwfVvhkTGJO@(8Tbx((D`4SJ<P9(Rw)4
z9yyXin(}cSMwc)`{-LTu;^$-;;8MnkJd+s=+1OYRT-m{n?*_c#-FTO|*bonhKijX`
zyjJHv3_v3#OeN%MbDElZ=NU0Q)z3$C_cfC(;qW5*5GERWkgMe;-ciTdEO$7)73@nZ
zFZC!OOimy&0)ci+Rh9xw83#QsE=4l@NYAUWI7?67!)ec(Y9I%mQOf*H<lLv6U{r@l
z5;ZG(Is-dD0b8bOX3Vcy9cQG6`!i#twT$|7eduPNu89@>c3z6VI_ZWph>tE`eSzi}
zT*CNq95Zs62YKP`YL;MJ@<)zrSP18tBKB^fLRppB>!rLBxGZ32!YZk8jfBdH!%_(n
zh*Ja-8o8S1wMXpqtX>{DZz0{mf7kKzFxbCCDGzo4;q1QiZaY;`eGaF`@xG-FrmdQG
zb=mKka{Ct4(nRSFf<=5#Dm0r7D^pv#ui5VYmF@}vj&4;6#Z!x@rnpFH^M!tp;+Oj}
z^$MzB5R!&(X-LrN_xAUM1T1VvTd>V>J3Le-c=K{f)3nI<X9r>rR{)W&V+YOxs5}Xa
zb>-@lJ$g8dRvI2O`(fZd+d!BrqxbgiHlhFV;w`9x-b`<^uCjT!e(4xNOYaf2Sn%b6
zSRG%}mvZByy0b;HAZ67ymjmZ<4rQX6Sc`4}21+qh?9Hev*97SL0Cg3^u1U<0QJj;P
zvJeV3bo<d$5!TMP@&4AMY=xhe%fNi-+A2)%>dwOBr?cI8XSU<Xu*vVhAe~3bURWpN
zn)l9ziXICnnxq=wH8_+d9ew~go#L)1j{l~}F!L6VV<yPC>f7^9O-T>LyAHk~DJ+Ns
zu)J6!uNdtl+D}&a22fI;`0$gHqTe#gsq6WhrSGd=*>&jJa6t`z17U|YUcp9sewOOI
z^dMyJgbc;!yCHRu)C=B<2<@NHvIo;f$sXYHx&Bna;@ky0Q6&Am%3^>Ja*pR3-MD?s
zNyp$mZRmTWoV?!oyq?fz;)vWcrtCa;5H+<0Iw7`^w*2uqHH`Q;wU;l8&*9O}-(r8+
z??gSSnd0^!(Z{J9lgCt^N#*i4K<v_61#fcw>W4%#%CHMD2mGK3TdypB>RYh+WC#;}
z_gr-2ZR&8VPU+Qmo6U1V1#|7o{HB}UR;ymGLD^a%y~kZ^sC_9Dr9~K^LCfR9>(xU`
zDZ$z7EyhJ`j41;y!lb4EAl#S8v%1CXPKTZyxcf1=?Mk>qD9pTOcG)&HgU8?Z-yV-E
zreQ~x#Rsr1l!8NG<i(LqN%r${h4%}Z%|vj7``^4d2-0P%B{a8);bQKjSkv9X>9CY3
z*^3vTgXbDU)%3&8MJD(LGp34!7fM9}W?onH*%Ik}8r(Pi`VIsh!Al5&IRXLl-eNW7
zK^ZNf&qxC^s-^yC;_dK|7b5}vjgcdt_r~nStUhs6ATy*!^lRNMBOHGGTtmAczdSE<
zq)q0<S*>aD9LqStH{9{TawJTBCIHNTL(WI4y^xjQ+5(5(Fi(e8R%vTdpD^NHZ4p~u
zIIF7NAdnCnuC2{Dlh?oLXiZ&w3P!9ki>u0<!hj@tku*ANbf(4#L3=cc@ajFH%rXgv
zG3gM;&Ie8S9{!}O0^#WO<G|y$YBg4qBUaozyjK#3B5YK$q^NlKoAuM1eF-5b9NN~H
zag&&s37N!-g>37Urh|Fagd4{ZyFNZL6R&o^I7)=gMb2Qou4pVOVBjv-mQPSjv%E0i
z`cU~YSYd6+sm&PcO`xX<fn&vYjliV}E(ei&?+xK=QOUN6RFKL>WR&J=lxDuA0lqGH
zM*cyBGxA>dhZhu-&`>cj$p}Qv&y05K$RLPPAH3bZ-jIbud1iVcdLORNgHgRGu?5-l
zR4qnwZ6sK$zk7!I>g|h>S&x8&g#(^ru_z(AG*SsE2_bzqcc*GJIxi_-O^NKCoo9}!
zZV!a219s5}pDR)%6kft_VoM9-0>+e@75Kj26!<rNtf=D?ZR_^SSf+N-RJkw7uvwqT
zKaHxnHfK*RoQ@H`zIJ)lSU_4kV(aIJ*40Y&<z6(@I5sRW4MkH^vfim9kYiB8r)Lto
zq&VSxa8en^9UH5SNBsIjiGanKfh`n1a&#O)Kq6n|xj$Ok61R9AMG@&JL^bhs<!LZ4
zzGd}?X5wk-%Vev-YH_UP=v^`);;%mR1-N3Ns8iGDfnrKQVeMjCpQ`72DKa0jG8V_j
z?>N+6$Bg6Ji}^MW(Xm$BYkcCOONv8l{)Be6L;X1##SD0iRbhl{y(#*4BQ^NIe4+5Z
zToey)ke3Yaaj<deWJloZ^tJ4aL3YxOU_f0wrN=0Jzs`-#G>wc*fMQNZa?QF;o$rZ>
z^P6b9VT8WMiJ&o;Qa4rhCueSCt7g4=zhgWhW+;H6Ag2Q2_E|(My@v_Myc*l-N)19y
z<48UF#CS_#{7RGQCFVzS1u+MrTB*!zTn9LZ<f_)aOcNni5H3VE?@qQk9Pl#V6uko)
zS}Wpk-k2pZnOA+_i0_uD=#Bi3=rFxv`@4p=9fLGUrF-d$-wUAMUCr?C`OQxdsA1|V
zTsX4L&J@~HvtWqjim8N$Ce@Kk1PgsXE99P#sPpSI5R57iSh>xLZHwkz9Y6HgwQoMZ
zO^G=nIWKg`$E;MZbAS7Nr9EMKDxb6%g<&{EYF<S;{az#05i6pd7I(ERvwPrW__i<(
zQ&XGUTU|uFoiZO4@j7R9exEpnPbB-I{r#b#ZNuy$;K+ugeH$KuYu5%4`y(gFSqym6
z<CX*1AZstmf=C==@vBy|)s5uH#W6{w)UDs}V44k;jk~XzKhTq$u*XM8(e}{w(S57n
zC%cB>vcUbcUM#GStDTcQxPgHs%P4P>-9_SHKlai|U%w)kyp;Vo8~EG!te&2gDqf`F
zM2!z75kZ(oa&nTQmO{qKT&e^)BgPxqyD{f)UaHKRuFQ$Q!&bxbsJn)P4V94SF<(;(
z$z^u%@5-iA%B0C2UlXdc9>7jZkDUvbC~M!r@l+MR6{&Q1=|NsZGm6#q{0`XIGi4vX
z;A<|FfbZJ?ddzH#rq){ny#jtlD#ay1X1q3+>Es3VFffKmjcPsQ_acW=$Vjv9&O)9a
ztd$pRO6Xh#P;g1!s-~i$V_;)_=5=GyZ_p%e7aqPsEPBc75-~godyP*l+u2S6AtSLU
zgyrk8R7iqQ)90nPuBJ<q9`?X%LZy|SR50a__?ES;BpVJoQ=U-*o$LZMOzv!wgYj&z
z96W}DlUkf7&R!9@Kxn1!(+DF;4;zMPgm5P@@KDJPjdnvjJI2F<u3jtJ^>e3~I!Ftb
zn@RfM6!JnIE5=F;dZEn`YX|)V;grrz4A3Zen70yeLVYV>I&Et@(hFE$5-Uc+a==lc
zA+Vy9DIAG596#=lofn(vw8xrAwU3sc4dc1qFKZNEmWpzFFEaa2EJ{1{m-#;2c)qHy
z3a=@;#2yG6Xx33;dEQBk<AErwXG7Nmk4X)FX<syoR1o`t)z$2ag{EhI`6zX$qH?=e
zP*_H$=~lT$?6c4spBi}d(Q7Z9eRoWE-WS%_8X(HnGaA|ZhSnyrRj3PG-zqOYH$j-i
zZ!x#ew?~U#E2mMVs3J53TpUJKeMdsauJnAF=9lM5zgZoI(0c{4?OfM9qV1SUzdo>=
zV=Vy1bMZ!)1Di@+O5Ri79aJBIs-z9Bg;lF@#Z;-MP_v48y3oaF_sZf$b$OH}ZigDh
zG=zmjtOfifmNmH)wC96tlm^pf;4`g~PjyNn_ECyMhb9`R!{m@Una6{3?reC4NUCy`
z*Lyt1ltHX}V&h2pH8>84&Ms{$$^>kvX(nJ%!W1_jb<q@Jr_wwbd!t|P=|&T7GM)1o
zs;p7j?0UzH*5p(iOLCpYCg{z5+f;9EBKvBr+Kb`qA$7^Y?Ay0|l{lEc?IYp%DtgNY
z#iLis&RWk7IxWIP58E!c;)q6ny36MT^ZC8ufKF$VydXH-N9z?6J9>n(Hm*Khcg&*}
z#4PJ)U<TPjE--?Uy8)}k4VQ1vP{5|lQ5&L5Y1tauTlN7r7y(ds#!6nVrQE7mRT5%j
ziMkaxjWQg`3+1LK%&J|q=VvPnclB~~K9MreP$M-C?48z!HzQ%)j#M_e^}TgisXX;2
zEo=atI2NmI{sO0*U=+W7$h0KfPHLc`r*r<T*lThq_&NRQLMt`dcRvfIeECfq!yw?v
zjU`{efsdnmhVpi?>1|(ph95_dl)?8-oGFO^`c)!M40$>QX*GGIC3bE;EU7rHU#Hlg
z%1|W<?PM5yS(z@{Bf9bJx6w9?u=ECYQxt-F$JvImP|*}k_0s(D=lRNCAt64JP?nKj
z8FP_vRWeZ%)7h>pKrJu9P&eb<E-x=Em|ex}can)XA)8}VvrankQVAIc3%OpYuZAq_
zqRLfYylF^6ZmKrkLh>kJV42(Go7<c8#JS!P?@7VUZgY#Ok#x>bzUZOu&iocdQSEc*
zB$XGIX?~mwVsiT6IF23gt!x<^#|z~|q={wOs&MAHgZ<{Wi2aF$`)V7GCcZ@mB*|pp
zxpgsth6riF0hnLt>OTvPtU54mgSn;Z1QrtA7vH4|dj~Fvco|*dV&4W-qy!GLmA`5g
z^Ti|(=4)|9MgkY?lFE_=-A>o22@5)m{Eo#lX>QOSZpM-y{3)tk;(O-1?8acSp&&%c
z?fbqJyw3rM@wa*S4P_mMjPQV^w^vcP><nXsgf&wj7FW`|uTsL9g|U^Upz4HFEcVg+
zBWR`GTRR42=wCQB7+|4ao)nIpOxDY0>ZB)?cNz^5%$f<PtY3QwA*Pr@w;k5-`|6qk
zw-CZY;rb!IekGTP#%GY>ywjP>M2M7(>&$s$Qp$ofIL-Mf5>eN0lSS3nq|S7UDsE=#
zNFV~+iD8airNm1uC&|Yed|Isuo79gcneqXP(dS-I52PvbZBrBLYaJcel;)y1LrIFN
z!cS>l*&Q78&i=O8c`Iu)La#^F$~mUHJFqR_P+&~BKV5{-Af&ya0B8gRhC#WsO?i#X
zM(aRKtqc(z<9@rH*yAwfrHJit&gGC_Fw&<tM@D0N|6ctqX~OPK#bA!3@nv+e{zX)J
zz$Vxt)U1s7@uy1_M~bOowd3<qEti20%7KoeGi@{s6Z>=l5qIhwo3>Sa(T+NJV$~yL
z#!cd_99lWOIVi0Er?syD$}3yeMS^Q^hv4q;;}+cAB{&3kcXtwkd$8aTg1fuB6Fj)P
zyq}pl=S-5h@19rnc2U&cy?d?hr4;*H-5+;ubd0>Yq_hYGSvPrDzqY!c^iUXwmT;)h
z>xLc4H3}C7_H>JcsSMgfA+<0l&7Gy8yO5Ck`?N@&$=R8iMckPqe%clif-iH%TEN$e
zNxEe|eYWg48H2bNg*}GJ7=8qvOTjIuyA?575m`7rh*zC;LMDBp`?L9`v`#R=aRh!l
z_B41kXDd#Elbf)d#JaY`wOr-mYF}vj1nVhDNH}@%TYdGA?Ql=6$-E}s$+ANty=A3T
zK{vLo9v1aT+(gHP#6liJsIfWe!V#&&Fb?~`PA7KM@YXPAQo&k~+zvyY;_kGzCj~bz
za$os-n$o*1FQoGJ0KOK7W5NP#B!_*J@nC(Kq~>P?9_NNtl_Xj}h7g4A-dhsHBWu}u
z^30_RvZ(DTe2>Lr%empr>v69OYcHFf<gy;5F(t^O@g5761YBd1SVxt^8Vdws@krr9
z)wh67-j4fE-#X<>nFoTEK9W(0A{GcENu`{N7<7ho!m2^93|ASwITJ}|?<Ryhr686z
zP`uoUC#k|>OB!rEi;&M7Kj0d2&&?V&O*EcI5||&WB_^JwK4MwCEE*7;6`XqHkJ(<q
z{T}$?v1jo%KPn!Z&BSmtv)AF?f5QdugYYVJ)uAwVtWAj}fP@F&sp`U2yUwuqEz=@(
zq-Okk&;qsN`y`5RI=1+&$P+`U^t@b?2`YyNYfL4q0Jc5(WpVxvIOsx0gjH>$!cx|0
zwK(qAlg6q?*ez`0If!=k{n85?F4YTrpETWCLmH_of!_pjSxmDibH@wMCr->BN}-ib
zD4S)(K<Gr-9W?X=`847qbmHssvOF$khU|^+2Z<lxy>S~Il&z~<Ud4wgNQum64T2$1
z?oM*%5A7KuvtI;!(E!oa#w)=Oceur~ISLs#x@)Kbo0a@r3C0EfJl$mx=$2~@cUy{s
zk*|3?$KP~!4wdLDL}c{t5zMwz>GV9pWP|D^`C1L^_*3bZB8~N!ol^Cnf?h`C&9otQ
zVkyy}2|SC1K=y2PuiO!}a>3+ao`9a%;z`pj@}0uhRWwhqO|a74VO8{kvu*F!K~>NB
z{H8rW*TZQLCJ*hniuJY4mqq(keWkadTEds%JLjEwZSR~_T<p_!nGEHUI%&UJ^|rWT
zSw_U6*tP&SvcL|2=WBgJ?6G_3;|(#S##0vM5r)s)(t{0=gw1>AuidoTXJ6cQWRe%6
zDj0(MT5GrG-VU&GC~9C&UwL-d9)+ZqzBsS*`mAfMjSSB7gatZA4DKLewCu;~9PY&<
zL4NYeY+(gOMp#S6)vI>2R})2qspT5?2T`*PVQs6B$uuCbm3kit^PgQAEs5l;JBsJ_
zqqiHB3iy4NkPKf}>{hN9Zy<Rc0SOK32l{>tW?$8Dt)ey-VG!{^=u0d}-yV_ji!2=x
z^=w>|6?wnodJENNhtX94Ey(9riB!J>Ne-Q8FIR`m-U1j#3x9}hrDk3~@#|AD<E?7m
z+3jAb8h$)P`EJ@mmOj2i@%TVCKTgqsv))C%=GB#2+EuQv=lM!??H2jzT}9C|cVWJl
zNT0$X25ArODF>FA&??kXR}pQ92od@Ik4W=I6B{M7BCUuhvL50e-10waBr2#Pt;SR1
z@7^`rgsT~VkZ9w?BA13{py3?XxfX5<X(fJ}A2+Gq*TLw!P1zrdk1)o+M2Bd;Wmitn
zQ!t{dn##e+SJ026c+Zj(M;abG6d9XT0`}p%v|s;%!o2)DA(Ni$qL?sQ@kj|O>2gK!
zJ%2dnNYHt%4<+=C>f`BC`Sgh-qGgidFx6&I=eee5v~Ilp!Ilb+LJjl+qX#hxL4EtE
zDf`p|n)|sj1(H&YDN^<#kc2wH)Y_?8gTjT<u2!B>QeKZ?k~$g<DxbOHmEvZ#6iMGJ
zB${Y#Mdz4Up&F#@?`bY5$3wy8wFK>TjP2<krfk@5bGz31Y;}_Dz+zZDIYF^T$NPgA
z=J&g%*tw%X($O^<7+FJ$Zu+Zh9;5m&V`jWMLJh>*!Mb9_5QcVQZsxJjvTpj2OfJxh
zUXz+i4Fn4pkx3p717(WYu^b`OSs8Q+$YcRunX-$E`)BOjq`0?BS2OW&h+$wA?{_gD
z7xzqZ?>A9k2dc*PyTGu+Alxr#=sXw9D2Jm{LsxU7n4`F8ZMtqjP9aCsBw~bA4p2d7
zxMJ#?iBEj}@hq5|wqf9oq>=CRdbBj&S!en{d9^Pg;LUll5}$<%tM5#r%&RF!Ms}lQ
zw|<aUd&)hVkhZdQZENV9@G<q8YWFynLlQfi#zDVb(43;*e#-vboP#t2^$A~i-D=lX
zv5uBmc_ZguuL=alTR5lU0?kb~L2xsi@YpV_e6wL~hpYEcR4Rd7E;DB^VKaBXN}gSk
zPDyR^F;A~zQ|(EDCj=tu9C1c?30a#xcGw$m&M?7XfcJ<nB>C|kvjPK4mvHkGX40{W
z1BoSerwB%$SvMx4JL9>vGHLL*)iJSm>wDr{<6BOfhrAja6q_1x-^pjEp~GV^%r^k;
z?qMF>H~sx5)P%5UsdI;Bsd{TYec&+X<IIpyUNQ%nSUo;(XB6~KGNckHRP9YE14TT(
zs+#uX_vYqzlWc$4gB|)H#EfwMo<5V?bUDaWf`<d9qV@DUmF_@U;YV(GLdJ>&cF%lE
z_q;2KsOI^b<o)K;0F&OgEJ}hKYU3YldGoQFg4iu1)o7Kx5|qnXtsR>IvW-}<5s^bD
zl~E4N{he?o=bQ|<jeSX$f?eFpve|a8x9hvdjUmV&f^KEVJtW8s4z^%cCf+2lmx)Vf
z$XJ2`oNsoax|ZmXPu7T~w;f=ijpO~3WPWf?BEWmkZ#C-O?h4*pUHIK(TJX0u<@Cl0
zb&|HXOME|blCH|S6g8bBn+jP_cFIN%%d<y|c~FKTj=|SJ-IlwW4wB}nO>*99xdA+p
zHGK$D8xN}S%)%maTPm*gGSSgYeaF&t>|Xx7^PRm3no09cU(+GbjxIn#FkxX!?jt5?
zZ+G2*9Bhp$L8a)SB<~@Q%Z{Pku5a?b0Hff|E&9lSbMv7Ymhe!NQag7|P|$EhLjG80
z4~HUG2ln^nnIxRm4OGB@r!$Sp76l1udw~J1Lg<HX>P{qGI4`i`J{(HlWbnO7ro#zg
z4@oz91d@k`?ZSnGV${}?21diHhMY+x@n8$to1{^?ukQZnCTodnc`zNBbwTn2_Ni(U
z9y9Ocnk)yKme0H95F%Z<ux*n-Cv8CVh&;o=dkvF8jBGQY^XT`j=y3yitcOB8lR7V}
z#;A88vT?nMk|J84$s4(Mq*HD_Jgj?vi=RK<spaRZSr?A&dNy)2#xoGwK+_K?3*;pZ
zXWSM`y4sI!)z>XnRwYoWYwA-WkU@Qz#r~>%o}&LI`P|Ku-aiXFLWLW32EQj~_MkoI
zH3p08qan&RE7tW5l>e<Mz%vx$1B_dWnFPhq-GyP2n}0j@4Vp*eccO7h7poyA<M2ZE
zw<+s=u7tcIvk?r5Xz>_o7%Bal2oNMYp%_UW8|$IfIGVI4ov?t$tULDzt1*Gda1ak9
zr#deZEIUH&pi3VnLKVWV@h53Nv<GWdyn<Ax+LpqPcw8B&jZC%m?c>XHjWd3zlMw*Y
z_9S-T=rV>+XbB)_3q#N%bnd5=T)_#x-YZK+3B4v!8;m7n**K>odi7(n)$cy>X|`bH
z1N7>1O=;u(OqbaH3bDs=uG(r+P0jrpk_YM96K~_U*&Ue+43@ERrjr?oRkq%$b&?0t
zjsge9PB5DQx{qe}Goft(y4je7%^KdH?{V6D)+&n1)=jDqlN9*G{rSjj5MfmN9#N^C
zr|IIcsv<syqhQyuwjh|K&_5LH6BKFEXMsHof%UQwVeeDgyFi8YKWc>E*$6u4Bm4uz
z|8ji$zd0!XKST-riSYv?$mp1XvD}=%;9>wP=kFLlQ22L@|BuK2VEivH|M9Rq6ASRo
ze~IzGApDa5SB(E}`2J7eKJd)^|A^)P8GZshUjNUK{y(AkzoGa4Ie!1&1NVPM!Ms5C
ze_;5395VP%n9N^zzLoi(UOD^++5hX*{{M#Q|BmYa5t{fnRR3>BKmMOkeYU@&`fhIO
zO0zRhVSWy>>6-0k#O##;)umO_)YDuR)t{M>J`+)%^Mu64`jN&SkOq>H0&)EeQ{*lf
zinI_-Q*L<=?iKgNiL1tYTfnu4_fFPo`KoQ^am=wFzxWj=@c8~r<H}_j0-Qs#f2DfK
zk0(0`1#BrVrH{lPlShvg325Ixq3x+$A?7~!HrUnEbZ18U{jg+Q&U1gVc(PVrqIKOe
zPI`ph?l34_Mm6%_ZUgM5cSj^zN=XdM#6*M*YgfGQ9+-wBcED^>*Qns7CZQ*HYuCCU
zoL2~=DwI&@PrhIONL<B?A$`=?2B0RVVIqFy_qi^peopm*?`*0ig|d;EPiWw^61y9T
z9MaKftl}RDn<I(57~uV?=IE$5^<;L8m8rhU(dzmf=-btnOEii!!{FYyk?!)=2`X_H
ziB1Q@+qGNrw8;NjwcO38eZi^RaBhFjdkED7{JdwS%d;XViQx)kJA|&|p%UZ(pBC8z
z6RrcpuzgO|5(dNHsx!d=s^V~tnHFu)kFM9*fTkj*B7TnE61@i31L+=1E9$U)=AG``
z{hY2PT@8{}$Z#i5#VuA?b0C|6Ql<GEBrVK6a;hJhA#P>z+~AyvB^*1PLnosCkvcg$
z?#4TZih3-#4FjIYsM|5lZtV)n15g^{@cU0ER4#KZ2M+W!IygEy+Hu;?(Kek>p|`?B
zb}6KNMTzXqj>hj#rj#Z_%|#|#QjS=3_zf2#bFl#?M=A3sXK9J8J|Z^*3{@y5I<^tc
z_XA#G_hIu=CcQ%h+oTRXJHn%OBgsjPCS_*yN%t_d@%OQbLo}N@8JK`ku5zc9YPU=`
zTV8wKXgBRNew(M@TTH!fUG(O=jpET8?UtZtEF6<)F>ng_qXJ!ruRY-SX^a6)tXF&!
zN`N{}4lb@Y%K<ANw}alh3c0ok25!%#SOwb~CclGj*@QiGeKyc4qCyaNCDKtw{z4Ws
zCM~_$sfbAW4wY0PZeO|xnuBV@ZN@am_MWowJz`|_#+%?K<}r~D#P!Wn94&4lxoNT^
zj4Vo_^GeoZf!9>QVuxLzIYarpA|2Z6y(e&5h-Beco?Sjdl$U}X92&7n!2ii1BSv8R
z$RloiL4H7&*3$ClhNkh1-=N)b=x!X_#|njJPAXFhk|Pf~#2LiWtUHj<A9|$N!B3s|
zPFh>fvi+z-bkr4JqAWsrMt~uLE8YGaPx)@zVy|OO=x!4Q>bnjtbAaZ%+F2K*cJmXf
zBfW9|=(T}YMB9E#JZ@<<$bH`w$w3P6h2MqMU7SFlg+yuJU_9LP7#1A5Gudq4*pJCX
zaV}@=V=2dYfrQl`@heA<ZbcTA+Ao{fcchM4k0iQdjElCA6ZkbwFXQW2jclxuVxe7<
zu~M+*FYuLN(HGN~7Lzagl$KYz;HN_As77ZEdrn1ng74yvurTKCp~M~WYY$mQE^#Bh
zG9u*tm>i3%QGpu^MVi14df?zkETpEStyqXVWw-1TWZ4<DrgGjEycXK6`EewnDNJ*^
z>-`f(g3n+u<Q^l`uueVJ>G%U7h9F?~YLZYMq<+vxxC-KyDs5aUV!Rj{X|ej&%uz?L
zhRB%X81d%Q!~WQGqvu`IN5Q>XJ`99cR~(`cc4&-)Y`AL1I}#4QV4(;G8-4@G=Ynf6
zGh|1XtCfKFoB~SXj#y`7o>;ItKG=5;%>1?Q_pfv$_CZGBZa9&yZ!#qxFn~z~kDfq3
z+J5i;evsq!Q1i+oe8aHE<I}6SO{=M)L2D#Y{h7)7BV*A|UBE*ao>j7%Ma{Au@qvwu
zEyb$dL*TOahz)H)C-L~JP5YP`-wEkmg}+>Y&R5<(5$h7@kH`Be3OFZiLP4NbzJmVL
z->i~*Z&w%je(Rg|E>45bdsO$ZV}i(hyt$^sEE_er%ywPCr3zsGnh7?9*0~#RF6u4H
z!?^clN0ij^s;}wV;%2Y+4*%V&%7(FGU*T$@hp-9l6XHj$yourWD0hmpoTYi&hI)FV
z5#0Sgcw?=QMDSUKA1wGeu+k1lbP)PT6uFY6Ys%!SQq-N~^j9cxW#tL&J8(YIikWp<
zOCjUZ30GN{-Pvt=cJ>Q`em=b4+CHQt6_Hn!eKq%qd>BOHQM}KwOlv$5FIFLmLCt8Z
zM+#MtSe$Oyj`W+69#pM3$K^qDd09=*@%Csgkqk!SeRf{R<vCXB-D~eYiT1a8a8hD6
zX8p<!2mz{4?h?>z%m&Iz<aFnx7TFxAiQYsX%BEw@u%&yQ=(@XQd;<v_wOM5)x~abs
zF!<Zl$+E(ndc4<a@y11k8Lsi{uMtudcS2?Pu9PA$!>NHJHs8Z3Z{F+j<9vWEQ9McH
z8$S24vVp>2sb}L{K0UZmdh^#p-bHN84<D=Pgim<0XYP%=#UJc{I3`S5>Vq3KlQC%f
z!UvLz=be2VkLA4Ai~a<9&hc$9&@w=LU81qccEUIyTSBbk_BmpZ8~X6xex967r|}Tc
zAWl%RtXZtXs4n(KNb60dmw-)I+^l%|RElOTi(2+hdOd5bb*EOE&`nV>yc*`02xS3?
zP4{G`$u#pJkWI+dEGus-u@+eL$S#*{WfNavT~{H=laaZMN@;HbO@-i8$%xB~u%&>~
zw){fltitz}l#cE^E$sF?j-vNZ^q?JO1<K+30wm?F)polEQV#=~PttSLg!%ckl}BTt
zOiF%fwM1cw@8RFKj4tHX8GVp0G~l6{Fo(xEqvZ-Ix8n5tp)9v-%gw)<5}#1e2i9a}
zx4{N_@EGs9!Y7N^K~J%NY<SXvwa5fj!*w!DrkHv~4@2@D0!=tX^v!)Nj7)KWYo(AI
zYJ*2!UW{}ucr|R8Sdn7AHC!0jI0V*Bxhgq0k9iR2BlOm`krx-NOY{Ub_prhS)P-c#
z)hieup<>~#Y2sA8z*uofU$kmrVyR)tPvoFyW<tG8pq~CKACW0ow@`E_!y>za<Jzwq
zJZNxmZ^6OK_CpPZ%}o<8r8#X-oTM@Ry09j{$#UDuHRozOWS(k2XANED`CT1<i@n*C
zJ6j=*FQqehh~p?kkj01>g~EjCa@G2vgBU1K_5pKXRh0cm$V?#~GaeicNm)ZC9daVt
zzgrkcrA_FLDl6ut-8_)RiZ;eC8K9}BUc%&y@{YR7rE~s-ulCkCtgyRnO=9BhBlqE&
zGfoZ1<lbH2%?|ax(YI)1{fPtCumSDz%|Y&S>IsnKl=x(v@k~~*N*b5%w4gzgy%p+w
z4Ei|Ra3MC6h!J6k#)T-MzUuLBq;$e2>Miv1&7eW#d%)RLCt*+zt?QC@>Ay*&`-z5;
zH4A?O3$kAg-U`Y~QIsD5pH_7+WqO>VXHqC;8np1whPtDfO)wi_02O^#Gmm4wpkm+p
zme~WC79ETSl~I%Wj)?GSsFcfuk?RLtX!57phtJ2*-K7qVCuE-Y4h_0rya1fUVajxn
zM)_Yo<v{|V8B44&W{sWjon680e<XnGCP$|=G`u&Jshs)32E&R`ik;NgQ<Ku76x9#<
z;PpzgfkDlVgPKMR1#11r#3>GZEAyNluV>J)E{0jjz>n))km;Hc0(Tg?0tqGwy1|5e
zDMh%ipxCJsOhlCAj)_nnYf_Isun0G>>3;E!B(2&;^slgqXjuCBu?__+>KOgUcqxtj
z4+NH36Q)%Qz4skx2Q$=!3j*fMK5158OVnkWeR-;#CA8vcL^V3`<<N^SQ31zJLPIA(
zBo?Qj(m92f$nt~p%Dz6tMc-Z&%>ZZ0HXxnxaK^Aq2S=Je6^>Q<z!7TF`R*vuwjrl-
zex+<@ew><V{4<pbC`_zm)dcD^wYjyotX~vOnaU^g@SxHG*oNi#K}k(V$D`;_I$^jk
zeKx!|B<^t$wwuXlRBAn#r(L$$>Ea34gVJQiThsm&CtJs3{s!^72%o;8C}Q+jkkfpN
zN^y?5?57;Mg~O%Ce~!(W5tCFz&%SNi1e@jgENlv5B5<XF_S!!Tme`K<$)OKFKxqy4
zBwmJ}c3}q<_hToL;}70(wk2f-Ox5#66bnAEMe#1g<qd2!)k((raQ8yJG<fq)RQNmY
zXXEExQrV8uvL83?vq%MRWZ%@ot$tx(G;0*64jWsgq4Ch>Da83GR!HLrn#+j3FQ{f2
zL|iUkOsxpJA~GE6OICE&VGp^W;yme_fhd<7XhvD`DOm(rOtXwmrGRZ9RfzhtAJ(Sv
z5h_{uWK|GKiU>Mu=1z)z#5qXv8?^l1+I*xX0xl%X49qcV0||}P>Te@$hFRW;_Esj-
z{02(po#<&}_)OR>zS>8Z*reY4K0D`S%x=nsS)_w$+GItbO~LQQ4ukM1W(c51!otu3
z0}DJ~&BTSC8(|v}9v7P(t^;PcQZ(s5uskzuKnQ3AC{JT~Jh+g{W^+iUj^*%39)}}B
zpEAIfGV>1W9iyboo{40@ljpILM|4l8tct&X4H`iqTbHmgCbVpq4xRk!C>T@6TFcJ6
z-sI!JrHhsEb)+L{vmhK>d5}mm5-&$RFdU3*qFaQgt5+Z4GP)T5Q3x%&uuP@ycGCV{
zg%{?Q!(O^+gF4@Yktlz0qKRB}Ln-O)WP@X1T)B#$P{RS*%o|Xr^rJ1P^L3*}Y;%(t
zY(I$DWem4mkW!-03yP(Y+iw!a&z_uE@1NfHwTx}>jK7(Ci-y@Q(phG9YK$mPooAm+
zNg<N~-&YNq*{+r~Sa^>#n$CkonPs7|t<2bNZ|HxyvZn3w-4z*?z7Y9YT8EsuN%XT#
z7z`qrqeyDt4G1N}F1NVs!DFIAsvM({NN?%KqHcuNL=`?JrpgaKU~!8?<K3SV+MLqH
zWJ2PuLG*0vIByNCW4_8b#0RRK_~V{!U)1E5y`2^$dWAO>70!*7+<@=;G1SKef%NHa
z4W%pkblk8m(9mmX+zUb*)QQTtm_ni{;_jMW6{@Q+3fZ*NC%Sxth@X|P*{>s^hK_%S
z2J7^0dsolw2Rhi!Bo5!f&St?=;w#<El0!}SKCHwyjGq?cZI1-@6@BwTZGMa#5Q#KU
z^0Kh7v(o~Q@xb&|m`dB<p0<MZK^n@8MyC^bK*>(0L2Wt&UAf~%ni)KbMuZnjqc=+z
zhf75#WTY^=*`v1-50jVYZfU5fSgE;odY5NSRj>+bstZOs^ZrOafoKS_U>`JIOztlq
zl6A!~Qa$kvtX-2{uNNpj3MgpQXpL;=5mlK~_GoSUJl340m}d}o#z_nqqf5!2hzWy~
z$*Te70X3C^+M};^(g6juGfBw3KmX7^EhA<AMS0zJ)mb*De+rtnjKK3;=NMUdQ{3@R
z`iT@@J8*VS-?O|jY}yfOoA<q?fzl~j;$-88K1h_e(Nu#&GBh$w6IM?135SEtIG?S%
z;U<{BI^=%+ETrq4ASntMqb)vAAF0Xu=87x>$p`!VqkSXTu=62fW`KPRyo}&rRWXu-
zYzf3G7(yAu)WbBVzPK-YJivO))W*uv=BtbUWR`{wjXB8&djo=kx3}s}kg=;ZJH0oS
zT;bYkx9mtWng?DK5TZBWJBms>@)iM<h5pB()xmxwxq6ZZ+07pS-Uh)RPv?EW440sq
zdj;$CAJ?FKmgx73@b(&gs&=@!3Q2i{V{~jLlJw=z$zg%aJLeMw-ZsKoBL&zL5B0UP
zo!GB!*(&^*<%>w9Y%dOPpiM#GVYpF8gKFp?`_P-xn@;+&cl)xWeUM>0XmS?)Wl104
z*OX66ZZ)3epVz|nUJLLYt2vBR9z}I{ITr5BbAn=2OWaezyba?g9(8jUGdke!3c-Y_
zexsVAyO!B2W!xZIDJuu}#=cG4R-N&KfJ0M5o0<d(`MB&27F-F=ofo>D<(Is#NU;Tb
zhR)Dqph8tTZ_ZUFk-AZa9u9MR8Z-<I88d^&Z-}8N24a;`mi&nIVK5tJGr193pulgJ
z&4(2pEpQXY8O<@)ui+%0`6tlMhN*GP>EdJ-dng}}*Zm2o$I#X4ATy!!GVD`Iw)r?L
zHcuvE4??ltJj-jAyk}ZQ(Why??n_$SsJs^2Y48z33byBNS^V;iQItr*OknU)r<=8M
z{(@bHYHeC3n#w?^O61M+mr%!N*oMgRwOkXEe9~DXw(6-VR)FaY=_Kl!hJ;!|oY144
zY^_|TP=C3@a-zJq;}6q~qw^|QW5o|4c%k7UCKJugJX{NS$FD&<L{9rF!|GoXL6;C-
z1kkUz#2^wD#(dqxtrFy_=iVHfiT4=oOn&nq-2~CyFtc`~i<n-zbfgavAB0F|C9yQA
zH?|Mj-^z3Q2=}}n>Y;XW*BvToo5AB#a=&+K*pVdbZ6V~Q83f>^8W$7m#~-seyIGYZ
zc!t6fz+eA@;KB0w>=BC(uy^3j?QozO5jt`>_-ao16aAn<KN$o{L*9VQ=e;G(u%M&Q
z$@QO00#}C41H85_qx{QiQWn=>emq&6+~oV9<GE|+WdO;BQ0d0}@$p92J#l4_KHcI8
z%GpnU#_1y7w?$vt<+6iN%Z@5@a-}m;Q4<o9%Sff{sJ1{mtA?*7^vSMF;MCBI1a5xs
zTJT55MX=1i&kP6XzS8!+!YoF3|MvALE#Ql9iZZ3LVv9U{+@WjToAK9nkaR(QOWUFx
za1E@g+OuQs2Ni+4)0%LCeDaiMWVgF2tZ`DMB(RradHt|@OblV|p2;Jh4e8&|-e&uU
zSqkB*D}U2r@4pH_+cJ9OgM8-fBS3n`6|Wx3uej)NVe|1z0tjK@XJLuLY!4Jbz~P#J
z&R*COyD^|nw8JBAW7>4cb()McqY10Y8rf`cC&QM+h<CSXd9a+@1RE?yTwQkexgx>G
z+70pD%&O@8v_sZVv<J3P-U8gvp<p&22ZLr!`iKFH{`9=#w-O7Qcsw-e+}8^rVMaD@
zIOnx`O*u3+Jg@;Ifj74u)STj=ZUf5ZD4MM8+n>8n8gK3)*xE+GN9?6iSD;H8nDGxk
zzZFmW98&G4BG1j#RlUKOj$`g)P@R!$JXseY3*(Y>>4@ge)H>uO)qsyQv!zk(MS4K$
zyQ2M`d3qL6*%{2ff;_<_kW^@cCh?XjihNS`22>(wn+qmNcu+uV8b(03L{f)BfGMy?
zEAK*K94T)ujMd9u!33(A2TP)@P>jLm0!H>6W^G3|(gGetpNP$8ncxgGdkPA6!^m%_
zIrs3k*(iXFLD^RlI!dplE7PRe$I^!&*r&v>LqMvWWse$L9D=h**$p-&sAY$k{y{-Q
z#b^fY9BrB!YWSN|b>2=ABS%n|h*jZdL$5{(7tlRn8^y_Zm7w@G$x)*%GSl!MVyr^z
zkqa4%&1jI)j*K5PMN319DP|fMP7B7Yi-Ij(XP7Lj)98$$u?C<h6UkKvuMea&@OBlQ
zSM2Vmj*-gS)IctXvUgx_P*MW&OWonzvXWi+edlfs(H~83KbX-OFbGIZh`Yi>I|#^T
z3+0OsM}F)Au~*s!=QuRz-r9o{%&S^ifbT1hDHp_j#cFSKvBK47;)OVG$&m@WLz-7W
zK{{IiJSsd@{Vku36b9M;mT+~Pp(xF*^(~!I<G78a$4<lX9k+YbxkPW9v28LB>LMye
zTrzsE3qyGMYv)vHE*+RvUR9eZ(DaacVU^fe6ntd5-E0DfC8cLp-PMPV8>PLtRgIGz
z-K$mwZjRc87`<$(jOaszh~d6SsV}duk|ePLM0r8n1(>hal?=>0E+RH;xHKp-zkZiU
zF{#B9myF^2=H+xi?5hiA=6v1gqcKOg5X+YKu6V7iHDMy&oqr?Y0Q3g^LE*}HBR;>F
zPRB)T_m#F^AwWZ!MtW;0ZS0U-S3M|OZl2c+YUimi;qE9~uJz~vqAd|54gc|=xw0?L
zoK4Vbg6GIoH>y%5b>CS75K!B;f16QwuXs%^YICkX!DTKi0%7Y2n+|IxkU}k!l7)s5
z?i-1w8j3fq62144IJF@ybG7gQv^h775nTmyYMYhxWDk`lPsO){zIK*1wDdc9`}jv!
zEq4*W4<1GR`Z%nY33HNy;2JcAeJBxUO3XJuB(OD-6^-B2`k4hfXs5fOb8;HkMVF|n
ze;j6rVk4heCd~{j8YvXt9Vm=TF~1x65Lz{fe_Md&Z*3g0^ub2Oo@DY|IRs4~f|yF2
zq-yZYf`(R9jI6bO*^D(+a=5#D*(tI^m}ak+?y{tn$EfrBsYaSR+WDvyW4<@S>w>ts
zA8yv3Y}po7nu|`O<riOO7ru|X&y42SK2tWvYj)O05v->y+ZVPbl<g@uT>SVRWUYP@
zQP9QmZfqCKOh(+yr3m(_=y?OwE%^!(=I~VoXyZsW?luNaG$m>{F(^_gUR(8YcXLnp
zSHG5ojVu^tiG4%-LgUE3(i*iX#6VW-rOh~JBGFhhstDCm3KwQC`E|S<ZVgx*cKMsp
z^s-vJPuwk&PUOI(buIxkW`TrHA4P9`-jb{~bA6WsJ{?2*c<X9<k2aQ@JKj5?xlhtv
zowM(GjZo~8m(73qbo`9ez#?fmL^ppuhU+C`_O{EdeMr(j9hx#ht4-shyQrK7Y*dqY
z(Rw|D0(AEt7!q47ZkOo9V-_1(J?ZiWGRLP6_N+fD9?ZUbY&zpTaX`6kEa)GWSDQkC
zmP5|L7AZ<xccF<Tf1c@thvzcv_mL!gIC;|uKD?FNnRF^eN&ZMRo=u0jZ_wvcM*a<k
zS)(bz4GU7&@KT7b5i`NQDeDSHhX69=t-1@=Q_|(&b1sr-m4jT>7oo1Lv<&$m#!KPD
z8+=*Aqht4Z#t_8YvYQI8cl_8(ui2(F)E37Rwn9~@t2NQ}O2@(Ih~SjTwy%0d&Uqu*
zBs%M~z>AM4)UQx+Q+8_~1%-7TBV+W?h{@r+B)N&@Zk$3g`>{Yx+XRf&cKU7!#KAZM
z0$<atS(wqcQbw`3rxA$f$SdFYvsrXJBgS;pZP*SdwdW>b`2;!BN9TViba+>VzX~m^
zdMH5-4&naIB8Y|#@xY1P9XO_;sIM+IOHWZG*qOd_y6%(TV@x<$KfV2iYbwo~`~J9U
z%|&ir8P+pC&L;Be0~OMHw=W<exNBE7-n(AV1n1tjYvZ_2f*N9<Z(;1#UyWbAXRAH7
zNw;zVxt)est;R*9(`%IUbtWcMqhgCeT(x0@R;{|zXT!D5i?*$C^{|<D?7wesrb#^J
zJ8Su7&Mc}k<&wC(Rv`EJXd)bgK1k1=-cM7ebY0UVhHy@z<+#>VN;0~TJ|$C|j5*Bg
zkUYVt7tv_h?It(-Id@Ii=MlONBKSO5QM1Y-u%;7Hb8Cf9Vb#le1ygq?F(@zs#o$JQ
zYW?Ei@k+>g^>M>$7R1fr<Rk;j&eA=FC`|W`a^sd36jP^wFPGwaBL=|td73O9`kVuf
zD$^EkIpxG|8Jv5}z2k9K%=Qs0+F56Zhzv3QgkoDS?xXeIIx0r)QN?%bJr+dx9vbsL
zoFU#-TXb@}XrXu!Ob@hZb@8(4G0O21<!&4Yt#amPEJBp=&igiE`_rdkT>CR=Hi?J8
z23jd{A|=v^i!a%cA$luTzyKfH2iHrH6XYdyM0^f>zFn<|d{w!X*8m0jw<Xbp?@nti
z2V6W^ct7@g1!@Jnt{KPu4l)d0jJt{p{R4(S(Jnq?UeE1LtuG|aDl<E=!{L*HuD@s<
zR)YY1nI(||>E4#7*L&R3H~DzWwHwX8gx}9tw#f^0<aNg1|1g4d1aCI<i)(Pn6k*b|
z1M6)b|2*LTq!s-Yj*CFLW85!{P}^pW(fQ%Bzm7F()Y883#J1Nf=`8HIv;HV%4MfD&
zn{##?$vRHYy7dCXz^lTdyEl51KjD12Rj|ZqzMp%i`P>z=>-&Wmz{dm41!edqI`f`<
zM^|14{)B`d5$@hq>7;KGclt3=_H3Cj-MveL4Ta?ueJn}uefcs0^lClBVV{`(#YMBx
z*AN7yMUG%<ujCcQ(=mH&);P9~q9J&F>-;aC#y}L};wtUg*eO3Z4VE@Yf6H}rilN{V
zD__n>k;e-%_>td@l&}4FME@nr-+u$>|4;c5|4M%c%pMO6+Xv==Wdx=H<Y4(1qz{b7
z|5yGy4wk<|`oL6yKZWfBpZ*!r2j=(w2S{K2uQYnBtib$u|Bm5*iQkv_D^mYodG7ub
zRsSdWZV3#W{~P4~XTH0?GTr?xsoj5@&h8}v<KNTSy*&Rvr?X>aV`2F_4zA|rsARm-
zl1<v&N4^Os)74+f5=vQ|73wZ3c$F6<L}eUz<k3Jn+;Tja%4=?x`psOb))8Vsh>DH~
z0$cEvaP}9LP}rMcj$UKOmBFU8<NKAYouP-vbPxLxUO>Oc>gu_N_vm>Oyulf%fBQRW
zIR=c)2n?ID5qg@DD1LSEQRA^u+0Q<SzPbYSF%yK%!@0MU(2R7T(y4fE3F$1jPuH|_
z9H^3+<m4<^<yQUBbaTxPqY-eJ^qN`<RG1i;7%CJDdRJ#O{hVi;t1S|`i44^Av~n3S
zHl(-4=<)s!XM0lyg3;=qnyQ3ibuu3I@1M`dTQTpS>Ew{R&bQDlXl7wVrq_p2%xh@H
zGEx)u<ki1bxvIIFYXrB|_f@<0XB+v?$sQ1Gzc%kW@1iG8pOY~{W_axpD!q<xz)+bm
zCssl-gNhp()kSW=Qt3Y@)Fjj-X-T3OIvc7iBp^*O5Qg0)ZNSz}v~4II)-Q~3ib@i9
zx}5tUfr+Y!DoTEwgl9y~7*ok!@$Pd{ngoViGIO5ez^Gg^|K-|L$mEqwPJvCDw_y()
zixCSFPxFTPE$u07Z^>NA2Mxn9-hdix(X$-Z{UJ*Z+rd*2lzYl_hyq(@o2k7|zN|?P
z?Y;$-`I!wM4oL^HHgN^@N69(yVrMnhQX(|lr~Lj~>}tWXmR=(LO5_=KQz?FEN%$rq
zK}MK#!u(7&m7;5B@6P)z5(zS}xncY6vSiEH60ruqyxnyoUo4(CoZQXqFIT#PuN7@=
zZtumNU>lc8!8&x&UtE6W8Y27M$d5-S+EsT!^AmIii5~W-tL>%aPItsZF(Kj-L~Va-
zu8w;DtRx2o7p!v`mCnf#MiCK-UJ^tfxbfo-|KWrCh2h>!Q1%F_Z`!F@p=Z)lOQs#V
ztgP!N=^cmYjz?*j!7o#(d2Jw$^kLWXl(TAJ;>!LL<DjHM5pVpU>uw50<sR%a6{nh;
zh-FT=*0KXjYuE5NE?LvOci{FecDJI7*WPecHA22NY6=v+OGbrv-+m0VyMvI8sG7%~
z1|dT-i$GQht(&IFD^^*&fSO*Qg(?i3zYK#y^V@FdJKVJ@Qki^b1xlKRl-LFU#$X~w
zl`MX3y|`p8I)^Hl{Q>E_Q`2ba2?a;@nnfQg(aNR-jJv((EM9|Ze(@Ua3goMh=IYWS
z)J~VR!r?4^bo9LK76g&#Y7En^2jd&i5jWNdhk0$&SMdVI=*fX*+Z)PdJi|sSdA;|i
zWF1s%nL4N&t6rX<vS6{K->JLqu&vf|=rNWW0yZqlu91A<-bqi=;n2Nbg?)k^%eDMe
zVYd-|XaoHO(iiYmUaJ&<bL*QTcrNhCn{U8(awjdwMhsF;<|4Y*MZ}lTwM5rT;B|#C
zC^j6xvDZijeLB8qfSQ_u1|XAMOuv~C0G7IsAJzU8olqcddF7f0D!@LwxAh+66K)}3
zj1jfGJZvC!SA_2Cu4UiN=F}l+O%>tDj`%pNNfLUbE6*EbFoYRO6Qkt9ycLXOkLwAK
z+88NWygKo%7|KQgsQF2>LvCD}8$$&CAp?HgAT*_6<}bsl=!{?iQrq3n@X*ur-Aimx
zU)kf?jS&v>qfJG_1vuU0<(<tE-<_08KEcoB;RZeLnY1amv+c;J_R7g(wqcH%x}*-X
zhl~%6E~b9ec#n)DW0D1q_|9daPfo)^A!K>2Vj+^pE36QHS3)B0>!Y$<Z*Af&&U1^E
zWFE>1yopaKDo8=d9nOm3ig7o#GrdEgH+50O2tkUk&9a0+;`qF)H4A$&o2#{qs$L(I
zz=q5oi)%uCa5XO77|g1U*jJK>n&Uy*^kSx&sYbuWANd4r&(-x4QxMyZsB-BXYam%Y
z>(w3zZLi=lK4jN{JZ8{n8PbE>f6WpECIYR$Ub9Z>!z2=_h6$Cps`&~jVwqcidOXVn
zc5PcsD1zO?Ifh|!c(L!91um?^)=t0?w=!Z?w|lMg<xM9vCF&|5SUL;ri>0FBmd{5U
z$mX{Md3q7dyM?AGDJKVkwu5iiIKC)M(IJ!~Wn&6ZYaFpcX%ap_?>q;r0%n{c@JJeq
z7a*qJM+yI!WT(8X)+~R$+wMnaHnG5FoTrWIIpV2$UU(t4#tZ_-$Qj9=$0nj>;6@Cs
z;BJiO5b|{7h;r|a)ylkg;Ba%`4RdTO@rrj}<3OX`X{$a`uqj5|;@QcDasiY38bQ0~
zP#B;SPoGM70+vNSw*u!oyK~yH+OAT&Hn|2nPiBn)eOkt<`&NAzso0Y%3qqqCn-Zp3
z71n1vn308+y>YywSJR>0`R#Sp5m!v}LHNkg>_|6WrFlu4f*EzSy5C4y760pm@ka%B
zyYquSoupd{6py5lfH)3x^t?Q-0ML_2lT3cDS86eBwNx%qlUuMUOH0ae!}*IgJen(?
zf}A2kFmmY3y6+4*)vVKY{p5UPBy?+W{bG#<2aqhdA){IO>bk{jI#SbgJ*uG5{AQWQ
zm2hWc557w(RDSlf&aT^-x)~>w)y;>b&)6gQ*3F&Y2u&EtvU|(uXUM8P1Zh<*P&^C9
z#yFM2W%*{!zAlJ=PuB15JGU1FjxW+HE5SkixK)BzM&HU>3N;iMxRm9SnldKR)$}Gs
zXh6$xKH(^lns9?)G>Uce>TbBq_^Ph4Oj#WZv(%U8P@(uqmx1%Jj5S{JMd=;0gD4iM
zN)+S7>*$08B=&r{%GjP;yTwZBDP2}7-h=EFSo{!iotZT!#LqjBRj)_hCK2<IBk@2N
z7a2T2$F!&>^^hFu$#%Rd=1|(g;L@rcq7JzQbk%Rr<^Xr`o3|Wd%C~4ANNXfV_)azq
z2Ee4ewOg-12hUU&=e+92N;jLcE3_gaekp&tFVg7m>(TBP$LRJpyG|-6i4ZXd!X}>E
z;4@ib<>f{<@SLI2-Y`Pr#E&l@T8w-~iADNEo~Nm*Ag_}>E#AeI11Xm?UkdjHalctp
zARHamP9=`V8G?H(!j|7ies*mrI`!SBNEj`MX~}qX>@hL62hsFZ-^N(2o0;O>YejK;
zmDL0PVrAcNUk?y*E5LGc+S0OXIat}NA0<fc&5OcbH$q(kP}k&IZ6{nd!>&Q?O;5*$
z8Sal_^m4fj!4bfHEel!R(>X^>3na5TFM%p5m-9`$wz4GToJtMX73w$R)2!KTzOb=L
zkC1twI{KlWBR5&4X)@~rp;RF>xT`IlaAD=10~YIUxMo`i$2Sc}p+uJ{#*ZC>jy1#E
zAT)@9S}4wAbG_*M>I*)*Q_q`k;TCuwL(VG%M+Ird5iceh{7R6@(+{4WaPkJf6$?0}
z6~1=cAFFSd8#x)Lb`3zSnjI8)L(ZXj0rkz@T)}CvEwgv+Q!(HMKV1x$+q)F_ceETs
zbXHB?nGN&_j+w*4<r5VWsJ)ut^R2s@PFCvPNn2uycRj+<Y49s6k8z$0X3ZdsmeZ9o
zZbCVD?+ZS{_|Ckv6&t>E4)DHwuJ|v~s_Nufu;FK0<&xr-h?KQqPbIhmDcHL~F}qQ-
zsCT<YBVIG%y~SPqWIyJ83)t=g2nq%d^LY3Qpl<re-Gqr128tuxi-TM1pInldyINuR
z^@Sh@XNQGf6{FJgyBp%gI)O&KzMeG6qZJK-z_J5;8m5av8198#xIP+1C8XViv(JNq
zfa}k*+Y#U#KG`QvvTG`Hb6)ct#jiV2>^GG-c+MW&#pEoc#jU7|Y#9jtnBoa<-!W)I
zw=zjur!I2X7cb=pZ3ea=dg)Jh^F&nteXo(fZQf<|dGE{*6>jk+L`X$nUT&uL+jN6=
z+xKm#!#85ku?K{N-uK<<p>zh;`910fKG`rAz8hUdzE155hHzR>8cTX%iHqq8_cN(b
z(K?*#5rMe3P6z?ZbBFV-Z4ejQBjcjuenM6WB}phdpTZ(QlNpY%++4q(BNaYNR|I6%
zA9sl`@n^gPm{-f8SZ0x<JrUU_>^;<+VwjOZQ7@j?lq~vhGkotfcWmfx)JZp$W%+)w
zux)9_zUvzfH8poTfbU$qKpZw{0;DS*sRXx`usUwb9PxHO4B$&Mw5Z0R0oD^AZO?XJ
z;b7r*uuv5G)v%=eu~;hU969y-HHWQ)k8D<XAZN(ZMCic*irJ2=u>0O!qX!pmbb$WZ
zBAe+Li|3~D*We*tu_&r{r{;ECW17PGtC4n4?4sbZ#x=GEl5Gc|URgaVN)C>A+YbES
z+LF!uVK6Jk^zYvE&MNO8LvHFp!mW7QS&*lY0l0XDs0pM+cUwiVb81ntkiT+tpi}`9
z1yd@!(<Y1N@XK!?-s4i*1Wa~2l6fQ8%xjMh8rAUN_H6QsjRm7NkLNQEUgcbBZ#g?~
z#(sp*H@D2?cfJPG6Uy9Hmh3jpi~2ZHlaLTSvR5<UD!1u%v610QDs_i5az`E398Ui^
zf&-kxTCHjdB|rq8RbW5imH3sgyy7}t>U{_suI`eKp0_#8R<)?nYYlaUa(FD!t7%m~
zT6-t=g_K!Ez9(+Ps4^nGJ!(;66Y#-Rl%g;LwX)h8Y+0&>VI2;33U4Q*uY72PT34~|
zw|?1(7VBHt8-(~V=E5=$Ci+=j)i5#loJ%RKS4;#lJ{Nd9b`&(YbmkQq0m5>x=)azi
zHT9Mbz<;o>3MvSs=m;ynE2XzZ!|Tbqej8q6J6dJ!4Ci8wN8RWjK9_8F$&rehK0Gr%
zSZRxvpEPV=qV_SPsa4~>%47J3EvWQfWQOy`W|c~^Ylq!jxJBa8a;s6PWI+#R{&&H$
z?$n|Yz;Wcc?bQ4``+);krM&Gd6|2elC};4*W}HewDJBHDPMNpM-``qMA&BtQSZlci
zlsFuLm|5{U0m_&gC=G3iK?l~PM-o&-bFhkwyInZe$}ZXEWs&&!I3(1FwZ&JX&-tF!
zRx+bg&{YrIL}5<}YZopM@t#~EUTa*>uS6g7MY3oRc(Jk#xPC+I3{s3Q(U%G!=<}6M
z(D@i_k376AZR6q!IzvmaTMDO(xF$I~&}A1lxDsgMbIZ|TWi+m2hGvdLXl-|PqOsZE
z#XLF^{G8@XQ+Wf=uNfmY^B#Ei+9YTy%YmbdxLG3VhxuhNPe$l5bPY$$<UTAof4SbA
zE^&N{GVxQ(MA{?nSZ)os(~cm?yq;Gshts3U#e?FLNRo}i;fzEH%|`Ep62~;8UD0Jy
zMa+8<sfaOJo|*O9Qb`$dY%xc-$I6u|%%f(X7R=ac?*K&-0lBTuJCug?Dy8#cJ*GYy
z7emRoIkP>o&S1=Ftncn8wQ`kl6nD=pVY7Ox7``agM5P_vUf`|noAx-dUqfqi!z%!k
z4TgP=NK)J^PDH^r4dwwfWDMJ%r9m~bywnt^8I;TdeU&wq*f>7)UarPmuHL6U(G<aX
z6a^paJtO8n<v&YlyeS_xa+-6RpF&j5m4qPv+N7|+IX25==T{CtK*m)%-GLgx2FXh_
zj1j{y2FKY;lnHzFimUl`LC8J~_hXxdokJ-H#O|SxMP4&r@uO79+~_6vc-f3$Wgk&Z
zrDoO2c7>rKQ}O{u7D<r4h=m2|1lOnK4-GUrpVYcW`G|(8JTg3kjH!)Be61PQZCmiL
z37|GMeJhG{wP{N~-d;q(dN<!mkd~vVnV@x}Vhy|xvO(zVU6x0iW*dD%&meW?<VEi^
z9I7(!D#y$r9cGu8NMIY_3Na9CsSA|yaEX!5?#UiqzYIDa?;_Hc6`}XQ@y+a7uAXNi
zS8bWrcVe7(7`llx%ZP9}RIC?w&Qv3I?%z2AYYcRo*MK7B^oQ7FPN@HMi!i8NsLLQa
zMEp(ASN)7xBUv(}F`M1P|446n?)YNeT6pVqCF@GmQIXO${}X6F!fAQuptKL57nc`y
zCq}m!#+6Q?`AUs~9oLSY88l*Yoykp_zN&M(!VYen2Y!M#$vYYJ{+(|Cwfdfww0eI>
z-;Z}-IrxOb&kwv}L}&>KwXoa`i_u*TMGLR&I7J+KupD7hI<Y-07g9rg_}{Jwl*4s=
z)>Iu-a>=g=%$FeveFj%KcGdX(yV@TFc7Ok{_AhF?|8N?p%Siu=(13{v@SjKs9)4Hg
z=O<u(NFoDcQ*&!xisQys3L<kOUJ5lf8Ach~x5j4X;_mjwO761ChVB-IoJJJ<e6T$H
z`ap_UV>(xTTRM|Jm=qj{fcz4?#BUX)MTuV&T)AAWY^{I{dql2QmevkjuDld~6yXBi
zzla$qi2hJ<wBV&smysuOw6U?YFn1(krst$*qGMvAB{H!Gl3=*l*jo@W(X&$ktF$*V
z;Zg(=+5TA}@QIhg%+b-7i-Ez##f9F5h2F;Al!1wplaqmwnSq&^4yZxr;AZWp?@DLw
zKmxS)ha=|d|1M_jK>vqN^uX_S4Cd+#O!SNl|1$Iv0rbMVW^Q9m^kP`wz{bgumzemk
zT5SJj{ikYxFM##10GkKA;{p=!8aWvn+w)S0$x9Q7nb|lv{#h*%6C*t%Gd&Xp!(R>i
zU+e)p^Pk-Yj=*1j^8j_YWPr?LCT_yORGoaxjLfWbjLdY59LmfrT&$d2%*>iR48JG=
z2MSo~?H|cK|CdsKQ~Fye8+&Eo$nlxl+nAUTIRnW!UOJ44o|%Q7@lRua6#GkyhvB6w
z|JKz1vhn)1GBW@7=3804OsE$<E@2x(Co3S+iG(mOg_D!H5f_UAKp((nz)5FfY{E&$
z#02~Wr2Ar|<6zZiWnu@gG8-`&|F`2{WcY7CY@O^a|Cn+{h77<2tS=@VfJ4Cqbi~Mz
z%f!asO5YJU>1}O+>^}N0^N0aBBPjTIfG-`*fvH*f{+Q5$mX3ekSem~~EiOxaYg1kd
z;3*7a6MZL3M+!a_>p!%O{_HzTbG|=s{wT-rpSu2`Xa5iZ7YwkI8UDQ-`Cy6uKVAR-
zD*DeJ1WfMBOX2de!~B-;_isU8|5{a)|HGo90)D1{nbE*Lf0@&i!dx$FfsvV!gPDbu
z6Sxc*87Y82KsDfU`Cl~tn!c3(G{LF(`2Na9>}qdp0%RUy=Y)NkS$|$c>}+g6USboX
zKV_`UoG%R0FBg&ZUorqQ8vw`#^plJgNOJU>jERvAh@JeT$H@3X0rZQEg`M$N8?0>X
zK+3M4_1M{2fMJn8%UD@CIDs5*FW0~QW8+|cA!z+c#>xuZVt<hVxs}*|v&+K931m?E
zxhy-=3mfOpGG<N=AXV4TGNwOB#eR}8vatWwe~bVoj$eIdWnp|_7yhX%D-)2!=NB0x
z;3f0(&w5OZ?2Nzm6|lbF+rh-j@#}a1%f9fq{$!Vlm4*3N8>}qA?9jjH0k@$S>f2w-
z{-(zSU}pcly-fe$9{}*HU0~VY`WZNqY`^vk(B<Fk0*CyCulHyFI5`2o`ohf2!TGCQ
zV12*)2kiP^?J_fSzA(Q3WP_Rg4^Fe6WUMSKzx&4wT-(2w1^hbKfKvkq8~$tqSl>VR
z$MV86{F7Z^*%y}LpJl*J<yRRiaH{=g0~mn(Yrn9tG6JKLf2j`uc;Qg{$p)~#fAEj}
zg&g@OJr)4qw>iYh#K`iSFDz`o`^OGUdHqX$Y``V`s|_{|zzc`gPj-ReDiDVKSq9uA
zes2dW;P-a0vHmtES=kxce_claCYHbNVUG5|fA)>-VR?9n7?jN2je+|v5rd+Q4Uh)<
z1tBG3kgztfAp#B{kVKk6LYPR4M^KoVlaWyvAR@>p2w)Q7<P>BS5oQq)<P>ER0&p@h
h@%`@_Ixhs%4vzZvj(=?S0A>IS6D%2-h@2?w{{aKGPv!ss

literal 0
HcmV?d00001

diff --git a/support/dist-docs-branch-23.06/ovn-sbctl.8.txt b/support/dist-docs-branch-23.06/ovn-sbctl.8.txt
new file mode 100644
index 00000000..7e87b34a
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-sbctl.8.txt
@@ -0,0 +1,977 @@
+ovn-sbctl(8)                      OVN Manual                      ovn-sbctl(8)
+
+NAME
+       ovn-sbctl - Open Virtual Network southbound db management utility
+
+SYNOPSIS
+       ovn-sbctl [options] command [arg...]
+
+DESCRIPTION
+       The ovn-sbctl program configures the OVN_Southbound database by provid‐
+       ing a high-level interface to its configuration database. See ovn-sb(5)
+       for comprehensive documentation of the database schema.
+
+       ovn-sbctl  connects  to  an  ovsdb-server  process  that  maintains  an
+       OVN_Southbound  configuration  database.  Using  this  connection,   it
+       queries  and possibly applies changes to the database, depending on the
+       supplied commands.
+
+       ovn-sbctl can perform any number of commands in a  single  run,  imple‐
+       mented as a single atomic transaction against the database.
+
+       The  ovn-sbctl command line begins with global options (see OPTIONS be‐
+       low for details). The global options are followed by one or  more  com‐
+       mands.  Each  command  should begin with -- by itself as a command-line
+       argument, to separate it from the following commands.  (The  --  before
+       the first command is optional.) The command itself starts with command-
+       specific  options,  if  any, followed by the command name and any argu‐
+       ments.
+
+DAEMON MODE
+       When it is invoked in the most ordinary way, ovn-sbctl connects  to  an
+       OVSDB  server  that  hosts the southbound database, retrieves a partial
+       copy of the database that is complete enough to do its  work,  sends  a
+       transaction  request  to  the  server,  and  receives and processes the
+       server’s reply. In common interactive use, this is  fine,  but  if  the
+       database is large, the step in which ovn-sbctl retrieves a partial copy
+       of  the  database  can  take a long time, which yields poor performance
+       overall.
+
+       To improve performance in such  a  case,  ovn-sbctl  offers  a  "daemon
+       mode,"  in  which  the user first starts ovn-sbctl running in the back‐
+       ground and afterward uses the daemon to execute operations.  Over  sev‐
+       eral  ovn-sbctl  command  invocations, this performs better overall be‐
+       cause it retrieves a copy of the database only once at  the  beginning,
+       not once per program run.
+
+       Use the --detach option to start an ovn-sbctl daemon. With this option,
+       ovn-sbctl  prints  the  name  of a control socket to stdout. The client
+       should save this name in environment variable OVN_SB_DAEMON. Under  the
+       Bourne shell this might be done like this:
+
+             export OVN_SB_DAEMON=$(ovn-sbctl --pidfile --detach)
+
+
+       When  OVN_SB_DAEMON  is  set, ovn-sbctl automatically and transparently
+       uses the daemon to execute its commands.
+
+       When the daemon is no longer needed, kill it and unset the  environment
+       variable, e.g.:
+
+             kill $(cat $OVN_RUNDIR/ovn-sbctl.pid)
+             unset OVN_SB_DAEMON
+
+
+       When using daemon mode, an alternative to the OVN_SB_DAEMON environment
+       variable  is  to  specify a path for the Unix socket. When starting the
+       ovn-sbctl daemon, specify the -u option with a full path to  the  loca‐
+       tion of the socket file. Here is an exmple:
+
+             ovn-sbctl --detach -u /tmp/mysock.ctl
+
+
+       Then  to connect to the running daemon, use the -u option with the full
+       path to the socket created when the daemon was started:
+
+             ovn-sbctl -u /tmp/mysock.ctl show
+
+
+     Daemon Commands
+
+       Daemon mode is internally implemented using the same mechanism used  by
+       ovn-appctl.  One  may  also  use ovn-appctl directly with the following
+       commands:
+
+              run [options] command [arg...] [-- [options] command [arg...]
+              ...]
+                     Instructs the daemon process to run one or more ovn-sbctl
+                     commands described above and reply with  the  results  of
+                     running  these  commands.  Accepts the --no-wait, --wait,
+                     --timeout, --dry-run,  --oneline,  and  the  options  de‐
+                     scribed under Table Formatting Options in addition to the
+                     the command-specific options.
+
+              exit   Causes ovn-sbctl to gracefully terminate.
+
+OPTIONS
+       The  options  listed below affect the behavior of ovn-sbctl as a whole.
+       Some individual commands also accept their own options, which are given
+       just before the command name. If the first command on the command  line
+       has  options,  then those options must be separated from the global op‐
+       tions by --.
+
+       ovn-sbctl also accepts options from the  OVN_SBCTL_OPTIONS  environment
+       variable,  in  the same format as on the command line. Options from the
+       command line override those in the environment.
+
+              --db database
+                     The OVSDB database remote to contact.  If  the  OVN_SB_DB
+                     environment variable is set, its value is used as the de‐
+                     fault. Otherwise, the default is unix:/ovnsb_db.sock, but
+                     this  default is unlikely to be useful outside of single-
+                     machine OVN test environments.
+
+              --leader-only
+              --no-leader-only
+                   By default, or with --leader-only, when the database server
+                   is a clustered database, ovn-sbctl will avoid servers other
+                   than the cluster leader. This ensures that  any  data  that
+                   ovn-sbctl   reads   and   reports   is   up-to-date.   With
+                   --no-leader-only, ovn-sbctl will  use  any  server  in  the
+                   cluster, which means that for read-only transactions it can
+                   report  and act on stale data (transactions that modify the
+                   database are always serialized even with --no-leader-only).
+                   Refer to Understanding Cluster Consistency in ovsdb(7)  for
+                   more information.
+
+              --shuffle-remotes
+              --no-shuffle-remotes
+                   By  default, or with --shuffle-remotes, when there are mul‐
+                   tiple remotes specified  in  the  OVSDB  connection  string
+                   specified  by  --db  or the OVN_SB_DB environment variable,
+                   the order of the remotes will be shuffled before the client
+                   tries to connect. The remotes will be shuffled only once to
+                   a new order before the first connection attempt.  The  fol‐
+                   lowing retries, if any, will follow the same new order. The
+                   default  behavior  is  to  make sure clients of a clustered
+                   database can distribute evenly to all members of the  clus‐
+                   ter.  With  --no-shuffle-remotes,  ovn-sbctl  will  use the
+                   original order specified in the connection string  to  con‐
+                   nect.  This  allows  user  to  specify the preferred order,
+                   which is particularly useful for testing.
+
+              --no-syslog
+                   By default, ovn-sbctl logs its arguments and the details of
+                   any changes that it makes to the system  log.  This  option
+                   disables this logging.
+
+                   This option is equivalent to --verbose=sbctl:syslog:warn.
+
+              --oneline
+                   Modifies the output format so that the output for each com‐
+                   mand  is printed on a single line. New-line characters that
+                   would otherwise separate lines are  printed  as  \fB\\n\fR,
+                   and  any  instances of \fB\\\fR that would otherwise appear
+                   in the output are doubled. Prints a  blank  line  for  each
+                   command that has no output. This option does not affect the
+                   formatting  of  output  from the list or find commands; see
+                   Table Formatting Options below.
+
+              --dry-run
+                   Prevents ovn-sbctl from actually modifying the database.
+
+              -t secs
+              --timeout=secs
+                   By default, or with a secs of 0,  ovn-sbctl  waits  forever
+                   for  a  response from the database. This option limits run‐
+                   time to approximately secs seconds. If the timeout expires,
+                   ovn-sbctl will exit with a SIGALRM signal. (A timeout would
+                   normally happen only if the database cannot  be  contacted,
+                   or if the system is overloaded.)
+
+   Daemon Options
+       --pidfile[=pidfile]
+              Causes a file (by default, program.pid) to be created indicating
+              the  PID  of the running process. If the pidfile argument is not
+              specified, or if it does not begin with /, then it is created in
+              .
+
+              If --pidfile is not specified, no pidfile is created.
+
+       --overwrite-pidfile
+              By default, when --pidfile is specified and the  specified  pid‐
+              file already exists and is locked by a running process, the dae‐
+              mon refuses to start. Specify --overwrite-pidfile to cause it to
+              instead overwrite the pidfile.
+
+              When --pidfile is not specified, this option has no effect.
+
+       --detach
+              Runs  this  program  as a background process. The process forks,
+              and in the child it starts a new session,  closes  the  standard
+              file descriptors (which has the side effect of disabling logging
+              to  the  console), and changes its current directory to the root
+              (unless --no-chdir is specified). After the child completes  its
+              initialization, the parent exits.
+
+       --monitor
+              Creates  an  additional  process  to monitor this program. If it
+              dies due to a signal that indicates a programming  error  (SIGA�‐
+              BRT, SIGALRM, SIGBUS, SIGFPE, SIGILL, SIGPIPE, SIGSEGV, SIGXCPU,
+              or SIGXFSZ) then the monitor process starts a new copy of it. If
+              the daemon dies or exits for another reason, the monitor process
+              exits.
+
+              This  option  is  normally used with --detach, but it also func‐
+              tions without it.
+
+       --no-chdir
+              By default, when --detach is specified, the daemon  changes  its
+              current  working  directory  to  the root directory after it de‐
+              taches. Otherwise, invoking the daemon from a carelessly  chosen
+              directory  would  prevent  the administrator from unmounting the
+              file system that holds that directory.
+
+              Specifying --no-chdir suppresses this behavior,  preventing  the
+              daemon  from changing its current working directory. This may be
+              useful for collecting core files, since it is common behavior to
+              write core dumps into the current working directory and the root
+              directory is not a good directory to use.
+
+              This option has no effect when --detach is not specified.
+
+       --no-self-confinement
+              By default this daemon will try to self-confine itself  to  work
+              with  files  under  well-known  directories  determined at build
+              time. It is better to stick with this default behavior  and  not
+              to  use  this  flag  unless some other Access Control is used to
+              confine daemon. Note that in contrast to  other  access  control
+              implementations  that  are  typically enforced from kernel-space
+              (e.g. DAC or MAC), self-confinement is imposed  from  the  user-
+              space daemon itself and hence should not be considered as a full
+              confinement  strategy,  but instead should be viewed as an addi‐
+              tional layer of security.
+
+       --user=user:group
+              Causes this program to run as  a  different  user  specified  in
+              user:group,  thus  dropping  most  of the root privileges. Short
+              forms user and :group are also allowed,  with  current  user  or
+              group  assumed,  respectively.  Only daemons started by the root
+              user accepts this argument.
+
+              On   Linux,   daemons   will   be   granted   CAP_IPC_LOCK   and
+              CAP_NET_BIND_SERVICES  before  dropping root privileges. Daemons
+              that interact with a datapath, such  as  ovs-vswitchd,  will  be
+              granted  three  additional  capabilities,  namely CAP_NET_ADMIN,
+              CAP_NET_BROADCAST and CAP_NET_RAW. The  capability  change  will
+              apply even if the new user is root.
+
+              On Windows, this option is not currently supported. For security
+              reasons,  specifying  this  option will cause the daemon process
+              not to start.
+
+   Logging options
+       -v[spec]
+       --verbose=[spec]
+            Sets logging levels. Without any spec,  sets  the  log  level  for
+            every  module and destination to dbg. Otherwise, spec is a list of
+            words separated by spaces or commas or colons, up to one from each
+            category below:
+
+            •      A valid module name, as displayed by the vlog/list  command
+                   on ovs-appctl(8), limits the log level change to the speci‐
+                   fied module.
+
+            •      syslog,  console, or file, to limit the log level change to
+                   only to the system log, to the console, or to a  file,  re‐
+                   spectively.  (If  --detach  is specified, the daemon closes
+                   its standard file descriptors, so logging  to  the  console
+                   will have no effect.)
+
+                   On  Windows  platform,  syslog is accepted as a word and is
+                   only useful along with the --syslog-target option (the word
+                   has no effect otherwise).
+
+            •      off, emer, err, warn, info, or  dbg,  to  control  the  log
+                   level.  Messages  of  the  given severity or higher will be
+                   logged, and messages of lower  severity  will  be  filtered
+                   out.  off filters out all messages. See ovs-appctl(8) for a
+                   definition of each log level.
+
+            Case is not significant within spec.
+
+            Regardless of the log levels set for file, logging to a file  will
+            not take place unless --log-file is also specified (see below).
+
+            For compatibility with older versions of OVS, any is accepted as a
+            word but has no effect.
+
+       -v
+       --verbose
+            Sets  the  maximum  logging  verbosity level, equivalent to --ver�‐
+            bose=dbg.
+
+       -vPATTERN:destination:pattern
+       --verbose=PATTERN:destination:pattern
+            Sets the log pattern for destination to pattern. Refer to  ovs-ap�‐
+            pctl(8) for a description of the valid syntax for pattern.
+
+       -vFACILITY:facility
+       --verbose=FACILITY:facility
+            Sets  the RFC5424 facility of the log message. facility can be one
+            of kern, user, mail, daemon, auth, syslog, lpr, news, uucp, clock,
+            ftp, ntp, audit, alert, clock2, local0,  local1,  local2,  local3,
+            local4, local5, local6 or local7. If this option is not specified,
+            daemon  is used as the default for the local system syslog and lo�‐
+            cal0 is used while sending a message to the  target  provided  via
+            the --syslog-target option.
+
+       --log-file[=file]
+            Enables  logging  to a file. If file is specified, then it is used
+            as the exact name for the log file. The default log file name used
+            if file is omitted is /usr/local/var/log/ovn/program.log.
+
+       --syslog-target=host:port
+            Send syslog messages to UDP port on host, in addition to the  sys‐
+            tem  syslog.  The host must be a numerical IP address, not a host‐
+            name.
+
+       --syslog-method=method
+            Specify method as how syslog messages should  be  sent  to  syslog
+            daemon. The following forms are supported:
+
+            •      libc,  to use the libc syslog() function. Downside of using
+                   this options is that libc adds fixed prefix to  every  mes‐
+                   sage  before  it is actually sent to the syslog daemon over
+                   /dev/log UNIX domain socket.
+
+            •      unix:file, to use a UNIX domain socket directly. It is pos‐
+                   sible to specify arbitrary message format with this option.
+                   However, rsyslogd 8.9 and older  versions  use  hard  coded
+                   parser  function anyway that limits UNIX domain socket use.
+                   If you want to use  arbitrary  message  format  with  older
+                   rsyslogd  versions, then use UDP socket to localhost IP ad‐
+                   dress instead.
+
+            •      udp:ip:port, to use a UDP socket. With this  method  it  is
+                   possible  to  use  arbitrary message format also with older
+                   rsyslogd. When sending syslog messages over UDP socket  ex‐
+                   tra precaution needs to be taken into account, for example,
+                   syslog daemon needs to be configured to listen on the spec‐
+                   ified  UDP  port, accidental iptables rules could be inter‐
+                   fering with local syslog traffic and there are  some  secu‐
+                   rity  considerations  that apply to UDP sockets, but do not
+                   apply to UNIX domain sockets.
+
+            •      null, to discard all messages logged to syslog.
+
+            The default is taken from the OVS_SYSLOG_METHOD environment  vari‐
+            able; if it is unset, the default is libc.
+
+   Table Formatting Options
+       These  options control the format of output from the list and find com‐
+       mands.
+
+              -f format
+              --format=format
+                   Sets the type of table formatting. The following  types  of
+                   format are available:
+
+                   table  2-D text tables with aligned columns.
+
+                   list (default)
+                          A  list  with one column per line and rows separated
+                          by a blank line.
+
+                   html   HTML tables.
+
+                   csv    Comma-separated values as defined in RFC 4180.
+
+                   json   JSON format as defined in RFC 4627. The output is  a
+                          sequence  of JSON objects, each of which corresponds
+                          to one table. Each JSON  object  has  the  following
+                          members with the noted values:
+
+                          caption
+                                 The  table’s  caption. This member is omitted
+                                 if the table has no caption.
+
+                          headings
+                                 An array with one element per  table  column.
+                                 Each  array  element  is  a string giving the
+                                 corresponding column’s heading.
+
+                          data   An array with one element per table row. Each
+                                 element is also an array with one element per
+                                 table column. The elements  of  this  second-
+                                 level array are the cells that constitute the
+                                 table.  Cells  that  represent  OVSDB data or
+                                 data types are expressed in  the  format  de‐
+                                 scribed  in  the  OVSDB  specification; other
+                                 cells are simply expressed as text strings.
+
+              -d format
+              --data=format
+                   Sets the formatting for cells within output  tables  unless
+                   the table format is set to json, in which case json format‐
+                   ting  is  always  used when formatting cells. The following
+                   types of format are available:
+
+                   string (default)
+                          The simple format described in the  Database  Values
+                          section of ovs-vsctl(8).
+
+                   bare   The  simple format with punctuation stripped off: []
+                          and {} are omitted  around  sets,  maps,  and  empty
+                          columns,  items within sets and maps are space-sepa‐
+                          rated, and strings are never quoted. This format may
+                          be easier for scripts to parse.
+
+                   json   The RFC 4627 JSON format as described above.
+
+              --no-headings
+                   This option suppresses the heading row that  otherwise  ap‐
+                   pears in the first row of table output.
+
+              --pretty
+                   By  default, JSON in output is printed as compactly as pos‐
+                   sible. This option causes JSON in output to be printed in a
+                   more readable fashion. Members of objects and  elements  of
+                   arrays are printed one per line, with indentation.
+
+                   This option does not affect JSON in tables, which is always
+                   printed compactly.
+
+              --bare
+                   Equivalent to --format=list --data=bare --no-headings.
+
+   PKI Options
+       PKI  configuration  is  required  to  use SSL for the connection to the
+       database.
+
+              -p privkey.pem
+              --private-key=privkey.pem
+                   Specifies a PEM file containing the  private  key  used  as
+                   identity for outgoing SSL connections.
+
+              -c cert.pem
+              --certificate=cert.pem
+                   Specifies  a  PEM file containing a certificate that certi‐
+                   fies the private key specified on -p or --private-key to be
+                   trustworthy. The certificate must be signed by the certifi‐
+                   cate authority (CA) that the peer in SSL  connections  will
+                   use to verify it.
+
+              -C cacert.pem
+              --ca-cert=cacert.pem
+                   Specifies a PEM file containing the CA certificate for ver‐
+                   ifying certificates presented to this program by SSL peers.
+                   (This  may  be  the  same certificate that SSL peers use to
+                   verify the certificate specified on -c or --certificate, or
+                   it may be a different one, depending on the PKI  design  in
+                   use.)
+
+              -C none
+              --ca-cert=none
+                   Disables  verification  of  certificates  presented  by SSL
+                   peers. This introduces a security risk,  because  it  means
+                   that  certificates  cannot be verified to be those of known
+                   trusted hosts.
+
+              --bootstrap-ca-cert=cacert.pem
+                     When cacert.pem exists, this option has the  same  effect
+                     as  -C  or --ca-cert. If it does not exist, then the exe‐
+                     cutable will attempt to obtain the  CA  certificate  from
+                     the  SSL  peer on its first SSL connection and save it to
+                     the named PEM file. If it is successful, it will  immedi‐
+                     ately drop the connection and reconnect, and from then on
+                     all  SSL  connections must be authenticated by a certifi‐
+                     cate signed by the CA certificate thus obtained.
+
+                     This option exposes the SSL connection to  a  man-in-the-
+                     middle  attack  obtaining the initial CA certificate, but
+                     it may be useful for bootstrapping.
+
+                     This option is only useful if the SSL peer sends  its  CA
+                     certificate as part of the SSL certificate chain. The SSL
+                     protocol  does not require the server to send the CA cer‐
+                     tificate.
+
+                     This option is mutually exclusive with -C and --ca-cert.
+
+   Other Options
+       -h
+       --help
+            Prints a brief help message to the console.
+
+       -V
+       --version
+            Prints version information to the console.
+
+COMMANDS
+       The following sections describe the commands that ovn-sbctl supports.
+
+   OVN_Southbound Commands
+       These commands work with an OVN_Southbound database as a whole.
+
+              init   Initializes the database, if it is empty. If the database
+                     has already been initialized, this command has no effect.
+
+              show   Prints a brief overview of the database contents.
+
+   Chassis Commands
+       These commands manipulate OVN_Southbound chassis.
+
+              [--may-exist] chassis-add chassis encap-type encap-ip
+                     Creates a new chassis  named  chassis.  encap-type  is  a
+                     comma-separated  list  of  tunnel types. The chassis will
+                     have one encap entry for each specified tunnel type  with
+                     encap-ip as the destination IP for each.
+
+                     Without  --may-exist, attempting to create a chassis that
+                     exists is an error. With --may-exist, this  command  does
+                     nothing if chassis already exists.
+
+              [--if-exists] chassis-del chassis
+                     Deletes chassis and its encaps and gateway_ports.
+
+                     Without  --if-exists, attempting to delete a chassis that
+                     does not exist is an error. With  --if-exists  attempting
+                     to delete a chassis that does not exist has no effect.
+
+   Port Binding Commands
+       These commands manipulate OVN_Southbound port bindings.
+
+              [--may-exist] lsp-bind logical-port chassis
+                     Binds the logical port named logical-port to chassis.
+
+                     Without  --may-exist,  attempting  to bind a logical port
+                     that has already been bound is an error.  With  --may-ex�‐
+                     ist,  this  command  does nothing if logical-port has al‐
+                     ready been bound to a chassis.
+
+              [--if-exists] lsp-unbind logical-port
+                     Removes the binding of logical-port.
+
+                     Without --if-exists, attempting to unbind a logical  port
+                     that is not bound is an error. With --if-exists, attempt‐
+                     ing  to  unbind logical port that is not bound has no ef‐
+                     fect.
+
+   Logical Flow Commands
+       [--uuid] [--ovs[=remote]] [--stats] [--vflows] lflow-list [logical-
+       datapath] [lflow...]
+              List logical flows. If logical-datapath is specified, only  list
+              flows  for  that  logical  datapath. The logical-datapath may be
+              given as a UUID or as a datapath name  (reporting  an  error  if
+              multiple datapaths have the same name).
+
+              If  at least one lflow is given, only matching logical flows, if
+              any, are listed. Each lflow may be specified as a  UUID  or  the
+              first  few characters of a UUID, optionally prefixed by 0x. (Be‐
+              cause ovn-controller sets OpenFlow flow cookies to the first  32
+              bits  of  the  corresponding  logical flow’s UUID, this makes it
+              easy to look up the logical flow  that  generated  a  particular
+              OpenFlow flow.)
+
+              If --uuid is specified, the output includes the first 32 bits of
+              each logical flow’s UUID. This makes it easier to find the Open‐
+              Flow flows that correspond to a given logical flow.
+
+              If  --ovs  is included, ovn-sbctl attempts to obtain and display
+              the OpenFlow flows that correspond to each OVN logical flow.  To
+              do    so,    ovn-sbctl   connects   to   remote   (by   default,
+              unix:/br-int.mgmt) over OpenFlow and retrieves the flows. If re‐
+              mote is specified, it must  be  an  active  OpenFlow  connection
+              method  described  in ovsdb(7). Please see the discussion of the
+              similar --ovs option in ovn-trace(8) for more information  about
+              the OpenFlow flow output.
+
+              By  default,  OpenFlow  flow  output includes only match and ac‐
+              tions. Add --stats to include all OpenFlow information, such  as
+              packet and byte counters, duration, and timeouts.
+
+              If  --vflows  is included, other southbound database records di‐
+              rectly used for generating OpenFlow flows are also listed.  This
+              includes:  port-bindings,  mac-bindings, multicast-groups, chas‐
+              sis. The --ovs and --stats can also be used in conjunction  with
+              --vflows.
+
+       [--uuid] dump-flows [logical-datapath]
+              Alias for lflow-list.
+
+       count-flows [logical-datapath]
+              prints numbers of logical flows per table and per datapath.
+
+   Remote Connectivity Commands
+       These commands manipulate the connections column in the SB_Global table
+       and  rows  in  the Connection table. When ovsdb-server is configured to
+       use the connections column for OVSDB connections, this allows  the  ad‐
+       ministrator to use \fBovn\-sbctl\fR to configure database connections.
+
+              get-connection
+                     Prints the configured connection(s).
+
+              del-connection
+                     Deletes the configured connection(s).
+
+              [--inactivity-probe=msecs] set-connection target...
+                     Sets  the configured manager target or targets. Use --in�‐
+                     activity-probe=msecs to override the default idle connec‐
+                     tion inactivity probe time. Use 0 to  disable  inactivity
+                     probes.
+
+   SSL Configuration Commands
+       When ovsdb-server is configured to connect using SSL, the following pa‐
+       rameters are required:
+
+              private-key
+                     Specifies  a PEM file containing the private key used for
+                     SSL connections.
+
+              certificate
+                     Specifies a PEM file containing a certificate, signed  by
+                     the  certificate  authority  (CA)  used by the connection
+                     peers, that certifies  the  private  key,  identifying  a
+                     trustworthy peer.
+
+              ca-cert
+                     Specifies  a  PEM file containing the CA certificate used
+                     to verify that the connection peers are trustworthy.
+
+       These SSL settings apply to all SSL connections made by the  southbound
+       database server.
+
+              get-ssl
+                     Prints the SSL configuration.
+
+              del-ssl
+                     Deletes the current SSL configuration.
+
+              [--bootstrap] set-ssl private-key certificate ca-cert [ssl-pro‐
+              tocol-list [ssl-cipher-list]]
+                     Sets the SSL configuration.
+
+   Database Commands
+       These  commands query and modify the contents of ovsdb tables. They are
+       a slight abstraction of the ovsdb interface and as such they operate at
+       a lower level than other ovn-sbctl commands.
+
+       Identifying Tables, Records, and Columns
+
+       Each of these commands has a table parameter to identify a table within
+       the database. Many of them also take a record parameter that identifies
+       a particular record within a table. The record  parameter  may  be  the
+       UUID  for  a  record, which may be abbreviated to its first 4 (or more)
+       hex digits, as long as that is unique.  Many  tables  offer  additional
+       ways  to  identify  records.  Some commands also take column parameters
+       that identify a particular field within the records in a table.
+
+       For a list of tables and their columns, see ovn-sb(5) or see the  table
+       listing from the --help option.
+
+       Record names must be specified in full and with correct capitalization,
+       except  that  UUIDs  may  be abbreviated to their first 4 (or more) hex
+       digits, as long as that is unique within the table. Names of tables and
+       columns are not case-sensitive, and - and _  are  treated  interchange‐
+       ably.  Unique  abbreviations  of table and column names are acceptable,
+       e.g. d or dhcp is sufficient to identify the DHCP_Options table.
+
+       Database Values
+
+       Each column in the database accepts a fixed type of data. The currently
+       defined basic types, and their representations, are:
+
+              integer
+                     A decimal integer in the range -2**63 to 2**63-1,  inclu‐
+                     sive.
+
+              real   A floating-point number.
+
+              Boolean
+                     True or false, written true or false, respectively.
+
+              string An  arbitrary  Unicode string, except that null bytes are
+                     not allowed. Quotes are optional for  most  strings  that
+                     begin  with  an  English letter or underscore and consist
+                     only of letters, underscores, hyphens, and periods.  How‐
+                     ever, true and false and strings that match the syntax of
+                     UUIDs  (see  below)  must be enclosed in double quotes to
+                     distinguish them from  other  basic  types.  When  double
+                     quotes  are  used, the syntax is that of strings in JSON,
+                     e.g. backslashes may be used to  escape  special  charac‐
+                     ters.  The  empty string must be represented as a pair of
+                     double quotes ("").
+
+              UUID   Either a universally unique identifier in  the  style  of
+                     RFC  4122,  e.g. f81d4fae-7dec-11d0-a765-00a0c91e6bf6, or
+                     an @name defined by a get or create  command  within  the
+                     same ovs-vsctl invocation.
+
+       Multiple values in a single column may be separated by spaces or a sin‐
+       gle  comma.  When  multiple  values are present, duplicates are not al‐
+       lowed, and order is not important. Conversely,  some  database  columns
+       can have an empty set of values, represented as [], and square brackets
+       may optionally enclose other non-empty sets or single values as well.
+
+       A  few  database columns are ``maps’’ of key-value pairs, where the key
+       and the value are each some fixed database type. These are specified in
+       the form key=value, where key and value follow the syntax for the  col‐
+       umn’s  key  type  and value type, respectively. When multiple pairs are
+       present (separated by spaces or a comma), duplicate keys  are  not  al‐
+       lowed,  and  again the order is not important. Duplicate values are al‐
+       lowed. An empty map is represented as {}. Curly braces  may  optionally
+       enclose  non-empty  maps  as  well (but use quotes to prevent the shell
+       from expanding other-config={0=x,1=y} into other-config=0=x  other-con�‐
+       fig=1=y, which may not have the desired effect).
+
+       Database Command Syntax
+
+              [--if-exists] [--columns=column[,column]...] list table
+              [record]...
+                     Lists  the  data  in each specified record. If no records
+                     are specified, lists all the records in table.
+
+                     If --columns is specified, only the requested columns are
+                     listed, in the specified order.  Otherwise,  all  columns
+                     are listed, in alphabetical order by column name.
+
+                     Without  --if-exists,  it  is  an  error if any specified
+                     record does not exist. With --if-exists, the command  ig‐
+                     nores  any  record that does not exist, without producing
+                     any output.
+
+              [--columns=column[,column]...] find table [col‐
+              umn[:key]=value]...
+                     Lists the data in  each  record  in  table  whose  column
+                     equals  value  or, if key is specified, whose column con‐
+                     tains a key with the specified value. The following oper‐
+                     ators may be used where = is written in the  syntax  sum‐
+                     mary:
+
+                     = != < > <= >=
+                            Selects records in which column[:key] equals, does
+                            not  equal, is less than, is greater than, is less
+                            than or equal to, or is greater than or  equal  to
+                            value, respectively.
+
+                            Consider  column[:key]  and  value as sets of ele‐
+                            ments. Identical sets are considered equal. Other‐
+                            wise, if the sets have different numbers  of  ele‐
+                            ments,  then the set with more elements is consid‐
+                            ered to be larger. Otherwise, consider  a  element
+                            from each set pairwise, in increasing order within
+                            each  set.  The first pair that differs determines
+                            the result. (For a column that contains  key-value
+                            pairs, first all the keys are compared, and values
+                            are  considered only if the two sets contain iden‐
+                            tical keys.)
+
+                     {=} {!=}
+                            Test for set equality or inequality, respectively.
+
+                     {<=}   Selects records in which column[:key] is a  subset
+                            of  value. For example, flood-vlans{<=}1,2 selects
+                            records in which the  flood-vlans  column  is  the
+                            empty set or contains 1 or 2 or both.
+
+                     {<}    Selects  records in which column[:key] is a proper
+                            subset of value.  For  example,  flood-vlans{<}1,2
+                            selects records in which the flood-vlans column is
+                            the empty set or contains 1 or 2 but not both.
+
+                     {>=} {>}
+                            Same  as  {<=}  and {<}, respectively, except that
+                            the  relationship  is   reversed.   For   example,
+                            flood-vlans{>=}1,2  selects  records  in which the
+                            flood-vlans column contains both 1 and 2.
+
+                     The  following  operators  are  available  only  in  Open
+                     vSwitch 2.16 and later:
+
+                     {in}   Selects  records  in  which  every element in col‐
+                            umn[:key] is also in value. (This is the  same  as
+                            {<=}.)
+
+                     {not-in}
+                            Selects  records  in  which  every element in col‐
+                            umn[:key] is not in value.
+
+                     For arithmetic operators (= != < > <= >=),  when  key  is
+                     specified  but a particular record’s column does not con‐
+                     tain key, the record is always omitted from the  results.
+                     Thus,   the   condition   other-config:mtu!=1500  matches
+                     records that have a mtu key whose value is not 1500,  but
+                     not those that lack an mtu key.
+
+                     For  the  set operators, when key is specified but a par‐
+                     ticular record’s column does not contain key, the compar‐
+                     ison is done against an empty set.  Thus,  the  condition
+                     other-config:mtu{!=}1500  matches records that have a mtu
+                     key whose value is not 1500 and those that  lack  an  mtu
+                     key.
+
+                     Don’t  forget to escape < or > from interpretation by the
+                     shell.
+
+                     If --columns is specified, only the requested columns are
+                     listed, in the specified order. Otherwise all columns are
+                     listed, in alphabetical order by column name.
+
+                     The UUIDs shown for rows created in  the  same  ovs-vsctl
+                     invocation will be wrong.
+
+              [--if-exists] [--id=@name] get table record [column[:key]]...
+                     Prints  the  value  of each specified column in the given
+                     record in table. For map columns, a key may optionally be
+                     specified, in which case the value associated with key in
+                     the column is printed, instead of the entire map.
+
+                     Without --if-exists, it is an error if  record  does  not
+                     exist  or  key  is  specified,  if  key does not exist in
+                     record. With --if-exists, a missing record yields no out‐
+                     put and a missing key prints a blank line.
+
+                     If @name is specified, then the UUID for  record  may  be
+                     referred  to by that name later in the same ovs-vsctl in‐
+                     vocation in contexts where a UUID is expected.
+
+                     Both --id and the column arguments are optional, but usu‐
+                     ally at least one or the other should  be  specified.  If
+                     both are omitted, then get has no effect except to verify
+                     that record exists in table.
+
+                     --id and --if-exists cannot be used together.
+
+              [--if-exists] set table record column[:key]=value...
+                     Sets  the  value  of  each  specified column in the given
+                     record in table to value. For map columns, a key may  op‐
+                     tionally be specified, in which case the value associated
+                     with key in that column is changed (or added, if none ex‐
+                     ists), instead of the entire map.
+
+                     Without  --if-exists,  it  is an error if record does not
+                     exist. With --if-exists, this  command  does  nothing  if
+                     record does not exist.
+
+              [--if-exists] add table record column [key=]value...
+                     Adds  the  specified value or key-value pair to column in
+                     record in table. If column is a  map,  then  key  is  re‐
+                     quired, otherwise it is prohibited. If key already exists
+                     in  a  map column, then the current value is not replaced
+                     (use the set command to replace an existing value).
+
+                     Without --if-exists, it is an error if  record  does  not
+                     exist.  With  --if-exists,  this  command does nothing if
+                     record does not exist.
+
+              [--if-exists] remove table record column value...
+
+                     [--if-exists] remove table record column key...
+
+                     [--if-exists] remove  table  record  column  key=value...
+                     Removes the specified values or key-value pairs from col‐
+                     umn in record in table. The first form applies to columns
+                     that  are  not maps: each specified value is removed from
+                     the column. The second  and  third  forms  apply  to  map
+                     columns:  if  only a key is specified, then any key-value
+                     pair with the given key is  removed,  regardless  of  its
+                     value; if a value is given then a pair is removed only if
+                     both key and value match.
+
+                     It  is  not  an  error if the column does not contain the
+                     specified key or value or pair.
+
+                     Without --if-exists, it is an error if  record  does  not
+                     exist.  With  --if-exists,  this  command does nothing if
+                     record does not exist.
+
+              [--if-exists] clear table record column...
+                     Sets each column in record in table to the empty  set  or
+                     empty  map,  as appropriate. This command applies only to
+                     columns that are allowed to be empty.
+
+                     Without --if-exists, it is an error if  record  does  not
+                     exist.  With  --if-exists,  this  command does nothing if
+                     record does not exist.
+
+              [--id=(@name|uuid)] create table column[:key]=value...
+                     Creates a new record in table and sets the initial values
+                     of each column. Columns not explicitly set  will  receive
+                     their default values. Outputs the UUID of the new row.
+
+                     If  @name is specified, then the UUID for the new row may
+                     be referred to by that name elsewhere in the  same  \*(PN
+                     invocation  in  contexts  where  a UUID is expected. Such
+                     references may precede or follow the create command.
+
+                     If a valid uuid is specified, then it is used as the UUID
+                     of the new row.
+
+                     Caution (ovs-vsctl as example)
+                            Records in the Open vSwitch database are  signifi‐
+                            cant only when they can be reached directly or in‐
+                            directly  from  the Open_vSwitch table. Except for
+                            records in the QoS or Queue tables,  records  that
+                            are  not reachable from the Open_vSwitch table are
+                            automatically  deleted  from  the  database.  This
+                            deletion  happens immediately, without waiting for
+                            additional ovs-vsctl commands  or  other  database
+                            activity. Thus, a create command must generally be
+                            accompanied by additional commands within the same
+                            ovs-vsctl  invocation to add a chain of references
+                            to the newly created  record  from  the  top-level
+                            Open_vSwitch  record.  The  EXAMPLES section gives
+                            some examples that show how to do this.
+
+              [--if-exists] destroy table record...
+                     Deletes each specified record from table. Unless --if-ex�‐
+                     ists is specified, each records must exist.
+
+              --all destroy table
+                     Deletes all records from the table.
+
+                     Caution (ovs-vsctl as example)
+                            The destroy command is only useful for records  in
+                            the  QoS  or Queue tables. Records in other tables
+                            are automatically deleted from the  database  when
+                            they  become unreachable from the Open_vSwitch ta‐
+                            ble. This means that deleting the  last  reference
+                            to  a record is sufficient for deleting the record
+                            itself. For records in these  tables,  destroy  is
+                            silently  ignored.  See the EXAMPLES section below
+                            for more information.
+
+              wait-until table record [column[:key]=value]...
+                     Waits until table contains a record  named  record  whose
+                     column equals value or, if key is specified, whose column
+                     contains  a  key  with  the specified value. This command
+                     supports the same operators and semantics  described  for
+                     the find command above.
+
+                     If  no  column[:key]=value arguments are given, this com‐
+                     mand waits only until record exists.  If  more  than  one
+                     such  argument  is  given, the command waits until all of
+                     them are satisfied.
+
+                     Caution (ovs-vsctl as example)
+                            Usually wait-until should be placed at the  begin‐
+                            ning  of a set of ovs-vsctl commands. For example,
+                            wait-until bridge br0  --  get  bridge  br0  data�‐
+                            path_id waits until a bridge named br0 is created,
+                            then  prints  its  datapath_id column, whereas get
+                            bridge br0 datapath_id --  wait-until  bridge  br0
+                            will  abort  if  no  bridge  named br0 exists when
+                            ovs-vsctl initially connects to the database.
+
+                     Consider specifying --timeout=0 along with  --wait-until,
+                     to  prevent ovs-vsctl from terminating after waiting only
+                     at most 5 seconds.
+
+              comment [arg]...
+                     This command has no effect on behavior, but any  database
+                     log  record  created by the command will include the com‐
+                     mand and its arguments.
+
+ENVIRONMENT
+       OVN_SB_DAEMON
+              If set, this should name the Unix domain socket for an ovn-sbctl
+              server process. See Daemon Mode, above, for more information.
+
+       OVN_SBCTL_OPTIONS
+              If set, a set of options for ovn-sbctl to  apply  automatically,
+              in the same form as on the command line.
+
+       OVN_SB_DB
+              If  set, the default database to contact when the --db option is
+              not used.
+
+EXIT STATUS
+       0      Successful program execution.
+
+       1      Usage, syntax, or network error.
+
+SEE ALSO
+       ovn-sb(5), ovn-appctl(8).
+
+OVN 23.06.3                        ovn-sbctl                      ovn-sbctl(8)
diff --git a/support/dist-docs-branch-23.06/ovn-trace.8 b/support/dist-docs-branch-23.06/ovn-trace.8
new file mode 100644
index 00000000..c1c37b2c
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-trace.8
@@ -0,0 +1,418 @@
+'\" p
+.\" -*- nroff -*-
+.TH "ovn-trace" 8 "ovn-trace" "OVN 23\[char46]06\[char46]3" "OVN Manual"
+.fp 5 L CR              \\" Make fixed-width font available as \\fL.
+.de TQ
+.  br
+.  ns
+.  TP "\\$1"
+..
+.de ST
+.  PP
+.  RS -0.15in
+.  I "\\$1"
+.  RE
+..
+.de SU
+.  PP
+.  I "\\$1"
+..
+.PP
+.SH "NAME"
+.PP
+.PP
+ovn-trace \- Open Virtual Network logical network tracing utility
+.SH "SYNOPSIS"
+.PP
+\fBovn\-trace\fR [\fIoptions\fR] \fI[datapath]\fR \fImicroflow\fR
+.PP
+\fBovn\-trace\fR [\fIoptions\fR] \fB\-\-detach\fR
+.SH "DESCRIPTION"
+.PP
+.PP
+This utility simulates packet forwarding within an OVN logical network\[char46] It can be used to run through ``what-if\(cq\(cq scenarios: if a packet originates at a logical port, what will happen to it and where will it ultimately end up? Users already familiar with the Open vSwitch \fBofproto/trace\fR command described in \fBovs\-vswitch\fR(8) will find \fBovn\-trace\fR to be a similar tool for logical networks\[char46]
+.PP
+.PP
+\fBovn\-trace\fR works by reading the \fBLogical_Flow\fR and other tables from the OVN southbound database (see \fBovn\-sb\fR(5))\[char46] It simulates a packet\(cqs path through logical networks by repeatedly looking it up in the logical flow table, following the entire tree of possibilities\[char46]
+.PP
+.PP
+\fBovn\-trace\fR simulates only the OVN logical network\[char46] It does not simulate the physical elements on which the logical network is layered\[char46] This means that, for example, it is unimportant how VMs are distributed among hypervisors, or whether their hypervisors are functioning and reachable, so \fBovn\-trace\fR will yield the same results regardless\[char46] There is one important exception: \fBovn\-northd\fR, the daemon that generates the logical flows that \fBovn\-trace\fR simulates, treats logical ports differently based on whether they are up or down\[char46] Thus, if you see surprising results, ensure that the ports involved in a simulation are up\[char46]
+.PP
+.PP
+The simplest way to use \fBovn\-trace\fR is to provide the \fImicroflow\fR (and optional \fIdatapath\fR) arguments on the command line\[char46] In this case, it simulates the behavior of a single packet and exits\[char46] For an alternate usage model, see \fBDaemon Mode\fR below\[char46]
+.PP
+.PP
+The optional \fIdatapath\fR argument specifies the name of a logical datapath\[char46] Acceptable names are the \fBname\fR from the northbound \fBLogical_Switch\fR or \fBLogical_Router\fR table, the UUID of a record from one of those tables, or the UUID of a record from the southbound \fBDatapath_Binding\fR table\[char46] (The \fBdatapath\fR is optional because \fBovn\-trace\fR can figure it out from the \fIinport\fR that the \fImicroflow\fR matches\[char46])
+.PP
+.PP
+The \fImicroflow\fR argument describes the packet whose forwarding is to be simulated, in the syntax of an OVN logical expression, as described in \fBovn\-sb\fR(5), to express constraints\[char46] The parser understands prerequisites; for example, if the expression refers to \fBip4\[char46]src\fR, there is no need to explicitly state \fBip4\fR or \fBeth\[char46]type == 0x800\fR\[char46]
+.PP
+.PP
+For reasonable L2 behavior, the microflow should include at least \fBinport\fR and \fBeth\[char46]dst\fR, plus \fBeth\[char46]src\fR if port security is enabled\[char46] For example:
+.PP
+.nf
+\fB
+.br
+\fB    inport == \(dqlp11\(dq && eth\[char46]src == 00:01:02:03:04:05 && eth\[char46]dst == ff:ff:ff:ff:ff:ff
+.br
+\fB  \fR
+.fi
+.PP
+.PP
+For reasonable L3 behavior, \fImicroflow\fR should also include \fBip4\[char46]src\fR and \fBip4\[char46]dst\fR (or \fBip6\[char46]src\fR and \fBip6\[char46]dst\fR) and \fBip\[char46]ttl\fR\[char46] For example:
+.PP
+.nf
+\fB
+.br
+\fB    inport == \(dqlp111\(dq && eth\[char46]src == f0:00:00:00:01:11 && eth\[char46]dst == 00:00:00:00:ff:11
+.br
+\fB    && ip4\[char46]src == 192\[char46]168\[char46]11\[char46]1 && ip4\[char46]dst == 192\[char46]168\[char46]22\[char46]2 && ip\[char46]ttl == 64
+.br
+\fB  \fR
+.fi
+.PP
+.PP
+Here\(cqs an ARP microflow example:
+.PP
+.nf
+\fB
+.br
+\fB    inport == \(dqlp123\(dq
+.br
+\fB    && eth\[char46]dst == ff:ff:ff:ff:ff:ff && eth\[char46]src == f0:00:00:00:01:11
+.br
+\fB    && arp\[char46]op == 1 && arp\[char46]sha == f0:00:00:00:01:11 && arp\[char46]spa == 192\[char46]168\[char46]1\[char46]11
+.br
+\fB    && arp\[char46]tha == ff:ff:ff:ff:ff:ff && arp\[char46]tpa == 192\[char46]168\[char46]2\[char46]22
+.br
+\fB  \fR
+.fi
+.PP
+.PP
+\fBovn\-trace\fR will reject erroneous microflow expressions, which beyond syntax errors fall into two categories\[char46] First, they can be ambiguous\[char46] For example, \fBtcp\[char46]src == 80\fR is ambiguous because it does not state IPv4 or IPv6 as the Ethernet type\[char46] \fBip4
+&& tcp\[char46]src > 1024\fR is also ambiguous because it does not constrain bits of \fBtcp\[char46]src\fR to particular values\[char46] Second, they can be contradictory, e\[char46]g\[char46] \fBip4 && ip6\fR\[char46]
+.SH "OUTPUT"
+.PP
+.PP
+\fBovn\-trace\fR supports the three different forms of output, each described in a separate section below\[char46] Regardless of the selected output format, \fBovn\-trace\fR starts the output with a line that shows the microflow being traced in OpenFlow syntax\[char46]
+.SS "Detailed Output"
+.PP
+.PP
+The detailed form of output is also the default form\[char46] This form groups output into sections headed up by the ingress or egress pipeline being traversed\[char46] Each pipeline lists each table that was visited (by number and name), the \fBovn\-northd\fR source file and line number of the code that added the flow, the match expression and priority of the logical flow that was matched, and the actions that were executed\[char46]
+.PP
+.PP
+The execution of OVN logical actions naturally forms a ``control stack\(cq\(cq that resembles that of a program in conventional programming languages such as C or Java\[char46] Because the \fBnext\fR action that calls into another logical flow table for a lookup is a recursive construct, OVN ``programs\(cq\(cq in practice tend to form deep control stacks that, displayed in the obvious way using additional indentation for each level, quickly use up the horizontal space on all but the widest displays\[char46] To make detailed output more readable, without loss of generality, \fBovn\-trace\fR omits indentation for ``tail recursion,\(cq\(cq that is, when \fBnext\fR is the last action in a logical flow, it does not indent details of the next table lookup more deeply\[char46] Output still uses indentation when it is needed for clarity\[char46]
+.PP
+.PP
+OVN ``programs\(cq\(cq traces also tend to encounter long strings of logical flows with match expression \fB1\fR (which matches every packet) and the single action \fBnext;\fR\[char46] These are uninteresting and merely clutter output, so \fBovn\-trace\fR omits them entirely even from detailed output\[char46]
+.PP
+.PP
+The following excerpt from detailed \fBovn\-trace\fR output shows a section for a packet traversing the ingress pipeline of logical datapath \fBls1\fR with ingress logical port \fBlp111\fR\[char46] The packet matches a logical flow in table 0 (aka \fBls_in_port_sec_l2\fR) with priority 50 and executes \fBnext(1);\fR to pass to table 1\[char46] Tables 1 through 11 are trivial and omitted\[char46] In table 19 (aka \fBls_in_l2_lkup\fR), the packet matches a flow with priority 50 based on its Ethernet destination address and the flow\(cqs actions output the packet to the \fBlrp11\-attachement\fR logical port\[char46]
+.PP
+.nf
+\fL
+.br
+\fL    ingress(dp=\(dqls1\(dq, inport=\(dqlp111\(dq)
+.br
+\fL    \-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-
+.br
+\fL    0\[char46] ls_in_port_sec_l2: inport == \(dqlp111\(dq, priority 50
+.br
+\fL    next(1);
+.br
+\fL    19\[char46] ls_in_l2_lkup: eth\[char46]dst == 00:00:00:00:ff:11, priority 50
+.br
+\fL    outport = \(dqlrp11\-attachment\(dq;
+.br
+\fL    output;
+.br
+\fL  \fR
+.fi
+.SS "Summary Output"
+.PP
+.PP
+Summary output includes the logical pipelines visited by a packet and the logical actions executed on it\[char46] Compared to the detailed output, however, it removes details of tables and logical flows traversed by a packet\[char46] It uses a format closer to that of a programming language and does not attempt to avoid indentation\[char46] The summary output equivalent to the above detailed output fragment is:
+.PP
+.nf
+\fL
+.br
+\fL    ingress(dp=\(dqls1\(dq, inport=\(dqlp111\(dq) {
+.br
+\fL    outport = \(dqlrp11\-attachment\(dq;
+.br
+\fL    output;
+.br
+\fL    \[char46]\[char46]\[char46]
+.br
+\fL    };
+.br
+\fL  \fR
+.fi
+.SS "Minimal Output"
+.PP
+.PP
+Minimal output includes only actions that modify packet data (not including OVN registers or metadata such as \fBoutport\fR) and \fBoutput\fR actions that actually deliver a packet to a logical port (excluding patch ports)\[char46] The operands of actions that modify packet data are displayed reduced to constants, e\[char46]g\[char46] \fBip4\[char46]dst =
+reg0;\fR might be show as \fBip4\[char46]dst = 192\[char46]168\[char46]0\[char46]1;\fR if that was the value actually loaded\[char46] This yields output even simpler than the summary format\[char46] (Users familiar with Open vSwitch may recognize this as similar in spirit to the datapath actions listed at the bottom of \fBofproto/trace\fR output\[char46])
+.PP
+.PP
+The minimal output format reflects the externally seen behavior of the logical networks more than it does the implementation\[char46] This makes this output format the most suitable for use in regression tests, because it is least likely to change when logical flow tables are rearranged without semantic change\[char46]
+.SH "STATEFUL ACTIONS"
+.PP
+.PP
+Some OVN logical actions use or update state that is not available in the southbound database\[char46] \fBovn\-trace\fR handles these actions as described below:
+.RS
+.TP
+\fBct_next\fR
+By default \fBovn\-trace\fR treats flows as ``tracked\(cq\(cq and ``established\[char46]\(cq\(cq See the description of the \fB\-\-ct\fR option for a way to override this behavior\[char46]
+.TP
+\fBct_dnat\fR (without an argument)
+Forks the pipeline\[char46] In one fork, advances to the next table as if \fBnext;\fR were executed\[char46] The packet is not changed, on the assumption that no NAT state was available\[char46] In the other fork, the pipeline continues without change after the \fBct_dnat\fR action\[char46]
+.TP
+\fBct_snat\fR (without an argument)
+This action distinguishes between gateway routers and distributed routers\[char46] A gateway router is defined as a logical datapath that contains an \fBl3gateway\fR port; any other logical datapath is a distributed router\[char46] On a gateway router, \fBct_snat;\fR is treated as a no-op\[char46] On a distributed router, it is treated the same way as \fBct_dnat;\fR\[char46]
+.TP
+\fBct_dnat(\fIip\fB)\fR
+.TQ .5in
+\fBct_snat(\fIip\fB)\fR
+Forks the pipeline\[char46] In one fork, sets \fBip4\[char46]dst\fR (or \fBip4\[char46]src\fR) to \fIip\fR and \fBct\[char46]dnat\fR (or \fBct\[char46]snat\fR) to 1 and advances to the next table as if \fBnext;\fR were executed\[char46] In the other fork, the pipeline continues without change after the \fBct_dnat\fR (or \fBct_snat\fR) action\[char46]
+.TP
+\fBct_lb;\fR
+.TQ .5in
+\fBct_lb(\fIip\fB\fR[\fB:\fIport\fB\fR]\[char46]\[char46]\[char46]\fB);\fR
+Forks the pipeline\[char46] In one fork, sets \fBip4\[char46]dst\fR (or \fBip6\[char46]dst\fR) to one of the load-balancer addresses and the destination port to its associated port, if any, and sets \fBct\[char46]dnat\fR to 1\[char46] With one or more arguments, gives preference to the address specified on \fB\-\-lb\-dst\fR, if any; without arguments, uses the address and port specified on \fB\-\-lb\-dst\fR\[char46] In the other fork, the pipeline continues without change after the \fBct_lb\fR action\[char46]
+.TP
+\fBct_commit\fR
+.TQ .5in
+\fBput_arp\fR
+.TQ .5in
+\fBput_nd\fR
+These actions are treated as no-ops\[char46]
+.RE
+.SH "DAEMON MODE"
+.PP
+.PP
+If \fBovn\-trace\fR is invoked with the \fB\-\-detach\fR option (see \fBDaemon Options\fR, below), it runs in the background as a daemon and accepts commands from \fBovs\-appctl\fR (or another JSON-RPC client) indefinitely\[char46] The currently supported commands are described below\[char46]
+.PP
+.PP
+.RS
+.TP
+\fBtrace\fR [\fIoptions\fR] [\fIdatapath\fR] \fImicroflow\fR
+Traces \fImicroflow\fR through \fIdatapath\fR and replies with the results of the trace\[char46] Accepts the \fIoptions\fR described under \fBTrace Options\fR below\[char46]
+.TP
+\fBexit\fR
+Causes \fBovn\-trace\fR to gracefully terminate\[char46]
+.RE
+.SH "OPTIONS"
+.SS "Trace Options"
+.TP
+\fB\-\-detailed\fR
+.TQ .5in
+\fB\-\-summary\fR
+.TQ .5in
+\fB\-\-minimal\fR
+These options control the form and level of detail in \fBovn\-trace\fR output\[char46] If more than one of these options is specified, all of the selected forms are output, in the order listed above, each headed by a banner line\[char46] If none of these options is given, \fB\-\-detailed\fR is the default\[char46] See \fBOutput\fR, above, for a description of each kind of output\[char46]
+.TP
+\fB\-\-all\fR
+Selects all three forms of output\[char46]
+.TP
+\fB\-\-ovs\fR[\fB=\fR\fIremote\fR]
+Makes \fBovn\-trace\fR attempt to obtain and display the OpenFlow flows that correspond to each OVN logical flow\[char46] To do so, \fBovn\-trace\fR connects to \fIremote\fR (by default, \fBunix:/br\-int\[char46]mgmt\fR) over OpenFlow and retrieves the flows\[char46] If \fIremote\fR is specified, it must be an active OpenFlow connection method described in \fBovsdb\fR(7)\[char46]
+.IP
+To make the best use of the output, it is important to understand the relationship between logical flows and OpenFlow flows\[char46] \fBovn\-architecture\fR(7), under \fBArchitectural Physical Life
+Cycle of a Packet\fR, describes this relationship\[char46] Keep in mind the following points:
+.RS
+.IP \(bu
+\fBovn\-trace\fR currently shows all the OpenFlow flows to which a logical flow corresponds, even though an actual packet ordinarily matches only one of these\[char46]
+.IP \(bu
+Some logical flows can map to the Open vSwitch ``conjunctive match\(cq\(cq extension (see \fBovs\-fields\fR(7))\[char46] Currently \fBovn\-trace\fR cannot display the flows with \fBconjunction\fR actions that effectively produce the \fBconj_id\fR match\[char46]
+.IP \(bu
+Some logical flows may not be represented in the OpenFlow tables on a given hypervisor, if they could not be used on that hypervisor\[char46]
+.IP \(bu
+Some OpenFlow flows do not correspond to logical flows, such as OpenFlow flows that map between physical and logical ports\[char46] These flows will never show up in a trace\[char46]
+.IP \(bu
+When \fBovn\-trace\fR omits uninteresting logical flows from output, it does not look up the corresponding OpenFlow flows\[char46]
+.RE
+.TP
+\fB\-\-ct=\fIflags\fB\fR
+This option sets the \fBct_state\fR flags that a \fBct_next\fR logical action will report\[char46] The \fIflags\fR must be a comma- or space-separated list of the following connection tracking flags:
+.RS
+.IP \(bu
+\fBtrk\fR: Include to indicate connection tracking has taken place\[char46] (This bit is set automatically even if not listed in \fIflags\fR\[char46]
+.IP \(bu
+\fBnew\fR: Include to indicate a new flow\[char46]
+.IP \(bu
+\fBest\fR: Include to indicate an established flow\[char46]
+.IP \(bu
+\fBrel\fR: Include to indicate a related flow\[char46]
+.IP \(bu
+\fBrpl\fR: Include to indicate a reply flow\[char46]
+.IP \(bu
+\fBinv\fR: Include to indicate a connection entry in a bad state\[char46]
+.IP \(bu
+\fBdnat\fR: Include to indicate a packet whose destination IP address has been changed\[char46]
+.IP \(bu
+\fBsnat\fR: Include to indicate a packet whose source IP address has been changed\[char46]
+.RE
+.IP
+The \fBct_next\fR action is used to implement the OVN distributed firewall\[char46] For testing, useful flag combinations include:
+.RS
+.IP \(bu
+\fBtrk,new\fR: A packet in a flow in either direction through a firewall that has not yet been committed (with \fBct_commit\fR)\[char46]
+.IP \(bu
+\fBtrk,est\fR: A packet in an established flow going out through a firewall\[char46]
+.IP \(bu
+\fBtrk,rpl\fR: A packet coming in through a firewall in reply to an established flow\[char46]
+.IP \(bu
+\fBtrk,inv\fR: An invalid packet in either direction\[char46]
+.RE
+.IP
+A packet might pass through the connection tracker twice in one trip through OVN: once following egress from a VM as it passes outward through a firewall, and once preceding ingress to a second VM as it passes inward through a firewall\[char46] Use multiple \fB\-\-ct\fR options to specify the flags for multiple \fBct_next\fR actions\[char46]
+.IP
+When \fB\-\-ct\fR is unspecified, or when there are fewer \fB\-\-ct\fR options than \fBct_next\fR actions, the \fIflags\fR default to \fBtrk,est\fR\[char46]
+.TP
+\fB\-\-lb\-dst=\fR\fIip\fR[\fB:\fIport\fB\fR]
+Sets the IP from VIP pool to use as destination of the packet\[char46] \fB\-\-lb\-dst\fR is not available in daemon mode\[char46]
+.TP
+\fB\-\-select\-id=\fR\fIid\fR
+Specify the \fIid\fR to be selected by the \fBselect\fR action\[char46] \fIid\fR must be one of the values listed in the \fBselect\fR action\[char46] Otherwise, a random id is selected from the list, as if \fB\-\-select\-id\fR were not specified\[char46] \fB\-\-select\-id\fR is not available in daemon mode\[char46]
+.TP
+\fB\-\-friendly\-names\fR
+.TQ .5in
+\fB\-\-no\-friendly\-names\fR
+When cloud management systems such as OpenStack are layered on top of OVN, they often use long, human-unfriendly names for ports and datapaths, for example, ones that include entire UUIDs\[char46] They do usually include friendlier names, but the long, hard-to-read names are the ones that appear in matches and actions\[char46] By default, or with \fB\-\-friendly\-names\fR, \fBovn\-trace\fR substitutes these friendlier names for the long names in its output\[char46] Use \fB\-\-no\-friendly\-names\fR to disable this behavior; this option might be useful, for example, if a program is going to parse \fBovn\-trace\fR output\[char46]
+.SS "Daemon Options"
+.TP
+\fB\-\-pidfile\fR[\fB=\fR\fIpidfile\fR]
+Causes a file (by default, \fB\fIprogram\fB\[char46]pid\fR) to be created indicating the PID of the running process\[char46] If the \fIpidfile\fR argument is not specified, or if it does not begin with \fB/\fR, then it is created in \fB\fR\[char46]
+.IP
+If \fB\-\-pidfile\fR is not specified, no pidfile is created\[char46]
+.TP
+\fB\-\-overwrite\-pidfile\fR
+By default, when \fB\-\-pidfile\fR is specified and the specified pidfile already exists and is locked by a running process, the daemon refuses to start\[char46] Specify \fB\-\-overwrite\-pidfile\fR to cause it to instead overwrite the pidfile\[char46]
+.IP
+When \fB\-\-pidfile\fR is not specified, this option has no effect\[char46]
+.TP
+\fB\-\-detach\fR
+Runs this program as a background process\[char46] The process forks, and in the child it starts a new session, closes the standard file descriptors (which has the side effect of disabling logging to the console), and changes its current directory to the root (unless \fB\-\-no\-chdir\fR is specified)\[char46] After the child completes its initialization, the parent exits\[char46]
+.TP
+\fB\-\-monitor\fR
+Creates an additional process to monitor this program\[char46] If it dies due to a signal that indicates a programming error (\fBSIGABRT\fR, \fBSIGALRM\fR, \fBSIGBUS\fR, \fBSIGFPE\fR, \fBSIGILL\fR, \fBSIGPIPE\fR, \fBSIGSEGV\fR, \fBSIGXCPU\fR, or \fBSIGXFSZ\fR) then the monitor process starts a new copy of it\[char46] If the daemon dies or exits for another reason, the monitor process exits\[char46]
+.IP
+This option is normally used with \fB\-\-detach\fR, but it also functions without it\[char46]
+.TP
+\fB\-\-no\-chdir\fR
+By default, when \fB\-\-detach\fR is specified, the daemon changes its current working directory to the root directory after it detaches\[char46] Otherwise, invoking the daemon from a carelessly chosen directory would prevent the administrator from unmounting the file system that holds that directory\[char46]
+.IP
+Specifying \fB\-\-no\-chdir\fR suppresses this behavior, preventing the daemon from changing its current working directory\[char46] This may be useful for collecting core files, since it is common behavior to write core dumps into the current working directory and the root directory is not a good directory to use\[char46]
+.IP
+This option has no effect when \fB\-\-detach\fR is not specified\[char46]
+.TP
+\fB\-\-no\-self\-confinement\fR
+By default this daemon will try to self-confine itself to work with files under well-known directories determined at build time\[char46] It is better to stick with this default behavior and not to use this flag unless some other Access Control is used to confine daemon\[char46] Note that in contrast to other access control implementations that are typically enforced from kernel-space (e\[char46]g\[char46] DAC or MAC), self-confinement is imposed from the user-space daemon itself and hence should not be considered as a full confinement strategy, but instead should be viewed as an additional layer of security\[char46]
+.TP
+\fB\-\-user=\fR\fIuser\fR\fB:\fR\fIgroup\fR
+Causes this program to run as a different user specified in \fIuser\fR\fB:\fR\fIgroup\fR, thus dropping most of the root privileges\[char46] Short forms \fIuser\fR and \fB:\fR\fIgroup\fR are also allowed, with current user or group assumed, respectively\[char46] Only daemons started by the root user accepts this argument\[char46]
+.IP
+On Linux, daemons will be granted \fBCAP_IPC_LOCK\fR and \fBCAP_NET_BIND_SERVICES\fR before dropping root privileges\[char46] Daemons that interact with a datapath, such as \fBovs\-vswitchd\fR, will be granted three additional capabilities, namely \fBCAP_NET_ADMIN\fR, \fBCAP_NET_BROADCAST\fR and \fBCAP_NET_RAW\fR\[char46] The capability change will apply even if the new user is root\[char46]
+.IP
+On Windows, this option is not currently supported\[char46] For security reasons, specifying this option will cause the daemon process not to start\[char46]
+.SS "Logging Options"
+.TP
+\fB\-v\fR[\fIspec\fR]
+.TQ .5in
+\fB\-\-verbose=\fR[\fIspec\fR]
+Sets logging levels\[char46] Without any \fIspec\fR, sets the log level for every module and destination to \fBdbg\fR\[char46] Otherwise, \fIspec\fR is a list of words separated by spaces or commas or colons, up to one from each category below:
+.RS
+.IP \(bu
+A valid module name, as displayed by the \fBvlog/list\fR command on \fBovs\-appctl\fR(8), limits the log level change to the specified module\[char46]
+.IP \(bu
+\fBsyslog\fR, \fBconsole\fR, or \fBfile\fR, to limit the log level change to only to the system log, to the console, or to a file, respectively\[char46] (If \fB\-\-detach\fR is specified, the daemon closes its standard file descriptors, so logging to the console will have no effect\[char46])
+.IP
+On Windows platform, \fBsyslog\fR is accepted as a word and is only useful along with the \fB\-\-syslog\-target\fR option (the word has no effect otherwise)\[char46]
+.IP \(bu
+\fBoff\fR, \fBemer\fR, \fBerr\fR, \fBwarn\fR, \fBinfo\fR, or \fBdbg\fR, to control the log level\[char46] Messages of the given severity or higher will be logged, and messages of lower severity will be filtered out\[char46] \fBoff\fR filters out all messages\[char46] See \fBovs\-appctl\fR(8) for a definition of each log level\[char46]
+.RE
+.IP
+Case is not significant within \fIspec\fR\[char46]
+.IP
+Regardless of the log levels set for \fBfile\fR, logging to a file will not take place unless \fB\-\-log\-file\fR is also specified (see below)\[char46]
+.IP
+For compatibility with older versions of OVS, \fBany\fR is accepted as a word but has no effect\[char46]
+.TP
+\fB\-v\fR
+.TQ .5in
+\fB\-\-verbose\fR
+Sets the maximum logging verbosity level, equivalent to \fB\-\-verbose=dbg\fR\[char46]
+.TP
+\fB\-vPATTERN:\fR\fIdestination\fR\fB:\fR\fIpattern\fR
+.TQ .5in
+\fB\-\-verbose=PATTERN:\fR\fIdestination\fR\fB:\fR\fIpattern\fR
+Sets the log pattern for \fIdestination\fR to \fIpattern\fR\[char46] Refer to \fBovs\-appctl\fR(8) for a description of the valid syntax for \fIpattern\fR\[char46]
+.TP
+\fB\-vFACILITY:\fR\fIfacility\fR
+.TQ .5in
+\fB\-\-verbose=FACILITY:\fR\fIfacility\fR
+Sets the RFC5424 facility of the log message\[char46] \fIfacility\fR can be one of \fBkern\fR, \fBuser\fR, \fBmail\fR, \fBdaemon\fR, \fBauth\fR, \fBsyslog\fR, \fBlpr\fR, \fBnews\fR, \fBuucp\fR, \fBclock\fR, \fBftp\fR, \fBntp\fR, \fBaudit\fR, \fBalert\fR, \fBclock2\fR, \fBlocal0\fR, \fBlocal1\fR, \fBlocal2\fR, \fBlocal3\fR, \fBlocal4\fR, \fBlocal5\fR, \fBlocal6\fR or \fBlocal7\fR\[char46] If this option is not specified, \fBdaemon\fR is used as the default for the local system syslog and \fBlocal0\fR is used while sending a message to the target provided via the \fB\-\-syslog\-target\fR option\[char46]
+.TP
+\fB\-\-log\-file\fR[\fB=\fR\fIfile\fR]
+Enables logging to a file\[char46] If \fIfile\fR is specified, then it is used as the exact name for the log file\[char46] The default log file name used if \fIfile\fR is omitted is \fB/usr/local/var/log/ovn/\fIprogram\fB\[char46]log\fR\[char46]
+.TP
+\fB\-\-syslog\-target=\fR\fIhost\fR\fB:\fR\fIport\fR
+Send syslog messages to UDP \fIport\fR on \fIhost\fR, in addition to the system syslog\[char46] The \fIhost\fR must be a numerical IP address, not a hostname\[char46]
+.TP
+\fB\-\-syslog\-method=\fR\fImethod\fR
+Specify \fImethod\fR as how syslog messages should be sent to syslog daemon\[char46] The following forms are supported:
+.RS
+.IP \(bu
+\fBlibc\fR, to use the libc \fBsyslog()\fR function\[char46] Downside of using this options is that libc adds fixed prefix to every message before it is actually sent to the syslog daemon over \fB/dev/log\fR UNIX domain socket\[char46]
+.IP \(bu
+\fBunix:\fIfile\fB\fR, to use a UNIX domain socket directly\[char46] It is possible to specify arbitrary message format with this option\[char46] However, \fBrsyslogd 8\[char46]9\fR and older versions use hard coded parser function anyway that limits UNIX domain socket use\[char46] If you want to use arbitrary message format with older \fBrsyslogd\fR versions, then use UDP socket to localhost IP address instead\[char46]
+.IP \(bu
+\fBudp:\fIip\fB:\fIport\fB\fR, to use a UDP socket\[char46] With this method it is possible to use arbitrary message format also with older \fBrsyslogd\fR\[char46] When sending syslog messages over UDP socket extra precaution needs to be taken into account, for example, syslog daemon needs to be configured to listen on the specified UDP port, accidental iptables rules could be interfering with local syslog traffic and there are some security considerations that apply to UDP sockets, but do not apply to UNIX domain sockets\[char46]
+.IP \(bu
+\fBnull\fR, to discard all messages logged to syslog\[char46]
+.RE
+.IP
+The default is taken from the \fBOVS_SYSLOG_METHOD\fR environment variable; if it is unset, the default is \fBlibc\fR\[char46]
+.SS "PKI Options"
+.PP
+.PP
+PKI configuration is required to use SSL for the connection to the database (and the switch, if \fB\-\-ovs\fR is specified)\[char46]
+.RS
+.TP
+\fB\-p\fR \fIprivkey\[char46]pem\fR
+.TQ .5in
+\fB\-\-private\-key=\fR\fIprivkey\[char46]pem\fR
+Specifies a PEM file containing the private key used as identity for outgoing SSL connections\[char46]
+.TP
+\fB\-c\fR \fIcert\[char46]pem\fR
+.TQ .5in
+\fB\-\-certificate=\fR\fIcert\[char46]pem\fR
+Specifies a PEM file containing a certificate that certifies the private key specified on \fB\-p\fR or \fB\-\-private\-key\fR to be trustworthy\[char46] The certificate must be signed by the certificate authority (CA) that the peer in SSL connections will use to verify it\[char46]
+.TP
+\fB\-C\fR \fIcacert\[char46]pem\fR
+.TQ .5in
+\fB\-\-ca\-cert=\fR\fIcacert\[char46]pem\fR
+Specifies a PEM file containing the CA certificate for verifying certificates presented to this program by SSL peers\[char46] (This may be the same certificate that SSL peers use to verify the certificate specified on \fB\-c\fR or \fB\-\-certificate\fR, or it may be a different one, depending on the PKI design in use\[char46])
+.TP
+\fB\-C none\fR
+.TQ .5in
+\fB\-\-ca\-cert=none\fR
+Disables verification of certificates presented by SSL peers\[char46] This introduces a security risk, because it means that certificates cannot be verified to be those of known trusted hosts\[char46]
+.RE
+.SS "Other Options"
+.TP
+\fB\-\-db\fR \fIdatabase\fR
+The OVSDB database remote to contact\[char46] If the \fBOVN_SB_DB\fR environment variable is set, its value is used as the default\[char46] Otherwise, the default is \fBunix:/db\[char46]sock\fR, but this default is unlikely to be useful outside of single-machine OVN test environments\[char46]
+.RS
+.TP
+\fB\-h\fR
+.TQ .5in
+\fB\-\-help\fR
+Prints a brief help message to the console\[char46]
+.TP
+\fB\-V\fR
+.TQ .5in
+\fB\-\-version\fR
+Prints version information to the console\[char46]
+.RE
diff --git a/support/dist-docs-branch-23.06/ovn-trace.8.html b/support/dist-docs-branch-23.06/ovn-trace.8.html
new file mode 100644
index 00000000..b7f84819
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-trace.8.html
@@ -0,0 +1,572 @@
+<html><head><meta charset="UTF-8"></head><body><pre>
+<u>o</u><u>v</u><u>n</u><u>-</u><u>t</u><u>r</u><u>a</u><u>c</u><u>e</u>(8)                      OVN Manual                      <u>o</u><u>v</u><u>n</u><u>-</u><u>t</u><u>r</u><u>a</u><u>c</u><u>e</u>(8)
+
+<b>N</b><b>A</b><b>M</b><b>E</b>
+       ovn-trace - Open Virtual Network logical network tracing utility
+
+<b>S</b><b>Y</b><b>N</b><b>O</b><b>P</b><b>S</b><b>I</b><b>S</b>
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>t</b><b>r</b><b>a</b><b>c</b><b>e</b> [<u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u>] <u>[</u><u>d</u><u>a</u><u>t</u><u>a</u><u>p</u><u>a</u><u>t</u><u>h</u><u>]</u> <u>m</u><u>i</u><u>c</u><u>r</u><u>o</u><u>f</u><u>l</u><u>o</u><u>w</u>
+
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>t</b><b>r</b><b>a</b><b>c</b><b>e</b> [<u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u>] <b>-</b><b>-</b><b>d</b><b>e</b><b>t</b><b>a</b><b>c</b><b>h</b>
+
+<b>D</b><b>E</b><b>S</b><b>C</b><b>R</b><b>I</b><b>P</b><b>T</b><b>I</b><b>O</b><b>N</b>
+       This utility simulates packet forwarding within an OVN logical network.
+       It can be used to run through ``what-if’’ scenarios: if a packet origi‐
+       nates at a logical port, what will happen to it and where will it ulti‐
+       mately  end  up?  Users  already  familiar  with  the  Open vSwitch <b>o</b><b>f</b>‐‐
+       <b>p</b><b>r</b><b>o</b><b>t</b><b>o</b><b>/</b><b>t</b><b>r</b><b>a</b><b>c</b><b>e</b> command described in <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b>(8) will find <b>o</b><b>v</b><b>n</b><b>-</b><b>t</b><b>r</b><b>a</b><b>c</b><b>e</b>  to
+       be a similar tool for logical networks.
+
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>t</b><b>r</b><b>a</b><b>c</b><b>e</b>  works  by reading the <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>F</b><b>l</b><b>o</b><b>w</b> and other tables from the
+       OVN southbound database (see <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b>(5)). It simulates a  packet’s  path
+       through  logical  networks  by  repeatedly looking it up in the logical
+       flow table, following the entire tree of possibilities.
+
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>t</b><b>r</b><b>a</b><b>c</b><b>e</b> simulates only the OVN logical network. It does not  simulate
+       the  physical  elements  on  which the logical network is layered. This
+       means that, for example, it is  unimportant  how  VMs  are  distributed
+       among  hypervisors,  or  whether  their hypervisors are functioning and
+       reachable, so <b>o</b><b>v</b><b>n</b><b>-</b><b>t</b><b>r</b><b>a</b><b>c</b><b>e</b> will yield the same results  regardless.  There
+       is  one  important exception: <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b>, the daemon that generates the
+       logical flows that <b>o</b><b>v</b><b>n</b><b>-</b><b>t</b><b>r</b><b>a</b><b>c</b><b>e</b> simulates, treats  logical  ports  differ‐
+       ently based on whether they are up or down. Thus, if you see surprising
+       results, ensure that the ports involved in a simulation are up.
+
+       The  simplest way to use <b>o</b><b>v</b><b>n</b><b>-</b><b>t</b><b>r</b><b>a</b><b>c</b><b>e</b> is to provide the <u>m</u><u>i</u><u>c</u><u>r</u><u>o</u><u>f</u><u>l</u><u>o</u><u>w</u> (and op‐
+       tional <u>d</u><u>a</u><u>t</u><u>a</u><u>p</u><u>a</u><u>t</u><u>h</u>) arguments on the command line. In this case, it  simu‐
+       lates the behavior of a single packet and exits. For an alternate usage
+       model, see <b>D</b><b>a</b><b>e</b><b>m</b><b>o</b><b>n</b> <b>M</b><b>o</b><b>d</b><b>e</b> below.
+
+       The  optional  <u>d</u><u>a</u><u>t</u><u>a</u><u>p</u><u>a</u><u>t</u><u>h</u>  argument specifies the name of a logical data‐
+       path. Acceptable names are the <b>n</b><b>a</b><b>m</b><b>e</b> from the northbound  <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>S</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b>
+       or <b>L</b><b>o</b><b>g</b><b>i</b><b>c</b><b>a</b><b>l</b><b>_</b><b>R</b><b>o</b><b>u</b><b>t</b><b>e</b><b>r</b> table, the UUID of a record from one of those tables,
+       or  the  UUID  of  a record from the southbound <b>D</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b><b>_</b><b>B</b><b>i</b><b>n</b><b>d</b><b>i</b><b>n</b><b>g</b> table.
+       (The <b>d</b><b>a</b><b>t</b><b>a</b><b>p</b><b>a</b><b>t</b><b>h</b> is optional because <b>o</b><b>v</b><b>n</b><b>-</b><b>t</b><b>r</b><b>a</b><b>c</b><b>e</b> can figure it out from  the
+       <u>i</u><u>n</u><u>p</u><u>o</u><u>r</u><u>t</u> that the <u>m</u><u>i</u><u>c</u><u>r</u><u>o</u><u>f</u><u>l</u><u>o</u><u>w</u> matches.)
+
+       The  <u>m</u><u>i</u><u>c</u><u>r</u><u>o</u><u>f</u><u>l</u><u>o</u><u>w</u>  argument describes the packet whose forwarding is to be
+       simulated, in the syntax of an OVN logical expression, as described  in
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>s</b><b>b</b>(5),  to  express  constraints.  The parser understands prerequi‐
+       sites; for example, if the expression refers to <b>i</b><b>p</b><b>4</b><b>.</b><b>s</b><b>r</b><b>c</b>,  there  is  no
+       need to explicitly state <b>i</b><b>p</b><b>4</b> or <b>e</b><b>t</b><b>h</b><b>.</b><b>t</b><b>y</b><b>p</b><b>e</b> <b>=</b><b>=</b> <b>0</b><b>x</b><b>8</b><b>0</b><b>0</b>.
+
+       For  reasonable  L2 behavior, the microflow should include at least <b>i</b><b>n</b>‐‐
+       <b>p</b><b>o</b><b>r</b><b>t</b> and <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b>, plus <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b> if port security is enabled.  For  exam‐
+       ple:
+
+           <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b> <b>"</b><b>l</b><b>p</b><b>1</b><b>1</b><b>"</b> &amp;&amp;&amp;&amp; <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b><b>=</b> <b>0</b><b>0</b><b>:</b><b>0</b><b>1</b><b>:</b><b>0</b><b>2</b><b>:</b><b>0</b><b>3</b><b>:</b><b>0</b><b>4</b><b>:</b><b>0</b><b>5</b> &amp;&amp;&amp;&amp; <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <b>f</b><b>f</b><b>:</b><b>f</b><b>f</b><b>:</b><b>f</b><b>f</b><b>:</b><b>f</b><b>f</b><b>:</b><b>f</b><b>f</b><b>:</b><b>f</b><b>f</b>
+
+
+       For  reasonable  L3 behavior, <u>m</u><u>i</u><u>c</u><u>r</u><u>o</u><u>f</u><u>l</u><u>o</u><u>w</u> should also include <b>i</b><b>p</b><b>4</b><b>.</b><b>s</b><b>r</b><b>c</b> and
+       <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b> (or <b>i</b><b>p</b><b>6</b><b>.</b><b>s</b><b>r</b><b>c</b> and <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b>) and <b>i</b><b>p</b><b>.</b><b>t</b><b>t</b><b>l</b>. For example:
+
+           <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b> <b>"</b><b>l</b><b>p</b><b>1</b><b>1</b><b>1</b><b>"</b> &amp;&amp;&amp;&amp; <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b><b>=</b> <b>f</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>1</b><b>:</b><b>1</b><b>1</b> &amp;&amp;&amp;&amp; <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>f</b><b>f</b><b>:</b><b>1</b><b>1</b>
+           &amp;&amp;&amp;&amp; <b>i</b><b>p</b><b>4</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b><b>=</b> <b>1</b><b>9</b><b>2</b><b>.</b><b>1</b><b>6</b><b>8</b><b>.</b><b>1</b><b>1</b><b>.</b><b>1</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <b>1</b><b>9</b><b>2</b><b>.</b><b>1</b><b>6</b><b>8</b><b>.</b><b>2</b><b>2</b><b>.</b><b>2</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b><b>.</b><b>t</b><b>t</b><b>l</b> <b>=</b><b>=</b> <b>6</b><b>4</b>
+
+
+       Here’s an ARP microflow example:
+
+           <b>i</b><b>n</b><b>p</b><b>o</b><b>r</b><b>t</b> <b>=</b><b>=</b> <b>"</b><b>l</b><b>p</b><b>1</b><b>2</b><b>3</b><b>"</b>
+           &amp;&amp;&amp;&amp; <b>e</b><b>t</b><b>h</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b><b>=</b> <b>f</b><b>f</b><b>:</b><b>f</b><b>f</b><b>:</b><b>f</b><b>f</b><b>:</b><b>f</b><b>f</b><b>:</b><b>f</b><b>f</b><b>:</b><b>f</b><b>f</b> &amp;&amp;&amp;&amp; <b>e</b><b>t</b><b>h</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b><b>=</b> <b>f</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>1</b><b>:</b><b>1</b><b>1</b>
+           &amp;&amp;&amp;&amp; <b>a</b><b>r</b><b>p</b><b>.</b><b>o</b><b>p</b> <b>=</b><b>=</b> <b>1</b> &amp;&amp;&amp;&amp; <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>h</b><b>a</b> <b>=</b><b>=</b> <b>f</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>0</b><b>:</b><b>0</b><b>1</b><b>:</b><b>1</b><b>1</b> &amp;&amp;&amp;&amp; <b>a</b><b>r</b><b>p</b><b>.</b><b>s</b><b>p</b><b>a</b> <b>=</b><b>=</b> <b>1</b><b>9</b><b>2</b><b>.</b><b>1</b><b>6</b><b>8</b><b>.</b><b>1</b><b>.</b><b>1</b><b>1</b>
+           &amp;&amp;&amp;&amp; <b>a</b><b>r</b><b>p</b><b>.</b><b>t</b><b>h</b><b>a</b> <b>=</b><b>=</b> <b>f</b><b>f</b><b>:</b><b>f</b><b>f</b><b>:</b><b>f</b><b>f</b><b>:</b><b>f</b><b>f</b><b>:</b><b>f</b><b>f</b><b>:</b><b>f</b><b>f</b> &amp;&amp;&amp;&amp; <b>a</b><b>r</b><b>p</b><b>.</b><b>t</b><b>p</b><b>a</b> <b>=</b><b>=</b> <b>1</b><b>9</b><b>2</b><b>.</b><b>1</b><b>6</b><b>8</b><b>.</b><b>2</b><b>.</b><b>2</b><b>2</b>
+
+
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>t</b><b>r</b><b>a</b><b>c</b><b>e</b> will reject erroneous  microflow  expressions,  which  beyond
+       syntax  errors  fall into two categories. First, they can be ambiguous.
+       For example, <b>t</b><b>c</b><b>p</b><b>.</b><b>s</b><b>r</b><b>c</b> <b>=</b><b>=</b> <b>8</b><b>0</b> is ambiguous because it does not state  IPv4
+       or  IPv6  as the Ethernet type. <b>i</b><b>p</b><b>4</b> &amp;&amp;&amp;&amp; <b>t</b><b>c</b><b>p</b><b>.</b><b>s</b><b>r</b><b>c</b> >gt;>gt; <b>1</b><b>0</b><b>2</b><b>4</b> is also ambiguous
+       because it does not constrain bits of  <b>t</b><b>c</b><b>p</b><b>.</b><b>s</b><b>r</b><b>c</b>  to  particular  values.
+       Second, they can be contradictory, e.g. <b>i</b><b>p</b><b>4</b> &amp;&amp;&amp;&amp; <b>i</b><b>p</b><b>6</b>.
+
+<b>O</b><b>U</b><b>T</b><b>P</b><b>U</b><b>T</b>
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>t</b><b>r</b><b>a</b><b>c</b><b>e</b>  supports the three different forms of output, each described
+       in a separate section below. Regardless of the selected output  format,
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>t</b><b>r</b><b>a</b><b>c</b><b>e</b>  starts the output with a line that shows the microflow being
+       traced in OpenFlow syntax.
+
+   <b>D</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>e</b><b>d</b> <b>O</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b>
+       The detailed form of output is also the default form. This form  groups
+       output  into sections headed up by the ingress or egress pipeline being
+       traversed. Each pipeline lists each table that was visited  (by  number
+       and  name), the <b>o</b><b>v</b><b>n</b><b>-</b><b>n</b><b>o</b><b>r</b><b>t</b><b>h</b><b>d</b> source file and line number of the code that
+       added the flow, the match expression and priority of the  logical  flow
+       that was matched, and the actions that were executed.
+
+       The  execution  of  OVN  logical  actions  naturally  forms a ``control
+       stack’’ that resembles that of a program  in  conventional  programming
+       languages  such  as  C or Java. Because the <b>n</b><b>e</b><b>x</b><b>t</b> action that calls into
+       another logical flow table for a lookup is a recursive  construct,  OVN
+       ``programs’’  in  practice  tend to form deep control stacks that, dis‐
+       played in the obvious way using additional indentation for each  level,
+       quickly  use up the horizontal space on all but the widest displays. To
+       make  detailed  output  more  readable,  without  loss  of  generality,
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>t</b><b>r</b><b>a</b><b>c</b><b>e</b>  omits indentation for ``tail recursion,’’ that is, when <b>n</b><b>e</b><b>x</b><b>t</b>
+       is the last action in a logical flow, it does not indent details of the
+       next table lookup more deeply. Output still uses indentation when it is
+       needed for clarity.
+
+       OVN ``programs’’ traces also tend to encounter long strings of  logical
+       flows with match expression <b>1</b> (which matches every packet) and the sin‐
+       gle action <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b>. These are uninteresting and merely clutter output, so
+       <b>o</b><b>v</b><b>n</b><b>-</b><b>t</b><b>r</b><b>a</b><b>c</b><b>e</b> omits them entirely even from detailed output.
+
+       The  following  excerpt  from detailed <b>o</b><b>v</b><b>n</b><b>-</b><b>t</b><b>r</b><b>a</b><b>c</b><b>e</b> output shows a section
+       for a packet traversing the ingress pipeline of  logical  datapath  <b>l</b><b>s</b><b>1</b>
+       with  ingress  logical port <b>l</b><b>p</b><b>1</b><b>1</b><b>1</b>. The packet matches a logical flow in
+       table 0 (aka <b>l</b><b>s</b><b>_</b><b>i</b><b>n</b><b>_</b><b>p</b><b>o</b><b>r</b><b>t</b><b>_</b><b>s</b><b>e</b><b>c</b><b>_</b><b>l</b><b>2</b>) with priority 50 and executes  <b>n</b><b>e</b><b>x</b><b>t</b><b>(</b><b>1</b><b>)</b><b>;</b>
+       to pass to table 1. Tables 1 through 11 are trivial and omitted. In ta‐
+       ble  19 (aka <b>l</b><b>s</b><b>_</b><b>i</b><b>n</b><b>_</b><b>l</b><b>2</b><b>_</b><b>l</b><b>k</b><b>u</b><b>p</b>), the packet matches a flow with priority 50
+       based on its Ethernet destination address and the flow’s actions output
+       the packet to the <b>l</b><b>r</b><b>p</b><b>1</b><b>1</b><b>-</b><b>a</b><b>t</b><b>t</b><b>a</b><b>c</b><b>h</b><b>e</b><b>m</b><b>e</b><b>n</b><b>t</b> logical port.
+
+           ingress(dp="ls1", inport="lp111")
+           ---------------------------------
+           0. ls_in_port_sec_l2: inport == "lp111", priority 50
+           next(1);
+           19. ls_in_l2_lkup: eth.dst == 00:00:00:00:ff:11, priority 50
+           outport = "lrp11-attachment";
+           output;
+
+
+   <b>S</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b> <b>O</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b>
+       Summary output includes the logical pipelines visited by a  packet  and
+       the  logical  actions  executed on it. Compared to the detailed output,
+       however, it removes details of tables and logical flows traversed by  a
+       packet.  It  uses a format closer to that of a programming language and
+       does not attempt to avoid indentation. The summary output equivalent to
+       the above detailed output fragment is:
+
+           ingress(dp="ls1", inport="lp111") {
+           outport = "lrp11-attachment";
+           output;
+           ...
+           };
+
+
+   <b>M</b><b>i</b><b>n</b><b>i</b><b>m</b><b>a</b><b>l</b> <b>O</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b>
+       Minimal output includes only actions that modify packet data  (not  in‐
+       cluding  OVN  registers or metadata such as <b>o</b><b>u</b><b>t</b><b>p</b><b>o</b><b>r</b><b>t</b>) and <b>o</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b> actions
+       that actually deliver a packet  to  a  logical  port  (excluding  patch
+       ports).  The  operands of actions that modify packet data are displayed
+       reduced to constants, e.g. <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b> <b>=</b> <b>r</b><b>e</b><b>g</b><b>0</b><b>;</b> might be show as  <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b>  <b>=</b>
+       <b>1</b><b>9</b><b>2</b><b>.</b><b>1</b><b>6</b><b>8</b><b>.</b><b>0</b><b>.</b><b>1</b><b>;</b>  if that was the value actually loaded. This yields output
+       even simpler than the summary format. (Users familiar with Open vSwitch
+       may recognize this as similar in spirit to the datapath actions  listed
+       at the bottom of <b>o</b><b>f</b><b>p</b><b>r</b><b>o</b><b>t</b><b>o</b><b>/</b><b>t</b><b>r</b><b>a</b><b>c</b><b>e</b> output.)
+
+       The  minimal output format reflects the externally seen behavior of the
+       logical networks more than it does the implementation. This makes  this
+       output format the most suitable for use in regression tests, because it
+       is least likely to change when logical flow tables are rearranged with‐
+       out semantic change.
+
+<b>S</b><b>T</b><b>A</b><b>T</b><b>E</b><b>F</b><b>U</b><b>L</b> <b>A</b><b>C</b><b>T</b><b>I</b><b>O</b><b>N</b><b>S</b>
+       Some  OVN  logical actions use or update state that is not available in
+       the southbound database. <b>o</b><b>v</b><b>n</b><b>-</b><b>t</b><b>r</b><b>a</b><b>c</b><b>e</b> handles these actions  as  described
+       below:
+
+              <b>c</b><b>t</b><b>_</b><b>n</b><b>e</b><b>x</b><b>t</b>
+                     By  default  <b>o</b><b>v</b><b>n</b><b>-</b><b>t</b><b>r</b><b>a</b><b>c</b><b>e</b>  treats  flows  as ``tracked’’ and
+                     ``established.’’ See the description of the  <b>-</b><b>-</b><b>c</b><b>t</b>  option
+                     for a way to override this behavior.
+
+              <b>c</b><b>t</b><b>_</b><b>d</b><b>n</b><b>a</b><b>t</b> (without an argument)
+                     Forks the pipeline. In one fork, advances to the next ta‐
+                     ble as if <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b> were executed. The packet is not changed,
+                     on the assumption that no NAT state was available. In the
+                     other  fork,  the pipeline continues without change after
+                     the <b>c</b><b>t</b><b>_</b><b>d</b><b>n</b><b>a</b><b>t</b> action.
+
+              <b>c</b><b>t</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b> (without an argument)
+                     This action distinguishes  between  gateway  routers  and
+                     distributed  routers.  A  gateway  router is defined as a
+                     logical datapath that contains  an  <b>l</b><b>3</b><b>g</b><b>a</b><b>t</b><b>e</b><b>w</b><b>a</b><b>y</b>  port;  any
+                     other  logical  datapath  is  a  distributed router. On a
+                     gateway router, <b>c</b><b>t</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>;</b> is treated as a no-op. On a dis‐
+                     tributed router, it is treated the same way as <b>c</b><b>t</b><b>_</b><b>d</b><b>n</b><b>a</b><b>t</b><b>;</b>.
+
+              <b>c</b><b>t</b><b>_</b><b>d</b><b>n</b><b>a</b><b>t</b><b>(</b><u>i</u><u>p</u><b>)</b>
+              <b>c</b><b>t</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b><b>(</b><u>i</u><u>p</u><b>)</b>
+                   Forks the pipeline. In one fork, sets <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b> (or  <b>i</b><b>p</b><b>4</b><b>.</b><b>s</b><b>r</b><b>c</b>)
+                   to  <u>i</u><u>p</u>  and  <b>c</b><b>t</b><b>.</b><b>d</b><b>n</b><b>a</b><b>t</b>  (or <b>c</b><b>t</b><b>.</b><b>s</b><b>n</b><b>a</b><b>t</b>) to 1 and advances to the
+                   next table as if <b>n</b><b>e</b><b>x</b><b>t</b><b>;</b> were executed. In  the  other  fork,
+                   the pipeline continues without change after the <b>c</b><b>t</b><b>_</b><b>d</b><b>n</b><b>a</b><b>t</b> (or
+                   <b>c</b><b>t</b><b>_</b><b>s</b><b>n</b><b>a</b><b>t</b>) action.
+
+              <b>c</b><b>t</b><b>_</b><b>l</b><b>b</b><b>;</b>
+              <b>c</b><b>t</b><b>_</b><b>l</b><b>b</b><b>(</b><u>i</u><u>p</u>[<b>:</b><u>p</u><u>o</u><u>r</u><u>t</u>]...<b>)</b><b>;</b>
+                   Forks  the pipeline. In one fork, sets <b>i</b><b>p</b><b>4</b><b>.</b><b>d</b><b>s</b><b>t</b> (or <b>i</b><b>p</b><b>6</b><b>.</b><b>d</b><b>s</b><b>t</b>)
+                   to one of the load-balancer addresses and  the  destination
+                   port to its associated port, if any, and sets <b>c</b><b>t</b><b>.</b><b>d</b><b>n</b><b>a</b><b>t</b> to 1.
+                   With one or more arguments, gives preference to the address
+                   specified  on <b>-</b><b>-</b><b>l</b><b>b</b><b>-</b><b>d</b><b>s</b><b>t</b>, if any; without arguments, uses the
+                   address and port specified on <b>-</b><b>-</b><b>l</b><b>b</b><b>-</b><b>d</b><b>s</b><b>t</b>. In the other  fork,
+                   the  pipeline  continues without change after the <b>c</b><b>t</b><b>_</b><b>l</b><b>b</b> ac‐
+                   tion.
+
+              <b>c</b><b>t</b><b>_</b><b>c</b><b>o</b><b>m</b><b>m</b><b>i</b><b>t</b>
+              <b>p</b><b>u</b><b>t</b><b>_</b><b>a</b><b>r</b><b>p</b>
+              <b>p</b><b>u</b><b>t</b><b>_</b><b>n</b><b>d</b>
+                   These actions are treated as no-ops.
+
+<b>D</b><b>A</b><b>E</b><b>M</b><b>O</b><b>N</b> <b>M</b><b>O</b><b>D</b><b>E</b>
+       If <b>o</b><b>v</b><b>n</b><b>-</b><b>t</b><b>r</b><b>a</b><b>c</b><b>e</b> is invoked with the <b>-</b><b>-</b><b>d</b><b>e</b><b>t</b><b>a</b><b>c</b><b>h</b> option (see  <b>D</b><b>a</b><b>e</b><b>m</b><b>o</b><b>n</b>  <b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>,
+       below), it runs in the background as a daemon and accepts commands from
+       <b>o</b><b>v</b><b>s</b><b>-</b><b>a</b><b>p</b><b>p</b><b>c</b><b>t</b><b>l</b>  (or  another  JSON-RPC  client) indefinitely. The currently
+       supported commands are described below.
+
+              <b>t</b><b>r</b><b>a</b><b>c</b><b>e</b> [<u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u>] [<u>d</u><u>a</u><u>t</u><u>a</u><u>p</u><u>a</u><u>t</u><u>h</u>] <u>m</u><u>i</u><u>c</u><u>r</u><u>o</u><u>f</u><u>l</u><u>o</u><u>w</u>
+                     Traces <u>m</u><u>i</u><u>c</u><u>r</u><u>o</u><u>f</u><u>l</u><u>o</u><u>w</u> through <u>d</u><u>a</u><u>t</u><u>a</u><u>p</u><u>a</u><u>t</u><u>h</u> and  replies  with  the
+                     results of the trace. Accepts the <u>o</u><u>p</u><u>t</u><u>i</u><u>o</u><u>n</u><u>s</u> described under
+                     <b>T</b><b>r</b><b>a</b><b>c</b><b>e</b> <b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b> below.
+
+              <b>e</b><b>x</b><b>i</b><b>t</b>   Causes <b>o</b><b>v</b><b>n</b><b>-</b><b>t</b><b>r</b><b>a</b><b>c</b><b>e</b> to gracefully terminate.
+
+<b>O</b><b>P</b><b>T</b><b>I</b><b>O</b><b>N</b><b>S</b>
+   <b>T</b><b>r</b><b>a</b><b>c</b><b>e</b> <b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+       <b>-</b><b>-</b><b>d</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>e</b><b>d</b>
+       <b>-</b><b>-</b><b>s</b><b>u</b><b>m</b><b>m</b><b>a</b><b>r</b><b>y</b>
+       <b>-</b><b>-</b><b>m</b><b>i</b><b>n</b><b>i</b><b>m</b><b>a</b><b>l</b>
+            These  options  control  the form and level of detail in <b>o</b><b>v</b><b>n</b><b>-</b><b>t</b><b>r</b><b>a</b><b>c</b><b>e</b>
+            output. If more than one of these options is specified, all of the
+            selected forms are output, in the order listed above, each  headed
+            by a banner line. If none of these options is given, <b>-</b><b>-</b><b>d</b><b>e</b><b>t</b><b>a</b><b>i</b><b>l</b><b>e</b><b>d</b> is
+            the  default. See <b>O</b><b>u</b><b>t</b><b>p</b><b>u</b><b>t</b>, above, for a description of each kind of
+            output.
+
+       <b>-</b><b>-</b><b>a</b><b>l</b><b>l</b>
+            Selects all three forms of output.
+
+       <b>-</b><b>-</b><b>o</b><b>v</b><b>s</b>[<b>=</b><u>r</u><u>e</u><u>m</u><u>o</u><u>t</u><u>e</u>]
+            Makes <b>o</b><b>v</b><b>n</b><b>-</b><b>t</b><b>r</b><b>a</b><b>c</b><b>e</b> attempt to obtain and display the  OpenFlow  flows
+            that correspond to each OVN logical flow. To do so, <b>o</b><b>v</b><b>n</b><b>-</b><b>t</b><b>r</b><b>a</b><b>c</b><b>e</b> con‐
+            nects  to <u>r</u><u>e</u><u>m</u><u>o</u><u>t</u><u>e</u> (by default, <b>u</b><b>n</b><b>i</b><b>x</b><b>:</b><b>/</b><b>b</b><b>r</b><b>-</b><b>i</b><b>n</b><b>t</b><b>.</b><b>m</b><b>g</b><b>m</b><b>t</b>) over OpenFlow and
+            retrieves the flows. If <u>r</u><u>e</u><u>m</u><u>o</u><u>t</u><u>e</u> is specified, it must be an  active
+            OpenFlow connection method described in <b>o</b><b>v</b><b>s</b><b>d</b><b>b</b>(7).
+
+            To  make the best use of the output, it is important to understand
+            the relationship between logical flows and OpenFlow flows. <b>o</b><b>v</b><b>n</b><b>-</b><b>a</b><b>r</b>‐‐
+            <b>c</b><b>h</b><b>i</b><b>t</b><b>e</b><b>c</b><b>t</b><b>u</b><b>r</b><b>e</b>(7),  under  <b>A</b><b>r</b><b>c</b><b>h</b><b>i</b><b>t</b><b>e</b><b>c</b><b>t</b><b>u</b><b>r</b><b>a</b><b>l</b>  <b>P</b><b>h</b><b>y</b><b>s</b><b>i</b><b>c</b><b>a</b><b>l</b>  <b>L</b><b>i</b><b>f</b><b>e</b>  <b>C</b><b>y</b><b>c</b><b>l</b><b>e</b>  <b>o</b><b>f</b>  <b>a</b>
+            <b>P</b><b>a</b><b>c</b><b>k</b><b>e</b><b>t</b>,  describes  this  relationship. Keep in mind the following
+            points:
+
+            •      <b>o</b><b>v</b><b>n</b><b>-</b><b>t</b><b>r</b><b>a</b><b>c</b><b>e</b> currently shows all the OpenFlow flows to which a
+                   logical flow corresponds, even though an actual packet  or‐
+                   dinarily matches only one of these.
+
+            •      Some  logical  flows can map to the Open vSwitch ``conjunc‐
+                   tive  match’’  extension  (see  <b>o</b><b>v</b><b>s</b><b>-</b><b>f</b><b>i</b><b>e</b><b>l</b><b>d</b><b>s</b>(7)).   Currently
+                   <b>o</b><b>v</b><b>n</b><b>-</b><b>t</b><b>r</b><b>a</b><b>c</b><b>e</b> cannot display the flows with <b>c</b><b>o</b><b>n</b><b>j</b><b>u</b><b>n</b><b>c</b><b>t</b><b>i</b><b>o</b><b>n</b> actions
+                   that effectively produce the <b>c</b><b>o</b><b>n</b><b>j</b><b>_</b><b>i</b><b>d</b> match.
+
+            •      Some  logical  flows may not be represented in the OpenFlow
+                   tables on a given hypervisor, if they could not be used  on
+                   that hypervisor.
+
+            •      Some  OpenFlow  flows  do  not correspond to logical flows,
+                   such as OpenFlow flows that map between physical and  logi‐
+                   cal ports. These flows will never show up in a trace.
+
+            •      When  <b>o</b><b>v</b><b>n</b><b>-</b><b>t</b><b>r</b><b>a</b><b>c</b><b>e</b> omits uninteresting logical flows from out‐
+                   put, it does not look up the corresponding OpenFlow flows.
+
+       <b>-</b><b>-</b><b>c</b><b>t</b><b>=</b><u>f</u><u>l</u><u>a</u><u>g</u><u>s</u>
+            This option sets the <b>c</b><b>t</b><b>_</b><b>s</b><b>t</b><b>a</b><b>t</b><b>e</b> flags that a <b>c</b><b>t</b><b>_</b><b>n</b><b>e</b><b>x</b><b>t</b> logical  action
+            will report. The <u>f</u><u>l</u><u>a</u><u>g</u><u>s</u> must be a comma- or space-separated list of
+            the following connection tracking flags:
+
+            •      <b>t</b><b>r</b><b>k</b>:  Include  to  indicate  connection  tracking has taken
+                   place. (This bit is set automatically even if not listed in
+                   <u>f</u><u>l</u><u>a</u><u>g</u><u>s</u>.
+
+            •      <b>n</b><b>e</b><b>w</b>: Include to indicate a new flow.
+
+            •      <b>e</b><b>s</b><b>t</b>: Include to indicate an established flow.
+
+            •      <b>r</b><b>e</b><b>l</b>: Include to indicate a related flow.
+
+            •      <b>r</b><b>p</b><b>l</b>: Include to indicate a reply flow.
+
+            •      <b>i</b><b>n</b><b>v</b>: Include to indicate a connection entry in a bad state.
+
+            •      <b>d</b><b>n</b><b>a</b><b>t</b>: Include to indicate a packet whose destination IP ad‐
+                   dress has been changed.
+
+            •      <b>s</b><b>n</b><b>a</b><b>t</b>: Include to indicate a packet whose source IP  address
+                   has been changed.
+
+            The  <b>c</b><b>t</b><b>_</b><b>n</b><b>e</b><b>x</b><b>t</b> action is used to implement the OVN distributed fire‐
+            wall. For testing, useful flag combinations include:
+
+            •      <b>t</b><b>r</b><b>k</b><b>,</b><b>n</b><b>e</b><b>w</b>: A packet in a flow in either direction  through  a
+                   firewall that has not yet been committed (with <b>c</b><b>t</b><b>_</b><b>c</b><b>o</b><b>m</b><b>m</b><b>i</b><b>t</b>).
+
+            •      <b>t</b><b>r</b><b>k</b><b>,</b><b>e</b><b>s</b><b>t</b>:  A packet in an established flow going out through
+                   a firewall.
+
+            •      <b>t</b><b>r</b><b>k</b><b>,</b><b>r</b><b>p</b><b>l</b>: A packet coming in through a firewall in reply  to
+                   an established flow.
+
+            •      <b>t</b><b>r</b><b>k</b><b>,</b><b>i</b><b>n</b><b>v</b>: An invalid packet in either direction.
+
+            A  packet  might  pass through the connection tracker twice in one
+            trip through OVN: once following egress from a  VM  as  it  passes
+            outward through a firewall, and once preceding ingress to a second
+            VM  as  it passes inward through a firewall. Use multiple <b>-</b><b>-</b><b>c</b><b>t</b> op‐
+            tions to specify the flags for multiple <b>c</b><b>t</b><b>_</b><b>n</b><b>e</b><b>x</b><b>t</b> actions.
+
+            When <b>-</b><b>-</b><b>c</b><b>t</b> is unspecified, or when there  are  fewer  <b>-</b><b>-</b><b>c</b><b>t</b>  options
+            than <b>c</b><b>t</b><b>_</b><b>n</b><b>e</b><b>x</b><b>t</b> actions, the <u>f</u><u>l</u><u>a</u><u>g</u><u>s</u> default to <b>t</b><b>r</b><b>k</b><b>,</b><b>e</b><b>s</b><b>t</b>.
+
+       <b>-</b><b>-</b><b>l</b><b>b</b><b>-</b><b>d</b><b>s</b><b>t</b><b>=</b><u>i</u><u>p</u>[<b>:</b><u>p</u><u>o</u><u>r</u><u>t</u>]
+            Sets  the  IP  from  VIP pool to use as destination of the packet.
+            <b>-</b><b>-</b><b>l</b><b>b</b><b>-</b><b>d</b><b>s</b><b>t</b> is not available in daemon mode.
+
+       <b>-</b><b>-</b><b>s</b><b>e</b><b>l</b><b>e</b><b>c</b><b>t</b><b>-</b><b>i</b><b>d</b><b>=</b><u>i</u><u>d</u>
+            Specify the <u>i</u><u>d</u> to be selected by the <b>s</b><b>e</b><b>l</b><b>e</b><b>c</b><b>t</b> action. <u>i</u><u>d</u> must be one
+            of the values listed in the <b>s</b><b>e</b><b>l</b><b>e</b><b>c</b><b>t</b> action. Otherwise, a random  id
+            is  selected  from the list, as if <b>-</b><b>-</b><b>s</b><b>e</b><b>l</b><b>e</b><b>c</b><b>t</b><b>-</b><b>i</b><b>d</b> were not specified.
+            <b>-</b><b>-</b><b>s</b><b>e</b><b>l</b><b>e</b><b>c</b><b>t</b><b>-</b><b>i</b><b>d</b> is not available in daemon mode.
+
+       <b>-</b><b>-</b><b>f</b><b>r</b><b>i</b><b>e</b><b>n</b><b>d</b><b>l</b><b>y</b><b>-</b><b>n</b><b>a</b><b>m</b><b>e</b><b>s</b>
+       <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>f</b><b>r</b><b>i</b><b>e</b><b>n</b><b>d</b><b>l</b><b>y</b><b>-</b><b>n</b><b>a</b><b>m</b><b>e</b><b>s</b>
+            When cloud management systems such as OpenStack are layered on top
+            of OVN, they often use long, human-unfriendly names for ports  and
+            datapaths,  for  example,  ones that include entire UUIDs. They do
+            usually include friendlier names, but the long, hard-to-read names
+            are the ones that appear in matches and actions.  By  default,  or
+            with  <b>-</b><b>-</b><b>f</b><b>r</b><b>i</b><b>e</b><b>n</b><b>d</b><b>l</b><b>y</b><b>-</b><b>n</b><b>a</b><b>m</b><b>e</b><b>s</b>,  <b>o</b><b>v</b><b>n</b><b>-</b><b>t</b><b>r</b><b>a</b><b>c</b><b>e</b>  substitutes  these  friendlier
+            names for the long names in its output. Use <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>f</b><b>r</b><b>i</b><b>e</b><b>n</b><b>d</b><b>l</b><b>y</b><b>-</b><b>n</b><b>a</b><b>m</b><b>e</b><b>s</b> to
+            disable this behavior; this option might be useful,  for  example,
+            if a program is going to parse <b>o</b><b>v</b><b>n</b><b>-</b><b>t</b><b>r</b><b>a</b><b>c</b><b>e</b> output.
+
+   <b>D</b><b>a</b><b>e</b><b>m</b><b>o</b><b>n</b> <b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+       <b>-</b><b>-</b><b>p</b><b>i</b><b>d</b><b>f</b><b>i</b><b>l</b><b>e</b>[<b>=</b><u>p</u><u>i</u><u>d</u><u>f</u><u>i</u><u>l</u><u>e</u>]
+              Causes a file (by default, <u>p</u><u>r</u><u>o</u><u>g</u><u>r</u><u>a</u><u>m</u><b>.</b><b>p</b><b>i</b><b>d</b>) to be created indicating
+              the  PID  of the running process. If the <u>p</u><u>i</u><u>d</u><u>f</u><u>i</u><u>l</u><u>e</u> argument is not
+              specified, or if it does not begin with <b>/</b>, then it is created in
+              .
+
+              If <b>-</b><b>-</b><b>p</b><b>i</b><b>d</b><b>f</b><b>i</b><b>l</b><b>e</b> is not specified, no pidfile is created.
+
+       <b>-</b><b>-</b><b>o</b><b>v</b><b>e</b><b>r</b><b>w</b><b>r</b><b>i</b><b>t</b><b>e</b><b>-</b><b>p</b><b>i</b><b>d</b><b>f</b><b>i</b><b>l</b><b>e</b>
+              By default, when <b>-</b><b>-</b><b>p</b><b>i</b><b>d</b><b>f</b><b>i</b><b>l</b><b>e</b> is specified and the  specified  pid‐
+              file already exists and is locked by a running process, the dae‐
+              mon refuses to start. Specify <b>-</b><b>-</b><b>o</b><b>v</b><b>e</b><b>r</b><b>w</b><b>r</b><b>i</b><b>t</b><b>e</b><b>-</b><b>p</b><b>i</b><b>d</b><b>f</b><b>i</b><b>l</b><b>e</b> to cause it to
+              instead overwrite the pidfile.
+
+              When <b>-</b><b>-</b><b>p</b><b>i</b><b>d</b><b>f</b><b>i</b><b>l</b><b>e</b> is not specified, this option has no effect.
+
+       <b>-</b><b>-</b><b>d</b><b>e</b><b>t</b><b>a</b><b>c</b><b>h</b>
+              Runs  this  program  as a background process. The process forks,
+              and in the child it starts a new session,  closes  the  standard
+              file descriptors (which has the side effect of disabling logging
+              to  the  console), and changes its current directory to the root
+              (unless <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>c</b><b>h</b><b>d</b><b>i</b><b>r</b> is specified). After the child completes  its
+              initialization, the parent exits.
+
+       <b>-</b><b>-</b><b>m</b><b>o</b><b>n</b><b>i</b><b>t</b><b>o</b><b>r</b>
+              Creates  an  additional  process  to monitor this program. If it
+              dies due to a signal that indicates a programming  error  (<b>S</b><b>I</b><b>G</b><b>A</b>‐‐
+              <b>B</b><b>R</b><b>T</b>, <b>S</b><b>I</b><b>G</b><b>A</b><b>L</b><b>R</b><b>M</b>, <b>S</b><b>I</b><b>G</b><b>B</b><b>U</b><b>S</b>, <b>S</b><b>I</b><b>G</b><b>F</b><b>P</b><b>E</b>, <b>S</b><b>I</b><b>G</b><b>I</b><b>L</b><b>L</b>, <b>S</b><b>I</b><b>G</b><b>P</b><b>I</b><b>P</b><b>E</b>, <b>S</b><b>I</b><b>G</b><b>S</b><b>E</b><b>G</b><b>V</b>, <b>S</b><b>I</b><b>G</b><b>X</b><b>C</b><b>P</b><b>U</b>,
+              or <b>S</b><b>I</b><b>G</b><b>X</b><b>F</b><b>S</b><b>Z</b>) then the monitor process starts a new copy of it. If
+              the daemon dies or exits for another reason, the monitor process
+              exits.
+
+              This  option  is  normally used with <b>-</b><b>-</b><b>d</b><b>e</b><b>t</b><b>a</b><b>c</b><b>h</b>, but it also func‐
+              tions without it.
+
+       <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>c</b><b>h</b><b>d</b><b>i</b><b>r</b>
+              By default, when <b>-</b><b>-</b><b>d</b><b>e</b><b>t</b><b>a</b><b>c</b><b>h</b> is specified, the daemon  changes  its
+              current  working  directory  to  the root directory after it de‐
+              taches. Otherwise, invoking the daemon from a carelessly  chosen
+              directory  would  prevent  the administrator from unmounting the
+              file system that holds that directory.
+
+              Specifying <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>c</b><b>h</b><b>d</b><b>i</b><b>r</b> suppresses this behavior,  preventing  the
+              daemon  from changing its current working directory. This may be
+              useful for collecting core files, since it is common behavior to
+              write core dumps into the current working directory and the root
+              directory is not a good directory to use.
+
+              This option has no effect when <b>-</b><b>-</b><b>d</b><b>e</b><b>t</b><b>a</b><b>c</b><b>h</b> is not specified.
+
+       <b>-</b><b>-</b><b>n</b><b>o</b><b>-</b><b>s</b><b>e</b><b>l</b><b>f</b><b>-</b><b>c</b><b>o</b><b>n</b><b>f</b><b>i</b><b>n</b><b>e</b><b>m</b><b>e</b><b>n</b><b>t</b>
+              By default this daemon will try to self-confine itself  to  work
+              with  files  under  well-known  directories  determined at build
+              time. It is better to stick with this default behavior  and  not
+              to  use  this  flag  unless some other Access Control is used to
+              confine daemon. Note that in contrast to  other  access  control
+              implementations  that  are  typically enforced from kernel-space
+              (e.g. DAC or MAC), self-confinement is imposed  from  the  user-
+              space daemon itself and hence should not be considered as a full
+              confinement  strategy,  but instead should be viewed as an addi‐
+              tional layer of security.
+
+       <b>-</b><b>-</b><b>u</b><b>s</b><b>e</b><b>r</b><b>=</b><u>u</u><u>s</u><u>e</u><u>r</u><b>:</b><u>g</u><u>r</u><u>o</u><u>u</u><u>p</u>
+              Causes this program to run as  a  different  user  specified  in
+              <u>u</u><u>s</u><u>e</u><u>r</u><b>:</b><u>g</u><u>r</u><u>o</u><u>u</u><u>p</u>,  thus  dropping  most  of the root privileges. Short
+              forms <u>u</u><u>s</u><u>e</u><u>r</u> and <b>:</b><u>g</u><u>r</u><u>o</u><u>u</u><u>p</u> are also allowed,  with  current  user  or
+              group  assumed,  respectively.  Only daemons started by the root
+              user accepts this argument.
+
+              On   Linux,   daemons   will   be   granted   <b>C</b><b>A</b><b>P</b><b>_</b><b>I</b><b>P</b><b>C</b><b>_</b><b>L</b><b>O</b><b>C</b><b>K</b>   and
+              <b>C</b><b>A</b><b>P</b><b>_</b><b>N</b><b>E</b><b>T</b><b>_</b><b>B</b><b>I</b><b>N</b><b>D</b><b>_</b><b>S</b><b>E</b><b>R</b><b>V</b><b>I</b><b>C</b><b>E</b><b>S</b>  before  dropping root privileges. Daemons
+              that interact with a datapath, such  as  <b>o</b><b>v</b><b>s</b><b>-</b><b>v</b><b>s</b><b>w</b><b>i</b><b>t</b><b>c</b><b>h</b><b>d</b>,  will  be
+              granted  three  additional  capabilities,  namely <b>C</b><b>A</b><b>P</b><b>_</b><b>N</b><b>E</b><b>T</b><b>_</b><b>A</b><b>D</b><b>M</b><b>I</b><b>N</b>,
+              <b>C</b><b>A</b><b>P</b><b>_</b><b>N</b><b>E</b><b>T</b><b>_</b><b>B</b><b>R</b><b>O</b><b>A</b><b>D</b><b>C</b><b>A</b><b>S</b><b>T</b> and <b>C</b><b>A</b><b>P</b><b>_</b><b>N</b><b>E</b><b>T</b><b>_</b><b>R</b><b>A</b><b>W</b>. The  capability  change  will
+              apply even if the new user is root.
+
+              On Windows, this option is not currently supported. For security
+              reasons,  specifying  this  option will cause the daemon process
+              not to start.
+
+   <b>L</b><b>o</b><b>g</b><b>g</b><b>i</b><b>n</b><b>g</b> <b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+       <b>-</b><b>v</b>[<u>s</u><u>p</u><u>e</u><u>c</u>]
+       <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>b</b><b>o</b><b>s</b><b>e</b><b>=</b>[<u>s</u><u>p</u><u>e</u><u>c</u>]
+            Sets logging levels. Without any <u>s</u><u>p</u><u>e</u><u>c</u>,  sets  the  log  level  for
+            every  module and destination to <b>d</b><b>b</b><b>g</b>. Otherwise, <u>s</u><u>p</u><u>e</u><u>c</u> is a list of
+            words separated by spaces or commas or colons, up to one from each
+            category below:
+
+            •      A valid module name, as displayed by the <b>v</b><b>l</b><b>o</b><b>g</b><b>/</b><b>l</b><b>i</b><b>s</b><b>t</b>  command
+                   on <b>o</b><b>v</b><b>s</b><b>-</b><b>a</b><b>p</b><b>p</b><b>c</b><b>t</b><b>l</b>(8), limits the log level change to the speci‐
+                   fied module.
+
+            •      <b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b>,  <b>c</b><b>o</b><b>n</b><b>s</b><b>o</b><b>l</b><b>e</b>, or <b>f</b><b>i</b><b>l</b><b>e</b>, to limit the log level change to
+                   only to the system log, to the console, or to a  file,  re‐
+                   spectively.  (If  <b>-</b><b>-</b><b>d</b><b>e</b><b>t</b><b>a</b><b>c</b><b>h</b>  is specified, the daemon closes
+                   its standard file descriptors, so logging  to  the  console
+                   will have no effect.)
+
+                   On  Windows  platform,  <b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b> is accepted as a word and is
+                   only useful along with the <b>-</b><b>-</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>-</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> option (the word
+                   has no effect otherwise).
+
+            •      <b>o</b><b>f</b><b>f</b>, <b>e</b><b>m</b><b>e</b><b>r</b>, <b>e</b><b>r</b><b>r</b>, <b>w</b><b>a</b><b>r</b><b>n</b>, <b>i</b><b>n</b><b>f</b><b>o</b>, or  <b>d</b><b>b</b><b>g</b>,  to  control  the  log
+                   level.  Messages  of  the  given severity or higher will be
+                   logged, and messages of lower  severity  will  be  filtered
+                   out.  <b>o</b><b>f</b><b>f</b> filters out all messages. See <b>o</b><b>v</b><b>s</b><b>-</b><b>a</b><b>p</b><b>p</b><b>c</b><b>t</b><b>l</b>(8) for a
+                   definition of each log level.
+
+            Case is not significant within <u>s</u><u>p</u><u>e</u><u>c</u>.
+
+            Regardless of the log levels set for <b>f</b><b>i</b><b>l</b><b>e</b>, logging to a file  will
+            not take place unless <b>-</b><b>-</b><b>l</b><b>o</b><b>g</b><b>-</b><b>f</b><b>i</b><b>l</b><b>e</b> is also specified (see below).
+
+            For compatibility with older versions of OVS, <b>a</b><b>n</b><b>y</b> is accepted as a
+            word but has no effect.
+
+       <b>-</b><b>v</b>
+       <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>b</b><b>o</b><b>s</b><b>e</b>
+            Sets  the  maximum  logging  verbosity level, equivalent to <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b>‐‐
+            <b>b</b><b>o</b><b>s</b><b>e</b><b>=</b><b>d</b><b>b</b><b>g</b>.
+
+       <b>-</b><b>v</b><b>P</b><b>A</b><b>T</b><b>T</b><b>E</b><b>R</b><b>N</b><b>:</b><u>d</u><u>e</u><u>s</u><u>t</u><u>i</u><u>n</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u><b>:</b><u>p</u><u>a</u><u>t</u><u>t</u><u>e</u><u>r</u><u>n</u>
+       <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>b</b><b>o</b><b>s</b><b>e</b><b>=</b><b>P</b><b>A</b><b>T</b><b>T</b><b>E</b><b>R</b><b>N</b><b>:</b><u>d</u><u>e</u><u>s</u><u>t</u><u>i</u><u>n</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u><b>:</b><u>p</u><u>a</u><u>t</u><u>t</u><u>e</u><u>r</u><u>n</u>
+            Sets the log pattern for <u>d</u><u>e</u><u>s</u><u>t</u><u>i</u><u>n</u><u>a</u><u>t</u><u>i</u><u>o</u><u>n</u> to <u>p</u><u>a</u><u>t</u><u>t</u><u>e</u><u>r</u><u>n</u>. Refer to  <b>o</b><b>v</b><b>s</b><b>-</b><b>a</b><b>p</b>‐‐
+            <b>p</b><b>c</b><b>t</b><b>l</b>(8) for a description of the valid syntax for <u>p</u><u>a</u><u>t</u><u>t</u><u>e</u><u>r</u><u>n</u>.
+
+       <b>-</b><b>v</b><b>F</b><b>A</b><b>C</b><b>I</b><b>L</b><b>I</b><b>T</b><b>Y</b><b>:</b><u>f</u><u>a</u><u>c</u><u>i</u><u>l</u><u>i</u><u>t</u><u>y</u>
+       <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>b</b><b>o</b><b>s</b><b>e</b><b>=</b><b>F</b><b>A</b><b>C</b><b>I</b><b>L</b><b>I</b><b>T</b><b>Y</b><b>:</b><u>f</u><u>a</u><u>c</u><u>i</u><u>l</u><u>i</u><u>t</u><u>y</u>
+            Sets  the RFC5424 facility of the log message. <u>f</u><u>a</u><u>c</u><u>i</u><u>l</u><u>i</u><u>t</u><u>y</u> can be one
+            of <b>k</b><b>e</b><b>r</b><b>n</b>, <b>u</b><b>s</b><b>e</b><b>r</b>, <b>m</b><b>a</b><b>i</b><b>l</b>, <b>d</b><b>a</b><b>e</b><b>m</b><b>o</b><b>n</b>, <b>a</b><b>u</b><b>t</b><b>h</b>, <b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b>, <b>l</b><b>p</b><b>r</b>, <b>n</b><b>e</b><b>w</b><b>s</b>, <b>u</b><b>u</b><b>c</b><b>p</b>, <b>c</b><b>l</b><b>o</b><b>c</b><b>k</b>,
+            <b>f</b><b>t</b><b>p</b>, <b>n</b><b>t</b><b>p</b>, <b>a</b><b>u</b><b>d</b><b>i</b><b>t</b>, <b>a</b><b>l</b><b>e</b><b>r</b><b>t</b>, <b>c</b><b>l</b><b>o</b><b>c</b><b>k</b><b>2</b>, <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>0</b>,  <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>1</b>,  <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>2</b>,  <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>3</b>,
+            <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>4</b>, <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>5</b>, <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>6</b> or <b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>7</b>. If this option is not specified,
+            <b>d</b><b>a</b><b>e</b><b>m</b><b>o</b><b>n</b>  is used as the default for the local system syslog and <b>l</b><b>o</b>‐‐
+            <b>c</b><b>a</b><b>l</b><b>0</b> is used while sending a message to the  target  provided  via
+            the <b>-</b><b>-</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>-</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b> option.
+
+       <b>-</b><b>-</b><b>l</b><b>o</b><b>g</b><b>-</b><b>f</b><b>i</b><b>l</b><b>e</b>[<b>=</b><u>f</u><u>i</u><u>l</u><u>e</u>]
+            Enables  logging  to a file. If <u>f</u><u>i</u><u>l</u><u>e</u> is specified, then it is used
+            as the exact name for the log file. The default log file name used
+            if <u>f</u><u>i</u><u>l</u><u>e</u> is omitted is <b>/</b><b>u</b><b>s</b><b>r</b><b>/</b><b>l</b><b>o</b><b>c</b><b>a</b><b>l</b><b>/</b><b>v</b><b>a</b><b>r</b><b>/</b><b>l</b><b>o</b><b>g</b><b>/</b><b>o</b><b>v</b><b>n</b><b>/</b><u>p</u><u>r</u><u>o</u><u>g</u><u>r</u><u>a</u><u>m</u><b>.</b><b>l</b><b>o</b><b>g</b>.
+
+       <b>-</b><b>-</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>-</b><b>t</b><b>a</b><b>r</b><b>g</b><b>e</b><b>t</b><b>=</b><u>h</u><u>o</u><u>s</u><u>t</u><b>:</b><u>p</u><u>o</u><u>r</u><u>t</u>
+            Send syslog messages to UDP <u>p</u><u>o</u><u>r</u><u>t</u> on <u>h</u><u>o</u><u>s</u><u>t</u>, in addition to the  sys‐
+            tem  syslog.  The <u>h</u><u>o</u><u>s</u><u>t</u> must be a numerical IP address, not a host‐
+            name.
+
+       <b>-</b><b>-</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>-</b><b>m</b><b>e</b><b>t</b><b>h</b><b>o</b><b>d</b><b>=</b><u>m</u><u>e</u><u>t</u><u>h</u><u>o</u><u>d</u>
+            Specify <u>m</u><u>e</u><u>t</u><u>h</u><u>o</u><u>d</u> as how syslog messages should  be  sent  to  syslog
+            daemon. The following forms are supported:
+
+            •      <b>l</b><b>i</b><b>b</b><b>c</b>,  to use the libc <b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>(</b><b>)</b> function. Downside of using
+                   this options is that libc adds fixed prefix to  every  mes‐
+                   sage  before  it is actually sent to the syslog daemon over
+                   <b>/</b><b>d</b><b>e</b><b>v</b><b>/</b><b>l</b><b>o</b><b>g</b> UNIX domain socket.
+
+            •      <b>u</b><b>n</b><b>i</b><b>x</b><b>:</b><u>f</u><u>i</u><u>l</u><u>e</u>, to use a UNIX domain socket directly. It is pos‐
+                   sible to specify arbitrary message format with this option.
+                   However, <b>r</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>d</b> <b>8</b><b>.</b><b>9</b> and older  versions  use  hard  coded
+                   parser  function anyway that limits UNIX domain socket use.
+                   If you want to use  arbitrary  message  format  with  older
+                   <b>r</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>d</b>  versions, then use UDP socket to localhost IP ad‐
+                   dress instead.
+
+            •      <b>u</b><b>d</b><b>p</b><b>:</b><u>i</u><u>p</u><b>:</b><u>p</u><u>o</u><u>r</u><u>t</u>, to use a UDP socket. With this  method  it  is
+                   possible  to  use  arbitrary message format also with older
+                   <b>r</b><b>s</b><b>y</b><b>s</b><b>l</b><b>o</b><b>g</b><b>d</b>. When sending syslog messages over UDP socket  ex‐
+                   tra precaution needs to be taken into account, for example,
+                   syslog daemon needs to be configured to listen on the spec‐
+                   ified  UDP  port, accidental iptables rules could be inter‐
+                   fering with local syslog traffic and there are  some  secu‐
+                   rity  considerations  that apply to UDP sockets, but do not
+                   apply to UNIX domain sockets.
+
+            •      <b>n</b><b>u</b><b>l</b><b>l</b>, to discard all messages logged to syslog.
+
+            The default is taken from the <b>O</b><b>V</b><b>S</b><b>_</b><b>S</b><b>Y</b><b>S</b><b>L</b><b>O</b><b>G</b><b>_</b><b>M</b><b>E</b><b>T</b><b>H</b><b>O</b><b>D</b> environment  vari‐
+            able; if it is unset, the default is <b>l</b><b>i</b><b>b</b><b>c</b>.
+
+   <b>P</b><b>K</b><b>I</b> <b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+       PKI  configuration  is  required  to  use SSL for the connection to the
+       database (and the switch, if <b>-</b><b>-</b><b>o</b><b>v</b><b>s</b> is specified).
+
+              <b>-</b><b>p</b> <u>p</u><u>r</u><u>i</u><u>v</u><u>k</u><u>e</u><u>y</u><u>.</u><u>p</u><u>e</u><u>m</u>
+              <b>-</b><b>-</b><b>p</b><b>r</b><b>i</b><b>v</b><b>a</b><b>t</b><b>e</b><b>-</b><b>k</b><b>e</b><b>y</b><b>=</b><u>p</u><u>r</u><u>i</u><u>v</u><u>k</u><u>e</u><u>y</u><u>.</u><u>p</u><u>e</u><u>m</u>
+                   Specifies a PEM file containing the  private  key  used  as
+                   identity for outgoing SSL connections.
+
+              <b>-</b><b>c</b> <u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+              <b>-</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>i</b><b>f</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b><b>=</b><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+                   Specifies  a  PEM file containing a certificate that certi‐
+                   fies the private key specified on <b>-</b><b>p</b> or <b>-</b><b>-</b><b>p</b><b>r</b><b>i</b><b>v</b><b>a</b><b>t</b><b>e</b><b>-</b><b>k</b><b>e</b><b>y</b> to be
+                   trustworthy. The certificate must be signed by the certifi‐
+                   cate authority (CA) that the peer in SSL  connections  will
+                   use to verify it.
+
+              <b>-</b><b>C</b> <u>c</u><u>a</u><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+              <b>-</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>=</b><u>c</u><u>a</u><u>c</u><u>e</u><u>r</u><u>t</u><u>.</u><u>p</u><u>e</u><u>m</u>
+                   Specifies a PEM file containing the CA certificate for ver‐
+                   ifying certificates presented to this program by SSL peers.
+                   (This  may  be  the  same certificate that SSL peers use to
+                   verify the certificate specified on <b>-</b><b>c</b> or <b>-</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>i</b><b>f</b><b>i</b><b>c</b><b>a</b><b>t</b><b>e</b>, or
+                   it may be a different one, depending on the PKI  design  in
+                   use.)
+
+              <b>-</b><b>C</b> <b>n</b><b>o</b><b>n</b><b>e</b>
+              <b>-</b><b>-</b><b>c</b><b>a</b><b>-</b><b>c</b><b>e</b><b>r</b><b>t</b><b>=</b><b>n</b><b>o</b><b>n</b><b>e</b>
+                   Disables  verification  of  certificates  presented  by SSL
+                   peers. This introduces a security risk,  because  it  means
+                   that  certificates  cannot be verified to be those of known
+                   trusted hosts.
+
+   <b>O</b><b>t</b><b>h</b><b>e</b><b>r</b> <b>O</b><b>p</b><b>t</b><b>i</b><b>o</b><b>n</b><b>s</b>
+       <b>-</b><b>-</b><b>d</b><b>b</b> <u>d</u><u>a</u><u>t</u><u>a</u><u>b</u><u>a</u><u>s</u><u>e</u>
+              The OVSDB database remote to contact. If the <b>O</b><b>V</b><b>N</b><b>_</b><b>S</b><b>B</b><b>_</b><b>D</b><b>B</b>  environ‐
+              ment  variable  is set, its value is used as the default. Other‐
+              wise, the default is <b>u</b><b>n</b><b>i</b><b>x</b><b>:</b><b>/</b><b>d</b><b>b</b><b>.</b><b>s</b><b>o</b><b>c</b><b>k</b>, but this default is unlikely
+              to be useful outside of single-machine OVN test environments.
+
+              <b>-</b><b>h</b>
+              <b>-</b><b>-</b><b>h</b><b>e</b><b>l</b><b>p</b>
+                   Prints a brief help message to the console.
+
+              <b>-</b><b>V</b>
+              <b>-</b><b>-</b><b>v</b><b>e</b><b>r</b><b>s</b><b>i</b><b>o</b><b>n</b>
+                   Prints version information to the console.
+
+OVN 23.06.3                        ovn-trace                      <u>o</u><u>v</u><u>n</u><u>-</u><u>t</u><u>r</u><u>a</u><u>c</u><u>e</u>(8)
+</pre></body></html>
diff --git a/support/dist-docs-branch-23.06/ovn-trace.8.pdf b/support/dist-docs-branch-23.06/ovn-trace.8.pdf
new file mode 100644
index 0000000000000000000000000000000000000000..f95854ffc2f9d408eb04320b90e0f0babcdb61ff
GIT binary patch
literal 56115
zcma&MLzF1NwrE?nZQHhO+qR8ewr$(Ct9IG8ZQF0(Gv0r{aXPmZD_6#d=tShoIp!i&
z5D}wgq+@|19leSxgd!!Cv~#mJHgvJHx8ovkFm$n?H+LqWRiGuHHBlB66IJ>*3ftTM
zdtqs0X=CZ)DP!tpYQy_)0Rmdb|2t1kUO`Y*S@hpbAwd;k2?APY5m7ZsVNqTO6Ek-w
zOBd6B8D|$0dsi1;{(qsotBZrHi<qU2>Hj?buXciBC14=1H?o4_;h~o?wKI3IAYl8K
zQKJ91ii@ce0lk=wp^K@Asj<C@DIXt{vx}3dp)Hh0_ORAv?B)pSPoKQtk@yrXiJ6(l
z?qAx(5i#ANv<+<FVJ?Ywloli51SrXCuU$e<ls@A=X7<?jL|k%yDC~GzIP;lj?p@9z
zeI7K2xOx0<O}p82cjuQ$%(PvvkD@KFU7cK7%Vkr~m*vZ3Je}IvCFw2ckTkIb_YU62
zuFc2EUnAt|$smTQCJ1Ueb#ry!E}TziyiZZhoL`4`dYhz6TM@LQY{-`QQAGsP26s>Q
zlfK6$_tPEejf65s1hNLL!K1}C`tDQFE_y7l9|ewqdd14!w?`*R!zabS(+h@~2DUL{
zt={MZ5(r{@OtOa%bp1_YPn;poa(1tuAqbo**(*<)aE%Mv4i5?^w5|sswcDUqC-s({
z%|{OS2c2Ty?Kp<e*Fvn@8A23e%QN@yS-r*WB~rZR6Tmp6cmJ1)O>BGq6<OXL>uYnW
z`Elu7kc{N>X+OR0KhG!YS;9$^>K42#{8T=*s`mU6>*wReZW!S6CMVR-a~_PrO&F8W
z=<debEra`?MDRq1C-`u?p-+pO>Oaes7*V>6cD{G5uIqWi+@>YFo!k}Qh$*R>7)OC2
zv4}r)m6`)^E|2_wG*pch?XpEj!m@>>_Q!s&lh}VfzOR;#o6_jb4zyk!j|fQDQ~WwA
zz>x`e6zpGR8P$T?s3-DfP4`GM^ka59FK@4YqkKgjUDe~VI-euaC~@{R(ZrLR!S5;h
z;EW?j`@Pw`NY(V!cYMp$cGf(<d!I*ScdzZ)Mg%QMn4ye(-A{g>7T<}FBQQE57gIP>
zb*SLu+c!}T8}+>7B$ON5r#ch}pq&mo#RrqiX~GZFt<wWSmg!8F(R{XH(eYZTk{>)k
z(@{bi($&bFSf}QnpJlhDq)~}?7`SdbeRVuYP^uSMc1qV2k%SkqCO1&=RDDWv_p^MM
zSEMtnbqHXD5AgswB$NGGIf^@8sk*y%zqdbq%e}JKpHv$<UsqOohtcq8yv~s|nw9n(
zKf!+K+3ijy>w}Dl7&RAb+yTa>ZbxpYQ4hlyG8{}4ZK5^ZHfbpvD?=OW>h?!Ec>~ZU
z8Dt!0$Qg{^9Jnbc;f+`i1kIGAIFE%kZdTn~59Tn=au|K9X}*3`dLQ-~gDnLy71`@A
z*IZ#q2ZWoK8F)a*5kti-?>OI>t{F+~2ox5d7P{;r%@G~2&rk{$6yis^dS5BTDC800
zm~A8%30go;xl88b<g;c%7q=5I9IAx@=M1&iO4{w>K`whYE9<%AFa!GMu1BX`+sY&W
zDfH2Wk9!`&D!FV+cwp1tRD3XN%^{%r)Bl2?5G@rT^>O>T(-E2jwNN%ak{FORB+Mf5
zip0-vmJo?EvA8D{aMGY<)>D}zO0IFiKx}XU(~dt#5)qPKR4coo25S<QWz~LWd<hHG
z3u8$FUtF8ughLP}iLa3Lxk}Aw2y1dI=XTA<K&FWgXgkaU4Q%!g0QD|20?J@o`_Heb
zr>xcl=ng9AD-)Ji#fdZ_P%-{0^ne5)RWQoVD3k6T71W04s^E-A5<P&Uik@VL+lXqq
zdemK$@lU?GLp_Ovf{f=Nn=U`zf_LaIt7u~c#DX%cLItK0dKi)vR;WO|=}w%#nOEBJ
zjFWB(VcJG|=YLY&nJ8|niE<018|g?KDHPCyC{fO<750<}+(uo;W(O<eJ8i9KSCWWw
zdu7R~wyK1X$)D?QoZ6G;nFAg%wED#=gc++pGXND@DrR$8T-+l1DJ_SK3uc~(sTNjK
zX+_zF5hT1o6cG^fO-)5AU>^FaKes*4Jr4pM$3tZS1<R_wdN2oCY9w<_7Ry}vXd@vO
zVvwK!iltzq<_o)1oq#w|LH<G%k47*^n{2n&RhgLrIAWGA0S?7}OkfK))DW!uKk)1+
z8#5(Yg0tbtEBsMzw-q<rgtG|=B1Nn7j{^<?LH)@zg2i9yadM_hBw)k!|Lv_NQSasu
z{X0)9qWR+J+`Q)3q~svT#z8@z0G;_`6d21grfHTU+*}t4l|T@*)>W}lnWky=AfSkz
z5GI%!l7z}!+Ch2@$snyjQ=H*f*0`UXb_f%J`whrm#No6FtU;rRP><@6KRFFXGK@ta
zL4N#$MQ15a0GCphA_Ry%tR%xArBup;Y@wZ`;Jw;MuhT4BG=*kR+M|b9OiZiB<TD>$
zY-t750PFHll25g@A=~TGu`cXXKlf>OTcG1L*t`4uEbv}P>;$+s(w6cN3Bp~Gacn3A
zh11yIAMLlvInrEeWjCAf+t`-OA~%oQh*v0YcIjJo=`S!Q@*ezNY-xiP9;pZX2bQ2G
z6$$lq$ZOzHz9XxN!C-y<=X>$SjTVoRGhU0sVb$H@g-|H>z3sWOF*p08F&U$9zlmV2
zQF+O&KBq8=rrdqZgPSydOPs8{azTzg69`v1iMJGeIR-MyEIGE{5{oYzootg?mfb+4
zN!8CdCTU(pu&BL87dcndPQ(yCq4Gy8>7~?;8b#I%_=F1ax$#KmIj!)#b3?)q1Q>J{
zNx33@PSZ!5xVEb$I`yTrqEs&-B0iItt0GY^UvlWv3*?KpMQ>p83^2;9+RG{*foM1e
z4$1jIP|T)Fb(w|&-He2-kZfe7+a6Vkcl2V=LlVM=rc_s5wv0B10xJdNy?IjCfEJce
ziE37Eio9ZG{z3%=fTVPK3&H^>uOM&}tmMqJ2=dL{3j8G=d|LwDd$5-3QoqGrt5SC1
z18jAQG2qozvLvXoLZ_7KM)(E45#?X?nVS%XOhXjzk!32Q6RUh|VbM=Tm%KIiHW%PB
zgE8QWVi*7DB7p{Bj$eCjvbE?m1YERv#NriQo^2IeH%;9wSWI+^jZ};;-u3&v(l)K@
zrRwr6(L$yA`{uOeawa_@gwCXZ%SbtGB#KrskbrXf<o0B8;bGPZ0k)DQ<5=1Ke8}!9
zy}e$*g$Z9s(sB(Gh3f;vqL2ok9YHf@tILJw*ndOQ27~}QKM<v&ueB$UXvw092C_AJ
z4qn+IjQ3*@RHKv?D%iK9KnV;n@Mk4GOf#en;9cx1wQ{=}QpN(OI5(@1BWrjb?)}t&
zj~UwzdWa5-h!+RVQi8dw;<Muqft?sH=WldV>G9~jKP68)lfQu(Jrp9$msBV0TThZ8
zEx4Ntl6*fv4BMKtXfob@MWLteI#Rt>x|mD5{pdkY^t0ORSyM7bBhu3~w6xK|5TT!9
zu_^0aF%{t9U%x)!AWQ^L=sFBIaEUSwp`oC3as0Rz`DhR#=JRCc0MK)7$sOV85~OkJ
zF0>jY#kL}&i+W3be=wqqDqjFaeOLoDgQ&hM!C?i8-%64b%53(Q$j)80X}q|yTDzJL
zTUVPQa%lk36_z>duJ`EJQ3wX<<qKUD7?u)Y*_aOfN;Rf*eFlX?tIlm<y*#s-?5$=Z
z+b}jYSR-m_(B0e2&guwM;rj+Jf;3R<F&7IDIbv&V%Q!<XHdMa5D+3YdGhW}ThS&HT
zhq@<!JWz0UDrpML;2V&G3cEz%gtPf@=G0qncANe$8$DAYc$X+Z2MN<hZo_kUk})Ma
zOqZG`$YTIu-FKYZ0tGJ3iNEJCDGqo1go3Zy?)9?CW88$(eA$AoC?bYd(JkjMu*Z_?
zSAv#+4zMD4<}cF`%x3t*l0=rR2q^GWsIcfZ&k1;170T7^;0>u9AKXbyB~2f_>+p}v
zMB<^;o)DmHT(dkVT>mclz`X8yfOyYKw9+0$y$;Tdl70Dvk32hO_>EMji)lM~oTZ%c
z9t3XW#7q=8;7oSEl3Fpwcj3C@Psr<WS}xjp#?XC4O3}Gb^iQJQzR@pZQWo>FK<D@X
z9Y&wQL0||vO(y`?rH`RKmrYME$CvkknB({%Lg-`aU1%1hg=XUwat4C<x(e!Fnk;i6
z4%0xF3|b2&R3V?;rgT<ymhB1Jxv$ubFp4&IK&q)Ivoo3M*>zGQ>&|svs7UYz<jju#
zdjt64WV$tL)~N?j?x889V|Q@^S|Vn-2NJbhmiMLy5;45XDb0s<K4JDavd_c{a32SV
zd}pkN)h+`ZZ1Q+`t8(WkBp%n-yoUCw-4xZc>p&8I4D4B_OBJVxI}xXvoTJFCd-BA|
zpJQ}{eTI(oN1XBDj!yp~>CAC957Dqy5-Asz#38>a`4Ue!uXqGpm|_I3F$suTd`JZ4
z=kPy*@`;+Nx(o4%SZkEyzY!nbV~Ejgj&|mu2Rd_4Jn-Kym%#Hz!dCiyPE`r>^hJEb
zt$$Orqf0mOFZVS~9L2s@C4VFDpuGlvLFPCa@5Vv}fXdPRs6djVoY98d)_g<@{q3Aj
zZUgPea}F}<RA_Dk4V5Jr<3f`4B$(l7woq%e_Z?7C()>6%%$GiKm9ed-p0UyJZot8#
zfD^lmnM{EXm^<rHY}+~j#2r~z&scD7tA5pv&s2TlUfMU|?ZWe!XKeXOiTIF67^gvC
zO*BHeX_l6uDj{h_p$BYy=iWauKYOj!OOFWv`y-Bz-SCPWDb8BEL8Wn30SOIJ=7EbO
zVRmWA70)_{b~J*9=xpo$wsYe}q5gKAdv!iM<gO5WLND@$N}zj62@w-*`tNX`LX<Il
zT%^GczjXGl4|)x8OBm++nmn62R@(zVAMr!Bf5Rr(p`R>bJxzO>Bx6qIfRQ4}oBB!g
z;JZH%M<-m+JmQ<n`4%h3@f>boUYqz?0-cz+`U^Rs2z<Z0%#v*aZ9<c8+5RMZ&FXE7
zu`mvp3-#c+^2=M)?-cTruHf@f6qjFFGCkW&FapR-L`zy?@JKzeMi0(R_Bmdn7!ec<
zP?4SRN=b1$h^rf6<EyW^g?ULO69bwFPh4h_HC(<QiNENsFl)h%yL$e_<1@S?qjz-{
z(YaJl@_zs9rP|p=naLY|lm?1ah2Yw5N=3xPiBiHpRFG6q41>*CsHPdO?sAh7$d+O?
zl;bEwl;$nH4@?8Uu2Y*IGTo)EBTyyrPiC>YROUfbN-FFTg_zOrc0TjFl=u;D6((yr
z2W$;qQoa542eZo!rp;ZP(P9&HmWTCdJ27`-a>&)m{l@nD0q46*<T14~`M;R^FZv%e
z{vROzpOKk^ffefi<{1B*n;HLC;9R1$>9jS1=yR$r^DeqZ<rIy%b^H*8TSis8CS#*T
zZzP3v6DTdBVE}6&IbZQ5_(l0Mnw^UcmQS(~K|eeR#LT;0CZBh+KTC5GIQ&%i-N~Ch
zY~%Oxm@(I9`ZD>_-`mO6m0wodYM%G2FbA&QW`06C05u-TVyYh2RNl9%^Nk#}*AYoB
zsaooBVCDY8bwO8ZNZcr4dpXTt+dIsZqAQl#jnu#bA4zj;nbA-c)^x^2RmXmnsD>gs
zlElM2JM^)rzT0%G;;uyN^RvW(X<YEP_x^X&G`c{P?^h6lXP_z?uT!Eao1C&s!s&bM
zSYF-l^W4fZ(Ki=wgc)6kkF~tf+oewyc)h^g(ToIhwrPqF$vNZ1<!g1`gA4D|5Nq8<
z{qVP-cD=S^dn{R9m8@{ntGp{>`(@D3<eT<Ve(|0qr%B89cC8k#P1sraR%4NIc;urT
zjCJ|VjGNVG)b65nb*G<j&lMx1IPtWwS@0mEfyis`3fx`eJDY;?&&me$cnPFwkNE_?
z1_=+nu^~L~72Ok5MRW^sOpuY@QHXC#jkpg0*NH}3J%U-*;@M)w`4{mGT0JM-aTvj!
zW!$L_N{Is={lkLSAElXHx8E?c&Y<6o(jtWNh#2>tSOHA)`5@1yIh(K_^~0H9X)POX
zvXDI@$5P&{sowFuzP}mj?AtpW;>Fz*J<iR>&Bt7UX``K=%tWE&q^pJ$Aazc0+hLCT
zpO{N=+r>MN0LxelL^Gah22I&%9}WD=Nmg1{t`%`TPpK%*QwLMQpHQbe9cdI2%s`sV
zOv|x7FVnTX%j-F5TjcC$lFvjJOPLVPZmwZ%Ph6h`{J7$MYV6N&&BR?*%W$7Lu~#Pv
zsjIn7*51ffOpNov*5I%;0n6Ben#!pO@5>FGD_o`QC;(vMT_*Je^2mBavD!D602+-j
z?WP!)xaPYGBk!b}W+0(1XmS^&E$yCbDj=E7;Y(vTSq+5o`r;ho?p#|-z{=Y*YXnS^
zkbL+QZG5*&1-(1jpF#Z7VJxQ&<(2ZM!r*cpo3z5whpC<y$V6>`Sf7jaHS2y35b5TP
z{h8K}uA8@4fXlH$!hN4DZ6}yU36LIKa<~mDZr9*ABr=g4a+S|N$vRen#LofB2i|Ed
z^Pj|`NcD4Bq^Jh^G>c&}d~mY-EQ>`=ZP%~UYAq{bS<->6uN5d7qIsJVSr~;>LqyY*
zp&RvH?zOza($vsO$ae9}RqFXvPzo{3zr^X0t>gqjS;BzLhM7i$`%QIv^^M6q)47@-
ztTnPn@cKG-OgN-;NR^E<ls6zbnQ}o^o8sC!DBfL^Nd4@xMQxkCS)skAdlT1P=pVr<
z9L<On*9$p^!&jq;=mI6q3?1MFRq$i5m$Vqg2$jD4<-kgMc`|AQBKopzY%|V*PJ1PP
z$OP|QY@Ea7LWwtI;gX+gE?&r6!VnK3F@$CM$ZFrz)^m#2EB?AilmVGKB#maQ%Yqaf
z>QB!hcHeCj?^G^obalf%qL!s!nyB~bGt;lpjAtLpctnpP)Vi@;m3QJ%!=nsCUv@wp
za}yvK9<Knsds_M{-?{7<LHhC>ypj<CW0j-5d~-7}H1Hg>^THZ8!N96Aodd<EiivLp
zQJ=Ip=SFUgmNy52uVsZUqG6plB_ZifMDD$-1<`<umMpA4u7ElH*_TUN{7VT54<5BT
zA7vKgG}R;}vaMK$l(hlVv?T@Hfl9)@oIKh?Db&@;#}ws~6v?Qd5bVnEnrQer)BlF^
zV8hdTF~4L}Lu4o6xx@Z#$%2|6X^K=K?uG>!us1aV)O7Bq;4CGc{#AV`-enXIVwqd^
zfVm`o&H4GhWV74SEH8VUXwz{C?$tZt$!H#{Y(`NKzW%4Xm?iujl+WMw5K$_4fTcgy
zl2*BthtelGqU+pK#b)E8AmArEn_Dc|eX{jwEmel1XD{YMSOW}6vEz@zZK{1pBVVPv
zVXdm@Icf?jshR+e7s5Tjwg3d*sux@yz>t{p&1Egv^7;@WC_Oa&egQ%0sH~h3J?eZ1
z{4g>i6lp4npH8q4#L2>HH%C)r$-hJT1_B=%K#lQ`3U|g-ciXKiY88$+gIc>9c>7d2
zABAq%g1Xl#Qth@fv=x0fue)6n4mDgDUL}98qB-HDr-1c@;j=|$Fp!vbBbF+<1`P_R
zt4pRwLE?rA5n{%c(;O`AKOTsFhQ17=hp8=p<K@7;HqW&PrM7GBB8HkOirJG_t=4o@
zswhk{$F~8cK3A9@%km<`c92G>UCMM%tCPLqLI4q~98@hxMpq<dXBLw>sjGVnlTVL;
z5!=|Uz*I*p)ZeNq3?Xp?l&2{rI`M=0eO@&k#r&XT*%e?l^K!cz8k=0ZsohZF=Q&Vn
zC>RDaaiZ1`32jVjxMk@#S?bz$Ex%nni3|b%1-G+^2qBRFSwU0cEA^@^_jn#kh1OlI
zvqCSTuOWe$U+geMn0f{x<Www&=$6}&!_TwDs@+8>qi;pktihCafZ00SfRA~0zdfQt
z0|?f+<Dn|Sv&-dZaSG4uN}|;E>8$4?n5BT6ft{M+&5%2Ljn@a|jG27gg6e{*+<#MH
zJ$7kesB3O81;}4OV6(X>vJU{MwE%2LBB))9TLcbSBt6S|NVqTZqmy-yIFhBUJm`Ek
z4@i-LWxLG;P|kSX9S7;3ay1#ax*a-4lk~3?;GeK9tAG&Kh$<3J3t8$WR|qmjTyFM?
zw$aX`g$s$m9|^~YeBXb!;>B9%3=Z>a;q+(!MwL0yQOT2sTw2)5E;2(fl`b$t9G7v4
z<y$gDVsLy37-tE>MVvCk^s2QD-v!$i#y|i)Cz~=1AXX$m_P)YCc$Ja4sw{3(DTfe@
zal<qpQmG3{N0gDug4IU3UoJ@4^q9#&4b^#~2x+LMr&h5@HHW_$V2xK(_+Vj@E71YT
zchuPsv2uaex@I@fnKxI>Q~Ot{bJjUxSSTXoP|QVxXeFQZQV3<>W;LRr^VEHvf$Eg(
zR4flz=Bs&aSdX&HzJ`81g86$aN)3`)aHq-n$5WVV_3iKkHx&t?^+MB6{fRBy`#hsr
zv1yc25gbg}U0jd7L<Zru0_u((dOnFFUyoON=fS0@ei8HGq!IwumwiSnW{H|mK`!}}
z7ED_FY3?&#L!Po&5Hzz$7~-iG)m$h{J(Zl}nb;Ef>@7IKC?lIFyvhD9apqRL5)MFQ
z=$J|pHPCu54QbWDqoppNZboPr#7*lzn>FnW&dgyd+&E4#<StYx6UPgbFw&)8TLJ7=
zB%UX%fX`YpNGiSqRhnB0fct@EP1Tj1h=7Wir?t>>5$c38H=uVyNR-#9B0l(wVd=*U
zhHP|3%AdlZ3@&ZA1IQIES!yW*kIb*aYn-QlZJ?u;f(Wt4&RW1IY+GU5I88^->=eVi
zOjak`;Q)rMNY*i5(dQx&lxf&Fc(>@<%<cP*`F6!Twj8TBEI%ZYmmv+Rg?w?<cKQ?G
z5oI)!d-NdPMfLe0ZHCSVA0%}P`W}=ga-7;Q<~@FK9(ya+BZkxW^t-*&i*hh-g#zD0
z_=0VgmMG5u`Ipxr^K8?hRVE0$ImxW{>+sw`VNN^`j~W{5CnMR7{_URrX`&Vny@^}h
z_Js3d`cUUZ0j-2&j^j^lnf7IF=a@trudtp;;rx>qpLyb_+&P4T^JDZ;#B}n_<&Oi%
z;T6rFRiPss+zv4@F?LYCu(YYjP85k!?^nZ*A%St^u4{u&(qerYn_9{JaRV%&8j=(E
z3*o-4&b@mrpLf=@DZZP(Lv*^}^d4q~SWmj4DbFmN7644lY9-JqWs#sFU)_2Q6!n7!
zOhghU+LNLYPqC-HZ78kjL38Ab`IO#=AURuc@#9=BRglL<9_4Wd*s{eEJ{(qmACyI$
zJ5ujy++A;a;bZs1%hyA;3qsTqgq*5JHj3p(O*5DH^R{4S;AoA{(R<Yg?DpFmOLEtY
zl(%Vu@{S!;k6q;t%sd41(d9M7>BQ*Uf;Nz~^9Ox83Kbp7HFgBP;jm193srw0=tZ-g
zKOS!76PMg&S8)J_P9>z!{`Rl;)RR^83PU%wgK<1{ov>NJpZ|nSP&PBV1Yyd~O$L`s
zFW&yG_K+j6)V}=pgFT>UG|aTYPVB|u)8y*EXvvwxa${RJhwSZcLcT?v5eSqC5|iy%
zjo4t?dLdAunsb|4%T86Cp!0#&yjjx{uOsuxw|4{rqH)YekIbwcgO)o4Pwqq70Q^dy
zua%PDYvhT#cdb7k%r&EyHh{2(D1wAAWL?FxRQN2gCPOYEbl4NMtte0PWc&RbI*X+|
z#zf&%@dUYre+f8Mz<FO3P8bE%&U=5@&Efj*qa#xD!{Z`W!)Ytqv%Wy1>$>PMW7Vs#
z4=}iS7R2+2qg(`)P6wM``3KK?>C>ZR<XM$<odtf2Y7q=C^Lu;9&T2dVf&wKawE{CZ
zGwW3x9?)rS&)cMWAY<{4@}&)=k;&*!tD67G`2)IuMurCI(<`(d7F*jsu8pFKi=TM4
z`|WSKP)nKDh{on3Z&Oc-ug!(q>G8P~uf$VWRX{iYvy~X4&O9_%=A(miy|4#?Qg8(|
z>?NLdrLg<N76r!%yJ;kFEPsp$=t(B-wMgz%H7)GkQh_BlYx+LcHzi=#FXHayz$&q9
z;-}B*mk_#&O9gXd!vM5L@A;aC4FO~TMV8aY9D1OgcEc>Fp(y^rgDOL|CM>Qg#_eC{
zZ~@<;hyrq!0Ra+buX3a_s~Wt-PG~mx?M3~EIo@EsyR53FzQf&LAk>I;um8f%|M290
zxRZ^M@&DsaCdU8rwM<O^8)5rD+_@=+<g=<il{G-?7??4@>g$A5Hc=6i64S8`KAz$a
zKw$(61OpJc!atN(=(ly#VF-}em_w_+o(eGYbo_MA%=?w}mW+u1d*=7Jog#lz_tS0k
z&?fSmbUWr=RYls{GEvw2&N>2KHJ$Q-K+H()h!DSgGhvO7R`vUr=uS^6L?Q`bM*~&8
zO|J>36BN3Kh93P^oqvF-LNAn@#gtE-zL6nc5Gir_exmC!u?w_g096x52{GgXSD)|u
zn)aR38cs82RzBvCj|SyZ{_EF`()dUX@U;SBOiAQnpq^GT0d}1ayOm@ztkTv?N&Q;^
zjRYHlPp@ro?na_(VAk)E+L+9ru`C-?dSe=oMzY(@q7SoE+52xWSP}2F;Tk?zrR~Ar
zGDLD|w0V)x@R4Zabh{o@jQXlftF&bipKzNEJMdE1<1!|EFH0jx#(ciRtxt|*-K6Db
z;`7Ny!b_(tNnsBJg;X&v(E475OMVqw@Y-?Ji<jOB!@N?QSm=|%K*6Jy?XcXdjoM)K
z#!wYt%8kY}Yr5$|>1MRFXVn{fQ;n+aUOIPEW)lomDYZ=~wFy2NrOZ+uscxj0uwB{j
zzi~Gkz69R|SdFf_2f$8eh67;Psoc<T*w`L>tpOm*KI$*LSE8Yf_#f7He6vU3;7ZR-
z3nxJ%My9s9X7&2IJ_>qa73x9&VW~%Z4?dEy+7KlXGi7R^$)VxmXiQWtN^wCUl!K!e
zZD&IAOb`a@X1Za}Xh#~b+78%>&6Al06VGx>0T{BvL(_>Rl=**+2EE%7a~Uqcy~_IG
zm3!8!mMwrhuu2LBPA~C)zvUmS06{a!B+q>Myqq6jwqc4WVLcEU81o9Cu4-Ouw^I}*
z34_56LYJ-o8d`xJMtg1uv!)c|-`NYmh~=_e3!uOhEObO;qeI3B>yGXSpP+C^+XNJW
zM#@%d2>}xLznu}fZMu3}KxuYgR;w3aN0?ME_$%UNn<61MpGcxsNB2YwD+z3UljI13
zE~qRawUct#WY2mjCHw5CT8~|KR&RpB_Z+ryb+4cya(YgM?Pfh3GHk1I3=bV@bpC7;
z)6k8FjV1$LVi@3F>?bZV#_TWZUp7HlCJ&`9fC11TOp!l{HB2gYeuO<y9|#QlTIu}&
zuPTEcjsB&MLhqEBLs-LFIU$3lA8{G{G(^y>g3`dj277_NJi}L*j{mOQO%0KBrWwF5
zW{Fn%wgmH!G#S$CCb-?=+AE+$h_3W1qajUH*?378o4%6{=a&6rhZLa0X8r>Jv1D_}
z%X{2J<0M9GoeCyb^&&twIX3TPK;~J>Iy_+FND>HzTotx3jwheJv+Am<NClR{GHWnR
z0z*<##TABsh7$xJAW@nQ)L_xbiJ*&aU*Lx|5{MUXSTx8&zVi(TiMO#f<Xhf8^ooo<
zfUnKIYm6QI>%1LSKWV`CvfNu;Ra$%mOH!P0^t+#FG8_a_Fbhm??L^bB*1IckxmfEP
zyhA7nM4)AR;tSj`FQAbxc-)gsN(<1qKW>q6K{?tu_)~c)<ESoDL@;N1;L{yXK+o?V
z-rrirN1IO}YI3=`Y1~1u5&(gmhY3S`Eb&L{M5U&novenaulg3AJA_QKURHYNBDJ3c
zu^we8sR2I!s0vlTMuPu@umq7M&~a6S-R{U1bQU2TPl%J)E?=4PB};m!=3UDS(bjIi
zPEHlwpW9$QSdBNug#DMqzJQ($e5_e8*KTATj0BF8R%&KVgEeooxvV{FMh)<j<N46i
z^QlZ4@*+%M6$j_D!!0v_#dN{3A|jcz7+_hG^%eYxljeLs9O_2zo-ll6YzR&1=z;I;
znqsnO3If1CBh1hQpU<sUC?ZI)2S|;(9t4{z9WX{_LGr>GUQveY8Hlv5pTH#yl#m0(
zw?p&?(^^G0SYtKzEZhaOoVNig@}UmwnFGVZH4OE-5e$J=GbE=yV=xdJD-+k+5xx|!
zY1ERfgdPn2vlUzK!WG0w%Z<KYEjcsM&*e>~*9ebbA||Bs447bZO;LqUImGN*96%;8
z7r-SupL&2=m}C)5;K3F?pB;K%cv7~9OgSP!4Uh*D`Czh%xz-Pn-e%z@#WLVlHxGd}
z93nrq0inUmOouwZ9clOFXzo<%2(YH;grUQ3!?dgH2&_`dQGCo2sWF2jYY6V6pT|wB
zLOkMdy~bUa*25nGeJB4Hy0IO9gg|PZ*;fFY?AW|jIFUsQ+{<HSb}-(ETQZ3fe|iu>
zNn5B)1f^6!z0BuhM%jME9IfJ|N!93zwzuIgP5@}>Lg@U_nTcV5q>+A0vt>eTEEtE#
zkHp(-IAE>e9VYEunlL}Q2@t1<hBC0$lk*7Jmrzvwqkk(msw)u|U~JS=<m7(z>9N@K
zhs_0km@}`uF?Q%ZO!{2#dj;XO8`c(vy3svNyO|<PbPYTL&+zzJ028&qLqP7is{_rK
zle;7A;?d0KnG3f=!f3n&|BDt|>ZDSC0-Xddk-TO#70PC$qJu{?N7bIk2PWufz8Gd)
zuA)QzpKJ!;vSd<pRGcCCp^^7lN)GkGc;$-1a!4gKNWK(S{Tf4!y|}Vs`Z<Qv#|beY
z_o1j#L32t!lGv`{BZ-mg^Wm=i#6pF0%&_c>mML(sy}S=}0ZRI<3O#=$o(_Ny%7U$#
z*5qu{JYVjj%5mYVy(X{7Y~YO7+=UL|J!c}C)oofmJtJm_ObMKu?kO`$bHB7{08k37
zTw`X0iUH?k*b)XLiI%u2Bp}QE;!a|4CFsvws&Iw32+B@3qCY^Nluv40(01#FMrt&x
znlUYK;yXqa6Cl<c7?eaS$@+UowJJa=_>%=rM|<%GTnRLlfMxJLS?Z05hjn!UWX&o;
zCZb-ACS^D{@X=1+qt*uiI0orXSro>=Ha=vSbL>F+#d-T$60M$~G^WX4;$Vnqr+*K8
z)~IA57$Jc8@W4c>%WT3UTa_2pc*KVY<fj-5`^a9GuhL<|ky8<t^8vhCv0`L0s(0ms
z{Y)AbQ?T>J#}Wz-tK&NezI&&t`UqyObrhKqt}JcTe7!1H<<WE`Y0OBH6mF&v1zaOY
zz!rt<lVp4L5vp03+*sq_$jL)X^)8Tss~MDNSwMM3>PH!HyBM&7+|QPmX1Kx?lIEOv
zbF4Mz1QfHg9a9#=!Dl<Ac4<6<2iMoEaa17#i6D)+%?!Mz95(b-dWw6qtz<VQcKL~$
zFt}`aUP8TiFZ1_qJXqRYgwQB#%eL~`x^zi_n?6Qs+W2AmjNzUbeCT`9`anq^jks=9
zv};NaRl034;DH`6=Ca1~B!Zc*o0Xk*Th7ANiMNCe8i!C$FZ1ko67%eRJ$N6nwG5}k
z)cl${7&JmE52m7Jd+i#rhNc=z@YjLmP1mFsXxXUD=u*1FR#<`S0GDq0lRFE<zmDXl
zsAK8ohavILPq&spE=-Es%E}6H8vk%}<2g^z>Sqd`<gBJW4hKTKFuQ%lr*M1RiuLZu
z!?=0ziHll%_2_j?qXe4Z?TO%)fEJyvjl{V}S$A)o!^zsyfvsr%?Dq~v0s4H!`s?CU
zLI9(Bcy`kyhbZNocy@&S1agGtc{iSKY!B~qxrZ{EGtTjwe){k&F(U{RW@AfcgRobg
z`FXiNy1if0?<RHE9*seK4HSs8CO;SP<$)u;z$Cv?6qGw}59a?uQu_`HVCap*E8*sI
zwbFZ3;)1Vz9#VD*uw&eP+|`S_1w%D64m4)#I=9E9ks`8A;#aWRFnPl<W*g_^R-km}
zGrRbGW=~j?_h(9Coz<Hqytc(sHq;oC!IyNJJkgvyx$se)zbb1BEk%u_YTK(HZxcZ{
zl*5-5%3sevu`!~@GY%Hz;DUNp%?!ldHrs^D@NXwgb|Jld<t8=CB5|)^wJM;!Zfc4+
zD%g16gfIvUHu_+iHg?7jR-RAr?y0)sYx>S<z_TVNtoSqaBzG?io34|$dO#4wCM*Zp
z$&r)4x;$(LAO<O%dR5!l1>-b}CPbH=GvrLt5;>jpmq;tk#PGU<J?>C$6+vR=fb*n{
zGJ@Y9k6t`Y$kX2Q?x?<^ONh(BQRuIFjKsoW-Qw-8<J@5b<s-ULG|uXClLshWj67uN
zFQwdvSTr@o`?4)Pj9q1ysJvEOC?&Fgt>OE7c8bTt+y(uh4e9VlFX2J+Dv47TB#@9Q
zt*#)&zJUUdzdXBO^$P(?G6^tpZKx}`xt)U%An-x04Q-;#R3m7aU_egxO3iyO<TMQD
zk)#NQ|E8v6SPJ<i1$VD=>@HYbb5^f%F&V`(y=GxiX^_b*Q@rgLtE`p=em2rM+W=v3
zF9R-xu9hCQ>IN{|f5&9Faz|AAD;I)Z2Px8)IX>5JBgz1TW3ry5+DumWhd!2%_5&TD
zbuqh^*1D`}E=p)05qbl6&O-t_>VyO>k^Cycc*{NB=54I$<iWuTZ3>s}xoU6(l;Ud}
zq$g-BUpn8I5t7dmCBMEWcT-QkQ<98`nM`#h?5`r2-d{lks{6NY)oxFAutZ<`yQGqy
z`kM~aspXPd9?q~48liRO%tY5=-7`VlS1IOqIgpf3{Y+af`A52-FxtP1)N6h2p8+ta
zZiCT8mJ>*UmO7ZQp*d6hYc7HAee&N06OKiE+qhg_?%SLF1xS^C3-~V}{152;2MAdi
zIQ}0H{<nx^`d^92mVZEa_)kRs2MDPUM__KWkHJS#)j1p7akbZZ9CX=4VnsXz{Q(8$
zy=JOjm7n4`dD(SDE*dMA_{!BVrk-5#_<TAG{F?etY4ZI}PQBa_>o=qP^c|kH&3vof
zujtj$rL|mJdfy(({<ZLK>zt)=NP|ijh3j6^b)VQdK6A4TbZ)^9@<i1iSUER5T$t|C
zd0e4dcf1{6*sqbXZ-!6JdJ;Sd;febu4_{q)?EBm`!b88rx*b_wg-KSgf?S+`wq1o4
z@}Z#e`q^Yd)GJ!;yzO2ujFcDsrFj?(ryUgGT^qC8PW|k)v0B+;(5!B|GS;*|<DV|r
z#rMk7`+OjunI3sMNhJ3z-SP9FsFbR!CqL}qdotG?cim;IHu!E$N!(_+uJztup}yLt
z@z~pTeXJVhn|+wdZp^er`YSAGkmqaqg<Yx)KI&_w*1W*U{`^R?xALXCIC(zpaU)*9
z{f6Gc8ZGIOJ7`x>^HcEFKK9LnE_otp`+=ZuUNYvB&~+yRl%1u&0`DX3n8SrW%83l5
z9}Fccx;weuYwk0cdD%;0tws=>)wroX%=?Fay{o6XuLf&F=FL)q{2pYrA&u9UDHf^0
z3+?mXKlg;gGj33}qowguycAo<YqQY&veeeJ&E5cFN~wQg9DxAq<@(hgmZAfnd?n0<
zHb+?1S-UnW(#I;=HKLL3ZzKtmTz{6?^SrtGih@tn(&<*Mw&%1N;Q|6AmS+rHG?O*~
zVd8#m+G4Z|;^9Q~Y?KDdvG7oH!)0l$s@u~vX1Ew88h3LKP^r)xkL-|xkrBlCN3QKr
zjFX}mU!xm(SY=;!NrFP@25MO6*Wq;9>b0=u>(7nbsy09QhMBiZ=I6S93_P?qd+i~j
ze^T|fyHg|h1EKTKNz3h)t!Fs-3_`z01z}R6H;oBT(DmGG0PVLLgTqh*Mk{dR<CGzJ
z;jsgp!p1}|?eWka!^0xYDRR^{qH>hDr@u9spq*ma5%3>CCIz7jT<$y{cVo?cL~2KV
zXyqSFLh#E0rN{0ojkdJQ2l<W;6Vq9@uv+s~q~iWaSA98SA|wvN#vh46nfF7vMnaH&
zA(O>1?C@Zogo;y2Cx&`6{8eW2&16M?@q+pLDCFX9==|D9?sa=?gfuFtRj0v;4;ePI
zf;^s-$n6uak?jWj=u5*7!~LwDW!zMrv3^hCZ$tu%=~{KzP1xQ&h^~5fpjB$|JDxu(
zIlP<!B10j>0VHutGyNkiA~tY2#g!5wHPl5=*nc%{USv1XTMA!<dlGC{ky{og)YL#b
znl@9tZ5HuMsxu5_T${o_1u;hH#95;LCeLvKrNzN|x>cHWV~3^bh2BeYxovkVk?`Tq
zA2_x@G|Rl117&<F=)WsBL!~?_2ppUEA{1w|?WFQLxXktKGrpcIkPF_NdNRR1m$>aj
z9~L^O$n?}L8>i!%qD>y*p;jzA&`iw7ZH5FY<9Wa4P$}%Du_yXC_tmQ4L`g2|LuC_Z
z3*GtBjPPOcL^1Ov?f}}Hx$ciD+ljJDgN5nYiS1!gPNtYAf~S~5gTyEvH1*MoTuF9_
z8#U-!`nxQuEQc3Ne577uBlx_E?GjIY1?w=C_x@%>n!TCG<<iCV!@GNt!7?4*051t|
ztG`xnVr?Rv7ojEv<r6~h?+`3j%OmaMC>it5F8m2x+Mj0BQXe`Y)PPTxf(EYuz{Q72
zVTE<MUrR+`2hFNP-OyT&AbDiYjYPh}P;6*!K0i`&=VbK8EKJ>(0nRH?7>ZFo#$_gD
zVMDbCs8yG57l#R7x!Gn5+pMVow-8$EtzR>i?V`Laq}~6}ov&*HP*OhRm$l`rOzH&_
zi#{SfW&sWr1$>RbSn}j&=jMEwRe)Q^QoD-eMa+(&?)rS!IIwuhngQXE(unrx6Xg8%
zEkAXI$z*6ACEIgU9ugaZy(eschTpz|#x12$V+d_WZ{7b8idANjy0&&9?s>-VsphuI
z<nzc$HeWD=tbf}&-(XI;*q7I|?bK8gfN+2oSHYPU%A8baUt?$EoymrQf)O3zC&x}A
zX}l$5ab1-EfQY$<386zWVwhb<7_#NIA46J2Z=bV7WXO){<#dtSre2Day98+mYG$8@
zq^>K21O5jx5rqg|?8P)VmsSD<^k7bXNyO;UuGsNC_F2=0wCBFei;#Q5$HbR@wCv1r
zqT%(%rYVe_OO8)0=fn%m9e~uTRy-3h)sp#{Ms3ljD{b6E{s)e-Eq?H=06@uNUR(R5
zJZ-dkR6^3c#BvJKI!rq1RFeaSZHv{Bl0~J+_?^>bzSV7q)5fFL)VIF$n_Z388=y`s
z5D!ybEUu#Q=#3R1H1;+)Fm;BCOm`dKUfCHP&<vej!YvIq0l6D<J}5G+QDe=AL8J`>
zF@#JC&6WqVAk@>L2C^iH3d_U+3La8~pySnPt@JY@3nP4oBXPtQ=gF8_g#`G~hg{T|
zo~yjZI^mdmXNj)hmFnBwp_$6g{qz!fos&gaRy#cW7y|bvZqh>{=5EP}`ehNaDg9RK
z-)@3b)Kb|~L?KqUB7ZTamr$3BG$lDx5g=Q#9|8bA4jjOa-$X9gW3J=^ps+h^nLS74
zPStkq0q}sDJKE?C!C?KmJI}z^0jQ8-r+JNZcRdZZoT>r1O+;}#em5pQw$327@H(=6
zQCq|v&!99B&QD6$Q+&W(VS2~|vU8VqlVjTvg!!fEp`<0)ZJV&!X|ljrgeWywr^VgY
zHf8i4c<u*ja?L&fRJojm^f!hR@JY>+sPG~(Pd8#6CB@3vN{++ATz^yaj!Wz2Eg~Bp
z_)tk=>`sj(vWJ98qe5O_;#@GhiMF@TGOWlghaSu8O&Ha>m^ObSYwdOxl)D4hI&dxX
z*?v{F+%i`qJ=uYA$k*%5X@Ae~mn&JMt{T`TIyWwg1$70rDylO(gNsJto6LED@<j%x
z#$<72`tYlim}FmFn>JCUE#y`N11C($Uq!VQRI8-AZM}>Z^D$=BU?(<YkueOviN9lY
zinP&iw{9aw`Z(6}p0352eUO?U(bOM}FN@fBISmAd5A71NDj{*>ymWEd635W4QNGqE
zlUi*B+j?@*?r4O3<U?bkv%&XOMPTETp#)dGKmb4*4(8b7(NO5f-(}nh2pE;`Ctd((
zTTH1e%Dk5L04xR_1dv7QjP^qrivUUYP~fz4rIVsJD59i`VkB637sSedR3{J5kdn+i
zL@JUPNdKfK=Y-1%rWmdvDY4;B*XqqM?K^aLsAO6;{9cuqtmgHiNa~Jy)OD&%*HgOa
ztlJ`1taoP@0d$PKo^{y@hH_rKSB&s+udc_1CT4twD&=&;!A*zKGuA~VU}<N!LoOL)
zXLm|w&LyfxQ*3-kOuYZLkKxgdd|{1^B;89S_{Eu=L0+okB_<rP#5v#IOm#~{KiyN;
z;3;BcM!)1{MhEJmW0z8;fc?q-xF=4_b9yeNn*rbpBl8^TU$%sv9ui6eQ8;qk6acqN
z4paoDf7y<!Ub7)!<Qnc>C81p1EbL9erv4<ZnbLO%xw%4>7|N|h&-0F`<!rVP*Ei_9
z8~kJRyG&dnD7;`e=AwlbTx1r{kaBro6AWk-e^EB}wB4J?EqQ2h!GYdjdA8G6LMXVK
zx(Xev@{9>SvBR&;sn|d?7GO_)P8KxBff>3GfQhY|GTXb{v_f&8kK|ROKtEoXB`ivc
zudz-0Oi2_15b>sBriabr;?NyAfX($xY3g7ZDR(wnkuHW^3x#9Qhldf&*C8r5r>Igf
z7e;I$z)_~fK|Dj1b(PK_*MVsu8WA+vpc6b+2apqtlX5x~$INI`ZmvigI8OvngNnPU
z7WbO`E6y?&khCO~-gNW26r6%}Dpd9Ey-xj9Q3H}_R(qHnP3;}|27WsP5>A#M1Ofo|
z{6PstY^9(}v|h)ILqsaApICs>?i_-8z={Qv4nkLtSC-##`@$s>7kLqGUXb{;<vQMW
zSYXFR5fs{t&sF@$81S=K#;-DCWTZ9XUy4UxiEtFZ(lFV}rAsOjYWM3}EBJJ#b&O+q
zD04al`~@m8NY^P6sF$nASpL0Uv4LNxD)jlIl$SmsDaWbId4Bm;{_Fk7`us|gF%3(c
z^dRg;kBCa!b;-@vY0I(D8?fK(#C*p$p9z+gZQ5X8$|RVZIh&;Oy&c<iM4?15=J58{
zA<`#5(*pn5v)sJv!EJLeyw(|!gfH)vmg*!xz!c~nPdb@oO)?Kq;K}>-g!_7s=Y<##
zw#@WoHhX6;rp0#Oq8$^UuU4EVGw%H?tjK}@ReudiKp?3T2x5P`(yDv}4%GV>c)DK7
z2QgD0@8eKNHILyX((Mt13zP__cy^T#(IT{_QkvCUNqwDI$f<}~09#~EG_Q3f4bkw1
zya0m^`SNy*I<C~oxoYy`EdH)}o&@gDe4Sgtx_O@Oll*AtM&X(C;w3v7SwDCMlm#SX
zfpL#ElpfG4v%s$Mr*UuO4{W~SknG}xcbSf~gW<++(r75-$Jy68<M5sB?jOi{{5aRi
zNn*HWhK0P3xV4?0Jho2a^-r~IGqW?Z4~|-#5EALH_;W+`ndM?BS|mU@22USxKdZ2p
zY|-YcI(78l{=Q$JiF|&5|K`8{*NDo(`Tq++&i@jE%nbh<Az1T2LU8Oq{HI-x!WlJy
zD|u|#)21}h<z}<79@(6N1t^Tf2;tzEQ2l4{MENW3JeOO*YPBPI!ZZT_>pyL%b|2<Q
z3SvNC^L}ZgRsL6XzP&~d%7wpFaYw^1RzdEzlU4LPCLV@eT}tqbi6JCW#*MssHJxFX
z*ZlnuTk3NZR1X+8YijCkRc_2Lt2CPTN;<#I-^}Th%^3`3pwL3D#L`Asr;zJ>dNns{
z@7t`NA!wSZa}=^myaC-GKj06%_T)Qz&(5cR0boo&B7V2&kE8#nCXcd2j+03phxFlz
zMCJM2hcZ5zNF@<aJtgJwr4)4zXqmB48<olnYhp|yF9T<6?2}A<pexo$t|p1s%Z>z{
zf$ra#lbg^Od5|oEYw$+;-n*sFCu3grJ-?{BV_nwb?$Q47j1CqAaPraT{OLi(M=vc5
zH#0n%K^%9!Q_9pSI=%2sO6DjtOkhI(^t-o4t9}_|x{Ds6VcD-58kuDX<}bV}goQpn
z#%;?8aV`@@{2<84Oo-lQ;!OzlZ{>f%Uop}cp#VnN&_4UyUkYG@Dhef6%(7}|cf+qb
z_*OO?Kn!7M7^{?bVn1$?3LfA&d3`{8R?_tm*0KLSth`DO2M}w>@bsLA;sA{$0?1qd
zZIMp3*Mmw7BoLpqYO?As{($Gp>8cCdK)eXBhb;lhSg9SGLAous<8yEf&VnOGNlSDX
zg^{*zL<qv%>Y);l*##Zn${OK1=SIBGb!`|p4hxN?#lYuKm#uljyK(m^7T-yViauJa
zdKxM<qiI9vd`0D$x?qtzEyz-c!@s;tR3IT=K^oGTiEljU<hmZpF|HciQ0Xp@PF>ia
zt<yRRl-boL$aDj$m>Utf<$ZF+`49~j`m~e-ZBVu}B$Yy`yGNBD0KNwOLlRQ)N<w|-
z&{lQG5`Ct%3KbL+c8S2zk})KZ=_TN9J#Nyu^sj_xlZ7JEd38rL#+P<LTgDgTO)ES=
zK|VC#4P`nkJhlP>tlsqwgh&NqZ42qIK%9EDk$_SxFU5z!`**PSM<7nZjQZ1OJRKua
zVhLKGc}LXI4Dz7odJbE8wEq=+Jm4l4Lyk)5Z;pf}O%%?K{B0K-8}>2~1ft=oiqO@M
zYPHJcYx$x8TaWC&O!KI?PF43i#V2rGpL|dV0Q)4P%(AN-OKAH;A6ppm#tWzs8{b*M
zW00$tBl776QkVc+zb}t)2IUVn<swww(-{k`g#ro8Ti*&01Q$?8Syu>R0Og@b?ss7$
zk=`ll(~CWTy2qK4z*6XGa*rldr|x0h>DEUU2HCwWQ^QG@FiOgOwlek?7!W|nK-~A>
z5YUT2FFte-WC7vgDql4uJMPQF3ZPSgyAd)jKD{x6N{|4@weAno>;?sz%=^>L_Vg++
zsrE21q6y9L;y^{ls(D`JB?TA)>TqS2iN6VqKlH=ckO2TGXc;5@>S&c{9b7xvE7LyW
zgS5?_K10b;siJCHB*Jag^qQ^L05vY|6z-0Hm<qTNBdk*#`JupHBU0jidGY~ok+X!j
zW5M!#D^0=iDDpEgZc=FBid-OL5oiR9PbvQ8Lqkd{f~RVSi!+=hJwLFH1C%{4I+h&K
zKlD*_l(NdV*JTaj0i5)gAf1URoP#d#ux{C6xCIn|wkc?ILW&w^5E1)4{7B|x;2*@{
z`mp|2rS~i`$=%qg(?rn)%;vGlGgTfZ4haEXlg_I#m0s~GOn6q;EE3T)O&q%0Q9&kz
zp;IQ9(N+t8%DaBz9t;arC^%O>gRV#vqPr^YE5k@BVU^7Nrz6XD0H5<d>~<fCk$!ut
z2%+}&BVIeJXCFuM%m1?c+CQirrA`obhK@sLp0XKIN53bk?C+&2peFd$P`srm?I)5~
z3j{@HUtFY_z5n1yjY@^;tH($`3o#dA&||>GILtXQmPEg6k<F+s^&Q0Hl}iGljcs4-
zq!Lp+ax@7ksO^7!6Jj+Ka6kK+32=6F*eqX9x0vK6?zFUIo9!TvnvRBSv@G^V=BlWN
z*kxH0cqpyQ1-Y*tvKnNAiS}OH9M{2w3M+E01ZR|m!^9nWn#lNHC685HAc-&)!bjde
zPp^t0JS%S=jQTGq!SoxkGnwRL2m%~uOuuIcfs{^V6LqDxMSmpSUq=p#K${!Pp}r>B
zRB6#qg-TOodXcD-FSU3F7~kPZ2sfSxm4(bPAP2?KtB@pl;tZ~{G~xAhO!fKO_NC&b
zuvr9G*2b6m>&ZKB(WqiI53m?im{v>ghby{rOZM=1LRS;yJ?L;yFX2#;rmnd^ls(Qv
z<zbKbA*8uOSN$~9i961VBP`6@$VnKNI+bN%3*+LIb*Aj&8Dt=$#G1YM(ji5M5<U_c
z77~0?7XBaJ-U2Mn-P;$2BE{X^9R_!IDDLj=#l1kGxVsg1w?ffEakt_Wm*P@fdI!3@
zcmH<IKHvTBdFFZNjjd#5<(FiwWG0#P%@*mxJy?)Wb0UVZjK$6`s!_8e6cQ~<f}==B
zcqf=(AcR#ht<qIcmR=1a96_JXgcB%DPbV!j$et(WwdzBLxq4){$yZO$$4#%Tj@2x*
z^CLYSEhaPN5Z<%moykeD=(@;B*Rcz%aH2X((t>Er2S!)N_VcfZF2e^iLa`l=!XuND
z$f}UraxdG5cnbS-?pbKoE?d#=XS`P36G6UrVR15ts`I3X?V`9aVuBoP*Ey04W)ot_
z4#wY?D?B`okX^}~$W4`UxyE`aT-~*&gUBc0HDaM$AWnl2f{>xuJH8{^%CVyvej5n2
zV3F9J<RBI`y1MBKdc}END}X42i1xWxd)EUYICU}>4BRY|B}|koX$VTsuQf5V3Pogo
zwy0+R<!(T9Fb)MqL~d)1IB17*bCza)u4RD}Q_~zyLSUDbMe~DR8HPu1<+8;gAgfU|
z0d25roNfI`tEYhX#5Fn$F+fqyCptmD^F$%QNxs);Md<8UO?gpJWh}u!+==5p0ErIK
zz<}wl7fGeA2tt5_B@9P&Sy%at98S4SQ^tlw@Kplmdu8z4Gj&(0ui}TU%QMC!>9<*q
zJ@qrN6douRGB|OBYokt*3~C&Lq-+^?9=wn>XZN&HkNqZr>Z*~)TaiKdqO#g)h8Vbw
z2kC6QnzApBH)4+Y_{(-UN<j041A<L3u>0NEYH}h;w>7`>rL=1gNX^%9gJU>{Q_nYY
ztoYolkGPb#bh_41M;fO=x~}U3;?mY%r3&$+dERW_L5TE!9p>-zbKZtvuvux-Z32~M
zx{;x^*j$`lp^FEj8IsOe@qXOi8tOT(D_H8;3Ge3naclO?FXDIy*Zpq9?HCi%_sd&Z
z6+chMboKhv4fU!OOQA3xVSUM-ZB=V~eNbtZ0hz*N+8+t;Jd!X+KNEKN+%@i$=gHNj
z2zBmro5Yw^uJn1jm2|wV{$c>L8R30Vc5)ZGG}zWRdF)rByXIOnFCw>EMh>qRqcXZ_
zzg?osca?-bs{O@8Tr>N9ZcNa^yrKxl9uY`grDAyW`{i-^Ayz|Tp*5<(oHqo1U;Q{C
zMU;lBvm*+HV#ElvZ6g%>l(nm_278wXw_ZS^iMv?Z`=?{dAANl9RrvWeq#NzlMVlKl
zYOkdz%*M!g?DBMJTbQ>cWmU$2p^El=hAE&iWWEp(VjlNF5Ft8FKfWIMM6jO$&k=Hk
z<gA_g<V(cJO@Z%qF`4aAlEZGUQhqjLOk6U(a$~iI@ACG7L}`l7rScV2awH<p+wWR%
zbtBHpX{r_AE|6CBjK;$vZp31Q!*C_hWa@KxWEOzxH(*MGV7qZM9;>emuxMd*K(+h?
zJXKIUZE$z11{AzPH6uT%SgH@KJGv}YYBgMMpx3jez<5R_66t0xkV<m%K<61Kwdj5!
zL)2CN=2OHYSi0ECkcOp)G3;FZ9^%vPi=5ZO=fja;W4oAmkEo3;(W+;`-@wfY6MDf!
zQwvn1R-`_<cvf(N57H-{`qPZHzJGmI!X0AVQk5csF79Gad#YnF5%3~4JUbdJ)V_5U
z)H}(SZZ3tqBh`1DJQc?t13i0YfJ=|AN-0}i+sS!9Jq#a%(N*GcbH*)>d8o1zz&7qa
ze}Mu;v>n_`AEXK9EWw)s$1^qL9l`GVn)Wq_u?3RpR~lA1lpZ=O-#FK@Z|=hAmYa1I
zp7mITHy)Ac*zSsb+hypr$IXMVA$lMsQb-7rLQT{L?X3%skFMgoUl|jrwkR$h$w!SH
zg0HrASrRbC$LLv$M_cx+iD^<JY~mtHe`KEQwat=ZRaVmFzJYoeJ#dw2!h|PL#YL{h
zhnqs-D+j6HZ0_#@`KnNyPH^%=!J*$gpwXwU?H2a_9#{O9)bw90oM+4Bd54SnufN){
zu>7lq!}@nDoDr=>yG2P9pDXnf+mfJe!}C$l?amD{Keu?!eJpIc3?V_~gkg9wE6G6|
zfide#po!yEYHy>Iboh~%?u85mT1#_j^WJoc)uYizggTvD(jTK7l$8zqH(P<HMM?Lx
zD;ffNnRL4qW%rvcLn*#ZTA3kY!(n{12ru@noQyc!>dJlyLVbOOzak$GVy{ClUwP;`
z(a3_aps6?P+kX49J6|axnUmUy@00`<4EUSdeXBP{Z$8A2vFrzs)p9!DQ=uI<-OtJ&
zSGZ}m4bj{_C~%DhWouMkpL;@^O7^=YM+|Ua`0sH08qnW|bex|ka3Ja`RuG&OKB{4+
z=N|Q-kfQ<^Qu-qOQlYUOZGX7i(}#bdbD1QIQs!AyZTqs4l-V#GCabJ{S6f=%-qv{A
zOY#ktc$voQ7L#vzYJK{`yT!6&{o!%uRt-I~p)6U<`Y^my%ex{y6_dLXH~+HzLz1cX
zrcd1}d%U>4d_P(iYxC`0!*Y^FJKb&Wa)L`ueeKug)K0BgSyV4|wO3^Tjv(XAD-5(Y
zYR}ezi~S)TD<T;`L%5-o9q7+?VT(4slFKpkZl+UOnr-!ag+*UlDv^dB(<?rjjZ;Tn
zzdp9Yn%2~<qb@J(=&>vEkdq%xYqn1hoBni09vb_IeB@MqB`a@aD6BbU@00H0%|lGN
z;b`{evzg`Q>4+n_Q(eV1wVBWSbS6?<LyT(&{dsxmQAMsEn{AYjx@}!eyKn?%lN{av
z2x;n4iR;9SSi|lIDAxTtT~6yhPjV5C?4}6gK6ny}DG-$I+9{T@oLO(mY|5L^z6{py
zTVAerqY0hDl+vxDkFK7DZ{Hhw#8D_`@{etk<TfD*2zRF=?*WhMU``nrIFXv7_F5A>
z11g)Wfy*@uT^CC28d`KBn(yfFZ)_DeJlqz6*3%;g1iqX)i3#;8H|>U&RE;!sEOQyY
zQrCFd=hRDxGptw)(aYQS645(>yc^2FmK%pRk)RNv0si<960?}|N+sYfM}q-7aG^`D
zGOcK}8D7Bzm)Dja5P(jXuXcOSCOtgR!Nl|!8t|aVK$aVT`bry01nNR)#q9VZf#etr
zA!dGZ`|^!u7ROQJz#Y!98+Jur4Qx?I9k;>G9JGY6(6w$+Zq-&uD#d`-XX$l+pxYR;
z%~Gh$(ua}e5%vUz!^&+25chI30!>tjOPHb{Fe2FsJMGOa4$ji@Ei;_RSX7~V%=92-
zMYEeI%)uAgYq-S6h(%xbmE|+W-Qp!7tnk7zI+j5z7R*}c_Zu24{g61-yEzbr0T%|9
z9M^-e5OfXjByNjI-;<KLYcNX!UaPBl)5B(nCg!+IaLx2B79P@P_ZH%&V;4k~p%ZxL
z!{wfbHMr-G=fG;>+#6!zybp&HGO?oS3h)DzHADU=!9fPmlL=+Q^ovHrG6Mb7ZbyuZ
zJax$K9&BH008ON8Ubl>a#^O_A#W|+Fg3s%!jy1nW-t4gWh0pC{zk>$9hB*%=*pY|0
zhSWi^|H6wX1-aYuL*#0XE4;yLOUH{6DjTm<Fl;PgqbfIWHj)}lLmCj(A{H<$nC_P1
zibm76JC{ngH3&TS0MXK##qUcX4(%WI559j+K1Vdy|Eibq;N<-X-D7n-eOmN7t`wDm
z>sVjk=jQbOp$tH%uRkgrDw8!jruQZzgYz6L_@nftEb+cjK>eAlpQKnRk!v`y`Y@U#
zQdf@JnFUO1TvV(W_7d@s7qX~ea{1T?%{Sqb^+TuGxTw6g)e>T|=ow6(m0_F_-SG3b
z8(%33w>iH+5rWeyF*I-IfGy;42j8LOL*YS|Zut%sH;B&2h{s@K72ZXM!d3o}n)beK
zcUvvf76!S6R9WHVZ9fz!ck`6`@#u=Y5s@QW$S5T<3Kc4aGPZzT+C9h@shj<E=V~^G
z>00%@O~rS@@NO}er&i@q)lu+KUSv3=3Zbm2;u~Av;8LxAm?Z58S>S=#sG#V>-!cVT
zk}&iOII6Z>d>yo}^VAJt9r~bcWJ)S%$nTWv9!M32lalhnf(q2STlP>Da80TIo>Qt6
z7t}^Ko#a#BoI=eN&s4>!!X%Um2zdfs)Je_D=`ab9II8>W&>@K#IEeD{<jCE?VsEB`
zQv%{1rqX$(rU{Jh0y4DEsLOUOwon^*`y&xj!;qY`y+#dUGsKuXxt>)=)CKUNFOFWw
zZ-x$Z*&H47qUP%=^CCfx4v`n^K<&%m7L7A5`7V~v*6%~C#1yp@Dfam`r6&lf_nlmz
zvW-$WQP3J!Tlo+P$h!!~kXg-ISJ&~dG8i0k7_<n;oS-lnN#34Y(fM_Re$%InfSC5B
zQwXH_mTiSMgY04hJWc1qu%Pt=EzyxYivW5cJkg@xq1n2L$Yx0;-<7clN?)WVGaL9P
z$>uEy`ZTw9Btqae@d9YA?=eh9rxTD|xFdTD$HgB>gWi~inD4r#kkA;?-J*+Lk^K;%
zlzG^}g1|YDty@xsu$NDQ(3(%X@`2i*ZuSo+uM8;N8u4`O68uJdZrWT_tX6`+co*O~
z<};6eUNiL;iY%@`BJU-idz>c>9Db8}HBK(InkvjfGbW$g@M<`@hFr}^vA{ZS@Rc$C
zX<h5Q4fD+#^k9&2HmmRnp7W#1{xj{^AIN(IuygsaLt<m5Rk+tjg+xkN3wOsoGXCaQ
zi>P-T_1*ld>Iyun7IMLkva;6MyA+>TF{ZN0X_EH@i!DY=t~8RClhPP^<`7Dwq9v!7
zko_<5KbkPV4Gq06t=^XV<N@}Lpa{D^#(kF{dK^wAv$d+Qj-W5R_dJhF&f+bBhA4PI
ze{c<{3||~!Od<ldYir=Vs@<-{mP9hW9?9$G`nPt|fp5eD3*o?-+5B%BL%lA(xm@8V
zWPnq|*)X~d$_X<LOh?vF?N^rMqcfeFp~`vJ0Z)fB3qecH-<{|)3GaWMmq0Dy%|k=L
zCzJt)j+U8&c_$Z_O{bQZOBevMPtlLrlNxnQ6(W{x@c2E(Nb6>kslc#Y(1x?{-2$46
z&Xumdjm6MMPjEz-(q6$YOQIVv8iA68XU7?ixUkG=kfRk6>Gaz#%-`-*D>ACBKoeRw
z@-J>Xuwnah>C2v@M&Zd_t{G~62WQITgb|#&I7KQiG004(Bdx;0Q6x$ZF`OPM*Ohkj
zE4kjt2sj1b@zA!rD<m(R+KuCGipQg%+O%cAM2g}0vhhOE=*Uk>9HEv;ytw*ASW5pT
zjZM|NGjuLcr_@2{j0jSSVc6)oh5<OA?Z^^C$pTF`%4kIqMiE$r`KgRGB5eOAv?O^l
z79rHB5i)eluSi40DRhjiu;Tt}7jaOeL3DGgRxfd)0&3NqR@WV{AkT0iNSn#0-9dCW
zKidF=`*gpfuA{e<s>YH_PJSK3<Gk`Dw{%HIhHeN;Bv371HD>x=&~@iQ;pMR{F83W}
z&RVTZDn~;96m5IW`J$@FjC)*YC)@f9i}m6+Iw&$H1FUFzb~$_bbJ+QZ*(uHFVBir3
z$<Q?WiA^FQJ}rv$c%CUttx6h*rIF*fldYt?_}o%R<YDu#q%WGT{k5ULBTVqJC}b`P
z+M{)h&yvz5=OeM889$I-!=E9+@%?yB=Unb);ZVy~L&Z;0KVvLI4(GUGLMEBcjG^YH
zTn?r4EikCBXW~m|CL7gfi5u>rn{iENq)jYiSHhu1@&vy{M_EjKD>$(^2?uG*7ACq_
z5k8oBK3ONR1*<aNS*OWQUZZ@iB`VrJWuE*a5`9dEpi@W<MxTb?PQxfT8M|QV$VnKP
z97pKU<K%h2!%t+3x~Lg9=UH>AF`vm6=-aUfdxcuIu02x3w<$(45-o-)y?q`_9z3!-
zL_w5kYEffqzLL1#e4k|AkdmBu(d1*WO7AItuX9ZO!I*KF13<x$xL#=jMfGOk$c3He
zQp=;2tP=6Sb-;el#EN%4l+*Ra50611AK0vT`8BMM6)jv+=P{^LH$OtQ=g+0><Ne~k
z-E{DsfQ-h8Zl2AHUAmB^5}zvZ<<Wi+5%%2epXNu`bq#G93|#<SuvA}J<l|MSiC@6o
z433+_?T^mrEl`$ovOO1S-9F7atfVr5E!;k9Zl~^8w8v?F?>t=sDS}fEMo1oo0S~fh
z^T8ruD?4)byfF9G77w3{u+iC&BHndRg#6ga$yDD>{catVvyn@)rjJ0VOp}Dfykc)B
zfKFl2z8k%Ef1+nOe|&=&{q{31r!RD33Wo#lP0t~Ru4l9vf4nf)Qn+4t4jjZ4#a+YF
z0ehP4*KgcIrZGdM&|%EZ&}-+7xK3r)rs`2vU=dR*EK8}H{lh`dpiYccAdAe}?@w*Q
ztq$kZ@Kl%u&pS^>U-H0p#S#ig$|{QmFN2!ORSl~!6`y?BAG(^dE>+w&A2ui)K#PG~
zuPCx>wgCsw^f_};=^y0xz4IZQ4u!V<lr*3H{YNz0XE6ri?+zkIL=*4kbGi&ZI)74b
z5D6Q(n0^qH*vJip7ePfgXx<~Lc_)>hQ_xrSs`sjPfU1e%rCV;{U2__vmc){Ij{qH)
z(l9X{%wyVoMCDelV#1e<B}#>Wa|U>Q)sG2tyaZu6>7{oEvmzWX-)njh^7V(B6NJwr
z)4Ml$kuIZ@G8LV6PG0Xv3!OChJYL@Kt<<3nugIo6JZzSJb$gkjY0CBTv4jSB<xKLn
zRq-2X{rXi@GeU<XEvo}yR=Nmu*Q<LN+Y@JKzF01Bh{N1)6(Z@Lg1TU=UDT9iE{rU8
zR1}QjWt03jzd#9&TsaW3NKVE`<@7H#-$-=#Xg{|{c}ya8lPE2{CMoz_uxGdex#+@j
z(O(1(-8op3-hH|!tETp{ERxg5vjJ;Xrgc-GK~HY*f@@*EGAklPgL`#r?b26NS?226
zW+PRo;A8uO93O{SqC7)oxR2ZTX?pw!rTVe!&1LKtdDe&Ry;iHUs`#z#Mx-%1{fkAg
z7X8*Hehs|V@2$1VwFih_d}-7qhRSje5sk=wXfzNrwq-v=>)UZAnJ4l@en<wGc9@qC
z{5UO8u6Wa@^dsn%hmqAZruExoJ8L_v$5^q6&YE3&FT{3oCm}ND?vpPyc%3rElEq=s
zP7Hv@htrWafl2mfTb-S{E$`(Ci;>UA%-@3uTeV(X6zn6Yd)&X8kwK$>fTmBRy$wtX
z3BxH>N+p-Y<hQUA)-TQ(K>ohE9&gCXRt2W+a}2LKcQ5UqgZHuBAex`Ebt61lUUP7K
z|CPN*w}{f|B)$*7EImNr{j56WkFKmAppOV8N&jlgKiTNdwmcWxpSzVT9RF&|bN(G$
zzC!cYu{p!q)zn8wEKQVKFC~<Eq@BY**2a_QG9aapBOkw@1!<Y)zf0`sdLwhC<FBby
zJ4Br*YQ>cD?Hhm5o%1mzijuhSecl_j#k!cK_deXl!0pO6D%xj_U*=KND@yCak6FB{
zwX#Z*u?9E?)>Fzqm<zdSlt03ze`*d8SB&keHd4*fg*bFPz@&p7l&165dI0-C{hgf`
zxLf&At3NKK*F#wC%DmGhMjz1cwG?X#9XTml0lhUv_%*iCv<1L%eLu}f&?TPgyAi!u
z5D_aO<{^`pLYJq4BZJz?gH`{n)KTQ!24fig<D7G2zKyl_&bn7`#8g*^xLB!M;&Gr=
zC|_f?As$OxE_S~!65GcPYxV%R+=_IJOLA={xUC8zV~Jj#YsJe!d55;)YZRIA@%pk=
zwFuz0pMxUKyVuBgX*id>tmN(G$F{OM;t>-WuWJK4CZ(dI_xPjTWrV^5inxxxdC<X@
zeAH;fO|LBYx|K{PV>l33z?wWnK=^t#I5MS$Xq#2GV!x_Y_mjUO*7of;j=hplFJYF4
zRTK4IYICt1!XIRB2UyTee7?j`ND=4Vl+xR?8xa|-(0k(D>!8fV#m(;DghuqRhOe8;
z%TkRw`p_I?m4*oF1ZNhfy;RIHM$(#$=mu}WGf@Z%Q;&U_HDpC*`w`t_`Qi*a_f=Zm
zB&bd;RX%a}f$B6@g9ZSL7pjhm>MDJrwb(Vjh|L<m?^|T<?mTR#OD1mTrrlx$=@E;&
zzcf|@Z_6CwLr~ydPp5EkceEXV`>r#m?Zk$fWDqXg?IB^GD-u8U?a>VHE3~0Ve;><|
zERl>QT<x(1ncUBQQFhZ&=YrcgYg^FudHLCNZgalx*;d@uhe@nHdC$V<Wik3OmAG8#
zZ_lMG8_r&AENz>{O)UBIjF|94F%U<lpcSAF_(A=+K6@K%`+kxnJZm`%oi+O7sphPw
zy~qIw&DZ4<k;*ui(`o#wfO9isCMby%a9iq3^3Q$P@XGO6r_4Hfg_XF&Y!s-YDAl>a
z=4hXYwkQ$a+)6J#Fvj5uNhjXMCy4WAD$-e8X-{yZ-08m|GS$6W9e0{^B_)GfA_#R2
zOY*>&7Mu?|tt@McND`TJXi|RFO4V1Rm3s)oz*JWrO`t}CV|J5#8Hz<expd93`LUId
zEUyIt(=lyT0tw22-=@H=nUJoNXw@<S-7Z*|oEXvavu@+c^sZX5IVq%^aScNcMkypD
zJj$}!6nzte##PE&;w#&iN|)Sg=nz{Fbtee#9uSaetfWx3mO0EjtHK3FN`oufMq~?4
zQpi6B_ko|)mk9Xvy+-y28Nh~ZegKcoFcXVQH5x+QsuC&&uV~D|!+$Hq%j~P{){c-+
zo+3&NIw<Qpl7KjS_aTlgu@$_rJ4UXSwaNZv@n*iZ2t~5$9>RG|c^jBo{And#0XfvL
z&@A*S@>|`=MFRd;Zb7UctX|eyl=eed`pkw0k71E94OK%gz1Jqd?-n&UT{4}2v?v&i
z^aFv>-O0}OcU{Dz2WNG|hm+*siI#}b|6G-|GfOnwGF+GxjuS@14cP1i4UeWYOcJz*
zs#g~kX!m-sS8`jdwHz2%?U)Or5iiZ)-Z-ynH(-icY#cEMyafw!H<_;pw*{a4BC@H{
zLM7Up8ZF*P0uF`En6%mL&H17~z9@dHB#ti|bsu=5XcL!}$cc~(hA|3F3RhP9yYn2@
zYC0_33u_JV&!eeeMr0$(c|FaB7J_n8rDaRttnHS)?JCzAG)$0Ibmr`B!p+f2F0g@!
zwS?o|D-mwW8Ompw;4tBW^(p5^I~ovtxOa2@!KbJvT#Zd>;7Hv5p#+EMGS)8$$4b)4
z62#1~E#6GpT1}wNdrJb(>~hB!rxDC0B-0cMjcuu|lKSG$s(vJ?j3Za-Hms6YLwg76
z$_5RZ2B-7>by~}J-_~UQwFIsbH3C_FkWO~qP#DO8K63w*Z<nA7pqDw{$@}c&j|$SH
zu!4D{k8)4h--jV(<l&6y(s3z&n=pB6$yt!@y$sev7VeWZ*2O)L3K3>=`DK&Hr{aPg
z2R@*08D9#2@hf!vJ2UVl1se78?b3eh)_}3Rz_BgA@*nw@LO}^^s<ms4<iVahJCM#f
zLArH3$mN<x-7EG=?-aWH_4TLqNT+pn@nHGKfIXGYbE4ciPLD!P#?gX1GteLu6p37b
zVV$vhQ}tE^^X)R3z;LyRRd9)pf%Q66EUh;rj`Wt<?)yGv<ROjBE@<AMJC$>kgS|I`
zZ=7Ge^z<WR<`h9ojapKlI$tMuapsp7bU#wY-rZ1<+d}P3r+w6i=v{%*P$Pp<+{(d{
zHnFJ}Iq^7Xuz~Qw>g&lzR8ZQ2;igec^hy=eBDR_bUs`1qO6FA1n@jyL_n@ZQXy4~F
z@4rU^1GDM$aoM)}qk3~ux~gtV!pzz?`;+e)BW?tCSA4s$ChA}|{sAjA=-GEh&~&0l
zTm%T*MfgG{94(42+YbakDk2iVNyR!K$-jOLSbZCq)vv7frX7Zi;=mnp1bnO<bf;4!
zh!lsnL1Madei=j6vf()WG^8-EeeV@{vB@Q!8;=5gv*zTzLSKJM3cq|rjJX}gxGb6n
z%1f`}vP>(OgFD~H%+}i$6|t5T8`h8VCAK^-#SXC$LtiL7DqG3lE|?Wp!}zm0Y4l=;
zz$6@%l9dwOpqJofTEG&Ep`{&Dt&VK^lLw{oW)sj;&e{w#AAfLt0bwH5+C21$Jzh58
zN`TWyup>{P?f&LWAld%wkB6PcDz%liH{UKCiP^=?N@84U{U-P4TrF-Zmvg~Y#c(`7
zlhs6g7Rt2ozlCJFQlBgzNh!qdrh*ME1s4;~`)-|=Y<41H8=EHXi9f&++5c_W-@lrg
z0_o;tY<9Cv>Bm=@*pI@)^=F@YKpaeRx;ga9FtaWrDaa|-hlV&@*TJo|6=k&#o55+4
zst>rw=}5pFDw=uvQsaVWND69bS)!xyuPHd;ibQ5J%rU|zKQgiU$5-+&-mH19@tAy7
zJ(ep(PCehMv`6UJ#lyG6>BgY$8yKd_m{x2?eVl_D&f|3@6>Y*f;KNrDs>9$8z+d7W
zL@22YP~??MdHr2NG}~5$1N=7c!=f1_#Gsg+9mu6P4Vyj<rbxOtf2$|$P7u-~vQpw6
zGsJ7R&C)LN0cA{+_(67<v!Pa+UX~9%w+^q#yd+$xGM3;TD||d9X{=vRSan-8658{y
zA_|p#DmB4Lkc{bN=Z_=M$L?2o#EK}4Doot%EAlf?<04ue+|HqqSd%aDzmh*P6ZtGe
zAX7NmjQ_(?M|vGWrAPWfA5Q*Vgvj;b(yf~)d|JlRCDcc3G(k!Mc$`KSR`a%!eKWaT
zNKz`(5&w6MmE?Wpcw8N>MHMexCT`x0kG+ycE)E^gpp{ak%xh5UAnf(h<>mDC$=3er
z+d5^IAL=S?agGSqSE3u0P+k}X>oK|{Rr<2?V4uX=EKbB}F@VE9iiWQRVoMK9V1Vkp
z45i<$#J2J+=87HwO@@pc{CfhC7@k+c?niq;7z290eS(v8<`|9fb`H<8Q{G@bcRcCr
zta|Elnk>^;Jq|-f>d;L^sMgG#sQ4`w-WN)Prj?fC@v&7!O_(cknPJr8R^X$^QL*HH
zGf<QC*QH+OpXRYg8%>11kRn{v4mELi*HSNBEZgeaG38@H!VL%#E78s~3H|WRGYbdv
zb=z=SZePm{(iMk8&%(8nB6X3^=68FChV#XV4t^{yDG1wTC7Jhj5aQmB>zvF~M0=+w
zR0(>%{$yKU%A{Qj9DkACU28nz6eK08qwCCIN$#DzLfq6iN)o!~yHZ|_IGj!BS!F>B
zY=uV`dRC@}xo@rrc4fU-a7yvG#(^_p#qX{B(L^U#ox6u$XKjJ?|Cot*&s%_Clty<-
zf?80v#oM3MW!mWGO%t$u<v>)MGgr2bCG_5ZJ*UtJVpBZNk4uzJ6@`y;6>~)pCvL4)
zy{zs{C(uUl6VT86R~z9;_kXq#7@7V&T9fr(k2qoddq<q84mmDzBDJ2=Zhx3gf(Bbf
zEm;U3;xeJNHaAWJ$k9M3#`Lg3aD!X){iyE9eKQO~L_N<{=&TTG1Lx`4EV1H`0y*td
zcx*<f*c9C^F)R@Dt!)0Y7(O|ID#ygl&SYD0qatT__NIav_VgXqQI^`p8x8Q+0r@4x
z%%aojy9_g-_-b^~rg>`m`yDkADT60rP~sjSwY;R7i6RepJ^Jf=Lok)PVrtuD^k;rK
zkB5io_oNq8JXeqEju}Qdj@+krtuL_EH}6@DQAwoABJ#1xEZ3NVMMx1NaSrsGXKDO)
zte~W@uIP>4me{Y=vN<kOgT2>HLeVRXhYK0t6^B3k5m|3rm9r8+d-P@_r%wpGpkm?E
zErgvNe^;K;TVjP{EwG9YA|2Sc-BOID*ugXH?gfR`7|fQP%VKV)<7vSx8fD^9;zHJj
zRr%}&Zj<fJjj>u+82*y!rlKl3?n#o}mq#_r7aAb*{JXwAPQoR{>*nyTSn!h<%q@!o
z;!GqJ#AO0{B{X;~0V;i(`iq%3tG5#a20EA-Bk<X~=`Jyz*nD~efhmxUv1*kC9xMpr
zv7EZ43c}}7?>vjfow)c7Gx{1ik}(;R{e%v^%5>6Yt14{h{1LSeI5b|$ro2RDXsecv
z(LqB^++XYoqFOo_DYNImTwws{oew!GLG!1}TVAOldG0M0x$a&N;QKkPa=sMupbMVi
zf*A)DpJ&O)Wl=}Uh)a;YFyZjzi>r5jT`XskP3)xsqFW964KCXt?*oFqN+4+v^*gB1
z05it}1sH*XotfggEx2={HBd<_={ZFLvYyh9If{(}Uo$sYmHn4bm?;YF3GT7w9NpBN
zauxJYTr<w*Z^>5C_qvlxG3E_;Snw&%QV}AWtqEU9)feySQM@$Xm%^eRdwsg<m<|E+
zVAqFmJCWwP;bW)evr=LLNY^cU>$T+BRju)9!nD#imEh&Os5i8MjXaR+)t?z<);RH8
zOTE6Yan6(EtjL2=ESY-o)my<Lgm|!tfA#X>ewfHDJVv`QwM6f8?|ErIa687+3cn%4
zGyo}bX@*XaJiF}85}-R=YsBr3YrcqhS6%XznNwDxi|Ur%oSIrrxbyQXZyJoZJ?i(Y
zfGuX*q!udhyuv^XvY@X&UP0-Ye@UQ~d!-Zt;_0YOz`?76aM>R9*fS<S%rVFFFJ1e&
z%RY5&PA=A8|5g39A^^N=M#aOy6rf;eZVHe!HL)}lws$Aee)`!mI}<Yz2N$z03_!`=
z8F=#y5hE~_qp6)U(bKO0lz_pePWCR2#->idOcWgLjg?KEwE@7JcZdKgrtZ!_I&pho
zVy2&|fj8CwM1X!Ey%W*XA7zzbfI&cBpBQ8MUu5U$N7~P2|HaPp3Bteg!~9hLC&vEY
zi--B&i0Aoasej<-e@{NlPs>98Bp>E~ZZGCvlg0mg`LH}qLI2FppKbUDepsF+rT?Aw
zV);`Rf8po(XEDFG7t61|2mCL{=TBMu#?PN^_=kL0|M&3B`fu?3tVaBUeEw`M;8+11
zeu$pOA15NfD@zk6B5jx_xGVh}6_j9}J0tM*Gw>ODN-)nY4tzcTzaHkfeo8R9L_it1
z0LL88-^Z3e%le}z5kqG~8+-F#W&Sak$(lMFngC;n*q#-f-!phh@dvn+fXBZvJtGpJ
z#0B##dVmrK%(J|I8_u30{-of5VS0`S{5|650pU;Lzf;_Em;E16Ja?-98O0Oq|7R5c
zAcVhDk7wxokIHx!>>m`uhEAqW6AnO8QdCV#k`{;rM@v)3=SfJ^)XCV<(!tr@k%;N%
z8u#<0_mmtsOIbQPIg3~rIufxk17r;Ua5HhR0Mso_oGqNRVb~d;=fmgkC)Y3E&v4*O
z`B(gN+9&@%#{Ew5TWTUkm|yw*hxdOI56lag;;$T^T>tL*x1qn)>vx*pdHp?aVEBK-
z&Hqh2kOQE`AZ7==-Okd^oQU;jGby_mIX|f<PtC>jR|k8J{iEHVTk;nj;0XnPdeklL
zgzTIw|MZJmnwgmbH5j1Eq7CenEC5?eI~OP2zw&+V+W(9vQ6)tgaXDHQOIuSXdSQDT
zlYfEKPm}0>1Sw{=Co!|JJ$0+659jk7!UFt$dY(d_Qarhz-pm}FFl@l4{X5TJd9ZN+
zDS*#Yvv2@UEMaHocz*wK1JAM~;^5$Xepoo4y6cngDHRth>(7+Ha-UNDq-SGe|A#!7
z7=bK3W%et>pH+Eg6IkRkvp^D7U}jIGPwyw@euV=o_0tcGdvZUC;3*w29_H!I_>%(2
z*fZ77nCG&7iQ!jyKdbng4@mp#^E0RaD#afu{|jsbh4>HH{5kIbCv5&U?)`tpCMzSr
z%<|tt^tasq9Py;(l!Ro({y?aby{)0$zd-b<l1e{S{l7cv{e<W*IsOFWU*P&jfC5|W
zZ^HAbrJtUk`2sQV8#sRf^a*l5+wBQi&t(Ep@QgBG4Cfzip#Kk?JkdR+e+Kj)c>D$7
zr*fWh`1Q>Q^W=NRB#`6Z-%sJcYVnK9C;yZCsbl;R_h(Ii@%0q{i|&cXU+$;8|CHVz
z=wf;9_J4*x$3JoY2TK173_jER7x8TDtiNOQxf~_Hf57N-?EmHX$-)JA?P3qSnAFnT
z!Wo8({in~y)XW)%iG>MZ<YHrE3Uodr8DM7fZ^8Ve7ya{atE4HXBBk^Pn5BTKnx*kS
zqxtVn;jB!5PT~Iy=HHv(sUe@^{|oW{cjEuA;(v~<Kfj;G;@<)C<bDFm?;v_|{}uWh
zq@JM%1oG362z-9gJkdXOfuA(L)$Bjk=MN740Wd$c+W!QYr`Z2X!2Ah?-zVIsn*N^e
z)8O=%w)Wica)!31|4ykB2Ch_S(*spNdL~W|VBZH$UChk7Pq*X(FZX4G0SGx6KP^@O
z1A!|KhQK?_o`Cw(`&7bH+!G}X;3vq0?96R|YaB2DWoJ`cH6kt`m5{6XvkLg6Qo#UZ
z4c&kDSvolZ6_wvYo>WNS5(pK*5MbnJXl(k_6@I#&y9mG-U~F$=ZwLIgwKW8o089a<
zuU!mn0A|3U-qjRf4zK`N0;~Zx0NbB>3BV3uXK7~&um{)!za0P$Pm3?lnLfLIX6gX!
zfA%In`<{uB4ZsoL1aLC7wftF>lLL?sfHT0^%^u(aaIrHnb#yYecQggK13UnprjGX1
z&k}yRrub=01h$3JU&_$4|Btr$c?I$BHxL8m^t)~*^6ScC7DjfUqW0(I#F^@rD$27s
zZOD#JrV2y03W81(T1Y*@6APuPmSXjE5HG=l!o&nkJ_!0TN=ib71alD&BPp09(TrMv
zpigj<OmnL(s%vLy6@2#GX?M|Sce4usZ@InQsOT{wH@_aexoo^@ly?t2<qYWCP#iMu
zt}!I8S=#wn4j-M#9hGU85YalP{)3>;T+B?g5*slE8<b_^wgk0~ZuPv;U|EzZRTS&o
zov`w>Dx=|bTh-?buBahnS81cq!fxG*&72(qE3WC?t|q-R^kfWltP3*;ZzQ2YBj&Nu
zQSgtkF&bp?%v&fZxO-g>Ar~)*bJqJm&2dP;Bmd}NfeNS&kDABE#RMS8#DPNu+aN9@
zV<2NUI83aQ*Dc`Vtt{?koVCANc=>?^sw-UMRXHg;(${YBuHfs0Ihku@yKb1SObw}W
z5`I$NkT2ahUGdcvHX$W}Az1PUlrm6GMkH&}tzzDC8c3|jf*L5iT_M$dpHO;5F($^e
zdw96*hMM$9z48z?<RcbuX6|hs@h8LY#aBr!vdxrpHU>`TH@x~fm^E$UY$q+w(y49t
zjG8;^`-Vs9mJZTxyw4%eDb9Hg>Yxu;vV#!oF&<)$7vYDRDW?$EC=Y_W#PT^s-e;62
zSz_I)q2fT1^eAacJ5oO)6vf~)l$I)$N*e@Z2edjk>Gwd4gIb}v#I=PMoElIDF&lxu
zyWp+;;B4Z<x+MEmZ{nCNm(VjnA#@B9W`#%$R^P%yy=Co9bL1+QYY>v=n6n^j+V>W|
z`oN?PzF-W8^<hI%mN40_mE-2ov^w{a%;j9|vG+@D4;h`HF~Jyevt7Q2t`%bF^<AO&
z0jM5u<{P31y<}$_CCT%?WDlJFEjS!6IO1GxRl4CG;!z_g<;w-mw~(^4d+Pee6LKnY
z<}<R!7qhPWJnT>=d>t%XPHq}$Gjx+aj-<97^ya<s=DC&^k6!b0O`myT*R!J+EbYy}
zOo=*aN=;pWjkC>-<IuaptaRZHw|i1736L@wFJer|&&(3atvD){r7uo8j8rz;-YEuA
z%~4ZNqEeAUA0G9rp+UJ080*Mr6pfyZ(z=$$RkH?_9qaNjr<^KVv#}s4PbgK6H=P8Z
zAQ1|X)>17|nho3i(EpZ?8q+3w;BB27HwvPtMaoI@;U1gVxpb{#k10w+{fh+UV9zwj
zV7cQZHLAgQDpPd7Ql%2MVKz`cRZ``md{dMB?Nv#5Lr_y(+XI~kwIFo~_E#wsQp(#L
zspe?#Veh7WT4;KR{Li%Un+?`VFG)#!G&^R`vgsL0IUvDtU|DP9OuRcqk(pil?#B}g
z5c2XUl6~54lH<+4e9_IV8l)W(givKrEiyGdR_qt;G`d2w7xej1aYF{C%Bb^6wOqOs
zjio9FtM^m7>*ql`{r)VOmvu);S8#9z@wuADIuX|q6B~|Fx7W9k`$oJr_afX5<9a-u
zR1$JI-i{NRS;wOFi{uV=$Ej1Ke%5O*wJb^-KG7X^?P$mr8f#(>tugK7-wL5~ZO*Vz
zb{nh5HB!;jDkDsmur}0}GYT|j%Q#owhSZ`ffaxlN4&(T%i`n>sWXEiI12Equ(YGC(
zf4@y_ejkptecnr;*M55Br-eQ@`GsTrW?e%)sns^YjQ1L<7b*wVc@=YaPCGFt!hD<)
zYz#5R0)-?No9w2-z8tG3+b@uzAM|5h^o=945MWvhQY$uX5}D10Y>j6eW>iqkdxeR%
z5KGM@&U33~{#sgAtSiw1hftOTenFbW!Ws-3cFx8ZnoEnvJ01L6zmI&31;d_%Ty@qP
z6-@mOVFL|C@pe1Zl<#hwku{5&IgG_UMOO5XuhZU=)(UqO$&GLCC8k9Y6n^}Wi!;?M
zQ~H&BY%q2}G`-Qi7w~f0dDeeT;GNz5{^OUJ5iuFPT&2n#Px^C7K_25uO3I-cU%lje
z|H@6D<?1xrYw8a%KK^$D7VnD2U7532%6j1S4cF<s;BNDGTphY1!z*^84f&f8V8!Rx
zByvTsL9P&HHQ|=o&A%xv@!Rov-5yp@l1ism1t~Z1ejvDoNenOo^<I30t`%4Qni)Pk
zf!6PZ$vl>AIV&WG5q5wVq=SampmPB674#KD0bfCVuj<uHuQ!ka{=~<FV$;^8g0wm~
zOf&i{)^veoE+##56pR)Z*k|1nGgTc{3-rgR=*QF`9)6`N$tnp0s+Ko0qBUNMNZA=`
zw$7%ln0q{266tpqpDZH~bvR-`KgPY;`;67F=$W%*sNSU?q<!a&%UCqwE+G;4L*RAb
z2Daxe&hGr11G*shfPjYmnX1tOq#jk>xLo5HzkB}u;JcQNyxr9D3u;h4kvz(}lp4}+
zV-pgKLDBZBW(V8b2d#J<8=akmsk86i!S-#W33HA5&Swo?GVjRSU2=yLrN|!HSC&%K
z*etYkY!Y#TTXD(1>UxjymXBW2fanUhg?Zra=pjmP5yj_Ttg7Y>_zgz2yFuM($dSXl
z>hWxaehILC%Lp~SNdL*u{9va!>n`*V0l_Hh0x?2!Tb(9&hk_Fa9-Tmp6Xm`Tr&=Kg
zf3k%aKGn1`n}md@T9Q$&%SPTXN%$kdRR?e$6VXiEb0ooi5per}&TRwHD`U=M1I~%y
zO)A>#iJ^=RsdtOR^NC`}tY7nk&YJ{|5)A{GG<kb7sy5WcS)~Lv*9~UN*S^AY%9$pP
zW*qkjlFv^}>8v0WC-sKl!!^6k5>;6&n<)F>W-s96bzwPgR2mGY8v{HH&n?Gn6$c)L
za+{2i(*y-45Z?+qOPfFyC92SWpXy@I__}E~_j(}&-d_OLiNz1j1Z)hgYFF^b)+;a_
zfAIWmb2KwFvmF|c#3W+b@MB4SpPRvU)VAS~DjtFtl8Pr&5DqWW3_46e*GF30RtFN>
z->P?@m?A)Lyv-jdp^h~q4$YYxYz2I6o%K5H9f^Nr!QtvHoT;6%@~DQDLxB_*g?QO0
zPGC5_89S3C5=@c?hE2_Tv+eFwWQTWbV!rAl<WM;dzjZk9H6FgUB92DMnl?c!O$piA
z59d)><Dr9HME;O;$;oO}mzW}oU^m(NqcFw(_r6N8si3@s$+6v6!?yg)7Tul(H2H6b
zhx1dmEOZ!A{M`I~?jrU>8aX7%X{Xu@2Vt)^4;hTqgzNe-R}oLVhECWl()1J3U&54}
zIlJIcViixGz5ndHX5l?EDrjoQZ$1v?8!;xGC_Po{=yZlY%x1D+6uh_+A$gbBZ_{Wb
zkI<hxDP6Et(9;vimMdi83>CMke!_cz=*G!#6jN@3xoQR9_=vC3taUF&43|O-L+VPX
z*riD6<#7S8qtsvnW`;5Wzt|Ev2X~G8VUIlKlP{e{0MsUlBT}|UBQhvNOe;Jzr+i@h
z4^1crHGMnoN=w@cZa8is>spFj>g)xu@|<m0zoN~$UBAGPlT8C8@UAixt-R=0m42|z
zHfhxa$2H8v78NDd)Wu`!82&V+!dfJnjXf*Mfk{w;DH?e1<5NiE-<rha#?5ZmZ%u~^
zVFm5*%3oipZWQX11H#5I#V{x=1!*Bp-;aL3wUCW3bO!8BdqE?zufIL2{eeMZUqu!q
z3_4lvnpl{;ow&J$5wfZsd<|fUxk#b>5wm6(ST1oJj6=E;_Ib`CsEv~0{oN6R?@am^
zcK`Ef<76*a>zSVG;1CpJH!*)Q8eMvNfHH<UMo8)HC}BHXu{}e@)wM9n-PgNe2||E&
zO_wr7R&AI|6Xm!j`_*P7ih~2|>Ir;HAQ6caUMhZvb|uJwN-1|<^RehG1ah*bm#&Yt
zo^7Qxbg5v0Olk_|d&<g}wmLJIADk=VB~Nj6ONv+Mtp+NQ-$EgfBdOr5Bp_wR5WEZ!
zZ|)(d_eL~kuER}Q1>>kG3RJKnqT`O(>rX(j6jL<RQ%v2}&^4E$%s$H0Z2a`qxL^Zv
zr8)00LMAmaIkW|8+sVpf50ohnULbQa{EeH;{TgyU@yG9v-vM2lQoeY3P2Dz3H;CEm
z0az}c^wpCfE|x;ZJaq3TEpOEGP?c!r5ovNvEse3~ZFAZ9N|{-BN?BPbLw>v%;D77#
zw5j`#x3&T|lK-BS_wScle;RshKtqq2k)4Q(lZl9(i}jbG$NHC{2i)EM-OzjT{%Pm|
zDgT3^$HWRW0cC%;=74Jfz>I!bb3y=NfCxYoAO;WzNC1G!9pDu}1|SQN1IPmu0Kg>{
zfC@krpaxI}XaF<;T0ra1&=zQwIT_lS0F3^f(f4GA{$~39wEoP1yA?na(A?1!xYO<k
zGzBd@94t)jfEJ<E|KB#DsVgvFCrfvLlZ~O11>jE`(ZbObXe<7+rRWN9`}fx3^FHWr
z*5Yp)M1S8}WangI{M}k~_s~$Dy}S%f$xtp(k&3232(7bdSg>mNFj`j}a^5eK(iceV
zk7NclZ}<)b8i@!r0b2-3p=KrrK~=l&@<SVbtJ<QMHqTOvT=UJtdwa_It9_28otyW^
zr-&k>{5)P27nN5&v)hWseG0q;_V@ndlBq_gy}KcTcUiC>OL*-Tu<V+r_z!+)7ms9)
zNo7!P9t39evCG7>essK}><UsB<oCxJ+NfCa%^p5nZT}3b=Vd!lxQms@%gRY+*PH%o
zMT7sdKHJ6>B@6oyT27}T%XTaxbZy9PilnAWhJ;1_n^vRV_Fc)2V(d%8ALp1qoXUQ5
zj8KO;t{}OX7=NFTW$I(MkF{5|311}WASIr#FPeOlOk?1d9c&{XWA4!3KK@|%vI|ih
zFO0W!FVk(OLUVtnU9iLAbf5oKQv2z4?UsE-O3m4!CK_A#f=ETKnezK-o@qQQzy$+a
za+<_p(YEqSD&Qd_4Sw9B^!W(N62+0zBzsg1p;|KddF;wn%G$-`(`r`K4UwL27vv7J
zlN67p9jz!YFdD+OgboYUlnAC5r_rov*dlYOp~(yMa?^@mtB_qVZwa>vR}@hwpi-+#
zOSVbZOp{qL_vDEtq&Vif#_cH@ml*5;uO~Ift@D-1n$jr}FDf!_j6B?GImx>gfHDHl
z{LZT-p>J%)LaDEHKKbRf&;~=a8@4{*qu0*HXtbX1{?>YO)<+w+Z$9L^iG8T86wdO_
zS)99rZX>Qf#2NH5zAmR_Z3pQ#oL(+*hDu}k(G=m7fDAfJS)@bMpwO6Nt!dKtRQyx~
z8MQXjg9-A5NALHzRM~6~>X#K(jbMe%<{Z-&t+wYsXlN29sJS3f7(vVug<%-n^lQ$q
zPbX|(8*yE0eB%o`g`5tdc|~_|jO`_g1hCN8MGjb3Y^5M214tB26zpPg@fJ$d$Mo_C
zFJW>fA9v}Bn%PYrI@Ilh#RP!o#|KF?$-&|#R59&&VNvCGa64OmA*iw#BMLn^5NXvH
zx-w5R+x5ZbmE8AcVew|hhA`3IT@{Xmc40CoR1^x$Y0W_9udHfRVU;;7j+zJbaMjBd
zN+C?e^_0|;GA@Fnd@);Gq+^JIwcAeE&c;fJNpkPvW8-4dLjHh+5yraRN}}SwM<dO1
zKJd~f@qNuY;ihxZ2j;dO+^98Q<gbCoq;JvE^5)54A=DP~IBPOYaw<P;t%V=K=3=^w
z1=Z3a6oe@%p-71^NRx&VS-P7Qh+OOqZd_IKIEOvHkX!L{GCq8ZQWI_qZMEggvvmtg
z7hF&c^UC1CWbI|4)QJL!wZVbNDk7DauvR{Ck#MATM8pXM<DpMmbm4vLCbJ%W=j>L%
z;)0gTBe9vN)DFIyHM==Wc5w8(@{6^)tTDoFV~krupFYZxX8pl$eXeS%my&@1eya;z
zURpYwj@-m%hlK<TJ6YH<nDaIGlw<H99kOtJT}D{>&p>KWWSQF|^Au1P{X6VBB_D9F
zf=duz+>ZC|?p5aN5NDHxX>0qFZ;G(A41(fqqxr^|96K}dlqtf5L(@()^bZ2v!mC+|
z8^oILTS;C^i`YSw8tg?Dw4s!}x9?f$|906bUciOsx(*O?=g(~9r+-+ci)$mS_})VP
zZOa1@drs`LZ<D1>F<U)m>?Q<tunnN$bhHzLa#2U4+w%xP9Zy-j;GL;N9=?UT#I(b7
zPeSwrEaVHjE-VKE-n_VrSGOifF_#w+=&VdHTpYwbUknOT2c2%+(e=UgA-|Phg>YxO
z{0z#7I2I(BeeCQv1shiuK8JYEn%wj{89IOv1-uHRai9x|Gu*Al>nz^-{D_$`o`Bo%
zONJQSiNFKIl0on7&fEYCr=5MEiiXdu|L(yV>t<iX<^*@g@Gz>YD92=12-^};xb&b5
zdgAu&yD-mgIPJ^T0e9huov+o!@9Y|;qY@EtqgUr3YUeflIed2nk&-M^;a?n~<7V08
zl;ojS3v_5Qf=|}bGYV7*uT&mSMmIfT>L(2Ixv~nsyn4lRe7w23RXtH+g|dV$2tG_)
zfd%rYA-$kW-=n@6fXmfj^#E-~mU$T(x&rX$JyQPAsq^~w>rHh9eq7;aRon@fdd}A#
zO>V`rr<`ux?$$J8+;VeWLOjQq0WacZ2T^P&b_iV!&K0Eh3T?zkedMkLi3GHeYWSGA
zIR|NX4bHT>o62bJ@?%865HBFr4BlA=7S+69!vKdgmLBs<JF29^eV4c+Tr)>g6ENEk
z<`26g)o+r>HFa<slqs3i6%%wpC0RDTY+wN3TUwe`(@ILTiJ9)jV!=V4`ZBk~hqU0j
zUQFk@2wie=wBueCz#nfc`Q?slt_Q$3!Vx~5o8-FYm+di}^_j8kBKQ#xGD71U2W$em
z$1zKc@Q;L9bQLi<+n^#xe;8O{;qAN?M4z=qYboL)vI|EMnJ)~z!g9Xx89Eu0qixH*
z*0;!HD?FVn*9k!%Pn|z-^GLj{RTTGiRBR%yWJF+k<#wR=F>iK1sOr0&NjzQ<i+^m*
zSMAnO-%O&=-m>x+B0jHQW77y1cx-*7R30nJ6dj(zo&9lHQ*Qr={p~~igxd6IJ@8`R
zbet)aJ#v>&$i#`@*EL^g7Hx9b^)PMx4K?;mhJpw%-T*M~*=AGTcVwlC5r&4Xv=3E%
z0LZML`*x{AWne=!3vusmb@C^cAOEO%`=VOlTQ(QccNT@DBW)$5$(t*9^s84`nAbEH
z#@7{DZixAE4ngO}n4fVze%h!2vA+V78D{jAX}N+}YFl>NJJ$<cilKTXCndPPTfav@
z-FlS)@-a#B%NL<t*7HZH>I_>-d=t~g1Pax?QI?Fj8U5n2$7;WmD;6#v3F{AUWAG?(
zU*O3f&1K!o%B>8RDDDu}%&NMvYSz)mPhZ%pc{+ubD!KXlllAvXIe(2M8!_X7<s)rs
zN^#r|!FQ@`e2l58)A1tQPtVdS**7)-_oCi)S_o5VLww8gt-89qo~rx0Yy>m^g#J=x
zye*X++qDUOVrZ1`(WvRO^J7?d<`Ih)jC~?w7wPP)5YezV=1Tm~VW=AO@Ij%f&EZkm
z3^VCRTk&~6=!yg;XC5XrB~<nzxi<X-rd-)MoEC?9<;0Z2^p&A*&uD66UKCg<Gbg53
zw^*=Uo20n}6^lkhY?060zfj2qd||=R$<D^D?^#%nc)`lJf(9~rol&d^GV~F<;h~^_
z9>TR2e|gb$uKh|SD4TXRCUiYUoHSe`9VG+13R-S|s6=&H>FcnK*jB%a-n6cu>kQTI
z)JIR<LxeVVfjS~5Ts=yqB{<(g-YjELNTyN-fF%Rj&?ZbXQxRi}<;$kX2vkjQMr6DD
zK>HJ1@an*H>jN5kTapL?9D}kl^lg7w$rI-keogn}@YaFCBI^b%T?CXOlSH*wIbn~E
z%Z#p__bw7McbaHzd?QJhr5VzZQgMov^x{1-y748-B;KxHa5jjSB{xnx`x1m|_+vwJ
z`jbzwPTE~OK6yXJbvxwic_3WmU?{r*koCQ<nQ>8LQ%VJ8OoWxk5?Rb2l_*`ZClqUw
z4>;)>YaM;GVtYfX92iJW0!1=sI+Ei`Gh?T+%rLE`xZ<3cNl6^YqELjeETQvG^@u$l
zRpb^Myb~;(gX7t>Yb8K$c*@tHmQ5hsGBnDl1_dpR@}&l#hlYf3HmkMd54PMGNurgt
z<~DQ7yXe4N!3uUEnr7Hj;OWJTVD&1pgB@X<C4;8FNlmQH&s!C66X$3u$7^Sdr)fn?
zE1H_VzB>-F7^WU&ljthDE~cWPqM#!s=Vs&<1|C(LS*W^&T&iQ76Y4}OByM7La7aK!
zMa4i*T^3p?O(oCN8$S4@Ksq5*iEV!EvS&W((Q<3M{Uy)HWp8j|x4p`uS+zOK5cBuP
z;eG)6_o8FOYnRe7Ql^ls2RK-v=1ZOfXF4)2L5d(4?~r#Q*9_WI>ef~w!xu^T8i56|
zJZ`r=^>C44(UJDs4^~wHv}Cpar?sz)iYwc;#tH837Tnz(g1fuByL*5T+$~secXuba
zTX1)mU|*%X@4elfe(&8MUkwK1)MEQy`xJHNT5~D{R<VX75pBK-KB-tCZW~}=(FKnC
zX{$Wuw@3QM%@805OcUVCxJxdZ_5iI4d*N5Fo19TIPk?P_HZ{G~Cr@87G3~5e08hPN
z%yb7PQkL{A&h69GpN@E46>kXufA2RfE=)X^^EL0v9vs=sI4S8+p`$~fgnk+$M`+JD
zgHr?@hnjl|#kcw8Yfgu(;)4F!p*uWGQ)=!J^X@J!IP6q&!b--X?UX5(gH*sE#AAQK
z1BvNlK&8R*L^=CMnSs$dL&|P2A>SW)bC=)4IA_c`eSDrKnRskorFkHwvS|Fnqu1>`
z>_v~RR`wL?UOhireI%3Zq;04<9tmr0nXt!qehn(2g2aq4_ckO2$=V=(Xi}$ZN><7Y
z{O~2$A~W>8OL-;&tLl$T;(U#J|IHqA3T%%NJ7fW*d%4#SjG2vc@h#m^YxH=ce(MvX
zW8PT_nK$J)l-!$RPTEog$2u{J;o}UeytozFcDqStNZ$egX#t?I@9A@ija0|FoGx#~
zVSL*cO}Y3fTnZtn%0(BTl+IdoM*yl6M(Z^c+`N=3@tDam=+P;{SEUzJRWfRob@dd+
zDy~{3O#4fDE-(36E3<M1a9d?4<$*5wC7R!PKc<VLfUNURf3w@`K+gV_sM0v{;bhbC
zhi?)mu#M>j8unYC&BnHVbJypRIpL?2SPISk)G{LZYK%Snlf%GWS{_?`Y2%k@(GqV3
z!cQd<2lDl%4ZFzP>ZC)jrJf9J+|M^q*S^Rz!HKr+_+RcHtr#|IooFZQB&w0-tHC$4
zXPn^Sh>gtoTn%S$I>}msKHPMMweJ?JG*olEYu$WQ7t1*G=E+iLyW)Suc-QfDLa%pC
zQ3n&o$aX8)f$;9Wi)U2dll`I#lGqjqlwKnI4EbZq62hRCI|0fe8AMe-@nTw*<)qJ0
z*J<TbauAG9aY;w*Kuls<-q^TovT>2qi~=^wRFV04jb>}b*{M$TOH~iKSR7*9Vf32e
z-J|w^9+WemMe$nmXpz&F%Y`p#$uoSJ8}Z@mGL^bgl19?KKQIDz!O;rLQz^gIVdqCa
z1AmPhB44#Yf@Sd#Dwo&yrhP&4r?TPq<8!$;ZFM{l&a33s!Y-mK7&d$<%ZXGGk?|DB
zy)|qk18e!O<*VN#uxKmB*2_K~8mp#a-y9lmy3z%t_v`k>n{P_Q%Q-uADf9U5Mu`%k
zZ6=vpw701;7ir_6AcjQ|zG2UeafrEls+p>ny(P3G2zR5cy?8!^4thPA?n$lQQr{dA
z&(hdhR2)AxAY!eM_Iz8wmb=x-3iMQz6J=-a0bo<OhU-?+@V8uu#|@*UIh_@KldFVi
zbe=sXRYCPN3wmnc1pF08?yqeHRv&&0K3MH{w&p?fgj-ct5&cNOo|W2T8@%zNpl~=h
zfU4UDh4v)O<4A|?Bq4jVc%Y@Bq^Eb2?g)E~&ZBpzAtVG}f;!Hy=2KM-VG%u4S%hg3
zRkJEb8;c}Qm*zd7p$uJdX`4}q@@iJ0e8f4~9a@Qr?U+CN{6*8E2jyd%mq=Ke`MWNH
zt8O`ln)oN~h)*z);Qjr(1;o^b9j8~B^-6e{UkD>*pvN=|NlYvIiKGw=!jD<i1NWDn
z-mnrh7bk@xkzANp!Mw^|QuDF=)Gy1V&z+G4-pi2QlYw}z#~|{bH&ng8-Zi|wPP*!O
zQAzkoTPURIJVABU8ax|su4KeTm=ZC?jei~<S45IZ(~J=q+H$B@b9dNK<~cpBS8wum
z$N0QX-j4SgnMH<<hiu2YS37^5a+@KIJd-$`bc2KvG9@ACU}RAoZk{8kmE}TLOkJ9_
z=+Q{f3APZrhVWf0-~IK)&2y{V{Db$4^nGTnS%P3@+#RA)!qWFM>uNa|Gba%kR4BK3
z^QJ^sv`f`@;}+DXcQKPgL@wGXib{&Q%JPcZbd>Dqs@aZv%4K9UALtP7+P2;vzemXI
zr;*i{=YKz-Vk9`W(NbTZl-H}Azo>mVJ@xS+!s~#a!(k=pckTQzI{2xFMR?8VW9{UH
z<XM#(EB-_V>P`TL-_AJ*?cG)us&encCUA=U&}a37HW!OS>QiZ(Jn_xu5!leNw&;^d
znnnUn8d-a)LaxRST1B)&Vw@DbI*Cai_4+G6HOaU~2ineIsr(Rt6akG(MB?&VqPYo=
zTQ&Sn2ny2DeTDZ$k%V4WG}REGu8L=)ms34yK~YE;^nq(O-1oV@dQXhfh+uzW3Cwhj
zUmuI-#I5G^<pq1wK~@K3`GC-<@kQ(Mfs;?oAPua;mEzItF>n6Rwm~pn4&6s458P#t
z?*a?Dxws`7KRf#9sb$=iolj^2vq}88QYF<kAyR1iOa02-V-O)DE?K$@FYG<oxzeOf
zi)Fs<-aCl`$#-tSBHVR-Y!MH7gVjR2fzggKsbOtJGBQ{FLeI_b;+ZKS9pQ#3#Nfn)
z-F%TsW^qm%KgjLeJeJi+9|Ke1JnD)#D-OTRIkuNLF8YGrY(#TcM~ibBI9G8Pv>F?j
zct$F$KMl4oc62pmij&5&3(>Sr%I@Hitn|K{;G`QK-%)<H_<UO(U9Ex6RmV^do#}cZ
zQe9jy-Sv*2c`jAbvfvBbz-cve2%mf&{Cw0rNu7U;WTTNoY;i+PTSr=%h;*aE=Ak-v
zwgTjmjW)#TRl254gTz?dy3lE=eKO424EBry*tGdvGo?Gtt8Or*d)#~lnLj#7M0Hsw
zVb*9-|DE(|+)TU29&AwVHY*Z-D1X;DZlY4ATHr|EfwAaP)psx0kwfOCU97o5LgO7s
zg<2q<CUtdoWGi+|@+JZ*ucPB-n3G!n0oVhYXE&5eB=p!eS{KWyDu!O~!5_nOS@`Xc
zs31h3I7vVR6J03l_PsNgO;6__=XLo-B^p~1811##6XAx0U2KsyA_X_lA&dpy%*&q*
zuX^g&Jg^gTzRg)Ub1t`y;;K|&Gq!G5bftGGXJFS*7emY=Uh4Ed;m&g)RcnoS4jbzZ
zatA?#ws1p+8h<DMYVSt#IR2z=HaV&9cHfo#!hL1fpdpHQ24ST=TpD_Y*#85`&MctW
z=T-Oy&1u2UK3YWGnT6)0=)Sm0*P>VeQ!#de9w{NYpb-4yk8*w*A8VXJXrtGOavOxW
zu@UjrYqo`BLIBVIPzFYPh~*h@W1PyQTCJp`JSwz&$l3SLdO-|R{Bj64dFi7sc*56J
z*PhYfd>_Ns%8_}jzIE%EGcrHT$S~Y((jMPVko6qlskLs=%i0L)B+g?indA>ITUnx#
zsgm}S77oX%f842mI@j?uW?;Q#y^XMxRZX~wjg3Mt5%;c6@d*ZZi7odHn7XP{M-3N}
zxe{A{Ez&Z_bXm}(t7qD{%HX{*5F&`}idt@IaPskLd?FvflZk7xZ+yFjV_3gva<ygS
z&ea<@1W&=@{t>|AJvro9+C9QPLsFU(F9$~8dEvVnbbld{WJ5jL2E4)Dt&+~&%1y&X
zH0jrmOwR+qDPbP&@;JF1Amao4c43@$=%eFk)w48oOu0^+5+$H{Yjn-()LDP2iNJ`}
zC}_$LG_+_pgfP=-2a7X2F5}MX)n49wc9Tk<1>fZkM&n8Kw)bFE>D9ptQ^7QKv#W1q
zoq1pUT}2A<OH>u9iSEr85dx2sFF>XV*5N4J4oA@)gG${VH8I=ExKUlf@9<>u)J)EX
z!e^M7!4DRC-~oAUKJ7Vpj6HgC8j5pVnW}|}dj%Fs;es%BpU=;1Yn*l0<^w!%?n(oL
zNP&SZE8Ey#Pba5m+8jTC?rR<(8WP_03Gh6Ipz~SHCYtukb|;&+OXtB4<K4o^ZvYij
z(-2+Uv_E%tUz@8xAca?r9~-;-DKJiBNCkIzPH#Ob!R2EW=OL1L1iExx{2*F@@;q6P
zYEB8z23|_Nfva3tV@7$i<27n@sXf1H(&kBT=Z<Sn%m^uJJC%vMmg<9QBkHnvbNT$n
z9?<@hZnI_jC8TbL#eD_}+B#jst*&>_Pw64xq5r@J0+NT^R2VkCgJf(EjvO61dQ|f4
zGg$Qyvy+UNw5GD7B(7l;Rb>|lWs$kMveV-#=d~@5-WF!Q&CF1=r++%izJbB|WT|x6
z(9tO=HiiK{e-a%v1trC(9aUqJGVy?A7(Wr7fyE0q6cu|e=BoQ32fU#z`#X1gqykO{
z$9JY^fkk5$OHR(PzGJq-x^FiIgEluGo-19V8O{$b`!*0I^z{wRZ#)Y$CLQxi4|!*!
zmlIvO(V+6DDBvF{5P}J~YuNgdM-in`Ic%G^NA`K#_L<cVf<2A}88jYt(Z)wz{U+xb
zKBwRmg1Vi(gVI2yl*#Q3vy?i5H3@dp%C&5ZmRlmdUe1%p*6bw>D9n>a3XAQh5JJ#}
zc|})6A))p62s&a`z?%lMiX+PYh~(>W?R+|1s?>4S#IRuVGQ|lg#teqi74Fr00&SWS
zVb*&x+=F2(L~GJadp`Zes+!u@YbBRAqAvx(lP6RkZm%Z;XM+@xulF^+N*aiXV}hL9
z#J9^NAZD=rCL9IJ2U6V}=_Vj1ngAMo%g;M`F5ZVt^qKU>mTz6=()o5RKV89=vVUJA
zYYh`RV|VpcjIf%}mo6&zL-CZyZ{wZ%x)I8zVHDab#stVLG8gM+!|FX&AM?LXp>sMI
zfKjNIt)g|lGT^t)qeP3Uk8Z%p4Ktec1Q+rna<sQyqR_mHo|qGnY|($k$m(uWf|VUC
zTv~yHykt7bz;=<2Rn|?Xld+WQjQ)~y+@CD<Niu>OCeoN8AaE)j6GeL8p<0AQJPF3T
zD#H#<S&!cWYaXc|Ddw;x{w))<zq~<Bu7$1ln>%b3={rjFmG39ai_p<aK9V6~bkUzw
zzr`Rh-+!|q1Uszl^uJ!{STI|SeRuA+zBc1zH4=Y&Ze+%DJ66uTaEtrgtpqaurmuGA
zp(Aw89F&<Ebl&J$$@>KhV~+%hPs<+*-5rN^(;T#xcl0e={Gy*c8Me@~A~q0yB?+mk
za&L8!EyW5`3~u!BU@u$1qt4E||Ewhu*+*5uPyqz=T*flgV;AFf#tFlOc3%ycPfT!y
zBj&RmwWBM9MDz7G)LVX_X>o9-e}FlEhTi@+!L0v7y#DVvCm>;imI)Bd$_YquW8>iX
z2b`0G<1aYp&$s`<IT-=({xP7Hk(u+q#yNkYoRa?w&IyQc{VlT9%EbBKQLcdN-$PP=
zkNo~0k<Xvuu76;jfY{gHVbA|Ba3>%L*2Kx#0uW*QTU`2Y1N%>e`rjjC|AT`5D@OKD
z_~*Yt&tHRNe@i(06YTk?Owa!w_GD+|<oq-2>EWTRw9s-F70})&Tpl<jVr>X%rDayC
zQtHx&g_a6wqPXV)9}@!>Cr}f|5CR55I(iKo81@Ned`^?RPSsMJ_mnfS;l6B4Bjd@3
z`ryU0(`(}V)xqxq()j%4%*}o6-eV07-GDhnzgnGnwI?qKCAqmz401sI?JdkfpAn{j
z!LHgZH^r}vz^%^Yf%zRn5S;0vG9BV-jghx$Z-iY>f<`c0M7?ci;U%aW#soq#jYbOz
z8yzhX4-1XO=22qlJPoX**29kxp}~#5i^-Ib^KE{`z&yk4+#sVk_>ba{WaM-i-seKe
z8<RUlUBPe9OIh=;Zg)_Di=DIsR$eDj9D@&;P_4-EcckYsOUc+xdYC&2t|tONE`z#5
zg))SDwR?0(R*Apo@#ONdd$%}TLTWAZ-OSO<;p;T;=<k-yEfG{|JPr4_97Ap4Z6Q_%
zxF_4cUn7A>iFk*x<<pa>F5QH5))yKKd5N?sK||CQcG{=dlfEcOL*o5T+>moq>V#Ak
zu{A8Q&(;vFI&@LWTl$1#9`Px>J{aW^%E4b<9G7$+<r)go5LggJDLh1kmoaitL<GeS
zk+ILz@crfc>c|wCMWj0sWX8}9M5k~Mu!s#nOfD2gY!y*pIAqx(C4kSqaMhr-YGS3V
zrns@bI<nz~yE*724_zLA7Aq~6y1+Ko(<N=8Zf2(Vuz994)xrJaUF4yiNT-9--j`Gt
zyK$fELJi+q{0Uv&r;hJLtxQh{r{7KpMm6~Mtz<FxUsqF|NcQK)eHiK8bw}E|Jtmrw
z&k*Tj3b$3R=`LO;p8X$pul<}-w&l+lYPw9iAHkE++q|ivk4&RNfnaWqOx7Bz26#tt
z`7_HnPWYyo*qe(<x%h~dqSum*A4=SX4vY%Cl_Dd>bS!+s^?_vTL*Cc8g)>$#;D>n-
z67jAG%fJ{QvBpA0aK;3}#fZT*FsEwk8*pH#>qQC;D!BG*W114TyI_%J2Ys}e-591a
zqRy6E5IIH5)|af8i`$Hsir8>K*^Q@XEs>jHi1gg_b6A-wx_N1RjHYa!SHh&bMZKIZ
z7RuB$0&))0-60XcmOP~yyBW_XC&A7N>~+9?3k#|V-tkaL#U%xfrJ?0QT_WaVzqsl)
z3nv#qLr|9%El-1hTlh@(t~k9JEw_^x*f@t(yAHa!(pM{WJ28j^Bb{=;?S@z$PP$-u
z9GC;ox9bH)b8$}vA4-HLCW#0}Z6Byu(@>@hi+NXpkP04C%(m(a%zEgPEnf|$-Oi<H
z6hMJ+G^HPYIZAMMu`njh?5)k)8{bUXBF3U&8f84e)2hH&n2zm=mKEeo)wRK;PF*%o
za58HRWeHP<z-(2GO<7SxTS;Q2v#gxSB_jpFMinlv+<R71h~S2IAA=$L0CDPWf}U&+
z5-$Z|RVj)<>XS6g$Qq0}L3M{Hke9VSSAOvbHO0b>Rnr|kk(S$x)vb5cFtvSn+Q3{K
zD?=%cdL)0>G{K_$AejAR8{nT{0$TSD%w@sWtT%s<A)QN*F(l&wM=^SOK|7*pyNUU2
zB353?z{Q-;+#6Cq=s_3Gt{mF7eD@mh(IG&*GW2;kH5iuILX^K6e^3-eM?4gH<l9{n
z74L$m;ydzR83*mA21*mk0~!*B$)>M+aoHF~^VRHk9ps%l2A+Uw(gbN)l@)&h%7%lx
z=L==gcDA6{bw}tVn?|)-GrPqX?KRhcVZQ$KJxC$t+4_r*1mCAU0Tb|M6%tC-_3TZm
z5naqF1zPS+pu)FzHXFnoR{Qq^%|FOn9$~~NLgsnNXl7_LlLZf1!Lu<ZZ9-~D0>c@g
z-9MO&LodIQYLBxxrO~;<uJX5o%j~Xr<xuizx#2n-nr~@UFARIn4FB-?Ohgo+!-nA+
z7X#r}r`zg&?YMuxfpH-`O0odc+9^;5e}kT_P#@z>LqFoH^LmOrtV#x_lY*16x0Q>s
zzBcrZV29uFTn7dbc(N|rB@6%Z6DN%Z=z$TkwzO4!1t3yOopnNgfC5LBA<N<UDED@-
z%AhqrED}9uDXY?#(L2YsO3%N_XQA$MCZ{u3LXzT{m`6@Yw5hJVV&tjoO#&#g6O)O?
zumw^a1tR#?C#A7i8A|ppT5MTvxASzXF(j`?W~{K#{zToPbHf*#&tq-=Sq_F0>y0nS
zldYCqQQm5W^ZvHjAWa$ADv2K?*(T@Y6GSBW(4^*z&FgUA$D|dswLu67LuOzkifT8c
zRggJtwl<)^30-}ePAUFwFcxenUf?bcPixFooO*$UPk2mQ7MgeR+$?WPd~ePysgi7w
zB3+-sF(aR?HUjG%KU72m>>OF#mc!bQjE|Y#)~j`al0Vz>KJ=5$j6J8+WgP=Zi)z*;
zy#SZwZm~Rv1f%iziyskL4=lWEYMiYkhFupOeVVgIq1EK1efQhOm8|4TxO9tXxL4zx
zw9Qnw)ZD!}CMbr2Ug@{K0lCWv_Zq735DhIGw>#`rdoz59X&d*5c+mBl#JCY_lL`<D
ze`)G5IV#B!Ik21e7!!CEw1XX&Xt3gSg-PUr6kq&|%N8oCDym6+Av86F(9!oT97OJP
zA@r41v~r4zD!)~8@U-xG?@JpV=fDFK+x8_zSPJk~Ha7ciC@S@pSiVXx(%=}H)>WP9
z_n|W4XWSFXpqDyJzHYiqZ89DzHuoG!REXs(P3=#5IO-^M?at`13YR}i3p;v?sWNSZ
zgdJ7F=-*2nq4~hx^}@p(pBr6lVXp9Cu%!=|gCpntpo0tA5Zwt^iYI#+O-nOnzWo8c
zEp2gzh7pZAZ8}TyRSdPCX^aiqBRgVpTTdrd`r<1Z^+6~WH_Y)jg(fRhwG&uzi67>>
zqDM+B&sgQMg%!KlCSB=b$k2UM{e~9WjtQjLlY=BHvhOyGZaPx9@~P0Qye$&sY_M-y
z7M65W^(M{%0vvL?#pCK+ux3&o@kO;Y@4gO{eRUa-ww?SWrE*{X#fl&SGwZ0z&n$SB
z-4Fhp7WuG6yVTDRrgpf;aLd6lRzRd-C(T&koiUY0)Cs8Z4qc$9sD&-%<h4LZPL+;$
zdQ5WIks{g%#99!uJc3&3<gm-qgLs9KrPGx%mpl-(lys&&eA|Rgn~wbA*V-+K)&6I0
z*GZ(_q&h{N=os%@25Hk{%w2Mca182Cmb=~>USb+N+1qjPTOeL}p+pY1bQ!ezA8<eF
zzJ2YIOsT}{h{Quzu(>ki`~XQTn#*E~Cb>}&Byk7|<d2MB#Dw~Vs_*PaMA0~IUf)(M
z{X9A9*GiF&RRnzt+3FHZ)N6tKoFZO?^?Gp;mC{efD!P-vFCkW+sYYmk9<ztc%La|q
z#$S*mWV$s?h&Ipyy?rzgc6vJ<sAUhXXdlpKr3W-zhfPv8=NEOnq50hdpF%hvILUQr
z6g~lElG2}I2*^RhQsRiR4&wovnhDUa>}@9)%a#`x*D3E7U(bbrB<kvbK_C7|D)};V
z%Xs!2gsSPvKub-?!Ks1^Pi%k8ar>lqdR~s(GSWzYIaK-K)WsY$ao~>58>+lZm{F5b
zCYCg8yG98J4}E2xd?=4a?MLgz>>7UvL`Dd86*S6Y;%Y8#%)7Yw-0y9ZvUN!?pp;`l
zhE{Q7MJPrZ7BS|Hojo--D&lqN#bb}iK|lE55ENVz-|ohT_MBP;h!Mh=&=@VrVge-;
z7_AF<ShuzkI|&(Q9RL{<9X_>X2d;b*pUaACB+H^@Xcl=e@L6LO2<vG|2*v_*R}1Yw
zHg`<Tmh7fZS|ZJTrBVfAjQJ3UlA8c6p=oN_5KCP$PNlF5mA-3|awbg%E`zPzYDCOC
z2R6c#9^EEz?tm1|CIUIUgVfA}q-~sQ`1O%21e`2CF>vr=j9{vVCqxx$M;&U|iC8%v
zZ@EXhbNq)PYJu<I$8Q7t+Z6SJTTL|U(z?<OHV`V=Qvt*R_Xo8g;3y`_v*vv$LwG?-
z8?E;9N&689`0&@VyIzaVSx1<bMTt<<kF*LZt=;h0)jszCrpMBf^sl+LdukCb=DkX)
zH;r#nujYjio31NhS3}&umtpb3=S1vQwJt~SY2gKR_mYzMyD}voQxx{7Z2i@(2Dvt(
zXupjNDNs8Co*v7S<mw0HvJ}ojpF%4cWT6+5e~_NrO^}M1CJLX`Hp&poq_?`Dg8?Rv
ziFIb+l}v~sM%|`N3)%P3G|<$A$VLh22@cx}?pOiE*vN$eDI-ows>A$b<;+7pd(PAl
zS+<PCb`7sReEA(K?EvHeO;%6v=pM%Hi*v$IU<5e$uqY$ip^CqnnnguN)AcMDLFMcu
zVL+qbiEUM^SjONtq9<cH4JXLXj^))!=hQEc(d@dQ33C(5pQ{J`8ux~iMJ`b^6S~c9
zVxwc8xdsX6wjOVh@;$kkeS*;9kv|XfDC8fpr)fxcw}mS;<de=ayIGUBkq5LMvVJ=q
z`bMK76XkfSV>I0Eogra1**9uu$e1MnDXXcw%v5bGL5FZDq2BLpZY9*I*leC=1Fmsn
zQhb<}^wAqRm7K2*jnPhB@Uw-5FKFp2mUO?74%6tcGPMA_Z7WT$zkhQ;^YaI>Cg)0(
zG&GB=0Q|{JPmLI$@~?qfTd=BQ!nA`|uXrr`uh>H!izb|N?-%8EcYFGU8_b8%;A6g#
zF<E$8w$VUL9<O!=)@F|#J|RpX;9nwc=q72_lnvL^zCYf6^|<SCkh5wb6}qA}k!U%y
z!F~~tvB%7zT_z@d60mTcK=Rz`>Kt7L8R06kUmHoaRJ`|+c-$7UvNhK0N<shNQk9Z#
z&pYTQB{1r{0Rn<;M3?U}tfjnQ?w&Z>L1`sz9)8B5c?i|k9b30?K_ci7r4JhU;I<%i
zM2|oxyah(U8z{y3QQRg|ty@JNMXSctG0ctOZLQlfh_n_f&iY~E@)mdJ6MD8=?0QWS
z+P)50uk1R(8@v>~T@#R%duL}qk5em+{SQN(L1cl@Wmx}!x~QRRzOipWY490jt%^Lg
z$kQlsaXmfH(>z@Y8)`_)C#;B<$O3GbRu8*<lr632&U4@bor>n?bzNN$^LFaW+O@7z
z>FO%lZ0s&7i9?1|4<?sl8k|XHXlQeIuP&h(JloG(;FrEjIY*H<ABQTZXcg;K-n-P<
z`jWl343f13LNIrS8ULyaRX2j~UJ!qKj5%6WV##B9ZgyPDQYl`{V-@j?M$B&TsUd3G
zM>(@ZTL%(9$f@6lRZWwtB5<M`%0W$gyZV(C?i+*hh=luOtdgF(Is#q=p2s<fnVm@f
zC)Q=s*By=~u*!v=u(M|f)n2?5M#c3mQ({cILNDe-kiM4Lo*iOaZwG6>g1OxlTs4k4
z@byoKedGmSCBHUvwj~&cprV-92znB`gqnGSz02Vhd-n6aC_3vy>@00=19uLv68CJ}
zC6WbR&`B?XH0hdN*43MhwNkYZBtKweU1(%WS?<P~EGk29oczGYm^Jg>?<)t)0f8p7
zFoGRtl(kwb%bnV>3~x}N_d|wLbB<4TGaYZsXFGW2hXA8GE9=E6P(gOTz0Taw=6#KO
zu}#5M4XpQ3t-2aTuW=tcW(frM**PHJ<8zIKCR60oNyo*UCUr;D!XNTPq94PzR8nvY
zFd&7CmoTk}M!}$(<ihWp;V3_NfV&uG7q>y4pV#MbgAau&a+*r$Bs>%_jI^9-rc}$$
zFJg}Nso>~Y?|~gFMi?#2BhqXLJuP3Gb;)JZ*D`l7Ho571chpW4Bl6&HeRxA-lWI^2
zfLUP~juk7-zAK=!G(c~$gjt9~=@?~}4azBk9LI-O-^)bCq}m~fL{OsXh6PK%Yz-Ye
z!H@J|;+lAcX$u{e-dXc*Ub6&K<m9UB8B-134^yz3MFrIz+fgOVRbHtvZgsMFvdbQO
zkd)O{RJ4{>aTHckQ86-7RDsoP8V~1=qlG<!Yh3hsg#Dy9UaL3Kv?VJ=bc#W`|AFif
zo+;)_vaZNVW75Z9R8bBvkhhz#l&YdSfek3OyH+8b{no+Is5yvZ=4&MZkoJYAgF6*S
zx~|l<XVMy|kR{dFJ6Y4n>e(HApj}Q=&IZz>qp>qr{~NbxzqjR6h^;lWHYds|0_|-2
zjDt4Ut6+w@%ynE1Y`wkD7$~@0pDco8<2T<}uwI=G#&LHkTp*Eyn03mxne~jO)5;9g
zj%OTf*1vWot%6yU2)!RiH-d;qD^M#?iMUOvi<_Q~CuxnRySY!8pNHYnEU^t5tb38F
zyrg}j;&kUW_T}sj3{gk$Nae)2Vv20SNzJ`R)y<%qDMgH^AVRaRJ?&Fb3}9QCkC}^6
z(SWC<_3<T6R<0b2E3b{3j;|yebA&lQR&d?aPO%_XVh!Lbi|6u~3=f2v%HheEE&jHP
zHtY<Y{k66R6}dwm%t-ocC*26HJ34I;{_21y2hQ?r@^^WIM-;+>mbs6(F;F!%O#P_`
zv@G%8$_gFp2FVyT=!kXe(5}g_+Xq^%kC}bIQ799ZN!S+@xHz?+um%DbJRc@}@0wZ@
zF-3$NMJy!eIzp4(p-)u73dIK>&!U&1aRcOJR*UP<J;<A6d%faUM%CtR3WPuK`nK<{
zew}O}$JsC)@|^T-P1kc0;s+8lSC_PSV@Tke>I7jpuFN|bX_mJn&UBtOycIpJ`I2`#
z@-CKZiwa#HB2pnpMOmu)Axxk6i(+d;KcwS<1Qm{7Zx1%Vz6-Pb2i>9Km;m({qUd;$
zynYmGI!zG2&rJX^0%;z7%DG1K>i|Ke+-|zGkXeg1oZIq`N8!K~;lWU&_Qys+28g8z
z4$O2=Zeh39s9YL;<%Kv<@292W4dm}9t1>~BbGLeWmXA8FTm|mcLN>z@Ws0?p71fTl
z<(L#I1hflU1be+piYxQCP_yY(`pPk~<t2B^VhB_>(hX&l+t`@&EJ42WV2X5G3|3n6
zouK(GW@fokwyohk1T>A_J{>|PXde^7CVQ$!14mXy0UzIBb$}=f6l*j0+omMEZaz@K
zy{X&DfU0ttC88-JLMoy;)Tp!Iy!44`KM3i@YJDBqHc_D(?E<naiI~uu(MM8Dp6%DL
z!O>#3$H;ZP!DklMja7n&bqA-S<wy^;Q-CV2l~mH)XFA}UG98<BG$qkyuAZ6~;R`D0
zksSKCKPn9I(rj4T6<otNP!KS8gYx9a1i74`&9Kh*^3+>ukM0l8vRZ{KE9x|LGj~n`
z$#Q*G7}I2*TXv7j|E^s4B*ff;2adki0sh0-aGYsB8F+*+aC`qfaE5R3iKIzp_Nt<l
zIoM4j`9iJ?$Y)$i-$sZU4LQPeI1Gl@jDz6dp_Jv|fxVWrg1v_pb6_F1w^Qcl?4Gzw
zZe`&HJYU6W-U;7{^{JH%`sE)L{?s>1Rdk(`Uw7;~d~8J$t7@y{^C&k~LM^UY1-9jt
zvxlNS!#N-zIWtCc+&TDRSK4^nJY!w=pVKt8roY&Y%8r-M$E#J3F&ljMH3*m3j8*BW
z=m9D1_NE2W6wo>q?fYox_0WBJPgB-yX3Y^cc*2%-5FC>iWz~ZY%7T{7nMvT&ShUbc
z=Rq;8KJeY0w}Ir$cZ>EA^aA-=;i~S{vbVk<s<l`3H1P%UxfjHZt=cxL9STYtG9`jF
zWz*F|ZojKb6iAX<OE%frUw1NbDOMS8?Myq8vCeQm;8xItlD6K&q&^=yuSh#aBTWhH
z#`&AT%*LExG_N@GcjWI6)lVUOOa%4(mF@`ST$GGd1yuRX`7JfYlsORM<Jut(S+yyq
zn1herLbb`Bct|%s17||qocD6<bFT2-k2X)0K(gTWvP1L)(co|cY90+An40uB=R#Sn
z%a@E6q1PbKjcvoYG2IBMj0X)$cZ8^|25;-j&hcwDCm*b3X`x^CO)xcElb{#EWZb*4
z^n@)mVLz&ll`_-qovOOGCEYeExSJ<@A1&Km6+@7i(@pJ@iF~4iXD3&^PEp)gm?+Zo
zm(6z=Bo0?RS2QM&e;tIYLB5s2PNUEVdmpL6+&4Cb7cagC0gSIXCtkvR-E#d+@`q=d
zY#@X@Q866zV4}K;UVd>|%S5a1byDvoUryiwp+%S>NjnU4;y5%1cN4NO?FQw?WxoLM
z^$w;hxgzjqwW4-tm~Z2c_bRup^x`?pdoAR&qvRR%llxySYqebu`1fQx7R`C_en4^M
z*-_RvQuKcFB%2m#-XFf%z#V%IY>c2uq*2S=SfU?8{*<r;FG)BPer54Q@^LXG5G*ur
z!`$%X@&IV*G9%hT9JwPUB17Uf=7-5`vu{@^$iT@bj%7ZodF?orQ+Y7wwCBJ#WwM7Q
zVON~AK?(ny?PLY>9_A7m9jfWz={IfRVv_vnclEcX2M(EYaC0ZN>Z1;UN5`1dT&tsH
z-1A~zUXK0FjjXgzpYdcH@s(U^4XDmyc#(V|yNQ-dY2CBi3tGy_mT-xaOXr|F6!Rf0
z1<a_SKWQGX&^v3$MfbaGySkL6Wf=@lSgVI+xq=2@5#@yH1R=35=__d>`Ha-hyjgEC
zaKQW+;a(1<cNWC%VmHTZLhgv%yL8&-%p<>CL;D=~f>EJ!{O0D4`!Oq6=?m0*32$$7
zS32Cr^Sb7$DG^(ULx|gK*3Bi&I<tJ*_a;g*L~FZLx49pHbs1D-54ULJ^+fzbrEh)E
zpD(e}!$a&Gn68E4rFO+<c@kuLWF{}4_P--^ldM%{MYSF8rFzo@6JXJOl6EUocJz8(
zUUP(;T-SEiXgoal<WdT5j=^P3ZLqiP{R+WrKvs&OTC?f8hiR5xd)+{roJp|S>bZLs
zcD+j*FL9{v+hz#a>5c1+Atl}f%eSiyF;{X_b}XS&p^xzre*9`vT^zzn<lPp9QD78H
zid-0cOSbOu&{W|jZ(q{rin$6Rj0IXfMyVoX<d5}jc%{&idt%~k`LM^)?(Jqs-q*Q|
zf@n7e5D(|{X8g@Xz;BJ9ieDKu36VZ*Ala2%cEBzm!j2(pGxBC9Z;V8JfKh=Vs5XrA
zL@rkgCDi7=m#r?g#*Y((Ju23G0uDYdULM}B!FTulnK2!&so)+w&Y4NamH>SXuCSuo
z>@6>QseD3O{)Yix9BE?oxMCGdbgD1Jaw@aav=cntp~^#(f>kNHj^@V&v!8oP%zcez
zYWScgs|_WDE(ErE3*C+<zMy6BXm~*JfVqW$@|it9>6A>>jSSaLKn$4r&)wnfy>yvs
z4>UR=QgYL*o`r;sjfa7m^QkMnIb^vdzdiO@xnpGBp3ui2aB_DDDZMD|cFP8OHi0b*
zfK-&^DIgy0d3$+6zCWfML^yk1d;!;XXejD7L{?5>Jzgn~D1`51T<KYDoiHrRwGJfB
zoZ7lNS<~8!i@?VJ{62P~&uJx{6c)$NjENp@n;GYXj&Ie2V8D0t&i>2GyAvad@yh)b
z&u*I^#oN30NXIk0)c2`Iuj<{6Z}`>og?%S!Z<~3%F~Q7Yd~Y_S-iYm&B>bnm<Gd4T
z@*9%p*VikJ{Z<c4V<T(dg1nz%XGk*UdUHTGh<Uwh?th%}z3D)1N1xtpPoO3<;rCBg
zCY+?*IeRAC4tyT;U|u5(dxH_M3*`9~XZ~+Fll~_rt>1BGK;G-mgjxV4AOnCtii7!|
zfM({u0?mN8{{fmA{wL-nMu1-QKP1$u|3SdS!t#@k>0jBk|0|Mg^czdk?|`xOZv;vI
z&Win=C&?B-jsze^`ke#mH|nE5z+4ylpAfFcU+9f~BVqj$a{DLpvHu>qWoBn!|1)x%
z<mIfS(lIDUArT!Wnhs@Cwl|9<is}&-R^+4r2F5K<k)WtMea|eB<<Ut%&N)0@DuJ{7
zUS@fkJfC(FU6K+tX9zY-ehTCWb_-M|uT~5%)5o6qehtsQ{CM3hGqHZ$$mD$e)u;2R
zwiDNI4>quOlP5ugin2`OLDi<BiG}~p5IDWZfFQk_4?pya*rOZMdE0=AXe|^2H~i=q
zEMMz!W#SA^Fo=DD{@y-m`2GC4vW;gOtp@&D{cfjHYAThv{C=|fVyR@FP8wFZ#2?4W
zv#cSk`Tf(g9uH!=6ct4YsFGGQQe+-AX|uFwaoQF~FOPmtM{f{MZ*X#mecRKYMvl@n
zQ?+B$3rFZFXsGBYX)&Z+n^(Qi=_JX*Wco~rgBB%?kypZK47p=v+62qqyCPeK)%T_M
zaT)SnqQ{C^6S5&6_7Olq5s|4PL-pYX3WwRBhoy>uUXlzBH1p;e4v;&jIAo38*uQnz
zY`2eCh50f15~NDLKKO43wANbJ^7&lc1liv;BKTxpxc5v4e-4&DkkH4vRyRo4&6Erl
zo*9>me+XT~eel;`;R;d!{ZKonM{psA4N)wSGPryHpxJIC6OCW8s&`QccX$v&E_yCZ
zxjoJ_a`KHuNamT+j06tV-*s9RXP92Y-*-p$dSGMvM}txFgrCpR4v_%c0*(qq%P4Wd
zU2bx-ca|@A9y_n*;#W?NWuzBV$zT|!hMEXXP91iG{V@*rpzjnzz~BQsOYvBx3Ow$C
z+OBNJcli;#`{Uts?d;Ad+9YpDjLq7{F)&fC7&aOzd~c^LB^0GqT#zxX{Xu4YM~{Zj
zphrVHA0`w81|XuVqVadDoH{;nf8(PycdKvC^~^>B5r)eBq~Lh!*nhkXSHR0992Gy?
zwYvB4{YXGd=|S@bdoIVWx)Bt4JSbwL)P5<l-N<U%HL){8@YehMs+kAq9WOjPiR0BI
zF&4&0d%>s=Xp12863P44qu=YKYVcyvKJ7KU0&_IFr5&|++dh*9Ss@2fJSiuD5~Ohh
z>%kxpbgua|91CDR1T35}gU<qMp~kf5Bz5STSc%%?H`II@`8GT;xpVv}UQQTl+gI4m
zwaoyrWP7DeR}Cn}Ch~nEJkS`|5gN-#|MqcSiRxXms|gE|BOi}1ZTLBM@HH6p4G4Q*
zDS}tKAR-v;9YvC~wT+!=4<-9Vr_*WJ^TC;u@@C2&(7}6z1~JI@o)NF5f~Z@U1Q9}?
zO1D#8>U3aex=vJoT=0X=aW!(8%$;T2?v`_stQ3(fZ6Xtr-GAuwYLxu=R)Iv;1v=pH
zAVmNfRa*(8yX*3H;0Wpsb&QLjW}1Pnsa$1b<l5Z4Y?vQ_#1YWjA471dnr9ojWMM`l
zq?D=xEB&=iWya-M|DGK~#Pe+&4m%R!-B?}c6uAF4DIZ`v2fHgnp{#LyBQw#+slM1_
z``t*=j+C+ffpJf%!oh)t<>NpXAdw11f?lXIsx>y2b@i7!>^K5n+nMo`E7bP<oFz~m
zIs_M-SA^~HNwld{)f_tCAt-^MvHgqG0JIbv*1c)sn<wL4Dot2rV}%IIji8zHE*l12
zQo&$X-k8{DxGi*-b9Jp90=23}_R`!FDFyhajp8O%>rTQX>UUB85H2%Y8_R^A*k9un
zG4KwWUO+SM>8HAe$0Ifvmel6Risue@)3}5q#AeMeH2k4XWQCbkE0L4QwKh?1f?rAc
z5xQ(3*z{dAF(ZBQaz@48uWEcQ)WYv?sa?<fu%!pJNtssxY?j$ek8wr~lQ-A~(@sy?
z3bUHzsV&}Qbn%HE6Yqfcg-kncHK?M6`uk^scc9rh9i;?7dYKE51fkRgo4p&v9s=|4
ziw9H=efDBxQK#pz0)TfCOmj$Y6gi(MIm1-y8Q~*jf|;gBnN6OD-9?A=9H$O0a1^UL
zKCi)N^v^q{<6+{74Ys#)c2JMdSxdpL2QLx4zZ72r;SiQrP|&qyNe`G5T6oMOxwvI~
zz}~g6Z~lI(D(BdeXz;m}CiH7Lr$AV+Igz9=eHm|to5Rt8;KKz*!m~*zxN^LAzH?TN
zm$~20UERBO=t}4xcs8urU~LJJrsZ0qSK`!Gl5^7uh8p*mwV@sSt^wFwZf$lc&1%Zr
zPZu1aGOsl7<4y6T9OoB|0uZC{dG+&x+-0)QQex5HUF=UU>laAl?SZ|)JAjjAPkEYs
zPXYRYMv(`otEdO~A*I$GJJz+ccOO%O!HZPv%W7$k%khfS*%U=XI2}JzSF<hpcHFPT
zS{yCjPW6%-HZ6a?%020<GT4LfXRVckzViU7AjE_~l5y5rD1lOjfDRZanW6+>Y1FWu
z&7<a1Mn=>4Mgpx9JIp|e1*+dlG*#L$HnksMSHU@FO*jgls4&UBO1VkvvCE}V7({P#
z!=~&YxMK9$u0(IVz)9ol^=w0^>-_7kab+PE1Nt>Y%u=modGjK|>z6o&6w5Q#v?iTd
z;a?vBDTPh}*5rhZ2~pZF)*Gd@`$b>Ya*~Jy8rU^p*+R!`3(7npBOC2xYHj`8Sf*JU
z8u{^fBNV52>UNslm^xGWzI(k)FuodTXX+DJ$XUPQ+V)i`);u!E#x!>uD}YWLL!H3j
z`Pcr~lrDLRKL|B50JlAMHL9i^lPuYu;CP0O0nLn`GC38cj-w?hkq0K6(yqg`5u2#M
z8u2*4s_yX9E%>|yPg@iTMWE{PIRpRoBH>-Rzfz#Ccr7xjQD^r4tG}+Ew&Dus%|iS|
zfRs}1*%#s1vnOf-6TgLV&I?Xu-A_TC0#W+6rq!nOgpKHMUo2eN!G9Fl(t9`D?ptjn
z*^5j!gYt%d5vQIER9jo}+zvYKJ@2FzQfyM6eA^XYkOQu%m(U_nMUNm;R*=X!66Fl%
z48PJ^ihjzji46MUo2BDMX6rA5=H2hLc?PXvsbNZoh)whAS^4esQellN8DloKyrfFI
zLSZiHMlI6UW0$~wJM4h!IR=Kat%Z+{*qzt@FsHcI-x_+6MqO?|c8Nw7r%Iod#pX0N
zsi9X?hualx=ngf4^zjpK9Qe)_rig+r&T}rBDV~L;6l?~kJ18B8-kk&TTc-x&(`UlW
zL7?;%MYScxdHJw(-23N|kQFVm{gR@wM=J0l;2-`(x#?LS&+lXGbUmNEQrxe<Ptc$6
zwPY*Rv8$tjj2Sz5ndPm(W#B8clN`W;#J%+{tb2Qsj0PXF9g#-A!L&r#!f1D$I&<@m
zL%cVBay!%~!?)EEdmT}8Bj{-Aq{ICbmZtgf>7sk^4Qt#?2`rSDwKW2cb3{=xi99J0
zq(*+8_wIIw{9K_^hP#)*%eD_w2~&#u81AE&1^FZ*><bwW;6o856#{QZ-b77sIgN$I
zF81BHDYH$7ObZBC@27a#!qV?^hG3dRlbgZ<N6w2bY#yU*ly1ikdsu-H*iWIaJeQZd
zov<6DGv<>kjOQ%M??)ES`$AI$hwRFrty<*Zoqc>?*M>O;UU^5bvZ8|KV#tf=@@U`3
zYnHR70$Wr+fWm!==?uB5Z(7xMd&aO&bKuWcW&($;*ugX74Ps6XQJ5LgF}JBPMWF?U
z1_*H;;NhIKb5h3Dl7l5er#A5rpC4M=ou3t-mVGs3`!W>q{wnfB@nmBwlBK){N8Gn+
zLrW{qRo(||JXC^r3I(4j`1NZz|Iw-$q-XYGwbhhmxk4!YYBcXKn_f#r%o?)QP*Z9D
zks{aZyyOdhYZN0F4ZIW6n@eA3Y1az}@Iv%W$epXLH6_wjB+d`b1YSzv?7Z!Vv6SzT
z3gZ{I97VxSU>4Lg=vZre4J|&va(R^@jvfv*j<IL%P5$lZDA^YsK;*e~%Tb$FIWY&e
zkVcMMpc?9^s&_IsZhrS)C^luMc=MZ4!Y|erHXW^(r?{=EXI<0BObh3rYo`tq=2FVI
zR`pxy4{kpm-x;xZ>hQU}dk6`d(=mY#QPCn<*7(wREW?s_EjELNNCathpIlJs1H)Ud
z?hKF4bY>&g?BhZ61AnkP8y^z16770HzP1UBH}I6uYpi0*EWR3o#)fZ|pV8y^JM)Xb
z^-VgfCsbNu^p|WJ#a7wQ_|G1u5;wEO#h2g6qi=zj)a?cqS(Z?hAr#Z0F<BW5CO)LG
zWEu^^`#NjxTo1<KX)d}9&h#7jx$PSSbVfv|UQR~6Njq+u;`=U-P^&G7djq)(qiVbE
zqxq=?buN&7wmE)&vA?Ad@sSTgy6$_Tar1Pif`4x`GKu}j{79h{xQDZ*nq1mv>BCA`
z&n5>tF2uO{z-a5;xh1Bf<y~cYQ%b$weWT}4n}Tt}sM<PXFq+Snhit=DM3j#tIx#75
ze=8ANpi9P%eZrO_UBI3WB(c)w65vb00V}Hf(k&28e{%KSOPG%TVu@$i)%zd?ckWIy
z6t#C(L-$;6On3?uFVw5IHzh5yF5H2OVX#a!6b^IvD5fQk1osSc_*8a1O+!hZc;tKe
z5DLF2-L}TJ=4#e`=dQ%O3tNJ+aO@T2^GdF8dJ}@a(gsup&!unq6cU}l%5hs^HD+Jk
z-U{~}`t9u0N?Zg!ta!WRXwfjjCM#~jtf6m^SI>V2rJtj#;Xak6^P`ItX3q?aaIpGL
z>eoe{49E`D>YhIeT+R4?#WU>f2o+7Y?>n4F?P6sTrWLrBK=?(n4Am;KX_#wS>%4iw
zx$|3SI<88H$tU&rr;;eY+wOY?BN1nC-HjhlU>yfU9CpvsDumY2X|VSmvRW61mf&p3
zV^+7C-|ONXn1=fghSwKK1Chb!CF!*LgSgM69TgxD_+_r(KaNu20Ab1<^uM(Usin~x
z7BT>@1*T$f*aJa;6$KWqbcF!KQV$q=IAk$CM?4+#gU1~mIa-LjxasY`u7Rp#B18Mh
z%GXy}9T`ZFRQk+ELaqeWnxXW)fsBP02L1X}fc5VrTmMot`43aCx{UO{XnGkL*;)Vn
zJ(h>x9q_#w5Wr1nXkunz%S(RV+DT4mVa!Xe#wx=gV=ruCZt=m>(L~8pR@unY%81jL
zoSzSxhu;7o-ef}SZeUMqYGDnat#Tp+@GA2X3oA;C5&taU&gE`nZvzlkA#}H~wsqoi
z=OzEG3K!t|r<tCd@V6q)R=niuGV+AZc6QcQ7S4oBbewdIw2aI&gr<%F@@F?YM=L@`
zIyQ1Zla9uwT#5jRsoxs}yyGP|cXqbt0;G|;xzV{X)7d$i(F3BZIq4ag=$V*k0VQai
zJZzl}+-Yr{NC5r)HV_N-e^;}0qWf)3bO2grdJA=WMmh%ie|7ZpVaHF|5I{^h;m?i@
z4DDQ;d5MYtXvO|dz5k^dz#jnZFaxFsxZ(mxV;Q>`nK<&2i_1$BiksUxIse`)AtM7F
z0}~x1IsG3K`#<^vEapEC8?Xa^jGG5ghD!z@p<(JF0w5COV`5-pp=DsAW#CX|V&-Du
z<YHpd<e~ptA;3lfY6<^FJ@$Xp`ct7l)v|L`2J9T4nWLSlDWNOC4}LBfBOMbn9mDUP
z{Z{RdQatoOm-0_j{VykPU@s%{zfa%B=BGpbEXO5cXXIi7VEC30;U#x*u`uRhHe@$o
zXEo%cH8nBiq-A6T`~s*~Fwim?axyR)8JU<Gvzz?4`(SMJ?{V0>I9mVaa>hpV0K)H|
zT{;1_f)OwfV<Rq8J4YJ>XMoe&+XGna4Svf_0C)sB9}nP<&K7{&3BKPPTF~10_X}%_
zpRUDaZD4E0OYTl<Y+`EQV(m=Mr(*kCY2)A5&f0?S_lw`^(f_Bde^}YyOn?IeSY-Nt
zA4fiD!v9aN|9=hr=N<&059B3x`+0}?g-GyEx43_uDvJN%P*DONGXC^vfGhs=X$ldp
zpJ#!AiGhQOnS~Q@3>X;50Y89ZfaCIil=#DaDgMd9Df#&R5ZQ8fG%@|j?#~SU)3bhm
z5wfwe0u;kc34gaSv9qxOl7xP~2yOqcv9hrLWLp1=jftK0=k5HjHa5WM|7K%gVC4A4
z#=-!gO8jeGW(LNeDq4SOkA;(&{g-|@Sr`CP8GkLu$jbTmx=bAGKXthNQjVF0krSX2
z@E02sJNr-VxWC%iSbv!>0}BKD-^UEF{IXU|9E?8|zy8u5fN=h&yvJW`fPUG3?H7<u
z^|x|>J^*Zzf33?1=;H4-fYQP*{W1Zbng4z50d;@b4@MSFmS4ug&cX5bc`&hYvj5!%
zsLS??jf3f@P}bk(%lYg0*niz~fVZ&yvgb^I-Tbw^U&qJ(Pj#6Y{=TM6tjwIh%$I}V
zAI8V>4|Q1>|2|(PwqMtjiG$&n@i8+p{Ibr>ENs8{0SgnuFaFHJ$qqP?e_K-yz=8X_
zjq@Mo%gM>{_cdi^VEtt*tUqr%|7p+J(Ey;j;0REdB&1ie@H7G3HwXbjn|1)f%%3t0
zg!B@&rgnsY3IHKIdI=FiEgrye<pA8jI7I>Hk%^U6OjwXXkc~l*k%>(ZaK71@`2Oz_
dIzMIYoSY3DoqxMov9bU@{GiFmMCHVw{~xYPpK$;H

literal 0
HcmV?d00001

diff --git a/support/dist-docs-branch-23.06/ovn-trace.8.txt b/support/dist-docs-branch-23.06/ovn-trace.8.txt
new file mode 100644
index 00000000..d18a27d4
--- /dev/null
+++ b/support/dist-docs-branch-23.06/ovn-trace.8.txt
@@ -0,0 +1,570 @@
+ovn-trace(8)                      OVN Manual                      ovn-trace(8)
+
+NAME
+       ovn-trace - Open Virtual Network logical network tracing utility
+
+SYNOPSIS
+       ovn-trace [options] [datapath] microflow
+
+       ovn-trace [options] --detach
+
+DESCRIPTION
+       This utility simulates packet forwarding within an OVN logical network.
+       It can be used to run through ``what-if’’ scenarios: if a packet origi‐
+       nates at a logical port, what will happen to it and where will it ulti‐
+       mately  end  up?  Users  already  familiar  with  the  Open vSwitch of�‐
+       proto/trace command described in ovs-vswitch(8) will find ovn-trace  to
+       be a similar tool for logical networks.
+
+       ovn-trace  works  by reading the Logical_Flow and other tables from the
+       OVN southbound database (see ovn-sb(5)). It simulates a  packet’s  path
+       through  logical  networks  by  repeatedly looking it up in the logical
+       flow table, following the entire tree of possibilities.
+
+       ovn-trace simulates only the OVN logical network. It does not  simulate
+       the  physical  elements  on  which the logical network is layered. This
+       means that, for example, it is  unimportant  how  VMs  are  distributed
+       among  hypervisors,  or  whether  their hypervisors are functioning and
+       reachable, so ovn-trace will yield the same results  regardless.  There
+       is  one  important exception: ovn-northd, the daemon that generates the
+       logical flows that ovn-trace simulates, treats  logical  ports  differ‐
+       ently based on whether they are up or down. Thus, if you see surprising
+       results, ensure that the ports involved in a simulation are up.
+
+       The  simplest way to use ovn-trace is to provide the microflow (and op‐
+       tional datapath) arguments on the command line. In this case, it  simu‐
+       lates the behavior of a single packet and exits. For an alternate usage
+       model, see Daemon Mode below.
+
+       The  optional  datapath  argument specifies the name of a logical data‐
+       path. Acceptable names are the name from the northbound  Logical_Switch
+       or Logical_Router table, the UUID of a record from one of those tables,
+       or  the  UUID  of  a record from the southbound Datapath_Binding table.
+       (The datapath is optional because ovn-trace can figure it out from  the
+       inport that the microflow matches.)
+
+       The  microflow  argument describes the packet whose forwarding is to be
+       simulated, in the syntax of an OVN logical expression, as described  in
+       ovn-sb(5),  to  express  constraints.  The parser understands prerequi‐
+       sites; for example, if the expression refers to ip4.src,  there  is  no
+       need to explicitly state ip4 or eth.type == 0x800.
+
+       For  reasonable  L2 behavior, the microflow should include at least in�‐
+       port and eth.dst, plus eth.src if port security is enabled.  For  exam‐
+       ple:
+
+           inport == "lp11" && eth.src == 00:01:02:03:04:05 && eth.dst == ff:ff:ff:ff:ff:ff
+
+
+       For  reasonable  L3 behavior, microflow should also include ip4.src and
+       ip4.dst (or ip6.src and ip6.dst) and ip.ttl. For example:
+
+           inport == "lp111" && eth.src == f0:00:00:00:01:11 && eth.dst == 00:00:00:00:ff:11
+           && ip4.src == 192.168.11.1 && ip4.dst == 192.168.22.2 && ip.ttl == 64
+
+
+       Here’s an ARP microflow example:
+
+           inport == "lp123"
+           && eth.dst == ff:ff:ff:ff:ff:ff && eth.src == f0:00:00:00:01:11
+           && arp.op == 1 && arp.sha == f0:00:00:00:01:11 && arp.spa == 192.168.1.11
+           && arp.tha == ff:ff:ff:ff:ff:ff && arp.tpa == 192.168.2.22
+
+
+       ovn-trace will reject erroneous  microflow  expressions,  which  beyond
+       syntax  errors  fall into two categories. First, they can be ambiguous.
+       For example, tcp.src == 80 is ambiguous because it does not state  IPv4
+       or  IPv6  as the Ethernet type. ip4 && tcp.src > 1024 is also ambiguous
+       because it does not constrain bits of  tcp.src  to  particular  values.
+       Second, they can be contradictory, e.g. ip4 && ip6.
+
+OUTPUT
+       ovn-trace  supports the three different forms of output, each described
+       in a separate section below. Regardless of the selected output  format,
+       ovn-trace  starts the output with a line that shows the microflow being
+       traced in OpenFlow syntax.
+
+   Detailed Output
+       The detailed form of output is also the default form. This form  groups
+       output  into sections headed up by the ingress or egress pipeline being
+       traversed. Each pipeline lists each table that was visited  (by  number
+       and  name), the ovn-northd source file and line number of the code that
+       added the flow, the match expression and priority of the  logical  flow
+       that was matched, and the actions that were executed.
+
+       The  execution  of  OVN  logical  actions  naturally  forms a ``control
+       stack’’ that resembles that of a program  in  conventional  programming
+       languages  such  as  C or Java. Because the next action that calls into
+       another logical flow table for a lookup is a recursive  construct,  OVN
+       ``programs’’  in  practice  tend to form deep control stacks that, dis‐
+       played in the obvious way using additional indentation for each  level,
+       quickly  use up the horizontal space on all but the widest displays. To
+       make  detailed  output  more  readable,  without  loss  of  generality,
+       ovn-trace  omits indentation for ``tail recursion,’’ that is, when next
+       is the last action in a logical flow, it does not indent details of the
+       next table lookup more deeply. Output still uses indentation when it is
+       needed for clarity.
+
+       OVN ``programs’’ traces also tend to encounter long strings of  logical
+       flows with match expression 1 (which matches every packet) and the sin‐
+       gle action next;. These are uninteresting and merely clutter output, so
+       ovn-trace omits them entirely even from detailed output.
+
+       The  following  excerpt  from detailed ovn-trace output shows a section
+       for a packet traversing the ingress pipeline of  logical  datapath  ls1
+       with  ingress  logical port lp111. The packet matches a logical flow in
+       table 0 (aka ls_in_port_sec_l2) with priority 50 and executes  next(1);
+       to pass to table 1. Tables 1 through 11 are trivial and omitted. In ta‐
+       ble  19 (aka ls_in_l2_lkup), the packet matches a flow with priority 50
+       based on its Ethernet destination address and the flow’s actions output
+       the packet to the lrp11-attachement logical port.
+
+           ingress(dp="ls1", inport="lp111")
+           ---------------------------------
+           0. ls_in_port_sec_l2: inport == "lp111", priority 50
+           next(1);
+           19. ls_in_l2_lkup: eth.dst == 00:00:00:00:ff:11, priority 50
+           outport = "lrp11-attachment";
+           output;
+
+
+   Summary Output
+       Summary output includes the logical pipelines visited by a  packet  and
+       the  logical  actions  executed on it. Compared to the detailed output,
+       however, it removes details of tables and logical flows traversed by  a
+       packet.  It  uses a format closer to that of a programming language and
+       does not attempt to avoid indentation. The summary output equivalent to
+       the above detailed output fragment is:
+
+           ingress(dp="ls1", inport="lp111") {
+           outport = "lrp11-attachment";
+           output;
+           ...
+           };
+
+
+   Minimal Output
+       Minimal output includes only actions that modify packet data  (not  in‐
+       cluding  OVN  registers or metadata such as outport) and output actions
+       that actually deliver a packet  to  a  logical  port  (excluding  patch
+       ports).  The  operands of actions that modify packet data are displayed
+       reduced to constants, e.g. ip4.dst = reg0; might be show as  ip4.dst  =
+       192.168.0.1;  if that was the value actually loaded. This yields output
+       even simpler than the summary format. (Users familiar with Open vSwitch
+       may recognize this as similar in spirit to the datapath actions  listed
+       at the bottom of ofproto/trace output.)
+
+       The  minimal output format reflects the externally seen behavior of the
+       logical networks more than it does the implementation. This makes  this
+       output format the most suitable for use in regression tests, because it
+       is least likely to change when logical flow tables are rearranged with‐
+       out semantic change.
+
+STATEFUL ACTIONS
+       Some  OVN  logical actions use or update state that is not available in
+       the southbound database. ovn-trace handles these actions  as  described
+       below:
+
+              ct_next
+                     By  default  ovn-trace  treats  flows  as ``tracked’’ and
+                     ``established.’’ See the description of the  --ct  option
+                     for a way to override this behavior.
+
+              ct_dnat (without an argument)
+                     Forks the pipeline. In one fork, advances to the next ta‐
+                     ble as if next; were executed. The packet is not changed,
+                     on the assumption that no NAT state was available. In the
+                     other  fork,  the pipeline continues without change after
+                     the ct_dnat action.
+
+              ct_snat (without an argument)
+                     This action distinguishes  between  gateway  routers  and
+                     distributed  routers.  A  gateway  router is defined as a
+                     logical datapath that contains  an  l3gateway  port;  any
+                     other  logical  datapath  is  a  distributed router. On a
+                     gateway router, ct_snat; is treated as a no-op. On a dis‐
+                     tributed router, it is treated the same way as ct_dnat;.
+
+              ct_dnat(ip)
+              ct_snat(ip)
+                   Forks the pipeline. In one fork, sets ip4.dst (or  ip4.src)
+                   to  ip  and  ct.dnat  (or ct.snat) to 1 and advances to the
+                   next table as if next; were executed. In  the  other  fork,
+                   the pipeline continues without change after the ct_dnat (or
+                   ct_snat) action.
+
+              ct_lb;
+              ct_lb(ip[:port]...);
+                   Forks  the pipeline. In one fork, sets ip4.dst (or ip6.dst)
+                   to one of the load-balancer addresses and  the  destination
+                   port to its associated port, if any, and sets ct.dnat to 1.
+                   With one or more arguments, gives preference to the address
+                   specified  on --lb-dst, if any; without arguments, uses the
+                   address and port specified on --lb-dst. In the other  fork,
+                   the  pipeline  continues without change after the ct_lb ac‐
+                   tion.
+
+              ct_commit
+              put_arp
+              put_nd
+                   These actions are treated as no-ops.
+
+DAEMON MODE
+       If ovn-trace is invoked with the --detach option (see  Daemon  Options,
+       below), it runs in the background as a daemon and accepts commands from
+       ovs-appctl  (or  another  JSON-RPC  client) indefinitely. The currently
+       supported commands are described below.
+
+              trace [options] [datapath] microflow
+                     Traces microflow through datapath and  replies  with  the
+                     results of the trace. Accepts the options described under
+                     Trace Options below.
+
+              exit   Causes ovn-trace to gracefully terminate.
+
+OPTIONS
+   Trace Options
+       --detailed
+       --summary
+       --minimal
+            These  options  control  the form and level of detail in ovn-trace
+            output. If more than one of these options is specified, all of the
+            selected forms are output, in the order listed above, each  headed
+            by a banner line. If none of these options is given, --detailed is
+            the  default. See Output, above, for a description of each kind of
+            output.
+
+       --all
+            Selects all three forms of output.
+
+       --ovs[=remote]
+            Makes ovn-trace attempt to obtain and display the  OpenFlow  flows
+            that correspond to each OVN logical flow. To do so, ovn-trace con‐
+            nects  to remote (by default, unix:/br-int.mgmt) over OpenFlow and
+            retrieves the flows. If remote is specified, it must be an  active
+            OpenFlow connection method described in ovsdb(7).
+
+            To  make the best use of the output, it is important to understand
+            the relationship between logical flows and OpenFlow flows. ovn-ar�‐
+            chitecture(7),  under  Architectural  Physical  Life  Cycle  of  a
+            Packet,  describes  this  relationship. Keep in mind the following
+            points:
+
+            •      ovn-trace currently shows all the OpenFlow flows to which a
+                   logical flow corresponds, even though an actual packet  or‐
+                   dinarily matches only one of these.
+
+            •      Some  logical  flows can map to the Open vSwitch ``conjunc‐
+                   tive  match’’  extension  (see  ovs-fields(7)).   Currently
+                   ovn-trace cannot display the flows with conjunction actions
+                   that effectively produce the conj_id match.
+
+            •      Some  logical  flows may not be represented in the OpenFlow
+                   tables on a given hypervisor, if they could not be used  on
+                   that hypervisor.
+
+            •      Some  OpenFlow  flows  do  not correspond to logical flows,
+                   such as OpenFlow flows that map between physical and  logi‐
+                   cal ports. These flows will never show up in a trace.
+
+            •      When  ovn-trace omits uninteresting logical flows from out‐
+                   put, it does not look up the corresponding OpenFlow flows.
+
+       --ct=flags
+            This option sets the ct_state flags that a ct_next logical  action
+            will report. The flags must be a comma- or space-separated list of
+            the following connection tracking flags:
+
+            •      trk:  Include  to  indicate  connection  tracking has taken
+                   place. (This bit is set automatically even if not listed in
+                   flags.
+
+            •      new: Include to indicate a new flow.
+
+            •      est: Include to indicate an established flow.
+
+            •      rel: Include to indicate a related flow.
+
+            •      rpl: Include to indicate a reply flow.
+
+            •      inv: Include to indicate a connection entry in a bad state.
+
+            •      dnat: Include to indicate a packet whose destination IP ad‐
+                   dress has been changed.
+
+            •      snat: Include to indicate a packet whose source IP  address
+                   has been changed.
+
+            The  ct_next action is used to implement the OVN distributed fire‐
+            wall. For testing, useful flag combinations include:
+
+            •      trk,new: A packet in a flow in either direction  through  a
+                   firewall that has not yet been committed (with ct_commit).
+
+            •      trk,est:  A packet in an established flow going out through
+                   a firewall.
+
+            •      trk,rpl: A packet coming in through a firewall in reply  to
+                   an established flow.
+
+            •      trk,inv: An invalid packet in either direction.
+
+            A  packet  might  pass through the connection tracker twice in one
+            trip through OVN: once following egress from a  VM  as  it  passes
+            outward through a firewall, and once preceding ingress to a second
+            VM  as  it passes inward through a firewall. Use multiple --ct op‐
+            tions to specify the flags for multiple ct_next actions.
+
+            When --ct is unspecified, or when there  are  fewer  --ct  options
+            than ct_next actions, the flags default to trk,est.
+
+       --lb-dst=ip[:port]
+            Sets  the  IP  from  VIP pool to use as destination of the packet.
+            --lb-dst is not available in daemon mode.
+
+       --select-id=id
+            Specify the id to be selected by the select action. id must be one
+            of the values listed in the select action. Otherwise, a random  id
+            is  selected  from the list, as if --select-id were not specified.
+            --select-id is not available in daemon mode.
+
+       --friendly-names
+       --no-friendly-names
+            When cloud management systems such as OpenStack are layered on top
+            of OVN, they often use long, human-unfriendly names for ports  and
+            datapaths,  for  example,  ones that include entire UUIDs. They do
+            usually include friendlier names, but the long, hard-to-read names
+            are the ones that appear in matches and actions.  By  default,  or
+            with  --friendly-names,  ovn-trace  substitutes  these  friendlier
+            names for the long names in its output. Use --no-friendly-names to
+            disable this behavior; this option might be useful,  for  example,
+            if a program is going to parse ovn-trace output.
+
+   Daemon Options
+       --pidfile[=pidfile]
+              Causes a file (by default, program.pid) to be created indicating
+              the  PID  of the running process. If the pidfile argument is not
+              specified, or if it does not begin with /, then it is created in
+              .
+
+              If --pidfile is not specified, no pidfile is created.
+
+       --overwrite-pidfile
+              By default, when --pidfile is specified and the  specified  pid‐
+              file already exists and is locked by a running process, the dae‐
+              mon refuses to start. Specify --overwrite-pidfile to cause it to
+              instead overwrite the pidfile.
+
+              When --pidfile is not specified, this option has no effect.
+
+       --detach
+              Runs  this  program  as a background process. The process forks,
+              and in the child it starts a new session,  closes  the  standard
+              file descriptors (which has the side effect of disabling logging
+              to  the  console), and changes its current directory to the root
+              (unless --no-chdir is specified). After the child completes  its
+              initialization, the parent exits.
+
+       --monitor
+              Creates  an  additional  process  to monitor this program. If it
+              dies due to a signal that indicates a programming  error  (SIGA�‐
+              BRT, SIGALRM, SIGBUS, SIGFPE, SIGILL, SIGPIPE, SIGSEGV, SIGXCPU,
+              or SIGXFSZ) then the monitor process starts a new copy of it. If
+              the daemon dies or exits for another reason, the monitor process
+              exits.
+
+              This  option  is  normally used with --detach, but it also func‐
+              tions without it.
+
+       --no-chdir
+              By default, when --detach is specified, the daemon  changes  its
+              current  working  directory  to  the root directory after it de‐
+              taches. Otherwise, invoking the daemon from a carelessly  chosen
+              directory  would  prevent  the administrator from unmounting the
+              file system that holds that directory.
+
+              Specifying --no-chdir suppresses this behavior,  preventing  the
+              daemon  from changing its current working directory. This may be
+              useful for collecting core files, since it is common behavior to
+              write core dumps into the current working directory and the root
+              directory is not a good directory to use.
+
+              This option has no effect when --detach is not specified.
+
+       --no-self-confinement
+              By default this daemon will try to self-confine itself  to  work
+              with  files  under  well-known  directories  determined at build
+              time. It is better to stick with this default behavior  and  not
+              to  use  this  flag  unless some other Access Control is used to
+              confine daemon. Note that in contrast to  other  access  control
+              implementations  that  are  typically enforced from kernel-space
+              (e.g. DAC or MAC), self-confinement is imposed  from  the  user-
+              space daemon itself and hence should not be considered as a full
+              confinement  strategy,  but instead should be viewed as an addi‐
+              tional layer of security.
+
+       --user=user:group
+              Causes this program to run as  a  different  user  specified  in
+              user:group,  thus  dropping  most  of the root privileges. Short
+              forms user and :group are also allowed,  with  current  user  or
+              group  assumed,  respectively.  Only daemons started by the root
+              user accepts this argument.
+
+              On   Linux,   daemons   will   be   granted   CAP_IPC_LOCK   and
+              CAP_NET_BIND_SERVICES  before  dropping root privileges. Daemons
+              that interact with a datapath, such  as  ovs-vswitchd,  will  be
+              granted  three  additional  capabilities,  namely CAP_NET_ADMIN,
+              CAP_NET_BROADCAST and CAP_NET_RAW. The  capability  change  will
+              apply even if the new user is root.
+
+              On Windows, this option is not currently supported. For security
+              reasons,  specifying  this  option will cause the daemon process
+              not to start.
+
+   Logging Options
+       -v[spec]
+       --verbose=[spec]
+            Sets logging levels. Without any spec,  sets  the  log  level  for
+            every  module and destination to dbg. Otherwise, spec is a list of
+            words separated by spaces or commas or colons, up to one from each
+            category below:
+
+            •      A valid module name, as displayed by the vlog/list  command
+                   on ovs-appctl(8), limits the log level change to the speci‐
+                   fied module.
+
+            •      syslog,  console, or file, to limit the log level change to
+                   only to the system log, to the console, or to a  file,  re‐
+                   spectively.  (If  --detach  is specified, the daemon closes
+                   its standard file descriptors, so logging  to  the  console
+                   will have no effect.)
+
+                   On  Windows  platform,  syslog is accepted as a word and is
+                   only useful along with the --syslog-target option (the word
+                   has no effect otherwise).
+
+            •      off, emer, err, warn, info, or  dbg,  to  control  the  log
+                   level.  Messages  of  the  given severity or higher will be
+                   logged, and messages of lower  severity  will  be  filtered
+                   out.  off filters out all messages. See ovs-appctl(8) for a
+                   definition of each log level.
+
+            Case is not significant within spec.
+
+            Regardless of the log levels set for file, logging to a file  will
+            not take place unless --log-file is also specified (see below).
+
+            For compatibility with older versions of OVS, any is accepted as a
+            word but has no effect.
+
+       -v
+       --verbose
+            Sets  the  maximum  logging  verbosity level, equivalent to --ver�‐
+            bose=dbg.
+
+       -vPATTERN:destination:pattern
+       --verbose=PATTERN:destination:pattern
+            Sets the log pattern for destination to pattern. Refer to  ovs-ap�‐
+            pctl(8) for a description of the valid syntax for pattern.
+
+       -vFACILITY:facility
+       --verbose=FACILITY:facility
+            Sets  the RFC5424 facility of the log message. facility can be one
+            of kern, user, mail, daemon, auth, syslog, lpr, news, uucp, clock,
+            ftp, ntp, audit, alert, clock2, local0,  local1,  local2,  local3,
+            local4, local5, local6 or local7. If this option is not specified,
+            daemon  is used as the default for the local system syslog and lo�‐
+            cal0 is used while sending a message to the  target  provided  via
+            the --syslog-target option.
+
+       --log-file[=file]
+            Enables  logging  to a file. If file is specified, then it is used
+            as the exact name for the log file. The default log file name used
+            if file is omitted is /usr/local/var/log/ovn/program.log.
+
+       --syslog-target=host:port
+            Send syslog messages to UDP port on host, in addition to the  sys‐
+            tem  syslog.  The host must be a numerical IP address, not a host‐
+            name.
+
+       --syslog-method=method
+            Specify method as how syslog messages should  be  sent  to  syslog
+            daemon. The following forms are supported:
+
+            •      libc,  to use the libc syslog() function. Downside of using
+                   this options is that libc adds fixed prefix to  every  mes‐
+                   sage  before  it is actually sent to the syslog daemon over
+                   /dev/log UNIX domain socket.
+
+            •      unix:file, to use a UNIX domain socket directly. It is pos‐
+                   sible to specify arbitrary message format with this option.
+                   However, rsyslogd 8.9 and older  versions  use  hard  coded
+                   parser  function anyway that limits UNIX domain socket use.
+                   If you want to use  arbitrary  message  format  with  older
+                   rsyslogd  versions, then use UDP socket to localhost IP ad‐
+                   dress instead.
+
+            •      udp:ip:port, to use a UDP socket. With this  method  it  is
+                   possible  to  use  arbitrary message format also with older
+                   rsyslogd. When sending syslog messages over UDP socket  ex‐
+                   tra precaution needs to be taken into account, for example,
+                   syslog daemon needs to be configured to listen on the spec‐
+                   ified  UDP  port, accidental iptables rules could be inter‐
+                   fering with local syslog traffic and there are  some  secu‐
+                   rity  considerations  that apply to UDP sockets, but do not
+                   apply to UNIX domain sockets.
+
+            •      null, to discard all messages logged to syslog.
+
+            The default is taken from the OVS_SYSLOG_METHOD environment  vari‐
+            able; if it is unset, the default is libc.
+
+   PKI Options
+       PKI  configuration  is  required  to  use SSL for the connection to the
+       database (and the switch, if --ovs is specified).
+
+              -p privkey.pem
+              --private-key=privkey.pem
+                   Specifies a PEM file containing the  private  key  used  as
+                   identity for outgoing SSL connections.
+
+              -c cert.pem
+              --certificate=cert.pem
+                   Specifies  a  PEM file containing a certificate that certi‐
+                   fies the private key specified on -p or --private-key to be
+                   trustworthy. The certificate must be signed by the certifi‐
+                   cate authority (CA) that the peer in SSL  connections  will
+                   use to verify it.
+
+              -C cacert.pem
+              --ca-cert=cacert.pem
+                   Specifies a PEM file containing the CA certificate for ver‐
+                   ifying certificates presented to this program by SSL peers.
+                   (This  may  be  the  same certificate that SSL peers use to
+                   verify the certificate specified on -c or --certificate, or
+                   it may be a different one, depending on the PKI  design  in
+                   use.)
+
+              -C none
+              --ca-cert=none
+                   Disables  verification  of  certificates  presented  by SSL
+                   peers. This introduces a security risk,  because  it  means
+                   that  certificates  cannot be verified to be those of known
+                   trusted hosts.
+
+   Other Options
+       --db database
+              The OVSDB database remote to contact. If the OVN_SB_DB  environ‐
+              ment  variable  is set, its value is used as the default. Other‐
+              wise, the default is unix:/db.sock, but this default is unlikely
+              to be useful outside of single-machine OVN test environments.
+
+              -h
+              --help
+                   Prints a brief help message to the console.
+
+              -V
+              --version
+                   Prints version information to the console.
+
+OVN 23.06.3                        ovn-trace                      ovn-trace(8)
diff --git a/support/dist-docs-branch-23.06/style.css b/support/dist-docs-branch-23.06/style.css
new file mode 100644
index 00000000..8a065186
--- /dev/null
+++ b/support/dist-docs-branch-23.06/style.css
@@ -0,0 +1,25 @@
+div { vertical-align:top; }
+p {
+    vertical-align:baseline;
+}
+a {
+    text-decoration: none;
+    font-weight: 700;
+}
+a:hover {
+    color:#444;
+}
+a:visited {
+    color:#447099;
+}
+a:link {
+    color:#447099;
+}
+
+body {
+    font-family: Arial,Helvetica,sans-serif;
+    font-size: 14px;
+    line-height: 1.5em;
+    color: #444;
+    background-color:#f5f5f5;
+}